@catladder/cli 0.0.0-next-883523ef → 0.0.0-next-d71e41ba

package/dist/packages/pipeline/src/backends/gitlab/gitlabReleaseJobs.d.ts

@@ -1,11 +1,16 @@
 import type { JobImagesPlan } from "../../customImages/jobImagesPlan";
 import type { Config } from "../../types/config";
 export declare const getGitlabReleaseJobs: (config: Config, images: JobImagesPlan) => {
-    "create release": {
+    "\uD83E\uDD8B changeset check"?: {
         stage: string;
         image: string;
         script: string[];
-        after_script: string[];
+        allow_failure: boolean;
+        artifacts: {
+            paths: string[];
+            expose_as: string;
+            when: "always";
+        };
         rules: {
             if?: string;
             changes?: import("../../types/gitlab-ci-yml").Changes;
@@ -17,12 +22,11 @@ export declare const getGitlabReleaseJobs: (config: Config, images: JobImagesPla
             needs?: import("../../types/gitlab-ci-yml").RulesNeeds;
         }[];
     };
-    "\u26A0\uFE0F force create release": {
+    "create release": {
         stage: string;
         image: string;
         script: string[];
         after_script: string[];
-        needs: any[];
         rules: {
             if?: string;
             changes?: import("../../types/gitlab-ci-yml").Changes;
@@ -34,4 +38,22 @@ export declare const getGitlabReleaseJobs: (config: Config, images: JobImagesPla
             needs?: import("../../types/gitlab-ci-yml").RulesNeeds;
         }[];
     };
+    "\u26A0\uFE0F force create release": {
+        rules: {
+            if?: string;
+            changes?: import("../../types/gitlab-ci-yml").Changes;
+            exists?: import("../../types/gitlab-ci-yml").Exists;
+            variables?: import("../../types/gitlab-ci-yml").RulesVariables;
+            when?: import("../../types/gitlab-ci-yml").When;
+            start_in?: string;
+            allow_failure?: import("../../types/gitlab-ci-yml").AllowFailure;
+            needs?: import("../../types/gitlab-ci-yml").RulesNeeds;
+        }[];
+        variables?: Record<string, string>;
+        stage: string;
+        image: string;
+        script: string[];
+        after_script: string[];
+        needs: any[];
+    };
 };

package/dist/packages/pipeline/src/backends/gitlab/gitlabReleaseJobs.js

@@ -44,6 +44,11 @@ const getGitlabReleaseJobs = (config, images) => {
             script: [method.script],
             after_script: [EXPIRED_TOKEN_HELP],
             needs: [],
+            // force semantics of the method's script (e.g. changesets:
+            // release a patch bump even without pending changesets)
+            ...(method.forceReleaseVariables
+                ? { variables: method.forceReleaseVariables }
+                : {}),
             rules: [
                 ...baseReleaseRules,
                 {
@@ -56,6 +61,30 @@ const getGitlabReleaseJobs = (config, images) => {
                 },
             ],
         },
+        // informational MR check of the release method (e.g. the changeset
+        // check): warns via allow_failure, the report lands in the MR
+        // widget as an exposed artifact
+        ...(method.checkScript
+            ? {
+                ["🦋 changeset check"]: {
+                    stage: "test",
+                    image: releaseImage,
+                    script: [method.checkScript],
+                    allow_failure: true,
+                    artifacts: {
+                        paths: ["changeset-report.md"],
+                        expose_as: "changeset report",
+                        // the report must survive the warning exit
+                        when: "always",
+                    },
+                    rules: [
+                        rules_1.RULE_NEVER_ON_AGENT_TRIGGER,
+                        rules_1.RULE_NEVER_ON_SCHEDULE,
+                        rules_1.RULE_IS_MERGE_REQUEST,
+                    ],
+                },
+            }
+            : {}),
     };
 };
 exports.getGitlabReleaseJobs = getGitlabReleaseJobs;

package/dist/packages/pipeline/src/backends/gitlab/gitlabReleaseJobs.js.map

@@ -1 +1 @@
-{"version":3,"file":"gitlabReleaseJobs.js","sourceRoot":"","sources":["../../../../../../../../packages/pipeline/src/backends/gitlab/gitlabReleaseJobs.ts"],"names":[],"mappings":";;;AAAA,uCAMqB;AAErB,2CAAiD;AAIjD,MAAM,kBAAkB,GACtB,gJAAgJ,CAAC;AAEnJ,MAAM,gBAAgB,GAAG;IACvB,oCAA4B;IAC5B,mCAA2B;IAC3B,8BAAsB;CACvB,CAAC;AACK,MAAM,oBAAoB,GAAG,CAAC,MAAc,EAAE,MAAqB,EAAE,EAAE;;IAC5E,MAAM,MAAM,GAAG,IAAA,0BAAgB,EAAC,MAAM,CAAC,CAAC;IACxC,qEAAqE;IACrE,iEAAiE;IACjE,iEAAiE;IACjE,uEAAuE;IACvE,2CAA2C;IAC3C,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,CAAC;QACrC,cAAc,EAAE,MAAM,CAAC,KAAK;KAC7B,CAAC,CAAC,KAAK,CAAC;IACT,OAAO;QACL,CAAC,gBAAgB,CAAC,EAAE;YAClB,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE,YAAY;YACnB,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;YACvB,YAAY,EAAE,CAAC,kBAAkB,CAAC;YAClC,KAAK,EAAE;gBACL,GAAG,gBAAgB;gBACnB;oBACE,EAAE,EAAE,kCAA0B;oBAC9B,IAAI,EAAE,CAAA,MAAA,MAAM,CAAC,QAAQ,0CAAE,IAAI,MAAK,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ;iBACjE;gBACD;oBACE,EAAE,EAAE,oCAA4B;oBAChC,IAAI,EAAE,QAAQ;iBACf;aACqB;SACzB;QACD,CAAC,yBAAyB,CAAC,EAAE;YAC3B,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE,YAAY;YACnB,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;YACvB,YAAY,EAAE,CAAC,kBAAkB,CAAC;YAClC,KAAK,EAAE,EAAE;YACT,KAAK,EAAE;gBACL,GAAG,gBAAgB;gBACnB;oBACE,EAAE,EAAE,kCAA0B;oBAC9B,IAAI,EAAE,QAAQ;iBACf;gBACD;oBACE,EAAE,EAAE,oCAA4B;oBAChC,IAAI,EAAE,QAAQ;iBACf;aACqB;SACzB;KACF,CAAC;AACJ,CAAC,CAAC;AA/CW,QAAA,oBAAoB,wBA+C/B"}
+{"version":3,"file":"gitlabReleaseJobs.js","sourceRoot":"","sources":["../../../../../../../../packages/pipeline/src/backends/gitlab/gitlabReleaseJobs.ts"],"names":[],"mappings":";;;AAAA,uCAOqB;AAErB,2CAAiD;AAIjD,MAAM,kBAAkB,GACtB,gJAAgJ,CAAC;AAEnJ,MAAM,gBAAgB,GAAG;IACvB,oCAA4B;IAC5B,mCAA2B;IAC3B,8BAAsB;CACvB,CAAC;AACK,MAAM,oBAAoB,GAAG,CAAC,MAAc,EAAE,MAAqB,EAAE,EAAE;;IAC5E,MAAM,MAAM,GAAG,IAAA,0BAAgB,EAAC,MAAM,CAAC,CAAC;IACxC,qEAAqE;IACrE,iEAAiE;IACjE,iEAAiE;IACjE,uEAAuE;IACvE,2CAA2C;IAC3C,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,CAAC;QACrC,cAAc,EAAE,MAAM,CAAC,KAAK;KAC7B,CAAC,CAAC,KAAK,CAAC;IACT,OAAO;QACL,CAAC,gBAAgB,CAAC,EAAE;YAClB,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE,YAAY;YACnB,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;YACvB,YAAY,EAAE,CAAC,kBAAkB,CAAC;YAClC,KAAK,EAAE;gBACL,GAAG,gBAAgB;gBACnB;oBACE,EAAE,EAAE,kCAA0B;oBAC9B,IAAI,EAAE,CAAA,MAAA,MAAM,CAAC,QAAQ,0CAAE,IAAI,MAAK,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ;iBACjE;gBACD;oBACE,EAAE,EAAE,oCAA4B;oBAChC,IAAI,EAAE,QAAQ;iBACf;aACqB;SACzB;QACD,CAAC,yBAAyB,CAAC,EAAE;YAC3B,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE,YAAY;YACnB,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;YACvB,YAAY,EAAE,CAAC,kBAAkB,CAAC;YAClC,KAAK,EAAE,EAAE;YACT,2DAA2D;YAC3D,wDAAwD;YACxD,GAAG,CAAC,MAAM,CAAC,qBAAqB;gBAC9B,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,qBAAqB,EAAE;gBAC7C,CAAC,CAAC,EAAE,CAAC;YACP,KAAK,EAAE;gBACL,GAAG,gBAAgB;gBACnB;oBACE,EAAE,EAAE,kCAA0B;oBAC9B,IAAI,EAAE,QAAQ;iBACf;gBACD;oBACE,EAAE,EAAE,oCAA4B;oBAChC,IAAI,EAAE,QAAQ;iBACf;aACqB;SACzB;QACD,mEAAmE;QACnE,8DAA8D;QAC9D,gCAAgC;QAChC,GAAG,CAAC,MAAM,CAAC,WAAW;YACpB,CAAC,CAAC;gBACE,CAAC,oBAAoB,CAAC,EAAE;oBACtB,KAAK,EAAE,MAAM;oBACb,KAAK,EAAE,YAAY;oBACnB,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC;oBAC5B,aAAa,EAAE,IAAI;oBACnB,SAAS,EAAE;wBACT,KAAK,EAAE,CAAC,qBAAqB,CAAC;wBAC9B,SAAS,EAAE,kBAAkB;wBAC7B,2CAA2C;wBAC3C,IAAI,EAAE,QAAiB;qBACxB;oBACD,KAAK,EAAE;wBACL,mCAA2B;wBAC3B,8BAAsB;wBACtB,6BAAqB;qBACC;iBACzB;aACF;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC,CAAC;AA5EW,QAAA,oBAAoB,wBA4E/B"}

package/dist/packages/pipeline/src/release/index.d.ts

@@ -18,6 +18,18 @@ export type ReleaseMethodDefinition = {
      * before releasing.
      */
     script: string;
+    /**
+     * optional MR/PR check script (on the same image): generates an
+     * informational check job in merge-request pipelines (e.g. the
+     * changeset check reporting what merging would release)
+     */
+    checkScript?: string;
+    /**
+     * variables injected into the FORCE release jobs only, letting the
+     * method's script implement force semantics (e.g. changesets: release
+     * a patch bump even without pending changesets)
+     */
+    forceReleaseVariables?: Record<string, string>;
 };
 export declare const RELEASE_METHODS: Record<ReleaseMethod, ReleaseMethodDefinition>;
 export declare const getReleaseMethod: (config: Config) => ReleaseMethodDefinition;

package/dist/packages/pipeline/src/release/index.js

@@ -9,6 +9,8 @@ exports.RELEASE_METHODS = {
     changesets: {
         image: "changesets",
         script: "changesetsRelease",
+        checkScript: "changesetCheck",
+        forceReleaseVariables: { CATLADDER_FORCE_RELEASE: "true" },
     },
 };
 const getReleaseMethod = (config) => { var _a, _b; return exports.RELEASE_METHODS[(_b = (_a = config.releases) === null || _a === void 0 ? void 0 : _a.method) !== null && _b !== void 0 ? _b : "semantic-release"]; };

package/dist/packages/pipeline/src/release/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../packages/pipeline/src/release/index.ts"],"names":[],"mappings":";;;AAuBa,QAAA,eAAe,GAAmD;IAC7E,kBAAkB,EAAE;QAClB,KAAK,EAAE,kBAAkB;QACzB,MAAM,EAAE,iBAAiB;KAC1B;IACD,UAAU,EAAE;QACV,KAAK,EAAE,YAAY;QACnB,MAAM,EAAE,mBAAmB;KAC5B;CACF,CAAC;AAEK,MAAM,gBAAgB,GAAG,CAAC,MAAc,EAA2B,EAAE,eAC1E,OAAA,uBAAe,CAAC,MAAA,MAAA,MAAM,CAAC,QAAQ,0CAAE,MAAM,mCAAI,kBAAkB,CAAC,CAAA,EAAA,CAAC;AADpD,QAAA,gBAAgB,oBACoC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../packages/pipeline/src/release/index.ts"],"names":[],"mappings":";;;AAmCa,QAAA,eAAe,GAAmD;IAC7E,kBAAkB,EAAE;QAClB,KAAK,EAAE,kBAAkB;QACzB,MAAM,EAAE,iBAAiB;KAC1B;IACD,UAAU,EAAE;QACV,KAAK,EAAE,YAAY;QACnB,MAAM,EAAE,mBAAmB;QAC3B,WAAW,EAAE,gBAAgB;QAC7B,qBAAqB,EAAE,EAAE,uBAAuB,EAAE,MAAM,EAAE;KAC3D;CACF,CAAC;AAEK,MAAM,gBAAgB,GAAG,CAAC,MAAc,EAA2B,EAAE,eAC1E,OAAA,uBAAe,CAAC,MAAA,MAAA,MAAM,CAAC,QAAQ,0CAAE,MAAM,mCAAI,kBAAkB,CAAC,CAAA,EAAA,CAAC;AADpD,QAAA,gBAAgB,oBACoC"}

package/dist/packages/pipeline/src/types/github-types.d.ts

@@ -37,6 +37,7 @@ export type GithubJob = {
     env?: Record<string, string>;
     permissions?: Record<string, string>;
     if?: string;
+    "continue-on-error"?: boolean;
     steps: GithubStep[];
 };
 export type GithubWorkflow = {

package/dist/runner-images/changesets/scripts/changesetCheck

@@ -0,0 +1,23 @@
+#!/bin/bash
+set -e
+
+# MR/PR pipelines only: reports which changesets this merge request
+# adds, what is pending and what version merging would release; exits 1
+# (the job runs with allow_failure) when no changeset is added
+
+if [ "$GITHUB_ACTIONS" = "true" ]; then
+  # github container jobs: the workspace volume is owned by the host
+  # runner user while this step runs as the container user, and the
+  # safe.directory entry actions/checkout writes goes to a temporary
+  # HOME that is gone by now — git would refuse the repo ("dubious
+  # ownership")
+  git config --global --add safe.directory "$(pwd)"
+fi
+
+CATCI=".catladder-generated/catci/index.js"
+if [ ! -f "$CATCI" ]; then
+  echo "$CATCI not found — regenerate the pipeline with a current catladder version (catenv)"
+  exit 1
+fi
+
+node "$CATCI" release changeset-check

package/dist/skills/catladder-releases/SKILL.md

@@ -28,7 +28,10 @@ are generated, never hand-edited.
   pipeline (it still no-ops when there is nothing to release).
 
 There is always also a manual **`⚠️ force create release`** job as an
-escape hatch.
+escape hatch. With `method: "changesets"` it has an extra meaning: it
+releases **even when no changesets are pending** (patch bump with a
+generic changelog entry) — the recovery path when a change was merged
+without a changeset and must ship now.
 
 ## `method` — how the version is decided
 
@@ -56,6 +59,31 @@ Add a changeset by creating `.changeset/<name>.md`:
 Add the new export endpoint.
 ```
 
+**When you (an agent) make a user-facing change in a changesets
+project, add a changeset file in the same MR** — bump level `major`
+(breaking) / `minor` (feature) / `patch` (fix), and a one-to-two
+sentence summary written for the changelog reader. Docs/chore-only
+changes need none. The package name in the frontmatter is ignored
+(versions come from git tags); only the bump counts.
+
+### The changeset check (MR/PR pipelines)
+
+Changesets projects get a **`🦋 changeset check`** job in every
+merge-request pipeline. It reports what merging would do — the
+changesets this MR adds, everything pending, and the version the next
+release would get (with a changelog preview) — and **warns without
+blocking** (`allow_failure`) when the MR adds no changeset:
+
+- **GitLab**: report in the job log and as an exposed artifact
+  (`changeset-report.md`) in the MR widget. If the project makes
+  `GL_TOKEN` available to MR pipelines it also maintains a sticky MR
+  comment (opt-in — an api-scope token in MR pipelines is a security
+  trade-off).
+- **GitHub**: maintains a sticky PR comment via the workflow token.
+
+A yellow changeset-check job on an MR is a prompt to ask: is this
+change user-facing? If yes, add a changeset; if not, ignore it.
+
 ## The security-audit gate
 
 **Both methods gate on a dependency security audit before releasing.**
@@ -69,7 +97,8 @@ the `security` commands in the `catladder-cli` reference.
 
 - Fails immediately on the audit → handle the security-audit gate above.
 - `changesets` released nothing → no `.changeset/*.md` files were
-  pending.
+  pending. To ship anyway, run `⚠️ force create release` (patch bump),
+  or merge an MR adding a changeset describing the accumulated work.
 - Wrong version bump → check commit types (semantic-release) or the bump
   levels in the changeset files (changesets).
 - Inspect the job with `yarn catladder project ci job-log` (see the