@geekmidas/cli 10.0.0-alpha.35 → 10.0.0-alpha.37

package/dist/index.cjs

@@ -5,7 +5,7 @@ const require_discover = require("./discover-CroTIm0K.cjs");
 const require_config = require("./config-DgAHy8nY.cjs");
 const require_workspace = require("./workspace-CAJk6UmC.cjs");
 const require_storage = require("./storage-C2JC31V9.cjs");
-const require_workspace$1 = require("./workspace-CRjZkCTW.cjs");
+const require_workspace$1 = require("./workspace-DUhLejv4.cjs");
 const require_OpenApiTsGenerator = require("./OpenApiTsGenerator-D1nhN98m.cjs");
 const require_openapi = require("./openapi.cjs");
 const require_ready = require("./ready-CXhoutix.cjs");
@@ -42,7 +42,7 @@ let _geekmidas_constructs_subscribers = require("@geekmidas/constructs/subscribe
 let _geekmidas_constructs_topic = require("@geekmidas/constructs/topic");
 let node_dns_promises = require("node:dns/promises");
 //#region package.json
-var version = "10.0.0-alpha.35";
+var version = "10.0.0-alpha.37";
 //#endregion
 //#region src/auth/credentials.ts
 /**
@@ -1092,9 +1092,9 @@ async function workspaceDevCommand(workspace, options) {
 		...reconciled.env
 	};
 	if (options.migrate || options.seed) {
-		const { prepareDevDatabases } = await Promise.resolve().then(() => require("./migrate-nlvT-GnY.cjs"));
+		const { prepareDevDatabases } = await Promise.resolve().then(() => require("./migrate-Cgga-OGi.cjs"));
 		await prepareDevDatabases(workspace, reconciled.env, { seed: !!options.seed });
-	} else await Promise.resolve().then(() => require("./migrate-nlvT-GnY.cjs")).then(({ reportPendingMigrations }) => reportPendingMigrations(workspace, reconciled.env)).catch((error) => {
+	} else await Promise.resolve().then(() => require("./migrate-Cgga-OGi.cjs")).then(({ reportPendingMigrations }) => reportPendingMigrations(workspace, reconciled.env)).catch((error) => {
 		logger$10.log(`⚠️  Could not check for pending migrations: ${error instanceof Error ? error.message : String(error)}`);
 	});
 	const appUrls = {};
@@ -8809,26 +8809,26 @@ function loadPackageJson() {
 * Run: pnpm --filter @geekmidas/cli sync-versions
 */
 const GEEKMIDAS_VERSIONS = {
-	"@geekmidas/audit": "~10.0.0-alpha.35",
-	"@geekmidas/auth": "~10.0.0-alpha.35",
-	"@geekmidas/cache": "~10.0.0-alpha.35",
-	"@geekmidas/client": "~10.0.0-alpha.35",
-	"@geekmidas/cloud": "~10.0.0-alpha.35",
-	"@geekmidas/constructs": "~10.0.0-alpha.35",
-	"@geekmidas/db": "~10.0.0-alpha.35",
-	"@geekmidas/emailkit": "~10.0.0-alpha.35",
-	"@geekmidas/envkit": "~10.0.0-alpha.35",
-	"@geekmidas/errors": "~10.0.0-alpha.35",
-	"@geekmidas/events": "~10.0.0-alpha.35",
-	"@geekmidas/logger": "~10.0.0-alpha.35",
-	"@geekmidas/manifest": "~10.0.0-alpha.35",
-	"@geekmidas/rate-limit": "~10.0.0-alpha.35",
-	"@geekmidas/schema": "~10.0.0-alpha.35",
-	"@geekmidas/services": "~10.0.0-alpha.35",
-	"@geekmidas/storage": "~10.0.0-alpha.35",
-	"@geekmidas/studio": "~10.0.0-alpha.35",
-	"@geekmidas/telescope": "~10.0.0-alpha.35",
-	"@geekmidas/testkit": "~10.0.0-alpha.35",
+	"@geekmidas/audit": "~10.0.0-alpha.37",
+	"@geekmidas/auth": "~10.0.0-alpha.37",
+	"@geekmidas/cache": "~10.0.0-alpha.37",
+	"@geekmidas/client": "~10.0.0-alpha.37",
+	"@geekmidas/cloud": "~10.0.0-alpha.37",
+	"@geekmidas/constructs": "~10.0.0-alpha.37",
+	"@geekmidas/db": "~10.0.0-alpha.37",
+	"@geekmidas/emailkit": "~10.0.0-alpha.37",
+	"@geekmidas/envkit": "~10.0.0-alpha.37",
+	"@geekmidas/errors": "~10.0.0-alpha.37",
+	"@geekmidas/events": "~10.0.0-alpha.37",
+	"@geekmidas/logger": "~10.0.0-alpha.37",
+	"@geekmidas/manifest": "~10.0.0-alpha.37",
+	"@geekmidas/rate-limit": "~10.0.0-alpha.37",
+	"@geekmidas/schema": "~10.0.0-alpha.37",
+	"@geekmidas/services": "~10.0.0-alpha.37",
+	"@geekmidas/storage": "~10.0.0-alpha.37",
+	"@geekmidas/studio": "~10.0.0-alpha.37",
+	"@geekmidas/telescope": "~10.0.0-alpha.37",
+	"@geekmidas/testkit": "~10.0.0-alpha.37",
 	"@geekmidas/cli": `~${loadPackageJson().version}`
 };
 //#endregion
@@ -9607,9 +9607,7 @@ import { EnvironmentParser } from '@geekmidas/envkit';
  * \`MobileApp\` construct's \`.dependsOn([api, auth])\` is where every value
  * here comes from, so none of it is written down.
  *
- * - \`APP_SCHEME\`: the URL scheme for this stage — \`${scheme}\` deployed,
- *   \`${scheme}-dev\` locally, so a development build and the store build on
- *   one phone never answer each other's links.
+ * - \`APP_SCHEME\`: the URL scheme — \`${scheme}\`, the same on every stage.
  * - \`EXPO_PUBLIC_API_URL\` / \`EXPO_PUBLIC_AUTH_URL\`: where the servers
  *   answer. Locally that is their own port on \`localhost\`, which
  *   \`config.ts\` points at the machine Metro was served from.
@@ -10920,7 +10918,7 @@ export const authDb = database.schema<Record<string, never>, 'AuthDb'>('AuthDb')
 	files.push(usersMigration());
 	files.push({
 		path: "constructs/auth.ts",
-		content: `import { BetterAuth } from '@geekmidas/constructs/auth';
+		content: `${frontendFramework === "expo" ? "import { expo } from '@better-auth/expo';\n" : ""}import { BetterAuth } from '@geekmidas/constructs/auth';
 import { authDb } from './database.ts';
 
 /**
@@ -10935,7 +10933,11 @@ import { authDb } from './database.ts';
 export const auth = new BetterAuth('Auth', {
   path: 'apps/auth',
   database: authDb,
-  basePath: '/api/auth',
+  basePath: '/api/auth',${frontendFramework === "expo" ? `
+  // The mobile app signs in through Better Auth's Expo plugin: it sends its
+  // scheme as the origin, and this is what reads it. The construct refuses to
+  // start without it once a MobileApp depends on this server.
+  options: { plugins: [expo()] },` : ""}
 });
 `
 	});
@@ -10974,7 +10976,7 @@ import { auth } from './auth.ts';
  * The mobile app — a construct like a site, which is what makes it an app.
  *
  * \`.dependsOn()\` is the single fact behind what a mobile app otherwise has
- * written down by hand: its API and auth URLs, its URL scheme per stage, the
+ * written down by hand: its API and auth URLs, its URL scheme, the
  * scheme in the auth server's trusted origins, Better Auth's Expo plugin, and
  * sign-in links a phone can open.
  */
@@ -15158,7 +15160,7 @@ var NoStoredSecrets = class extends Error {
 	}
 };
 async function reconcile(secrets, workspace, stage) {
-	const { derivedContainers } = await Promise.resolve().then(() => require("./workspace-CRjZkCTW.cjs")).then((n) => n.workspace_exports);
+	const { derivedContainers } = await Promise.resolve().then(() => require("./workspace-DUhLejv4.cjs")).then((n) => n.workspace_exports);
 	const result = require_reconcile.reconcileMissingSecrets(secrets, workspace, await derivedContainers(workspace, stage));
 	return result ? {
 		secrets: result.secrets,
@@ -15457,6 +15459,56 @@ function printSummary(workspace, stage) {
 	logger$1.log("");
 }
 //#endregion
+//#region src/test/teardown.ts
+/**
+* Dropping the test stage's databases when a suite ends.
+*
+* Reconcile never drops — the line it draws is at data. The test stage's data
+* is the exception: every test runs in a transaction rolled back after it, so
+* nothing in these databases is anyone's, and a database kept between runs is
+* one whose migrations already ran — an edited migration is never applied to
+* it again. So each run starts from a database it created, and drops it when
+* the suite ends: the Vitest global setup's teardown.
+*/
+/**
+* Drop the databases the last setup recorded, and forget the test stage's
+* reconcile, so the next run provisions them from nothing.
+*
+* A no-op when nothing is recorded — no run yet, or one already torn down —
+* so running it twice, or before a setup, is harmless.
+*/
+async function dropTestDatabases(cwd, root, sql = require_workspace$1.pgClient) {
+	const readyPath = (0, node_path.join)(cwd, require_ready.TEST_READY_FILE);
+	const ready = await readReady(readyPath);
+	const recorded = ready?.databases;
+	if (!ready || !recorded) return [];
+	const client = sql(recorded.port);
+	for (const name of recorded.names) {
+		if (!name.endsWith(`_test`)) throw new NotATestDatabase(name);
+		await client.query(void 0, `DROP DATABASE IF EXISTS ${require_workspace$1.quoteIdentifier(name)} WITH (FORCE)`);
+	}
+	await require_workspace$1.forgetState(root, require_workspace.TEST_STAGE);
+	const { databases: _dropped, ...rest } = ready;
+	await (0, node_fs_promises.writeFile)(readyPath, JSON.stringify(rest, null, 2));
+	return recorded.names;
+}
+async function readReady(path) {
+	try {
+		return JSON.parse(await (0, node_fs_promises.readFile)(path, "utf-8"));
+	} catch {
+		return;
+	}
+}
+/** A name recorded for the test stage without the test stage's suffix. */
+var NotATestDatabase = class extends Error {
+	database;
+	constructor(database) {
+		super(`Refusing to drop '${database}': only the test stage's databases (named '…_${require_workspace.TEST_STAGE}') are dropped after a suite. Delete ${require_ready.TEST_READY_FILE} if it was edited by hand.`);
+		this.database = database;
+		this.name = "NotATestDatabase";
+	}
+};
+//#endregion
 //#region src/test/index.ts
 /**
 * Run tests with secrets, dependency URLs, and .env files loaded.
@@ -15465,6 +15517,10 @@ function printSummary(workspace, stage) {
 async function testCommand(options = {}) {
 	const cwd = process.cwd();
 	const stage = options.stage ?? await require_config.loadWorkspaceConfig(cwd).then((loaded) => loaded.workspace.stages.local).catch(() => void 0);
+	if (options.teardown) {
+		await teardown(cwd);
+		return;
+	}
 	if (!stage) throw new NoStageToTest();
 	console.log(`\n🧪 Running tests with ${stage} environment...\n`);
 	if (options.autoSetup || Boolean(process.env.GKM_AUTO_SETUP)) {
@@ -15473,6 +15529,7 @@ async function testCommand(options = {}) {
 	}
 	const defaultEnv = require_workspace$1.loadEnvFiles(".env");
 	if (defaultEnv.loaded.length > 0) console.log(`  📦 Loaded env: ${defaultEnv.loaded.join(", ")}`);
+	if (!options.prepare) await teardown(cwd);
 	const result = await require_workspace$1.prepareEntryCredentials({
 		stage,
 		startDocker: !options.prepare,
@@ -15513,7 +15570,8 @@ async function testCommand(options = {}) {
 	const readyPath = (0, node_path.join)(cwd, require_ready.TEST_READY_FILE);
 	await (0, node_fs_promises.writeFile)(readyPath, JSON.stringify({
 		env: result.secretsJsonPath,
-		...manifestPath ? { manifest: manifestPath } : {}
+		...manifestPath ? { manifest: manifestPath } : {},
+		...testDatabases(result.reconciled)
 	}, null, 2));
 	if (options.setup) {
 		console.log(`  🧪 Test stage ready: ${require_ready.TEST_READY_FILE}`);
@@ -15552,12 +15610,29 @@ async function testCommand(options = {}) {
 		});
 	});
 }
+/** Drop what the last setup created — see `dropTestDatabases`. */
+async function teardown(cwd) {
+	const dropped = await dropTestDatabases(cwd, await require_config.loadWorkspaceConfig(cwd).then((loaded) => loaded.workspace.root).catch(() => cwd));
+	if (dropped.length > 0) console.log(`  🧹 Dropped ${dropped.join(", ")}`);
+}
+/**
+* The test stage's Postgres databases, to drop when the suite ends — those
+* the plan provisions, on the port the shared container answers.
+*/
+function testDatabases(reconciled) {
+	const port = reconciled?.ports[require_workspace$1.primaryPortKey("postgres")];
+	const names = (reconciled?.plan.resources ?? []).filter((resource) => resource.kind === "database" && resource.provisions && resource.container === "postgres").map((resource) => resource.name);
+	return port !== void 0 && names.length > 0 ? { databases: {
+		port,
+		names
+	} } : {};
+}
 /**
 * Migrate the test stage just reconciled, then seed it: a test run never
 * starts without the reference data the app needs.
 */
 async function migrateTestStage(workspace, env) {
-	const { migrateAndSeed } = await Promise.resolve().then(() => require("./migrate-nlvT-GnY.cjs"));
+	const { migrateAndSeed } = await Promise.resolve().then(() => require("./migrate-Cgga-OGi.cjs"));
 	const { discover } = await Promise.resolve().then(() => require("./discover-CroTIm0K.cjs")).then((n) => n.discover_exports);
 	const sources = {};
 	const manifest = await discover({
@@ -15985,7 +16060,7 @@ program.command("exec").description("Run a command with secrets injected into Cr
 		process.exit(1);
 	}
 });
-program.command("test").description("Run tests with secrets loaded from environment").option("--stage <stage>", "Stage to load secrets from (default: stages.local)").option("--run", "Run tests once without watch mode").option("--watch", "Enable watch mode").option("--coverage", "Generate coverage report").option("--ui", "Open Vitest UI").option("--auto-setup", "Generate a fresh stage (secrets + key) from the workspace config when none exists (for CI; also via GKM_AUTO_SETUP)").option("--prepare", "Write the test manifest and #test harness, then stop — for a typecheck that runs before the suite").option("--setup", "Reconcile, migrate and seed the test stage and write the harness, then stop — what @geekmidas/cli/vitest runs").argument("[pattern]", "Pattern to filter tests").action(async (pattern, options) => {
+program.command("test").description("Run tests with secrets loaded from environment").option("--stage <stage>", "Stage to load secrets from (default: stages.local)").option("--run", "Run tests once without watch mode").option("--watch", "Enable watch mode").option("--coverage", "Generate coverage report").option("--ui", "Open Vitest UI").option("--auto-setup", "Generate a fresh stage (secrets + key) from the workspace config when none exists (for CI; also via GKM_AUTO_SETUP)").option("--prepare", "Write the test manifest and #test harness, then stop — for a typecheck that runs before the suite").option("--setup", "Reconcile, migrate and seed the test stage and write the harness, then stop — what @geekmidas/cli/vitest runs").option("--teardown", "Drop the test stage's databases the last setup created, then stop — what @geekmidas/cli/vitest runs when the suite ends").argument("[pattern]", "Pattern to filter tests").action(async (pattern, options) => {
 	try {
 		const globalOptions = program.opts();
 		if (globalOptions.cwd) process.chdir(globalOptions.cwd);
@@ -16002,7 +16077,7 @@ program.command("migrate").description("Apply each database construct's migratio
 	try {
 		const globalOptions = program.opts();
 		if (globalOptions.cwd) process.chdir(globalOptions.cwd);
-		const { migrateCommand } = await Promise.resolve().then(() => require("./migrate-nlvT-GnY.cjs"));
+		const { migrateCommand } = await Promise.resolve().then(() => require("./migrate-Cgga-OGi.cjs"));
 		await migrateCommand({
 			...options,
 			...construct ? { construct } : {}
@@ -16016,7 +16091,7 @@ program.command("seed").description("Migrate, then run each database construct's
 	try {
 		const globalOptions = program.opts();
 		if (globalOptions.cwd) process.chdir(globalOptions.cwd);
-		const { seedCommand } = await Promise.resolve().then(() => require("./migrate-nlvT-GnY.cjs"));
+		const { seedCommand } = await Promise.resolve().then(() => require("./migrate-Cgga-OGi.cjs"));
 		await seedCommand({
 			...options,
 			...construct ? { construct } : {}
@@ -16030,7 +16105,7 @@ program.command("migration").description("Write a construct's next migration: an
 	try {
 		const globalOptions = program.opts();
 		if (globalOptions.cwd) process.chdir(globalOptions.cwd);
-		const { migrationCommand } = await Promise.resolve().then(() => require("./migrate-nlvT-GnY.cjs"));
+		const { migrationCommand } = await Promise.resolve().then(() => require("./migrate-Cgga-OGi.cjs"));
 		await migrationCommand({
 			construct,
 			...name ? { name } : {}
@@ -16198,7 +16273,7 @@ program.command("secrets:reconcile").description("Backfill missing custom secret
 			console.error(`No secrets found for stage "${stage}". Run "gkm secrets:init --stage ${stage}" first.`);
 			process.exit(1);
 		}
-		const { derivedContainers } = await Promise.resolve().then(() => require("./workspace-CRjZkCTW.cjs")).then((n) => n.workspace_exports);
+		const { derivedContainers } = await Promise.resolve().then(() => require("./workspace-DUhLejv4.cjs")).then((n) => n.workspace_exports);
 		const result = reconcileMissingSecrets(secrets, workspace, await derivedContainers(workspace, stage));
 		if (!result) {
 			console.log(`\n✓ Secrets for stage "${stage}" are up-to-date`);