@geekmidas/cli 10.0.0-alpha.88 → 10.0.0-alpha.89

package/dist/{types-BZ01tZs-.d.mts → types-ZHuZ89hv.d.mts}

@@ -507,6 +507,19 @@ interface CredentialKinds {
     };
     value: AwsCredential;
   };
+  /**
+   * A GoDaddy Personal Access Token, for a `dns` domain whose provider is
+   * `godaddy`. Read on the machine that writes the records — never the
+   * server's.
+   */
+  godaddy: {
+    request: Record<never, never>;
+    value: GoDaddyCredential;
+  };
+}
+/** A GoDaddy Personal Access Token, sent as `Authorization: Bearer <token>`. */
+interface GoDaddyCredential {
+  token: string;
 }
 /**
  * Who to act as on AWS: a named profile, or keys.
@@ -1006,6 +1019,12 @@ interface DeployPhaseContext<Options = undefined> {
    * runs both.
    */
   readonly allowDevServices: boolean;
+  /**
+   * `--skip-dns-check`: a server target does not check that each public
+   * host resolves to the stage's server before it starts — for a CDN or
+   * proxy in front of it.
+   */
+  readonly skipDnsCheck?: boolean;
   /** Where every credential comes from. Nothing prompts. */
   readonly credentials: CredentialProvider;
   /**
@@ -5545,13 +5564,21 @@ declare function isPhase2DeployTarget(target: string): boolean;
  */
 declare function getDeployTargetError(target: string, appName?: string): string;
 /**
- * Combined DNS config that supports both new multi-domain and legacy single-domain formats.
+ * Single DNS provider config (for one domain).
  */
-declare const DnsConfigWithLegacySchema: ZodUnion<readonly [ZodRecord<ZodString, ZodUnion<readonly [ZodDiscriminatedUnion<[ZodObject<{
+declare const DnsProviderSchema: ZodUnion<readonly [ZodDiscriminatedUnion<[ZodObject<{
   provider: ZodLiteral<"hostinger">;
+  records: ZodOptional<ZodUnion<readonly [ZodLiteral<"a">, ZodObject<{
+    mode: ZodLiteral<"cname">;
+    target: ZodUnion<readonly [ZodString, ZodRecord<ZodString, ZodString>]>;
+  }, $strict>]>>;
   ttl: ZodOptional<ZodNumber>;
 }, $strip>, ZodObject<{
   provider: ZodLiteral<"route53">;
+  records: ZodOptional<ZodUnion<readonly [ZodLiteral<"a">, ZodObject<{
+    mode: ZodLiteral<"cname">;
+    target: ZodUnion<readonly [ZodString, ZodRecord<ZodString, ZodString>]>;
+  }, $strict>]>>;
   region: ZodOptional<ZodEnum<{
     "af-south-1": "af-south-1";
     "ap-east-1": "ap-east-1";
@@ -5585,67 +5612,25 @@ declare const DnsConfigWithLegacySchema: ZodUnion<readonly [ZodRecord<ZodString,
   hostedZoneId: ZodOptional<ZodString>;
   ttl: ZodOptional<ZodNumber>;
 }, $strip>, ZodObject<{
-  provider: ZodLiteral<"cloudflare">;
-  ttl: ZodOptional<ZodNumber>;
-}, $strip>, ZodObject<{
-  provider: ZodLiteral<"manual">;
-}, $strip>], "provider">, ZodObject<{
-  provider: ZodCustom<{
-    name: string;
-    getRecords: Function;
-    upsertRecords: Function;
-  }, {
-    name: string;
-    getRecords: Function;
-    upsertRecords: Function;
-  }>;
-  ttl: ZodOptional<ZodNumber>;
-}, $strip>]>>, ZodUnion<readonly [ZodDiscriminatedUnion<[ZodObject<{
-  provider: ZodLiteral<"hostinger">;
-  ttl: ZodOptional<ZodNumber>;
-  domain: ZodString;
-}, $strip>, ZodObject<{
-  provider: ZodLiteral<"route53">;
-  region: ZodOptional<ZodEnum<{
-    "af-south-1": "af-south-1";
-    "ap-east-1": "ap-east-1";
-    "ap-northeast-1": "ap-northeast-1";
-    "ap-northeast-2": "ap-northeast-2";
-    "ap-northeast-3": "ap-northeast-3";
-    "ap-south-1": "ap-south-1";
-    "ap-south-2": "ap-south-2";
-    "ap-southeast-1": "ap-southeast-1";
-    "ap-southeast-2": "ap-southeast-2";
-    "ap-southeast-3": "ap-southeast-3";
-    "ap-southeast-4": "ap-southeast-4";
-    "ca-central-1": "ca-central-1";
-    "eu-central-1": "eu-central-1";
-    "eu-central-2": "eu-central-2";
-    "eu-north-1": "eu-north-1";
-    "eu-south-1": "eu-south-1";
-    "eu-south-2": "eu-south-2";
-    "eu-west-1": "eu-west-1";
-    "eu-west-2": "eu-west-2";
-    "eu-west-3": "eu-west-3";
-    "me-central-1": "me-central-1";
-    "me-south-1": "me-south-1";
-    "sa-east-1": "sa-east-1";
-    "us-east-1": "us-east-1";
-    "us-east-2": "us-east-2";
-    "us-west-1": "us-west-1";
-    "us-west-2": "us-west-2";
-  }>>;
-  profile: ZodOptional<ZodString>;
-  hostedZoneId: ZodOptional<ZodString>;
+  provider: ZodLiteral<"godaddy">;
+  records: ZodOptional<ZodUnion<readonly [ZodLiteral<"a">, ZodObject<{
+    mode: ZodLiteral<"cname">;
+    target: ZodUnion<readonly [ZodString, ZodRecord<ZodString, ZodString>]>;
+  }, $strict>]>>;
   ttl: ZodOptional<ZodNumber>;
-  domain: ZodString;
 }, $strip>, ZodObject<{
   provider: ZodLiteral<"cloudflare">;
+  records: ZodOptional<ZodUnion<readonly [ZodLiteral<"a">, ZodObject<{
+    mode: ZodLiteral<"cname">;
+    target: ZodUnion<readonly [ZodString, ZodRecord<ZodString, ZodString>]>;
+  }, $strict>]>>;
   ttl: ZodOptional<ZodNumber>;
-  domain: ZodString;
 }, $strip>, ZodObject<{
   provider: ZodLiteral<"manual">;
-  domain: ZodString;
+  records: ZodOptional<ZodUnion<readonly [ZodLiteral<"a">, ZodObject<{
+    mode: ZodLiteral<"cname">;
+    target: ZodUnion<readonly [ZodString, ZodRecord<ZodString, ZodString>]>;
+  }, $strict>]>>;
 }, $strip>], "provider">, ZodObject<{
   provider: ZodCustom<{
     name: string;
@@ -5656,10 +5641,13 @@ declare const DnsConfigWithLegacySchema: ZodUnion<readonly [ZodRecord<ZodString,
     getRecords: Function;
     upsertRecords: Function;
   }>;
+  records: ZodOptional<ZodUnion<readonly [ZodLiteral<"a">, ZodObject<{
+    mode: ZodLiteral<"cname">;
+    target: ZodUnion<readonly [ZodString, ZodRecord<ZodString, ZodString>]>;
+  }, $strict>]>>;
   ttl: ZodOptional<ZodNumber>;
-  domain: ZodString;
-}, $strip>]>]>;
-type DnsConfig = output$1<typeof DnsConfigWithLegacySchema>;
+}, $strip>]>;
+type DnsProvider = output$1<typeof DnsProviderSchema>;
 /**
  * Backups configuration schema.
  *
@@ -5778,11 +5766,92 @@ declare const WorkspaceConfigSchema: ZodObject<{
       }>>;
     }, $strip>>;
   }, $strip>>;
+  domains: ZodOptional<ZodRecord<ZodString, ZodString>>;
+  dns: ZodOptional<ZodRecord<ZodString, ZodUnion<readonly [ZodDiscriminatedUnion<[ZodObject<{
+    provider: ZodLiteral<"hostinger">;
+    records: ZodOptional<ZodUnion<readonly [ZodLiteral<"a">, ZodObject<{
+      mode: ZodLiteral<"cname">;
+      target: ZodUnion<readonly [ZodString, ZodRecord<ZodString, ZodString>]>;
+    }, $strict>]>>;
+    ttl: ZodOptional<ZodNumber>;
+  }, $strip>, ZodObject<{
+    provider: ZodLiteral<"route53">;
+    records: ZodOptional<ZodUnion<readonly [ZodLiteral<"a">, ZodObject<{
+      mode: ZodLiteral<"cname">;
+      target: ZodUnion<readonly [ZodString, ZodRecord<ZodString, ZodString>]>;
+    }, $strict>]>>;
+    region: ZodOptional<ZodEnum<{
+      "af-south-1": "af-south-1";
+      "ap-east-1": "ap-east-1";
+      "ap-northeast-1": "ap-northeast-1";
+      "ap-northeast-2": "ap-northeast-2";
+      "ap-northeast-3": "ap-northeast-3";
+      "ap-south-1": "ap-south-1";
+      "ap-south-2": "ap-south-2";
+      "ap-southeast-1": "ap-southeast-1";
+      "ap-southeast-2": "ap-southeast-2";
+      "ap-southeast-3": "ap-southeast-3";
+      "ap-southeast-4": "ap-southeast-4";
+      "ca-central-1": "ca-central-1";
+      "eu-central-1": "eu-central-1";
+      "eu-central-2": "eu-central-2";
+      "eu-north-1": "eu-north-1";
+      "eu-south-1": "eu-south-1";
+      "eu-south-2": "eu-south-2";
+      "eu-west-1": "eu-west-1";
+      "eu-west-2": "eu-west-2";
+      "eu-west-3": "eu-west-3";
+      "me-central-1": "me-central-1";
+      "me-south-1": "me-south-1";
+      "sa-east-1": "sa-east-1";
+      "us-east-1": "us-east-1";
+      "us-east-2": "us-east-2";
+      "us-west-1": "us-west-1";
+      "us-west-2": "us-west-2";
+    }>>;
+    profile: ZodOptional<ZodString>;
+    hostedZoneId: ZodOptional<ZodString>;
+    ttl: ZodOptional<ZodNumber>;
+  }, $strip>, ZodObject<{
+    provider: ZodLiteral<"godaddy">;
+    records: ZodOptional<ZodUnion<readonly [ZodLiteral<"a">, ZodObject<{
+      mode: ZodLiteral<"cname">;
+      target: ZodUnion<readonly [ZodString, ZodRecord<ZodString, ZodString>]>;
+    }, $strict>]>>;
+    ttl: ZodOptional<ZodNumber>;
+  }, $strip>, ZodObject<{
+    provider: ZodLiteral<"cloudflare">;
+    records: ZodOptional<ZodUnion<readonly [ZodLiteral<"a">, ZodObject<{
+      mode: ZodLiteral<"cname">;
+      target: ZodUnion<readonly [ZodString, ZodRecord<ZodString, ZodString>]>;
+    }, $strict>]>>;
+    ttl: ZodOptional<ZodNumber>;
+  }, $strip>, ZodObject<{
+    provider: ZodLiteral<"manual">;
+    records: ZodOptional<ZodUnion<readonly [ZodLiteral<"a">, ZodObject<{
+      mode: ZodLiteral<"cname">;
+      target: ZodUnion<readonly [ZodString, ZodRecord<ZodString, ZodString>]>;
+    }, $strict>]>>;
+  }, $strip>], "provider">, ZodObject<{
+    provider: ZodCustom<{
+      name: string;
+      getRecords: Function;
+      upsertRecords: Function;
+    }, {
+      name: string;
+      getRecords: Function;
+      upsertRecords: Function;
+    }>;
+    records: ZodOptional<ZodUnion<readonly [ZodLiteral<"a">, ZodObject<{
+      mode: ZodLiteral<"cname">;
+      target: ZodUnion<readonly [ZodString, ZodRecord<ZodString, ZodString>]>;
+    }, $strict>]>>;
+    ttl: ZodOptional<ZodNumber>;
+  }, $strip>]>>>;
   deploy: ZodOptional<ZodObject<{
     default: ZodOptional<ZodString>;
     targets: ZodOptional<ZodRecord<ZodString, ZodUnion<readonly [ZodString, ZodCustom<unknown, unknown>, ZodTuple<[ZodUnion<readonly [ZodString, ZodCustom<unknown, unknown>]>, ZodUnknown], null>]>>>;
     namespace: ZodOptional<ZodString>;
-    domains: ZodOptional<ZodRecord<ZodString, ZodString>>;
     registry: ZodOptional<ZodString>;
     dokploy: ZodOptional<ZodObject<{
       endpoint: ZodOptional<ZodURL>;
@@ -5824,118 +5893,6 @@ declare const WorkspaceConfigSchema: ZodObject<{
       sampleRate: ZodOptional<ZodNumber>;
     }, $strict>]>>>;
     objects: ZodOptional<ZodRecord<ZodString, ZodUnknown>>;
-    dns: ZodOptional<ZodUnion<readonly [ZodRecord<ZodString, ZodUnion<readonly [ZodDiscriminatedUnion<[ZodObject<{
-      provider: ZodLiteral<"hostinger">;
-      ttl: ZodOptional<ZodNumber>;
-    }, $strip>, ZodObject<{
-      provider: ZodLiteral<"route53">;
-      region: ZodOptional<ZodEnum<{
-        "af-south-1": "af-south-1";
-        "ap-east-1": "ap-east-1";
-        "ap-northeast-1": "ap-northeast-1";
-        "ap-northeast-2": "ap-northeast-2";
-        "ap-northeast-3": "ap-northeast-3";
-        "ap-south-1": "ap-south-1";
-        "ap-south-2": "ap-south-2";
-        "ap-southeast-1": "ap-southeast-1";
-        "ap-southeast-2": "ap-southeast-2";
-        "ap-southeast-3": "ap-southeast-3";
-        "ap-southeast-4": "ap-southeast-4";
-        "ca-central-1": "ca-central-1";
-        "eu-central-1": "eu-central-1";
-        "eu-central-2": "eu-central-2";
-        "eu-north-1": "eu-north-1";
-        "eu-south-1": "eu-south-1";
-        "eu-south-2": "eu-south-2";
-        "eu-west-1": "eu-west-1";
-        "eu-west-2": "eu-west-2";
-        "eu-west-3": "eu-west-3";
-        "me-central-1": "me-central-1";
-        "me-south-1": "me-south-1";
-        "sa-east-1": "sa-east-1";
-        "us-east-1": "us-east-1";
-        "us-east-2": "us-east-2";
-        "us-west-1": "us-west-1";
-        "us-west-2": "us-west-2";
-      }>>;
-      profile: ZodOptional<ZodString>;
-      hostedZoneId: ZodOptional<ZodString>;
-      ttl: ZodOptional<ZodNumber>;
-    }, $strip>, ZodObject<{
-      provider: ZodLiteral<"cloudflare">;
-      ttl: ZodOptional<ZodNumber>;
-    }, $strip>, ZodObject<{
-      provider: ZodLiteral<"manual">;
-    }, $strip>], "provider">, ZodObject<{
-      provider: ZodCustom<{
-        name: string;
-        getRecords: Function;
-        upsertRecords: Function;
-      }, {
-        name: string;
-        getRecords: Function;
-        upsertRecords: Function;
-      }>;
-      ttl: ZodOptional<ZodNumber>;
-    }, $strip>]>>, ZodUnion<readonly [ZodDiscriminatedUnion<[ZodObject<{
-      provider: ZodLiteral<"hostinger">;
-      ttl: ZodOptional<ZodNumber>;
-      domain: ZodString;
-    }, $strip>, ZodObject<{
-      provider: ZodLiteral<"route53">;
-      region: ZodOptional<ZodEnum<{
-        "af-south-1": "af-south-1";
-        "ap-east-1": "ap-east-1";
-        "ap-northeast-1": "ap-northeast-1";
-        "ap-northeast-2": "ap-northeast-2";
-        "ap-northeast-3": "ap-northeast-3";
-        "ap-south-1": "ap-south-1";
-        "ap-south-2": "ap-south-2";
-        "ap-southeast-1": "ap-southeast-1";
-        "ap-southeast-2": "ap-southeast-2";
-        "ap-southeast-3": "ap-southeast-3";
-        "ap-southeast-4": "ap-southeast-4";
-        "ca-central-1": "ca-central-1";
-        "eu-central-1": "eu-central-1";
-        "eu-central-2": "eu-central-2";
-        "eu-north-1": "eu-north-1";
-        "eu-south-1": "eu-south-1";
-        "eu-south-2": "eu-south-2";
-        "eu-west-1": "eu-west-1";
-        "eu-west-2": "eu-west-2";
-        "eu-west-3": "eu-west-3";
-        "me-central-1": "me-central-1";
-        "me-south-1": "me-south-1";
-        "sa-east-1": "sa-east-1";
-        "us-east-1": "us-east-1";
-        "us-east-2": "us-east-2";
-        "us-west-1": "us-west-1";
-        "us-west-2": "us-west-2";
-      }>>;
-      profile: ZodOptional<ZodString>;
-      hostedZoneId: ZodOptional<ZodString>;
-      ttl: ZodOptional<ZodNumber>;
-      domain: ZodString;
-    }, $strip>, ZodObject<{
-      provider: ZodLiteral<"cloudflare">;
-      ttl: ZodOptional<ZodNumber>;
-      domain: ZodString;
-    }, $strip>, ZodObject<{
-      provider: ZodLiteral<"manual">;
-      domain: ZodString;
-    }, $strip>], "provider">, ZodObject<{
-      provider: ZodCustom<{
-        name: string;
-        getRecords: Function;
-        upsertRecords: Function;
-      }, {
-        name: string;
-        getRecords: Function;
-        upsertRecords: Function;
-      }>;
-      ttl: ZodOptional<ZodNumber>;
-      domain: ZodString;
-    }, $strip>]>]>>;
     backups: ZodOptional<ZodObject<{
       type: ZodLiteral<"s3">;
       profile: ZodOptional<ZodString>;
@@ -6175,7 +6132,31 @@ declare function formatValidationErrors(error: ZodError): string;
  */
 type DeployTargetName = 'dokploy' | 'compose' | 'sst' | (string & {});
 /**
- * Each deployed stage's base domain — `deploy.domains`.
+ * A per-stage map, typed from the workspace's deployed stages: a key that is
+ * not one is a type error. Untyped (`string`) stages accept any key, which the
+ * schema then checks at load.
+ */
+type StageMap<S extends string, V> = string extends S ? Record<string, V> : Partial<Record<S, V>>;
+/**
+ * `domains: { <stage>: '<domain>' }` at the root of `defineWorkspace`, typed from
+ * the deployed stages.
+ */
+type DomainsInput<S extends string = string> = StageMap<S, string>;
+/** How one root domain's hosts point at a compose stage's server. */
+type DnsRecordsModeInput<S extends string = string> = 'a' | {
+  mode: 'cname';
+  target: string | StageMap<S, string>;
+};
+/** One root domain's DNS provider, its records mode typed from the stages. */
+type DnsDomainInput<S extends string = string> = DnsProvider extends (infer P) ? P extends unknown ? Omit<P, 'records'> & {
+  records?: DnsRecordsModeInput<S>;
+} : never : never;
+/** `dns: { '<root domain>': { provider, … } }` at the root of `defineWorkspace`. */
+type DnsInput<S extends string = string> = Record<string, DnsDomainInput<S>>;
+/** Each root domain's DNS provider — `dns` at the root of the config. */
+type WorkspaceDnsConfig = Record<string, DnsProvider>;
+/**
+ * Each deployed stage's base domain — `domains` at the root of the config.
  *
  * A fact about the deployment rather than the platform, so every target reads
  * it. The root site answers on the base domain; every other surface on
@@ -6184,9 +6165,7 @@ type DeployTargetName = 'dokploy' | 'compose' | 'sst' | (string & {});
  *
  * @example
  * ```ts
- * deploy: {
- *   domains: { production: 'myapp.com', staging: 'staging.myapp.com' },
- * }
+ * domains: { production: 'myapp.com', staging: 'staging.myapp.com' },
  *
  * // production:
  * // - new StaticSite('Web', { root: true })        → myapp.com
@@ -6290,7 +6269,7 @@ interface DokployVerifyConfig {
  * deploy: { compose: { proxy: 'traefik' } }
  * ```
  */
-interface ComposeWorkspaceConfig {
+interface ComposeWorkspaceConfig<S extends string = string> {
   /**
    * What serves a deployed stage's stack: `'caddy'` (the default) — the
    * stack's own Caddy on 80/443 — or `'traefik'`, the server's shared
@@ -6303,7 +6282,7 @@ interface ComposeWorkspaceConfig {
    * proxy: { staging: 'traefik', production: 'caddy' }
    * ```
    */
-  proxy?: ComposeProxy | Record<string, ComposeProxy>;
+  proxy?: ComposeProxy | StageMap<S, ComposeProxy>;
   /**
    * A deployed stage's own certificate, by stage, instead of one from
    * Let's Encrypt: a PEM certificate (with its chain) and its key, relative
@@ -6313,7 +6292,7 @@ interface ComposeWorkspaceConfig {
    * tls: { production: { certFile: 'certs/origin.pem', keyFile: 'certs/origin.key' } }
    * ```
    */
-  tls?: Record<string, ComposeTlsConfig>;
+  tls?: StageMap<S, ComposeTlsConfig>;
 }
 /** The proxies a compose stack can be served by — `deploy.compose.proxy`. */
 type ComposeProxy = 'caddy' | 'traefik';
@@ -6427,20 +6406,13 @@ interface OtlpTelemetryConfig extends TelemetryProviderConfig {
  *   default: 'dokploy',
  * }
  *
- * // Full configuration with DNS and backups
+ * // Full configuration with backups (domains and dns are at the root)
  * deploy: {
  *   default: 'dokploy',
  *   registry: 'ghcr.io/myorg',
  *   dokploy: {
  *     endpoint: 'https://dokploy.myserver.com',
  *     projectId: 'proj_abc123',
- *     domains: {
- *       production: 'myapp.com',
- *     },
- *   },
- *   dns: {
- *     provider: 'hostinger',
- *     domain: 'myapp.com',
  *   },
  *   backups: {
  *     type: 's3',
@@ -6449,7 +6421,7 @@ interface OtlpTelemetryConfig extends TelemetryProviderConfig {
  * }
  * ```
  */
-interface DeployConfig {
+interface DeployConfig<S extends string = string> {
   /** Default deploy target for all apps (default: 'dokploy') */
   default?: DeployTargetName;
   /**
@@ -6480,8 +6452,6 @@ interface DeployConfig {
    * names a workspace was already deployed under.
    */
   namespace?: string;
-  /** Each deployed stage's base domain — see {@link DomainsConfig}. */
-  domains?: DomainsConfig;
   /**
    * The container registry the apps' images are pushed to and pulled from,
    * whatever the target — `ghcr.io/myorg`. An image is
@@ -6491,19 +6461,17 @@ interface DeployConfig {
   /** Dokploy-specific configuration */
   dokploy?: DokployWorkspaceConfig;
   /** What the `compose` target runs beside the apps — see {@link ComposeWorkspaceConfig}. */
-  compose?: ComposeWorkspaceConfig;
+  compose?: ComposeWorkspaceConfig<S>;
   /**
    * Where each deployed stage's telemetry goes — see
    * {@link StageTelemetryConfig}.
    */
-  telemetry?: Record<string, StageTelemetryConfig>;
+  telemetry?: StageMap<S, StageTelemetryConfig>;
   /**
    * What backs each deployed stage's buckets — the `objects` kind that
    * `ObjectStorage` and `FileServer` produce. See {@link StageObjectsConfig}.
    */
-  objects?: Record<string, StageObjectsConfig>;
-  /** DNS configuration for automatic record creation */
-  dns?: DnsConfig;
+  objects?: StageMap<S, StageObjectsConfig>;
   /** Backup destination configuration for database services */
   backups?: BackupsConfig;
 }
@@ -6915,7 +6883,7 @@ type ConstrainedApps<TApps extends AppsRecord> = { [K in keyof TApps]: Omit<TApp
  * });
  * ```
  */
-type WorkspaceInput<TApps extends AppsRecord> = {
+type WorkspaceInput<TApps extends AppsRecord, TDeployed extends string = string> = {
   /**
    * Where the workspace's own constructs live, relative to its root.
    *
@@ -6935,10 +6903,24 @@ type WorkspaceInput<TApps extends AppsRecord> = {
   apps?: ConstrainedApps<TApps>;
   /** Shared packages configuration */
   shared?: SharedConfig;
+  /**
+   * Each deployed stage's base domain — see {@link DomainsConfig}. A key that
+   * is not a deployed stage is a type error.
+   */
+  domains?: DomainsInput<NoInfer<TDeployed>>;
+  /**
+   * Each root domain's DNS provider, and how its hosts are pointed at a
+   * compose stage's server (`records`).
+   */
+  dns?: DnsInput<NoInfer<TDeployed>>;
   /** Deployment configuration */
-  deploy?: DeployConfig;
-  /** The project's stages: which one is local, which deploy */
-  stages: StagesConfig;
+  deploy?: DeployConfig<NoInfer<TDeployed>>;
+  /**
+   * The project's stages: which one is local, which deploy. The deployed
+   * stages type every per-stage map — `domains`, `deploy.objects`,
+   * `deploy.telemetry`, `deploy.compose.proxy`/`tls`.
+   */
+  stages: StagesInput<TDeployed>;
   /** Encrypted secrets configuration */
   secrets?: SecretsConfig;
   /** State provider configuration (local filesystem by default, or SSM for team collaboration) */
@@ -6946,6 +6928,12 @@ type WorkspaceInput<TApps extends AppsRecord> = {
   /** How `gkm dev` is reached: the discovery endpoint's port and origins */
   dev?: DevConfig;
 };
+/** `stages`, as `defineWorkspace` infers it: each deployed stage literally. */
+interface StagesInput<TDeployed extends string = string> {
+  local: string;
+  deployed: readonly TDeployed[];
+  protected?: readonly NoInfer<TDeployed>[];
+}
 /**
  * How `gkm dev` is reached from outside the apps it runs.
  */
@@ -7000,6 +6988,8 @@ type InferredWorkspaceConfig<TApps extends AppsRecord> = {
     dependencies?: InferAppNames<TApps>[];
   }; };
   shared?: SharedConfig;
+  domains?: DomainsConfig;
+  dns?: WorkspaceDnsConfig;
   deploy?: DeployConfig;
   stages: StagesConfig;
   secrets?: SecretsConfig;
@@ -7052,14 +7042,17 @@ type InferredWorkspaceConfig<TApps extends AppsRecord> = {
  *     },
  *   },
  *
+ *   // Each deployed stage's base domain, and who hosts its DNS
+ *   domains: {
+ *     production: 'myapp.com',
+ *     staging: 'staging.myapp.com',
+ *   },
+ *   dns: { 'myapp.com': { provider: 'godaddy' } },
+ *
  *   // Deployment configuration
  *   deploy: {
  *     default: 'dokploy',
  *     registry: 'ghcr.io/myorg',
- *     domains: {
- *       production: 'myapp.com',
- *       staging: 'staging.myapp.com',
- *     },
  *     dokploy: {
  *       endpoint: 'https://dokploy.myserver.com',
  *       projectId: 'proj_abc123',
@@ -7090,6 +7083,10 @@ interface WorkspaceConfig {
   apps?: Record<string, AppConfig>;
   /** Shared packages configuration */
   shared?: SharedConfig;
+  /** Each deployed stage's base domain — see {@link DomainsConfig}. */
+  domains?: DomainsConfig;
+  /** Each root domain's DNS provider — see {@link WorkspaceDnsConfig}. */
+  dns?: WorkspaceDnsConfig;
   /** Default deployment configuration */
   deploy?: DeployConfig;
   /** The project's stages: which one is local, which deploy */
@@ -7162,6 +7159,10 @@ interface NormalizedWorkspace {
   constructs?: Routes;
   /** Normalized app configurations */
   apps: Record<string, NormalizedAppConfig>;
+  /** Each deployed stage's base domain */
+  domains?: DomainsConfig;
+  /** Each root domain's DNS provider */
+  dns?: WorkspaceDnsConfig;
   /** Deploy configuration (empty object if not specified) */
   deploy: DeployConfig;
   /** Shared packages configuration (empty object if not specified) */
@@ -7442,7 +7443,11 @@ interface GkmConfig {
    * a rename rather than a rewrite.
    */
   deploy?: DeployConfig;
+  /** Each deployed stage's base domain — the same field a workspace has. */
+  domains?: DomainsConfig;
+  /** Each root domain's DNS provider — the same field a workspace has. */
+  dns?: WorkspaceDnsConfig;
 }
 //#endregion
 export { TargetOptions as $, BackendFramework as A, isPhase2DeployTarget as B, SecretsConfig as C, ReleasedImage as Ct, WorkspaceConfig as D, StageTelemetryConfig as E, deployIdentity as Et, SUPPORTED_DEPLOY_TARGETS as F, DeployPhaseContext as G, validateWorkspaceConfig as H, WorkspaceConfigSchema as I, DeployTarget as J, DeployRuntime as K, formatValidationErrors as L, FrontendFramework as M, MobileFramework as N, WorkspaceInput as O, PHASE_2_DEPLOY_TARGETS as P, TargetEvent as Q, getDeployTargetError as R, OtlpTelemetryConfig as S, StateVersionConflict as St, SharedConfig as T, DeployIdentity as Tt, AnyDeployTarget as U, safeValidateWorkspaceConfig as V, DeployFailure as W, DeployTargetEntry as X, DeployTargetCapabilities as Y, DeployTargetLogger as Z, InferredWorkspaceConfig as _, StoredCredentialsOptions as _t, Routes as a, DeployPhase as at, NormalizedAppConfig as b, StateLocked as bt, AppInput as c, AppDeployResult as ct, ConstrainedApps as d, Credential as dt, TargetOptionsIssue as et, DeployConfig as f, CredentialKind as ft, InferAppNames as g, MissingCredential as gt, DokployWorkspaceConfig as h, CredentialRequest as ht, OpenApiConfig as i, DeployEventType as it, Framework as j, isWorkspaceConfig as k, AppsRecord as l, DeployResult as lt, DevConfig as m, CredentialProvider as mt, EmailBackend as n, DeployEvent as nt, AppConfig as o, ResourceChange as ot, DeployTargetName as p, CredentialKinds as pt, DeploySecrets as q, GkmConfig as r, DeployEventError as rt, AppConfigInput as s, ResourceVia as st, CacheBackend as t, TargetOptionsSchema as tt, ComposeWorkspaceConfig as u, AwsCredential as ut, LoadedConfig as v, chainCredentials as vt, SelfHostedTelemetryConfig as w, StageSecrets as wt, NormalizedWorkspace as x, StateStore as xt, ModelsConfig as y, storedCredentials as yt, isDeployTargetSupported as z };
-//# sourceMappingURL=types-BZ01tZs-.d.mts.map
+//# sourceMappingURL=types-ZHuZ89hv.d.mts.map