@intentius/chant-lexicon-gitlab 0.124.31 → 0.124.33

package/dist/migrate/from-github/actions/index.js

@@ -0,0 +1,17 @@
+/**
+ * Action mapping registry — public surface.
+ *
+ * Tier 1 mappings auto-register into the default registry on import of
+ * this module. Tier 2 and Tier 3 are added in #88.
+ */
+export { createRegistry, getDefaultRegistry, lookupAction, setDefaultRegistry } from "./registry.js";
+import { registerTier1 } from "./tier-1.js";
+import { registerTier2 } from "./tier-2.js";
+import { registerTier3 } from "./tier-3.js";
+import { getDefaultRegistry } from "./registry.js";
+// Auto-register Tiers 1/2/3 into the default registry the first time
+// this module is imported.
+registerTier1(getDefaultRegistry());
+registerTier2(getDefaultRegistry());
+registerTier3(getDefaultRegistry());
+export { registerTier1, registerTier2, registerTier3 };

package/dist/migrate/from-github/actions/registry.js

@@ -0,0 +1,61 @@
+/**
+ * ActionMapping registry for GitHub Actions → GitLab CI translation.
+ *
+ * Each marketplace action gets a typed mapping that returns the GitLab-side
+ * effects (script lines, image substitution, services, cache, artifacts,
+ * job-level variables) plus provenance records.
+ *
+ * v1 ships a built-in registry covering 33 actions (Tier 1/2/3, see
+ * `tier-1.ts`/`tier-2.ts`/`tier-3.ts`). Users can inject their own
+ * mappings via `MigrateOptions.registry`.
+ */
+class DefaultRegistry {
+    constructor() {
+        this.byName = new Map();
+    }
+    register(mapping) {
+        const arr = this.byName.get(mapping.actionName) ?? [];
+        arr.push(mapping);
+        this.byName.set(mapping.actionName, arr);
+    }
+    lookup(actionRef) {
+        // actionRef is e.g. "actions/checkout@v4" or "docker/build-push-action@v5"
+        const [name, version] = actionRef.split("@");
+        const candidates = this.byName.get(name);
+        if (!candidates || candidates.length === 0)
+            return undefined;
+        if (!version)
+            return candidates[0];
+        // Find a mapping whose majorVersions includes this version (best effort)
+        const major = version.replace(/^v/, "").split(".")[0];
+        for (const c of candidates) {
+            if (!c.majorVersions || c.majorVersions.length === 0)
+                return c;
+            if (c.majorVersions.includes(`v${major}`) || c.majorVersions.includes(major)) {
+                return c;
+            }
+        }
+        // No version match — fall back to first registered
+        return candidates[0];
+    }
+}
+let defaultRegistryInstance;
+export function getDefaultRegistry() {
+    if (!defaultRegistryInstance) {
+        defaultRegistryInstance = new DefaultRegistry();
+    }
+    return defaultRegistryInstance;
+}
+/**
+ * Test-only: replace the default registry. Used by `lookupAction` callers
+ * that pass `opts.registry` to inject a stub. Reset to undefined to restore.
+ */
+export function setDefaultRegistry(registry) {
+    defaultRegistryInstance = registry;
+}
+export function createRegistry() {
+    return new DefaultRegistry();
+}
+export function lookupAction(actionRef, registry) {
+    return (registry ?? getDefaultRegistry()).lookup(actionRef);
+}

package/dist/migrate/from-github/actions/tier-1.js

@@ -0,0 +1,298 @@
+/**
+ * Tier 1 marketplace action mappings — the 14 most-used GitHub Actions
+ * marketplace actions, per the upstream skill's `references/marketplace-actions.md`.
+ *
+ * Each mapping returns:
+ *   - scriptLines: appended to job.script
+ *   - image: job-level image override (last write wins)
+ *   - services: docker:dind etc.
+ *   - cache / artifacts: native GitLab keywords
+ *   - provenance: per-step records
+ */
+import { getDefaultRegistry } from "./registry.js";
+const prov = (ctx, actionName, tier, note, category = "action-map") => ({
+    gitlabPath: `jobs.${ctx.logicalId}.script`,
+    gitlabLogicalId: ctx.logicalId,
+    sourceKey: `jobs.${ctx.jobName}.steps[${ctx.stepIndex}].uses`,
+    sourceFile: ctx.sourceFile,
+    category,
+    rule: `ACT-${actionName.replace(/[\/-]/g, "-")}`,
+    note,
+    actionRef: actionName,
+    mappingTier: tier,
+});
+function withVal(o, key) {
+    if (!o)
+        return undefined;
+    return o[key];
+}
+function getWith(step) {
+    return step.with ?? {};
+}
+// actions/checkout: GitLab clones automatically. Emit no script lines.
+const actionsCheckout = {
+    actionName: "actions/checkout",
+    tier: 1,
+    translate(step, ctx) {
+        const w = getWith(step);
+        const variables = {};
+        if (w["fetch-depth"] !== undefined) {
+            variables.GIT_DEPTH = w["fetch-depth"];
+        }
+        if (w.submodules === true || w.submodules === "true" || w.submodules === "recursive") {
+            variables.GIT_SUBMODULE_STRATEGY = w.submodules === "recursive" ? "recursive" : "normal";
+        }
+        return {
+            scriptLines: [],
+            variables: Object.keys(variables).length > 0 ? variables : undefined,
+            provenance: [prov(ctx, "actions/checkout", 1, "Removed — GitLab clones the repository automatically", "skipped")],
+        };
+    },
+};
+// actions/setup-node: image: node:<version>
+const actionsSetupNode = {
+    actionName: "actions/setup-node",
+    tier: 1,
+    translate(step, ctx) {
+        const w = getWith(step);
+        const version = w["node-version"] ?? "22";
+        const cache = w.cache;
+        const cacheKey = cache === "npm"
+            ? { key: { files: ["package-lock.json"] }, paths: [".npm/"] }
+            : cache === "yarn"
+                ? { key: { files: ["yarn.lock"] }, paths: [".yarn/cache/"] }
+                : cache === "pnpm"
+                    ? { key: { files: ["pnpm-lock.yaml"] }, paths: [".pnpm-store/"] }
+                    : undefined;
+        return {
+            scriptLines: [],
+            image: `node:${version}`,
+            cache: cacheKey,
+            provenance: [prov(ctx, "actions/setup-node", 1, `setup-node → image: node:${version}`)],
+        };
+    },
+};
+const actionsSetupPython = {
+    actionName: "actions/setup-python",
+    tier: 1,
+    translate(step, ctx) {
+        const w = getWith(step);
+        const version = w["python-version"] ?? "3.12";
+        const cache = w.cache;
+        const cacheKey = cache === "pip"
+            ? { paths: [".cache/pip/"] }
+            : cache === "poetry"
+                ? { paths: [".cache/pypoetry/"] }
+                : undefined;
+        return {
+            scriptLines: [],
+            image: `python:${version}`,
+            cache: cacheKey,
+            provenance: [prov(ctx, "actions/setup-python", 1, `setup-python → image: python:${version}`)],
+        };
+    },
+};
+const actionsSetupJava = {
+    actionName: "actions/setup-java",
+    tier: 1,
+    translate(step, ctx) {
+        const w = getWith(step);
+        const version = w["java-version"] ?? "17";
+        const cache = w.cache;
+        const cacheKey = cache === "maven"
+            ? { paths: [".m2/repository/"] }
+            : cache === "gradle"
+                ? { paths: [".gradle/"] }
+                : undefined;
+        return {
+            scriptLines: [],
+            image: `eclipse-temurin:${version}`,
+            cache: cacheKey,
+            provenance: [prov(ctx, "actions/setup-java", 1, `setup-java → image: eclipse-temurin:${version}`)],
+        };
+    },
+};
+const actionsSetupGo = {
+    actionName: "actions/setup-go",
+    tier: 1,
+    translate(step, ctx) {
+        const w = getWith(step);
+        const version = w["go-version"] ?? "1.22";
+        return {
+            scriptLines: [],
+            image: `golang:${version}`,
+            cache: w.cache === true || w.cache === "true"
+                ? { paths: [".cache/go-build/", "go/pkg/mod/"] }
+                : undefined,
+            provenance: [prov(ctx, "actions/setup-go", 1, `setup-go → image: golang:${version}`)],
+        };
+    },
+};
+const actionsSetupRuby = {
+    actionName: "actions/setup-ruby",
+    tier: 1,
+    translate(step, ctx) {
+        const w = getWith(step);
+        const version = w["ruby-version"] ?? "3.3";
+        return {
+            scriptLines: [],
+            image: `ruby:${version}`,
+            cache: w["bundler-cache"] === true || w["bundler-cache"] === "true"
+                ? { paths: ["vendor/bundle/"] }
+                : undefined,
+            provenance: [prov(ctx, "actions/setup-ruby", 1, `setup-ruby → image: ruby:${version}`)],
+        };
+    },
+};
+const actionsCache = {
+    actionName: "actions/cache",
+    tier: 1,
+    translate(step, ctx) {
+        const w = getWith(step);
+        const paths = w.path?.split("\n").map((p) => p.trim()).filter(Boolean) ?? [];
+        const key = w.key;
+        const cache = {};
+        if (paths.length > 0)
+            cache.paths = paths;
+        if (key)
+            cache.key = key;
+        return {
+            scriptLines: [],
+            cache: Object.keys(cache).length > 0 ? cache : undefined,
+            provenance: [prov(ctx, "actions/cache", 1, "actions/cache → native cache: keyword")],
+        };
+    },
+};
+const actionsUploadArtifact = {
+    actionName: "actions/upload-artifact",
+    tier: 1,
+    translate(step, ctx) {
+        const w = getWith(step);
+        const paths = w.path?.split("\n").map((p) => p.trim()).filter(Boolean) ?? [];
+        const name = w.name;
+        const retention = w["retention-days"];
+        const artifacts = {};
+        if (paths.length > 0)
+            artifacts.paths = paths;
+        if (name)
+            artifacts.name = name;
+        if (retention !== undefined)
+            artifacts.expire_in = `${retention} days`;
+        return {
+            scriptLines: [],
+            artifacts: Object.keys(artifacts).length > 0 ? artifacts : undefined,
+            provenance: [prov(ctx, "actions/upload-artifact", 1, "upload-artifact → native artifacts: keyword")],
+        };
+    },
+};
+const actionsDownloadArtifact = {
+    actionName: "actions/download-artifact",
+    tier: 1,
+    translate(_step, ctx) {
+        return {
+            scriptLines: [],
+            provenance: [prov(ctx, "actions/download-artifact", 1, "download-artifact removed — GitLab auto-passes artifacts via stages or needs:artifacts:")],
+        };
+    },
+};
+const dockerLoginAction = {
+    actionName: "docker/login-action",
+    tier: 1,
+    translate(step, ctx) {
+        const w = getWith(step);
+        const registry = w.registry ?? "";
+        const userVar = withVal(w, "username") ?? "$CI_REGISTRY_USER";
+        const passVar = withVal(w, "password") ?? "$CI_REGISTRY_PASSWORD";
+        return {
+            scriptLines: [`docker login -u ${userVar} -p ${passVar} ${registry}`.trim()],
+            provenance: [prov(ctx, "docker/login-action", 1, "docker/login-action → inline docker login")],
+        };
+    },
+};
+const dockerBuildPushAction = {
+    actionName: "docker/build-push-action",
+    tier: 1,
+    translate(step, ctx) {
+        const w = getWith(step);
+        const context = w.context ?? ".";
+        const file = w.file ?? "Dockerfile";
+        const push = w.push === true || w.push === "true";
+        const tags = w.tags?.split(/[\n,]/).map((t) => t.trim()).filter(Boolean) ?? [];
+        const lines = [];
+        const tagFlags = tags.map((t) => `-t ${t}`).join(" ");
+        lines.push(`docker build -f ${file} ${tagFlags} ${context}`.trim());
+        if (push) {
+            for (const t of tags)
+                lines.push(`docker push ${t}`);
+        }
+        return {
+            scriptLines: lines,
+            image: "docker:latest",
+            services: [{ name: "docker:dind", alias: "docker", variables: { DOCKER_TLS_CERTDIR: "/certs" } }],
+            provenance: [prov(ctx, "docker/build-push-action", 1, "docker/build-push-action → inline docker build/push + docker:dind service")],
+        };
+    },
+};
+const dockerSetupBuildxAction = {
+    actionName: "docker/setup-buildx-action",
+    tier: 1,
+    translate(_step, ctx) {
+        return {
+            scriptLines: ["docker buildx create --use"],
+            image: "docker:latest",
+            services: [{ name: "docker:dind", alias: "docker", variables: { DOCKER_TLS_CERTDIR: "/certs" } }],
+            provenance: [prov(ctx, "docker/setup-buildx-action", 1, "docker/setup-buildx-action → docker buildx create --use + docker:dind")],
+        };
+    },
+};
+const dockerSetupQemuAction = {
+    actionName: "docker/setup-qemu-action",
+    tier: 1,
+    translate(step, ctx) {
+        const w = getWith(step);
+        const platforms = w.platforms ?? "linux/amd64,linux/arm64";
+        return {
+            scriptLines: [`docker run --rm --privileged tonistiigi/binfmt --install ${platforms}`],
+            provenance: [prov(ctx, "docker/setup-qemu-action", 1, "docker/setup-qemu-action → tonistiigi/binfmt")],
+        };
+    },
+};
+const actionsGithubScript = {
+    actionName: "actions/github-script",
+    tier: 1,
+    translate(_step, ctx) {
+        return {
+            scriptLines: [
+                "# TODO(migration): actions/github-script has no direct GitLab equivalent.",
+                "# Replace with glab CLI or curl against the GitLab API.",
+            ],
+            provenance: [prov(ctx, "actions/github-script", 1, "actions/github-script: use glab CLI or REST API", "needs-review")],
+        };
+    },
+};
+const TIER_1_MAPPINGS = [
+    actionsCheckout,
+    actionsSetupNode,
+    actionsSetupPython,
+    actionsSetupJava,
+    actionsSetupGo,
+    actionsSetupRuby,
+    actionsCache,
+    actionsUploadArtifact,
+    actionsDownloadArtifact,
+    dockerLoginAction,
+    dockerBuildPushAction,
+    dockerSetupBuildxAction,
+    dockerSetupQemuAction,
+    actionsGithubScript,
+];
+/**
+ * Register all Tier 1 mappings into the given registry (or default).
+ * Idempotent — call before `lookupAction` is first invoked.
+ */
+export function registerTier1(registry = getDefaultRegistry()) {
+    for (const m of TIER_1_MAPPINGS) {
+        registry.register(m);
+    }
+}
+export { TIER_1_MAPPINGS };

package/dist/migrate/from-github/actions/tier-2.js

@@ -0,0 +1,241 @@
+/**
+ * Tier 2 marketplace action mappings — 14 common actions from the
+ * upstream skill's `references/marketplace-actions.md`.
+ */
+import { getDefaultRegistry } from "./registry.js";
+const prov = (ctx, actionName, note, category = "action-map") => ({
+    gitlabPath: `jobs.${ctx.logicalId}.script`,
+    gitlabLogicalId: ctx.logicalId,
+    sourceKey: `jobs.${ctx.jobName}.steps[${ctx.stepIndex}].uses`,
+    sourceFile: ctx.sourceFile,
+    category,
+    rule: `ACT-${actionName.replace(/[\/-]/g, "-")}`,
+    note,
+    actionRef: actionName,
+    mappingTier: 2,
+});
+const getWith = (s) => s.with ?? {};
+const actionsSetupDotnet = {
+    actionName: "actions/setup-dotnet",
+    tier: 2,
+    translate(step, ctx) {
+        const w = getWith(step);
+        const version = w["dotnet-version"] ?? "8.0";
+        return {
+            scriptLines: [],
+            image: `mcr.microsoft.com/dotnet/sdk:${version}`,
+            cache: { paths: [".nuget/packages/"] },
+            provenance: [prov(ctx, "actions/setup-dotnet", `setup-dotnet → image: mcr.microsoft.com/dotnet/sdk:${version}`)],
+        };
+    },
+};
+const shivammathurSetupPhp = {
+    actionName: "shivammathur/setup-php",
+    tier: 2,
+    translate(step, ctx) {
+        const w = getWith(step);
+        const version = w["php-version"] ?? "8.3";
+        const extensions = w.extensions ?? "";
+        const lines = ["apt-get update"];
+        if (extensions)
+            lines.push(`docker-php-ext-install ${extensions.split(",").map((s) => s.trim()).join(" ")}`);
+        return {
+            scriptLines: [],
+            image: `php:${version}`,
+            beforeScript: lines,
+            provenance: [prov(ctx, "shivammathur/setup-php", `setup-php → image: php:${version} + before_script extensions`)],
+        };
+    },
+};
+const awsConfigureCredentials = {
+    actionName: "aws-actions/configure-aws-credentials",
+    tier: 2,
+    translate(step, ctx) {
+        const w = getWith(step);
+        const region = w["aws-region"] ?? "us-east-1";
+        return {
+            scriptLines: [],
+            variables: {
+                AWS_DEFAULT_REGION: region,
+            },
+            provenance: [prov(ctx, "aws-actions/configure-aws-credentials", "Configure AWS_ACCESS_KEY_ID / AWS_SECRET_ACCESS_KEY as masked CI/CD variables, or use GitLab OIDC to AWS", "needs-review")],
+        };
+    },
+};
+const googleAuthAction = {
+    actionName: "google-github-actions/auth",
+    tier: 2,
+    translate(_step, ctx) {
+        return {
+            scriptLines: [
+                "echo $GCP_SA_KEY | base64 -d > /tmp/gcp-key.json",
+                "gcloud auth activate-service-account --key-file=/tmp/gcp-key.json",
+            ],
+            variables: { GOOGLE_APPLICATION_CREDENTIALS: "/tmp/gcp-key.json" },
+            provenance: [prov(ctx, "google-github-actions/auth", "Set GCP_SA_KEY as masked CI/CD variable (base64-encoded), or use GitLab OIDC to GCP", "needs-review")],
+        };
+    },
+};
+const azureLogin = {
+    actionName: "azure/login",
+    tier: 2,
+    translate(_step, ctx) {
+        return {
+            scriptLines: ["az login --service-principal -u $AZURE_CLIENT_ID -p $AZURE_CLIENT_SECRET --tenant $AZURE_TENANT_ID"],
+            provenance: [prov(ctx, "azure/login", "Set AZURE_CLIENT_ID/SECRET/TENANT_ID as masked CI/CD variables, or use GitLab OIDC to Azure", "needs-review")],
+        };
+    },
+};
+const hashicorpSetupTerraform = {
+    actionName: "hashicorp/setup-terraform",
+    tier: 2,
+    translate(step, ctx) {
+        const w = getWith(step);
+        const version = w.terraform_version ?? "1.6";
+        return {
+            scriptLines: [],
+            image: `hashicorp/terraform:${version}`,
+            provenance: [prov(ctx, "hashicorp/setup-terraform", `setup-terraform → image: hashicorp/terraform:${version} (or use GitLab Terraform template)`)],
+        };
+    },
+};
+const codecovAction = {
+    actionName: "codecov/codecov-action",
+    tier: 2,
+    translate(step, ctx) {
+        const w = getWith(step);
+        const file = w.files ?? w.file ?? "coverage.xml";
+        return {
+            scriptLines: [
+                "pip install codecov-cli",
+                `codecovcli upload-process --file ${file} --token $CODECOV_TOKEN`,
+            ],
+            provenance: [prov(ctx, "codecov/codecov-action", "codecov-action → codecov-cli; set CODECOV_TOKEN as masked variable")],
+        };
+    },
+};
+const softpropsGhRelease = {
+    actionName: "softprops/action-gh-release",
+    tier: 2,
+    translate(_step, ctx) {
+        return {
+            scriptLines: ["glab release create $CI_COMMIT_TAG"],
+            provenance: [prov(ctx, "softprops/action-gh-release", "softprops/action-gh-release → glab release create (for GitLab) or curl GitHub API", "needs-review")],
+        };
+    },
+};
+const peterEvansCreatePr = {
+    actionName: "peter-evans/create-pull-request",
+    tier: 2,
+    translate(step, ctx) {
+        const w = getWith(step);
+        const title = w.title ?? "Automated update";
+        return {
+            scriptLines: [
+                "git config user.email \"ci@example.com\"",
+                "git config user.name \"CI Bot\"",
+                "git add .",
+                `git commit -m "${title}"`,
+                `glab mr create --title "${title}"`,
+            ],
+            provenance: [prov(ctx, "peter-evans/create-pull-request", "create-pull-request → glab mr create", "needs-review")],
+        };
+    },
+};
+const jamesIvesPagesDeploy = {
+    actionName: "JamesIves/github-pages-deploy-action",
+    tier: 2,
+    translate(step, ctx) {
+        const w = getWith(step);
+        const folder = w.folder ?? "build";
+        return {
+            scriptLines: [
+                "mkdir -p public",
+                `cp -r ${folder}/* public/`,
+            ],
+            artifacts: { paths: ["public"] },
+            provenance: [prov(ctx, "JamesIves/github-pages-deploy-action", "pages-deploy → GitLab Pages requires job name 'pages' and artifacts in public/. May need a separate `pages:` job.", "needs-review")],
+        };
+    },
+};
+const pnpmActionSetup = {
+    actionName: "pnpm/action-setup",
+    tier: 2,
+    translate(step, ctx) {
+        const w = getWith(step);
+        const version = w.version ?? "9";
+        return {
+            scriptLines: [`npm install -g pnpm@${version}`],
+            cache: { paths: [".pnpm-store/"] },
+            provenance: [prov(ctx, "pnpm/action-setup", `pnpm/action-setup → npm install -g pnpm@${version}`)],
+        };
+    },
+};
+const ovenSetupBun = {
+    actionName: "oven-sh/setup-bun",
+    tier: 2,
+    translate(step, ctx) {
+        const w = getWith(step);
+        const version = w["bun-version"] ?? "latest";
+        return {
+            scriptLines: [],
+            image: `oven/bun:${version}`,
+            cache: { paths: [".bun/install/cache/"] },
+            provenance: [prov(ctx, "oven-sh/setup-bun", `setup-bun → image: oven/bun:${version}`)],
+        };
+    },
+};
+const gradleBuildAction = {
+    actionName: "gradle/gradle-build-action",
+    tier: 2,
+    translate(step, ctx) {
+        const w = getWith(step);
+        const version = w["gradle-version"] ?? "8";
+        return {
+            scriptLines: [],
+            image: `gradle:${version}`,
+            cache: { paths: [".gradle/"] },
+            provenance: [prov(ctx, "gradle/gradle-build-action", `gradle-build-action → image: gradle:${version}`)],
+        };
+    },
+};
+const cypressAction = {
+    actionName: "cypress-io/github-action",
+    tier: 2,
+    translate(step, ctx) {
+        const w = getWith(step);
+        const browser = w.browser ?? "chrome";
+        const start = w.start;
+        const lines = ["npm install"];
+        if (start)
+            lines.push(`${start} &`);
+        lines.push(`npx cypress run --browser ${browser}`);
+        return {
+            scriptLines: lines,
+            image: "cypress/browsers:latest",
+            provenance: [prov(ctx, "cypress-io/github-action", `cypress-io → cypress/browsers image + npx cypress run`)],
+        };
+    },
+};
+const TIER_2_MAPPINGS = [
+    actionsSetupDotnet,
+    shivammathurSetupPhp,
+    awsConfigureCredentials,
+    googleAuthAction,
+    azureLogin,
+    hashicorpSetupTerraform,
+    codecovAction,
+    softpropsGhRelease,
+    peterEvansCreatePr,
+    jamesIvesPagesDeploy,
+    pnpmActionSetup,
+    ovenSetupBun,
+    gradleBuildAction,
+    cypressAction,
+];
+export function registerTier2(registry = getDefaultRegistry()) {
+    for (const m of TIER_2_MAPPINGS) {
+        registry.register(m);
+    }
+}
+export { TIER_2_MAPPINGS };