@cardelli/ambit 0.1.5 → 0.2.0

package/esm/lib/output.js

@@ -1,8 +1,6 @@
 // =============================================================================
 // Output - Unified Output Handling for CLI Commands
 // =============================================================================
-import "../_dnt.polyfills.js";
-import * as dntShim from "../_dnt.shims.js";
 import { bold, dim, Spinner, statusErr, statusInfo, statusOk, statusWarn, } from "./cli.js";
 // =============================================================================
 // Output Class
@@ -34,6 +32,11 @@ export class Output {
     // ===========================================================================
     // Human-Mode Output (no-op in JSON mode)
     // ===========================================================================
+    skip(text) {
+        if (!this.jsonMode)
+            console.log(dim(`~ ${text}`));
+        return this;
+    }
     ok(text) {
         if (!this.jsonMode)
             statusOk(text);
@@ -87,6 +90,21 @@ export class Output {
         };
     }
     // ===========================================================================
+    // Async Spinner Wrapper
+    // ===========================================================================
+    async spin(label, fn) {
+        const s = this.spinner(label);
+        try {
+            const result = await fn();
+            s.success(label);
+            return result;
+        }
+        catch (e) {
+            s.fail(label);
+            throw e;
+        }
+    }
+    // ===========================================================================
     // Terminal Output
     // ===========================================================================
     die(message) {
@@ -96,7 +114,7 @@ export class Output {
         else {
             statusErr(message);
         }
-        dntShim.Deno.exit(1);
+        throw new Error("exit");
     }
     isJson() {
         return this.jsonMode;

package/esm/lib/result.d.ts

@@ -1,4 +1,3 @@
-import "../_dnt.polyfills.js";
 export declare class Result<T> {
     readonly ok: boolean;
     private readonly _value;

package/esm/lib/result.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"result.d.ts","sourceRoot":"","sources":["../../src/lib/result.ts"],"names":[],"mappings":"AAGA,OAAO,sBAAsB,CAAC;AAG9B,qBAAa,MAAM,CAAC,CAAC;IAEjB,QAAQ,CAAC,EAAE,EAAE,OAAO;IACpB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAHzB,OAAO;IAMP,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC;IAIjC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,KAAK,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC;IAI/C,IAAI,KAAK,IAAI,CAAC,GAAG,SAAS,CAEzB;IAED,IAAI,KAAK,IAAI,MAAM,GAAG,SAAS,CAE9B;IAED,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC;IAKtC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC;IAKlD,MAAM,IAAI,CAAC;IAKX,QAAQ,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC;IAIxB,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE;QAAE,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC;QAAC,GAAG,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,CAAC,CAAA;KAAE,GAAG,CAAC;CAGvE"}
+{"version":3,"file":"result.d.ts","sourceRoot":"","sources":["../../src/lib/result.ts"],"names":[],"mappings":"AAIA,qBAAa,MAAM,CAAC,CAAC;IAEjB,QAAQ,CAAC,EAAE,EAAE,OAAO;IACpB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAHzB,OAAO;IAMP,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC;IAIjC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,KAAK,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC;IAI/C,IAAI,KAAK,IAAI,CAAC,GAAG,SAAS,CAEzB;IAED,IAAI,KAAK,IAAI,MAAM,GAAG,SAAS,CAE9B;IAED,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC;IAKtC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC;IAKlD,MAAM,IAAI,CAAC;IAKX,QAAQ,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC;IAIxB,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE;QAAE,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC;QAAC,GAAG,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,CAAC,CAAA;KAAE,GAAG,CAAC;CAGvE"}

package/esm/lib/result.js

@@ -1,7 +1,6 @@
 // =============================================================================
 // Result<T> — Shared Success/Failure Type
 // =============================================================================
-import "../_dnt.polyfills.js";
 export class Result {
     ok;
     _value;

package/esm/main.d.ts

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import "./_dnt.polyfills.js";
-import "./src/cli/commands/create.js";
-import "./src/cli/commands/deploy.js";
-import "./src/cli/commands/list.js";
-import "./src/cli/commands/status.js";
-import "./src/cli/commands/destroy.js";
-import "./src/cli/commands/doctor.js";
+import "./cli/commands/create/index.js";
+import "./cli/commands/deploy/index.js";
+import "./cli/commands/list.js";
+import "./cli/commands/status.js";
+import "./cli/commands/destroy/index.js";
+import "./cli/commands/doctor.js";
 //# sourceMappingURL=main.d.ts.map

package/esm/main.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":";AACA,OAAO,qBAAqB,CAAC;AA+B7B,OAAO,8BAA8B,CAAC;AACtC,OAAO,8BAA8B,CAAC;AACtC,OAAO,4BAA4B,CAAC;AACpC,OAAO,8BAA8B,CAAC;AACtC,OAAO,+BAA+B,CAAC;AACvC,OAAO,8BAA8B,CAAC"}
+{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":";AACA,OAAO,qBAAqB,CAAC;AA8B7B,OAAO,gCAAgC,CAAC;AACxC,OAAO,gCAAgC,CAAC;AACxC,OAAO,wBAAwB,CAAC;AAChC,OAAO,0BAA0B,CAAC;AAClC,OAAO,iCAAiC,CAAC;AACzC,OAAO,0BAA0B,CAAC"}

package/esm/main.js

@@ -24,21 +24,19 @@ import * as dntShim from "./_dnt.shims.js";
 //   ambit doctor
 //
 // =============================================================================
-import { runCli } from "./src/cli/mod.js";
+import { runCli } from "./cli/mod.js";
 import { Spinner, statusErr } from "./lib/cli.js";
-// Import commands to register them
-import "./src/cli/commands/create.js";
-import "./src/cli/commands/deploy.js";
-import "./src/cli/commands/list.js";
-import "./src/cli/commands/status.js";
-import "./src/cli/commands/destroy.js";
-import "./src/cli/commands/doctor.js";
+import "./cli/commands/create/index.js";
+import "./cli/commands/deploy/index.js";
+import "./cli/commands/list.js";
+import "./cli/commands/status.js";
+import "./cli/commands/destroy/index.js";
+import "./cli/commands/doctor.js";
 // =============================================================================
 // Main
 // =============================================================================
 const main = async () => {
     const spinner = new Spinner();
-    // Handle signals
     try {
         dntShim.Deno.addSignalListener("SIGINT", () => {
             spinner.stop();

package/esm/providers/fly.d.ts

@@ -0,0 +1,81 @@
+import { type FlyApp, type FlyAppInfo, type FlyIp, type FlyMachine } from "../schemas/fly.js";
+/**
+ * Thrown when a `fly deploy` command fails. Carries the raw stderr so callers
+ * can surface it through `out` (respecting JSON mode) instead of printing
+ * directly.
+ */
+export declare class FlyDeployError extends Error {
+    /** Last meaningful line from flyctl stderr. */
+    readonly detail: string;
+    constructor(app: string, stderr: string);
+}
+export type MachineSize = "shared-cpu-1x" | "shared-cpu-2x" | "shared-cpu-4x";
+export interface MachineConfig {
+    size: MachineSize;
+    memoryMb?: number;
+    region?: string;
+    autoStopSeconds?: number;
+}
+export interface MachineResult {
+    id: string;
+    state: string;
+    size: string;
+    region: string;
+    privateIp?: string;
+}
+export interface SafeDeployOptions {
+    image?: string;
+    config?: string;
+    region?: string;
+    routerId?: string;
+}
+export interface FlyProvider {
+    auth: {
+        ensureInstalled(): Promise<void>;
+        login(opts?: {
+            interactive?: boolean;
+        }): Promise<string>;
+        getToken(): Promise<string>;
+    };
+    orgs: {
+        list(): Promise<Record<string, string>>;
+    };
+    apps: {
+        list(org?: string): Promise<FlyApp[]>;
+        listWithNetwork(org: string): Promise<FlyAppInfo[]>;
+        create(name: string, org: string, opts?: {
+            network?: string;
+            routerId?: string;
+        }): Promise<void>;
+        delete(name: string): Promise<void>;
+        exists(name: string): Promise<boolean>;
+        getConfig(name: string): Promise<Record<string, unknown> | null>;
+    };
+    machines: {
+        list(app: string): Promise<FlyMachine[]>;
+        clone(app: string, config: MachineConfig): Promise<MachineResult>;
+        destroy(app: string, machineId: string): Promise<void>;
+    };
+    secrets: {
+        set(app: string, secrets: Record<string, string>, opts?: {
+            stage?: boolean;
+        }): Promise<void>;
+    };
+    ips: {
+        list(app: string): Promise<FlyIp[]>;
+        release(app: string, address: string): Promise<void>;
+        allocateFlycast(app: string, network: string): Promise<void>;
+    };
+    certs: {
+        list(app: string): Promise<string[]>;
+        remove(app: string, hostname: string): Promise<void>;
+    };
+    deploy: {
+        router(app: string, dir: string, config?: {
+            region?: string;
+        }): Promise<void>;
+        app(app: string, options: SafeDeployOptions): Promise<void>;
+    };
+}
+export declare const createFlyProvider: () => FlyProvider;
+//# sourceMappingURL=fly.d.ts.map

package/esm/providers/fly.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fly.d.ts","sourceRoot":"","sources":["../../src/providers/fly.ts"],"names":[],"mappings":"AAUA,OAAO,EACL,KAAK,MAAM,EACX,KAAK,UAAU,EAIf,KAAK,KAAK,EAEV,KAAK,UAAU,EAIhB,MAAM,mBAAmB,CAAC;AAS3B;;;;GAIG;AACH,qBAAa,cAAe,SAAQ,KAAK;IACvC,+CAA+C;IAC/C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBAEZ,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAMxC;AAMD,MAAM,MAAM,WAAW,GAAG,eAAe,GAAG,eAAe,GAAG,eAAe,CAAC;AAE9E,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,WAAW,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAMD,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAMD,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAMD,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE;QACJ,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,EAAE;YAAE,WAAW,CAAC,EAAE,OAAO,CAAA;SAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QACzD,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;KAC7B,CAAC;IACF,IAAI,EAAE;QACJ,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;KACzC,CAAC;IACF,IAAI,EAAE;QACJ,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACtC,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;QACpD,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;YAAE,OAAO,CAAC,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;SAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACjG,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QACvC,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;KAClE,CAAC;IACF,QAAQ,EAAE;QACR,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;QACzC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;QAClE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KACxD,CAAC;IACF,OAAO,EAAE;QACP,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,EAAE;YAAE,KAAK,CAAC,EAAE,OAAO,CAAA;SAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KAC9F,CAAC;IACF,GAAG,EAAE;QACH,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QACpC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACrD,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KAC9D,CAAC;IACF,KAAK,EAAE;QACL,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACrC,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KACtD,CAAC;IACF,MAAM,EAAE;QACN,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9E,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KAC7D,CAAC;CACH;AAMD,eAAO,MAAM,iBAAiB,QAAO,WAobpC,CAAC"}

package/esm/providers/fly.js

@@ -0,0 +1,372 @@
+// =============================================================================
+// Fly.io Provider - Wraps flyctl CLI
+// =============================================================================
+import * as dntShim from "../_dnt.shims.js";
+import { runCommand, runJson } from "../lib/command.js";
+import { Result } from "../lib/result.js";
+import { commandExists, die } from "../lib/cli.js";
+import { dirname, resolve } from "../deps/jsr.io/@std/path/1.1.4/mod.js";
+import { FlyAppInfoListSchema, FlyAppsListSchema, FlyAuthSchema, FlyIpListSchema, FlyMachinesListSchema, FlyOrgsSchema, FlyStatusSchema, } from "../schemas/fly.js";
+import { fileExists } from "../lib/cli.js";
+import { getWorkloadAppName } from "../util/naming.js";
+import { extractErrorDetail, getSizeConfig, mapMachines } from "../util/fly-transforms.js";
+// =============================================================================
+// Deploy Error
+// =============================================================================
+/**
+ * Thrown when a `fly deploy` command fails. Carries the raw stderr so callers
+ * can surface it through `out` (respecting JSON mode) instead of printing
+ * directly.
+ */
+export class FlyDeployError extends Error {
+    /** Last meaningful line from flyctl stderr. */
+    detail;
+    constructor(app, stderr) {
+        const detail = extractErrorDetail(stderr);
+        super(`Deploy Failed for '${app}'`);
+        this.name = "FlyDeployError";
+        this.detail = detail;
+    }
+}
+// =============================================================================
+// Create Fly Provider
+// =============================================================================
+export const createFlyProvider = () => {
+    const provider = {
+        auth: {
+            async ensureInstalled() {
+                if (!(await commandExists("fly"))) {
+                    return die("Flyctl Not Found. Install from https://fly.io/docs/flyctl/install/");
+                }
+            },
+            async login(opts) {
+                const interactive = opts?.interactive ?? true;
+                const result = await runCommand(["fly", "auth", "whoami", "--json"]);
+                if (result.ok) {
+                    const auth = result.json();
+                    if (auth.ok) {
+                        const parsed = FlyAuthSchema.safeParse(auth.value);
+                        if (parsed.success) {
+                            return parsed.data.email;
+                        }
+                    }
+                }
+                if (!interactive) {
+                    return die("Not Authenticated with Fly.io. Run 'fly auth login' First");
+                }
+                const loginResult = await runCommand(["fly", "auth", "login"], {
+                    interactive: true,
+                });
+                if (!loginResult.ok) {
+                    return die("Fly.io Authentication Failed");
+                }
+                const checkResult = await runCommand(["fly", "auth", "whoami", "--json"]);
+                if (!checkResult.ok) {
+                    return die("Fly.io Authentication Verification Failed");
+                }
+                const parsed = FlyAuthSchema.safeParse(checkResult.json().unwrap());
+                if (!parsed.success || !parsed.data) {
+                    return die("Fly.io Authentication Response Invalid");
+                }
+                return parsed.data.email;
+            },
+            async getToken() {
+                const home = dntShim.Deno.env.get("HOME") || dntShim.Deno.env.get("USERPROFILE") || "";
+                const configPath = `${home}/.fly/config.yml`;
+                if (!(await fileExists(configPath))) {
+                    return die("Fly Config Not Found at ~/.fly/config.yml. Run 'fly auth login' First");
+                }
+                const content = await dntShim.Deno.readTextFile(configPath);
+                const match = content.match(/access_token:\s*(.+)/);
+                if (!match || !match[1]) {
+                    return die("No Access Token Found in ~/.fly/config.yml. Run 'fly auth login' First");
+                }
+                return match[1].trim();
+            },
+        },
+        orgs: {
+            async list() {
+                const result = await runJson(["fly", "orgs", "list", "--json"]);
+                if (!result.ok) {
+                    return die("Failed to List Organizations");
+                }
+                const parsed = FlyOrgsSchema.safeParse(result.value);
+                if (!parsed.success) {
+                    return die("Failed to Parse Organizations");
+                }
+                return parsed.data;
+            },
+        },
+        apps: {
+            async list(org) {
+                const args = ["fly", "apps", "list", "--json"];
+                if (org) {
+                    args.push("--org", org);
+                }
+                const result = await runCommand(args);
+                return result.json().flatMap((data) => {
+                    const parsed = FlyAppsListSchema.safeParse(data);
+                    return parsed.success
+                        ? Result.ok(parsed.data)
+                        : Result.err("Parse Failed");
+                }).unwrapOr([]);
+            },
+            async listWithNetwork(org) {
+                const token = await provider.auth.getToken();
+                const response = await fetch(`https://api.machines.dev/v1/apps?org_slug=${encodeURIComponent(org)}`, {
+                    headers: {
+                        Authorization: `Bearer ${token}`,
+                        "Content-Type": "application/json",
+                    },
+                });
+                if (!response.ok) {
+                    return die(`Failed to List Apps via REST API: HTTP ${response.status}`);
+                }
+                const data = await response.json();
+                const parsed = FlyAppInfoListSchema.safeParse(data);
+                if (!parsed.success) {
+                    return die("Failed to Parse Apps REST API Response");
+                }
+                return parsed.data.apps;
+            },
+            async create(name, org, opts) {
+                const appName = opts?.routerId
+                    ? getWorkloadAppName(name, opts.routerId)
+                    : name;
+                const args = ["fly", "apps", "create", appName, "--org", org, "--json"];
+                if (opts?.network) {
+                    args.push("--network", opts.network);
+                }
+                const result = await runCommand(args);
+                if (!result.ok) {
+                    return die(`Failed to Create App '${appName}'`);
+                }
+            },
+            async delete(name) {
+                const result = await runCommand([
+                    "fly",
+                    "apps",
+                    "destroy",
+                    name,
+                    "--yes",
+                ]);
+                if (!result.ok) {
+                    return die(`Failed to Delete App '${name}'`);
+                }
+            },
+            async exists(name) {
+                const result = await runCommand(["fly", "status", "-a", name, "--json"]);
+                return result.json().match({
+                    ok: (data) => {
+                        const parsed = FlyStatusSchema.safeParse(data);
+                        return parsed.success && !!parsed.data.ID;
+                    },
+                    err: () => false,
+                });
+            },
+            async getConfig(name) {
+                const result = await runCommand(["fly", "config", "show", "-a", name]);
+                return result.json().match({
+                    ok: (v) => v,
+                    err: () => null,
+                });
+            },
+        },
+        machines: {
+            async list(app) {
+                const result = await runJson(["fly", "machines", "list", "-a", app, "--json"]);
+                return result.flatMap((data) => {
+                    const parsed = FlyMachinesListSchema.safeParse(data);
+                    return parsed.success
+                        ? Result.ok(parsed.data)
+                        : Result.err("Parse Failed");
+                }).unwrapOr([]);
+            },
+            async clone(app, config) {
+                const raw = await provider.machines.list(app);
+                const existingMachines = mapMachines(raw);
+                if (existingMachines.length === 0) {
+                    return die("No Existing Machine to Clone. Run 'fly deploy' First");
+                }
+                const sourceMachine = existingMachines[0];
+                const sizeConfig = getSizeConfig(config.size);
+                const memoryMb = config.memoryMb ?? sizeConfig.memoryMb;
+                const args = [
+                    "fly",
+                    "machine",
+                    "clone",
+                    sourceMachine.id,
+                    "-a",
+                    app,
+                    "--vm-cpus",
+                    String(sizeConfig.cpus),
+                    "--vm-memory",
+                    String(memoryMb),
+                ];
+                if (config.region) {
+                    args.push("--region", config.region);
+                }
+                const result = await runCommand(args);
+                if (!result.ok) {
+                    return die(result.stderr || "Unknown Error");
+                }
+                const rawAfter = await provider.machines.list(app);
+                const machines = mapMachines(rawAfter);
+                const newest = machines[machines.length - 1];
+                if (!newest) {
+                    return die("Created Machine Not Found");
+                }
+                return newest;
+            },
+            async destroy(app, machineId) {
+                const shortId = machineId.slice(0, 8);
+                const result = await runCommand([
+                    "fly",
+                    "machines",
+                    "destroy",
+                    machineId,
+                    "-a",
+                    app,
+                    "--force",
+                ]);
+                if (!result.ok) {
+                    return die(`Failed to Destroy Machine '${shortId}'`);
+                }
+            },
+        },
+        secrets: {
+            async set(app, secrets, opts) {
+                const pairs = Object.entries(secrets)
+                    .filter(([_, v]) => v !== undefined && v !== "")
+                    .map(([k, v]) => `${k}=${v}`);
+                if (pairs.length === 0)
+                    return;
+                const args = ["fly", "secrets", "set", ...pairs, "-a", app];
+                if (opts?.stage) {
+                    args.push("--stage");
+                }
+                const result = await runCommand(args);
+                if (!result.ok) {
+                    return die("Failed to Set Secrets");
+                }
+            },
+        },
+        ips: {
+            async list(app) {
+                const result = await runCommand([
+                    "fly",
+                    "ips",
+                    "list",
+                    "-a",
+                    app,
+                    "--json",
+                ]);
+                return result.json().flatMap((data) => {
+                    const parsed = FlyIpListSchema.safeParse(data);
+                    return parsed.success
+                        ? Result.ok(parsed.data)
+                        : Result.err("Parse Failed");
+                }).unwrapOr([]);
+            },
+            async release(app, address) {
+                const result = await runCommand([
+                    "fly",
+                    "ips",
+                    "release",
+                    address,
+                    "-a",
+                    app,
+                ]);
+                if (!result.ok) {
+                    return die(`Failed to Release IP ${address} from '${app}'`);
+                }
+            },
+            async allocateFlycast(app, network) {
+                const result = await runCommand([
+                    "fly",
+                    "ips",
+                    "allocate-v6",
+                    "--private",
+                    "--network",
+                    network,
+                    "-a",
+                    app,
+                ]);
+                if (!result.ok) {
+                    return die(`Failed to Allocate Flycast IP on Network '${network}'`);
+                }
+            },
+        },
+        certs: {
+            async list(app) {
+                const result = await runCommand([
+                    "fly",
+                    "certs",
+                    "list",
+                    "-a",
+                    app,
+                    "--json",
+                ]);
+                return result.json().map((certs) => certs
+                    .map((c) => c.Hostname)
+                    .filter((h) => typeof h === "string")).unwrapOr([]);
+            },
+            async remove(app, hostname) {
+                await runCommand([
+                    "fly",
+                    "certs",
+                    "remove",
+                    hostname,
+                    "-a",
+                    app,
+                    "--yes",
+                ]);
+            },
+        },
+        deploy: {
+            async router(app, dockerDir, config) {
+                const args = [
+                    "fly",
+                    "deploy",
+                    dockerDir,
+                    "-a",
+                    app,
+                    "--yes",
+                    "--ha=false",
+                ];
+                if (config?.region) {
+                    args.push("--primary-region", config.region);
+                }
+                const result = await runCommand(args);
+                if (!result.ok) {
+                    throw new FlyDeployError(app, result.stderr);
+                }
+            },
+            async app(appName, options) {
+                const flyAppName = options.routerId
+                    ? getWorkloadAppName(appName, options.routerId)
+                    : appName;
+                const args = ["fly", "deploy"];
+                // When config is provided, use its parent directory as the build context
+                // so fly deploy finds the Dockerfile and COPY picks up the correct files
+                if (options.config) {
+                    const configAbs = resolve(options.config);
+                    args.push(dirname(configAbs));
+                    args.push("--config", configAbs);
+                }
+                args.push("-a", flyAppName, "--yes", "--no-public-ips");
+                if (options.image) {
+                    args.push("--image", options.image);
+                }
+                if (options.region) {
+                    args.push("--primary-region", options.region);
+                }
+                const result = await runCommand(args);
+                if (!result.ok) {
+                    throw new FlyDeployError(flyAppName, result.stderr);
+                }
+            },
+        },
+    };
+    return provider;
+};

package/esm/providers/tailscale.d.ts

@@ -0,0 +1,31 @@
+import { type AuthKeyCapabilities, type TailscaleDevice } from "../schemas/tailscale.js";
+export interface DeviceRoutes {
+    advertised: string[];
+    enabled: string[];
+    unapproved: string[];
+}
+export interface TailscaleProvider {
+    auth: {
+        validateKey(): Promise<boolean>;
+        createKey(opts?: AuthKeyCapabilities): Promise<string>;
+    };
+    devices: {
+        list(): Promise<TailscaleDevice[]>;
+        getByHostname(hostname: string): Promise<TailscaleDevice | null>;
+        delete(id: string): Promise<void>;
+    };
+    routes: {
+        get(deviceId: string): Promise<DeviceRoutes | null>;
+        approve(deviceId: string, routes: string[]): Promise<void>;
+    };
+    dns: {
+        getSplit(): Promise<Record<string, string[]>>;
+        setSplit(domain: string, nameservers: string[]): Promise<void>;
+        clearSplit(domain: string): Promise<void>;
+    };
+    acl: {
+        getPolicy(): Promise<Record<string, unknown> | null>;
+    };
+}
+export declare const createTailscaleProvider: (apiKey: string, tailnet?: string) => TailscaleProvider;
+//# sourceMappingURL=tailscale.d.ts.map

package/esm/providers/tailscale.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tailscale.d.ts","sourceRoot":"","sources":["../../src/providers/tailscale.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,KAAK,mBAAmB,EAExB,KAAK,eAAe,EAErB,MAAM,yBAAyB,CAAC;AAYjC,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE;QACJ,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;QAChC,SAAS,CAAC,IAAI,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;KACxD,CAAC;IACF,OAAO,EAAE;QACP,IAAI,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;QACnC,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;QACjE,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KACnC,CAAC;IACF,MAAM,EAAE;QACN,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;QACpD,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KAC5D,CAAC;IACF,GAAG,EAAE;QACH,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAC9C,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/D,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KAC3C,CAAC;IACF,GAAG,EAAE;QACH,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;KACtD,CAAC;CACH;AAiBD,eAAO,MAAM,uBAAuB,GAClC,QAAQ,MAAM,EACd,UAAS,MAAY,KACpB,iBAyMF,CAAC"}