@factiii/stack 0.1.2

package/dist/plugins/pipelines/factiii/workflows/factiii-dev-sync.yml

@@ -0,0 +1,179 @@
+name: Factiii Dev Sync
+
+# Generated by @factiii/stack v{VERSION}
+# DEV/TESTING ONLY - Deploys locally built infrastructure for testing beta features
+# This workflow receives infrastructure changes and deploys them to servers
+# Use: npx factiii dev-sync
+#
+# ⚠️ WARNING: This is for developing @factiii/stack itself, not for app deployments
+# Only use this when testing new infrastructure features before releasing them
+
+on:
+  workflow_dispatch:
+    inputs:
+      environment:
+        description: 'Environment to sync'
+        required: true
+        type: choice
+        options:
+          - staging
+          - prod
+      release_id:
+        description: 'GitHub Release ID containing artifact'
+        required: true
+        type: string
+      asset_id:
+        description: 'Release Asset ID for infrastructure tarball'
+        required: true
+        type: string
+      deploy:
+        description: 'Deploy after syncing'
+        required: false
+        type: boolean
+        default: false
+
+jobs:
+  dev-sync:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Install yq
+        run: |
+          sudo wget -qO /usr/local/bin/yq https://github.com/mikefarah/yq/releases/latest/download/yq_linux_amd64
+          sudo chmod +x /usr/local/bin/yq
+
+      - name: Read config
+        id: config
+        run: |
+          if [ ! -f "factiii.yml" ]; then
+            echo "❌ factiii.yml not found"
+            exit 1
+          fi
+          
+          REPO_NAME=$(yq eval '.name' factiii.yml)
+          
+          if [ "${{ inputs.environment }}" == "staging" ]; then
+            HOST=$(yq eval '.environments.staging.domain // ""' factiii.yml)
+            SSH_USER=$(yq eval '.environments.staging.ssh_user // "ubuntu"' factiii.yml)
+          else
+            HOST=$(yq eval '.environments.prod.domain // ""' factiii.yml)
+            SSH_USER=$(yq eval '.environments.prod.ssh_user // "ubuntu"' factiii.yml)
+          fi
+          
+          echo "repo_name=$REPO_NAME" >> $GITHUB_OUTPUT
+          echo "host=$HOST" >> $GITHUB_OUTPUT
+          echo "ssh_user=$SSH_USER" >> $GITHUB_OUTPUT
+
+      - name: Check if environment configured
+        id: check_env
+        run: |
+          if [ "${{ inputs.environment }}" == "staging" ]; then
+            HAS_ENV=$(yq eval '.environments.staging != null' factiii.yml)
+          else
+            HAS_ENV=$(yq eval '.environments.prod != null' factiii.yml)
+          fi
+          
+          echo "has_env=$HAS_ENV" >> $GITHUB_OUTPUT
+          
+          if [ "$HAS_ENV" != "true" ]; then
+            echo "⏭️  ${{ inputs.environment }} environment not configured in factiii.yml"
+            exit 1
+          fi
+
+      - name: Setup SSH
+        if: steps.check_env.outputs.has_env == 'true'
+        env:
+          SSH_KEY: ${{ inputs.environment == 'staging' && secrets.STAGING_SSH || secrets.PROD_SSH }}
+        run: |
+          if [ -z "$SSH_KEY" ]; then
+            echo "❌ Missing ${{ inputs.environment == 'staging' && 'STAGING_SSH' || 'PROD_SSH' }} secret"
+            exit 1
+          fi
+          
+          mkdir -p ~/.ssh
+          echo "$SSH_KEY" > ~/.ssh/deploy_key
+          chmod 600 ~/.ssh/deploy_key
+
+      - name: Download infrastructure artifact from release
+        if: steps.check_env.outputs.has_env == 'true'
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          RELEASE_ID: ${{ inputs.release_id }}
+          ASSET_ID: ${{ inputs.asset_id }}
+        run: |
+          echo "⚠️  DEV SYNC MODE - Using infrastructure from local build"
+          echo "   This syncs uncommitted infrastructure changes for testing"
+          echo "   Release ID: $RELEASE_ID"
+          echo "   Asset ID: $ASSET_ID"
+          
+          echo "📦 Downloading infrastructure artifact..."
+          
+          # Download release asset using GitHub API
+          curl -L \
+            -H "Accept: application/octet-stream" \
+            -H "Authorization: Bearer $GITHUB_TOKEN" \
+            -H "X-GitHub-Api-Version: 2022-11-28" \
+            "https://api.github.com/repos/${{ github.repository }}/releases/assets/$ASSET_ID" \
+            -o infrastructure.tar.gz
+          
+          # Verify download
+          if [ ! -f infrastructure.tar.gz ]; then
+            echo "❌ Failed to download artifact"
+            exit 1
+          fi
+          
+          SIZE=$(du -h infrastructure.tar.gz | cut -f1)
+          echo "✅ Downloaded artifact ($SIZE)"
+
+      - name: Deploy infrastructure to server
+        if: steps.check_env.outputs.has_env == 'true'
+        env:
+          HOST: ${{ steps.config.outputs.host }}
+          USER: ${{ steps.config.outputs.ssh_user }}
+          DEPLOY: ${{ inputs.deploy }}
+          REPO_NAME: ${{ steps.config.outputs.repo_name }}
+          ENVIRONMENT: ${{ inputs.environment }}
+        run: |
+          if [ -z "$HOST" ]; then
+            echo "❌ Missing domain in factiii.yml: environments.$ENVIRONMENT.domain"
+            exit 1
+          fi
+          
+          echo "🚀 Syncing infrastructure to $ENVIRONMENT ($HOST)..."
+          
+          # Copy infrastructure to server
+          echo "📤 Uploading infrastructure package..."
+          scp -i ~/.ssh/deploy_key -o StrictHostKeyChecking=no infrastructure.tar.gz "$USER@$HOST:/tmp/"
+          
+          # Extract and setup on server
+          echo "📦 Extracting infrastructure on server..."
+          ssh -i ~/.ssh/deploy_key -o StrictHostKeyChecking=no "$USER@$HOST" \
+            "export PATH=\"/opt/homebrew/bin:/usr/local/bin:\$PATH\" && \
+             echo \"📦 Setting up infrastructure...\" && \
+             mkdir -p ~/.factiii/infrastructure && \
+             cd ~/.factiii/infrastructure && \
+             tar -xzf /tmp/infrastructure.tar.gz && \
+             rm /tmp/infrastructure.tar.gz && \
+             echo \"\" && \
+             echo \"📋 Verifying version...\" && \
+             VERSION=\$(cat package.json | grep '\"version\"' | head -1 | sed 's/.*: \"\(.*\)\".*/\1/') && \
+             echo \"   Version: \$VERSION\" && \
+             echo \"\" && \
+             echo \"✅ Infrastructure synced successfully\""
+          
+          # Optionally deploy
+          if [ "$DEPLOY" == "true" ]; then
+            echo ""
+            echo "🚀 Deploying to $ENVIRONMENT..."
+            ssh -i ~/.ssh/deploy_key -o StrictHostKeyChecking=no "$USER@$HOST" \
+              "export PATH=\"/opt/homebrew/bin:/usr/local/bin:\$PATH\" && \
+               cd ~/.factiii/$REPO_NAME && \
+               GITHUB_ACTIONS=true node ~/.factiii/infrastructure/bin/factiii deploy --$ENVIRONMENT"
+          fi
+          
+          rm -f ~/.ssh/deploy_key
+          echo ""
+          echo "✅ Dev sync complete!"
+

package/dist/plugins/pipelines/factiii/workflows/factiii-fix.yml

@@ -0,0 +1,176 @@
+name: Factiii Fix
+
+# Generated by @factiii/stack v{VERSION}
+# INFRASTRUCTURE: Fix server issues via CLI
+# Run: npx factiii fix (triggers this workflow)
+# Runs on configured environments in parallel using matrix strategy
+
+on:
+  workflow_dispatch:
+    inputs:
+      environment:
+        description: 'Environment to fix'
+        required: true
+        type: choice
+        options:
+          - all
+          - staging
+          - prod
+        default: all
+
+jobs:
+  setup:
+    runs-on: ubuntu-latest
+    outputs:
+      matrix: ${{ steps.set-matrix.outputs.matrix }}
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Install yq
+        run: |
+          sudo wget -qO /usr/local/bin/yq https://github.com/mikefarah/yq/releases/latest/download/yq_linux_amd64
+          sudo chmod +x /usr/local/bin/yq
+
+      - name: Determine environments
+        id: set-matrix
+        run: |
+          ENVS="[]"
+
+          if [ "${{ inputs.environment }}" == "all" ]; then
+            # Check which environments are configured
+            HAS_STAGING=$(yq eval '.staging != null' factiii.yml)
+            HAS_PROD=$(yq eval '.prod != null' factiii.yml)
+
+            if [ "$HAS_STAGING" == "true" ] && [ "$HAS_PROD" == "true" ]; then
+              ENVS='["staging", "prod"]'
+            elif [ "$HAS_STAGING" == "true" ]; then
+              ENVS='["staging"]'
+            elif [ "$HAS_PROD" == "true" ]; then
+              ENVS='["prod"]'
+            fi
+          else
+            ENVS='["${{ inputs.environment }}"]'
+          fi
+
+          echo "matrix={\"environment\":$ENVS}" >> $GITHUB_OUTPUT
+
+  fix:
+    needs: setup
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix: ${{ fromJson(needs.setup.outputs.matrix) }}
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Install yq
+        run: |
+          sudo wget -qO /usr/local/bin/yq https://github.com/mikefarah/yq/releases/latest/download/yq_linux_amd64
+          sudo chmod +x /usr/local/bin/yq
+
+      - name: Read config
+        id: config
+        env:
+          ENVIRONMENT: ${{ matrix.environment }}
+        run: |
+          if [ ! -f "factiii.yml" ]; then
+            echo "❌ factiii.yml not found"
+            exit 1
+          fi
+
+          REPO_NAME=$(yq eval '.name' factiii.yml)
+          HOST=$(yq eval ".$ENVIRONMENT.domain // \"\"" factiii.yml)
+          SSH_USER=$(yq eval ".$ENVIRONMENT.ssh_user // \"ubuntu\"" factiii.yml)
+
+          echo "repo_name=$REPO_NAME" >> $GITHUB_OUTPUT
+          echo "host=$HOST" >> $GITHUB_OUTPUT
+          echo "ssh_user=$SSH_USER" >> $GITHUB_OUTPUT
+
+      - name: Check if environment configured
+        id: check_env
+        env:
+          ENVIRONMENT: ${{ matrix.environment }}
+        run: |
+          HAS_ENV=$(yq eval ".$ENVIRONMENT != null" factiii.yml)
+          echo "has_env=$HAS_ENV" >> $GITHUB_OUTPUT
+
+          if [ "$HAS_ENV" != "true" ]; then
+            echo "⏭️  $ENVIRONMENT environment not configured in factiii.yml"
+            exit 0
+          fi
+
+      - name: Check SSH secret
+        if: steps.check_env.outputs.has_env == 'true'
+        env:
+          ENVIRONMENT: ${{ matrix.environment }}
+          SSH_KEY: ${{ matrix.environment == 'staging' && secrets.STAGING_SSH || secrets.PROD_SSH }}
+        run: |
+          if [ -z "$SSH_KEY" ]; then
+            SECRET_NAME="${ENVIRONMENT^^}_SSH"
+            echo "❌ ${SECRET_NAME} secret not found"
+            echo "Add it at: https://github.com/${{ github.repository }}/settings/secrets/actions"
+            exit 1
+          fi
+          echo "✅ SSH secret exists for $ENVIRONMENT"
+
+      - name: Setup SSH
+        if: steps.check_env.outputs.has_env == 'true'
+        env:
+          SSH_KEY: ${{ matrix.environment == 'staging' && secrets.STAGING_SSH || secrets.PROD_SSH }}
+        run: |
+          mkdir -p ~/.ssh
+          echo "$SSH_KEY" > ~/.ssh/deploy_key
+          chmod 600 ~/.ssh/deploy_key
+
+      - name: Bootstrap Node.js (one-time)
+        if: steps.check_env.outputs.has_env == 'true'
+        env:
+          HOST: ${{ steps.config.outputs.host }}
+          USER: ${{ steps.config.outputs.ssh_user }}
+        run: |
+          echo "🔍 Checking Node.js on server..."
+          ssh -i ~/.ssh/deploy_key -o StrictHostKeyChecking=no "$USER@$HOST" \
+            'if ! command -v node &> /dev/null; then
+               echo "📦 Installing Node.js...";
+               if [ -f /opt/homebrew/bin/brew ] || [ -f /usr/local/bin/brew ]; then
+                 export PATH="/opt/homebrew/bin:/usr/local/bin:$PATH";
+                 brew install node;
+               else
+                 curl -fsSL https://deb.nodesource.com/setup_20.x | sudo -E bash - && sudo apt-get install -y nodejs;
+               fi;
+             else
+               echo "✅ Node.js already installed";
+             fi'
+
+      - name: Fix via SSH
+        if: steps.check_env.outputs.has_env == 'true'
+        env:
+          HOST: ${{ steps.config.outputs.host }}
+          USER: ${{ steps.config.outputs.ssh_user }}
+          REPO_NAME: ${{ steps.config.outputs.repo_name }}
+          ENVIRONMENT: ${{ matrix.environment }}
+        run: |
+          if [ -z "$HOST" ]; then
+            echo "❌ Missing domain in factiii.yml: $ENVIRONMENT.domain"
+            exit 1
+          fi
+          
+          echo "🔧 Fixing $ENVIRONMENT ($HOST)..."
+          
+          ssh -i ~/.ssh/deploy_key -o StrictHostKeyChecking=no -o ConnectTimeout=10 -o ServerAliveInterval=60 -o ServerAliveCountMax=5 "$USER@$HOST" \
+            "export PATH=\"/opt/homebrew/bin:/usr/local/bin:\$PATH\" && \
+             REPO_DIR=\"\$HOME/.factiii/$REPO_NAME\" && \
+             if [ -d \"\$REPO_DIR\" ]; then \
+               cd \"\$REPO_DIR\" && \
+               export PATH="/opt/homebrew/bin:/usr/local/bin:$PATH" && \
+               GITHUB_ACTIONS=true npx factiii fix --$ENVIRONMENT; \
+             else \
+               echo \"❌ Repo directory not found at \$REPO_DIR\"; \
+               echo \"Run deployment first to clone the repository\"; \
+               exit 1; \
+             fi"
+          
+          rm -f ~/.ssh/deploy_key
+          echo "✅ $ENVIRONMENT fix complete!"

package/dist/plugins/pipelines/factiii/workflows/factiii-scan.yml

@@ -0,0 +1,176 @@
+name: Factiii Scan
+
+# Generated by @factiii/stack v{VERSION}
+# INFRASTRUCTURE: Scan servers for issues via CLI
+# Run: npx factiii scan (triggers this workflow for remote environments)
+# Runs on configured environments in parallel using matrix strategy
+
+on:
+  workflow_dispatch:
+    inputs:
+      environment:
+        description: 'Environment to scan'
+        required: true
+        type: choice
+        options:
+          - all
+          - staging
+          - prod
+        default: all
+
+jobs:
+  setup:
+    runs-on: ubuntu-latest
+    outputs:
+      matrix: ${{ steps.set-matrix.outputs.matrix }}
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Install yq
+        run: |
+          sudo wget -qO /usr/local/bin/yq https://github.com/mikefarah/yq/releases/latest/download/yq_linux_amd64
+          sudo chmod +x /usr/local/bin/yq
+
+      - name: Determine environments
+        id: set-matrix
+        run: |
+          ENVS="[]"
+          
+          if [ "${{ inputs.environment }}" == "all" ]; then
+            # Check which environments are configured
+            HAS_STAGING=$(yq eval '.environments.staging != null' factiii.yml)
+            HAS_PROD=$(yq eval '.environments.prod != null' factiii.yml)
+            
+            if [ "$HAS_STAGING" == "true" ] && [ "$HAS_PROD" == "true" ]; then
+              ENVS='["staging", "prod"]'
+            elif [ "$HAS_STAGING" == "true" ]; then
+              ENVS='["staging"]'
+            elif [ "$HAS_PROD" == "true" ]; then
+              ENVS='["prod"]'
+            fi
+          else
+            ENVS='["${{ inputs.environment }}"]'
+          fi
+          
+          echo "matrix={\"environment\":$ENVS}" >> $GITHUB_OUTPUT
+
+  scan:
+    needs: setup
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix: ${{ fromJson(needs.setup.outputs.matrix) }}
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Install yq
+        run: |
+          sudo wget -qO /usr/local/bin/yq https://github.com/mikefarah/yq/releases/latest/download/yq_linux_amd64
+          sudo chmod +x /usr/local/bin/yq
+
+      - name: Read config
+        id: config
+        env:
+          ENVIRONMENT: ${{ matrix.environment }}
+        run: |
+          if [ ! -f "factiii.yml" ]; then
+            echo "❌ factiii.yml not found"
+            exit 1
+          fi
+          
+          REPO_NAME=$(yq eval '.name' factiii.yml)
+          HOST=$(yq eval ".environments.$ENVIRONMENT.domain // \"\"" factiii.yml)
+          SSH_USER=$(yq eval ".environments.$ENVIRONMENT.ssh_user // \"ubuntu\"" factiii.yml)
+          
+          echo "repo_name=$REPO_NAME" >> $GITHUB_OUTPUT
+          echo "host=$HOST" >> $GITHUB_OUTPUT
+          echo "ssh_user=$SSH_USER" >> $GITHUB_OUTPUT
+
+      - name: Check if environment configured
+        id: check_env
+        env:
+          ENVIRONMENT: ${{ matrix.environment }}
+        run: |
+          HAS_ENV=$(yq eval ".environments.$ENVIRONMENT != null" factiii.yml)
+          echo "has_env=$HAS_ENV" >> $GITHUB_OUTPUT
+          
+          if [ "$HAS_ENV" != "true" ]; then
+            echo "⏭️  $ENVIRONMENT environment not configured in factiii.yml"
+            exit 0
+          fi
+
+      - name: Check SSH secret
+        if: steps.check_env.outputs.has_env == 'true'
+        env:
+          ENVIRONMENT: ${{ matrix.environment }}
+          SSH_KEY: ${{ matrix.environment == 'staging' && secrets.STAGING_SSH || secrets.PROD_SSH }}
+        run: |
+          if [ -z "$SSH_KEY" ]; then
+            SECRET_NAME="${ENVIRONMENT^^}_SSH"
+            echo "❌ ${SECRET_NAME} secret not found"
+            echo "Add it at: https://github.com/${{ github.repository }}/settings/secrets/actions"
+            exit 1
+          fi
+          echo "✅ SSH secret exists for $ENVIRONMENT"
+
+      - name: Setup SSH
+        if: steps.check_env.outputs.has_env == 'true'
+        env:
+          SSH_KEY: ${{ matrix.environment == 'staging' && secrets.STAGING_SSH || secrets.PROD_SSH }}
+        run: |
+          mkdir -p ~/.ssh
+          echo "$SSH_KEY" > ~/.ssh/deploy_key
+          chmod 600 ~/.ssh/deploy_key
+
+      - name: Bootstrap Node.js (one-time)
+        if: steps.check_env.outputs.has_env == 'true'
+        env:
+          HOST: ${{ steps.config.outputs.host }}
+          USER: ${{ steps.config.outputs.ssh_user }}
+        run: |
+          echo "🔍 Checking Node.js on server..."
+          ssh -i ~/.ssh/deploy_key -o StrictHostKeyChecking=no "$USER@$HOST" \
+            'if ! command -v node &> /dev/null; then
+               echo "📦 Installing Node.js...";
+               if [ -f /opt/homebrew/bin/brew ] || [ -f /usr/local/bin/brew ]; then
+                 export PATH="/opt/homebrew/bin:/usr/local/bin:$PATH";
+                 brew install node;
+               else
+                 curl -fsSL https://deb.nodesource.com/setup_20.x | sudo -E bash - && sudo apt-get install -y nodejs;
+               fi;
+             else
+               echo "✅ Node.js already installed";
+             fi'
+
+      - name: Scan via SSH
+        if: steps.check_env.outputs.has_env == 'true'
+        env:
+          HOST: ${{ steps.config.outputs.host }}
+          USER: ${{ steps.config.outputs.ssh_user }}
+          REPO_NAME: ${{ steps.config.outputs.repo_name }}
+          ENVIRONMENT: ${{ matrix.environment }}
+        run: |
+          if [ -z "$HOST" ]; then
+            echo "❌ Missing domain in factiii.yml: environments.$ENVIRONMENT.domain"
+            exit 1
+          fi
+          
+          echo "🔍 Scanning $ENVIRONMENT ($HOST)..."
+          
+          ssh -i ~/.ssh/deploy_key -o StrictHostKeyChecking=no "$USER@$HOST" \
+            "export PATH=\"/opt/homebrew/bin:/usr/local/bin:\$PATH\" && \
+             REPO_DIR=\"\$HOME/.factiii/$REPO_NAME\" && \
+             if [ -d \"\$REPO_DIR\" ]; then \
+               cd \"\$REPO_DIR\" && \
+               export PATH="/opt/homebrew/bin:/usr/local/bin:$PATH" && \
+               GITHUB_ACTIONS=true npx factiii scan --$ENVIRONMENT; \
+             else \
+               echo \"❌ Repo directory not found at \$REPO_DIR\"; \
+               echo \"Run deployment first to clone the repository\"; \
+               exit 1; \
+             fi"
+          
+          rm -f ~/.ssh/deploy_key
+          echo "✅ $ENVIRONMENT scan complete!"

package/dist/plugins/pipelines/factiii/workflows/factiii-undeploy.yml

@@ -0,0 +1,95 @@
+name: Factiii Undeploy
+
+# Generated by @factiii/stack v{VERSION}
+# Manual workflow to remove deployment from a server
+# Thin workflow - just SSH and call CLI
+
+on:
+  workflow_dispatch:
+    inputs:
+      environment:
+        description: 'Environment to undeploy'
+        required: true
+        type: choice
+        options:
+          - staging
+          - prod
+
+jobs:
+  undeploy:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Install yq
+        run: |
+          sudo wget -qO /usr/local/bin/yq https://github.com/mikefarah/yq/releases/latest/download/yq_linux_amd64
+          sudo chmod +x /usr/local/bin/yq
+
+      - name: Read config
+        id: config
+        run: |
+          if [ ! -f "factiii.yml" ]; then
+            echo "❌ factiii.yml not found"
+            exit 1
+          fi
+          
+          REPO_NAME=$(yq eval '.name' factiii.yml)
+          
+          if [ "${{ inputs.environment }}" == "staging" ]; then
+            HOST=$(yq eval '.environments.staging.domain // ""' factiii.yml)
+            SSH_USER=$(yq eval '.environments.staging.ssh_user // "ubuntu"' factiii.yml)
+          else
+            HOST=$(yq eval '.environments.prod.domain // ""' factiii.yml)
+            SSH_USER=$(yq eval '.environments.prod.ssh_user // "ubuntu"' factiii.yml)
+          fi
+          
+          echo "repo_name=$REPO_NAME" >> $GITHUB_OUTPUT
+          echo "host=$HOST" >> $GITHUB_OUTPUT
+          echo "ssh_user=$SSH_USER" >> $GITHUB_OUTPUT
+
+      - name: Setup SSH
+        env:
+          SSH_KEY: ${{ inputs.environment == 'staging' && secrets.STAGING_SSH || secrets.PROD_SSH }}
+        run: |
+          if [ -z "$SSH_KEY" ]; then
+            echo "❌ Missing ${{ inputs.environment == 'staging' && 'STAGING_SSH' || 'PROD_SSH' }} secret"
+            exit 1
+          fi
+          
+          mkdir -p ~/.ssh
+          echo "$SSH_KEY" > ~/.ssh/deploy_key
+          chmod 600 ~/.ssh/deploy_key
+
+      - name: Undeploy via CLI
+        env:
+          HOST: ${{ steps.config.outputs.host }}
+          USER: ${{ steps.config.outputs.ssh_user }}
+          REPO_NAME: ${{ steps.config.outputs.repo_name }}
+          ENVIRONMENT: ${{ inputs.environment }}
+        run: |
+          if [ -z "$HOST" ]; then
+            echo "❌ Missing domain in factiii.yml: environments.$ENVIRONMENT.domain"
+            exit 1
+          fi
+          
+          echo "🗑️ Undeploying from $ENVIRONMENT ($HOST)..."
+          
+          ssh -i ~/.ssh/deploy_key -o StrictHostKeyChecking=no "$USER@$HOST" bash -s << EOF
+            set -e
+            REPO_DIR=~/.factiii/$REPO_NAME
+            
+            if [ -d "\$REPO_DIR" ]; then
+              cd \$REPO_DIR
+              echo "🚀 Running undeploy..."
+              export PATH="/opt/homebrew/bin:/usr/local/bin:$PATH" && \
+              GITHUB_ACTIONS=true npx factiii undeploy --$ENVIRONMENT || true
+            else
+              echo "⚠️ Repo directory not found, nothing to undeploy"
+            fi
+          EOF
+          
+          rm -f ~/.ssh/deploy_key
+          echo "✅ Undeploy complete!"
+