sandstream-kit 1.4.3 → 1.6.0

package/dist/toml-generator.js

@@ -1,81 +1,5 @@
-const SERVICE_TEMPLATES = {
-    stripe: {
-        login: "stripe login",
-        check: "stripe config --list",
-        secrets: ["STRIPE_SECRET_KEY", "STRIPE_PUBLISHABLE_KEY", "STRIPE_WEBHOOK_SECRET"],
-        tool: "stripe",
-    },
-    supabase: {
-        login: "supabase login",
-        check: "supabase projects list",
-        secrets: ["NEXT_PUBLIC_SUPABASE_URL", "NEXT_PUBLIC_SUPABASE_ANON_KEY", "SUPABASE_SERVICE_ROLE_KEY"],
-        tool: "supabase",
-    },
-    vercel: {
-        login: "vercel login",
-        check: "vercel whoami",
-        secrets: [],
-        tool: "vercel",
-    },
-    expo: {
-        login: "eas login",
-        check: "eas whoami",
-        secrets: ["EXPO_TOKEN"],
-        tool: "eas-cli",
-    },
-    resend: {
-        login: "# resend — no CLI login; set RESEND_API_KEY in env",
-        check: "# resend — check RESEND_API_KEY is set",
-        secrets: ["RESEND_API_KEY", "RESEND_FROM_EMAIL"],
-    },
-    clerk: {
-        login: "# clerk — no CLI login; get keys from https://dashboard.clerk.com",
-        check: "# clerk — check CLERK_SECRET_KEY is set",
-        secrets: ["CLERK_SECRET_KEY", "NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY"],
-    },
-    liveblocks: {
-        login: "# liveblocks — no CLI login; get keys from https://liveblocks.io/dashboard",
-        check: "# liveblocks — check LIVEBLOCKS_SECRET_KEY is set",
-        secrets: ["LIVEBLOCKS_SECRET_KEY", "NEXT_PUBLIC_LIVEBLOCKS_PUBLIC_KEY"],
-    },
-    trigger: {
-        login: "# trigger — no CLI login; get key from https://cloud.trigger.dev",
-        check: "# trigger — check TRIGGER_SECRET_KEY is set",
-        secrets: ["TRIGGER_SECRET_KEY"],
-    },
-    inngest: {
-        login: "# inngest — no CLI login; get keys from https://app.inngest.com",
-        check: "# inngest — check INNGEST_EVENT_KEY is set",
-        secrets: ["INNGEST_EVENT_KEY", "INNGEST_SIGNING_KEY"],
-    },
-    sentry: {
-        login: "# sentry — no CLI login; get DSN from https://sentry.io",
-        check: "# sentry — check SENTRY_DSN is set",
-        secrets: ["SENTRY_DSN", "SENTRY_ORG", "SENTRY_PROJECT", "SENTRY_AUTH_TOKEN"],
-    },
-    netlify: {
-        login: "netlify login",
-        check: "netlify status",
-        secrets: ["NETLIFY_AUTH_TOKEN", "NETLIFY_SITE_ID"],
-        tool: "netlify",
-    },
-    "cloudflare-pages": {
-        login: "wrangler login",
-        check: "wrangler whoami",
-        secrets: ["CLOUDFLARE_API_TOKEN", "CLOUDFLARE_ACCOUNT_ID"],
-        tool: "wrangler",
-    },
-    typeorm: {
-        login: "# typeorm — no CLI login; configure DATABASE_URL",
-        check: "# typeorm — check DATABASE_URL is set",
-        secrets: ["DATABASE_URL"],
-    },
-    mongoose: {
-        login: "# mongoose — no CLI login; configure MONGODB_URI",
-        check: "# mongoose — check MONGODB_URI is set",
-        secrets: ["MONGODB_URI"],
-    },
-};
+import { VAULT_META } from "./vault-meta.js";
+import { SERVICE_BY_ID } from "./service-registry.js";
 const FRAMEWORK_SETUP = {
     nextjs: { install: "pnpm install", dev: "pnpm dev", verify: "pnpm build" },
     remix: { install: "pnpm install", dev: "pnpm dev", verify: "pnpm build" },
@@ -92,6 +16,11 @@ const FRAMEWORK_SETUP = {
     fiber: { install: "go mod download", dev: "go run .", verify: "go build ./..." },
     laravel: { install: "composer install", migrate: "php artisan migrate", verify: "php artisan test" },
     symfony: { install: "composer install", verify: "php bin/console lint:all" },
+    // native mobile
+    "react-native": { install: "pnpm install", dev: "pnpm start", verify: "pnpm tsc --noEmit" },
+    flutter: { install: "flutter pub get", dev: "flutter run", verify: "flutter analyze" },
+    ios: { install: "pod install", verify: "swift build" },
+    android: { install: "./gradlew dependencies", verify: "./gradlew build" },
 };
 /**
  * Security scanners kit installs by default, keyed by mise tool ref → version.
@@ -103,6 +32,10 @@ const FRAMEWORK_SETUP = {
 export const DEFAULT_SECURITY_SCANNERS = {
     semgrep: "latest",
     "npm:@socketsecurity/cli": "latest",
+    // trufflehog (single Go binary via aqua) → deep secret scan on by default;
+    // `kit check` resolves the `trufflehog` bin mise-first and uses it instead of
+    // the basic regex fallback.
+    "aqua:trufflesecurity/trufflehog": "latest",
 };
 function lines(...parts) {
     return parts.filter(Boolean).join("\n");
@@ -120,24 +53,46 @@ function toolsSection(tools) {
         .join("\n");
     return `[tools]\n${entries}\n`;
 }
-function servicesSection(services, allTools) {
+function servicesSection(services) {
     const sections = [];
     for (const svc of services) {
-        const tmpl = SERVICE_TEMPLATES[svc];
-        if (!tmpl)
+        const def = SERVICE_BY_ID[svc];
+        // Only services with a login/check get a [services.X] block. ORM-only
+        // entries (prisma/drizzle) declare just deps+migrate, so they're skipped here.
+        if (!def?.login || !def.check)
             continue;
-        // Add tool to tools if needed (handled outside)
-        sections.push(`[services.${svc}]\nlogin = "${tmpl.login}"\ncheck = "${tmpl.check}"`);
+        // Tools are merged into [tools] by generateToml; here we only emit login/check.
+        sections.push(`[services.${svc}]\nlogin = "${def.login}"\ncheck = "${def.check}"`);
     }
     return sections.join("\n\n");
 }
-function secretsSection(services, store = "1password") {
+/** Extract env keys from a `.env.example`/`.env.template` file body —
+ *  `^KEY=` lines (KEY = upper/underscore/digit). Comments + blanks ignored. */
+export function parseEnvTemplateKeys(content) {
+    const keys = [];
+    for (const line of content.split("\n")) {
+        const m = line.match(/^\s*(?:export\s+)?([A-Z][A-Z0-9_]*)\s*=/);
+        if (m)
+            keys.push(m[1]);
+    }
+    return keys;
+}
+function secretsSection(services, store = "1password", extraKeys = []) {
     const allKeys = [];
+    const seen = new Set();
+    const add = (k) => {
+        if (!seen.has(k)) {
+            seen.add(k);
+            allKeys.push(k);
+        }
+    };
     for (const svc of services) {
-        const tmpl = SERVICE_TEMPLATES[svc];
-        if (tmpl?.secrets.length)
-            allKeys.push(...tmpl.secrets);
+        const def = SERVICE_BY_ID[svc];
+        def?.secrets?.forEach(add);
     }
+    // Keys from an existing .env.example the project already documents (deduped
+    // against service-template keys) — so a project's real secret contract is kept.
+    extraKeys.forEach(add);
     if (allKeys.length === 0)
         return "";
     const keyLines = allKeys.map((k) => {
@@ -172,7 +127,16 @@ function secretsSection(services, store = "1password") {
         }
         return `${k} = { ${src} }`;
     });
-    return lines(`[secrets]`, `store = "${store}"`, `template = ".env.template"`, ``, `[secrets.keys]`, keyLines.join("\n"));
+    // For Infisical, scaffold the project binding. `environment` is the one piece
+    // we can know before login; `project_id` needs a logged-in session, so it's
+    // left commented with a pointer to `infisical init` (writes .infisical.json).
+    // Without this block the backend silently defaults to env="dev" with no
+    // project, which is rarely what the user means.
+    const bindingBlock = store === "infisical"
+        ? `\n[secrets.infisical]\nenvironment = "dev"\n` +
+            `# project_id = "..."   # run \`infisical login && infisical init\` to bind this repo`
+        : "";
+    return lines(`[secrets]`, `store = "${store}"`, `template = ".env.template"`, ``, `[secrets.keys]`, keyLines.join("\n"), bindingBlock || undefined);
 }
 function setupSection(stack) {
     const frameworkSetup = stack.framework ? FRAMEWORK_SETUP[stack.framework] : null;
@@ -192,19 +156,25 @@ function setupSection(stack) {
         installCmd = "cargo fetch";
     else if (stack.language === "php")
         installCmd = "composer install";
+    else if (stack.language === "dart")
+        installCmd = frameworkSetup?.install ?? "dart pub get";
+    else if (stack.language === "swift")
+        installCmd = frameworkSetup?.install ?? "swift build";
+    else if (stack.language === "kotlin")
+        installCmd = frameworkSetup?.install ?? "./gradlew build";
     else
         installCmd = frameworkSetup?.install ?? "npm install";
-    const hasSupabase = stack.services.includes("supabase");
-    const hasPrisma = stack.services.includes("prisma");
-    const hasDrizzle = stack.services.includes("drizzle");
+    // First detected service that declares a migrate command wins. Registry order
+    // puts supabase before prisma before drizzle, preserving the old precedence.
     let migrateCmd = null;
-    if (hasSupabase)
-        migrateCmd = "supabase db push";
-    else if (hasPrisma)
-        migrateCmd = "npx prisma migrate deploy";
-    else if (hasDrizzle)
-        migrateCmd = "npx drizzle-kit migrate";
-    else if (frameworkSetup?.migrate)
+    for (const svc of stack.services) {
+        const m = SERVICE_BY_ID[svc]?.migrate;
+        if (m) {
+            migrateCmd = m;
+            break;
+        }
+    }
+    if (!migrateCmd && frameworkSetup?.migrate)
         migrateCmd = frameworkSetup.migrate;
     const verifyCmd = frameworkSetup?.verify ?? null;
     const parts = [`[setup]`, `install = "${installCmd}"`];
@@ -221,25 +191,50 @@ export function generateToml(stack, options = {}) {
     // Merge service tools into tools map
     const tools = { ...stack.tools };
     for (const svc of stack.services) {
-        const tmpl = SERVICE_TEMPLATES[svc];
-        if (tmpl?.tool && !tools[tmpl.tool]) {
-            tools[tmpl.tool] = "latest";
+        const def = SERVICE_BY_ID[svc];
+        if (def?.tool && !tools[def.tool]) {
+            tools[def.tool] = "latest";
         }
     }
-    // Default security scanners — mise-provisioned and on by default, so
+    // Universal security scanners — mise-provisioned and on by default, so
     // `kit check` runs them out of the box (kit orchestrates scanners; it
     // shouldn't just warn they're missing). semgrep = SAST (your code);
-    // socket = supply-chain (your deps). Remove from [tools] to opt out.
+    // socket = deps; trufflehog = secrets. Remove from [tools] to opt out.
     for (const [tool, ref] of Object.entries(DEFAULT_SECURITY_SCANNERS)) {
         if (!tools[tool])
             tools[tool] = ref;
     }
+    // Conditional scanners — only where they apply, to avoid noise/redundancy:
+    //  - trivy: container/IaC, only when a Dockerfile is present (caller-detected).
+    //  - pip-audit: Python dep CVEs.
+    //  - osv-scanner: dep CVEs for ecosystems kit has no dedicated scanner for
+    //    (go/rust/php/…). Skipped for node (npm audit) and python (pip-audit) to
+    //    avoid duplicating their coverage.
+    if (options.hasDockerfile && !tools["aqua:aquasecurity/trivy"]) {
+        tools["aqua:aquasecurity/trivy"] = "latest";
+    }
+    if (stack.language === "python" && !tools["pipx:pip-audit"]) {
+        tools["pipx:pip-audit"] = "latest";
+    }
+    const hasEcosystemScanner = ["typescript", "javascript", "python"].includes(stack.language);
+    if (!hasEcosystemScanner && !tools["aqua:google/osv-scanner"]) {
+        tools["aqua:google/osv-scanner"] = "latest";
+    }
+    // Provision the chosen vault's CLI so `kit setup` installs it like any other
+    // tool. Choosing a vault used to record `store = "..."` and nothing else,
+    // leaving the CLI absent and `kit secrets` failing key-by-key — fix that by
+    // wiring the CLI in here. Cloud secret managers (no `miseTool`) ship their CLI
+    // through the cloud env, so they're guided at login but not provisioned.
+    const vaultTool = options.secretsStore && VAULT_META[options.secretsStore]?.miseTool;
+    if (vaultTool && !tools[vaultTool]) {
+        tools[vaultTool] = "latest";
+    }
     const header = lines(`# .kit.toml — generated by kit init`, stack.framework
         ? `# Detected: ${stack.language} / ${stack.framework}${stack.services.length ? ` + ${stack.services.join(", ")}` : ""}`
         : `# Detected: ${stack.language}${stack.services.length ? ` + ${stack.services.join(", ")}` : ""}`, `# Includes default security scanners (semgrep, socket) installed via mise.`, ``);
     const toolsSec = toolsSection(tools);
-    const servicesSec = servicesSection(stack.services, tools);
-    const secretsSec = secretsSection(stack.services, options.secretsStore ?? "1password");
+    const servicesSec = servicesSection(stack.services);
+    const secretsSec = secretsSection(stack.services, options.secretsStore ?? "1password", options.extraSecretKeys ?? []);
     const setupSec = setupSection(stack);
     const parts = [header, toolsSec, servicesSec, secretsSec, setupSec].filter((s) => s.trim().length > 0);
     return parts.join("\n") + "\n";

package/dist/toml-generator.js.map

@@ -1 +1 @@
-{"version":3,"file":"toml-generator.js","sourceRoot":"","sources":["../src/toml-generator.ts"],"names":[],"mappings":"AAYA,MAAM,iBAAiB,GAAoC;IACzD,MAAM,EAAE;QACN,KAAK,EAAE,cAAc;QACrB,KAAK,EAAE,sBAAsB;QAC7B,OAAO,EAAE,CAAC,mBAAmB,EAAE,wBAAwB,EAAE,uBAAuB,CAAC;QACjF,IAAI,EAAE,QAAQ;KACf;IACD,QAAQ,EAAE;QACR,KAAK,EAAE,gBAAgB;QACvB,KAAK,EAAE,wBAAwB;QAC/B,OAAO,EAAE,CAAC,0BAA0B,EAAE,+BAA+B,EAAE,2BAA2B,CAAC;QACnG,IAAI,EAAE,UAAU;KACjB;IACD,MAAM,EAAE;QACN,KAAK,EAAE,cAAc;QACrB,KAAK,EAAE,eAAe;QACtB,OAAO,EAAE,EAAE;QACX,IAAI,EAAE,QAAQ;KACf;IACD,IAAI,EAAE;QACJ,KAAK,EAAE,WAAW;QAClB,KAAK,EAAE,YAAY;QACnB,OAAO,EAAE,CAAC,YAAY,CAAC;QACvB,IAAI,EAAE,SAAS;KAChB;IACD,MAAM,EAAE;QACN,KAAK,EAAE,oDAAoD;QAC3D,KAAK,EAAE,wCAAwC;QAC/C,OAAO,EAAE,CAAC,gBAAgB,EAAE,mBAAmB,CAAC;KACjD;IACD,KAAK,EAAE;QACL,KAAK,EAAE,mEAAmE;QAC1E,KAAK,EAAE,yCAAyC;QAChD,OAAO,EAAE,CAAC,kBAAkB,EAAE,mCAAmC,CAAC;KACnE;IACD,UAAU,EAAE;QACV,KAAK,EAAE,4EAA4E;QACnF,KAAK,EAAE,mDAAmD;QAC1D,OAAO,EAAE,CAAC,uBAAuB,EAAE,mCAAmC,CAAC;KACxE;IACD,OAAO,EAAE;QACP,KAAK,EAAE,kEAAkE;QACzE,KAAK,EAAE,6CAA6C;QACpD,OAAO,EAAE,CAAC,oBAAoB,CAAC;KAChC;IACD,OAAO,EAAE;QACP,KAAK,EAAE,iEAAiE;QACxE,KAAK,EAAE,4CAA4C;QACnD,OAAO,EAAE,CAAC,mBAAmB,EAAE,qBAAqB,CAAC;KACtD;IACD,MAAM,EAAE;QACN,KAAK,EAAE,yDAAyD;QAChE,KAAK,EAAE,oCAAoC;QAC3C,OAAO,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,mBAAmB,CAAC;KAC7E;IACD,OAAO,EAAE;QACP,KAAK,EAAE,eAAe;QACtB,KAAK,EAAE,gBAAgB;QACvB,OAAO,EAAE,CAAC,oBAAoB,EAAE,iBAAiB,CAAC;QAClD,IAAI,EAAE,SAAS;KAChB;IACD,kBAAkB,EAAE;QAClB,KAAK,EAAE,gBAAgB;QACvB,KAAK,EAAE,iBAAiB;QACxB,OAAO,EAAE,CAAC,sBAAsB,EAAE,uBAAuB,CAAC;QAC1D,IAAI,EAAE,UAAU;KACjB;IACD,OAAO,EAAE;QACP,KAAK,EAAE,kDAAkD;QACzD,KAAK,EAAE,uCAAuC;QAC9C,OAAO,EAAE,CAAC,cAAc,CAAC;KAC1B;IACD,QAAQ,EAAE;QACR,KAAK,EAAE,kDAAkD;QACzD,KAAK,EAAE,uCAAuC;QAC9C,OAAO,EAAE,CAAC,aAAa,CAAC;KACzB;CACF,CAAC;AAEF,MAAM,eAAe,GAGjB;IACF,MAAM,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE;IAC1E,KAAK,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE;IACzE,KAAK,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE;IACzE,SAAS,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE;IAC7E,MAAM,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,gBAAgB,EAAE,MAAM,EAAE,YAAY,EAAE;IAChF,OAAO,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE;IAC3E,KAAK,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE;IACzE,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,kCAAkC,EAAE,MAAM,EAAE,eAAe,EAAE;IACjG,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,iCAAiC,EAAE,MAAM,EAAE,+BAA+B,EAAE;IACnH,KAAK,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,kBAAkB,EAAE,MAAM,EAAE,eAAe,EAAE;IAC/E,GAAG,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,gBAAgB,EAAE;IAC9E,IAAI,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,gBAAgB,EAAE;IAC/E,KAAK,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,gBAAgB,EAAE;IAChF,OAAO,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAE,qBAAqB,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACpG,OAAO,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,0BAA0B,EAAE;CAC7E,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAA2B;IAC/D,OAAO,EAAE,QAAQ;IACjB,yBAAyB,EAAE,QAAQ;CACpC,CAAC;AAEF,SAAS,KAAK,CAAC,GAAG,KAAoC;IACpD,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED;sDACsD;AACtD,SAAS,OAAO,CAAC,CAAS;IACxB,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;AACnD,CAAC;AAED,SAAS,YAAY,CAAC,KAA6B;IACjD,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC/C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;SAClC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;SACzC,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,OAAO,YAAY,OAAO,IAAI,CAAC;AACjC,CAAC;AAED,SAAS,eAAe,CAAC,QAAkB,EAAE,QAAgC;IAC3E,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,gDAAgD;QAChD,QAAQ,CAAC,IAAI,CACX,aAAa,GAAG,eAAe,IAAI,CAAC,KAAK,eAAe,IAAI,CAAC,KAAK,GAAG,CACtE,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAaD,SAAS,cAAc,CAAC,QAAkB,EAAE,QAAsB,WAAW;IAC3E,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,IAAI,EAAE,OAAO,CAAC,MAAM;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACjC,IAAI,GAAW,CAAC;QAChB,QAAQ,KAAK,EAAE,CAAC;YACd,KAAK,WAAW;gBACd,GAAG,GAAG,iDAAiD,CAAC,GAAG,CAAC;gBAC5D,MAAM;YACR,KAAK,WAAW;gBACd,GAAG,GAAG,iCAAiC,CAAC,GAAG,CAAC;gBAC5C,MAAM;YACR,KAAK,WAAW;gBACd,GAAG,GAAG,iCAAiC,CAAC,GAAG,CAAC;gBAC5C,MAAM;YACR,KAAK,SAAS;gBACZ,GAAG,GAAG,+BAA+B,CAAC,GAAG,CAAC;gBAC1C,MAAM;YACR,KAAK,OAAO;gBACV,GAAG,GAAG,sEAAsE,CAAC,GAAG,CAAC;gBACjF,MAAM;YACR,KAAK,QAAQ;gBACX,GAAG,GAAG,8BAA8B,CAAC,GAAG,CAAC;gBACzC,MAAM;YACR,KAAK,QAAQ;gBACX,GAAG,GAAG,8BAA8B,CAAC,GAAG,CAAC;gBACzC,MAAM;YACR,KAAK,UAAU;gBACb,GAAG,GAAG,gCAAgC,CAAC,GAAG,CAAC;gBAC3C,MAAM;YACR;gBACE,GAAG,GAAG,gBAAgB,CAAC;QAC3B,CAAC;QACD,OAAO,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,OAAO,KAAK,CACV,WAAW,EACX,YAAY,KAAK,GAAG,EACpB,4BAA4B,EAC5B,EAAE,EACF,gBAAgB,EAChB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CACpB,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAoB;IACxC,MAAM,cAAc,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEjF,oCAAoC;IACpC,IAAI,UAAkB,CAAC;IACvB,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI;QAAE,UAAU,GAAG,cAAc,CAAC;SAC7C,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI;QAAE,UAAU,GAAG,cAAc,CAAC;SAClD,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG;QAAE,UAAU,GAAG,aAAa,CAAC;SAChD,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE;QAAE,UAAU,GAAG,SAAS,CAAC;SAC3C,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI;QAAE,UAAU,GAAG,iBAAiB,CAAC;SAC5D,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM;QAAE,UAAU,GAAG,aAAa,CAAC;SAC1D,IAAI,KAAK,CAAC,QAAQ,KAAK,KAAK;QAAE,UAAU,GAAG,kBAAkB,CAAC;;QAC9D,UAAU,GAAG,cAAc,EAAE,OAAO,IAAI,aAAa,CAAC;IAE3D,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAEtD,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,IAAI,WAAW;QAAE,UAAU,GAAG,kBAAkB,CAAC;SAC5C,IAAI,SAAS;QAAE,UAAU,GAAG,2BAA2B,CAAC;SACxD,IAAI,UAAU;QAAE,UAAU,GAAG,yBAAyB,CAAC;SACvD,IAAI,cAAc,EAAE,OAAO;QAAE,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC;IAEtE,MAAM,SAAS,GAAG,cAAc,EAAE,MAAM,IAAI,IAAI,CAAC;IAEjD,MAAM,KAAK,GAAa,CAAC,SAAS,EAAE,cAAc,UAAU,GAAG,CAAC,CAAC;IACjE,IAAI,UAAU;QAAE,KAAK,CAAC,IAAI,CAAC,cAAc,UAAU,GAAG,CAAC,CAAC;IACxD,IAAI,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,aAAa,SAAS,GAAG,CAAC,CAAC;IAErD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAC1B,KAAoB,EACpB,UAA2C,EAAE;IAE7C,qCAAqC;IACrC,MAAM,KAAK,GAAG,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;IACjC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,IAAI,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,qEAAqE;IACrE,sEAAsE;IACtE,oEAAoE;IACpE,qEAAqE;IACrE,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,yBAAyB,CAAC,EAAE,CAAC;QACpE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC;IACtC,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAClB,qCAAqC,EACrC,KAAK,CAAC,SAAS;QACb,CAAC,CAAC,eAAe,KAAK,CAAC,QAAQ,MAAM,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;QACvH,CAAC,CAAC,eAAe,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EACpG,4EAA4E,EAC5E,EAAE,CACH,CAAC;IAEF,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACrC,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC3D,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,YAAY,IAAI,WAAW,CAAC,CAAC;IACvF,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAErC,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,MAAM,CACxE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAC3B,CAAC;IAEF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACjC,CAAC"}
+{"version":3,"file":"toml-generator.js","sourceRoot":"","sources":["../src/toml-generator.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtD,MAAM,eAAe,GAGjB;IACF,MAAM,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE;IAC1E,KAAK,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE;IACzE,KAAK,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE;IACzE,SAAS,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE;IAC7E,MAAM,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,gBAAgB,EAAE,MAAM,EAAE,YAAY,EAAE;IAChF,OAAO,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE;IAC3E,KAAK,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE;IACzE,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,kCAAkC,EAAE,MAAM,EAAE,eAAe,EAAE;IACjG,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,iCAAiC,EAAE,MAAM,EAAE,+BAA+B,EAAE;IACnH,KAAK,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,kBAAkB,EAAE,MAAM,EAAE,eAAe,EAAE;IAC/E,GAAG,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,gBAAgB,EAAE;IAC9E,IAAI,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,gBAAgB,EAAE;IAC/E,KAAK,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,gBAAgB,EAAE;IAChF,OAAO,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAE,qBAAqB,EAAE,MAAM,EAAE,kBAAkB,EAAE;IACpG,OAAO,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,0BAA0B,EAAE;IAC5E,gBAAgB;IAChB,cAAc,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,mBAAmB,EAAE;IAC3F,OAAO,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,EAAE,iBAAiB,EAAE;IACtF,GAAG,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE;IACtD,OAAO,EAAE,EAAE,OAAO,EAAE,wBAAwB,EAAE,MAAM,EAAE,iBAAiB,EAAE;CAC1E,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAA2B;IAC/D,OAAO,EAAE,QAAQ;IACjB,yBAAyB,EAAE,QAAQ;IACnC,2EAA2E;IAC3E,8EAA8E;IAC9E,4BAA4B;IAC5B,iCAAiC,EAAE,QAAQ;CAC5C,CAAC;AAEF,SAAS,KAAK,CAAC,GAAG,KAAoC;IACpD,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED;sDACsD;AACtD,SAAS,OAAO,CAAC,CAAS;IACxB,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;AACnD,CAAC;AAED,SAAS,YAAY,CAAC,KAA6B;IACjD,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC/C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;SAClC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;SACzC,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,OAAO,YAAY,OAAO,IAAI,CAAC;AACjC,CAAC;AAED,SAAS,eAAe,CAAC,QAAkB;IACzC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QAC/B,sEAAsE;QACtE,+EAA+E;QAC/E,IAAI,CAAC,GAAG,EAAE,KAAK,IAAI,CAAC,GAAG,CAAC,KAAK;YAAE,SAAS;QACxC,gFAAgF;QAChF,QAAQ,CAAC,IAAI,CACX,aAAa,GAAG,eAAe,GAAG,CAAC,KAAK,eAAe,GAAG,CAAC,KAAK,GAAG,CACpE,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAaD;+EAC+E;AAC/E,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAChE,IAAI,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,QAAkB,EAAE,QAAsB,WAAW,EAAE,YAAsB,EAAE;IACrG,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAG,CAAC,CAAS,EAAQ,EAAE;QAC9B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACjB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QAC/B,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IACD,4EAA4E;IAC5E,gFAAgF;IAChF,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACvB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACjC,IAAI,GAAW,CAAC;QAChB,QAAQ,KAAK,EAAE,CAAC;YACd,KAAK,WAAW;gBACd,GAAG,GAAG,iDAAiD,CAAC,GAAG,CAAC;gBAC5D,MAAM;YACR,KAAK,WAAW;gBACd,GAAG,GAAG,iCAAiC,CAAC,GAAG,CAAC;gBAC5C,MAAM;YACR,KAAK,WAAW;gBACd,GAAG,GAAG,iCAAiC,CAAC,GAAG,CAAC;gBAC5C,MAAM;YACR,KAAK,SAAS;gBACZ,GAAG,GAAG,+BAA+B,CAAC,GAAG,CAAC;gBAC1C,MAAM;YACR,KAAK,OAAO;gBACV,GAAG,GAAG,sEAAsE,CAAC,GAAG,CAAC;gBACjF,MAAM;YACR,KAAK,QAAQ;gBACX,GAAG,GAAG,8BAA8B,CAAC,GAAG,CAAC;gBACzC,MAAM;YACR,KAAK,QAAQ;gBACX,GAAG,GAAG,8BAA8B,CAAC,GAAG,CAAC;gBACzC,MAAM;YACR,KAAK,UAAU;gBACb,GAAG,GAAG,gCAAgC,CAAC,GAAG,CAAC;gBAC3C,MAAM;YACR;gBACE,GAAG,GAAG,gBAAgB,CAAC;QAC3B,CAAC;QACD,OAAO,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,8EAA8E;IAC9E,4EAA4E;IAC5E,8EAA8E;IAC9E,wEAAwE;IACxE,gDAAgD;IAChD,MAAM,YAAY,GAChB,KAAK,KAAK,WAAW;QACnB,CAAC,CAAC,8CAA8C;YAC9C,sFAAsF;QACxF,CAAC,CAAC,EAAE,CAAC;IAET,OAAO,KAAK,CACV,WAAW,EACX,YAAY,KAAK,GAAG,EACpB,4BAA4B,EAC5B,EAAE,EACF,gBAAgB,EAChB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EACnB,YAAY,IAAI,SAAS,CAC1B,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAoB;IACxC,MAAM,cAAc,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEjF,oCAAoC;IACpC,IAAI,UAAkB,CAAC;IACvB,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI;QAAE,UAAU,GAAG,cAAc,CAAC;SAC7C,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI;QAAE,UAAU,GAAG,cAAc,CAAC;SAClD,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG;QAAE,UAAU,GAAG,aAAa,CAAC;SAChD,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE;QAAE,UAAU,GAAG,SAAS,CAAC;SAC3C,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI;QAAE,UAAU,GAAG,iBAAiB,CAAC;SAC5D,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM;QAAE,UAAU,GAAG,aAAa,CAAC;SAC1D,IAAI,KAAK,CAAC,QAAQ,KAAK,KAAK;QAAE,UAAU,GAAG,kBAAkB,CAAC;SAC9D,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM;QAAE,UAAU,GAAG,cAAc,EAAE,OAAO,IAAI,cAAc,CAAC;SACtF,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO;QAAE,UAAU,GAAG,cAAc,EAAE,OAAO,IAAI,aAAa,CAAC;SACtF,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAAE,UAAU,GAAG,cAAc,EAAE,OAAO,IAAI,iBAAiB,CAAC;;QAC3F,UAAU,GAAG,cAAc,EAAE,OAAO,IAAI,aAAa,CAAC;IAE3D,8EAA8E;IAC9E,6EAA6E;IAC7E,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC;QACtC,IAAI,CAAC,EAAE,CAAC;YACN,UAAU,GAAG,CAAC,CAAC;YACf,MAAM;QACR,CAAC;IACH,CAAC;IACD,IAAI,CAAC,UAAU,IAAI,cAAc,EAAE,OAAO;QAAE,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC;IAEhF,MAAM,SAAS,GAAG,cAAc,EAAE,MAAM,IAAI,IAAI,CAAC;IAEjD,MAAM,KAAK,GAAa,CAAC,SAAS,EAAE,cAAc,UAAU,GAAG,CAAC,CAAC;IACjE,IAAI,UAAU;QAAE,KAAK,CAAC,IAAI,CAAC,cAAc,UAAU,GAAG,CAAC,CAAC;IACxD,IAAI,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,aAAa,SAAS,GAAG,CAAC,CAAC;IAErD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAC1B,KAAoB,EACpB,UAAgG,EAAE;IAElG,qCAAqC;IACrC,MAAM,KAAK,GAAG,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;IACjC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,GAAG,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,sEAAsE;IACtE,oEAAoE;IACpE,uEAAuE;IACvE,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,yBAAyB,CAAC,EAAE,CAAC;QACpE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC;IACtC,CAAC;IAED,2EAA2E;IAC3E,gFAAgF;IAChF,iCAAiC;IACjC,2EAA2E;IAC3E,6EAA6E;IAC7E,uCAAuC;IACvC,IAAI,OAAO,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC,EAAE,CAAC;QAC/D,KAAK,CAAC,yBAAyB,CAAC,GAAG,QAAQ,CAAC;IAC9C,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC5D,KAAK,CAAC,gBAAgB,CAAC,GAAG,QAAQ,CAAC;IACrC,CAAC;IACD,MAAM,mBAAmB,GAAG,CAAC,YAAY,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC5F,IAAI,CAAC,mBAAmB,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC,EAAE,CAAC;QAC9D,KAAK,CAAC,yBAAyB,CAAC,GAAG,QAAQ,CAAC;IAC9C,CAAC;IAED,6EAA6E;IAC7E,0EAA0E;IAC1E,4EAA4E;IAC5E,+EAA+E;IAC/E,yEAAyE;IACzE,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,IAAI,UAAU,CAAC,OAAO,CAAC,YAA4C,CAAC,EAAE,QAAQ,CAAC;IACrH,IAAI,SAAS,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QACnC,KAAK,CAAC,SAAS,CAAC,GAAG,QAAQ,CAAC;IAC9B,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAClB,qCAAqC,EACrC,KAAK,CAAC,SAAS;QACb,CAAC,CAAC,eAAe,KAAK,CAAC,QAAQ,MAAM,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;QACvH,CAAC,CAAC,eAAe,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EACpG,4EAA4E,EAC5E,EAAE,CACH,CAAC;IAEF,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACrC,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,YAAY,IAAI,WAAW,EAAE,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;IACtH,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAErC,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,MAAM,CACxE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAC3B,CAAC;IAEF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACjC,CAAC"}

package/dist/vault-meta.d.ts

@@ -0,0 +1,44 @@
+import type { SecretsStore } from "./toml-generator.js";
+/**
+ * Single source of truth for every secret backend kit can wire up.
+ *
+ * The point of this file is to close a silent dead-end: choosing a vault at
+ * `kit init` used to record `store = "<vault>"` and nothing else — the CLI was
+ * never installed, no login was guided, and `kit secrets` just failed key by
+ * key with "CLI not available". Three consumers now read from here so the choice
+ * is actually provisioned end-to-end:
+ *
+ *  - `toml-generator` adds {@link VaultMeta.miseTool} to `[tools]` so
+ *    `kit setup` installs the vault CLI like any other tool.
+ *  - `cli` (secrets / setup) uses {@link VaultMeta.loginCmd} / {@link initCmd}
+ *    to print a LOUD, actionable "chosen but not authenticated yet" hint instead
+ *    of a wall of silent per-key failures.
+ *  - the secret backends resolve that same CLI mise-first (see `execCli`), so
+ *    the binary kit just installed is actually found.
+ *
+ * `miseTool` is set only for vaults whose CLI mise can install. Cloud secret
+ * managers (aws/gcp/azure) ship their CLI through the cloud environment / IAM,
+ * not mise — kit guides their login but does not try to provision the binary.
+ */
+export interface VaultMeta {
+    label: string;
+    /** mise registry key kit adds to `[tools]` so `kit setup` installs the CLI.
+     *  Absent ⇒ kit does not provision this backend's CLI (cloud-managed). */
+    miseTool?: string;
+    /** How the user authenticates. This stays the user's own account action —
+     *  kit guides it, never runs it. */
+    loginCmd?: string;
+    /** Optional repo-binding step run after login (e.g. `infisical init` writes
+     *  `.infisical.json`, binding this checkout to a project/environment). */
+    initCmd?: string;
+}
+export declare const VAULT_META: Record<Exclude<SecretsStore, "env">, VaultMeta>;
+/** Vault metadata for a configured `store`, or null for `env` / unknown. */
+export declare function vaultMeta(store: string | undefined): VaultMeta | null;
+/**
+ * Detect a secret backend a brownfield repo is already bound to, from its
+ * marker files, so `kit init` can pre-select the right store instead of
+ * defaulting to 1Password (and hardcoding the wrong one in `--yes` runs).
+ * Returns null when nothing recognizable is present.
+ */
+export declare function detectSecretStore(fileExists: (relPath: string) => Promise<boolean>): Promise<SecretsStore | null>;

package/dist/vault-meta.js

@@ -0,0 +1,35 @@
+export const VAULT_META = {
+    "1password": { label: "1Password", miseTool: "1password", loginCmd: "op signin" },
+    infisical: {
+        label: "Infisical",
+        miseTool: "infisical",
+        loginCmd: "infisical login",
+        initCmd: "infisical init",
+    },
+    doppler: { label: "Doppler", miseTool: "doppler", loginCmd: "doppler login", initCmd: "doppler setup" },
+    bitwarden: { label: "Bitwarden", miseTool: "bitwarden", loginCmd: "bw login && bw unlock" },
+    vault: { label: "HashiCorp Vault", miseTool: "vault", loginCmd: "vault login" },
+    "aws-sm": { label: "AWS Secrets Manager", loginCmd: "aws configure  (or assume an IAM role)" },
+    "gcp-sm": { label: "GCP Secret Manager", loginCmd: "gcloud auth login" },
+    "azure-kv": { label: "Azure Key Vault", loginCmd: "az login" },
+};
+/** Vault metadata for a configured `store`, or null for `env` / unknown. */
+export function vaultMeta(store) {
+    if (!store || store === "env")
+        return null;
+    return VAULT_META[store] ?? null;
+}
+/**
+ * Detect a secret backend a brownfield repo is already bound to, from its
+ * marker files, so `kit init` can pre-select the right store instead of
+ * defaulting to 1Password (and hardcoding the wrong one in `--yes` runs).
+ * Returns null when nothing recognizable is present.
+ */
+export async function detectSecretStore(fileExists) {
+    if (await fileExists(".infisical.json"))
+        return "infisical";
+    if ((await fileExists("doppler.yaml")) || (await fileExists(".doppler.yaml")))
+        return "doppler";
+    return null;
+}
+//# sourceMappingURL=vault-meta.js.map

package/dist/vault-meta.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault-meta.js","sourceRoot":"","sources":["../src/vault-meta.ts"],"names":[],"mappings":"AAoCA,MAAM,CAAC,MAAM,UAAU,GAAoD;IACzE,WAAW,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE;IACjF,SAAS,EAAE;QACT,KAAK,EAAE,WAAW;QAClB,QAAQ,EAAE,WAAW;QACrB,QAAQ,EAAE,iBAAiB;QAC3B,OAAO,EAAE,gBAAgB;KAC1B;IACD,OAAO,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,eAAe,EAAE,OAAO,EAAE,eAAe,EAAE;IACvG,SAAS,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,uBAAuB,EAAE;IAC3F,KAAK,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE;IAC/E,QAAQ,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,QAAQ,EAAE,wCAAwC,EAAE;IAC9F,QAAQ,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,QAAQ,EAAE,mBAAmB,EAAE;IACxE,UAAU,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,QAAQ,EAAE,UAAU,EAAE;CAC/D,CAAC;AAEF,4EAA4E;AAC5E,MAAM,UAAU,SAAS,CAAC,KAAyB;IACjD,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAC3C,OAAQ,UAAwC,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;AAClE,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,UAAiD;IAEjD,IAAI,MAAM,UAAU,CAAC,iBAAiB,CAAC;QAAE,OAAO,WAAW,CAAC;IAC5D,IAAI,CAAC,MAAM,UAAU,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,eAAe,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAChG,OAAO,IAAI,CAAC;AACd,CAAC"}

package/package.json

@@ -1,8 +1,9 @@
 {
   "name": "sandstream-kit",
-  "version": "1.4.3",
+  "version": "1.6.0",
   "description": "developer kit. zero LLM, local-first, multi-vault. one command from git clone to working dev environment.",
   "license": "MIT",
+  "funding": "https://buymeacoffee.com/sandstream",
   "type": "module",
   "workspaces": [
     "packages/*"