@podosoft/podokit 0.16.4 → 0.17.1

package/dist/deploy-schema.js

@@ -0,0 +1,261 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MANAGED_RUNTIME_CONFIG_KEYS = exports.STABLE_SEMVER_TAG_PATTERN = exports.SENSITIVE_KEY = exports.DNS_LABEL = exports.PROFILE_NAME = void 0;
+exports.containsUrlCredentials = containsUrlCredentials;
+exports.isRecord = isRecord;
+exports.assertOnlyKeys = assertOnlyKeys;
+exports.requiredRecord = requiredRecord;
+exports.requiredString = requiredString;
+exports.optionalString = optionalString;
+exports.requiredNumber = requiredNumber;
+exports.parseRequiredKeys = parseRequiredKeys;
+exports.parseCommand = parseCommand;
+exports.validateDnsLabel = validateDnsLabel;
+exports.validateDnsSubdomain = validateDnsSubdomain;
+exports.parseImageReference = parseImageReference;
+exports.validateImage = validateImage;
+exports.validateImageRepository = validateImageRepository;
+exports.parseReleaseProfile = parseReleaseProfile;
+exports.parseRuntimeConfig = parseRuntimeConfig;
+exports.validateHttpsOrigin = validateHttpsOrigin;
+exports.parseVerification = parseVerification;
+exports.profileDirectory = profileDirectory;
+exports.profilePath = profilePath;
+const node_path_1 = require("node:path");
+exports.PROFILE_NAME = /^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/;
+exports.DNS_LABEL = /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/;
+const IMAGE_NAME = /^(?:[a-z0-9]+(?:[._-][a-z0-9]+)*(?::[1-9][0-9]{0,4})?\/)?(?:[a-z0-9]+(?:[._-][a-z0-9]+)*\/)*[a-z0-9]+(?:[._-][a-z0-9]+)*$/;
+const IMAGE_TAG = /^[A-Za-z0-9_][A-Za-z0-9_.-]{0,127}$/;
+exports.SENSITIVE_KEY = /(password|passphrase|secret|token|private.?key|credential|access.?key|api.?keys?|signing.?key|encryption.?key)/i;
+exports.STABLE_SEMVER_TAG_PATTERN = "^v(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)$";
+/** Keys PodoKit derives itself, so a profile may not set them. */
+exports.MANAGED_RUNTIME_CONFIG_KEYS = ["PORT", "BACKEND_INTERNAL_URL"];
+function containsUrlCredentials(value) {
+    if (!value.includes("://"))
+        return false;
+    try {
+        const parsed = new URL(value);
+        return parsed.username !== "" || parsed.password !== "";
+    }
+    catch {
+        return false;
+    }
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function assertOnlyKeys(value, allowed, field) {
+    const unexpected = Object.keys(value).filter((key) => !allowed.includes(key));
+    if (unexpected.length) {
+        throw new Error(`Deployment profile field "${field}" contains unknown key(s): ${unexpected.join(", ")}.`);
+    }
+}
+function requiredRecord(parent, key) {
+    const value = parent[key];
+    if (!isRecord(value))
+        throw new Error(`Deployment profile field "${key}" must be an object.`);
+    return value;
+}
+function requiredString(parent, key) {
+    const value = parent[key];
+    if (typeof value !== "string" || value.trim() === "") {
+        throw new Error(`Deployment profile field "${key}" must be a non-empty string.`);
+    }
+    return value;
+}
+function optionalString(parent, key) {
+    const value = parent[key];
+    if (value === null || value === undefined)
+        return null;
+    if (typeof value !== "string" || value.trim() === "") {
+        throw new Error(`Deployment profile field "${key}" must be a string or null.`);
+    }
+    return value;
+}
+function requiredNumber(parent, key) {
+    const value = parent[key];
+    if (typeof value !== "number" || !Number.isInteger(value) || value < 1) {
+        throw new Error(`Deployment profile field "${key}" must be a positive integer.`);
+    }
+    return value;
+}
+function parseRequiredKeys(value, field) {
+    if (!Array.isArray(value)) {
+        throw new Error(`Deployment profile field "${field}" must be a string array.`);
+    }
+    const keys = value.map((entry) => {
+        if (typeof entry !== "string" || !/^[A-Z][A-Z0-9_]*$/.test(entry)) {
+            throw new Error(`Deployment profile field "${field}" contains an invalid environment key.`);
+        }
+        return entry;
+    });
+    if (new Set(keys).size !== keys.length) {
+        throw new Error(`Deployment profile field "${field}" contains duplicate keys.`);
+    }
+    return keys.sort();
+}
+function parseCommand(value, field) {
+    if (!Array.isArray(value) || value.length === 0) {
+        throw new Error(`Deployment profile field "${field}" must be a non-empty string array.`);
+    }
+    return value.map((entry, index) => {
+        if (typeof entry !== "string" || entry.trim() === "") {
+            throw new Error(`Deployment profile field "${field}[${index}]" must be a non-empty string.`);
+        }
+        if (/[\u0000-\u001f\u007f]/.test(entry)) {
+            throw new Error(`Deployment profile field "${field}[${index}]" must not contain control characters.`);
+        }
+        return entry;
+    });
+}
+function validateDnsLabel(value, field) {
+    if (!exports.DNS_LABEL.test(value)) {
+        throw new Error(`Deployment profile field "${field}" must be a Kubernetes DNS label.`);
+    }
+}
+function validateDnsSubdomain(value, field) {
+    if (value.length > 253 || !value.split(".").every((label) => exports.DNS_LABEL.test(label))) {
+        throw new Error(`Deployment profile field "${field}" must be a Kubernetes DNS subdomain.`);
+    }
+}
+function parseImageReference(value) {
+    if (value.length > 512 || value.includes("://") || /[\s\u0000-\u001f\u007f]/.test(value)) {
+        return null;
+    }
+    const at = value.indexOf("@");
+    if (at !== -1 && at !== value.lastIndexOf("@"))
+        return null;
+    const digest = at === -1 ? null : value.slice(at + 1);
+    const tagged = at === -1 ? value : value.slice(0, at);
+    const lastSlash = tagged.lastIndexOf("/");
+    const lastColon = tagged.lastIndexOf(":");
+    const hasTag = lastColon > lastSlash;
+    const name = hasTag ? tagged.slice(0, lastColon) : tagged;
+    const tag = hasTag ? tagged.slice(lastColon + 1) : null;
+    if (!IMAGE_NAME.test(name) ||
+        (tag !== null && !IMAGE_TAG.test(tag)) ||
+        (digest !== null && !/^sha256:[a-f0-9]{64}$/.test(digest))) {
+        return null;
+    }
+    return { name, tag, digest };
+}
+function validateImage(value, field) {
+    const parsed = parseImageReference(value);
+    if (!parsed || parsed.tag === "latest" || (!parsed.tag && !parsed.digest)) {
+        throw new Error(`Deployment profile field "${field}" must use an explicit non-latest image tag or digest.`);
+    }
+}
+function validateImageRepository(value, field) {
+    const parsed = parseImageReference(value);
+    if (!parsed || parsed.tag || parsed.digest) {
+        throw new Error(`Deployment profile field "${field}" must be an image repository without a tag or digest.`);
+    }
+}
+function parseReleaseProfile(release) {
+    assertOnlyKeys(release, ["strategy", "tagPattern", "apiRepository", "webRepository"], "release");
+    const tagPattern = requiredString(release, "tagPattern");
+    if (tagPattern !== exports.STABLE_SEMVER_TAG_PATTERN) {
+        throw new Error("Deployment release.tagPattern must require stable vMAJOR.MINOR.PATCH tags.");
+    }
+    if (release.strategy !== "shared-tag") {
+        throw new Error("Deployment release.strategy must be shared-tag.");
+    }
+    const apiRepository = requiredString(release, "apiRepository");
+    const webRepository = requiredString(release, "webRepository");
+    validateImageRepository(apiRepository, "release.apiRepository");
+    validateImageRepository(webRepository, "release.webRepository");
+    return { strategy: "shared-tag", tagPattern, apiRepository, webRepository };
+}
+function parseRuntimeConfig(runtimeConfig) {
+    const parsed = {};
+    for (const [key, entry] of Object.entries(runtimeConfig)) {
+        if (!/^[A-Z][A-Z0-9_]*$/.test(key)) {
+            throw new Error(`Deployment runtimeConfig key "${key}" must be an uppercase environment name.`);
+        }
+        if (exports.SENSITIVE_KEY.test(key)) {
+            throw new Error(`Deployment runtimeConfig key "${key}" may contain a secret; use a secret store.`);
+        }
+        if (exports.MANAGED_RUNTIME_CONFIG_KEYS.includes(key)) {
+            throw new Error(`Deployment runtimeConfig key "${key}" is managed by PodoKit.`);
+        }
+        if (typeof entry !== "string") {
+            throw new Error(`Deployment runtimeConfig value "${key}" must be a string.`);
+        }
+        if (containsUrlCredentials(entry)) {
+            throw new Error(`Deployment runtimeConfig value "${key}" contains URL credentials; use a secret store.`);
+        }
+        parsed[key] = entry;
+    }
+    return parsed;
+}
+function validateHttpsOrigin(value) {
+    let parsed;
+    try {
+        parsed = new URL(value);
+    }
+    catch {
+        throw new Error(`Deployment verification baseUrl "${value}" is invalid.`);
+    }
+    if (parsed.username || parsed.password) {
+        throw new Error("Deployment verification baseUrl must not contain URL credentials; use a credential-free HTTPS origin.");
+    }
+    if (parsed.protocol !== "https:" || parsed.pathname !== "/" || parsed.search || parsed.hash) {
+        throw new Error("Deployment verification baseUrl must be an HTTPS origin without a path.");
+    }
+}
+function parseVerification(verification) {
+    assertOnlyKeys(verification, ["baseUrl", "checks"], "verification");
+    const baseUrl = requiredString(verification, "baseUrl");
+    validateHttpsOrigin(baseUrl);
+    const baseOrigin = new URL(baseUrl).origin;
+    const checksValue = verification.checks;
+    if (!Array.isArray(checksValue) || checksValue.length === 0) {
+        throw new Error("Deployment verification.checks must be a non-empty array.");
+    }
+    const checks = checksValue.map((entry, index) => {
+        if (!isRecord(entry)) {
+            throw new Error(`Deployment verification.checks[${index}] must be an object.`);
+        }
+        assertOnlyKeys(entry, ["path", "expectedStatus", "expectedJson"], `verification.checks[${index}]`);
+        const path = requiredString(entry, "path");
+        if (!path.startsWith("/") ||
+            path.startsWith("//") ||
+            path.includes("\\") ||
+            /[\u0000-\u001f\u007f]/.test(path) ||
+            new URL(path, baseUrl).origin !== baseOrigin) {
+            throw new Error("Every deployment verification path must be an absolute URL path.");
+        }
+        const expectedStatus = requiredNumber(entry, "expectedStatus");
+        if (expectedStatus < 100 || expectedStatus > 599) {
+            throw new Error("Deployment verification expectedStatus must be an HTTP status.");
+        }
+        const expectedJsonValue = entry.expectedJson;
+        let expectedJson;
+        if (expectedJsonValue !== undefined) {
+            if (!isRecord(expectedJsonValue)) {
+                throw new Error("Deployment verification expectedJson must be an object.");
+            }
+            expectedJson = {};
+            for (const [key, value] of Object.entries(expectedJsonValue)) {
+                if (value !== null &&
+                    typeof value !== "string" &&
+                    typeof value !== "number" &&
+                    typeof value !== "boolean") {
+                    throw new Error("Deployment verification expectedJson values must be scalar.");
+                }
+                expectedJson[key] = value;
+            }
+        }
+        return { path, expectedStatus, ...(expectedJson ? { expectedJson } : {}) };
+    });
+    return { baseUrl, checks };
+}
+function profileDirectory(projectRoot) {
+    return (0, node_path_1.join)((0, node_path_1.resolve)(projectRoot), ".podokit", "deploy");
+}
+function profilePath(projectRoot, name) {
+    if (!exports.PROFILE_NAME.test(name)) {
+        throw new Error(`Invalid deployment profile name "${name}".`);
+    }
+    return (0, node_path_1.join)(profileDirectory(projectRoot), `${name}.json`);
+}

package/dist/index.d.ts

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
 import { type PackageManager } from "./create";
 import { type LocaleDirection } from "./locale";
+import { type DeployDriver } from "./deploy-driver";
 interface ParsedArgs {
     command?: string;
     name?: string;
@@ -22,8 +23,14 @@ interface ParsedArgs {
     revision?: number;
     context?: string;
     clusterFingerprint?: string;
+    endpointFingerprint?: string;
+    driver?: DeployDriver;
+    secretsDir?: string;
     host?: string;
     json: boolean;
+    build: boolean;
+    clean: boolean;
+    revert: boolean;
 }
 export declare function parseArgs(argv: string[]): ParsedArgs;
 export {};

package/dist/index.js

@@ -17,6 +17,11 @@ const locale_1 = require("./locale");
 const deploy_1 = require("./deploy");
 const deploy_profile_1 = require("./deploy-profile");
 const deploy_render_1 = require("./deploy-render");
+const deploy_driver_1 = require("./deploy-driver");
+const deploy_compose_profile_1 = require("./deploy-compose-profile");
+const deploy_compose_render_1 = require("./deploy-compose-render");
+const deploy_compose_1 = require("./deploy-compose");
+const deploy_compose_sync_1 = require("./deploy-compose-sync");
 const HELP = `podo — PodoKit project generator
 
 Usage:
@@ -27,7 +32,8 @@ Usage:
   podo diff                List PodoKit-managed files you have edited
   podo doctor              Check framework versions against supported ranges
   podo dev <action> [...]  Run the shared, portless container development gateway
-  podo deploy <action>     Plan, apply, verify, or roll back a Kubernetes deployment
+  podo deploy <action>     Plan, apply, verify, or roll back a deployment
+                           (Kubernetes/Helm or Docker Compose)
   podo locale <command>    Add, validate, activate, or list JSON locales
   podo update [--apply]    Preview (or apply) what a version update would change
   podo eject <path...>     Take ownership of managed files (update skips them)
@@ -59,10 +65,11 @@ Example:
   npx @podosoft/podokit create my-app --template todo
   cd my-app && npx @podosoft/podokit add auth
 `;
-const DEPLOY_HELP = `podo deploy — Kubernetes and Helm deployment workflow
+const DEPLOY_HELP = `podo deploy — release an application to Kubernetes or Docker Compose
 
 Usage:
-  podo deploy init --profile <name> --context <context> [--host <hostname>]
+  podo deploy init --profile <name> [--driver <driver>] --context <context>
+                   [--host <hostname>] [--secrets-dir <path>]
   podo deploy doctor --profile <name> [--json]
   podo deploy render --profile <name> --release <tag> [--json]
   podo deploy plan --profile <name> --release <tag> [--json]
@@ -70,10 +77,24 @@ Usage:
   podo deploy status --profile <name> [--json]
   podo deploy verify --profile <name> [--json]
   podo deploy rollback --profile <name> --revision <number> [--confirm <plan-hash>]
+  podo deploy sync --profile <name> [--build] [--clean] [--revert] [--json]
 
-The namespace, referenced Secrets, ingress controller, and storage classes must
-already exist. Plan and rollback require access to the profile's exact cluster.
-Apply and rollback require confirmation of the exact plan hash.
+Drivers:
+  kubernetes-helm  (default) Helm releases on an existing cluster. --context is a
+                   kubeconfig context; the namespace, Secrets, IngressClass, and
+                   storage classes must already exist.
+  docker-compose   A Compose project on one Docker host. --context is a Docker
+                   context, local or ssh://; the env files named by the profile
+                   must already exist on that host.
+
+A profile records which driver it uses, so every action after init reads it from
+the profile. Both drivers pin the target by fingerprint, resolve image tags to
+digests, and require apply and rollback to confirm the exact plan hash.
+
+sync is a development shortcut for the docker-compose driver only. It copies local
+build output into the running containers and restarts them, so the deployment runs
+code its image tag does not describe until the next apply recreates the containers.
+It never runs migrations and refuses when runtime dependencies have changed.
 `;
 function parseArgs(argv) {
     const parsed = {
@@ -83,6 +104,9 @@ function parseArgs(argv) {
         adopt: false,
         ai: true,
         json: false,
+        build: false,
+        clean: false,
+        revert: false,
         positionals: [],
     };
     const positionals = [];
@@ -147,12 +171,34 @@ function parseArgs(argv) {
         else if (arg === "--cluster-fingerprint") {
             parsed.clusterFingerprint = argv[++i];
         }
+        else if (arg === "--endpoint-fingerprint") {
+            parsed.endpointFingerprint = argv[++i];
+        }
+        else if (arg === "--driver") {
+            const driver = argv[++i];
+            if (driver !== "kubernetes-helm" && driver !== "docker-compose") {
+                throw new Error(`--driver must be one of: ${deploy_driver_1.DEPLOY_DRIVERS.join(", ")}.`);
+            }
+            parsed.driver = driver;
+        }
+        else if (arg === "--secrets-dir") {
+            parsed.secretsDir = argv[++i];
+        }
         else if (arg === "--host") {
             parsed.host = argv[++i];
         }
         else if (arg === "--json") {
             parsed.json = true;
         }
+        else if (arg === "--build") {
+            parsed.build = true;
+        }
+        else if (arg === "--clean") {
+            parsed.clean = true;
+        }
+        else if (arg === "--revert") {
+            parsed.revert = true;
+        }
         else if (arg !== undefined && !arg.startsWith("-")) {
             positionals.push(arg);
         }
@@ -166,6 +212,118 @@ function fail(message) {
     process.stderr.write(`error: ${message}\n`);
     process.exit(1);
 }
+/**
+ * The docker-compose driver's half of `podo deploy`. It answers the same actions as
+ * the Kubernetes half and enforces the same rule: every mutation echoes back the
+ * exact hash of a plan that was printed first.
+ */
+async function runComposeDeploy(action, args, profileName) {
+    const cwd = process.cwd();
+    if (action === "init") {
+        if (!args.context) {
+            fail("Usage: podo deploy init --profile <name> --driver docker-compose --context <docker-context> [--host <hostname>] [--secrets-dir <path>].");
+        }
+        const endpointFingerprint = args.endpointFingerprint ?? (0, deploy_compose_1.inspectComposeEndpointFingerprint)(args.context);
+        const initialized = (0, deploy_compose_profile_1.initializeComposeProfile)(cwd, profileName, {
+            context: args.context,
+            endpointFingerprint,
+            host: args.host,
+            secretsDirectory: args.secretsDir,
+        });
+        process.stdout.write(args.json
+            ? `${JSON.stringify(initialized, null, 2)}\n`
+            : `Created deployment profile ${initialized.name} at ${initialized.path}.\n`);
+        return;
+    }
+    if (action === "doctor") {
+        // A release makes the doctor probe with the image about to run, and lets it
+        // check registry access at all.
+        const findings = (0, deploy_compose_1.doctorComposeDeployment)(cwd, profileName, undefined, args.release);
+        process.stdout.write(args.json
+            ? `${JSON.stringify(findings, null, 2)}\n`
+            : `${findings.map((f) => `${f.ok ? "ok  " : "FAIL"} ${f.message}`).join("\n")}\n`);
+        if (findings.some((finding) => !finding.ok))
+            process.exitCode = 1;
+        return;
+    }
+    if (action === "render") {
+        if (!args.release)
+            fail("podo deploy render requires --release <tag>.");
+        const profile = (0, deploy_driver_1.loadComposeProfile)(cwd, profileName);
+        const runtime = (0, deploy_compose_render_1.renderComposeDeployment)(cwd, profileName, profile, args.release);
+        process.stdout.write(args.json
+            ? `${JSON.stringify(runtime, null, 2)}\n`
+            : `Rendered Compose project into ${runtime.root}.\n`);
+        return;
+    }
+    if (action === "plan") {
+        if (!args.release)
+            fail("podo deploy plan requires --release <tag>.");
+        const plan = (0, deploy_compose_1.planComposeDeployment)(cwd, profileName, args.release);
+        process.stdout.write(args.json
+            ? `${JSON.stringify(plan, null, 2)}\n`
+            : `${plan.actions.map((entry) => `${entry.order}. ${entry.description}`).join("\n")}\n` +
+                `${plan.warnings.map((warning) => `warning: ${warning}`).join("\n")}\n` +
+                `Plan hash: ${plan.planHash}\n`);
+        return;
+    }
+    if (action === "apply") {
+        if (!args.release || !args.confirm) {
+            fail("podo deploy apply requires --release <tag> --confirm <plan-hash>.");
+        }
+        const result = await (0, deploy_compose_1.applyComposeDeployment)(cwd, profileName, args.release, args.confirm);
+        process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
+        if (!result.verification.ok)
+            process.exitCode = 1;
+        return;
+    }
+    if (action === "status") {
+        process.stdout.write(`${JSON.stringify((0, deploy_compose_1.getComposeStatus)(cwd, profileName), null, 2)}\n`);
+        return;
+    }
+    if (action === "verify") {
+        const result = await (0, deploy_compose_1.verifyComposeDeployment)(cwd, profileName);
+        process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
+        if (!result.ok)
+            process.exitCode = 1;
+        return;
+    }
+    if (action === "rollback") {
+        if (!args.revision)
+            fail("podo deploy rollback requires --revision <number>.");
+        if (!args.confirm) {
+            const plan = (0, deploy_compose_1.planComposeRollback)(cwd, profileName, args.revision);
+            process.stdout.write(`${JSON.stringify(plan, null, 2)}\nRe-run with --confirm ${plan.planHash}.\n`);
+            return;
+        }
+        const result = await (0, deploy_compose_1.rollbackComposeDeployment)(cwd, profileName, args.revision, args.confirm);
+        process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
+        if (!result.verification.ok)
+            process.exitCode = 1;
+        return;
+    }
+    if (action === "sync") {
+        if (args.revert) {
+            const reverted = await (0, deploy_compose_sync_1.revertComposeSync)(cwd, profileName);
+            process.stdout.write(args.json
+                ? `${JSON.stringify(reverted, null, 2)}\n`
+                : `Recreated ${reverted.services.join(", ")} from the applied Compose project.\n`);
+            return;
+        }
+        const result = await (0, deploy_compose_sync_1.syncComposeDeployment)(cwd, profileName, {
+            build: args.build,
+            clean: args.clean,
+        });
+        process.stdout.write(args.json
+            ? `${JSON.stringify(result, null, 2)}\n`
+            : `${result.plan.warnings.map((warning) => `warning: ${warning}`).join("\n")}\n` +
+                `Copied ${result.plan.artifacts.length} artifact(s) into ${result.restarted.join(", ")}.\n` +
+                "This deployment now runs code its image tag does not describe; " +
+                "podo deploy sync --revert restores the image.\n");
+        return;
+    }
+    fail(`Unknown deploy command "${action}". Use init, doctor, render, plan, apply, status, verify, rollback, or sync.`);
+}
 async function main(argv) {
     const args = parseArgs(argv);
     if (args.help || !args.command) {
@@ -300,6 +458,14 @@ async function main(argv) {
             fail("Deployment commands require --profile <name>.");
         }
         try {
+            // A profile names its own driver, so everything but `init` reads it from disk.
+            const driver = action === "init"
+                ? (args.driver ?? "kubernetes-helm")
+                : (0, deploy_driver_1.readDeploymentDriver)(process.cwd(), profileName);
+            if (driver === "docker-compose") {
+                await runComposeDeploy(action, args, profileName);
+                return;
+            }
             if (action === "init") {
                 if (!args.context) {
                     fail("Usage: podo deploy init --profile <name> --context <context> [--host <hostname>].");
@@ -376,6 +542,12 @@ async function main(argv) {
                 process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
                 return;
             }
+            if (action === "sync") {
+                // Not a gap to fill later. There is no image to swap artifacts into: a
+                // cluster schedules pods across nodes from a registry, so the equivalent
+                // shortcut would have to reach every node and would stop being a shortcut.
+                fail("podo deploy sync is only available for the docker-compose driver. On a cluster, build and roll out a release.");
+            }
             fail(`Unknown deploy command "${action}". Use init, doctor, render, plan, apply, status, verify, or rollback.`);
         }
         catch (err) {

package/dist/lib.d.ts

@@ -16,6 +16,15 @@ export { assertReleaseTag, deploymentProfileDigest, initializeDeploymentProfile,
 export type { DependencyMode, DeployProfileV1, DeploymentProfileSummary, InitializeDeploymentProfileOptions, ObjectStorageDependencyProfile, RedisDependencyProfile, ResourceProfile, StatefulDependencyProfile, WorkloadProfile, } from "./deploy-profile";
 export { renderDeployment } from "./deploy-render";
 export type { DeploymentRuntime } from "./deploy-render";
+export { DEPLOY_DRIVERS, assertAnyReleaseTag, listAnyDeploymentProfiles, loadAnyDeploymentProfile, loadComposeProfile, loadKubernetesProfile, readDeploymentDriver, } from "./deploy-driver";
+export type { AnyDeployProfile, DeployDriver } from "./deploy-driver";
+export { initializeComposeProfile, parseComposeProfile } from "./deploy-compose-profile";
+export type { DockerComposeProfileV1 } from "./deploy-compose-profile";
+export { renderComposeDeployment } from "./deploy-compose-render";
+export type { ComposeRuntime } from "./deploy-compose-render";
+export { applyComposeDeployment, doctorComposeDeployment, getComposeStatus, inspectComposeEndpointFingerprint, planComposeDeployment, planComposeRollback, rollbackComposeDeployment, verifyComposeDeployment, } from "./deploy-compose";
+export type { ComposePlan, ComposeStatus } from "./deploy-compose";
+export { describeDeploymentTarget, doctorAnyDeployment, getAnyDeploymentStatus, planAnyDeployment, verifyAnyDeployment, } from "./deploy-dispatch";
 /** Absolute path to the templates bundled in this installed package. */
 export declare function builtinTemplatesDir(): string;
 /** Absolute path to the modules bundled in this installed package. */

package/dist/lib.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.renderDeployment = exports.loadDeploymentProfile = exports.listDeploymentProfiles = exports.initializeDeploymentProfile = exports.deploymentProfileDigest = exports.assertReleaseTag = exports.verifyDeployment = exports.rollbackDeployment = exports.planRollback = exports.planDeployment = exports.inspectClusterFingerprint = exports.getDeploymentStatus = exports.doctorDeployment = exports.applyDeployment = exports.runDevCommand = exports.resolveDevRuntime = exports.renderRuntimeCompose = exports.renderRoute = exports.readDevConfig = exports.summarize = exports.planUpdate = exports.SUPPORTED_FRAMEWORKS = exports.doctor = exports.diff = exports.status = exports.addModule = exports.listModules = exports.isKnownTemplate = exports.TEMPLATE_NAMES = exports.DEFAULT_TEMPLATE = exports.TEMPLATES = exports.create = void 0;
+exports.verifyComposeDeployment = exports.rollbackComposeDeployment = exports.planComposeRollback = exports.planComposeDeployment = exports.inspectComposeEndpointFingerprint = exports.getComposeStatus = exports.doctorComposeDeployment = exports.applyComposeDeployment = exports.renderComposeDeployment = exports.parseComposeProfile = exports.initializeComposeProfile = exports.readDeploymentDriver = exports.loadKubernetesProfile = exports.loadComposeProfile = exports.loadAnyDeploymentProfile = exports.listAnyDeploymentProfiles = exports.assertAnyReleaseTag = exports.DEPLOY_DRIVERS = exports.renderDeployment = exports.loadDeploymentProfile = exports.listDeploymentProfiles = exports.initializeDeploymentProfile = exports.deploymentProfileDigest = exports.assertReleaseTag = exports.verifyDeployment = exports.rollbackDeployment = exports.planRollback = exports.planDeployment = exports.inspectClusterFingerprint = exports.getDeploymentStatus = exports.doctorDeployment = exports.applyDeployment = exports.runDevCommand = exports.resolveDevRuntime = exports.renderRuntimeCompose = exports.renderRoute = exports.readDevConfig = exports.summarize = exports.planUpdate = exports.SUPPORTED_FRAMEWORKS = exports.doctor = exports.diff = exports.status = exports.addModule = exports.listModules = exports.isKnownTemplate = exports.TEMPLATE_NAMES = exports.DEFAULT_TEMPLATE = exports.TEMPLATES = exports.create = void 0;
+exports.verifyAnyDeployment = exports.planAnyDeployment = exports.getAnyDeploymentStatus = exports.doctorAnyDeployment = exports.describeDeploymentTarget = void 0;
 exports.builtinTemplatesDir = builtinTemplatesDir;
 exports.builtinModulesDir = builtinModulesDir;
 // Library entry point: the reusable functions behind the `podo` CLI, for other
@@ -47,6 +48,34 @@ Object.defineProperty(exports, "listDeploymentProfiles", { enumerable: true, get
 Object.defineProperty(exports, "loadDeploymentProfile", { enumerable: true, get: function () { return deploy_profile_1.loadDeploymentProfile; } });
 var deploy_render_1 = require("./deploy-render");
 Object.defineProperty(exports, "renderDeployment", { enumerable: true, get: function () { return deploy_render_1.renderDeployment; } });
+var deploy_driver_1 = require("./deploy-driver");
+Object.defineProperty(exports, "DEPLOY_DRIVERS", { enumerable: true, get: function () { return deploy_driver_1.DEPLOY_DRIVERS; } });
+Object.defineProperty(exports, "assertAnyReleaseTag", { enumerable: true, get: function () { return deploy_driver_1.assertAnyReleaseTag; } });
+Object.defineProperty(exports, "listAnyDeploymentProfiles", { enumerable: true, get: function () { return deploy_driver_1.listAnyDeploymentProfiles; } });
+Object.defineProperty(exports, "loadAnyDeploymentProfile", { enumerable: true, get: function () { return deploy_driver_1.loadAnyDeploymentProfile; } });
+Object.defineProperty(exports, "loadComposeProfile", { enumerable: true, get: function () { return deploy_driver_1.loadComposeProfile; } });
+Object.defineProperty(exports, "loadKubernetesProfile", { enumerable: true, get: function () { return deploy_driver_1.loadKubernetesProfile; } });
+Object.defineProperty(exports, "readDeploymentDriver", { enumerable: true, get: function () { return deploy_driver_1.readDeploymentDriver; } });
+var deploy_compose_profile_1 = require("./deploy-compose-profile");
+Object.defineProperty(exports, "initializeComposeProfile", { enumerable: true, get: function () { return deploy_compose_profile_1.initializeComposeProfile; } });
+Object.defineProperty(exports, "parseComposeProfile", { enumerable: true, get: function () { return deploy_compose_profile_1.parseComposeProfile; } });
+var deploy_compose_render_1 = require("./deploy-compose-render");
+Object.defineProperty(exports, "renderComposeDeployment", { enumerable: true, get: function () { return deploy_compose_render_1.renderComposeDeployment; } });
+var deploy_compose_1 = require("./deploy-compose");
+Object.defineProperty(exports, "applyComposeDeployment", { enumerable: true, get: function () { return deploy_compose_1.applyComposeDeployment; } });
+Object.defineProperty(exports, "doctorComposeDeployment", { enumerable: true, get: function () { return deploy_compose_1.doctorComposeDeployment; } });
+Object.defineProperty(exports, "getComposeStatus", { enumerable: true, get: function () { return deploy_compose_1.getComposeStatus; } });
+Object.defineProperty(exports, "inspectComposeEndpointFingerprint", { enumerable: true, get: function () { return deploy_compose_1.inspectComposeEndpointFingerprint; } });
+Object.defineProperty(exports, "planComposeDeployment", { enumerable: true, get: function () { return deploy_compose_1.planComposeDeployment; } });
+Object.defineProperty(exports, "planComposeRollback", { enumerable: true, get: function () { return deploy_compose_1.planComposeRollback; } });
+Object.defineProperty(exports, "rollbackComposeDeployment", { enumerable: true, get: function () { return deploy_compose_1.rollbackComposeDeployment; } });
+Object.defineProperty(exports, "verifyComposeDeployment", { enumerable: true, get: function () { return deploy_compose_1.verifyComposeDeployment; } });
+var deploy_dispatch_1 = require("./deploy-dispatch");
+Object.defineProperty(exports, "describeDeploymentTarget", { enumerable: true, get: function () { return deploy_dispatch_1.describeDeploymentTarget; } });
+Object.defineProperty(exports, "doctorAnyDeployment", { enumerable: true, get: function () { return deploy_dispatch_1.doctorAnyDeployment; } });
+Object.defineProperty(exports, "getAnyDeploymentStatus", { enumerable: true, get: function () { return deploy_dispatch_1.getAnyDeploymentStatus; } });
+Object.defineProperty(exports, "planAnyDeployment", { enumerable: true, get: function () { return deploy_dispatch_1.planAnyDeployment; } });
+Object.defineProperty(exports, "verifyAnyDeployment", { enumerable: true, get: function () { return deploy_dispatch_1.verifyAnyDeployment; } });
 /** Absolute path to the templates bundled in this installed package. */
 function builtinTemplatesDir() {
     return (0, node_path_1.join)(__dirname, "templates");

package/dist/templates/fullstack-nest-svelte/AGENTS.md

@@ -69,7 +69,8 @@ Useful commands:
 - `podo remove <module>` — un-apply a module (inverse of add; refuses if another module needs it, keeps files you edited).
 - `podo status` / `podo diff` — see your local edits vs. what PodoKit generated.
 - `podo update` — pull in template/module improvements (3-way merges your edits; never touches owned files).
-- `podo deploy` — plan, apply, verify, or roll back an immutable Kubernetes release. Use `.agents/skills/podokit-deploy`.
+- `podo deploy` — plan, apply, verify, or roll back an immutable release on Kubernetes or one Docker host. Tag `vX.Y.Z` to build and push the images (`.github/workflows/release.yml`; check its runner — GitHub-hosted minutes are free for public repositories only). Use `.agents/skills/podokit-deploy`.
+- `podo deploy sync` — copy local build output into a running Compose deployment and restart it, for iterating without a release. Not a release: no image is published and the next `apply` discards it. Use `.agents/skills/podokit-deploy-fast`.
 
 ## Commit conventions