@factiii/stack 0.1.41 → 0.1.44

package/dist/cli/init.js

@@ -2,14 +2,12 @@
 /**
  * Init Command
  *
- * Handles interactive setup that scanfixes cannot do:
- * - Vault password creation (requires user input)
- * - Secret prompting (SSH keys, AWS credentials)
- * - --force flag to regenerate stack.yml from scratch
+ * Scans the codebase and creates stack.yml with auto-detected settings
+ * and EXAMPLE_ placeholder values for the user to fill in.
  *
- * Config file creation (stack.yml, stackAuto.yml, stack.local.yml) and
- * gitignore management are now handled by bootstrap scanfixes in the
- * factiii pipeline plugin. Running `npx stack` will auto-create them.
+ * This command only initializes config files — it does not fix anything.
+ * Vault setup, secrets, and all other fixes are handled by scanfixes
+ * in the factiii pipeline (run: npx stack scan / npx stack fix).
  */
 var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
     if (k2 === undefined) k2 = k;
@@ -44,232 +42,22 @@ var __importStar = (this && this.__importStar) || (function () {
         return result;
     };
 })();
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.init = init;
-const path = __importStar(require("path"));
-const config_files_js_1 = require("../constants/config-files.js");
 const fs = __importStar(require("fs"));
-const os = __importStar(require("os"));
-const js_yaml_1 = __importDefault(require("js-yaml"));
-const child_process_1 = require("child_process");
+const config_files_js_1 = require("../constants/config-files.js");
 const generate_stack_yml_js_1 = require("../generators/generate-stack-yml.js");
-const secret_prompts_js_1 = require("../utils/secret-prompts.js");
-const config_helpers_js_1 = require("../utils/config-helpers.js");
-/**
- * Check if ansible-vault CLI is available
- */
-function checkAnsibleVault() {
-    try {
-        (0, child_process_1.execSync)('ansible-vault --version', { stdio: 'pipe' });
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-/**
- * Ensure group_vars/all/ directory and encrypted vault file exist.
- * Returns what was fixed (empty array if nothing needed fixing).
- */
-async function ensureVaultSetup(rootDir, _vaultPassFile) {
-    const fixed = [];
-    const groupVarsDir = path.join(rootDir, 'group_vars', 'all');
-    if (!fs.existsSync(groupVarsDir)) {
-        fs.mkdirSync(groupVarsDir, { recursive: true });
-        fixed.push('Created ' + groupVarsDir);
-    }
-    const vaultFilePath = path.join(rootDir, 'group_vars', 'all', 'vault.yml');
-    if (!fs.existsSync(vaultFilePath)) {
-        try {
-            const { AnsibleVaultSecrets } = await Promise.resolve().then(() => __importStar(require('../utils/ansible-vault-secrets.js')));
-            const vault = new AnsibleVaultSecrets({
-                vault_path: 'group_vars/all/vault.yml',
-                vault_password_file: '~/.vault_pass',
-                rootDir,
-            });
-            await vault.setSecret('_initialized', 'true');
-            fixed.push('Created encrypted vault at group_vars/all/vault.yml');
-        }
-        catch (e) {
-            const msg = e instanceof Error ? e.message : String(e);
-            fixed.push('Failed to create vault: ' + msg);
-        }
-    }
-    return fixed;
-}
-/**
- * Extract SSH key from vault to ~/.ssh/{stage}_deploy_key
- * With safety check: asks before overwriting existing key
- */
-async function extractSSHKeyToFile(vault, stage, _rootDir) {
-    const keyName = stage + '_deploy_key';
-    const sshDir = path.join(os.homedir(), '.ssh');
-    const keyPath = path.join(sshDir, keyName);
-    // Safety check: don't overwrite existing keys without asking
-    if (fs.existsSync(keyPath)) {
-        const overwrite = await (0, secret_prompts_js_1.confirm)('  SSH key already exists at ' + keyPath + ' - overwrite?', false);
-        if (!overwrite) {
-            console.log('  [--] Keeping existing key at ' + keyPath);
-            return;
-        }
-    }
-    try {
-        const key = await vault.getSSHKey(stage);
-        if (!key) {
-            console.log('  [!] No ' + stage.toUpperCase() + '_SSH key found in vault');
-            return;
-        }
-        if (!fs.existsSync(sshDir)) {
-            fs.mkdirSync(sshDir, { recursive: true });
-        }
-        fs.writeFileSync(keyPath, key, 'utf8');
-        try {
-            fs.chmodSync(keyPath, 0o600);
-        }
-        catch {
-            // Windows doesn't support chmod
-        }
-        console.log('  [OK] Wrote SSH key to ' + keyPath);
-    }
-    catch (e) {
-        const msg = e instanceof Error ? e.message : String(e);
-        console.log('  [!] Failed to extract SSH key: ' + msg);
-    }
-}
-/**
- * Load config and prompt for missing secrets (SSH keys, AWS credentials)
- */
-async function promptForMissingSecrets(rootDir) {
-    const configPath = (0, config_files_js_1.getStackConfigPath)(rootDir);
-    if (!fs.existsSync(configPath))
-        return;
-    let config;
-    try {
-        config = js_yaml_1.default.load(fs.readFileSync(configPath, 'utf8')) ?? {};
-    }
-    catch {
-        return;
-    }
-    if (!config.ansible?.vault_path)
-        return;
-    const environments = (0, config_helpers_js_1.extractEnvironments)(config);
-    const hasStaging = !!environments.staging;
-    const hasProd = !!environments.prod || !!environments.production;
-    const hasAWS = Object.values(environments).some((env) => env.pipeline === 'aws' || env.access_key_id);
-    if (!hasStaging && !hasProd && !hasAWS)
-        return;
-    let vault;
-    try {
-        const { AnsibleVaultSecrets } = await Promise.resolve().then(() => __importStar(require('../utils/ansible-vault-secrets.js')));
-        vault = new AnsibleVaultSecrets({
-            vault_path: config.ansible.vault_path,
-            vault_password_file: config.ansible.vault_password_file ?? '~/.vault_pass',
-            rootDir,
-        });
-    }
-    catch {
-        return;
-    }
-    console.log('\n  Checking secrets...\n');
-    // Check STAGING_SSH
-    if (hasStaging) {
-        try {
-            const check = await vault.checkSecrets(['STAGING_SSH']);
-            if (check.missing.includes('STAGING_SSH')) {
-                const addNow = await (0, secret_prompts_js_1.confirm)('  Add staging SSH key now? (skip to do later with: npx stack secrets set STAGING_SSH)', false);
-                if (addNow) {
-                    const value = await (0, secret_prompts_js_1.promptForSecret)('STAGING_SSH', config);
-                    if (value) {
-                        await vault.setSecret('STAGING_SSH', value);
-                        console.log('  [OK] STAGING_SSH stored in vault');
-                        await extractSSHKeyToFile(vault, 'staging', rootDir);
-                    }
-                }
-                else {
-                    console.log('  [--] Skipped STAGING_SSH');
-                }
-            }
-            else {
-                console.log('  [OK] STAGING_SSH already in vault');
-            }
-        }
-        catch (e) {
-            const msg = e instanceof Error ? e.message : String(e);
-            console.log('  [!] Could not check STAGING_SSH: ' + msg);
-        }
-    }
-    // Check PROD_SSH
-    if (hasProd) {
-        try {
-            const check = await vault.checkSecrets(['PROD_SSH']);
-            if (check.missing.includes('PROD_SSH')) {
-                const addNow = await (0, secret_prompts_js_1.confirm)('  Add prod SSH key now? (skip to do later with: npx stack secrets set PROD_SSH)', false);
-                if (addNow) {
-                    const value = await (0, secret_prompts_js_1.promptForSecret)('PROD_SSH', config);
-                    if (value) {
-                        await vault.setSecret('PROD_SSH', value);
-                        console.log('  [OK] PROD_SSH stored in vault');
-                        await extractSSHKeyToFile(vault, 'prod', rootDir);
-                    }
-                }
-                else {
-                    console.log('  [--] Skipped PROD_SSH');
-                }
-            }
-            else {
-                console.log('  [OK] PROD_SSH already in vault');
-            }
-        }
-        catch (e) {
-            const msg = e instanceof Error ? e.message : String(e);
-            console.log('  [!] Could not check PROD_SSH: ' + msg);
-        }
-    }
-    // Check AWS_SECRET_ACCESS_KEY
-    if (hasAWS) {
-        try {
-            const check = await vault.checkSecrets(['AWS_SECRET_ACCESS_KEY']);
-            if (check.missing.includes('AWS_SECRET_ACCESS_KEY')) {
-                const addNow = await (0, secret_prompts_js_1.confirm)('  Add AWS Secret Access Key now?', false);
-                if (addNow) {
-                    const value = await (0, secret_prompts_js_1.promptForSecret)('AWS_SECRET_ACCESS_KEY', config);
-                    if (value) {
-                        await vault.setSecret('AWS_SECRET_ACCESS_KEY', value);
-                        console.log('  [OK] AWS_SECRET_ACCESS_KEY stored in vault');
-                    }
-                }
-                else {
-                    console.log('  [--] Skipped AWS_SECRET_ACCESS_KEY');
-                }
-            }
-            else {
-                console.log('  [OK] AWS_SECRET_ACCESS_KEY already in vault');
-            }
-        }
-        catch (e) {
-            const msg = e instanceof Error ? e.message : String(e);
-            console.log('  [!] Could not check AWS_SECRET_ACCESS_KEY: ' + msg);
-        }
-    }
-}
 async function init(options = {}) {
     const rootDir = options.rootDir ?? process.cwd();
     const configPath = (0, config_files_js_1.getStackConfigPath)(rootDir);
     const isFirstRun = !fs.existsSync(configPath);
-    // ============================================================
-    // Step 1: Create stack.yml (scan codebase + generate template)
-    // ============================================================
     if (options.force) {
         console.log('Regenerating ' + config_files_js_1.STACK_CONFIG_FILENAME + '...\n');
-        (0, generate_stack_yml_js_1.generateFactiiiYml)(rootDir, { force: true });
+        (0, generate_stack_yml_js_1.generateSmartStackYml)(rootDir, { force: true });
     }
     else if (isFirstRun) {
         console.log('Scanning codebase...\n');
-        const { generateSmartStackYml } = await Promise.resolve().then(() => __importStar(require('../generators/generate-stack-yml.js')));
-        const created = generateSmartStackYml(rootDir);
+        const created = (0, generate_stack_yml_js_1.generateSmartStackYml)(rootDir);
         if (created) {
             console.log('');
             console.log('  ' + config_files_js_1.STACK_CONFIG_FILENAME + ' is the configuration for everything.');
@@ -281,84 +69,15 @@ async function init(options = {}) {
         console.log('[OK] ' + config_files_js_1.STACK_CONFIG_FILENAME + ' already exists');
         console.log('     (use --force to regenerate)\n');
     }
-    // ============================================================
-    // Step 2: Interactive vault and secrets setup
-    // ============================================================
-    await setupVaultAndSecrets(rootDir);
-}
-/**
- * Interactive vault password creation and secret prompting.
- * This is the part that cannot be automated via scanfixes.
- */
-async function setupVaultAndSecrets(rootDir) {
-    console.log('Checking prerequisites...\n');
-    const hasAnsibleVault = checkAnsibleVault();
-    if (hasAnsibleVault) {
-        console.log('  [OK] ansible-vault is installed');
-    }
-    else {
-        console.log('  [!] ansible-vault not found');
-        console.log('      Ansible Vault is required for managing secrets.');
-        console.log('      Install:');
-        if (process.platform === 'darwin') {
-            console.log('        brew install ansible');
-        }
-        else if (process.platform === 'win32') {
-            console.log('        pip install ansible');
-        }
-        else {
-            console.log('        sudo apt install ansible  (Debian/Ubuntu)');
-            console.log('        sudo yum install ansible  (RHEL/CentOS)');
-        }
-        return;
-    }
-    // Vault setup (interactive)
-    const vaultPassFile = path.join(os.homedir(), '.vault_pass');
-    const hasExistingVaultPass = fs.existsSync(vaultPassFile);
-    if (hasExistingVaultPass) {
-        console.log('  [OK] Vault password file exists at ' + vaultPassFile);
-        // Auto-create vault structure if password exists
-        const vaultFixes = await ensureVaultSetup(rootDir, vaultPassFile);
-        for (const fix of vaultFixes) {
-            console.log('  [OK] ' + fix);
-        }
-    }
-    else {
-        console.log('');
-        const setupVault = await (0, secret_prompts_js_1.confirm)('Set up Ansible Vault for secrets now?', true);
-        if (setupVault) {
-            console.log('\n  Create a vault password (keep this safe - you need it to access secrets):');
-            const vaultPassword = await (0, secret_prompts_js_1.promptSingleLine)('  Vault password: ', { hidden: true });
-            if (vaultPassword && vaultPassword.trim().length > 0) {
-                fs.writeFileSync(vaultPassFile, vaultPassword.trim(), 'utf8');
-                try {
-                    fs.chmodSync(vaultPassFile, 0o600);
-                }
-                catch {
-                    // Windows doesn't support chmod - that's OK
-                }
-                console.log('  [OK] Vault password saved to ' + vaultPassFile);
-                const vaultFixes = await ensureVaultSetup(rootDir, vaultPassFile);
-                for (const fix of vaultFixes) {
-                    console.log('  [OK] ' + fix);
-                }
-            }
-            else {
-                console.log('  [!] Skipped vault setup (no password provided)');
-            }
-        }
-        else {
-            console.log('  [!] Skipped vault setup. Set up later:');
-            console.log('      1. Create vault password: echo "your-password" > ~/.vault_pass');
-            console.log('      2. Store a secret: npx stack secrets set STAGING_SSH');
-        }
-    }
-    // Prompt for missing secrets (SSH keys, AWS credentials)
-    await promptForMissingSecrets(rootDir);
-    console.log('\n  ────────────────────────────────────────────────');
-    console.log('  Config files are managed by `npx stack` (scan/fix).');
-    console.log('  This command only handles vault and secrets setup.');
-    console.log('  ────────────────────────────────────────────────\n');
+    console.log('  ────────────────────────────────────────────────');
+    console.log('  NEXT STEPS');
+    console.log('  ────────────────────────────────────────────────');
+    console.log('');
+    console.log('  1. Replace all EXAMPLE_ values in ' + config_files_js_1.STACK_CONFIG_FILENAME);
+    console.log('  2. npx stack scan           -> check what needs fixing');
+    console.log('  3. npx stack fix            -> auto-fix issues');
+    console.log('  4. npx stack secrets set    -> store SSH keys & credentials');
+    console.log('');
 }
 exports.default = init;
 //# sourceMappingURL=init.js.map

package/dist/cli/init.js.map

@@ -1 +1 @@
-{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/cli/init.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsNH,oBA8BC;AAlPD,2CAA6B;AAC7B,kEAAyF;AACzF,uCAAyB;AACzB,uCAAyB;AACzB,sDAA2B;AAC3B,iDAAyC;AACzC,+EAAyE;AACzE,kEAAwF;AACxF,kEAAiE;AAGjE;;GAEG;AACH,SAAS,iBAAiB;IACxB,IAAI,CAAC;QACH,IAAA,wBAAQ,EAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,gBAAgB,CAAC,OAAe,EAAE,cAAsB;IACrE,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;IAC7D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACjC,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,KAAK,CAAC,IAAI,CAAC,UAAU,GAAG,YAAY,CAAC,CAAC;IACxC,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;IAC3E,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,EAAE,mBAAmB,EAAE,GAAG,wDAAa,mCAAmC,GAAC,CAAC;YAClF,MAAM,KAAK,GAAG,IAAI,mBAAmB,CAAC;gBACpC,UAAU,EAAE,0BAA0B;gBACtC,mBAAmB,EAAE,eAAe;gBACpC,OAAO;aACR,CAAC,CAAC;YACH,MAAM,KAAK,CAAC,SAAS,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;YAC9C,KAAK,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACvD,KAAK,CAAC,IAAI,CAAC,0BAA0B,GAAG,GAAG,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,mBAAmB,CAAC,KAAU,EAAE,KAAyB,EAAE,QAAgB;IACxF,MAAM,OAAO,GAAG,KAAK,GAAG,aAAa,CAAC;IACtC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAE3C,6DAA6D;IAC7D,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,MAAM,IAAA,2BAAO,EAAC,8BAA8B,GAAG,OAAO,GAAG,eAAe,EAAE,KAAK,CAAC,CAAC;QACnG,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,iCAAiC,GAAG,OAAO,CAAC,CAAC;YACzD,OAAO;QACT,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,EAAE,GAAG,yBAAyB,CAAC,CAAC;YAC3E,OAAO;QACT,CAAC;QAED,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,CAAC;QAED,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC;YACH,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,gCAAgC;QAClC,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,0BAA0B,GAAG,OAAO,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,mCAAmC,GAAG,GAAG,CAAC,CAAC;IACzD,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,uBAAuB,CAAC,OAAe;IACpD,MAAM,UAAU,GAAG,IAAA,oCAAkB,EAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO;IAEvC,IAAI,MAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,GAAI,iBAAI,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAmB,IAAK,EAAoB,CAAC;IACtG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU;QAAE,OAAO;IAExC,MAAM,YAAY,GAAG,IAAA,uCAAmB,EAAC,MAAM,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC;IAC1C,MAAM,OAAO,GAAG,CAAC,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC;IACjE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAC7C,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,KAAK,KAAK,IAAI,GAAG,CAAC,aAAa,CACrD,CAAC;IAEF,IAAI,CAAC,UAAU,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM;QAAE,OAAO;IAE/C,IAAI,KAAU,CAAC;IACf,IAAI,CAAC;QACH,MAAM,EAAE,mBAAmB,EAAE,GAAG,wDAAa,mCAAmC,GAAC,CAAC;QAClF,KAAK,GAAG,IAAI,mBAAmB,CAAC;YAC9B,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU;YACrC,mBAAmB,EAAE,MAAM,CAAC,OAAO,CAAC,mBAAmB,IAAI,eAAe;YAC1E,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IAEzC,oBAAoB;IACpB,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;YACxD,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;gBAC1C,MAAM,MAAM,GAAG,MAAM,IAAA,2BAAO,EAAC,uFAAuF,EAAE,KAAK,CAAC,CAAC;gBAC7H,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,KAAK,GAAG,MAAM,IAAA,mCAAe,EAAC,aAAa,EAAE,MAAM,CAAC,CAAC;oBAC3D,IAAI,KAAK,EAAE,CAAC;wBACV,MAAM,KAAK,CAAC,SAAS,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;wBAC5C,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;wBAClD,MAAM,mBAAmB,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;oBACvD,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;gBAC5C,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACvD,OAAO,CAAC,GAAG,CAAC,qCAAqC,GAAG,GAAG,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,iBAAiB;IACjB,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;YACrD,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBACvC,MAAM,MAAM,GAAG,MAAM,IAAA,2BAAO,EAAC,iFAAiF,EAAE,KAAK,CAAC,CAAC;gBACvH,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,KAAK,GAAG,MAAM,IAAA,mCAAe,EAAC,UAAU,EAAE,MAAM,CAAC,CAAC;oBACxD,IAAI,KAAK,EAAE,CAAC;wBACV,MAAM,KAAK,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;wBACzC,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;wBAC/C,MAAM,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;oBACpD,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;gBACzC,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACvD,OAAO,CAAC,GAAG,CAAC,kCAAkC,GAAG,GAAG,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,8BAA8B;IAC9B,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC;YAClE,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,CAAC;gBACpD,MAAM,MAAM,GAAG,MAAM,IAAA,2BAAO,EAAC,kCAAkC,EAAE,KAAK,CAAC,CAAC;gBACxE,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,KAAK,GAAG,MAAM,IAAA,mCAAe,EAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;oBACrE,IAAI,KAAK,EAAE,CAAC;wBACV,MAAM,KAAK,CAAC,SAAS,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;wBACtD,OAAO,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;oBAC9D,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;gBACtD,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACvD,OAAO,CAAC,GAAG,CAAC,+CAA+C,GAAG,GAAG,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,IAAI,CAAC,UAAuB,EAAE;IAClD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACjD,MAAM,UAAU,GAAG,IAAA,oCAAkB,EAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAE9C,+DAA+D;IAC/D,+DAA+D;IAC/D,+DAA+D;IAC/D,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,uCAAqB,GAAG,OAAO,CAAC,CAAC;QAC/D,IAAA,0CAAkB,EAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,CAAC;SAAM,IAAI,UAAU,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;QACtC,MAAM,EAAE,qBAAqB,EAAE,GAAG,wDAAa,qCAAqC,GAAC,CAAC;QACtF,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,uCAAqB,GAAG,uCAAuC,CAAC,CAAC;YACpF,OAAO,CAAC,GAAG,CAAC,2DAA2D,CAAC,CAAC;YACzE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,uCAAqB,GAAG,iBAAiB,CAAC,CAAC;QACjE,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;IACpD,CAAC;IAED,+DAA+D;IAC/D,8CAA8C;IAC9C,+DAA+D;IAC/D,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,oBAAoB,CAAC,OAAe;IACjD,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IAE3C,MAAM,eAAe,GAAG,iBAAiB,EAAE,CAAC;IAC5C,IAAI,eAAe,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;IACnD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;QACrE,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAC9B,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;QAC9C,CAAC;aAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACxC,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;QAC7C,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;YACjE,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;QACjE,CAAC;QACD,OAAO;IACT,CAAC;IAED,4BAA4B;IAC5B,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,aAAa,CAAC,CAAC;IAC7D,MAAM,oBAAoB,GAAG,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAE1D,IAAI,oBAAoB,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,uCAAuC,GAAG,aAAa,CAAC,CAAC;QACrE,iDAAiD;QACjD,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAClE,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,MAAM,UAAU,GAAG,MAAM,IAAA,2BAAO,EAAC,uCAAuC,EAAE,IAAI,CAAC,CAAC;QAEhF,IAAI,UAAU,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,+EAA+E,CAAC,CAAC;YAC7F,MAAM,aAAa,GAAG,MAAM,IAAA,oCAAgB,EAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAEvF,IAAI,aAAa,IAAI,aAAa,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrD,EAAE,CAAC,aAAa,CAAC,aAAa,EAAE,aAAa,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;gBAC9D,IAAI,CAAC;oBACH,EAAE,CAAC,SAAS,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;gBACrC,CAAC;gBAAC,MAAM,CAAC;oBACP,4CAA4C;gBAC9C,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,iCAAiC,GAAG,aAAa,CAAC,CAAC;gBAE/D,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;gBAClE,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;oBAC7B,OAAO,CAAC,GAAG,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC;gBAC/B,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;YACxD,OAAO,CAAC,GAAG,CAAC,sEAAsE,CAAC,CAAC;YACpF,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IAED,yDAAyD;IACzD,MAAM,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAEvC,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;IACpE,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;IACpE,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;AACtE,CAAC;AAED,kBAAe,IAAI,CAAC"}
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/cli/init.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAOH,oBA+BC;AApCD,uCAAyB;AACzB,kEAAyF;AACzF,+EAA4E;AAGrE,KAAK,UAAU,IAAI,CAAC,UAAuB,EAAE;IAClD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACjD,MAAM,UAAU,GAAG,IAAA,oCAAkB,EAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAE9C,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,uCAAqB,GAAG,OAAO,CAAC,CAAC;QAC/D,IAAA,6CAAqB,EAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;SAAM,IAAI,UAAU,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;QACtC,MAAM,OAAO,GAAG,IAAA,6CAAqB,EAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,uCAAqB,GAAG,uCAAuC,CAAC,CAAC;YACpF,OAAO,CAAC,GAAG,CAAC,2DAA2D,CAAC,CAAC;YACzE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,uCAAqB,GAAG,iBAAiB,CAAC,CAAC;QACjE,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;IACpD,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;IAClE,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;IAClE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,sCAAsC,GAAG,uCAAqB,CAAC,CAAC;IAC5E,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;IACxE,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;IAChE,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;IAC7E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,kBAAe,IAAI,CAAC"}

package/dist/cli/pr-check.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pr-check.d.ts","sourceRoot":"","sources":["../../src/cli/pr-check.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AA6BH,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAyBD;;GAEG;AACH,wBAAsB,OAAO,CAAC,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,aAAa,CAAC,CAqFlF;AAED,eAAe,OAAO,CAAC"}
+{"version":3,"file":"pr-check.d.ts","sourceRoot":"","sources":["../../src/cli/pr-check.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AA2BH,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAcD;;GAEG;AACH,wBAAsB,OAAO,CAAC,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,aAAa,CAAC,CAqFlF;AAED,eAAe,OAAO,CAAC"}

package/dist/cli/pr-check.js

@@ -42,32 +42,16 @@ var __importStar = (this && this.__importStar) || (function () {
         return result;
     };
 })();
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.prCheck = prCheck;
 const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
-const js_yaml_1 = __importDefault(require("js-yaml"));
 const config_files_js_1 = require("../constants/config-files.js");
 const index_js_1 = require("../plugins/index.js");
 const ssh_helper_js_1 = require("../utils/ssh-helper.js");
 const github_status_js_1 = require("../utils/github-status.js");
 const pr_check_js_1 = require("../plugins/pipelines/factiii/pr-check.js");
 const config_helpers_js_1 = require("../utils/config-helpers.js");
-function loadConfig(rootDir) {
-    const configPath = (0, config_files_js_1.getStackConfigPath)(rootDir);
-    if (!fs.existsSync(configPath)) {
-        return {};
-    }
-    try {
-        return js_yaml_1.default.load(fs.readFileSync(configPath, 'utf8')) ?? {};
-    }
-    catch {
-        return {};
-    }
-}
 function formatBuildReport(results) {
     const lines = ['## Factiii PR Check – Build Results\n'];
     for (const r of results) {
@@ -83,7 +67,7 @@ function formatBuildReport(results) {
  */
 async function prCheck(options = {}) {
     const rootDir = options.rootDir ?? process.cwd();
-    const config = loadConfig(rootDir);
+    const config = (0, config_helpers_js_1.loadConfig)(rootDir);
     const environments = (0, config_helpers_js_1.extractEnvironments)(config);
     const stagingConfig = environments.staging;
     if (!stagingConfig?.domain) {

package/dist/cli/pr-check.js.map

@@ -1 +1 @@
-{"version":3,"file":"pr-check.js","sourceRoot":"","sources":["../../src/cli/pr-check.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiEH,0BAqFC;AApJD,uCAAyB;AACzB,2CAA6B;AAC7B,sDAA2B;AAE3B,kEAAkE;AAClE,kDAA0D;AAC1D,0DAAiE;AACjE,gEAImC;AACnC,0EAAqE;AACrE,kEAAiE;AAwBjE,SAAS,UAAU,CAAC,OAAe;IACjC,MAAM,UAAU,GAAG,IAAA,oCAAkB,EAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,OAAO,EAAmB,CAAC;IAC7B,CAAC;IACD,IAAI,CAAC;QACH,OAAQ,iBAAI,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAmB,IAAK,EAAoB,CAAC;IACpG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAmB,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,OAA6D;IACtF,MAAM,KAAK,GAAG,CAAC,uCAAuC,CAAC,CAAC;IACxD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC;QACnE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,OAAO,CAAC,UAA0B,EAAE;IACxD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACjD,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IAEnC,MAAM,YAAY,GAAG,IAAA,uCAAmB,EAAC,MAAM,CAAC,CAAC;IACjD,MAAM,aAAa,GAAG,YAAY,CAAC,OAAO,CAAC;IAC3C,IAAI,CAAC,aAAa,EAAE,MAAM,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,gEAAgE,CAAC,CAAC;QAC9E,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC;IAC7D,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,IAAA,8BAAmB,EAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC3D,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAoC,CAAC;IAEzG,IAAI,CAAC,cAAc,EAAE,QAAQ,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;QAC5C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;IACzD,CAAC;IAED,MAAM,KAAK,GAAG,cAAc,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAEzD,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,4BAA4B,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QACzD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IACjD,CAAC;IAED,4CAA4C;IAC5C,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,MAAM,EAAE,CAAC;QACtF,wGAAwG;QACxG,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,IAAI,KAAK,CAAC;QACtC,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC/E,MAAM,OAAO,GAAG,EAAE,CAAC,UAAU,CAAC,IAAA,oCAAkB,EAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;YAC9D,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;YACf,CAAC,CAAC,cAAc,CAAC;QAEnB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,wBAAwB,GAAG,OAAO,CAAC,CAAC;YAChD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;QACrD,CAAC;QAED,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC;QACpE,MAAM,KAAK,GAAG,IAAA,8BAAW,GAAE,CAAC;QAE5B,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;QACjD,MAAM,IAAA,qCAAkB,EAAC,GAAG,EAAE,SAAS,EAAE,wCAAwC,EAAE,kBAAkB,CAAC,CAAC;QAEvG,MAAM,WAAW,GAAG,MAAM,IAAA,uBAAS,EAAC,OAAO,EAAE,MAAM,EAAE;YACnD,MAAM,EAAE,GAAG,IAAI,SAAS;YACxB,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe;SAC1D,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/D,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO;YAC9B,CAAC,CAAC,mBAAmB;YACrB,CAAC,CAAC,2BAA2B,CAAC;QAEhC,MAAM,IAAA,qCAAkB,EAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,kBAAkB,CAAC,CAAC;QAEpE,IAAI,KAAK,IAAI,WAAW,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAA,kCAAe,EAAC,KAAK,EAAE,iBAAiB,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;QACvE,CAAC;QAED,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YACnC,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACtE,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC;QACxF,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,CAAC;IAC1C,CAAC;IAED,0DAA0D;IAC1D,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,IAAA,uCAAuB,EAAC,SAAS,EAAE,MAAM,EAAE,oBAAoB,CAAC,CAAC;QAChF,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM;SAClD,CAAC;IACJ,CAAC;IAED,mCAAmC;IACnC,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;IAC7E,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;IACrE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,kBAAe,OAAO,CAAC"}
+{"version":3,"file":"pr-check.js","sourceRoot":"","sources":["../../src/cli/pr-check.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoDH,0BAqFC;AAvID,uCAAyB;AACzB,2CAA6B;AAC7B,kEAAkE;AAClE,kDAA0D;AAC1D,0DAAiE;AACjE,gEAImC;AACnC,0EAAqE;AACrE,kEAA6E;AAyB7E,SAAS,iBAAiB,CAAC,OAA6D;IACtF,MAAM,KAAK,GAAG,CAAC,uCAAuC,CAAC,CAAC;IACxD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC;QACnE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,OAAO,CAAC,UAA0B,EAAE;IACxD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACjD,MAAM,MAAM,GAAG,IAAA,8BAAU,EAAC,OAAO,CAAC,CAAC;IAEnC,MAAM,YAAY,GAAG,IAAA,uCAAmB,EAAC,MAAM,CAAC,CAAC;IACjD,MAAM,aAAa,GAAG,YAAY,CAAC,OAAO,CAAC;IAC3C,IAAI,CAAC,aAAa,EAAE,MAAM,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,gEAAgE,CAAC,CAAC;QAC9E,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC;IAC7D,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,IAAA,8BAAmB,EAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC3D,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAoC,CAAC;IAEzG,IAAI,CAAC,cAAc,EAAE,QAAQ,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;QAC5C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;IACzD,CAAC;IAED,MAAM,KAAK,GAAG,cAAc,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAEzD,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,4BAA4B,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QACzD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IACjD,CAAC;IAED,4CAA4C;IAC5C,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,MAAM,EAAE,CAAC;QACtF,wGAAwG;QACxG,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,IAAI,KAAK,CAAC;QACtC,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC/E,MAAM,OAAO,GAAG,EAAE,CAAC,UAAU,CAAC,IAAA,oCAAkB,EAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;YAC9D,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;YACf,CAAC,CAAC,cAAc,CAAC;QAEnB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,wBAAwB,GAAG,OAAO,CAAC,CAAC;YAChD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;QACrD,CAAC;QAED,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC;QACpE,MAAM,KAAK,GAAG,IAAA,8BAAW,GAAE,CAAC;QAE5B,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;QACjD,MAAM,IAAA,qCAAkB,EAAC,GAAG,EAAE,SAAS,EAAE,wCAAwC,EAAE,kBAAkB,CAAC,CAAC;QAEvG,MAAM,WAAW,GAAG,MAAM,IAAA,uBAAS,EAAC,OAAO,EAAE,MAAM,EAAE;YACnD,MAAM,EAAE,GAAG,IAAI,SAAS;YACxB,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe;SAC1D,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/D,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO;YAC9B,CAAC,CAAC,mBAAmB;YACrB,CAAC,CAAC,2BAA2B,CAAC;QAEhC,MAAM,IAAA,qCAAkB,EAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,kBAAkB,CAAC,CAAC;QAEpE,IAAI,KAAK,IAAI,WAAW,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAA,kCAAe,EAAC,KAAK,EAAE,iBAAiB,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;QACvE,CAAC;QAED,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YACnC,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACtE,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC;QACxF,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,CAAC;IAC1C,CAAC;IAED,0DAA0D;IAC1D,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,IAAA,uCAAuB,EAAC,SAAS,EAAE,MAAM,EAAE,oBAAoB,CAAC,CAAC;QAChF,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM;SAClD,CAAC;IACJ,CAAC;IAED,mCAAmC;IACnC,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;IAC7E,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;IACrE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,kBAAe,OAAO,CAAC"}

package/dist/cli/scan.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scan.d.ts","sourceRoot":"","sources":["../../src/cli/scan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0DG;AASH,OAAO,KAAK,EAA2C,WAAW,EAAE,YAAY,EAAY,MAAM,mBAAmB,CAAC;AA+YtH;;GAEG;AACH,wBAAsB,IAAI,CAAC,OAAO,GAAE,WAAgB,EAAE,QAAQ,UAAQ,GAAG,OAAO,CAAC,YAAY,CAAC,CAoL7F;AAED,eAAe,IAAI,CAAC"}
+{"version":3,"file":"scan.d.ts","sourceRoot":"","sources":["../../src/cli/scan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0DG;AAOH,OAAO,KAAK,EAA2C,WAAW,EAAE,YAAY,EAAY,MAAM,mBAAmB,CAAC;AA4XtH;;GAEG;AACH,wBAAsB,IAAI,CAAC,OAAO,GAAE,WAAgB,EAAE,QAAQ,UAAQ,GAAG,OAAO,CAAC,YAAY,CAAC,CA0L7F;AAED,eAAe,IAAI,CAAC"}

package/dist/cli/scan.js

@@ -91,15 +91,11 @@ var __importStar = (this && this.__importStar) || (function () {
         return result;
     };
 })();
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.scan = scan;
 const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
 const child_process_1 = require("child_process");
-const js_yaml_1 = __importDefault(require("js-yaml"));
 const config_files_js_1 = require("../constants/config-files.js");
 const index_js_1 = require("../plugins/index.js");
 const config_helpers_js_1 = require("../utils/config-helpers.js");
@@ -108,23 +104,21 @@ const config_helpers_js_1 = require("../utils/config-helpers.js");
  * Returns null if no config exists (bootstrap needed).
  */
 async function loadPlugins(rootDir) {
-    const config = loadConfig(rootDir);
-    // If no config exists, return null to signal bootstrap mode
-    if (!config || Object.keys(config).length === 0) {
-        const configPath = (0, config_files_js_1.getStackConfigPath)(rootDir);
-        if (fs.existsSync(configPath)) {
-            const content = fs.readFileSync(configPath, 'utf8');
-            if (!content || content.trim().length === 0) {
-                return null; // Empty config — needs bootstrap
-            }
-            else {
-                console.error('\n[ERROR] Config contains no valid configuration.');
-                console.error('   Check your YAML syntax or run: npx stack init --force\n');
-                process.exit(1);
-            }
-        }
+    // Check if stack.yml exists (must exist before merging stackAuto.yml)
+    const configPath = (0, config_files_js_1.getStackConfigPath)(rootDir);
+    if (!fs.existsSync(configPath)) {
         return null; // No config file — needs bootstrap
     }
+    const content = fs.readFileSync(configPath, 'utf8');
+    if (!content || content.trim().length === 0) {
+        return null; // Empty config — needs bootstrap
+    }
+    const config = (0, config_helpers_js_1.loadConfig)(rootDir);
+    if (!config || Object.keys(config).length === 0) {
+        console.error('\n[ERROR] Config contains no valid configuration.');
+        console.error('   Check your YAML syntax or run: npx stack init --force\n');
+        process.exit(1);
+    }
     return (await (0, index_js_1.loadRelevantPlugins)(rootDir, config));
 }
 /**
@@ -174,23 +168,6 @@ async function runBootstrapFixes(plugins, rootDir) {
         }
     }
 }
-/**
- * Load config from stack.yml (or legacy stack.yml)
- */
-function loadConfig(rootDir) {
-    const configPath = (0, config_files_js_1.getStackConfigPath)(rootDir);
-    if (!fs.existsSync(configPath)) {
-        return {};
-    }
-    try {
-        return js_yaml_1.default.load(fs.readFileSync(configPath, 'utf8')) ?? {};
-    }
-    catch (e) {
-        const errorMessage = e instanceof Error ? e.message : String(e);
-        console.error('[!] Error parsing config: ' + errorMessage);
-        return {};
-    }
-}
 /**
  * Generate env var fixes from plugin requiredEnvVars
  */
@@ -223,7 +200,8 @@ function generateEnvVarFixes(plugin, rootDir, _config) {
             plugin: plugin.id,
             scan: async (config) => {
                 // Only check if staging environment is defined in config
-                const hasStagingEnv = config?.environments?.staging;
+                const { extractEnvironments: getEnvs } = await Promise.resolve().then(() => __importStar(require('../utils/config-helpers.js')));
+                const hasStagingEnv = getEnvs(config).staging;
                 if (!hasStagingEnv)
                     return false; // Skip check if staging not configured
                 const envPath = path.join(rootDir, '.env.staging');
@@ -244,7 +222,9 @@ function generateEnvVarFixes(plugin, rootDir, _config) {
             plugin: plugin.id,
             scan: async (config) => {
                 // Only check if prod environment is defined in config
-                const hasProdEnv = config?.environments?.prod || config?.environments?.production;
+                const { extractEnvironments: getEnvs } = await Promise.resolve().then(() => __importStar(require('../utils/config-helpers.js')));
+                const envs = getEnvs(config);
+                const hasProdEnv = envs.prod || envs.production;
                 if (!hasProdEnv)
                     return false; // Skip check if prod not configured
                 const envPath = path.join(rootDir, '.env.prod');
@@ -353,26 +333,23 @@ function displayProblems(problems, reachability, options = {}) {
                 console.log('           ansible:');
                 console.log('             vault_path: group_vars/all/vault.yml');
                 console.log('             vault_password_file: ~/.vault_pass');
-                console.log('         Or run: npx stack init');
             }
             else if (reasonLower.includes('vault password') || reasonLower.includes('vault_pass')) {
                 console.log('    Fix: Create vault password file:');
-                console.log('           echo "your-password" > ~/.vault_pass');
-                console.log('         Or run: npx stack init');
+                console.log('           echo "your-password" > ~/.vault_pass && chmod 600 ~/.vault_pass');
             }
             else if (reasonLower.includes('ssh') || reasonLower.includes('deploy_key')) {
                 console.log('    Fix: Set up SSH key for ' + stage + ':');
-                console.log('           npx stack init              (guided setup)');
                 console.log('           npx stack secrets set ' + stage.toUpperCase() + '_SSH   (add key to vault)');
                 console.log('           npx stack secrets write-ssh-keys  (extract keys to ~/.ssh/)');
             }
             else if (reasonLower.includes('github_token')) {
                 console.log('    Fix: export GITHUB_TOKEN=your_token');
                 console.log('         Or set up SSH keys instead (preferred):');
-                console.log('           npx stack init');
+                console.log('           npx stack fix --secrets');
             }
             else {
-                console.log('    Fix: npx stack init');
+                console.log('    Fix: npx stack fix');
             }
             console.log('');
         }
@@ -458,12 +435,12 @@ async function scan(options = {}, _isRerun = false) {
         console.log('');
         console.log('  Run: npx stack init');
         console.log('');
-        console.log('  This will scan your codebase, create stack.yml with');
-        console.log('  EXAMPLE_ values, and set up vault/secrets.');
+        console.log('  This will scan your codebase and create stack.yml');
+        console.log('  with EXAMPLE_ values for you to fill in.');
         console.log('');
         return { dev: [], secrets: [], staging: [], prod: [] };
     }
-    const config = loadConfig(rootDir);
+    const config = (0, config_helpers_js_1.loadConfig)(rootDir);
     // If commit hash provided, verify we're scanning the right code
     if (options.commit) {
         try {
@@ -523,11 +500,16 @@ async function scan(options = {}, _isRerun = false) {
             localStages.push(stage);
         }
     }
-    // Collect all fixes from all plugins
+    // Collect all fixes from all plugins (deduplicate by id+stage)
     const allFixes = [];
+    const seenFixKeys = new Set();
     for (const plugin of plugins) {
         // Add plugin fixes
         for (const fix of plugin.fixes ?? []) {
+            const key = fix.id + ':' + fix.stage;
+            if (seenFixKeys.has(key))
+                continue; // Skip duplicate
+            seenFixKeys.add(key);
             allFixes.push({ ...fix, plugin: plugin.id });
         }
         // Add auto-generated env var fixes
@@ -599,10 +581,12 @@ async function scan(options = {}, _isRerun = false) {
     // Remote stages: delegate to pipeline plugin
     if (remoteStages.length > 0 && !options.silent) {
         const PipelineClass = pipelinePlugin;
-        if (PipelineClass) {
+        if (PipelineClass && typeof PipelineClass === 'function') {
             const pipeline = new PipelineClass(config);
-            for (const stage of remoteStages) {
-                await pipeline.scanStage(stage, {});
+            if (typeof pipeline.scanStage === 'function') {
+                for (const stage of remoteStages) {
+                    await pipeline.scanStage(stage, {});
+                }
             }
         }
     }