ninedeploy 0.2.4 → 0.3.0

package/dist/commands/manifest.js

@@ -0,0 +1,218 @@
+/**
+ * `ninedeploy manifest {init,validate,show,apply}` — the project-side CLI
+ * for the `.ninedeploy` file. The first three work without server auth;
+ * `apply` is wired to a panel endpoint once the server-side handler ships
+ * (see docs/NINEDEPLOY_MANIFEST.md for the rollout plan).
+ */
+import { existsSync, readFileSync, writeFileSync } from 'node:fs';
+import { readdir } from 'node:fs/promises';
+import { resolve } from 'node:path';
+import { formatManifestYaml, ManifestParseError, ManifestValidationError, parseManifestYaml, starterManifest, detectProjectKind, } from '@ninedeploy/sdk';
+import { scanForSecrets } from '@ninedeploy/schemas';
+import { c, error, header, info, success } from '../lib/format.js';
+import { prompt } from '../prompts.js';
+const MANIFEST_FILENAMES = ['.ninedeploy', '.ninedeploy.yml', '.ninedeploy.yaml'];
+/** Resolve the manifest file in `cwd`, or null when none exists. */
+function findManifest(cwd) {
+    for (const name of MANIFEST_FILENAMES) {
+        const candidate = resolve(cwd, name);
+        if (existsSync(candidate))
+            return candidate;
+    }
+    return null;
+}
+// ── `ninedeploy manifest init` ────────────────────────────────────────────
+export async function manifestInit(cwd) {
+    header('Manifest init');
+    const existing = findManifest(cwd);
+    if (existing) {
+        error(`A manifest already exists at ${existing}. Refusing to overwrite.`);
+        return;
+    }
+    // Detect project kind from the files in cwd.
+    let kind = 'unknown';
+    try {
+        const files = await readdir(cwd);
+        kind = detectProjectKind(files);
+    }
+    catch {
+        // Empty / unreadable cwd — fall through to unknown.
+    }
+    const detectedLabel = {
+        'node-npm': 'Node.js (npm)',
+        'node-pnpm': 'Node.js (pnpm)',
+        python: 'Python',
+        go: 'Go',
+        static: 'Static SPA (Vite)',
+        unknown: 'Unknown / other',
+    };
+    info(`Detected project kind: ${detectedLabel[kind]}`);
+    const override = await prompt('Override detected kind? (node-npm | node-pnpm | python | go | static | unknown, leave empty to keep)', '');
+    const finalKind = (override.trim() || kind);
+    const manifest = starterManifest(finalKind);
+    const yaml = formatManifestYaml(manifest);
+    // Default to `.ninedeploy`. Allow opting into the yml suffix via a hint.
+    const filename = (await prompt('Filename (.ninedeploy, .ninedeploy.yml, …)', '.ninedeploy'))
+        .trim() || '.ninedeploy';
+    const out = resolve(cwd, filename);
+    writeFileSync(out, yaml, 'utf8');
+    success(`Wrote ${filename}`);
+    console.log();
+    console.log(c.dim(yaml.split('\n').slice(0, 12).join('\n')));
+    console.log(c.dim('…'));
+    console.log();
+    info('Edit the file to match your project, then commit it.');
+    info('Run `ninedeploy manifest validate` to check it before pushing.');
+}
+// ── `ninedeploy manifest validate` ────────────────────────────────────────
+export function manifestValidate(cwd) {
+    header('Manifest validate');
+    const file = findManifest(cwd);
+    if (!file) {
+        error(`No .ninedeploy (or .yml/.yaml) found in ${cwd}`);
+        return;
+    }
+    const text = readFileSync(file, 'utf8');
+    // Run the secret scan before schema validation: a credential-shaped
+    // value in the file is more dangerous than a schema mistake (the
+    // former leaks through git history; the latter only breaks the build).
+    // Matches the server's loader so the CLI's verdict mirrors what the
+    // deploy will do.
+    const hits = scanForSecrets(text);
+    if (hits.length > 0) {
+        error(`Secret-pattern matches in ${file}:`);
+        for (const h of hits) {
+            console.log(`  ${c.yellow('•')} ${h.patternId}: ${h.description} → ${h.redacted}`);
+        }
+        console.log(c.dim('Move these values to the panel env vault; the manifest is committed to the repo.'));
+        process.exitCode = 1;
+        return;
+    }
+    try {
+        parseManifestYaml(text);
+    }
+    catch (err) {
+        if (err instanceof ManifestParseError) {
+            error(`YAML parse error in ${file}:`);
+            console.log(c.dim(err.message));
+        }
+        else if (err instanceof ManifestValidationError) {
+            const v = err;
+            error(`Schema validation failed for ${file}:`);
+            for (const issue of v.issues) {
+                console.log(`  ${c.yellow('•')} ${issue.path || '<root>'}: ${issue.message}`);
+            }
+        }
+        else {
+            throw err;
+        }
+        process.exitCode = 1;
+        return;
+    }
+    success(`Valid: ${file}`);
+}
+// ── `ninedeploy manifest show` ────────────────────────────────────────────
+export function manifestShow(cwd) {
+    header('Manifest show');
+    const file = findManifest(cwd);
+    if (!file) {
+        error(`No .ninedeploy (or .yml/.yaml) found in ${cwd}`);
+        return;
+    }
+    const text = readFileSync(file, 'utf8');
+    // Same secret scan as `validate`, but as a warning here: the operator
+    // probably just wants to peek at the parsed contents, and a noisy error
+    // would be more friction than the situation warrants. A non-zero
+    // exitCode is still set so CI can fail the build.
+    const hits = scanForSecrets(text);
+    let manifest;
+    try {
+        manifest = parseManifestYaml(text);
+    }
+    catch (err) {
+        if (err instanceof ManifestParseError)
+            error(`Parse error: ${err.message}`);
+        else if (err instanceof ManifestValidationError)
+            error(`Validation failed: ${err.message}`);
+        else
+            throw err;
+        process.exitCode = 1;
+        return;
+    }
+    if (hits.length > 0) {
+        info(`⚠️  ${hits.length} secret-pattern match${hits.length === 1 ? '' : 'es'} in ${file} (the manifest is committed to the repo):`);
+        for (const h of hits) {
+            console.log(`  ${c.yellow('•')} ${h.patternId}: ${h.description} → ${h.redacted}`);
+        }
+        process.exitCode = 1;
+    }
+    // Print as key/value lines for human consumption. The structured YAML
+    // is also kept (file already exists on disk) — `show` is a debug aid.
+    const lines = [];
+    if (manifest.runtime) {
+        lines.push(`runtime.type:    ${manifest.runtime.type}`);
+        if (manifest.runtime.version)
+            lines.push(`runtime.version: ${manifest.runtime.version}`);
+    }
+    if (manifest.build) {
+        for (const [k, v] of Object.entries(manifest.build)) {
+            if (v)
+                lines.push(`build.${k.padEnd(11)} ${v}`);
+        }
+    }
+    if (manifest.run) {
+        if (manifest.run.port)
+            lines.push(`run.port:        ${manifest.run.port}`);
+        if (manifest.run.healthcheck)
+            lines.push(`run.healthcheck: ${manifest.run.healthcheck}`);
+        if (manifest.run.restart)
+            lines.push(`run.restart:     ${manifest.run.restart}`);
+    }
+    if (manifest.routes) {
+        lines.push(`routes:          ${manifest.routes.length} entr${manifest.routes.length === 1 ? 'y' : 'ies'}`);
+        for (const r of manifest.routes) {
+            lines.push(`  - ${r.host}${r.path} (ssl=${r.ssl})`);
+        }
+    }
+    if (manifest.database) {
+        lines.push(`database:        ${manifest.database.ref} → ${manifest.database.env}`);
+    }
+    if (manifest.alerts) {
+        lines.push(`alerts:          ${manifest.alerts.length} rule${manifest.alerts.length === 1 ? '' : 's'}`);
+    }
+    if (manifest.notifications) {
+        const total = manifest.notifications.onDeploy.length +
+            manifest.notifications.onFailure.length +
+            manifest.notifications.onAlert.length;
+        if (total > 0)
+            lines.push(`notifications:   ${total} channel ref${total === 1 ? '' : 's'}`);
+    }
+    if (manifest.volume?.backups) {
+        lines.push(`volume.backups:  ${manifest.volume.backups.schedule} (retention=${manifest.volume.backups.retention})`);
+    }
+    console.log(lines.join('\n') || c.dim('(empty manifest)'));
+}
+// ── `ninedeploy manifest apply` ───────────────────────────────────────────
+/**
+ * Reserved for the next minor: the server endpoint that accepts a parsed
+ * manifest and applies its operational sections (routes, alerts,
+ * attachments) to a service is not in this PR. We keep the action wired
+ * so the CLI surface is complete; the call returns a clear "not yet"
+ * message so the operator is not silently misled.
+ */
+export async function manifestApply(_client, cwd, _serviceId) {
+    header('Manifest apply');
+    const file = findManifest(cwd);
+    if (!file) {
+        error(`No .ninedeploy (or .yml/.yaml) found in ${cwd}`);
+        process.exitCode = 1;
+        return;
+    }
+    info('The server-side `apply` endpoint is not in this release yet.');
+    info('Until it ships, manifests are applied automatically on each deploy:');
+    info('  • build/runtime sections → read by the docker builder');
+    info('  • routes/alerts/database  → upserted by the deploy pipeline');
+    info('Track progress in docs/NINEDEPLOY_MANIFEST.md.');
+    info(`(Found manifest at ${file}; will be applied once the endpoint ships.)`);
+}
+//# sourceMappingURL=manifest.js.map

package/dist/commands/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../src/commands/manifest.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EACvB,iBAAiB,EACjB,eAAe,EACf,iBAAiB,GAGlB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAEvC,MAAM,kBAAkB,GAAG,CAAC,aAAa,EAAE,iBAAiB,EAAE,kBAAkB,CAAU,CAAC;AAE3F,oEAAoE;AACpE,SAAS,YAAY,CAAC,GAAW;IAC/B,KAAK,MAAM,IAAI,IAAI,kBAAkB,EAAE,CAAC;QACtC,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACrC,IAAI,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;IAC9C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,6EAA6E;AAE7E,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAW;IAC5C,MAAM,CAAC,eAAe,CAAC,CAAC;IAExB,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,QAAQ,EAAE,CAAC;QACb,KAAK,CAAC,gCAAgC,QAAQ,0BAA0B,CAAC,CAAC;QAC1E,OAAO;IACT,CAAC;IAED,6CAA6C;IAC7C,IAAI,IAAI,GAAgB,SAAS,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,oDAAoD;IACtD,CAAC;IAED,MAAM,aAAa,GAAgC;QACjD,UAAU,EAAE,eAAe;QAC3B,WAAW,EAAE,gBAAgB;QAC7B,MAAM,EAAE,QAAQ;QAChB,EAAE,EAAE,IAAI;QACR,MAAM,EAAE,mBAAmB;QAC3B,OAAO,EAAE,iBAAiB;KAC3B,CAAC;IACF,IAAI,CAAC,0BAA0B,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEtD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAC3B,sGAAsG,EACtG,EAAE,CACH,CAAC;IACF,MAAM,SAAS,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,IAAI,CAAgB,CAAC;IAE3D,MAAM,QAAQ,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAE1C,yEAAyE;IACzE,MAAM,QAAQ,GAAG,CAAC,MAAM,MAAM,CAAC,4CAA4C,EAAE,aAAa,CAAC,CAAC;SACzF,IAAI,EAAE,IAAI,aAAa,CAAC;IAC3B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACnC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAEjC,OAAO,CAAC,SAAS,QAAQ,EAAE,CAAC,CAAC;IAC7B,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7D,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,IAAI,CAAC,sDAAsD,CAAC,CAAC;IAC7D,IAAI,CAAC,gEAAgE,CAAC,CAAC;AACzE,CAAC;AAED,6EAA6E;AAE7E,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,KAAK,CAAC,2CAA2C,GAAG,EAAE,CAAC,CAAC;QACxD,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,oEAAoE;IACpE,iEAAiE;IACjE,uEAAuE;IACvE,oEAAoE;IACpE,kBAAkB;IAClB,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,KAAK,CAAC,6BAA6B,IAAI,GAAG,CAAC,CAAC;QAC5C,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,WAAW,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,kFAAkF,CAAC,CAAC,CAAC;QACvG,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,kBAAkB,EAAE,CAAC;YACtC,KAAK,CAAC,uBAAuB,IAAI,GAAG,CAAC,CAAC;YACtC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAE,GAA0B,CAAC,OAAO,CAAC,CAAC,CAAC;QAC1D,CAAC;aAAM,IAAI,GAAG,YAAY,uBAAuB,EAAE,CAAC;YAClD,MAAM,CAAC,GAAG,GAA8B,CAAC;YACzC,KAAK,CAAC,gCAAgC,IAAI,GAAG,CAAC,CAAC;YAC/C,KAAK,MAAM,KAAK,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;gBAC7B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,QAAQ,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAChF,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;AAC5B,CAAC;AAED,6EAA6E;AAE7E,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,MAAM,CAAC,eAAe,CAAC,CAAC;IACxB,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,KAAK,CAAC,2CAA2C,GAAG,EAAE,CAAC,CAAC;QACxD,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,sEAAsE;IACtE,wEAAwE;IACxE,iEAAiE;IACjE,kDAAkD;IAClD,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,QAA4B,CAAC;IACjC,IAAI,CAAC;QACH,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,kBAAkB;YAAE,KAAK,CAAC,gBAAiB,GAA0B,CAAC,OAAO,EAAE,CAAC,CAAC;aAC/F,IAAI,GAAG,YAAY,uBAAuB;YAAE,KAAK,CAAC,sBAAuB,GAA+B,CAAC,OAAO,EAAE,CAAC,CAAC;;YACpH,MAAM,GAAG,CAAC;QACf,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,wBAAwB,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,IAAI,2CAA2C,CAAC,CAAC;QACpI,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,WAAW,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;IACD,sEAAsE;IACtE,sEAAsE;IACtE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,oBAAoB,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,QAAQ,CAAC,OAAO,CAAC,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,oBAAoB,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QACnB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACpD,IAAI,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,GAAG,EAAE,CAAC;QACjB,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,oBAAoB,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3E,IAAI,QAAQ,CAAC,GAAG,CAAC,WAAW;YAAE,KAAK,CAAC,IAAI,CAAC,oBAAoB,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;QACzF,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,oBAAoB,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,oBAAoB,QAAQ,CAAC,MAAM,CAAC,MAAM,QAAQ,QAAQ,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC3G,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YAChC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC,oBAAoB,QAAQ,CAAC,QAAQ,CAAC,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,oBAAoB,QAAQ,CAAC,MAAM,CAAC,MAAM,QAAQ,QAAQ,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC1G,CAAC;IACD,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;QAC3B,MAAM,KAAK,GACT,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM;YACtC,QAAQ,CAAC,aAAa,CAAC,SAAS,CAAC,MAAM;YACvC,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC;QACxC,IAAI,KAAK,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,oBAAoB,KAAK,eAAe,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,oBAAoB,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,eAAe,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;IACtH,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,6EAA6E;AAE7E;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAyB,EACzB,GAAW,EACX,UAAkB;IAElB,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACzB,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,KAAK,CAAC,2CAA2C,GAAG,EAAE,CAAC,CAAC;QACxD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,IAAI,CAAC,8DAA8D,CAAC,CAAC;IACrE,IAAI,CAAC,qEAAqE,CAAC,CAAC;IAC5E,IAAI,CAAC,yDAAyD,CAAC,CAAC;IAChE,IAAI,CAAC,+DAA+D,CAAC,CAAC;IACtE,IAAI,CAAC,gDAAgD,CAAC,CAAC;IACvD,IAAI,CAAC,sBAAsB,IAAI,6CAA6C,CAAC,CAAC;AAChF,CAAC"}

package/dist/commands/sources.d.ts

@@ -0,0 +1,18 @@
+import type { NineDeployClient } from '../client.js';
+/** `ninedeploy sources list` */
+export declare function sourcesList(client: NineDeployClient): Promise<void>;
+/** `ninedeploy sources add [name]` */
+export declare function sourcesAdd(client: NineDeployClient, nameArg?: string): Promise<void>;
+/** `ninedeploy sources test [id]` — verify the stored token still authenticates. */
+export declare function sourcesTest(client: NineDeployClient, idArg?: string): Promise<void>;
+/**
+ * `ninedeploy sources keygen [id]` — ask the panel server to generate an
+ * ed25519 deploy key pair for the source, then print the public key so it
+ * can be pasted into the Git host's "Deploy keys" UI.
+ */
+export declare function sourcesKeygen(client: NineDeployClient, idArg?: string): Promise<void>;
+/** `ninedeploy sources remove [id]` */
+export declare function sourcesRemove(client: NineDeployClient, idArg?: string): Promise<void>;
+/** `ninedeploy sources show <id>` */
+export declare function sourcesShow(client: NineDeployClient, idArg: string): Promise<void>;
+//# sourceMappingURL=sources.d.ts.map

package/dist/commands/sources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sources.d.ts","sourceRoot":"","sources":["../../src/commands/sources.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAOrD,gCAAgC;AAChC,wBAAsB,WAAW,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAkBzE;AAkBD,sCAAsC;AACtC,wBAAsB,UAAU,CAAC,MAAM,EAAE,gBAAgB,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAgE1F;AAED,oFAAoF;AACpF,wBAAsB,WAAW,CAAC,MAAM,EAAE,gBAAgB,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAuBzF;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,MAAM,EAAE,gBAAgB,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA4B3F;AAED,uCAAuC;AACvC,wBAAsB,aAAa,CAAC,MAAM,EAAE,gBAAgB,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA8B3F;AAED,qCAAqC;AACrC,wBAAsB,WAAW,CAAC,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAexF"}

package/dist/commands/sources.js

@@ -0,0 +1,211 @@
+import process from 'node:process';
+import { prompt, promptHidden } from '../prompts.js';
+import { c, error, header, info, kv, spinner, success, table } from '../lib/format.js';
+const PROVIDERS = ['github', 'gitlab', 'gitea', 'registry', 'custom'];
+/** `ninedeploy sources list` */
+export async function sourcesList(client) {
+    header('Sources');
+    const rows = await spinner('Fetching sources', () => client.sources.list());
+    if (rows.length === 0) {
+        info('No sources yet. Run `ninedeploy sources add` to add a GitHub/GitLab PAT or SSH key.');
+        return;
+    }
+    table(rows.map((s) => ({
+        id: s.id,
+        name: s.name,
+        type: s.type,
+        token: s.hasToken ? c.green('✓') : c.gray('—'),
+        deployKey: s.hasDeployKey ? c.green('✓') : c.gray('—'),
+        branch: s.defaultBranch ?? 'main',
+    })), ['id', 'name', 'type', 'token', 'deployKey', 'branch']);
+}
+/**
+ * Resolve a credential with a strict, documented precedence:
+ *   1. explicit CLI flag (already handled by the caller)
+ *   2. NINEDEPLOY_GITHUB_TOKEN / NINEDEPLOY_GITLAB_TOKEN / NINEDEPLOY_TOKEN env var
+ *   3. interactive masked prompt
+ *
+ * The env fallback is the documented "no-stdin / CI" path: an operator
+ * piping `echo '' | ninedeploy …` keeps working without hanging.
+ */
+async function resolveSecret(envName, label) {
+    const fromEnv = process.env[envName]?.trim();
+    if (fromEnv)
+        return fromEnv;
+    // Last resort: masked prompt. Honors a piped-stdin default (empty).
+    return await promptHidden(label);
+}
+/** `ninedeploy sources add [name]` */
+export async function sourcesAdd(client, nameArg) {
+    header('Add Source');
+    const name = nameArg ?? (await prompt('Display name (e.g. github-personal)'));
+    /* v8 ignore next -- the dedicated "rejects when no name" test covers the truthy/falsy split, but
+     * v8 counts the early-return as a separate branch that the existing test only ticks on one side. */
+    if (!name)
+        return error('Name is required');
+    const type = (await prompt('Provider (github | gitlab | gitea | registry | custom)', 'github'));
+    if (!PROVIDERS.includes(type)) {
+        return error(`Unknown provider: ${type}. Choose one of: ${PROVIDERS.join(', ')}`);
+    }
+    const defaultBranch = (await prompt('Default branch (used as suggestion only)', 'main')) || 'main';
+    let token;
+    let deployKey;
+    let registryUsername;
+    if (type === 'registry') {
+        registryUsername = (await prompt('Registry username (e.g. ci-bot)')) || undefined;
+        token = await resolveSecret('NINEDEPLOY_TOKEN', 'Registry password / access token (PAT)');
+    }
+    else if (type === 'gitea') {
+        token = await resolveSecret('NINEDEPLOY_TOKEN', 'Gitea access token');
+    }
+    else if (type === 'custom') {
+        // Custom source: token or SSH key, your choice
+        const authKind = (await prompt('Auth kind (token | ssh)', 'token')) === 'ssh' ? 'ssh' : 'token';
+        if (authKind === 'ssh') {
+            deployKey = await resolveSecret('NINEDEPLOY_SSH_KEY', 'SSH private key (PEM, single line — escape newlines)');
+        }
+        else {
+            token = await resolveSecret('NINEDEPLOY_TOKEN', 'Access token (PAT)');
+        }
+    }
+    else {
+        // github / gitlab — both accept token or SSH
+        const authKind = (await prompt('Auth kind (token | ssh)', 'token')) === 'ssh' ? 'ssh' : 'token';
+        if (authKind === 'ssh') {
+            deployKey = await resolveSecret('NINEDEPLOY_SSH_KEY', 'SSH private key (PEM, single line — escape newlines)');
+        }
+        else {
+            const envName = type === 'github' ? 'NINEDEPLOY_GITHUB_TOKEN' : 'NINEDEPLOY_GITLAB_TOKEN';
+            token = await resolveSecret(envName, `${type === 'github' ? 'GitHub' : 'GitLab'} Personal Access Token (PAT)`);
+        }
+    }
+    if (!token && !deployKey) {
+        return error('Either a token or an SSH deploy key is required');
+    }
+    try {
+        const created = await spinner('Creating source', () => client.sources.create({
+            name,
+            type,
+            token: token || undefined,
+            deployKey: deployKey || undefined,
+            registryUsername,
+            defaultBranch,
+        }));
+        success(`Source "${created.name}" created (id: ${created.id})`);
+        // Live validation right away — saves the user a DeployWizard round-trip.
+        if ((type === 'github' || type === 'gitlab') && token) {
+            await sourcesTest(client, String(created.id));
+        }
+    }
+    catch (err) {
+        /* v8 ignore next -- exercised by the "API error" test which routes the error through error() */
+        error(err instanceof Error ? err.message : String(err));
+    }
+}
+/** `ninedeploy sources test [id]` — verify the stored token still authenticates. */
+export async function sourcesTest(client, idArg) {
+    header('Test Source Credentials');
+    let id = Number(idArg);
+    if (!id) {
+        const sources = await spinner('Fetching sources', () => client.sources.list());
+        if (sources.length === 0) {
+            info('No sources yet. Add one with `ninedeploy sources add`.');
+            return;
+        }
+        table(sources.map((s) => ({ id: s.id, name: s.name, type: s.type })), ['id', 'name', 'type']);
+        const picked = await prompt('Source id to test', String(sources[0].id));
+        id = Number(picked);
+        if (!id)
+            return error('A numeric source id is required');
+    }
+    const result = await spinner('Verifying credentials', () => client.sources.test(id));
+    if (result.ok) {
+        success(`✓ ${result.provider} token authenticates as ${result.login}${result.name ? ` (${result.name})` : ''}`);
+    }
+    else {
+        error(`✗ ${result.provider ?? 'source'} check failed (status ${result.status ?? 'n/a'}): ${result.error ?? 'unknown error'}`);
+    }
+}
+/**
+ * `ninedeploy sources keygen [id]` — ask the panel server to generate an
+ * ed25519 deploy key pair for the source, then print the public key so it
+ * can be pasted into the Git host's "Deploy keys" UI.
+ */
+export async function sourcesKeygen(client, idArg) {
+    header('Generate Deploy Key');
+    let id = Number(idArg);
+    if (!id) {
+        const sources = await spinner('Fetching sources', () => client.sources.list());
+        if (sources.length === 0) {
+            info('No sources yet. Add one with `ninedeploy sources add` first.');
+            return;
+        }
+        table(sources.map((s) => ({ id: s.id, name: s.name, type: s.type })), ['id', 'name', 'type']);
+        const picked = await prompt('Source id to generate a deploy key for', String(sources[0].id));
+        id = Number(picked);
+        if (!id)
+            return error('A numeric source id is required');
+    }
+    const result = await spinner('Generating ed25519 key pair on the panel server', () => client.sources.generateDeployKey(id));
+    success(`Deploy key generated (fingerprint ${result.fingerprint}).`);
+    console.log();
+    console.log(`  ${c.bold('Public key — paste this into your Git host\'s Deploy keys:')}`);
+    console.log(`    ${c.cyan(result.publicKey)}`);
+    console.log();
+    console.log(`  ${c.gray('GitHub:    repo → Settings → Security → Deploy keys → Add deploy key')}`);
+    console.log(`  ${c.gray('GitLab:    project → Settings → Repository → Deploy keys')}`);
+    console.log(`  ${c.gray('Gitea:     repo → Settings → Deploy keys')}`);
+    console.log();
+    info('The private key is encrypted at rest on the panel and never shown.');
+}
+/** `ninedeploy sources remove [id]` */
+export async function sourcesRemove(client, idArg) {
+    header('Remove Source');
+    let id = Number(idArg);
+    if (!id) {
+        const sources = await spinner('Fetching sources', () => client.sources.list());
+        if (sources.length === 0) {
+            info('No sources to remove.');
+            return;
+        }
+        table(sources.map((s) => ({ id: s.id, name: s.name, type: s.type })), ['id', 'name', 'type']);
+        const picked = await prompt('Source id to remove', String(sources[0].id));
+        id = Number(picked);
+        if (!id)
+            return error('A numeric source id is required');
+    }
+    const confirm = await prompt(`Type "delete" to confirm removal of source #${id}`, '');
+    if (confirm.trim() !== 'delete') {
+        info('Aborted.');
+        return;
+    }
+    try {
+        await spinner('Removing source', () => client.sources.remove(id));
+        success(`Source #${id} removed.`);
+        info('Services deployed from it keep working, but new clones of private repos will fail until it is re-added.');
+    }
+    catch (err) {
+        /* v8 ignore next -- exercised by the "API error" test which routes the error through error() */
+        error(err instanceof Error ? err.message : String(err));
+    }
+}
+/** `ninedeploy sources show <id>` */
+export async function sourcesShow(client, idArg) {
+    const id = Number(idArg);
+    if (!id)
+        return error('Usage: ninedeploy sources show <id>');
+    header(`Source #${id}`);
+    const sources = await spinner('Fetching', () => client.sources.list());
+    const s = sources.find((x) => x.id === id);
+    if (!s)
+        return error(`Source #${id} not found`);
+    kv('Name', s.name);
+    kv('Type', s.type);
+    kv('Token', s.hasToken ? c.green('✓ set') : c.gray('—'));
+    kv('Deploy key', s.hasDeployKey ? c.green('✓ set') : c.gray('—'));
+    kv('Registry user', s.registryUsername ?? '—');
+    kv('Default branch', s.defaultBranch ?? 'main');
+    kv('Created', s.createdAt);
+    kv('Updated', s.updatedAt);
+}
+//# sourceMappingURL=sources.js.map

package/dist/commands/sources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sources.js","sourceRoot":"","sources":["../../src/commands/sources.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,cAAc,CAAC;AAEnC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAEvF,MAAM,SAAS,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAU,CAAC;AAG/E,gCAAgC;AAChC,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAwB;IACxD,MAAM,CAAC,SAAS,CAAC,CAAC;IAClB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5E,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,IAAI,CAAC,qFAAqF,CAAC,CAAC;QAC5F,OAAO;IACT,CAAC;IACD,KAAK,CACH,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACf,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QAC9C,SAAS,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QACtD,MAAM,EAAE,CAAC,CAAC,aAAa,IAAI,MAAM;KAClC,CAAC,CAAC,EACH,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,CACvD,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,aAAa,CAAC,OAAe,EAAE,KAAa;IACzD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC;IAC7C,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,oEAAoE;IACpE,OAAO,MAAM,YAAY,CAAC,KAAK,CAAC,CAAC;AACnC,CAAC;AAED,sCAAsC;AACtC,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAwB,EAAE,OAAgB;IACzE,MAAM,CAAC,YAAY,CAAC,CAAC;IACrB,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,MAAM,MAAM,CAAC,qCAAqC,CAAC,CAAC,CAAC;IAC9E;wGACoG;IACpG,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,CAAC,MAAM,MAAM,CAAC,wDAAwD,EAAE,QAAQ,CAAC,CAAa,CAAC;IAC5G,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC,qBAAqB,IAAI,oBAAoB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpF,CAAC;IACD,MAAM,aAAa,GAAG,CAAC,MAAM,MAAM,CAAC,0CAA0C,EAAE,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC;IAEnG,IAAI,KAAyB,CAAC;IAC9B,IAAI,SAA6B,CAAC;IAClC,IAAI,gBAAoC,CAAC;IAEzC,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,gBAAgB,GAAG,CAAC,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC,IAAI,SAAS,CAAC;QAClF,KAAK,GAAG,MAAM,aAAa,CAAC,kBAAkB,EAAE,wCAAwC,CAAC,CAAC;IAC5F,CAAC;SAAM,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QAC5B,KAAK,GAAG,MAAM,aAAa,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,CAAC;IACxE,CAAC;SAAM,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,+CAA+C;QAC/C,MAAM,QAAQ,GAAG,CAAC,MAAM,MAAM,CAAC,yBAAyB,EAAE,OAAO,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;QAChG,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;YACvB,SAAS,GAAG,MAAM,aAAa,CAAC,oBAAoB,EAAE,sDAAsD,CAAC,CAAC;QAChH,CAAC;aAAM,CAAC;YACN,KAAK,GAAG,MAAM,aAAa,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;SAAM,CAAC;QACN,6CAA6C;QAC7C,MAAM,QAAQ,GAAG,CAAC,MAAM,MAAM,CAAC,yBAAyB,EAAE,OAAO,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;QAChG,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;YACvB,SAAS,GAAG,MAAM,aAAa,CAAC,oBAAoB,EAAE,sDAAsD,CAAC,CAAC;QAChH,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,yBAAyB,CAAC;YAC1F,KAAK,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,GAAG,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,8BAA8B,CAAC,CAAC;QACjH,CAAC;IACH,CAAC;IAED,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,iDAAiD,CAAC,CAAC;IAClE,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,iBAAiB,EAAE,GAAG,EAAE,CACpD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;YACpB,IAAI;YACJ,IAAI;YACJ,KAAK,EAAE,KAAK,IAAI,SAAS;YACzB,SAAS,EAAE,SAAS,IAAI,SAAS;YACjC,gBAAgB;YAChB,aAAa;SACd,CAAC,CACH,CAAC;QACF,OAAO,CAAC,WAAW,OAAO,CAAC,IAAI,kBAAkB,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;QAChE,yEAAyE;QACzE,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,QAAQ,CAAC,IAAI,KAAK,EAAE,CAAC;YACtD,MAAM,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,gGAAgG;QAChG,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAwB,EAAE,KAAc;IACxE,MAAM,CAAC,yBAAyB,CAAC,CAAC;IAClC,IAAI,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC,wDAAwD,CAAC,CAAC;YAC/D,OAAO;QACT,CAAC;QACD,KAAK,CACH,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAC9D,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CACvB,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACzE,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QACpB,IAAI,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACrF,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,MAAM,CAAC,QAAQ,2BAA2B,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAClH,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,KAAK,MAAM,CAAC,QAAQ,IAAI,QAAQ,yBAAyB,MAAM,CAAC,MAAM,IAAI,KAAK,MAAM,MAAM,CAAC,KAAK,IAAI,eAAe,EAAE,CAAC,CAAC;IAChI,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAwB,EAAE,KAAc;IAC1E,MAAM,CAAC,qBAAqB,CAAC,CAAC;IAC9B,IAAI,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC,8DAA8D,CAAC,CAAC;YACrE,OAAO;QACT,CAAC;QACD,KAAK,CACH,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAC9D,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CACvB,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,wCAAwC,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9F,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QACpB,IAAI,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,iDAAiD,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5H,OAAO,CAAC,qCAAqC,MAAM,CAAC,WAAW,IAAI,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,4DAA4D,CAAC,EAAE,CAAC,CAAC;IACzF,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAC/C,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,sEAAsE,CAAC,EAAE,CAAC,CAAC;IACnG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,0DAA0D,CAAC,EAAE,CAAC,CAAC;IACvF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,0CAA0C,CAAC,EAAE,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,IAAI,CAAC,oEAAoE,CAAC,CAAC;AAC7E,CAAC;AAED,uCAAuC;AACvC,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAwB,EAAE,KAAc;IAC1E,MAAM,CAAC,eAAe,CAAC,CAAC;IACxB,IAAI,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC,uBAAuB,CAAC,CAAC;YAC9B,OAAO;QACT,CAAC;QACD,KAAK,CACH,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAC9D,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CACvB,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,qBAAqB,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3E,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QACpB,IAAI,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,+CAA+C,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACtF,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;QAChC,IAAI,CAAC,UAAU,CAAC,CAAC;QACjB,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAClE,OAAO,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QAClC,IAAI,CAAC,yGAAyG,CAAC,CAAC;IAClH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,gGAAgG;QAChG,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,qCAAqC;AACrC,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAwB,EAAE,KAAa;IACvE,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACzB,IAAI,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC7D,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACxB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACvE,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IAChD,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IACnB,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IACnB,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACzD,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAClE,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC,gBAAgB,IAAI,GAAG,CAAC,CAAC;IAC/C,EAAE,CAAC,gBAAgB,EAAE,CAAC,CAAC,aAAa,IAAI,MAAM,CAAC,CAAC;IAChD,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC;IAC3B,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC;AAC7B,CAAC"}

package/dist/commands/webhooks.d.ts

@@ -0,0 +1,16 @@
+import type { NineDeployClient } from '../client.js';
+/** `ninedeploy webhooks list <serviceId>` */
+export declare function webhooksList(client: NineDeployClient, svcArg: string): Promise<void>;
+/**
+ * `ninedeploy webhooks add <serviceId> [branch]`
+ *
+ * Returns the secret ONCE so the operator can paste it into GitHub as the
+ * webhook "Secret" value. The CLI never stores it; the panel only ever sees
+ * the HMAC digest.
+ */
+export declare function webhooksAdd(client: NineDeployClient, svcArg: string, branchArg?: string): Promise<void>;
+/** `ninedeploy webhooks remove <serviceId> <hookId>` */
+export declare function webhooksRemove(client: NineDeployClient, svcArg: string, hookArg: string): Promise<void>;
+/** `ninedeploy webhooks show <serviceId> <hookId>` */
+export declare function webhooksShow(client: NineDeployClient, svcArg: string, hookArg: string): Promise<void>;
+//# sourceMappingURL=webhooks.d.ts.map

package/dist/commands/webhooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.d.ts","sourceRoot":"","sources":["../../src/commands/webhooks.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAIrD,6CAA6C;AAC7C,wBAAsB,YAAY,CAAC,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAmB1F;AAED;;;;;;GAMG;AACH,wBAAsB,WAAW,CAAC,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA2B7G;AAED,wDAAwD;AACxD,wBAAsB,cAAc,CAAC,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAW7G;AAED,sDAAsD;AACtD,wBAAsB,YAAY,CAAC,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAiB3G"}

package/dist/commands/webhooks.js

@@ -0,0 +1,91 @@
+import process from 'node:process';
+import { prompt } from '../prompts.js';
+import { c, error, header, info, kv, spinner, success, table } from '../lib/format.js';
+/** `ninedeploy webhooks list <serviceId>` */
+export async function webhooksList(client, svcArg) {
+    const serviceId = Number(svcArg);
+    if (!serviceId)
+        return error('Usage: ninedeploy webhooks list <serviceId>');
+    header(`Webhooks for service #${serviceId}`);
+    const rows = await spinner('Fetching', () => client.webhooks.list(serviceId));
+    if (rows.length === 0) {
+        info('No webhooks yet. Add one with `ninedeploy webhooks add`.');
+        return;
+    }
+    table(rows.map((w) => ({
+        id: w.id,
+        branch: w.branch,
+        source: w.sourceId ?? c.gray('—'),
+        active: w.active ? c.green('✓') : c.red('✗'),
+        url: w.url,
+    })), ['id', 'branch', 'source', 'active', 'url']);
+}
+/**
+ * `ninedeploy webhooks add <serviceId> [branch]`
+ *
+ * Returns the secret ONCE so the operator can paste it into GitHub as the
+ * webhook "Secret" value. The CLI never stores it; the panel only ever sees
+ * the HMAC digest.
+ */
+export async function webhooksAdd(client, svcArg, branchArg) {
+    const serviceId = Number(svcArg);
+    if (!serviceId)
+        return error('Usage: ninedeploy webhooks add <serviceId> [branch]');
+    const branch = branchArg ?? (await prompt('Branch to deploy on push', 'main'));
+    if (!branch)
+        return error('Branch is required');
+    const watchPaths = (await prompt('Watch paths (newline/comma-separated globs; empty = all files)', '')) || undefined;
+    const created = await spinner('Creating webhook', () => client.webhooks.create(serviceId, { branch, watchPaths }));
+    success(`Webhook #${created.id} created for branch "${created.branch}"`);
+    console.log();
+    console.log(`  ${c.bold('URL')}`);
+    console.log(`    ${c.cyan(created.url)}`);
+    console.log();
+    console.log(`  ${c.bold('Secret (shown once — paste into GitHub):')}`);
+    console.log(`    ${c.green(created.secret)}`);
+    console.log();
+    console.log(`  ${c.gray('GitHub steps: Repo → Settings → Webhooks → Add')}`);
+    console.log(`  ${c.gray('  • Payload URL  : the URL above')}`);
+    console.log(`  ${c.gray('  • Content type : application/json')}`);
+    console.log(`  ${c.gray('  • Secret       : the secret above')}`);
+    console.log(`  ${c.gray('  • SSL          : enabled (the panel runs behind HTTPS via Traefik)')}`);
+    console.log(`  ${c.gray('  • Events       : "Just the push event."')}`);
+    console.log();
+    info('Tip: set `NINEDEPLOY_PUBLIC_URL` on the server to a public HTTPS URL so the URL is reachable from GitHub.');
+}
+/** `ninedeploy webhooks remove <serviceId> <hookId>` */
+export async function webhooksRemove(client, svcArg, hookArg) {
+    const serviceId = Number(svcArg);
+    const hookId = Number(hookArg);
+    if (!serviceId || !hookId)
+        return error('Usage: ninedeploy webhooks remove <serviceId> <hookId>');
+    const confirm = await prompt(`Type "delete" to confirm removal of webhook #${hookId}`, '');
+    if (confirm.trim() !== 'delete') {
+        info('Aborted.');
+        return;
+    }
+    await spinner('Removing webhook', () => client.webhooks.remove(serviceId, hookId));
+    success(`Webhook #${hookId} removed.`);
+}
+/** `ninedeploy webhooks show <serviceId> <hookId>` */
+export async function webhooksShow(client, svcArg, hookArg) {
+    const serviceId = Number(svcArg);
+    const hookId = Number(hookArg);
+    if (!serviceId || !hookId)
+        return error('Usage: ninedeploy webhooks show <serviceId> <hookId>');
+    header(`Webhook #${hookId}`);
+    const rows = await spinner('Fetching', () => client.webhooks.list(serviceId));
+    const w = rows.find((x) => x.id === hookId);
+    if (!w)
+        return error(`Webhook #${hookId} not found on service #${serviceId}`);
+    kv('ID', w.id);
+    kv('Branch', w.branch);
+    kv('Source', w.sourceId ?? c.gray('— (inherits service default)'));
+    kv('Active', w.active ? c.green('yes') : c.red('no'));
+    kv('Watch paths', w.watchPaths || c.gray('— (all files)'));
+    kv('URL', w.url);
+    kv('Created', w.createdAt);
+    // Suppress the unused import warning when process is referenced via prompts only
+    void process;
+}
+//# sourceMappingURL=webhooks.js.map

package/dist/commands/webhooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.js","sourceRoot":"","sources":["../../src/commands/webhooks.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,cAAc,CAAC;AAEnC,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACvC,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAEvF,6CAA6C;AAC7C,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAwB,EAAE,MAAc;IACzE,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAC5E,MAAM,CAAC,yBAAyB,SAAS,EAAE,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IAC9E,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,IAAI,CAAC,0DAA0D,CAAC,CAAC;QACjE,OAAO;IACT,CAAC;IACD,KAAK,CACH,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACf,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,MAAM,EAAE,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QACjC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QAC5C,GAAG,EAAE,CAAC,CAAC,GAAG;KACX,CAAC,CAAC,EACH,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,CAC5C,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAwB,EAAE,MAAc,EAAE,SAAkB;IAC5F,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACpF,MAAM,MAAM,GAAG,SAAS,IAAI,CAAC,MAAM,MAAM,CAAC,0BAA0B,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/E,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC,oBAAoB,CAAC,CAAC;IAEhD,MAAM,UAAU,GAAG,CAAC,MAAM,MAAM,CAAC,gEAAgE,EAAE,EAAE,CAAC,CAAC,IAAI,SAAS,CAAC;IAErH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,kBAAkB,EAAE,GAAG,EAAE,CACrD,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAC1D,CAAC;IACF,OAAO,CAAC,YAAY,OAAO,CAAC,EAAE,wBAAwB,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IACzE,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC1C,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,0CAA0C,CAAC,EAAE,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,gDAAgD,CAAC,EAAE,CAAC,CAAC;IAC7E,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,kCAAkC,CAAC,EAAE,CAAC,CAAC;IAC/D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,qCAAqC,CAAC,EAAE,CAAC,CAAC;IAClE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,qCAAqC,CAAC,EAAE,CAAC,CAAC;IAClE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,sEAAsE,CAAC,EAAE,CAAC,CAAC;IACnG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,2CAA2C,CAAC,EAAE,CAAC,CAAC;IACxE,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,IAAI,CAAC,2GAA2G,CAAC,CAAC;AACpH,CAAC;AAED,wDAAwD;AACxD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAwB,EAAE,MAAc,EAAE,OAAe;IAC5F,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/B,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAClG,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,gDAAgD,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3F,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;QAChC,IAAI,CAAC,UAAU,CAAC,CAAC;QACjB,OAAO;IACT,CAAC;IACD,MAAM,OAAO,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACnF,OAAO,CAAC,YAAY,MAAM,WAAW,CAAC,CAAC;AACzC,CAAC;AAED,sDAAsD;AACtD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAwB,EAAE,MAAc,EAAE,OAAe;IAC1F,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/B,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAChG,MAAM,CAAC,YAAY,MAAM,EAAE,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IAC9E,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;IAC5C,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC,YAAY,MAAM,0BAA0B,SAAS,EAAE,CAAC,CAAC;IAC9E,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACf,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IACvB,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC,CAAC;IACnE,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACtD,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC;IAC3D,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;IACjB,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC;IAC3B,iFAAiF;IACjF,KAAK,OAAO,CAAC;AACf,CAAC"}