@catladder/cli 0.0.0-refactore-catenv-command-validates-argument-78d05852 → 0.0.0-reference-database-url-1befbbee

package/dist/cli/src/apps/catci/catci.js

@@ -0,0 +1,30 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runCatCi = void 0;
+const vorpal_1 = __importDefault(require("vorpal"));
+const packageInfos_1 = __importDefault(require("../../packageInfos"));
+const commands_1 = __importDefault(require("./commands/security/commands"));
+function reconstructArgs(args) {
+    return [args[0], ...args.slice(1).map((arg) => `"${arg}"`)].join(" ");
+}
+async function runCatCi() {
+    const vorpal = new vorpal_1.default();
+    process.exitCode = 0;
+    vorpal.delimiter("catci $").history("catci").version(packageInfos_1.default.version);
+    (0, commands_1.default)(vorpal);
+    const isInteractive = process.argv.length <= 2;
+    if (isInteractive) {
+        vorpal.log(`Catladder CI Tools 😻🔨 version ${packageInfos_1.default.version}`).show();
+    }
+    else {
+        process.exitCode = 1;
+        const args = reconstructArgs(process.argv.slice(2));
+        await vorpal.exec(args);
+        process.exit();
+    }
+}
+exports.runCatCi = runCatCi;
+//# sourceMappingURL=catci.js.map

package/dist/cli/src/apps/catci/catci.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catci.js","sourceRoot":"","sources":["../../../../../src/apps/catci/catci.ts"],"names":[],"mappings":";;;;;;AAAA,oDAA4B;AAC5B,sEAA6C;AAC7C,4EAA4D;AAE5D,SAAS,eAAe,CAAC,IAAc;IACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACxE,CAAC;AAEM,KAAK,UAAU,QAAQ;IAC5B,MAAM,MAAM,GAAG,IAAI,gBAAM,EAAE,CAAC;IAE5B,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACrB,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,sBAAW,CAAC,OAAO,CAAC,CAAC;IAE1E,IAAA,kBAAgB,EAAC,MAAM,CAAC,CAAC;IAEzB,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;IAC/C,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,CAAC,GAAG,CAAC,mCAAmC,sBAAW,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9E,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,OAAO,CAAC,IAAI,EAAE,CAAC;IACjB,CAAC;AACH,CAAC;AAjBD,4BAiBC"}

package/dist/cli/src/apps/catci/commands/security/auditDocument.d.ts

@@ -0,0 +1,19 @@
+export declare function makeTemplate(): string;
+export type SecurityEvaluation = {
+    topics: {
+        description: string;
+        responsibles: string[];
+        note: string;
+        isUnknown: boolean;
+        isAnswered: boolean;
+        isSecured: boolean;
+    }[];
+    score: {
+        rating: number;
+        totalTopics: number;
+        answeredTopics: number;
+        securedTopics: number;
+        unknownTopics: number;
+    };
+};
+export declare function evaluateDocument(document: string): SecurityEvaluation;

package/dist/cli/src/apps/catci/commands/security/auditDocument.js

@@ -0,0 +1,109 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.evaluateDocument = exports.makeTemplate = void 0;
+const topics_json_1 = __importDefault(require("./topics.json"));
+const allTopics = topics_json_1.default;
+const checkYes = "✅";
+const checkNo = "❌";
+const checkPlaceholder = `${checkYes}/${checkNo}`;
+const responsiblePlaceholder = "@...";
+const rows = [
+    ["Responsible", checkPlaceholder, "Description", "Note", "More Information"],
+].concat(allTopics.map((t) => [
+    Array(t.responsibles).fill(responsiblePlaceholder).join(", "),
+    checkPlaceholder,
+    t.description,
+    "",
+    t.more,
+]));
+function makeTable(rows) {
+    const colWidths = calculateColumnWidths(rows);
+    return `
+${makeRow(rows[0], colWidths, " ")}
+${makeRow(rows[0].map(() => ""), colWidths, "-")}
+${rows
+        .slice(1)
+        .map((row) => makeRow(row, colWidths, " "))
+        .join("\n")}
+`;
+}
+function calculateColumnWidths(rows) {
+    const columnCount = rows[0].length;
+    return Array.from({ length: columnCount }, (_, i) => i).map((columnIndex) => Math.max(...rows.map((row) => row[columnIndex].length)));
+}
+function makeRow(row, colWidths, fillString) {
+    return `| ${row
+        .map((cell, i) => cell.padEnd(colWidths[i], fillString))
+        .join(" | ")} |`;
+}
+function makeTemplate() {
+    return `
+# Security Audit Report
+
+A security audit report document is a comprehensive assessment of an application's security posture, containing security topics that auditors can mark to indicate the state of various security aspects.
+
+It serves as a structured guide for security team to evaluate different security factors such as authentication, authorization, data encryption, input validation, and more.
+
+## General Information
+
+- Project Owner is @...
+- Dev team:
+  - @...
+  - @...
+  - @...
+
+## Project Security
+
+${makeTable(rows)}
+
+`;
+}
+exports.makeTemplate = makeTemplate;
+function evaluateDocument(document) {
+    var _a, _b;
+    const rawRows = (_b = (_a = document.match(/^\s*\|.*?\|\s*$/gm)) === null || _a === void 0 ? void 0 : _a.map((row) => row.trim())) !== null && _b !== void 0 ? _b : [];
+    const matchedRows = rawRows
+        .map((row) => row.split("|").map((col) => col.trim()))
+        .slice(2);
+    const knownTopics = new Set(allTopics.map((t) => t.description));
+    const topics = matchedRows.map((col) => {
+        const responsibles = col[1].split(", ");
+        const answer = col[2];
+        const description = col[3];
+        const note = col[4];
+        const isUnknown = !knownTopics.has(description);
+        const isAnswered = !isUnknown &&
+            !answer.includes(checkPlaceholder) &&
+            !responsibles.some((responsible) => responsible.includes(responsiblePlaceholder));
+        const isSecured = !isUnknown && isAnswered && answer.includes(checkYes);
+        return {
+            responsibles,
+            answer,
+            description,
+            note,
+            isUnknown,
+            isAnswered,
+            isSecured,
+        };
+    });
+    const totalTopics = allTopics.length;
+    const answeredTopics = topics.filter((t) => t.isAnswered).length;
+    const securedTopics = topics.filter((t) => t.isSecured).length;
+    const unknownTopics = topics.filter((t) => t.isUnknown).length;
+    const rating = Math.round((securedTopics / totalTopics) * 100);
+    return {
+        topics,
+        score: {
+            rating,
+            totalTopics,
+            answeredTopics,
+            securedTopics,
+            unknownTopics,
+        },
+    };
+}
+exports.evaluateDocument = evaluateDocument;
+//# sourceMappingURL=auditDocument.js.map

package/dist/cli/src/apps/catci/commands/security/auditDocument.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auditDocument.js","sourceRoot":"","sources":["../../../../../../../src/apps/catci/commands/security/auditDocument.ts"],"names":[],"mappings":";;;;;;AAAA,gEAAuC;AAQvC,MAAM,SAAS,GAAY,qBAAU,CAAC;AAEtC,MAAM,QAAQ,GAAG,GAAG,CAAC;AACrB,MAAM,OAAO,GAAG,GAAG,CAAC;AAEpB,MAAM,gBAAgB,GAAG,GAAG,QAAQ,IAAI,OAAO,EAAE,CAAC;AAClD,MAAM,sBAAsB,GAAG,MAAM,CAAC;AACtC,MAAM,IAAI,GAAG;IACX,CAAC,aAAa,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,EAAE,kBAAkB,CAAC;CAC7E,CAAC,MAAM,CACN,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACnB,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;IAC7D,gBAAgB;IAChB,CAAC,CAAC,WAAW;IACb,EAAE;IACF,CAAC,CAAC,IAAI;CACP,CAAC,CACH,CAAC;AAEF,SAAS,SAAS,CAAC,IAAgB;IACjC,MAAM,SAAS,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAE9C,OAAO;EACP,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC;EAChC,OAAO,CACP,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EACrB,SAAS,EACT,GAAG,CACJ;EACC,IAAI;SACH,KAAK,CAAC,CAAC,CAAC;SACR,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;SAC1C,IAAI,CAAC,IAAI,CAAC;CACZ,CAAC;AACF,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAgB;IAC7C,MAAM,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACnC,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAC1E,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CACxD,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,GAAa,EAAE,SAAmB,EAAE,UAAkB;IACrE,OAAO,KAAK,GAAG;SACZ,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;SACvD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,SAAgB,YAAY;IAC1B,OAAO;;;;;;;;;;;;;;;;;EAiBP,SAAS,CAAC,IAAI,CAAC;;CAEhB,CAAC;AACF,CAAC;AArBD,oCAqBC;AAoBD,SAAgB,gBAAgB,CAAC,QAAgB;;IAC/C,MAAM,OAAO,GACX,MAAA,MAAA,QAAQ,CAAC,KAAK,CAAC,mBAAmB,CAAC,0CAAE,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,mCAAI,EAAE,CAAC;IACtE,MAAM,WAAW,GAAG,OAAO;SACxB,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;SACrD,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;IAEjE,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACrC,MAAM,YAAY,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QACtB,MAAM,WAAW,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QAEpB,MAAM,SAAS,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,UAAU,GACd,CAAC,SAAS;YACV,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YAClC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CACjC,WAAW,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAC7C,CAAC;QACJ,MAAM,SAAS,GAAG,CAAC,SAAS,IAAI,UAAU,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAExE,OAAO;YACL,YAAY;YACZ,MAAM;YACN,WAAW;YACX,IAAI;YACJ,SAAS;YACT,UAAU;YACV,SAAS;SACV,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC;IACrC,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC;IACjE,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC;IAC/D,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC;IAE/D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,aAAa,GAAG,WAAW,CAAC,GAAG,GAAG,CAAC,CAAC;IAE/D,OAAO;QACL,MAAM;QACN,KAAK,EAAE;YACL,MAAM;YACN,WAAW;YACX,cAAc;YACd,aAAa;YACb,aAAa;SACd;KACF,CAAC;AACJ,CAAC;AAnDD,4CAmDC"}

package/dist/cli/src/apps/catci/commands/security/commands.js

@@ -0,0 +1,110 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const evaluateSecurityAudit_1 = require("./evaluateSecurityAudit");
+const rest_1 = require("@gitbeaker/rest");
+const createSecurityAuditMergeRequest_1 = require("./createSecurityAuditMergeRequest");
+const ts_results_es_1 = require("ts-results-es");
+const GITLAB_HOST = "https://git.panter.ch";
+function default_1(vorpal) {
+    commandCiJob(vorpal);
+    commandEvaluate(vorpal);
+    commandCreate(vorpal);
+}
+exports.default = default_1;
+function resultAsExitCode(func) {
+    return async (args) => {
+        const result = await func(args);
+        process.exitCode = result.isErr() ? 1 : 0;
+    };
+}
+async function commandCiJob(vorpal) {
+    vorpal
+        .command("security-audit-ci-job <path> <token> <mainBranch> <projectId> <userId>", `Evaluates security audit document. If the document can't be evaluated or does not exist, creates a new MR with security audit document template.
+
+<path> root path of a project with security audit document (${createSecurityAuditMergeRequest_1.SECURITY_AUDIT_FILE_NAME})
+<token> gitlab token with 'api' scopes and permissions to create a new branch
+<main-branch> main branch name
+<project-id> project id to create security audit for
+<user-id> gitlab user id that will be assignee of the audit
+`)
+        .action(resultAsExitCode(async (args) => {
+        const evaluation = await (0, evaluateSecurityAudit_1.evaluateSecurityAudit)({ path: args.path });
+        if (evaluation.isErr()) {
+            console.log("could not evaluate security audit document");
+            console.log("creating new merge request with security audit template...");
+            const { token, mainBranch, projectId, userId } = args;
+            const api = new rest_1.Gitlab({
+                host: GITLAB_HOST,
+                token,
+            });
+            const mr = await (0, createSecurityAuditMergeRequest_1.createSecurityAuditMergeRequest)({
+                api,
+                mainBranch,
+                projectId,
+                userId: parseInt(userId),
+            });
+            if (mr.isErr()) {
+                console.error(`could not create merge request with security audit template: ${mr.error}`);
+                return mr;
+            }
+            console.log("security audit merge request created successfully");
+            console.log(`please finish the MR by updating SECURITY.md document: ${mr.value.web_url}`);
+            return (0, ts_results_es_1.Err)("merge request created");
+        }
+        if (evaluation.value.score.answeredTopics === 0) {
+            console.error("audit document has no answered topics");
+            console.error(`please answer security topics in ${createSecurityAuditMergeRequest_1.SECURITY_AUDIT_FILE_NAME} by adding responsible people and check/cross in the table`);
+            return (0, ts_results_es_1.Err)("audit document has no answered topics");
+        }
+        console.log((0, evaluateSecurityAudit_1.makeSecurityAuditOverview)(evaluation.value));
+        return (0, ts_results_es_1.Ok)({});
+    }));
+}
+async function commandEvaluate(vorpal) {
+    vorpal
+        .command("security-audit-evaluate <path>", "Evaluates security audit document in given <path>")
+        .action(resultAsExitCode(async (args) => {
+        console.log("evaluating security audit document...");
+        const result = await (0, evaluateSecurityAudit_1.evaluateSecurityAudit)({ path: args.path });
+        if (result.isErr()) {
+            console.error(result.error);
+            console.error(`please make sure the security audit document ${createSecurityAuditMergeRequest_1.SECURITY_AUDIT_FILE_NAME} is in the repository`);
+        }
+        else {
+            console.log((0, evaluateSecurityAudit_1.makeSecurityAuditOverview)(result.value));
+        }
+        return result;
+    }));
+}
+async function commandCreate(vorpal) {
+    vorpal
+        .command("security-audit-create <token> <mainBranch> <projectId> <userId>", `Creates a MR in given project with the latest security audit template document
+
+<token> gitlab token with 'api' scopes and permissions to create a new branch
+<main-branch> main branch name
+<project-id> project id to create security audit for
+<user-id> gitlab user id that will be assignee of the audit
+`)
+        .action(resultAsExitCode(async (args) => {
+        const { token, mainBranch, projectId, userId } = args;
+        const api = new rest_1.Gitlab({
+            host: GITLAB_HOST,
+            token,
+        });
+        const result = await (0, createSecurityAuditMergeRequest_1.createSecurityAuditMergeRequest)({
+            api,
+            mainBranch,
+            projectId,
+            userId: parseInt(userId),
+        });
+        if (result.isErr()) {
+            console.error(`could not create security audit merge request: ${result.error}`);
+        }
+        else {
+            console.log("security audit merge request created successfully");
+            console.log(`please finish the MR by updating SECURITY.md document: ${result.value.web_url}`);
+        }
+        return result;
+    }));
+}
+//# sourceMappingURL=commands.js.map

package/dist/cli/src/apps/catci/commands/security/commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands.js","sourceRoot":"","sources":["../../../../../../../src/apps/catci/commands/security/commands.ts"],"names":[],"mappings":";;AACA,mEAGiC;AACjC,0CAAyC;AACzC,uFAG2C;AAC3C,iDAAqD;AAErD,MAAM,WAAW,GAAG,uBAAuB,CAAC;AAE5C,mBAAyB,MAAc;IACrC,YAAY,CAAC,MAAM,CAAC,CAAC;IACrB,eAAe,CAAC,MAAM,CAAC,CAAC;IACxB,aAAa,CAAC,MAAM,CAAC,CAAC;AACxB,CAAC;AAJD,4BAIC;AAID,SAAS,gBAAgB,CACvB,IAA8D;IAE9D,OAAO,KAAK,EAAE,IAAiB,EAAE,EAAE;QACjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,MAAc;IACxC,MAAM;SACH,OAAO,CACN,wEAAwE,EACxE;;8DAEwD,0DAAwB;;;;;CAKrF,CACI;SACA,MAAM,CACL,gBAAgB,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QAC9B,MAAM,UAAU,GAAG,MAAM,IAAA,6CAAqB,EAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAEpE,IAAI,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;YAC1D,OAAO,CAAC,GAAG,CACT,4DAA4D,CAC7D,CAAC;YAEF,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;YACtD,MAAM,GAAG,GAAG,IAAI,aAAM,CAAC;gBACrB,IAAI,EAAE,WAAW;gBACjB,KAAK;aACN,CAAC,CAAC;YAEH,MAAM,EAAE,GAAG,MAAM,IAAA,iEAA+B,EAAC;gBAC/C,GAAG;gBACH,UAAU;gBACV,SAAS;gBACT,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC;aACzB,CAAC,CAAC;YAEH,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CACX,gEAAgE,EAAE,CAAC,KAAK,EAAE,CAC3E,CAAC;gBACF,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;YACjE,OAAO,CAAC,GAAG,CACT,0DAA0D,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,CAC7E,CAAC;YACF,OAAO,IAAA,mBAAG,EAAC,uBAAgC,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,KAAK,CAAC,EAAE,CAAC;YAChD,OAAO,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;YACvD,OAAO,CAAC,KAAK,CACX,oCAAoC,0DAAwB,4DAA4D,CACzH,CAAC;YACF,OAAO,IAAA,mBAAG,EAAC,uCAAgD,CAAC,CAAC;QAC/D,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,IAAA,iDAAyB,EAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QACzD,OAAO,IAAA,kBAAE,EAAC,EAAE,CAAC,CAAC;IAChB,CAAC,CAAC,CACH,CAAC;AACN,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,MAAc;IAC3C,MAAM;SACH,OAAO,CACN,gCAAgC,EAChC,mDAAmD,CACpD;SACA,MAAM,CACL,gBAAgB,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QAC9B,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;QAErD,MAAM,MAAM,GAAG,MAAM,IAAA,6CAAqB,EAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAChE,IAAI,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;YACnB,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5B,OAAO,CAAC,KAAK,CACX,gDAAgD,0DAAwB,uBAAuB,CAChG,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,IAAA,iDAAyB,EAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACvD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CACH,CAAC;AACN,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,MAAc;IACzC,MAAM;SACH,OAAO,CACN,iEAAiE,EACjE;;;;;;CAML,CACI;SACA,MAAM,CACL,gBAAgB,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QAC9B,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QAEtD,MAAM,GAAG,GAAG,IAAI,aAAM,CAAC;YACrB,IAAI,EAAE,WAAW;YACjB,KAAK;SACN,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,IAAA,iEAA+B,EAAC;YACnD,GAAG;YACH,UAAU;YACV,SAAS;YACT,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC;SACzB,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;YACnB,OAAO,CAAC,KAAK,CACX,kDAAkD,MAAM,CAAC,KAAK,EAAE,CACjE,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;YACjE,OAAO,CAAC,GAAG,CACT,0DAA0D,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CACjF,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CACH,CAAC;AACN,CAAC"}

package/dist/cli/src/apps/catci/commands/security/createSecurityAuditMergeRequest.js

@@ -0,0 +1,52 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createSecurityAuditMergeRequest = exports.SECURITY_AUDIT_FILE_NAME = void 0;
+const ts_results_es_1 = require("ts-results-es");
+const auditDocument_1 = require("./auditDocument");
+function makeDatedBranchName(branchName) {
+    const date = new Date().toISOString().slice(0, -5).replaceAll(/[:.T]/g, "-");
+    return `${branchName}-${date}`;
+}
+const MR_TITLE = "Draft: chore(security): add security audit document";
+exports.SECURITY_AUDIT_FILE_NAME = "SECURITY.md";
+async function createSecurityAuditMergeRequest({ projectId, mainBranch, userId, api, }) {
+    const mrs = (await ts_results_es_1.Result.wrapAsync(() => api.MergeRequests.all({
+        state: "opened",
+        wip: "yes",
+        labels: "security-audit",
+    }))).mapErr(() => `could not search for existing merge requests`);
+    if (mrs.isErr())
+        return mrs;
+    const existingMr = mrs.value[0];
+    if (existingMr)
+        return (0, ts_results_es_1.Err)(`open merge request with security audit already exists: ${existingMr.web_url}`);
+    const auditTemplate = ts_results_es_1.Result.wrap(() => (0, auditDocument_1.makeTemplate)()).mapErr(() => "could not make security audit template document");
+    if (auditTemplate.isErr())
+        return auditTemplate;
+    const branch = (await ts_results_es_1.Result.wrapAsync(() => api.Branches.create(projectId, makeDatedBranchName("chore/security-audit"), mainBranch))).mapErr((e) => {
+        console.log(e);
+        return "could not create branch";
+    });
+    if (branch.isErr())
+        return branch;
+    const commit = (await ts_results_es_1.Result.wrapAsync(() => api.Commits.create(projectId, branch.value.name, "chore(security): add empty security audit document template", [
+        {
+            action: "create",
+            filePath: exports.SECURITY_AUDIT_FILE_NAME,
+            content: auditTemplate.value,
+            encoding: "text",
+        },
+    ]))).mapErr(() => "could not create commit");
+    if (commit.isErr())
+        return commit;
+    const mr = (await ts_results_es_1.Result.wrapAsync(() => api.MergeRequests.create(projectId, branch.value.name, mainBranch, MR_TITLE, {
+        description: `Please follow and update security audit document in \`${exports.SECURITY_AUDIT_FILE_NAME}\`.`,
+        assigneeId: userId,
+        squash: true,
+        labels: "security-audit",
+        removeSourceBranch: true,
+    }))).mapErr(() => "could not create merge request");
+    return mr;
+}
+exports.createSecurityAuditMergeRequest = createSecurityAuditMergeRequest;
+//# sourceMappingURL=createSecurityAuditMergeRequest.js.map

package/dist/cli/src/apps/catci/commands/security/createSecurityAuditMergeRequest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createSecurityAuditMergeRequest.js","sourceRoot":"","sources":["../../../../../../../src/apps/catci/commands/security/createSecurityAuditMergeRequest.ts"],"names":[],"mappings":";;;AACA,iDAA4C;AAC5C,mDAA+C;AAE/C,SAAS,mBAAmB,CAAC,UAAkB;IAC7C,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC7E,OAAO,GAAG,UAAU,IAAI,IAAI,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,QAAQ,GAAG,qDAAqD,CAAC;AAC1D,QAAA,wBAAwB,GAAG,aAAsB,CAAC;AAExD,KAAK,UAAU,+BAA+B,CAAC,EACpD,SAAS,EACT,UAAU,EACV,MAAM,EACN,GAAG,GAMJ;IACC,MAAM,GAAG,GAAG,CACV,MAAM,sBAAM,CAAC,SAAS,CAAC,GAAG,EAAE,CAC1B,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC;QACpB,KAAK,EAAE,QAAQ;QACf,GAAG,EAAE,KAAK;QACV,MAAM,EAAE,gBAAgB;KACzB,CAAC,CACH,CACF,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,8CAAuD,CAAC,CAAC;IACxE,IAAI,GAAG,CAAC,KAAK,EAAE;QAAE,OAAO,GAAG,CAAC;IAE5B,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAChC,IAAI,UAAU;QACZ,OAAO,IAAA,mBAAG,EACR,0DAA0D,UAAU,CAAC,OAAO,EAAE,CAC/E,CAAC;IAEJ,MAAM,aAAa,GAAG,sBAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAA,4BAAY,GAAE,CAAC,CAAC,MAAM,CAC5D,GAAG,EAAE,CAAC,iDAA0D,CACjE,CAAC;IACF,IAAI,aAAa,CAAC,KAAK,EAAE;QAAE,OAAO,aAAa,CAAC;IAEhD,MAAM,MAAM,GAAG,CACb,MAAM,sBAAM,CAAC,SAAS,CAAC,GAAG,EAAE,CAC1B,GAAG,CAAC,QAAQ,CAAC,MAAM,CACjB,SAAS,EACT,mBAAmB,CAAC,sBAAsB,CAAC,EAC3C,UAAU,CACX,CACF,CACF,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACb,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACf,OAAO,yBAAkC,CAAC;IAC5C,CAAC,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,KAAK,EAAE;QAAE,OAAO,MAAM,CAAC;IAElC,MAAM,MAAM,GAAG,CACb,MAAM,sBAAM,CAAC,SAAS,CAAC,GAAG,EAAE,CAC1B,GAAG,CAAC,OAAO,CAAC,MAAM,CAChB,SAAS,EACT,MAAM,CAAC,KAAK,CAAC,IAAI,EACjB,6DAA6D,EAC7D;QACE;YACE,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE,gCAAwB;YAClC,OAAO,EAAE,aAAa,CAAC,KAAK;YAC5B,QAAQ,EAAE,MAAM;SACjB;KACF,CACF,CACF,CACF,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,yBAAkC,CAAC,CAAC;IACnD,IAAI,MAAM,CAAC,KAAK,EAAE;QAAE,OAAO,MAAM,CAAC;IAElC,MAAM,EAAE,GAAG,CACT,MAAM,sBAAM,CAAC,SAAS,CAAC,GAAG,EAAE,CAC1B,GAAG,CAAC,aAAa,CAAC,MAAM,CACtB,SAAS,EACT,MAAM,CAAC,KAAK,CAAC,IAAI,EACjB,UAAU,EACV,QAAQ,EACR;QACE,WAAW,EAAE,yDAAyD,gCAAwB,KAAK;QACnG,UAAU,EAAE,MAAM;QAClB,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,gBAAgB;QACxB,kBAAkB,EAAE,IAAI;KACzB,CACF,CACF,CACF,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,gCAAyC,CAAC,CAAC;IAE1D,OAAO,EAAE,CAAC;AACZ,CAAC;AArFD,0EAqFC"}

package/dist/cli/src/apps/catci/commands/security/evaluateSecurityAudit.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.makeSecurityAuditOverview = exports.evaluateSecurityAudit = void 0;
+const ts_results_es_1 = require("ts-results-es");
+const path_1 = require("path");
+const promises_1 = require("fs/promises");
+const createSecurityAuditMergeRequest_1 = require("./createSecurityAuditMergeRequest");
+const auditDocument_1 = require("./auditDocument");
+async function evaluateSecurityAudit({ path }) {
+    return (await ts_results_es_1.Result.wrapAsync(async () => {
+        const filePath = (0, path_1.join)(path, createSecurityAuditMergeRequest_1.SECURITY_AUDIT_FILE_NAME);
+        const docData = await (0, promises_1.readFile)(filePath);
+        const doc = docData.toString("utf-8");
+        return (0, auditDocument_1.evaluateDocument)(doc);
+    })).mapErr((e) => `could not evaluate ${createSecurityAuditMergeRequest_1.SECURITY_AUDIT_FILE_NAME}: ${e}`);
+}
+exports.evaluateSecurityAudit = evaluateSecurityAudit;
+function makeSecurityAuditOverview(evaluation) {
+    const ratingToEmo = (r) => (r < 33 ? "🟥" : r < 66 ? "🟨" : "🟩");
+    return `Project security posture overview:
+ 🧐 Total topics: ${evaluation.score.totalTopics}
+ 🔒 Secured topics: ${evaluation.score.securedTopics}
+ 📢 Answered topics: ${evaluation.score.answeredTopics}
+ ❔ Unknown topics: ${evaluation.score.unknownTopics}
+ 📊 Rating: ${ratingToEmo(evaluation.score.rating)} ${evaluation.score.rating}/100`;
+}
+exports.makeSecurityAuditOverview = makeSecurityAuditOverview;
+//# sourceMappingURL=evaluateSecurityAudit.js.map

package/dist/cli/src/apps/catci/commands/security/evaluateSecurityAudit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluateSecurityAudit.js","sourceRoot":"","sources":["../../../../../../../src/apps/catci/commands/security/evaluateSecurityAudit.ts"],"names":[],"mappings":";;;AAAA,iDAAuC;AACvC,+BAA4B;AAC5B,0CAAuC;AACvC,uFAA6E;AAE7E,mDAAmD;AAE5C,KAAK,UAAU,qBAAqB,CAAC,EAAE,IAAI,EAAoB;IACpE,OAAO,CACL,MAAM,sBAAM,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE;QAChC,MAAM,QAAQ,GAAG,IAAA,WAAI,EAAC,IAAI,EAAE,0DAAwB,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,MAAM,IAAA,mBAAQ,EAAC,QAAQ,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACtC,OAAO,IAAA,gCAAgB,EAAC,GAAG,CAAC,CAAC;IAC/B,CAAC,CAAC,CACH,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,0DAAwB,KAAK,CAAC,EAAE,CAAC,CAAC;AAC1E,CAAC;AATD,sDASC;AAED,SAAgB,yBAAyB,CAAC,UAA8B;IACtE,MAAM,WAAW,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAE1E,OAAO;oBACW,UAAU,CAAC,KAAK,CAAC,WAAW;sBAC1B,UAAU,CAAC,KAAK,CAAC,aAAa;uBAC7B,UAAU,CAAC,KAAK,CAAC,cAAc;qBACjC,UAAU,CAAC,KAAK,CAAC,aAAa;cACrC,WAAW,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,IAC/C,UAAU,CAAC,KAAK,CAAC,MACnB,MAAM,CAAC;AACR,CAAC;AAXD,8DAWC"}

package/dist/cli/src/apps/catci/commands/security/topics.json

@@ -0,0 +1,117 @@
+[
+    {
+        "description": "No API keys or secrets are stored in repository",
+        "responsibles": 1,
+        "more": ""
+    },
+    {
+        "description": "The app does not provide password login",
+        "responsibles": 1,
+        "more": ""
+    },
+    {
+        "description": "Passwords are not stored",
+        "responsibles": 1,
+        "more": ""
+    },
+    {
+        "description": "No sensitive information (passwords, keys, user data, ...) is logged or traced",
+        "responsibles": 1,
+        "more": "[Logging guide](https://www.notion.so/panterch/Long-story-logging-022722bb878f4724ae5b49e17667b630?pvs=4#9e5a36b7158a4953b73ec6a345bd8989), [Tracing guide](https://www.notion.so/panterch/Long-story-tracing-d8a9ec1ac2ff4fa78cefa8991233224e?pvs=4#535121b5bf9741fbaf8654b4b64d879d)"
+    },
+    {
+        "description": "Passwords are stored hashed with salt and salt is not stored in the repository",
+        "responsibles": 1,
+        "more": "[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/hash.md)"
+    },
+    {
+        "description": "Input that ends up in DOM is properly sanitized",
+        "responsibles": 1,
+        "more": "[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/xss.md)"
+    },
+    {
+        "description": "All user inputs have reasonable validations",
+        "responsibles": 1,
+        "more": "[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/validation.md)"
+    },
+    {
+        "description": "The app is not using cookies",
+        "responsibles": 1,
+        "more": "[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/cookies.md)"
+    },
+    {
+        "description": "The app is using cookies and cookies are properly configured",
+        "responsibles": 1,
+        "more": "[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/cookies.md)"
+    },
+    {
+        "description": "The app uses JWT with a secret and the secret is not stored in the repository",
+        "responsibles": 1,
+        "more": "[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/cookies.md)"
+    },
+    {
+        "description": "Authorization and user roles (RBAC) were reviewed thoroughly",
+        "responsibles": 2,
+        "more": "[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/authorization.md)"
+    },
+    {
+        "description": "CORS headers do not use `*`",
+        "responsibles": 1,
+        "more": "[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/cors.md)"
+    },
+    {
+        "description": "CSP headers are properly configured (no `unsafe-inline` or `unsafe-eval`)",
+        "responsibles": 1,
+        "more": "[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/csp.md)"
+    },
+    {
+        "description": "DoS defense mechanism is implemented",
+        "responsibles": 1,
+        "more": "[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/dos.md)"
+    },
+    {
+        "description": "YAML/XML parsing is not used or used YAML/XML parsers have disabled DTD",
+        "responsibles": 1,
+        "more": "[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/dos.md)"
+    },
+    {
+        "description": "The app implements CSRF prevention",
+        "responsibles": 1,
+        "more": "[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/csrf.md)"
+    },
+    {
+        "description": "The app has a rate limitter",
+        "responsibles": 1,
+        "more": ""
+    },
+    {
+        "description": "The app has disabled GraphQL introspection and schema registry",
+        "responsibles": 1,
+        "more": "[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/graphql.md)"
+    },
+    {
+        "description": "The app has set GraphQL complexity query limits",
+        "responsibles": 1,
+        "more": "[guide](https://git.panter.ch/panter/security-guide/-/blob/main/docs/audit/graphql.md)"
+    },
+    {
+        "description": "`sitemap.xml` does not leak any routes with sensitive data",
+        "responsibles": 1,
+        "more": ""
+    },
+    {
+        "description": "Cloud storage is (private) configured to not leak any sensitive data publicly",
+        "responsibles": 1,
+        "more": ""
+    },
+    {
+        "description": "Security Dashboard checks weekly vulnerable dependencies https://dep.panter.swiss/",
+        "responsibles": 1,
+        "more": ""
+    },
+    {
+        "description": "The app has `.well-known/security.txt` https://securitytxt.org/",
+        "responsibles": 1,
+        "more": ""
+    }
+]

package/dist/cli/src/apps/catenv/catenv.d.ts

@@ -0,0 +1,3 @@
+import type { Choice } from "./types";
+declare const _default: (choice?: Choice) => Promise<void>;
+export default _default;

package/dist/cli/src/apps/catenv/catenv.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const getProjectConfig_1 = require("../../config/getProjectConfig");
+const printVariables_1 = require("./printVariables");
+const writeDotEnvFiles_1 = require("./writeDotEnvFiles");
+const writeEnvDTs_1 = require("./writeEnvDTs");
+const pipeline_1 = require("../../../../pipeline/src/index.js");
+exports.default = async (choice) => {
+    var _a;
+    const config = await (0, getProjectConfig_1.getProjectConfig)();
+    if (!config) {
+        return;
+    }
+    await Promise.all([
+        (0, pipeline_1.generatePipelineFiles)(config, (_a = config.pipelineType) !== null && _a !== void 0 ? _a : "gitlab"),
+        (0, writeDotEnvFiles_1.writeDotEnvFiles)(config, choice),
+        (0, writeEnvDTs_1.writeDTsFiles)(config, choice),
+        (0, printVariables_1.printVariables)(config, choice),
+    ]);
+};
+//# sourceMappingURL=catenv.js.map

package/dist/cli/src/apps/catenv/catenv.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catenv.js","sourceRoot":"","sources":["../../../../../src/apps/catenv/catenv.ts"],"names":[],"mappings":";;AAAA,oEAAiE;AACjE,qDAAkD;AAElD,yDAAsD;AACtD,+CAA8C;AAC9C,kDAA4D;AAE5D,kBAAe,KAAK,EAAE,MAAe,EAAE,EAAE;;IACvC,MAAM,MAAM,GAAG,MAAM,IAAA,mCAAgB,GAAE,CAAC;IACxC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;IACT,CAAC;IAED,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,IAAA,gCAAqB,EAAC,MAAM,EAAE,MAAA,MAAM,CAAC,YAAY,mCAAI,QAAQ,CAAC;QAC9D,IAAA,mCAAgB,EAAC,MAAM,EAAE,MAAM,CAAC;QAEhC,IAAA,2BAAa,EAAC,MAAM,EAAE,MAAM,CAAC;QAE7B,IAAA,+BAAc,EAAC,MAAM,EAAE,MAAM,CAAC;KAC/B,CAAC,CAAC;AACL,CAAC,CAAC"}

package/dist/cli/src/apps/catenv/printVariables.d.ts

@@ -0,0 +1,3 @@
+import type { Config } from "../../../../pipeline/src/index.js";
+import type { Choice } from "./types";
+export declare const printVariables: (config: Config, choice?: Choice) => Promise<void>;

package/dist/cli/src/apps/catenv/printVariables.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.printVariables = void 0;
+const getProjectConfig_1 = require("../../config/getProjectConfig");
+const utils_1 = require("./utils");
+const getAllVariablesToPrint = async (config, choice) => {
+    var _a;
+    const { env, currentComponent } = await (0, utils_1.getCurrentComponentAndEnvFromChoice)(config, choice);
+    if (currentComponent) {
+        // don't print vars if dotenv is enabled
+        if ((_a = config.components[currentComponent].dotEnv) !== null && _a !== void 0 ? _a : true) {
+            return {};
+        }
+        return await (0, getProjectConfig_1.getEnvVarsResolved)(null, env, currentComponent);
+    }
+    else {
+        // when in a monorep and not in a subapp, merge all env vars.
+        // this is not 100% correct, but better than not exporting any vars at all
+        // so we also add prefixed variants
+        return await Object.keys(config.components).reduce(async (acc, componentName) => {
+            var _a;
+            // don't print vars if dotenv is enabled
+            if ((_a = config.components[componentName].dotEnv) !== null && _a !== void 0 ? _a : true) {
+                return await acc;
+            }
+            const subappvars = await (0, getProjectConfig_1.getEnvVarsResolved)(null, env, componentName);
+            delete subappvars["_ALL_ENV_VAR_KEYS"];
+            return {
+                ...(await acc),
+                ...subappvars,
+                // also add prefixed variants in case
+                ...Object.fromEntries(Object.entries(subappvars).map(([key, value]) => [
+                    `${(0, utils_1.sanitizeEnvVarName)(componentName.toUpperCase())}_${key}`,
+                    value,
+                ])),
+            };
+        }, Promise.resolve({}));
+    }
+};
+const printVariables = async (config, choice) => {
+    const variables = await getAllVariablesToPrint(config, choice);
+    console.log(makeExportKeyValuestring(variables));
+};
+exports.printVariables = printVariables;
+const makeExportKeyValuestring = (variables) => (0, utils_1.makeKeyValueString)(variables, {
+    keyPrefix: "export ",
+    escapeOptions: { quoteMode: "always" },
+});
+//# sourceMappingURL=printVariables.js.map

package/dist/cli/src/apps/catenv/printVariables.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"printVariables.js","sourceRoot":"","sources":["../../../../../src/apps/catenv/printVariables.ts"],"names":[],"mappings":";;;AACA,oEAAmE;AAEnE,mCAIiB;AAEjB,MAAM,sBAAsB,GAAG,KAAK,EAAE,MAAc,EAAE,MAAe,EAAE,EAAE;;IACvE,MAAM,EAAE,GAAG,EAAE,gBAAgB,EAAE,GAAG,MAAM,IAAA,2CAAmC,EACzE,MAAM,EACN,MAAM,CACP,CAAC;IAEF,IAAI,gBAAgB,EAAE,CAAC;QACrB,wCAAwC;QACxC,IAAI,MAAA,MAAM,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,MAAM,mCAAI,IAAI,EAAE,CAAC;YACvD,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,MAAM,IAAA,qCAAkB,EAAC,IAAI,EAAE,GAAG,EAAE,gBAAgB,CAAC,CAAC;IAC/D,CAAC;SAAM,CAAC;QACN,6DAA6D;QAC7D,0EAA0E;QAC1E,mCAAmC;QACnC,OAAO,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAChD,KAAK,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE;;YAC3B,wCAAwC;YACxC,IAAI,MAAA,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,MAAM,mCAAI,IAAI,EAAE,CAAC;gBACpD,OAAO,MAAM,GAAG,CAAC;YACnB,CAAC;YACD,MAAM,UAAU,GAAG,MAAM,IAAA,qCAAkB,EAAC,IAAI,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC;YACtE,OAAO,UAAU,CAAC,mBAAmB,CAAC,CAAC;YACvC,OAAO;gBACL,GAAG,CAAC,MAAM,GAAG,CAAC;gBACd,GAAG,UAAU;gBACb,qCAAqC;gBACrC,GAAG,MAAM,CAAC,WAAW,CACnB,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;oBAC/C,GAAG,IAAA,0BAAkB,EAAC,aAAa,CAAC,WAAW,EAAE,CAAC,IAAI,GAAG,EAAE;oBAC3D,KAAK;iBACN,CAAC,CACH;aACF,CAAC;QACJ,CAAC,EACD,OAAO,CAAC,OAAO,CAAC,EAA4B,CAAC,CAC9C,CAAC;IACJ,CAAC;AACH,CAAC,CAAC;AAEK,MAAM,cAAc,GAAG,KAAK,EAAE,MAAc,EAAE,MAAe,EAAE,EAAE;IACtE,MAAM,SAAS,GAAG,MAAM,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAE/D,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,SAAS,CAAC,CAAC,CAAC;AACnD,CAAC,CAAC;AAJW,QAAA,cAAc,kBAIzB;AAEF,MAAM,wBAAwB,GAAG,CAAC,SAAiC,EAAE,EAAE,CACrE,IAAA,0BAAkB,EAAC,SAAS,EAAE;IAC5B,SAAS,EAAE,SAAS;IACpB,aAAa,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE;CACvC,CAAC,CAAC"}

package/dist/cli/src/apps/catenv/types.d.ts

@@ -0,0 +1,4 @@
+export type Choice = {
+    env?: string;
+    componentName?: string;
+};

package/dist/cli/src/apps/catenv/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/cli/src/apps/catenv/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../src/apps/catenv/types.ts"],"names":[],"mappings":""}

package/dist/cli/src/apps/catenv/utils.d.ts

@@ -0,0 +1,13 @@
+import type { Config, EscapeForDotEnvOptions } from "../../../../pipeline/src/index.js";
+import type { Choice } from "./types";
+export declare const getComponentFullPath: (gitRoot: string, config: Config, componentName: string) => string;
+export declare const getCurrentComponentAndEnvFromChoice: (config: Config, choice?: Choice) => Promise<{
+    currentComponent: string;
+    env: string;
+}>;
+export type MakeKeyValueStringOptions = {
+    keyPrefix?: string;
+    escapeOptions?: EscapeForDotEnvOptions;
+};
+export declare const makeKeyValueString: (variables: Record<string, string>, { keyPrefix, escapeOptions }?: MakeKeyValueStringOptions) => string;
+export declare const sanitizeEnvVarName: (name: string) => string;