@oktis-works/cms 0.1.14 → 0.2.1

package/dist/config-wizard.js

@@ -0,0 +1,308 @@
+// @oktis-works/cms - Wizard `okcms config` (F1)
+//
+// Três modos, todos sobre o MESMO catálogo (`env-schema.ts`):
+//   · TTY            → wizard seção por seção, com máscara de segredo;
+//   · --set K=V      → aplicação pontual validada (CI/scriptIdor);
+//   · --list         → leitura segura (segredos mascarados por padrão).
+//
+// O `.env` é editado in-place pelo `EnvFile`: comentários, seções e ordem do
+// arquivo do operador sobrevivem ao wizard. Nada é gravado sem confirmação
+// explícita — Ctrl+C no meio descarta.
+import { existsSync, readFileSync } from 'node:fs';
+import { join, relative } from 'node:path';
+import { EnvFile, loadEnvFile } from './env-file.js';
+import { ENV_FIELDS, ENV_SECTIONS, fieldsForSection, sectionById, validateField, } from './env-schema.js';
+import { Prompt, style, symbol } from './prompt.js';
+import { assertHostOnly, generateSecret, looksLikeSecret, redact } from './guards.js';
+/** `••••` — nunca o valor real na tela. */
+export function maskValue(value) {
+    if (!value)
+        return '(não definido)';
+    const width = Math.min(Math.max(value.length, 4), 12);
+    return '•'.repeat(width);
+}
+/** Valor "apresentável": segredo mascarado, o resto cru. */
+export function displayValue(field, value) {
+    if (!value)
+        return '(vazio)';
+    if (field?.type === 'secret')
+        return maskValue(value);
+    return value;
+}
+/** `A=1\nB=2` → pares validos, descartando lixo. */
+export function parseSetArgs(raw) {
+    if (!raw)
+        return [];
+    return raw
+        .split('\n')
+        .map((entry) => entry.trim())
+        .filter((entry) => entry.length > 0 && entry.includes('='));
+}
+function fieldByKey(key) {
+    return ENV_FIELDS.find((field) => field.key === key);
+}
+/**
+ * Valida TODOS os pares antes de aplicar QUALQUER UM — meio gravado com a
+ * outra metade inválida deixa o `.env` num estado que ninguém quer.
+ */
+export function planSet(pairs) {
+    const plan = [];
+    const errors = [];
+    for (const pair of pairs) {
+        const index = pair.indexOf('=');
+        const key = pair.slice(0, index).trim();
+        const value = pair.slice(index + 1);
+        if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(key)) {
+            errors.push(`chave inválida: "${key}"`);
+            continue;
+        }
+        const field = fieldByKey(key);
+        if (!field) {
+            errors.push(`chave desconhecida: ${key} — não consta do catálogo do OkCMS. ` +
+                `Use \`okcms config --list\` para ver as suportadas.`);
+            continue;
+        }
+        const problem = validateField(field, value);
+        if (problem) {
+            errors.push(`${key}: ${problem}`);
+            continue;
+        }
+        plan.push({ key, value, field });
+    }
+    return { plan, errors };
+}
+function loadEnv(cwd) {
+    const path = join(cwd, '.env');
+    if (existsSync(path))
+        return { env: loadEnvFile(path), seeded: false, path };
+    // Sem .env: semeia a partir do exemplo para o wizard ter o que mostrar —
+    // mas NÃO grava até o operador confirmar.
+    const examplePath = join(cwd, '.env.example');
+    const seed = existsSync(examplePath) ? readFileSync(examplePath, 'utf-8') : '';
+    return { env: new EnvFile(seed, path), seeded: true, path };
+}
+function printList(env, showSecrets) {
+    for (const section of ENV_SECTIONS) {
+        const fields = fieldsForSection(section.id, env.toRecord());
+        if (fields.length === 0)
+            continue;
+        console.log(`\n# ${section.title} — ${section.hint}`);
+        for (const field of fields) {
+            const raw = env.get(field.key) ?? '';
+            // segredo só sai cru com --show-secrets explícito
+            const shown = field.type === 'secret' && !showSecrets ? maskValue(raw) : raw;
+            console.log(`${field.key}=${shown}`);
+        }
+    }
+}
+export async function runConfigWizard(opts = {}) {
+    const cwd = opts.cwd ?? process.cwd();
+    // 1. A CLI só configura o host — dentro de um container ela exporia o .env.
+    const guard = assertHostOnly('okcms config', { force: opts.force });
+    if (!guard.ok) {
+        console.error(guard.message);
+        return 1;
+    }
+    const { env, seeded, path } = loadEnv(cwd);
+    const relPath = relative(cwd, path) || '.env';
+    // 2. --set: aplicação pontual validada (fluxo de CI)
+    const pairs = parseSetArgs(opts.set);
+    if (pairs.length > 0) {
+        const { plan, errors } = planSet(pairs);
+        if (errors.length > 0) {
+            for (const error of errors)
+                console.error(`✗ ${error}`);
+            return 1;
+        }
+        const changed = [];
+        for (const entry of plan) {
+            const before = env.get(entry.key) ?? '';
+            if (before === entry.value)
+                continue;
+            env.set(entry.key, entry.value);
+            changed.push(entry.key);
+        }
+        if (changed.length === 0) {
+            console.log('✓ nada a alterar — os valores já estavam assim.');
+            return 0;
+        }
+        env.save(path);
+        console.log(`✓ ${changed.length} chave(s) gravada(s) em ${relPath} (permissão 600):`);
+        for (const key of changed) {
+            const field = fieldByKey(key);
+            const now = env.get(key) ?? '';
+            // segredo nunca aparece em log — só "definido"
+            const after = field?.type === 'secret' ? maskValue(now) : now;
+            console.log(`  ${symbol.arrow} ${key}=${redact(after)}`);
+        }
+        return 0;
+    }
+    // 3. --list / --non-interactive: leitura de máquina. `--non-interactive`
+    //    sozinho também cai aqui — sem TTY não há wizard para navegar.
+    if (opts.list || opts.nonInteractive) {
+        printList(env, opts.showSecrets === true);
+        return 0;
+    }
+    // 4. Sem TTY e sem flag → não há como "navegar"; diz o que fazer.
+    const prompt = opts.prompt ?? new Prompt(opts.io);
+    if (!opts.prompt && !prompt.interactive && !opts.nonInteractive) {
+        prompt.close();
+        console.error('okcms config: sem terminal — use uma das opções:');
+        console.error('  okcms config --list              lista as chaves (segredos mascarados)');
+        console.error('  okcms config --set CHAVE=valor    altera e valida uma chave');
+        console.error('  okcms config --non-interactive    mesma saída de --list (CI)');
+        return 1;
+    }
+    return runInteractive(prompt, env, { path, relPath, seeded, section: opts.section });
+}
+async function runInteractive(prompt, env, ctx) {
+    const changed = new Set();
+    let cancelled = false;
+    const onInterrupt = () => {
+        cancelled = true;
+        prompt.write(`\n  ${style.yellow(symbol.warn)} cancelado — nada foi gravado.\n`);
+        process.exit(130);
+    };
+    process.once('SIGINT', onInterrupt);
+    try {
+        prompt.heading(`OkCMS config — ${ctx.relPath}`);
+        prompt.info(`${env.keys().length} chave(s) no arquivo`);
+        if (ctx.seeded) {
+            prompt.warn('.env não existia — wizard parte do .env.example; nada gravado ainda');
+        }
+        prompt.info('Enter mantém o valor atual · Ctrl+C descarta tudo');
+        const record = () => {
+            const out = env.toRecord();
+            for (const key of changed)
+                out[key] = env.get(key) ?? '';
+            return out;
+        };
+        const sectionIds = ENV_SECTIONS.map((section) => section.id);
+        let target = ctx.section;
+        // --section pula o menu principal (scriptável mesmo com TTY)
+        if (target && !sectionIds.includes(target)) {
+            prompt.error(`seção desconhecida: ${target} — use uma de: ${sectionIds.join(', ')}`);
+            prompt.close();
+            return 1;
+        }
+        for (;;) {
+            if (cancelled)
+                return 130;
+            if (!target) {
+                const choices = ENV_SECTIONS.map((section) => ({
+                    value: section.id,
+                    label: section.title,
+                    hint: `${section.hint} · ${fieldsForSection(section.id, record()).length} campos`,
+                }));
+                choices.push({
+                    value: '__show',
+                    label: 'Resumo das alterações',
+                    hint: changed.size > 0 ? `${changed.size} pendente(s)` : 'nenhuma',
+                });
+                choices.push({ value: '__quit', label: 'Sair', hint: 'confirma gravação' });
+                const picked = await prompt.select('Seção', choices);
+                if (picked === '__show') {
+                    printSummary(prompt, env, changed);
+                    continue;
+                }
+                if (picked === '__quit')
+                    break;
+                target = picked;
+            }
+            await runSection(prompt, env, target, record, changed);
+            target = undefined;
+            const more = await prompt.confirm('Editar outra seção?', { defaultValue: false });
+            if (!more)
+                break;
+        }
+        if (changed.size === 0) {
+            prompt.info('nenhuma alteração — arquivo intacto.');
+            return 0;
+        }
+        const ok = await prompt.confirm(`Gravar ${changed.size} alteração(ões) em ${ctx.relPath}?`, { defaultValue: true });
+        if (!ok) {
+            prompt.warn('descartado — nada foi gravado.');
+            return 0;
+        }
+        env.save(ctx.path);
+        prompt.success(`${changed.size} chave(s) gravada(s) — permissão 600`);
+        prompt.info('reinicie os apps para as mudanças valerem (okcms start / restart dos containers)');
+        return 0;
+    }
+    finally {
+        process.removeListener('SIGINT', onInterrupt);
+        prompt.close();
+    }
+}
+function printSummary(prompt, env, changed) {
+    prompt.heading('Resumo');
+    if (changed.size === 0) {
+        prompt.info('nenhuma alteração pendente');
+        return;
+    }
+    for (const key of changed) {
+        const field = fieldByKey(key);
+        const value = env.get(key) ?? '';
+        const shown = field?.type === 'secret' ? maskValue(value) : value;
+        prompt.write(`  ${style.cyan(symbol.arrow)} ${key}=${shown}\n`);
+    }
+}
+async function runSection(prompt, env, sectionId, record, changed) {
+    const section = sectionById(sectionId);
+    if (!section)
+        return;
+    const fields = fieldsForSection(sectionId, record());
+    prompt.heading(`${section.title} — ${section.hint}`);
+    if (fields.length === 0) {
+        prompt.info('nenhum campo aplicável no momento');
+        return;
+    }
+    for (const field of fields) {
+        const current = env.get(field.key) ?? '';
+        // JWT_SECRET fraco/ausente: oferece um gerado em vez de deixar escolha ruim
+        if (field.key === 'JWT_SECRET' && !looksLikeSecret(current)) {
+            const generate = await prompt.confirm('JWT_SECRET ausente/placeholder — gerar um forte?', {
+                defaultValue: true,
+            });
+            if (generate) {
+                const secret = generateSecret(32);
+                env.set(field.key, secret);
+                changed.add(field.key);
+                prompt.success('JWT_SECRET gerado (48 hex, 32 bytes)');
+                continue;
+            }
+        }
+        prompt.write(`  ${style.dim(`${symbol.bullet} ${field.description}`)}\n`);
+        let value;
+        if (field.type === 'secret') {
+            value = await prompt.secret(field.label, {
+                default: current,
+                placeholder: current ? maskValue(current) : '(não definido)',
+                validate: (candidate) => validateField(field, candidate),
+            });
+        }
+        else {
+            const fallback = current || field.default || '';
+            value = await prompt.ask(field.label, {
+                default: fallback,
+                placeholder: current ? current : field.default ? `${field.default} (default)` : undefined,
+                validate: (candidate) => validateField(field, candidate),
+            });
+        }
+        if (value !== current) {
+            // Aceitar o default de uma chave ausente NÃO materializa a chave: o
+            // aplicativo já aplica esse default, e gravar tudo a cada Enter enchi o
+            // .env de ruído. Só persiste mudança explícita.
+            const acceptedDefault = current === '' && value === (field.default ?? '');
+            if (acceptedDefault) {
+                prompt.info(`${field.key} não definida — vale o default ${value}`);
+                continue;
+            }
+            env.set(field.key, value);
+            changed.add(field.key);
+            const shown = field.type === 'secret' ? maskValue(value) : value;
+            prompt.success(`${field.key} → ${shown}`);
+        }
+    }
+}
+//# sourceMappingURL=config-wizard.js.map

package/dist/config-wizard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-wizard.js","sourceRoot":"","sources":["../src/config-wizard.ts"],"names":[],"mappings":"AAAA,gDAAgD;AAChD,EAAE;AACF,8DAA8D;AAC9D,uEAAuE;AACvE,mEAAmE;AACnE,wEAAwE;AACxE,EAAE;AACF,6EAA6E;AAC7E,2EAA2E;AAC3E,uCAAuC;AAEvC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EACL,UAAU,EACV,YAAY,EACZ,gBAAgB,EAChB,WAAW,EACX,aAAa,GAEd,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAiB,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAkBtF,2CAA2C;AAC3C,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,IAAI,CAAC,KAAK;QAAE,OAAO,gBAAgB,CAAC;IACpC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACtD,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,YAAY,CAAC,KAA2B,EAAE,KAAa;IACrE,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,KAAK,EAAE,IAAI,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;IACtD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,YAAY,CAAC,GAAuB;IAClD,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,OAAO,GAAG;SACP,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;AACvD,CAAC;AAQD;;;GAGG;AACH,MAAM,UAAU,OAAO,CAAC,KAAe;IACrC,MAAM,IAAI,GAAc,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAEpC,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1C,MAAM,CAAC,IAAI,CAAC,oBAAoB,GAAG,GAAG,CAAC,CAAC;YACxC,SAAS;QACX,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CACT,uBAAuB,GAAG,sCAAsC;gBAC9D,qDAAqD,CACxD,CAAC;YACF,SAAS;QACX,CAAC;QAED,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC5C,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,KAAK,OAAO,EAAE,CAAC,CAAC;YAClC,SAAS;QACX,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACnC,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC1B,CAAC;AAED,SAAS,OAAO,CAAC,GAAW;IAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC/B,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,GAAG,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAE7E,yEAAyE;IACzE,0CAA0C;IAC1C,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/E,OAAO,EAAE,GAAG,EAAE,IAAI,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAC9D,CAAC;AAED,SAAS,SAAS,CAAC,GAAY,EAAE,WAAoB;IACnD,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC5D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAElC,OAAO,CAAC,GAAG,CAAC,OAAO,OAAO,CAAC,KAAK,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACtD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACrC,kDAAkD;YAClD,MAAM,KAAK,GACT,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;YACjE,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAA4B,EAAE;IAClE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAEtC,4EAA4E;IAC5E,MAAM,KAAK,GAAG,cAAc,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACpE,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7B,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC;IAE9C,qDAAqD;IACrD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,KAAK,MAAM,KAAK,IAAI,MAAM;gBAAE,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;YACxD,OAAO,CAAC,CAAC;QACX,CAAC;QAED,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACxC,IAAI,MAAM,KAAK,KAAK,CAAC,KAAK;gBAAE,SAAS;YACrC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YAChC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;YAC/D,OAAO,CAAC,CAAC;QACX,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,MAAM,2BAA2B,OAAO,mBAAmB,CAAC,CAAC;QACtF,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;YAC9B,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAC/B,+CAA+C;YAC/C,MAAM,KAAK,GAAG,KAAK,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;YAC9D,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,KAAK,IAAI,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,yEAAyE;IACzE,mEAAmE;IACnE,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;QACrC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC;QAC1C,OAAO,CAAC,CAAC;IACX,CAAC;IAED,kEAAkE;IAClE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClD,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;QAChE,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;QAClE,OAAO,CAAC,KAAK,CAAC,0EAA0E,CAAC,CAAC;QAC1F,OAAO,CAAC,KAAK,CAAC,+DAA+D,CAAC,CAAC;QAC/E,OAAO,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;QAChF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,OAAO,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;AACvF,CAAC;AASD,KAAK,UAAU,cAAc,CAC3B,MAAc,EACd,GAAY,EACZ,GAAmB;IAEnB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,MAAM,WAAW,GAAG,GAAS,EAAE;QAC7B,SAAS,GAAG,IAAI,CAAC;QACjB,MAAM,CAAC,KAAK,CAAC,OAAO,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QACjF,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAEpC,IAAI,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,kBAAkB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,sBAAsB,CAAC,CAAC;QACxD,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,qEAAqE,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;QAEjE,MAAM,MAAM,GAAG,GAA2B,EAAE;YAC1C,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC;YAC3B,KAAK,MAAM,GAAG,IAAI,OAAO;gBAAE,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACzD,OAAO,GAAG,CAAC;QACb,CAAC,CAAC;QAEF,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC7D,IAAI,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC;QAEzB,6DAA6D;QAC7D,IAAI,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3C,MAAM,CAAC,KAAK,CAAC,uBAAuB,MAAM,kBAAkB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACrF,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,CAAC;QACX,CAAC;QAED,SAAS,CAAC;YACR,IAAI,SAAS;gBAAE,OAAO,GAAG,CAAC;YAE1B,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;oBAC7C,KAAK,EAAE,OAAO,CAAC,EAAE;oBACjB,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,IAAI,EAAE,GAAG,OAAO,CAAC,IAAI,MAAM,gBAAgB,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,SAAS;iBAClF,CAAC,CAAC,CAAC;gBACJ,OAAO,CAAC,IAAI,CAAC;oBACX,KAAK,EAAE,QAAQ;oBACf,KAAK,EAAE,uBAAuB;oBAC9B,IAAI,EAAE,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,SAAS;iBACnE,CAAC,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBAE5E,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACrD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;oBACxB,YAAY,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;oBACnC,SAAS;gBACX,CAAC;gBACD,IAAI,MAAM,KAAK,QAAQ;oBAAE,MAAM;gBAC/B,MAAM,GAAG,MAAM,CAAC;YAClB,CAAC;YAED,MAAM,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;YACvD,MAAM,GAAG,SAAS,CAAC;YAEnB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;YAClF,IAAI,CAAC,IAAI;gBAAE,MAAM;QACnB,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;YACpD,OAAO,CAAC,CAAC;QACX,CAAC;QAED,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAC7B,UAAU,OAAO,CAAC,IAAI,sBAAsB,GAAG,CAAC,OAAO,GAAG,EAC1D,EAAE,YAAY,EAAE,IAAI,EAAE,CACvB,CAAC;QACF,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;YAC9C,OAAO,CAAC,CAAC;QACX,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnB,MAAM,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,sCAAsC,CAAC,CAAC;QACtE,MAAM,CAAC,IAAI,CAAC,kFAAkF,CAAC,CAAC;QAChG,OAAO,CAAC,CAAC;IACX,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAC9C,MAAM,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,MAAc,EAAE,GAAY,EAAE,OAAoB;IACtE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzB,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAC1C,OAAO;IACT,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,KAAK,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAClE,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,KAAK,IAAI,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,MAAc,EACd,GAAY,EACZ,SAAiB,EACjB,MAAoC,EACpC,OAAoB;IAEpB,MAAM,OAAO,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IACvC,IAAI,CAAC,OAAO;QAAE,OAAO;IAErB,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IACrD,MAAM,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,KAAK,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAErD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;QACjD,OAAO;IACT,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAEzC,4EAA4E;QAC5E,IAAI,KAAK,CAAC,GAAG,KAAK,YAAY,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5D,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,kDAAkD,EAAE;gBACxF,YAAY,EAAE,IAAI;aACnB,CAAC,CAAC;YACH,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,MAAM,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC;gBAClC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBAC3B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACvB,MAAM,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC;gBACvD,SAAS;YACX,CAAC;QACH,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC;QAE1E,IAAI,KAAa,CAAC;QAClB,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5B,KAAK,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE;gBACvC,OAAO,EAAE,OAAO;gBAChB,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,gBAAgB;gBAC5D,QAAQ,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,SAAS,CAAC;aACzD,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,QAAQ,GAAG,OAAO,IAAI,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;YAChD,KAAK,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE;gBACpC,OAAO,EAAE,QAAQ;gBACjB,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC,CAAC,SAAS;gBACzF,QAAQ,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,SAAS,CAAC;aACzD,CAAC,CAAC;QACL,CAAC;QAED,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;YACtB,oEAAoE;YACpE,wEAAwE;YACxE,gDAAgD;YAChD,MAAM,eAAe,GAAG,OAAO,KAAK,EAAE,IAAI,KAAK,KAAK,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;YAC1E,IAAI,eAAe,EAAE,CAAC;gBACpB,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,GAAG,kCAAkC,KAAK,EAAE,CAAC,CAAC;gBACnE,SAAS;YACX,CAAC;YAED,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACvB,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YACjE,MAAM,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,GAAG,MAAM,KAAK,EAAE,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/deploy.d.ts

@@ -0,0 +1,20 @@
+import { Prompt } from './prompt.js';
+import { type Runner } from './docker.js';
+export type DeployTarget = 'docker' | 'pm2';
+export interface DeployOptions {
+    cwd?: string;
+    /** `--target docker|pm2` (pula o menu). */
+    target?: string;
+    /** `--yes`: sem prompts, usa defaults. */
+    yes?: boolean;
+    /** `--force`: permite rodar dentro de container (não recomendado). */
+    force?: boolean;
+    /** `--no-cache`: build Docker sem cache. */
+    noCache?: boolean;
+    /** `--install`: atualiza pacotes antes do deploy PM2. */
+    install?: boolean;
+    runner?: Runner;
+    prompt?: Prompt;
+}
+export declare function runDeploy(opts?: DeployOptions): Promise<number>;
+//# sourceMappingURL=deploy.d.ts.map

package/dist/deploy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../src/deploy.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAiB,KAAK,MAAM,EAAE,MAAM,aAAa,CAAC;AAIzD,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,KAAK,CAAC;AAE5C,MAAM,WAAW,aAAa;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,2CAA2C;IAC3C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0CAA0C;IAC1C,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,sEAAsE;IACtE,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,4CAA4C;IAC5C,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,yDAAyD;IACzD,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAqRD,wBAAsB,SAAS,CAAC,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,CA8CzE"}

package/dist/deploy.js

@@ -0,0 +1,304 @@
+// @oktis-works/cms - `okcms deploy` (novo comando unificado)
+//
+// Menu interativo para escolher o tipo de deploy:
+//
+//   1. Docker blue/green  (padrão para produção)
+//   2. PM2 (processos no host)
+//
+// - Docker: usa o fluxo blue/green completo (build → migrations → swap → worker)
+// - PM2: instala/atualiza pacotes + configura ecosystem.config.js + pm2 reload
+//
+// Histórico unificado em `.deploy/update-history.json`.
+import { existsSync, readFileSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { Prompt } from './prompt.js';
+import { defaultRunner } from './docker.js';
+import { deployBlueGreen } from './bluegreen.js';
+import { resolveDeployChoices } from './update.js';
+const PM2_ECOSYSTEM_TEMPLATE = `// ecosystem.config.js — gerado por okcms deploy (PM2)
+// Edite conforme necessário e rode: pm2 reload all
+
+module.exports = {
+  apps: [
+    {
+      name: 'okcms-api',
+      script: 'bunx',
+      args: '@oktis-works/api',
+      env: { NODE_ENV: 'production', PORT: 3000 },
+      instances: 1,
+      autorestart: true,
+      watch: false,
+      max_memory_restart: '500M',
+    },
+    {
+      name: 'okcms-admin',
+      script: 'bunx',
+      args: '@oktis-works/admin',
+      env: { NODE_ENV: 'production', PORT: 3011 },
+      instances: 1,
+      autorestart: true,
+      watch: false,
+      max_memory_restart: '500M',
+    },
+    {
+      name: 'okcms-web',
+      script: 'bunx',
+      args: '@oktis-works/web',
+      env: { NODE_ENV: 'production', WEB_PORT: 3001 },
+      instances: 1,
+      autorestart: true,
+      watch: false,
+      max_memory_restart: '500M',
+    },
+    {
+      name: 'okcms-worker',
+      script: 'bunx',
+      args: '@oktis-works/worker',
+      env: { NODE_ENV: 'production', WORKER_MODE: 'pm2' },
+      instances: 1,
+      autorestart: true,
+      watch: false,
+      max_memory_restart: '500M',
+    },
+  ],
+};
+`;
+/** Verifica se PM2 está instalado globalmente. */
+async function checkPm2Installed(runner) {
+    const result = runner('pm2', ['--version'], { timeoutMs: 10_000 });
+    return result.ok;
+}
+/** Instala PM2 globalmente via bun/npm. */
+async function installPm2(runner) {
+    const bunResult = runner('bun', ['add', '-g', 'pm2'], { inherit: true, timeoutMs: 120_000 });
+    if (bunResult.ok)
+        return true;
+    const npmResult = runner('npm', ['install', '-g', 'pm2'], { inherit: true, timeoutMs: 120_000 });
+    return npmResult.ok;
+}
+/** Gera/atualiza ecosystem.config.js se não existir ou se forçado. */
+function ensureEcosystemConfig(cwd, force = false) {
+    const path = join(cwd, 'ecosystem.config.js');
+    if (existsSync(path) && !force)
+        return false;
+    writeFileSync(path, PM2_ECOSYSTEM_TEMPLATE, 'utf-8');
+    return true;
+}
+/** Snapshot do package.json para rollback PM2. */
+function snapshotPackageJson(cwd) {
+    const path = join(cwd, 'package.json');
+    return readFileSync(path, 'utf-8');
+}
+/** Atualiza pacotes no modo PM2 (mesmo fluxo do download). */
+async function pm2UpdatePackages(cwd, runner, prompt, install) {
+    const { scanOutdated } = await import('./update.js');
+    const scan = await scanOutdated(cwd, (m) => prompt.write(m + '\n'));
+    if (!scan.installed) {
+        prompt.error('Nenhum pacote @oktis-works/* instalado. Rode `bun install` primeiro.');
+        return { ok: false, scan };
+    }
+    if (scan.outdated.length === 0) {
+        prompt.success('Todos os pacotes já estão em dia.');
+        return { ok: true, scan };
+    }
+    if (!install) {
+        prompt.info('Use --install para atualizar os pacotes antes do deploy PM2.');
+        return { ok: false, scan };
+    }
+    prompt.write('\nAtualizando pacotes...\n');
+    const specs = scan.outdated.map((e) => `${e.pkg}@latest`);
+    const result = runner('bun', ['add', ...specs], { cwd, inherit: true, timeoutMs: 600_000 });
+    if (!result.ok) {
+        const npmResult = runner('npm', ['install', ...specs], { cwd, inherit: true, timeoutMs: 600_000 });
+        if (!npmResult.ok) {
+            prompt.error('Falha ao atualizar pacotes.');
+            return { ok: false, scan };
+        }
+    }
+    return { ok: true, scan };
+}
+/** Roda migrations no host (necessário para PM2 e Docker). */
+async function runMigrations(cwd, runner, prompt) {
+    const { migrateInvocation } = await import('./bluegreen.js');
+    const { command, args } = migrateInvocation();
+    prompt.write('\nRodando migrations no host...\n');
+    const result = runner(command, args, { cwd, inherit: true, timeoutMs: 120_000 });
+    if (!result.ok) {
+        prompt.error('Migrations falharam — deploy abortado.');
+        return false;
+    }
+    prompt.success('Migrations aplicadas.');
+    return true;
+}
+/** Deploy PM2: atualiza pacotes (opcional) + migrations + pm2 reload. */
+async function deployPm2(cwd, opts, prompt, runner) {
+    const pm2Ok = await checkPm2Installed(runner);
+    if (!pm2Ok) {
+        prompt.warn('PM2 não encontrado globalmente.');
+        if (opts.yes !== true) {
+            const installIt = await prompt.confirm('Instalar PM2 globalmente agora? (bun add -g pm2)', {
+                defaultValue: true,
+            });
+            if (!installIt) {
+                prompt.error('PM2 é obrigatório para este modo. Instale manualmente: bun add -g pm2');
+                return 1;
+            }
+        }
+        const installed = await installPm2(runner);
+        if (!installed) {
+            prompt.error('Falha ao instalar PM2.');
+            return 1;
+        }
+        prompt.success('PM2 instalado globalmente.');
+    }
+    // ecosystem.config.js
+    const created = ensureEcosystemConfig(cwd, false);
+    if (created)
+        prompt.info('ecosystem.config.js criado (padrão).');
+    // Snapshot para rollback
+    const pkgSnapshot = snapshotPackageJson(cwd);
+    // Atualiza pacotes se --install
+    let scan = { installed: false, outdated: [] };
+    if (opts.install) {
+        const result = await pm2UpdatePackages(cwd, runner, prompt, true);
+        if (!result.ok)
+            return 1;
+        scan = result.scan;
+    }
+    else {
+        // Ainda faz scan para histórico
+        scan = await (await import('./update.js')).scanOutdated(cwd);
+    }
+    // Migrations (obrigatório)
+    const migOk = await runMigrations(cwd, runner, prompt);
+    if (!migOk)
+        return 1;
+    // pm2 reload all
+    prompt.write('\nRecarregando processos PM2...\n');
+    const reload = runner('pm2', ['reload', 'all', '--update-env'], { cwd, inherit: true, timeoutMs: 60_000 });
+    if (!reload.ok) {
+        prompt.error('pm2 reload falhou.');
+        return 1;
+    }
+    prompt.success('Deploy PM2 concluído.');
+    // Histórico
+    const { addHistoryEntry } = await import('./history.js');
+    const pkg = await import('../package.json', { with: { type: 'json' } });
+    addHistoryEntry(cwd, {
+        mode: 'pm2',
+        at: new Date().toISOString(),
+        cliVersion: pkg.default.version,
+        packages: scan.outdated.map((e) => ({ name: e.name, from: e.current, to: e.latest })),
+        message: `Deploy PM2 — ${scan.outdated.length} pacote(s) atualizado(s)`,
+        packageJsonSnapshot: pkgSnapshot,
+    }, pkg.default.version);
+    // Atualiza docs
+    const { updateProjectDocs } = await import('./docs-updater.js');
+    const updated = updateProjectDocs(cwd);
+    if (updated.length > 0)
+        prompt.success(`Docs atualizados: ${updated.join(', ')}`);
+    return 0;
+}
+/** Deploy Docker: reusa o fluxo blue/green do update.ts. */
+async function deployDocker(cwd, opts, prompt, runner) {
+    // Reusa a lógica do update --mode deploy
+    const scan = await (await import('./update.js')).scanOutdated(cwd, (m) => prompt.write(m + '\n'));
+    if (!scan.installed) {
+        prompt.error('Projeto sem node_modules/@oktis-works. Rode `bun install` primeiro.');
+        return 1;
+    }
+    const choices = await resolveDeployChoices({ noCache: opts.noCache, removeOrphans: false, keepOrphans: false, yes: opts.yes }, prompt);
+    const interactive = prompt.interactive && opts.yes !== true;
+    if (interactive) {
+        prompt.heading('Resumo do deploy blue/green (Docker)');
+        prompt.info(`pacotes: ${scan.outdated.length} atualização(ões)`);
+        prompt.info(`build: ${choices.noCache ? 'sem cache (rebuild limpo)' : 'com cache de camadas'}`);
+        prompt.info('ordem: build → migrations no host → edge → health → swap → worker → down');
+        const confirmed = await prompt.confirm('Iniciar deploy Docker blue/green?', { defaultValue: true });
+        if (!confirmed) {
+            prompt.warn('Cancelado.');
+            return 0;
+        }
+    }
+    const result = await deployBlueGreen({
+        cwd,
+        runner,
+        choices,
+        packages: scan.outdated.map((e) => `${e.pkg}@latest`),
+        installAll: !scan.installed,
+        log: (m) => prompt.write(m + '\n'),
+        warn: (m) => prompt.write(m + '\n'),
+    });
+    if (result.ok) {
+        // Histórico
+        const { addHistoryEntry } = await import('./history.js');
+        const pkg = await import('../package.json', { with: { type: 'json' } });
+        addHistoryEntry(cwd, {
+            mode: 'deploy',
+            at: new Date().toISOString(),
+            cliVersion: pkg.default.version,
+            packages: scan.outdated.map((e) => ({ name: e.name, from: e.current, to: e.latest })),
+            lane: result.lane,
+            previousLane: result.previousLane,
+            message: `Deploy blue/green → lane ${result.lane} (era ${result.previousLane ?? 'n/a'})`,
+        }, pkg.default.version);
+        // Atualiza docs
+        const { updateProjectDocs } = await import('./docs-updater.js');
+        const updated = updateProjectDocs(cwd);
+        if (updated.length > 0)
+            prompt.success(`Docs atualizados: ${updated.join(', ')}`);
+    }
+    return result.ok ? 0 : 1;
+}
+export async function runDeploy(opts = {}) {
+    const cwd = opts.cwd ?? process.cwd();
+    const prompt = opts.prompt ?? new Prompt();
+    const ownsPrompt = opts.prompt === undefined;
+    const runner = opts.runner ?? defaultRunner;
+    const guard = (await import('./guards.js')).assertHostOnly('okcms deploy', { force: opts.force });
+    if (!guard.ok) {
+        console.error(guard.message);
+        if (ownsPrompt)
+            prompt.close();
+        return 1;
+    }
+    try {
+        let target;
+        if (opts.target !== undefined) {
+            const t = opts.target.trim().toLowerCase();
+            if (t === 'docker' || t === 'bluegreen' || t === 'blue-green')
+                target = 'docker';
+            else if (t === 'pm2' || t === 'process')
+                target = 'pm2';
+            else {
+                prompt.error(`--target inválido: ${opts.target} — use "docker" ou "pm2"`);
+                return 1;
+            }
+        }
+        else if (prompt.interactive && opts.yes !== true) {
+            target = await prompt.select('Como deseja fazer o deploy?', [
+                {
+                    value: 'docker',
+                    label: 'Docker blue/green (recomendado para produção)',
+                    hint: 'build → migrations → healthcheck → swap proxy → worker drenado',
+                },
+                {
+                    value: 'pm2',
+                    label: 'PM2 (processos no host)',
+                    hint: 'atualiza pacotes → migrations → pm2 reload all',
+                },
+            ], { defaultValue: 'docker' });
+        }
+        else {
+            target = 'docker';
+        }
+        if (target === 'pm2')
+            return await deployPm2(cwd, opts, prompt, runner);
+        return await deployDocker(cwd, opts, prompt, runner);
+    }
+    finally {
+        if (ownsPrompt)
+            prompt.close();
+    }
+}
+//# sourceMappingURL=deploy.js.map