alepha 0.19.1 → 0.19.3

package/dist/cli/platform/index.js

@@ -1,11 +1,12 @@
-import { $atom, $inject, $module, $use, Alepha, AlephaError, t } from "alepha";
+import { $atom, $inject, $module, $state, Alepha, AlephaError, t } from "alepha";
 import { AlephaCli, AlephaCliUtils, AppEntryProvider, PackageManagerUtils, ViteBuildProvider } from "alepha/cli";
+import { cliConfigPlugins } from "alepha/cli/config";
 import { $command, Asker, EnvUtils, Runner } from "alepha/command";
 import { $logger, ConsoleColorProvider } from "alepha/logger";
 import { FileSystemProvider, ShellProvider } from "alepha/system";
 import { DateTimeProvider } from "alepha/datetime";
-import { dirname, join } from "node:path";
 import { homedir, platform } from "node:os";
+import { join } from "node:path";
 //#region ../../src/cli/platform/providers/PlatformCacheProvider.ts
 /**
 * Caches cloud provider login state to avoid slow auth checks.
@@ -977,483 +978,6 @@ var CloudflareAdapter = class CloudflareAdapter extends PlatformAdapter {
 	}
 };
 //#endregion
-//#region ../../src/cli/platform/services/DockerComposeGenerator.ts
-/**
-* Generates docker-compose.yml content for local, remote, and shared Traefik.
-*
-* Pure logic — no I/O, no DI. Takes context, returns YAML string.
-*/
-var DockerComposeGenerator = class {
-	/**
-	* Generate the shared Traefik compose.
-	*
-	* This is a static singleton — one per VPS at /opt/alepha/traefik/.
-	* It creates the alepha-proxy network that project composes connect to.
-	*/
-	generateTraefik() {
-		return [
-			"# Auto-generated by Alepha. Do not edit.",
-			"services:",
-			"  traefik:",
-			"    image: traefik:v3",
-			"    container_name: alepha-traefik",
-			"    command:",
-			"      - --providers.docker=true",
-			"      - --providers.docker.exposedbydefault=false",
-			"      - --entrypoints.web.address=:80",
-			"      - --entrypoints.websecure.address=:443",
-			"      - --certificatesresolvers.letsencrypt.acme.httpchallenge.entrypoint=web",
-			"      - --certificatesresolvers.letsencrypt.acme.storage=/letsencrypt/acme.json",
-			"    ports:",
-			"      - \"80:80\"",
-			"      - \"443:443\"",
-			"    volumes:",
-			"      - /var/run/docker.sock:/var/run/docker.sock",
-			"      - traefik_certs:/letsencrypt",
-			"    networks:",
-			"      - alepha-proxy",
-			"    restart: unless-stopped",
-			"",
-			"networks:",
-			"  alepha-proxy:",
-			"    name: alepha-proxy",
-			"",
-			"volumes:",
-			"  traefik_certs:",
-			""
-		].join("\n");
-	}
-	/**
-	* Generate compose for local dev (services only: postgres, redis).
-	* Returns null if no services are needed.
-	*/
-	generateLocal(options) {
-		const services = [];
-		const volumes = [];
-		const needsPostgres = this.anyAppHas(options.apps, "hasDatabase") && !options.envVars.DATABASE_URL;
-		const needsRedis = (this.anyAppHas(options.apps, "hasKV") || this.anyAppHas(options.apps, "hasQueue")) && !options.envVars.REDIS_URL;
-		const needsRustFS = this.anyAppHas(options.apps, "hasBucket") && !options.envVars.S3_ENDPOINT;
-		if (needsPostgres) {
-			const dbName = `${options.project}_${options.env}`.replace(/-/g, "_");
-			services.push([
-				"  postgres:",
-				"    image: postgres:17-alpine",
-				"    ports: [\"5432:5432\"]",
-				"    environment:",
-				`      POSTGRES_DB: ${dbName}`,
-				"      POSTGRES_USER: alepha",
-				"      POSTGRES_PASSWORD: alepha",
-				"    volumes:",
-				"      - postgres_data:/var/lib/postgresql/data"
-			].join("\n"));
-			volumes.push("  postgres_data:");
-		}
-		if (needsRedis) services.push([
-			"  redis:",
-			"    image: redis:7-alpine",
-			"    ports: [\"6379:6379\"]"
-		].join("\n"));
-		if (needsRustFS) {
-			services.push([
-				"  rustfs:",
-				"    image: rustfs/rustfs:latest",
-				"    ports: [\"9000:9000\"]",
-				"    environment:",
-				"      RUSTFS_ROOT_USER: alepha",
-				"      RUSTFS_ROOT_PASSWORD: alepha",
-				"    volumes:",
-				"      - rustfs_data:/data"
-			].join("\n"));
-			volumes.push("  rustfs_data:");
-		}
-		if (services.length === 0) return null;
-		const parts = [
-			"# Auto-generated by Alepha. Do not edit.",
-			"services:",
-			...services
-		];
-		if (volumes.length > 0) parts.push("", "volumes:", ...volumes);
-		return `${parts.join("\n")}\n`;
-	}
-	/**
-	* Generate compose for a remote project.
-	*
-	* - With `domain`: app connects to shared alepha-proxy network + Traefik labels
-	* - Without `domain`: app exposed directly on port 3000, no Traefik involvement
-	*
-	* Traefik itself is NEVER in this compose — it's a separate shared compose.
-	*/
-	generateRemote(options) {
-		const hasDomain = !!options.domain || Object.keys(options.domains ?? {}).length > 0;
-		const services = [];
-		const volumes = [];
-		const isMultiApp = options.apps.length > 1;
-		const needsInternal = hasDomain && this.anyAppNeedsInternal(options.apps, options.envVars);
-		for (let i = 0; i < options.apps.length; i++) {
-			const app = options.apps[i];
-			const serviceName = isMultiApp ? `app-${app.name}` : "app";
-			const buildPath = isMultiApp ? `./dist/${app.name}` : "./dist";
-			const appLines = [
-				`  ${serviceName}:`,
-				`    build: ${buildPath}`,
-				`    env_file: .env.${options.env}`
-			];
-			const appDomain = this.resolveAppDomain(app.name, isMultiApp, options.domain, options.domains);
-			if (appDomain) {
-				const routerName = serviceName.replace(/-/g, "");
-				appLines.push("    labels:", "      - traefik.enable=true", `      - traefik.http.routers.${routerName}.rule=Host(\`${appDomain}\`)`, `      - traefik.http.routers.${routerName}.tls.certresolver=letsencrypt`, "    networks:", "      - alepha-proxy");
-				if (needsInternal) appLines.push("      - internal");
-			} else {
-				const port = 3e3 + i;
-				appLines.push("    ports:", `      - "${port}:3000"`);
-			}
-			appLines.push("    restart: unless-stopped");
-			const deps = [];
-			if (app.resources.hasDatabase && !options.envVars.DATABASE_URL) deps.push("      - postgres");
-			if ((app.resources.hasKV || app.resources.hasQueue) && !options.envVars.REDIS_URL) deps.push("      - redis");
-			if (app.resources.hasBucket && !options.envVars.S3_ENDPOINT) deps.push("      - rustfs");
-			if (deps.length > 0) appLines.push("    depends_on:", ...deps);
-			services.push(appLines.join("\n"));
-		}
-		if (this.anyAppHas(options.apps, "hasDatabase") && !options.envVars.DATABASE_URL) {
-			const pgLines = [
-				"  postgres:",
-				"    image: postgres:17-alpine",
-				"    environment:",
-				`      POSTGRES_DB: ${`${options.project}_${options.env}`.replace(/-/g, "_")}`,
-				"      POSTGRES_USER: alepha",
-				"      POSTGRES_PASSWORD: ${DB_PASSWORD}",
-				"    volumes:",
-				"      - postgres_data:/var/lib/postgresql/data"
-			];
-			if (hasDomain) pgLines.push("    networks:", "      - internal");
-			pgLines.push("    restart: unless-stopped");
-			services.push(pgLines.join("\n"));
-			volumes.push("  postgres_data:");
-		}
-		if ((this.anyAppHas(options.apps, "hasKV") || this.anyAppHas(options.apps, "hasQueue")) && !options.envVars.REDIS_URL) {
-			const redisLines = ["  redis:", "    image: redis:7-alpine"];
-			if (hasDomain) redisLines.push("    networks:", "      - internal");
-			redisLines.push("    restart: unless-stopped");
-			services.push(redisLines.join("\n"));
-		}
-		if (this.anyAppHas(options.apps, "hasBucket") && !options.envVars.S3_ENDPOINT) {
-			const rustfsLines = [
-				"  rustfs:",
-				"    image: rustfs/rustfs:latest",
-				"    environment:",
-				"      RUSTFS_ROOT_USER: alepha",
-				"      RUSTFS_ROOT_PASSWORD: ${S3_SECRET_KEY}",
-				"    volumes:",
-				"      - rustfs_data:/data"
-			];
-			if (hasDomain) rustfsLines.push("    networks:", "      - internal");
-			rustfsLines.push("    restart: unless-stopped");
-			services.push(rustfsLines.join("\n"));
-			volumes.push("  rustfs_data:");
-		}
-		const parts = [
-			"# Auto-generated by Alepha. Do not edit.",
-			"services:",
-			...services
-		];
-		if (hasDomain) {
-			parts.push("", "networks:", "  alepha-proxy:", "    external: true");
-			if (needsInternal) parts.push("  internal:");
-		}
-		if (volumes.length > 0) parts.push("", "volumes:", ...volumes);
-		return `${parts.join("\n")}\n`;
-	}
-	/**
-	* Resolve the domain for an app.
-	*
-	* Priority:
-	* 1. `domains[appName]` — explicit override (e.g. shop → myshop.com)
-	* 2. `<appName>.<domain>` — convention for multi-app (e.g. api → api.company.com)
-	* 3. `domain` — used directly for single-app projects (e.g. myapp.com)
-	*/
-	resolveAppDomain(appName, isMultiApp, domain, domains) {
-		if (domains?.[appName]) return domains[appName];
-		if (domain && isMultiApp) return `${appName}.${domain}`;
-		return domain;
-	}
-	anyAppHas(apps, resource) {
-		return apps.some((app) => app.resources[resource]);
-	}
-	anyAppNeedsInternal(apps, envVars) {
-		return this.anyAppHas(apps, "hasDatabase") && !envVars.DATABASE_URL || (this.anyAppHas(apps, "hasKV") || this.anyAppHas(apps, "hasQueue")) && !envVars.REDIS_URL || this.anyAppHas(apps, "hasBucket") && !envVars.S3_ENDPOINT;
-	}
-};
-//#endregion
-//#region ../../src/cli/platform/services/DockerSshService.ts
-/**
-* Wraps SSH and SCP operations for remote Docker deployments.
-*/
-var DockerSshService = class {
-	shell = $inject(ShellProvider);
-	/**
-	* Validate an IP address or hostname to prevent shell injection.
-	*/
-	validateHost(ip) {
-		if (!/^[a-zA-Z0-9.:_-]+$/.test(ip)) throw new AlephaError(`Invalid host: ${ip}`);
-	}
-	/**
-	* Validate a file path to prevent shell injection.
-	*/
-	validatePath(path) {
-		if (/[;&|`$(){}'"\\!#~<>*?[\]\n\r]/.test(path)) throw new AlephaError(`Invalid path: ${path}`);
-	}
-	/**
-	* Verify SSH connectivity to the remote host.
-	*/
-	async checkConnection(ip) {
-		this.validateHost(ip);
-		await this.shell.run(`ssh root@${ip} echo ok`);
-	}
-	/**
-	* Execute a command on the remote host via SSH.
-	*/
-	async exec(ip, command) {
-		this.validateHost(ip);
-		const escaped = command.replace(/'/g, "'\\''");
-		return this.shell.run(`ssh root@${ip} '${escaped}'`, { capture: true });
-	}
-	/**
-	* Upload a file to the remote host via SCP.
-	*/
-	async upload(ip, localPath, remotePath) {
-		this.validateHost(ip);
-		this.validatePath(localPath);
-		this.validatePath(remotePath);
-		await this.shell.run(`scp ${localPath} root@${ip}:${remotePath}`);
-	}
-};
-//#endregion
-//#region ../../src/cli/platform/adapters/DockerAdapter.ts
-/**
-* Docker platform adapter.
-*
-* Handles both local development (docker compose for services)
-* and remote VPS deployment (SSH + Docker).
-*
-* Mode is determined by the `ip` field in environment config:
-* - No `ip`: local mode — compose up services (Postgres, Redis)
-* - With `ip`: remote mode — SSH to VPS, push dist, compose up
-*
-* Traefik is a shared singleton per VPS at /opt/alepha/traefik/.
-* Auto-provisioned on first deploy with `domain`, skipped if already running.
-*/
-var DockerAdapter = class extends PlatformAdapter {
-	log = $logger();
-	fs = $inject(FileSystemProvider);
-	shell = $inject(ShellProvider);
-	envUtils = $inject(EnvUtils);
-	generator = $inject(DockerComposeGenerator);
-	ssh = $inject(DockerSshService);
-	TRAEFIK_PATH = "/opt/alepha/traefik";
-	TRAEFIK_CONTAINER = "alepha-traefik";
-	isRemote(ctx) {
-		return !!ctx.envConfig.ip;
-	}
-	composePath(ctx) {
-		return this.fs.join(ctx.root, "node_modules/.alepha/docker-compose.yml");
-	}
-	remotePath(ctx) {
-		return `/opt/alepha/${ctx.project}-${ctx.env}`;
-	}
-	async authenticate(ctx, run) {
-		await run({
-			name: "authenticate",
-			handler: async () => {
-				await this.shell.run("docker --version");
-				if (this.isRemote(ctx)) await this.ssh.checkConnection(ctx.envConfig.ip);
-			}
-		});
-	}
-	async build(ctx, run) {
-		if (!this.isRemote(ctx)) return;
-		await run("alepha build -t docker", { root: ctx.app.path ? this.fs.join(ctx.root, ctx.app.path) : ctx.root });
-	}
-	async deploy(ctx, run) {
-		if (!this.isRemote(ctx)) return;
-		const ip = ctx.envConfig.ip;
-		const remote = this.remotePath(ctx);
-		await run({
-			name: "deploy",
-			handler: async () => {
-				await this.shell.run("tar czf dist.tar.gz dist", { root: ctx.root });
-				await this.ssh.exec(ip, `mkdir -p ${remote}`);
-				await this.ssh.upload(ip, this.fs.join(ctx.root, "dist.tar.gz"), `${remote}/dist.tar.gz`);
-				await this.ssh.exec(ip, `cd ${remote} && tar xzf dist.tar.gz && docker compose build && docker compose up -d`);
-			}
-		});
-		return ctx.envConfig.domain ? `https://${ctx.envConfig.domain}` : void 0;
-	}
-	async provision(ctx, run) {
-		const envVars = await this.envUtils.parseEnv(ctx.root, [`.env.${ctx.env}`, ".env"]);
-		if (this.isRemote(ctx)) await this.provisionRemote(ctx, run, envVars);
-		else await this.provisionLocal(ctx, run, envVars);
-	}
-	async provisionLocal(ctx, run, envVars) {
-		const compose = this.generator.generateLocal({
-			project: ctx.project,
-			env: ctx.env,
-			naming: ctx.naming,
-			apps: ctx.apps,
-			envVars
-		});
-		if (!compose) return;
-		await run({
-			name: "provision (docker compose)",
-			handler: async () => {
-				const composePath = this.composePath(ctx);
-				await this.fs.mkdir(dirname(composePath), { recursive: true });
-				await this.fs.writeFile(composePath, compose);
-				await this.shell.run(`docker compose -f ${composePath} -p ${ctx.project}-${ctx.env} up -d`);
-			}
-		});
-	}
-	async provisionRemote(ctx, run, envVars) {
-		const ip = ctx.envConfig.ip;
-		const remote = this.remotePath(ctx);
-		if (!!ctx.envConfig.domain || Object.keys(ctx.envConfig.domains ?? {}).length > 0) await this.ensureTraefik(ip, run);
-		const compose = this.generator.generateRemote({
-			project: ctx.project,
-			env: ctx.env,
-			naming: ctx.naming,
-			domain: ctx.envConfig.domain,
-			domains: ctx.envConfig.domains,
-			apps: ctx.apps,
-			envVars
-		});
-		await run({
-			name: "provision (remote)",
-			handler: async () => {
-				const localCompose = this.composePath(ctx);
-				await this.fs.mkdir(dirname(localCompose), { recursive: true });
-				await this.fs.writeFile(localCompose, compose);
-				await this.ssh.exec(ip, `mkdir -p ${remote}`);
-				await this.ssh.upload(ip, localCompose, `${remote}/docker-compose.yml`);
-				const envFile = this.fs.join(ctx.root, `.env.${ctx.env}`);
-				if (await this.fs.exists(envFile)) await this.ssh.upload(ip, envFile, `${remote}/.env.${ctx.env}`);
-			}
-		});
-	}
-	/**
-	* Ensure the shared Traefik instance is running on the VPS.
-	* If already running, this is a no-op.
-	*/
-	async ensureTraefik(ip, run) {
-		if ((await this.ssh.exec(ip, `docker ps --filter name=${this.TRAEFIK_CONTAINER} --format '{{.Names}}'`)).trim() === this.TRAEFIK_CONTAINER) return;
-		await run({
-			name: "provision (shared traefik)",
-			handler: async () => {
-				const traefikCompose = this.generator.generateTraefik();
-				const localPath = this.fs.join("node_modules/.alepha/traefik-compose.yml");
-				await this.fs.mkdir(dirname(localPath), { recursive: true });
-				await this.fs.writeFile(localPath, traefikCompose);
-				await this.ssh.exec(ip, `mkdir -p ${this.TRAEFIK_PATH}`);
-				await this.ssh.upload(ip, localPath, `${this.TRAEFIK_PATH}/docker-compose.yml`);
-				await this.ssh.exec(ip, `cd ${this.TRAEFIK_PATH} && docker compose up -d`);
-			}
-		});
-	}
-	async migrate(ctx, run) {
-		if (!ctx.apps.some((app) => app.resources.hasDatabase)) return;
-		await run({
-			name: "migrate",
-			handler: async () => {
-				if (this.isRemote(ctx)) {
-					const ip = ctx.envConfig.ip;
-					const remote = this.remotePath(ctx);
-					await this.ssh.exec(ip, `cd ${remote} && docker compose exec app node -e "require('./migrate')"`);
-				} else await this.shell.run("alepha db migrations apply", { root: ctx.root });
-			}
-		});
-	}
-	async secrets(ctx, run) {
-		if (!this.isRemote(ctx)) return;
-		const ip = ctx.envConfig.ip;
-		const remote = this.remotePath(ctx);
-		const envFile = this.fs.join(ctx.root, `.env.${ctx.env}`);
-		if (!await this.fs.exists(envFile)) return;
-		await run({
-			name: "push secrets",
-			handler: async () => {
-				await this.ssh.upload(ip, envFile, `${remote}/.env.${ctx.env}`);
-			}
-		});
-	}
-	async inspect(ctx, run) {
-		const state = {
-			workers: [],
-			databases: [],
-			buckets: [],
-			kvNamespaces: [],
-			queues: [],
-			secrets: []
-		};
-		await run({
-			name: "inspect",
-			handler: async () => {
-				if (this.isRemote(ctx)) {
-					const ip = ctx.envConfig.ip;
-					const remote = this.remotePath(ctx);
-					try {
-						const output = await this.ssh.exec(ip, `cd ${remote} && docker compose ps --format json 2>/dev/null || echo "[]"`);
-						const containers = this.parseContainers(output);
-						for (const c of containers) state.workers.push({
-							name: c.name,
-							exists: c.state === "running",
-							detail: c.state
-						});
-					} catch {}
-				} else {
-					const composePath = this.composePath(ctx);
-					if (await this.fs.exists(composePath)) try {
-						const output = await this.shell.run(`docker compose -f ${composePath} -p ${ctx.project}-${ctx.env} ps --format json`, { capture: true });
-						const containers = this.parseContainers(output);
-						for (const c of containers) state.workers.push({
-							name: c.name,
-							exists: c.state === "running",
-							detail: c.state
-						});
-					} catch {}
-				}
-			}
-		});
-		return state;
-	}
-	async teardown(ctx, run) {
-		await run({
-			name: "teardown",
-			handler: async () => {
-				if (this.isRemote(ctx)) {
-					const ip = ctx.envConfig.ip;
-					const remote = this.remotePath(ctx);
-					await this.ssh.exec(ip, `cd ${remote} && docker compose down`);
-				} else {
-					const composePath = this.composePath(ctx);
-					if (await this.fs.exists(composePath)) await this.shell.run(`docker compose -f ${composePath} -p ${ctx.project}-${ctx.env} down`);
-				}
-			}
-		});
-	}
-	parseContainers(output) {
-		try {
-			return output.trim().split("\n").filter(Boolean).map((line) => {
-				const obj = JSON.parse(line);
-				return {
-					name: obj.Name ?? obj.Service ?? "unknown",
-					state: obj.State ?? "unknown"
-				};
-			});
-		} catch {
-			return [];
-		}
-	}
-};
-//#endregion
 //#region ../../src/cli/platform/schemas/vercel.ts
 const vercelProjectSchema = t.object({
 	id: t.string(),
@@ -1912,16 +1436,9 @@ const platformOptions = $atom({
 			environmentPattern: t.optional(t.text())
 		})),
 		environments: t.record(t.text(), t.object({
-			adapter: t.enum([
-				"cloudflare",
-				"vercel",
-				"docker",
-				"docker-compose",
-				"aks"
-			]),
+			adapter: t.enum(["cloudflare", "vercel"]),
 			domain: t.optional(t.text()),
-			domains: t.optional(t.record(t.text(), t.text())),
-			ip: t.optional(t.text())
+			domains: t.optional(t.record(t.text(), t.text()))
 		}))
 	}))
 });
@@ -1982,7 +1499,7 @@ var PlatformInspector = class {
 	alepha = $inject(Alepha);
 	fs = $inject(FileSystemProvider);
 	asker = $inject(Asker);
-	options = $use(platformOptions);
+	options = $state(platformOptions);
 	naming = $inject(NamingService);
 	/**
 	* Resolve and validate the full platform configuration.
@@ -2063,15 +1580,11 @@ var PlatformOrchestrator = class {
 	inspector = $inject(PlatformInspector);
 	naming = $inject(NamingService);
 	cloudflareAdapter = $inject(CloudflareAdapter);
-	dockerAdapter = $inject(DockerAdapter);
 	vercelAdapter = $inject(VercelAdapter);
 	resolveAdapter(adapterName) {
 		switch (adapterName) {
 			case "cloudflare": return this.cloudflareAdapter;
-			case "docker":
-			case "docker-compose": return this.dockerAdapter;
 			case "vercel": return this.vercelAdapter;
-			case "aks": throw new AlephaError(`Adapter "${adapterName}" is not yet available. Currently supported: cloudflare, docker, vercel`);
 			default: throw new AlephaError(`Unknown adapter: "${adapterName}"`);
 		}
 	}
@@ -2300,7 +1813,7 @@ var SecretFilterService = class SecretFilterService {
 //#region ../../src/cli/platform/commands/SecretsCommand.ts
 var SecretsCommand = class {
 	log = $logger();
-	options = $use(platformOptions);
+	options = $state(platformOptions);
 	inspector = $inject(PlatformInspector);
 	naming = $inject(NamingService);
 	envUtils = $inject(EnvUtils);
@@ -2468,7 +1981,7 @@ var SecretsCommand = class {
 //#region ../../src/cli/platform/commands/platform.ts
 var PlatformCommand = class {
 	log = $logger();
-	options = $use(platformOptions);
+	options = $state(platformOptions);
 	orchestrator = $inject(PlatformOrchestrator);
 	inspector = $inject(PlatformInspector);
 	naming = $inject(NamingService);
@@ -2542,16 +2055,6 @@ var PlatformCommand = class {
 					});
 				}
 			}
-			if (adapterName === "docker" || adapterName === "docker-compose") {
-				if (hasDB && !envVars.DATABASE_URL) resources.push({
-					label: "Postgres",
-					value: "postgres:17-alpine"
-				});
-				if (hasBucket && !envVars.S3_ENDPOINT) resources.push({
-					label: "RustFS",
-					value: "rustfs/rustfs:latest"
-				});
-			}
 			const excludedKeys = adapterName === "vercel" ? VercelAdapter.EXCLUDED_SECRET_KEYS : CloudflareAdapter.EXCLUDED_SECRET_KEYS;
 			const secretCount = Object.entries(envVars).filter(([key, value]) => value && !excludedKeys.has(key) && !key.startsWith("VITE_")).length;
 			if (flags.json) {
@@ -3078,17 +2581,46 @@ const platformPlanSchema = t.object({
 });
 //#endregion
 //#region ../../src/cli/platform/index.ts
-const AlephaCliPlatform = $module({
-	name: "alepha.cli.platform",
+/**
+* CLI plugin for multi-cloud deployment orchestration.
+*
+* Manages the full lifecycle of deploying Alepha apps: provision resources,
+* build, migrate databases, deploy, and sync secrets. Supports Cloudflare
+* Workers and Vercel.
+*
+* Commands:
+* - `alepha platform plan`    — show project topology and resource names
+* - `alepha platform up`      — full deployment pipeline
+* - `alepha platform down`    — teardown an environment
+* - `alepha platform status`  — inspect deployed resources
+* - `alepha platform build`   — build apps locally
+* - `alepha platform deploy`  — deploy to cloud
+* - `alepha platform migrate` — run database migrations
+* - `alepha platform secrets` — manage external secret stores
+*
+* Configuration in `alepha.config.ts`:
+*
+* ```typescript
+* import { AlephaCliPlatformPlugin } from "alepha/cli/platform";
+*
+* export default defineConfig({
+*   services: [AlephaCliPlatformPlugin],
+*   platform: {
+*     environments: {
+*       production: { adapter: "cloudflare", domain: "myapp.com" },
+*     },
+*   },
+* });
+* ```
+*/
+const AlephaCliPlatformPlugin = $module({
+	name: "alepha.cli.plugins.platform",
 	services: [
 		AlephaCli,
 		PlatformCommand,
 		SecretsCommand,
 		CloudflareAdapter,
 		CloudflareApi,
-		DockerAdapter,
-		DockerComposeGenerator,
-		DockerSshService,
 		VercelAdapter,
 		VercelApi,
 		VercelCli,
@@ -3102,7 +2634,10 @@ const AlephaCliPlatform = $module({
 		PlatformOrchestrator
 	]
 });
+cliConfigPlugins.push((config, alepha) => {
+	if (config.platform) alepha.set(platformOptions, config.platform);
+});
 //#endregion
-export { AlephaCliPlatform, CloudflareAdapter, CloudflareApi, DockerAdapter, DockerComposeGenerator, DockerSshService, GitHubSecretStore, MemorySecretStore, NamingContext, NamingService, PlatformAdapter, PlatformCacheProvider, PlatformCommand, PlatformInspector, PlatformOrchestrator, SecretFilterService, SecretStoreProvider, SecretsCommand, VercelAdapter, VercelApi, VercelCli, WranglerApi, cloudflareAccountSchema, cloudflareApiErrorSchema, cloudflareD1Schema, cloudflareDeploymentListSchema, cloudflareDeploymentSchema, cloudflareDeploymentVersionSchema, cloudflareHyperdriveOriginSchema, cloudflareHyperdriveSchema, cloudflareKVSchema, cloudflareQueueConsumerSchema, cloudflareQueueSchema, cloudflareR2ListSchema, cloudflareR2Schema, cloudflareSecretSchema, cloudflareVersionListSchema, cloudflareVersionSchema, cloudflareWorkerSchema, createD1BodySchema, createEnvVarBodySchema, createHyperdriveBodySchema, createHyperdriveOriginSchema, createKVBodySchema, createProjectBodySchema, createQueueBodySchema, createR2BodySchema, platformOptions, platformPlanAppResourcesSchema, platformPlanAppSchema, platformPlanEnvironmentSchema, platformPlanResourceSchema, platformPlanSchema, platformStatusResourceSchema, platformStatusSchema, platformStatusSecretSchema, platformStatusWorkerSchema, putSecretBodySchema, vercelDeploymentSchema, vercelEnvVarSchema, vercelProjectSchema };
+export { AlephaCliPlatformPlugin, CloudflareAdapter, CloudflareApi, GitHubSecretStore, MemorySecretStore, NamingContext, NamingService, PlatformAdapter, PlatformCacheProvider, PlatformCommand, PlatformInspector, PlatformOrchestrator, SecretFilterService, SecretStoreProvider, SecretsCommand, VercelAdapter, VercelApi, VercelCli, WranglerApi, cloudflareAccountSchema, cloudflareApiErrorSchema, cloudflareD1Schema, cloudflareDeploymentListSchema, cloudflareDeploymentSchema, cloudflareDeploymentVersionSchema, cloudflareHyperdriveOriginSchema, cloudflareHyperdriveSchema, cloudflareKVSchema, cloudflareQueueConsumerSchema, cloudflareQueueSchema, cloudflareR2ListSchema, cloudflareR2Schema, cloudflareSecretSchema, cloudflareVersionListSchema, cloudflareVersionSchema, cloudflareWorkerSchema, createD1BodySchema, createEnvVarBodySchema, createHyperdriveBodySchema, createHyperdriveOriginSchema, createKVBodySchema, createProjectBodySchema, createQueueBodySchema, createR2BodySchema, platformOptions, platformPlanAppResourcesSchema, platformPlanAppSchema, platformPlanEnvironmentSchema, platformPlanResourceSchema, platformPlanSchema, platformStatusResourceSchema, platformStatusSchema, platformStatusSecretSchema, platformStatusWorkerSchema, putSecretBodySchema, vercelDeploymentSchema, vercelEnvVarSchema, vercelProjectSchema };
 
 //# sourceMappingURL=index.js.map