@styleflow.app/flowpress-deploy 1.0.0-beta.3 → 1.0.0-beta.31

package/dist/ops/check.js

@@ -0,0 +1,42 @@
+import { existsSync, readdirSync, statSync } from "node:fs";
+import { join, extname } from "node:path";
+import { readJson, readManifest } from "./config.js";
+import { checkFeatures } from "./features.js";
+import { run } from "./process.js";
+export const projectChecks = ["styleflow:validate", "styleflow:build", "components:check", "features:check", "check:boundaries", "check:forbidden", "check:php", "typecheck", "test", "web:check", "test:static-build"];
+export function checkProject(root, kind) {
+    if (kind === "features") {
+        return checkFeatures(root);
+    }
+    if (kind === "php") {
+        const files = [];
+        function collect(path) {
+            if (!existsSync(path))
+                return;
+            if (statSync(path).isFile()) {
+                if (extname(path) === ".php")
+                    files.push(path);
+                return;
+            }
+            for (const item of readdirSync(path))
+                if (!["vendor", "node_modules", "dist"].includes(item))
+                    collect(join(path, item));
+        }
+        for (const name of ["check-updates.php", "config", "project", "tests", "web/index.php", "web/wp-config.php", "web/app/mu-plugins/bedrock-autoloader.php"])
+            collect(join(root, "apps/cms", name));
+        for (const file of files)
+            run("php", ["-l", file], { stdio: "pipe", encoding: "utf8" });
+        return { phpFiles: files.length };
+    }
+    if (kind)
+        throw new Error("Use check [features|php].");
+    readManifest(root);
+    const scripts = readJson(join(root, "package.json")).scripts || {};
+    const selected = projectChecks.filter(key => scripts[key]);
+    for (const key of selected) {
+        console.info("[check] " + key);
+        run("pnpm", ["run", key], { cwd: root });
+    }
+    return { checks: selected, manifest: "valid" };
+}
+//# sourceMappingURL=check.js.map

package/dist/ops/check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.js","sourceRoot":"","sources":["../../src/ops/check.js"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAEnC,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,oBAAoB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,mBAAmB,CAAC,CAAC;AACxN,MAAM,UAAU,YAAY,CAAC,IAAI,EAAE,IAAI;IACrC,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IACD,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,EAAE,CAAC;QACjB,SAAS,OAAO,CAAC,IAAI;YACnB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO;YAC9B,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;gBAAC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,MAAM;oBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACxF,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC;gBAAE,IAAI,CAAC,CAAC,QAAQ,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAAE,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAC1H,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,CAAC,mBAAmB,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,2CAA2C,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;QACjM,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACxF,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IACpC,CAAC;IACD,IAAI,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACvD,YAAY,CAAC,IAAI,CAAC,CAAC;IACnB,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC;IACnE,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3D,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,OAAO,CAAC,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC;QAC/B,GAAG,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AACjD,CAAC"}

package/dist/ops/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/ops/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../src/ops/cli.js"],"names":[],"mappings":""}

package/dist/ops/cli.js

@@ -0,0 +1,198 @@
+#!/usr/bin/env node
+import { mediaCommand, migrateMediaManifest } from "./media.js";
+import { allowedComponents, identity, loadState, operatorEnvironment, platformConfig, projectRoot, readManifest, saveState } from "./config.js";
+import { argValue, containerFor, shellQuote, ssh } from "./process.js";
+import { build, buildBase, frontendBuild } from "./build.js";
+import { deploy, deployedRelease } from "./deploy.js";
+import { provision, provisionPlatform } from "./provision.js";
+import { pullSource, prepareData, pushData, pushUploads, cleanIntegrations } from "./data.js";
+import { backupRun, backupVerify, status } from "./monitor.js";
+import { coolifyClient } from "./coolify.js";
+import { release, editorialCommit } from "./release.js";
+import { readFileSync, appendFileSync } from "node:fs";
+import { provisionRegistry, provisionDns } from "./bootstrap.js";
+import { synchronizeEnvironmentFiles } from "./environment-files.js";
+import { localCommand } from "./local.js";
+import { checkProject } from "./check.js";
+import { cmsTemplate } from "./cms-template/entry.mjs";
+import { cmsMigrate } from "./cms-migrate.js";
+import { featureCommand } from "./features.js";
+import { printLocalStorage } from "./storage.js";
+const args = process.argv.slice(2);
+const [command, name, component] = args;
+function help() {
+    return "FlowPress Ops\n\n"
+        + "  flowpress-ops plan|provision <environment> [component] [--apply]\n"
+        + "  flowpress-ops env sync [--apply] [--local-secrets]\n"
+        + "  flowpress-ops local start|stop|status|doctor|logs|exec|backup|datagrip|storage\n"
+        + "  flowpress-ops local clean [--apply] [--include-legacy]\n"
+        + "  flowpress-ops cms template <status|pull|push|restore> [options]\n"
+        + "  flowpress-ops cms migrate pilot-aliases --target <environment> --dry-run|--apply\n"
+        + "  flowpress-ops feature list|check|install|remove [id] [--version <exact>]\n"
+        + "  flowpress-ops check [features|php] | cms install\n"
+        + "  flowpress-ops platform plan|provision|build-base [--apply] [--push|--load]\n"
+        + "  flowpress-ops registry [--apply] | dns <environment> [--apply]\n"
+        + "  flowpress-ops build <environment> <cms|web-static|web-ssr> <--push|--load> [--sha SHA]\n"
+        + "  flowpress-ops frontend <environment> [--sha SHA] [--build-id ID]\n"
+        + "  flowpress-ops deploy|rollback <environment> <component>\n"
+        + "  flowpress-ops release <environment> [component] [--editorial]\n"
+        + "  flowpress-ops db pull <source> | prepare <environment> --from FILE | push <environment> --from FILE\n"
+        + "  flowpress-ops db clean-integrations <environment>\n"
+        + "  flowpress-ops uploads <environment> --from ARCHIVE\n"
+        + "  flowpress-ops backup run|verify <environment>\n"
+        + "  flowpress-ops media status|check <environment> [--json] | media migrate [--apply]\n"
+        + "  flowpress-ops preview start|stop [--backend staging|production]\n"
+        + "  flowpress-ops status [environment] [--check] [--json]\n"
+        + "  flowpress-ops logs <environment> [component]\n\n"
+        + "Provisioning is read-only without --apply. Publish lists are enforced by every remote write.\n";
+}
+async function main() {
+    if (!command || ["--help", "-h"].includes(command)) {
+        console.log(help());
+        return;
+    }
+    const root = projectRoot(), manifest = readManifest(root);
+    const file = argValue(args, "--platform-file");
+    let result;
+    if (command === "cms" && name === "template") {
+        process.exitCode = await cmsTemplate(root, manifest, args.slice(2));
+        return;
+    }
+    else if (command === "cms" && name === "migrate") {
+        result = await cmsMigrate(root, manifest, args.slice(2));
+    }
+    else if (command === "feature") {
+        result = featureCommand(root, args.slice(1));
+    }
+    else if (command === "check") {
+        result = checkProject(root, name);
+    }
+    else if (command === "cms" && name === "install") {
+        const { run } = await import("./process.js");
+        run("composer", ["install", "--working-dir=apps/cms", "--no-interaction", "--prefer-dist", "--optimize-autoloader"], { cwd: root });
+        result = { cms: "installed" };
+    }
+    else if (command === "local") {
+        result = await localCommand(root, manifest, name, args.slice(2));
+    }
+    else if (command === "env") {
+        if (name !== "sync")
+            throw new Error("Use env sync [--apply] [--local-secrets].");
+        result = synchronizeEnvironmentFiles(root, { apply: args.includes("--apply"), localSecrets: args.includes("--local-secrets") });
+    }
+    else if (command === "validate") {
+        result = { project: identity(root).slug, profile: manifest.profile, environments: Object.fromEntries(Object.entries(manifest.environments).map(([key, value]) => [key, value.publish])) };
+    }
+    else if (command === "plan" || command === "provision") {
+        result = await provision(root, manifest, name, { file, apply: command === "provision" && args.includes("--apply"), components: component && !component.startsWith("--") ? [component] : [] });
+    }
+    else if (command === "platform") {
+        if (name === "build-base")
+            result = buildBase(root, platformConfig(root, manifest, file), { push: args.includes("--push"), load: args.includes("--load") });
+        else if (["plan", "provision"].includes(name))
+            result = await provisionPlatform(root, manifest, { file, apply: name === "provision" && args.includes("--apply") });
+        else
+            throw new Error("Use platform plan|provision|build-base.");
+    }
+    else if (command === "registry") {
+        result = await provisionRegistry(root, manifest, { file, apply: args.includes("--apply") });
+    }
+    else if (command === "dns") {
+        result = await provisionDns(root, manifest, name, { file, apply: args.includes("--apply") });
+    }
+    else if (command === "build") {
+        result = await build(root, manifest, name, component, { file, push: args.includes("--push"), load: args.includes("--load"), sha: argValue(args, "--sha"), buildId: argValue(args, "--build-id"), skipFrontend: args.includes("--skip-frontend") });
+    }
+    else if (command === "frontend") {
+        result = frontendBuild(root, manifest, name, { sha: argValue(args, "--sha") || (await import("./process.js")).capture("git", ["rev-parse", "HEAD"], { cwd: root }), buildId: argValue(args, "--build-id") || String(Date.now()) });
+        result = { environment: name, output: result.dist };
+    }
+    else if (command === "deploy" || command === "rollback") {
+        result = await deploy(root, manifest, name, component, { rollback: command === "rollback" });
+    }
+    else if (command === "release") {
+        result = await release(root, manifest, name, { component: component && !component.startsWith("--") ? component : undefined, sha: argValue(args, "--sha"), buildId: argValue(args, "--build-id"), editorial: args.includes("--editorial") });
+    }
+    else if (command === "editorial") {
+        const event = JSON.parse(readFileSync(process.env.GITHUB_EVENT_PATH, "utf8"));
+        result = await editorialCommit(root, manifest, event.client_payload);
+        if (process.env.GITHUB_OUTPUT)
+            appendFileSync(process.env.GITHUB_OUTPUT, "sha=" + result.sha + "\ntarget=" + result.request.target + "\n");
+    }
+    else if (command === "db") {
+        const target = component;
+        if (name === "pull")
+            result = await pullSource(root, manifest, target);
+        else if (name === "prepare")
+            result = await prepareData(root, manifest, target, { file: argValue(args, "--from"), source: argValue(args, "--source") || "production", image: argValue(args, "--image") });
+        else if (name === "clean-integrations")
+            result = await cleanIntegrations(root, manifest, target);
+        else if (name === "push")
+            result = await pushData(root, manifest, target, argValue(args, "--from"));
+        else
+            throw new Error("Use db pull|prepare|push.");
+    }
+    else if (command === "uploads")
+        result = await pushUploads(root, manifest, name, argValue(args, "--from"));
+    else if (command === "backup")
+        result = await (name === "run" ? backupRun : name === "verify" ? backupVerify : () => { throw new Error("Use backup run|verify."); })(root, manifest, component);
+    else if (command === "media") {
+        result = name === "migrate" ? migrateMediaManifest(root, { apply: args.includes("--apply") }) : mediaCommand(root, manifest, name, component);
+        if (name !== "migrate" && !result.ok)
+            process.exitCode = 1;
+    }
+    else if (command === "status") {
+        result = await status(root, manifest, name && !name.startsWith("--") ? name : undefined);
+        if (args.includes("--check") && !result.ok)
+            process.exitCode = 1;
+    }
+    else if (command === "logs") {
+        const state = loadState(root, name), app = state.apps?.[component || "cms"];
+        if (!app?.uuid)
+            throw new Error("Component not provisioned.");
+        console.log(ssh(state.platform, "docker logs --tail 100 " + shellQuote(containerFor(state.platform, app.uuid))));
+        return;
+    }
+    else if (command === "preview") {
+        allowedComponents(manifest, "preview", ["web-ssr"]);
+        const target = manifest.environments.preview;
+        if (argValue(args, "--backend") && argValue(args, "--backend") !== target.backend)
+            throw new Error("Update the manifest backend before starting preview.");
+        if (!["start", "stop"].includes(name))
+            throw new Error("Use preview start|stop.");
+        const state = loadState(root, "preview"), app = state.apps?.["web-ssr"];
+        if (!app?.uuid)
+            throw new Error("Provision preview first.");
+        if (name === "start") {
+            const current = await deployedRelease(root, "preview", "web-ssr");
+            if (!current)
+                throw new Error("Build and deploy preview once before starting it.");
+            result = await deploy(root, manifest, "preview", "web-ssr", { release: current });
+        }
+        else {
+            const api = coolifyClient(state.platform.coolifyUrl, operatorEnvironment(root).COOLIFY_TOKEN);
+            await api("POST", "/applications/" + app.uuid + "/stop");
+            result = { preview: "stopped", dataPreserved: true };
+        }
+    }
+    else
+        throw new Error("Unknown command. Use --help.");
+    // Streaming commands own stdout (notably WP-CLI JSON consumed by callers).
+    if (result === undefined)
+        return;
+    if (command === "local" && ["storage", "clean"].includes(name) && !args.includes("--json")) {
+        printLocalStorage(result, { clean: name === "clean" });
+        return;
+    }
+    if (args.includes("--json"))
+        console.log(JSON.stringify(result, null, 2));
+    else {
+        console.log("FlowPress: " + command + (name ? " " + name : ""));
+        console.log(JSON.stringify(result, null, 2));
+    }
+}
+main().catch(error => {
+    console.error("FlowPress: " + error.message);
+    process.exitCode = 1;
+});
+//# sourceMappingURL=cli.js.map

package/dist/ops/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../src/ops/cli.js"],"names":[],"mappings":";AACA,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,SAAS,EAAE,mBAAmB,EAAE,cAAc,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAChJ,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACvE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9F,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACjE,OAAO,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEjD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACnC,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,GAAG,IAAI,CAAC;AACxC,SAAS,IAAI;IACX,OAAO,mBAAmB;UACtB,sEAAsE;UACtE,wDAAwD;UACxD,oFAAoF;UACpF,4DAA4D;UAC5D,qEAAqE;UACrE,sFAAsF;UACtF,8EAA8E;UAC9E,sDAAsD;UACtD,gFAAgF;UAChF,oEAAoE;UACpE,4FAA4F;UAC5F,sEAAsE;UACtE,6DAA6D;UAC7D,mEAAmE;UACnE,yGAAyG;UACzG,uDAAuD;UACvD,wDAAwD;UACxD,mDAAmD;UACnD,uFAAuF;UACvF,qEAAqE;UACrE,2DAA2D;UAC3D,oDAAoD;UACpD,gGAAgG,CAAC;AACvG,CAAC;AACD,KAAK,UAAU,IAAI;IACjB,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IACpF,MAAM,IAAI,GAAG,WAAW,EAAE,EAAE,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;IAC/C,IAAI,MAAM,CAAC;IACX,IAAI,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QAC7C,OAAO,CAAC,QAAQ,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACpE,OAAO;IACT,CAAC;SAAM,IAAI,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACnD,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,CAAC;SAAM,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,GAAG,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;SAAM,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QAC/B,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;SAAM,IAAI,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACnD,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;QAC7C,GAAG,CAAC,UAAU,EAAE,CAAC,SAAS,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,eAAe,EAAE,uBAAuB,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QACpI,MAAM,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC;IAChC,CAAC;SAAM,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QAC/B,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,CAAC;SAAM,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;QAC7B,IAAI,IAAI,KAAK,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAClF,MAAM,GAAG,2BAA2B,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;IAClI,CAAC;SAAM,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;QAClC,MAAM,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5L,CAAC;SAAM,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;QACzD,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,KAAK,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,SAAS,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChM,CAAC;SAAM,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;QAClC,IAAI,IAAI,KAAK,YAAY;YAAE,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;aACvJ,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;;YAC9J,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAClE,CAAC;SAAM,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;QAClC,MAAM,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAC9F,CAAC;SAAM,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;QAC7B,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAC/F,CAAC;SAAM,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QAC/B,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;IACrP,CAAC;SAAM,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;QAClC,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACnO,MAAM,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IACtD,CAAC;SAAM,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;QAC1D,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,OAAO,KAAK,UAAU,EAAE,CAAC,CAAC;IAC/F,CAAC;SAAM,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,SAAS,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IAC9O,CAAC;SAAM,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC;QAC9E,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;QACrE,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa;YAAE,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAAC,GAAG,GAAG,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC7I,CAAC;SAAM,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,SAAS,CAAC;QACzB,IAAI,IAAI,KAAK,MAAM;YAAE,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;aAClE,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,YAAY,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;aACrM,IAAI,IAAI,KAAK,oBAAoB;YAAE,MAAM,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;aAC5F,IAAI,IAAI,KAAK,MAAM;YAAE,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;;YAC/F,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACpD,CAAC;SAAM,IAAI,OAAO,KAAK,SAAS;QAAE,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;SACxG,IAAI,OAAO,KAAK,QAAQ;QAAE,MAAM,GAAG,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;SAC3L,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QAC7B,MAAM,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QAC9I,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IAC7D,CAAC;SACI,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACzF,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACnE,CAAC;SAAM,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC;QAC5E,IAAI,CAAC,GAAG,EAAE,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,yBAAyB,GAAG,UAAU,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACjH,OAAO;IACT,CAAC;SAAM,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QACjC,iBAAiB,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC;QAC7C,IAAI,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,KAAK,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC3J,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAClF,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC;QACxE,IAAI,CAAC,GAAG,EAAE,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC5D,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;YAClE,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;YACnF,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QACpF,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,CAAC;YAC9F,MAAM,GAAG,CAAC,MAAM,EAAE,gBAAgB,GAAG,GAAG,CAAC,IAAI,GAAG,OAAO,CAAC,CAAC;YACzD,MAAM,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;QACvD,CAAC;IACH,CAAC;;QAAM,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACvD,2EAA2E;IAC3E,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO;IACjC,IAAI,OAAO,KAAK,OAAO,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAAC,iBAAiB,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IAC/J,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;SACrE,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAChE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AACD,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}

package/dist/ops/cms-migrate.d.ts

@@ -0,0 +1,14 @@
+export function migrationProgram(operation: any, plan: any): string;
+export function parseMigrationResponse(output: any): any;
+export function migrationTransport(root: any, target: any): (operation: any, plan: any) => any;
+export function verifyBackupSite(site: any, expectedSite: any): void;
+export function localDatabaseSite(root: any): any;
+export function verifyLocalSqlBackup(root: any, file: any, expectedSite: any): Promise<{
+    file: any;
+    tables: any;
+    site: any;
+    verified: boolean;
+}>;
+export function cmsMigrate(root: any, manifest: any, args: any, deps?: {}): Promise<any>;
+export const migrationEvalArgs: string[];
+//# sourceMappingURL=cms-migrate.d.ts.map

package/dist/ops/cms-migrate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cms-migrate.d.ts","sourceRoot":"","sources":["../../src/ops/cms-migrate.js"],"names":[],"mappings":"AAYA,oEAIC;AACD,yDAOC;AACD,+FAMC;AACD,qEAEC;AACD,kDAEC;AACD;;;;;GAiBC;AACD,yFA4CC;AA1FD,yCAAoD"}

package/dist/ops/cms-migrate.js

@@ -0,0 +1,133 @@
+import { readFileSync, mkdirSync, writeFileSync, existsSync } from "node:fs";
+import { join } from "node:path";
+import { randomUUID } from "node:crypto";
+import { fileURLToPath } from "node:url";
+import { resolveTarget } from "./cms-template/target.mjs";
+import { allowedComponents, loadState } from "./config.js";
+import { localCommand, localComposeArgs } from "./local.js";
+import { backupRun, backupVerify } from "./monitor.js";
+import { capture, run, ssh, containerFor, shellQuote, sleep } from "./process.js";
+export const migrationEvalArgs = ["eval-file", "-"];
+export function migrationProgram(operation, plan) {
+    const source = readFileSync(fileURLToPath(new URL("../../includes/pilot-aliases.php", import.meta.url)), "utf8").replace(/^<\?php\s*/, "").replace("declare(strict_types=1);", "");
+    const request = Buffer.from(JSON.stringify({ operation, plan })).toString("base64");
+    return `<?php\n${source}\ntry { $request = json_decode(base64_decode('${request}'), true, 512, JSON_THROW_ON_ERROR); $result = $request['operation'] === 'plan' ? flowpress_ops_alias_plan() : flowpress_ops_alias_apply($request['plan']); echo "\\n@@flowpress-migration@@\\n", wp_json_encode(['ok' => true, 'result' => $result]); } catch (Throwable $error) { echo "\\n@@flowpress-migration@@\\n", wp_json_encode(['ok' => false, 'error' => $error->getMessage()]); }`;
+}
+export function parseMigrationResponse(output) {
+    const marker = "@@flowpress-migration@@";
+    const at = output.lastIndexOf(marker);
+    if (at < 0)
+        throw new Error("CMS did not return the migration result.");
+    const result = JSON.parse(output.slice(at + marker.length));
+    if (!result.ok)
+        throw new Error(result.error);
+    return result.result;
+}
+export function migrationTransport(root, target) {
+    if (target.local)
+        return (operation, plan) => parseMigrationResponse(capture("docker", [...localComposeArgs(root), "exec", "-T", "cms", "/workspace/apps/cms/vendor/bin/wp", "--allow-root", "--path=/workspace/apps/cms/web/wp", ...migrationEvalArgs], { input: migrationProgram(operation, plan), maxBuffer: 256 * 1024 * 1024 }));
+    const state = loadState(root, target.backendName);
+    if (!state.apps?.cms?.uuid)
+        throw new Error("CMS container not provisioned for this target.");
+    const container = containerFor(state.platform, state.apps.cms.uuid);
+    return (operation, plan) => parseMigrationResponse(ssh(state.platform, "docker exec -i " + shellQuote(container) + " wp --allow-root --path=/srv/cms/web/wp " + migrationEvalArgs.map(shellQuote).join(" ") + "", { input: migrationProgram(operation, plan), maxBuffer: 256 * 1024 * 1024 }));
+}
+export function verifyBackupSite(site, expectedSite) {
+    if (new URL(site).origin !== new URL(expectedSite).origin)
+        throw new Error("Restored backup belongs to another database site.");
+}
+export function localDatabaseSite(root) {
+    return capture("docker", [...localComposeArgs(root), "exec", "-T", "cms", "/workspace/apps/cms/vendor/bin/wp", "--allow-root", "--path=/workspace/apps/cms/web/wp", "eval", 'global $wpdb; echo $wpdb->get_var($wpdb->prepare("SELECT option_value FROM {$wpdb->options} WHERE option_name = %s", "home"));']);
+}
+export async function verifyLocalSqlBackup(root, file, expectedSite) {
+    const id = "flowpress-migration-restore-" + randomUUID().slice(0, 8);
+    try {
+        run("docker", ["run", "--rm", "-d", "--network", "none", "--memory", "1536m", "--name", id, "-e", "MARIADB_ALLOW_EMPTY_ROOT_PASSWORD=1", "-e", "MARIADB_DATABASE=restore", "mariadb:11.4"], { stdio: "ignore" });
+        for (let attempt = 0; attempt < 60; attempt++) {
+            try {
+                capture("docker", ["exec", id, "healthcheck.sh", "--connect", "--innodb_initialized"]);
+                break;
+            }
+            catch {
+                if (attempt === 59)
+                    throw new Error("Backup verification database did not start.");
+                await sleep(1000);
+            }
+        }
+        const data = readFileSync(file);
+        run("docker", ["exec", "-i", id, "mariadb", "-uroot", "restore"], { input: data, stdio: ["pipe", "pipe", "pipe"] });
+        const tables = capture("docker", ["exec", id, "mariadb", "-uroot", "-N", "restore", "-e", "SHOW TABLES"]).split("\n");
+        const options = tables.filter(name => /^[A-Za-z0-9_]+_options$/.test(name));
+        if (tables.length < 10 || options.length !== 1)
+            throw new Error("Backup lacks the expected WordPress tables.");
+        const site = capture("docker", ["exec", id, "mariadb", "-uroot", "-N", "restore", "-e", "SELECT option_value FROM `" + options[0] + "` WHERE option_name='home'"]);
+        verifyBackupSite(site, expectedSite);
+        return { file, tables: tables.length, site, verified: true };
+    }
+    finally {
+        try {
+            run("docker", ["rm", "-fv", id], { stdio: "ignore" });
+        }
+        catch { }
+    }
+}
+export async function cmsMigrate(root, manifest, args, deps = {}) {
+    if (args[0] !== "pilot-aliases")
+        throw new Error("Use cms migrate pilot-aliases --target <environment> --dry-run|--apply.");
+    const flags = args.slice(1);
+    if (flags.includes("--apply") === flags.includes("--dry-run"))
+        throw new Error("Choose exactly one of --dry-run or --apply.");
+    const at = flags.indexOf("--target");
+    if (at < 0 || !flags[at + 1] || flags[at + 1].startsWith("--"))
+        throw new Error("An explicit --target is required.");
+    const remaining = flags.filter((_, i) => i !== at && i !== at + 1).filter(flag => !["--apply", "--dry-run", "--json"].includes(flag));
+    if (remaining.length)
+        throw new Error("Unknown migration option: " + remaining[0]);
+    const target = (deps.resolveTarget || resolveTarget)({ root, manifest, flag: flags[at + 1] });
+    if (!target.local)
+        allowedComponents(manifest, target.backendName, ["cms"]);
+    const directory = join(root, ".local/cms-migrations");
+    const path = join(directory, "pilot-aliases-" + target.name + ".json");
+    const call = deps.transport || migrationTransport(root, target);
+    if (flags.includes("--dry-run")) {
+        const plan = await call("plan");
+        if (new URL(plan.site).origin !== target.origin)
+            throw new Error("CMS identity differs from the configured target.");
+        mkdirSync(directory, { recursive: true, mode: 0o700 });
+        writeFileSync(path, JSON.stringify({ ...plan, target: target.name }, null, 2) + "\n", { mode: 0o600 });
+        return { target: target.name, site: plan.site, hash: plan.hash, counts: plan.counts, changes: plan.changes.length, plan: path };
+    }
+    if (!existsSync(path))
+        throw new Error("Run --dry-run on this target before --apply.");
+    const plan = JSON.parse(readFileSync(path, "utf8"));
+    const current = await call("plan");
+    if (new URL(current.site).origin !== target.origin)
+        throw new Error("CMS identity differs from the configured target.");
+    if (plan.target !== target.name || plan.site !== current.site || plan.hash !== current.hash)
+        throw new Error("Migration plan is stale or belongs to another target; run --dry-run again.");
+    if (!current.changes.length)
+        return { target: target.name, updated: 0, counts: {} };
+    let backup;
+    if (deps.backup)
+        backup = await deps.backup(target, plan);
+    else if (target.local) {
+        const databaseSite = localDatabaseSite(root);
+        const exported = await localCommand(root, manifest, "backup", []);
+        backup = await verifyLocalSqlBackup(root, exported.file, databaseSite);
+    }
+    else {
+        const startedAt = Date.now() - 2000;
+        const exported = await backupRun(root, manifest, target.backendName);
+        backup = await backupVerify(root, manifest, target.backendName);
+        if (Date.parse(backup.database.modified || "") < startedAt || !backup.database.modified)
+            throw new Error("The verified offsite database backup predates this migration.");
+        backup = { ...backup, exported, verified: true };
+    }
+    if (!backup?.verified)
+        throw new Error("A verified backup is required before applying the migration.");
+    const applied = await call("apply", plan);
+    const receipt = join(directory, "pilot-aliases-" + target.name + "-" + Date.now() + ".receipt.json");
+    writeFileSync(receipt, JSON.stringify({ ...applied, backup, target: target.name, planHash: plan.hash }, null, 2) + "\n", { mode: 0o600 });
+    return { target: target.name, ...applied, receipt };
+}
+//# sourceMappingURL=cms-migrate.js.map

package/dist/ops/cms-migrate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cms-migrate.js","sourceRoot":"","sources":["../../src/ops/cms-migrate.js"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAElF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AAEpD,MAAM,UAAU,gBAAgB,CAAC,SAAS,EAAE,IAAI;IAC9C,MAAM,MAAM,GAAG,YAAY,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,kCAAkC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,EAAE,EAAE,CAAC,CAAC;IACnL,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACpF,OAAO,UAAU,MAAM,iDAAiD,OAAO,+XAA+X,CAAC;AACjd,CAAC;AACD,MAAM,UAAU,sBAAsB,CAAC,MAAM;IAC3C,MAAM,MAAM,GAAG,yBAAyB,CAAC;IACzC,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,EAAE,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9C,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC;AACD,MAAM,UAAU,kBAAkB,CAAC,IAAI,EAAE,MAAM;IAC7C,IAAI,MAAM,CAAC,KAAK;QAAE,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,sBAAsB,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,GAAG,gBAAgB,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,mCAAmC,EAAE,cAAc,EAAE,mCAAmC,EAAE,GAAG,iBAAiB,CAAC,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC;IACtU,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;IAClD,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAC9F,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpE,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,sBAAsB,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,iBAAiB,GAAG,UAAU,CAAC,SAAS,CAAC,GAAG,0CAA0C,GAAG,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC;AACjS,CAAC;AACD,MAAM,UAAU,gBAAgB,CAAC,IAAI,EAAE,YAAY;IACjD,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;AAClI,CAAC;AACD,MAAM,UAAU,iBAAiB,CAAC,IAAI;IACpC,OAAO,OAAO,CAAC,QAAQ,EAAE,CAAC,GAAG,gBAAgB,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,mCAAmC,EAAE,cAAc,EAAE,mCAAmC,EAAE,MAAM,EAAE,gIAAgI,CAAC,CAAC,CAAC;AACjT,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAAI,EAAE,IAAI,EAAE,YAAY;IACjE,MAAM,EAAE,GAAG,8BAA8B,GAAG,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACrE,IAAI,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,qCAAqC,EAAE,IAAI,EAAE,0BAA0B,EAAE,cAAc,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACjN,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC;YAC9C,IAAI,CAAC;gBAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,EAAE,gBAAgB,EAAE,WAAW,EAAE,sBAAsB,CAAC,CAAC,CAAC;gBAAC,MAAM;YAAC,CAAC;YACtG,MAAM,CAAC;gBAAC,IAAI,OAAO,KAAK,EAAE;oBAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;gBAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC;QAClH,CAAC;QACD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAChC,GAAG,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACpH,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,CAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACvH,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5E,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QAC/G,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,4BAA4B,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,4BAA4B,CAAC,CAAC,CAAC;QACnK,gBAAgB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACrC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC/D,CAAC;YAAS,CAAC;QAAC,IAAI,CAAC;YAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IAAC,CAAC;AACvF,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE;IAC9D,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,eAAe;QAAE,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IAC5H,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAC9H,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACrC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACrH,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACtI,IAAI,SAAS,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IACnF,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;IAC9F,IAAI,CAAC,MAAM,CAAC,KAAK;QAAE,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5E,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,gBAAgB,GAAG,MAAM,CAAC,IAAI,GAAG,OAAO,CAAC,CAAC;IACvE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAChE,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC;QAChC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACrH,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACvD,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACvG,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAClI,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACvF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACxH,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;IAC3L,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACpF,IAAI,MAAM,CAAC;IACX,IAAI,IAAI,CAAC,MAAM;QAAE,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;SACrD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACtB,MAAM,YAAY,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QAClE,MAAM,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACzE,CAAC;SAAM,CAAC;QACN,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QACpC,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QACrE,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QAChE,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAAC,GAAG,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;QAC1K,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACnD,CAAC;IACD,IAAI,CAAC,MAAM,EAAE,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IACvG,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,gBAAgB,GAAG,MAAM,CAAC,IAAI,GAAG,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,eAAe,CAAC,CAAC;IACrG,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1I,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC;AACtD,CAAC"}

package/dist/ops/cms-template/command.d.mts

@@ -0,0 +1,19 @@
+export function parseArgs(argv: any): {
+    command: any;
+    file: any;
+    options: {
+        target: string;
+        dryRun: boolean;
+        yes: boolean;
+        force: boolean;
+        prune: boolean;
+        allowDirty: boolean;
+    };
+};
+/**
+ * deps: { root, themePath, resolveTarget, transport, git, store, confirm, log, now }
+ * Returns the process exit code.
+ */
+export function runCmsTemplate(argv: any, deps: any): Promise<1 | 0>;
+export const USAGE: "Usage: pnpm cms:template <pull|push|status|restore <snapshot.json>> [options]\n\n  --target <env>   backend to use (default: FRONTEND_BACKEND_TARGET)\n  --dry-run        print the plan only\n  --yes            confirm without prompting (required without a TTY)\n  --force          resolve conflicts: push \u2192 the repository wins, pull \u2192 the CMS wins\n  --prune          push: trash patterns / drop overrides missing from the repository\n                   pull: delete pattern files missing from the CMS\n  --allow-dirty    run with uncommitted changes under apps/cms/theme";
+//# sourceMappingURL=command.d.mts.map

package/dist/ops/cms-template/command.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command.d.mts","sourceRoot":"","sources":["../../../src/ops/cms-template/command.mjs"],"names":[],"mappings":"AAcA;;;;;;;;;;;EAoBC;AAED;;;GAGG;AACH,qEAoGC;AAxID,4lBAQsE"}

package/dist/ops/cms-template/command.mjs

@@ -0,0 +1,145 @@
+import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { dirname, join, relative } from "node:path";
+import { applyAncestry, pendingChanges, pendingMarkers, renderPlan } from "./plan.mjs";
+export const USAGE = `Usage: pnpm cms:template <pull|push|status|restore <snapshot.json>> [options]
+
+  --target <env>   backend to use (default: FRONTEND_BACKEND_TARGET)
+  --dry-run        print the plan only
+  --yes            confirm without prompting (required without a TTY)
+  --force          resolve conflicts: push → the repository wins, pull → the CMS wins
+  --prune          push: trash patterns / drop overrides missing from the repository
+                   pull: delete pattern files missing from the CMS
+  --allow-dirty    run with uncommitted changes under apps/cms/theme`;
+export function parseArgs(argv) {
+    const options = { target: "", dryRun: false, yes: false, force: false, prune: false, allowDirty: false };
+    const positional = [];
+    for (let index = 0; index < argv.length; index++) {
+        const arg = argv[index];
+        if (arg === "--target")
+            options.target = String(argv[++index] ?? "");
+        else if (arg.startsWith("--target="))
+            options.target = arg.slice(9);
+        else if (arg === "--dry-run")
+            options.dryRun = true;
+        else if (arg === "--yes" || arg === "-y")
+            options.yes = true;
+        else if (arg === "--force")
+            options.force = true;
+        else if (arg === "--prune")
+            options.prune = true;
+        else if (arg === "--allow-dirty")
+            options.allowDirty = true;
+        else if (arg.startsWith("-"))
+            throw new Error(`Unknown option ${arg}.\n\n${USAGE}`);
+        else
+            positional.push(arg);
+    }
+    const [command = "", file = ""] = positional;
+    if (!["pull", "push", "status", "restore"].includes(command) || (command === "restore") !== Boolean(file)) {
+        throw new Error(USAGE);
+    }
+    return { command, file, options };
+}
+/**
+ * deps: { root, themePath, resolveTarget, transport, git, store, confirm, log, now }
+ * Returns the process exit code.
+ */
+export async function runCmsTemplate(argv, deps) {
+    const { command, file, options } = parseArgs(argv);
+    const { log } = deps;
+    const target = deps.resolveTarget(options.target);
+    const transport = deps.transport(target);
+    const status = await transport.call("status");
+    if (status.protocol !== 1) {
+        throw new Error(`${target.origin} speaks sync protocol ${status.protocol}; this CLI speaks 1. Deploy the backend or update the repository.`);
+    }
+    if (new URL(status.site).origin !== target.origin)
+        throw new Error(`The CMS identifies itself as ${status.site}, not the configured target ${target.origin}.`);
+    log(`target ${target.name}: ${status.site} (${target.local ? "local backend" : "remote backend"}) · theme ${status.stylesheet}`);
+    if (command === "status") {
+        log(`protocol ${status.protocol}`);
+        return 0;
+    }
+    if ((command === "push" || command === "restore") && !options.dryRun)
+        deps.assertWritable?.(target);
+    const ask = (question) => target.local ? true : deps.confirm(question, { yes: options.yes });
+    if (command === "restore") {
+        const snapshot = JSON.parse(readFileSync(file, "utf8"));
+        if (snapshot.site !== status.site) {
+            throw new Error(`${file} belongs to ${snapshot.site}, not to ${status.site}.`);
+        }
+        log(`restore ${snapshot.entries.length} row(s) recorded on ${snapshot.createdAt} before commit ${snapshot.commit}`);
+        if (options.dryRun)
+            return 0;
+        if (!(await ask(`Restore ${snapshot.entries.length} row(s) on ${target.name} (${target.origin})?`))) {
+            log("aborted");
+            return 1;
+        }
+        const report = await transport.call("restore", { snapshot });
+        log(`restored ${report.restored.length}, removed ${report.removed.length}`);
+        return 0;
+    }
+    const dirty = deps.git.dirty(deps.themePath);
+    if (dirty.length && !options.allowDirty && (command === "pull" || !target.local)) {
+        throw new Error(`Uncommitted changes in ${deps.themePath}:\n${dirty.join("\n")}\n` +
+            (command === "pull"
+                ? "Commit or stash them before a pull (or pass --allow-dirty)."
+                : "A remote push must be reproducible from a commit: commit first (or pass --allow-dirty)."));
+    }
+    const entities = deps.store.read();
+    const plan = await transport.call("plan", {
+        direction: command, entities, force: options.force, prune: options.prune,
+    });
+    if (command === "push")
+        applyAncestry(plan, (commit) => deps.git.isAncestor(commit), options.force);
+    renderPlan(plan, target, log);
+    if (command === "push" && plan.blocked.length) {
+        log("push blocked, nothing was written:");
+        for (const reason of plan.blocked)
+            log(`  - ${reason}`);
+        log("Run `pnpm cms:template pull` and merge with git, or pass --force to overwrite the CMS.");
+        return 1;
+    }
+    const changes = pendingChanges(plan);
+    const markers = command === "push" ? pendingMarkers(plan) : [];
+    const blocked = plan.items.filter((item) => item.action === "blocked");
+    if (!changes.length && !markers.length) {
+        log(blocked.length ? "nothing to write; conflicts listed above (use --force to take the CMS version)" : "already in sync");
+        return blocked.length ? 1 : 0;
+    }
+    if (options.dryRun) {
+        log("dry run: nothing written");
+        return blocked.length ? 1 : 0;
+    }
+    const question = command === "pull"
+        ? `Write ${changes.length} file change(s) from ${target.name} (${target.origin})?`
+        : `Apply ${changes.length} change(s) and ${markers.length} sync marker(s) to ${target.name} (${target.origin})?` +
+            (changes.length ? " Template and pattern saves schedule a public build." : "");
+    if (!(await ask(question))) {
+        log("aborted");
+        return 1;
+    }
+    if (command === "pull") {
+        for (const path of deps.store.write(plan.items))
+            log(`  wrote ${path}`);
+        log("review with `git diff`, then commit");
+        if (blocked.length)
+            log(`${blocked.length} conflict(s) left untouched (use --force to take the CMS version)`);
+        return blocked.length ? 1 : 0;
+    }
+    const commit = deps.git.head() + (dirty.length ? "+dirty" : "");
+    const snapshotPath = join(deps.root, ".local", "cms-template", "snapshots", target.name, `${deps.now().toISOString().replace(/[:.]/g, "-")}.json`);
+    mkdirSync(dirname(snapshotPath), { recursive: true, mode: 0o700 });
+    writeFileSync(snapshotPath, `${JSON.stringify({
+        ...plan.snapshot, target: target.name, commit, createdAt: deps.now().toISOString(),
+    }, null, 2)}\n`, { mode: 0o600, flag: "wx" });
+    log(`snapshot ${relative(deps.root, snapshotPath)} (restore with: pnpm cms:template restore ${relative(deps.root, snapshotPath)} --target ${target.name})`);
+    const report = await transport.call("apply", {
+        entities, planHash: plan.planHash, force: options.force, prune: options.prune, commit,
+    });
+    log(`created ${report.created.length}, updated ${report.updated.length}, deleted ${report.deleted.length}, sync markers ${report.markers}`);
+    if (changes.length)
+        log("new Tailwind classes? regenerate the safelist: pnpm safelist:generate");
+    return 0;
+}
+//# sourceMappingURL=command.mjs.map