@percepta/create 4.0.1 → 4.1.1

package/README.md

@@ -31,7 +31,7 @@ The bare command above is the canonical UX. The flags below exist for tests and
 - `create` (default) — scaffold a new Mosaic package
 - `add` — add a webapp or library to the current monorepo
 - `infra register-os-blueprint` — open or update an infra PR for this customer monorepo's OS blueprint
-- `infra register-app <app>` — open or update an infra PR for a webapp database
+- `infra register-app <app>` — open or update an infra PR for a webapp service, blueprint installation, and database
 - `status` — show template sync status for the current app
 - `sync` — generate downstream sync context (template → app)
 - `upstream` — generate upstream context (app → template)
@@ -99,15 +99,18 @@ updates an infra PR that writes
 not create environment installations. It authenticates with `GITHUB_TOKEN`,
 `GH_TOKEN`, or the GitHub CLI's `gh auth token`.
 
-After adding a webapp, register its app database in that customer OS blueprint:
+After adding a webapp, register it in that customer OS blueprint:
 
 ```bash
 pnpm mosaic infra register-app my-app
 ```
 
-This opens or updates an infra PR that adds `my-app: {}` to the customer OS
-blueprint's `app_databases` default. Merge the OS blueprint PR before
-registering apps.
+This opens or updates an infra PR that registers the app service, adds the app
+to the customer OS blueprint's `app_databases` default, and adds the app's
+server installation to the customer OS blueprint. The generated installation
+wires database/auth secrets, consumes Mosaic runtime outputs for Inngest,
+Langfuse, OpenTelemetry, and SpiceDB, plus app-specific credential inputs for
+Inngest and Langfuse. Merge the OS blueprint PR before registering apps.
 
 ## Development
 

package/dist/{github-RCIMUq70.js → github-D3YOEl91.js}

@@ -5,18 +5,34 @@ const INFRA_REPOSITORY = "Percepta-Core/infra";
 const INFRA_REPOSITORY_OWNER = "Percepta-Core";
 const INFRA_BASE_BRANCH = "main";
 async function createOrUpdateInfraPullRequest(args) {
+	return createOrUpdateInfraPullRequestFiles({
+		body: args.body,
+		branchName: args.branchName,
+		files: [{
+			baseFileSha: args.baseFileSha,
+			content: args.content,
+			message: args.message,
+			path: args.targetPath
+		}],
+		github: args.github,
+		title: args.title
+	});
+}
+async function createOrUpdateInfraPullRequestFiles(args) {
 	const mainSha = await args.github.getBranchSha(INFRA_BASE_BRANCH);
 	if (!mainSha) throw new Error(`Could not find ${INFRA_REPOSITORY}@${INFRA_BASE_BRANCH}.`);
 	if (!await args.github.getBranchSha(args.branchName)) await args.github.createBranch(args.branchName, mainSha);
-	const branchFile = await args.github.getFile(args.targetPath, args.branchName);
 	const existingPullRequest = await args.github.findOpenPullRequest(args.branchName);
-	if (branchFile?.content !== args.content) await args.github.putFile({
-		path: args.targetPath,
-		branch: args.branchName,
-		content: args.content,
-		message: args.message,
-		sha: branchFile?.sha ?? args.baseFileSha
-	});
+	for (const file of args.files) {
+		const branchFile = await args.github.getFile(file.path, args.branchName);
+		if (branchFile?.content !== file.content) await args.github.putFile({
+			path: file.path,
+			branch: args.branchName,
+			content: file.content,
+			message: file.message,
+			sha: branchFile?.sha ?? file.baseFileSha
+		});
+	}
 	return {
 		pullRequestUrl: (existingPullRequest ?? await args.github.createPullRequest({
 			branch: args.branchName,
@@ -126,6 +142,6 @@ function encodePathSegments(filePath) {
 	return filePath.split("/").map(encodeURIComponent).join("/");
 }
 //#endregion
-export { resolveGitHubToken as a, createOrUpdateInfraPullRequest as i, INFRA_REPOSITORY as n, createInfraGitHubApi as r, INFRA_BASE_BRANCH as t };
+export { createOrUpdateInfraPullRequestFiles as a, createOrUpdateInfraPullRequest as i, INFRA_REPOSITORY as n, resolveGitHubToken as o, createInfraGitHubApi as r, INFRA_BASE_BRANCH as t };
 
-//# sourceMappingURL=github-RCIMUq70.js.map
+//# sourceMappingURL=github-D3YOEl91.js.map

package/dist/github-D3YOEl91.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-D3YOEl91.js","names":[],"sources":["../src/commands/infra/github.ts"],"sourcesContent":["import { execFileSync } from \"node:child_process\";\n\nconst GITHUB_API_BASE_URL = \"https://api.github.com\";\n\nexport const INFRA_REPOSITORY = \"Percepta-Core/infra\";\nexport const INFRA_REPOSITORY_OWNER = \"Percepta-Core\";\nexport const INFRA_BASE_BRANCH = \"main\";\n\nexport interface GitHubFile {\n  sha: string;\n  content: string;\n}\n\nexport interface GitHubPullRequest {\n  number: number;\n  url: string;\n}\n\nexport interface InfraGitHubApi {\n  getFile(path: string, ref: string): Promise<GitHubFile | null>;\n  getBranchSha(branch: string): Promise<string | null>;\n  createBranch(branch: string, sha: string): Promise<void>;\n  putFile(args: {\n    path: string;\n    branch: string;\n    content: string;\n    message: string;\n    sha?: string;\n  }): Promise<void>;\n  findOpenPullRequest(branch: string): Promise<GitHubPullRequest | null>;\n  createPullRequest(args: {\n    branch: string;\n    title: string;\n    body: string;\n  }): Promise<GitHubPullRequest>;\n}\n\nexport interface InfraPullRequestResult {\n  pullRequestUrl: string;\n  status: \"created_pr\" | \"updated_pr\";\n}\n\nexport interface InfraPullRequestFile {\n  baseFileSha?: string;\n  content: string;\n  message: string;\n  path: string;\n}\n\nexport async function createOrUpdateInfraPullRequest(args: {\n  baseFileSha?: string;\n  body: string;\n  branchName: string;\n  content: string;\n  github: InfraGitHubApi;\n  message: string;\n  targetPath: string;\n  title: string;\n}): Promise<InfraPullRequestResult> {\n  return createOrUpdateInfraPullRequestFiles({\n    body: args.body,\n    branchName: args.branchName,\n    files: [\n      {\n        baseFileSha: args.baseFileSha,\n        content: args.content,\n        message: args.message,\n        path: args.targetPath,\n      },\n    ],\n    github: args.github,\n    title: args.title,\n  });\n}\n\nexport async function createOrUpdateInfraPullRequestFiles(args: {\n  body: string;\n  branchName: string;\n  files: InfraPullRequestFile[];\n  github: InfraGitHubApi;\n  title: string;\n}): Promise<InfraPullRequestResult> {\n  const mainSha = await args.github.getBranchSha(INFRA_BASE_BRANCH);\n  if (!mainSha) {\n    throw new Error(`Could not find ${INFRA_REPOSITORY}@${INFRA_BASE_BRANCH}.`);\n  }\n\n  if (!(await args.github.getBranchSha(args.branchName))) {\n    await args.github.createBranch(args.branchName, mainSha);\n  }\n\n  const existingPullRequest = await args.github.findOpenPullRequest(\n    args.branchName,\n  );\n\n  for (const file of args.files) {\n    const branchFile = await args.github.getFile(file.path, args.branchName);\n    if (branchFile?.content !== file.content) {\n      await args.github.putFile({\n        path: file.path,\n        branch: args.branchName,\n        content: file.content,\n        message: file.message,\n        sha: branchFile?.sha ?? file.baseFileSha,\n      });\n    }\n  }\n\n  const pullRequest =\n    existingPullRequest ??\n    (await args.github.createPullRequest({\n      branch: args.branchName,\n      title: args.title,\n      body: args.body,\n    }));\n\n  return {\n    pullRequestUrl: pullRequest.url,\n    status: existingPullRequest ? \"updated_pr\" : \"created_pr\",\n  };\n}\n\nexport function createInfraGitHubApi(token: string): InfraGitHubApi {\n  return {\n    async getFile(filePath, ref) {\n      const encodedPath = encodePathSegments(filePath);\n      const response = await requestGitHub<{\n        content?: unknown;\n        sha?: unknown;\n        type?: unknown;\n      }>(\n        token,\n        \"GET\",\n        `/repos/${INFRA_REPOSITORY}/contents/${encodedPath}?ref=${encodeURIComponent(ref)}`,\n      );\n      if (response == null) return null;\n      if (\n        typeof response.sha !== \"string\" ||\n        typeof response.content !== \"string\" ||\n        response.type !== \"file\"\n      ) {\n        throw new Error(\n          `Unexpected GitHub content response for ${filePath} in ${INFRA_REPOSITORY}.`,\n        );\n      }\n\n      return {\n        sha: response.sha,\n        content: Buffer.from(\n          response.content.replace(/\\s/g, \"\"),\n          \"base64\",\n        ).toString(\"utf-8\"),\n      };\n    },\n\n    async getBranchSha(branch) {\n      const response = await requestGitHub<{\n        object?: { sha?: unknown };\n      }>(token, \"GET\", `/repos/${INFRA_REPOSITORY}/git/ref/heads/${branch}`);\n      if (response == null) return null;\n      const sha = response.object?.sha;\n      if (typeof sha !== \"string\") {\n        throw new Error(`Unexpected GitHub ref response for ${branch}.`);\n      }\n      return sha;\n    },\n\n    async createBranch(branch, sha) {\n      await requestGitHub(\n        token,\n        \"POST\",\n        `/repos/${INFRA_REPOSITORY}/git/refs`,\n        {\n          ref: `refs/heads/${branch}`,\n          sha,\n        },\n      );\n    },\n\n    async putFile({ path: filePath, branch, content, message, sha }) {\n      const encodedPath = encodePathSegments(filePath);\n      await requestGitHub(\n        token,\n        \"PUT\",\n        `/repos/${INFRA_REPOSITORY}/contents/${encodedPath}`,\n        {\n          branch,\n          content: Buffer.from(content, \"utf-8\").toString(\"base64\"),\n          message,\n          sha,\n        },\n      );\n    },\n\n    async findOpenPullRequest(branch) {\n      const params = new URLSearchParams({\n        base: INFRA_BASE_BRANCH,\n        head: `${INFRA_REPOSITORY_OWNER}:${branch}`,\n        state: \"open\",\n      });\n      const response = await requestGitHub<\n        Array<{ html_url?: unknown; number?: unknown }>\n      >(token, \"GET\", `/repos/${INFRA_REPOSITORY}/pulls?${params}`);\n      const pullRequest = response?.[0];\n      if (!pullRequest) return null;\n      if (\n        typeof pullRequest.html_url !== \"string\" ||\n        typeof pullRequest.number !== \"number\"\n      ) {\n        throw new Error(`Unexpected GitHub pull request response.`);\n      }\n      return {\n        number: pullRequest.number,\n        url: pullRequest.html_url,\n      };\n    },\n\n    async createPullRequest({ branch, title, body }) {\n      const response = await requestGitHub<{\n        html_url?: unknown;\n        number?: unknown;\n      }>(token, \"POST\", `/repos/${INFRA_REPOSITORY}/pulls`, {\n        base: INFRA_BASE_BRANCH,\n        body,\n        head: branch,\n        maintainer_can_modify: true,\n        title,\n      });\n      if (\n        !response ||\n        typeof response.html_url !== \"string\" ||\n        typeof response.number !== \"number\"\n      ) {\n        throw new Error(`Unexpected GitHub pull request response.`);\n      }\n      return {\n        number: response.number,\n        url: response.html_url,\n      };\n    },\n  };\n}\n\nexport function resolveGitHubToken(): string {\n  const envToken = process.env.GITHUB_TOKEN ?? process.env.GH_TOKEN;\n  if (envToken) return envToken;\n\n  try {\n    const token = execFileSync(\"gh\", [\"auth\", \"token\"], {\n      encoding: \"utf-8\",\n      stdio: [\"ignore\", \"pipe\", \"ignore\"],\n    }).trim();\n    if (token) return token;\n  } catch {\n    // Fall through to the actionable error below.\n  }\n\n  throw new Error(\n    \"GitHub auth is required. Set GITHUB_TOKEN or GH_TOKEN, or run `gh auth login`.\",\n  );\n}\n\nasync function requestGitHub<T>(\n  token: string,\n  method: string,\n  path: string,\n  body?: unknown,\n): Promise<T | null> {\n  const response = await fetch(`${GITHUB_API_BASE_URL}${path}`, {\n    method,\n    headers: {\n      Accept: \"application/vnd.github+json\",\n      Authorization: `Bearer ${token}`,\n      \"Content-Type\": \"application/json\",\n      \"X-GitHub-Api-Version\": \"2022-11-28\",\n    },\n    body: body === undefined ? undefined : JSON.stringify(body),\n  });\n\n  if (response.status === 404) return null;\n\n  if (!response.ok) {\n    const responseText = await response.text();\n    throw new Error(\n      `GitHub ${method} ${path} failed with ${response.status}: ${responseText}`,\n    );\n  }\n\n  if (response.status === 204) return null;\n  return (await response.json()) as T;\n}\n\nfunction encodePathSegments(filePath: string): string {\n  return filePath.split(\"/\").map(encodeURIComponent).join(\"/\");\n}\n"],"mappings":";;AAEA,MAAM,sBAAsB;AAE5B,MAAa,mBAAmB;AAChC,MAAa,yBAAyB;AACtC,MAAa,oBAAoB;AA2CjC,eAAsB,+BAA+B,MASjB;AAClC,QAAO,oCAAoC;EACzC,MAAM,KAAK;EACX,YAAY,KAAK;EACjB,OAAO,CACL;GACE,aAAa,KAAK;GAClB,SAAS,KAAK;GACd,SAAS,KAAK;GACd,MAAM,KAAK;GACZ,CACF;EACD,QAAQ,KAAK;EACb,OAAO,KAAK;EACb,CAAC;;AAGJ,eAAsB,oCAAoC,MAMtB;CAClC,MAAM,UAAU,MAAM,KAAK,OAAO,aAAa,kBAAkB;AACjE,KAAI,CAAC,QACH,OAAM,IAAI,MAAM,kBAAkB,iBAAiB,GAAG,kBAAkB,GAAG;AAG7E,KAAI,CAAE,MAAM,KAAK,OAAO,aAAa,KAAK,WAAW,CACnD,OAAM,KAAK,OAAO,aAAa,KAAK,YAAY,QAAQ;CAG1D,MAAM,sBAAsB,MAAM,KAAK,OAAO,oBAC5C,KAAK,WACN;AAED,MAAK,MAAM,QAAQ,KAAK,OAAO;EAC7B,MAAM,aAAa,MAAM,KAAK,OAAO,QAAQ,KAAK,MAAM,KAAK,WAAW;AACxE,MAAI,YAAY,YAAY,KAAK,QAC/B,OAAM,KAAK,OAAO,QAAQ;GACxB,MAAM,KAAK;GACX,QAAQ,KAAK;GACb,SAAS,KAAK;GACd,SAAS,KAAK;GACd,KAAK,YAAY,OAAO,KAAK;GAC9B,CAAC;;AAYN,QAAO;EACL,iBARA,uBACC,MAAM,KAAK,OAAO,kBAAkB;GACnC,QAAQ,KAAK;GACb,OAAO,KAAK;GACZ,MAAM,KAAK;GACZ,CAAC,EAG0B;EAC5B,QAAQ,sBAAsB,eAAe;EAC9C;;AAGH,SAAgB,qBAAqB,OAA+B;AAClE,QAAO;EACL,MAAM,QAAQ,UAAU,KAAK;GAE3B,MAAM,WAAW,MAAM,cAKrB,OACA,OACA,UAAU,iBAAiB,YART,mBAAmB,SAQa,CAAC,OAAO,mBAAmB,IAAI,GAClF;AACD,OAAI,YAAY,KAAM,QAAO;AAC7B,OACE,OAAO,SAAS,QAAQ,YACxB,OAAO,SAAS,YAAY,YAC5B,SAAS,SAAS,OAElB,OAAM,IAAI,MACR,0CAA0C,SAAS,MAAM,iBAAiB,GAC3E;AAGH,UAAO;IACL,KAAK,SAAS;IACd,SAAS,OAAO,KACd,SAAS,QAAQ,QAAQ,OAAO,GAAG,EACnC,SACD,CAAC,SAAS,QAAQ;IACpB;;EAGH,MAAM,aAAa,QAAQ;GACzB,MAAM,WAAW,MAAM,cAEpB,OAAO,OAAO,UAAU,iBAAiB,iBAAiB,SAAS;AACtE,OAAI,YAAY,KAAM,QAAO;GAC7B,MAAM,MAAM,SAAS,QAAQ;AAC7B,OAAI,OAAO,QAAQ,SACjB,OAAM,IAAI,MAAM,sCAAsC,OAAO,GAAG;AAElE,UAAO;;EAGT,MAAM,aAAa,QAAQ,KAAK;AAC9B,SAAM,cACJ,OACA,QACA,UAAU,iBAAiB,YAC3B;IACE,KAAK,cAAc;IACnB;IACD,CACF;;EAGH,MAAM,QAAQ,EAAE,MAAM,UAAU,QAAQ,SAAS,SAAS,OAAO;AAE/D,SAAM,cACJ,OACA,OACA,UAAU,iBAAiB,YAJT,mBAAmB,SAIa,IAClD;IACE;IACA,SAAS,OAAO,KAAK,SAAS,QAAQ,CAAC,SAAS,SAAS;IACzD;IACA;IACD,CACF;;EAGH,MAAM,oBAAoB,QAAQ;GAShC,MAAM,eAAc,MAHG,cAErB,OAAO,OAAO,UAAU,iBAAiB,SAAS,IAPjC,gBAAgB;IACjC,MAAM;IACN,MAAM,GAAG,uBAAuB,GAAG;IACnC,OAAO;IACR,CAGyD,GAAG,IAC9B;AAC/B,OAAI,CAAC,YAAa,QAAO;AACzB,OACE,OAAO,YAAY,aAAa,YAChC,OAAO,YAAY,WAAW,SAE9B,OAAM,IAAI,MAAM,2CAA2C;AAE7D,UAAO;IACL,QAAQ,YAAY;IACpB,KAAK,YAAY;IAClB;;EAGH,MAAM,kBAAkB,EAAE,QAAQ,OAAO,QAAQ;GAC/C,MAAM,WAAW,MAAM,cAGpB,OAAO,QAAQ,UAAU,iBAAiB,SAAS;IACpD,MAAM;IACN;IACA,MAAM;IACN,uBAAuB;IACvB;IACD,CAAC;AACF,OACE,CAAC,YACD,OAAO,SAAS,aAAa,YAC7B,OAAO,SAAS,WAAW,SAE3B,OAAM,IAAI,MAAM,2CAA2C;AAE7D,UAAO;IACL,QAAQ,SAAS;IACjB,KAAK,SAAS;IACf;;EAEJ;;AAGH,SAAgB,qBAA6B;CAC3C,MAAM,WAAW,QAAQ,IAAI,gBAAgB,QAAQ,IAAI;AACzD,KAAI,SAAU,QAAO;AAErB,KAAI;EACF,MAAM,QAAQ,aAAa,MAAM,CAAC,QAAQ,QAAQ,EAAE;GAClD,UAAU;GACV,OAAO;IAAC;IAAU;IAAQ;IAAS;GACpC,CAAC,CAAC,MAAM;AACT,MAAI,MAAO,QAAO;SACZ;AAIR,OAAM,IAAI,MACR,iFACD;;AAGH,eAAe,cACb,OACA,QACA,MACA,MACmB;CACnB,MAAM,WAAW,MAAM,MAAM,GAAG,sBAAsB,QAAQ;EAC5D;EACA,SAAS;GACP,QAAQ;GACR,eAAe,UAAU;GACzB,gBAAgB;GAChB,wBAAwB;GACzB;EACD,MAAM,SAAS,KAAA,IAAY,KAAA,IAAY,KAAK,UAAU,KAAK;EAC5D,CAAC;AAEF,KAAI,SAAS,WAAW,IAAK,QAAO;AAEpC,KAAI,CAAC,SAAS,IAAI;EAChB,MAAM,eAAe,MAAM,SAAS,MAAM;AAC1C,QAAM,IAAI,MACR,UAAU,OAAO,GAAG,KAAK,eAAe,SAAS,OAAO,IAAI,eAC7D;;AAGH,KAAI,SAAS,WAAW,IAAK,QAAO;AACpC,QAAQ,MAAM,SAAS,MAAM;;AAG/B,SAAS,mBAAmB,UAA0B;AACpD,QAAO,SAAS,MAAM,IAAI,CAAC,IAAI,mBAAmB,CAAC,KAAK,IAAI"}

package/dist/index.js

@@ -1204,11 +1204,11 @@ program.command("add").description("Add a Mosaic package to the current monorepo
 });
 const infra = program.command("infra").description("Manage Mosaic infra glue");
 infra.command("register-os-blueprint").description("Register this customer monorepo's OS blueprint in infra").action(async () => {
-	const { registerOsBlueprintCommand } = await import("./register-os-blueprint-DGjBUZYa.js");
+	const { registerOsBlueprintCommand } = await import("./register-os-blueprint-Cgq1rXzQ.js");
 	await registerOsBlueprintCommand();
 });
 infra.command("register-app").description("Register a webapp database in this customer OS blueprint").argument("<app>", "Webapp package name").action(async (appName) => {
-	const { registerAppCommand } = await import("./register-app-C7ZBpAaZ.js");
+	const { registerAppCommand } = await import("./register-app-CprpQn_h.js");
 	await registerAppCommand(appName);
 });
 program.command("status").description("Show template sync status for current app").option("--mosaic-template-path <path>", "Path to local mosaic repo checkout").action(async (options) => {

package/dist/register-app-CprpQn_h.js

@@ -0,0 +1,386 @@
+import { i as toTitleCase, n as toKebabCase, r as toSnakeCase } from "./template-versions-CEIP9vhl.js";
+import { t as validateProjectName } from "./validate-dssldJAj.js";
+import { i as detectMonorepo, t as readWorkspaceManifest } from "./index.js";
+import { a as createOrUpdateInfraPullRequestFiles, n as INFRA_REPOSITORY, o as resolveGitHubToken, r as createInfraGitHubApi, t as INFRA_BASE_BRANCH } from "./github-D3YOEl91.js";
+import path from "node:path";
+import chalk from "chalk";
+import fs from "fs-extra";
+import { isMap, isSeq, parseDocument } from "yaml";
+//#region src/commands/infra/register-app.ts
+async function registerApp(appNameInput, args = {}) {
+	const appName = normalizeAppName(appNameInput);
+	const monorepoContext = await detectMonorepo(args.cwd ?? process.cwd());
+	if (!monorepoContext.found || !monorepoContext.rootDir) throw new Error("Run this command from a Mosaic customer monorepo with a .mosaic-workspace.json file.");
+	const customerSlug = (await readWorkspaceManifest(monorepoContext.rootDir))?.customerSlug;
+	if (!customerSlug) throw new Error(".mosaic-workspace.json is missing customerSlug. Recreate the monorepo with a current @percepta/create.");
+	const github = args.github ?? createInfraGitHubApi(resolveGitHubToken());
+	const blueprintName = `${customerSlug}-os`;
+	const branchName = `blueberry/register-${customerSlug}-${appName}`;
+	const blueprintPath = [
+		"ryvn",
+		"definitions",
+		customerSlug,
+		"blueprints",
+		`${blueprintName}.blueprint.yaml`
+	].join("/");
+	const servicePath = [
+		"ryvn",
+		"definitions",
+		customerSlug,
+		"services",
+		`${appName}.service.yaml`
+	].join("/");
+	const mainBlueprintFile = await github.getFile(blueprintPath, INFRA_BASE_BRANCH);
+	if (!mainBlueprintFile) throw new Error(`${blueprintPath} does not exist in ${INFRA_REPOSITORY}. Run \`pnpm mosaic infra register-os-blueprint\` and merge that infra PR first.`);
+	const serviceContent = await github.getFile(servicePath, "main") == null ? await readLocalServiceDefinition(monorepoContext.rootDir, appName) : null;
+	const blueprintContent = registerAppInBlueprint(mainBlueprintFile.content, appName);
+	const files = [];
+	if (blueprintContent !== mainBlueprintFile.content) files.push({
+		baseFileSha: mainBlueprintFile.sha,
+		content: blueprintContent,
+		message: `Register ${appName} in ${blueprintName}`,
+		path: blueprintPath
+	});
+	if (serviceContent != null) files.push({
+		content: serviceContent,
+		message: `Register ${appName} service`,
+		path: servicePath
+	});
+	if (files.length === 0) return {
+		appName,
+		blueprintName,
+		blueprintPath,
+		branchName,
+		customerSlug,
+		pullRequestUrl: null,
+		repository: INFRA_REPOSITORY,
+		status: "already_registered",
+		servicePath,
+		targetPath: blueprintPath
+	};
+	const pullRequest = await createOrUpdateInfraPullRequestFiles({
+		branchName,
+		github,
+		files,
+		title: `Register ${appName} app`,
+		body: [
+			`Registers the ${appName} service and deployment in ${blueprintName}.`,
+			"",
+			"Generated by `mosaic infra register-app`."
+		].join("\n")
+	});
+	return {
+		appName,
+		blueprintName,
+		blueprintPath,
+		branchName,
+		customerSlug,
+		pullRequestUrl: pullRequest.pullRequestUrl,
+		repository: INFRA_REPOSITORY,
+		status: pullRequest.status,
+		servicePath,
+		targetPath: blueprintPath
+	};
+}
+async function registerAppCommand(appName) {
+	try {
+		const result = await registerApp(appName);
+		if (result.status === "already_registered") {
+			console.log(chalk.green("✔"), `${result.appName} is already registered in ${result.repository} at`, chalk.cyan(result.targetPath));
+			return;
+		}
+		const verb = result.status === "created_pr" ? "Created" : "Updated existing";
+		console.log(chalk.green("✔"), `${verb} infra PR for ${result.appName}:`, chalk.cyan(result.pullRequestUrl));
+	} catch (error) {
+		console.error(chalk.red("Error:"), error.message);
+		process.exit(1);
+	}
+}
+function registerAppInBlueprint(blueprintContent, appName) {
+	return updateBlueprint(blueprintContent, appName, {
+		appDatabase: true,
+		appInstallation: true,
+		appInputs: true
+	});
+}
+function updateBlueprint(blueprintContent, appName, options) {
+	const document = parseDocument(blueprintContent);
+	if (document.errors.length > 0) throw new Error(`Invalid OS blueprint YAML: ${document.errors.map((error) => error.message).join("; ")}`);
+	const spec = document.get("spec", true);
+	if (!isMap(spec)) throw new Error("OS blueprint must include a spec map.");
+	let changed = false;
+	const inputs = spec.get("inputs", true);
+	if (!isSeq(inputs)) throw new Error("OS blueprint spec.inputs must be a sequence.");
+	if (options.appInputs) {
+		changed = addAppInput(document, inputs, renderHostInput(appName)) || changed;
+		changed = addAppInput(document, inputs, renderBetterAuthSecretInput(appName)) || changed;
+		changed = addAppInput(document, inputs, renderInngestEventKeyInput(appName)) || changed;
+		changed = addAppInput(document, inputs, renderInngestSigningKeyInput(appName)) || changed;
+		changed = addAppInput(document, inputs, renderLangfusePublicKeyInput(appName)) || changed;
+		changed = addAppInput(document, inputs, renderLangfuseSecretKeyInput(appName)) || changed;
+	}
+	if (options.appDatabase) changed = addAppDatabase(document, inputs, appName) || changed;
+	if (options.appInstallation) {
+		const installations = spec.get("installations", true);
+		if (!isSeq(installations)) throw new Error("OS blueprint spec.installations must be a sequence.");
+		changed = addAppInstallation(document, installations, appName) || changed;
+	}
+	return changed ? document.toString() : blueprintContent;
+}
+function addAppInput(document, inputs, input) {
+	if (inputs.items.some((item) => isMap(item) && item.get("name") === input.name)) return false;
+	inputs.add(document.createNode(input));
+	return true;
+}
+function addAppDatabase(document, inputs, appName) {
+	const appDatabasesInput = inputs.items.find((item) => isMap(item) && item.get("name") === "app_databases");
+	if (!isMap(appDatabasesInput)) throw new Error("OS blueprint must include an app_databases input.");
+	const defaultValue = appDatabasesInput.get("default", true);
+	if (!isMap(defaultValue)) throw new Error("OS blueprint app_databases default must be a map.");
+	if (defaultValue.has(appName)) return false;
+	defaultValue.flow = false;
+	const appDatabaseValue = document.createNode({});
+	if (isMap(appDatabaseValue)) appDatabaseValue.flow = true;
+	defaultValue.set(appName, appDatabaseValue);
+	return true;
+}
+function addAppInstallation(document, installations, appName) {
+	if (installations.items.some((item) => isMap(item) && item.get("service") === appName)) return false;
+	installations.add(document.createNode({
+		service: appName,
+		env: renderAppInstallationEnv(appName),
+		config: renderAppInstallationConfig(appName)
+	}));
+	return true;
+}
+function renderHostInput(appName) {
+	return {
+		name: hostInputName(appName),
+		type: "string",
+		group: "Applications",
+		displayName: `${toTitleCase(appName)} Host`,
+		description: `Ingress host for ${appName}.`,
+		default: `${appName}.{{ default "example.local" .ryvn.env.state.public_domain.name }}`
+	};
+}
+function renderBetterAuthSecretInput(appName) {
+	return {
+		name: betterAuthSecretInputName(appName),
+		type: "string",
+		isSecret: true,
+		group: "Applications",
+		displayName: `${toTitleCase(appName)} Better Auth Secret`,
+		description: `Generated Better Auth signing secret for ${appName}.`,
+		hidden: true,
+		generated: {
+			type: "random-bytes",
+			length: 32
+		}
+	};
+}
+function renderInngestEventKeyInput(appName) {
+	return {
+		name: inngestEventKeyInputName(appName),
+		type: "string",
+		isSecret: true,
+		group: "Applications",
+		displayName: `${toTitleCase(appName)} Inngest Event Key`,
+		description: `Inngest event key for ${appName}. Leave empty when the target Inngest installation does not require one.`,
+		default: ""
+	};
+}
+function renderInngestSigningKeyInput(appName) {
+	return {
+		name: inngestSigningKeyInputName(appName),
+		type: "string",
+		isSecret: true,
+		group: "Applications",
+		displayName: `${toTitleCase(appName)} Inngest Signing Key`,
+		description: `Inngest signing key for ${appName}. Leave empty when the target Inngest installation does not require one.`,
+		default: ""
+	};
+}
+function renderLangfusePublicKeyInput(appName) {
+	return {
+		name: langfusePublicKeyInputName(appName),
+		type: "string",
+		group: "Applications",
+		displayName: `${toTitleCase(appName)} Langfuse Public Key`,
+		description: `Langfuse public key for ${appName}. Leave empty to disable Langfuse export.`,
+		default: ""
+	};
+}
+function renderLangfuseSecretKeyInput(appName) {
+	return {
+		name: langfuseSecretKeyInputName(appName),
+		type: "string",
+		isSecret: true,
+		group: "Applications",
+		displayName: `${toTitleCase(appName)} Langfuse Secret Key`,
+		description: `Langfuse secret key for ${appName}. Leave empty to disable Langfuse export.`,
+		default: ""
+	};
+}
+function renderAppInstallationEnv(appName) {
+	return [
+		{
+			key: "BETTER_AUTH_SECRET",
+			isSecret: true,
+			valueFromInput: { name: betterAuthSecretInputName(appName) }
+		},
+		{
+			key: "INNGEST_EVENT_KEY",
+			isSecret: true,
+			valueFromInput: { name: inngestEventKeyInputName(appName) }
+		},
+		{
+			key: "INNGEST_SIGNING_KEY",
+			isSecret: true,
+			valueFromInput: { name: inngestSigningKeyInputName(appName) }
+		},
+		{
+			key: "LANGFUSE_SECRET_KEY",
+			isSecret: true,
+			valueFromInput: { name: langfuseSecretKeyInputName(appName) }
+		}
+	];
+}
+function renderAppInstallationConfig(appName) {
+	const hostInput = hostInputName(appName);
+	const langfusePublicKeyInput = langfusePublicKeyInputName(appName);
+	return [
+		"replicaCount: 1",
+		"",
+		"service:",
+		"  port: 3000",
+		"",
+		"livenessEnabled: true",
+		"readinessEnabled: true",
+		"startupEnabled: true",
+		"",
+		"resources:",
+		"  requests:",
+		"    cpu: \"100m\"",
+		"    memory: 256Mi",
+		"  limits:",
+		"    cpu: \"500m\"",
+		"    memory: 512Mi",
+		"",
+		"ingress:",
+		"  enabled: true",
+		"  className: external-nginx",
+		"  annotations:",
+		"    cert-manager.io/cluster-issuer: external-issuer",
+		"    nginx.ingress.kubernetes.io/ssl-redirect: \"true\"",
+		"  hosts:",
+		`    - host: '{{ input "${hostInput}" }}'`,
+		"      paths:",
+		"        - path: /",
+		"          pathType: Prefix",
+		"  tls:",
+		`    - secretName: ${appName}-tls`,
+		"      hosts:",
+		`        - '{{ input "${hostInput}" }}'`,
+		"",
+		"env:",
+		"  - name: DATABASE_URL",
+		"    valueFrom:",
+		"      secretKeyRef:",
+		"        key: database_url",
+		"        {{ if eq EnvironmentProviderType \"aws\" }}",
+		`        name: '{{ index (serviceInstallation "os-postgresql-terraform-aws").outputs.app_database_secret_names "${appName}" }}'`,
+		"        {{ else if eq EnvironmentProviderType \"azure\" }}",
+		`        name: '{{ index (serviceInstallation "os-postgresql-terraform-azure").outputs.app_database_secret_names "${appName}" }}'`,
+		"        {{ end }}",
+		"  - name: AUTH_DATABASE_URL",
+		"    valueFrom:",
+		"      secretKeyRef:",
+		"        key: database_url",
+		"        {{ if eq EnvironmentProviderType \"aws\" }}",
+		"        name: '{{ (serviceInstallation \"os-postgresql-terraform-aws\").outputs.auth_secret_name }}'",
+		"        {{ else if eq EnvironmentProviderType \"azure\" }}",
+		"        name: '{{ (serviceInstallation \"os-postgresql-terraform-azure\").outputs.auth_secret_name }}'",
+		"        {{ end }}",
+		"  - name: APP_BASE_URL",
+		`    value: 'https://{{ input "${hostInput}" }}'`,
+		"  - name: BETTER_AUTH_URL",
+		`    value: 'https://{{ input "${hostInput}" }}'`,
+		"  - name: NODE_ENV",
+		"    value: production",
+		"  - name: PORT",
+		"    value: \"3000\"",
+		"  - name: AUTH_TRUST_HOST",
+		"    value: \"true\"",
+		"  - name: INNGEST_BASE_URL",
+		"    value: '{{ (blueprintInstallation \"mosaic\").outputs.inngest_base_url }}'",
+		"  - name: INNGEST_APP_URL",
+		`    value: 'http://${appName}-web-server.{{ EnvironmentNamespace }}.svc.cluster.local:3000/api/inngest'`,
+		"  - name: LANGFUSE_BASE_URL",
+		"    value: '{{ (blueprintInstallation \"mosaic\").outputs.langfuse_base_url }}'",
+		"  - name: LANGFUSE_PUBLIC_KEY",
+		`    value: '{{ input "${langfusePublicKeyInput}" }}'`,
+		"  - name: OTEL_SERVICE_NAME",
+		`    value: ${appName}`,
+		"  - name: OTEL_RESOURCE_ATTRIBUTES",
+		`    value: 'deployment.environment={{ EnvironmentName }},service.name=${appName}'`,
+		"  - name: OTEL_TRACES_EXPORTER",
+		"    value: otlp",
+		"  - name: OTEL_METRICS_EXPORTER",
+		"    value: otlp",
+		"  - name: OTEL_EXPORTER_OTLP_PROTOCOL",
+		"    value: http/protobuf",
+		"  - name: OTEL_EXPORTER_OTLP_ENDPOINT",
+		"    value: '{{ (blueprintInstallation \"mosaic\").outputs.otel_exporter_otlp_endpoint }}'",
+		"  - name: SPICEDB_ENDPOINT",
+		"    value: '{{ (blueprintInstallation \"mosaic\").outputs.spicedb_endpoint }}'",
+		"  - name: SPICEDB_PRESHARED_KEY",
+		"    valueFrom:",
+		"      secretKeyRef:",
+		"        key: '{{ (blueprintInstallation \"mosaic\").outputs.spicedb_preshared_key_secret_key }}'",
+		"        name: '{{ (blueprintInstallation \"mosaic\").outputs.spicedb_config_secret_name }}'",
+		"  - name: SPICEDB_INSECURE",
+		"    value: '{{ (blueprintInstallation \"mosaic\").outputs.spicedb_insecure }}'",
+		""
+	].join("\n");
+}
+async function readLocalServiceDefinition(monorepoRoot, appName) {
+	const serviceDefinitionPath = path.join(monorepoRoot, "packages", appName, "deploy", "ryvn", `${appName}.service.yaml`);
+	if (!await fs.pathExists(serviceDefinitionPath)) throw new Error(`${serviceDefinitionPath} does not exist. Add the app's Ryvn service definition before registering it in infra.`);
+	const content = await fs.readFile(serviceDefinitionPath, "utf-8");
+	validateLocalServiceDefinition(content, appName, serviceDefinitionPath);
+	return content.endsWith("\n") ? content : `${content}\n`;
+}
+function validateLocalServiceDefinition(content, appName, serviceDefinitionPath) {
+	const document = parseDocument(content);
+	if (document.errors.length > 0) throw new Error(`Invalid Ryvn service YAML at ${serviceDefinitionPath}: ${document.errors.map((error) => error.message).join("; ")}`);
+	const service = document.toJS();
+	if (service.kind !== "Service" || service.metadata?.name !== appName) throw new Error(`${serviceDefinitionPath} must define kind: Service with metadata.name: ${appName}.`);
+}
+function hostInputName(appName) {
+	return `${toSnakeCase(appName)}_host`;
+}
+function betterAuthSecretInputName(appName) {
+	return `${toSnakeCase(appName)}_better_auth_secret`;
+}
+function inngestEventKeyInputName(appName) {
+	return `${toSnakeCase(appName)}_inngest_event_key`;
+}
+function inngestSigningKeyInputName(appName) {
+	return `${toSnakeCase(appName)}_inngest_signing_key`;
+}
+function langfusePublicKeyInputName(appName) {
+	return `${toSnakeCase(appName)}_langfuse_public_key`;
+}
+function langfuseSecretKeyInputName(appName) {
+	return `${toSnakeCase(appName)}_langfuse_secret_key`;
+}
+function normalizeAppName(appNameInput) {
+	const appName = toKebabCase(appNameInput);
+	const validation = validateProjectName(appName);
+	if (!validation.valid) throw new Error(`Invalid app name: ${validation.error}`);
+	return appName;
+}
+//#endregion
+export { registerAppCommand };
+
+//# sourceMappingURL=register-app-CprpQn_h.js.map

package/dist/register-app-CprpQn_h.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-app-CprpQn_h.js","names":[],"sources":["../src/commands/infra/register-app.ts"],"sourcesContent":["import path from \"node:path\";\nimport chalk from \"chalk\";\nimport fs from \"fs-extra\";\nimport { isMap, isSeq, parseDocument } from \"yaml\";\nimport {\n  toKebabCase,\n  toSnakeCase,\n  toTitleCase,\n} from \"../../utils/case-converters.js\";\nimport { detectMonorepo } from \"../../utils/detect-monorepo.js\";\nimport { validateProjectName } from \"../../utils/validate.js\";\nimport { readWorkspaceManifest } from \"../../utils/workspace-manifest.js\";\nimport {\n  createInfraGitHubApi,\n  createOrUpdateInfraPullRequestFiles,\n  INFRA_BASE_BRANCH,\n  INFRA_REPOSITORY,\n  type InfraGitHubApi,\n  type InfraPullRequestFile,\n  resolveGitHubToken,\n} from \"./github.js\";\n\nexport interface RegisterAppResult {\n  appName: string;\n  blueprintName: string;\n  blueprintPath: string;\n  branchName: string;\n  customerSlug: string;\n  pullRequestUrl: string | null;\n  repository: typeof INFRA_REPOSITORY;\n  status: \"already_registered\" | \"created_pr\" | \"updated_pr\";\n  servicePath: string;\n  targetPath: string;\n}\n\nexport async function registerApp(\n  appNameInput: string,\n  args: {\n    cwd?: string;\n    github?: InfraGitHubApi;\n  } = {},\n): Promise<RegisterAppResult> {\n  const appName = normalizeAppName(appNameInput);\n  const cwd = args.cwd ?? process.cwd();\n  const monorepoContext = await detectMonorepo(cwd);\n  if (!monorepoContext.found || !monorepoContext.rootDir) {\n    throw new Error(\n      \"Run this command from a Mosaic customer monorepo with a .mosaic-workspace.json file.\",\n    );\n  }\n\n  const workspaceManifest = await readWorkspaceManifest(\n    monorepoContext.rootDir,\n  );\n  const customerSlug = workspaceManifest?.customerSlug;\n  if (!customerSlug) {\n    throw new Error(\n      \".mosaic-workspace.json is missing customerSlug. Recreate the monorepo with a current @percepta/create.\",\n    );\n  }\n\n  const github = args.github ?? createInfraGitHubApi(resolveGitHubToken());\n  const blueprintName = `${customerSlug}-os`;\n  const branchName = `blueberry/register-${customerSlug}-${appName}`;\n  const blueprintPath = [\n    \"ryvn\",\n    \"definitions\",\n    customerSlug,\n    \"blueprints\",\n    `${blueprintName}.blueprint.yaml`,\n  ].join(\"/\");\n  const servicePath = [\n    \"ryvn\",\n    \"definitions\",\n    customerSlug,\n    \"services\",\n    `${appName}.service.yaml`,\n  ].join(\"/\");\n\n  const mainBlueprintFile = await github.getFile(\n    blueprintPath,\n    INFRA_BASE_BRANCH,\n  );\n  if (!mainBlueprintFile) {\n    throw new Error(\n      `${blueprintPath} does not exist in ${INFRA_REPOSITORY}. Run \\`pnpm mosaic infra register-os-blueprint\\` and merge that infra PR first.`,\n    );\n  }\n\n  const mainServiceFile = await github.getFile(servicePath, INFRA_BASE_BRANCH);\n  const serviceContent =\n    mainServiceFile == null\n      ? await readLocalServiceDefinition(monorepoContext.rootDir, appName)\n      : null;\n  const blueprintContent = registerAppInBlueprint(\n    mainBlueprintFile.content,\n    appName,\n  );\n\n  const files: InfraPullRequestFile[] = [];\n  if (blueprintContent !== mainBlueprintFile.content) {\n    files.push({\n      baseFileSha: mainBlueprintFile.sha,\n      content: blueprintContent,\n      message: `Register ${appName} in ${blueprintName}`,\n      path: blueprintPath,\n    });\n  }\n  if (serviceContent != null) {\n    files.push({\n      content: serviceContent,\n      message: `Register ${appName} service`,\n      path: servicePath,\n    });\n  }\n\n  if (files.length === 0) {\n    return {\n      appName,\n      blueprintName,\n      blueprintPath,\n      branchName,\n      customerSlug,\n      pullRequestUrl: null,\n      repository: INFRA_REPOSITORY,\n      status: \"already_registered\",\n      servicePath,\n      targetPath: blueprintPath,\n    };\n  }\n\n  const pullRequest = await createOrUpdateInfraPullRequestFiles({\n    branchName,\n    github,\n    files,\n    title: `Register ${appName} app`,\n    body: [\n      `Registers the ${appName} service and deployment in ${blueprintName}.`,\n      \"\",\n      \"Generated by `mosaic infra register-app`.\",\n    ].join(\"\\n\"),\n  });\n\n  return {\n    appName,\n    blueprintName,\n    blueprintPath,\n    branchName,\n    customerSlug,\n    pullRequestUrl: pullRequest.pullRequestUrl,\n    repository: INFRA_REPOSITORY,\n    status: pullRequest.status,\n    servicePath,\n    targetPath: blueprintPath,\n  };\n}\n\nexport async function registerAppCommand(appName: string): Promise<void> {\n  try {\n    const result = await registerApp(appName);\n\n    if (result.status === \"already_registered\") {\n      console.log(\n        chalk.green(\"✔\"),\n        `${result.appName} is already registered in ${result.repository} at`,\n        chalk.cyan(result.targetPath),\n      );\n      return;\n    }\n\n    const verb =\n      result.status === \"created_pr\" ? \"Created\" : \"Updated existing\";\n    console.log(\n      chalk.green(\"✔\"),\n      `${verb} infra PR for ${result.appName}:`,\n      chalk.cyan(result.pullRequestUrl),\n    );\n  } catch (error) {\n    console.error(chalk.red(\"Error:\"), (error as Error).message);\n    process.exit(1);\n  }\n}\n\nexport function addAppDatabaseToBlueprint(\n  blueprintContent: string,\n  appName: string,\n): string {\n  return updateBlueprint(blueprintContent, appName, {\n    appDatabase: true,\n    appInstallation: false,\n    appInputs: false,\n  });\n}\n\nexport function registerAppInBlueprint(\n  blueprintContent: string,\n  appName: string,\n): string {\n  return updateBlueprint(blueprintContent, appName, {\n    appDatabase: true,\n    appInstallation: true,\n    appInputs: true,\n  });\n}\n\nfunction updateBlueprint(\n  blueprintContent: string,\n  appName: string,\n  options: {\n    appDatabase: boolean;\n    appInstallation: boolean;\n    appInputs: boolean;\n  },\n): string {\n  const document = parseDocument(blueprintContent);\n  if (document.errors.length > 0) {\n    throw new Error(\n      `Invalid OS blueprint YAML: ${document.errors.map((error) => error.message).join(\"; \")}`,\n    );\n  }\n\n  const spec = document.get(\"spec\", true);\n  if (!isMap(spec)) {\n    throw new Error(\"OS blueprint must include a spec map.\");\n  }\n\n  let changed = false;\n  const inputs = spec.get(\"inputs\", true);\n  if (!isSeq(inputs)) {\n    throw new Error(\"OS blueprint spec.inputs must be a sequence.\");\n  }\n\n  if (options.appInputs) {\n    changed =\n      addAppInput(document, inputs, renderHostInput(appName)) || changed;\n    changed =\n      addAppInput(document, inputs, renderBetterAuthSecretInput(appName)) ||\n      changed;\n    changed =\n      addAppInput(document, inputs, renderInngestEventKeyInput(appName)) ||\n      changed;\n    changed =\n      addAppInput(document, inputs, renderInngestSigningKeyInput(appName)) ||\n      changed;\n    changed =\n      addAppInput(document, inputs, renderLangfusePublicKeyInput(appName)) ||\n      changed;\n    changed =\n      addAppInput(document, inputs, renderLangfuseSecretKeyInput(appName)) ||\n      changed;\n  }\n\n  if (options.appDatabase) {\n    changed = addAppDatabase(document, inputs, appName) || changed;\n  }\n\n  if (options.appInstallation) {\n    const installations = spec.get(\"installations\", true);\n    if (!isSeq(installations)) {\n      throw new Error(\"OS blueprint spec.installations must be a sequence.\");\n    }\n    changed = addAppInstallation(document, installations, appName) || changed;\n  }\n\n  return changed ? document.toString() : blueprintContent;\n}\n\nfunction addAppInput(\n  document: ReturnType<typeof parseDocument>,\n  inputs: { add(value: unknown): void; items: unknown[] },\n  input: Record<string, unknown> & { name: string },\n): boolean {\n  if (\n    inputs.items.some((item) => isMap(item) && item.get(\"name\") === input.name)\n  ) {\n    return false;\n  }\n\n  inputs.add(document.createNode(input));\n  return true;\n}\n\nfunction addAppDatabase(\n  document: ReturnType<typeof parseDocument>,\n  inputs: { items: unknown[] },\n  appName: string,\n): boolean {\n  const appDatabasesInput = inputs.items.find(\n    (item) => isMap(item) && item.get(\"name\") === \"app_databases\",\n  );\n  if (!isMap(appDatabasesInput)) {\n    throw new Error(\"OS blueprint must include an app_databases input.\");\n  }\n\n  const defaultValue = appDatabasesInput.get(\"default\", true);\n  if (!isMap(defaultValue)) {\n    throw new Error(\"OS blueprint app_databases default must be a map.\");\n  }\n\n  if (defaultValue.has(appName)) return false;\n\n  defaultValue.flow = false;\n  const appDatabaseValue = document.createNode({});\n  if (isMap(appDatabaseValue)) appDatabaseValue.flow = true;\n  defaultValue.set(appName, appDatabaseValue);\n  return true;\n}\n\nfunction addAppInstallation(\n  document: ReturnType<typeof parseDocument>,\n  installations: { add(value: unknown): void; items: unknown[] },\n  appName: string,\n): boolean {\n  if (\n    installations.items.some(\n      (item) => isMap(item) && item.get(\"service\") === appName,\n    )\n  ) {\n    return false;\n  }\n\n  installations.add(\n    document.createNode({\n      service: appName,\n      env: renderAppInstallationEnv(appName),\n      config: renderAppInstallationConfig(appName),\n    }),\n  );\n  return true;\n}\n\nfunction renderHostInput(appName: string): Record<string, unknown> & {\n  name: string;\n} {\n  return {\n    name: hostInputName(appName),\n    type: \"string\",\n    group: \"Applications\",\n    displayName: `${toTitleCase(appName)} Host`,\n    description: `Ingress host for ${appName}.`,\n    default: `${appName}.{{ default \"example.local\" .ryvn.env.state.public_domain.name }}`,\n  };\n}\n\nfunction renderBetterAuthSecretInput(\n  appName: string,\n): Record<string, unknown> & { name: string } {\n  return {\n    name: betterAuthSecretInputName(appName),\n    type: \"string\",\n    isSecret: true,\n    group: \"Applications\",\n    displayName: `${toTitleCase(appName)} Better Auth Secret`,\n    description: `Generated Better Auth signing secret for ${appName}.`,\n    hidden: true,\n    generated: {\n      type: \"random-bytes\",\n      length: 32,\n    },\n  };\n}\n\nfunction renderInngestEventKeyInput(\n  appName: string,\n): Record<string, unknown> & { name: string } {\n  return {\n    name: inngestEventKeyInputName(appName),\n    type: \"string\",\n    isSecret: true,\n    group: \"Applications\",\n    displayName: `${toTitleCase(appName)} Inngest Event Key`,\n    description: `Inngest event key for ${appName}. Leave empty when the target Inngest installation does not require one.`,\n    default: \"\",\n  };\n}\n\nfunction renderInngestSigningKeyInput(\n  appName: string,\n): Record<string, unknown> & { name: string } {\n  return {\n    name: inngestSigningKeyInputName(appName),\n    type: \"string\",\n    isSecret: true,\n    group: \"Applications\",\n    displayName: `${toTitleCase(appName)} Inngest Signing Key`,\n    description: `Inngest signing key for ${appName}. Leave empty when the target Inngest installation does not require one.`,\n    default: \"\",\n  };\n}\n\nfunction renderLangfusePublicKeyInput(\n  appName: string,\n): Record<string, unknown> & { name: string } {\n  return {\n    name: langfusePublicKeyInputName(appName),\n    type: \"string\",\n    group: \"Applications\",\n    displayName: `${toTitleCase(appName)} Langfuse Public Key`,\n    description: `Langfuse public key for ${appName}. Leave empty to disable Langfuse export.`,\n    default: \"\",\n  };\n}\n\nfunction renderLangfuseSecretKeyInput(\n  appName: string,\n): Record<string, unknown> & { name: string } {\n  return {\n    name: langfuseSecretKeyInputName(appName),\n    type: \"string\",\n    isSecret: true,\n    group: \"Applications\",\n    displayName: `${toTitleCase(appName)} Langfuse Secret Key`,\n    description: `Langfuse secret key for ${appName}. Leave empty to disable Langfuse export.`,\n    default: \"\",\n  };\n}\n\nfunction renderAppInstallationEnv(\n  appName: string,\n): Array<Record<string, unknown>> {\n  return [\n    {\n      key: \"BETTER_AUTH_SECRET\",\n      isSecret: true,\n      valueFromInput: {\n        name: betterAuthSecretInputName(appName),\n      },\n    },\n    {\n      key: \"INNGEST_EVENT_KEY\",\n      isSecret: true,\n      valueFromInput: {\n        name: inngestEventKeyInputName(appName),\n      },\n    },\n    {\n      key: \"INNGEST_SIGNING_KEY\",\n      isSecret: true,\n      valueFromInput: {\n        name: inngestSigningKeyInputName(appName),\n      },\n    },\n    {\n      key: \"LANGFUSE_SECRET_KEY\",\n      isSecret: true,\n      valueFromInput: {\n        name: langfuseSecretKeyInputName(appName),\n      },\n    },\n  ];\n}\n\nfunction renderAppInstallationConfig(appName: string): string {\n  const hostInput = hostInputName(appName);\n  const langfusePublicKeyInput = langfusePublicKeyInputName(appName);\n\n  return [\n    \"replicaCount: 1\",\n    \"\",\n    \"service:\",\n    \"  port: 3000\",\n    \"\",\n    \"livenessEnabled: true\",\n    \"readinessEnabled: true\",\n    \"startupEnabled: true\",\n    \"\",\n    \"resources:\",\n    \"  requests:\",\n    '    cpu: \"100m\"',\n    \"    memory: 256Mi\",\n    \"  limits:\",\n    '    cpu: \"500m\"',\n    \"    memory: 512Mi\",\n    \"\",\n    \"ingress:\",\n    \"  enabled: true\",\n    \"  className: external-nginx\",\n    \"  annotations:\",\n    \"    cert-manager.io/cluster-issuer: external-issuer\",\n    '    nginx.ingress.kubernetes.io/ssl-redirect: \"true\"',\n    \"  hosts:\",\n    `    - host: '{{ input \"${hostInput}\" }}'`,\n    \"      paths:\",\n    \"        - path: /\",\n    \"          pathType: Prefix\",\n    \"  tls:\",\n    `    - secretName: ${appName}-tls`,\n    \"      hosts:\",\n    `        - '{{ input \"${hostInput}\" }}'`,\n    \"\",\n    \"env:\",\n    \"  - name: DATABASE_URL\",\n    \"    valueFrom:\",\n    \"      secretKeyRef:\",\n    \"        key: database_url\",\n    '        {{ if eq EnvironmentProviderType \"aws\" }}',\n    `        name: '{{ index (serviceInstallation \"os-postgresql-terraform-aws\").outputs.app_database_secret_names \"${appName}\" }}'`,\n    '        {{ else if eq EnvironmentProviderType \"azure\" }}',\n    `        name: '{{ index (serviceInstallation \"os-postgresql-terraform-azure\").outputs.app_database_secret_names \"${appName}\" }}'`,\n    \"        {{ end }}\",\n    \"  - name: AUTH_DATABASE_URL\",\n    \"    valueFrom:\",\n    \"      secretKeyRef:\",\n    \"        key: database_url\",\n    '        {{ if eq EnvironmentProviderType \"aws\" }}',\n    \"        name: '{{ (serviceInstallation \\\"os-postgresql-terraform-aws\\\").outputs.auth_secret_name }}'\",\n    '        {{ else if eq EnvironmentProviderType \"azure\" }}',\n    \"        name: '{{ (serviceInstallation \\\"os-postgresql-terraform-azure\\\").outputs.auth_secret_name }}'\",\n    \"        {{ end }}\",\n    \"  - name: APP_BASE_URL\",\n    `    value: 'https://{{ input \"${hostInput}\" }}'`,\n    \"  - name: BETTER_AUTH_URL\",\n    `    value: 'https://{{ input \"${hostInput}\" }}'`,\n    \"  - name: NODE_ENV\",\n    \"    value: production\",\n    \"  - name: PORT\",\n    '    value: \"3000\"',\n    \"  - name: AUTH_TRUST_HOST\",\n    '    value: \"true\"',\n    \"  - name: INNGEST_BASE_URL\",\n    \"    value: '{{ (blueprintInstallation \\\"mosaic\\\").outputs.inngest_base_url }}'\",\n    \"  - name: INNGEST_APP_URL\",\n    `    value: 'http://${appName}-web-server.{{ EnvironmentNamespace }}.svc.cluster.local:3000/api/inngest'`,\n    \"  - name: LANGFUSE_BASE_URL\",\n    \"    value: '{{ (blueprintInstallation \\\"mosaic\\\").outputs.langfuse_base_url }}'\",\n    \"  - name: LANGFUSE_PUBLIC_KEY\",\n    `    value: '{{ input \"${langfusePublicKeyInput}\" }}'`,\n    \"  - name: OTEL_SERVICE_NAME\",\n    `    value: ${appName}`,\n    \"  - name: OTEL_RESOURCE_ATTRIBUTES\",\n    `    value: 'deployment.environment={{ EnvironmentName }},service.name=${appName}'`,\n    \"  - name: OTEL_TRACES_EXPORTER\",\n    \"    value: otlp\",\n    \"  - name: OTEL_METRICS_EXPORTER\",\n    \"    value: otlp\",\n    \"  - name: OTEL_EXPORTER_OTLP_PROTOCOL\",\n    \"    value: http/protobuf\",\n    \"  - name: OTEL_EXPORTER_OTLP_ENDPOINT\",\n    \"    value: '{{ (blueprintInstallation \\\"mosaic\\\").outputs.otel_exporter_otlp_endpoint }}'\",\n    \"  - name: SPICEDB_ENDPOINT\",\n    \"    value: '{{ (blueprintInstallation \\\"mosaic\\\").outputs.spicedb_endpoint }}'\",\n    \"  - name: SPICEDB_PRESHARED_KEY\",\n    \"    valueFrom:\",\n    \"      secretKeyRef:\",\n    \"        key: '{{ (blueprintInstallation \\\"mosaic\\\").outputs.spicedb_preshared_key_secret_key }}'\",\n    \"        name: '{{ (blueprintInstallation \\\"mosaic\\\").outputs.spicedb_config_secret_name }}'\",\n    \"  - name: SPICEDB_INSECURE\",\n    \"    value: '{{ (blueprintInstallation \\\"mosaic\\\").outputs.spicedb_insecure }}'\",\n    \"\",\n  ].join(\"\\n\");\n}\n\nasync function readLocalServiceDefinition(\n  monorepoRoot: string,\n  appName: string,\n): Promise<string> {\n  const serviceDefinitionPath = path.join(\n    monorepoRoot,\n    \"packages\",\n    appName,\n    \"deploy\",\n    \"ryvn\",\n    `${appName}.service.yaml`,\n  );\n  if (!(await fs.pathExists(serviceDefinitionPath))) {\n    throw new Error(\n      `${serviceDefinitionPath} does not exist. Add the app's Ryvn service definition before registering it in infra.`,\n    );\n  }\n\n  const content = await fs.readFile(serviceDefinitionPath, \"utf-8\");\n  validateLocalServiceDefinition(content, appName, serviceDefinitionPath);\n  return content.endsWith(\"\\n\") ? content : `${content}\\n`;\n}\n\nfunction validateLocalServiceDefinition(\n  content: string,\n  appName: string,\n  serviceDefinitionPath: string,\n): void {\n  const document = parseDocument(content);\n  if (document.errors.length > 0) {\n    throw new Error(\n      `Invalid Ryvn service YAML at ${serviceDefinitionPath}: ${document.errors.map((error) => error.message).join(\"; \")}`,\n    );\n  }\n\n  const service = document.toJS() as {\n    kind?: unknown;\n    metadata?: { name?: unknown };\n  };\n  if (service.kind !== \"Service\" || service.metadata?.name !== appName) {\n    throw new Error(\n      `${serviceDefinitionPath} must define kind: Service with metadata.name: ${appName}.`,\n    );\n  }\n}\n\nfunction hostInputName(appName: string): string {\n  return `${toSnakeCase(appName)}_host`;\n}\n\nfunction betterAuthSecretInputName(appName: string): string {\n  return `${toSnakeCase(appName)}_better_auth_secret`;\n}\n\nfunction inngestEventKeyInputName(appName: string): string {\n  return `${toSnakeCase(appName)}_inngest_event_key`;\n}\n\nfunction inngestSigningKeyInputName(appName: string): string {\n  return `${toSnakeCase(appName)}_inngest_signing_key`;\n}\n\nfunction langfusePublicKeyInputName(appName: string): string {\n  return `${toSnakeCase(appName)}_langfuse_public_key`;\n}\n\nfunction langfuseSecretKeyInputName(appName: string): string {\n  return `${toSnakeCase(appName)}_langfuse_secret_key`;\n}\n\nfunction normalizeAppName(appNameInput: string): string {\n  const appName = toKebabCase(appNameInput);\n  const validation = validateProjectName(appName);\n  if (!validation.valid) {\n    throw new Error(`Invalid app name: ${validation.error}`);\n  }\n  return appName;\n}\n"],"mappings":";;;;;;;;;AAmCA,eAAsB,YACpB,cACA,OAGI,EAAE,EACsB;CAC5B,MAAM,UAAU,iBAAiB,aAAa;CAE9C,MAAM,kBAAkB,MAAM,eADlB,KAAK,OAAO,QAAQ,KAAK,CACY;AACjD,KAAI,CAAC,gBAAgB,SAAS,CAAC,gBAAgB,QAC7C,OAAM,IAAI,MACR,uFACD;CAMH,MAAM,gBAAe,MAHW,sBAC9B,gBAAgB,QACjB,GACuC;AACxC,KAAI,CAAC,aACH,OAAM,IAAI,MACR,yGACD;CAGH,MAAM,SAAS,KAAK,UAAU,qBAAqB,oBAAoB,CAAC;CACxE,MAAM,gBAAgB,GAAG,aAAa;CACtC,MAAM,aAAa,sBAAsB,aAAa,GAAG;CACzD,MAAM,gBAAgB;EACpB;EACA;EACA;EACA;EACA,GAAG,cAAc;EAClB,CAAC,KAAK,IAAI;CACX,MAAM,cAAc;EAClB;EACA;EACA;EACA;EACA,GAAG,QAAQ;EACZ,CAAC,KAAK,IAAI;CAEX,MAAM,oBAAoB,MAAM,OAAO,QACrC,eACA,kBACD;AACD,KAAI,CAAC,kBACH,OAAM,IAAI,MACR,GAAG,cAAc,qBAAqB,iBAAiB,kFACxD;CAIH,MAAM,iBACJ,MAF4B,OAAO,QAAQ,aAAA,OAA+B,IAEvD,OACf,MAAM,2BAA2B,gBAAgB,SAAS,QAAQ,GAClE;CACN,MAAM,mBAAmB,uBACvB,kBAAkB,SAClB,QACD;CAED,MAAM,QAAgC,EAAE;AACxC,KAAI,qBAAqB,kBAAkB,QACzC,OAAM,KAAK;EACT,aAAa,kBAAkB;EAC/B,SAAS;EACT,SAAS,YAAY,QAAQ,MAAM;EACnC,MAAM;EACP,CAAC;AAEJ,KAAI,kBAAkB,KACpB,OAAM,KAAK;EACT,SAAS;EACT,SAAS,YAAY,QAAQ;EAC7B,MAAM;EACP,CAAC;AAGJ,KAAI,MAAM,WAAW,EACnB,QAAO;EACL;EACA;EACA;EACA;EACA;EACA,gBAAgB;EAChB,YAAY;EACZ,QAAQ;EACR;EACA,YAAY;EACb;CAGH,MAAM,cAAc,MAAM,oCAAoC;EAC5D;EACA;EACA;EACA,OAAO,YAAY,QAAQ;EAC3B,MAAM;GACJ,iBAAiB,QAAQ,6BAA6B,cAAc;GACpE;GACA;GACD,CAAC,KAAK,KAAK;EACb,CAAC;AAEF,QAAO;EACL;EACA;EACA;EACA;EACA;EACA,gBAAgB,YAAY;EAC5B,YAAY;EACZ,QAAQ,YAAY;EACpB;EACA,YAAY;EACb;;AAGH,eAAsB,mBAAmB,SAAgC;AACvE,KAAI;EACF,MAAM,SAAS,MAAM,YAAY,QAAQ;AAEzC,MAAI,OAAO,WAAW,sBAAsB;AAC1C,WAAQ,IACN,MAAM,MAAM,IAAI,EAChB,GAAG,OAAO,QAAQ,4BAA4B,OAAO,WAAW,MAChE,MAAM,KAAK,OAAO,WAAW,CAC9B;AACD;;EAGF,MAAM,OACJ,OAAO,WAAW,eAAe,YAAY;AAC/C,UAAQ,IACN,MAAM,MAAM,IAAI,EAChB,GAAG,KAAK,gBAAgB,OAAO,QAAQ,IACvC,MAAM,KAAK,OAAO,eAAe,CAClC;UACM,OAAO;AACd,UAAQ,MAAM,MAAM,IAAI,SAAS,EAAG,MAAgB,QAAQ;AAC5D,UAAQ,KAAK,EAAE;;;AAenB,SAAgB,uBACd,kBACA,SACQ;AACR,QAAO,gBAAgB,kBAAkB,SAAS;EAChD,aAAa;EACb,iBAAiB;EACjB,WAAW;EACZ,CAAC;;AAGJ,SAAS,gBACP,kBACA,SACA,SAKQ;CACR,MAAM,WAAW,cAAc,iBAAiB;AAChD,KAAI,SAAS,OAAO,SAAS,EAC3B,OAAM,IAAI,MACR,8BAA8B,SAAS,OAAO,KAAK,UAAU,MAAM,QAAQ,CAAC,KAAK,KAAK,GACvF;CAGH,MAAM,OAAO,SAAS,IAAI,QAAQ,KAAK;AACvC,KAAI,CAAC,MAAM,KAAK,CACd,OAAM,IAAI,MAAM,wCAAwC;CAG1D,IAAI,UAAU;CACd,MAAM,SAAS,KAAK,IAAI,UAAU,KAAK;AACvC,KAAI,CAAC,MAAM,OAAO,CAChB,OAAM,IAAI,MAAM,+CAA+C;AAGjE,KAAI,QAAQ,WAAW;AACrB,YACE,YAAY,UAAU,QAAQ,gBAAgB,QAAQ,CAAC,IAAI;AAC7D,YACE,YAAY,UAAU,QAAQ,4BAA4B,QAAQ,CAAC,IACnE;AACF,YACE,YAAY,UAAU,QAAQ,2BAA2B,QAAQ,CAAC,IAClE;AACF,YACE,YAAY,UAAU,QAAQ,6BAA6B,QAAQ,CAAC,IACpE;AACF,YACE,YAAY,UAAU,QAAQ,6BAA6B,QAAQ,CAAC,IACpE;AACF,YACE,YAAY,UAAU,QAAQ,6BAA6B,QAAQ,CAAC,IACpE;;AAGJ,KAAI,QAAQ,YACV,WAAU,eAAe,UAAU,QAAQ,QAAQ,IAAI;AAGzD,KAAI,QAAQ,iBAAiB;EAC3B,MAAM,gBAAgB,KAAK,IAAI,iBAAiB,KAAK;AACrD,MAAI,CAAC,MAAM,cAAc,CACvB,OAAM,IAAI,MAAM,sDAAsD;AAExE,YAAU,mBAAmB,UAAU,eAAe,QAAQ,IAAI;;AAGpE,QAAO,UAAU,SAAS,UAAU,GAAG;;AAGzC,SAAS,YACP,UACA,QACA,OACS;AACT,KACE,OAAO,MAAM,MAAM,SAAS,MAAM,KAAK,IAAI,KAAK,IAAI,OAAO,KAAK,MAAM,KAAK,CAE3E,QAAO;AAGT,QAAO,IAAI,SAAS,WAAW,MAAM,CAAC;AACtC,QAAO;;AAGT,SAAS,eACP,UACA,QACA,SACS;CACT,MAAM,oBAAoB,OAAO,MAAM,MACpC,SAAS,MAAM,KAAK,IAAI,KAAK,IAAI,OAAO,KAAK,gBAC/C;AACD,KAAI,CAAC,MAAM,kBAAkB,CAC3B,OAAM,IAAI,MAAM,oDAAoD;CAGtE,MAAM,eAAe,kBAAkB,IAAI,WAAW,KAAK;AAC3D,KAAI,CAAC,MAAM,aAAa,CACtB,OAAM,IAAI,MAAM,oDAAoD;AAGtE,KAAI,aAAa,IAAI,QAAQ,CAAE,QAAO;AAEtC,cAAa,OAAO;CACpB,MAAM,mBAAmB,SAAS,WAAW,EAAE,CAAC;AAChD,KAAI,MAAM,iBAAiB,CAAE,kBAAiB,OAAO;AACrD,cAAa,IAAI,SAAS,iBAAiB;AAC3C,QAAO;;AAGT,SAAS,mBACP,UACA,eACA,SACS;AACT,KACE,cAAc,MAAM,MACjB,SAAS,MAAM,KAAK,IAAI,KAAK,IAAI,UAAU,KAAK,QAClD,CAED,QAAO;AAGT,eAAc,IACZ,SAAS,WAAW;EAClB,SAAS;EACT,KAAK,yBAAyB,QAAQ;EACtC,QAAQ,4BAA4B,QAAQ;EAC7C,CAAC,CACH;AACD,QAAO;;AAGT,SAAS,gBAAgB,SAEvB;AACA,QAAO;EACL,MAAM,cAAc,QAAQ;EAC5B,MAAM;EACN,OAAO;EACP,aAAa,GAAG,YAAY,QAAQ,CAAC;EACrC,aAAa,oBAAoB,QAAQ;EACzC,SAAS,GAAG,QAAQ;EACrB;;AAGH,SAAS,4BACP,SAC4C;AAC5C,QAAO;EACL,MAAM,0BAA0B,QAAQ;EACxC,MAAM;EACN,UAAU;EACV,OAAO;EACP,aAAa,GAAG,YAAY,QAAQ,CAAC;EACrC,aAAa,4CAA4C,QAAQ;EACjE,QAAQ;EACR,WAAW;GACT,MAAM;GACN,QAAQ;GACT;EACF;;AAGH,SAAS,2BACP,SAC4C;AAC5C,QAAO;EACL,MAAM,yBAAyB,QAAQ;EACvC,MAAM;EACN,UAAU;EACV,OAAO;EACP,aAAa,GAAG,YAAY,QAAQ,CAAC;EACrC,aAAa,yBAAyB,QAAQ;EAC9C,SAAS;EACV;;AAGH,SAAS,6BACP,SAC4C;AAC5C,QAAO;EACL,MAAM,2BAA2B,QAAQ;EACzC,MAAM;EACN,UAAU;EACV,OAAO;EACP,aAAa,GAAG,YAAY,QAAQ,CAAC;EACrC,aAAa,2BAA2B,QAAQ;EAChD,SAAS;EACV;;AAGH,SAAS,6BACP,SAC4C;AAC5C,QAAO;EACL,MAAM,2BAA2B,QAAQ;EACzC,MAAM;EACN,OAAO;EACP,aAAa,GAAG,YAAY,QAAQ,CAAC;EACrC,aAAa,2BAA2B,QAAQ;EAChD,SAAS;EACV;;AAGH,SAAS,6BACP,SAC4C;AAC5C,QAAO;EACL,MAAM,2BAA2B,QAAQ;EACzC,MAAM;EACN,UAAU;EACV,OAAO;EACP,aAAa,GAAG,YAAY,QAAQ,CAAC;EACrC,aAAa,2BAA2B,QAAQ;EAChD,SAAS;EACV;;AAGH,SAAS,yBACP,SACgC;AAChC,QAAO;EACL;GACE,KAAK;GACL,UAAU;GACV,gBAAgB,EACd,MAAM,0BAA0B,QAAQ,EACzC;GACF;EACD;GACE,KAAK;GACL,UAAU;GACV,gBAAgB,EACd,MAAM,yBAAyB,QAAQ,EACxC;GACF;EACD;GACE,KAAK;GACL,UAAU;GACV,gBAAgB,EACd,MAAM,2BAA2B,QAAQ,EAC1C;GACF;EACD;GACE,KAAK;GACL,UAAU;GACV,gBAAgB,EACd,MAAM,2BAA2B,QAAQ,EAC1C;GACF;EACF;;AAGH,SAAS,4BAA4B,SAAyB;CAC5D,MAAM,YAAY,cAAc,QAAQ;CACxC,MAAM,yBAAyB,2BAA2B,QAAQ;AAElE,QAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,0BAA0B,UAAU;EACpC;EACA;EACA;EACA;EACA,qBAAqB,QAAQ;EAC7B;EACA,wBAAwB,UAAU;EAClC;EACA;EACA;EACA;EACA;EACA;EACA;EACA,kHAAkH,QAAQ;EAC1H;EACA,oHAAoH,QAAQ;EAC5H;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,iCAAiC,UAAU;EAC3C;EACA,iCAAiC,UAAU;EAC3C;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,sBAAsB,QAAQ;EAC9B;EACA;EACA;EACA,yBAAyB,uBAAuB;EAChD;EACA,cAAc;EACd;EACA,yEAAyE,QAAQ;EACjF;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAAC,KAAK,KAAK;;AAGd,eAAe,2BACb,cACA,SACiB;CACjB,MAAM,wBAAwB,KAAK,KACjC,cACA,YACA,SACA,UACA,QACA,GAAG,QAAQ,eACZ;AACD,KAAI,CAAE,MAAM,GAAG,WAAW,sBAAsB,CAC9C,OAAM,IAAI,MACR,GAAG,sBAAsB,wFAC1B;CAGH,MAAM,UAAU,MAAM,GAAG,SAAS,uBAAuB,QAAQ;AACjE,gCAA+B,SAAS,SAAS,sBAAsB;AACvE,QAAO,QAAQ,SAAS,KAAK,GAAG,UAAU,GAAG,QAAQ;;AAGvD,SAAS,+BACP,SACA,SACA,uBACM;CACN,MAAM,WAAW,cAAc,QAAQ;AACvC,KAAI,SAAS,OAAO,SAAS,EAC3B,OAAM,IAAI,MACR,gCAAgC,sBAAsB,IAAI,SAAS,OAAO,KAAK,UAAU,MAAM,QAAQ,CAAC,KAAK,KAAK,GACnH;CAGH,MAAM,UAAU,SAAS,MAAM;AAI/B,KAAI,QAAQ,SAAS,aAAa,QAAQ,UAAU,SAAS,QAC3D,OAAM,IAAI,MACR,GAAG,sBAAsB,iDAAiD,QAAQ,GACnF;;AAIL,SAAS,cAAc,SAAyB;AAC9C,QAAO,GAAG,YAAY,QAAQ,CAAC;;AAGjC,SAAS,0BAA0B,SAAyB;AAC1D,QAAO,GAAG,YAAY,QAAQ,CAAC;;AAGjC,SAAS,yBAAyB,SAAyB;AACzD,QAAO,GAAG,YAAY,QAAQ,CAAC;;AAGjC,SAAS,2BAA2B,SAAyB;AAC3D,QAAO,GAAG,YAAY,QAAQ,CAAC;;AAGjC,SAAS,2BAA2B,SAAyB;AAC3D,QAAO,GAAG,YAAY,QAAQ,CAAC;;AAGjC,SAAS,2BAA2B,SAAyB;AAC3D,QAAO,GAAG,YAAY,QAAQ,CAAC;;AAGjC,SAAS,iBAAiB,cAA8B;CACtD,MAAM,UAAU,YAAY,aAAa;CACzC,MAAM,aAAa,oBAAoB,QAAQ;AAC/C,KAAI,CAAC,WAAW,MACd,OAAM,IAAI,MAAM,qBAAqB,WAAW,QAAQ;AAE1D,QAAO"}

package/dist/{register-os-blueprint-DGjBUZYa.js → register-os-blueprint-Cgq1rXzQ.js}

@@ -1,6 +1,6 @@
 import { i as toTitleCase } from "./template-versions-CEIP9vhl.js";
 import { i as detectMonorepo, t as readWorkspaceManifest } from "./index.js";
-import { a as resolveGitHubToken, i as createOrUpdateInfraPullRequest, n as INFRA_REPOSITORY, r as createInfraGitHubApi, t as INFRA_BASE_BRANCH } from "./github-RCIMUq70.js";
+import { i as createOrUpdateInfraPullRequest, n as INFRA_REPOSITORY, o as resolveGitHubToken, r as createInfraGitHubApi, t as INFRA_BASE_BRANCH } from "./github-D3YOEl91.js";
 import path from "node:path";
 import chalk from "chalk";
 import fs from "fs-extra";
@@ -87,4 +87,4 @@ function getOsBlueprintTemplatePath() {
 //#endregion
 export { registerOsBlueprintCommand };
 
-//# sourceMappingURL=register-os-blueprint-DGjBUZYa.js.map
+//# sourceMappingURL=register-os-blueprint-Cgq1rXzQ.js.map

package/dist/{register-os-blueprint-DGjBUZYa.js.map → register-os-blueprint-Cgq1rXzQ.js.map}

@@ -1 +1 @@
-{"version":3,"file":"register-os-blueprint-DGjBUZYa.js","names":[],"sources":["../src/commands/infra/register-os-blueprint.ts"],"sourcesContent":["import path from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport chalk from \"chalk\";\nimport fs from \"fs-extra\";\nimport { toTitleCase } from \"../../utils/case-converters.js\";\nimport { detectMonorepo } from \"../../utils/detect-monorepo.js\";\nimport { readWorkspaceManifest } from \"../../utils/workspace-manifest.js\";\nimport {\n  createOrUpdateInfraPullRequest,\n  createInfraGitHubApi,\n  INFRA_BASE_BRANCH,\n  INFRA_REPOSITORY,\n  type InfraGitHubApi,\n  resolveGitHubToken,\n} from \"./github.js\";\n\nconst OS_BLUEPRINT_TEMPLATE = \"os.blueprint.yaml.template\";\n\nexport interface RegisterOsBlueprintResult {\n  blueprintName: string;\n  branchName: string;\n  customerSlug: string;\n  pullRequestUrl: string | null;\n  repository: typeof INFRA_REPOSITORY;\n  status: \"already_registered\" | \"created_pr\" | \"updated_pr\";\n  targetPath: string;\n}\n\nexport async function registerOsBlueprint(\n  args: {\n    cwd?: string;\n    github?: InfraGitHubApi;\n  } = {},\n): Promise<RegisterOsBlueprintResult> {\n  const cwd = args.cwd ?? process.cwd();\n  const monorepoContext = await detectMonorepo(cwd);\n  if (!monorepoContext.found || !monorepoContext.rootDir) {\n    throw new Error(\n      \"Run this command from a Mosaic customer monorepo with a .mosaic-workspace.json file.\",\n    );\n  }\n\n  const workspaceManifest = await readWorkspaceManifest(\n    monorepoContext.rootDir,\n  );\n  const customerSlug = workspaceManifest?.customerSlug;\n  if (!customerSlug) {\n    throw new Error(\n      \".mosaic-workspace.json is missing customerSlug. Recreate the monorepo with a current @percepta/create.\",\n    );\n  }\n\n  const github = args.github ?? createInfraGitHubApi(resolveGitHubToken());\n  const blueprintName = `${customerSlug}-os`;\n  const branchName = `blueberry/register-${blueprintName}-blueprint`;\n  const targetPath = [\n    \"ryvn\",\n    \"definitions\",\n    customerSlug,\n    \"blueprints\",\n    `${blueprintName}.blueprint.yaml`,\n  ].join(\"/\");\n  const content = await renderOsBlueprint(customerSlug);\n\n  const mainFile = await github.getFile(targetPath, INFRA_BASE_BRANCH);\n  if (mainFile) {\n    if (mainFile.content === content) {\n      return {\n        blueprintName,\n        branchName,\n        customerSlug,\n        pullRequestUrl: null,\n        repository: INFRA_REPOSITORY,\n        status: \"already_registered\",\n        targetPath,\n      };\n    }\n\n    throw new Error(\n      `${targetPath} already exists in ${INFRA_REPOSITORY}. Not overwriting an existing customer OS blueprint.`,\n    );\n  }\n\n  const pullRequest = await createOrUpdateInfraPullRequest({\n    branchName,\n    content,\n    github,\n    message: `Register ${blueprintName} blueprint`,\n    targetPath,\n    title: `Register ${blueprintName} blueprint`,\n    body: [\n      `Registers the ${blueprintName} OS blueprint for ${customerSlug}.`,\n      \"\",\n      \"Generated by `mosaic infra register-os-blueprint`.\",\n    ].join(\"\\n\"),\n  });\n\n  return {\n    blueprintName,\n    branchName,\n    customerSlug,\n    pullRequestUrl: pullRequest.pullRequestUrl,\n    repository: INFRA_REPOSITORY,\n    status: pullRequest.status,\n    targetPath,\n  };\n}\n\nexport async function registerOsBlueprintCommand(): Promise<void> {\n  try {\n    const result = await registerOsBlueprint();\n\n    if (result.status === \"already_registered\") {\n      console.log(\n        chalk.green(\"✔\"),\n        `${result.blueprintName} is already registered in ${result.repository} at`,\n        chalk.cyan(result.targetPath),\n      );\n      return;\n    }\n\n    const verb =\n      result.status === \"created_pr\" ? \"Created\" : \"Updated existing\";\n    console.log(\n      chalk.green(\"✔\"),\n      `${verb} infra PR for ${result.blueprintName}:`,\n      chalk.cyan(result.pullRequestUrl),\n    );\n  } catch (error) {\n    console.error(chalk.red(\"Error:\"), (error as Error).message);\n    process.exit(1);\n  }\n}\n\nasync function renderOsBlueprint(customerSlug: string): Promise<string> {\n  const template = await fs.readFile(getOsBlueprintTemplatePath(), \"utf-8\");\n  const customerTitle = toTitleCase(customerSlug);\n\n  return template\n    .replaceAll(\"__CUSTOMER_SLUG__\", customerSlug)\n    .replaceAll(\"__CUSTOMER_TITLE__\", customerTitle);\n}\n\nfunction getOsBlueprintTemplatePath(): string {\n  const currentDir = path.dirname(fileURLToPath(import.meta.url));\n  const candidates = [\n    path.resolve(currentDir, \"../templates/infra\", OS_BLUEPRINT_TEMPLATE),\n    path.resolve(currentDir, \"../../../templates/infra\", OS_BLUEPRINT_TEMPLATE),\n  ];\n\n  for (const candidate of candidates) {\n    if (fs.existsSync(candidate)) return candidate;\n  }\n\n  throw new Error(\n    `OS blueprint template not found. Checked: ${candidates.join(\", \")}`,\n  );\n}\n"],"mappings":";;;;;;;;AAgBA,MAAM,wBAAwB;AAY9B,eAAsB,oBACpB,OAGI,EAAE,EAC8B;CAEpC,MAAM,kBAAkB,MAAM,eADlB,KAAK,OAAO,QAAQ,KAAK,CACY;AACjD,KAAI,CAAC,gBAAgB,SAAS,CAAC,gBAAgB,QAC7C,OAAM,IAAI,MACR,uFACD;CAMH,MAAM,gBAAe,MAHW,sBAC9B,gBAAgB,QACjB,GACuC;AACxC,KAAI,CAAC,aACH,OAAM,IAAI,MACR,yGACD;CAGH,MAAM,SAAS,KAAK,UAAU,qBAAqB,oBAAoB,CAAC;CACxE,MAAM,gBAAgB,GAAG,aAAa;CACtC,MAAM,aAAa,sBAAsB,cAAc;CACvD,MAAM,aAAa;EACjB;EACA;EACA;EACA;EACA,GAAG,cAAc;EAClB,CAAC,KAAK,IAAI;CACX,MAAM,UAAU,MAAM,kBAAkB,aAAa;CAErD,MAAM,WAAW,MAAM,OAAO,QAAQ,YAAY,kBAAkB;AACpE,KAAI,UAAU;AACZ,MAAI,SAAS,YAAY,QACvB,QAAO;GACL;GACA;GACA;GACA,gBAAgB;GAChB,YAAY;GACZ,QAAQ;GACR;GACD;AAGH,QAAM,IAAI,MACR,GAAG,WAAW,qBAAqB,iBAAiB,sDACrD;;CAGH,MAAM,cAAc,MAAM,+BAA+B;EACvD;EACA;EACA;EACA,SAAS,YAAY,cAAc;EACnC;EACA,OAAO,YAAY,cAAc;EACjC,MAAM;GACJ,iBAAiB,cAAc,oBAAoB,aAAa;GAChE;GACA;GACD,CAAC,KAAK,KAAK;EACb,CAAC;AAEF,QAAO;EACL;EACA;EACA;EACA,gBAAgB,YAAY;EAC5B,YAAY;EACZ,QAAQ,YAAY;EACpB;EACD;;AAGH,eAAsB,6BAA4C;AAChE,KAAI;EACF,MAAM,SAAS,MAAM,qBAAqB;AAE1C,MAAI,OAAO,WAAW,sBAAsB;AAC1C,WAAQ,IACN,MAAM,MAAM,IAAI,EAChB,GAAG,OAAO,cAAc,4BAA4B,OAAO,WAAW,MACtE,MAAM,KAAK,OAAO,WAAW,CAC9B;AACD;;EAGF,MAAM,OACJ,OAAO,WAAW,eAAe,YAAY;AAC/C,UAAQ,IACN,MAAM,MAAM,IAAI,EAChB,GAAG,KAAK,gBAAgB,OAAO,cAAc,IAC7C,MAAM,KAAK,OAAO,eAAe,CAClC;UACM,OAAO;AACd,UAAQ,MAAM,MAAM,IAAI,SAAS,EAAG,MAAgB,QAAQ;AAC5D,UAAQ,KAAK,EAAE;;;AAInB,eAAe,kBAAkB,cAAuC;CACtE,MAAM,WAAW,MAAM,GAAG,SAAS,4BAA4B,EAAE,QAAQ;CACzE,MAAM,gBAAgB,YAAY,aAAa;AAE/C,QAAO,SACJ,WAAW,qBAAqB,aAAa,CAC7C,WAAW,sBAAsB,cAAc;;AAGpD,SAAS,6BAAqC;CAC5C,MAAM,aAAa,KAAK,QAAQ,cAAc,OAAO,KAAK,IAAI,CAAC;CAC/D,MAAM,aAAa,CACjB,KAAK,QAAQ,YAAY,sBAAsB,sBAAsB,EACrE,KAAK,QAAQ,YAAY,4BAA4B,sBAAsB,CAC5E;AAED,MAAK,MAAM,aAAa,WACtB,KAAI,GAAG,WAAW,UAAU,CAAE,QAAO;AAGvC,OAAM,IAAI,MACR,6CAA6C,WAAW,KAAK,KAAK,GACnE"}
+{"version":3,"file":"register-os-blueprint-Cgq1rXzQ.js","names":[],"sources":["../src/commands/infra/register-os-blueprint.ts"],"sourcesContent":["import path from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport chalk from \"chalk\";\nimport fs from \"fs-extra\";\nimport { toTitleCase } from \"../../utils/case-converters.js\";\nimport { detectMonorepo } from \"../../utils/detect-monorepo.js\";\nimport { readWorkspaceManifest } from \"../../utils/workspace-manifest.js\";\nimport {\n  createOrUpdateInfraPullRequest,\n  createInfraGitHubApi,\n  INFRA_BASE_BRANCH,\n  INFRA_REPOSITORY,\n  type InfraGitHubApi,\n  resolveGitHubToken,\n} from \"./github.js\";\n\nconst OS_BLUEPRINT_TEMPLATE = \"os.blueprint.yaml.template\";\n\nexport interface RegisterOsBlueprintResult {\n  blueprintName: string;\n  branchName: string;\n  customerSlug: string;\n  pullRequestUrl: string | null;\n  repository: typeof INFRA_REPOSITORY;\n  status: \"already_registered\" | \"created_pr\" | \"updated_pr\";\n  targetPath: string;\n}\n\nexport async function registerOsBlueprint(\n  args: {\n    cwd?: string;\n    github?: InfraGitHubApi;\n  } = {},\n): Promise<RegisterOsBlueprintResult> {\n  const cwd = args.cwd ?? process.cwd();\n  const monorepoContext = await detectMonorepo(cwd);\n  if (!monorepoContext.found || !monorepoContext.rootDir) {\n    throw new Error(\n      \"Run this command from a Mosaic customer monorepo with a .mosaic-workspace.json file.\",\n    );\n  }\n\n  const workspaceManifest = await readWorkspaceManifest(\n    monorepoContext.rootDir,\n  );\n  const customerSlug = workspaceManifest?.customerSlug;\n  if (!customerSlug) {\n    throw new Error(\n      \".mosaic-workspace.json is missing customerSlug. Recreate the monorepo with a current @percepta/create.\",\n    );\n  }\n\n  const github = args.github ?? createInfraGitHubApi(resolveGitHubToken());\n  const blueprintName = `${customerSlug}-os`;\n  const branchName = `blueberry/register-${blueprintName}-blueprint`;\n  const targetPath = [\n    \"ryvn\",\n    \"definitions\",\n    customerSlug,\n    \"blueprints\",\n    `${blueprintName}.blueprint.yaml`,\n  ].join(\"/\");\n  const content = await renderOsBlueprint(customerSlug);\n\n  const mainFile = await github.getFile(targetPath, INFRA_BASE_BRANCH);\n  if (mainFile) {\n    if (mainFile.content === content) {\n      return {\n        blueprintName,\n        branchName,\n        customerSlug,\n        pullRequestUrl: null,\n        repository: INFRA_REPOSITORY,\n        status: \"already_registered\",\n        targetPath,\n      };\n    }\n\n    throw new Error(\n      `${targetPath} already exists in ${INFRA_REPOSITORY}. Not overwriting an existing customer OS blueprint.`,\n    );\n  }\n\n  const pullRequest = await createOrUpdateInfraPullRequest({\n    branchName,\n    content,\n    github,\n    message: `Register ${blueprintName} blueprint`,\n    targetPath,\n    title: `Register ${blueprintName} blueprint`,\n    body: [\n      `Registers the ${blueprintName} OS blueprint for ${customerSlug}.`,\n      \"\",\n      \"Generated by `mosaic infra register-os-blueprint`.\",\n    ].join(\"\\n\"),\n  });\n\n  return {\n    blueprintName,\n    branchName,\n    customerSlug,\n    pullRequestUrl: pullRequest.pullRequestUrl,\n    repository: INFRA_REPOSITORY,\n    status: pullRequest.status,\n    targetPath,\n  };\n}\n\nexport async function registerOsBlueprintCommand(): Promise<void> {\n  try {\n    const result = await registerOsBlueprint();\n\n    if (result.status === \"already_registered\") {\n      console.log(\n        chalk.green(\"✔\"),\n        `${result.blueprintName} is already registered in ${result.repository} at`,\n        chalk.cyan(result.targetPath),\n      );\n      return;\n    }\n\n    const verb =\n      result.status === \"created_pr\" ? \"Created\" : \"Updated existing\";\n    console.log(\n      chalk.green(\"✔\"),\n      `${verb} infra PR for ${result.blueprintName}:`,\n      chalk.cyan(result.pullRequestUrl),\n    );\n  } catch (error) {\n    console.error(chalk.red(\"Error:\"), (error as Error).message);\n    process.exit(1);\n  }\n}\n\nasync function renderOsBlueprint(customerSlug: string): Promise<string> {\n  const template = await fs.readFile(getOsBlueprintTemplatePath(), \"utf-8\");\n  const customerTitle = toTitleCase(customerSlug);\n\n  return template\n    .replaceAll(\"__CUSTOMER_SLUG__\", customerSlug)\n    .replaceAll(\"__CUSTOMER_TITLE__\", customerTitle);\n}\n\nfunction getOsBlueprintTemplatePath(): string {\n  const currentDir = path.dirname(fileURLToPath(import.meta.url));\n  const candidates = [\n    path.resolve(currentDir, \"../templates/infra\", OS_BLUEPRINT_TEMPLATE),\n    path.resolve(currentDir, \"../../../templates/infra\", OS_BLUEPRINT_TEMPLATE),\n  ];\n\n  for (const candidate of candidates) {\n    if (fs.existsSync(candidate)) return candidate;\n  }\n\n  throw new Error(\n    `OS blueprint template not found. Checked: ${candidates.join(\", \")}`,\n  );\n}\n"],"mappings":";;;;;;;;AAgBA,MAAM,wBAAwB;AAY9B,eAAsB,oBACpB,OAGI,EAAE,EAC8B;CAEpC,MAAM,kBAAkB,MAAM,eADlB,KAAK,OAAO,QAAQ,KAAK,CACY;AACjD,KAAI,CAAC,gBAAgB,SAAS,CAAC,gBAAgB,QAC7C,OAAM,IAAI,MACR,uFACD;CAMH,MAAM,gBAAe,MAHW,sBAC9B,gBAAgB,QACjB,GACuC;AACxC,KAAI,CAAC,aACH,OAAM,IAAI,MACR,yGACD;CAGH,MAAM,SAAS,KAAK,UAAU,qBAAqB,oBAAoB,CAAC;CACxE,MAAM,gBAAgB,GAAG,aAAa;CACtC,MAAM,aAAa,sBAAsB,cAAc;CACvD,MAAM,aAAa;EACjB;EACA;EACA;EACA;EACA,GAAG,cAAc;EAClB,CAAC,KAAK,IAAI;CACX,MAAM,UAAU,MAAM,kBAAkB,aAAa;CAErD,MAAM,WAAW,MAAM,OAAO,QAAQ,YAAY,kBAAkB;AACpE,KAAI,UAAU;AACZ,MAAI,SAAS,YAAY,QACvB,QAAO;GACL;GACA;GACA;GACA,gBAAgB;GAChB,YAAY;GACZ,QAAQ;GACR;GACD;AAGH,QAAM,IAAI,MACR,GAAG,WAAW,qBAAqB,iBAAiB,sDACrD;;CAGH,MAAM,cAAc,MAAM,+BAA+B;EACvD;EACA;EACA;EACA,SAAS,YAAY,cAAc;EACnC;EACA,OAAO,YAAY,cAAc;EACjC,MAAM;GACJ,iBAAiB,cAAc,oBAAoB,aAAa;GAChE;GACA;GACD,CAAC,KAAK,KAAK;EACb,CAAC;AAEF,QAAO;EACL;EACA;EACA;EACA,gBAAgB,YAAY;EAC5B,YAAY;EACZ,QAAQ,YAAY;EACpB;EACD;;AAGH,eAAsB,6BAA4C;AAChE,KAAI;EACF,MAAM,SAAS,MAAM,qBAAqB;AAE1C,MAAI,OAAO,WAAW,sBAAsB;AAC1C,WAAQ,IACN,MAAM,MAAM,IAAI,EAChB,GAAG,OAAO,cAAc,4BAA4B,OAAO,WAAW,MACtE,MAAM,KAAK,OAAO,WAAW,CAC9B;AACD;;EAGF,MAAM,OACJ,OAAO,WAAW,eAAe,YAAY;AAC/C,UAAQ,IACN,MAAM,MAAM,IAAI,EAChB,GAAG,KAAK,gBAAgB,OAAO,cAAc,IAC7C,MAAM,KAAK,OAAO,eAAe,CAClC;UACM,OAAO;AACd,UAAQ,MAAM,MAAM,IAAI,SAAS,EAAG,MAAgB,QAAQ;AAC5D,UAAQ,KAAK,EAAE;;;AAInB,eAAe,kBAAkB,cAAuC;CACtE,MAAM,WAAW,MAAM,GAAG,SAAS,4BAA4B,EAAE,QAAQ;CACzE,MAAM,gBAAgB,YAAY,aAAa;AAE/C,QAAO,SACJ,WAAW,qBAAqB,aAAa,CAC7C,WAAW,sBAAsB,cAAc;;AAGpD,SAAS,6BAAqC;CAC5C,MAAM,aAAa,KAAK,QAAQ,cAAc,OAAO,KAAK,IAAI,CAAC;CAC/D,MAAM,aAAa,CACjB,KAAK,QAAQ,YAAY,sBAAsB,sBAAsB,EACrE,KAAK,QAAQ,YAAY,4BAA4B,sBAAsB,CAC5E;AAED,MAAK,MAAM,aAAa,WACtB,KAAI,GAAG,WAAW,UAAU,CAAE,QAAO;AAGvC,OAAM,IAAI,MACR,6CAA6C,WAAW,KAAK,KAAK,GACnE"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@percepta/create",
-  "version": "4.0.1",
+  "version": "4.1.1",
   "description": "Scaffold a new Mosaic package",
   "keywords": [
     "cli",

package/templates/monorepo/README.md

@@ -113,12 +113,15 @@ updates an infra PR that writes
 not create environment installations. It authenticates with `GITHUB_TOKEN`,
 `GH_TOKEN`, or the GitHub CLI's `gh auth token`.
 
-After adding a webapp, register its app database in the customer OS blueprint:
+After adding a webapp, register it in the customer OS blueprint:
 
 ```bash
 pnpm mosaic infra register-app my-app
 ```
 
-This opens or updates an infra PR that adds `my-app: {}` to the customer OS
-blueprint's `app_databases` default. Merge the OS blueprint PR before
-registering apps.
+This opens or updates an infra PR that registers the app service, adds the app
+to the customer OS blueprint's `app_databases` default, and adds the app's
+server installation to the customer OS blueprint. The generated installation
+wires database/auth secrets, consumes Mosaic runtime outputs for Inngest,
+Langfuse, OpenTelemetry, and SpiceDB, plus app-specific credential inputs for
+Inngest and Langfuse. Merge the OS blueprint PR before registering apps.

package/dist/github-RCIMUq70.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"github-RCIMUq70.js","names":[],"sources":["../src/commands/infra/github.ts"],"sourcesContent":["import { execFileSync } from \"node:child_process\";\n\nconst GITHUB_API_BASE_URL = \"https://api.github.com\";\n\nexport const INFRA_REPOSITORY = \"Percepta-Core/infra\";\nexport const INFRA_REPOSITORY_OWNER = \"Percepta-Core\";\nexport const INFRA_BASE_BRANCH = \"main\";\n\nexport interface GitHubFile {\n  sha: string;\n  content: string;\n}\n\nexport interface GitHubPullRequest {\n  number: number;\n  url: string;\n}\n\nexport interface InfraGitHubApi {\n  getFile(path: string, ref: string): Promise<GitHubFile | null>;\n  getBranchSha(branch: string): Promise<string | null>;\n  createBranch(branch: string, sha: string): Promise<void>;\n  putFile(args: {\n    path: string;\n    branch: string;\n    content: string;\n    message: string;\n    sha?: string;\n  }): Promise<void>;\n  findOpenPullRequest(branch: string): Promise<GitHubPullRequest | null>;\n  createPullRequest(args: {\n    branch: string;\n    title: string;\n    body: string;\n  }): Promise<GitHubPullRequest>;\n}\n\nexport interface InfraPullRequestResult {\n  pullRequestUrl: string;\n  status: \"created_pr\" | \"updated_pr\";\n}\n\nexport async function createOrUpdateInfraPullRequest(args: {\n  baseFileSha?: string;\n  body: string;\n  branchName: string;\n  content: string;\n  github: InfraGitHubApi;\n  message: string;\n  targetPath: string;\n  title: string;\n}): Promise<InfraPullRequestResult> {\n  const mainSha = await args.github.getBranchSha(INFRA_BASE_BRANCH);\n  if (!mainSha) {\n    throw new Error(`Could not find ${INFRA_REPOSITORY}@${INFRA_BASE_BRANCH}.`);\n  }\n\n  if (!(await args.github.getBranchSha(args.branchName))) {\n    await args.github.createBranch(args.branchName, mainSha);\n  }\n\n  const branchFile = await args.github.getFile(\n    args.targetPath,\n    args.branchName,\n  );\n  const existingPullRequest = await args.github.findOpenPullRequest(\n    args.branchName,\n  );\n  if (branchFile?.content !== args.content) {\n    await args.github.putFile({\n      path: args.targetPath,\n      branch: args.branchName,\n      content: args.content,\n      message: args.message,\n      sha: branchFile?.sha ?? args.baseFileSha,\n    });\n  }\n\n  const pullRequest =\n    existingPullRequest ??\n    (await args.github.createPullRequest({\n      branch: args.branchName,\n      title: args.title,\n      body: args.body,\n    }));\n\n  return {\n    pullRequestUrl: pullRequest.url,\n    status: existingPullRequest ? \"updated_pr\" : \"created_pr\",\n  };\n}\n\nexport function createInfraGitHubApi(token: string): InfraGitHubApi {\n  return {\n    async getFile(filePath, ref) {\n      const encodedPath = encodePathSegments(filePath);\n      const response = await requestGitHub<{\n        content?: unknown;\n        sha?: unknown;\n        type?: unknown;\n      }>(\n        token,\n        \"GET\",\n        `/repos/${INFRA_REPOSITORY}/contents/${encodedPath}?ref=${encodeURIComponent(ref)}`,\n      );\n      if (response == null) return null;\n      if (\n        typeof response.sha !== \"string\" ||\n        typeof response.content !== \"string\" ||\n        response.type !== \"file\"\n      ) {\n        throw new Error(\n          `Unexpected GitHub content response for ${filePath} in ${INFRA_REPOSITORY}.`,\n        );\n      }\n\n      return {\n        sha: response.sha,\n        content: Buffer.from(\n          response.content.replace(/\\s/g, \"\"),\n          \"base64\",\n        ).toString(\"utf-8\"),\n      };\n    },\n\n    async getBranchSha(branch) {\n      const response = await requestGitHub<{\n        object?: { sha?: unknown };\n      }>(token, \"GET\", `/repos/${INFRA_REPOSITORY}/git/ref/heads/${branch}`);\n      if (response == null) return null;\n      const sha = response.object?.sha;\n      if (typeof sha !== \"string\") {\n        throw new Error(`Unexpected GitHub ref response for ${branch}.`);\n      }\n      return sha;\n    },\n\n    async createBranch(branch, sha) {\n      await requestGitHub(\n        token,\n        \"POST\",\n        `/repos/${INFRA_REPOSITORY}/git/refs`,\n        {\n          ref: `refs/heads/${branch}`,\n          sha,\n        },\n      );\n    },\n\n    async putFile({ path: filePath, branch, content, message, sha }) {\n      const encodedPath = encodePathSegments(filePath);\n      await requestGitHub(\n        token,\n        \"PUT\",\n        `/repos/${INFRA_REPOSITORY}/contents/${encodedPath}`,\n        {\n          branch,\n          content: Buffer.from(content, \"utf-8\").toString(\"base64\"),\n          message,\n          sha,\n        },\n      );\n    },\n\n    async findOpenPullRequest(branch) {\n      const params = new URLSearchParams({\n        base: INFRA_BASE_BRANCH,\n        head: `${INFRA_REPOSITORY_OWNER}:${branch}`,\n        state: \"open\",\n      });\n      const response = await requestGitHub<\n        Array<{ html_url?: unknown; number?: unknown }>\n      >(token, \"GET\", `/repos/${INFRA_REPOSITORY}/pulls?${params}`);\n      const pullRequest = response?.[0];\n      if (!pullRequest) return null;\n      if (\n        typeof pullRequest.html_url !== \"string\" ||\n        typeof pullRequest.number !== \"number\"\n      ) {\n        throw new Error(`Unexpected GitHub pull request response.`);\n      }\n      return {\n        number: pullRequest.number,\n        url: pullRequest.html_url,\n      };\n    },\n\n    async createPullRequest({ branch, title, body }) {\n      const response = await requestGitHub<{\n        html_url?: unknown;\n        number?: unknown;\n      }>(token, \"POST\", `/repos/${INFRA_REPOSITORY}/pulls`, {\n        base: INFRA_BASE_BRANCH,\n        body,\n        head: branch,\n        maintainer_can_modify: true,\n        title,\n      });\n      if (\n        !response ||\n        typeof response.html_url !== \"string\" ||\n        typeof response.number !== \"number\"\n      ) {\n        throw new Error(`Unexpected GitHub pull request response.`);\n      }\n      return {\n        number: response.number,\n        url: response.html_url,\n      };\n    },\n  };\n}\n\nexport function resolveGitHubToken(): string {\n  const envToken = process.env.GITHUB_TOKEN ?? process.env.GH_TOKEN;\n  if (envToken) return envToken;\n\n  try {\n    const token = execFileSync(\"gh\", [\"auth\", \"token\"], {\n      encoding: \"utf-8\",\n      stdio: [\"ignore\", \"pipe\", \"ignore\"],\n    }).trim();\n    if (token) return token;\n  } catch {\n    // Fall through to the actionable error below.\n  }\n\n  throw new Error(\n    \"GitHub auth is required. Set GITHUB_TOKEN or GH_TOKEN, or run `gh auth login`.\",\n  );\n}\n\nasync function requestGitHub<T>(\n  token: string,\n  method: string,\n  path: string,\n  body?: unknown,\n): Promise<T | null> {\n  const response = await fetch(`${GITHUB_API_BASE_URL}${path}`, {\n    method,\n    headers: {\n      Accept: \"application/vnd.github+json\",\n      Authorization: `Bearer ${token}`,\n      \"Content-Type\": \"application/json\",\n      \"X-GitHub-Api-Version\": \"2022-11-28\",\n    },\n    body: body === undefined ? undefined : JSON.stringify(body),\n  });\n\n  if (response.status === 404) return null;\n\n  if (!response.ok) {\n    const responseText = await response.text();\n    throw new Error(\n      `GitHub ${method} ${path} failed with ${response.status}: ${responseText}`,\n    );\n  }\n\n  if (response.status === 204) return null;\n  return (await response.json()) as T;\n}\n\nfunction encodePathSegments(filePath: string): string {\n  return filePath.split(\"/\").map(encodeURIComponent).join(\"/\");\n}\n"],"mappings":";;AAEA,MAAM,sBAAsB;AAE5B,MAAa,mBAAmB;AAChC,MAAa,yBAAyB;AACtC,MAAa,oBAAoB;AAoCjC,eAAsB,+BAA+B,MASjB;CAClC,MAAM,UAAU,MAAM,KAAK,OAAO,aAAa,kBAAkB;AACjE,KAAI,CAAC,QACH,OAAM,IAAI,MAAM,kBAAkB,iBAAiB,GAAG,kBAAkB,GAAG;AAG7E,KAAI,CAAE,MAAM,KAAK,OAAO,aAAa,KAAK,WAAW,CACnD,OAAM,KAAK,OAAO,aAAa,KAAK,YAAY,QAAQ;CAG1D,MAAM,aAAa,MAAM,KAAK,OAAO,QACnC,KAAK,YACL,KAAK,WACN;CACD,MAAM,sBAAsB,MAAM,KAAK,OAAO,oBAC5C,KAAK,WACN;AACD,KAAI,YAAY,YAAY,KAAK,QAC/B,OAAM,KAAK,OAAO,QAAQ;EACxB,MAAM,KAAK;EACX,QAAQ,KAAK;EACb,SAAS,KAAK;EACd,SAAS,KAAK;EACd,KAAK,YAAY,OAAO,KAAK;EAC9B,CAAC;AAWJ,QAAO;EACL,iBARA,uBACC,MAAM,KAAK,OAAO,kBAAkB;GACnC,QAAQ,KAAK;GACb,OAAO,KAAK;GACZ,MAAM,KAAK;GACZ,CAAC,EAG0B;EAC5B,QAAQ,sBAAsB,eAAe;EAC9C;;AAGH,SAAgB,qBAAqB,OAA+B;AAClE,QAAO;EACL,MAAM,QAAQ,UAAU,KAAK;GAE3B,MAAM,WAAW,MAAM,cAKrB,OACA,OACA,UAAU,iBAAiB,YART,mBAAmB,SAQa,CAAC,OAAO,mBAAmB,IAAI,GAClF;AACD,OAAI,YAAY,KAAM,QAAO;AAC7B,OACE,OAAO,SAAS,QAAQ,YACxB,OAAO,SAAS,YAAY,YAC5B,SAAS,SAAS,OAElB,OAAM,IAAI,MACR,0CAA0C,SAAS,MAAM,iBAAiB,GAC3E;AAGH,UAAO;IACL,KAAK,SAAS;IACd,SAAS,OAAO,KACd,SAAS,QAAQ,QAAQ,OAAO,GAAG,EACnC,SACD,CAAC,SAAS,QAAQ;IACpB;;EAGH,MAAM,aAAa,QAAQ;GACzB,MAAM,WAAW,MAAM,cAEpB,OAAO,OAAO,UAAU,iBAAiB,iBAAiB,SAAS;AACtE,OAAI,YAAY,KAAM,QAAO;GAC7B,MAAM,MAAM,SAAS,QAAQ;AAC7B,OAAI,OAAO,QAAQ,SACjB,OAAM,IAAI,MAAM,sCAAsC,OAAO,GAAG;AAElE,UAAO;;EAGT,MAAM,aAAa,QAAQ,KAAK;AAC9B,SAAM,cACJ,OACA,QACA,UAAU,iBAAiB,YAC3B;IACE,KAAK,cAAc;IACnB;IACD,CACF;;EAGH,MAAM,QAAQ,EAAE,MAAM,UAAU,QAAQ,SAAS,SAAS,OAAO;AAE/D,SAAM,cACJ,OACA,OACA,UAAU,iBAAiB,YAJT,mBAAmB,SAIa,IAClD;IACE;IACA,SAAS,OAAO,KAAK,SAAS,QAAQ,CAAC,SAAS,SAAS;IACzD;IACA;IACD,CACF;;EAGH,MAAM,oBAAoB,QAAQ;GAShC,MAAM,eAAc,MAHG,cAErB,OAAO,OAAO,UAAU,iBAAiB,SAAS,IAPjC,gBAAgB;IACjC,MAAM;IACN,MAAM,GAAG,uBAAuB,GAAG;IACnC,OAAO;IACR,CAGyD,GAAG,IAC9B;AAC/B,OAAI,CAAC,YAAa,QAAO;AACzB,OACE,OAAO,YAAY,aAAa,YAChC,OAAO,YAAY,WAAW,SAE9B,OAAM,IAAI,MAAM,2CAA2C;AAE7D,UAAO;IACL,QAAQ,YAAY;IACpB,KAAK,YAAY;IAClB;;EAGH,MAAM,kBAAkB,EAAE,QAAQ,OAAO,QAAQ;GAC/C,MAAM,WAAW,MAAM,cAGpB,OAAO,QAAQ,UAAU,iBAAiB,SAAS;IACpD,MAAM;IACN;IACA,MAAM;IACN,uBAAuB;IACvB;IACD,CAAC;AACF,OACE,CAAC,YACD,OAAO,SAAS,aAAa,YAC7B,OAAO,SAAS,WAAW,SAE3B,OAAM,IAAI,MAAM,2CAA2C;AAE7D,UAAO;IACL,QAAQ,SAAS;IACjB,KAAK,SAAS;IACf;;EAEJ;;AAGH,SAAgB,qBAA6B;CAC3C,MAAM,WAAW,QAAQ,IAAI,gBAAgB,QAAQ,IAAI;AACzD,KAAI,SAAU,QAAO;AAErB,KAAI;EACF,MAAM,QAAQ,aAAa,MAAM,CAAC,QAAQ,QAAQ,EAAE;GAClD,UAAU;GACV,OAAO;IAAC;IAAU;IAAQ;IAAS;GACpC,CAAC,CAAC,MAAM;AACT,MAAI,MAAO,QAAO;SACZ;AAIR,OAAM,IAAI,MACR,iFACD;;AAGH,eAAe,cACb,OACA,QACA,MACA,MACmB;CACnB,MAAM,WAAW,MAAM,MAAM,GAAG,sBAAsB,QAAQ;EAC5D;EACA,SAAS;GACP,QAAQ;GACR,eAAe,UAAU;GACzB,gBAAgB;GAChB,wBAAwB;GACzB;EACD,MAAM,SAAS,KAAA,IAAY,KAAA,IAAY,KAAK,UAAU,KAAK;EAC5D,CAAC;AAEF,KAAI,SAAS,WAAW,IAAK,QAAO;AAEpC,KAAI,CAAC,SAAS,IAAI;EAChB,MAAM,eAAe,MAAM,SAAS,MAAM;AAC1C,QAAM,IAAI,MACR,UAAU,OAAO,GAAG,KAAK,eAAe,SAAS,OAAO,IAAI,eAC7D;;AAGH,KAAI,SAAS,WAAW,IAAK,QAAO;AACpC,QAAQ,MAAM,SAAS,MAAM;;AAG/B,SAAS,mBAAmB,UAA0B;AACpD,QAAO,SAAS,MAAM,IAAI,CAAC,IAAI,mBAAmB,CAAC,KAAK,IAAI"}

package/dist/register-app-C7ZBpAaZ.js

@@ -1,103 +0,0 @@
-import { n as toKebabCase } from "./template-versions-CEIP9vhl.js";
-import { t as validateProjectName } from "./validate-dssldJAj.js";
-import { i as detectMonorepo, t as readWorkspaceManifest } from "./index.js";
-import { a as resolveGitHubToken, i as createOrUpdateInfraPullRequest, n as INFRA_REPOSITORY, r as createInfraGitHubApi, t as INFRA_BASE_BRANCH } from "./github-RCIMUq70.js";
-import chalk from "chalk";
-import { isMap, isSeq, parseDocument } from "yaml";
-//#region src/commands/infra/register-app.ts
-async function registerApp(appNameInput, args = {}) {
-	const appName = normalizeAppName(appNameInput);
-	const monorepoContext = await detectMonorepo(args.cwd ?? process.cwd());
-	if (!monorepoContext.found || !monorepoContext.rootDir) throw new Error("Run this command from a Mosaic customer monorepo with a .mosaic-workspace.json file.");
-	const customerSlug = (await readWorkspaceManifest(monorepoContext.rootDir))?.customerSlug;
-	if (!customerSlug) throw new Error(".mosaic-workspace.json is missing customerSlug. Recreate the monorepo with a current @percepta/create.");
-	const github = args.github ?? createInfraGitHubApi(resolveGitHubToken());
-	const blueprintName = `${customerSlug}-os`;
-	const branchName = `blueberry/register-${customerSlug}-${appName}-database`;
-	const targetPath = [
-		"ryvn",
-		"definitions",
-		customerSlug,
-		"blueprints",
-		`${blueprintName}.blueprint.yaml`
-	].join("/");
-	const mainFile = await github.getFile(targetPath, INFRA_BASE_BRANCH);
-	if (!mainFile) throw new Error(`${targetPath} does not exist in ${INFRA_REPOSITORY}. Run \`pnpm mosaic infra register-os-blueprint\` and merge that infra PR first.`);
-	const content = addAppDatabaseToBlueprint(mainFile.content, appName);
-	if (content === mainFile.content) return {
-		appName,
-		blueprintName,
-		branchName,
-		customerSlug,
-		pullRequestUrl: null,
-		repository: INFRA_REPOSITORY,
-		status: "already_registered",
-		targetPath
-	};
-	const pullRequest = await createOrUpdateInfraPullRequest({
-		baseFileSha: mainFile.sha,
-		branchName,
-		content,
-		github,
-		message: `Register ${appName} app database`,
-		targetPath,
-		title: `Register ${appName} app database`,
-		body: [
-			`Registers the ${appName} app database in ${blueprintName}.`,
-			"",
-			"Generated by `mosaic infra register-app`."
-		].join("\n")
-	});
-	return {
-		appName,
-		blueprintName,
-		branchName,
-		customerSlug,
-		pullRequestUrl: pullRequest.pullRequestUrl,
-		repository: INFRA_REPOSITORY,
-		status: pullRequest.status,
-		targetPath
-	};
-}
-async function registerAppCommand(appName) {
-	try {
-		const result = await registerApp(appName);
-		if (result.status === "already_registered") {
-			console.log(chalk.green("✔"), `${result.appName} is already registered in ${result.repository} at`, chalk.cyan(result.targetPath));
-			return;
-		}
-		const verb = result.status === "created_pr" ? "Created" : "Updated existing";
-		console.log(chalk.green("✔"), `${verb} infra PR for ${result.appName}:`, chalk.cyan(result.pullRequestUrl));
-	} catch (error) {
-		console.error(chalk.red("Error:"), error.message);
-		process.exit(1);
-	}
-}
-function addAppDatabaseToBlueprint(blueprintContent, appName) {
-	const document = parseDocument(blueprintContent);
-	if (document.errors.length > 0) throw new Error(`Invalid OS blueprint YAML: ${document.errors.map((error) => error.message).join("; ")}`);
-	const spec = document.get("spec", true);
-	if (!isMap(spec)) throw new Error("OS blueprint must include a spec map.");
-	const inputs = spec.get("inputs", true);
-	if (!isSeq(inputs)) throw new Error("OS blueprint spec.inputs must be a sequence.");
-	const appDatabasesInput = inputs.items.find((item) => isMap(item) && item.get("name") === "app_databases");
-	if (!isMap(appDatabasesInput)) throw new Error("OS blueprint must include an app_databases input.");
-	const defaultValue = appDatabasesInput.get("default", true);
-	if (!isMap(defaultValue)) throw new Error("OS blueprint app_databases default must be a map.");
-	if (defaultValue.has(appName)) return blueprintContent;
-	defaultValue.flow = false;
-	const appDatabaseValue = document.createNode({});
-	if (isMap(appDatabaseValue)) appDatabaseValue.flow = true;
-	defaultValue.set(appName, appDatabaseValue);
-	return document.toString();
-}
-function normalizeAppName(appNameInput) {
-	const appName = toKebabCase(appNameInput);
-	const validation = validateProjectName(appName);
-	if (!validation.valid) throw new Error(`Invalid app name: ${validation.error}`);
-	return appName;
-}
-//#endregion
-export { registerAppCommand };
-
-//# sourceMappingURL=register-app-C7ZBpAaZ.js.map

package/dist/register-app-C7ZBpAaZ.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"register-app-C7ZBpAaZ.js","names":[],"sources":["../src/commands/infra/register-app.ts"],"sourcesContent":["import chalk from \"chalk\";\nimport { isMap, isSeq, parseDocument } from \"yaml\";\nimport { toKebabCase } from \"../../utils/case-converters.js\";\nimport { detectMonorepo } from \"../../utils/detect-monorepo.js\";\nimport { validateProjectName } from \"../../utils/validate.js\";\nimport { readWorkspaceManifest } from \"../../utils/workspace-manifest.js\";\nimport {\n  createInfraGitHubApi,\n  createOrUpdateInfraPullRequest,\n  INFRA_BASE_BRANCH,\n  INFRA_REPOSITORY,\n  type InfraGitHubApi,\n  resolveGitHubToken,\n} from \"./github.js\";\n\nexport interface RegisterAppResult {\n  appName: string;\n  blueprintName: string;\n  branchName: string;\n  customerSlug: string;\n  pullRequestUrl: string | null;\n  repository: typeof INFRA_REPOSITORY;\n  status: \"already_registered\" | \"created_pr\" | \"updated_pr\";\n  targetPath: string;\n}\n\nexport async function registerApp(\n  appNameInput: string,\n  args: {\n    cwd?: string;\n    github?: InfraGitHubApi;\n  } = {},\n): Promise<RegisterAppResult> {\n  const appName = normalizeAppName(appNameInput);\n  const cwd = args.cwd ?? process.cwd();\n  const monorepoContext = await detectMonorepo(cwd);\n  if (!monorepoContext.found || !monorepoContext.rootDir) {\n    throw new Error(\n      \"Run this command from a Mosaic customer monorepo with a .mosaic-workspace.json file.\",\n    );\n  }\n\n  const workspaceManifest = await readWorkspaceManifest(\n    monorepoContext.rootDir,\n  );\n  const customerSlug = workspaceManifest?.customerSlug;\n  if (!customerSlug) {\n    throw new Error(\n      \".mosaic-workspace.json is missing customerSlug. Recreate the monorepo with a current @percepta/create.\",\n    );\n  }\n\n  const github = args.github ?? createInfraGitHubApi(resolveGitHubToken());\n  const blueprintName = `${customerSlug}-os`;\n  const branchName = `blueberry/register-${customerSlug}-${appName}-database`;\n  const targetPath = [\n    \"ryvn\",\n    \"definitions\",\n    customerSlug,\n    \"blueprints\",\n    `${blueprintName}.blueprint.yaml`,\n  ].join(\"/\");\n\n  const mainFile = await github.getFile(targetPath, INFRA_BASE_BRANCH);\n  if (!mainFile) {\n    throw new Error(\n      `${targetPath} does not exist in ${INFRA_REPOSITORY}. Run \\`pnpm mosaic infra register-os-blueprint\\` and merge that infra PR first.`,\n    );\n  }\n\n  const content = addAppDatabaseToBlueprint(mainFile.content, appName);\n  if (content === mainFile.content) {\n    return {\n      appName,\n      blueprintName,\n      branchName,\n      customerSlug,\n      pullRequestUrl: null,\n      repository: INFRA_REPOSITORY,\n      status: \"already_registered\",\n      targetPath,\n    };\n  }\n\n  const pullRequest = await createOrUpdateInfraPullRequest({\n    baseFileSha: mainFile.sha,\n    branchName,\n    content,\n    github,\n    message: `Register ${appName} app database`,\n    targetPath,\n    title: `Register ${appName} app database`,\n    body: [\n      `Registers the ${appName} app database in ${blueprintName}.`,\n      \"\",\n      \"Generated by `mosaic infra register-app`.\",\n    ].join(\"\\n\"),\n  });\n\n  return {\n    appName,\n    blueprintName,\n    branchName,\n    customerSlug,\n    pullRequestUrl: pullRequest.pullRequestUrl,\n    repository: INFRA_REPOSITORY,\n    status: pullRequest.status,\n    targetPath,\n  };\n}\n\nexport async function registerAppCommand(appName: string): Promise<void> {\n  try {\n    const result = await registerApp(appName);\n\n    if (result.status === \"already_registered\") {\n      console.log(\n        chalk.green(\"✔\"),\n        `${result.appName} is already registered in ${result.repository} at`,\n        chalk.cyan(result.targetPath),\n      );\n      return;\n    }\n\n    const verb =\n      result.status === \"created_pr\" ? \"Created\" : \"Updated existing\";\n    console.log(\n      chalk.green(\"✔\"),\n      `${verb} infra PR for ${result.appName}:`,\n      chalk.cyan(result.pullRequestUrl),\n    );\n  } catch (error) {\n    console.error(chalk.red(\"Error:\"), (error as Error).message);\n    process.exit(1);\n  }\n}\n\nexport function addAppDatabaseToBlueprint(\n  blueprintContent: string,\n  appName: string,\n): string {\n  const document = parseDocument(blueprintContent);\n  if (document.errors.length > 0) {\n    throw new Error(\n      `Invalid OS blueprint YAML: ${document.errors.map((error) => error.message).join(\"; \")}`,\n    );\n  }\n\n  const spec = document.get(\"spec\", true);\n  if (!isMap(spec)) {\n    throw new Error(\"OS blueprint must include a spec map.\");\n  }\n\n  const inputs = spec.get(\"inputs\", true);\n  if (!isSeq(inputs)) {\n    throw new Error(\"OS blueprint spec.inputs must be a sequence.\");\n  }\n\n  const appDatabasesInput = inputs.items.find(\n    (item) => isMap(item) && item.get(\"name\") === \"app_databases\",\n  );\n  if (!isMap(appDatabasesInput)) {\n    throw new Error(\"OS blueprint must include an app_databases input.\");\n  }\n\n  const defaultValue = appDatabasesInput.get(\"default\", true);\n  if (!isMap(defaultValue)) {\n    throw new Error(\"OS blueprint app_databases default must be a map.\");\n  }\n\n  if (defaultValue.has(appName)) return blueprintContent;\n\n  defaultValue.flow = false;\n  const appDatabaseValue = document.createNode({});\n  if (isMap(appDatabaseValue)) appDatabaseValue.flow = true;\n  defaultValue.set(appName, appDatabaseValue);\n\n  return document.toString();\n}\n\nfunction normalizeAppName(appNameInput: string): string {\n  const appName = toKebabCase(appNameInput);\n  const validation = validateProjectName(appName);\n  if (!validation.valid) {\n    throw new Error(`Invalid app name: ${validation.error}`);\n  }\n  return appName;\n}\n"],"mappings":";;;;;;;AA0BA,eAAsB,YACpB,cACA,OAGI,EAAE,EACsB;CAC5B,MAAM,UAAU,iBAAiB,aAAa;CAE9C,MAAM,kBAAkB,MAAM,eADlB,KAAK,OAAO,QAAQ,KAAK,CACY;AACjD,KAAI,CAAC,gBAAgB,SAAS,CAAC,gBAAgB,QAC7C,OAAM,IAAI,MACR,uFACD;CAMH,MAAM,gBAAe,MAHW,sBAC9B,gBAAgB,QACjB,GACuC;AACxC,KAAI,CAAC,aACH,OAAM,IAAI,MACR,yGACD;CAGH,MAAM,SAAS,KAAK,UAAU,qBAAqB,oBAAoB,CAAC;CACxE,MAAM,gBAAgB,GAAG,aAAa;CACtC,MAAM,aAAa,sBAAsB,aAAa,GAAG,QAAQ;CACjE,MAAM,aAAa;EACjB;EACA;EACA;EACA;EACA,GAAG,cAAc;EAClB,CAAC,KAAK,IAAI;CAEX,MAAM,WAAW,MAAM,OAAO,QAAQ,YAAY,kBAAkB;AACpE,KAAI,CAAC,SACH,OAAM,IAAI,MACR,GAAG,WAAW,qBAAqB,iBAAiB,kFACrD;CAGH,MAAM,UAAU,0BAA0B,SAAS,SAAS,QAAQ;AACpE,KAAI,YAAY,SAAS,QACvB,QAAO;EACL;EACA;EACA;EACA;EACA,gBAAgB;EAChB,YAAY;EACZ,QAAQ;EACR;EACD;CAGH,MAAM,cAAc,MAAM,+BAA+B;EACvD,aAAa,SAAS;EACtB;EACA;EACA;EACA,SAAS,YAAY,QAAQ;EAC7B;EACA,OAAO,YAAY,QAAQ;EAC3B,MAAM;GACJ,iBAAiB,QAAQ,mBAAmB,cAAc;GAC1D;GACA;GACD,CAAC,KAAK,KAAK;EACb,CAAC;AAEF,QAAO;EACL;EACA;EACA;EACA;EACA,gBAAgB,YAAY;EAC5B,YAAY;EACZ,QAAQ,YAAY;EACpB;EACD;;AAGH,eAAsB,mBAAmB,SAAgC;AACvE,KAAI;EACF,MAAM,SAAS,MAAM,YAAY,QAAQ;AAEzC,MAAI,OAAO,WAAW,sBAAsB;AAC1C,WAAQ,IACN,MAAM,MAAM,IAAI,EAChB,GAAG,OAAO,QAAQ,4BAA4B,OAAO,WAAW,MAChE,MAAM,KAAK,OAAO,WAAW,CAC9B;AACD;;EAGF,MAAM,OACJ,OAAO,WAAW,eAAe,YAAY;AAC/C,UAAQ,IACN,MAAM,MAAM,IAAI,EAChB,GAAG,KAAK,gBAAgB,OAAO,QAAQ,IACvC,MAAM,KAAK,OAAO,eAAe,CAClC;UACM,OAAO;AACd,UAAQ,MAAM,MAAM,IAAI,SAAS,EAAG,MAAgB,QAAQ;AAC5D,UAAQ,KAAK,EAAE;;;AAInB,SAAgB,0BACd,kBACA,SACQ;CACR,MAAM,WAAW,cAAc,iBAAiB;AAChD,KAAI,SAAS,OAAO,SAAS,EAC3B,OAAM,IAAI,MACR,8BAA8B,SAAS,OAAO,KAAK,UAAU,MAAM,QAAQ,CAAC,KAAK,KAAK,GACvF;CAGH,MAAM,OAAO,SAAS,IAAI,QAAQ,KAAK;AACvC,KAAI,CAAC,MAAM,KAAK,CACd,OAAM,IAAI,MAAM,wCAAwC;CAG1D,MAAM,SAAS,KAAK,IAAI,UAAU,KAAK;AACvC,KAAI,CAAC,MAAM,OAAO,CAChB,OAAM,IAAI,MAAM,+CAA+C;CAGjE,MAAM,oBAAoB,OAAO,MAAM,MACpC,SAAS,MAAM,KAAK,IAAI,KAAK,IAAI,OAAO,KAAK,gBAC/C;AACD,KAAI,CAAC,MAAM,kBAAkB,CAC3B,OAAM,IAAI,MAAM,oDAAoD;CAGtE,MAAM,eAAe,kBAAkB,IAAI,WAAW,KAAK;AAC3D,KAAI,CAAC,MAAM,aAAa,CACtB,OAAM,IAAI,MAAM,oDAAoD;AAGtE,KAAI,aAAa,IAAI,QAAQ,CAAE,QAAO;AAEtC,cAAa,OAAO;CACpB,MAAM,mBAAmB,SAAS,WAAW,EAAE,CAAC;AAChD,KAAI,MAAM,iBAAiB,CAAE,kBAAiB,OAAO;AACrD,cAAa,IAAI,SAAS,iBAAiB;AAE3C,QAAO,SAAS,UAAU;;AAG5B,SAAS,iBAAiB,cAA8B;CACtD,MAAM,UAAU,YAAY,aAAa;CACzC,MAAM,aAAa,oBAAoB,QAAQ;AAC/C,KAAI,CAAC,WAAW,MACd,OAAM,IAAI,MAAM,qBAAqB,WAAW,QAAQ;AAE1D,QAAO"}