@caelo-cms/provisioning 0.1.1 → 0.2.3

package/dist/wizards/gcp-pulumi.js

@@ -0,0 +1,100 @@
+// SPDX-License-Identifier: MPL-2.0
+/**
+ * Pulumi Automation SDK wrapper for the GCP wizard. Replaces the
+ * shell-out `pulumi up` flow with a programmatic equivalent that
+ * streams progress events into the wizard's UI.
+ *
+ * Per CLAUDE.md §11.C: end-users never see `pulumi` directly. The
+ * wizard handles passphrase + state location + config + up; failures
+ * surface inline with provider errors.
+ */
+import { join, resolve as resolvePath } from "node:path";
+import * as pulumi from "@pulumi/pulumi/automation";
+/**
+ * Resolve the GCP stack workdir relative to the installed package.
+ * Works whether the CLI runs from source (apps/admin/scripts/...)
+ * or from the published npm tarball (node_modules/@caelo-cms/...).
+ */
+function gcpStackWorkDir() {
+    // The Pulumi.yaml + stacks/gcp/index.ts ship in the npm tarball
+    // under `stacks/gcp/`. From this file's location at runtime
+    // (dist/wizards/gcp-pulumi.js), the stack dir is two levels up
+    // + into stacks/gcp/.
+    return resolvePath(import.meta.dir, "../../stacks/gcp");
+}
+/**
+ * Run `pulumi up` against the GCP stack via the Automation SDK.
+ * Streams resource-create events to the supplied onEvent callback so
+ * the wizard can render a live progress bar.
+ */
+export async function pulumiUpGcp(inputs, onEvent) {
+    // Pulumi's local backend reads the passphrase from
+    // PULUMI_CONFIG_PASSPHRASE; we set it for this process scope only.
+    // Same for the GOOGLE_APPLICATION_CREDENTIALS pointing at the SA key.
+    const env = {
+        ...process.env,
+        PULUMI_CONFIG_PASSPHRASE: inputs.pulumiPassphrase,
+        GOOGLE_APPLICATION_CREDENTIALS: inputs.saKeyPath,
+        // Pulumi local-backend state lives under the install's state dir.
+        PULUMI_BACKEND_URL: `file://${join(inputs.installRoot, "state")}`,
+    };
+    const stackName = "production";
+    const workDir = gcpStackWorkDir();
+    const stack = await pulumi.LocalWorkspace.createOrSelectStack({
+        stackName,
+        workDir,
+    }, {
+        envVars: env,
+    });
+    // Set every config value the stack reads. Secrets via setConfig with
+    // {value, secret: true}; Pulumi encrypts them in state.
+    await stack.setAllConfig({
+        "caelo-gcp:project": { value: inputs.projectId },
+        "caelo-gcp:domain": { value: inputs.domain },
+        "caelo-gcp:ownerEmail": { value: inputs.ownerEmail },
+        "caelo-gcp:region": { value: inputs.region },
+        "caelo-gcp:cloudSqlTier": { value: inputs.cloudSqlTier },
+        "caelo-gcp:cloudSqlHa": { value: String(inputs.cloudSqlHa) },
+        "caelo-gcp:adminMinInstances": { value: String(inputs.adminMinInstances) },
+        "caelo-gcp:gatewayMinInstances": { value: String(inputs.gatewayMinInstances) },
+        "caelo-gcp:wafAdaptiveProtection": { value: String(inputs.wafAdaptiveProtection) },
+        "caelo-gcp:iapAllowlist": { value: inputs.iapAllowlist.join(",") },
+        "caelo-gcp:anthropicApiKey": { value: inputs.anthropicApiKey, secret: true },
+        ...Object.fromEntries(Object.entries(inputs.imageDigests).map(([service, digest]) => [
+            `caelo-gcp:image-digest-${service}`,
+            { value: digest },
+        ])),
+    });
+    // Refresh state first to detect drift from any out-of-band changes.
+    await stack.refresh({ onOutput: (msg) => onEvent("log", msg) });
+    // Run `up`. The onEvent callback receives the same JSON-RPC events
+    // Pulumi prints to stdout in --json mode.
+    const result = await stack.up({
+        onOutput: (msg) => onEvent("log", msg),
+        onEvent: (event) => {
+            // We only care about resource start/finish events for the
+            // progress UI — diagnostics surface via onOutput already.
+            if (event.resOpFailedEvent) {
+                onEvent("error", `${event.resOpFailedEvent.metadata.urn}: ${event.resOpFailedEvent.status}`);
+            }
+            else if (event.resOutputsEvent) {
+                onEvent("resource", event.resOutputsEvent.metadata.urn);
+            }
+        },
+    });
+    const summary = result.summary;
+    const changes = summary.resourceChanges ?? {};
+    const outputs = {};
+    for (const [k, v] of Object.entries(result.outputs)) {
+        outputs[k] = v.value;
+    }
+    return {
+        outputs,
+        resourceCount: {
+            created: changes.create ?? 0,
+            updated: changes.update ?? 0,
+            deleted: changes.delete ?? 0,
+        },
+    };
+}
+//# sourceMappingURL=gcp-pulumi.js.map

package/dist/wizards/gcp-pulumi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gcp-pulumi.js","sourceRoot":"","sources":["../../src/wizards/gcp-pulumi.ts"],"names":[],"mappings":"AAAA,mCAAmC;AAEnC;;;;;;;;GAQG;AAEH,OAAO,EAAE,IAAI,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,KAAK,MAAM,MAAM,2BAA2B,CAAC;AA8BpD;;;;GAIG;AACH,SAAS,eAAe;IACtB,gEAAgE;IAChE,4DAA4D;IAC5D,+DAA+D;IAC/D,sBAAsB;IACtB,OAAO,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;AAC1D,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAsB,EACtB,OAAsE;IAEtE,mDAAmD;IACnD,mEAAmE;IACnE,sEAAsE;IACtE,MAAM,GAAG,GAA2B;QAClC,GAAI,OAAO,CAAC,GAA8B;QAC1C,wBAAwB,EAAE,MAAM,CAAC,gBAAgB;QACjD,8BAA8B,EAAE,MAAM,CAAC,SAAS;QAChD,kEAAkE;QAClE,kBAAkB,EAAE,UAAU,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE;KAClE,CAAC;IAEF,MAAM,SAAS,GAAG,YAAY,CAAC;IAC/B,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;IAElC,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,mBAAmB,CAC3D;QACE,SAAS;QACT,OAAO;KACR,EACD;QACE,OAAO,EAAE,GAAG;KACb,CACF,CAAC;IAEF,qEAAqE;IACrE,wDAAwD;IACxD,MAAM,KAAK,CAAC,YAAY,CAAC;QACvB,mBAAmB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,SAAS,EAAE;QAChD,kBAAkB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;QAC5C,sBAAsB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,EAAE;QACpD,kBAAkB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;QAC5C,wBAAwB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,YAAY,EAAE;QACxD,sBAAsB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE;QAC5D,6BAA6B,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE;QAC1E,+BAA+B,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE;QAC9E,iCAAiC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,EAAE;QAClF,wBAAwB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QAClE,2BAA2B,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,eAAe,EAAE,MAAM,EAAE,IAAI,EAAE;QAC5E,GAAG,MAAM,CAAC,WAAW,CACnB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;YAC7D,0BAA0B,OAAO,EAAE;YACnC,EAAE,KAAK,EAAE,MAAM,EAAE;SAClB,CAAC,CACH;KACF,CAAC,CAAC;IAEH,oEAAoE;IACpE,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhE,mEAAmE;IACnE,0CAA0C;IAC1C,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;QACtC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACjB,0DAA0D;YAC1D,0DAA0D;YAC1D,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC;gBAC3B,OAAO,CACL,OAAO,EACP,GAAG,KAAK,CAAC,gBAAgB,CAAC,QAAQ,CAAC,GAAG,KAAK,KAAK,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAC3E,CAAC;YACJ,CAAC;iBAAM,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;gBACjC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC/B,MAAM,OAAO,GAAG,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC;IAC9C,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;IACvB,CAAC;IAED,OAAO;QACL,OAAO;QACP,aAAa,EAAE;YACb,OAAO,EAAE,OAAO,CAAC,MAAM,IAAI,CAAC;YAC5B,OAAO,EAAE,OAAO,CAAC,MAAM,IAAI,CAAC;YAC5B,OAAO,EAAE,OAAO,CAAC,MAAM,IAAI,CAAC;SAC7B;KACF,CAAC;AACJ,CAAC"}

package/dist/wizards/gcp.d.ts

@@ -0,0 +1,9 @@
+export interface GcpWizardOpts {
+    installId: string;
+    domain: string;
+    ownerEmail: string;
+    projectId: string | null;
+    nonInteractive: boolean;
+}
+export declare function runGcpWizard(opts: GcpWizardOpts): Promise<void>;
+//# sourceMappingURL=gcp.d.ts.map

package/dist/wizards/gcp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gcp.d.ts","sourceRoot":"","sources":["../../src/wizards/gcp.ts"],"names":[],"mappings":"AAqEA,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,cAAc,EAAE,OAAO,CAAC;CACzB;AAED,wBAAsB,YAAY,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CA2JrE"}