@geekmidas/cli 10.0.0-alpha.68 → 10.0.0-alpha.70

package/dist/{engine-llWnMZH5.mjs → engine-Xbv8NNdX.mjs}

@@ -1,12 +1,13 @@
 import { i as LocalSandbox, t as MissingCredential } from "./credentials-pAtB70k3.mjs";
-import { a as discriminatedUnion, d as string, l as object, n as array, o as literal, s as looseObject } from "./schemas-Cfhtpdo0.mjs";
-import { c as runWorker, d as output, r as discover } from "./discover-BFoJWKGD.mjs";
+import { a as discriminatedUnion, c as looseObject, f as string, n as array, s as literal, u as object } from "./schemas-D-xeKJDD.mjs";
+import { c as runWorker, d as output, r as discover } from "./discover-Buwf1z4P.mjs";
 import { i as activeSandbox } from "./sandbox-Dm247NGx.mjs";
 import { t as appKey } from "./derive-B4vDpzgP.mjs";
-import { g as stripPublicPrefix, h as getPublicEnvPrefix, s as getAppBuildOrder } from "./workspace-Be6uBhlF.mjs";
-import { A as assertExternalServices, C as isMainFrontendApp, D as ExternalServicesNotConfigured, F as reportDevServices, Gt as ownershipMarker, Ht as imageRef, I as encryptSecrets, Kt as projectName, M as externalServices, N as manifestServiceDeclarations, O as STORAGE_KEY_PAIR, Ut as isOwnedBy, V as constructGlobs, Vt as imageName, Wt as markerOf, Xt as toEmbeddableSecrets, Y as applyPostgres, _ as deployDocker, _t as providerOf, a as recordRelease, c as setBackupState, ct as resourceName, d as setGeneratedSecret, f as setPostgresBackupId, gt as eventsBackendFor, ht as cacheBackendFor, i as isDnsVerified, j as devServicesUsed, l as setDnsRecord, m as withGeneratedSecrets, n as getBackupState, o as recordRollback, p as DeployJournal, qt as initStageSecrets, r as getGeneratedSecret, s as setApplicationId, t as createEmptyState, u as setDnsVerification, vt as storageBackendFor, w as resolveHost, zt as applicationName } from "./state-Bn5JDMFT.mjs";
-import { f as StateStoreBusy, m as StateVersionConflict, o as DokployApi, s as DokployApiError, t as sniffAllApps, v as eventError } from "./sniffer-BdFeLSmA.mjs";
+import { g as stripPublicPrefix, h as getPublicEnvPrefix, s as getAppBuildOrder } from "./workspace-C7NqCsQF.mjs";
+import { $ as applyPostgres, A as STORAGE_KEY_PAIR, B as encryptSecrets, C as isMainFrontendApp, E as otelEnv, F as manifestServiceDeclarations, G as constructGlobs, Gt as imageName, Jt as markerOf, Kt as imageRef, L as reportDevServices, M as assertExternalServices, N as devServicesUsed, P as externalServices, St as storageBackendFor, Ut as applicationName, Xt as projectName, Yt as ownershipMarker, Zt as initStageSecrets, _ as deployDocker, a as recordRelease, bt as eventsBackendFor, c as setBackupState, d as setGeneratedSecret, en as toEmbeddableSecrets, f as setPostgresBackupId, ft as resourceName, i as isDnsVerified, k as ExternalServicesNotConfigured, l as setDnsRecord, m as withGeneratedSecrets, n as getBackupState, o as recordRollback, p as DeployJournal, qt as isOwnedBy, r as getGeneratedSecret, s as setApplicationId, t as createEmptyState, u as setDnsVerification, w as resolveHost, xt as providerOf, yt as cacheBackendFor } from "./state-527OmqvN.mjs";
+import { f as StateStoreBusy, m as StateVersionConflict, o as DokployApi, s as DokployApiError, t as sniffAllApps, v as eventError } from "./sniffer-vAXsU_4G.mjs";
 import { o as migrationFiles } from "./provider-D7rQzzzf.mjs";
+import { n as assertStageCredentials } from "./credentialSchemas-BmYxnEz_.mjs";
 import { join } from "node:path";
 import { cacheTable, cloudName, cookieDomain, dependentsOf, externalApiUrl, migrationTargets, mobileOrigins, provideKey, provisionOrder, schemeBase } from "@geekmidas/manifest";
 import { createHash, randomBytes } from "node:crypto";
@@ -2094,6 +2095,13 @@ async function validateDokploy(phase) {
 		...workspace.deploy?.domains?.[stage] ? { domain: workspace.deploy.domains[stage] } : {}
 	});
 	reportDevServices(phase, devServicesUsed(services));
+	await assertStageCredentials({
+		root: workspace.root,
+		patterns: constructGlobs(workspace),
+		manifest: phase.manifest,
+		stage,
+		supplied: stored?.custom ?? {}
+	});
 	return {
 		...run,
 		allowDevServices: phase.allowDevServices,
@@ -2506,7 +2514,8 @@ async function releaseDokploy(run) {
 				if (!valid) throw new MissingEnvVars(appName, missing, stage);
 				const withDeclared = {
 					...resolved,
-					...declaredEnv
+					...declaredEnv,
+					...otelEnv(stageSecrets?.custom ?? {}, appName)
 				};
 				const envVars = Object.entries(withDeclared).map(([key, value]) => `${key}=${value}`);
 				if (Object.keys(withDeclared).length > 0) logger.log(`      Resolved ${Object.keys(withDeclared).length} env vars: ${Object.keys(withDeclared).sort().join(", ")}`);
@@ -3095,4 +3104,4 @@ const MOBILE_SKIP_REASON = "deploys via its framework toolchain";
 //#endregion
 export { RegistryNotConfigured as _, dokployResult as a, releaseDokploy as c, validateDokploy as d, verifyDokploy as f, RegistryAmbiguous as g, HealthCheckTimedOut as h, dokployApi as i, restoreImage as l, DeployMigrationsFailed as m, FrontendDeployFailed as n, planDokploy as o, verifySettings as p, MissingEnvVars as r, provisionDokploy as s, BackendDeployFailed as t, rollbackDokploy as u, RegistryNotFound as v, ProjectNotOwned as y };
 
-//# sourceMappingURL=engine-llWnMZH5.mjs.map
+//# sourceMappingURL=engine-Xbv8NNdX.mjs.map