@standards-kit/conform 0.1.0

package/dist/artifactregistry-QQWBMEQN.js

@@ -0,0 +1,38 @@
+// src/infra/checkers/gcp/artifactregistry.ts
+import { ArtifactRegistryClient } from "@google-cloud/artifact-registry";
+var client = null;
+function getClient() {
+  client ??= new ArtifactRegistryClient();
+  return client;
+}
+function result(raw, resourceId, exists, error) {
+  return {
+    arn: raw,
+    exists,
+    error,
+    service: "artifactregistry",
+    resourceType: "repositories",
+    resourceId
+  };
+}
+var ArtifactRegistryChecker = {
+  async check(resource) {
+    const { project, location, resourceId, raw } = resource;
+    const repoName = `projects/${project}/locations/${location}/repositories/${resourceId}`;
+    try {
+      const arClient = getClient();
+      await arClient.getRepository({ name: repoName });
+      return result(raw, resourceId, true);
+    } catch (error) {
+      const err = error;
+      if (err.code === 5 || err.message?.includes("NOT_FOUND")) {
+        return result(raw, resourceId, false);
+      }
+      return result(raw, resourceId, false, err.message ?? "Unknown error");
+    }
+  }
+};
+export {
+  ArtifactRegistryChecker
+};
+//# sourceMappingURL=artifactregistry-QQWBMEQN.js.map

package/dist/artifactregistry-QQWBMEQN.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/infra/checkers/gcp/artifactregistry.ts"],"sourcesContent":["/**\n * GCP Artifact Registry resource checker\n */\n\nimport { ArtifactRegistryClient } from \"@google-cloud/artifact-registry\";\n\nimport type { ParsedGcpResource, ResourceCheckResult } from \"../../types.js\";\nimport type { GcpResourceChecker } from \"../types.js\";\n\nlet client: ArtifactRegistryClient | null = null;\n\nfunction getClient(): ArtifactRegistryClient {\n  client ??= new ArtifactRegistryClient();\n  return client;\n}\n\nfunction result(\n  raw: string,\n  resourceId: string,\n  exists: boolean,\n  error?: string\n): ResourceCheckResult {\n  return {\n    arn: raw,\n    exists,\n    error,\n    service: \"artifactregistry\",\n    resourceType: \"repositories\",\n    resourceId,\n  };\n}\n\nexport const ArtifactRegistryChecker: GcpResourceChecker = {\n  async check(resource: ParsedGcpResource): Promise<ResourceCheckResult> {\n    const { project, location, resourceId, raw } = resource;\n    const repoName = `projects/${project}/locations/${location}/repositories/${resourceId}`;\n\n    try {\n      const arClient = getClient();\n      await arClient.getRepository({ name: repoName });\n      return result(raw, resourceId, true);\n    } catch (error) {\n      const err = error as { code?: number; message?: string };\n      if (err.code === 5 || err.message?.includes(\"NOT_FOUND\")) {\n        return result(raw, resourceId, false);\n      }\n      return result(raw, resourceId, false, err.message ?? \"Unknown error\");\n    }\n  },\n};\n"],"mappings":";AAIA,SAAS,8BAA8B;AAKvC,IAAI,SAAwC;AAE5C,SAAS,YAAoC;AAC3C,aAAW,IAAI,uBAAuB;AACtC,SAAO;AACT;AAEA,SAAS,OACP,KACA,YACA,QACA,OACqB;AACrB,SAAO;AAAA,IACL,KAAK;AAAA,IACL;AAAA,IACA;AAAA,IACA,SAAS;AAAA,IACT,cAAc;AAAA,IACd;AAAA,EACF;AACF;AAEO,IAAM,0BAA8C;AAAA,EACzD,MAAM,MAAM,UAA2D;AACrE,UAAM,EAAE,SAAS,UAAU,YAAY,IAAI,IAAI;AAC/C,UAAM,WAAW,YAAY,OAAO,cAAc,QAAQ,iBAAiB,UAAU;AAErF,QAAI;AACF,YAAM,WAAW,UAAU;AAC3B,YAAM,SAAS,cAAc,EAAE,MAAM,SAAS,CAAC;AAC/C,aAAO,OAAO,KAAK,YAAY,IAAI;AAAA,IACrC,SAAS,OAAO;AACd,YAAM,MAAM;AACZ,UAAI,IAAI,SAAS,KAAK,IAAI,SAAS,SAAS,WAAW,GAAG;AACxD,eAAO,OAAO,KAAK,YAAY,KAAK;AAAA,MACtC;AACA,aAAO,OAAO,KAAK,YAAY,OAAO,IAAI,WAAW,eAAe;AAAA,IACtE;AAAA,EACF;AACF;","names":[]}

package/dist/chunk-J5S6GRGW.js

@@ -0,0 +1,314 @@
+import {
+  ManifestError,
+  detectAccountFromResource,
+  isMultiAccountManifest,
+  isValidArn,
+  isValidGcpResource
+} from "./chunk-M7G73Q6P.js";
+
+// src/infra/generate.ts
+import * as fs from "fs";
+import * as readline from "readline";
+var DEFAULT_MANIFEST_NAME = "infra-manifest.json";
+function cleanResourceIdentifier(value) {
+  const pipeIndex = value.indexOf("|");
+  if (pipeIndex !== -1) {
+    return value.substring(0, pipeIndex);
+  }
+  return value;
+}
+function isValidResource(value) {
+  if (typeof value !== "string") {
+    return false;
+  }
+  const cleaned = cleanResourceIdentifier(value);
+  return isValidArn(cleaned) || isValidGcpResource(cleaned);
+}
+function extractResourcesFromOutputs(outputs) {
+  const resources = [];
+  const arnFields = [
+    "arn",
+    "id",
+    "bucketArn",
+    "functionArn",
+    "secretArn",
+    "roleArn",
+    "clusterArn",
+    "serviceArn",
+    "tableArn",
+    "topicArn",
+    "queueArn",
+    "logGroupArn",
+    "policyArn",
+    // GCP-specific
+    "name",
+    "selfLink"
+  ];
+  for (const field of arnFields) {
+    const value = outputs[field];
+    if (isValidResource(value)) {
+      resources.push(cleanResourceIdentifier(value));
+    }
+  }
+  for (const [key, value] of Object.entries(outputs)) {
+    if (!arnFields.includes(key) && isValidResource(value)) {
+      resources.push(cleanResourceIdentifier(value));
+    }
+  }
+  return resources;
+}
+function extractProjectName(resources) {
+  for (const resource of resources) {
+    if (resource.urn) {
+      const parts = resource.urn.split("::");
+      if (parts.length >= 2) {
+        return parts[1];
+      }
+    }
+  }
+  return void 0;
+}
+function parseStackExport(stackExport, project) {
+  if (!stackExport || typeof stackExport !== "object") {
+    throw new Error("Invalid stack export: expected an object");
+  }
+  const typed = stackExport;
+  const deployment = typed.deployment;
+  if (!deployment?.resources) {
+    throw new Error("Invalid stack export: missing deployment.resources");
+  }
+  const resources = [];
+  for (const resource of deployment.resources) {
+    if (resource.outputs) {
+      const extracted = extractResourcesFromOutputs(resource.outputs);
+      resources.push(...extracted);
+    }
+  }
+  const uniqueResources = [...new Set(resources)];
+  const projectName = project ?? extractProjectName(deployment.resources) ?? "unknown";
+  return {
+    project: projectName,
+    resources: uniqueResources
+  };
+}
+async function readStdin() {
+  if (process.stdin.isTTY) {
+    throw new Error("No input provided. Pipe Pulumi stack export: pulumi stack export | conform infra generate");
+  }
+  return new Promise((resolve, reject) => {
+    let data = "";
+    const rl = readline.createInterface({
+      input: process.stdin,
+      terminal: false
+    });
+    rl.on("line", (line) => {
+      data += `${line}
+`;
+    });
+    rl.on("close", () => {
+      resolve(data);
+    });
+    rl.on("error", reject);
+    setTimeout(() => {
+      if (!data) {
+        rl.close();
+        reject(new Error("Timeout waiting for stdin. Pipe Pulumi stack export: pulumi stack export | conform infra generate"));
+      }
+    }, 5e3);
+  });
+}
+async function generateManifestFromStdin(options = {}) {
+  const content = await readStdin();
+  let stackExport;
+  try {
+    stackExport = JSON.parse(content);
+  } catch {
+    throw new Error("Invalid JSON input. Expected Pulumi stack export format.");
+  }
+  return parseStackExport(stackExport, options.project);
+}
+function generateManifestFromFile(filePath, options = {}) {
+  if (!fs.existsSync(filePath)) {
+    throw new Error(`File not found: ${filePath}`);
+  }
+  const content = fs.readFileSync(filePath, "utf-8");
+  let stackExport;
+  try {
+    stackExport = JSON.parse(content);
+  } catch {
+    throw new Error(`Invalid JSON in file ${filePath}`);
+  }
+  return parseStackExport(stackExport, options.project);
+}
+function writeManifest(manifest, options = {}) {
+  const json = JSON.stringify(manifest, null, 2);
+  if (options.stdout) {
+    process.stdout.write(`${json}
+`);
+  } else {
+    const outputPath = options.output ?? DEFAULT_MANIFEST_NAME;
+    fs.writeFileSync(outputPath, `${json}
+`, "utf-8");
+  }
+}
+function extractDeploymentResources(deployment) {
+  const resources = [];
+  for (const resource of deployment.resources ?? []) {
+    if (resource.outputs) {
+      const extracted = extractResourcesFromOutputs(resource.outputs);
+      resources.push(...extracted);
+    }
+  }
+  return [...new Set(resources)];
+}
+function groupResourcesByAccount(resources) {
+  const accountsMap = /* @__PURE__ */ new Map();
+  for (const resource of resources) {
+    const accountKey = detectAccountFromResource(resource);
+    const existing = accountsMap.get(accountKey);
+    if (existing) {
+      existing.resources.push(resource);
+    } else {
+      accountsMap.set(accountKey, { resources: [resource] });
+    }
+  }
+  return accountsMap;
+}
+function buildAccountsRecord(accountsMap, alias) {
+  const accounts = {};
+  const entries = Array.from(accountsMap.entries());
+  if (alias && entries.length === 1) {
+    const [key, value] = entries[0];
+    accounts[key] = { alias, resources: value.resources };
+  } else {
+    for (const [key, value] of entries) {
+      accounts[key] = value;
+    }
+  }
+  return accounts;
+}
+function parseStackExportMultiAccount(stackExport, options = {}) {
+  if (!stackExport || typeof stackExport !== "object") {
+    throw new Error("Invalid stack export: expected an object");
+  }
+  const typed = stackExport;
+  const deployment = typed.deployment;
+  if (!deployment?.resources) {
+    throw new Error("Invalid stack export: missing deployment.resources");
+  }
+  const uniqueResources = extractDeploymentResources(deployment);
+  const projectName = options.project ?? extractProjectName(deployment.resources);
+  if (options.accountId) {
+    return {
+      version: 2,
+      project: projectName,
+      accounts: {
+        [options.accountId]: { alias: options.account, resources: uniqueResources }
+      }
+    };
+  }
+  const accountsMap = groupResourcesByAccount(uniqueResources);
+  const accounts = buildAccountsRecord(accountsMap, options.account);
+  return { version: 2, project: projectName, accounts };
+}
+function readExistingManifest(filePath) {
+  if (!fs.existsSync(filePath)) {
+    return null;
+  }
+  const content = fs.readFileSync(filePath, "utf-8");
+  try {
+    return JSON.parse(content);
+  } catch {
+    throw new ManifestError(`Invalid JSON in existing manifest: ${filePath}`);
+  }
+}
+function convertLegacyToMultiAccount(legacy) {
+  const legacyAccounts = {};
+  for (const resource of legacy.resources) {
+    const key = detectAccountFromResource(resource);
+    if (key in legacyAccounts) {
+      legacyAccounts[key].resources.push(resource);
+    } else {
+      legacyAccounts[key] = { resources: [resource] };
+    }
+  }
+  return { version: 2, project: legacy.project, accounts: legacyAccounts };
+}
+function mergeIntoManifest(existing, newResources, accountKey, alias) {
+  const multiAccount = isMultiAccountManifest(existing) ? { ...existing, accounts: { ...existing.accounts } } : convertLegacyToMultiAccount(existing);
+  const hasExisting = accountKey in multiAccount.accounts;
+  const existingResources = hasExisting ? multiAccount.accounts[accountKey].resources : [];
+  const existingAlias = hasExisting ? multiAccount.accounts[accountKey].alias : void 0;
+  const mergedResources = [.../* @__PURE__ */ new Set([...existingResources, ...newResources])];
+  multiAccount.accounts[accountKey] = {
+    alias: alias ?? existingAlias,
+    resources: mergedResources
+  };
+  return multiAccount;
+}
+async function generateMultiAccountFromStdin(options = {}) {
+  const content = await readStdin();
+  let stackExport;
+  try {
+    stackExport = JSON.parse(content);
+  } catch {
+    throw new Error("Invalid JSON input. Expected Pulumi stack export format.");
+  }
+  return parseStackExportMultiAccount(stackExport, options);
+}
+function generateMultiAccountFromFile(filePath, options = {}) {
+  if (!fs.existsSync(filePath)) {
+    throw new Error(`File not found: ${filePath}`);
+  }
+  const content = fs.readFileSync(filePath, "utf-8");
+  let stackExport;
+  try {
+    stackExport = JSON.parse(content);
+  } catch {
+    throw new Error(`Invalid JSON in file ${filePath}`);
+  }
+  return parseStackExportMultiAccount(stackExport, options);
+}
+async function generateNewManifest(inputPath, options) {
+  if (inputPath) {
+    return generateMultiAccountFromFile(inputPath, options);
+  }
+  return generateMultiAccountFromStdin(options);
+}
+function mergeManifests(existing, newManifest, projectOverride) {
+  let merged = isMultiAccountManifest(existing) ? { ...existing, accounts: { ...existing.accounts } } : convertLegacyToMultiAccount(existing);
+  for (const [key, account] of Object.entries(newManifest.accounts)) {
+    merged = mergeIntoManifest(merged, account.resources, key, account.alias);
+  }
+  if (projectOverride) {
+    merged.project = projectOverride;
+  }
+  return merged;
+}
+async function generateWithMerge(inputPath, options) {
+  const outputPath = options.output ?? DEFAULT_MANIFEST_NAME;
+  const newManifest = await generateNewManifest(inputPath, options);
+  if (!options.merge) {
+    return newManifest;
+  }
+  const existing = readExistingManifest(outputPath);
+  if (!existing) {
+    return newManifest;
+  }
+  return mergeManifests(existing, newManifest, options.project);
+}
+
+export {
+  DEFAULT_MANIFEST_NAME,
+  parseStackExport,
+  generateManifestFromStdin,
+  generateManifestFromFile,
+  writeManifest,
+  parseStackExportMultiAccount,
+  readExistingManifest,
+  mergeIntoManifest,
+  generateMultiAccountFromStdin,
+  generateMultiAccountFromFile,
+  generateWithMerge
+};
+//# sourceMappingURL=chunk-J5S6GRGW.js.map

package/dist/chunk-J5S6GRGW.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/infra/generate.ts"],"sourcesContent":["/**\n * Manifest generation from Pulumi stack exports\n *\n * Parses Pulumi stack export JSON and extracts resource ARNs/identifiers\n * to generate an infra-manifest.json file.\n */\n\nimport * as fs from \"node:fs\";\nimport * as readline from \"node:readline\";\n\nimport { isValidArn } from \"./arn.js\";\nimport { isValidGcpResource } from \"./gcp.js\";\nimport {\n  detectAccountFromResource,\n  isMultiAccountManifest,\n  ManifestError,\n} from \"./manifest.js\";\nimport type { LegacyManifest, Manifest, ManifestAccount, MultiAccountManifest } from \"./types.js\";\n\n/**\n * Pulumi stack export structure (minimal typing for what we need)\n */\ninterface PulumiResource {\n  urn?: string;\n  type?: string;\n  outputs?: Record<string, unknown>;\n}\n\ninterface PulumiDeployment {\n  resources?: PulumiResource[];\n}\n\ninterface PulumiStackExport {\n  deployment?: PulumiDeployment;\n}\n\n/** Default manifest filename */\nexport const DEFAULT_MANIFEST_NAME = \"infra-manifest.json\";\n\n/**\n * Options for manifest generation\n */\nexport interface GenerateManifestOptions {\n  /** Project name (extracted from stack if not provided) */\n  project?: string;\n  /** Output file path (defaults to infra-manifest.json) */\n  output?: string;\n  /** If true, output to stdout instead of file */\n  stdout?: boolean;\n  /** Account alias (e.g., \"prod-aws\") for multi-account manifests */\n  account?: string;\n  /** Explicit account ID (e.g., \"aws:111111111111\") */\n  accountId?: string;\n  /** Merge into existing manifest instead of overwriting */\n  merge?: boolean;\n}\n\n/**\n * Clean a resource identifier by stripping Pulumi internal suffixes\n *\n * Pulumi sometimes appends internal metadata to ARNs like:\n * arn:aws:secretsmanager:...:secret:name|terraform-20260123...\n *\n * The pipe and everything after it should be stripped.\n */\nfunction cleanResourceIdentifier(value: string): string {\n  const pipeIndex = value.indexOf(\"|\");\n  if (pipeIndex !== -1) {\n    return value.substring(0, pipeIndex);\n  }\n  return value;\n}\n\n/**\n * Check if a value is a valid resource identifier (AWS ARN or GCP path)\n */\nfunction isValidResource(value: unknown): value is string {\n  if (typeof value !== \"string\") {\n    return false;\n  }\n  // Clean the value before validating (strip Pulumi suffixes)\n  const cleaned = cleanResourceIdentifier(value);\n  return isValidArn(cleaned) || isValidGcpResource(cleaned);\n}\n\n/**\n * Extract ARNs and resource identifiers from Pulumi resource outputs\n */\nfunction extractResourcesFromOutputs(outputs: Record<string, unknown>): string[] {\n  const resources: string[] = [];\n\n  // Common ARN/resource output field names\n  const arnFields = [\n    \"arn\",\n    \"id\",\n    \"bucketArn\",\n    \"functionArn\",\n    \"secretArn\",\n    \"roleArn\",\n    \"clusterArn\",\n    \"serviceArn\",\n    \"tableArn\",\n    \"topicArn\",\n    \"queueArn\",\n    \"logGroupArn\",\n    \"policyArn\",\n    // GCP-specific\n    \"name\",\n    \"selfLink\",\n  ];\n\n  for (const field of arnFields) {\n    const value = outputs[field];\n    if (isValidResource(value)) {\n      resources.push(cleanResourceIdentifier(value));\n    }\n  }\n\n  // Also check for any other fields that look like ARNs or GCP resources\n  for (const [key, value] of Object.entries(outputs)) {\n    if (!arnFields.includes(key) && isValidResource(value)) {\n      resources.push(cleanResourceIdentifier(value));\n    }\n  }\n\n  return resources;\n}\n\n/**\n * Extract project name from Pulumi resource URNs\n *\n * URN format: urn:pulumi:stack::project::type::name\n */\nfunction extractProjectName(resources: PulumiResource[]): string | undefined {\n  for (const resource of resources) {\n    if (resource.urn) {\n      const parts = resource.urn.split(\"::\");\n      if (parts.length >= 2) {\n        return parts[1]; // project is the second part\n      }\n    }\n  }\n  return undefined;\n}\n\n/**\n * Parse Pulumi stack export JSON and extract manifest\n */\nexport function parseStackExport(stackExport: unknown, project?: string): Manifest {\n  if (!stackExport || typeof stackExport !== \"object\") {\n    throw new Error(\"Invalid stack export: expected an object\");\n  }\n\n  const typed = stackExport as PulumiStackExport;\n  const deployment = typed.deployment;\n\n  if (!deployment?.resources) {\n    throw new Error(\"Invalid stack export: missing deployment.resources\");\n  }\n\n  const resources: string[] = [];\n\n  // Extract resources from each Pulumi resource's outputs\n  for (const resource of deployment.resources) {\n    if (resource.outputs) {\n      const extracted = extractResourcesFromOutputs(resource.outputs);\n      resources.push(...extracted);\n    }\n  }\n\n  // Deduplicate resources\n  const uniqueResources = [...new Set(resources)];\n\n  // Determine project name\n  const projectName = project ?? extractProjectName(deployment.resources) ?? \"unknown\";\n\n  return {\n    project: projectName,\n    resources: uniqueResources,\n  };\n}\n\n/**\n * Read all content from stdin\n */\nasync function readStdin(): Promise<string> {\n  // Check if stdin is a TTY (interactive terminal)\n  if (process.stdin.isTTY) {\n    throw new Error(\"No input provided. Pipe Pulumi stack export: pulumi stack export | conform infra generate\");\n  }\n\n  return new Promise((resolve, reject) => {\n    let data = \"\";\n    const rl = readline.createInterface({\n      input: process.stdin,\n      terminal: false,\n    });\n\n    rl.on(\"line\", (line) => {\n      data += `${line}\\n`;\n    });\n\n    rl.on(\"close\", () => {\n      resolve(data);\n    });\n\n    rl.on(\"error\", reject);\n\n    // Timeout after 5 seconds if no data\n    setTimeout(() => {\n      if (!data) {\n        rl.close();\n        reject(new Error(\"Timeout waiting for stdin. Pipe Pulumi stack export: pulumi stack export | conform infra generate\"));\n      }\n    }, 5000);\n  });\n}\n\n/**\n * Generate manifest from stdin (Pulumi stack export)\n */\nexport async function generateManifestFromStdin(options: GenerateManifestOptions = {}): Promise<Manifest> {\n  const content = await readStdin();\n\n  let stackExport: unknown;\n  try {\n    stackExport = JSON.parse(content);\n  } catch {\n    throw new Error(\"Invalid JSON input. Expected Pulumi stack export format.\");\n  }\n\n  return parseStackExport(stackExport, options.project);\n}\n\n/**\n * Generate manifest from a file\n */\nexport function generateManifestFromFile(filePath: string, options: GenerateManifestOptions = {}): Manifest {\n  if (!fs.existsSync(filePath)) {\n    throw new Error(`File not found: ${filePath}`);\n  }\n\n  const content = fs.readFileSync(filePath, \"utf-8\");\n\n  let stackExport: unknown;\n  try {\n    stackExport = JSON.parse(content);\n  } catch {\n    throw new Error(`Invalid JSON in file ${filePath}`);\n  }\n\n  return parseStackExport(stackExport, options.project);\n}\n\n/**\n * Write manifest to file or stdout\n *\n * @param manifest - The manifest to write\n * @param options - Output options (defaults to writing infra-manifest.json)\n */\nexport function writeManifest(manifest: Manifest, options: { output?: string; stdout?: boolean } = {}): void {\n  const json = JSON.stringify(manifest, null, 2);\n\n  if (options.stdout) {\n    process.stdout.write(`${json}\\n`);\n  } else {\n    const outputPath = options.output ?? DEFAULT_MANIFEST_NAME;\n    fs.writeFileSync(outputPath, `${json}\\n`, \"utf-8\");\n  }\n}\n\n/**\n * Extract and deduplicate resources from a Pulumi deployment\n */\nfunction extractDeploymentResources(deployment: PulumiDeployment): string[] {\n  const resources: string[] = [];\n  for (const resource of deployment.resources ?? []) {\n    if (resource.outputs) {\n      const extracted = extractResourcesFromOutputs(resource.outputs);\n      resources.push(...extracted);\n    }\n  }\n  return [...new Set(resources)];\n}\n\n/**\n * Group resources by detected account\n */\nfunction groupResourcesByAccount(resources: string[]): Map<string, ManifestAccount> {\n  const accountsMap = new Map<string, ManifestAccount>();\n\n  for (const resource of resources) {\n    const accountKey = detectAccountFromResource(resource);\n    const existing = accountsMap.get(accountKey);\n    if (existing) {\n      existing.resources.push(resource);\n    } else {\n      accountsMap.set(accountKey, { resources: [resource] });\n    }\n  }\n\n  return accountsMap;\n}\n\n/**\n * Convert accounts map to record, optionally applying alias\n */\nfunction buildAccountsRecord(\n  accountsMap: Map<string, ManifestAccount>,\n  alias?: string\n): Record<string, ManifestAccount> {\n  const accounts: Record<string, ManifestAccount> = {};\n  const entries = Array.from(accountsMap.entries());\n\n  if (alias && entries.length === 1) {\n    const [key, value] = entries[0];\n    accounts[key] = { alias, resources: value.resources };\n  } else {\n    for (const [key, value] of entries) {\n      accounts[key] = value;\n    }\n  }\n\n  return accounts;\n}\n\n/**\n * Parse Pulumi stack export and create multi-account manifest\n * Groups resources by detected account\n */\nexport function parseStackExportMultiAccount(\n  stackExport: unknown,\n  options: GenerateManifestOptions = {}\n): MultiAccountManifest {\n  if (!stackExport || typeof stackExport !== \"object\") {\n    throw new Error(\"Invalid stack export: expected an object\");\n  }\n\n  const typed = stackExport as PulumiStackExport;\n  const deployment = typed.deployment;\n\n  if (!deployment?.resources) {\n    throw new Error(\"Invalid stack export: missing deployment.resources\");\n  }\n\n  const uniqueResources = extractDeploymentResources(deployment);\n  const projectName = options.project ?? extractProjectName(deployment.resources);\n\n  // If explicit account ID provided, use it\n  if (options.accountId) {\n    return {\n      version: 2,\n      project: projectName,\n      accounts: {\n        [options.accountId]: { alias: options.account, resources: uniqueResources },\n      },\n    };\n  }\n\n  // Group resources by auto-detected account\n  const accountsMap = groupResourcesByAccount(uniqueResources);\n  const accounts = buildAccountsRecord(accountsMap, options.account);\n\n  return { version: 2, project: projectName, accounts };\n}\n\n/**\n * Read existing manifest from file\n * Returns null if file doesn't exist\n */\nexport function readExistingManifest(filePath: string): Manifest | null {\n  if (!fs.existsSync(filePath)) {\n    return null;\n  }\n\n  const content = fs.readFileSync(filePath, \"utf-8\");\n  try {\n    return JSON.parse(content) as Manifest;\n  } catch {\n    throw new ManifestError(`Invalid JSON in existing manifest: ${filePath}`);\n  }\n}\n\n/**\n * Convert legacy manifest to multi-account format\n */\nfunction convertLegacyToMultiAccount(legacy: LegacyManifest): MultiAccountManifest {\n  const legacyAccounts: Record<string, ManifestAccount> = {};\n  for (const resource of legacy.resources) {\n    const key = detectAccountFromResource(resource);\n    if (key in legacyAccounts) {\n      legacyAccounts[key].resources.push(resource);\n    } else {\n      legacyAccounts[key] = { resources: [resource] };\n    }\n  }\n  return { version: 2, project: legacy.project, accounts: legacyAccounts };\n}\n\n/**\n * Merge new resources into an existing manifest\n */\nexport function mergeIntoManifest(\n  existing: Manifest,\n  newResources: string[],\n  accountKey: string,\n  alias?: string\n): MultiAccountManifest {\n  // Convert existing to multi-account if it's legacy format\n  const multiAccount: MultiAccountManifest = isMultiAccountManifest(existing)\n    ? { ...existing, accounts: { ...existing.accounts } }\n    : convertLegacyToMultiAccount(existing);\n\n  // Add or update the target account\n  const hasExisting = accountKey in multiAccount.accounts;\n  const existingResources = hasExisting ? multiAccount.accounts[accountKey].resources : [];\n  const existingAlias = hasExisting ? multiAccount.accounts[accountKey].alias : undefined;\n  const mergedResources = [...new Set([...existingResources, ...newResources])];\n\n  multiAccount.accounts[accountKey] = {\n    alias: alias ?? existingAlias,\n    resources: mergedResources,\n  };\n\n  return multiAccount;\n}\n\n/**\n * Generate multi-account manifest from stdin (Pulumi stack export)\n */\nexport async function generateMultiAccountFromStdin(\n  options: GenerateManifestOptions = {}\n): Promise<MultiAccountManifest> {\n  const content = await readStdin();\n\n  let stackExport: unknown;\n  try {\n    stackExport = JSON.parse(content);\n  } catch {\n    throw new Error(\"Invalid JSON input. Expected Pulumi stack export format.\");\n  }\n\n  return parseStackExportMultiAccount(stackExport, options);\n}\n\n/**\n * Generate multi-account manifest from a file\n */\nexport function generateMultiAccountFromFile(\n  filePath: string,\n  options: GenerateManifestOptions = {}\n): MultiAccountManifest {\n  if (!fs.existsSync(filePath)) {\n    throw new Error(`File not found: ${filePath}`);\n  }\n\n  const content = fs.readFileSync(filePath, \"utf-8\");\n\n  let stackExport: unknown;\n  try {\n    stackExport = JSON.parse(content);\n  } catch {\n    throw new Error(`Invalid JSON in file ${filePath}`);\n  }\n\n  return parseStackExportMultiAccount(stackExport, options);\n}\n\n/**\n * Generate new manifest from input\n */\nasync function generateNewManifest(\n  inputPath: string | undefined,\n  options: GenerateManifestOptions\n): Promise<MultiAccountManifest> {\n  if (inputPath) {\n    return generateMultiAccountFromFile(inputPath, options);\n  }\n  return generateMultiAccountFromStdin(options);\n}\n\n/**\n * Merge new manifest accounts into existing manifest\n */\nfunction mergeManifests(\n  existing: Manifest,\n  newManifest: MultiAccountManifest,\n  projectOverride?: string\n): MultiAccountManifest {\n  // Start with existing converted to multi-account\n  let merged: MultiAccountManifest = isMultiAccountManifest(existing)\n    ? { ...existing, accounts: { ...existing.accounts } }\n    : convertLegacyToMultiAccount(existing);\n\n  // Merge in new accounts\n  for (const [key, account] of Object.entries(newManifest.accounts)) {\n    merged = mergeIntoManifest(merged, account.resources, key, account.alias);\n  }\n\n  // Apply project override if provided\n  if (projectOverride) {\n    merged.project = projectOverride;\n  }\n\n  return merged;\n}\n\n/**\n * Handle merge operation for manifest generation\n */\nexport async function generateWithMerge(\n  inputPath: string | undefined,\n  options: GenerateManifestOptions\n): Promise<Manifest> {\n  const outputPath = options.output ?? DEFAULT_MANIFEST_NAME;\n  const newManifest = await generateNewManifest(inputPath, options);\n\n  // If not merging, just return the new manifest\n  if (!options.merge) {\n    return newManifest;\n  }\n\n  // Read existing manifest\n  const existing = readExistingManifest(outputPath);\n  if (!existing) {\n    return newManifest;\n  }\n\n  return mergeManifests(existing, newManifest, options.project);\n}\n"],"mappings":";;;;;;;;;AAOA,YAAY,QAAQ;AACpB,YAAY,cAAc;AA6BnB,IAAM,wBAAwB;AA4BrC,SAAS,wBAAwB,OAAuB;AACtD,QAAM,YAAY,MAAM,QAAQ,GAAG;AACnC,MAAI,cAAc,IAAI;AACpB,WAAO,MAAM,UAAU,GAAG,SAAS;AAAA,EACrC;AACA,SAAO;AACT;AAKA,SAAS,gBAAgB,OAAiC;AACxD,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO;AAAA,EACT;AAEA,QAAM,UAAU,wBAAwB,KAAK;AAC7C,SAAO,WAAW,OAAO,KAAK,mBAAmB,OAAO;AAC1D;AAKA,SAAS,4BAA4B,SAA4C;AAC/E,QAAM,YAAsB,CAAC;AAG7B,QAAM,YAAY;AAAA,IAChB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA;AAAA,IAEA;AAAA,IACA;AAAA,EACF;AAEA,aAAW,SAAS,WAAW;AAC7B,UAAM,QAAQ,QAAQ,KAAK;AAC3B,QAAI,gBAAgB,KAAK,GAAG;AAC1B,gBAAU,KAAK,wBAAwB,KAAK,CAAC;AAAA,IAC/C;AAAA,EACF;AAGA,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,OAAO,GAAG;AAClD,QAAI,CAAC,UAAU,SAAS,GAAG,KAAK,gBAAgB,KAAK,GAAG;AACtD,gBAAU,KAAK,wBAAwB,KAAK,CAAC;AAAA,IAC/C;AAAA,EACF;AAEA,SAAO;AACT;AAOA,SAAS,mBAAmB,WAAiD;AAC3E,aAAW,YAAY,WAAW;AAChC,QAAI,SAAS,KAAK;AAChB,YAAM,QAAQ,SAAS,IAAI,MAAM,IAAI;AACrC,UAAI,MAAM,UAAU,GAAG;AACrB,eAAO,MAAM,CAAC;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAKO,SAAS,iBAAiB,aAAsB,SAA4B;AACjF,MAAI,CAAC,eAAe,OAAO,gBAAgB,UAAU;AACnD,UAAM,IAAI,MAAM,0CAA0C;AAAA,EAC5D;AAEA,QAAM,QAAQ;AACd,QAAM,aAAa,MAAM;AAEzB,MAAI,CAAC,YAAY,WAAW;AAC1B,UAAM,IAAI,MAAM,oDAAoD;AAAA,EACtE;AAEA,QAAM,YAAsB,CAAC;AAG7B,aAAW,YAAY,WAAW,WAAW;AAC3C,QAAI,SAAS,SAAS;AACpB,YAAM,YAAY,4BAA4B,SAAS,OAAO;AAC9D,gBAAU,KAAK,GAAG,SAAS;AAAA,IAC7B;AAAA,EACF;AAGA,QAAM,kBAAkB,CAAC,GAAG,IAAI,IAAI,SAAS,CAAC;AAG9C,QAAM,cAAc,WAAW,mBAAmB,WAAW,SAAS,KAAK;AAE3E,SAAO;AAAA,IACL,SAAS;AAAA,IACT,WAAW;AAAA,EACb;AACF;AAKA,eAAe,YAA6B;AAE1C,MAAI,QAAQ,MAAM,OAAO;AACvB,UAAM,IAAI,MAAM,2FAA2F;AAAA,EAC7G;AAEA,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,QAAI,OAAO;AACX,UAAM,KAAc,yBAAgB;AAAA,MAClC,OAAO,QAAQ;AAAA,MACf,UAAU;AAAA,IACZ,CAAC;AAED,OAAG,GAAG,QAAQ,CAAC,SAAS;AACtB,cAAQ,GAAG,IAAI;AAAA;AAAA,IACjB,CAAC;AAED,OAAG,GAAG,SAAS,MAAM;AACnB,cAAQ,IAAI;AAAA,IACd,CAAC;AAED,OAAG,GAAG,SAAS,MAAM;AAGrB,eAAW,MAAM;AACf,UAAI,CAAC,MAAM;AACT,WAAG,MAAM;AACT,eAAO,IAAI,MAAM,mGAAmG,CAAC;AAAA,MACvH;AAAA,IACF,GAAG,GAAI;AAAA,EACT,CAAC;AACH;AAKA,eAAsB,0BAA0B,UAAmC,CAAC,GAAsB;AACxG,QAAM,UAAU,MAAM,UAAU;AAEhC,MAAI;AACJ,MAAI;AACF,kBAAc,KAAK,MAAM,OAAO;AAAA,EAClC,QAAQ;AACN,UAAM,IAAI,MAAM,0DAA0D;AAAA,EAC5E;AAEA,SAAO,iBAAiB,aAAa,QAAQ,OAAO;AACtD;AAKO,SAAS,yBAAyB,UAAkB,UAAmC,CAAC,GAAa;AAC1G,MAAI,CAAI,cAAW,QAAQ,GAAG;AAC5B,UAAM,IAAI,MAAM,mBAAmB,QAAQ,EAAE;AAAA,EAC/C;AAEA,QAAM,UAAa,gBAAa,UAAU,OAAO;AAEjD,MAAI;AACJ,MAAI;AACF,kBAAc,KAAK,MAAM,OAAO;AAAA,EAClC,QAAQ;AACN,UAAM,IAAI,MAAM,wBAAwB,QAAQ,EAAE;AAAA,EACpD;AAEA,SAAO,iBAAiB,aAAa,QAAQ,OAAO;AACtD;AAQO,SAAS,cAAc,UAAoB,UAAiD,CAAC,GAAS;AAC3G,QAAM,OAAO,KAAK,UAAU,UAAU,MAAM,CAAC;AAE7C,MAAI,QAAQ,QAAQ;AAClB,YAAQ,OAAO,MAAM,GAAG,IAAI;AAAA,CAAI;AAAA,EAClC,OAAO;AACL,UAAM,aAAa,QAAQ,UAAU;AACrC,IAAG,iBAAc,YAAY,GAAG,IAAI;AAAA,GAAM,OAAO;AAAA,EACnD;AACF;AAKA,SAAS,2BAA2B,YAAwC;AAC1E,QAAM,YAAsB,CAAC;AAC7B,aAAW,YAAY,WAAW,aAAa,CAAC,GAAG;AACjD,QAAI,SAAS,SAAS;AACpB,YAAM,YAAY,4BAA4B,SAAS,OAAO;AAC9D,gBAAU,KAAK,GAAG,SAAS;AAAA,IAC7B;AAAA,EACF;AACA,SAAO,CAAC,GAAG,IAAI,IAAI,SAAS,CAAC;AAC/B;AAKA,SAAS,wBAAwB,WAAmD;AAClF,QAAM,cAAc,oBAAI,IAA6B;AAErD,aAAW,YAAY,WAAW;AAChC,UAAM,aAAa,0BAA0B,QAAQ;AACrD,UAAM,WAAW,YAAY,IAAI,UAAU;AAC3C,QAAI,UAAU;AACZ,eAAS,UAAU,KAAK,QAAQ;AAAA,IAClC,OAAO;AACL,kBAAY,IAAI,YAAY,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC;AAAA,IACvD;AAAA,EACF;AAEA,SAAO;AACT;AAKA,SAAS,oBACP,aACA,OACiC;AACjC,QAAM,WAA4C,CAAC;AACnD,QAAM,UAAU,MAAM,KAAK,YAAY,QAAQ,CAAC;AAEhD,MAAI,SAAS,QAAQ,WAAW,GAAG;AACjC,UAAM,CAAC,KAAK,KAAK,IAAI,QAAQ,CAAC;AAC9B,aAAS,GAAG,IAAI,EAAE,OAAO,WAAW,MAAM,UAAU;AAAA,EACtD,OAAO;AACL,eAAW,CAAC,KAAK,KAAK,KAAK,SAAS;AAClC,eAAS,GAAG,IAAI;AAAA,IAClB;AAAA,EACF;AAEA,SAAO;AACT;AAMO,SAAS,6BACd,aACA,UAAmC,CAAC,GACd;AACtB,MAAI,CAAC,eAAe,OAAO,gBAAgB,UAAU;AACnD,UAAM,IAAI,MAAM,0CAA0C;AAAA,EAC5D;AAEA,QAAM,QAAQ;AACd,QAAM,aAAa,MAAM;AAEzB,MAAI,CAAC,YAAY,WAAW;AAC1B,UAAM,IAAI,MAAM,oDAAoD;AAAA,EACtE;AAEA,QAAM,kBAAkB,2BAA2B,UAAU;AAC7D,QAAM,cAAc,QAAQ,WAAW,mBAAmB,WAAW,SAAS;AAG9E,MAAI,QAAQ,WAAW;AACrB,WAAO;AAAA,MACL,SAAS;AAAA,MACT,SAAS;AAAA,MACT,UAAU;AAAA,QACR,CAAC,QAAQ,SAAS,GAAG,EAAE,OAAO,QAAQ,SAAS,WAAW,gBAAgB;AAAA,MAC5E;AAAA,IACF;AAAA,EACF;AAGA,QAAM,cAAc,wBAAwB,eAAe;AAC3D,QAAM,WAAW,oBAAoB,aAAa,QAAQ,OAAO;AAEjE,SAAO,EAAE,SAAS,GAAG,SAAS,aAAa,SAAS;AACtD;AAMO,SAAS,qBAAqB,UAAmC;AACtE,MAAI,CAAI,cAAW,QAAQ,GAAG;AAC5B,WAAO;AAAA,EACT;AAEA,QAAM,UAAa,gBAAa,UAAU,OAAO;AACjD,MAAI;AACF,WAAO,KAAK,MAAM,OAAO;AAAA,EAC3B,QAAQ;AACN,UAAM,IAAI,cAAc,sCAAsC,QAAQ,EAAE;AAAA,EAC1E;AACF;AAKA,SAAS,4BAA4B,QAA8C;AACjF,QAAM,iBAAkD,CAAC;AACzD,aAAW,YAAY,OAAO,WAAW;AACvC,UAAM,MAAM,0BAA0B,QAAQ;AAC9C,QAAI,OAAO,gBAAgB;AACzB,qBAAe,GAAG,EAAE,UAAU,KAAK,QAAQ;AAAA,IAC7C,OAAO;AACL,qBAAe,GAAG,IAAI,EAAE,WAAW,CAAC,QAAQ,EAAE;AAAA,IAChD;AAAA,EACF;AACA,SAAO,EAAE,SAAS,GAAG,SAAS,OAAO,SAAS,UAAU,eAAe;AACzE;AAKO,SAAS,kBACd,UACA,cACA,YACA,OACsB;AAEtB,QAAM,eAAqC,uBAAuB,QAAQ,IACtE,EAAE,GAAG,UAAU,UAAU,EAAE,GAAG,SAAS,SAAS,EAAE,IAClD,4BAA4B,QAAQ;AAGxC,QAAM,cAAc,cAAc,aAAa;AAC/C,QAAM,oBAAoB,cAAc,aAAa,SAAS,UAAU,EAAE,YAAY,CAAC;AACvF,QAAM,gBAAgB,cAAc,aAAa,SAAS,UAAU,EAAE,QAAQ;AAC9E,QAAM,kBAAkB,CAAC,GAAG,oBAAI,IAAI,CAAC,GAAG,mBAAmB,GAAG,YAAY,CAAC,CAAC;AAE5E,eAAa,SAAS,UAAU,IAAI;AAAA,IAClC,OAAO,SAAS;AAAA,IAChB,WAAW;AAAA,EACb;AAEA,SAAO;AACT;AAKA,eAAsB,8BACpB,UAAmC,CAAC,GACL;AAC/B,QAAM,UAAU,MAAM,UAAU;AAEhC,MAAI;AACJ,MAAI;AACF,kBAAc,KAAK,MAAM,OAAO;AAAA,EAClC,QAAQ;AACN,UAAM,IAAI,MAAM,0DAA0D;AAAA,EAC5E;AAEA,SAAO,6BAA6B,aAAa,OAAO;AAC1D;AAKO,SAAS,6BACd,UACA,UAAmC,CAAC,GACd;AACtB,MAAI,CAAI,cAAW,QAAQ,GAAG;AAC5B,UAAM,IAAI,MAAM,mBAAmB,QAAQ,EAAE;AAAA,EAC/C;AAEA,QAAM,UAAa,gBAAa,UAAU,OAAO;AAEjD,MAAI;AACJ,MAAI;AACF,kBAAc,KAAK,MAAM,OAAO;AAAA,EAClC,QAAQ;AACN,UAAM,IAAI,MAAM,wBAAwB,QAAQ,EAAE;AAAA,EACpD;AAEA,SAAO,6BAA6B,aAAa,OAAO;AAC1D;AAKA,eAAe,oBACb,WACA,SAC+B;AAC/B,MAAI,WAAW;AACb,WAAO,6BAA6B,WAAW,OAAO;AAAA,EACxD;AACA,SAAO,8BAA8B,OAAO;AAC9C;AAKA,SAAS,eACP,UACA,aACA,iBACsB;AAEtB,MAAI,SAA+B,uBAAuB,QAAQ,IAC9D,EAAE,GAAG,UAAU,UAAU,EAAE,GAAG,SAAS,SAAS,EAAE,IAClD,4BAA4B,QAAQ;AAGxC,aAAW,CAAC,KAAK,OAAO,KAAK,OAAO,QAAQ,YAAY,QAAQ,GAAG;AACjE,aAAS,kBAAkB,QAAQ,QAAQ,WAAW,KAAK,QAAQ,KAAK;AAAA,EAC1E;AAGA,MAAI,iBAAiB;AACnB,WAAO,UAAU;AAAA,EACnB;AAEA,SAAO;AACT;AAKA,eAAsB,kBACpB,WACA,SACmB;AACnB,QAAM,aAAa,QAAQ,UAAU;AACrC,QAAM,cAAc,MAAM,oBAAoB,WAAW,OAAO;AAGhE,MAAI,CAAC,QAAQ,OAAO;AAClB,WAAO;AAAA,EACT;AAGA,QAAM,WAAW,qBAAqB,UAAU;AAChD,MAAI,CAAC,UAAU;AACb,WAAO;AAAA,EACT;AAEA,SAAO,eAAe,UAAU,aAAa,QAAQ,OAAO;AAC9D;","names":[]}