@sharadtech/infralytiqs-sdk 1.0.1 → 1.0.3

package/buildScripts/Jenkinsfile.deploy

@@ -8,16 +8,21 @@
 //       Served via :  https://assets.infralytiqs.com/cdn/infralytiqs.min.js
 //
 //    B) Per-client bootstraps (built directly from this git repository under
-//       clients/<vendor>/<app>). Currently the only client wired in is:
+//       clients/<vendor>/<app>). Each client uploads to
+//       s3://infralytiqs/cl/<vendor>/<app>/infralytiqs-bootstrap.min.js and is
+//       served from https://assets.infralytiqs.com/cl/<vendor>/<app>/...min.js
 //
-//         clients/publicis/ps  ->  s3://infralytiqs/cl/publicis/ps/infralytiqs-bootstrap.min.js
-//                                  https://assets.infralytiqs.com/cl/publicis/ps/infralytiqs-bootstrap.min.js
-//
-//       Additional clients can be wired in by adding another build/upload/
-//       verify stage trio with its own boolean job parameter.
+//  The set of client bootstraps is data-driven: see the clientList() function
+//  near the bottom of this file. To wire in a new client you only need to:
+//    1. add one booleanParam(name: 'DEPLOY_CLIENT_PUBLICIS_<KEY>', ...), and
+//    2. add one row to clientList() ([key, dir, s3, name, label]).
+//  No new stages are required — the Build / Upload / Verify stages iterate the
+//  selected clients. (This loop-based design also keeps the generated pipeline
+//  method under the JVM 64 KB bytecode limit that the previous one-stage-trio-
+//  per-client layout eventually blew past with a MethodTooLargeException.)
 //
 //  Per-artifact stages can be toggled independently from the build form via
-//  the DEPLOY_SDK and DEPLOY_CLIENT_PUBLICIS_PS boolean job parameters.
+//  the DEPLOY_SDK and DEPLOY_CLIENT_PUBLICIS_* boolean job parameters.
 //
 //  Required Jenkins credentials:
 //    - aws-infralytiqs-deploy   : "Username with password" credential where
@@ -53,6 +58,61 @@ pipeline {
             defaultValue: true,
             description: 'Build clients/publicis/ps from THIS repository and upload its minified bootstrap to s3://infralytiqs/cl/publicis/ps/infralytiqs-bootstrap.min.js'
         )
+        booleanParam(
+            name: 'DEPLOY_CLIENT_PUBLICIS_ATL',
+            defaultValue: true,
+            description: 'Build clients/publicis/atl from THIS repository and upload its minified bootstrap to s3://infralytiqs/cl/publicis/atl/infralytiqs-bootstrap.min.js'
+        )
+        booleanParam(
+            name: 'DEPLOY_CLIENT_PUBLICIS_GARNIER',
+            defaultValue: true,
+            description: 'Build clients/publicis/garnier from THIS repository and upload its minified bootstrap to s3://infralytiqs/cl/publicis/garnier/infralytiqs-bootstrap.min.js'
+        )
+        booleanParam(
+            name: 'DEPLOY_CLIENT_PUBLICIS_PX',
+            defaultValue: true,
+            description: 'Build clients/publicis/px from THIS repository and upload its minified bootstrap to s3://infralytiqs/cl/publicis/px/infralytiqs-bootstrap.min.js'
+        )
+        booleanParam(
+            name: 'DEPLOY_CLIENT_PUBLICIS_VISA',
+            defaultValue: true,
+            description: 'Build clients/publicis/visa from THIS repository and upload its minified bootstrap to s3://infralytiqs/cl/publicis/visa/infralytiqs-bootstrap.min.js'
+        )
+        booleanParam(
+            name: 'DEPLOY_CLIENT_PUBLICIS_STELLANTIS',
+            defaultValue: true,
+            description: 'Build clients/publicis/stellantis from THIS repository and upload its minified bootstrap to s3://infralytiqs/cl/publicis/stellantis/infralytiqs-bootstrap.min.js'
+        )
+        booleanParam(
+            name: 'DEPLOY_CLIENT_PUBLICIS_COLAB',
+            defaultValue: true,
+            description: 'Build clients/publicis/colab from THIS repository and upload its minified bootstrap to s3://infralytiqs/cl/publicis/colab/infralytiqs-bootstrap.min.js'
+        )
+        booleanParam(
+            name: 'DEPLOY_CLIENT_PUBLICIS_ARC',
+            defaultValue: true,
+            description: 'Build clients/publicis/arc from THIS repository and upload its minified bootstrap to s3://infralytiqs/cl/publicis/arc/infralytiqs-bootstrap.min.js'
+        )
+        booleanParam(
+            name: 'DEPLOY_CLIENT_PUBLICIS_PXP',
+            defaultValue: true,
+            description: 'Build clients/publicis/pxp from THIS repository and upload its minified bootstrap to s3://infralytiqs/cl/publicis/pxp/infralytiqs-bootstrap.min.js'
+        )
+        booleanParam(
+            name: 'DEPLOY_CLIENT_PUBLICIS_RAZORFISH',
+            defaultValue: true,
+            description: 'Build clients/publicis/razorfish from THIS repository and upload its minified bootstrap to s3://infralytiqs/cl/publicis/razorfish/infralytiqs-bootstrap.min.js'
+        )
+        booleanParam(
+            name: 'DEPLOY_CLIENT_PUBLICIS_FNACDARTY',
+            defaultValue: true,
+            description: 'Build clients/publicis/fnacdarty from THIS repository and upload its minified bootstrap to s3://infralytiqs/cl/publicis/fnacdarty/infralytiqs-bootstrap.min.js'
+        )
+        booleanParam(
+            name: 'DEPLOY_CLIENT_PUBLICIS_PMIGTR',
+            defaultValue: true,
+            description: 'Build clients/publicis/pmigtr from THIS repository and upload its minified bootstrap to s3://infralytiqs/cl/publicis/pmigtr/infralytiqs-bootstrap.min.js'
+        )
     }
 
     options {
@@ -94,15 +154,14 @@ pipeline {
         CDN_VERIFY_RETRIES        = '6'   // number of attempts
         CDN_VERIFY_SLEEP_SEC      = '10'  // delay between attempts
 
-        // ---- clients/publicis/ps (client-specific bootstrap) ----
+        // ---- Client bootstrap build/upload constants ----
         // The git repository is checked out into this subdirectory by the
         // "Checkout Source" stage so it doesn't collide with the npm artifact
         // tarball or the AWS CLI binaries downloaded into the workspace root.
+        // The per-client source dir / S3 prefix / etc. are data-driven — see
+        // clientList() at the bottom of this file.
         REPO_SRC_DIR              = 'repo-src'
-        CLIENT_PS_REL_DIR         = 'clients/publicis/ps'
-        CLIENT_PS_BOOTSTRAP_MIN   = 'infralytiqs-bootstrap.min.js'
-        CLIENT_PS_S3_KEY_PREFIX   = 'cl/publicis/ps'
-        CLIENT_PS_CDN_VERIFY_PATH = 'cl/publicis/ps/infralytiqs-bootstrap.min.js'
+        CLIENT_BOOTSTRAP_MIN      = 'infralytiqs-bootstrap.min.js'
     }
 
     // If you use the Jenkins NodeJS plugin, uncomment and set the tool name:
@@ -117,8 +176,9 @@ pipeline {
                 // use deleteDir() to wipe the workspace before every build.
                 deleteDir()
                 script {
-                    if (!params.DEPLOY_SDK && !params.DEPLOY_CLIENT_PUBLICIS_PS) {
-                        error "Nothing to do: both DEPLOY_SDK and DEPLOY_CLIENT_PUBLICIS_PS are unchecked."
+                    def clients = selectedClients()
+                    if (!params.DEPLOY_SDK && clients.isEmpty()) {
+                        error "Nothing to do: DEPLOY_SDK and all DEPLOY_CLIENT_PUBLICIS_* parameters are unchecked."
                     }
                     def labelParts = []
                     if (params.DEPLOY_SDK) {
@@ -127,9 +187,7 @@ pipeline {
                         }
                         labelParts << "sdk:${params.DEPLOY_VERSION}"
                     }
-                    if (params.DEPLOY_CLIENT_PUBLICIS_PS) {
-                        labelParts << 'publicis/ps'
-                    }
+                    clients.each { c -> labelParts << c.label }
                     currentBuild.displayName = "#${env.BUILD_NUMBER} • ${labelParts.join(' + ')}"
                 }
             }
@@ -212,7 +270,7 @@ pipeline {
 
         // ---------------------------------------------------------------------
         stage('Checkout Source (client builds)') {
-            when { expression { return params.DEPLOY_CLIENT_PUBLICIS_PS } }
+            when { expression { return !selectedClients().isEmpty() } }
             steps {
                 // The repository is checked out into a sub-folder so it
                 // doesn't collide with the npm pack output (artifact/) or
@@ -227,34 +285,11 @@ pipeline {
         }
 
         // ---------------------------------------------------------------------
-        stage('Build Client — publicis/ps') {
-            when { expression { return params.DEPLOY_CLIENT_PUBLICIS_PS } }
+        stage('Build Clients') {
+            when { expression { return !selectedClients().isEmpty() } }
             steps {
-                sh '''
-                    set -eu
-                    cd "${REPO_SRC_DIR}/${CLIENT_PS_REL_DIR}"
-                    echo "Building client bootstrap in $(pwd) ..."
-                    # `npm ci` requires package-lock.json; fall back to install
-                    # for a fresh checkout that doesn't carry one yet.
-                    if [ -f package-lock.json ]; then
-                        npm ci --no-audit --no-fund
-                    else
-                        npm install --no-audit --no-fund
-                    fi
-                    npm run build
-                    ls -la dist
-                '''
-
                 script {
-                    def relMin = "${env.REPO_SRC_DIR}/${env.CLIENT_PS_REL_DIR}/dist/${env.CLIENT_PS_BOOTSTRAP_MIN}"
-                    if (!fileExists(relMin)) {
-                        error "Build did not produce expected client bootstrap: ${relMin}"
-                    }
-                    env.LOCAL_CLIENT_PS_MIN_PATH = relMin
-                    archiveArtifacts artifacts: "${env.REPO_SRC_DIR}/${env.CLIENT_PS_REL_DIR}/dist/*.js",
-                                     fingerprint: true,
-                                     onlyIfSuccessful: true
-                    echo "Built client bootstrap: ${relMin}"
+                    selectedClients().each { c -> buildClient(c) }
                 }
             }
         }
@@ -394,83 +429,21 @@ pipeline {
         }
 
         // ---------------------------------------------------------------------
-        stage('Upload Client — publicis/ps') {
-            when { expression { return params.DEPLOY_CLIENT_PUBLICIS_PS } }
+        //  Upload + verify every selected client bootstrap. Both the upload and
+        //  the CDN verification for a given client run back-to-back so a failure
+        //  is attributed to the right client in the log.
+        stage('Upload + Verify Clients') {
+            when { expression { return !selectedClients().isEmpty() } }
             steps {
-                withCredentials([usernamePassword(
-                    credentialsId: env.AWS_CREDENTIALS_ID,
-                    usernameVariable: 'AWS_ACCESS_KEY_ID',
-                    passwordVariable: 'AWS_SECRET_ACCESS_KEY'
-                )]) {
-                    sh '''
-                        set -eu
-                        export AWS_DEFAULT_REGION="${AWS_REGION}"
-                        unset AWS_SESSION_TOKEN || true
-
-                        "${AWS_CLI_BIN}" --version
-
-                        S3_TARGET="s3://${S3_BUCKET}/${CLIENT_PS_S3_KEY_PREFIX}/${CLIENT_PS_BOOTSTRAP_MIN}"
-                        echo "Uploading ${LOCAL_CLIENT_PS_MIN_PATH} -> ${S3_TARGET}"
-
-                        "${AWS_CLI_BIN}" s3 cp "${LOCAL_CLIENT_PS_MIN_PATH}" "${S3_TARGET}" \
-                            --region "${AWS_REGION}" \
-                            --content-type "${S3_CONTENT_TYPE}" \
-                            --cache-control "${S3_CACHE_CONTROL}" \
-                            --metadata "client=publicis-ps build-number=${BUILD_NUMBER}"
-
-                        echo "S3 head-object verification:"
-                        "${AWS_CLI_BIN}" s3api head-object \
-                            --region "${AWS_REGION}" \
-                            --bucket "${S3_BUCKET}" \
-                            --key    "${CLIENT_PS_S3_KEY_PREFIX}/${CLIENT_PS_BOOTSTRAP_MIN}"
-                    '''
+                script {
+                    selectedClients().each { c ->
+                        uploadClient(c)
+                        verifyClientOnCdn(c)
+                    }
                 }
             }
         }
 
-        // ---------------------------------------------------------------------
-        stage('Verify Client — publicis/ps on CDN') {
-            when { expression { return params.DEPLOY_CLIENT_PUBLICIS_PS } }
-            steps {
-                sh '''
-                    set -eu
-                    CDN_URL="${CDN_BASE_URL}/${CLIENT_PS_CDN_VERIFY_PATH}"
-                    LOCAL_BANNER=$(head -n 1 "${LOCAL_CLIENT_PS_MIN_PATH}" | tr -d "\n")
-                    echo "Verifying CDN URL: ${CDN_URL}"
-                    echo "Expected banner   : ${LOCAL_BANNER}"
-
-                    i=1
-                    while [ "${i}" -le "${CDN_VERIFY_RETRIES}" ]; do
-                        STATUS=$(curl -sS -o /tmp/client-ps-cdn.js -w "%{http_code}" \
-                            "${CDN_URL}?cb=$(date +%s)-${BUILD_NUMBER}-${i}" || echo "000")
-
-                        if [ "${STATUS}" = "200" ]; then
-                            CDN_BANNER=$(head -n 1 /tmp/client-ps-cdn.js | tr -d "\n")
-                            if [ "${CDN_BANNER}" = "${LOCAL_BANNER}" ]; then
-                                echo "CDN OK — client bootstrap served from ${CDN_URL}"
-                                echo "  banner: ${CDN_BANNER}"
-                                exit 0
-                            else
-                                echo "Attempt ${i}: HTTP 200 but banner mismatch (likely CDN cache lag)."
-                                echo "   cdn  : ${CDN_BANNER}"
-                                echo "   local: ${LOCAL_BANNER}"
-                            fi
-                        else
-                            echo "Attempt ${i}: HTTP ${STATUS} from ${CDN_URL}"
-                        fi
-
-                        i=$((i + 1))
-                        if [ "${i}" -le "${CDN_VERIFY_RETRIES}" ]; then
-                            sleep "${CDN_VERIFY_SLEEP_SEC}"
-                        fi
-                    done
-
-                    echo "CDN verification FAILED after ${CDN_VERIFY_RETRIES} attempts."
-                    exit 1
-                '''
-            }
-        }
-
         // ---------------------------------------------------------------------
         stage('Finish') {
             steps {
@@ -485,13 +458,11 @@ pipeline {
                     } else {
                         echo "   SDK upload skipped (DEPLOY_SDK = false)."
                     }
-                    if (params.DEPLOY_CLIENT_PUBLICIS_PS) {
-                        echo "   Client: publicis/ps"
-                        echo "     Source           : ${env.REPO_SRC_DIR}/${env.CLIENT_PS_REL_DIR}"
-                        echo "     S3 destination   : s3://${env.S3_BUCKET}/${env.CLIENT_PS_S3_KEY_PREFIX}/${env.CLIENT_PS_BOOTSTRAP_MIN}"
-                        echo "     CDN URL          : ${env.CDN_BASE_URL}/${env.CLIENT_PS_CDN_VERIFY_PATH}"
-                    } else {
-                        echo "   Client publicis/ps upload skipped (DEPLOY_CLIENT_PUBLICIS_PS = false)."
+                    selectedClients().each { c ->
+                        echo "   Client: ${c.label}"
+                        echo "     Source           : ${env.REPO_SRC_DIR}/${c.dir}"
+                        echo "     S3 destination   : s3://${env.S3_BUCKET}/${c.s3}/${env.CLIENT_BOOTSTRAP_MIN}"
+                        echo "     CDN URL          : ${env.CDN_BASE_URL}/${c.s3}/${env.CLIENT_BOOTSTRAP_MIN}"
                     }
                     echo "==============================================================="
                 }
@@ -506,8 +477,8 @@ pipeline {
                 if (params.DEPLOY_SDK) {
                     messages << "${env.NPM_PACKAGE_NAME}@${params.DEPLOY_VERSION} -> ${env.CDN_BASE_URL}/${env.CDN_VERIFY_PATH}"
                 }
-                if (params.DEPLOY_CLIENT_PUBLICIS_PS) {
-                    messages << "publicis/ps -> ${env.CDN_BASE_URL}/${env.CLIENT_PS_CDN_VERIFY_PATH}"
+                selectedClients().each { c ->
+                    messages << "${c.label} -> ${env.CDN_BASE_URL}/${c.s3}/${env.CLIENT_BOOTSTRAP_MIN}"
                 }
                 echo "SUCCESS: Deployed ${messages.join(' ; ')}"
             }
@@ -521,3 +492,148 @@ pipeline {
         // installed on this Jenkins.
     }
 }
+
+// =============================================================================
+//  Helper functions (defined at script top level so they are real methods of
+//  the WorkflowScript class and are therefore reachable from every script{}
+//  block above — unlike top-level `def` variables, which are not).
+// =============================================================================
+
+// The single source of truth for the per-client bootstraps this pipeline can
+// deploy. Each row drives the build/upload/verify loops. To add a client:
+//   1. add a booleanParam(name: 'DEPLOY_CLIENT_PUBLICIS_<KEY>') above, and
+//   2. add a row here with the matching uppercased KEY.
+def clientList() {
+    return [
+        [key: 'PS',         dir: 'clients/publicis/ps',         s3: 'cl/publicis/ps',         name: 'publicis-ps',         label: 'publicis/ps'],
+        [key: 'ATL',        dir: 'clients/publicis/atl',        s3: 'cl/publicis/atl',        name: 'publicis-atl',        label: 'publicis/atl'],
+        [key: 'GARNIER',    dir: 'clients/publicis/garnier',    s3: 'cl/publicis/garnier',    name: 'publicis-garnier',    label: 'publicis/garnier'],
+        [key: 'PX',         dir: 'clients/publicis/px',         s3: 'cl/publicis/px',         name: 'publicis-px',         label: 'publicis/px'],
+        [key: 'VISA',       dir: 'clients/publicis/visa',       s3: 'cl/publicis/visa',       name: 'publicis-visa',       label: 'publicis/visa'],
+        [key: 'STELLANTIS', dir: 'clients/publicis/stellantis', s3: 'cl/publicis/stellantis', name: 'publicis-stellantis', label: 'publicis/stellantis'],
+        [key: 'COLAB',      dir: 'clients/publicis/colab',      s3: 'cl/publicis/colab',      name: 'publicis-colab',      label: 'publicis/colab'],
+        [key: 'ARC',        dir: 'clients/publicis/arc',        s3: 'cl/publicis/arc',        name: 'publicis-arc',        label: 'publicis/arc'],
+        [key: 'PXP',        dir: 'clients/publicis/pxp',        s3: 'cl/publicis/pxp',        name: 'publicis-pxp',        label: 'publicis/pxp'],
+        [key: 'RAZORFISH',  dir: 'clients/publicis/razorfish',  s3: 'cl/publicis/razorfish',  name: 'publicis-razorfish',  label: 'publicis/razorfish'],
+        [key: 'FNACDARTY',  dir: 'clients/publicis/fnacdarty',  s3: 'cl/publicis/fnacdarty',  name: 'publicis-fnacdarty',  label: 'publicis/fnacdarty'],
+        [key: 'PMIGTR',     dir: 'clients/publicis/pmigtr',     s3: 'cl/publicis/pmigtr',     name: 'publicis-pmigtr',     label: 'publicis/pmigtr'],
+    ]
+}
+
+// The subset of clientList() whose DEPLOY_CLIENT_PUBLICIS_<KEY> param is ticked.
+def selectedClients() {
+    return clientList().findAll { c -> params["DEPLOY_CLIENT_PUBLICIS_${c.key}"] }
+}
+
+// The deterministic local path of a freshly-built client bootstrap. Derived
+// from the client row so we never need to stash it in env between stages
+// (dynamic env subscript assignment is blocked by the Groovy sandbox).
+def clientLocalMin(c) {
+    return "${env.REPO_SRC_DIR}/${c.dir}/dist/${env.CLIENT_BOOTSTRAP_MIN}"
+}
+
+// Build one client bootstrap from source.
+def buildClient(c) {
+    env.CUR_REL_DIR = c.dir
+    sh '''
+        set -eu
+        cd "${REPO_SRC_DIR}/${CUR_REL_DIR}"
+        echo "Building client bootstrap in $(pwd) ..."
+        # `npm ci` requires package-lock.json; fall back to install for a fresh
+        # checkout that doesn't carry one yet.
+        if [ -f package-lock.json ]; then
+            npm ci --no-audit --no-fund
+        else
+            npm install --no-audit --no-fund
+        fi
+        npm run build
+        ls -la dist
+    '''
+    def relMin = clientLocalMin(c)
+    if (!fileExists(relMin)) {
+        error "Build did not produce expected client bootstrap: ${relMin}"
+    }
+    archiveArtifacts artifacts: "${env.REPO_SRC_DIR}/${c.dir}/dist/*.js",
+                     fingerprint: true,
+                     onlyIfSuccessful: true
+    echo "Built client bootstrap: ${relMin}"
+}
+
+// Upload one client bootstrap to S3.
+def uploadClient(c) {
+    env.CUR_S3_PREFIX   = c.s3
+    env.CUR_LOCAL_MIN   = clientLocalMin(c)
+    env.CUR_CLIENT_NAME = c.name
+    withCredentials([usernamePassword(
+        credentialsId: env.AWS_CREDENTIALS_ID,
+        usernameVariable: 'AWS_ACCESS_KEY_ID',
+        passwordVariable: 'AWS_SECRET_ACCESS_KEY'
+    )]) {
+        sh '''
+            set -eu
+            export AWS_DEFAULT_REGION="${AWS_REGION}"
+            unset AWS_SESSION_TOKEN || true
+
+            "${AWS_CLI_BIN}" --version
+
+            S3_TARGET="s3://${S3_BUCKET}/${CUR_S3_PREFIX}/${CLIENT_BOOTSTRAP_MIN}"
+            echo "Uploading ${CUR_LOCAL_MIN} -> ${S3_TARGET}"
+
+            "${AWS_CLI_BIN}" s3 cp "${CUR_LOCAL_MIN}" "${S3_TARGET}" \
+                --region "${AWS_REGION}" \
+                --content-type "${S3_CONTENT_TYPE}" \
+                --cache-control "${S3_CACHE_CONTROL}" \
+                --metadata "client=${CUR_CLIENT_NAME} build-number=${BUILD_NUMBER}"
+
+            echo "S3 head-object verification:"
+            "${AWS_CLI_BIN}" s3api head-object \
+                --region "${AWS_REGION}" \
+                --bucket "${S3_BUCKET}" \
+                --key    "${CUR_S3_PREFIX}/${CLIENT_BOOTSTRAP_MIN}"
+        '''
+    }
+}
+
+// Verify one client bootstrap is served from the CDN with the banner matching
+// the freshly-built local artifact (retrying through CDN cache lag).
+def verifyClientOnCdn(c) {
+    env.CUR_CDN_PATH  = "${c.s3}/${env.CLIENT_BOOTSTRAP_MIN}"
+    env.CUR_LOCAL_MIN = clientLocalMin(c)
+    env.CUR_TMP_FILE  = "/tmp/client-${c.key}-cdn.js"
+    sh '''
+        set -eu
+        CDN_URL="${CDN_BASE_URL}/${CUR_CDN_PATH}"
+        LOCAL_BANNER=$(head -n 1 "${CUR_LOCAL_MIN}" | tr -d "\n")
+        echo "Verifying CDN URL: ${CDN_URL}"
+        echo "Expected banner   : ${LOCAL_BANNER}"
+
+        i=1
+        while [ "${i}" -le "${CDN_VERIFY_RETRIES}" ]; do
+            STATUS=$(curl -sS -o "${CUR_TMP_FILE}" -w "%{http_code}" \
+                "${CDN_URL}?cb=$(date +%s)-${BUILD_NUMBER}-${i}" || echo "000")
+
+            if [ "${STATUS}" = "200" ]; then
+                CDN_BANNER=$(head -n 1 "${CUR_TMP_FILE}" | tr -d "\n")
+                if [ "${CDN_BANNER}" = "${LOCAL_BANNER}" ]; then
+                    echo "CDN OK — client bootstrap served from ${CDN_URL}"
+                    echo "  banner: ${CDN_BANNER}"
+                    exit 0
+                else
+                    echo "Attempt ${i}: HTTP 200 but banner mismatch (likely CDN cache lag)."
+                    echo "   cdn  : ${CDN_BANNER}"
+                    echo "   local: ${LOCAL_BANNER}"
+                fi
+            else
+                echo "Attempt ${i}: HTTP ${STATUS} from ${CDN_URL}"
+            fi
+
+            i=$((i + 1))
+            if [ "${i}" -le "${CDN_VERIFY_RETRIES}" ]; then
+                sleep "${CDN_VERIFY_SLEEP_SEC}"
+            fi
+        done
+
+        echo "CDN verification FAILED after ${CDN_VERIFY_RETRIES} attempts."
+        exit 1
+    '''
+}