@enspirit/emb 0.25.5 → 0.25.6

package/README.md

@@ -14,7 +14,7 @@ $ npm install -g @enspirit/emb
 $ emb COMMAND
 running command...
 $ emb (--version)
-@enspirit/emb/0.25.5 linux-x64 node-v22.22.2
+@enspirit/emb/0.25.6 linux-x64 node-v22.22.2
 $ emb --help [COMMAND]
 USAGE
   $ emb COMMAND
@@ -113,7 +113,7 @@ EXAMPLES
   $ emb clean
 ```
 
-_See code: [src/commands/clean.ts](https://github.com/enspirit/emb/blob/v0.25.5/src/commands/clean.ts)_
+_See code: [src/commands/clean.ts](https://github.com/enspirit/emb/blob/v0.25.6/src/commands/clean.ts)_
 
 ## `emb components`
 
@@ -138,7 +138,7 @@ EXAMPLES
   $ emb components
 ```
 
-_See code: [src/commands/components/index.ts](https://github.com/enspirit/emb/blob/v0.25.5/src/commands/components/index.ts)_
+_See code: [src/commands/components/index.ts](https://github.com/enspirit/emb/blob/v0.25.6/src/commands/components/index.ts)_
 
 ## `emb components shell SERVICE`
 
@@ -166,7 +166,7 @@ EXAMPLES
   $ emb components shell
 ```
 
-_See code: [src/commands/components/shell.ts](https://github.com/enspirit/emb/blob/v0.25.5/src/commands/components/shell.ts)_
+_See code: [src/commands/components/shell.ts](https://github.com/enspirit/emb/blob/v0.25.6/src/commands/components/shell.ts)_
 
 ## `emb config print`
 
@@ -191,7 +191,7 @@ EXAMPLES
   $ emb config print
 ```
 
-_See code: [src/commands/config/print.ts](https://github.com/enspirit/emb/blob/v0.25.5/src/commands/config/print.ts)_
+_See code: [src/commands/config/print.ts](https://github.com/enspirit/emb/blob/v0.25.6/src/commands/config/print.ts)_
 
 ## `emb containers`
 
@@ -216,7 +216,7 @@ EXAMPLES
   $ emb containers
 ```
 
-_See code: [src/commands/containers/index.ts](https://github.com/enspirit/emb/blob/v0.25.5/src/commands/containers/index.ts)_
+_See code: [src/commands/containers/index.ts](https://github.com/enspirit/emb/blob/v0.25.6/src/commands/containers/index.ts)_
 
 ## `emb containers prune`
 
@@ -240,7 +240,7 @@ EXAMPLES
   $ emb containers prune
 ```
 
-_See code: [src/commands/containers/prune.ts](https://github.com/enspirit/emb/blob/v0.25.5/src/commands/containers/prune.ts)_
+_See code: [src/commands/containers/prune.ts](https://github.com/enspirit/emb/blob/v0.25.6/src/commands/containers/prune.ts)_
 
 ## `emb down [SERVICE]`
 
@@ -268,7 +268,7 @@ EXAMPLES
   $ emb down
 ```
 
-_See code: [src/commands/down.ts](https://github.com/enspirit/emb/blob/v0.25.5/src/commands/down.ts)_
+_See code: [src/commands/down.ts](https://github.com/enspirit/emb/blob/v0.25.6/src/commands/down.ts)_
 
 ## `emb help [COMMAND]`
 
@@ -314,7 +314,7 @@ EXAMPLES
   $ emb images
 ```
 
-_See code: [src/commands/images/index.ts](https://github.com/enspirit/emb/blob/v0.25.5/src/commands/images/index.ts)_
+_See code: [src/commands/images/index.ts](https://github.com/enspirit/emb/blob/v0.25.6/src/commands/images/index.ts)_
 
 ## `emb images delete`
 
@@ -339,7 +339,7 @@ EXAMPLES
   $ emb images delete
 ```
 
-_See code: [src/commands/images/delete.ts](https://github.com/enspirit/emb/blob/v0.25.5/src/commands/images/delete.ts)_
+_See code: [src/commands/images/delete.ts](https://github.com/enspirit/emb/blob/v0.25.6/src/commands/images/delete.ts)_
 
 ## `emb images prune`
 
@@ -364,7 +364,7 @@ EXAMPLES
   $ emb images prune
 ```
 
-_See code: [src/commands/images/prune.ts](https://github.com/enspirit/emb/blob/v0.25.5/src/commands/images/prune.ts)_
+_See code: [src/commands/images/prune.ts](https://github.com/enspirit/emb/blob/v0.25.6/src/commands/images/prune.ts)_
 
 ## `emb images push`
 
@@ -393,7 +393,7 @@ EXAMPLES
   $ emb images push --registry my.registry.io --retag newtag
 ```
 
-_See code: [src/commands/images/push.ts](https://github.com/enspirit/emb/blob/v0.25.5/src/commands/images/push.ts)_
+_See code: [src/commands/images/push.ts](https://github.com/enspirit/emb/blob/v0.25.6/src/commands/images/push.ts)_
 
 ## `emb kubernetes logs COMPONENT`
 
@@ -419,7 +419,7 @@ EXAMPLES
   $ emb kubernetes logs
 ```
 
-_See code: [src/commands/kubernetes/logs.ts](https://github.com/enspirit/emb/blob/v0.25.5/src/commands/kubernetes/logs.ts)_
+_See code: [src/commands/kubernetes/logs.ts](https://github.com/enspirit/emb/blob/v0.25.6/src/commands/kubernetes/logs.ts)_
 
 ## `emb kubernetes ps`
 
@@ -442,7 +442,7 @@ EXAMPLES
   $ emb kubernetes ps
 ```
 
-_See code: [src/commands/kubernetes/ps.ts](https://github.com/enspirit/emb/blob/v0.25.5/src/commands/kubernetes/ps.ts)_
+_See code: [src/commands/kubernetes/ps.ts](https://github.com/enspirit/emb/blob/v0.25.6/src/commands/kubernetes/ps.ts)_
 
 ## `emb kubernetes restart [DEPLOYMENT]`
 
@@ -467,7 +467,7 @@ EXAMPLES
   $ emb kubernetes restart
 ```
 
-_See code: [src/commands/kubernetes/restart.ts](https://github.com/enspirit/emb/blob/v0.25.5/src/commands/kubernetes/restart.ts)_
+_See code: [src/commands/kubernetes/restart.ts](https://github.com/enspirit/emb/blob/v0.25.6/src/commands/kubernetes/restart.ts)_
 
 ## `emb kubernetes shell COMPONENT`
 
@@ -496,7 +496,7 @@ EXAMPLES
   $ emb kubernetes shell
 ```
 
-_See code: [src/commands/kubernetes/shell.ts](https://github.com/enspirit/emb/blob/v0.25.5/src/commands/kubernetes/shell.ts)_
+_See code: [src/commands/kubernetes/shell.ts](https://github.com/enspirit/emb/blob/v0.25.6/src/commands/kubernetes/shell.ts)_
 
 ## `emb logs [SERVICE]`
 
@@ -527,7 +527,7 @@ EXAMPLES
   $ emb logs --no-follow backend
 ```
 
-_See code: [src/commands/logs/index.ts](https://github.com/enspirit/emb/blob/v0.25.5/src/commands/logs/index.ts)_
+_See code: [src/commands/logs/index.ts](https://github.com/enspirit/emb/blob/v0.25.6/src/commands/logs/index.ts)_
 
 ## `emb logs archive [SERVICE]`
 
@@ -563,7 +563,7 @@ EXAMPLES
   $ emb logs archive --tail 1000
 ```
 
-_See code: [src/commands/logs/archive.ts](https://github.com/enspirit/emb/blob/v0.25.5/src/commands/logs/archive.ts)_
+_See code: [src/commands/logs/archive.ts](https://github.com/enspirit/emb/blob/v0.25.6/src/commands/logs/archive.ts)_
 
 ## `emb ps`
 
@@ -586,7 +586,7 @@ EXAMPLES
   $ emb ps
 ```
 
-_See code: [src/commands/ps.ts](https://github.com/enspirit/emb/blob/v0.25.5/src/commands/ps.ts)_
+_See code: [src/commands/ps.ts](https://github.com/enspirit/emb/blob/v0.25.6/src/commands/ps.ts)_
 
 ## `emb resources`
 
@@ -614,7 +614,7 @@ EXAMPLES
   $ emb resources --publishable
 ```
 
-_See code: [src/commands/resources/index.ts](https://github.com/enspirit/emb/blob/v0.25.5/src/commands/resources/index.ts)_
+_See code: [src/commands/resources/index.ts](https://github.com/enspirit/emb/blob/v0.25.6/src/commands/resources/index.ts)_
 
 ## `emb resources build [COMPONENT]`
 
@@ -648,7 +648,7 @@ EXAMPLES
   $ emb resources build build --publishable --flavor production
 ```
 
-_See code: [src/commands/resources/build.ts](https://github.com/enspirit/emb/blob/v0.25.5/src/commands/resources/build.ts)_
+_See code: [src/commands/resources/build.ts](https://github.com/enspirit/emb/blob/v0.25.6/src/commands/resources/build.ts)_
 
 ## `emb resources publish [RESOURCES]`
 
@@ -679,7 +679,7 @@ EXAMPLES
   $ emb resources publish api:image --flavor production
 ```
 
-_See code: [src/commands/resources/publish.ts](https://github.com/enspirit/emb/blob/v0.25.5/src/commands/resources/publish.ts)_
+_See code: [src/commands/resources/publish.ts](https://github.com/enspirit/emb/blob/v0.25.6/src/commands/resources/publish.ts)_
 
 ## `emb restart [SERVICE]`
 
@@ -707,7 +707,7 @@ EXAMPLES
   $ emb restart
 ```
 
-_See code: [src/commands/restart.ts](https://github.com/enspirit/emb/blob/v0.25.5/src/commands/restart.ts)_
+_See code: [src/commands/restart.ts](https://github.com/enspirit/emb/blob/v0.25.6/src/commands/restart.ts)_
 
 ## `emb run TASK`
 
@@ -765,7 +765,7 @@ EXAMPLES
   $ emb secrets --json
 ```
 
-_See code: [src/commands/secrets/index.ts](https://github.com/enspirit/emb/blob/v0.25.5/src/commands/secrets/index.ts)_
+_See code: [src/commands/secrets/index.ts](https://github.com/enspirit/emb/blob/v0.25.6/src/commands/secrets/index.ts)_
 
 ## `emb secrets providers`
 
@@ -790,7 +790,7 @@ EXAMPLES
   $ emb secrets providers
 ```
 
-_See code: [src/commands/secrets/providers.ts](https://github.com/enspirit/emb/blob/v0.25.5/src/commands/secrets/providers.ts)_
+_See code: [src/commands/secrets/providers.ts](https://github.com/enspirit/emb/blob/v0.25.6/src/commands/secrets/providers.ts)_
 
 ## `emb secrets validate`
 
@@ -820,7 +820,7 @@ EXAMPLES
   $ emb secrets validate --json
 ```
 
-_See code: [src/commands/secrets/validate.ts](https://github.com/enspirit/emb/blob/v0.25.5/src/commands/secrets/validate.ts)_
+_See code: [src/commands/secrets/validate.ts](https://github.com/enspirit/emb/blob/v0.25.6/src/commands/secrets/validate.ts)_
 
 ## `emb shell SERVICE`
 
@@ -873,7 +873,7 @@ EXAMPLES
   $ emb start
 ```
 
-_See code: [src/commands/start.ts](https://github.com/enspirit/emb/blob/v0.25.5/src/commands/start.ts)_
+_See code: [src/commands/start.ts](https://github.com/enspirit/emb/blob/v0.25.6/src/commands/start.ts)_
 
 ## `emb stop [SERVICE]`
 
@@ -901,7 +901,7 @@ EXAMPLES
   $ emb stop
 ```
 
-_See code: [src/commands/stop.ts](https://github.com/enspirit/emb/blob/v0.25.5/src/commands/stop.ts)_
+_See code: [src/commands/stop.ts](https://github.com/enspirit/emb/blob/v0.25.6/src/commands/stop.ts)_
 
 ## `emb tasks`
 
@@ -925,7 +925,7 @@ EXAMPLES
   $ emb tasks
 ```
 
-_See code: [src/commands/tasks/index.ts](https://github.com/enspirit/emb/blob/v0.25.5/src/commands/tasks/index.ts)_
+_See code: [src/commands/tasks/index.ts](https://github.com/enspirit/emb/blob/v0.25.6/src/commands/tasks/index.ts)_
 
 ## `emb tasks run TASK`
 
@@ -958,7 +958,7 @@ EXAMPLES
   $ emb tasks run
 ```
 
-_See code: [src/commands/tasks/run.ts](https://github.com/enspirit/emb/blob/v0.25.5/src/commands/tasks/run.ts)_
+_See code: [src/commands/tasks/run.ts](https://github.com/enspirit/emb/blob/v0.25.6/src/commands/tasks/run.ts)_
 
 ## `emb up [SERVICE]`
 
@@ -987,7 +987,7 @@ EXAMPLES
   $ emb up
 ```
 
-_See code: [src/commands/up.ts](https://github.com/enspirit/emb/blob/v0.25.5/src/commands/up.ts)_
+_See code: [src/commands/up.ts](https://github.com/enspirit/emb/blob/v0.25.6/src/commands/up.ts)_
 
 ## `emb update [CHANNEL]`
 

package/dist/src/config/validation.js

@@ -1,11 +1,23 @@
 import { Ajv } from 'ajv';
 import { readFile, stat } from 'node:fs/promises';
 import yaml from 'yaml';
+import { ConfigValidationError } from '../errors.js';
 import configSchema from './schema.json' with { type: 'json' };
-const ajv = new Ajv();
+const ajv = new Ajv({ allErrors: true });
 ajv.addSchema(configSchema);
+function formatAjvErrors(errors) {
+    return errors.map((err) => {
+        const path = err.instancePath || '/';
+        if (err.keyword === 'additionalProperties' &&
+            err.params?.additionalProperty) {
+            return `${path}: unknown property '${err.params.additionalProperty}'`;
+        }
+        return `${path}: ${err.message}`;
+    });
+}
 export const validateUserConfig = async (pathOrObject) => {
     let embConfig;
+    const file = typeof pathOrObject === 'string' ? pathOrObject : '.emb.yml';
     if (typeof pathOrObject === 'string') {
         if (await stat(pathOrObject)) {
             const cfgYaml = (await readFile(pathOrObject)).toString();
@@ -19,13 +31,14 @@ export const validateUserConfig = async (pathOrObject) => {
         embConfig = pathOrObject;
     }
     if (!ajv.validate(configSchema, embConfig)) {
-        ajv.errors?.forEach((err) => console.error(err));
-        throw new Error(`Your .emb.yml is incorrect`);
+        const errors = formatAjvErrors(ajv.errors || []);
+        throw new ConfigValidationError([{ file, errors }]);
     }
     return embConfig;
 };
 export const validateEmbfile = async (pathOrObject) => {
     let component;
+    const file = typeof pathOrObject === 'string' ? pathOrObject : 'Embfile';
     if (typeof pathOrObject === 'string') {
         if (await stat(pathOrObject)) {
             const cfgYaml = (await readFile(pathOrObject)).toString();
@@ -46,8 +59,8 @@ export const validateEmbfile = async (pathOrObject) => {
         return {};
     }
     if (!validate(component)) {
-        ajv.errors?.forEach((err) => console.error(err));
-        throw new Error(`Your .emb.yml is incorrect`);
+        const errors = formatAjvErrors(validate.errors || []);
+        throw new ConfigValidationError([{ file, errors }]);
     }
     return component;
 };

package/dist/src/errors.d.ts

@@ -82,3 +82,12 @@ export declare class ComposeExecError extends EMBError {
     signal?: (NodeJS.Signals | null) | undefined;
     constructor(msg: string, exitCode: number, signal?: (NodeJS.Signals | null) | undefined);
 }
+export interface ConfigFileError {
+    errors: string[];
+    file: string;
+}
+export declare class ConfigValidationError extends EMBError {
+    fileErrors: ConfigFileError[];
+    constructor(fileErrors: ConfigFileError[]);
+    private static formatMessage;
+}

package/dist/src/errors.js

@@ -113,3 +113,21 @@ export class ComposeExecError extends EMBError {
         this.signal = signal;
     }
 }
+export class ConfigValidationError extends EMBError {
+    fileErrors;
+    constructor(fileErrors) {
+        super('CONFIG_VALIDATION', ConfigValidationError.formatMessage(fileErrors));
+        this.fileErrors = fileErrors;
+    }
+    static formatMessage(fileErrors) {
+        if (fileErrors.length === 1) {
+            const { file, errors } = fileErrors[0];
+            return `${file} is invalid:\n${errors.map((e) => `  - ${e}`).join('\n')}`;
+        }
+        return `Configuration files have errors:\n\n${fileErrors
+            .map(({ file, errors }) => {
+            return `  ${file}:\n${errors.map((e) => `    - ${e}`).join('\n')}`;
+        })
+            .join('\n\n')}`;
+    }
+}

package/dist/src/monorepo/plugins/EmbfileLoaderPlugin.js

@@ -2,6 +2,7 @@ import deepmerge from '@fastify/deepmerge';
 import { glob } from 'glob';
 import { basename, dirname, join } from 'node:path';
 import { validateEmbfile } from '../../config/index.js';
+import { ConfigValidationError } from '../../errors.js';
 import { AbstractPlugin } from './plugin.js';
 export const EmbfileLoaderPluginDefaultOptions = {
     glob: '*/Embfile.{yaml,yml}',
@@ -26,23 +27,37 @@ export class EmbfileLoaderPlugin extends AbstractPlugin {
             cwd: this.monorepo.rootDir,
             follow: true,
         });
-        const newConfig = await files.reduce(async (pConfig, path) => {
-            const config = await pConfig;
+        const validationErrors = [];
+        let newConfig = config;
+        for (const path of files) {
             const rootDir = dirname(path);
             const name = basename(rootDir);
-            const embfile = await join(this.monorepo.rootDir, path);
-            const component = await validateEmbfile(embfile);
-            const original = config.components[name];
-            const newComponent = deepmerge()(original || {}, {
-                ...component,
-                rootDir,
-            });
-            return config.with({
-                components: {
-                    [name]: newComponent,
-                },
-            });
-        }, Promise.resolve(config));
+            const embfile = join(this.monorepo.rootDir, path);
+            try {
+                const component = await validateEmbfile(embfile);
+                const original = newConfig.components[name];
+                const newComponent = deepmerge()(original || {}, {
+                    ...component,
+                    rootDir,
+                });
+                newConfig = newConfig.with({
+                    components: {
+                        [name]: newComponent,
+                    },
+                });
+            }
+            catch (error) {
+                if (error instanceof ConfigValidationError) {
+                    validationErrors.push(...error.fileErrors);
+                }
+                else {
+                    throw error;
+                }
+            }
+        }
+        if (validationErrors.length > 0) {
+            throw new ConfigValidationError(validationErrors);
+        }
         return newConfig;
     }
 }

package/oclif.manifest.json

@@ -1319,19 +1319,13 @@
         "index.js"
       ]
     },
-    "resources:build": {
+    "secrets": {
       "aliases": [],
-      "args": {
-        "component": {
-          "description": "List of resources to build (defaults to all)",
-          "name": "component",
-          "required": false
-        }
-      },
-      "description": "Build the resources of the monorepo",
+      "args": {},
+      "description": "List all secret references in the configuration.",
       "examples": [
-        "<%= config.bin %> <%= command.id %> build --flavor development",
-        "<%= config.bin %> <%= command.id %> build --publishable --flavor production"
+        "<%= config.bin %> <%= command.id %>",
+        "<%= config.bin %> <%= command.id %> --json"
       ],
       "flags": {
         "json": {
@@ -1362,37 +1356,15 @@
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
-        },
-        "dry-run": {
-          "description": "Do not build the resources but only produce build meta information",
-          "name": "dry-run",
-          "required": false,
-          "allowNo": false,
-          "type": "boolean"
-        },
-        "force": {
-          "char": "f",
-          "description": "Bypass the cache and force the build",
-          "name": "force",
-          "required": false,
-          "allowNo": false,
-          "type": "boolean"
-        },
-        "publishable": {
-          "description": "Only build resources that are publishable (publish: true) and their dependencies",
-          "name": "publishable",
-          "required": false,
-          "allowNo": false,
-          "type": "boolean"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "resources:build",
+      "id": "secrets",
       "pluginAlias": "@enspirit/emb",
       "pluginName": "@enspirit/emb",
       "pluginType": "core",
-      "strict": false,
+      "strict": true,
       "enableJsonFlag": true,
       "isESM": true,
       "relativePath": [
@@ -1400,17 +1372,16 @@
         "src",
         "cli",
         "commands",
-        "resources",
-        "build.js"
+        "secrets",
+        "index.js"
       ]
     },
-    "resources": {
+    "secrets:providers": {
       "aliases": [],
       "args": {},
-      "description": "List resources.",
+      "description": "Show configured secret providers and their status.",
       "examples": [
-        "<%= config.bin %> <%= command.id %>",
-        "<%= config.bin %> <%= command.id %> --publishable"
+        "<%= config.bin %> <%= command.id %>"
       ],
       "flags": {
         "json": {
@@ -1441,18 +1412,11 @@
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
-        },
-        "publishable": {
-          "description": "Only show resources that are publishable (publish: true)",
-          "name": "publishable",
-          "required": false,
-          "allowNo": false,
-          "type": "boolean"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "resources",
+      "id": "secrets:providers",
       "pluginAlias": "@enspirit/emb",
       "pluginName": "@enspirit/emb",
       "pluginType": "core",
@@ -1464,23 +1428,18 @@
         "src",
         "cli",
         "commands",
-        "resources",
-        "index.js"
+        "secrets",
+        "providers.js"
       ]
     },
-    "resources:publish": {
+    "secrets:validate": {
       "aliases": [],
-      "args": {
-        "resources": {
-          "description": "List of resources to publish (defaults to all publishable)",
-          "name": "resources",
-          "required": false
-        }
-      },
-      "description": "Publish resources to their registries",
+      "args": {},
+      "description": "Validate that all secret references can be resolved (without showing values).",
       "examples": [
-        "<%= config.bin %> <%= command.id %> --flavor production",
-        "<%= config.bin %> <%= command.id %> api:image --flavor production"
+        "<%= config.bin %> <%= command.id %>",
+        "<%= config.bin %> <%= command.id %> --fail-fast",
+        "<%= config.bin %> <%= command.id %> --json"
       ],
       "flags": {
         "json": {
@@ -1512,21 +1471,20 @@
           "multiple": false,
           "type": "option"
         },
-        "dry-run": {
-          "description": "Do not publish, just show what would be published",
-          "name": "dry-run",
-          "required": false,
+        "fail-fast": {
+          "description": "Stop on first validation error",
+          "name": "fail-fast",
           "allowNo": false,
           "type": "boolean"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "resources:publish",
+      "id": "secrets:validate",
       "pluginAlias": "@enspirit/emb",
       "pluginName": "@enspirit/emb",
       "pluginType": "core",
-      "strict": false,
+      "strict": true,
       "enableJsonFlag": true,
       "isESM": true,
       "relativePath": [
@@ -1534,17 +1492,23 @@
         "src",
         "cli",
         "commands",
-        "resources",
-        "publish.js"
+        "secrets",
+        "validate.js"
       ]
     },
-    "secrets": {
+    "resources:build": {
       "aliases": [],
-      "args": {},
-      "description": "List all secret references in the configuration.",
+      "args": {
+        "component": {
+          "description": "List of resources to build (defaults to all)",
+          "name": "component",
+          "required": false
+        }
+      },
+      "description": "Build the resources of the monorepo",
       "examples": [
-        "<%= config.bin %> <%= command.id %>",
-        "<%= config.bin %> <%= command.id %> --json"
+        "<%= config.bin %> <%= command.id %> build --flavor development",
+        "<%= config.bin %> <%= command.id %> build --publishable --flavor production"
       ],
       "flags": {
         "json": {
@@ -1575,15 +1539,37 @@
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
+        },
+        "dry-run": {
+          "description": "Do not build the resources but only produce build meta information",
+          "name": "dry-run",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "force": {
+          "char": "f",
+          "description": "Bypass the cache and force the build",
+          "name": "force",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "publishable": {
+          "description": "Only build resources that are publishable (publish: true) and their dependencies",
+          "name": "publishable",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "secrets",
+      "id": "resources:build",
       "pluginAlias": "@enspirit/emb",
       "pluginName": "@enspirit/emb",
       "pluginType": "core",
-      "strict": true,
+      "strict": false,
       "enableJsonFlag": true,
       "isESM": true,
       "relativePath": [
@@ -1591,16 +1577,17 @@
         "src",
         "cli",
         "commands",
-        "secrets",
-        "index.js"
+        "resources",
+        "build.js"
       ]
     },
-    "secrets:providers": {
+    "resources": {
       "aliases": [],
       "args": {},
-      "description": "Show configured secret providers and their status.",
+      "description": "List resources.",
       "examples": [
-        "<%= config.bin %> <%= command.id %>"
+        "<%= config.bin %> <%= command.id %>",
+        "<%= config.bin %> <%= command.id %> --publishable"
       ],
       "flags": {
         "json": {
@@ -1631,11 +1618,18 @@
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
+        },
+        "publishable": {
+          "description": "Only show resources that are publishable (publish: true)",
+          "name": "publishable",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "secrets:providers",
+      "id": "resources",
       "pluginAlias": "@enspirit/emb",
       "pluginName": "@enspirit/emb",
       "pluginType": "core",
@@ -1647,18 +1641,23 @@
         "src",
         "cli",
         "commands",
-        "secrets",
-        "providers.js"
+        "resources",
+        "index.js"
       ]
     },
-    "secrets:validate": {
+    "resources:publish": {
       "aliases": [],
-      "args": {},
-      "description": "Validate that all secret references can be resolved (without showing values).",
+      "args": {
+        "resources": {
+          "description": "List of resources to publish (defaults to all publishable)",
+          "name": "resources",
+          "required": false
+        }
+      },
+      "description": "Publish resources to their registries",
       "examples": [
-        "<%= config.bin %> <%= command.id %>",
-        "<%= config.bin %> <%= command.id %> --fail-fast",
-        "<%= config.bin %> <%= command.id %> --json"
+        "<%= config.bin %> <%= command.id %> --flavor production",
+        "<%= config.bin %> <%= command.id %> api:image --flavor production"
       ],
       "flags": {
         "json": {
@@ -1690,20 +1689,21 @@
           "multiple": false,
           "type": "option"
         },
-        "fail-fast": {
-          "description": "Stop on first validation error",
-          "name": "fail-fast",
+        "dry-run": {
+          "description": "Do not publish, just show what would be published",
+          "name": "dry-run",
+          "required": false,
           "allowNo": false,
           "type": "boolean"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "secrets:validate",
+      "id": "resources:publish",
       "pluginAlias": "@enspirit/emb",
       "pluginName": "@enspirit/emb",
       "pluginType": "core",
-      "strict": true,
+      "strict": false,
       "enableJsonFlag": true,
       "isESM": true,
       "relativePath": [
@@ -1711,8 +1711,8 @@
         "src",
         "cli",
         "commands",
-        "secrets",
-        "validate.js"
+        "resources",
+        "publish.js"
       ]
     },
     "tasks": {
@@ -1840,5 +1840,5 @@
       ]
     }
   },
-  "version": "0.25.5"
+  "version": "0.25.6"
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@enspirit/emb",
   "type": "module",
-  "version": "0.25.5",
+  "version": "0.25.6",
   "keywords": [
     "monorepo",
     "docker",