@geekmidas/cli 10.0.0-alpha.72 → 10.0.0-alpha.73

package/dist/index.cjs

@@ -3,21 +3,22 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_rolldown_runtime = require("./rolldown-runtime-C0BPl7ul.cjs");
 const require_run = require("./run-fVZ-rLnc.cjs");
 const require_credentials = require("./credentials-BVs7mrtw.cjs");
-const require_discover = require("./discover-B4VjaFJk.cjs");
+const require_discover = require("./discover-D1It5r_h.cjs");
 const require_derive = require("./derive-DAbo49sm.cjs");
 const require_workspace = require("./workspace-vdrcRI-m.cjs");
 const require_config = require("./config.cjs");
-const require_state = require("./state-CCuTJNRH.cjs");
-const require_OpenApiTsGenerator = require("./OpenApiTsGenerator-BlP53kf2.cjs");
-const require_sniffer = require("./sniffer-DpHpFZBD.cjs");
+const require_state = require("./state-DMjFPOhf.cjs");
+const require_EndpointGenerator = require("./EndpointGenerator-CP6sBvQV.cjs");
+const require_sniffer = require("./sniffer-C-T7dSMN.cjs");
 const require_openapi = require("./openapi.cjs");
+const require_SubscriberGenerator = require("./SubscriberGenerator-Bixm28fN.cjs");
 const require_appPorts = require("./appPorts-Cu79hJF6.cjs");
-const require_ready = require("./ready-B-7LayMF.cjs");
+const require_ready = require("./ready-BIuMw6wH.cjs");
 const require_emit = require("./emit-Dmc1nvdS.cjs");
-const require_deploy = require("./deploy-CZE0m6jd.cjs");
-const require_compose = require("./compose-B-MME-4C.cjs");
-const require_credentialSchemas = require("./credentialSchemas-BcNL1N5R.cjs");
-const require_LocalStateStore = require("./LocalStateStore-DTylG4T4.cjs");
+const require_deploy = require("./deploy-BitZLdnY.cjs");
+const require_compose = require("./compose-CNnw8meq.cjs");
+const require_credentialSchemas = require("./credentialSchemas-DCR4Wd1W.cjs");
+const require_LocalStateStore = require("./LocalStateStore-BhrlQIXD.cjs");
 const require_utils = require("./utils-D2Nk1Nv2.cjs");
 let node_path = require("node:path");
 let commander = require("commander");
@@ -48,12 +49,10 @@ let http2 = require("http2");
 let stream = require("stream");
 let crypto = require("crypto");
 crypto = require_rolldown_runtime.__toESM(crypto, 1);
-let _geekmidas_constructs_crons = require("@geekmidas/constructs/crons");
 let _geekmidas_constructs_functions = require("@geekmidas/constructs/functions");
-let _geekmidas_constructs_queue = require("@geekmidas/constructs/queue");
 let _geekmidas_constructs_topic = require("@geekmidas/constructs/topic");
 //#region package.json
-var version = "10.0.0-alpha.72";
+var version = "10.0.0-alpha.73";
 //#endregion
 //#region src/prompt.ts
 /**
@@ -136,7 +135,7 @@ const logger$8 = console;
 * Validate Dokploy token by making a test API call
 */
 async function validateDokployToken(endpoint, token) {
-	const { DokployApi } = await Promise.resolve().then(() => require("./sniffer-DpHpFZBD.cjs")).then((n) => n.dokploy_api_exports);
+	const { DokployApi } = await Promise.resolve().then(() => require("./sniffer-C-T7dSMN.cjs")).then((n) => n.dokploy_api_exports);
 	return new DokployApi({
 		baseUrl: endpoint,
 		token
@@ -2042,9 +2041,9 @@ async function workspaceDevCommand(configured, options) {
 	for (const { id, port } of fakes) logger$5.log(`🎭 ${id} fake: http://localhost:${port}`);
 	logger$5.log(options.migrate || options.seed ? "🗄️  Migrating the databases" : "🗄️  Checking for pending migrations");
 	if (options.migrate || options.seed) {
-		const { prepareDevDatabases } = await Promise.resolve().then(() => require("./migrate-qKeGYq21.cjs"));
+		const { prepareDevDatabases } = await Promise.resolve().then(() => require("./migrate-kA_j1TPK.cjs"));
 		await prepareDevDatabases(workspace, reconciled.env, { seed: !!options.seed });
-	} else await Promise.resolve().then(() => require("./migrate-qKeGYq21.cjs")).then(({ reportPendingMigrations }) => reportPendingMigrations(workspace, reconciled.env)).catch((error) => {
+	} else await Promise.resolve().then(() => require("./migrate-kA_j1TPK.cjs")).then(({ reportPendingMigrations }) => reportPendingMigrations(workspace, reconciled.env)).catch((error) => {
 		logger$5.log(`⚠️  Could not check for pending migrations: ${error instanceof Error ? error.message : String(error)}`);
 	});
 	const appUrls = {};
@@ -2603,244 +2602,6 @@ var DevServer = class {
 	}
 };
 //#endregion
-//#region src/generators/CronGenerator.ts
-var CronGenerator = class extends require_discover.ConstructGenerator {
-	async build(context, constructs, outputDir, options) {
-		const target = options?.target ?? "aws";
-		const logger = console;
-		const cronInfos = [];
-		if (target === "server") {
-			await this.generateServerCronsFile(outputDir, constructs);
-			logger.log(`Generated server crons file with ${constructs.length} crons`);
-			return cronInfos;
-		}
-		if (constructs.length === 0) return cronInfos;
-		const cronsDir = (0, node_path.join)(outputDir, "crons");
-		await (0, node_fs_promises.mkdir)(cronsDir, { recursive: true });
-		for (const { key, construct, path } of constructs) {
-			const handlerFile = await this.generateCronHandler(cronsDir, path.relative, key, context, construct.owner);
-			cronInfos.push({
-				name: key,
-				handler: (0, node_path.relative)(options?.root ?? process.cwd(), handlerFile).replace(/\.ts$/, ".handler"),
-				schedule: construct.schedule || "rate(1 hour)",
-				timeout: construct.timeout,
-				memorySize: construct.memorySize,
-				environment: await construct.getEnvironment({ markOptional: context.markOptional }),
-				dependencies: construct.constructs
-			});
-			logger.log(`Generated cron handler: ${key}`);
-		}
-		return cronInfos;
-	}
-	isConstruct(value) {
-		return _geekmidas_constructs_crons.Cron.isCron(value);
-	}
-	/**
-	* The crons file a server entry imports.
-	*
-	* Shaped after `generateServerSubscribersFile`: one module, every cron, a
-	* `setupCrons` the generated entry calls beside `setupSubscribers`.
-	*
-	* It picks its scheduler from what the process can reach. With a Postgres it
-	* uses pg-boss, whose schedules live in the database — so a deployment
-	* running four replicas fires each job once, which is the thing a timer in
-	* every process gets wrong and does not report. With no database it falls
-	* back to timers and says plainly that it is doing so.
-	*/
-	async generateServerCronsFile(outputDir, crons) {
-		await (0, node_fs_promises.mkdir)(outputDir, { recursive: true });
-		const cronsPath = (0, node_path.join)(outputDir, "crons.ts");
-		if (crons.length === 0) {
-			await (0, node_fs_promises.writeFile)(cronsPath, `/**
- * Generated cron setup — this app declares none.
- */
-import type { EnvironmentParser } from '@geekmidas/envkit';
-import type { Logger } from '@geekmidas/logger';
-
-export async function setupCrons(
-  _envParser: EnvironmentParser<any>,
-  _logger: Logger,
-): Promise<void> {}
-
-export async function stopCrons(): Promise<void> {}
-`);
-			return cronsPath;
-		}
-		const importsByFile = /* @__PURE__ */ new Map();
-		for (const { path, key } of crons) {
-			const importPath = (0, node_path.relative)((0, node_path.dirname)(cronsPath), path.relative).replace(/\.ts$/, ".js");
-			if (!importsByFile.has(importPath)) importsByFile.set(importPath, []);
-			importsByFile.get(importPath)?.push(key);
-		}
-		const content = `/**
- * Generated cron setup.
- *
- * Schedules every cron this app declares, in the process that serves it.
- *
- * The schedule lives in Postgres, through pg-boss, in the database the worker
- * named with \`.database(db)\`. That is what makes running several replicas
- * safe: each job fires once, where a timer in every process fires it once per
- * replica and reports nothing.
- *
- * No connection string appears here. The construct that owns the database is
- * the only thing that knows its key, and it is resolved through service
- * discovery like any other dependency.
- */
-import type { EnvironmentParser } from '@geekmidas/envkit';
-import type { Logger } from '@geekmidas/logger';
-import { runCron, scheduleInProcess, toCronExpression } from '@geekmidas/constructs/crons';
-import { ServiceDiscovery } from '@geekmidas/services';
-${Array.from(importsByFile.entries()).map(([importPath, exports]) => `import { ${exports.join(", ")} } from '${importPath}';`).join("\n")}
-
-const crons = [
-${crons.map(({ key }) => `  { name: '${key}', cron: ${key} }`).join(",\n")}
-];
-
-type Stoppable = { stop: () => Promise<void> | void };
-const running: Stoppable[] = [];
-
-export async function setupCrons(
-  envParser: EnvironmentParser<any>,
-  logger: Logger,
-): Promise<void> {
-  if (crons.length === 0) {
-    return;
-  }
-
-  const serviceDiscovery = ServiceDiscovery.getInstance(envParser);
-
-  // Resolved once per cron rather than per firing: registering services on
-  // every tick would reconnect a database every minute.
-  const prepared = [];
-  for (const { name, cron } of crons) {
-    try {
-      const schedule = toCronExpression(cron.schedule);
-      const services = cron.services.length > 0
-        ? await serviceDiscovery.register(cron.services)
-        : {};
-
-      prepared.push({ name, cron, schedule, services });
-    } catch (error) {
-      // An unrepresentable schedule is a build-time mistake, and failing the
-      // process for it would take the HTTP server down with it.
-      logger.error({ err: error, cron: name }, 'Cron has no runnable schedule, skipping');
-    }
-  }
-
-  const run = async (entry: (typeof prepared)[number]) => {
-    try {
-      // The cron's own function, the way its Lambda would run it — services,
-      // the worker's database as \`db\`, its events. It used to call a
-      // \`handler\` a Cron does not have, so every firing logged a failure.
-      await runCron(entry.cron, serviceDiscovery);
-    } catch (error) {
-      logger.error({ err: error, cron: entry.name }, 'Cron failed');
-    }
-  };
-
-  // The app's one pg-boss: the events broker's, as the broker's role, in the
-  // broker's schema. A server fires its own crons, and a process scheduling in
-  // memory fires each job once per replica — so the schedule lives in
-  // Postgres. It used to be a second pg-boss on the worker's database, as the
-  // runtime role, which can neither create a schema nor use the broker's.
-  const { url, devPid } = envParser
-    .create((get) => ({
-      url: get('EVENT_PUBLISHER_CONNECTION_STRING').string().optional(),
-      // Set by \`gkm dev\` on the server it starts, and by nothing deployed.
-      devPid: get('GKM_DEV_PID').string().optional(),
-    }))
-    .parse();
-
-  if (!url?.startsWith('pgboss://')) {
-    // \`gkm dev\` on a target whose crons are infrastructure once deployed —
-    // EventBridge rules on AWS — has no broker to keep a schedule in. It is one
-    // process, so a timer fires each job once, which is all pg-boss is for
-    // here. Only there: a deployed server firing by timer fires once per
-    // replica, so outside dev this stays the error below.
-    if (devPid) {
-      for (const entry of prepared) {
-        running.push(scheduleInProcess(entry.schedule, () => run(entry)));
-        logger.info({ cron: entry.name, schedule: entry.schedule }, 'Cron scheduled in this process');
-      }
-      return;
-    }
-
-    logger.error(
-      { crons: prepared.map(({ name }) => name) },
-      'These crons have nowhere to keep their schedule. On a server they are ' +
-        'scheduled through the pg-boss events broker ' +
-        '(EVENT_PUBLISHER_CONNECTION_STRING), and ' +
-        (url ? 'the broker configured is not pg-boss.' : 'none is configured.'),
-    );
-    return;
-  }
-
-  // Through the registered pg-boss driver, which the entry registers for a
-  // server whose broker is pg-boss. Naming \`@geekmidas/events/pgboss\` here
-  // made every bundle with a cron resolve pg-boss, whatever its broker.
-  const { EventConnectionFactory } = await import('@geekmidas/events');
-  const connection = (await EventConnectionFactory.fromConnectionString(
-    url,
-  )) as import('@geekmidas/events').EventConnection & { instance?: any };
-  const boss = connection.instance!;
-
-  // What this app declares now. Anything else under the prefix belonged to a
-  // cron since renamed or deleted, and would keep firing at a handler that has
-  // gone.
-  //
-  // The prefix is \`cron.\` rather than \`cron:\`: pg-boss accepts
-  // alphanumerics, underscores, hyphens, periods and slashes in a queue name,
-  // and rejects a colon outright.
-  const declared = new Set(prepared.map(({ name }) => \`cron.\${name}\`));
-  for (const existing of await boss.getSchedules()) {
-    if (existing.name.startsWith('cron.') && !declared.has(existing.name)) {
-      await boss.unschedule(existing.name);
-      logger.info({ cron: existing.name }, 'Removed a schedule nothing declares');
-    }
-  }
-
-  for (const entry of prepared) {
-    const queue = \`cron.\${entry.name}\`;
-    await boss.createQueue(queue);
-    // UTC, so this agrees with the schedule a deploy target would have made.
-    await boss.schedule(queue, entry.schedule, undefined, { tz: 'UTC' });
-    await boss.work(queue, () => run(entry));
-
-    logger.info({ cron: entry.name, schedule: entry.schedule }, 'Cron scheduled');
-  }
-
-  running.push({ stop: () => connection.close() });
-  logger.info({ count: prepared.length }, 'Crons scheduled');
-}
-
-export async function stopCrons(): Promise<void> {
-  await Promise.all(running.map((r) => r.stop()));
-  running.length = 0;
-}
-`;
-		await (0, node_fs_promises.writeFile)(cronsPath, content);
-		return cronsPath;
-	}
-	async generateCronHandler(outputDir, sourceFile, exportName, context, owner) {
-		const handlerFileName = `${exportName}.ts`;
-		const handlerPath = (0, node_path.join)(outputDir, handlerFileName);
-		const importPath = (0, node_path.relative)((0, node_path.dirname)(handlerPath), sourceFile).replace(/\.ts$/, ".js");
-		const runtime = require_OpenApiTsGenerator.runtimeFor(context, (0, node_path.dirname)(handlerPath), owner);
-		const content = `import { AWSScheduledFunction } from '@geekmidas/constructs/aws';
-import { ${exportName} } from '${importPath}';
-${runtime.imports}
-${context.storageDrivers?.imports ?? ""}
-${runtime.bindings}
-${context.storageDrivers?.setup ? `\n// The handler registers the drivers its target needs.\n${context.storageDrivers.setup}\n` : ""}
-const adapter = new AWSScheduledFunction(envParser, ${exportName});
-
-export const handler = adapter.handler;
-`;
-		await (0, node_fs_promises.writeFile)(handlerPath, content);
-		return handlerPath;
-	}
-};
-//#endregion
 //#region src/generators/FunctionGenerator.ts
 var FunctionGenerator = class extends require_discover.ConstructGenerator {
 	isConstruct(value) {
@@ -2871,7 +2632,7 @@ var FunctionGenerator = class extends require_discover.ConstructGenerator {
 		const handlerFileName = `${exportName}.ts`;
 		const handlerPath = (0, node_path.join)(outputDir, handlerFileName);
 		const importPath = (0, node_path.relative)((0, node_path.dirname)(handlerPath), sourceFile).replace(/\.ts$/, ".js");
-		const runtime = require_OpenApiTsGenerator.runtimeFor(context, (0, node_path.dirname)(handlerPath), owner);
+		const runtime = require_EndpointGenerator.runtimeFor(context, (0, node_path.dirname)(handlerPath), owner);
 		const content = `import { AWSLambdaFunction } from '@geekmidas/constructs/aws';
 import { ${exportName} } from '${importPath}';
 ${runtime.imports}
@@ -2887,178 +2648,6 @@ export const handler = adapter.handler;
 	}
 };
 //#endregion
-//#region src/generators/QueueGenerator.ts
-/**
-* Generates the runtime for queue consumers (`worker.queue(…)`).
-*
-* - **server** (`gkm dev`): a single `queues.ts` exposing `setupQueues()` that
-*   polls each queue in-process, alongside the Hono server, through the queue's
-*   own connection string — pg-boss by default, SQS on the AWS emulator.
-* - **aws-lambda**: one handler file per queue wrapping `AWSLambdaQueue`, backed
-*   by an SQS event-source mapping.
-*/
-var QueueGenerator = class extends require_discover.ConstructGenerator {
-	isConstruct(value) {
-		return _geekmidas_constructs_queue.Queue.isQueue(value);
-	}
-	async build(context, constructs, outputDir, options) {
-		const target = options?.target ?? "aws";
-		const logger = console;
-		const queueInfos = [];
-		if (target === "server") {
-			await this.generateServerQueuesFile(outputDir, constructs);
-			logger.log(`Generated server queues file with ${constructs.length} queues (polling mode)`);
-			return queueInfos;
-		}
-		if (constructs.length === 0) return queueInfos;
-		const queuesDir = (0, node_path.join)(outputDir, "queues");
-		await (0, node_fs_promises.mkdir)(queuesDir, { recursive: true });
-		for (const { key, construct, path } of constructs) {
-			const handlerFile = await this.generateQueueHandler(queuesDir, path.relative, key, context, construct.owner);
-			queueInfos.push({
-				name: construct.name,
-				handler: (0, node_path.relative)(options?.root ?? process.cwd(), handlerFile).replace(/\.ts$/, ".handler"),
-				batchSize: construct.batchSize,
-				fifo: construct.fifo,
-				timeout: construct.timeout,
-				environment: await construct.getEnvironment({ markOptional: context.markOptional }),
-				dependencies: construct.constructs
-			});
-			logger.log(`Generated queue handler: ${key}`);
-		}
-		return queueInfos;
-	}
-	async generateQueueHandler(outputDir, sourceFile, exportName, context, owner) {
-		const handlerPath = (0, node_path.join)(outputDir, `${exportName}.ts`);
-		const importPath = (0, node_path.relative)((0, node_path.dirname)(handlerPath), sourceFile).replace(/\.ts$/, ".js");
-		const runtime = require_OpenApiTsGenerator.runtimeFor(context, (0, node_path.dirname)(handlerPath), owner);
-		const content = `import { AWSLambdaQueue } from '@geekmidas/constructs/aws';
-import { ${exportName} } from '${importPath}';
-${runtime.imports}
-${context.storageDrivers?.imports ?? ""}
-${runtime.bindings}
-${context.storageDrivers?.setup ? `\n// The handler registers the drivers its target needs.\n${context.storageDrivers.setup}\n` : ""}
-const adapter = new AWSLambdaQueue(envParser, ${exportName});
-
-export const handler = adapter.handler;
-`;
-		await (0, node_fs_promises.writeFile)(handlerPath, content);
-		return handlerPath;
-	}
-	async generateServerQueuesFile(outputDir, queues) {
-		await (0, node_fs_promises.mkdir)(outputDir, { recursive: true });
-		const queuesPath = (0, node_path.join)(outputDir, "queues.ts");
-		if (queues.length === 0) {
-			await (0, node_fs_promises.writeFile)(queuesPath, `/**
- * Generated queues setup — this app declares none.
- */
-import type { EnvironmentParser } from '@geekmidas/envkit';
-import type { Logger } from '@geekmidas/logger';
-
-export async function setupQueues(
-  _envParser: EnvironmentParser<any>,
-  _logger: Logger,
-): Promise<void> {}
-`);
-			return queuesPath;
-		}
-		const importsByFile = /* @__PURE__ */ new Map();
-		for (const { path, key } of queues) {
-			const importPath = (0, node_path.relative)((0, node_path.dirname)(queuesPath), path.relative).replace(/\.ts$/, ".js");
-			if (!importsByFile.has(importPath)) importsByFile.set(importPath, []);
-			importsByFile.get(importPath)?.push(key);
-		}
-		const content = `/**
- * Generated queue consumers setup.
- *
- * Each queue's one consumer polls its own queue, through the queue's own
- * connection string — the one its producers publish on. SQS cannot push, so
- * this is a poller on every transport: pg-boss locally by default, the SQS
- * queue on the AWS emulator.
- *
- * Deployed on Lambda, a queue's consumer is an SQS event source instead.
- */
-import type { EnvironmentParser } from '@geekmidas/envkit';
-import type { Logger } from '@geekmidas/logger';
-import { EventConnectionFactory, Subscriber } from '@geekmidas/events';
-import type { EventConnection } from '@geekmidas/events';
-import { ServiceDiscovery } from '@geekmidas/services';
-${Array.from(importsByFile.entries()).map(([importPath, exports]) => `import { ${exports.join(", ")} } from '${importPath}';`).join("\n")}
-
-const queues = [
-${queues.map(({ key, construct }) => `  { queue: ${key}, connectionKey: '${(0, _geekmidas_manifest.provideKey)(construct.id, "publisherConnectionString")}' },`).join("\n")}
-];
-
-export async function setupQueues(
-  envParser: EnvironmentParser<any>,
-  logger: Logger,
-): Promise<void> {
-  const serviceDiscovery = ServiceDiscovery.getInstance(envParser);
-  const connections = new Map<string, EventConnection>();
-
-  for (const { queue, connectionKey } of queues) {
-    const connectionString = process.env[connectionKey];
-    if (!connectionString) {
-      logger.error({ queue: queue.name, connectionKey }, 'No connection string for this queue');
-      continue;
-    }
-
-    try {
-      let connection = connections.get(connectionString);
-      if (!connection) {
-        connection = await EventConnectionFactory.fromConnectionString(connectionString);
-        connections.set(connectionString, connection);
-      }
-      const eventSubscriber = await Subscriber.fromConnection(connection);
-      const services = queue.services.length > 0
-        ? await serviceDiscovery.register(queue.services)
-        : {};
-      // The queue's database — the worker's, or its own — handed over as \`db\`.
-      const db = queue.databaseService
-        ? (await serviceDiscovery.register([queue.databaseService]))[
-            queue.databaseService.serviceName
-          ]
-        : undefined;
-
-      // A queue's messages carry one type — its own name.
-      await eventSubscriber.subscribe([queue.name], async (message) => {
-        try {
-          const validation = await queue.messageSchema['~standard'].validate(message.payload);
-          if (validation.issues) {
-            logger.error({ issues: validation.issues, queue: queue.name }, 'Queue message failed validation');
-            return;
-          }
-
-          await queue.handler({
-            messages: [validation.value],
-            services: services,
-            logger: queue.logger,
-            db,
-          } as any);
-        } catch (error) {
-          logger.error({ err: error, queue: queue.name }, 'Failed to process queue message');
-          // Rethrown so the transport keeps the message for a retry.
-          throw error;
-        }
-      });
-      logger.info({ queue: queue.name }, 'Queue consumer started polling');
-    } catch (error) {
-      logger.error({ err: error, queue: queue.name }, 'Failed to set up queue consumer');
-    }
-  }
-
-  const shutdown = () => {
-    for (const connection of connections.values()) void connection.close();
-  };
-  process.once('SIGTERM', shutdown);
-  process.once('SIGINT', shutdown);
-}
-`;
-		await (0, node_fs_promises.writeFile)(queuesPath, content);
-		return queuesPath;
-	}
-};
-//#endregion
 //#region src/generators/TopicGenerator.ts
 /**
 * Discovers topics (`new Topic(…)`) into `manifest.topics`. A topic is a
@@ -3390,7 +2979,8 @@ async function buildOneApp(input) {
 		markOptional: options.markOptional ?? false,
 		skipBundle: options.skipBundle ?? false,
 		stage: options.stage,
-		workspaceName: workspace.name
+		workspaceName: workspace.name,
+		workspace
 	});
 }
 /**
@@ -3432,11 +3022,13 @@ async function buildApp(input) {
 	const { config, workspaceRoot, appRoot, target, enableOpenApi, cacheBackend, eventsBackend, production, telescope, databaseApi, hooks, bustCache = false } = input;
 	const constructGlobs = config.constructs;
 	const constructSources = {};
+	const background = {};
 	const declared = constructGlobs ? await require_discover.discover({
 		patterns: constructGlobs,
 		cwd: appRoot,
 		bustCache,
-		sources: constructSources
+		sources: constructSources,
+		background
 	}) : {};
 	const selfServing = selfServingSurface({
 		declared,
@@ -3450,7 +3042,7 @@ async function buildApp(input) {
 		if (production?.bundle && !input.skipBundle) {
 			const outputDir = (0, node_path.join)(appRoot, ".gkm", "server");
 			const entryPoint = await writeSurfaceServer(outputDir, production);
-			const { bundleServer } = await Promise.resolve().then(() => require("./bundler-CEaR6Dpb.cjs"));
+			const { bundleServer } = await Promise.resolve().then(() => require("./bundler-C35h0WKt.cjs"));
 			await bundleServer({
 				entryPoint,
 				outputDir: (0, node_path.join)(outputDir, "dist"),
@@ -3486,17 +3078,17 @@ async function buildApp(input) {
 		}),
 		eventsBackends,
 		markOptional: input.markOptional ?? false,
-		...production && { telemetry: require_OpenApiTsGenerator.telemetryFor({
+		...production && { telemetry: require_EndpointGenerator.telemetryFor({
 			appRoot,
 			surfaceId: derived.surface?.id,
 			workspaceName: input.workspaceName
 		}) }
 	};
-	const endpointGenerator = new require_OpenApiTsGenerator.EndpointGenerator();
+	const endpointGenerator = new require_EndpointGenerator.EndpointGenerator();
 	const functionGenerator = new FunctionGenerator();
-	const cronGenerator = new CronGenerator();
-	const subscriberGenerator = new require_ready.SubscriberGenerator();
-	const queueGenerator = new QueueGenerator();
+	const cronGenerator = new require_state.CronGenerator();
+	const subscriberGenerator = new require_SubscriberGenerator.SubscriberGenerator();
+	const queueGenerator = new require_state.QueueGenerator();
 	const topicGenerator = new TopicGenerator();
 	const code = constructGlobs;
 	const [loadedEndpoints, allFunctions, allCrons, allSubscribers, allQueues, allTopics] = await Promise.all([
@@ -3531,6 +3123,19 @@ async function buildApp(input) {
 		if (left.length > 0) logger$4.log(`Serving ${derived.surface.id} only: leaving out ${left.join(", ")} — they run in a Worker's image`);
 	}
 	const result = await buildForTarget(target, buildContext, appRoot, workspaceRoot, endpointGenerator, functionGenerator, cronGenerator, subscriberGenerator, queueGenerator, topicGenerator, allEndpoints, allFunctions, allCrons, allSubscribers, allQueues, allTopics, enableOpenApi, input.skipBundle ?? false, input.stage);
+	if (target === "server" && production?.enabled && input.workspace) {
+		const appName = Object.entries(input.workspace.apps).find(([, app]) => (0, node_path.resolve)(input.workspace.root, app.path) === (0, node_path.resolve)(appRoot))?.[0];
+		await buildWorkers({
+			context: buildContext,
+			workers: require_state.workerUnits(input.workspace, declared, background).filter((unit) => unit.app === appName),
+			serverDir: (0, node_path.join)(appRoot, ".gkm", "server"),
+			crons: allCrons,
+			queues: allQueues,
+			subscribers: allSubscribers,
+			bundle: Boolean(production.bundle && !input.skipBundle),
+			...input.stage ? { stage: input.stage } : {}
+		});
+	}
 	await require_openapi.generateOpenApi(allEndpoints.map(({ construct }) => construct), {
 		openapi: config.openapi,
 		root: workspaceRoot
@@ -3540,6 +3145,46 @@ async function buildApp(input) {
 		...buildContext.databaseApi ? { databaseApi: buildContext.databaseApi.path } : {}
 	};
 }
+/**
+* Write each worker's entry — and, for an image, bundle it — from the
+* runnables built from that worker, and nothing built from another.
+*/
+async function buildWorkers(input) {
+	const generator = new require_state.WorkerGenerator();
+	for (const worker of input.workers) {
+		const owned = (list) => list.filter(({ construct }) => construct.owner === worker.id);
+		const crons = owned(input.crons);
+		const queues = owned(input.queues);
+		const subscribers = owned(input.subscribers);
+		const entryPoint = await generator.build({
+			context: input.context,
+			workerId: worker.id,
+			outputDir: require_state.workerEntryDir(input.serverDir, worker.id),
+			crons,
+			queues,
+			subscribers
+		});
+		logger$4.log(`Generated worker ${worker.id}: ${crons.length} crons, ${queues.length} queues, ${subscribers.length} subscribers`);
+		if (!input.bundle) continue;
+		const { bundleServer } = await Promise.resolve().then(() => require("./bundler-C35h0WKt.cjs"));
+		const outfile = require_state.workerBundleName(worker.id);
+		await bundleServer({
+			entryPoint,
+			outputDir: (0, node_path.join)(input.serverDir, "dist"),
+			outfile,
+			minify: input.context.production?.minify ?? false,
+			sourcemap: false,
+			external: input.context.production?.external ?? [],
+			...input.stage ? { stage: input.stage } : {},
+			constructs: [
+				...crons,
+				...queues,
+				...subscribers
+			].map((c) => c.construct)
+		});
+		logger$4.log(`✅ Bundle complete: .gkm/server/dist/${outfile}`);
+	}
+}
 async function buildForTarget(target, context, appRoot, workspaceRoot, endpointGenerator, functionGenerator, cronGenerator, subscriberGenerator, queueGenerator, topicGenerator, endpoints, functions, crons, subscribers, queues, topics, enableOpenApi, skipBundle, stage) {
 	const outputDir = (0, node_path.join)(appRoot, ".gkm", target);
 	await Promise.all([...SUPERSEDED_OUTPUT.map((dir) => (0, node_path.join)(appRoot, ".gkm", dir)), ...appRoot === workspaceRoot ? [] : [(0, node_path.join)(appRoot, ".gkm", "manifest")]].map((dir) => (0, node_fs_promises.rm)(dir, {
@@ -3591,7 +3236,7 @@ async function buildForTarget(target, context, appRoot, workspaceRoot, endpointG
 		let masterKey;
 		if (context.production?.bundle && !skipBundle) {
 			logger$4.log(`\n📦 Bundling production server...`);
-			const { bundleServer } = await Promise.resolve().then(() => require("./bundler-CEaR6Dpb.cjs"));
+			const { bundleServer } = await Promise.resolve().then(() => require("./bundler-C35h0WKt.cjs"));
 			const allConstructs = [
 				...endpoints.map((e) => e.construct),
 				...functions.map((f) => f.construct),
@@ -5290,25 +4935,25 @@ function loadPackageJson() {
 * Run: pnpm --filter @geekmidas/cli sync-versions
 */
 const GEEKMIDAS_VERSIONS = {
-	"@geekmidas/audit": "~10.0.0-alpha.72",
-	"@geekmidas/auth": "~10.0.0-alpha.72",
-	"@geekmidas/cache": "~10.0.0-alpha.72",
-	"@geekmidas/client": "~10.0.0-alpha.72",
-	"@geekmidas/cloud": "~10.0.0-alpha.72",
-	"@geekmidas/constructs": "~10.0.0-alpha.72",
-	"@geekmidas/db": "~10.0.0-alpha.72",
-	"@geekmidas/emailkit": "~10.0.0-alpha.72",
-	"@geekmidas/envkit": "~10.0.0-alpha.72",
-	"@geekmidas/errors": "~10.0.0-alpha.72",
-	"@geekmidas/events": "~10.0.0-alpha.72",
-	"@geekmidas/logger": "~10.0.0-alpha.72",
-	"@geekmidas/manifest": "~10.0.0-alpha.72",
-	"@geekmidas/rate-limit": "~10.0.0-alpha.72",
-	"@geekmidas/schema": "~10.0.0-alpha.72",
-	"@geekmidas/services": "~10.0.0-alpha.72",
-	"@geekmidas/storage": "~10.0.0-alpha.72",
-	"@geekmidas/telescope": "~10.0.0-alpha.72",
-	"@geekmidas/testkit": "~10.0.0-alpha.72",
+	"@geekmidas/audit": "~10.0.0-alpha.73",
+	"@geekmidas/auth": "~10.0.0-alpha.73",
+	"@geekmidas/cache": "~10.0.0-alpha.73",
+	"@geekmidas/client": "~10.0.0-alpha.73",
+	"@geekmidas/cloud": "~10.0.0-alpha.73",
+	"@geekmidas/constructs": "~10.0.0-alpha.73",
+	"@geekmidas/db": "~10.0.0-alpha.73",
+	"@geekmidas/emailkit": "~10.0.0-alpha.73",
+	"@geekmidas/envkit": "~10.0.0-alpha.73",
+	"@geekmidas/errors": "~10.0.0-alpha.73",
+	"@geekmidas/events": "~10.0.0-alpha.73",
+	"@geekmidas/logger": "~10.0.0-alpha.73",
+	"@geekmidas/manifest": "~10.0.0-alpha.73",
+	"@geekmidas/rate-limit": "~10.0.0-alpha.73",
+	"@geekmidas/schema": "~10.0.0-alpha.73",
+	"@geekmidas/services": "~10.0.0-alpha.73",
+	"@geekmidas/storage": "~10.0.0-alpha.73",
+	"@geekmidas/telescope": "~10.0.0-alpha.73",
+	"@geekmidas/testkit": "~10.0.0-alpha.73",
 	"@geekmidas/cli": `~${loadPackageJson().version}`
 };
 //#endregion
@@ -11099,8 +10744,8 @@ function testDatabases(reconciled) {
 * starts without the reference data the app needs.
 */
 async function migrateTestStage(workspace, env) {
-	const { migrateAndSeed } = await Promise.resolve().then(() => require("./migrate-qKeGYq21.cjs"));
-	const { discover } = await Promise.resolve().then(() => require("./discover-B4VjaFJk.cjs")).then((n) => n.discover_exports);
+	const { migrateAndSeed } = await Promise.resolve().then(() => require("./migrate-kA_j1TPK.cjs"));
+	const { discover } = await Promise.resolve().then(() => require("./discover-D1It5r_h.cjs")).then((n) => n.discover_exports);
 	const sources = {};
 	const manifest = await discover({
 		patterns: require_state.constructGlobs(workspace),
@@ -11530,7 +11175,7 @@ program.command("migrate").description("Apply each database construct's migratio
 	try {
 		const globalOptions = program.opts();
 		if (globalOptions.cwd) process.chdir(globalOptions.cwd);
-		const { migrateCommand } = await Promise.resolve().then(() => require("./migrate-qKeGYq21.cjs"));
+		const { migrateCommand } = await Promise.resolve().then(() => require("./migrate-kA_j1TPK.cjs"));
 		await migrateCommand({
 			...options,
 			...construct ? { construct } : {}
@@ -11544,7 +11189,7 @@ program.command("seed").description("Migrate, then run each database construct's
 	try {
 		const globalOptions = program.opts();
 		if (globalOptions.cwd) process.chdir(globalOptions.cwd);
-		const { seedCommand } = await Promise.resolve().then(() => require("./migrate-qKeGYq21.cjs"));
+		const { seedCommand } = await Promise.resolve().then(() => require("./migrate-kA_j1TPK.cjs"));
 		await seedCommand({
 			...options,
 			...construct ? { construct } : {}
@@ -11558,7 +11203,7 @@ program.command("migration").description("Write a construct's next migration: an
 	try {
 		const globalOptions = program.opts();
 		if (globalOptions.cwd) process.chdir(globalOptions.cwd);
-		const { migrationCommand } = await Promise.resolve().then(() => require("./migrate-qKeGYq21.cjs"));
+		const { migrationCommand } = await Promise.resolve().then(() => require("./migrate-kA_j1TPK.cjs"));
 		await migrationCommand({
 			construct,
 			...name ? { name } : {}
@@ -11652,7 +11297,7 @@ program.command("secrets:add").description("Build the keys a stage must be given
 	try {
 		const globalOptions = program.opts();
 		if (globalOptions.cwd) process.chdir(globalOptions.cwd);
-		const { secretsAddCommand } = await Promise.resolve().then(() => require("./add-DeC2Kyyv.cjs"));
+		const { secretsAddCommand } = await Promise.resolve().then(() => require("./add-C1ojB2Yy.cjs"));
 		await secretsAddCommand(options);
 	} catch (error) {
 		console.error(formatError(error));
@@ -11663,7 +11308,7 @@ program.command("encryption:rotate").description("Add a new current key to an En
 	try {
 		const globalOptions = program.opts();
 		if (globalOptions.cwd) process.chdir(globalOptions.cwd);
-		const { encryptionRotateCommand } = await Promise.resolve().then(() => require("./encryption-D05sNwED.cjs"));
+		const { encryptionRotateCommand } = await Promise.resolve().then(() => require("./encryption-CDGRdcMr.cjs"));
 		await encryptionRotateCommand(construct, options);
 	} catch (error) {
 		console.error(formatError(error));
@@ -11674,7 +11319,7 @@ program.command("encryption:retire").description("Remove an old key from an Encr
 	try {
 		const globalOptions = program.opts();
 		if (globalOptions.cwd) process.chdir(globalOptions.cwd);
-		const { encryptionRetireCommand } = await Promise.resolve().then(() => require("./encryption-D05sNwED.cjs"));
+		const { encryptionRetireCommand } = await Promise.resolve().then(() => require("./encryption-CDGRdcMr.cjs"));
 		await encryptionRetireCommand(construct, key, options);
 	} catch (error) {
 		console.error(formatError(error));
@@ -11717,7 +11362,7 @@ program.command("secrets:reconcile").description("Backfill missing custom secret
 		if (globalOptions.cwd) process.chdir(globalOptions.cwd);
 		const { loadWorkspaceConfig } = await Promise.resolve().then(() => require("./config.cjs"));
 		const { reconcileMissingSecrets } = await Promise.resolve().then(() => require("./reconcile-CuCQBa5-.cjs"));
-		const { secretsStoreFor } = await Promise.resolve().then(() => require("./state-CCuTJNRH.cjs")).then((n) => n.store_exports);
+		const { secretsStoreFor } = await Promise.resolve().then(() => require("./state-DMjFPOhf.cjs")).then((n) => n.store_exports);
 		const { workspace } = await loadWorkspaceConfig();
 		const stage = options.stage ?? workspace.stages.local;
 		const store = await secretsStoreFor(workspace, stage);
@@ -11726,7 +11371,7 @@ program.command("secrets:reconcile").description("Backfill missing custom secret
 			console.error(`No secrets found for stage "${stage}". Run "gkm secrets:init --stage ${stage}" first.`);
 			process.exit(1);
 		}
-		const { derivedContainers } = await Promise.resolve().then(() => require("./state-CCuTJNRH.cjs")).then((n) => n.workspace_exports);
+		const { derivedContainers } = await Promise.resolve().then(() => require("./state-DMjFPOhf.cjs")).then((n) => n.workspace_exports);
 		const result = reconcileMissingSecrets(secrets, workspace, await derivedContainers(workspace, stage));
 		if (!result) {
 			console.log(`\n✓ Secrets for stage "${stage}" are up-to-date`);
@@ -11741,7 +11386,7 @@ program.command("secrets:reconcile").description("Backfill missing custom secret
 	}
 });
 program.command("deploy").description("Deploy a stage through its target").option("--target <name>", "Deploy target: dokploy, compose, sst, or one named in deploy.targets (default: deploy.default)").option("--provider <provider>", "[DEPRECATED] Use --target instead").requiredOption("--stage <stage>", "Deployment stage (e.g., production, staging)").option("--tag <tag>", "Image tag (default: stage-timestamp; compose: the commit). Compose pulls a given tag").option("--skip-push", "Skip pushing image to registry").option("--skip-build", "Skip build step (use existing build)").option("--json", "Write events as JSON lines instead of progress; never prompts").option("--dry-run", "Show what would be created or reused; change, build and push nothing").option("--atomic", "If the release fails, roll back every app it released, not only the failed ones").option("--allow-dev-services <list>", "Server targets: run MinIO and/or Mailpit (minio,mailpit) for mail and buckets the stage's secrets don't configure. Not production-grade").action(async (options) => {
-	const { deployCli } = await Promise.resolve().then(() => require("./cli-MMgBrHx7.cjs"));
+	const { deployCli } = await Promise.resolve().then(() => require("./cli-DJVL2sL9.cjs"));
 	const globalOptions = program.opts();
 	const code = await deployCli({
 		cwd: (0, node_path.resolve)(globalOptions.cwd ?? process.cwd()),
@@ -11758,8 +11403,8 @@ program.command("deploy").description("Deploy a stage through its target").optio
 });
 program.command("deploy:rollback").description("Put a stage's app back on its previous release (Dokploy): one app with --app, every app with --atomic").requiredOption("--stage <stage>", "A deployed stage").option("--app <app>", "The app to roll back").option("--atomic", "Roll back every app that has an earlier release").action(async (options) => {
 	try {
-		const { rollbackStage } = await Promise.resolve().then(() => require("./rollback-DmcU-efZ.cjs")).then((n) => n.rollback_exports);
-		const { terminalCredentials } = await Promise.resolve().then(() => require("./terminal-CFO3xWoF.cjs"));
+		const { rollbackStage } = await Promise.resolve().then(() => require("./rollback-QGwomD64.cjs")).then((n) => n.rollback_exports);
+		const { terminalCredentials } = await Promise.resolve().then(() => require("./terminal-BL5E0xbR.cjs"));
 		const globalOptions = program.opts();
 		await rollbackStage({
 			cwd: (0, node_path.resolve)(globalOptions.cwd ?? process.cwd()),
@@ -11794,7 +11439,7 @@ program.command("deploy:github").description("Let GitHub Actions deploy a stage:
 	try {
 		const globalOptions = program.opts();
 		if (globalOptions.cwd) process.chdir(globalOptions.cwd);
-		const { deployGithubCommand } = await Promise.resolve().then(() => require("./github-BchWoiVx.cjs"));
+		const { deployGithubCommand } = await Promise.resolve().then(() => require("./github-C6qF8kHg.cjs"));
 		await deployGithubCommand(options);
 	} catch (error) {
 		console.error(formatError(error));