@factiii/stack 0.1.2

package/dist/utils/github-workflow-monitor.js

@@ -0,0 +1,145 @@
+"use strict";
+/**
+ * GitHub Workflow Monitor
+ *
+ * Utility for triggering GitHub Actions workflows and monitoring their progress.
+ * Uses GitHub CLI (gh) for authentication and API access.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+const child_process_1 = require("child_process");
+class GitHubWorkflowMonitor {
+    constructor() {
+        this.checkGhCli();
+    }
+    /**
+     * Check if GitHub CLI is installed and authenticated
+     */
+    checkGhCli() {
+        try {
+            (0, child_process_1.execSync)('which gh', { stdio: 'pipe' });
+            // Check if authenticated
+            const authStatus = (0, child_process_1.execSync)('gh auth status', {
+                stdio: 'pipe',
+                encoding: 'utf8',
+            });
+            if (!authStatus.includes('Logged in')) {
+                throw new Error('GitHub CLI not authenticated. Run: gh auth login');
+            }
+        }
+        catch {
+            throw new Error('GitHub CLI not available. Install with: brew install gh');
+        }
+    }
+    /**
+     * Trigger a workflow and return the run ID
+     *
+     * @param workflowFile - The workflow file name (e.g., 'factiii-scan-staging.yml')
+     * @param environment - Optional environment name (only used for workflows that accept inputs)
+     */
+    async triggerWorkflow(workflowFile, environment) {
+        try {
+            console.log(`Triggering GitHub Actions workflow...`);
+            // Build command - add environment input for workflows that accept it
+            let command = `gh workflow run "${workflowFile}"`;
+            // Add environment input for workflows that accept it (deploy, fix, scan)
+            if (environment && (workflowFile.includes('deploy') || workflowFile.includes('fix') || workflowFile.includes('scan'))) {
+                command += ` -f environment="${environment}"`;
+            }
+            // Trigger the workflow
+            (0, child_process_1.execSync)(command, {
+                encoding: 'utf8',
+                stdio: 'pipe',
+            });
+            // Wait a moment for the run to be created
+            await new Promise((resolve) => setTimeout(resolve, 2000));
+            // Get the latest run ID for this workflow
+            const runs = (0, child_process_1.execSync)(`gh run list --workflow="${workflowFile}" --limit=1 --json databaseId,status,conclusion`, { encoding: 'utf8', stdio: 'pipe' });
+            const runData = JSON.parse(runs);
+            if (runData.length === 0) {
+                throw new Error('Failed to find triggered workflow run');
+            }
+            const firstRun = runData[0];
+            if (!firstRun) {
+                throw new Error('Failed to find triggered workflow run');
+            }
+            return firstRun.databaseId;
+        }
+        catch (error) {
+            throw new Error(`Failed to trigger workflow: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    /**
+     * Stream logs from a workflow run
+     */
+    async streamLogs(runId) {
+        return new Promise((resolve, reject) => {
+            console.log(`Monitoring deployment progress...\n`);
+            // Use gh run watch to stream logs
+            const watch = (0, child_process_1.spawn)('gh', ['run', 'watch', runId.toString()], {
+                stdio: 'inherit',
+            });
+            watch.on('close', (code) => {
+                if (code === 0) {
+                    resolve({ success: true });
+                }
+                else {
+                    resolve({ success: false, exitCode: code ?? undefined });
+                }
+            });
+            watch.on('error', (error) => {
+                reject(new Error(`Failed to watch workflow: ${error.message}`));
+            });
+        });
+    }
+    /**
+     * Get the status of a workflow run
+     */
+    async getRunStatus(runId) {
+        try {
+            const result = (0, child_process_1.execSync)(`gh run view ${runId} --json status,conclusion,url`, {
+                encoding: 'utf8',
+                stdio: 'pipe',
+            });
+            return JSON.parse(result);
+        }
+        catch (error) {
+            throw new Error(`Failed to get run status: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    /**
+     * Trigger a workflow and wait for completion with live logs
+     */
+    async triggerAndWatch(workflowFile, environment) {
+        try {
+            // Trigger the workflow
+            const runId = await this.triggerWorkflow(workflowFile, environment);
+            // Stream logs (just for display - gh run watch exits 0 regardless of workflow result)
+            await this.streamLogs(runId);
+            // Get final status - THIS determines actual success based on workflow conclusion
+            const status = await this.getRunStatus(runId);
+            const isSuccess = status.conclusion === 'success';
+            console.log('');
+            if (isSuccess) {
+                console.log(`[OK] Deployment successful!`);
+            }
+            else {
+                console.log(`[ERROR] Deployment failed! (${status.conclusion})`);
+            }
+            console.log(`   View full logs: ${status.url}`);
+            return {
+                success: isSuccess,
+                url: status.url,
+                runId,
+            };
+        }
+        catch (error) {
+            console.error(`\n[ERROR] ${error instanceof Error ? error.message : String(error)}`);
+            return {
+                success: false,
+                error: error instanceof Error ? error.message : String(error),
+            };
+        }
+    }
+}
+exports.default = GitHubWorkflowMonitor;
+//# sourceMappingURL=github-workflow-monitor.js.map

package/dist/utils/github-workflow-monitor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-workflow-monitor.js","sourceRoot":"","sources":["../../src/utils/github-workflow-monitor.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAEH,iDAAgD;AAoBhD,MAAM,qBAAqB;IACzB;QACE,IAAI,CAAC,UAAU,EAAE,CAAC;IACpB,CAAC;IAED;;OAEG;IACK,UAAU;QAChB,IAAI,CAAC;YACH,IAAA,wBAAQ,EAAC,UAAU,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YAExC,yBAAyB;YACzB,MAAM,UAAU,GAAG,IAAA,wBAAQ,EAAC,gBAAgB,EAAE;gBAC5C,KAAK,EAAE,MAAM;gBACb,QAAQ,EAAE,MAAM;aACjB,CAAC,CAAC;YAEH,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBACtC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,eAAe,CAAC,YAAoB,EAAE,WAAoB;QAC9D,IAAI,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;YAErD,qEAAqE;YACrE,IAAI,OAAO,GAAG,oBAAoB,YAAY,GAAG,CAAC;YAElD,yEAAyE;YACzE,IAAI,WAAW,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;gBACtH,OAAO,IAAI,oBAAoB,WAAW,GAAG,CAAC;YAChD,CAAC;YAED,uBAAuB;YACvB,IAAA,wBAAQ,EAAC,OAAO,EAAE;gBAChB,QAAQ,EAAE,MAAM;gBAChB,KAAK,EAAE,MAAM;aACd,CAAC,CAAC;YAEH,0CAA0C;YAC1C,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;YAE1D,0CAA0C;YAC1C,MAAM,IAAI,GAAG,IAAA,wBAAQ,EACnB,2BAA2B,YAAY,iDAAiD,EACxF,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CACpC,CAAC;YAEF,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAkC,CAAC;YAClE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC3D,CAAC;YAED,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YAC5B,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC3D,CAAC;YAED,OAAO,QAAQ,CAAC,UAAU,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,+BAA+B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACxF,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CAAC,KAAa;QAC5B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;YAEnD,kCAAkC;YAClC,MAAM,KAAK,GAAG,IAAA,qBAAK,EAAC,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,EAAE;gBAC5D,KAAK,EAAE,SAAS;aACjB,CAAC,CAAC;YAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBACzB,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;oBACf,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC7B,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,IAAI,SAAS,EAAE,CAAC,CAAC;gBAC3D,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC1B,MAAM,CAAC,IAAI,KAAK,CAAC,6BAA6B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAClE,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,KAAa;QAC9B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAA,wBAAQ,EAAC,eAAe,KAAK,+BAA+B,EAAE;gBAC3E,QAAQ,EAAE,MAAM;gBAChB,KAAK,EAAE,MAAM;aACd,CAAC,CAAC;YAEH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAsB,CAAC;QACjD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,6BAA6B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACtF,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACnB,YAAoB,EACpB,WAAoB;QAEpB,IAAI,CAAC;YACH,uBAAuB;YACvB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;YAEpE,sFAAsF;YACtF,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAE7B,iFAAiF;YACjF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YAC9C,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC;YAElD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,IAAI,SAAS,EAAE,CAAC;gBACd,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;YAC7C,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,+BAA+B,MAAM,CAAC,UAAU,GAAG,CAAC,CAAC;YACnE,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,sBAAsB,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;YAEhD,OAAO;gBACL,OAAO,EAAE,SAAS;gBAClB,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,KAAK;aACN,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,aAAa,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACrF,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAED,kBAAe,qBAAqB,CAAC"}

package/dist/utils/index.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Utilities Index
+ *
+ * Re-exports all utility modules.
+ */
+export * from './ssh-helper.js';
+export * from './config-schema.js';
+export * from './env-validator.js';
+export * from './dns-validator.js';
+export * from './ansible-vault-secrets.js';
+export { getFactiiiVersion, parseVersion, isCompatible, isBreakingUpgrade, readFactiiiAutoVersion, checkVersionCompatibility, displayVersionWarning, } from './version-check.js';
+export * from './template-generator.js';
+export * from './secret-prompts.js';
+export * from './server-check.js';
+export * from './config-validator.js';
+export * from './deployment-report.js';
+export { default as GitHubWorkflowMonitor } from './github-workflow-monitor.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/utils/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,iBAAiB,CAAC;AAChC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,4BAA4B,CAAC;AAE3C,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,sBAAsB,EACtB,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,oBAAoB,CAAC;AAC5B,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC;AACtC,cAAc,wBAAwB,CAAC;AACvC,OAAO,EAAE,OAAO,IAAI,qBAAqB,EAAE,MAAM,8BAA8B,CAAC"}

package/dist/utils/index.js

@@ -0,0 +1,48 @@
+"use strict";
+/**
+ * Utilities Index
+ *
+ * Re-exports all utility modules.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GitHubWorkflowMonitor = exports.displayVersionWarning = exports.checkVersionCompatibility = exports.readFactiiiAutoVersion = exports.isBreakingUpgrade = exports.isCompatible = exports.parseVersion = exports.getFactiiiVersion = void 0;
+__exportStar(require("./ssh-helper.js"), exports);
+__exportStar(require("./config-schema.js"), exports);
+__exportStar(require("./env-validator.js"), exports);
+__exportStar(require("./dns-validator.js"), exports);
+__exportStar(require("./ansible-vault-secrets.js"), exports);
+// Re-export version-check without conflicting compareVersions
+var version_check_js_1 = require("./version-check.js");
+Object.defineProperty(exports, "getFactiiiVersion", { enumerable: true, get: function () { return version_check_js_1.getFactiiiVersion; } });
+Object.defineProperty(exports, "parseVersion", { enumerable: true, get: function () { return version_check_js_1.parseVersion; } });
+Object.defineProperty(exports, "isCompatible", { enumerable: true, get: function () { return version_check_js_1.isCompatible; } });
+Object.defineProperty(exports, "isBreakingUpgrade", { enumerable: true, get: function () { return version_check_js_1.isBreakingUpgrade; } });
+Object.defineProperty(exports, "readFactiiiAutoVersion", { enumerable: true, get: function () { return version_check_js_1.readFactiiiAutoVersion; } });
+Object.defineProperty(exports, "checkVersionCompatibility", { enumerable: true, get: function () { return version_check_js_1.checkVersionCompatibility; } });
+Object.defineProperty(exports, "displayVersionWarning", { enumerable: true, get: function () { return version_check_js_1.displayVersionWarning; } });
+__exportStar(require("./template-generator.js"), exports);
+__exportStar(require("./secret-prompts.js"), exports);
+__exportStar(require("./server-check.js"), exports);
+__exportStar(require("./config-validator.js"), exports);
+__exportStar(require("./deployment-report.js"), exports);
+var github_workflow_monitor_js_1 = require("./github-workflow-monitor.js");
+Object.defineProperty(exports, "GitHubWorkflowMonitor", { enumerable: true, get: function () { return __importDefault(github_workflow_monitor_js_1).default; } });
+// ssl-cert-helper moved to src/scanfix/ssl-cert-helper.ts
+//# sourceMappingURL=index.js.map

package/dist/utils/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;;;;;;;;;;;;;;;AAEH,kDAAgC;AAChC,qDAAmC;AACnC,qDAAmC;AACnC,qDAAmC;AACnC,6DAA2C;AAC3C,8DAA8D;AAC9D,uDAQ4B;AAP1B,qHAAA,iBAAiB,OAAA;AACjB,gHAAA,YAAY,OAAA;AACZ,gHAAA,YAAY,OAAA;AACZ,qHAAA,iBAAiB,OAAA;AACjB,0HAAA,sBAAsB,OAAA;AACtB,6HAAA,yBAAyB,OAAA;AACzB,yHAAA,qBAAqB,OAAA;AAEvB,0DAAwC;AACxC,sDAAoC;AACpC,oDAAkC;AAClC,wDAAsC;AACtC,yDAAuC;AACvC,2EAAgF;AAAvE,oJAAA,OAAO,OAAyB;AACzC,0DAA0D"}

package/dist/utils/secret-prompts.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Secret Prompts
+ *
+ * Interactive prompts for collecting secrets from the user.
+ */
+import type { FactiiiConfig } from '../types/index.js';
+interface ValidationResult {
+    valid: boolean;
+    error?: string;
+    defaultValue?: string;
+}
+interface SecretMetadata {
+    type: string;
+    description: string;
+    helpText: string;
+    validation: (value: string) => ValidationResult;
+}
+interface MultiSelectChoice {
+    name: string;
+    checked: boolean;
+}
+/**
+ * Get secret metadata
+ */
+export declare function getSecretMetadata(secretName: string): SecretMetadata;
+/**
+ * Format help text for a secret
+ */
+export declare function formatSecretHelp(secretName: string): string;
+/**
+ * Validate secret format
+ */
+export declare function validateSecretFormat(secretName: string, value: string): ValidationResult;
+/**
+ * Prompt for single-line input
+ */
+export declare function promptSingleLine(prompt: string): Promise<string>;
+/**
+ * Prompt for multi-line input (for SSH keys)
+ */
+export declare function promptMultiLine(prompt: string): Promise<string>;
+/**
+ * Prompt for a secret with validation
+ * @param secretName - Name of the secret
+ * @param _config - Factiii configuration (optional)
+ * @returns Secret value
+ */
+export declare function promptForSecret(secretName: string, _config?: FactiiiConfig): Promise<string>;
+/**
+ * Prompt for confirmation (yes/no)
+ */
+export declare function confirm(message: string, defaultYes?: boolean): Promise<boolean>;
+/**
+ * Multi-select prompt (simplified version)
+ * In a real implementation, you'd use a library like 'inquirer'
+ * For now, this is a basic implementation
+ */
+export declare function multiSelect(message: string, choices: MultiSelectChoice[]): Promise<string[]>;
+/**
+ * Prompt for an environment secret (simpler than SSH keys)
+ * @param name - Name of the environment variable
+ * @param stage - Stage (staging or prod)
+ * @returns Secret value
+ */
+export declare function promptForEnvSecret(name: string, stage: 'staging' | 'prod'): Promise<string>;
+export {};
+//# sourceMappingURL=secret-prompts.d.ts.map

package/dist/utils/secret-prompts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-prompts.d.ts","sourceRoot":"","sources":["../../src/utils/secret-prompts.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEvD,UAAU,gBAAgB;IACxB,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,UAAU,cAAc;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,gBAAgB,CAAC;CACjD;AAED,UAAU,iBAAiB;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;CAClB;AAkGD;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,cAAc,CAcpE;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAG3D;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,GACZ,gBAAgB,CAGlB;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAYhE;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAkC/D;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,aAAmC,GAC3C,OAAO,CAAC,MAAM,CAAC,CA4CjB;AAED;;GAEG;AACH,wBAAsB,OAAO,CAC3B,OAAO,EAAE,MAAM,EACf,UAAU,GAAE,OAAc,GACzB,OAAO,CAAC,OAAO,CAAC,CA0BlB;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,iBAAiB,EAAE,GAC3B,OAAO,CAAC,MAAM,EAAE,CAAC,CAmCnB;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,SAAS,GAAG,MAAM,GACxB,OAAO,CAAC,MAAM,CAAC,CA8BjB"}

package/dist/utils/secret-prompts.js

@@ -0,0 +1,369 @@
+"use strict";
+/**
+ * Secret Prompts
+ *
+ * Interactive prompts for collecting secrets from the user.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getSecretMetadata = getSecretMetadata;
+exports.formatSecretHelp = formatSecretHelp;
+exports.validateSecretFormat = validateSecretFormat;
+exports.promptSingleLine = promptSingleLine;
+exports.promptMultiLine = promptMultiLine;
+exports.promptForSecret = promptForSecret;
+exports.confirm = confirm;
+exports.multiSelect = multiSelect;
+exports.promptForEnvSecret = promptForEnvSecret;
+const readline = __importStar(require("readline"));
+/**
+ * Secret metadata with help text and validation
+ *
+ * Simplified secrets (per architecture):
+ * - {ENV}_SSH: SSH private key for each environment
+ * - AWS_SECRET_ACCESS_KEY: Only truly secret AWS value
+ *
+ * Not secrets (in factiii.yml):
+ * - HOST: environments.{env}.host
+ * - AWS_ACCESS_KEY_ID: aws.access_key_id
+ * - AWS_REGION: aws.region
+ */
+const SECRET_METADATA = {
+    STAGING_SSH: {
+        type: 'ssh_key',
+        description: 'SSH private key for accessing staging server',
+        helpText: `
+   Step 1: Generate a new SSH key pair:
+   ssh-keygen -t ed25519 -C "staging-deploy" -f ~/.ssh/staging_deploy
+   
+   Step 2: Add PUBLIC key to your staging server:
+   ssh-copy-id -i ~/.ssh/staging_deploy.pub ubuntu@YOUR_HOST
+   
+   (HOST is configured in factiii.yml → environments.staging.host)
+   
+   Step 3: Paste the PRIVATE key below (multi-line, end with blank line):
+   cat ~/.ssh/staging_deploy`,
+        validation: (value) => {
+            if (!value || value.trim().length === 0) {
+                return { valid: false, error: 'SSH key cannot be empty' };
+            }
+            if (!value.includes('BEGIN') || !value.includes('PRIVATE KEY')) {
+                return {
+                    valid: false,
+                    error: 'Invalid SSH key format (missing BEGIN/PRIVATE KEY markers)',
+                };
+            }
+            return { valid: true };
+        },
+    },
+    PROD_SSH: {
+        type: 'ssh_key',
+        description: 'SSH private key for accessing production server',
+        helpText: `
+   Step 1: Generate a new SSH key pair:
+   ssh-keygen -t ed25519 -C "production-deploy" -f ~/.ssh/prod_deploy
+   
+   Step 2: Add PUBLIC key to your production server:
+   ssh-copy-id -i ~/.ssh/prod_deploy.pub ubuntu@YOUR_HOST
+   
+   (HOST is configured in factiii.yml → environments.production.host)
+   
+   Step 3: Paste the PRIVATE key below (multi-line, end with blank line):
+   cat ~/.ssh/prod_deploy`,
+        validation: (value) => {
+            if (!value || value.trim().length === 0) {
+                return { valid: false, error: 'SSH key cannot be empty' };
+            }
+            if (!value.includes('BEGIN') || !value.includes('PRIVATE KEY')) {
+                return {
+                    valid: false,
+                    error: 'Invalid SSH key format (missing BEGIN/PRIVATE KEY markers)',
+                };
+            }
+            return { valid: true };
+        },
+    },
+    AWS_SECRET_ACCESS_KEY: {
+        type: 'aws_secret',
+        description: 'AWS Secret Access Key (the only secret AWS value)',
+        helpText: `
+   Get from AWS Console: IAM → Users → Security credentials
+   
+   This is shown only once when you create the key.
+   If lost, you must create a new key pair.
+   
+   Note: AWS_ACCESS_KEY_ID and AWS_REGION go in factiii.yml (not secrets)
+   
+   Enter AWS Secret Access Key:`,
+        validation: (value) => {
+            if (!value || value.trim().length === 0) {
+                return { valid: false, error: 'AWS Secret Access Key cannot be empty' };
+            }
+            if (value.length !== 40) {
+                return {
+                    valid: false,
+                    error: 'AWS Secret Access Key should be 40 characters long',
+                };
+            }
+            return { valid: true };
+        },
+    },
+};
+/**
+ * Get secret metadata
+ */
+function getSecretMetadata(secretName) {
+    return (SECRET_METADATA[secretName] ?? {
+        type: 'generic',
+        description: `GitHub secret: ${secretName}`,
+        helpText: `\n   Enter value for ${secretName}:`,
+        validation: (value) => {
+            if (!value || value.trim().length === 0) {
+                return { valid: false, error: 'Value cannot be empty' };
+            }
+            return { valid: true };
+        },
+    });
+}
+/**
+ * Format help text for a secret
+ */
+function formatSecretHelp(secretName) {
+    const metadata = getSecretMetadata(secretName);
+    return `\n${secretName}\n\n   ${metadata.description}${metadata.helpText}`;
+}
+/**
+ * Validate secret format
+ */
+function validateSecretFormat(secretName, value) {
+    const metadata = getSecretMetadata(secretName);
+    return metadata.validation(value);
+}
+/**
+ * Prompt for single-line input
+ */
+function promptSingleLine(prompt) {
+    return new Promise((resolve) => {
+        const rl = readline.createInterface({
+            input: process.stdin,
+            output: process.stdout,
+        });
+        rl.question(prompt, (answer) => {
+            rl.close();
+            resolve(answer.trim());
+        });
+    });
+}
+/**
+ * Prompt for multi-line input (for SSH keys)
+ */
+function promptMultiLine(prompt) {
+    return new Promise((resolve) => {
+        console.log(prompt);
+        const lines = [];
+        const rl = readline.createInterface({
+            input: process.stdin,
+            output: process.stdout,
+            terminal: false,
+        });
+        // Set stdin to raw mode to detect blank lines
+        if (process.stdin.isTTY) {
+            process.stdin.setRawMode(false);
+        }
+        rl.on('line', (line) => {
+            // Empty line signals end of input
+            if (line.trim() === '' && lines.length > 0) {
+                rl.close();
+                resolve(lines.join('\n'));
+            }
+            else {
+                lines.push(line);
+            }
+        });
+        rl.on('close', () => {
+            if (lines.length > 0) {
+                resolve(lines.join('\n'));
+            }
+            else {
+                resolve('');
+            }
+        });
+    });
+}
+/**
+ * Prompt for a secret with validation
+ * @param secretName - Name of the secret
+ * @param _config - Factiii configuration (optional)
+ * @returns Secret value
+ */
+async function promptForSecret(secretName, _config = {}) {
+    const metadata = getSecretMetadata(secretName);
+    // Show help text
+    console.log(formatSecretHelp(secretName));
+    let value = '';
+    let isValid = false;
+    let attempts = 0;
+    const maxAttempts = 3;
+    while (!isValid && attempts < maxAttempts) {
+        attempts++;
+        // Prompt based on type
+        if (metadata.type === 'ssh_key') {
+            value = await promptMultiLine('');
+        }
+        else {
+            value = await promptSingleLine('   > ');
+        }
+        // Validate
+        const validation = validateSecretFormat(secretName, value);
+        if (validation.valid) {
+            isValid = true;
+            // Use default value if provided
+            if (validation.defaultValue && (!value || value.trim().length === 0)) {
+                value = validation.defaultValue;
+                console.log(`   Using default: ${value}`);
+            }
+            console.log('   [OK] Valid input\n');
+        }
+        else {
+            console.error(`   [ERROR] ${validation.error}`);
+            if (attempts < maxAttempts) {
+                console.log(`   Please try again (${attempts}/${maxAttempts})...\n`);
+            }
+            else {
+                console.error('   Maximum attempts reached. Exiting.\n');
+                process.exit(1);
+            }
+        }
+    }
+    return value;
+}
+/**
+ * Prompt for confirmation (yes/no)
+ */
+async function confirm(message, defaultYes = true) {
+    const rl = readline.createInterface({
+        input: process.stdin,
+        output: process.stdout,
+    });
+    return new Promise((resolve) => {
+        const prompt = defaultYes ? `${message} (Y/n) ` : `${message} (y/N) `;
+        rl.question(prompt, (answer) => {
+            rl.close();
+            const normalized = answer.trim().toLowerCase();
+            if (normalized === '') {
+                resolve(defaultYes);
+            }
+            else if (normalized === 'y' || normalized === 'yes') {
+                resolve(true);
+            }
+            else if (normalized === 'n' || normalized === 'no') {
+                resolve(false);
+            }
+            else {
+                // Invalid input, use default
+                resolve(defaultYes);
+            }
+        });
+    });
+}
+/**
+ * Multi-select prompt (simplified version)
+ * In a real implementation, you'd use a library like 'inquirer'
+ * For now, this is a basic implementation
+ */
+async function multiSelect(message, choices) {
+    console.log(`\n${message}`);
+    console.log('   (Enter numbers separated by spaces, or "all" for all missing)\n');
+    // Display choices with numbers
+    choices.forEach((choice, index) => {
+        const status = choice.checked ? '[!] missing' : '[OK] exists';
+        console.log(`   ${index + 1}. ${choice.name} (${status})`);
+    });
+    const answer = await promptSingleLine('\n   Select: ');
+    // Handle "all" or "missing"
+    if (answer.toLowerCase() === 'all') {
+        return choices.map((c) => c.name);
+    }
+    if (answer.toLowerCase() === 'missing') {
+        return choices.filter((c) => c.checked).map((c) => c.name);
+    }
+    // Parse numbers
+    const selected = [];
+    const numbers = answer.split(/[\s,]+/).map((n) => parseInt(n.trim()));
+    for (const num of numbers) {
+        if (num > 0 && num <= choices.length) {
+            const choice = choices[num - 1];
+            if (choice) {
+                selected.push(choice.name);
+            }
+        }
+    }
+    return selected;
+}
+/**
+ * Prompt for an environment secret (simpler than SSH keys)
+ * @param name - Name of the environment variable
+ * @param stage - Stage (staging or prod)
+ * @returns Secret value
+ */
+async function promptForEnvSecret(name, stage) {
+    console.log(`\nSetting ${name} for ${stage}`);
+    console.log(`   Enter the value for this environment variable.`);
+    console.log(`   (This will be stored in Ansible Vault and deployed to the server)\n`);
+    let value = '';
+    let isValid = false;
+    let attempts = 0;
+    const maxAttempts = 3;
+    while (!isValid && attempts < maxAttempts) {
+        attempts++;
+        value = await promptSingleLine('   > ');
+        if (value && value.trim().length > 0) {
+            isValid = true;
+            console.log('   [OK] Value set\n');
+        }
+        else {
+            console.error('   [ERROR] Value cannot be empty');
+            if (attempts < maxAttempts) {
+                console.log(`   Please try again (${attempts}/${maxAttempts})...\n`);
+            }
+            else {
+                console.error('   Maximum attempts reached. Exiting.\n');
+                process.exit(1);
+            }
+        }
+    }
+    return value;
+}
+//# sourceMappingURL=secret-prompts.js.map