gitgreen 0.1.0

package/dist/init.js

@@ -0,0 +1,773 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runInit = void 0;
+const child_process_1 = require("child_process");
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const axios_1 = __importDefault(require("axios"));
+const prompts_1 = __importDefault(require("prompts"));
+const kleur_1 = require("kleur");
+const hasGlab = () => {
+    try {
+        (0, child_process_1.execSync)('glab --version', { stdio: 'ignore' });
+        return true;
+    }
+    catch {
+        return false;
+    }
+};
+const glabAuthenticated = () => {
+    try {
+        (0, child_process_1.execSync)('glab auth status', { stdio: 'ignore' });
+        return true;
+    }
+    catch {
+        return false;
+    }
+};
+const getGitRemoteProject = () => {
+    try {
+        const remote = (0, child_process_1.execSync)('git remote get-url origin', { encoding: 'utf8' }).trim();
+        const match = remote.match(/gitlab\.com[:/](.+?)(\.git)?$/);
+        return match ? match[1] : null;
+    }
+    catch {
+        return null;
+    }
+};
+const setVariableGlab = (project, key, value, masked) => {
+    try {
+        (0, child_process_1.execSync)(`glab variable delete ${key} -R "${project}" 2>/dev/null || true`, { stdio: 'ignore' });
+        const maskFlag = masked ? '--masked' : '';
+        (0, child_process_1.execSync)(`echo "${value}" | glab variable set ${key} -R "${project}" ${maskFlag}`, { stdio: 'pipe' });
+        return true;
+    }
+    catch {
+        return false;
+    }
+};
+const setVariableApi = async (baseUrl, pat, projectPath, key, value, masked) => {
+    const projectEncoded = encodeURIComponent(projectPath);
+    const apiUrl = `${baseUrl}/api/v4/projects/${projectEncoded}/variables`;
+    try {
+        // Delete existing
+        await axios_1.default.delete(`${apiUrl}/${key}`, {
+            headers: { 'PRIVATE-TOKEN': pat }
+        }).catch(() => { });
+        // Create new
+        await axios_1.default.post(apiUrl, {
+            key,
+            value,
+            masked,
+            protected: false
+        }, {
+            headers: { 'PRIVATE-TOKEN': pat }
+        });
+        return true;
+    }
+    catch (err) {
+        return false;
+    }
+};
+const setVariable = async (auth, project, key, value, masked = false) => {
+    if (auth.type === 'glab') {
+        return setVariableGlab(project, key, value, masked);
+    }
+    else {
+        return setVariableApi(auth.baseUrl, auth.pat, project, key, value, masked);
+    }
+};
+const generateCiJob = (runnerTag) => {
+    const tagsSection = runnerTag ? `\n  tags:\n    - ${runnerTag}` : '';
+    return `# GitGreen carbon analysis (generated by gitgreen init)
+# Fetches real CPU and RAM metrics from GCP Monitoring API
+
+carbon_analysis:
+  stage: test${tagsSection}
+  before_script:
+    - echo "$GCP_SA_KEY_BASE64" | base64 -d > /tmp/gcp-key.json
+    - gcloud auth activate-service-account --key-file=/tmp/gcp-key.json
+    - npm install ./gitgreen-cli-0.1.0.tgz
+  script:
+    - |
+      TOKEN=$(gcloud auth print-access-token)
+      START_TIME=$(date -u -d "$CI_PIPELINE_CREATED_AT" +%Y-%m-%dT%H:%M:%SZ)
+      END_TIME=$(date -u +%Y-%m-%dT%H:%M:%SZ)
+
+      CPU_FILTER="resource.type=\\"gce_instance\\" AND resource.labels.instance_id=\\"$GCP_INSTANCE_ID\\" AND resource.labels.zone=\\"$GCP_ZONE\\" AND metric.type=\\"compute.googleapis.com/instance/cpu/utilization\\""
+      CPU_ENCODED=$(python3 -c "import urllib.parse; print(urllib.parse.quote('''$CPU_FILTER'''))")
+
+      RAM_USED_FILTER="resource.type=\\"gce_instance\\" AND resource.labels.instance_id=\\"$GCP_INSTANCE_ID\\" AND metric.type=\\"compute.googleapis.com/instance/memory/balloon/ram_used\\""
+      RAM_USED_ENCODED=$(python3 -c "import urllib.parse; print(urllib.parse.quote('''$RAM_USED_FILTER'''))")
+
+      RAM_SIZE_FILTER="resource.type=\\"gce_instance\\" AND resource.labels.instance_id=\\"$GCP_INSTANCE_ID\\" AND metric.type=\\"compute.googleapis.com/instance/memory/balloon/ram_size\\""
+      RAM_SIZE_ENCODED=$(python3 -c "import urllib.parse; print(urllib.parse.quote('''$RAM_SIZE_FILTER'''))")
+
+      # Calculate expected data points (GCP reports every 60s)
+      START_SEC=$(date -d "$START_TIME" +%s)
+      NOW_SEC=$(date +%s)
+      DURATION_SEC=$((NOW_SEC - START_SEC))
+      EXPECTED_POINTS=$((DURATION_SEC / 60))
+      [ "$EXPECTED_POINTS" -lt 1 ] && EXPECTED_POINTS=1
+
+      echo "Pipeline duration: \${DURATION_SEC}s, expecting ~\$EXPECTED_POINTS data points"
+      echo "Waiting for metrics data (GCP has ~3 min lag)..."
+
+      for i in $(seq 1 30); do
+        END_TIME=$(date -u +%Y-%m-%dT%H:%M:%SZ)
+        CPU_DATA=$(curl -s -H "Authorization: Bearer $TOKEN" \\
+          "https://monitoring.googleapis.com/v3/projects/$GCP_PROJECT_ID/timeSeries?filter=$CPU_ENCODED&interval.startTime=$START_TIME&interval.endTime=$END_TIME")
+
+        POINTS=$(echo "$CPU_DATA" | python3 -c "import sys,json; d=json.load(sys.stdin); print(sum(len(ts.get('points',[])) for ts in d.get('timeSeries',[])))" 2>/dev/null || echo "0")
+
+        if [ "$POINTS" -ge "$EXPECTED_POINTS" ]; then
+          echo "Got $POINTS CPU data points (expected $EXPECTED_POINTS)"
+          break
+        fi
+        echo "Waiting for data... got $POINTS/$EXPECTED_POINTS (attempt $i/30)"
+        sleep 10
+      done
+
+      # Fetch RAM data
+      RAM_USED_DATA=$(curl -s -H "Authorization: Bearer $TOKEN" \\
+        "https://monitoring.googleapis.com/v3/projects/$GCP_PROJECT_ID/timeSeries?filter=$RAM_USED_ENCODED&interval.startTime=$START_TIME&interval.endTime=$END_TIME")
+
+      RAM_SIZE_DATA=$(curl -s -H "Authorization: Bearer $TOKEN" \\
+        "https://monitoring.googleapis.com/v3/projects/$GCP_PROJECT_ID/timeSeries?filter=$RAM_SIZE_ENCODED&interval.startTime=$START_TIME&interval.endTime=$END_TIME")
+
+      # Save timeseries to files
+      echo "$CPU_DATA" > /tmp/cpu_timeseries.json
+      echo "$RAM_USED_DATA" > /tmp/ram_used_timeseries.json
+      echo "$RAM_SIZE_DATA" > /tmp/ram_size_timeseries.json
+
+      CMD="./node_modules/.bin/gitgreen --provider gcp --machine $MACHINE_TYPE --region $GCP_ZONE --cpu-timeseries /tmp/cpu_timeseries.json --ram-used-timeseries /tmp/ram_used_timeseries.json --ram-size-timeseries /tmp/ram_size_timeseries.json --out-md carbon-report.md --out-json carbon-report.json --no-gitlab"
+      [ -n "\${CARBON_BUDGET_GRAMS:-}" ] && CMD="$CMD --budget $CARBON_BUDGET_GRAMS"
+      [ "\${FAIL_ON_BUDGET:-}" = "true" ] && CMD="$CMD --fail-on-budget"
+
+      eval "$CMD"
+      cat carbon-report.md
+  artifacts:
+    paths:
+      - carbon-report.md
+      - carbon-report.json
+    expire_in: 30 days
+`;
+};
+const runInit = async (opts = {}) => {
+    console.log((0, kleur_1.bold)('\nGitGreen Setup\n'));
+    // Step 1: GitLab Authentication
+    console.log((0, kleur_1.gray)('Step 1: GitLab Authentication'));
+    console.log((0, kleur_1.gray)('─'.repeat(40)));
+    let auth;
+    const useGlab = hasGlab() && glabAuthenticated();
+    if (useGlab) {
+        console.log((0, kleur_1.green)('Using glab CLI (authenticated)'));
+        auth = { type: 'glab', baseUrl: 'https://gitlab.com' };
+    }
+    else {
+        if (hasGlab()) {
+            console.log('glab found but not authenticated. Run: glab auth login');
+            console.log('Or provide a Personal Access Token.\n');
+        }
+        else {
+            console.log('glab CLI not found. Using GitLab API.\n');
+        }
+        const { pat } = await (0, prompts_1.default)({
+            type: 'password',
+            name: 'pat',
+            message: 'GitLab Personal Access Token (api scope)'
+        });
+        if (!pat) {
+            console.log((0, kleur_1.red)('PAT required'));
+            process.exit(1);
+        }
+        const { baseUrl } = await (0, prompts_1.default)({
+            type: 'text',
+            name: 'baseUrl',
+            message: 'GitLab URL',
+            initial: 'https://gitlab.com'
+        });
+        auth = { type: 'pat', pat, baseUrl };
+    }
+    // Step 2: Project
+    console.log((0, kleur_1.gray)('\nStep 2: GitLab Project'));
+    console.log((0, kleur_1.gray)('─'.repeat(40)));
+    const detectedProject = getGitRemoteProject();
+    const { projectPath } = await (0, prompts_1.default)({
+        type: 'text',
+        name: 'projectPath',
+        message: 'Project (owner/repo)',
+        initial: detectedProject || ''
+    });
+    if (!projectPath) {
+        console.log((0, kleur_1.red)('Project required'));
+        process.exit(1);
+    }
+    // Step 3: Cloud Provider
+    console.log((0, kleur_1.gray)('\nStep 3: Cloud Provider'));
+    console.log((0, kleur_1.gray)('─'.repeat(40)));
+    const { provider } = await (0, prompts_1.default)({
+        type: 'select',
+        name: 'provider',
+        message: 'Runner cloud provider',
+        choices: [
+            { title: 'GCP (Google Cloud)', value: 'gcp' },
+            { title: 'AWS', value: 'aws' },
+            { title: 'Manual configuration', value: 'manual' }
+        ]
+    });
+    if (provider === 'aws') {
+        console.log((0, kleur_1.red)('\nAWS support coming soon.'));
+        process.exit(1);
+    }
+    if (provider === 'manual') {
+        console.log((0, kleur_1.red)('\nManual configuration coming soon.'));
+        process.exit(1);
+    }
+    // Check if gcloud is available
+    let hasGcloud = false;
+    try {
+        (0, child_process_1.execSync)('gcloud --version', { stdio: 'ignore' });
+        hasGcloud = true;
+    }
+    catch { }
+    if (!hasGcloud) {
+        console.log((0, kleur_1.red)('gcloud CLI not found. Install it from https://cloud.google.com/sdk/docs/install'));
+        process.exit(1);
+    }
+    // GCP Project Selection (needed for both runner provisioning and config)
+    console.log((0, kleur_1.gray)('\nStep 4: GCP Project'));
+    console.log((0, kleur_1.gray)('─'.repeat(40)));
+    let gcpProjectId;
+    console.log((0, kleur_1.gray)('Fetching GCP projects...'));
+    let projects = [];
+    try {
+        const projectsJson = (0, child_process_1.execSync)('gcloud projects list --format="json"', { encoding: 'utf8' });
+        projects = JSON.parse(projectsJson).map((p) => ({ id: p.projectId, name: p.name }));
+    }
+    catch { }
+    if (projects.length > 0) {
+        const projectChoices = [
+            ...projects.map(p => ({ title: `${p.id} (${p.name})`, value: p.id })),
+            { title: 'Enter manually', value: '_manual_' }
+        ];
+        const { selectedProject } = await (0, prompts_1.default)({
+            type: 'select',
+            name: 'selectedProject',
+            message: 'GCP Project',
+            choices: projectChoices
+        });
+        if (selectedProject === '_manual_') {
+            const { manualProject } = await (0, prompts_1.default)({
+                type: 'text',
+                name: 'manualProject',
+                message: 'GCP Project ID'
+            });
+            gcpProjectId = manualProject;
+        }
+        else {
+            gcpProjectId = selectedProject;
+        }
+    }
+    else {
+        const { manualProject } = await (0, prompts_1.default)({
+            type: 'text',
+            name: 'manualProject',
+            message: 'GCP Project ID'
+        });
+        gcpProjectId = manualProject;
+    }
+    // Step 5: Runner Setup
+    console.log((0, kleur_1.gray)('\nStep 5: Runner Setup'));
+    console.log((0, kleur_1.gray)('─'.repeat(40)));
+    const { runnerSetup } = await (0, prompts_1.default)({
+        type: 'select',
+        name: 'runnerSetup',
+        message: 'GitLab Runner',
+        choices: [
+            { title: 'Use existing runner', value: 'existing' },
+            { title: 'Provision new GCP runner VM', value: 'provision-gcp' },
+            { title: 'Provision new AWS runner (coming soon)', value: 'provision-aws' }
+        ]
+    });
+    if (runnerSetup === 'provision-aws') {
+        console.log((0, kleur_1.red)('\nAWS runner provisioning coming soon.'));
+        process.exit(1);
+    }
+    let gcpZone = '';
+    let gcpInstanceId = '';
+    let machineType = '';
+    let runnerTag = '';
+    if (runnerSetup === 'provision-gcp') {
+        console.log((0, kleur_1.gray)('\nProvisioning GCP Runner VM...'));
+        console.log((0, kleur_1.gray)('─'.repeat(40)));
+        const { vmZone } = await (0, prompts_1.default)({
+            type: 'text',
+            name: 'vmZone',
+            message: 'GCP zone for runner VM',
+            initial: 'us-central1-a'
+        });
+        gcpZone = vmZone;
+        const { vmMachineType } = await (0, prompts_1.default)({
+            type: 'text',
+            name: 'vmMachineType',
+            message: 'Machine type',
+            initial: 'e2-standard-4'
+        });
+        machineType = vmMachineType;
+        const { vmName } = await (0, prompts_1.default)({
+            type: 'text',
+            name: 'vmName',
+            message: 'Runner VM name',
+            initial: 'gcp-carbon-runner'
+        });
+        const { vmTag } = await (0, prompts_1.default)({
+            type: 'text',
+            name: 'vmTag',
+            message: 'Runner tag (for routing CI jobs)',
+            initial: 'gcp'
+        });
+        runnerTag = vmTag;
+        // Create runner token via GitLab API
+        let runnerToken = '';
+        if (auth.type === 'glab') {
+            console.log((0, kleur_1.gray)('Creating runner token via GitLab API...'));
+            try {
+                const projectEncoded = encodeURIComponent(projectPath);
+                // Get project ID first
+                const projectInfoJson = (0, child_process_1.execSync)(`glab api "projects/${projectEncoded}"`, { encoding: 'utf8' });
+                const projectInfo = JSON.parse(projectInfoJson);
+                const projectId = projectInfo.id;
+                const createResult = (0, child_process_1.execSync)(`glab api --method POST "user/runners" -f runner_type=project_type -f project_id=${projectId} -f description="${vmName}" -f tag_list="${runnerTag}" -f run_untagged=true`, { encoding: 'utf8' });
+                const runnerData = JSON.parse(createResult);
+                runnerToken = runnerData.token;
+                console.log((0, kleur_1.green)(`Runner token created (ID: ${runnerData.id})`));
+            }
+            catch (err) {
+                console.log((0, kleur_1.gray)('Could not create token via API, falling back to manual...'));
+            }
+        }
+        // Fallback: ask user for token
+        if (!runnerToken) {
+            console.log((0, kleur_1.gray)('\nCreate a runner token in GitLab (check "Run untagged jobs"):'));
+            console.log((0, kleur_1.green)(`  https://gitlab.com/${projectPath}/-/runners/new`));
+            const { manualToken } = await (0, prompts_1.default)({
+                type: 'password',
+                name: 'manualToken',
+                message: 'GitLab runner token (glrt-...)'
+            });
+            runnerToken = manualToken;
+        }
+        if (!runnerToken) {
+            console.log((0, kleur_1.red)('Runner token required'));
+            process.exit(1);
+        }
+        // Create service account
+        const saName = 'gitlab-runner';
+        const saEmail = `${saName}@${gcpProjectId}.iam.gserviceaccount.com`;
+        console.log((0, kleur_1.gray)(`Creating service account: ${saEmail}`));
+        try {
+            (0, child_process_1.execSync)(`gcloud iam service-accounts create ${saName} --project=${gcpProjectId} --display-name="GitLab Runner" 2>/dev/null || true`, { stdio: 'pipe' });
+        }
+        catch { }
+        // Grant monitoring role
+        console.log((0, kleur_1.gray)('Granting Monitoring Viewer role...'));
+        try {
+            (0, child_process_1.execSync)(`gcloud projects add-iam-policy-binding ${gcpProjectId} --member="serviceAccount:${saEmail}" --role="roles/monitoring.viewer" --quiet 2>/dev/null`, { stdio: 'pipe' });
+        }
+        catch { }
+        // Check if VM exists
+        let vmExists = false;
+        try {
+            (0, child_process_1.execSync)(`gcloud compute instances describe ${vmName} --project=${gcpProjectId} --zone=${gcpZone} 2>/dev/null`, { stdio: 'pipe' });
+            vmExists = true;
+        }
+        catch { }
+        const startupScript = `#!/usr/bin/env bash
+set -euo pipefail
+apt-get update
+apt-get install -y curl ca-certificates python3
+
+# Install Node.js 20.x
+curl -fsSL https://deb.nodesource.com/setup_20.x | bash -
+apt-get install -y nodejs
+
+# Install GitLab Runner
+curl -L https://packages.gitlab.com/install/repositories/runner/gitlab-runner/script.deb.sh | bash
+apt-get install -y gitlab-runner
+
+INSTANCE_ID=$(curl -s -H "Metadata-Flavor: Google" http://metadata.google.internal/computeMetadata/v1/instance/id)
+TOKEN=$(curl -s -H "Metadata-Flavor: Google" http://metadata.google.internal/computeMetadata/v1/instance/attributes/runner-token)
+
+gitlab-runner register \\
+  --non-interactive \\
+  --url https://gitlab.com/ \\
+  --token "$TOKEN" \\
+  --executor shell \\
+  --description "${vmName}"
+
+echo "$INSTANCE_ID" > /opt/gitlab-runner-instance-id.txt
+
+systemctl enable gitlab-runner
+systemctl start gitlab-runner
+`;
+        const tmpFile = `/tmp/gitgreen-startup-${Date.now()}.sh`;
+        fs_1.default.writeFileSync(tmpFile, startupScript);
+        if (vmExists) {
+            console.log((0, kleur_1.gray)(`VM ${vmName} exists, re-registering runner...`));
+            try {
+                (0, child_process_1.execSync)(`gcloud compute instances add-metadata ${vmName} --project=${gcpProjectId} --zone=${gcpZone} --metadata=runner-token="${runnerToken}"`, { stdio: 'pipe' });
+                (0, child_process_1.execSync)(`gcloud compute ssh ${vmName} --project=${gcpProjectId} --zone=${gcpZone} --command="sudo gitlab-runner unregister --all-runners 2>/dev/null || true; INSTANCE_ID=\\$(curl -s -H 'Metadata-Flavor: Google' http://metadata.google.internal/computeMetadata/v1/instance/id); TOKEN=\\$(curl -s -H 'Metadata-Flavor: Google' http://metadata.google.internal/computeMetadata/v1/instance/attributes/runner-token); sudo gitlab-runner register --non-interactive --url https://gitlab.com/ --token \\$TOKEN --executor shell --description '${vmName}'; echo \\$INSTANCE_ID | sudo tee /opt/gitlab-runner-instance-id.txt; sudo systemctl restart gitlab-runner"`, { stdio: 'inherit' });
+                // Get instance ID
+                gcpInstanceId = (0, child_process_1.execSync)(`gcloud compute ssh ${vmName} --project=${gcpProjectId} --zone=${gcpZone} --command="cat /opt/gitlab-runner-instance-id.txt"`, { encoding: 'utf8' }).trim();
+            }
+            catch (err) {
+                console.log((0, kleur_1.red)('Failed to re-register runner: ' + err.message));
+                process.exit(1);
+            }
+        }
+        else {
+            console.log((0, kleur_1.gray)(`Creating VM ${vmName}...`));
+            try {
+                (0, child_process_1.execSync)(`gcloud compute instances create ${vmName} --project=${gcpProjectId} --zone=${gcpZone} --machine-type=${vmMachineType} --service-account=${saEmail} --scopes=https://www.googleapis.com/auth/cloud-platform --metadata=runner-token="${runnerToken}" --metadata-from-file=startup-script=${tmpFile} --image-family=debian-12 --image-project=debian-cloud`, { stdio: 'inherit' });
+                console.log((0, kleur_1.green)(`VM ${vmName} created. Runner will register in 2-3 minutes.`));
+                console.log((0, kleur_1.gray)('Waiting for runner to register...'));
+                // Wait for instance ID file
+                for (let i = 0; i < 30; i++) {
+                    await new Promise(r => setTimeout(r, 10000));
+                    try {
+                        gcpInstanceId = (0, child_process_1.execSync)(`gcloud compute ssh ${vmName} --project=${gcpProjectId} --zone=${gcpZone} --command="cat /opt/gitlab-runner-instance-id.txt 2>/dev/null"`, { encoding: 'utf8' }).trim();
+                        if (gcpInstanceId) {
+                            console.log((0, kleur_1.green)(`Runner registered. Instance ID: ${gcpInstanceId}`));
+                            break;
+                        }
+                    }
+                    catch { }
+                    console.log((0, kleur_1.gray)(`Waiting... (${i + 1}/30)`));
+                }
+            }
+            catch (err) {
+                console.log((0, kleur_1.red)('Failed to create VM: ' + err.message));
+                process.exit(1);
+            }
+        }
+        fs_1.default.unlinkSync(tmpFile);
+        console.log((0, kleur_1.green)('Runner provisioning complete!'));
+    }
+    // Step 6: GCP Instance Configuration (if using existing runner)
+    console.log((0, kleur_1.gray)('\nStep 6: GCP Instance Configuration'));
+    console.log((0, kleur_1.gray)('─'.repeat(40)));
+    // If we provisioned a runner, we already have the values
+    if (runnerSetup === 'provision-gcp' && gcpInstanceId && gcpZone && machineType) {
+        console.log((0, kleur_1.green)(`Using provisioned runner: ${gcpZone}, ${machineType}, instance-${gcpInstanceId}`));
+    }
+    else {
+        // List instances in project
+        console.log((0, kleur_1.gray)('Fetching instances...'));
+        let instances = [];
+        try {
+            const instancesJson = (0, child_process_1.execSync)(`gcloud compute instances list --project=${gcpProjectId} --format="json"`, { encoding: 'utf8' });
+            instances = JSON.parse(instancesJson).map((i) => ({
+                name: i.name,
+                zone: i.zone.split('/').pop(),
+                id: i.id,
+                machineType: i.machineType.split('/').pop()
+            }));
+        }
+        catch { }
+        if (instances.length > 0) {
+            const instanceChoices = [
+                ...instances.map(i => ({
+                    title: `${i.name} (${i.zone}, ${i.machineType})`,
+                    value: i
+                })),
+                { title: 'Enter manually', value: '_manual_' }
+            ];
+            const { selectedInstance } = await (0, prompts_1.default)({
+                type: 'select',
+                name: 'selectedInstance',
+                message: 'GCP Instance',
+                choices: instanceChoices
+            });
+            if (selectedInstance === '_manual_') {
+                const { manualZone } = await (0, prompts_1.default)({
+                    type: 'text',
+                    name: 'manualZone',
+                    message: 'GCP Zone (e.g., us-central1-a)'
+                });
+                gcpZone = manualZone;
+                const { manualInstanceId } = await (0, prompts_1.default)({
+                    type: 'text',
+                    name: 'manualInstanceId',
+                    message: 'GCP Instance ID (numeric)'
+                });
+                gcpInstanceId = manualInstanceId;
+                const { manualMachineType } = await (0, prompts_1.default)({
+                    type: 'text',
+                    name: 'manualMachineType',
+                    message: 'Machine type',
+                    initial: 'e2-standard-4'
+                });
+                machineType = manualMachineType;
+            }
+            else {
+                gcpZone = selectedInstance.zone;
+                gcpInstanceId = selectedInstance.id;
+                machineType = selectedInstance.machineType;
+                const selectedVmName = selectedInstance.name;
+                console.log((0, kleur_1.green)(`  Selected: ${selectedVmName}`));
+                console.log((0, kleur_1.gray)(`  Zone: ${gcpZone}`));
+                console.log((0, kleur_1.gray)(`  Instance ID: ${gcpInstanceId}`));
+                console.log((0, kleur_1.gray)(`  Machine: ${machineType}`));
+                // Ask if they want to register this VM as a runner for this project
+                const { registerRunner } = await (0, prompts_1.default)({
+                    type: 'confirm',
+                    name: 'registerRunner',
+                    message: 'Register this VM as a runner for this GitLab project?',
+                    initial: true
+                });
+                if (registerRunner) {
+                    const { existingRunnerTag } = await (0, prompts_1.default)({
+                        type: 'text',
+                        name: 'existingRunnerTag',
+                        message: 'Runner tag (for routing CI jobs)',
+                        initial: 'gcp'
+                    });
+                    runnerTag = existingRunnerTag;
+                    let runnerToken = '';
+                    // Try to create runner token via glab API first
+                    if (auth.type === 'glab') {
+                        console.log((0, kleur_1.gray)('Creating runner token via GitLab API...'));
+                        try {
+                            const projectEncoded = encodeURIComponent(projectPath);
+                            // Get project ID first
+                            const projectInfoJson = (0, child_process_1.execSync)(`glab api "projects/${projectEncoded}"`, { encoding: 'utf8' });
+                            const projectInfo = JSON.parse(projectInfoJson);
+                            const projectId = projectInfo.id;
+                            const createResult = (0, child_process_1.execSync)(`glab api --method POST "user/runners" -f runner_type=project_type -f project_id=${projectId} -f description="${selectedVmName}" -f tag_list="${runnerTag}" -f run_untagged=true`, { encoding: 'utf8' });
+                            const runnerData = JSON.parse(createResult);
+                            runnerToken = runnerData.token;
+                            console.log((0, kleur_1.green)(`Runner token created (ID: ${runnerData.id})`));
+                        }
+                        catch (err) {
+                            console.log((0, kleur_1.gray)('Could not create token via API, falling back to manual...'));
+                        }
+                    }
+                    // Fallback: ask user for token
+                    if (!runnerToken) {
+                        console.log((0, kleur_1.gray)('\nCreate a runner token in GitLab (check "Run untagged jobs"):'));
+                        console.log((0, kleur_1.green)(`  https://gitlab.com/${projectPath}/-/runners/new`));
+                        const { manualToken } = await (0, prompts_1.default)({
+                            type: 'password',
+                            name: 'manualToken',
+                            message: 'GitLab runner token (glrt-...)'
+                        });
+                        runnerToken = manualToken;
+                    }
+                    if (runnerToken) {
+                        console.log((0, kleur_1.gray)('Registering runner on VM...'));
+                        try {
+                            // Update runner token metadata
+                            (0, child_process_1.execSync)(`gcloud compute instances add-metadata ${selectedVmName} --project=${gcpProjectId} --zone=${gcpZone} --metadata=runner-token="${runnerToken}"`, { stdio: 'pipe' });
+                            // SSH and re-register
+                            (0, child_process_1.execSync)(`gcloud compute ssh ${selectedVmName} --project=${gcpProjectId} --zone=${gcpZone} --command="sudo gitlab-runner unregister --all-runners 2>/dev/null || true; TOKEN=\\$(curl -s -H 'Metadata-Flavor: Google' http://metadata.google.internal/computeMetadata/v1/instance/attributes/runner-token); sudo gitlab-runner register --non-interactive --url https://gitlab.com/ --token \\$TOKEN --executor shell --description '${selectedVmName}'; sudo systemctl restart gitlab-runner"`, { stdio: 'inherit' });
+                            console.log((0, kleur_1.green)('Runner registered!'));
+                        }
+                        catch (err) {
+                            console.log((0, kleur_1.red)('Failed to register runner: ' + err.message));
+                            console.log((0, kleur_1.gray)('You may need to register manually or check VM access.'));
+                        }
+                    }
+                }
+            }
+        }
+        else {
+            console.log((0, kleur_1.gray)('No instances found in project'));
+            const { manualZone } = await (0, prompts_1.default)({
+                type: 'text',
+                name: 'manualZone',
+                message: 'GCP Zone (e.g., us-central1-a)'
+            });
+            gcpZone = manualZone;
+            const { manualInstanceId } = await (0, prompts_1.default)({
+                type: 'text',
+                name: 'manualInstanceId',
+                message: 'GCP Instance ID (numeric)'
+            });
+            gcpInstanceId = manualInstanceId;
+            const { manualMachineType } = await (0, prompts_1.default)({
+                type: 'text',
+                name: 'manualMachineType',
+                message: 'Machine type',
+                initial: 'e2-standard-4'
+            });
+            machineType = manualMachineType;
+        }
+    } // end else (use existing runner)
+    // Step 7: Service Account
+    console.log((0, kleur_1.gray)('\nStep 5: Service Account'));
+    console.log((0, kleur_1.gray)('─'.repeat(40)));
+    let saKeyBase64;
+    const { keyMethod } = await (0, prompts_1.default)({
+        type: 'select',
+        name: 'keyMethod',
+        message: 'Service account key',
+        choices: [
+            { title: 'Create with gcloud (recommended)', value: 'gcloud' },
+            { title: 'Use existing key file', value: 'file' }
+        ]
+    });
+    if (keyMethod === 'gcloud') {
+        const defaultSa = `gitlab-runner@${gcpProjectId}.iam.gserviceaccount.com`;
+        const { saEmail } = await (0, prompts_1.default)({
+            type: 'text',
+            name: 'saEmail',
+            message: 'Service account email',
+            initial: defaultSa
+        });
+        // Check if SA exists, create if not
+        console.log((0, kleur_1.gray)('Checking service account...'));
+        try {
+            (0, child_process_1.execSync)(`gcloud iam service-accounts describe ${saEmail} --project=${gcpProjectId}`, { stdio: 'ignore' });
+            console.log((0, kleur_1.gray)('Service account exists'));
+        }
+        catch {
+            console.log((0, kleur_1.gray)('Creating service account...'));
+            const saName = saEmail.split('@')[0];
+            (0, child_process_1.execSync)(`gcloud iam service-accounts create ${saName} --project=${gcpProjectId} --display-name="GitGreen Runner"`, { stdio: 'inherit' });
+        }
+        // Grant monitoring viewer role
+        console.log((0, kleur_1.gray)('Granting Monitoring Viewer role...'));
+        try {
+            (0, child_process_1.execSync)(`gcloud projects add-iam-policy-binding ${gcpProjectId} --member="serviceAccount:${saEmail}" --role="roles/monitoring.viewer" --quiet`, { stdio: 'ignore' });
+        }
+        catch { }
+        // Create key
+        console.log((0, kleur_1.gray)('Creating key...'));
+        const tmpKeyPath = `/tmp/gitgreen-sa-key-${Date.now()}.json`;
+        (0, child_process_1.execSync)(`gcloud iam service-accounts keys create ${tmpKeyPath} --iam-account=${saEmail}`, { stdio: 'inherit' });
+        saKeyBase64 = fs_1.default.readFileSync(tmpKeyPath).toString('base64');
+        fs_1.default.unlinkSync(tmpKeyPath);
+        console.log((0, kleur_1.green)('Service account key created'));
+    }
+    else {
+        const { saKeyPath } = await (0, prompts_1.default)({
+            type: 'text',
+            name: 'saKeyPath',
+            message: 'Path to service account JSON key'
+        });
+        if (!fs_1.default.existsSync(saKeyPath)) {
+            console.log((0, kleur_1.red)('File not found: ' + saKeyPath));
+            process.exit(1);
+        }
+        saKeyBase64 = fs_1.default.readFileSync(saKeyPath).toString('base64');
+    }
+    // Step 6: Electricity Maps API
+    console.log((0, kleur_1.gray)('\nStep 6: Electricity Maps API'));
+    console.log((0, kleur_1.gray)('─'.repeat(40)));
+    console.log((0, kleur_1.gray)('Get free key: https://api-portal.electricitymaps.com'));
+    const { electricityMapsKey } = await (0, prompts_1.default)({
+        type: 'password',
+        name: 'electricityMapsKey',
+        message: 'Electricity Maps API Key'
+    });
+    if (!electricityMapsKey) {
+        console.log((0, kleur_1.red)('API key required'));
+        process.exit(1);
+    }
+    // Step 7: Optional
+    console.log((0, kleur_1.gray)('\nStep 7: Optional Settings'));
+    console.log((0, kleur_1.gray)('─'.repeat(40)));
+    console.log((0, kleur_1.gray)('Set a carbon budget to track emissions against a limit.'));
+    console.log((0, kleur_1.gray)('Example: 10 grams CO2e per job. Leave empty to skip.\n'));
+    const { carbonBudget } = await (0, prompts_1.default)({
+        type: 'number',
+        name: 'carbonBudget',
+        message: 'Carbon budget (grams CO2e)',
+        initial: undefined
+    });
+    let failOnBudget = false;
+    if (carbonBudget) {
+        const { shouldFail } = await (0, prompts_1.default)({
+            type: 'confirm',
+            name: 'shouldFail',
+            message: 'Fail CI job if over budget?',
+            initial: false
+        });
+        failOnBudget = shouldFail;
+    }
+    // Step 8: Set Variables
+    console.log((0, kleur_1.gray)('\nStep 8: Setting CI/CD Variables'));
+    console.log((0, kleur_1.gray)('─'.repeat(40)));
+    const variables = [
+        { key: 'GCP_PROJECT_ID', value: gcpProjectId, masked: false },
+        { key: 'GCP_ZONE', value: gcpZone, masked: false },
+        { key: 'GCP_INSTANCE_ID', value: gcpInstanceId, masked: false },
+        { key: 'MACHINE_TYPE', value: machineType, masked: false },
+        { key: 'GCP_SA_KEY_BASE64', value: saKeyBase64, masked: true },
+        { key: 'ELECTRICITY_MAPS_API_KEY', value: electricityMapsKey, masked: true }
+    ];
+    if (carbonBudget) {
+        variables.push({ key: 'CARBON_BUDGET_GRAMS', value: String(carbonBudget), masked: false });
+    }
+    if (failOnBudget) {
+        variables.push({ key: 'FAIL_ON_BUDGET', value: 'true', masked: false });
+    }
+    for (const v of variables) {
+        const ok = await setVariable(auth, projectPath, v.key, v.value, v.masked);
+        if (ok) {
+            console.log((0, kleur_1.green)('  Set ' + v.key));
+        }
+        else {
+            console.log((0, kleur_1.red)('  Failed: ' + v.key));
+        }
+    }
+    // Step 9: Generate CI job
+    console.log((0, kleur_1.gray)('\nStep 9: CI Configuration'));
+    console.log((0, kleur_1.gray)('─'.repeat(40)));
+    // Only prompt for runner tag if not already set from provisioning
+    if (!runnerTag) {
+        const { inputRunnerTag } = await (0, prompts_1.default)({
+            type: 'text',
+            name: 'inputRunnerTag',
+            message: 'Runner tag (leave empty for any runner)',
+            initial: ''
+        });
+        runnerTag = inputRunnerTag || '';
+    }
+    else {
+        console.log((0, kleur_1.gray)(`Using runner tag: ${runnerTag}`));
+    }
+    const { addCiJob } = await (0, prompts_1.default)({
+        type: 'confirm',
+        name: 'addCiJob',
+        message: 'Add job to .gitlab-ci.yml?',
+        initial: true
+    });
+    const ciJob = generateCiJob(runnerTag || undefined);
+    if (addCiJob) {
+        const ciPath = path_1.default.join(process.cwd(), '.gitlab-ci.yml');
+        if (fs_1.default.existsSync(ciPath)) {
+            // Backup existing file before modifying
+            const backupPath = `/tmp/gitlab-ci-backup-${Date.now()}.yml`;
+            const existing = fs_1.default.readFileSync(ciPath, 'utf8');
+            fs_1.default.writeFileSync(backupPath, existing);
+            console.log((0, kleur_1.gray)(`Backup saved to: ${backupPath}`));
+            fs_1.default.writeFileSync(ciPath, existing + '\n' + ciJob);
+        }
+        else {
+            fs_1.default.writeFileSync(ciPath, 'stages:\n  - test\n\n' + ciJob);
+        }
+        console.log((0, kleur_1.green)('Updated .gitlab-ci.yml'));
+    }
+    else {
+        console.log('\nCI job snippet:\n');
+        console.log(ciJob);
+    }
+    console.log((0, kleur_1.bold)('\nDone'));
+    console.log('Commit and push to trigger the pipeline.\n');
+};
+exports.runInit = runInit;