@codigodoleo/wp-kit 3.1.1 → 3.3.0

package/modules/deploy/.github/workflows/deploy-docker.yml

@@ -0,0 +1,104 @@
+# Reusable workflow — Docker Build & Push to Container Registry
+#
+# Como usar no seu workflow principal (.github/workflows/main.yml):
+#
+#   on:
+#     push:
+#       branches: [main]
+#
+#   jobs:
+#     deploy:
+#       uses: ./.github/workflows/deploy-docker.yml
+#       with:
+#         registry: ghcr.io          # opcional — default: ghcr.io
+#         # registry: docker.io      # para Docker Hub
+#       secrets:
+#         REGISTRY_TOKEN: ${{ secrets.GITHUB_TOKEN }}  # GHCR usa GITHUB_TOKEN
+#         # REGISTRY_TOKEN: ${{ secrets.DOCKERHUB_TOKEN }}  # Docker Hub
+#
+# Secrets necessários (Settings → Secrets → Actions):
+#   REGISTRY_TOKEN — token de autenticação no registry (GITHUB_TOKEN é suficiente para GHCR)
+
+name: Deploy (Docker)
+
+on:
+  workflow_call:
+    inputs:
+      registry:
+        description: 'Container registry (ghcr.io ou docker.io)'
+        required: false
+        type: string
+        default: ghcr.io
+      image-name:
+        description: 'Nome da imagem (default: github.repository em lowercase)'
+        required: false
+        type: string
+        default: ''
+      dockerfile:
+        description: 'Caminho para o Dockerfile'
+        required: false
+        type: string
+        default: Dockerfile
+      context:
+        description: 'Contexto do build Docker'
+        required: false
+        type: string
+        default: '.'
+    secrets:
+      REGISTRY_TOKEN:
+        required: false
+
+permissions:
+  contents: read
+  packages: write
+
+jobs:
+  build-push:
+    name: Build & Push
+    runs-on: ubuntu-latest
+    env:
+      FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Resolve image name
+        id: image
+        run: |
+          NAME="${{ inputs.image-name }}"
+          [ -z "$NAME" ] && NAME="${{ github.repository }}"
+          echo "name=${NAME,,}" >> $GITHUB_OUTPUT
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to registry
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ inputs.registry }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.REGISTRY_TOKEN || secrets.GITHUB_TOKEN }}
+
+      - name: Extract Docker metadata
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ inputs.registry }}/${{ steps.image.outputs.name }}
+          tags: |
+            type=ref,event=branch
+            type=semver,pattern={{version}}
+            type=sha,prefix=sha-,format=short
+
+      - name: Build and push
+        uses: docker/build-push-action@v6
+        with:
+          context: ${{ inputs.context }}
+          file: ${{ inputs.dockerfile }}
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max

package/modules/deploy/.github/workflows/deploy-ssh.yml

@@ -0,0 +1,128 @@
+# Reusable workflow — SSH Deploy via rsync
+#
+# Como usar no seu workflow principal (.github/workflows/main.yml):
+#
+#   on:
+#     push:
+#       branches: [main]
+#
+#   jobs:
+#     deploy:
+#       uses: ./.github/workflows/deploy-ssh.yml
+#       with:
+#         host: meu-servidor.example.com
+#         user: deploy
+#         remote-path: /var/www/html
+#         theme-path: content/themes/meu-tema  # opcional, para projetos com Sage
+#       secrets:
+#         SSH_PRIVATE_KEY: ${{ secrets.SSH_PRIVATE_KEY }}
+#         SSH_KNOWN_HOSTS: ${{ secrets.SSH_KNOWN_HOSTS }}
+#
+# Secrets necessários (Settings → Secrets → Actions):
+#   SSH_PRIVATE_KEY  — chave SSH privada (gerada sem passphrase para CI)
+#   SSH_KNOWN_HOSTS  — saída de: ssh-keyscan -H <host>
+#
+# Permissões no servidor — o rsync usa --no-perms --no-owner --no-group,
+# portanto não altera permissões/proprietários existentes no destino.
+
+name: Deploy (SSH + rsync)
+
+on:
+  workflow_call:
+    inputs:
+      host:
+        description: 'Endereço do servidor de destino'
+        required: true
+        type: string
+      user:
+        description: 'Usuário SSH no servidor'
+        required: true
+        type: string
+      remote-path:
+        description: 'Caminho absoluto no servidor de destino'
+        required: true
+        type: string
+      php-version:
+        description: 'Versão do PHP para instalar dependências Composer'
+        required: false
+        type: string
+        default: '8.3'
+      node-version:
+        description: 'Versão do Node.js para build de assets'
+        required: false
+        type: string
+        default: '22'
+      theme-path:
+        description: 'Caminho relativo do tema para build (vazio = sem build de tema)'
+        required: false
+        type: string
+        default: ''
+      rsync-excludes:
+        description: 'Caminhos a excluir do rsync, separados por vírgula'
+        required: false
+        type: string
+        default: '.git,.env,node_modules/.cache'
+    secrets:
+      SSH_PRIVATE_KEY:
+        required: true
+      SSH_KNOWN_HOSTS:
+        required: true
+
+jobs:
+  build-and-deploy:
+    name: Build & Deploy via SSH
+    runs-on: ubuntu-latest
+    env:
+      FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Setup PHP
+        uses: shivammathur/setup-php@v2
+        with:
+          php-version: ${{ inputs.php-version }}
+
+      - name: Install Composer dependencies
+        run: composer install --no-dev --optimize-autoloader --no-interaction
+
+      - name: Setup Node.js
+        if: inputs.theme-path != ''
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ inputs.node-version }}
+          cache: 'npm'
+          cache-dependency-path: ${{ inputs.theme-path }}/package-lock.json
+
+      - name: Build theme assets
+        if: inputs.theme-path != ''
+        run: |
+          npm install --prefix "${{ inputs.theme-path }}"
+          npm run build --prefix "${{ inputs.theme-path }}"
+
+      - name: Configure SSH agent
+        uses: webfactory/ssh-agent@v0.9.0
+        with:
+          ssh-private-key: ${{ secrets.SSH_PRIVATE_KEY }}
+
+      - name: Add known hosts
+        run: |
+          mkdir -p ~/.ssh
+          echo "${{ secrets.SSH_KNOWN_HOSTS }}" >> ~/.ssh/known_hosts
+          chmod 600 ~/.ssh/known_hosts
+
+      - name: Deploy via rsync
+        run: |
+          EXCLUDE_ARGS=""
+          IFS=',' read -ra ITEMS <<< "${{ inputs.rsync-excludes }}"
+          for item in "${ITEMS[@]}"; do
+            EXCLUDE_ARGS="$EXCLUDE_ARGS --exclude=${item// /}"
+          done
+
+          rsync -avz --delete \
+            $EXCLUDE_ARGS \
+            --no-perms --no-owner --no-group \
+            ./ \
+            "${{ inputs.user }}@${{ inputs.host }}:${{ inputs.remote-path }}/"

package/modules/deploy/.github/workflows/release.yml

@@ -0,0 +1,57 @@
+# Reusable workflow — Semantic Release
+#
+# Como usar no seu workflow principal (.github/workflows/main.yml):
+#
+#   on:
+#     push:
+#       branches: [main]
+#
+#   jobs:
+#     release:
+#       uses: ./.github/workflows/release.yml
+#       secrets:
+#         NPM_TOKEN: ${{ secrets.NPM_TOKEN }}  # opcional para projetos WordPress
+#
+# GITHUB_TOKEN é injetado automaticamente com os devidos escopos.
+
+name: Semantic Release (reusable)
+
+on:
+  workflow_call:
+    secrets:
+      NPM_TOKEN:
+        required: false
+
+permissions:
+  contents: write
+  issues: write
+  pull-requests: write
+  id-token: write
+
+jobs:
+  release:
+    name: Semantic Release
+    runs-on: ubuntu-latest
+    env:
+      FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          persist-credentials: false
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '24'
+          cache: 'npm'
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Release
+        run: npx semantic-release
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}

package/modules/deploy/index.js

@@ -12,6 +12,65 @@ export async function setupModule(context, generator) {
     if (context.gitProvider === 'gitlab') {
       await generator.generateFile('.gitlab/gitlab-ci.yml', context, 'deploy', '.gitlab-ci.yml');
       log(color.green, '[deploy] .gitlab-ci.yml gerado com sucesso.');
+
+      // Jobs reutilizáveis para .gitlab/ci/ (include: no pipeline principal)
+      await generator.generateFile(
+        '.gitlab/ci/release.yml',
+        context,
+        'deploy',
+        '.gitlab/ci/release.yml'
+      );
+      await generator.generateFile(
+        '.gitlab/ci/deploy-docker.yml',
+        context,
+        'deploy',
+        '.gitlab/ci/deploy-docker.yml'
+      );
+      await generator.generateFile(
+        '.gitlab/ci/deploy-ssh.yml',
+        context,
+        'deploy',
+        '.gitlab/ci/deploy-ssh.yml'
+      );
+      log(color.green, '[deploy] Jobs reutilizáveis GitLab gerados em .gitlab/ci/');
+
+      // Lint jobs condicionais por módulo
+      if (context.ci?.lint?.sage) {
+        await generator.generateFile(
+          '.gitlab/ci/lint-sage.yml',
+          context,
+          'deploy',
+          '.gitlab/ci/lint-sage.yml'
+        );
+        log(color.green, '[deploy] GitLab lint job para Sage gerado.');
+      }
+      if (context.ci?.lint?.mu_plugin) {
+        await generator.generateFile(
+          '.gitlab/ci/lint-mu-plugin.yml',
+          context,
+          'deploy',
+          '.gitlab/ci/lint-mu-plugin.yml'
+        );
+        log(color.green, '[deploy] GitLab lint job para MU Plugin gerado.');
+      }
+      if (context.ci?.lint?.plugin) {
+        await generator.generateFile(
+          '.gitlab/ci/lint-plugin.yml',
+          context,
+          'deploy',
+          '.gitlab/ci/lint-plugin.yml'
+        );
+        log(color.green, '[deploy] GitLab lint job para Plugin gerado.');
+      }
+      if (context.ci?.lint?.blank_theme) {
+        await generator.generateFile(
+          '.gitlab/ci/lint-blank-theme.yml',
+          context,
+          'deploy',
+          '.gitlab/ci/lint-blank-theme.yml'
+        );
+        log(color.green, '[deploy] GitLab lint job para Blank Theme gerado.');
+      }
     }
     if (context.gitProvider === 'github') {
       await generator.generateFile(
@@ -21,6 +80,24 @@ export async function setupModule(context, generator) {
         '.github/workflows/ci.yml'
       );
       log(color.green, '[deploy] GitHub Actions workflow gerado com sucesso.');
+
+      // Reusable workflows para .github/workflows/ (workflow_call no pipeline principal)
+      await generator.copyFile(
+        '.github/workflows/release.yml',
+        'deploy',
+        '.github/workflows/release.yml'
+      );
+      await generator.copyFile(
+        '.github/workflows/deploy-docker.yml',
+        'deploy',
+        '.github/workflows/deploy-docker.yml'
+      );
+      await generator.copyFile(
+        '.github/workflows/deploy-ssh.yml',
+        'deploy',
+        '.github/workflows/deploy-ssh.yml'
+      );
+      log(color.green, '[deploy] Reusable workflows GitHub gerados em .github/workflows/');
     }
     if (context.gitProvider === 'bitbucket') {
       await generator.generateFile(

package/modules/deploy/prompts.js

@@ -15,10 +15,8 @@ export default [
         value: 'docker',
       },
       {
-        name: 'SSH',
+        name: 'SSH (rsync)',
         value: 'ssh',
-        disabled: true,
-        description: 'Em breve',
       },
     ],
     default: 'docker',

package/modules/deploy/templates/.github/workflows/ci.yml.hbs

@@ -26,6 +26,34 @@ env.NODE_VERSION
   não encontrado em $THEME — pulando build do tema" fi
 {{/if}}
 
+{{#if ci.lint.sage}}
+  lint-sage: name: Lint Sage Theme runs-on: ubuntu-latest steps: - name: Checkout uses: actions/checkout@v4 - name: Setup Node uses: actions/setup-node@v4 with: node-version: ${{'{{'}}
+  env.NODE_VERSION
+  {{'}}'}}
+  - name: Lint Sage run: | cd {{ci.theme.paths.themeRoot}} && npm ci && npx eslint resources/ --config eslint.config.mjs --fix-dry-run && npx stylelint "resources/**/*.{css,scss}"
+{{/if}}
+
+{{#if ci.lint.mu_plugin}}
+  lint-mu-plugin: name: Lint MU Plugin runs-on: ubuntu-latest steps: - name: Checkout uses: actions/checkout@v4 - name: Setup PHP uses: shivammathur/setup-php@v2 with: php-version: ${{'{{'}}
+  env.PHP_VERSION
+  {{'}}'}}
+  - name: Lint MU Plugin PHP run: | cd content/mu-plugins/{{mu_plugin_name}} && composer install --no-dev && ./vendor/bin/pint --test
+{{/if}}
+
+{{#if ci.lint.plugin}}
+  lint-plugin: name: Lint Plugin runs-on: ubuntu-latest steps: - name: Checkout uses: actions/checkout@v4 - name: Setup PHP uses: shivammathur/setup-php@v2 with: php-version: ${{'{{'}}
+  env.PHP_VERSION
+  {{'}}'}}
+  - name: Lint Plugin PHP run: | cd content/plugins/{{plugin_name}} && composer install --no-dev && ./vendor/bin/pint --test
+{{/if}}
+
+{{#if ci.lint.blank_theme}}
+  lint-blank-theme: name: Lint Blank Theme runs-on: ubuntu-latest steps: - name: Checkout uses: actions/checkout@v4 - name: Setup Node uses: actions/setup-node@v4 with: node-version: ${{'{{'}}
+  env.NODE_VERSION
+  {{'}}'}}
+  - name: Lint Blank Theme run: | cd content/themes/{{blank_theme_name}} && npm ci && npx eslint src/js/ --config eslint.config.mjs --fix-dry-run && npx stylelint "src/scss/**/*.scss"
+{{/if}}
+
 test-basic: name: Tests runs-on: ubuntu-latest steps: - name: Checkout uses: actions/checkout@v4 -
 name: Setup Node uses: actions/setup-node@v4 with: node-version: ${{'{{'}}
 env.NODE_VERSION
@@ -46,4 +74,4 @@ env.NODE_VERSION
 {{/if}}
 
 env: PHP_VERSION: "{{phpVersion}}" NODE_VERSION: "{{ci.nodeVersion}}" WORDPRESS_VERSION: "{{wpCoreVersion}}"
-PROJECT_NAME: "{{projectName}}"
+PROJECT_NAME: "{{projectName}}"

package/modules/deploy/templates/.gitlab/ci/deploy-docker.yml.hbs

@@ -0,0 +1,35 @@
+# Job reutilizável — Docker Build & Push to Container Registry
+#
+# Como usar no .gitlab-ci.yml principal:
+#
+#   include:
+#     - local: '.gitlab/ci/deploy-docker.yml'
+#
+#   stages:
+#     - deploy
+#
+# Variáveis necessárias (Settings → CI/CD → Variables):
+#   CI_REGISTRY_USER     — automático para o GitLab Container Registry
+#   CI_REGISTRY_PASSWORD — automático para o GitLab Container Registry
+#   CI_REGISTRY_IMAGE    — automático: registry.gitlab.com/<grupo>/<projeto>
+#
+# Para registry externo (Docker Hub, GHCR), sobrescreva as variáveis acima.
+
+deploy:docker:
+  stage: deploy
+  image: docker:latest
+  services:
+    - docker:dind
+  variables:
+    DOCKER_TLS_CERTDIR: '/certs'
+    IMAGE_TAG: $CI_REGISTRY_IMAGE:$CI_COMMIT_REF_SLUG
+    IMAGE_LATEST: $CI_REGISTRY_IMAGE:latest
+  before_script:
+    - docker login -u "$CI_REGISTRY_USER" -p "$CI_REGISTRY_PASSWORD" "$CI_REGISTRY"
+  script:
+    - docker build --tag "$IMAGE_TAG" --tag "$IMAGE_LATEST" .
+    - docker push "$IMAGE_TAG"
+    - docker push "$IMAGE_LATEST"
+  rules:
+    - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH
+    - if: $CI_COMMIT_TAG

package/modules/deploy/templates/.gitlab/ci/deploy-ssh.yml.hbs

@@ -0,0 +1,83 @@
+# Job reutilizável — SSH Deploy via rsync
+#
+# Como usar no .gitlab-ci.yml principal:
+#
+#   include:
+#     - local: '.gitlab/ci/deploy-ssh.yml'
+#
+#   stages:
+#     - build
+#     - deploy
+#
+# Variáveis necessárias (Settings → CI/CD → Variables):
+#   SSH_PRIVATE_KEY — chave SSH privada (sem passphrase para CI)
+#   SSH_KNOWN_HOSTS — saída de: ssh-keyscan -H <host>
+#   DEPLOY_HOST     — endereço do servidor (ex: meu-servidor.example.com)
+#   DEPLOY_USER     — usuário SSH (ex: deploy)
+#   DEPLOY_PATH     — caminho absoluto no servidor (ex: /var/www/html)
+#
+# O rsync usa --no-perms --no-owner --no-group, portanto não altera
+# permissões nem proprietários existentes no servidor de destino.
+
+.ssh-agent-setup: &ssh-agent-setup
+  - eval "$(ssh-agent -s)"
+  - echo "$SSH_PRIVATE_KEY" | tr -d '\r' | ssh-add -
+  - mkdir -p ~/.ssh && chmod 700 ~/.ssh
+  - echo "$SSH_KNOWN_HOSTS" >> ~/.ssh/known_hosts && chmod 600 ~/.ssh/known_hosts
+
+build:deps:
+  stage: build
+  image: composer:latest
+  script:
+    - composer install --no-dev --optimize-autoloader --no-interaction
+  artifacts:
+    paths:
+      - vendor/
+    expire_in: 1 hour
+  rules:
+    - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH
+
+build:assets:
+  stage: build
+  image: node:{{nodeVersion}}-alpine
+  before_script:
+    - apk add --no-cache git
+  script:
+    - |
+      {{#if ci.theme.paths.themeRoot}}
+      if [ -d "{{ci.theme.paths.themeRoot}}" ]; then
+        npm install --prefix "{{ci.theme.paths.themeRoot}}"
+        npm run build --prefix "{{ci.theme.paths.themeRoot}}"
+      fi
+      {{else}}
+      if [ -f package.json ]; then npm ci && npm run build --if-present; fi
+      {{/if}}
+  artifacts:
+    paths:
+      - content/themes/*/public/
+      - public/
+    expire_in: 1 hour
+  rules:
+    - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH
+
+deploy:ssh:
+  stage: deploy
+  image: alpine:latest
+  needs:
+    - job: build:deps
+    - job: build:assets
+  before_script:
+    - apk add --no-cache rsync openssh-client
+    - *ssh-agent-setup
+  script:
+    - |
+      rsync -avz --delete \
+        --no-perms --no-owner --no-group \
+        --exclude='.git' \
+        --exclude='.env' \
+        --exclude='node_modules' \
+        --exclude='node_modules/.cache' \
+        ./ \
+        "$DEPLOY_USER@$DEPLOY_HOST:$DEPLOY_PATH/"
+  rules:
+    - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH

package/modules/deploy/templates/.gitlab/ci/lint-blank-theme.yml.hbs

@@ -0,0 +1,35 @@
+{{#if ci.lint.blank_theme}}
+lint:blank-theme:eslint:
+  stage: lint
+  image: node:${NODE_VERSION}-alpine
+  variables:
+    THEME_DIR: content/themes/{{blank_theme_name}}
+  before_script:
+    - apk add --no-cache git
+  script:
+    - cd $THEME_DIR
+    - npm ci --cache .npm --prefer-offline
+    - npx eslint src/js/ --config eslint.config.mjs --fix-dry-run
+  rules:
+    - if: $CI_PIPELINE_SOURCE == "merge_request_event"
+    - if: $CI_COMMIT_BRANCH == "main"
+    - if: $CI_COMMIT_BRANCH == "staging"
+    - if: $CI_COMMIT_BRANCH == "develop"
+
+lint:blank-theme:stylelint:
+  stage: lint
+  image: node:${NODE_VERSION}-alpine
+  variables:
+    THEME_DIR: content/themes/{{blank_theme_name}}
+  before_script:
+    - apk add --no-cache git
+  script:
+    - cd $THEME_DIR
+    - npm ci --cache .npm --prefer-offline
+    - npx stylelint "src/scss/**/*.scss"
+  rules:
+    - if: $CI_PIPELINE_SOURCE == "merge_request_event"
+    - if: $CI_COMMIT_BRANCH == "main"
+    - if: $CI_COMMIT_BRANCH == "staging"
+    - if: $CI_COMMIT_BRANCH == "develop"
+{{/if}}

package/modules/deploy/templates/.gitlab/ci/lint-mu-plugin.yml.hbs

@@ -0,0 +1,19 @@
+{{#if ci.lint.mu_plugin}}
+lint:mu-plugin:pint:
+  stage: lint
+  image: php:${PHP_VERSION}-cli
+  variables:
+    PLUGIN_DIR: content/mu-plugins/{{mu_plugin_name}}
+  before_script:
+    - apt-get update -qq && apt-get install -qq --no-install-recommends git unzip
+    - curl -sS https://getcomposer.org/installer | php -- --install-dir=/usr/local/bin --filename=composer
+  script:
+    - cd $PLUGIN_DIR
+    - composer install --no-dev
+    - ./vendor/bin/pint --test
+  rules:
+    - if: $CI_PIPELINE_SOURCE == "merge_request_event"
+    - if: $CI_COMMIT_BRANCH == "main"
+    - if: $CI_COMMIT_BRANCH == "staging"
+    - if: $CI_COMMIT_BRANCH == "develop"
+{{/if}}

package/modules/deploy/templates/.gitlab/ci/lint-plugin.yml.hbs

@@ -0,0 +1,19 @@
+{{#if ci.lint.plugin}}
+lint:plugin:pint:
+  stage: lint
+  image: php:${PHP_VERSION}-cli
+  variables:
+    PLUGIN_DIR: content/plugins/{{plugin_name}}
+  before_script:
+    - apt-get update -qq && apt-get install -qq --no-install-recommends git unzip
+    - curl -sS https://getcomposer.org/installer | php -- --install-dir=/usr/local/bin --filename=composer
+  script:
+    - cd $PLUGIN_DIR
+    - composer install --no-dev
+    - ./vendor/bin/pint --test
+  rules:
+    - if: $CI_PIPELINE_SOURCE == "merge_request_event"
+    - if: $CI_COMMIT_BRANCH == "main"
+    - if: $CI_COMMIT_BRANCH == "staging"
+    - if: $CI_COMMIT_BRANCH == "develop"
+{{/if}}

package/modules/deploy/templates/.gitlab/ci/lint-sage.yml.hbs

@@ -0,0 +1,47 @@
+{{#if ci.lint.sage}}
+lint:sage:eslint:
+  stage: lint
+  image: node:${NODE_VERSION}-alpine
+  before_script:
+    - apk add --no-cache git
+  script:
+    - cd {{ci.theme.paths.themeRoot}}
+    - npm ci --cache .npm --prefer-offline
+    - npx eslint resources/ --config eslint.config.mjs --fix-dry-run
+  rules:
+    - if: $CI_PIPELINE_SOURCE == "merge_request_event"
+    - if: $CI_COMMIT_BRANCH == "main"
+    - if: $CI_COMMIT_BRANCH == "staging"
+    - if: $CI_COMMIT_BRANCH == "develop"
+
+lint:sage:stylelint:
+  stage: lint
+  image: node:${NODE_VERSION}-alpine
+  before_script:
+    - apk add --no-cache git
+  script:
+    - cd {{ci.theme.paths.themeRoot}}
+    - npm ci --cache .npm --prefer-offline
+    - npx stylelint "resources/**/*.{css,scss}"
+  rules:
+    - if: $CI_PIPELINE_SOURCE == "merge_request_event"
+    - if: $CI_COMMIT_BRANCH == "main"
+    - if: $CI_COMMIT_BRANCH == "staging"
+    - if: $CI_COMMIT_BRANCH == "develop"
+
+lint:sage:pint:
+  stage: lint
+  image: php:${PHP_VERSION}-cli
+  before_script:
+    - apt-get update -qq && apt-get install -qq --no-install-recommends git unzip
+    - curl -sS https://getcomposer.org/installer | php -- --install-dir=/usr/local/bin --filename=composer
+  script:
+    - cd {{ci.theme.paths.themeRoot}}
+    - composer install --no-dev --optimize-autoloader
+    - ./vendor/bin/pint --test
+  rules:
+    - if: $CI_PIPELINE_SOURCE == "merge_request_event"
+    - if: $CI_COMMIT_BRANCH == "main"
+    - if: $CI_COMMIT_BRANCH == "staging"
+    - if: $CI_COMMIT_BRANCH == "develop"
+{{/if}}