@catladder/cli 0.0.0-next-e9e5af68 → 0.0.0-next-aea5d3ad

package/dist/cli/src/apps/cli/commands/project/commandConfigSecrets.js

@@ -1,8 +1,5 @@
 "use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
+Object.defineProperty(exports, "__esModule", { value: true });
 exports.projectConfigSecrets = void 0;
 const pipeline_1 = require("../../../../../../pipeline/src/index.js");
 const common_tags_1 = require("common-tags");
@@ -14,99 +11,119 @@ const github_1 = require("../../../../utils/github");
 const gitlab_1 = require("../../../../utils/gitlab");
 const promise_1 = require("../../../../utils/promise");
 /* for convenience, parse json objects. that makes it easier to edit secrets that are object */
-const resolveJson = v => Object.fromEntries(Object.entries(v).map(([componentName, envs]) => {
-  return [componentName, Object.fromEntries(Object.entries(envs).map(([env, secrets]) => [env, Object.fromEntries(Object.entries(secrets).map(([key, value]) => {
-    try {
-      return [key, JSON.parse(value)];
-    } catch (e) {
-      return [key, value];
-    }
-  }))]))];
+const resolveJson = (v) => Object.fromEntries(Object.entries(v).map(([componentName, envs]) => {
+    return [
+        componentName,
+        Object.fromEntries(Object.entries(envs).map(([env, secrets]) => [
+            env,
+            Object.fromEntries(Object.entries(secrets).map(([key, value]) => {
+                try {
+                    return [key, JSON.parse(value)];
+                }
+                catch (e) {
+                    return [key, value];
+                }
+            })),
+        ])),
+    ];
 }));
 const getSecretEnvVarKeysToConfigure = async (env, componentName) => {
-  const {
-    secretEnvVarKeys,
-    jobOnlyVars
-  } = await (0, getProjectConfig_1.getEnvironment)(env, componentName);
-  return [...jobOnlyVars.build.secretEnvVarKeys, ...jobOnlyVars.deploy.secretEnvVarKeys, ...secretEnvVarKeys].filter(k => !k.hidden).map(k => k.key);
+    const { secretEnvVarKeys, jobOnlyVars } = await (0, getProjectConfig_1.getEnvironment)(env, componentName);
+    return [
+        ...jobOnlyVars.build.secretEnvVarKeys,
+        ...jobOnlyVars.deploy.secretEnvVarKeys,
+        ...secretEnvVarKeys,
+    ]
+        .filter((k) => !k.hidden)
+        .map((k) => k.key);
 };
 const getEnvVarsToEdit = async (instance, env, componentName) => {
-  const secretEnvVarKeys = await getSecretEnvVarKeysToConfigure(env, componentName);
-  const normalEnvVars = await (0, getProjectConfig_1.getEnvVarsResolved)(instance, env, componentName);
-  const jobOnlyEnvVars = await (0, getProjectConfig_1.getJobOnlyEnvVarsResolved)(instance, env, componentName);
-  const allEnvVars = {
-    ...normalEnvVars,
-    ...jobOnlyEnvVars
-  };
-  return Object.fromEntries(secretEnvVarKeys.map(key => {
-    const value = allEnvVars[key];
-    // due to some quirky way to resolve these variables, unset variables have the $CL_ prefix, so we remove thouse here
-    const variableIsNotSet = value === "$" + (0, pipeline_1.getSecretVarName)(env, componentName, key);
-    return [key, variableIsNotSet ? "🚨 FILL ME" : value];
-  }));
+    const secretEnvVarKeys = await getSecretEnvVarKeysToConfigure(env, componentName);
+    const normalEnvVars = await (0, getProjectConfig_1.getEnvVarsResolved)(instance, env, componentName);
+    const jobOnlyEnvVars = await (0, getProjectConfig_1.getJobOnlyEnvVarsResolved)(instance, env, componentName);
+    const allEnvVars = {
+        ...normalEnvVars,
+        ...jobOnlyEnvVars,
+    };
+    return Object.fromEntries(secretEnvVarKeys.map((key) => {
+        const value = allEnvVars[key];
+        // due to some quirky way to resolve these variables, unset variables have the $CL_ prefix, so we remove thouse here
+        const variableIsNotSet = value === "$" + (0, pipeline_1.getSecretVarName)(env, componentName, key);
+        return [key, variableIsNotSet ? "🚨 FILL ME" : value];
+    }));
 };
 const doItFor = async (instance, envAndComponents) => {
-  let valuesToEdit = Object.fromEntries(await Promise.all(Object.entries(envAndComponents).map(async ([componentName, envs]) => [componentName, Object.fromEntries(await Promise.all(envs.map(async env => [env, await getEnvVarsToEdit(instance, env, componentName)])))])));
-  let hasErrors = true;
-  while (hasErrors) {
-    valuesToEdit = await (0, editAsFile_1.editAsFile)(resolveJson(valuesToEdit), (0, common_tags_1.stripIndents)`
+    let valuesToEdit = Object.fromEntries(await Promise.all(Object.entries(envAndComponents).map(async ([componentName, envs]) => [
+        componentName,
+        Object.fromEntries(await Promise.all(envs.map(async (env) => [
+            env,
+            await getEnvVarsToEdit(instance, env, componentName),
+        ]))),
+    ])));
+    let hasErrors = true;
+    while (hasErrors) {
+        valuesToEdit = await (0, editAsFile_1.editAsFile)(resolveJson(valuesToEdit), (0, common_tags_1.stripIndents) `
         Please fill in all secrets for: 
 
-        ${Object.entries(envAndComponents).map(([componentName, envs]) => `- ${componentName}: ${envs.join(", ")}`).join("\n")}
+        ${Object.entries(envAndComponents)
+            .map(([componentName, envs]) => `- ${componentName}: ${envs.join(", ")}`)
+            .join("\n")}
 
         `);
-    // check for errors
-    hasErrors = false;
+        // check for errors
+        hasErrors = false;
+        for (const [componentName, envs] of Object.entries(envAndComponents)) {
+            for (const env of envs) {
+                const usedKeys = valuesToEdit[componentName][env]
+                    ? Object.keys(valuesToEdit[componentName][env])
+                    : [];
+                // check whether newValues have the exact number of keys
+                const secretEnvVarKeys = await getSecretEnvVarKeysToConfigure(env, componentName);
+                const extranous = (0, lodash_es_1.difference)(usedKeys, secretEnvVarKeys);
+                const missing = (0, lodash_es_1.difference)(secretEnvVarKeys, usedKeys);
+                if (extranous.length > 0 || missing.length > 0) {
+                    instance.log("");
+                    instance.log(`😿 Oh no! There is something wrong with "${componentName}"`);
+                    instance.log("");
+                    if (extranous.length > 0) {
+                        instance.log("these secrets are not declared in the config");
+                        extranous.forEach((key) => instance.log(key));
+                        instance.log("");
+                    }
+                    if (missing.length > 0) {
+                        instance.log("these secrets have not been provided:");
+                        missing.forEach((key) => instance.log(key));
+                        instance.log("");
+                    }
+                    await (0, promise_1.delay)(1000);
+                    const shouldContinue = await instance.confirm("Try again? 🤔");
+                    if (!shouldContinue) {
+                        throw new Error("abort");
+                    }
+                    hasErrors = true;
+                }
+            }
+        }
+    }
+    const config = await (0, getProjectConfig_1.getProjectConfig)();
+    if (!config) {
+        throw new Error("no catladder config found");
+    }
+    instance.log("");
+    instance.log("writing all secrets to the vault, please wait...");
+    instance.log("");
     for (const [componentName, envs] of Object.entries(envAndComponents)) {
-      for (const env of envs) {
-        const usedKeys = valuesToEdit[componentName][env] ? Object.keys(valuesToEdit[componentName][env]) : [];
-        // check whether newValues have the exact number of keys
-        const secretEnvVarKeys = await getSecretEnvVarKeysToConfigure(env, componentName);
-        const extranous = (0, lodash_es_1.difference)(usedKeys, secretEnvVarKeys);
-        const missing = (0, lodash_es_1.difference)(secretEnvVarKeys, usedKeys);
-        if (extranous.length > 0 || missing.length > 0) {
-          instance.log("");
-          instance.log(`😿 Oh no! There is something wrong with "${componentName}"`);
-          instance.log("");
-          if (extranous.length > 0) {
-            instance.log("these secrets are not declared in the config");
-            extranous.forEach(key => instance.log(key));
-            instance.log("");
-          }
-          if (missing.length > 0) {
-            instance.log("these secrets have not been provided:");
-            missing.forEach(key => instance.log(key));
+        for (const env of envs) {
+            instance.log("writing " + env + ":" + componentName + "...\n");
+            await (await instance.getVaultManager()).writeSecrets(env, componentName, valuesToEdit[componentName][env]);
             instance.log("");
-          }
-          await (0, promise_1.delay)(1000);
-          const shouldContinue = await instance.confirm("Try again? 🤔");
-          if (!shouldContinue) {
-            throw new Error("abort");
-          }
-          hasErrors = true;
+            instance.log("✅ " + env + ":" + componentName);
+            instance.log("--------------------------------\n");
         }
-      }
     }
-  }
-  const config = await (0, getProjectConfig_1.getProjectConfig)();
-  if (!config) {
-    throw new Error("no catladder config found");
-  }
-  instance.log("");
-  instance.log("writing all secrets to the vault, please wait...");
-  instance.log("");
-  for (const [componentName, envs] of Object.entries(envAndComponents)) {
-    for (const env of envs) {
-      instance.log("writing " + env + ":" + componentName + "...\n");
-      await (await instance.getVaultManager()).writeSecrets(env, componentName, valuesToEdit[componentName][env]);
-      instance.log("");
-      instance.log("✅ " + env + ":" + componentName);
-      instance.log("--------------------------------\n");
-    }
-  }
-  await mirrorSecretsToCiBackends(instance, config, envAndComponents, valuesToEdit);
-  instance.log("done! 😻");
-  instance.log("");
+    await mirrorSecretsToCiBackends(instance, config, envAndComponents, valuesToEdit);
+    instance.log("done! 😻");
+    instance.log("");
 };
 /**
  * the vault is the source of truth; every enabled CI backend receives
@@ -114,79 +131,76 @@ const doItFor = async (instance, envAndComponents) => {
  * secrets), so all CI systems stay in sync
  */
 const mirrorSecretsToCiBackends = async (instance, config, envAndComponents, valuesToEdit) => {
-  const enabled = (0, pipeline_1.getEnabledPipelineTypes)(config);
-  // gitlab mirror (unless gitlab is the vault itself, then it is
-  // already written)
-  if ((0, pipeline_1.getVaultConfig)(config).type !== "gitlab" && enabled.includes("gitlab")) {
+    const enabled = (0, pipeline_1.getEnabledPipelineTypes)(config);
+    // gitlab mirror (unless gitlab is the vault itself, then it is
+    // already written)
+    if ((0, pipeline_1.getVaultConfig)(config).type !== "gitlab" && enabled.includes("gitlab")) {
+        for (const [componentName, envs] of Object.entries(envAndComponents)) {
+            for (const env of envs) {
+                await (0, gitlab_1.upsertAllVariables)(instance, valuesToEdit[componentName][env], env, componentName);
+            }
+        }
+        instance.log("✅ mirrored to gitlab");
+    }
+    if (!enabled.includes("github")) {
+        return;
+    }
+    const kinds = new Map();
     for (const [componentName, envs] of Object.entries(envAndComponents)) {
-      for (const env of envs) {
-        await (0, gitlab_1.upsertAllVariables)(instance, valuesToEdit[componentName][env], env, componentName);
-      }
+        for (const env of envs) {
+            const { secretEnvVarKeys, jobOnlyVars } = await (0, getProjectConfig_1.getEnvironment)(env, componentName);
+            [
+                ...secretEnvVarKeys,
+                ...jobOnlyVars.build.secretEnvVarKeys,
+                ...jobOnlyVars.deploy.secretEnvVarKeys,
+            ].forEach(({ key, kind }) => kinds.set((0, pipeline_1.getSecretVarName)(env, componentName, key), kind !== null && kind !== void 0 ? kind : "secret"));
+        }
+    }
+    const secrets = Object.entries(envAndComponents).flatMap(([componentName, envs]) => envs.flatMap((env) => {
+        var _a;
+        return Object.entries((_a = valuesToEdit[componentName][env]) !== null && _a !== void 0 ? _a : {}).map(([key, value]) => {
+            var _a;
+            const name = (0, pipeline_1.getSecretVarName)(env, componentName, key);
+            return {
+                name,
+                value: typeof value === "string" ? value : JSON.stringify(value !== null && value !== void 0 ? value : ""),
+                kind: (_a = kinds.get(name)) !== null && _a !== void 0 ? _a : "secret",
+            };
+        });
+    }));
+    if (secrets.length === 0) {
+        return;
     }
-    instance.log("✅ mirrored to gitlab");
-  }
-  if (!enabled.includes("github")) {
-    return;
-  }
-  const kinds = new Map();
-  for (const [componentName, envs] of Object.entries(envAndComponents)) {
-    for (const env of envs) {
-      const {
-        secretEnvVarKeys,
-        jobOnlyVars
-      } = await (0, getProjectConfig_1.getEnvironment)(env, componentName);
-      [...secretEnvVarKeys, ...jobOnlyVars.build.secretEnvVarKeys, ...jobOnlyVars.deploy.secretEnvVarKeys].forEach(({
-        key,
-        kind
-      }) => kinds.set((0, pipeline_1.getSecretVarName)(env, componentName, key), kind !== null && kind !== void 0 ? kind : "secret"));
+    if (!(await (0, github_1.isGhAuthenticated)())) {
+        instance.log("⚠️ github pipeline is enabled, but the github cli (gh) is not authenticated — run `project secrets-sync-github` later to mirror the secrets");
+        return;
     }
-  }
-  const secrets = Object.entries(envAndComponents).flatMap(([componentName, envs]) => envs.flatMap(env => {
-    var _a;
-    return Object.entries((_a = valuesToEdit[componentName][env]) !== null && _a !== void 0 ? _a : {}).map(([key, value]) => {
-      var _a;
-      const name = (0, pipeline_1.getSecretVarName)(env, componentName, key);
-      return {
-        name,
-        value: typeof value === "string" ? value : JSON.stringify(value !== null && value !== void 0 ? value : ""),
-        kind: (_a = kinds.get(name)) !== null && _a !== void 0 ? _a : "secret"
-      };
-    });
-  }));
-  if (secrets.length === 0) {
-    return;
-  }
-  if (!(await (0, github_1.isGhAuthenticated)())) {
-    instance.log("⚠️ github pipeline is enabled, but the github cli (gh) is not authenticated — run `project secrets-sync-github` later to mirror the secrets");
-    return;
-  }
-  const repo = await (0, commandSecretsSyncGithub_1.getConfiguredGithubRepo)();
-  if (!repo) {
-    instance.log("⚠️ github pipeline is enabled, but no github repository was found — run `project secrets-sync-github` later to mirror the secrets");
-    return;
-  }
-  instance.log(`mirroring ${secrets.length} secrets to github ('${repo}')...`);
-  await (0, commandSecretsSyncGithub_1.pushSecretsToGithub)(instance, repo, secrets, await (0, commandSecretsSyncGithub_1.collectSecretTargets)(config));
+    const repo = await (0, commandSecretsSyncGithub_1.getConfiguredGithubRepo)();
+    if (!repo) {
+        instance.log("⚠️ github pipeline is enabled, but no github repository was found — run `project secrets-sync-github` later to mirror the secrets");
+        return;
+    }
+    instance.log(`mirroring ${secrets.length} secrets to github ('${repo}')...`);
+    await (0, commandSecretsSyncGithub_1.pushSecretsToGithub)(instance, repo, secrets, await (0, commandSecretsSyncGithub_1.collectSecretTargets)(config));
 };
 const projectConfigSecrets = async (io, envComponent) => {
-  if (!envComponent) {
-    const allEnvAndcomponents = await (0, getProjectConfig_1.getAllComponentsWithAllEnvsHierarchical)();
-    await doItFor(io, allEnvAndcomponents);
-  } else {
-    const {
-      env,
-      componentName
-    } = (0, getProjectConfig_1.parseChoice)(envComponent);
-    // componentName can be null. in this case, iterate over all  components
-    if (!componentName) {
-      const components = await (0, getProjectConfig_1.getProjectComponents)();
-      await doItFor(io, Object.fromEntries(components.map(c => [c, [env]])));
+    if (!envComponent) {
+        const allEnvAndcomponents = await (0, getProjectConfig_1.getAllComponentsWithAllEnvsHierarchical)();
+        await doItFor(io, allEnvAndcomponents);
     }
-    if (componentName) {
-      await doItFor(io, {
-        [componentName]: [env]
-      });
+    else {
+        const { env, componentName } = (0, getProjectConfig_1.parseChoice)(envComponent);
+        // componentName can be null. in this case, iterate over all  components
+        if (!componentName) {
+            const components = await (0, getProjectConfig_1.getProjectComponents)();
+            await doItFor(io, Object.fromEntries(components.map((c) => [c, [env]])));
+        }
+        if (componentName) {
+            await doItFor(io, {
+                [componentName]: [env],
+            });
+        }
     }
-  }
 };
-exports.projectConfigSecrets = projectConfigSecrets;
+exports.projectConfigSecrets = projectConfigSecrets;
+//# sourceMappingURL=commandConfigSecrets.js.map

package/dist/cli/src/apps/cli/commands/project/doctor/DoctorReport.d.ts

@@ -7,16 +7,16 @@ import type { IO } from "../../../../../core/types";
  * diagnoses, setup heals.
  */
 export declare class DoctorReport {
-  private readonly io;
-  private passed;
-  private readonly warnings;
-  private readonly problems;
-  private currentSection;
-  constructor(io: IO);
-  section(title: string): void;
-  ok(message: string): void;
-  warn(message: string, remediation?: string): void;
-  fail(message: string, remediation?: string): void;
-  get hasProblems(): boolean;
-  summarize(): void;
-}
+    private readonly io;
+    private passed;
+    private readonly warnings;
+    private readonly problems;
+    private currentSection;
+    constructor(io: IO);
+    section(title: string): void;
+    ok(message: string): void;
+    warn(message: string, remediation?: string): void;
+    fail(message: string, remediation?: string): void;
+    get hasProblems(): boolean;
+    summarize(): void;
+}

package/dist/cli/src/apps/cli/commands/project/doctor/DoctorReport.js

@@ -1,8 +1,5 @@
 "use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
+Object.defineProperty(exports, "__esModule", { value: true });
 exports.DoctorReport = void 0;
 /**
  * collects the results of all doctor checks: each check logs
@@ -12,64 +9,55 @@ exports.DoctorReport = void 0;
  * diagnoses, setup heals.
  */
 class DoctorReport {
-  constructor(io) {
-    this.io = io;
-    this.passed = 0;
-    this.warnings = [];
-    this.problems = [];
-    this.currentSection = "";
-  }
-  section(title) {
-    this.currentSection = title;
-    this.io.log("");
-    this.io.log("🩺 " + title);
-  }
-  ok(message) {
-    this.passed++;
-    this.io.log("  ✅ " + message);
-  }
-  warn(message, remediation) {
-    this.warnings.push({
-      section: this.currentSection,
-      message,
-      remediation
-    });
-    this.io.log("  ⚠️ " + message);
-    if (remediation) this.io.log("     ↳ " + remediation);
-  }
-  fail(message, remediation) {
-    this.problems.push({
-      section: this.currentSection,
-      message,
-      remediation
-    });
-    this.io.log("  ❌ " + message);
-    if (remediation) this.io.log("     ↳ " + remediation);
-  }
-  get hasProblems() {
-    return this.problems.length > 0;
-  }
-  summarize() {
-    const {
-      io
-    } = this;
-    io.log("");
-    io.log("==================================================================================");
-    io.log(`🩺 doctor summary: ${this.passed} checks passed, ` + `${this.warnings.length} warnings, ${this.problems.length} problems`);
-    if (!this.hasProblems) {
-      io.log("");
-      io.log("everything looks healthy 😻");
-      return;
+    constructor(io) {
+        this.io = io;
+        this.passed = 0;
+        this.warnings = [];
+        this.problems = [];
+        this.currentSection = "";
     }
-    io.log("");
-    for (const {
-      section,
-      message,
-      remediation
-    } of this.problems) {
-      io.log(`❌ [${section}] ${message}`);
-      if (remediation) io.log(`   ↳ ${remediation}`);
+    section(title) {
+        this.currentSection = title;
+        this.io.log("");
+        this.io.log("🩺 " + title);
+    }
+    ok(message) {
+        this.passed++;
+        this.io.log("  ✅ " + message);
+    }
+    warn(message, remediation) {
+        this.warnings.push({ section: this.currentSection, message, remediation });
+        this.io.log("  ⚠️ " + message);
+        if (remediation)
+            this.io.log("     ↳ " + remediation);
+    }
+    fail(message, remediation) {
+        this.problems.push({ section: this.currentSection, message, remediation });
+        this.io.log("  ❌ " + message);
+        if (remediation)
+            this.io.log("     ↳ " + remediation);
+    }
+    get hasProblems() {
+        return this.problems.length > 0;
+    }
+    summarize() {
+        const { io } = this;
+        io.log("");
+        io.log("==================================================================================");
+        io.log(`🩺 doctor summary: ${this.passed} checks passed, ` +
+            `${this.warnings.length} warnings, ${this.problems.length} problems`);
+        if (!this.hasProblems) {
+            io.log("");
+            io.log("everything looks healthy 😻");
+            return;
+        }
+        io.log("");
+        for (const { section, message, remediation } of this.problems) {
+            io.log(`❌ [${section}] ${message}`);
+            if (remediation)
+                io.log(`   ↳ ${remediation}`);
+        }
     }
-  }
 }
-exports.DoctorReport = DoctorReport;
+exports.DoctorReport = DoctorReport;
+//# sourceMappingURL=DoctorReport.js.map

package/dist/cli/src/apps/cli/commands/project/doctor/GcloudProjectInspector.d.ts

@@ -4,12 +4,12 @@
  * `get-iam-policy` / `services list` call, not one per context
  */
 export declare class GcloudProjectInspector {
-  private readonly iamBindings;
-  private readonly enabledServices;
-  isAuthenticated(): Promise<boolean>;
-  private getIamBindings;
-  /** all roles bound to the given member (e.g. "serviceAccount:<email>") */
-  getRolesOfMember(projectId: string, member: string): Promise<string[]>;
-  getEnabledServices(projectId: string): Promise<Set<string>>;
-  hasArtifactsRegistry(projectId: string, region: string): Promise<boolean>;
-}
+    private readonly iamBindings;
+    private readonly enabledServices;
+    isAuthenticated(): Promise<boolean>;
+    private getIamBindings;
+    /** all roles bound to the given member (e.g. "serviceAccount:<email>") */
+    getRolesOfMember(projectId: string, member: string): Promise<string[]>;
+    getEnabledServices(projectId: string): Promise<Set<string>>;
+    hasArtifactsRegistry(projectId: string, region: string): Promise<boolean>;
+}

package/dist/cli/src/apps/cli/commands/project/doctor/GcloudProjectInspector.js

@@ -1,8 +1,5 @@
 "use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
+Object.defineProperty(exports, "__esModule", { value: true });
 exports.GcloudProjectInspector = void 0;
 const child_process_promise_1 = require("child-process-promise");
 const artifactsRegistry_1 = require("../../../../../gcloud/artifactsRegistry");
@@ -12,48 +9,50 @@ const artifactsRegistry_1 = require("../../../../../gcloud/artifactsRegistry");
  * `get-iam-policy` / `services list` call, not one per context
  */
 class GcloudProjectInspector {
-  constructor() {
-    this.iamBindings = new Map();
-    this.enabledServices = new Map();
-  }
-  async isAuthenticated() {
-    try {
-      await (0, child_process_promise_1.exec)("gcloud auth print-access-token");
-      return true;
-    } catch (_a) {
-      return false;
+    constructor() {
+        this.iamBindings = new Map();
+        this.enabledServices = new Map();
     }
-  }
-  getIamBindings(projectId) {
-    if (!this.iamBindings.has(projectId)) {
-      this.iamBindings.set(projectId, (0, child_process_promise_1.exec)(`gcloud projects get-iam-policy ${projectId} --format=json`).then(result => {
-        var _a;
-        return (_a = JSON.parse(result.stdout).bindings) !== null && _a !== void 0 ? _a : [];
-      }));
+    async isAuthenticated() {
+        try {
+            await (0, child_process_promise_1.exec)("gcloud auth print-access-token");
+            return true;
+        }
+        catch (_a) {
+            return false;
+        }
     }
-    return this.iamBindings.get(projectId);
-  }
-  /** all roles bound to the given member (e.g. "serviceAccount:<email>") */
-  async getRolesOfMember(projectId, member) {
-    const bindings = await this.getIamBindings(projectId);
-    return bindings.filter(binding => {
-      var _a;
-      return (_a = binding.members) === null || _a === void 0 ? void 0 : _a.includes(member);
-    }).map(binding => binding.role);
-  }
-  getEnabledServices(projectId) {
-    if (!this.enabledServices.has(projectId)) {
-      this.enabledServices.set(projectId, (0, child_process_promise_1.exec)(`gcloud services list --enabled --project=${projectId} --format="value(config.name)"`).then(result => new Set(result.stdout.split("\n").map(line => line.trim()).filter(Boolean))));
+    getIamBindings(projectId) {
+        if (!this.iamBindings.has(projectId)) {
+            this.iamBindings.set(projectId, (0, child_process_promise_1.exec)(`gcloud projects get-iam-policy ${projectId} --format=json`).then((result) => { var _a; return (_a = JSON.parse(result.stdout).bindings) !== null && _a !== void 0 ? _a : []; }));
+        }
+        return this.iamBindings.get(projectId);
     }
-    return this.enabledServices.get(projectId);
-  }
-  async hasArtifactsRegistry(projectId, region) {
-    try {
-      await (0, child_process_promise_1.exec)(`gcloud artifacts repositories describe ${artifactsRegistry_1.CATLADDER_REGISTRY_NAME} --project="${projectId}" --location=${region}`);
-      return true;
-    } catch (_a) {
-      return false;
+    /** all roles bound to the given member (e.g. "serviceAccount:<email>") */
+    async getRolesOfMember(projectId, member) {
+        const bindings = await this.getIamBindings(projectId);
+        return bindings
+            .filter((binding) => { var _a; return (_a = binding.members) === null || _a === void 0 ? void 0 : _a.includes(member); })
+            .map((binding) => binding.role);
+    }
+    getEnabledServices(projectId) {
+        if (!this.enabledServices.has(projectId)) {
+            this.enabledServices.set(projectId, (0, child_process_promise_1.exec)(`gcloud services list --enabled --project=${projectId} --format="value(config.name)"`).then((result) => new Set(result.stdout
+                .split("\n")
+                .map((line) => line.trim())
+                .filter(Boolean))));
+        }
+        return this.enabledServices.get(projectId);
+    }
+    async hasArtifactsRegistry(projectId, region) {
+        try {
+            await (0, child_process_promise_1.exec)(`gcloud artifacts repositories describe ${artifactsRegistry_1.CATLADDER_REGISTRY_NAME} --project="${projectId}" --location=${region}`);
+            return true;
+        }
+        catch (_a) {
+            return false;
+        }
     }
-  }
 }
-exports.GcloudProjectInspector = GcloudProjectInspector;
+exports.GcloudProjectInspector = GcloudProjectInspector;
+//# sourceMappingURL=GcloudProjectInspector.js.map

package/dist/cli/src/apps/cli/commands/project/doctor/checkCloudRun.d.ts

@@ -10,4 +10,4 @@ import type { DoctorReport } from "./DoctorReport";
  * setup ran — deploys keep working and only the review teardown hits
  * the missing `roles/cloudsql.admin` as a 403 in ci.
  */
-export declare const checkCloudRun: (report: DoctorReport, contexts: ComponentContext[]) => Promise<void>;
+export declare const checkCloudRun: (report: DoctorReport, contexts: ComponentContext[]) => Promise<void>;