@factiii/stack 0.1.2

package/dist/utils/ansible-vault-secrets.js

@@ -0,0 +1,406 @@
+"use strict";
+/**
+ * Ansible Vault Secrets
+ *
+ * Read, write, and check secrets stored in an Ansible Vault–encrypted YAML file.
+ * Used by the secrets CLI and pipeline secrets stage. Requires ansible-vault on PATH.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AnsibleVaultSecrets = void 0;
+const child_process_1 = require("child_process");
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const os = __importStar(require("os"));
+const js_yaml_1 = __importDefault(require("js-yaml"));
+function getVaultPasswordFile(config) {
+    if (config.vault_password_file) {
+        const expanded = config.vault_password_file.replace(/^~/, os.homedir());
+        if (fs.existsSync(expanded))
+            return expanded;
+    }
+    const envFile = process.env.ANSIBLE_VAULT_PASSWORD_FILE;
+    if (envFile) {
+        const expanded = envFile.replace(/^~/, os.homedir());
+        if (fs.existsSync(expanded))
+            return expanded;
+    }
+    return undefined;
+}
+function getVaultPassword() {
+    return process.env.ANSIBLE_VAULT_PASSWORD ?? undefined;
+}
+/**
+ * Resolve vault file path (absolute)
+ */
+function resolveVaultPath(config) {
+    const p = config.vault_path.replace(/^~/, os.homedir());
+    if (path.isAbsolute(p))
+        return p;
+    const root = config.rootDir ?? process.cwd();
+    return path.join(root, p);
+}
+/**
+ * Get path to vault password (file or temp file with env password)
+ */
+function getVaultPasswordFileForExec(config) {
+    const file = getVaultPasswordFile(config);
+    if (file)
+        return file;
+    const pass = getVaultPassword();
+    if (pass) {
+        const tmp = path.join(os.tmpdir(), `factiii-vault-pass-${Date.now()}`);
+        fs.writeFileSync(tmp, pass, 'utf8');
+        return tmp;
+    }
+    throw new Error('Vault password required. Set ansible.vault_password_file in factiii.yml, or ANSIBLE_VAULT_PASSWORD_FILE / ANSIBLE_VAULT_PASSWORD env.');
+}
+/**
+ * Run ansible-vault view to get decrypted content
+ */
+function vaultView(vaultPath, config) {
+    const passFile = getVaultPasswordFileForExec(config);
+    const isTempFile = passFile.startsWith(os.tmpdir());
+    try {
+        // Escape path for shell (handle spaces and special chars)
+        const escapedVaultPath = vaultPath.replace(/"/g, '\\"');
+        const escapedPassFile = passFile.replace(/"/g, '\\"');
+        const result = (0, child_process_1.execSync)(`ansible-vault view "${escapedVaultPath}" --vault-password-file "${escapedPassFile}"`, { encoding: 'utf8', stdio: ['pipe', 'pipe', 'pipe'] });
+        // Cleanup temp password file if we created it
+        if (isTempFile && fs.existsSync(passFile)) {
+            try {
+                fs.unlinkSync(passFile);
+            }
+            catch {
+                // ignore cleanup errors
+            }
+        }
+        return result;
+    }
+    catch (e) {
+        // Cleanup temp password file on error
+        if (isTempFile && fs.existsSync(passFile)) {
+            try {
+                fs.unlinkSync(passFile);
+            }
+            catch {
+                // ignore cleanup errors
+            }
+        }
+        const msg = e instanceof Error ? e.message : String(e);
+        throw new Error(`Ansible Vault view failed: ${msg}`);
+    }
+}
+/**
+ * Run ansible-vault encrypt to encrypt a file to output path
+ */
+function vaultEncrypt(inputPath, outputPath, config) {
+    const passFile = getVaultPasswordFileForExec(config);
+    const isTempFile = passFile.startsWith(os.tmpdir());
+    try {
+        // Escape paths for shell (handle spaces and special chars)
+        const escapedInputPath = inputPath.replace(/"/g, '\\"');
+        const escapedOutputPath = outputPath.replace(/"/g, '\\"');
+        const escapedPassFile = passFile.replace(/"/g, '\\"');
+        (0, child_process_1.execSync)(`ansible-vault encrypt "${escapedInputPath}" --output="${escapedOutputPath}" --vault-password-file "${escapedPassFile}"`, { encoding: 'utf8', stdio: ['pipe', 'pipe', 'pipe'] });
+    }
+    catch (e) {
+        const msg = e instanceof Error ? e.message : String(e);
+        throw new Error(`Ansible Vault encrypt failed: ${msg}`);
+    }
+    finally {
+        // Cleanup temp password file if we created it
+        if (isTempFile && fs.existsSync(passFile)) {
+            try {
+                fs.unlinkSync(passFile);
+            }
+            catch {
+                // ignore cleanup errors
+            }
+        }
+    }
+}
+/**
+ * Parse decrypted vault content as YAML (flat key-value for backwards compatibility)
+ */
+function parseVaultContent(content) {
+    const parsed = js_yaml_1.default.load(content);
+    if (parsed == null)
+        return {};
+    if (typeof parsed !== 'object' || Array.isArray(parsed))
+        return {};
+    const out = {};
+    for (const [k, v] of Object.entries(parsed)) {
+        if (typeof v === 'string')
+            out[k] = v;
+        else if (v != null && typeof v !== 'object')
+            out[k] = String(v);
+        // Skip nested objects in flat parsing
+    }
+    return out;
+}
+/**
+ * Parse decrypted vault content as full YAML structure (supports nested objects)
+ */
+function parseVaultContentFull(content) {
+    const parsed = js_yaml_1.default.load(content);
+    if (parsed == null)
+        return {};
+    if (typeof parsed !== 'object' || Array.isArray(parsed))
+        return {};
+    return parsed;
+}
+/**
+ * Ansible Vault–backed secret operations.
+ * Uses ansible-vault view/encrypt; vault password from config or ANSIBLE_VAULT_PASSWORD_FILE / ANSIBLE_VAULT_PASSWORD.
+ */
+class AnsibleVaultSecrets {
+    config;
+    constructor(config) {
+        this.config = {
+            rootDir: config.rootDir ?? process.cwd(),
+            ...config,
+        };
+    }
+    /**
+     * Ensure vault file exists; if not, create an empty encrypted file
+     */
+    ensureVaultExists(vaultPath) {
+        if (fs.existsSync(vaultPath))
+            return;
+        const dir = path.dirname(vaultPath);
+        if (!fs.existsSync(dir))
+            fs.mkdirSync(dir, { recursive: true });
+        const tmp = path.join(os.tmpdir(), `factiii-vault-${Date.now()}.yml`);
+        fs.writeFileSync(tmp, '# Factiii secrets\n{}\n', 'utf8');
+        vaultEncrypt(tmp, vaultPath, this.config);
+        try {
+            fs.unlinkSync(tmp);
+        }
+        catch {
+            // ignore
+        }
+    }
+    /**
+     * Get decrypted vault content as key-value object (flat, for backwards compatibility)
+     */
+    async getDecrypted() {
+        const vaultPath = resolveVaultPath(this.config);
+        if (!fs.existsSync(vaultPath))
+            return {};
+        const content = vaultView(vaultPath, this.config);
+        return parseVaultContent(content);
+    }
+    /**
+     * Get decrypted vault content as full structure (supports nested objects)
+     */
+    async getDecryptedFull() {
+        const vaultPath = resolveVaultPath(this.config);
+        if (!fs.existsSync(vaultPath))
+            return {};
+        const content = vaultView(vaultPath, this.config);
+        return parseVaultContentFull(content);
+    }
+    /**
+     * Save vault content (full structure)
+     */
+    async saveVault(data) {
+        try {
+            const vaultPath = resolveVaultPath(this.config);
+            this.ensureVaultExists(vaultPath);
+            const yamlContent = js_yaml_1.default.dump(data, { lineWidth: -1, noRefs: true });
+            const tmpPath = path.join(os.tmpdir(), `factiii-vault-edit-${Date.now()}.yml`);
+            fs.writeFileSync(tmpPath, yamlContent, 'utf8');
+            vaultEncrypt(tmpPath, vaultPath, this.config);
+            try {
+                fs.unlinkSync(tmpPath);
+            }
+            catch {
+                // ignore
+            }
+            return { success: true };
+        }
+        catch (e) {
+            return {
+                success: false,
+                error: e instanceof Error ? e.message : String(e),
+            };
+        }
+    }
+    /**
+     * Set a secret in the vault file
+     */
+    async setSecret(name, value) {
+        try {
+            const vaultPath = resolveVaultPath(this.config);
+            this.ensureVaultExists(vaultPath);
+            const data = await this.getDecryptedFull();
+            data[name] = value;
+            return this.saveVault(data);
+        }
+        catch (e) {
+            return {
+                success: false,
+                error: e instanceof Error ? e.message : String(e),
+            };
+        }
+    }
+    /**
+     * Get a secret value from the vault
+     */
+    async getSecret(name) {
+        try {
+            const data = await this.getDecrypted();
+            const v = data[name];
+            return v ?? null;
+        }
+        catch {
+            return null;
+        }
+    }
+    /**
+     * Check which of the given secret names exist in the vault
+     */
+    async checkSecrets(names) {
+        try {
+            const data = await this.getDecrypted();
+            const status = {};
+            const missing = [];
+            for (const name of names) {
+                const exists = name in data && String(data[name] ?? '').trim().length > 0;
+                status[name] = exists;
+                if (!exists)
+                    missing.push(name);
+            }
+            return { status, missing };
+        }
+        catch (e) {
+            return {
+                error: e instanceof Error ? e.message : String(e),
+                status: {},
+                missing: names,
+            };
+        }
+    }
+    // ============================================================
+    // ENVIRONMENT SECRETS - For deploy secrets feature
+    // ============================================================
+    /**
+     * Get SSH key for a stage
+     */
+    async getSSHKey(stage) {
+        const keyName = stage === 'staging' ? 'STAGING_SSH' : 'PROD_SSH';
+        return this.getSecret(keyName);
+    }
+    /**
+     * Get all environment secrets for a stage
+     */
+    async getEnvironmentSecrets(stage) {
+        try {
+            const data = await this.getDecryptedFull();
+            const envKey = `${stage}_envs`;
+            const envs = data[envKey];
+            if (typeof envs === 'object' && envs !== null && !Array.isArray(envs)) {
+                return envs;
+            }
+            return {};
+        }
+        catch {
+            return {};
+        }
+    }
+    /**
+     * Set an environment secret for a stage
+     */
+    async setEnvironmentSecret(stage, name, value) {
+        try {
+            const data = await this.getDecryptedFull();
+            const envKey = `${stage}_envs`;
+            // Initialize if not exists
+            if (!data[envKey] || typeof data[envKey] !== 'object') {
+                data[envKey] = {};
+            }
+            data[envKey][name] = value;
+            return this.saveVault(data);
+        }
+        catch (e) {
+            return {
+                success: false,
+                error: e instanceof Error ? e.message : String(e),
+            };
+        }
+    }
+    /**
+     * Set multiple environment secrets for a stage at once
+     */
+    async setEnvironmentSecrets(stage, secrets) {
+        try {
+            const data = await this.getDecryptedFull();
+            const envKey = `${stage}_envs`;
+            // Initialize if not exists
+            if (!data[envKey] || typeof data[envKey] !== 'object') {
+                data[envKey] = {};
+            }
+            // Merge secrets
+            Object.assign(data[envKey], secrets);
+            return this.saveVault(data);
+        }
+        catch (e) {
+            return {
+                success: false,
+                error: e instanceof Error ? e.message : String(e),
+            };
+        }
+    }
+    /**
+     * List all environment secret keys for a stage (not values)
+     */
+    async listEnvironmentSecretKeys(stage) {
+        const envs = await this.getEnvironmentSecrets(stage);
+        return Object.keys(envs);
+    }
+    /**
+     * Check if environment secrets exist for a stage
+     */
+    async hasEnvironmentSecrets(stage) {
+        const keys = await this.listEnvironmentSecretKeys(stage);
+        return keys.length > 0;
+    }
+}
+exports.AnsibleVaultSecrets = AnsibleVaultSecrets;
+//# sourceMappingURL=ansible-vault-secrets.js.map

package/dist/utils/ansible-vault-secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ansible-vault-secrets.js","sourceRoot":"","sources":["../../src/utils/ansible-vault-secrets.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,iDAAyC;AACzC,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAyB;AACzB,sDAA2B;AAsB3B,SAAS,oBAAoB,CAAC,MAAiC;IAC7D,IAAI,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,MAAM,CAAC,mBAAmB,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACxE,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,QAAQ,CAAC;IAC/C,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC;IACxD,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACrD,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,QAAQ,CAAC;IAC/C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,gBAAgB;IACvB,OAAO,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,SAAS,CAAC;AACzD,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,MAAiC;IACzD,MAAM,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACxD,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAC7C,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;AAC5B,CAAC;AAED;;GAEG;AACH,SAAS,2BAA2B,CAAC,MAAiC;IACpE,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAC1C,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;IAChC,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,sBAAsB,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACvE,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QACpC,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,IAAI,KAAK,CACb,uIAAuI,CACxI,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,SAAS,CAAC,SAAiB,EAAE,MAAiC;IACrE,MAAM,QAAQ,GAAG,2BAA2B,CAAC,MAAM,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;IAEpD,IAAI,CAAC;QACH,0DAA0D;QAC1D,MAAM,gBAAgB,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACxD,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAEtD,MAAM,MAAM,GAAG,IAAA,wBAAQ,EACrB,uBAAuB,gBAAgB,4BAA4B,eAAe,GAAG,EACrF,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CACtD,CAAC;QAEF,8CAA8C;QAC9C,IAAI,UAAU,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1C,IAAI,CAAC;gBACH,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,wBAAwB;YAC1B,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,sCAAsC;QACtC,IAAI,UAAU,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1C,IAAI,CAAC;gBACH,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,wBAAwB;YAC1B,CAAC;QACH,CAAC;QACD,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,EAAE,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CACnB,SAAiB,EACjB,UAAkB,EAClB,MAAiC;IAEjC,MAAM,QAAQ,GAAG,2BAA2B,CAAC,MAAM,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;IAEpD,IAAI,CAAC;QACH,2DAA2D;QAC3D,MAAM,gBAAgB,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACxD,MAAM,iBAAiB,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC1D,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAEtD,IAAA,wBAAQ,EACN,0BAA0B,gBAAgB,eAAe,iBAAiB,4BAA4B,eAAe,GAAG,EACxH,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CACtD,CAAC;IACJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,EAAE,CAAC,CAAC;IAC1D,CAAC;YAAS,CAAC;QACT,8CAA8C;QAC9C,IAAI,UAAU,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1C,IAAI,CAAC;gBACH,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,wBAAwB;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,OAAe;IACxC,MAAM,MAAM,GAAG,iBAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,MAAM,IAAI,IAAI;QAAE,OAAO,EAAE,CAAC;IAC9B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAC;IACnE,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5C,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;aACjC,IAAI,CAAC,IAAI,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QAChE,sCAAsC;IACxC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAiBD;;GAEG;AACH,SAAS,qBAAqB,CAAC,OAAe;IAC5C,MAAM,MAAM,GAAG,iBAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,MAAM,IAAI,IAAI;QAAE,OAAO,EAAE,CAAC;IAC9B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAC;IACnE,OAAO,MAAsB,CAAC;AAChC,CAAC;AAED;;;GAGG;AACH,MAAa,mBAAmB;IACtB,MAAM,CAA4B;IAE1C,YAAY,MAAiC;QAC3C,IAAI,CAAC,MAAM,GAAG;YACZ,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE;YACxC,GAAG,MAAM;SACV,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,SAAiB;QACzC,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,iBAAiB,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACtE,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,yBAAyB,EAAE,MAAM,CAAC,CAAC;QACzD,YAAY,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC;YACH,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,YAAY;QACxB,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAClD,OAAO,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,gBAAgB;QAC5B,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAClD,OAAO,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,SAAS,CAAC,IAAkB;QACxC,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAChD,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;YAElC,MAAM,WAAW,GAAG,iBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACrE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,sBAAsB,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC/E,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;YAE/C,YAAY,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAC9C,IAAI,CAAC;gBACH,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;aAClD,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,KAAa;QACzC,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAChD,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;YAElC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;YAEnB,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;aAClD,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CAAC,IAAY;QAC1B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YACvC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;YACrB,OAAO,CAAC,IAAI,IAAI,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,KAAe;QAChC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YACvC,MAAM,MAAM,GAA4B,EAAE,CAAC;YAC3C,MAAM,OAAO,GAAa,EAAE,CAAC;YAC7B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,MAAM,GAAG,IAAI,IAAI,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;gBAC1E,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC;gBACtB,IAAI,CAAC,MAAM;oBAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClC,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QAC7B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO;gBACL,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;gBACjD,MAAM,EAAE,EAAE;gBACV,OAAO,EAAE,KAAK;aACf,CAAC;QACJ,CAAC;IACH,CAAC;IAED,+DAA+D;IAC/D,mDAAmD;IACnD,+DAA+D;IAE/D;;OAEG;IACH,KAAK,CAAC,SAAS,CAAC,KAAyB;QACvC,MAAM,OAAO,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC;QACjE,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,qBAAqB,CAAC,KAAyB;QACnD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC3C,MAAM,MAAM,GAAG,GAAG,KAAK,OAA6B,CAAC;YACrD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;YAE1B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtE,OAAO,IAA8B,CAAC;YACxC,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,oBAAoB,CACxB,KAAyB,EACzB,IAAY,EACZ,KAAa;QAEb,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC3C,MAAM,MAAM,GAAG,GAAG,KAAK,OAAO,CAAC;YAE/B,2BAA2B;YAC3B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACtD,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;YACpB,CAAC;YAEA,IAAI,CAAC,MAAM,CAA4B,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;YAEvD,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;aAClD,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,qBAAqB,CACzB,KAAyB,EACzB,OAA+B;QAE/B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC3C,MAAM,MAAM,GAAG,GAAG,KAAK,OAAO,CAAC;YAE/B,2BAA2B;YAC3B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACtD,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;YACpB,CAAC;YAED,gBAAgB;YAChB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAA2B,EAAE,OAAO,CAAC,CAAC;YAE/D,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;aAClD,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,yBAAyB,CAAC,KAAyB;QACvD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;QACrD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,qBAAqB,CAAC,KAAyB;QACnD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IACzB,CAAC;CACF;AAvOD,kDAuOC"}

package/dist/utils/config-helpers.d.ts

@@ -0,0 +1,72 @@
+/**
+ * Config Helpers
+ *
+ * Helper functions for working with factiii.yml config where
+ * environments are stored as top-level keys.
+ */
+import type { FactiiiConfig, EnvironmentConfig } from '../types/index.js';
+/**
+ * Reserved top-level config keys that are NOT environments
+ * Everything else at the top level is treated as an environment
+ */
+export declare const RESERVED_CONFIG_KEYS: readonly ["name", "config_version", "github_repo", "ssl_email", "pipeline", "prisma_schema", "prisma_version", "container_exclusions", "trusted_plugins", "ansible"];
+/**
+ * Stage type definition
+ */
+export type Stage = 'dev' | 'secrets' | 'staging' | 'prod';
+/**
+ * Extract environment configs from config object
+ * Environments = any top-level key NOT in reserved list
+ *
+ * @param config - The factiii.yml config object
+ * @returns Record of environment name to environment config
+ */
+export declare function extractEnvironments(config: FactiiiConfig): Record<string, EnvironmentConfig>;
+/**
+ * Map environment name to stage
+ *
+ * Rules:
+ * - 'dev' → 'dev'
+ * - 'secrets' → 'secrets'
+ * - starts with 'staging' or 'stage-' → 'staging'
+ * - starts with 'prod' or equals 'production' → 'prod'
+ *
+ * @param envName - Environment name (e.g., 'staging2', 'prod')
+ * @returns Stage name ('dev' | 'secrets' | 'staging' | 'prod')
+ * @throws Error if environment name doesn't match any pattern
+ */
+export declare function getStageFromEnvironment(envName: string): Stage;
+/**
+ * Get all environments that match a specific stage
+ *
+ * @param config - The factiii.yml config object
+ * @param stage - Stage to filter by ('staging' | 'prod')
+ * @returns Record of environment name to environment config for matching stage
+ */
+export declare function getEnvironmentsForStage(config: FactiiiConfig, stage: Stage): Record<string, EnvironmentConfig>;
+/**
+ * Get used server plugins from config
+ * Looks at all environments and returns unique server plugin names
+ *
+ * @param config - The factiii.yml config object
+ * @returns Set of server plugin names used across all environments
+ */
+export declare function getUsedServerPlugins(config: FactiiiConfig): Set<string>;
+/**
+ * Get used plugins from config
+ * Looks at all environment plugin configs and returns unique plugin names
+ *
+ * @param config - The factiii.yml config object
+ * @returns Set of plugin names used across all environments
+ */
+export declare function getUsedPlugins(config: FactiiiConfig): Set<string>;
+/**
+ * Validate environment name
+ * Checks that environment name doesn't conflict with reserved keys
+ * and follows naming conventions
+ *
+ * @param name - Environment name to validate
+ * @returns Error message if invalid, null if valid
+ */
+export declare function validateEnvironmentName(name: string): string | null;
+//# sourceMappingURL=config-helpers.d.ts.map

package/dist/utils/config-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-helpers.d.ts","sourceRoot":"","sources":["../../src/utils/config-helpers.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAU1E;;;GAGG;AACH,eAAO,MAAM,oBAAoB,sKAWvB,CAAC;AAEX;;GAEG;AACH,MAAM,MAAM,KAAK,GAAG,KAAK,GAAG,SAAS,GAAG,SAAS,GAAG,MAAM,CAAC;AAE3D;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,aAAa,GACpB,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAgBnC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,KAAK,CAU9D;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE,KAAK,GACX,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAgBnC;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,aAAa,GAAG,GAAG,CAAC,MAAM,CAAC,CAWvE;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,aAAa,GAAG,GAAG,CAAC,MAAM,CAAC,CAajE;AAED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAoBnE"}

package/dist/utils/config-helpers.js

@@ -0,0 +1,171 @@
+"use strict";
+/**
+ * Config Helpers
+ *
+ * Helper functions for working with factiii.yml config where
+ * environments are stored as top-level keys.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RESERVED_CONFIG_KEYS = void 0;
+exports.extractEnvironments = extractEnvironments;
+exports.getStageFromEnvironment = getStageFromEnvironment;
+exports.getEnvironmentsForStage = getEnvironmentsForStage;
+exports.getUsedServerPlugins = getUsedServerPlugins;
+exports.getUsedPlugins = getUsedPlugins;
+exports.validateEnvironmentName = validateEnvironmentName;
+// ============================================================
+// CRITICAL: Config Environment Extraction
+// ============================================================
+// Why this exists: Environments are stored as top-level keys
+// What breaks if changed: All environment iteration, plugin loading
+// Dependencies: All CLI commands, plugins, generators
+// ============================================================
+/**
+ * Reserved top-level config keys that are NOT environments
+ * Everything else at the top level is treated as an environment
+ */
+exports.RESERVED_CONFIG_KEYS = [
+    'name',
+    'config_version',
+    'github_repo',
+    'ssl_email',
+    'pipeline',
+    'prisma_schema',
+    'prisma_version',
+    'container_exclusions',
+    'trusted_plugins',
+    'ansible', // Ansible Vault configuration (not an environment)
+];
+/**
+ * Extract environment configs from config object
+ * Environments = any top-level key NOT in reserved list
+ *
+ * @param config - The factiii.yml config object
+ * @returns Record of environment name to environment config
+ */
+function extractEnvironments(config) {
+    const environments = {};
+    for (const [key, value] of Object.entries(config)) {
+        // Skip reserved keys
+        if (exports.RESERVED_CONFIG_KEYS.includes(key)) {
+            continue;
+        }
+        // Only include objects (not strings, arrays, or nulls)
+        if (typeof value === 'object' && !Array.isArray(value) && value !== null) {
+            environments[key] = value;
+        }
+    }
+    return environments;
+}
+/**
+ * Map environment name to stage
+ *
+ * Rules:
+ * - 'dev' → 'dev'
+ * - 'secrets' → 'secrets'
+ * - starts with 'staging' or 'stage-' → 'staging'
+ * - starts with 'prod' or equals 'production' → 'prod'
+ *
+ * @param envName - Environment name (e.g., 'staging2', 'prod')
+ * @returns Stage name ('dev' | 'secrets' | 'staging' | 'prod')
+ * @throws Error if environment name doesn't match any pattern
+ */
+function getStageFromEnvironment(envName) {
+    if (envName === 'dev')
+        return 'dev';
+    if (envName === 'secrets')
+        return 'secrets';
+    if (envName.startsWith('staging') || envName.startsWith('stage-'))
+        return 'staging';
+    if (envName.startsWith('prod') || envName === 'production')
+        return 'prod';
+    throw new Error(`Cannot determine stage for environment: ${envName}. ` +
+        `Environment names must start with 'staging', 'prod', or be 'dev'/'secrets'.`);
+}
+/**
+ * Get all environments that match a specific stage
+ *
+ * @param config - The factiii.yml config object
+ * @param stage - Stage to filter by ('staging' | 'prod')
+ * @returns Record of environment name to environment config for matching stage
+ */
+function getEnvironmentsForStage(config, stage) {
+    const allEnvs = extractEnvironments(config);
+    const filtered = {};
+    for (const [name, env] of Object.entries(allEnvs)) {
+        try {
+            if (getStageFromEnvironment(name) === stage) {
+                filtered[name] = env;
+            }
+        }
+        catch {
+            // Skip environments that don't match any stage pattern
+            continue;
+        }
+    }
+    return filtered;
+}
+/**
+ * Get used server plugins from config
+ * Looks at all environments and returns unique server plugin names
+ *
+ * @param config - The factiii.yml config object
+ * @returns Set of server plugin names used across all environments
+ */
+function getUsedServerPlugins(config) {
+    const servers = new Set();
+    const environments = extractEnvironments(config);
+    for (const env of Object.values(environments)) {
+        if (env.server) {
+            servers.add(env.server);
+        }
+    }
+    return servers;
+}
+/**
+ * Get used plugins from config
+ * Looks at all environment plugin configs and returns unique plugin names
+ *
+ * @param config - The factiii.yml config object
+ * @returns Set of plugin names used across all environments
+ */
+function getUsedPlugins(config) {
+    const plugins = new Set();
+    const environments = extractEnvironments(config);
+    for (const env of Object.values(environments)) {
+        if (env.plugins) {
+            for (const pluginName of Object.keys(env.plugins)) {
+                plugins.add(pluginName);
+            }
+        }
+    }
+    return plugins;
+}
+/**
+ * Validate environment name
+ * Checks that environment name doesn't conflict with reserved keys
+ * and follows naming conventions
+ *
+ * @param name - Environment name to validate
+ * @returns Error message if invalid, null if valid
+ */
+function validateEnvironmentName(name) {
+    // Check for reserved key conflicts
+    if (exports.RESERVED_CONFIG_KEYS.includes(name)) {
+        return `Invalid environment name '${name}' - this is a reserved config field. Please use a different name (e.g., '${name}-env', 'staging', 'prod').`;
+    }
+    // Check for valid characters
+    if (!/^[a-z0-9-]+$/.test(name)) {
+        return `Invalid environment name '${name}' - must contain only lowercase letters, numbers, and hyphens.`;
+    }
+    // Must match a stage pattern
+    try {
+        getStageFromEnvironment(name);
+    }
+    catch (e) {
+        const message = e instanceof Error ? e.message : String(e);
+        return message;
+    }
+    return null;
+}
+//# sourceMappingURL=config-helpers.js.map

package/dist/utils/config-helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-helpers.js","sourceRoot":"","sources":["../../src/utils/config-helpers.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAyCH,kDAkBC;AAeD,0DAUC;AASD,0DAmBC;AASD,oDAWC;AASD,wCAaC;AAUD,0DAoBC;AApLD,+DAA+D;AAC/D,0CAA0C;AAC1C,+DAA+D;AAC/D,6DAA6D;AAC7D,oEAAoE;AACpE,sDAAsD;AACtD,+DAA+D;AAE/D;;;GAGG;AACU,QAAA,oBAAoB,GAAG;IAClC,MAAM;IACN,gBAAgB;IAChB,aAAa;IACb,WAAW;IACX,UAAU;IACV,eAAe;IACf,gBAAgB;IAChB,sBAAsB;IACtB,iBAAiB;IACjB,SAAS,EAAG,mDAAmD;CACvD,CAAC;AAOX;;;;;;GAMG;AACH,SAAgB,mBAAmB,CACjC,MAAqB;IAErB,MAAM,YAAY,GAAsC,EAAE,CAAC;IAE3D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,qBAAqB;QACrB,IAAI,4BAAoB,CAAC,QAAQ,CAAC,GAA4C,CAAC,EAAE,CAAC;YAChF,SAAS;QACX,CAAC;QAED,uDAAuD;QACvD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACzE,YAAY,CAAC,GAAG,CAAC,GAAG,KAA0B,CAAC;QACjD,CAAC;IACH,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAgB,uBAAuB,CAAC,OAAe;IACrD,IAAI,OAAO,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC5C,IAAI,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IACpF,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,OAAO,KAAK,YAAY;QAAE,OAAO,MAAM,CAAC;IAE1E,MAAM,IAAI,KAAK,CACb,2CAA2C,OAAO,IAAI;QACpD,6EAA6E,CAChF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,uBAAuB,CACrC,MAAqB,EACrB,KAAY;IAEZ,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAsC,EAAE,CAAC;IAEvD,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC;YACH,IAAI,uBAAuB,CAAC,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC;gBAC5C,QAAQ,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC;YACvB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uDAAuD;YACvD,SAAS;QACX,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,oBAAoB,CAAC,MAAqB;IACxD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,YAAY,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAEjD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9C,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,cAAc,CAAC,MAAqB;IAClD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,YAAY,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAEjD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9C,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YAChB,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAClD,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,uBAAuB,CAAC,IAAY;IAClD,mCAAmC;IACnC,IAAI,4BAAoB,CAAC,QAAQ,CAAC,IAA6C,CAAC,EAAE,CAAC;QACjF,OAAO,6BAA6B,IAAI,4EAA4E,IAAI,4BAA4B,CAAC;IACvJ,CAAC;IAED,6BAA6B;IAC7B,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,OAAO,6BAA6B,IAAI,gEAAgE,CAAC;IAC3G,CAAC;IAED,6BAA6B;IAC7B,IAAI,CAAC;QACH,uBAAuB,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,OAAO,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3D,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}