@geekmidas/cli 10.0.0-alpha.63 → 10.0.0-alpha.65

package/dist/{deploy-ABBI0lf1.cjs → deploy-Cy8igpQF.cjs}

@@ -1,10 +1,14 @@
-const require_sniffer = require("./sniffer-D_SYc_pO.cjs");
-const require_discover = require("./discover-C_6COHEv.cjs");
-const require_config = require("./config-BEJYKd4s.cjs");
-const require_workspace = require("./workspace-Kl4NG9IH.cjs");
+const require_sniffer = require("./sniffer-BSwaL-dX.cjs");
+const require_local = require("./local-BdH4XN0E.cjs");
+const require_credentials = require("./credentials-Bzbg23n8.cjs");
+const require_discover = require("./discover-DHdECueV.cjs");
+const require_derive = require("./derive-DAbo49sm.cjs");
+const require_workspace = require("./workspace-BewAHZIo.cjs");
+require("./config.cjs");
 const require_storage = require("./storage-CSGoC3bK.cjs");
-const require_store = require("./store-KvNQwYaB.cjs");
-const require_terminal = require("./terminal-D0f1u0LG.cjs");
+const require_store = require("./store-CJF1Tqkq.cjs");
+const require_state = require("./state-DF26e_lo.cjs");
+require("./terminal-Bs5E1oxm.cjs");
 let node_path = require("node:path");
 let node_fs_promises = require("node:fs/promises");
 let node_os = require("node:os");
@@ -83,7 +87,7 @@ const PROVISIONERS = {
 	*/
 	database: async (declaration, context) => {
 		if (declaration.kind !== "database") throw new WrongKind(declaration.kind);
-		const name = require_sniffer.resourceName(declaration.id, declaration.kind, context.stage);
+		const name = require_state.resourceName(declaration.id, declaration.kind, context.stage);
 		const { postgres } = await context.api.findOrCreatePostgres(serviceName({
 			stage: context.stage,
 			app: context.scope ?? context.project
@@ -120,7 +124,7 @@ const PROVISIONERS = {
 		if (declaration.kind !== "database-schema") throw new WrongKind(declaration.kind);
 		const parent = context.provisioned[declaration.of];
 		if (!parent) throw new UnresolvedParent(declaration.id, declaration.of);
-		const runtime = require_sniffer.resourceName(declaration.id, declaration.kind, context.stage);
+		const runtime = require_state.resourceName(declaration.id, declaration.kind, context.stage);
 		const owner = (0, _geekmidas_db_pg_roles.ownerRole)(runtime);
 		const reads = readsFrom(context.manifest, declaration.id);
 		const parentUrl = new URL(parent.provides[(0, _geekmidas_manifest.provideKey)(declaration.of, "url")] ?? "");
@@ -222,7 +226,7 @@ const PROVISIONERS = {
 			stage: context.stage,
 			app: context.scope ?? context.project
 		}, declaration.id);
-		const bucket = require_sniffer.resourceName(declaration.id, declaration.kind, context.stage);
+		const bucket = require_state.resourceName(declaration.id, declaration.kind, context.stage);
 		const user = `${bucket}-root`;
 		const password = derivedPassword(context, `objects:${declaration.id}`);
 		const { compose } = await context.api.findOrCreateCompose(service, context.projectId, context.environmentId, minioCompose({
@@ -669,7 +673,7 @@ async function provisionDeclared(options) {
 		clusters: {}
 	};
 	const manifest = options.manifest ?? await require_discover.discover({
-		patterns: require_sniffer.constructGlobs(workspace),
+		patterns: require_state.constructGlobs(workspace),
 		cwd: workspace.root
 	});
 	if (Object.keys(manifest).length === 0) return empty;
@@ -682,9 +686,9 @@ async function provisionDeclared(options) {
 		stage: options.stage,
 		project: workspace.name,
 		scope: options.scope ?? workspace.name,
-		cache: require_sniffer.cacheBackendFor(require_sniffer.providerOf(workspace)),
-		events: require_sniffer.eventsBackendFor(require_sniffer.providerOf(workspace)),
-		storage: require_sniffer.storageBackendFor(require_sniffer.providerOf(workspace)),
+		cache: require_state.cacheBackendFor(require_state.providerOf(workspace)),
+		events: require_state.eventsBackendFor(require_state.providerOf(workspace)),
+		storage: require_state.storageBackendFor(require_state.providerOf(workspace)),
 		addresses: surfaceAddresses(manifest, options.appUrls),
 		seed: options.seed,
 		...options.supplied ? { supplied: options.supplied } : {},
@@ -722,7 +726,7 @@ async function provisionDeclared(options) {
 * run again.
 */
 async function applyDeclared(client, statements) {
-	return (await require_sniffer.applyPostgres(client, statements)).filter((entry) => entry.created).length;
+	return (await require_state.applyPostgres(client, statements)).filter((entry) => entry.created).length;
 }
 /**
 * The provisioning order, with queues and topics moved to the end.
@@ -758,7 +762,7 @@ function surfaceAddresses(manifest, appUrls) {
 	const addresses = {};
 	for (const [id, declaration] of Object.entries(manifest)) {
 		if (declaration.kind !== "rest-api") continue;
-		const url = appUrls[require_config.appKey(id)];
+		const url = appUrls[require_derive.appKey(id)];
 		if (url) addresses[id] = url;
 	}
 	return addresses;
@@ -785,7 +789,7 @@ async function createDnsProvider(options) {
 	if (isDnsProvider(config.provider)) return config.provider;
 	const provider = config.provider;
 	if (provider === "hostinger") {
-		const { HostingerProvider } = await Promise.resolve().then(() => require("./HostingerProvider-mJ7YruxH.cjs"));
+		const { HostingerProvider } = await Promise.resolve().then(() => require("./HostingerProvider-Dlmbfass.cjs"));
 		return new HostingerProvider();
 	}
 	if (provider === "route53") {
@@ -1055,7 +1059,7 @@ async function orchestrateDns(appHostnames, dnsConfig, dokployEndpoint, state) {
 			hasFailures = true;
 		}
 		if (state) {
-			for (const record of domainRecords) if (record.created || record.existed) require_sniffer.setDnsRecord(state, {
+			for (const record of domainRecords) if (record.created || record.existed) require_state.setDnsRecord(state, {
 				domain: rootDomain,
 				name: record.subdomain,
 				type: record.type,
@@ -1090,7 +1094,7 @@ async function verifyDnsRecords(appHostnames, serverIp, state) {
 	const results = [];
 	logger$2.log("\n🔍 Verifying DNS records...");
 	for (const [appName, hostname] of appHostnames) {
-		if (require_sniffer.isDnsVerified(state, hostname, serverIp)) {
+		if (require_state.isDnsVerified(state, hostname, serverIp)) {
 			logger$2.log(`   ✓ ${hostname} (previously verified)`);
 			results.push({
 				hostname,
@@ -1104,7 +1108,7 @@ async function verifyDnsRecords(appHostnames, serverIp, state) {
 		try {
 			const resolvedIp = await resolveHostnameToIp(hostname);
 			if (resolvedIp === serverIp) {
-				require_sniffer.setDnsVerification(state, hostname, serverIp);
+				require_state.setDnsVerification(state, hostname, serverIp);
 				logger$2.log(`   ✓ ${hostname} → ${resolvedIp}`);
 				results.push({
 					hostname,
@@ -1211,14 +1215,14 @@ async function writeCredentialsFile(credentials) {
 async function buildImage(imageRef, buildArgs, credentials, { cwd, signal, stdio }) {
 	logger$1.log(`\n🔨 Building Docker image: ${imageRef}`);
 	logger$1.log("   Generating Dockerfile for the pre-built bundle...");
-	await require_sniffer.dockerCommand({
+	await require_state.dockerCommand({
 		slim: true,
 		cwd
 	});
 	const dockerfilePath = (0, node_path.join)(cwd, ".gkm", "docker", "Dockerfile");
 	const secret = credentials ? await writeCredentialsFile(credentials) : void 0;
 	try {
-		await require_sniffer.run("docker", dockerBuildArgs({
+		await require_local.run("docker", dockerBuildArgs({
 			dockerfilePath,
 			imageRef,
 			buildArgs,
@@ -1234,7 +1238,7 @@ async function buildImage(imageRef, buildArgs, credentials, { cwd, signal, stdio
 		});
 		logger$1.log(`✅ Image built: ${imageRef}`);
 	} catch (error) {
-		throw new require_sniffer.DockerBuildFailed(imageRef, error);
+		throw new require_state.DockerBuildFailed(imageRef, error);
 	} finally {
 		await secret?.cleanup();
 	}
@@ -1245,14 +1249,14 @@ async function buildImage(imageRef, buildArgs, credentials, { cwd, signal, stdio
 async function pushImage(imageRef, { cwd, signal, stdio }) {
 	logger$1.log(`\n☁️  Pushing image: ${imageRef}`);
 	try {
-		await require_sniffer.run("docker", ["push", imageRef], {
+		await require_local.run("docker", ["push", imageRef], {
 			cwd,
 			...signal ? { signal } : {},
 			...stdio ? { stdio } : {}
 		});
 		logger$1.log(`✅ Image pushed: ${imageRef}`);
 	} catch (error) {
-		throw new require_sniffer.DockerPushFailed(imageRef, error);
+		throw new require_state.DockerPushFailed(imageRef, error);
 	}
 }
 /**
@@ -1267,7 +1271,7 @@ async function pushImage(imageRef, { cwd, signal, stdio }) {
 */
 async function pushedDigest(imageRef, { cwd, signal } = { cwd: process.cwd() }) {
 	const repository = imageRef.split("@")[0].replace(/:[\w][\w.-]*$/, "");
-	const output = await require_sniffer.runOutput("docker", [
+	const output = await require_local.runOutput("docker", [
 		"image",
 		"inspect",
 		"--format={{json .RepoDigests}}",
@@ -1291,7 +1295,7 @@ async function pushedDigest(imageRef, { cwd, signal } = { cwd: process.cwd() })
 async function deployDocker(options) {
 	const { stage, tag, skipPush, masterKey, config, buildArgs, credentials } = options;
 	const imageName = config.imageName;
-	const imageRef = require_sniffer.validateImageRef(getImageRef(config.registry, imageName, tag));
+	const imageRef = require_state.validateImageRef(getImageRef(config.registry, imageName, tag));
 	const docker = {
 		cwd: options.cwd ?? process.cwd(),
 		...options.signal ? { signal: options.signal } : {},
@@ -1338,10 +1342,10 @@ function generateSecret() {
 * Otherwise generates a new one and stores it.
 */
 function getOrGenerateSecret(state, appName, secretName) {
-	const existing = require_sniffer.getGeneratedSecret(state, appName, secretName);
+	const existing = require_state.getGeneratedSecret(state, appName, secretName);
 	if (existing) return existing;
 	const generated = generateSecret();
-	require_sniffer.setGeneratedSecret(state, appName, secretName, generated);
+	require_state.setGeneratedSecret(state, appName, secretName, generated);
 	return generated;
 }
 /**
@@ -1404,113 +1408,6 @@ function validateEnvVars(requiredVars, context) {
 	};
 }
 //#endregion
-//#region src/deploy/journal.ts
-var DeployJournal = class DeployJournal {
-	store;
-	stage;
-	state;
-	resources;
-	version;
-	existed;
-	constructor(store, stage, state, resources, version, existed) {
-		this.store = store;
-		this.stage = stage;
-		this.state = state;
-		this.resources = resources;
-		this.version = version;
-		this.existed = existed;
-	}
-	/**
-	* The stage's journal — its stored state, or `initial` written as the
-	* stage's first state, so there is somewhere to record the very first
-	* resource before it is created.
-	*/
-	static async open(store, stage, initial) {
-		const stored = await store.read(stage);
-		if (stored) return new DeployJournal(store, stage, stored.state, stored.resources, stored.version, true);
-		const state = initial();
-		const version = await store.write(stage, state, { expectedVersion: null });
-		return new DeployJournal(store, stage, state, {}, version, false);
-	}
-	record(key) {
-		return this.resources[key];
-	}
-	/** The keys a previous run marked `pending` and never saw created. */
-	unfinished() {
-		return Object.values(this.resources).filter((record) => record.status === "pending").map((record) => record.key);
-	}
-	/** Records that `entry` is about to be created. */
-	async pending(entry) {
-		await this.put({
-			...entry,
-			status: "pending"
-		});
-	}
-	/** Records `entry` as existing with `id`; a no-op if it already is. */
-	async ready(entry, id) {
-		const current = this.resources[entry.key];
-		if (current?.status === "ready" && current.id === id) return;
-		await this.put({
-			...entry,
-			status: "ready",
-			id
-		});
-	}
-	/**
-	* The resource `entry` names: by its recorded id, else by looking it up,
-	* else created — with `pending` written before the create and `ready`
-	* after, so a run that dies in between leaves a record the next run
-	* resolves by looking the resource up rather than creating another.
-	*/
-	async ensure(entry, steps) {
-		const record = this.resources[entry.key];
-		let staleId;
-		if (record?.status === "ready" && record.id && steps.get) {
-			const known = await steps.get(record.id);
-			if (known) {
-				await this.ready(entry, steps.id(known));
-				return {
-					resource: known,
-					via: "recorded"
-				};
-			}
-			staleId = record.id;
-		}
-		const existing = await steps.find();
-		if (existing) {
-			await this.ready(entry, steps.id(existing));
-			return {
-				resource: existing,
-				via: record?.status === "pending" ? "resumed" : "found",
-				...staleId ? { staleId } : {}
-			};
-		}
-		await this.pending(entry);
-		const created = await steps.create();
-		await this.ready(entry, steps.id(created));
-		return {
-			resource: created,
-			via: "created",
-			...staleId ? { staleId } : {}
-		};
-	}
-	/** Writes the stage's state, keeping its resource records. */
-	async save() {
-		this.state.lastDeployedAt = (/* @__PURE__ */ new Date()).toISOString();
-		this.version = await this.store.write(this.stage, this.state, { expectedVersion: this.version });
-	}
-	async put(record) {
-		this.version = await this.store.putResource(this.stage, record, { expectedVersion: this.version });
-		this.resources = {
-			...this.resources,
-			[record.key]: {
-				...record,
-				updatedAt: (/* @__PURE__ */ new Date()).toISOString()
-			}
-		};
-	}
-};
-//#endregion
 //#region src/deploy/ownership.ts
 /**
 * Which Dokploy project a deploy is allowed to deploy into.
@@ -1648,7 +1545,7 @@ async function resolveProject(api, identity, stateProjectId, log = () => {}, hoo
 var RegistryNotConfigured = class extends Error {
 	stage;
 	constructor(stage) {
-		super(`Deploying '${stage}' needs a container registry: Dokploy pulls each app's image from one. Set deploy.dokploy.registry in gkm.config.ts (e.g. 'ghcr.io/acme'), and deploy.dokploy.registryId if Dokploy already holds that registry's credentials.`);
+		super(`Deploying '${stage}' needs a container registry: Dokploy pulls each app's image from one. Set deploy.registry in gkm.config.ts (e.g. 'ghcr.io/acme'), and deploy.dokploy.registryId if Dokploy already holds that registry's credentials.`);
 		this.stage = stage;
 		this.name = "RegistryNotConfigured";
 	}
@@ -2136,7 +2033,7 @@ async function preflight({ workspace, manifest, stage, secrets: secretsStore, ct
 	logger.log("\n🔐 Loading secrets and analyzing environment requirements...");
 	const stored = await secretsStore.read();
 	if (!stored) logger.log(`   ⚠️  No secrets found for stage "${stage}"; starting them`);
-	const { secrets: stageSecrets, generated } = require_sniffer.withGeneratedSecrets(stored ?? require_storage.initStageSecrets(stage), manifest);
+	const { secrets: stageSecrets, generated } = require_state.withGeneratedSecrets(stored ?? require_storage.initStageSecrets(stage), manifest);
 	if (generated.length > 0) {
 		if (ctx.dryRun) logger.log(`   🔑 Would generate for "${stage}" (${secretsStore.store}): ${generated.join(", ")}`);
 		else {
@@ -2176,7 +2073,7 @@ async function provisionDokploy(run) {
 	};
 	const { api, endpoint } = await dokployApi(workspace, ctx);
 	logger.log("\n📋 Loading deploy state...");
-	const journal = await DeployJournal.open(store, stage, () => require_sniffer.createEmptyState(stage, "", ""));
+	const journal = await require_state.DeployJournal.open(store, stage, () => require_state.createEmptyState(stage, "", ""));
 	const state = journal.state;
 	if (journal.existed) logger.log(`   Found existing state for stage "${stage}"`);
 	else logger.log(`   Creating new state for stage "${stage}"`);
@@ -2232,7 +2129,7 @@ async function provisionDokploy(run) {
 	state.environmentId = environmentId;
 	state.identity = identity.key;
 	logger.log("\n🐳 Checking registry...");
-	const registry = workspace.deploy.dokploy?.registry;
+	const registry = workspace.deploy.registry;
 	let registryCreated = false;
 	const dokployRegistry = await resolveRegistry(api, {
 		stage,
@@ -2245,7 +2142,7 @@ async function provisionDokploy(run) {
 				kind: "registry",
 				url
 			}, { signal: ctx.signal });
-			if (!login) throw new require_terminal.MissingCredential("registry", url);
+			if (!login) throw new require_credentials.MissingCredential("registry", url);
 			const created = await api.createRegistry("Default Registry", url, login.username, login.password);
 			registryCreated = true;
 			logger.log(`   ✓ Registry created: ${created.registryId}`);
@@ -2308,10 +2205,10 @@ async function provisionDokploy(run) {
 			projectName: identity.scope,
 			stage,
 			config: workspace.deploy.backups,
-			existingState: require_sniffer.getBackupState(state),
+			existingState: require_state.getBackupState(state),
 			logger
 		});
-		require_sniffer.setBackupState(state, backupState);
+		require_state.setBackupState(state, backupState);
 		if (!backupState.postgresBackupId) {
 			const backupSchedule = workspace.deploy.backups.schedule ?? "0 2 * * *";
 			const backupRetention = workspace.deploy.backups.retention ?? 30;
@@ -2325,7 +2222,7 @@ async function provisionDokploy(run) {
 				enabled: true,
 				keepLatestCount: backupRetention
 			});
-			require_sniffer.setPostgresBackupId(state, backup.backupId);
+			require_state.setPostgresBackupId(state, backup.backupId);
 			logger.log(`   ✓ Postgres backup schedule created (${backupSchedule})`);
 		} else logger.log("   ✓ Using existing postgres backup schedule");
 	}
@@ -2392,12 +2289,12 @@ async function releaseDokploy(run) {
 		ctx.emit({
 			type: "app.failed",
 			app: appName,
-			error: require_terminal.eventError(error)
+			error: require_sniffer.eventError(error)
 		});
 	};
 	/** An image is pushed: worth keeping even if what follows fails. */
 	const built = async (appName, image, ref) => {
-		require_sniffer.setDeployedImage(state, appName, {
+		require_state.setDeployedImage(state, appName, {
 			ref: image.imageRef ?? ref,
 			...image.digest ? { digest: image.digest } : {}
 		});
@@ -2677,7 +2574,7 @@ async function ensureApplication(api, journal, appName, dokployAppName, projectI
 		action: via === "created" ? "create" : "reuse",
 		id: resource.applicationId
 	}, via);
-	require_sniffer.setApplicationId(journal.state, appName, resource.applicationId);
+	require_state.setApplicationId(journal.state, appName, resource.applicationId);
 	return resource;
 }
 /**
@@ -2742,7 +2639,7 @@ async function dokployApi(workspace, ctx) {
 		kind: "dokploy",
 		...configured ? { endpoint: configured } : {}
 	}, { signal: ctx.signal });
-	if (!creds) throw new require_terminal.MissingCredential("dokploy", configured);
+	if (!creds) throw new require_credentials.MissingCredential("dokploy", configured);
 	return {
 		api: new require_sniffer.DokployApi({
 			baseUrl: creds.endpoint,
@@ -2755,7 +2652,7 @@ async function dokployApi(workspace, ctx) {
 /** Each app's public host, the same way the deploy resolves it. */
 function hostOf(workspace, appName, stage) {
 	const app = workspace.apps[appName];
-	return require_sniffer.resolveHost(appName, app, stage, workspace.deploy?.domains, app.type === "web" && require_sniffer.isMainFrontendApp(appName, app, workspace.apps));
+	return require_state.resolveHost(appName, app, stage, workspace.deploy?.domains, app.type === "web" && require_state.isMainFrontendApp(appName, app, workspace.apps));
 }
 /**
 * What a deploy would do, from the same lookups it starts with — and nothing
@@ -2804,7 +2701,7 @@ async function planDokploy(run) {
 	let registryPlanned;
 	const registry = await resolveRegistry(api, {
 		stage,
-		registry: workspace.deploy.dokploy?.registry,
+		registry: workspace.deploy.registry,
 		configuredId: workspace.deploy.dokploy?.registryId,
 		stateId: state?.registryId,
 		log: (message) => logger.log(message),
@@ -2849,7 +2746,7 @@ async function planDokploy(run) {
 			resourceType: "application",
 			action: "create"
 		}, dokployAppName);
-		const ref = require_store.imageRef(identity, appName, workspace.deploy.dokploy?.registry, imageTag);
+		const ref = require_store.imageRef(identity, appName, workspace.deploy.registry, imageTag);
 		plan({
 			key: `image:${appName}`,
 			resourceType: "image",
@@ -2970,4 +2867,4 @@ Object.defineProperty(exports, "verifyDokploy", {
 	}
 });
 
-//# sourceMappingURL=deploy-ABBI0lf1.cjs.map
+//# sourceMappingURL=deploy-Cy8igpQF.cjs.map