@geekmidas/cli 1.10.36 → 1.10.38

package/dist/index.mjs

@@ -1,11 +1,11 @@
 #!/usr/bin/env -S npx tsx
 import { __require } from "./chunk-Duj1WY3L.mjs";
-import { getAppBuildOrder, getDependencyEnvVars, getDeployTargetError, getPublicEnvPrefix, isDeployTargetSupported, stripPublicPrefix } from "./workspace-Cgmvgwh8.mjs";
-import { getAppNameFromCwd, loadAppConfig, loadConfig, loadWorkspaceAppInfo, loadWorkspaceConfig, parseModuleConfig } from "./config-U-gojtxn.mjs";
+import { getAppBuildOrder, getDependencyEnvVars, getDeployTargetError, getPublicEnvPrefix, isDeployTargetSupported, stripPublicPrefix } from "./workspace-D-37Ylqo.mjs";
+import { getAppNameFromCwd, loadAppConfig, loadConfig, loadWorkspaceAppInfo, loadWorkspaceConfig, parseModuleConfig } from "./config-Bbu1JKvf.mjs";
 import { getCredentialsPath, getDokployCredentials, getDokployRegistryId, getDokployToken, removeDokployCredentials, storeDokployCredentials, storeDokployRegistryId } from "./credentials-s1kLcIzK.mjs";
-import { createStageSecrets, generateConnectionUrls, generateDbPassword, generateDbUrl, generateFullstackCustomSecrets, generateLocalStackCredentials, generatePgBossUrl, generateSecurePassword, generateServiceCredentials, rotateServicePassword, writeDockerEnvFromSecrets } from "./fullstack-secrets-P84v8zWn.mjs";
+import { createStageSecrets, generateConnectionUrls, generateDbPassword, generateDbUrl, generateFullstackCustomSecrets, generateLocalStackCredentials, generatePgBossUrl, generateSecurePassword, generateServiceCredentials, rotateServicePassword, writeDockerEnvFromSecrets } from "./fullstack-secrets-l8s3II_H.mjs";
 import { getKeyPath, maskPassword, readStageSecrets, secretsExist, setCustomSecret, toEmbeddableSecrets, writeStageSecrets } from "./storage-dbb9RyBl.mjs";
-import { ConstructGenerator, EndpointGenerator, OPENAPI_OUTPUT_PATH, generateOpenApi, isPartitionedRoutes, normalizeRoutes, openapiCommand, resolveOpenApiConfig } from "./openapi-BA0e3I_s.mjs";
+import { ConstructGenerator, EndpointGenerator, OPENAPI_OUTPUT_PATH, generateOpenApi, isPartitionedRoutes, normalizeRoutes, openapiCommand, resolveOpenApiConfig } from "./openapi-DF9GyhyZ.mjs";
 import { DokployApi } from "./dokploy-api-BIT0683o.mjs";
 import { encryptSecrets } from "./encryption-DSkIlEZ6.mjs";
 import { CachedStateProvider } from "./CachedStateProvider-C8A-cCm5.mjs";
@@ -35,7 +35,7 @@ import prompts from "prompts";
 
 //#region package.json
 var name = "@geekmidas/cli";
-var version = "1.10.35";
+var version = "1.10.37";
 var description = "CLI tools for building Lambda handlers, server applications, and generating OpenAPI specs";
 var private$1 = false;
 var type = "module";
@@ -1595,7 +1595,7 @@ async function validateFrontendApp(appName, appPath, workspaceRoot, framework) {
 */
 async function validateFrontendApps(workspace) {
 	const results = [];
-	for (const [appName, app] of Object.entries(workspace.apps)) if (app.type === "frontend") {
+	for (const [appName, app] of Object.entries(workspace.apps)) if (app.type === "web") {
 		const result = await validateFrontendApp(appName, app.path, workspace.root, app.framework);
 		results.push(result);
 	}
@@ -1631,9 +1631,12 @@ async function loadDevSecrets(workspace) {
 async function workspaceDevCommand(workspace, options) {
 	const appCount = Object.keys(workspace.apps).length;
 	const backendApps = Object.entries(workspace.apps).filter(([_, app]) => app.type === "backend");
-	const frontendApps = Object.entries(workspace.apps).filter(([_, app]) => app.type === "frontend");
+	const frontendApps = Object.entries(workspace.apps).filter(([_, app]) => app.type === "web");
+	const mobileApps = Object.entries(workspace.apps).filter(([_, app]) => app.type === "mobile");
 	logger$11.log(`\n🚀 Starting workspace: ${workspace.name}`);
-	logger$11.log(`   ${backendApps.length} backend app(s), ${frontendApps.length} frontend app(s)`);
+	const counts = [`${backendApps.length} backend`, `${frontendApps.length} web`];
+	if (mobileApps.length > 0) counts.push(`${mobileApps.length} mobile`);
+	logger$11.log(`   ${counts.join(", ")} app(s)`);
 	const conflicts = checkPortConflicts(workspace);
 	if (conflicts.length > 0) {
 		for (const conflict of conflicts) logger$11.error(`❌ Port conflict: Apps "${conflict.app1}" and "${conflict.app2}" both use port ${conflict.port}`);
@@ -1682,7 +1685,8 @@ async function workspaceDevCommand(workspace, options) {
 		const app = workspace.apps[appName];
 		if (!app) continue;
 		const deps = app.dependencies.length > 0 ? ` (depends on: ${app.dependencies.join(", ")})` : "";
-		logger$11.log(`   ${app.type === "backend" ? "🔧" : "🌐"} ${appName} → http://localhost:${app.port}${deps}`);
+		const icon = app.type === "backend" ? "🔧" : app.type === "mobile" ? "📱" : "🌐";
+		logger$11.log(`   ${icon} ${appName} → http://localhost:${app.port}${deps}`);
 	}
 	const configFiles = [
 		"gkm.config.ts",
@@ -2399,7 +2403,7 @@ async function workspaceBuildCommand(workspace, options) {
 	const results = [];
 	const apps = Object.entries(workspace.apps);
 	const backendApps = apps.filter(([, app]) => app.type === "backend");
-	const frontendApps = apps.filter(([, app]) => app.type === "frontend");
+	const frontendApps = apps.filter(([, app]) => app.type === "web");
 	logger$9.log(`\n🏗️  Building workspace: ${workspace.name}`);
 	logger$9.log(`   Backend apps: ${backendApps.map(([name$1]) => name$1).join(", ") || "none"}`);
 	logger$9.log(`   Frontend apps: ${frontendApps.map(([name$1]) => name$1).join(", ") || "none"}`);
@@ -2442,7 +2446,7 @@ async function workspaceBuildCommand(workspace, options) {
 		await openapiCommand({ cwd: workspace.root });
 		logger$9.log(`\n📋 Build Summary:`);
 		for (const result of results) {
-			const icon = result.type === "backend" ? "⚙️" : "🌐";
+			const icon = result.type === "backend" ? "⚙️" : result.type === "mobile" ? "📱" : "🌐";
 			logger$9.log(`   ${icon} ${result.appName}: ${result.outputPath || "built"}`);
 		}
 	} catch (error) {
@@ -2463,8 +2467,14 @@ async function workspaceBuildCommand(workspace, options) {
 */
 function getAppOutputPath(workspace, _appName, app) {
 	const appPath = join(workspace.root, app.path);
-	if (app.type === "frontend") return join(appPath, ".next");
-	else return join(appPath, ".gkm");
+	if (app.type === "mobile") return "";
+	if (app.type === "web") switch (app.framework) {
+		case "vite":
+		case "tanstack-start": return join(appPath, "dist");
+		case "remix": return join(appPath, "build");
+		default: return join(appPath, ".next");
+	}
+	return join(appPath, ".gkm");
 }
 /**
 * Format routes for logging, handling PartitionedRoutes.
@@ -3026,6 +3036,66 @@ async function verifyDnsRecords(appHostnames, serverIp, state) {
 	return results;
 }
 
+//#endregion
+//#region src/deploy/domain.ts
+/**
+* Resolve the hostname for an app based on stage configuration.
+*
+* Domain resolution priority:
+* 1. Explicit app.domain override (string or stage-specific)
+* 2. Default pattern based on app type:
+*    - Main frontend app gets base domain (e.g., 'myapp.com')
+*    - Other apps get prefixed domain (e.g., 'api.myapp.com')
+*
+* @param appName - The name of the app
+* @param app - The normalized app configuration
+* @param stage - The deployment stage (e.g., 'production', 'development')
+* @param dokployConfig - Dokploy workspace configuration with domain mappings
+* @param isMainFrontend - Whether this is the main frontend app
+* @returns The resolved hostname for the app
+* @throws Error if no domain configuration is found for the stage
+*/
+function resolveHost(appName, app, stage, dokployConfig, isMainFrontend) {
+	if (app.domain) {
+		if (typeof app.domain === "string") return app.domain;
+		if (app.domain[stage]) return app.domain[stage];
+	}
+	const baseDomain = dokployConfig?.domains?.[stage];
+	if (!baseDomain) throw new Error(`No domain configured for stage "${stage}". Add deploy.dokploy.domains.${stage} to gkm.config.ts`);
+	if (isMainFrontend) return baseDomain;
+	return `${appName}.${baseDomain}`;
+}
+/**
+* Determine if an app is the "main" frontend (gets base domain).
+*
+* An app is considered the main frontend if:
+* 1. It's named 'web' and is a frontend type
+* 2. It's the first frontend app in the apps list
+*
+* @param appName - The name of the app to check
+* @param app - The app configuration
+* @param allApps - All apps in the workspace
+* @returns True if this is the main frontend app
+*/
+function isMainFrontendApp(appName, app, allApps) {
+	if (app.type !== "web") return false;
+	if (appName === "web") return true;
+	for (const [name$1, a] of Object.entries(allApps)) if (a.type === "web") return name$1 === appName;
+	return false;
+}
+/**
+* Get public URL arg names from app dependencies.
+*
+* @param app - The web/mobile app configuration
+* @returns Array of arg names like 'NEXT_PUBLIC_API_URL', or [] for frameworks
+*   without a public prefix (e.g. Remix).
+*/
+function getPublicUrlArgNames(app) {
+	const prefix = getPublicEnvPrefix(app);
+	if (!prefix) return [];
+	return app.dependencies.map((dep) => `${prefix}${dep.toUpperCase()}_URL`);
+}
+
 //#endregion
 //#region src/docker/compose.ts
 /** Default Docker images for services */
@@ -3337,15 +3407,18 @@ function generateWorkspaceCompose(workspace, options = {}) {
 
 services:
 `;
-	for (const [appName, app] of apps) yaml += generateAppService(appName, app, apps, {
-		registry,
-		projectName: workspace.name,
-		hasPostgres,
-		hasRedis,
-		hasMinio,
-		hasMail,
-		eventsBackend
-	});
+	for (const [appName, app] of apps) {
+		if (app.type === "mobile") continue;
+		yaml += generateAppService(appName, app, apps, {
+			registry,
+			projectName: workspace.name,
+			hasPostgres,
+			hasRedis,
+			hasMinio,
+			hasMail,
+			eventsBackend
+		});
+	}
 	if (hasPostgres) yaml += `
   postgres:
     image: ${postgresImage}
@@ -3514,8 +3587,8 @@ function getInfraServiceImage(serviceName, config$1) {
 function generateAppService(appName, app, allApps, options) {
 	const { registry, projectName, hasPostgres, hasRedis, hasMinio, hasMail, eventsBackend } = options;
 	const imageRef = registry ? `\${REGISTRY:-${registry}}/` : "";
-	const healthCheckPath = app.type === "frontend" ? "/" : "/health";
-	const healthCheckCmd = app.type === "frontend" ? `["CMD", "wget", "-q", "--spider", "http://localhost:${app.port}/"]` : `["CMD", "wget", "-q", "--spider", "http://localhost:${app.port}${healthCheckPath}"]`;
+	const healthCheckPath = app.type === "web" ? "/" : "/health";
+	const healthCheckCmd = app.type === "web" ? `["CMD", "wget", "-q", "--spider", "http://localhost:${app.port}/"]` : `["CMD", "wget", "-q", "--spider", "http://localhost:${app.port}${healthCheckPath}"]`;
 	let yaml = `
   ${appName}:
     build:
@@ -4318,6 +4391,115 @@ ENTRYPOINT ["/sbin/tini", "--"]
 CMD ["node", "index.mjs"]
 `;
 }
+/**
+* Generate a Dockerfile for Node-based SSR web frameworks (TanStack Start,
+* Remix). Builds with turbo, then runs the framework's production start
+* script via `npm start`.
+*
+* Public URL build args are declared so framework bundlers (Vite, Vinxi)
+* can inline them at build time. Per-framework prefix is the caller's job.
+* @internal Exported for testing
+*/
+function generateNodeWebDockerfile(options) {
+	const { baseImage, port, appPath, turboPackage, packageManager, publicUrlArgs = [] } = options;
+	const pm = getPmConfig(packageManager);
+	const installPm = pm.install ? `RUN ${pm.install}` : "";
+	const turboInstallCmd = getTurboInstallCmd(packageManager);
+	const turboCmd = packageManager === "pnpm" ? "pnpm dlx turbo" : "npx turbo";
+	const startCmd = packageManager === "pnpm" ? "pnpm start" : `${pm.lockfile.startsWith("package-lock") ? "npm" : packageManager} start`;
+	const argDecls = publicUrlArgs.map((a) => `ARG ${a}=""`).join("\n");
+	const envDecls = publicUrlArgs.map((a) => `ENV ${a}=$${a}`).join("\n");
+	return `# syntax=docker/dockerfile:1
+# Node SSR web Dockerfile (TanStack Start / Remix) with turbo prune
+
+FROM ${baseImage} AS pruner
+WORKDIR /app
+${installPm}
+COPY . .
+RUN ${turboCmd} prune ${turboPackage} --docker
+
+FROM ${baseImage} AS deps
+WORKDIR /app
+${installPm}
+COPY --from=pruner /app/out/${pm.lockfile} ./
+COPY --from=pruner /app/out/json/ ./
+RUN --mount=type=cache,id=${pm.cacheId},target=${pm.cacheTarget} \\
+    ${turboInstallCmd}
+
+FROM deps AS builder
+WORKDIR /app
+${argDecls}
+${envDecls}
+COPY --from=pruner /app/out/full/ ./
+COPY --from=pruner /app/tsconfig.* ./
+RUN ${turboCmd} run build --filter=${turboPackage}
+
+FROM ${baseImage} AS runner
+WORKDIR /app
+RUN apk add --no-cache tini
+RUN addgroup --system --gid 1001 nodejs && \\
+    adduser --system --uid 1001 app
+
+# Copy the whole built workspace — frameworks differ on output paths
+COPY --from=builder --chown=app:nodejs /app/ ./
+
+ENV NODE_ENV=production
+ENV PORT=${port}
+ENV HOSTNAME="0.0.0.0"
+
+USER app
+EXPOSE ${port}
+
+ENTRYPOINT ["/sbin/tini", "--"]
+CMD ["sh", "-c", "cd ${appPath} && ${startCmd}"]
+`;
+}
+/**
+* Generate a Dockerfile for Vite SPA apps. Builds the static bundle with
+* turbo, then serves it via nginx.
+* @internal Exported for testing
+*/
+function generateViteStaticDockerfile(options) {
+	const { baseImage, port, appPath, turboPackage, packageManager, publicUrlArgs = [] } = options;
+	const pm = getPmConfig(packageManager);
+	const installPm = pm.install ? `RUN ${pm.install}` : "";
+	const turboInstallCmd = getTurboInstallCmd(packageManager);
+	const turboCmd = packageManager === "pnpm" ? "pnpm dlx turbo" : "npx turbo";
+	const argDecls = publicUrlArgs.map((a) => `ARG ${a}=""`).join("\n");
+	const envDecls = publicUrlArgs.map((a) => `ENV ${a}=$${a}`).join("\n");
+	return `# syntax=docker/dockerfile:1
+# Vite SPA Dockerfile — builds static assets, serves via nginx
+
+FROM ${baseImage} AS pruner
+WORKDIR /app
+${installPm}
+COPY . .
+RUN ${turboCmd} prune ${turboPackage} --docker
+
+FROM ${baseImage} AS deps
+WORKDIR /app
+${installPm}
+COPY --from=pruner /app/out/${pm.lockfile} ./
+COPY --from=pruner /app/out/json/ ./
+RUN --mount=type=cache,id=${pm.cacheId},target=${pm.cacheTarget} \\
+    ${turboInstallCmd}
+
+FROM deps AS builder
+WORKDIR /app
+${argDecls}
+${envDecls}
+COPY --from=pruner /app/out/full/ ./
+COPY --from=pruner /app/tsconfig.* ./
+RUN ${turboCmd} run build --filter=${turboPackage}
+
+FROM nginx:alpine AS runner
+COPY --from=builder /app/${appPath}/dist /usr/share/nginx/html
+RUN printf 'server {\\n  listen ${port};\\n  root /usr/share/nginx/html;\\n  index index.html;\\n  location / { try_files $uri $uri/ /index.html; }\\n}\\n' \\
+    > /etc/nginx/conf.d/default.conf
+EXPOSE ${port}
+CMD ["nginx", "-g", "daemon off;"]
+`;
+}
 
 //#endregion
 //#region src/docker/index.ts
@@ -4503,6 +4685,10 @@ async function workspaceDockerCommand(workspace, options) {
 	const packageManager = detectPackageManager$1(workspace.root);
 	logger$7.log(`   Package manager: ${packageManager}`);
 	for (const [appName, app] of apps) {
+		if (app.type === "mobile") {
+			logger$7.log(`\n   📱 Skipping Docker for ${appName} (mobile app — deploy via framework toolchain)`);
+			continue;
+		}
 		const appPath = app.path;
 		const fullAppPath = join(workspace.root, appPath);
 		const turboPackage = getAppPackageName(fullAppPath) ?? appName;
@@ -4511,15 +4697,28 @@ async function workspaceDockerCommand(workspace, options) {
 		const buildType = hasEntry ? "entry" : app.type;
 		logger$7.log(`\n   📄 Generating Dockerfile for ${appName} (${buildType})`);
 		let dockerfile;
-		if (app.type === "frontend") dockerfile = generateNextjsDockerfile({
-			imageName,
-			baseImage: "node:22-alpine",
-			port: app.port,
-			appPath,
-			turboPackage,
-			packageManager
-		});
-		else if (app.entry) dockerfile = generateEntryDockerfile({
+		if (app.type === "web") {
+			const publicUrlArgs = getPublicUrlArgNames(app);
+			const webOpts = {
+				imageName,
+				baseImage: "node:22-alpine",
+				port: app.port,
+				appPath,
+				turboPackage,
+				packageManager,
+				publicUrlArgs
+			};
+			switch (app.framework) {
+				case "vite":
+					dockerfile = generateViteStaticDockerfile(webOpts);
+					break;
+				case "tanstack-start":
+				case "remix":
+					dockerfile = generateNodeWebDockerfile(webOpts);
+					break;
+				default: dockerfile = generateNextjsDockerfile(webOpts);
+			}
+		} else if (app.entry) dockerfile = generateEntryDockerfile({
 			imageName,
 			baseImage: "node:22-alpine",
 			port: app.port,
@@ -4559,7 +4758,7 @@ async function workspaceDockerCommand(workspace, options) {
 	logger$7.log(`\n✅ Generated ${results.length} Dockerfile(s) + docker-compose.yml`);
 	logger$7.log("\n📋 Build commands:");
 	for (const result of results) {
-		const icon = result.type === "backend" ? "⚙️" : "🌐";
+		const icon = result.type === "backend" ? "⚙️" : result.type === "mobile" ? "📱" : "🌐";
 		logger$7.log(`   ${icon} docker build -f .gkm/docker/Dockerfile.${result.appName} -t ${result.imageName} .`);
 	}
 	logger$7.log("\n📋 Run all services:");
@@ -4796,54 +4995,6 @@ async function deployDokploy(options) {
 	};
 }
 
-//#endregion
-//#region src/deploy/domain.ts
-/**
-* Resolve the hostname for an app based on stage configuration.
-*
-* Domain resolution priority:
-* 1. Explicit app.domain override (string or stage-specific)
-* 2. Default pattern based on app type:
-*    - Main frontend app gets base domain (e.g., 'myapp.com')
-*    - Other apps get prefixed domain (e.g., 'api.myapp.com')
-*
-* @param appName - The name of the app
-* @param app - The normalized app configuration
-* @param stage - The deployment stage (e.g., 'production', 'development')
-* @param dokployConfig - Dokploy workspace configuration with domain mappings
-* @param isMainFrontend - Whether this is the main frontend app
-* @returns The resolved hostname for the app
-* @throws Error if no domain configuration is found for the stage
-*/
-function resolveHost(appName, app, stage, dokployConfig, isMainFrontend) {
-	if (app.domain) {
-		if (typeof app.domain === "string") return app.domain;
-		if (app.domain[stage]) return app.domain[stage];
-	}
-	const baseDomain = dokployConfig?.domains?.[stage];
-	if (!baseDomain) throw new Error(`No domain configured for stage "${stage}". Add deploy.dokploy.domains.${stage} to gkm.config.ts`);
-	if (isMainFrontend) return baseDomain;
-	return `${appName}.${baseDomain}`;
-}
-/**
-* Determine if an app is the "main" frontend (gets base domain).
-*
-* An app is considered the main frontend if:
-* 1. It's named 'web' and is a frontend type
-* 2. It's the first frontend app in the apps list
-*
-* @param appName - The name of the app to check
-* @param app - The app configuration
-* @param allApps - All apps in the workspace
-* @returns True if this is the main frontend app
-*/
-function isMainFrontendApp(appName, app, allApps) {
-	if (app.type !== "frontend") return false;
-	if (appName === "web") return true;
-	for (const [name$1, a] of Object.entries(allApps)) if (a.type === "frontend") return name$1 === appName;
-	return false;
-}
-
 //#endregion
 //#region src/deploy/env-resolver.ts
 /**
@@ -5317,7 +5468,7 @@ function resolveSnifferFile(baseName) {
 */
 async function sniffAppEnvironment(app, appName, workspacePath, options = {}) {
 	const { logWarnings = true, markOptional = false } = options;
-	if (app.type === "frontend") {
+	if (app.type === "web" || app.type === "mobile") {
 		const publicPrefix = getPublicEnvPrefix(app.framework);
 		const depVars = publicPrefix ? (app.dependencies ?? []).map((dep) => `${publicPrefix}${dep.toUpperCase()}_URL`) : [];
 		if (app.config) {
@@ -6244,8 +6395,10 @@ async function workspaceDeployCommand(workspace, options) {
 			}
 		}
 	}
+	const skippedMobileApps = appsToDeployNames.filter((name$1) => workspace.apps[name$1].type === "mobile");
+	if (skippedMobileApps.length > 0) logger$3.log(`\n📱 Skipping ${skippedMobileApps.length} mobile app(s) — deploy via framework toolchain: ${skippedMobileApps.join(", ")}`);
 	const backendApps = appsToDeployNames.filter((name$1) => workspace.apps[name$1].type === "backend");
-	const frontendApps = appsToDeployNames.filter((name$1) => workspace.apps[name$1].type === "frontend");
+	const frontendApps = appsToDeployNames.filter((name$1) => workspace.apps[name$1].type === "web");
 	const perAppDbCredentials = /* @__PURE__ */ new Map();
 	if (provisionedPostgres && backendApps.length > 0) {
 		const appsNeedingDb = backendApps.filter((appName) => {
@@ -6937,15 +7090,15 @@ const GEEKMIDAS_VERSIONS = {
 	"@geekmidas/cache": "~1.1.0",
 	"@geekmidas/client": "~4.0.4",
 	"@geekmidas/cloud": "~1.0.0",
-	"@geekmidas/constructs": "~3.0.9",
+	"@geekmidas/constructs": "~3.0.10",
 	"@geekmidas/db": "~1.0.1",
 	"@geekmidas/emailkit": "~1.0.0",
 	"@geekmidas/envkit": "~1.0.6",
 	"@geekmidas/errors": "~1.0.0",
-	"@geekmidas/events": "~1.1.1",
+	"@geekmidas/events": "~1.1.2",
 	"@geekmidas/logger": "~1.0.1",
 	"@geekmidas/rate-limit": "~2.0.0",
-	"@geekmidas/schema": "~1.0.0",
+	"@geekmidas/schema": "~1.0.1",
 	"@geekmidas/services": "~1.0.1",
 	"@geekmidas/storage": "~2.0.2",
 	"@geekmidas/studio": "~1.0.0",
@@ -8741,7 +8894,7 @@ export default defineConfig({
 function generateFrontendAppEntry(options) {
 	switch (options.frontendFramework) {
 		case "tanstack-start": return `web: {
-      type: 'frontend',
+      type: 'web',
       framework: 'tanstack-start',
       path: 'apps/web',
       port: 3001,
@@ -8752,14 +8905,14 @@ function generateFrontendAppEntry(options) {
       },
     },`;
 		case "expo": return `app: {
-      type: 'frontend',
+      type: 'mobile',
       framework: 'expo',
       path: 'apps/app',
       port: 8081,
       dependencies: ['api', 'auth'],
     },`;
 		default: return `web: {
-      type: 'frontend',
+      type: 'web',
       framework: 'nextjs',
       path: 'apps/web',
       port: 3001,
@@ -13139,7 +13292,7 @@ function printSummary(workspace, stage) {
 	logger$1.log("\n✅ Development environment ready!\n");
 	logger$1.log("📋 Apps:");
 	for (const [name$1, app] of Object.entries(workspace.apps)) {
-		const icon = app.type === "frontend" ? "🌐" : "🔧";
+		const icon = app.type === "web" ? "🌐" : app.type === "mobile" ? "📱" : "🔧";
 		logger$1.log(`   ${icon} ${name$1} → http://localhost:${app.port}`);
 	}
 	logger$1.log("\n🚀 Next steps:");
@@ -13613,7 +13766,7 @@ program.command("secrets:push").description("Push secrets to remote provider (SS
 		if (globalOptions.cwd) process.chdir(globalOptions.cwd);
 		const { loadWorkspaceConfig: loadWorkspaceConfig$1 } = await import("./config.mjs");
 		const { pushSecrets: pushSecrets$1 } = await import("./sync-COnAugP-.mjs");
-		const { reconcileMissingSecrets } = await import("./reconcile-DAAKa0YR.mjs");
+		const { reconcileMissingSecrets } = await import("./reconcile-CYGmqXvq.mjs");
 		const { readStageSecrets: readStageSecrets$1, writeStageSecrets: writeStageSecrets$1 } = await import("./storage-Cs4WBsc4.mjs");
 		const { workspace } = await loadWorkspaceConfig$1();
 		const secrets = await readStageSecrets$1(options.stage, workspace.root);
@@ -13639,7 +13792,7 @@ program.command("secrets:pull").description("Pull secrets from remote provider (
 		const { loadWorkspaceConfig: loadWorkspaceConfig$1 } = await import("./config.mjs");
 		const { pullSecrets: pullSecrets$1 } = await import("./sync-COnAugP-.mjs");
 		const { writeStageSecrets: writeStageSecrets$1 } = await import("./storage-Cs4WBsc4.mjs");
-		const { reconcileMissingSecrets } = await import("./reconcile-DAAKa0YR.mjs");
+		const { reconcileMissingSecrets } = await import("./reconcile-CYGmqXvq.mjs");
 		const { workspace } = await loadWorkspaceConfig$1();
 		let secrets = await pullSecrets$1(options.stage, workspace);
 		if (!secrets) {
@@ -13664,7 +13817,7 @@ program.command("secrets:reconcile").description("Backfill missing custom secret
 		const globalOptions = program.opts();
 		if (globalOptions.cwd) process.chdir(globalOptions.cwd);
 		const { loadWorkspaceConfig: loadWorkspaceConfig$1 } = await import("./config.mjs");
-		const { reconcileMissingSecrets } = await import("./reconcile-DAAKa0YR.mjs");
+		const { reconcileMissingSecrets } = await import("./reconcile-CYGmqXvq.mjs");
 		const { readStageSecrets: readStageSecrets$1, writeStageSecrets: writeStageSecrets$1 } = await import("./storage-Cs4WBsc4.mjs");
 		const { workspace } = await loadWorkspaceConfig$1();
 		const secrets = await readStageSecrets$1(options.stage, workspace.root);