@factiii/stack 0.1.185 → 0.1.186

package/dist/cli/init.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/cli/init.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAOH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAErD,wBAAsB,IAAI,CAAC,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAoDnE;AAED,eAAe,IAAI,CAAC"}
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/cli/init.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAOH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAErD,wBAAsB,IAAI,CAAC,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CA4DnE;AAED,eAAe,IAAI,CAAC"}

package/dist/cli/init.js

@@ -81,10 +81,18 @@ async function init(options = {}) {
             '# Generated by: npx stack init\n\n' +
             'dev_os: ' + devOS + '\n\n' +
             '# Dev-only mode (default: true)\n' +
-            '# Set to false to unlock staging/prod stages\n' +
+            '# When true, only --dev and --secrets stages are allowed.\n' +
+            '# Set to false to unlock staging/prod stages:\n' +
+            '#   npx stack scan --staging   (auto-unlocks on first run)\n' +
+            '#   or manually change to: dev_only: false\n' +
             'dev_only: true\n';
         fs.writeFileSync(localPath, content, 'utf8');
         console.log('  [OK] Created ' + config_files_js_1.STACK_LOCAL_FILENAME + ' (dev_os: ' + devOS + ', dev_only: true)');
+        console.log('');
+        console.log('  dev_only is enabled by default — only --dev and --secrets stages will run.');
+        console.log('  To unlock staging/prod, either:');
+        console.log('    - Run: npx stack scan --staging   (auto-unlocks)');
+        console.log('    - Edit ' + config_files_js_1.STACK_LOCAL_FILENAME + ' and set dev_only: false');
     }
     // Ensure gitignore entries for sensitive files
     (0, gitignore_js_1.ensureGitignored)(rootDir, config_files_js_1.STACK_LOCAL_FILENAME);

package/dist/cli/init.js.map

@@ -1 +1 @@
-{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/cli/init.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AASH,oBAoDC;AA3DD,uCAAyB;AACzB,kEAAkI;AAClI,+EAA4E;AAC5E,iFAA2E;AAC3E,wDAAyD;AAGlD,KAAK,UAAU,IAAI,CAAC,UAAuB,EAAE;IAClD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACjD,MAAM,UAAU,GAAG,IAAA,oCAAkB,EAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAE9C,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,uCAAqB,GAAG,OAAO,CAAC,CAAC;QAC/D,IAAA,6CAAqB,EAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,IAAA,4CAAmB,EAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;SAAM,IAAI,UAAU,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;QACtC,MAAM,OAAO,GAAG,IAAA,6CAAqB,EAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,IAAA,4CAAmB,EAAC,OAAO,CAAC,CAAC;YACnC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,uCAAqB,GAAG,uCAAuC,CAAC,CAAC;YACpF,OAAO,CAAC,GAAG,CAAC,2DAA2D,CAAC,CAAC;YACzE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,uCAAqB,GAAG,iBAAiB,CAAC,CAAC;QACjE,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;IACpD,CAAC;IAED,uDAAuD;IACvD,MAAM,SAAS,GAAG,IAAA,mCAAiB,EAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC1G,MAAM,OAAO,GACX,sEAAsE;YACtE,oCAAoC;YACpC,UAAU,GAAG,KAAK,GAAG,MAAM;YAC3B,mCAAmC;YACnC,gDAAgD;YAChD,kBAAkB,CAAC;QACrB,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,sCAAoB,GAAG,YAAY,GAAG,KAAK,GAAG,mBAAmB,CAAC,CAAC;IACrG,CAAC;IAED,+CAA+C;IAC/C,IAAA,+BAAgB,EAAC,OAAO,EAAE,sCAAoB,CAAC,CAAC;IAChD,IAAA,+BAAgB,EAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IAC1C,IAAA,+BAAgB,EAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAEvC,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;IAClE,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;IAClE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,uCAAqB,GAAG,mCAAmC,CAAC,CAAC;IACxF,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;IAC7E,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;IAC7D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,kBAAe,IAAI,CAAC"}
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/cli/init.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AASH,oBA4DC;AAnED,uCAAyB;AACzB,kEAAkI;AAClI,+EAA4E;AAC5E,iFAA2E;AAC3E,wDAAyD;AAGlD,KAAK,UAAU,IAAI,CAAC,UAAuB,EAAE;IAClD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACjD,MAAM,UAAU,GAAG,IAAA,oCAAkB,EAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAE9C,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,uCAAqB,GAAG,OAAO,CAAC,CAAC;QAC/D,IAAA,6CAAqB,EAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,IAAA,4CAAmB,EAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;SAAM,IAAI,UAAU,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;QACtC,MAAM,OAAO,GAAG,IAAA,6CAAqB,EAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,IAAA,4CAAmB,EAAC,OAAO,CAAC,CAAC;YACnC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,uCAAqB,GAAG,uCAAuC,CAAC,CAAC;YACpF,OAAO,CAAC,GAAG,CAAC,2DAA2D,CAAC,CAAC;YACzE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,uCAAqB,GAAG,iBAAiB,CAAC,CAAC;QACjE,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;IACpD,CAAC;IAED,uDAAuD;IACvD,MAAM,SAAS,GAAG,IAAA,mCAAiB,EAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC1G,MAAM,OAAO,GACX,sEAAsE;YACtE,oCAAoC;YACpC,UAAU,GAAG,KAAK,GAAG,MAAM;YAC3B,mCAAmC;YACnC,6DAA6D;YAC7D,iDAAiD;YACjD,8DAA8D;YAC9D,8CAA8C;YAC9C,kBAAkB,CAAC;QACrB,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,sCAAoB,GAAG,YAAY,GAAG,KAAK,GAAG,mBAAmB,CAAC,CAAC;QACnG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,8EAA8E,CAAC,CAAC;QAC5F,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;QACpE,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,sCAAoB,GAAG,0BAA0B,CAAC,CAAC;IACjF,CAAC;IAED,+CAA+C;IAC/C,IAAA,+BAAgB,EAAC,OAAO,EAAE,sCAAoB,CAAC,CAAC;IAChD,IAAA,+BAAgB,EAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IAC1C,IAAA,+BAAgB,EAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAEvC,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;IAClE,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;IAClE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,uCAAqB,GAAG,mCAAmC,CAAC,CAAC;IACxF,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;IAC7E,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;IAC7D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,kBAAe,IAAI,CAAC"}

package/dist/plugins/addons/auth/index.js

@@ -142,13 +142,13 @@ class AuthAddon {
         }
     }
     static helpText = {
-        JWT_SECRET: `
-   JWT signing secret for @factiii/auth.
-
-   This is auto-generated (256-bit random) when you run:
-     npx stack fix --secrets
-
-   The secret is stored in Ansible Vault and used to sign
+        JWT_SECRET: `
+   JWT signing secret for @factiii/auth.
+
+   This is auto-generated (256-bit random) when you run:
+     npx stack fix --secrets
+
+   The secret is stored in Ansible Vault and used to sign
    authentication tokens (JWT) for your application.`,
     };
     // ============================================================

package/dist/plugins/addons/vercel/index.js

@@ -128,15 +128,15 @@ class VercelAddon {
         return false;
     }
     static helpText = {
-        VERCEL_TOKEN: `
-   Vercel API Token for deployments.
-
-   Get from: https://vercel.com/account/tokens
-
-   Create a new token with:
-   - Scope: Full Account (or specific team)
-   - Expiration: No Expiration (or custom)
-
+        VERCEL_TOKEN: `
+   Vercel API Token for deployments.
+
+   Get from: https://vercel.com/account/tokens
+
+   Create a new token with:
+   - Scope: Full Account (or specific team)
+   - Expiration: No Expiration (or custom)
+
    The token will be stored securely in Ansible Vault.`,
     };
     // ============================================================

package/dist/plugins/addons/vercel/scanfix/config.js

@@ -259,13 +259,13 @@ exports.fixes = [
                 return false;
             }
         },
-        manualFix: `
-Add Vercel to stack.yml:
-
-  vercel: {}
-
-Then run: npx stack fix
-(Auto-creates project, detects framework, and saves IDs via Vercel API)
+        manualFix: `
+Add Vercel to stack.yml:
+
+  vercel: {}
+
+Then run: npx stack fix
+(Auto-creates project, detects framework, and saves IDs via Vercel API)
     `,
     },
     {
@@ -335,9 +335,9 @@ Then run: npx stack fix
                 return false;
             }
         },
-        manualFix: `
-Run: npx stack fix
-(Auto-creates .vercel/project.json from Vercel API — no CLI needed)
+        manualFix: `
+Run: npx stack fix
+(Auto-creates .vercel/project.json from Vercel API — no CLI needed)
     `,
     },
     {

package/dist/plugins/addons/vercel/scanfix/token.js

@@ -107,12 +107,12 @@ exports.fixes = [
                 return false;
             }
         },
-        manualFix: `
-Store VERCEL_TOKEN in Ansible Vault manually:
-
-  npx stack deploy --secrets set VERCEL_TOKEN
-
-Or get token from: https://vercel.com/account/tokens
+        manualFix: `
+Store VERCEL_TOKEN in Ansible Vault manually:
+
+  npx stack deploy --secrets set VERCEL_TOKEN
+
+Or get token from: https://vercel.com/account/tokens
     `,
     },
     {
@@ -128,15 +128,15 @@ Or get token from: https://vercel.com/account/tokens
             return !process.env.VERCEL_TOKEN;
         },
         fix: null,
-        manualFix: `
-VERCEL_TOKEN is not required in your environment during development.
-It will be automatically read from Ansible Vault during deployment.
-
-If you want to set it in your shell for testing:
-  export VERCEL_TOKEN="your-token-here"
-
-Or add to your shell profile (~/.bashrc, ~/.zshrc):
-  export VERCEL_TOKEN="$(npx stack deploy --secrets get VERCEL_TOKEN)"
+        manualFix: `
+VERCEL_TOKEN is not required in your environment during development.
+It will be automatically read from Ansible Vault during deployment.
+
+If you want to set it in your shell for testing:
+  export VERCEL_TOKEN="your-token-here"
+
+Or add to your shell profile (~/.bashrc, ~/.zshrc):
+  export VERCEL_TOKEN="$(npx stack deploy --secrets get VERCEL_TOKEN)"
     `,
     },
 ];

package/dist/plugins/approved.json

@@ -1,13 +1,13 @@
-{
-  "version": 1,
-  "description": "List of approved/validated external plugins for Factiii Stack",
-  "approved": [
-    "@factiii/stack-plugin-expo",
-    "@factiii/stack-plugin-prisma-trpc",
-    "@factiii/stack-plugin-nextjs"
-  ],
-  "lastUpdated": "2024-12-16"
-}
-
-
-
+{
+  "version": 1,
+  "description": "List of approved/validated external plugins for Factiii Stack",
+  "approved": [
+    "@factiii/stack-plugin-expo",
+    "@factiii/stack-plugin-prisma-trpc",
+    "@factiii/stack-plugin-nextjs"
+  ],
+  "lastUpdated": "2024-12-16"
+}
+
+
+

package/dist/plugins/pipelines/aws/index.js

@@ -166,17 +166,17 @@ class AWSPipeline {
         'free-tier': free_tier_js_1.default,
     };
     static helpText = {
-        SSH: `
-   SSH private key for accessing the EC2 instance.
-
-   Option A: Auto-generate via AWS (recommended)
-   - Factiii will create an EC2 Key Pair via AWS API
-
-   Option B: Use existing key
+        SSH: `
+   SSH private key for accessing the EC2 instance.
+
+   Option A: Auto-generate via AWS (recommended)
+   - Factiii will create an EC2 Key Pair via AWS API
+
+   Option B: Use existing key
    ssh-keygen -t ed25519 -C "deploy-key" -f ~/.ssh/deploy_key`,
-        AWS_SECRET_ACCESS_KEY: `
-   AWS Secret Access Key
-
+        AWS_SECRET_ACCESS_KEY: `
+   AWS Secret Access Key
+
    Get from AWS Console: IAM -> Users -> Security credentials`,
     };
     // ============================================================
@@ -498,8 +498,8 @@ class AWSPipeline {
             }
             try {
                 const repoName = config.name ?? 'app';
-                await AWSPipeline.sshExec(envConfig, `
-          cd ~/.factiii && docker compose stop ${repoName}-prod
+                await AWSPipeline.sshExec(envConfig, `
+          cd ~/.factiii && docker compose stop ${repoName}-prod
         `);
                 return { success: true, message: 'Production containers stopped' };
             }

package/dist/plugins/pipelines/aws/policies/bootstrap-policy.json

@@ -1,135 +1,135 @@
-{
-  "Version": "2012-10-17",
-  "Statement": [
-    {
-      "Sid": "FactiiiEC2Full",
-      "Effect": "Allow",
-      "Action": [
-        "ec2:CreateVpc",
-        "ec2:DeleteVpc",
-        "ec2:DescribeVpcs",
-        "ec2:ModifyVpcAttribute",
-        "ec2:CreateSubnet",
-        "ec2:DeleteSubnet",
-        "ec2:DescribeSubnets",
-        "ec2:ModifySubnetAttribute",
-        "ec2:CreateInternetGateway",
-        "ec2:DeleteInternetGateway",
-        "ec2:AttachInternetGateway",
-        "ec2:DetachInternetGateway",
-        "ec2:DescribeInternetGateways",
-        "ec2:CreateRouteTable",
-        "ec2:DeleteRouteTable",
-        "ec2:CreateRoute",
-        "ec2:AssociateRouteTable",
-        "ec2:DescribeRouteTables",
-        "ec2:CreateSecurityGroup",
-        "ec2:DeleteSecurityGroup",
-        "ec2:AuthorizeSecurityGroupIngress",
-        "ec2:RevokeSecurityGroupIngress",
-        "ec2:DescribeSecurityGroups",
-        "ec2:CreateKeyPair",
-        "ec2:DeleteKeyPair",
-        "ec2:DescribeKeyPairs",
-        "ec2:RunInstances",
-        "ec2:TerminateInstances",
-        "ec2:DescribeInstances",
-        "ec2:AllocateAddress",
-        "ec2:ReleaseAddress",
-        "ec2:AssociateAddress",
-        "ec2:DescribeAddresses",
-        "ec2:DescribeAvailabilityZones",
-        "ec2:DescribeImages",
-        "ec2:CreateTags"
-      ],
-      "Resource": "*"
-    },
-    {
-      "Sid": "FactiiiRDSFull",
-      "Effect": "Allow",
-      "Action": [
-        "rds:CreateDBInstance",
-        "rds:DeleteDBInstance",
-        "rds:DescribeDBInstances",
-        "rds:CreateDBSubnetGroup",
-        "rds:DeleteDBSubnetGroup",
-        "rds:DescribeDBSubnetGroups",
-        "rds:AddTagsToResource",
-        "rds:ListTagsForResource"
-      ],
-      "Resource": "*"
-    },
-    {
-      "Sid": "FactiiiS3Full",
-      "Effect": "Allow",
-      "Action": [
-        "s3:CreateBucket",
-        "s3:DeleteBucket",
-        "s3:ListBucket",
-        "s3:PutBucketEncryption",
-        "s3:PutBucketPublicAccessBlock",
-        "s3:PutBucketCORS",
-        "s3:GetBucketEncryption",
-        "s3:GetBucketPublicAccessBlock",
-        "s3:GetBucketCORS",
-        "s3:PutObject",
-        "s3:GetObject",
-        "s3:ListAllMyBuckets"
-      ],
-      "Resource": "*"
-    },
-    {
-      "Sid": "FactiiiECRFull",
-      "Effect": "Allow",
-      "Action": [
-        "ecr:CreateRepository",
-        "ecr:DeleteRepository",
-        "ecr:DescribeRepositories",
-        "ecr:GetAuthorizationToken",
-        "ecr:PutLifecyclePolicy",
-        "ecr:BatchGetImage",
-        "ecr:BatchCheckLayerAvailability",
-        "ecr:PutImage",
-        "ecr:InitiateLayerUpload",
-        "ecr:UploadLayerPart",
-        "ecr:CompleteLayerUpload"
-      ],
-      "Resource": "*"
-    },
-    {
-      "Sid": "FactiiiSES",
-      "Effect": "Allow",
-      "Action": [
-        "ses:VerifyDomainIdentity",
-        "ses:VerifyDomainDkim",
-        "ses:GetAccountSendingEnabled",
-        "ses:GetIdentityVerificationAttributes",
-        "ses:GetIdentityDkimAttributes"
-      ],
-      "Resource": "*"
-    },
-    {
-      "Sid": "FactiiiIAMLimited",
-      "Effect": "Allow",
-      "Action": [
-        "iam:CreateUser",
-        "iam:DeleteUser",
-        "iam:GetUser",
-        "iam:PutUserPolicy",
-        "iam:DeleteUserPolicy",
-        "iam:CreateAccessKey",
-        "iam:ListAccessKeys",
-        "iam:ListUsers"
-      ],
-      "Resource": "*"
-    },
-    {
-      "Sid": "FactiiiSTS",
-      "Effect": "Allow",
-      "Action": [
-        "sts:GetCallerIdentity"
-      ],
-      "Resource": "*"
-    }
-  ]
-}
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Sid": "FactiiiEC2Full",
+      "Effect": "Allow",
+      "Action": [
+        "ec2:CreateVpc",
+        "ec2:DeleteVpc",
+        "ec2:DescribeVpcs",
+        "ec2:ModifyVpcAttribute",
+        "ec2:CreateSubnet",
+        "ec2:DeleteSubnet",
+        "ec2:DescribeSubnets",
+        "ec2:ModifySubnetAttribute",
+        "ec2:CreateInternetGateway",
+        "ec2:DeleteInternetGateway",
+        "ec2:AttachInternetGateway",
+        "ec2:DetachInternetGateway",
+        "ec2:DescribeInternetGateways",
+        "ec2:CreateRouteTable",
+        "ec2:DeleteRouteTable",
+        "ec2:CreateRoute",
+        "ec2:AssociateRouteTable",
+        "ec2:DescribeRouteTables",
+        "ec2:CreateSecurityGroup",
+        "ec2:DeleteSecurityGroup",
+        "ec2:AuthorizeSecurityGroupIngress",
+        "ec2:RevokeSecurityGroupIngress",
+        "ec2:DescribeSecurityGroups",
+        "ec2:CreateKeyPair",
+        "ec2:DeleteKeyPair",
+        "ec2:DescribeKeyPairs",
+        "ec2:RunInstances",
+        "ec2:TerminateInstances",
+        "ec2:DescribeInstances",
+        "ec2:AllocateAddress",
+        "ec2:ReleaseAddress",
+        "ec2:AssociateAddress",
+        "ec2:DescribeAddresses",
+        "ec2:DescribeAvailabilityZones",
+        "ec2:DescribeImages",
+        "ec2:CreateTags"
+      ],
+      "Resource": "*"
+    },
+    {
+      "Sid": "FactiiiRDSFull",
+      "Effect": "Allow",
+      "Action": [
+        "rds:CreateDBInstance",
+        "rds:DeleteDBInstance",
+        "rds:DescribeDBInstances",
+        "rds:CreateDBSubnetGroup",
+        "rds:DeleteDBSubnetGroup",
+        "rds:DescribeDBSubnetGroups",
+        "rds:AddTagsToResource",
+        "rds:ListTagsForResource"
+      ],
+      "Resource": "*"
+    },
+    {
+      "Sid": "FactiiiS3Full",
+      "Effect": "Allow",
+      "Action": [
+        "s3:CreateBucket",
+        "s3:DeleteBucket",
+        "s3:ListBucket",
+        "s3:PutBucketEncryption",
+        "s3:PutBucketPublicAccessBlock",
+        "s3:PutBucketCORS",
+        "s3:GetBucketEncryption",
+        "s3:GetBucketPublicAccessBlock",
+        "s3:GetBucketCORS",
+        "s3:PutObject",
+        "s3:GetObject",
+        "s3:ListAllMyBuckets"
+      ],
+      "Resource": "*"
+    },
+    {
+      "Sid": "FactiiiECRFull",
+      "Effect": "Allow",
+      "Action": [
+        "ecr:CreateRepository",
+        "ecr:DeleteRepository",
+        "ecr:DescribeRepositories",
+        "ecr:GetAuthorizationToken",
+        "ecr:PutLifecyclePolicy",
+        "ecr:BatchGetImage",
+        "ecr:BatchCheckLayerAvailability",
+        "ecr:PutImage",
+        "ecr:InitiateLayerUpload",
+        "ecr:UploadLayerPart",
+        "ecr:CompleteLayerUpload"
+      ],
+      "Resource": "*"
+    },
+    {
+      "Sid": "FactiiiSES",
+      "Effect": "Allow",
+      "Action": [
+        "ses:VerifyDomainIdentity",
+        "ses:VerifyDomainDkim",
+        "ses:GetAccountSendingEnabled",
+        "ses:GetIdentityVerificationAttributes",
+        "ses:GetIdentityDkimAttributes"
+      ],
+      "Resource": "*"
+    },
+    {
+      "Sid": "FactiiiIAMLimited",
+      "Effect": "Allow",
+      "Action": [
+        "iam:CreateUser",
+        "iam:DeleteUser",
+        "iam:GetUser",
+        "iam:PutUserPolicy",
+        "iam:DeleteUserPolicy",
+        "iam:CreateAccessKey",
+        "iam:ListAccessKeys",
+        "iam:ListUsers"
+      ],
+      "Resource": "*"
+    },
+    {
+      "Sid": "FactiiiSTS",
+      "Effect": "Allow",
+      "Action": [
+        "sts:GetCallerIdentity"
+      ],
+      "Resource": "*"
+    }
+  ]
+}

package/dist/plugins/pipelines/aws/prod.js

@@ -154,7 +154,7 @@ async function writeEnvFile(envConfig, repoDir, environment, envVarsString) {
     else {
         // We're remote - SSH to write
         console.log(`   📝 Writing ${envFileName} on remote server (${envVars.length} variables)...`);
-        await sshExecCommand(envConfig, `cat > ${repoDir}/${envFileName} << 'ENVEOF'
+        await sshExecCommand(envConfig, `cat > ${repoDir}/${envFileName} << 'ENVEOF'
 ${envFileContent}ENVEOF`);
     }
 }

package/dist/plugins/pipelines/factiii/prod.js

@@ -105,27 +105,27 @@ async function ensureDockerRunning(envConfig, isOnServer) {
     const checkCmd = 'export PATH="/opt/homebrew/bin:/usr/local/bin:$PATH" && docker info > /dev/null 2>&1 && echo "running" || echo "stopped"';
     // Start Docker and wait up to 60 seconds for it to be ready
     // Use headless binary start over SSH since `open -a Docker` requires a GUI session
-    const startCmd = `
-    export PATH="/opt/homebrew/bin:/usr/local/bin:$PATH" && \
-    if ! docker info > /dev/null 2>&1; then
-      echo "Starting Docker Desktop..." && \
-      if [ -n "$SSH_CONNECTION" ] || [ -n "$SSH_CLIENT" ] || [ -n "$SSH_TTY" ]; then
-        nohup /Applications/Docker.app/Contents/MacOS/Docker --unattended > /dev/null 2>&1 &
-      else
-        open -a Docker
-      fi && \
-      for i in {1..60}; do
-        sleep 1
-        if docker info > /dev/null 2>&1; then
-          echo "Docker is ready"
-          exit 0
-        fi
-      done
-      echo "Docker failed to start within 60 seconds"
-      exit 1
-    else
-      echo "Docker is already running"
-    fi
+    const startCmd = `
+    export PATH="/opt/homebrew/bin:/usr/local/bin:$PATH" && \
+    if ! docker info > /dev/null 2>&1; then
+      echo "Starting Docker Desktop..." && \
+      if [ -n "$SSH_CONNECTION" ] || [ -n "$SSH_CLIENT" ] || [ -n "$SSH_TTY" ]; then
+        nohup /Applications/Docker.app/Contents/MacOS/Docker --unattended > /dev/null 2>&1 &
+      else
+        open -a Docker
+      fi && \
+      for i in {1..60}; do
+        sleep 1
+        if docker info > /dev/null 2>&1; then
+          echo "Docker is ready"
+          exit 0
+        fi
+      done
+      echo "Docker failed to start within 60 seconds"
+      exit 1
+    else
+      echo "Docker is already running"
+    fi
   `;
     if (isOnServer) {
         // We're on the server - run commands directly

package/dist/plugins/pipelines/factiii/scanfix/bootstrap.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bootstrap.d.ts","sourceRoot":"","sources":["../../../../../src/plugins/pipelines/factiii/scanfix/bootstrap.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,OAAO,KAAK,EAAE,GAAG,EAAiB,MAAM,4BAA4B,CAAC;AAWrE,eAAO,MAAM,cAAc,EAAE,GAAG,EAoH/B,CAAC"}
+{"version":3,"file":"bootstrap.d.ts","sourceRoot":"","sources":["../../../../../src/plugins/pipelines/factiii/scanfix/bootstrap.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,OAAO,KAAK,EAAE,GAAG,EAAiB,MAAM,4BAA4B,CAAC;AAWrE,eAAO,MAAM,cAAc,EAAE,GAAG,EA4H/B,CAAC"}

package/dist/plugins/pipelines/factiii/scanfix/bootstrap.js

@@ -104,13 +104,21 @@ exports.bootstrapFixes = [
                 'dev_os: ' + devOS + '\n' +
                 '\n' +
                 '# Dev-only mode (default: true)\n' +
-                '# Set to false to unlock staging/prod stages\n' +
+                '# When true, only --dev and --secrets stages are allowed.\n' +
+                '# Set to false to unlock staging/prod stages:\n' +
+                '#   npx stack scan --staging   (auto-unlocks on first run)\n' +
+                '#   or manually change to: dev_only: false\n' +
                 'dev_only: true\n';
             fs.writeFileSync(localPath, content, 'utf8');
             // Also ensure gitignored
             (0, gitignore_js_1.ensureGitignored)(rootDir, config_files_js_1.STACK_LOCAL_FILENAME);
             (0, gitignore_js_1.ensureGitignored)(rootDir, 'factiii.local.yml');
-            console.log('  [OK] Created ' + config_files_js_1.STACK_LOCAL_FILENAME + ' (dev_os: ' + devOS + ')');
+            console.log('  [OK] Created ' + config_files_js_1.STACK_LOCAL_FILENAME + ' (dev_os: ' + devOS + ', dev_only: true)');
+            console.log('');
+            console.log('  dev_only is enabled by default — only --dev and --secrets stages will run.');
+            console.log('  To unlock staging/prod, either:');
+            console.log('    - Run: npx stack scan --staging   (auto-unlocks)');
+            console.log('    - Edit ' + config_files_js_1.STACK_LOCAL_FILENAME + ' and set dev_only: false');
             return true;
         },
         manualFix: 'Create ' + config_files_js_1.STACK_LOCAL_FILENAME + ' with: dev_os: mac|windows|ubuntu',

package/dist/plugins/pipelines/factiii/scanfix/bootstrap.js.map

@@ -1 +1 @@
-{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../../../../../src/plugins/pipelines/factiii/scanfix/bootstrap.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,uCAAyB;AAEzB,2EAAkL;AAClL,iEAAgF;AAGhF;;GAEG;AACH,SAAS,WAAW;IAClB,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAChD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IACnD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAEY,QAAA,cAAc,GAAU;IACnC,kEAAkE;IAClE;QACE,EAAE,EAAE,mBAAmB;QACvB,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,KAAK,GAAG,uCAAqB,GAAG,YAAY;QACzD,IAAI,EAAE,KAAK,EAAE,OAAsB,EAAE,OAAe,EAAoB,EAAE;YACxE,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,IAAA,oCAAkB,EAAC,OAAO,CAAC,CAAC,CAAC;QACrD,CAAC;QACD,GAAG,EAAE,KAAK,EAAE,OAAsB,EAAE,OAAe,EAAoB,EAAE;YACvE,kDAAkD;YAClD,MAAM,EAAE,qBAAqB,EAAE,GAAG,wDAAa,8CAA8C,GAAC,CAAC;YAC/F,OAAO,qBAAqB,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QACD,SAAS,EAAE,oBAAoB;KAChC;IAED;QACE,EAAE,EAAE,wBAAwB;QAC5B,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,KAAK,GAAG,qCAAmB,GAAG,YAAY;QACvD,IAAI,EAAE,KAAK,EAAE,OAAsB,EAAE,OAAe,EAAoB,EAAE;YACxE,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,IAAA,kCAAgB,EAAC,OAAO,CAAC,CAAC,CAAC;QACnD,CAAC;QACD,GAAG,EAAE,KAAK,EAAE,OAAsB,EAAE,OAAe,EAAoB,EAAE;YACvE,MAAM,EAAE,mBAAmB,EAAE,GAAG,wDAAa,+CAA+C,GAAC,CAAC;YAC9F,MAAM,mBAAmB,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACpD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,SAAS,EAAE,oBAAoB;KAChC;IAED;QACE,EAAE,EAAE,yBAAyB;QAC7B,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,SAAS;QACnB,WAAW,EAAE,KAAK,GAAG,sCAAoB,GAAG,oCAAoC;QAChF,IAAI,EAAE,KAAK,EAAE,OAAsB,EAAE,OAAe,EAAoB,EAAE;YACxE,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,IAAA,mCAAiB,EAAC,OAAO,CAAC,CAAC,CAAC;QACpD,CAAC;QACD,GAAG,EAAE,KAAK,EAAE,OAAsB,EAAE,OAAe,EAAoB,EAAE;YACvE,MAAM,SAAS,GAAG,IAAA,mCAAiB,EAAC,OAAO,CAAC,CAAC;YAC7C,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC;YAC5B,MAAM,OAAO,GACX,sEAAsE;gBACtE,6BAA6B;gBAC7B,IAAI;gBACJ,UAAU,GAAG,KAAK,GAAG,IAAI;gBACzB,IAAI;gBACJ,mCAAmC;gBACnC,gDAAgD;gBAChD,kBAAkB,CAAC;YACrB,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YAC7C,yBAAyB;YACzB,IAAA,+BAAgB,EAAC,OAAO,EAAE,sCAAoB,CAAC,CAAC;YAChD,IAAA,+BAAgB,EAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,sCAAoB,GAAG,YAAY,GAAG,KAAK,GAAG,GAAG,CAAC,CAAC;YACnF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,SAAS,EAAE,SAAS,GAAG,sCAAoB,GAAG,mCAAmC;KAClF;IAED,iEAAiE;IACjE;QACE,EAAE,EAAE,wBAAwB;QAC5B,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,KAAK,GAAG,sCAAoB,GAAG,oBAAoB;QAChE,IAAI,EAAE,KAAK,EAAE,OAAsB,EAAE,OAAe,EAAoB,EAAE;YACxE,oFAAoF;YACpF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAA,mCAAiB,EAAC,OAAO,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC7D,OAAO,CAAC,IAAA,2BAAY,EAAC,OAAO,EAAE,sCAAoB,CAAC,CAAC;QACtD,CAAC;QACD,GAAG,EAAE,KAAK,EAAE,OAAsB,EAAE,OAAe,EAAoB,EAAE;YACvE,IAAA,+BAAgB,EAAC,OAAO,EAAE,sCAAoB,CAAC,CAAC;YAChD,IAAA,+BAAgB,EAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;YAC/C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,SAAS,EAAE,MAAM,GAAG,sCAAoB,GAAG,gBAAgB;KAC5D;IAED;QACE,EAAE,EAAE,uBAAuB;QAC3B,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,mCAAmC;QAChD,IAAI,EAAE,KAAK,EAAE,OAAsB,EAAE,OAAe,EAAoB,EAAE;YACxE,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;YAC9D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC1C,OAAO,CAAC,IAAA,2BAAY,EAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QAChD,CAAC;QACD,GAAG,EAAE,KAAK,EAAE,OAAsB,EAAE,OAAe,EAAoB,EAAE;YACvE,IAAA,+BAAgB,EAAC,OAAO,EAAE,cAAc,CAAC,CAAC;YAC1C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,SAAS,EAAE,gCAAgC;KAC5C;IAED;QACE,EAAE,EAAE,oBAAoB;QACxB,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,gCAAgC;QAC7C,IAAI,EAAE,KAAK,EAAE,OAAsB,EAAE,OAAe,EAAoB,EAAE;YACxE,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YAC3D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC1C,OAAO,CAAC,IAAA,2BAAY,EAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAC7C,CAAC;QACD,GAAG,EAAE,KAAK,EAAE,OAAsB,EAAE,OAAe,EAAoB,EAAE;YACvE,IAAA,+BAAgB,EAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YACvC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,SAAS,EAAE,6BAA6B;KACzC;CACF,CAAC"}
+{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../../../../../src/plugins/pipelines/factiii/scanfix/bootstrap.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,uCAAyB;AAEzB,2EAAkL;AAClL,iEAAgF;AAGhF;;GAEG;AACH,SAAS,WAAW;IAClB,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAChD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IACnD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAEY,QAAA,cAAc,GAAU;IACnC,kEAAkE;IAClE;QACE,EAAE,EAAE,mBAAmB;QACvB,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,KAAK,GAAG,uCAAqB,GAAG,YAAY;QACzD,IAAI,EAAE,KAAK,EAAE,OAAsB,EAAE,OAAe,EAAoB,EAAE;YACxE,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,IAAA,oCAAkB,EAAC,OAAO,CAAC,CAAC,CAAC;QACrD,CAAC;QACD,GAAG,EAAE,KAAK,EAAE,OAAsB,EAAE,OAAe,EAAoB,EAAE;YACvE,kDAAkD;YAClD,MAAM,EAAE,qBAAqB,EAAE,GAAG,wDAAa,8CAA8C,GAAC,CAAC;YAC/F,OAAO,qBAAqB,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QACD,SAAS,EAAE,oBAAoB;KAChC;IAED;QACE,EAAE,EAAE,wBAAwB;QAC5B,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,KAAK,GAAG,qCAAmB,GAAG,YAAY;QACvD,IAAI,EAAE,KAAK,EAAE,OAAsB,EAAE,OAAe,EAAoB,EAAE;YACxE,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,IAAA,kCAAgB,EAAC,OAAO,CAAC,CAAC,CAAC;QACnD,CAAC;QACD,GAAG,EAAE,KAAK,EAAE,OAAsB,EAAE,OAAe,EAAoB,EAAE;YACvE,MAAM,EAAE,mBAAmB,EAAE,GAAG,wDAAa,+CAA+C,GAAC,CAAC;YAC9F,MAAM,mBAAmB,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACpD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,SAAS,EAAE,oBAAoB;KAChC;IAED;QACE,EAAE,EAAE,yBAAyB;QAC7B,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,SAAS;QACnB,WAAW,EAAE,KAAK,GAAG,sCAAoB,GAAG,oCAAoC;QAChF,IAAI,EAAE,KAAK,EAAE,OAAsB,EAAE,OAAe,EAAoB,EAAE;YACxE,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,IAAA,mCAAiB,EAAC,OAAO,CAAC,CAAC,CAAC;QACpD,CAAC;QACD,GAAG,EAAE,KAAK,EAAE,OAAsB,EAAE,OAAe,EAAoB,EAAE;YACvE,MAAM,SAAS,GAAG,IAAA,mCAAiB,EAAC,OAAO,CAAC,CAAC;YAC7C,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC;YAC5B,MAAM,OAAO,GACX,sEAAsE;gBACtE,6BAA6B;gBAC7B,IAAI;gBACJ,UAAU,GAAG,KAAK,GAAG,IAAI;gBACzB,IAAI;gBACJ,mCAAmC;gBACnC,6DAA6D;gBAC7D,iDAAiD;gBACjD,8DAA8D;gBAC9D,8CAA8C;gBAC9C,kBAAkB,CAAC;YACrB,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YAC7C,yBAAyB;YACzB,IAAA,+BAAgB,EAAC,OAAO,EAAE,sCAAoB,CAAC,CAAC;YAChD,IAAA,+BAAgB,EAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,sCAAoB,GAAG,YAAY,GAAG,KAAK,GAAG,mBAAmB,CAAC,CAAC;YACnG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,8EAA8E,CAAC,CAAC;YAC5F,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;YACjD,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;YACpE,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,sCAAoB,GAAG,0BAA0B,CAAC,CAAC;YAC/E,OAAO,IAAI,CAAC;QACd,CAAC;QACD,SAAS,EAAE,SAAS,GAAG,sCAAoB,GAAG,mCAAmC;KAClF;IAED,iEAAiE;IACjE;QACE,EAAE,EAAE,wBAAwB;QAC5B,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,KAAK,GAAG,sCAAoB,GAAG,oBAAoB;QAChE,IAAI,EAAE,KAAK,EAAE,OAAsB,EAAE,OAAe,EAAoB,EAAE;YACxE,oFAAoF;YACpF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAA,mCAAiB,EAAC,OAAO,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC7D,OAAO,CAAC,IAAA,2BAAY,EAAC,OAAO,EAAE,sCAAoB,CAAC,CAAC;QACtD,CAAC;QACD,GAAG,EAAE,KAAK,EAAE,OAAsB,EAAE,OAAe,EAAoB,EAAE;YACvE,IAAA,+BAAgB,EAAC,OAAO,EAAE,sCAAoB,CAAC,CAAC;YAChD,IAAA,+BAAgB,EAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;YAC/C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,SAAS,EAAE,MAAM,GAAG,sCAAoB,GAAG,gBAAgB;KAC5D;IAED;QACE,EAAE,EAAE,uBAAuB;QAC3B,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,mCAAmC;QAChD,IAAI,EAAE,KAAK,EAAE,OAAsB,EAAE,OAAe,EAAoB,EAAE;YACxE,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;YAC9D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC1C,OAAO,CAAC,IAAA,2BAAY,EAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QAChD,CAAC;QACD,GAAG,EAAE,KAAK,EAAE,OAAsB,EAAE,OAAe,EAAoB,EAAE;YACvE,IAAA,+BAAgB,EAAC,OAAO,EAAE,cAAc,CAAC,CAAC;YAC1C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,SAAS,EAAE,gCAAgC;KAC5C;IAED;QACE,EAAE,EAAE,oBAAoB;QACxB,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,gCAAgC;QAC7C,IAAI,EAAE,KAAK,EAAE,OAAsB,EAAE,OAAe,EAAoB,EAAE;YACxE,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YAC3D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC1C,OAAO,CAAC,IAAA,2BAAY,EAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAC7C,CAAC;QACD,GAAG,EAAE,KAAK,EAAE,OAAsB,EAAE,OAAe,EAAoB,EAAE;YACvE,IAAA,+BAAgB,EAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YACvC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,SAAS,EAAE,6BAA6B;KACzC;CACF,CAAC"}