@rebasepro/cli 0.24.1-canary.g56af4a4 → 0.24.1-canary.gcb918fc

package/dist/{build-CFwUx-Ff.js → build-BHvC6Bjs.js}

@@ -6,7 +6,7 @@ import { n as cliVersion } from "./version-Buyyo1ut.js";
 import { c as buildableApps, d as findBackendApp, f as formatAppAddress, o as ManifestError, p as loadManifest, v as staticAppAddress } from "./manifest-DzlC60WX.js";
 import { b as toolStdio, o as buildBundle, p as detectFrameworkDepDrift, s as buildStaticBundle, t as DEFAULT_BUNDLE_DIR } from "./bundle-BQhP_xiA.js";
 import { i as staticBuildEnv, n as foldFrontendIntoBundle, t as assertBuiltForPath } from "./fold-static-C1EtHlfV.js";
-import { l as writeResourceGraphFile, n as deriveOptionsFor, r as deriveResourceGraph } from "./derive-RPIsAVO4.js";
+import { l as writeResourceGraphFile, n as deriveOptionsFor, r as deriveResourceGraph } from "./derive-QMPMcQZJ.js";
 import chalk from "chalk";
 import fs from "fs";
 import path from "path";
@@ -333,4 +333,4 @@ async function runWorkspaceBuilds(projectRoot) {
 //#endregion
 export { build_exports as n, buildAssetApp as t };
 
-//# sourceMappingURL=build-CFwUx-Ff.js.map
+//# sourceMappingURL=build-BHvC6Bjs.js.map

package/dist/{build-CFwUx-Ff.js.map → build-BHvC6Bjs.js.map}

@@ -1 +1 @@
-{"version":3,"file":"build-CFwUx-Ff.js","names":[],"sources":["../src/commands/build.ts"],"sourcesContent":["/**\n * CLI command: rebase build [app...]\n *\n * Builds the apps a repository declares in `rebase.json`.\n *\n * For a `backend` app this produces a **bundle** — compiled collections,\n * functions and schema plus a manifest — which is the artifact the runtime\n * loads. For `static` and bundled `admin` apps it runs the declared build\n * command and reports where the output landed.\n *\n * A project with no manifest, or one whose backend has been ejected to its own\n * entrypoint, falls back to the previous behaviour: run every workspace's own\n * `build` script. Nothing that built before stops building.\n */\nimport fs from \"fs\";\nimport path from \"path\";\nimport chalk from \"chalk\";\nimport { execa } from \"execa\";\nimport type { RebaseAppConfig, RebaseStaticAppConfig } from \"@rebasepro/types\";\nimport { requireProjectRoot } from \"../utils/project\";\nimport { parseCommandArgs, UsageError, wantsHelp } from \"../utils/args\";\nimport { detectPackageManager, getPMCommands } from \"../utils/package-manager\";\nimport { cliVersion } from \"../utils/version\";\nimport { toolStdio } from \"../utils/tool-stdio\";\nimport {\n    buildableApps,\n    findBackendApp,\n    formatAppAddress,\n    loadManifest,\n    ManifestError,\n    resolveBackendPaths,\n    staticAppAddress\n} from \"../manifest\";\nimport {\n    buildBundle,\n    buildStaticBundle,\n    detectFrameworkDepDrift,\n    DEFAULT_BUNDLE_DIR,\n    VENDOR_SIZE_WARN_BYTES\n} from \"../bundle\";\nimport { assertBuiltForPath, foldFrontendIntoBundle, staticBuildEnv } from \"../fold-static\";\nimport { deriveOptionsFor, deriveResourceGraph, writeResourceGraphFile } from \"../resources/derive\";\n\nfunction printHelp(): void {\n    console.log(`\n${chalk.bold(\"rebase build\")} — build the apps declared in rebase.json\n\n${chalk.bold(\"Usage\")}\n  rebase build [app...]        Build the named apps (default: all)\n\n${chalk.bold(\"Options\")}\n  --output, --out <dir>        Bundle output directory (default: ${DEFAULT_BUNDLE_DIR});\n                               one app at a time\n  --skip-type-check            Compile without type checking (faster; use for iteration only)\n  --skip-schema                Do not regenerate the database schema from collections\n  --no-static                  Do not fold the frontend into the backend bundle (each\n                               static app still gets its own bundle)\n  --skip-static-build          Fold the frontend as already built, without running its\n                               build command — for CI that built it in an earlier step\n  --no-vendor                  Do not install dependencies into the bundle (they\n                               install on every pod start instead, ~40-60s slower)\n  --vendor                     Install them whatever the tree's size — for a\n                               deploy that builds from source and never uploads it\n  --workspace                  Run every workspace's own build script instead\n  -h, --help                   Show this help\n\n${chalk.bold(\"Examples\")}\n  rebase build                 Build every app in this repository\n  rebase build backend         Build only the backend bundle\n  rebase build web             Build only the \"web\" static app\n`.trim());\n}\n\n/**\n * The two commands that turn a custom-runtime app into an image.\n *\n * Exported for the test, because the failure this replaced was in the printed\n * text and nowhere else. It said:\n *\n *     docker build -f backend/Dockerfile .\n *\n * for every custom backend, and the `.` was a guess — `context` was validated,\n * stored on the config, and read by nothing. For the reference project that\n * guess is wrong: `app/backend/Dockerfile` opens by copying `pnpm-lock.yaml`\n * and `pnpm-workspace.yaml`, which live at the monorepo root, so the command\n * `rebase build` handed you died on its first instruction. The deploy that\n * actually works, `infra/cloudbuild.yaml`, has always said\n * `-f app/backend/Dockerfile .` from the root.\n *\n * `dockerfile` is relative to `rebase.json`; `context` is too, and may point\n * above it. Docker resolves `-f` against the working directory, not the\n * context, so the path has to be re-expressed against wherever the command\n * runs — which is what the old line never did and is the whole reason it\n * could not be right for both.\n */\nexport function dockerBuildHint(\n    projectRoot: string,\n    name: string,\n    app: { dockerfile?: string; context?: string }\n): string[] {\n    const dockerfile = app.dockerfile ?? \"Dockerfile\";\n    const context = app.context ?? \".\";\n    const contextDir = path.resolve(projectRoot, context);\n    const fromContext = path.relative(contextDir, path.resolve(projectRoot, dockerfile));\n\n    const build = `${chalk.cyan(`npm run build --workspace ${name}`)}`;\n\n    // A Dockerfile outside its own context is legal to `docker build` but means\n    // nothing it copies is reachable, so there is no command to offer. Say what\n    // is wrong instead of printing one that cannot work.\n    if (fromContext.startsWith(\"..\")) {\n        return [\n            chalk.dim(`    ${build}`),\n            chalk.yellow(`    ⚠ ${dockerfile} is outside the build context (${context}) — nothing it COPYs is reachable.`),\n            chalk.dim(`      Widen \"context\" in rebase.json, or move the Dockerfile inside it.`)\n        ];\n    }\n\n    const docker = chalk.cyan(`docker build -f ${fromContext} .`);\n    return context === \".\"\n        ? [chalk.dim(`    ${build}  then  ${docker}`)]\n        : [chalk.dim(`    ${build}`), chalk.dim(`    ${chalk.cyan(`cd ${context}`)} && ${docker}`)];\n}\n\nexport async function buildCommand(rawArgs: string[] = []): Promise<void> {\n    if (wantsHelp(rawArgs)) {\n        printHelp();\n        return;\n    }\n\n    const { flags: args, positionals: requested } = parseCommandArgs({\n        spec: {\n            \"--output\": String,\n            // `--out` kept as an accepted alias. `generate-sdk` has always\n            // spelled this `--output`, and two names for one concept across one\n            // CLI is a thing you have to remember rather than know. `--output`\n            // is canonical now; `--out` still works so no script breaks.\n            \"--out\": \"--output\",\n            \"--skip-type-check\": Boolean,\n            /* Do not install the declared dependencies into the bundle. The\n               bundle still works — it installs them at boot, as every bundle did\n               before vendoring existed — so this is for a build that must not\n               shell out to npm, not for a smaller artifact. */\n            \"--no-vendor\": Boolean,\n            /* Keep the installed tree whatever its size. The size ceiling\n               protects an upload that a source-built deploy never performs, so\n               that path needs a way to say so. */\n            \"--vendor\": Boolean,\n            \"--skip-schema\": Boolean,\n            /* Do not fold the frontend into the backend bundle. For a project\n               that publishes its frontend elsewhere and does not want the assets\n               travelling with its API. */\n            \"--no-static\": Boolean,\n            /* Fold assets that are already built, without re-running the app's\n               build command — for a CI job that built the frontend in an earlier\n               step. */\n            \"--skip-static-build\": Boolean,\n            \"--workspace\": Boolean\n        },\n        rawArgs,\n        commandWords: 1,\n        command: \"build\"\n    });\n\n    const projectRoot = requireProjectRoot();\n\n    if (args[\"--workspace\"]) {\n        await runWorkspaceBuilds(projectRoot);\n        return;\n    }\n\n    let loaded;\n    try {\n        loaded = loadManifest(projectRoot);\n    } catch (err) {\n        if (err instanceof ManifestError) {\n            console.error(chalk.red(`✗ ${err.message}`));\n            for (const issue of err.issues) {\n                console.error(chalk.red(`    ${issue.path ? `${issue.path}: ` : \"\"}${issue.message}`));\n            }\n            process.exit(1);\n        }\n        throw err;\n    }\n\n    const { manifest, source } = loaded;\n\n    let targets = buildableApps(manifest);\n    if (requested.length > 0) {\n        const known = new Set(targets.map(t => t.name));\n        const unknown = requested.filter(name => !known.has(name));\n        if (unknown.length > 0) {\n            console.error(chalk.red(`✗ Unknown app(s): ${unknown.join(\", \")}`));\n            console.error(chalk.dim(`  This repository declares: ${targets.map(t => t.name).join(\", \") || \"(none)\"}`));\n            process.exit(1);\n        }\n        targets = targets.filter(t => requested.includes(t.name));\n    }\n\n    if (targets.length === 0) {\n        console.log(chalk.yellow(\"No buildable apps declared. Nothing to do.\"));\n        return;\n    }\n\n    // An ejected backend owns its own build; the workspace scripts are the only\n    // thing that knows how to run it.\n    const backend = findBackendApp(manifest);\n    if (!backend && source === \"synthesized\") {\n        console.log(chalk.dim(\"No rebase.json found — building workspace packages.\\n\"));\n        await runWorkspaceBuilds(projectRoot);\n        return;\n    }\n\n    // `--output` names one bundle directory, resolved from where it was typed.\n    // It is refused for a build that produces several bundles rather than\n    // handed to each: every bundle build empties its directory first, so the\n    // last app built deleted the others' and the build still reported success.\n    const output = args[\"--output\"] ? path.resolve(process.cwd(), args[\"--output\"]) : undefined;\n    const bundled = targets.filter(({ app }) =>\n        (app.type === \"backend\" && app.runtime !== \"custom\") ||\n        (app.type === \"static\" && Boolean(app.build) && Boolean(app.output)));\n    if (output && bundled.length > 1) {\n        throw new UsageError(\n            `--output names one bundle directory, and this build produces ${bundled.length}: ` +\n            `${bundled.map(t => t.name).join(\", \")}. Build one app into it: ` +\n            `rebase build ${bundled[0].name} --output ${args[\"--output\"]}`\n        );\n    }\n\n    console.log(`${chalk.bold(\"Rebase\")} — building ${targets.length} app(s)\\n`);\n\n    // Each static app is built once per run, whichever consumer gets to it\n    // first: folding into the backend bundle, or its own static bundle.\n    const builtApps = new Set<string>();\n\n    for (const { name, app } of targets) {\n        console.log(chalk.cyan(`▸ ${name}`) + chalk.dim(` (${app.type})`));\n\n        if (app.type === \"backend\" && app.runtime === \"custom\") {\n            // An ejected backend's artifact is an IMAGE, not a bundle. Building\n            // one anyway produced a `dist-bundle/` the project never deploys,\n            // which is worse than doing nothing: it looks like the thing that\n            // ships. The workspace's own `build` script compiles this app, and\n            // the Dockerfile turns it into the image.\n            console.log(chalk.dim(\"  custom runtime — this project builds its own image, not a bundle\"));\n            for (const line of dockerBuildHint(projectRoot, name, app)) console.log(line);\n            console.log(\"\");\n            continue;\n        }\n\n        if (app.type === \"backend\") {\n            // Derived per backend app, because each has its own config\n            // directory. Issues are fatal here rather than reported: a bundle\n            // whose manifest is missing a bucket the code declares would deploy\n            // into a tenant with nothing provisioned for it, and the first sign\n            // would be uploads failing in production.\n            const { graph: resourceGraph, issues } = await deriveResourceGraph(deriveOptionsFor(projectRoot, app));\n            if (issues.length > 0) {\n                console.error(chalk.red(`\\n  ✗ ${issues.length} problem(s) in the declared resources:\\n`));\n                for (const issue of issues) console.error(`    ${chalk.bold(issue.path)}  ${issue.message}`);\n                console.error(\"\");\n                process.exitCode = 1;\n                return;\n            }\n            // Written alongside the bundle so the repository records what this\n            // project needs. `rebase resources --check` is what keeps it honest.\n            writeResourceGraphFile(projectRoot, resourceGraph);\n\n            /* The framework pins, read before the build and reported after it.\n               Ranges no single version satisfies are refused by `buildBundle`\n               itself, before it builds anything, for every command that builds\n               a bundle. */\n            const drift = detectFrameworkDepDrift(projectRoot, cliVersion());\n\n            const result = await buildBundle({\n                projectRoot,\n                appName: name,\n                app,\n                outDir: output,\n                runtimeRange: manifest.rebase,\n                resources: resourceGraph,\n                skipTypeCheck: args[\"--skip-type-check\"],\n                skipSchema: args[\"--skip-schema\"],\n                vendor: args[\"--no-vendor\"] ? false : (args[\"--vendor\"] ? true : undefined)\n            });\n            const rel = path.relative(projectRoot, result.outDir);\n            console.log(chalk.green(`  ✓ bundle → ${rel}/`));\n            // A headless build has no schema version — the API is introspected\n            // from the live database at boot — and interpolating it anyway left\n            // the summary ending in a dangling `schema `, which reads as a value\n            // that failed to render rather than one that does not exist.\n            const schemaVersion = result.manifest.schemaVersion;\n            console.log(chalk.dim(\n                `    ${result.collectionCount} collection(s)${schemaVersion ? `, schema ${schemaVersion}` : \"\"}`\n            ));\n            /* Say what the bundle's cold start will be, at the one moment\n               anyone is listening.\n\n               A vendored bundle starts in about five seconds; one that installs\n               at boot takes forty to sixty, on EVERY pod start — an eviction, a\n               node failure, an OOM, a runtime rollout. That is not a build\n               detail, it is what each of those events costs in downtime, and it\n               is invisible until an incident unless it is said here. */\n            if (result.vendor.vendored) {\n                console.log(chalk.dim(`    dependencies installed into the bundle (${result.vendor.target?.os}/${result.vendor.target?.cpu})`));\n                if ((result.vendor.bytes ?? 0) > VENDOR_SIZE_WARN_BYTES) {\n                    const mb = Math.round((result.vendor.bytes ?? 0) / (1024 * 1024));\n                    /* The limit is on the *compressed* upload and this is the\n                       tree on disk, so a number above 100 does not mean the\n                       upload fails — but \"201 MB, close to the 100 MB limit\"\n                       reads as nonsense and got ignored for exactly that\n                       reason. Say which quantity is which. */\n                    console.log(chalk.yellow(\n                        `    ⚠ the installed tree is ${mb} MB on disk — enough to risk the control plane's 100 MB ` +\n                        \"limit on the compressed upload\"));\n                    console.log(chalk.dim(\"      Shrink the declared dependencies, or rebuild with --no-vendor.\"));\n                }\n            } else if (Object.keys(result.manifest.deps.declared).length === 0) {\n                // Nothing to install is not a degraded state — this bundle\n                // already starts as fast as a vendored one. Warning here would\n                // train people to ignore the warning that matters.\n                console.log(chalk.dim(\"    no dependencies to install — nothing to bundle\"));\n            } else {\n                console.log(chalk.yellow(`    ⚠ dependencies not bundled: ${result.vendor.skipped}`));\n                console.log(chalk.dim(\"      They install on every pod start instead, which is ~40-60s of cold start.\"));\n            }\n\n            if (result.manifest.hooks.native) {\n                const names = (result.manifest.hooks.nativeModules ?? []).map(m => m.name).join(\", \");\n                console.log(chalk.yellow(`    ⚠ native dependencies detected: ${names}`));\n                console.log(chalk.dim(\"      These cannot run on the managed runtime. See `rebase doctor`.\"));\n            }\n\n            /* Framework pins older than this CLI.\n\n               Warned here because this is the only moment anyone can be told.\n               Locally every `@rebasepro/*` resolves through pnpm's workspace and\n               `link:` overrides to the checkout, so the version strings in\n               package.json are never exercised — the project runs fine on a\n               developer's machine while declaring something years old. Those\n               strings are first honoured when the runtime npm-installs them in\n               the cloud, and by then the symptom is a tenant that boots and then\n               misbehaves against its database.\n\n               A warning rather than a hard failure: the CLI cannot know that a\n               newer package has actually been published, and refusing to build\n               over a guess would be worse than saying it out loud. (`drift` was\n               read before the build, above.) */\n            if (drift.behind.length > 0) {\n                console.log(chalk.yellow(`    ⚠ framework dependencies older than this CLI (${cliVersion()}):`));\n                for (const dep of drift.behind) {\n                    console.log(chalk.dim(`      ${dep.name}@${dep.range}  (${dep.file})`));\n                }\n                console.log(chalk.dim(\"      The image supplies the server, but your bundle supplies the database\"));\n                console.log(chalk.dim(\"      driver — a newer runtime does not update it.\"));\n                console.log(chalk.dim(`      Run \\`${upgradeToThisCli()}\\`, then rebuild.`));\n            } else if (drift.disagreeing.length > 0) {\n                console.log(chalk.yellow(`    ⚠ mixed @rebasepro versions declared: ${drift.disagreeing.join(\", \")}`));\n                console.log(chalk.dim(\"      These are published together and expect to run together.\"));\n                console.log(chalk.dim(`      Run \\`${upgradeToThisCli()}\\` to pin them alike, then rebuild.`));\n            }\n\n            /* Fold the project's static apps into the backend bundle, so ONE\n               runtime serves the site at `/`, the admin at `/admin` and the API\n               at `/api` — the shape the scaffolded template produces and the\n               shape a custom container already had.\n\n               Without this, moving a project to the managed runtime silently\n               removed its website: the API answered perfectly and every page\n               404'd, because the managed pod runs the backend bundle and nothing\n               else. Parity with the container being replaced is the only honest\n               baseline for calling managed a drop-in.\n\n               `--no-static` opts out, for a project that publishes its frontend\n               somewhere else and does not want the assets in its bundle. */\n            if (!args[\"--no-static\"]) {\n                const folded = await foldFrontendIntoBundle({\n                    projectRoot,\n                    manifest,\n                    bundleDir: result.outDir,\n                    skipBuild: args[\"--skip-static-build\"] === true,\n                    builtApps,\n                    log: (m) => console.log(m)\n                }).catch((err: unknown) => {\n                    console.error(chalk.red(`    ✗ ${err instanceof Error ? err.message : String(err)}`));\n                    process.exit(1);\n                });\n                for (const outcome of folded ?? []) {\n                    console.log(\n                        chalk.green(`    ✓ ${outcome.appName} folded in`) +\n                        chalk.dim(` (${outcome.fileCount} file(s) → served at ${formatAppAddress(outcome)})`)\n                    );\n                }\n            }\n        } else if (app.type === \"static\") {\n            await buildAssetApp(projectRoot, name, app, manifest.rebase, output, { builtApps }).catch((err: unknown) => {\n                console.error(chalk.red(`  ✗ ${err instanceof Error ? err.message : String(err)}`));\n                process.exit(1);\n            });\n        }\n\n        console.log(\"\");\n    }\n\n    console.log(chalk.green(\"✓ Build complete.\"));\n}\n\n/**\n * Build a static app and package it into a static bundle.\n *\n * Runs the app's own build command, checks it produced the declared output, then\n * packages that output into a `static`-kind bundle — the same deployable shape as\n * a backend bundle, so a frontend or admin app deploys through the identical\n * path and runs on the identical image, just serving files instead of an API.\n *\n * Throws when the build fails or produces nothing usable, so the caller answers\n * in its own way: `rebase build` with a red line, `rebase cloud deploy --json`\n * with its JSON error.\n */\nexport async function buildAssetApp(\n    projectRoot: string,\n    name: string,\n    app: RebaseAppConfig,\n    runtimeRange: string,\n    outOverride?: string,\n    /**\n     * `quietStdout`: every line, the build command's included, goes to stderr. See `toolStdio`.\n     * `builtApps`: the static apps already built in this run (see `FoldOptions.builtApps`).\n     */\n    options: { quietStdout?: boolean; builtApps?: Set<string> } = {}\n): Promise<string | undefined> {\n    const asset = app as RebaseStaticAppConfig;\n    // The path part is what the app is built for and mounted at; the hostname,\n    // when `path` names one, only travels in the bundle.\n    const address = staticAppAddress(name, asset);\n    const basePath = address.path;\n    const say = (line: string): void => {\n        if (options.quietStdout) console.error(line);\n        else console.log(line);\n    };\n\n    if (!asset.build) {\n        say(chalk.dim(\"  no build command declared — skipping\"));\n        return undefined;\n    }\n\n    if (options.builtApps?.has(name)) {\n        say(chalk.dim(\"  built once already in this run — packaging that output\"));\n    } else {\n        try {\n            await execa(asset.build, {\n                cwd: projectRoot,\n                stdio: toolStdio(options.quietStdout),\n                shell: true,\n                env: staticBuildEnv(basePath, name)\n            });\n        } catch {\n            throw new Error(`build command failed for \"${name}\"`);\n        }\n        options.builtApps?.add(name);\n    }\n\n    if (!asset.output) {\n        say(chalk.yellow(\"  no output directory declared — built, but nothing to bundle\"));\n        return undefined;\n    }\n\n    const outputPath = path.join(projectRoot, asset.output);\n    if (!fs.existsSync(outputPath)) {\n        // The command exited 0 but produced nothing where the manifest says it\n        // should. Bundling that would ship an empty site.\n        throw new Error(`declared output \"${asset.output}\" does not exist after building`);\n    }\n\n    // The assets were built for `basePath`; refusing here is the difference\n    // between a build error and a blank page nobody can diagnose.\n    const indexHtml = path.join(outputPath, \"index.html\");\n    if (fs.existsSync(indexHtml)) {\n        assertBuiltForPath(fs.readFileSync(indexHtml, \"utf8\"), basePath, name);\n    }\n\n    // Per-app bundle directory, so a project's several static apps do not clobber\n    // one another or the backend's `dist-bundle`.\n    const outDir = outOverride\n        ? path.resolve(process.cwd(), outOverride)\n        : path.join(projectRoot, `dist-bundle-${name}`);\n    const result = buildStaticBundle({\n        projectRoot,\n        appName: name,\n        assetsDir: outputPath,\n        outDir,\n        runtimeRange,\n        path: basePath,\n        host: address.host,\n        spa: asset.spa ?? true,\n        cms: asset.cms\n    });\n    const rel = path.relative(projectRoot, result.outDir);\n    say(\n        chalk.green(`  ✓ static bundle → ${rel}/`) +\n        chalk.dim(` (${result.fileCount} file(s) → served at ${formatAppAddress(address)})`)\n    );\n    return result.outDir;\n}\n\n/**\n * The `rebase upgrade` line the drift warnings print.\n *\n * Aimed at this CLI's own version, because that is what the warning measured\n * against: \"older than this CLI\" is answered by moving to exactly this CLI, not\n * to whatever `latest` happens to be — which, on a canary, is older still.\n */\nfunction upgradeToThisCli(): string {\n    const version = cliVersion();\n    return version === \"unknown\" ? \"rebase upgrade\" : `rebase upgrade --to ${version}`;\n}\n\n/** The pre-manifest behaviour: build every workspace package. */\nasync function runWorkspaceBuilds(projectRoot: string): Promise<void> {\n    const pm = detectPackageManager(projectRoot);\n    const cmds = getPMCommands(pm);\n    const buildCmd = cmds.runAll(\"build\");\n\n    console.log(`${chalk.bold(\"Rebase\")} — Building all workspaces with ${chalk.cyan(pm)}...\\n`);\n\n    try {\n        await execa(buildCmd[0], buildCmd.slice(1), {\n            cwd: projectRoot,\n            stdio: \"inherit\"\n        });\n    } catch {\n        console.error(chalk.red(\"\\n✗ Build failed.\"));\n        process.exit(1);\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2CA,SAAS,YAAkB;CACvB,QAAQ,IAAI;EACd,MAAM,KAAK,cAAc,EAAE;;EAE3B,MAAM,KAAK,OAAO,EAAE;;;EAGpB,MAAM,KAAK,SAAS,EAAE;mEAC2C,mBAAmB;;;;;;;;;;;;;;;EAepF,MAAM,KAAK,UAAU,EAAE;;;;EAIvB,KAAK,CAAC;AACR;;;;;;;;;;;;;;;;;;;;;;;AAwBA,SAAgB,gBACZ,aACA,MACA,KACQ;CACR,MAAM,aAAa,IAAI,cAAc;CACrC,MAAM,UAAU,IAAI,WAAW;CAC/B,MAAM,aAAa,KAAK,QAAQ,aAAa,OAAO;CACpD,MAAM,cAAc,KAAK,SAAS,YAAY,KAAK,QAAQ,aAAa,UAAU,CAAC;CAEnF,MAAM,QAAQ,GAAG,MAAM,KAAK,6BAA6B,MAAM;CAK/D,IAAI,YAAY,WAAW,IAAI,GAC3B,OAAO;EACH,MAAM,IAAI,OAAO,OAAO;EACxB,MAAM,OAAO,SAAS,WAAW,iCAAiC,QAAQ,mCAAmC;EAC7G,MAAM,IAAI,yEAAyE;CACvF;CAGJ,MAAM,SAAS,MAAM,KAAK,mBAAmB,YAAY,GAAG;CAC5D,OAAO,YAAY,MACb,CAAC,MAAM,IAAI,OAAO,MAAM,UAAU,QAAQ,CAAC,IAC3C,CAAC,MAAM,IAAI,OAAO,OAAO,GAAG,MAAM,IAAI,OAAO,MAAM,KAAK,MAAM,SAAS,EAAE,MAAM,QAAQ,CAAC;AAClG;AAEA,eAAsB,aAAa,UAAoB,CAAC,GAAkB;CACtE,IAAI,UAAU,OAAO,GAAG;EACpB,UAAU;EACV;CACJ;CAEA,MAAM,EAAE,OAAO,MAAM,aAAa,cAAc,iBAAiB;EAC7D,MAAM;GACF,YAAY;GAKZ,SAAS;GACT,qBAAqB;GAKrB,eAAe;GAIf,YAAY;GACZ,iBAAiB;GAIjB,eAAe;GAIf,uBAAuB;GACvB,eAAe;EACnB;EACA;EACA,cAAc;EACd,SAAS;CACb,CAAC;CAED,MAAM,cAAc,mBAAmB;CAEvC,IAAI,KAAK,gBAAgB;EACrB,MAAM,mBAAmB,WAAW;EACpC;CACJ;CAEA,IAAI;CACJ,IAAI;EACA,SAAS,aAAa,WAAW;CACrC,SAAS,KAAK;EACV,IAAI,eAAe,eAAe;GAC9B,QAAQ,MAAM,MAAM,IAAI,KAAK,IAAI,SAAS,CAAC;GAC3C,KAAK,MAAM,SAAS,IAAI,QACpB,QAAQ,MAAM,MAAM,IAAI,OAAO,MAAM,OAAO,GAAG,MAAM,KAAK,MAAM,KAAK,MAAM,SAAS,CAAC;GAEzF,QAAQ,KAAK,CAAC;EAClB;EACA,MAAM;CACV;CAEA,MAAM,EAAE,UAAU,WAAW;CAE7B,IAAI,UAAU,cAAc,QAAQ;CACpC,IAAI,UAAU,SAAS,GAAG;EACtB,MAAM,QAAQ,IAAI,IAAI,QAAQ,KAAI,MAAK,EAAE,IAAI,CAAC;EAC9C,MAAM,UAAU,UAAU,QAAO,SAAQ,CAAC,MAAM,IAAI,IAAI,CAAC;EACzD,IAAI,QAAQ,SAAS,GAAG;GACpB,QAAQ,MAAM,MAAM,IAAI,qBAAqB,QAAQ,KAAK,IAAI,GAAG,CAAC;GAClE,QAAQ,MAAM,MAAM,IAAI,+BAA+B,QAAQ,KAAI,MAAK,EAAE,IAAI,CAAC,CAAC,KAAK,IAAI,KAAK,UAAU,CAAC;GACzG,QAAQ,KAAK,CAAC;EAClB;EACA,UAAU,QAAQ,QAAO,MAAK,UAAU,SAAS,EAAE,IAAI,CAAC;CAC5D;CAEA,IAAI,QAAQ,WAAW,GAAG;EACtB,QAAQ,IAAI,MAAM,OAAO,4CAA4C,CAAC;EACtE;CACJ;CAKA,IAAI,CADY,eAAe,QAC1B,KAAW,WAAW,eAAe;EACtC,QAAQ,IAAI,MAAM,IAAI,uDAAuD,CAAC;EAC9E,MAAM,mBAAmB,WAAW;EACpC;CACJ;CAMA,MAAM,SAAS,KAAK,cAAc,KAAK,QAAQ,QAAQ,IAAI,GAAG,KAAK,WAAW,IAAI,KAAA;CAClF,MAAM,UAAU,QAAQ,QAAQ,EAAE,UAC7B,IAAI,SAAS,aAAa,IAAI,YAAY,YAC1C,IAAI,SAAS,YAAY,QAAQ,IAAI,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAE;CACxE,IAAI,UAAU,QAAQ,SAAS,GAC3B,MAAM,IAAI,WACN,gEAAgE,QAAQ,OAAO,IAC5E,QAAQ,KAAI,MAAK,EAAE,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,wCACvB,QAAQ,EAAE,CAAC,KAAK,YAAY,KAAK,aACrD;CAGJ,QAAQ,IAAI,GAAG,MAAM,KAAK,QAAQ,EAAE,cAAc,QAAQ,OAAO,UAAU;CAI3E,MAAM,4BAAY,IAAI,IAAY;CAElC,KAAK,MAAM,EAAE,MAAM,SAAS,SAAS;EACjC,QAAQ,IAAI,MAAM,KAAK,KAAK,MAAM,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,EAAE,CAAC;EAEjE,IAAI,IAAI,SAAS,aAAa,IAAI,YAAY,UAAU;GAMpD,QAAQ,IAAI,MAAM,IAAI,oEAAoE,CAAC;GAC3F,KAAK,MAAM,QAAQ,gBAAgB,aAAa,MAAM,GAAG,GAAG,QAAQ,IAAI,IAAI;GAC5E,QAAQ,IAAI,EAAE;GACd;EACJ;EAEA,IAAI,IAAI,SAAS,WAAW;GAMxB,MAAM,EAAE,OAAO,eAAe,WAAW,MAAM,oBAAoB,iBAAiB,aAAa,GAAG,CAAC;GACrG,IAAI,OAAO,SAAS,GAAG;IACnB,QAAQ,MAAM,MAAM,IAAI,SAAS,OAAO,OAAO,yCAAyC,CAAC;IACzF,KAAK,MAAM,SAAS,QAAQ,QAAQ,MAAM,OAAO,MAAM,KAAK,MAAM,IAAI,EAAE,IAAI,MAAM,SAAS;IAC3F,QAAQ,MAAM,EAAE;IAChB,QAAQ,WAAW;IACnB;GACJ;GAGA,uBAAuB,aAAa,aAAa;GAMjD,MAAM,QAAQ,wBAAwB,aAAa,WAAW,CAAC;GAE/D,MAAM,SAAS,MAAM,YAAY;IAC7B;IACA,SAAS;IACT;IACA,QAAQ;IACR,cAAc,SAAS;IACvB,WAAW;IACX,eAAe,KAAK;IACpB,YAAY,KAAK;IACjB,QAAQ,KAAK,iBAAiB,QAAS,KAAK,cAAc,OAAO,KAAA;GACrE,CAAC;GACD,MAAM,MAAM,KAAK,SAAS,aAAa,OAAO,MAAM;GACpD,QAAQ,IAAI,MAAM,MAAM,gBAAgB,IAAI,EAAE,CAAC;GAK/C,MAAM,gBAAgB,OAAO,SAAS;GACtC,QAAQ,IAAI,MAAM,IACd,OAAO,OAAO,gBAAgB,gBAAgB,gBAAgB,YAAY,kBAAkB,IAChG,CAAC;GASD,IAAI,OAAO,OAAO,UAAU;IACxB,QAAQ,IAAI,MAAM,IAAI,+CAA+C,OAAO,OAAO,QAAQ,GAAG,GAAG,OAAO,OAAO,QAAQ,IAAI,EAAE,CAAC;IAC9H,KAAK,OAAO,OAAO,SAAS,KAAA,WAA6B;KACrD,MAAM,KAAK,KAAK,OAAO,OAAO,OAAO,SAAS,MAAM,OAAO,KAAK;KAMhE,QAAQ,IAAI,MAAM,OACd,+BAA+B,GAAG,uFACF,CAAC;KACrC,QAAQ,IAAI,MAAM,IAAI,sEAAsE,CAAC;IACjG;GACJ,OAAO,IAAI,OAAO,KAAK,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,WAAW,GAI7D,QAAQ,IAAI,MAAM,IAAI,oDAAoD,CAAC;QACxE;IACH,QAAQ,IAAI,MAAM,OAAO,mCAAmC,OAAO,OAAO,SAAS,CAAC;IACpF,QAAQ,IAAI,MAAM,IAAI,gFAAgF,CAAC;GAC3G;GAEA,IAAI,OAAO,SAAS,MAAM,QAAQ;IAC9B,MAAM,SAAS,OAAO,SAAS,MAAM,iBAAiB,CAAC,EAAA,CAAG,KAAI,MAAK,EAAE,IAAI,CAAC,CAAC,KAAK,IAAI;IACpF,QAAQ,IAAI,MAAM,OAAO,uCAAuC,OAAO,CAAC;IACxE,QAAQ,IAAI,MAAM,IAAI,qEAAqE,CAAC;GAChG;GAiBA,IAAI,MAAM,OAAO,SAAS,GAAG;IACzB,QAAQ,IAAI,MAAM,OAAO,qDAAqD,WAAW,EAAE,GAAG,CAAC;IAC/F,KAAK,MAAM,OAAO,MAAM,QACpB,QAAQ,IAAI,MAAM,IAAI,SAAS,IAAI,KAAK,GAAG,IAAI,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;IAE1E,QAAQ,IAAI,MAAM,IAAI,4EAA4E,CAAC;IACnG,QAAQ,IAAI,MAAM,IAAI,oDAAoD,CAAC;IAC3E,QAAQ,IAAI,MAAM,IAAI,eAAe,iBAAiB,EAAE,kBAAkB,CAAC;GAC/E,OAAO,IAAI,MAAM,YAAY,SAAS,GAAG;IACrC,QAAQ,IAAI,MAAM,OAAO,6CAA6C,MAAM,YAAY,KAAK,IAAI,GAAG,CAAC;IACrG,QAAQ,IAAI,MAAM,IAAI,gEAAgE,CAAC;IACvF,QAAQ,IAAI,MAAM,IAAI,eAAe,iBAAiB,EAAE,oCAAoC,CAAC;GACjG;GAeA,IAAI,CAAC,KAAK,gBAAgB;IACtB,MAAM,SAAS,MAAM,uBAAuB;KACxC;KACA;KACA,WAAW,OAAO;KAClB,WAAW,KAAK,2BAA2B;KAC3C;KACA,MAAM,MAAM,QAAQ,IAAI,CAAC;IAC7B,CAAC,CAAC,CAAC,OAAO,QAAiB;KACvB,QAAQ,MAAM,MAAM,IAAI,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,GAAG,CAAC;KACpF,QAAQ,KAAK,CAAC;IAClB,CAAC;IACD,KAAK,MAAM,WAAW,UAAU,CAAC,GAC7B,QAAQ,IACJ,MAAM,MAAM,SAAS,QAAQ,QAAQ,WAAW,IAChD,MAAM,IAAI,KAAK,QAAQ,UAAU,uBAAuB,iBAAiB,OAAO,EAAE,EAAE,CACxF;GAER;EACJ,OAAO,IAAI,IAAI,SAAS,UACpB,MAAM,cAAc,aAAa,MAAM,KAAK,SAAS,QAAQ,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,QAAiB;GACxG,QAAQ,MAAM,MAAM,IAAI,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,GAAG,CAAC;GAClF,QAAQ,KAAK,CAAC;EAClB,CAAC;EAGL,QAAQ,IAAI,EAAE;CAClB;CAEA,QAAQ,IAAI,MAAM,MAAM,mBAAmB,CAAC;AAChD;;;;;;;;;;;;;AAcA,eAAsB,cAClB,aACA,MACA,KACA,cACA,aAKA,UAA8D,CAAC,GACpC;CAC3B,MAAM,QAAQ;CAGd,MAAM,UAAU,iBAAiB,MAAM,KAAK;CAC5C,MAAM,WAAW,QAAQ;CACzB,MAAM,OAAO,SAAuB;EAChC,IAAI,QAAQ,aAAa,QAAQ,MAAM,IAAI;OACtC,QAAQ,IAAI,IAAI;CACzB;CAEA,IAAI,CAAC,MAAM,OAAO;EACd,IAAI,MAAM,IAAI,wCAAwC,CAAC;EACvD;CACJ;CAEA,IAAI,QAAQ,WAAW,IAAI,IAAI,GAC3B,IAAI,MAAM,IAAI,0DAA0D,CAAC;MACtE;EACH,IAAI;GACA,MAAM,MAAM,MAAM,OAAO;IACrB,KAAK;IACL,OAAO,UAAU,QAAQ,WAAW;IACpC,OAAO;IACP,KAAK,eAAe,UAAU,IAAI;GACtC,CAAC;EACL,QAAQ;GACJ,MAAM,IAAI,MAAM,6BAA6B,KAAK,EAAE;EACxD;EACA,QAAQ,WAAW,IAAI,IAAI;CAC/B;CAEA,IAAI,CAAC,MAAM,QAAQ;EACf,IAAI,MAAM,OAAO,+DAA+D,CAAC;EACjF;CACJ;CAEA,MAAM,aAAa,KAAK,KAAK,aAAa,MAAM,MAAM;CACtD,IAAI,CAAC,GAAG,WAAW,UAAU,GAGzB,MAAM,IAAI,MAAM,oBAAoB,MAAM,OAAO,gCAAgC;CAKrF,MAAM,YAAY,KAAK,KAAK,YAAY,YAAY;CACpD,IAAI,GAAG,WAAW,SAAS,GACvB,mBAAmB,GAAG,aAAa,WAAW,MAAM,GAAG,UAAU,IAAI;CAQzE,MAAM,SAAS,kBAAkB;EAC7B;EACA,SAAS;EACT,WAAW;EACX,QAPW,cACT,KAAK,QAAQ,QAAQ,IAAI,GAAG,WAAW,IACvC,KAAK,KAAK,aAAa,eAAe,MAAM;EAM9C;EACA,MAAM;EACN,MAAM,QAAQ;EACd,KAAK,MAAM,OAAO;EAClB,KAAK,MAAM;CACf,CAAC;CACD,MAAM,MAAM,KAAK,SAAS,aAAa,OAAO,MAAM;CACpD,IACI,MAAM,MAAM,uBAAuB,IAAI,EAAE,IACzC,MAAM,IAAI,KAAK,OAAO,UAAU,uBAAuB,iBAAiB,OAAO,EAAE,EAAE,CACvF;CACA,OAAO,OAAO;AAClB;;;;;;;;AASA,SAAS,mBAA2B;CAChC,MAAM,UAAU,WAAW;CAC3B,OAAO,YAAY,YAAY,mBAAmB,uBAAuB;AAC7E;;AAGA,eAAe,mBAAmB,aAAoC;CAClE,MAAM,KAAK,qBAAqB,WAAW;CAE3C,MAAM,WADO,cAAc,EACV,CAAA,CAAK,OAAO,OAAO;CAEpC,QAAQ,IAAI,GAAG,MAAM,KAAK,QAAQ,EAAE,kCAAkC,MAAM,KAAK,EAAE,EAAE,MAAM;CAE3F,IAAI;EACA,MAAM,MAAM,SAAS,IAAI,SAAS,MAAM,CAAC,GAAG;GACxC,KAAK;GACL,OAAO;EACX,CAAC;CACL,QAAQ;EACJ,QAAQ,MAAM,MAAM,IAAI,mBAAmB,CAAC;EAC5C,QAAQ,KAAK,CAAC;CAClB;AACJ"}
+{"version":3,"file":"build-BHvC6Bjs.js","names":[],"sources":["../src/commands/build.ts"],"sourcesContent":["/**\n * CLI command: rebase build [app...]\n *\n * Builds the apps a repository declares in `rebase.json`.\n *\n * For a `backend` app this produces a **bundle** — compiled collections,\n * functions and schema plus a manifest — which is the artifact the runtime\n * loads. For `static` and bundled `admin` apps it runs the declared build\n * command and reports where the output landed.\n *\n * A project with no manifest, or one whose backend has been ejected to its own\n * entrypoint, falls back to the previous behaviour: run every workspace's own\n * `build` script. Nothing that built before stops building.\n */\nimport fs from \"fs\";\nimport path from \"path\";\nimport chalk from \"chalk\";\nimport { execa } from \"execa\";\nimport type { RebaseAppConfig, RebaseStaticAppConfig } from \"@rebasepro/types\";\nimport { requireProjectRoot } from \"../utils/project\";\nimport { parseCommandArgs, UsageError, wantsHelp } from \"../utils/args\";\nimport { detectPackageManager, getPMCommands } from \"../utils/package-manager\";\nimport { cliVersion } from \"../utils/version\";\nimport { toolStdio } from \"../utils/tool-stdio\";\nimport {\n    buildableApps,\n    findBackendApp,\n    formatAppAddress,\n    loadManifest,\n    ManifestError,\n    resolveBackendPaths,\n    staticAppAddress\n} from \"../manifest\";\nimport {\n    buildBundle,\n    buildStaticBundle,\n    detectFrameworkDepDrift,\n    DEFAULT_BUNDLE_DIR,\n    VENDOR_SIZE_WARN_BYTES\n} from \"../bundle\";\nimport { assertBuiltForPath, foldFrontendIntoBundle, staticBuildEnv } from \"../fold-static\";\nimport { deriveOptionsFor, deriveResourceGraph, writeResourceGraphFile } from \"../resources/derive\";\n\nfunction printHelp(): void {\n    console.log(`\n${chalk.bold(\"rebase build\")} — build the apps declared in rebase.json\n\n${chalk.bold(\"Usage\")}\n  rebase build [app...]        Build the named apps (default: all)\n\n${chalk.bold(\"Options\")}\n  --output, --out <dir>        Bundle output directory (default: ${DEFAULT_BUNDLE_DIR});\n                               one app at a time\n  --skip-type-check            Compile without type checking (faster; use for iteration only)\n  --skip-schema                Do not regenerate the database schema from collections\n  --no-static                  Do not fold the frontend into the backend bundle (each\n                               static app still gets its own bundle)\n  --skip-static-build          Fold the frontend as already built, without running its\n                               build command — for CI that built it in an earlier step\n  --no-vendor                  Do not install dependencies into the bundle (they\n                               install on every pod start instead, ~40-60s slower)\n  --vendor                     Install them whatever the tree's size — for a\n                               deploy that builds from source and never uploads it\n  --workspace                  Run every workspace's own build script instead\n  -h, --help                   Show this help\n\n${chalk.bold(\"Examples\")}\n  rebase build                 Build every app in this repository\n  rebase build backend         Build only the backend bundle\n  rebase build web             Build only the \"web\" static app\n`.trim());\n}\n\n/**\n * The two commands that turn a custom-runtime app into an image.\n *\n * Exported for the test, because the failure this replaced was in the printed\n * text and nowhere else. It said:\n *\n *     docker build -f backend/Dockerfile .\n *\n * for every custom backend, and the `.` was a guess — `context` was validated,\n * stored on the config, and read by nothing. For the reference project that\n * guess is wrong: `app/backend/Dockerfile` opens by copying `pnpm-lock.yaml`\n * and `pnpm-workspace.yaml`, which live at the monorepo root, so the command\n * `rebase build` handed you died on its first instruction. The deploy that\n * actually works, `infra/cloudbuild.yaml`, has always said\n * `-f app/backend/Dockerfile .` from the root.\n *\n * `dockerfile` is relative to `rebase.json`; `context` is too, and may point\n * above it. Docker resolves `-f` against the working directory, not the\n * context, so the path has to be re-expressed against wherever the command\n * runs — which is what the old line never did and is the whole reason it\n * could not be right for both.\n */\nexport function dockerBuildHint(\n    projectRoot: string,\n    name: string,\n    app: { dockerfile?: string; context?: string }\n): string[] {\n    const dockerfile = app.dockerfile ?? \"Dockerfile\";\n    const context = app.context ?? \".\";\n    const contextDir = path.resolve(projectRoot, context);\n    const fromContext = path.relative(contextDir, path.resolve(projectRoot, dockerfile));\n\n    const build = `${chalk.cyan(`npm run build --workspace ${name}`)}`;\n\n    // A Dockerfile outside its own context is legal to `docker build` but means\n    // nothing it copies is reachable, so there is no command to offer. Say what\n    // is wrong instead of printing one that cannot work.\n    if (fromContext.startsWith(\"..\")) {\n        return [\n            chalk.dim(`    ${build}`),\n            chalk.yellow(`    ⚠ ${dockerfile} is outside the build context (${context}) — nothing it COPYs is reachable.`),\n            chalk.dim(`      Widen \"context\" in rebase.json, or move the Dockerfile inside it.`)\n        ];\n    }\n\n    const docker = chalk.cyan(`docker build -f ${fromContext} .`);\n    return context === \".\"\n        ? [chalk.dim(`    ${build}  then  ${docker}`)]\n        : [chalk.dim(`    ${build}`), chalk.dim(`    ${chalk.cyan(`cd ${context}`)} && ${docker}`)];\n}\n\nexport async function buildCommand(rawArgs: string[] = []): Promise<void> {\n    if (wantsHelp(rawArgs)) {\n        printHelp();\n        return;\n    }\n\n    const { flags: args, positionals: requested } = parseCommandArgs({\n        spec: {\n            \"--output\": String,\n            // `--out` kept as an accepted alias. `generate-sdk` has always\n            // spelled this `--output`, and two names for one concept across one\n            // CLI is a thing you have to remember rather than know. `--output`\n            // is canonical now; `--out` still works so no script breaks.\n            \"--out\": \"--output\",\n            \"--skip-type-check\": Boolean,\n            /* Do not install the declared dependencies into the bundle. The\n               bundle still works — it installs them at boot, as every bundle did\n               before vendoring existed — so this is for a build that must not\n               shell out to npm, not for a smaller artifact. */\n            \"--no-vendor\": Boolean,\n            /* Keep the installed tree whatever its size. The size ceiling\n               protects an upload that a source-built deploy never performs, so\n               that path needs a way to say so. */\n            \"--vendor\": Boolean,\n            \"--skip-schema\": Boolean,\n            /* Do not fold the frontend into the backend bundle. For a project\n               that publishes its frontend elsewhere and does not want the assets\n               travelling with its API. */\n            \"--no-static\": Boolean,\n            /* Fold assets that are already built, without re-running the app's\n               build command — for a CI job that built the frontend in an earlier\n               step. */\n            \"--skip-static-build\": Boolean,\n            \"--workspace\": Boolean\n        },\n        rawArgs,\n        commandWords: 1,\n        command: \"build\"\n    });\n\n    const projectRoot = requireProjectRoot();\n\n    if (args[\"--workspace\"]) {\n        await runWorkspaceBuilds(projectRoot);\n        return;\n    }\n\n    let loaded;\n    try {\n        loaded = loadManifest(projectRoot);\n    } catch (err) {\n        if (err instanceof ManifestError) {\n            console.error(chalk.red(`✗ ${err.message}`));\n            for (const issue of err.issues) {\n                console.error(chalk.red(`    ${issue.path ? `${issue.path}: ` : \"\"}${issue.message}`));\n            }\n            process.exit(1);\n        }\n        throw err;\n    }\n\n    const { manifest, source } = loaded;\n\n    let targets = buildableApps(manifest);\n    if (requested.length > 0) {\n        const known = new Set(targets.map(t => t.name));\n        const unknown = requested.filter(name => !known.has(name));\n        if (unknown.length > 0) {\n            console.error(chalk.red(`✗ Unknown app(s): ${unknown.join(\", \")}`));\n            console.error(chalk.dim(`  This repository declares: ${targets.map(t => t.name).join(\", \") || \"(none)\"}`));\n            process.exit(1);\n        }\n        targets = targets.filter(t => requested.includes(t.name));\n    }\n\n    if (targets.length === 0) {\n        console.log(chalk.yellow(\"No buildable apps declared. Nothing to do.\"));\n        return;\n    }\n\n    // An ejected backend owns its own build; the workspace scripts are the only\n    // thing that knows how to run it.\n    const backend = findBackendApp(manifest);\n    if (!backend && source === \"synthesized\") {\n        console.log(chalk.dim(\"No rebase.json found — building workspace packages.\\n\"));\n        await runWorkspaceBuilds(projectRoot);\n        return;\n    }\n\n    // `--output` names one bundle directory, resolved from where it was typed.\n    // It is refused for a build that produces several bundles rather than\n    // handed to each: every bundle build empties its directory first, so the\n    // last app built deleted the others' and the build still reported success.\n    const output = args[\"--output\"] ? path.resolve(process.cwd(), args[\"--output\"]) : undefined;\n    const bundled = targets.filter(({ app }) =>\n        (app.type === \"backend\" && app.runtime !== \"custom\") ||\n        (app.type === \"static\" && Boolean(app.build) && Boolean(app.output)));\n    if (output && bundled.length > 1) {\n        throw new UsageError(\n            `--output names one bundle directory, and this build produces ${bundled.length}: ` +\n            `${bundled.map(t => t.name).join(\", \")}. Build one app into it: ` +\n            `rebase build ${bundled[0].name} --output ${args[\"--output\"]}`\n        );\n    }\n\n    console.log(`${chalk.bold(\"Rebase\")} — building ${targets.length} app(s)\\n`);\n\n    // Each static app is built once per run, whichever consumer gets to it\n    // first: folding into the backend bundle, or its own static bundle.\n    const builtApps = new Set<string>();\n\n    for (const { name, app } of targets) {\n        console.log(chalk.cyan(`▸ ${name}`) + chalk.dim(` (${app.type})`));\n\n        if (app.type === \"backend\" && app.runtime === \"custom\") {\n            // An ejected backend's artifact is an IMAGE, not a bundle. Building\n            // one anyway produced a `dist-bundle/` the project never deploys,\n            // which is worse than doing nothing: it looks like the thing that\n            // ships. The workspace's own `build` script compiles this app, and\n            // the Dockerfile turns it into the image.\n            console.log(chalk.dim(\"  custom runtime — this project builds its own image, not a bundle\"));\n            for (const line of dockerBuildHint(projectRoot, name, app)) console.log(line);\n            console.log(\"\");\n            continue;\n        }\n\n        if (app.type === \"backend\") {\n            // Derived per backend app, because each has its own config\n            // directory. Issues are fatal here rather than reported: a bundle\n            // whose manifest is missing a bucket the code declares would deploy\n            // into a tenant with nothing provisioned for it, and the first sign\n            // would be uploads failing in production.\n            const { graph: resourceGraph, issues } = await deriveResourceGraph(deriveOptionsFor(projectRoot, app));\n            if (issues.length > 0) {\n                console.error(chalk.red(`\\n  ✗ ${issues.length} problem(s) in the declared resources:\\n`));\n                for (const issue of issues) console.error(`    ${chalk.bold(issue.path)}  ${issue.message}`);\n                console.error(\"\");\n                process.exitCode = 1;\n                return;\n            }\n            // Written alongside the bundle so the repository records what this\n            // project needs. `rebase resources --check` is what keeps it honest.\n            writeResourceGraphFile(projectRoot, resourceGraph);\n\n            /* The framework pins, read before the build and reported after it.\n               Ranges no single version satisfies are refused by `buildBundle`\n               itself, before it builds anything, for every command that builds\n               a bundle. */\n            const drift = detectFrameworkDepDrift(projectRoot, cliVersion());\n\n            const result = await buildBundle({\n                projectRoot,\n                appName: name,\n                app,\n                outDir: output,\n                runtimeRange: manifest.rebase,\n                resources: resourceGraph,\n                skipTypeCheck: args[\"--skip-type-check\"],\n                skipSchema: args[\"--skip-schema\"],\n                vendor: args[\"--no-vendor\"] ? false : (args[\"--vendor\"] ? true : undefined)\n            });\n            const rel = path.relative(projectRoot, result.outDir);\n            console.log(chalk.green(`  ✓ bundle → ${rel}/`));\n            // A headless build has no schema version — the API is introspected\n            // from the live database at boot — and interpolating it anyway left\n            // the summary ending in a dangling `schema `, which reads as a value\n            // that failed to render rather than one that does not exist.\n            const schemaVersion = result.manifest.schemaVersion;\n            console.log(chalk.dim(\n                `    ${result.collectionCount} collection(s)${schemaVersion ? `, schema ${schemaVersion}` : \"\"}`\n            ));\n            /* Say what the bundle's cold start will be, at the one moment\n               anyone is listening.\n\n               A vendored bundle starts in about five seconds; one that installs\n               at boot takes forty to sixty, on EVERY pod start — an eviction, a\n               node failure, an OOM, a runtime rollout. That is not a build\n               detail, it is what each of those events costs in downtime, and it\n               is invisible until an incident unless it is said here. */\n            if (result.vendor.vendored) {\n                console.log(chalk.dim(`    dependencies installed into the bundle (${result.vendor.target?.os}/${result.vendor.target?.cpu})`));\n                if ((result.vendor.bytes ?? 0) > VENDOR_SIZE_WARN_BYTES) {\n                    const mb = Math.round((result.vendor.bytes ?? 0) / (1024 * 1024));\n                    /* The limit is on the *compressed* upload and this is the\n                       tree on disk, so a number above 100 does not mean the\n                       upload fails — but \"201 MB, close to the 100 MB limit\"\n                       reads as nonsense and got ignored for exactly that\n                       reason. Say which quantity is which. */\n                    console.log(chalk.yellow(\n                        `    ⚠ the installed tree is ${mb} MB on disk — enough to risk the control plane's 100 MB ` +\n                        \"limit on the compressed upload\"));\n                    console.log(chalk.dim(\"      Shrink the declared dependencies, or rebuild with --no-vendor.\"));\n                }\n            } else if (Object.keys(result.manifest.deps.declared).length === 0) {\n                // Nothing to install is not a degraded state — this bundle\n                // already starts as fast as a vendored one. Warning here would\n                // train people to ignore the warning that matters.\n                console.log(chalk.dim(\"    no dependencies to install — nothing to bundle\"));\n            } else {\n                console.log(chalk.yellow(`    ⚠ dependencies not bundled: ${result.vendor.skipped}`));\n                console.log(chalk.dim(\"      They install on every pod start instead, which is ~40-60s of cold start.\"));\n            }\n\n            if (result.manifest.hooks.native) {\n                const names = (result.manifest.hooks.nativeModules ?? []).map(m => m.name).join(\", \");\n                console.log(chalk.yellow(`    ⚠ native dependencies detected: ${names}`));\n                console.log(chalk.dim(\"      These cannot run on the managed runtime. See `rebase doctor`.\"));\n            }\n\n            /* Framework pins older than this CLI.\n\n               Warned here because this is the only moment anyone can be told.\n               Locally every `@rebasepro/*` resolves through pnpm's workspace and\n               `link:` overrides to the checkout, so the version strings in\n               package.json are never exercised — the project runs fine on a\n               developer's machine while declaring something years old. Those\n               strings are first honoured when the runtime npm-installs them in\n               the cloud, and by then the symptom is a tenant that boots and then\n               misbehaves against its database.\n\n               A warning rather than a hard failure: the CLI cannot know that a\n               newer package has actually been published, and refusing to build\n               over a guess would be worse than saying it out loud. (`drift` was\n               read before the build, above.) */\n            if (drift.behind.length > 0) {\n                console.log(chalk.yellow(`    ⚠ framework dependencies older than this CLI (${cliVersion()}):`));\n                for (const dep of drift.behind) {\n                    console.log(chalk.dim(`      ${dep.name}@${dep.range}  (${dep.file})`));\n                }\n                console.log(chalk.dim(\"      The image supplies the server, but your bundle supplies the database\"));\n                console.log(chalk.dim(\"      driver — a newer runtime does not update it.\"));\n                console.log(chalk.dim(`      Run \\`${upgradeToThisCli()}\\`, then rebuild.`));\n            } else if (drift.disagreeing.length > 0) {\n                console.log(chalk.yellow(`    ⚠ mixed @rebasepro versions declared: ${drift.disagreeing.join(\", \")}`));\n                console.log(chalk.dim(\"      These are published together and expect to run together.\"));\n                console.log(chalk.dim(`      Run \\`${upgradeToThisCli()}\\` to pin them alike, then rebuild.`));\n            }\n\n            /* Fold the project's static apps into the backend bundle, so ONE\n               runtime serves the site at `/`, the admin at `/admin` and the API\n               at `/api` — the shape the scaffolded template produces and the\n               shape a custom container already had.\n\n               Without this, moving a project to the managed runtime silently\n               removed its website: the API answered perfectly and every page\n               404'd, because the managed pod runs the backend bundle and nothing\n               else. Parity with the container being replaced is the only honest\n               baseline for calling managed a drop-in.\n\n               `--no-static` opts out, for a project that publishes its frontend\n               somewhere else and does not want the assets in its bundle. */\n            if (!args[\"--no-static\"]) {\n                const folded = await foldFrontendIntoBundle({\n                    projectRoot,\n                    manifest,\n                    bundleDir: result.outDir,\n                    skipBuild: args[\"--skip-static-build\"] === true,\n                    builtApps,\n                    log: (m) => console.log(m)\n                }).catch((err: unknown) => {\n                    console.error(chalk.red(`    ✗ ${err instanceof Error ? err.message : String(err)}`));\n                    process.exit(1);\n                });\n                for (const outcome of folded ?? []) {\n                    console.log(\n                        chalk.green(`    ✓ ${outcome.appName} folded in`) +\n                        chalk.dim(` (${outcome.fileCount} file(s) → served at ${formatAppAddress(outcome)})`)\n                    );\n                }\n            }\n        } else if (app.type === \"static\") {\n            await buildAssetApp(projectRoot, name, app, manifest.rebase, output, { builtApps }).catch((err: unknown) => {\n                console.error(chalk.red(`  ✗ ${err instanceof Error ? err.message : String(err)}`));\n                process.exit(1);\n            });\n        }\n\n        console.log(\"\");\n    }\n\n    console.log(chalk.green(\"✓ Build complete.\"));\n}\n\n/**\n * Build a static app and package it into a static bundle.\n *\n * Runs the app's own build command, checks it produced the declared output, then\n * packages that output into a `static`-kind bundle — the same deployable shape as\n * a backend bundle, so a frontend or admin app deploys through the identical\n * path and runs on the identical image, just serving files instead of an API.\n *\n * Throws when the build fails or produces nothing usable, so the caller answers\n * in its own way: `rebase build` with a red line, `rebase cloud deploy --json`\n * with its JSON error.\n */\nexport async function buildAssetApp(\n    projectRoot: string,\n    name: string,\n    app: RebaseAppConfig,\n    runtimeRange: string,\n    outOverride?: string,\n    /**\n     * `quietStdout`: every line, the build command's included, goes to stderr. See `toolStdio`.\n     * `builtApps`: the static apps already built in this run (see `FoldOptions.builtApps`).\n     */\n    options: { quietStdout?: boolean; builtApps?: Set<string> } = {}\n): Promise<string | undefined> {\n    const asset = app as RebaseStaticAppConfig;\n    // The path part is what the app is built for and mounted at; the hostname,\n    // when `path` names one, only travels in the bundle.\n    const address = staticAppAddress(name, asset);\n    const basePath = address.path;\n    const say = (line: string): void => {\n        if (options.quietStdout) console.error(line);\n        else console.log(line);\n    };\n\n    if (!asset.build) {\n        say(chalk.dim(\"  no build command declared — skipping\"));\n        return undefined;\n    }\n\n    if (options.builtApps?.has(name)) {\n        say(chalk.dim(\"  built once already in this run — packaging that output\"));\n    } else {\n        try {\n            await execa(asset.build, {\n                cwd: projectRoot,\n                stdio: toolStdio(options.quietStdout),\n                shell: true,\n                env: staticBuildEnv(basePath, name)\n            });\n        } catch {\n            throw new Error(`build command failed for \"${name}\"`);\n        }\n        options.builtApps?.add(name);\n    }\n\n    if (!asset.output) {\n        say(chalk.yellow(\"  no output directory declared — built, but nothing to bundle\"));\n        return undefined;\n    }\n\n    const outputPath = path.join(projectRoot, asset.output);\n    if (!fs.existsSync(outputPath)) {\n        // The command exited 0 but produced nothing where the manifest says it\n        // should. Bundling that would ship an empty site.\n        throw new Error(`declared output \"${asset.output}\" does not exist after building`);\n    }\n\n    // The assets were built for `basePath`; refusing here is the difference\n    // between a build error and a blank page nobody can diagnose.\n    const indexHtml = path.join(outputPath, \"index.html\");\n    if (fs.existsSync(indexHtml)) {\n        assertBuiltForPath(fs.readFileSync(indexHtml, \"utf8\"), basePath, name);\n    }\n\n    // Per-app bundle directory, so a project's several static apps do not clobber\n    // one another or the backend's `dist-bundle`.\n    const outDir = outOverride\n        ? path.resolve(process.cwd(), outOverride)\n        : path.join(projectRoot, `dist-bundle-${name}`);\n    const result = buildStaticBundle({\n        projectRoot,\n        appName: name,\n        assetsDir: outputPath,\n        outDir,\n        runtimeRange,\n        path: basePath,\n        host: address.host,\n        spa: asset.spa ?? true,\n        cms: asset.cms\n    });\n    const rel = path.relative(projectRoot, result.outDir);\n    say(\n        chalk.green(`  ✓ static bundle → ${rel}/`) +\n        chalk.dim(` (${result.fileCount} file(s) → served at ${formatAppAddress(address)})`)\n    );\n    return result.outDir;\n}\n\n/**\n * The `rebase upgrade` line the drift warnings print.\n *\n * Aimed at this CLI's own version, because that is what the warning measured\n * against: \"older than this CLI\" is answered by moving to exactly this CLI, not\n * to whatever `latest` happens to be — which, on a canary, is older still.\n */\nfunction upgradeToThisCli(): string {\n    const version = cliVersion();\n    return version === \"unknown\" ? \"rebase upgrade\" : `rebase upgrade --to ${version}`;\n}\n\n/** The pre-manifest behaviour: build every workspace package. */\nasync function runWorkspaceBuilds(projectRoot: string): Promise<void> {\n    const pm = detectPackageManager(projectRoot);\n    const cmds = getPMCommands(pm);\n    const buildCmd = cmds.runAll(\"build\");\n\n    console.log(`${chalk.bold(\"Rebase\")} — Building all workspaces with ${chalk.cyan(pm)}...\\n`);\n\n    try {\n        await execa(buildCmd[0], buildCmd.slice(1), {\n            cwd: projectRoot,\n            stdio: \"inherit\"\n        });\n    } catch {\n        console.error(chalk.red(\"\\n✗ Build failed.\"));\n        process.exit(1);\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2CA,SAAS,YAAkB;CACvB,QAAQ,IAAI;EACd,MAAM,KAAK,cAAc,EAAE;;EAE3B,MAAM,KAAK,OAAO,EAAE;;;EAGpB,MAAM,KAAK,SAAS,EAAE;mEAC2C,mBAAmB;;;;;;;;;;;;;;;EAepF,MAAM,KAAK,UAAU,EAAE;;;;EAIvB,KAAK,CAAC;AACR;;;;;;;;;;;;;;;;;;;;;;;AAwBA,SAAgB,gBACZ,aACA,MACA,KACQ;CACR,MAAM,aAAa,IAAI,cAAc;CACrC,MAAM,UAAU,IAAI,WAAW;CAC/B,MAAM,aAAa,KAAK,QAAQ,aAAa,OAAO;CACpD,MAAM,cAAc,KAAK,SAAS,YAAY,KAAK,QAAQ,aAAa,UAAU,CAAC;CAEnF,MAAM,QAAQ,GAAG,MAAM,KAAK,6BAA6B,MAAM;CAK/D,IAAI,YAAY,WAAW,IAAI,GAC3B,OAAO;EACH,MAAM,IAAI,OAAO,OAAO;EACxB,MAAM,OAAO,SAAS,WAAW,iCAAiC,QAAQ,mCAAmC;EAC7G,MAAM,IAAI,yEAAyE;CACvF;CAGJ,MAAM,SAAS,MAAM,KAAK,mBAAmB,YAAY,GAAG;CAC5D,OAAO,YAAY,MACb,CAAC,MAAM,IAAI,OAAO,MAAM,UAAU,QAAQ,CAAC,IAC3C,CAAC,MAAM,IAAI,OAAO,OAAO,GAAG,MAAM,IAAI,OAAO,MAAM,KAAK,MAAM,SAAS,EAAE,MAAM,QAAQ,CAAC;AAClG;AAEA,eAAsB,aAAa,UAAoB,CAAC,GAAkB;CACtE,IAAI,UAAU,OAAO,GAAG;EACpB,UAAU;EACV;CACJ;CAEA,MAAM,EAAE,OAAO,MAAM,aAAa,cAAc,iBAAiB;EAC7D,MAAM;GACF,YAAY;GAKZ,SAAS;GACT,qBAAqB;GAKrB,eAAe;GAIf,YAAY;GACZ,iBAAiB;GAIjB,eAAe;GAIf,uBAAuB;GACvB,eAAe;EACnB;EACA;EACA,cAAc;EACd,SAAS;CACb,CAAC;CAED,MAAM,cAAc,mBAAmB;CAEvC,IAAI,KAAK,gBAAgB;EACrB,MAAM,mBAAmB,WAAW;EACpC;CACJ;CAEA,IAAI;CACJ,IAAI;EACA,SAAS,aAAa,WAAW;CACrC,SAAS,KAAK;EACV,IAAI,eAAe,eAAe;GAC9B,QAAQ,MAAM,MAAM,IAAI,KAAK,IAAI,SAAS,CAAC;GAC3C,KAAK,MAAM,SAAS,IAAI,QACpB,QAAQ,MAAM,MAAM,IAAI,OAAO,MAAM,OAAO,GAAG,MAAM,KAAK,MAAM,KAAK,MAAM,SAAS,CAAC;GAEzF,QAAQ,KAAK,CAAC;EAClB;EACA,MAAM;CACV;CAEA,MAAM,EAAE,UAAU,WAAW;CAE7B,IAAI,UAAU,cAAc,QAAQ;CACpC,IAAI,UAAU,SAAS,GAAG;EACtB,MAAM,QAAQ,IAAI,IAAI,QAAQ,KAAI,MAAK,EAAE,IAAI,CAAC;EAC9C,MAAM,UAAU,UAAU,QAAO,SAAQ,CAAC,MAAM,IAAI,IAAI,CAAC;EACzD,IAAI,QAAQ,SAAS,GAAG;GACpB,QAAQ,MAAM,MAAM,IAAI,qBAAqB,QAAQ,KAAK,IAAI,GAAG,CAAC;GAClE,QAAQ,MAAM,MAAM,IAAI,+BAA+B,QAAQ,KAAI,MAAK,EAAE,IAAI,CAAC,CAAC,KAAK,IAAI,KAAK,UAAU,CAAC;GACzG,QAAQ,KAAK,CAAC;EAClB;EACA,UAAU,QAAQ,QAAO,MAAK,UAAU,SAAS,EAAE,IAAI,CAAC;CAC5D;CAEA,IAAI,QAAQ,WAAW,GAAG;EACtB,QAAQ,IAAI,MAAM,OAAO,4CAA4C,CAAC;EACtE;CACJ;CAKA,IAAI,CADY,eAAe,QAC1B,KAAW,WAAW,eAAe;EACtC,QAAQ,IAAI,MAAM,IAAI,uDAAuD,CAAC;EAC9E,MAAM,mBAAmB,WAAW;EACpC;CACJ;CAMA,MAAM,SAAS,KAAK,cAAc,KAAK,QAAQ,QAAQ,IAAI,GAAG,KAAK,WAAW,IAAI,KAAA;CAClF,MAAM,UAAU,QAAQ,QAAQ,EAAE,UAC7B,IAAI,SAAS,aAAa,IAAI,YAAY,YAC1C,IAAI,SAAS,YAAY,QAAQ,IAAI,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAE;CACxE,IAAI,UAAU,QAAQ,SAAS,GAC3B,MAAM,IAAI,WACN,gEAAgE,QAAQ,OAAO,IAC5E,QAAQ,KAAI,MAAK,EAAE,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,wCACvB,QAAQ,EAAE,CAAC,KAAK,YAAY,KAAK,aACrD;CAGJ,QAAQ,IAAI,GAAG,MAAM,KAAK,QAAQ,EAAE,cAAc,QAAQ,OAAO,UAAU;CAI3E,MAAM,4BAAY,IAAI,IAAY;CAElC,KAAK,MAAM,EAAE,MAAM,SAAS,SAAS;EACjC,QAAQ,IAAI,MAAM,KAAK,KAAK,MAAM,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,EAAE,CAAC;EAEjE,IAAI,IAAI,SAAS,aAAa,IAAI,YAAY,UAAU;GAMpD,QAAQ,IAAI,MAAM,IAAI,oEAAoE,CAAC;GAC3F,KAAK,MAAM,QAAQ,gBAAgB,aAAa,MAAM,GAAG,GAAG,QAAQ,IAAI,IAAI;GAC5E,QAAQ,IAAI,EAAE;GACd;EACJ;EAEA,IAAI,IAAI,SAAS,WAAW;GAMxB,MAAM,EAAE,OAAO,eAAe,WAAW,MAAM,oBAAoB,iBAAiB,aAAa,GAAG,CAAC;GACrG,IAAI,OAAO,SAAS,GAAG;IACnB,QAAQ,MAAM,MAAM,IAAI,SAAS,OAAO,OAAO,yCAAyC,CAAC;IACzF,KAAK,MAAM,SAAS,QAAQ,QAAQ,MAAM,OAAO,MAAM,KAAK,MAAM,IAAI,EAAE,IAAI,MAAM,SAAS;IAC3F,QAAQ,MAAM,EAAE;IAChB,QAAQ,WAAW;IACnB;GACJ;GAGA,uBAAuB,aAAa,aAAa;GAMjD,MAAM,QAAQ,wBAAwB,aAAa,WAAW,CAAC;GAE/D,MAAM,SAAS,MAAM,YAAY;IAC7B;IACA,SAAS;IACT;IACA,QAAQ;IACR,cAAc,SAAS;IACvB,WAAW;IACX,eAAe,KAAK;IACpB,YAAY,KAAK;IACjB,QAAQ,KAAK,iBAAiB,QAAS,KAAK,cAAc,OAAO,KAAA;GACrE,CAAC;GACD,MAAM,MAAM,KAAK,SAAS,aAAa,OAAO,MAAM;GACpD,QAAQ,IAAI,MAAM,MAAM,gBAAgB,IAAI,EAAE,CAAC;GAK/C,MAAM,gBAAgB,OAAO,SAAS;GACtC,QAAQ,IAAI,MAAM,IACd,OAAO,OAAO,gBAAgB,gBAAgB,gBAAgB,YAAY,kBAAkB,IAChG,CAAC;GASD,IAAI,OAAO,OAAO,UAAU;IACxB,QAAQ,IAAI,MAAM,IAAI,+CAA+C,OAAO,OAAO,QAAQ,GAAG,GAAG,OAAO,OAAO,QAAQ,IAAI,EAAE,CAAC;IAC9H,KAAK,OAAO,OAAO,SAAS,KAAA,WAA6B;KACrD,MAAM,KAAK,KAAK,OAAO,OAAO,OAAO,SAAS,MAAM,OAAO,KAAK;KAMhE,QAAQ,IAAI,MAAM,OACd,+BAA+B,GAAG,uFACF,CAAC;KACrC,QAAQ,IAAI,MAAM,IAAI,sEAAsE,CAAC;IACjG;GACJ,OAAO,IAAI,OAAO,KAAK,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,WAAW,GAI7D,QAAQ,IAAI,MAAM,IAAI,oDAAoD,CAAC;QACxE;IACH,QAAQ,IAAI,MAAM,OAAO,mCAAmC,OAAO,OAAO,SAAS,CAAC;IACpF,QAAQ,IAAI,MAAM,IAAI,gFAAgF,CAAC;GAC3G;GAEA,IAAI,OAAO,SAAS,MAAM,QAAQ;IAC9B,MAAM,SAAS,OAAO,SAAS,MAAM,iBAAiB,CAAC,EAAA,CAAG,KAAI,MAAK,EAAE,IAAI,CAAC,CAAC,KAAK,IAAI;IACpF,QAAQ,IAAI,MAAM,OAAO,uCAAuC,OAAO,CAAC;IACxE,QAAQ,IAAI,MAAM,IAAI,qEAAqE,CAAC;GAChG;GAiBA,IAAI,MAAM,OAAO,SAAS,GAAG;IACzB,QAAQ,IAAI,MAAM,OAAO,qDAAqD,WAAW,EAAE,GAAG,CAAC;IAC/F,KAAK,MAAM,OAAO,MAAM,QACpB,QAAQ,IAAI,MAAM,IAAI,SAAS,IAAI,KAAK,GAAG,IAAI,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;IAE1E,QAAQ,IAAI,MAAM,IAAI,4EAA4E,CAAC;IACnG,QAAQ,IAAI,MAAM,IAAI,oDAAoD,CAAC;IAC3E,QAAQ,IAAI,MAAM,IAAI,eAAe,iBAAiB,EAAE,kBAAkB,CAAC;GAC/E,OAAO,IAAI,MAAM,YAAY,SAAS,GAAG;IACrC,QAAQ,IAAI,MAAM,OAAO,6CAA6C,MAAM,YAAY,KAAK,IAAI,GAAG,CAAC;IACrG,QAAQ,IAAI,MAAM,IAAI,gEAAgE,CAAC;IACvF,QAAQ,IAAI,MAAM,IAAI,eAAe,iBAAiB,EAAE,oCAAoC,CAAC;GACjG;GAeA,IAAI,CAAC,KAAK,gBAAgB;IACtB,MAAM,SAAS,MAAM,uBAAuB;KACxC;KACA;KACA,WAAW,OAAO;KAClB,WAAW,KAAK,2BAA2B;KAC3C;KACA,MAAM,MAAM,QAAQ,IAAI,CAAC;IAC7B,CAAC,CAAC,CAAC,OAAO,QAAiB;KACvB,QAAQ,MAAM,MAAM,IAAI,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,GAAG,CAAC;KACpF,QAAQ,KAAK,CAAC;IAClB,CAAC;IACD,KAAK,MAAM,WAAW,UAAU,CAAC,GAC7B,QAAQ,IACJ,MAAM,MAAM,SAAS,QAAQ,QAAQ,WAAW,IAChD,MAAM,IAAI,KAAK,QAAQ,UAAU,uBAAuB,iBAAiB,OAAO,EAAE,EAAE,CACxF;GAER;EACJ,OAAO,IAAI,IAAI,SAAS,UACpB,MAAM,cAAc,aAAa,MAAM,KAAK,SAAS,QAAQ,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,QAAiB;GACxG,QAAQ,MAAM,MAAM,IAAI,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,GAAG,CAAC;GAClF,QAAQ,KAAK,CAAC;EAClB,CAAC;EAGL,QAAQ,IAAI,EAAE;CAClB;CAEA,QAAQ,IAAI,MAAM,MAAM,mBAAmB,CAAC;AAChD;;;;;;;;;;;;;AAcA,eAAsB,cAClB,aACA,MACA,KACA,cACA,aAKA,UAA8D,CAAC,GACpC;CAC3B,MAAM,QAAQ;CAGd,MAAM,UAAU,iBAAiB,MAAM,KAAK;CAC5C,MAAM,WAAW,QAAQ;CACzB,MAAM,OAAO,SAAuB;EAChC,IAAI,QAAQ,aAAa,QAAQ,MAAM,IAAI;OACtC,QAAQ,IAAI,IAAI;CACzB;CAEA,IAAI,CAAC,MAAM,OAAO;EACd,IAAI,MAAM,IAAI,wCAAwC,CAAC;EACvD;CACJ;CAEA,IAAI,QAAQ,WAAW,IAAI,IAAI,GAC3B,IAAI,MAAM,IAAI,0DAA0D,CAAC;MACtE;EACH,IAAI;GACA,MAAM,MAAM,MAAM,OAAO;IACrB,KAAK;IACL,OAAO,UAAU,QAAQ,WAAW;IACpC,OAAO;IACP,KAAK,eAAe,UAAU,IAAI;GACtC,CAAC;EACL,QAAQ;GACJ,MAAM,IAAI,MAAM,6BAA6B,KAAK,EAAE;EACxD;EACA,QAAQ,WAAW,IAAI,IAAI;CAC/B;CAEA,IAAI,CAAC,MAAM,QAAQ;EACf,IAAI,MAAM,OAAO,+DAA+D,CAAC;EACjF;CACJ;CAEA,MAAM,aAAa,KAAK,KAAK,aAAa,MAAM,MAAM;CACtD,IAAI,CAAC,GAAG,WAAW,UAAU,GAGzB,MAAM,IAAI,MAAM,oBAAoB,MAAM,OAAO,gCAAgC;CAKrF,MAAM,YAAY,KAAK,KAAK,YAAY,YAAY;CACpD,IAAI,GAAG,WAAW,SAAS,GACvB,mBAAmB,GAAG,aAAa,WAAW,MAAM,GAAG,UAAU,IAAI;CAQzE,MAAM,SAAS,kBAAkB;EAC7B;EACA,SAAS;EACT,WAAW;EACX,QAPW,cACT,KAAK,QAAQ,QAAQ,IAAI,GAAG,WAAW,IACvC,KAAK,KAAK,aAAa,eAAe,MAAM;EAM9C;EACA,MAAM;EACN,MAAM,QAAQ;EACd,KAAK,MAAM,OAAO;EAClB,KAAK,MAAM;CACf,CAAC;CACD,MAAM,MAAM,KAAK,SAAS,aAAa,OAAO,MAAM;CACpD,IACI,MAAM,MAAM,uBAAuB,IAAI,EAAE,IACzC,MAAM,IAAI,KAAK,OAAO,UAAU,uBAAuB,iBAAiB,OAAO,EAAE,EAAE,CACvF;CACA,OAAO,OAAO;AAClB;;;;;;;;AASA,SAAS,mBAA2B;CAChC,MAAM,UAAU,WAAW;CAC3B,OAAO,YAAY,YAAY,mBAAmB,uBAAuB;AAC7E;;AAGA,eAAe,mBAAmB,aAAoC;CAClE,MAAM,KAAK,qBAAqB,WAAW;CAE3C,MAAM,WADO,cAAc,EACV,CAAA,CAAK,OAAO,OAAO;CAEpC,QAAQ,IAAI,GAAG,MAAM,KAAK,QAAQ,EAAE,kCAAkC,MAAM,KAAK,EAAE,EAAE,MAAM;CAE3F,IAAI;EACA,MAAM,MAAM,SAAS,IAAI,SAAS,MAAM,CAAC,GAAG;GACxC,KAAK;GACL,OAAO;EACX,CAAC;CACL,QAAQ;EACJ,QAAQ,MAAM,MAAM,IAAI,mBAAmB,CAAC;EAC5C,QAAQ,KAAK,CAAC;CAClB;AACJ"}

package/dist/{cloud-CkTr-yt0.js → cloud-K6P5IHUb.js}

@@ -6,8 +6,8 @@ import { _ as selectDeployApp, d as findBackendApp, f as formatAppAddress, p as
 import { b as toolStdio, o as buildBundle } from "./bundle-BQhP_xiA.js";
 import { A as projectHost, B as requireProject, C as lookupProjectId, D as parseCloudArgs, E as openUrl, F as reportError, G as resolveProjectRef, H as requireSessionClient, I as requireClient, J as setCurrentContext, K as resolveTimeoutMs, L as requireCloudRow, M as readLink, N as refuseDirectLink, O as printGroupHelp, P as removeLink, Q as wantsRawError, R as requireInteractive, S as keyValues, T as noteBlank, U as resolveCloudTarget, V as requireProjectRef, W as resolveCloudUrl, X as warn, Y as success, Z as writeLink, _ as freshAccessToken, a as cloudRow, b as isJsonMode, c as confirmDestructive, d as emit, f as emitHelp, g as fetchTenantBaseDomain, h as fetchDeployTargets, i as billingAccountIdOf, j as projectLinkPath, k as printJson, l as createCloudClient, m as fail, n as GLOBAL_HELP_FLAGS, o as cloudRows, p as envToken, q as setContextOrg, r as TOKEN_ENV, s as colorStatus, t as GLOBAL_CLOUD_FLAGS, u as displayProjectRef, v as getContextOrg, w as note, x as isKnownControlPlane, y as initOutputMode, z as requireKnownAction } from "./context-BqhRydBg.js";
 import { n as foldFrontendIntoBundle } from "./fold-static-C1EtHlfV.js";
-import { n as deriveOptionsFor, r as deriveResourceGraph } from "./derive-RPIsAVO4.js";
-import { t as buildAssetApp } from "./build-CFwUx-Ff.js";
+import { n as deriveOptionsFor, r as deriveResourceGraph } from "./derive-QMPMcQZJ.js";
+import { t as buildAssetApp } from "./build-BHvC6Bjs.js";
 import chalk from "chalk";
 import arg from "arg";
 import fs from "fs";
@@ -3633,6 +3633,39 @@ function pendingHostNotices(hosts) {
 	}));
 }
 //#endregion
+//#region src/utils/temp-archive.ts
+/**
+* Temporary archives, each in a directory no other run shares.
+*
+* A name built from `Date.now()` is shared by every run started in the same
+* millisecond — two deploys in parallel CI jobs, two vitest workers — and the
+* first run to finish removed the archive the other was still packing or
+* uploading. `mkdtemp` creates the directory atomically under a random suffix,
+* so a path inside it belongs to this run alone.
+*/
+/**
+* Run `work` with a path for `<prefix>.tar.gz` inside a fresh temporary
+* directory, and remove that directory however the run ends.
+*
+* "However" includes `process.exit`: a `fail()` inside `work` ends the process
+* on the spot, and no `finally` runs after that, so the directory is removed on
+* the process's `exit` event as well.
+*/
+async function withTempArchive(prefix, work) {
+	const dir = await fs.promises.mkdtemp(path.join(os.tmpdir(), `${prefix}-`));
+	const remove = () => fs.rmSync(dir, {
+		recursive: true,
+		force: true
+	});
+	process.on("exit", remove);
+	try {
+		return await work(path.join(dir, `${prefix}.tar.gz`));
+	} finally {
+		process.off("exit", remove);
+		remove();
+	}
+}
+//#endregion
 //#region src/commands/cloud/rebuild-source.ts
 /**
 * The project's source, uploaded beside its bundle so the platform can rebuild it.
@@ -4113,28 +4146,27 @@ async function prepareRebuildSource(opts) {
 		...opts.steps
 	};
 	const maxBytes = opts.maxBytes ?? 104857600;
-	const tarPath = path.join(os.tmpdir(), `rebase-rebuild-src-${process.pid}-${Date.now()}.tar.gz`);
 	const cost = "Platform upgrades will not rebuild this project until a later deploy uploads its source.";
 	try {
-		const listing = steps.list(opts.projectRoot);
-		await steps.pack(listing, tarPath);
-		const size = fs.statSync(tarPath).size;
-		const mb = (bytes) => (bytes / 1024 / 1024).toFixed(1);
-		if (size > maxBytes) {
-			opts.warn(`The project source is ${mb(size)} MB compressed, over the ${Math.round(maxBytes / 1024 / 1024)} MB upload limit, so it was not uploaded. ${cost}`, listing.fromGit ? "Stop tracking large assets and build output in git, or pass --no-source to skip it on purpose." : "Initialise a git repository with a .gitignore to choose what is source, or pass --no-source.");
-			return null;
-		}
-		opts.progress(`  Uploading source (${listing.files.length} files, ${mb(size)} MB)...`);
-		return {
-			sourceId: await steps.upload(opts.url, await opts.token(), opts.projectId, tarPath),
-			projectPath: listing.projectPath,
-			buildEnv: collectBuildEnv(opts.projectRoot, staticAppRoots(opts.manifest))
-		};
+		return await withTempArchive("rebase-rebuild-src", async (tarPath) => {
+			const listing = steps.list(opts.projectRoot);
+			await steps.pack(listing, tarPath);
+			const size = fs.statSync(tarPath).size;
+			const mb = (bytes) => (bytes / 1024 / 1024).toFixed(1);
+			if (size > maxBytes) {
+				opts.warn(`The project source is ${mb(size)} MB compressed, over the ${Math.round(maxBytes / 1024 / 1024)} MB upload limit, so it was not uploaded. ${cost}`, listing.fromGit ? "Stop tracking large assets and build output in git, or pass --no-source to skip it on purpose." : "Initialise a git repository with a .gitignore to choose what is source, or pass --no-source.");
+				return null;
+			}
+			opts.progress(`  Uploading source (${listing.files.length} files, ${mb(size)} MB)...`);
+			return {
+				sourceId: await steps.upload(opts.url, await opts.token(), opts.projectId, tarPath),
+				projectPath: listing.projectPath,
+				buildEnv: collectBuildEnv(opts.projectRoot, staticAppRoots(opts.manifest))
+			};
+		});
 	} catch (err) {
 		opts.warn(`The project source was not uploaded: ${err instanceof Error ? err.message : String(err)}. ${cost}`, "The deploy continues with the bundle alone.");
 		return null;
-	} finally {
-		fs.rmSync(tarPath, { force: true });
 	}
 }
 //#endregion
@@ -4147,17 +4179,16 @@ function sleep(ms) {
 	return new Promise((r) => setTimeout(r, ms));
 }
 /**
-* Package `sourceDir` into a gzipped tarball; returns the temp archive path.
+* Package `sourceDir` into a gzipped tarball at `tarPath`.
 *
 * What goes in is {@link listContextFiles}: `.gitignore` read the way git reads
 * it, `.rebaseignore` beside it, and never an env file, a database dump or the
 * CLI's local state, whatever either says. The control plane keeps the archive
 * as the project's source, so this is the last point anything can be kept back.
 */
-async function createSourceTarball(sourceDir) {
+async function createSourceTarball(sourceDir, tarPath) {
 	const dir = path.resolve(sourceDir);
 	if (!fs.existsSync(dir)) fail(`Source directory not found: ${dir}`);
-	const tarPath = path.join(os.tmpdir(), `rebase-src-${Date.now()}.tar.gz`);
 	try {
 		const files = listContextFiles(dir);
 		await packSource({
@@ -4165,10 +4196,8 @@ async function createSourceTarball(sourceDir) {
 			files
 		}, tarPath);
 	} catch (e) {
-		fs.rmSync(tarPath, { force: true });
 		fail(`Failed to package source: ${e instanceof Error ? e.message : String(e)}`);
 	}
-	return tarPath;
 }
 /**
 * The `@rebasepro/*` version this source directory actually resolves.
@@ -4370,19 +4399,18 @@ async function uploadAndTrigger(opts) {
 		const names = (manifest.hooks.nativeModules ?? []).map((m) => m.name).join(", ");
 		fail(`This bundle depends on native modules${names ? ` (${names})` : ""}, which the managed runtime cannot run.`, "Remove the native dependency, or deploy on the custom runtime.");
 	}
-	const tarPath = path.join(os.tmpdir(), `rebase-bundle-${Date.now()}.tar.gz`);
 	let bundleId;
 	try {
-		const packed = await packBundleForUpload(bundleDir, tarPath, manifest);
-		if (packed.modulesLeftOut) warn("This bundle's installed dependencies are not uploaded: a managed pod installs them when it starts.", "Build it with `rebase build --no-vendor` to skip installing a tree the upload leaves out.");
-		const sizeMb = (packed.bytes / 1024 / 1024).toFixed(1);
-		progress(chalk.gray(`  Uploading bundle (${sizeMb} MB)...`));
-		bundleId = await uploadBundle(url, await uploadToken(client, url), projectId, tarPath);
+		bundleId = await withTempArchive("rebase-bundle", async (tarPath) => {
+			const packed = await packBundleForUpload(bundleDir, tarPath, manifest);
+			if (packed.modulesLeftOut) warn("This bundle's installed dependencies are not uploaded: a managed pod installs them when it starts.", "Build it with `rebase build --no-vendor` to skip installing a tree the upload leaves out.");
+			const sizeMb = (packed.bytes / 1024 / 1024).toFixed(1);
+			progress(chalk.gray(`  Uploading bundle (${sizeMb} MB)...`));
+			return uploadBundle(url, await uploadToken(client, url), projectId, tarPath);
+		});
 	} catch (e) {
 		fail(e instanceof Error ? e.message : String(e));
 		return;
-	} finally {
-		fs.rmSync(tarPath, { force: true });
 	}
 	if (!isJsonMode()) {
 		console.log("");
@@ -4906,12 +4934,11 @@ async function deployCommand(rawArgs, projectRef) {
 	}
 	let source;
 	if (args["--source"]) {
-		const tarPath = await createSourceTarball(args["--source"]);
-		try {
-			source = await uploadSource(url, await uploadToken(client, url), projectId, tarPath);
-		} finally {
-			fs.rmSync(tarPath, { force: true });
-		}
+		const sourceDir = args["--source"];
+		source = await withTempArchive("rebase-src", async (tarPath) => {
+			await createSourceTarball(sourceDir, tarPath);
+			return uploadSource(url, await uploadToken(client, url), projectId, tarPath);
+		});
 	}
 	if (!isJsonMode()) {
 		console.log("");
@@ -9637,4 +9664,4 @@ function printCloudHelp() {
 //#endregion
 export { CLOUD_GROUP_NAMES, GROUP_ALIASES, cloudCommand };
 
-//# sourceMappingURL=cloud-CkTr-yt0.js.map
+//# sourceMappingURL=cloud-K6P5IHUb.js.map