@hype-stack/cli 1.0.0 → 1.0.1

package/dist/deploy/project-env.d.ts

@@ -0,0 +1,17 @@
+import { DeployTarget, PlannedTarget } from './types.js';
+export interface ProjectEnv {
+    /** Values found in the project's `.env` files, per target. */
+    local: Partial<Record<DeployTarget, Record<string, string>>>;
+    /** Keys each app declares in its `.env.example`, per target. */
+    declared: Partial<Record<DeployTarget, string[]>>;
+}
+/**
+ * Collect what the project already knows about its own configuration.
+ *
+ * `.env.example` is the contract: it lists everything an app needs, which is
+ * what makes it safe to forward matching values from `.env` and to report the
+ * rest as unset. A root `.env` is treated as shared defaults that the app's own
+ * file overrides.
+ */
+export declare function readProjectEnv(projectRoot: string, targets: PlannedTarget[]): Promise<ProjectEnv>;
+//# sourceMappingURL=project-env.d.ts.map

package/dist/deploy/project-env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-env.d.ts","sourceRoot":"","sources":["../../src/deploy/project-env.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE9D,MAAM,WAAW,UAAU;IACzB,8DAA8D;IAC9D,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC7D,gEAAgE;IAChE,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;CACnD;AAOD;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CA2BvG"}

package/dist/deploy/providers/fly.d.ts

@@ -0,0 +1,56 @@
+import { ServiceOutputs } from '../types.js';
+import { DeployProviderAdapter } from './types.js';
+/**
+ * Region used when the plan does not pin one. Fly opens a region picker when
+ * `mpg create` and `redis create` are called without `--region`, which would
+ * hang a deploy that nobody is watching, so there has to be a fallback.
+ */
+export declare const DEFAULT_FLY_REGION = "iad";
+/** Fly prompts for a Managed Postgres plan the same way it prompts for a region. */
+export declare const DEFAULT_POSTGRES_PLAN = "basic";
+export declare function flyAppUrl(app: string): string;
+/**
+ * Read the organization slugs out of `fly orgs list --json`. Newer flyctl
+ * prints an array of objects; older versions print a `{ "Name": "slug" }` map.
+ */
+export declare function parseOrgSlugs(output: string): string[];
+/**
+ * Parse the `Key: value` block Fly prints after provisioning. `fly storage
+ * create` and `fly redis status` both use this shape, and it is the only way to
+ * get at credentials Fly will not show again.
+ */
+export declare function parseFlyKeyValues(output: string): Record<string, string>;
+/** Pull the first `redis://` or `rediss://` URL out of any Fly output. */
+export declare function parseRedisUrl(output: string): string | null;
+/** Pull the first `postgres://` or `postgresql://` URL out of any Fly output. */
+export declare function parsePostgresUrl(output: string): string | null;
+interface MpgCluster {
+    id: string;
+    name: string;
+}
+/**
+ * Find a Managed Postgres cluster in `fly mpg list --json` output.
+ *
+ * Every other `mpg` subcommand takes a cluster id, not a name, and Fly happily
+ * creates a second cluster with a name it already has. Looking the name up
+ * first is what makes a repeated deploy reuse the database instead of doubling
+ * it.
+ */
+export declare function findClusterInList(output: string, name: string): MpgCluster | null;
+/**
+ * Read the connection string out of `fly mpg status --json`. The uri lives
+ * under `credentials`, separate from the cluster fields under `data`, and the
+ * v1 and v2 APIs disagree on its key.
+ */
+export declare function parseMpgCredentials(output: string): string | null;
+export declare const flyProvider: DeployProviderAdapter;
+/**
+ * Names of the secrets already set on an app. Fly never returns the values, but
+ * the names are enough to tell a re-deploy apart from a bucket that was created
+ * outside this command.
+ */
+export declare function parseSecretNames(output: string): string[];
+/** Map Tigris's AWS-shaped output onto the env names the backend's S3 client reads. */
+export declare function tigrisOutputs(values: Record<string, string>, bucketName: string): ServiceOutputs | null;
+export {};
+//# sourceMappingURL=fly.d.ts.map

package/dist/deploy/providers/fly.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fly.d.ts","sourceRoot":"","sources":["../../../src/deploy/providers/fly.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAiB,cAAc,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,KAAK,EAEV,qBAAqB,EAMtB,MAAM,YAAY,CAAC;AAKpB;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,QAAQ,CAAC;AAExC,oFAAoF;AACpF,eAAO,MAAM,qBAAqB,UAAU,CAAC;AAE7C,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE7C;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAiBtD;AA6CD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAWxE;AAED,0EAA0E;AAC1E,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAG3D;AAED,iFAAiF;AACjF,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAG9D;AAED,UAAU,UAAU;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAajF;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAcjE;AAED,eAAO,MAAM,WAAW,EAAE,qBA+IzB,CAAC;AAgOF;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAUzD;AAiBD,uFAAuF;AACvF,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,UAAU,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAWvG"}

package/dist/deploy/providers/index.d.ts

@@ -0,0 +1,9 @@
+import { ProviderId } from '../types.js';
+import { flyProvider } from './fly.js';
+import { railwayProvider } from './railway.js';
+import { DeployProviderAdapter } from './types.js';
+export declare const PROVIDER_ADAPTERS: Record<ProviderId, DeployProviderAdapter>;
+export declare function getProviderAdapter(id: ProviderId): DeployProviderAdapter;
+export { flyProvider, railwayProvider };
+export type { AuthStatus, DeployProviderAdapter, DeployTargetInput, DeployTargetResult, ProviderContext, ProvisionInput, ProvisionResult, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/deploy/providers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/deploy/providers/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAExD,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,UAAU,EAAE,qBAAqB,CAGvE,CAAC;AAEF,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,UAAU,GAAG,qBAAqB,CAExE;AAED,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC;AACxC,YAAY,EACV,UAAU,EACV,qBAAqB,EACrB,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,EACf,cAAc,EACd,eAAe,GAChB,MAAM,YAAY,CAAC"}

package/dist/deploy/providers/railway.d.ts

@@ -0,0 +1,29 @@
+import { DeployProviderAdapter } from './types.js';
+/** Service names Railway assigns to the databases it provisions. */
+export declare const RAILWAY_POSTGRES_SERVICE = "Postgres";
+export declare const RAILWAY_REDIS_SERVICE = "Redis";
+/**
+ * Pull a Railway-generated hostname out of a command's output. `--json` shapes
+ * have shifted across CLI releases, so the JSON is searched for any `domain`
+ * key first and the raw text is scanned as a fallback.
+ */
+export declare function parseRailwayDomain(output: string): string | null;
+export interface RailwayService {
+    id: string;
+    name: string;
+}
+/**
+ * Parse `railway service list --json`.
+ *
+ * Railway does not enforce unique service names, so `railway add` on a name
+ * that is already taken creates a second service rather than failing. Listing
+ * first is the only way a re-run lands on the same infrastructure. Railway's
+ * own CLI help says as much: "prefer service IDs ... when names may collide".
+ */
+export declare function parseRailwayServices(output: string): RailwayService[];
+/** Parse `railway variable list --kv` output into a map. */
+export declare function parseRailwayVariables(output: string): Record<string, string>;
+export declare const railwayProvider: DeployProviderAdapter;
+/** Workspace names from `railway whoami --json`. */
+export declare function parseRailwayWorkspaces(output: string): string[];
+//# sourceMappingURL=railway.d.ts.map

package/dist/deploy/providers/railway.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"railway.d.ts","sourceRoot":"","sources":["../../../src/deploy/providers/railway.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAEV,qBAAqB,EAMtB,MAAM,YAAY,CAAC;AAEpB,oEAAoE;AACpE,eAAO,MAAM,wBAAwB,aAAa,CAAC;AACnD,eAAO,MAAM,qBAAqB,UAAU,CAAC;AAQ7C;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAWhE;AA+BD,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,EAAE,CAcrE;AAED,4DAA4D;AAC5D,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAoB5E;AAED,eAAO,MAAM,eAAe,EAAE,qBAwK7B,CAAC;AAqCF,oDAAoD;AACpD,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAa/D"}

package/dist/deploy/providers/types.d.ts

@@ -0,0 +1,92 @@
+import { CommandRunner } from '../runner.js';
+import { DeployPlan, DeployTarget, PlannedService, PlannedTarget, ProviderId, ServiceOutputs } from '../types.js';
+export interface ProviderContext {
+    runner: CommandRunner;
+    plan: DeployPlan;
+    /** Project root. Every command runs from here so monorepo paths stay stable. */
+    cwd: string;
+    /** Progress line for the spinner or the headless log. */
+    log?: (message: string) => void;
+}
+export interface AuthStatus {
+    ok: boolean;
+    /** Account identifier the provider reported, shown in the confirmation summary. */
+    account?: string;
+    /** Why it failed, phrased as the command to run. */
+    fix?: string;
+}
+export interface ProvisionResult {
+    /** Connection values to inject into the backend env. */
+    outputs: ServiceOutputs;
+    /**
+     * Keys the provider wired straight onto the target app instead of handing
+     * back a value (Fly's `mpg attach` is the case that needs this). They are not
+     * reported as missing even though nothing local knows their value.
+     */
+    providedByProvider?: string[];
+    /** One-line explanation surfaced in the summary. */
+    note?: string;
+}
+export interface ProvisionInput {
+    service: PlannedService;
+    /** The app the service is being wired into, when one is being deployed. */
+    backend?: PlannedTarget;
+    /**
+     * True when the consuming backend runs on a different provider. Same-provider
+     * wiring can use private networking and reference variables; cross-provider
+     * wiring has to resolve a publicly reachable connection string.
+     */
+    crossProvider: boolean;
+}
+export interface DeployTargetInput {
+    target: PlannedTarget;
+    /** Full env for this target, managed values already merged over forwarded ones. */
+    env: Record<string, string>;
+    /** Values to mask in any echoed command. */
+    secrets: string[];
+    /**
+     * Command to run against the new build before it takes traffic, used for
+     * database migrations. Providers that support a release hook should prefer
+     * it: the command runs from the image being shipped, and a failure stops the
+     * release instead of leaving a new version talking to an old schema.
+     */
+    releaseCommand?: string[];
+}
+export interface DeployTargetResult {
+    /** Public origin the provider reported. Compared against the reserved one. */
+    url?: string;
+    note?: string;
+    /**
+     * True when {@link DeployTargetInput.releaseCommand} ran as part of this
+     * deploy, so the orchestrator does not run it a second time over SSH.
+     */
+    releaseRan?: boolean;
+}
+export interface DeployProviderAdapter {
+    id: ProviderId;
+    /** Confirm the provider CLI is installed and logged in. Never throws. */
+    checkAuth(ctx: ProviderContext): Promise<AuthStatus>;
+    /**
+     * Create the remote app and settle its public origin before anything is
+     * built. The frontends bake the backend's URL into their bundle, so every URL
+     * has to be known up front rather than discovered after the fact.
+     */
+    reserveTarget(ctx: ProviderContext, target: PlannedTarget): Promise<string>;
+    provisionService(ctx: ProviderContext, input: ProvisionInput): Promise<ProvisionResult>;
+    /** Push env vars to the remote app. Static hosts with no runtime env may no-op. */
+    setEnv(ctx: ProviderContext, input: DeployTargetInput): Promise<void>;
+    deployTarget(ctx: ProviderContext, input: DeployTargetInput): Promise<DeployTargetResult>;
+    /**
+     * Run a one-off command inside the deployed app, used for `prisma migrate
+     * deploy`. Providers that cannot do this leave it undefined and the
+     * orchestrator prints the command for the user to run.
+     */
+    runRemote?(ctx: ProviderContext, target: PlannedTarget, command: string[]): Promise<{
+        ok: boolean;
+        output: string;
+    }>;
+}
+/** Targets a provider is responsible for in this plan. */
+export declare function targetsFor(plan: DeployPlan, provider: ProviderId): PlannedTarget[];
+export declare function findTarget(plan: DeployPlan, target: DeployTarget): PlannedTarget | undefined;
+//# sourceMappingURL=types.d.ts.map

package/dist/deploy/providers/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/deploy/providers/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAEvH,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,aAAa,CAAC;IACtB,IAAI,EAAE,UAAU,CAAC;IACjB,gFAAgF;IAChF,GAAG,EAAE,MAAM,CAAC;IACZ,yDAAyD;IACzD,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACjC;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,OAAO,CAAC;IACZ,mFAAmF;IACnF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oDAAoD;IACpD,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,eAAe;IAC9B,wDAAwD;IACxD,OAAO,EAAE,cAAc,CAAC;IACxB;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,oDAAoD;IACpD,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,cAAc,CAAC;IACxB,2EAA2E;IAC3E,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB;;;;OAIG;IACH,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,aAAa,CAAC;IACtB,mFAAmF;IACnF,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,4CAA4C;IAC5C,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,kBAAkB;IACjC,8EAA8E;IAC9E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,UAAU,CAAC;IAEf,yEAAyE;IACzE,SAAS,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAErD;;;;OAIG;IACH,aAAa,CAAC,GAAG,EAAE,eAAe,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAE5E,gBAAgB,CAAC,GAAG,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAExF,mFAAmF;IACnF,MAAM,CAAC,GAAG,EAAE,eAAe,EAAE,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEtE,YAAY,CAAC,GAAG,EAAE,eAAe,EAAE,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAE1F;;;;OAIG;IACH,SAAS,CAAC,CAAC,GAAG,EAAE,eAAe,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACtH;AAED,0DAA0D;AAC1D,wBAAgB,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,GAAG,aAAa,EAAE,CAElF;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,GAAG,aAAa,GAAG,SAAS,CAE5F"}

package/dist/deploy/report.d.ts

@@ -0,0 +1,13 @@
+import { TargetEnvPlan } from './env-plan.js';
+import { DeployOutcome, DeployPlan } from './types.js';
+/** The plan as a block the user confirms before anything is created or billed. */
+export declare function renderPlanSummary(plan: DeployPlan): string;
+/** What each app will receive, so surprises show up before the deploy, not after. */
+export declare function renderEnvSummary(envPlans: TargetEnvPlan[]): string;
+/** What actually happened, step by step. */
+export declare function renderOutcome(outcome: DeployOutcome): string;
+/** Clickable list of every origin the deploy settled on. */
+export declare function renderUrls(outcome: DeployOutcome): string;
+/** Follow-up work the user still owns, or an empty list when there is none. */
+export declare function collectWarnings(outcome: DeployOutcome): string[];
+//# sourceMappingURL=report.d.ts.map

package/dist/deploy/report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.d.ts","sourceRoot":"","sources":["../../src/deploy/report.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE5D,kFAAkF;AAClF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CA+B1D;AAED,qFAAqF;AACrF,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,aAAa,EAAE,GAAG,MAAM,CAqBlE;AAED,4CAA4C;AAC5C,wBAAgB,aAAa,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,CAa5D;AAED,4DAA4D;AAC5D,wBAAgB,UAAU,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,CAQzD;AAED,+EAA+E;AAC/E,wBAAgB,eAAe,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,EAAE,CAehE"}

package/dist/deploy/runner.d.ts

@@ -0,0 +1,81 @@
+import { ExecResult } from '../utils/exec.js';
+export interface CommandSpec {
+    command: string;
+    args: string[];
+    cwd: string;
+    /** Piped to the child's stdin, for CLIs that read secrets there instead of argv. */
+    stdin?: string;
+    /** Extra environment for the child, layered over the parent's. */
+    env?: Record<string, string>;
+    /**
+     * Substrings replaced with `***` whenever the command is echoed or recorded.
+     * Provider adapters pass every secret they touch, so a `--dry-run` transcript
+     * or an error message can be pasted into an issue without leaking anything.
+     */
+    secrets?: string[];
+    /** Return a non-zero result instead of throwing. For probes like `whoami`. */
+    allowFailure?: boolean;
+    /** Short description of what this command is for, shown in dry-run output. */
+    label?: string;
+}
+export declare class CommandFailedError extends Error {
+    readonly spec: CommandSpec;
+    readonly result: ExecResult;
+    constructor(spec: CommandSpec, result: ExecResult);
+}
+export interface CommandRunner {
+    run(spec: CommandSpec): Promise<ExecResult>;
+    /** Every command this runner has seen, in order, with secrets already masked. */
+    readonly transcript: string[];
+    /**
+     * True when nothing is really executed. Lets a step that inspects the result
+     * of a command on disk (the local frontend build) skip its check instead of
+     * failing on output that was never produced.
+     */
+    readonly dryRun?: boolean;
+}
+/** Render a command the way it would be typed, with secret values masked. */
+export declare function formatCommand(spec: CommandSpec): string;
+export declare function maskSecrets(text: string, secrets: string[]): string;
+export interface ProcessRunnerOptions {
+    /** Called with each command before it runs, already masked. */
+    onCommand?: (line: string) => void;
+    /** Called with each output line from the child process. */
+    onOutput?: (line: string) => void;
+}
+/**
+ * Runs commands for real. Non-zero exits throw {@link CommandFailedError}
+ * unless the spec opts out, so a provider adapter reads as a straight sequence
+ * of steps and the orchestrator decides what a failure means.
+ */
+export declare function createProcessRunner(options?: ProcessRunnerOptions): CommandRunner;
+export interface DryRunResponse {
+    /** Substring of the rendered command line this entry answers. */
+    match: string;
+    stdout: string | ((spec: CommandSpec) => string);
+    /**
+     * Exit code to report. Defaults to success. Set it non-zero for the lookups
+     * whose failure is what drives the interesting branch: a dry run of a project
+     * that has never deployed should walk the create path, not the reuse one.
+     */
+    exitCode?: number;
+}
+export interface DryRunOptions {
+    onCommand?: (line: string) => void;
+    /**
+     * Canned stdout for commands whose output the adapter parses. Keyed by a
+     * substring of the rendered command; the first match wins. Without an entry
+     * the command resolves with empty output, which adapters treat as "nothing
+     * discovered" and fall back to their deterministic defaults.
+     */
+    responses?: DryRunResponse[];
+}
+/** Records what would run without touching the network. Backs `deploy --dry-run`. */
+export declare function createDryRunRunner(options?: DryRunOptions): CommandRunner;
+export type CommandHandler = (spec: CommandSpec) => ExecResult | Promise<ExecResult>;
+/**
+ * A runner driven by a handler function. Tests use it to assert the exact
+ * commands an adapter issues and to feed back realistic provider output.
+ */
+export declare function createScriptedRunner(handler: CommandHandler): CommandRunner;
+//# sourceMappingURL=runner.d.ts.map

package/dist/deploy/runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../src/deploy/runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEzD,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,oFAAoF;IACpF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,8EAA8E;IAC9E,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;gBAEhB,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU;CAOlD;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC5C,iFAAiF;IACjF,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAC9B;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,6EAA6E;AAC7E,wBAAgB,aAAa,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,CAKvD;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAOnE;AAOD,MAAM,WAAW,oBAAoB;IACnC,+DAA+D;IAC/D,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACnC;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,GAAE,oBAAyB,GAAG,aAAa,CAqBrF;AAED,MAAM,WAAW,cAAc;IAC7B,iEAAiE;IACjE,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,WAAW,KAAK,MAAM,CAAC,CAAC;IACjD;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC;;;;;OAKG;IACH,SAAS,CAAC,EAAE,cAAc,EAAE,CAAC;CAC9B;AAED,qFAAqF;AACrF,wBAAgB,kBAAkB,CAAC,OAAO,GAAE,aAAkB,GAAG,aAAa,CAgB7E;AAED,MAAM,MAAM,cAAc,GAAG,CAAC,IAAI,EAAE,WAAW,KAAK,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AAErF;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,cAAc,GAAG,aAAa,CAY3E"}

package/dist/deploy/types.d.ts

@@ -0,0 +1,208 @@
+/**
+ * Types for `hype-stack deploy`.
+ *
+ * The deploy pipeline is split into pure planning (everything in this folder
+ * except `runner.ts` and the provider adapters' `run` calls) and execution. The
+ * planner turns flags plus `stack.json` into a fully resolved {@link DeployPlan};
+ * the executor walks that plan and shells out. Keeping the split sharp is what
+ * lets the whole thing be tested without a cloud account.
+ */
+/** An app the CLI can host. Matches the three apps the template ships. */
+export type DeployTarget = "backend" | "frontend" | "admin";
+/** A backing service the CLI can provision and wire into the backend. */
+export type ManagedService = "postgres" | "valkey" | "bucket";
+/** A hosting provider the CLI knows how to drive. */
+export type ProviderId = "railway" | "fly";
+/** Anything a provider can be assigned to. Targets and services share the assignment machinery. */
+export type DeployResource = DeployTarget | ManagedService;
+/**
+ * How a target is served, which decides what the provider has to do with the
+ * build output.
+ *
+ * - `node`: a long-lived Node process (the Hono backend, the TanStack Start SSR
+ *   server). Needs a container or a Node runtime, and can hold WebSockets open.
+ * - `static`: a folder of prebuilt files behind a CDN (the admin SPA).
+ */
+export type ServeMode = "node" | "static";
+export interface TargetSpec {
+    target: DeployTarget;
+    /** Human label used in prompts, notes, and the summary table. */
+    label: string;
+    serveMode: ServeMode;
+    /** Workspace path key in `stack.json` -> `paths`, used to locate the app directory. */
+    pathKey: DeployTarget;
+    /** Fallback app directory when `stack.json` has no `paths` entry. */
+    defaultRoot: string;
+    /** Package manager script that produces the deployable artifact. */
+    buildScript: string;
+    /** Artifact directory, relative to the app root, that a static host uploads. */
+    staticDir?: string;
+    /** Port a `node` target listens on. */
+    port?: number;
+}
+export interface ServiceSpec {
+    service: ManagedService;
+    label: string;
+    /** Env vars this service contributes to the backend once provisioned. */
+    provides: string[];
+}
+export interface ProviderSpec {
+    id: ProviderId;
+    label: string;
+    /** Binary the adapter shells out to. */
+    bin: string;
+    /** How to install the binary, shown when it is missing from PATH. */
+    install: string;
+    /** Docs link shown alongside install instructions. */
+    docs: string;
+}
+export interface TargetConfig {
+    provider: ProviderId;
+    /** Remote app/service name. Defaults to `<projectName>-<target>`. */
+    app?: string;
+    /** Provider region id (`iad`, `us-west1`, ...). Provider default when unset. */
+    region?: string;
+    /**
+     * Public origin this target will be reachable at. Set it to pin a custom
+     * domain; leave it unset to let the provider allocate one.
+     */
+    url?: string;
+}
+export interface ServiceConfig {
+    provider: ProviderId;
+    /** Remote resource name. Defaults to `<projectName>-<service>`. */
+    name?: string;
+    region?: string;
+    /**
+     * Skip provisioning and use these connection values as-is. Lets someone point
+     * the deploy at a database or bucket they already run somewhere else.
+     */
+    external?: Record<string, string>;
+}
+export interface FlySettings {
+    /**
+     * Organization slug. Fly only auto-selects an org when the account has
+     * exactly one personal org; anything else makes `flyctl` open a picker, which
+     * would hang a non-interactive deploy.
+     */
+    org?: string;
+    /**
+     * Managed Postgres plan (`basic`, `launch`, `scale`, ...). Fly prompts for
+     * one when it is not passed on the command line.
+     */
+    postgresPlan?: string;
+}
+export interface RailwaySettings {
+    /**
+     * Workspace id or name used when creating the project. Railway refuses to
+     * pick one for an account that belongs to more than a single workspace.
+     */
+    workspace?: string;
+}
+export interface DeployConfig {
+    version: number;
+    /** Prefix for generated remote resource names. */
+    projectName: string;
+    /** Deployment environment name, used for provider environments and `VITE_ENVIRONMENT`. */
+    environment: string;
+    /** Provider used for any target or service without an explicit assignment. */
+    defaultProvider?: ProviderId;
+    targets: Partial<Record<DeployTarget, TargetConfig>>;
+    services: Partial<Record<ManagedService, ServiceConfig>>;
+    fly?: FlySettings;
+    railway?: RailwaySettings;
+}
+export interface PlannedTarget {
+    target: DeployTarget;
+    spec: TargetSpec;
+    provider: ProviderId;
+    /** Remote app/service name, always resolved (never left to a provider default). */
+    app: string;
+    region?: string;
+    /** Public origin pinned in config, or resolved during the reserve phase. */
+    url?: string;
+    /** Absolute path to the app directory in the project. */
+    root: string;
+}
+export interface PlannedService {
+    service: ManagedService;
+    spec: ServiceSpec;
+    provider: ProviderId;
+    name: string;
+    region?: string;
+    /** When set, the service is not provisioned and these values are used directly. */
+    external?: Record<string, string>;
+}
+export interface DeployPlan {
+    projectName: string;
+    environment: string;
+    projectRoot: string;
+    targets: PlannedTarget[];
+    services: PlannedService[];
+    fly: FlySettings;
+    railway: RailwaySettings;
+}
+/** Connection values a provisioned service contributes to the backend env. */
+export type ServiceOutputs = Record<string, string>;
+/** Public origins resolved for each target, keyed by target. */
+export type TargetUrls = Partial<Record<DeployTarget, string>>;
+export interface DeployStepResult {
+    /** Stable id, e.g. `provision:postgres` or `deploy:backend`. */
+    id: string;
+    label: string;
+    status: "ok" | "skipped" | "failed";
+    detail?: string;
+}
+export interface TargetEnvPlan {
+    target: DeployTarget;
+    /** Values this command computed. Always applied. */
+    managed: Record<string, string>;
+    /** Values carried over from the project's local `.env`, e.g. third-party API keys. */
+    forwarded: Record<string, string>;
+    /**
+     * Keys the app declares in `.env.example` that nothing could fill. The deploy
+     * still runs, because a missing Resend key should not block a first deploy,
+     * but they are reported so the user knows what to set.
+     */
+    missing: string[];
+    /** Keys skipped because their local value only makes sense on a dev machine. */
+    skippedLocal: string[];
+}
+export interface DeployOutcome {
+    plan: DeployPlan;
+    steps: DeployStepResult[];
+    urls: TargetUrls;
+    serviceOutputs: Partial<Record<ManagedService, ServiceOutputs>>;
+    /**
+     * What each app actually received, once every origin and connection string
+     * was known. The pre-flight preview only estimates this, so the follow-up
+     * warnings are read from here instead.
+     */
+    envPlans: TargetEnvPlan[];
+    /** True when every step finished without a failure. */
+    ok: boolean;
+}
+export interface DeployOptions {
+    cwd?: string;
+    /** Provider for anything without a more specific assignment. */
+    provider?: string;
+    /** Per-resource provider overrides, e.g. `{ backend: "fly", bucket: "railway" }`. */
+    assign?: Partial<Record<DeployResource, string>>;
+    /** Deployment environment name. Defaults to the saved value, then `production`. */
+    environment?: string;
+    /** Restrict the run to these targets. Empty or omitted means every configured target. */
+    only?: DeployTarget[];
+    /** Print every command that would run without executing any of them. */
+    dryRun?: boolean;
+    /** Skip provisioning; assume the services already exist and reuse saved outputs. */
+    skipProvision?: boolean;
+    /** Skip `prisma migrate deploy` against the provisioned database. */
+    skipMigrations?: boolean;
+    /** Skip prompts, accept defaults. */
+    yes?: boolean;
+    /** Fly organization slug, persisted into `stack.json`. */
+    flyOrg?: string;
+    /** Railway workspace id or name, persisted into `stack.json`. */
+    railwayWorkspace?: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/deploy/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/deploy/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,0EAA0E;AAC1E,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,UAAU,GAAG,OAAO,CAAC;AAE5D,yEAAyE;AACzE,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAE9D,qDAAqD;AACrD,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,KAAK,CAAC;AAE3C,mGAAmG;AACnG,MAAM,MAAM,cAAc,GAAG,YAAY,GAAG,cAAc,CAAC;AAE3D;;;;;;;GAOG;AACH,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAC;AAE1C,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,YAAY,CAAC;IACrB,iEAAiE;IACjE,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,SAAS,CAAC;IACrB,uFAAuF;IACvF,OAAO,EAAE,YAAY,CAAC;IACtB,qEAAqE;IACrE,WAAW,EAAE,MAAM,CAAC;IACpB,oEAAoE;IACpE,WAAW,EAAE,MAAM,CAAC;IACpB,gFAAgF;IAChF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uCAAuC;IACvC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,cAAc,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,yEAAyE;IACzE,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,UAAU,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,wCAAwC;IACxC,GAAG,EAAE,MAAM,CAAC;IACZ,qEAAqE;IACrE,OAAO,EAAE,MAAM,CAAC;IAChB,sDAAsD;IACtD,IAAI,EAAE,MAAM,CAAC;CACd;AAID,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,UAAU,CAAC;IACrB,qEAAqE;IACrE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,gFAAgF;IAChF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,UAAU,CAAC;IACrB,mEAAmE;IACnE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,WAAW;IAC1B;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,eAAe;IAC9B;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,WAAW,EAAE,MAAM,CAAC;IACpB,0FAA0F;IAC1F,WAAW,EAAE,MAAM,CAAC;IACpB,8EAA8E;IAC9E,eAAe,CAAC,EAAE,UAAU,CAAC;IAC7B,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC;IACrD,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC,CAAC;IACzD,GAAG,CAAC,EAAE,WAAW,CAAC;IAClB,OAAO,CAAC,EAAE,eAAe,CAAC;CAC3B;AAID,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,YAAY,CAAC;IACrB,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE,UAAU,CAAC;IACrB,mFAAmF;IACnF,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4EAA4E;IAC5E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,cAAc,CAAC;IACxB,IAAI,EAAE,WAAW,CAAC;IAClB,QAAQ,EAAE,UAAU,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,mFAAmF;IACnF,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC3B,GAAG,EAAE,WAAW,CAAC;IACjB,OAAO,EAAE,eAAe,CAAC;CAC1B;AAID,8EAA8E;AAC9E,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAEpD,gEAAgE;AAChE,MAAM,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;AAE/D,MAAM,WAAW,gBAAgB;IAC/B,gEAAgE;IAChE,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,IAAI,GAAG,SAAS,GAAG,QAAQ,CAAC;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,YAAY,CAAC;IACrB,oDAAoD;IACpD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,sFAAsF;IACtF,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC;;;;OAIG;IACH,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,gFAAgF;IAChF,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,UAAU,CAAC;IACjB,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAC1B,IAAI,EAAE,UAAU,CAAC;IACjB,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC;IAChE;;;;OAIG;IACH,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,uDAAuD;IACvD,EAAE,EAAE,OAAO,CAAC;CACb;AAID,MAAM,WAAW,aAAa;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,gEAAgE;IAChE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qFAAqF;IACrF,MAAM,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;IACjD,mFAAmF;IACnF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yFAAyF;IACzF,IAAI,CAAC,EAAE,YAAY,EAAE,CAAC;IACtB,wEAAwE;IACxE,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,oFAAoF;IACpF,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,qEAAqE;IACrE,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,qCAAqC;IACrC,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,0DAA0D;IAC1D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iEAAiE;IACjE,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B"}

package/dist/index.d.ts

@@ -2,7 +2,9 @@ export { createProgram } from './cli';
 export { createCommand } from './commands/create';
 export { initCommand, ensureInit } from './commands/init';
 export { composeCommand } from './commands/compose';
+export { deployCommand } from './commands/deploy';
 export { loginCommand } from './commands/login';
 export { logoutCommand } from './commands/logout';
 export type { StackConfig, CreateOptions, InitOptions, DetectedWorkspace, CodeEditor, StackPaths, AppPaths, PackManifest, PackFile, PackTier, FileStrategy, PackListItem, PackAuthorization, PackAuthorizationMap, ComposeOptions, } from './types/types';
+export type { DeployConfig, DeployOptions, DeployOutcome, DeployPlan, DeployTarget, ManagedService, ProviderId, } from './deploy/types';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AACtC,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,YAAY,EACV,WAAW,EACX,aAAa,EACb,WAAW,EACX,iBAAiB,EACjB,UAAU,EACV,UAAU,EACV,QAAQ,EACR,YAAY,EACZ,QAAQ,EACR,QAAQ,EACR,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,oBAAoB,EACpB,cAAc,GACf,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AACtC,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,YAAY,EACV,WAAW,EACX,aAAa,EACb,WAAW,EACX,iBAAiB,EACjB,UAAU,EACV,UAAU,EACV,QAAQ,EACR,YAAY,EACZ,QAAQ,EACR,QAAQ,EACR,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,oBAAoB,EACpB,cAAc,GACf,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,YAAY,EACZ,aAAa,EACb,aAAa,EACb,UAAU,EACV,YAAY,EACZ,cAAc,EACd,UAAU,GACX,MAAM,gBAAgB,CAAC"}

package/dist/index.js

@@ -1,2 +1,2 @@
-import { a as e, c as t, i as n, o as r, r as i, s as a, t as o } from "./cli-DtlLnANf.js";
-export { e as composeCommand, t as createCommand, o as createProgram, r as ensureInit, a as initCommand, n as loginCommand, i as logoutCommand };
+import { a as e, c as t, i as n, l as r, o as i, r as a, s as o, t as s } from "./cli-C8n6X5xr.js";
+export { i as composeCommand, r as createCommand, s as createProgram, e as deployCommand, o as ensureInit, t as initCommand, n as loginCommand, a as logoutCommand };

package/dist/types/types.d.ts

@@ -1,3 +1,4 @@
+import { DeployConfig } from '../deploy/types.js';
 /**
  * An editor the user can ship rules for. A project can carry several at once,
  * because a team rarely agrees on one: the formats live in different folders, so
@@ -43,6 +44,12 @@ export interface StackConfig {
         /** Deduped `.env.example` section slugs (EnvSection) the installed packs declare. */
         envSections?: EnvSection[];
     };
+    /**
+     * What `hype-stack deploy` created and where. Written by `deploy`, and by
+     * nothing else, so a re-run reuses the same apps and services instead of
+     * provisioning a second set. Absent until the first deploy.
+     */
+    deploy?: DeployConfig;
 }
 export interface CreateOptions {
     name?: string;