clawdlets 0.0.1 → 0.2.0

package/dist/commands/project.js

@@ -0,0 +1,264 @@
+import fs from "node:fs";
+import path from "node:path";
+import process from "node:process";
+import { tmpdir } from "node:os";
+import { defineCommand } from "citty";
+import * as p from "@clack/prompts";
+import { downloadTemplate } from "giget";
+import { ensureDir, writeFileAtomic } from "@clawdlets/core/lib/fs-safe";
+import { capture, run } from "@clawdlets/core/lib/run";
+import { assertSafeHostName } from "@clawdlets/core/lib/clawdlets-config";
+import { resolveTemplateSpec } from "../lib/template-spec.js";
+import { cancelFlow, navOnCancel, NAV_EXIT } from "../lib/wizard.js";
+function wantsInteractive(flag) {
+    if (flag)
+        return true;
+    const env = String(process.env["CLAWDLETS_INTERACTIVE"] || "").trim();
+    return env === "1" || env.toLowerCase() === "true";
+}
+function requireTtyIfInteractive(interactive) {
+    if (!interactive)
+        return;
+    if (!process.stdout.isTTY)
+        throw new Error("--interactive requires a TTY");
+}
+function applySubs(s, subs) {
+    let out = s;
+    for (const [k, v] of Object.entries(subs))
+        out = out.split(k).join(v);
+    return out;
+}
+function isProbablyText(file) {
+    const base = path.basename(file);
+    if (base === "Justfile" || base === "_gitignore")
+        return true;
+    const ext = path.extname(file).toLowerCase();
+    return [
+        ".md",
+        ".nix",
+        ".tf",
+        ".hcl",
+        ".json",
+        ".yaml",
+        ".yml",
+        ".txt",
+        ".lock",
+        ".gitignore",
+    ].includes(ext);
+}
+async function copyTree(params) {
+    const entries = await fs.promises.readdir(params.srcDir, { withFileTypes: true });
+    for (const ent of entries) {
+        const srcName = ent.name;
+        const srcPath = path.join(params.srcDir, srcName);
+        const renamed = srcName === "_gitignore"
+            ? ".gitignore"
+            : applySubs(srcName, params.subs);
+        const destPath = path.join(params.destDir, renamed);
+        if (ent.isDirectory()) {
+            await ensureDir(destPath);
+            await copyTree({ srcDir: srcPath, destDir: destPath, subs: params.subs });
+            continue;
+        }
+        if (!ent.isFile())
+            continue;
+        const buf = await fs.promises.readFile(srcPath);
+        if (!isProbablyText(srcName)) {
+            await ensureDir(path.dirname(destPath));
+            await fs.promises.writeFile(destPath, buf);
+            continue;
+        }
+        const rendered = applySubs(buf.toString("utf8"), params.subs);
+        await writeFileAtomic(destPath, rendered);
+    }
+}
+async function dirHasAnyFiles(dir) {
+    try {
+        const entries = await fs.promises.readdir(dir);
+        return entries.length > 0;
+    }
+    catch {
+        return false;
+    }
+}
+async function ensureHookExecutables(repoRoot) {
+    const hooksDir = path.join(repoRoot, ".githooks");
+    try {
+        const entries = await fs.promises.readdir(hooksDir, { withFileTypes: true });
+        let hasHooks = false;
+        for (const ent of entries) {
+            if (!ent.isFile())
+                continue;
+            const p = path.join(hooksDir, ent.name);
+            await fs.promises.chmod(p, 0o755);
+            hasHooks = true;
+        }
+        return hasHooks;
+    }
+    catch {
+        return false;
+    }
+}
+async function findTemplateRoot(dir) {
+    const direct = path.join(dir, "fleet", "clawdlets.json");
+    if (fs.existsSync(direct))
+        return dir;
+    const entries = await fs.promises.readdir(dir, { withFileTypes: true });
+    const candidates = [];
+    for (const ent of entries) {
+        if (!ent.isDirectory())
+            continue;
+        const candidate = path.join(dir, ent.name);
+        if (fs.existsSync(path.join(candidate, "fleet", "clawdlets.json"))) {
+            candidates.push(candidate);
+        }
+    }
+    if (candidates.length === 1)
+        return candidates[0];
+    throw new Error(`template root missing fleet/clawdlets.json (searched: ${dir})`);
+}
+const projectInit = defineCommand({
+    meta: { name: "init", description: "Scaffold a new clawdlets infra repo (from clawdlets-template)." },
+    args: {
+        dir: { type: "string", description: "Target directory (created if missing)." },
+        host: { type: "string", description: "Host name placeholder (default: clawdbot-fleet-host).", default: "clawdbot-fleet-host" },
+        gitInit: { type: "boolean", description: "Run `git init` in the new directory.", default: true },
+        interactive: { type: "boolean", description: "Prompt for confirmation (requires TTY).", default: false },
+        dryRun: { type: "boolean", description: "Print planned files without writing.", default: false },
+        template: { type: "string", description: "Template repo (default: config/template-source.json)." },
+        templatePath: { type: "string", description: "Template path inside repo (default: config/template-source.json)." },
+        templateRef: { type: "string", description: "Template git ref (default: config/template-source.json)." },
+    },
+    async run({ args }) {
+        const interactive = wantsInteractive(Boolean(args.interactive));
+        requireTtyIfInteractive(interactive);
+        const dirRaw = String(args.dir || "").trim();
+        if (!dirRaw)
+            throw new Error("missing --dir");
+        const destDir = path.resolve(process.cwd(), dirRaw);
+        const host = String(args.host || "clawdbot-fleet-host").trim() || "clawdbot-fleet-host";
+        assertSafeHostName(host);
+        const projectName = path.basename(destDir);
+        if (interactive) {
+            p.intro("clawdlets project init");
+            const ok = await p.confirm({
+                message: `Create project at ${destDir}?`,
+                initialValue: true,
+            });
+            if (p.isCancel(ok)) {
+                const nav = await navOnCancel({ flow: "project init", canBack: false });
+                if (nav === NAV_EXIT)
+                    cancelFlow();
+                return;
+            }
+            if (!ok) {
+                cancelFlow();
+                return;
+            }
+        }
+        const enableGarnixPrivate = false;
+        const templateSpec = resolveTemplateSpec({
+            template: args.template,
+            templatePath: args.templatePath,
+            templateRef: args.templateRef,
+        });
+        const exists = fs.existsSync(destDir);
+        if (exists && (await dirHasAnyFiles(destDir))) {
+            throw new Error(`target dir not empty: ${destDir}`);
+        }
+        const subs = {
+            "__PROJECT_NAME__": projectName,
+            "clawdbot-fleet-host": host,
+            "clawdbot_fleet_host": host.replace(/-/g, "_"),
+        };
+        const tempDir = await fs.promises.mkdtemp(path.join(tmpdir(), "clawdlets-template-"));
+        let templateDir = tempDir;
+        try {
+            const downloaded = await downloadTemplate(templateSpec.spec, {
+                dir: tempDir,
+                force: true,
+                auth: String(process.env["GITHUB_TOKEN"] || process.env["CLAWDLETS_TEMPLATE_TOKEN"] || "").trim() || undefined,
+            });
+            templateDir = await findTemplateRoot(downloaded.dir || tempDir);
+        }
+        catch (e) {
+            await fs.promises.rm(tempDir, { recursive: true, force: true });
+            throw e;
+        }
+        const planned = [];
+        const walk = async (srcDir, rel) => {
+            const entries = await fs.promises.readdir(srcDir, { withFileTypes: true });
+            for (const ent of entries) {
+                const srcName = ent.name;
+                const mapped = srcName === "_gitignore" ? ".gitignore" : applySubs(srcName, subs);
+                const nextRel = path.join(rel, mapped);
+                if (ent.isDirectory()) {
+                    await walk(path.join(srcDir, srcName), nextRel);
+                }
+                else if (ent.isFile()) {
+                    planned.push(nextRel);
+                }
+            }
+        };
+        await walk(templateDir, ".");
+        if (args.dryRun) {
+            p.note(planned.sort().join("\n"), "Planned files");
+            p.outro("dry-run");
+            await fs.promises.rm(tempDir, { recursive: true, force: true });
+            return;
+        }
+        await ensureDir(destDir);
+        await copyTree({ srcDir: templateDir, destDir, subs });
+        await fs.promises.rm(tempDir, { recursive: true, force: true });
+        const hasHooks = await ensureHookExecutables(destDir);
+        if (!enableGarnixPrivate) {
+            const configPath = path.join(destDir, "fleet", "clawdlets.json");
+            const raw = await fs.promises.readFile(configPath, "utf8");
+            const parsed = JSON.parse(raw);
+            const hostCfg = parsed?.hosts?.[host];
+            if (hostCfg && typeof hostCfg === "object") {
+                hostCfg.cache = hostCfg.cache && typeof hostCfg.cache === "object" ? hostCfg.cache : {};
+                hostCfg.cache.garnix = hostCfg.cache.garnix && typeof hostCfg.cache.garnix === "object" ? hostCfg.cache.garnix : {};
+                hostCfg.cache.garnix.private =
+                    hostCfg.cache.garnix.private && typeof hostCfg.cache.garnix.private === "object" ? hostCfg.cache.garnix.private : {};
+                hostCfg.cache.garnix.private.enable = false;
+                await writeFileAtomic(configPath, `${JSON.stringify(parsed, null, 2)}\n`);
+            }
+        }
+        if (args.gitInit) {
+            try {
+                await capture("git", ["--version"], { cwd: destDir });
+                await run("git", ["init"], { cwd: destDir });
+                if (hasHooks)
+                    await run("git", ["config", "core.hooksPath", ".githooks"], { cwd: destDir });
+            }
+            catch {
+                if (interactive)
+                    p.note("git not available; skipped `git init`", "gitInit");
+            }
+        }
+        const next = [
+            "next:",
+            `- cd ${destDir}`,
+            "- create a git repo + set origin (recommended; enables blank base flake)",
+            "- clawdlets env init  # set HCLOUD_TOKEN in .clawdlets/env (required for provisioning)",
+            `- clawdlets host set --host ${host} --admin-cidr <your-ip>/32 --disk-device /dev/sda --add-ssh-key-file $HOME/.ssh/id_ed25519.pub`,
+            `- clawdlets host set --host ${host} --ssh-exposure bootstrap`,
+            `- clawdlets secrets init --host ${host}`,
+            `- clawdlets doctor --host ${host}`,
+            `- clawdlets bootstrap --host ${host}`,
+            `- clawdlets host set --host ${host} --target-host <ssh-alias|user@host>`,
+            `- clawdlets host set --host ${host} --ssh-exposure tailnet`,
+            `- clawdlets lockdown --host ${host}`,
+        ].join("\n");
+        if (interactive)
+            p.outro(next);
+        else
+            console.log(next);
+    },
+});
+export const project = defineCommand({
+    meta: { name: "project", description: "Project scaffolding." },
+    subCommands: { init: projectInit },
+});
+//# sourceMappingURL=project.js.map

package/dist/commands/project.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.js","sourceRoot":"","sources":["../../src/commands/project.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,OAAO,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AACtC,OAAO,KAAK,CAAC,MAAM,gBAAgB,CAAC;AACpC,OAAO,EAAE,gBAAgB,EAAE,MAAM,OAAO,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAC1E,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAErE,SAAS,gBAAgB,CAAC,IAAyB;IACjD,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACtE,OAAO,GAAG,KAAK,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC;AACrD,CAAC;AAED,SAAS,uBAAuB,CAAC,WAAoB;IACnD,IAAI,CAAC,WAAW;QAAE,OAAO;IACzB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,SAAS,CAAC,CAAS,EAAE,IAA4B;IACxD,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,YAAY;QAAE,OAAO,IAAI,CAAC;IAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7C,OAAO;QACL,KAAK;QACL,MAAM;QACN,KAAK;QACL,MAAM;QACN,OAAO;QACP,OAAO;QACP,MAAM;QACN,MAAM;QACN,OAAO;QACP,YAAY;KACb,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,MAIvB;IACC,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAClF,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAElD,MAAM,OAAO,GACX,OAAO,KAAK,YAAY;YACtB,CAAC,CAAC,YAAY;YACd,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAEpD,IAAI,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;YACtB,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC;YAC1B,MAAM,QAAQ,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1E,SAAS;QACX,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE;YAAE,SAAS;QAE5B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;YACxC,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YAC3C,SAAS;QACX,CAAC;QAED,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9D,MAAM,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,GAAW;IACvC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/C,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,QAAgB;IACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7E,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE;gBAAE,SAAS;YAC5B,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YACxC,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YAClC,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,GAAW;IACzC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC;IACzD,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,GAAG,CAAC;IAEtC,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACxE,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE;YAAE,SAAS;QACjC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC,EAAE,CAAC;YACnE,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,UAAU,CAAC,CAAC,CAAE,CAAC;IACnD,MAAM,IAAI,KAAK,CAAC,yDAAyD,GAAG,GAAG,CAAC,CAAC;AACnF,CAAC;AAED,MAAM,WAAW,GAAG,aAAa,CAAC;IAChC,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,gEAAgE,EAAE;IACrG,IAAI,EAAE;QACJ,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,wCAAwC,EAAE;QAC9E,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uDAAuD,EAAE,OAAO,EAAE,qBAAqB,EAAE;QAC9H,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,sCAAsC,EAAE,OAAO,EAAE,IAAI,EAAE;QAChG,WAAW,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,yCAAyC,EAAE,OAAO,EAAE,KAAK,EAAE;QACxG,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,sCAAsC,EAAE,OAAO,EAAE,KAAK,EAAE;QAChG,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uDAAuD,EAAE;QAClG,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mEAAmE,EAAE;QAClH,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,0DAA0D,EAAE;KACzG;IACD,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE;QAChB,MAAM,WAAW,GAAG,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;QAChE,uBAAuB,CAAC,WAAW,CAAC,CAAC;QAErC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,qBAAqB,CAAC,CAAC,IAAI,EAAE,IAAI,qBAAqB,CAAC;QACxF,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACzB,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAE3C,IAAI,WAAW,EAAE,CAAC;YAChB,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;YAClC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC;gBACzB,OAAO,EAAE,qBAAqB,OAAO,GAAG;gBACxC,YAAY,EAAE,IAAI;aACnB,CAAC,CAAC;YACH,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;gBACnB,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;gBACxE,IAAI,GAAG,KAAK,QAAQ;oBAAE,UAAU,EAAE,CAAC;gBACnC,OAAO;YACT,CAAC;YACD,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,UAAU,EAAE,CAAC;gBACb,OAAO;YACT,CAAC;QACH,CAAC;QAED,MAAM,mBAAmB,GAAG,KAAK,CAAC;QAElC,MAAM,YAAY,GAAG,mBAAmB,CAAC;YACvC,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,MAAM,IAAI,CAAC,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,yBAAyB,OAAO,EAAE,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,IAAI,GAAG;YACX,kBAAkB,EAAE,WAAW;YAC/B,qBAAqB,EAAE,IAAI;YAC3B,qBAAqB,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;SAC/C,CAAC;QAEF,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;QACtF,IAAI,WAAW,GAAG,OAAO,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,YAAY,CAAC,IAAI,EAAE;gBAC3D,GAAG,EAAE,OAAO;gBACZ,KAAK,EAAE,IAAI;gBACX,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS;aAC/G,CAAC,CAAC;YACH,WAAW,GAAG,MAAM,gBAAgB,CAAC,UAAU,CAAC,GAAG,IAAI,OAAO,CAAC,CAAC;QAClE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAChE,MAAM,CAAC,CAAC;QACV,CAAC;QAED,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,KAAK,EAAE,MAAc,EAAE,GAAW,EAAE,EAAE;YACjD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3E,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;gBAC1B,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC;gBACzB,MAAM,MAAM,GAAG,OAAO,KAAK,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBAClF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBACvC,IAAI,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;oBACtB,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;gBAClD,CAAC;qBAAM,IAAI,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;oBACxB,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACxB,CAAC;YACH,CAAC;QACH,CAAC,CAAC;QACF,MAAM,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QAE7B,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,eAAe,CAAC,CAAC;YACnD,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACnB,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QAED,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,QAAQ,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAEtD,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACzB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC;YACjE,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAQ,CAAC;YACtC,MAAM,OAAO,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAC3C,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxF,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,IAAI,OAAO,OAAO,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpH,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO;oBAC1B,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvH,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC;gBAC5C,MAAM,eAAe,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;gBACtD,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;gBAC7C,IAAI,QAAQ;oBAAE,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,gBAAgB,EAAE,WAAW,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YAC9F,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,WAAW;oBAAE,CAAC,CAAC,IAAI,CAAC,uCAAuC,EAAE,SAAS,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC;QAEA,MAAM,IAAI,GAAG;YACX,OAAO;YACP,QAAQ,OAAO,EAAE;YACjB,0EAA0E;YAC1E,wFAAwF;YACxF,+BAA+B,IAAI,gGAAgG;YACnI,+BAA+B,IAAI,2BAA2B;YAC9D,mCAAmC,IAAI,EAAE;YACzC,6BAA6B,IAAI,EAAE;YACnC,gCAAgC,IAAI,EAAE;YACtC,+BAA+B,IAAI,sCAAsC;YACzE,+BAA+B,IAAI,yBAAyB;YAC5D,+BAA+B,IAAI,EAAE;SACtC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,IAAI,WAAW;YAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;;YAC1B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,OAAO,GAAG,aAAa,CAAC;IACnC,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,sBAAsB,EAAE;IAC9D,WAAW,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE;CACnC,CAAC,CAAC"}

package/dist/commands/secrets/common.d.ts

@@ -0,0 +1,8 @@
+import { needsSudo, requireTargetHost } from "../ssh-target.js";
+export { needsSudo, requireTargetHost };
+export declare function upsertYamlScalarLine(params: {
+    text: string;
+    key: string;
+    value: string;
+}): string;
+//# sourceMappingURL=common.d.ts.map

package/dist/commands/secrets/common.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../../src/commands/secrets/common.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAEhE,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC;AAWxC,wBAAgB,oBAAoB,CAAC,MAAM,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAOjG"}

package/dist/commands/secrets/common.js

@@ -0,0 +1,20 @@
+import { needsSudo, requireTargetHost } from "../ssh-target.js";
+export { needsSudo, requireTargetHost };
+function quoteYamlString(value) {
+    return `"${value
+        .replace(/\\/g, "\\\\")
+        .replace(/\r/g, "\\r")
+        .replace(/\n/g, "\\n")
+        .replace(/\t/g, "\\t")
+        .replace(/"/g, '\\"')}"`;
+}
+export function upsertYamlScalarLine(params) {
+    const { text, key, value } = params;
+    const escaped = key.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+    const rx = new RegExp(`^\\s*${escaped}\\s*:\\s*.*$`, "m");
+    const line = `${key}: ${quoteYamlString(value)}`;
+    if (rx.test(text))
+        return text.replace(rx, line);
+    return `${text.trimEnd()}\n${line}\n`;
+}
+//# sourceMappingURL=common.js.map

package/dist/commands/secrets/common.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.js","sourceRoot":"","sources":["../../../src/commands/secrets/common.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAEhE,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC;AAExC,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,IAAI,KAAK;SACb,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;SACtB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;SACrB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;SACrB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAoD;IACvF,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;IACpC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;IAC3D,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,QAAQ,OAAO,cAAc,EAAE,GAAG,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,GAAG,GAAG,KAAK,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;IACjD,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACjD,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,IAAI,IAAI,CAAC;AACxC,CAAC"}

package/dist/commands/secrets/init.d.ts

@@ -0,0 +1,39 @@
+export declare const secretsInit: import("citty").CommandDef<{
+    runtimeDir: {
+        type: "string";
+        description: string;
+    };
+    host: {
+        type: "string";
+        description: string;
+    };
+    interactive: {
+        type: "boolean";
+        description: string;
+        default: false;
+    };
+    fromJson: {
+        type: "string";
+        description: string;
+    };
+    allowPlaceholders: {
+        type: "boolean";
+        description: string;
+        default: false;
+    };
+    operator: {
+        type: "string";
+        description: string;
+    };
+    yes: {
+        type: "boolean";
+        description: string;
+        default: false;
+    };
+    dryRun: {
+        type: "boolean";
+        description: string;
+        default: false;
+    };
+}>;
+//# sourceMappingURL=init.d.ts.map

package/dist/commands/secrets/init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../../src/commands/secrets/init.ts"],"names":[],"mappings":"AA4CA,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgbtB,CAAC"}