@flisk-sh/flisk-export 0.2.0 → 0.2.1

package/README.md

@@ -45,8 +45,9 @@ flisk-export compose --check    # exit 1 when that file is out of date (for CI)
 ```
 
 Writes a **standalone** `docker-compose.yml` from the bring-your-own `service.json` files (`image` or `dockerfile`, `env`,
-`volumes`, `extraPorts`, `dependsOn`, `sidecarOf`, `container`). It runs with plain `docker compose up` and no Flisk: no external
-networks, no `FLISK_*` variables, no generated secrets. `${VAR}` references in `env` pass through for Compose to read from `.env`.
+`secrets.required`, `volumes`, `extraPorts`, `dependsOn`, `healthCheck`, `sidecarOf`, `container`). It runs with plain `docker compose up` and no Flisk: no external
+networks, no `FLISK_*` variables, no generated secrets. `${VAR}` references in `env`, and every name in `secrets.required`, pass through as `${NAME}` for Compose to read from `.env`.
+`healthCheck.command` becomes a Compose `healthcheck`; a service that lists a checked service in `dependsOn` waits for `service_healthy`, and one that lists a `restart: "no"` job waits for `service_completed_successfully`.
 Other resource types and `command` (native) services are not exported. The file is generated: change `service.json` and run it
 again with `--force`. It never starts a container or calls an API.
 

package/dist/compose.js

@@ -40,7 +40,8 @@ function hostPath(outDir, absolute) {
 function isNamedVolume(source) {
     return !/[\\/]/.test(source) && !source.startsWith(".") && !source.startsWith("~");
 }
-function serviceLines(resource, outDir, known) {
+function serviceLines(resource, outDir, services) {
+    const known = services;
     const c = resource.config;
     const name = resource.name;
     if (!SERVICE_NAME.test(name)) {
@@ -81,13 +82,17 @@ function serviceLines(resource, outDir, known) {
         lines.push(`    network_mode: ${q(`service:${sidecarOf}`)}`);
     }
     const env = record(c.env);
-    const envNames = Object.keys(env)
-        .filter((k) => ENV_NAME.test(k))
-        .sort();
+    // Secrets are listed by name only in service.json; Compose reads their values from the project .env.
+    const values = new Map();
+    for (const key of strings(record(c.secrets).required))
+        values.set(key, `\${${key}}`);
+    for (const [key, value] of Object.entries(env))
+        values.set(key, String(value));
+    const envNames = [...values.keys()].filter((k) => ENV_NAME.test(k)).sort();
     if (envNames.length > 0) {
         lines.push("    environment:");
         for (const key of envNames)
-            lines.push(`      ${key}: ${q(String(env[key]))}`);
+            lines.push(`      ${key}: ${q(values.get(key) ?? "")}`);
     }
     const volumes = Array.isArray(c.volumes) ? c.volumes : [];
     if (volumes.length > 0) {
@@ -127,8 +132,12 @@ function serviceLines(resource, outDir, known) {
     }
     const dependsOn = strings(c.dependsOn).filter((d) => known.has(d));
     if (dependsOn.length > 0) {
-        lines.push("    depends_on:", ...dependsOn.map((d) => `      - ${q(d)}`));
+        lines.push("    depends_on:");
+        for (const d of dependsOn) {
+            lines.push(`      ${d}:`, `        condition: ${dependencyCondition(known.get(d))}`);
+        }
     }
+    lines.push(...healthcheckLines(name, c.healthCheck));
     const capAdd = strings(container.capAdd);
     const capDrop = strings(container.capDrop);
     const securityOpt = strings(container.securityOpt);
@@ -151,6 +160,45 @@ function serviceLines(resource, outDir, known) {
     }
     return { lines, namedVolumes };
 }
+/** What Compose waits for before starting a dependent: a passing check, a finished one-shot job, or the start. */
+function dependencyCondition(dep) {
+    if (hasProbeCommand(dep.config.healthCheck))
+        return "service_healthy";
+    if (dep.config.restart === "no")
+        return "service_completed_successfully";
+    return "service_started";
+}
+function hasProbeCommand(value) {
+    return strings(record(value).command).length > 0;
+}
+/** A Compose `healthcheck` from `healthCheck.command` (exit 0 is ready); `healthCheck: false` turns it off. */
+function healthcheckLines(name, value) {
+    if (value === false || record(value).enabled === false) {
+        return ["    healthcheck:", "      disable: true"];
+    }
+    const h = record(value);
+    const command = strings(h.command);
+    if (command.length === 0)
+        return [];
+    const lines = ["    healthcheck:", `      test: [${['"CMD"', ...command.map(q)].join(", ")}]`];
+    for (const key of ["interval", "timeout"]) {
+        if (h[key] === undefined)
+            continue;
+        const seconds = Number(h[key]);
+        if (!Number.isFinite(seconds) || seconds <= 0) {
+            throw new ExportError(`${name}: healthCheck.${key} must be a number of seconds above 0`);
+        }
+        lines.push(`      ${key}: ${q(`${seconds}s`)}`);
+    }
+    if (h.retries !== undefined) {
+        const retries = Number(h.retries);
+        if (!Number.isInteger(retries) || retries < 1) {
+            throw new ExportError(`${name}: healthCheck.retries must be a whole number above 0`);
+        }
+        lines.push(`      retries: ${retries}`);
+    }
+    return lines;
+}
 function resolveFrom(base, rel) {
     return rel.startsWith("/") ? rel : joinPosix(base, rel);
 }
@@ -175,7 +223,7 @@ export function buildCompose(outDir, resources) {
             `Exported type: ${COMPOSE_TYPE} (a service.json with an image or a Dockerfile, and no command)`,
         ]);
     }
-    const known = new Set(services.map((s) => s.name));
+    const known = new Map(services.map((s) => [s.name, s]));
     const body = [];
     const volumes = new Set();
     for (const service of services) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flisk-sh/flisk-export",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "Write a Render Blueprint (render.yaml), a Cloudflare wrangler.toml or a standalone docker-compose.yml from Flisk service.json files. Never deploys.",
   "type": "module",
   "license": "MIT",