@catladder/cli 3.48.0 → 4.0.1

package/dist/cli/src/commands/project/commandSetup.d.ts

@@ -0,0 +1,8 @@
+export declare const commandSetup: import("../../core").CommandDef<{
+  readonly component: {
+    readonly type: "string";
+    readonly message: "component name";
+    readonly positional: true;
+    readonly required: false;
+  };
+}>;

package/dist/cli/src/commands/project/commandSetup.js

@@ -0,0 +1,25 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.commandSetup = void 0;
+const defineCommand_1 = require("../../core/defineCommand");
+const setup_1 = require("../../apps/cli/commands/project/setup");
+exports.commandSetup = (0, defineCommand_1.defineCommand)({
+  name: "project setup",
+  description: "Initializes all environments and creates required resources, service accounts, etc.",
+  group: "project",
+  inputs: {
+    component: {
+      type: "string",
+      message: "component name",
+      positional: true,
+      required: false
+    }
+  },
+  execute: async ctx => {
+    const component = await ctx.get("component");
+    await (0, setup_1.setupProject)(ctx, component);
+  }
+});

package/dist/cli/src/commands/project/commandSetup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commandSetup.js","sourceRoot":"","sources":["../../../../../src/commands/project/commandSetup.ts"],"names":[],"mappings":";;;AAAA,4DAAyD;AACzD,iEAAqE;AAExD,QAAA,YAAY,GAAG,IAAA,6BAAa,EAAC;IACxC,IAAI,EAAE,eAAe;IACrB,WAAW,EACT,qFAAqF;IACvF,KAAK,EAAE,SAAS;IAChB,MAAM,EAAE;QACN,SAAS,EAAE;YACT,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,gBAAgB;YACzB,UAAU,EAAE,IAAI;YAChB,QAAQ,EAAE,KAAK;SAChB;KACF;IACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACrB,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC7C,MAAM,IAAA,oBAAY,EAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACrC,CAAC;CACF,CAAC,CAAC"}

package/dist/cli/src/commands/project/commandTriggerCronjob.d.ts

@@ -0,0 +1,25 @@
+export declare const commandTriggerCronjobGeneral: import("../../core").CommandDef<{
+  readonly namespace: {
+    readonly type: "string";
+    readonly message: "kubernetes namespace";
+    readonly positional: true;
+  };
+  readonly jobName: {
+    readonly type: "string";
+    readonly message: "Which cronjob? 🤔";
+    readonly choices: (ctx: any) => Promise<string[]>;
+  };
+}>;
+export declare const commandTriggerCronjobProject: import("../../core").CommandDef<{
+  readonly envComponent: {
+    readonly type: "string";
+    readonly message: "environment:component";
+    readonly positional: true;
+    readonly choices: () => Promise<string[]>;
+  };
+  readonly jobName: {
+    readonly type: "string";
+    readonly message: "Which cronjob? 🤔";
+    readonly choices: (ctx: any) => Promise<string[]>;
+  };
+}>;

package/dist/cli/src/commands/project/commandTriggerCronjob.js

@@ -0,0 +1,95 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.commandTriggerCronjobProject = exports.commandTriggerCronjobGeneral = void 0;
+const client_node_1 = require("@kubernetes/client-node");
+const defineCommand_1 = require("../../core/defineCommand");
+const k8sApi_1 = require("../../k8sApi");
+const log_1 = require("../../utils/log");
+const projects_1 = require("../../utils/projects");
+const ensureCluster_1 = require("../../apps/cli/commands/project/utils/ensureCluster");
+const autocompletions_1 = require("../../apps/cli/commands/project/utils/autocompletions");
+const getCronjobChoices = async namespace => {
+  const {
+    body: {
+      items: jobs
+    }
+  } = await (0, k8sApi_1.getk8sApiBatchBeta)().listNamespacedCronJob(namespace);
+  return jobs.map(j => j.metadata.name);
+};
+const runCronjob = async (io, namespace, jobName) => {
+  const {
+    body: {
+      items: jobs
+    }
+  } = await (0, k8sApi_1.getk8sApiBatchBeta)().listNamespacedCronJob(namespace);
+  const cronjob = jobs.find(j => j.metadata.name === jobName);
+  const jobSpec = cronjob.spec.jobTemplate.spec;
+  const job = new client_node_1.V1Job();
+  const metadata = {
+    name: `manual-${Math.round(Date.now() / 1000)}-${cronjob.metadata.name}`
+  };
+  job.metadata = metadata;
+  job.spec = jobSpec;
+  try {
+    const result = await (0, k8sApi_1.getk8sApiBatch)().createNamespacedJob(namespace, job);
+    io.log("");
+    io.log(`yeah, you got a job, man. 😺 ${result.body.metadata.name}`);
+    io.log("");
+  } catch (e) {
+    (0, log_1.logError)(io, "command failed", e.body);
+  }
+};
+exports.commandTriggerCronjobGeneral = (0, defineCommand_1.defineCommand)({
+  name: "kube trigger-cronjob",
+  description: "trigger cronjob",
+  group: "general",
+  inputs: {
+    namespace: {
+      type: "string",
+      message: "kubernetes namespace",
+      positional: true
+    },
+    jobName: {
+      type: "string",
+      message: "Which cronjob? 🤔",
+      choices: async ctx => getCronjobChoices(await ctx.get("namespace"))
+    }
+  },
+  execute: async ctx => {
+    const namespace = await ctx.get("namespace");
+    const jobName = await ctx.get("jobName");
+    await runCronjob(ctx, namespace, jobName);
+  }
+});
+exports.commandTriggerCronjobProject = (0, defineCommand_1.defineCommand)({
+  name: "project trigger-cronjob",
+  description: "trigger cronjob",
+  group: "project",
+  inputs: {
+    envComponent: {
+      type: "string",
+      message: "environment:component",
+      positional: true,
+      choices: async () => (0, autocompletions_1.envAndComponents)()
+    },
+    jobName: {
+      type: "string",
+      message: "Which cronjob? 🤔",
+      choices: async ctx => {
+        const envComponent = await ctx.get("envComponent");
+        const namespace = await (0, projects_1.getProjectNamespace)(envComponent);
+        return getCronjobChoices(namespace);
+      }
+    }
+  },
+  execute: async ctx => {
+    const envComponent = await ctx.get("envComponent");
+    await (0, ensureCluster_1.ensureCluster)(ctx, envComponent);
+    const namespace = await (0, projects_1.getProjectNamespace)(envComponent);
+    const jobName = await ctx.get("jobName");
+    await runCronjob(ctx, namespace, jobName);
+  }
+});

package/dist/cli/src/commands/project/commandTriggerCronjob.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commandTriggerCronjob.js","sourceRoot":"","sources":["../../../../../src/commands/project/commandTriggerCronjob.ts"],"names":[],"mappings":";;;AACA,yDAAgD;AAChD,4DAAyD;AACzD,yCAAkE;AAClE,yCAA2C;AAC3C,mDAA2D;AAC3D,uFAAoF;AACpF,2FAAyF;AAEzF,MAAM,iBAAiB,GAAG,KAAK,EAAE,SAAiB,EAAE,EAAE;IACpD,MAAM,EACJ,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GACtB,GAAG,MAAM,IAAA,2BAAkB,GAAE,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC;IAChE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAa,CAAC;AAC3D,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,KAAK,EACtB,EAAkC,EAClC,SAAiB,EACjB,OAAe,EACf,EAAE;IACF,MAAM,EACJ,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GACtB,GAAG,MAAM,IAAA,2BAAkB,GAAE,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC;IAEhE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;IACnE,MAAM,OAAO,GAAI,OAAe,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;IAEvD,MAAM,GAAG,GAAG,IAAI,mBAAK,EAAE,CAAC;IACxB,MAAM,QAAQ,GAA0B;QACtC,IAAI,EAAE,UAAU,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,IAAK,OAAe,CAAC,QAAQ,CAAC,IAAI,EAAE;KAClF,CAAC;IAEF,GAAG,CAAC,QAAQ,GAAG,QAAwB,CAAC;IACxC,GAAG,CAAC,IAAI,GAAG,OAAO,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAA,uBAAc,GAAE,CAAC,mBAAmB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAC1E,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACX,EAAE,CAAC,GAAG,CACJ,gCAAiC,MAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CACrE,CAAC;QACF,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACb,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,IAAA,cAAQ,EAAC,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;AACH,CAAC,CAAC;AAEW,QAAA,4BAA4B,GAAG,IAAA,6BAAa,EAAC;IACxD,IAAI,EAAE,sBAAsB;IAC5B,WAAW,EAAE,iBAAiB;IAC9B,KAAK,EAAE,SAAS;IAChB,MAAM,EAAE;QACN,SAAS,EAAE;YACT,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,sBAAsB;YAC/B,UAAU,EAAE,IAAI;SACjB;QACD,OAAO,EAAE;YACP,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,mBAAmB;YAC5B,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;SACtE;KACF;IACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACrB,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,UAAU,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;CACF,CAAC,CAAC;AAEU,QAAA,4BAA4B,GAAG,IAAA,6BAAa,EAAC;IACxD,IAAI,EAAE,yBAAyB;IAC/B,WAAW,EAAE,iBAAiB;IAC9B,KAAK,EAAE,SAAS;IAChB,MAAM,EAAE;QACN,YAAY,EAAE;YACZ,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,uBAAuB;YAChC,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,IAAA,kCAAgB,GAAE;SACxC;QACD,OAAO,EAAE;YACP,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,mBAAmB;YAC5B,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;gBACrB,MAAM,YAAY,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;gBACnD,MAAM,SAAS,GAAG,MAAM,IAAA,8BAAmB,EAAC,YAAY,CAAC,CAAC;gBAC1D,OAAO,iBAAiB,CAAC,SAAS,CAAC,CAAC;YACtC,CAAC;SACF;KACF;IACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACrB,MAAM,YAAY,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACnD,MAAM,IAAA,6BAAa,EAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QACvC,MAAM,SAAS,GAAG,MAAM,IAAA,8BAAmB,EAAC,YAAY,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,UAAU,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;CACF,CAAC,CAAC"}

package/dist/cli/src/commands/security/commandSecurityAuditCiJob.d.ts

@@ -0,0 +1,27 @@
+export declare const commandSecurityAuditCiJob: import("../../core").CommandDef<{
+  readonly path: {
+    readonly type: "string";
+    readonly message: "path to project root";
+    readonly positional: true;
+  };
+  readonly token: {
+    readonly type: "string";
+    readonly message: "GitLab token (api scope)";
+    readonly positional: true;
+  };
+  readonly mainBranch: {
+    readonly type: "string";
+    readonly message: "main branch name";
+    readonly positional: true;
+  };
+  readonly projectId: {
+    readonly type: "string";
+    readonly message: "GitLab project ID";
+    readonly positional: true;
+  };
+  readonly userId: {
+    readonly type: "string";
+    readonly message: "GitLab user ID (assignee)";
+    readonly positional: true;
+  };
+}>;

package/dist/cli/src/commands/security/commandSecurityAuditCiJob.js

@@ -0,0 +1,83 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.commandSecurityAuditCiJob = void 0;
+const defineCommand_1 = require("../../core/defineCommand");
+const rest_1 = require("@gitbeaker/rest");
+const evaluateSecurityAudit_1 = require("../../security/evaluateSecurityAudit");
+const createSecurityAuditMergeRequest_1 = require("../../security/createSecurityAuditMergeRequest");
+const GITLAB_HOST = "https://git.panter.ch";
+exports.commandSecurityAuditCiJob = (0, defineCommand_1.defineCommand)({
+  name: "security audit ci-job",
+  description: "Evaluates security audit document. Creates MR with template if missing.",
+  group: "security",
+  inputs: {
+    path: {
+      type: "string",
+      message: "path to project root",
+      positional: true
+    },
+    token: {
+      type: "string",
+      message: "GitLab token (api scope)",
+      positional: true
+    },
+    mainBranch: {
+      type: "string",
+      message: "main branch name",
+      positional: true
+    },
+    projectId: {
+      type: "string",
+      message: "GitLab project ID",
+      positional: true
+    },
+    userId: {
+      type: "string",
+      message: "GitLab user ID (assignee)",
+      positional: true
+    }
+  },
+  execute: async ctx => {
+    const path = await ctx.get("path");
+    const evaluation = await (0, evaluateSecurityAudit_1.evaluateSecurityAudit)({
+      path
+    });
+    if (evaluation.isErr()) {
+      ctx.log("could not evaluate security audit document");
+      ctx.log("creating new merge request with security audit template...");
+      const token = await ctx.get("token");
+      const mainBranch = await ctx.get("mainBranch");
+      const projectId = await ctx.get("projectId");
+      const userId = await ctx.get("userId");
+      const api = new rest_1.Gitlab({
+        host: GITLAB_HOST,
+        token
+      });
+      const mr = await (0, createSecurityAuditMergeRequest_1.createSecurityAuditMergeRequest)({
+        api,
+        mainBranch,
+        projectId,
+        userId: parseInt(userId)
+      });
+      if (mr.isErr()) {
+        ctx.log(`could not create merge request with security audit template: ${mr.error}`);
+        process.exitCode = 1;
+        return;
+      }
+      ctx.log("security audit merge request created successfully");
+      ctx.log(`please finish the MR by updating SECURITY.md document: ${mr.value.web_url}`);
+      process.exitCode = 1;
+      return;
+    }
+    if (evaluation.value.score.answeredTopics === 0) {
+      ctx.log("audit document has no answered topics");
+      ctx.log(`please answer security topics in ${createSecurityAuditMergeRequest_1.SECURITY_AUDIT_FILE_NAME} by adding responsible people and check/cross in the table`);
+      process.exitCode = 1;
+      return;
+    }
+    ctx.log((0, evaluateSecurityAudit_1.makeSecurityAuditOverview)(evaluation.value));
+  }
+});

package/dist/cli/src/commands/security/commandSecurityAuditCiJob.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commandSecurityAuditCiJob.js","sourceRoot":"","sources":["../../../../../src/commands/security/commandSecurityAuditCiJob.ts"],"names":[],"mappings":";;;AAAA,4DAAyD;AACzD,0CAAyC;AACzC,gFAG8C;AAC9C,oGAGwD;AAExD,MAAM,WAAW,GAAG,uBAAuB,CAAC;AAE/B,QAAA,yBAAyB,GAAG,IAAA,6BAAa,EAAC;IACrD,IAAI,EAAE,uBAAuB;IAC7B,WAAW,EACT,yEAAyE;IAC3E,KAAK,EAAE,UAAU;IACjB,MAAM,EAAE;QACN,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,sBAAsB,EAAE,UAAU,EAAE,IAAI,EAAE;QAC3E,KAAK,EAAE;YACL,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,0BAA0B;YACnC,UAAU,EAAE,IAAI;SACjB;QACD,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,kBAAkB;YAC3B,UAAU,EAAE,IAAI;SACjB;QACD,SAAS,EAAE;YACT,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,mBAAmB;YAC5B,UAAU,EAAE,IAAI;SACjB;QACD,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,2BAA2B;YACpC,UAAU,EAAE,IAAI;SACjB;KACF;IACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACrB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,UAAU,GAAG,MAAM,IAAA,6CAAqB,EAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAEzD,IAAI,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC;YACvB,GAAG,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;YACtD,GAAG,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;YAEtE,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACrC,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC/C,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAC7C,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAEvC,MAAM,GAAG,GAAG,IAAI,aAAM,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;YAErD,MAAM,EAAE,GAAG,MAAM,IAAA,iEAA+B,EAAC;gBAC/C,GAAG;gBACH,UAAU;gBACV,SAAS;gBACT,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC;aACzB,CAAC,CAAC;YAEH,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;gBACf,GAAG,CAAC,GAAG,CACL,gEAAgE,EAAE,CAAC,KAAK,EAAE,CAC3E,CAAC;gBACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YAED,GAAG,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;YAC7D,GAAG,CAAC,GAAG,CACL,0DAA0D,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,CAC7E,CAAC;YACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,KAAK,CAAC,EAAE,CAAC;YAChD,GAAG,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;YACjD,GAAG,CAAC,GAAG,CACL,oCAAoC,0DAAwB,4DAA4D,CACzH,CAAC;YACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,GAAG,CAAC,GAAG,CAAC,IAAA,iDAAyB,EAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IACvD,CAAC;CACF,CAAC,CAAC"}

package/dist/cli/src/commands/security/commandSecurityAuditCreate.d.ts

@@ -0,0 +1,22 @@
+export declare const commandSecurityAuditCreate: import("../../core").CommandDef<{
+  readonly token: {
+    readonly type: "string";
+    readonly message: "GitLab token (api scope)";
+    readonly positional: true;
+  };
+  readonly mainBranch: {
+    readonly type: "string";
+    readonly message: "main branch name";
+    readonly positional: true;
+  };
+  readonly projectId: {
+    readonly type: "string";
+    readonly message: "GitLab project ID";
+    readonly positional: true;
+  };
+  readonly userId: {
+    readonly type: "string";
+    readonly message: "GitLab user ID (assignee)";
+    readonly positional: true;
+  };
+}>;

package/dist/cli/src/commands/security/commandSecurityAuditCreate.js

@@ -0,0 +1,60 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.commandSecurityAuditCreate = void 0;
+const defineCommand_1 = require("../../core/defineCommand");
+const rest_1 = require("@gitbeaker/rest");
+const createSecurityAuditMergeRequest_1 = require("../../security/createSecurityAuditMergeRequest");
+const GITLAB_HOST = "https://git.panter.ch";
+exports.commandSecurityAuditCreate = (0, defineCommand_1.defineCommand)({
+  name: "security audit create",
+  description: "Creates a MR with the latest security audit template document",
+  group: "security",
+  inputs: {
+    token: {
+      type: "string",
+      message: "GitLab token (api scope)",
+      positional: true
+    },
+    mainBranch: {
+      type: "string",
+      message: "main branch name",
+      positional: true
+    },
+    projectId: {
+      type: "string",
+      message: "GitLab project ID",
+      positional: true
+    },
+    userId: {
+      type: "string",
+      message: "GitLab user ID (assignee)",
+      positional: true
+    }
+  },
+  execute: async ctx => {
+    const token = await ctx.get("token");
+    const mainBranch = await ctx.get("mainBranch");
+    const projectId = await ctx.get("projectId");
+    const userId = await ctx.get("userId");
+    const api = new rest_1.Gitlab({
+      host: GITLAB_HOST,
+      token
+    });
+    const result = await (0, createSecurityAuditMergeRequest_1.createSecurityAuditMergeRequest)({
+      api,
+      mainBranch,
+      projectId,
+      userId: parseInt(userId)
+    });
+    if (result.isErr()) {
+      ctx.log(`could not create security audit merge request: ${result.error}`);
+      process.exitCode = 1;
+    } else {
+      ctx.log("security audit merge request created successfully");
+      ctx.log(`please finish the MR by updating SECURITY.md document: ${result.value.web_url}`);
+    }
+  }
+});

package/dist/cli/src/commands/security/commandSecurityAuditCreate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commandSecurityAuditCreate.js","sourceRoot":"","sources":["../../../../../src/commands/security/commandSecurityAuditCreate.ts"],"names":[],"mappings":";;;AAAA,4DAAyD;AACzD,0CAAyC;AACzC,oGAAiG;AAEjG,MAAM,WAAW,GAAG,uBAAuB,CAAC;AAE/B,QAAA,0BAA0B,GAAG,IAAA,6BAAa,EAAC;IACtD,IAAI,EAAE,uBAAuB;IAC7B,WAAW,EAAE,+DAA+D;IAC5E,KAAK,EAAE,UAAU;IACjB,MAAM,EAAE;QACN,KAAK,EAAE;YACL,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,0BAA0B;YACnC,UAAU,EAAE,IAAI;SACjB;QACD,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,kBAAkB;YAC3B,UAAU,EAAE,IAAI;SACjB;QACD,SAAS,EAAE;YACT,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,mBAAmB;YAC5B,UAAU,EAAE,IAAI;SACjB;QACD,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,2BAA2B;YACpC,UAAU,EAAE,IAAI;SACjB;KACF;IACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACrB,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAEvC,MAAM,GAAG,GAAG,IAAI,aAAM,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;QAErD,MAAM,MAAM,GAAG,MAAM,IAAA,iEAA+B,EAAC;YACnD,GAAG;YACH,UAAU;YACV,SAAS;YACT,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC;SACzB,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,kDAAkD,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YAC1E,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;YAC7D,GAAG,CAAC,GAAG,CACL,0DAA0D,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CACjF,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC,CAAC"}

package/dist/cli/src/commands/security/commandSecurityAuditEvaluate.d.ts

@@ -0,0 +1,7 @@
+export declare const commandSecurityAuditEvaluate: import("../../core").CommandDef<{
+  readonly path: {
+    readonly type: "string";
+    readonly message: "path to project root";
+    readonly positional: true;
+  };
+}>;

package/dist/cli/src/commands/security/commandSecurityAuditEvaluate.js

@@ -0,0 +1,35 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.commandSecurityAuditEvaluate = void 0;
+const defineCommand_1 = require("../../core/defineCommand");
+const evaluateSecurityAudit_1 = require("../../security/evaluateSecurityAudit");
+const createSecurityAuditMergeRequest_1 = require("../../security/createSecurityAuditMergeRequest");
+exports.commandSecurityAuditEvaluate = (0, defineCommand_1.defineCommand)({
+  name: "security audit evaluate",
+  description: "Evaluates security audit document in given path",
+  group: "security",
+  inputs: {
+    path: {
+      type: "string",
+      message: "path to project root",
+      positional: true
+    }
+  },
+  execute: async ctx => {
+    const path = await ctx.get("path");
+    ctx.log("evaluating security audit document...");
+    const result = await (0, evaluateSecurityAudit_1.evaluateSecurityAudit)({
+      path
+    });
+    if (result.isErr()) {
+      ctx.log(`${result.error}`);
+      ctx.log(`please make sure the security audit document ${createSecurityAuditMergeRequest_1.SECURITY_AUDIT_FILE_NAME} is in the repository`);
+      process.exitCode = 1;
+    } else {
+      ctx.log((0, evaluateSecurityAudit_1.makeSecurityAuditOverview)(result.value));
+    }
+  }
+});

package/dist/cli/src/commands/security/commandSecurityAuditEvaluate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commandSecurityAuditEvaluate.js","sourceRoot":"","sources":["../../../../../src/commands/security/commandSecurityAuditEvaluate.ts"],"names":[],"mappings":";;;AAAA,4DAAyD;AACzD,gFAG8C;AAC9C,oGAA0F;AAE7E,QAAA,4BAA4B,GAAG,IAAA,6BAAa,EAAC;IACxD,IAAI,EAAE,yBAAyB;IAC/B,WAAW,EAAE,iDAAiD;IAC9D,KAAK,EAAE,UAAU;IACjB,MAAM,EAAE;QACN,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,sBAAsB,EAAE,UAAU,EAAE,IAAI,EAAE;KAC5E;IACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACrB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACnC,GAAG,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;QAEjD,MAAM,MAAM,GAAG,MAAM,IAAA,6CAAqB,EAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,IAAI,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YAC3B,GAAG,CAAC,GAAG,CACL,gDAAgD,0DAAwB,uBAAuB,CAChG,CAAC;YACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CAAC,IAAA,iDAAyB,EAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;CACF,CAAC,CAAC"}

package/dist/cli/src/completion.d.ts

@@ -0,0 +1,24 @@
+import type { CommandDef } from "./core/types";
+/**
+ * Generate completions for the current command line.
+ *
+ * @param allCommands - All registered command definitions
+ * @param words - The words typed so far (argv without the binary name)
+ * @param cursorWord - The word currently being completed (may be empty)
+ * @returns Array of completion strings
+ */
+export declare function getCompletions(allCommands: CommandDef[], words: string[], cursorWord: string): Promise<string[]>;
+/**
+ * Generate the zsh completion script.
+ * The script discovers the local catladder binary at completion time,
+ * so it works without a global install.
+ */
+export declare function generateZshCompletionScript(): string;
+/**
+ * Install completions by writing the script directly into .zshrc.
+ */
+export declare function installCompletions(): Promise<void>;
+/**
+ * Remove completions from .zshrc.
+ */
+export declare function uninstallCompletions(): Promise<void>;