@formigio/fazemos-cli 0.10.19 → 0.10.20

package/dist/index.js

@@ -12,6 +12,7 @@ import { printFindings, printJson } from './yaml/format.js';
 import { validateManifest } from './manifest/checks.js';
 import { findLocalRegistry, resolveRole, buildInboxFile, writeInboxFile, writeInboxFileAtPath, buildRolesSyncPayload, findUnprocessedInboxFiles, computeFileHash, gitCommitInboxFile, } from './dispatch.js';
 import { execSync } from 'child_process';
+import { parseExecutionsJson, resolveWaitOptions, waitForPipelines, buildAwsCommand, validateExecutionEntry, } from './wait-for-pipeline.js';
 import { readFileSync, readdirSync, writeFileSync, mkdirSync, existsSync, statSync } from 'fs';
 import { fileURLToPath } from 'url';
 import { dirname, resolve, basename } from 'path';
@@ -4475,6 +4476,70 @@ pipelines
         process.exit(1);
     }
 });
+// ── P8/I55 — deploy-completion gate ──
+// Poll one or more CodePipeline executions until each reaches a terminal state.
+// Shells out to the `aws` CLI via execSync (no @aws-sdk dependency, consistent
+// with the existing CLI pattern); credentials arrive via the ECS task-role
+// metadata service inside the agent container. Exit-code contract (spec §3.3):
+//   0 Succeeded (or empty map) · 2 Failed/Stopped · 3 Superseded · 4 timeout · 5 aws-call-failure.
+pipelines
+    .command('wait-for-pipeline')
+    .description('Poll CodePipeline execution(s) until terminal; exit 0 on Succeeded, non-zero with a structured diagnostic otherwise (deploy-completion gate)')
+    .argument('[execution-id]', 'CodePipeline pipeline-execution-id (single-pair form; requires --pipeline). Omit when using --executions-json.')
+    .option('--pipeline <name>', 'CodePipeline name (required with the single-pair form; execution-id is only unique within a pipeline)')
+    .option('--executions-json <json>', 'Bulk form: JSON map of {pipelineName: executionId}. Empty/{} is a documented no-op (exit 0).')
+    .option('--timeout <duration>', 'Total wall-clock budget (15m, 900s, or 900). Default 15m.')
+    .option('--poll-interval <duration>', 'Per-poll sleep (floor 60s; values below are clamped + warned). Default 60s.')
+    .option('--region <region>', 'AWS region (reads AWS_REGION/AWS_DEFAULT_REGION, else us-west-2). Passed explicitly to every aws call.')
+    .action(async (executionId, opts) => {
+    try {
+        // Build the (pipeline, executionId) list from whichever form was used.
+        let executions;
+        if (opts.executionsJson !== undefined) {
+            if (executionId || opts.pipeline) {
+                console.error(chalk.red('wait-for-pipeline: pass EITHER --executions-json OR an execution-id + --pipeline, not both'));
+                process.exit(1);
+            }
+            executions = parseExecutionsJson(opts.executionsJson);
+        }
+        else {
+            if (!executionId) {
+                console.error(chalk.red('wait-for-pipeline: an execution-id (with --pipeline) or --executions-json is required'));
+                process.exit(1);
+            }
+            if (!opts.pipeline) {
+                console.error(chalk.red('wait-for-pipeline: --pipeline <name> is required with the single-pair form (execution-id is only unique within a pipeline)'));
+                process.exit(1);
+            }
+            validateExecutionEntry(opts.pipeline, executionId);
+            executions = [{ pipeline: opts.pipeline, executionId }];
+        }
+        const waitOptions = resolveWaitOptions({
+            timeout: opts.timeout,
+            pollInterval: opts.pollInterval,
+            region: opts.region,
+        });
+        // AwsRunner: shell out to the aws CLI, capturing stdout. On non-zero exit
+        // execSync throws an Error carrying .stderr — the gate logic reads it.
+        const aws = (args) => {
+            const cmd = buildAwsCommand(args);
+            return execSync(cmd, {
+                encoding: 'utf-8',
+                stdio: ['ignore', 'pipe', 'pipe'],
+                // Default 1MB can spuriously throw on a large get-pipeline-state
+                // response; that would map to AWS_CALL_FAILED (exit 5) incorrectly.
+                maxBuffer: 10 * 1024 * 1024,
+            });
+        };
+        const exitCode = await waitForPipelines(executions, waitOptions, { aws });
+        process.exit(exitCode);
+    }
+    catch (err) {
+        // Configuration / parse errors (bad --executions-json, bad --timeout, etc.)
+        console.error(chalk.red(err.message));
+        process.exit(1);
+    }
+});
 const step = pipelines.command('step').description('Pipeline step commands');
 step
     .command('list')