iec-cli 0.6.6

package/dist/lib/validators/scope-validator.js

@@ -0,0 +1,141 @@
+import { readFile, access } from 'node:fs/promises';
+import { join } from 'node:path';
+import { parse } from 'yaml';
+import { BioClient } from '../bio.js';
+export async function validateScopes(cwd = process.cwd()) {
+    const checks = [];
+    const catalogPath = join(cwd, 'catalog-info.yaml');
+    try {
+        await access(catalogPath);
+    }
+    catch {
+        checks.push({
+            name: 'Scope grants',
+            status: 'skip',
+            message: 'No catalog-info.yaml found, skipping scope validation',
+        });
+        return { checks };
+    }
+    try {
+        const content = await readFile(catalogPath, 'utf-8');
+        const catalogInfo = parse(content);
+        const requiredScopes = catalogInfo.spec?.requiredScopes;
+        if (!requiredScopes || requiredScopes.length === 0) {
+            checks.push({
+                name: 'Scope grants',
+                status: 'skip',
+                message: 'No requiredScopes defined in catalog-info.yaml',
+            });
+            return { checks };
+        }
+        const serviceName = catalogInfo.metadata?.name;
+        if (!serviceName) {
+            checks.push({
+                name: 'Scope grants',
+                status: 'fail',
+                message: 'No service name in catalog-info.yaml metadata',
+            });
+            return { checks };
+        }
+        // Query Bio-id for current scope grants
+        let bio;
+        try {
+            bio = await BioClient.create();
+        }
+        catch {
+            checks.push({
+                name: 'Scope grants',
+                status: 'warn',
+                message: 'Could not connect to Bio-id to verify scope grants',
+                remediation: 'Run "iec login" to authenticate, then retry',
+            });
+            return { checks };
+        }
+        const grantsResult = await bio.listScopeGrants({
+            requestingServiceId: serviceName,
+        });
+        if (!grantsResult.success) {
+            checks.push({
+                name: 'Scope grants',
+                status: 'warn',
+                message: `Could not fetch scope grants: ${grantsResult.error?.message}`,
+                remediation: 'Ensure Bio-id is reachable and you are authenticated',
+            });
+            return { checks };
+        }
+        const grants = grantsResult.data || [];
+        const pendingDetails = [];
+        const missingDetails = [];
+        const grantedDetails = [];
+        for (const req of requiredScopes) {
+            for (const scope of req.scopes) {
+                const matchingGrant = grants.find((g) => g.targetServiceId === req.service &&
+                    g.requestedScopes.includes(scope));
+                if (!matchingGrant) {
+                    missingDetails.push(`${scope} from ${req.service} — not requested yet`);
+                }
+                else if (matchingGrant.status === 'approved') {
+                    if (matchingGrant.grantedScopes.includes(scope)) {
+                        grantedDetails.push(`${scope} from ${req.service}`);
+                    }
+                    else {
+                        missingDetails.push(`${scope} from ${req.service} — requested but not in granted set`);
+                    }
+                }
+                else if (matchingGrant.status === 'pending') {
+                    pendingDetails.push(`${scope} from ${req.service} — awaiting admin approval`);
+                }
+                else if (matchingGrant.status === 'denied') {
+                    missingDetails.push(`${scope} from ${req.service} — request was denied`);
+                }
+                else if (matchingGrant.status === 'revoked') {
+                    missingDetails.push(`${scope} from ${req.service} — grant was revoked`);
+                }
+            }
+        }
+        if (grantedDetails.length > 0) {
+            checks.push({
+                name: 'Scope grants approved',
+                status: 'pass',
+                message: `${grantedDetails.length} scope(s) granted`,
+                details: grantedDetails,
+            });
+        }
+        if (pendingDetails.length > 0) {
+            checks.push({
+                name: 'Scope grants pending',
+                status: 'warn',
+                message: `${pendingDetails.length} scope(s) awaiting approval`,
+                details: pendingDetails,
+                remediation: 'Ask an admin to approve the pending scope requests',
+            });
+        }
+        if (missingDetails.length > 0) {
+            checks.push({
+                name: 'Scope grants missing',
+                status: 'warn',
+                message: `${missingDetails.length} required scope(s) not yet available`,
+                details: missingDetails,
+                remediation: 'Run "iec scopes request <service> <scopes>" to request missing scopes',
+            });
+        }
+        if (grantedDetails.length === 0 &&
+            pendingDetails.length === 0 &&
+            missingDetails.length === 0) {
+            checks.push({
+                name: 'Scope grants',
+                status: 'pass',
+                message: 'All required scopes are available',
+            });
+        }
+    }
+    catch (error) {
+        checks.push({
+            name: 'Scope validation',
+            status: 'fail',
+            message: `Failed to validate scopes: ${error instanceof Error ? error.message : 'Unknown error'}`,
+        });
+    }
+    return { checks };
+}
+//# sourceMappingURL=scope-validator.js.map

package/dist/lib/validators/scope-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-validator.js","sourceRoot":"","sources":["../../../src/lib/validators/scope-validator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,KAAK,EAAE,MAAM,MAAM,CAAA;AAE5B,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AAErC,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAc,OAAO,CAAC,GAAG,EAAE;IAC9D,MAAM,MAAM,GAAqB,EAAE,CAAA;IACnC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAA;IAElD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,WAAW,CAAC,CAAA;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,uDAAuD;SACjE,CAAC,CAAA;QACF,OAAO,EAAE,MAAM,EAAE,CAAA;IACnB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;QACpD,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAgB,CAAA;QAEjD,MAAM,cAAc,GAAG,WAAW,CAAC,IAAI,EAAE,cAAc,CAAA;QACvD,IAAI,CAAC,cAAc,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,cAAc;gBACpB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,gDAAgD;aAC1D,CAAC,CAAA;YACF,OAAO,EAAE,MAAM,EAAE,CAAA;QACnB,CAAC;QAED,MAAM,WAAW,GAAG,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAA;QAC9C,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,cAAc;gBACpB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,+CAA+C;aACzD,CAAC,CAAA;YACF,OAAO,EAAE,MAAM,EAAE,CAAA;QACnB,CAAC;QAED,wCAAwC;QACxC,IAAI,GAAc,CAAA;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,CAAA;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,cAAc;gBACpB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,oDAAoD;gBAC7D,WAAW,EAAE,6CAA6C;aAC3D,CAAC,CAAA;YACF,OAAO,EAAE,MAAM,EAAE,CAAA;QACnB,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,GAAG,CAAC,eAAe,CAAC;YAC7C,mBAAmB,EAAE,WAAW;SACjC,CAAC,CAAA;QAEF,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YAC1B,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,cAAc;gBACpB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,iCAAiC,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE;gBACvE,WAAW,EAAE,sDAAsD;aACpE,CAAC,CAAA;YACF,OAAO,EAAE,MAAM,EAAE,CAAA;QACnB,CAAC;QAED,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,IAAI,EAAE,CAAA;QACtC,MAAM,cAAc,GAAa,EAAE,CAAA;QACnC,MAAM,cAAc,GAAa,EAAE,CAAA;QACnC,MAAM,cAAc,GAAa,EAAE,CAAA;QAEnC,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;YACjC,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;gBAC/B,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAC/B,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,eAAe,KAAK,GAAG,CAAC,OAAO;oBACjC,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,CACpC,CAAA;gBAED,IAAI,CAAC,aAAa,EAAE,CAAC;oBACnB,cAAc,CAAC,IAAI,CACjB,GAAG,KAAK,SAAS,GAAG,CAAC,OAAO,sBAAsB,CACnD,CAAA;gBACH,CAAC;qBAAM,IAAI,aAAa,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;oBAC/C,IAAI,aAAa,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;wBAChD,cAAc,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,GAAG,CAAC,OAAO,EAAE,CAAC,CAAA;oBACrD,CAAC;yBAAM,CAAC;wBACN,cAAc,CAAC,IAAI,CACjB,GAAG,KAAK,SAAS,GAAG,CAAC,OAAO,qCAAqC,CAClE,CAAA;oBACH,CAAC;gBACH,CAAC;qBAAM,IAAI,aAAa,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBAC9C,cAAc,CAAC,IAAI,CACjB,GAAG,KAAK,SAAS,GAAG,CAAC,OAAO,4BAA4B,CACzD,CAAA;gBACH,CAAC;qBAAM,IAAI,aAAa,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;oBAC7C,cAAc,CAAC,IAAI,CACjB,GAAG,KAAK,SAAS,GAAG,CAAC,OAAO,uBAAuB,CACpD,CAAA;gBACH,CAAC;qBAAM,IAAI,aAAa,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBAC9C,cAAc,CAAC,IAAI,CACjB,GAAG,KAAK,SAAS,GAAG,CAAC,OAAO,sBAAsB,CACnD,CAAA;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,uBAAuB;gBAC7B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,GAAG,cAAc,CAAC,MAAM,mBAAmB;gBACpD,OAAO,EAAE,cAAc;aACxB,CAAC,CAAA;QACJ,CAAC;QAED,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,sBAAsB;gBAC5B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,GAAG,cAAc,CAAC,MAAM,6BAA6B;gBAC9D,OAAO,EAAE,cAAc;gBACvB,WAAW,EAAE,oDAAoD;aAClE,CAAC,CAAA;QACJ,CAAC;QAED,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,sBAAsB;gBAC5B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,GAAG,cAAc,CAAC,MAAM,sCAAsC;gBACvE,OAAO,EAAE,cAAc;gBACvB,WAAW,EAAE,uEAAuE;aACrF,CAAC,CAAA;QACJ,CAAC;QAED,IACE,cAAc,CAAC,MAAM,KAAK,CAAC;YAC3B,cAAc,CAAC,MAAM,KAAK,CAAC;YAC3B,cAAc,CAAC,MAAM,KAAK,CAAC,EAC3B,CAAC;YACD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,cAAc;gBACpB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,mCAAmC;aAC7C,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,8BAA8B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE;SAClG,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,CAAA;AACnB,CAAC"}

package/dist/lib/watch.d.ts

@@ -0,0 +1,35 @@
+import type { BuilderClient } from './builder.js';
+interface WatchOptions {
+    /** Max consecutive transient errors before giving up (default: 10) */
+    maxRetries?: number;
+    /** Base poll interval in ms (default: 3000) */
+    pollInterval?: number;
+    /** Max poll interval in ms during backoff (default: 15000) */
+    maxPollInterval?: number;
+    /** Max total watch duration in ms (default: 30 minutes) */
+    timeout?: number;
+    /** Stream build logs incrementally (default: true) */
+    streamLogs?: boolean;
+    /** Label for terminal output — e.g. "Build", "Deployment", "Rollback" */
+    label?: string;
+}
+export declare class WatchError extends Error {
+    readonly buildId: string;
+    constructor(message: string, buildId: string);
+}
+/**
+ * Watch a build's progress with retry logic, backoff, and incremental log streaming.
+ * Throws WatchError on timeout, max retries, or build failure.
+ */
+export declare function watchBuild(builder: BuilderClient, buildId: string, options?: WatchOptions): Promise<void>;
+/**
+ * After a successful deploy, check if the service's HTTPS endpoint is reachable.
+ * Cloudflare edge certificates for new sub-subdomains can take a few minutes to provision.
+ * This polls the health endpoint and advises the user if the cert isn't ready yet.
+ */
+export declare function checkHttpsReadiness(hostname: string, options?: {
+    maxAttempts?: number;
+    interval?: number;
+}): Promise<void>;
+export {};
+//# sourceMappingURL=watch.d.ts.map

package/dist/lib/watch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"watch.d.ts","sourceRoot":"","sources":["../../src/lib/watch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAmBjD,UAAU,YAAY;IACpB,sEAAsE;IACtE,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,+CAA+C;IAC/C,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,8DAA8D;IAC9D,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,sDAAsD;IACtD,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,yEAAyE;IACzE,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,qBAAa,UAAW,SAAQ,KAAK;aACU,OAAO,EAAE,MAAM;gBAAhD,OAAO,EAAE,MAAM,EAAkB,OAAO,EAAE,MAAM;CAI7D;AAMD;;;GAGG;AACH,wBAAsB,UAAU,CAC9B,OAAO,EAAE,aAAa,EACtB,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,IAAI,CAAC,CAgGf;AAkCD;;;;GAIG;AACH,wBAAsB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAgCpI"}

package/dist/lib/watch.js

@@ -0,0 +1,171 @@
+import { log } from './output.js';
+const TERMINAL_STATES = ['completed', 'failed', 'cancelled'];
+const STATUS_ICONS = {
+    queued: '\u23f3', // hourglass
+    cloning: '\ud83d\udce5', // inbox
+    building: '\ud83d\udd28', // hammer
+    pushing: '\ud83d\udce4', // outbox
+    deploying: '\ud83d\ude80', // rocket
+    completed: '\u2705', // check
+    failed: '\u274c', // x
+    cancelled: '\u26d4', // no entry
+};
+export class WatchError extends Error {
+    buildId;
+    constructor(message, buildId) {
+        super(message);
+        this.buildId = buildId;
+        this.name = 'WatchError';
+    }
+}
+function isTransientError(code) {
+    return code === 'NON_JSON_RESPONSE' || code === 'HTTP_ERROR';
+}
+/**
+ * Watch a build's progress with retry logic, backoff, and incremental log streaming.
+ * Throws WatchError on timeout, max retries, or build failure.
+ */
+export async function watchBuild(builder, buildId, options = {}) {
+    const { maxRetries = 10, pollInterval = 3000, maxPollInterval = 15000, timeout = 30 * 60 * 1000, streamLogs = true, label = 'Build', } = options;
+    let lastStatus = '';
+    let consecutiveErrors = 0;
+    let currentInterval = pollInterval;
+    let logLinesSeen = 0;
+    const startTime = Date.now();
+    while (true) {
+        // Timeout guard
+        if (Date.now() - startTime > timeout) {
+            log.error(`${label} watch timed out after ${Math.round(timeout / 60000)} minutes`);
+            log.dim(`  The build may still be running. Check status with:`);
+            log.dim(`  iec status --build ${buildId}`);
+            throw new WatchError('Watch timed out', buildId);
+        }
+        const result = await builder.getBuild(buildId);
+        if (!result.success || !result.data) {
+            consecutiveErrors++;
+            const errMsg = result.error?.message || 'Unknown error';
+            if (consecutiveErrors >= maxRetries) {
+                log.error(`${label} watch failed after ${maxRetries} consecutive errors`);
+                log.dim(`  Last error: ${errMsg}`);
+                log.dim(`  The build may still be running. Check status with:`);
+                log.dim(`  iec status --build ${buildId}`);
+                throw new WatchError(`Failed after ${maxRetries} consecutive errors: ${errMsg}`, buildId);
+            }
+            if (isTransientError(result.error?.code)) {
+                // Backoff on transient errors (Cloudflare HTML pages, 502s, etc.)
+                currentInterval = Math.min(currentInterval * 1.5, maxPollInterval);
+                log.warning(`${label} status unavailable (${consecutiveErrors}/${maxRetries}), retrying...`);
+                log.dim(`  ${errMsg}`);
+            }
+            else {
+                throw new WatchError(`Failed to get build status: ${errMsg}`, buildId);
+            }
+            await delay(currentInterval);
+            continue;
+        }
+        // Successful response — reset error state and interval
+        consecutiveErrors = 0;
+        currentInterval = pollInterval;
+        const build = result.data;
+        // Print status transition
+        if (build.status !== lastStatus) {
+            lastStatus = build.status;
+            const icon = STATUS_ICONS[build.status] || '\u2022';
+            log.info(`${icon} ${build.status}`);
+        }
+        // Stream incremental logs
+        if (streamLogs) {
+            logLinesSeen = await printNewLogs(builder, buildId, logLinesSeen);
+        }
+        // Check for terminal state
+        if (TERMINAL_STATES.includes(build.status)) {
+            log.info('');
+            if (build.status === 'completed') {
+                log.success(`${label} completed successfully!`);
+                if (build.imageTag) {
+                    log.dim(`  Image: ${build.imageTag}`);
+                }
+                return;
+            }
+            else if (build.status === 'cancelled') {
+                log.warning(`${label} was cancelled`);
+                return;
+            }
+            else {
+                log.error(`${label} failed`);
+                if (build.error) {
+                    log.dim(`  Error: ${build.error}`);
+                }
+                log.info('');
+                log.info('View full logs:');
+                log.dim(`  iec logs --build ${buildId}`);
+                throw new WatchError(`${label} failed: ${build.error || 'Unknown error'}`, buildId);
+            }
+        }
+        await delay(currentInterval);
+    }
+}
+async function printNewLogs(builder, buildId, linesSeen) {
+    try {
+        const result = await builder.getBuildLogs(buildId);
+        if (!result.success || !result.data) {
+            return linesSeen;
+        }
+        const logs = Array.isArray(result.data.logs)
+            ? result.data.logs
+            : typeof result.data.logs === 'string'
+                ? result.data.logs.split('\n')
+                : [];
+        if (logs.length > linesSeen) {
+            const newLines = logs.slice(linesSeen);
+            for (const line of newLines) {
+                log.dim(`  ${line}`);
+            }
+            return logs.length;
+        }
+        return linesSeen;
+    }
+    catch {
+        // Log fetching is best-effort, don't interrupt the watch
+        return linesSeen;
+    }
+}
+/**
+ * After a successful deploy, check if the service's HTTPS endpoint is reachable.
+ * Cloudflare edge certificates for new sub-subdomains can take a few minutes to provision.
+ * This polls the health endpoint and advises the user if the cert isn't ready yet.
+ */
+export async function checkHttpsReadiness(hostname, options = {}) {
+    const { maxAttempts = 10, interval = 5000 } = options;
+    const healthUrl = `https://${hostname}/health`;
+    log.info('');
+    log.info(`Checking HTTPS readiness for ${hostname}...`);
+    for (let attempt = 1; attempt <= maxAttempts; attempt++) {
+        try {
+            const response = await fetch(healthUrl, {
+                signal: AbortSignal.timeout(5000),
+            });
+            if (response.ok) {
+                log.success(`HTTPS is live: https://${hostname}`);
+                return;
+            }
+            log.dim(`  Attempt ${attempt}/${maxAttempts}: HTTP ${response.status}`);
+        }
+        catch {
+            if (attempt === 1) {
+                log.dim(`  Cloudflare SSL certificate is provisioning — this typically takes 1-3 minutes for new subdomains.`);
+            }
+            log.dim(`  Attempt ${attempt}/${maxAttempts}: waiting for HTTPS...`);
+        }
+        if (attempt < maxAttempts) {
+            await delay(interval);
+        }
+    }
+    log.warning(`HTTPS not yet available for ${hostname}`);
+    log.dim(`  The Cloudflare SSL certificate may still be provisioning.`);
+    log.dim(`  Check manually: curl -s https://${hostname}/api/health`);
+}
+function delay(ms) {
+    return new Promise(resolve => setTimeout(resolve, ms));
+}
+//# sourceMappingURL=watch.js.map

package/dist/lib/watch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"watch.js","sourceRoot":"","sources":["../../src/lib/watch.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAA;AAIjC,MAAM,eAAe,GAAkB,CAAC,WAAW,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAA;AAE3E,MAAM,YAAY,GAA2B;IAC3C,MAAM,EAAE,QAAQ,EAAQ,YAAY;IACpC,OAAO,EAAE,cAAc,EAAM,QAAQ;IACrC,QAAQ,EAAE,cAAc,EAAK,SAAS;IACtC,OAAO,EAAE,cAAc,EAAM,SAAS;IACtC,SAAS,EAAE,cAAc,EAAI,SAAS;IACtC,SAAS,EAAE,QAAQ,EAAK,QAAQ;IAChC,MAAM,EAAE,QAAQ,EAAQ,IAAI;IAC5B,SAAS,EAAE,QAAQ,EAAK,WAAW;CACpC,CAAA;AAiBD,MAAM,OAAO,UAAW,SAAQ,KAAK;IACU;IAA7C,YAAY,OAAe,EAAkB,OAAe;QAC1D,KAAK,CAAC,OAAO,CAAC,CAAA;QAD6B,YAAO,GAAP,OAAO,CAAQ;QAE1D,IAAI,CAAC,IAAI,GAAG,YAAY,CAAA;IAC1B,CAAC;CACF;AAED,SAAS,gBAAgB,CAAC,IAAwB;IAChD,OAAO,IAAI,KAAK,mBAAmB,IAAI,IAAI,KAAK,YAAY,CAAA;AAC9D,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,OAAsB,EACtB,OAAe,EACf,UAAwB,EAAE;IAE1B,MAAM,EACJ,UAAU,GAAG,EAAE,EACf,YAAY,GAAG,IAAI,EACnB,eAAe,GAAG,KAAK,EACvB,OAAO,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,EACxB,UAAU,GAAG,IAAI,EACjB,KAAK,GAAG,OAAO,GAChB,GAAG,OAAO,CAAA;IAEX,IAAI,UAAU,GAAqB,EAAE,CAAA;IACrC,IAAI,iBAAiB,GAAG,CAAC,CAAA;IACzB,IAAI,eAAe,GAAG,YAAY,CAAA;IAClC,IAAI,YAAY,GAAG,CAAC,CAAA;IACpB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IAE5B,OAAO,IAAI,EAAE,CAAC;QACZ,gBAAgB;QAChB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,OAAO,EAAE,CAAC;YACrC,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,0BAA0B,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,CAAA;YAClF,GAAG,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAA;YAC/D,GAAG,CAAC,GAAG,CAAC,wBAAwB,OAAO,EAAE,CAAC,CAAA;YAC1C,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAA;QAClD,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;QAE9C,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACpC,iBAAiB,EAAE,CAAA;YACnB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,OAAO,IAAI,eAAe,CAAA;YAEvD,IAAI,iBAAiB,IAAI,UAAU,EAAE,CAAC;gBACpC,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,uBAAuB,UAAU,qBAAqB,CAAC,CAAA;gBACzE,GAAG,CAAC,GAAG,CAAC,iBAAiB,MAAM,EAAE,CAAC,CAAA;gBAClC,GAAG,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAA;gBAC/D,GAAG,CAAC,GAAG,CAAC,wBAAwB,OAAO,EAAE,CAAC,CAAA;gBAC1C,MAAM,IAAI,UAAU,CAAC,gBAAgB,UAAU,wBAAwB,MAAM,EAAE,EAAE,OAAO,CAAC,CAAA;YAC3F,CAAC;YAED,IAAI,gBAAgB,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;gBACzC,kEAAkE;gBAClE,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,GAAG,GAAG,EAAE,eAAe,CAAC,CAAA;gBAClE,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,wBAAwB,iBAAiB,IAAI,UAAU,gBAAgB,CAAC,CAAA;gBAC5F,GAAG,CAAC,GAAG,CAAC,KAAK,MAAM,EAAE,CAAC,CAAA;YACxB,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,UAAU,CAAC,+BAA+B,MAAM,EAAE,EAAE,OAAO,CAAC,CAAA;YACxE,CAAC;YAED,MAAM,KAAK,CAAC,eAAe,CAAC,CAAA;YAC5B,SAAQ;QACV,CAAC;QAED,uDAAuD;QACvD,iBAAiB,GAAG,CAAC,CAAA;QACrB,eAAe,GAAG,YAAY,CAAA;QAE9B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAA;QAEzB,0BAA0B;QAC1B,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAChC,UAAU,GAAG,KAAK,CAAC,MAAM,CAAA;YACzB,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAA;YACnD,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC,CAAA;QACrC,CAAC;QAED,0BAA0B;QAC1B,IAAI,UAAU,EAAE,CAAC;YACf,YAAY,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,CAAA;QACnE,CAAC;QAED,2BAA2B;QAC3B,IAAI,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACZ,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gBACjC,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,0BAA0B,CAAC,CAAA;gBAC/C,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;oBACnB,GAAG,CAAC,GAAG,CAAC,YAAY,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAA;gBACvC,CAAC;gBACD,OAAM;YACR,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gBACxC,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,gBAAgB,CAAC,CAAA;gBACrC,OAAM;YACR,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAA;gBAC5B,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;oBAChB,GAAG,CAAC,GAAG,CAAC,YAAY,KAAK,CAAC,KAAK,EAAE,CAAC,CAAA;gBACpC,CAAC;gBACD,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;gBACZ,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;gBAC3B,GAAG,CAAC,GAAG,CAAC,sBAAsB,OAAO,EAAE,CAAC,CAAA;gBACxC,MAAM,IAAI,UAAU,CAAC,GAAG,KAAK,YAAY,KAAK,CAAC,KAAK,IAAI,eAAe,EAAE,EAAE,OAAO,CAAC,CAAA;YACrF,CAAC;QACH,CAAC;QAED,MAAM,KAAK,CAAC,eAAe,CAAC,CAAA;IAC9B,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,OAAsB,EACtB,OAAe,EACf,SAAiB;IAEjB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAA;QAClD,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACpC,OAAO,SAAS,CAAA;QAClB,CAAC;QAED,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;YAC1C,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI;YAClB,CAAC,CAAC,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ;gBACpC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBAC9B,CAAC,CAAC,EAAE,CAAA;QAER,IAAI,IAAI,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;YACtC,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;gBAC5B,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAA;YACtB,CAAC;YACD,OAAO,IAAI,CAAC,MAAM,CAAA;QACpB,CAAC;QAED,OAAO,SAAS,CAAA;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,yDAAyD;QACzD,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,QAAgB,EAAE,UAAuD,EAAE;IACnH,MAAM,EAAE,WAAW,GAAG,EAAE,EAAE,QAAQ,GAAG,IAAI,EAAE,GAAG,OAAO,CAAA;IACrD,MAAM,SAAS,GAAG,WAAW,QAAQ,SAAS,CAAA;IAE9C,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACZ,GAAG,CAAC,IAAI,CAAC,gCAAgC,QAAQ,KAAK,CAAC,CAAA;IAEvD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;QACxD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE;gBACtC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;aAClC,CAAC,CAAA;YACF,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAChB,GAAG,CAAC,OAAO,CAAC,0BAA0B,QAAQ,EAAE,CAAC,CAAA;gBACjD,OAAM;YACR,CAAC;YACD,GAAG,CAAC,GAAG,CAAC,aAAa,OAAO,IAAI,WAAW,UAAU,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;QACzE,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;gBAClB,GAAG,CAAC,GAAG,CAAC,qGAAqG,CAAC,CAAA;YAChH,CAAC;YACD,GAAG,CAAC,GAAG,CAAC,aAAa,OAAO,IAAI,WAAW,wBAAwB,CAAC,CAAA;QACtE,CAAC;QAED,IAAI,OAAO,GAAG,WAAW,EAAE,CAAC;YAC1B,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAA;QACvB,CAAC;IACH,CAAC;IAED,GAAG,CAAC,OAAO,CAAC,+BAA+B,QAAQ,EAAE,CAAC,CAAA;IACtD,GAAG,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAA;IACtE,GAAG,CAAC,GAAG,CAAC,qCAAqC,QAAQ,aAAa,CAAC,CAAA;AACrE,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAA;AACxD,CAAC"}

package/dist/templates/api/.env.example

@@ -0,0 +1,15 @@
+# Server Configuration
+PORT=3000
+NODE_ENV=development
+
+# Database (if needed)
+# DATABASE_URL=mongodb://localhost:27017/{{name}}
+
+# Redis (if needed)
+# REDIS_URL=redis://localhost:6379
+
+# External Services
+# API_KEY=your-api-key-here
+
+# Logging
+LOG_LEVEL=info

package/dist/templates/api/Dockerfile

@@ -0,0 +1,45 @@
+FROM node:22-alpine AS builder
+
+WORKDIR /app
+
+# Copy package files
+COPY package*.json ./
+
+# Install dependencies
+RUN npm ci
+
+# Copy source code
+COPY . .
+
+# Build TypeScript
+RUN npm run build
+
+# Production stage
+FROM node:22-alpine
+
+WORKDIR /app
+
+# Copy package files and install production deps only
+COPY package*.json ./
+RUN npm ci --production && npm cache clean --force
+
+# Copy built application
+COPY --from=builder /app/dist ./dist
+
+# Set environment
+ENV NODE_ENV=production
+ENV PORT=3000
+
+# Create non-root user
+RUN addgroup -g 1001 -S nodejs && \
+    adduser -S nodejs -u 1001 && \
+    chown -R nodejs:nodejs /app
+
+USER nodejs
+
+EXPOSE 3000
+
+HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
+  CMD wget --no-verbose --tries=1 --spider http://localhost:3000/health || exit 1
+
+CMD ["node", "dist/index.js"]

package/dist/templates/api/README.md

@@ -0,0 +1,85 @@
+# {{name}}
+
+{{description}}
+
+## Getting Started
+
+### Prerequisites
+
+- Node.js 20+
+- npm or pnpm
+
+### Installation
+
+```bash
+npm install
+```
+
+### Development
+
+```bash
+npm run dev
+```
+
+The server will start on http://localhost:3000
+
+### Production Build
+
+```bash
+npm run build
+npm start
+```
+
+## API Endpoints
+
+### Health Check
+
+```
+GET /health
+```
+
+Returns service health status.
+
+### Items API
+
+```
+GET    /api/items      # List all items
+GET    /api/items/:id  # Get single item
+POST   /api/items      # Create item
+PUT    /api/items/:id  # Update item
+DELETE /api/items/:id  # Delete item
+```
+
+## Deployment
+
+### Using iec-cli
+
+```bash
+# Link repository for auto-deploy
+iec link
+
+# Manual deploy to sandbox
+iec deploy
+
+# Deploy to production
+iec deploy --prod
+```
+
+### Environment Variables
+
+See `.env.example` for available configuration options.
+
+## Project Structure
+
+```
+{{name}}/
+├── src/
+│   ├── index.ts        # Application entry point
+│   └── routes/
+│       └── example.ts  # Example CRUD routes
+├── helm/
+│   └── {{name}}/       # Kubernetes Helm chart
+├── Dockerfile
+├── catalog-info.yaml   # Backstage service catalog
+└── package.json
+```

package/dist/templates/api/catalog-info.yaml

@@ -0,0 +1,22 @@
+apiVersion: backstage.io/v1alpha1
+kind: Component
+metadata:
+  name: {{name}}
+  description: {{description}}
+  tags:
+    - tawa
+    - api
+    - express
+  annotations:
+    insureco.io/framework: express
+    insureco.io/language: typescript
+spec:
+  type: service
+  lifecycle: experimental
+  owner: {{owner}}
+  routes:
+    - path: /api/items
+      methods: [GET, POST]
+      auth: required
+      scopes: [items:read, items:write]
+      description: CRUD operations for items

package/dist/templates/api/gitignore

@@ -0,0 +1,31 @@
+# Dependencies
+node_modules/
+
+# Build output
+dist/
+
+# Environment files
+.env
+.env.local
+.env.*.local
+
+# Logs
+*.log
+npm-debug.log*
+
+# IDE
+.idea/
+.vscode/
+*.swp
+*.swo
+
+# OS
+.DS_Store
+Thumbs.db
+
+# Test coverage
+coverage/
+
+# Temporary files
+tmp/
+temp/

package/dist/templates/api/helm/{{name}}/Chart.yaml

@@ -0,0 +1,9 @@
+apiVersion: v2
+name: {{name}}
+description: Helm chart for {{name}}
+type: application
+version: 0.1.0
+appVersion: "0.1.0"
+maintainers:
+  - name: team-platform
+    email: platform@insureco.io

package/dist/templates/api/helm/{{name}}/templates/deployment.yaml

@@ -0,0 +1,72 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: {{ .Release.Name }}
+  labels:
+    app: {{ .Release.Name }}
+    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/instance: {{ .Release.Name }}
+spec:
+  replicas: {{ .Values.replicaCount }}
+  selector:
+    matchLabels:
+      app: {{ .Release.Name }}
+  template:
+    metadata:
+      labels:
+        app: {{ .Release.Name }}
+        app.kubernetes.io/name: {{ .Release.Name }}
+        app.kubernetes.io/instance: {{ .Release.Name }}
+    spec:
+      {{- with .Values.imagePullSecrets }}
+      imagePullSecrets:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      containers:
+        - name: {{ .Chart.Name }}
+          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
+          imagePullPolicy: {{ .Values.image.pullPolicy }}
+          ports:
+            - name: http
+              containerPort: {{ .Values.service.port }}
+              protocol: TCP
+          envFrom:
+            - configMapRef:
+                name: {{ .Release.Name }}-config
+                optional: true
+            - secretRef:
+                name: {{ .Release.Name }}-secrets
+                optional: true
+            {{- if .Values.secretRef }}
+            - secretRef:
+                name: {{ .Values.secretRef }}
+            {{- end }}
+          {{- with .Values.env }}
+          env:
+            {{- range $key, $value := . }}
+            - name: {{ $key }}
+              value: {{ $value | quote }}
+            {{- end }}
+          {{- end }}
+          {{- with .Values.livenessProbe }}
+          livenessProbe:
+            {{- toYaml . | nindent 12 }}
+          {{- end }}
+          {{- with .Values.readinessProbe }}
+          readinessProbe:
+            {{- toYaml . | nindent 12 }}
+          {{- end }}
+          resources:
+            {{- toYaml .Values.resources | nindent 12 }}
+      {{- with .Values.nodeSelector }}
+      nodeSelector:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      {{- with .Values.affinity }}
+      affinity:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      {{- with .Values.tolerations }}
+      tolerations:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}