@geekmidas/cli 10.0.0-alpha.36 → 10.0.0-alpha.38

package/dist/{workspace-EmXwO2qM.mjs → workspace-Lm6dv2nz.mjs}

@@ -1,14 +1,16 @@
 import { t as __exportAll } from "./rolldown-runtime-BhDjJH2R.mjs";
 import { a as DEFAULT_CACHE, o as DEFAULT_EVENTS$1, s as DEFAULT_STORAGE, t as discover } from "./discover-CMxesskG.mjs";
-import { l as appKey, o as loadWorkspaceAppInfo, r as getAppNameFromCwd, s as loadWorkspaceConfig } from "./config-Dss1WwtH.mjs";
-import { E as TEST_STAGE, t as allConstructGlobs } from "./workspace-CsL76tpc.mjs";
-import { n as readStageSecrets, o as toEmbeddableSecrets, r as secretsExist } from "./storage-BjTLjDDp.mjs";
+import { c as loadWorkspaceAppInfo, f as appKey, l as loadWorkspaceConfig, r as NotInAnApp, t as ConfigNotFound } from "./config-D1S2r0JN.mjs";
+import { E as TEST_STAGE, t as allConstructGlobs } from "./workspace-DOmIhiau.mjs";
+import { i as toEmbeddableSecrets } from "./storage-BzaUxmqe.mjs";
+import { i as FileSecretsStore, n as secretsStoreFor } from "./store-DeGATCS-.mjs";
+import { c as readFakes } from "./ready-BTm_sMNU.mjs";
 import { existsSync } from "node:fs";
 import { mkdir, readFile, readdir, rm, writeFile } from "node:fs/promises";
 import { networkInterfaces } from "node:os";
 import { dirname, join, resolve } from "node:path";
 import { execFile } from "node:child_process";
-import { DEFAULT_POSTGRES_VERSION, cacheTable, cookieDomain, dependenciesOf, dependentsOf, mobileOrigins, provideKey, providedKeyFor, provisionOrder, publicEnvFor, schemeBase } from "@geekmidas/manifest";
+import { DEFAULT_POSTGRES_VERSION, cacheTable, cookieDomain, dependenciesOf, dependentsOf, externalApiUrl, kebabCase, mobileOrigins, provideKey, providedKeyFor, provisionOrder, publicEnvFor, schemeBase } from "@geekmidas/manifest";
 import { createServer } from "node:net";
 import { config } from "dotenv";
 import { createHash } from "node:crypto";
@@ -101,14 +103,12 @@ async function savePortState(workspaceRoot, ports) {
 * For workspace app: maps {APP}_DATABASE_URL → DATABASE_URL.
 * @internal Exported for testing
 */
-async function loadSecretsForApp(secretsRoot, stage, appName) {
+async function loadSecretsForApp(store, stage, appName) {
 	let secrets = {};
-	if (secretsExist(stage, secretsRoot)) {
-		const stageSecrets = await readStageSecrets(stage, secretsRoot);
-		if (stageSecrets) {
-			logger.log(`🔐 Loading secrets from stage: ${stage}`);
-			secrets = toEmbeddableSecrets(stageSecrets);
-		}
+	const stageSecrets = await store.read(stage);
+	if (stageSecrets) {
+		logger.log(`🔐 Loading secrets from stage: ${stage}`);
+		secrets = toEmbeddableSecrets(stageSecrets);
 	}
 	if (Object.keys(secrets).length === 0) return {};
 	if (!appName) return secrets;
@@ -202,20 +202,22 @@ async function prepareEntryCredentials(options) {
 		workspaceAppPort = appInfo.app.port;
 		secretsRoot = appInfo.workspaceRoot;
 		appName = appInfo.appName;
-	} catch {
+	} catch (error) {
+		if (!(error instanceof NotInAnApp || error instanceof ConfigNotFound)) throw error;
 		workspace = await loadWorkspaceConfig(cwd).then((loaded) => loaded.workspace).catch(() => void 0);
 		secretsRoot = workspace?.root ?? findSecretsRoot(cwd);
-		appName = getAppNameFromCwd(cwd) ?? void 0;
 	}
 	const resolvedPort = options.explicitPort ?? workspaceAppPort ?? 3e3;
 	const stage = options.stage ?? workspace?.stages.local;
-	const credentials = stage ? await loadSecretsForApp(secretsRoot, stage, appName) : {};
+	const store = stage ? workspace ? await secretsStoreFor(workspace, stage) : new FileSecretsStore(secretsRoot) : void 0;
+	const credentials = store && stage ? await loadSecretsForApp(store, stage, appName) : {};
 	credentials.PORT = String(resolvedPort);
 	if (appInfo?.app.type === "mobile") credentials.RCT_METRO_PORT = String(resolvedPort);
 	const declaredKeys = [];
+	let reconciled;
 	if (workspace) {
 		const { reconcileWorkspace } = await Promise.resolve().then(() => workspace_exports);
-		const reconciled = await reconcileWorkspace(workspace, {
+		reconciled = await reconcileWorkspace(workspace, {
 			stage: options.reconcileStage ?? workspace.stages.local,
 			start: options.startDocker ?? false
 		});
@@ -235,7 +237,8 @@ async function prepareEntryCredentials(options) {
 		appName,
 		secretsRoot,
 		appInfo,
-		declaredKeys
+		declaredKeys,
+		...reconciled ? { reconciled } : {}
 	};
 }
 //#endregion
@@ -395,8 +398,23 @@ const PORTS = {
 		label: "https edge"
 	}]
 };
-/** The ports a container needs published. Empty for one gkm does not know. */
-function portsOf(container) {
+/** The port key — and container name, for an image — of an API's fake. */
+function fakeKey(id) {
+	return `${kebabCase(id)}-fake`;
+}
+/**
+* The ports a container needs published. Empty for one gkm does not know.
+*
+* `fakes` answers for the containers no table can: an external API's fake
+* listens wherever its declaration says.
+*/
+function portsOf(container, fakes = {}) {
+	const fake = fakes[container];
+	if (fake?.port !== void 0) return [{
+		key: container,
+		inside: fake.port,
+		label: `${fake.id} fake`
+	}];
 	return PORTS[container] ?? [];
 }
 /** The key a container's primary port is allocated under. */
@@ -409,8 +427,9 @@ function primaryPortKey(container) {
 * What allocation is handed: it assigns ports to names and knows nothing about
 * what listens on them.
 */
-function portKeys(containers) {
-	return [...containers].sort().flatMap((container) => portsOf(container).map((port) => port.key));
+function portKeys(containers, fakes = {}) {
+	const keys = [...containers].sort().flatMap((container) => portsOf(container, fakes).map((port) => port.key));
+	return [.../* @__PURE__ */ new Set([...keys, ...Object.keys(fakes).sort()])];
 }
 /**
 * The named volume a container's data lives in.
@@ -692,7 +711,8 @@ const CONTAINERLESS = {
 	credential: true,
 	"rest-api": true,
 	site: true,
-	"mobile-app": true
+	"mobile-app": true,
+	"external-api": true
 };
 /**
 * Containers that cannot run alone.
@@ -712,7 +732,7 @@ const REQUIRES = { "redis-http": ["redis"] };
 const ROLES = {
 	queue: "publisherConnectionString",
 	topic: "publisherConnectionString",
-	credential: "credential",
+	credential: "credentials",
 	"mobile-app": "scheme"
 };
 /** The kinds whose container is the events backend's rather than their own. */
@@ -804,12 +824,25 @@ function containerFor(kind, events = DEFAULT_EVENTS, cache = DEFAULT_CACHE.aws,
 function planFor(manifest, stage, order, options = {}) {
 	const containers = /* @__PURE__ */ new Set();
 	const resources = [];
+	const fakes = {};
 	const events = options.events ?? "pgboss";
 	const cache = options.cache ?? DEFAULT_CACHE.aws;
 	for (const id of order) {
 		const declaration = manifest[id];
 		if (!declaration) continue;
-		const container = containerFor(declaration.kind, events, cache, "of" in declaration && typeof declaration.of === "string", options.edge !== false);
+		const local = declaration.kind === "external-api" ? options.fakes?.[id] : void 0;
+		const fake = local && {
+			key: fakeKey(id),
+			...local
+		};
+		if (fake) fakes[fake.key] = {
+			id,
+			...fake.image ? {
+				image: fake.image,
+				port: fake.port
+			} : {}
+		};
+		const container = fake?.image ? fake.key : containerFor(declaration.kind, events, cache, "of" in declaration && typeof declaration.of === "string", options.edge !== false);
 		if (!container && !CONTAINERLESS[declaration.kind]) continue;
 		if (container) {
 			containers.add(container);
@@ -829,6 +862,11 @@ function planFor(manifest, stage, order, options = {}) {
 				...declaration.scheme ? { scheme: declaration.scheme } : {}
 			} : {},
 			...declaration.kind === "file-server" && declaration.open?.length ? { open: declaration.open } : {},
+			...fake ? { fake: {
+				key: fake.key,
+				credentials: fake.credentials
+			} } : {},
+			...declaration.kind === "external-api" && !fake ? { url: declaration.url } : {},
 			..."of" in declaration ? { of: declaration.of } : {},
 			..."schema" in declaration && declaration.schema ? { schema: declaration.schema } : {},
 			..."version" in declaration && declaration.version ? { version: declaration.version } : {},
@@ -865,6 +903,7 @@ function planFor(manifest, stage, order, options = {}) {
 		cache,
 		containers: [...containers],
 		resources,
+		...Object.keys(fakes).length ? { fakes } : {},
 		...workerBroker ? { workerBroker: true } : {}
 	};
 }
@@ -988,6 +1027,7 @@ function envFor(plan, options) {
 			const owner = ownerUrl(resource, plan, options.ports, options.project ?? "");
 			if (owner) env[provideKey(resource.id, "ownerUrl")] = owner;
 		}
+		if (resource.kind === "external-api" && url && resource.fake) env[provideKey(resource.id, "credentials")] = resource.fake.credentials;
 		if (resource.kind === "email" && url) {
 			env[provideKey(resource.id, "from")] = options.mailFrom ?? `noreply@${LOCAL_HOST}`;
 			const inbox = options.ports[MAILPIT_INBOX_PORT];
@@ -1137,6 +1177,14 @@ function urlFor(resource, plan, ports, project, addresses = {}) {
 	if (resource.kind === "secret") return localSecret(project, plan, resource);
 	if (resource.kind === "mobile-app") return schemeBase(project, resource.scheme);
 	if (resource.kind === "credential") return void 0;
+	if (resource.kind === "external-api") {
+		if (!resource.fake) return resource.url === void 0 ? void 0 : externalApiUrl({
+			id: resource.id,
+			url: resource.url
+		}, plan.stage);
+		const port = ports[resource.fake.key];
+		return port === void 0 ? void 0 : `http://${LOCAL_HOST}:${port}`;
+	}
 	if (resource.kind === "rest-api" || resource.kind === "site") {
 		const address = addresses[resource.id];
 		const edge = plan.containers.includes("caddy") ? ports[primaryPortKey("caddy")] : void 0;
@@ -1337,20 +1385,21 @@ function dockerfileOf(appName, path) {
 * two containers listening on the same port inside cannot be confused — and is
 * rewritten to `<container>:<inside>`.
 */
-function inNetworkEnv(workspace, manifest) {
+function inNetworkEnv(workspace, manifest, fakes = {}) {
 	const plan = planFor(manifest, workspace.stages.local, provisionOrder(manifest), {
 		localStage: workspace.stages.local,
-		...backendsOf(workspace)
+		...backendsOf(workspace),
+		fakes
 	});
 	const placeholders = {};
 	const targets = /* @__PURE__ */ new Map();
 	let next = 49152;
-	for (const container of [...plan.containers].sort()) for (const port of portsOf(container)) {
+	for (const container of [...plan.containers].sort()) for (const port of portsOf(container, plan.fakes)) {
 		placeholders[port.key] = next;
 		targets.set(next, `${container}:${port.inside}`);
 		next += 1;
 	}
-	for (const key of portKeys(plan.containers)) placeholders[key] ??= next++;
+	for (const key of portKeys(plan.containers, plan.fakes)) placeholders[key] ??= next++;
 	const env = envFor(plan, {
 		ports: placeholders,
 		project: workspace.name,
@@ -1413,8 +1462,8 @@ function appEnvKeys(manifest, appName, runnables = {}) {
 	return keys;
 }
 /** One compose service per app the workspace runs, behind the apps profile. */
-function appServices(workspace, manifest, containers, runnables = {}) {
-	const env = inNetworkEnv(workspace, manifest);
+function appServices(workspace, manifest, containers, runnables = {}, fakes = {}) {
+	const env = inNetworkEnv(workspace, manifest, fakes);
 	const services = {};
 	for (const [name, app] of Object.entries(workspace.apps)) {
 		if (app.type === "mobile" || !app.port) continue;
@@ -1568,9 +1617,15 @@ function composeFor(plan, options) {
 	const volumes = {};
 	for (const container of [...plan.containers].sort()) {
 		const declared = container === "postgres" ? plan.resources.find((r) => r.version)?.version : void 0;
-		const image = declared ? postgresImage(declared) : DEFAULT_IMAGES[container];
+		const fake = plan.fakes?.[container];
+		const image = declared ? postgresImage(declared) : fake?.image ?? DEFAULT_IMAGES[container];
 		if (!image) throw new UnknownContainer(container);
-		services[container] = define(container, image, publish(container, options.ports));
+		const published = publish(container, options.ports, plan.fakes);
+		services[container] = fake ? {
+			image,
+			restart: "unless-stopped",
+			ports: published
+		} : define(container, image, published);
 		const volume = volumeOf(container);
 		if (volume) volumes[volume] = {};
 	}
@@ -1789,8 +1844,8 @@ function define(container, image, published) {
 * from the container's first, so MinIO's console cannot land on whatever was
 * allocated to the next container.
 */
-function publish(container, ports) {
-	return portsOf(container).map((port) => {
+function publish(container, ports, fakes) {
+	return portsOf(container, fakes).map((port) => {
 		const assigned = ports[port.key];
 		if (assigned === void 0) throw new UnassignedPort(port.key);
 		return `${assigned}:${port.inside}`;
@@ -2395,6 +2450,13 @@ async function saveState(root, state) {
 	await mkdir(dirname(path), { recursive: true });
 	await writeFile(path, `${JSON.stringify(state, null, 2)}\n`);
 }
+/**
+* Forget what was applied, so the next reconcile of this stage converges from
+* nothing — creating again whatever was dropped underneath the record.
+*/
+async function forgetState(root, stage) {
+	await rm(statePath(root, stage), { force: true });
+}
 function statePath(root, stage) {
 	return join(root, STATE_DIR, `${stage}.json`);
 }
@@ -2469,11 +2531,12 @@ async function reconcile(options) {
 		events: options.events,
 		cache: options.cache,
 		extraContainers: options.extraContainers,
+		...options.fakes ? { fakes: options.fakes } : {},
 		...options.edge === void 0 ? {} : { edge: options.edge }
 	});
 	const composePath = join(root, COMPOSE_PATH);
-	const observed = await observedPorts(docker, composePath, plan.containers);
-	const ports = await allocate(project, portKeys(plan.containers), {
+	const observed = await observedPorts(docker, composePath, plan.containers, plan.fakes);
+	const ports = await allocate(project, portKeys(plan.containers, plan.fakes), {
 		...options.saved,
 		...observed
 	}, probe);
@@ -2506,6 +2569,7 @@ async function reconcile(options) {
 		addresses,
 		env,
 		provisioned: [],
+		fakes: options.fakes ?? {},
 		hash,
 		changed: false
 	};
@@ -2561,9 +2625,9 @@ async function create(plan, ports, sql, buckets, project) {
 * Keyed the same way allocation keys them, so the two merge without either
 * knowing about the other.
 */
-async function observedPorts(docker, composePath, containers) {
+async function observedPorts(docker, composePath, containers, fakes) {
 	const observed = {};
-	for (const container of containers) for (const port of portsOf(container)) {
+	for (const container of containers) for (const port of portsOf(container, fakes)) {
 		const running = await docker.publishedPort(composePath, container, port.inside);
 		if (running !== void 0) observed[port.key] = running;
 	}
@@ -2619,9 +2683,11 @@ async function write(path, content) {
 * same state, differing only in the stage they pass.
 */
 var workspace_exports = /* @__PURE__ */ __exportAll({
+	FAKE_ENV: () => FAKE_ENV,
 	backendsOf: () => backendsOf,
 	constructGlobs: () => constructGlobs,
 	derivedContainers: () => derivedContainers,
+	fakesApply: () => fakesApply,
 	metroPorts: () => metroPorts,
 	reconcileWorkspace: () => reconcileWorkspace,
 	surfaceAddresses: () => surfaceAddresses
@@ -2664,6 +2730,19 @@ async function derivedContainers(workspace, stage, manifest) {
 	}).containers;
 }
 /**
+* Set by `gkm dev --fake` for the apps it starts. Each app's own `gkm dev`
+* reconciles too, and must answer the way the workspace did.
+*/
+const FAKE_ENV = "GKM_FAKE";
+/**
+* Whether external APIs are faked: always for `gkm test`, and for `gkm dev`
+* only when asked — by `--fake`, or by the workspace that started this app
+* with it. Never for anything acting on a deployed stage.
+*/
+function fakesApply(stage, fake, env = process.env) {
+	return fake === true || stage === "test" || env["GKM_FAKE"] === "1";
+}
+/**
 * Reconcile a workspace for one stage.
 *
 * Ports are loaded and saved around the call rather than inside it, so the loop
@@ -2677,6 +2756,7 @@ async function reconcileWorkspace(workspace, options) {
 		runnables
 	});
 	const manifest = options.manifest ?? discovered;
+	const fakes = fakesApply(options.stage, options.fake) ? await readFakes(workspace.root, manifest) : {};
 	const result = await reconcile({
 		root: workspace.root,
 		project: workspace.name,
@@ -2687,7 +2767,8 @@ async function reconcileWorkspace(workspace, options) {
 		saved: await loadPortState(workspace.root),
 		addresses: surfaceAddresses(workspace, manifest),
 		metroPorts: metroPorts(workspace, manifest),
-		apps: (containers) => appServices(workspace, manifest, containers, runnables),
+		fakes,
+		apps: (containers) => appServices(workspace, manifest, containers, runnables, fakes),
 		...options.start === void 0 ? {} : { start: options.start }
 	});
 	await savePortState(workspace.root, { ...result.ports });
@@ -2738,6 +2819,6 @@ function localAddress(port) {
 	return `http://localhost:${port}`;
 }
 //#endregion
-export { findAvailablePort as _, workspace_exports as a, loadSecretsForApp as b, applyPostgres as c, cacheBackendFor as d, eventsBackendFor as f, createEntryWrapper as g, createCredentialsPreload as h, reconcileWorkspace as i, resourceName as l, storageBackendFor as m, constructGlobs as n, COMPOSE_PATH as o, providerOf as p, derivedContainers as r, LOCAL_CA_PATH as s, backendsOf as t, rootSite as u, isPortAvailable as v, prepareEntryCredentials as x, loadEnvFiles as y };
+export { findAvailablePort as C, prepareEntryCredentials as D, loadSecretsForApp as E, createEntryWrapper as S, loadEnvFiles as T, cacheBackendFor as _, reconcileWorkspace as a, storageBackendFor as b, LOCAL_CA_PATH as c, quoteIdentifier as d, pgClient as f, primaryPortKey as g, fakeKey as h, derivedContainers as i, forgetState as l, rootSite as m, backendsOf as n, workspace_exports as o, resourceName as p, constructGlobs as r, COMPOSE_PATH as s, FAKE_ENV as t, applyPostgres as u, eventsBackendFor as v, isPortAvailable as w, createCredentialsPreload as x, providerOf as y };
 
-//# sourceMappingURL=workspace-EmXwO2qM.mjs.map
+//# sourceMappingURL=workspace-Lm6dv2nz.mjs.map