@geekmidas/cli 10.0.0-alpha.80 → 10.0.0-alpha.82

package/dist/index.cjs

@@ -7,20 +7,20 @@ const require_discover = require("./discover-D1It5r_h.cjs");
 const require_derive = require("./derive-DAbo49sm.cjs");
 const require_workspace = require("./workspace-Bp8FEkF-.cjs");
 const require_config = require("./config.cjs");
-const require_seeds = require("./seeds-ZljwYV_p.cjs");
-const require_EndpointGenerator = require("./EndpointGenerator-CP6sBvQV.cjs");
+const require_seeds = require("./seeds-BLzrSwEr.cjs");
+const require_EndpointGenerator = require("./EndpointGenerator-cKlnllIu.cjs");
 const require_openapi = require("./openapi.cjs");
-const require_SubscriberGenerator = require("./SubscriberGenerator-CajwOa5W.cjs");
+const require_SubscriberGenerator = require("./SubscriberGenerator-CYriX5BV.cjs");
 const require_appPorts = require("./appPorts-Cu79hJF6.cjs");
-const require_drivers = require("./drivers-BdvtCKc7.cjs");
+const require_drivers = require("./drivers-CJx76mcb.cjs");
 const require_emit = require("./emit-Dmc1nvdS.cjs");
 const require_sniffer = require("./sniffer-BjG-1mlD.cjs");
-const require_deploy = require("./deploy-Ppnh8MHS.cjs");
-const require_compose = require("./compose-Bn4OJONR.cjs");
+const require_deploy = require("./deploy-CXP2fXvK.cjs");
+const require_compose = require("./compose-qnDyPJNp.cjs");
 const require_credentialSchemas = require("./credentialSchemas-DCR4Wd1W.cjs");
 const require_LocalStateStore = require("./LocalStateStore-Bocb8dmZ.cjs");
 const require_utils = require("./utils-D2Nk1Nv2.cjs");
-const require_ready = require("./ready-BB9xS4S9.cjs");
+const require_ready = require("./ready-4kx2pAhm.cjs");
 let node_path = require("node:path");
 let commander = require("commander");
 let node_process = require("node:process");
@@ -53,7 +53,7 @@ crypto = require_rolldown_runtime.__toESM(crypto, 1);
 let _geekmidas_constructs_functions = require("@geekmidas/constructs/functions");
 let _geekmidas_constructs_topic = require("@geekmidas/constructs/topic");
 //#region package.json
-var version = "10.0.0-alpha.80";
+var version = "10.0.0-alpha.82";
 //#endregion
 //#region src/prompt.ts
 /**
@@ -240,6 +240,91 @@ function maskToken(token) {
 	return `${token.slice(0, 4)}...${token.slice(-4)}`;
 }
 //#endregion
+//#region src/reconcile/serviceLogins.ts
+/**
+* Where to sign in to each local service, and as whom — what `gkm dev`
+* prints with its other addresses and `gkm dev:credentials` prints alone.
+*
+* Only the services a person opens or connects a client to: Postgres, the
+* MinIO console, Mailpit's inbox, Redis and its HTTP proxy, RabbitMQ's
+* console, the AWS emulator — and OpenObserve, where `gkm compose` runs it
+* for the local stage.
+*/
+/** Each running service's address and login, in a stable order. */
+function serviceLogins(options) {
+	const { containers, ports, credentials } = options;
+	const has = (container, key) => containers.includes(container) && ports[key] !== void 0;
+	const logins = [];
+	if (has("postgres", "postgres")) {
+		const { user, password } = credentials.postgres;
+		logins.push({
+			service: "postgres",
+			label: "Postgres",
+			url: `postgres://${user}:${encodeURIComponent(password)}@localhost:${ports.postgres}/${require_seeds.CLUSTER_DATABASE}`,
+			user,
+			password
+		});
+	}
+	if (has("minio", "minio-console")) logins.push({
+		service: "minio",
+		label: "MinIO console",
+		url: `http://localhost:${ports["minio-console"]}`,
+		...credentials.minio,
+		...ports.minio !== void 0 ? { note: `S3 API on http://localhost:${ports.minio}` } : {}
+	});
+	if (has("mailpit", "mailpit-web")) logins.push({
+		service: "mailpit",
+		label: "Mailpit inbox",
+		url: `http://localhost:${ports["mailpit-web"]}`,
+		note: "no login"
+	});
+	if (has("redis", "redis")) logins.push({
+		service: "redis",
+		label: "Redis",
+		url: `redis://:${encodeURIComponent(credentials.redis.password)}@localhost:${ports.redis}`,
+		password: credentials.redis.password
+	});
+	if (has("redis-http", "redis-http")) logins.push({
+		service: "redis-http",
+		label: "Cache (HTTP)",
+		url: `http://localhost:${ports["redis-http"]}`,
+		password: credentials.cacheToken,
+		note: "the password is its bearer token"
+	});
+	if (has("rabbitmq", "rabbitmq-management")) logins.push({
+		service: "rabbitmq",
+		label: "RabbitMQ console",
+		url: `http://localhost:${ports["rabbitmq-management"]}`,
+		...credentials.rabbitmq
+	});
+	if (has("localstack", "localstack")) logins.push({
+		service: "localstack",
+		label: "AWS emulator",
+		url: `http://localhost:${ports.localstack}`,
+		user: credentials.emulator.accessKeyId,
+		password: credentials.emulator.secretAccessKey,
+		note: "access key id / secret access key"
+	});
+	if (options.logs) logins.push({
+		service: "openobserve",
+		label: "OpenObserve",
+		url: options.logs.url,
+		user: credentials.logs.email,
+		password: credentials.logs.password,
+		note: `when running: ${options.logs.via}`
+	});
+	return logins;
+}
+/** The lines `gkm dev` and `gkm dev:credentials` print, one per service. */
+function describeLogins(logins) {
+	const width = Math.max(0, ...logins.map(({ label }) => label.length));
+	return logins.flatMap((login) => {
+		const head = `   ${login.label.padEnd(width)}  ${login.url}`;
+		const detail = [login.user !== void 0 && login.password !== void 0 ? `user ${login.user}, password ${login.password}` : login.password !== void 0 ? `password ${login.password}` : void 0, login.note].filter(Boolean).join(" — ");
+		return detail ? [head, `   ${" ".repeat(width)}  ${detail}`] : [head];
+	});
+}
+//#endregion
 //#region src/trust/index.ts
 /**
 * Installing the local edge's certificate authority into the OS trust store.
@@ -413,6 +498,74 @@ var UnsupportedPlatform = class extends Error {
 		this.name = "UnsupportedPlatform";
 	}
 };
+//#endregion
+//#region src/dev/credentials.ts
+/**
+* `gkm dev:credentials` — where to sign in to each local service, and as
+* whom, without starting anything.
+*
+* Reads the workspace's generated local logins (see
+* `reconcile/localCredentials.ts`) and the ports the last `gkm dev` or
+* `gkm test` published them on (`.gkm/ports.json`). `--json` prints the same
+* for a script.
+*/
+var credentials_exports = /* @__PURE__ */ require_rolldown_runtime.__exportAll({
+	NoLocalCredentials: () => NoLocalCredentials,
+	devCredentials: () => devCredentials,
+	devCredentialsCommand: () => devCredentialsCommand
+});
+/** The containers a person may sign in to, in the order they print. */
+const SIGNED_IN = [
+	"postgres",
+	"minio",
+	"mailpit",
+	"redis",
+	"redis-http",
+	"rabbitmq",
+	"localstack"
+];
+/** Nothing has generated this workspace's local logins yet. */
+var NoLocalCredentials = class extends Error {
+	workspace;
+	constructor(workspace) {
+		super(`'${workspace}' has no local logins on this machine yet: they are generated the first time gkm dev, gkm test or gkm setup starts its services. Run one of them, then this again.`);
+		this.workspace = workspace;
+		this.name = "NoLocalCredentials";
+	}
+};
+/** The logins of every service the workspace last published. */
+function devCredentials(workspace, credentials, ports) {
+	const containers = SIGNED_IN.filter((container) => require_seeds.portsOf(container).some((port) => ports[port.key] !== void 0));
+	const logs = require_workspace.resolveLogs(workspace.deploy?.compose?.logs);
+	const local = logs ? {
+		url: logs.public ? `https://logs.${workspace.name}.localhost` : `http://localhost:${logs.port}`,
+		via: `gkm compose --stage ${workspace.stages.local}`
+	} : void 0;
+	return {
+		workspace: workspace.name,
+		stage: workspace.stages.local,
+		services: serviceLogins({
+			containers,
+			ports,
+			credentials,
+			...local ? { logs: local } : {}
+		})
+	};
+}
+async function devCredentialsCommand(options = {}, print = (line) => console.log(line)) {
+	const { workspace } = await require_config.loadWorkspaceConfig(process.cwd());
+	const credentials = await require_seeds.readLocalCredentials(workspace);
+	if (!credentials) throw new NoLocalCredentials(workspace.name);
+	const output = devCredentials(workspace, credentials, await require_seeds.loadPortState(workspace.root));
+	if (options.json) {
+		print(JSON.stringify(output, null, 2));
+		return output;
+	}
+	print(`🔑 Local logins for ${output.workspace} (${output.stage})`);
+	if (output.services.length === 0) print("   No service has been published yet — start them with gkm dev, then run this again.");
+	for (const line of describeLogins(output.services)) print(line);
+	return output;
+}
 /** Overrides `dev.discoveryPort` — `0` serves on a port of its own. */
 const DISCOVERY_PORT_ENV = "GKM_DISCOVERY_PORT";
 /**
@@ -2051,6 +2204,11 @@ async function workspaceDevCommand(configured, options) {
 		logger$5.log("🐳 Services");
 		for (const line of require_seeds.describeServices(reconciled.services)) logger$5.log(line);
 	}
+	const { services: logins } = devCredentials(workspace, reconciled.credentials, reconciled.ports);
+	if (logins.length > 0) {
+		logger$5.log("🔑 Logins (again any time: gkm dev:credentials)");
+		for (const line of describeLogins(logins)) logger$5.log(line);
+	}
 	const secretsEnv = {
 		...rawSecrets,
 		...reconciled.env
@@ -2059,9 +2217,9 @@ async function workspaceDevCommand(configured, options) {
 	for (const { id, port } of fakes) logger$5.log(`🎭 ${id} fake: http://localhost:${port}`);
 	logger$5.log(options.migrate || options.seed ? "🗄️  Migrating the databases" : "🗄️  Checking for pending migrations");
 	if (options.migrate || options.seed) {
-		const { prepareDevDatabases } = await Promise.resolve().then(() => require("./migrate-DkB833Jj.cjs"));
+		const { prepareDevDatabases } = await Promise.resolve().then(() => require("./migrate-DIjG8-QR.cjs"));
 		await prepareDevDatabases(workspace, reconciled.env, { seed: !!options.seed });
-	} else await Promise.resolve().then(() => require("./migrate-DkB833Jj.cjs")).then(({ reportPendingMigrations }) => reportPendingMigrations(workspace, reconciled.env)).catch((error) => {
+	} else await Promise.resolve().then(() => require("./migrate-DIjG8-QR.cjs")).then(({ reportPendingMigrations }) => reportPendingMigrations(workspace, reconciled.env)).catch((error) => {
 		logger$5.log(`⚠️  Could not check for pending migrations: ${error instanceof Error ? error.message : String(error)}`);
 	});
 	const appUrls = {};
@@ -3069,7 +3227,7 @@ async function buildApp(input) {
 		if (production?.bundle && !input.skipBundle) {
 			const outputDir = (0, node_path.join)(appRoot, ".gkm", "server");
 			const entryPoint = await writeSurfaceServer(outputDir, production);
-			const { bundleServer } = await Promise.resolve().then(() => require("./bundler-BlbSLFLn.cjs"));
+			const { bundleServer } = await Promise.resolve().then(() => require("./bundler-YNvLdvlh.cjs"));
 			await bundleServer({
 				entryPoint,
 				outputDir: (0, node_path.join)(outputDir, "dist"),
@@ -3193,7 +3351,7 @@ async function buildWorkers(input) {
 		});
 		logger$4.log(`Generated worker ${worker.id}: ${crons.length} crons, ${queues.length} queues, ${subscribers.length} subscribers`);
 		if (!input.bundle) continue;
-		const { bundleServer } = await Promise.resolve().then(() => require("./bundler-BlbSLFLn.cjs"));
+		const { bundleServer } = await Promise.resolve().then(() => require("./bundler-YNvLdvlh.cjs"));
 		const outfile = require_seeds.workerBundleName(worker.id);
 		await bundleServer({
 			entryPoint,
@@ -3263,7 +3421,7 @@ async function buildForTarget(target, context, appRoot, workspaceRoot, endpointG
 		let masterKey;
 		if (context.production?.bundle && !skipBundle) {
 			logger$4.log(`\n📦 Bundling production server...`);
-			const { bundleServer } = await Promise.resolve().then(() => require("./bundler-BlbSLFLn.cjs"));
+			const { bundleServer } = await Promise.resolve().then(() => require("./bundler-YNvLdvlh.cjs"));
 			const allConstructs = [
 				...endpoints.map((e) => e.construct),
 				...functions.map((f) => f.construct),
@@ -4965,25 +5123,25 @@ function loadPackageJson() {
 * Run: pnpm --filter @geekmidas/cli sync-versions
 */
 const GEEKMIDAS_VERSIONS = {
-	"@geekmidas/audit": "~10.0.0-alpha.80",
-	"@geekmidas/auth": "~10.0.0-alpha.80",
-	"@geekmidas/cache": "~10.0.0-alpha.80",
-	"@geekmidas/client": "~10.0.0-alpha.80",
-	"@geekmidas/cloud": "~10.0.0-alpha.80",
-	"@geekmidas/constructs": "~10.0.0-alpha.80",
-	"@geekmidas/db": "~10.0.0-alpha.80",
-	"@geekmidas/emailkit": "~10.0.0-alpha.80",
-	"@geekmidas/envkit": "~10.0.0-alpha.80",
-	"@geekmidas/errors": "~10.0.0-alpha.80",
-	"@geekmidas/events": "~10.0.0-alpha.80",
-	"@geekmidas/logger": "~10.0.0-alpha.80",
-	"@geekmidas/manifest": "~10.0.0-alpha.80",
-	"@geekmidas/rate-limit": "~10.0.0-alpha.80",
-	"@geekmidas/schema": "~10.0.0-alpha.80",
-	"@geekmidas/services": "~10.0.0-alpha.80",
-	"@geekmidas/storage": "~10.0.0-alpha.80",
-	"@geekmidas/telescope": "~10.0.0-alpha.80",
-	"@geekmidas/testkit": "~10.0.0-alpha.80",
+	"@geekmidas/audit": "~10.0.0-alpha.82",
+	"@geekmidas/auth": "~10.0.0-alpha.82",
+	"@geekmidas/cache": "~10.0.0-alpha.82",
+	"@geekmidas/client": "~10.0.0-alpha.82",
+	"@geekmidas/cloud": "~10.0.0-alpha.82",
+	"@geekmidas/constructs": "~10.0.0-alpha.82",
+	"@geekmidas/db": "~10.0.0-alpha.82",
+	"@geekmidas/emailkit": "~10.0.0-alpha.82",
+	"@geekmidas/envkit": "~10.0.0-alpha.82",
+	"@geekmidas/errors": "~10.0.0-alpha.82",
+	"@geekmidas/events": "~10.0.0-alpha.82",
+	"@geekmidas/logger": "~10.0.0-alpha.82",
+	"@geekmidas/manifest": "~10.0.0-alpha.82",
+	"@geekmidas/rate-limit": "~10.0.0-alpha.82",
+	"@geekmidas/schema": "~10.0.0-alpha.82",
+	"@geekmidas/services": "~10.0.0-alpha.82",
+	"@geekmidas/storage": "~10.0.0-alpha.82",
+	"@geekmidas/telescope": "~10.0.0-alpha.82",
+	"@geekmidas/testkit": "~10.0.0-alpha.82",
 	"@geekmidas/cli": `~${loadPackageJson().version}`
 };
 //#endregion
@@ -10592,7 +10750,7 @@ function printSummary(workspace, stage) {
 * A no-op when nothing is recorded — no run yet, or one already torn down —
 * so running it twice, or before a setup, is harmless.
 */
-async function dropTestDatabases(cwd, root, sql = require_seeds.pgClient) {
+async function dropTestDatabases(cwd, root, sql) {
 	const readyPath = (0, node_path.join)(cwd, require_ready.TEST_READY_FILE);
 	const ready = await readReady(readyPath);
 	const recorded = ready?.databases;
@@ -10728,7 +10886,10 @@ async function testCommand(options = {}) {
 }
 /** Drop what the last setup created — see `dropTestDatabases`. */
 async function teardown(cwd) {
-	const dropped = await dropTestDatabases(cwd, await require_config.loadWorkspaceConfig(cwd).then((loaded) => loaded.workspace.root).catch(() => cwd));
+	const workspace = await require_config.loadWorkspaceConfig(cwd).then((loaded) => loaded.workspace).catch(() => void 0);
+	const credentials = workspace ? await require_seeds.readLocalCredentials(workspace) : null;
+	if (!workspace || !credentials) return;
+	const dropped = await dropTestDatabases(cwd, workspace.root, (port) => require_seeds.pgClient(port, credentials.postgres));
 	if (dropped.length > 0) console.log(`  🧹 Dropped ${dropped.join(", ")}`);
 }
 /**
@@ -10748,7 +10909,7 @@ function testDatabases(reconciled) {
 * starts without the reference data the app needs.
 */
 async function migrateTestStage(workspace, env) {
-	const { migrateAndSeed } = await Promise.resolve().then(() => require("./migrate-DkB833Jj.cjs"));
+	const { migrateAndSeed } = await Promise.resolve().then(() => require("./migrate-DIjG8-QR.cjs"));
 	const { discover } = await Promise.resolve().then(() => require("./discover-D1It5r_h.cjs")).then((n) => n.discover_exports);
 	const sources = {};
 	const manifest = await discover({
@@ -11154,6 +11315,17 @@ program.command("dev").description("Reconcile constructs and start the dev serve
 		process.exit(1);
 	}
 });
+program.command("dev:credentials").description("Print each local service's address and login — Postgres, MinIO, Mailpit, Redis, … — without starting anything").option("--json", "Print them as JSON, for a script").action(async (options) => {
+	try {
+		const globalOptions = program.opts();
+		if (globalOptions.cwd) process.chdir(globalOptions.cwd);
+		const { devCredentialsCommand } = await Promise.resolve().then(() => credentials_exports);
+		await devCredentialsCommand(options);
+	} catch (error) {
+		console.error(formatError(error));
+		process.exit(1);
+	}
+});
 program.command("exec").description("Run a command with secrets injected into Credentials").argument("<command...>", "Command to run (use -- before command)").action(async (commandArgs) => {
 	try {
 		const globalOptions = program.opts();
@@ -11181,7 +11353,7 @@ program.command("migrate").description("Apply each database construct's migratio
 	try {
 		const globalOptions = program.opts();
 		if (globalOptions.cwd) process.chdir(globalOptions.cwd);
-		const { migrateCommand } = await Promise.resolve().then(() => require("./migrate-DkB833Jj.cjs"));
+		const { migrateCommand } = await Promise.resolve().then(() => require("./migrate-DIjG8-QR.cjs"));
 		await migrateCommand({
 			...options,
 			...construct ? { construct } : {}
@@ -11195,7 +11367,7 @@ program.command("seed").description("Migrate, then run each database construct's
 	try {
 		const globalOptions = program.opts();
 		if (globalOptions.cwd) process.chdir(globalOptions.cwd);
-		const { seedCommand } = await Promise.resolve().then(() => require("./migrate-DkB833Jj.cjs"));
+		const { seedCommand } = await Promise.resolve().then(() => require("./migrate-DIjG8-QR.cjs"));
 		await seedCommand({
 			...options,
 			...construct ? { construct } : {}
@@ -11209,7 +11381,7 @@ program.command("migration").description("Write a construct's next migration: an
 	try {
 		const globalOptions = program.opts();
 		if (globalOptions.cwd) process.chdir(globalOptions.cwd);
-		const { migrationCommand } = await Promise.resolve().then(() => require("./migrate-DkB833Jj.cjs"));
+		const { migrationCommand } = await Promise.resolve().then(() => require("./migrate-DIjG8-QR.cjs"));
 		await migrationCommand({
 			construct,
 			...name ? { name } : {}
@@ -11234,11 +11406,15 @@ program.command("api").description("Manage REST API endpoints").action(() => {
 	if (globalOptions.cwd) process.chdir(globalOptions.cwd);
 	process.stdout.write("REST API management - coming soon\n");
 });
-program.command("openapi").description("Generate OpenAPI specification from endpoints").option("--app <name>", "Workspace mode: generate for a single named backend app").action(async (options) => {
+program.command("openapi").description("Generate OpenAPI specification from endpoints").option("--app <name>", "Workspace mode: generate for a single named backend app").option("--telemetry [sampleRate]", "Generated clients send W3C trace context to their API by default, at the stage's sample rate (0-1, default 1)").action(async (options) => {
 	try {
 		const globalOptions = program.opts();
 		if (globalOptions.cwd) process.chdir(globalOptions.cwd);
-		await require_openapi.openapiCommand({ app: options.app });
+		const telemetry = require_EndpointGenerator.parseTelemetryFlag(options.telemetry);
+		await require_openapi.openapiCommand({
+			app: options.app,
+			...telemetry !== void 0 ? { telemetry } : {}
+		});
 	} catch (error) {
 		console.error(formatError(error));
 		process.exit(1);
@@ -11313,7 +11489,7 @@ program.command("secrets:add").description("Build the keys a stage must be given
 	try {
 		const globalOptions = program.opts();
 		if (globalOptions.cwd) process.chdir(globalOptions.cwd);
-		const { secretsAddCommand } = await Promise.resolve().then(() => require("./add-DJ0VE-y-.cjs"));
+		const { secretsAddCommand } = await Promise.resolve().then(() => require("./add-1T3y6E4M.cjs"));
 		await secretsAddCommand(options);
 	} catch (error) {
 		console.error(formatError(error));
@@ -11324,7 +11500,7 @@ program.command("encryption:rotate").description("Add a new current key to an En
 	try {
 		const globalOptions = program.opts();
 		if (globalOptions.cwd) process.chdir(globalOptions.cwd);
-		const { encryptionRotateCommand } = await Promise.resolve().then(() => require("./encryption-CAyR6D7B.cjs"));
+		const { encryptionRotateCommand } = await Promise.resolve().then(() => require("./encryption-DLin89I_.cjs"));
 		await encryptionRotateCommand(construct, options);
 	} catch (error) {
 		console.error(formatError(error));
@@ -11335,7 +11511,7 @@ program.command("encryption:retire").description("Remove an old key from an Encr
 	try {
 		const globalOptions = program.opts();
 		if (globalOptions.cwd) process.chdir(globalOptions.cwd);
-		const { encryptionRetireCommand } = await Promise.resolve().then(() => require("./encryption-CAyR6D7B.cjs"));
+		const { encryptionRetireCommand } = await Promise.resolve().then(() => require("./encryption-DLin89I_.cjs"));
 		await encryptionRetireCommand(construct, key, options);
 	} catch (error) {
 		console.error(formatError(error));
@@ -11378,7 +11554,7 @@ program.command("secrets:reconcile").description("Backfill missing custom secret
 		if (globalOptions.cwd) process.chdir(globalOptions.cwd);
 		const { loadWorkspaceConfig } = await Promise.resolve().then(() => require("./config.cjs"));
 		const { reconcileMissingSecrets } = await Promise.resolve().then(() => require("./reconcile-CuCQBa5-.cjs"));
-		const { secretsStoreFor } = await Promise.resolve().then(() => require("./seeds-ZljwYV_p.cjs")).then((n) => n.store_exports);
+		const { secretsStoreFor } = await Promise.resolve().then(() => require("./seeds-BLzrSwEr.cjs")).then((n) => n.store_exports);
 		const { workspace } = await loadWorkspaceConfig();
 		const stage = options.stage ?? workspace.stages.local;
 		const store = await secretsStoreFor(workspace, stage);
@@ -11387,7 +11563,7 @@ program.command("secrets:reconcile").description("Backfill missing custom secret
 			console.error(`No secrets found for stage "${stage}". Run "gkm secrets:init --stage ${stage}" first.`);
 			process.exit(1);
 		}
-		const { derivedContainers } = await Promise.resolve().then(() => require("./seeds-ZljwYV_p.cjs")).then((n) => n.workspace_exports);
+		const { derivedContainers } = await Promise.resolve().then(() => require("./seeds-BLzrSwEr.cjs")).then((n) => n.workspace_exports);
 		const result = reconcileMissingSecrets(secrets, workspace, await derivedContainers(workspace, stage));
 		if (!result) {
 			console.log(`\n✓ Secrets for stage "${stage}" are up-to-date`);
@@ -11405,7 +11581,7 @@ program.command("secrets:migrate").description("Copy a deployed stage's secrets
 	try {
 		const globalOptions = program.opts();
 		if (globalOptions.cwd) process.chdir(globalOptions.cwd);
-		const { secretsMigrateCommand } = await Promise.resolve().then(() => require("./migrate-iEdyEx4S.cjs"));
+		const { secretsMigrateCommand } = await Promise.resolve().then(() => require("./migrate-BdKhIJgT.cjs"));
 		await secretsMigrateCommand(options);
 	} catch (error) {
 		console.error(formatError(error));
@@ -11413,7 +11589,7 @@ program.command("secrets:migrate").description("Copy a deployed stage's secrets
 	}
 });
 program.command("deploy").description("Deploy a stage through its target").option("--target <name>", "Deploy target: dokploy, compose, sst, or one named in deploy.targets (default: deploy.default)").option("--provider <provider>", "[DEPRECATED] Use --target instead").requiredOption("--stage <stage>", "Deployment stage (e.g., production, staging)").option("--tag <tag>", "Image tag (default: stage-timestamp; compose: the commit). Compose pulls a given tag").option("--skip-push", "Skip pushing image to registry").option("--skip-build", "Skip build step (use existing build)").option("--json", "Write events as JSON lines instead of progress; never prompts").option("--dry-run", "Show what would be created or reused; change, build and push nothing").option("--atomic", "If the release fails, roll back every app it released, not only the failed ones").option("--allow-dev-services <list>", "Server targets: run MinIO and/or Mailpit (minio,mailpit) for mail and buckets the stage's secrets don't configure. Not production-grade").action(async (options) => {
-	const { deployCli } = await Promise.resolve().then(() => require("./cli-BkNZBe_-.cjs"));
+	const { deployCli } = await Promise.resolve().then(() => require("./cli-CWee1-wU.cjs"));
 	const globalOptions = program.opts();
 	const code = await deployCli({
 		cwd: (0, node_path.resolve)(globalOptions.cwd ?? process.cwd()),
@@ -11430,7 +11606,7 @@ program.command("deploy").description("Deploy a stage through its target").optio
 });
 program.command("deploy:rollback").description("Put a stage's app back on its previous release (Dokploy): one app with --app, every app with --atomic").requiredOption("--stage <stage>", "A deployed stage").option("--app <app>", "The app to roll back").option("--atomic", "Roll back every app that has an earlier release").action(async (options) => {
 	try {
-		const { rollbackStage } = await Promise.resolve().then(() => require("./rollback-CgYUPLbq.cjs")).then((n) => n.rollback_exports);
+		const { rollbackStage } = await Promise.resolve().then(() => require("./rollback-CdGhCk1d.cjs")).then((n) => n.rollback_exports);
 		const { terminalCredentials } = await Promise.resolve().then(() => require("./terminal-BL5E0xbR.cjs"));
 		const globalOptions = program.opts();
 		await rollbackStage({
@@ -11466,7 +11642,7 @@ program.command("deploy:github").description("Let GitHub Actions deploy a stage:
 	try {
 		const globalOptions = program.opts();
 		if (globalOptions.cwd) process.chdir(globalOptions.cwd);
-		const { deployGithubCommand } = await Promise.resolve().then(() => require("./github-BLjU59Ye.cjs"));
+		const { deployGithubCommand } = await Promise.resolve().then(() => require("./github-D8KVmNRg.cjs"));
 		await deployGithubCommand(options);
 	} catch (error) {
 		console.error(formatError(error));