kitsune-kit 0.4.1 → 0.6.0

metadata

@@ -1,43 +1,28 @@
 --- !ruby/object:Gem::Specification
 name: kitsune-kit
 version: !ruby/object:Gem::Version
-  version: 0.4.1
+  version: 0.6.0
 platform: ruby
 authors:
 - Omar Herrera
-autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-06-02 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
-  name: net-ssh
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '7.2'
-  type: :runtime
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '7.2'
-- !ruby/object:Gem::Dependency
-  name: ed25519
+  name: base64
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.3'
+        version: '0.3'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.3'
+        version: '0.3'
 - !ruby/object:Gem::Dependency
   name: bcrypt_pbkdf
   requirement: !ruby/object:Gem::Requirement
@@ -53,19 +38,19 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '1.1'
 - !ruby/object:Gem::Dependency
-  name: dotenv
+  name: bigdecimal
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.0'
+        version: '4.1'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.0'
+        version: '4.1'
 - !ruby/object:Gem::Dependency
   name: droplet_kit
   requirement: !ruby/object:Gem::Requirement
@@ -81,7 +66,7 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '3.17'
 - !ruby/object:Gem::Dependency
-  name: thor
+  name: ed25519
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
@@ -95,64 +80,63 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '1.3'
 - !ruby/object:Gem::Dependency
-  name: pry
+  name: net-ssh
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.14'
-  type: :development
+        version: '7.2'
+  type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.14'
+        version: '7.2'
 - !ruby/object:Gem::Dependency
-  name: pry-stack_explorer
+  name: ostruct
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.6.0
-  type: :development
+        version: '0.6'
+  type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.6.0
+        version: '0.6'
 - !ruby/object:Gem::Dependency
-  name: rspec
+  name: public_suffix
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.12'
-  type: :development
+        version: '6.0'
+  type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.12'
+        version: '6.0'
 - !ruby/object:Gem::Dependency
-  name: aruba
+  name: thor
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.2'
-  type: :development
+        version: '1.3'
+  type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.2'
-description: Kitsune Kit is a CLI toolkit that automates the provisioning, configuration,
-  and Docker setup of remote servers, especially tailored for Ruby developers using
-  Kamal. Includes rollback features and multi-environment support.
+        version: '1.3'
+description: Kitsune Kit is an inspectable infrastructure CLI for provisioning DigitalOcean
+  servers, configuring Ubuntu and Docker, and managing private application services.
 email:
 - contact@omarherrera.me
 executables:
@@ -160,44 +144,104 @@ executables:
 extensions: []
 extra_rdoc_files: []
 files:
-- ".rspec"
 - CHANGELOG.md
 - CODE_OF_CONDUCT.md
+- CONTRIBUTING.md
 - LICENSE.txt
 - README.md
-- Rakefile
+- SECURITY.md
 - bin/kit
-- kitsune-kit-logo.jpg
-- lib/kitsune/blueprints/.env.template
-- lib/kitsune/blueprints/docker/postgres.yml
-- lib/kitsune/blueprints/docker/redis.yml
-- lib/kitsune/blueprints/kit.env.template
+- docs/architecture.md
+- docs/architecture/decisions/0001-product-boundary.md
+- docs/architecture/decisions/0002-core-and-interfaces.md
+- docs/architecture/decisions/0003-configuration-state-and-secrets.md
+- docs/architecture/decisions/0004-supported-platforms.md
+- docs/architecture/decisions/0005-operation-semantics.md
+- docs/architecture/decisions/0006-tui-backend.md
+- docs/architecture/decisions/0007-compose-customization.md
+- docs/architecture/provider-adapters.md
+- docs/commands.md
+- docs/configuration.md
+- docs/getting-started.md
+- docs/providers/digitalocean.md
+- docs/releasing.md
+- docs/roadmap.md
+- docs/security-audit.md
+- docs/security.md
+- docs/services/compose.md
+- docs/services/postgres.md
+- docs/services/redis.md
+- docs/testing.md
+- docs/troubleshooting.md
+- docs/tui.md
 - lib/kitsune/kit.rb
-- lib/kitsune/kit/ansi_color.rb
+- lib/kitsune/kit/adapters/confirming_host_key_verifier.rb
+- lib/kitsune/kit/adapters/digitalocean_provider.rb
+- lib/kitsune/kit/adapters/fake_clock.rb
+- lib/kitsune/kit/adapters/fake_provider.rb
+- lib/kitsune/kit/adapters/fake_reporter.rb
+- lib/kitsune/kit/adapters/fake_secret_store.rb
+- lib/kitsune/kit/adapters/fake_state_store.rb
+- lib/kitsune/kit/adapters/fake_transport.rb
+- lib/kitsune/kit/adapters/net_ssh_transport.rb
+- lib/kitsune/kit/adapters/provider.rb
+- lib/kitsune/kit/adapters/transport.rb
+- lib/kitsune/kit/adapters/transport_factory.rb
+- lib/kitsune/kit/application.rb
+- lib/kitsune/kit/cancellation.rb
 - lib/kitsune/kit/cli.rb
-- lib/kitsune/kit/commands/bootstrap.rb
-- lib/kitsune/kit/commands/bootstrap_docker.rb
-- lib/kitsune/kit/commands/dns.rb
-- lib/kitsune/kit/commands/init.rb
-- lib/kitsune/kit/commands/install_docker_engine.rb
-- lib/kitsune/kit/commands/postinstall_docker.rb
-- lib/kitsune/kit/commands/provision.rb
-- lib/kitsune/kit/commands/setup_do_metrics.rb
-- lib/kitsune/kit/commands/setup_docker_prereqs.rb
-- lib/kitsune/kit/commands/setup_firewall.rb
-- lib/kitsune/kit/commands/setup_postgres_docker.rb
-- lib/kitsune/kit/commands/setup_redis_docker.rb
-- lib/kitsune/kit/commands/setup_swap.rb
-- lib/kitsune/kit/commands/setup_unattended.rb
-- lib/kitsune/kit/commands/setup_user.rb
-- lib/kitsune/kit/commands/ssh.rb
-- lib/kitsune/kit/commands/switch_env.rb
-- lib/kitsune/kit/defaults.rb
-- lib/kitsune/kit/env_loader.rb
-- lib/kitsune/kit/options_builder.rb
-- lib/kitsune/kit/provisioner.rb
+- lib/kitsune/kit/clock.rb
+- lib/kitsune/kit/configuration.rb
+- lib/kitsune/kit/errors.rb
+- lib/kitsune/kit/events.rb
+- lib/kitsune/kit/operations/ensure_dns_records.rb
+- lib/kitsune/kit/operations/ensure_server.rb
+- lib/kitsune/kit/operations/ensure_service.rb
+- lib/kitsune/kit/operations/remote_script.rb
+- lib/kitsune/kit/operations/service_backup.rb
+- lib/kitsune/kit/operations/service_files.rb
+- lib/kitsune/kit/operations/service_firewall.rb
+- lib/kitsune/kit/operations/service_state.rb
+- lib/kitsune/kit/plan.rb
+- lib/kitsune/kit/reporters/human.rb
+- lib/kitsune/kit/reporters/json.rb
+- lib/kitsune/kit/reporters/reporter.rb
+- lib/kitsune/kit/result.rb
+- lib/kitsune/kit/run_journal.rb
+- lib/kitsune/kit/run_logger.rb
+- lib/kitsune/kit/scripts/docker.sh
+- lib/kitsune/kit/scripts/firewall.sh
+- lib/kitsune/kit/scripts/metrics.sh
+- lib/kitsune/kit/scripts/ssh.sh
+- lib/kitsune/kit/scripts/swap.sh
+- lib/kitsune/kit/scripts/unattended.sh
+- lib/kitsune/kit/scripts/user.sh
+- lib/kitsune/kit/secret_filter.rb
+- lib/kitsune/kit/secret_store.rb
+- lib/kitsune/kit/secret_stores/store.rb
+- lib/kitsune/kit/service_compose.rb
+- lib/kitsune/kit/state_store.rb
+- lib/kitsune/kit/state_stores/store.rb
+- lib/kitsune/kit/tui/actions.rb
+- lib/kitsune/kit/tui/application.rb
+- lib/kitsune/kit/tui/controller.rb
+- lib/kitsune/kit/tui/renderer.rb
+- lib/kitsune/kit/tui/state.rb
+- lib/kitsune/kit/tui/store.rb
+- lib/kitsune/kit/tui/terminal.rb
 - lib/kitsune/kit/version.rb
-- sig/kitsune/kit.rbs
+- lib/kitsune/kit/workflows/apply_plan.rb
+- lib/kitsune/kit/workflows/base.rb
+- lib/kitsune/kit/workflows/build_plan.rb
+- lib/kitsune/kit/workflows/destroy_server.rb
+- lib/kitsune/kit/workflows/doctor.rb
+- lib/kitsune/kit/workflows/eject_compose.rb
+- lib/kitsune/kit/workflows/environment_selection.rb
+- lib/kitsune/kit/workflows/import_server.rb
+- lib/kitsune/kit/workflows/initialize_project.rb
+- lib/kitsune/kit/workflows/inspect_environment.rb
+- lib/kitsune/kit/workflows/rollback.rb
+- lib/kitsune/kit/workflows/support_bundle.rb
 homepage: https://github.com/omarhrra/kitsune-kit
 licenses:
 - MIT
@@ -206,7 +250,8 @@ metadata:
   homepage_uri: https://github.com/omarhrra/kitsune-kit
   source_code_uri: https://github.com/omarhrra/kitsune-kit
   changelog_uri: https://github.com/omarhrra/kitsune-kit/blob/main/CHANGELOG.md
-post_install_message:
+  bug_tracker_uri: https://github.com/omarhrra/kitsune-kit/issues
+  rubygems_mfa_required: 'true'
 rdoc_options: []
 require_paths:
 - lib
@@ -214,16 +259,17 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 3.0.0
+      version: 3.2.0
+  - - "<"
+    - !ruby/object:Gem::Version
+      version: '4.0'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.5.22
-signing_key:
+rubygems_version: 3.6.9
 specification_version: 4
-summary: Provision and setup DigitalOcean VPSs with Docker and PostgreSQL, ideal for
-  Kamal deployments.
+summary: Plan, provision, and configure secure Ubuntu servers for Docker and Kamal.
 test_files: []

data/.rspec

@@ -1,3 +0,0 @@
---format documentation
---color
---require spec_helper

data/Rakefile

@@ -1,8 +0,0 @@
-# frozen_string_literal: true
-
-require "bundler/gem_tasks"
-require "rspec/core/rake_task"
-
-RSpec::Core::RakeTask.new(:spec)
-
-task default: :spec

data/lib/kitsune/blueprints/.env.template

@@ -1,31 +0,0 @@
-# DigitalOcean Droplet
-DO_API_TOKEN=
-DROPLET_NAME=
-REGION=
-SIZE=
-IMAGE=
-SSH_KEY_ID=
-TAG_NAME=
-ENABLE_DO_METRICS=true
-# If you want DNS records to be created automatically, set the following variables:
-# DOMAIN_NAMES=example.com,test.example.org # (optional, comma-separated list of domain names to add to the droplet)
-# DNS_TTL=3600 # (optional, time-to-live for DNS records in seconds, default is 3600)
-# Check the DigitalOcean documentation for more information on domain names:
-# https://docs.digitalocean.com/products/networking/dns/getting-started/dns-registrars/
-
-# SSH
-SSH_KEY_PATH=
-# SSH_PORT=22 (optional)
-
-# System
-SWAP_SIZE_GB=2
-DISABLE_SWAP=false
-
-# PostgreSQL Docker
-POSTGRES_DB=myapp_db
-POSTGRES_USER=postgres
-POSTGRES_PASSWORD=secret
-
-# Redis Docker
-REDIS_PORT=6379
-REDIS_PASSWORD=secret

data/lib/kitsune/blueprints/docker/postgres.yml

@@ -1,27 +0,0 @@
-services:
-  postgres:
-    image: postgres:17
-    restart: always
-    environment:
-      POSTGRES_DB: ${POSTGRES_DB}
-      POSTGRES_USER: ${POSTGRES_USER}
-      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
-    ports:
-      - "${POSTGRES_PORT:-5432}:5432"
-    command: postgres -c listen_addresses='*'
-    networks:
-      - private
-    volumes:
-      - pgdata:/var/lib/postgresql/data
-    healthcheck:
-      test: ["CMD-SHELL", "pg_isready -U $${POSTGRES_USER}"]
-      interval: 30s
-      timeout: 10s
-      retries: 5
-
-volumes:
-  pgdata:
-
-networks:
-  private:
-    driver: bridge

data/lib/kitsune/blueprints/docker/redis.yml

@@ -1,23 +0,0 @@
-services:
-  redis:
-    image: redis:7.2
-    restart: always
-    ports:
-      - "${REDIS_PORT:-6379}:6379"
-    command: ["redis-server", "--requirepass", "${REDIS_PASSWORD}"]
-    networks:
-      - private
-    volumes:
-      - redisdata:/data
-    healthcheck:
-      test: ["CMD", "redis-cli", "-a", "${REDIS_PASSWORD}", "ping"]
-      interval: 30s
-      timeout: 10s
-      retries: 5
-
-volumes:
-  redisdata:
-
-networks:
-  private:
-    driver: bridge

data/lib/kitsune/blueprints/kit.env.template

@@ -1 +0,0 @@
-KIT_ENV=development

data/lib/kitsune/kit/ansi_color.rb

@@ -1,78 +0,0 @@
-module AnsiColor
-  COLORS = {
-    black:   30,
-    red:     31,
-    green:   32,
-    yellow:  33,
-    blue:    34,
-    magenta: 35,
-    cyan:    36,
-    white:   37,
-
-    light_black:   90,
-    light_red:     91,
-    light_green:   92,
-    light_yellow:  93,
-    light_blue:    94,
-    light_magenta: 95,
-    light_cyan:    96,
-    light_white:   97
-  }
-
-  BACKGROUNDS = {
-    black:   40,
-    red:     41,
-    green:   42,
-    yellow:  43,
-    blue:    44,
-    magenta: 45,
-    cyan:    46,
-    white:   47,
-
-    light_black:   100,
-    light_red:     101,
-    light_green:   102,
-    light_yellow:  103,
-    light_blue:    104,
-    light_magenta: 105,
-    light_cyan:    106,
-    light_white:   107
-  }
-
-  STYLES = {
-    bold:      1,
-    italic:    3,
-    underline: 4
-  }
-
-  def self.colorize(text, color: nil, background: nil, style: nil)
-    codes = []
-    codes << COLORS[color] if color
-    codes << BACKGROUNDS[background] if background
-    codes << STYLES[style] if style
-
-    raise ArgumentError, "No valid formatting options given" if codes.empty?
-
-    "\e[#{codes.join(';')}m#{text}\e[0m"
-  end
-
-  def self.demo
-    puts "Text Colors:"
-    COLORS.each_key do |color|
-      puts colorize("  #{color.to_s.ljust(15)}", color: color)
-    end
-  
-    puts "\nBackground Colors:"
-    BACKGROUNDS.each_key do |bg|
-      puts colorize("  #{bg.to_s.ljust(15)}", background: bg)
-    end
-  
-    puts "\nStyles:"
-    STYLES.each_key do |style|
-      puts colorize("  #{style.to_s.ljust(15)}", color: :white, style: style)
-    end
-  
-    puts "\nCombined Example:"
-    puts colorize("  bold green on light_black  ", color: :green, background: :light_black, style: :bold)
-  end
-end

data/lib/kitsune/kit/commands/bootstrap.rb

@@ -1,134 +0,0 @@
-require "thor"
-require "stringio"
-require_relative "../defaults"
-require_relative "../options_builder"
-require_relative "../provisioner"
-
-module Kitsune
-  module Kit
-    module Commands
-      class Bootstrap < Thor
-        namespace "bootstrap"
-
-        class_option :rollback, type: :boolean, default: false, desc: "Rollback the setup"
-        class_option :keep_server, type: :boolean, default: false, desc: "Keep server after rollback"
-        class_option :ssh_port, type: :string, desc: "SSH port for server"
-        class_option :ssh_key_path, type: :string, desc: "SSH private key path"
-
-        desc "execute", "Run the full bootstrap process or rollback"
-        def execute
-          filled_options = Kitsune::Kit::OptionsBuilder.build(
-            options,
-            defaults: Kitsune::Kit::Defaults.ssh
-          )
-
-          if filled_options[:rollback]
-            say "🔄 Rolling back server configurations...", :yellow
-            rollback_sequence(filled_options)
-          else
-            say "🏗️ Setting up server from scratch...", :green
-            setup_sequence(filled_options)
-          end
-
-          say "🎉 Done!", :green
-        end
-
-        no_commands do
-          def setup_sequence(filled_options)
-            droplet_ip = fetch_droplet_ip
-
-            say "→ Droplet IP: #{droplet_ip}", :cyan
-
-            run_cli("setup_user create", droplet_ip, filled_options)
-            run_cli("setup_firewall create", droplet_ip, filled_options)
-            run_cli("setup_unattended create", droplet_ip, filled_options)
-            run_cli("setup_swap create", droplet_ip, filled_options)
-            run_cli("setup_do_metrics create", droplet_ip, filled_options)
-            run_cli("dns link", droplet_ip, filled_options.merge(domains: ENV["DOMAIN_NAMES"]))
-          end
-
-          def rollback_sequence(filled_options)
-            provision_options = Kitsune::Kit::OptionsBuilder.build(
-              {},
-              defaults: Kitsune::Kit::Defaults::infra
-            )
-
-            provisioner = Kitsune::Kit::Provisioner.new(provision_options)
-
-            if (droplet = provisioner.find_droplet).nil?
-              say "💡 Nothing to rollback.", :green
-              return
-            end
-
-            droplet_ip = provisioner.send(:public_ip, droplet)
-            say "→ Using Droplet IP: #{droplet_ip}", :cyan
-
-            run_cli("setup_do_metrics rollback", droplet_ip, filled_options)
-
-            if ssh_accessible?(droplet_ip, filled_options)
-              run_cli("setup_unattended rollback", droplet_ip, filled_options)
-              run_cli("setup_firewall rollback", droplet_ip, filled_options)
-            else
-              say "⏭️  Skipping unattended-upgrades and firewall rollback (no deploy user)", :yellow
-            end
-
-            run_cli("setup_swap rollback", droplet_ip, filled_options)
-            run_cli("setup_user rollback", droplet_ip, filled_options)
-
-            unless filled_options[:keep_server]
-              run_cli("dns rollback", droplet_ip, filled_options.merge(domains: ENV["DOMAIN_NAMES"]))
-              say "▶️ Running: kitsune kit provision rollback", :blue
-              Kitsune::Kit::CLI.start(%w[provision rollback])
-            else
-              say "⏭️  Skipping droplet deletion (--keep-server enabled), DNS rollback won't be executed", :yellow
-            end
-          end
-
-          def fetch_droplet_ip
-            out = StringIO.new
-            $stdout = out
-            begin
-              Kitsune::Kit::CLI.start(["provision", "create"])
-            ensure
-              $stdout = STDOUT
-            end
-          
-            ip = out.string[/(\d{1,3}\.){3}\d{1,3}/]
-            abort "❌ Could not detect droplet IP!" if ip.nil? || ip.empty?
-            ip
-          end
-
-          def run_cli(command, droplet_ip, filled_options)
-            say "\n▶️ Running: kitsune kit #{command} --server-ip #{droplet_ip}", :blue
-            subcommand, action = command.split(" ", 2)
-
-            args = [subcommand, action, "--server-ip", droplet_ip]
-
-            if subcommand != "dns"
-              args += ["--ssh-port", filled_options[:ssh_port], "--ssh-key-path", filled_options[:ssh_key_path]]
-            end
-
-            if subcommand == "dns" && ENV["DOMAIN_NAMES"]
-              args += ["--domains", ENV["DOMAIN_NAMES"]]
-            end
-
-            Kitsune::Kit::CLI.start(args)
-          rescue SystemExit => e
-            abort "❌ Command failed: #{command} (exit #{e.status})"
-          end
-
-          def ssh_accessible?(droplet_ip, filled_options)
-            system(
-              "ssh -o BatchMode=yes -o StrictHostKeyChecking=accept-new " \
-              "-p #{filled_options[:ssh_port]} " \
-              "-i #{File.expand_path(filled_options[:ssh_key_path])} " \
-              "deploy@#{droplet_ip} true",
-              out: File::NULL,
-              err: File::NULL
-            )
-          end
-        end
-      end
-    end
-  end
-end