@geekmidas/cli 0.14.0 → 0.15.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@geekmidas/cli",
-  "version": "0.14.0",
+  "version": "0.15.0",
   "description": "CLI tools for building Lambda handlers, server applications, and generating OpenAPI specs",
   "private": false,
   "type": "module",
@@ -54,9 +54,9 @@
   },
   "peerDependencies": {
     "@geekmidas/constructs": "~0.5.0",
-    "@geekmidas/envkit": "~0.3.0",
     "@geekmidas/schema": "~0.1.0",
     "@geekmidas/telescope": "~0.4.0",
+    "@geekmidas/envkit": "~0.3.0",
     "@geekmidas/logger": "~0.4.0"
   },
   "peerDependenciesMeta": {

package/src/build/__tests__/bundler.spec.ts

@@ -371,10 +371,10 @@ describe('bundleServer environment validation', () => {
 	);
 
 	itWithDir(
-		'should throw when secrets file does not exist',
+		'should auto-initialize secrets and throw for missing env vars',
 		async ({ dir }) => {
 			const entryPoint = await createEntryPoint(dir);
-			// Don't create secrets file
+			// Don't create secrets file - it should be auto-initialized
 
 			const constructs = [createMockConstruct(['DATABASE_URL'])];
 
@@ -382,6 +382,7 @@ describe('bundleServer environment validation', () => {
 			process.chdir(dir);
 
 			try {
+				// Should auto-initialize secrets but then fail because DATABASE_URL is required
 				await expect(
 					bundleServer({
 						entryPoint,
@@ -392,7 +393,7 @@ describe('bundleServer environment validation', () => {
 						stage: 'production',
 						constructs,
 					}),
-				).rejects.toThrow('No secrets found for stage "production"');
+				).rejects.toThrow('Missing environment variables');
 			} finally {
 				process.chdir(originalCwd);
 			}

package/src/build/bundler.ts

@@ -131,17 +131,21 @@ export async function bundleServer(
 			readStageSecrets,
 			toEmbeddableSecrets,
 			validateEnvironmentVariables,
+			initStageSecrets,
+			writeStageSecrets,
 		} = await import('../secrets/storage');
 		const { encryptSecrets, generateDefineOptions } = await import(
 			'../secrets/encryption'
 		);
 
-		const secrets = await readStageSecrets(stage);
+		let secrets = await readStageSecrets(stage);
 
 		if (!secrets) {
-			throw new Error(
-				`No secrets found for stage "${stage}". Run "gkm secrets:init --stage ${stage}" first.`,
-			);
+			// Auto-initialize secrets for the stage
+			console.log(`  Initializing secrets for stage "${stage}"...`);
+			secrets = initStageSecrets(stage);
+			await writeStageSecrets(secrets);
+			console.log(`  ✓ Created .gkm/secrets/${stage}.json`);
 		}
 
 		// Auto-populate env vars from docker compose services

package/src/deploy/__tests__/docker.spec.ts

@@ -1,6 +1,11 @@
-import { describe, expect, it } from 'vitest';
+import { describe, expect, it, vi } from 'vitest';
 import type { GkmConfig } from '../../types';
-import { getImageRef, resolveDockerConfig } from '../docker';
+import {
+	getAppNameFromCwd,
+	getAppNameFromPackageJson,
+	getImageRef,
+	resolveDockerConfig,
+} from '../docker';
 
 describe('getImageRef', () => {
 	it('should return image with registry prefix', () => {
@@ -36,8 +41,26 @@ describe('getImageRef', () => {
 	});
 });
 
+describe('getAppNameFromCwd', () => {
+	it('should return app name from package.json in current directory', () => {
+		// Tests run from the monorepo root, so cwd is the root directory
+		const appName = getAppNameFromCwd();
+		// The root package.json has name "@geekmidas/toolbox", so it should strip the scope
+		expect(appName).toBe('toolbox');
+	});
+});
+
+describe('getAppNameFromPackageJson', () => {
+	it('should return app name from package.json adjacent to lockfile', () => {
+		// This test runs in the toolbox monorepo, so it should find the root package.json
+		const appName = getAppNameFromPackageJson();
+		// The root package.json has name "@geekmidas/toolbox", so it should strip the scope
+		expect(appName).toBe('toolbox');
+	});
+});
+
 describe('resolveDockerConfig', () => {
-	it('should return empty config when docker not configured', () => {
+	it('should fallback to package.json name when docker not configured', () => {
 		const config: GkmConfig = {
 			routes: './src/endpoints',
 			envParser: './src/env',
@@ -47,7 +70,8 @@ describe('resolveDockerConfig', () => {
 		const dockerConfig = resolveDockerConfig(config);
 
 		expect(dockerConfig.registry).toBeUndefined();
-		expect(dockerConfig.imageName).toBeUndefined();
+		// Should fallback to package.json name or 'app'
+		expect(dockerConfig.imageName).toBeDefined();
 	});
 
 	it('should return registry from docker config', () => {
@@ -97,7 +121,7 @@ describe('resolveDockerConfig', () => {
 		expect(dockerConfig.imageName).toBe('backend-api');
 	});
 
-	it('should handle empty docker object', () => {
+	it('should fallback to package.json name when docker object is empty', () => {
 		const config: GkmConfig = {
 			routes: './src/endpoints',
 			docker: {},
@@ -106,6 +130,20 @@ describe('resolveDockerConfig', () => {
 		const dockerConfig = resolveDockerConfig(config);
 
 		expect(dockerConfig.registry).toBeUndefined();
-		expect(dockerConfig.imageName).toBeUndefined();
+		// Should fallback to package.json name or 'app'
+		expect(dockerConfig.imageName).toBeDefined();
+	});
+
+	it('should prefer explicit imageName over package.json', () => {
+		const config: GkmConfig = {
+			routes: './src/endpoints',
+			docker: {
+				imageName: 'explicit-name',
+			},
+		};
+
+		const dockerConfig = resolveDockerConfig(config);
+
+		expect(dockerConfig.imageName).toBe('explicit-name');
 	});
 });

package/src/deploy/__tests__/index.spec.ts

@@ -133,6 +133,39 @@ describe('provisionServices', () => {
 		);
 	});
 
+	it('should provision postgres and return individual connection parameters', async () => {
+		server.use(
+			http.post(`${BASE_URL}/api/postgres.create`, async ({ request }) => {
+				const body = (await request.json()) as { databasePassword?: string };
+				return HttpResponse.json({
+					postgresId: 'pg_123',
+					name: 'myapp-db',
+					appName: 'myapp-db',
+					databaseName: 'mydb',
+					databaseUser: 'dbuser',
+					databasePassword: body.databasePassword,
+					applicationStatus: 'idle',
+				});
+			}),
+			http.post(`${BASE_URL}/api/postgres.deploy`, () => {
+				return HttpResponse.json({ success: true });
+			}),
+		);
+
+		const api = new DokployApi({ baseUrl: BASE_URL, token: 'test-token' });
+
+		const result = await provisionServices(api, 'proj_1', 'env_1', 'myapp', {
+			postgres: true,
+		});
+
+		expect(result).toBeDefined();
+		expect(result?.DATABASE_HOST).toBe('myapp-db');
+		expect(result?.DATABASE_PORT).toBe('5432');
+		expect(result?.DATABASE_NAME).toBe('mydb');
+		expect(result?.DATABASE_USER).toBe('dbuser');
+		expect(result?.DATABASE_PASSWORD).toMatch(/^[a-f0-9]{32}$/);
+	});
+
 	it('should provision redis and return REDIS_URL', async () => {
 		server.use(
 			http.post(`${BASE_URL}/api/redis.create`, async ({ request }) => {
@@ -162,6 +195,35 @@ describe('provisionServices', () => {
 		);
 	});
 
+	it('should provision redis and return individual connection parameters', async () => {
+		server.use(
+			http.post(`${BASE_URL}/api/redis.create`, async ({ request }) => {
+				const body = (await request.json()) as { databasePassword?: string };
+				return HttpResponse.json({
+					redisId: 'redis_123',
+					name: 'myapp-cache',
+					appName: 'myapp-cache',
+					databasePassword: body.databasePassword,
+					applicationStatus: 'idle',
+				});
+			}),
+			http.post(`${BASE_URL}/api/redis.deploy`, () => {
+				return HttpResponse.json({ success: true });
+			}),
+		);
+
+		const api = new DokployApi({ baseUrl: BASE_URL, token: 'test-token' });
+
+		const result = await provisionServices(api, 'proj_1', 'env_1', 'myapp', {
+			redis: true,
+		});
+
+		expect(result).toBeDefined();
+		expect(result?.REDIS_HOST).toBe('myapp-cache');
+		expect(result?.REDIS_PORT).toBe('6379');
+		expect(result?.REDIS_PASSWORD).toMatch(/^[a-f0-9]{32}$/);
+	});
+
 	it('should provision both postgres and redis', async () => {
 		server.use(
 			http.post(`${BASE_URL}/api/postgres.create`, async ({ request }) => {

package/src/deploy/docker.ts

@@ -1,8 +1,68 @@
 import { execSync } from 'node:child_process';
+import { existsSync, readFileSync } from 'node:fs';
 import { dirname, join, relative } from 'node:path';
+import type { GkmConfig } from '../config';
 import { dockerCommand, findLockfilePath, isMonorepo } from '../docker';
 import type { DeployResult, DockerDeployConfig } from './types';
 
+/**
+ * Get app name from package.json in the current working directory
+ * Used for Dokploy app/project naming
+ */
+export function getAppNameFromCwd(): string | undefined {
+	const packageJsonPath = join(process.cwd(), 'package.json');
+
+	if (!existsSync(packageJsonPath)) {
+		return undefined;
+	}
+
+	try {
+		const pkg = JSON.parse(readFileSync(packageJsonPath, 'utf-8'));
+		if (pkg.name) {
+			// Strip org scope if present (e.g., @myorg/app -> app)
+			return pkg.name.replace(/^@[^/]+\//, '');
+		}
+	} catch {
+		// Ignore parse errors
+	}
+
+	return undefined;
+}
+
+/**
+ * Get app name from package.json adjacent to the lockfile (project root)
+ * Used for Docker image naming
+ */
+export function getAppNameFromPackageJson(): string | undefined {
+	const cwd = process.cwd();
+
+	// Find the lockfile to determine the project root
+	const lockfilePath = findLockfilePath(cwd);
+	if (!lockfilePath) {
+		return undefined;
+	}
+
+	// Use the package.json adjacent to the lockfile
+	const projectRoot = dirname(lockfilePath);
+	const packageJsonPath = join(projectRoot, 'package.json');
+
+	if (!existsSync(packageJsonPath)) {
+		return undefined;
+	}
+
+	try {
+		const pkg = JSON.parse(readFileSync(packageJsonPath, 'utf-8'));
+		if (pkg.name) {
+			// Strip org scope if present (e.g., @myorg/app -> app)
+			return pkg.name.replace(/^@[^/]+\//, '');
+		}
+	} catch {
+		// Ignore parse errors
+	}
+
+	return undefined;
+}
+
 const logger = console;
 
 export interface DockerDeployOptions {
@@ -110,7 +170,8 @@ export async function deployDocker(
 ): Promise<DeployResult> {
 	const { stage, tag, skipPush, masterKey, config } = options;
 
-	const imageName = config.imageName ?? 'app';
+	// imageName should always be set by resolveDockerConfig
+	const imageName = config.imageName!;
 	const imageRef = getImageRef(config.registry, imageName, tag);
 
 	// Build image
@@ -148,10 +209,24 @@ export async function deployDocker(
 
 /**
  * Resolve Docker deploy config from gkm config
+ * - imageName: from config, or cwd package.json, or 'app' (for Docker image)
+ * - projectName: from root package.json, or 'app' (for Dokploy project)
+ * - appName: from cwd package.json, or projectName (for Dokploy app within project)
  */
 export function resolveDockerConfig(config: GkmConfig): DockerDeployConfig {
+	// projectName comes from root package.json (monorepo name)
+	const projectName = getAppNameFromPackageJson() ?? 'app';
+
+	// appName comes from cwd package.json (the app being deployed)
+	const appName = getAppNameFromCwd() ?? projectName;
+
+	// imageName defaults to appName (cwd package.json)
+	const imageName = config.docker?.imageName ?? appName;
+
 	return {
 		registry: config.docker?.registry,
-		imageName: config.docker?.imageName,
+		imageName,
+		projectName,
+		appName,
 	};
 }

package/src/deploy/index.ts

@@ -17,6 +17,7 @@ import type {
 	DeployOptions,
 	DeployProvider,
 	DeployResult,
+	DockerDeployConfig,
 	DokployDeployConfig,
 } from './types';
 
@@ -76,15 +77,28 @@ interface DockerComposeServices {
 	rabbitmq?: boolean;
 }
 
+/**
+ * Service URLs including both connection URLs and individual parameters
+ */
+interface ServiceUrls {
+	DATABASE_URL?: string;
+	DATABASE_HOST?: string;
+	DATABASE_PORT?: string;
+	DATABASE_NAME?: string;
+	DATABASE_USER?: string;
+	DATABASE_PASSWORD?: string;
+	REDIS_URL?: string;
+	REDIS_HOST?: string;
+	REDIS_PORT?: string;
+	REDIS_PASSWORD?: string;
+}
+
 /**
  * Result of Dokploy setup including provisioned service URLs
  */
 interface DokploySetupResult {
 	config: DokployDeployConfig;
-	serviceUrls?: {
-		DATABASE_URL?: string;
-		REDIS_URL?: string;
-	};
+	serviceUrls?: ServiceUrls;
 }
 
 /**
@@ -97,8 +111,8 @@ export async function provisionServices(
 	environmentId: string | undefined,
 	appName: string,
 	services?: DockerComposeServices,
-	existingUrls?: { DATABASE_URL?: string; REDIS_URL?: string },
-): Promise<{ DATABASE_URL?: string; REDIS_URL?: string } | undefined> {
+	existingUrls?: Pick<ServiceUrls, 'DATABASE_URL' | 'REDIS_URL'>,
+): Promise<ServiceUrls | undefined> {
 	logger.log(
 		`\n🔍 provisionServices called: services=${JSON.stringify(services)}, envId=${environmentId}`,
 	);
@@ -107,7 +121,7 @@ export async function provisionServices(
 		return undefined;
 	}
 
-	const serviceUrls: { DATABASE_URL?: string; REDIS_URL?: string } = {};
+	const serviceUrls: ServiceUrls = {};
 
 	if (services.postgres) {
 		// Skip if DATABASE_URL already exists in secrets
@@ -134,9 +148,16 @@ export async function provisionServices(
 				await api.deployPostgres(postgres.postgresId);
 				logger.log('   ✓ PostgreSQL deployed');
 
+				// Store individual connection parameters
+				serviceUrls.DATABASE_HOST = postgres.appName;
+				serviceUrls.DATABASE_PORT = '5432';
+				serviceUrls.DATABASE_NAME = postgres.databaseName;
+				serviceUrls.DATABASE_USER = postgres.databaseUser;
+				serviceUrls.DATABASE_PASSWORD = postgres.databasePassword;
+
 				// Construct connection URL using internal docker network hostname
 				serviceUrls.DATABASE_URL = `postgresql://${postgres.databaseUser}:${postgres.databasePassword}@${postgres.appName}:5432/${postgres.databaseName}`;
-				logger.log(`   ✓ DATABASE_URL configured`);
+				logger.log(`   ✓ Database credentials configured`);
 			} catch (error) {
 				const message =
 					error instanceof Error ? error.message : 'Unknown error';
@@ -179,12 +200,19 @@ export async function provisionServices(
 				await api.deployRedis(redis.redisId);
 				logger.log('   ✓ Redis deployed');
 
+				// Store individual connection parameters
+				serviceUrls.REDIS_HOST = redis.appName;
+				serviceUrls.REDIS_PORT = '6379';
+				if (redis.databasePassword) {
+					serviceUrls.REDIS_PASSWORD = redis.databasePassword;
+				}
+
 				// Construct connection URL
 				const password = redis.databasePassword
 					? `:${redis.databasePassword}@`
 					: '';
 				serviceUrls.REDIS_URL = `redis://${password}${redis.appName}:6379`;
-				logger.log(`   ✓ REDIS_URL configured`);
+				logger.log(`   ✓ Redis credentials configured`);
 			} catch (error) {
 				const message =
 					error instanceof Error ? error.message : 'Unknown error';
@@ -208,7 +236,7 @@ export async function provisionServices(
  */
 async function ensureDokploySetup(
 	config: GkmConfig,
-	dockerConfig: { registry?: string; imageName?: string },
+	dockerConfig: DockerDeployConfig,
 	stage: string,
 	services?: DockerComposeServices,
 ): Promise<DokploySetupResult> {
@@ -301,7 +329,7 @@ async function ensureDokploySetup(
 				api,
 				existingConfig.projectId,
 				environmentId,
-				dockerConfig.imageName || 'app',
+				dockerConfig.appName!,
 				services,
 				existingUrls,
 			);
@@ -323,7 +351,7 @@ async function ensureDokploySetup(
 
 	// Step 3: Find or create project
 	logger.log('\n📁 Looking for project...');
-	const projectName = dockerConfig.imageName || 'app';
+	const projectName = dockerConfig.projectName!;
 	const projects = await api.listProjects();
 	let project = projects.find(
 		(p) => p.name.toLowerCase() === projectName.toLowerCase(),
@@ -369,7 +397,7 @@ async function ensureDokploySetup(
 
 	// Step 5: Find or create application
 	logger.log('\n📦 Looking for application...');
-	const appName = dockerConfig.imageName || projectName;
+	const appName = dockerConfig.appName!;
 
 	let applicationId: string;
 
@@ -502,7 +530,7 @@ async function ensureDokploySetup(
 		api,
 		project.projectId,
 		environmentId,
-		dockerConfig.imageName || 'app',
+		dockerConfig.appName!,
 		services,
 		existingUrls,
 	);
@@ -541,7 +569,7 @@ export async function deployCommand(
 
 	// Resolve docker config for image reference
 	const dockerConfig = resolveDockerConfig(config);
-	const imageName = dockerConfig.imageName ?? 'app';
+	const imageName = dockerConfig.imageName!;
 	const registry = dockerConfig.registry;
 	const imageRef = registry
 		? `${registry}/${imageName}:${imageTag}`
@@ -594,12 +622,27 @@ export async function deployCommand(
 			}
 
 			let updated = false;
+			// URL fields go to secrets.urls, individual params go to secrets.custom
+			const urlFields = ['DATABASE_URL', 'REDIS_URL', 'RABBITMQ_URL'] as const;
+
 			for (const [key, value] of Object.entries(setupResult.serviceUrls)) {
-				const urlKey = key as keyof typeof secrets.urls;
-				if (value && !secrets.urls[urlKey] && !secrets.custom[key]) {
-					secrets.urls[urlKey] = value;
-					logger.log(`   Saved ${key} to secrets`);
-					updated = true;
+				if (!value) continue;
+
+				if (urlFields.includes(key as (typeof urlFields)[number])) {
+					// URL fields
+					const urlKey = key as keyof typeof secrets.urls;
+					if (!secrets.urls[urlKey]) {
+						secrets.urls[urlKey] = value;
+						logger.log(`   Saved ${key} to secrets.urls`);
+						updated = true;
+					}
+				} else {
+					// Individual parameters (HOST, PORT, NAME, USER, PASSWORD)
+					if (!secrets.custom[key]) {
+						secrets.custom[key] = value;
+						logger.log(`   Saved ${key} to secrets.custom`);
+						updated = true;
+					}
 				}
 			}
 			if (updated) {

package/src/deploy/types.ts

@@ -31,8 +31,12 @@ export interface DeployResult {
 export interface DockerDeployConfig {
 	/** Container registry URL */
 	registry?: string;
-	/** Image name (default: from package.json) */
+	/** Image name for Docker (default: from root package.json) */
 	imageName?: string;
+	/** Project name for Dokploy (default: from root package.json) */
+	projectName?: string;
+	/** App name within Dokploy project (default: from cwd package.json) */
+	appName?: string;
 }
 
 /** Dokploy provider configuration */

package/dist/bundler-BjholBlA.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"bundler-BjholBlA.cjs","names":["constructs: Construct[]","DOCKER_SERVICE_ENV_VARS: Record<string, Record<string, string>>","options: BundleOptions","masterKey: string | undefined"],"sources":["../src/build/bundler.ts"],"sourcesContent":["import { spawnSync } from 'node:child_process';\nimport { existsSync } from 'node:fs';\nimport { mkdir, rename, writeFile } from 'node:fs/promises';\nimport { join } from 'node:path';\nimport type { Construct } from '@geekmidas/constructs';\n\nexport interface BundleOptions {\n\t/** Entry point file (e.g., .gkm/server/server.ts) */\n\tentryPoint: string;\n\t/** Output directory for bundled files */\n\toutputDir: string;\n\t/** Minify the output (default: true) */\n\tminify: boolean;\n\t/** Generate sourcemaps (default: false) */\n\tsourcemap: boolean;\n\t/** Packages to exclude from bundling */\n\texternal: string[];\n\t/** Stage for secrets injection (optional) */\n\tstage?: string;\n\t/** Constructs to validate environment variables for */\n\tconstructs?: Construct[];\n\t/** Docker compose services configured (for auto-populating env vars) */\n\tdockerServices?: {\n\t\tpostgres?: boolean;\n\t\tredis?: boolean;\n\t\trabbitmq?: boolean;\n\t};\n}\n\nexport interface BundleResult {\n\t/** Path to the bundled output */\n\toutputPath: string;\n\t/** Ephemeral master key for deployment (only if stage was provided) */\n\tmasterKey?: string;\n}\n\n/**\n * Collect all required environment variables from constructs.\n * Uses the SnifferEnvironmentParser to detect which env vars each service needs.\n *\n * @param constructs - Array of constructs to analyze\n * @returns Deduplicated array of required environment variable names\n */\nasync function collectRequiredEnvVars(\n\tconstructs: Construct[],\n): Promise<string[]> {\n\tconst allEnvVars = new Set<string>();\n\n\tfor (const construct of constructs) {\n\t\tconst envVars = await construct.getEnvironment();\n\t\tenvVars.forEach((v) => allEnvVars.add(v));\n\t}\n\n\treturn Array.from(allEnvVars).sort();\n}\n\n/**\n * Bundle the server application using tsdown\n *\n * @param options - Bundle configuration options\n * @returns Bundle result with output path and optional master key\n */\n/** Default env var values for docker compose services */\nconst DOCKER_SERVICE_ENV_VARS: Record<string, Record<string, string>> = {\n\tpostgres: {\n\t\tDATABASE_URL: 'postgresql://postgres:postgres@postgres:5432/app',\n\t},\n\tredis: {\n\t\tREDIS_URL: 'redis://redis:6379',\n\t},\n\trabbitmq: {\n\t\tRABBITMQ_URL: 'amqp://rabbitmq:5672',\n\t},\n};\n\nexport async function bundleServer(\n\toptions: BundleOptions,\n): Promise<BundleResult> {\n\tconst {\n\t\tentryPoint,\n\t\toutputDir,\n\t\tminify,\n\t\tsourcemap,\n\t\texternal,\n\t\tstage,\n\t\tconstructs,\n\t\tdockerServices,\n\t} = options;\n\n\t// Ensure output directory exists\n\tawait mkdir(outputDir, { recursive: true });\n\n\t// Build command-line arguments for tsdown\n\tconst args = [\n\t\t'npx',\n\t\t'tsdown',\n\t\tentryPoint,\n\t\t'--no-config', // Don't use any config file from workspace\n\t\t'--out-dir',\n\t\toutputDir,\n\t\t'--format',\n\t\t'esm',\n\t\t'--platform',\n\t\t'node',\n\t\t'--target',\n\t\t'node22',\n\t\t'--clean',\n\t];\n\n\tif (minify) {\n\t\targs.push('--minify');\n\t}\n\n\tif (sourcemap) {\n\t\targs.push('--sourcemap');\n\t}\n\n\t// Add external packages\n\tfor (const ext of external) {\n\t\targs.push('--external', ext);\n\t}\n\n\t// Always exclude node: builtins\n\targs.push('--external', 'node:*');\n\n\t// Handle secrets injection if stage is provided\n\tlet masterKey: string | undefined;\n\n\tif (stage) {\n\t\tconst {\n\t\t\treadStageSecrets,\n\t\t\ttoEmbeddableSecrets,\n\t\t\tvalidateEnvironmentVariables,\n\t\t} = await import('../secrets/storage');\n\t\tconst { encryptSecrets, generateDefineOptions } = await import(\n\t\t\t'../secrets/encryption'\n\t\t);\n\n\t\tconst secrets = await readStageSecrets(stage);\n\n\t\tif (!secrets) {\n\t\t\tthrow new Error(\n\t\t\t\t`No secrets found for stage \"${stage}\". Run \"gkm secrets:init --stage ${stage}\" first.`,\n\t\t\t);\n\t\t}\n\n\t\t// Auto-populate env vars from docker compose services\n\t\tif (dockerServices) {\n\t\t\tfor (const [service, enabled] of Object.entries(dockerServices)) {\n\t\t\t\tif (enabled && DOCKER_SERVICE_ENV_VARS[service]) {\n\t\t\t\t\tfor (const [envVar, defaultValue] of Object.entries(\n\t\t\t\t\t\tDOCKER_SERVICE_ENV_VARS[service],\n\t\t\t\t\t)) {\n\t\t\t\t\t\t// Check if not already in urls or custom\n\t\t\t\t\t\tconst urlKey = envVar as keyof typeof secrets.urls;\n\t\t\t\t\t\tif (!secrets.urls[urlKey] && !secrets.custom[envVar]) {\n\t\t\t\t\t\t\tsecrets.urls[urlKey] = defaultValue;\n\t\t\t\t\t\t\tconsole.log(`  Auto-populated ${envVar} from docker compose`);\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\t// Validate environment variables if constructs are provided\n\t\tif (constructs && constructs.length > 0) {\n\t\t\tconsole.log('  Analyzing environment variable requirements...');\n\t\t\tconst requiredVars = await collectRequiredEnvVars(constructs);\n\n\t\t\tif (requiredVars.length > 0) {\n\t\t\t\tconst validation = validateEnvironmentVariables(requiredVars, secrets);\n\n\t\t\t\tif (!validation.valid) {\n\t\t\t\t\tconst errorMessage = [\n\t\t\t\t\t\t`Missing environment variables for stage \"${stage}\":`,\n\t\t\t\t\t\t'',\n\t\t\t\t\t\t...validation.missing.map((v) => `  ❌ ${v}`),\n\t\t\t\t\t\t'',\n\t\t\t\t\t\t'To fix this, either:',\n\t\t\t\t\t\t`  1. Add the missing variables to .gkm/secrets/${stage}.json using:`,\n\t\t\t\t\t\t`     gkm secrets:set <KEY> <VALUE> --stage ${stage}`,\n\t\t\t\t\t\t'',\n\t\t\t\t\t\t`  2. Or import from a JSON file:`,\n\t\t\t\t\t\t`     gkm secrets:import secrets.json --stage ${stage}`,\n\t\t\t\t\t\t'',\n\t\t\t\t\t\t'Required variables:',\n\t\t\t\t\t\t...validation.required.map((v) =>\n\t\t\t\t\t\t\tvalidation.missing.includes(v) ? `  ❌ ${v}` : `  ✓ ${v}`,\n\t\t\t\t\t\t),\n\t\t\t\t\t].join('\\n');\n\n\t\t\t\t\tthrow new Error(errorMessage);\n\t\t\t\t}\n\n\t\t\t\tconsole.log(\n\t\t\t\t\t`  ✓ All ${requiredVars.length} required environment variables found`,\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\n\t\t// Convert to embeddable format and encrypt\n\t\tconst embeddable = toEmbeddableSecrets(secrets);\n\t\tconst encrypted = encryptSecrets(embeddable);\n\t\tmasterKey = encrypted.masterKey;\n\n\t\t// Add define options for build-time injection using tsdown's --env.* format\n\t\tconst defines = generateDefineOptions(encrypted);\n\t\tfor (const [key, value] of Object.entries(defines)) {\n\t\t\targs.push(`--env.${key}`, value);\n\t\t}\n\n\t\tconsole.log(`  Secrets encrypted for stage \"${stage}\"`);\n\t}\n\n\tconst mjsOutput = join(outputDir, 'server.mjs');\n\n\ttry {\n\t\t// Run tsdown with command-line arguments\n\t\t// Use spawnSync with args array to avoid shell escaping issues with --define values\n\t\t// args is always populated with ['npx', 'tsdown', ...] so cmd is never undefined\n\t\tconst [cmd, ...cmdArgs] = args as [string, ...string[]];\n\t\tconst result = spawnSync(cmd, cmdArgs, {\n\t\t\tcwd: process.cwd(),\n\t\t\tstdio: 'inherit',\n\t\t\tshell: process.platform === 'win32', // Only use shell on Windows for npx resolution\n\t\t});\n\n\t\tif (result.error) {\n\t\t\tthrow result.error;\n\t\t}\n\t\tif (result.status !== 0) {\n\t\t\tthrow new Error(`tsdown exited with code ${result.status}`);\n\t\t}\n\n\t\t// Rename output to .mjs for explicit ESM\n\t\t// tsdown outputs as server.js for ESM format\n\t\tconst jsOutput = join(outputDir, 'server.js');\n\n\t\tif (existsSync(jsOutput)) {\n\t\t\tawait rename(jsOutput, mjsOutput);\n\t\t}\n\n\t\t// Add shebang to the bundled file\n\t\tconst { readFile } = await import('node:fs/promises');\n\t\tconst content = await readFile(mjsOutput, 'utf-8');\n\t\tif (!content.startsWith('#!')) {\n\t\t\tawait writeFile(mjsOutput, `#!/usr/bin/env node\\n${content}`);\n\t\t}\n\t} catch (error) {\n\t\tthrow new Error(\n\t\t\t`Failed to bundle server: ${error instanceof Error ? error.message : 'Unknown error'}`,\n\t\t);\n\t}\n\n\treturn {\n\t\toutputPath: mjsOutput,\n\t\tmasterKey,\n\t};\n}\n"],"mappings":";;;;;;;;;;;;;;AA2CA,eAAe,uBACdA,YACoB;CACpB,MAAM,6BAAa,IAAI;AAEvB,MAAK,MAAM,aAAa,YAAY;EACnC,MAAM,UAAU,MAAM,UAAU,gBAAgB;AAChD,UAAQ,QAAQ,CAAC,MAAM,WAAW,IAAI,EAAE,CAAC;CACzC;AAED,QAAO,MAAM,KAAK,WAAW,CAAC,MAAM;AACpC;;;;;;;;AASD,MAAMC,0BAAkE;CACvE,UAAU,EACT,cAAc,mDACd;CACD,OAAO,EACN,WAAW,qBACX;CACD,UAAU,EACT,cAAc,uBACd;AACD;AAED,eAAsB,aACrBC,SACwB;CACxB,MAAM,EACL,YACA,WACA,QACA,WACA,UACA,OACA,YACA,gBACA,GAAG;AAGJ,OAAM,4BAAM,WAAW,EAAE,WAAW,KAAM,EAAC;CAG3C,MAAM,OAAO;EACZ;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACA;AAED,KAAI,OACH,MAAK,KAAK,WAAW;AAGtB,KAAI,UACH,MAAK,KAAK,cAAc;AAIzB,MAAK,MAAM,OAAO,SACjB,MAAK,KAAK,cAAc,IAAI;AAI7B,MAAK,KAAK,cAAc,SAAS;CAGjC,IAAIC;AAEJ,KAAI,OAAO;EACV,MAAM,EACL,kBACA,qBACA,8BACA,GAAG,2CAAM;EACV,MAAM,EAAE,gBAAgB,uBAAuB,GAAG,2CAAM;EAIxD,MAAM,UAAU,MAAM,iBAAiB,MAAM;AAE7C,OAAK,QACJ,OAAM,IAAI,OACR,8BAA8B,MAAM,mCAAmC,MAAM;AAKhF,MAAI,gBACH;QAAK,MAAM,CAAC,SAAS,QAAQ,IAAI,OAAO,QAAQ,eAAe,CAC9D,KAAI,WAAW,wBAAwB,SACtC,MAAK,MAAM,CAAC,QAAQ,aAAa,IAAI,OAAO,QAC3C,wBAAwB,SACxB,EAAE;IAEF,MAAM,SAAS;AACf,SAAK,QAAQ,KAAK,YAAY,QAAQ,OAAO,SAAS;AACrD,aAAQ,KAAK,UAAU;AACvB,aAAQ,KAAK,mBAAmB,OAAO,sBAAsB;IAC7D;GACD;EAEF;AAIF,MAAI,cAAc,WAAW,SAAS,GAAG;AACxC,WAAQ,IAAI,mDAAmD;GAC/D,MAAM,eAAe,MAAM,uBAAuB,WAAW;AAE7D,OAAI,aAAa,SAAS,GAAG;IAC5B,MAAM,aAAa,6BAA6B,cAAc,QAAQ;AAEtE,SAAK,WAAW,OAAO;KACtB,MAAM,eAAe;OACnB,2CAA2C,MAAM;MAClD;MACA,GAAG,WAAW,QAAQ,IAAI,CAAC,OAAO,MAAM,EAAE,EAAE;MAC5C;MACA;OACC,iDAAiD,MAAM;OACvD,6CAA6C,MAAM;MACpD;OACC;OACA,+CAA+C,MAAM;MACtD;MACA;MACA,GAAG,WAAW,SAAS,IAAI,CAAC,MAC3B,WAAW,QAAQ,SAAS,EAAE,IAAI,MAAM,EAAE,KAAK,MAAM,EAAE,EACvD;KACD,EAAC,KAAK,KAAK;AAEZ,WAAM,IAAI,MAAM;IAChB;AAED,YAAQ,KACN,UAAU,aAAa,OAAO,uCAC/B;GACD;EACD;EAGD,MAAM,aAAa,oBAAoB,QAAQ;EAC/C,MAAM,YAAY,eAAe,WAAW;AAC5C,cAAY,UAAU;EAGtB,MAAM,UAAU,sBAAsB,UAAU;AAChD,OAAK,MAAM,CAAC,KAAK,MAAM,IAAI,OAAO,QAAQ,QAAQ,CACjD,MAAK,MAAM,QAAQ,IAAI,GAAG,MAAM;AAGjC,UAAQ,KAAK,iCAAiC,MAAM,GAAG;CACvD;CAED,MAAM,YAAY,oBAAK,WAAW,aAAa;AAE/C,KAAI;EAIH,MAAM,CAAC,KAAK,GAAG,QAAQ,GAAG;EAC1B,MAAM,SAAS,kCAAU,KAAK,SAAS;GACtC,KAAK,QAAQ,KAAK;GAClB,OAAO;GACP,OAAO,QAAQ,aAAa;EAC5B,EAAC;AAEF,MAAI,OAAO,MACV,OAAM,OAAO;AAEd,MAAI,OAAO,WAAW,EACrB,OAAM,IAAI,OAAO,0BAA0B,OAAO,OAAO;EAK1D,MAAM,WAAW,oBAAK,WAAW,YAAY;AAE7C,MAAI,wBAAW,SAAS,CACvB,OAAM,6BAAO,UAAU,UAAU;EAIlC,MAAM,EAAE,UAAU,GAAG,MAAM,OAAO;EAClC,MAAM,UAAU,MAAM,SAAS,WAAW,QAAQ;AAClD,OAAK,QAAQ,WAAW,KAAK,CAC5B,OAAM,gCAAU,YAAY,uBAAuB,QAAQ,EAAE;CAE9D,SAAQ,OAAO;AACf,QAAM,IAAI,OACR,2BAA2B,iBAAiB,QAAQ,MAAM,UAAU,gBAAgB;CAEtF;AAED,QAAO;EACN,YAAY;EACZ;CACA;AACD"}

package/dist/bundler-DWctKN1z.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"bundler-DWctKN1z.mjs","names":["constructs: Construct[]","DOCKER_SERVICE_ENV_VARS: Record<string, Record<string, string>>","options: BundleOptions","masterKey: string | undefined"],"sources":["../src/build/bundler.ts"],"sourcesContent":["import { spawnSync } from 'node:child_process';\nimport { existsSync } from 'node:fs';\nimport { mkdir, rename, writeFile } from 'node:fs/promises';\nimport { join } from 'node:path';\nimport type { Construct } from '@geekmidas/constructs';\n\nexport interface BundleOptions {\n\t/** Entry point file (e.g., .gkm/server/server.ts) */\n\tentryPoint: string;\n\t/** Output directory for bundled files */\n\toutputDir: string;\n\t/** Minify the output (default: true) */\n\tminify: boolean;\n\t/** Generate sourcemaps (default: false) */\n\tsourcemap: boolean;\n\t/** Packages to exclude from bundling */\n\texternal: string[];\n\t/** Stage for secrets injection (optional) */\n\tstage?: string;\n\t/** Constructs to validate environment variables for */\n\tconstructs?: Construct[];\n\t/** Docker compose services configured (for auto-populating env vars) */\n\tdockerServices?: {\n\t\tpostgres?: boolean;\n\t\tredis?: boolean;\n\t\trabbitmq?: boolean;\n\t};\n}\n\nexport interface BundleResult {\n\t/** Path to the bundled output */\n\toutputPath: string;\n\t/** Ephemeral master key for deployment (only if stage was provided) */\n\tmasterKey?: string;\n}\n\n/**\n * Collect all required environment variables from constructs.\n * Uses the SnifferEnvironmentParser to detect which env vars each service needs.\n *\n * @param constructs - Array of constructs to analyze\n * @returns Deduplicated array of required environment variable names\n */\nasync function collectRequiredEnvVars(\n\tconstructs: Construct[],\n): Promise<string[]> {\n\tconst allEnvVars = new Set<string>();\n\n\tfor (const construct of constructs) {\n\t\tconst envVars = await construct.getEnvironment();\n\t\tenvVars.forEach((v) => allEnvVars.add(v));\n\t}\n\n\treturn Array.from(allEnvVars).sort();\n}\n\n/**\n * Bundle the server application using tsdown\n *\n * @param options - Bundle configuration options\n * @returns Bundle result with output path and optional master key\n */\n/** Default env var values for docker compose services */\nconst DOCKER_SERVICE_ENV_VARS: Record<string, Record<string, string>> = {\n\tpostgres: {\n\t\tDATABASE_URL: 'postgresql://postgres:postgres@postgres:5432/app',\n\t},\n\tredis: {\n\t\tREDIS_URL: 'redis://redis:6379',\n\t},\n\trabbitmq: {\n\t\tRABBITMQ_URL: 'amqp://rabbitmq:5672',\n\t},\n};\n\nexport async function bundleServer(\n\toptions: BundleOptions,\n): Promise<BundleResult> {\n\tconst {\n\t\tentryPoint,\n\t\toutputDir,\n\t\tminify,\n\t\tsourcemap,\n\t\texternal,\n\t\tstage,\n\t\tconstructs,\n\t\tdockerServices,\n\t} = options;\n\n\t// Ensure output directory exists\n\tawait mkdir(outputDir, { recursive: true });\n\n\t// Build command-line arguments for tsdown\n\tconst args = [\n\t\t'npx',\n\t\t'tsdown',\n\t\tentryPoint,\n\t\t'--no-config', // Don't use any config file from workspace\n\t\t'--out-dir',\n\t\toutputDir,\n\t\t'--format',\n\t\t'esm',\n\t\t'--platform',\n\t\t'node',\n\t\t'--target',\n\t\t'node22',\n\t\t'--clean',\n\t];\n\n\tif (minify) {\n\t\targs.push('--minify');\n\t}\n\n\tif (sourcemap) {\n\t\targs.push('--sourcemap');\n\t}\n\n\t// Add external packages\n\tfor (const ext of external) {\n\t\targs.push('--external', ext);\n\t}\n\n\t// Always exclude node: builtins\n\targs.push('--external', 'node:*');\n\n\t// Handle secrets injection if stage is provided\n\tlet masterKey: string | undefined;\n\n\tif (stage) {\n\t\tconst {\n\t\t\treadStageSecrets,\n\t\t\ttoEmbeddableSecrets,\n\t\t\tvalidateEnvironmentVariables,\n\t\t} = await import('../secrets/storage');\n\t\tconst { encryptSecrets, generateDefineOptions } = await import(\n\t\t\t'../secrets/encryption'\n\t\t);\n\n\t\tconst secrets = await readStageSecrets(stage);\n\n\t\tif (!secrets) {\n\t\t\tthrow new Error(\n\t\t\t\t`No secrets found for stage \"${stage}\". Run \"gkm secrets:init --stage ${stage}\" first.`,\n\t\t\t);\n\t\t}\n\n\t\t// Auto-populate env vars from docker compose services\n\t\tif (dockerServices) {\n\t\t\tfor (const [service, enabled] of Object.entries(dockerServices)) {\n\t\t\t\tif (enabled && DOCKER_SERVICE_ENV_VARS[service]) {\n\t\t\t\t\tfor (const [envVar, defaultValue] of Object.entries(\n\t\t\t\t\t\tDOCKER_SERVICE_ENV_VARS[service],\n\t\t\t\t\t)) {\n\t\t\t\t\t\t// Check if not already in urls or custom\n\t\t\t\t\t\tconst urlKey = envVar as keyof typeof secrets.urls;\n\t\t\t\t\t\tif (!secrets.urls[urlKey] && !secrets.custom[envVar]) {\n\t\t\t\t\t\t\tsecrets.urls[urlKey] = defaultValue;\n\t\t\t\t\t\t\tconsole.log(`  Auto-populated ${envVar} from docker compose`);\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\t// Validate environment variables if constructs are provided\n\t\tif (constructs && constructs.length > 0) {\n\t\t\tconsole.log('  Analyzing environment variable requirements...');\n\t\t\tconst requiredVars = await collectRequiredEnvVars(constructs);\n\n\t\t\tif (requiredVars.length > 0) {\n\t\t\t\tconst validation = validateEnvironmentVariables(requiredVars, secrets);\n\n\t\t\t\tif (!validation.valid) {\n\t\t\t\t\tconst errorMessage = [\n\t\t\t\t\t\t`Missing environment variables for stage \"${stage}\":`,\n\t\t\t\t\t\t'',\n\t\t\t\t\t\t...validation.missing.map((v) => `  ❌ ${v}`),\n\t\t\t\t\t\t'',\n\t\t\t\t\t\t'To fix this, either:',\n\t\t\t\t\t\t`  1. Add the missing variables to .gkm/secrets/${stage}.json using:`,\n\t\t\t\t\t\t`     gkm secrets:set <KEY> <VALUE> --stage ${stage}`,\n\t\t\t\t\t\t'',\n\t\t\t\t\t\t`  2. Or import from a JSON file:`,\n\t\t\t\t\t\t`     gkm secrets:import secrets.json --stage ${stage}`,\n\t\t\t\t\t\t'',\n\t\t\t\t\t\t'Required variables:',\n\t\t\t\t\t\t...validation.required.map((v) =>\n\t\t\t\t\t\t\tvalidation.missing.includes(v) ? `  ❌ ${v}` : `  ✓ ${v}`,\n\t\t\t\t\t\t),\n\t\t\t\t\t].join('\\n');\n\n\t\t\t\t\tthrow new Error(errorMessage);\n\t\t\t\t}\n\n\t\t\t\tconsole.log(\n\t\t\t\t\t`  ✓ All ${requiredVars.length} required environment variables found`,\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\n\t\t// Convert to embeddable format and encrypt\n\t\tconst embeddable = toEmbeddableSecrets(secrets);\n\t\tconst encrypted = encryptSecrets(embeddable);\n\t\tmasterKey = encrypted.masterKey;\n\n\t\t// Add define options for build-time injection using tsdown's --env.* format\n\t\tconst defines = generateDefineOptions(encrypted);\n\t\tfor (const [key, value] of Object.entries(defines)) {\n\t\t\targs.push(`--env.${key}`, value);\n\t\t}\n\n\t\tconsole.log(`  Secrets encrypted for stage \"${stage}\"`);\n\t}\n\n\tconst mjsOutput = join(outputDir, 'server.mjs');\n\n\ttry {\n\t\t// Run tsdown with command-line arguments\n\t\t// Use spawnSync with args array to avoid shell escaping issues with --define values\n\t\t// args is always populated with ['npx', 'tsdown', ...] so cmd is never undefined\n\t\tconst [cmd, ...cmdArgs] = args as [string, ...string[]];\n\t\tconst result = spawnSync(cmd, cmdArgs, {\n\t\t\tcwd: process.cwd(),\n\t\t\tstdio: 'inherit',\n\t\t\tshell: process.platform === 'win32', // Only use shell on Windows for npx resolution\n\t\t});\n\n\t\tif (result.error) {\n\t\t\tthrow result.error;\n\t\t}\n\t\tif (result.status !== 0) {\n\t\t\tthrow new Error(`tsdown exited with code ${result.status}`);\n\t\t}\n\n\t\t// Rename output to .mjs for explicit ESM\n\t\t// tsdown outputs as server.js for ESM format\n\t\tconst jsOutput = join(outputDir, 'server.js');\n\n\t\tif (existsSync(jsOutput)) {\n\t\t\tawait rename(jsOutput, mjsOutput);\n\t\t}\n\n\t\t// Add shebang to the bundled file\n\t\tconst { readFile } = await import('node:fs/promises');\n\t\tconst content = await readFile(mjsOutput, 'utf-8');\n\t\tif (!content.startsWith('#!')) {\n\t\t\tawait writeFile(mjsOutput, `#!/usr/bin/env node\\n${content}`);\n\t\t}\n\t} catch (error) {\n\t\tthrow new Error(\n\t\t\t`Failed to bundle server: ${error instanceof Error ? error.message : 'Unknown error'}`,\n\t\t);\n\t}\n\n\treturn {\n\t\toutputPath: mjsOutput,\n\t\tmasterKey,\n\t};\n}\n"],"mappings":";;;;;;;;;;;;;AA2CA,eAAe,uBACdA,YACoB;CACpB,MAAM,6BAAa,IAAI;AAEvB,MAAK,MAAM,aAAa,YAAY;EACnC,MAAM,UAAU,MAAM,UAAU,gBAAgB;AAChD,UAAQ,QAAQ,CAAC,MAAM,WAAW,IAAI,EAAE,CAAC;CACzC;AAED,QAAO,MAAM,KAAK,WAAW,CAAC,MAAM;AACpC;;;;;;;;AASD,MAAMC,0BAAkE;CACvE,UAAU,EACT,cAAc,mDACd;CACD,OAAO,EACN,WAAW,qBACX;CACD,UAAU,EACT,cAAc,uBACd;AACD;AAED,eAAsB,aACrBC,SACwB;CACxB,MAAM,EACL,YACA,WACA,QACA,WACA,UACA,OACA,YACA,gBACA,GAAG;AAGJ,OAAM,MAAM,WAAW,EAAE,WAAW,KAAM,EAAC;CAG3C,MAAM,OAAO;EACZ;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACA;AAED,KAAI,OACH,MAAK,KAAK,WAAW;AAGtB,KAAI,UACH,MAAK,KAAK,cAAc;AAIzB,MAAK,MAAM,OAAO,SACjB,MAAK,KAAK,cAAc,IAAI;AAI7B,MAAK,KAAK,cAAc,SAAS;CAGjC,IAAIC;AAEJ,KAAI,OAAO;EACV,MAAM,EACL,kBACA,qBACA,8BACA,GAAG,MAAM,OAAO;EACjB,MAAM,EAAE,gBAAgB,uBAAuB,GAAG,MAAM,OACvD;EAGD,MAAM,UAAU,MAAM,iBAAiB,MAAM;AAE7C,OAAK,QACJ,OAAM,IAAI,OACR,8BAA8B,MAAM,mCAAmC,MAAM;AAKhF,MAAI,gBACH;QAAK,MAAM,CAAC,SAAS,QAAQ,IAAI,OAAO,QAAQ,eAAe,CAC9D,KAAI,WAAW,wBAAwB,SACtC,MAAK,MAAM,CAAC,QAAQ,aAAa,IAAI,OAAO,QAC3C,wBAAwB,SACxB,EAAE;IAEF,MAAM,SAAS;AACf,SAAK,QAAQ,KAAK,YAAY,QAAQ,OAAO,SAAS;AACrD,aAAQ,KAAK,UAAU;AACvB,aAAQ,KAAK,mBAAmB,OAAO,sBAAsB;IAC7D;GACD;EAEF;AAIF,MAAI,cAAc,WAAW,SAAS,GAAG;AACxC,WAAQ,IAAI,mDAAmD;GAC/D,MAAM,eAAe,MAAM,uBAAuB,WAAW;AAE7D,OAAI,aAAa,SAAS,GAAG;IAC5B,MAAM,aAAa,6BAA6B,cAAc,QAAQ;AAEtE,SAAK,WAAW,OAAO;KACtB,MAAM,eAAe;OACnB,2CAA2C,MAAM;MAClD;MACA,GAAG,WAAW,QAAQ,IAAI,CAAC,OAAO,MAAM,EAAE,EAAE;MAC5C;MACA;OACC,iDAAiD,MAAM;OACvD,6CAA6C,MAAM;MACpD;OACC;OACA,+CAA+C,MAAM;MACtD;MACA;MACA,GAAG,WAAW,SAAS,IAAI,CAAC,MAC3B,WAAW,QAAQ,SAAS,EAAE,IAAI,MAAM,EAAE,KAAK,MAAM,EAAE,EACvD;KACD,EAAC,KAAK,KAAK;AAEZ,WAAM,IAAI,MAAM;IAChB;AAED,YAAQ,KACN,UAAU,aAAa,OAAO,uCAC/B;GACD;EACD;EAGD,MAAM,aAAa,oBAAoB,QAAQ;EAC/C,MAAM,YAAY,eAAe,WAAW;AAC5C,cAAY,UAAU;EAGtB,MAAM,UAAU,sBAAsB,UAAU;AAChD,OAAK,MAAM,CAAC,KAAK,MAAM,IAAI,OAAO,QAAQ,QAAQ,CACjD,MAAK,MAAM,QAAQ,IAAI,GAAG,MAAM;AAGjC,UAAQ,KAAK,iCAAiC,MAAM,GAAG;CACvD;CAED,MAAM,YAAY,KAAK,WAAW,aAAa;AAE/C,KAAI;EAIH,MAAM,CAAC,KAAK,GAAG,QAAQ,GAAG;EAC1B,MAAM,SAAS,UAAU,KAAK,SAAS;GACtC,KAAK,QAAQ,KAAK;GAClB,OAAO;GACP,OAAO,QAAQ,aAAa;EAC5B,EAAC;AAEF,MAAI,OAAO,MACV,OAAM,OAAO;AAEd,MAAI,OAAO,WAAW,EACrB,OAAM,IAAI,OAAO,0BAA0B,OAAO,OAAO;EAK1D,MAAM,WAAW,KAAK,WAAW,YAAY;AAE7C,MAAI,WAAW,SAAS,CACvB,OAAM,OAAO,UAAU,UAAU;EAIlC,MAAM,EAAE,sBAAU,GAAG,MAAM,OAAO;EAClC,MAAM,UAAU,MAAM,WAAS,WAAW,QAAQ;AAClD,OAAK,QAAQ,WAAW,KAAK,CAC5B,OAAM,UAAU,YAAY,uBAAuB,QAAQ,EAAE;CAE9D,SAAQ,OAAO;AACf,QAAM,IAAI,OACR,2BAA2B,iBAAiB,QAAQ,MAAM,UAAU,gBAAgB;CAEtF;AAED,QAAO;EACN,YAAY;EACZ;CACA;AACD"}