hatchkit 0.1.2 → 0.1.4

package/dist/deploy/rename-domain.js

@@ -0,0 +1,290 @@
+/*
+ * rename-domain — move a scaffolded project from one domain to another.
+ *
+ * Rewrites every file hatchkit owns that hard-codes the old domain:
+ *
+ *   <project>/.hatchkit.json                — manifest `domain` field
+ *   <infra>/terraform/stacks/<stack>/<name>.tfvars
+ *                                           — `domain` + remapped
+ *                                             `subdomains` keys
+ *   <infra>/stacks/<name>.env (Coolify env) — APP_DOMAIN + any other
+ *                                             line containing the old
+ *                                             full-domain string
+ *
+ * Intentionally does NOT run `terraform apply` or touch Coolify's live
+ * app state. Those are destructive, out-of-band operations the user
+ * should review the planned diff for first. A detailed follow-up
+ * checklist is printed at the end covering:
+ *   - terraform apply (destroys old records, creates new in new zone)
+ *   - the Coolify app's FQDN + env (update in dashboard or via API)
+ *   - gh-pages CNAME (if applicable)
+ *   - OAuth redirect URIs at Google / GitHub / Stripe / Resend
+ *   - any hardcoded URLs in the app's own code
+ */
+import { existsSync, readFileSync, writeFileSync } from "node:fs";
+import { basename, join, resolve } from "node:path";
+import { confirm, input } from "@inquirer/prompts";
+import chalk from "chalk";
+import { readManifest } from "../scaffold/manifest.js";
+import { parseDomain, validateDomain } from "../utils/validate.js";
+export async function runRenameDomain(opts) {
+    const { projectDir, monorepoRoot } = opts;
+    // 1. Manifest
+    const manifest = readManifest(projectDir);
+    if (!manifest) {
+        throw new Error(`No .hatchkit.json found in ${projectDir}. Run rename-domain from the project root (or pass --dir).`);
+    }
+    const oldDomain = manifest.domain;
+    // 2. Target domain
+    const newDomain = opts.newDomain ??
+        (await input({
+            message: `New domain for ${chalk.cyan(manifest.name)} (was ${chalk.dim(oldDomain)}):`,
+            validate: validateDomain,
+        }));
+    const newValid = validateDomain(newDomain);
+    if (newValid !== true)
+        throw new Error(`--to invalid: ${newValid}`);
+    if (newDomain === oldDomain) {
+        console.log(chalk.yellow(`  ${oldDomain} is already the current domain — nothing to do.`));
+        return;
+    }
+    const { baseDomain: oldBase, subdomain: oldSub } = parseDomain(oldDomain);
+    const { baseDomain: newBase, subdomain: newSub } = parseDomain(newDomain);
+    console.log(chalk.bold("\n  ── hatchkit rename-domain ─────────────────────────────────\n"));
+    console.log(`  Project:    ${chalk.cyan(manifest.name)}`);
+    console.log(`  From → To:  ${chalk.dim(oldDomain)} → ${chalk.green(newDomain)}`);
+    if (!newSub) {
+        console.log(chalk.yellow(`  Note: ${newDomain} has no subdomain prefix. Apex DNS records are required — verify your terraform module supports them before applying.`));
+    }
+    // 3. Collect edit plan
+    const edits = [];
+    // 3a. Manifest — just swap the `domain` field.
+    const manifestPath = join(projectDir, ".hatchkit.json");
+    edits.push(rewriteManifest(manifestPath, manifest, newDomain));
+    // 3b. Terraform tfvars — `dns-only` if deployTarget === "existing",
+    //     else `node-realtime`. Mirror the logic in deploy/terraform.ts.
+    const stackDirName = manifest.deployTarget === "existing" ? "dns-only" : "node-realtime";
+    const tfvarsPath = join(monorepoRoot, "infra", "terraform", "stacks", stackDirName, `${manifest.name}.tfvars`);
+    if (existsSync(tfvarsPath)) {
+        edits.push(rewriteTfvars(tfvarsPath, oldDomain, newDomain, oldSub, newSub, newBase, oldBase));
+    }
+    else {
+        console.log(chalk.yellow(`  ! No tfvars at ${tfvarsPath.slice(monorepoRoot.length + 1)} — skipping terraform bit.`));
+    }
+    // 3c. Coolify stack env — at `<infra>/stacks/<name>.env` or
+    //     `<monorepo>/stacks/<name>.env`. Match infra.ts's write path.
+    const stacksPath = findStacksEnv(monorepoRoot, manifest.name);
+    if (stacksPath) {
+        edits.push(rewriteStacksEnv(stacksPath, oldDomain, newDomain, oldBase, newBase));
+    }
+    else {
+        console.log(chalk.yellow(`  ! No stacks/${manifest.name}.env found — skipping Coolify env bit. (You may need to set APP_DOMAIN manually in the Coolify dashboard.)`));
+    }
+    // 4. Plan
+    console.log(chalk.bold("\n  ── Planned file changes ───────────────────────────────────\n"));
+    for (const edit of edits) {
+        console.log(`  ${chalk.cyan(edit.label)}`);
+        for (const change of edit.changes) {
+            console.log(chalk.dim(`    - ${change}`));
+        }
+    }
+    if (opts.dryRun) {
+        console.log(chalk.yellow("\n  [dry-run] No files written."));
+        printChecklist(manifest, oldDomain, newDomain, stackDirName);
+        return;
+    }
+    // 5. Confirm
+    if (!opts.yes) {
+        const ok = await confirm({
+            message: `Rewrite ${edits.length} file(s)?`,
+            default: true,
+        });
+        if (!ok) {
+            console.log(chalk.dim("  Cancelled."));
+            return;
+        }
+    }
+    // 6. Apply
+    for (const edit of edits) {
+        writeFileSync(edit.path, edit.after);
+        console.log(chalk.green(`  ✓ wrote ${edit.label}`));
+    }
+    printChecklist(manifest, oldDomain, newDomain, stackDirName);
+}
+function rewriteManifest(path, m, newDomain) {
+    const next = { ...m, domain: newDomain };
+    return {
+        label: basename(path),
+        path,
+        after: `${JSON.stringify(next, null, 2)}\n`,
+        changes: [`domain: "${m.domain}" → "${newDomain}"`],
+    };
+}
+/**
+ * Edit the tfvars file. Two surgical changes + a remap of subdomain keys.
+ *
+ * The tfvars file was generated from a template, so the format is
+ * predictable. Matching `domain = "..."` and the opening of the
+ * `subdomains = { ... }` block with regex is safer than a full parser
+ * for this narrow use.
+ */
+function rewriteTfvars(path, oldDomain, newDomain, oldSub, newSub, newBase, oldBase) {
+    const before = readFileSync(path, "utf8");
+    let after = before;
+    const changes = [];
+    // domain = "OLD"  →  domain = "NEWBASE"
+    const domainRe = /(\bdomain\s*=\s*")([^"]+)(")/;
+    if (domainRe.test(after)) {
+        after = after.replace(domainRe, (_m, pre, _val, post) => `${pre}${newBase}${post}`);
+        changes.push(`domain: "${oldBase}" → "${newBase}"`);
+    }
+    // subdomains map remapping. Old key "OLDSUB" or "api.OLDSUB" maps to
+    // the new subdomain prefix. Keys that don't involve the old subdomain
+    // (e.g. "admin") pass through untouched.
+    const keyRemap = {
+        [oldSub]: newSub || "@",
+        [`api.${oldSub}`]: newSub ? `api.${newSub}` : "api",
+    };
+    // Match `"KEY" = "VALUE"` lines inside the subdomains block.
+    const entryRe = /"([^"]+)"\s*=\s*"([^"]+)"/g;
+    after = after.replace(entryRe, (full, key, val) => {
+        // Only remap keys we know about — leave anything else alone.
+        if (keyRemap[key] !== undefined) {
+            const newKey = keyRemap[key];
+            if (newKey !== key) {
+                changes.push(`subdomains key "${key}" → "${newKey}"`);
+                return `"${newKey}" = "${val}"`;
+            }
+        }
+        return full;
+    });
+    // Belt and braces: any lingering mention of the old full domain in a
+    // comment line gets swapped for clarity. Safe because tfvars doesn't
+    // use the old domain as a string value anywhere else.
+    if (after.includes(oldDomain)) {
+        const count = after.split(oldDomain).length - 1;
+        after = after.split(oldDomain).join(newDomain);
+        changes.push(`${count} stray "${oldDomain}" → "${newDomain}"`);
+    }
+    return {
+        label: path.split("/").slice(-4).join("/"),
+        path,
+        after,
+        changes: changes.length > 0 ? changes : ["(no changes detected)"],
+    };
+}
+/**
+ * Edit the Coolify stack env file. This is a plain KEY="VALUE" block,
+ * not a strict format — do line-by-line substitution so we don't clobber
+ * unrelated lines and keep the diff obvious.
+ *
+ * Swaps:
+ *   - APP_DOMAIN="OLD" → "NEW"
+ *   - Any other line whose value contains the old full domain gets the
+ *     old-full-domain → new-full-domain swap (catches FRONTEND_URL,
+ *     BETTER_AUTH_URL, TRUSTED_ORIGINS, etc).
+ *   - Lines with the old base domain (but not the old full domain) are
+ *     left alone — those usually refer to someone else's URL.
+ *
+ * COOLIFY_URL is explicitly skipped — that's the Coolify dashboard URL,
+ * not the project's public domain.
+ */
+function rewriteStacksEnv(path, oldDomain, newDomain, _oldBase, _newBase) {
+    const before = readFileSync(path, "utf8");
+    const lines = before.split("\n");
+    const changes = [];
+    const next = lines.map((line) => {
+        // Skip comments, blanks, and Coolify's own dashboard URL.
+        if (line.trim().startsWith("#") || line.trim() === "")
+            return line;
+        if (line.startsWith("COOLIFY_URL"))
+            return line;
+        if (line.includes(oldDomain)) {
+            const replaced = line.split(oldDomain).join(newDomain);
+            const key = line.split("=")[0];
+            changes.push(`${key}: swapped "${oldDomain}" → "${newDomain}"`);
+            return replaced;
+        }
+        return line;
+    });
+    return {
+        label: path.split("/").slice(-2).join("/"),
+        path,
+        after: next.join("\n"),
+        changes: changes.length > 0 ? changes : ["(no changes detected)"],
+    };
+}
+/**
+ * Locate the stacks/<name>.env file. During scaffold it's written
+ * under `infra/stacks/` (the infra submodule). Some layouts put it
+ * under `<monorepo>/stacks/` instead — check both.
+ */
+function findStacksEnv(monorepoRoot, name) {
+    const candidates = [
+        join(monorepoRoot, "infra", "stacks", `${name}.env`),
+        join(monorepoRoot, "stacks", `${name}.env`),
+    ];
+    for (const c of candidates) {
+        if (existsSync(c))
+            return c;
+    }
+    return null;
+}
+// ---------------------------------------------------------------------------
+// Follow-up checklist
+// ---------------------------------------------------------------------------
+function printChecklist(manifest, oldDomain, newDomain, stackDirName) {
+    const { baseDomain: newBase } = parseDomain(newDomain);
+    console.log(chalk.bold("\n  ── Follow-up (hatchkit won't do these for you) ────────────\n"));
+    console.log(chalk.bold("  1. DNS prerequisites"));
+    console.log(`     Ensure the new zone ${chalk.cyan(newBase)} exists at your DNS provider.`);
+    console.log(chalk.dim("     For Cloudflare: add the zone in the CF dashboard (or via API), then"));
+    console.log(chalk.dim("     `hatchkit dns link-to-cloudflare` to flip INWX NS if relevant."));
+    console.log(chalk.bold("\n  2. Terraform"));
+    console.log(chalk.dim(`     cd infra/terraform/stacks/${stackDirName}`));
+    console.log(chalk.dim(`     terraform plan -var-file=${manifest.name}.tfvars`));
+    console.log(chalk.dim(`     terraform apply -var-file=${manifest.name}.tfvars`));
+    console.log(chalk.dim(`     (Destroys old records at ${oldDomain}, creates new ones at ${newDomain}.)`));
+    console.log(chalk.bold("\n  3. Coolify app"));
+    console.log(`     Update the FQDN on the ${chalk.cyan(manifest.name)} app (Coolify dashboard → General),`);
+    console.log(`     and confirm env vars like ${chalk.dim("FRONTEND_URL / BETTER_AUTH_URL / TRUSTED_ORIGINS")}`);
+    console.log(`     moved across. Redeploy after updating — new TLS cert takes 1-3 min.`);
+    if (manifest.features.includes("stripe")) {
+        console.log(chalk.bold("\n  4. External integrations"));
+        console.log(`     Update webhook URLs:`);
+        console.log(chalk.dim(`       - Stripe dashboard → Developers → Webhooks (new URL)`));
+        console.log(chalk.dim(`       - Any OAuth redirect URIs (Google, GitHub, Discord…)`));
+    }
+    else {
+        console.log(chalk.bold("\n  4. External integrations"));
+        console.log(chalk.dim(`     Any OAuth redirect URIs (Google, GitHub, Discord…)`));
+    }
+    console.log(chalk.bold("\n  5. App code"));
+    console.log(chalk.dim(`     grep -r "${oldDomain}" . and update any hardcoded references (README, OG tags, sitemap).`));
+    console.log();
+}
+// Re-export for testability.
+export const _internals = {
+    rewriteTfvars,
+    rewriteStacksEnv,
+    rewriteManifest,
+};
+// ---------------------------------------------------------------------------
+// CLI glue — thin wrapper the dispatcher calls.
+// ---------------------------------------------------------------------------
+export async function runRenameDomainCli(args, monorepoRoot) {
+    const positional = args.filter((a) => !a.startsWith("--"));
+    const flagValue = (name) => {
+        const i = args.findIndex((a) => a === `--${name}`);
+        if (i >= 0 && args[i + 1])
+            return args[i + 1];
+        return undefined;
+    };
+    const newDomain = flagValue("to") ?? positional[0];
+    const dirArg = flagValue("dir");
+    const dryRun = args.includes("--dry-run");
+    const yes = args.includes("--yes") || args.includes("-y");
+    const projectDir = dirArg ? resolve(dirArg) : resolve(".");
+    await runRenameDomain({ projectDir, monorepoRoot, newDomain, dryRun, yes });
+}
+//# sourceMappingURL=rename-domain.js.map

package/dist/deploy/rename-domain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rename-domain.js","sourceRoot":"","sources":["../../src/deploy/rename-domain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAwB,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC7E,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAmBnE,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAyB;IAC7D,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC;IAE1C,cAAc;IACd,MAAM,QAAQ,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IAC1C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACb,8BAA8B,UAAU,4DAA4D,CACrG,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC;IAElC,mBAAmB;IACnB,MAAM,SAAS,GACb,IAAI,CAAC,SAAS;QACd,CAAC,MAAM,KAAK,CAAC;YACX,OAAO,EAAE,kBAAkB,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI;YACrF,QAAQ,EAAE,cAAc;SACzB,CAAC,CAAC,CAAC;IACN,MAAM,QAAQ,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IAC3C,IAAI,QAAQ,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,QAAQ,EAAE,CAAC,CAAC;IACpE,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,SAAS,iDAAiD,CAAC,CAAC,CAAC;QAC3F,OAAO;IACT,CAAC;IAED,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IAC1E,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IAE1E,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC,CAAC;IAC7F,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1D,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACjF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,MAAM,CACV,WAAW,SAAS,uHAAuH,CAC5I,CACF,CAAC;IACJ,CAAC;IAED,uBAAuB;IACvB,MAAM,KAAK,GAAe,EAAE,CAAC;IAE7B,+CAA+C;IAC/C,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;IACxD,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,YAAY,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;IAE/D,oEAAoE;IACpE,qEAAqE;IACrE,MAAM,YAAY,GAAG,QAAQ,CAAC,YAAY,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,eAAe,CAAC;IACzF,MAAM,UAAU,GAAG,IAAI,CACrB,YAAY,EACZ,OAAO,EACP,WAAW,EACX,QAAQ,EACR,YAAY,EACZ,GAAG,QAAQ,CAAC,IAAI,SAAS,CAC1B,CAAC;IACF,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAChG,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,MAAM,CACV,oBAAoB,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,4BAA4B,CAC1F,CACF,CAAC;IACJ,CAAC;IAED,4DAA4D;IAC5D,mEAAmE;IACnE,MAAM,UAAU,GAAG,aAAa,CAAC,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC9D,IAAI,UAAU,EAAE,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IACnF,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,MAAM,CACV,iBAAiB,QAAQ,CAAC,IAAI,4GAA4G,CAC3I,CACF,CAAC;IACJ,CAAC;IAED,UAAU;IACV,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC,CAAC;IAC7F,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3C,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,iCAAiC,CAAC,CAAC,CAAC;QAC7D,cAAc,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;QAC7D,OAAO;IACT,CAAC;IAED,aAAa;IACb,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACd,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC;YACvB,OAAO,EAAE,WAAW,KAAK,CAAC,MAAM,WAAW;YAC3C,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC;YACvC,OAAO;QACT,CAAC;IACH,CAAC;IAED,WAAW;IACX,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACtD,CAAC;IAED,cAAc,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;AAC/D,CAAC;AAaD,SAAS,eAAe,CAAC,IAAY,EAAE,CAAkB,EAAE,SAAiB;IAC1E,MAAM,IAAI,GAAG,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACzC,OAAO;QACL,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC;QACrB,IAAI;QACJ,KAAK,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI;QAC3C,OAAO,EAAE,CAAC,YAAY,CAAC,CAAC,MAAM,QAAQ,SAAS,GAAG,CAAC;KACpD,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,aAAa,CACpB,IAAY,EACZ,SAAiB,EACjB,SAAiB,EACjB,MAAc,EACd,MAAc,EACd,OAAe,EACf,OAAe;IAEf,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1C,IAAI,KAAK,GAAG,MAAM,CAAC;IACnB,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,wCAAwC;IACxC,MAAM,QAAQ,GAAG,8BAA8B,CAAC;IAChD,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,GAAG,OAAO,GAAG,IAAI,EAAE,CAAC,CAAC;QACpF,OAAO,CAAC,IAAI,CAAC,YAAY,OAAO,QAAQ,OAAO,GAAG,CAAC,CAAC;IACtD,CAAC;IAED,qEAAqE;IACrE,sEAAsE;IACtE,yCAAyC;IACzC,MAAM,QAAQ,GAA2B;QACvC,CAAC,MAAM,CAAC,EAAE,MAAM,IAAI,GAAG;QACvB,CAAC,OAAO,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC,CAAC,KAAK;KACpD,CAAC;IAEF,6DAA6D;IAC7D,MAAM,OAAO,GAAG,4BAA4B,CAAC;IAC7C,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAChD,6DAA6D;QAC7D,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC7B,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;gBACnB,OAAO,CAAC,IAAI,CAAC,mBAAmB,GAAG,QAAQ,MAAM,GAAG,CAAC,CAAC;gBACtD,OAAO,IAAI,MAAM,QAAQ,GAAG,GAAG,CAAC;YAClC,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,qEAAqE;IACrE,qEAAqE;IACrE,sDAAsD;IACtD,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QAChD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/C,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,WAAW,SAAS,QAAQ,SAAS,GAAG,CAAC,CAAC;IACjE,CAAC;IAED,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QAC1C,IAAI;QACJ,KAAK;QACL,OAAO,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC;KAClE,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAS,gBAAgB,CACvB,IAAY,EACZ,SAAiB,EACjB,SAAiB,EACjB,QAAgB,EAChB,QAAgB;IAEhB,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAC9B,0DAA0D;QAC1D,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC;QACnE,IAAI,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC;YAAE,OAAO,IAAI,CAAC;QAEhD,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACvD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/B,OAAO,CAAC,IAAI,CAAC,GAAG,GAAG,cAAc,SAAS,QAAQ,SAAS,GAAG,CAAC,CAAC;YAChE,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QAC1C,IAAI;QACJ,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QACtB,OAAO,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC;KAClE,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,YAAoB,EAAE,IAAY;IACvD,MAAM,UAAU,GAAG;QACjB,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,MAAM,CAAC;QACpD,IAAI,CAAC,YAAY,EAAE,QAAQ,EAAE,GAAG,IAAI,MAAM,CAAC;KAC5C,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,UAAU,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E,SAAS,cAAc,CACrB,QAAyB,EACzB,SAAiB,EACjB,SAAiB,EACjB,YAAoB;IAEpB,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC,CAAC;IAE7F,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,4BAA4B,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC;IAC5F,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CAAC,0EAA0E,CAAC,CACtF,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,qEAAqE,CAAC,CAAC,CAAC;IAE9F,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,kCAAkC,YAAY,EAAE,CAAC,CAAC,CAAC;IACzE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,iCAAiC,QAAQ,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC;IAChF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,kCAAkC,QAAQ,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC;IACjF,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CAAC,iCAAiC,SAAS,yBAAyB,SAAS,IAAI,CAAC,CAC5F,CAAC;IAEF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CACT,+BAA+B,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,qCAAqC,CAC9F,CAAC;IACF,OAAO,CAAC,GAAG,CACT,kCAAkC,KAAK,CAAC,GAAG,CAAC,kDAAkD,CAAC,EAAE,CAClG,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,0EAA0E,CAAC,CAAC;IAExF,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC,CAAC;QACtF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC,CAAC;IACxF,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC,CAAC;IACpF,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAC3C,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CACP,iBAAiB,SAAS,qEAAqE,CAChG,CACF,CAAC;IAEF,OAAO,CAAC,GAAG,EAAE,CAAC;AAChB,CAAC;AAED,6BAA6B;AAC7B,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,aAAa;IACb,gBAAgB;IAChB,eAAe;CAChB,CAAC;AAEF,8EAA8E;AAC9E,gDAAgD;AAChD,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAc,EAAE,YAAoB;IAC3E,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,CAAC,IAAY,EAAsB,EAAE;QACrD,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9C,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IAEF,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAE1D,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3D,MAAM,eAAe,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AAC9E,CAAC"}

package/dist/deploy/terraform.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"terraform.d.ts","sourceRoot":"","sources":["../../src/deploy/terraform.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAGnD,qCAAqC;AACrC,wBAAsB,YAAY,CAAC,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAkEzF"}
+{"version":3,"file":"terraform.d.ts","sourceRoot":"","sources":["../../src/deploy/terraform.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAInD,qCAAqC;AACrC,wBAAsB,YAAY,CAAC,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA2FzF"}

package/dist/deploy/terraform.js

@@ -2,6 +2,7 @@ import { join } from "node:path";
 import chalk from "chalk";
 import { getDnsConfig, getHetznerToken, getS3Config } from "../config.js";
 import { exec, execStream } from "../utils/exec.js";
+import { InwxApi } from "../utils/inwx-api.js";
 /** Run Terraform for the project. */
 export async function runTerraform(config, repoRoot) {
     const hetznerToken = await getHetznerToken();
@@ -15,10 +16,24 @@ export async function runTerraform(config, repoRoot) {
     if (hetznerToken) {
         env.TF_VAR_hcloud_token = hetznerToken;
     }
+    // DNS credentials. The stack's dns_provider variable decides which
+    // provider actually *applies* records, but the INWX Terraform provider
+    // calls account.login during Configure() regardless, so valid INWX
+    // creds must always be passed through when we have them. Either the
+    // primary DNS creds (provider = "inwx") or the registrar creds
+    // (provider = "cloudflare" with INWX still holding the domain) satisfy
+    // that requirement.
     if (dnsConfig?.provider === "inwx") {
         env.TF_VAR_inwx_username = dnsConfig.username || "";
         env.TF_VAR_inwx_password = dnsConfig.password || "";
     }
+    else if (dnsConfig?.provider === "cloudflare") {
+        env.TF_VAR_cloudflare_api_token = dnsConfig.apiToken || "";
+        if (dnsConfig.registrarUsername && dnsConfig.registrarPassword) {
+            env.TF_VAR_inwx_username = dnsConfig.registrarUsername;
+            env.TF_VAR_inwx_password = dnsConfig.registrarPassword;
+        }
+    }
     if (config.features.includes("s3") &&
         config.s3Provider !== "existing" &&
         config.s3Provider !== "none") {
@@ -51,5 +66,80 @@ export async function runTerraform(config, repoRoot) {
         throw new Error("Terraform apply failed");
     }
     console.log(chalk.green("\n  ✓ Terraform apply complete"));
+    // Post-apply: if we just deployed to Cloudflare but the domain is
+    // still registered at INWX, update INWX's delegated NS to point at
+    // Cloudflare. This is the "auto-wire" step that would otherwise
+    // require clicking through the INWX web UI for every domain.
+    if (dnsConfig?.provider === "cloudflare" &&
+        dnsConfig.registrarUsername &&
+        dnsConfig.registrarPassword) {
+        await updateInwxNameserversFromTfOutput(stackDir, env, dnsConfig);
+    }
+}
+/**
+ * Read the stack's dns_provider + dns_domain + dns_nameservers outputs
+ * and push them to INWX as the new delegated NS for that domain. No-op
+ * if the stack didn't actually apply a Cloudflare zone (e.g. user kept
+ * dns_provider = "inwx" in tfvars even though their CLI config says
+ * Cloudflare).
+ */
+async function updateInwxNameserversFromTfOutput(stackDir, env, dnsConfig) {
+    const out = await exec("terraform", ["output", "-json"], {
+        cwd: stackDir,
+        env,
+        silent: true,
+    });
+    if (out.exitCode !== 0) {
+        console.log(chalk.yellow("  ! Could not read terraform outputs — skipping INWX NS update"));
+        return;
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(out.stdout);
+    }
+    catch {
+        console.log(chalk.yellow("  ! terraform output -json was not valid JSON — skipping INWX NS update"));
+        return;
+    }
+    const appliedProvider = parsed.dns_provider?.value;
+    const domain = parsed.dns_domain?.value;
+    const nameservers = parsed.dns_nameservers?.value ?? [];
+    if (appliedProvider !== "cloudflare") {
+        // User explicitly picked INWX for this stack in tfvars — don't touch
+        // the registrar even though their CLI config defaults to Cloudflare.
+        return;
+    }
+    if (!domain || nameservers.length === 0) {
+        console.log(chalk.yellow("  ! No Cloudflare nameservers in terraform output — skipping INWX NS update"));
+        return;
+    }
+    console.log(chalk.bold("\n  ── INWX registrar: pointing NS at Cloudflare ────────────\n"));
+    console.log(chalk.dim(`  Domain:  ${domain}`));
+    console.log(chalk.dim(`  New NS:  ${nameservers.join(", ")}`));
+    // registrarUsername/Password presence is guaranteed by the caller's
+    // guard — assert here to keep the types clean.
+    if (!dnsConfig.registrarUsername || !dnsConfig.registrarPassword) {
+        return;
+    }
+    const inwx = new InwxApi({
+        username: dnsConfig.registrarUsername,
+        password: dnsConfig.registrarPassword,
+        sandbox: process.env.INWX_SANDBOX === "1",
+    });
+    try {
+        await inwx.login();
+        await inwx.setDomainNameservers(domain, nameservers);
+        console.log(chalk.green(`  ✓ INWX: ${domain} now delegated to ${nameservers.length} Cloudflare nameservers`));
+        console.log(chalk.dim("    (TLD propagation can take 5 min to a few hours)"));
+    }
+    catch (error) {
+        // Don't fail the whole deploy for an NS-update hiccup — the CF zone
+        // is fine, the user can retry via `hatchkit dns link-to-cloudflare`.
+        console.log(chalk.yellow(`  ! INWX NS update failed: ${error.message}`));
+        console.log(chalk.dim(`    Retry with: hatchkit dns link-to-cloudflare ${domain}`));
+    }
+    finally {
+        await inwx.logout().catch(() => { });
+    }
 }
 //# sourceMappingURL=terraform.js.map

package/dist/deploy/terraform.js.map

@@ -1 +1 @@
-{"version":3,"file":"terraform.js","sourceRoot":"","sources":["../../src/deploy/terraform.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE1E,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEpD,qCAAqC;AACrC,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAqB,EAAE,QAAgB;IACxE,MAAM,YAAY,GAAG,MAAM,eAAe,EAAE,CAAC;IAC7C,MAAM,SAAS,GAAG,MAAM,YAAY,EAAE,CAAC;IAEvC,MAAM,QAAQ,GACZ,MAAM,CAAC,YAAY,KAAK,KAAK;QAC3B,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,eAAe,CAAC;QACxD,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IAExD,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,MAAM,CAAC,IAAI,SAAS,CAAC,CAAC;IAE3D,+BAA+B;IAC/B,MAAM,GAAG,GAA2B,EAAE,CAAC;IAEvC,IAAI,YAAY,EAAE,CAAC;QACjB,GAAG,CAAC,mBAAmB,GAAG,YAAY,CAAC;IACzC,CAAC;IAED,IAAI,SAAS,EAAE,QAAQ,KAAK,MAAM,EAAE,CAAC;QACnC,GAAG,CAAC,oBAAoB,GAAG,SAAS,CAAC,QAAQ,IAAI,EAAE,CAAC;QACpD,GAAG,CAAC,oBAAoB,GAAG,SAAS,CAAC,QAAQ,IAAI,EAAE,CAAC;IACtD,CAAC;IAED,IACE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC9B,MAAM,CAAC,UAAU,KAAK,UAAU;QAChC,MAAM,CAAC,UAAU,KAAK,MAAM,EAC5B,CAAC;QACD,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,EAAE,EAAE,CAAC;YACP,GAAG,CAAC,oBAAoB,GAAG,EAAE,CAAC,SAAS,CAAC;YACxC,GAAG,CAAC,oBAAoB,GAAG,EAAE,CAAC,SAAS,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC,CAAC;IAE7F,OAAO;IACP,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE;QACnD,GAAG,EAAE,QAAQ;QACb,GAAG;QACH,OAAO,EAAE,2BAA2B;KACrC,CAAC,CAAC;IACH,IAAI,UAAU,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3C,CAAC;IAED,OAAO;IACP,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC,CAAC;IAC1D,MAAM,YAAY,GAAG,MAAM,UAAU,CACnC,WAAW,EACX,CAAC,MAAM,EAAE,aAAa,UAAU,EAAE,EAAE,aAAa,CAAC,EAClD,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CACvB,CAAC;IACF,IAAI,YAAY,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3C,CAAC;IAED,QAAQ;IACR,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,MAAM,aAAa,GAAG,MAAM,UAAU,CAAC,WAAW,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;IACjG,IAAI,aAAa,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC;AAC7D,CAAC"}
+{"version":3,"file":"terraform.js","sourceRoot":"","sources":["../../src/deploy/terraform.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAkB,YAAY,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE1F,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAE/C,qCAAqC;AACrC,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAqB,EAAE,QAAgB;IACxE,MAAM,YAAY,GAAG,MAAM,eAAe,EAAE,CAAC;IAC7C,MAAM,SAAS,GAAG,MAAM,YAAY,EAAE,CAAC;IAEvC,MAAM,QAAQ,GACZ,MAAM,CAAC,YAAY,KAAK,KAAK;QAC3B,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,eAAe,CAAC;QACxD,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IAExD,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,MAAM,CAAC,IAAI,SAAS,CAAC,CAAC;IAE3D,+BAA+B;IAC/B,MAAM,GAAG,GAA2B,EAAE,CAAC;IAEvC,IAAI,YAAY,EAAE,CAAC;QACjB,GAAG,CAAC,mBAAmB,GAAG,YAAY,CAAC;IACzC,CAAC;IAED,mEAAmE;IACnE,uEAAuE;IACvE,mEAAmE;IACnE,oEAAoE;IACpE,+DAA+D;IAC/D,uEAAuE;IACvE,oBAAoB;IACpB,IAAI,SAAS,EAAE,QAAQ,KAAK,MAAM,EAAE,CAAC;QACnC,GAAG,CAAC,oBAAoB,GAAG,SAAS,CAAC,QAAQ,IAAI,EAAE,CAAC;QACpD,GAAG,CAAC,oBAAoB,GAAG,SAAS,CAAC,QAAQ,IAAI,EAAE,CAAC;IACtD,CAAC;SAAM,IAAI,SAAS,EAAE,QAAQ,KAAK,YAAY,EAAE,CAAC;QAChD,GAAG,CAAC,2BAA2B,GAAG,SAAS,CAAC,QAAQ,IAAI,EAAE,CAAC;QAC3D,IAAI,SAAS,CAAC,iBAAiB,IAAI,SAAS,CAAC,iBAAiB,EAAE,CAAC;YAC/D,GAAG,CAAC,oBAAoB,GAAG,SAAS,CAAC,iBAAiB,CAAC;YACvD,GAAG,CAAC,oBAAoB,GAAG,SAAS,CAAC,iBAAiB,CAAC;QACzD,CAAC;IACH,CAAC;IAED,IACE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC9B,MAAM,CAAC,UAAU,KAAK,UAAU;QAChC,MAAM,CAAC,UAAU,KAAK,MAAM,EAC5B,CAAC;QACD,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,EAAE,EAAE,CAAC;YACP,GAAG,CAAC,oBAAoB,GAAG,EAAE,CAAC,SAAS,CAAC;YACxC,GAAG,CAAC,oBAAoB,GAAG,EAAE,CAAC,SAAS,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC,CAAC;IAE7F,OAAO;IACP,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE;QACnD,GAAG,EAAE,QAAQ;QACb,GAAG;QACH,OAAO,EAAE,2BAA2B;KACrC,CAAC,CAAC;IACH,IAAI,UAAU,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3C,CAAC;IAED,OAAO;IACP,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC,CAAC;IAC1D,MAAM,YAAY,GAAG,MAAM,UAAU,CACnC,WAAW,EACX,CAAC,MAAM,EAAE,aAAa,UAAU,EAAE,EAAE,aAAa,CAAC,EAClD,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CACvB,CAAC;IACF,IAAI,YAAY,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3C,CAAC;IAED,QAAQ;IACR,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,MAAM,aAAa,GAAG,MAAM,UAAU,CAAC,WAAW,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;IACjG,IAAI,aAAa,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC;IAE3D,kEAAkE;IAClE,mEAAmE;IACnE,gEAAgE;IAChE,6DAA6D;IAC7D,IACE,SAAS,EAAE,QAAQ,KAAK,YAAY;QACpC,SAAS,CAAC,iBAAiB;QAC3B,SAAS,CAAC,iBAAiB,EAC3B,CAAC;QACD,MAAM,iCAAiC,CAAC,QAAQ,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,iCAAiC,CAC9C,QAAgB,EAChB,GAA2B,EAC3B,SAAoB;IAEpB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE;QACvD,GAAG,EAAE,QAAQ;QACb,GAAG;QACH,MAAM,EAAE,IAAI;KACb,CAAC,CAAC;IACH,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,gEAAgE,CAAC,CAAC,CAAC;QAC5F,OAAO;IACT,CAAC;IAGD,IAAI,MAIH,CAAC;IACF,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,MAAM,CAAC,yEAAyE,CAAC,CACxF,CAAC;QACF,OAAO;IACT,CAAC;IAED,MAAM,eAAe,GAAG,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC;IACxC,MAAM,WAAW,GAAG,MAAM,CAAC,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC;IAExD,IAAI,eAAe,KAAK,YAAY,EAAE,CAAC;QACrC,qEAAqE;QACrE,qEAAqE;QACrE,OAAO;IACT,CAAC;IAED,IAAI,CAAC,MAAM,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxC,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,MAAM,CAAC,6EAA6E,CAAC,CAC5F,CAAC;QACF,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC,CAAC;IAC3F,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,MAAM,EAAE,CAAC,CAAC,CAAC;IAC/C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAE/D,oEAAoE;IACpE,+CAA+C;IAC/C,IAAI,CAAC,SAAS,CAAC,iBAAiB,IAAI,CAAC,SAAS,CAAC,iBAAiB,EAAE,CAAC;QACjE,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,OAAO,CAAC;QACvB,QAAQ,EAAE,SAAS,CAAC,iBAAiB;QACrC,QAAQ,EAAE,SAAS,CAAC,iBAAiB;QACrC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,GAAG;KAC1C,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACrD,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,KAAK,CACT,aAAa,MAAM,qBAAqB,WAAW,CAAC,MAAM,yBAAyB,CACpF,CACF,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC,CAAC;IAChF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,oEAAoE;QACpE,qEAAqE;QACrE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,8BAA+B,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACpF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,mDAAmD,MAAM,EAAE,CAAC,CAAC,CAAC;IACtF,CAAC;YAAS,CAAC;QACT,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACtC,CAAC;AACH,CAAC"}

package/dist/dns.d.ts

@@ -0,0 +1,7 @@
+export interface DnsLinkOptions {
+    /** Empty = all zones. */
+    domains: string[];
+    dryRun: boolean;
+}
+export declare function runDnsLinkToCloudflare(options: DnsLinkOptions): Promise<void>;
+//# sourceMappingURL=dns.d.ts.map

package/dist/dns.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dns.d.ts","sourceRoot":"","sources":["../src/dns.ts"],"names":[],"mappings":"AAkBA,MAAM,WAAW,cAAc;IAC7B,yBAAyB;IACzB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,wBAAsB,sBAAsB,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CA+HnF"}

package/dist/dns.js

@@ -0,0 +1,124 @@
+// `hatchkit dns link-to-cloudflare [domain...]`
+//
+// Standalone migration helper. For each domain (or all zones if none
+// given), look up the Cloudflare nameservers and push them to INWX as
+// the registrar-level delegation. Useful after importing zones into
+// Cloudflare when you don't want to click through INWX per-domain.
+//
+// Usage:
+//   hatchkit dns link-to-cloudflare                   # all matching zones
+//   hatchkit dns link-to-cloudflare fractal.garden    # just one
+//   hatchkit dns link-to-cloudflare --dry-run ...     # print only
+//   INWX_SANDBOX=1 hatchkit dns link-to-cloudflare ... # against OTE sandbox
+import chalk from "chalk";
+import { getDnsConfig } from "./config.js";
+import { CloudflareApi } from "./utils/cloudflare-api.js";
+import { InwxApi } from "./utils/inwx-api.js";
+export async function runDnsLinkToCloudflare(options) {
+    const dns = await getDnsConfig();
+    if (!dns) {
+        throw new Error("No DNS config found. Run `hatchkit config add dns` and choose Cloudflare first.");
+    }
+    if (dns.provider !== "cloudflare") {
+        throw new Error(`DNS provider is set to "${dns.provider}", not "cloudflare". This command only makes sense when hosting DNS on Cloudflare.`);
+    }
+    if (!dns.apiToken) {
+        throw new Error("Cloudflare API token is missing from the keychain.");
+    }
+    if (!dns.registrarUsername || !dns.registrarPassword) {
+        throw new Error("INWX registrar credentials are not configured. Re-run `hatchkit config add dns` and answer yes when asked about INWX as registrar.");
+    }
+    const cf = new CloudflareApi({ token: dns.apiToken, accountId: dns.accountId });
+    console.log(chalk.bold("\n  ── Verifying Cloudflare token ─────────────────────────\n"));
+    const status = await cf.verifyToken();
+    if (status !== "active") {
+        throw new Error(`Cloudflare token status is "${status}", expected "active".`);
+    }
+    console.log(chalk.green("  ✓ Token active"));
+    console.log(chalk.bold("\n  ── Listing Cloudflare zones ───────────────────────────\n"));
+    const allZones = await cf.listZones();
+    console.log(chalk.dim(`  Found ${allZones.length} zone(s) in Cloudflare`));
+    // Filter to the requested domains, or all zones if none were given.
+    let zones;
+    if (options.domains.length > 0) {
+        const wanted = new Set(options.domains);
+        zones = allZones.filter((z) => wanted.has(z.name));
+        const missing = [...wanted].filter((d) => !zones.find((z) => z.name === d));
+        if (missing.length > 0) {
+            console.log(chalk.yellow(`  ! Not found in Cloudflare: ${missing.join(", ")}`));
+        }
+    }
+    else {
+        zones = allZones;
+    }
+    if (zones.length === 0) {
+        console.log(chalk.yellow("\n  Nothing to do."));
+        return;
+    }
+    console.log(chalk.bold(`\n  ── Updating INWX delegation for ${zones.length} domain(s) ────\n`));
+    const inwx = new InwxApi({
+        username: dns.registrarUsername,
+        password: dns.registrarPassword,
+        sandbox: process.env.INWX_SANDBOX === "1",
+    });
+    if (options.dryRun) {
+        console.log(chalk.yellow("  [dry-run: no changes will be made]\n"));
+    }
+    else {
+        await inwx.login();
+    }
+    let successes = 0;
+    let failures = 0;
+    let skipped = 0;
+    try {
+        for (const zone of zones) {
+            const ns = zone.name_servers;
+            console.log(chalk.bold(`  ${zone.name}`));
+            console.log(chalk.dim(`    zone_id:  ${zone.id}`));
+            console.log(chalk.dim(`    ns:       ${ns.join(", ")}`));
+            if (zone.status !== "active") {
+                console.log(chalk.yellow(`    ! Zone status is "${zone.status}", skipping (activate it in CF first)`));
+                skipped += 1;
+                continue;
+            }
+            if (options.dryRun) {
+                console.log(chalk.dim("    would call domain.update { ns: [...] }"));
+                continue;
+            }
+            try {
+                // Skip if INWX already has the right NS — saves a write and
+                // avoids logging a misleading "updated" message.
+                const current = await inwx.getDomainInfo(zone.name);
+                const same = current.ns.length === ns.length && current.ns.every((n) => ns.includes(n.toLowerCase()));
+                if (same) {
+                    console.log(chalk.dim("    already matches — no change"));
+                    skipped += 1;
+                    continue;
+                }
+                await inwx.setDomainNameservers(zone.name, ns);
+                console.log(chalk.green("    ✓ updated at INWX"));
+                successes += 1;
+            }
+            catch (error) {
+                console.log(chalk.red(`    ✗ failed: ${error.message}`));
+                failures += 1;
+            }
+        }
+    }
+    finally {
+        if (!options.dryRun) {
+            await inwx.logout().catch(() => { });
+        }
+    }
+    console.log(chalk.bold("\n  ── Summary ──────────────────────────────────────────────\n"));
+    console.log(`  Updated: ${chalk.green(successes)}`);
+    console.log(`  Skipped: ${chalk.dim(skipped)}`);
+    console.log(`  Failed:  ${failures > 0 ? chalk.red(failures) : chalk.dim(failures)}`);
+    if (!options.dryRun && successes > 0) {
+        console.log(chalk.dim("\n  TLD propagation can take 5 min to a few hours."));
+    }
+    if (failures > 0) {
+        process.exit(1);
+    }
+}
+//# sourceMappingURL=dns.js.map

package/dist/dns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dns.js","sourceRoot":"","sources":["../src/dns.ts"],"names":[],"mappings":"AAAA,gDAAgD;AAChD,EAAE;AACF,qEAAqE;AACrE,sEAAsE;AACtE,oEAAoE;AACpE,mEAAmE;AACnE,EAAE;AACF,SAAS;AACT,2EAA2E;AAC3E,iEAAiE;AACjE,mEAAmE;AACnE,6EAA6E;AAE7E,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAuB,MAAM,2BAA2B,CAAC;AAC/E,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAQ9C,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,OAAuB;IAClE,MAAM,GAAG,GAAG,MAAM,YAAY,EAAE,CAAC;IAEjC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,iFAAiF,CAClF,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,2BAA2B,GAAG,CAAC,QAAQ,oFAAoF,CAC5H,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,iBAAiB,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CACb,oIAAoI,CACrI,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,GAAG,IAAI,aAAa,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;IAEhF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC,CAAC;IACzF,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC;IACtC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,+BAA+B,MAAM,uBAAuB,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAE7C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC,CAAC;IACzF,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,SAAS,EAAE,CAAC;IACtC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,QAAQ,CAAC,MAAM,wBAAwB,CAAC,CAAC,CAAC;IAE3E,oEAAoE;IACpE,IAAI,KAAuB,CAAC;IAC5B,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACxC,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,gCAAgC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;SAAM,CAAC;QACN,KAAK,GAAG,QAAQ,CAAC;IACnB,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC;QAChD,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,uCAAuC,KAAK,CAAC,MAAM,mBAAmB,CAAC,CAAC,CAAC;IAEhG,MAAM,IAAI,GAAG,IAAI,OAAO,CAAC;QACvB,QAAQ,EAAE,GAAG,CAAC,iBAAiB;QAC/B,QAAQ,EAAE,GAAG,CAAC,iBAAiB;QAC/B,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,GAAG;KAC1C,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,wCAAwC,CAAC,CAAC,CAAC;IACtE,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAED,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,IAAI,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YACnD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YAEzD,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC7B,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,MAAM,CAAC,yBAAyB,IAAI,CAAC,MAAM,uCAAuC,CAAC,CAC1F,CAAC;gBACF,OAAO,IAAI,CAAC,CAAC;gBACb,SAAS;YACX,CAAC;YAED,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC,CAAC;gBACrE,SAAS;YACX,CAAC;YAED,IAAI,CAAC;gBACH,4DAA4D;gBAC5D,iDAAiD;gBACjD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACpD,MAAM,IAAI,GACR,OAAO,CAAC,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM,IAAI,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;gBAC3F,IAAI,IAAI,EAAE,CAAC;oBACT,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC,CAAC;oBAC1D,OAAO,IAAI,CAAC,CAAC;oBACb,SAAS;gBACX,CAAC;gBAED,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBAC/C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;gBAClD,SAAS,IAAI,CAAC,CAAC;YACjB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAkB,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBACpE,QAAQ,IAAI,CAAC,CAAC;YAChB,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC,CAAC;IAC3F,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACpD,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,cAAc,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACtF,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/doctor.d.ts

@@ -0,0 +1,13 @@
+interface CheckResult {
+    name: string;
+    status: "ok" | "fail" | "skip";
+    detail?: string;
+    /** Multi-line troubleshooting hint, shown under a failing check. */
+    hint?: string[];
+}
+export declare function collectDoctorResults(): Promise<CheckResult[]>;
+export declare function runDoctor(opts?: {
+    json?: boolean;
+}): Promise<void>;
+export {};
+//# sourceMappingURL=doctor.d.ts.map

package/dist/doctor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../src/doctor.ts"],"names":[],"mappings":"AAsBA,UAAU,WAAW;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,CAAC;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oEAAoE;IACpE,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAkVD,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,CAYnE;AAED,wBAAsB,SAAS,CAAC,IAAI,GAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CA8C5E"}