@geekmidas/cli 10.0.0-alpha.65 → 10.0.0-alpha.67

package/dist/rollback-BnY7KuG_.cjs

@@ -0,0 +1,161 @@
+const require_rolldown_runtime = require("./rolldown-runtime-C0BPl7ul.cjs");
+const require_credentials = require("./credentials-BVs7mrtw.cjs");
+const require_sandbox = require("./sandbox-CL--ZDui.cjs");
+const require_workspace = require("./workspace-ON-bqiJz.cjs");
+const require_config = require("./config.cjs");
+const require_state = require("./state-DgmM4EKq.cjs");
+const require_sniffer = require("./sniffer-D66HIvi9.cjs");
+const require_engine = require("./engine-Cx_dvx9q.cjs");
+let node_path = require("node:path");
+//#region src/target/dokploy/rollback.ts
+/**
+* `gkm deploy:rollback`: a stage's apps put back on the release before the
+* one they run, by hand — for a release that passed its checks and turned out
+* wrong anyway.
+*
+* One app by default, because an app is what usually broke: rolling the API
+* back over a site fix that shipped beside it undoes the fix too. `atomic`
+* rolls back every app that has a release to go back to, for apps that only
+* work together — an API and the site built against its newer contract.
+*
+* It restores images and nothing else. The environment an app runs with is
+* the stage's, resolved on every deploy, and migrations are forward-only: a
+* migration that the older code cannot run against is undone by a new
+* migration, never by a rollback.
+*/
+var rollback_exports = /* @__PURE__ */ require_rolldown_runtime.__exportAll({
+	NothingToRollBack: () => NothingToRollBack,
+	RollbackNeedsApp: () => RollbackNeedsApp,
+	StageNeverDeployed: () => StageNeverDeployed,
+	rollbackStage: () => rollbackStage
+});
+/** Neither an app nor every app was asked for. */
+var RollbackNeedsApp = class extends Error {
+	stage;
+	apps;
+	constructor(stage, apps) {
+		super(`Say what to roll back: --app <name> for one app (${apps.join(", ") || "none has an earlier release"}), or --atomic for every app of "${stage}" together.`);
+		this.stage = stage;
+		this.apps = apps;
+		this.name = "RollbackNeedsApp";
+	}
+};
+/** An app has no release before the one it runs. */
+var NothingToRollBack = class extends Error {
+	stage;
+	app;
+	constructor(stage, app) {
+		super(`"${app}" has no earlier release on "${stage}" to roll back to: it has been released once, or every earlier release was itself rolled back. Deploy the version you want instead.`);
+		this.stage = stage;
+		this.app = app;
+		this.name = "NothingToRollBack";
+	}
+};
+/** The stage was never deployed through Dokploy from this state. */
+var StageNeverDeployed = class extends Error {
+	stage;
+	constructor(stage) {
+		super(`"${stage}" has no deploy state, so there is nothing to roll back. Check the stage name, and that \`state\` in gkm.config.ts points at the store the deploys write to.`);
+		this.stage = stage;
+		this.name = "StageNeverDeployed";
+	}
+};
+/**
+* Roll a stage's app — or, `atomic`, all of them — back to its previous
+* release, holding the stage's lock as a deploy does.
+*/
+async function rollbackStage(input) {
+	const signal = input.signal ?? new AbortController().signal;
+	const log = input.log ?? (() => {});
+	const credentials = input.credentials ?? require_credentials.storedCredentials();
+	const sandbox = input.sandbox ?? new require_credentials.LocalSandbox({ root: require_config.findWorkspaceRoot((0, node_path.resolve)(input.cwd)) });
+	return require_sandbox.withSandbox(sandbox, async () => {
+		const { workspace } = await require_config.loadWorkspaceConfig((0, node_path.resolve)(input.cwd), { sandbox });
+		require_workspace.assertDeployedStage(workspace.stages, input.stage);
+		const store = await require_sniffer.createStateStore({
+			config: workspace.state,
+			workspaceRoot: workspace.root,
+			workspaceName: workspace.name
+		});
+		if (!await store.read(input.stage)) throw new StageNeverDeployed(input.stage);
+		const lock = await store.lock(input.stage, { operation: "rollback" });
+		try {
+			const journal = await require_state.DeployJournal.open(store, input.stage, () => require_state.createEmptyState(input.stage, "", ""));
+			const { state } = journal;
+			const releases = state.releases ?? {};
+			const restorable = Object.keys(releases).filter((app) => releases[app].previous);
+			let apps;
+			if (input.atomic) {
+				apps = restorable;
+				if (apps.length === 0) throw new RollbackNeedsApp(input.stage, restorable);
+			} else if (input.app) {
+				if (!releases[input.app]?.previous) throw new NothingToRollBack(input.stage, input.app);
+				apps = [input.app];
+			} else throw new RollbackNeedsApp(input.stage, restorable);
+			const { api } = await require_engine.dokployApi(workspace, {
+				credentials,
+				signal
+			});
+			const verify = require_engine.verifySettings(workspace.deploy.dokploy?.verify);
+			const rolled = [];
+			for (const app of apps) {
+				signal.throwIfAborted();
+				const { current, previous } = releases[app];
+				const applicationId = state.applications[app];
+				if (!previous || !applicationId) throw new NothingToRollBack(input.stage, app);
+				log(`⏪ ${app}: ${current.ref} → ${previous.ref}`);
+				await require_engine.restoreImage(api, {
+					applicationId,
+					image: previous,
+					registryId: state.registryId,
+					verify,
+					signal
+				});
+				require_state.recordRollback(state, app, previous);
+				await journal.save();
+				log(`   ✓ ${app} is running ${previous.ref}`);
+				rolled.push({
+					app,
+					from: current,
+					to: previous
+				});
+			}
+			return rolled;
+		} finally {
+			await lock.release();
+		}
+	});
+}
+//#endregion
+Object.defineProperty(exports, "NothingToRollBack", {
+	enumerable: true,
+	get: function() {
+		return NothingToRollBack;
+	}
+});
+Object.defineProperty(exports, "RollbackNeedsApp", {
+	enumerable: true,
+	get: function() {
+		return RollbackNeedsApp;
+	}
+});
+Object.defineProperty(exports, "StageNeverDeployed", {
+	enumerable: true,
+	get: function() {
+		return StageNeverDeployed;
+	}
+});
+Object.defineProperty(exports, "rollbackStage", {
+	enumerable: true,
+	get: function() {
+		return rollbackStage;
+	}
+});
+Object.defineProperty(exports, "rollback_exports", {
+	enumerable: true,
+	get: function() {
+		return rollback_exports;
+	}
+});
+
+//# sourceMappingURL=rollback-BnY7KuG_.cjs.map

package/dist/rollback-BnY7KuG_.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"rollback-BnY7KuG_.cjs","names":["storedCredentials","LocalSandbox","findWorkspaceRoot","resolve","withSandbox","loadWorkspaceConfig","createStateStore","DeployJournal","createEmptyState","dokployApi","verifySettings","restoreImage"],"sources":["../src/target/dokploy/rollback.ts"],"sourcesContent":["/**\n * `gkm deploy:rollback`: a stage's apps put back on the release before the\n * one they run, by hand — for a release that passed its checks and turned out\n * wrong anyway.\n *\n * One app by default, because an app is what usually broke: rolling the API\n * back over a site fix that shipped beside it undoes the fix too. `atomic`\n * rolls back every app that has a release to go back to, for apps that only\n * work together — an API and the site built against its newer contract.\n *\n * It restores images and nothing else. The environment an app runs with is\n * the stage's, resolved on every deploy, and migrations are forward-only: a\n * migration that the older code cannot run against is undone by a new\n * migration, never by a rollback.\n */\n\nimport { resolve } from 'node:path';\nimport { findWorkspaceRoot, loadWorkspaceConfig } from '../../config';\nimport {\n\ttype CredentialProvider,\n\tstoredCredentials,\n} from '../../deploy/credentials';\nimport { DeployJournal } from '../../deploy/journal';\nimport { createStateStore } from '../../deploy/StateStore';\nimport {\n\tcreateEmptyState,\n\ttype ReleasedImage,\n\trecordRollback,\n} from '../../deploy/state';\nimport { LocalSandbox } from '../../sandbox/local';\nimport { type Sandbox, withSandbox } from '../../sandbox/sandbox';\nimport { assertDeployedStage } from '../../workspace/stages';\nimport { dokployApi, restoreImage, verifySettings } from './engine';\n\nexport interface RollbackInput {\n\t/** The project: the directory holding `gkm.config.ts`, or one inside it. */\n\tcwd: string;\n\tstage: string;\n\t/** The app to roll back. */\n\tapp?: string;\n\t/** Every app with an earlier release, instead of one. */\n\tatomic?: boolean;\n\t/** Defaults to the environment, then the logins `gkm login` stored. */\n\tcredentials?: CredentialProvider;\n\tsignal?: AbortSignal;\n\t/** Each progress line. Defaults to none. */\n\tlog?: (line: string) => void;\n\t/** Where the config is loaded. Defaults to a `LocalSandbox` on the project. */\n\tsandbox?: Sandbox;\n}\n\n/** One app rolled back. */\nexport interface RolledBack {\n\tapp: string;\n\tfrom: ReleasedImage;\n\tto: ReleasedImage;\n}\n\n/** Neither an app nor every app was asked for. */\nexport class RollbackNeedsApp extends Error {\n\tconstructor(\n\t\treadonly stage: string,\n\t\t/** The apps that have a release to go back to. */\n\t\treadonly apps: readonly string[],\n\t) {\n\t\tsuper(\n\t\t\t`Say what to roll back: --app <name> for one app (${apps.join(', ') || 'none has an earlier release'}), ` +\n\t\t\t\t`or --atomic for every app of \"${stage}\" together.`,\n\t\t);\n\t\tthis.name = 'RollbackNeedsApp';\n\t}\n}\n\n/** An app has no release before the one it runs. */\nexport class NothingToRollBack extends Error {\n\tconstructor(\n\t\treadonly stage: string,\n\t\treadonly app: string,\n\t) {\n\t\tsuper(\n\t\t\t`\"${app}\" has no earlier release on \"${stage}\" to roll back to: it has been released once, ` +\n\t\t\t\t'or every earlier release was itself rolled back. Deploy the version you want instead.',\n\t\t);\n\t\tthis.name = 'NothingToRollBack';\n\t}\n}\n\n/** The stage was never deployed through Dokploy from this state. */\nexport class StageNeverDeployed extends Error {\n\tconstructor(readonly stage: string) {\n\t\tsuper(\n\t\t\t`\"${stage}\" has no deploy state, so there is nothing to roll back. ` +\n\t\t\t\t'Check the stage name, and that `state` in gkm.config.ts points at the store the deploys write to.',\n\t\t);\n\t\tthis.name = 'StageNeverDeployed';\n\t}\n}\n\n/**\n * Roll a stage's app — or, `atomic`, all of them — back to its previous\n * release, holding the stage's lock as a deploy does.\n */\nexport async function rollbackStage(\n\tinput: RollbackInput,\n): Promise<RolledBack[]> {\n\tconst signal = input.signal ?? new AbortController().signal;\n\tconst log = input.log ?? (() => {});\n\tconst credentials = input.credentials ?? storedCredentials();\n\tconst sandbox =\n\t\tinput.sandbox ??\n\t\tnew LocalSandbox({ root: findWorkspaceRoot(resolve(input.cwd)) });\n\n\treturn withSandbox(sandbox, async () => {\n\t\tconst { workspace } = await loadWorkspaceConfig(resolve(input.cwd), {\n\t\t\tsandbox,\n\t\t});\n\t\tassertDeployedStage(workspace.stages, input.stage);\n\n\t\tconst store = await createStateStore({\n\t\t\tconfig: workspace.state,\n\t\t\tworkspaceRoot: workspace.root,\n\t\t\tworkspaceName: workspace.name,\n\t\t});\n\t\tif (!(await store.read(input.stage))) {\n\t\t\tthrow new StageNeverDeployed(input.stage);\n\t\t}\n\n\t\tconst lock = await store.lock(input.stage, { operation: 'rollback' });\n\t\ttry {\n\t\t\tconst journal = await DeployJournal.open(store, input.stage, () =>\n\t\t\t\tcreateEmptyState(input.stage, '', ''),\n\t\t\t);\n\t\t\tconst { state } = journal;\n\t\t\tconst releases = state.releases ?? {};\n\t\t\tconst restorable = Object.keys(releases).filter(\n\t\t\t\t(app) => releases[app]!.previous,\n\t\t\t);\n\n\t\t\tlet apps: string[];\n\t\t\tif (input.atomic) {\n\t\t\t\tapps = restorable;\n\t\t\t\tif (apps.length === 0) {\n\t\t\t\t\tthrow new RollbackNeedsApp(input.stage, restorable);\n\t\t\t\t}\n\t\t\t} else if (input.app) {\n\t\t\t\tif (!releases[input.app]?.previous) {\n\t\t\t\t\tthrow new NothingToRollBack(input.stage, input.app);\n\t\t\t\t}\n\t\t\t\tapps = [input.app];\n\t\t\t} else {\n\t\t\t\tthrow new RollbackNeedsApp(input.stage, restorable);\n\t\t\t}\n\n\t\t\tconst { api } = await dokployApi(workspace, { credentials, signal });\n\t\t\tconst verify = verifySettings(workspace.deploy.dokploy?.verify);\n\t\t\tconst rolled: RolledBack[] = [];\n\n\t\t\tfor (const app of apps) {\n\t\t\t\tsignal.throwIfAborted();\n\t\t\t\tconst { current, previous } = releases[app]!;\n\t\t\t\tconst applicationId = state.applications[app];\n\t\t\t\tif (!previous || !applicationId) {\n\t\t\t\t\tthrow new NothingToRollBack(input.stage, app);\n\t\t\t\t}\n\n\t\t\t\tlog(`⏪ ${app}: ${current.ref} → ${previous.ref}`);\n\t\t\t\tawait restoreImage(api, {\n\t\t\t\t\tapplicationId,\n\t\t\t\t\timage: previous,\n\t\t\t\t\tregistryId: state.registryId,\n\t\t\t\t\tverify,\n\t\t\t\t\tsignal,\n\t\t\t\t});\n\t\t\t\trecordRollback(state, app, previous);\n\t\t\t\tawait journal.save();\n\t\t\t\tlog(`   ✓ ${app} is running ${previous.ref}`);\n\t\t\t\trolled.push({ app, from: current, to: previous });\n\t\t\t}\n\n\t\t\treturn rolled;\n\t\t} finally {\n\t\t\tawait lock.release();\n\t\t}\n\t});\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2DA,IAAa,mBAAb,cAAsC,MAAM;CAEjC;CAEA;CAHV,YACC,OAEA,MACC;EACD,MACC,oDAAoD,KAAK,KAAK,IAAI,KAAK,8BAA8B,mCACnE,MAAM,YACzC;EAPS,KAAA,QAAA;EAEA,KAAA,OAAA;EAMT,KAAK,OAAO;CACb;AACD;;AAGA,IAAa,oBAAb,cAAuC,MAAM;CAElC;CACA;CAFV,YACC,OACA,KACC;EACD,MACC,IAAI,IAAI,+BAA+B,MAAM,oIAE9C;EANS,KAAA,QAAA;EACA,KAAA,MAAA;EAMT,KAAK,OAAO;CACb;AACD;;AAGA,IAAa,qBAAb,cAAwC,MAAM;CACxB;CAArB,YAAY,OAAwB;EACnC,MACC,IAAI,MAAM,6JAEX;EAJoB,KAAA,QAAA;EAKpB,KAAK,OAAO;CACb;AACD;;;;;AAMA,eAAsB,cACrB,OACwB;CACxB,MAAM,SAAS,MAAM,UAAU,IAAI,gBAAgB,CAAC,CAAC;CACrD,MAAM,MAAM,MAAM,cAAc,CAAC;CACjC,MAAM,cAAc,MAAM,eAAeA,oBAAAA,kBAAkB;CAC3D,MAAM,UACL,MAAM,WACN,IAAIC,oBAAAA,aAAa,EAAE,MAAMC,eAAAA,mBAAAA,GAAkBC,UAAAA,QAAAA,CAAQ,MAAM,GAAG,CAAC,EAAE,CAAC;CAEjE,OAAOC,gBAAAA,YAAY,SAAS,YAAY;EACvC,MAAM,EAAE,cAAc,MAAMC,eAAAA,qBAAAA,GAAoBF,UAAAA,QAAAA,CAAQ,MAAM,GAAG,GAAG,EACnE,QACD,CAAC;EACD,kBAAA,oBAAoB,UAAU,QAAQ,MAAM,KAAK;EAEjD,MAAM,QAAQ,MAAMG,gBAAAA,iBAAiB;GACpC,QAAQ,UAAU;GAClB,eAAe,UAAU;GACzB,eAAe,UAAU;EAC1B,CAAC;EACD,IAAI,CAAE,MAAM,MAAM,KAAK,MAAM,KAAK,GACjC,MAAM,IAAI,mBAAmB,MAAM,KAAK;EAGzC,MAAM,OAAO,MAAM,MAAM,KAAK,MAAM,OAAO,EAAE,WAAW,WAAW,CAAC;EACpE,IAAI;GACH,MAAM,UAAU,MAAMC,cAAAA,cAAc,KAAK,OAAO,MAAM,aACrDC,cAAAA,iBAAiB,MAAM,OAAO,IAAI,EAAE,CACrC;GACA,MAAM,EAAE,UAAU;GAClB,MAAM,WAAW,MAAM,YAAY,CAAC;GACpC,MAAM,aAAa,OAAO,KAAK,QAAQ,CAAC,CAAC,QACvC,QAAQ,SAAS,IAAI,CAAE,QACzB;GAEA,IAAI;GACJ,IAAI,MAAM,QAAQ;IACjB,OAAO;IACP,IAAI,KAAK,WAAW,GACnB,MAAM,IAAI,iBAAiB,MAAM,OAAO,UAAU;GAEpD,OAAO,IAAI,MAAM,KAAK;IACrB,IAAI,CAAC,SAAS,MAAM,IAAI,EAAE,UACzB,MAAM,IAAI,kBAAkB,MAAM,OAAO,MAAM,GAAG;IAEnD,OAAO,CAAC,MAAM,GAAG;GAClB,OACC,MAAM,IAAI,iBAAiB,MAAM,OAAO,UAAU;GAGnD,MAAM,EAAE,QAAQ,MAAMC,eAAAA,WAAW,WAAW;IAAE;IAAa;GAAO,CAAC;GACnE,MAAM,SAASC,eAAAA,eAAe,UAAU,OAAO,SAAS,MAAM;GAC9D,MAAM,SAAuB,CAAC;GAE9B,KAAK,MAAM,OAAO,MAAM;IACvB,OAAO,eAAe;IACtB,MAAM,EAAE,SAAS,aAAa,SAAS;IACvC,MAAM,gBAAgB,MAAM,aAAa;IACzC,IAAI,CAAC,YAAY,CAAC,eACjB,MAAM,IAAI,kBAAkB,MAAM,OAAO,GAAG;IAG7C,IAAI,KAAK,IAAI,IAAI,QAAQ,IAAI,KAAK,SAAS,KAAK;IAChD,MAAMC,eAAAA,aAAa,KAAK;KACvB;KACA,OAAO;KACP,YAAY,MAAM;KAClB;KACA;IACD,CAAC;IACD,cAAA,eAAe,OAAO,KAAK,QAAQ;IACnC,MAAM,QAAQ,KAAK;IACnB,IAAI,QAAQ,IAAI,cAAc,SAAS,KAAK;IAC5C,OAAO,KAAK;KAAE;KAAK,MAAM;KAAS,IAAI;IAAS,CAAC;GACjD;GAEA,OAAO;EACR,UAAU;GACT,MAAM,KAAK,QAAQ;EACpB;CACD,CAAC;AACF"}

package/dist/rollback-m4Yeym5x.mjs

@@ -0,0 +1,132 @@
+import { t as __exportAll } from "./rolldown-runtime-BhDjJH2R.mjs";
+import { i as LocalSandbox, r as storedCredentials } from "./credentials-pAtB70k3.mjs";
+import { c as withSandbox } from "./sandbox-Dm247NGx.mjs";
+import { k as assertDeployedStage } from "./workspace-Be6uBhlF.mjs";
+import { findWorkspaceRoot, loadWorkspaceConfig } from "./config.mjs";
+import { o as recordRollback, p as DeployJournal, t as createEmptyState } from "./state-DkUStoqJ.mjs";
+import { g as createStateStore } from "./sniffer-BdFeLSmA.mjs";
+import { i as dokployApi, l as restoreImage, p as verifySettings } from "./engine-Gs0abjuj.mjs";
+import { resolve } from "node:path";
+//#region src/target/dokploy/rollback.ts
+/**
+* `gkm deploy:rollback`: a stage's apps put back on the release before the
+* one they run, by hand — for a release that passed its checks and turned out
+* wrong anyway.
+*
+* One app by default, because an app is what usually broke: rolling the API
+* back over a site fix that shipped beside it undoes the fix too. `atomic`
+* rolls back every app that has a release to go back to, for apps that only
+* work together — an API and the site built against its newer contract.
+*
+* It restores images and nothing else. The environment an app runs with is
+* the stage's, resolved on every deploy, and migrations are forward-only: a
+* migration that the older code cannot run against is undone by a new
+* migration, never by a rollback.
+*/
+var rollback_exports = /* @__PURE__ */ __exportAll({
+	NothingToRollBack: () => NothingToRollBack,
+	RollbackNeedsApp: () => RollbackNeedsApp,
+	StageNeverDeployed: () => StageNeverDeployed,
+	rollbackStage: () => rollbackStage
+});
+/** Neither an app nor every app was asked for. */
+var RollbackNeedsApp = class extends Error {
+	stage;
+	apps;
+	constructor(stage, apps) {
+		super(`Say what to roll back: --app <name> for one app (${apps.join(", ") || "none has an earlier release"}), or --atomic for every app of "${stage}" together.`);
+		this.stage = stage;
+		this.apps = apps;
+		this.name = "RollbackNeedsApp";
+	}
+};
+/** An app has no release before the one it runs. */
+var NothingToRollBack = class extends Error {
+	stage;
+	app;
+	constructor(stage, app) {
+		super(`"${app}" has no earlier release on "${stage}" to roll back to: it has been released once, or every earlier release was itself rolled back. Deploy the version you want instead.`);
+		this.stage = stage;
+		this.app = app;
+		this.name = "NothingToRollBack";
+	}
+};
+/** The stage was never deployed through Dokploy from this state. */
+var StageNeverDeployed = class extends Error {
+	stage;
+	constructor(stage) {
+		super(`"${stage}" has no deploy state, so there is nothing to roll back. Check the stage name, and that \`state\` in gkm.config.ts points at the store the deploys write to.`);
+		this.stage = stage;
+		this.name = "StageNeverDeployed";
+	}
+};
+/**
+* Roll a stage's app — or, `atomic`, all of them — back to its previous
+* release, holding the stage's lock as a deploy does.
+*/
+async function rollbackStage(input) {
+	const signal = input.signal ?? new AbortController().signal;
+	const log = input.log ?? (() => {});
+	const credentials = input.credentials ?? storedCredentials();
+	const sandbox = input.sandbox ?? new LocalSandbox({ root: findWorkspaceRoot(resolve(input.cwd)) });
+	return withSandbox(sandbox, async () => {
+		const { workspace } = await loadWorkspaceConfig(resolve(input.cwd), { sandbox });
+		assertDeployedStage(workspace.stages, input.stage);
+		const store = await createStateStore({
+			config: workspace.state,
+			workspaceRoot: workspace.root,
+			workspaceName: workspace.name
+		});
+		if (!await store.read(input.stage)) throw new StageNeverDeployed(input.stage);
+		const lock = await store.lock(input.stage, { operation: "rollback" });
+		try {
+			const journal = await DeployJournal.open(store, input.stage, () => createEmptyState(input.stage, "", ""));
+			const { state } = journal;
+			const releases = state.releases ?? {};
+			const restorable = Object.keys(releases).filter((app) => releases[app].previous);
+			let apps;
+			if (input.atomic) {
+				apps = restorable;
+				if (apps.length === 0) throw new RollbackNeedsApp(input.stage, restorable);
+			} else if (input.app) {
+				if (!releases[input.app]?.previous) throw new NothingToRollBack(input.stage, input.app);
+				apps = [input.app];
+			} else throw new RollbackNeedsApp(input.stage, restorable);
+			const { api } = await dokployApi(workspace, {
+				credentials,
+				signal
+			});
+			const verify = verifySettings(workspace.deploy.dokploy?.verify);
+			const rolled = [];
+			for (const app of apps) {
+				signal.throwIfAborted();
+				const { current, previous } = releases[app];
+				const applicationId = state.applications[app];
+				if (!previous || !applicationId) throw new NothingToRollBack(input.stage, app);
+				log(`⏪ ${app}: ${current.ref} → ${previous.ref}`);
+				await restoreImage(api, {
+					applicationId,
+					image: previous,
+					registryId: state.registryId,
+					verify,
+					signal
+				});
+				recordRollback(state, app, previous);
+				await journal.save();
+				log(`   ✓ ${app} is running ${previous.ref}`);
+				rolled.push({
+					app,
+					from: current,
+					to: previous
+				});
+			}
+			return rolled;
+		} finally {
+			await lock.release();
+		}
+	});
+}
+//#endregion
+export { rollback_exports as a, rollbackStage as i, RollbackNeedsApp as n, StageNeverDeployed as r, NothingToRollBack as t };
+
+//# sourceMappingURL=rollback-m4Yeym5x.mjs.map

package/dist/rollback-m4Yeym5x.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"rollback-m4Yeym5x.mjs","names":[],"sources":["../src/target/dokploy/rollback.ts"],"sourcesContent":["/**\n * `gkm deploy:rollback`: a stage's apps put back on the release before the\n * one they run, by hand — for a release that passed its checks and turned out\n * wrong anyway.\n *\n * One app by default, because an app is what usually broke: rolling the API\n * back over a site fix that shipped beside it undoes the fix too. `atomic`\n * rolls back every app that has a release to go back to, for apps that only\n * work together — an API and the site built against its newer contract.\n *\n * It restores images and nothing else. The environment an app runs with is\n * the stage's, resolved on every deploy, and migrations are forward-only: a\n * migration that the older code cannot run against is undone by a new\n * migration, never by a rollback.\n */\n\nimport { resolve } from 'node:path';\nimport { findWorkspaceRoot, loadWorkspaceConfig } from '../../config';\nimport {\n\ttype CredentialProvider,\n\tstoredCredentials,\n} from '../../deploy/credentials';\nimport { DeployJournal } from '../../deploy/journal';\nimport { createStateStore } from '../../deploy/StateStore';\nimport {\n\tcreateEmptyState,\n\ttype ReleasedImage,\n\trecordRollback,\n} from '../../deploy/state';\nimport { LocalSandbox } from '../../sandbox/local';\nimport { type Sandbox, withSandbox } from '../../sandbox/sandbox';\nimport { assertDeployedStage } from '../../workspace/stages';\nimport { dokployApi, restoreImage, verifySettings } from './engine';\n\nexport interface RollbackInput {\n\t/** The project: the directory holding `gkm.config.ts`, or one inside it. */\n\tcwd: string;\n\tstage: string;\n\t/** The app to roll back. */\n\tapp?: string;\n\t/** Every app with an earlier release, instead of one. */\n\tatomic?: boolean;\n\t/** Defaults to the environment, then the logins `gkm login` stored. */\n\tcredentials?: CredentialProvider;\n\tsignal?: AbortSignal;\n\t/** Each progress line. Defaults to none. */\n\tlog?: (line: string) => void;\n\t/** Where the config is loaded. Defaults to a `LocalSandbox` on the project. */\n\tsandbox?: Sandbox;\n}\n\n/** One app rolled back. */\nexport interface RolledBack {\n\tapp: string;\n\tfrom: ReleasedImage;\n\tto: ReleasedImage;\n}\n\n/** Neither an app nor every app was asked for. */\nexport class RollbackNeedsApp extends Error {\n\tconstructor(\n\t\treadonly stage: string,\n\t\t/** The apps that have a release to go back to. */\n\t\treadonly apps: readonly string[],\n\t) {\n\t\tsuper(\n\t\t\t`Say what to roll back: --app <name> for one app (${apps.join(', ') || 'none has an earlier release'}), ` +\n\t\t\t\t`or --atomic for every app of \"${stage}\" together.`,\n\t\t);\n\t\tthis.name = 'RollbackNeedsApp';\n\t}\n}\n\n/** An app has no release before the one it runs. */\nexport class NothingToRollBack extends Error {\n\tconstructor(\n\t\treadonly stage: string,\n\t\treadonly app: string,\n\t) {\n\t\tsuper(\n\t\t\t`\"${app}\" has no earlier release on \"${stage}\" to roll back to: it has been released once, ` +\n\t\t\t\t'or every earlier release was itself rolled back. Deploy the version you want instead.',\n\t\t);\n\t\tthis.name = 'NothingToRollBack';\n\t}\n}\n\n/** The stage was never deployed through Dokploy from this state. */\nexport class StageNeverDeployed extends Error {\n\tconstructor(readonly stage: string) {\n\t\tsuper(\n\t\t\t`\"${stage}\" has no deploy state, so there is nothing to roll back. ` +\n\t\t\t\t'Check the stage name, and that `state` in gkm.config.ts points at the store the deploys write to.',\n\t\t);\n\t\tthis.name = 'StageNeverDeployed';\n\t}\n}\n\n/**\n * Roll a stage's app — or, `atomic`, all of them — back to its previous\n * release, holding the stage's lock as a deploy does.\n */\nexport async function rollbackStage(\n\tinput: RollbackInput,\n): Promise<RolledBack[]> {\n\tconst signal = input.signal ?? new AbortController().signal;\n\tconst log = input.log ?? (() => {});\n\tconst credentials = input.credentials ?? storedCredentials();\n\tconst sandbox =\n\t\tinput.sandbox ??\n\t\tnew LocalSandbox({ root: findWorkspaceRoot(resolve(input.cwd)) });\n\n\treturn withSandbox(sandbox, async () => {\n\t\tconst { workspace } = await loadWorkspaceConfig(resolve(input.cwd), {\n\t\t\tsandbox,\n\t\t});\n\t\tassertDeployedStage(workspace.stages, input.stage);\n\n\t\tconst store = await createStateStore({\n\t\t\tconfig: workspace.state,\n\t\t\tworkspaceRoot: workspace.root,\n\t\t\tworkspaceName: workspace.name,\n\t\t});\n\t\tif (!(await store.read(input.stage))) {\n\t\t\tthrow new StageNeverDeployed(input.stage);\n\t\t}\n\n\t\tconst lock = await store.lock(input.stage, { operation: 'rollback' });\n\t\ttry {\n\t\t\tconst journal = await DeployJournal.open(store, input.stage, () =>\n\t\t\t\tcreateEmptyState(input.stage, '', ''),\n\t\t\t);\n\t\t\tconst { state } = journal;\n\t\t\tconst releases = state.releases ?? {};\n\t\t\tconst restorable = Object.keys(releases).filter(\n\t\t\t\t(app) => releases[app]!.previous,\n\t\t\t);\n\n\t\t\tlet apps: string[];\n\t\t\tif (input.atomic) {\n\t\t\t\tapps = restorable;\n\t\t\t\tif (apps.length === 0) {\n\t\t\t\t\tthrow new RollbackNeedsApp(input.stage, restorable);\n\t\t\t\t}\n\t\t\t} else if (input.app) {\n\t\t\t\tif (!releases[input.app]?.previous) {\n\t\t\t\t\tthrow new NothingToRollBack(input.stage, input.app);\n\t\t\t\t}\n\t\t\t\tapps = [input.app];\n\t\t\t} else {\n\t\t\t\tthrow new RollbackNeedsApp(input.stage, restorable);\n\t\t\t}\n\n\t\t\tconst { api } = await dokployApi(workspace, { credentials, signal });\n\t\t\tconst verify = verifySettings(workspace.deploy.dokploy?.verify);\n\t\t\tconst rolled: RolledBack[] = [];\n\n\t\t\tfor (const app of apps) {\n\t\t\t\tsignal.throwIfAborted();\n\t\t\t\tconst { current, previous } = releases[app]!;\n\t\t\t\tconst applicationId = state.applications[app];\n\t\t\t\tif (!previous || !applicationId) {\n\t\t\t\t\tthrow new NothingToRollBack(input.stage, app);\n\t\t\t\t}\n\n\t\t\t\tlog(`⏪ ${app}: ${current.ref} → ${previous.ref}`);\n\t\t\t\tawait restoreImage(api, {\n\t\t\t\t\tapplicationId,\n\t\t\t\t\timage: previous,\n\t\t\t\t\tregistryId: state.registryId,\n\t\t\t\t\tverify,\n\t\t\t\t\tsignal,\n\t\t\t\t});\n\t\t\t\trecordRollback(state, app, previous);\n\t\t\t\tawait journal.save();\n\t\t\t\tlog(`   ✓ ${app} is running ${previous.ref}`);\n\t\t\t\trolled.push({ app, from: current, to: previous });\n\t\t\t}\n\n\t\t\treturn rolled;\n\t\t} finally {\n\t\t\tawait lock.release();\n\t\t}\n\t});\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2DA,IAAa,mBAAb,cAAsC,MAAM;CAEjC;CAEA;CAHV,YACC,OAEA,MACC;EACD,MACC,oDAAoD,KAAK,KAAK,IAAI,KAAK,8BAA8B,mCACnE,MAAM,YACzC;EAPS,KAAA,QAAA;EAEA,KAAA,OAAA;EAMT,KAAK,OAAO;CACb;AACD;;AAGA,IAAa,oBAAb,cAAuC,MAAM;CAElC;CACA;CAFV,YACC,OACA,KACC;EACD,MACC,IAAI,IAAI,+BAA+B,MAAM,oIAE9C;EANS,KAAA,QAAA;EACA,KAAA,MAAA;EAMT,KAAK,OAAO;CACb;AACD;;AAGA,IAAa,qBAAb,cAAwC,MAAM;CACxB;CAArB,YAAY,OAAwB;EACnC,MACC,IAAI,MAAM,6JAEX;EAJoB,KAAA,QAAA;EAKpB,KAAK,OAAO;CACb;AACD;;;;;AAMA,eAAsB,cACrB,OACwB;CACxB,MAAM,SAAS,MAAM,UAAU,IAAI,gBAAgB,CAAC,CAAC;CACrD,MAAM,MAAM,MAAM,cAAc,CAAC;CACjC,MAAM,cAAc,MAAM,eAAe,kBAAkB;CAC3D,MAAM,UACL,MAAM,WACN,IAAI,aAAa,EAAE,MAAM,kBAAkB,QAAQ,MAAM,GAAG,CAAC,EAAE,CAAC;CAEjE,OAAO,YAAY,SAAS,YAAY;EACvC,MAAM,EAAE,cAAc,MAAM,oBAAoB,QAAQ,MAAM,GAAG,GAAG,EACnE,QACD,CAAC;EACD,oBAAoB,UAAU,QAAQ,MAAM,KAAK;EAEjD,MAAM,QAAQ,MAAM,iBAAiB;GACpC,QAAQ,UAAU;GAClB,eAAe,UAAU;GACzB,eAAe,UAAU;EAC1B,CAAC;EACD,IAAI,CAAE,MAAM,MAAM,KAAK,MAAM,KAAK,GACjC,MAAM,IAAI,mBAAmB,MAAM,KAAK;EAGzC,MAAM,OAAO,MAAM,MAAM,KAAK,MAAM,OAAO,EAAE,WAAW,WAAW,CAAC;EACpE,IAAI;GACH,MAAM,UAAU,MAAM,cAAc,KAAK,OAAO,MAAM,aACrD,iBAAiB,MAAM,OAAO,IAAI,EAAE,CACrC;GACA,MAAM,EAAE,UAAU;GAClB,MAAM,WAAW,MAAM,YAAY,CAAC;GACpC,MAAM,aAAa,OAAO,KAAK,QAAQ,CAAC,CAAC,QACvC,QAAQ,SAAS,IAAI,CAAE,QACzB;GAEA,IAAI;GACJ,IAAI,MAAM,QAAQ;IACjB,OAAO;IACP,IAAI,KAAK,WAAW,GACnB,MAAM,IAAI,iBAAiB,MAAM,OAAO,UAAU;GAEpD,OAAO,IAAI,MAAM,KAAK;IACrB,IAAI,CAAC,SAAS,MAAM,IAAI,EAAE,UACzB,MAAM,IAAI,kBAAkB,MAAM,OAAO,MAAM,GAAG;IAEnD,OAAO,CAAC,MAAM,GAAG;GAClB,OACC,MAAM,IAAI,iBAAiB,MAAM,OAAO,UAAU;GAGnD,MAAM,EAAE,QAAQ,MAAM,WAAW,WAAW;IAAE;IAAa;GAAO,CAAC;GACnE,MAAM,SAAS,eAAe,UAAU,OAAO,SAAS,MAAM;GAC9D,MAAM,SAAuB,CAAC;GAE9B,KAAK,MAAM,OAAO,MAAM;IACvB,OAAO,eAAe;IACtB,MAAM,EAAE,SAAS,aAAa,SAAS;IACvC,MAAM,gBAAgB,MAAM,aAAa;IACzC,IAAI,CAAC,YAAY,CAAC,eACjB,MAAM,IAAI,kBAAkB,MAAM,OAAO,GAAG;IAG7C,IAAI,KAAK,IAAI,IAAI,QAAQ,IAAI,KAAK,SAAS,KAAK;IAChD,MAAM,aAAa,KAAK;KACvB;KACA,OAAO;KACP,YAAY,MAAM;KAClB;KACA;IACD,CAAC;IACD,eAAe,OAAO,KAAK,QAAQ;IACnC,MAAM,QAAQ,KAAK;IACnB,IAAI,QAAQ,IAAI,cAAc,SAAS,KAAK;IAC5C,OAAO,KAAK;KAAE;KAAK,MAAM;KAAS,IAAI;IAAS,CAAC;GACjD;GAEA,OAAO;EACR,UAAU;GACT,MAAM,KAAK,QAAQ;EACpB;CACD,CAAC;AACF"}

package/dist/run-BJLIerMM.mjs

@@ -0,0 +1,133 @@
+import { join, resolve } from "node:path";
+import { homedir } from "node:os";
+import { spawn } from "node:child_process";
+//#region src/home.ts
+/**
+* Where the CLI keeps what belongs to a person rather than a project: stage
+* keys and stored provider credentials.
+*
+* `GKM_HOME` names it, so a CI job, a shared build runner or a test can give
+* every run its own instead of reaching into whoever's home directory the
+* process happens to have. Unset, it is `~/.gkm`, where it has always been.
+*/
+/** The environment variable that moves the CLI's home. */
+const GKM_HOME_ENV = "GKM_HOME";
+/** The CLI's home: `GKM_HOME` if set, else `~/.gkm`. */
+function gkmHome(env = process.env) {
+	const configured = env[GKM_HOME_ENV];
+	return configured ? resolve(configured) : join(homedir(), ".gkm");
+}
+//#endregion
+//#region src/run.ts
+/**
+* Start a program with an argument array, never a shell string.
+*
+* `gkm build`, `gkm docker` and `gkm deploy` pass values that come from the
+* workspace — image refs, tags, build args, package names — to `docker` and
+* `turbo`. Joined into a string and handed to a shell, a package named
+* `x;curl …|sh` or a tag holding `$(…)` became part of the command line, which
+* matters most where the CLI builds a repository it didn't write: a CI job for a
+* fork, a shared build runner. Here every value reaches the program as one
+* `argv` element, whatever it contains.
+*/
+/** Long enough for a cold image build; short enough that a hung one ends. */
+const DEFAULT_TIMEOUT_MS = 18e5;
+/** How long a timed-out child has to exit on SIGTERM before it is killed. */
+const KILL_GRACE_MS = 5e3;
+/** The command line as a person would read it — for messages, never to run. */
+function display(command, args) {
+	return [command, ...args].join(" ");
+}
+/** The program ran and exited unsuccessfully; its own output said why. */
+var CommandFailed = class extends Error {
+	command;
+	args;
+	exitCode;
+	signal;
+	constructor(command, args, exitCode, signal) {
+		super(`\`${display(command, args)}\` ${exitCode === null ? `was stopped by ${signal ?? "a signal"}` : `exited with code ${exitCode}`}. Its output above says why; run it by hand to see it again.`);
+		this.command = command;
+		this.args = args;
+		this.exitCode = exitCode;
+		this.signal = signal;
+		this.name = "CommandFailed";
+	}
+};
+/** The program ran past its timeout and was killed. */
+var CommandTimedOut = class extends Error {
+	command;
+	args;
+	timeoutMs;
+	constructor(command, args, timeoutMs) {
+		super(`\`${display(command, args)}\` was still running after ${Math.round(timeoutMs / 1e3)}s and was stopped. Check what it was waiting on — a registry, the Docker daemon, a prompt — and run it again.`);
+		this.command = command;
+		this.args = args;
+		this.timeoutMs = timeoutMs;
+		this.name = "CommandTimedOut";
+	}
+};
+/**
+* Run `command` with `args`, resolving when it exits 0.
+*
+* Rejects with {@link CommandFailed} on any other exit, {@link CommandTimedOut}
+* once `timeoutMs` passes (after the child is gone), and with the spawn error
+* itself when the program cannot be started at all — `ENOENT` already names it.
+*/
+async function run(command, args, options = {}) {
+	await spawnChild(command, args, options, false);
+}
+/**
+* {@link run}, resolving with what the program wrote to stdout — for a value
+* the CLI reads back, such as the digest `docker inspect` reports. stderr still
+* reaches the terminal, so a failure explains itself the same way.
+*/
+function runOutput(command, args, options = {}) {
+	return spawnChild(command, args, options, true);
+}
+function spawnChild(command, args, options, capture) {
+	const { timeoutMs = DEFAULT_TIMEOUT_MS, ...spawnOptions } = options;
+	return new Promise((resolve, reject) => {
+		const child = spawn(command, [...args], {
+			stdio: "inherit",
+			...spawnOptions,
+			...capture ? { stdio: [
+				"ignore",
+				"pipe",
+				"inherit"
+			] } : {},
+			shell: false
+		});
+		let stdout = "";
+		child.stdout?.on("data", (chunk) => {
+			stdout += chunk.toString();
+		});
+		let timedOut = false;
+		let killer;
+		const timer = setTimeout(() => {
+			timedOut = true;
+			child.kill("SIGTERM");
+			killer = setTimeout(() => child.kill("SIGKILL"), KILL_GRACE_MS);
+			killer.unref?.();
+		}, timeoutMs);
+		timer.unref?.();
+		const settle = () => {
+			clearTimeout(timer);
+			if (killer) clearTimeout(killer);
+		};
+		child.on("error", (error) => {
+			settle();
+			reject(spawnOptions.signal?.aborted ? spawnOptions.signal.reason : error);
+		});
+		child.on("close", (code, signal) => {
+			settle();
+			if (spawnOptions.signal?.aborted) reject(spawnOptions.signal.reason);
+			else if (timedOut) reject(new CommandTimedOut(command, args, timeoutMs));
+			else if (code === 0) resolve(stdout);
+			else reject(new CommandFailed(command, args, code, signal));
+		});
+	});
+}
+//#endregion
+export { runOutput as a, run as i, CommandTimedOut as n, GKM_HOME_ENV as o, DEFAULT_TIMEOUT_MS as r, gkmHome as s, CommandFailed as t };
+
+//# sourceMappingURL=run-BJLIerMM.mjs.map

package/dist/run-BJLIerMM.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-BJLIerMM.mjs","names":[],"sources":["../src/home.ts","../src/run.ts"],"sourcesContent":["/**\n * Where the CLI keeps what belongs to a person rather than a project: stage\n * keys and stored provider credentials.\n *\n * `GKM_HOME` names it, so a CI job, a shared build runner or a test can give\n * every run its own instead of reaching into whoever's home directory the\n * process happens to have. Unset, it is `~/.gkm`, where it has always been.\n */\n\nimport { homedir } from 'node:os';\nimport { join, resolve } from 'node:path';\n\n/** The environment variable that moves the CLI's home. */\nexport const GKM_HOME_ENV = 'GKM_HOME';\n\n/** The CLI's home: `GKM_HOME` if set, else `~/.gkm`. */\nexport function gkmHome(env: NodeJS.ProcessEnv = process.env): string {\n\tconst configured = env[GKM_HOME_ENV];\n\treturn configured ? resolve(configured) : join(homedir(), '.gkm');\n}\n","/**\n * Start a program with an argument array, never a shell string.\n *\n * `gkm build`, `gkm docker` and `gkm deploy` pass values that come from the\n * workspace — image refs, tags, build args, package names — to `docker` and\n * `turbo`. Joined into a string and handed to a shell, a package named\n * `x;curl …|sh` or a tag holding `$(…)` became part of the command line, which\n * matters most where the CLI builds a repository it didn't write: a CI job for a\n * fork, a shared build runner. Here every value reaches the program as one\n * `argv` element, whatever it contains.\n */\n\nimport { type SpawnOptions, spawn } from 'node:child_process';\n\n/** Long enough for a cold image build; short enough that a hung one ends. */\nexport const DEFAULT_TIMEOUT_MS = 30 * 60_000;\n\n/** How long a timed-out child has to exit on SIGTERM before it is killed. */\nconst KILL_GRACE_MS = 5_000;\n\nexport interface RunOptions {\n\tcwd?: string;\n\tenv?: NodeJS.ProcessEnv;\n\tstdio?: SpawnOptions['stdio'];\n\t/** Kill the child after this long. Defaults to {@link DEFAULT_TIMEOUT_MS}. */\n\ttimeoutMs?: number;\n\t/**\n\t * Kills the child when aborted, and rejects with the signal's reason — the\n\t * same as a stopped deploy's other calls.\n\t */\n\tsignal?: AbortSignal;\n}\n\n/** The command line as a person would read it — for messages, never to run. */\nfunction display(command: string, args: readonly string[]): string {\n\treturn [command, ...args].join(' ');\n}\n\n/** The program ran and exited unsuccessfully; its own output said why. */\nexport class CommandFailed extends Error {\n\tconstructor(\n\t\treadonly command: string,\n\t\treadonly args: readonly string[],\n\t\treadonly exitCode: number | null,\n\t\treadonly signal: NodeJS.Signals | null,\n\t) {\n\t\tsuper(\n\t\t\t`\\`${display(command, args)}\\` ${exitCode === null ? `was stopped by ${signal ?? 'a signal'}` : `exited with code ${exitCode}`}. Its output above says why; run it by hand to see it again.`,\n\t\t);\n\t\tthis.name = 'CommandFailed';\n\t}\n}\n\n/** The program ran past its timeout and was killed. */\nexport class CommandTimedOut extends Error {\n\tconstructor(\n\t\treadonly command: string,\n\t\treadonly args: readonly string[],\n\t\treadonly timeoutMs: number,\n\t) {\n\t\tsuper(\n\t\t\t`\\`${display(command, args)}\\` was still running after ${Math.round(timeoutMs / 1000)}s and was stopped. Check what it was waiting on — a registry, the Docker daemon, a prompt — and run it again.`,\n\t\t);\n\t\tthis.name = 'CommandTimedOut';\n\t}\n}\n\n/**\n * Run `command` with `args`, resolving when it exits 0.\n *\n * Rejects with {@link CommandFailed} on any other exit, {@link CommandTimedOut}\n * once `timeoutMs` passes (after the child is gone), and with the spawn error\n * itself when the program cannot be started at all — `ENOENT` already names it.\n */\nexport async function run(\n\tcommand: string,\n\targs: readonly string[],\n\toptions: RunOptions = {},\n): Promise<void> {\n\tawait spawnChild(command, args, options, false);\n}\n\n/**\n * {@link run}, resolving with what the program wrote to stdout — for a value\n * the CLI reads back, such as the digest `docker inspect` reports. stderr still\n * reaches the terminal, so a failure explains itself the same way.\n */\nexport function runOutput(\n\tcommand: string,\n\targs: readonly string[],\n\toptions: Omit<RunOptions, 'stdio'> = {},\n): Promise<string> {\n\treturn spawnChild(command, args, options, true);\n}\n\nfunction spawnChild(\n\tcommand: string,\n\targs: readonly string[],\n\toptions: RunOptions,\n\tcapture: boolean,\n): Promise<string> {\n\tconst { timeoutMs = DEFAULT_TIMEOUT_MS, ...spawnOptions } = options;\n\n\treturn new Promise<string>((resolve, reject) => {\n\t\tconst child = spawn(command, [...args], {\n\t\t\tstdio: 'inherit',\n\t\t\t...spawnOptions,\n\t\t\t...(capture ? { stdio: ['ignore', 'pipe', 'inherit'] } : {}),\n\t\t\tshell: false,\n\t\t});\n\n\t\tlet stdout = '';\n\t\tchild.stdout?.on('data', (chunk: Buffer) => {\n\t\t\tstdout += chunk.toString();\n\t\t});\n\n\t\tlet timedOut = false;\n\t\tlet killer: NodeJS.Timeout | undefined;\n\t\tconst timer = setTimeout(() => {\n\t\t\ttimedOut = true;\n\t\t\tchild.kill('SIGTERM');\n\t\t\t// A child that ignores SIGTERM would hold the deploy open forever.\n\t\t\tkiller = setTimeout(() => child.kill('SIGKILL'), KILL_GRACE_MS);\n\t\t\tkiller.unref?.();\n\t\t}, timeoutMs);\n\t\ttimer.unref?.();\n\n\t\tconst settle = () => {\n\t\t\tclearTimeout(timer);\n\t\t\tif (killer) clearTimeout(killer);\n\t\t};\n\n\t\tchild.on('error', (error) => {\n\t\t\tsettle();\n\t\t\t// Node reports an abort as its own `AbortError`; the caller asked\n\t\t\t// with a reason, and that is what it should get back.\n\t\t\treject(spawnOptions.signal?.aborted ? spawnOptions.signal.reason : error);\n\t\t});\n\n\t\tchild.on('close', (code: number | null, signal: NodeJS.Signals | null) => {\n\t\t\tsettle();\n\t\t\tif (spawnOptions.signal?.aborted) reject(spawnOptions.signal.reason);\n\t\t\telse if (timedOut) reject(new CommandTimedOut(command, args, timeoutMs));\n\t\t\telse if (code === 0) resolve(stdout);\n\t\t\telse reject(new CommandFailed(command, args, code, signal));\n\t\t});\n\t});\n}\n"],"mappings":";;;;;;;;;;;;;AAaA,MAAa,eAAe;;AAG5B,SAAgB,QAAQ,MAAyB,QAAQ,KAAa;CACrE,MAAM,aAAa,IAAI;CACvB,OAAO,aAAa,QAAQ,UAAU,IAAI,KAAK,QAAQ,GAAG,MAAM;AACjE;;;;;;;;;;;;;;;ACJA,MAAa,qBAAqB;;AAGlC,MAAM,gBAAgB;;AAgBtB,SAAS,QAAQ,SAAiB,MAAiC;CAClE,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,KAAK,GAAG;AACnC;;AAGA,IAAa,gBAAb,cAAmC,MAAM;CAE9B;CACA;CACA;CACA;CAJV,YACC,SACA,MACA,UACA,QACC;EACD,MACC,KAAK,QAAQ,SAAS,IAAI,EAAE,KAAK,aAAa,OAAO,kBAAkB,UAAU,eAAe,oBAAoB,WAAW,6DAChI;EAPS,KAAA,UAAA;EACA,KAAA,OAAA;EACA,KAAA,WAAA;EACA,KAAA,SAAA;EAKT,KAAK,OAAO;CACb;AACD;;AAGA,IAAa,kBAAb,cAAqC,MAAM;CAEhC;CACA;CACA;CAHV,YACC,SACA,MACA,WACC;EACD,MACC,KAAK,QAAQ,SAAS,IAAI,EAAE,6BAA6B,KAAK,MAAM,YAAY,GAAI,EAAE,8GACvF;EANS,KAAA,UAAA;EACA,KAAA,OAAA;EACA,KAAA,YAAA;EAKT,KAAK,OAAO;CACb;AACD;;;;;;;;AASA,eAAsB,IACrB,SACA,MACA,UAAsB,CAAC,GACP;CAChB,MAAM,WAAW,SAAS,MAAM,SAAS,KAAK;AAC/C;;;;;;AAOA,SAAgB,UACf,SACA,MACA,UAAqC,CAAC,GACpB;CAClB,OAAO,WAAW,SAAS,MAAM,SAAS,IAAI;AAC/C;AAEA,SAAS,WACR,SACA,MACA,SACA,SACkB;CAClB,MAAM,EAAE,YAAY,oBAAoB,GAAG,iBAAiB;CAE5D,OAAO,IAAI,SAAiB,SAAS,WAAW;EAC/C,MAAM,QAAQ,MAAM,SAAS,CAAC,GAAG,IAAI,GAAG;GACvC,OAAO;GACP,GAAG;GACH,GAAI,UAAU,EAAE,OAAO;IAAC;IAAU;IAAQ;GAAS,EAAE,IAAI,CAAC;GAC1D,OAAO;EACR,CAAC;EAED,IAAI,SAAS;EACb,MAAM,QAAQ,GAAG,SAAS,UAAkB;GAC3C,UAAU,MAAM,SAAS;EAC1B,CAAC;EAED,IAAI,WAAW;EACf,IAAI;EACJ,MAAM,QAAQ,iBAAiB;GAC9B,WAAW;GACX,MAAM,KAAK,SAAS;GAEpB,SAAS,iBAAiB,MAAM,KAAK,SAAS,GAAG,aAAa;GAC9D,OAAO,QAAQ;EAChB,GAAG,SAAS;EACZ,MAAM,QAAQ;EAEd,MAAM,eAAe;GACpB,aAAa,KAAK;GAClB,IAAI,QAAQ,aAAa,MAAM;EAChC;EAEA,MAAM,GAAG,UAAU,UAAU;GAC5B,OAAO;GAGP,OAAO,aAAa,QAAQ,UAAU,aAAa,OAAO,SAAS,KAAK;EACzE,CAAC;EAED,MAAM,GAAG,UAAU,MAAqB,WAAkC;GACzE,OAAO;GACP,IAAI,aAAa,QAAQ,SAAS,OAAO,aAAa,OAAO,MAAM;QAC9D,IAAI,UAAU,OAAO,IAAI,gBAAgB,SAAS,MAAM,SAAS,CAAC;QAClE,IAAI,SAAS,GAAG,QAAQ,MAAM;QAC9B,OAAO,IAAI,cAAc,SAAS,MAAM,MAAM,MAAM,CAAC;EAC3D,CAAC;CACF,CAAC;AACF"}

package/dist/run-fVZ-rLnc.cjs

@@ -0,0 +1,174 @@
+let node_path = require("node:path");
+let node_os = require("node:os");
+let node_child_process = require("node:child_process");
+//#region src/home.ts
+/**
+* Where the CLI keeps what belongs to a person rather than a project: stage
+* keys and stored provider credentials.
+*
+* `GKM_HOME` names it, so a CI job, a shared build runner or a test can give
+* every run its own instead of reaching into whoever's home directory the
+* process happens to have. Unset, it is `~/.gkm`, where it has always been.
+*/
+/** The environment variable that moves the CLI's home. */
+const GKM_HOME_ENV = "GKM_HOME";
+/** The CLI's home: `GKM_HOME` if set, else `~/.gkm`. */
+function gkmHome(env = process.env) {
+	const configured = env[GKM_HOME_ENV];
+	return configured ? (0, node_path.resolve)(configured) : (0, node_path.join)((0, node_os.homedir)(), ".gkm");
+}
+//#endregion
+//#region src/run.ts
+/**
+* Start a program with an argument array, never a shell string.
+*
+* `gkm build`, `gkm docker` and `gkm deploy` pass values that come from the
+* workspace — image refs, tags, build args, package names — to `docker` and
+* `turbo`. Joined into a string and handed to a shell, a package named
+* `x;curl …|sh` or a tag holding `$(…)` became part of the command line, which
+* matters most where the CLI builds a repository it didn't write: a CI job for a
+* fork, a shared build runner. Here every value reaches the program as one
+* `argv` element, whatever it contains.
+*/
+/** Long enough for a cold image build; short enough that a hung one ends. */
+const DEFAULT_TIMEOUT_MS = 18e5;
+/** How long a timed-out child has to exit on SIGTERM before it is killed. */
+const KILL_GRACE_MS = 5e3;
+/** The command line as a person would read it — for messages, never to run. */
+function display(command, args) {
+	return [command, ...args].join(" ");
+}
+/** The program ran and exited unsuccessfully; its own output said why. */
+var CommandFailed = class extends Error {
+	command;
+	args;
+	exitCode;
+	signal;
+	constructor(command, args, exitCode, signal) {
+		super(`\`${display(command, args)}\` ${exitCode === null ? `was stopped by ${signal ?? "a signal"}` : `exited with code ${exitCode}`}. Its output above says why; run it by hand to see it again.`);
+		this.command = command;
+		this.args = args;
+		this.exitCode = exitCode;
+		this.signal = signal;
+		this.name = "CommandFailed";
+	}
+};
+/** The program ran past its timeout and was killed. */
+var CommandTimedOut = class extends Error {
+	command;
+	args;
+	timeoutMs;
+	constructor(command, args, timeoutMs) {
+		super(`\`${display(command, args)}\` was still running after ${Math.round(timeoutMs / 1e3)}s and was stopped. Check what it was waiting on — a registry, the Docker daemon, a prompt — and run it again.`);
+		this.command = command;
+		this.args = args;
+		this.timeoutMs = timeoutMs;
+		this.name = "CommandTimedOut";
+	}
+};
+/**
+* Run `command` with `args`, resolving when it exits 0.
+*
+* Rejects with {@link CommandFailed} on any other exit, {@link CommandTimedOut}
+* once `timeoutMs` passes (after the child is gone), and with the spawn error
+* itself when the program cannot be started at all — `ENOENT` already names it.
+*/
+async function run(command, args, options = {}) {
+	await spawnChild(command, args, options, false);
+}
+/**
+* {@link run}, resolving with what the program wrote to stdout — for a value
+* the CLI reads back, such as the digest `docker inspect` reports. stderr still
+* reaches the terminal, so a failure explains itself the same way.
+*/
+function runOutput(command, args, options = {}) {
+	return spawnChild(command, args, options, true);
+}
+function spawnChild(command, args, options, capture) {
+	const { timeoutMs = DEFAULT_TIMEOUT_MS, ...spawnOptions } = options;
+	return new Promise((resolve, reject) => {
+		const child = (0, node_child_process.spawn)(command, [...args], {
+			stdio: "inherit",
+			...spawnOptions,
+			...capture ? { stdio: [
+				"ignore",
+				"pipe",
+				"inherit"
+			] } : {},
+			shell: false
+		});
+		let stdout = "";
+		child.stdout?.on("data", (chunk) => {
+			stdout += chunk.toString();
+		});
+		let timedOut = false;
+		let killer;
+		const timer = setTimeout(() => {
+			timedOut = true;
+			child.kill("SIGTERM");
+			killer = setTimeout(() => child.kill("SIGKILL"), KILL_GRACE_MS);
+			killer.unref?.();
+		}, timeoutMs);
+		timer.unref?.();
+		const settle = () => {
+			clearTimeout(timer);
+			if (killer) clearTimeout(killer);
+		};
+		child.on("error", (error) => {
+			settle();
+			reject(spawnOptions.signal?.aborted ? spawnOptions.signal.reason : error);
+		});
+		child.on("close", (code, signal) => {
+			settle();
+			if (spawnOptions.signal?.aborted) reject(spawnOptions.signal.reason);
+			else if (timedOut) reject(new CommandTimedOut(command, args, timeoutMs));
+			else if (code === 0) resolve(stdout);
+			else reject(new CommandFailed(command, args, code, signal));
+		});
+	});
+}
+//#endregion
+Object.defineProperty(exports, "CommandFailed", {
+	enumerable: true,
+	get: function() {
+		return CommandFailed;
+	}
+});
+Object.defineProperty(exports, "CommandTimedOut", {
+	enumerable: true,
+	get: function() {
+		return CommandTimedOut;
+	}
+});
+Object.defineProperty(exports, "DEFAULT_TIMEOUT_MS", {
+	enumerable: true,
+	get: function() {
+		return DEFAULT_TIMEOUT_MS;
+	}
+});
+Object.defineProperty(exports, "GKM_HOME_ENV", {
+	enumerable: true,
+	get: function() {
+		return GKM_HOME_ENV;
+	}
+});
+Object.defineProperty(exports, "gkmHome", {
+	enumerable: true,
+	get: function() {
+		return gkmHome;
+	}
+});
+Object.defineProperty(exports, "run", {
+	enumerable: true,
+	get: function() {
+		return run;
+	}
+});
+Object.defineProperty(exports, "runOutput", {
+	enumerable: true,
+	get: function() {
+		return runOutput;
+	}
+});
+
+//# sourceMappingURL=run-fVZ-rLnc.cjs.map