@geekmidas/cli 10.0.0-alpha.125 → 10.0.0-alpha.127

package/dist/{seeds-CK7w79VC.mjs → seeds-BX9pskrU.mjs}

@@ -2,13 +2,14 @@ import { t as __exportAll } from "./rolldown-runtime-BhDjJH2R.mjs";
 import { t as GkmError } from "./errors-D8Gwp5kU.mjs";
 import { s as run$1, x as gkmHome } from "./credentials-DpfnUvIR.mjs";
 import { B as LOGS_PORT, H as provisioningOf, R as stageSampleRate, U as stageProvider, _ as PUBLIC_ENV_PREFIXES, a as allConstructGlobs, ct as UnknownSecretsStoreProvider, ft as SERVER_IPV4_KEY, ht as isReservedStageKey, j as TEST_STAGE, pt as SERVER_IPV6_KEY, ut as s3SecretsLocation, v as getPublicEnvPrefix, z as telemetryEnv } from "./workspace-DBHF9Gba.mjs";
-import { t as appKey } from "./derive-B4vDpzgP.mjs";
-import { c as DEFAULT_CACHE, d as holdsEveryCache, i as readFakes, l as DEFAULT_EVENTS$1, o as objectsRoute, r as readCredentialFakes, t as SubscriberGenerator, u as DEFAULT_STORAGE } from "./SubscriberGenerator-ocQ2yj0K.mjs";
+import { t as appKey } from "./derive-Dew0QoGe.mjs";
+import { c as DEFAULT_STORAGE, l as holdsEveryCache, o as DEFAULT_CACHE, s as DEFAULT_EVENTS$1 } from "./drivers-CDjpjakg.mjs";
 import { n as deployIdentity } from "./identity-CBXr4wNi.mjs";
-import { a as startTelemetryCode, n as runtimeFor, s as writeTelemetryModule, u as telemetryArgs } from "./EndpointGenerator-errMeldx.mjs";
-import { d as ConstructGenerator, f as output, h as eventsEdgeBucket, i as discover } from "./discover-CzGM5P3p.mjs";
+import { a as startTelemetryCode, n as runtimeFor, s as writeTelemetryModule, u as telemetryArgs } from "./EndpointGenerator-B99OGzbO.mjs";
+import { d as ConstructGenerator, f as output, h as eventsEdgeBucket, i as discover } from "./discover-DOhYSKY_.mjs";
 import { ConfigNotFound, NotInAnApp, loadWorkspaceAppInfo, loadWorkspaceConfig } from "./config.mjs";
-import { c as runtimeOf } from "./resolve-BCU9pYDx.mjs";
+import { i as readFakes, o as objectsRoute, r as readCredentialFakes, t as SubscriberGenerator } from "./SubscriberGenerator-0ruEmYXj.mjs";
+import { c as runtimeOf } from "./resolve-CCVCc43b.mjs";
 import { basename, dirname, isAbsolute, join, parse, relative, resolve, sep } from "node:path";
 import { constants, existsSync, readFileSync } from "node:fs";
 import { appendFile, chmod, copyFile, mkdir, readFile, readdir, rm, stat, writeFile } from "node:fs/promises";
@@ -541,6 +542,7 @@ function processorsDevRoute(fileServerId) {
 const EDGE_KINDS = {
 	"file-server": true,
 	"rest-api": true,
+	"websocket-api": true,
 	site: true
 };
 /**
@@ -887,7 +889,7 @@ function telemetryOf(manifest, id) {
 	const declaration = manifest[id];
 	if (!declaration) return void 0;
 	if (declaration.kind === "worker" || declaration.kind === "file-server") return nodeOf(manifest, declaration.telemetry);
-	if (declaration.kind !== "rest-api") return void 0;
+	if (declaration.kind !== "rest-api" && declaration.kind !== "websocket-api") return void 0;
 	return nodeOf(manifest, declaration.telemetry);
 }
 /**
@@ -895,12 +897,12 @@ function telemetryOf(manifest, id) {
 * undefined for a site, an app without one, or one with no edge.
 */
 function appTelemetry(manifest, appName) {
-	const id = Object.entries(manifest).find(([id, d]) => d.kind === "rest-api" && appKey(id) === appName)?.[0];
+	const id = Object.entries(manifest).find(([id, d]) => (d.kind === "rest-api" || d.kind === "websocket-api") && appKey(id) === appName)?.[0];
 	return id ? telemetryOf(manifest, id) : void 0;
 }
 /** Whether any process in the manifest emits through a `Telemetry` node. */
 function usesTelemetry(manifest) {
-	return Object.entries(manifest).some(([id, d]) => (d.kind === "rest-api" || d.kind === "worker" || d.kind === "file-server") && telemetryOf(manifest, id) !== void 0);
+	return Object.entries(manifest).some(([id, d]) => (d.kind === "rest-api" || d.kind === "websocket-api" || d.kind === "worker" || d.kind === "file-server") && telemetryOf(manifest, id) !== void 0);
 }
 /**
 * One process's share of the telemetry keys a stage resolved: all of them,
@@ -974,7 +976,8 @@ const CONTAINERS = {
 	"database-schema": "postgres",
 	objects: "minio",
 	"file-server": "caddy",
-	email: "mailpit"
+	email: "mailpit",
+	"websocket-api": "redis"
 };
 /**
 * The container a cache backend needs locally.
@@ -1154,7 +1157,7 @@ function planFor(manifest, stage, order, options = {}) {
 			name: resourceName(id, declaration.kind, stage, options.localStage),
 			envKey: providedKeyFor(id, declaration.kind, ROLES[declaration.kind] ?? "url"),
 			provisions: PROVISIONS[declaration.kind] === true,
-			...declaration.kind === "rest-api" ? { callers: dependentsOf(manifest, id) } : {},
+			...declaration.kind === "rest-api" || declaration.kind === "websocket-api" ? { callers: dependentsOf(manifest, id) } : {},
 			...declaration.kind === "site" ? { publicEnv: publicEnvFor(declaration, manifest) } : {},
 			...declaration.kind === "mobile-app" ? {
 				publicEnv: publicEnvFor(declaration, manifest),
@@ -1163,7 +1166,7 @@ function planFor(manifest, stage, order, options = {}) {
 			...declaration.kind === "file-server" && declaration.open?.length ? { open: declaration.open } : {},
 			...declaration.kind === "file-server" && declaration.processors?.length ? { processors: [...new Set(declaration.processors.map((p) => p.prefix))].sort() } : {},
 			...declaration.kind === "objects" && bucketExpiry(manifest, id) ? { expire: bucketExpiry(manifest, id) } : {},
-			...(declaration.kind === "rest-api" || declaration.kind === "site") && declaration.subdomain ? { subdomain: declaration.subdomain } : {},
+			...(declaration.kind === "rest-api" || declaration.kind === "websocket-api" || declaration.kind === "site") && declaration.subdomain ? { subdomain: declaration.subdomain } : {},
 			...fake ? { fake: {
 				key: fake.key,
 				credentials: fake.credentials
@@ -1330,6 +1333,12 @@ function envFor(plan, options) {
 			...options.lanAddress ? { lanAddress: options.lanAddress } : {},
 			...options.metroPorts ? { metroPorts: options.metroPorts } : {}
 		}));
+		if (resource.kind === "websocket-api") {
+			const origins = surfaceEnv(resource, url, resolved)[provideKey(resource.id, "trustedOrigins")];
+			if (origins !== void 0) env[provideKey(resource.id, "trustedOrigins")] = origins;
+			const publisher = webSocketPublisher(resource, options.ports, options.project ?? "", credential);
+			if (publisher) env[provideKey(resource.id, "publisherConnectionString")] = publisher;
+		}
 		if (url) env[resource.envKey] = url;
 		if (isDatabase(resource.kind) && resource.roles !== false) {
 			const owner = ownerUrl(resource, plan, options.ports, options.project ?? "", credential);
@@ -1422,10 +1431,27 @@ function surfaceEnv(resource, url, resolved = {}, local = {}) {
 		...device ? { [provideKey(resource.id, "deviceUrl")]: device } : {}
 	};
 }
-/** An address reduced to the origin a browser compares against. */
+/**
+* Where a WebSocket surface's publisher meets its sockets: the local Redis,
+* on channels named for the project and the surface, so two projects sharing
+* one Redis never see each other's frames.
+*/
+function webSocketPublisher(resource, ports, project, credential) {
+	const port = ports[primaryPortKey("redis")];
+	if (port === void 0) return void 0;
+	const channel = encodeURIComponent(`gkm:ws:${project ? `${project}:` : ""}${resource.id}`);
+	return `redis://:${encodeURIComponent(credential.containers.redis.password)}@${LOCAL_HOST}:${port}?channel=${channel}`;
+}
+/**
+* An address reduced to the origin a browser compares against.
+*
+* A WebSocket surface's address is `wss://`, but its host is served over
+* HTTPS like any other: its origin is that one, and a non-web scheme among the
+* origins means a mobile app to whoever reads the list.
+*/
 function originOf(address) {
 	try {
-		return new URL(address).origin;
+		return new URL(address.replace(/^ws(s?):/, "http$1:")).origin;
 	} catch {
 		return;
 	}
@@ -1513,6 +1539,11 @@ function urlFor(resource, plan, ports, project, addresses, credential) {
 		const edge = plan.containers.includes("caddy") ? ports[primaryPortKey("caddy")] : void 0;
 		return address && edge !== void 0 ? `https://${hostFor$1(resource, project)}:${edge}` : address;
 	}
+	if (resource.kind === "websocket-api") {
+		const address = addresses?.[resource.id];
+		const edge = plan.containers.includes("caddy") ? ports[primaryPortKey("caddy")] : void 0;
+		return address && edge !== void 0 ? `wss://${hostFor$1(resource, project)}:${edge}` : address?.replace(/^http/, "ws");
+	}
 	if (!resource.container) return void 0;
 	const port = ports[primaryPortKey(resource.container)];
 	if (port === void 0) return void 0;
@@ -1785,11 +1816,14 @@ var RedisPasswordMissing = class extends GkmError {
 	}
 };
 /**
-* Whether a stage's stack runs Redis: a cache is declared and the stage's
-* secrets do not set the URL of every one.
+* Whether a stage's stack runs Redis: a cache or a WebSocket surface is
+* declared and the stage's secrets do not set the URL of every one.
 */
 function runsRedis(manifest, custom) {
-	return Object.values(manifest).some((declaration) => declaration?.kind === "cache" && (declaration.provides ?? []).some((key) => custom[key] === void 0));
+	return Object.values(manifest).some((declaration) => {
+		if (declaration?.kind === "cache") return (declaration.provides ?? []).some((key) => custom[key] === void 0);
+		return declaration?.kind === "websocket-api" && custom[provideKey(declaration.id, "publisherConnectionString")] === void 0;
+	});
 }
 /** A password: 256 random bits, URL-safe, so it sits in a URL unescaped. */
 function generateRedisPassword() {
@@ -1826,7 +1860,8 @@ function withRedisPassword(secrets) {
 function stackRedis(options) {
 	const { plan, stage, local, custom } = options;
 	const caches = plan.resources.filter((r) => r.kind === "cache" && custom[r.envKey] === void 0).sort((a, b) => a.id.localeCompare(b.id));
-	if (caches.length === 0) return void 0;
+	const publishers = plan.resources.filter((r) => r.kind === "websocket-api").map((r) => provideKey(r.id, "publisherConnectionString")).filter((key) => custom[key] === void 0);
+	if (caches.length === 0 && publishers.length === 0) return void 0;
 	const set = custom[REDIS_PASSWORD_KEY];
 	const password = set ?? (local ? options.localPassword : void 0);
 	if (!password) throw new RedisPasswordMissing(stage);
@@ -1834,7 +1869,7 @@ function stackRedis(options) {
 	return {
 		password,
 		passwordFromSecrets: Boolean(set),
-		urls: Object.fromEntries(caches.map((cache, index) => [cache.envKey, `redis://:${auth}@${REDIS_SERVICE}:${REDIS_PORT}/${index}`])),
+		urls: Object.fromEntries([...caches.map((cache, index) => [cache.envKey, `redis://:${auth}@${REDIS_SERVICE}:${REDIS_PORT}/${index}`]), ...publishers.map((key) => [key, `redis://:${auth}@${REDIS_SERVICE}:${REDIS_PORT}`])]),
 		env: {
 			[REDIS_PASSWORD_KEY]: password,
 			REDISCLI_AUTH: password
@@ -2959,11 +2994,11 @@ function processorUnits(workspace, manifest) {
 /** The backend apps whose builds generate a server, each where it lives. */
 function hostApps(workspace, manifest) {
 	return Object.entries(workspace.apps).filter(([, app]) => app.type === "backend" && !app.entry).map(([name, app]) => {
-		const surface = Object.entries(manifest).find(([id, d]) => d.kind === "rest-api" && appKey(id) === name)?.[1];
+		const surface = Object.entries(manifest).find(([id, d]) => (d.kind === "rest-api" || d.kind === "websocket-api") && appKey(id) === name)?.[1];
 		return {
 			name,
 			root: isAbsolute(app.path) ? app.path : join(workspace.root, app.path),
-			generated: !(surface?.kind === "rest-api" && surface.endpoints.length > 0)
+			generated: !(surface?.kind === "websocket-api" || surface?.kind === "rest-api" && surface.endpoints.length > 0)
 		};
 	}).sort((a, b) => a.name.localeCompare(b.name));
 }
@@ -6151,7 +6186,7 @@ function processorAddresses(workspace, manifest) {
 function surfaceAddresses(workspace, manifest, at = (_app, port) => localAddress(port)) {
 	const addresses = {};
 	for (const [id, declaration] of Object.entries(manifest)) {
-		if (declaration.kind !== "rest-api" && declaration.kind !== "site") continue;
+		if (declaration.kind !== "rest-api" && declaration.kind !== "websocket-api" && declaration.kind !== "site") continue;
 		const host = appKey(id);
 		const port = workspace.apps[host]?.port;
 		if (port) addresses[id] = at(host, port);
@@ -6276,7 +6311,7 @@ function networkEnv(plan, options, hostOf = (container) => container) {
 * port.
 */
 function appEnvKeys(manifest, appName, runnables = {}) {
-	const entry = Object.entries(manifest).find(([id, d]) => (d.kind === "rest-api" || d.kind === "site" || d.kind === "mobile-app") && appKey(id) === appName);
+	const entry = Object.entries(manifest).find(([id, d]) => (d.kind === "rest-api" || d.kind === "websocket-api" || d.kind === "site" || d.kind === "mobile-app") && appKey(id) === appName);
 	if (!entry) return void 0;
 	const [id, declaration] = entry;
 	const keys = /* @__PURE__ */ new Set([
@@ -6284,7 +6319,7 @@ function appEnvKeys(manifest, appName, runnables = {}) {
 		...declaration.requires ?? [],
 		...declaration.kind === "rest-api" ? declaration.endpoints.flatMap((endpoint) => endpoint.requires ?? []) : []
 	]);
-	addEdgeKeys(manifest, [...dependenciesOf(declaration).map((edge) => edge.target), ...runnables[id] ?? []], keys);
+	addEdgeKeys(manifest, [...dependenciesOf(declaration).map((edge) => edge.target), ...runnables[id] ?? []], keys, declaration.kind === "site" || declaration.kind === "mobile-app");
 	if (declaration.kind === "site" || declaration.kind === "mobile-app") {
 		for (const key of TELEMETRY_KEYS) keys.delete(key);
 		for (const key of Object.keys(publicEnvFor(declaration, manifest))) keys.add(key);
@@ -6326,7 +6361,7 @@ function processorEnvKeys(manifest, fileServerId, runnables = {}) {
 	], keys);
 	return keys;
 }
-function addEdgeKeys(manifest, edges, keys) {
+function addEdgeKeys(manifest, edges, keys, client = false) {
 	for (const id of edges) {
 		const bucket = eventsEdgeBucket(id);
 		if (bucket) {
@@ -6342,6 +6377,11 @@ function addEdgeKeys(manifest, edges, keys) {
 			keys.add(provideKey(id, "url"));
 			continue;
 		}
+		if (target.kind === "websocket-api") {
+			keys.add(provideKey(id, "url"));
+			if (!client) keys.add(provideKey(id, "publisherConnectionString"));
+			continue;
+		}
 		for (const key of target.provides ?? []) keys.add(key);
 		if (target.kind === "queue" || target.kind === "topic") keys.add("EVENT_PUBLISHER_CONNECTION_STRING");
 		if (target.kind === "objects") {
@@ -6572,7 +6612,7 @@ function stageServiceDeclarations(input) {
 	};
 	for (const [id, declaration] of Object.entries(manifest)) {
 		const name = appKey(id);
-		if (declaration.kind === "rest-api" || declaration.kind === "site" || declaration.kind === "mobile-app") read(name, appEnvKeys(manifest, name, runnables) ?? []);
+		if (declaration.kind === "rest-api" || declaration.kind === "websocket-api" || declaration.kind === "site" || declaration.kind === "mobile-app") read(name, appEnvKeys(manifest, name, runnables) ?? []);
 		if (declaration.kind === "site") read(name, Object.values(publicEnvFor(declaration, manifest)));
 		if (declaration.kind === "worker") read(name, workerEnvKeys(manifest, id, runnables) ?? []);
 	}
@@ -8283,7 +8323,7 @@ async function createDnsProvider(options) {
 		});
 	}
 	if (provider === "godaddy") {
-		const { GoDaddyProvider } = await import("./GoDaddyProvider-BN1dODm9.mjs");
+		const { GoDaddyProvider } = await import("./GoDaddyProvider-BG-UdElN.mjs");
 		return new GoDaddyProvider(options.godaddy ?? {});
 	}
 	if (provider === "cloudflare") throw new DnsProviderNotImplemented("cloudflare");
@@ -9134,4 +9174,4 @@ function reportPlannedSeeds(planned, log) {
 //#endregion
 export { ORIGIN_VERIFY_HEADER as $, telemetryOf as $n, maskPassword as $t, StageProviderDisabled as A, postgresSuperuser as An, LEGACY_LOCAL_LOGIN as At, processorDockerfile as B, redisService as Bn, createCredentialsPreload as Bt, recordRollback as C, postgresDatabaseNames as Cn, backendsOf as Ct, setPostgresBackupId as D, LOCAL_RABBITMQ_USER as Dn, workspace_exports as Dt, setGeneratedSecret as E, mergeLifecycle as En, reconcileWorkspace as Et, DockerBuildFailed as F, projectKey as Fn, composeFor as Ft, workerBundleName as G, localRolePassword as Gn, loadPortState as Gt, workerDockerfile as H, stackRedis as Hn, findAvailablePort as Ht, DockerPushFailed as I, readKey as In, cacheBackendFor as It, CronGenerator as J, resourceName as Jn, isRemoteStore as Jt, workerEntryDir as K, TELEMETRY_CONTAINER as Kn, loadSecretsForApp as Kt, appDockerfile as L, withGeneratedSecrets as Ln, eventsBackendFor as Lt, provisionCommand as M, FileSecretsStore as Mn, bucketClient as Mt, stageProviderNotes as N, getKeyPath as Nn, pgClient as Nt, DnsRecordsUnreadable as O, loadLocalCredentials as On, LOCAL_CA_PATH as Ot, PROVIDER_KINDS as P, keystoreProject as Pn, CLUSTER_DATABASE as Pt, processorInfo as Q, surfaceClientTraced as Qn, initStageSecrets as Qt, dockerCommand as R, REDIS_SERVICE as Rn, providerOf as Rt, recordRelease as S, bucketPolicies as Sn, FAKE_ENV as St, setBackupState as T, quoteIdentifier as Tn, derivedContainers as Tt, workerDockerfileOf as U, withRedisPassword as Un, isPortAvailable as Ut, processorNative as V, runsRedis as Vn, createEntryWrapper as Vt, WorkerGenerator as W, envFor as Wn, loadEnvFiles as Wt, processorBundleName as X, isTelemetryKey as Xn, storeFromConfig as Xt, ProcessorGenerator as Y, appTelemetry as Yn, secretsStoreFor as Yt, processorEntryDir as Z, scopeTelemetryEnv as Zn, store_exports as Zt, asDokployState as _, applyLifecycles as _n, withLogsPassword as _r, appEnvKeys as _t, dnsResources as a, PROCESSOR_PORT as an, DEFAULT_IMAGES as ar, AllowDevServicesTakesNoValue as at, getBackupState as b, applyPostgres as bn, resolveHost as br, processorEnvKeys as bt, currentActor as c, detectPackageManager as cn, portKeys as cr, ExternalServicesNotConfigured as ct, DeployJournal as d, isImageBuild as dn, primaryPortKey as dr, devServicesUsed as dt, storage_exports as en, usesTelemetry as er, PROCESSOR_ORIGIN_SECRET_ENV as et, extractSubdomain as f, publicBuildValues as fn, LOCAL_LOGS_EMAIL as fr, externalServices as ft, verifyDnsRecords as g, applyBuckets as gn, stackLogs as gr, suppliedOnly as gt, orchestrateDns as h, workerUnits as hn, logsService as hr, stageServiceDeclarations as ht, dnsRecordResource as i, imageLayout as in, hostFor$1 as ir, validateImageRef as it, assertStageProvidersEnabled as j, readLocalCredentials as jn, ensurePostgresLogin as jt, createDnsProvider as k, postgresRoleSlug as kn, forgetState as kt, describeActor as l, findBuildRoot as ln, portsOf as lr, STORAGE_KEY_PAIR as lt, normalizeDnsConfig as m, processorUnits as mn, logsAccess as mr, requiredStageKeys as mt, reportDatabaseRuns as n, withCustomSecret as nn, watchedBuckets as nr, originSecretKey as nt, forgetDnsResource as o, TURBO_VERSION as on, describeServices as or, DEV_SERVICES as ot, findRootDomain as p, isUnder as pn, LOGS_SERVICE as pr, reportDevServices as pt, QueueGenerator as q, planFor as qn, prepareEntryCredentials as qt, reportPlannedSeeds as r, composeBuildPaths as rn, EMULATOR_ACCESS_KEY_ID as rr, processorOriginHost as rt, recordDnsChanges as s, WORKER_PORT as sn, fakeKey as sr, DevServicesNeedServerTarget as st, DeploySeedsFailed as t, toEmbeddableSecrets as tn, minioWebhookEnv as tr, newOriginSecret as tt, isCi as u, imageBuildCredentials as un, postgresImage as ur, assertDevServicesFlag as ut, createComposeState as v, applyNotifications as vn, NoDomainForStage as vr, dockerfileOf as vt, setApplicationId as w, postgresStatements as wn, constructGlobs as wt, getGeneratedSecret as x, bucketLifecycles as xn, workerEnvKeys as xt, createEmptyState as y, applyPolicies as yn, isMainFrontendApp as yr, networkEnv as yt, ensureDockerignore as z, STACK_CACHE as zn, storageBackendFor as zt };
 
-//# sourceMappingURL=seeds-CK7w79VC.mjs.map
+//# sourceMappingURL=seeds-BX9pskrU.mjs.map