@zitadel/cli 0.1.0-alpha.0 → 0.1.0-alpha.1

package/dist/commands/status.mjs

@@ -1,46 +1,87 @@
-import { a as readZitadelConfig, n as hasZitadelSecret, o as readZitadelSecret, r as readDevelopmentIssuer, s as BaseCommand } from "../project-C3pSfbao.mjs";
+import { _ as readRuntimeMetadata, b as runtimeSummary, m as localContainerName, t as BaseCommand, u as checkLocalServerHealth } from "../oclif-DSPO9Sck.mjs";
+import { a as readZitadelConfig, n as hasZitadelSecret, o as readZitadelSecret, r as readDevelopmentIssuer, t as hasZitadelConfig } from "../project-Dwb9WVAT.mjs";
+import { s as inspectContainer } from "../docker-C0aVpJqm.mjs";
 //#region src/commands/status.ts
 /**
-* `zitadel status` — summarize the local project state.
+* `zitadel status` — summarize the local server and project state.
 *
-* Reads `zitadel.json` and its secret. A present config with a missing secret
-* is treated as an "orphaned" install (returned as skipped with recovery
-* commands) rather than an error, so status stays informational and safe to
-* run on partial or broken setups.
+* This is intentionally informational: a missing `zitadel.json`, stopped
+* local server, or orphaned config should be visible without making `status`
+* itself fail.
 */
 var Status = class Status extends BaseCommand {
-	static description = "Summarize the local project state.";
+	static description = "Summarize the local Zitadel server and project state.";
 	async run() {
 		const { flags } = await this.parse(Status);
-		await this.toMeta(flags);
-		const { cwd, source } = this.meta;
-		const config = await readZitadelConfig(cwd);
-		if (!await hasZitadelSecret(cwd)) return this.emit({
-			status: "skipped",
-			reason: "orphaned-config",
-			data: {
-				project_id: typeof config.project === "string" ? config.project : void 0,
-				lifecycle: "orphaned-config",
-				message: "zitadel.json exists but .zitadel/secret is missing."
-			},
-			nextCommands: ["zitadel setup --force", "zitadel doctor --fix"]
+		const runtime = await readRuntimeMetadata(flags.cwd ? String(flags.cwd) : process.cwd());
+		if (flags.server === "local") await this.toMeta(flags, {
+			resolveServer: false,
+			source: runtime?.server_url ?? "http://localhost:8080"
 		});
-		const secret = await readZitadelSecret(cwd);
+		else await this.toMeta(flags);
+		const { cwd } = this.meta;
+		const containerName = runtime?.container_name ?? localContainerName(cwd);
+		let docker;
+		let dockerError;
+		try {
+			docker = await inspectContainer(containerName);
+		} catch (error) {
+			dockerError = error instanceof Error ? error.message : String(error);
+		}
+		const healthy = runtime ? await checkLocalServerHealth(runtime.server_url) : false;
+		const serverLifecycle = runtime ? docker?.running && healthy ? "running" : docker?.exists ? "unhealthy" : "stopped" : "missing";
+		const project = await projectStatus(cwd);
+		const nextCommands = nextCommandsFor(serverLifecycle, project.lifecycle);
 		return this.emit({
 			status: "ok",
 			data: {
-				title: "Zitadel project detected.",
-				project: {
-					project_id: String(config.project ?? secret.project_id ?? ""),
-					issuer: readDevelopmentIssuer(config)
+				title: "Zitadel status.",
+				server: {
+					lifecycle: serverLifecycle,
+					runtime: runtimeSummary(runtime),
+					docker: {
+						available: dockerError === void 0,
+						error: dockerError,
+						container_exists: docker?.exists ?? false,
+						container_running: docker?.running ?? false
+					},
+					health: {
+						healthy,
+						url: runtime?.server_url
+					}
 				},
-				server: source,
-				next_actions: ["Run `zitadel doctor`.", "Run `zitadel apply` after config changes."],
-				next_commands: ["zitadel doctor", "zitadel apply"]
+				project,
+				next_commands: nextCommands
 			}
 		});
 	}
 };
+async function projectStatus(cwd) {
+	if (!await hasZitadelConfig(cwd)) return {
+		lifecycle: "not-configured",
+		message: "zitadel.json has not been created yet."
+	};
+	const config = await readZitadelConfig(cwd);
+	if (!await hasZitadelSecret(cwd)) return {
+		lifecycle: "orphaned-config",
+		project_id: typeof config.project === "string" ? config.project : void 0,
+		message: "zitadel.json exists but .zitadel/secret is missing."
+	};
+	const secret = await readZitadelSecret(cwd);
+	return {
+		lifecycle: "configured",
+		project_id: String(config.project ?? secret.project_id ?? ""),
+		issuer: readDevelopmentIssuer(config)
+	};
+}
+function nextCommandsFor(serverLifecycle, projectLifecycle) {
+	const commands = [];
+	if (serverLifecycle !== "running") commands.push("zitadel start");
+	if (projectLifecycle === "not-configured") commands.push("zitadel setup --framework next --server local");
+	else if (projectLifecycle === "orphaned-config") commands.push("zitadel setup --force", "zitadel doctor --fix");
+	else commands.push("zitadel doctor", "zitadel apply");
+	return commands;
+}
 //#endregion
 export { Status as default };
 

package/dist/commands/status.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"status.mjs","names":[],"sources":["../../src/commands/status.ts"],"sourcesContent":["import { BaseCommand, type JsonEnvelope } from \"../lib/oclif\";\nimport {\n  hasZitadelSecret,\n  readDevelopmentIssuer,\n  readZitadelConfig,\n  readZitadelSecret,\n} from \"../lib/project\";\n\n/**\n * `zitadel status` — summarize the local project state.\n *\n * Reads `zitadel.json` and its secret. A present config with a missing secret\n * is treated as an \"orphaned\" install (returned as skipped with recovery\n * commands) rather than an error, so status stays informational and safe to\n * run on partial or broken setups.\n */\nexport default class Status extends BaseCommand {\n  static override description = \"Summarize the local project state.\";\n\n  async run(): Promise<JsonEnvelope> {\n    const { flags } = await this.parse(Status);\n    await this.toMeta(flags);\n    const { cwd, source } = this.meta;\n\n    const config = await readZitadelConfig(cwd);\n\n    if (!(await hasZitadelSecret(cwd))) {\n      return this.emit({\n        status: \"skipped\",\n        reason: \"orphaned-config\",\n        data: {\n          project_id: typeof config.project === \"string\" ? config.project : undefined,\n          lifecycle: \"orphaned-config\",\n          message: \"zitadel.json exists but .zitadel/secret is missing.\",\n        },\n        nextCommands: [\"zitadel setup --force\", \"zitadel doctor --fix\"],\n      });\n    }\n\n    const secret = await readZitadelSecret(cwd);\n    return this.emit({\n      status: \"ok\",\n      data: {\n        title: \"Zitadel project detected.\",\n        project: {\n          project_id: String(config.project ?? secret.project_id ?? \"\"),\n          issuer: readDevelopmentIssuer(config),\n        },\n        server: source,\n        next_actions: [\"Run `zitadel doctor`.\", \"Run `zitadel apply` after config changes.\"],\n        next_commands: [\"zitadel doctor\", \"zitadel apply\"],\n      },\n    });\n  }\n}\n"],"mappings":";;;;;;;;;;AAgBA,IAAqB,SAArB,MAAqB,eAAe,YAAY;CAC9C,OAAgB,cAAc;CAE9B,MAAM,MAA6B;EACjC,MAAM,EAAE,UAAU,MAAM,KAAK,MAAM,OAAO;AAC1C,QAAM,KAAK,OAAO,MAAM;EACxB,MAAM,EAAE,KAAK,WAAW,KAAK;EAE7B,MAAM,SAAS,MAAM,kBAAkB,IAAI;AAE3C,MAAI,CAAE,MAAM,iBAAiB,IAAI,CAC/B,QAAO,KAAK,KAAK;GACf,QAAQ;GACR,QAAQ;GACR,MAAM;IACJ,YAAY,OAAO,OAAO,YAAY,WAAW,OAAO,UAAU,KAAA;IAClE,WAAW;IACX,SAAS;IACV;GACD,cAAc,CAAC,yBAAyB,uBAAuB;GAChE,CAAC;EAGJ,MAAM,SAAS,MAAM,kBAAkB,IAAI;AAC3C,SAAO,KAAK,KAAK;GACf,QAAQ;GACR,MAAM;IACJ,OAAO;IACP,SAAS;KACP,YAAY,OAAO,OAAO,WAAW,OAAO,cAAc,GAAG;KAC7D,QAAQ,sBAAsB,OAAO;KACtC;IACD,QAAQ;IACR,cAAc,CAAC,yBAAyB,4CAA4C;IACpF,eAAe,CAAC,kBAAkB,gBAAgB;IACnD;GACF,CAAC"}
+{"version":3,"file":"status.mjs","names":[],"sources":["../../src/commands/status.ts"],"sourcesContent":["import { BaseCommand, type JsonEnvelope } from \"../lib/oclif\";\nimport { inspectContainer } from \"../lib/local-server/docker\";\nimport {\n  DEFAULT_LOCAL_SERVER_URL,\n  checkLocalServerHealth,\n  localContainerName,\n  readRuntimeMetadata,\n  runtimeSummary,\n} from \"../lib/local-server/runtime\";\nimport {\n  hasZitadelConfig,\n  hasZitadelSecret,\n  readDevelopmentIssuer,\n  readZitadelConfig,\n  readZitadelSecret,\n} from \"../lib/project\";\n\n/**\n * `zitadel status` — summarize the local server and project state.\n *\n * This is intentionally informational: a missing `zitadel.json`, stopped\n * local server, or orphaned config should be visible without making `status`\n * itself fail.\n */\nexport default class Status extends BaseCommand {\n  static override description = \"Summarize the local Zitadel server and project state.\";\n\n  async run(): Promise<JsonEnvelope> {\n    const { flags } = await this.parse(Status);\n    const runtime = await readRuntimeMetadata(flags.cwd ? String(flags.cwd) : process.cwd());\n    if (flags.server === \"local\") {\n      await this.toMeta(flags, {\n        resolveServer: false,\n        source: runtime?.server_url ?? DEFAULT_LOCAL_SERVER_URL,\n      });\n    } else {\n      await this.toMeta(flags);\n    }\n    const { cwd } = this.meta;\n\n    const containerName = runtime?.container_name ?? localContainerName(cwd);\n    let docker: Awaited<ReturnType<typeof inspectContainer>> | undefined;\n    let dockerError: string | undefined;\n    try {\n      docker = await inspectContainer(containerName);\n    } catch (error) {\n      dockerError = error instanceof Error ? error.message : String(error);\n    }\n    const healthy = runtime ? await checkLocalServerHealth(runtime.server_url) : false;\n    const serverLifecycle = runtime\n      ? docker?.running && healthy\n        ? \"running\"\n        : docker?.exists\n          ? \"unhealthy\"\n          : \"stopped\"\n      : \"missing\";\n\n    const project = await projectStatus(cwd);\n    const nextCommands = nextCommandsFor(serverLifecycle, project.lifecycle);\n\n    return this.emit({\n      status: \"ok\",\n      data: {\n        title: \"Zitadel status.\",\n        server: {\n          lifecycle: serverLifecycle,\n          runtime: runtimeSummary(runtime),\n          docker: {\n            available: dockerError === undefined,\n            error: dockerError,\n            container_exists: docker?.exists ?? false,\n            container_running: docker?.running ?? false,\n          },\n          health: {\n            healthy,\n            url: runtime?.server_url,\n          },\n        },\n        project,\n        next_commands: nextCommands,\n      },\n    });\n  }\n}\n\ntype ProjectStatus =\n  | {\n      lifecycle: \"not-configured\";\n      message: string;\n    }\n  | {\n      lifecycle: \"orphaned-config\";\n      project_id?: string;\n      message: string;\n    }\n  | {\n      lifecycle: \"configured\";\n      project_id: string;\n      issuer?: string;\n    };\n\nasync function projectStatus(cwd: string): Promise<ProjectStatus> {\n  if (!(await hasZitadelConfig(cwd))) {\n    return {\n      lifecycle: \"not-configured\",\n      message: \"zitadel.json has not been created yet.\",\n    };\n  }\n\n  const config = await readZitadelConfig(cwd);\n  if (!(await hasZitadelSecret(cwd))) {\n    return {\n      lifecycle: \"orphaned-config\",\n      project_id: typeof config.project === \"string\" ? config.project : undefined,\n      message: \"zitadel.json exists but .zitadel/secret is missing.\",\n    };\n  }\n\n  const secret = await readZitadelSecret(cwd);\n  return {\n    lifecycle: \"configured\",\n    project_id: String(config.project ?? secret.project_id ?? \"\"),\n    issuer: readDevelopmentIssuer(config),\n  };\n}\n\nfunction nextCommandsFor(serverLifecycle: string, projectLifecycle: ProjectStatus[\"lifecycle\"]): string[] {\n  const commands: string[] = [];\n  if (serverLifecycle !== \"running\") {\n    commands.push(\"zitadel start\");\n  }\n  if (projectLifecycle === \"not-configured\") {\n    commands.push(\"zitadel setup --framework next --server local\");\n  } else if (projectLifecycle === \"orphaned-config\") {\n    commands.push(\"zitadel setup --force\", \"zitadel doctor --fix\");\n  } else {\n    commands.push(\"zitadel doctor\", \"zitadel apply\");\n  }\n  return commands;\n}\n"],"mappings":";;;;;;;;;;;AAwBA,IAAqB,SAArB,MAAqB,eAAe,YAAY;CAC9C,OAAgB,cAAc;CAE9B,MAAM,MAA6B;EACjC,MAAM,EAAE,UAAU,MAAM,KAAK,MAAM,OAAO;EAC1C,MAAM,UAAU,MAAM,oBAAoB,MAAM,MAAM,OAAO,MAAM,IAAI,GAAG,QAAQ,KAAK,CAAC;AACxF,MAAI,MAAM,WAAW,QACnB,OAAM,KAAK,OAAO,OAAO;GACvB,eAAe;GACf,QAAQ,SAAS,cAAA;GAClB,CAAC;MAEF,OAAM,KAAK,OAAO,MAAM;EAE1B,MAAM,EAAE,QAAQ,KAAK;EAErB,MAAM,gBAAgB,SAAS,kBAAkB,mBAAmB,IAAI;EACxE,IAAI;EACJ,IAAI;AACJ,MAAI;AACF,YAAS,MAAM,iBAAiB,cAAc;WACvC,OAAO;AACd,iBAAc,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;;EAEtE,MAAM,UAAU,UAAU,MAAM,uBAAuB,QAAQ,WAAW,GAAG;EAC7E,MAAM,kBAAkB,UACpB,QAAQ,WAAW,UACjB,YACA,QAAQ,SACN,cACA,YACJ;EAEJ,MAAM,UAAU,MAAM,cAAc,IAAI;EACxC,MAAM,eAAe,gBAAgB,iBAAiB,QAAQ,UAAU;AAExE,SAAO,KAAK,KAAK;GACf,QAAQ;GACR,MAAM;IACJ,OAAO;IACP,QAAQ;KACN,WAAW;KACX,SAAS,eAAe,QAAQ;KAChC,QAAQ;MACN,WAAW,gBAAgB,KAAA;MAC3B,OAAO;MACP,kBAAkB,QAAQ,UAAU;MACpC,mBAAmB,QAAQ,WAAW;MACvC;KACD,QAAQ;MACN;MACA,KAAK,SAAS;MACf;KACF;IACD;IACA,eAAe;IAChB;GACF,CAAC;;;AAoBN,eAAe,cAAc,KAAqC;AAChE,KAAI,CAAE,MAAM,iBAAiB,IAAI,CAC/B,QAAO;EACL,WAAW;EACX,SAAS;EACV;CAGH,MAAM,SAAS,MAAM,kBAAkB,IAAI;AAC3C,KAAI,CAAE,MAAM,iBAAiB,IAAI,CAC/B,QAAO;EACL,WAAW;EACX,YAAY,OAAO,OAAO,YAAY,WAAW,OAAO,UAAU,KAAA;EAClE,SAAS;EACV;CAGH,MAAM,SAAS,MAAM,kBAAkB,IAAI;AAC3C,QAAO;EACL,WAAW;EACX,YAAY,OAAO,OAAO,WAAW,OAAO,cAAc,GAAG;EAC7D,QAAQ,sBAAsB,OAAO;EACtC;;AAGH,SAAS,gBAAgB,iBAAyB,kBAAwD;CACxG,MAAM,WAAqB,EAAE;AAC7B,KAAI,oBAAoB,UACtB,UAAS,KAAK,gBAAgB;AAEhC,KAAI,qBAAqB,iBACvB,UAAS,KAAK,gDAAgD;UACrD,qBAAqB,kBAC9B,UAAS,KAAK,yBAAyB,uBAAuB;KAE9D,UAAS,KAAK,kBAAkB,gBAAgB;AAElD,QAAO"}

package/dist/commands/stop.mjs

@@ -0,0 +1,44 @@
+import { _ as readRuntimeMetadata, m as localContainerName, t as BaseCommand } from "../oclif-DSPO9Sck.mjs";
+import { u as stopAndRemoveContainer } from "../docker-C0aVpJqm.mjs";
+//#region src/commands/stop.ts
+var Stop = class Stop extends BaseCommand {
+	static description = "Stop the local Zitadel server.";
+	async run() {
+		const { flags } = await this.parse(Stop);
+		const runtime = await readRuntimeMetadata(flags.cwd ? String(flags.cwd) : process.cwd());
+		await this.toMeta(flags, {
+			resolveServer: false,
+			source: runtime?.server_url ?? "http://localhost:8080"
+		});
+		const containerName = runtime?.container_name ?? localContainerName(this.meta.cwd);
+		if (this.meta.dryRun) return this.emit({
+			status: "ok",
+			data: {
+				title: "Local Zitadel server stop plan.",
+				runtime: {
+					container_name: containerName,
+					data_preserved: true,
+					data_dir: runtime?.data_dir
+				},
+				next_commands: ["zitadel stop"]
+			}
+		});
+		await stopAndRemoveContainer(containerName);
+		return this.emit({
+			status: "ok",
+			data: {
+				title: "Local Zitadel server stopped.",
+				runtime: {
+					container_name: containerName,
+					data_preserved: true,
+					data_dir: runtime?.data_dir
+				},
+				next_commands: ["zitadel start", "zitadel reset --force"]
+			}
+		});
+	}
+};
+//#endregion
+export { Stop as default };
+
+//# sourceMappingURL=stop.mjs.map

package/dist/commands/stop.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"stop.mjs","names":[],"sources":["../../src/commands/stop.ts"],"sourcesContent":["import { BaseCommand, type JsonEnvelope } from \"../lib/oclif\";\nimport { stopAndRemoveContainer } from \"../lib/local-server/docker\";\nimport {\n  DEFAULT_LOCAL_SERVER_URL,\n  localContainerName,\n  readRuntimeMetadata,\n} from \"../lib/local-server/runtime\";\n\nexport default class Stop extends BaseCommand {\n  static override description = \"Stop the local Zitadel server.\";\n\n  async run(): Promise<JsonEnvelope> {\n    const { flags } = await this.parse(Stop);\n    const runtime = await readRuntimeMetadata(flags.cwd ? String(flags.cwd) : process.cwd());\n    await this.toMeta(flags, {\n      resolveServer: false,\n      source: runtime?.server_url ?? DEFAULT_LOCAL_SERVER_URL,\n    });\n\n    const containerName = runtime?.container_name ?? localContainerName(this.meta.cwd);\n    if (this.meta.dryRun) {\n      return this.emit({\n        status: \"ok\",\n        data: {\n          title: \"Local Zitadel server stop plan.\",\n          runtime: {\n            container_name: containerName,\n            data_preserved: true,\n            data_dir: runtime?.data_dir,\n          },\n          next_commands: [\"zitadel stop\"],\n        },\n      });\n    }\n\n    await stopAndRemoveContainer(containerName);\n\n    return this.emit({\n      status: \"ok\",\n      data: {\n        title: \"Local Zitadel server stopped.\",\n        runtime: {\n          container_name: containerName,\n          data_preserved: true,\n          data_dir: runtime?.data_dir,\n        },\n        next_commands: [\"zitadel start\", \"zitadel reset --force\"],\n      },\n    });\n  }\n}\n"],"mappings":";;;AAQA,IAAqB,OAArB,MAAqB,aAAa,YAAY;CAC5C,OAAgB,cAAc;CAE9B,MAAM,MAA6B;EACjC,MAAM,EAAE,UAAU,MAAM,KAAK,MAAM,KAAK;EACxC,MAAM,UAAU,MAAM,oBAAoB,MAAM,MAAM,OAAO,MAAM,IAAI,GAAG,QAAQ,KAAK,CAAC;AACxF,QAAM,KAAK,OAAO,OAAO;GACvB,eAAe;GACf,QAAQ,SAAS,cAAA;GAClB,CAAC;EAEF,MAAM,gBAAgB,SAAS,kBAAkB,mBAAmB,KAAK,KAAK,IAAI;AAClF,MAAI,KAAK,KAAK,OACZ,QAAO,KAAK,KAAK;GACf,QAAQ;GACR,MAAM;IACJ,OAAO;IACP,SAAS;KACP,gBAAgB;KAChB,gBAAgB;KAChB,UAAU,SAAS;KACpB;IACD,eAAe,CAAC,eAAe;IAChC;GACF,CAAC;AAGJ,QAAM,uBAAuB,cAAc;AAE3C,SAAO,KAAK,KAAK;GACf,QAAQ;GACR,MAAM;IACJ,OAAO;IACP,SAAS;KACP,gBAAgB;KAChB,gBAAgB;KAChB,UAAU,SAAS;KACpB;IACD,eAAe,CAAC,iBAAiB,wBAAwB;IAC1D;GACF,CAAC"}

package/dist/docker-C0aVpJqm.mjs

@@ -0,0 +1,209 @@
+import { T as ZitadelError, a as CONTAINER_HTTP_PORT, i as CONTAINER_DATA_DIR } from "./oclif-DSPO9Sck.mjs";
+import { spawn } from "node:child_process";
+//#region src/lib/local-server/docker.ts
+function dockerRunArgs(spec) {
+	const args = [
+		"run",
+		"--detach",
+		"--name",
+		spec.containerName,
+		"--publish",
+		`127.0.0.1:${spec.port}:${CONTAINER_HTTP_PORT}`,
+		"--volume",
+		`${spec.dataDir}:${CONTAINER_DATA_DIR}`,
+		"--env",
+		`NEXTGEN_SERVER_ADDRESS=:${CONTAINER_HTTP_PORT}`,
+		"--env",
+		`NEXTGEN_SERVER_DATA_DIR=${CONTAINER_DATA_DIR}`
+	];
+	if (spec.identity) args.push("--volume", `${spec.identity.passwdFile}:/etc/passwd:ro`, "--volume", `${spec.identity.groupFile}:/etc/group:ro`, "--user", `${spec.identity.uid}:${spec.identity.gid}`);
+	args.push(spec.image);
+	return args;
+}
+async function runDocker(args) {
+	return new Promise((resolve, reject) => {
+		const child = spawn("docker", args, {
+			stdio: [
+				"ignore",
+				"pipe",
+				"pipe"
+			],
+			env: process.env
+		});
+		let stdout = "";
+		let stderr = "";
+		child.stdout?.setEncoding("utf8");
+		child.stderr?.setEncoding("utf8");
+		child.stdout?.on("data", (chunk) => {
+			stdout += chunk;
+		});
+		child.stderr?.on("data", (chunk) => {
+			stderr += chunk;
+		});
+		child.on("error", reject);
+		child.on("close", (code) => {
+			resolve({
+				status: code ?? 1,
+				stdout,
+				stderr
+			});
+		});
+	});
+}
+async function streamDocker(args) {
+	await new Promise((resolve, reject) => {
+		const child = spawn("docker", args, {
+			stdio: "inherit",
+			env: process.env
+		});
+		child.on("error", reject);
+		child.on("close", (code) => {
+			if (code === 0) resolve();
+			else reject(/* @__PURE__ */ new Error(`docker ${args.join(" ")} exited with status ${code ?? 1}`));
+		});
+	});
+}
+async function dockerAvailable() {
+	return runDocker([
+		"version",
+		"--format",
+		"{{.Server.Version}}"
+	]);
+}
+async function pullImage(image) {
+	await requireDocker([
+		"pull",
+		"--quiet",
+		image
+	], `Pull Docker image ${image}`);
+}
+async function imageExists(image) {
+	let result;
+	const args = [
+		"image",
+		"inspect",
+		image
+	];
+	try {
+		result = await runDocker(args);
+	} catch (error) {
+		throw dockerError(`Inspect Docker image ${image}`, args, error);
+	}
+	return result.status === 0;
+}
+async function imageAvailable(image) {
+	if (await imageExists(image)) return "local";
+	const args = [
+		"manifest",
+		"inspect",
+		image
+	];
+	let result;
+	try {
+		result = await runDocker(args);
+	} catch (error) {
+		throw dockerError(`Inspect Docker image ${image}`, args, error);
+	}
+	if (result.status === 0) return "remote";
+	throw dockerError(`Inspect Docker image ${image}`, args, result);
+}
+async function ensureImage(image) {
+	if (await imageExists(image)) return "local";
+	await pullImage(image);
+	return "pulled";
+}
+async function inspectContainer(containerName) {
+	const result = await runDocker([
+		"inspect",
+		"--format",
+		"{{.Id}} {{.State.Running}}",
+		containerName
+	]);
+	if (result.status !== 0) return {
+		exists: false,
+		running: false
+	};
+	const [id, running] = result.stdout.trim().split(/\s+/);
+	return {
+		exists: true,
+		running: running === "true",
+		id
+	};
+}
+async function startContainer(spec) {
+	return (await requireDocker(dockerRunArgs(spec), "Start local Zitadel container")).stdout.trim();
+}
+async function stopAndRemoveContainer(containerName) {
+	const inspect = await inspectContainer(containerName);
+	if (!inspect.exists) return;
+	if (inspect.running) await requireDocker(["stop", containerName], `Stop ${containerName}`);
+	await requireDocker(["rm", containerName], `Remove ${containerName}`);
+}
+async function containerLogs(containerName, tail) {
+	return (await requireDocker([
+		"logs",
+		"--tail",
+		String(tail),
+		containerName
+	], "Read logs")).stdout;
+}
+async function followContainerLogs(containerName, tail) {
+	await streamDocker([
+		"logs",
+		"--tail",
+		String(tail),
+		"--follow",
+		containerName
+	]);
+}
+function currentUser() {
+	const getuid = process.getuid;
+	const getgid = process.getgid;
+	if (typeof getuid !== "function") return {};
+	const uid = getuid();
+	return {
+		uid,
+		gid: typeof getgid === "function" ? getgid() : uid
+	};
+}
+function metadataFromStart(input) {
+	return {
+		schema_version: 1,
+		container_name: input.containerName,
+		container_id: input.containerId,
+		image: input.image,
+		port: input.port,
+		server_url: input.serverUrl,
+		data_dir: input.cwdDataDir,
+		created_at: (/* @__PURE__ */ new Date()).toISOString(),
+		cli_version: input.cliVersion
+	};
+}
+async function requireDocker(args, action) {
+	let result;
+	try {
+		result = await runDocker(args);
+	} catch (error) {
+		throw dockerError(action, args, error);
+	}
+	if (result.status !== 0) throw dockerError(action, args, result);
+	return result;
+}
+function dockerError(action, args, cause) {
+	const details = cause && typeof cause === "object" && "stderr" in cause ? {
+		command: ["docker", ...args],
+		stderr: String(cause.stderr)
+	} : {
+		command: ["docker", ...args],
+		cause
+	};
+	return new ZitadelError("E_VALIDATION", `${action} failed`, {
+		hint: "Check that Docker is installed, running, and reachable from this shell.",
+		nextCommands: ["zitadel doctor"],
+		details
+	});
+}
+//#endregion
+export { followContainerLogs as a, metadataFromStart as c, ensureImage as i, startContainer as l, currentUser as n, imageAvailable as o, dockerAvailable as r, inspectContainer as s, containerLogs as t, stopAndRemoveContainer as u };
+
+//# sourceMappingURL=docker-C0aVpJqm.mjs.map

package/dist/docker-C0aVpJqm.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker-C0aVpJqm.mjs","names":[],"sources":["../src/lib/local-server/docker.ts"],"sourcesContent":["import { spawn } from \"node:child_process\";\n\nimport { ZitadelError } from \"../errors\";\nimport {\n  CONTAINER_DATA_DIR,\n  CONTAINER_HTTP_PORT,\n  type ContainerIdentity,\n  type RuntimeMetadata,\n} from \"./runtime\";\n\nexport type DockerResult = {\n  status: number;\n  stdout: string;\n  stderr: string;\n};\n\nexport type DockerRunSpec = {\n  containerName: string;\n  image: string;\n  port: number;\n  dataDir: string;\n  identity?: ContainerIdentity;\n};\n\nexport function dockerRunArgs(spec: DockerRunSpec): string[] {\n  const args = [\n    \"run\",\n    \"--detach\",\n    \"--name\",\n    spec.containerName,\n    \"--publish\",\n    `127.0.0.1:${spec.port}:${CONTAINER_HTTP_PORT}`,\n    \"--volume\",\n    `${spec.dataDir}:${CONTAINER_DATA_DIR}`,\n    \"--env\",\n    `NEXTGEN_SERVER_ADDRESS=:${CONTAINER_HTTP_PORT}`,\n    \"--env\",\n    `NEXTGEN_SERVER_DATA_DIR=${CONTAINER_DATA_DIR}`,\n  ];\n\n  if (spec.identity) {\n    args.push(\n      \"--volume\",\n      `${spec.identity.passwdFile}:/etc/passwd:ro`,\n      \"--volume\",\n      `${spec.identity.groupFile}:/etc/group:ro`,\n      \"--user\",\n      `${spec.identity.uid}:${spec.identity.gid}`,\n    );\n  }\n\n  args.push(spec.image);\n  return args;\n}\n\nexport async function runDocker(args: string[]): Promise<DockerResult> {\n  return new Promise((resolve, reject) => {\n    const child = spawn(\"docker\", args, {\n      stdio: [\"ignore\", \"pipe\", \"pipe\"],\n      env: process.env,\n    });\n    let stdout = \"\";\n    let stderr = \"\";\n    child.stdout?.setEncoding(\"utf8\");\n    child.stderr?.setEncoding(\"utf8\");\n    child.stdout?.on(\"data\", (chunk: string) => {\n      stdout += chunk;\n    });\n    child.stderr?.on(\"data\", (chunk: string) => {\n      stderr += chunk;\n    });\n    child.on(\"error\", reject);\n    child.on(\"close\", (code) => {\n      resolve({ status: code ?? 1, stdout, stderr });\n    });\n  });\n}\n\nexport async function streamDocker(args: string[]): Promise<void> {\n  await new Promise<void>((resolve, reject) => {\n    const child = spawn(\"docker\", args, {\n      stdio: \"inherit\",\n      env: process.env,\n    });\n    child.on(\"error\", reject);\n    child.on(\"close\", (code) => {\n      if (code === 0) {\n        resolve();\n      } else {\n        reject(new Error(`docker ${args.join(\" \")} exited with status ${code ?? 1}`));\n      }\n    });\n  });\n}\n\nexport async function dockerAvailable(): Promise<DockerResult> {\n  return runDocker([\"version\", \"--format\", \"{{.Server.Version}}\"]);\n}\n\nexport async function pullImage(image: string): Promise<void> {\n  await requireDocker([\"pull\", \"--quiet\", image], `Pull Docker image ${image}`);\n}\n\nexport async function imageExists(image: string): Promise<boolean> {\n  let result: DockerResult;\n  const args = [\"image\", \"inspect\", image];\n  try {\n    result = await runDocker(args);\n  } catch (error) {\n    throw dockerError(`Inspect Docker image ${image}`, args, error);\n  }\n  return result.status === 0;\n}\n\nexport async function imageAvailable(image: string): Promise<\"local\" | \"remote\"> {\n  if (await imageExists(image)) {\n    return \"local\";\n  }\n\n  const args = [\"manifest\", \"inspect\", image];\n  let result: DockerResult;\n  try {\n    result = await runDocker(args);\n  } catch (error) {\n    throw dockerError(`Inspect Docker image ${image}`, args, error);\n  }\n  if (result.status === 0) {\n    return \"remote\";\n  }\n  throw dockerError(`Inspect Docker image ${image}`, args, result);\n}\n\nexport async function ensureImage(image: string): Promise<\"local\" | \"pulled\"> {\n  if (await imageExists(image)) {\n    return \"local\";\n  }\n  await pullImage(image);\n  return \"pulled\";\n}\n\nexport async function inspectContainer(containerName: string): Promise<{\n  exists: boolean;\n  running: boolean;\n  id?: string;\n}> {\n  const result = await runDocker([\n    \"inspect\",\n    \"--format\",\n    \"{{.Id}} {{.State.Running}}\",\n    containerName,\n  ]);\n  if (result.status !== 0) {\n    return { exists: false, running: false };\n  }\n  const [id, running] = result.stdout.trim().split(/\\s+/);\n  return { exists: true, running: running === \"true\", id };\n}\n\nexport async function startContainer(spec: DockerRunSpec): Promise<string> {\n  const args = dockerRunArgs(spec);\n  const result = await requireDocker(args, \"Start local Zitadel container\");\n  return result.stdout.trim();\n}\n\nexport async function stopAndRemoveContainer(containerName: string): Promise<void> {\n  const inspect = await inspectContainer(containerName);\n  if (!inspect.exists) {\n    return;\n  }\n  if (inspect.running) {\n    await requireDocker([\"stop\", containerName], `Stop ${containerName}`);\n  }\n  await requireDocker([\"rm\", containerName], `Remove ${containerName}`);\n}\n\nexport async function containerLogs(containerName: string, tail: number): Promise<string> {\n  const result = await requireDocker([\"logs\", \"--tail\", String(tail), containerName], \"Read logs\");\n  return result.stdout;\n}\n\nexport async function followContainerLogs(containerName: string, tail: number): Promise<void> {\n  await streamDocker([\"logs\", \"--tail\", String(tail), \"--follow\", containerName]);\n}\n\nexport function currentUser(): { uid?: number; gid?: number } {\n  const getuid = process.getuid;\n  const getgid = process.getgid;\n  if (typeof getuid !== \"function\") {\n    return {};\n  }\n  const uid = getuid();\n  const gid = typeof getgid === \"function\" ? getgid() : uid;\n  return { uid, gid };\n}\n\nexport function metadataFromStart(input: {\n  cwdDataDir: string;\n  cliVersion: string;\n  containerName: string;\n  containerId: string;\n  image: string;\n  port: number;\n  serverUrl: string;\n}): RuntimeMetadata {\n  return {\n    schema_version: 1,\n    container_name: input.containerName,\n    container_id: input.containerId,\n    image: input.image,\n    port: input.port,\n    server_url: input.serverUrl,\n    data_dir: input.cwdDataDir,\n    created_at: new Date().toISOString(),\n    cli_version: input.cliVersion,\n  };\n}\n\nexport async function requireDocker(args: string[], action: string): Promise<DockerResult> {\n  let result: DockerResult;\n  try {\n    result = await runDocker(args);\n  } catch (error) {\n    throw dockerError(action, args, error);\n  }\n  if (result.status !== 0) {\n    throw dockerError(action, args, result);\n  }\n  return result;\n}\n\nfunction dockerError(action: string, args: string[], cause: unknown): ZitadelError {\n  const details =\n    cause && typeof cause === \"object\" && \"stderr\" in cause\n      ? { command: [\"docker\", ...args], stderr: String((cause as { stderr?: unknown }).stderr) }\n      : { command: [\"docker\", ...args], cause };\n  return new ZitadelError(\"E_VALIDATION\", `${action} failed`, {\n    hint: \"Check that Docker is installed, running, and reachable from this shell.\",\n    nextCommands: [\"zitadel doctor\"],\n    details,\n  });\n}\n"],"mappings":";;;AAwBA,SAAgB,cAAc,MAA+B;CAC3D,MAAM,OAAO;EACX;EACA;EACA;EACA,KAAK;EACL;EACA,aAAa,KAAK,KAAK,GAAG;EAC1B;EACA,GAAG,KAAK,QAAQ,GAAG;EACnB;EACA,2BAA2B;EAC3B;EACA,2BAA2B;EAC5B;AAED,KAAI,KAAK,SACP,MAAK,KACH,YACA,GAAG,KAAK,SAAS,WAAW,kBAC5B,YACA,GAAG,KAAK,SAAS,UAAU,iBAC3B,UACA,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS,MACvC;AAGH,MAAK,KAAK,KAAK,MAAM;AACrB,QAAO;;AAGT,eAAsB,UAAU,MAAuC;AACrE,QAAO,IAAI,SAAS,SAAS,WAAW;EACtC,MAAM,QAAQ,MAAM,UAAU,MAAM;GAClC,OAAO;IAAC;IAAU;IAAQ;IAAO;GACjC,KAAK,QAAQ;GACd,CAAC;EACF,IAAI,SAAS;EACb,IAAI,SAAS;AACb,QAAM,QAAQ,YAAY,OAAO;AACjC,QAAM,QAAQ,YAAY,OAAO;AACjC,QAAM,QAAQ,GAAG,SAAS,UAAkB;AAC1C,aAAU;IACV;AACF,QAAM,QAAQ,GAAG,SAAS,UAAkB;AAC1C,aAAU;IACV;AACF,QAAM,GAAG,SAAS,OAAO;AACzB,QAAM,GAAG,UAAU,SAAS;AAC1B,WAAQ;IAAE,QAAQ,QAAQ;IAAG;IAAQ;IAAQ,CAAC;IAC9C;GACF;;AAGJ,eAAsB,aAAa,MAA+B;AAChE,OAAM,IAAI,SAAe,SAAS,WAAW;EAC3C,MAAM,QAAQ,MAAM,UAAU,MAAM;GAClC,OAAO;GACP,KAAK,QAAQ;GACd,CAAC;AACF,QAAM,GAAG,SAAS,OAAO;AACzB,QAAM,GAAG,UAAU,SAAS;AAC1B,OAAI,SAAS,EACX,UAAS;OAET,wBAAO,IAAI,MAAM,UAAU,KAAK,KAAK,IAAI,CAAC,sBAAsB,QAAQ,IAAI,CAAC;IAE/E;GACF;;AAGJ,eAAsB,kBAAyC;AAC7D,QAAO,UAAU;EAAC;EAAW;EAAY;EAAsB,CAAC;;AAGlE,eAAsB,UAAU,OAA8B;AAC5D,OAAM,cAAc;EAAC;EAAQ;EAAW;EAAM,EAAE,qBAAqB,QAAQ;;AAG/E,eAAsB,YAAY,OAAiC;CACjE,IAAI;CACJ,MAAM,OAAO;EAAC;EAAS;EAAW;EAAM;AACxC,KAAI;AACF,WAAS,MAAM,UAAU,KAAK;UACvB,OAAO;AACd,QAAM,YAAY,wBAAwB,SAAS,MAAM,MAAM;;AAEjE,QAAO,OAAO,WAAW;;AAG3B,eAAsB,eAAe,OAA4C;AAC/E,KAAI,MAAM,YAAY,MAAM,CAC1B,QAAO;CAGT,MAAM,OAAO;EAAC;EAAY;EAAW;EAAM;CAC3C,IAAI;AACJ,KAAI;AACF,WAAS,MAAM,UAAU,KAAK;UACvB,OAAO;AACd,QAAM,YAAY,wBAAwB,SAAS,MAAM,MAAM;;AAEjE,KAAI,OAAO,WAAW,EACpB,QAAO;AAET,OAAM,YAAY,wBAAwB,SAAS,MAAM,OAAO;;AAGlE,eAAsB,YAAY,OAA4C;AAC5E,KAAI,MAAM,YAAY,MAAM,CAC1B,QAAO;AAET,OAAM,UAAU,MAAM;AACtB,QAAO;;AAGT,eAAsB,iBAAiB,eAIpC;CACD,MAAM,SAAS,MAAM,UAAU;EAC7B;EACA;EACA;EACA;EACD,CAAC;AACF,KAAI,OAAO,WAAW,EACpB,QAAO;EAAE,QAAQ;EAAO,SAAS;EAAO;CAE1C,MAAM,CAAC,IAAI,WAAW,OAAO,OAAO,MAAM,CAAC,MAAM,MAAM;AACvD,QAAO;EAAE,QAAQ;EAAM,SAAS,YAAY;EAAQ;EAAI;;AAG1D,eAAsB,eAAe,MAAsC;AAGzE,SAAO,MADc,cADR,cAAc,KACY,EAAE,gCAAgC,EAC3D,OAAO,MAAM;;AAG7B,eAAsB,uBAAuB,eAAsC;CACjF,MAAM,UAAU,MAAM,iBAAiB,cAAc;AACrD,KAAI,CAAC,QAAQ,OACX;AAEF,KAAI,QAAQ,QACV,OAAM,cAAc,CAAC,QAAQ,cAAc,EAAE,QAAQ,gBAAgB;AAEvE,OAAM,cAAc,CAAC,MAAM,cAAc,EAAE,UAAU,gBAAgB;;AAGvE,eAAsB,cAAc,eAAuB,MAA+B;AAExF,SAAO,MADc,cAAc;EAAC;EAAQ;EAAU,OAAO,KAAK;EAAE;EAAc,EAAE,YAAY,EAClF;;AAGhB,eAAsB,oBAAoB,eAAuB,MAA6B;AAC5F,OAAM,aAAa;EAAC;EAAQ;EAAU,OAAO,KAAK;EAAE;EAAY;EAAc,CAAC;;AAGjF,SAAgB,cAA8C;CAC5D,MAAM,SAAS,QAAQ;CACvB,MAAM,SAAS,QAAQ;AACvB,KAAI,OAAO,WAAW,WACpB,QAAO,EAAE;CAEX,MAAM,MAAM,QAAQ;AAEpB,QAAO;EAAE;EAAK,KADF,OAAO,WAAW,aAAa,QAAQ,GAAG;EACnC;;AAGrB,SAAgB,kBAAkB,OAQd;AAClB,QAAO;EACL,gBAAgB;EAChB,gBAAgB,MAAM;EACtB,cAAc,MAAM;EACpB,OAAO,MAAM;EACb,MAAM,MAAM;EACZ,YAAY,MAAM;EAClB,UAAU,MAAM;EAChB,6BAAY,IAAI,MAAM,EAAC,aAAa;EACpC,aAAa,MAAM;EACpB;;AAGH,eAAsB,cAAc,MAAgB,QAAuC;CACzF,IAAI;AACJ,KAAI;AACF,WAAS,MAAM,UAAU,KAAK;UACvB,OAAO;AACd,QAAM,YAAY,QAAQ,MAAM,MAAM;;AAExC,KAAI,OAAO,WAAW,EACpB,OAAM,YAAY,QAAQ,MAAM,OAAO;AAEzC,QAAO;;AAGT,SAAS,YAAY,QAAgB,MAAgB,OAA8B;CACjF,MAAM,UACJ,SAAS,OAAO,UAAU,YAAY,YAAY,QAC9C;EAAE,SAAS,CAAC,UAAU,GAAG,KAAK;EAAE,QAAQ,OAAQ,MAA+B,OAAO;EAAE,GACxF;EAAE,SAAS,CAAC,UAAU,GAAG,KAAK;EAAE;EAAO;AAC7C,QAAO,IAAI,aAAa,gBAAgB,GAAG,OAAO,UAAU;EAC1D,MAAM;EACN,cAAc,CAAC,iBAAiB;EAChC;EACD,CAAC"}