hatchkit 0.1.37 → 0.1.39

package/dist/deploy/coolify.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"coolify.d.ts","sourceRoot":"","sources":["../../src/deploy/coolify.ts"],"names":[],"mappings":"AA8BA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAGnD,MAAM,WAAW,sBAAsB;IACrC;;sCAEkC;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;kEAE8D;IAC9D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;uDAEmD;IACnD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,qBAAqB;IACpC;;wDAEoD;IACpD,OAAO,EAAE,MAAM,CAAC;IAChB;;gDAE4C;IAC5C,WAAW,EAAE,MAAM,CAAC;IACpB;;0EAEsE;IACtE,cAAc,EAAE,OAAO,CAAC;IACxB;;yCAEqC;IACrC,UAAU,EAAE,OAAO,CAAC;CACrB;AAED;;oDAEoD;AACpD,wBAAsB,eAAe,CACnC,MAAM,EAAE,aAAa,EACrB,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,qBAAqB,CAAC,CA+IhC"}
+{"version":3,"file":"coolify.d.ts","sourceRoot":"","sources":["../../src/deploy/coolify.ts"],"names":[],"mappings":"AA8BA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAGnD,MAAM,WAAW,sBAAsB;IACrC;;sCAEkC;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;kEAE8D;IAC9D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;uDAEmD;IACnD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,qBAAqB;IACpC;;wDAEoD;IACpD,OAAO,EAAE,MAAM,CAAC;IAChB;;gDAE4C;IAC5C,WAAW,EAAE,MAAM,CAAC;IACpB;;0EAEsE;IACtE,cAAc,EAAE,OAAO,CAAC;IACxB;;yCAEqC;IACrC,UAAU,EAAE,OAAO,CAAC;CACrB;AAED;;oDAEoD;AACpD,wBAAsB,eAAe,CACnC,MAAM,EAAE,aAAa,EACrB,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,qBAAqB,CAAC,CA4KhC"}

package/dist/deploy/coolify.js

@@ -65,16 +65,23 @@ export async function runCoolifySetup(config, options = {}) {
         projectCreated = true;
         console.log(chalk.green(`  ✓ Project created: ${config.name} (${projectUuid})`));
     }
-    // Domain routing: split across the two public services in the starter's
-    // compose file (`server` and `client`). Coolify's dockercompose build
-    // pack rejects a flat `domains` field (422 — "Use docker_compose_domains
-    // instead to set domains for individual services") because routing has
-    // to be per-service. The starter ships:
-    //   · client : Next.js (static or Node) — frontend hostname only
-    //   · server : Express API + WebSocket   — every API/WS host
-    // Traefik routes each domain to the matching service inside the compose
-    // network; the app code itself only needs to handle the path/host
-    // dispatch within `server`.
+    // Domain routing — surface-aware. Coolify's dockercompose build pack
+    // rejects a flat `domains` field (422 — "Use docker_compose_domains
+    // instead …") because routing is per-service.
+    //
+    //  · both        — `client` gets the bare hostname; `server` gets the
+    //                  api subdomain + the path-based API/WS hosts.
+    //  · server-only — no client service in the pruned compose, so the
+    //                  bare hostname AND every API/WS host all point at
+    //                  `server`. Browsers hitting `<domain>` reach the
+    //                  Express app directly (which can still serve a 200
+    //                  health page or redirect to the api host).
+    //  · client-only — only the `client` service exists; nothing public
+    //                  about the API is needed. Currently unreachable
+    //                  from `hatchkit create` (the scaffold step throws
+    //                  before we get here) but the branch is wired so
+    //                  `hatchkit adopt`-driven client-only callers and a
+    //                  future create-side implementation share one path.
     const apiDomain = `api.${config.domain}`;
     const frontendDomain = `https://${config.domain}`;
     const backendDomains = [
@@ -83,17 +90,29 @@ export async function runCoolifySetup(config, options = {}) {
         `https://${config.domain}/api/ws`,
         `https://${apiDomain}/ws`,
     ];
-    // Coolify's API takes a flat array of `{ name, domain }` entries, one
-    // per (service, hostname) pair. Multi-domain services (the server here)
-    // get one entry per domain rather than a comma-joined string — easier
-    // for Coolify's per-domain routing rules.
-    const dockerComposeDomains = [
-        { name: "client", domain: frontendDomain },
-        ...backendDomains.map((domain) => ({ name: "server", domain })),
-    ];
+    const surfaces = config.surfaces ?? "both";
+    const dockerComposeDomains = surfaces === "client-only"
+        ? [{ name: "client", domain: frontendDomain }]
+        : surfaces === "server-only"
+            ? [
+                { name: "server", domain: frontendDomain },
+                ...backendDomains.map((domain) => ({ name: "server", domain })),
+            ]
+            : [
+                { name: "client", domain: frontendDomain },
+                ...backendDomains.map((domain) => ({ name: "server", domain })),
+            ];
     console.log(chalk.dim("  Domain routing:"));
-    console.log(chalk.dim(`    Frontend (client): ${frontendDomain}`));
-    console.log(chalk.dim(`    Backend  (server): ${backendDomains.join(", ")}`));
+    if (surfaces === "client-only") {
+        console.log(chalk.dim(`    Frontend (client): ${frontendDomain}`));
+    }
+    else if (surfaces === "server-only") {
+        console.log(chalk.dim(`    All hosts → server: ${[frontendDomain, ...backendDomains].join(", ")}`));
+    }
+    else {
+        console.log(chalk.dim(`    Frontend (client): ${frontendDomain}`));
+        console.log(chalk.dim(`    Backend  (server): ${backendDomains.join(", ")}`));
+    }
     // Application: reuse-by-name. `findApplicationByName` matches across
     // every project the user can see; first hit wins. Within a single
     // hatchkit-managed Coolify install, project names are unique enough
@@ -153,11 +172,17 @@ export async function runCoolifySetup(config, options = {}) {
     // .env.production and is decrypted at runtime via the dotenvx
     // private key that `hatchkit keys push` puts on Coolify. That keeps
     // prod secrets out of Coolify's UI.
-    const envs = {
-        NODE_ENV: "production",
-        PORT: String(options.serverPort ?? 3000),
-        FRONTEND_URL: `https://${config.domain}`,
-    };
+    //
+    // Client-only scaffolds get only NODE_ENV — there's no server to
+    // honour PORT (the Next.js standalone server already binds 3000) and
+    // FRONTEND_URL is meaningless without a CORS-checking backend.
+    const envs = surfaces === "client-only"
+        ? { NODE_ENV: "production" }
+        : {
+            NODE_ENV: "production",
+            PORT: String(options.serverPort ?? 3000),
+            FRONTEND_URL: `https://${config.domain}`,
+        };
     await api.setAppEnv(appUuid, envs);
     console.log(chalk.green(`  ✓ Set ${Object.keys(envs).length} env vars on application (${Object.keys(envs).join(", ")})`));
     console.log(chalk.green("\n  ✓ Coolify app stack created"));

package/dist/deploy/coolify.js.map

@@ -1 +1 @@
-{"version":3,"file":"coolify.js","sourceRoot":"","sources":["../../src/deploy/coolify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAoCrD;;oDAEoD;AACpD,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAqB,EACrB,UAAkC,EAAE;IAEpC,MAAM,GAAG,GAAG,MAAM,gBAAgB,EAAE,CAAC;IACrC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACzF,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IAE/D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC,CAAC;IAE5F,MAAM,MAAM,GAAG,GAAG,CAAC,4BAA4B,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAClE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC;QACvC,MAAM,CAAC,OAAO,CAAC,yBAAyB,OAAO,EAAE,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,CAAC,GAAG,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IACvF,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAExD,mEAAmE;IACnE,oEAAoE;IACpE,yBAAyB;IACzB,IAAI,WAAmB,CAAC;IACxB,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,MAAM,eAAe,GAAG,MAAM,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACjE,IAAI,eAAe,EAAE,CAAC;QACpB,WAAW,GAAG,eAAe,CAAC,IAAI,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,oCAAoC,MAAM,CAAC,IAAI,KAAK,WAAW,GAAG,CAAC,CAAC,CAAC;IAC7F,CAAC;SAAM,CAAC;QACN,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACrD,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;QAC3B,cAAc,GAAG,IAAI,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,wBAAwB,MAAM,CAAC,IAAI,KAAK,WAAW,GAAG,CAAC,CAAC,CAAC;IACnF,CAAC;IAED,wEAAwE;IACxE,sEAAsE;IACtE,yEAAyE;IACzE,uEAAuE;IACvE,wCAAwC;IACxC,iEAAiE;IACjE,6DAA6D;IAC7D,wEAAwE;IACxE,kEAAkE;IAClE,4BAA4B;IAC5B,MAAM,SAAS,GAAG,OAAO,MAAM,CAAC,MAAM,EAAE,CAAC;IACzC,MAAM,cAAc,GAAG,WAAW,MAAM,CAAC,MAAM,EAAE,CAAC;IAClD,MAAM,cAAc,GAAG;QACrB,WAAW,SAAS,EAAE;QACtB,WAAW,MAAM,CAAC,MAAM,MAAM;QAC9B,WAAW,MAAM,CAAC,MAAM,SAAS;QACjC,WAAW,SAAS,KAAK;KAC1B,CAAC;IACF,sEAAsE;IACtE,wEAAwE;IACxE,sEAAsE;IACtE,0CAA0C;IAC1C,MAAM,oBAAoB,GAA4C;QACpE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE;QAC1C,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;KAChE,CAAC;IAEF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,0BAA0B,cAAc,EAAE,CAAC,CAAC,CAAC;IACnE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,0BAA0B,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAE9E,qEAAqE;IACrE,kEAAkE;IAClE,oEAAoE;IACpE,kEAAkE;IAClE,sCAAsC;IACtC,MAAM,OAAO,GAAG,GAAG,MAAM,CAAC,IAAI,MAAM,CAAC;IACrC,IAAI,OAAe,CAAC;IACpB,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC7D,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,wCAAwC,OAAO,KAAK,OAAO,GAAG,CAAC,CAAC,CAAC;IACzF,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CACb,qFAAqF,CACtF,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,GAAG,CAAC,wBAAwB,OAAO,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;QAC9D,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,+BAA+B,CAAC;gBACxD,WAAW;gBACX,UAAU;gBACV,eAAe,EAAE,YAAY;gBAC7B,aAAa,EAAE,OAAO,CAAC,OAAO;gBAC9B,SAAS,EAAE,MAAM;gBACjB,+DAA+D;gBAC/D,+DAA+D;gBAC/D,4DAA4D;gBAC5D,+DAA+D;gBAC/D,sCAAsC;gBACtC,SAAS,EAAE,eAAe;gBAC1B,0DAA0D;gBAC1D,2DAA2D;gBAC3D,4DAA4D;gBAC5D,QAAQ;gBACR,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC;gBAChD,IAAI,EAAE,OAAO;gBACb,wDAAwD;gBACxD,2DAA2D;gBAC3D,sDAAsD;gBACtD,oBAAoB;gBACpB,6DAA6D;gBAC7D,+DAA+D;gBAC/D,aAAa,EAAE,KAAK;aACrB,CAAC,CAAC;YACH,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;YACvB,UAAU,GAAG,IAAI,CAAC;YAClB,MAAM,CAAC,OAAO,CAAC,wBAAwB,OAAO,KAAK,OAAO,GAAG,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,EAAE,CAAC;YACd,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,gEAAgE;IAChE,gEAAgE;IAChE,8DAA8D;IAC9D,oEAAoE;IACpE,oCAAoC;IACpC,MAAM,IAAI,GAA2B;QACnC,QAAQ,EAAE,YAAY;QACtB,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC;QACxC,YAAY,EAAE,WAAW,MAAM,CAAC,MAAM,EAAE;KACzC,CAAC;IACF,MAAM,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnC,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,KAAK,CACT,WAAW,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,6BAA6B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAChG,CACF,CAAC;IAEF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC;IAE5D,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC;AAC9D,CAAC;AAED;;;2BAG2B;AAC3B,KAAK,UAAU,iBAAiB,CAAC,GAAe,EAAE,MAAqB;IACrE,IAAI,MAAM,CAAC,UAAU;QAAE,OAAO,MAAM,CAAC,UAAU,CAAC;IAEhD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC5D,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC;IAC/B,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACzB,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,CAAC;IACD,kEAAkE;IAClE,iEAAiE;IACjE,uDAAuD;IACvD,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IACrD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,6CAA6C,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC;AACpB,CAAC"}
+{"version":3,"file":"coolify.js","sourceRoot":"","sources":["../../src/deploy/coolify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAoCrD;;oDAEoD;AACpD,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAqB,EACrB,UAAkC,EAAE;IAEpC,MAAM,GAAG,GAAG,MAAM,gBAAgB,EAAE,CAAC;IACrC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACzF,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IAE/D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC,CAAC;IAE5F,MAAM,MAAM,GAAG,GAAG,CAAC,4BAA4B,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAClE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC;QACvC,MAAM,CAAC,OAAO,CAAC,yBAAyB,OAAO,EAAE,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,CAAC,GAAG,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IACvF,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAExD,mEAAmE;IACnE,oEAAoE;IACpE,yBAAyB;IACzB,IAAI,WAAmB,CAAC;IACxB,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,MAAM,eAAe,GAAG,MAAM,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACjE,IAAI,eAAe,EAAE,CAAC;QACpB,WAAW,GAAG,eAAe,CAAC,IAAI,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,oCAAoC,MAAM,CAAC,IAAI,KAAK,WAAW,GAAG,CAAC,CAAC,CAAC;IAC7F,CAAC;SAAM,CAAC;QACN,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACrD,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;QAC3B,cAAc,GAAG,IAAI,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,wBAAwB,MAAM,CAAC,IAAI,KAAK,WAAW,GAAG,CAAC,CAAC,CAAC;IACnF,CAAC;IAED,qEAAqE;IACrE,oEAAoE;IACpE,8CAA8C;IAC9C,EAAE;IACF,sEAAsE;IACtE,gEAAgE;IAChE,mEAAmE;IACnE,oEAAoE;IACpE,mEAAmE;IACnE,qEAAqE;IACrE,6DAA6D;IAC7D,oEAAoE;IACpE,kEAAkE;IAClE,oEAAoE;IACpE,kEAAkE;IAClE,qEAAqE;IACrE,qEAAqE;IACrE,MAAM,SAAS,GAAG,OAAO,MAAM,CAAC,MAAM,EAAE,CAAC;IACzC,MAAM,cAAc,GAAG,WAAW,MAAM,CAAC,MAAM,EAAE,CAAC;IAClD,MAAM,cAAc,GAAG;QACrB,WAAW,SAAS,EAAE;QACtB,WAAW,MAAM,CAAC,MAAM,MAAM;QAC9B,WAAW,MAAM,CAAC,MAAM,SAAS;QACjC,WAAW,SAAS,KAAK;KAC1B,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC;IAC3C,MAAM,oBAAoB,GACxB,QAAQ,KAAK,aAAa;QACxB,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;QAC9C,CAAC,CAAC,QAAQ,KAAK,aAAa;YAC1B,CAAC,CAAC;gBACE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE;gBAC1C,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;aAChE;YACH,CAAC,CAAC;gBACE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE;gBAC1C,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;aAChE,CAAC;IAEV,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAC5C,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,0BAA0B,cAAc,EAAE,CAAC,CAAC,CAAC;IACrE,CAAC;SAAM,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;QACtC,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CACP,2BAA2B,CAAC,cAAc,EAAE,GAAG,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC5E,CACF,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,0BAA0B,cAAc,EAAE,CAAC,CAAC,CAAC;QACnE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,0BAA0B,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAChF,CAAC;IAED,qEAAqE;IACrE,kEAAkE;IAClE,oEAAoE;IACpE,kEAAkE;IAClE,sCAAsC;IACtC,MAAM,OAAO,GAAG,GAAG,MAAM,CAAC,IAAI,MAAM,CAAC;IACrC,IAAI,OAAe,CAAC;IACpB,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC7D,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,wCAAwC,OAAO,KAAK,OAAO,GAAG,CAAC,CAAC,CAAC;IACzF,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CACb,qFAAqF,CACtF,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,GAAG,CAAC,wBAAwB,OAAO,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;QAC9D,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,+BAA+B,CAAC;gBACxD,WAAW;gBACX,UAAU;gBACV,eAAe,EAAE,YAAY;gBAC7B,aAAa,EAAE,OAAO,CAAC,OAAO;gBAC9B,SAAS,EAAE,MAAM;gBACjB,+DAA+D;gBAC/D,+DAA+D;gBAC/D,4DAA4D;gBAC5D,+DAA+D;gBAC/D,sCAAsC;gBACtC,SAAS,EAAE,eAAe;gBAC1B,0DAA0D;gBAC1D,2DAA2D;gBAC3D,4DAA4D;gBAC5D,QAAQ;gBACR,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC;gBAChD,IAAI,EAAE,OAAO;gBACb,wDAAwD;gBACxD,2DAA2D;gBAC3D,sDAAsD;gBACtD,oBAAoB;gBACpB,6DAA6D;gBAC7D,+DAA+D;gBAC/D,aAAa,EAAE,KAAK;aACrB,CAAC,CAAC;YACH,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;YACvB,UAAU,GAAG,IAAI,CAAC;YAClB,MAAM,CAAC,OAAO,CAAC,wBAAwB,OAAO,KAAK,OAAO,GAAG,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,EAAE,CAAC;YACd,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,gEAAgE;IAChE,gEAAgE;IAChE,8DAA8D;IAC9D,oEAAoE;IACpE,oCAAoC;IACpC,EAAE;IACF,iEAAiE;IACjE,qEAAqE;IACrE,+DAA+D;IAC/D,MAAM,IAAI,GACR,QAAQ,KAAK,aAAa;QACxB,CAAC,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE;QAC5B,CAAC,CAAC;YACE,QAAQ,EAAE,YAAY;YACtB,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC;YACxC,YAAY,EAAE,WAAW,MAAM,CAAC,MAAM,EAAE;SACzC,CAAC;IACR,MAAM,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnC,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,KAAK,CACT,WAAW,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,6BAA6B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAChG,CACF,CAAC;IAEF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC;IAE5D,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC;AAC9D,CAAC;AAED;;;2BAG2B;AAC3B,KAAK,UAAU,iBAAiB,CAAC,GAAe,EAAE,MAAqB;IACrE,IAAI,MAAM,CAAC,UAAU;QAAE,OAAO,MAAM,CAAC,UAAU,CAAC;IAEhD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC5D,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC;IAC/B,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACzB,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,CAAC;IACD,kEAAkE;IAClE,iEAAiE;IACjE,uDAAuD;IACvD,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IACrD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,6CAA6C,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC;AACpB,CAAC"}

package/dist/deploy/regen-infra.d.ts

@@ -0,0 +1,12 @@
+interface RegenArgs {
+    /** Project directory — defaults to cwd. The manifest must live here. */
+    projectDir: string;
+    /** Repo root for the hatchkit checkout (where the infra/ tree is). */
+    monorepoRoot: string;
+    /** Show the diff but don't write. */
+    dryRun: boolean;
+}
+export declare function runRegenInfraCli(args: string[], monorepoRoot: string): Promise<void>;
+export declare function runRegenInfra(opts: RegenArgs): Promise<void>;
+export {};
+//# sourceMappingURL=regen-infra.d.ts.map

package/dist/deploy/regen-infra.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"regen-infra.d.ts","sourceRoot":"","sources":["../../src/deploy/regen-infra.ts"],"names":[],"mappings":"AA8BA,UAAU,SAAS;IACjB,wEAAwE;IACxE,UAAU,EAAE,MAAM,CAAC;IACnB,sEAAsE;IACtE,YAAY,EAAE,MAAM,CAAC;IACrB,qCAAqC;IACrC,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAK1F;AAED,wBAAsB,aAAa,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAgGlE"}

package/dist/deploy/regen-infra.js

@@ -0,0 +1,194 @@
+/*
+ * `hatchkit regen-infra` — regenerate Terraform tfvars + Coolify stack
+ * .env for a scaffolded project, in place.
+ *
+ * Why this exists: `scaffoldInfra` runs once during `create` / `adopt`
+ * and bakes the project's choices into static files under
+ * `infra/terraform/stacks/.../<name>.tfvars` and `infra/stacks/<name>.env`.
+ * When the CLI's tfvars-generation logic changes (e.g. dropping the
+ * `api.<sub>` subdomain for client-only surfaces, or flipping
+ * `MONGO_ENABLED` based on the surface), existing projects keep their
+ * old files until someone re-runs scaffoldInfra. This command does
+ * exactly that — re-render from the manifest, preserve the infra-only
+ * fields the manifest doesn't carry (target_ipv4/v6 for dns-only,
+ * serverType / serverLocation for new-server), diff against what's on
+ * disk, and write the new files.
+ *
+ * Intentionally does NOT run `terraform apply` or touch Coolify. The
+ * user runs `terraform apply -var-file=<name>.tfvars` themselves once
+ * they've reviewed the plan.
+ */
+import { existsSync, readFileSync, writeFileSync } from "node:fs";
+import { basename, dirname, join, resolve } from "node:path";
+import chalk from "chalk";
+import { getConfig } from "../config.js";
+import { generateCoolifyEnv, generateTfvars, resolveStackDir } from "../scaffold/infra.js";
+import { readManifest } from "../scaffold/manifest.js";
+import { parseDomain } from "../utils/validate.js";
+export async function runRegenInfraCli(args, monorepoRoot) {
+    const dryRun = args.includes("--dry-run");
+    const dirFlag = args.findIndex((a) => a === "--dir");
+    const projectDir = resolve(dirFlag >= 0 ? (args[dirFlag + 1] ?? ".") : ".");
+    await runRegenInfra({ projectDir, monorepoRoot, dryRun });
+}
+export async function runRegenInfra(opts) {
+    const { projectDir, monorepoRoot, dryRun } = opts;
+    const manifest = readManifest(projectDir);
+    if (!manifest) {
+        throw new Error(`No .hatchkit.json in ${projectDir}. Run from inside a scaffolded project, or pass --dir <project-dir>.`);
+    }
+    // Locate the existing tfvars file. We try the same three stack dirs
+    // `resolveStackDir` knows about and pick the first hit — matches what
+    // `rename-domain.ts` does.
+    const candidatePaths = [
+        join(monorepoRoot, "infra", "terraform", "stacks", "node-realtime", `${manifest.name}.tfvars`),
+        join(monorepoRoot, "infra", "terraform", "stacks", "dns-only-cloudflare", `${manifest.name}.tfvars`),
+        join(monorepoRoot, "infra", "terraform", "stacks", "dns-only-inwx", `${manifest.name}.tfvars`),
+    ];
+    const existingTfvarsPath = candidatePaths.find((p) => existsSync(p));
+    // Reconstruct the bits of ProjectConfig the tfvars/coolify-env
+    // generators care about. Manifest carries the safe public-facing
+    // fields; everything infra-only (server coords, IPs, S3 creds) we
+    // either pull from the existing tfvars (when present) or accept as
+    // empty (terraform plan will fail loudly enough if a required value
+    // is missing).
+    const config = configFromManifestAndTfvars(manifest, existingTfvarsPath);
+    const newTfvars = generateTfvars(config);
+    const newCoolifyEnv = generateCoolifyEnv(config, {});
+    // Existing-content reads — null when the file doesn't yet exist so
+    // the diff shows the file as new.
+    const oldTfvars = existingTfvarsPath ? readFileSync(existingTfvarsPath, "utf-8") : "";
+    const coolifyEnvPath = join(monorepoRoot, "infra", "stacks", `${manifest.name}.env`);
+    const oldCoolifyEnv = existsSync(coolifyEnvPath) ? readFileSync(coolifyEnvPath, "utf-8") : "";
+    // Decide where the new tfvars should land — same dir as the existing
+    // file when we found one, else fall back to `resolveStackDir` so a
+    // fresh regen still produces a valid file. resolveStackDir resolves
+    // paths relative to the `infra/` root, not the monorepo root, so we
+    // join the prefix ourselves.
+    let tfvarsTargetPath = existingTfvarsPath;
+    if (!tfvarsTargetPath && newTfvars) {
+        const cfgDnsProvider = inferDnsProviderFromConfig();
+        const stackDir = resolveStackDir(join(monorepoRoot, "infra"), config.deployTarget, cfgDnsProvider);
+        if (stackDir)
+            tfvarsTargetPath = join(stackDir, `${manifest.name}.tfvars`);
+    }
+    console.log(chalk.bold(`\n  ── regen-infra: ${manifest.name} ─────────────────────────`));
+    console.log(chalk.dim(`  domain=${manifest.domain}  surfaces=${manifest.surfaces ?? "both"}  deploy=${manifest.deployTarget}`));
+    let touched = 0;
+    touched += renderFileChange("tfvars", tfvarsTargetPath, oldTfvars, newTfvars, dryRun);
+    touched += renderFileChange("coolify .env", coolifyEnvPath, oldCoolifyEnv, newCoolifyEnv, dryRun);
+    if (touched === 0) {
+        console.log(chalk.green("\n  ✓ Already up to date — no changes."));
+        return;
+    }
+    if (dryRun) {
+        console.log(chalk.yellow(`\n  [dry-run] ${touched} file(s) would be rewritten.`));
+        console.log(chalk.dim("  Re-run without --dry-run to apply."));
+        return;
+    }
+    console.log(chalk.green(`\n  ✓ Regenerated ${touched} file(s).`));
+    if (tfvarsTargetPath && newTfvars && oldTfvars !== newTfvars) {
+        const stackDir = dirname(tfvarsTargetPath);
+        console.log(chalk.yellow(`\n  Next: terraform -chdir=${stackDir} plan -var-file=${basename(tfvarsTargetPath)}`));
+        console.log(chalk.dim(`        terraform -chdir=${stackDir} apply -var-file=${basename(tfvarsTargetPath)}`));
+    }
+}
+function renderFileChange(label, path, oldContent, newContent, dryRun) {
+    if (!path) {
+        console.log(chalk.dim(`  ${label}: no target path resolved (manual DNS?) — skipped`));
+        return 0;
+    }
+    if (oldContent === newContent) {
+        console.log(chalk.dim(`  ${label}: unchanged (${path})`));
+        return 0;
+    }
+    console.log(chalk.bold(`\n  ${label}: ${chalk.cyan(path)}`));
+    printUnifiedDiff(oldContent, newContent);
+    if (!dryRun)
+        writeFileSync(path, newContent, "utf-8");
+    return 1;
+}
+/** Print a line-level diff between two strings using an LCS table — so
+ *  removing one line in the middle doesn't make every subsequent line
+ *  look changed. Files here are small (tens of lines), so the O(n·m)
+ *  table is fine and we avoid pulling in a dep. */
+function printUnifiedDiff(oldStr, newStr) {
+    const a = oldStr.split("\n");
+    const b = newStr.split("\n");
+    // LCS lengths table.
+    const lcs = Array.from({ length: a.length + 1 }, () => new Array(b.length + 1).fill(0));
+    for (let i = a.length - 1; i >= 0; i--) {
+        for (let j = b.length - 1; j >= 0; j--) {
+            lcs[i][j] = a[i] === b[j] ? lcs[i + 1][j + 1] + 1 : Math.max(lcs[i + 1][j], lcs[i][j + 1]);
+        }
+    }
+    // Walk the table emitting -/+/context lines.
+    let i = 0;
+    let j = 0;
+    while (i < a.length && j < b.length) {
+        if (a[i] === b[j]) {
+            i++;
+            j++;
+        }
+        else if (lcs[i + 1][j] >= lcs[i][j + 1]) {
+            console.log(chalk.red(`    - ${a[i]}`));
+            i++;
+        }
+        else {
+            console.log(chalk.green(`    + ${b[j]}`));
+            j++;
+        }
+    }
+    while (i < a.length)
+        console.log(chalk.red(`    - ${a[i++]}`));
+    while (j < b.length)
+        console.log(chalk.green(`    + ${b[j++]}`));
+}
+function configFromManifestAndTfvars(manifest, tfvarsPath) {
+    const tfvars = tfvarsPath && existsSync(tfvarsPath) ? readFileSync(tfvarsPath, "utf-8") : "";
+    const { baseDomain, subdomain } = parseDomain(manifest.domain);
+    return {
+        name: manifest.name,
+        domain: manifest.domain,
+        baseDomain,
+        subdomain,
+        surfaces: (manifest.surfaces ?? "both"),
+        deployTarget: manifest.deployTarget,
+        // Infra-only fields — preserved from the existing tfvars so we
+        // don't blow away discovered IPs / sizes.
+        serverIpv4: extractHcl(tfvars, "target_ipv4") || undefined,
+        serverIpv6: extractHcl(tfvars, "target_ipv6") || undefined,
+        serverSize: extractHcl(tfvars, "server_type") || undefined,
+        serverLocation: extractHcl(tfvars, "server_location") || undefined,
+        features: [...manifest.features],
+        s3Provider: manifest.s3Provider,
+        mlServices: [...manifest.mlServices],
+        forceRedeployMl: [],
+        gpuPlatforms: manifest.gpuPlatforms,
+        customHfModelId: manifest.customHfModelId,
+        customHfGpuType: manifest.customHfGpuType,
+        scaffoldRepo: false,
+        createGithubRepo: false,
+        installDeps: false,
+        runDeployment: false,
+        dryRun: false,
+        envValues: {},
+    };
+}
+/** Pull a top-level `key = "value"` line out of an HCL tfvars body.
+ *  Tolerates leading whitespace; ignores values inside blocks. Returns
+ *  the unquoted value, or "" when not found. */
+function extractHcl(content, key) {
+    if (!content)
+        return "";
+    const m = content.match(new RegExp(`^\\s*${key}\\s*=\\s*"([^"]*)"`, "m"));
+    return m ? m[1] : "";
+}
+/** The DNS provider drives which dns-only stack dir we'd fall back to
+ *  for a brand-new regen (when there's no existing tfvars to anchor
+ *  on). Defaults to inwx, which matches `generateTfvars`'s own
+ *  fallback. */
+function inferDnsProviderFromConfig() {
+    return (getConfig().providers.dns?.provider ?? "inwx");
+}
+//# sourceMappingURL=regen-infra.js.map

package/dist/deploy/regen-infra.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"regen-infra.js","sourceRoot":"","sources":["../../src/deploy/regen-infra.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC3F,OAAO,EAAwB,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC7E,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAWnD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAc,EAAE,YAAoB;IACzE,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC5E,MAAM,aAAa,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAe;IACjD,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAElD,MAAM,QAAQ,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IAC1C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACb,wBAAwB,UAAU,sEAAsE,CACzG,CAAC;IACJ,CAAC;IAED,oEAAoE;IACpE,sEAAsE;IACtE,2BAA2B;IAC3B,MAAM,cAAc,GAAG;QACrB,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,QAAQ,CAAC,IAAI,SAAS,CAAC;QAC9F,IAAI,CACF,YAAY,EACZ,OAAO,EACP,WAAW,EACX,QAAQ,EACR,qBAAqB,EACrB,GAAG,QAAQ,CAAC,IAAI,SAAS,CAC1B;QACD,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,QAAQ,CAAC,IAAI,SAAS,CAAC;KAC/F,CAAC;IACF,MAAM,kBAAkB,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAErE,+DAA+D;IAC/D,iEAAiE;IACjE,kEAAkE;IAClE,mEAAmE;IACnE,oEAAoE;IACpE,eAAe;IACf,MAAM,MAAM,GAAG,2BAA2B,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;IAEzE,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,aAAa,GAAG,kBAAkB,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAErD,mEAAmE;IACnE,kCAAkC;IAClC,MAAM,SAAS,GAAG,kBAAkB,CAAC,CAAC,CAAC,YAAY,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtF,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC,IAAI,MAAM,CAAC,CAAC;IACrF,MAAM,aAAa,GAAG,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAE9F,qEAAqE;IACrE,mEAAmE;IACnE,oEAAoE;IACpE,oEAAoE;IACpE,6BAA6B;IAC7B,IAAI,gBAAgB,GAAG,kBAAkB,CAAC;IAC1C,IAAI,CAAC,gBAAgB,IAAI,SAAS,EAAE,CAAC;QACnC,MAAM,cAAc,GAAG,0BAA0B,EAAE,CAAC;QACpD,MAAM,QAAQ,GAAG,eAAe,CAC9B,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,EAC3B,MAAM,CAAC,YAAY,EACnB,cAAc,CACf,CAAC;QACF,IAAI,QAAQ;YAAE,gBAAgB,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,QAAQ,CAAC,IAAI,SAAS,CAAC,CAAC;IAC7E,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,uBAAuB,QAAQ,CAAC,IAAI,4BAA4B,CAAC,CAAC,CAAC;IAC1F,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CACP,YAAY,QAAQ,CAAC,MAAM,cAAc,QAAQ,CAAC,QAAQ,IAAI,MAAM,YAAY,QAAQ,CAAC,YAAY,EAAE,CACxG,CACF,CAAC;IAEF,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,OAAO,IAAI,gBAAgB,CAAC,QAAQ,EAAE,gBAAgB,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACtF,OAAO,IAAI,gBAAgB,CAAC,cAAc,EAAE,cAAc,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;IAElG,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC,CAAC;QACnE,OAAO;IACT,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,iBAAiB,OAAO,8BAA8B,CAAC,CAAC,CAAC;QAClF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC,CAAC;QAC/D,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,qBAAqB,OAAO,WAAW,CAAC,CAAC,CAAC;IAClE,IAAI,gBAAgB,IAAI,SAAS,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC7D,MAAM,QAAQ,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,MAAM,CACV,8BAA8B,QAAQ,mBAAmB,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CACtF,CACF,CAAC;QACF,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CACP,4BAA4B,QAAQ,oBAAoB,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CACrF,CACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CACvB,KAAa,EACb,IAAwB,EACxB,UAAkB,EAClB,UAAkB,EAClB,MAAe;IAEf,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,KAAK,mDAAmD,CAAC,CAAC,CAAC;QACtF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,KAAK,gBAAgB,IAAI,GAAG,CAAC,CAAC,CAAC;QAC1D,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7D,gBAAgB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM;QAAE,aAAa,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IACtD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;mDAGmD;AACnD,SAAS,gBAAgB,CAAC,MAAc,EAAE,MAAc;IACtD,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,qBAAqB;IACrB,MAAM,GAAG,GAAe,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,CAChE,IAAI,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAChC,CAAC;IACF,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC;IACD,6CAA6C;IAC7C,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;QACpC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAClB,CAAC,EAAE,CAAC;YACJ,CAAC,EAAE,CAAC;QACN,CAAC;aAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACxC,CAAC,EAAE,CAAC;QACN,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1C,CAAC,EAAE,CAAC;QACN,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM;QAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/D,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM;QAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,2BAA2B,CAClC,QAAyB,EACzB,UAA8B;IAE9B,MAAM,MAAM,GAAG,UAAU,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7F,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/D,OAAO;QACL,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,UAAU;QACV,SAAS;QACT,QAAQ,EAAE,CAAC,QAAQ,CAAC,QAAQ,IAAI,MAAM,CAAY;QAClD,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,+DAA+D;QAC/D,0CAA0C;QAC1C,UAAU,EAAE,UAAU,CAAC,MAAM,EAAE,aAAa,CAAC,IAAI,SAAS;QAC1D,UAAU,EAAE,UAAU,CAAC,MAAM,EAAE,aAAa,CAAC,IAAI,SAAS;QAC1D,UAAU,EAAE,UAAU,CAAC,MAAM,EAAE,aAAa,CAAC,IAAI,SAAS;QAC1D,cAAc,EAAE,UAAU,CAAC,MAAM,EAAE,iBAAiB,CAAC,IAAI,SAAS;QAClE,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC;QAChC,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,UAAU,EAAE,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC;QACpC,eAAe,EAAE,EAAE;QACnB,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,eAAe,EAAE,QAAQ,CAAC,eAAe;QACzC,eAAe,EAAE,QAAQ,CAAC,eAAe;QACzC,YAAY,EAAE,KAAK;QACnB,gBAAgB,EAAE,KAAK;QACvB,WAAW,EAAE,KAAK;QAClB,aAAa,EAAE,KAAK;QACpB,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,EAAE;KACd,CAAC;AACJ,CAAC;AAED;;gDAEgD;AAChD,SAAS,UAAU,CAAC,OAAe,EAAE,GAAW;IAC9C,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,GAAG,oBAAoB,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1E,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACvB,CAAC;AAED;;;gBAGgB;AAChB,SAAS,0BAA0B;IACjC,OAAO,CAAC,SAAS,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,QAAQ,IAAI,MAAM,CAAqC,CAAC;AAC7F,CAAC"}

package/dist/index.js

@@ -152,6 +152,13 @@ async function main() {
             await runSyncCli(args.slice(1));
             break;
         }
+        case "regen-infra": {
+            if (args.includes("--help"))
+                return printHelp("regen-infra");
+            const { runRegenInfraCli } = await import("./deploy/regen-infra.js");
+            await runRegenInfraCli(args.slice(1), MONOREPO_ROOT);
+            break;
+        }
         case "doctor": {
             if (args.includes("--help"))
                 return printHelp("doctor");
@@ -914,7 +921,11 @@ async function handleCreate() {
             // Auto-provision GlitchTip + write its DSN encrypted into
             // .env.production. The user picked the `analytics` feature; we
             // already verified GlitchTip is configured during pre-flight.
-            if (config.features.includes("analytics")) {
+            // Skipped for client-only — the encrypt target lives in
+            // packages/server/, which doesn't exist post-prune. The client
+            // side of analytics (OpenPanel via NEXT_PUBLIC_*) still works
+            // without any provisioning.
+            if (config.features.includes("analytics") && config.surfaces !== "client-only") {
                 try {
                     const { provisionGlitchtipClient } = await import("./provision/glitchtip.js");
                     const { set: dotenvxSet } = await import("@dotenvx/dotenvx");
@@ -937,8 +948,8 @@ async function handleCreate() {
             //   · sandbox creds  → .env.development (plaintext)
             //   · live creds     → .env.production  (dotenvx-encrypted)
             // Webhook endpoint ids are tracked in keychain so destroy can
-            // reach them later.
-            if (config.features.includes("stripe")) {
+            // reach them later. Skipped for client-only (server-only feature).
+            if (config.features.includes("stripe") && config.surfaces !== "client-only") {
                 try {
                     const { provisionStripeProject, renderStripeEnv, renderStripeSkipComment } = await import("./provision/stripe.js");
                     const { appendCommentBlock, parseEnvLines, writeDevEnv, writeProdEnv } = await import("./provision/write-env.js");
@@ -1203,7 +1214,12 @@ async function handleCreate() {
     // Final summary
     console.log(chalk.bold("\n  ── Done! ─────────────────────────────────────────────────\n"));
     console.log(`  App:       ${chalk.cyan(`https://${config.domain}`)}`);
-    console.log(`  API:       ${chalk.cyan(`https://${config.domain}/api`)}`);
+    // Skip the API line for client-only — there's no backend, so showing
+    // a "/api" URL just confuses the user (and falsely implies a service
+    // is listening at that path).
+    if (config.surfaces !== "client-only") {
+        console.log(`  API:       ${chalk.cyan(`https://${config.domain}/api`)}`);
+    }
     console.log(`  App dir:   ${chalk.dim(appDir)}`);
     console.log(`  Config:    ${chalk.dim(getConfigPath())}`);
     if (config.scaffoldRepo) {
@@ -1800,6 +1816,40 @@ function printHelp(topic) {
       ${chalk.dim("  | jq 'with_entries(select(.key | startswith(\"traefik\")))'")}
     A correctly-synced container has 10+ traefik labels (HTTP router,
     HTTPS router with letsencrypt, gzip middleware, redirect-to-https).
+`);
+        return;
+    }
+    if (topic === "regen-infra") {
+        console.log(`
+  ${chalk.bold("hatchkit regen-infra")} — rewrite tfvars + Coolify .env from the manifest
+
+  ${chalk.bold("Usage:")}
+    cd <project-dir> && hatchkit regen-infra [--dry-run]
+    hatchkit regen-infra --dir <project-dir> [--dry-run]
+
+  ${chalk.bold("What it does:")}
+    Reads ${chalk.cyan(".hatchkit.json")}, re-runs the same generators ${chalk.cyan("hatchkit create")}
+    uses (${chalk.dim("generateTfvars")} + ${chalk.dim("generateCoolifyEnv")}), and writes the result
+    back to the existing tfvars + Coolify stack .env paths under
+    ${chalk.dim("infra/")}. Infra-only fields the manifest doesn't carry (server IPs,
+    Hetzner type/location) are preserved from the existing tfvars on
+    disk, so a regen never silently blows away discovered values.
+
+  ${chalk.bold("When to use:")}
+    · You upgraded the CLI and want existing projects to pick up the
+      new tfvars logic (e.g. dropping the ${chalk.dim("api.<sub>")} subdomain for
+      client-only surfaces).
+    · You edited ${chalk.cyan(".hatchkit.json")} by hand (changed surfaces, added a
+      feature) and want the infra files re-rendered to match.
+
+  ${chalk.bold("Out of scope:")}
+    · Does NOT run terraform — review the diff, then
+      ${chalk.dim("terraform -chdir=<stack> apply -var-file=<name>.tfvars")} yourself.
+    · Does NOT touch Coolify live state — use ${chalk.cyan("hatchkit sync")} for that.
+
+  ${chalk.bold("Options:")}
+    --dir <path>   Project root (defaults to cwd).
+    --dry-run      Print the unified diff without writing.
 `);
         return;
     }