@obh/forge 0.2.0

package/dist/stack/infer.js

@@ -0,0 +1,165 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.inferStack = inferStack;
+const node_path_1 = __importDefault(require("node:path"));
+const manifest_1 = require("./manifest");
+const lwdtoml_1 = require("./lwdtoml");
+const manifest_2 = require("../project/manifest");
+const node_fs_1 = require("node:fs");
+const RANDOM_SECRET_RE = /(^JWT_SECRET$|_SECRET$|_PEPPER$|_KEY$|_TOKEN$)/;
+const RESOURCE_IMAGE_RE = /^(postgres|redis|valkey|mysql|mariadb|mongo|minio)/;
+const ROLE_ORDER = { resource: 0, api: 1, worker: 2, web: 3, app: 4 };
+/** Inspect deploy/*.lwd.toml (+ forge.json) and propose a stack manifest. */
+async function inferStack(root) {
+    const deployDir = node_path_1.default.join(root, "deploy");
+    let files = [];
+    try {
+        files = (await node_fs_1.promises.readdir(deployDir)).filter((f) => f.endsWith(".lwd.toml"));
+    }
+    catch {
+        files = [];
+    }
+    if (files.length === 0)
+        throw new Error("no deploy/*.lwd.toml files found — nothing to assemble into a stack");
+    const forge = await (0, manifest_2.loadManifest)(root);
+    const forgeRoles = {};
+    for (const [name, app] of Object.entries(forge?.apps ?? {}))
+        forgeRoles[name] = app.role;
+    const infos = [];
+    for (const file of files.sort()) {
+        const toml = await (0, lwdtoml_1.readLwdToml)(node_path_1.default.join(deployDir, file));
+        if (!toml || !toml.name)
+            continue;
+        infos.push({ base: file.replace(/\.lwd\.toml$/, ""), manifestRel: `deploy/${file}`, toml });
+    }
+    const apps = infos.map((i) => ({
+        name: i.toml.name,
+        manifest: i.manifestRel,
+        role: inferRole(i, forgeRoles),
+    }));
+    const roleOf = new Map(apps.map((a, i) => [infos[i].toml.name, a.role]));
+    // Which apps need each secret (app top-level secrets + backing-service secrets).
+    const needers = new Map();
+    const need = (secret, app) => {
+        const s = needers.get(secret) ?? new Set();
+        s.add(app);
+        needers.set(secret, s);
+    };
+    for (const i of infos) {
+        for (const s of i.toml.secrets)
+            need(s, i.toml.name);
+        for (const svc of i.toml.services)
+            for (const s of svc.secrets)
+                need(s, i.toml.name);
+    }
+    // Postgres sources: co-located [[services]] blocks + dedicated resource apps.
+    const pgSources = [];
+    for (const i of infos) {
+        for (const svc of i.toml.services) {
+            if (/^postgres/.test(svc.image))
+                pgSources.push(pgFromService(i.toml.name, svc));
+        }
+        if (roleOf.get(i.toml.name) === "resource" && /^postgres/.test(i.toml.image ?? "")) {
+            pgSources.push({
+                ownerApp: i.toml.name,
+                host: i.toml.name,
+                user: i.toml.env.POSTGRES_USER ?? "app",
+                db: i.toml.env.POSTGRES_DB ?? "app",
+                coLocated: false,
+                passwordSecret: i.toml.secrets.find((s) => /PASSWORD/.test(s)) ?? "POSTGRES_PASSWORD",
+            });
+        }
+    }
+    const generate = {};
+    const connections = {};
+    const manual = [];
+    const classified = new Set();
+    // 1. Postgres password → generated on the owning app; DATABASE_URL → connection.
+    for (const pg of pgSources) {
+        generate[pg.passwordSecret] = { type: "password", bytes: 24, apps: [pg.ownerApp] };
+        classified.add(pg.passwordSecret);
+        if (needers.has("DATABASE_URL") && !connections.DATABASE_URL) {
+            const consumers = [...(needers.get("DATABASE_URL") ?? [])];
+            const template = `postgres://${pg.user}:\${${pg.passwordSecret}}@${pg.host}:5432/${pg.db}`;
+            if (pg.coLocated) {
+                const owner = consumers.includes(pg.ownerApp) ? pg.ownerApp : consumers[0];
+                connections.DATABASE_URL = {
+                    template,
+                    service: { app: pg.ownerApp, name: serviceNameOf(infos, pg.ownerApp) ?? "db" },
+                    apps: [owner],
+                    sharedWith: consumers.filter((a) => a !== owner),
+                };
+            }
+            else {
+                connections.DATABASE_URL = {
+                    template,
+                    service: { app: pg.ownerApp, name: pg.ownerApp },
+                    apps: consumers,
+                };
+            }
+            classified.add("DATABASE_URL");
+        }
+    }
+    // 2. Remaining secrets: random-looking → generate hex; else → manual.
+    for (const [name, appsSet] of needers) {
+        if (classified.has(name))
+            continue;
+        if (RANDOM_SECRET_RE.test(name)) {
+            generate[name] = { type: "hex", bytes: 32, apps: [...appsSet] };
+        }
+        else {
+            manual.push(name);
+        }
+    }
+    manual.sort();
+    const name = forge?.name ?? commonPrefix(apps.map((a) => a.name)) ?? node_path_1.default.basename(root);
+    const order = [...apps].sort((a, b) => ROLE_ORDER[a.role] - ROLE_ORDER[b.role]).map((a) => a.name);
+    return { name, stackVersion: manifest_1.STACK_VERSION, apps, order, secrets: { generate, connections, manual } };
+}
+function pgFromService(ownerApp, svc) {
+    return {
+        ownerApp,
+        host: svc.name,
+        user: svc.env.POSTGRES_USER ?? "app",
+        db: svc.env.POSTGRES_DB ?? "app",
+        coLocated: true,
+        passwordSecret: svc.secrets.find((s) => /PASSWORD/.test(s)) ?? "POSTGRES_PASSWORD",
+    };
+}
+function serviceNameOf(infos, app) {
+    const info = infos.find((i) => i.toml.name === app);
+    const pg = info?.toml.services.find((s) => /^postgres/.test(s.image));
+    return pg?.name;
+}
+function inferRole(info, forgeRoles) {
+    const fr = forgeRoles[info.base];
+    if (fr === "api" || fr === "web" || fr === "worker")
+        return fr;
+    const t = info.toml;
+    const isResource = (t.services.length > 0 && !t.git && !t.image) || (RESOURCE_IMAGE_RE.test(t.image ?? "") && !t.git);
+    if (isResource)
+        return "resource";
+    if (/worker/i.test(t.name) || info.base === "worker")
+        return "worker";
+    if (t.port === 80 || info.base === "admin" || info.base === "web")
+        return "web";
+    return "api";
+}
+function commonPrefix(names) {
+    if (names.length === 0)
+        return undefined;
+    const first = names[0];
+    let prefix = "";
+    for (let i = 0; i < first.length; i++) {
+        const ch = first[i];
+        if (names.every((n) => n[i] === ch))
+            prefix += ch;
+        else
+            break;
+    }
+    return prefix.replace(/[-_]$/, "") || undefined;
+}
+//# sourceMappingURL=infer.js.map

package/dist/stack/infer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"infer.js","sourceRoot":"","sources":["../../src/stack/infer.ts"],"names":[],"mappings":";;;;;AA6BA,gCAyGC;AAtID,0DAA4B;AAE5B,yCAA0C;AAC1C,uCAAsE;AACtE,kDAAkD;AAClD,qCAAwC;AAExC,MAAM,gBAAgB,GAAG,gDAAgD,CAAA;AACzE,MAAM,iBAAiB,GAAG,oDAAoD,CAAA;AAkB9E,MAAM,UAAU,GAA4B,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAA;AAE9F,6EAA6E;AACtE,KAAK,UAAU,UAAU,CAAC,IAAY;IAC3C,MAAM,SAAS,GAAG,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;IAC3C,IAAI,KAAK,GAAa,EAAE,CAAA;IACxB,IAAI,CAAC;QACH,KAAK,GAAG,CAAC,MAAM,kBAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAA;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,GAAG,EAAE,CAAA;IACZ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAA;IAE9G,MAAM,KAAK,GAAG,MAAM,IAAA,uBAAY,EAAC,IAAI,CAAC,CAAA;IACtC,MAAM,UAAU,GAA2B,EAAE,CAAA;IAC7C,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,IAAI,EAAE,CAAC;QAAE,UAAU,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,CAAA;IAExF,MAAM,KAAK,GAAc,EAAE,CAAA;IAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,MAAM,IAAA,qBAAW,EAAC,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAA;QAC1D,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,SAAQ;QACjC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,EAAE,WAAW,EAAE,UAAU,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;IAC7F,CAAC;IAED,MAAM,IAAI,GAAe,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI;QACjB,QAAQ,EAAE,CAAC,CAAC,WAAW;QACvB,IAAI,EAAE,SAAS,CAAC,CAAC,EAAE,UAAU,CAAC;KAC/B,CAAC,CAAC,CAAA;IACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAExE,iFAAiF;IACjF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAA;IAC9C,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,GAAW,EAAQ,EAAE;QACjD,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,GAAG,EAAU,CAAA;QAClD,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACV,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;IACxB,CAAC,CAAA;IACD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACpD,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ;YAAE,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,OAAO;gBAAE,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACtF,CAAC;IAED,8EAA8E;IAC9E,MAAM,SAAS,GAAe,EAAE,CAAA;IAChC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClC,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;QAClF,CAAC;QACD,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,UAAU,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;YACnF,SAAS,CAAC,IAAI,CAAC;gBACb,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI;gBACrB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI;gBACjB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,IAAI,KAAK;gBACvC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,KAAK;gBACnC,SAAS,EAAE,KAAK;gBAChB,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,mBAAmB;aACtF,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAmC,EAAE,CAAA;IACnD,MAAM,WAAW,GAAqC,EAAE,CAAA;IACxD,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAA;IAEpC,iFAAiF;IACjF,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;QAC3B,QAAQ,CAAC,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAA;QAClF,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,cAAc,CAAC,CAAA;QAEjC,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC;YAC7D,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;YAC1D,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC,IAAI,OAAO,EAAE,CAAC,cAAc,KAAK,EAAE,CAAC,IAAI,SAAS,EAAE,CAAC,EAAE,EAAE,CAAA;YAC1F,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC;gBACjB,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;gBAC1E,WAAW,CAAC,YAAY,GAAG;oBACzB,QAAQ;oBACR,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE;oBAC9E,IAAI,EAAE,CAAC,KAAK,CAAC;oBACb,UAAU,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC;iBACjD,CAAA;YACH,CAAC;iBAAM,CAAC;gBACN,WAAW,CAAC,YAAY,GAAG;oBACzB,QAAQ;oBACR,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,QAAQ,EAAE;oBAChD,IAAI,EAAE,SAAS;iBAChB,CAAA;YACH,CAAC;YACD,UAAU,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;QAChC,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,OAAO,EAAE,CAAC;QACtC,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAQ;QAClC,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,EAAE,CAAA;QACjE,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACnB,CAAC;IACH,CAAC;IACD,MAAM,CAAC,IAAI,EAAE,CAAA;IAEb,MAAM,IAAI,GAAG,KAAK,EAAE,IAAI,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,mBAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;IACxF,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IAElG,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,wBAAa,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,CAAA;AACvG,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB,EAAE,GAAe;IACtD,OAAO;QACL,QAAQ;QACR,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,aAAa,IAAI,KAAK;QACpC,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,WAAW,IAAI,KAAK;QAChC,SAAS,EAAE,IAAI;QACf,cAAc,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,mBAAmB;KACnF,CAAA;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAgB,EAAE,GAAW;IAClD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC,CAAA;IACnD,MAAM,EAAE,GAAG,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;IACrE,OAAO,EAAE,EAAE,IAAI,CAAA;AACjB,CAAC;AAED,SAAS,SAAS,CAAC,IAAa,EAAE,UAAkC;IAClE,MAAM,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAChC,IAAI,EAAE,KAAK,KAAK,IAAI,EAAE,KAAK,KAAK,IAAI,EAAE,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAA;IAC9D,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAA;IACnB,MAAM,UAAU,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;IACrH,IAAI,UAAU;QAAE,OAAO,UAAU,CAAA;IACjC,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAA;IACrE,IAAI,CAAC,CAAC,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,KAAK,CAAA;IAC/E,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,YAAY,CAAC,KAAe;IACnC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IACxC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;IACtB,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QACnB,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;YAAE,MAAM,IAAI,EAAE,CAAA;;YAC5C,MAAK;IACZ,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,SAAS,CAAA;AACjD,CAAC"}

package/dist/stack/lwd.d.ts

@@ -0,0 +1,24 @@
+import { type CaptureOptions, type CaptureResult } from "../utils/shell";
+import type { AppStatus } from "./types";
+export type Runner = (cmd: string, args: string[], opts?: CaptureOptions) => Promise<CaptureResult>;
+export interface LwdAdapter {
+    secretLs(app: string): Promise<string[]>;
+    secretSet(app: string, key: string, value: string): Promise<void>;
+    apply(manifestPath: string): Promise<void>;
+    status(app: string): Promise<AppStatus>;
+    rm(app: string): Promise<void>;
+}
+export interface LwdAdapterOptions {
+    /** lwd binary name/path (default "lwd"). */
+    bin?: string;
+    cwd?: string;
+    /** Injectable runner for tests; defaults to the real capturing shell. */
+    run?: Runner;
+}
+/**
+ * Thin wrapper over the `lwd` CLI. Inherits ambient LWD_DAEMON/LWD_API_TOKEN
+ * (so it targets local or remote daemons unchanged). Secret values go in on
+ * stdin, never argv. No lwd changes — a pure client of its stable CLI.
+ */
+export declare function createLwdAdapter(opts?: LwdAdapterOptions): LwdAdapter;
+//# sourceMappingURL=lwd.d.ts.map

package/dist/stack/lwd.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lwd.d.ts","sourceRoot":"","sources":["../../src/stack/lwd.ts"],"names":[],"mappings":"AAAA,OAAO,EAAW,KAAK,cAAc,EAAE,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAA;AACjF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AAExC,MAAM,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE,cAAc,KAAK,OAAO,CAAC,aAAa,CAAC,CAAA;AAEnG,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IACxC,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACjE,KAAK,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1C,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACvC,EAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC/B;AAED,MAAM,WAAW,iBAAiB;IAChC,4CAA4C;IAC5C,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,yEAAyE;IACzE,GAAG,CAAC,EAAE,MAAM,CAAA;CACb;AAID;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,GAAE,iBAAsB,GAAG,UAAU,CAkDzE"}

package/dist/stack/lwd.js

@@ -0,0 +1,62 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createLwdAdapter = createLwdAdapter;
+const shell_1 = require("../utils/shell");
+const SECRET_NAME_LINE = /^[A-Za-z_][A-Za-z0-9_]*$/;
+/**
+ * Thin wrapper over the `lwd` CLI. Inherits ambient LWD_DAEMON/LWD_API_TOKEN
+ * (so it targets local or remote daemons unchanged). Secret values go in on
+ * stdin, never argv. No lwd changes — a pure client of its stable CLI.
+ */
+function createLwdAdapter(opts = {}) {
+    const bin = opts.bin ?? "lwd";
+    const run = opts.run ?? ((cmd, args, o) => (0, shell_1.capture)(cmd, args, { cwd: opts.cwd, ...o }));
+    async function invoke(args, o) {
+        try {
+            return await run(bin, args, o);
+        }
+        catch (err) {
+            const e = err;
+            if (e.code === "ENOENT") {
+                throw new Error(`\`${bin}\` not found on PATH. Install lwd or set the binary path.`);
+            }
+            throw err;
+        }
+    }
+    const ensureOk = (r, what) => {
+        if (r.code !== 0)
+            throw new Error(`${what} failed: ${(r.stderr || r.stdout).trim() || `exit ${r.code}`}`);
+    };
+    return {
+        async secretLs(app) {
+            const r = await invoke(["secret", "ls", app]);
+            // A not-yet-deployed app has no secrets — treat any error as empty.
+            if (r.code !== 0)
+                return [];
+            return r.stdout
+                .split(/\r?\n/)
+                .map((l) => l.trim())
+                .filter((l) => SECRET_NAME_LINE.test(l));
+        },
+        async secretSet(app, key, value) {
+            const r = await invoke(["secret", "set", app, key], { stdin: value });
+            ensureOk(r, `lwd secret set ${app} ${key}`);
+        },
+        async apply(manifestPath) {
+            const r = await invoke(["apply", manifestPath]);
+            ensureOk(r, `lwd apply ${manifestPath}`);
+        },
+        async status(app) {
+            const r = await invoke(["status", app]);
+            const text = (r.stdout + " " + r.stderr).toLowerCase();
+            const healthy = /\b(running|healthy)\b/.test(text) && !/\b(stopped|failed|error|unhealthy|crash)\b/.test(text);
+            const state = (text.match(/\b(running|healthy|stopped|failed|pending|starting|unhealthy)\b/) ?? ["unknown"])[0];
+            return { app, healthy, state };
+        },
+        async rm(app) {
+            const r = await invoke(["rm", app]);
+            ensureOk(r, `lwd rm ${app}`);
+        },
+    };
+}
+//# sourceMappingURL=lwd.js.map

package/dist/stack/lwd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lwd.js","sourceRoot":"","sources":["../../src/stack/lwd.ts"],"names":[],"mappings":";;AA4BA,4CAkDC;AA9ED,0CAAiF;AAqBjF,MAAM,gBAAgB,GAAG,0BAA0B,CAAA;AAEnD;;;;GAIG;AACH,SAAgB,gBAAgB,CAAC,OAA0B,EAAE;IAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,KAAK,CAAA;IAC7B,MAAM,GAAG,GAAW,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,IAAA,eAAO,EAAC,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;IAE/F,KAAK,UAAU,MAAM,CAAC,IAAc,EAAE,CAAkB;QACtD,IAAI,CAAC;YACH,OAAO,MAAM,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,GAA4B,CAAA;YACtC,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CAAC,KAAK,GAAG,2DAA2D,CAAC,CAAA;YACtF,CAAC;YACD,MAAM,GAAG,CAAA;QACX,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,CAAgB,EAAE,IAAY,EAAQ,EAAE;QACxD,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,YAAY,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;IAC3G,CAAC,CAAA;IAED,OAAO;QACL,KAAK,CAAC,QAAQ,CAAC,GAAG;YAChB,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;YAC7C,oEAAoE;YACpE,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAA;YAC3B,OAAO,CAAC,CAAC,MAAM;iBACZ,KAAK,CAAC,OAAO,CAAC;iBACd,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;iBACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;QAC5C,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK;YAC7B,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;YACrE,QAAQ,CAAC,CAAC,EAAE,kBAAkB,GAAG,IAAI,GAAG,EAAE,CAAC,CAAA;QAC7C,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,YAAY;YACtB,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAA;YAC/C,QAAQ,CAAC,CAAC,EAAE,aAAa,YAAY,EAAE,CAAC,CAAA;QAC1C,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,GAAG;YACd,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAA;YACvC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAA;YACtD,MAAM,OAAO,GAAG,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,4CAA4C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAC9G,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,iEAAiE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YAC/G,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;QAChC,CAAC;QACD,KAAK,CAAC,EAAE,CAAC,GAAG;YACV,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;YACnC,QAAQ,CAAC,CAAC,EAAE,UAAU,GAAG,EAAE,CAAC,CAAA;QAC9B,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/stack/lwdtoml.d.ts

@@ -0,0 +1,38 @@
+export interface LwdService {
+    name: string;
+    image: string;
+    command?: string;
+    env: Record<string, string>;
+    secrets: string[];
+    volume?: string;
+}
+export interface LwdToml {
+    name: string;
+    domain?: string;
+    port?: number;
+    image?: string;
+    env: Record<string, string>;
+    secrets: string[];
+    replicas?: number;
+    compose?: string;
+    service?: string;
+    git?: {
+        url: string;
+        ref?: string;
+        path?: string;
+    };
+    build?: {
+        dockerfile?: string;
+        context?: string;
+    };
+    health?: {
+        path?: string;
+        timeout?: string;
+    };
+    services: LwdService[];
+}
+/** Parse an lwd.toml string into a typed, normalised shape. */
+export declare function parseLwdToml(content: string): LwdToml;
+/** Read + parse an lwd.toml file, or undefined if it does not exist. */
+export declare function readLwdToml(absPath: string): Promise<LwdToml | undefined>;
+//# sourceMappingURL=lwdtoml.d.ts.map

package/dist/stack/lwdtoml.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lwdtoml.d.ts","sourceRoot":"","sources":["../../src/stack/lwdtoml.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC3B,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC3B,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,GAAG,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAClD,KAAK,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACjD,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAC5C,QAAQ,EAAE,UAAU,EAAE,CAAA;CACvB;AAcD,+DAA+D;AAC/D,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CA4BrD;AAED,wEAAwE;AACxE,wBAAsB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAI/E"}

package/dist/stack/lwdtoml.js

@@ -0,0 +1,57 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseLwdToml = parseLwdToml;
+exports.readLwdToml = readLwdToml;
+const fs_1 = require("../utils/fs");
+// @iarna/toml is CommonJS; require sidesteps its empty `types` field. It parses
+// the subset lwd uses (inline tables, arrays-of-tables, comments).
+// eslint-disable-next-line @typescript-eslint/no-var-requires
+const TOML = require("@iarna/toml");
+function strMap(v) {
+    const out = {};
+    if (v && typeof v === "object") {
+        for (const [k, val] of Object.entries(v))
+            out[k] = String(val);
+    }
+    return out;
+}
+function strList(v) {
+    return Array.isArray(v) ? v.map((x) => String(x)) : [];
+}
+/** Parse an lwd.toml string into a typed, normalised shape. */
+function parseLwdToml(content) {
+    const raw = TOML.parse(content);
+    const services = Array.isArray(raw.services)
+        ? raw.services.map((s) => ({
+            name: String(s.name),
+            image: String(s.image),
+            command: s.command !== undefined ? String(s.command) : undefined,
+            env: strMap(s.env),
+            secrets: strList(s.secrets),
+            volume: s.volume !== undefined ? String(s.volume) : undefined,
+        }))
+        : [];
+    return {
+        name: String(raw.name ?? ""),
+        domain: raw.domain !== undefined ? String(raw.domain) : undefined,
+        port: typeof raw.port === "number" ? raw.port : undefined,
+        image: raw.image !== undefined ? String(raw.image) : undefined,
+        env: strMap(raw.env),
+        secrets: strList(raw.secrets),
+        replicas: typeof raw.replicas === "number" ? raw.replicas : undefined,
+        compose: raw.compose !== undefined ? String(raw.compose) : undefined,
+        service: raw.service !== undefined ? String(raw.service) : undefined,
+        git: raw.git ? { url: String(raw.git.url), ref: raw.git.ref, path: raw.git.path } : undefined,
+        build: raw.build ? { dockerfile: raw.build.dockerfile, context: raw.build.context } : undefined,
+        health: raw.health ? { path: raw.health.path, timeout: raw.health.timeout } : undefined,
+        services,
+    };
+}
+/** Read + parse an lwd.toml file, or undefined if it does not exist. */
+async function readLwdToml(absPath) {
+    const content = await (0, fs_1.readFileSafe)(absPath);
+    if (content === undefined)
+        return undefined;
+    return parseLwdToml(content);
+}
+//# sourceMappingURL=lwdtoml.js.map

package/dist/stack/lwdtoml.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lwdtoml.js","sourceRoot":"","sources":["../../src/stack/lwdtoml.ts"],"names":[],"mappings":";;AA6CA,oCA4BC;AAGD,kCAIC;AAhFD,oCAA0C;AAE1C,gFAAgF;AAChF,mEAAmE;AACnE,8DAA8D;AAC9D,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAkD,CAAA;AA2BpF,SAAS,MAAM,CAAC,CAAU;IACxB,MAAM,GAAG,GAA2B,EAAE,CAAA;IACtC,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC/B,KAAK,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAA4B,CAAC;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;IAC3F,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,OAAO,CAAC,CAAU;IACzB,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;AACxD,CAAC;AAED,+DAA+D;AAC/D,SAAgB,YAAY,CAAC,OAAe;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAwB,CAAA;IACtD,MAAM,QAAQ,GAAiB,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;QACxD,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAA0B,EAAE,EAAE,CAAC,CAAC;YAChD,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;YACpB,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;YACtB,OAAO,EAAE,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;YAChE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;YAClB,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;YAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;SAC9D,CAAC,CAAC;QACL,CAAC,CAAC,EAAE,CAAA;IAEN,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QAC5B,MAAM,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;QACjE,IAAI,EAAE,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QACzD,KAAK,EAAE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS;QAC9D,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;QACpB,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;QAC7B,QAAQ,EAAE,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QACrE,OAAO,EAAE,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;QACpE,OAAO,EAAE,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;QACpE,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;QAC7F,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS;QAC/F,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS;QACvF,QAAQ;KACT,CAAA;AACH,CAAC;AAED,wEAAwE;AACjE,KAAK,UAAU,WAAW,CAAC,OAAe;IAC/C,MAAM,OAAO,GAAG,MAAM,IAAA,iBAAY,EAAC,OAAO,CAAC,CAAA;IAC3C,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IAC3C,OAAO,YAAY,CAAC,OAAO,CAAC,CAAA;AAC9B,CAAC"}

package/dist/stack/manifest.d.ts

@@ -0,0 +1,15 @@
+import type { StackManifest } from "./types";
+export declare const STACK_VERSION = "0.1.0";
+export declare function loadStackManifest(root: string): Promise<StackManifest | undefined>;
+export declare function saveStackManifest(root: string, manifest: StackManifest): Promise<void>;
+/**
+ * Validate a stack manifest. Returns a list of human-readable problems (empty =
+ * valid): unique app names; every order/apps/sharedWith/service ref resolves;
+ * every connection ${NAME} resolves to a generate key; secret names well-formed.
+ */
+export declare function validateStackManifest(m: StackManifest): string[];
+/** All ${NAME} references in a connection template. */
+export declare function templateRefs(template: string): string[];
+/** Substitute ${NAME} refs in a template from a values map. */
+export declare function resolveTemplate(template: string, values: Record<string, string>): string;
+//# sourceMappingURL=manifest.d.ts.map

package/dist/stack/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../src/stack/manifest.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAI5C,eAAO,MAAM,aAAa,UAAU,CAAA;AAGpC,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAExF;AAED,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAE5F;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,aAAa,GAAG,MAAM,EAAE,CAqChE;AAED,uDAAuD;AACvD,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAMvD;AAED,+DAA+D;AAC/D,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAExF"}

package/dist/stack/manifest.js

@@ -0,0 +1,86 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.STACK_VERSION = void 0;
+exports.loadStackManifest = loadStackManifest;
+exports.saveStackManifest = saveStackManifest;
+exports.validateStackManifest = validateStackManifest;
+exports.templateRefs = templateRefs;
+exports.resolveTemplate = resolveTemplate;
+const node_path_1 = __importDefault(require("node:path"));
+const fs_1 = require("../utils/fs");
+const paths_1 = require("../project/paths");
+exports.STACK_VERSION = "0.1.0";
+const SECRET_NAME_RE = /^[A-Z][A-Z0-9_]*$/;
+async function loadStackManifest(root) {
+    return (0, fs_1.readJson)(node_path_1.default.join(root, paths_1.paths.stackManifest));
+}
+async function saveStackManifest(root, manifest) {
+    await (0, fs_1.writeJson)(node_path_1.default.join(root, paths_1.paths.stackManifest), manifest);
+}
+/**
+ * Validate a stack manifest. Returns a list of human-readable problems (empty =
+ * valid): unique app names; every order/apps/sharedWith/service ref resolves;
+ * every connection ${NAME} resolves to a generate key; secret names well-formed.
+ */
+function validateStackManifest(m) {
+    const errors = [];
+    const appNames = new Set(m.apps.map((a) => a.name));
+    if (m.apps.length !== appNames.size)
+        errors.push("duplicate app names");
+    for (const name of m.order) {
+        if (!appNames.has(name))
+            errors.push(`order references unknown app "${name}"`);
+    }
+    if (m.order.length !== m.apps.length) {
+        errors.push(`order lists ${m.order.length} apps but ${m.apps.length} are declared`);
+    }
+    const checkSecretName = (name) => {
+        if (!SECRET_NAME_RE.test(name))
+            errors.push(`invalid secret name "${name}" (want ^[A-Z][A-Z0-9_]*$)`);
+    };
+    const generateKeys = new Set(Object.keys(m.secrets.generate));
+    for (const [name, g] of Object.entries(m.secrets.generate)) {
+        checkSecretName(name);
+        for (const app of g.apps)
+            if (!appNames.has(app))
+                errors.push(`generate.${name} targets unknown app "${app}"`);
+        if (g.bytes <= 0)
+            errors.push(`generate.${name} needs bytes > 0`);
+    }
+    for (const [name, c] of Object.entries(m.secrets.connections)) {
+        checkSecretName(name);
+        if (!appNames.has(c.service.app))
+            errors.push(`connections.${name}.service.app unknown app "${c.service.app}"`);
+        for (const app of c.apps)
+            if (!appNames.has(app))
+                errors.push(`connections.${name} targets unknown app "${app}"`);
+        for (const app of c.sharedWith ?? []) {
+            if (!appNames.has(app))
+                errors.push(`connections.${name}.sharedWith unknown app "${app}"`);
+        }
+        for (const ref of templateRefs(c.template)) {
+            if (!generateKeys.has(ref))
+                errors.push(`connections.${name} references \${${ref}} which is not a generate secret`);
+        }
+    }
+    for (const name of m.secrets.manual)
+        checkSecretName(name);
+    return errors;
+}
+/** All ${NAME} references in a connection template. */
+function templateRefs(template) {
+    const out = [];
+    const re = /\$\{([A-Z][A-Z0-9_]*)\}/g;
+    let match;
+    while ((match = re.exec(template)) !== null)
+        out.push(match[1]);
+    return out;
+}
+/** Substitute ${NAME} refs in a template from a values map. */
+function resolveTemplate(template, values) {
+    return template.replace(/\$\{([A-Z][A-Z0-9_]*)\}/g, (_, name) => values[name] ?? `\${${name}}`);
+}
+//# sourceMappingURL=manifest.js.map

package/dist/stack/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../src/stack/manifest.ts"],"names":[],"mappings":";;;;;;AAQA,8CAEC;AAED,8CAEC;AAOD,sDAqCC;AAGD,oCAMC;AAGD,0CAEC;AAxED,0DAA4B;AAE5B,oCAAiD;AACjD,4CAAwC;AAE3B,QAAA,aAAa,GAAG,OAAO,CAAA;AACpC,MAAM,cAAc,GAAG,mBAAmB,CAAA;AAEnC,KAAK,UAAU,iBAAiB,CAAC,IAAY;IAClD,OAAO,IAAA,aAAQ,EAAgB,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,aAAK,CAAC,aAAa,CAAC,CAAC,CAAA;AACtE,CAAC;AAEM,KAAK,UAAU,iBAAiB,CAAC,IAAY,EAAE,QAAuB;IAC3E,MAAM,IAAA,cAAS,EAAC,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,aAAK,CAAC,aAAa,CAAC,EAAE,QAAQ,CAAC,CAAA;AACjE,CAAC;AAED;;;;GAIG;AACH,SAAgB,qBAAqB,CAAC,CAAgB;IACpD,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;IAEnD,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,IAAI;QAAE,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAA;IACvE,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;QAC3B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,iCAAiC,IAAI,GAAG,CAAC,CAAA;IAChF,CAAC;IACD,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,MAAM,aAAa,CAAC,CAAC,IAAI,CAAC,MAAM,eAAe,CAAC,CAAA;IACrF,CAAC;IAED,MAAM,eAAe,GAAG,CAAC,IAAY,EAAQ,EAAE;QAC7C,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,wBAAwB,IAAI,4BAA4B,CAAC,CAAA;IACvG,CAAC,CAAA;IAED,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAA;IAC7D,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3D,eAAe,CAAC,IAAI,CAAC,CAAA;QACrB,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,IAAI;YAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,YAAY,IAAI,yBAAyB,GAAG,GAAG,CAAC,CAAA;QAC9G,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,YAAY,IAAI,kBAAkB,CAAC,CAAA;IACnE,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9D,eAAe,CAAC,IAAI,CAAC,CAAA;QACrB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,eAAe,IAAI,6BAA6B,CAAC,CAAC,OAAO,CAAC,GAAG,GAAG,CAAC,CAAA;QAC/G,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,IAAI;YAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,eAAe,IAAI,yBAAyB,GAAG,GAAG,CAAC,CAAA;QACjH,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;YACrC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,eAAe,IAAI,4BAA4B,GAAG,GAAG,CAAC,CAAA;QAC5F,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,eAAe,IAAI,kBAAkB,GAAG,kCAAkC,CAAC,CAAA;QACrH,CAAC;IACH,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM;QAAE,eAAe,CAAC,IAAI,CAAC,CAAA;IAC1D,OAAO,MAAM,CAAA;AACf,CAAC;AAED,uDAAuD;AACvD,SAAgB,YAAY,CAAC,QAAgB;IAC3C,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,MAAM,EAAE,GAAG,0BAA0B,CAAA;IACrC,IAAI,KAA6B,CAAA;IACjC,OAAO,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,IAAI;QAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IAC/D,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,+DAA+D;AAC/D,SAAgB,eAAe,CAAC,QAAgB,EAAE,MAA8B;IAC9E,OAAO,QAAQ,CAAC,OAAO,CAAC,0BAA0B,EAAE,CAAC,CAAC,EAAE,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,IAAI,GAAG,CAAC,CAAA;AACzG,CAAC"}

package/dist/stack/types.d.ts

@@ -0,0 +1,48 @@
+export type AppRole = "api" | "web" | "worker" | "resource" | "app";
+export interface StackApp {
+    name: string;
+    /** Repo-relative path to the app's lwd.toml. */
+    manifest: string;
+    role: AppRole;
+}
+/** A secret whose value the tool generates and sets on `apps`. */
+export interface GenerateSecret {
+    type: "password" | "hex";
+    bytes: number;
+    apps: string[];
+}
+/** A secret DERIVED from generated components via `template`. */
+export interface ConnectionSecret {
+    /** Shell-free string with ${NAME} refs into `generate` keys. */
+    template: string;
+    /** The backing service this connection reaches (for reachability checks). */
+    service: {
+        app: string;
+        name: string;
+    };
+    /** Consumers KNOWN to reach the service (validated). */
+    apps: string[];
+    /** Requested cross-app consumers (validated → may be flagged). */
+    sharedWith?: string[];
+}
+export interface StackSecrets {
+    generate: Record<string, GenerateSecret>;
+    connections: Record<string, ConnectionSecret>;
+    /** Names the tool won't invent; the operator sets them. */
+    manual: string[];
+}
+export interface StackManifest {
+    name: string;
+    stackVersion: string;
+    apps: StackApp[];
+    /** App names in dependency order for apply. */
+    order: string[];
+    secrets: StackSecrets;
+}
+/** Health/state parsed from `lwd status <app>`. */
+export interface AppStatus {
+    app: string;
+    healthy: boolean;
+    state: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/stack/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/stack/types.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,OAAO,GAAG,KAAK,GAAG,KAAK,GAAG,QAAQ,GAAG,UAAU,GAAG,KAAK,CAAA;AAEnE,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAA;IACZ,gDAAgD;IAChD,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,OAAO,CAAA;CACd;AAED,kEAAkE;AAClE,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,UAAU,GAAG,KAAK,CAAA;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,EAAE,CAAA;CACf;AAED,iEAAiE;AACjE,MAAM,WAAW,gBAAgB;IAC/B,gEAAgE;IAChE,QAAQ,EAAE,MAAM,CAAA;IAChB,6EAA6E;IAC7E,OAAO,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;IACtC,wDAAwD;IACxD,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,kEAAkE;IAClE,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAA;IACxC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAA;IAC7C,2DAA2D;IAC3D,MAAM,EAAE,MAAM,EAAE,CAAA;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAA;IACZ,YAAY,EAAE,MAAM,CAAA;IACpB,IAAI,EAAE,QAAQ,EAAE,CAAA;IAChB,+CAA+C;IAC/C,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,OAAO,EAAE,YAAY,CAAA;CACtB;AAED,mDAAmD;AACnD,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,MAAM,CAAA;IACX,OAAO,EAAE,OAAO,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;CACd"}

package/dist/stack/types.js

@@ -0,0 +1,5 @@
+"use strict";
+// The stack delivery contract: deploy/stack.json. Distinct from forge.json
+// (a receipt) — this is the reviewable repo→lwd wiring plan.
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/stack/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/stack/types.ts"],"names":[],"mappings":";AAAA,2EAA2E;AAC3E,6DAA6D"}

package/dist/stack/wire.d.ts

@@ -0,0 +1,40 @@
+import type { StackManifest } from "./types";
+import { type LwdToml } from "./lwdtoml";
+import type { LwdAdapter } from "./lwd";
+export type SecretAction = "skip" | "generate" | "derive" | "blocked" | "manual-missing";
+export interface SecretPlanItem {
+    app: string;
+    key: string;
+    action: SecretAction;
+    /** Resolved value for generate/derive — NEVER logged. */
+    value?: string;
+    reason?: string;
+}
+export interface StackPlan {
+    order: string[];
+    items: SecretPlanItem[];
+    /** Connectivity / derivation problems that block a clean deploy. */
+    flags: string[];
+}
+export interface PlanOptions {
+    rotate?: string[];
+    onlyApp?: string;
+}
+/**
+ * Pure planning: given the manifest, each app's lwd.toml, and the secret names
+ * lwd already holds per app, decide what to skip / generate / derive / block.
+ * No IO, no execution — this is what the tests exercise.
+ */
+export declare function planSecrets(manifest: StackManifest, tomlByApp: Record<string, LwdToml>, existingByApp: Record<string, string[]>, opts?: PlanOptions): StackPlan;
+/** Read each app's lwd.toml and the secret names lwd already holds, then plan. */
+export declare function computeStackDeploy(root: string, manifest: StackManifest, adapter: LwdAdapter, opts?: PlanOptions): Promise<{
+    plan: StackPlan;
+    tomlByApp: Record<string, LwdToml>;
+}>;
+/** Log the plan, masking every value (a generated value never appears in output). */
+export declare function printStackPlan(manifest: StackManifest, plan: StackPlan): void;
+/** Execute the plan: set missing secrets per app in order, apply, gate on health. */
+export declare function executeStackDeploy(root: string, manifest: StackManifest, adapter: LwdAdapter, plan: StackPlan, opts?: {
+    noWait?: boolean;
+}): Promise<void>;
+//# sourceMappingURL=wire.d.ts.map

package/dist/stack/wire.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire.d.ts","sourceRoot":"","sources":["../../src/stack/wire.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAE5C,OAAO,EAAe,KAAK,OAAO,EAAE,MAAM,WAAW,CAAA;AACrD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAA;AAGvC,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,GAAG,gBAAgB,CAAA;AAExF,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,YAAY,CAAA;IACpB,yDAAyD;IACzD,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,KAAK,EAAE,cAAc,EAAE,CAAA;IACvB,oEAAoE;IACpE,KAAK,EAAE,MAAM,EAAE,CAAA;CAChB;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAaD;;;;GAIG;AACH,wBAAgB,WAAW,CACzB,QAAQ,EAAE,aAAa,EACvB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAClC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,EACvC,IAAI,GAAE,WAAgB,GACrB,SAAS,CAuEX;AAED,kFAAkF;AAClF,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,aAAa,EACvB,OAAO,EAAE,UAAU,EACnB,IAAI,GAAE,WAAgB,GACrB,OAAO,CAAC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC,CAUlE;AAED,qFAAqF;AACrF,wBAAgB,cAAc,CAAC,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,GAAG,IAAI,CAyB7E;AAED,qFAAqF;AACrF,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,aAAa,EACvB,OAAO,EAAE,UAAU,EACnB,IAAI,EAAE,SAAS,EACf,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GAC9B,OAAO,CAAC,IAAI,CAAC,CA4Bf"}