@geekmidas/cli 10.0.0-alpha.68 → 10.0.0-alpha.69

package/dist/{engine-llWnMZH5.mjs → engine-62Kl70Pj.mjs}

@@ -1,12 +1,13 @@
 import { i as LocalSandbox, t as MissingCredential } from "./credentials-pAtB70k3.mjs";
-import { a as discriminatedUnion, d as string, l as object, n as array, o as literal, s as looseObject } from "./schemas-Cfhtpdo0.mjs";
-import { c as runWorker, d as output, r as discover } from "./discover-BFoJWKGD.mjs";
+import { a as discriminatedUnion, c as looseObject, f as string, n as array, s as literal, u as object } from "./schemas-D-xeKJDD.mjs";
+import { c as runWorker, d as output, r as discover } from "./discover-Buwf1z4P.mjs";
 import { i as activeSandbox } from "./sandbox-Dm247NGx.mjs";
 import { t as appKey } from "./derive-B4vDpzgP.mjs";
-import { g as stripPublicPrefix, h as getPublicEnvPrefix, s as getAppBuildOrder } from "./workspace-Be6uBhlF.mjs";
-import { A as assertExternalServices, C as isMainFrontendApp, D as ExternalServicesNotConfigured, F as reportDevServices, Gt as ownershipMarker, Ht as imageRef, I as encryptSecrets, Kt as projectName, M as externalServices, N as manifestServiceDeclarations, O as STORAGE_KEY_PAIR, Ut as isOwnedBy, V as constructGlobs, Vt as imageName, Wt as markerOf, Xt as toEmbeddableSecrets, Y as applyPostgres, _ as deployDocker, _t as providerOf, a as recordRelease, c as setBackupState, ct as resourceName, d as setGeneratedSecret, f as setPostgresBackupId, gt as eventsBackendFor, ht as cacheBackendFor, i as isDnsVerified, j as devServicesUsed, l as setDnsRecord, m as withGeneratedSecrets, n as getBackupState, o as recordRollback, p as DeployJournal, qt as initStageSecrets, r as getGeneratedSecret, s as setApplicationId, t as createEmptyState, u as setDnsVerification, vt as storageBackendFor, w as resolveHost, zt as applicationName } from "./state-Bn5JDMFT.mjs";
-import { f as StateStoreBusy, m as StateVersionConflict, o as DokployApi, s as DokployApiError, t as sniffAllApps, v as eventError } from "./sniffer-BdFeLSmA.mjs";
+import { g as stripPublicPrefix, h as getPublicEnvPrefix, s as getAppBuildOrder } from "./workspace-B2UK_rVP.mjs";
+import { A as assertExternalServices, C as isMainFrontendApp, D as ExternalServicesNotConfigured, F as reportDevServices, Gt as isOwnedBy, Jt as projectName, Kt as markerOf, M as externalServices, N as manifestServiceDeclarations, O as STORAGE_KEY_PAIR, Qt as toEmbeddableSecrets, R as encryptSecrets, U as constructGlobs, Ut as imageName, Vt as applicationName, Wt as imageRef, Yt as initStageSecrets, Z as applyPostgres, _ as deployDocker, _t as cacheBackendFor, a as recordRelease, bt as storageBackendFor, c as setBackupState, d as setGeneratedSecret, f as setPostgresBackupId, i as isDnsVerified, j as devServicesUsed, l as setDnsRecord, m as withGeneratedSecrets, n as getBackupState, o as recordRollback, p as DeployJournal, qt as ownershipMarker, r as getGeneratedSecret, s as setApplicationId, t as createEmptyState, u as setDnsVerification, ut as resourceName, vt as eventsBackendFor, w as resolveHost, yt as providerOf } from "./state-DClnPZt5.mjs";
+import { f as StateStoreBusy, m as StateVersionConflict, o as DokployApi, s as DokployApiError, t as sniffAllApps, v as eventError } from "./sniffer-DMqi2b1q.mjs";
 import { o as migrationFiles } from "./provider-D7rQzzzf.mjs";
+import { n as assertStageCredentials } from "./credentialSchemas-BmYxnEz_.mjs";
 import { join } from "node:path";
 import { cacheTable, cloudName, cookieDomain, dependentsOf, externalApiUrl, migrationTargets, mobileOrigins, provideKey, provisionOrder, schemeBase } from "@geekmidas/manifest";
 import { createHash, randomBytes } from "node:crypto";
@@ -2094,6 +2095,13 @@ async function validateDokploy(phase) {
 		...workspace.deploy?.domains?.[stage] ? { domain: workspace.deploy.domains[stage] } : {}
 	});
 	reportDevServices(phase, devServicesUsed(services));
+	await assertStageCredentials({
+		root: workspace.root,
+		patterns: constructGlobs(workspace),
+		manifest: phase.manifest,
+		stage,
+		supplied: stored?.custom ?? {}
+	});
 	return {
 		...run,
 		allowDevServices: phase.allowDevServices,
@@ -3095,4 +3103,4 @@ const MOBILE_SKIP_REASON = "deploys via its framework toolchain";
 //#endregion
 export { RegistryNotConfigured as _, dokployResult as a, releaseDokploy as c, validateDokploy as d, verifyDokploy as f, RegistryAmbiguous as g, HealthCheckTimedOut as h, dokployApi as i, restoreImage as l, DeployMigrationsFailed as m, FrontendDeployFailed as n, planDokploy as o, verifySettings as p, MissingEnvVars as r, provisionDokploy as s, BackendDeployFailed as t, rollbackDokploy as u, RegistryNotFound as v, ProjectNotOwned as y };
 
-//# sourceMappingURL=engine-llWnMZH5.mjs.map
+//# sourceMappingURL=engine-62Kl70Pj.mjs.map