@swovohq/fuel 0.2.2-alpha.87 → 0.2.2-alpha.88

package/dist/infra/orchestrator.js

@@ -41,18 +41,21 @@ const path = __importStar(require("path"));
 const chalk_1 = __importDefault(require("chalk"));
 const tofu_runner_1 = require("./tofu-runner");
 const secrets_manager_client_1 = require("./secrets-manager-client");
+const azure_keyvault_client_1 = require("./azure-keyvault-client");
 const config_writer_1 = require("./config-writer");
 const git_client_1 = require("./git-client");
 const github_client_1 = require("./github-client");
 const github_secrets_client_1 = require("./github-secrets-client");
 const subprocess_1 = require("./subprocess");
 const s3_state_bucket_1 = require("./s3-state-bucket");
+const azure_state_storage_1 = require("./azure-state-storage");
+const azure_rbac_1 = require("./azure-rbac");
 function slugify(name) {
     return name.replace(/[^a-z0-9]/gi, '_').toLowerCase();
 }
-async function runCompensation(infraDir, credentials, tofuVars) {
+async function runAwsCompensation(infraDir, credentials, tofuVars) {
     console.log(chalk_1.default.red('\n--- Cleaning up AWS resources ---'));
-    const args = (0, tofu_runner_1.buildDestroyArgs)(credentials, tofuVars);
+    const args = (0, tofu_runner_1.buildDestroyArgs)(credentials, tofuVars, 'ecs');
     const awsEnv = {
         AWS_ACCESS_KEY_ID: credentials.AWS_ACCESS_KEY_ID,
         AWS_SECRET_ACCESS_KEY: credentials.AWS_SECRET_ACCESS_KEY,
@@ -65,33 +68,89 @@ async function runCompensation(infraDir, credentials, tofuVars) {
     }
     console.log(chalk_1.default.green('AWS resources cleaned up'));
 }
-function printOutputTable(albDns, ecrUrl, githubRepoUrl) {
+async function runAzureCompensation(infraDir, credentials, tofuVars) {
+    console.log(chalk_1.default.red('\n--- Cleaning up Azure resources ---'));
+    const args = (0, tofu_runner_1.buildDestroyArgs)(credentials, tofuVars, 'azure');
+    const azureEnv = {
+        ARM_SUBSCRIPTION_ID: credentials.AZURE_SUBSCRIPTION_ID,
+        ARM_TENANT_ID: credentials.AZURE_TENANT_ID,
+        ARM_CLIENT_ID: credentials.AZURE_CLIENT_ID,
+        ARM_CLIENT_SECRET: credentials.AZURE_CLIENT_SECRET,
+    };
+    const { code } = await (0, subprocess_1.spawnStreaming)(args, infraDir, azureEnv);
+    if (code !== 0) {
+        console.error(chalk_1.default.red('Compensation destroy failed. Manually delete Azure resources.'));
+        process.exit(1);
+    }
+    console.log(chalk_1.default.green('Azure resources cleaned up'));
+}
+function printOutputTable(rows) {
     const divider = chalk_1.default.gray('─'.repeat(60));
     console.log('\n' + divider);
     console.log(chalk_1.default.bold('  Deployment Complete'));
     console.log(divider);
-    console.log(`  ${chalk_1.default.dim('ALB DNS')}          ${albDns}`);
-    console.log(`  ${chalk_1.default.dim('ECR URL')}          ${ecrUrl}`);
-    console.log(`  ${chalk_1.default.dim('GitHub Repo')}      ${githubRepoUrl}`);
+    for (const [label, value] of rows) {
+        console.log(`  ${chalk_1.default.dim(label.padEnd(18))}${value}`);
+    }
     console.log(divider);
     console.log(chalk_1.default.cyan('\n  Next steps:'));
     console.log('  Your code has been pushed. Your first deploy will start shortly.\n');
 }
-async function runInfraOrchestrator(targetRoot, _appName, config, credentials, options) {
+async function pushCodeAndProtect(targetRoot, config, credentials, repoName, githubRepoUrl, options) {
+    await (0, git_client_1.wireGitRemote)(targetRoot, githubRepoUrl);
+    console.log(chalk_1.default.green('Git remote origin set'));
+    const allBranches = [...new Set(config.apps.map((app) => app.branch))];
+    const branches = options?.targetBranch
+        ? allBranches.filter((b) => b === options.targetBranch)
+        : allBranches;
+    // Phase 1: push the base commit so the branch exists on the remote.
+    try {
+        await (0, git_client_1.pushToRemote)(targetRoot, credentials.GITHUB_TOKEN, branches, options?.forcePush);
+    }
+    catch {
+        console.log(chalk_1.default.yellow(`Warning: base push failed. Push manually: git push -u origin ${branches.join(' ')}`));
+    }
+    // Phase 2: commit infrastructure and push on top as a fast-forward.
+    const committed = await (0, git_client_1.commitAll)(targetRoot, 'Add infrastructure configuration');
+    if (committed) {
+        console.log(chalk_1.default.green('Infrastructure files committed'));
+    }
+    try {
+        await (0, git_client_1.pushToRemote)(targetRoot, credentials.GITHUB_TOKEN, branches, false);
+        console.log(chalk_1.default.green(`Code pushed to: ${branches.join(', ')}`));
+    }
+    catch {
+        console.log(chalk_1.default.yellow(`Warning: automatic push failed. Push manually: git push origin ${branches.join(' ')}`));
+    }
+    if (!options?.skipBranchProtection) {
+        console.log(chalk_1.default.cyan('--- Applying branch protections ---'));
+        for (const branch of branches) {
+            try {
+                await (0, github_client_1.setBranchProtection)(credentials.GITHUB_TOKEN, credentials.GITHUB_ORGANIZATION, repoName, branch);
+                console.log(chalk_1.default.green(`✓ Branch protection set for: ${branch}`));
+            }
+            catch {
+                console.log(chalk_1.default.yellow(`Warning: could not set branch protection for ${branch}`));
+            }
+        }
+    }
+    else {
+        console.log(chalk_1.default.yellow('--- Skipping branch protections (--skip-branch-protection) ---'));
+    }
+    return branches;
+}
+async function runAwsOrchestrator(targetRoot, config, credentials, options) {
     const infraDir = path.join(targetRoot, 'infra');
-    const repoName = `${config.name}-monorepo`;
-    // Generate TofuVars
+    const repoName = config.github_repo_name ?? `${config.name}-monorepo`;
     const tofuVars = {
         db_username: slugify(config.name),
         db_name: slugify(config.name),
         github_repo_name: repoName,
     };
-    // Ensure S3 state bucket exists (before Tofu init)
     console.log(chalk_1.default.cyan('--- Ensuring state bucket exists ---'));
     const suffix = (0, s3_state_bucket_1.deriveSuffix)(config.name);
     const bucketName = (0, s3_state_bucket_1.buildStateBucketName)(config.name, suffix);
     await (0, s3_state_bucket_1.ensureStateBucket)(credentials, bucketName);
-    // Write secret to AWS Secrets Manager (before Tofu — Tofu reads it via data.tf)
     const secretName = `${config.name}-infrastructure-variables`;
     const secretPayload = {
         ...config,
@@ -102,13 +161,12 @@ async function runInfraOrchestrator(targetRoot, _appName, config, credentials, o
     console.log(chalk_1.default.cyan('--- Writing infrastructure secret ---'));
     await (0, secrets_manager_client_1.putSecret)(credentials, secretName, secretPayload);
     console.log(chalk_1.default.green('Secret written to AWS Secrets Manager'));
-    // SIGINT compensation setup
     const state = { tofuStarted: false };
     const sigintHandler = async () => {
         if (options?.destroyOnFailure) {
             console.log(chalk_1.default.yellow('\nInterrupted — running compensation...'));
             if (state.tofuStarted) {
-                await runCompensation(infraDir, credentials, tofuVars);
+                await runAwsCompensation(infraDir, credentials, tofuVars);
             }
         }
         else {
@@ -119,7 +177,6 @@ async function runInfraOrchestrator(targetRoot, _appName, config, credentials, o
     };
     process.once('SIGINT', sigintHandler);
     try {
-        // Step 1: Create GitHub repo (skip in plan-only mode)
         if (!options?.planOnly) {
             console.log(chalk_1.default.cyan('--- Creating GitHub repository ---'));
             const exists = await (0, github_client_1.repoExists)(credentials.GITHUB_TOKEN, credentials.GITHUB_ORGANIZATION, repoName);
@@ -131,16 +188,15 @@ async function runInfraOrchestrator(targetRoot, _appName, config, credentials, o
                 console.log(chalk_1.default.green(`✓ Repository created: ${credentials.GITHUB_ORGANIZATION}/${repoName}`));
             }
         }
-        // Step 2: Single Tofu apply (all AWS resources)
         state.tofuStarted = true;
         const result = await (0, tofu_runner_1.runTofuApply)(infraDir, credentials, tofuVars, {
             planOnly: options?.planOnly,
+            deployment: 'ecs',
         });
         if (options?.planOnly) {
             console.log(chalk_1.default.green('\n  Plan complete — no resources were created.\n'));
             return;
         }
-        // Step 3: Set GitHub Actions secrets
         console.log(chalk_1.default.cyan('--- Setting GitHub Actions secrets ---'));
         const roleArn = result.outputs['oidc_role_arn'].value;
         const secrets = {
@@ -150,68 +206,134 @@ async function runInfraOrchestrator(targetRoot, _appName, config, credentials, o
         };
         await (0, github_secrets_client_1.setRepoSecrets)(credentials.GITHUB_TOKEN, credentials.GITHUB_ORGANIZATION, repoName, secrets);
         console.log(chalk_1.default.green('✓ GitHub Actions secrets configured'));
-        // Step 4: Push code in two phases.
-        //
-        // GitHub Actions skips `paths`-filtered workflows when it cannot compute a
-        // diff for a push — which is exactly what happens on the orphan/force push
-        // that first creates (or overwrites) the branch. To make the deploy
-        // workflows (filtered on infra/**, apps/**, packages/**, ...) trigger
-        // reliably, we split the push:
-        //   1. push the scaffolded base commit to establish the branch on the remote
-        //   2. commit the infrastructure files and push them on top
-        // The second push is a normal fast-forward with a computable diff, so the
-        // path filters match and the deploy pipeline runs.
         const githubRepoUrl = result.outputs['github_http_repo_url'].value;
-        await (0, git_client_1.wireGitRemote)(targetRoot, githubRepoUrl);
-        console.log(chalk_1.default.green('Git remote origin set'));
-        const allBranches = [...new Set(config.apps.map(app => app.branch))];
-        const branches = options?.targetBranch
-            ? allBranches.filter(b => b === options.targetBranch)
-            : allBranches;
-        // Phase 1: push the base commit so the branch exists on the remote.
-        try {
-            await (0, git_client_1.pushToRemote)(targetRoot, credentials.GITHUB_TOKEN, branches, options?.forcePush);
+        await pushCodeAndProtect(targetRoot, config, credentials, repoName, githubRepoUrl, options);
+        printOutputTable([
+            ['ALB DNS', result.outputs['alb_dns'].value],
+            ['ECR URL', result.outputs['ecr_url'].value],
+            ['GitHub Repo', githubRepoUrl],
+        ]);
+    }
+    catch (err) {
+        if (err instanceof tofu_runner_1.TofuApplyError) {
+            if (options?.destroyOnFailure) {
+                await runAwsCompensation(infraDir, credentials, tofuVars);
+            }
+            else {
+                console.log(chalk_1.default.yellow('\n  Partial resources preserved. Fix the issue and re-run:'));
+                console.log(chalk_1.default.yellow('    fuel infra:deploy\n'));
+            }
+            process.exit(1);
         }
-        catch {
-            console.log(chalk_1.default.yellow(`Warning: base push failed. Push manually: git push -u origin ${branches.join(' ')}`));
+        throw err;
+    }
+    finally {
+        process.removeListener('SIGINT', sigintHandler);
+    }
+}
+async function runAzureOrchestrator(targetRoot, config, credentials, options) {
+    const infraDir = path.join(targetRoot, 'infra');
+    const repoName = config.github_repo_name ?? `${config.name}-monorepo`;
+    const tofuVars = {
+        db_username: slugify(config.name),
+        db_name: slugify(config.name),
+        github_repo_name: repoName,
+    };
+    console.log(chalk_1.default.cyan('--- Ensuring resource group, state storage and Key Vault exist ---'));
+    const suffix = (0, s3_state_bucket_1.deriveSuffix)(config.name);
+    const resourceGroupName = (0, azure_state_storage_1.buildResourceGroupName)(config.name);
+    const storageAccountName = (0, azure_state_storage_1.buildStateStorageAccountName)(config.name, suffix);
+    const keyVaultName = (0, azure_state_storage_1.buildKeyVaultName)(config.name, suffix);
+    await (0, azure_state_storage_1.ensureResourceGroup)(credentials, resourceGroupName, config.location);
+    await (0, azure_state_storage_1.ensureStateStorage)(credentials, resourceGroupName, storageAccountName, config.location);
+    await (0, azure_state_storage_1.ensureBootstrapKeyVault)(credentials, resourceGroupName, keyVaultName, config.location);
+    await (0, azure_rbac_1.ensureRoleAssignmentPermission)(credentials, resourceGroupName);
+    const secretName = 'infrastructure-variables';
+    const secretPayload = {
+        ...config,
+        seed: (0, config_writer_1.generateSeed)(),
+        github_org: credentials.GITHUB_ORGANIZATION,
+    };
+    console.log(chalk_1.default.cyan('--- Writing infrastructure secret ---'));
+    await (0, azure_keyvault_client_1.putSecret)(credentials, keyVaultName, secretName, secretPayload);
+    console.log(chalk_1.default.green('Secret written to Azure Key Vault'));
+    const state = { tofuStarted: false };
+    const sigintHandler = async () => {
+        if (options?.destroyOnFailure) {
+            console.log(chalk_1.default.yellow('\nInterrupted — running compensation...'));
+            if (state.tofuStarted) {
+                await runAzureCompensation(infraDir, credentials, tofuVars);
+            }
         }
-        // Phase 2: commit infrastructure and push on top as a fast-forward.
-        const committed = await (0, git_client_1.commitAll)(targetRoot, 'Add infrastructure configuration');
-        if (committed) {
-            console.log(chalk_1.default.green('Infrastructure files committed'));
+        else {
+            console.log(chalk_1.default.yellow('\nInterrupted — partial resources preserved.'));
+            console.log(chalk_1.default.yellow('Re-run "fuel infra:deploy" to resume.\n'));
         }
-        try {
-            await (0, git_client_1.pushToRemote)(targetRoot, credentials.GITHUB_TOKEN, branches, false);
-            console.log(chalk_1.default.green(`Code pushed to: ${branches.join(', ')}`));
+        process.exit(1);
+    };
+    process.once('SIGINT', sigintHandler);
+    try {
+        if (!options?.planOnly) {
+            console.log(chalk_1.default.cyan('--- Creating GitHub repository ---'));
+            const exists = await (0, github_client_1.repoExists)(credentials.GITHUB_TOKEN, credentials.GITHUB_ORGANIZATION, repoName);
+            if (exists) {
+                console.log(chalk_1.default.yellow(`Repository ${credentials.GITHUB_ORGANIZATION}/${repoName} already exists, skipping creation`));
+            }
+            else {
+                await (0, github_client_1.createGitHubRepo)(credentials.GITHUB_TOKEN, credentials.GITHUB_ORGANIZATION, repoName);
+                console.log(chalk_1.default.green(`✓ Repository created: ${credentials.GITHUB_ORGANIZATION}/${repoName}`));
+            }
         }
-        catch {
-            console.log(chalk_1.default.yellow(`Warning: automatic push failed. Push manually: git push origin ${branches.join(' ')}`));
+        state.tofuStarted = true;
+        const result = await (0, tofu_runner_1.runTofuApply)(infraDir, credentials, tofuVars, {
+            planOnly: options?.planOnly,
+            deployment: 'azure',
+        });
+        if (options?.planOnly) {
+            console.log(chalk_1.default.green('\n  Plan complete — no resources were created.\n'));
+            return;
         }
-        // Step 5: Branch protections
-        if (!options?.skipBranchProtection) {
-            console.log(chalk_1.default.cyan('--- Applying branch protections ---'));
-            for (const branch of branches) {
-                try {
-                    await (0, github_client_1.setBranchProtection)(credentials.GITHUB_TOKEN, credentials.GITHUB_ORGANIZATION, repoName, branch);
-                    console.log(chalk_1.default.green(`✓ Branch protection set for: ${branch}`));
-                }
-                catch {
-                    console.log(chalk_1.default.yellow(`Warning: could not set branch protection for ${branch}`));
-                }
-            }
+        console.log(chalk_1.default.cyan('--- Setting GitHub Actions secrets ---'));
+        const oidcClientId = result.outputs['github_oidc_client_id']?.value;
+        const secrets = {
+            AZURE_TENANT_ID: credentials.AZURE_TENANT_ID,
+            AZURE_SUBSCRIPTION_ID: credentials.AZURE_SUBSCRIPTION_ID,
+            PROJECT_NAME: config.name,
+            ACR_LOGIN_SERVER: result.outputs['acr_login_server'].value,
+            RESOURCE_GROUP: resourceGroupName,
+        };
+        if (oidcClientId) {
+            secrets.AZURE_CLIENT_ID = oidcClientId;
         }
         else {
-            console.log(chalk_1.default.yellow('--- Skipping branch protections (--skip-branch-protection) ---'));
+            console.log(chalk_1.default.yellow('  github_oidc disabled — skipping AZURE_CLIENT_ID secret (CI push/deploy will not work until it is set up)'));
+        }
+        await (0, github_secrets_client_1.setRepoSecrets)(credentials.GITHUB_TOKEN, credentials.GITHUB_ORGANIZATION, repoName, secrets);
+        console.log(chalk_1.default.green('✓ GitHub Actions secrets configured'));
+        const githubRepoUrl = result.outputs['github_http_repo_url'].value;
+        await pushCodeAndProtect(targetRoot, config, credentials, repoName, githubRepoUrl, options);
+        printOutputTable([
+            ['Front Door', result.outputs['front_door_endpoint_hostname']?.value ?? '(not created)'],
+            ['ACR', result.outputs['acr_login_server'].value],
+            ['Resource Group', resourceGroupName],
+            ['GitHub Repo', githubRepoUrl],
+        ]);
+        const domainValidation = (result.outputs['custom_domain_validation']?.value ?? {});
+        const domains = Object.entries(domainValidation);
+        if (domains.length > 0) {
+            console.log(chalk_1.default.cyan('\n--- Custom domain DNS records needed ---'));
+            console.log(chalk_1.default.yellow('  Add these at the domain\'s own DNS provider so Azure can validate ownership and issue the managed TLS certificate:\n'));
+            for (const [hostName, record] of domains) {
+                console.log(chalk_1.default.white(`  ${hostName}`));
+                console.log(`    TXT   ${record.txt_record_name}  →  ${record.txt_record_value}`);
+                console.log(`    CNAME ${hostName}  →  ${record.cname_target}\n`);
+            }
         }
-        // Print output table
-        const albDns = result.outputs['alb_dns'].value;
-        const ecrUrl = result.outputs['ecr_url'].value;
-        printOutputTable(albDns, ecrUrl, githubRepoUrl);
     }
     catch (err) {
         if (err instanceof tofu_runner_1.TofuApplyError) {
             if (options?.destroyOnFailure) {
-                await runCompensation(infraDir, credentials, tofuVars);
+                await runAzureCompensation(infraDir, credentials, tofuVars);
             }
             else {
                 console.log(chalk_1.default.yellow('\n  Partial resources preserved. Fix the issue and re-run:'));
@@ -225,4 +347,10 @@ async function runInfraOrchestrator(targetRoot, _appName, config, credentials, o
         process.removeListener('SIGINT', sigintHandler);
     }
 }
+async function runInfraOrchestrator(targetRoot, _appName, config, credentials, options) {
+    if (config.deployment === 'azure') {
+        return runAzureOrchestrator(targetRoot, config, credentials, options);
+    }
+    return runAwsOrchestrator(targetRoot, config, credentials, options);
+}
 //# sourceMappingURL=orchestrator.js.map

package/dist/infra/orchestrator.js.map

@@ -1 +1 @@
-{"version":3,"file":"orchestrator.js","sourceRoot":"","sources":["../../src/infra/orchestrator.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+DA,oDA0KC;AAzOD,2CAA4B;AAC5B,kDAAyB;AAEzB,+CAAwF;AACxF,qEAAoD;AACpD,mDAA8C;AAC9C,6CAAqE;AACrE,mDAAmF;AACnF,mEAAwD;AACxD,6CAA6C;AAC7C,uDAAyF;AAEzF,SAAS,OAAO,CAAC,IAAY;IAC3B,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAA;AACvD,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,QAAgB,EAChB,WAAwB,EACxB,QAAkB;IAElB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC,CAAA;IAC7D,MAAM,IAAI,GAAG,IAAA,8BAAgB,EAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;IACpD,MAAM,MAAM,GAAG;QACb,iBAAiB,EAAE,WAAW,CAAC,iBAAiB;QAChD,qBAAqB,EAAE,WAAW,CAAC,qBAAqB;QACxD,UAAU,EAAE,WAAW,CAAC,UAAU;KACnC,CAAA;IACD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAA,2BAAc,EAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;IAE7D,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,eAAK,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC,CAAA;QACvF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAA;AACtD,CAAC;AAED,SAAS,gBAAgB,CACvB,MAAc,EACd,MAAc,EACd,aAAqB;IAErB,MAAM,OAAO,GAAG,eAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;IAC1C,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,OAAO,CAAC,CAAA;IAC3B,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAA;IAChD,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IACpB,OAAO,CAAC,GAAG,CAAC,KAAK,eAAK,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,MAAM,EAAE,CAAC,CAAA;IAC3D,OAAO,CAAC,GAAG,CAAC,KAAK,eAAK,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,MAAM,EAAE,CAAC,CAAA;IAC3D,OAAO,CAAC,GAAG,CAAC,KAAK,eAAK,CAAC,GAAG,CAAC,aAAa,CAAC,SAAS,aAAa,EAAE,CAAC,CAAA;IAClE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IACpB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAA;IAC1C,OAAO,CAAC,GAAG,CAAC,sEAAsE,CAAC,CAAA;AACrF,CAAC;AAUM,KAAK,UAAU,oBAAoB,CACxC,UAAkB,EAClB,QAAgB,EAChB,MAAmB,EACnB,WAAwB,EACxB,OAA6B;IAE7B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;IAC/C,MAAM,QAAQ,GAAG,GAAG,MAAM,CAAC,IAAI,WAAW,CAAA;IAE1C,oBAAoB;IACpB,MAAM,QAAQ,GAAa;QACzB,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;QACjC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;QAC7B,gBAAgB,EAAE,QAAQ;KAC3B,CAAA;IAED,mDAAmD;IACnD,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC,CAAA;IAC/D,MAAM,MAAM,GAAG,IAAA,8BAAY,EAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACxC,MAAM,UAAU,GAAG,IAAA,sCAAoB,EAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC5D,MAAM,IAAA,mCAAiB,EAAC,WAAW,EAAE,UAAU,CAAC,CAAA;IAEhD,gFAAgF;IAChF,MAAM,UAAU,GAAG,GAAG,MAAM,CAAC,IAAI,2BAA2B,CAAA;IAC5D,MAAM,aAAa,GAAG;QACpB,GAAG,MAAM;QACT,IAAI,EAAE,IAAA,4BAAY,GAAE;QACpB,UAAU,EAAE,WAAW,CAAC,UAAU;QAClC,UAAU,EAAE,WAAW,CAAC,mBAAmB;KAC5C,CAAA;IACD,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC,CAAA;IAChE,MAAM,IAAA,kCAAS,EAAC,WAAW,EAAE,UAAU,EAAE,aAAa,CAAC,CAAA;IACvD,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC,CAAA;IAEjE,4BAA4B;IAC5B,MAAM,KAAK,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,CAAA;IAEpC,MAAM,aAAa,GAAG,KAAK,IAAI,EAAE;QAC/B,IAAI,OAAO,EAAE,gBAAgB,EAAE,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,MAAM,CAAC,yCAAyC,CAAC,CAAC,CAAA;YACpE,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;gBACtB,MAAM,eAAe,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAA;YACxD,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,MAAM,CAAC,8CAA8C,CAAC,CAAC,CAAA;YACzE,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,MAAM,CAAC,yCAAyC,CAAC,CAAC,CAAA;QACtE,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAA;IAED,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAA;IAErC,IAAI,CAAC;QACH,sDAAsD;QACtD,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC,CAAA;YAC7D,MAAM,MAAM,GAAG,MAAM,IAAA,0BAAU,EAAC,WAAW,CAAC,YAAY,EAAE,WAAW,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAA;YACpG,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,MAAM,CAAC,cAAc,WAAW,CAAC,mBAAmB,IAAI,QAAQ,oCAAoC,CAAC,CAAC,CAAA;YAC1H,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAA,gCAAgB,EAAC,WAAW,CAAC,YAAY,EAAE,WAAW,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAA;gBAC3F,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,yBAAyB,WAAW,CAAC,mBAAmB,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAA;YAClG,CAAC;QACH,CAAC;QAED,gDAAgD;QAChD,KAAK,CAAC,WAAW,GAAG,IAAI,CAAA;QACxB,MAAM,MAAM,GAAG,MAAM,IAAA,0BAAY,EAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE;YACjE,QAAQ,EAAE,OAAO,EAAE,QAAQ;SAC5B,CAAC,CAAA;QAEF,IAAI,OAAO,EAAE,QAAQ,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC,CAAA;YAC5E,OAAM;QACR,CAAC;QAED,qCAAqC;QACrC,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC,CAAA;QACjE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAQ,CAAC,eAAe,CAAC,CAAC,KAAK,CAAA;QACtD,MAAM,OAAO,GAA2B;YACtC,UAAU,EAAE,WAAW,CAAC,UAAU;YAClC,YAAY,EAAE,OAAO;YACrB,YAAY,EAAE,MAAM,CAAC,IAAI;SAC1B,CAAA;QACD,MAAM,IAAA,sCAAc,EAClB,WAAW,CAAC,YAAY,EACxB,WAAW,CAAC,mBAAmB,EAC/B,QAAQ,EACR,OAAO,CACR,CAAA;QACD,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC,CAAA;QAE/D,mCAAmC;QACnC,EAAE;QACF,2EAA2E;QAC3E,2EAA2E;QAC3E,oEAAoE;QACpE,sEAAsE;QACtE,+BAA+B;QAC/B,6EAA6E;QAC7E,4DAA4D;QAC5D,0EAA0E;QAC1E,mDAAmD;QACnD,MAAM,aAAa,GAAG,MAAM,CAAC,OAAQ,CAAC,sBAAsB,CAAC,CAAC,KAAK,CAAA;QACnE,MAAM,IAAA,0BAAa,EAAC,UAAU,EAAE,aAAa,CAAC,CAAA;QAC9C,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAA;QAEjD,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QACpE,MAAM,QAAQ,GAAG,OAAO,EAAE,YAAY;YACpC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,OAAO,CAAC,YAAY,CAAC;YACrD,CAAC,CAAC,WAAW,CAAA;QAEf,oEAAoE;QACpE,IAAI,CAAC;YACH,MAAM,IAAA,yBAAY,EAAC,UAAU,EAAE,WAAW,CAAC,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,CAAA;QACxF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,MAAM,CAAC,gEAAgE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;QACjH,CAAC;QAED,oEAAoE;QACpE,MAAM,SAAS,GAAG,MAAM,IAAA,sBAAS,EAAC,UAAU,EAAE,kCAAkC,CAAC,CAAA;QACjF,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAA;QAC5D,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAA,yBAAY,EAAC,UAAU,EAAE,WAAW,CAAC,YAAY,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAA;YACzE,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,mBAAmB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;QACpE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,MAAM,CAAC,kEAAkE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;QACnH,CAAC;QAED,6BAA6B;QAC7B,IAAI,CAAC,OAAO,EAAE,oBAAoB,EAAE,CAAC;YACnC,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC,CAAA;YAC9D,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;gBAC9B,IAAI,CAAC;oBACH,MAAM,IAAA,mCAAmB,EACvB,WAAW,CAAC,YAAY,EACxB,WAAW,CAAC,mBAAmB,EAC/B,QAAQ,EACR,MAAM,CACP,CAAA;oBACD,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,gCAAgC,MAAM,EAAE,CAAC,CAAC,CAAA;gBACpE,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,MAAM,CAAC,gDAAgD,MAAM,EAAE,CAAC,CAAC,CAAA;gBACrF,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,MAAM,CAAC,gEAAgE,CAAC,CAAC,CAAA;QAC7F,CAAC;QAED,qBAAqB;QACrB,MAAM,MAAM,GAAG,MAAM,CAAC,OAAQ,CAAC,SAAS,CAAC,CAAC,KAAK,CAAA;QAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,OAAQ,CAAC,SAAS,CAAC,CAAC,KAAK,CAAA;QAC/C,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC,CAAA;IACjD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,4BAAc,EAAE,CAAC;YAClC,IAAI,OAAO,EAAE,gBAAgB,EAAE,CAAC;gBAC9B,MAAM,eAAe,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAA;YACxD,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,MAAM,CAAC,4DAA4D,CAAC,CAAC,CAAA;gBACvF,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC,CAAA;YACtD,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,CAAC;QACD,MAAM,GAAG,CAAA;IACX,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAA;IACjD,CAAC;AACH,CAAC"}
+{"version":3,"file":"orchestrator.js","sourceRoot":"","sources":["../../src/infra/orchestrator.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6XA,oDAWC;AAxYD,2CAA4B;AAC5B,kDAAyB;AAEzB,+CAAwF;AACxF,qEAAoE;AACpE,mEAAqE;AACrE,mDAA8C;AAC9C,6CAAqE;AACrE,mDAAmF;AACnF,mEAAwD;AACxD,6CAA6C;AAC7C,uDAAyF;AACzF,+DAO8B;AAC9B,6CAA6D;AAE7D,SAAS,OAAO,CAAC,IAAY;IAC3B,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAA;AACvD,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,QAAgB,EAChB,WAAwB,EACxB,QAAkB;IAElB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC,CAAA;IAC7D,MAAM,IAAI,GAAG,IAAA,8BAAgB,EAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAA;IAC3D,MAAM,MAAM,GAAG;QACb,iBAAiB,EAAE,WAAW,CAAC,iBAAiB;QAChD,qBAAqB,EAAE,WAAW,CAAC,qBAAqB;QACxD,UAAU,EAAE,WAAW,CAAC,UAAU;KACnC,CAAA;IACD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAA,2BAAc,EAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;IAE7D,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,eAAK,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC,CAAA;QACvF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAA;AACtD,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,QAAgB,EAChB,WAAwB,EACxB,QAAkB;IAElB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC,CAAA;IAC/D,MAAM,IAAI,GAAG,IAAA,8BAAgB,EAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA;IAC7D,MAAM,QAAQ,GAAG;QACf,mBAAmB,EAAE,WAAW,CAAC,qBAAqB;QACtD,aAAa,EAAE,WAAW,CAAC,eAAe;QAC1C,aAAa,EAAE,WAAW,CAAC,eAAe;QAC1C,iBAAiB,EAAE,WAAW,CAAC,mBAAmB;KACnD,CAAA;IACD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAA,2BAAc,EAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAA;IAE/D,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,eAAK,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC,CAAA;QACzF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAA;AACxD,CAAC;AAED,SAAS,gBAAgB,CAAC,IAA6B;IACrD,MAAM,OAAO,GAAG,eAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;IAC1C,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,OAAO,CAAC,CAAA;IAC3B,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAA;IAChD,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IACpB,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,KAAK,eAAK,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,EAAE,CAAC,CAAA;IACzD,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IACpB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAA;IAC1C,OAAO,CAAC,GAAG,CAAC,sEAAsE,CAAC,CAAA;AACrF,CAAC;AAUD,KAAK,UAAU,kBAAkB,CAC/B,UAAkB,EAClB,MAAmB,EACnB,WAAwB,EACxB,QAAgB,EAChB,aAAqB,EACrB,OAA6B;IAE7B,MAAM,IAAA,0BAAa,EAAC,UAAU,EAAE,aAAa,CAAC,CAAA;IAC9C,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAA;IAEjD,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;IACtE,MAAM,QAAQ,GAAG,OAAO,EAAE,YAAY;QACpC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,OAAO,CAAC,YAAY,CAAC;QACvD,CAAC,CAAC,WAAW,CAAA;IAEf,oEAAoE;IACpE,IAAI,CAAC;QACH,MAAM,IAAA,yBAAY,EAAC,UAAU,EAAE,WAAW,CAAC,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,CAAA;IACxF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,MAAM,CAAC,gEAAgE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;IACjH,CAAC;IAED,oEAAoE;IACpE,MAAM,SAAS,GAAG,MAAM,IAAA,sBAAS,EAAC,UAAU,EAAE,kCAAkC,CAAC,CAAA;IACjF,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAA;IAC5D,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAA,yBAAY,EAAC,UAAU,EAAE,WAAW,CAAC,YAAY,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAA;QACzE,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,mBAAmB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,MAAM,CAAC,kEAAkE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;IACnH,CAAC;IAED,IAAI,CAAC,OAAO,EAAE,oBAAoB,EAAE,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC,CAAA;QAC9D,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACH,MAAM,IAAA,mCAAmB,EAAC,WAAW,CAAC,YAAY,EAAE,WAAW,CAAC,mBAAmB,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;gBACtG,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,gCAAgC,MAAM,EAAE,CAAC,CAAC,CAAA;YACpE,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,MAAM,CAAC,gDAAgD,MAAM,EAAE,CAAC,CAAC,CAAA;YACrF,CAAC;QACH,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,MAAM,CAAC,gEAAgE,CAAC,CAAC,CAAA;IAC7F,CAAC;IAED,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,UAAkB,EAClB,MAAmD,EACnD,WAAwB,EACxB,OAA6B;IAE7B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;IAC/C,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,IAAI,GAAG,MAAM,CAAC,IAAI,WAAW,CAAA;IAErE,MAAM,QAAQ,GAAa;QACzB,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;QACjC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;QAC7B,gBAAgB,EAAE,QAAQ;KAC3B,CAAA;IAED,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC,CAAA;IAC/D,MAAM,MAAM,GAAG,IAAA,8BAAY,EAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACxC,MAAM,UAAU,GAAG,IAAA,sCAAoB,EAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC5D,MAAM,IAAA,mCAAiB,EAAC,WAAW,EAAE,UAAU,CAAC,CAAA;IAEhD,MAAM,UAAU,GAAG,GAAG,MAAM,CAAC,IAAI,2BAA2B,CAAA;IAC5D,MAAM,aAAa,GAAG;QACpB,GAAG,MAAM;QACT,IAAI,EAAE,IAAA,4BAAY,GAAE;QACpB,UAAU,EAAE,WAAW,CAAC,UAAU;QAClC,UAAU,EAAE,WAAW,CAAC,mBAAmB;KAC5C,CAAA;IACD,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC,CAAA;IAChE,MAAM,IAAA,kCAAY,EAAC,WAAW,EAAE,UAAU,EAAE,aAAa,CAAC,CAAA;IAC1D,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC,CAAA;IAEjE,MAAM,KAAK,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,CAAA;IACpC,MAAM,aAAa,GAAG,KAAK,IAAI,EAAE;QAC/B,IAAI,OAAO,EAAE,gBAAgB,EAAE,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,MAAM,CAAC,yCAAyC,CAAC,CAAC,CAAA;YACpE,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;gBACtB,MAAM,kBAAkB,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAA;YAC3D,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,MAAM,CAAC,8CAA8C,CAAC,CAAC,CAAA;YACzE,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,MAAM,CAAC,yCAAyC,CAAC,CAAC,CAAA;QACtE,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAA;IACD,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAA;IAErC,IAAI,CAAC;QACH,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC,CAAA;YAC7D,MAAM,MAAM,GAAG,MAAM,IAAA,0BAAU,EAAC,WAAW,CAAC,YAAY,EAAE,WAAW,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAA;YACpG,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,MAAM,CAAC,cAAc,WAAW,CAAC,mBAAmB,IAAI,QAAQ,oCAAoC,CAAC,CAAC,CAAA;YAC1H,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAA,gCAAgB,EAAC,WAAW,CAAC,YAAY,EAAE,WAAW,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAA;gBAC3F,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,yBAAyB,WAAW,CAAC,mBAAmB,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAA;YAClG,CAAC;QACH,CAAC;QAED,KAAK,CAAC,WAAW,GAAG,IAAI,CAAA;QACxB,MAAM,MAAM,GAAG,MAAM,IAAA,0BAAY,EAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE;YACjE,QAAQ,EAAE,OAAO,EAAE,QAAQ;YAC3B,UAAU,EAAE,KAAK;SAClB,CAAC,CAAA;QAEF,IAAI,OAAO,EAAE,QAAQ,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC,CAAA;YAC5E,OAAM;QACR,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC,CAAA;QACjE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAQ,CAAC,eAAe,CAAC,CAAC,KAAK,CAAA;QACtD,MAAM,OAAO,GAA2B;YACtC,UAAU,EAAE,WAAW,CAAC,UAAU;YAClC,YAAY,EAAE,OAAO;YACrB,YAAY,EAAE,MAAM,CAAC,IAAI;SAC1B,CAAA;QACD,MAAM,IAAA,sCAAc,EAAC,WAAW,CAAC,YAAY,EAAE,WAAW,CAAC,mBAAmB,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA;QAClG,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC,CAAA;QAE/D,MAAM,aAAa,GAAG,MAAM,CAAC,OAAQ,CAAC,sBAAsB,CAAC,CAAC,KAAK,CAAA;QACnE,MAAM,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,OAAO,CAAC,CAAA;QAE3F,gBAAgB,CAAC;YACf,CAAC,SAAS,EAAE,MAAM,CAAC,OAAQ,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC;YAC7C,CAAC,SAAS,EAAE,MAAM,CAAC,OAAQ,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC;YAC7C,CAAC,aAAa,EAAE,aAAa,CAAC;SAC/B,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,4BAAc,EAAE,CAAC;YAClC,IAAI,OAAO,EAAE,gBAAgB,EAAE,CAAC;gBAC9B,MAAM,kBAAkB,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAA;YAC3D,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,MAAM,CAAC,4DAA4D,CAAC,CAAC,CAAA;gBACvF,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC,CAAA;YACtD,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,CAAC;QACD,MAAM,GAAG,CAAA;IACX,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAA;IACjD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,UAAkB,EAClB,MAAqD,EACrD,WAAwB,EACxB,OAA6B;IAE7B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;IAC/C,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,IAAI,GAAG,MAAM,CAAC,IAAI,WAAW,CAAA;IAErE,MAAM,QAAQ,GAAa;QACzB,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;QACjC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;QAC7B,gBAAgB,EAAE,QAAQ;KAC3B,CAAA;IAED,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC,CAAA;IAC7F,MAAM,MAAM,GAAG,IAAA,8BAAY,EAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACxC,MAAM,iBAAiB,GAAG,IAAA,4CAAsB,EAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAC7D,MAAM,kBAAkB,GAAG,IAAA,kDAA4B,EAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC5E,MAAM,YAAY,GAAG,IAAA,uCAAiB,EAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC3D,MAAM,IAAA,yCAAmB,EAAC,WAAW,EAAE,iBAAiB,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAA;IAC1E,MAAM,IAAA,wCAAkB,EAAC,WAAW,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAA;IAC7F,MAAM,IAAA,6CAAuB,EAAC,WAAW,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAA;IAC5F,MAAM,IAAA,2CAA8B,EAAC,WAAW,EAAE,iBAAiB,CAAC,CAAA;IAEpE,MAAM,UAAU,GAAG,0BAA0B,CAAA;IAC7C,MAAM,aAAa,GAAG;QACpB,GAAG,MAAM;QACT,IAAI,EAAE,IAAA,4BAAY,GAAE;QACpB,UAAU,EAAE,WAAW,CAAC,mBAAmB;KAC5C,CAAA;IACD,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC,CAAA;IAChE,MAAM,IAAA,iCAAc,EAAC,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,CAAC,CAAA;IAC1E,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAA;IAE7D,MAAM,KAAK,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,CAAA;IACpC,MAAM,aAAa,GAAG,KAAK,IAAI,EAAE;QAC/B,IAAI,OAAO,EAAE,gBAAgB,EAAE,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,MAAM,CAAC,yCAAyC,CAAC,CAAC,CAAA;YACpE,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;gBACtB,MAAM,oBAAoB,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAA;YAC7D,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,MAAM,CAAC,8CAA8C,CAAC,CAAC,CAAA;YACzE,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,MAAM,CAAC,yCAAyC,CAAC,CAAC,CAAA;QACtE,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAA;IACD,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAA;IAErC,IAAI,CAAC;QACH,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC,CAAA;YAC7D,MAAM,MAAM,GAAG,MAAM,IAAA,0BAAU,EAAC,WAAW,CAAC,YAAY,EAAE,WAAW,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAA;YACpG,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,MAAM,CAAC,cAAc,WAAW,CAAC,mBAAmB,IAAI,QAAQ,oCAAoC,CAAC,CAAC,CAAA;YAC1H,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAA,gCAAgB,EAAC,WAAW,CAAC,YAAY,EAAE,WAAW,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAA;gBAC3F,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,yBAAyB,WAAW,CAAC,mBAAmB,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAA;YAClG,CAAC;QACH,CAAC;QAED,KAAK,CAAC,WAAW,GAAG,IAAI,CAAA;QACxB,MAAM,MAAM,GAAG,MAAM,IAAA,0BAAY,EAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE;YACjE,QAAQ,EAAE,OAAO,EAAE,QAAQ;YAC3B,UAAU,EAAE,OAAO;SACpB,CAAC,CAAA;QAEF,IAAI,OAAO,EAAE,QAAQ,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC,CAAA;YAC5E,OAAM;QACR,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC,CAAA;QACjE,MAAM,YAAY,GAAG,MAAM,CAAC,OAAQ,CAAC,uBAAuB,CAAC,EAAE,KAAsB,CAAA;QACrF,MAAM,OAAO,GAA2B;YACtC,eAAe,EAAE,WAAW,CAAC,eAAe;YAC5C,qBAAqB,EAAE,WAAW,CAAC,qBAAqB;YACxD,YAAY,EAAE,MAAM,CAAC,IAAI;YACzB,gBAAgB,EAAE,MAAM,CAAC,OAAQ,CAAC,kBAAkB,CAAC,CAAC,KAAK;YAC3D,cAAc,EAAE,iBAAiB;SAClC,CAAA;QACD,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,CAAC,eAAe,GAAG,YAAY,CAAA;QACxC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,MAAM,CAAC,4GAA4G,CAAC,CAAC,CAAA;QACzI,CAAC;QACD,MAAM,IAAA,sCAAc,EAAC,WAAW,CAAC,YAAY,EAAE,WAAW,CAAC,mBAAmB,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA;QAClG,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC,CAAA;QAE/D,MAAM,aAAa,GAAG,MAAM,CAAC,OAAQ,CAAC,sBAAsB,CAAC,CAAC,KAAK,CAAA;QACnE,MAAM,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,OAAO,CAAC,CAAA;QAE3F,gBAAgB,CAAC;YACf,CAAC,YAAY,EAAE,MAAM,CAAC,OAAQ,CAAC,8BAA8B,CAAC,EAAE,KAAK,IAAI,eAAe,CAAC;YACzF,CAAC,KAAK,EAAE,MAAM,CAAC,OAAQ,CAAC,kBAAkB,CAAC,CAAC,KAAK,CAAC;YAClD,CAAC,gBAAgB,EAAE,iBAAiB,CAAC;YACrC,CAAC,aAAa,EAAE,aAAa,CAAC;SAC/B,CAAC,CAAA;QAEF,MAAM,gBAAgB,GAAG,CAAC,MAAM,CAAC,OAAQ,CAAC,0BAA0B,CAAC,EAAE,KAAK,IAAI,EAAE,CAGjF,CAAA;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;QAChD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC,CAAA;YACrE,OAAO,CAAC,GAAG,CACT,eAAK,CAAC,MAAM,CACV,wHAAwH,CACzH,CACF,CAAA;YACD,KAAK,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACzC,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC,CAAC,CAAA;gBACzC,OAAO,CAAC,GAAG,CAAC,aAAa,MAAM,CAAC,eAAe,QAAQ,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAA;gBACjF,OAAO,CAAC,GAAG,CAAC,aAAa,QAAQ,QAAQ,MAAM,CAAC,YAAY,IAAI,CAAC,CAAA;YACnE,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,4BAAc,EAAE,CAAC;YAClC,IAAI,OAAO,EAAE,gBAAgB,EAAE,CAAC;gBAC9B,MAAM,oBAAoB,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAA;YAC7D,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,MAAM,CAAC,4DAA4D,CAAC,CAAC,CAAA;gBACvF,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC,CAAA;YACtD,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,CAAC;QACD,MAAM,GAAG,CAAA;IACX,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAA;IACjD,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,oBAAoB,CACxC,UAAkB,EAClB,QAAgB,EAChB,MAAmB,EACnB,WAAwB,EACxB,OAA6B;IAE7B,IAAI,MAAM,CAAC,UAAU,KAAK,OAAO,EAAE,CAAC;QAClC,OAAO,oBAAoB,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,CAAA;IACvE,CAAC;IACD,OAAO,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,CAAA;AACrE,CAAC"}

package/dist/infra/preflight.js

@@ -51,17 +51,7 @@ async function runPreflight(configPath, credentialOverrides) {
     catch (err) {
         fail('tofu', err.message);
     }
-    // Check 2: credentials
-    let credentials;
-    try {
-        credentials = await (0, credentials_1.resolveCredentials)(undefined, credentialOverrides);
-        pass('AWS credentials valid');
-        pass('GitHub token valid');
-    }
-    catch (err) {
-        fail('credentials', err.message);
-    }
-    // Check 3: config
+    // Check 2: config (loaded first so we know which cloud's credentials to require)
     let config;
     try {
         config = await (0, config_loader_1.loadInfraConfig)(configPath);
@@ -70,6 +60,16 @@ async function runPreflight(configPath, credentialOverrides) {
     catch (err) {
         fail('fuel.yml', err.message);
     }
+    // Check 3: credentials
+    let credentials;
+    try {
+        credentials = await (0, credentials_1.resolveCredentials)(undefined, credentialOverrides, config.deployment);
+        pass(config.deployment === 'azure' ? 'Azure credentials valid' : 'AWS credentials valid');
+        pass('GitHub token valid');
+    }
+    catch (err) {
+        fail('credentials', err.message);
+    }
     return { config: config, credentials: credentials, tofuVersion: tofuVersion };
 }
 //# sourceMappingURL=preflight.js.map

package/dist/infra/preflight.js.map

@@ -1 +1 @@
-{"version":3,"file":"preflight.js","sourceRoot":"","sources":["../../src/infra/preflight.ts"],"names":[],"mappings":";;;;;AAkBA,4CA2BC;AAQD,oCAiCC;AAtFD,iDAAwC;AACxC,kDAAyB;AACzB,mDAAiD;AACjD,+CAAkD;AAGlD,MAAM,cAAc,GAAG,CAAC,CAAA;AACxB,MAAM,cAAc,GAAG,CAAC,CAAA;AAExB,SAAS,IAAI,CAAC,KAAa;IACzB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,KAAK,CAAC,CAAA;AAC7C,CAAC;AAED,SAAS,IAAI,CAAC,KAAa,EAAE,MAAc;IACzC,OAAO,CAAC,KAAK,CAAC,eAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,KAAK,GAAG,IAAI,GAAG,MAAM,CAAC,CAAA;IAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC;AAED,SAAgB,gBAAgB;IAC9B,IAAI,MAAc,CAAA;IAClB,IAAI,CAAC;QACH,MAAM,GAAG,IAAA,wBAAQ,EAAC,cAAc,EAAE;YAChC,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CACb,qFAAqF,CACtF,CAAA;IACH,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAA;IAC3D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;IACxD,CAAC;IACD,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC3D,IACE,KAAK,GAAG,cAAc;QACtB,CAAC,KAAK,KAAK,cAAc,IAAI,KAAK,GAAG,cAAc,CAAC,EACpD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,SAAS,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,iBAAiB,cAAc,IAAI,cAAc,eAAe;YACzG,qDAAqD,CACtD,CAAA;IACH,CAAC;IACD,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;AAC9C,CAAC;AAQM,KAAK,UAAU,YAAY,CAChC,UAAkB,EAClB,mBAA8E;IAE9E,uBAAuB;IACvB,IAAI,WAAmB,CAAA;IACvB,IAAI,CAAC;QACH,WAAW,GAAG,gBAAgB,EAAE,CAAA;QAChC,IAAI,CAAC,QAAQ,WAAW,EAAE,CAAC,CAAA;IAC7B,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,CAAA;IAC3B,CAAC;IAED,uBAAuB;IACvB,IAAI,WAAwB,CAAA;IAC5B,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,IAAA,gCAAkB,EAAC,SAAS,EAAE,mBAAmB,CAAC,CAAA;QACtE,IAAI,CAAC,uBAAuB,CAAC,CAAA;QAC7B,IAAI,CAAC,oBAAoB,CAAC,CAAA;IAC5B,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,IAAI,CAAC,aAAa,EAAE,GAAG,CAAC,OAAO,CAAC,CAAA;IAClC,CAAC;IAED,kBAAkB;IAClB,IAAI,MAAmB,CAAA;IACvB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAA,+BAAe,EAAC,UAAU,CAAC,CAAA;QAC1C,IAAI,CAAC,oBAAoB,MAAM,CAAC,IAAI,CAAC,MAAM,YAAY,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACtG,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,CAAA;IAC/B,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,MAAO,EAAE,WAAW,EAAE,WAAY,EAAE,WAAW,EAAE,WAAY,EAAE,CAAA;AAClF,CAAC"}
+{"version":3,"file":"preflight.js","sourceRoot":"","sources":["../../src/infra/preflight.ts"],"names":[],"mappings":";;;;;AAkBA,4CA2BC;AAQD,oCAiCC;AAtFD,iDAAwC;AACxC,kDAAyB;AACzB,mDAAiD;AACjD,+CAAkD;AAGlD,MAAM,cAAc,GAAG,CAAC,CAAA;AACxB,MAAM,cAAc,GAAG,CAAC,CAAA;AAExB,SAAS,IAAI,CAAC,KAAa;IACzB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,KAAK,CAAC,CAAA;AAC7C,CAAC;AAED,SAAS,IAAI,CAAC,KAAa,EAAE,MAAc;IACzC,OAAO,CAAC,KAAK,CAAC,eAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,KAAK,GAAG,IAAI,GAAG,MAAM,CAAC,CAAA;IAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC;AAED,SAAgB,gBAAgB;IAC9B,IAAI,MAAc,CAAA;IAClB,IAAI,CAAC;QACH,MAAM,GAAG,IAAA,wBAAQ,EAAC,cAAc,EAAE;YAChC,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CACb,qFAAqF,CACtF,CAAA;IACH,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAA;IAC3D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;IACxD,CAAC;IACD,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC3D,IACE,KAAK,GAAG,cAAc;QACtB,CAAC,KAAK,KAAK,cAAc,IAAI,KAAK,GAAG,cAAc,CAAC,EACpD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,SAAS,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,iBAAiB,cAAc,IAAI,cAAc,eAAe;YACzG,qDAAqD,CACtD,CAAA;IACH,CAAC;IACD,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;AAC9C,CAAC;AAQM,KAAK,UAAU,YAAY,CAChC,UAAkB,EAClB,mBAA8E;IAE9E,uBAAuB;IACvB,IAAI,WAAmB,CAAA;IACvB,IAAI,CAAC;QACH,WAAW,GAAG,gBAAgB,EAAE,CAAA;QAChC,IAAI,CAAC,QAAQ,WAAW,EAAE,CAAC,CAAA;IAC7B,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,CAAA;IAC3B,CAAC;IAED,iFAAiF;IACjF,IAAI,MAAmB,CAAA;IACvB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAA,+BAAe,EAAC,UAAU,CAAC,CAAA;QAC1C,IAAI,CAAC,oBAAoB,MAAM,CAAC,IAAI,CAAC,MAAM,YAAY,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACtG,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,CAAA;IAC/B,CAAC;IAED,uBAAuB;IACvB,IAAI,WAAwB,CAAA;IAC5B,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,IAAA,gCAAkB,EAAC,SAAS,EAAE,mBAAmB,EAAE,MAAO,CAAC,UAAU,CAAC,CAAA;QAC1F,IAAI,CAAC,MAAO,CAAC,UAAU,KAAK,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAA;QAC1F,IAAI,CAAC,oBAAoB,CAAC,CAAA;IAC5B,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,IAAI,CAAC,aAAa,EAAE,GAAG,CAAC,OAAO,CAAC,CAAA;IAClC,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,MAAO,EAAE,WAAW,EAAE,WAAY,EAAE,WAAW,EAAE,WAAY,EAAE,CAAA;AAClF,CAAC"}

package/dist/infra/remote-secret.d.ts

@@ -0,0 +1,14 @@
+import { Credentials, Deployment } from './types';
+/** Reads the fuel.yml-shaped infrastructure secret from wherever the deployment's provider stores it. */
+export declare function fetchRemoteConfigSecret(deployment: Deployment, credentials: Credentials, projectName: string): Promise<Record<string, unknown>>;
+/**
+ * True when the error shape indicates no secret exists yet (first deploy).
+ *
+ * AWS Secrets Manager is a shared multi-tenant endpoint — a missing secret is a
+ * proper API-level `ResourceNotFoundException`/404. Azure Key Vault gets its own
+ * DNS name per vault, so on a brand-new project the vault itself doesn't exist
+ * yet and the lookup fails at the network layer (`ENOTFOUND`) rather than with
+ * an HTTP 404 — that has to be treated the same as "no existing secret".
+ */
+export declare function isSecretNotFoundError(err: any): boolean;
+//# sourceMappingURL=remote-secret.d.ts.map

package/dist/infra/remote-secret.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-secret.d.ts","sourceRoot":"","sources":["../../src/infra/remote-secret.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AAOjD,yGAAyG;AACzG,wBAAsB,uBAAuB,CAC3C,UAAU,EAAE,UAAU,EACtB,WAAW,EAAE,WAAW,EACxB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAMlC;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAcvD"}

package/dist/infra/remote-secret.js

@@ -0,0 +1,42 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.fetchRemoteConfigSecret = fetchRemoteConfigSecret;
+exports.isSecretNotFoundError = isSecretNotFoundError;
+const secrets_manager_client_1 = require("./secrets-manager-client");
+const azure_keyvault_client_1 = require("./azure-keyvault-client");
+const azure_state_storage_1 = require("./azure-state-storage");
+const AZURE_SECRET_NAME = 'infrastructure-variables';
+/** Reads the fuel.yml-shaped infrastructure secret from wherever the deployment's provider stores it. */
+async function fetchRemoteConfigSecret(deployment, credentials, projectName) {
+    if (deployment === 'azure') {
+        const vaultName = (0, azure_state_storage_1.buildKeyVaultName)(projectName, (0, azure_state_storage_1.deriveSuffix)(projectName));
+        return (0, azure_keyvault_client_1.getSecret)(credentials, vaultName, AZURE_SECRET_NAME);
+    }
+    return (0, secrets_manager_client_1.getSecret)(credentials, `${projectName}-infrastructure-variables`);
+}
+/**
+ * True when the error shape indicates no secret exists yet (first deploy).
+ *
+ * AWS Secrets Manager is a shared multi-tenant endpoint — a missing secret is a
+ * proper API-level `ResourceNotFoundException`/404. Azure Key Vault gets its own
+ * DNS name per vault, so on a brand-new project the vault itself doesn't exist
+ * yet and the lookup fails at the network layer (`ENOTFOUND`) rather than with
+ * an HTTP 404 — that has to be treated the same as "no existing secret".
+ */
+function isSecretNotFoundError(err) {
+    if (err?.name === 'ResourceNotFoundException')
+        return true;
+    if (err?.code === 'SecretNotFound')
+        return true;
+    if (err?.statusCode === 404)
+        return true;
+    // Scoped to the vault's own hostname so an unrelated DNS/network failure elsewhere
+    // isn't misread as "no secret yet" — a bare ENOTFOUND/getaddrinfo isn't enough.
+    if (typeof err?.message === 'string' &&
+        /ENOTFOUND|getaddrinfo/i.test(err.message) &&
+        /\.vault\.azure\.net/i.test(err.message)) {
+        return true;
+    }
+    return false;
+}
+//# sourceMappingURL=remote-secret.js.map

package/dist/infra/remote-secret.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-secret.js","sourceRoot":"","sources":["../../src/infra/remote-secret.ts"],"names":[],"mappings":";;AAQA,0DAUC;AAWD,sDAcC;AA1CD,qEAAoE;AACpE,mEAAqE;AACrE,+DAAuE;AAEvE,MAAM,iBAAiB,GAAG,0BAA0B,CAAA;AAEpD,yGAAyG;AAClG,KAAK,UAAU,uBAAuB,CAC3C,UAAsB,EACtB,WAAwB,EACxB,WAAmB;IAEnB,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,IAAA,uCAAiB,EAAC,WAAW,EAAE,IAAA,kCAAY,EAAC,WAAW,CAAC,CAAC,CAAA;QAC3E,OAAO,IAAA,iCAAc,EAAC,WAAW,EAAE,SAAS,EAAE,iBAAiB,CAAC,CAAA;IAClE,CAAC;IACD,OAAO,IAAA,kCAAY,EAAC,WAAW,EAAE,GAAG,WAAW,2BAA2B,CAAC,CAAA;AAC7E,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,qBAAqB,CAAC,GAAQ;IAC5C,IAAI,GAAG,EAAE,IAAI,KAAK,2BAA2B;QAAE,OAAO,IAAI,CAAA;IAC1D,IAAI,GAAG,EAAE,IAAI,KAAK,gBAAgB;QAAE,OAAO,IAAI,CAAA;IAC/C,IAAI,GAAG,EAAE,UAAU,KAAK,GAAG;QAAE,OAAO,IAAI,CAAA;IACxC,mFAAmF;IACnF,gFAAgF;IAChF,IACE,OAAO,GAAG,EAAE,OAAO,KAAK,QAAQ;QAChC,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;QAC1C,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EACxC,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC"}

package/dist/infra/template-engine.d.ts

@@ -21,11 +21,24 @@ export declare function patchBackendTf(infraRoot: string, projectName: string, a
  * Patch default.tfvars: set project_name, aws_region, db_password from config and credentials.
  */
 export declare function patchDefaultTfvars(infraRoot: string, config: InfraConfig, credentials: Credentials): Promise<void>;
+/**
+ * Patch backend.tf (azurerm backend): replace {resource_group_name}, {storage_account_name},
+ * {container_name} placeholders.
+ */
+export declare function patchAzureBackendTf(infraRoot: string, resourceGroupName: string, storageAccountName: string, containerName: string): Promise<void>;
+/**
+ * Patch default.tfvars for the azure template: project_name, location, github_repo_name,
+ * db_username/db_name (used only when an app enables the Postgres engine).
+ */
+export declare function patchAzureDefaultTfvars(infraRoot: string, config: Extract<InfraConfig, {
+    deployment: 'azure';
+}>): Promise<void>;
 /**
  * Prune modules not referenced in main.tf (after patching).
  * Always keeps modules listed in MODULES_DONT_REMOVE (e.g., secret-main).
  */
 export declare function pruneUnusedModules(infraRoot: string): Promise<void>;
+export declare function acrNameFor(projectName: string): string;
 /**
  * Copy GitHub Actions workflow files into <projectDir>/.github/workflows/.
  * Replaces what Terraform's github_repository_file resources used to do.

package/dist/infra/template-engine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"template-engine.d.ts","sourceRoot":"","sources":["../../src/infra/template-engine.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AASlD;;;GAGG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAenE;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAMpE;AAED;;GAEG;AACH,wBAAsB,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAKlE;AAED;;GAEG;AACH,wBAAsB,cAAc,CAClC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC,CAQf;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CACtC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,WAAW,EACnB,WAAW,EAAE,WAAW,GACvB,OAAO,CAAC,IAAI,CAAC,CAYf;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAoBzE;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,WAAW,EACnB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC,CAiGf;AAED;;;;;;;GAOG;AACH,wBAAsB,aAAa,CACjC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,WAAW,EACnB,WAAW,EAAE,WAAW,EACxB,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,IAAI,CAAC,CA4Cf"}
+{"version":3,"file":"template-engine.d.ts","sourceRoot":"","sources":["../../src/infra/template-engine.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AASlD;;;GAGG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAenE;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAMpE;AAED;;GAEG;AACH,wBAAsB,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAKlE;AAED;;GAEG;AACH,wBAAsB,cAAc,CAClC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC,CAQf;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CACtC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,WAAW,EACnB,WAAW,EAAE,WAAW,GACvB,OAAO,CAAC,IAAI,CAAC,CAYf;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,MAAM,EACjB,iBAAiB,EAAE,MAAM,EACzB,kBAAkB,EAAE,MAAM,EAC1B,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,IAAI,CAAC,CAQf;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAC3C,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,OAAO,CAAC,WAAW,EAAE;IAAE,UAAU,EAAE,OAAO,CAAA;CAAE,CAAC,GACpD,OAAO,CAAC,IAAI,CAAC,CAiBf;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAoBzE;AA8CD,wBAAgB,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAEtD;AAwCD;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,WAAW,EACnB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC,CAgDf;AAED;;;;;;;GAOG;AACH,wBAAsB,aAAa,CACjC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,WAAW,EACnB,WAAW,EAAE,WAAW,EACxB,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,IAAI,CAAC,CAuDf"}