@catladder/cli 5.1.3 → 5.3.0

package/dist/packages/pipeline/src/backends/gitlab/gitlabReleaseJobs.d.ts

@@ -7,6 +7,7 @@ export declare const getGitlabReleaseJobs: (config: Config, images: JobImagesPla
         stage: string;
         image: string;
         script: string[];
+        interruptible: true;
         allow_failure: true;
         artifacts: {
             paths: string[];
@@ -42,6 +43,7 @@ export declare const getGitlabReleaseJobs: (config: Config, images: JobImagesPla
         image: string;
         script: string[];
         after_script: string[];
+        interruptible: false;
     };
     "create release": {
         rules: {
@@ -58,6 +60,7 @@ export declare const getGitlabReleaseJobs: (config: Config, images: JobImagesPla
         image: string;
         script: string[];
         after_script: string[];
+        interruptible: false;
         needs?: undefined;
         allow_failure?: undefined;
     };
@@ -81,6 +84,7 @@ export declare const getGitlabReleaseJobs: (config: Config, images: JobImagesPla
         image: string;
         script: string[];
         after_script: string[];
+        interruptible: false;
     };
     "create release": {
         rules: {
@@ -97,6 +101,7 @@ export declare const getGitlabReleaseJobs: (config: Config, images: JobImagesPla
         image: string;
         script: string[];
         after_script: string[];
+        interruptible: false;
         needs?: undefined;
         allow_failure?: undefined;
     };
@@ -105,6 +110,7 @@ export declare const getGitlabReleaseJobs: (config: Config, images: JobImagesPla
         stage: string;
         image: string;
         script: string[];
+        interruptible: true;
         allow_failure: true;
         artifacts: {
             paths: string[];
@@ -140,6 +146,7 @@ export declare const getGitlabReleaseJobs: (config: Config, images: JobImagesPla
         image: string;
         script: string[];
         after_script: string[];
+        interruptible: false;
     };
     "create release": {
         allow_failure: true;
@@ -157,6 +164,7 @@ export declare const getGitlabReleaseJobs: (config: Config, images: JobImagesPla
         image: string;
         script: string[];
         after_script: string[];
+        interruptible: false;
         needs?: undefined;
     };
 } | {
@@ -179,6 +187,7 @@ export declare const getGitlabReleaseJobs: (config: Config, images: JobImagesPla
         image: string;
         script: string[];
         after_script: string[];
+        interruptible: false;
     };
     "create release": {
         allow_failure: true;
@@ -196,6 +205,7 @@ export declare const getGitlabReleaseJobs: (config: Config, images: JobImagesPla
         image: string;
         script: string[];
         after_script: string[];
+        interruptible: false;
         needs?: undefined;
     };
 } | {
@@ -203,6 +213,7 @@ export declare const getGitlabReleaseJobs: (config: Config, images: JobImagesPla
         stage: string;
         image: string;
         script: string[];
+        interruptible: true;
         allow_failure: true;
         artifacts: {
             paths: string[];
@@ -238,11 +249,13 @@ export declare const getGitlabReleaseJobs: (config: Config, images: JobImagesPla
         image: string;
         script: string[];
         after_script: string[];
+        interruptible: false;
     };
     "create release": {
         stage: string;
         image: string;
         script: string[];
+        interruptible: false;
         needs: any[];
         allow_failure: true;
         rules: {
@@ -277,6 +290,7 @@ export declare const getGitlabReleaseJobs: (config: Config, images: JobImagesPla
         image: string;
         script: string[];
         after_script: string[];
+        interruptible: false;
     };
 } | {
     "\uD83E\uDD8B changeset check"?: undefined;
@@ -298,11 +312,13 @@ export declare const getGitlabReleaseJobs: (config: Config, images: JobImagesPla
         image: string;
         script: string[];
         after_script: string[];
+        interruptible: false;
     };
     "create release": {
         stage: string;
         image: string;
         script: string[];
+        interruptible: false;
         needs: any[];
         allow_failure: true;
         rules: {
@@ -337,5 +353,6 @@ export declare const getGitlabReleaseJobs: (config: Config, images: JobImagesPla
         image: string;
         script: string[];
         after_script: string[];
+        interruptible: false;
     };
 };

package/dist/packages/pipeline/src/backends/gitlab/gitlabReleaseJobs.js

@@ -53,6 +53,12 @@ mainBranchJobNames) => {
         image: releaseImage,
         script: [method.script],
         after_script: [EXPIRED_TOKEN_HELP],
+        // a release in flight must never be killed by a new commit — a
+        // half-published version (tag pushed, npm publish missing) is not
+        // recoverable by re-running. Under gitlab's default "conservative"
+        // auto-cancel this also shields the rest of the pipeline, but only
+        // once the release actually started, which is late by construction.
+        interruptible: false,
     };
     const forceReleaseJob = {
         ["⚠️ force create release"]: {
@@ -76,6 +82,10 @@ mainBranchJobNames) => {
                 stage: "test",
                 image: releaseImage,
                 script: [method.checkScript],
+                // a redundant report is worthless: without this the job
+                // defaults to interruptible: false and, once started, stops
+                // gitlab from auto-cancelling the superseded MR pipeline
+                interruptible: true,
                 allow_failure: true,
                 artifacts: {
                     paths: ["changeset-report.md"],
@@ -145,6 +155,9 @@ mainBranchJobNames) => {
             script: [
                 `echo "release queued — '${exports.RELEASE_EXECUTOR_JOB_NAME}' runs it as soon as every other job in this pipeline succeeded"`,
             ],
+            // the recorded intent must survive a new commit: cancelling it
+            // would silently drop the queued release
+            interruptible: false,
             needs: [],
             // allow_failure keeps the unclicked button from blocking the
             // pipeline AND makes the executor's needs treat it as optional

package/dist/packages/pipeline/src/backends/gitlab/gitlabReleaseJobs.js.map

@@ -1 +1 @@
-{"version":3,"file":"gitlabReleaseJobs.js","sourceRoot":"","sources":["../../../../../../../../packages/pipeline/src/backends/gitlab/gitlabReleaseJobs.ts"],"names":[],"mappings":";;;AAAA,uCAOqB;AAErB,2CAAiD;AAIjD,MAAM,kBAAkB,GACtB,gJAAgJ,CAAC;AAEnJ;;;;GAIG;AACH,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAEf,QAAA,uBAAuB,GAAG,gBAAgB,CAAC;AAC3C,QAAA,yBAAyB,GAAG,mCAAmC,CAAC;AAE7E,MAAM,gBAAgB,GAAG;IACvB,oCAA4B;IAC5B,mCAA2B;IAC3B,8BAAsB;CACvB,CAAC;AAEF,sEAAsE;AACtE,mEAAmE;AACnE,uEAAuE;AACvE,oCAAoC;AACpC,MAAM,kBAAkB,GAAG;IACzB,GAAG,gBAAgB;IACnB;QACE,EAAE,EAAE,kCAA0B;QAC9B,IAAI,EAAE,QAAQ;KACf;IACD;QACE,EAAE,EAAE,oCAA4B;QAChC,IAAI,EAAE,QAAQ;KACf;CACqB,CAAC;AAElB,MAAM,oBAAoB,GAAG,CAClC,MAAc,EACd,MAAqB;AACrB;;;;GAIG;AACH,kBAA4B,EAC5B,EAAE;;IACF,MAAM,MAAM,GAAG,IAAA,0BAAgB,EAAC,MAAM,CAAC,CAAC;IACxC,qEAAqE;IACrE,qEAAqE;IACrE,kEAAkE;IAClE,uCAAuC;IACvC,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,CAAC;QACrC,cAAc,EAAE,MAAM,CAAC,KAAK;KAC7B,CAAC,CAAC,KAAK,CAAC;IAET,MAAM,cAAc,GAAG;QACrB,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,YAAY;QACnB,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;QACvB,YAAY,EAAE,CAAC,kBAAkB,CAAC;KACZ,CAAC;IAEzB,MAAM,eAAe,GAAG;QACtB,CAAC,yBAAyB,CAAC,EAAE;YAC3B,GAAG,cAAc;YACjB,KAAK,EAAE,EAAE;YACT,aAAa,EAAE,IAAI;YACnB,2DAA2D;YAC3D,wDAAwD;YACxD,GAAG,CAAC,MAAM,CAAC,qBAAqB;gBAC9B,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,qBAAqB,EAAE;gBAC7C,CAAC,CAAC,EAAE,CAAC;YACP,KAAK,EAAE,kBAAkB;SACH;KACzB,CAAC;IAEF,mEAAmE;IACnE,8DAA8D;IAC9D,gCAAgC;IAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW;QACjC,CAAC,CAAC;YACE,CAAC,oBAAoB,CAAC,EAAE;gBACtB,KAAK,EAAE,MAAM;gBACb,KAAK,EAAE,YAAY;gBACnB,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC;gBAC5B,aAAa,EAAE,IAAI;gBACnB,SAAS,EAAE;oBACT,KAAK,EAAE,CAAC,qBAAqB,CAAC;oBAC9B,SAAS,EAAE,kBAAkB;oBAC7B,2CAA2C;oBAC3C,IAAI,EAAE,QAAiB;iBACxB;gBACD,KAAK,EAAE;oBACL,mCAA2B;oBAC3B,8BAAsB;oBACtB,6BAAqB;iBACC;aACF;SACzB;QACH,CAAC,CAAC,EAAE,CAAC;IAEP,IAAI,CAAA,MAAA,MAAM,CAAC,QAAQ,0CAAE,IAAI,MAAK,MAAM,EAAE,CAAC;QACrC,OAAO;YACL,CAAC,+BAAuB,CAAC,EAAE;gBACzB,GAAG,cAAc;gBACjB,KAAK,EAAE;oBACL,GAAG,gBAAgB;oBACnB;wBACE,EAAE,EAAE,kCAA0B;wBAC9B,IAAI,EAAE,YAAY;qBACnB;oBACD;wBACE,EAAE,EAAE,oCAA4B;wBAChC,IAAI,EAAE,QAAQ;wBACd,sDAAsD;wBACtD,gDAAgD;wBAChD,aAAa,EAAE,IAAI;qBACpB;iBACqB;aACF;YACxB,GAAG,eAAe;YAClB,GAAG,QAAQ;SACZ,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG;QACpB,EAAE,GAAG,EAAE,+BAAuB,EAAE;QAChC,iEAAiE;QACjE,uBAAuB;QACvB,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;KACrE,CAAC;IAEF,IAAI,aAAa,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;QAC5C,OAAO,CAAC,IAAI,CACV,6CAA6C,gBAAgB,UAAU;YACrE,QAAQ,+BAAuB,qCAAqC;YACpE,0DAA0D,gBAAgB,GAAG,CAChF,CAAC;QACF,OAAO;YACL,CAAC,+BAAuB,CAAC,EAAE;gBACzB,GAAG,cAAc;gBACjB,aAAa,EAAE,IAAI;gBACnB,KAAK,EAAE,kBAAkB;aACH;YACxB,GAAG,eAAe;YAClB,GAAG,QAAQ;SACZ,CAAC;IACJ,CAAC;IAED,OAAO;QACL,oEAAoE;QACpE,kEAAkE;QAClE,qEAAqE;QACrE,qEAAqE;QACrE,CAAC,+BAAuB,CAAC,EAAE;YACzB,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE,YAAY;YACnB,MAAM,EAAE;gBACN,2BAA2B,iCAAyB,kEAAkE;aACvH;YACD,KAAK,EAAE,EAAE;YACT,6DAA6D;YAC7D,+DAA+D;YAC/D,2DAA2D;YAC3D,aAAa,EAAE,IAAI;YACnB,KAAK,EAAE,kBAAkB;SACH;QACxB,mEAAmE;QACnE,oEAAoE;QACpE,kEAAkE;QAClE,sCAAsC;QACtC,CAAC,iCAAyB,CAAC,EAAE;YAC3B,GAAG,cAAc;YACjB,KAAK,EAAE,aAAa;YACpB,KAAK,EAAE;gBACL,GAAG,gBAAgB;gBACnB;oBACE,EAAE,EAAE,kCAA0B;oBAC9B,IAAI,EAAE,YAAY;iBACnB;gBACD;oBACE,EAAE,EAAE,oCAA4B;oBAChC,IAAI,EAAE,YAAY;iBACnB;aACqB;SACF;QACxB,GAAG,eAAe;QAClB,GAAG,QAAQ;KACZ,CAAC;AACJ,CAAC,CAAC;AAzJW,QAAA,oBAAoB,wBAyJ/B"}
+{"version":3,"file":"gitlabReleaseJobs.js","sourceRoot":"","sources":["../../../../../../../../packages/pipeline/src/backends/gitlab/gitlabReleaseJobs.ts"],"names":[],"mappings":";;;AAAA,uCAOqB;AAErB,2CAAiD;AAIjD,MAAM,kBAAkB,GACtB,gJAAgJ,CAAC;AAEnJ;;;;GAIG;AACH,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAEf,QAAA,uBAAuB,GAAG,gBAAgB,CAAC;AAC3C,QAAA,yBAAyB,GAAG,mCAAmC,CAAC;AAE7E,MAAM,gBAAgB,GAAG;IACvB,oCAA4B;IAC5B,mCAA2B;IAC3B,8BAAsB;CACvB,CAAC;AAEF,sEAAsE;AACtE,mEAAmE;AACnE,uEAAuE;AACvE,oCAAoC;AACpC,MAAM,kBAAkB,GAAG;IACzB,GAAG,gBAAgB;IACnB;QACE,EAAE,EAAE,kCAA0B;QAC9B,IAAI,EAAE,QAAQ;KACf;IACD;QACE,EAAE,EAAE,oCAA4B;QAChC,IAAI,EAAE,QAAQ;KACf;CACqB,CAAC;AAElB,MAAM,oBAAoB,GAAG,CAClC,MAAc,EACd,MAAqB;AACrB;;;;GAIG;AACH,kBAA4B,EAC5B,EAAE;;IACF,MAAM,MAAM,GAAG,IAAA,0BAAgB,EAAC,MAAM,CAAC,CAAC;IACxC,qEAAqE;IACrE,qEAAqE;IACrE,kEAAkE;IAClE,uCAAuC;IACvC,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,CAAC;QACrC,cAAc,EAAE,MAAM,CAAC,KAAK;KAC7B,CAAC,CAAC,KAAK,CAAC;IAET,MAAM,cAAc,GAAG;QACrB,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,YAAY;QACnB,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;QACvB,YAAY,EAAE,CAAC,kBAAkB,CAAC;QAClC,+DAA+D;QAC/D,kEAAkE;QAClE,mEAAmE;QACnE,mEAAmE;QACnE,oEAAoE;QACpE,aAAa,EAAE,KAAK;KACE,CAAC;IAEzB,MAAM,eAAe,GAAG;QACtB,CAAC,yBAAyB,CAAC,EAAE;YAC3B,GAAG,cAAc;YACjB,KAAK,EAAE,EAAE;YACT,aAAa,EAAE,IAAI;YACnB,2DAA2D;YAC3D,wDAAwD;YACxD,GAAG,CAAC,MAAM,CAAC,qBAAqB;gBAC9B,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,qBAAqB,EAAE;gBAC7C,CAAC,CAAC,EAAE,CAAC;YACP,KAAK,EAAE,kBAAkB;SACH;KACzB,CAAC;IAEF,mEAAmE;IACnE,8DAA8D;IAC9D,gCAAgC;IAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW;QACjC,CAAC,CAAC;YACE,CAAC,oBAAoB,CAAC,EAAE;gBACtB,KAAK,EAAE,MAAM;gBACb,KAAK,EAAE,YAAY;gBACnB,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC;gBAC5B,wDAAwD;gBACxD,4DAA4D;gBAC5D,yDAAyD;gBACzD,aAAa,EAAE,IAAI;gBACnB,aAAa,EAAE,IAAI;gBACnB,SAAS,EAAE;oBACT,KAAK,EAAE,CAAC,qBAAqB,CAAC;oBAC9B,SAAS,EAAE,kBAAkB;oBAC7B,2CAA2C;oBAC3C,IAAI,EAAE,QAAiB;iBACxB;gBACD,KAAK,EAAE;oBACL,mCAA2B;oBAC3B,8BAAsB;oBACtB,6BAAqB;iBACC;aACF;SACzB;QACH,CAAC,CAAC,EAAE,CAAC;IAEP,IAAI,CAAA,MAAA,MAAM,CAAC,QAAQ,0CAAE,IAAI,MAAK,MAAM,EAAE,CAAC;QACrC,OAAO;YACL,CAAC,+BAAuB,CAAC,EAAE;gBACzB,GAAG,cAAc;gBACjB,KAAK,EAAE;oBACL,GAAG,gBAAgB;oBACnB;wBACE,EAAE,EAAE,kCAA0B;wBAC9B,IAAI,EAAE,YAAY;qBACnB;oBACD;wBACE,EAAE,EAAE,oCAA4B;wBAChC,IAAI,EAAE,QAAQ;wBACd,sDAAsD;wBACtD,gDAAgD;wBAChD,aAAa,EAAE,IAAI;qBACpB;iBACqB;aACF;YACxB,GAAG,eAAe;YAClB,GAAG,QAAQ;SACZ,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG;QACpB,EAAE,GAAG,EAAE,+BAAuB,EAAE;QAChC,iEAAiE;QACjE,uBAAuB;QACvB,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;KACrE,CAAC;IAEF,IAAI,aAAa,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;QAC5C,OAAO,CAAC,IAAI,CACV,6CAA6C,gBAAgB,UAAU;YACrE,QAAQ,+BAAuB,qCAAqC;YACpE,0DAA0D,gBAAgB,GAAG,CAChF,CAAC;QACF,OAAO;YACL,CAAC,+BAAuB,CAAC,EAAE;gBACzB,GAAG,cAAc;gBACjB,aAAa,EAAE,IAAI;gBACnB,KAAK,EAAE,kBAAkB;aACH;YACxB,GAAG,eAAe;YAClB,GAAG,QAAQ;SACZ,CAAC;IACJ,CAAC;IAED,OAAO;QACL,oEAAoE;QACpE,kEAAkE;QAClE,qEAAqE;QACrE,qEAAqE;QACrE,CAAC,+BAAuB,CAAC,EAAE;YACzB,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE,YAAY;YACnB,MAAM,EAAE;gBACN,2BAA2B,iCAAyB,kEAAkE;aACvH;YACD,+DAA+D;YAC/D,yCAAyC;YACzC,aAAa,EAAE,KAAK;YACpB,KAAK,EAAE,EAAE;YACT,6DAA6D;YAC7D,+DAA+D;YAC/D,2DAA2D;YAC3D,aAAa,EAAE,IAAI;YACnB,KAAK,EAAE,kBAAkB;SACH;QACxB,mEAAmE;QACnE,oEAAoE;QACpE,kEAAkE;QAClE,sCAAsC;QACtC,CAAC,iCAAyB,CAAC,EAAE;YAC3B,GAAG,cAAc;YACjB,KAAK,EAAE,aAAa;YACpB,KAAK,EAAE;gBACL,GAAG,gBAAgB;gBACnB;oBACE,EAAE,EAAE,kCAA0B;oBAC9B,IAAI,EAAE,YAAY;iBACnB;gBACD;oBACE,EAAE,EAAE,oCAA4B;oBAChC,IAAI,EAAE,YAAY;iBACnB;aACqB;SACF;QACxB,GAAG,eAAe;QAClB,GAAG,QAAQ;KACZ,CAAC;AACJ,CAAC,CAAC;AAtKW,QAAA,oBAAoB,wBAsK/B"}

package/dist/packages/pipeline/src/config/configruedEnvs.d.ts

@@ -1,4 +1,11 @@
-import type { Config, PipelineTrigger } from "../types";
+import type { BranchPipelineTrigger, Config, EnvPipelineTrigger } from "../types";
 export declare const getAllEnvs: (config: Config, componentName: string) => string[];
 export declare const getAllEnvsInAllComponents: (config: Config) => string[];
-export declare const getAllEnvsByTrigger: (config: Config, componentName: string, trigger: PipelineTrigger) => string[];
+export declare const getAllEnvsByTrigger: (config: Config, componentName: string, trigger: EnvPipelineTrigger) => string[];
+/**
+ * all branch triggers declared by any env of any component (via
+ * `on: { branch: "..." }`), deduplicated and sorted for deterministic
+ * pipeline generation. Each gets its own pipeline next to the built-in
+ * triggers.
+ */
+export declare const getConfiguredBranchTriggers: (config: Config) => BranchPipelineTrigger[];

package/dist/packages/pipeline/src/config/configruedEnvs.js

@@ -1,7 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getAllEnvsByTrigger = exports.getAllEnvsInAllComponents = exports.getAllEnvs = void 0;
+exports.getConfiguredBranchTriggers = exports.getAllEnvsByTrigger = exports.getAllEnvsInAllComponents = exports.getAllEnvs = void 0;
 const types_1 = require("../types");
+const getEnvOn_1 = require("../context/getEnvOn");
+const getEnvType_1 = require("../context/getEnvType");
 const getConfiguredAndDefaultEnvs = (config, componentName, envTypes) => {
     var _a, _b;
     const configuredEnvs = (_a = config.components[componentName].env) !== null && _a !== void 0 ? _a : {};
@@ -9,13 +11,33 @@ const getConfiguredAndDefaultEnvs = (config, componentName, envTypes) => {
     // these can be disabled with settimg them to `false`
     // this is the list of all not disabled envs. These are always returned
     const enabledDefaultEnvs = envTypes.filter((e) => configuredEnvs[e] !== false);
-    const configuredCustomEnvs = Object.entries((_b = config.components[componentName].env) !== null && _b !== void 0 ? _b : {})
+    // envs declared project-wide (top-level `environments`): every
+    // component deploys to them unless it opts out with `env.<name>: false`
+    const declaredEnvs = Object.keys((_b = config.environments) !== null && _b !== void 0 ? _b : {})
+        .filter((envName) => !(0, types_1.isKnowEnvType)(envName)) // default envs are already handled above
+        .map((envName) => {
+        const envType = (0, getEnvType_1.getDeclaredEnvType)(config.environments, envName);
+        if (!envType) {
+            throw new Error(`environment "${envName}" needs a type (dev, review, stage, prod) or an inherit`);
+        }
+        return [envName, envType];
+    })
+        .filter(([envName, envType]) => envTypes.includes(envType) && configuredEnvs[envName] !== false)
+        .map(([envName]) => envName);
+    // legacy: custom envs declared per component via their `type`
+    const configuredCustomEnvs = Object.entries(configuredEnvs)
         .filter(([, config]) => config &&
         "type" in config &&
         config.type &&
         envTypes.includes(config.type))
         .map(([envName]) => envName);
-    return [...new Set([...enabledDefaultEnvs, ...configuredCustomEnvs])];
+    return [
+        ...new Set([
+            ...enabledDefaultEnvs,
+            ...declaredEnvs,
+            ...configuredCustomEnvs,
+        ]),
+    ];
 };
 const getAllEnvs = (config, componentName) => {
     return getConfiguredAndDefaultEnvs(config, componentName, types_1.DEFAULT_ENV_TYPES);
@@ -27,9 +49,36 @@ const getAllEnvsInAllComponents = (config) => {
     ];
 };
 exports.getAllEnvsInAllComponents = getAllEnvsInAllComponents;
+/**
+ * the resolved `on` of one env of a component (the project-wide `on`
+ * of the env, falling back to the env type's default trigger)
+ */
+const getEnvOnForComponentEnv = (config, componentName, env) => {
+    var _a;
+    const entry = (_a = config.components[componentName].env) === null || _a === void 0 ? void 0 : _a[env];
+    return (0, getEnvOn_1.getEnvOn)(env, entry && entry !== false ? entry : {}, config.environments);
+};
 const getAllEnvsByTrigger = (config, componentName, trigger) => {
-    const envTypesByTrigger = (0, types_1.getEnvTypesByTrigger)(trigger);
-    return getConfiguredAndDefaultEnvs(config, componentName, envTypesByTrigger);
+    return (0, exports.getAllEnvs)(config, componentName).filter((env) => (0, types_1.envTriggerEquals)(getEnvOnForComponentEnv(config, componentName, env), trigger));
 };
 exports.getAllEnvsByTrigger = getAllEnvsByTrigger;
+/**
+ * all branch triggers declared by any env of any component (via
+ * `on: { branch: "..." }`), deduplicated and sorted for deterministic
+ * pipeline generation. Each gets its own pipeline next to the built-in
+ * triggers.
+ */
+const getConfiguredBranchTriggers = (config) => {
+    const branches = new Set();
+    for (const componentName of Object.keys(config.components)) {
+        for (const env of (0, exports.getAllEnvs)(config, componentName)) {
+            const on = getEnvOnForComponentEnv(config, componentName, env);
+            if (on && (0, types_1.isBranchTrigger)(on)) {
+                branches.add(on.branch);
+            }
+        }
+    }
+    return [...branches].sort().map((branch) => ({ branch }));
+};
+exports.getConfiguredBranchTriggers = getConfiguredBranchTriggers;
 //# sourceMappingURL=configruedEnvs.js.map

package/dist/packages/pipeline/src/config/configruedEnvs.js.map

@@ -1 +1 @@
-{"version":3,"file":"configruedEnvs.js","sourceRoot":"","sources":["../../../../../../../packages/pipeline/src/config/configruedEnvs.ts"],"names":[],"mappings":";;;AACA,oCAAmE;AAEnE,MAAM,2BAA2B,GAAG,CAClC,MAAc,EACd,aAAqB,EACrB,QAAmB,EACnB,EAAE;;IACF,MAAM,cAAc,GAAG,MAAA,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,GAAG,mCAAI,EAAE,CAAC;IAClE,uDAAuD;IACvD,qDAAqD;IACrD,uEAAuE;IACvE,MAAM,kBAAkB,GAAG,QAAQ,CAAC,MAAM,CACxC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,KAAK,CACnC,CAAC;IAEF,MAAM,oBAAoB,GAAG,MAAM,CAAC,OAAO,CACzC,MAAA,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,GAAG,mCAAI,EAAE,CAC3C;SACE,MAAM,CACL,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,CACb,MAAM;QACN,MAAM,IAAI,MAAM;QAChB,MAAM,CAAC,IAAI;QACX,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CACjC;SACA,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC;IAE/B,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,kBAAkB,EAAE,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAC;AACxE,CAAC,CAAC;AAEK,MAAM,UAAU,GAAG,CAAC,MAAc,EAAE,aAAqB,EAAE,EAAE;IAClE,OAAO,2BAA2B,CAAC,MAAM,EAAE,aAAa,EAAE,yBAAiB,CAAC,CAAC;AAC/E,CAAC,CAAC;AAFW,QAAA,UAAU,cAErB;AAEK,MAAM,yBAAyB,GAAG,CAAC,MAAc,EAAE,EAAE;IAC1D,OAAO;QACL,GAAG,IAAI,GAAG,CACR,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,kBAAU,EAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CACrE;KACF,CAAC;AACJ,CAAC,CAAC;AANW,QAAA,yBAAyB,6BAMpC;AAEK,MAAM,mBAAmB,GAAG,CACjC,MAAc,EACd,aAAqB,EACrB,OAAwB,EACxB,EAAE;IACF,MAAM,iBAAiB,GAAG,IAAA,4BAAoB,EAAC,OAAO,CAAC,CAAC;IACxD,OAAO,2BAA2B,CAAC,MAAM,EAAE,aAAa,EAAE,iBAAiB,CAAC,CAAC;AAC/E,CAAC,CAAC;AAPW,QAAA,mBAAmB,uBAO9B"}
+{"version":3,"file":"configruedEnvs.js","sourceRoot":"","sources":["../../../../../../../packages/pipeline/src/config/configruedEnvs.ts"],"names":[],"mappings":";;;AAMA,oCAKkB;AAClB,kDAA+C;AAC/C,sDAA2D;AAE3D,MAAM,2BAA2B,GAAG,CAClC,MAAc,EACd,aAAqB,EACrB,QAAmB,EACnB,EAAE;;IACF,MAAM,cAAc,GAAG,MAAA,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,GAAG,mCAAI,EAAE,CAAC;IAClE,uDAAuD;IACvD,qDAAqD;IACrD,uEAAuE;IACvE,MAAM,kBAAkB,GAAG,QAAQ,CAAC,MAAM,CACxC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,KAAK,CACnC,CAAC;IAEF,+DAA+D;IAC/D,wEAAwE;IACxE,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,MAAA,MAAM,CAAC,YAAY,mCAAI,EAAE,CAAC;SACxD,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,IAAA,qBAAa,EAAC,OAAO,CAAC,CAAC,CAAC,yCAAyC;SACtF,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QACf,MAAM,OAAO,GAAG,IAAA,+BAAkB,EAAC,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACjE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,gBAAgB,OAAO,yDAAyD,CACjF,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,OAAO,EAAE,OAAO,CAAU,CAAC;IACrC,CAAC,CAAC;SACD,MAAM,CACL,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,CACrB,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,cAAc,CAAC,OAAO,CAAC,KAAK,KAAK,CAClE;SACA,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC;IAE/B,8DAA8D;IAC9D,MAAM,oBAAoB,GAAG,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC;SACxD,MAAM,CACL,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,CACb,MAAM;QACN,MAAM,IAAI,MAAM;QAChB,MAAM,CAAC,IAAI;QACX,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CACjC;SACA,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC;IAE/B,OAAO;QACL,GAAG,IAAI,GAAG,CAAC;YACT,GAAG,kBAAkB;YACrB,GAAG,YAAY;YACf,GAAG,oBAAoB;SACxB,CAAC;KACH,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,UAAU,GAAG,CAAC,MAAc,EAAE,aAAqB,EAAE,EAAE;IAClE,OAAO,2BAA2B,CAAC,MAAM,EAAE,aAAa,EAAE,yBAAiB,CAAC,CAAC;AAC/E,CAAC,CAAC;AAFW,QAAA,UAAU,cAErB;AAEK,MAAM,yBAAyB,GAAG,CAAC,MAAc,EAAE,EAAE;IAC1D,OAAO;QACL,GAAG,IAAI,GAAG,CACR,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,kBAAU,EAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CACrE;KACF,CAAC;AACJ,CAAC,CAAC;AANW,QAAA,yBAAyB,6BAMpC;AAEF;;;GAGG;AACH,MAAM,uBAAuB,GAAG,CAC9B,MAAc,EACd,aAAqB,EACrB,GAAW,EACX,EAAE;;IACF,MAAM,KAAK,GAAG,MAAA,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,GAAG,0CAAG,GAAG,CAAC,CAAC;IAC1D,OAAO,IAAA,mBAAQ,EACb,GAAG,EACH,KAAK,IAAI,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EACrC,MAAM,CAAC,YAAY,CACpB,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,mBAAmB,GAAG,CACjC,MAAc,EACd,aAAqB,EACrB,OAA2B,EAC3B,EAAE;IACF,OAAO,IAAA,kBAAU,EAAC,MAAM,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CACtD,IAAA,wBAAgB,EACd,uBAAuB,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,CAAC,EACnD,OAAO,CACR,CACF,CAAC;AACJ,CAAC,CAAC;AAXW,QAAA,mBAAmB,uBAW9B;AAEF;;;;;GAKG;AACI,MAAM,2BAA2B,GAAG,CACzC,MAAc,EACW,EAAE;IAC3B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,aAAa,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3D,KAAK,MAAM,GAAG,IAAI,IAAA,kBAAU,EAAC,MAAM,EAAE,aAAa,CAAC,EAAE,CAAC;YACpD,MAAM,EAAE,GAAG,uBAAuB,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC;YAC/D,IAAI,EAAE,IAAI,IAAA,uBAAe,EAAC,EAAE,CAAC,EAAE,CAAC;gBAC9B,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;AAC5D,CAAC,CAAC;AAbW,QAAA,2BAA2B,+BAatC"}

package/dist/packages/pipeline/src/context/createAllComponentsContext.d.ts

@@ -1,8 +1,8 @@
 import type { ComponentContext, PipelineType } from "../types";
-import type { Config, PipelineTrigger } from "../types/config";
+import type { Config, EnvPipelineTrigger } from "../types/config";
 export type CreateAllComponentsContextProps = {
     config: Config;
-    trigger: PipelineTrigger;
+    trigger: EnvPipelineTrigger;
     pipelineType: PipelineType;
 };
 export declare const createAllComponentsContext: ({ config, trigger, pipelineType, }: CreateAllComponentsContextProps) => Promise<Array<ComponentContext>>;

package/dist/packages/pipeline/src/context/createComponentContext.d.ts

@@ -1,11 +1,11 @@
 import type { PipelineType } from "../types";
-import type { Config, PipelineTrigger } from "../types/config";
+import type { Config, EnvPipelineTrigger } from "../types/config";
 import type { ComponentContext } from "../types/context";
 export type CreateComponentContextContext = {
     config: Config;
     componentName: string;
     env: string;
     pipelineType?: PipelineType;
-    trigger?: PipelineTrigger;
+    trigger?: EnvPipelineTrigger;
 };
 export declare const createComponentContext: (ctx: CreateComponentContextContext) => Promise<ComponentContext>;

package/dist/packages/pipeline/src/context/createWorkspaceContext.d.ts

@@ -1,9 +1,9 @@
-import { type Config, type PipelineTrigger, type PipelineType, type WorkspaceContext } from "..";
+import { type Config, type EnvPipelineTrigger, type PipelineType, type WorkspaceContext } from "..";
 export declare function createWorkspaceContext({ env, components, workspaceName, config, pipelineType, trigger, }: {
     env: string;
     components: WorkspaceContext["components"];
     workspaceName: string;
     config: Config;
     pipelineType: PipelineType;
-    trigger: PipelineTrigger;
+    trigger: EnvPipelineTrigger;
 }): Promise<WorkspaceContext>;

package/dist/packages/pipeline/src/context/getEnvConfig.js

@@ -2,33 +2,49 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getEnvConfig = void 0;
 const lodash_es_1 = require("lodash-es");
+const getEnvInherit_1 = require("./getEnvInherit");
 const getEnvConfig = (config, componentName, env) => {
-    var _a, _b;
+    var _a;
     const defaultConfig = config.components[componentName];
     if (!defaultConfig) {
         throw new Error("unknown component " + componentName);
     }
-    const envCustomizations = (_b = (_a = defaultConfig.env) === null || _a === void 0 ? void 0 : _a[env]) !== null && _b !== void 0 ? _b : {};
-    if (envCustomizations === false) {
-        // env is disabled, still return the default config
-        return defaultConfig;
-    }
-    /**
-     * env config is merged with default. Arrays are not merged.
-     * you can customize this by providing a function that takes the default value as argument
-     */
-    return (0, lodash_es_1.mergeWith)(
+    // env config is layered onto the component config: the per-component
+    // overrides of inherited envs first (oldest ancestor first, see
+    // `environments.<name>.inherit`), the env's own overrides last
+    const chain = [...(0, getEnvInherit_1.getInheritedConfigChain)(config.environments, env), env];
     // mergeWith unfortunatly mutates the first object, so we need to clone it.
     // Passing empty object also doesn't work for us, because that will mess with the customizer function (second argument isn't nessecary the customized value)
-    (0, lodash_es_1.cloneDeep)(defaultConfig), envCustomizations, (defaultValue, customValue, key, obj, source) => {
-        // check if custom value is a function (and default is not),
-        // we currently don't have config options, that are functions, but we might in the future (customJobs is an exception)
-        if (typeof customValue === "function" &&
-            typeof defaultValue !== "function") {
-            return customValue(defaultValue);
+    const result = (0, lodash_es_1.cloneDeep)(defaultConfig);
+    for (const chainEnv of chain) {
+        const envCustomizations = (_a = defaultConfig.env) === null || _a === void 0 ? void 0 : _a[chainEnv];
+        if (!envCustomizations || envCustomizations === false) {
+            if (chainEnv === env && envCustomizations === false) {
+                // env is disabled, still return the default config
+                return defaultConfig;
+            }
+            continue;
         }
-        return undefined;
-    });
+        /**
+         * env config is merged with default. Arrays are not merged.
+         * you can customize this by providing a function that takes the default value as argument
+         */
+        (0, lodash_es_1.mergeWith)(result, 
+        // `host` must stay unique per env and `type` is the inherited
+        // env's identity — neither is inherited
+        chainEnv === env
+            ? envCustomizations
+            : (0, lodash_es_1.omit)(envCustomizations, ["host", "type"]), (defaultValue, customValue, key, obj, source) => {
+            // check if custom value is a function (and default is not),
+            // we currently don't have config options, that are functions, but we might in the future (customJobs is an exception)
+            if (typeof customValue === "function" &&
+                typeof defaultValue !== "function") {
+                return customValue(defaultValue);
+            }
+            return undefined;
+        });
+    }
+    return result;
 };
 exports.getEnvConfig = getEnvConfig;
 //# sourceMappingURL=getEnvConfig.js.map

package/dist/packages/pipeline/src/context/getEnvConfig.js.map

@@ -1 +1 @@
-{"version":3,"file":"getEnvConfig.js","sourceRoot":"","sources":["../../../../../../../packages/pipeline/src/context/getEnvConfig.ts"],"names":[],"mappings":";;;AAAA,yCAAiD;AAG1C,MAAM,YAAY,GAAG,CAC1B,MAAc,EACd,aAAqB,EACrB,GAAW,EACa,EAAE;;IAC1B,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IACvD,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,oBAAoB,GAAG,aAAa,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,iBAAiB,GAAG,MAAA,MAAA,aAAa,CAAC,GAAG,0CAAG,GAAG,CAAC,mCAAI,EAAE,CAAC;IACzD,IAAI,iBAAiB,KAAK,KAAK,EAAE,CAAC;QAChC,mDAAmD;QACnD,OAAO,aAAa,CAAC;IACvB,CAAC;IACD;;;OAGG;IACH,OAAO,IAAA,qBAAS;IACd,2EAA2E;IAC3E,4JAA4J;IAC5J,IAAA,qBAAS,EAAC,aAAa,CAAC,EACxB,iBAAiB,EACjB,CAAC,YAAY,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QAC9C,4DAA4D;QAC5D,sHAAsH;QACtH,IACE,OAAO,WAAW,KAAK,UAAU;YACjC,OAAO,YAAY,KAAK,UAAU,EAClC,CAAC;YACD,OAAO,WAAW,CAAC,YAAY,CAAC,CAAC;QACnC,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC,CACF,CAAC;AACJ,CAAC,CAAC;AArCW,QAAA,YAAY,gBAqCvB"}
+{"version":3,"file":"getEnvConfig.js","sourceRoot":"","sources":["../../../../../../../packages/pipeline/src/context/getEnvConfig.ts"],"names":[],"mappings":";;;AAAA,yCAAuD;AAEvD,mDAA0D;AAEnD,MAAM,YAAY,GAAG,CAC1B,MAAc,EACd,aAAqB,EACrB,GAAW,EACa,EAAE;;IAC1B,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IACvD,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,oBAAoB,GAAG,aAAa,CAAC,CAAC;IACxD,CAAC;IAED,qEAAqE;IACrE,gEAAgE;IAChE,+DAA+D;IAC/D,MAAM,KAAK,GAAG,CAAC,GAAG,IAAA,uCAAuB,EAAC,MAAM,CAAC,YAAY,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IAE1E,2EAA2E;IAC3E,4JAA4J;IAC5J,MAAM,MAAM,GAAG,IAAA,qBAAS,EAAC,aAAa,CAAC,CAAC;IAExC,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;QAC7B,MAAM,iBAAiB,GAAG,MAAA,aAAa,CAAC,GAAG,0CAAG,QAAQ,CAAC,CAAC;QACxD,IAAI,CAAC,iBAAiB,IAAI,iBAAiB,KAAK,KAAK,EAAE,CAAC;YACtD,IAAI,QAAQ,KAAK,GAAG,IAAI,iBAAiB,KAAK,KAAK,EAAE,CAAC;gBACpD,mDAAmD;gBACnD,OAAO,aAAa,CAAC;YACvB,CAAC;YACD,SAAS;QACX,CAAC;QACD;;;WAGG;QACH,IAAA,qBAAS,EACP,MAAM;QACN,8DAA8D;QAC9D,wCAAwC;QACxC,QAAQ,KAAK,GAAG;YACd,CAAC,CAAC,iBAAiB;YACnB,CAAC,CAAC,IAAA,gBAAI,EAAC,iBAAiB,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAC7C,CAAC,YAAY,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;YAC9C,4DAA4D;YAC5D,sHAAsH;YACtH,IACE,OAAO,WAAW,KAAK,UAAU;gBACjC,OAAO,YAAY,KAAK,UAAU,EAClC,CAAC;gBACD,OAAO,WAAW,CAAC,YAAY,CAAC,CAAC;YACnC,CAAC;YAED,OAAO,SAAS,CAAC;QACnB,CAAC,CACF,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAvDW,QAAA,YAAY,gBAuDvB"}

package/dist/packages/pipeline/src/context/getEnvInherit.d.ts

@@ -0,0 +1,20 @@
+import type { EnvironmentConfig } from "../types/config";
+type Environments = Record<string, EnvironmentConfig> | undefined;
+export type NormalizedEnvInherit = {
+    config?: string;
+    secrets?: string;
+};
+export declare const normalizeEnvInherit: (inherit: EnvironmentConfig["inherit"]) => NormalizedEnvInherit;
+/**
+ * the chain of envs whose per-component config overrides feed into
+ * `env`, oldest ancestor first (env itself not included). Cycles and
+ * unknown/`local` targets are an error.
+ */
+export declare const getInheritedConfigChain: (environments: Environments, env: string) => string[];
+/**
+ * the env whose secret values `env` uses (follows `inherit` secret
+ * sharing transitively; the env itself when it has its own secrets).
+ * All secret variable names must be built with this env.
+ */
+export declare const getSecretsEnv: (environments: Environments, env: string) => string;
+export {};

package/dist/packages/pipeline/src/context/getEnvInherit.js

@@ -0,0 +1,72 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getSecretsEnv = exports.getInheritedConfigChain = exports.normalizeEnvInherit = void 0;
+const config_1 = require("../types/config");
+const normalizeEnvInherit = (inherit) => {
+    if (!inherit)
+        return {};
+    if (typeof inherit === "string") {
+        return { config: inherit, secrets: inherit };
+    }
+    return {
+        config: inherit.config,
+        secrets: inherit.secrets === false ? undefined : inherit.secrets,
+    };
+};
+exports.normalizeEnvInherit = normalizeEnvInherit;
+const assertValidInheritTarget = (environments, env, target) => {
+    if (target === "local") {
+        throw new Error(`environment "${env}" cannot inherit from "local" — local is not a deployment environment`);
+    }
+    if (!(0, config_1.isKnowEnvType)(target) && !(environments === null || environments === void 0 ? void 0 : environments[target])) {
+        throw new Error(`environment "${env}" inherits from unknown environment "${target}"`);
+    }
+};
+/**
+ * the chain of envs whose per-component config overrides feed into
+ * `env`, oldest ancestor first (env itself not included). Cycles and
+ * unknown/`local` targets are an error.
+ */
+const getInheritedConfigChain = (environments, env) => {
+    var _a;
+    const chain = [];
+    const seen = new Set([env]);
+    let current = env;
+    for (;;) {
+        const target = (0, exports.normalizeEnvInherit)((_a = environments === null || environments === void 0 ? void 0 : environments[current]) === null || _a === void 0 ? void 0 : _a.inherit).config;
+        if (!target)
+            break;
+        assertValidInheritTarget(environments, current, target);
+        if (seen.has(target)) {
+            throw new Error(`environment "${env}" has a cyclic config inheritance via "${target}"`);
+        }
+        seen.add(target);
+        chain.unshift(target);
+        current = target;
+    }
+    return chain;
+};
+exports.getInheritedConfigChain = getInheritedConfigChain;
+/**
+ * the env whose secret values `env` uses (follows `inherit` secret
+ * sharing transitively; the env itself when it has its own secrets).
+ * All secret variable names must be built with this env.
+ */
+const getSecretsEnv = (environments, env) => {
+    var _a;
+    const seen = new Set([env]);
+    let current = env;
+    for (;;) {
+        const target = (0, exports.normalizeEnvInherit)((_a = environments === null || environments === void 0 ? void 0 : environments[current]) === null || _a === void 0 ? void 0 : _a.inherit).secrets;
+        if (!target)
+            return current;
+        assertValidInheritTarget(environments, current, target);
+        if (seen.has(target)) {
+            throw new Error(`environment "${env}" has a cyclic secrets inheritance via "${target}"`);
+        }
+        seen.add(target);
+        current = target;
+    }
+};
+exports.getSecretsEnv = getSecretsEnv;
+//# sourceMappingURL=getEnvInherit.js.map

package/dist/packages/pipeline/src/context/getEnvInherit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getEnvInherit.js","sourceRoot":"","sources":["../../../../../../../packages/pipeline/src/context/getEnvInherit.ts"],"names":[],"mappings":";;;AACA,4CAAgD;AASzC,MAAM,mBAAmB,GAAG,CACjC,OAAqC,EACf,EAAE;IACxB,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAC/C,CAAC;IACD,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,OAAO,EAAE,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO;KACjE,CAAC;AACJ,CAAC,CAAC;AAXW,QAAA,mBAAmB,uBAW9B;AAEF,MAAM,wBAAwB,GAAG,CAC/B,YAA0B,EAC1B,GAAW,EACX,MAAc,EACd,EAAE;IACF,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,gBAAgB,GAAG,uEAAuE,CAC3F,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,IAAA,sBAAa,EAAC,MAAM,CAAC,IAAI,CAAC,CAAA,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAG,MAAM,CAAC,CAAA,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CACb,gBAAgB,GAAG,wCAAwC,MAAM,GAAG,CACrE,CAAC;IACJ,CAAC;AACH,CAAC,CAAC;AAEF;;;;GAIG;AACI,MAAM,uBAAuB,GAAG,CACrC,YAA0B,EAC1B,GAAW,EACD,EAAE;;IACZ,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,IAAI,OAAO,GAAG,GAAG,CAAC;IAClB,SAAS,CAAC;QACR,MAAM,MAAM,GAAG,IAAA,2BAAmB,EAAC,MAAA,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAG,OAAO,CAAC,0CAAE,OAAO,CAAC,CAAC,MAAM,CAAC;QAC5E,IAAI,CAAC,MAAM;YAAE,MAAM;QACnB,wBAAwB,CAAC,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACxD,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CACb,gBAAgB,GAAG,0CAA0C,MAAM,GAAG,CACvE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjB,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACtB,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AArBW,QAAA,uBAAuB,2BAqBlC;AAEF;;;;GAIG;AACI,MAAM,aAAa,GAAG,CAC3B,YAA0B,EAC1B,GAAW,EACH,EAAE;;IACV,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,IAAI,OAAO,GAAG,GAAG,CAAC;IAClB,SAAS,CAAC;QACR,MAAM,MAAM,GAAG,IAAA,2BAAmB,EAChC,MAAA,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAG,OAAO,CAAC,0CAAE,OAAO,CACjC,CAAC,OAAO,CAAC;QACV,IAAI,CAAC,MAAM;YAAE,OAAO,OAAO,CAAC;QAC5B,wBAAwB,CAAC,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACxD,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CACb,gBAAgB,GAAG,2CAA2C,MAAM,GAAG,CACxE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjB,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;AACH,CAAC,CAAC;AApBW,QAAA,aAAa,iBAoBxB"}

package/dist/packages/pipeline/src/context/getEnvInstance.d.ts

@@ -0,0 +1,4 @@
+import type { PipelineType } from "../types";
+import type { EnvConfigWithComponent, EnvironmentConfig } from "../types/config";
+import type { EnvironmentInstance } from "../types/environmentContext";
+export declare const getEnvInstance: (envConfig: EnvConfigWithComponent, env: string, pipelineType?: PipelineType, environments?: Record<string, EnvironmentConfig>) => EnvironmentInstance;

package/dist/packages/pipeline/src/context/{getReviewSlug.js → getEnvInstance.js}

@@ -1,21 +1,25 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getReviewSlug = void 0;
+exports.getEnvInstance = void 0;
 const bash_1 = require("../../../bash/src/index.js");
 const bashExpressionPerPipelineType_1 = require("../bash/bashExpressionPerPipelineType");
-const getEnvType_1 = require("./getEnvType");
+const getEnvOn_1 = require("./getEnvOn");
 const REVIEW_SLUG = {
     default: "unknown-review-slug",
     gitlab: new bash_1.BashExpression(`$([ -n "$CI_MERGE_REQUEST_IID" ] && echo "mr$CI_MERGE_REQUEST_IID" || { [ -n "$CI_COMMIT_REF_SLUG" ] && echo "$CI_COMMIT_REF_SLUG" || echo "unknown"; })`),
     // CL_PR_NUMBER is injected by the github backend at the workflow level
     github: new bash_1.BashExpression(`$([ -n "$CL_PR_NUMBER" ] && echo "pr$CL_PR_NUMBER" || echo "unknown")`),
 };
-const getReviewSlug = (envConfig, env, pipelineType) => {
-    const envType = (0, getEnvType_1.getEnvType)(env, envConfig);
-    if (envType === "review") {
-        return (0, bashExpressionPerPipelineType_1.getBashExpressionPerPipelineType)(REVIEW_SLUG, pipelineType);
+const getEnvInstance = (envConfig, env, pipelineType, environments) => {
+    // an env deploying per merge request is a review app — one dynamic
+    // instance per MR, identified by the review slug
+    if ((0, getEnvOn_1.getEnvOn)(env, envConfig, environments) === "mr") {
+        return {
+            type: "review",
+            reviewSlug: (0, bashExpressionPerPipelineType_1.getBashExpressionPerPipelineType)(REVIEW_SLUG, pipelineType),
+        };
     }
-    return null; // not a review app;
+    return { type: "stable" };
 };
-exports.getReviewSlug = getReviewSlug;
-//# sourceMappingURL=getReviewSlug.js.map
+exports.getEnvInstance = getEnvInstance;
+//# sourceMappingURL=getEnvInstance.js.map

package/dist/packages/pipeline/src/context/getEnvInstance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getEnvInstance.js","sourceRoot":"","sources":["../../../../../../../packages/pipeline/src/context/getEnvInstance.ts"],"names":[],"mappings":";;;AAAA,0CAAiD;AAEjD,yFAAyF;AAOzF,yCAAsC;AACtC,MAAM,WAAW,GAAkC;IACjD,OAAO,EAAE,qBAAqB;IAC9B,MAAM,EAAE,IAAI,qBAAc,CACxB,0JAA0J,CAC3J;IACD,uEAAuE;IACvE,MAAM,EAAE,IAAI,qBAAc,CACxB,uEAAuE,CACxE;CACF,CAAC;AAEK,MAAM,cAAc,GAAG,CAC5B,SAAiC,EACjC,GAAW,EACX,YAA2B,EAC3B,YAAgD,EAC3B,EAAE;IACvB,mEAAmE;IACnE,iDAAiD;IACjD,IAAI,IAAA,mBAAQ,EAAC,GAAG,EAAE,SAAS,EAAE,YAAY,CAAC,KAAK,IAAI,EAAE,CAAC;QACpD,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,IAAA,gEAAgC,EAAC,WAAW,EAAE,YAAY,CAAC;SACxE,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC5B,CAAC,CAAC;AAfW,QAAA,cAAc,kBAezB"}

package/dist/packages/pipeline/src/context/getEnvOn.d.ts

@@ -0,0 +1,13 @@
+import type { EnvironmentConfig, EnvOnConfig, EnvType } from "../types";
+/**
+ * resolves when an env deploys: the project-wide `on` config of the env
+ * (top-level `environments`), falling back to the default of its env
+ * type (dev → mainBranch, review → mr, stage/prod → taggedRelease,
+ * local → false).
+ *
+ * `on` is deliberately not configurable per component — an environment
+ * deploys at one point in time for the whole project.
+ */
+export declare const getEnvOn: (env: string, envConfig: {
+    type?: EnvType;
+}, environments?: Record<string, EnvironmentConfig>) => EnvOnConfig;

package/dist/packages/pipeline/src/context/getEnvOn.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getEnvOn = void 0;
+const types_1 = require("../types");
+const getEnvType_1 = require("./getEnvType");
+const getDefaultOnForType = (envType) => {
+    var _a;
+    const triggers = types_1.ENV_TYPES[envType].triggers;
+    return (_a = triggers[0]) !== null && _a !== void 0 ? _a : false;
+};
+/**
+ * resolves when an env deploys: the project-wide `on` config of the env
+ * (top-level `environments`), falling back to the default of its env
+ * type (dev → mainBranch, review → mr, stage/prod → taggedRelease,
+ * local → false).
+ *
+ * `on` is deliberately not configurable per component — an environment
+ * deploys at one point in time for the whole project.
+ */
+const getEnvOn = (env, envConfig, environments) => {
+    var _a;
+    const on = (_a = environments === null || environments === void 0 ? void 0 : environments[env]) === null || _a === void 0 ? void 0 : _a.on;
+    if (on !== undefined)
+        return on;
+    return getDefaultOnForType((0, getEnvType_1.getEnvType)(env, envConfig, environments));
+};
+exports.getEnvOn = getEnvOn;
+//# sourceMappingURL=getEnvOn.js.map

package/dist/packages/pipeline/src/context/getEnvOn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getEnvOn.js","sourceRoot":"","sources":["../../../../../../../packages/pipeline/src/context/getEnvOn.ts"],"names":[],"mappings":";;;AACA,oCAAqC;AACrC,6CAA0C;AAE1C,MAAM,mBAAmB,GAAG,CAAC,OAAgB,EAAe,EAAE;;IAC5D,MAAM,QAAQ,GAAG,iBAAS,CAAC,OAAO,CAAC,CAAC,QAAkC,CAAC;IACvE,OAAO,MAAA,QAAQ,CAAC,CAAC,CAAC,mCAAI,KAAK,CAAC;AAC9B,CAAC,CAAC;AAEF;;;;;;;;GAQG;AACI,MAAM,QAAQ,GAAG,CACtB,GAAW,EACX,SAEC,EACD,YAAgD,EACnC,EAAE;;IACf,MAAM,EAAE,GAAG,MAAA,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAG,GAAG,CAAC,0CAAE,EAAE,CAAC;IACnC,IAAI,EAAE,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAChC,OAAO,mBAAmB,CAAC,IAAA,uBAAU,EAAC,GAAG,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;AACvE,CAAC,CAAC;AAVW,QAAA,QAAQ,YAUnB"}

package/dist/packages/pipeline/src/context/getEnvType.d.ts

@@ -1,4 +1,10 @@
-import type { EnvType } from "../types";
+import type { EnvironmentConfig, EnvType } from "../types";
+/**
+ * the type of a project-wide declared env: its explicit `type`, its
+ * name (when it is itself an env type), or — for envs that inherit —
+ * the type of the env they inherit their config from
+ */
+export declare const getDeclaredEnvType: (environments: Record<string, EnvironmentConfig> | undefined, env: string, seen?: Set<string>) => EnvType | undefined;
 export declare const getEnvType: (env: string, envConfig: {
     type?: EnvType;
-}) => EnvType;
+}, environments?: Record<string, EnvironmentConfig>) => EnvType;