antelope-cli 1.1.6 → 1.2.0

package/ansible/onboarding-ca/README.md

@@ -0,0 +1,72 @@
+# Client Area brand onboarding (Ansible)
+
+Automates onboarding a new client brand into
+[`web-client-area`](https://bitbucket.org/xsitesinc/web-client-area): it creates the brand
+assets and opens the pull request(s), reproducing the manual onboarding PRs
+(e.g. [#4266](https://bitbucket.org/xsitesinc/web-client-area/pull-requests/4266)).
+
+Per brand it creates, under the target repo:
+
+- `src/assets/other/<folder>/<folder>.scss` — empty stylesheet
+- `src/assets/other/<folder>/legal/risk-disclaimer.html` — the standard disclaimer
+
+The file creation is delegated to the `onboarding-ca` command of the published
+[`antelope-cli`](https://www.npmjs.com/package/antelope-cli) (`npx antelope-cli@<version> onboarding-ca`);
+this role owns cloning, branching, committing, pushing and PR creation.
+
+## Preconditions (control node)
+
+- `git`, Node.js (engines `^16.20.2`) and `npx` on `PATH`.
+- An **SSH key authorized to push** to `xsitesinc/web-client-area` (push is over SSH).
+- A **Bitbucket API token** with pull-request write access (used only for the REST calls:
+  reviewer lookup + PR creation). Store it in Ansible Vault or pass via environment — never commit it.
+- `ansible.builtin.uri` needs Python `urllib` (standard). No extra collections required.
+
+## Usage
+
+Interactive (prompts for the inputs):
+
+```bash
+ansible-playbook onboard-ca.yml
+```
+
+Non-interactive (for CI / wrapping playbooks) — extra-vars skip the prompts:
+
+```bash
+ansible-playbook onboard-ca.yml \
+  -e brand_name="Zenith Horizon Group" \
+  -e jira_key=ATLP-47067 \
+  -e dest_branches=develop,master-26.9 \
+  -e bitbucket_token="$BITBUCKET_TOKEN"
+```
+
+## Inputs
+
+| var | required | example | notes |
+|-----|----------|---------|-------|
+| `brand_name` | yes | `Zenith Horizon Group` | display name → PR title |
+| `jira_key` | yes | `ATLP-47067` | PR title prefix + branch name |
+| `dest_branches` | yes | `develop,master-26.9` | comma-separated; **one PR per branch** |
+| `bitbucket_token` | yes | *(secret)* | Bearer token for the REST calls |
+| `brand_assets_folder` | no | `zenithhorizongroup` | folder name → CLI `--brand_assets_folder`, branch name; prompted separately. Blank ⇒ derived from `brand_name` (lowercased, spaces removed) |
+| `reviewers` | no | *(auto)* | default: repo's Bitbucket default-reviewers (author excluded); override with `[{account_id: "..."}]` |
+| `antelope_cli_version` | no | `1.2.0` | pinned published CLI version |
+| `work_dir` | no | `/tmp/onboard-ca/web-client-area` | clone location |
+| `git_user_name` / `git_user_email` | no | | commit identity |
+
+## Behavior notes
+
+- **One PR per destination branch.** `develop` → `feature/<jira>-onboarding-<folder>`;
+  `master-*`/`release-*` → `hotfix/<jira>-onboarding-<folder>`. Each branch is based on its own
+  destination so diverged histories don't bleed across PRs.
+- **Reviewers** are read from the repo's Bitbucket *Default reviewers* config; the authenticating
+  account is excluded (Bitbucket rejects a PR whose author is a reviewer).
+- **Idempotent:** re-running with the same inputs recreates the (identical) files on the existing
+  source branch, detects no staged changes, skips commit/push, and tolerates the "PR already exists"
+  response (HTTP 400).
+- The playbook prints a summary of created PRs (destination, source branch, status, URL).
+
+## Scope
+
+Client Area only. web-crm onboarding is a separate, independent process (its file edits live in
+antelope-cli's existing `onboarding` command) and is not run by this playbook.

package/ansible/onboarding-ca/onboard-ca.yml

@@ -0,0 +1,41 @@
+---
+# Onboard a Client Area brand into web-client-area and open the PR(s).
+#
+# Interactive:
+#   ansible-playbook onboard-ca.yml
+#
+# Non-interactive (e.g. from another playbook / CI), pass everything as extra-vars:
+#   ansible-playbook onboard-ca.yml \
+#     -e brand_name="Zenith Horizon Group" \
+#     -e brand_assets_folder=zenithhorizongroup \
+#     -e jira_key=ATLP-47067 \
+#     -e dest_branches=develop,master-26.9 \
+#     -e bitbucket_token="$BITBUCKET_TOKEN"
+#
+# Preconditions on the control node: git + Node (>=16) + npx, an SSH key authorized to
+# push to xsitesinc/web-client-area, and a Bitbucket API token with PR write access.
+- name: Onboard a Client Area brand (web-client-area)
+  hosts: localhost
+  connection: local
+  gather_facts: false
+
+  vars_prompt:
+    - name: brand_name
+      prompt: "Brand display name — used in the PR title (e.g. Zenith Horizon Group)"
+      private: false
+    - name: brand_assets_folder
+      prompt: "Brand assets folder name — the src/assets/other/<folder> (e.g. zenithhorizongroup); leave blank to derive from the display name"
+      default: ""
+      private: false
+    - name: jira_key
+      prompt: "Jira key (e.g. ATLP-47067)"
+      private: false
+    - name: dest_branches
+      prompt: "Destination branches, comma-separated (e.g. develop,master-26.9)"
+      private: false
+    - name: bitbucket_token
+      prompt: "Bitbucket API token"
+      private: true
+
+  roles:
+    - onboard_ca

package/ansible/onboarding-ca/roles/onboard_ca/defaults/main.yml

@@ -0,0 +1,24 @@
+---
+# Pinned published antelope-cli version that provides the `onboarding-ca` command.
+antelope_cli_version: "1.2.0"
+
+# Where web-client-area is cloned on the control node.
+work_dir: "/tmp/onboard-ca/web-client-area"
+
+# Brand assets folder name (used for ENV_branding.brand_assets_folder and the src/assets/other/<folder>).
+# Empty => derived from brand_name (lowercased, spaces removed), matching antelope-cli's
+# connectedBrandName so the folder name is identical across repos.
+brand_assets_folder: ""
+
+# Reviewers for the PR. Empty => auto-fetched from the repo's Bitbucket "Default reviewers"
+# config (the authenticating account is excluded automatically). Override with an explicit
+# list, e.g. [{ account_id: "..." }] or [{ uuid: "{...}" }], to bypass the lookup.
+reviewers: []
+
+# Identity used for the commit (control-node git may have no global config).
+git_user_name: "Antelope Onboarding Bot"
+git_user_email: "devops@antelopesystem.com"
+
+# Bitbucket API token (Bearer) for the reviewer lookup + PR creation.
+# Provide via --extra-vars or Ansible Vault; never commit a real value.
+bitbucket_token: ""

package/ansible/onboarding-ca/roles/onboard_ca/meta/main.yml

@@ -0,0 +1,10 @@
+---
+galaxy_info:
+  role_name: onboard_ca
+  author: Antelope Systems
+  description: >-
+    Onboard a Client Area brand: create the brand assets in web-client-area
+    (via antelope-cli onboarding-ca) and open the pull request(s).
+  license: ISC
+  min_ansible_version: "2.12"
+dependencies: []

package/ansible/onboarding-ca/roles/onboard_ca/tasks/main.yml

@@ -0,0 +1,76 @@
+---
+- name: Validate required inputs
+  ansible.builtin.assert:
+    that:
+      - brand_name is defined and (brand_name | length) > 0
+      - jira_key is defined and (jira_key | length) > 0
+      - dest_branches is defined and (dest_branches | length) > 0
+      - bitbucket_token is defined and (bitbucket_token | length) > 0
+    fail_msg: "brand_name, jira_key, dest_branches and bitbucket_token are all required."
+
+- name: Compute effective brand assets folder
+  ansible.builtin.set_fact:
+    brand_assets_folder: >-
+      {{ brand_assets_folder
+         if (brand_assets_folder | default('') | length) > 0
+         else (brand_name | lower | regex_replace(' ', '')) }}
+
+- name: Normalize destination branch list
+  ansible.builtin.set_fact:
+    dest_branch_list: "{{ dest_branches.split(',') | map('trim') | reject('equalto', '') | list }}"
+
+# --- Reviewers: pull from the repo's Bitbucket default-reviewers config -------------
+- name: Resolve reviewers from repo default-reviewers config
+  when: (reviewers | length) == 0
+  block:
+    - name: Identify the authenticating Bitbucket account (PR author)
+      ansible.builtin.uri:
+        url: "{{ api_base }}/user"
+        headers:
+          Authorization: "Bearer {{ bitbucket_token }}"
+        return_content: true
+      register: bb_user
+
+    - name: Fetch the repository default reviewers
+      ansible.builtin.uri:
+        url: "{{ api_base }}/repositories/{{ workspace }}/{{ repo_slug }}/default-reviewers?pagelen=100"
+        headers:
+          Authorization: "Bearer {{ bitbucket_token }}"
+        return_content: true
+      register: bb_default_reviewers
+
+    # Bitbucket rejects a PR whose author is also a reviewer, so drop the authenticating account.
+    # The REST API does not auto-apply default reviewers, so we pass them explicitly.
+    # Bitbucket's PR-create reviewers array is keyed by uuid; exclude the author by account_id.
+    - name: Build reviewers list (excluding the PR author)
+      ansible.builtin.set_fact:
+        reviewers: "{{ reviewers + [{'uuid': item.uuid}] }}"
+      loop: "{{ bb_default_reviewers.json['values'] }}"
+      when: item.account_id != bb_user.json.account_id
+      loop_control:
+        label: "{{ item.display_name | default(item.uuid) }}"
+
+- name: Ensure clone parent directory exists
+  ansible.builtin.file:
+    path: "{{ work_dir | dirname }}"
+    state: directory
+    mode: "0755"
+
+- name: Clone / refresh web-client-area over SSH
+  ansible.builtin.git:
+    repo: "{{ repo_ssh_url }}"
+    dest: "{{ work_dir }}"
+    version: "{{ dest_branch_list[0] }}"
+    update: true
+    force: true
+    accept_hostkey: true
+
+- name: Onboard the brand on each destination branch
+  ansible.builtin.include_tasks: per_branch.yml
+  loop: "{{ dest_branch_list }}"
+  loop_control:
+    loop_var: dest_branch
+
+- name: Summary of pull requests
+  ansible.builtin.debug:
+    msg: "{{ pr_results | default([]) }}"

package/ansible/onboarding-ca/roles/onboard_ca/tasks/per_branch.yml

@@ -0,0 +1,106 @@
+---
+# Runs once per destination branch. `dest_branch` is the loop var.
+
+- name: "[{{ dest_branch }}] Compose source branch name"
+  ansible.builtin.set_fact:
+    branch_prefix: "{{ 'hotfix' if dest_branch is match('(master|release)') else 'feature' }}"
+
+- name: "[{{ dest_branch }}] Set source branch"
+  ansible.builtin.set_fact:
+    source_branch: "{{ branch_prefix }}/{{ jira_key }}-onboarding-{{ brand_assets_folder }}"
+
+- name: "[{{ dest_branch }}] Fetch all remote branches"
+  ansible.builtin.command:
+    cmd: git fetch origin --prune
+    chdir: "{{ work_dir }}"
+  changed_when: false
+
+- name: "[{{ dest_branch }}] Does the source branch already exist on origin?"
+  ansible.builtin.command:
+    cmd: "git ls-remote --exit-code --heads origin {{ source_branch }}"
+    chdir: "{{ work_dir }}"
+  register: remote_src
+  failed_when: false
+  changed_when: false
+
+# Base the working branch on its own remote head if it already exists (idempotent re-run),
+# otherwise on the destination branch.
+- name: "[{{ dest_branch }}] Check out the working branch"
+  ansible.builtin.command:
+    cmd: >-
+      git checkout -B {{ source_branch }}
+      {{ ('origin/' + source_branch) if remote_src.rc == 0 else ('origin/' + dest_branch) }}
+    chdir: "{{ work_dir }}"
+
+- name: "[{{ dest_branch }}] Generate brand files via antelope-cli"
+  ansible.builtin.command:
+    argv:
+      - npx
+      - "antelope-cli@{{ antelope_cli_version }}"
+      - onboarding-ca
+      - --brand_assets_folder
+      - "{{ brand_assets_folder }}"
+    chdir: "{{ work_dir }}"
+  environment:
+    CI: "true"
+  changed_when: true
+
+- name: "[{{ dest_branch }}] Stage changes"
+  ansible.builtin.command:
+    cmd: git add -A
+    chdir: "{{ work_dir }}"
+  changed_when: false
+
+- name: "[{{ dest_branch }}] Detect staged changes"
+  ansible.builtin.command:
+    cmd: git diff --cached --quiet
+    chdir: "{{ work_dir }}"
+  register: staged
+  failed_when: false
+  changed_when: false
+
+- name: "[{{ dest_branch }}] Commit"
+  ansible.builtin.command:
+    cmd: >-
+      git -c user.name="{{ git_user_name }}" -c user.email="{{ git_user_email }}"
+      commit -m "{{ jira_key }}: On-Boarding {{ brand_name }} Client Branding"
+    chdir: "{{ work_dir }}"
+  when: staged.rc == 1
+
+- name: "[{{ dest_branch }}] Push source branch"
+  ansible.builtin.command:
+    cmd: "git push -u origin {{ source_branch }}"
+    chdir: "{{ work_dir }}"
+  when: staged.rc == 1
+
+- name: "[{{ dest_branch }}] Open pull request"
+  ansible.builtin.uri:
+    url: "{{ api_base }}/repositories/{{ workspace }}/{{ repo_slug }}/pullrequests"
+    method: POST
+    headers:
+      Authorization: "Bearer {{ bitbucket_token }}"
+    body_format: json
+    body:
+      title: "{{ jira_key }}: On-Boarding {{ brand_name }} Client Branding"
+      description: "{{ jira_key }}: On-Boarding {{ brand_name }} Client Branding"
+      source:
+        branch:
+          name: "{{ source_branch }}"
+      destination:
+        branch:
+          name: "{{ dest_branch }}"
+      reviewers: "{{ reviewers }}"
+      close_source_branch: true
+    return_content: true
+    status_code: [201, 400]   # 400 tolerated: a PR for this source->dest already exists
+  register: pr_response
+
+- name: "[{{ dest_branch }}] Record PR result"
+  ansible.builtin.set_fact:
+    pr_results: >-
+      {{ (pr_results | default([])) + [{
+           'destination': dest_branch,
+           'source': source_branch,
+           'status': pr_response.status,
+           'url': (pr_response.json.links.html.href | default('(already exists or not created)'))
+         }] }}

package/ansible/onboarding-ca/roles/onboard_ca/vars/main.yml

@@ -0,0 +1,6 @@
+---
+# Constants — the target repository for Client Area onboarding.
+api_base: "https://api.bitbucket.org/2.0"
+workspace: "xsitesinc"
+repo_slug: "web-client-area"
+repo_ssh_url: "git@bitbucket.org:xsitesinc/web-client-area.git"

package/index.js

@@ -3,6 +3,8 @@ const args = process.argv.slice(2);
 
 if (args[0] === "onboarding") {
     require('./onboarding');
+} else if (args[0] === "onboarding-ca") {
+    require('./onboarding-ca');
 } else {
     console.log("Unknown command");
 }

package/onboarding/brand.js

@@ -4,6 +4,7 @@ let brand = {
   connectedBrandName: '',
   color: '',
   languages: null,
+  favicon: '',
   type: '',
   FCMSenderId: '',
   logo: ''

package/onboarding/createConfig.js

@@ -42,7 +42,7 @@ const updateConfigFile = () => {
     colorTheme: 'theme-${brand.connectedBrandName}',
     templateTheme: 'theme-template-${brand.connectedBrandName}',
     title: '${brand.brandName}',
-    favicon: '${brand.connectedBrandName}',
+    favicon: '${brand.favicon}',
     affiliatesApiUrl: '',
     FCMSenderId: '${brand.FCMSenderId}',
     brandAssetsFolder: '${brand.connectedBrandName}',

package/onboarding/favicon.js

@@ -1,131 +1,18 @@
 const fs = require('fs');
 const brandModule = require('./brand.js');
 const chalk = require('chalk');
-const path = require('path');
-const fetch = require('node-fetch');
-const unzipper = require('unzipper');
 
 async function start(rl) {
   try {
-    const brand = brandModule.getBrand();
-    const faviconDirLocation = `src/assets/img/favicon/${brand.connectedBrandName}`;
-
-    // Prompt user for the URL of the logo image
     const imagePath = await promptUser('Please provide the url to your favicon image: ', rl);
-
-    // Make a POST request to the RealFaviconGenerator API
-    console.log(chalk.inverse('Creating a favicon pack...'));
-    const response = await fetch('https://realfavicongenerator.net/api/favicon', {
-      method: 'POST',
-      headers: {
-        'Content-Type': 'application/json'
-      },
-      body: JSON.stringify(getFaviconRequest(brand, imagePath))
-    });
-    const json = await response.json();
-
-    // Handle error responses
-    if (json.favicon_generation_result.result.error_message) {
-      console.error(`Error generating favicon images: ${json.favicon_generation_result.result.error_message}`);
-      return start(rl);
-    }
-
-    // Download and extract the zip file to the favicon directory
-    await fs.promises.mkdir(faviconDirLocation, { recursive: true });
-
-    const zipUrl = json.favicon_generation_result.favicon.package_url;
-    const zipResponse = await fetch(zipUrl);
-    const zipBuffer = await zipResponse.buffer();
-    const zipContents = await unzipper.Open.buffer(zipBuffer);
-    await Promise.all(
-      zipContents.files.map(async (file) => {
-        const content = await file.buffer();
-        const dest = path.join(faviconDirLocation, file.path);
-        await fs.promises.mkdir(path.dirname(dest), { recursive: true });
-        await fs.promises.writeFile(dest, content);
-      })
-    );
-
+    console.log(chalk.cyan(imagePath));
+    brandModule.updateBrand({favicon: imagePath})
     console.log(chalk.cyan(`Favicon images generated successfully!`));
   } catch (error) {
     console.error(`Error generating favicon images: ${error}`);
   }
 }
 
-/**
- * Returns an object containing the necessary parameters for the RealFaviconGenerator API.
- */
-function getFaviconRequest(brand, imagePath) {
-  return {
-    favicon_generation: {
-      api_key: '9123c4e1f216b0538089859917ff21b791a4c6db',
-      master_picture: {
-        type: 'url',
-        url: imagePath
-      },
-      favicon_design: {
-        ios: {
-          picture_aspect: 'no_change',
-          margin: '14%',
-          manifest: {
-            name: '',
-            short_name: '',
-            icons: [
-              {
-                src: '/apple-touch-icon-180x180.png',
-                sizes: '192x192',
-                type: 'image/png'
-              }
-            ],
-            theme_color: '#ffffff',
-            background_color: '#ffffff',
-            display: 'standalone'
-          }
-        },
-        desktop_browser: {},
-        windows: {
-          picture_aspect: 'no_change',
-          background_color: brand.color || '#FFF',
-          assets: {
-            windows_80_ie10_tile: true,
-            windows_10_ie11_edge_tiles: {
-              small: true,
-              medium: true,
-              big: true,
-              rectangle: true
-            }
-          },
-          manifest: {
-            name: '',
-            short_name: '',
-            icons: [
-              {
-                src: '/mstile-150x150.png',
-                sizes: '150x150',
-                type: 'image/png'
-              }
-            ],
-            theme_color: '#ffffff',
-            background_color: '#ffffff',
-            display: 'standalone'
-          }
-        },
-        safari_pinned_tab: {
-          picture_aspect: 'silhouette',
-          threshold: 20,
-          theme_color: brand.color || '#FFF'
-        }
-      }
-    }
-  };
-}
-
-/**
- * Prompts the user for input with the given message.
- * @param {string} message The message to display to the user.
- * @param {readline.Interface} rl The readline interface to use for user input.
- * @returns {Promise<string>} A promise that resolves with the user's input.
- */
 function promptUser(message, rl) {
   return new Promise((resolve) => {
     rl.question(message, (input) => {

package/onboarding-ca/brand.js

@@ -0,0 +1,13 @@
+let brand = {
+  brandAssetsFolder: ''
+};
+
+function updateBrand(updatedBrand) {
+  brand = { ...brand, ...updatedBrand };
+}
+
+function getBrand() {
+  return brand;
+}
+
+module.exports = { updateBrand, getBrand };

package/onboarding-ca/index.js

@@ -0,0 +1,94 @@
+const readline = require('readline');
+const chalk = require('chalk');
+const brandModule = require('./brand.js');
+const scss = require('./scss.js');
+const riskDisclaimer = require('./riskDisclaimer.js');
+
+const HELP = `
+Usage: ant-cli onboarding-ca --brand_assets_folder <folder>
+
+Creates the Client Area brand assets in the current web-client-area checkout:
+  src/assets/other/<folder>/<folder>.scss              (empty)
+  src/assets/other/<folder>/legal/risk-disclaimer.html
+
+Options:
+  --brand_assets_folder   Brand assets folder name, e.g. "zenithhorizongroup"
+                          (required in non-interactive mode). This is the value used for
+                          ENV_branding.brand_assets_folder. Normalized to lowercase, spaces removed.
+  -h, --help              Show this help
+
+Run from the root of a web-client-area checkout — files are written relative to the current directory.
+`;
+
+// Normalize to the folder convention used across the brand repos (connectedBrandName):
+// lowercase, no spaces. Harmless when a clean folder name is already supplied.
+const normalizeFolder = (value) => value.trim().toLowerCase().replace(/ /g, '');
+
+function parseArgs(argv) {
+  const opts = {};
+  for (let i = 0; i < argv.length; i++) {
+    const a = argv[i];
+    if (a === '--brand_assets_folder') opts.brandAssetsFolder = argv[++i];
+    else if (a === '--help' || a === '-h') opts.help = true;
+  }
+  return opts;
+}
+
+function promptFolder(rl) {
+  return new Promise((resolve) => {
+    rl.question('Enter the brand assets folder name (e.g. zenithhorizongroup):\n', (name) => resolve(name));
+  });
+}
+
+async function run() {
+  // process.argv: [node, index.js, "onboarding-ca", ...flags]
+  const opts = parseArgs(process.argv.slice(3));
+  if (opts.help) {
+    console.log(HELP);
+    return;
+  }
+
+  console.log(chalk.underline(chalk.cyan('Antelope Client-Area on-boarding\n')));
+
+  // Interactive only in a real terminal and when not forced non-interactive (CI / Ansible).
+  const interactive = Boolean(process.stdin.isTTY) && !process.env.CI;
+
+  let rl;
+  let rawFolder = opts.brandAssetsFolder;
+  if (!rawFolder) {
+    if (!interactive) {
+      console.error(chalk.red('Error: --brand_assets_folder is required in non-interactive mode.'));
+      console.log(HELP);
+      process.exitCode = 1;
+      return;
+    }
+    rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+    rawFolder = await promptFolder(rl);
+  }
+
+  const brandAssetsFolder = normalizeFolder(rawFolder || '');
+  if (!brandAssetsFolder) {
+    console.error(chalk.red('Error: brand assets folder must not be empty.'));
+    if (rl) rl.close();
+    process.exitCode = 1;
+    return;
+  }
+
+  brandModule.updateBrand({ brandAssetsFolder });
+
+  try {
+    console.log(chalk.bold(chalk.yellow(`\nOnboarding brand assets folder "${brandAssetsFolder}"`)));
+    console.log(chalk.bold(chalk.yellow('\nStep 1: Create brand stylesheet')));
+    await scss.start();
+    console.log(chalk.bold(chalk.yellow('\nStep 2: Create legal/risk-disclaimer.html')));
+    await riskDisclaimer.start();
+    console.log(chalk.green('\nClient-Area onboarding completed!'));
+  } catch (err) {
+    console.error(chalk.red(err) + '\n Please delete files added by this failed session.');
+    process.exitCode = 1;
+  } finally {
+    if (rl) rl.close();
+  }
+}
+
+run();

package/onboarding-ca/riskDisclaimer.js

@@ -0,0 +1,27 @@
+const fs = require('fs');
+const path = require('path');
+const chalk = require('chalk');
+const brandModule = require('./brand.js');
+
+// The disclaimer is the same fixed markup for every brand. Read the bundled template
+// via __dirname (resolves inside the installed package, regardless of the cwd we write to).
+const templatePath = path.join(__dirname, 'templates', 'risk-disclaimer.html');
+
+function start() {
+  return new Promise((resolve, reject) => {
+    try {
+      const { brandAssetsFolder } = brandModule.getBrand();
+      const dir = path.join('src', 'assets', 'other', brandAssetsFolder, 'legal');
+      fs.mkdirSync(dir, { recursive: true });
+      const file = path.join(dir, 'risk-disclaimer.html');
+      const template = fs.readFileSync(templatePath, 'utf8');
+      fs.writeFileSync(file, template, 'utf8');
+      console.log(chalk.cyan(`Created ${file}`));
+      resolve(file);
+    } catch (error) {
+      reject(error);
+    }
+  });
+}
+
+module.exports = { start };

package/onboarding-ca/scss.js

@@ -0,0 +1,24 @@
+const fs = require('fs');
+const path = require('path');
+const chalk = require('chalk');
+const brandModule = require('./brand.js');
+
+// Creates the brand stylesheet. It is intentionally EMPTY — matches every existing
+// brand in web-client-area (git blob e69de29b). brands.ts require()s it dynamically.
+function start() {
+  return new Promise((resolve, reject) => {
+    try {
+      const { brandAssetsFolder } = brandModule.getBrand();
+      const dir = path.join('src', 'assets', 'other', brandAssetsFolder);
+      fs.mkdirSync(dir, { recursive: true });
+      const file = path.join(dir, `${brandAssetsFolder}.scss`);
+      fs.writeFileSync(file, '', 'utf8');
+      console.log(chalk.cyan(`Created ${file}`));
+      resolve(file);
+    } catch (error) {
+      reject(error);
+    }
+  });
+}
+
+module.exports = { start };

package/onboarding-ca/templates/risk-disclaimer.html

@@ -0,0 +1,12 @@
+<div class="page-wrapper push-up">
+  <a
+    class="disclaimer__top-image push-down"
+    href="{{ 'RISK.DISCLAIMER.SPONSOR.URL' | translate }}"
+    target="_blank"
+    layout="row"
+    layout-align="center center"
+    ><img alt=""
+  /></a>
+  <div class="disclaimer__title"><span translate="COMMON.RISK_DISCLAIMER"></span>:</div>
+  <p translate="DISCLAIMER" translate-value-risk="{{$ctrl.risk}}"></p>
+</div>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "antelope-cli",
-  "version": "1.1.6",
+  "version": "1.2.0",
   "description": "CLI-Tool for automating processes for Antelope-Systems ",
   "main": "index.js",
   "bin": {