@catladder/cli 0.0.0-refactor-cloud-run-825d7e86 → 0.0.0-refactor-docker-9fda97e9

package/dist/cli/src/apps/catci/commands/security/evaluateSecurityAudit.js

@@ -0,0 +1,76 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.makeSecurityAuditOverview = exports.evaluateSecurityAudit = void 0;
+var ts_results_es_1 = require("ts-results-es");
+var path_1 = require("path");
+var promises_1 = require("fs/promises");
+var createSecurityAuditMergeRequest_1 = require("./createSecurityAuditMergeRequest");
+var auditDocument_1 = require("./auditDocument");
+function evaluateSecurityAudit(_a) {
+    return __awaiter(this, arguments, void 0, function (_b) {
+        var _this = this;
+        var path = _b.path;
+        return __generator(this, function (_c) {
+            switch (_c.label) {
+                case 0: return [4 /*yield*/, ts_results_es_1.Result.wrapAsync(function () { return __awaiter(_this, void 0, void 0, function () {
+                        var filePath, docData, doc;
+                        return __generator(this, function (_a) {
+                            switch (_a.label) {
+                                case 0:
+                                    filePath = (0, path_1.join)(path, createSecurityAuditMergeRequest_1.SECURITY_AUDIT_FILE_NAME);
+                                    return [4 /*yield*/, (0, promises_1.readFile)(filePath)];
+                                case 1:
+                                    docData = _a.sent();
+                                    doc = docData.toString("utf-8");
+                                    return [2 /*return*/, (0, auditDocument_1.evaluateDocument)(doc)];
+                            }
+                        });
+                    }); })];
+                case 1: return [2 /*return*/, (_c.sent()).mapErr(function (e) { return "could not evaluate ".concat(createSecurityAuditMergeRequest_1.SECURITY_AUDIT_FILE_NAME, ": ").concat(e); })];
+            }
+        });
+    });
+}
+exports.evaluateSecurityAudit = evaluateSecurityAudit;
+function makeSecurityAuditOverview(evaluation) {
+    var ratingToEmo = function (r) { return (r < 33 ? "🟥" : r < 66 ? "🟨" : "🟩"); };
+    return "Project security posture overview:\n \uD83E\uDDD0 Total topics: ".concat(evaluation.score.totalTopics, "\n \uD83D\uDD12 Secured topics: ").concat(evaluation.score.securedTopics, "\n \uD83D\uDCE2 Answered topics: ").concat(evaluation.score.answeredTopics, "\n \u2754 Unknown topics: ").concat(evaluation.score.unknownTopics, "\n \uD83D\uDCCA Rating: ").concat(ratingToEmo(evaluation.score.rating), " ").concat(evaluation.score.rating, "/100");
+}
+exports.makeSecurityAuditOverview = makeSecurityAuditOverview;
+//# sourceMappingURL=evaluateSecurityAudit.js.map

package/dist/cli/src/apps/catci/commands/security/evaluateSecurityAudit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluateSecurityAudit.js","sourceRoot":"","sources":["../../../../../../../src/apps/catci/commands/security/evaluateSecurityAudit.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,+CAAuC;AACvC,6BAA4B;AAC5B,wCAAuC;AACvC,qFAA6E;AAE7E,iDAAmD;AAEnD,SAAsB,qBAAqB;wDAAC,EAA0B;;YAAxB,IAAI,UAAA;;;wBAE9C,qBAAM,sBAAM,CAAC,SAAS,CAAC;;;;;oCACf,QAAQ,GAAG,IAAA,WAAI,EAAC,IAAI,EAAE,0DAAwB,CAAC,CAAC;oCACtC,qBAAM,IAAA,mBAAQ,EAAC,QAAQ,CAAC,EAAA;;oCAAlC,OAAO,GAAG,SAAwB;oCAClC,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;oCACtC,sBAAO,IAAA,gCAAgB,EAAC,GAAG,CAAC,EAAC;;;yBAC9B,CAAC,EAAA;wBANJ,sBAAO,CACL,SAKE,CACH,CAAC,MAAM,CAAC,UAAC,CAAC,IAAK,OAAA,6BAAsB,0DAAwB,eAAK,CAAC,CAAE,EAAtD,CAAsD,CAAC,EAAC;;;;CACzE;AATD,sDASC;AAED,SAAgB,yBAAyB,CAAC,UAA8B;IACtE,IAAM,WAAW,GAAG,UAAC,CAAS,IAAK,OAAA,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAtC,CAAsC,CAAC;IAE1E,OAAO,0EACW,UAAU,CAAC,KAAK,CAAC,WAAW,6CAC1B,UAAU,CAAC,KAAK,CAAC,aAAa,8CAC7B,UAAU,CAAC,KAAK,CAAC,cAAc,uCACjC,UAAU,CAAC,KAAK,CAAC,aAAa,qCACrC,WAAW,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,cAC9C,UAAU,CAAC,KAAK,CAAC,MAAM,SACnB,CAAC;AACT,CAAC;AAXD,8DAWC"}

package/dist/cli/src/apps/catci/commands/security/topics.json

@@ -0,0 +1,117 @@
+[
+    {
+        "description": "No API keys or secrets are stored in repository",
+        "responsibles": 1,
+        "more": ""
+    },
+    {
+        "description": "The app does not provide password login",
+        "responsibles": 1,
+        "more": ""
+    },
+    {
+        "description": "Passwords are not stored",
+        "responsibles": 1,
+        "more": ""
+    },
+    {
+        "description": "No sensitive information (passwords, keys, user data, ...) is logged or traced",
+        "responsibles": 1,
+        "more": "[Logging guide](https://www.notion.so/panterch/Long-story-logging-022722bb878f4724ae5b49e17667b630?pvs=4#9e5a36b7158a4953b73ec6a345bd8989), [Tracing guide](https://www.notion.so/panterch/Long-story-tracing-d8a9ec1ac2ff4fa78cefa8991233224e?pvs=4#535121b5bf9741fbaf8654b4b64d879d)"
+    },
+    {
+        "description": "Passwords are stored hashed with salt and salt is not stored in the repository",
+        "responsibles": 1,
+        "more": "[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/hash.md)"
+    },
+    {
+        "description": "Input that ends up in DOM is properly sanitized",
+        "responsibles": 1,
+        "more": "[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/xss.md)"
+    },
+    {
+        "description": "All user inputs have reasonable validations",
+        "responsibles": 1,
+        "more": "[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/validation.md)"
+    },
+    {
+        "description": "The app is not using cookies",
+        "responsibles": 1,
+        "more": "[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/cookies.md)"
+    },
+    {
+        "description": "The app is using cookies and cookies are properly configured",
+        "responsibles": 1,
+        "more": "[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/cookies.md)"
+    },
+    {
+        "description": "The app uses JWT with a secret and the secret is not stored in the repository",
+        "responsibles": 1,
+        "more": "[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/cookies.md)"
+    },
+    {
+        "description": "Authorization and user roles (RBAC) were reviewed thoroughly",
+        "responsibles": 2,
+        "more": "[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/authorization.md)"
+    },
+    {
+        "description": "CORS headers do not use `*`",
+        "responsibles": 1,
+        "more": "[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/cors.md)"
+    },
+    {
+        "description": "CSP headers are properly configured (no `unsafe-inline` or `unsafe-eval`)",
+        "responsibles": 1,
+        "more": "[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/csp.md)"
+    },
+    {
+        "description": "DoS defense mechanism is implemented",
+        "responsibles": 1,
+        "more": "[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/dos.md)"
+    },
+    {
+        "description": "YAML/XML parsing is not used or used YAML/XML parsers have disabled DTD",
+        "responsibles": 1,
+        "more": "[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/dos.md)"
+    },
+    {
+        "description": "The app implements CSRF prevention",
+        "responsibles": 1,
+        "more": "[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/csrf.md)"
+    },
+    {
+        "description": "The app has a rate limitter",
+        "responsibles": 1,
+        "more": ""
+    },
+    {
+        "description": "The app has disabled GraphQL introspection and schema registry",
+        "responsibles": 1,
+        "more": "[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/graphql.md)"
+    },
+    {
+        "description": "The app has set GraphQL complexity query limits",
+        "responsibles": 1,
+        "more": "[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/graphql.md)"
+    },
+    {
+        "description": "`sitemap.xml` does not leak any routes with sensitive data",
+        "responsibles": 1,
+        "more": ""
+    },
+    {
+        "description": "Cloud storage is (private) configured to not leak any sensitive data publicly",
+        "responsibles": 1,
+        "more": ""
+    },
+    {
+        "description": "Security Dashboard checks weekly vulnerable dependencies https://dep.panter.swiss/",
+        "responsibles": 1,
+        "more": ""
+    },
+    {
+        "description": "The app has `.well-known/security.txt` https://securitytxt.org/",
+        "responsibles": 1,
+        "more": ""
+    }
+]

package/dist/cli/src/apps/catenv/catenv.js

@@ -0,0 +1,72 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+var getProjectConfig_1 = require("../../config/getProjectConfig");
+var printVariables_1 = require("./printVariables");
+var writeDotEnvFiles_1 = require("./writeDotEnvFiles");
+var writeEnvDTs_1 = require("./writeEnvDTs");
+var pipeline_1 = require("../../../../pipeline/src/index.js");
+exports.default = (function (choice) { return __awaiter(void 0, void 0, void 0, function () {
+    var config;
+    return __generator(this, function (_a) {
+        switch (_a.label) {
+            case 0: return [4 /*yield*/, (0, getProjectConfig_1.getProjectConfig)()];
+            case 1:
+                config = _a.sent();
+                if (!config) {
+                    return [2 /*return*/];
+                }
+                if (!config.pipelineType) return [3 /*break*/, 3];
+                return [4 /*yield*/, (0, pipeline_1.generatePipelineFiles)(config, config.pipelineType, "local")];
+            case 2:
+                _a.sent();
+                _a.label = 3;
+            case 3: return [4 /*yield*/, (0, writeDotEnvFiles_1.writeDotEnvFiles)(config, choice)];
+            case 4:
+                _a.sent();
+                return [4 /*yield*/, (0, writeEnvDTs_1.writeDTsFiles)(config, choice)];
+            case 5:
+                _a.sent();
+                return [4 /*yield*/, (0, printVariables_1.printVariables)(config, choice)];
+            case 6:
+                _a.sent();
+                return [2 /*return*/];
+        }
+    });
+}); });
+//# sourceMappingURL=catenv.js.map

package/dist/cli/src/apps/catenv/catenv.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catenv.js","sourceRoot":"","sources":["../../../../../src/apps/catenv/catenv.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,kEAAiE;AACjE,mDAAkD;AAElD,uDAAsD;AACtD,6CAA8C;AAC9C,gDAA4D;AAE5D,mBAAe,UAAO,MAAe;;;;oBACpB,qBAAM,IAAA,mCAAgB,GAAE,EAAA;;gBAAjC,MAAM,GAAG,SAAwB;gBACvC,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,sBAAO;gBACT,CAAC;qBAEG,MAAM,CAAC,YAAY,EAAnB,wBAAmB;gBACrB,qBAAM,IAAA,gCAAqB,EAAC,MAAM,EAAE,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,EAAA;;gBAAjE,SAAiE,CAAC;;oBAGpE,qBAAM,IAAA,mCAAgB,EAAC,MAAM,EAAE,MAAM,CAAC,EAAA;;gBAAtC,SAAsC,CAAC;gBAEvC,qBAAM,IAAA,2BAAa,EAAC,MAAM,EAAE,MAAM,CAAC,EAAA;;gBAAnC,SAAmC,CAAC;gBAEpC,qBAAM,IAAA,+BAAc,EAAC,MAAM,EAAE,MAAM,CAAC,EAAA;;gBAApC,SAAoC,CAAC;;;;KACtC,EAAC"}

package/dist/cli/src/apps/catenv/printVariables.d.ts

@@ -0,0 +1,3 @@
+import type { Config } from "../../../../pipeline/src/index.js";
+import type { Choice } from "./types";
+export declare const printVariables: (config: Config, choice?: Choice) => Promise<void>;

package/dist/cli/src/apps/catenv/printVariables.js

@@ -0,0 +1,131 @@
+"use strict";
+var __assign = (this && this.__assign) || function () {
+    __assign = Object.assign || function(t) {
+        for (var s, i = 1, n = arguments.length; i < n; i++) {
+            s = arguments[i];
+            for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p))
+                t[p] = s[p];
+        }
+        return t;
+    };
+    return __assign.apply(this, arguments);
+};
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+var __read = (this && this.__read) || function (o, n) {
+    var m = typeof Symbol === "function" && o[Symbol.iterator];
+    if (!m) return o;
+    var i = m.call(o), r, ar = [], e;
+    try {
+        while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
+    }
+    catch (error) { e = { error: error }; }
+    finally {
+        try {
+            if (r && !r.done && (m = i["return"])) m.call(i);
+        }
+        finally { if (e) throw e.error; }
+    }
+    return ar;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.printVariables = void 0;
+var getProjectConfig_1 = require("../../config/getProjectConfig");
+var utils_1 = require("./utils");
+var getAllVariablesToPrint = function (config, choice) { return __awaiter(void 0, void 0, void 0, function () {
+    var _a, env, currentComponent;
+    return __generator(this, function (_b) {
+        switch (_b.label) {
+            case 0: return [4 /*yield*/, (0, utils_1.getCurrentComponentAndEnvFromChoice)(config, choice)];
+            case 1:
+                _a = _b.sent(), env = _a.env, currentComponent = _a.currentComponent;
+                if (!currentComponent) return [3 /*break*/, 3];
+                // don't print vars if dotenv is enabled
+                if (config.components[currentComponent].dotEnv) {
+                    return [2 /*return*/, {}];
+                }
+                return [4 /*yield*/, (0, getProjectConfig_1.getEnvVarsResolved)(null, env, currentComponent)];
+            case 2: return [2 /*return*/, _b.sent()];
+            case 3: return [4 /*yield*/, Object.keys(config.components).reduce(function (acc, componentName) { return __awaiter(void 0, void 0, void 0, function () {
+                    var subappvars, _a;
+                    return __generator(this, function (_b) {
+                        switch (_b.label) {
+                            case 0:
+                                if (!config.components[componentName].dotEnv) return [3 /*break*/, 2];
+                                return [4 /*yield*/, acc];
+                            case 1: return [2 /*return*/, _b.sent()];
+                            case 2: return [4 /*yield*/, (0, getProjectConfig_1.getEnvVarsResolved)(null, env, componentName)];
+                            case 3:
+                                subappvars = _b.sent();
+                                delete subappvars["_ALL_ENV_VAR_KEYS"];
+                                _a = [{}];
+                                return [4 /*yield*/, acc];
+                            case 4: return [2 /*return*/, __assign.apply(void 0, [__assign.apply(void 0, [__assign.apply(void 0, _a.concat([(_b.sent())])), subappvars]), Object.fromEntries(Object.entries(subappvars).map(function (_a) {
+                                        var _b = __read(_a, 2), key = _b[0], value = _b[1];
+                                        return [
+                                            "".concat((0, utils_1.sanitizeEnvVarName)(componentName.toUpperCase()), "_").concat(key),
+                                            value,
+                                        ];
+                                    }))])];
+                        }
+                    });
+                }); }, Promise.resolve({}))];
+            case 4: 
+            // when in a monorep and not in a subapp, merge all env vars.
+            // this is not 100% correct, but better than not exporting any vars at all
+            // so we also add prefixed variants
+            return [2 /*return*/, _b.sent()];
+        }
+    });
+}); };
+var printVariables = function (config, choice) { return __awaiter(void 0, void 0, void 0, function () {
+    var variables;
+    return __generator(this, function (_a) {
+        switch (_a.label) {
+            case 0: return [4 /*yield*/, getAllVariablesToPrint(config, choice)];
+            case 1:
+                variables = _a.sent();
+                console.log(makeExportKeyValuestring(variables));
+                return [2 /*return*/];
+        }
+    });
+}); };
+exports.printVariables = printVariables;
+var makeExportKeyValuestring = function (variables) {
+    return (0, utils_1.makeKeyValueString)(variables, "export ");
+};
+//# sourceMappingURL=printVariables.js.map

package/dist/cli/src/apps/catenv/printVariables.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"printVariables.js","sourceRoot":"","sources":["../../../../../src/apps/catenv/printVariables.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,kEAAmE;AAEnE,iCAIiB;AAEjB,IAAM,sBAAsB,GAAG,UAAO,MAAc,EAAE,MAAe;;;;oBACjC,qBAAM,IAAA,2CAAmC,EACzE,MAAM,EACN,MAAM,CACP,EAAA;;gBAHK,KAA4B,SAGjC,EAHO,GAAG,SAAA,EAAE,gBAAgB,sBAAA;qBAKzB,gBAAgB,EAAhB,wBAAgB;gBAClB,wCAAwC;gBACxC,IAAI,MAAM,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,MAAM,EAAE,CAAC;oBAC/C,sBAAO,EAAE,EAAC;gBACZ,CAAC;gBACM,qBAAM,IAAA,qCAAkB,EAAC,IAAI,EAAE,GAAG,EAAE,gBAAgB,CAAC,EAAA;oBAA5D,sBAAO,SAAqD,EAAC;oBAKtD,qBAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAChD,UAAO,GAAG,EAAE,aAAa;;;;;qCAEnB,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,MAAM,EAAvC,wBAAuC;gCAClC,qBAAM,GAAG,EAAA;oCAAhB,sBAAO,SAAS,EAAC;oCAEA,qBAAM,IAAA,qCAAkB,EAAC,IAAI,EAAE,GAAG,EAAE,aAAa,CAAC,EAAA;;gCAA/D,UAAU,GAAG,SAAkD;gCACrE,OAAO,UAAU,CAAC,mBAAmB,CAAC,CAAC;;gCAEjC,qBAAM,GAAG,EAAA;oCADf,wGACK,CAAC,SAAS,CAAC,KACX,UAAU,IAEV,MAAM,CAAC,WAAW,CACnB,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,UAAC,EAAY;4CAAZ,KAAA,aAAY,EAAX,GAAG,QAAA,EAAE,KAAK,QAAA;wCAAM,OAAA;4CAC/C,UAAG,IAAA,0BAAkB,EAAC,aAAa,CAAC,WAAW,EAAE,CAAC,cAAI,GAAG,CAAE;4CAC3D,KAAK;yCACN;oCAHgD,CAGhD,CAAC,CACH,IACD;;;qBACH,EACD,OAAO,CAAC,OAAO,CAAC,EAA4B,CAAC,CAC9C,EAAA;;YAxBD,6DAA6D;YAC7D,0EAA0E;YAC1E,mCAAmC;YACnC,sBAAO,SAqBN,EAAC;;;KAEL,CAAC;AAEK,IAAM,cAAc,GAAG,UAAO,MAAc,EAAE,MAAe;;;;oBAChD,qBAAM,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,EAAA;;gBAAxD,SAAS,GAAG,SAA4C;gBAE9D,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,SAAS,CAAC,CAAC,CAAC;;;;KAClD,CAAC;AAJW,QAAA,cAAc,kBAIzB;AAEF,IAAM,wBAAwB,GAAG,UAAC,SAAoB;IACpD,OAAA,IAAA,0BAAkB,EAAC,SAAS,EAAE,SAAS,CAAC;AAAxC,CAAwC,CAAC"}

package/dist/cli/src/apps/catenv/types.d.ts

@@ -0,0 +1,5 @@
+export type Choice = {
+    env?: string;
+    componentName?: string;
+};
+export type Variables = Record<string, string>;

package/dist/cli/src/apps/catenv/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/cli/src/apps/catenv/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../src/apps/catenv/types.ts"],"names":[],"mappings":""}

package/dist/cli/src/apps/catenv/utils.d.ts

@@ -0,0 +1,12 @@
+import type { Config } from "../../../../pipeline/src/index.js";
+import type { Choice, Variables } from "./types";
+export declare const getComponentFullPath: (gitRoot: string, config: Config, componentName: string) => string;
+export declare const getCurrentComponentAndEnvFromChoice: (config: Config, choice?: Choice) => Promise<{
+    currentComponent: string;
+    env: string;
+}>;
+export declare const makeKeyValueString: (variables: Variables, keyPrefix?: string) => string;
+export declare const sanitizeMultiLine: (variables: Variables) => {
+    [k: string]: string;
+};
+export declare const sanitizeEnvVarName: (name: string) => string;

package/dist/cli/src/apps/catenv/utils.js

@@ -0,0 +1,124 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+var __read = (this && this.__read) || function (o, n) {
+    var m = typeof Symbol === "function" && o[Symbol.iterator];
+    if (!m) return o;
+    var i = m.call(o), r, ar = [], e;
+    try {
+        while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
+    }
+    catch (error) { e = { error: error }; }
+    finally {
+        try {
+            if (r && !r.done && (m = i["return"])) m.call(i);
+        }
+        finally { if (e) throw e.error; }
+    }
+    return ar;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sanitizeEnvVarName = exports.sanitizeMultiLine = exports.makeKeyValueString = exports.getCurrentComponentAndEnvFromChoice = exports.getComponentFullPath = void 0;
+var path_1 = require("path");
+var projects_1 = require("../../utils/projects");
+var getComponentFullPath = function (gitRoot, config, componentName) {
+    return (0, path_1.join)(gitRoot, config.components[componentName].dir);
+};
+exports.getComponentFullPath = getComponentFullPath;
+var getCurrentComponentName = function (config) { return __awaiter(void 0, void 0, void 0, function () {
+    var gitRoot, currentDir;
+    return __generator(this, function (_a) {
+        switch (_a.label) {
+            case 0: return [4 /*yield*/, (0, projects_1.getGitRoot)()];
+            case 1:
+                gitRoot = _a.sent();
+                currentDir = process.cwd();
+                return [2 /*return*/, Object.keys(config.components).find(function (c) {
+                        return currentDir.startsWith((0, exports.getComponentFullPath)(gitRoot, config, c));
+                    })];
+        }
+    });
+}); };
+var getCurrentComponentAndEnvFromChoice = function (config, choice) { return __awaiter(void 0, void 0, void 0, function () {
+    var env, currentComponent, _a;
+    var _b, _c;
+    return __generator(this, function (_d) {
+        switch (_d.label) {
+            case 0:
+                env = (_b = choice === null || choice === void 0 ? void 0 : choice.env) !== null && _b !== void 0 ? _b : "local";
+                if (!((_c = choice === null || choice === void 0 ? void 0 : choice.componentName) !== null && _c !== void 0)) return [3 /*break*/, 1];
+                _a = _c;
+                return [3 /*break*/, 3];
+            case 1: return [4 /*yield*/, getCurrentComponentName(config)];
+            case 2:
+                _a = (_d.sent());
+                _d.label = 3;
+            case 3:
+                currentComponent = _a;
+                return [2 /*return*/, {
+                        currentComponent: currentComponent,
+                        env: env,
+                    }];
+        }
+    });
+}); };
+exports.getCurrentComponentAndEnvFromChoice = getCurrentComponentAndEnvFromChoice;
+var makeKeyValueString = function (variables, keyPrefix) {
+    if (keyPrefix === void 0) { keyPrefix = ""; }
+    return Object.entries(variables)
+        .map(function (_a) {
+        var _b = __read(_a, 2), key = _b[0], value = _b[1];
+        return "".concat(keyPrefix).concat(key, "='").concat(value, "'");
+    })
+        .join("\n");
+};
+exports.makeKeyValueString = makeKeyValueString;
+var sanitizeMultiLine = function (variables) {
+    return Object.fromEntries(Object.entries(variables).map(function (_a) {
+        var _b = __read(_a, 2), key = _b[0], value = _b[1];
+        return [
+            key,
+            value.replaceAll("\n", "\\n"),
+        ];
+    }));
+};
+exports.sanitizeMultiLine = sanitizeMultiLine;
+var sanitizeEnvVarName = function (name) {
+    return name.replace(/[\s\-.]+/g, "_");
+};
+exports.sanitizeEnvVarName = sanitizeEnvVarName;
+//# sourceMappingURL=utils.js.map

package/dist/cli/src/apps/catenv/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../../../../src/apps/catenv/utils.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,6BAA4B;AAC5B,iDAAkD;AAE3C,IAAM,oBAAoB,GAAG,UAClC,OAAe,EACf,MAAc,EACd,aAAqB;IAErB,OAAO,IAAA,WAAI,EAAC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC;AAC7D,CAAC,CAAC;AANW,QAAA,oBAAoB,wBAM/B;AACF,IAAM,uBAAuB,GAAG,UAAO,MAAc;;;;oBACnC,qBAAM,IAAA,qBAAU,GAAE,EAAA;;gBAA5B,OAAO,GAAG,SAAkB;gBAC5B,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;gBACjC,sBAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,UAAC,CAAC;wBAC3C,OAAA,UAAU,CAAC,UAAU,CAAC,IAAA,4BAAoB,EAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;oBAA/D,CAA+D,CAChE,EAAC;;;KACH,CAAC;AAEK,IAAM,mCAAmC,GAAG,UACjD,MAAc,EACd,MAAe;;;;;;gBAET,GAAG,GAAG,MAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,GAAG,mCAAI,OAAO,CAAC;4BAEjC,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,aAAa;;;oBAAK,qBAAM,uBAAuB,CAAC,MAAM,CAAC,EAAA;;gBAAtC,KAAA,CAAC,SAAqC,CAAC,CAAA;;;gBAD5D,gBAAgB,KAC4C;gBAElE,sBAAO;wBACL,gBAAgB,kBAAA;wBAChB,GAAG,KAAA;qBACJ,EAAC;;;KACH,CAAC;AAZW,QAAA,mCAAmC,uCAY9C;AAEK,IAAM,kBAAkB,GAAG,UAAC,SAAoB,EAAE,SAAc;IAAd,0BAAA,EAAA,cAAc;IACrE,OAAA,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;SACtB,GAAG,CAAC,UAAC,EAAY;YAAZ,KAAA,aAAY,EAAX,GAAG,QAAA,EAAE,KAAK,QAAA;QAAM,OAAA,UAAG,SAAS,SAAG,GAAG,eAAK,KAAK,MAAG;IAA/B,CAA+B,CAAC;SACtD,IAAI,CAAC,IAAI,CAAC;AAFb,CAEa,CAAC;AAHH,QAAA,kBAAkB,sBAGf;AAET,IAAM,iBAAiB,GAAG,UAAC,SAAoB;IACpD,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,UAAC,EAAY;YAAZ,KAAA,aAAY,EAAX,GAAG,QAAA,EAAE,KAAK,QAAA;QAAM,OAAA;YAC9C,GAAG;YACH,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC;SAC9B;IAH+C,CAG/C,CAAC,CACH,CAAC;AACJ,CAAC,CAAC;AAPW,QAAA,iBAAiB,qBAO5B;AAEK,IAAM,kBAAkB,GAAG,UAAC,IAAY;IAC7C,OAAA,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC;AAA9B,CAA8B,CAAC;AADpB,QAAA,kBAAkB,sBACE"}

package/dist/cli/src/apps/catenv/writeDotEnvFiles.d.ts

@@ -0,0 +1,3 @@
+import { type Config } from "../../../../pipeline/src/index.js";
+import type { Choice } from "./types";
+export declare const writeDotEnvFiles: (config: Config, choice?: Choice) => Promise<void>;