redkite 0.1.7 → 0.1.9

package/dist/steps.js.map

@@ -1 +1 @@
-{"version":3,"file":"steps.js","sourceRoot":"","sources":["../src/steps.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAK5C,6EAA6E;AAC7E,+EAA+E;AAC/E,wEAAwE;AACxE,MAAM,UAAU,UAAU,CAAC,OAAoB,EAAE,QAAkB;IACjE,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAClD,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAClD,IAAI,OAAO,KAAK,YAAY;QAAE,OAAO,CAAC,aAAa,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAEpE,OAAO;QACL,0EAA0E;QAC1E,2EAA2E;QAC3E,6CAA6C;QAC7C,aAAa,QAAQ,CAAC,OAAO,EAAE;QAC/B,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,IAAI,IAAI,EAAE,EAAE,CAAC;KACvF,CAAC;AACJ,CAAC;AAiBD,6EAA6E;AAC7E,oEAAoE;AACpE,MAAM,UAAU,OAAO,CAAC,OAAuB;IAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAE3C,OAAO;QACL,KAAK,EAAE,uBAAuB,OAAO,CAAC,GAAG,EAAE;QAC3C,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC;QAE/C,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YAC5B,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;YAC5C,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;YAE1D,MAAM,OAAO,CAAC,MAAM,CAAC,UAAU,CAC7B;gBACE,UAAU;gBACV,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,IAAI,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC;gBAC1D,gBAAgB;gBAChB,KAAK;gBACL,GAAG,OAAO;aACX,CAAC,IAAI,CAAC,GAAG,CAAC,EACX,GAAG,OAAO,CAAC,GAAG,oBAAoB,CACnC,CAAC;YAEF,OAAO,KAAK,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,gDAAgD;AAChD,SAAS,eAAe,CAAC,IAAU,EAAE,OAAuB;IAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IACvE,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,CAAC,GAAG,kCAAkC,CAAC,CAAC;IAE5E,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC;IAC5E,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO;QAAE,OAAO;IAElD,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,CAAC,GAAG,kCAAkC,MAAM,CAAC,OAAO,IAAI;QAChE,OAAO,IAAI,CAAC,WAAW,eAAe,OAAO,IAAI,cAAc,IAAI;QACnE,+DAA+D,CAClE,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,qDAAqD;AACrD,MAAM,UAAU,SAAS,CAAC,KAAY,EAAE,IAAY;IAClD,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC1D,IAAI,GAAG,EAAE,UAAU;QAAE,OAAO,GAAG,CAAC,UAAU,CAAC;IAE3C,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,oDAAoD,CAAC,CAAC;AAC/E,CAAC;AAID,MAAM,UAAU,MAAM,CAAC,OAAsB;IAC3C,OAAO,EAAE,QAAQ,EAAE,QAAiB,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,GAAY;IAClC,OAAO,GAAG,CAAC,KAAK,CAAC;AACnB,CAAC"}
+{"version":3,"file":"steps.js","sourceRoot":"","sources":["../src/steps.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAK5C,6EAA6E;AAC7E,+EAA+E;AAC/E,wEAAwE;AACxE,MAAM,UAAU,UAAU,CAAC,OAAoB,EAAE,QAAkB;IACjE,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAClD,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAClD,IAAI,OAAO,KAAK,YAAY;QAAE,OAAO,CAAC,aAAa,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAEpE,OAAO;QACL,0EAA0E;QAC1E,2EAA2E;QAC3E,6CAA6C;QAC7C,aAAa,QAAQ,CAAC,OAAO,EAAE;QAC/B,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,IAAI,IAAI,EAAE,EAAE,CAAC;KACvF,CAAC;AACJ,CAAC;AAiBD,6EAA6E;AAC7E,oEAAoE;AACpE,MAAM,UAAU,OAAO,CAAC,OAAuB;IAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAE3C,OAAO;QACL,KAAK,EAAE,uBAAuB,OAAO,CAAC,GAAG,EAAE;QAC3C,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC;QAE/C,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YAC5B,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;YAC5C,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;YAE1D,mEAAmE;YACnE,wEAAwE;YACxE,wBAAwB;YACxB,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;YAE1E,MAAM,OAAO,CAAC,MAAM,CAAC,UAAU,CAC7B;gBACE,UAAU;gBACV,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,IAAI,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC;gBAC1D,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5C,gBAAgB;gBAChB,KAAK;gBACL,GAAG,OAAO;aACX,CAAC,IAAI,CAAC,GAAG,CAAC,EACX,GAAG,OAAO,CAAC,GAAG,oBAAoB,CACnC,CAAC;YAEF,OAAO,KAAK,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,gDAAgD;AAChD,SAAS,eAAe,CAAC,IAAU,EAAE,OAAuB;IAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IACvE,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,CAAC,GAAG,kCAAkC,CAAC,CAAC;IAE5E,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC;IAC5E,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO;QAAE,OAAO;IAElD,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,CAAC,GAAG,kCAAkC,MAAM,CAAC,OAAO,IAAI;QAChE,OAAO,IAAI,CAAC,WAAW,eAAe,OAAO,IAAI,cAAc,IAAI;QACnE,+DAA+D,CAClE,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,qDAAqD;AACrD,MAAM,UAAU,SAAS,CAAC,KAAY,EAAE,IAAY;IAClD,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC1D,IAAI,GAAG,EAAE,UAAU;QAAE,OAAO,GAAG,CAAC,UAAU,CAAC;IAE3C,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,oDAAoD,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,GAAY;IAClC,OAAO,GAAG,CAAC,KAAK,CAAC;AACnB,CAAC"}

package/dist/types.d.ts

@@ -1,4 +1,5 @@
 import type { AnyStep } from "./pipeline.js";
+import type { Plugin } from "./plugin.js";
 export type Environment = {
     buildOn?: "host" | "local";
     branch: string;
@@ -10,9 +11,11 @@ export type Environment = {
 export type StepNetwork = "host" | "deployment" | "none" | {
     named: string;
 };
+export type HostKeys = "accept-new" | "strict" | "off";
 export type DeployHost = {
     bastion: string;
     socket?: string;
+    hostKeys?: HostKeys;
 };
 export type SecretRef = {
     provider: string;
@@ -53,11 +56,6 @@ export type BuildSpec = {
     aptPackages: string[];
     runtimePackages: string[];
     runtimeSteps: string[];
-    sourcemaps?: SourcemapSpec;
-};
-export type SourcemapSpec = {
-    provider: "sentry";
-    stripFromImage: string;
 };
 export type VerifySpec = {
     steps: string[];
@@ -79,6 +77,9 @@ export type AppSpec = {
     route: string;
     port: number;
     secrets?: SecretRefs;
+    branch?: string;
+    tag?: string;
+    commit?: string;
     dir?: string;
     build: BuildSpec;
     health: HealthSpec;
@@ -96,5 +97,6 @@ export type Deployment = {
     services: ServiceSpec[];
     apps: AppSpec[];
     steps?: AnyStep[];
+    plugins?: Plugin[];
 };
 //# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAM7C,MAAM,MAAM,WAAW,GAAG;IAKxB,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAE3B,MAAM,EAAE,MAAM,CAAC;IAEf,MAAM,EAAE,MAAM,CAAC;IAIf,UAAU,CAAC,EAAE,MAAM,CAAC;IAGpB,IAAI,CAAC,EAAE,UAAU,CAAC;IAIlB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC,CAAC;AAMF,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,YAAY,GAAG,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7E,MAAM,MAAM,UAAU,GAAG;IAEvB,OAAO,EAAE,MAAM,CAAC;IAEhB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAIF,MAAM,MAAM,SAAS,GAAG;IAEtB,QAAQ,EAAE,MAAM,CAAC;IAEjB,EAAE,EAAE,MAAM,CAAC;CACZ,CAAC;AAGF,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,SAAS,EAAE,CAAC;AAEjD,MAAM,MAAM,WAAW,GAAG;IAExB,IAAI,EAAE,MAAM,CAAC;IAEb,KAAK,EAAE,MAAM,CAAC;IAEd,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,OAAO,CAAC,EAAE,QAAQ,GAAG,gBAAgB,CAAC;IAEtC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAG/B,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAGrC,OAAO,CAAC,EAAE,UAAU,CAAC;IAGrB,OAAO,CAAC,EAAE,MAAM,CAAC;IAGjB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC,CAAC;AAIF,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,IAAI,CAAA;CAAE,CAAC;AAElE,MAAM,MAAM,SAAS,GAAG;IAEtB,MAAM,EAAE,MAAM,CAAC;IAEf,YAAY,EAAE,MAAM,CAAC;IAErB,YAAY,EAAE,MAAM,CAAC;IAIrB,YAAY,CAAC,EAAE;QACb,KAAK,EAAE,MAAM,EAAE,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QAIb,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;KACzB,CAAC;IAEF,KAAK,EAAE,MAAM,EAAE,CAAC;IAEhB,MAAM,EAAE,MAAM,CAAC;IAIf,KAAK,EAAE,SAAS,EAAE,CAAC;IAInB,WAAW,CAAC,EAAE,OAAO,CAAC;IAGtB,UAAU,EAAE,MAAM,EAAE,CAAC;IAGrB,MAAM,EAAE,MAAM,EAAE,CAAC;IAGjB,UAAU,EAAE,OAAO,CAAC;IAEpB,WAAW,EAAE,MAAM,EAAE,CAAC;IAEtB,eAAe,EAAE,MAAM,EAAE,CAAC;IAG1B,YAAY,EAAE,MAAM,EAAE,CAAC;IAEvB,UAAU,CAAC,EAAE,aAAa,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAE1B,QAAQ,EAAE,QAAQ,CAAC;IAGnB,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AAKF,MAAM,MAAM,UAAU,GAAG;IAGvB,KAAK,EAAE,MAAM,EAAE,CAAC;IAGhB,OAAO,CAAC,EAAE,WAAW,CAAC;IAGtB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IAEvB,IAAI,EAAE,MAAM,CAAC;IAGb,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC;IAEnD,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,OAAO,GAAG;IAGpB,IAAI,EAAE,MAAM,CAAC;IAGb,IAAI,CAAC,EAAE,MAAM,CAAC;IAKd,IAAI,CAAC,EAAE,MAAM,CAAC;IAKd,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IAGnB,KAAK,EAAE,MAAM,CAAC;IAEd,IAAI,EAAE,MAAM,CAAC;IAGb,OAAO,CAAC,EAAE,UAAU,CAAC;IAIrB,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb,KAAK,EAAE,SAAS,CAAC;IAEjB,MAAM,EAAE,UAAU,CAAC;IAGnB,MAAM,CAAC,EAAE,UAAU,CAAC;IAEpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAGjC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAGrC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;CACnC,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IAGvB,OAAO,EAAE,MAAM,CAAC;IAGhB,WAAW,CAAC,EAAE,WAAW,CAAC;IAK1B,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAE3C,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,UAAU,CAAC,EAAE,MAAM,CAAC;IAIpB,QAAQ,EAAE,WAAW,EAAE,CAAC;IAGxB,IAAI,EAAE,OAAO,EAAE,CAAC;IAGhB,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;CACnB,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAM1C,MAAM,MAAM,WAAW,GAAG;IAKxB,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAE3B,MAAM,EAAE,MAAM,CAAC;IAEf,MAAM,EAAE,MAAM,CAAC;IAIf,UAAU,CAAC,EAAE,MAAM,CAAC;IAGpB,IAAI,CAAC,EAAE,UAAU,CAAC;IAIlB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC,CAAC;AAMF,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,YAAY,GAAG,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAI7E,MAAM,MAAM,QAAQ,GAGhB,YAAY,GAGZ,QAAQ,GAGR,KAAK,CAAC;AAEV,MAAM,MAAM,UAAU,GAAG;IAEvB,OAAO,EAAE,MAAM,CAAC;IAEhB,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,QAAQ,CAAC,EAAE,QAAQ,CAAC;CACrB,CAAC;AAIF,MAAM,MAAM,SAAS,GAAG;IAEtB,QAAQ,EAAE,MAAM,CAAC;IAEjB,EAAE,EAAE,MAAM,CAAC;CACZ,CAAC;AAGF,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,SAAS,EAAE,CAAC;AAEjD,MAAM,MAAM,WAAW,GAAG;IAExB,IAAI,EAAE,MAAM,CAAC;IAEb,KAAK,EAAE,MAAM,CAAC;IAEd,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,OAAO,CAAC,EAAE,QAAQ,GAAG,gBAAgB,CAAC;IAEtC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAG/B,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAGrC,OAAO,CAAC,EAAE,UAAU,CAAC;IAGrB,OAAO,CAAC,EAAE,MAAM,CAAC;IAGjB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC,CAAC;AAIF,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,IAAI,CAAA;CAAE,CAAC;AAElE,MAAM,MAAM,SAAS,GAAG;IAEtB,MAAM,EAAE,MAAM,CAAC;IAEf,YAAY,EAAE,MAAM,CAAC;IAErB,YAAY,EAAE,MAAM,CAAC;IAIrB,YAAY,CAAC,EAAE;QACb,KAAK,EAAE,MAAM,EAAE,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QAIb,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;KACzB,CAAC;IAEF,KAAK,EAAE,MAAM,EAAE,CAAC;IAEhB,MAAM,EAAE,MAAM,CAAC;IAIf,KAAK,EAAE,SAAS,EAAE,CAAC;IAInB,WAAW,CAAC,EAAE,OAAO,CAAC;IAGtB,UAAU,EAAE,MAAM,EAAE,CAAC;IAGrB,MAAM,EAAE,MAAM,EAAE,CAAC;IAGjB,UAAU,EAAE,OAAO,CAAC;IAEpB,WAAW,EAAE,MAAM,EAAE,CAAC;IAEtB,eAAe,EAAE,MAAM,EAAE,CAAC;IAG1B,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB,CAAC;AAKF,MAAM,MAAM,UAAU,GAAG;IAGvB,KAAK,EAAE,MAAM,EAAE,CAAC;IAGhB,OAAO,CAAC,EAAE,WAAW,CAAC;IAGtB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IAEvB,IAAI,EAAE,MAAM,CAAC;IAGb,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC;IAEnD,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,OAAO,GAAG;IAGpB,IAAI,EAAE,MAAM,CAAC;IAGb,IAAI,CAAC,EAAE,MAAM,CAAC;IAKd,IAAI,CAAC,EAAE,MAAM,CAAC;IAKd,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IAGnB,KAAK,EAAE,MAAM,CAAC;IAEd,IAAI,EAAE,MAAM,CAAC;IAGb,OAAO,CAAC,EAAE,UAAU,CAAC;IAKrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAIhB,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb,KAAK,EAAE,SAAS,CAAC;IAEjB,MAAM,EAAE,UAAU,CAAC;IAGnB,MAAM,CAAC,EAAE,UAAU,CAAC;IAEpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAGjC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAGrC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;CACnC,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IAGvB,OAAO,EAAE,MAAM,CAAC;IAGhB,WAAW,CAAC,EAAE,WAAW,CAAC;IAK1B,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAE3C,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,UAAU,CAAC,EAAE,MAAM,CAAC;IAIpB,QAAQ,EAAE,WAAW,EAAE,CAAC;IAGxB,IAAI,EAAE,OAAO,EAAE,CAAC;IAGhB,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;IAIlB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "redkite",
-  "version": "0.1.7",
+  "version": "0.1.9",
   "description": "Blue-green Docker deployment from one config file, over ssh. No engine, no agent, no dependencies.",
   "keywords": [
     "deploy",

package/src/build.ts

@@ -3,6 +3,7 @@ import { resolve } from "node:path";
 
 import type { Docker } from "./docker.js";
 import { BUILDER_STAGE, renderDockerfile, renderDockerignore } from "./dockerfile.js";
+import type { Ref } from "./source.js";
 import type { Host } from "./host.js";
 import { prepareSource } from "./source.js";
 import type { AppTopology } from "./topology.js";
@@ -48,6 +49,16 @@ export type BuildResult = {
   cached: boolean;
 };
 
+// The app's own, or the environment's branch when it names none. A branch is
+// the only thing an environment can say, because a tag or a commit is a claim
+// about one repository and an environment spans every app
+export function refOf(app: AppSpec, branch: string): Ref {
+  if (app.tag) return { kind: "tag", name: app.tag };
+  if (app.commit) return { kind: "commit", name: app.commit };
+
+  return { kind: "branch", name: app.branch ?? branch };
+}
+
 export async function build(
   app: AppSpec,
   topology: AppTopology,
@@ -64,7 +75,7 @@ export async function build(
     // against the deployment file rather than wherever this was run
     path: app.path && resolve(app.path),
     include: app.include,
-    branch: context.branch,
+    ref: refOf(app, context.branch),
     submodules: spec.submodules,
     detail,
   });

package/src/checks.ts

@@ -1,3 +1,4 @@
+import { envFlags } from "./environment.js";
 import { appRoot } from "./layout.js";
 import type { Built, Context, Plan, Released } from "./pipeline.js";
 import { quote } from "./shell.js";
@@ -31,6 +32,9 @@ async function checkApp(app: AppSpec, spec: VerifySpec, input: Built, context: C
   const flags = [
     "run --rm",
     ...attachment(spec.network ?? "deployment", context.topology),
+    // Before the named settings, so a check can override what the vault says
+    // without editing the vault
+    ...(await envFlags(app, context)),
     `--workdir ${appRoot(app.dir)}`,
     ...settings({ ...app.environment, ...spec.environment }),
     builderOf(input, app.name),

package/src/cli/agent.ts

@@ -1,8 +1,26 @@
 import { execFileSync } from "node:child_process";
 
+import { environmentOf } from "../config.js";
+import type { Deployment } from "../types.js";
+
 // Cloning private repositories and opening the tunnel both go through the
 // agent, so a deploy without one fails halfway rather than at the start
 
+// Asked before one is demanded. A runner has no keys and no way to be prompted
+// for one, and a deployment that reaches no other machine and clones nothing
+// has no use for an agent: insisting on one there is a green run turned red
+export function needsAgent(config: Deployment, environment: string) {
+  if (environmentOf(config, environment)?.host?.bastion) return true;
+
+  return config.apps.some((app) => app.repo !== undefined && overSsh(app.repo));
+}
+
+// A clone URL that names a transport of its own carries its own credentials.
+// Anything else is the scp-like form, which is ssh and wants a key
+function overSsh(repo: string) {
+  return !/^(https?|git|file):\/\//.test(repo);
+}
+
 // A plain writer rather than a Log, because this runs before the view opens:
 // ssh-add may ask for a passphrase, and it cannot ask through a screen
 // something else is drawing
@@ -22,7 +40,16 @@ export function requireAgent(warn: (message: string) => void) {
   if (pid) process.env["SSH_AGENT_PID"] = pid;
 
   // Inherits stdio so a passphrase prompt reaches the person running this
-  execFileSync("ssh-add", [], { stdio: "inherit" });
+  try {
+    execFileSync("ssh-add", [], { stdio: "inherit" });
+  } catch {
+    throw new Error(
+      "ssh-add found no key to load. This deployment reaches another machine " +
+        "or clones over ssh, so it needs an agent holding a key that can. On a " +
+        "runner, set one up before this step and leave SSH_AUTH_SOCK in the " +
+        "environment",
+    );
+  }
 
   return socket;
 }

package/src/cli/config.ts

@@ -16,8 +16,16 @@ const EXTENSIONS = ["ts", "mts", "js", "mjs"] as const;
 
 const CANDIDATES = EXTENSIONS.map((extension) => `redkite.config.${extension}`);
 
-// redkite.<environment>.config.<extension>, beside the deployment it belongs to
-const PER_ENVIRONMENT = /^redkite\.([a-z0-9-]+)\.config\.(ts|mts|js|mjs)$/;
+// Anything beside the deployment that starts with redkite and is a module it
+// could read. The .config in the middle is what people write and what the docs
+// say, and it is optional here because a file that was meant to be an
+// environment and is named slightly differently should be read and refused
+// rather than passed over as though it were not there
+const PER_ENVIRONMENT = /^redkite[.\-_](.+?)(?:\.config)?\.(?:ts|mts|cts|js|mjs|cjs)$/;
+
+// What an environment may be called. It becomes part of an image tag, and an
+// image tag cannot hold a capital, so this is docker's limit rather than ours
+const ENVIRONMENT_NAME = /^[a-z0-9][a-z0-9._-]*$/;
 
 // Node strips types itself from 22.18 on, which is what lets redkite ship with
 // no dependencies. These are the ways that can fail on a config it cannot read.
@@ -121,9 +129,18 @@ export async function loadEnvironments(directory: string) {
   const seen: Record<string, string> = {};
 
   for (const entry of readdirSync(directory).sort()) {
+    if (CANDIDATES.includes(entry)) continue;
+
     const name = PER_ENVIRONMENT.exec(entry)?.[1];
     if (!name) continue;
 
+    if (!ENVIRONMENT_NAME.test(name)) {
+      throw new Error(
+        `${join(directory, entry)} reads as the environment ${name}, which cannot ` +
+          "name one: it becomes part of an image tag, and a tag is lower case",
+      );
+    }
+
     const first = seen[name];
     if (first) {
       throw new Error(`${name} is defined by both ${first} and ${entry}`);

package/src/cli/index.ts

@@ -7,13 +7,14 @@ import { silent, type Log } from "../log.js";
 import { renderNginx } from "../nginx.js";
 import { addressOf, RUNS, SLOTS, type Run } from "../pipeline.js";
 import { listRefs, type SecretStores } from "../secrets/refs.js";
-import { bitwardenStore } from "../secrets/store.js";
+import { pluginSteps, storeFor } from "../plugin.js";
+import { down, rollback } from "../recover.js";
 import { driftOf, plannedServices, type Drift } from "../services/planned.js";
 import { sshHost } from "../sshHost.js";
 import { topologyFor, type Topology } from "../topology.js";
 import type { Deployment, DeployHost } from "../types.js";
 
-import { requireAgent } from "./agent.js";
+import { needsAgent, requireAgent } from "./agent.js";
 import { loadConfig } from "./config.js";
 import { createLog, describeFailure } from "./log.js";
 
@@ -25,6 +26,8 @@ const USAGE = `redkite <command> [environment]
   plan [environment]     Print the derived topology, the pipeline and the nginx
   deploy [environment]   Build, swap, health check, and revert on failure
   verify [environment]   Bring the services up, build, and run each app's checks
+  rollback [environment] Put back any app a run moved and did not finish
+  down [environment]     Stop everything this environment named
 
   --config <path>        Defaults to redkite.config.ts at the root of the project
   --local                Build the images here and ship them to the host
@@ -46,6 +49,7 @@ function measured(host: Host, log?: Log) {
     cache: host.cache,
     pipe: host.pipe.bind(host),
     stop: host.stop.bind(host),
+    final: host.final.bind(host),
 
     sh: async (command, onLine) => {
       const started = Date.now();
@@ -143,6 +147,9 @@ async function dispatch(argv: string[]) {
   const configPath = flag(argv, "--config");
 
   if (command === "plan") return await plan(environment, configPath);
+  if (command === "rollback" || command === "down") {
+    return await recover(command, environment, configPath);
+  }
   if (command === "deploy" || command === "verify") {
     return await run(command, environment, configPath, {
       verbose: argv.includes("--verbose"),
@@ -155,6 +162,49 @@ async function dispatch(argv: string[]) {
   process.exitCode = command ? 1 : 0;
 }
 
+// Neither runs a pipeline. Both exist for the run that was killed rather than
+// asked to stop, so they read what the host is in rather than what a deploy
+// remembered, and both are safe where there is nothing to do
+async function recover(
+  command: "rollback" | "down",
+  environment: string,
+  configPath?: string,
+) {
+  const config = await loadConfig(configPath);
+  const topology = topologyFor(config, environment);
+  const deployHost = environmentOf(config, environment)?.host;
+
+  const say = (message = "") => process.stdout.write(`${message}\n`);
+  if (needsAgent(config, environment)) requireAgent(say);
+
+  const host = await hostFor(deployHost, silent);
+
+  try {
+    if (command === "down") {
+      const { stopped } = await down({ config, environment, host, log: asLog(say) });
+
+      say(stopped.length === 0 ? "Nothing was running" : `Stopped ${stopped.join(", ")}`);
+      return;
+    }
+
+    const { restored } = await rollback({ config, environment, host, log: asLog(say) });
+
+    if (restored.length === 0) {
+      return say(`Nothing to put back in ${topology.environment}`);
+    }
+
+    say(`Put back ${restored.join(", ")}`);
+  } finally {
+    await host.close?.();
+  }
+}
+
+// These print rather than draw: a recovery runs after the view has gone, and
+// often in a job that is already being torn down
+function asLog(say: (message: string) => void): Log {
+  return Object.assign(say, { warn: say, fail: say, done: say, step: () => silent.step("") });
+}
+
 async function plan(environment: string, configPath?: string) {
   const config = await loadConfig(configPath);
   const topology = topologyFor(config, environment);
@@ -203,6 +253,7 @@ async function plan(environment: string, configPath?: string) {
   // run it supports. Nothing declares that: the missing port is what says it
   const serves = Boolean(topology.publicPort);
 
+  sayPlugins(config, say);
   sayPipeline(config, serves, say);
   await sayDrift(config, topology, serves ? "deploy" : "verify", say);
 
@@ -250,6 +301,29 @@ const DRIFT: Record<Drift["reason"], string> = {
   unrecognised: "not created by redkite, will be recreated",
 };
 
+// Everything this deployment opted into. A vault that is missing from here is
+// the reason its refs will not resolve, and that is worth seeing before a run
+function sayPlugins(config: Deployment, say: (message?: string) => void) {
+  const plugins = config.plugins ?? [];
+  if (plugins.length === 0) return;
+
+  say("\nplugins");
+
+  for (const plugin of plugins) {
+    const stores = Object.keys(plugin.stores ?? {});
+    const resolves = stores.length > 0 ? `  resolves ${stores.join(", ")}` : "";
+    const count = plugin.steps?.length ?? 0;
+
+    say(`  ${plugin.name}${gap(plugin.name.length)}${count} ${count === 1 ? "step" : "steps"}${resolves}`);
+  }
+}
+
+const COLUMN = 26;
+
+function gap(width: number) {
+  return " ".repeat(Math.max(2, COLUMN - width));
+}
+
 // What each run will actually do, in the order it will do it. A step is
 // addressed rather than called, so this is the only place a sequence is visible
 function sayPipeline(
@@ -257,9 +331,19 @@ function sayPipeline(
   serves: boolean,
   say: (message?: string) => void,
 ) {
-  const steps = config.steps ?? [];
+  // What the run will walk, which is the plugins' steps and then the
+  // deployment's own. A plan that showed only one of them would be a plan of a
+  // different deploy
+  const steps = [...pluginSteps(config.plugins), ...(config.steps ?? [])];
   const added = new Set(steps.map((step) => step.point));
 
+  // Says which plugin a step came from, because a point on its own does not
+  const from = new Map(
+    (config.plugins ?? []).flatMap((plugin) =>
+      (plugin.steps ?? []).map((step) => [step.point, plugin.name] as const),
+    ),
+  );
+
   const at = (phase: string, slot: string) =>
     steps.filter((step) => {
       const address = addressOf(step.point);
@@ -294,7 +378,12 @@ function sayPipeline(
           say(`  ${phase.padEnd(26)}${who}${what}`);
         }
 
-        for (const step of at(phase, slot)) say(`  ${step.point}`);
+        for (const step of at(phase, slot)) {
+          const owner = from.get(step.point);
+          if (!owner) say(`  ${step.point}`);
+          // A point long enough to fill the column still gets its two spaces
+          else say(`  ${step.point}${gap(step.point.length)}${owner}`);
+        }
       }
     }
   }
@@ -395,7 +484,7 @@ async function hostFor(host: DeployHost | undefined, log: Log, signal?: AbortSig
   const task = log.step(`Opening a connection to ${host.bastion}`);
 
   try {
-    const opened = await sshHost(host.bastion, { signal });
+    const opened = await sshHost(host.bastion, { signal, hostKeys: host.hostKeys });
     task.done();
     return opened;
   } catch (error) {
@@ -406,6 +495,9 @@ async function hostFor(host: DeployHost | undefined, log: Log, signal?: AbortSig
 
 // Only the stores the config actually names. A deployment that keeps its
 // environment somewhere else, or nowhere, needs no credentials to deploy
+// One store per provider a ref names, opened from the plugins the deployment
+// registered. Nothing is opened for a deployment that names no refs, and a ref
+// no plugin answers for is refused rather than reaching for a vault by name
 async function openStores(config: Deployment, log: Log): Promise<SecretStores> {
   // Services name refs too, and a deployment whose only secret is a database
   // password opened no store at all until this counted them
@@ -417,35 +509,30 @@ async function openStores(config: Deployment, log: Log): Promise<SecretStores> {
     ...config.services.flatMap((service) => listRefs(service.secrets)),
   ];
 
-  const providers = new Set(refs.map((ref) => ref.provider));
+  const opened: SecretStores = {};
 
-  if (!providers.has("bitwarden")) return {};
+  for (const provider of new Set(refs.map((ref) => ref.provider))) {
+    const open = storeFor(config.plugins, provider);
 
-  const vault = log.step("Reading the vault");
+    if (!open) {
+      throw new Error(
+        `Nothing resolves ${provider} secrets. Add the plugin that does to ` +
+          "the plugins this deployment registers",
+      );
+    }
 
-  try {
-    const bitwarden = await bitwardenStore({
-      detail: vault.detail,
-      clientId: required("BW_CLIENT_ID"),
-      clientSecret: required("BW_CLIENT_SECRET"),
-      password: required("BW_PASSWORD"),
-    });
+    const task = log.step(`Reading the ${provider} vault`);
 
-    vault.done();
-    return { bitwarden };
-  } catch (error) {
-    vault.fail("Could not read the vault");
-    throw error;
+    try {
+      opened[provider] = await open({ detail: task.detail });
+      task.done();
+    } catch (error) {
+      task.fail(`Could not read the ${provider} vault`);
+      throw error;
+    }
   }
-}
-
-function required(name: string) {
-  const value = process.env[name];
-  if (value) return value;
 
-  throw new Error(
-    `${name} is not set, and this deployment reads its environment from Bitwarden`,
-  );
+  return opened;
 }
 
 type RunOptions = { verbose: boolean; full: boolean; local: boolean };
@@ -465,7 +552,9 @@ async function run(
   // The host clones the repositories over this, so it has to exist before the
   // connection that forwards it is opened. Before the view too: ssh-add asks
   // for a passphrase on the terminal, and by then the view owns it
-  requireAgent((message) => process.stderr.write(`${message}\n`));
+  if (needsAgent(config, environment)) {
+    requireAgent((message) => process.stderr.write(`${message}\n`));
+  }
 
   // Whatever is in flight is killed, the pipeline unwinds through its own
   // failure path, and the finally below removes the scratch directory

package/src/config.ts

@@ -1,4 +1,5 @@
 import { assertSteps } from "./pipeline.js";
+import { pluginSteps } from "./plugin.js";
 import type { Deployment, Environment } from "./types.js";
 
 // The one selected, from the one place worth looking. A deployment that carries
@@ -19,7 +20,10 @@ export function defineDeployment<const T extends Deployment & { environments?: n
   assertOneSource(config);
   assertRoutesResolvable(config);
   assertDirsRelative(config);
-  assertSteps(config.steps ?? []);
+  assertUniquePlugins(config);
+  // Together, because a plugin's step and the deployment's own share the same
+  // points and two of them at one point is the collision worth catching
+  assertSteps([...pluginSteps(config.plugins), ...(config.steps ?? [])]);
   return config;
 }
 
@@ -29,6 +33,20 @@ export function defineEnvironment<const T extends Environment>(environment: T):
   return environment;
 }
 
+// Registering one twice is either a mistake or two configurations of the same
+// thing, and neither is something to pick a winner for
+function assertUniquePlugins(config: Deployment) {
+  const seen = new Set<string>();
+
+  for (const plugin of config.plugins ?? []) {
+    if (seen.has(plugin.name)) {
+      throw new Error(`The plugin ${plugin.name} is registered twice`);
+    }
+
+    seen.add(plugin.name);
+  }
+}
+
 // Cloned or already here, and the two are built differently enough that
 // guessing between them is worse than being told
 function assertOneSource(config: Deployment) {
@@ -47,6 +65,14 @@ function assertOneSource(config: Deployment) {
       throw new Error(`${app.name} says what to include, but is cloned rather than built from a path`);
     }
 
+    const refs = ["branch", "tag", "commit"].filter((kind) => app[kind as "branch"]);
+
+    if (refs.length > 1) {
+      throw new Error(
+        `${app.name} names ${refs.join(" and ")} to build from, and they are different commits`,
+      );
+    }
+
     if (app.include?.length === 0) {
       throw new Error(`${app.name} includes nothing, so there would be no build context`);
     }