@geekmidas/cli 10.0.0-alpha.91 → 10.0.0-alpha.93

package/dist/{workspace-CJ0lKFq-.mjs → workspace-Bzw7Zs82.mjs}

@@ -1,6 +1,7 @@
 import { n as __require } from "./rolldown-runtime-BhDjJH2R.mjs";
+import { t as GkmError } from "./errors-D8Gwp5kU.mjs";
 import { a as discriminatedUnion, d as record, f as string, g as url, h as unknown, i as custom, l as number, m as union, n as array, p as tuple, r as boolean, s as literal, t as _enum, u as object } from "./schemas-D-xeKJDD.mjs";
-import { n as isDeployTarget, o as builtinTarget, r as BUILTIN_TARGETS, s as configurableBuiltins } from "./define-DR8xGYfL.mjs";
+import { n as isDeployTarget, o as builtinTarget, r as BUILTIN_TARGETS, s as configurableBuiltins } from "./define-6poNqm5O.mjs";
 import { basename, isAbsolute, join, resolve } from "node:path";
 import { isIP } from "node:net";
 //#region src/secrets/providers.ts
@@ -19,7 +20,7 @@ const SECRETS_STORE_PROVIDERS = [
 * as `'secretsmanager'` or `'ssm-parameter'`. Refused rather than read as the
 * file, which would leave a deployed stage's secrets on one machine.
 */
-var UnknownSecretsStoreProvider = class extends Error {
+var UnknownSecretsStoreProvider = class extends GkmError {
 	provider;
 	constructor(provider) {
 		super(`secrets.store names the provider ${JSON.stringify(provider)}, which is not one gkm ships. Use 'file', { provider: 'ssm', region }, { provider: 'secrets-manager', region }, or { provider: <an object with name, read() and write()> } in gkm.config.ts.`);
@@ -62,7 +63,7 @@ function isHostname(value) {
 	return typeof value === "string" && HOSTNAME.test(value);
 }
 /** A CNAME target that is not a hostname under its own domain. */
-var DnsTargetInvalid = class extends Error {
+var DnsTargetInvalid = class extends GkmError {
 	domain;
 	target;
 	stage;
@@ -112,7 +113,7 @@ function cnameTarget(records, stage) {
 * config with the same rules — and the same named errors — the stack applies.
 */
 /** A per-stage setting keyed by a stage the workspace does not have. */
-var ComposeStageUnknown = class extends Error {
+var ComposeStageUnknown = class extends GkmError {
 	setting;
 	stage;
 	stages;
@@ -128,7 +129,7 @@ var ComposeStageUnknown = class extends Error {
 * A certificate for the local stage, whose certificates are always Caddy's
 * own CA — the one `gkm trust` installs.
 */
-var ComposeTlsOnLocalStage = class extends Error {
+var ComposeTlsOnLocalStage = class extends GkmError {
 	stage;
 	constructor(stage) {
 		super(`deploy.compose.tls sets a certificate for '${stage}', the local stage, whose certificates always come from Caddy's local CA (\`gkm trust\` installs it). Remove it, or set it for a deployed stage.`);
@@ -137,7 +138,7 @@ var ComposeTlsOnLocalStage = class extends Error {
 	}
 };
 /** The stage's certificate or key file is not there to read. */
-var ComposeTlsFileMissing = class extends Error {
+var ComposeTlsFileMissing = class extends GkmError {
 	stage;
 	file;
 	constructor(stage, file) {
@@ -187,7 +188,7 @@ function checkComposeStages(config, stages) {
 //#region src/providers/s3/errors.ts
 /** What the `s3` provider refuses, and how each is put right. */
 /** An `objects` entry for `s3` with a field it does not take or cannot use. */
-var S3ProviderConfigInvalid = class extends Error {
+var S3ProviderConfigInvalid = class extends GkmError {
 	stage;
 	field;
 	value;
@@ -202,7 +203,7 @@ var S3ProviderConfigInvalid = class extends Error {
 	}
 };
 /** No region anywhere to create the stage's buckets in. */
-var S3RegionRequired = class extends Error {
+var S3RegionRequired = class extends GkmError {
 	stage;
 	constructor(stage) {
 		super(`The s3 provider has no region for the stage '${stage}'. Name one in gkm.config.ts: deploy: { objects: { ${stage}: { provider: 's3', region: 'eu-west-1' } } } — or set AWS_REGION.`);
@@ -211,7 +212,7 @@ var S3RegionRequired = class extends Error {
 	}
 };
 /** The good name and every suffixed one are taken by other accounts. */
-var BucketNameUnavailable = class extends Error {
+var BucketNameUnavailable = class extends GkmError {
 	id;
 	tried;
 	constructor(id, tried) {
@@ -222,7 +223,7 @@ var BucketNameUnavailable = class extends Error {
 	}
 };
 /** A bucket in this account carries another project's tag. */
-var BucketOwnedByAnotherProject = class extends Error {
+var BucketOwnedByAnotherProject = class extends GkmError {
 	bucket;
 	owner;
 	project;
@@ -235,7 +236,7 @@ var BucketOwnedByAnotherProject = class extends Error {
 	}
 };
 /** The bucket the stage's state names exists, and this account cannot reach it. */
-var RecordedBucketUnreachable = class extends Error {
+var RecordedBucketUnreachable = class extends GkmError {
 	id;
 	bucket;
 	constructor(id, bucket) {
@@ -246,7 +247,7 @@ var RecordedBucketUnreachable = class extends Error {
 	}
 };
 /** An IAM user by gkm's name exists, and gkm did not create it for this stage. */
-var IamUserNotOwned = class extends Error {
+var IamUserNotOwned = class extends GkmError {
 	user;
 	project;
 	stage;
@@ -259,7 +260,7 @@ var IamUserNotOwned = class extends Error {
 	}
 };
 /** The user already has the two access keys IAM allows. */
-var AccessKeyLimit = class extends Error {
+var AccessKeyLimit = class extends GkmError {
 	user;
 	keys;
 	constructor(user, keys) {
@@ -270,7 +271,7 @@ var AccessKeyLimit = class extends Error {
 	}
 };
 /** `--rotate-keys` while the last rotation's old key is still active. */
-var RotationInProgress = class extends Error {
+var RotationInProgress = class extends GkmError {
 	id;
 	previous;
 	stage;
@@ -283,7 +284,7 @@ var RotationInProgress = class extends Error {
 	}
 };
 /** The stage's secrets point the bucket's key at a bucket gkm did not provision. */
-var BucketKeySetElsewhere = class extends Error {
+var BucketKeySetElsewhere = class extends GkmError {
 	key;
 	bucket;
 	found;
@@ -298,7 +299,7 @@ var BucketKeySetElsewhere = class extends Error {
 	}
 };
 /** `verify()`: a provisioned bucket the stage's key cannot reach. */
-var ProvisionedBucketUnreachable = class extends Error {
+var ProvisionedBucketUnreachable = class extends GkmError {
 	id;
 	bucket;
 	stage;
@@ -370,7 +371,7 @@ function accepted(kind) {
 	].join(", ");
 }
 /** An entry that names no provider gkm has, or is not an entry at all. */
-var UnknownStageProvider = class extends Error {
+var UnknownStageProvider = class extends GkmError {
 	kind;
 	stage;
 	value;
@@ -427,7 +428,7 @@ function stageProvider(workspace, kind, stage) {
 /** The port OpenObserve listens on, and the one it is published on by default. */
 const LOGS_PORT = 5080;
 /** `public` with no address to allow: nobody could reach it. */
-var LogsAllowEmpty = class extends Error {
+var LogsAllowEmpty = class extends GkmError {
 	stage;
 	constructor(stage) {
 		super(`deploy.telemetry.${stage}.public.allow is empty, so the logs site would answer every request with 403. List the addresses that may reach it (public: { allow: ['203.0.113.7', '10.0.0.0/8'] }), or remove public and reach it through an SSH tunnel.`);
@@ -436,7 +437,7 @@ var LogsAllowEmpty = class extends Error {
 	}
 };
 /** An `allow` entry that is not an IP address or a CIDR range. */
-var LogsAllowEntryInvalid = class extends Error {
+var LogsAllowEntryInvalid = class extends GkmError {
 	stage;
 	entry;
 	constructor(stage, entry) {
@@ -447,7 +448,7 @@ var LogsAllowEntryInvalid = class extends Error {
 	}
 };
 /** A retention OpenObserve would refuse to start with. */
-var LogsRetentionInvalid = class extends Error {
+var LogsRetentionInvalid = class extends GkmError {
 	stage;
 	retentionDays;
 	constructor(stage, retentionDays) {
@@ -458,7 +459,7 @@ var LogsRetentionInvalid = class extends Error {
 	}
 };
 /** A port that is not one. */
-var LogsPortInvalid = class extends Error {
+var LogsPortInvalid = class extends GkmError {
 	stage;
 	port;
 	constructor(stage, port) {
@@ -525,7 +526,7 @@ function resolveSelfHosted(config, stage) {
 * OpenObserve and keep every trace.
 */
 /** A deployed stage uses telemetry and its target cannot choose for it. */
-var TelemetryProviderRequired = class extends Error {
+var TelemetryProviderRequired = class extends GkmError {
 	stage;
 	target;
 	constructor(stage, target) {
@@ -536,7 +537,7 @@ var TelemetryProviderRequired = class extends Error {
 	}
 };
 /** A stage asks for the self-hosted provider on a target that cannot run it. */
-var SelfHostedTelemetryUnavailable = class extends Error {
+var SelfHostedTelemetryUnavailable = class extends GkmError {
 	stage;
 	target;
 	constructor(stage, target) {
@@ -547,7 +548,7 @@ var SelfHostedTelemetryUnavailable = class extends Error {
 	}
 };
 /** A sample rate that is not a fraction. */
-var TelemetrySampleRateInvalid = class extends Error {
+var TelemetrySampleRateInvalid = class extends GkmError {
 	stage;
 	sampleRate;
 	constructor(stage, sampleRate) {
@@ -558,7 +559,7 @@ var TelemetrySampleRateInvalid = class extends Error {
 	}
 };
 /** An OTLP endpoint that is not an http(s) URL. */
-var TelemetryEndpointInvalid = class extends Error {
+var TelemetryEndpointInvalid = class extends GkmError {
 	stage;
 	endpoint;
 	constructor(stage, endpoint) {
@@ -733,7 +734,7 @@ function assertDeployedStage(stages, stage) {
 	if (!stages.deployed.includes(stage)) throw new UndeclaredStage(stage, stages.deployed);
 }
 /** A stages block — in gkm.config.ts or from `gkm init`'s flags — that breaks a rule. */
-var InvalidStages = class extends Error {
+var InvalidStages = class extends GkmError {
 	problems;
 	constructor(problems) {
 		super(`Invalid stages:\n  ${problems.join("\n  ")}`);
@@ -745,7 +746,7 @@ var InvalidStages = class extends Error {
 * A stage the project does not deploy to. Refused before anything is
 * provisioned, so a typo does not become a second environment.
 */
-var UndeclaredStage = class extends Error {
+var UndeclaredStage = class extends GkmError {
 	stage;
 	deployed;
 	constructor(stage, deployed) {
@@ -759,7 +760,7 @@ var UndeclaredStage = class extends Error {
 * A per-stage setting keyed by a stage the workspace does not deploy: a typo,
 * a stage since removed, or the local stage, which none of them apply to.
 */
-var UnknownStageKey = class extends Error {
+var UnknownStageKey = class extends GkmError {
 	setting;
 	stage;
 	deployed;
@@ -1792,7 +1793,7 @@ function wrapSingleAppAsWorkspace(config, cwd) {
 * Refused by name rather than dropped: the schema strips keys it does not
 * know, and a registry silently gone would deploy images under no registry.
 */
-var DokployRegistryMoved = class extends Error {
+var DokployRegistryMoved = class extends GkmError {
 	registry;
 	constructor(registry) {
 		super(`deploy.dokploy.registry is now deploy.registry, read by every deploy target. In gkm.config.ts, move it up one level: deploy: { registry: ${JSON.stringify(registry)}, dokploy: { … } }.`);
@@ -1805,7 +1806,7 @@ var DokployRegistryMoved = class extends Error {
 * domain is a fact about the product every target and every command reads,
 * not a deploy setting.
 */
-var DomainsMoved = class extends Error {
+var DomainsMoved = class extends GkmError {
 	domains;
 	constructor(domains) {
 		super(`deploy.domains is now domains, at the root of gkm.config.ts. Move it out of deploy: defineWorkspace({ …, domains: ${JSON.stringify(domains)}, deploy: { … } }).`);
@@ -1817,7 +1818,7 @@ var DomainsMoved = class extends Error {
 * `deploy.dns`, which became `dns` at the root of the config, keyed by root
 * domain.
 */
-var DnsMoved = class extends Error {
+var DnsMoved = class extends GkmError {
 	dns;
 	constructor(dns) {
 		const legacy = dns && typeof dns === "object" && "domain" in dns && "provider" in dns;
@@ -1856,7 +1857,7 @@ function processConfig(config, cwd) {
 	};
 }
 /** A workspace config the schema refuses; the message lists every issue. */
-var InvalidWorkspaceConfig = class extends Error {
+var InvalidWorkspaceConfig = class extends GkmError {
 	constructor(message) {
 		super(message);
 		this.name = "InvalidWorkspaceConfig";
@@ -1976,4 +1977,4 @@ function getEndpointForStage(dokployConfig, stage) {
 //#endregion
 export { RotationInProgress as $, InvalidStages as A, LOGS_PORT as B, WorkspaceConfigSchema as C, isPhase2DeployTarget as D, isDeployTargetSupported as E, stageProblems as F, checkS3Config as G, provisioningOf as H, otlpTelemetryEnv as I, BucketNameUnavailable as J, AccessKeyLimit as K, resolveStageTelemetry as L, UndeclaredStage as M, assertDeployedStage as N, safeValidateWorkspaceConfig as O, deployedProblems as P, RecordedBucketUnreachable as Q, stageSampleRate as R, SUPPORTED_DEPLOY_TARGETS as S, getDeployTargetError as T, stageProvider as U, UnknownStageProvider as V, S3_PROVISIONING as W, IamUserNotOwned as X, BucketOwnedByAnotherProject as Y, ProvisionedBucketUnreachable as Z, PUBLIC_ENV_PREFIXES as _, allConstructGlobs as a, SERVER_IPV6_KEY as at, isWorkspaceConfig as b, constructPatterns as c, SECRETS_STORE_PROVIDERS as ct, getAppGkmConfig as d, S3RegionRequired as et, getEndpointForStage as f, wrapSingleAppAsWorkspace as g, workspaceConstructGlobs as h, InvalidWorkspaceConfig as i, SERVER_IPV4_KEY as it, TEST_STAGE as j, validateWorkspaceConfig as k, defineWorkspace as l, UnknownSecretsStoreProvider as lt, processConfig as m, DokployRegistryMoved as n, certificateFor as nt, appConstructGlobs as o, cnameTarget as ot, normalizeWorkspace as p, BucketKeySetElsewhere as q, DomainsMoved as r, proxyFor as rt, assertNoMovedDeployKeys as s, isReservedStageKey as st, DnsMoved as t, ComposeTlsFileMissing as tt, getAppBuildOrder as u, getPublicEnvPrefix as v, formatValidationErrors as w, PHASE_2_DEPLOY_TARGETS as x, stripPublicPrefix as y, telemetryEnv as z };
 
-//# sourceMappingURL=workspace-CJ0lKFq-.mjs.map
+//# sourceMappingURL=workspace-Bzw7Zs82.mjs.map