@quiltdata/benchling-webhook 0.7.7 → 0.7.9

package/dist/lib/wizard/phase4-validation.js

@@ -0,0 +1,294 @@
+"use strict";
+/**
+ * Phase 4: Validation
+ *
+ * Validates all collected parameters before proceeding to mode decision.
+ *
+ * @module wizard/phase4-validation
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runValidation = runValidation;
+const https = __importStar(require("https"));
+const chalk_1 = __importDefault(require("chalk"));
+const client_s3_1 = require("@aws-sdk/client-s3");
+/**
+ * Detects the actual region of an S3 bucket
+ */
+async function detectBucketRegion(bucketName, awsProfile) {
+    try {
+        const clientConfig = {
+            region: "us-east-1", // Use us-east-1 as the API endpoint for GetBucketLocation
+        };
+        if (awsProfile) {
+            const { fromIni } = await Promise.resolve().then(() => __importStar(require("@aws-sdk/credential-providers")));
+            clientConfig.credentials = fromIni({ profile: awsProfile });
+        }
+        const s3Client = new client_s3_1.S3Client(clientConfig);
+        const command = new client_s3_1.GetBucketLocationCommand({ Bucket: bucketName });
+        const response = await s3Client.send(command);
+        // AWS returns null for us-east-1, otherwise returns the region constraint
+        const region = response.LocationConstraint || "us-east-1";
+        return region;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Validates Benchling tenant accessibility
+ */
+async function validateBenchlingTenant(tenant) {
+    const result = { isValid: false, errors: [], warnings: [] };
+    if (!tenant || tenant.trim().length === 0) {
+        result.errors.push("Tenant name cannot be empty");
+        return result;
+    }
+    if (!/^[a-zA-Z0-9-_]+$/.test(tenant)) {
+        result.errors.push("Tenant name contains invalid characters (only alphanumeric, dash, underscore allowed)");
+        return result;
+    }
+    const tenantUrl = `https://${tenant}.benchling.com`;
+    console.log(`  Testing Benchling tenant URL: ${tenantUrl}`);
+    return new Promise((resolve) => {
+        https.get(tenantUrl, { timeout: 5000 }, (res) => {
+            if (res.statusCode === 200 || res.statusCode === 302 || res.statusCode === 301) {
+                result.isValid = true;
+                console.log(`  ✓ Tenant URL accessible: ${tenantUrl}`);
+            }
+            else {
+                result.warnings.push(`Tenant URL ${tenantUrl} returned status ${res.statusCode}`);
+                result.isValid = true; // Consider this a warning, not an error
+            }
+            resolve(result);
+        }).on("error", (error) => {
+            result.warnings.push(`Could not verify tenant URL ${tenantUrl}: ${error.message}`);
+            result.isValid = true; // Allow proceeding with warning
+            resolve(result);
+        });
+    });
+}
+/**
+ * Validates Benchling OAuth credentials
+ */
+async function validateBenchlingCredentials(tenant, clientId, clientSecret) {
+    const result = { isValid: false, errors: [], warnings: [] };
+    if (!clientId || clientId.trim().length === 0) {
+        result.errors.push("Client ID cannot be empty");
+    }
+    if (!clientSecret || clientSecret.trim().length === 0) {
+        result.errors.push("Client secret cannot be empty");
+    }
+    if (result.errors.length > 0) {
+        return result;
+    }
+    const tokenUrl = `https://${tenant}.benchling.com/api/v2/token`;
+    const authString = Buffer.from(`${clientId}:${clientSecret}`).toString("base64");
+    console.log(`  Testing OAuth credentials: ${tokenUrl} (Client ID: ${clientId.substring(0, 8)}...)`);
+    return new Promise((resolve) => {
+        const postData = "grant_type=client_credentials";
+        const options = {
+            method: "POST",
+            headers: {
+                "Authorization": `Basic ${authString}`,
+                "Content-Type": "application/x-www-form-urlencoded",
+                "Content-Length": postData.length,
+            },
+            timeout: 10000,
+        };
+        const req = https.request(tokenUrl, options, (res) => {
+            let data = "";
+            res.on("data", (chunk) => {
+                data += chunk;
+            });
+            res.on("end", () => {
+                if (res.statusCode === 200) {
+                    result.isValid = true;
+                    console.log("  ✓ OAuth credentials validated successfully");
+                }
+                else {
+                    let errorDetail = data.substring(0, 200);
+                    try {
+                        const parsed = JSON.parse(data);
+                        if (parsed.error_description) {
+                            errorDetail = parsed.error_description;
+                        }
+                    }
+                    catch {
+                        // Keep the raw data if not JSON
+                    }
+                    result.errors.push(`OAuth validation failed for tenant '${tenant}':\n` +
+                        `    Tested: POST ${tokenUrl}\n` +
+                        `    Status: ${res.statusCode}\n` +
+                        `    Error: ${errorDetail}\n` +
+                        "    Hint: Verify Client ID and Secret are correct and match the app definition");
+                }
+                resolve(result);
+            });
+        });
+        req.on("error", (error) => {
+            result.warnings.push(`Could not validate OAuth credentials at ${tokenUrl}: ${error.message}\n` +
+                "    This may be a network issue. Credentials will be validated during deployment.");
+            result.isValid = true; // Allow proceeding with warning
+            resolve(result);
+        });
+        req.write(postData);
+        req.end();
+    });
+}
+/**
+ * Validates S3 bucket access
+ */
+async function validateS3BucketAccess(bucketName, region, awsProfile) {
+    const result = { isValid: false, errors: [], warnings: [] };
+    if (!bucketName || bucketName.trim().length === 0) {
+        result.errors.push("Bucket name cannot be empty");
+        return result;
+    }
+    console.log(`  Detecting region for bucket: ${bucketName}`);
+    const actualRegion = await detectBucketRegion(bucketName, awsProfile);
+    let regionToUse = region;
+    if (actualRegion && actualRegion !== region) {
+        console.log(`  ⚠ Bucket is in ${actualRegion}, not ${region} - using detected region`);
+        regionToUse = actualRegion;
+    }
+    else if (actualRegion) {
+        console.log(`  ✓ Bucket region confirmed: ${actualRegion}`);
+    }
+    try {
+        const clientConfig = { region: regionToUse };
+        if (awsProfile) {
+            const { fromIni } = await Promise.resolve().then(() => __importStar(require("@aws-sdk/credential-providers")));
+            clientConfig.credentials = fromIni({ profile: awsProfile });
+        }
+        const s3Client = new client_s3_1.S3Client(clientConfig);
+        console.log(`  Testing S3 bucket access: ${bucketName} (region: ${regionToUse}${awsProfile ? `, profile: ${awsProfile}` : ""})`);
+        const headCommand = new client_s3_1.HeadBucketCommand({ Bucket: bucketName });
+        await s3Client.send(headCommand);
+        console.log(`  ✓ S3 bucket accessible: ${bucketName}`);
+        const listCommand = new client_s3_1.ListObjectsV2Command({
+            Bucket: bucketName,
+            MaxKeys: 1,
+        });
+        await s3Client.send(listCommand);
+        console.log("  ✓ S3 bucket list permission confirmed");
+        result.isValid = true;
+    }
+    catch (error) {
+        const err = error;
+        const errorCode = err.Code || err.name || "UnknownError";
+        const errorMsg = err.message || "Unknown error occurred";
+        const statusCode = err.$metadata?.httpStatusCode;
+        let hint = "Verify bucket exists, region is correct, and you have s3:GetBucketLocation and s3:ListBucket permissions";
+        if (errorCode === "NoSuchBucket" || errorMsg.includes("does not exist")) {
+            hint = "The bucket does not exist. Verify the bucket name is correct.";
+        }
+        else if (errorCode === "AccessDenied" || errorCode === "403" || statusCode === 403) {
+            hint = "Access denied. Verify your AWS credentials have s3:GetBucketLocation and s3:ListBucket permissions for this bucket.";
+        }
+        else if (errorCode === "PermanentRedirect" || errorCode === "301" || statusCode === 301) {
+            hint = `The bucket exists but is in a different region. Try specifying the correct region for bucket '${bucketName}'.`;
+        }
+        result.errors.push(`S3 bucket validation failed for '${bucketName}' in region '${regionToUse}'${awsProfile ? ` (AWS profile: ${awsProfile})` : ""}:\n` +
+            `    Error: ${errorCode}${statusCode ? ` (HTTP ${statusCode})` : ""}\n` +
+            `    Message: ${errorMsg}\n` +
+            "    Tested: HeadBucket operation\n" +
+            `    Hint: ${hint}`);
+    }
+    return result;
+}
+/**
+ * Phase 4: Validation
+ *
+ * Responsibilities:
+ * - Validate Benchling credentials (OAuth test)
+ * - Validate S3 bucket access
+ * - Validate app definition ID exists
+ * - Return validation result with errors
+ *
+ * @param input - Validation input
+ * @returns Validation result
+ */
+async function runValidation(input) {
+    const { stackQuery, parameters, awsProfile } = input;
+    const result = {
+        success: true,
+        errors: [],
+        warnings: [],
+        shouldExitForManifest: false,
+    };
+    // Validate Benchling tenant
+    const tenantValidation = await validateBenchlingTenant(parameters.benchling.tenant);
+    if (!tenantValidation.isValid) {
+        result.success = false;
+        result.errors.push(...tenantValidation.errors);
+    }
+    result.warnings.push(...tenantValidation.warnings);
+    // Validate OAuth credentials
+    const credValidation = await validateBenchlingCredentials(parameters.benchling.tenant, parameters.benchling.clientId, parameters.benchling.clientSecret);
+    if (!credValidation.isValid) {
+        result.success = false;
+        result.errors.push(...credValidation.errors);
+    }
+    result.warnings.push(...credValidation.warnings);
+    // Validate S3 bucket access
+    const bucketValidation = await validateS3BucketAccess(parameters.packages.bucket, parameters.deployment.region, awsProfile);
+    if (!bucketValidation.isValid) {
+        result.success = false;
+        result.errors.push(...bucketValidation.errors);
+    }
+    result.warnings.push(...bucketValidation.warnings);
+    if (result.success) {
+        console.log(chalk_1.default.green("✓ Configuration validated successfully\n"));
+    }
+    else {
+        console.error(chalk_1.default.red("\n❌ Configuration validation failed:"));
+        console.error(chalk_1.default.gray("   The following validations were performed:"));
+        console.error(chalk_1.default.gray(`   - Benchling tenant: ${parameters.benchling.tenant}`));
+        console.error(chalk_1.default.gray(`   - OAuth credentials: Client ID ${parameters.benchling.clientId.substring(0, 8)}...`));
+        console.error(chalk_1.default.gray(`   - S3 bucket: ${parameters.packages.bucket} (region: ${parameters.deployment.region})`));
+        console.error("");
+        result.errors.forEach((err) => console.error(`${err}\n`));
+    }
+    if (result.warnings.length > 0) {
+        console.warn(chalk_1.default.yellow("\n⚠ Warnings:"));
+        result.warnings.forEach((warn) => console.warn(`  ${warn}\n`));
+    }
+    return result;
+}
+//# sourceMappingURL=phase4-validation.js.map

package/dist/lib/wizard/phase4-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"phase4-validation.js","sourceRoot":"","sources":["../../../lib/wizard/phase4-validation.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwPH,sCA4DC;AAlTD,6CAA+B;AAC/B,kDAA0B;AAC1B,kDAAiH;AAIjH;;GAEG;AACH,KAAK,UAAU,kBAAkB,CAAC,UAAkB,EAAE,UAAmB;IACrE,IAAI,CAAC;QACD,MAAM,YAAY,GAAoE;YAClF,MAAM,EAAE,WAAW,EAAE,0DAA0D;SAClF,CAAC;QAEF,IAAI,UAAU,EAAE,CAAC;YACb,MAAM,EAAE,OAAO,EAAE,GAAG,wDAAa,+BAA+B,GAAC,CAAC;YAClE,YAAY,CAAC,WAAW,GAAG,OAAO,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,oBAAQ,CAAC,YAAY,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,oCAAwB,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAE9C,0EAA0E;QAC1E,MAAM,MAAM,GAAG,QAAQ,CAAC,kBAAkB,IAAI,WAAW,CAAC;QAC1D,OAAO,MAAM,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,IAAI,CAAC;IAChB,CAAC;AACL,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,uBAAuB,CAAC,MAAc;IACjD,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAc,EAAE,QAAQ,EAAE,EAAc,EAAE,CAAC;IAEpF,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QAClD,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,uFAAuF,CAAC,CAAC;QAC5G,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,MAAM,SAAS,GAAG,WAAW,MAAM,gBAAgB,CAAC;IACpD,OAAO,CAAC,GAAG,CAAC,mCAAmC,SAAS,EAAE,CAAC,CAAC;IAE5D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC3B,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;YAC5C,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;gBAC7E,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;gBACtB,OAAO,CAAC,GAAG,CAAC,8BAA8B,SAAS,EAAE,CAAC,CAAC;YAC3D,CAAC;iBAAM,CAAC;gBACJ,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,cAAc,SAAS,oBAAoB,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;gBAClF,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,wCAAwC;YACnE,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,CAAC;QACpB,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACrB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,+BAA+B,SAAS,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACnF,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,gCAAgC;YACvD,OAAO,CAAC,MAAM,CAAC,CAAC;QACpB,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,4BAA4B,CACvC,MAAc,EACd,QAAgB,EAChB,YAAoB;IAEpB,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAc,EAAE,QAAQ,EAAE,EAAc,EAAE,CAAC;IAEpF,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IACxD,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,MAAM,QAAQ,GAAG,WAAW,MAAM,6BAA6B,CAAC;IAChE,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,IAAI,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACjF,OAAO,CAAC,GAAG,CAAC,gCAAgC,QAAQ,gBAAgB,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IAEpG,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC3B,MAAM,QAAQ,GAAG,+BAA+B,CAAC;QAEjD,MAAM,OAAO,GAAyB;YAClC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACL,eAAe,EAAE,SAAS,UAAU,EAAE;gBACtC,cAAc,EAAE,mCAAmC;gBACnD,gBAAgB,EAAE,QAAQ,CAAC,MAAM;aACpC;YACD,OAAO,EAAE,KAAK;SACjB,CAAC;QAEF,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACjD,IAAI,IAAI,GAAG,EAAE,CAAC;YAEd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;gBACrB,IAAI,IAAI,KAAK,CAAC;YAClB,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACf,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;oBACzB,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;oBACtB,OAAO,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;gBAChE,CAAC;qBAAM,CAAC;oBACJ,IAAI,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;oBACzC,IAAI,CAAC;wBACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;wBAChC,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;4BAC3B,WAAW,GAAG,MAAM,CAAC,iBAAiB,CAAC;wBAC3C,CAAC;oBACL,CAAC;oBAAC,MAAM,CAAC;wBACL,gCAAgC;oBACpC,CAAC;oBAED,MAAM,CAAC,MAAM,CAAC,IAAI,CACd,uCAAuC,MAAM,MAAM;wBACnD,oBAAoB,QAAQ,IAAI;wBAChC,eAAe,GAAG,CAAC,UAAU,IAAI;wBACjC,cAAc,WAAW,IAAI;wBAC7B,gFAAgF,CACnF,CAAC;gBACN,CAAC;gBACD,OAAO,CAAC,MAAM,CAAC,CAAC;YACpB,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACtB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAChB,2CAA2C,QAAQ,KAAK,KAAK,CAAC,OAAO,IAAI;gBACzE,mFAAmF,CACtF,CAAC;YACF,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,gCAAgC;YACvD,OAAO,CAAC,MAAM,CAAC,CAAC;QACpB,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACpB,GAAG,CAAC,GAAG,EAAE,CAAC;IACd,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,sBAAsB,CACjC,UAAkB,EAClB,MAAc,EACd,UAAmB;IAEnB,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAc,EAAE,QAAQ,EAAE,EAAc,EAAE,CAAC;IAEpF,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QAClD,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,kCAAkC,UAAU,EAAE,CAAC,CAAC;IAC5D,MAAM,YAAY,GAAG,MAAM,kBAAkB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IAEtE,IAAI,WAAW,GAAG,MAAM,CAAC;IACzB,IAAI,YAAY,IAAI,YAAY,KAAK,MAAM,EAAE,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,oBAAoB,YAAY,SAAS,MAAM,0BAA0B,CAAC,CAAC;QACvF,WAAW,GAAG,YAAY,CAAC;IAC/B,CAAC;SAAM,IAAI,YAAY,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,gCAAgC,YAAY,EAAE,CAAC,CAAC;IAChE,CAAC;IAED,IAAI,CAAC;QACD,MAAM,YAAY,GAAoE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QAE9G,IAAI,UAAU,EAAE,CAAC;YACb,MAAM,EAAE,OAAO,EAAE,GAAG,wDAAa,+BAA+B,GAAC,CAAC;YAClE,YAAY,CAAC,WAAW,GAAG,OAAO,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,oBAAQ,CAAC,YAAY,CAAC,CAAC;QAE5C,OAAO,CAAC,GAAG,CAAC,+BAA+B,UAAU,aAAa,WAAW,GAAG,UAAU,CAAC,CAAC,CAAC,cAAc,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACjI,MAAM,WAAW,GAAG,IAAI,6BAAiB,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QAClE,MAAM,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAEjC,OAAO,CAAC,GAAG,CAAC,6BAA6B,UAAU,EAAE,CAAC,CAAC;QAEvD,MAAM,WAAW,GAAG,IAAI,gCAAoB,CAAC;YACzC,MAAM,EAAE,UAAU;YAClB,OAAO,EAAE,CAAC;SACb,CAAC,CAAC;QACH,MAAM,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAEjC,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;QAEvD,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IAC1B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,KAA0F,CAAC;QACvG,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,cAAc,CAAC;QACzD,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,IAAI,wBAAwB,CAAC;QACzD,MAAM,UAAU,GAAG,GAAG,CAAC,SAAS,EAAE,cAAc,CAAC;QAEjD,IAAI,IAAI,GAAG,0GAA0G,CAAC;QACtH,IAAI,SAAS,KAAK,cAAc,IAAI,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACtE,IAAI,GAAG,+DAA+D,CAAC;QAC3E,CAAC;aAAM,IAAI,SAAS,KAAK,cAAc,IAAI,SAAS,KAAK,KAAK,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;YACnF,IAAI,GAAG,qHAAqH,CAAC;QACjI,CAAC;aAAM,IAAI,SAAS,KAAK,mBAAmB,IAAI,SAAS,KAAK,KAAK,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;YACxF,IAAI,GAAG,iGAAiG,UAAU,IAAI,CAAC;QAC3H,CAAC;QAED,MAAM,CAAC,MAAM,CAAC,IAAI,CACd,oCAAoC,UAAU,gBAAgB,WAAW,IAAI,UAAU,CAAC,CAAC,CAAC,kBAAkB,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK;YACnI,cAAc,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,UAAU,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI;YACvE,gBAAgB,QAAQ,IAAI;YAC5B,oCAAoC;YACpC,aAAa,IAAI,EAAE,CACtB,CAAC;IACN,CAAC;IAED,OAAO,MAAM,CAAC;AAClB,CAAC;AAED;;;;;;;;;;;GAWG;AACI,KAAK,UAAU,aAAa,CAAC,KAAsB;IACtD,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;IAErD,MAAM,MAAM,GAAqB;QAC7B,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,EAAE;QACV,QAAQ,EAAE,EAAE;QACZ,qBAAqB,EAAE,KAAK;KAC/B,CAAC;IAEF,4BAA4B;IAC5B,MAAM,gBAAgB,GAAG,MAAM,uBAAuB,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACpF,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC;QAC5B,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC;QACvB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAEnD,6BAA6B;IAC7B,MAAM,cAAc,GAAG,MAAM,4BAA4B,CACrD,UAAU,CAAC,SAAS,CAAC,MAAM,EAC3B,UAAU,CAAC,SAAS,CAAC,QAAQ,EAC7B,UAAU,CAAC,SAAS,CAAC,YAAY,CACpC,CAAC;IACF,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;QAC1B,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC;QACvB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IAEjD,4BAA4B;IAC5B,MAAM,gBAAgB,GAAG,MAAM,sBAAsB,CACjD,UAAU,CAAC,QAAQ,CAAC,MAAM,EAC1B,UAAU,CAAC,UAAU,CAAC,MAAM,EAC5B,UAAU,CACb,CAAC;IACF,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC;QAC5B,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC;QACvB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAEnD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC,CAAC;IACzE,CAAC;SAAM,CAAC;QACJ,OAAO,CAAC,KAAK,CAAC,eAAK,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC,CAAC;QACjE,OAAO,CAAC,KAAK,CAAC,eAAK,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC,CAAC;QAC1E,OAAO,CAAC,KAAK,CAAC,eAAK,CAAC,IAAI,CAAC,0BAA0B,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACnF,OAAO,CAAC,KAAK,CAAC,eAAK,CAAC,IAAI,CAAC,qCAAqC,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QACnH,OAAO,CAAC,KAAK,CAAC,eAAK,CAAC,IAAI,CAAC,mBAAmB,UAAU,CAAC,QAAQ,CAAC,MAAM,aAAa,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACrH,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC,eAAK,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,OAAO,MAAM,CAAC;AAClB,CAAC"}

package/dist/lib/wizard/phase5-mode-decision.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Phase 5: Mode Decision
+ *
+ * Determines whether to use integrated mode (existing BenchlingSecret in Quilt stack)
+ * or standalone mode (create new dedicated secret).
+ *
+ * @module wizard/phase5-mode-decision
+ */
+import { ModeDecisionInput, ModeDecisionResult } from "./types";
+/**
+ * Phase 5: Mode Decision
+ *
+ * Responsibilities:
+ * - Determine if integrated mode is available (BenchlingSecret exists)
+ * - Ask user to choose mode (if applicable)
+ * - Return mode decision
+ *
+ * @param input - Mode decision input
+ * @returns Mode decision result
+ */
+export declare function runModeDecision(input: ModeDecisionInput): Promise<ModeDecisionResult>;
+//# sourceMappingURL=phase5-mode-decision.d.ts.map

package/dist/lib/wizard/phase5-mode-decision.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"phase5-mode-decision.d.ts","sourceRoot":"","sources":["../../../lib/wizard/phase5-mode-decision.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAyBhE;;;;;;;;;;GAUG;AACH,wBAAsB,eAAe,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAmB3F"}

package/dist/lib/wizard/phase5-mode-decision.js

@@ -0,0 +1,65 @@
+"use strict";
+/**
+ * Phase 5: Mode Decision
+ *
+ * Determines whether to use integrated mode (existing BenchlingSecret in Quilt stack)
+ * or standalone mode (create new dedicated secret).
+ *
+ * @module wizard/phase5-mode-decision
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runModeDecision = runModeDecision;
+const inquirer_1 = __importDefault(require("inquirer"));
+const chalk_1 = __importDefault(require("chalk"));
+/**
+ * Prompts user whether to use existing BenchlingSecret or create a new one
+ *
+ * @param yes - If true, auto-confirm using existing secret
+ * @returns True if user wants to use existing secret, false otherwise
+ */
+async function shouldUseExisting(yes) {
+    if (yes) {
+        return true;
+    }
+    const { useExisting } = await inquirer_1.default.prompt([
+        {
+            type: "confirm",
+            name: "useExisting",
+            message: "Using Webhook built into the Quilt Stack (update existing secret)?",
+            default: true,
+        },
+    ]);
+    return useExisting;
+}
+/**
+ * Phase 5: Mode Decision
+ *
+ * Responsibilities:
+ * - Determine if integrated mode is available (BenchlingSecret exists)
+ * - Ask user to choose mode (if applicable)
+ * - Return mode decision
+ *
+ * @param input - Mode decision input
+ * @returns Mode decision result
+ */
+async function runModeDecision(input) {
+    const { stackQuery, yes = false } = input;
+    const hasBenchlingSecret = Boolean(stackQuery.benchlingSecretArn);
+    // Use integrated mode if: (1) secret exists AND (2) user confirms usage
+    if (hasBenchlingSecret && await shouldUseExisting(yes)) {
+        console.log(chalk_1.default.blue("Using integrated webhook mode (built-in secret)\n"));
+        return {
+            mode: "integrated",
+            benchlingSecretArn: stackQuery.benchlingSecretArn,
+        };
+    }
+    // Otherwise, use standalone mode
+    console.log(chalk_1.default.blue("Using standalone webhook mode (dedicated secret)\n"));
+    return {
+        mode: "standalone",
+    };
+}
+//# sourceMappingURL=phase5-mode-decision.js.map

package/dist/lib/wizard/phase5-mode-decision.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"phase5-mode-decision.js","sourceRoot":"","sources":["../../../lib/wizard/phase5-mode-decision.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;;;AAwCH,0CAmBC;AAzDD,wDAAgC;AAChC,kDAA0B;AAG1B;;;;;GAKG;AACH,KAAK,UAAU,iBAAiB,CAAC,GAAY;IACzC,IAAI,GAAG,EAAE,CAAC;QACN,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,kBAAQ,CAAC,MAAM,CAAC;QAC1C;YACI,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,oEAAoE;YAC7E,OAAO,EAAE,IAAI;SAChB;KACJ,CAAC,CAAC;IAEH,OAAO,WAAW,CAAC;AACvB,CAAC;AAED;;;;;;;;;;GAUG;AACI,KAAK,UAAU,eAAe,CAAC,KAAwB;IAC1D,MAAM,EAAE,UAAU,EAAE,GAAG,GAAG,KAAK,EAAE,GAAG,KAAK,CAAC;IAE1C,MAAM,kBAAkB,GAAG,OAAO,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;IAElE,wEAAwE;IACxE,IAAI,kBAAkB,IAAI,MAAM,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC,CAAC;QAC7E,OAAO;YACH,IAAI,EAAE,YAAY;YAClB,kBAAkB,EAAE,UAAU,CAAC,kBAAmB;SACrD,CAAC;IACN,CAAC;IAED,iCAAiC;IACjC,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC,CAAC;IAC9E,OAAO;QACH,IAAI,EAAE,YAAY;KACrB,CAAC;AACN,CAAC"}

package/dist/lib/wizard/phase6-integrated-mode.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Phase 6: Integrated Mode
+ *
+ * Handles integrated stack mode where the BenchlingSecret from the Quilt stack
+ * is updated with webhook configuration. NO deployment is performed.
+ *
+ * @module wizard/phase6-integrated-mode
+ */
+import { IntegratedModeInput, IntegratedModeResult } from "./types";
+/**
+ * Phase 6: Integrated Mode
+ *
+ * Responsibilities:
+ * - Build complete configuration
+ * - Save config with integratedStack: true
+ * - Update BenchlingSecret ARN
+ * - Check and optionally enable BenchlingIntegration parameter
+ * - Show success message
+ * - Return (NO deployment)
+ *
+ * @param input - Integrated mode input
+ * @returns Integrated mode result
+ */
+export declare function runIntegratedMode(input: IntegratedModeInput): Promise<IntegratedModeResult>;
+//# sourceMappingURL=phase6-integrated-mode.d.ts.map

package/dist/lib/wizard/phase6-integrated-mode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"phase6-integrated-mode.d.ts","sourceRoot":"","sources":["../../../lib/wizard/phase6-integrated-mode.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAyDpE;;;;;;;;;;;;;GAaG;AACH,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CA6HjG"}

package/dist/lib/wizard/phase6-integrated-mode.js

@@ -0,0 +1,230 @@
+"use strict";
+/**
+ * Phase 6: Integrated Mode
+ *
+ * Handles integrated stack mode where the BenchlingSecret from the Quilt stack
+ * is updated with webhook configuration. NO deployment is performed.
+ *
+ * @module wizard/phase6-integrated-mode
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runIntegratedMode = runIntegratedMode;
+const chalk_1 = __importDefault(require("chalk"));
+const inquirer_1 = __importDefault(require("inquirer"));
+const sync_secrets_1 = require("../../bin/commands/sync-secrets");
+/**
+ * Builds ProfileConfig from collected parameters
+ */
+function buildProfileConfig(input) {
+    const { stackQuery, parameters, benchlingSecretArn, catalogDns } = input;
+    const now = new Date().toISOString();
+    const config = {
+        quilt: {
+            stackArn: stackQuery.stackArn,
+            catalog: catalogDns,
+            database: stackQuery.database,
+            queueUrl: stackQuery.queueUrl,
+            region: stackQuery.region,
+        },
+        benchling: {
+            tenant: parameters.benchling.tenant,
+            clientId: parameters.benchling.clientId,
+            clientSecret: parameters.benchling.clientSecret,
+            appDefinitionId: parameters.benchling.appDefinitionId,
+            secretArn: benchlingSecretArn,
+        },
+        packages: {
+            bucket: parameters.packages.bucket,
+            prefix: parameters.packages.prefix,
+            metadataKey: parameters.packages.metadataKey,
+        },
+        deployment: {
+            region: parameters.deployment.region,
+            account: parameters.deployment.account,
+        },
+        integratedStack: true, // CRITICAL: Mark as integrated mode
+        logging: {
+            level: parameters.logging.level,
+        },
+        security: {
+            enableVerification: parameters.security.enableVerification,
+            webhookAllowList: parameters.security.webhookAllowList,
+        },
+        _metadata: {
+            version: "0.7.0",
+            createdAt: now,
+            updatedAt: now,
+            source: "wizard",
+        },
+    };
+    if (parameters.benchling.testEntryId) {
+        config.benchling.testEntryId = parameters.benchling.testEntryId;
+    }
+    return config;
+}
+/**
+ * Phase 6: Integrated Mode
+ *
+ * Responsibilities:
+ * - Build complete configuration
+ * - Save config with integratedStack: true
+ * - Update BenchlingSecret ARN
+ * - Check and optionally enable BenchlingIntegration parameter
+ * - Show success message
+ * - Return (NO deployment)
+ *
+ * @param input - Integrated mode input
+ * @returns Integrated mode result
+ */
+async function runIntegratedMode(input) {
+    const { profile, configStorage, awsProfile, yes, stackQuery } = input;
+    console.log(chalk_1.default.bold("\nIntegrated Stack Mode\n"));
+    // Step 1: Build configuration
+    const config = buildProfileConfig(input);
+    // Step 2: Save configuration
+    console.log(`Saving configuration to profile: ${profile}...\n`);
+    try {
+        configStorage.writeProfile(profile, config);
+        console.log(chalk_1.default.green(`✓ Configuration saved to: ~/.config/benchling-webhook/${profile}/config.json\n`));
+    }
+    catch (error) {
+        throw new Error(`Failed to save configuration: ${error.message}`);
+    }
+    // Step 3: Update BenchlingSecret in Quilt stack
+    console.log("Updating BenchlingSecret in Quilt stack...\n");
+    try {
+        await (0, sync_secrets_1.syncSecretsToAWS)({
+            profile,
+            awsProfile,
+            region: config.deployment.region,
+            force: true,
+            configStorage,
+        });
+        console.log(chalk_1.default.green("✓ BenchlingSecret updated in Quilt stack\n"));
+    }
+    catch (error) {
+        console.warn(chalk_1.default.yellow(`⚠️  Failed to sync secrets: ${error.message}`));
+        console.warn(chalk_1.default.yellow("   You can sync secrets manually later with:"));
+        console.warn(chalk_1.default.cyan(`   npm run setup:sync-secrets -- --profile ${profile}\n`));
+    }
+    // Step 3.5: Check and optionally enable BenchlingIntegration parameter
+    console.log("Checking BenchlingIntegration parameter...\n");
+    const benchlingIntegrationEnabled = stackQuery.benchlingIntegrationEnabled;
+    let integrationStatusUpdated = false;
+    if (benchlingIntegrationEnabled === undefined) {
+        console.log(chalk_1.default.yellow("⚠️  Could not determine BenchlingIntegration status"));
+        console.log(chalk_1.default.dim("   You may need to enable it manually in CloudFormation\n"));
+    }
+    else if (benchlingIntegrationEnabled) {
+        console.log(chalk_1.default.green("✓ BenchlingIntegration is already Enabled\n"));
+    }
+    else {
+        // Parameter is disabled - offer to enable
+        console.log(chalk_1.default.yellow("BenchlingIntegration is currently Disabled"));
+        let shouldEnable = yes;
+        if (!yes) {
+            const { enable } = await inquirer_1.default.prompt([
+                {
+                    type: "confirm",
+                    name: "enable",
+                    message: "Enable BenchlingIntegration now?",
+                    default: true,
+                },
+            ]);
+            shouldEnable = enable;
+        }
+        if (shouldEnable) {
+            console.log("\nEnabling BenchlingIntegration parameter...");
+            const { updateStackParameter } = await Promise.resolve().then(() => __importStar(require("../utils/stack-parameter-update")));
+            const updateResult = await updateStackParameter({
+                stackArn: stackQuery.stackArn,
+                region: config.deployment.region,
+                parameterKey: "BenchlingIntegration",
+                parameterValue: "Enabled",
+                awsProfile,
+            });
+            if (updateResult.success) {
+                console.log(chalk_1.default.green("✓ Stack update initiated"));
+                console.log(chalk_1.default.dim("  The stack is now updating in the background\n"));
+                integrationStatusUpdated = true;
+            }
+            else {
+                console.warn(chalk_1.default.yellow(`⚠️  Failed to enable BenchlingIntegration: ${updateResult.error}`));
+                console.warn(chalk_1.default.yellow("   You can enable it manually in CloudFormation console\n"));
+            }
+        }
+        else {
+            console.log(chalk_1.default.dim("  Skipped - you can enable it later via CloudFormation console\n"));
+        }
+    }
+    // Step 4: Show success message with status monitoring command
+    console.log("╔═══════════════════════════════════════════════════════════╗");
+    console.log("║   Setup Complete!                                         ║");
+    console.log("╚═══════════════════════════════════════════════════════════╝\n");
+    console.log(chalk_1.default.bold("Integrated Stack Mode"));
+    console.log(chalk_1.default.dim("─".repeat(80)));
+    console.log(chalk_1.default.green("✓ BenchlingSecret updated in Quilt stack"));
+    // Show integration status
+    if (benchlingIntegrationEnabled === true && !integrationStatusUpdated) {
+        console.log(chalk_1.default.green("✓ BenchlingIntegration is Enabled"));
+    }
+    else if (benchlingIntegrationEnabled === false || integrationStatusUpdated) {
+        console.log(chalk_1.default.yellow("⚠ BenchlingIntegration update in progress"));
+    }
+    else {
+        console.log(chalk_1.default.dim("✓ BenchlingIntegration status unknown"));
+    }
+    console.log(chalk_1.default.dim("✓ No separate webhook deployment needed"));
+    console.log(chalk_1.default.dim("✓ Quilt stack will handle webhook events\n"));
+    console.log(chalk_1.default.bold("Next steps:"));
+    console.log("  1. Monitor stack update:");
+    console.log(chalk_1.default.cyan(`     npx @quiltdata/benchling-webhook status --profile ${profile}`));
+    console.log("  2. Configure webhook URL in Benchling app settings");
+    console.log("     (Get the webhook URL from your Quilt stack outputs)");
+    console.log("  3. Test the webhook integration");
+    console.log("  4. Monitor logs:");
+    console.log(chalk_1.default.cyan(`     npx @quiltdata/benchling-webhook logs --profile ${profile}`));
+    console.log("");
+    return {
+        success: true,
+        configPath: `~/.config/benchling-webhook/${profile}/config.json`,
+        secretArn: input.benchlingSecretArn,
+    };
+}
+//# sourceMappingURL=phase6-integrated-mode.js.map