@factiii/stack 0.1.2 → 0.1.8

package/dist/plugins/pipelines/factiii/pr-check.js

@@ -0,0 +1,202 @@
+"use strict";
+/**
+ * PR Check - Build validation for pull requests
+ *
+ * Runs server (Docker), client (pnpm build), and mobile (EAS) builds.
+ * Used when PR opens to main - validates code builds before merge.
+ *
+ * Per STANDARDS: Build logic lives here, not in workflows.
+ * Workflow SSHs to staging and runs: GITHUB_ACTIONS=true npx factiii pr-check --staging
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runBuilds = runBuilds;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const child_process_1 = require("child_process");
+const staging_js_1 = require("./staging.js");
+/**
+ * Run all builds (server, client, mobile) on the current machine.
+ * Call this when GITHUB_ACTIONS=true or FACTIII_ON_SERVER=true (running on staging server).
+ *
+ * @param rootDir - Repo root (e.g. ~/.factiii/repo-name on server)
+ * @param config - factiii.yml config
+ * @param options - commit, branch for git checkout
+ */
+async function runBuilds(rootDir, config, options = {}) {
+    const results = [];
+    const sha = options.commit ?? process.env.COMMIT_HASH ?? '';
+    const branch = options.branch ?? process.env.BRANCH ?? '';
+    // Ensure we're on the right commit (when running on server from workflow)
+    if (sha && branch) {
+        try {
+            (0, child_process_1.execSync)(`git fetch origin ${branch} 2>/dev/null || git fetch origin`, {
+                cwd: rootDir,
+                stdio: 'pipe',
+            });
+            (0, child_process_1.execSync)(`git checkout ${sha}`, {
+                cwd: rootDir,
+                stdio: 'pipe',
+            });
+        }
+        catch (e) {
+            console.log('   ⚠️  Could not checkout commit ' + sha + ' - using current state');
+        }
+    }
+    const pathPrefix = process.platform === 'win32' ? '' : '/opt/homebrew/bin:/usr/local/bin:';
+    const pathEnv = pathPrefix + (process.env.PATH ?? '');
+    // 1. Server build (Docker)
+    const serverResult = await runServerBuild(rootDir, config, pathEnv);
+    results.push(serverResult);
+    // 2. Client build (if client/ exists)
+    const clientResult = await runClientBuild(rootDir, pathEnv);
+    if (clientResult)
+        results.push(clientResult);
+    // 3. Mobile build (if docs/mobile or apps/mobile exists)
+    const mobileResult = await runMobileBuild(rootDir, pathEnv);
+    if (mobileResult)
+        results.push(mobileResult);
+    const success = results.every((r) => r.success);
+    return {
+        success,
+        results,
+        sha,
+        prNumber: null,
+    };
+}
+async function runServerBuild(rootDir, config, pathEnv) {
+    const start = Date.now();
+    const dockerfile = (0, staging_js_1.getDockerfilePath)(rootDir);
+    const repoName = config.name ?? 'app';
+    const imageTag = `${repoName}:staging`;
+    try {
+        (0, child_process_1.execSync)(`cd ${rootDir} && docker build --platform linux/arm64 -t ${imageTag} -f ${dockerfile} .`, {
+            stdio: 'pipe',
+            shell: '/bin/bash',
+            env: { ...process.env, PATH: pathEnv },
+        });
+        return {
+            name: 'server',
+            success: true,
+            output: 'Docker build succeeded',
+            duration: Date.now() - start,
+        };
+    }
+    catch (e) {
+        const err = e;
+        const output = (err?.stderr?.toString() || err?.stdout?.toString() || err?.message || String(e)).trim().slice(0, 2000);
+        return {
+            name: 'server',
+            success: false,
+            output: output || 'Build failed',
+            duration: Date.now() - start,
+        };
+    }
+}
+async function runClientBuild(rootDir, pathEnv) {
+    const clientDir = path.join(rootDir, 'client');
+    if (!fs.existsSync(clientDir))
+        return null;
+    const pkgPath = path.join(clientDir, 'package.json');
+    if (!fs.existsSync(pkgPath))
+        return null;
+    const start = Date.now();
+    try {
+        (0, child_process_1.execSync)('pnpm install && pnpm build', {
+            cwd: clientDir,
+            stdio: 'pipe',
+            env: { ...process.env, PATH: pathEnv },
+        });
+        return {
+            name: 'client',
+            success: true,
+            output: 'pnpm build succeeded',
+            duration: Date.now() - start,
+        };
+    }
+    catch (e) {
+        const err = e;
+        const output = (err?.stderr?.toString() || err?.stdout?.toString() || err?.message || String(e)).trim().slice(0, 2000);
+        return {
+            name: 'client',
+            success: false,
+            output: output || 'Build failed',
+            duration: Date.now() - start,
+        };
+    }
+}
+async function runMobileBuild(rootDir, pathEnv) {
+    const mobileReadmePaths = [
+        path.join(rootDir, 'docs', 'mobile', 'README.md'),
+        path.join(rootDir, 'apps', 'mobile', 'README.md'),
+        path.join(rootDir, 'packages', 'mobile', 'README.md'),
+    ];
+    let mobileDir = null;
+    for (const readmePath of mobileReadmePaths) {
+        if (fs.existsSync(readmePath)) {
+            mobileDir = path.dirname(readmePath);
+            break;
+        }
+    }
+    if (!mobileDir)
+        return null;
+    const start = Date.now();
+    try {
+        // EAS build - common command; app repos can override via factiii.yml later
+        (0, child_process_1.execSync)('npx eas build --platform all --non-interactive 2>&1 || npx eas build --platform all 2>&1', {
+            cwd: mobileDir,
+            stdio: 'pipe',
+            env: { ...process.env, PATH: pathEnv },
+            timeout: 600000, // 10 min for EAS
+        });
+        return {
+            name: 'mobile',
+            success: true,
+            output: 'EAS build succeeded',
+            duration: Date.now() - start,
+        };
+    }
+    catch (e) {
+        const err = e;
+        const output = (err?.stderr?.toString() || err?.stdout?.toString() || err?.message || String(e)).trim().slice(0, 2000);
+        return {
+            name: 'mobile',
+            success: false,
+            output: output || 'Build failed',
+            duration: Date.now() - start,
+        };
+    }
+}
+//# sourceMappingURL=pr-check.js.map

package/dist/plugins/pipelines/factiii/pr-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pr-check.js","sourceRoot":"","sources":["../../../../src/plugins/pipelines/factiii/pr-check.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+BH,8BAgDC;AA7ED,uCAAyB;AACzB,2CAA6B;AAC7B,iDAAyC;AAEzC,6CAAiD;AAiBjD;;;;;;;GAOG;AACI,KAAK,UAAU,SAAS,CAC7B,OAAe,EACf,MAAqB,EACrB,UAAgD,EAAE;IAElD,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;IAC5D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;IAE1D,0EAA0E;IAC1E,IAAI,GAAG,IAAI,MAAM,EAAE,CAAC;QAClB,IAAI,CAAC;YACH,IAAA,wBAAQ,EAAC,oBAAoB,MAAM,kCAAkC,EAAE;gBACrE,GAAG,EAAE,OAAO;gBACZ,KAAK,EAAE,MAAM;aACd,CAAC,CAAC;YACH,IAAA,wBAAQ,EAAC,gBAAgB,GAAG,EAAE,EAAE;gBAC9B,GAAG,EAAE,OAAO;gBACZ,KAAK,EAAE,MAAM;aACd,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,GAAG,CAAC,mCAAmC,GAAG,GAAG,GAAG,wBAAwB,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,mCAAmC,CAAC;IAC3F,MAAM,OAAO,GAAG,UAAU,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAEtD,2BAA2B;IAC3B,MAAM,YAAY,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IACpE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAE3B,sCAAsC;IACtC,MAAM,YAAY,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5D,IAAI,YAAY;QAAE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAE7C,yDAAyD;IACzD,MAAM,YAAY,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5D,IAAI,YAAY;QAAE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAE7C,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAEhD,OAAO;QACL,OAAO;QACP,OAAO;QACP,GAAG;QACH,QAAQ,EAAE,IAAI;KACf,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,OAAe,EACf,MAAqB,EACrB,OAAe;IAEf,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,UAAU,GAAG,IAAA,8BAAiB,EAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,IAAI,KAAK,CAAC;IACtC,MAAM,QAAQ,GAAG,GAAG,QAAQ,UAAU,CAAC;IAEvC,IAAI,CAAC;QACH,IAAA,wBAAQ,EACN,MAAM,OAAO,8CAA8C,QAAQ,OAAO,UAAU,IAAI,EACxF;YACE,KAAK,EAAE,MAAM;YACb,KAAK,EAAE,WAAW;YAClB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE;SACvC,CACF,CAAC;QACF,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,wBAAwB;YAChC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;SAC7B,CAAC;IACJ,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QACpB,MAAM,GAAG,GAAG,CAA2D,CAAC;QACxE,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACvH,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,MAAM,IAAI,cAAc;YAChC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;SAC7B,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,OAAe,EAAE,OAAe;IAC5D,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC/C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAE3C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IACrD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAEzC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,IAAI,CAAC;QACH,IAAA,wBAAQ,EAAC,4BAA4B,EAAE;YACrC,GAAG,EAAE,SAAS;YACd,KAAK,EAAE,MAAM;YACb,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE;SACvC,CAAC,CAAC;QACH,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,sBAAsB;YAC9B,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;SAC7B,CAAC;IACJ,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QACpB,MAAM,GAAG,GAAG,CAA2D,CAAC;QACxE,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACvH,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,MAAM,IAAI,cAAc;YAChC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;SAC7B,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,OAAe,EAAE,OAAe;IAC5D,MAAM,iBAAiB,GAAG;QACxB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC;QACjD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC;QACjD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,CAAC;KACtD,CAAC;IAEF,IAAI,SAAS,GAAkB,IAAI,CAAC;IACpC,KAAK,MAAM,UAAU,IAAI,iBAAiB,EAAE,CAAC;QAC3C,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YACrC,MAAM;QACR,CAAC;IACH,CAAC;IAED,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAE5B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,IAAI,CAAC;QACH,2EAA2E;QAC3E,IAAA,wBAAQ,EAAC,0FAA0F,EAAE;YACnG,GAAG,EAAE,SAAS;YACd,KAAK,EAAE,MAAM;YACb,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE;YACtC,OAAO,EAAE,MAAM,EAAE,iBAAiB;SACnC,CAAC,CAAC;QACH,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,qBAAqB;YAC7B,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;SAC7B,CAAC;IACJ,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QACpB,MAAM,GAAG,GAAG,CAA2D,CAAC;QACxE,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACvH,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,MAAM,IAAI,cAAc;YAChC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;SAC7B,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/plugins/pipelines/factiii/utils/workflows.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workflows.d.ts","sourceRoot":"","sources":["../../../../../src/plugins/pipelines/factiii/utils/workflows.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AASH;;GAEG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAkDtE;AAED;;GAEG;AACH,wBAAsB,eAAe,CACnC,YAAY,EAAE,MAAM,EACpB,MAAM,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GAClC,OAAO,CAAC,IAAI,CAAC,CAgCf"}
+{"version":3,"file":"workflows.d.ts","sourceRoot":"","sources":["../../../../../src/plugins/pipelines/factiii/utils/workflows.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AASH;;GAEG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAmDtE;AAED;;GAEG;AACH,wBAAsB,eAAe,CACnC,YAAY,EAAE,MAAM,EACpB,MAAM,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GAClC,OAAO,CAAC,IAAI,CAAC,CAgCf"}

package/dist/plugins/pipelines/factiii/utils/workflows.js

@@ -74,6 +74,7 @@ async function generateWorkflows(rootDir) {
         'factiii-fix.yml',
         'factiii-scan.yml',
         'factiii-undeploy.yml',
+        'factiii-pr-check.yml',
         'factiii-cicd-staging.yml',
         'factiii-cicd-prod.yml',
         'factiii-command.yml',

package/dist/plugins/pipelines/factiii/utils/workflows.js.map

@@ -1 +1 @@
-{"version":3,"file":"workflows.js","sourceRoot":"","sources":["../../../../../src/plugins/pipelines/factiii/utils/workflows.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAYH,8CAkDC;AAKD,0CAmCC;AApGD,uCAAyB;AACzB,2CAA6B;AAC7B,iDAAyC;AACzC,wCAAwC;AACxC,wEAAgE;AAChE,yEAAuE;AAEvE;;GAEG;AACI,KAAK,UAAU,iBAAiB,CAAC,OAAe;IACrD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IAEvD,sBAAsB;IACtB,MAAM,OAAO,GAAG,IAAA,oCAAiB,GAAE,CAAC;IAEpC,+CAA+C;IAC/C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACjC,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,yCAAyC;IACzC,+CAA+C;IAC/C,iEAAiE;IACjE,sEAAsE;IACtE,wEAAwE;IACxE,2CAA2C;IAC3C,wBAAwB;IACxB,4DAA4D;IAC5D,yDAAyD;IACzD,MAAM,SAAS,GAAG;QAChB,oBAAoB;QACpB,iBAAiB;QACjB,kBAAkB;QAClB,sBAAsB;QACtB,0BAA0B;QAC1B,uBAAuB;QACvB,qBAAqB;KACtB,CAAC;IAEF,yCAAyC;IACzC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QACpC,SAAS,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QAEnD,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,IAAI,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YAElD,kDAAkD;YAClD,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,eAAe,EAAE,IAAI,OAAO,EAAE,CAAC,CAAC;YAE1D,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,kBAAkB,QAAQ,EAAE,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,eAAe,CACnC,YAAoB,EACpB,SAAiC,EAAE;IAEnC,MAAM,QAAQ,GAAG,4CAAkB,CAAC,WAAW,EAAE,CAAC;IAElD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IACvC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IAED,qBAAqB;IACrB,IAAI,GAAG,GAAG,MAAM,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAA,wBAAQ,EAAC,iCAAiC,EAAE;YAChD,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC;SAClC,CAAC,CAAC,IAAI,EAAE,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,kDAAkD;IACpD,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,cAAO,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAE7C,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC;QAChD,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,WAAW,EAAE,YAAY;QACzB,GAAG;QACH,MAAM;KACP,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"workflows.js","sourceRoot":"","sources":["../../../../../src/plugins/pipelines/factiii/utils/workflows.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAYH,8CAmDC;AAKD,0CAmCC;AArGD,uCAAyB;AACzB,2CAA6B;AAC7B,iDAAyC;AACzC,wCAAwC;AACxC,wEAAgE;AAChE,yEAAuE;AAEvE;;GAEG;AACI,KAAK,UAAU,iBAAiB,CAAC,OAAe;IACrD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IAEvD,sBAAsB;IACtB,MAAM,OAAO,GAAG,IAAA,oCAAiB,GAAE,CAAC;IAEpC,+CAA+C;IAC/C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACjC,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,yCAAyC;IACzC,+CAA+C;IAC/C,iEAAiE;IACjE,sEAAsE;IACtE,wEAAwE;IACxE,2CAA2C;IAC3C,wBAAwB;IACxB,4DAA4D;IAC5D,yDAAyD;IACzD,MAAM,SAAS,GAAG;QAChB,oBAAoB;QACpB,iBAAiB;QACjB,kBAAkB;QAClB,sBAAsB;QACtB,sBAAsB;QACtB,0BAA0B;QAC1B,uBAAuB;QACvB,qBAAqB;KACtB,CAAC;IAEF,yCAAyC;IACzC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QACpC,SAAS,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QAEnD,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,IAAI,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YAElD,kDAAkD;YAClD,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,eAAe,EAAE,IAAI,OAAO,EAAE,CAAC,CAAC;YAE1D,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,kBAAkB,QAAQ,EAAE,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,eAAe,CACnC,YAAoB,EACpB,SAAiC,EAAE;IAEnC,MAAM,QAAQ,GAAG,4CAAkB,CAAC,WAAW,EAAE,CAAC;IAElD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IACvC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IAED,qBAAqB;IACrB,IAAI,GAAG,GAAG,MAAM,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAA,wBAAQ,EAAC,iCAAiC,EAAE;YAChD,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC;SAClC,CAAC,CAAC,IAAI,EAAE,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,kDAAkD;IACpD,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,cAAO,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAE7C,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC;QAChD,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,WAAW,EAAE,YAAY;QACzB,GAAG;QACH,MAAM;KACP,CAAC,CAAC;AACL,CAAC"}

package/dist/plugins/pipelines/factiii/workflows/factiii-cicd-staging.yml

@@ -73,23 +73,28 @@ jobs:
           BRANCH: ${{ github.ref_name }}
           GITHUB_REPO: ${{ github.repository }}
           STAGING_ENVS: ${{ secrets.STAGING_ENVS }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           if [ -z "$HOST" ]; then
             echo "❌ Missing domain in factiii.yml: staging.domain"
             exit 1
           fi
-          
+
           echo "🚀 Deploying to staging ($HOST)..."
-          
+
           # Prepare environment variables for SSH (base64 encode to handle special characters)
           ENV_VARS_EXPORT=""
           if [ -n "$STAGING_ENVS" ]; then
             ENV_VARS_B64=$(echo -n "$STAGING_ENVS" | base64 -w 0)
             ENV_VARS_EXPORT="STAGING_ENVS=\$(echo '$ENV_VARS_B64' | base64 -d) && export STAGING_ENVS && "
           fi
-          
+
+          # Base64 encode GITHUB_TOKEN for safe SSH transport
+          GITHUB_TOKEN_B64=$(echo -n "$GITHUB_TOKEN" | base64 -w 0)
+
           ssh -i ~/.ssh/deploy_key -o StrictHostKeyChecking=no "$USER@$HOST" \
             "export PATH=\"/opt/homebrew/bin:/usr/local/bin:\$PATH\" && \
+             export GITHUB_TOKEN=\$(echo \"$GITHUB_TOKEN_B64\" | base64 -d) && \
              REPO_DIR=\"\$HOME/.factiii/$REPO_NAME\" && \
              if [ -d \"\$REPO_DIR\" ]; then \
                cd \"\$REPO_DIR\" && \

package/dist/plugins/pipelines/factiii/workflows/factiii-pr-check.yml

@@ -0,0 +1,103 @@
+name: Factiii PR Check
+
+# Generated by @factiii/stack v{VERSION}
+# Validates server/client/mobile builds when PR opens to main.
+# SSH to staging, run builds, report status to GitHub.
+
+on:
+  pull_request:
+    branches:
+      - main
+
+jobs:
+  pr-check:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Install yq
+        run: |
+          sudo wget -qO /usr/local/bin/yq https://github.com/mikefarah/yq/releases/latest/download/yq_linux_amd64
+          sudo chmod +x /usr/local/bin/yq
+
+      - name: Read config
+        id: config
+        run: |
+          if [ ! -f "factiii.yml" ]; then
+            echo "❌ factiii.yml not found"
+            exit 1
+          fi
+
+          REPO_NAME=$(yq eval '.name' factiii.yml)
+          HOST=$(yq eval '.staging.domain // ""' factiii.yml)
+          SSH_USER=$(yq eval '.staging.ssh_user // "ubuntu"' factiii.yml)
+
+          echo "repo_name=$REPO_NAME" >> $GITHUB_OUTPUT
+          echo "host=$HOST" >> $GITHUB_OUTPUT
+          echo "ssh_user=$SSH_USER" >> $GITHUB_OUTPUT
+
+      - name: Check if staging configured
+        id: check_staging
+        run: |
+          HAS_STAGING=$(yq eval '.staging != null' factiii.yml)
+          echo "has_staging=$HAS_STAGING" >> $GITHUB_OUTPUT
+
+          if [ "$HAS_STAGING" != "true" ]; then
+            echo "⏭️  Staging not configured - skipping PR check"
+            exit 0
+          fi
+
+      - name: Setup SSH
+        if: steps.check_staging.outputs.has_staging == 'true'
+        env:
+          SSH_KEY: ${{ secrets.STAGING_SSH }}
+        run: |
+          if [ -z "$SSH_KEY" ]; then
+            echo "❌ Missing STAGING_SSH secret"
+            exit 1
+          fi
+
+          mkdir -p ~/.ssh
+          echo "$SSH_KEY" > ~/.ssh/deploy_key
+          chmod 600 ~/.ssh/deploy_key
+
+      - name: Run PR check on staging
+        if: steps.check_staging.outputs.has_staging == 'true'
+        env:
+          HOST: ${{ steps.config.outputs.host }}
+          USER: ${{ steps.config.outputs.ssh_user }}
+          REPO_NAME: ${{ steps.config.outputs.repo_name }}
+          COMMIT_HASH: ${{ github.event.pull_request.head.sha }}
+          BRANCH: ${{ github.event.pull_request.head.ref }}
+          PR_NUMBER: ${{ github.event.pull_request.number }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          if [ -z "$HOST" ]; then
+            echo "❌ Missing staging.domain in factiii.yml"
+            exit 1
+          fi
+
+          echo "🔍 Running PR check on staging ($HOST)..."
+
+          GITHUB_TOKEN_B64=$(echo -n "$GITHUB_TOKEN" | base64 -w 0)
+          ssh -i ~/.ssh/deploy_key -o StrictHostKeyChecking=no "$USER@$HOST" \
+            "export PATH=\"/opt/homebrew/bin:/usr/local/bin:\$PATH\" && \
+             export GITHUB_TOKEN=\$(echo \"$GITHUB_TOKEN_B64\" | base64 -d) && \
+             export GITHUB_ACTIONS=true COMMIT_HASH=$COMMIT_HASH BRANCH=$BRANCH PR_NUMBER=$PR_NUMBER && \
+             REPO_DIR=\"\$HOME/.factiii/$REPO_NAME\" && \
+             if [ -d \"\$REPO_DIR\" ]; then \
+               cd \"\$REPO_DIR\" && npx factiii pr-check --staging; \
+             else \
+               echo \"❌ Repo not found at \$REPO_DIR\"; exit 1; \
+             fi"
+
+          EXIT_CODE=$?
+          rm -f ~/.ssh/deploy_key
+
+          if [ $EXIT_CODE -eq 0 ]; then
+            echo "✅ PR check passed"
+          else
+            echo "❌ PR check failed"
+            exit $EXIT_CODE
+          fi

package/dist/plugins/servers/mac/staging.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"staging.d.ts","sourceRoot":"","sources":["../../../../src/plugins/servers/mac/staging.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAUH,OAAO,KAAK,EACV,aAAa,EAEb,YAAY,EACZ,wBAAwB,EACzB,MAAM,yBAAyB,CAAC;AA2XjC;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,aAAa,EACrB,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,wBAA6B,GACrC,OAAO,CAAC,YAAY,CAAC,CA0DvB;AAmOD;;;;;;;;GAQG;AACH,wBAAsB,aAAa,CACjC,MAAM,EAAE,aAAa,EACrB,WAAW,GAAE,MAAkB,GAC9B,OAAO,CAAC,YAAY,CAAC,CAiLvB"}
+{"version":3,"file":"staging.d.ts","sourceRoot":"","sources":["../../../../src/plugins/servers/mac/staging.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAWH,OAAO,KAAK,EACV,aAAa,EAEb,YAAY,EACZ,wBAAwB,EACzB,MAAM,yBAAyB,CAAC;AA2XjC;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,aAAa,EACrB,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,wBAA6B,GACrC,OAAO,CAAC,YAAY,CAAC,CA0DvB;AAqZD;;;;;;;;GAQG;AACH,wBAAsB,aAAa,CACjC,MAAM,EAAE,aAAa,EACrB,WAAW,GAAE,MAAkB,GAC9B,OAAO,CAAC,YAAY,CAAC,CAmRvB"}