stackaudit 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2024 Jandro
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,117 @@
+# stackAudit 🕵️‍♂️
+
+> **Elimina el "funciona en mi máquina" para siempre.**
+> Una CLI Open Source para validar tu entorno de desarrollo en segundos.
+
+`stackAudit` es una herramienta de línea de comandos diseñada para auditar el entorno local de un desarrollador frente a un archivo de configuración declarativo (`stackAudit.config.json`). Asegura que todas las dependencias, puertos, versiones y variables de entorno estén listas **antes** de que intentes iniciar tu aplicación.
+
+---
+
+## 🚀 Filosofía
+
+*   **Fail Efficiently:** No más "Whack-a-Mole" de errores. `stackAudit` ejecuta verificaciones en paralelo y te reporta *todos* los problemas de golpe.
+*   **Cero Configuración Oculta:** Si tu proyecto lo necesita, debe estar en `stackAudit.config.json`.
+*   **Local-First:** Todo ocurre en tu máquina. Tus secretos (`.env`) nunca salen de tu ordenador.
+*   **CI/CD Ready:** Diseñado para funcionar igual en tu laptop y en tus pipelines de GitHub Actions.
+
+## 📦 Instalación
+
+### Vía NPM (Recomendado para Node.js)
+
+```bash
+npm install -g stackAudit
+# O ejecútalo directamente con npx
+npx stackAudit check
+```
+
+### Binarios Standalone (Próximamente)
+
+Para desarrolladores de Go, Python, PHP, etc., ofreceremos binarios compilados (Single Executable Applications) que no requieren instalar Node.js globalmente.
+
+---
+
+## 🛠 Guía de Uso
+
+### 1. Inicializar
+
+Genera un archivo de configuración base en tu proyecto:
+
+```bash
+stackAudit init
+```
+
+Esto creará un archivo `stackAudit.config.json` en la raíz de tu proyecto.
+
+### 2. Configurar
+
+Edita `stackAudit.config.json` para definir los requisitos de tu proyecto. Ejemplo:
+
+```json
+{
+  "projectName": "Mi Super SaaS",
+  "version": "1.0.0",
+  "checks": {
+    "node": ">=18.0.0",
+    "npm": ">=9.0.0",
+    "env": {
+      "required": ["DATABASE_URL", "STRIPE_SECRET_KEY"]
+    },
+    "ports": [
+      { "port": 5432, "name": "PostgreSQL", "type": "tcp" },
+      { "port": 6379, "name": "Redis" }
+    ],
+    "commands": [
+      { 
+        "cmd": "docker info", 
+        "match": "Server Version", 
+        "errorMsg": "Docker Daemon no está corriendo." 
+      }
+    ]
+  }
+}
+```
+
+### 3. Auditar
+
+Ejecuta el comando check antes de trabajar:
+
+```bash
+stackAudit check
+```
+
+✅ Si todo está bien, verás un mensaje de éxito.
+❌ Si algo falla, recibirás un reporte detallado de qué falta (ej: puerto 5432 ocupado, falta variable STRIPE_KEY, versión de Node incorrecta).
+
+---
+
+## 🏗 Arquitectura y Tecnología
+
+`stackAudit` está construido con tecnologías modernas y pensado para ser robusto:
+
+*   **Core:** Node.js (>=18) + TypeScript 5.x (ESModules).
+*   **Ejecución:** Paralela (`Promise.allSettled`) para máxima velocidad.
+*   **Validación:** Zod para esquemas estrictos.
+*   **UX:** `commander`, `chalk`, `ora` para una experiencia de terminal premium.
+*   **Checks Inteligentes:**
+    *   **Puertos:** Estrategia "Wait-for" con backoff exponencial (evita falsos negativos si la DB está arrancando).
+    *   **Env:** Valida contra `process.env` (compatible con Docker/K8s/CI), no solo archivos de texto.
+
+## 🗺 Roadmap
+
+- [ ] **Fase 1 (MVP):** Validación de Node, Archivos y CLI básica.
+- [ ] **Fase 2 (Robustez):** Checks de Puertos (Wait-for), Variables de Entorno, Comandos custom.
+- [ ] **Fase 3 (DevEx):** Comando `init`, UI mejorada, Distribución de binarios nativos (SEA).
+
+## 🤝 Contribuyendo
+
+¡Las contribuciones son bienvenidas!
+
+1.  Haz un Fork del repositorio.
+2.  Crea tu rama de feature (`git checkout -b feature/AmazingFeature`).
+3.  Haz Commit de tus cambios (`git commit -m 'Add some AmazingFeature'`).
+4.  Push a la rama (`git push origin feature/AmazingFeature`).
+5.  Abre un Pull Request.
+
+## 📄 Licencia
+
+Distribuido bajo la licencia MIT. Ver `LICENSE` para más información.

package/bin/stackAudit.js

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+
+import("../dist/index.js");

package/dist/index.d.ts

@@ -0,0 +1 @@
+#!/usr/bin/env node

package/dist/index.js

@@ -0,0 +1,777 @@
+#!/usr/bin/env node
+
+// src/index.ts
+import { Command } from "commander";
+
+// src/commands/check.ts
+import ora from "ora";
+
+// src/core/configLoader.ts
+import { readFile } from "fs/promises";
+import { resolve } from "path";
+
+// src/schemas/config.schema.ts
+import { z } from "zod";
+var portSchema = z.object({
+  port: z.number().int().min(1).max(65535),
+  name: z.string().min(1),
+  type: z.enum(["tcp"]).optional().default("tcp")
+});
+var envSchema = z.object({
+  target: z.string().min(1),
+  example: z.string().min(1),
+  required: z.array(z.string().min(1)).min(1, "At least one required env var must be specified")
+});
+var commandSchema = z.object({
+  cmd: z.string().min(1),
+  match: z.string().optional(),
+  errorMsg: z.string().optional()
+});
+var semverRangeString = z.string().min(1, "Semver range cannot be empty");
+var checksSchema = z.object({
+  node: semverRangeString.optional(),
+  npm: semverRangeString.optional(),
+  env: envSchema.optional(),
+  ports: z.array(portSchema).min(1, "Ports array cannot be empty").optional(),
+  files: z.array(z.string().min(1)).min(1, "Files array cannot be empty").optional(),
+  commands: z.array(commandSchema).min(1, "Commands array cannot be empty").optional()
+}).refine(
+  (checks) => {
+    const hasNode = checks.node !== void 0;
+    const hasNpm = checks.npm !== void 0;
+    const hasEnv = checks.env !== void 0;
+    const hasPorts = checks.ports !== void 0 && checks.ports.length > 0;
+    const hasFiles = checks.files !== void 0 && checks.files.length > 0;
+    const hasCommands = checks.commands !== void 0 && checks.commands.length > 0;
+    return hasNode || hasNpm || hasEnv || hasPorts || hasFiles || hasCommands;
+  },
+  { message: "At least one check must be configured" }
+);
+var configSchema = z.object({
+  projectName: z.string().min(1, "projectName is required"),
+  version: z.string().min(1, "version is required"),
+  checks: checksSchema
+});
+
+// src/core/configLoader.ts
+var DEFAULT_CONFIG_FILE = "stackAudit.config.json";
+async function loadConfig(configPath) {
+  const filePath = resolve(process.cwd(), configPath ?? DEFAULT_CONFIG_FILE);
+  let raw;
+  try {
+    raw = await readFile(filePath, "utf-8");
+  } catch {
+    throw new Error(
+      `Config file not found: ${filePath}
+Run "stackaudit init" to create one, or use --config to specify a path.`
+    );
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    throw new Error(
+      `Invalid JSON in config file: ${filePath}
+Check for trailing commas or syntax errors.`
+    );
+  }
+  const result = configSchema.safeParse(parsed);
+  if (!result.success) {
+    const issues = result.error.issues.map((issue) => `  - ${issue.path.join(".")}: ${issue.message}`).join("\n");
+    throw new Error(
+      `Invalid configuration in ${filePath}:
+${issues}`
+    );
+  }
+  return result.data;
+}
+
+// src/checks/nodeVersion.ts
+import semver from "semver";
+
+// src/utils/system.ts
+import { execa } from "execa";
+var SAFE_COMMAND_PREFIXES = [
+  "node --version",
+  "node -v",
+  "npm --version",
+  "npm -v",
+  "docker info",
+  "docker --version",
+  "docker compose version",
+  "git --version",
+  "python --version",
+  "python3 --version",
+  "ruby --version",
+  "java --version",
+  "javac --version",
+  "go version",
+  "rustc --version",
+  "cargo --version"
+];
+function isCommandAllowed(command) {
+  const normalized = command.trim();
+  return SAFE_COMMAND_PREFIXES.some((safeCmd) => normalized === safeCmd);
+}
+function parseCommand(command) {
+  const tokens = [];
+  let current = "";
+  let inSingle = false;
+  let inDouble = false;
+  let escaped = false;
+  for (const char of command) {
+    if (escaped) {
+      current += char;
+      escaped = false;
+      continue;
+    }
+    if (char === "\\" && !inSingle) {
+      escaped = true;
+      continue;
+    }
+    if (char === "'" && !inDouble) {
+      inSingle = !inSingle;
+      continue;
+    }
+    if (char === '"' && !inSingle) {
+      inDouble = !inDouble;
+      continue;
+    }
+    if (/\s/.test(char) && !inSingle && !inDouble) {
+      if (current.length > 0) {
+        tokens.push(current);
+        current = "";
+      }
+      continue;
+    }
+    current += char;
+  }
+  if (current.length > 0) {
+    tokens.push(current);
+  }
+  return tokens;
+}
+async function execCommand(command) {
+  const tokens = parseCommand(command);
+  if (tokens.length === 0) {
+    throw new Error("Empty command");
+  }
+  const [cmd, ...args] = tokens;
+  const result = await execa(cmd, args, {
+    timeout: 1e4,
+    reject: false
+  });
+  if (result.failed) {
+    throw new Error(result.stderr || `Command "${command}" failed`);
+  }
+  return result.stdout;
+}
+async function timedCheck(name, fn) {
+  const start = performance.now();
+  try {
+    const partial = await fn();
+    return {
+      name,
+      ...partial,
+      duration: Math.round(performance.now() - start)
+    };
+  } catch (error) {
+    return {
+      name,
+      status: "fail",
+      message: error instanceof Error ? error.message : String(error),
+      duration: Math.round(performance.now() - start)
+    };
+  }
+}
+
+// src/checks/nodeVersion.ts
+function checkNodeVersion(requiredRange) {
+  return async () => {
+    const result = await timedCheck("Node.js Version", async () => {
+      const current = process.version;
+      const cleanCurrent = semver.clean(current);
+      if (!cleanCurrent) {
+        return {
+          status: "fail",
+          message: `Could not parse current Node.js version: ${current}`
+        };
+      }
+      if (!semver.validRange(requiredRange)) {
+        return {
+          status: "fail",
+          message: `Invalid semver range in config: "${requiredRange}"`
+        };
+      }
+      if (semver.satisfies(cleanCurrent, requiredRange)) {
+        return {
+          status: "pass",
+          message: `v${cleanCurrent} satisfies ${requiredRange}`
+        };
+      }
+      return {
+        status: "fail",
+        message: `v${cleanCurrent} does not satisfy ${requiredRange}`
+      };
+    });
+    return [result];
+  };
+}
+
+// src/checks/npmVersion.ts
+import semver2 from "semver";
+function checkNpmVersion(requiredRange) {
+  return async () => {
+    const result = await timedCheck("npm Version", async () => {
+      const stdout = await execCommand("npm --version");
+      const current = semver2.clean(stdout.trim());
+      if (!current) {
+        return {
+          status: "fail",
+          message: `Could not parse npm version from output: "${stdout.trim()}"`
+        };
+      }
+      if (!semver2.validRange(requiredRange)) {
+        return {
+          status: "fail",
+          message: `Invalid semver range in config: "${requiredRange}"`
+        };
+      }
+      if (semver2.satisfies(current, requiredRange)) {
+        return {
+          status: "pass",
+          message: `v${current} satisfies ${requiredRange}`
+        };
+      }
+      return {
+        status: "fail",
+        message: `v${current} does not satisfy ${requiredRange}`
+      };
+    });
+    return [result];
+  };
+}
+
+// src/checks/envVars.ts
+import { readFile as readFile2 } from "fs/promises";
+import { resolve as resolve2, relative, isAbsolute } from "path";
+import { parse as dotenvParse } from "dotenv";
+function checkEnvVars(envConfig) {
+  return async () => {
+    const results = [];
+    const cwd = process.cwd();
+    if (isAbsolute(envConfig.target)) {
+      results.push({
+        name: `Env File (${envConfig.target})`,
+        status: "fail",
+        message: `Absolute paths are not allowed for env.target: "${envConfig.target}"`,
+        duration: 0
+      });
+      return results;
+    }
+    const targetPath = resolve2(cwd, envConfig.target);
+    const rel = relative(cwd, targetPath);
+    if (rel.startsWith("..")) {
+      results.push({
+        name: `Env File (${envConfig.target})`,
+        status: "fail",
+        message: `Path traversal detected: "${envConfig.target}" resolves outside the project directory`,
+        duration: 0
+      });
+      return results;
+    }
+    let envKeys = {};
+    const fileCheck = await timedCheck(`Env File (${envConfig.target})`, async () => {
+      let content;
+      try {
+        content = await readFile2(targetPath, "utf-8");
+      } catch {
+        return {
+          status: "pass",
+          message: `File not found: ${envConfig.target} (Using process.env)`
+        };
+      }
+      envKeys = dotenvParse(content);
+      return {
+        status: "pass",
+        message: `${envConfig.target} loaded successfully`
+      };
+    });
+    results.push(fileCheck);
+    for (const key of envConfig.required) {
+      const keyResult = await timedCheck(`Env: ${key}`, async () => {
+        const value = envKeys[key] ?? process.env[key];
+        if (value === void 0) {
+          return {
+            status: "fail",
+            message: `Missing required variable "${key}" in ${envConfig.target} and process.env`
+          };
+        }
+        if (value.trim() === "") {
+          return {
+            status: "fail",
+            message: `Variable "${key}" exists but is empty`
+          };
+        }
+        return {
+          status: "pass",
+          message: `"${key}" is set (value hidden)`
+        };
+      });
+      results.push(keyResult);
+    }
+    return results;
+  };
+}
+
+// src/checks/ports.ts
+import { createConnection } from "net";
+var DEFAULT_TIMEOUT_MS = 3e3;
+function probePort(port, timeoutMs = DEFAULT_TIMEOUT_MS) {
+  return new Promise((resolve5) => {
+    const socket = createConnection({ port, host: "127.0.0.1" });
+    const timer = setTimeout(() => {
+      socket.destroy();
+      resolve5(false);
+    }, timeoutMs);
+    socket.on("connect", () => {
+      clearTimeout(timer);
+      socket.destroy();
+      resolve5(true);
+    });
+    socket.on("error", () => {
+      clearTimeout(timer);
+      socket.destroy();
+      resolve5(false);
+    });
+  });
+}
+function checkPorts(portsConfig) {
+  return async () => {
+    const results = [];
+    for (const portDef of portsConfig) {
+      const result = await timedCheck(
+        `Port ${portDef.port} (${portDef.name})`,
+        async () => {
+          const isOpen = await probePort(portDef.port);
+          if (isOpen) {
+            return {
+              status: "pass",
+              message: `${portDef.name} is accepting connections on port ${portDef.port}`
+            };
+          }
+          return {
+            status: "fail",
+            message: `Nothing listening on port ${portDef.port}. Is ${portDef.name} running?`
+          };
+        }
+      );
+      results.push(result);
+    }
+    return results;
+  };
+}
+
+// src/checks/files.ts
+import * as fs from "fs/promises";
+import { resolve as resolve3, relative as relative2, isAbsolute as isAbsolute2 } from "path";
+function checkFiles(filesList) {
+  return async () => {
+    const results = [];
+    const cwd = process.cwd();
+    for (const file of filesList) {
+      const result = await timedCheck(`File: ${file}`, async () => {
+        if (isAbsolute2(file)) {
+          return {
+            status: "fail",
+            message: `Absolute paths are not allowed in file checks: "${file}"`
+          };
+        }
+        const filePath = resolve3(cwd, file);
+        const realPath = await fs.realpath(filePath);
+        const rel = relative2(cwd, realPath);
+        if (rel.startsWith("..")) {
+          return {
+            status: "fail",
+            message: `Path traversal detected: "${file}" resolves outside the project directory`
+          };
+        }
+        try {
+          await fs.access(realPath);
+        } catch {
+          return {
+            status: "fail",
+            message: `Required file not found: ${file}`
+          };
+        }
+        return {
+          status: "pass",
+          message: `${file} exists`
+        };
+      });
+      results.push(result);
+    }
+    return results;
+  };
+}
+
+// src/checks/commands.ts
+function checkCommands(commandsConfig, trustCommands = false) {
+  return async () => {
+    const results = [];
+    for (const cmdDef of commandsConfig) {
+      const label = cmdDef.cmd.length > 40 ? cmdDef.cmd.slice(0, 37) + "..." : cmdDef.cmd;
+      if (!trustCommands && !isCommandAllowed(cmdDef.cmd)) {
+        results.push({
+          name: `Command: ${label}`,
+          status: "skip",
+          message: `Skipped untrusted command: "${cmdDef.cmd}". Use --trust-commands to allow execution of custom commands.`,
+          duration: 0
+        });
+        continue;
+      }
+      const result = await timedCheck(`Command: ${label}`, async () => {
+        let stdout;
+        try {
+          stdout = await execCommand(cmdDef.cmd);
+        } catch (error) {
+          const msg = cmdDef.errorMsg ?? `Command failed: "${cmdDef.cmd}" \u2014 ${error instanceof Error ? error.message : String(error)}`;
+          return { status: "fail", message: msg };
+        }
+        if (cmdDef.match && !stdout.includes(cmdDef.match)) {
+          const msg = cmdDef.errorMsg ?? `Output of "${cmdDef.cmd}" does not contain "${cmdDef.match}"`;
+          return { status: "fail", message: msg };
+        }
+        return {
+          status: "pass",
+          message: cmdDef.match ? `"${cmdDef.cmd}" output contains "${cmdDef.match}"` : `"${cmdDef.cmd}" executed successfully`
+        };
+      });
+      results.push(result);
+    }
+    return results;
+  };
+}
+
+// src/checks/index.ts
+function buildCheckerPipeline(checks, options = { trustCommands: false }) {
+  const pipeline = [];
+  if (checks.node) {
+    pipeline.push(checkNodeVersion(checks.node));
+  }
+  if (checks.npm) {
+    pipeline.push(checkNpmVersion(checks.npm));
+  }
+  if (checks.files && checks.files.length > 0) {
+    pipeline.push(checkFiles(checks.files));
+  }
+  if (checks.env) {
+    pipeline.push(checkEnvVars(checks.env));
+  }
+  if (checks.ports && checks.ports.length > 0) {
+    pipeline.push(checkPorts(checks.ports));
+  }
+  if (checks.commands && checks.commands.length > 0) {
+    pipeline.push(checkCommands(checks.commands, options.trustCommands));
+  }
+  return pipeline;
+}
+
+// src/core/runner.ts
+async function runAudit(config, options = { trustCommands: false }) {
+  const checkers = buildCheckerPipeline(config.checks, options);
+  const settled = await Promise.allSettled(
+    checkers.map((checker) => checker())
+  );
+  const results = [];
+  for (const outcome of settled) {
+    if (outcome.status === "fulfilled") {
+      results.push(...outcome.value);
+    } else {
+      results.push({
+        name: "Unknown Check",
+        status: "fail",
+        message: outcome.reason instanceof Error ? outcome.reason.message : String(outcome.reason),
+        duration: 0
+      });
+    }
+  }
+  const summary = { passed: 0, failed: 0, warned: 0, skipped: 0, total: results.length };
+  for (const r of results) {
+    switch (r.status) {
+      case "pass":
+        summary.passed++;
+        break;
+      case "fail":
+        summary.failed++;
+        break;
+      case "warn":
+        summary.warned++;
+        break;
+      case "skip":
+        summary.skipped++;
+        break;
+    }
+  }
+  return {
+    projectName: config.projectName,
+    timestamp: /* @__PURE__ */ new Date(),
+    results,
+    summary
+  };
+}
+
+// src/utils/logger.ts
+import chalk from "chalk";
+import boxen from "boxen";
+var STATUS_ICONS = {
+  pass: chalk.green("\u2714"),
+  fail: chalk.red("\u2716"),
+  warn: chalk.yellow("\u26A0"),
+  skip: chalk.gray("\u25CB")
+};
+function formatCheckResult(result, verbose) {
+  const icon = STATUS_ICONS[result.status];
+  const duration = chalk.gray(`(${result.duration}ms)`);
+  const name = result.status === "fail" ? chalk.red(result.name) : result.name;
+  if (!verbose && result.status === "pass") {
+    return `  ${icon} ${name} ${duration}`;
+  }
+  return `  ${icon} ${name} ${duration}
+    ${chalk.gray(result.message)}`;
+}
+function formatReport(report, options) {
+  if (options.json) {
+    return JSON.stringify({
+      projectName: report.projectName,
+      timestamp: report.timestamp.toISOString(),
+      results: report.results,
+      summary: report.summary
+    }, null, 2);
+  }
+  const lines = [];
+  lines.push("");
+  for (const result of report.results) {
+    lines.push(formatCheckResult(result, options.verbose));
+  }
+  lines.push("");
+  const { passed, failed, warned, skipped, total } = report.summary;
+  const summaryParts = [
+    chalk.green(`${passed} passed`),
+    failed > 0 ? chalk.red(`${failed} failed`) : null,
+    warned > 0 ? chalk.yellow(`${warned} warnings`) : null,
+    skipped > 0 ? chalk.gray(`${skipped} skipped`) : null
+  ].filter(Boolean).join(chalk.gray(" \xB7 "));
+  const summaryLine = `${summaryParts} ${chalk.gray(`(${total} checks)`)}`;
+  const elapsed = report.results.reduce((sum, r) => sum + r.duration, 0);
+  const header = failed > 0 ? chalk.red.bold("stackAudit \u2014 FAIL") : chalk.green.bold("stackAudit \u2014 PASS");
+  const boxContent = [
+    header,
+    chalk.gray(`Project: ${report.projectName}`),
+    "",
+    summaryLine,
+    chalk.gray(`Done in ${elapsed}ms`)
+  ].join("\n");
+  lines.push(
+    boxen(boxContent, {
+      padding: 1,
+      margin: { top: 0, bottom: 0, left: 1, right: 1 },
+      borderColor: failed > 0 ? "red" : "green",
+      borderStyle: "round"
+    })
+  );
+  return lines.join("\n");
+}
+function logError(message) {
+  console.error(chalk.red.bold("Error:"), message);
+}
+function logInfo(message) {
+  console.log(chalk.blue("\u2139"), message);
+}
+function logSuccess(message) {
+  console.log(chalk.green("\u2714"), message);
+}
+function logWarn(message) {
+  console.log(chalk.yellow("\u26A0"), message);
+}
+
+// src/commands/check.ts
+async function checkCommand(options) {
+  const silent = options.ci || options.json;
+  const spinner = silent ? null : ora("Loading configuration...").start();
+  let config;
+  try {
+    config = await loadConfig(options.config);
+    spinner?.succeed(`Loaded config for "${config.projectName}"`);
+  } catch (error) {
+    spinner?.fail("Configuration error");
+    logError(error instanceof Error ? error.message : String(error));
+    process.exitCode = 2;
+    return;
+  }
+  spinner?.start("Running checks...");
+  const report = await runAudit(config, { trustCommands: options.trustCommands });
+  spinner?.stop();
+  console.log(formatReport(report, { verbose: options.verbose, json: options.json }));
+  if (report.summary.failed > 0) {
+    process.exitCode = 1;
+  }
+}
+
+// src/commands/init.ts
+import { access as access2, readFile as readFile3, writeFile } from "fs/promises";
+import { basename, resolve as resolve4 } from "path";
+var CONFIG_FILENAME = "stackAudit.config.json";
+async function probeToolVersion(cmd) {
+  try {
+    const output = await execCommand(cmd);
+    return output.trim();
+  } catch {
+    return null;
+  }
+}
+async function detectFiles(candidates) {
+  const found = [];
+  for (const file of candidates) {
+    try {
+      await access2(resolve4(process.cwd(), file));
+      found.push(file);
+    } catch {
+    }
+  }
+  return found;
+}
+async function detectProjectName() {
+  try {
+    const raw = await readFile3(resolve4(process.cwd(), "package.json"), "utf-8");
+    const pkg = JSON.parse(raw);
+    if (typeof pkg.name === "string" && pkg.name.length > 0) {
+      return pkg.name;
+    }
+  } catch {
+  }
+  return basename(process.cwd());
+}
+async function buildDetectedConfig() {
+  const checks = {};
+  const nodeVersion = await probeToolVersion("node --version");
+  if (nodeVersion) {
+    const major = nodeVersion.replace(/^v/, "").split(".")[0];
+    checks.node = `>=${major}.0.0`;
+    logSuccess(`Detected Node.js ${nodeVersion} \u2192 requiring >=${major}.0.0`);
+  }
+  const npmVersion = await probeToolVersion("npm --version");
+  if (npmVersion) {
+    const major = npmVersion.split(".")[0];
+    checks.npm = `>=${major}.0.0`;
+    logSuccess(`Detected npm ${npmVersion} \u2192 requiring >=${major}.0.0`);
+  }
+  const commonFiles = [
+    "package.json",
+    "docker-compose.yml",
+    "docker-compose.yaml",
+    "Dockerfile",
+    "Makefile",
+    ".env.example",
+    "tsconfig.json"
+  ];
+  const foundFiles = await detectFiles(commonFiles);
+  if (foundFiles.length > 0) {
+    checks.files = foundFiles;
+    logSuccess(`Detected ${foundFiles.length} project files: ${foundFiles.join(", ")}`);
+  }
+  const envExamplePath = resolve4(process.cwd(), ".env.example");
+  try {
+    const content = await readFile3(envExamplePath, "utf-8");
+    const keys = content.split("\n").map((line) => line.trim()).filter((line) => line && !line.startsWith("#")).map((line) => line.split("=")[0].trim()).filter((key) => key.length > 0);
+    if (keys.length > 0) {
+      checks.env = {
+        target: ".env",
+        example: ".env.example",
+        required: keys
+      };
+      logSuccess(`Detected ${keys.length} env vars from .env.example: ${keys.join(", ")}`);
+    }
+  } catch {
+  }
+  const dockerVersion = await probeToolVersion("docker --version");
+  if (dockerVersion) {
+    checks.commands = [
+      {
+        cmd: "docker info",
+        match: "Server Version",
+        errorMsg: "Docker daemon is not running. Start Docker Desktop or the Docker service."
+      }
+    ];
+    logSuccess(`Detected Docker \u2192 adding daemon check`);
+  }
+  const projectName = await detectProjectName();
+  return {
+    projectName,
+    version: "1.0.0",
+    checks
+  };
+}
+async function initCommand(options) {
+  const targetPath = resolve4(process.cwd(), CONFIG_FILENAME);
+  try {
+    await access2(targetPath);
+    throw new Error(
+      `${CONFIG_FILENAME} already exists in this directory. Delete it first to re-initialize.`
+    );
+  } catch {
+  }
+  let config;
+  if (options.detect) {
+    logInfo("Scanning environment...\n");
+    config = await buildDetectedConfig();
+    if (Object.keys(config.checks).length === 0) {
+      logWarn("No tools detected. Generating a minimal config.");
+      config.checks = { node: ">=18.0.0" };
+    }
+    console.log("");
+  } else {
+    config = {
+      projectName: await detectProjectName(),
+      version: "1.0.0",
+      checks: {
+        node: ">=18.0.0",
+        npm: ">=9.0.0",
+        files: ["package.json"]
+      }
+    };
+  }
+  try {
+    const content = JSON.stringify(config, null, 2) + "\n";
+    await writeFile(targetPath, content, "utf-8");
+    logSuccess(`Created ${CONFIG_FILENAME} \u2014 customize it for your project.`);
+  } catch (error) {
+    throw new Error(
+      `Failed to write ${CONFIG_FILENAME}: ${error instanceof Error ? error.message : String(error)}`
+    );
+  }
+}
+
+// src/index.ts
+var program = new Command();
+program.name("stackaudit").description(
+  "Audit your development environment against a declarative configuration file."
+).version("0.1.0");
+program.command("check").description("Run all environment checks defined in stackAudit.config.json").option("-c, --config <path>", "Path to config file", "stackAudit.config.json").option("-v, --verbose", "Show detailed output for all checks", false).option("--ci", "CI mode \u2014 no spinners, plain output", false).option("--json", "Output results as JSON (implies --ci)", false).option(
+  "--trust-commands",
+  "Allow execution of custom commands not on the safe allowlist",
+  false
+).action(async (opts) => {
+  await checkCommand({
+    config: opts.config,
+    verbose: opts.verbose,
+    ci: opts.ci || opts.json,
+    json: opts.json,
+    trustCommands: opts.trustCommands
+  });
+});
+program.command("init").description("Generate a starter stackAudit.config.json in the current directory").option("-d, --detect", "Auto-detect installed tools and populate config", false).action(async (opts) => {
+  await initCommand({ detect: opts.detect });
+});
+program.parse();
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/commands/check.ts","../src/core/configLoader.ts","../src/schemas/config.schema.ts","../src/checks/nodeVersion.ts","../src/utils/system.ts","../src/checks/npmVersion.ts","../src/checks/envVars.ts","../src/checks/ports.ts","../src/checks/files.ts","../src/checks/commands.ts","../src/checks/index.ts","../src/core/runner.ts","../src/utils/logger.ts","../src/commands/init.ts"],"sourcesContent":["#!/usr/bin/env node\n\nimport { Command } from \"commander\";\nimport { checkCommand } from \"./commands/check.js\";\nimport { initCommand } from \"./commands/init.js\";\n\nconst program = new Command();\n\nprogram\n  .name(\"stackaudit\")\n  .description(\n    \"Audit your development environment against a declarative configuration file.\",\n  )\n  .version(\"0.1.0\");\n\nprogram\n  .command(\"check\")\n  .description(\"Run all environment checks defined in stackAudit.config.json\")\n  .option(\"-c, --config <path>\", \"Path to config file\", \"stackAudit.config.json\")\n  .option(\"-v, --verbose\", \"Show detailed output for all checks\", false)\n  .option(\"--ci\", \"CI mode — no spinners, plain output\", false)\n  .option(\"--json\", \"Output results as JSON (implies --ci)\", false)\n  .option(\n    \"--trust-commands\",\n    \"Allow execution of custom commands not on the safe allowlist\",\n    false,\n  )\n  .action(async (opts) => {\n    await checkCommand({\n      config: opts.config,\n      verbose: opts.verbose,\n      ci: opts.ci || opts.json,\n      json: opts.json,\n      trustCommands: opts.trustCommands,\n    });\n  });\n\nprogram\n  .command(\"init\")\n  .description(\"Generate a starter stackAudit.config.json in the current directory\")\n  .option(\"-d, --detect\", \"Auto-detect installed tools and populate config\", false)\n  .action(async (opts) => {\n    await initCommand({ detect: opts.detect });\n  });\n\nprogram.parse();\n","import ora from \"ora\";\nimport { loadConfig } from \"../core/configLoader.js\";\nimport { runAudit } from \"../core/runner.js\";\nimport { formatReport, logError } from \"../utils/logger.js\";\nimport type { CLIOptions } from \"../types.js\";\n\n/**\n * The \"check\" command — main entry point for environment auditing.\n *\n * Flow:\n * 1. Load and validate config\n * 2. Run all checkers in parallel\n * 3. Render report (text, verbose, or JSON)\n * 4. Exit with appropriate code (using process.exitCode for clean flush)\n */\nexport async function checkCommand(options: CLIOptions): Promise<void> {\n  const silent = options.ci || options.json;\n  const spinner = silent ? null : ora(\"Loading configuration...\").start();\n\n  let config;\n  try {\n    config = await loadConfig(options.config);\n    spinner?.succeed(`Loaded config for \"${config.projectName}\"`);\n  } catch (error) {\n    spinner?.fail(\"Configuration error\");\n    logError(error instanceof Error ? error.message : String(error));\n    process.exitCode = 2;\n    return;\n  }\n\n  spinner?.start(\"Running checks...\");\n  const report = await runAudit(config, { trustCommands: options.trustCommands });\n  spinner?.stop();\n\n  console.log(formatReport(report, { verbose: options.verbose, json: options.json }));\n\n  if (report.summary.failed > 0) {\n    process.exitCode = 1;\n  }\n}\n","import { readFile } from \"node:fs/promises\";\nimport { resolve } from \"node:path\";\nimport { configSchema } from \"../schemas/config.schema.js\";\nimport type { StackAuditConfig } from \"../types.js\";\n\nconst DEFAULT_CONFIG_FILE = \"stackAudit.config.json\";\n\n/**\n * Loads and validates the stackAudit configuration file.\n *\n * Flow:\n * 1. Resolve the config file path relative to CWD\n * 2. Read and parse as JSON\n * 3. Validate against the Zod schema\n * 4. Return the typed config or throw with actionable errors\n */\nexport async function loadConfig(\n  configPath?: string,\n): Promise<StackAuditConfig> {\n  const filePath = resolve(process.cwd(), configPath ?? DEFAULT_CONFIG_FILE);\n\n  let raw: string;\n  try {\n    raw = await readFile(filePath, \"utf-8\");\n  } catch {\n    throw new Error(\n      `Config file not found: ${filePath}\\n` +\n        `Run \"stackaudit init\" to create one, or use --config to specify a path.`,\n    );\n  }\n\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(raw);\n  } catch {\n    throw new Error(\n      `Invalid JSON in config file: ${filePath}\\n` +\n        `Check for trailing commas or syntax errors.`,\n    );\n  }\n\n  const result = configSchema.safeParse(parsed);\n\n  if (!result.success) {\n    const issues = result.error.issues\n      .map((issue) => `  - ${issue.path.join(\".\")}: ${issue.message}`)\n      .join(\"\\n\");\n\n    throw new Error(\n      `Invalid configuration in ${filePath}:\\n${issues}`,\n    );\n  }\n\n  return result.data as StackAuditConfig;\n}\n","import { z } from \"zod\";\n\nconst portSchema = z.object({\n  port: z.number().int().min(1).max(65535),\n  name: z.string().min(1),\n  type: z.enum([\"tcp\"]).optional().default(\"tcp\"),\n});\n\nconst envSchema = z.object({\n  target: z.string().min(1),\n  example: z.string().min(1),\n  required: z.array(z.string().min(1)).min(1, \"At least one required env var must be specified\"),\n});\n\nconst commandSchema = z.object({\n  cmd: z.string().min(1),\n  match: z.string().optional(),\n  errorMsg: z.string().optional(),\n});\n\n/**\n * Semver range string — validates that the value is a non-empty string\n * that semver can interpret. Prevents empty strings from bypassing\n * the \"at least one check\" refinement while producing zero actual checks.\n */\nconst semverRangeString = z.string().min(1, \"Semver range cannot be empty\");\n\nconst checksSchema = z\n  .object({\n    node: semverRangeString.optional(),\n    npm: semverRangeString.optional(),\n    env: envSchema.optional(),\n    ports: z.array(portSchema).min(1, \"Ports array cannot be empty\").optional(),\n    files: z.array(z.string().min(1)).min(1, \"Files array cannot be empty\").optional(),\n    commands: z.array(commandSchema).min(1, \"Commands array cannot be empty\").optional(),\n  })\n  .refine(\n    (checks) => {\n      // Count checks that actually produce work — excludes undefined keys\n      // and explicitly guards against the \"empty config = exit 0\" false positive.\n      const hasNode = checks.node !== undefined;\n      const hasNpm = checks.npm !== undefined;\n      const hasEnv = checks.env !== undefined;\n      const hasPorts = checks.ports !== undefined && checks.ports.length > 0;\n      const hasFiles = checks.files !== undefined && checks.files.length > 0;\n      const hasCommands = checks.commands !== undefined && checks.commands.length > 0;\n\n      return hasNode || hasNpm || hasEnv || hasPorts || hasFiles || hasCommands;\n    },\n    { message: \"At least one check must be configured\" },\n  );\n\nexport const configSchema = z.object({\n  projectName: z.string().min(1, \"projectName is required\"),\n  version: z.string().min(1, \"version is required\"),\n  checks: checksSchema,\n});\n\nexport type ConfigSchemaInput = z.input<typeof configSchema>;\nexport type ConfigSchemaOutput = z.output<typeof configSchema>;\n","import semver from \"semver\";\nimport { timedCheck } from \"../utils/system.js\";\nimport type { CheckResult } from \"../types.js\";\n\n/**\n * Validates that the current Node.js version satisfies\n * the semver range specified in the config.\n *\n * Uses process.version directly — no subprocess needed.\n */\nexport function checkNodeVersion(requiredRange: string): () => Promise<CheckResult[]> {\n  return async () => {\n    const result = await timedCheck(\"Node.js Version\", async () => {\n      const current = process.version;\n      const cleanCurrent = semver.clean(current);\n\n      if (!cleanCurrent) {\n        return {\n          status: \"fail\" as const,\n          message: `Could not parse current Node.js version: ${current}`,\n        };\n      }\n\n      if (!semver.validRange(requiredRange)) {\n        return {\n          status: \"fail\" as const,\n          message: `Invalid semver range in config: \"${requiredRange}\"`,\n        };\n      }\n\n      if (semver.satisfies(cleanCurrent, requiredRange)) {\n        return {\n          status: \"pass\" as const,\n          message: `v${cleanCurrent} satisfies ${requiredRange}`,\n        };\n      }\n\n      return {\n        status: \"fail\" as const,\n        message: `v${cleanCurrent} does not satisfy ${requiredRange}`,\n      };\n    });\n\n    return [result];\n  };\n}\n","import { execa } from \"execa\";\nimport type { CheckResult } from \"../types.js\";\n\n/**\n * Allowlist of commands considered safe for automatic execution.\n * Commands not on this list require explicit user consent via --trust-commands.\n *\n * Only commands that read system state (version checks, service status)\n * belong here. Never add commands that modify state (rm, mv, curl, wget, etc).\n */\n/**\n * Only EXACT read-only commands belong here.\n * NEVER add bare tool names like \"node\", \"npm\", \"npx\" — they allow\n * arbitrary code execution (e.g. `node -e`, `npx evil-pkg`, `npm exec`).\n */\nconst SAFE_COMMAND_PREFIXES = [\n  \"node --version\",\n  \"node -v\",\n  \"npm --version\",\n  \"npm -v\",\n  \"docker info\",\n  \"docker --version\",\n  \"docker compose version\",\n  \"git --version\",\n  \"python --version\",\n  \"python3 --version\",\n  \"ruby --version\",\n  \"java --version\",\n  \"javac --version\",\n  \"go version\",\n  \"rustc --version\",\n  \"cargo --version\",\n];\n\n/**\n * Checks if a command is on the safe allowlist.\n */\nexport function isCommandAllowed(command: string): boolean {\n  const normalized = command.trim();\n  return SAFE_COMMAND_PREFIXES.some((safeCmd) => normalized === safeCmd);\n}\n\n/**\n * Parses a command string into [executable, ...args] respecting\n * single and double quotes.\n *\n * \"grep 'Server Version' file.log\"  → [\"grep\", \"Server Version\", \"file.log\"]\n * \"echo \\\"hello world\\\"\"            → [\"echo\", \"hello world\"]\n *\n * This avoids the naive split(/\\s+/) which breaks quoted arguments.\n */\nexport function parseCommand(command: string): string[] {\n  const tokens: string[] = [];\n  let current = \"\";\n  let inSingle = false;\n  let inDouble = false;\n  let escaped = false;\n\n  for (const char of command) {\n    if (escaped) {\n      current += char;\n      escaped = false;\n      continue;\n    }\n\n    if (char === \"\\\\\" && !inSingle) {\n      escaped = true;\n      continue;\n    }\n\n    if (char === \"'\" && !inDouble) {\n      inSingle = !inSingle;\n      continue;\n    }\n\n    if (char === '\"' && !inSingle) {\n      inDouble = !inDouble;\n      continue;\n    }\n\n    if (/\\s/.test(char) && !inSingle && !inDouble) {\n      if (current.length > 0) {\n        tokens.push(current);\n        current = \"\";\n      }\n      continue;\n    }\n\n    current += char;\n  }\n\n  if (current.length > 0) {\n    tokens.push(current);\n  }\n\n  return tokens;\n}\n\n/**\n * Executes a shell command and returns its stdout.\n * Throws if the command fails or is not found.\n *\n * Uses a proper token parser instead of naive split, so quoted\n * arguments like \"grep 'Server Version' file\" work correctly.\n *\n * Shell operators (|, >, &&, ;) are NOT interpreted because execa\n * runs without shell: true. This is a security feature.\n */\nexport async function execCommand(command: string): Promise<string> {\n  const tokens = parseCommand(command);\n\n  if (tokens.length === 0) {\n    throw new Error(\"Empty command\");\n  }\n\n  const [cmd, ...args] = tokens;\n\n  const result = await execa(cmd, args, {\n    timeout: 10_000,\n    reject: false,\n  });\n\n  if (result.failed) {\n    throw new Error(result.stderr || `Command \"${command}\" failed`);\n  }\n\n  return result.stdout;\n}\n\n/**\n * Measures the execution time of an async check function.\n * Wraps exceptions into a fail CheckResult so the runner never crashes.\n */\nexport async function timedCheck(\n  name: string,\n  fn: () => Promise<Omit<CheckResult, \"name\" | \"duration\">>,\n): Promise<CheckResult> {\n  const start = performance.now();\n  try {\n    const partial = await fn();\n    return {\n      name,\n      ...partial,\n      duration: Math.round(performance.now() - start),\n    };\n  } catch (error) {\n    return {\n      name,\n      status: \"fail\",\n      message: error instanceof Error ? error.message : String(error),\n      duration: Math.round(performance.now() - start),\n    };\n  }\n}\n","import semver from \"semver\";\nimport { execCommand, timedCheck } from \"../utils/system.js\";\nimport type { CheckResult } from \"../types.js\";\n\n/**\n * Validates that the installed npm version satisfies\n * the semver range from config. Requires shelling out\n * since npm version is not available on process.\n */\nexport function checkNpmVersion(requiredRange: string): () => Promise<CheckResult[]> {\n  return async () => {\n    const result = await timedCheck(\"npm Version\", async () => {\n      const stdout = await execCommand(\"npm --version\");\n      const current = semver.clean(stdout.trim());\n\n      if (!current) {\n        return {\n          status: \"fail\" as const,\n          message: `Could not parse npm version from output: \"${stdout.trim()}\"`,\n        };\n      }\n\n      if (!semver.validRange(requiredRange)) {\n        return {\n          status: \"fail\" as const,\n          message: `Invalid semver range in config: \"${requiredRange}\"`,\n        };\n      }\n\n      if (semver.satisfies(current, requiredRange)) {\n        return {\n          status: \"pass\" as const,\n          message: `v${current} satisfies ${requiredRange}`,\n        };\n      }\n\n      return {\n        status: \"fail\" as const,\n        message: `v${current} does not satisfy ${requiredRange}`,\n      };\n    });\n\n    return [result];\n  };\n}\n","import { readFile } from \"node:fs/promises\";\nimport { resolve, relative, isAbsolute } from \"node:path\";\nimport { parse as dotenvParse } from \"dotenv\";\nimport { timedCheck } from \"../utils/system.js\";\nimport type { CheckResult, EnvConfig } from \"../types.js\";\n\n/**\n * Validates environment variables following the \"Closed Eyes\" principle:\n * - Checks if required keys EXIST in the target .env file\n * - Checks if values are NON-EMPTY\n * - NEVER logs or exposes the actual secret values\n *\n * Security: Rejects env.target paths that resolve outside CWD.\n * Uses dotenv.parse() instead of dotenv.config() to avoid\n * injecting values into process.env as a side-effect.\n */\nexport function checkEnvVars(envConfig: EnvConfig): () => Promise<CheckResult[]> {\n  return async () => {\n    const results: CheckResult[] = [];\n    const cwd = process.cwd();\n\n    // Path traversal guard\n    if (isAbsolute(envConfig.target)) {\n      results.push({\n        name: `Env File (${envConfig.target})`,\n        status: \"fail\",\n        message: `Absolute paths are not allowed for env.target: \"${envConfig.target}\"`,\n        duration: 0,\n      });\n      return results;\n    }\n\n    const targetPath = resolve(cwd, envConfig.target);\n    const rel = relative(cwd, targetPath);\n    if (rel.startsWith(\"..\")) {\n      results.push({\n        name: `Env File (${envConfig.target})`,\n        status: \"fail\",\n        message: `Path traversal detected: \"${envConfig.target}\" resolves outside the project directory`,\n        duration: 0,\n      });\n      return results;\n    }\n\n    let envKeys: Record<string, string> = {};\n\n    const fileCheck = await timedCheck(`Env File (${envConfig.target})`, async () => {\n      let content: string;\n      try {\n        content = await readFile(targetPath, \"utf-8\");\n      } catch {\n        // CI/CD Support: It's okay if .env is missing, as long as variables are in process.env\n        return {\n          status: \"pass\",\n          message: `File not found: ${envConfig.target} (Using process.env)`,\n        };\n      }\n\n      envKeys = dotenvParse(content);\n\n      return {\n        status: \"pass\" as const,\n        message: `${envConfig.target} loaded successfully`,\n      };\n    });\n\n    results.push(fileCheck);\n\n    // Proceed to check keys regardless of file existence\n\n\n    for (const key of envConfig.required) {\n      const keyResult = await timedCheck(`Env: ${key}`, async () => {\n        const value = envKeys[key] ?? process.env[key];\n\n        if (value === undefined) {\n          return {\n            status: \"fail\" as const,\n            message: `Missing required variable \"${key}\" in ${envConfig.target} and process.env`,\n          };\n        }\n\n        if (value.trim() === \"\") {\n          return {\n            status: \"fail\" as const,\n            message: `Variable \"${key}\" exists but is empty`,\n          };\n        }\n\n        return {\n          status: \"pass\" as const,\n          message: `\"${key}\" is set (value hidden)`,\n        };\n      });\n\n      results.push(keyResult);\n    }\n\n    return results;\n  };\n}\n","import { createConnection } from \"node:net\";\nimport { timedCheck } from \"../utils/system.js\";\nimport type { CheckResult, PortConfig } from \"../types.js\";\n\nconst DEFAULT_TIMEOUT_MS = 3000;\n\n/**\n * Checks if a TCP port is accepting connections on localhost.\n * Uses a raw TCP socket with a timeout — no data is sent.\n */\nfunction probePort(port: number, timeoutMs: number = DEFAULT_TIMEOUT_MS): Promise<boolean> {\n  return new Promise((resolve) => {\n    const socket = createConnection({ port, host: \"127.0.0.1\" });\n\n    const timer = setTimeout(() => {\n      socket.destroy();\n      resolve(false);\n    }, timeoutMs);\n\n    socket.on(\"connect\", () => {\n      clearTimeout(timer);\n      socket.destroy();\n      resolve(true);\n    });\n\n    socket.on(\"error\", () => {\n      clearTimeout(timer);\n      socket.destroy();\n      resolve(false);\n    });\n  });\n}\n\nexport function checkPorts(portsConfig: PortConfig[]): () => Promise<CheckResult[]> {\n  return async () => {\n    const results: CheckResult[] = [];\n\n    for (const portDef of portsConfig) {\n      const result = await timedCheck(\n        `Port ${portDef.port} (${portDef.name})`,\n        async () => {\n          const isOpen = await probePort(portDef.port);\n\n          if (isOpen) {\n            return {\n              status: \"pass\" as const,\n              message: `${portDef.name} is accepting connections on port ${portDef.port}`,\n            };\n          }\n\n          return {\n            status: \"fail\" as const,\n            message: `Nothing listening on port ${portDef.port}. Is ${portDef.name} running?`,\n          };\n        },\n      );\n\n      results.push(result);\n    }\n\n    return results;\n  };\n}\n","import * as fs from \"node:fs/promises\";\nimport { resolve, relative, isAbsolute } from \"node:path\";\nimport { timedCheck } from \"../utils/system.js\";\nimport type { CheckResult } from \"../types.js\";\n\n/**\n * Checks that all required files exist in the project directory.\n *\n * Security: Rejects paths that resolve outside the CWD to prevent\n * a malicious config from probing the filesystem (e.g. \"../../etc/passwd\").\n */\nexport function checkFiles(filesList: string[]): () => Promise<CheckResult[]> {\n  return async () => {\n    const results: CheckResult[] = [];\n    const cwd = process.cwd();\n\n    for (const file of filesList) {\n      const result = await timedCheck(`File: ${file}`, async () => {\n        // Reject absolute paths outright\n        if (isAbsolute(file)) {\n          return {\n            status: \"fail\" as const,\n            message: `Absolute paths are not allowed in file checks: \"${file}\"`,\n          };\n        }\n\n        const filePath = resolve(cwd, file);\n        const realPath = await fs.realpath(filePath);\n        const rel = relative(cwd, realPath);\n        if (rel.startsWith(\"..\")) {\n          return {\n            status: \"fail\" as const,\n            message: `Path traversal detected: \"${file}\" resolves outside the project directory`,\n          };\n        }\n\n        try {\n          await fs.access(realPath);\n        } catch {\n          return {\n            status: \"fail\" as const,\n            message: `Required file not found: ${file}`,\n          };\n        }\n\n        return {\n          status: \"pass\" as const,\n          message: `${file} exists`,\n        };\n      });\n\n      results.push(result);\n    }\n\n    return results;\n  };\n}\n","import { execCommand, isCommandAllowed, timedCheck } from \"../utils/system.js\";\nimport type { CheckResult, CommandConfig } from \"../types.js\";\n\n/**\n * Executes custom shell commands and optionally matches output\n * against an expected string.\n *\n * Security: Commands not on the safe allowlist are SKIPPED unless\n * the user explicitly passes --trust-commands. This prevents a\n * malicious config file from executing arbitrary code on a\n * developer's machine during onboarding (clone + npx stackaudit check).\n */\nexport function checkCommands(\n  commandsConfig: CommandConfig[],\n  trustCommands: boolean = false,\n): () => Promise<CheckResult[]> {\n  return async () => {\n    const results: CheckResult[] = [];\n\n    for (const cmdDef of commandsConfig) {\n      const label = cmdDef.cmd.length > 40\n        ? cmdDef.cmd.slice(0, 37) + \"...\"\n        : cmdDef.cmd;\n\n      // Gate: refuse to execute untrusted commands without explicit consent\n      if (!trustCommands && !isCommandAllowed(cmdDef.cmd)) {\n        results.push({\n          name: `Command: ${label}`,\n          status: \"skip\",\n          message:\n            `Skipped untrusted command: \"${cmdDef.cmd}\". ` +\n            `Use --trust-commands to allow execution of custom commands.`,\n          duration: 0,\n        });\n        continue;\n      }\n\n      const result = await timedCheck(`Command: ${label}`, async () => {\n        let stdout: string;\n        try {\n          stdout = await execCommand(cmdDef.cmd);\n        } catch (error) {\n          const msg =\n            cmdDef.errorMsg ??\n            `Command failed: \"${cmdDef.cmd}\" — ${error instanceof Error ? error.message : String(error)}`;\n          return { status: \"fail\" as const, message: msg };\n        }\n\n        if (cmdDef.match && !stdout.includes(cmdDef.match)) {\n          const msg =\n            cmdDef.errorMsg ??\n            `Output of \"${cmdDef.cmd}\" does not contain \"${cmdDef.match}\"`;\n          return { status: \"fail\" as const, message: msg };\n        }\n\n        return {\n          status: \"pass\" as const,\n          message: cmdDef.match\n            ? `\"${cmdDef.cmd}\" output contains \"${cmdDef.match}\"`\n            : `\"${cmdDef.cmd}\" executed successfully`,\n        };\n      });\n\n      results.push(result);\n    }\n\n    return results;\n  };\n}\n","import type { CheckerFn, ChecksConfig } from \"../types.js\";\nimport { checkNodeVersion } from \"./nodeVersion.js\";\nimport { checkNpmVersion } from \"./npmVersion.js\";\nimport { checkEnvVars } from \"./envVars.js\";\nimport { checkPorts } from \"./ports.js\";\nimport { checkFiles } from \"./files.js\";\nimport { checkCommands } from \"./commands.js\";\n\nexport interface PipelineOptions {\n  trustCommands: boolean;\n}\n\n/**\n * Builds the checker pipeline based on the config.\n * Only registers checkers for keys that are present in the config,\n * so users only run what they declare.\n */\nexport function buildCheckerPipeline(\n  checks: ChecksConfig,\n  options: PipelineOptions = { trustCommands: false },\n): CheckerFn[] {\n  const pipeline: CheckerFn[] = [];\n\n  if (checks.node) {\n    pipeline.push(checkNodeVersion(checks.node));\n  }\n\n  if (checks.npm) {\n    pipeline.push(checkNpmVersion(checks.npm));\n  }\n\n  if (checks.files && checks.files.length > 0) {\n    pipeline.push(checkFiles(checks.files));\n  }\n\n  if (checks.env) {\n    pipeline.push(checkEnvVars(checks.env));\n  }\n\n  if (checks.ports && checks.ports.length > 0) {\n    pipeline.push(checkPorts(checks.ports));\n  }\n\n  if (checks.commands && checks.commands.length > 0) {\n    pipeline.push(checkCommands(checks.commands, options.trustCommands));\n  }\n\n  return pipeline;\n}\n","import type {\n  AuditReport,\n  CheckerFn,\n  CheckResult,\n  StackAuditConfig,\n} from \"../types.js\";\nimport { buildCheckerPipeline, type PipelineOptions } from \"../checks/index.js\";\n\n/**\n * Executes all configured checkers in parallel and aggregates results.\n *\n * Uses Promise.allSettled to ensure every checker runs to completion\n * regardless of individual failures — the \"Fail Efficiently\" principle.\n */\nexport async function runAudit(\n  config: StackAuditConfig,\n  options: PipelineOptions = { trustCommands: false },\n): Promise<AuditReport> {\n  const checkers: CheckerFn[] = buildCheckerPipeline(config.checks, options);\n\n  const settled = await Promise.allSettled(\n    checkers.map((checker) => checker()),\n  );\n\n  const results: CheckResult[] = [];\n\n  for (const outcome of settled) {\n    if (outcome.status === \"fulfilled\") {\n      results.push(...outcome.value);\n    } else {\n      results.push({\n        name: \"Unknown Check\",\n        status: \"fail\",\n        message:\n          outcome.reason instanceof Error\n            ? outcome.reason.message\n            : String(outcome.reason),\n        duration: 0,\n      });\n    }\n  }\n\n  // Single-pass summary instead of 4x .filter() iterations\n  const summary = { passed: 0, failed: 0, warned: 0, skipped: 0, total: results.length };\n  for (const r of results) {\n    switch (r.status) {\n      case \"pass\": summary.passed++; break;\n      case \"fail\": summary.failed++; break;\n      case \"warn\": summary.warned++; break;\n      case \"skip\": summary.skipped++; break;\n    }\n  }\n\n  return {\n    projectName: config.projectName,\n    timestamp: new Date(),\n    results,\n    summary,\n  };\n}\n","import chalk from \"chalk\";\nimport boxen from \"boxen\";\nimport type { AuditReport, CheckResult, CLIOptions } from \"../types.js\";\n\nconst STATUS_ICONS: Record<string, string> = {\n  pass: chalk.green(\"✔\"),\n  fail: chalk.red(\"✖\"),\n  warn: chalk.yellow(\"⚠\"),\n  skip: chalk.gray(\"○\"),\n};\n\nexport function formatCheckResult(result: CheckResult, verbose: boolean): string {\n  const icon = STATUS_ICONS[result.status];\n  const duration = chalk.gray(`(${result.duration}ms)`);\n  const name = result.status === \"fail\" ? chalk.red(result.name) : result.name;\n\n  // In non-verbose mode, hide passing checks' messages for a cleaner output\n  if (!verbose && result.status === \"pass\") {\n    return `  ${icon} ${name} ${duration}`;\n  }\n\n  return `  ${icon} ${name} ${duration}\\n    ${chalk.gray(result.message)}`;\n}\n\nexport function formatReport(report: AuditReport, options: Pick<CLIOptions, \"verbose\" | \"json\">): string {\n  if (options.json) {\n    return JSON.stringify({\n      projectName: report.projectName,\n      timestamp: report.timestamp.toISOString(),\n      results: report.results,\n      summary: report.summary,\n    }, null, 2);\n  }\n\n  const lines: string[] = [];\n\n  lines.push(\"\");\n  for (const result of report.results) {\n    lines.push(formatCheckResult(result, options.verbose));\n  }\n  lines.push(\"\");\n\n  const { passed, failed, warned, skipped, total } = report.summary;\n\n  const summaryParts = [\n    chalk.green(`${passed} passed`),\n    failed > 0 ? chalk.red(`${failed} failed`) : null,\n    warned > 0 ? chalk.yellow(`${warned} warnings`) : null,\n    skipped > 0 ? chalk.gray(`${skipped} skipped`) : null,\n  ]\n    .filter(Boolean)\n    .join(chalk.gray(\" · \"));\n\n  const summaryLine = `${summaryParts} ${chalk.gray(`(${total} checks)`)}`;\n\n  const elapsed = report.results.reduce((sum, r) => sum + r.duration, 0);\n\n  const header =\n    failed > 0\n      ? chalk.red.bold(\"stackAudit — FAIL\")\n      : chalk.green.bold(\"stackAudit — PASS\");\n\n  const boxContent = [\n    header,\n    chalk.gray(`Project: ${report.projectName}`),\n    \"\",\n    summaryLine,\n    chalk.gray(`Done in ${elapsed}ms`),\n  ].join(\"\\n\");\n\n  lines.push(\n    boxen(boxContent, {\n      padding: 1,\n      margin: { top: 0, bottom: 0, left: 1, right: 1 },\n      borderColor: failed > 0 ? \"red\" : \"green\",\n      borderStyle: \"round\",\n    }),\n  );\n\n  return lines.join(\"\\n\");\n}\n\nexport function logError(message: string): void {\n  console.error(chalk.red.bold(\"Error:\"), message);\n}\n\nexport function logInfo(message: string): void {\n  console.log(chalk.blue(\"ℹ\"), message);\n}\n\nexport function logSuccess(message: string): void {\n  console.log(chalk.green(\"✔\"), message);\n}\n\nexport function logWarn(message: string): void {\n  console.log(chalk.yellow(\"⚠\"), message);\n}\n","import { access, readFile, writeFile } from \"node:fs/promises\";\nimport { basename, resolve } from \"node:path\";\nimport { logError, logInfo, logSuccess, logWarn } from \"../utils/logger.js\";\nimport { execCommand } from \"../utils/system.js\";\nimport type { ChecksConfig } from \"../types.js\";\n\nconst CONFIG_FILENAME = \"stackAudit.config.json\";\n\ninterface InitOptions {\n  detect: boolean;\n}\n\n/**\n * Probes for a command and returns its version, or null if not found.\n */\nasync function probeToolVersion(cmd: string): Promise<string | null> {\n  try {\n    const output = await execCommand(cmd);\n    return output.trim();\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Detects common project files in the current directory.\n */\nasync function detectFiles(candidates: string[]): Promise<string[]> {\n  const found: string[] = [];\n  for (const file of candidates) {\n    try {\n      await access(resolve(process.cwd(), file));\n      found.push(file);\n    } catch {\n      // not present\n    }\n  }\n  return found;\n}\n\n/**\n * Tries to read the project name from package.json.\n */\nasync function detectProjectName(): Promise<string> {\n  try {\n    const raw = await readFile(resolve(process.cwd(), \"package.json\"), \"utf-8\");\n    const pkg = JSON.parse(raw);\n    if (typeof pkg.name === \"string\" && pkg.name.length > 0) {\n      return pkg.name;\n    }\n  } catch {\n    // ignore\n  }\n  return basename(process.cwd());\n}\n\n/**\n * Builds a smart config by probing the local environment.\n */\nasync function buildDetectedConfig(): Promise<{ projectName: string; version: string; checks: ChecksConfig }> {\n  const checks: ChecksConfig = {};\n\n  // Detect Node.js\n  const nodeVersion = await probeToolVersion(\"node --version\");\n  if (nodeVersion) {\n    const major = nodeVersion.replace(/^v/, \"\").split(\".\")[0];\n    checks.node = `>=${major}.0.0`;\n    logSuccess(`Detected Node.js ${nodeVersion} → requiring >=${major}.0.0`);\n  }\n\n  // Detect npm\n  const npmVersion = await probeToolVersion(\"npm --version\");\n  if (npmVersion) {\n    const major = npmVersion.split(\".\")[0];\n    checks.npm = `>=${major}.0.0`;\n    logSuccess(`Detected npm ${npmVersion} → requiring >=${major}.0.0`);\n  }\n\n  // Detect common project files\n  const commonFiles = [\n    \"package.json\",\n    \"docker-compose.yml\",\n    \"docker-compose.yaml\",\n    \"Dockerfile\",\n    \"Makefile\",\n    \".env.example\",\n    \"tsconfig.json\",\n  ];\n\n  const foundFiles = await detectFiles(commonFiles);\n  if (foundFiles.length > 0) {\n    checks.files = foundFiles;\n    logSuccess(`Detected ${foundFiles.length} project files: ${foundFiles.join(\", \")}`);\n  }\n\n  // Detect .env.example and extract required keys\n  const envExamplePath = resolve(process.cwd(), \".env.example\");\n  try {\n    const content = await readFile(envExamplePath, \"utf-8\");\n    const keys = content\n      .split(\"\\n\")\n      .map((line) => line.trim())\n      .filter((line) => line && !line.startsWith(\"#\"))\n      .map((line) => line.split(\"=\")[0].trim())\n      .filter((key) => key.length > 0);\n\n    if (keys.length > 0) {\n      checks.env = {\n        target: \".env\",\n        example: \".env.example\",\n        required: keys,\n      };\n      logSuccess(`Detected ${keys.length} env vars from .env.example: ${keys.join(\", \")}`);\n    }\n  } catch {\n    // No .env.example\n  }\n\n  // Detect Docker\n  const dockerVersion = await probeToolVersion(\"docker --version\");\n  if (dockerVersion) {\n    checks.commands = [\n      {\n        cmd: \"docker info\",\n        match: \"Server Version\",\n        errorMsg: \"Docker daemon is not running. Start Docker Desktop or the Docker service.\",\n      },\n    ];\n    logSuccess(`Detected Docker → adding daemon check`);\n  }\n\n  const projectName = await detectProjectName();\n\n  return {\n    projectName,\n    version: \"1.0.0\",\n    checks,\n  };\n}\n\n/**\n * Generates a stackAudit.config.json in the current directory.\n * With --detect, probes the local environment to auto-populate config.\n */\nexport async function initCommand(options: InitOptions): Promise<void> {\n  const targetPath = resolve(process.cwd(), CONFIG_FILENAME);\n\n  try {\n    await access(targetPath);\n    throw new Error(\n      `${CONFIG_FILENAME} already exists in this directory. Delete it first to re-initialize.`,\n    );\n  } catch {\n    // File does not exist — proceed\n  }\n\n  let config;\n\n  if (options.detect) {\n    logInfo(\"Scanning environment...\\n\");\n    config = await buildDetectedConfig();\n\n    if (Object.keys(config.checks).length === 0) {\n      logWarn(\"No tools detected. Generating a minimal config.\");\n      config.checks = { node: \">=18.0.0\" };\n    }\n\n    console.log(\"\");\n  } else {\n    config = {\n      projectName: await detectProjectName(),\n      version: \"1.0.0\",\n      checks: {\n        node: \">=18.0.0\",\n        npm: \">=9.0.0\",\n        files: [\"package.json\"],\n      },\n    };\n  }\n\n  try {\n    const content = JSON.stringify(config, null, 2) + \"\\n\";\n    await writeFile(targetPath, content, \"utf-8\");\n    logSuccess(`Created ${CONFIG_FILENAME} — customize it for your project.`);\n  } catch (error) {\n    throw new Error(\n      `Failed to write ${CONFIG_FILENAME}: ${error instanceof Error ? error.message : String(error)}`,\n    );\n  }\n}\n"],"mappings":";;;AAEA,SAAS,eAAe;;;ACFxB,OAAO,SAAS;;;ACAhB,SAAS,gBAAgB;AACzB,SAAS,eAAe;;;ACDxB,SAAS,SAAS;AAElB,IAAM,aAAa,EAAE,OAAO;AAAA,EAC1B,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,KAAK;AAAA,EACvC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACtB,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,QAAQ,KAAK;AAChD,CAAC;AAED,IAAM,YAAY,EAAE,OAAO;AAAA,EACzB,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACxB,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACzB,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,GAAG,iDAAiD;AAC/F,CAAC;AAED,IAAM,gBAAgB,EAAE,OAAO;AAAA,EAC7B,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACrB,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,UAAU,EAAE,OAAO,EAAE,SAAS;AAChC,CAAC;AAOD,IAAM,oBAAoB,EAAE,OAAO,EAAE,IAAI,GAAG,8BAA8B;AAE1E,IAAM,eAAe,EAClB,OAAO;AAAA,EACN,MAAM,kBAAkB,SAAS;AAAA,EACjC,KAAK,kBAAkB,SAAS;AAAA,EAChC,KAAK,UAAU,SAAS;AAAA,EACxB,OAAO,EAAE,MAAM,UAAU,EAAE,IAAI,GAAG,6BAA6B,EAAE,SAAS;AAAA,EAC1E,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,GAAG,6BAA6B,EAAE,SAAS;AAAA,EACjF,UAAU,EAAE,MAAM,aAAa,EAAE,IAAI,GAAG,gCAAgC,EAAE,SAAS;AACrF,CAAC,EACA;AAAA,EACC,CAAC,WAAW;AAGV,UAAM,UAAU,OAAO,SAAS;AAChC,UAAM,SAAS,OAAO,QAAQ;AAC9B,UAAM,SAAS,OAAO,QAAQ;AAC9B,UAAM,WAAW,OAAO,UAAU,UAAa,OAAO,MAAM,SAAS;AACrE,UAAM,WAAW,OAAO,UAAU,UAAa,OAAO,MAAM,SAAS;AACrE,UAAM,cAAc,OAAO,aAAa,UAAa,OAAO,SAAS,SAAS;AAE9E,WAAO,WAAW,UAAU,UAAU,YAAY,YAAY;AAAA,EAChE;AAAA,EACA,EAAE,SAAS,wCAAwC;AACrD;AAEK,IAAM,eAAe,EAAE,OAAO;AAAA,EACnC,aAAa,EAAE,OAAO,EAAE,IAAI,GAAG,yBAAyB;AAAA,EACxD,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,qBAAqB;AAAA,EAChD,QAAQ;AACV,CAAC;;;ADnDD,IAAM,sBAAsB;AAW5B,eAAsB,WACpB,YAC2B;AAC3B,QAAM,WAAW,QAAQ,QAAQ,IAAI,GAAG,cAAc,mBAAmB;AAEzE,MAAI;AACJ,MAAI;AACF,UAAM,MAAM,SAAS,UAAU,OAAO;AAAA,EACxC,QAAQ;AACN,UAAM,IAAI;AAAA,MACR,0BAA0B,QAAQ;AAAA;AAAA,IAEpC;AAAA,EACF;AAEA,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,GAAG;AAAA,EACzB,QAAQ;AACN,UAAM,IAAI;AAAA,MACR,gCAAgC,QAAQ;AAAA;AAAA,IAE1C;AAAA,EACF;AAEA,QAAM,SAAS,aAAa,UAAU,MAAM;AAE5C,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,SAAS,OAAO,MAAM,OACzB,IAAI,CAAC,UAAU,OAAO,MAAM,KAAK,KAAK,GAAG,CAAC,KAAK,MAAM,OAAO,EAAE,EAC9D,KAAK,IAAI;AAEZ,UAAM,IAAI;AAAA,MACR,4BAA4B,QAAQ;AAAA,EAAM,MAAM;AAAA,IAClD;AAAA,EACF;AAEA,SAAO,OAAO;AAChB;;;AEtDA,OAAO,YAAY;;;ACAnB,SAAS,aAAa;AAetB,IAAM,wBAAwB;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAKO,SAAS,iBAAiB,SAA0B;AACzD,QAAM,aAAa,QAAQ,KAAK;AAChC,SAAO,sBAAsB,KAAK,CAAC,YAAY,eAAe,OAAO;AACvE;AAWO,SAAS,aAAa,SAA2B;AACtD,QAAM,SAAmB,CAAC;AAC1B,MAAI,UAAU;AACd,MAAI,WAAW;AACf,MAAI,WAAW;AACf,MAAI,UAAU;AAEd,aAAW,QAAQ,SAAS;AAC1B,QAAI,SAAS;AACX,iBAAW;AACX,gBAAU;AACV;AAAA,IACF;AAEA,QAAI,SAAS,QAAQ,CAAC,UAAU;AAC9B,gBAAU;AACV;AAAA,IACF;AAEA,QAAI,SAAS,OAAO,CAAC,UAAU;AAC7B,iBAAW,CAAC;AACZ;AAAA,IACF;AAEA,QAAI,SAAS,OAAO,CAAC,UAAU;AAC7B,iBAAW,CAAC;AACZ;AAAA,IACF;AAEA,QAAI,KAAK,KAAK,IAAI,KAAK,CAAC,YAAY,CAAC,UAAU;AAC7C,UAAI,QAAQ,SAAS,GAAG;AACtB,eAAO,KAAK,OAAO;AACnB,kBAAU;AAAA,MACZ;AACA;AAAA,IACF;AAEA,eAAW;AAAA,EACb;AAEA,MAAI,QAAQ,SAAS,GAAG;AACtB,WAAO,KAAK,OAAO;AAAA,EACrB;AAEA,SAAO;AACT;AAYA,eAAsB,YAAY,SAAkC;AAClE,QAAM,SAAS,aAAa,OAAO;AAEnC,MAAI,OAAO,WAAW,GAAG;AACvB,UAAM,IAAI,MAAM,eAAe;AAAA,EACjC;AAEA,QAAM,CAAC,KAAK,GAAG,IAAI,IAAI;AAEvB,QAAM,SAAS,MAAM,MAAM,KAAK,MAAM;AAAA,IACpC,SAAS;AAAA,IACT,QAAQ;AAAA,EACV,CAAC;AAED,MAAI,OAAO,QAAQ;AACjB,UAAM,IAAI,MAAM,OAAO,UAAU,YAAY,OAAO,UAAU;AAAA,EAChE;AAEA,SAAO,OAAO;AAChB;AAMA,eAAsB,WACpB,MACA,IACsB;AACtB,QAAM,QAAQ,YAAY,IAAI;AAC9B,MAAI;AACF,UAAM,UAAU,MAAM,GAAG;AACzB,WAAO;AAAA,MACL;AAAA,MACA,GAAG;AAAA,MACH,UAAU,KAAK,MAAM,YAAY,IAAI,IAAI,KAAK;AAAA,IAChD;AAAA,EACF,SAAS,OAAO;AACd,WAAO;AAAA,MACL;AAAA,MACA,QAAQ;AAAA,MACR,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,MAC9D,UAAU,KAAK,MAAM,YAAY,IAAI,IAAI,KAAK;AAAA,IAChD;AAAA,EACF;AACF;;;AD/IO,SAAS,iBAAiB,eAAqD;AACpF,SAAO,YAAY;AACjB,UAAM,SAAS,MAAM,WAAW,mBAAmB,YAAY;AAC7D,YAAM,UAAU,QAAQ;AACxB,YAAM,eAAe,OAAO,MAAM,OAAO;AAEzC,UAAI,CAAC,cAAc;AACjB,eAAO;AAAA,UACL,QAAQ;AAAA,UACR,SAAS,4CAA4C,OAAO;AAAA,QAC9D;AAAA,MACF;AAEA,UAAI,CAAC,OAAO,WAAW,aAAa,GAAG;AACrC,eAAO;AAAA,UACL,QAAQ;AAAA,UACR,SAAS,oCAAoC,aAAa;AAAA,QAC5D;AAAA,MACF;AAEA,UAAI,OAAO,UAAU,cAAc,aAAa,GAAG;AACjD,eAAO;AAAA,UACL,QAAQ;AAAA,UACR,SAAS,IAAI,YAAY,cAAc,aAAa;AAAA,QACtD;AAAA,MACF;AAEA,aAAO;AAAA,QACL,QAAQ;AAAA,QACR,SAAS,IAAI,YAAY,qBAAqB,aAAa;AAAA,MAC7D;AAAA,IACF,CAAC;AAED,WAAO,CAAC,MAAM;AAAA,EAChB;AACF;;;AE7CA,OAAOA,aAAY;AASZ,SAAS,gBAAgB,eAAqD;AACnF,SAAO,YAAY;AACjB,UAAM,SAAS,MAAM,WAAW,eAAe,YAAY;AACzD,YAAM,SAAS,MAAM,YAAY,eAAe;AAChD,YAAM,UAAUC,QAAO,MAAM,OAAO,KAAK,CAAC;AAE1C,UAAI,CAAC,SAAS;AACZ,eAAO;AAAA,UACL,QAAQ;AAAA,UACR,SAAS,6CAA6C,OAAO,KAAK,CAAC;AAAA,QACrE;AAAA,MACF;AAEA,UAAI,CAACA,QAAO,WAAW,aAAa,GAAG;AACrC,eAAO;AAAA,UACL,QAAQ;AAAA,UACR,SAAS,oCAAoC,aAAa;AAAA,QAC5D;AAAA,MACF;AAEA,UAAIA,QAAO,UAAU,SAAS,aAAa,GAAG;AAC5C,eAAO;AAAA,UACL,QAAQ;AAAA,UACR,SAAS,IAAI,OAAO,cAAc,aAAa;AAAA,QACjD;AAAA,MACF;AAEA,aAAO;AAAA,QACL,QAAQ;AAAA,QACR,SAAS,IAAI,OAAO,qBAAqB,aAAa;AAAA,MACxD;AAAA,IACF,CAAC;AAED,WAAO,CAAC,MAAM;AAAA,EAChB;AACF;;;AC5CA,SAAS,YAAAC,iBAAgB;AACzB,SAAS,WAAAC,UAAS,UAAU,kBAAkB;AAC9C,SAAS,SAAS,mBAAmB;AAc9B,SAAS,aAAa,WAAoD;AAC/E,SAAO,YAAY;AACjB,UAAM,UAAyB,CAAC;AAChC,UAAM,MAAM,QAAQ,IAAI;AAGxB,QAAI,WAAW,UAAU,MAAM,GAAG;AAChC,cAAQ,KAAK;AAAA,QACX,MAAM,aAAa,UAAU,MAAM;AAAA,QACnC,QAAQ;AAAA,QACR,SAAS,mDAAmD,UAAU,MAAM;AAAA,QAC5E,UAAU;AAAA,MACZ,CAAC;AACD,aAAO;AAAA,IACT;AAEA,UAAM,aAAaC,SAAQ,KAAK,UAAU,MAAM;AAChD,UAAM,MAAM,SAAS,KAAK,UAAU;AACpC,QAAI,IAAI,WAAW,IAAI,GAAG;AACxB,cAAQ,KAAK;AAAA,QACX,MAAM,aAAa,UAAU,MAAM;AAAA,QACnC,QAAQ;AAAA,QACR,SAAS,6BAA6B,UAAU,MAAM;AAAA,QACtD,UAAU;AAAA,MACZ,CAAC;AACD,aAAO;AAAA,IACT;AAEA,QAAI,UAAkC,CAAC;AAEvC,UAAM,YAAY,MAAM,WAAW,aAAa,UAAU,MAAM,KAAK,YAAY;AAC/E,UAAI;AACJ,UAAI;AACF,kBAAU,MAAMC,UAAS,YAAY,OAAO;AAAA,MAC9C,QAAQ;AAEN,eAAO;AAAA,UACL,QAAQ;AAAA,UACR,SAAS,mBAAmB,UAAU,MAAM;AAAA,QAC9C;AAAA,MACF;AAEA,gBAAU,YAAY,OAAO;AAE7B,aAAO;AAAA,QACL,QAAQ;AAAA,QACR,SAAS,GAAG,UAAU,MAAM;AAAA,MAC9B;AAAA,IACF,CAAC;AAED,YAAQ,KAAK,SAAS;AAKtB,eAAW,OAAO,UAAU,UAAU;AACpC,YAAM,YAAY,MAAM,WAAW,QAAQ,GAAG,IAAI,YAAY;AAC5D,cAAM,QAAQ,QAAQ,GAAG,KAAK,QAAQ,IAAI,GAAG;AAE7C,YAAI,UAAU,QAAW;AACvB,iBAAO;AAAA,YACL,QAAQ;AAAA,YACR,SAAS,8BAA8B,GAAG,QAAQ,UAAU,MAAM;AAAA,UACpE;AAAA,QACF;AAEA,YAAI,MAAM,KAAK,MAAM,IAAI;AACvB,iBAAO;AAAA,YACL,QAAQ;AAAA,YACR,SAAS,aAAa,GAAG;AAAA,UAC3B;AAAA,QACF;AAEA,eAAO;AAAA,UACL,QAAQ;AAAA,UACR,SAAS,IAAI,GAAG;AAAA,QAClB;AAAA,MACF,CAAC;AAED,cAAQ,KAAK,SAAS;AAAA,IACxB;AAEA,WAAO;AAAA,EACT;AACF;;;ACpGA,SAAS,wBAAwB;AAIjC,IAAM,qBAAqB;AAM3B,SAAS,UAAU,MAAc,YAAoB,oBAAsC;AACzF,SAAO,IAAI,QAAQ,CAACC,aAAY;AAC9B,UAAM,SAAS,iBAAiB,EAAE,MAAM,MAAM,YAAY,CAAC;AAE3D,UAAM,QAAQ,WAAW,MAAM;AAC7B,aAAO,QAAQ;AACf,MAAAA,SAAQ,KAAK;AAAA,IACf,GAAG,SAAS;AAEZ,WAAO,GAAG,WAAW,MAAM;AACzB,mBAAa,KAAK;AAClB,aAAO,QAAQ;AACf,MAAAA,SAAQ,IAAI;AAAA,IACd,CAAC;AAED,WAAO,GAAG,SAAS,MAAM;AACvB,mBAAa,KAAK;AAClB,aAAO,QAAQ;AACf,MAAAA,SAAQ,KAAK;AAAA,IACf,CAAC;AAAA,EACH,CAAC;AACH;AAEO,SAAS,WAAW,aAAyD;AAClF,SAAO,YAAY;AACjB,UAAM,UAAyB,CAAC;AAEhC,eAAW,WAAW,aAAa;AACjC,YAAM,SAAS,MAAM;AAAA,QACnB,QAAQ,QAAQ,IAAI,KAAK,QAAQ,IAAI;AAAA,QACrC,YAAY;AACV,gBAAM,SAAS,MAAM,UAAU,QAAQ,IAAI;AAE3C,cAAI,QAAQ;AACV,mBAAO;AAAA,cACL,QAAQ;AAAA,cACR,SAAS,GAAG,QAAQ,IAAI,qCAAqC,QAAQ,IAAI;AAAA,YAC3E;AAAA,UACF;AAEA,iBAAO;AAAA,YACL,QAAQ;AAAA,YACR,SAAS,6BAA6B,QAAQ,IAAI,QAAQ,QAAQ,IAAI;AAAA,UACxE;AAAA,QACF;AAAA,MACF;AAEA,cAAQ,KAAK,MAAM;AAAA,IACrB;AAEA,WAAO;AAAA,EACT;AACF;;;AC9DA,YAAY,QAAQ;AACpB,SAAS,WAAAC,UAAS,YAAAC,WAAU,cAAAC,mBAAkB;AAUvC,SAAS,WAAW,WAAmD;AAC5E,SAAO,YAAY;AACjB,UAAM,UAAyB,CAAC;AAChC,UAAM,MAAM,QAAQ,IAAI;AAExB,eAAW,QAAQ,WAAW;AAC5B,YAAM,SAAS,MAAM,WAAW,SAAS,IAAI,IAAI,YAAY;AAE3D,YAAIC,YAAW,IAAI,GAAG;AACpB,iBAAO;AAAA,YACL,QAAQ;AAAA,YACR,SAAS,mDAAmD,IAAI;AAAA,UAClE;AAAA,QACF;AAEA,cAAM,WAAWC,SAAQ,KAAK,IAAI;AAClC,cAAM,WAAW,MAAS,YAAS,QAAQ;AAC3C,cAAM,MAAMC,UAAS,KAAK,QAAQ;AAClC,YAAI,IAAI,WAAW,IAAI,GAAG;AACxB,iBAAO;AAAA,YACL,QAAQ;AAAA,YACR,SAAS,6BAA6B,IAAI;AAAA,UAC5C;AAAA,QACF;AAEA,YAAI;AACF,gBAAS,UAAO,QAAQ;AAAA,QAC1B,QAAQ;AACN,iBAAO;AAAA,YACL,QAAQ;AAAA,YACR,SAAS,4BAA4B,IAAI;AAAA,UAC3C;AAAA,QACF;AAEA,eAAO;AAAA,UACL,QAAQ;AAAA,UACR,SAAS,GAAG,IAAI;AAAA,QAClB;AAAA,MACF,CAAC;AAED,cAAQ,KAAK,MAAM;AAAA,IACrB;AAEA,WAAO;AAAA,EACT;AACF;;;AC5CO,SAAS,cACd,gBACA,gBAAyB,OACK;AAC9B,SAAO,YAAY;AACjB,UAAM,UAAyB,CAAC;AAEhC,eAAW,UAAU,gBAAgB;AACnC,YAAM,QAAQ,OAAO,IAAI,SAAS,KAC9B,OAAO,IAAI,MAAM,GAAG,EAAE,IAAI,QAC1B,OAAO;AAGX,UAAI,CAAC,iBAAiB,CAAC,iBAAiB,OAAO,GAAG,GAAG;AACnD,gBAAQ,KAAK;AAAA,UACX,MAAM,YAAY,KAAK;AAAA,UACvB,QAAQ;AAAA,UACR,SACE,+BAA+B,OAAO,GAAG;AAAA,UAE3C,UAAU;AAAA,QACZ,CAAC;AACD;AAAA,MACF;AAEA,YAAM,SAAS,MAAM,WAAW,YAAY,KAAK,IAAI,YAAY;AAC/D,YAAI;AACJ,YAAI;AACF,mBAAS,MAAM,YAAY,OAAO,GAAG;AAAA,QACvC,SAAS,OAAO;AACd,gBAAM,MACJ,OAAO,YACP,oBAAoB,OAAO,GAAG,YAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAC7F,iBAAO,EAAE,QAAQ,QAAiB,SAAS,IAAI;AAAA,QACjD;AAEA,YAAI,OAAO,SAAS,CAAC,OAAO,SAAS,OAAO,KAAK,GAAG;AAClD,gBAAM,MACJ,OAAO,YACP,cAAc,OAAO,GAAG,uBAAuB,OAAO,KAAK;AAC7D,iBAAO,EAAE,QAAQ,QAAiB,SAAS,IAAI;AAAA,QACjD;AAEA,eAAO;AAAA,UACL,QAAQ;AAAA,UACR,SAAS,OAAO,QACZ,IAAI,OAAO,GAAG,sBAAsB,OAAO,KAAK,MAChD,IAAI,OAAO,GAAG;AAAA,QACpB;AAAA,MACF,CAAC;AAED,cAAQ,KAAK,MAAM;AAAA,IACrB;AAEA,WAAO;AAAA,EACT;AACF;;;ACnDO,SAAS,qBACd,QACA,UAA2B,EAAE,eAAe,MAAM,GACrC;AACb,QAAM,WAAwB,CAAC;AAE/B,MAAI,OAAO,MAAM;AACf,aAAS,KAAK,iBAAiB,OAAO,IAAI,CAAC;AAAA,EAC7C;AAEA,MAAI,OAAO,KAAK;AACd,aAAS,KAAK,gBAAgB,OAAO,GAAG,CAAC;AAAA,EAC3C;AAEA,MAAI,OAAO,SAAS,OAAO,MAAM,SAAS,GAAG;AAC3C,aAAS,KAAK,WAAW,OAAO,KAAK,CAAC;AAAA,EACxC;AAEA,MAAI,OAAO,KAAK;AACd,aAAS,KAAK,aAAa,OAAO,GAAG,CAAC;AAAA,EACxC;AAEA,MAAI,OAAO,SAAS,OAAO,MAAM,SAAS,GAAG;AAC3C,aAAS,KAAK,WAAW,OAAO,KAAK,CAAC;AAAA,EACxC;AAEA,MAAI,OAAO,YAAY,OAAO,SAAS,SAAS,GAAG;AACjD,aAAS,KAAK,cAAc,OAAO,UAAU,QAAQ,aAAa,CAAC;AAAA,EACrE;AAEA,SAAO;AACT;;;AClCA,eAAsB,SACpB,QACA,UAA2B,EAAE,eAAe,MAAM,GAC5B;AACtB,QAAM,WAAwB,qBAAqB,OAAO,QAAQ,OAAO;AAEzE,QAAM,UAAU,MAAM,QAAQ;AAAA,IAC5B,SAAS,IAAI,CAAC,YAAY,QAAQ,CAAC;AAAA,EACrC;AAEA,QAAM,UAAyB,CAAC;AAEhC,aAAW,WAAW,SAAS;AAC7B,QAAI,QAAQ,WAAW,aAAa;AAClC,cAAQ,KAAK,GAAG,QAAQ,KAAK;AAAA,IAC/B,OAAO;AACL,cAAQ,KAAK;AAAA,QACX,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,SACE,QAAQ,kBAAkB,QACtB,QAAQ,OAAO,UACf,OAAO,QAAQ,MAAM;AAAA,QAC3B,UAAU;AAAA,MACZ,CAAC;AAAA,IACH;AAAA,EACF;AAGA,QAAM,UAAU,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,OAAO,QAAQ,OAAO;AACrF,aAAW,KAAK,SAAS;AACvB,YAAQ,EAAE,QAAQ;AAAA,MAChB,KAAK;AAAQ,gBAAQ;AAAU;AAAA,MAC/B,KAAK;AAAQ,gBAAQ;AAAU;AAAA,MAC/B,KAAK;AAAQ,gBAAQ;AAAU;AAAA,MAC/B,KAAK;AAAQ,gBAAQ;AAAW;AAAA,IAClC;AAAA,EACF;AAEA,SAAO;AAAA,IACL,aAAa,OAAO;AAAA,IACpB,WAAW,oBAAI,KAAK;AAAA,IACpB;AAAA,IACA;AAAA,EACF;AACF;;;AC3DA,OAAO,WAAW;AAClB,OAAO,WAAW;AAGlB,IAAM,eAAuC;AAAA,EAC3C,MAAM,MAAM,MAAM,QAAG;AAAA,EACrB,MAAM,MAAM,IAAI,QAAG;AAAA,EACnB,MAAM,MAAM,OAAO,QAAG;AAAA,EACtB,MAAM,MAAM,KAAK,QAAG;AACtB;AAEO,SAAS,kBAAkB,QAAqB,SAA0B;AAC/E,QAAM,OAAO,aAAa,OAAO,MAAM;AACvC,QAAM,WAAW,MAAM,KAAK,IAAI,OAAO,QAAQ,KAAK;AACpD,QAAM,OAAO,OAAO,WAAW,SAAS,MAAM,IAAI,OAAO,IAAI,IAAI,OAAO;AAGxE,MAAI,CAAC,WAAW,OAAO,WAAW,QAAQ;AACxC,WAAO,KAAK,IAAI,IAAI,IAAI,IAAI,QAAQ;AAAA,EACtC;AAEA,SAAO,KAAK,IAAI,IAAI,IAAI,IAAI,QAAQ;AAAA,MAAS,MAAM,KAAK,OAAO,OAAO,CAAC;AACzE;AAEO,SAAS,aAAa,QAAqB,SAAuD;AACvG,MAAI,QAAQ,MAAM;AAChB,WAAO,KAAK,UAAU;AAAA,MACpB,aAAa,OAAO;AAAA,MACpB,WAAW,OAAO,UAAU,YAAY;AAAA,MACxC,SAAS,OAAO;AAAA,MAChB,SAAS,OAAO;AAAA,IAClB,GAAG,MAAM,CAAC;AAAA,EACZ;AAEA,QAAM,QAAkB,CAAC;AAEzB,QAAM,KAAK,EAAE;AACb,aAAW,UAAU,OAAO,SAAS;AACnC,UAAM,KAAK,kBAAkB,QAAQ,QAAQ,OAAO,CAAC;AAAA,EACvD;AACA,QAAM,KAAK,EAAE;AAEb,QAAM,EAAE,QAAQ,QAAQ,QAAQ,SAAS,MAAM,IAAI,OAAO;AAE1D,QAAM,eAAe;AAAA,IACnB,MAAM,MAAM,GAAG,MAAM,SAAS;AAAA,IAC9B,SAAS,IAAI,MAAM,IAAI,GAAG,MAAM,SAAS,IAAI;AAAA,IAC7C,SAAS,IAAI,MAAM,OAAO,GAAG,MAAM,WAAW,IAAI;AAAA,IAClD,UAAU,IAAI,MAAM,KAAK,GAAG,OAAO,UAAU,IAAI;AAAA,EACnD,EACG,OAAO,OAAO,EACd,KAAK,MAAM,KAAK,QAAK,CAAC;AAEzB,QAAM,cAAc,GAAG,YAAY,IAAI,MAAM,KAAK,IAAI,KAAK,UAAU,CAAC;AAEtE,QAAM,UAAU,OAAO,QAAQ,OAAO,CAAC,KAAK,MAAM,MAAM,EAAE,UAAU,CAAC;AAErE,QAAM,SACJ,SAAS,IACL,MAAM,IAAI,KAAK,wBAAmB,IAClC,MAAM,MAAM,KAAK,wBAAmB;AAE1C,QAAM,aAAa;AAAA,IACjB;AAAA,IACA,MAAM,KAAK,YAAY,OAAO,WAAW,EAAE;AAAA,IAC3C;AAAA,IACA;AAAA,IACA,MAAM,KAAK,WAAW,OAAO,IAAI;AAAA,EACnC,EAAE,KAAK,IAAI;AAEX,QAAM;AAAA,IACJ,MAAM,YAAY;AAAA,MAChB,SAAS;AAAA,MACT,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,EAAE;AAAA,MAC/C,aAAa,SAAS,IAAI,QAAQ;AAAA,MAClC,aAAa;AAAA,IACf,CAAC;AAAA,EACH;AAEA,SAAO,MAAM,KAAK,IAAI;AACxB;AAEO,SAAS,SAAS,SAAuB;AAC9C,UAAQ,MAAM,MAAM,IAAI,KAAK,QAAQ,GAAG,OAAO;AACjD;AAEO,SAAS,QAAQ,SAAuB;AAC7C,UAAQ,IAAI,MAAM,KAAK,QAAG,GAAG,OAAO;AACtC;AAEO,SAAS,WAAW,SAAuB;AAChD,UAAQ,IAAI,MAAM,MAAM,QAAG,GAAG,OAAO;AACvC;AAEO,SAAS,QAAQ,SAAuB;AAC7C,UAAQ,IAAI,MAAM,OAAO,QAAG,GAAG,OAAO;AACxC;;;AZjFA,eAAsB,aAAa,SAAoC;AACrE,QAAM,SAAS,QAAQ,MAAM,QAAQ;AACrC,QAAM,UAAU,SAAS,OAAO,IAAI,0BAA0B,EAAE,MAAM;AAEtE,MAAI;AACJ,MAAI;AACF,aAAS,MAAM,WAAW,QAAQ,MAAM;AACxC,aAAS,QAAQ,sBAAsB,OAAO,WAAW,GAAG;AAAA,EAC9D,SAAS,OAAO;AACd,aAAS,KAAK,qBAAqB;AACnC,aAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAC/D,YAAQ,WAAW;AACnB;AAAA,EACF;AAEA,WAAS,MAAM,mBAAmB;AAClC,QAAM,SAAS,MAAM,SAAS,QAAQ,EAAE,eAAe,QAAQ,cAAc,CAAC;AAC9E,WAAS,KAAK;AAEd,UAAQ,IAAI,aAAa,QAAQ,EAAE,SAAS,QAAQ,SAAS,MAAM,QAAQ,KAAK,CAAC,CAAC;AAElF,MAAI,OAAO,QAAQ,SAAS,GAAG;AAC7B,YAAQ,WAAW;AAAA,EACrB;AACF;;;AavCA,SAAS,UAAAC,SAAQ,YAAAC,WAAU,iBAAiB;AAC5C,SAAS,UAAU,WAAAC,gBAAe;AAKlC,IAAM,kBAAkB;AASxB,eAAe,iBAAiB,KAAqC;AACnE,MAAI;AACF,UAAM,SAAS,MAAM,YAAY,GAAG;AACpC,WAAO,OAAO,KAAK;AAAA,EACrB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAKA,eAAe,YAAY,YAAyC;AAClE,QAAM,QAAkB,CAAC;AACzB,aAAW,QAAQ,YAAY;AAC7B,QAAI;AACF,YAAMC,QAAOC,SAAQ,QAAQ,IAAI,GAAG,IAAI,CAAC;AACzC,YAAM,KAAK,IAAI;AAAA,IACjB,QAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO;AACT;AAKA,eAAe,oBAAqC;AAClD,MAAI;AACF,UAAM,MAAM,MAAMC,UAASD,SAAQ,QAAQ,IAAI,GAAG,cAAc,GAAG,OAAO;AAC1E,UAAM,MAAM,KAAK,MAAM,GAAG;AAC1B,QAAI,OAAO,IAAI,SAAS,YAAY,IAAI,KAAK,SAAS,GAAG;AACvD,aAAO,IAAI;AAAA,IACb;AAAA,EACF,QAAQ;AAAA,EAER;AACA,SAAO,SAAS,QAAQ,IAAI,CAAC;AAC/B;AAKA,eAAe,sBAA+F;AAC5G,QAAM,SAAuB,CAAC;AAG9B,QAAM,cAAc,MAAM,iBAAiB,gBAAgB;AAC3D,MAAI,aAAa;AACf,UAAM,QAAQ,YAAY,QAAQ,MAAM,EAAE,EAAE,MAAM,GAAG,EAAE,CAAC;AACxD,WAAO,OAAO,KAAK,KAAK;AACxB,eAAW,oBAAoB,WAAW,uBAAkB,KAAK,MAAM;AAAA,EACzE;AAGA,QAAM,aAAa,MAAM,iBAAiB,eAAe;AACzD,MAAI,YAAY;AACd,UAAM,QAAQ,WAAW,MAAM,GAAG,EAAE,CAAC;AACrC,WAAO,MAAM,KAAK,KAAK;AACvB,eAAW,gBAAgB,UAAU,uBAAkB,KAAK,MAAM;AAAA,EACpE;AAGA,QAAM,cAAc;AAAA,IAClB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,QAAM,aAAa,MAAM,YAAY,WAAW;AAChD,MAAI,WAAW,SAAS,GAAG;AACzB,WAAO,QAAQ;AACf,eAAW,YAAY,WAAW,MAAM,mBAAmB,WAAW,KAAK,IAAI,CAAC,EAAE;AAAA,EACpF;AAGA,QAAM,iBAAiBA,SAAQ,QAAQ,IAAI,GAAG,cAAc;AAC5D,MAAI;AACF,UAAM,UAAU,MAAMC,UAAS,gBAAgB,OAAO;AACtD,UAAM,OAAO,QACV,MAAM,IAAI,EACV,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EACzB,OAAO,CAAC,SAAS,QAAQ,CAAC,KAAK,WAAW,GAAG,CAAC,EAC9C,IAAI,CAAC,SAAS,KAAK,MAAM,GAAG,EAAE,CAAC,EAAE,KAAK,CAAC,EACvC,OAAO,CAAC,QAAQ,IAAI,SAAS,CAAC;AAEjC,QAAI,KAAK,SAAS,GAAG;AACnB,aAAO,MAAM;AAAA,QACX,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,UAAU;AAAA,MACZ;AACA,iBAAW,YAAY,KAAK,MAAM,gCAAgC,KAAK,KAAK,IAAI,CAAC,EAAE;AAAA,IACrF;AAAA,EACF,QAAQ;AAAA,EAER;AAGA,QAAM,gBAAgB,MAAM,iBAAiB,kBAAkB;AAC/D,MAAI,eAAe;AACjB,WAAO,WAAW;AAAA,MAChB;AAAA,QACE,KAAK;AAAA,QACL,OAAO;AAAA,QACP,UAAU;AAAA,MACZ;AAAA,IACF;AACA,eAAW,4CAAuC;AAAA,EACpD;AAEA,QAAM,cAAc,MAAM,kBAAkB;AAE5C,SAAO;AAAA,IACL;AAAA,IACA,SAAS;AAAA,IACT;AAAA,EACF;AACF;AAMA,eAAsB,YAAY,SAAqC;AACrE,QAAM,aAAaD,SAAQ,QAAQ,IAAI,GAAG,eAAe;AAEzD,MAAI;AACF,UAAMD,QAAO,UAAU;AACvB,UAAM,IAAI;AAAA,MACR,GAAG,eAAe;AAAA,IACpB;AAAA,EACF,QAAQ;AAAA,EAER;AAEA,MAAI;AAEJ,MAAI,QAAQ,QAAQ;AAClB,YAAQ,2BAA2B;AACnC,aAAS,MAAM,oBAAoB;AAEnC,QAAI,OAAO,KAAK,OAAO,MAAM,EAAE,WAAW,GAAG;AAC3C,cAAQ,iDAAiD;AACzD,aAAO,SAAS,EAAE,MAAM,WAAW;AAAA,IACrC;AAEA,YAAQ,IAAI,EAAE;AAAA,EAChB,OAAO;AACL,aAAS;AAAA,MACP,aAAa,MAAM,kBAAkB;AAAA,MACrC,SAAS;AAAA,MACT,QAAQ;AAAA,QACN,MAAM;AAAA,QACN,KAAK;AAAA,QACL,OAAO,CAAC,cAAc;AAAA,MACxB;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AACF,UAAM,UAAU,KAAK,UAAU,QAAQ,MAAM,CAAC,IAAI;AAClD,UAAM,UAAU,YAAY,SAAS,OAAO;AAC5C,eAAW,WAAW,eAAe,wCAAmC;AAAA,EAC1E,SAAS,OAAO;AACd,UAAM,IAAI;AAAA,MACR,mBAAmB,eAAe,KAAK,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,IAC/F;AAAA,EACF;AACF;;;AdvLA,IAAM,UAAU,IAAI,QAAQ;AAE5B,QACG,KAAK,YAAY,EACjB;AAAA,EACC;AACF,EACC,QAAQ,OAAO;AAElB,QACG,QAAQ,OAAO,EACf,YAAY,8DAA8D,EAC1E,OAAO,uBAAuB,uBAAuB,wBAAwB,EAC7E,OAAO,iBAAiB,uCAAuC,KAAK,EACpE,OAAO,QAAQ,4CAAuC,KAAK,EAC3D,OAAO,UAAU,yCAAyC,KAAK,EAC/D;AAAA,EACC;AAAA,EACA;AAAA,EACA;AACF,EACC,OAAO,OAAO,SAAS;AACtB,QAAM,aAAa;AAAA,IACjB,QAAQ,KAAK;AAAA,IACb,SAAS,KAAK;AAAA,IACd,IAAI,KAAK,MAAM,KAAK;AAAA,IACpB,MAAM,KAAK;AAAA,IACX,eAAe,KAAK;AAAA,EACtB,CAAC;AACH,CAAC;AAEH,QACG,QAAQ,MAAM,EACd,YAAY,oEAAoE,EAChF,OAAO,gBAAgB,mDAAmD,KAAK,EAC/E,OAAO,OAAO,SAAS;AACtB,QAAM,YAAY,EAAE,QAAQ,KAAK,OAAO,CAAC;AAC3C,CAAC;AAEH,QAAQ,MAAM;","names":["semver","semver","readFile","resolve","resolve","readFile","resolve","resolve","relative","isAbsolute","isAbsolute","resolve","relative","access","readFile","resolve","access","resolve","readFile"]}

package/package.json

@@ -0,0 +1,55 @@
+{
+  "name": "stackaudit",
+  "version": "0.1.0",
+  "description": "CLI tool to audit developer environments against a declarative configuration file",
+  "type": "module",
+  "bin": {
+    "stackaudit": "./bin/stackAudit.js"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist",
+    "bin"
+  ],
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "start": "node bin/stackAudit.js",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "lint": "tsc --noEmit",
+    "build:sea": "npm run build && node scripts/build-sea.mjs",
+    "prepublishOnly": "npm run build"
+  },
+  "keywords": [
+    "cli",
+    "developer-experience",
+    "devex",
+    "audit",
+    "environment",
+    "validation",
+    "onboarding"
+  ],
+  "license": "MIT",
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "dependencies": {
+    "boxen": "^8.0.1",
+    "chalk": "^5.4.1",
+    "commander": "^13.1.0",
+    "dotenv": "^16.4.7",
+    "execa": "^9.5.2",
+    "ora": "^8.2.0",
+    "semver": "^7.6.3",
+    "zod": "^3.24.2"
+  },
+  "devDependencies": {
+    "@types/node": "^22.12.0",
+    "@types/semver": "^7.5.8",
+    "tsup": "^8.3.6",
+    "typescript": "^5.7.3",
+    "vitest": "^3.0.5"
+  }
+}