@geekmidas/cli 10.0.0-alpha.107 → 10.0.0-alpha.109

package/dist/{seeds-DXJorkCJ.mjs → seeds-CcNV8zn9.mjs}

@@ -8,7 +8,7 @@ import { n as deployIdentity } from "./identity-CBXr4wNi.mjs";
 import { a as startTelemetryCode, n as runtimeFor, s as writeTelemetryModule, u as telemetryArgs } from "./EndpointGenerator-CvLX8bpx.mjs";
 import { d as ConstructGenerator, f as output, i as discover } from "./discover-Ca8U75dl.mjs";
 import { ConfigNotFound, NotInAnApp, loadWorkspaceAppInfo, loadWorkspaceConfig } from "./config.mjs";
-import { c as runtimeOf } from "./resolve-q3UJe1hP.mjs";
+import { c as runtimeOf } from "./resolve-CiCa2IEH.mjs";
 import { basename, dirname, isAbsolute, join, parse, relative, resolve, sep } from "node:path";
 import { constants, existsSync, readFileSync } from "node:fs";
 import { appendFile, chmod, copyFile, mkdir, readFile, readdir, rm, stat, writeFile } from "node:fs/promises";
@@ -16,7 +16,7 @@ import { homedir, hostname, networkInterfaces, userInfo } from "node:os";
 import { execFile, spawn } from "node:child_process";
 import { createServer } from "node:net";
 import { createCipheriv, createDecipheriv, createHash, randomBytes, randomInt } from "node:crypto";
-import { CLIENT_IP_HEADER, DEFAULT_POSTGRES_VERSION, TELEMETRY_KEYS, cacheTable, cookieDomain, dependenciesOf, dependentsOf, drawSecret, externalApiUrl, kebabCase, mobileOrigins, provideKey, providedKeyFor, provisionOrder, publicEnvFor, schemeBase } from "@geekmidas/manifest";
+import { CLIENT_IP_HEADER, DEFAULT_POSTGRES_VERSION, PUBLIC_PREFIX, TELEMETRY_KEYS, cacheTable, cookieDomain, dependenciesOf, dependentsOf, drawSecret, externalApiUrl, kebabCase, mobileOrigins, provideKey, providedKeyFor, provisionOrder, publicEnvFor, schemeBase } from "@geekmidas/manifest";
 import { formatKeyring, generateKeyring } from "@geekmidas/constructs/encryption";
 import { ownerRole, readerRole, roleStatements } from "@geekmidas/db/pg/roles";
 import * as snsUrl from "@geekmidas/events/sns/url";
@@ -2641,6 +2641,40 @@ function isUnder(file, dir) {
 	return rel !== "" && !rel.startsWith("..") && !isAbsolute(rel) ? !rel.startsWith(`..${sep}`) : false;
 }
 //#endregion
+//#region src/compose/siteBuild.ts
+/**
+* What a site's image is built with: every value its build reads, resolved for
+* the stage — and so every `ARG` its Dockerfile declares.
+*
+* - **Its edges' public values and its own address**, under the variant's
+*   public prefix (`publicEnvFor`): what the bundler inlines.
+* - **Its own address under its own name** (`WEB_URL`). Server code runs at
+*   build too — `next build` prerenders, and a page's `metadataBase` is read
+*   then — and `gkm exec -- next build` has it locally, so the image build
+*   must, or a site that builds locally fails in CI.
+* - **Every stage secret already named for the bundle**: a key carrying the
+*   variant's public prefix (`NEXT_PUBLIC_APP_STORE_URL` on a `next` site) was
+*   declared public by whoever named it, so it is passed. Anything else is
+*   not: a secret without the prefix never reaches a site's build.
+*
+* A value the stage resolves to nothing is left out rather than passed empty.
+* A derived value wins over a stage secret of the same name: the site's
+* addresses are the construct's, not a copy someone set.
+*/
+function siteBuildArgs(site, manifest, resolve, secrets) {
+	const args = {};
+	const own = provideKey(site.id, "url");
+	const ownValue = resolve(own);
+	if (ownValue) args[own] = ownValue;
+	for (const [key, source] of Object.entries(publicEnvFor(site, manifest))) {
+		const value = resolve(source);
+		if (value) args[key] = value;
+	}
+	const prefix = PUBLIC_PREFIX[site.variant];
+	for (const [key, value] of Object.entries(secrets)) if (key.startsWith(prefix) && args[key] === void 0 && value) args[key] = value;
+	return args;
+}
+//#endregion
 //#region src/exec/imageBuild.ts
 /**
 * Set by a site's Dockerfile in its builder stage: this process is building
@@ -5686,12 +5720,7 @@ function localPlan(workspace, manifest, fakes = {}, credentialFakes = {}) {
 function sitePublicArgs(manifest, appName, env) {
 	const declaration = Object.entries(manifest).find(([id, d]) => d.kind === "site" && appKey(id) === appName)?.[1];
 	if (declaration?.kind !== "site") return {};
-	const args = {};
-	for (const key of Object.keys(publicEnvFor(declaration, manifest))) {
-		const value = env[key];
-		if (value !== void 0) args[key] = value;
-	}
-	return args;
+	return siteBuildArgs(declaration, manifest, (key) => env[key], {});
 }
 /**
 * Every key a plan resolves, with each container addressed by its service
@@ -7144,7 +7173,7 @@ function workerDockerfile(worker, host, options) {
 */
 function siteDockerfile(appName, app, options) {
 	const declared = options.manifest ? Object.entries(options.manifest).find(([id, d]) => d.kind === "site" && appKey(id) === appName)?.[1] : void 0;
-	const publicUrlArgs = options.publicUrlArgs ?? (declared?.kind === "site" && options.manifest ? Object.keys(publicEnvFor(declared, options.manifest)) : getPublicUrlArgNames(app));
+	const publicUrlArgs = options.publicUrlArgs ?? (declared?.kind === "site" && options.manifest ? [provideKey(declared.id, "url"), ...Object.keys(publicEnvFor(declared, options.manifest))] : getPublicUrlArgNames(app));
 	const webOpts = {
 		...options.image,
 		publicUrlArgs
@@ -7311,7 +7340,7 @@ async function createDnsProvider(options) {
 		});
 	}
 	if (provider === "godaddy") {
-		const { GoDaddyProvider } = await import("./GoDaddyProvider-cg6Y_eV9.mjs");
+		const { GoDaddyProvider } = await import("./GoDaddyProvider-DNOK1nFq.mjs");
 		return new GoDaddyProvider(options.godaddy ?? {});
 	}
 	if (provider === "cloudflare") throw new DnsProviderNotImplemented("cloudflare");
@@ -8160,6 +8189,6 @@ function reportPlannedSeeds(planned, log) {
 	for (const { folder, seeds } of planned) log(`🌱 ${folder}: would run ${seeds.length} (${seeds.join(", ")})`);
 }
 //#endregion
-export { devServicesUsed as $, workerUnits as $t, assertStageProvidersEnabled as A, isTelemetryKey as An, isPortAvailable as At, workerDockerfileOf as B, portKeys as Bn, maskPassword as Bt, setApplicationId as C, withRedisPassword as Cn, cacheBackendFor as Ct, DnsRecordsUnreadable as D, planFor as Dn, createCredentialsPreload as Dt, setPostgresBackupId as E, TELEMETRY_CONTAINER as En, storageBackendFor as Et, DockerPushFailed as F, EMULATOR_ACCESS_KEY_ID as Fn, isRemoteStore as Ft, CronGenerator as G, LOGS_SERVICE as Gn, imageLayout as Gt, workerBundleName as H, postgresImage as Hn, toEmbeddableSecrets as Ht, appDockerfile as I, hostFor as In, secretsStoreFor as It, DEV_SERVICES as J, stackLogs as Jn, detectPackageManager as Jt, validateImageRef as K, logsAccess as Kn, TURBO_VERSION as Kt, dockerCommand as L, DEFAULT_IMAGES as Ln, storeFromConfig as Lt, stageProviderNotes as M, surfaceClientTraced as Mn, loadPortState as Mt, PROVIDER_KINDS as N, telemetryOf as Nn, loadSecretsForApp as Nt, createDnsProvider as O, resourceName as On, createEntryWrapper as Ot, DockerBuildFailed as P, usesTelemetry as Pn, prepareEntryCredentials as Pt, assertDevServicesFlag as Q, resolveHost as Qn, isUnder as Qt, ensureDockerignore as R, describeServices as Rn, store_exports as Rt, recordRollback as S, stackRedis as Sn, composeFor as St, setGeneratedSecret as T, localRolePassword as Tn, providerOf as Tt, workerEntryDir as U, primaryPortKey as Un, withCustomSecret as Ut, WorkerGenerator as V, portsOf as Vn, storage_exports as Vt, QueueGenerator as W, LOCAL_LOGS_EMAIL as Wn, composeBuildPaths as Wt, ExternalServicesNotConfigured as X, NoDomainForStage as Xn, imageBuildCredentials as Xt, DevServicesNeedServerTarget as Y, withLogsPassword as Yn, findBuildRoot as Yt, STORAGE_KEY_PAIR as Z, isMainFrontendApp as Zn, isImageBuild as Zt, createComposeState as _, withGeneratedSecrets as _n, LEGACY_LOCAL_LOGIN as _t, dnsResources as a, postgresStatements as an, appEnvKeys as at, getGeneratedSecret as b, redisService as bn, pgClient as bt, describeActor as c, loadLocalCredentials as cn, workerEnvKeys as ct, extractSubdomain as d, readLocalCredentials as dn, constructGlobs as dt, applyBuckets as en, externalServices as et, findRootDomain as f, FileSecretsStore as fn, derivedContainers as ft, asDokployState as g, readKey as gn, forgetState as gt, verifyDnsRecords as h, projectKey as hn, LOCAL_CA_PATH as ht, dnsRecordResource as i, postgresDatabaseNames as in, suppliedOnly as it, provisionCommand as j, scopeTelemetryEnv as jn, loadEnvFiles as jt, StageProviderDisabled as k, appTelemetry as kn, findAvailablePort as kt, isCi as l, postgresRoleSlug as ln, FAKE_ENV as lt, orchestrateDns as m, keystoreProject as mn, workspace_exports as mt, reportDatabaseRuns as n, applyPostgres as nn, requiredStageKeys as nt, recordDnsChanges as o, quoteIdentifier as on, dockerfileOf as ot, normalizeDnsConfig as p, getKeyPath as pn, reconcileWorkspace as pt, AllowDevServicesTakesNoValue as q, logsService as qn, WORKER_PORT as qt, reportPlannedSeeds as r, bucketPolicies as rn, stageServiceDeclarations as rt, currentActor as s, LOCAL_RABBITMQ_USER as sn, networkEnv as st, DeploySeedsFailed as t, applyPolicies as tn, reportDevServices as tt, DeployJournal as u, postgresSuperuser as un, backendsOf as ut, createEmptyState as v, REDIS_SERVICE as vn, ensurePostgresLogin as vt, setBackupState as w, envFor as wn, eventsBackendFor as wt, recordRelease as x, runsRedis as xn, CLUSTER_DATABASE as xt, getBackupState as y, STACK_CACHE as yn, bucketClient as yt, workerDockerfile as z, fakeKey as zn, initStageSecrets as zt };
+export { devServicesUsed as $, resolveHost as $n, isUnder as $t, assertStageProvidersEnabled as A, appTelemetry as An, isPortAvailable as At, workerDockerfileOf as B, fakeKey as Bn, maskPassword as Bt, setApplicationId as C, stackRedis as Cn, cacheBackendFor as Ct, DnsRecordsUnreadable as D, TELEMETRY_CONTAINER as Dn, createCredentialsPreload as Dt, setPostgresBackupId as E, localRolePassword as En, storageBackendFor as Et, DockerPushFailed as F, usesTelemetry as Fn, isRemoteStore as Ft, CronGenerator as G, LOCAL_LOGS_EMAIL as Gn, imageLayout as Gt, workerBundleName as H, portsOf as Hn, toEmbeddableSecrets as Ht, appDockerfile as I, EMULATOR_ACCESS_KEY_ID as In, secretsStoreFor as It, DEV_SERVICES as J, logsService as Jn, detectPackageManager as Jt, validateImageRef as K, LOGS_SERVICE as Kn, TURBO_VERSION as Kt, dockerCommand as L, hostFor as Ln, storeFromConfig as Lt, stageProviderNotes as M, scopeTelemetryEnv as Mn, loadPortState as Mt, PROVIDER_KINDS as N, surfaceClientTraced as Nn, loadSecretsForApp as Nt, createDnsProvider as O, planFor as On, createEntryWrapper as Ot, DockerBuildFailed as P, telemetryOf as Pn, prepareEntryCredentials as Pt, assertDevServicesFlag as Q, isMainFrontendApp as Qn, siteBuildArgs as Qt, ensureDockerignore as R, DEFAULT_IMAGES as Rn, store_exports as Rt, recordRollback as S, runsRedis as Sn, composeFor as St, setGeneratedSecret as T, envFor as Tn, providerOf as Tt, workerEntryDir as U, postgresImage as Un, withCustomSecret as Ut, WorkerGenerator as V, portKeys as Vn, storage_exports as Vt, QueueGenerator as W, primaryPortKey as Wn, composeBuildPaths as Wt, ExternalServicesNotConfigured as X, withLogsPassword as Xn, imageBuildCredentials as Xt, DevServicesNeedServerTarget as Y, stackLogs as Yn, findBuildRoot as Yt, STORAGE_KEY_PAIR as Z, NoDomainForStage as Zn, isImageBuild as Zt, createComposeState as _, readKey as _n, LEGACY_LOCAL_LOGIN as _t, dnsResources as a, postgresDatabaseNames as an, appEnvKeys as at, getGeneratedSecret as b, STACK_CACHE as bn, pgClient as bt, describeActor as c, LOCAL_RABBITMQ_USER as cn, workerEnvKeys as ct, extractSubdomain as d, postgresSuperuser as dn, constructGlobs as dt, workerUnits as en, externalServices as et, findRootDomain as f, readLocalCredentials as fn, derivedContainers as ft, asDokployState as g, projectKey as gn, forgetState as gt, verifyDnsRecords as h, keystoreProject as hn, LOCAL_CA_PATH as ht, dnsRecordResource as i, bucketPolicies as in, suppliedOnly as it, provisionCommand as j, isTelemetryKey as jn, loadEnvFiles as jt, StageProviderDisabled as k, resourceName as kn, findAvailablePort as kt, isCi as l, loadLocalCredentials as ln, FAKE_ENV as lt, orchestrateDns as m, getKeyPath as mn, workspace_exports as mt, reportDatabaseRuns as n, applyPolicies as nn, requiredStageKeys as nt, recordDnsChanges as o, postgresStatements as on, dockerfileOf as ot, normalizeDnsConfig as p, FileSecretsStore as pn, reconcileWorkspace as pt, AllowDevServicesTakesNoValue as q, logsAccess as qn, WORKER_PORT as qt, reportPlannedSeeds as r, applyPostgres as rn, stageServiceDeclarations as rt, currentActor as s, quoteIdentifier as sn, networkEnv as st, DeploySeedsFailed as t, applyBuckets as tn, reportDevServices as tt, DeployJournal as u, postgresRoleSlug as un, backendsOf as ut, createEmptyState as v, withGeneratedSecrets as vn, ensurePostgresLogin as vt, setBackupState as w, withRedisPassword as wn, eventsBackendFor as wt, recordRelease as x, redisService as xn, CLUSTER_DATABASE as xt, getBackupState as y, REDIS_SERVICE as yn, bucketClient as yt, workerDockerfile as z, describeServices as zn, initStageSecrets as zt };
 
-//# sourceMappingURL=seeds-DXJorkCJ.mjs.map
+//# sourceMappingURL=seeds-CcNV8zn9.mjs.map