@cardelli/ambit 0.1.5 → 0.2.0

package/esm/src/cli/commands/deploy.js

@@ -1,430 +0,0 @@
-// =============================================================================
-// Deploy Command - Safely Deploy a Workload App on a Custom Private Network
-// =============================================================================
-import * as dntShim from "../../../_dnt.shims.js";
-import { parseArgs } from "../../../deps/jsr.io/@std/cli/1.0.28/mod.js";
-import { join } from "../../../deps/jsr.io/@std/path/1.1.4/mod.js";
-import { bold, confirm, fileExists } from "../../../lib/cli.js";
-import { createOutput } from "../../../lib/output.js";
-import { registerCommand } from "../mod.js";
-import { createFlyProvider, FlyDeployError, getWorkloadAppName, } from "../../providers/fly.js";
-import { findRouterApp } from "../../discovery.js";
-import { resolveOrg } from "../../resolve.js";
-import { assertNotRouter, auditDeploy, scanFlyToml } from "../../guard.js";
-import { fetchTemplate, parseTemplateRef } from "../../template.js";
-// =============================================================================
-// Image Mode
-// =============================================================================
-/**
- * Generate a minimal fly.toml with http_service config for auto start/stop.
- * Written to a temp directory and cleaned up after deploy.
- */
-const generateServiceToml = (port) => `[http_service]\n` +
-    `  internal_port = ${port}\n` +
-    `  auto_stop_machines = "stop"\n` +
-    `  auto_start_machines = true\n` +
-    `  min_machines_running = 0\n`;
-/**
- * Parse --main-port value. Returns the port number, or null if "none".
- * Dies on invalid input.
- */
-const parseMainPort = (raw, out) => {
-    if (raw === "none")
-        return null;
-    const port = Number(raw);
-    if (!Number.isInteger(port) || port < 1 || port > 65535) {
-        out.die(`Invalid --main-port: "${raw}". Use a port number (1-65535) or "none".`);
-        return "error";
-    }
-    return port;
-};
-/** Resolve deploy config for image mode (--image). */
-const resolveImageMode = (image, mainPortRaw, out) => {
-    const mainPort = parseMainPort(mainPortRaw, out);
-    if (mainPort === "error")
-        return null;
-    const preflight = { scanned: false, warnings: [] };
-    if (mainPort !== null) {
-        const tempDir = dntShim.Deno.makeTempDirSync();
-        const configPath = join(tempDir, "fly.toml");
-        dntShim.Deno.writeTextFileSync(configPath, generateServiceToml(mainPort));
-        out.ok(`HTTP Service on Port ${mainPort} (auto start/stop)`);
-        return { image, configPath, preflight, tempDir };
-    }
-    out.info("Image Mode — No Service Config");
-    return { image, preflight };
-};
-// =============================================================================
-// Config Mode
-// =============================================================================
-/** Resolve deploy config for config mode (default — uses fly.toml). */
-const resolveConfigMode = async (explicitConfig, out) => {
-    // Determine config path: explicit --config, or auto-detect ./fly.toml
-    let configPath = explicitConfig;
-    if (!configPath && await fileExists("./fly.toml")) {
-        configPath = "./fly.toml";
-    }
-    if (!configPath) {
-        out.info("No fly.toml Found — Deploying Without Config Scan");
-        return { preflight: { scanned: false, warnings: [] } };
-    }
-    if (!(await fileExists(configPath))) {
-        out.die(`Config File Not Found: ${configPath}`);
-        return null;
-    }
-    // Pre-flight scan
-    const tomlContent = await dntShim.Deno.readTextFile(configPath);
-    const scan = scanFlyToml(tomlContent);
-    if (scan.errors.length > 0) {
-        for (const err of scan.errors) {
-            out.err(err);
-        }
-        out.die("Pre-flight Check Failed. Fix fly.toml Before Deploying.");
-        return null;
-    }
-    for (const warn of scan.warnings) {
-        out.warn(warn);
-    }
-    out.ok(`Scanned ${configPath}`);
-    return {
-        configPath,
-        preflight: { scanned: scan.scanned, warnings: scan.warnings },
-    };
-};
-// =============================================================================
-// Template Mode
-// =============================================================================
-/** Resolve deploy config for template mode (--template). */
-const resolveTemplateMode = async (templateRaw, out) => {
-    const ref = parseTemplateRef(templateRaw);
-    if (!ref) {
-        out.die(`Invalid Template Reference: "${templateRaw}". ` +
-            `Format: owner/repo[/path][@ref]`);
-        return null;
-    }
-    const label = (ref.path === "."
-        ? `${ref.owner}/${ref.repo}`
-        : `${ref.owner}/${ref.repo}/${ref.path}`) +
-        (ref.ref ? `@${ref.ref}` : "");
-    out.info(`Template: ${label}`);
-    const fetchSpinner = out.spinner("Fetching Template from GitHub");
-    const result = await fetchTemplate(ref);
-    if (!result.ok) {
-        fetchSpinner.fail("Template Fetch Failed");
-        out.die(result.error);
-        return null;
-    }
-    const { tempDir, templateDir } = result.value;
-    fetchSpinner.success("Template Fetched");
-    // Find and scan the template's fly.toml
-    const configPath = join(templateDir, "fly.toml");
-    let tomlContent;
-    try {
-        tomlContent = await dntShim.Deno.readTextFile(configPath);
-    }
-    catch {
-        try {
-            dntShim.Deno.removeSync(tempDir, { recursive: true });
-        }
-        catch { /* ignore */ }
-        out.die(`Template '${ref.path === "." ? ref.repo : ref.path}' Has No fly.toml`);
-        return null;
-    }
-    const scan = scanFlyToml(tomlContent);
-    if (scan.errors.length > 0) {
-        try {
-            dntShim.Deno.removeSync(tempDir, { recursive: true });
-        }
-        catch { /* ignore */ }
-        for (const err of scan.errors) {
-            out.err(err);
-        }
-        out.die("Pre-flight Check Failed for Template fly.toml");
-        return null;
-    }
-    for (const warn of scan.warnings) {
-        out.warn(warn);
-    }
-    out.ok(`Scanned ${ref.path === "." ? "" : ref.path + "/"}fly.toml`);
-    return {
-        configPath,
-        preflight: { scanned: scan.scanned, warnings: scan.warnings },
-        tempDir,
-    };
-};
-// =============================================================================
-// Deploy Command
-// =============================================================================
-const deploy = async (argv) => {
-    const args = parseArgs(argv, {
-        string: [
-            "network",
-            "org",
-            "region",
-            "image",
-            "config",
-            "main-port",
-            "template",
-        ],
-        boolean: ["help", "yes", "json"],
-        alias: { y: "yes" },
-        default: { "main-port": "80" },
-    });
-    if (args.help) {
-        console.log(`
-${bold("ambit deploy")} - Deploy an App Safely on a Custom Private Network
-
-${bold("USAGE")}
-  ambit deploy <app>.<network> [options]
-  ambit deploy <app> --network <name> [options]
-
-  The network can be specified as part of the name (app.network) or with --network.
-
-${bold("MODES")}
-  Config mode (default):
-    ambit deploy my-app.lab                                Uses ./fly.toml
-    ambit deploy my-app.lab --config path                  Explicit fly.toml
-
-  Image mode:
-    ambit deploy my-app.lab --image <img>                  Docker image, no toml
-
-  Template mode:
-    ambit deploy my-app.lab --template <ref>               GitHub template
-
-${bold("OPTIONS")}
-  --network <name>       Target network
-  --org <org>            Fly.io organization slug
-  --region <region>      Primary deployment region
-  -y, --yes              Skip confirmation prompts
-  --json                 Output as JSON
-
-${bold("CONFIG MODE")} (default)
-  --config <path>        Explicit fly.toml path (auto-detects ./fly.toml if omitted)
-
-${bold("IMAGE MODE")}
-  --image <img>          Docker image to deploy (no fly.toml needed)
-  --main-port <port>     Internal port for HTTP service (default: 80, "none" to skip)
-
-${bold("TEMPLATE MODE")}
-  --template <ref>       GitHub template as owner/repo[/path][@ref]
-
-  Reference format:
-    owner/repo                Fetch repo root from the default branch
-    owner/repo/path           Fetch subdirectory from the default branch
-    owner/repo/path@tag       Fetch a tagged release
-    owner/repo/path@branch    Fetch a specific branch
-    owner/repo/path@commit    Fetch a specific commit
-
-${bold("SAFETY")}
-  Always deploys with --no-public-ips and --flycast.
-  Post-deploy audit releases any public IPs and verifies Flycast allocation.
-  Pre-flight scan rejects fly.toml with force_https or TLS on 443.
-
-${bold("EXAMPLES")}
-  ambit deploy my-app.lab
-  ambit deploy my-app.lab --image registry/img:latest
-  ambit deploy my-app.lab --config ./fly.toml --region sea
-  ambit deploy my-claw.lab --template ToxicPine/ambit-openclaw
-  ambit deploy my-browser.lab --template ToxicPine/ambit-templates/chromatic
-  ambit deploy my-browser --network lab --template ToxicPine/ambit-templates/chromatic@v1.0
-`);
-        return;
-    }
-    const out = createOutput(args.json);
-    // ==========================================================================
-    // Phase 0: Parse & Validate
-    // ==========================================================================
-    const appArg = args._[0];
-    if (!appArg || typeof appArg !== "string") {
-        return out.die("Missing app name. Usage: ambit deploy <app>.<network>");
-    }
-    let app;
-    let network;
-    if (appArg.includes(".")) {
-        const parts = appArg.split(".");
-        if (parts.length !== 2 || !parts[0] || !parts[1]) {
-            return out.die(`'${appArg}' should have exactly one dot, like my-app.my-network`);
-        }
-        if (args.network) {
-            return out.die(`Network is already part of the name ('${appArg}'), --network is not needed`);
-        }
-        app = parts[0];
-        network = parts[1];
-    }
-    else {
-        app = appArg;
-        if (!args.network) {
-            return out.die(`Missing network. Use: ambit deploy ${app}.<network>`);
-        }
-        network = args.network;
-    }
-    try {
-        assertNotRouter(app);
-    }
-    catch (e) {
-        return out.die(e instanceof Error ? e.message : String(e));
-    }
-    const modeFlags = [args.image, args.config, args.template].filter(Boolean);
-    if (modeFlags.length > 1) {
-        return out.die("--image, --config, and --template Are Mutually Exclusive");
-    }
-    out.blank()
-        .header("=".repeat(50))
-        .header(`  ambit Deploy: ${app}`)
-        .header("=".repeat(50))
-        .blank();
-    // ==========================================================================
-    // Phase 1: Auth & Org
-    // ==========================================================================
-    out.header("Step 1: Fly.io Configuration").blank();
-    const fly = createFlyProvider();
-    await fly.ensureInstalled();
-    const email = await fly.ensureAuth({ interactive: !args.json });
-    out.ok(`Authenticated as ${email}`);
-    const org = await resolveOrg(fly, args, out);
-    out.blank();
-    // ==========================================================================
-    // Phase 2: Network Verification
-    // ==========================================================================
-    out.header("Step 2: Network Verification").blank();
-    const routerSpinner = out.spinner("Checking for Router on Network");
-    const router = await findRouterApp(fly, org, network);
-    if (!router) {
-        routerSpinner.fail("No Router Found");
-        return out.die(`No ambit router found on network '${network}'. ` +
-            `Run 'ambit create ${network}' first.`);
-    }
-    routerSpinner.success(`Router Found: ${router.appName}`);
-    const routerId = router.routerId;
-    const flyAppName = getWorkloadAppName(app, routerId);
-    out.blank();
-    // ==========================================================================
-    // Phase 3: App Creation (if needed)
-    // ==========================================================================
-    out.header("Step 3: App Setup").blank();
-    let created = false;
-    const exists = await fly.appExists(flyAppName);
-    if (exists) {
-        out.ok(`App '${flyAppName}' Exists`);
-    }
-    else {
-        out.info(`App '${flyAppName}' Does Not Exist — Will Create on Network '${network}'`);
-        if (!args.yes && !args.json) {
-            const confirmed = await confirm(`Create app '${flyAppName}' on network '${network}'?`);
-            if (!confirmed) {
-                out.text("Cancelled.");
-                return;
-            }
-        }
-        await fly.createApp(app, org, { network, routerId });
-        out.ok(`Created App '${flyAppName}' on Network '${network}'`);
-        created = true;
-    }
-    out.blank();
-    // ==========================================================================
-    // Phase 4: Resolve Deploy Mode
-    // ==========================================================================
-    out.header("Step 4: Pre-flight Check").blank();
-    let deployConfig;
-    if (args.template) {
-        deployConfig = await resolveTemplateMode(args.template, out);
-    }
-    else if (args.image) {
-        deployConfig = resolveImageMode(args.image, String(args["main-port"]), out);
-    }
-    else {
-        deployConfig = await resolveConfigMode(args.config, out);
-    }
-    if (!deployConfig)
-        return; // mode resolver already called out.die()
-    out.blank();
-    // ==========================================================================
-    // Phase 5: Deploy with Enforced Flags
-    // ==========================================================================
-    out.header("Step 5: Deploy").blank();
-    out.dim("Deploying with --no-public-ips --flycast ...");
-    try {
-        await fly.deploySafe(app, {
-            routerId,
-            image: deployConfig.image,
-            config: deployConfig.configPath,
-            region: args.region,
-        });
-    }
-    catch (e) {
-        if (e instanceof FlyDeployError) {
-            out.dim(`  ${e.detail}`);
-            return out.die(e.message);
-        }
-        throw e;
-    }
-    finally {
-        if (deployConfig.tempDir) {
-            try {
-                dntShim.Deno.removeSync(deployConfig.tempDir, { recursive: true });
-            }
-            catch { /* ignore */ }
-        }
-    }
-    out.ok("Deploy Succeeded");
-    out.blank();
-    // ==========================================================================
-    // Phase 6: Post-flight Audit
-    // ==========================================================================
-    out.header("Step 6: Post-flight Audit").blank();
-    const auditSpinner = out.spinner("Auditing Deployment");
-    const audit = await auditDeploy(fly, flyAppName, network);
-    auditSpinner.success("Audit Complete");
-    if (audit.public_ips_released > 0) {
-        out.warn(`Released ${audit.public_ips_released} Public IP(s)`);
-    }
-    if (audit.certs_removed > 0) {
-        out.ok(`Removed ${audit.certs_removed} Public Certificate(s)`);
-    }
-    for (const alloc of audit.flycast_allocations) {
-        out.ok(`Flycast: ${alloc.address} (network: ${alloc.network})`);
-    }
-    for (const warn of audit.warnings) {
-        out.warn(warn);
-    }
-    // ==========================================================================
-    // Phase 7: Result
-    // ==========================================================================
-    const hasIssues = audit.public_ips_released > 0 || audit.warnings.length > 0;
-    const result = {
-        app,
-        network,
-        created,
-        audit: {
-            public_ips_released: audit.public_ips_released,
-            certs_removed: audit.certs_removed,
-            flycast_allocations: audit.flycast_allocations,
-            warnings: audit.warnings,
-        },
-        preflight: deployConfig.preflight,
-    };
-    if (hasIssues) {
-        out.fail("Deploy Completed with Issues", result);
-    }
-    else {
-        out.done(result);
-    }
-    out.blank()
-        .header("=".repeat(50))
-        .header(hasIssues ? "  Deploy Completed (with warnings)" : "  Deploy Completed!")
-        .header("=".repeat(50))
-        .blank()
-        .text(`App '${app}' Is Reachable from Your Tailnet as:`)
-        .text(`  ${app}.${network}`)
-        .blank();
-    out.print();
-};
-// =============================================================================
-// Register Command
-// =============================================================================
-registerCommand({
-    name: "deploy",
-    description: "Deploy an app safely on a custom private network",
-    usage: "ambit deploy <app> --network <name> [--image <img>] [--template <ref>] [--org <org>] [--region <region>]",
-    run: deploy,
-});

package/esm/src/cli/commands/destroy.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=destroy.d.ts.map

package/esm/src/cli/commands/destroy.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"destroy.d.ts","sourceRoot":"","sources":["../../../../src/src/cli/commands/destroy.ts"],"names":[],"mappings":""}