@geekmidas/cli 10.0.0-alpha.125 → 10.0.0-alpha.127

package/dist/{compose-Bqcy0lqo.cjs → compose-BK9s_2Qe.cjs}

@@ -2,15 +2,15 @@ const require_rolldown_runtime = require("./rolldown-runtime-C0BPl7ul.cjs");
 const require_errors = require("./errors-DMC4Umsb.cjs");
 const require_credentials = require("./credentials-D7XJypNd.cjs");
 const require_workspace = require("./workspace-Du4Afb03.cjs");
-const require_snsSubscriptions = require("./snsSubscriptions-5Cqww8S7.cjs");
+const require_snsSubscriptions = require("./snsSubscriptions-f_z4PSFb.cjs");
 const require_define = require("./define-crmMcXFS.cjs");
-const require_seeds = require("./seeds-CPEcmoPn.cjs");
-const require_derive = require("./derive-DAbo49sm.cjs");
-const require_SubscriberGenerator = require("./SubscriberGenerator-BDUp7OeY.cjs");
+const require_seeds = require("./seeds-sMVADbkg.cjs");
+const require_derive = require("./derive-BtGidITm.cjs");
+const require_drivers = require("./drivers-C47nm-wB.cjs");
 const require_identity = require("./identity-CbLfgQNT.cjs");
-const require_discover = require("./discover-DL6h-J97.cjs");
-const require_drivers = require("./drivers-L29WvE95.cjs");
-const require_databases = require("./databases-fOaoBInm.cjs");
+const require_discover = require("./discover-DEOspD9M.cjs");
+const require_SubscriberGenerator = require("./SubscriberGenerator-CPjbWEOI.cjs");
+const require_databases = require("./databases-CuVGf7-M.cjs");
 let node_path = require("node:path");
 let node_fs = require("node:fs");
 let node_fs_promises = require("node:fs/promises");
@@ -663,6 +663,21 @@ var EdgeRouteConflict = class extends Error {
 function assertRouteRenderable(route) {
 	if (route.handlers?.length && (route.allow || route.paths || route.prefixes || route.requireHeader)) throw new EdgeRouteConflict(route.name);
 }
+/** File descriptors a process holding sockets may open. */
+const NOFILE = {
+	soft: 1048576,
+	hard: 1048576
+};
+/**
+* What the edge runs with: a descriptor per socket, twice — the client's and
+* the upstream's — and every local port for those upstream connections. One
+* edge address to one upstream has only the ephemeral range to open
+* connections from, ~28k by Linux's default; widened, ~64k per replica.
+*/
+const EDGE_LIMITS = {
+	sysctls: { "net.ipv4.ip_local_port_range": "1024 65535" },
+	ulimits: { nofile: NOFILE }
+};
 //#endregion
 //#region src/compose/caddyfile.ts
 /**
@@ -1023,6 +1038,7 @@ function edgeCompose(options) {
 			],
 			labels: { "dev.geekmidas.edge.config": (0, node_crypto.createHash)("sha256").update(options.staticConfig).digest("hex").slice(0, 16) },
 			networks: ["edge"],
+			...EDGE_LIMITS,
 			healthcheck: {
 				test: [
 					"CMD",
@@ -1409,7 +1425,7 @@ function probe(port, path) {
 function stackPlan(workspace, manifest, stage) {
 	return require_seeds.planFor(manifest, stage, (0, _geekmidas_manifest.provisionOrder)(manifest), {
 		localStage: workspace.stages.local,
-		events: require_SubscriberGenerator.DEFAULT_EVENTS.server,
+		events: require_drivers.DEFAULT_EVENTS.server,
 		cache: require_seeds.STACK_CACHE,
 		edge: false
 	});
@@ -1467,6 +1483,7 @@ function composeStack(input) {
 			owners.set((0, _geekmidas_manifest.provideKey)(resource.id, "inboxUrl"), resource);
 		}
 		if (resource.kind === "external-api") owners.set((0, _geekmidas_manifest.provideKey)(resource.id, "credentials"), resource);
+		if (resource.kind === "websocket-api") owners.set((0, _geekmidas_manifest.provideKey)(resource.id, "publisherConnectionString"), resource);
 	}
 	const domain = workspace.domains?.[stage];
 	const telemetry = require_workspace.resolveStageTelemetry({
@@ -1562,7 +1579,7 @@ function composeStack(input) {
 		});
 	}
 	const edgeServices = new Set(proxy === "traefik" ? [
-		...apps.map((app) => app.name),
+		...apps.flatMap(replicaNames),
 		...fileServers.size > 0 ? ["minio"] : [],
 		...logsBase?.host && logsBase.public ? [require_seeds.LOGS_SERVICE] : []
 	] : []);
@@ -1587,9 +1604,9 @@ function composeStack(input) {
 	}, hostOf);
 	const inside = require_seeds.networkEnv(plan, {
 		...derivation,
-		addresses: Object.fromEntries(apps.map((app) => [app.id, `http://${hostOf(app.name)}:${app.port}`]))
+		addresses: Object.fromEntries(apps.map((app) => [app.id, `${app.kind === "websocket-api" ? "ws" : "http"}://${hostOf(app.name)}:${app.port}`]))
 	}, hostOf);
-	const surfaceUrls = new Map(plan.resources.filter((r) => r.kind === "rest-api" || r.kind === "site").map((r) => [r.envKey, r.id]));
+	const surfaceUrls = new Map(plan.resources.filter((r) => r.kind === "rest-api" || r.kind === "websocket-api" || r.kind === "site").map((r) => [r.envKey, r.id]));
 	const appById = new Map(apps.map((app) => [app.id, app]));
 	/**
 	* What a key resolves to for one app, from the stage's secrets where only
@@ -1615,8 +1632,9 @@ function composeStack(input) {
 		}
 		if (custom[key] !== void 0) return custom[key];
 		if (owner?.kind === "cache") return redis?.urls[key];
+		if (owner?.kind === "websocket-api" && key === (0, _geekmidas_manifest.provideKey)(owner.id, "publisherConnectionString")) return redis?.urls[key];
 		const surface = surfaceUrls.get(key);
-		if (app.kind === "rest-api" && surface && surface !== app.id) return inside[key];
+		if ((app.kind === "rest-api" || app.kind === "websocket-api") && surface && surface !== app.id) return inside[key];
 		return outside[key];
 	};
 	const telemetryValues = logs ? require_workspace.telemetryEnv({
@@ -1652,7 +1670,7 @@ function composeStack(input) {
 		const values = valuesFor(app, keys);
 		const trusted = (0, _geekmidas_manifest.provideKey)(app.id, "trustedOrigins");
 		if (keys.has(trusted)) {
-			const internal = (byId.get(app.id)?.callers ?? []).map((caller) => appById.get(caller)).filter((caller) => caller?.kind === "rest-api").map((caller) => `http://${hostOf(caller.name)}:${caller.port}`);
+			const internal = (byId.get(app.id)?.callers ?? []).map((caller) => appById.get(caller)).filter((caller) => caller?.kind === "rest-api" || caller?.kind === "websocket-api").map((caller) => `http://${hostOf(caller.name)}:${caller.port}`);
 			const origins = [...(values[trusted] ?? "").split(",").filter(Boolean), ...internal];
 			values[trusted] = [...new Set(origins)].join(",");
 		}
@@ -1818,10 +1836,10 @@ function composeStack(input) {
 		...apps.map((app) => ({
 			name: app.name,
 			host: app.host,
-			upstreams: [{
-				service: app.name,
+			upstreams: replicaNames(app).map((service) => ({
+				service,
 				port: app.port
-			}],
+			})),
 			streaming: true,
 			...app.auth ? { auth: {
 				user: app.auth.user,
@@ -1952,7 +1970,7 @@ function stackApps(workspace, manifest, plan, options) {
 	const apps = [];
 	const resources = new Map(plan.resources.map((r) => [r.id, r]));
 	for (const [id, declaration] of Object.entries(manifest)) {
-		if (declaration.kind !== "rest-api" && declaration.kind !== "site") continue;
+		if (declaration.kind !== "rest-api" && declaration.kind !== "websocket-api" && declaration.kind !== "site") continue;
 		const name = require_derive.appKey(id);
 		const app = workspace.apps[name];
 		const resource = resources.get(id);
@@ -1965,10 +1983,11 @@ function stackApps(workspace, manifest, plan, options) {
 			name,
 			id,
 			kind: declaration.kind,
+			replicas: declaration.kind === "websocket-api" ? declaration.replicas ?? 1 : 1,
 			path: app.path,
 			port: app.port,
 			host,
-			url: `https://${host}${options.local && options.https !== 443 ? `:${options.https}` : ""}`,
+			url: `${declaration.kind === "websocket-api" ? "wss" : "https"}://${host}${options.local && options.https !== 443 ? `:${options.https}` : ""}`,
 			ref,
 			tag,
 			...options.images.mode === "build" ? { build: { dockerfile: `${stackDir(options.stage)}/Dockerfile.${name}` } } : {}
@@ -2094,6 +2113,10 @@ function hostOf(name, app, workspace, resource, options) {
 	if (options.local) return require_seeds.hostFor(resource, workspace.name);
 	return require_seeds.resolveHost(name, app, options.stage, workspace.domains, require_seeds.isMainFrontendApp(name, app, workspace.apps));
 }
+/** An app's compose services, one per replica: `api`, `api-2`, `api-3`. */
+function replicaNames(app) {
+	return [app.name, ...Array.from({ length: app.replicas - 1 }, (_, i) => `${app.name}-${i + 2}`)];
+}
 /** The compose document: the infrastructure, the apps, and the edge. */
 function stackFile(options) {
 	const { project, plan, apps } = options;
@@ -2137,27 +2160,31 @@ function stackFile(options) {
 	if (services["redis"] && options.redis) services[require_seeds.REDIS_SERVICE] = require_seeds.redisService(options.redis);
 	if (options.logs) services[require_seeds.LOGS_SERVICE] = require_seeds.logsService(options.logs);
 	if (options.backups) services[require_snsSubscriptions.BACKUPS_SERVICE] = require_snsSubscriptions.backupsService(options.backups, options.envFiles);
-	for (const app of apps) services[app.name] = {
-		image: app.ref,
-		...app.build ? { build: {
-			...require_seeds.composeBuildPaths({
-				composeDir: options.composeDir,
-				buildRoot: options.buildRoot,
-				workspaceRoot: options.workspaceRoot,
-				dockerfile: app.build.dockerfile
-			}),
-			...app.build.args ? { args: app.build.args } : {}
-		} } : {},
-		restart: "unless-stopped",
-		...app.kind === "rest-api" ? {
-			env_file: [{
-				path: `./${app.name}.env`,
-				format: "raw"
-			}],
-			...infra.length ? { depends_on: Object.fromEntries(infra.map((name) => [name, HEALTHY])) } : {}
-		} : {},
-		healthcheck: probe(app.port, app.kind === "site" ? "/" : "/health")
-	};
+	for (const app of apps) {
+		const definition = {
+			image: app.ref,
+			...app.build ? { build: {
+				...require_seeds.composeBuildPaths({
+					composeDir: options.composeDir,
+					buildRoot: options.buildRoot,
+					workspaceRoot: options.workspaceRoot,
+					dockerfile: app.build.dockerfile
+				}),
+				...app.build.args ? { args: app.build.args } : {}
+			} } : {},
+			restart: "unless-stopped",
+			...app.kind !== "site" ? {
+				env_file: [{
+					path: `./${app.name}.env`,
+					format: "raw"
+				}],
+				...infra.length ? { depends_on: Object.fromEntries(infra.map((name) => [name, HEALTHY])) } : {}
+			} : {},
+			healthcheck: probe(app.port, app.kind === "site" ? "/" : "/health"),
+			...app.kind === "websocket-api" ? { ulimits: { nofile: NOFILE } } : {}
+		};
+		for (const name of replicaNames(app)) services[name] = { ...definition };
+	}
 	for (const worker of [...options.workers, ...options.processors]) services[worker.name] = {
 		image: worker.ref,
 		...worker.build ? { build: require_seeds.composeBuildPaths({
@@ -2179,8 +2206,9 @@ function stackFile(options) {
 		restart: "unless-stopped",
 		ports: [`${options.https}:443`, `${options.http}:80`],
 		volumes: ["caddy-data:/data", "caddy-config:/config"],
+		...EDGE_LIMITS,
 		depends_on: Object.fromEntries([
-			...apps.map((app) => app.name),
+			...apps.flatMap(replicaNames),
 			...options.workers.filter((w) => w.push).map((w) => w.name),
 			...options.processors.map((p) => p.name)
 		].map((name) => [name, HEALTHY])),
@@ -2906,7 +2934,7 @@ function assertRedisClient(workspace, stack, manifest, runnables) {
 	if (!stack.plan.resources.some((r) => r.kind === "cache")) return;
 	const cacheKeys = Object.values(manifest).filter((d) => d.kind === "cache").flatMap((d) => d.provides ?? []);
 	const reachesCache = (keys) => cacheKeys.some((key) => keys?.has(key));
-	const missing = [.../* @__PURE__ */ new Set([...stack.apps.filter((app) => app.kind === "rest-api" && reachesCache(require_seeds.appEnvKeys(manifest, app.name, runnables))).map((a) => a.name), ...stack.workers.filter((worker) => reachesCache(require_seeds.workerEnvKeys(manifest, worker.id, runnables))).map((worker) => worker.host)])].filter((name) => {
+	const missing = [.../* @__PURE__ */ new Set([...stack.apps.filter((app) => (app.kind === "rest-api" || app.kind === "websocket-api") && reachesCache(require_seeds.appEnvKeys(manifest, app.name, runnables))).map((a) => a.name), ...stack.workers.filter((worker) => reachesCache(require_seeds.workerEnvKeys(manifest, worker.id, runnables))).map((worker) => worker.host)])].filter((name) => {
 		const app = workspace.apps[name];
 		return app && !require_drivers.installedFrom((0, node_path.join)(workspace.root, app.path), "ioredis");
 	}).sort();
@@ -3291,7 +3319,8 @@ async function migrateAndSeed(ctx, run, deps, port) {
 	const runs = await deps.migrate(options);
 	const seeds = await deps.seed({
 		...options,
-		stage: ctx.stage
+		stage: ctx.stage,
+		backends: require_seeds.backendsOf(workspace)
 	}).catch((error) => {
 		if (error instanceof require_databases.SeedFailed) throw new require_seeds.DeploySeedsFailed(ctx.stage, error.construct, error.seed, error);
 		throw error;
@@ -3550,7 +3579,7 @@ function currentUser() {
 	}
 }
 async function checkApp(ctx, app, deps, options) {
-	const url = `${app.url}${app.kind === "site" ? "/" : "/health"}`;
+	const url = `${app.url.replace(/^ws/, "http")}${app.kind === "site" ? "/" : "/health"}`;
 	let last = "not asked";
 	for (let attempt = 1; attempt <= deps.healthAttempts; attempt++) {
 		ctx.signal.throwIfAborted();
@@ -3946,4 +3975,4 @@ Object.defineProperty(exports, "stackPlan", {
 	}
 });
 
-//# sourceMappingURL=compose-Bqcy0lqo.cjs.map
+//# sourceMappingURL=compose-BK9s_2Qe.cjs.map