@intentius/chant-lexicon-gitlab 0.0.10 → 0.0.12

package/dist/integrity.json

@@ -1,7 +1,7 @@
 {
   "algorithm": "xxhash64",
   "artifacts": {
-    "manifest.json": "592bb8cd37d44fed",
+    "manifest.json": "6bd0f9deb20b8705",
     "meta.json": "c663c6c63748a9d0",
     "types/index.d.ts": "64e65524615be023",
     "rules/missing-stage.ts": "6d5379e74209a735",
@@ -11,11 +11,11 @@
     "rules/wgl011.ts": "b6b97e5104d91267",
     "rules/wgl015.ts": "d7e9e080994f985",
     "rules/wgl012.ts": "3d188d13fb2236c0",
-    "rules/yaml-helpers.ts": "1f3c4e98b89b8deb",
+    "rules/yaml-helpers.ts": "b5416b80369484f2",
     "rules/wgl010.ts": "1548cad287cdf286",
     "rules/wgl014.ts": "6248a852888e8028",
     "rules/wgl013.ts": "3519c933e23fc605",
     "skills/chant-gitlab.md": "4393eb63e0b84b7f"
   },
-  "composite": "6c4db775282a1a38"
+  "composite": "95f5813f9d4b37c7"
 }

package/dist/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "gitlab",
-  "version": "0.0.10",
+  "version": "0.0.12",
   "chantVersion": ">=0.1.0",
   "namespace": "GitLab",
   "intrinsics": [

package/dist/rules/yaml-helpers.ts

@@ -7,14 +7,7 @@
  * without a full YAML parser dependency.
  */
 
-import type { SerializerResult } from "@intentius/chant/serializer";
-
-/**
- * Extract the primary output string from a serializer result.
- */
-export function getPrimaryOutput(output: string | SerializerResult): string {
-  return typeof output === "string" ? output : output.primary;
-}
+export { getPrimaryOutput } from "@intentius/chant/lint/post-synth";
 
 /**
  * Parse a serialized GitLab CI YAML into a structured object.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intentius/chant-lexicon-gitlab",
-  "version": "0.0.10",
+  "version": "0.0.12",
   "license": "Apache-2.0",
   "type": "module",
   "files": ["src/", "dist/"],
@@ -21,7 +21,7 @@
   "prepack": "bun run bundle && bun run validate"
 },
 "dependencies": {
-  "@intentius/chant": "0.0.9"
+  "@intentius/chant": "0.0.11"
 },
 "devDependencies": {
   "typescript": "^5.9.3"

package/src/codegen/docs.ts

@@ -460,8 +460,8 @@ export default {
       {
         slug: "examples",
         title: "Examples",
-        description: "Walkthrough of the getting-started GitLab CI/CD example",
-        content: `A runnable example lives in the lexicon's \`examples/\` directory. Clone the repo and try it:
+        description: "Walkthrough of GitLab CI/CD examples — pipelines, composites, and cross-lexicon patterns",
+        content: `Runnable examples live in the lexicon's \`examples/\` directory. Clone the repo and try them:
 
 \`\`\`bash
 cd examples/getting-started
@@ -559,6 +559,111 @@ deploy:
 2. **Conditional execution** — merge request and branch rules control when jobs run
 3. **Manual deployment** — deploy requires manual trigger on the default branch
 4. **JUnit reports** — test artifacts include JUnit XML for GitLab MR display
+
+## Docker Build
+
+\`examples/docker-build/\` — builds and pushes a Docker image using the \`DockerBuild\` composite.
+
+{{file:docker-build/src/pipeline.ts}}
+
+The \`DockerBuild\` composite expands to a job with Docker-in-Docker service, registry login, build, and push steps.
+
+## Node Pipeline
+
+\`examples/node-pipeline/\` — a full Node.js CI pipeline using the \`NodePipeline\` composite.
+
+{{file:node-pipeline/src/pipeline.ts}}
+
+## Python Pipeline
+
+\`examples/python-pipeline/\` — a Python CI pipeline using the \`PythonPipeline\` composite.
+
+{{file:python-pipeline/src/pipeline.ts}}
+
+## Review App
+
+\`examples/review-app/\` — deploys a review environment per merge request using the \`ReviewApp\` composite.
+
+{{file:review-app/src/pipeline.ts}}
+
+## AWS ALB Deployment
+
+A cross-lexicon example showing how to deploy AWS CloudFormation stacks from GitLab CI. Three separate pipelines mirror the separate-project AWS ALB pattern:
+
+### Infra pipeline
+
+Deploys the shared ALB stack (VPC, ALB, ECS cluster, ECR repos):
+
+\`\`\`typescript
+import { Job, Image, Rule } from "@intentius/chant-lexicon-gitlab";
+
+const awsImage = new Image({ name: "amazon/aws-cli:latest" });
+
+export const deployInfra = new Job({
+  stage: "deploy",
+  image: awsImage,
+  script: [
+    "aws cloudformation deploy --template-file templates/template.json --stack-name shared-alb --capabilities CAPABILITY_IAM --no-fail-on-empty-changeset",
+  ],
+  rules: [
+    new Rule({ if: "$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH" }),
+  ],
+});
+\`\`\`
+
+### Service pipeline (API)
+
+Builds a Docker image, pushes to ECR, and deploys the API service stack with cross-stack parameter passing:
+
+\`\`\`typescript
+import { Job, Image, Service, Need, Rule } from "@intentius/chant-lexicon-gitlab";
+import { CI } from "@intentius/chant-lexicon-gitlab";
+
+const ECR_URL = "$AWS_ACCOUNT_ID.dkr.ecr.$AWS_DEFAULT_REGION.amazonaws.com";
+const ECR_REPO = "alb-api";
+const fullImage = \\\`\\\${ECR_URL}/\\\${ECR_REPO}\\\`;
+
+const dockerImage = new Image({ name: "docker:27-cli" });
+const dind = new Service({ name: "docker:27-dind", alias: "docker" });
+
+export const buildImage = new Job({
+  stage: "build",
+  image: dockerImage,
+  services: [dind],
+  variables: { DOCKER_TLS_CERTDIR: "/certs" },
+  before_script: [
+    "apk add --no-cache aws-cli",
+    \\\`aws ecr get-login-password | docker login --username AWS --password-stdin \\\${ECR_URL}\\\`,
+  ],
+  script: [
+    \\\`docker build -t \\\${fullImage}:\\\${CI.CommitRefSlug} .\\\`,
+    \\\`docker push \\\${fullImage}:\\\${CI.CommitRefSlug}\\\`,
+  ],
+  rules: [new Rule({ if: "$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH" })],
+});
+
+export const deployService = new Job({
+  stage: "deploy",
+  image: new Image({ name: "amazon/aws-cli:latest" }),
+  needs: [new Need({ job: "build-image" })],
+  script: [
+    // Fetch shared ALB outputs and map to CF parameter overrides
+    "OUTPUTS=$(aws cloudformation describe-stacks --stack-name shared-alb --query 'Stacks[0].Outputs' --output json)",
+    'PARAMS=$(echo "$OUTPUTS" | jq -r \\'[...output-to-param mapping...] | join(" ")\\')',
+    "aws cloudformation deploy --template-file templates/template.json --stack-name shared-alb-api --capabilities CAPABILITY_IAM --no-fail-on-empty-changeset --parameter-overrides $PARAMS",
+  ],
+  rules: [new Rule({ if: "$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH" })],
+});
+\`\`\`
+
+**Key patterns:**
+
+1. **ECR login** — uses \`aws ecr get-login-password\` instead of GitLab registry credentials
+2. **Cross-stack parameter passing** — \`describe-stacks\` fetches outputs from the infra stack, \`jq\` maps them to \`--parameter-overrides\`
+3. **Job naming** — \`buildImage\` serializes to \`build-image\` in YAML; \`Need\` references must use kebab-case
+4. **Docker-in-Docker** — \`docker:27-cli\` image with \`docker:27-dind\` service for container builds
+
+The full examples live in \`examples/gitlab-aws-alb-infra/\`, \`examples/gitlab-aws-alb-api/\`, and \`examples/gitlab-aws-alb-ui/\`.
 `,
       },
       {

package/src/import/parser.ts

@@ -6,6 +6,7 @@
  */
 
 import type { TemplateParser, TemplateIR, ResourceIR } from "@intentius/chant/import/parser";
+import { parseYAML } from "@intentius/chant/yaml";
 
 /**
  * Reserved top-level keys in .gitlab-ci.yml that are NOT job definitions.
@@ -33,173 +34,6 @@ const RESERVED_KEYS = new Set([
 ]);
 
 
-/**
- * Parse a YAML document into a plain object.
- * Uses a simple YAML parser approach — GitLab CI YAML is straightforward
- * enough that we can parse it without a full YAML library by parsing JSON
- * or using Bun's built-in YAML support if available.
- */
-function parseYAML(content: string): Record<string, unknown> {
-  // Try JSON first (some CI files may be JSON)
-  try {
-    return JSON.parse(content);
-  } catch {
-    // Fall through to YAML parsing
-  }
-
-  // Simple YAML parser for GitLab CI files
-  // This handles the common cases: scalars, arrays, objects, block scalars
-  const lines = content.split("\n");
-  return parseYAMLLines(lines, 0, 0).value as Record<string, unknown>;
-}
-
-interface ParseResult {
-  value: unknown;
-  endIndex: number;
-}
-
-function parseYAMLLines(lines: string[], startIndex: number, baseIndent: number): ParseResult {
-  const result: Record<string, unknown> = {};
-  let i = startIndex;
-
-  while (i < lines.length) {
-    const line = lines[i];
-    // Skip empty lines and comments
-    if (line.trim() === "" || line.trim().startsWith("#")) {
-      i++;
-      continue;
-    }
-
-    const indent = line.search(/\S/);
-    if (indent < baseIndent) break; // Dedented — done with this block
-    if (indent > baseIndent && startIndex > 0) break; // Unexpected indent
-
-    const keyMatch = line.match(/^(\s*)([^\s:][^:]*?):\s*(.*)$/);
-    if (keyMatch) {
-      const key = keyMatch[2].trim();
-      const inlineValue = keyMatch[3].trim();
-
-      if (inlineValue === "" || inlineValue.startsWith("#")) {
-        // Check next line for array or nested object
-        if (i + 1 < lines.length) {
-          const nextLine = lines[i + 1];
-          const nextIndent = nextLine.search(/\S/);
-          if (nextIndent > indent && nextLine.trimStart().startsWith("- ")) {
-            // Array
-            const arr = parseYAMLArray(lines, i + 1, nextIndent);
-            result[key] = arr.value;
-            i = arr.endIndex;
-            continue;
-          } else if (nextIndent > indent) {
-            // Nested object
-            const nested = parseYAMLLines(lines, i + 1, nextIndent);
-            result[key] = nested.value;
-            i = nested.endIndex;
-            continue;
-          }
-        }
-        result[key] = null;
-        i++;
-      } else if (inlineValue.startsWith("[")) {
-        // Inline array
-        try {
-          result[key] = JSON.parse(inlineValue);
-        } catch {
-          result[key] = inlineValue;
-        }
-        i++;
-      } else if (inlineValue.startsWith("{")) {
-        // Inline object
-        try {
-          result[key] = JSON.parse(inlineValue);
-        } catch {
-          result[key] = inlineValue;
-        }
-        i++;
-      } else {
-        result[key] = parseScalar(inlineValue);
-        i++;
-      }
-    } else if (line.trimStart().startsWith("- ")) {
-      // We hit an array at the top level — shouldn't happen normally
-      break;
-    } else {
-      i++;
-    }
-  }
-
-  return { value: result, endIndex: i };
-}
-
-function parseYAMLArray(lines: string[], startIndex: number, baseIndent: number): ParseResult {
-  const result: unknown[] = [];
-  let i = startIndex;
-
-  while (i < lines.length) {
-    const line = lines[i];
-    if (line.trim() === "" || line.trim().startsWith("#")) {
-      i++;
-      continue;
-    }
-
-    const indent = line.search(/\S/);
-    if (indent < baseIndent) break;
-
-    const itemMatch = line.match(/^(\s*)- (.*)$/);
-    if (itemMatch && indent === baseIndent) {
-      const itemValue = itemMatch[2].trim();
-      // Check if it's a key-value pair (object item in array)
-      const kvMatch = itemValue.match(/^([^\s:][^:]*?):\s*(.*)$/);
-      if (kvMatch) {
-        const obj: Record<string, unknown> = {};
-        obj[kvMatch[1].trim()] = parseScalar(kvMatch[2].trim());
-        // Check for more keys at indent+2
-        const nextIndent = indent + 2;
-        let j = i + 1;
-        while (j < lines.length) {
-          const nextLine = lines[j];
-          if (nextLine.trim() === "" || nextLine.trim().startsWith("#")) {
-            j++;
-            continue;
-          }
-          const ni = nextLine.search(/\S/);
-          if (ni !== nextIndent) break;
-          const nextKV = nextLine.match(/^(\s*)([^\s:][^:]*?):\s*(.*)$/);
-          if (nextKV) {
-            obj[nextKV[2].trim()] = parseScalar(nextKV[3].trim());
-            j++;
-          } else {
-            break;
-          }
-        }
-        result.push(obj);
-        i = j;
-      } else {
-        result.push(parseScalar(itemValue));
-        i++;
-      }
-    } else {
-      break;
-    }
-  }
-
-  return { value: result, endIndex: i };
-}
-
-function parseScalar(value: string): unknown {
-  if (value === "" || value === "~" || value === "null") return null;
-  if (value === "true" || value === "yes") return true;
-  if (value === "false" || value === "no") return false;
-  // Strip quotes
-  if ((value.startsWith("'") && value.endsWith("'")) || (value.startsWith('"') && value.endsWith('"'))) {
-    return value.slice(1, -1);
-  }
-  // Number
-  const num = Number(value);
-  if (!isNaN(num) && value !== "") return num;
-  return value;
-}
-
 /**
  * GitLab CI YAML parser implementation.
  */

package/src/lint/post-synth/yaml-helpers.ts

@@ -7,14 +7,7 @@
  * without a full YAML parser dependency.
  */
 
-import type { SerializerResult } from "@intentius/chant/serializer";
-
-/**
- * Extract the primary output string from a serializer result.
- */
-export function getPrimaryOutput(output: string | SerializerResult): string {
-  return typeof output === "string" ? output : output.primary;
-}
+export { getPrimaryOutput } from "@intentius/chant/lint/post-synth";
 
 /**
  * Parse a serialized GitLab CI YAML into a structured object.

package/src/serializer.ts

@@ -13,6 +13,7 @@ import type { Serializer } from "@intentius/chant/serializer";
 import type { LexiconOutput } from "@intentius/chant/lexicon-output";
 import { walkValue, type SerializerVisitor } from "@intentius/chant/serializer-walker";
 import { INTRINSIC_MARKER } from "@intentius/chant/intrinsic";
+import { emitYAML } from "@intentius/chant/yaml";
 
 /**
  * GitLab CI visitor for the generic serializer walker.
@@ -82,111 +83,6 @@ function toYAMLValue(value: unknown, entityNames: Map<Declarable, string>): unkn
   return walkValue(preprocessed, entityNames, gitlabVisitor(entityNames));
 }
 
-/**
- * Emit a YAML value with proper indentation.
- */
-function emitYAML(value: unknown, indent: number): string {
-  const prefix = "  ".repeat(indent);
-
-  if (value === null || value === undefined) {
-    return "null";
-  }
-
-  if (typeof value === "boolean") {
-    return value ? "true" : "false";
-  }
-
-  if (typeof value === "number") {
-    return String(value);
-  }
-
-  if (typeof value === "string") {
-    // Quote strings that could be misinterpreted
-    if (
-      value === "" ||
-      value === "true" ||
-      value === "false" ||
-      value === "null" ||
-      value === "yes" ||
-      value === "no" ||
-      value.includes(": ") ||
-      value.includes("#") ||
-      value.startsWith("*") ||
-      value.startsWith("&") ||
-      value.startsWith("!") ||
-      value.startsWith("{") ||
-      value.startsWith("[") ||
-      value.startsWith("'") ||
-      value.startsWith('"') ||
-      value.startsWith("$") ||
-      /^\d/.test(value)
-    ) {
-      // Use single quotes, escaping internal single quotes
-      return `'${value.replace(/'/g, "''")}'`;
-    }
-    return value;
-  }
-
-  if (Array.isArray(value)) {
-    if (value.length === 0) return "[]";
-    const lines: string[] = [];
-    for (const item of value) {
-      if (typeof item === "object" && item !== null && !Array.isArray(item)) {
-        // Object items in arrays
-        const entries = Object.entries(item as Record<string, unknown>);
-        if (entries.length > 0) {
-          const [firstKey, firstVal] = entries[0];
-          const firstEmitted = emitYAML(firstVal, indent + 2);
-          if (firstEmitted.startsWith("\n")) {
-            // Multi-line value: put on next line, indented under the key
-            lines.push(`${prefix}- ${firstKey}:${firstEmitted}`);
-          } else {
-            lines.push(`${prefix}- ${firstKey}: ${firstEmitted}`);
-          }
-          for (let i = 1; i < entries.length; i++) {
-            const [key, val] = entries[i];
-            const emitted = emitYAML(val, indent + 2);
-            if (emitted.startsWith("\n")) {
-              lines.push(`${prefix}  ${key}:${emitted}`);
-            } else {
-              lines.push(`${prefix}  ${key}: ${emitted}`);
-            }
-          }
-        }
-      } else {
-        lines.push(`${prefix}- ${emitYAML(item, indent + 1).trimStart()}`);
-      }
-    }
-    return "\n" + lines.join("\n");
-  }
-
-  if (typeof value === "object") {
-    const obj = value as Record<string, unknown>;
-
-    // Handle tagged values (intrinsics like !reference)
-    if ("tag" in obj && "value" in obj && typeof obj.tag === "string") {
-      if (obj.tag === "!reference" && Array.isArray(obj.value)) {
-        return `!reference [${(obj.value as string[]).join(", ")}]`;
-      }
-    }
-
-    const entries = Object.entries(obj);
-    if (entries.length === 0) return "{}";
-    const lines: string[] = [];
-    for (const [key, val] of entries) {
-      const emitted = emitYAML(val, indent + 1);
-      if (emitted.startsWith("\n")) {
-        lines.push(`${prefix}${key}:${emitted}`);
-      } else {
-        lines.push(`${prefix}${key}: ${emitted}`);
-      }
-    }
-    return "\n" + lines.join("\n");
-  }
-
-  return String(value);
-}
-
 /**
  * GitLab CI YAML serializer implementation.
  */