@geekmidas/cli 10.0.0-alpha.62 → 10.0.0-alpha.63

package/dist/index.mjs

@@ -1,18 +1,18 @@
 #!/usr/bin/env -S npx tsx
 import { n as __require, t as __exportAll } from "./rolldown-runtime-BhDjJH2R.mjs";
-import { $ as quoteIdentifier, At as getDokployCredentials, B as run$1, Ct as loadEnvFiles, Dt as logoutCommand, Et as loginCommand, G as derivedContainers, H as FAKE_ENV, I as withGeneratedSecrets, J as LOCAL_CA_PATH, K as reconcileWorkspace, Mt as getDokployToken, P as createStateStore, Q as postgresStatements, St as isPortAvailable, Tt as prepareEntryCredentials, U as backendsOf$1, V as runOutput, W as constructGlobs, X as applyPostgres, Y as forgetState, Z as postgresDatabaseNames, _t as primaryPortKey, at as localRolePassword, bt as createEntryWrapper, c as dockerCommand, ct as hostFor, d as generateDockerignore, dt as providerOf, et as composeFor, f as generateSlimDockerfile, g as createEmptyState, gt as portKeys, h as resolveHost, ht as fakeKey, it as envFor, jt as getDokployRegistryId, kt as whoamiCommand, l as siteDockerfile, lt as cacheBackendFor, m as isMainFrontendApp, mt as describeServices, n as sniffAppEnvironment, nt as appEnvKeys, ot as planFor, p as validateImageRef, pt as DEFAULT_IMAGES, r as DokployApi, rt as networkEnv, s as appPackageName$1, tt as pgClient, u as detectPackageManager$2, vt as withOwningTsconfigJsx, wt as loadSecretsForApp, xt as findAvailablePort, yt as createCredentialsPreload, z as keyFingerprint } from "./sniffer-DHE2Nafd.mjs";
-import { i as ConstructGenerator, t as discover } from "./discover-FrYvzkeC.mjs";
-import { d as parseModuleConfig, f as appKey, l as loadWorkspaceConfig, n as NotABackendApp, o as loadAppConfig, r as NotInAnApp, s as loadConfig, t as ConfigNotFound, u as loadWorkspaceSettings } from "./config-Bf4-bROQ.mjs";
-import { D as assertDeployedStage, E as TEST_STAGE, O as deployedProblems, T as InvalidStages, a as getAppBuildOrder, k as stageProblems, o as getAppGkmConfig, t as allConstructGlobs } from "./workspace-BFe57es7.mjs";
+import { At as prepareEntryCredentials, B as LocalSandbox, Ct as primaryPortKey, Dt as isPortAvailable, Et as findAvailablePort, Ft as getDokployCredentials, G as DEFAULT_TIMEOUT_MS, I as withGeneratedSecrets, It as getDokployRegistryId, J as FAKE_ENV, K as run$1, Lt as getDokployToken, Mt as logoutCommand, Ot as loadEnvFiles, P as createStateStore, Pt as whoamiCommand, Q as reconcileWorkspace, St as portKeys, Tt as createEntryWrapper, U as CommandFailed, X as constructGlobs, Y as backendsOf$1, Z as derivedContainers, _t as providerOf, at as quoteIdentifier, bt as describeServices, c as dockerCommand, ct as appEnvKeys, d as generateDockerignore, dt as localRolePassword, et as LOCAL_CA_PATH, f as generateSlimDockerfile, ft as planFor, g as createEmptyState, h as resolveHost, ht as cacheBackendFor, it as postgresStatements, jt as loginCommand, kt as loadSecretsForApp, l as siteDockerfile, lt as networkEnv, m as isMainFrontendApp, mt as hostFor, n as sniffAppEnvironment, nt as applyPostgres, ot as composeFor, p as validateImageRef, q as runOutput, r as DokployApi, rt as postgresDatabaseNames, s as appPackageName$1, st as pgClient, tt as forgetState, u as detectPackageManager$2, ut as envFor, wt as createCredentialsPreload, xt as fakeKey, yt as DEFAULT_IMAGES, z as keyFingerprint } from "./sniffer-aO_-s5vq.mjs";
+import { _ as ConstructGenerator, l as withOwningTsconfigJsx, r as discover } from "./discover-BaT6bpnA.mjs";
+import { a as NotABackendApp, d as loadConfig, g as appKey, h as parseModuleConfig, m as loadWorkspaceSettings, o as NotInAnApp, p as loadWorkspaceConfig, r as ConfigNotFound, u as loadAppConfig } from "./config-LKKCVCnC.mjs";
+import { D as assertDeployedStage, E as TEST_STAGE, O as deployedProblems, T as InvalidStages, a as getAppBuildOrder, k as stageProblems, o as getAppGkmConfig, t as allConstructGlobs } from "./workspace-Dh7rr7l4.mjs";
 import { a as withCustomSecret, i as toEmbeddableSecrets, n as maskPassword, t as initStageSecrets } from "./storage-BzaUxmqe.mjs";
 import { a as getKeyPath, f as imageRef, i as FileSecretsStore, n as secretsStoreFor, s as projectKey, u as deployIdentity } from "./store-BS8A7NcA.mjs";
-import { i as telemetryFor, n as EndpointGenerator, r as runtimeFor } from "./OpenApiTsGenerator-q5B0z8Xg.mjs";
+import { i as telemetryFor, n as EndpointGenerator, r as runtimeFor } from "./OpenApiTsGenerator-CnAwhGxi.mjs";
 import { generateOpenApi, openapiCommand, resolveOpenApiConfig } from "./openapi.mjs";
 import { n as DEFAULT_CACHE, r as DEFAULT_EVENTS } from "./fakes-C9RiT6XG.mjs";
 import { a as describeHolder, i as assignAppPorts, o as holderOf, r as appTag, s as withAppPorts, t as APP_TAG_ENV } from "./appPorts-C9z9Pzn9.mjs";
-import { a as writeTestHarness, c as driversFor, i as TEST_MANIFEST_ENV, n as TEST_READY_FILE, o as SubscriberGenerator, s as cacheBackendsIn, t as TEST_READY_ENV } from "./ready-DQIy21W5.mjs";
+import { a as writeTestHarness, c as driversFor, i as TEST_MANIFEST_ENV, n as TEST_READY_FILE, o as SubscriberGenerator, s as cacheBackendsIn, t as TEST_READY_ENV } from "./ready-Bpdnn2ON.mjs";
 import { n as withCompute, r as withRoutes, t as manifestModule } from "./emit-C1e8qD08.mjs";
-import { t as LocalStateStore } from "./LocalStateStore-B51rnfgn.mjs";
+import { t as LocalStateStore } from "./LocalStateStore-BGIXcrvX.mjs";
 import { createRequire } from "node:module";
 import { basename, dirname, extname, isAbsolute, join, parse, relative, resolve } from "node:path";
 import { Command } from "commander";
@@ -22,11 +22,11 @@ import { homedir } from "node:os";
 import { promisify } from "node:util";
 import { DATABASE_FOLDERS, MIGRATIONS_ROOT, canonicalId, kebabCase, migrationFolder, migrationTargets, provideKey, provisionOrder, publicEnvFor, schemeBase, serviceKey } from "@geekmidas/manifest";
 import fg from "fast-glob";
+import { pathToFileURL } from "node:url";
 import { execFile, execSync, spawn } from "node:child_process";
 import chokidar from "chokidar";
 import { connect } from "node:net";
 import { createHash, randomBytes, timingSafeEqual } from "node:crypto";
-import { pathToFileURL } from "node:url";
 import pg from "pg";
 import { parse as parse$1, parseDocument, stringify } from "yaml";
 import prompts from "prompts";
@@ -41,7 +41,7 @@ import { Function } from "@geekmidas/constructs/functions";
 import { Queue } from "@geekmidas/constructs/queue";
 import { Topic } from "@geekmidas/constructs/topic";
 //#region package.json
-var version = "10.0.0-alpha.62";
+var version = "10.0.0-alpha.63";
 //#endregion
 //#region src/trust/index.ts
 /**
@@ -1845,9 +1845,9 @@ async function workspaceDevCommand(configured, options) {
 	for (const { id, port } of fakes) logger$6.log(`🎭 ${id} fake: http://localhost:${port}`);
 	logger$6.log(options.migrate || options.seed ? "🗄️  Migrating the databases" : "🗄️  Checking for pending migrations");
 	if (options.migrate || options.seed) {
-		const { prepareDevDatabases } = await import("./migrate-BoHMqdCu.mjs");
+		const { prepareDevDatabases } = await import("./migrate-ImBKTBcW.mjs");
 		await prepareDevDatabases(workspace, reconciled.env, { seed: !!options.seed });
-	} else await import("./migrate-BoHMqdCu.mjs").then(({ reportPendingMigrations }) => reportPendingMigrations(workspace, reconciled.env)).catch((error) => {
+	} else await import("./migrate-ImBKTBcW.mjs").then(({ reportPendingMigrations }) => reportPendingMigrations(workspace, reconciled.env)).catch((error) => {
 		logger$6.log(`⚠️  Could not check for pending migrations: ${error instanceof Error ? error.message : String(error)}`);
 	});
 	const appUrls = {};
@@ -3227,7 +3227,7 @@ async function buildApp(input) {
 		if (production?.bundle && !input.skipBundle) {
 			const outputDir = join(appRoot, ".gkm", "server");
 			const entryPoint = await writeSurfaceServer(outputDir, production);
-			const { bundleServer } = await import("./bundler-DN5r4x5b.mjs");
+			const { bundleServer } = await import("./bundler-DyWI41Iy.mjs");
 			await bundleServer({
 				entryPoint,
 				outputDir: join(outputDir, "dist"),
@@ -3365,7 +3365,7 @@ async function buildForTarget(target, context, appRoot, workspaceRoot, endpointG
 		let masterKey;
 		if (context.production?.bundle && !skipBundle) {
 			logger$5.log(`\n📦 Bundling production server...`);
-			const { bundleServer } = await import("./bundler-DN5r4x5b.mjs");
+			const { bundleServer } = await import("./bundler-DyWI41Iy.mjs");
 			const allConstructs = [
 				...endpoints.map((e) => e.construct),
 				...functions.map((f) => f.construct),
@@ -3529,13 +3529,20 @@ async function workspaceBuildCommand(workspace, options) {
 		if (filters.length > 0) {
 			logger$5.log(`\n📦 Using ${pm} with Turbo for the other apps...\n`);
 			logger$5.log(`Running: ${[turboBin, ...turboArgs].join(" ")}`);
-			await run$1(turboBin, turboArgs, {
+			const sandbox = options.sandbox ?? new LocalSandbox({
+				root: workspace.root,
+				passEnv: ["TURBO_TOKEN"]
+			});
+			const built = await sandbox.exec(turboBin, turboArgs, {
 				cwd: workspace.root,
 				env: {
-					...process.env,
+					...sandbox.env,
 					NODE_ENV: options.production ? "production" : "development"
-				}
+				},
+				timeoutMs: DEFAULT_TIMEOUT_MS,
+				output: "inherit"
 			});
+			if (built.exitCode !== 0) throw new CommandFailed(turboBin, turboArgs, built.exitCode, built.signal);
 		}
 		for (const [appName, app] of apps) {
 			const outputPath = getAppOutputPath(workspace, appName, app);
@@ -6473,25 +6480,25 @@ function loadPackageJson() {
 * Run: pnpm --filter @geekmidas/cli sync-versions
 */
 const GEEKMIDAS_VERSIONS = {
-	"@geekmidas/audit": "~10.0.0-alpha.62",
-	"@geekmidas/auth": "~10.0.0-alpha.62",
-	"@geekmidas/cache": "~10.0.0-alpha.62",
-	"@geekmidas/client": "~10.0.0-alpha.62",
-	"@geekmidas/cloud": "~10.0.0-alpha.62",
-	"@geekmidas/constructs": "~10.0.0-alpha.62",
-	"@geekmidas/db": "~10.0.0-alpha.62",
-	"@geekmidas/emailkit": "~10.0.0-alpha.62",
-	"@geekmidas/envkit": "~10.0.0-alpha.62",
-	"@geekmidas/errors": "~10.0.0-alpha.62",
-	"@geekmidas/events": "~10.0.0-alpha.62",
-	"@geekmidas/logger": "~10.0.0-alpha.62",
-	"@geekmidas/manifest": "~10.0.0-alpha.62",
-	"@geekmidas/rate-limit": "~10.0.0-alpha.62",
-	"@geekmidas/schema": "~10.0.0-alpha.62",
-	"@geekmidas/services": "~10.0.0-alpha.62",
-	"@geekmidas/storage": "~10.0.0-alpha.62",
-	"@geekmidas/telescope": "~10.0.0-alpha.62",
-	"@geekmidas/testkit": "~10.0.0-alpha.62",
+	"@geekmidas/audit": "~10.0.0-alpha.63",
+	"@geekmidas/auth": "~10.0.0-alpha.63",
+	"@geekmidas/cache": "~10.0.0-alpha.63",
+	"@geekmidas/client": "~10.0.0-alpha.63",
+	"@geekmidas/cloud": "~10.0.0-alpha.63",
+	"@geekmidas/constructs": "~10.0.0-alpha.63",
+	"@geekmidas/db": "~10.0.0-alpha.63",
+	"@geekmidas/emailkit": "~10.0.0-alpha.63",
+	"@geekmidas/envkit": "~10.0.0-alpha.63",
+	"@geekmidas/errors": "~10.0.0-alpha.63",
+	"@geekmidas/events": "~10.0.0-alpha.63",
+	"@geekmidas/logger": "~10.0.0-alpha.63",
+	"@geekmidas/manifest": "~10.0.0-alpha.63",
+	"@geekmidas/rate-limit": "~10.0.0-alpha.63",
+	"@geekmidas/schema": "~10.0.0-alpha.63",
+	"@geekmidas/services": "~10.0.0-alpha.63",
+	"@geekmidas/storage": "~10.0.0-alpha.63",
+	"@geekmidas/telescope": "~10.0.0-alpha.63",
+	"@geekmidas/testkit": "~10.0.0-alpha.63",
 	"@geekmidas/cli": `~${loadPackageJson().version}`
 };
 //#endregion
@@ -12392,8 +12399,8 @@ function testDatabases(reconciled) {
 * starts without the reference data the app needs.
 */
 async function migrateTestStage(workspace, env) {
-	const { migrateAndSeed } = await import("./migrate-BoHMqdCu.mjs");
-	const { discover } = await import("./discover-FrYvzkeC.mjs").then((n) => n.n);
+	const { migrateAndSeed } = await import("./migrate-ImBKTBcW.mjs");
+	const { discover } = await import("./discover-BaT6bpnA.mjs").then((n) => n.i);
 	const sources = {};
 	const manifest = await discover({
 		patterns: constructGlobs(workspace),
@@ -12823,7 +12830,7 @@ program.command("migrate").description("Apply each database construct's migratio
 	try {
 		const globalOptions = program.opts();
 		if (globalOptions.cwd) process.chdir(globalOptions.cwd);
-		const { migrateCommand } = await import("./migrate-BoHMqdCu.mjs");
+		const { migrateCommand } = await import("./migrate-ImBKTBcW.mjs");
 		await migrateCommand({
 			...options,
 			...construct ? { construct } : {}
@@ -12837,7 +12844,7 @@ program.command("seed").description("Migrate, then run each database construct's
 	try {
 		const globalOptions = program.opts();
 		if (globalOptions.cwd) process.chdir(globalOptions.cwd);
-		const { seedCommand } = await import("./migrate-BoHMqdCu.mjs");
+		const { seedCommand } = await import("./migrate-ImBKTBcW.mjs");
 		await seedCommand({
 			...options,
 			...construct ? { construct } : {}
@@ -12851,7 +12858,7 @@ program.command("migration").description("Write a construct's next migration: an
 	try {
 		const globalOptions = program.opts();
 		if (globalOptions.cwd) process.chdir(globalOptions.cwd);
-		const { migrationCommand } = await import("./migrate-BoHMqdCu.mjs");
+		const { migrationCommand } = await import("./migrate-ImBKTBcW.mjs");
 		await migrationCommand({
 			construct,
 			...name ? { name } : {}
@@ -12959,7 +12966,7 @@ program.command("encryption:rotate").description("Add a new current key to an En
 	try {
 		const globalOptions = program.opts();
 		if (globalOptions.cwd) process.chdir(globalOptions.cwd);
-		const { encryptionRotateCommand } = await import("./encryption-CVwvGbsL.mjs");
+		const { encryptionRotateCommand } = await import("./encryption-CbQG_ayW.mjs");
 		await encryptionRotateCommand(construct, options);
 	} catch (error) {
 		console.error(formatError(error));
@@ -12970,7 +12977,7 @@ program.command("encryption:retire").description("Remove an old key from an Encr
 	try {
 		const globalOptions = program.opts();
 		if (globalOptions.cwd) process.chdir(globalOptions.cwd);
-		const { encryptionRetireCommand } = await import("./encryption-CVwvGbsL.mjs");
+		const { encryptionRetireCommand } = await import("./encryption-CbQG_ayW.mjs");
 		await encryptionRetireCommand(construct, key, options);
 	} catch (error) {
 		console.error(formatError(error));
@@ -13022,7 +13029,7 @@ program.command("secrets:reconcile").description("Backfill missing custom secret
 			console.error(`No secrets found for stage "${stage}". Run "gkm secrets:init --stage ${stage}" first.`);
 			process.exit(1);
 		}
-		const { derivedContainers } = await import("./sniffer-DHE2Nafd.mjs").then((n) => n.q);
+		const { derivedContainers } = await import("./sniffer-aO_-s5vq.mjs").then((n) => n.$);
 		const result = reconcileMissingSecrets(secrets, workspace, await derivedContainers(workspace, stage));
 		if (!result) {
 			console.log(`\n✓ Secrets for stage "${stage}" are up-to-date`);
@@ -13037,7 +13044,7 @@ program.command("secrets:reconcile").description("Backfill missing custom secret
 	}
 });
 program.command("deploy").description("Deploy a stage through its target").option("--target <name>", "Deploy target: dokploy, or one named in deploy.targets (default: deploy.default)").option("--provider <provider>", "[DEPRECATED] Use --target instead").requiredOption("--stage <stage>", "Deployment stage (e.g., production, staging)").option("--tag <tag>", "Image tag (default: stage-timestamp)").option("--skip-push", "Skip pushing image to registry").option("--skip-build", "Skip build step (use existing build)").option("--json", "Write events as JSON lines instead of progress; never prompts").option("--dry-run", "Show what would be created or reused; change, build and push nothing").action(async (options) => {
-	const { deployCli } = await import("./cli-DYwxmfsW.mjs");
+	const { deployCli } = await import("./cli-PkVF28LM.mjs");
 	const globalOptions = program.opts();
 	const code = await deployCli({
 		cwd: resolve(globalOptions.cwd ?? process.cwd()),
@@ -13070,7 +13077,7 @@ program.command("deploy:github").description("Let GitHub Actions deploy a stage:
 	try {
 		const globalOptions = program.opts();
 		if (globalOptions.cwd) process.chdir(globalOptions.cwd);
-		const { deployGithubCommand } = await import("./github-BCB3_LBX.mjs");
+		const { deployGithubCommand } = await import("./github-ciwbIwVa.mjs");
 		await deployGithubCommand(options);
 	} catch (error) {
 		console.error(formatError(error));