@sembix/cli 0.1.0

package/dist/config-schema.d.ts

@@ -0,0 +1,417 @@
+import { z } from 'zod';
+/**
+ * Complete configuration file schema
+ * All fields are optional to support partial configs
+ */
+export declare const configFileSchema: z.ZodObject<{
+    repository: z.ZodOptional<z.ZodObject<{
+        owner: z.ZodString;
+        repo: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        repo: string;
+        owner: string;
+    }, {
+        repo: string;
+        owner: string;
+    }>>;
+    environmentName: z.ZodOptional<z.ZodString>;
+    awsAccountId: z.ZodOptional<z.ZodString>;
+    awsRegion: z.ZodOptional<z.ZodEnum<["us-east-1", "us-east-2", "us-west-1", "us-west-2", "eu-west-1", "eu-west-2", "eu-central-1", "ap-northeast-1", "ap-southeast-1", "ap-southeast-2"]>>;
+    customerRoleArn: z.ZodOptional<z.ZodString>;
+    terraformStateBucket: z.ZodOptional<z.ZodString>;
+    database: z.ZodOptional<z.ZodObject<{
+        name: z.ZodOptional<z.ZodString>;
+        user: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        name?: string | undefined;
+        user?: string | undefined;
+    }, {
+        name?: string | undefined;
+        user?: string | undefined;
+    }>>;
+    networking: z.ZodOptional<z.ZodObject<{
+        enableVpcEndpoints: z.ZodOptional<z.ZodBoolean>;
+        useCustomNetworking: z.ZodOptional<z.ZodBoolean>;
+        vpcCidr: z.ZodOptional<z.ZodString>;
+        publicSubnetCidrs: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+        privateSubnetCidrs: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+        azCount: z.ZodOptional<z.ZodEnum<["2", "3"]>>;
+        customVpcId: z.ZodOptional<z.ZodString>;
+        customPublicSubnetIds: z.ZodOptional<z.ZodString>;
+        customPrivateSubnetIds: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        enableVpcEndpoints?: boolean | undefined;
+        useCustomNetworking?: boolean | undefined;
+        vpcCidr?: string | undefined;
+        publicSubnetCidrs?: string | undefined;
+        privateSubnetCidrs?: string | undefined;
+        azCount?: "2" | "3" | undefined;
+        customVpcId?: string | undefined;
+        customPublicSubnetIds?: string | undefined;
+        customPrivateSubnetIds?: string | undefined;
+    }, {
+        enableVpcEndpoints?: boolean | undefined;
+        useCustomNetworking?: boolean | undefined;
+        vpcCidr?: string | undefined;
+        publicSubnetCidrs?: string | undefined;
+        privateSubnetCidrs?: string | undefined;
+        azCount?: "2" | "3" | undefined;
+        customVpcId?: string | undefined;
+        customPublicSubnetIds?: string | undefined;
+        customPrivateSubnetIds?: string | undefined;
+    }>>;
+    security: z.ZodOptional<z.ZodObject<{
+        workflowRunsKeyAlias: z.ZodOptional<z.ZodString>;
+        useCustomSecurityGroups: z.ZodOptional<z.ZodBoolean>;
+        customSecurityGroups: z.ZodOptional<z.ZodObject<{
+            workflowEngine: z.ZodOptional<z.ZodString>;
+            aurora: z.ZodOptional<z.ZodString>;
+            rdsProxy: z.ZodOptional<z.ZodString>;
+            bffEcs: z.ZodOptional<z.ZodString>;
+            bastion: z.ZodOptional<z.ZodString>;
+            bffAlb: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            workflowEngine?: string | undefined;
+            aurora?: string | undefined;
+            rdsProxy?: string | undefined;
+            bffEcs?: string | undefined;
+            bastion?: string | undefined;
+            bffAlb?: string | undefined;
+        }, {
+            workflowEngine?: string | undefined;
+            aurora?: string | undefined;
+            rdsProxy?: string | undefined;
+            bffEcs?: string | undefined;
+            bastion?: string | undefined;
+            bffAlb?: string | undefined;
+        }>>;
+        useCustomIamPolicies: z.ZodOptional<z.ZodBoolean>;
+        customIamRoles: z.ZodOptional<z.ZodObject<{
+            workflowEngineExecutionRole: z.ZodOptional<z.ZodString>;
+            workflowEngineTaskRole: z.ZodOptional<z.ZodString>;
+            bffEcsTaskExecutionRole: z.ZodOptional<z.ZodString>;
+            bffEcsTaskRole: z.ZodOptional<z.ZodString>;
+            rdsProxyRole: z.ZodOptional<z.ZodString>;
+            sembixStudioMemoryRole: z.ZodOptional<z.ZodString>;
+            sembixStudioNotificationRole: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            workflowEngineExecutionRole?: string | undefined;
+            workflowEngineTaskRole?: string | undefined;
+            bffEcsTaskExecutionRole?: string | undefined;
+            bffEcsTaskRole?: string | undefined;
+            rdsProxyRole?: string | undefined;
+            sembixStudioMemoryRole?: string | undefined;
+            sembixStudioNotificationRole?: string | undefined;
+        }, {
+            workflowEngineExecutionRole?: string | undefined;
+            workflowEngineTaskRole?: string | undefined;
+            bffEcsTaskExecutionRole?: string | undefined;
+            bffEcsTaskRole?: string | undefined;
+            rdsProxyRole?: string | undefined;
+            sembixStudioMemoryRole?: string | undefined;
+            sembixStudioNotificationRole?: string | undefined;
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        workflowRunsKeyAlias?: string | undefined;
+        useCustomSecurityGroups?: boolean | undefined;
+        customSecurityGroups?: {
+            workflowEngine?: string | undefined;
+            aurora?: string | undefined;
+            rdsProxy?: string | undefined;
+            bffEcs?: string | undefined;
+            bastion?: string | undefined;
+            bffAlb?: string | undefined;
+        } | undefined;
+        useCustomIamPolicies?: boolean | undefined;
+        customIamRoles?: {
+            workflowEngineExecutionRole?: string | undefined;
+            workflowEngineTaskRole?: string | undefined;
+            bffEcsTaskExecutionRole?: string | undefined;
+            bffEcsTaskRole?: string | undefined;
+            rdsProxyRole?: string | undefined;
+            sembixStudioMemoryRole?: string | undefined;
+            sembixStudioNotificationRole?: string | undefined;
+        } | undefined;
+    }, {
+        workflowRunsKeyAlias?: string | undefined;
+        useCustomSecurityGroups?: boolean | undefined;
+        customSecurityGroups?: {
+            workflowEngine?: string | undefined;
+            aurora?: string | undefined;
+            rdsProxy?: string | undefined;
+            bffEcs?: string | undefined;
+            bastion?: string | undefined;
+            bffAlb?: string | undefined;
+        } | undefined;
+        useCustomIamPolicies?: boolean | undefined;
+        customIamRoles?: {
+            workflowEngineExecutionRole?: string | undefined;
+            workflowEngineTaskRole?: string | undefined;
+            bffEcsTaskExecutionRole?: string | undefined;
+            bffEcsTaskRole?: string | undefined;
+            rdsProxyRole?: string | undefined;
+            sembixStudioMemoryRole?: string | undefined;
+            sembixStudioNotificationRole?: string | undefined;
+        } | undefined;
+    }>>;
+    tls: z.ZodOptional<z.ZodObject<{
+        cloudfrontDomain: z.ZodOptional<z.ZodString>;
+        cloudfrontCertArn: z.ZodOptional<z.ZodString>;
+        bffAlbCertificateArn: z.ZodOptional<z.ZodString>;
+        hostedZoneId: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        cloudfrontDomain?: string | undefined;
+        cloudfrontCertArn?: string | undefined;
+        bffAlbCertificateArn?: string | undefined;
+        hostedZoneId?: string | undefined;
+    }, {
+        cloudfrontDomain?: string | undefined;
+        cloudfrontCertArn?: string | undefined;
+        bffAlbCertificateArn?: string | undefined;
+        hostedZoneId?: string | undefined;
+    }>>;
+    features: z.ZodOptional<z.ZodObject<{
+        deploySembixStudioMemory: z.ZodOptional<z.ZodBoolean>;
+        deploySembixStudioNotifications: z.ZodOptional<z.ZodBoolean>;
+        enableBffWaf: z.ZodOptional<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        deploySembixStudioMemory?: boolean | undefined;
+        deploySembixStudioNotifications?: boolean | undefined;
+        enableBffWaf?: boolean | undefined;
+    }, {
+        deploySembixStudioMemory?: boolean | undefined;
+        deploySembixStudioNotifications?: boolean | undefined;
+        enableBffWaf?: boolean | undefined;
+    }>>;
+    frontend: z.ZodOptional<z.ZodObject<{
+        githubAppClientId: z.ZodOptional<z.ZodString>;
+        githubAppName: z.ZodOptional<z.ZodString>;
+        jiraClientId: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        githubAppClientId?: string | undefined;
+        githubAppName?: string | undefined;
+        jiraClientId?: string | undefined;
+    }, {
+        githubAppClientId?: string | undefined;
+        githubAppName?: string | undefined;
+        jiraClientId?: string | undefined;
+    }>>;
+    hub: z.ZodOptional<z.ZodObject<{
+        hubRoles: z.ZodOptional<z.ZodObject<{
+            engineExecutionRole: z.ZodOptional<z.ZodString>;
+            consumerRole: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            engineExecutionRole?: string | undefined;
+            consumerRole?: string | undefined;
+        }, {
+            engineExecutionRole?: string | undefined;
+            consumerRole?: string | undefined;
+        }>>;
+        appConfig: z.ZodOptional<z.ZodObject<{
+            roleArn: z.ZodOptional<z.ZodString>;
+            appId: z.ZodOptional<z.ZodString>;
+            envId: z.ZodOptional<z.ZodString>;
+            profileId: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            roleArn?: string | undefined;
+            appId?: string | undefined;
+            envId?: string | undefined;
+            profileId?: string | undefined;
+        }, {
+            roleArn?: string | undefined;
+            appId?: string | undefined;
+            envId?: string | undefined;
+            profileId?: string | undefined;
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        hubRoles?: {
+            engineExecutionRole?: string | undefined;
+            consumerRole?: string | undefined;
+        } | undefined;
+        appConfig?: {
+            roleArn?: string | undefined;
+            appId?: string | undefined;
+            envId?: string | undefined;
+            profileId?: string | undefined;
+        } | undefined;
+    }, {
+        hubRoles?: {
+            engineExecutionRole?: string | undefined;
+            consumerRole?: string | undefined;
+        } | undefined;
+        appConfig?: {
+            roleArn?: string | undefined;
+            appId?: string | undefined;
+            envId?: string | undefined;
+            profileId?: string | undefined;
+        } | undefined;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    repository?: {
+        repo: string;
+        owner: string;
+    } | undefined;
+    environmentName?: string | undefined;
+    awsAccountId?: string | undefined;
+    awsRegion?: "us-east-1" | "us-east-2" | "us-west-1" | "us-west-2" | "eu-west-1" | "eu-west-2" | "eu-central-1" | "ap-northeast-1" | "ap-southeast-1" | "ap-southeast-2" | undefined;
+    customerRoleArn?: string | undefined;
+    terraformStateBucket?: string | undefined;
+    database?: {
+        name?: string | undefined;
+        user?: string | undefined;
+    } | undefined;
+    networking?: {
+        enableVpcEndpoints?: boolean | undefined;
+        useCustomNetworking?: boolean | undefined;
+        vpcCidr?: string | undefined;
+        publicSubnetCidrs?: string | undefined;
+        privateSubnetCidrs?: string | undefined;
+        azCount?: "2" | "3" | undefined;
+        customVpcId?: string | undefined;
+        customPublicSubnetIds?: string | undefined;
+        customPrivateSubnetIds?: string | undefined;
+    } | undefined;
+    security?: {
+        workflowRunsKeyAlias?: string | undefined;
+        useCustomSecurityGroups?: boolean | undefined;
+        customSecurityGroups?: {
+            workflowEngine?: string | undefined;
+            aurora?: string | undefined;
+            rdsProxy?: string | undefined;
+            bffEcs?: string | undefined;
+            bastion?: string | undefined;
+            bffAlb?: string | undefined;
+        } | undefined;
+        useCustomIamPolicies?: boolean | undefined;
+        customIamRoles?: {
+            workflowEngineExecutionRole?: string | undefined;
+            workflowEngineTaskRole?: string | undefined;
+            bffEcsTaskExecutionRole?: string | undefined;
+            bffEcsTaskRole?: string | undefined;
+            rdsProxyRole?: string | undefined;
+            sembixStudioMemoryRole?: string | undefined;
+            sembixStudioNotificationRole?: string | undefined;
+        } | undefined;
+    } | undefined;
+    tls?: {
+        cloudfrontDomain?: string | undefined;
+        cloudfrontCertArn?: string | undefined;
+        bffAlbCertificateArn?: string | undefined;
+        hostedZoneId?: string | undefined;
+    } | undefined;
+    features?: {
+        deploySembixStudioMemory?: boolean | undefined;
+        deploySembixStudioNotifications?: boolean | undefined;
+        enableBffWaf?: boolean | undefined;
+    } | undefined;
+    frontend?: {
+        githubAppClientId?: string | undefined;
+        githubAppName?: string | undefined;
+        jiraClientId?: string | undefined;
+    } | undefined;
+    hub?: {
+        hubRoles?: {
+            engineExecutionRole?: string | undefined;
+            consumerRole?: string | undefined;
+        } | undefined;
+        appConfig?: {
+            roleArn?: string | undefined;
+            appId?: string | undefined;
+            envId?: string | undefined;
+            profileId?: string | undefined;
+        } | undefined;
+    } | undefined;
+}, {
+    repository?: {
+        repo: string;
+        owner: string;
+    } | undefined;
+    environmentName?: string | undefined;
+    awsAccountId?: string | undefined;
+    awsRegion?: "us-east-1" | "us-east-2" | "us-west-1" | "us-west-2" | "eu-west-1" | "eu-west-2" | "eu-central-1" | "ap-northeast-1" | "ap-southeast-1" | "ap-southeast-2" | undefined;
+    customerRoleArn?: string | undefined;
+    terraformStateBucket?: string | undefined;
+    database?: {
+        name?: string | undefined;
+        user?: string | undefined;
+    } | undefined;
+    networking?: {
+        enableVpcEndpoints?: boolean | undefined;
+        useCustomNetworking?: boolean | undefined;
+        vpcCidr?: string | undefined;
+        publicSubnetCidrs?: string | undefined;
+        privateSubnetCidrs?: string | undefined;
+        azCount?: "2" | "3" | undefined;
+        customVpcId?: string | undefined;
+        customPublicSubnetIds?: string | undefined;
+        customPrivateSubnetIds?: string | undefined;
+    } | undefined;
+    security?: {
+        workflowRunsKeyAlias?: string | undefined;
+        useCustomSecurityGroups?: boolean | undefined;
+        customSecurityGroups?: {
+            workflowEngine?: string | undefined;
+            aurora?: string | undefined;
+            rdsProxy?: string | undefined;
+            bffEcs?: string | undefined;
+            bastion?: string | undefined;
+            bffAlb?: string | undefined;
+        } | undefined;
+        useCustomIamPolicies?: boolean | undefined;
+        customIamRoles?: {
+            workflowEngineExecutionRole?: string | undefined;
+            workflowEngineTaskRole?: string | undefined;
+            bffEcsTaskExecutionRole?: string | undefined;
+            bffEcsTaskRole?: string | undefined;
+            rdsProxyRole?: string | undefined;
+            sembixStudioMemoryRole?: string | undefined;
+            sembixStudioNotificationRole?: string | undefined;
+        } | undefined;
+    } | undefined;
+    tls?: {
+        cloudfrontDomain?: string | undefined;
+        cloudfrontCertArn?: string | undefined;
+        bffAlbCertificateArn?: string | undefined;
+        hostedZoneId?: string | undefined;
+    } | undefined;
+    features?: {
+        deploySembixStudioMemory?: boolean | undefined;
+        deploySembixStudioNotifications?: boolean | undefined;
+        enableBffWaf?: boolean | undefined;
+    } | undefined;
+    frontend?: {
+        githubAppClientId?: string | undefined;
+        githubAppName?: string | undefined;
+        jiraClientId?: string | undefined;
+    } | undefined;
+    hub?: {
+        hubRoles?: {
+            engineExecutionRole?: string | undefined;
+            consumerRole?: string | undefined;
+        } | undefined;
+        appConfig?: {
+            roleArn?: string | undefined;
+            appId?: string | undefined;
+            envId?: string | undefined;
+            profileId?: string | undefined;
+        } | undefined;
+    } | undefined;
+}>;
+/**
+ * Configuration loaded from YAML files.
+ * All fields are optional to support partial configs.
+ * Validated at runtime using Zod.
+ *
+ * @see MergedConfig - After merging with CLI flags
+ * @see EnvironmentSetupConfig - Complete configuration for execution
+ */
+export type ConfigFile = z.infer<typeof configFileSchema>;
+/**
+ * Validation result type
+ */
+export interface ConfigValidationResult {
+    success: boolean;
+    data?: ConfigFile;
+    errors?: string[];
+}
+//# sourceMappingURL=config-schema.d.ts.map

package/dist/config-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-schema.d.ts","sourceRoot":"","sources":["../src/config-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAiJxB;;;GAGG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmB3B,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB"}

package/dist/config-schema.js

@@ -0,0 +1,152 @@
+import { z } from 'zod';
+import { awsRegions } from './types.js';
+/**
+ * Zod schema for validating YAML configuration files.
+ * All fields are optional to support partial configs that can be merged with CLI flags and prompts.
+ */
+// Base validation schemas (reusable)
+const awsAccountIdSchema = z.string().regex(/^\d{12}$/, 'Must be 12 digits');
+const iamRoleArnSchema = z.string().regex(/^arn:aws:iam::\d{12}:role\/.+$/, 'Invalid IAM role ARN format');
+const acmCertArnSchema = z.string().regex(/^arn:aws:acm:.+$/, 'Invalid ACM certificate ARN format');
+const route53ZoneIdSchema = z.string().regex(/^Z[A-Z0-9]+$/, 'Invalid Route53 hosted zone ID format');
+const vpcIdSchema = z.string().regex(/^vpc-[a-f0-9]+$/, 'Invalid VPC ID format');
+const subnetIdsSchema = z.string().regex(/^subnet-[a-f0-9]+(,\s*subnet-[a-f0-9]+)*$/, 'Invalid subnet IDs format (comma-separated)');
+const securityGroupIdSchema = z.string().regex(/^sg-[a-f0-9]+$/, 'Invalid security group ID format');
+const cidrSchema = z.string().regex(/^\d+\.\d+\.\d+\.\d+\/\d+$/, 'Invalid CIDR block format');
+const jsonArraySchema = z.string().refine((val) => {
+    try {
+        const parsed = JSON.parse(val);
+        return Array.isArray(parsed);
+    }
+    catch {
+        return false;
+    }
+}, 'Must be a valid JSON array');
+/**
+ * Repository configuration
+ */
+const repositorySchema = z.object({
+    owner: z.string().min(1, 'Repository owner is required'),
+    repo: z.string().min(1, 'Repository name is required'),
+}).optional();
+/**
+ * Database configuration
+ */
+const databaseSchema = z.object({
+    name: z.string().regex(/^[a-zA-Z][a-zA-Z0-9_]*$/, 'Must start with a letter and contain only letters, numbers, and underscores').optional(),
+    user: z.string().regex(/^[a-zA-Z][a-zA-Z0-9_]*$/, 'Must start with a letter and contain only letters, numbers, and underscores').optional(),
+}).optional();
+/**
+ * Networking configuration (VPC, subnets, etc.)
+ */
+const networkingSchema = z.object({
+    enableVpcEndpoints: z.boolean().optional(),
+    useCustomNetworking: z.boolean().optional(),
+    // New VPC settings
+    vpcCidr: cidrSchema.optional(),
+    publicSubnetCidrs: jsonArraySchema.optional(),
+    privateSubnetCidrs: jsonArraySchema.optional(),
+    azCount: z.enum(['2', '3']).optional(),
+    // Custom VPC settings
+    customVpcId: vpcIdSchema.optional(),
+    customPublicSubnetIds: subnetIdsSchema.optional(),
+    customPrivateSubnetIds: subnetIdsSchema.optional(),
+}).optional();
+/**
+ * Custom security groups configuration
+ */
+const customSecurityGroupsSchema = z.object({
+    workflowEngine: securityGroupIdSchema.optional(),
+    aurora: securityGroupIdSchema.optional(),
+    rdsProxy: securityGroupIdSchema.optional(),
+    bffEcs: securityGroupIdSchema.optional(),
+    bastion: securityGroupIdSchema.optional(),
+    bffAlb: securityGroupIdSchema.optional(),
+}).optional();
+/**
+ * Custom IAM roles configuration
+ */
+const customIamRolesSchema = z.object({
+    workflowEngineExecutionRole: iamRoleArnSchema.optional(),
+    workflowEngineTaskRole: iamRoleArnSchema.optional(),
+    bffEcsTaskExecutionRole: iamRoleArnSchema.optional(),
+    bffEcsTaskRole: iamRoleArnSchema.optional(),
+    rdsProxyRole: iamRoleArnSchema.optional(),
+    sembixStudioMemoryRole: iamRoleArnSchema.optional(),
+    sembixStudioNotificationRole: iamRoleArnSchema.optional(),
+}).optional();
+/**
+ * Security & IAM configuration
+ */
+const securitySchema = z.object({
+    workflowRunsKeyAlias: z.string().optional(),
+    useCustomSecurityGroups: z.boolean().optional(),
+    customSecurityGroups: customSecurityGroupsSchema,
+    useCustomIamPolicies: z.boolean().optional(),
+    customIamRoles: customIamRolesSchema,
+}).optional();
+/**
+ * TLS/DNS configuration
+ */
+const tlsSchema = z.object({
+    cloudfrontDomain: z.string().min(1, 'CloudFront domain is required').optional(),
+    cloudfrontCertArn: acmCertArnSchema.optional(),
+    bffAlbCertificateArn: acmCertArnSchema.optional(),
+    hostedZoneId: route53ZoneIdSchema.optional(),
+}).optional();
+/**
+ * Feature flags configuration
+ */
+const featuresSchema = z.object({
+    deploySembixStudioMemory: z.boolean().optional(),
+    deploySembixStudioNotifications: z.boolean().optional(),
+    enableBffWaf: z.boolean().optional(),
+}).optional();
+/**
+ * Frontend configuration (GitHub App, Jira)
+ */
+const frontendSchema = z.object({
+    githubAppClientId: z.string().min(1, 'GitHub App Client ID is required').optional(),
+    githubAppName: z.string().min(1, 'GitHub App Name is required').optional(),
+    jiraClientId: z.string().min(1, 'Jira Client ID is required').optional(),
+}).optional();
+/**
+ * Hub integration configuration (merged into main config)
+ */
+const hubRolesSchema = z.object({
+    engineExecutionRole: iamRoleArnSchema.optional(),
+    consumerRole: iamRoleArnSchema.optional(),
+}).optional();
+const appConfigSchema = z.object({
+    roleArn: iamRoleArnSchema.optional(),
+    appId: z.string().optional(),
+    envId: z.string().optional(),
+    profileId: z.string().optional(),
+}).optional();
+const hubSchema = z.object({
+    hubRoles: hubRolesSchema,
+    appConfig: appConfigSchema,
+}).optional();
+/**
+ * Complete configuration file schema
+ * All fields are optional to support partial configs
+ */
+export const configFileSchema = z.object({
+    // Repository
+    repository: repositorySchema,
+    // Basic Configuration
+    environmentName: z.string().regex(/^[a-z0-9-]+$/, 'Must be lowercase letters, numbers, and hyphens').min(3, 'Must be at least 3 characters').optional(),
+    awsAccountId: awsAccountIdSchema.optional(),
+    awsRegion: z.enum(awsRegions).optional(),
+    customerRoleArn: iamRoleArnSchema.optional(),
+    terraformStateBucket: z.string().regex(/^[a-z0-9][a-z0-9-]*[a-z0-9]$/, 'Must be lowercase letters, numbers, and hyphens').optional(),
+    // Sections
+    database: databaseSchema,
+    networking: networkingSchema,
+    security: securitySchema,
+    tls: tlsSchema,
+    features: featuresSchema,
+    frontend: frontendSchema,
+    hub: hubSchema,
+});
+//# sourceMappingURL=config-schema.js.map

package/dist/config-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-schema.js","sourceRoot":"","sources":["../src/config-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAExC;;;GAGG;AAEH,qCAAqC;AACrC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;AAC7E,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gCAAgC,EAAE,6BAA6B,CAAC,CAAC;AAC3G,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,kBAAkB,EAAE,oCAAoC,CAAC,CAAC;AACpG,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,cAAc,EAAE,uCAAuC,CAAC,CAAC;AACtG,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iBAAiB,EAAE,uBAAuB,CAAC,CAAC;AACjF,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,2CAA2C,EAAE,6CAA6C,CAAC,CAAC;AACrI,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,EAAE,kCAAkC,CAAC,CAAC;AACrG,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,2BAA2B,EAAE,2BAA2B,CAAC,CAAC;AAC9F,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;IAChD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,EAAE,4BAA4B,CAAC,CAAC;AAEjC;;GAEG;AACH,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,8BAA8B,CAAC;IACxD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,6BAA6B,CAAC;CACvD,CAAC,CAAC,QAAQ,EAAE,CAAC;AAEd;;GAEG;AACH,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,yBAAyB,EAAE,6EAA6E,CAAC,CAAC,QAAQ,EAAE;IAC3I,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,yBAAyB,EAAE,6EAA6E,CAAC,CAAC,QAAQ,EAAE;CAC5I,CAAC,CAAC,QAAQ,EAAE,CAAC;AAEd;;GAEG;AACH,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC1C,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAE3C,mBAAmB;IACnB,OAAO,EAAE,UAAU,CAAC,QAAQ,EAAE;IAC9B,iBAAiB,EAAE,eAAe,CAAC,QAAQ,EAAE;IAC7C,kBAAkB,EAAE,eAAe,CAAC,QAAQ,EAAE;IAC9C,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE;IAEtC,sBAAsB;IACtB,WAAW,EAAE,WAAW,CAAC,QAAQ,EAAE;IACnC,qBAAqB,EAAE,eAAe,CAAC,QAAQ,EAAE;IACjD,sBAAsB,EAAE,eAAe,CAAC,QAAQ,EAAE;CACnD,CAAC,CAAC,QAAQ,EAAE,CAAC;AAEd;;GAEG;AACH,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,cAAc,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IAChD,MAAM,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IACxC,QAAQ,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IAC1C,MAAM,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IACxC,OAAO,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IACzC,MAAM,EAAE,qBAAqB,CAAC,QAAQ,EAAE;CACzC,CAAC,CAAC,QAAQ,EAAE,CAAC;AAEd;;GAEG;AACH,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,2BAA2B,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACxD,sBAAsB,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACnD,uBAAuB,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACpD,cAAc,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IAC3C,YAAY,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACzC,sBAAsB,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACnD,4BAA4B,EAAE,gBAAgB,CAAC,QAAQ,EAAE;CAC1D,CAAC,CAAC,QAAQ,EAAE,CAAC;AAEd;;GAEG;AACH,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3C,uBAAuB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/C,oBAAoB,EAAE,0BAA0B;IAChD,oBAAoB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC5C,cAAc,EAAE,oBAAoB;CACrC,CAAC,CAAC,QAAQ,EAAE,CAAC;AAEd;;GAEG;AACH,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IACzB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,+BAA+B,CAAC,CAAC,QAAQ,EAAE;IAC/E,iBAAiB,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IAC9C,oBAAoB,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACjD,YAAY,EAAE,mBAAmB,CAAC,QAAQ,EAAE;CAC7C,CAAC,CAAC,QAAQ,EAAE,CAAC;AAEd;;GAEG;AACH,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,wBAAwB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAChD,+BAA+B,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACvD,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC,QAAQ,EAAE,CAAC;AAEd;;GAEG;AACH,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,kCAAkC,CAAC,CAAC,QAAQ,EAAE;IACnF,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,6BAA6B,CAAC,CAAC,QAAQ,EAAE;IAC1E,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,4BAA4B,CAAC,CAAC,QAAQ,EAAE;CACzE,CAAC,CAAC,QAAQ,EAAE,CAAC;AAEd;;GAEG;AACH,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,mBAAmB,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IAChD,YAAY,EAAE,gBAAgB,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAC,QAAQ,EAAE,CAAC;AAEd,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,OAAO,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACpC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC,QAAQ,EAAE,CAAC;AAEd,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IACzB,QAAQ,EAAE,cAAc;IACxB,SAAS,EAAE,eAAe;CAC3B,CAAC,CAAC,QAAQ,EAAE,CAAC;AAEd;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,aAAa;IACb,UAAU,EAAE,gBAAgB;IAE5B,sBAAsB;IACtB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,cAAc,EAAE,iDAAiD,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,+BAA+B,CAAC,CAAC,QAAQ,EAAE;IACvJ,YAAY,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IAC3C,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE;IACxC,eAAe,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IAC5C,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,8BAA8B,EAAE,iDAAiD,CAAC,CAAC,QAAQ,EAAE;IAEpI,WAAW;IACX,QAAQ,EAAE,cAAc;IACxB,UAAU,EAAE,gBAAgB;IAC5B,QAAQ,EAAE,cAAc;IACxB,GAAG,EAAE,SAAS;IACd,QAAQ,EAAE,cAAc;IACxB,QAAQ,EAAE,cAAc;IACxB,GAAG,EAAE,SAAS;CACf,CAAC,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,6 @@
+export declare const config: {
+    githubToken: string;
+    defaultOrg: string;
+};
+export declare function validateConfig(): void;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,MAAM;;;CAGlB,CAAC;AAEF,wBAAgB,cAAc,IAAI,IAAI,CAMrC"}

package/dist/config.js

@@ -0,0 +1,17 @@
+import dotenv from 'dotenv';
+import { fileURLToPath } from 'url';
+import { dirname, join } from 'path';
+// Load .env file
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = dirname(__filename);
+dotenv.config({ path: join(__dirname, '../.env') });
+export const config = {
+    githubToken: process.env.GITHUB_TOKEN || '',
+    defaultOrg: process.env.DEFAULT_GITHUB_ORG || '',
+};
+export function validateConfig() {
+    if (!config.githubToken) {
+        throw new Error('GITHUB_TOKEN environment variable is required. Please set it in a .env file or as an environment variable.');
+    }
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAErC,iBAAiB;AACjB,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AACtC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;AAEpD,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE;IAC3C,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE;CACjD,CAAC;AAEF,MAAM,UAAU,cAAc;IAC5B,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,4GAA4G,CAC7G,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}