@factiii/stack 0.1.2

package/dist/types/plugin.d.ts

@@ -0,0 +1,352 @@
+/**
+ * Plugin Types
+ *
+ * Types for the Factiii plugin system.
+ */
+import type { FactiiiConfig } from './config.js';
+import type { DeployOptions } from './cli.js';
+/**
+ * Deployment stages
+ */
+export type Stage = 'dev' | 'secrets' | 'staging' | 'prod';
+/**
+ * Server OS types
+ * Used to identify which operating system a server runs
+ */
+export type ServerOS = 'mac' | 'ubuntu' | 'windows' | 'amazon-linux' | 'alpine';
+/**
+ * Package managers by OS
+ */
+export type PackageManager = 'brew' | 'apt' | 'choco' | 'winget' | 'dnf' | 'apk';
+/**
+ * Service managers by OS
+ */
+export type ServiceManager = 'launchctl' | 'systemd' | 'windows-service';
+/**
+ * Fix severity levels
+ */
+export type Severity = 'critical' | 'warning' | 'info';
+/**
+ * How a stage can be reached
+ */
+export type ReachVia = 'local' | 'ssh' | 'workflow' | 'api' | 'github-api';
+/**
+ * Reachability check result - discriminated union for type safety
+ */
+export type Reachability = {
+    reachable: true;
+    via: ReachVia;
+} | {
+    reachable: false;
+    reason: string;
+};
+/**
+ * Prod safety levels for plugin commands
+ */
+export type ProdSafetyLevel = 'safe' | 'caution' | 'destructive';
+/**
+ * Command categories for grouping in help
+ */
+export type CommandCategory = 'db' | 'ops' | 'backup';
+/**
+ * Command option definition
+ */
+export interface CommandOption {
+    flags: string;
+    description: string;
+    defaultValue?: string | boolean | string[];
+}
+/**
+ * Result of a plugin command execution
+ */
+export interface CommandResult {
+    success: boolean;
+    message?: string;
+    error?: string;
+}
+/**
+ * Plugin command definition
+ */
+export interface PluginCommand {
+    /** Command name (e.g., 'seed', 'migrate') */
+    name: string;
+    /** Human-readable description */
+    description: string;
+    /** Category for grouping */
+    category: CommandCategory;
+    /** Which stages this command supports (default: ['dev', 'staging', 'prod']) */
+    stages?: Stage[];
+    /** Safety level on prod - 'destructive' requires --force */
+    prodSafety: ProdSafetyLevel;
+    /** Command-specific options */
+    options?: CommandOption[];
+    /** Execute the command */
+    execute: (stage: Stage, options: Record<string, unknown>, config: FactiiiConfig, rootDir: string) => Promise<CommandResult>;
+}
+/**
+ * A fix definition that can detect and resolve issues
+ */
+export interface Fix {
+    id: string;
+    stage: Stage;
+    severity: Severity;
+    description: string;
+    plugin?: string;
+    /** Optional: Only run this fix on specific OS types */
+    os?: ServerOS | ServerOS[];
+    scan: (config: FactiiiConfig, rootDir: string) => Promise<boolean>;
+    fix?: ((config: FactiiiConfig, rootDir: string) => Promise<boolean>) | null;
+    manualFix: string;
+}
+/**
+ * Plugin categories
+ */
+export type PluginCategory = 'pipeline' | 'server' | 'framework' | 'addon';
+/**
+ * Plugin metadata for listing
+ */
+export interface PluginMetadata {
+    id: string;
+    category: string;
+    name: string;
+    version: string;
+}
+/**
+ * Result of a deploy/undeploy operation
+ */
+export interface DeployResult {
+    success: boolean;
+    message?: string;
+    error?: string;
+}
+/**
+ * Options for ensuring server is ready
+ */
+export interface EnsureServerReadyOptions {
+    commitHash?: string;
+    branch?: string;
+    repoUrl?: string;
+}
+/**
+ * SSH command result
+ */
+export interface SSHResult {
+    success: boolean;
+    output?: string;
+    error?: string;
+}
+/**
+ * Server software check results
+ */
+export interface ServerSoftwareChecks {
+    git: boolean;
+    docker: boolean;
+    dockerCompose: boolean;
+    node: boolean;
+}
+/**
+ * Server environment detection result
+ */
+export interface ServerEnvironment {
+    os: ServerOS | 'unknown';
+    packageManager: PackageManager | null;
+    hasHomebrew: boolean;
+    hasApt: boolean;
+    hasYum: boolean;
+    hasDnf: boolean;
+    hasChoco: boolean;
+    hasApk: boolean;
+}
+/**
+ * Server dependency installation results
+ */
+export interface DependencyInstallResult {
+    needed: boolean;
+    installed: boolean;
+    error: string | null;
+}
+/**
+ * Server dependencies installation results
+ */
+export interface InstallDependenciesResult {
+    success: boolean;
+    error?: string;
+    serverEnv?: ServerEnvironment;
+    results: {
+        node: DependencyInstallResult;
+        git: DependencyInstallResult;
+        docker: DependencyInstallResult;
+        pnpm: DependencyInstallResult;
+    };
+}
+/**
+ * Server connectivity check result
+ */
+export interface ConnectivityResult {
+    ssh: boolean;
+    error?: string;
+}
+/**
+ * Repository check result
+ */
+export interface RepoCheckResult {
+    exists: boolean;
+    branch?: string;
+}
+/**
+ * Config validation result on server
+ */
+export interface ConfigValidationResult {
+    expectedServices: number;
+    actualServices: number;
+    nginxMatches: boolean | null;
+    dockerComposeUpToDate: boolean | null;
+}
+/**
+ * Comprehensive server scan result
+ */
+export interface ServerScanResult {
+    environment: string;
+    ssh: boolean;
+    git: boolean;
+    docker: boolean;
+    dockerCompose: boolean;
+    node: boolean;
+    repo: boolean;
+    branch: string | null;
+    repoName: string;
+    configValidation: ConfigValidationResult | null;
+    error?: string;
+}
+/**
+ * Server basics setup result
+ */
+export interface ServerBasicsResult {
+    gitInstalled: boolean;
+    dockerInstalled: boolean;
+    repoCloned: boolean;
+    repoExists: boolean;
+    configMismatch: boolean;
+}
+/**
+ * Base interface for all plugin classes (static side)
+ */
+export interface PluginStatic {
+    readonly id: string;
+    readonly name: string;
+    readonly category: PluginCategory;
+    readonly version: string;
+    readonly fixes: Fix[];
+    readonly requiredEnvVars: string[];
+    readonly configSchema: Record<string, unknown>;
+    readonly autoConfigSchema: Record<string, string>;
+    shouldLoad(rootDir: string, config: FactiiiConfig): Promise<boolean>;
+    detectConfig?(rootDir: string): Promise<Record<string, unknown>>;
+}
+/**
+ * Base interface for plugin instances
+ */
+export interface PluginInstance {
+    config: FactiiiConfig;
+    deploy(config: FactiiiConfig, environment: string): Promise<DeployResult>;
+    undeploy(config: FactiiiConfig, environment: string): Promise<DeployResult>;
+}
+/**
+ * Pipeline plugin static interface
+ */
+export interface PipelinePluginStatic extends PluginStatic {
+    readonly category: 'pipeline';
+    readonly commands?: PluginCommand[];
+    canReach(stage: Stage, config: FactiiiConfig): Reachability;
+    requiresFullRepo?(environment: string): boolean;
+    generateWorkflows?(rootDir: string): Promise<void>;
+    triggerWorkflow?(workflowName: string, inputs?: Record<string, string>): Promise<void>;
+}
+/**
+ * Pipeline plugin instance interface
+ */
+export interface PipelinePluginInstance extends PluginInstance {
+    /**
+     * Deploy to a stage - handles routing based on canReach()
+     *
+     * This is the main entry point for deployments. The pipeline plugin
+     * checks canReach() to determine how to reach the stage:
+     * - 'local': Execute deployment directly
+     * - 'workflow': Trigger a workflow (e.g., GitHub Actions)
+     * - Not reachable: Return error with reason
+     */
+    deployStage(stage: Stage, options: DeployOptions): Promise<DeployResult>;
+    /**
+     * Scan a stage - handles routing based on canReach()
+     *
+     * Returns { handled: true } if pipeline ran scan remotely (via SSH or workflow).
+     * Returns { handled: false } if caller should run scan locally.
+     */
+    scanStage(stage: Stage, options: Record<string, unknown>): Promise<{
+        handled: boolean;
+    }>;
+    /**
+     * Fix a stage - handles routing based on canReach()
+     *
+     * Returns { handled: true } if pipeline ran fix remotely (via SSH or workflow).
+     * Returns { handled: false } if caller should run fix locally.
+     */
+    fixStage(stage: Stage, options: Record<string, unknown>): Promise<{
+        handled: boolean;
+    }>;
+}
+/**
+ * Server plugin static interface
+ *
+ * Server plugins represent OS types (mac, ubuntu, windows, etc.)
+ * and handle OS-specific package management and commands.
+ */
+export interface ServerPluginStatic extends PluginStatic {
+    readonly category: 'server';
+    /** The OS this server plugin handles */
+    readonly os: ServerOS;
+    /** Package manager for this OS */
+    readonly packageManager: PackageManager;
+    /** Service manager for this OS */
+    readonly serviceManager: ServiceManager;
+    sshExec?(envConfig: {
+        host: string;
+        ssh_user?: string;
+    }, command: string): Promise<string>;
+}
+/**
+ * Server plugin instance interface
+ */
+export interface ServerPluginInstance extends PluginInstance {
+    ensureServerReady(config: FactiiiConfig, environment: string, options?: EnsureServerReadyOptions): Promise<DeployResult>;
+}
+/**
+ * Framework plugin static interface
+ */
+export interface FrameworkPluginStatic extends PluginStatic {
+    readonly category: 'framework';
+}
+/**
+ * Addon plugin static interface
+ */
+export interface AddonPluginStatic extends PluginStatic {
+    readonly category: 'addon';
+}
+/**
+ * Union type for any plugin class
+ */
+export type AnyPluginStatic = PipelinePluginStatic | ServerPluginStatic | FrameworkPluginStatic | AddonPluginStatic;
+/**
+ * Constructor type for plugin classes
+ */
+export interface PluginConstructor<T extends PluginInstance = PluginInstance> {
+    new (config: FactiiiConfig): T;
+    readonly id: string;
+    readonly name: string;
+    readonly category: PluginCategory;
+    readonly version: string;
+    readonly fixes: Fix[];
+    readonly requiredEnvVars: string[];
+    shouldLoad(rootDir: string, config: FactiiiConfig): Promise<boolean>;
+}
+//# sourceMappingURL=plugin.d.ts.map

package/dist/types/plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../src/types/plugin.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAE9C;;GAEG;AACH,MAAM,MAAM,KAAK,GAAG,KAAK,GAAG,SAAS,GAAG,SAAS,GAAG,MAAM,CAAC;AAE3D;;;GAGG;AACH,MAAM,MAAM,QAAQ,GAAG,KAAK,GAAG,QAAQ,GAAG,SAAS,GAAG,cAAc,GAAG,QAAQ,CAAC;AAEhF;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,GAAG,KAAK,GAAG,KAAK,CAAC;AAEjF;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,WAAW,GAAG,SAAS,GAAG,iBAAiB,CAAC;AAEzE;;GAEG;AACH,MAAM,MAAM,QAAQ,GAAG,UAAU,GAAG,SAAS,GAAG,MAAM,CAAC;AAEvD;;GAEG;AACH,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,KAAK,GAAG,UAAU,GAAG,KAAK,GAAG,YAAY,CAAC;AAE3E;;GAEG;AACH,MAAM,MAAM,YAAY,GACpB;IAAE,SAAS,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,QAAQ,CAAA;CAAE,GAClC;IAAE,SAAS,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzC;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,SAAS,GAAG,aAAa,CAAC;AAEjE;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,IAAI,GAAG,KAAK,GAAG,QAAQ,CAAC;AAEtD;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,EAAE,CAAC;CAC5C;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,6CAA6C;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,4BAA4B;IAC5B,QAAQ,EAAE,eAAe,CAAC;IAC1B,+EAA+E;IAC/E,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC;IACjB,4DAA4D;IAC5D,UAAU,EAAE,eAAe,CAAC;IAC5B,+BAA+B;IAC/B,OAAO,CAAC,EAAE,aAAa,EAAE,CAAC;IAC1B,0BAA0B;IAC1B,OAAO,EAAE,CACP,KAAK,EAAE,KAAK,EACZ,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,MAAM,KACZ,OAAO,CAAC,aAAa,CAAC,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,GAAG;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,KAAK,CAAC;IACb,QAAQ,EAAE,QAAQ,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uDAAuD;IACvD,EAAE,CAAC,EAAE,QAAQ,GAAG,QAAQ,EAAE,CAAC;IAC3B,IAAI,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACnE,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAC5E,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,QAAQ,GAAG,WAAW,GAAG,OAAO,CAAC;AAE3E;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,OAAO,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,OAAO,CAAC;IACvB,IAAI,EAAE,OAAO,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,QAAQ,GAAG,SAAS,CAAC;IACzB,cAAc,EAAE,cAAc,GAAG,IAAI,CAAC;IACtC,WAAW,EAAE,OAAO,CAAC;IACrB,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAC9B,OAAO,EAAE;QACP,IAAI,EAAE,uBAAuB,CAAC;QAC9B,GAAG,EAAE,uBAAuB,CAAC;QAC7B,MAAM,EAAE,uBAAuB,CAAC;QAChC,IAAI,EAAE,uBAAuB,CAAC;KAC/B,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,OAAO,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,OAAO,GAAG,IAAI,CAAC;IAC7B,qBAAqB,EAAE,OAAO,GAAG,IAAI,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,OAAO,CAAC;IACb,GAAG,EAAE,OAAO,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,OAAO,CAAC;IACvB,IAAI,EAAE,OAAO,CAAC;IACd,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAChD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,OAAO,CAAC;IACtB,eAAe,EAAE,OAAO,CAAC;IACzB,UAAU,EAAE,OAAO,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;IACpB,cAAc,EAAE,OAAO,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;IACtB,QAAQ,CAAC,eAAe,EAAE,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/C,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAElD,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrE,YAAY,CAAC,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAClE;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,aAAa,CAAC;IACtB,MAAM,CAAC,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAC1E,QAAQ,CAAC,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CAC7E;AAED;;GAEG;AACH,MAAM,WAAW,oBAAqB,SAAQ,YAAY;IACxD,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,GAAG,YAAY,CAAC;IAC5D,gBAAgB,CAAC,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;IAChD,iBAAiB,CAAC,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,eAAe,CAAC,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxF;AAED;;GAEG;AACH,MAAM,WAAW,sBAAuB,SAAQ,cAAc;IAC5D;;;;;;;;OAQG;IACH,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAEzE;;;;;OAKG;IACH,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAEzF;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CACzF;AAED;;;;;GAKG;AACH,MAAM,WAAW,kBAAmB,SAAQ,YAAY;IACtD,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,wCAAwC;IACxC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC;IACtB,kCAAkC;IAClC,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,kCAAkC;IAClC,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,OAAO,CAAC,CAAC,SAAS,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC5F;AAED;;GAEG;AACH,MAAM,WAAW,oBAAqB,SAAQ,cAAc;IAC1D,iBAAiB,CACf,MAAM,EAAE,aAAa,EACrB,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE,wBAAwB,GACjC,OAAO,CAAC,YAAY,CAAC,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,qBAAsB,SAAQ,YAAY;IACzD,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,iBAAkB,SAAQ,YAAY;IACrD,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,MAAM,eAAe,GACvB,oBAAoB,GACpB,kBAAkB,GAClB,qBAAqB,GACrB,iBAAiB,CAAC;AAEtB;;GAEG;AACH,MAAM,WAAW,iBAAiB,CAAC,CAAC,SAAS,cAAc,GAAG,cAAc;IAC1E,KAAK,MAAM,EAAE,aAAa,GAAG,CAAC,CAAC;IAC/B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;IACtB,QAAQ,CAAC,eAAe,EAAE,MAAM,EAAE,CAAC;IACnC,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACtE"}

package/dist/types/plugin.js

@@ -0,0 +1,8 @@
+"use strict";
+/**
+ * Plugin Types
+ *
+ * Types for the Factiii plugin system.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=plugin.js.map

package/dist/types/plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../../src/types/plugin.ts"],"names":[],"mappings":";AAAA;;;;GAIG"}

package/dist/utils/ansible-vault-secrets.d.ts

@@ -0,0 +1,95 @@
+/**
+ * Ansible Vault Secrets
+ *
+ * Read, write, and check secrets stored in an Ansible Vault–encrypted YAML file.
+ * Used by the secrets CLI and pipeline secrets stage. Requires ansible-vault on PATH.
+ */
+export interface AnsibleVaultSecretsConfig {
+    /** Path to the vault file (relative to rootDir or absolute) */
+    vault_path: string;
+    /** Optional path to file containing vault password */
+    vault_password_file?: string;
+    /** Root directory for resolving relative vault_path */
+    rootDir?: string;
+}
+export interface SetSecretResult {
+    success: boolean;
+    error?: string;
+}
+export interface CheckSecretsResult {
+    status?: Record<string, boolean>;
+    missing?: string[];
+    error?: string;
+}
+/**
+ * Vault content structure supporting nested environment secrets
+ */
+export interface VaultContent {
+    STAGING_SSH?: string;
+    PROD_SSH?: string;
+    AWS_SECRET_ACCESS_KEY?: string;
+    staging_envs?: Record<string, string>;
+    prod_envs?: Record<string, string>;
+    [key: string]: string | Record<string, string> | undefined;
+}
+/**
+ * Ansible Vault–backed secret operations.
+ * Uses ansible-vault view/encrypt; vault password from config or ANSIBLE_VAULT_PASSWORD_FILE / ANSIBLE_VAULT_PASSWORD.
+ */
+export declare class AnsibleVaultSecrets {
+    private config;
+    constructor(config: AnsibleVaultSecretsConfig);
+    /**
+     * Ensure vault file exists; if not, create an empty encrypted file
+     */
+    private ensureVaultExists;
+    /**
+     * Get decrypted vault content as key-value object (flat, for backwards compatibility)
+     */
+    private getDecrypted;
+    /**
+     * Get decrypted vault content as full structure (supports nested objects)
+     */
+    private getDecryptedFull;
+    /**
+     * Save vault content (full structure)
+     */
+    private saveVault;
+    /**
+     * Set a secret in the vault file
+     */
+    setSecret(name: string, value: string): Promise<SetSecretResult>;
+    /**
+     * Get a secret value from the vault
+     */
+    getSecret(name: string): Promise<string | null>;
+    /**
+     * Check which of the given secret names exist in the vault
+     */
+    checkSecrets(names: string[]): Promise<CheckSecretsResult>;
+    /**
+     * Get SSH key for a stage
+     */
+    getSSHKey(stage: 'staging' | 'prod'): Promise<string | null>;
+    /**
+     * Get all environment secrets for a stage
+     */
+    getEnvironmentSecrets(stage: 'staging' | 'prod'): Promise<Record<string, string>>;
+    /**
+     * Set an environment secret for a stage
+     */
+    setEnvironmentSecret(stage: 'staging' | 'prod', name: string, value: string): Promise<SetSecretResult>;
+    /**
+     * Set multiple environment secrets for a stage at once
+     */
+    setEnvironmentSecrets(stage: 'staging' | 'prod', secrets: Record<string, string>): Promise<SetSecretResult>;
+    /**
+     * List all environment secret keys for a stage (not values)
+     */
+    listEnvironmentSecretKeys(stage: 'staging' | 'prod'): Promise<string[]>;
+    /**
+     * Check if environment secrets exist for a stage
+     */
+    hasEnvironmentSecrets(stage: 'staging' | 'prod'): Promise<boolean>;
+}
+//# sourceMappingURL=ansible-vault-secrets.d.ts.map

package/dist/utils/ansible-vault-secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ansible-vault-secrets.d.ts","sourceRoot":"","sources":["../../src/utils/ansible-vault-secrets.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH,MAAM,WAAW,yBAAyB;IACxC,+DAA+D;IAC/D,UAAU,EAAE,MAAM,CAAC;IACnB,sDAAsD;IACtD,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,uDAAuD;IACvD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AA0ID;;GAEG;AACH,MAAM,WAAW,YAAY;IAE3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAE/B,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEnC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;CAC5D;AAYD;;;GAGG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,MAAM,CAA4B;gBAE9B,MAAM,EAAE,yBAAyB;IAO7C;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAczB;;OAEG;YACW,YAAY;IAO1B;;OAEG;YACW,gBAAgB;IAO9B;;OAEG;YACW,SAAS;IAwBvB;;OAEG;IACG,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAiBtE;;OAEG;IACG,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAUrD;;OAEG;IACG,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAwBhE;;OAEG;IACG,SAAS,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAKlE;;OAEG;IACG,qBAAqB,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAevF;;OAEG;IACG,oBAAoB,CACxB,KAAK,EAAE,SAAS,GAAG,MAAM,EACzB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,eAAe,CAAC;IAqB3B;;OAEG;IACG,qBAAqB,CACzB,KAAK,EAAE,SAAS,GAAG,MAAM,EACzB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC9B,OAAO,CAAC,eAAe,CAAC;IAsB3B;;OAEG;IACG,yBAAyB,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAK7E;;OAEG;IACG,qBAAqB,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAIzE"}