seamless-cli 0.2.0

package/dist/core/deployManifest.js

@@ -0,0 +1,163 @@
+import fs from "node:fs";
+import path from "node:path";
+import { getDeployManifestPath } from "./paths.js";
+import { buildDeploySecretBundle, } from "./deploySecrets.js";
+function emptyEnvMap() {
+    return {
+        web: [],
+        api: [],
+        auth: [],
+        admin: [],
+    };
+}
+function slugify(value) {
+    return value
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, "-")
+        .replace(/^-+|-+$/g, "");
+}
+function normalizePath(value) {
+    if (!value || value.trim().length === 0) {
+        return null;
+    }
+    return value;
+}
+function normalizeImage(value) {
+    if (!value || value.trim().length === 0) {
+        return null;
+    }
+    return value;
+}
+function resolveServiceMode(service, fallback = "source") {
+    const hasPath = Boolean(normalizePath(service?.path));
+    const hasImage = Boolean(normalizeImage(service?.image));
+    if (hasPath)
+        return "source";
+    if (hasImage)
+        return "image";
+    return fallback;
+}
+function buildServiceEntry(service, fallback = "source") {
+    const normalizedPath = normalizePath(service?.path);
+    const normalizedImage = normalizeImage(service?.image);
+    const mode = resolveServiceMode(service, fallback);
+    if (mode === "source" && !normalizedPath) {
+        throw new Error("A source-backed service is missing a local path");
+    }
+    if (mode === "image" && !normalizedImage) {
+        throw new Error("An image-backed service is missing an image reference");
+    }
+    return {
+        mode,
+        path: normalizedPath,
+        image: normalizedImage,
+    };
+}
+function buildOrigins(answers) {
+    return {
+        webOrigin: `https://${answers.domain.webHost}`,
+        apiOrigin: `https://${answers.domain.apiHost}`,
+        authIssuer: `https://${answers.domain.authHost}`,
+        adminOrigin: `https://${answers.domain.adminHost}`,
+    };
+}
+function resolveSecrets(existing) {
+    if (existing?.runtime?.secrets) {
+        return existing.runtime.secrets;
+    }
+    return buildDeploySecretBundle();
+}
+export function readDeployManifest(projectDir) {
+    const filePath = getDeployManifestPath(projectDir);
+    if (!fs.existsSync(filePath)) {
+        throw new Error("Missing infra/deploy.json");
+    }
+    const raw = fs.readFileSync(filePath, "utf8");
+    return JSON.parse(raw);
+}
+export function readExistingDeployManifest(projectDir) {
+    const filePath = getDeployManifestPath(projectDir);
+    if (!fs.existsSync(filePath)) {
+        return null;
+    }
+    const raw = fs.readFileSync(filePath, "utf8");
+    return JSON.parse(raw);
+}
+export function buildDeployManifest(config, answers, existing) {
+    const slug = slugify(config.projectName);
+    const secrets = resolveSecrets(existing);
+    const { webOrigin, apiOrigin, authIssuer, adminOrigin } = buildOrigins(answers);
+    return {
+        version: 1,
+        projectName: config.projectName,
+        provider: "aws",
+        tier: answers.tier,
+        region: answers.region,
+        awsProfile: answers.awsProfile,
+        domain: {
+            root: answers.domain.root,
+            hostedZoneDomain: answers.domain.hostedZoneDomain,
+            hostedZoneId: answers.domain.hostedZoneId,
+            webHost: answers.domain.webHost,
+            apiHost: answers.domain.apiHost,
+            authHost: answers.domain.authHost,
+            adminHost: answers.domain.adminHost,
+        },
+        backup: {
+            enabled: answers.backup.enabled,
+            schedule: answers.backup.schedule,
+            retentionDays: answers.backup.retentionDays,
+        },
+        services: {
+            web: buildServiceEntry(config.services.web, "source"),
+            api: buildServiceEntry(config.services.api, "source"),
+            auth: buildServiceEntry(config.services.auth, "image"),
+            admin: buildServiceEntry(config.services.admin, "image"),
+        },
+        images: {
+            web: { repositoryName: `${slug}-web`, tag: "latest" },
+            api: { repositoryName: `${slug}-api`, tag: "latest" },
+            auth: { repositoryName: `${slug}-auth`, tag: "latest" },
+            admin: { repositoryName: `${slug}-admin`, tag: "latest" },
+            postgres: { repositoryName: `${slug}-postgres`, tag: "latest" },
+        },
+        env: existing?.env ?? emptyEnvMap(),
+        runtime: {
+            apiOrigin,
+            authIssuer,
+            webOrigin,
+            adminOrigin,
+            acmCertificateArn: existing?.runtime?.acmCertificateArn,
+            rpid: answers.domain.root,
+            secrets,
+        },
+    };
+}
+export function writeDeployManifest(projectDir, manifest) {
+    const filePath = getDeployManifestPath(projectDir);
+    const dirPath = path.dirname(filePath);
+    fs.mkdirSync(dirPath, { recursive: true });
+    fs.writeFileSync(filePath, `${JSON.stringify(manifest, null, 2)}\n`, "utf8");
+}
+export function updateDeployManifestCertificateArn(projectDir, certificateArn) {
+    const existing = readDeployManifest(projectDir);
+    const updated = {
+        ...existing,
+        runtime: {
+            ...existing.runtime,
+            acmCertificateArn: certificateArn,
+        },
+    };
+    writeDeployManifest(projectDir, updated);
+    return updated;
+}
+export function updateDeployManifestEnv(projectDir, env) {
+    const existing = readDeployManifest(projectDir);
+    const updated = {
+        ...existing,
+        env,
+    };
+    writeDeployManifest(projectDir, updated);
+    return updated;
+}
+//# sourceMappingURL=deployManifest.js.map

package/dist/core/deployManifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployManifest.js","sourceRoot":"","sources":["../../src/core/deployManifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAMnD,OAAO,EAEL,uBAAuB,GACxB,MAAM,oBAAoB,CAAC;AAuF5B,SAAS,WAAW;IAClB,OAAO;QACL,GAAG,EAAE,EAAE;QACP,GAAG,EAAE,EAAE;QACP,IAAI,EAAE,EAAE;QACR,KAAK,EAAE,EAAE;KACV,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,KAAa;IAC5B,OAAO,KAAK;SACT,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,aAAa,CAAC,KAAgC;IACrD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,KAAgC;IACtD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CACzB,OAAkC,EAClC,WAA8B,QAAQ;IAEtC,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,OAAO,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;IAEzD,IAAI,OAAO;QAAE,OAAO,QAAQ,CAAC;IAC7B,IAAI,QAAQ;QAAE,OAAO,OAAO,CAAC;IAC7B,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,iBAAiB,CACxB,OAAkC,EAClC,WAA8B,QAAQ;IAEtC,MAAM,cAAc,GAAG,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACpD,MAAM,eAAe,GAAG,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAEnD,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,cAAc,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IAED,IAAI,IAAI,KAAK,OAAO,IAAI,CAAC,eAAe,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IAED,OAAO;QACL,IAAI;QACJ,IAAI,EAAE,cAAc;QACpB,KAAK,EAAE,eAAe;KACvB,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,OAA8B;IAClD,OAAO;QACL,SAAS,EAAE,WAAW,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE;QAC9C,SAAS,EAAE,WAAW,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE;QAC9C,UAAU,EAAE,WAAW,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE;QAChD,WAAW,EAAE,WAAW,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE;KACnD,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,QAAgC;IACtD,IAAI,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QAC/B,OAAO,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC;IAClC,CAAC;IACD,OAAO,uBAAuB,EAAE,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,UAAkB;IACnD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC;IAEnD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC9C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,UAAkB;IAElB,MAAM,QAAQ,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC;IAEnD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC9C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,MAAsB,EACtB,OAA8B,EAC9B,QAAgC;IAEhC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,GACrD,YAAY,CAAC,OAAO,CAAC,CAAC;IAExB,OAAO;QACL,OAAO,EAAE,CAAC;QACV,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,MAAM,EAAE;YACN,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI;YACzB,gBAAgB,EAAE,OAAO,CAAC,MAAM,CAAC,gBAAgB;YACjD,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY;YACzC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO;YAC/B,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO;YAC/B,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ;YACjC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS;SACpC;QACD,MAAM,EAAE;YACN,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO;YAC/B,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ;YACjC,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,aAAa;SAC5C;QACD,QAAQ,EAAE;YACR,GAAG,EAAE,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC;YACrD,GAAG,EAAE,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC;YACrD,IAAI,EAAE,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;YACtD,KAAK,EAAE,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;SACzD;QACD,MAAM,EAAE;YACN,GAAG,EAAE,EAAE,cAAc,EAAE,GAAG,IAAI,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE;YACrD,GAAG,EAAE,EAAE,cAAc,EAAE,GAAG,IAAI,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE;YACrD,IAAI,EAAE,EAAE,cAAc,EAAE,GAAG,IAAI,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE;YACvD,KAAK,EAAE,EAAE,cAAc,EAAE,GAAG,IAAI,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE;YACzD,QAAQ,EAAE,EAAE,cAAc,EAAE,GAAG,IAAI,WAAW,EAAE,GAAG,EAAE,QAAQ,EAAE;SAChE;QACD,GAAG,EAAE,QAAQ,EAAE,GAAG,IAAI,WAAW,EAAE;QACnC,OAAO,EAAE;YACP,SAAS;YACT,UAAU;YACV,SAAS;YACT,WAAW;YACX,iBAAiB,EAAE,QAAQ,EAAE,OAAO,EAAE,iBAAiB;YACvD,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI;YACzB,OAAO;SACR;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,UAAkB,EAClB,QAAwB;IAExB,MAAM,QAAQ,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAEvC,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,UAAkB,EAClB,cAAsB;IAEtB,MAAM,QAAQ,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAEhD,MAAM,OAAO,GAAmB;QAC9B,GAAG,QAAQ;QACX,OAAO,EAAE;YACP,GAAG,QAAQ,CAAC,OAAO;YACnB,iBAAiB,EAAE,cAAc;SAClC;KACF,CAAC;IAEF,mBAAmB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACzC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,UAAkB,EAClB,GAAwB;IAExB,MAAM,QAAQ,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAEhD,MAAM,OAAO,GAAmB;QAC9B,GAAG,QAAQ;QACX,GAAG;KACJ,CAAC;IAEF,mBAAmB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACzC,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/core/deploySecrets.js

@@ -0,0 +1,31 @@
+import { generateSecret } from "./secrets.js";
+import { generateJWKS } from "./jwks.js";
+export function buildDeploySecretBundle() {
+    const kid = "main";
+    const { publicKey, privateKey } = generateJWKS();
+    return {
+        apiServiceToken: generateSecret(32),
+        cookieSigningKey: generateSecret(32),
+        bootstrapSecret: generateSecret(32),
+        authDbPassword: generateSecret(24),
+        apiDbPassword: generateSecret(24),
+        authDbUser: "auth_user",
+        apiDbUser: "api_user",
+        authDbName: "seamless_auth",
+        apiDbName: "seamless_api",
+        jwks: {
+            kid,
+            privateKey,
+            publicKey,
+            publicJwksJson: JSON.stringify({
+                keys: [
+                    {
+                        kid,
+                        pem: publicKey,
+                    },
+                ],
+            }, null, 2),
+        },
+    };
+}
+//# sourceMappingURL=deploySecrets.js.map

package/dist/core/deploySecrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploySecrets.js","sourceRoot":"","sources":["../../src/core/deploySecrets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAoBzC,MAAM,UAAU,uBAAuB;IACrC,MAAM,GAAG,GAAG,MAAM,CAAC;IACnB,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,YAAY,EAAE,CAAC;IAEjD,OAAO;QACL,eAAe,EAAE,cAAc,CAAC,EAAE,CAAC;QACnC,gBAAgB,EAAE,cAAc,CAAC,EAAE,CAAC;QACpC,eAAe,EAAE,cAAc,CAAC,EAAE,CAAC;QACnC,cAAc,EAAE,cAAc,CAAC,EAAE,CAAC;QAClC,aAAa,EAAE,cAAc,CAAC,EAAE,CAAC;QACjC,UAAU,EAAE,WAAW;QACvB,SAAS,EAAE,UAAU;QACrB,UAAU,EAAE,eAAe;QAC3B,SAAS,EAAE,cAAc;QACzB,IAAI,EAAE;YACJ,GAAG;YACH,UAAU;YACV,SAAS;YACT,cAAc,EAAE,IAAI,CAAC,SAAS,CAC5B;gBACE,IAAI,EAAE;oBACJ;wBACE,GAAG;wBACH,GAAG,EAAE,SAAS;qBACf;iBACF;aACF,EACD,IAAI,EACJ,CAAC,CACF;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/core/destroy.js

@@ -0,0 +1,38 @@
+import fs from "node:fs";
+import { getAwsDevInfraDir, getDeployManifestPath, getInfraDir, } from "./paths.js";
+import { deleteEcrImages, deleteEcrRepository } from "./aws.js";
+export async function destroyEcrResources(manifest) {
+    const repositories = [
+        manifest.images.web.repositoryName,
+        manifest.images.api.repositoryName,
+        manifest.images.postgres.repositoryName,
+    ];
+    if (manifest.services.auth.mode === "source") {
+        repositories.push(manifest.images.auth.repositoryName);
+    }
+    if (manifest.services.admin.mode === "source") {
+        repositories.push(manifest.images.admin.repositoryName);
+    }
+    for (const repositoryName of repositories) {
+        await deleteEcrImages(manifest.awsProfile, manifest.region, repositoryName);
+        await deleteEcrRepository(manifest.awsProfile, manifest.region, repositoryName);
+    }
+}
+export function removeGeneratedInfraFiles(projectDir) {
+    const manifestPath = getDeployManifestPath(projectDir);
+    const awsDevDir = getAwsDevInfraDir(projectDir);
+    if (fs.existsSync(manifestPath)) {
+        fs.rmSync(manifestPath, { force: true });
+    }
+    if (fs.existsSync(awsDevDir)) {
+        fs.rmSync(awsDevDir, { recursive: true, force: true });
+    }
+    const infraDir = getInfraDir(projectDir);
+    if (fs.existsSync(infraDir)) {
+        const remaining = fs.readdirSync(infraDir);
+        if (remaining.length === 0) {
+            fs.rmSync(infraDir, { recursive: true, force: true });
+        }
+    }
+}
+//# sourceMappingURL=destroy.js.map

package/dist/core/destroy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"destroy.js","sourceRoot":"","sources":["../../src/core/destroy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AAGzB,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,WAAW,GACZ,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAEhE,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,QAAwB;IAExB,MAAM,YAAY,GAAG;QACnB,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc;QAClC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc;QAClC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc;KACxC,CAAC;IAEF,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7C,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9C,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,MAAM,cAAc,IAAI,YAAY,EAAE,CAAC;QAC1C,MAAM,eAAe,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAC5E,MAAM,mBAAmB,CACvB,QAAQ,CAAC,UAAU,EACnB,QAAQ,CAAC,MAAM,EACf,cAAc,CACf,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,UAAkB;IAC1D,MAAM,YAAY,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAEhD,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAChC,EAAE,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IACzC,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/core/env.js

@@ -0,0 +1,35 @@
+import fs from "fs";
+export function parseEnv(filePath) {
+    const content = fs.readFileSync(filePath, "utf-8");
+    const lines = content.split("\n");
+    const env = {};
+    for (const line of lines) {
+        if (!line || line.startsWith("#"))
+            continue;
+        const [key, ...rest] = line.split("=");
+        if (!key)
+            continue;
+        env[key.trim()] = rest.join("=").trim();
+    }
+    return env;
+}
+export function parseEnvString(content) {
+    const lines = content.split("\n");
+    const env = {};
+    for (const line of lines) {
+        if (!line || line.startsWith("#"))
+            continue;
+        const [key, ...rest] = line.split("=");
+        if (!key)
+            continue;
+        env[key.trim()] = rest.join("=").trim();
+    }
+    return env;
+}
+export function writeEnv(filePath, env) {
+    const content = Object.entries(env)
+        .map(([k, v]) => `${k}=${v}`)
+        .join("\n");
+    fs.writeFileSync(filePath, content + "\n");
+}
+//# sourceMappingURL=env.js.map

package/dist/core/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/core/env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AAEpB,MAAM,UAAU,QAAQ,CAAC,QAAgB;IACvC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAEnD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,MAAM,GAAG,GAA2B,EAAE,CAAC;IAEvC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAE5C,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,GAAG;YAAE,SAAS;QAEnB,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1C,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,MAAM,GAAG,GAA2B,EAAE,CAAC;IAEvC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAE5C,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAEvC,IAAI,CAAC,GAAG;YAAE,SAAS;QAEnB,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1C,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,QAAgB,EAAE,GAA2B;IACpE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;SAChC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;SAC5B,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAC,CAAC;AAC7C,CAAC"}

package/dist/core/envDiscovery.js

@@ -0,0 +1,153 @@
+import fs from "node:fs";
+import path from "node:path";
+import * as p from "@clack/prompts";
+import { inferEnvKind, isDeployManagedKey } from "./envRegistry.js";
+function parseEnvFile(filePath) {
+    const raw = fs.readFileSync(filePath, "utf8");
+    const lines = raw.split(/\r?\n/);
+    const result = {};
+    for (const line of lines) {
+        const trimmed = line.trim();
+        if (!trimmed || trimmed.startsWith("#"))
+            continue;
+        const idx = trimmed.indexOf("=");
+        if (idx === -1)
+            continue;
+        const key = trimmed.slice(0, idx).trim();
+        let value = trimmed.slice(idx + 1).trim();
+        if ((value.startsWith('"') && value.endsWith('"')) ||
+            (value.startsWith("'") && value.endsWith("'"))) {
+            value = value.slice(1, -1);
+        }
+        result[key] = value;
+    }
+    return result;
+}
+function discoverServiceEnvEntries(root, servicePath) {
+    if (!servicePath)
+        return [];
+    const absolutePath = path.resolve(root, servicePath);
+    if (!fs.existsSync(absolutePath))
+        return [];
+    const envPath = path.join(absolutePath, ".env");
+    const envExamplePath = path.join(absolutePath, ".env.example");
+    const merged = new Map();
+    if (fs.existsSync(envExamplePath)) {
+        const parsed = parseEnvFile(envExamplePath);
+        for (const [key, value] of Object.entries(parsed)) {
+            merged.set(key, {
+                key,
+                value: value || null,
+                source: "env_example",
+            });
+        }
+    }
+    if (fs.existsSync(envPath)) {
+        const parsed = parseEnvFile(envPath);
+        for (const [key, value] of Object.entries(parsed)) {
+            merged.set(key, {
+                key,
+                value: value || null,
+                source: "env",
+            });
+        }
+    }
+    return [...merged.values()].sort((a, b) => a.key.localeCompare(b.key));
+}
+function mergeServiceEnv(existing, discovered, service) {
+    const existingUserMap = new Map(existing.map((entry) => [entry.key, entry]));
+    const result = [];
+    for (const item of discovered) {
+        if (isDeployManagedKey(service, item.key)) {
+            continue;
+        }
+        const prior = existingUserMap.get(item.key);
+        const discoveredValue = item.value?.trim() ? item.value : null;
+        if (prior) {
+            result.push({
+                ...prior,
+                value: prior.value || discoveredValue || "",
+            });
+            continue;
+        }
+        result.push({
+            key: item.key,
+            value: discoveredValue ?? "",
+            kind: inferEnvKind(item.key),
+            owner: "user",
+            target: "task_definition",
+            source: item.source,
+        });
+    }
+    for (const leftover of existing) {
+        if (!result.find((entry) => entry.key === leftover.key)) {
+            result.push(leftover);
+        }
+    }
+    return result.sort((a, b) => a.key.localeCompare(b.key));
+}
+async function promptForMissingValues(service, vars) {
+    const resolved = [];
+    for (const envVar of vars) {
+        if (envVar.value && envVar.value.trim().length > 0) {
+            resolved.push(envVar);
+            continue;
+        }
+        const promptOptions = {
+            message: `${service}: enter value for ${envVar.key}`,
+        };
+        const value = envVar.kind === "secret"
+            ? await p.password(promptOptions)
+            : await p.text(promptOptions);
+        if (p.isCancel(value)) {
+            p.cancel("Deploy cancelled");
+            process.exit(0);
+        }
+        resolved.push({
+            ...envVar,
+            value: value.trim(),
+            source: "prompt",
+        });
+    }
+    return resolved;
+}
+function printDetectedEnvSummary(env) {
+    const lines = [];
+    for (const service of [
+        "web",
+        "api",
+        "auth",
+        "admin",
+    ]) {
+        const entries = env[service];
+        if (entries.length === 0)
+            continue;
+        lines.push(`${service}:`);
+        for (const entry of entries) {
+            lines.push(`  ${entry.key} (${entry.kind}, ${entry.value ? "value found" : "missing value"})`);
+        }
+    }
+    if (lines.length > 0) {
+        p.note(lines.join("\n"), "Detected custom environment variables");
+    }
+}
+export async function discoverAndResolveCustomEnv(root, manifest) {
+    const nextEnv = {
+        web: mergeServiceEnv(manifest.env.web, discoverServiceEnvEntries(root, manifest.services.web.path), "web"),
+        api: mergeServiceEnv(manifest.env.api, discoverServiceEnvEntries(root, manifest.services.api.path), "api"),
+        auth: mergeServiceEnv(manifest.env.auth, manifest.services.auth.mode === "source"
+            ? discoverServiceEnvEntries(root, manifest.services.auth.path)
+            : [], "auth"),
+        admin: mergeServiceEnv(manifest.env.admin, manifest.services.admin.mode === "source"
+            ? discoverServiceEnvEntries(root, manifest.services.admin.path)
+            : [], "admin"),
+    };
+    printDetectedEnvSummary(nextEnv);
+    return {
+        web: await promptForMissingValues("web", nextEnv.web),
+        api: await promptForMissingValues("api", nextEnv.api),
+        auth: await promptForMissingValues("auth", nextEnv.auth),
+        admin: await promptForMissingValues("admin", nextEnv.admin),
+    };
+}
+//# sourceMappingURL=envDiscovery.js.map

package/dist/core/envDiscovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"envDiscovery.js","sourceRoot":"","sources":["../../src/core/envDiscovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,KAAK,CAAC,MAAM,gBAAgB,CAAC;AAOpC,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAYpE,SAAS,YAAY,CAAC,QAAgB;IACpC,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAEhC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAElD,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,SAAS;QAEzB,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACzC,IAAI,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAE1C,IACE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC9C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC9C,CAAC;YACD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QAED,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACtB,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,yBAAyB,CAChC,IAAY,EACZ,WAA0B;IAE1B,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,CAAC;IAE5B,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACrD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,EAAE,CAAC;IAE5C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAChD,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAE/D,MAAM,MAAM,GAAG,IAAI,GAAG,EAA8B,CAAC;IAErD,IAAI,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,YAAY,CAAC,cAAc,CAAC,CAAC;QAC5C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE;gBACd,GAAG;gBACH,KAAK,EAAE,KAAK,IAAI,IAAI;gBACpB,MAAM,EAAE,aAAa;aACtB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QACrC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE;gBACd,GAAG;gBACH,KAAK,EAAE,KAAK,IAAI,IAAI;gBACpB,MAAM,EAAE,KAAK;aACd,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,eAAe,CACtB,QAAwB,EACxB,UAAgC,EAChC,OAA0B;IAE1B,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAmB,EAAE,CAAC;IAElC,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,IAAI,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1C,SAAS;QACX,CAAC;QAED,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAE/D,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,CAAC;gBACV,GAAG,KAAK;gBACR,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,eAAe,IAAI,EAAE;aAC5C,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,MAAM,CAAC,IAAI,CAAC;YACV,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,KAAK,EAAE,eAAe,IAAI,EAAE;YAC5B,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC;YAC5B,KAAK,EAAE,MAAM;YACb,MAAM,EAAE,iBAAiB;YACzB,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,MAAM,QAAQ,IAAI,QAAQ,EAAE,CAAC;QAChC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACxD,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,OAA0B,EAC1B,IAAoB;IAEpB,MAAM,QAAQ,GAAmB,EAAE,CAAC;IAEpC,KAAK,MAAM,MAAM,IAAI,IAAI,EAAE,CAAC;QAC1B,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnD,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACtB,SAAS;QACX,CAAC;QAED,MAAM,aAAa,GAAG;YACpB,OAAO,EAAE,GAAG,OAAO,qBAAqB,MAAM,CAAC,GAAG,EAAE;SACrD,CAAC;QAEF,MAAM,KAAK,GACT,MAAM,CAAC,IAAI,KAAK,QAAQ;YACtB,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC;YACjC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAElC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACtB,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAC7B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,QAAQ,CAAC,IAAI,CAAC;YACZ,GAAG,MAAM;YACT,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE;YACnB,MAAM,EAAE,QAAQ;SACjB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,uBAAuB,CAAC,GAAwB;IACvD,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,MAAM,OAAO,IAAI;QACpB,KAAK;QACL,KAAK;QACL,MAAM;QACN,OAAO;KACe,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAEnC,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,GAAG,CAAC,CAAC;QAC1B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CACR,KAAK,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,eAAe,GAAG,CACnF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,uCAAuC,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,IAAY,EACZ,QAAwB;IAExB,MAAM,OAAO,GAAwB;QACnC,GAAG,EAAE,eAAe,CAClB,QAAQ,CAAC,GAAG,CAAC,GAAG,EAChB,yBAAyB,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAC3D,KAAK,CACN;QACD,GAAG,EAAE,eAAe,CAClB,QAAQ,CAAC,GAAG,CAAC,GAAG,EAChB,yBAAyB,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAC3D,KAAK,CACN;QACD,IAAI,EAAE,eAAe,CACnB,QAAQ,CAAC,GAAG,CAAC,IAAI,EACjB,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ;YACtC,CAAC,CAAC,yBAAyB,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;YAC9D,CAAC,CAAC,EAAE,EACN,MAAM,CACP;QACD,KAAK,EAAE,eAAe,CACpB,QAAQ,CAAC,GAAG,CAAC,KAAK,EAClB,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ;YACvC,CAAC,CAAC,yBAAyB,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;YAC/D,CAAC,CAAC,EAAE,EACN,OAAO,CACR;KACF,CAAC;IAEF,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAEjC,OAAO;QACL,GAAG,EAAE,MAAM,sBAAsB,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC;QACrD,GAAG,EAAE,MAAM,sBAAsB,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC;QACrD,IAAI,EAAE,MAAM,sBAAsB,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC;QACxD,KAAK,EAAE,MAAM,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC;KAC5D,CAAC;AACJ,CAAC"}

package/dist/core/envRegistry.js

@@ -0,0 +1,76 @@
+const DEPLOY_MANAGED_KEYS = {
+    web: new Set(["API_URL", "VITE_API_URL"]),
+    admin: new Set(["API_URL", "AUTH_MODE", "VITE_API_URL", "VITE_AUTH_MODE"]),
+    api: new Set([
+        "AUTH_SERVER_URL",
+        "APP_ORIGIN",
+        "UI_ORIGINS",
+        "COOKIE_SIGNING_KEY",
+        "API_SERVICE_TOKEN",
+        "JWKS_KID",
+        "DB_HOST",
+        "DB_PORT",
+        "DB_USER",
+        "DB_PASSWORD",
+        "DB_NAME",
+        "SQL_LOGGING",
+    ]),
+    auth: new Set([
+        "NODE_ENV",
+        "VERSION",
+        "APP_NAME",
+        "APP_ID",
+        "APP_ORIGIN",
+        "ISSUER",
+        "AUTH_MODE",
+        "DEMO",
+        "DEFAULT_ROLES",
+        "AVAILABLE_ROLES",
+        "DB_LOGGING",
+        "DB_HOST",
+        "DB_PORT",
+        "DB_NAME",
+        "DB_USER",
+        "DB_PASSWORD",
+        "ACCESS_TOKEN_TTL",
+        "REFRESH_TOKEN_TTL",
+        "RATE_LIMIT",
+        "DELAY_AFTER",
+        "API_SERVICE_TOKEN",
+        "JWKS_ACTIVE_KID",
+        "SEAMLESS_JWKS_ACTIVE_KID",
+        "JWKS_PUBLIC_KEYS",
+        "RPID",
+        "ORIGINS",
+        "SEAMLESS_BOOTSTRAP_ENABLED",
+        "SEAMLESS_BOOTSTRAP_SECRET",
+    ]),
+};
+export function isDeployManagedKey(service, key) {
+    if (DEPLOY_MANAGED_KEYS[service].has(key))
+        return true;
+    if (service === "auth" && key.startsWith("SEAMLESS_JWKS_KEY_"))
+        return true;
+    return false;
+}
+export function inferEnvKind(key) {
+    const upper = key.toUpperCase();
+    const secretHints = [
+        "SECRET",
+        "TOKEN",
+        "PASSWORD",
+        "PRIVATE",
+        "WEBHOOK",
+        "KEY",
+        "DSN",
+    ];
+    const alwaysPlainPrefixes = ["VITE_PUBLIC_", "NEXT_PUBLIC_", "PUBLIC_"];
+    if (alwaysPlainPrefixes.some((prefix) => upper.startsWith(prefix))) {
+        return "plain";
+    }
+    if (secretHints.some((hint) => upper.includes(hint))) {
+        return "secret";
+    }
+    return "plain";
+}
+//# sourceMappingURL=envRegistry.js.map

package/dist/core/envRegistry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"envRegistry.js","sourceRoot":"","sources":["../../src/core/envRegistry.ts"],"names":[],"mappings":"AAEA,MAAM,mBAAmB,GAA2C;IAClE,GAAG,EAAE,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IACzC,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,cAAc,EAAE,gBAAgB,CAAC,CAAC;IAC1E,GAAG,EAAE,IAAI,GAAG,CAAC;QACX,iBAAiB;QACjB,YAAY;QACZ,YAAY;QACZ,oBAAoB;QACpB,mBAAmB;QACnB,UAAU;QACV,SAAS;QACT,SAAS;QACT,SAAS;QACT,aAAa;QACb,SAAS;QACT,aAAa;KACd,CAAC;IACF,IAAI,EAAE,IAAI,GAAG,CAAC;QACZ,UAAU;QACV,SAAS;QACT,UAAU;QACV,QAAQ;QACR,YAAY;QACZ,QAAQ;QACR,WAAW;QACX,MAAM;QACN,eAAe;QACf,iBAAiB;QACjB,YAAY;QACZ,SAAS;QACT,SAAS;QACT,SAAS;QACT,SAAS;QACT,aAAa;QACb,kBAAkB;QAClB,mBAAmB;QACnB,YAAY;QACZ,aAAa;QACb,mBAAmB;QACnB,iBAAiB;QACjB,0BAA0B;QAC1B,kBAAkB;QAClB,MAAM;QACN,SAAS;QACT,4BAA4B;QAC5B,2BAA2B;KAC5B,CAAC;CACH,CAAC;AAEF,MAAM,UAAU,kBAAkB,CAChC,OAA0B,EAC1B,GAAW;IAEX,IAAI,mBAAmB,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAEvD,IAAI,OAAO,KAAK,MAAM,IAAI,GAAG,CAAC,UAAU,CAAC,oBAAoB,CAAC;QAAE,OAAO,IAAI,CAAC;IAE5E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAEhC,MAAM,WAAW,GAAG;QAClB,QAAQ;QACR,OAAO;QACP,UAAU;QACV,SAAS;QACT,SAAS;QACT,KAAK;QACL,KAAK;KACN,CAAC;IAEF,MAAM,mBAAmB,GAAG,CAAC,cAAc,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;IAExE,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QACnE,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACrD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/core/exec.js

@@ -0,0 +1,17 @@
+import { spawn } from "child_process";
+export function runCommand(command, args, cwd) {
+    return new Promise((resolve, reject) => {
+        const child = spawn(command, args, {
+            stdio: "inherit",
+            cwd,
+            shell: true,
+        });
+        child.on("close", (code) => {
+            if (code === 0)
+                resolve();
+            else
+                reject(new Error(`${command} failed`));
+        });
+    });
+}
+//# sourceMappingURL=exec.js.map

package/dist/core/exec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exec.js","sourceRoot":"","sources":["../../src/core/exec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAEtC,MAAM,UAAU,UAAU,CACxB,OAAe,EACf,IAAc,EACd,GAAW;IAEX,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;YACjC,KAAK,EAAE,SAAS;YAChB,GAAG;YACH,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,IAAI,IAAI,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAC;;gBACrB,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,OAAO,SAAS,CAAC,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/core/fetch.js

@@ -0,0 +1,9 @@
+export async function fetchEnvExample() {
+    const url = "https://raw.githubusercontent.com/fells-code/seamless-auth-api/main/.env.example";
+    const res = await fetch(url);
+    if (!res.ok) {
+        throw new Error("Failed to fetch auth env.example");
+    }
+    return await res.text();
+}
+//# sourceMappingURL=fetch.js.map

package/dist/core/fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch.js","sourceRoot":"","sources":["../../src/core/fetch.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,MAAM,GAAG,GACP,kFAAkF,CAAC;IAErF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IAE7B,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;AAC1B,CAAC"}

package/dist/core/health.js

@@ -0,0 +1,11 @@
+import { execCommand } from "./exec.js";
+async function fetchStatus(url) {
+    await execCommand("curl", ["-f", "-L", url], { quiet: true });
+}
+export async function runPostDeployHealthChecks(urls) {
+    await fetchStatus(urls.web);
+    await fetchStatus(urls.api);
+    await fetchStatus(urls.auth);
+    await fetchStatus(urls.admin);
+}
+//# sourceMappingURL=health.js.map

package/dist/core/health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.js","sourceRoot":"","sources":["../../src/core/health.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC,KAAK,UAAU,WAAW,CAAC,GAAW;IACpC,MAAM,WAAW,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,IAK/C;IACC,MAAM,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC"}