@factiii/stack 0.1.2

package/dist/scanfix/platform.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform.d.ts","sourceRoot":"","sources":["../../src/scanfix/platform.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C;;;;GAIG;AACH,wBAAgB,cAAc,IAAI,QAAQ,CAyBzC;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAEtD"}

package/dist/scanfix/platform.js

@@ -0,0 +1,48 @@
+"use strict";
+/**
+ * Platform Detection
+ *
+ * Detects the current operating system platform for scanfix commands.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.detectPlatform = detectPlatform;
+exports.isPlatform = isPlatform;
+const child_process_1 = require("child_process");
+/**
+ * Detect the current platform
+ *
+ * @returns Platform identifier ('mac', 'ubuntu', 'windows')
+ */
+function detectPlatform() {
+    const platform = process.platform;
+    if (platform === 'darwin') {
+        return 'mac';
+    }
+    if (platform === 'linux') {
+        // Check for apt (Debian/Ubuntu)
+        try {
+            (0, child_process_1.execSync)('which apt-get', { stdio: 'pipe' });
+            return 'ubuntu';
+        }
+        catch {
+            // Could add yum/dnf detection for RHEL in future
+            // Default to ubuntu for now
+            return 'ubuntu';
+        }
+    }
+    if (platform === 'win32') {
+        return 'windows';
+    }
+    // Default to ubuntu for unknown platforms
+    return 'ubuntu';
+}
+/**
+ * Check if current platform matches expected
+ *
+ * @param expected The platform to check for
+ * @returns true if current platform matches
+ */
+function isPlatform(expected) {
+    return detectPlatform() === expected;
+}
+//# sourceMappingURL=platform.js.map

package/dist/scanfix/platform.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform.js","sourceRoot":"","sources":["../../src/scanfix/platform.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;AAUH,wCAyBC;AAQD,gCAEC;AA3CD,iDAAyC;AAGzC;;;;GAIG;AACH,SAAgB,cAAc;IAC5B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAElC,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,gCAAgC;QAChC,IAAI,CAAC;YACH,IAAA,wBAAQ,EAAC,eAAe,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YAC7C,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,iDAAiD;YACjD,4BAA4B;YAC5B,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,0CAA0C;IAC1C,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,SAAgB,UAAU,CAAC,QAAkB;IAC3C,OAAO,cAAc,EAAE,KAAK,QAAQ,CAAC;AACvC,CAAC"}

package/dist/scanfix/ssl-cert-helper.d.ts

@@ -0,0 +1,27 @@
+/**
+ * SSL Certificate Helper Utilities
+ *
+ * Provides functions for checking certificate existence and validity.
+ * Used by certbot scanfix to determine if certs need to be obtained/renewed.
+ */
+export interface CertCheckResult {
+    exists: boolean;
+    valid: boolean;
+    expiresInDays?: number;
+    error?: string;
+}
+/**
+ * Check if SSL certificate exists and is valid (not expiring soon)
+ *
+ * @param domain The domain to check
+ * @param warnDays Days before expiration to trigger warning (default: 7)
+ * @returns CertCheckResult with existence and validity info
+ */
+export declare function checkCertificate(domain: string, warnDays?: number): CertCheckResult;
+/**
+ * Check if nginx container is running
+ *
+ * @returns true if factiii_nginx container is running
+ */
+export declare function isNginxRunning(): boolean;
+//# sourceMappingURL=ssl-cert-helper.d.ts.map

package/dist/scanfix/ssl-cert-helper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssl-cert-helper.d.ts","sourceRoot":"","sources":["../../src/scanfix/ssl-cert-helper.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAU,GAAG,eAAe,CAqDtF;AAED;;;;GAIG;AACH,wBAAgB,cAAc,IAAI,OAAO,CASxC"}

package/dist/scanfix/ssl-cert-helper.js

@@ -0,0 +1,117 @@
+"use strict";
+/**
+ * SSL Certificate Helper Utilities
+ *
+ * Provides functions for checking certificate existence and validity.
+ * Used by certbot scanfix to determine if certs need to be obtained/renewed.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.checkCertificate = checkCertificate;
+exports.isNginxRunning = isNginxRunning;
+const child_process_1 = require("child_process");
+const fs = __importStar(require("fs"));
+/**
+ * Check if SSL certificate exists and is valid (not expiring soon)
+ *
+ * @param domain The domain to check
+ * @param warnDays Days before expiration to trigger warning (default: 7)
+ * @returns CertCheckResult with existence and validity info
+ */
+function checkCertificate(domain, warnDays = 7) {
+    const certPath = '/etc/letsencrypt/live/' + domain + '/fullchain.pem';
+    if (!fs.existsSync(certPath)) {
+        return { exists: false, valid: false };
+    }
+    try {
+        // Check if cert is valid for at least warnDays more
+        const checkSeconds = warnDays * 24 * 60 * 60;
+        (0, child_process_1.execSync)('openssl x509 -checkend ' + checkSeconds + ' -noout -in "' + certPath + '"', {
+            stdio: ['pipe', 'pipe', 'pipe'],
+        });
+        // Get exact expiration for reporting
+        const expiryOutput = (0, child_process_1.execSync)('openssl x509 -enddate -noout -in "' + certPath + '"', {
+            encoding: 'utf8',
+        });
+        const expiryMatch = expiryOutput.match(/notAfter=(.+)/);
+        if (expiryMatch && expiryMatch[1]) {
+            const expiryDate = new Date(expiryMatch[1]);
+            const daysUntilExpiry = Math.floor((expiryDate.getTime() - Date.now()) / (1000 * 60 * 60 * 24));
+            return { exists: true, valid: true, expiresInDays: daysUntilExpiry };
+        }
+        return { exists: true, valid: true };
+    }
+    catch {
+        // openssl returns non-zero if cert expires within checkSeconds
+        // Try to get the actual expiry date for the error message
+        try {
+            const expiryOutput = (0, child_process_1.execSync)('openssl x509 -enddate -noout -in "' + certPath + '"', {
+                encoding: 'utf8',
+            });
+            const expiryMatch = expiryOutput.match(/notAfter=(.+)/);
+            if (expiryMatch && expiryMatch[1]) {
+                const expiryDate = new Date(expiryMatch[1]);
+                const daysUntilExpiry = Math.floor((expiryDate.getTime() - Date.now()) / (1000 * 60 * 60 * 24));
+                return {
+                    exists: true,
+                    valid: false,
+                    expiresInDays: daysUntilExpiry,
+                    error: 'Certificate expiring in ' + daysUntilExpiry + ' days',
+                };
+            }
+        }
+        catch {
+            // Ignore nested error
+        }
+        return { exists: true, valid: false, error: 'Certificate expiring soon or invalid' };
+    }
+}
+/**
+ * Check if nginx container is running
+ *
+ * @returns true if factiii_nginx container is running
+ */
+function isNginxRunning() {
+    try {
+        const output = (0, child_process_1.execSync)('docker ps --filter name=factiii_nginx --format "{{.Names}}"', {
+            encoding: 'utf8',
+        });
+        return output.trim() === 'factiii_nginx';
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=ssl-cert-helper.js.map

package/dist/scanfix/ssl-cert-helper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssl-cert-helper.js","sourceRoot":"","sources":["../../src/scanfix/ssl-cert-helper.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmBH,4CAqDC;AAOD,wCASC;AAtFD,iDAAyC;AACzC,uCAAyB;AASzB;;;;;;GAMG;AACH,SAAgB,gBAAgB,CAAC,MAAc,EAAE,WAAmB,CAAC;IACnE,MAAM,QAAQ,GAAG,wBAAwB,GAAG,MAAM,GAAG,gBAAgB,CAAC;IAEtE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACzC,CAAC;IAED,IAAI,CAAC;QACH,oDAAoD;QACpD,MAAM,YAAY,GAAG,QAAQ,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;QAC7C,IAAA,wBAAQ,EAAC,yBAAyB,GAAG,YAAY,GAAG,eAAe,GAAG,QAAQ,GAAG,GAAG,EAAE;YACpF,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC;QAEH,qCAAqC;QACrC,MAAM,YAAY,GAAG,IAAA,wBAAQ,EAAC,oCAAoC,GAAG,QAAQ,GAAG,GAAG,EAAE;YACnF,QAAQ,EAAE,MAAM;SACjB,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QACxD,IAAI,WAAW,IAAI,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;YAClC,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5C,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAChC,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAC5D,CAAC;YACF,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,eAAe,EAAE,CAAC;QACvE,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,+DAA+D;QAC/D,0DAA0D;QAC1D,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,IAAA,wBAAQ,EAAC,oCAAoC,GAAG,QAAQ,GAAG,GAAG,EAAE;gBACnF,QAAQ,EAAE,MAAM;aACjB,CAAC,CAAC;YACH,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;YACxD,IAAI,WAAW,IAAI,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClC,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC5C,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAChC,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAC5D,CAAC;gBACF,OAAO;oBACL,MAAM,EAAE,IAAI;oBACZ,KAAK,EAAE,KAAK;oBACZ,aAAa,EAAE,eAAe;oBAC9B,KAAK,EAAE,0BAA0B,GAAG,eAAe,GAAG,OAAO;iBAC9D,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,sBAAsB;QACxB,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC;IACvF,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAgB,cAAc;IAC5B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAA,wBAAQ,EAAC,6DAA6D,EAAE;YACrF,QAAQ,EAAE,MAAM;SACjB,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,EAAE,KAAK,eAAe,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/scanfix/types.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Scanfix Types
+ *
+ * Types for the shared scanfix library.
+ */
+/**
+ * Supported platforms for scanfix commands
+ */
+export type Platform = 'mac' | 'ubuntu' | 'windows';
+/**
+ * Platform-specific command set for a tool
+ */
+export interface PlatformCommands {
+    /** Command to check if tool is installed */
+    check: string;
+    /** Command to install (undefined if manual only) */
+    install?: string;
+    /** Command to start (for services like Docker) */
+    start?: string;
+    /** Human-readable instructions for manual fix */
+    manualFix: string;
+}
+/**
+ * Tool command sets indexed by platform
+ */
+export type ToolCommands = Record<Platform, PlatformCommands>;
+//# sourceMappingURL=types.d.ts.map

package/dist/scanfix/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/scanfix/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;GAEG;AACH,MAAM,MAAM,QAAQ,GAAG,KAAK,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEpD;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,4CAA4C;IAC5C,KAAK,EAAE,MAAM,CAAC;IACd,oDAAoD;IACpD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kDAAkD;IAClD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iDAAiD;IACjD,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC"}

package/dist/scanfix/types.js

@@ -0,0 +1,8 @@
+"use strict";
+/**
+ * Scanfix Types
+ *
+ * Types for the shared scanfix library.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/scanfix/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/scanfix/types.ts"],"names":[],"mappings":";AAAA;;;;GAIG"}

package/dist/scripts/check-existing-secrets.d.ts

@@ -0,0 +1,6 @@
+#!/usr/bin/env node
+/**
+ * Checks for existing GitHub secrets
+ */
+export {};
+//# sourceMappingURL=check-existing-secrets.d.ts.map

package/dist/scripts/check-existing-secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-existing-secrets.d.ts","sourceRoot":"","sources":["../../src/scripts/check-existing-secrets.ts"],"names":[],"mappings":";AAEA;;GAEG"}

package/dist/scripts/check-existing-secrets.js

@@ -0,0 +1,86 @@
+#!/usr/bin/env node
+"use strict";
+/**
+ * Checks for existing GitHub secrets
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const fs = __importStar(require("fs"));
+const rest_1 = require("@octokit/rest");
+async function checkExisting() {
+    const octokit = new rest_1.Octokit({ auth: process.env.GITHUB_TOKEN });
+    const githubRepository = process.env.GITHUB_REPOSITORY;
+    if (!githubRepository) {
+        console.log('❌ GITHUB_REPOSITORY not set');
+        process.exit(1);
+    }
+    const [owner, repo] = githubRepository.split('/');
+    if (!owner || !repo) {
+        console.log('❌ Invalid GITHUB_REPOSITORY format');
+        process.exit(1);
+    }
+    try {
+        // Check secrets
+        const { data: secrets } = await octokit.rest.actions.listRepoSecrets({
+            owner,
+            repo,
+            per_page: 100,
+        });
+        const secretNames = secrets.secrets.map((s) => s.name);
+        // Check variables
+        const { data: variables } = await octokit.rest.actions.listRepoVariables({
+            owner,
+            repo,
+            per_page: 100,
+        });
+        const variableNames = variables.variables.map((v) => v.name);
+        const hasStaging = secretNames.includes('STAGING_ENVS') || variableNames.includes('STAGING_ENVS');
+        const hasProd = secretNames.includes('PROD_ENVS');
+        console.log('📊 GitHub Secrets/Variables Status:');
+        console.log('   STAGING_ENVS: ' + (hasStaging ? '✅ Exists' : '⚠️  Not found'));
+        console.log('   PROD_ENVS: ' + (hasProd ? '✅ Exists' : '⚠️  Not found'));
+        const githubOutput = process.env.GITHUB_OUTPUT;
+        if (githubOutput) {
+            fs.appendFileSync(githubOutput, 'staging-exists-gh=' + hasStaging + '\n' + 'prod-exists-gh=' + hasProd + '\n');
+        }
+    }
+    catch (error) {
+        const errorMessage = error instanceof Error ? error.message : String(error);
+        console.log('❌ Failed to check existing secrets:', errorMessage);
+        process.exit(1);
+    }
+}
+checkExisting();
+//# sourceMappingURL=check-existing-secrets.js.map

package/dist/scripts/check-existing-secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-existing-secrets.js","sourceRoot":"","sources":["../../src/scripts/check-existing-secrets.ts"],"names":[],"mappings":";;AAEA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,uCAAyB;AACzB,wCAAwC;AAUxC,KAAK,UAAU,aAAa;IAC1B,MAAM,OAAO,GAAG,IAAI,cAAO,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC;IAChE,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAEvD,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;QAC3C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAElD,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;QAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,CAAC;QACH,gBAAgB;QAChB,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC;YACnE,KAAK;YACL,IAAI;YACJ,QAAQ,EAAE,GAAG;SACd,CAAC,CAAC;QACH,MAAM,WAAW,GAAI,OAAO,CAAC,OAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAErE,kBAAkB;QAClB,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC;YACvE,KAAK;YACL,IAAI;YACJ,QAAQ,EAAE,GAAG;SACd,CAAC,CAAC;QACH,MAAM,aAAa,GAAI,SAAS,CAAC,SAAwB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAE7E,MAAM,UAAU,GACd,WAAW,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,aAAa,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QACjF,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAElD,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;QAC/E,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;QAEzE,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;QAC/C,IAAI,YAAY,EAAE,CAAC;YACjB,EAAE,CAAC,cAAc,CACf,YAAY,EACZ,oBAAoB,GAAG,UAAU,GAAG,IAAI,GAAG,iBAAiB,GAAG,OAAO,GAAG,IAAI,CAC9E,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5E,OAAO,CAAC,GAAG,CAAC,qCAAqC,EAAE,YAAY,CAAC,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,aAAa,EAAE,CAAC"}

package/dist/scripts/generate-all.d.ts

@@ -0,0 +1,40 @@
+#!/usr/bin/env node
+/**
+ * Server-side script: generate-all.js
+ *
+ * Scans all repos in ~/.factiii/* and regenerates:
+ * - docker-compose.yml (unified services from all repos)
+ * - nginx.conf (routes for all domains)
+ *
+ * Run on server after git pull to sync deployed configs with source
+ */
+import type { FactiiiConfig } from '../types/index.js';
+interface RepoInfo {
+    name: string;
+    path: string;
+    configPath: string;
+}
+/**
+ * Scan ~/.factiii for repo directories
+ */
+export declare function scanRepos(): RepoInfo[];
+/**
+ * Load configs from all repos
+ */
+export declare function loadConfigs(repos: RepoInfo[]): Record<string, FactiiiConfig>;
+/**
+ * Generate docker-compose.yml from all repos' configs
+ */
+export declare function generateDockerCompose(allConfigs: Record<string, FactiiiConfig>): number;
+/**
+ * Generate nginx.conf from all repos' configs
+ *
+ * ACME-Compatible: If SSL certificates don't exist for a domain, nginx
+ * is configured with HTTP-only proxy (no HTTPS redirect). This allows:
+ * 1. Nginx to start without SSL certificates
+ * 2. Certbot to complete ACME challenge on port 80
+ * 3. After certs are obtained, re-run deploy to enable HTTPS
+ */
+export declare function generateNginx(allConfigs: Record<string, FactiiiConfig>): number;
+export {};
+//# sourceMappingURL=generate-all.d.ts.map

package/dist/scripts/generate-all.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate-all.d.ts","sourceRoot":"","sources":["../../src/scripts/generate-all.ts"],"names":[],"mappings":";AAEA;;;;;;;;GAQG;AAMH,OAAO,KAAK,EAAE,aAAa,EAAqB,MAAM,mBAAmB,CAAC;AAG1E,UAAU,QAAQ;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;CACpB;AA0CD;;GAEG;AACH,wBAAgB,SAAS,IAAI,QAAQ,EAAE,CAoCtC;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAiB5E;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,GAAG,MAAM,CAwGvF;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,GAAG,MAAM,CA6H/E"}