@geekmidas/cli 10.0.0-alpha.94 → 10.0.0-alpha.96

package/dist/index.mjs

@@ -1,25 +1,26 @@
 #!/usr/bin/env -S npx tsx
 import { n as __require, t as __exportAll } from "./rolldown-runtime-BhDjJH2R.mjs";
 import { n as isGkmError, t as GkmError } from "./errors-D8Gwp5kU.mjs";
-import { _ as storeDokployCredentials, d as getDokployRegistryId, f as getDokployToken, g as removeGoDaddyCredentials, h as removeDokployCredentials, i as CommandFailed, l as getCredentialsPath, m as readCredentials, o as DEFAULT_TIMEOUT_MS, u as getDokployCredentials, v as storeGoDaddyToken, y as storeHostingerToken } from "./credentials-DpfnUvIR.mjs";
+import { r as DEFAULT_TIMEOUT_MS, t as CommandFailed } from "./run-BJLIerMM.mjs";
+import { a as getDokployCredentials, d as removeGoDaddyCredentials, f as storeDokployCredentials, i as getCredentialsPath, l as readCredentials, m as storeHostingerToken, o as getDokployRegistryId, p as storeGoDaddyToken, s as getDokployToken, u as removeDokployCredentials } from "./credentials-B5N5yKk6.mjs";
 import { l as withOwningTsconfigJsx, r as discover, u as ConstructGenerator } from "./discover-qjFapetL.mjs";
 import { t as appKey } from "./derive-B4vDpzgP.mjs";
-import { A as InvalidStages, F as stageProblems, P as deployedProblems, R as stageSampleRate, a as allConstructGlobs, d as getAppGkmConfig, j as TEST_STAGE, u as getAppBuildOrder } from "./workspace-DWK1PTXP.mjs";
+import { A as InvalidStages, F as stageProblems, P as deployedProblems, R as stageSampleRate, a as allConstructGlobs, d as getAppGkmConfig, j as TEST_STAGE, u as getAppBuildOrder } from "./workspace-CqFUjObk.mjs";
 import { ConfigNotFound, NotABackendApp, NotInAnApp, loadAppConfig, loadConfig, loadWorkspaceConfig, loadWorkspaceSettings, parseModuleConfig } from "./config.mjs";
-import { Bn as prepareEntryCredentials, Cn as scopeTelemetryEnv, Ct as derivedContainers, Fn as findAvailablePort, Gn as FileSecretsStore, Gt as quoteIdentifier, Hn as secretsStoreFor, In as isPortAvailable, Jn as projectKey, Kn as getKeyPath, Ln as loadEnvFiles, Lt as LOCAL_CA_PATH, Mn as primaryPortKey, Nn as createCredentialsPreload, On as describeServices, Pn as createEntryWrapper, Rn as loadPortState, Rt as forgetState, St as constructGlobs, Tn as telemetryOf, Ut as postgresDatabaseNames, Yt as pgClient, Zn as deployIdentity, _ as describeActor, _n as TELEMETRY_CONTAINER, _t as workerEntryDir, ar as maskPassword, bt as FAKE_ENV, c as dockerCommand, cn as imageBuildCredentials, cr as withCustomSecret, dn as eventsBackendFor, fn as providerOf, gt as workerBundleName, ht as WorkerGenerator, jn as portsOf, kn as fakeKey, kt as readLocalCredentials, ln as isImageBuild, lr as LOCAL_LOGS_EMAIL, m as dnsResources, mn as CLUSTER_DATABASE, mt as workerUnits, sr as toEmbeddableSecrets, un as cacheBackendFor, vt as QueueGenerator, w as assertDevServicesFlag, wn as surfaceClientTraced, wt as reconcileWorkspace, xn as appTelemetry, xt as backendsOf$1, yt as CronGenerator, zn as loadSecretsForApp } from "./seeds-CTxTZa-R.mjs";
+import { C as assertDevServicesFlag, Cn as loadEnvFiles, Ct as LOCAL_CA_PATH, En as prepareEntryCredentials, Ft as pgClient, Gn as maskPassword, Jn as withCustomSecret, Jt as imageBuildCredentials, Ln as deployIdentity, Mn as getKeyPath, On as secretsStoreFor, Pn as projectKey, Qt as providerOf, Sn as isPortAvailable, Tn as loadSecretsForApp, Xt as cacheBackendFor, Yn as LOCAL_LOGS_EMAIL, Yt as isImageBuild, Zt as eventsBackendFor, _n as portsOf, at as CronGenerator, bn as createEntryWrapper, ct as constructGlobs, dn as telemetryOf, en as CLUSTER_DATABASE, et as workerUnits, g as describeActor, hn as fakeKey, ht as readLocalCredentials, it as QueueGenerator, jn as FileSecretsStore, jt as quoteIdentifier, kt as postgresDatabaseNames, ln as scopeTelemetryEnv, lt as derivedContainers, mn as describeServices, nt as workerBundleName, ot as FAKE_ENV, p as dnsResources, qn as toEmbeddableSecrets, rn as TELEMETRY_CONTAINER, rt as workerEntryDir, s as dockerCommand, sn as appTelemetry, st as backendsOf$1, tt as WorkerGenerator, un as surfaceClientTraced, ut as reconcileWorkspace, vn as primaryPortKey, wn as loadPortState, wt as forgetState, xn as findAvailablePort, yn as createCredentialsPreload } from "./seeds-CbJSne1A.mjs";
 import { c as startTelemetryCode, l as telemetryFor, n as runtimeFor, o as mountRequestSpansCode, r as parseTelemetryFlag, s as routeTelemetry, t as EndpointGenerator, u as writeTelemetryModule } from "./EndpointGenerator-Bor2tZCm.mjs";
 import { generateOpenApi, openapiCommand, resolveOpenApiConfig } from "./openapi.mjs";
 import { s as isCacheBackend, t as SubscriberGenerator } from "./SubscriberGenerator-CyN2VF5X.mjs";
 import { a as describeHolder, i as assignAppPorts, o as holderOf, r as appTag, s as withAppPorts, t as APP_TAG_ENV } from "./appPorts-C9z9Pzn9.mjs";
 import { n as driversFor, r as eventsBackendsIn, t as cacheBackendsIn } from "./drivers-CTaWrA_L.mjs";
 import { n as withCompute, r as withRoutes, t as manifestModule } from "./emit-C1e8qD08.mjs";
-import { t as LocalSandbox } from "./local-B7Zv1NoA.mjs";
-import { T as keyFingerprint, n as sniffAppEnvironment, o as DokployApi, y as createStateStore } from "./sniffer-DCcuzHz_.mjs";
-import { t as deploy$1 } from "./deploy-CeJ5D0xn.mjs";
-import { a as stackOverrideFile, c as dockerCompose, i as ComposePushNeedsBuild, o as edgeDir, r as ComposePinNeedsPull, s as removeEdgeRoutes, t as composeTarget } from "./compose-D2RFYd_f.mjs";
-import { d as parseDigests, h as EDGE_PROJECT, i as composeProject, p as pinnedRef, s as stackDir } from "./stack-NrdH5ngX.mjs";
+import { t as LocalSandbox } from "./local-BwC2v2Y8.mjs";
+import { T as keyFingerprint, n as sniffAppEnvironment, o as DokployApi, y as createStateStore } from "./sniffer-DQGBYY8i.mjs";
+import { t as deploy$1 } from "./deploy-DktQl7ti.mjs";
 import { o as loadCredentialSchemas, t as CredentialsInvalid } from "./credentialSchemas-BJFvfkaz.mjs";
-import { t as LocalStateStore } from "./LocalStateStore-BSaS2535.mjs";
+import { a as stackOverrideFile, c as dockerCompose, i as ComposePushNeedsBuild, o as edgeDir, r as ComposePinNeedsPull, s as removeEdgeRoutes, t as composeTarget } from "./compose-BJDPFBAN.mjs";
+import { d as parseDigests, h as EDGE_PROJECT, i as composeProject, p as pinnedRef, s as stackDir } from "./stack-BFq3K-_z.mjs";
+import { t as LocalStateStore } from "./LocalStateStore-6CrsZzqI.mjs";
 import { a as getExecCommand, c as validateProjectName, i as findWorkspaceRoot, n as detectPackageManager$1, o as getInstallCommand, r as findWorkspacePackages, s as getRunCommand, t as checkDirectoryExists } from "./utils-D_fxUqvU.mjs";
 import { a as writeTestHarness, i as TEST_MANIFEST_ENV, n as TEST_READY_FILE, t as TEST_READY_ENV } from "./ready-naOSJpeJ.mjs";
 import { createRequire } from "node:module";
@@ -49,7 +50,7 @@ import crypto from "crypto";
 import { Function } from "@geekmidas/constructs/functions";
 import { Topic } from "@geekmidas/constructs/topic";
 //#region package.json
-var version = "10.0.0-alpha.94";
+var version = "10.0.0-alpha.96";
 //#endregion
 //#region src/prompt.ts
 /**
@@ -132,7 +133,7 @@ const logger$8 = console;
 * Validate Dokploy token by making a test API call
 */
 async function validateDokployToken(endpoint, token) {
-	const { DokployApi } = await import("./sniffer-DCcuzHz_.mjs").then((n) => n.c);
+	const { DokployApi } = await import("./sniffer-DQGBYY8i.mjs").then((n) => n.c);
 	return new DokployApi({
 		baseUrl: endpoint,
 		token
@@ -2326,9 +2327,9 @@ async function workspaceDevCommand(configured, options) {
 	for (const { id, port } of fakes) logger$5.log(`🎭 ${id} fake: http://localhost:${port}`);
 	logger$5.log(options.migrate || options.seed ? "🗄️  Migrating the databases" : "🗄️  Checking for pending migrations");
 	if (options.migrate || options.seed) {
-		const { prepareDevDatabases } = await import("./migrate-DhvFPGLi.mjs");
+		const { prepareDevDatabases } = await import("./migrate-CB8B6W9y.mjs");
 		await prepareDevDatabases(workspace, reconciled.env, { seed: !!options.seed });
-	} else await import("./migrate-DhvFPGLi.mjs").then(({ reportPendingMigrations }) => reportPendingMigrations(workspace, reconciled.env)).catch((error) => {
+	} else await import("./migrate-CB8B6W9y.mjs").then(({ reportPendingMigrations }) => reportPendingMigrations(workspace, reconciled.env)).catch((error) => {
 		logger$5.log(`⚠️  Could not check for pending migrations: ${error instanceof Error ? error.message : String(error)}`);
 	});
 	const appUrls = {};
@@ -3381,7 +3382,7 @@ async function buildApp(input) {
 				...production,
 				...telemetry ? { telemetry } : {}
 			});
-			const { bundleServer } = await import("./bundler-BSHog8CH.mjs");
+			const { bundleServer } = await import("./bundler-BMM3UsGm.mjs");
 			await bundleServer({
 				entryPoint,
 				outputDir: join(outputDir, "dist"),
@@ -3526,7 +3527,7 @@ async function buildWorkers(input) {
 		});
 		logger$4.log(`Generated worker ${worker.id}: ${crons.length} crons, ${queues.length} queues, ${subscribers.length} subscribers`);
 		if (!input.bundle) continue;
-		const { bundleServer } = await import("./bundler-BSHog8CH.mjs");
+		const { bundleServer } = await import("./bundler-BMM3UsGm.mjs");
 		const outfile = workerBundleName(worker.id);
 		await bundleServer({
 			entryPoint,
@@ -3612,7 +3613,7 @@ async function buildForTarget(target, context, appRoot, workspaceRoot, endpointG
 		let masterKey;
 		if (context.production?.bundle && !skipBundle) {
 			logger$4.log(`\n📦 Bundling production server...`);
-			const { bundleServer } = await import("./bundler-BSHog8CH.mjs");
+			const { bundleServer } = await import("./bundler-BMM3UsGm.mjs");
 			const allConstructs = [
 				...endpoints.map((e) => e.construct),
 				...functions.map((f) => f.construct),
@@ -5427,25 +5428,25 @@ function loadPackageJson() {
 * Run: pnpm --filter @geekmidas/cli sync-versions
 */
 const GEEKMIDAS_VERSIONS = {
-	"@geekmidas/audit": "~10.0.0-alpha.94",
-	"@geekmidas/auth": "~10.0.0-alpha.94",
-	"@geekmidas/cache": "~10.0.0-alpha.94",
-	"@geekmidas/client": "~10.0.0-alpha.94",
-	"@geekmidas/cloud": "~10.0.0-alpha.94",
-	"@geekmidas/constructs": "~10.0.0-alpha.94",
-	"@geekmidas/db": "~10.0.0-alpha.94",
-	"@geekmidas/emailkit": "~10.0.0-alpha.94",
-	"@geekmidas/envkit": "~10.0.0-alpha.94",
-	"@geekmidas/errors": "~10.0.0-alpha.94",
-	"@geekmidas/events": "~10.0.0-alpha.94",
-	"@geekmidas/logger": "~10.0.0-alpha.94",
-	"@geekmidas/manifest": "~10.0.0-alpha.94",
-	"@geekmidas/rate-limit": "~10.0.0-alpha.94",
-	"@geekmidas/schema": "~10.0.0-alpha.94",
-	"@geekmidas/services": "~10.0.0-alpha.94",
-	"@geekmidas/storage": "~10.0.0-alpha.94",
-	"@geekmidas/telescope": "~10.0.0-alpha.94",
-	"@geekmidas/testkit": "~10.0.0-alpha.94",
+	"@geekmidas/audit": "~10.0.0-alpha.96",
+	"@geekmidas/auth": "~10.0.0-alpha.96",
+	"@geekmidas/cache": "~10.0.0-alpha.96",
+	"@geekmidas/client": "~10.0.0-alpha.96",
+	"@geekmidas/cloud": "~10.0.0-alpha.96",
+	"@geekmidas/constructs": "~10.0.0-alpha.96",
+	"@geekmidas/db": "~10.0.0-alpha.96",
+	"@geekmidas/emailkit": "~10.0.0-alpha.96",
+	"@geekmidas/envkit": "~10.0.0-alpha.96",
+	"@geekmidas/errors": "~10.0.0-alpha.96",
+	"@geekmidas/events": "~10.0.0-alpha.96",
+	"@geekmidas/logger": "~10.0.0-alpha.96",
+	"@geekmidas/manifest": "~10.0.0-alpha.96",
+	"@geekmidas/rate-limit": "~10.0.0-alpha.96",
+	"@geekmidas/schema": "~10.0.0-alpha.96",
+	"@geekmidas/services": "~10.0.0-alpha.96",
+	"@geekmidas/storage": "~10.0.0-alpha.96",
+	"@geekmidas/telescope": "~10.0.0-alpha.96",
+	"@geekmidas/testkit": "~10.0.0-alpha.96",
 	"@geekmidas/cli": `~${loadPackageJson().version}`
 };
 //#endregion
@@ -5846,7 +5847,7 @@ const COMMIT = /^[0-9a-f]{40}$/;
 * The `uses:` value for the stages action, with a comment saying which CLI
 * release the pinned commit is.
 */
-function stagesActionUses(commit = "dcab6fe1ee033518c7901452ee9c49102749c9ed", version = cliVersion()) {
+function stagesActionUses(commit = "83dc84de3d7a8e439e5b186c39e1563fcac56b11", version = cliVersion()) {
 	return commit && COMMIT.test(commit) ? `${STAGES_ACTION}@${commit} # @geekmidas/cli ${version}` : `${STAGES_ACTION}@main # pin to a commit SHA: see the action's README`;
 }
 //#endregion
@@ -11586,7 +11587,7 @@ function testDatabases(reconciled) {
 * starts without the reference data the app needs.
 */
 async function migrateTestStage(workspace, env) {
-	const { migrateAndSeed } = await import("./migrate-DhvFPGLi.mjs");
+	const { migrateAndSeed } = await import("./migrate-CB8B6W9y.mjs");
 	const { discover } = await import("./discover-qjFapetL.mjs").then((n) => n.i);
 	const sources = {};
 	const manifest = await discover({
@@ -12022,7 +12023,7 @@ program.command("migrate").description("Apply each database construct's migratio
 	try {
 		const globalOptions = program.opts();
 		if (globalOptions.cwd) process.chdir(globalOptions.cwd);
-		const { migrateCommand } = await import("./migrate-DhvFPGLi.mjs");
+		const { migrateCommand } = await import("./migrate-CB8B6W9y.mjs");
 		await migrateCommand({
 			...options,
 			...construct ? { construct } : {}
@@ -12035,7 +12036,7 @@ program.command("seed").description("Migrate, then run each database construct's
 	try {
 		const globalOptions = program.opts();
 		if (globalOptions.cwd) process.chdir(globalOptions.cwd);
-		const { seedCommand } = await import("./migrate-DhvFPGLi.mjs");
+		const { seedCommand } = await import("./migrate-CB8B6W9y.mjs");
 		await seedCommand({
 			...options,
 			...construct ? { construct } : {}
@@ -12048,7 +12049,7 @@ program.command("migration").description("Write a construct's next migration: an
 	try {
 		const globalOptions = program.opts();
 		if (globalOptions.cwd) process.chdir(globalOptions.cwd);
-		const { migrationCommand } = await import("./migrate-DhvFPGLi.mjs");
+		const { migrationCommand } = await import("./migrate-CB8B6W9y.mjs");
 		await migrationCommand({
 			construct,
 			...name ? { name } : {}
@@ -12148,7 +12149,7 @@ program.command("secrets:add").description("Build the keys a stage must be given
 	try {
 		const globalOptions = program.opts();
 		if (globalOptions.cwd) process.chdir(globalOptions.cwd);
-		const { secretsAddCommand } = await import("./add-C85isXFl.mjs");
+		const { secretsAddCommand } = await import("./add-BQS2QZHp.mjs");
 		await secretsAddCommand(options);
 	} catch (error) {
 		exitWithError(error);
@@ -12158,7 +12159,7 @@ program.command("encryption:rotate").description("Add a new current key to an En
 	try {
 		const globalOptions = program.opts();
 		if (globalOptions.cwd) process.chdir(globalOptions.cwd);
-		const { encryptionRotateCommand } = await import("./encryption-_4qKqtTx.mjs");
+		const { encryptionRotateCommand } = await import("./encryption-BgQd4f2S.mjs");
 		await encryptionRotateCommand(construct, options);
 	} catch (error) {
 		exitWithError(error);
@@ -12168,7 +12169,7 @@ program.command("encryption:retire").description("Remove an old key from an Encr
 	try {
 		const globalOptions = program.opts();
 		if (globalOptions.cwd) process.chdir(globalOptions.cwd);
-		const { encryptionRetireCommand } = await import("./encryption-_4qKqtTx.mjs");
+		const { encryptionRetireCommand } = await import("./encryption-BgQd4f2S.mjs");
 		await encryptionRetireCommand(construct, key, options);
 	} catch (error) {
 		exitWithError(error);
@@ -12207,7 +12208,7 @@ program.command("secrets:reconcile").description("Backfill missing custom secret
 		if (globalOptions.cwd) process.chdir(globalOptions.cwd);
 		const { loadWorkspaceConfig } = await import("./config.mjs");
 		const { reconcileMissingSecrets } = await import("./reconcile--I7V4Klj.mjs");
-		const { secretsStoreFor } = await import("./seeds-CTxTZa-R.mjs").then((n) => n.Wn);
+		const { secretsStoreFor } = await import("./seeds-CbJSne1A.mjs").then((n) => n.An);
 		const { workspace } = await loadWorkspaceConfig();
 		const stage = options.stage ?? workspace.stages.local;
 		const store = await secretsStoreFor(workspace, stage);
@@ -12216,7 +12217,7 @@ program.command("secrets:reconcile").description("Backfill missing custom secret
 			console.error(`No secrets found for stage "${stage}". Run "gkm secrets:init --stage ${stage}" first.`);
 			process.exit(1);
 		}
-		const { derivedContainers } = await import("./seeds-CTxTZa-R.mjs").then((n) => n.Tt);
+		const { derivedContainers } = await import("./seeds-CbJSne1A.mjs").then((n) => n.dt);
 		const result = reconcileMissingSecrets(secrets, workspace, await derivedContainers(workspace, stage));
 		if (!result) {
 			console.log(`\n✓ Secrets for stage "${stage}" are up-to-date`);
@@ -12233,14 +12234,14 @@ program.command("secrets:migrate").description("Copy a deployed stage's secrets
 	try {
 		const globalOptions = program.opts();
 		if (globalOptions.cwd) process.chdir(globalOptions.cwd);
-		const { secretsMigrateCommand } = await import("./migrate-B7evHv7O.mjs");
+		const { secretsMigrateCommand } = await import("./migrate-CsPFHgTs.mjs");
 		await secretsMigrateCommand(options);
 	} catch (error) {
 		exitWithError(error);
 	}
 });
 program.command("deploy").description("Deploy a stage through its target").option("--target <name>", "Deploy target: dokploy, compose, sst, or one named in deploy.targets (default: deploy.default)").option("--provider <provider>", "[DEPRECATED] Use --target instead").requiredOption("--stage <stage>", "Deployment stage (e.g., production, staging)").option("--tag <tag>", "Image tag (default: stage-timestamp; compose: the commit). Compose pulls a given tag").option("--skip-push", "Skip pushing image to registry").option("--skip-build", "Skip build step (use existing build)").option("--json", "Write events as JSON lines instead of progress; never prompts").option("--dry-run", "Show what would be created or reused; change, build and push nothing").option("--atomic", "If the release fails, roll back every app it released, not only the failed ones").option("--allow-dev-services", "Server targets: run the dev service (MinIO, Mailpit) for every bucket and mail the stage doesn't account for. Not production-grade").option("--skip-dns", "Compose: neither write the public hosts' DNS records nor check they point at GKM_SERVER_IPV4 (a CDN or proxy in front, or records written elsewhere)").option("--resources-only", "Deployed stage: create its resources — deploy.<kind>.<stage> providers' buckets and keys, and its DNS records — and nothing else (a CI runner, before the server deploys)").option("--skip-resources", "Deployed stage: an earlier --resources-only run created its resources; run no provider and write or check no DNS record").option("--rotate-keys", "Deployed stage: each provider issues its runtime keys a successor (the old one is deleted by the next deploy)").option("--retire-old-keys", "Deployed stage: delete a rotated-out key now instead of on the next deploy").action(async (options) => {
-	const { deployCli } = await import("./cli-BsFenyaf.mjs");
+	const { deployCli } = await import("./cli-Ce6NgaQF.mjs");
 	const globalOptions = program.opts();
 	const code = await deployCli({
 		cwd: resolve(globalOptions.cwd ?? process.cwd()),
@@ -12262,8 +12263,8 @@ program.command("deploy").description("Deploy a stage through its target").optio
 });
 program.command("deploy:rollback").description("Put a stage's app back on its previous release (Dokploy): one app with --app, every app with --atomic").requiredOption("--stage <stage>", "A deployed stage").option("--app <app>", "The app to roll back").option("--atomic", "Roll back every app that has an earlier release").action(async (options) => {
 	try {
-		const { rollbackStage } = await import("./rollback-NroNbGC0.mjs").then((n) => n.a);
-		const { terminalCredentials } = await import("./terminal-DAHs2Zko.mjs");
+		const { rollbackStage } = await import("./rollback-CCdEEEcF.mjs").then((n) => n.a);
+		const { terminalCredentials } = await import("./terminal-iNmAXXjs.mjs");
 		const globalOptions = program.opts();
 		await rollbackStage({
 			cwd: resolve(globalOptions.cwd ?? process.cwd()),
@@ -12296,7 +12297,7 @@ program.command("deploy:github").description("Let GitHub Actions deploy a stage:
 	try {
 		const globalOptions = program.opts();
 		if (globalOptions.cwd) process.chdir(globalOptions.cwd);
-		const { deployGithubCommand } = await import("./github-xsDT19im.mjs");
+		const { deployGithubCommand } = await import("./github-DuuvqI3Z.mjs");
 		await deployGithubCommand(options);
 	} catch (error) {
 		exitWithError(error);
@@ -12306,7 +12307,7 @@ program.command("stages").description("The workspace's stages from gkm.config.ts
 	try {
 		const globalOptions = program.opts();
 		if (globalOptions.cwd) process.chdir(globalOptions.cwd);
-		const { stagesCommand } = await import("./stages-veC4TcQe.mjs");
+		const { stagesCommand } = await import("./stages-BEn2ArJZ.mjs");
 		await stagesCommand(options);
 	} catch (error) {
 		exitWithError(error);