@catladder/cli 0.0.0-next-e9e5af68 → 0.0.0-next-1c65899f

package/dist/cli/src/release/changesetsReleaseJob.js

@@ -1,8 +1,5 @@
 "use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
+Object.defineProperty(exports, "__esModule", { value: true });
 exports.changesetsReleaseJob = exports.dispatchTaggedReleaseWorkflow = void 0;
 /**
  * the changesets release CI job (run by catci via the
@@ -26,15 +23,13 @@ const CHANGELOG_FILE = "CHANGELOG.md";
  */
 const GITHUB_TAGGED_RELEASE_WORKFLOW = "catladder-release.yml";
 const git = async (...args) => {
-  const {
-    stdout
-  } = await execFile("git", args);
-  return stdout.trim();
+    const { stdout } = await execFile("git", args);
+    return stdout.trim();
 };
 const readPendingChangesets = async () => {
-  const entries = await (0, promises_1.readdir)(CHANGESET_DIR).catch(() => []);
-  const files = entries.filter(file => file.endsWith(".md") && file.toLowerCase() !== "readme.md");
-  return Promise.all(files.map(async file => (0, changesets_1.parseChangesetFile)(file, await (0, promises_1.readFile)((0, path_1.join)(CHANGESET_DIR, file), "utf-8"))));
+    const entries = await (0, promises_1.readdir)(CHANGESET_DIR).catch(() => []);
+    const files = entries.filter((file) => file.endsWith(".md") && file.toLowerCase() !== "readme.md");
+    return Promise.all(files.map(async (file) => (0, changesets_1.parseChangesetFile)(file, await (0, promises_1.readFile)((0, path_1.join)(CHANGESET_DIR, file), "utf-8"))));
 };
 /**
  * CI checkouts are usually shallow and tagless (gitlab clones with
@@ -43,40 +38,46 @@ const readPendingChangesets = async () => {
  * FIRST release version. Deepen and fetch tags before deriving.
  */
 const ensureReleaseHistory = async () => {
-  const shallow = await git("rev-parse", "--is-shallow-repository").catch(() => "false");
-  try {
-    if (shallow === "true") {
-      await git("fetch", "--quiet", "--unshallow", "--tags", "origin");
-    } else {
-      await git("fetch", "--quiet", "--tags", "origin");
+    const shallow = await git("rev-parse", "--is-shallow-repository").catch(() => "false");
+    try {
+        if (shallow === "true") {
+            await git("fetch", "--quiet", "--unshallow", "--tags", "origin");
+        }
+        else {
+            await git("fetch", "--quiet", "--tags", "origin");
+        }
+    }
+    catch (e) {
+        console.warn(`could not fetch tags from origin (${e}) — version derivation may be wrong on a shallow clone`);
     }
-  } catch (e) {
-    console.warn(`could not fetch tags from origin (${e}) — version derivation may be wrong on a shallow clone`);
-  }
 };
 const getLastReleaseTag = async () => {
-  try {
-    // the nearest v* tag in the history of HEAD — on hotfix branches
-    // this is deliberately the branch's own release line, not the
-    // globally highest version
-    return await git("describe", "--tags", "--abbrev=0", "--match", "v[0-9]*");
-  } catch (_a) {
-    return null;
-  }
+    try {
+        // the nearest v* tag in the history of HEAD — on hotfix branches
+        // this is deliberately the branch's own release line, not the
+        // globally highest version
+        return await git("describe", "--tags", "--abbrev=0", "--match", "v[0-9]*");
+    }
+    catch (_a) {
+        return null;
+    }
 };
 const ensureGitIdentity = async () => {
-  const email = await git("config", "user.email").catch(() => "");
-  if (email !== "") return;
-  const onGithub = process.env.GITHUB_ACTIONS === "true";
-  await git("config", "user.name", onGithub ? "github-actions[bot]" : "catladder");
-  await git("config", "user.email", onGithub ? "41898282+github-actions[bot]@users.noreply.github.com" : "catladder-release@panter.ch");
+    const email = await git("config", "user.email").catch(() => "");
+    if (email !== "")
+        return;
+    const onGithub = process.env.GITHUB_ACTIONS === "true";
+    await git("config", "user.name", onGithub ? "github-actions[bot]" : "catladder");
+    await git("config", "user.email", onGithub
+        ? "41898282+github-actions[bot]@users.noreply.github.com"
+        : "catladder-release@panter.ch");
 };
-const requireEnv = name => {
-  const value = process.env[name];
-  if (!value) {
-    throw new Error(`${name} is not set — cannot push the release`);
-  }
-  return value;
+const requireEnv = (name) => {
+    const value = process.env[name];
+    if (!value) {
+        throw new Error(`${name} is not set — cannot push the release`);
+    }
+    return value;
 };
 /**
  * pushes the release commit and tag.
@@ -86,21 +87,21 @@ const requireEnv = name => {
  * - github: actions/checkout persists the job token credentials, so a
  *   plain push to origin works (`permissions: contents: write`)
  */
-const pushCommitAndTag = async tag => {
-  // --atomic: all refs or none — a rejected tag must not leave the
-  // release commit half-pushed (observed when a stale local view
-  // rederived an existing version)
-  if (process.env.GITHUB_ACTIONS === "true") {
-    const branch = requireEnv("GITHUB_REF_NAME");
-    await git("push", "--atomic", "origin", `HEAD:refs/heads/${branch}`, tag);
-    return;
-  }
-  const token = requireEnv("GL_TOKEN");
-  const host = requireEnv("CI_SERVER_HOST");
-  const projectPath = requireEnv("CI_PROJECT_PATH");
-  const branch = requireEnv("CI_COMMIT_BRANCH");
-  const remote = `https://oauth2:${token}@${host}/${projectPath}.git`;
-  await git("push", "--atomic", remote, `HEAD:refs/heads/${branch}`, tag);
+const pushCommitAndTag = async (tag) => {
+    // --atomic: all refs or none — a rejected tag must not leave the
+    // release commit half-pushed (observed when a stale local view
+    // rederived an existing version)
+    if (process.env.GITHUB_ACTIONS === "true") {
+        const branch = requireEnv("GITHUB_REF_NAME");
+        await git("push", "--atomic", "origin", `HEAD:refs/heads/${branch}`, tag);
+        return;
+    }
+    const token = requireEnv("GL_TOKEN");
+    const host = requireEnv("CI_SERVER_HOST");
+    const projectPath = requireEnv("CI_PROJECT_PATH");
+    const branch = requireEnv("CI_COMMIT_BRANCH");
+    const remote = `https://oauth2:${token}@${host}/${projectPath}.git`;
+    await git("push", "--atomic", remote, `HEAD:refs/heads/${branch}`, tag);
 };
 /**
  * tags pushed with the default GITHUB_TOKEN do not trigger `on: push:
@@ -109,52 +110,51 @@ const pushCommitAndTag = async tag => {
  * (`permissions: actions: write`; workflow_dispatch created BY the
  * token does run)
  */
-const dispatchTaggedReleaseWorkflow = async tag => {
-  var _a;
-  const apiUrl = (_a = process.env.GITHUB_API_URL) !== null && _a !== void 0 ? _a : "https://api.github.com";
-  const repository = requireEnv("GITHUB_REPOSITORY");
-  const token = requireEnv("GITHUB_TOKEN");
-  const response = await fetch(`${apiUrl}/repos/${repository}/actions/workflows/${GITHUB_TAGGED_RELEASE_WORKFLOW}/dispatches`, {
-    method: "POST",
-    headers: {
-      authorization: `Bearer ${token}`,
-      accept: "application/vnd.github+json"
-    },
-    body: JSON.stringify({
-      ref: tag
-    })
-  });
-  if (!response.ok) {
-    throw new Error(`dispatching ${GITHUB_TAGGED_RELEASE_WORKFLOW} for ${tag} failed: ${response.status} ${await response.text()}`);
-  }
-  console.log(`dispatched ${GITHUB_TAGGED_RELEASE_WORKFLOW} for ${tag}`);
+const dispatchTaggedReleaseWorkflow = async (tag) => {
+    var _a;
+    const apiUrl = (_a = process.env.GITHUB_API_URL) !== null && _a !== void 0 ? _a : "https://api.github.com";
+    const repository = requireEnv("GITHUB_REPOSITORY");
+    const token = requireEnv("GITHUB_TOKEN");
+    const response = await fetch(`${apiUrl}/repos/${repository}/actions/workflows/${GITHUB_TAGGED_RELEASE_WORKFLOW}/dispatches`, {
+        method: "POST",
+        headers: {
+            authorization: `Bearer ${token}`,
+            accept: "application/vnd.github+json",
+        },
+        body: JSON.stringify({ ref: tag }),
+    });
+    if (!response.ok) {
+        throw new Error(`dispatching ${GITHUB_TAGGED_RELEASE_WORKFLOW} for ${tag} failed: ${response.status} ${await response.text()}`);
+    }
+    console.log(`dispatched ${GITHUB_TAGGED_RELEASE_WORKFLOW} for ${tag}`);
 };
 exports.dispatchTaggedReleaseWorkflow = dispatchTaggedReleaseWorkflow;
 const changesetsReleaseJob = async () => {
-  const changesets = await readPendingChangesets();
-  if (changesets.length === 0) {
-    console.log(`no changesets found in ${CHANGESET_DIR}/ — nothing to release`);
-    console.log("add one with `yarn changeset` (or write .changeset/<name>.md by hand) and merge it to release");
-    return;
-  }
-  await ensureReleaseHistory();
-  const lastTag = await getLastReleaseTag();
-  const version = (0, changesets_1.getNextVersion)(lastTag, (0, changesets_1.maxBump)(changesets.map(c => c.bump)));
-  const tag = `v${version}`;
-  console.log(`releasing ${tag} (${lastTag !== null && lastTag !== void 0 ? lastTag : "first release"} + ${changesets.length} changeset(s))`);
-  const entries = (0, changesets_1.renderChangelogEntries)(changesets);
-  const existingChangelog = await (0, promises_1.readFile)(CHANGELOG_FILE, "utf-8").catch(() => null);
-  const date = new Date().toISOString().slice(0, 10);
-  await (0, promises_1.writeFile)(CHANGELOG_FILE, (0, changesets_1.prependToChangelog)(existingChangelog, version, date, entries));
-  await Promise.all(changesets.map(changeset => (0, promises_1.rm)((0, path_1.join)(CHANGESET_DIR, changeset.fileName))));
-  await ensureGitIdentity();
-  await git("add", CHANGELOG_FILE, CHANGESET_DIR);
-  await git("commit", "-m", `chore(release): ${version}\n\n${entries}`);
-  await git("tag", tag);
-  await pushCommitAndTag(tag);
-  console.log(`released ${tag}`);
-  if (process.env.GITHUB_ACTIONS === "true") {
-    await (0, exports.dispatchTaggedReleaseWorkflow)(tag);
-  }
+    const changesets = await readPendingChangesets();
+    if (changesets.length === 0) {
+        console.log(`no changesets found in ${CHANGESET_DIR}/ — nothing to release`);
+        console.log("add one with `yarn changeset` (or write .changeset/<name>.md by hand) and merge it to release");
+        return;
+    }
+    await ensureReleaseHistory();
+    const lastTag = await getLastReleaseTag();
+    const version = (0, changesets_1.getNextVersion)(lastTag, (0, changesets_1.maxBump)(changesets.map((c) => c.bump)));
+    const tag = `v${version}`;
+    console.log(`releasing ${tag} (${lastTag !== null && lastTag !== void 0 ? lastTag : "first release"} + ${changesets.length} changeset(s))`);
+    const entries = (0, changesets_1.renderChangelogEntries)(changesets);
+    const existingChangelog = await (0, promises_1.readFile)(CHANGELOG_FILE, "utf-8").catch(() => null);
+    const date = new Date().toISOString().slice(0, 10);
+    await (0, promises_1.writeFile)(CHANGELOG_FILE, (0, changesets_1.prependToChangelog)(existingChangelog, version, date, entries));
+    await Promise.all(changesets.map((changeset) => (0, promises_1.rm)((0, path_1.join)(CHANGESET_DIR, changeset.fileName))));
+    await ensureGitIdentity();
+    await git("add", CHANGELOG_FILE, CHANGESET_DIR);
+    await git("commit", "-m", `chore(release): ${version}\n\n${entries}`);
+    await git("tag", tag);
+    await pushCommitAndTag(tag);
+    console.log(`released ${tag}`);
+    if (process.env.GITHUB_ACTIONS === "true") {
+        await (0, exports.dispatchTaggedReleaseWorkflow)(tag);
+    }
 };
-exports.changesetsReleaseJob = changesetsReleaseJob;
+exports.changesetsReleaseJob = changesetsReleaseJob;
+//# sourceMappingURL=changesetsReleaseJob.js.map

package/dist/cli/src/scripts/generateCliSkillReference.d.ts

@@ -1 +1 @@
-export declare const renderCliReference: () => string;
+export declare const renderCliReference: () => string;

package/dist/cli/src/scripts/generateCliSkillReference.js

@@ -1,39 +1,28 @@
 "use strict";
-
-var __createBinding = this && this.__createBinding || (Object.create ? function (o, m, k, k2) {
-  if (k2 === undefined) k2 = k;
-  var desc = Object.getOwnPropertyDescriptor(m, k);
-  if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-    desc = {
-      enumerable: true,
-      get: function () {
-        return m[k];
-      }
-    };
-  }
-  Object.defineProperty(o, k2, desc);
-} : function (o, m, k, k2) {
-  if (k2 === undefined) k2 = k;
-  o[k2] = m[k];
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
 });
-var __setModuleDefault = this && this.__setModuleDefault || (Object.create ? function (o, v) {
-  Object.defineProperty(o, "default", {
-    enumerable: true,
-    value: v
-  });
-} : function (o, v) {
-  o["default"] = v;
-});
-var __importStar = this && this.__importStar || function (mod) {
-  if (mod && mod.__esModule) return mod;
-  var result = {};
-  if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-  __setModuleDefault(result, mod);
-  return result;
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
 };
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
+Object.defineProperty(exports, "__esModule", { value: true });
 exports.renderCliReference = void 0;
 const fs_1 = require("fs");
 const path_1 = require("path");
@@ -45,43 +34,77 @@ const commands = __importStar(require("../commands"));
  * (`build:skill-cli-reference`) and writes into the repository's
  * `skills/` directory — commit the result.
  */
-const kebab = name => name.replace(/([A-Z])/g, "-$1").toLowerCase();
-const cleanMessage = message => message.replace(/\s*🤔\s*$/, "").trim();
+const kebab = (name) => name.replace(/([A-Z])/g, "-$1").toLowerCase();
+const cleanMessage = (message) => message.replace(/\s*🤔\s*$/, "").trim();
 const renderInput = ([name, def]) => {
-  const description = cleanMessage(def.message);
-  const details = [def.required ? "required" : undefined, "default" in def && def.default !== undefined ? `default: ${JSON.stringify(def.default)}` : undefined].filter(Boolean).join(", ");
-  const usage = def.positional ? `\`${name}\` (positional)` : def.type === "boolean" ? `\`--${kebab(name)}\`` : `\`--${kebab(name)} <value>\``;
-  return `- ${usage}: ${description}${details ? ` (${details})` : ""}`;
+    const description = cleanMessage(def.message);
+    const details = [
+        def.required ? "required" : undefined,
+        "default" in def && def.default !== undefined
+            ? `default: ${JSON.stringify(def.default)}`
+            : undefined,
+    ]
+        .filter(Boolean)
+        .join(", ");
+    const usage = def.positional
+        ? `\`${name}\` (positional)`
+        : def.type === "boolean"
+            ? `\`--${kebab(name)}\``
+            : `\`--${kebab(name)} <value>\``;
+    return `- ${usage}: ${description}${details ? ` (${details})` : ""}`;
 };
-const renderCommand = def => {
-  const positionals = Object.entries(def.inputs).filter(([, input]) => input.positional).map(([name]) => ` [${name}]`).join("");
-  const inputs = Object.entries(def.inputs);
-  return [`## \`catladder ${def.name}${positionals}\``, "", def.description, ...(inputs.length > 0 ? ["", ...inputs.map(renderInput)] : [])].join("\n");
+const renderCommand = (def) => {
+    const positionals = Object.entries(def.inputs)
+        .filter(([, input]) => input.positional)
+        .map(([name]) => ` [${name}]`)
+        .join("");
+    const inputs = Object.entries(def.inputs);
+    return [
+        `## \`catladder ${def.name}${positionals}\``,
+        "",
+        def.description,
+        ...(inputs.length > 0 ? ["", ...inputs.map(renderInput)] : []),
+    ].join("\n");
 };
-const isCommandDef = value => typeof value === "object" && value !== null && "name" in value && "execute" in value;
+const isCommandDef = (value) => typeof value === "object" &&
+    value !== null &&
+    "name" in value &&
+    "execute" in value;
 const renderCliReference = () => {
-  const defs = Object.values(commands).filter(isCommandDef).sort((a, b) => a.name.localeCompare(b.name));
-  return ["# catladder CLI command reference", "", "<!-- rendered from the command definitions by", "     cli/src/scripts/generateCliSkillReference.ts — do not edit -->", "", "All commands run non-interactively as `yarn catladder <command> ...`;", "see SKILL.md for how to pass inputs.", "", defs.map(renderCommand).join("\n\n"), ""].join("\n");
+    const defs = Object.values(commands)
+        .filter(isCommandDef)
+        .sort((a, b) => a.name.localeCompare(b.name));
+    return [
+        "# catladder CLI command reference",
+        "",
+        "<!-- rendered from the command definitions by",
+        "     cli/src/scripts/generateCliSkillReference.ts — do not edit -->",
+        "",
+        "All commands run non-interactively as `yarn catladder <command> ...`;",
+        "see SKILL.md for how to pass inputs.",
+        "",
+        defs.map(renderCommand).join("\n\n"),
+        "",
+    ].join("\n");
 };
 exports.renderCliReference = renderCliReference;
 // executed by the cli build via tsx (node itself cannot require the
 // ESM-only deps of the command modules on older versions)
 const main = () => {
-  const repoRootCandidates = [(0, path_1.join)(__dirname, "../../.."),
-  // source: cli/src/scripts
-  (0, path_1.join)(__dirname, "../../../../..") // compiled: cli/dist/cli/src/scripts
-  ];
-  const repoRoot = repoRootCandidates.find(candidate => (0, fs_1.existsSync)((0, path_1.join)(candidate, "skills")));
-  if (!repoRoot) {
-    throw new Error("skills directory not found next to the cli workspace");
-  }
-  const target = (0, path_1.join)(repoRoot, "skills", "catladder-cli", "references", "commands.md");
-  (0, fs_1.mkdirSync)((0, path_1.join)(target, ".."), {
-    recursive: true
-  });
-  (0, fs_1.writeFileSync)(target, (0, exports.renderCliReference)(), "utf-8");
-  console.log(`wrote ${target}`);
+    const repoRootCandidates = [
+        (0, path_1.join)(__dirname, "../../.."), // source: cli/src/scripts
+        (0, path_1.join)(__dirname, "../../../../.."), // compiled: cli/dist/cli/src/scripts
+    ];
+    const repoRoot = repoRootCandidates.find((candidate) => (0, fs_1.existsSync)((0, path_1.join)(candidate, "skills")));
+    if (!repoRoot) {
+        throw new Error("skills directory not found next to the cli workspace");
+    }
+    const target = (0, path_1.join)(repoRoot, "skills", "catladder-cli", "references", "commands.md");
+    (0, fs_1.mkdirSync)((0, path_1.join)(target, ".."), { recursive: true });
+    (0, fs_1.writeFileSync)(target, (0, exports.renderCliReference)(), "utf-8");
+    console.log(`wrote ${target}`);
 };
 if (require.main === module) {
-  main();
-}
+    main();
+}
+//# sourceMappingURL=generateCliSkillReference.js.map

package/dist/cli/src/security/auditDocument.d.ts

@@ -1,19 +1,19 @@
 export declare function makeTemplate(): string;
 export type SecurityEvaluation = {
-  topics: {
-    description: string;
-    responsibles: string[];
-    note: string;
-    isUnknown: boolean;
-    isAnswered: boolean;
-    isSecured: boolean;
-  }[];
-  score: {
-    rating: number;
-    totalTopics: number;
-    answeredTopics: number;
-    securedTopics: number;
-    unknownTopics: number;
-  };
+    topics: {
+        description: string;
+        responsibles: string[];
+        note: string;
+        isUnknown: boolean;
+        isAnswered: boolean;
+        isSecured: boolean;
+    }[];
+    score: {
+        rating: number;
+        totalTopics: number;
+        answeredTopics: number;
+        securedTopics: number;
+        unknownTopics: number;
+    };
 };
-export declare function evaluateDocument(document: string): SecurityEvaluation;
+export declare function evaluateDocument(document: string): SecurityEvaluation;

package/dist/cli/src/security/auditDocument.js

@@ -1,13 +1,8 @@
 "use strict";
-
-var __importDefault = this && this.__importDefault || function (mod) {
-  return mod && mod.__esModule ? mod : {
-    "default": mod
-  };
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
 };
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
+Object.defineProperty(exports, "__esModule", { value: true });
 exports.evaluateDocument = exports.makeTemplate = void 0;
 const topics_json_1 = __importDefault(require("./topics.json"));
 const allTopics = topics_json_1.default;
@@ -15,26 +10,37 @@ const checkYes = "✅";
 const checkNo = "❌";
 const checkPlaceholder = `${checkYes}/${checkNo}`;
 const responsiblePlaceholder = "@...";
-const rows = [["Responsible", checkPlaceholder, "Description", "Note", "More Information"]].concat(allTopics.map(t => [Array(t.responsibles).fill(responsiblePlaceholder).join(", "), checkPlaceholder, t.description, "", t.more]));
+const rows = [
+    ["Responsible", checkPlaceholder, "Description", "Note", "More Information"],
+].concat(allTopics.map((t) => [
+    Array(t.responsibles).fill(responsiblePlaceholder).join(", "),
+    checkPlaceholder,
+    t.description,
+    "",
+    t.more,
+]));
 function makeTable(rows) {
-  const colWidths = calculateColumnWidths(rows);
-  return `
+    const colWidths = calculateColumnWidths(rows);
+    return `
 ${makeRow(rows[0], colWidths, " ")}
 ${makeRow(rows[0].map(() => ""), colWidths, "-")}
-${rows.slice(1).map(row => makeRow(row, colWidths, " ")).join("\n")}
+${rows
+        .slice(1)
+        .map((row) => makeRow(row, colWidths, " "))
+        .join("\n")}
 `;
 }
 function calculateColumnWidths(rows) {
-  const columnCount = rows[0].length;
-  return Array.from({
-    length: columnCount
-  }, (_, i) => i).map(columnIndex => Math.max(...rows.map(row => row[columnIndex].length)));
+    const columnCount = rows[0].length;
+    return Array.from({ length: columnCount }, (_, i) => i).map((columnIndex) => Math.max(...rows.map((row) => row[columnIndex].length)));
 }
 function makeRow(row, colWidths, fillString) {
-  return `| ${row.map((cell, i) => cell.padEnd(colWidths[i], fillString)).join(" | ")} |`;
+    return `| ${row
+        .map((cell, i) => cell.padEnd(colWidths[i], fillString))
+        .join(" | ")} |`;
 }
 function makeTemplate() {
-  return `
+    return `
 # Security Audit Report
 
 A security audit report document is a comprehensive assessment of an application's security posture, containing security topics that auditors can mark to indicate the state of various security aspects.
@@ -57,42 +63,47 @@ ${makeTable(rows)}
 }
 exports.makeTemplate = makeTemplate;
 function evaluateDocument(document) {
-  var _a, _b;
-  const rawRows = (_b = (_a = document.match(/^\s*\|.*?\|\s*$/gm)) === null || _a === void 0 ? void 0 : _a.map(row => row.trim())) !== null && _b !== void 0 ? _b : [];
-  const matchedRows = rawRows.map(row => row.split("|").map(col => col.trim())).slice(2);
-  const knownTopics = new Set(allTopics.map(t => t.description));
-  const topics = matchedRows.map(col => {
-    const responsibles = col[1].split(", ");
-    const answer = col[2];
-    const description = col[3];
-    const note = col[4];
-    const isUnknown = !knownTopics.has(description);
-    const isAnswered = !isUnknown && !answer.includes(checkPlaceholder) && !responsibles.some(responsible => responsible.includes(responsiblePlaceholder));
-    const isSecured = !isUnknown && isAnswered && answer.includes(checkYes);
+    var _a, _b;
+    const rawRows = (_b = (_a = document.match(/^\s*\|.*?\|\s*$/gm)) === null || _a === void 0 ? void 0 : _a.map((row) => row.trim())) !== null && _b !== void 0 ? _b : [];
+    const matchedRows = rawRows
+        .map((row) => row.split("|").map((col) => col.trim()))
+        .slice(2);
+    const knownTopics = new Set(allTopics.map((t) => t.description));
+    const topics = matchedRows.map((col) => {
+        const responsibles = col[1].split(", ");
+        const answer = col[2];
+        const description = col[3];
+        const note = col[4];
+        const isUnknown = !knownTopics.has(description);
+        const isAnswered = !isUnknown &&
+            !answer.includes(checkPlaceholder) &&
+            !responsibles.some((responsible) => responsible.includes(responsiblePlaceholder));
+        const isSecured = !isUnknown && isAnswered && answer.includes(checkYes);
+        return {
+            responsibles,
+            answer,
+            description,
+            note,
+            isUnknown,
+            isAnswered,
+            isSecured,
+        };
+    });
+    const totalTopics = allTopics.length;
+    const answeredTopics = topics.filter((t) => t.isAnswered).length;
+    const securedTopics = topics.filter((t) => t.isSecured).length;
+    const unknownTopics = topics.filter((t) => t.isUnknown).length;
+    const rating = Math.round((securedTopics / totalTopics) * 100);
     return {
-      responsibles,
-      answer,
-      description,
-      note,
-      isUnknown,
-      isAnswered,
-      isSecured
+        topics,
+        score: {
+            rating,
+            totalTopics,
+            answeredTopics,
+            securedTopics,
+            unknownTopics,
+        },
     };
-  });
-  const totalTopics = allTopics.length;
-  const answeredTopics = topics.filter(t => t.isAnswered).length;
-  const securedTopics = topics.filter(t => t.isSecured).length;
-  const unknownTopics = topics.filter(t => t.isUnknown).length;
-  const rating = Math.round(securedTopics / totalTopics * 100);
-  return {
-    topics,
-    score: {
-      rating,
-      totalTopics,
-      answeredTopics,
-      securedTopics,
-      unknownTopics
-    }
-  };
 }
-exports.evaluateDocument = evaluateDocument;
+exports.evaluateDocument = evaluateDocument;
+//# sourceMappingURL=auditDocument.js.map

package/dist/cli/src/security/createSecurityAuditMergeRequest.d.ts

@@ -1,14 +1,9 @@
 import type { Gitlab } from "@gitbeaker/core";
 import { Err } from "ts-results-es";
 export declare const SECURITY_AUDIT_FILE_NAME: "SECURITY.md";
-export declare function createSecurityAuditMergeRequest({
-  projectId,
-  mainBranch,
-  userId,
-  api
-}: {
-  projectId: string;
-  mainBranch: string;
-  userId: number;
-  api: Gitlab;
-}): Promise<Err<string> | import("ts-results-es").Ok<import("@gitbeaker/core").ExpandedMergeRequestSchema>>;
+export declare function createSecurityAuditMergeRequest({ projectId, mainBranch, userId, api, }: {
+    projectId: string;
+    mainBranch: string;
+    userId: number;
+    api: Gitlab;
+}): Promise<Err<string> | import("ts-results-es").Ok<import("@gitbeaker/core").ExpandedMergeRequestSchema>>;