@geekmidas/cli 10.0.0-alpha.63 → 10.0.0-alpha.64

package/dist/{sniffer-aO_-s5vq.mjs → sniffer-49KPbDgq.mjs}

@@ -1,18 +1,20 @@
 import { n as __require, t as __exportAll } from "./rolldown-runtime-BhDjJH2R.mjs";
-import { n as gkmHome } from "./home-GI7pJl1M.mjs";
-import { h as confineCwd, m as assertSecretNames, p as activeSandbox, r as discover, s as nodeWithTsx, u as SECRETS_DIR_ENV, v as output } from "./discover-BaT6bpnA.mjs";
-import { d as loadConfig, f as loadWorkspaceAppInfo, g as appKey, o as NotInAnApp, p as loadWorkspaceConfig, r as ConfigNotFound } from "./config-LKKCVCnC.mjs";
-import { E as TEST_STAGE, p as getPublicEnvPrefix, t as allConstructGlobs } from "./workspace-Dh7rr7l4.mjs";
+import { _ as storeHostingerToken, g as storeDokployCredentials, h as removeDokployCredentials, l as getCredentialsPath, s as run$1, t as LocalSandbox, u as getDokployCredentials } from "./local-Cd8ZYQG3.mjs";
+import { d as output, r as discover, s as nodeWithTsx } from "./discover-LMrqsWSU.mjs";
+import { i as activeSandbox } from "./sandbox-Dm247NGx.mjs";
+import { t as appKey } from "./derive-B4vDpzgP.mjs";
+import { E as TEST_STAGE, p as getPublicEnvPrefix, t as allConstructGlobs } from "./workspace-Bwit4q9O.mjs";
+import { ConfigNotFound, NotInAnApp, loadConfig, loadWorkspaceAppInfo, loadWorkspaceConfig } from "./config.mjs";
 import { i as toEmbeddableSecrets } from "./storage-BzaUxmqe.mjs";
-import { i as FileSecretsStore, n as secretsStoreFor } from "./store-BS8A7NcA.mjs";
-import { r as runtimeOf } from "./runtime-DbakJS8u.mjs";
+import { i as FileSecretsStore, n as secretsStoreFor } from "./store-BaaonhkJ.mjs";
+import { r as runtimeOf } from "./runtime-Cmn-FeYO.mjs";
 import { i as DEFAULT_STORAGE, n as DEFAULT_CACHE, r as DEFAULT_EVENTS$1, t as readFakes } from "./fakes-C9RiT6XG.mjs";
 import { basename, dirname, join, parse, resolve } from "node:path";
 import { stdin, stdout } from "node:process";
 import * as readline from "node:readline/promises";
-import { copyFileSync, existsSync, mkdirSync, readFileSync, unlinkSync } from "node:fs";
-import { mkdir, mkdtemp, readFile, readdir, rm, writeFile } from "node:fs/promises";
-import { hostname, networkInterfaces, tmpdir, userInfo } from "node:os";
+import { copyFileSync, existsSync, readFileSync, unlinkSync } from "node:fs";
+import { mkdir, readFile, readdir, rm, writeFile } from "node:fs/promises";
+import { hostname, networkInterfaces, userInfo } from "node:os";
 import { promisify } from "node:util";
 import { DEFAULT_POSTGRES_VERSION, cacheTable, cookieDomain, dependenciesOf, dependentsOf, externalApiUrl, kebabCase, mobileOrigins, provideKey, providedKeyFor, provisionOrder, publicEnvFor, schemeBase } from "@geekmidas/manifest";
 import { fileURLToPath } from "node:url";
@@ -105,128 +107,6 @@ async function prompt(message, options) {
 	}
 }
 //#endregion
-//#region src/auth/credentials.ts
-/**
-* Get the path to the credentials directory
-*/
-function getCredentialsDir(options) {
-	if (options?.home) return options.home;
-	return options?.root ? join(options.root, ".gkm") : gkmHome();
-}
-/**
-* Get the path to the credentials file
-*/
-function getCredentialsPath(options) {
-	return join(getCredentialsDir(options), "credentials.json");
-}
-/**
-* Ensure the credentials directory exists
-*/
-function ensureCredentialsDir(options) {
-	const dir = getCredentialsDir(options);
-	if (!existsSync(dir)) mkdirSync(dir, {
-		recursive: true,
-		mode: 448
-	});
-}
-/**
-* Read stored credentials from disk
-*/
-async function readCredentials(options) {
-	const path = getCredentialsPath(options);
-	if (!existsSync(path)) return {};
-	try {
-		const content = await readFile(path, "utf-8");
-		return JSON.parse(content);
-	} catch {
-		return {};
-	}
-}
-/**
-* Write credentials to disk
-*/
-async function writeCredentials(credentials, options) {
-	ensureCredentialsDir(options);
-	const path = getCredentialsPath(options);
-	await writeFile(path, JSON.stringify(credentials, null, 2), { mode: 384 });
-}
-/**
-* Store Dokploy credentials
-*/
-async function storeDokployCredentials(token, endpoint, options) {
-	const credentials = await readCredentials(options);
-	credentials.dokploy = {
-		token,
-		endpoint,
-		storedAt: (/* @__PURE__ */ new Date()).toISOString()
-	};
-	await writeCredentials(credentials, options);
-}
-/**
-* Get stored Dokploy credentials
-*/
-async function getDokployCredentials(options) {
-	const credentials = await readCredentials(options);
-	const token = process.env.DOKPLOY_API_TOKEN ?? credentials.dokploy?.token;
-	const endpoint = process.env.DOKPLOY_ENDPOINT ?? credentials.dokploy?.endpoint;
-	if (!token || !endpoint) return null;
-	return {
-		token,
-		endpoint: endpoint.replace(/\/$/, ""),
-		...credentials.dokploy?.registryId ? { registryId: credentials.dokploy.registryId } : {}
-	};
-}
-/**
-* Remove Dokploy credentials
-*/
-async function removeDokployCredentials(options) {
-	const credentials = await readCredentials(options);
-	if (!credentials.dokploy) return false;
-	delete credentials.dokploy;
-	await writeCredentials(credentials, options);
-	return true;
-}
-/**
-* Get Dokploy API token, checking stored credentials first, then environment
-*/
-async function getDokployToken(options) {
-	const envToken = process.env.DOKPLOY_API_TOKEN;
-	if (envToken) return envToken;
-	const stored = await getDokployCredentials(options);
-	if (stored) return stored.token;
-	return null;
-}
-/**
-* Get Dokploy registry ID from stored credentials
-*/
-async function getDokployRegistryId(options) {
-	return (await getDokployCredentials(options))?.registryId ?? void 0;
-}
-/**
-* Store Hostinger API token
-*
-* @param token - API token from hpanel.hostinger.com/profile/api
-*/
-async function storeHostingerToken(token, options) {
-	const credentials = await readCredentials(options);
-	credentials.hostinger = {
-		token,
-		storedAt: (/* @__PURE__ */ new Date()).toISOString()
-	};
-	await writeCredentials(credentials, options);
-}
-/**
-* Get stored Hostinger API token
-*
-* Checks environment variable first (HOSTINGER_API_TOKEN),
-* then falls back to stored credentials.
-*/
-async function getHostingerToken(options) {
-	const envToken = process.env.HOSTINGER_API_TOKEN;
-	if (envToken) return envToken;
-	return (await readCredentials(options)).hostinger?.token ?? null;
-}
-//#endregion
 //#region src/auth/index.ts
 const logger$2 = console;
 /**
@@ -2430,7 +2310,7 @@ var UnassignedPort = class extends Error {
 * Every call is scoped to the generated compose file. Nothing here can touch a
 * container this project did not generate.
 */
-const run$1 = promisify(execFile);
+const run = promisify(execFile);
 /**
 * The generated file, then the project's own if it has one.
 *
@@ -2473,7 +2353,7 @@ function shown(args, services) {
 const dockerCli = {
 	async publishedPort(composePath, service, inside) {
 		try {
-			const { stdout } = await run$1("docker", [
+			const { stdout } = await run("docker", [
 				"compose",
 				...composeFiles(composePath),
 				"port",
@@ -2498,11 +2378,11 @@ const dockerCli = {
 			...services
 		];
 		if (options.show) return shown(args, services);
-		await run$1("docker", args);
+		await run("docker", args);
 	},
 	async copyOut(composePath, service, from, to) {
 		await mkdir(dirname(to), { recursive: true });
-		await run$1("docker", [
+		await run("docker", [
 			"compose",
 			...composeFiles(composePath),
 			"cp",
@@ -2511,7 +2391,7 @@ const dockerCli = {
 		]);
 	},
 	async reload(composePath, service) {
-		await run$1("docker", [
+		await run("docker", [
 			"compose",
 			...composeFiles(composePath),
 			"exec",
@@ -2526,7 +2406,7 @@ const dockerCli = {
 	async healthy(composePath, services) {
 		if (services.length === 0) return true;
 		try {
-			const { stdout } = await run$1("docker", [
+			const { stdout } = await run("docker", [
 				"compose",
 				...composeFiles(composePath),
 				"ps",
@@ -3478,331 +3358,6 @@ function localAddress(port) {
 	return `http://localhost:${port}`;
 }
 //#endregion
-//#region src/run.ts
-/**
-* Start a program with an argument array, never a shell string.
-*
-* `gkm build`, `gkm docker` and `gkm deploy` pass values that come from the
-* workspace — image refs, tags, build args, package names — to `docker` and
-* `turbo`. Joined into a string and handed to a shell, a package named
-* `x;curl …|sh` or a tag holding `$(…)` became part of the command line, which
-* matters most where the CLI builds a repository it didn't write: a CI job for a
-* fork, a shared build runner. Here every value reaches the program as one
-* `argv` element, whatever it contains.
-*/
-/** Long enough for a cold image build; short enough that a hung one ends. */
-const DEFAULT_TIMEOUT_MS = 18e5;
-/** How long a timed-out child has to exit on SIGTERM before it is killed. */
-const KILL_GRACE_MS$1 = 5e3;
-/** The command line as a person would read it — for messages, never to run. */
-function display(command, args) {
-	return [command, ...args].join(" ");
-}
-/** The program ran and exited unsuccessfully; its own output said why. */
-var CommandFailed = class extends Error {
-	command;
-	args;
-	exitCode;
-	signal;
-	constructor(command, args, exitCode, signal) {
-		super(`\`${display(command, args)}\` ${exitCode === null ? `was stopped by ${signal ?? "a signal"}` : `exited with code ${exitCode}`}. Its output above says why; run it by hand to see it again.`);
-		this.command = command;
-		this.args = args;
-		this.exitCode = exitCode;
-		this.signal = signal;
-		this.name = "CommandFailed";
-	}
-};
-/** The program ran past its timeout and was killed. */
-var CommandTimedOut = class extends Error {
-	command;
-	args;
-	timeoutMs;
-	constructor(command, args, timeoutMs) {
-		super(`\`${display(command, args)}\` was still running after ${Math.round(timeoutMs / 1e3)}s and was stopped. Check what it was waiting on — a registry, the Docker daemon, a prompt — and run it again.`);
-		this.command = command;
-		this.args = args;
-		this.timeoutMs = timeoutMs;
-		this.name = "CommandTimedOut";
-	}
-};
-/**
-* Run `command` with `args`, resolving when it exits 0.
-*
-* Rejects with {@link CommandFailed} on any other exit, {@link CommandTimedOut}
-* once `timeoutMs` passes (after the child is gone), and with the spawn error
-* itself when the program cannot be started at all — `ENOENT` already names it.
-*/
-async function run(command, args, options = {}) {
-	await spawnChild(command, args, options, false);
-}
-/**
-* {@link run}, resolving with what the program wrote to stdout — for a value
-* the CLI reads back, such as the digest `docker inspect` reports. stderr still
-* reaches the terminal, so a failure explains itself the same way.
-*/
-function runOutput(command, args, options = {}) {
-	return spawnChild(command, args, options, true);
-}
-function spawnChild(command, args, options, capture) {
-	const { timeoutMs = DEFAULT_TIMEOUT_MS, ...spawnOptions } = options;
-	return new Promise((resolve, reject) => {
-		const child = spawn(command, [...args], {
-			stdio: "inherit",
-			...spawnOptions,
-			...capture ? { stdio: [
-				"ignore",
-				"pipe",
-				"inherit"
-			] } : {},
-			shell: false
-		});
-		let stdout = "";
-		child.stdout?.on("data", (chunk) => {
-			stdout += chunk.toString();
-		});
-		let timedOut = false;
-		let killer;
-		const timer = setTimeout(() => {
-			timedOut = true;
-			child.kill("SIGTERM");
-			killer = setTimeout(() => child.kill("SIGKILL"), KILL_GRACE_MS$1);
-			killer.unref?.();
-		}, timeoutMs);
-		timer.unref?.();
-		const settle = () => {
-			clearTimeout(timer);
-			if (killer) clearTimeout(killer);
-		};
-		child.on("error", (error) => {
-			settle();
-			reject(spawnOptions.signal?.aborted ? spawnOptions.signal.reason : error);
-		});
-		child.on("close", (code, signal) => {
-			settle();
-			if (spawnOptions.signal?.aborted) reject(spawnOptions.signal.reason);
-			else if (timedOut) reject(new CommandTimedOut(command, args, timeoutMs));
-			else if (code === 0) resolve(stdout);
-			else reject(new CommandFailed(command, args, code, signal));
-		});
-	});
-}
-//#endregion
-//#region src/sandbox/env.ts
-/**
-* What of the host's environment a local sandbox passes on.
-*
-* An allowlist, not a denylist: a credential's variable has any name its
-* owner chose (`DOKPLOY_TOKEN`, `AWS_SECRET_ACCESS_KEY`, `MY_VAULT_TOKEN`), so
-* the only safe default is to name what a program needs to *run* and pass
-* nothing else.
-*/
-/**
-* Variables a command needs to find programs, write temp files, print in the
-* user's locale and reach the network through the host's proxy — and nothing
-* that authenticates as anyone.
-*
-* Deliberately left out:
-* - `NODE_OPTIONS`: it can `--require` or `--import` code into every node
-*   process, and CI often holds `--import tsx` there. A step that needs a
-*   loader passes its own.
-* - `NODE_AUTH_TOKEN`, `NPM_TOKEN`, `npm_config_*`: registry tokens
-*   (`actions/setup-node` writes `NODE_AUTH_TOKEN`), which is why there is no
-*   `NODE_*` wildcard.
-* - `AWS_*`, `DOCKER_*`, `DOKPLOY_*`, `GITHUB_TOKEN`, `TURBO_TOKEN`, `GKM_*`:
-*   credentials, or where the deploy keeps them.
-* - `SHELL`, `EDITOR` and the rest of a login session: nothing here starts a
-*   shell.
-*
-* Proxies are passed: behind one, nothing installs or builds without it. A
-* proxy URL with a password in it reaches the command too — a host that keeps
-* one there and builds code it does not trust should pass a sandbox of its
-* own.
-*/
-const SANDBOX_ENV_ALLOWLIST = [
-	"PATH",
-	"HOME",
-	"USER",
-	"LOGNAME",
-	"TMPDIR",
-	"TMP",
-	"TEMP",
-	"LANG",
-	"LANGUAGE",
-	"TZ",
-	/^LC_[A-Z]+$/,
-	"TERM",
-	"COLORTERM",
-	"NO_COLOR",
-	"FORCE_COLOR",
-	"CI",
-	"NODE_ENV",
-	"NODE_EXTRA_CA_CERTS",
-	"COREPACK_HOME",
-	"PNPM_HOME",
-	"XDG_CACHE_HOME",
-	"XDG_DATA_HOME",
-	"HTTP_PROXY",
-	"HTTPS_PROXY",
-	"NO_PROXY",
-	"http_proxy",
-	"https_proxy",
-	"no_proxy",
-	"SystemRoot",
-	"SYSTEMROOT",
-	"windir",
-	"WINDIR",
-	"ComSpec",
-	"COMSPEC",
-	"PATHEXT",
-	"USERPROFILE",
-	"APPDATA",
-	"LOCALAPPDATA"
-];
-function allowed(name) {
-	return SANDBOX_ENV_ALLOWLIST.some((entry) => typeof entry === "string" ? entry === name : entry.test(name));
-}
-/**
-* The allowlisted part of `source`, plus each of `extra` the host chose to
-* pass on by name.
-*/
-function allowlistedEnv(source = process.env, extra = []) {
-	const env = {};
-	for (const [name, value] of Object.entries(source)) {
-		if (value === void 0) continue;
-		if (allowed(name) || extra.includes(name)) env[name] = value;
-	}
-	return env;
-}
-//#endregion
-//#region src/sandbox/local.ts
-/** How long a timed-out command has to exit on SIGTERM before SIGKILL. */
-const KILL_GRACE_MS = 5e3;
-/** Where `output` sends a child's streams. */
-const STDIO = {
-	capture: [
-		"ignore",
-		"pipe",
-		"pipe"
-	],
-	inherit: "inherit",
-	stderr: [
-		"ignore",
-		2,
-		2
-	],
-	ignore: "ignore"
-};
-/**
-* A child process on this machine, as this user, with an allowlisted
-* environment.
-*
-* What it withholds from the command: the host's environment beyond
-* {@link SANDBOX_ENV_ALLOWLIST}, a shell, a working directory outside the
-* project, and any time past the timeout. What it does not: the host's
-* filesystem, which the command can read and write as the user running the
-* deploy. So it is not `isolating`, and it is the default for projects the
-* host already trusts — the developer's own, a team's own CI. Code nobody
-* vetted belongs in a sandbox that is.
-*
-* A timed-out command is sent SIGTERM, then SIGKILL; processes it started
-* itself are its to stop.
-*/
-var LocalSandbox = class {
-	root;
-	isolating = false;
-	env;
-	constructor(options) {
-		this.root = resolve(options.root);
-		this.env = {
-			...allowlistedEnv(options.hostEnv ?? process.env, options.passEnv),
-			...options.home ? {
-				HOME: options.home,
-				USERPROFILE: options.home
-			} : {}
-		};
-	}
-	async exec(command, args, options) {
-		const cwd = confineCwd(this.root, options.cwd);
-		assertSecretNames(options.secrets);
-		options.signal?.throwIfAborted();
-		const secretsDir = await mountSecrets(options.secrets);
-		try {
-			return await spawnConfined(command, args, {
-				...options,
-				cwd,
-				env: secretsDir ? {
-					...options.env,
-					[SECRETS_DIR_ENV]: secretsDir
-				} : options.env
-			});
-		} finally {
-			if (secretsDir) await rm(secretsDir, {
-				recursive: true,
-				force: true
-			});
-		}
-	}
-};
-/**
-* Each secret as a 0600 file in a fresh 0700 directory outside the project —
-* where nothing the build writes, packs or commits will pick it up.
-*/
-async function mountSecrets(secrets) {
-	if (!secrets || Object.keys(secrets).length === 0) return void 0;
-	const dir = await mkdtemp(join(tmpdir(), "gkm-secrets-"));
-	for (const [name, value] of Object.entries(secrets)) await writeFile(join(dir, name), value, { mode: 384 });
-	return dir;
-}
-function spawnConfined(command, args, options) {
-	const { output = "capture", signal, timeoutMs } = options;
-	return new Promise((resolvePromise, reject) => {
-		const child = spawn(command, [...args], {
-			cwd: options.cwd,
-			env: { ...options.env },
-			stdio: STDIO[output],
-			shell: false,
-			...signal ? { signal } : {}
-		});
-		let stdout = "";
-		let stderr = "";
-		child.stdout?.on("data", (chunk) => {
-			stdout += chunk.toString();
-		});
-		child.stderr?.on("data", (chunk) => {
-			stderr += chunk.toString();
-		});
-		let timedOut = false;
-		let killer;
-		const timer = setTimeout(() => {
-			timedOut = true;
-			child.kill("SIGTERM");
-			killer = setTimeout(() => child.kill("SIGKILL"), KILL_GRACE_MS);
-			killer.unref?.();
-		}, timeoutMs);
-		timer.unref?.();
-		const settle = () => {
-			clearTimeout(timer);
-			if (killer) clearTimeout(killer);
-		};
-		child.on("error", (error) => {
-			settle();
-			reject(signal?.aborted ? signal.reason : error);
-		});
-		child.on("close", (code, killedBy) => {
-			settle();
-			if (signal?.aborted) reject(signal.reason);
-			else if (timedOut) reject(new CommandTimedOut(command, args, timeoutMs));
-			else resolvePromise({
-				exitCode: code,
-				signal: killedBy ?? null,
-				stdout,
-				stderr
-			});
-		});
-	});
-}
-//#endregion
 //#region src/secrets/encryption.ts
 var encryption_exports = /* @__PURE__ */ __exportAll({
 	encryptSecrets: () => encryptSecrets,
@@ -4227,17 +3782,17 @@ function isStateStore(value) {
 async function createStateStore(options) {
 	const { config, workspaceRoot, workspaceName } = options;
 	if (!config || config.provider === "local") {
-		const { LocalStateStore } = await import("./LocalStateStore-BGIXcrvX.mjs").then((n) => n.n);
+		const { LocalStateStore } = await import("./LocalStateStore-Cy1ZBW7U.mjs").then((n) => n.n);
 		return new LocalStateStore(workspaceRoot);
 	}
 	if (isStateStore(config.provider)) return config.provider;
 	if (isStateProvider(config.provider)) {
-		const { LegacyStateStore } = await import("./LegacyStateStore-Q3GmKOdw.mjs");
+		const { LegacyStateStore } = await import("./LegacyStateStore-DIgkGaUP.mjs");
 		return new LegacyStateStore(config.provider, { warn: options.warn });
 	}
 	if (config.provider === "ssm") {
 		if (!workspaceName) throw new StateStoreNeedsWorkspaceName("ssm");
-		const { SSMStateStore } = await import("./SSMStateStore-CAQDVpoc.mjs");
+		const { SSMStateStore } = await import("./SSMStateStore-DfF174xQ.mjs");
 		const ssm = config;
 		return SSMStateStore.create({
 			workspaceName,
@@ -4247,7 +3802,7 @@ async function createStateStore(options) {
 	}
 	if (config.provider === "s3") {
 		if (!workspaceName) throw new StateStoreNeedsWorkspaceName("s3");
-		const { S3StateStore } = await import("./S3StateStore-D7l_lWJ3.mjs");
+		const { S3StateStore } = await import("./S3StateStore-D3x6ivBL.mjs");
 		const s3 = config;
 		return S3StateStore.create({
 			workspaceName,
@@ -5425,7 +4980,7 @@ async function buildDockerImage(imageName, options, cwd) {
 	logger.log(`\n🐳 Building Docker image: ${fullImageName}`);
 	const cleanup = ensureLockfile(cwd);
 	try {
-		await run("docker", [
+		await run$1("docker", [
 			"build",
 			"--file=.gkm/docker/Dockerfile",
 			`--tag=${fullImageName}`,
@@ -5454,7 +5009,7 @@ async function pushDockerImage(imageName, options, cwd) {
 	const fullImageName = validateImageRef(`${registry}/${imageName}:${tag}`);
 	logger.log(`\n🚀 Pushing Docker image: ${fullImageName}`);
 	try {
-		await run("docker", ["push", fullImageName], { cwd });
+		await run$1("docker", ["push", fullImageName], { cwd });
 		logger.log(`✅ Docker image pushed: ${fullImageName}`);
 	} catch (error) {
 		throw new DockerPushFailed(fullImageName, error);
@@ -6691,6 +6246,6 @@ async function sniffAllApps(apps, workspacePath, options = {}) {
 	return results;
 }
 //#endregion
-export { workspace_exports as $, StateStoreBusy as A, prepareEntryCredentials as At, LocalSandbox as B, storeDokployCredentials as Bt, setDnsRecord as C, primaryPortKey as Ct, DocumentStateStore as D, isPortAvailable as Dt, setPostgresBackupId as E, findAvailablePort as Et, newLockHolder as F, getDokployCredentials as Ft, DEFAULT_TIMEOUT_MS as G, allowlistedEnv as H, prompt as Ht, withGeneratedSecrets as I, getDokployRegistryId as It, FAKE_ENV as J, run as K, encryptSecrets as L, getDokployToken as Lt, StateVersionConflict as M, logoutCommand as Mt, contentVersion as N, validateDokployToken as Nt, StageStateMissing as O, loadEnvFiles as Ot, createStateStore as P, whoamiCommand as Pt, reconcileWorkspace as Q, encryption_exports as R, getHostingerToken as Rt, setDeployedImage as S, portKeys as St, setGeneratedSecret as T, createEntryWrapper as Tt, CommandFailed as U, SANDBOX_ENV_ALLOWLIST as V, canPrompt as Vt, CommandTimedOut as W, constructGlobs as X, backendsOf as Y, derivedContainers as Z, getBackupState as _, providerOf as _t, DockerBuildFailed as a, quoteIdentifier as at, setApplicationId as b, describeServices as bt, dockerCommand as c, appEnvKeys as ct, generateDockerignore as d, localRolePassword as dt, LOCAL_CA_PATH as et, generateSlimDockerfile as f, planFor as ft, createEmptyState as g, eventsBackendFor as gt, resolveHost as h, cacheBackendFor as ht, DokployApiError as i, postgresStatements as it, StateStoreWithoutLocking as j, loginCommand as jt, StateLocked as k, loadSecretsForApp as kt, siteDockerfile as l, networkEnv as lt, isMainFrontendApp as m, hostFor as mt, sniffAppEnvironment as n, applyPostgres as nt, DockerPushFailed as o, composeFor as ot, validateImageRef as p, resourceName as pt, runOutput as q, DokployApi as r, postgresDatabaseNames as rt, appPackageName as s, pgClient as st, sniffAllApps as t, forgetState as tt, detectPackageManager as u, envFor as ut, getGeneratedSecret as v, storageBackendFor as vt, setDnsVerification as w, createCredentialsPreload as wt, setBackupState as x, fakeKey as xt, isDnsVerified as y, DEFAULT_IMAGES as yt, keyFingerprint as z, readCredentials as zt };
+export { pgClient as $, StateStoreBusy as A, FAKE_ENV as B, setDnsRecord as C, loginCommand as Ct, DocumentStateStore as D, canPrompt as Dt, setPostgresBackupId as E, whoamiCommand as Et, newLockHolder as F, workspace_exports as G, constructGlobs as H, withGeneratedSecrets as I, applyPostgres as J, LOCAL_CA_PATH as K, encryptSecrets as L, StateVersionConflict as M, contentVersion as N, StageStateMissing as O, prompt as Ot, createStateStore as P, composeFor as Q, encryption_exports as R, setDeployedImage as S, prepareEntryCredentials as St, setGeneratedSecret as T, validateDokployToken as Tt, derivedContainers as U, backendsOf as V, reconcileWorkspace as W, postgresStatements as X, postgresDatabaseNames as Y, quoteIdentifier as Z, getBackupState as _, createEntryWrapper as _t, DockerBuildFailed as a, resourceName as at, setApplicationId as b, loadEnvFiles as bt, dockerCommand as c, eventsBackendFor as ct, generateDockerignore as d, DEFAULT_IMAGES as dt, appEnvKeys as et, generateSlimDockerfile as f, describeServices as ft, createEmptyState as g, createCredentialsPreload as gt, resolveHost as h, primaryPortKey as ht, DokployApiError as i, planFor as it, StateStoreWithoutLocking as j, StateLocked as k, siteDockerfile as l, providerOf as lt, isMainFrontendApp as m, portKeys as mt, sniffAppEnvironment as n, envFor as nt, DockerPushFailed as o, hostFor as ot, validateImageRef as p, fakeKey as pt, forgetState as q, DokployApi as r, localRolePassword as rt, appPackageName as s, cacheBackendFor as st, sniffAllApps as t, networkEnv as tt, detectPackageManager as u, storageBackendFor as ut, getGeneratedSecret as v, findAvailablePort as vt, setDnsVerification as w, logoutCommand as wt, setBackupState as x, loadSecretsForApp as xt, isDnsVerified as y, isPortAvailable as yt, keyFingerprint as z };
 
-//# sourceMappingURL=sniffer-aO_-s5vq.mjs.map
+//# sourceMappingURL=sniffer-49KPbDgq.mjs.map