@intentic/cli 1.0.2

package/dist/lib/cf-tunnel.js

@@ -0,0 +1,30 @@
+export const CATCH_ALL = { service: "http_status:404" };
+export const resolveZone = async (api, apiToken, override) => {
+    if (override !== undefined && override !== "") {
+        const found = await api.getZone({ apiToken, zone: override });
+        if (found === undefined) {
+            throw new Error(`Cloudflare zone "${override}" not found for this API token`);
+        }
+        return { id: found.id, name: override, accountId: found.accountId };
+    }
+    const zones = await api.listZones({ apiToken });
+    const [only, ...rest] = zones;
+    if (only === undefined) {
+        throw new Error("the Cloudflare API token sees no zones — add a domain to the account, or broaden the token's Zone:Read scope");
+    }
+    if (rest.length > 0) {
+        const names = [only, ...rest].map((zone) => zone.name);
+        throw new Error(`the Cloudflare API token sees multiple zones (${names.join(", ")}) — set the ZONE env var or pass --zone to choose one, e.g. --zone ${only.name}`);
+    }
+    return only;
+};
+export const upsertCname = async (api, apiToken, zoneId, name, cname, comment) => {
+    const record = await api.findDnsRecord({ apiToken, zoneId, name });
+    if (record === undefined) {
+        await api.createDnsRecord({ apiToken, zoneId, name, content: cname, comment });
+    }
+    else {
+        await api.updateDnsRecord({ apiToken, zoneId, recordId: record.id, name, content: cname, comment });
+    }
+};
+//# sourceMappingURL=cf-tunnel.js.map

package/dist/lib/cf-tunnel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cf-tunnel.js","sourceRoot":"","sources":["../../src/lib/cf-tunnel.ts"],"names":[],"mappings":"AAIA,MAAM,CAAC,MAAM,SAAS,GAAG,EAAE,OAAO,EAAE,iBAAiB,EAAW,CAAC;AAIjE,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAC5B,GAAkB,EAClB,QAAgB,EAChB,QAA4B,EAC4B,EAAE;IAC1D,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC9D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,oBAAoB,QAAQ,gCAAgC,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;IACxE,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;IAChD,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC;IAC9B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,8GAA8G,CAAC,CAAC;IACpI,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClB,MAAM,KAAK,GAAG,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,IAAI,KAAK,CACX,iDAAiD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,sEAAsE,IAAI,CAAC,IAAI,EAAE,CACrJ,CAAC;IACN,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC,CAAC;AAGF,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAC5B,GAAkB,EAClB,QAAgB,EAChB,MAAc,EACd,IAAY,EACZ,KAAa,EACb,OAAe,EACF,EAAE;IACf,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACnE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,GAAG,CAAC,eAAe,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IACnF,CAAC;SAAM,CAAC;QACJ,MAAM,GAAG,CAAC,eAAe,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IACxG,CAAC;AACL,CAAC,CAAC"}

package/dist/lib/known-hosts.d.ts

@@ -0,0 +1,3 @@
+import type { HostKeyStore } from "@intentic/providers";
+export declare const createKnownHostsStore: (dir: string) => HostKeyStore;
+//# sourceMappingURL=known-hosts.d.ts.map

package/dist/lib/known-hosts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"known-hosts.d.ts","sourceRoot":"","sources":["../../src/lib/known-hosts.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAQxD,eAAO,MAAM,qBAAqB,GAAI,KAAK,MAAM,KAAG,YAYnD,CAAC"}

package/dist/lib/known-hosts.js

@@ -0,0 +1,18 @@
+import { existsSync } from "node:fs";
+import { readFile, writeFile } from "node:fs/promises";
+import { join } from "node:path";
+import { KNOWN_HOSTS_FILE } from "./artifact.js";
+const hostKeyId = (host, port) => `${host}:${port}`;
+export const createKnownHostsStore = (dir) => {
+    const path = join(dir, KNOWN_HOSTS_FILE);
+    const read = async () => existsSync(path) ? JSON.parse(await readFile(path, "utf8")) : {};
+    return {
+        get: async (host, port) => (await read())[hostKeyId(host, port)],
+        set: async (host, port, key) => {
+            const store = await read();
+            store[hostKeyId(host, port)] = key;
+            await writeFile(path, `${JSON.stringify(store, undefined, 4)}\n`, { mode: 0o600 });
+        },
+    };
+};
+//# sourceMappingURL=known-hosts.js.map

package/dist/lib/known-hosts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"known-hosts.js","sourceRoot":"","sources":["../../src/lib/known-hosts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAKjD,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,IAAY,EAAU,EAAE,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;AAE5E,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,GAAW,EAAgB,EAAE;IAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,KAAK,IAAqC,EAAE,CACrD,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAA4B,CAAC,CAAC,CAAC,EAAE,CAAC;IACjG,OAAO;QACH,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAChE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;YAC3B,MAAM,KAAK,GAAG,MAAM,IAAI,EAAE,CAAC;YAC3B,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC;YACnC,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACvF,CAAC;KACJ,CAAC;AACN,CAAC,CAAC"}

package/dist/lib/output.d.ts

@@ -0,0 +1,14 @@
+import type { EngineEvent } from "@intentic/engine";
+export type OutputMode = "text" | "json" | "ndjson";
+export interface Sink {
+    readonly write: (chunk: string) => void;
+}
+export interface Output {
+    readonly mode: OutputMode;
+    readonly onEvent: (event: EngineEvent) => void;
+    readonly log: (message: string) => void;
+    readonly text: (line: string) => void;
+    readonly result: (result: Record<string, unknown>) => void;
+}
+export declare const createOutput: (sink: Sink, mode: OutputMode) => Output;
+//# sourceMappingURL=output.d.ts.map

package/dist/lib/output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.d.ts","sourceRoot":"","sources":["../../src/lib/output.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAKpD,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,MAAM,GAAG,QAAQ,CAAC;AAEpD,MAAM,WAAW,IAAI;IACjB,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;CAC3C;AAOD,MAAM,WAAW,MAAM;IACnB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAC;IAC/C,QAAQ,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACxC,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CAC9D;AA2BD,eAAO,MAAM,YAAY,GAAI,MAAM,IAAI,EAAE,MAAM,UAAU,KAAG,MAsC3D,CAAC"}

package/dist/lib/output.js

@@ -0,0 +1,56 @@
+const eventText = (event) => {
+    if (event.kind === "node" && event.phase === "apply") {
+        if (event.state === "start") {
+            return `applying "${event.id}" (type "${event.type}")`;
+        }
+        const reason = event.reason === undefined ? "" : ` (${event.reason})`;
+        return `applied "${event.id}" (type "${event.type}") — ${event.action ?? "done"}${reason}`;
+    }
+    if (event.kind === "readiness") {
+        return event.state === "waiting" ? `waiting for "${event.id}" at ${event.url}` : `"${event.id}" ready`;
+    }
+    if (event.kind === "prune") {
+        return event.state === "deleted"
+            ? `prune: deleted "${event.id}" (type "${event.type}")`
+            : `prune: "${event.id}" (type "${event.type}") removed from desired state but its provider has no delete — left in place`;
+    }
+    if (event.kind === "orphan") {
+        return `orphan: "${event.id}" (type "${event.type}") exists but is not in the desired graph — not deleted`;
+    }
+    return undefined;
+};
+export const createOutput = (sink, mode) => {
+    const line = (text) => sink.write(`${text}\n`);
+    const jsonLine = (value) => sink.write(`${JSON.stringify(value)}\n`);
+    if (mode === "ndjson") {
+        return {
+            mode,
+            onEvent: jsonLine,
+            log: (message) => jsonLine({ kind: "log", message }),
+            text: () => { },
+            result: (result) => jsonLine({ kind: "result", ...result }),
+        };
+    }
+    if (mode === "json") {
+        return {
+            mode,
+            onEvent: () => { },
+            log: () => { },
+            text: () => { },
+            result: (result) => sink.write(`${JSON.stringify(result, undefined, 4)}\n`),
+        };
+    }
+    return {
+        mode,
+        onEvent: (event) => {
+            const text = eventText(event);
+            if (text !== undefined) {
+                line(text);
+            }
+        },
+        log: line,
+        text: line,
+        result: () => { },
+    };
+};
+//# sourceMappingURL=output.js.map

package/dist/lib/output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.js","sourceRoot":"","sources":["../../src/lib/output.ts"],"names":[],"mappings":"AA2BA,MAAM,SAAS,GAAG,CAAC,KAAkB,EAAsB,EAAE;IACzD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;QACnD,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;YAC1B,OAAO,aAAa,KAAK,CAAC,EAAE,YAAY,KAAK,CAAC,IAAI,IAAI,CAAC;QAC3D,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC;QACtE,OAAO,YAAY,KAAK,CAAC,EAAE,YAAY,KAAK,CAAC,IAAI,QAAQ,KAAK,CAAC,MAAM,IAAI,MAAM,GAAG,MAAM,EAAE,CAAC;IAC/F,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,KAAK,CAAC,EAAE,QAAQ,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,EAAE,SAAS,CAAC;IAC3G,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,KAAK,KAAK,SAAS;YAC5B,CAAC,CAAC,mBAAmB,KAAK,CAAC,EAAE,YAAY,KAAK,CAAC,IAAI,IAAI;YACvD,CAAC,CAAC,WAAW,KAAK,CAAC,EAAE,YAAY,KAAK,CAAC,IAAI,8EAA8E,CAAC;IAClI,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,YAAY,KAAK,CAAC,EAAE,YAAY,KAAK,CAAC,IAAI,yDAAyD,CAAC;IAC/G,CAAC;IACD,OAAO,SAAS,CAAC;AACrB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,IAAU,EAAE,IAAgB,EAAU,EAAE;IACjE,MAAM,IAAI,GAAG,CAAC,IAAY,EAAQ,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAQ,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAEpF,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACpB,OAAO;YACH,IAAI;YACJ,OAAO,EAAE,QAAQ;YACjB,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;YACpD,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC;YACd,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC;SAC9D,CAAC;IACN,CAAC;IAED,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QAElB,OAAO;YACH,IAAI;YACJ,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC;YACjB,GAAG,EAAE,GAAG,EAAE,GAAE,CAAC;YACb,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC;YACd,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC;SAC9E,CAAC;IACN,CAAC;IAGD,OAAO;QACH,IAAI;QACJ,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACf,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;YAC9B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACrB,IAAI,CAAC,IAAI,CAAC,CAAC;YACf,CAAC;QACL,CAAC;QACD,GAAG,EAAE,IAAI;QACT,IAAI,EAAE,IAAI;QACV,MAAM,EAAE,GAAG,EAAE,GAAE,CAAC;KACnB,CAAC;AACN,CAAC,CAAC"}

package/dist/lib/run-log.d.ts

@@ -0,0 +1,3 @@
+import type { Sink } from "./output.js";
+export declare const withRunLog: (sink: Sink, command: string) => Sink;
+//# sourceMappingURL=run-log.d.ts.map

package/dist/lib/run-log.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-log.d.ts","sourceRoot":"","sources":["../../src/lib/run-log.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AASxC,eAAO,MAAM,UAAU,GAAI,MAAM,IAAI,EAAE,SAAS,MAAM,KAAG,IAsDxD,CAAC"}

package/dist/lib/run-log.js

@@ -0,0 +1,62 @@
+import { closeSync, mkdirSync, openSync, readdirSync, rmSync, statSync, writeSync } from "node:fs";
+import { join } from "node:path";
+import { loadConfig } from "../env.config.js";
+const KEEP_RUNS = 50;
+export const withRunLog = (sink, command) => {
+    let fd;
+    const ensure = () => {
+        if (fd !== undefined) {
+            return fd === false ? undefined : fd;
+        }
+        try {
+            const dir = loadConfig().intenticLogDir;
+            mkdirSync(dir, { recursive: true });
+            const runs = readdirSync(dir)
+                .filter((name) => name.endsWith(".log"))
+                .flatMap((name) => {
+                try {
+                    return [{ name, mtimeMs: statSync(join(dir, name)).mtimeMs }];
+                }
+                catch {
+                    return [];
+                }
+            })
+                .toSorted((a, b) => b.mtimeMs - a.mtimeMs);
+            for (const run of runs.slice(KEEP_RUNS - 1)) {
+                rmSync(join(dir, run.name), { force: true });
+            }
+            const stamp = new Date().toISOString().replaceAll(":", "-");
+            const opened = openSync(join(dir, `${command}-${stamp}.log`), "a");
+            fd = opened;
+            process.on("exit", (code) => {
+                try {
+                    writeSync(opened, `# exit ${code}\n`);
+                    closeSync(opened);
+                }
+                catch {
+                }
+            });
+            return opened;
+        }
+        catch {
+            fd = false;
+            return undefined;
+        }
+    };
+    return {
+        write: (chunk) => {
+            sink.write(chunk);
+            const opened = ensure();
+            if (opened === undefined) {
+                return;
+            }
+            try {
+                writeSync(opened, chunk);
+            }
+            catch {
+                fd = false;
+            }
+        },
+    };
+};
+//# sourceMappingURL=run-log.js.map

package/dist/lib/run-log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-log.js","sourceRoot":"","sources":["../../src/lib/run-log.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACnG,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAQ9C,MAAM,SAAS,GAAG,EAAE,CAAC;AAErB,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAU,EAAE,OAAe,EAAQ,EAAE;IAE5D,IAAI,EAA8B,CAAC;IACnC,MAAM,MAAM,GAAG,GAAuB,EAAE;QACpC,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YACnB,OAAO,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,CAAC;QACD,IAAI,CAAC;YACD,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC,cAAc,CAAC;YACxC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACpC,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC;iBACxB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;iBACvC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;gBACd,IAAI,CAAC;oBACD,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;gBAClE,CAAC;gBAAC,MAAM,CAAC;oBACL,OAAO,EAAE,CAAC;gBACd,CAAC;YACL,CAAC,CAAC;iBACD,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;YAC/C,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,EAAE,CAAC;gBAC1C,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACjD,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC5D,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,IAAI,KAAK,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;YACnE,EAAE,GAAG,MAAM,CAAC;YACZ,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBACxB,IAAI,CAAC;oBACD,SAAS,CAAC,MAAM,EAAE,UAAU,IAAI,IAAI,CAAC,CAAC;oBACtC,SAAS,CAAC,MAAM,CAAC,CAAC;gBACtB,CAAC;gBAAC,MAAM,CAAC;gBAET,CAAC;YACL,CAAC,CAAC,CAAC;YACH,OAAO,MAAM,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACL,EAAE,GAAG,KAAK,CAAC;YACX,OAAO,SAAS,CAAC;QACrB,CAAC;IACL,CAAC,CAAC;IACF,OAAO;QACH,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE;YACb,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAClB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;YACxB,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACvB,OAAO;YACX,CAAC;YACD,IAAI,CAAC;gBACD,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAC7B,CAAC;YAAC,MAAM,CAAC;gBACL,EAAE,GAAG,KAAK,CAAC;YACf,CAAC;QACL,CAAC;KACJ,CAAC;AACN,CAAC,CAAC"}

package/dist/lib/templates.d.ts

@@ -0,0 +1,2 @@
+export declare const renderTemplate: (name: string, data: Record<string, unknown>) => string;
+//# sourceMappingURL=templates.d.ts.map

package/dist/lib/templates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.d.ts","sourceRoot":"","sources":["../../src/lib/templates.ts"],"names":[],"mappings":"AAkBA,eAAO,MAAM,cAAc,GAAI,MAAM,MAAM,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,MAAyC,CAAC"}

package/dist/lib/templates.js

@@ -0,0 +1,6 @@
+import { fileURLToPath } from "node:url";
+import { Eta } from "eta";
+const views = fileURLToPath(new URL("../../templates", import.meta.url));
+const eta = new Eta({ views, autoEscape: false, autoTrim: false });
+export const renderTemplate = (name, data) => eta.render(`${name}.eta`, data);
+//# sourceMappingURL=templates.js.map

package/dist/lib/templates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.js","sourceRoot":"","sources":["../../src/lib/templates.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,GAAG,EAAE,MAAM,KAAK,CAAC;AAO1B,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAKzE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;AAKnE,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,IAAY,EAAE,IAA6B,EAAU,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,MAAM,EAAE,IAAI,CAAC,CAAC"}

package/dist/lib/version.d.ts

@@ -0,0 +1,2 @@
+export declare const version: string;
+//# sourceMappingURL=version.d.ts.map

package/dist/lib/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../../src/lib/version.ts"],"names":[],"mappings":"AAKA,eAAO,MAAQ,OAAO,QAAgF,CAAC"}

package/dist/lib/version.js

@@ -0,0 +1,3 @@
+import { createRequire } from "node:module";
+export const { version } = createRequire(import.meta.url)("../../package.json");
+//# sourceMappingURL=version.js.map

package/dist/lib/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../src/lib/version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAK5C,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,oBAAoB,CAAwB,CAAC"}

package/dist/logs/logs.command.d.ts

@@ -0,0 +1,3 @@
+import { type CommandContext } from "@stricli/core";
+export declare const logsCommand: import("@stricli/core").Command<CommandContext>;
+//# sourceMappingURL=logs.command.d.ts.map

package/dist/logs/logs.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logs.command.d.ts","sourceRoot":"","sources":["../../src/logs/logs.command.ts"],"names":[],"mappings":"AAGA,OAAO,EAAgB,KAAK,cAAc,EAAgB,MAAM,eAAe,CAAC;AAiChF,eAAO,MAAM,WAAW,iDAsEtB,CAAC"}

package/dist/logs/logs.command.js

@@ -0,0 +1,86 @@
+import { dirname } from "node:path";
+import { createStore, resolveInputs } from "@intentic/engine";
+import { createSshExecutor, sshSchema, sshTarget } from "@intentic/providers";
+import { buildCommand, numberParser } from "@stricli/core";
+import { loadConfig } from "../env.config.js";
+import { ARTIFACT_PATH, loadEnvFile, readArtifact } from "../lib/artifact.js";
+import { createKnownHostsStore } from "../lib/known-hosts.js";
+import { createOutput } from "../lib/output.js";
+import { withRunLog } from "../lib/run-log.js";
+const DEFAULT_TAIL = 200;
+const SAFE_NAME = /^[a-zA-Z0-9_.-]+$/;
+const logsScript = (id, type, tail) => [
+    `if [ -f /opt/intentic/${type}/compose.yaml ]; then`,
+    `  docker compose -p ${type} --project-directory /opt/intentic/${type} -f /opt/intentic/${type}/compose.yaml logs --no-color --tail ${tail}`,
+    `else`,
+    `  ids=$({ docker ps -aq --filter "label=intentic.id=${id}"; docker ps -aq --filter "label=intentic.id=intentic-${type}"; } | sort -u)`,
+    `  if [ -z "$ids" ]; then echo "no containers labeled intentic.id=${id} (or intentic-${type}) on this host" >&2; exit 1; fi`,
+    `  for c in $ids; do docker inspect -f '== {{.Name}}' "$c"; docker logs --tail ${tail} "$c" 2>&1; done`,
+    `fi`,
+].join("\n");
+export const logsCommand = buildCommand({
+    docs: { brief: "Fetch a deployed resource's container logs from its host over SSH" },
+    parameters: {
+        flags: {
+            artifact: { kind: "parsed", parse: String, optional: true, brief: `Path to the artifact (default: ${ARTIFACT_PATH})` },
+            tail: { kind: "parsed", parse: numberParser, optional: true, brief: `Lines per container (default ${DEFAULT_TAIL})` },
+        },
+        positional: {
+            kind: "tuple",
+            parameters: [{ parse: String, optional: true, brief: "Resource id from the artifact; omit to list what has logs", placeholder: "id" }],
+        },
+    },
+    async func(flags, id) {
+        const out = createOutput(withRunLog(this.process.stdout, "logs"), loadConfig().intenticOutput);
+        const artifact = flags.artifact ?? ARTIFACT_PATH;
+        const dir = dirname(artifact);
+        loadEnvFile(dir);
+        const graph = await readArtifact(artifact);
+        const loggable = Object.values(graph.resources).filter((node) => node.inputs["address"] !== undefined && node.inputs["sshKey"] !== undefined);
+        if (id === undefined) {
+            for (const node of loggable) {
+                out.text(`${node.id} (type "${node.type}")`);
+            }
+            out.text(`\nintentic logs <id> fetches that resource's container logs; app deployments live in Komodo (intentic deployments).`);
+            out.result({ resources: loggable.map((node) => ({ id: node.id, type: node.type })) });
+            return;
+        }
+        const node = graph.resources[id];
+        if (node === undefined) {
+            throw new Error(`no resource "${id}" in the artifact — run \`intentic logs\` to list them`);
+        }
+        if (!SAFE_NAME.test(node.id) || !SAFE_NAME.test(node.type)) {
+            throw new Error(`resource id/type contains characters unsafe for a remote shell: "${node.id}" (type "${node.type}")`);
+        }
+        const resolved = resolveInputs(node.inputs, createStore(), process.env, { lenient: true });
+        const parsedSsh = sshSchema.safeParse(resolved);
+        if (!parsedSsh.success) {
+            throw new Error(`"${id}" (type "${node.type}") has no host SSH target — its runtime logs are not host-fetchable`);
+        }
+        const ssh = createSshExecutor(createKnownHostsStore(dir));
+        const session = await ssh.connect(sshTarget(parsedSsh.data));
+        try {
+            let pending = "";
+            const result = await session.exec(logsScript(node.id, node.type, flags.tail ?? DEFAULT_TAIL), (chunk) => {
+                pending += chunk;
+                const lines = pending.split("\n");
+                pending = lines.pop() ?? "";
+                for (const text of lines) {
+                    out.log(text);
+                }
+            });
+            if (pending !== "") {
+                out.log(pending);
+            }
+            if (result.code !== 0) {
+                throw new Error(`fetching logs for "${id}" failed (exit ${result.code}): ${result.stderr.trim()}`);
+            }
+            out.result({ id: node.id, type: node.type, tail: flags.tail ?? DEFAULT_TAIL });
+        }
+        finally {
+            await session.dispose();
+            await ssh.dispose?.();
+        }
+    },
+});
+//# sourceMappingURL=logs.command.js.map

package/dist/logs/logs.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logs.command.js","sourceRoot":"","sources":["../../src/logs/logs.command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAuB,YAAY,EAAE,MAAM,eAAe,CAAC;AAChF,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE/C,MAAM,YAAY,GAAG,GAAG,CAAC;AAIzB,MAAM,SAAS,GAAG,mBAAmB,CAAC;AAMtC,MAAM,UAAU,GAAG,CAAC,EAAU,EAAE,IAAY,EAAE,IAAY,EAAU,EAAE,CAClE;IACI,yBAAyB,IAAI,uBAAuB;IACpD,uBAAuB,IAAI,sCAAsC,IAAI,qBAAqB,IAAI,wCAAwC,IAAI,EAAE;IAC5I,MAAM;IACN,uDAAuD,EAAE,yDAAyD,IAAI,iBAAiB;IACvI,oEAAoE,EAAE,iBAAiB,IAAI,iCAAiC;IAC5H,iFAAiF,IAAI,kBAAkB;IACvG,IAAI;CACP,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAOjB,MAAM,CAAC,MAAM,WAAW,GAAG,YAAY,CAAC;IACpC,IAAI,EAAE,EAAE,KAAK,EAAE,mEAAmE,EAAE;IACpF,UAAU,EAAE;QACR,KAAK,EAAE;YACH,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,kCAAkC,aAAa,GAAG,EAAE;YACtH,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,gCAAgC,YAAY,GAAG,EAAE;SACxH;QACD,UAAU,EAAE;YACR,IAAI,EAAE,OAAO;YACb,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,2DAA2D,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;SACzI;KACJ;IACD,KAAK,CAAC,IAAI,CAAuB,KAAgB,EAAE,EAAW;QAC1D,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,cAAc,CAAC,CAAC;QAC/F,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,aAAa,CAAC;QACjD,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC9B,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;QAI3C,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,SAAS,CAAC,CAAC;QAC9I,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YACnB,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;gBAC1B,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,EAAE,WAAW,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;YACjD,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,qHAAqH,CAAC,CAAC;YAChI,GAAG,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YACtF,OAAO;QACX,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACjC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,gBAAgB,EAAE,wDAAwD,CAAC,CAAC;QAChG,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CAAC,oEAAoE,IAAI,CAAC,EAAE,YAAY,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;QAC1H,CAAC;QAGD,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3F,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAChD,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,YAAY,IAAI,CAAC,IAAI,qEAAqE,CAAC,CAAC;QACtH,CAAC;QACD,MAAM,GAAG,GAAG,iBAAiB,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC;YAGD,IAAI,OAAO,GAAG,EAAE,CAAC;YACjB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE;gBACpG,OAAO,IAAI,KAAK,CAAC;gBACjB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAClC,OAAO,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;gBAC5B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACvB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAClB,CAAC;YACL,CAAC,CAAC,CAAC;YACH,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;gBACjB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACrB,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,sBAAsB,EAAE,kBAAkB,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACvG,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,YAAY,EAAE,CAAC,CAAC;QACnF,CAAC;gBAAS,CAAC;YACP,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;YACxB,MAAM,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;QAC1B,CAAC;IACL,CAAC;CACJ,CAAC,CAAC"}

package/dist/monorepo/monorepo.command.d.ts

@@ -0,0 +1,3 @@
+import { type CommandContext } from "@stricli/core";
+export declare const monorepoCommand: import("@stricli/core").Command<CommandContext>;
+//# sourceMappingURL=monorepo.command.d.ts.map

package/dist/monorepo/monorepo.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"monorepo.command.d.ts","sourceRoot":"","sources":["../../src/monorepo/monorepo.command.ts"],"names":[],"mappings":"AAEA,OAAO,EAAgB,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AAclE,eAAO,MAAM,eAAe,iDAqB1B,CAAC"}

package/dist/monorepo/monorepo.command.js

@@ -0,0 +1,28 @@
+import { join } from "node:path";
+import { DEFAULT_TEMPLATE_REF, DEFAULT_TEMPLATE_SOURCE, scaffoldMonorepo } from "@intentic/scaffold";
+import { buildCommand } from "@stricli/core";
+import { loadConfig } from "../env.config.js";
+import { createOutput } from "../lib/output.js";
+export const monorepoCommand = buildCommand({
+    docs: { brief: "Scaffold an empty pnpm+turbo monorepo at <dir>/<name>" },
+    parameters: {
+        flags: {
+            dir: { kind: "parsed", parse: String, optional: true, brief: "Directory holding the workspace repos (default: .)" },
+            name: { kind: "parsed", parse: String, brief: "Monorepo name — becomes the repo directory name" },
+            source: { kind: "parsed", parse: String, optional: true, brief: `Template source git URL (default: ${DEFAULT_TEMPLATE_SOURCE})` },
+            ref: { kind: "parsed", parse: String, optional: true, brief: `Template source branch/tag (default: ${DEFAULT_TEMPLATE_REF})` },
+        },
+    },
+    async func(flags) {
+        const out = createOutput(this.process.stdout, loadConfig().intenticOutput);
+        const repoDir = join(flags.dir ?? ".", flags.name);
+        await scaffoldMonorepo({
+            repoDir,
+            source: flags.source ?? DEFAULT_TEMPLATE_SOURCE,
+            ref: flags.ref ?? DEFAULT_TEMPLATE_REF,
+        });
+        out.text(`created empty monorepo ${flags.name} at ${repoDir}`);
+        out.result({ name: flags.name, dir: repoDir });
+    },
+});
+//# sourceMappingURL=monorepo.command.js.map

package/dist/monorepo/monorepo.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"monorepo.command.js","sourceRoot":"","sources":["../../src/monorepo/monorepo.command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACrG,OAAO,EAAE,YAAY,EAAuB,MAAM,eAAe,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAYhD,MAAM,CAAC,MAAM,eAAe,GAAG,YAAY,CAAgB;IACvD,IAAI,EAAE,EAAE,KAAK,EAAE,uDAAuD,EAAE;IACxE,UAAU,EAAE;QACR,KAAK,EAAE;YACH,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,oDAAoD,EAAE;YACnH,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,iDAAiD,EAAE;YACjG,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,qCAAqC,uBAAuB,GAAG,EAAE;YACjI,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,wCAAwC,oBAAoB,GAAG,EAAE;SACjI;KACJ;IACD,KAAK,CAAC,IAAI,CAAuB,KAAoB;QACjD,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,cAAc,CAAC,CAAC;QAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACnD,MAAM,gBAAgB,CAAC;YACnB,OAAO;YACP,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,uBAAuB;YAC/C,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,oBAAoB;SACzC,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,0BAA0B,KAAK,CAAC,IAAI,OAAO,OAAO,EAAE,CAAC,CAAC;QAC/D,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IACnD,CAAC;CACJ,CAAC,CAAC"}

package/dist/pipelines/adopt-pipelines.d.ts

@@ -0,0 +1,35 @@
+import type { DesiredStateGraph } from "@intentic/graph";
+import type { ForgejoApi } from "@intentic/providers";
+export declare const GIT_USER_SECRET = "INTENTIC_GIT_USER";
+export declare const GIT_TOKEN_SECRET = "INTENTIC_GIT_TOKEN";
+export declare const GIT_USER_ENV = "GIT_USER";
+export declare const GIT_TOKEN_ENV = "GIT_TOKEN";
+export declare const INTENT_WORKFLOW_PATH = ".forgejo/workflows/resolve.yaml";
+export declare const APPLY_WORKFLOW_PATH = ".forgejo/workflows/apply.yaml";
+export declare const forgejoSecretName: (key: string) => string;
+export interface PipelineInputs {
+    readonly cliVersion: string;
+    readonly user: string;
+    readonly domain: string;
+    readonly configFile: string;
+    readonly artifactFile: string;
+    readonly intentRepo: string;
+    readonly desiredStateRepo: string;
+    readonly applySecretKeys: readonly string[];
+    readonly forgejoPasswordKey: string;
+}
+export declare const intentWorkflowYaml: (inputs: PipelineInputs) => string;
+export declare const applyWorkflowYaml: (inputs: PipelineInputs) => string;
+export declare const writeWorkflow: (repoDir: string, workflowPath: string, content: string) => Promise<void>;
+export declare const writeControlPlaneWorkflows: (intentDir: string, targetDir: string, inputs: PipelineInputs) => Promise<void>;
+export declare const collectSecretValues: (graph: DesiredStateGraph, env: Readonly<Record<string, string | undefined>>, generatedValues: Readonly<Record<string, string>>) => Record<string, string>;
+export declare const setRepoSecrets: (args: {
+    readonly api: ForgejoApi;
+    readonly baseUrl: string;
+    readonly user: string;
+    readonly password: string;
+    readonly owner: string;
+    readonly name: string;
+    readonly secrets: Readonly<Record<string, string>>;
+}) => Promise<void>;
+//# sourceMappingURL=adopt-pipelines.d.ts.map

package/dist/pipelines/adopt-pipelines.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adopt-pipelines.d.ts","sourceRoot":"","sources":["../../src/pipelines/adopt-pipelines.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAMtD,eAAO,MAAM,eAAe,sBAAsB,CAAC;AACnD,eAAO,MAAM,gBAAgB,uBAAuB,CAAC;AAIrD,eAAO,MAAM,YAAY,aAAa,CAAC;AACvC,eAAO,MAAM,aAAa,cAAc,CAAC;AAWzC,eAAO,MAAM,oBAAoB,oCAAoC,CAAC;AACtE,eAAO,MAAM,mBAAmB,kCAAkC,CAAC;AAOnE,eAAO,MAAM,iBAAiB,GAAI,KAAK,MAAM,KAAG,MAC+C,CAAC;AAEhG,MAAM,WAAW,cAAc;IAE3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAE5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAE9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAGlC,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAG5C,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;CACvC;AAOD,eAAO,MAAM,kBAAkB,GAAI,QAAQ,cAAc,KAAG,MAatD,CAAC;AAKP,eAAO,MAAM,iBAAiB,GAAI,QAAQ,cAAc,KAAG,MASrD,CAAC;AAIP,eAAO,MAAM,aAAa,GAAU,SAAS,MAAM,EAAE,cAAc,MAAM,EAAE,SAAS,MAAM,KAAG,OAAO,CAAC,IAAI,CAIxG,CAAC;AAGF,eAAO,MAAM,0BAA0B,GAAU,WAAW,MAAM,EAAE,WAAW,MAAM,EAAE,QAAQ,cAAc,KAAG,OAAO,CAAC,IAAI,CAG3H,CAAC;AAKF,eAAO,MAAM,mBAAmB,GAC5B,OAAO,iBAAiB,EACxB,KAAK,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,EACjD,iBAAiB,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,KAClD,MAAM,CAAC,MAAM,EAAE,MAAM,CAgBvB,CAAC;AAGF,eAAO,MAAM,cAAc,GAAU,MAAM;IACvC,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACtD,KAAG,OAAO,CAAC,IAAI,CAYf,CAAC"}

package/dist/pipelines/adopt-pipelines.js

@@ -0,0 +1,77 @@
+import { mkdir, writeFile } from "node:fs/promises";
+import { dirname, join } from "node:path";
+import { renderTemplate } from "../lib/templates.js";
+import { collectSecrets } from "../secrets/secrets.js";
+export const GIT_USER_SECRET = "INTENTIC_GIT_USER";
+export const GIT_TOKEN_SECRET = "INTENTIC_GIT_TOKEN";
+export const GIT_USER_ENV = "GIT_USER";
+export const GIT_TOKEN_ENV = "GIT_TOKEN";
+const CLI_PACKAGE = "@intentic/cli";
+const APPLIED_TAG = "intentic-applied";
+export const INTENT_WORKFLOW_PATH = ".forgejo/workflows/resolve.yaml";
+export const APPLY_WORKFLOW_PATH = ".forgejo/workflows/apply.yaml";
+const RESERVED_SECRET_PREFIXES = ["GITHUB_", "GITEA_", "FORGEJO_"];
+export const forgejoSecretName = (key) => RESERVED_SECRET_PREFIXES.some((prefix) => key.startsWith(prefix)) ? `INTENTIC_${key}` : key;
+const cloneUrl = (inputs, repo) => `https://${inputs.domain}/${inputs.user}/${repo}.git`;
+export const intentWorkflowYaml = (inputs) => renderTemplate("workflows/resolve.yaml", {
+    configFile: inputs.configFile,
+    artifactFile: inputs.artifactFile,
+    gitUserEnv: GIT_USER_ENV,
+    gitUserSecret: GIT_USER_SECRET,
+    gitTokenEnv: GIT_TOKEN_ENV,
+    gitTokenSecret: GIT_TOKEN_SECRET,
+    desiredStateCloneUrl: cloneUrl(inputs, inputs.desiredStateRepo),
+    cliPackage: CLI_PACKAGE,
+    cliVersion: inputs.cliVersion,
+    user: inputs.user,
+    domain: inputs.domain,
+});
+export const applyWorkflowYaml = (inputs) => renderTemplate("workflows/apply.yaml", {
+    artifactFile: inputs.artifactFile,
+    envEntries: inputs.applySecretKeys.map((key) => ({ env: key, secret: forgejoSecretName(key) })),
+    appliedTag: APPLIED_TAG,
+    cliPackage: CLI_PACKAGE,
+    cliVersion: inputs.cliVersion,
+    user: inputs.user,
+    forgejoPasswordKey: inputs.forgejoPasswordKey,
+});
+export const writeWorkflow = async (repoDir, workflowPath, content) => {
+    const full = join(repoDir, workflowPath);
+    await mkdir(dirname(full), { recursive: true });
+    await writeFile(full, content);
+};
+export const writeControlPlaneWorkflows = async (intentDir, targetDir, inputs) => {
+    await writeWorkflow(intentDir, INTENT_WORKFLOW_PATH, intentWorkflowYaml(inputs));
+    await writeWorkflow(targetDir, APPLY_WORKFLOW_PATH, applyWorkflowYaml(inputs));
+};
+export const collectSecretValues = (graph, env, generatedValues) => {
+    const { env: envKeys, generated: generatedKeys } = collectSecrets(graph);
+    const values = {};
+    for (const key of envKeys) {
+        const value = env[key];
+        if (value !== undefined && value !== "") {
+            values[key] = value;
+        }
+    }
+    for (const key of generatedKeys) {
+        const value = generatedValues[key];
+        if (value !== undefined) {
+            values[key] = value;
+        }
+    }
+    return values;
+};
+export const setRepoSecrets = async (args) => {
+    for (const [secretName, data] of Object.entries(args.secrets)) {
+        await args.api.setRepoSecret({
+            baseUrl: args.baseUrl,
+            user: args.user,
+            password: args.password,
+            owner: args.owner,
+            name: args.name,
+            secretName: forgejoSecretName(secretName),
+            data,
+        });
+    }
+};
+//# sourceMappingURL=adopt-pipelines.js.map

package/dist/pipelines/adopt-pipelines.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adopt-pipelines.js","sourceRoot":"","sources":["../../src/pipelines/adopt-pipelines.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAG1C,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAIvD,MAAM,CAAC,MAAM,eAAe,GAAG,mBAAmB,CAAC;AACnD,MAAM,CAAC,MAAM,gBAAgB,GAAG,oBAAoB,CAAC;AAIrD,MAAM,CAAC,MAAM,YAAY,GAAG,UAAU,CAAC;AACvC,MAAM,CAAC,MAAM,aAAa,GAAG,WAAW,CAAC;AAKzC,MAAM,WAAW,GAAG,eAAe,CAAC;AAIpC,MAAM,WAAW,GAAG,kBAAkB,CAAC;AAEvC,MAAM,CAAC,MAAM,oBAAoB,GAAG,iCAAiC,CAAC;AACtE,MAAM,CAAC,MAAM,mBAAmB,GAAG,+BAA+B,CAAC;AAMnE,MAAM,wBAAwB,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;AACnE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,GAAW,EAAU,EAAE,CACrD,wBAAwB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;AAuBhG,MAAM,QAAQ,GAAG,CAAC,MAAsB,EAAE,IAAY,EAAU,EAAE,CAAC,WAAW,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,IAAI,IAAI,MAAM,CAAC;AAKzH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,MAAsB,EAAU,EAAE,CACjE,cAAc,CAAC,wBAAwB,EAAE;IACrC,UAAU,EAAE,MAAM,CAAC,UAAU;IAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;IACjC,UAAU,EAAE,YAAY;IACxB,aAAa,EAAE,eAAe;IAC9B,WAAW,EAAE,aAAa;IAC1B,cAAc,EAAE,gBAAgB;IAChC,oBAAoB,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,gBAAgB,CAAC;IAC/D,UAAU,EAAE,WAAW;IACvB,UAAU,EAAE,MAAM,CAAC,UAAU;IAC7B,IAAI,EAAE,MAAM,CAAC,IAAI;IACjB,MAAM,EAAE,MAAM,CAAC,MAAM;CACxB,CAAC,CAAC;AAKP,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,MAAsB,EAAU,EAAE,CAChE,cAAc,CAAC,sBAAsB,EAAE;IACnC,YAAY,EAAE,MAAM,CAAC,YAAY;IACjC,UAAU,EAAE,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/F,UAAU,EAAE,WAAW;IACvB,UAAU,EAAE,WAAW;IACvB,UAAU,EAAE,MAAM,CAAC,UAAU;IAC7B,IAAI,EAAE,MAAM,CAAC,IAAI;IACjB,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;CAChD,CAAC,CAAC;AAIP,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,EAAE,OAAe,EAAE,YAAoB,EAAE,OAAe,EAAiB,EAAE;IACzG,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACzC,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACnC,CAAC,CAAC;AAGF,MAAM,CAAC,MAAM,0BAA0B,GAAG,KAAK,EAAE,SAAiB,EAAE,SAAiB,EAAE,MAAsB,EAAiB,EAAE;IAC5H,MAAM,aAAa,CAAC,SAAS,EAAE,oBAAoB,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;IACjF,MAAM,aAAa,CAAC,SAAS,EAAE,mBAAmB,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;AACnF,CAAC,CAAC;AAKF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAC/B,KAAwB,EACxB,GAAiD,EACjD,eAAiD,EAC3B,EAAE;IACxB,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACzE,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACtC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACxB,CAAC;IACL,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACxB,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC,CAAC;AAGF,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,EAAE,IAQpC,EAAiB,EAAE;IAChB,KAAK,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC;YACzB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,UAAU,EAAE,iBAAiB,CAAC,UAAU,CAAC;YACzC,IAAI;SACP,CAAC,CAAC;IACP,CAAC;AACL,CAAC,CAAC"}

package/dist/pipelines/control-plane-sync.d.ts

@@ -0,0 +1,24 @@
+import { type DesiredStateGraph, type SecretSource } from "@intentic/graph";
+import { type ForgejoApi } from "@intentic/providers";
+export declare const forgejoIdentity: (graph: DesiredStateGraph) => {
+    readonly domain: string;
+    readonly user: string;
+    readonly adminPasswordRef: {
+        readonly source: SecretSource;
+        readonly key: string;
+    };
+};
+export declare const syncControlPlaneSecrets: (args: {
+    readonly previousGraph: DesiredStateGraph | undefined;
+    readonly newGraph: DesiredStateGraph;
+    readonly env: Readonly<Record<string, string | undefined>>;
+    readonly dir: string;
+    readonly password: string;
+    readonly cliVersion: string;
+    readonly log: (message: string) => void;
+    readonly api?: ForgejoApi;
+}) => Promise<{
+    readonly pushed: readonly string[];
+    readonly newEnv: readonly string[];
+}>;
+//# sourceMappingURL=control-plane-sync.d.ts.map

package/dist/pipelines/control-plane-sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-plane-sync.d.ts","sourceRoot":"","sources":["../../src/pipelines/control-plane-sync.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,iBAAiB,EAAa,KAAK,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACvF,OAAO,EAAE,KAAK,UAAU,EAAc,MAAM,qBAAqB,CAAC;AAOlE,eAAO,MAAM,eAAe,GACxB,OAAO,iBAAiB,KACzB;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,gBAAgB,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;QAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAA;CAetI,CAAC;AASF,eAAO,MAAM,uBAAuB,GAAU,MAAM;IAChD,QAAQ,CAAC,aAAa,EAAE,iBAAiB,GAAG,SAAS,CAAC;IACtD,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IAE3D,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAErB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACxC,QAAQ,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC;CAC7B,KAAG,OAAO,CAAC;IAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAkDrF,CAAC"}