gitops-ai 1.0.0 → 1.2.0

package/dist/core/gitlab.js

@@ -1,65 +1,136 @@
-import { exec, execAsync, execSafe } from "../utils/shell.js";
+import { exec, execSafe } from "../utils/shell.js";
 import { log } from "../utils/log.js";
-export async function authenticate(pat, host) {
-    await execAsync(`echo "${pat}" | glab auth login --hostname "${host}" --stdin`);
-    const username = await execAsync(`glab api "user" --hostname "${host}" | jq -r '.username'`);
-    log.success(`Authenticated as: ${username}`);
-    return username;
-}
-export async function resolveNamespaceId(namespace, host) {
-    const result = execSafe(`glab api --hostname "${host}" "namespaces/${namespace}" 2>/dev/null | jq -r '.id'`);
-    if (result.exitCode !== 0 || !result.stdout || result.stdout === "null") {
-        throw new Error(`Namespace '${namespace}' not found. Check the group or username.`);
+import { loginWithBrowser } from "./gitlab-oauth.js";
+// ---------------------------------------------------------------------------
+// REST helpers
+// ---------------------------------------------------------------------------
+async function apiFetch(path, token, host) {
+    const url = `https://${host}/api/v4${path}`;
+    let res = await fetch(url, {
+        headers: { Authorization: `Bearer ${token}` },
+    });
+    // Fall back to PRIVATE-TOKEN header (PATs on older GitLab versions)
+    if (res.status === 401) {
+        res = await fetch(url, {
+            headers: { "PRIVATE-TOKEN": token },
+        });
     }
-    log.success(`Namespace ID: ${result.stdout}`);
-    return result.stdout;
-}
-export async function getProject(namespace, name, host) {
-    const encoded = `${namespace}/${name}`.replace(/\//g, "%2F");
-    const { stdout, exitCode } = execSafe(`glab api --hostname "${host}" "projects/${encoded}" 2>/dev/null`);
-    if (exitCode !== 0 || !stdout)
-        return null;
-    try {
-        const data = JSON.parse(stdout);
-        if (!data.id)
-            return null;
-        return {
-            id: String(data.id),
-            httpUrl: data.http_url_to_repo,
-            pathWithNamespace: data.path_with_namespace,
-        };
+    if (!res.ok) {
+        throw new Error(`GitLab API ${path}: ${res.status} ${res.statusText}`);
     }
-    catch {
-        return null;
+    return res.json();
+}
+async function apiPost(path, token, host, body) {
+    const url = `https://${host}/api/v4${path}`;
+    const res = await fetch(url, {
+        method: "POST",
+        headers: {
+            Authorization: `Bearer ${token}`,
+            "Content-Type": "application/json",
+        },
+        body: JSON.stringify(body),
+    });
+    if (!res.ok) {
+        const text = await res.text();
+        throw new Error(`GitLab API POST ${path}: ${res.status} ${text}`);
     }
+    return res.json();
 }
-export async function createProject(name, namespaceId, host) {
-    const result = await execAsync([
-        "glab api --method POST",
-        `--hostname "${host}"`,
-        '"projects"',
-        `-f "name=${name}"`,
-        `-f "path=${name}"`,
-        `-f "namespace_id=${namespaceId}"`,
-        '-f "visibility=private"',
-        '-f "initialize_with_readme=false"',
-    ].join(" "));
-    const data = JSON.parse(result);
+export function createGitLabProvider() {
     return {
-        id: String(data.id),
-        httpUrl: data.http_url_to_repo,
-        pathWithNamespace: data.path_with_namespace,
+        type: "gitlab",
+        defaultHost: "gitlab.com",
+        cliTool: "glab",
+        tokenLabel: "GitLab Personal Access Token (api, read_repository, write_repository)",
+        async fetchCurrentUser(token, host) {
+            const u = await apiFetch("/user", token, host);
+            return { username: u.username, name: u.name };
+        },
+        async fetchOrganizations(token, host) {
+            const groups = await apiFetch("/groups?per_page=100&min_access_level=30&top_level_only=true&order_by=name&sort=asc", token, host);
+            return groups.map((g) => ({
+                name: g.name,
+                path: g.path,
+                fullPath: g.full_path,
+            }));
+        },
+        async fetchNamespaceProjects(token, host, namespace) {
+            const encoded = encodeURIComponent(namespace);
+            let projects;
+            try {
+                projects = await apiFetch(`/groups/${encoded}/projects?per_page=100&order_by=updated_at&sort=desc&include_subgroups=false`, token, host);
+            }
+            catch {
+                projects = await apiFetch(`/users/${encoded}/projects?per_page=100&order_by=updated_at&sort=desc`, token, host);
+            }
+            return projects.map((p) => ({
+                name: p.name,
+                description: p.description,
+                pathWithNamespace: p.path_with_namespace,
+                httpUrl: p.http_url_to_repo,
+            }));
+        },
+        async authenticate(token, host) {
+            const user = await this.fetchCurrentUser(token, host);
+            log.success(`Authenticated as: ${user.username}`);
+            return user.username;
+        },
+        async resolveNamespaceId(namespace, host, token) {
+            const encoded = encodeURIComponent(namespace);
+            try {
+                const ns = await apiFetch(`/namespaces/${encoded}`, token, host);
+                log.success(`Namespace ID: ${ns.id}`);
+                return String(ns.id);
+            }
+            catch {
+                throw new Error(`Namespace '${namespace}' not found. Check the group or username.`);
+            }
+        },
+        async getProject(namespace, name, host, token) {
+            const encoded = encodeURIComponent(`${namespace}/${name}`);
+            try {
+                const p = await apiFetch(`/projects/${encoded}`, token, host);
+                return {
+                    id: String(p.id),
+                    httpUrl: p.http_url_to_repo,
+                    pathWithNamespace: p.path_with_namespace,
+                };
+            }
+            catch {
+                return null;
+            }
+        },
+        async createProject(name, namespaceId, host, token) {
+            const p = await apiPost("/projects", token, host, {
+                name,
+                path: name,
+                namespace_id: Number(namespaceId),
+                visibility: "private",
+                initialize_with_readme: false,
+            });
+            return {
+                id: String(p.id),
+                httpUrl: p.http_url_to_repo,
+                pathWithNamespace: p.path_with_namespace,
+            };
+        },
+        configureGitCredentials(token, cwd) {
+            const { exitCode, stdout } = execSafe("git remote get-url origin 2>/dev/null");
+            let host = "gitlab.com";
+            if (exitCode === 0 && stdout) {
+                const match = stdout.match(/https:\/\/([^/]+)\//);
+                if (match)
+                    host = match[1];
+            }
+            exec(`git config --local --replace-all credential.helper '!f() { echo "username=oauth2"; echo "password=${token}"; }; f'`, { cwd });
+            log.success(`git credentials configured for ${host}`);
+        },
+        getAuthRemoteUrl(host, pathWithNamespace, token) {
+            return `https://oauth2:${token}@${host}/${pathWithNamespace}.git`;
+        },
+        async loginWithBrowser(host) {
+            return loginWithBrowser(host);
+        },
     };
 }
-export function configureGitCredentials(pat, cwd) {
-    const { exitCode, stdout } = execSafe("git remote get-url origin 2>/dev/null");
-    let host = "gitlab.com";
-    if (exitCode === 0 && stdout) {
-        const match = stdout.match(/https:\/\/([^/]+)\//);
-        if (match)
-            host = match[1];
-    }
-    exec(`git config --local --replace-all credential.helper '!f() { echo "username=oauth2"; echo "password=${pat}"; }; f'`, { cwd });
-    log.success(`git credentials configured for ${host}`);
-}
 //# sourceMappingURL=gitlab.js.map

package/dist/core/gitlab.js.map

@@ -1 +1 @@
-{"version":3,"file":"gitlab.js","sourceRoot":"","sources":["../../src/core/gitlab.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAE,GAAG,EAAe,MAAM,iBAAiB,CAAC;AAEnD,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,GAAW,EACX,IAAY;IAEZ,MAAM,SAAS,CACb,SAAS,GAAG,mCAAmC,IAAI,WAAW,CAC/D,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,SAAS,CAC9B,+BAA+B,IAAI,uBAAuB,CAC3D,CAAC;IACF,GAAG,CAAC,OAAO,CAAC,qBAAqB,QAAQ,EAAE,CAAC,CAAC;IAC7C,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,SAAiB,EACjB,IAAY;IAEZ,MAAM,MAAM,GAAG,QAAQ,CACrB,wBAAwB,IAAI,iBAAiB,SAAS,6BAA6B,CACpF,CAAC;IACF,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CACb,cAAc,SAAS,2CAA2C,CACnE,CAAC;IACJ,CAAC;IACD,GAAG,CAAC,OAAO,CAAC,iBAAiB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9C,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC;AAQD,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,SAAiB,EACjB,IAAY,EACZ,IAAY;IAEZ,MAAM,OAAO,GAAG,GAAG,SAAS,IAAI,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC7D,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,QAAQ,CACnC,wBAAwB,IAAI,eAAe,OAAO,eAAe,CAClE,CAAC;IACF,IAAI,QAAQ,KAAK,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAE3C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAC1B,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACnB,OAAO,EAAE,IAAI,CAAC,gBAAgB;YAC9B,iBAAiB,EAAE,IAAI,CAAC,mBAAmB;SAC5C,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAY,EACZ,WAAmB,EACnB,IAAY;IAEZ,MAAM,MAAM,GAAG,MAAM,SAAS,CAC5B;QACE,wBAAwB;QACxB,eAAe,IAAI,GAAG;QACtB,YAAY;QACZ,YAAY,IAAI,GAAG;QACnB,YAAY,IAAI,GAAG;QACnB,oBAAoB,WAAW,GAAG;QAClC,yBAAyB;QACzB,mCAAmC;KACpC,CAAC,IAAI,CAAC,GAAG,CAAC,CACZ,CAAC;IAEF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChC,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACnB,OAAO,EAAE,IAAI,CAAC,gBAAgB;QAC9B,iBAAiB,EAAE,IAAI,CAAC,mBAAmB;KAC5C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,GAAW,EACX,GAAW;IAEX,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,QAAQ,CACnC,uCAAuC,CACxC,CAAC;IACF,IAAI,IAAI,GAAG,YAAY,CAAC;IACxB,IAAI,QAAQ,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAClD,IAAI,KAAK;YAAE,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;IAED,IAAI,CACF,qGAAqG,GAAG,UAAU,EAClH,EAAE,GAAG,EAAE,CACR,CAAC;IACF,GAAG,CAAC,OAAO,CAAC,kCAAkC,IAAI,EAAE,CAAC,CAAC;AACxD,CAAC"}
+{"version":3,"file":"gitlab.js","sourceRoot":"","sources":["../../src/core/gitlab.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AACtC,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AASrD,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E,KAAK,UAAU,QAAQ,CACrB,IAAY,EACZ,KAAa,EACb,IAAY;IAEZ,MAAM,GAAG,GAAG,WAAW,IAAI,UAAU,IAAI,EAAE,CAAC;IAE5C,IAAI,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QACzB,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;KAC9C,CAAC,CAAC;IAEH,oEAAoE;IACpE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YACrB,OAAO,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE;SACpC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,cAAc,IAAI,KAAK,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,EAAgB,CAAC;AAClC,CAAC;AAED,KAAK,UAAU,OAAO,CACpB,IAAY,EACZ,KAAa,EACb,IAAY,EACZ,IAA6B;IAE7B,MAAM,GAAG,GAAG,WAAW,IAAI,UAAU,IAAI,EAAE,CAAC;IAE5C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC3B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,KAAK,EAAE;YAChC,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,KAAK,GAAG,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,EAAgB,CAAC;AAClC,CAAC;AA2CD,MAAM,UAAU,oBAAoB;IAClC,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,YAAY;QACzB,OAAO,EAAE,MAAM;QACf,UAAU,EAAE,uEAAuE;QAEnF,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAE,IAAI;YAChC,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAS,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YACvD,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAChD,CAAC;QAED,KAAK,CAAC,kBAAkB,CAAC,KAAK,EAAE,IAAI;YAClC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAC3B,qFAAqF,EACrF,KAAK,EACL,IAAI,CACL,CAAC;YACF,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACxB,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,QAAQ,EAAE,CAAC,CAAC,SAAS;aACtB,CAAC,CAAC,CAAC;QACN,CAAC;QAED,KAAK,CAAC,sBAAsB,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS;YACjD,MAAM,OAAO,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;YAC9C,IAAI,QAAqB,CAAC;YAC1B,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,QAAQ,CACvB,WAAW,OAAO,8EAA8E,EAChG,KAAK,EACL,IAAI,CACL,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,GAAG,MAAM,QAAQ,CACvB,UAAU,OAAO,sDAAsD,EACvE,KAAK,EACL,IAAI,CACL,CAAC;YACJ,CAAC;YACD,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC1B,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,iBAAiB,EAAE,CAAC,CAAC,mBAAmB;gBACxC,OAAO,EAAE,CAAC,CAAC,gBAAgB;aAC5B,CAAC,CAAC,CAAC;QACN,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI;YAC5B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACtD,GAAG,CAAC,OAAO,CAAC,qBAAqB,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YAClD,OAAO,IAAI,CAAC,QAAQ,CAAC;QACvB,CAAC;QAED,KAAK,CAAC,kBAAkB,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK;YAC7C,MAAM,OAAO,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;YAC9C,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,MAAM,QAAQ,CACvB,eAAe,OAAO,EAAE,EACxB,KAAK,EACL,IAAI,CACL,CAAC;gBACF,GAAG,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;gBACtC,OAAO,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACvB,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,KAAK,CACb,cAAc,SAAS,2CAA2C,CACnE,CAAC;YACJ,CAAC;QACH,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK;YAC3C,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,SAAS,IAAI,IAAI,EAAE,CAAC,CAAC;YAC3D,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,MAAM,QAAQ,CACtB,aAAa,OAAO,EAAE,EACtB,KAAK,EACL,IAAI,CACL,CAAC;gBACF,OAAO;oBACL,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChB,OAAO,EAAE,CAAC,CAAC,gBAAgB;oBAC3B,iBAAiB,EAAE,CAAC,CAAC,mBAAmB;iBACzC,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK;YAChD,MAAM,CAAC,GAAG,MAAM,OAAO,CACrB,WAAW,EACX,KAAK,EACL,IAAI,EACJ;gBACE,IAAI;gBACJ,IAAI,EAAE,IAAI;gBACV,YAAY,EAAE,MAAM,CAAC,WAAW,CAAC;gBACjC,UAAU,EAAE,SAAS;gBACrB,sBAAsB,EAAE,KAAK;aAC9B,CACF,CAAC;YACF,OAAO;gBACL,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChB,OAAO,EAAE,CAAC,CAAC,gBAAgB;gBAC3B,iBAAiB,EAAE,CAAC,CAAC,mBAAmB;aACzC,CAAC;QACJ,CAAC;QAED,uBAAuB,CAAC,KAAK,EAAE,GAAG;YAChC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,QAAQ,CACnC,uCAAuC,CACxC,CAAC;YACF,IAAI,IAAI,GAAG,YAAY,CAAC;YACxB,IAAI,QAAQ,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;gBAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;gBAClD,IAAI,KAAK;oBAAE,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAC7B,CAAC;YAED,IAAI,CACF,qGAAqG,KAAK,UAAU,EACpH,EAAE,GAAG,EAAE,CACR,CAAC;YACF,GAAG,CAAC,OAAO,CAAC,kCAAkC,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;QAED,gBAAgB,CAAC,IAAI,EAAE,iBAAiB,EAAE,KAAK;YAC7C,OAAO,kBAAkB,KAAK,IAAI,IAAI,IAAI,iBAAiB,MAAM,CAAC;QACpE,CAAC;QAED,KAAK,CAAC,gBAAgB,CAAC,IAAI;YACzB,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/core/kubernetes.d.ts

@@ -1,4 +1,12 @@
 export declare function isClusterReachable(): boolean;
+export interface ExistingCluster {
+    type: "k3d" | "k3s";
+    names: string[];
+}
+export declare function detectExistingClusters(): ExistingCluster | null;
+export declare function listK3dClusters(): string[];
+export declare function k3dClusterExists(clusterName: string): boolean;
+export declare function k3sInstalled(): boolean;
 export declare function createK3dCluster(clusterName: string): Promise<void>;
 export declare function installK3s(): Promise<void>;
 export declare function setupKubeconfig(clusterName: string): string;
@@ -8,3 +16,4 @@ export declare function createSecret(name: string, namespace: string, data: Reco
 export declare function secretExists(name: string, namespace: string): boolean;
 export declare function deleteSecret(name: string, namespace: string): Promise<void>;
 export declare function createSecretFromFile(name: string, namespace: string, key: string, filePath: string): Promise<void>;
+export declare function createSshSecret(name: string, namespace: string, privateKey: string, publicKey: string, knownHosts: string): Promise<void>;

package/dist/core/kubernetes.js

@@ -1,4 +1,4 @@
-import { mkdirSync, writeFileSync } from "node:fs";
+import { mkdirSync, writeFileSync, rmSync } from "node:fs";
 import { exec, execAsync, execSafe } from "../utils/shell.js";
 import { isMacOS, isCI } from "../utils/platform.js";
 import { log, withSpinner } from "../utils/log.js";
@@ -7,6 +7,35 @@ export function isClusterReachable() {
     const { exitCode } = execSafe("kubectl cluster-info 2>/dev/null");
     return exitCode === 0;
 }
+export function detectExistingClusters() {
+    if (isMacOS() || isCI()) {
+        const names = listK3dClusters();
+        if (names.length > 0)
+            return { type: "k3d", names };
+        return null;
+    }
+    if (k3sInstalled()) {
+        return { type: "k3s", names: ["k3s"] };
+    }
+    return null;
+}
+export function listK3dClusters() {
+    const { stdout, exitCode } = execSafe("k3d cluster list --no-headers 2>/dev/null");
+    if (exitCode !== 0 || !stdout.trim())
+        return [];
+    return stdout
+        .trim()
+        .split("\n")
+        .map((line) => line.split(/\s+/)[0])
+        .filter(Boolean);
+}
+export function k3dClusterExists(clusterName) {
+    return listK3dClusters().includes(clusterName);
+}
+export function k3sInstalled() {
+    const { exitCode } = execSafe("command -v k3s");
+    return exitCode === 0;
+}
 export async function createK3dCluster(clusterName) {
     const { stdout } = execSafe("k3d cluster list 2>/dev/null");
     if (stdout.includes(clusterName)) {
@@ -78,4 +107,25 @@ export async function createSecretFromFile(name, namespace, key, filePath) {
     log.detail(`kubectl create secret generic ${name} --namespace=${namespace} --from-file=${key}`);
     await execAsync(cmd);
 }
+export async function createSshSecret(name, namespace, privateKey, publicKey, knownHosts) {
+    const tmpDir = "/tmp/flux-ssh-secret";
+    mkdirSync(tmpDir, { recursive: true });
+    try {
+        writeFileSync(`${tmpDir}/identity`, privateKey, { mode: 0o600 });
+        writeFileSync(`${tmpDir}/identity.pub`, publicKey);
+        writeFileSync(`${tmpDir}/known_hosts`, knownHosts);
+        const cmd = [
+            `kubectl create secret generic ${name}`,
+            `--namespace=${namespace}`,
+            `--from-file=identity="${tmpDir}/identity"`,
+            `--from-file=identity.pub="${tmpDir}/identity.pub"`,
+            `--from-file=known_hosts="${tmpDir}/known_hosts"`,
+        ].join(" ");
+        log.detail(`kubectl create secret generic ${name} --namespace=${namespace} (SSH)`);
+        await execAsync(cmd);
+    }
+    finally {
+        rmSync(tmpDir, { recursive: true, force: true });
+    }
+}
 //# sourceMappingURL=kubernetes.js.map

package/dist/core/kubernetes.js.map

@@ -1 +1 @@
-{"version":3,"file":"kubernetes.js","sourceRoot":"","sources":["../../src/core/kubernetes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,aAAa,EAAa,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAEnD,MAAM,UAAU,kBAAkB;IAChC,MAAM,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC,kCAAkC,CAAC,CAAC;IAClE,OAAO,QAAQ,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,WAAmB;IACxD,MAAM,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,8BAA8B,CAAC,CAAC;IAC5D,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,OAAO,CAAC,gBAAgB,WAAW,kBAAkB,CAAC,CAAC;QAC3D,OAAO;IACT,CAAC;IAED,MAAM,GAAG,GAAG;QACV,oBAAoB;QACpB,WAAW;QACX,yBAAyB,kBAAkB,QAAQ;QACnD,wCAAwC;QACxC,6BAA6B;QAC7B,+BAA+B;QAC/B,QAAQ;KACT,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAChB,MAAM,WAAW,CAAC,yBAAyB,WAAW,GAAG,EAAE,GAAG,EAAE,CAC9D,SAAS,CAAC,GAAG,CAAC,CACf,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,MAAM,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IAChD,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QACnB,GAAG,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QACrC,OAAO;IACT,CAAC;IAED,MAAM,WAAW,CAAC,gBAAgB,EAAE,GAAG,EAAE,CACvC,SAAS,CACP,wDAAwD,kBAAkB,qFAAqF,CAChK,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,WAAmB;IACjD,SAAS,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE5D,IAAI,OAAO,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;QACxB,MAAM,cAAc,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,cAAc,WAAW,EAAE,CAAC;QACtE,MAAM,UAAU,GAAG,IAAI,CAAC,sBAAsB,WAAW,EAAE,CAAC,CAAC;QAC7D,aAAa,CAAC,cAAc,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3D,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,cAAc,CAAC;QACxC,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,IAAI,CAAC,sDAAsD,CAAC,CAAC;IAC7D,IAAI,CAAC,mDAAmD,CAAC,CAAC;IAC1D,IAAI,CAAC,8BAA8B,CAAC,CAAC;IACrC,MAAM,cAAc,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC;IAC1D,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,cAAc,CAAC;IACxC,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,MAAM,WAAW,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9C,MAAM,SAAS,CACb,8DAA8D,CAC/D,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAY;IAChD,MAAM,SAAS,CACb,4BAA4B,IAAI,gDAAgD,CACjF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAY,EACZ,SAAiB,EACjB,IAA4B;IAE5B,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;SAClC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC;SAC7C,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,MAAM,GAAG,GAAG,iCAAiC,IAAI,gBAAgB,SAAS,IAAI,QAAQ,EAAE,CAAC;IACzF,GAAG,CAAC,MAAM,CAAC,iCAAiC,IAAI,gBAAgB,SAAS,EAAE,CAAC,CAAC;IAC7E,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,SAAiB;IAC1D,MAAM,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAC3B,sBAAsB,IAAI,OAAO,SAAS,cAAc,CACzD,CAAC;IACF,OAAO,QAAQ,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAY,EACZ,SAAiB;IAEjB,MAAM,SAAS,CAAC,yBAAyB,IAAI,OAAO,SAAS,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAY,EACZ,SAAiB,EACjB,GAAW,EACX,QAAgB;IAEhB,MAAM,GAAG,GAAG,iCAAiC,IAAI,gBAAgB,SAAS,gBAAgB,GAAG,KAAK,QAAQ,GAAG,CAAC;IAC9G,GAAG,CAAC,MAAM,CAAC,iCAAiC,IAAI,gBAAgB,SAAS,gBAAgB,GAAG,EAAE,CAAC,CAAC;IAChG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;AACvB,CAAC"}
+{"version":3,"file":"kubernetes.js","sourceRoot":"","sources":["../../src/core/kubernetes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,aAAa,EAAa,MAAM,EAAE,MAAM,SAAS,CAAC;AACtE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAEnD,MAAM,UAAU,kBAAkB;IAChC,MAAM,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC,kCAAkC,CAAC,CAAC;IAClE,OAAO,QAAQ,KAAK,CAAC,CAAC;AACxB,CAAC;AAOD,MAAM,UAAU,sBAAsB;IACpC,IAAI,OAAO,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;QAChC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QACpD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,YAAY,EAAE,EAAE,CAAC;QACnB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;IACzC,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC,2CAA2C,CAAC,CAAC;IACnF,IAAI,QAAQ,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,CAAC;IAChD,OAAO,MAAM;SACV,IAAI,EAAE;SACN,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;SACnC,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,WAAmB;IAClD,OAAO,eAAe,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,MAAM,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IAChD,OAAO,QAAQ,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,WAAmB;IACxD,MAAM,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,8BAA8B,CAAC,CAAC;IAC5D,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,OAAO,CAAC,gBAAgB,WAAW,kBAAkB,CAAC,CAAC;QAC3D,OAAO;IACT,CAAC;IAED,MAAM,GAAG,GAAG;QACV,oBAAoB;QACpB,WAAW;QACX,yBAAyB,kBAAkB,QAAQ;QACnD,wCAAwC;QACxC,6BAA6B;QAC7B,+BAA+B;QAC/B,QAAQ;KACT,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAChB,MAAM,WAAW,CAAC,yBAAyB,WAAW,GAAG,EAAE,GAAG,EAAE,CAC9D,SAAS,CAAC,GAAG,CAAC,CACf,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,MAAM,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IAChD,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QACnB,GAAG,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QACrC,OAAO;IACT,CAAC;IAED,MAAM,WAAW,CAAC,gBAAgB,EAAE,GAAG,EAAE,CACvC,SAAS,CACP,wDAAwD,kBAAkB,qFAAqF,CAChK,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,WAAmB;IACjD,SAAS,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE5D,IAAI,OAAO,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;QACxB,MAAM,cAAc,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,cAAc,WAAW,EAAE,CAAC;QACtE,MAAM,UAAU,GAAG,IAAI,CAAC,sBAAsB,WAAW,EAAE,CAAC,CAAC;QAC7D,aAAa,CAAC,cAAc,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3D,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,cAAc,CAAC;QACxC,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,IAAI,CAAC,sDAAsD,CAAC,CAAC;IAC7D,IAAI,CAAC,mDAAmD,CAAC,CAAC;IAC1D,IAAI,CAAC,8BAA8B,CAAC,CAAC;IACrC,MAAM,cAAc,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC;IAC1D,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,cAAc,CAAC;IACxC,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,MAAM,WAAW,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9C,MAAM,SAAS,CACb,8DAA8D,CAC/D,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAY;IAChD,MAAM,SAAS,CACb,4BAA4B,IAAI,gDAAgD,CACjF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAY,EACZ,SAAiB,EACjB,IAA4B;IAE5B,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;SAClC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC;SAC7C,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,MAAM,GAAG,GAAG,iCAAiC,IAAI,gBAAgB,SAAS,IAAI,QAAQ,EAAE,CAAC;IACzF,GAAG,CAAC,MAAM,CAAC,iCAAiC,IAAI,gBAAgB,SAAS,EAAE,CAAC,CAAC;IAC7E,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,SAAiB;IAC1D,MAAM,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAC3B,sBAAsB,IAAI,OAAO,SAAS,cAAc,CACzD,CAAC;IACF,OAAO,QAAQ,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAY,EACZ,SAAiB;IAEjB,MAAM,SAAS,CAAC,yBAAyB,IAAI,OAAO,SAAS,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAY,EACZ,SAAiB,EACjB,GAAW,EACX,QAAgB;IAEhB,MAAM,GAAG,GAAG,iCAAiC,IAAI,gBAAgB,SAAS,gBAAgB,GAAG,KAAK,QAAQ,GAAG,CAAC;IAC9G,GAAG,CAAC,MAAM,CAAC,iCAAiC,IAAI,gBAAgB,SAAS,gBAAgB,GAAG,EAAE,CAAC,CAAC;IAChG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;AACvB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAY,EACZ,SAAiB,EACjB,UAAkB,EAClB,SAAiB,EACjB,UAAkB;IAElB,MAAM,MAAM,GAAG,sBAAsB,CAAC;IACtC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEvC,IAAI,CAAC;QACH,aAAa,CAAC,GAAG,MAAM,WAAW,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACjE,aAAa,CAAC,GAAG,MAAM,eAAe,EAAE,SAAS,CAAC,CAAC;QACnD,aAAa,CAAC,GAAG,MAAM,cAAc,EAAE,UAAU,CAAC,CAAC;QAEnD,MAAM,GAAG,GAAG;YACV,iCAAiC,IAAI,EAAE;YACvC,eAAe,SAAS,EAAE;YAC1B,yBAAyB,MAAM,YAAY;YAC3C,6BAA6B,MAAM,gBAAgB;YACnD,4BAA4B,MAAM,eAAe;SAClD,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACZ,GAAG,CAAC,MAAM,CAAC,iCAAiC,IAAI,gBAAgB,SAAS,QAAQ,CAAC,CAAC;QACnF,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC;AACH,CAAC"}

package/dist/core/template-sync.d.ts

@@ -0,0 +1,46 @@
+/** HTTPS URL for the canonical GitOps template (GitLab). */
+export declare const UPSTREAM_GIT_URL = "https://gitlab.com/everythings-gonna-be-alright/fluxcd_ai_template.git";
+export declare function readPackageVersion(): string;
+/**
+ * Read `version:` from repo-root template-sync-metadata.yaml if present (template semver).
+ */
+export declare function readMetadataVersion(repoRoot: string): string | undefined;
+export declare function looksLikeGitopsTemplateLayout(repoRoot: string): boolean;
+export declare function fetchTemplateTags(): Promise<string[]>;
+export declare function assertGitRepo(repoRoot: string): void;
+export declare function currentBranch(repoRoot: string): string;
+export declare function ensureUpstreamRemote(repoRoot: string, remoteName: string): Promise<void>;
+export declare function fetchUpstream(repoRoot: string, remoteName: string, ref: string): Promise<void>;
+export type RiskTier = "routine" | "high_touch" | "cluster_overlay" | "other";
+export interface DiffFileEntry {
+    path: string;
+    risk: RiskTier;
+}
+export interface UpstreamDiffResult {
+    raw: string;
+    files: DiffFileEntry[];
+    totalFiles: number;
+    routineCount: number;
+    highTouchCount: number;
+    clusterOverlayCount: number;
+    otherCount: number;
+    empty: boolean;
+    error?: string;
+}
+export declare function classifyFile(path: string): RiskTier;
+export declare function diffUpstream(repoRoot: string): UpstreamDiffResult;
+export declare function hasCommonAncestor(repoRoot: string): boolean;
+export interface MergeResult {
+    success: boolean;
+    conflictCount: number;
+    error?: string;
+}
+export declare function mergeUpstream(repoRoot: string, ref: string, remoteName: string, allowUnrelatedHistories?: boolean): Promise<MergeResult>;
+export interface TemplateSyncOptions {
+    repoRoot: string;
+    ref: string;
+    dryRun: boolean;
+    remoteName: string;
+    allowUnrelatedHistories?: boolean;
+}
+export declare function mergeUpstreamTemplate(options: TemplateSyncOptions): Promise<void>;

package/dist/core/template-sync.js

@@ -0,0 +1,249 @@
+import { existsSync, readFileSync, readdirSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { log, withSpinner } from "../utils/log.js";
+import { execAsync, execSafe } from "../utils/shell.js";
+import { SOURCE_GITLAB_HOST, SOURCE_PROJECT_PATH, } from "../schemas.js";
+const __dirname = dirname(fileURLToPath(import.meta.url));
+/** HTTPS URL for the canonical GitOps template (GitLab). */
+export const UPSTREAM_GIT_URL = `https://${SOURCE_GITLAB_HOST}/${SOURCE_PROJECT_PATH}.git`;
+export function readPackageVersion() {
+    try {
+        const pkgPath = join(__dirname, "..", "..", "package.json");
+        const pkg = JSON.parse(readFileSync(pkgPath, "utf-8"));
+        return pkg.version ?? "unknown";
+    }
+    catch {
+        return "unknown";
+    }
+}
+/**
+ * Read `version:` from repo-root template-sync-metadata.yaml if present (template semver).
+ */
+export function readMetadataVersion(repoRoot) {
+    const metaPath = join(repoRoot, "template-sync-metadata.yaml");
+    if (!existsSync(metaPath))
+        return undefined;
+    try {
+        const text = readFileSync(metaPath, "utf-8");
+        const m = /^version:\s*["']?([^'"\n]+)/m.exec(text);
+        return m?.[1]?.trim();
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Shared Helm / component bases live under `templates/` (category dirs such as
+ * `templates/system/`, `templates/ai/`, …).
+ */
+function hasSharedTemplatesTree(repoRoot) {
+    const templatesRoot = join(repoRoot, "templates");
+    if (!existsSync(templatesRoot))
+        return false;
+    try {
+        const entries = readdirSync(templatesRoot, { withFileTypes: true });
+        return entries.some((e) => e.isDirectory());
+    }
+    catch {
+        return false;
+    }
+}
+export function looksLikeGitopsTemplateLayout(repoRoot) {
+    return (hasSharedTemplatesTree(repoRoot) &&
+        existsSync(join(repoRoot, "clusters", "_template")));
+}
+function unrelatedHistoryHint(repoRoot) {
+    if (!looksLikeGitopsTemplateLayout(repoRoot)) {
+        return ("This directory does not look like a fork of the GitOps template (missing `templates/` shared bases or `clusters/_template/`). " +
+            "Use the repository created by `gitops-ai bootstrap`, or pass `--cwd` to that repo's root.");
+    }
+    return ("Run `template sync` from the GitOps repository you created with `gitops-ai bootstrap` (or use `--cwd /path/to/that/repo`). " +
+        "If you truly need to combine unrelated histories, run again with `--allow-unrelated-histories` (expect many conflicts).");
+}
+// ---------------------------------------------------------------------------
+// Fetch upstream tags (shared between bootstrap wizard and sync TUI)
+// ---------------------------------------------------------------------------
+export async function fetchTemplateTags() {
+    const encoded = encodeURIComponent(SOURCE_PROJECT_PATH);
+    const url = `https://${SOURCE_GITLAB_HOST}/api/v4/projects/${encoded}/repository/tags?per_page=50&order_by=version&sort=desc`;
+    try {
+        const res = await fetch(url);
+        if (!res.ok)
+            return [];
+        const tags = (await res.json());
+        return tags.map((t) => t.name);
+    }
+    catch {
+        return [];
+    }
+}
+// ---------------------------------------------------------------------------
+// Composable sync primitives (used by both non-interactive and TUI paths)
+// ---------------------------------------------------------------------------
+export function assertGitRepo(repoRoot) {
+    const { exitCode } = execSafe("git rev-parse --is-inside-work-tree", {
+        cwd: repoRoot,
+    });
+    if (exitCode !== 0) {
+        throw new Error(`Not a git repository: ${repoRoot}`);
+    }
+}
+export function currentBranch(repoRoot) {
+    const { stdout } = execSafe("git branch --show-current", { cwd: repoRoot });
+    return stdout || "(detached HEAD)";
+}
+export async function ensureUpstreamRemote(repoRoot, remoteName) {
+    const { stdout: remotes } = execSafe("git remote", { cwd: repoRoot });
+    const remoteList = remotes.split(/\s+/).filter(Boolean);
+    if (!remoteList.includes(remoteName)) {
+        log.step(`Adding remote '${remoteName}' → ${UPSTREAM_GIT_URL}`);
+        await execAsync(`git remote add "${remoteName}" "${UPSTREAM_GIT_URL}"`, {
+            cwd: repoRoot,
+        });
+    }
+}
+export async function fetchUpstream(repoRoot, remoteName, ref) {
+    await withSpinner(`Fetching ${remoteName} ${ref}`, async () => {
+        await execAsync(`git fetch "${remoteName}" "${ref}"`, { cwd: repoRoot });
+    });
+}
+const HIGH_TOUCH_PATTERNS = [
+    /^flux-instance-values\.yaml$/,
+    /^\.sops\.yaml$/,
+    /secret-.*\.yaml$/,
+    /cluster-sync\.yaml$/,
+];
+export function classifyFile(path) {
+    if (HIGH_TOUCH_PATTERNS.some((re) => re.test(path)))
+        return "high_touch";
+    if (path.startsWith("clusters/"))
+        return "cluster_overlay";
+    if (path.startsWith("templates/"))
+        return "routine";
+    return "other";
+}
+export function diffUpstream(repoRoot) {
+    // Three-dot shows only what changed on upstream since the common ancestor,
+    // excluding local-only files (e.g. clusters/homelab/).
+    // Falls back to two-dot when there is no merge-base (unrelated histories).
+    let diffCmd = "git diff --stat HEAD...FETCH_HEAD";
+    let nameCmd = "git diff --name-only HEAD...FETCH_HEAD";
+    const { exitCode: hasMergeBase } = execSafe("git merge-base HEAD FETCH_HEAD", { cwd: repoRoot });
+    if (hasMergeBase !== 0) {
+        diffCmd = "git diff --stat HEAD FETCH_HEAD";
+        nameCmd = "git diff --name-only HEAD FETCH_HEAD";
+    }
+    const result = execSafe(diffCmd, { cwd: repoRoot });
+    if (result.exitCode !== 0) {
+        return {
+            raw: "",
+            files: [],
+            totalFiles: 0,
+            routineCount: 0,
+            highTouchCount: 0,
+            clusterOverlayCount: 0,
+            otherCount: 0,
+            empty: true,
+            error: result.stderr || "git diff failed",
+        };
+    }
+    const raw = result.stdout.trim();
+    if (!raw) {
+        return {
+            raw: "",
+            files: [],
+            totalFiles: 0,
+            routineCount: 0,
+            highTouchCount: 0,
+            clusterOverlayCount: 0,
+            otherCount: 0,
+            empty: true,
+        };
+    }
+    const nameResult = execSafe(nameCmd, { cwd: repoRoot });
+    const filePaths = nameResult.stdout.trim().split("\n").filter(Boolean);
+    const files = filePaths.map((p) => ({
+        path: p,
+        risk: classifyFile(p),
+    }));
+    return {
+        raw,
+        files,
+        totalFiles: files.length,
+        routineCount: files.filter((f) => f.risk === "routine").length,
+        highTouchCount: files.filter((f) => f.risk === "high_touch").length,
+        clusterOverlayCount: files.filter((f) => f.risk === "cluster_overlay").length,
+        otherCount: files.filter((f) => f.risk === "other").length,
+        empty: false,
+    };
+}
+// ---------------------------------------------------------------------------
+// Merge
+// ---------------------------------------------------------------------------
+export function hasCommonAncestor(repoRoot) {
+    const { exitCode } = execSafe("git merge-base HEAD FETCH_HEAD", {
+        cwd: repoRoot,
+    });
+    return exitCode === 0;
+}
+export async function mergeUpstream(repoRoot, ref, remoteName, allowUnrelatedHistories = false) {
+    const unrelatedFlag = allowUnrelatedHistories
+        ? " --allow-unrelated-histories"
+        : "";
+    try {
+        await withSpinner(`Merging ${remoteName}/${ref}`, async () => {
+            await execAsync(`git merge${unrelatedFlag} FETCH_HEAD -m "chore: sync template from upstream ${ref}"`, { cwd: repoRoot });
+        });
+        return { success: true, conflictCount: 0 };
+    }
+    catch (err) {
+        const conflictResult = execSafe("git diff --name-only --diff-filter=U", { cwd: repoRoot });
+        const conflictFiles = conflictResult.stdout.trim().split("\n").filter(Boolean);
+        if (conflictFiles.length > 0) {
+            return {
+                success: false,
+                conflictCount: conflictFiles.length,
+                error: `Merge produced ${conflictFiles.length} conflict(s). Resolve them, then commit and push.`,
+            };
+        }
+        return {
+            success: false,
+            conflictCount: 0,
+            error: err.message,
+        };
+    }
+}
+export async function mergeUpstreamTemplate(options) {
+    const { repoRoot, ref, dryRun, remoteName, allowUnrelatedHistories } = options;
+    assertGitRepo(repoRoot);
+    await ensureUpstreamRemote(repoRoot, remoteName);
+    await fetchUpstream(repoRoot, remoteName, ref);
+    const diff = diffUpstream(repoRoot);
+    if (diff.error) {
+        log.detail(`(could not diff HEAD vs FETCH_HEAD: ${diff.error})`);
+    }
+    else if (!diff.empty) {
+        log.detail(diff.raw);
+    }
+    else {
+        log.detail("(no file differences between HEAD and FETCH_HEAD)");
+    }
+    if (dryRun) {
+        log.success("Dry-run: fetch complete; no merge performed. Review diff above, then run without --dry-run.");
+        return;
+    }
+    if (!hasCommonAncestor(repoRoot) && !allowUnrelatedHistories) {
+        throw new Error("No common Git ancestor with the upstream template on GitLab. " +
+            unrelatedHistoryHint(repoRoot) +
+            " `--ref` is the branch/tag on upstream; `--remote` is only the local remote name (default: upstream).");
+    }
+    const result = await mergeUpstream(repoRoot, ref, remoteName, allowUnrelatedHistories);
+    if (result.success) {
+        log.success("Merge complete. Resolve conflicts if any, run validation (flux build / kubeconform), then push.");
+    }
+    else {
+        throw new Error(result.error ?? "Merge failed");
+    }
+}
+//# sourceMappingURL=template-sync.js.map

package/dist/core/template-sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"template-sync.js","sourceRoot":"","sources":["../../src/core/template-sync.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EACL,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,eAAe,CAAC;AAEvB,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE1D,4DAA4D;AAC5D,MAAM,CAAC,MAAM,gBAAgB,GAAG,WAAW,kBAAkB,IAAI,mBAAmB,MAAM,CAAC;AAE3F,MAAM,UAAU,kBAAkB;IAChC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;QAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAyB,CAAC;QAC/E,OAAO,GAAG,CAAC,OAAO,IAAI,SAAS,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,6BAA6B,CAAC,CAAC;IAC/D,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC7C,MAAM,CAAC,GAAG,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpD,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,sBAAsB,CAAC,QAAgB;IAC9C,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAClD,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,WAAW,CAAC,aAAa,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,QAAgB;IAC5D,OAAO,CACL,sBAAsB,CAAC,QAAQ,CAAC;QAChC,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC,CACpD,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAgB;IAC5C,IAAI,CAAC,6BAA6B,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7C,OAAO,CACL,gIAAgI;YAC9H,2FAA2F,CAC9F,CAAC;IACJ,CAAC;IACD,OAAO,CACL,6HAA6H;QAC3H,yHAAyH,CAC5H,CAAC;AACJ,CAAC;AAGD,8EAA8E;AAC9E,qEAAqE;AACrE,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,MAAM,OAAO,GAAG,kBAAkB,CAAC,mBAAmB,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,WAAW,kBAAkB,oBAAoB,OAAO,yDAAyD,CAAC;IAC9H,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAuB,CAAC;QACtD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,0EAA0E;AAC1E,8EAA8E;AAE9E,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,MAAM,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC,qCAAqC,EAAE;QACnE,GAAG,EAAE,QAAQ;KACd,CAAC,CAAC;IACH,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,yBAAyB,QAAQ,EAAE,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,MAAM,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,2BAA2B,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5E,OAAO,MAAM,IAAI,iBAAiB,CAAC;AACrC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,QAAgB,EAChB,UAAkB;IAElB,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC,YAAY,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;IACtE,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACxD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,IAAI,CAAC,kBAAkB,UAAU,OAAO,gBAAgB,EAAE,CAAC,CAAC;QAChE,MAAM,SAAS,CAAC,mBAAmB,UAAU,MAAM,gBAAgB,GAAG,EAAE;YACtE,GAAG,EAAE,QAAQ;SACd,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,QAAgB,EAChB,UAAkB,EAClB,GAAW;IAEX,MAAM,WAAW,CAAC,YAAY,UAAU,IAAI,GAAG,EAAE,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,SAAS,CAAC,cAAc,UAAU,MAAM,GAAG,GAAG,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;AACL,CAAC;AAyBD,MAAM,mBAAmB,GAAG;IAC1B,8BAA8B;IAC9B,gBAAgB;IAChB,kBAAkB;IAClB,qBAAqB;CACtB,CAAC;AAEF,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,YAAY,CAAC;IACzE,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,iBAAiB,CAAC;IAC3D,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,SAAS,CAAC;IACpD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,2EAA2E;IAC3E,uDAAuD;IACvD,2EAA2E;IAC3E,IAAI,OAAO,GAAG,mCAAmC,CAAC;IAClD,IAAI,OAAO,GAAG,wCAAwC,CAAC;IAEvD,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,QAAQ,CAAC,gCAAgC,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;IACjG,IAAI,YAAY,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,GAAG,iCAAiC,CAAC;QAC5C,OAAO,GAAG,sCAAsC,CAAC;IACnD,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;IAEpD,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,GAAG,EAAE,EAAE;YACP,KAAK,EAAE,EAAE;YACT,UAAU,EAAE,CAAC;YACb,YAAY,EAAE,CAAC;YACf,cAAc,EAAE,CAAC;YACjB,mBAAmB,EAAE,CAAC;YACtB,UAAU,EAAE,CAAC;YACb,KAAK,EAAE,IAAI;YACX,KAAK,EAAE,MAAM,CAAC,MAAM,IAAI,iBAAiB;SAC1C,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO;YACL,GAAG,EAAE,EAAE;YACP,KAAK,EAAE,EAAE;YACT,UAAU,EAAE,CAAC;YACb,YAAY,EAAE,CAAC;YACf,cAAc,EAAE,CAAC;YACjB,mBAAmB,EAAE,CAAC;YACtB,UAAU,EAAE,CAAC;YACb,KAAK,EAAE,IAAI;SACZ,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACvE,MAAM,KAAK,GAAoB,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACnD,IAAI,EAAE,CAAC;QACP,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;KACtB,CAAC,CAAC,CAAC;IAEJ,OAAO;QACL,GAAG;QACH,KAAK;QACL,UAAU,EAAE,KAAK,CAAC,MAAM;QACxB,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,MAAM;QAC9D,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,MAAM;QACnE,mBAAmB,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,iBAAiB,CAAC,CAAC,MAAM;QAC7E,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,MAAM;QAC1D,KAAK,EAAE,KAAK;KACb,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,QAAQ;AACR,8EAA8E;AAE9E,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,MAAM,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC,gCAAgC,EAAE;QAC9D,GAAG,EAAE,QAAQ;KACd,CAAC,CAAC;IACH,OAAO,QAAQ,KAAK,CAAC,CAAC;AACxB,CAAC;AAQD,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,QAAgB,EAChB,GAAW,EACX,UAAkB,EAClB,uBAAuB,GAAG,KAAK;IAE/B,MAAM,aAAa,GAAG,uBAAuB;QAC3C,CAAC,CAAC,8BAA8B;QAChC,CAAC,CAAC,EAAE,CAAC;IAEP,IAAI,CAAC;QACH,MAAM,WAAW,CAAC,WAAW,UAAU,IAAI,GAAG,EAAE,EAAE,KAAK,IAAI,EAAE;YAC3D,MAAM,SAAS,CACb,YAAY,aAAa,sDAAsD,GAAG,GAAG,EACrF,EAAE,GAAG,EAAE,QAAQ,EAAE,CAClB,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;IAC7C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,cAAc,GAAG,QAAQ,CAC7B,sCAAsC,EACtC,EAAE,GAAG,EAAE,QAAQ,EAAE,CAClB,CAAC;QACF,MAAM,aAAa,GAAG,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/E,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,aAAa,EAAE,aAAa,CAAC,MAAM;gBACnC,KAAK,EAAE,kBAAkB,aAAa,CAAC,MAAM,mDAAmD;aACjG,CAAC;QACJ,CAAC;QACD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,CAAC;YAChB,KAAK,EAAG,GAAa,CAAC,OAAO;SAC9B,CAAC;IACJ,CAAC;AACH,CAAC;AAcD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAA4B;IAE5B,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,uBAAuB,EAAE,GAClE,OAAO,CAAC;IAEV,aAAa,CAAC,QAAQ,CAAC,CAAC;IACxB,MAAM,oBAAoB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACjD,MAAM,aAAa,CAAC,QAAQ,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;IAE/C,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,MAAM,CAAC,uCAAuC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;IACnE,CAAC;SAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QACvB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,MAAM,CAAC,mDAAmD,CAAC,CAAC;IAClE,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACX,GAAG,CAAC,OAAO,CACT,6FAA6F,CAC9F,CAAC;QACF,OAAO;IACT,CAAC;IAED,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,uBAAuB,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CACb,+DAA+D;YAC7D,oBAAoB,CAAC,QAAQ,CAAC;YAC9B,uGAAuG,CAC1G,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,GAAG,EAAE,UAAU,EAAE,uBAAuB,CAAC,CAAC;IACvF,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,GAAG,CAAC,OAAO,CACT,iGAAiG,CAClG,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,cAAc,CAAC,CAAC;IAClD,CAAC;AACH,CAAC"}