@ashlr/stack 0.1.1 → 0.2.2

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@ashlr/stack",
-  "version": "0.1.1",
-  "description": "Ashlr Stack CLI — the control plane for your entire dev stack. One command to provision, wire, and operate every third-party service in your project. 23 providers, MCP-native.",
+  "version": "0.2.2",
+  "description": "Ashlr Stack CLI — the control plane for your entire dev stack. One command to provision, wire, and operate every third-party service in your project. 39 providers, MCP-native.",
   "license": "MIT",
   "author": {
     "name": "Mason Wyatt",
@@ -33,10 +33,10 @@
   ],
   "type": "module",
   "bin": {
-    "stack": "./src/index.ts"
+    "stack": "./dist/index.js"
   },
   "files": [
-    "src/**/*",
+    "dist/**/*",
     "README.md",
     "LICENSE"
   ],
@@ -45,15 +45,16 @@
     "registry": "https://registry.npmjs.org/"
   },
   "engines": {
-    "bun": ">=1.2.0",
     "node": ">=20"
   },
   "scripts": {
+    "build": "bun build src/index.ts --outdir dist --target node --format esm && node -e \"const fs=require('fs');const f='dist/index.js';let c=fs.readFileSync(f,'utf8');if(c.startsWith('#!'))c=c.slice(c.indexOf('\\n')+1);fs.writeFileSync(f,'#!/usr/bin/env node\\n'+c);fs.chmodSync(f,0o755)\"",
+    "prepack": "bun run build",
     "dev": "bun run src/index.ts",
     "typecheck": "bunx tsc --noEmit"
   },
   "dependencies": {
-    "@ashlr/stack-core": "^0.1.1",
+    "@ashlr/stack-core": "^0.2.2",
     "@clack/prompts": "^0.8.2",
     "citty": "^0.1.6",
     "picocolors": "^1.1.1"

package/src/__tests__/apply.test.ts

@@ -1,80 +0,0 @@
-import { afterEach, describe, expect, it } from "bun:test";
-import { spawnSync } from "node:child_process";
-import { existsSync, mkdtempSync, rmSync } from "node:fs";
-import { tmpdir } from "node:os";
-import { dirname, join } from "node:path";
-import { fileURLToPath } from "node:url";
-
-/**
- * End-to-end test for `stack apply` — specifically the auto-init behaviour.
- * The marketed golden path is `stack recommend --save && stack apply <id>`
- * from a blank directory; that must not explode on a missing .stack.toml.
- *
- * We don't exercise the provider-provisioning side (real HTTP, OAuth, tokens
- * required). `--noWire` + `--noRollback` isolate the init+pipeline behaviour.
- */
-
-const CLI_ENTRY = join(dirname(fileURLToPath(import.meta.url)), "..", "index.ts");
-
-function runCli(args: string[], cwd?: string): { stdout: string; stderr: string; code: number } {
-  const result = spawnSync("bun", [CLI_ENTRY, ...args], {
-    encoding: "utf8",
-    cwd,
-    env: { ...process.env, NO_COLOR: "1", CI: "1" },
-  });
-  return {
-    stdout: result.stdout ?? "",
-    stderr: result.stderr ?? "",
-    code: result.status ?? 0,
-  };
-}
-
-const createdDirs: string[] = [];
-afterEach(() => {
-  while (createdDirs.length > 0) {
-    const dir = createdDirs.pop();
-    if (dir) rmSync(dir, { recursive: true, force: true });
-  }
-});
-
-function mkTmp(): string {
-  const dir = mkdtempSync(join(tmpdir(), "stack-apply-"));
-  createdDirs.push(dir);
-  return dir;
-}
-
-describe("stack apply", () => {
-  it("auto-inits .stack.toml when none exists, then runs against the recipe", () => {
-    const dir = mkTmp();
-
-    // Step 1: seed a recipe via `stack recommend --save`.
-    const rec = runCli(["recommend", "postgres database", "--save", "--json"], dir);
-    expect(rec.code).toBe(0);
-    const payload = JSON.parse(rec.stdout);
-    const recipeId: string = payload.recipe.id;
-    expect(existsSync(join(dir, ".stack.toml"))).toBe(false);
-
-    // Step 2: apply it from the same blank dir. Providers will fail at `stack
-    // add` because no OAuth/tokens are present, but `apply` must first create
-    // .stack.toml via the auto-init path.
-    const applied = runCli(["apply", recipeId, "--noWire", "--noRollback"], dir);
-
-    // Apply may exit non-zero because provider adds fail; that's expected.
-    // The invariant we care about: auto-init ran, so .stack.toml now exists.
-    expect(existsSync(join(dir, ".stack.toml"))).toBe(true);
-
-    // The banner breadcrumb should surface so the user understands the
-    // auto-init happened implicitly.
-    const out = applied.stdout + applied.stderr;
-    expect(out).toContain("auto-running");
-  });
-
-  it("rejects a missing recipe id with a clear error", () => {
-    const dir = mkTmp();
-    const { stdout, stderr, code } = runCli(["apply", "does-not-exist", "--noWire"], dir);
-    // Apply exits after pickRecipe fails; the surfaced error must name the
-    // recipe so the user knows what to fix.
-    expect(code).toBeGreaterThan(0);
-    expect(stdout + stderr).toContain("does-not-exist");
-  });
-});

package/src/__tests__/recommend.test.ts

@@ -1,109 +0,0 @@
-import { afterEach, describe, expect, it } from "bun:test";
-import { spawnSync } from "node:child_process";
-import { mkdtempSync, readdirSync, rmSync } from "node:fs";
-import { tmpdir } from "node:os";
-import { dirname, join } from "node:path";
-import { fileURLToPath } from "node:url";
-
-/**
- * Smoke tests for `stack recommend`. Spawns the CLI the same way the MCP
- * server will (bun subprocess) to cover the full JSON contract end-to-end.
- */
-
-const CLI_ENTRY = join(dirname(fileURLToPath(import.meta.url)), "..", "index.ts");
-
-function runCli(args: string[], cwd?: string): { stdout: string; stderr: string; code: number } {
-  const result = spawnSync("bun", [CLI_ENTRY, ...args], {
-    encoding: "utf8",
-    cwd,
-    env: { ...process.env, NO_COLOR: "1", CI: "1" },
-  });
-  return {
-    stdout: result.stdout ?? "",
-    stderr: result.stderr ?? "",
-    code: result.status ?? 0,
-  };
-}
-
-const createdDirs: string[] = [];
-afterEach(() => {
-  while (createdDirs.length > 0) {
-    const dir = createdDirs.pop();
-    if (dir) rmSync(dir, { recursive: true, force: true });
-  }
-});
-
-function mkTmp(): string {
-  const dir = mkdtempSync(join(tmpdir(), "stack-recommend-"));
-  createdDirs.push(dir);
-  return dir;
-}
-
-describe("stack recommend --json", () => {
-  it("returns structured JSON with hits for a SaaS query", () => {
-    const { stdout, code } = runCli(["recommend", "B2B SaaS with auth and payments", "--json"]);
-    expect(code).toBe(0);
-    const payload = JSON.parse(stdout);
-    expect(payload.query).toBe("B2B SaaS with auth and payments");
-    expect(Array.isArray(payload.hits)).toBe(true);
-    expect(payload.hits.length).toBeGreaterThan(0);
-    const hitNames = payload.hits.map((h: { name: string }) => h.name);
-    expect(hitNames).toContain("stripe");
-    // clerk or supabase should cover the auth side
-    expect(hitNames.some((n: string) => ["clerk", "supabase"].includes(n))).toBe(true);
-    expect(typeof payload.guidance).toBe("string");
-    expect(payload.byCategory).toBeDefined();
-  });
-
-  it("narrows to a category filter", () => {
-    const { stdout, code } = runCli([
-      "recommend",
-      "edge compute",
-      "--category",
-      "Deploy",
-      "--json",
-    ]);
-    expect(code).toBe(0);
-    const payload = JSON.parse(stdout);
-    for (const hit of payload.hits) {
-      expect(hit.category).toBe("Deploy");
-    }
-  });
-
-  it("with --save persists a recipe under .stack/recipes/", () => {
-    const dir = mkTmp();
-    const { stdout, code } = runCli(["recommend", "postgres database", "--save", "--json"], dir);
-    expect(code).toBe(0);
-    const payload = JSON.parse(stdout);
-    expect(payload.recipe).toBeDefined();
-    expect(payload.recipe.id).toBeDefined();
-    expect(payload.recipe.path).toContain(".stack/recipes");
-
-    const recipesDir = join(dir, ".stack", "recipes");
-    const files = readdirSync(recipesDir);
-    expect(files.length).toBe(1);
-    expect(files[0]).toMatch(/\.toml$/);
-    expect(files[0]).toBe(`${payload.recipe.id}.toml`);
-  });
-
-  it("without --save does not create .stack/recipes", () => {
-    const dir = mkTmp();
-    const { code } = runCli(["recommend", "postgres database", "--json"], dir);
-    expect(code).toBe(0);
-    try {
-      const files = readdirSync(join(dir, ".stack", "recipes"));
-      expect(files.length).toBe(0);
-    } catch (err) {
-      // ENOENT is the expected happy path — no dir created.
-      expect((err as NodeJS.ErrnoException).code).toBe("ENOENT");
-    }
-  });
-
-  it("emits an empty hits array with fallback guidance for a gibberish query", () => {
-    const { stdout, code } = runCli(["recommend", "xyzabcxyzabc nonsenseword", "--json"]);
-    expect(code).toBe(0);
-    const payload = JSON.parse(stdout);
-    expect(payload.hits).toEqual([]);
-    expect(payload.guidance).toContain("No strong matches");
-  });
-});

package/src/commands/add.ts

@@ -1,163 +0,0 @@
-import { defineCommand } from "citty";
-import {
-  addService,
-  assertPhantomInstalled,
-  getProvider,
-  hasConfig,
-  listProviderNames,
-} from "@ashlr/stack-core";
-import { colors, intro, logEvent, outro, outroError, prompts } from "../ui.ts";
-
-export const addCommand = defineCommand({
-  meta: {
-    name: "add",
-    description: "Provision a service and wire its secrets + MCP entry.",
-  },
-  args: {
-    service: {
-      type: "positional",
-      required: false,
-      description: "Service name (e.g. supabase, neon, vercel). Omit for interactive picker.",
-    },
-    use: {
-      type: "string",
-      description: "Attach to an existing resource by id instead of creating a new one.",
-    },
-    region: {
-      type: "string",
-      description: "Region hint for providers that need one (e.g. us-east-1).",
-    },
-    dryRun: {
-      type: "boolean",
-      default: false,
-      description:
-        "Preview what would happen (no network calls, no vault writes, no MCP edits).",
-    },
-  },
-  async run({ args }) {
-    if (!hasConfig()) {
-      intro("stack add");
-      outroError("No .stack.toml found. Run `stack init` first.");
-      return;
-    }
-
-    const available = listProviderNames();
-
-    // Interactive picker when no service argument is provided.
-    let service = args.service ? String(args.service) : undefined;
-    if (!service) {
-      if (!process.stdout.isTTY) {
-        intro("stack add");
-        outroError("No service specified. Usage: stack add <service>");
-        return;
-      }
-      const grouped = await groupProvidersForPicker(available);
-      const picked = await prompts.select({
-        message: "Which service to add?",
-        options: grouped,
-      });
-      if (prompts.isCancel(picked)) {
-        intro("stack add");
-        outroError("Cancelled.");
-        return;
-      }
-      service = String(picked);
-    }
-
-    intro(`stack add ${service}${args.dryRun ? colors.dim(" (dry-run)") : ""}`);
-
-    if (!args.dryRun) {
-      try {
-        await assertPhantomInstalled();
-      } catch (err) {
-        outroError((err as Error).message);
-        return;
-      }
-    }
-
-    if (!available.includes(service)) {
-      // Group the catalog by category so the suggestion doesn't wrap into an
-      // unreadable one-line comma list on narrow terminals.
-      const byCat: Record<string, string[]> = {};
-      for (const name of available) {
-        try {
-          const p = await getProvider(name);
-          (byCat[p.category] ??= []).push(p.name);
-        } catch {
-          /* skip */
-        }
-      }
-      const lines = Object.entries(byCat)
-        .sort(([a], [b]) => a.localeCompare(b))
-        .map(([cat, names]) => `  ${colors.bold(cat.padEnd(10))} ${names.sort().join("  ")}`);
-      console.log();
-      console.log(`  Unknown provider ${colors.red(`"${service}"`)}.`);
-      console.log();
-      console.log(colors.dim("  Available providers:"));
-      for (const line of lines) console.log(line);
-      console.log();
-      outroError("Pick one from the catalog above.");
-      return;
-    }
-
-    // Dry-run: describe what the flow would do without executing any step.
-    if (args.dryRun) {
-      const provider = await getProvider(service);
-      console.log();
-      console.log(
-        `  ${colors.bold(provider.displayName)} ${colors.dim(`(${provider.category} · ${provider.authKind})`)}`,
-      );
-      console.log(`    ${colors.dim("1.")} login       ${colors.dim("(prompt for PAT or run OAuth)")}`);
-      console.log(
-        `    ${colors.dim("2.")} provision   ${args.use ? `attach to existing resource ${colors.dim(String(args.use))}` : colors.dim("create a new upstream resource")}`,
-      );
-      console.log(`    ${colors.dim("3.")} materialize ${colors.dim("fetch credentials for the resource")}`);
-      console.log(`    ${colors.dim("4.")} persist     ${colors.dim("write secrets to Phantom + MCP + .stack.toml")}`);
-      console.log();
-      outro(colors.dim("dry-run complete — nothing written."));
-      return;
-    }
-
-    const spinner = prompts.spinner();
-    try {
-      spinner.start(`Wiring ${service}…`);
-      const result = await addService({
-        providerName: service,
-        existingResourceId: args.use ? String(args.use) : undefined,
-        hints: args.region ? { region: String(args.region) } : undefined,
-        interactive: process.stdout.isTTY === true,
-        log: (event) => {
-          spinner.stop();
-          logEvent(event);
-          spinner.start(`Wiring ${service}…`);
-        },
-      });
-      spinner.stop(
-        `${colors.green("●")} ${result.displayName} (${result.resourceId}) · ${result.secretCount} secrets${
-          result.mcpWired ? " · mcp wired" : ""
-        }`,
-      );
-      outro(`${colors.green("✓")} ${service} is live.`);
-    } catch (err) {
-      spinner.stop(colors.red("Failed."));
-      outroError((err as Error).message);
-    }
-  },
-});
-
-async function groupProvidersForPicker(names: string[]) {
-  const out: Array<{ label: string; value: string; hint?: string }> = [];
-  for (const name of names) {
-    try {
-      const p = await getProvider(name);
-      out.push({
-        value: p.name,
-        label: `${p.displayName} ${colors.dim(`· ${p.category}`)}`,
-        hint: p.authKind,
-      });
-    } catch {
-      /* skip */
-    }
-  }
-  return out.sort((a, b) => a.label.localeCompare(b.label));
-}

package/src/commands/apply.ts

@@ -1,244 +0,0 @@
-import {
-  type Recipe,
-  hasConfig,
-  listRecipes,
-  readConfig,
-  readRecipe,
-  removeSecret,
-  wirePhantomForRecipe,
-  writeConfig,
-} from "@ashlr/stack-core";
-import { removeMcpEntry } from "@ashlr/stack-core/mcp-writer";
-import { defineCommand } from "citty";
-import { colors, intro, outro, outroError, prompts } from "../ui.ts";
-import { addCommand } from "./add.ts";
-import { doctorCommand } from "./doctor.ts";
-import { initCommand } from "./init.ts";
-
-/**
- * `stack apply [recipe-id]` — replay a frozen Recipe through the add pipeline
- * and pre-wire Phantom envelopes + webhook stubs so the provider-specific
- * flows land real credentials into already-rotating slots.
- *
- * This is the moat: recommendation → TOML → `apply` → provisioned stack,
- * with secret rotation wired from the first call.
- */
-export const applyCommand = defineCommand({
-  meta: {
-    name: "apply",
-    description: "Apply a saved recipe: provision each provider + pre-wire Phantom rotation.",
-  },
-  args: {
-    recipeId: {
-      type: "positional",
-      required: false,
-      description: "Recipe id (filename stem in .stack/recipes). Omit for picker.",
-    },
-    noWire: {
-      type: "boolean",
-      default: false,
-      description: "Skip Phantom envelope + webhook pre-wiring (opts out of the moat).",
-    },
-    noRollback: {
-      type: "boolean",
-      default: false,
-      description:
-        "On partial failure, leave successfully-added services in .stack.toml instead of rolling them back.",
-    },
-  },
-  async run({ args }) {
-    intro(`stack apply${args.noWire ? colors.dim(" (no-wire)") : ""}`);
-
-    // The marketed golden path is `stack recommend --save && stack apply <id>`,
-    // which must work from a blank directory. Auto-init if no .stack.toml so
-    // the user isn't forced through a template picker they never asked for.
-    if (!hasConfig()) {
-      console.log(colors.dim("  ○ no .stack.toml — auto-running `stack init --noInteractive`"));
-      try {
-        await initCommand.run?.({
-          args: { noInteractive: true, force: false, _: [] },
-          cmd: initCommand,
-          rawArgs: ["--noInteractive"],
-          data: undefined,
-        } as unknown as Parameters<NonNullable<typeof initCommand.run>>[0]);
-      } catch (err) {
-        outroError(`Auto-init failed: ${(err as Error).message}`);
-        return;
-      }
-      if (!hasConfig()) {
-        outroError("Auto-init did not produce a .stack.toml. Run `stack init` manually.");
-        return;
-      }
-    }
-
-    const recipe = await pickRecipe(args.recipeId ? String(args.recipeId) : undefined);
-    if (!recipe) return; // pickRecipe already surfaced the error.
-
-    console.log();
-    console.log(`  ${colors.bold("recipe")}   ${recipe.id}`);
-    console.log(`  ${colors.dim("query")}    ${recipe.query}`);
-    console.log(`  ${colors.dim("providers")} ${recipe.providers.map((p) => p.name).join(", ")}`);
-    console.log();
-
-    // Re-run addCommand for each provider. We intentionally do NOT parallelize:
-    // some providers (e.g. Vercel) need cwd state written by earlier steps
-    // and interactive prompts don't interleave cleanly.
-    const succeeded: string[] = [];
-    const failures: Array<{ name: string; message: string }> = [];
-    for (const { name } of recipe.providers) {
-      try {
-        console.log(colors.dim(`  › stack add ${name}`));
-        // citty's CommandContext type requires every declared arg key; we
-        // only set the ones addCommand actually reads, so cast via unknown.
-        await addCommand.run?.({
-          args: { service: name, dryRun: false, _: [] },
-          cmd: addCommand,
-          rawArgs: [name],
-          data: undefined,
-        } as unknown as Parameters<NonNullable<typeof addCommand.run>>[0]);
-        succeeded.push(name);
-      } catch (err) {
-        failures.push({ name, message: (err as Error).message });
-      }
-    }
-
-    // On partial failure, offer to roll back the successful adds so re-running
-    // `stack apply` isn't blocked by SERVICE_ALREADY_ADDED errors. Default to
-    // rolling back in non-TTY mode (CI-friendly) unless --noRollback is set.
-    if (failures.length > 0 && succeeded.length > 0 && !args.noRollback) {
-      const shouldRollback = process.stdout.isTTY
-        ? await prompts.confirm({
-            message: `Recipe partially applied (${succeeded.length} succeeded, ${failures.length} failed). Roll back the successful adds so you can re-run cleanly?`,
-            initialValue: true,
-          })
-        : true;
-      if (shouldRollback && !prompts.isCancel(shouldRollback)) {
-        await rollbackServices(succeeded);
-      } else {
-        console.log(
-          colors.dim(
-            "  Keeping partial state. Run `stack doctor --fix` or `stack remove <name>` to clean up.",
-          ),
-        );
-      }
-    }
-
-    // Phantom-wire only runs when at least one provider made it through — no
-    // point creating rotation envelopes for services that aren't in the config.
-    if (succeeded.length > 0) {
-      try {
-        const wire = await wirePhantomForRecipe(recipe, { noWire: Boolean(args.noWire) });
-        if (!args.noWire) {
-          console.log();
-          console.log(
-            `  ${colors.dim("envelopes")} ${wire.envelopes.length} · ${colors.dim("webhooks")} ${wire.webhooks.length}${
-              wire.skipped.length > 0 ? ` · ${colors.yellow(`skipped ${wire.skipped.length}`)}` : ""
-            }`,
-          );
-          if (wire.skipped.length > 0) {
-            console.log(colors.dim(`  (phantom-wire skipped: ${wire.skipped.join(", ")})`));
-          }
-        }
-      } catch (err) {
-        console.log(colors.yellow(`  ⚠ phantom-wire failed: ${(err as Error).message}`));
-      }
-    }
-
-    // Verify with doctor — informational; a failing doctor doesn't fail apply.
-    try {
-      console.log();
-      console.log(colors.dim("  › stack doctor"));
-      await doctorCommand.run?.({
-        args: { fix: false, all: false, json: false, _: [] },
-        cmd: doctorCommand,
-        rawArgs: [],
-        data: undefined,
-      } as unknown as Parameters<NonNullable<typeof doctorCommand.run>>[0]);
-    } catch {
-      /* doctor surfaces its own errors */
-    }
-
-    if (failures.length > 0) {
-      outroError(
-        `Some providers failed: ${failures.map((f) => `${f.name}: ${f.message}`).join("; ")}`,
-      );
-      return;
-    }
-    outro(`${colors.green("✓")} ${recipe.id} applied.`);
-  },
-});
-
-/**
- * Undo a partial apply. Reads the config, deletes each named service's secrets
- * + MCP entry, and rewrites the config without them. Best-effort: a failure
- * removing one service should not block the others.
- */
-async function rollbackServices(names: string[]): Promise<void> {
-  if (names.length === 0) return;
-  console.log();
-  console.log(colors.dim(`  rolling back ${names.length} partial add(s)…`));
-  try {
-    const config = await readConfig();
-    for (const name of names) {
-      const entry = config.services[name];
-      if (!entry) continue;
-      for (const secret of entry.secrets) {
-        try {
-          await removeSecret(secret);
-        } catch {
-          /* secret may already be gone; keep going */
-        }
-      }
-      if (entry.mcp) {
-        try {
-          await removeMcpEntry(entry.mcp);
-        } catch {
-          /* keep going */
-        }
-      }
-      delete config.services[name];
-    }
-    await writeConfig(config);
-    console.log(colors.dim("  rollback complete — re-run `stack apply` to retry."));
-  } catch (err) {
-    console.log(colors.yellow(`  ⚠ rollback failed: ${(err as Error).message}`));
-  }
-}
-
-async function pickRecipe(id?: string): Promise<Recipe | null> {
-  if (id) {
-    try {
-      return await readRecipe(id);
-    } catch (err) {
-      outroError((err as Error).message);
-      return null;
-    }
-  }
-
-  const all = await listRecipes();
-  if (all.length === 0) {
-    outroError(
-      "No recipes in .stack/recipes. Run `stack recommend` first, or ask Claude to synthesize one.",
-    );
-    return null;
-  }
-
-  if (!process.stdout.isTTY) {
-    outroError(`No recipe id given. Available: ${all.map((r) => r.id).join(", ")}.`);
-    return null;
-  }
-
-  const picked = await prompts.select({
-    message: "Which recipe to apply?",
-    options: all.map((r) => ({
-      value: r.id,
-      label: `${colors.bold(r.id)} ${colors.dim(`· ${r.providers.length} providers`)}`,
-      hint: r.query.slice(0, 60),
-    })),
-  });
-  if (prompts.isCancel(picked)) {
-    outroError("Cancelled.");
-    return null;
-  }
-  return all.find((r) => r.id === String(picked)) ?? null;
-}