hatchkit 0.1.1

package/dist/utils/ports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ports.js","sourceRoot":"","sources":["../../src/utils/ports.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAExC,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,CAAU;IAC7B,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,CAAU;IAC7B,SAAS,EAAE,CAAC,IAAI,EAAE,IAAI,CAAU;CACjC,CAAC;AAEF;;;yDAGyD;AACzD,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;YACpC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;mEAGmE;AACnE,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,GAAW,EAAE,GAAW,EAAE,IAAiB;IACxE,MAAM,IAAI,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC;IAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;IAC/C,IAAI,kBAAkB,GAAG,CAAC,CAAC;IAC3B,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACxC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACnB,kBAAkB,EAAE,CAAC;YACrB,SAAS;QACX,CAAC;QACD,IAAI,MAAM,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACxC,SAAS,EAAE,CAAC;IACd,CAAC;IACD,MAAM,IAAI,KAAK,CACb,+BAA+B,GAAG,IAAI,GAAG,MAAM,kBAAkB,mCAAmC,SAAS,8FAA8F,CAC5M,CAAC;AACJ,CAAC;AASD;;;+BAG+B;AAC/B,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAc,EACd,OAA+B;IAE/B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACrF,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACpB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACrF,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACpB,MAAM,KAAK,GAAiB,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC/C,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACtB,KAAK,CAAC,SAAS,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/utils/secrets.d.ts

@@ -0,0 +1,25 @@
+/** Well-known secret keys used across the CLI. New secrets should add
+ *  their key here so `clearAllSecrets` can reach them on reset. */
+export declare const SECRET_KEYS: {
+    readonly coolifyToken: "coolify:token";
+    readonly hetznerToken: "hetzner:token";
+    readonly dnsInwxPassword: "dns:inwx:password";
+    readonly dnsCloudflareToken: "dns:cloudflare:token";
+    readonly s3AccessKey: (provider: string) => string;
+    readonly s3SecretKey: (provider: string) => string;
+    readonly gpuApiKey: (platform: string) => string;
+    readonly glitchtipToken: "glitchtip:auth-token";
+    readonly openpanelToken: "openpanel:personal-access-token";
+    readonly openpanelClientSecret: (name: string) => string;
+    readonly resendApiKey: "resend:api-key";
+    /** Per-scaffolded-project dotenvx private key for .env.production.
+     *  Stored in the OS keychain so the CLI's on-disk state never holds
+     *  decryption material for the starter's encrypted env. */
+    readonly dotenvxPrivateKey: (projectName: string) => string;
+};
+export declare function getSecret(key: string): Promise<string | null>;
+export declare function setSecret(key: string, value: string): Promise<void>;
+export declare function deleteSecret(key: string): Promise<boolean>;
+/** Wipe every secret belonging to this CLI from the keychain. */
+export declare function clearAllSecrets(): Promise<void>;
+//# sourceMappingURL=secrets.d.ts.map

package/dist/utils/secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../../src/utils/secrets.ts"],"names":[],"mappings":"AAoBA;mEACmE;AACnE,eAAO,MAAM,WAAW;;;;;qCAKE,MAAM;qCACN,MAAM;mCACR,MAAM;;;2CAGE,MAAM;;IAEpC;;+DAE2D;8CAC1B,MAAM;CAC/B,CAAC;AAEX,wBAAsB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAEnE;AAED,wBAAsB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEzE;AAED,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAEhE;AAED,iEAAiE;AACjE,wBAAsB,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAGrD"}

package/dist/utils/secrets.js

@@ -0,0 +1,51 @@
+/*
+ * Secrets store backed by the OS keychain (macOS Keychain / Windows
+ * Credential Vault / GNOME libsecret) via `keytar`.
+ *
+ * Everything sensitive (tokens, passwords, access keys) goes here. The
+ * Conf-backed JSON store in config.ts keeps only metadata (URLs, cached
+ * server lists, `lastVerified` timestamps, status flags).
+ *
+ * Naming:
+ *   service = "hatchkit"
+ *   account = stable slug, e.g. "coolify:token", "s3:hetzner:secret-key"
+ */
+import keytar from "keytar";
+// Tests set HATCHKIT_KEYTAR_SERVICE to a throwaway value so they
+// don't pollute the real user's keychain with scaffold-test artifacts.
+// In normal runs this is unset and everything lives under "hatchkit".
+const SERVICE = process.env.HATCHKIT_KEYTAR_SERVICE ?? "hatchkit";
+/** Well-known secret keys used across the CLI. New secrets should add
+ *  their key here so `clearAllSecrets` can reach them on reset. */
+export const SECRET_KEYS = {
+    coolifyToken: "coolify:token",
+    hetznerToken: "hetzner:token",
+    dnsInwxPassword: "dns:inwx:password",
+    dnsCloudflareToken: "dns:cloudflare:token",
+    s3AccessKey: (provider) => `s3:${provider}:access-key`,
+    s3SecretKey: (provider) => `s3:${provider}:secret-key`,
+    gpuApiKey: (platform) => `gpu:${platform}:api-key`,
+    glitchtipToken: "glitchtip:auth-token",
+    openpanelToken: "openpanel:personal-access-token",
+    openpanelClientSecret: (name) => `openpanel:${name}:client-secret`,
+    resendApiKey: "resend:api-key",
+    /** Per-scaffolded-project dotenvx private key for .env.production.
+     *  Stored in the OS keychain so the CLI's on-disk state never holds
+     *  decryption material for the starter's encrypted env. */
+    dotenvxPrivateKey: (projectName) => `dotenvx:${projectName}:production-private-key`,
+};
+export async function getSecret(key) {
+    return keytar.getPassword(SERVICE, key);
+}
+export async function setSecret(key, value) {
+    await keytar.setPassword(SERVICE, key, value);
+}
+export async function deleteSecret(key) {
+    return keytar.deletePassword(SERVICE, key);
+}
+/** Wipe every secret belonging to this CLI from the keychain. */
+export async function clearAllSecrets() {
+    const entries = await keytar.findCredentials(SERVICE);
+    await Promise.all(entries.map((e) => keytar.deletePassword(SERVICE, e.account)));
+}
+//# sourceMappingURL=secrets.js.map

package/dist/utils/secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../src/utils/secrets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,MAAM,MAAM,QAAQ,CAAC;AAE5B,iEAAiE;AACjE,uEAAuE;AACvE,sEAAsE;AACtE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,UAAU,CAAC;AAElE;mEACmE;AACnE,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,YAAY,EAAE,eAAe;IAC7B,YAAY,EAAE,eAAe;IAC7B,eAAe,EAAE,mBAAmB;IACpC,kBAAkB,EAAE,sBAAsB;IAC1C,WAAW,EAAE,CAAC,QAAgB,EAAE,EAAE,CAAC,MAAM,QAAQ,aAAa;IAC9D,WAAW,EAAE,CAAC,QAAgB,EAAE,EAAE,CAAC,MAAM,QAAQ,aAAa;IAC9D,SAAS,EAAE,CAAC,QAAgB,EAAE,EAAE,CAAC,OAAO,QAAQ,UAAU;IAC1D,cAAc,EAAE,sBAAsB;IACtC,cAAc,EAAE,iCAAiC;IACjD,qBAAqB,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,aAAa,IAAI,gBAAgB;IAC1E,YAAY,EAAE,gBAAgB;IAC9B;;+DAE2D;IAC3D,iBAAiB,EAAE,CAAC,WAAmB,EAAE,EAAE,CAAC,WAAW,WAAW,yBAAyB;CACnF,CAAC;AAEX,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,GAAW;IACzC,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,GAAW,EAAE,KAAa;IACxD,MAAM,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAW;IAC5C,OAAO,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;AAC7C,CAAC;AAED,iEAAiE;AACjE,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;IACtD,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACnF,CAAC"}

package/dist/utils/template.d.ts

@@ -0,0 +1,7 @@
+/** Render a Handlebars template file with the given context. */
+export declare function renderTemplate(templatePath: string, context: Record<string, unknown>): string;
+/** Render a template string (not from file) with the given context. */
+export declare function renderString(source: string, context: Record<string, unknown>): string;
+/** Get the templates directory path. */
+export declare function getTemplatesDir(): string;
+//# sourceMappingURL=template.d.ts.map

package/dist/utils/template.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"template.d.ts","sourceRoot":"","sources":["../../src/utils/template.ts"],"names":[],"mappings":"AAuBA,gEAAgE;AAChE,wBAAgB,cAAc,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAQ7F;AAED,uEAAuE;AACvE,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAGrF;AAED,wCAAwC;AACxC,wBAAgB,eAAe,IAAI,MAAM,CAExC"}

package/dist/utils/template.js

@@ -0,0 +1,35 @@
+import { existsSync, readFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+import Handlebars from "handlebars";
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const TEMPLATES_DIR = join(__dirname, "..", "templates");
+/** Register Handlebars helpers. */
+Handlebars.registerHelper("ifIn", function (value, list, options) {
+    if (list?.includes(value)) {
+        return options.fn(this);
+    }
+    return options.inverse(this);
+});
+Handlebars.registerHelper("join", (arr, separator) => arr.join(separator));
+Handlebars.registerHelper("json", (obj) => JSON.stringify(obj, null, 2));
+/** Render a Handlebars template file with the given context. */
+export function renderTemplate(templatePath, context) {
+    const fullPath = join(TEMPLATES_DIR, templatePath);
+    if (!existsSync(fullPath)) {
+        throw new Error(`Template not found: ${fullPath}`);
+    }
+    const source = readFileSync(fullPath, "utf-8");
+    const template = Handlebars.compile(source, { noEscape: true });
+    return template(context);
+}
+/** Render a template string (not from file) with the given context. */
+export function renderString(source, context) {
+    const template = Handlebars.compile(source, { noEscape: true });
+    return template(context);
+}
+/** Get the templates directory path. */
+export function getTemplatesDir() {
+    return TEMPLATES_DIR;
+}
+//# sourceMappingURL=template.js.map

package/dist/utils/template.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"template.js","sourceRoot":"","sources":["../../src/utils/template.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,UAAU,MAAM,YAAY,CAAC;AAEpC,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;AAEzD,mCAAmC;AACnC,UAAU,CAAC,cAAc,CACvB,MAAM,EACN,UAAyB,KAAa,EAAE,IAAc,EAAE,OAAiC;IACvF,IAAI,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC,CACF,CAAC;AAEF,UAAU,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,GAAa,EAAE,SAAiB,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;AAE7F,UAAU,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,GAAY,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAElF,gEAAgE;AAChE,MAAM,UAAU,cAAc,CAAC,YAAoB,EAAE,OAAgC;IACnF,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IACnD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,uBAAuB,QAAQ,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC;AAC3B,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,YAAY,CAAC,MAAc,EAAE,OAAgC;IAC3E,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC;AAC3B,CAAC;AAED,wCAAwC;AACxC,MAAM,UAAU,eAAe;IAC7B,OAAO,aAAa,CAAC;AACvB,CAAC"}

package/dist/utils/validate.d.ts

@@ -0,0 +1,16 @@
+/** Validate a domain name (e.g. chess.ricos.site) */
+export declare function validateDomain(value: string): boolean | string;
+/** Validate a project name (kebab-case) */
+export declare function validateProjectName(value: string): boolean | string;
+/** Validate an S3 bucket name */
+export declare function validateBucketName(value: string): boolean | string;
+/** Validate a URL */
+export declare function validateUrl(value: string): boolean | string;
+/** Validate non-empty string */
+export declare function validateRequired(value: string): boolean | string;
+/** Extract base domain and subdomain from a full domain. */
+export declare function parseDomain(domain: string): {
+    baseDomain: string;
+    subdomain: string;
+};
+//# sourceMappingURL=validate.d.ts.map

package/dist/utils/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../src/utils/validate.ts"],"names":[],"mappings":"AAAA,qDAAqD;AACrD,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,CAM9D;AAED,2CAA2C;AAC3C,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,CASnE;AAED,iCAAiC;AACjC,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,CAWlE;AAED,qBAAqB;AACrB,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,CAO3D;AAED,gCAAgC;AAChC,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,CAKhE;AAED,4DAA4D;AAC5D,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB,CAQA"}

package/dist/utils/validate.js

@@ -0,0 +1,60 @@
+/** Validate a domain name (e.g. chess.ricos.site) */
+export function validateDomain(value) {
+    const pattern = /^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)+$/;
+    if (!pattern.test(value)) {
+        return "Invalid domain. Use lowercase letters, numbers, and hyphens (e.g. chess.ricos.site)";
+    }
+    return true;
+}
+/** Validate a project name (kebab-case) */
+export function validateProjectName(value) {
+    const pattern = /^[a-z][a-z0-9-]*$/;
+    if (!pattern.test(value)) {
+        return "Project name must be kebab-case (lowercase letters, numbers, hyphens)";
+    }
+    if (value.length > 40) {
+        return "Project name must be 40 characters or less";
+    }
+    return true;
+}
+/** Validate an S3 bucket name */
+export function validateBucketName(value) {
+    if (value.length < 3 || value.length > 63) {
+        return "Bucket name must be 3-63 characters";
+    }
+    if (!/^[a-z0-9][a-z0-9.-]*[a-z0-9]$/.test(value)) {
+        return "Bucket name must be lowercase, start/end with letter or number";
+    }
+    if (value.includes("_")) {
+        return "Bucket name cannot contain underscores";
+    }
+    return true;
+}
+/** Validate a URL */
+export function validateUrl(value) {
+    try {
+        new URL(value);
+        return true;
+    }
+    catch {
+        return "Invalid URL";
+    }
+}
+/** Validate non-empty string */
+export function validateRequired(value) {
+    if (!value.trim()) {
+        return "This field is required";
+    }
+    return true;
+}
+/** Extract base domain and subdomain from a full domain. */
+export function parseDomain(domain) {
+    const parts = domain.split(".");
+    if (parts.length < 3) {
+        return { baseDomain: domain, subdomain: "" };
+    }
+    const baseDomain = parts.slice(-2).join(".");
+    const subdomain = parts.slice(0, -2).join(".");
+    return { baseDomain, subdomain };
+}
+//# sourceMappingURL=validate.js.map

package/dist/utils/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../src/utils/validate.ts"],"names":[],"mappings":"AAAA,qDAAqD;AACrD,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,MAAM,OAAO,GAAG,mEAAmE,CAAC;IACpF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,qFAAqF,CAAC;IAC/F,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,2CAA2C;AAC3C,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,MAAM,OAAO,GAAG,mBAAmB,CAAC;IACpC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,uEAAuE,CAAC;IACjF,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACtB,OAAO,4CAA4C,CAAC;IACtD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iCAAiC;AACjC,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QAC1C,OAAO,qCAAqC,CAAC;IAC/C,CAAC;IACD,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,OAAO,gEAAgE,CAAC;IAC1E,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,wCAAwC,CAAC;IAClD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,qBAAqB;AACrB,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,aAAa,CAAC;IACvB,CAAC;AACH,CAAC;AAED,gCAAgC;AAChC,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAClB,OAAO,wBAAwB,CAAC;IAClC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,WAAW,CAAC,MAAc;IAIxC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC/C,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;AACnC,CAAC"}

package/dist/utils/version.d.ts

@@ -0,0 +1,2 @@
+export declare function getCliVersion(): string;
+//# sourceMappingURL=version.d.ts.map

package/dist/utils/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../../src/utils/version.ts"],"names":[],"mappings":"AAYA,wBAAgB,aAAa,IAAI,MAAM,CAQtC"}

package/dist/utils/version.js

@@ -0,0 +1,21 @@
+/*
+ * CLI self-version lookup.
+ *
+ * Reads the `version` field from the CLI's own `package.json`. Works
+ * from both the compiled `cli/dist/` entry point and the `tsx` dev
+ * path (`cli/src/`). Falls back to "0.0.0" on any failure so callers
+ * can safely splat it into logs without worrying about exceptions.
+ */
+import { readFileSync } from "node:fs";
+import { join, resolve } from "node:path";
+export function getCliVersion() {
+    try {
+        const pkgPath = resolve(join(import.meta.dirname, "..", "..", "package.json"));
+        const pkg = JSON.parse(readFileSync(pkgPath, "utf-8"));
+        return pkg.version ?? "0.0.0";
+    }
+    catch {
+        return "0.0.0";
+    }
+}
+//# sourceMappingURL=version.js.map

package/dist/utils/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../src/utils/version.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE1C,MAAM,UAAU,aAAa;IAC3B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC;QAC/E,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QACvD,OAAO,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC"}

package/package.json

@@ -0,0 +1,48 @@
+{
+  "name": "hatchkit",
+  "version": "0.1.1",
+  "description": "Interactive CLI for scaffolding full-stack projects and provisioning observability/email clients",
+  "type": "module",
+  "bin": {
+    "hatchkit": "./dist/index.js"
+  },
+  "files": [
+    "dist",
+    "scripts",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc && node scripts/copy-templates.mjs",
+    "dev": "tsx src/index.ts",
+    "start": "node dist/index.js",
+    "test": "tsx test-scaffold.ts",
+    "typecheck": "tsc --noEmit",
+    "lint": "biome check src",
+    "lint:fix": "biome check --write src",
+    "format": "biome format --write src",
+    "check": "pnpm run typecheck && pnpm run lint && pnpm run test",
+    "install-local": "pnpm run build && npm install -g .",
+    "release": "pnpm run release:patch",
+    "release:patch": "npm version patch -m \"chore: release v%s\" && pnpm run _release:finish",
+    "release:minor": "npm version minor -m \"chore: release v%s\" && pnpm run _release:finish",
+    "release:major": "npm version major -m \"chore: release v%s\" && pnpm run _release:finish",
+    "_release:finish": "pnpm run build && pnpm run typecheck && npm publish --access public && git push --follow-tags && npm install -g .",
+    "prepublishOnly": "pnpm run build"
+  },
+  "dependencies": {
+    "@inquirer/prompts": "^7.0.0",
+    "chalk": "^5.3.0",
+    "conf": "^13.0.0",
+    "execa": "^9.0.0",
+    "handlebars": "^4.7.8",
+    "keytar": "^7.9.0",
+    "ora": "^8.0.0"
+  },
+  "devDependencies": {
+    "@biomejs/biome": "^1.9.4",
+    "@dotenvx/dotenvx": "^1.61.2",
+    "@types/node": "^22.0.0",
+    "tsx": "^4.0.0",
+    "typescript": "^5.6.0"
+  }
+}

package/scripts/copy-templates.mjs

@@ -0,0 +1,20 @@
+#!/usr/bin/env node
+/**
+ * Copy non-TS assets (Handlebars templates) from src/ into dist/ so
+ * the compiled CLI can resolve them at runtime via
+ * `dist/utils/../templates/...`. Run automatically from `pnpm build`.
+ */
+import { cpSync, existsSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const here = dirname(fileURLToPath(import.meta.url));
+const root = join(here, "..");
+const from = join(root, "src", "templates");
+const to = join(root, "dist", "templates");
+
+if (!existsSync(from)) {
+  console.error(`copy-templates: source missing at ${from}`);
+  process.exit(1);
+}
+cpSync(from, to, { recursive: true });