@launchfile/macos-dev 0.1.4 → 0.2.0

package/src/resources/mysql.ts

@@ -1,98 +0,0 @@
-/**
- * MySQL resource provisioner via Homebrew.
- */
-
-import type { NormalizedRequirement } from "@launchfile/sdk";
-import { shell, shellOk } from "../shell.js";
-import { generatePassword } from "../secret-generator.js";
-import type { ResourceState } from "../state.js";
-import type { ProvisionOpts, ResourceProperties, ResourceProvisioner } from "./types.js";
-
-const DEFAULT_PORT = 3306;
-const DEFAULT_HOST = "localhost";
-
-// Security: validate identifiers before interpolating into shell/SQL commands
-const SAFE_IDENTIFIER = /^[a-zA-Z_][a-zA-Z0-9_]*$/;
-
-export class MysqlProvisioner implements ResourceProvisioner {
-	readonly type = "mysql";
-
-	async isRunning(): Promise<boolean> {
-		return shellOk("mysqladmin ping -h localhost --silent");
-	}
-
-	async provision(
-		req: NormalizedRequirement,
-		opts: ProvisionOpts,
-		existingState?: ResourceState,
-	): Promise<{ properties: ResourceProperties; state: ResourceState }> {
-		if (!(await this.isRunning())) {
-			console.log("  Starting MySQL via brew...");
-			const started = await shellOk("brew services start mysql");
-			if (!started) {
-				await shell("brew install mysql");
-				await shell("brew services start mysql");
-			}
-		}
-
-		const resourceName = req.name ?? req.type;
-		const safeName = opts.appName.replace(/-/g, "_");
-		const dbName = existingState?.dbName ?? `launchfile_${safeName}`;
-		const user = existingState?.user ?? `launchfile_${safeName}`;
-		const password = existingState?.password ?? generatePassword();
-		const port = DEFAULT_PORT;
-
-		// Create database and user (idempotent)
-		await shell(
-			`mysql -h ${DEFAULT_HOST} -u root -e "CREATE DATABASE IF NOT EXISTS \\\`${dbName}\\\`;"`,
-			{ allowFailure: true },
-		);
-		await shell(
-			`mysql -h ${DEFAULT_HOST} -u root -e "CREATE USER IF NOT EXISTS '${user}'@'${DEFAULT_HOST}' IDENTIFIED BY '${password}';"`,
-			{ allowFailure: true },
-		);
-		await shell(
-			`mysql -h ${DEFAULT_HOST} -u root -e "GRANT ALL PRIVILEGES ON \\\`${dbName}\\\`.* TO '${user}'@'${DEFAULT_HOST}';"`,
-			{ allowFailure: true },
-		);
-
-		const url = `mysql://${user}:${password}@${DEFAULT_HOST}:${port}/${dbName}`;
-
-		const properties: ResourceProperties = {
-			url,
-			host: DEFAULT_HOST,
-			port,
-			user,
-			password,
-			name: dbName,
-		};
-
-		const state: ResourceState = {
-			type: "mysql",
-			name: resourceName,
-			brewService: "mysql",
-			port,
-			dbName,
-			user,
-			password,
-		};
-
-		return { properties, state };
-	}
-
-	async destroy(state: ResourceState): Promise<void> {
-		// Security: state values come from disk (state.json) — validate before SQL interpolation
-		if (state.dbName && SAFE_IDENTIFIER.test(state.dbName)) {
-			await shell(
-				`mysql -h ${DEFAULT_HOST} -u root -e "DROP DATABASE IF EXISTS \\\`${state.dbName}\\\`;"`,
-				{ allowFailure: true },
-			);
-		}
-		if (state.user && SAFE_IDENTIFIER.test(state.user)) {
-			await shell(
-				`mysql -h ${DEFAULT_HOST} -u root -e "DROP USER IF EXISTS '${state.user}'@'${DEFAULT_HOST}';"`,
-				{ allowFailure: true },
-			);
-		}
-	}
-}

package/src/resources/postgres.ts

@@ -1,133 +0,0 @@
-/**
- * Postgres resource provisioner via Homebrew.
- *
- * Strategy:
- * - Check if postgres is already running via `brew services list`
- * - If not, install and start via brew
- * - Create an app-specific database and user
- * - Return connection properties
- */
-
-import type { NormalizedRequirement } from "@launchfile/sdk";
-import { shell, shellOk } from "../shell.js";
-import { generatePassword } from "../secret-generator.js";
-import type { ResourceState } from "../state.js";
-import type { ProvisionOpts, ResourceProperties, ResourceProvisioner } from "./types.js";
-
-const DEFAULT_PORT = 5432;
-const DEFAULT_HOST = "localhost";
-
-// Security: validate identifiers before interpolating into shell/SQL commands.
-// Only alphanumeric + underscore — safe for SQL identifiers and shell args.
-const SAFE_IDENTIFIER = /^[a-zA-Z_][a-zA-Z0-9_]*$/;
-
-export class PostgresProvisioner implements ResourceProvisioner {
-	readonly type = "postgres";
-
-	async isRunning(): Promise<boolean> {
-		return shellOk("pg_isready -q");
-	}
-
-	async provision(
-		req: NormalizedRequirement,
-		opts: ProvisionOpts,
-		existingState?: ResourceState,
-	): Promise<{ properties: ResourceProperties; state: ResourceState }> {
-		// Ensure postgres is running
-		if (!(await this.isRunning())) {
-			console.log("  Starting PostgreSQL via brew...");
-			// Try to start; if not installed, install first
-			const started = await shellOk("brew services start postgresql");
-			if (!started) {
-				// Try versioned formula
-				await shell("brew install postgresql@16");
-				await shell("brew services start postgresql@16");
-			}
-		}
-
-		// Wait for ready
-		await shell("pg_isready --timeout=10", { allowFailure: true });
-
-		// Determine database and user names
-		const resourceName = req.name ?? req.type;
-		const safeName = opts.appName.replace(/-/g, "_");
-		const dbName = existingState?.dbName ?? `launchfile_${safeName}`;
-		const user = existingState?.user ?? `launchfile_${safeName}`;
-		const password = existingState?.password ?? generatePassword();
-		const port = DEFAULT_PORT;
-
-		// Create user (idempotent)
-		await shell(
-			`psql -h ${DEFAULT_HOST} -p ${port} postgres -c "DO \\$\\$ BEGIN IF NOT EXISTS (SELECT FROM pg_roles WHERE rolname = '${user}') THEN CREATE ROLE ${user} WITH LOGIN PASSWORD '${password}' CREATEDB; END IF; END \\$\\$;"`,
-			{ allowFailure: true },
-		);
-
-		// Create database (idempotent)
-		const dbExists = await shellOk(
-			`psql -h ${DEFAULT_HOST} -p ${port} postgres -tAc "SELECT 1 FROM pg_database WHERE datname='${dbName}'"`,
-		);
-		if (!dbExists) {
-			await shell(
-				`createdb -h ${DEFAULT_HOST} -p ${port} -O ${user} ${dbName}`,
-				{ allowFailure: true },
-			);
-		}
-
-		// Handle extensions from config
-		// Security: extension names come from Launchfile config (untrusted input).
-		// Validate each against SAFE_IDENTIFIER before interpolating into SQL.
-		const extensions = req.config?.extensions;
-		if (Array.isArray(extensions)) {
-			for (const ext of extensions) {
-				if (typeof ext !== "string") continue;
-				if (!SAFE_IDENTIFIER.test(ext)) {
-					console.warn(`  Skipping invalid extension name: ${ext}`);
-					continue;
-				}
-				await shell(
-					`psql -h ${DEFAULT_HOST} -p ${port} ${dbName} -c "CREATE EXTENSION IF NOT EXISTS \\"${ext}\\";"`,
-					{ allowFailure: true },
-				);
-			}
-		}
-
-		const url = `postgresql://${user}:${password}@${DEFAULT_HOST}:${port}/${dbName}`;
-
-		const properties: ResourceProperties = {
-			url,
-			host: DEFAULT_HOST,
-			port,
-			user,
-			password,
-			name: dbName,
-		};
-
-		const state: ResourceState = {
-			type: "postgres",
-			name: resourceName,
-			brewService: "postgresql",
-			port,
-			dbName,
-			user,
-			password,
-		};
-
-		return { properties, state };
-	}
-
-	async destroy(state: ResourceState): Promise<void> {
-		// Security: state values come from disk (state.json) — validate before SQL interpolation
-		if (state.dbName && SAFE_IDENTIFIER.test(state.dbName)) {
-			await shell(`dropdb -h ${DEFAULT_HOST} --if-exists ${state.dbName}`, {
-				allowFailure: true,
-			});
-		}
-		if (state.user && SAFE_IDENTIFIER.test(state.user)) {
-			await shell(
-				`psql -h ${DEFAULT_HOST} postgres -c "DROP ROLE IF EXISTS ${state.user};"`,
-				{ allowFailure: true },
-			);
-		}
-		// Don't stop the brew service — it's shared
-	}
-}

package/src/resources/redis.ts

@@ -1,58 +0,0 @@
-/**
- * Redis resource provisioner via Homebrew.
- */
-
-import type { NormalizedRequirement } from "@launchfile/sdk";
-import { shell, shellOk } from "../shell.js";
-import type { ResourceState } from "../state.js";
-import type { ProvisionOpts, ResourceProperties, ResourceProvisioner } from "./types.js";
-
-const DEFAULT_PORT = 6379;
-const DEFAULT_HOST = "localhost";
-
-export class RedisProvisioner implements ResourceProvisioner {
-	readonly type = "redis";
-
-	async isRunning(): Promise<boolean> {
-		return shellOk("redis-cli ping");
-	}
-
-	async provision(
-		req: NormalizedRequirement,
-		_opts: ProvisionOpts,
-		_existingState?: ResourceState,
-	): Promise<{ properties: ResourceProperties; state: ResourceState }> {
-		if (!(await this.isRunning())) {
-			console.log("  Starting Redis via brew...");
-			const started = await shellOk("brew services start redis");
-			if (!started) {
-				await shell("brew install redis");
-				await shell("brew services start redis");
-			}
-		}
-
-		const port = DEFAULT_PORT;
-		const resourceName = req.name ?? req.type;
-
-		const properties: ResourceProperties = {
-			url: `redis://${DEFAULT_HOST}:${port}/0`,
-			host: DEFAULT_HOST,
-			port,
-			password: "",
-		};
-
-		const state: ResourceState = {
-			type: "redis",
-			name: resourceName,
-			brewService: "redis",
-			port,
-		};
-
-		return { properties, state };
-	}
-
-	async destroy(_state: ResourceState): Promise<void> {
-		// Redis is shared, don't stop the service
-		// Could flush a specific database prefix, but not worth the complexity
-	}
-}

package/src/resources/sqlite.ts

@@ -1,52 +0,0 @@
-/**
- * SQLite resource provisioner — just creates a directory for the DB file.
- */
-
-import { mkdir } from "node:fs/promises";
-import { join } from "node:path";
-import type { NormalizedRequirement } from "@launchfile/sdk";
-import type { ResourceState } from "../state.js";
-import type { ProvisionOpts, ResourceProperties, ResourceProvisioner } from "./types.js";
-
-export class SqliteProvisioner implements ResourceProvisioner {
-	readonly type = "sqlite";
-
-	async isRunning(): Promise<boolean> {
-		return true; // SQLite is always available
-	}
-
-	async provision(
-		req: NormalizedRequirement,
-		opts: ProvisionOpts,
-	): Promise<{ properties: ResourceProperties; state: ResourceState }> {
-		const resourceName = req.name ?? req.type;
-		const safeName = opts.appName.replace(/-/g, "_");
-		const dataDir = join(opts.projectDir, ".launchfile", "data", "sqlite");
-		await mkdir(dataDir, { recursive: true });
-
-		const dbPath = join(dataDir, `${safeName}.db`);
-
-		const properties: ResourceProperties = {
-			url: `sqlite://${dbPath}`,
-			host: "",
-			port: 0,
-			path: dbPath,
-		};
-
-		const state: ResourceState = {
-			type: "sqlite",
-			name: resourceName,
-			port: 0,
-			dbName: dbPath,
-		};
-
-		return { properties, state };
-	}
-
-	async destroy(state: ResourceState): Promise<void> {
-		if (state.dbName) {
-			const { rm } = await import("node:fs/promises");
-			await rm(state.dbName, { force: true });
-		}
-	}
-}

package/src/resources/types.ts

@@ -1,47 +0,0 @@
-/**
- * Resource provisioner interface.
- *
- * Each resource type (postgres, redis, etc.) implements this interface
- * to handle install, start, database creation, and teardown.
- */
-
-import type { NormalizedRequirement } from "@launchfile/sdk";
-import type { ResourceState } from "../state.js";
-
-/** Properties that a provisioned resource exposes for expression resolution */
-export interface ResourceProperties {
-	url: string;
-	host: string;
-	port: number;
-	user?: string;
-	password?: string;
-	name?: string;
-	path?: string;
-	access_key?: string;
-	secret_key?: string;
-	bucket?: string;
-	region?: string;
-	[key: string]: string | number | undefined;
-}
-
-export interface ProvisionOpts {
-	appName: string;
-	projectDir: string;
-}
-
-export interface ResourceProvisioner {
-	readonly type: string;
-
-	/** Check if the service is already running */
-	isRunning(): Promise<boolean>;
-
-	/** Ensure the service is installed and running, create app-specific resources */
-	provision(
-		req: NormalizedRequirement,
-		opts: ProvisionOpts,
-		existingState?: ResourceState,
-	): Promise<{ properties: ResourceProperties; state: ResourceState }>;
-
-	/** Drop app-specific databases/users (destroy mode) */
-	destroy(state: ResourceState): Promise<void>;
-}

package/src/runtimes/bun.ts

@@ -1,25 +0,0 @@
-/**
- * Bun runtime installer via Homebrew.
- */
-
-import { shellOk, shell } from "../shell.js";
-import type { RuntimeInstaller } from "./types.js";
-
-export class BunInstaller implements RuntimeInstaller {
-	readonly runtime = "bun";
-
-	async detectVersion(_projectDir: string): Promise<string | undefined> {
-		// Bun doesn't have a standard version file yet; use whatever is installed
-		return undefined;
-	}
-
-	async install(_version: string): Promise<void> {
-		if (!(await shellOk("which bun"))) {
-			await shell("brew install bun");
-		}
-	}
-
-	async shellEnv(_version: string): Promise<Record<string, string>> {
-		return {};
-	}
-}

package/src/runtimes/index.ts

@@ -1,24 +0,0 @@
-/**
- * Runtime installer registry.
- */
-
-import type { Runtime } from "@launchfile/sdk";
-import type { RuntimeInstaller } from "./types.js";
-import { NodeInstaller } from "./node.js";
-import { BunInstaller } from "./bun.js";
-import { RubyInstaller } from "./ruby.js";
-import { PythonInstaller } from "./python.js";
-
-const installers: Partial<Record<Runtime, RuntimeInstaller>> = {
-	node: new NodeInstaller(),
-	bun: new BunInstaller(),
-	ruby: new RubyInstaller(),
-	python: new PythonInstaller(),
-	// go, rust, etc. can be added later
-};
-
-export function getRuntimeInstaller(runtime: Runtime): RuntimeInstaller | undefined {
-	return installers[runtime];
-}
-
-export type { RuntimeInstaller } from "./types.js";

package/src/runtimes/node.ts

@@ -1,71 +0,0 @@
-/**
- * Node.js runtime installer via fnm (or nvm fallback).
- */
-
-import { readFile } from "node:fs/promises";
-import { join } from "node:path";
-import { shell, shellOk } from "../shell.js";
-import type { RuntimeInstaller } from "./types.js";
-
-export class NodeInstaller implements RuntimeInstaller {
-	readonly runtime = "node";
-
-	async detectVersion(projectDir: string): Promise<string | undefined> {
-		// Priority: .nvmrc > .node-version > package.json engines.node
-		for (const file of [".nvmrc", ".node-version"]) {
-			try {
-				const content = await readFile(join(projectDir, file), "utf8");
-				const version = content.trim();
-				if (version) return version;
-			} catch {
-				// File doesn't exist
-			}
-		}
-
-		try {
-			const pkg = JSON.parse(await readFile(join(projectDir, "package.json"), "utf8"));
-			if (pkg.engines?.node) return pkg.engines.node;
-		} catch {
-			// No package.json
-		}
-
-		return undefined;
-	}
-
-	async install(version: string): Promise<void> {
-		// Prefer fnm (faster), fall back to nvm
-		if (await shellOk("which fnm")) {
-			await shell(`fnm install ${version}`);
-		} else if (await shellOk("which nvm")) {
-			await shell(`nvm install ${version}`);
-		} else {
-			console.log("  Installing fnm via brew...");
-			await shell("brew install fnm");
-			await shell(`fnm install ${version}`);
-		}
-	}
-
-	async shellEnv(_version: string): Promise<Record<string, string>> {
-		if (await shellOk("which fnm")) {
-			try {
-				const result = await shell("fnm env --shell bash", { silent: true });
-				return parseShellEnv(result.stdout);
-			} catch {
-				return {};
-			}
-		}
-		return {};
-	}
-}
-
-/** Parse `export KEY="VALUE"` lines from fnm env output */
-function parseShellEnv(output: string): Record<string, string> {
-	const env: Record<string, string> = {};
-	for (const line of output.split("\n")) {
-		const match = /^export\s+(\w+)="?([^"]*)"?/.exec(line);
-		if (match) {
-			env[match[1]!] = match[2]!;
-		}
-	}
-	return env;
-}

package/src/runtimes/python.ts

@@ -1,42 +0,0 @@
-/**
- * Python runtime installer via pyenv.
- */
-
-import { readFile } from "node:fs/promises";
-import { join } from "node:path";
-import { shell, shellOk } from "../shell.js";
-import type { RuntimeInstaller } from "./types.js";
-
-export class PythonInstaller implements RuntimeInstaller {
-	readonly runtime = "python";
-
-	async detectVersion(projectDir: string): Promise<string | undefined> {
-		try {
-			const content = await readFile(join(projectDir, ".python-version"), "utf8");
-			return content.trim() || undefined;
-		} catch {
-			return undefined;
-		}
-	}
-
-	async install(version: string): Promise<void> {
-		if (!(await shellOk("which pyenv"))) {
-			await shell("brew install pyenv");
-		}
-		if (!(await shellOk(`pyenv versions --bare | grep -q "^${version}$"`))) {
-			await shell(`pyenv install ${version}`);
-		}
-		await shell(`pyenv local ${version}`);
-	}
-
-	async shellEnv(_version: string): Promise<Record<string, string>> {
-		if (await shellOk("which pyenv")) {
-			const result = await shell("pyenv root", { silent: true, allowFailure: true });
-			if (result.exitCode === 0) {
-				const root = result.stdout.trim();
-				return { PATH: `${root}/shims:${process.env.PATH ?? ""}` };
-			}
-		}
-		return {};
-	}
-}

package/src/runtimes/ruby.ts

@@ -1,55 +0,0 @@
-/**
- * Ruby runtime installer via rbenv.
- */
-
-import { readFile } from "node:fs/promises";
-import { join } from "node:path";
-import { shell, shellOk } from "../shell.js";
-import type { RuntimeInstaller } from "./types.js";
-
-export class RubyInstaller implements RuntimeInstaller {
-	readonly runtime = "ruby";
-
-	async detectVersion(projectDir: string): Promise<string | undefined> {
-		try {
-			const content = await readFile(join(projectDir, ".ruby-version"), "utf8");
-			return content.trim() || undefined;
-		} catch {
-			return undefined;
-		}
-	}
-
-	async install(version: string): Promise<void> {
-		if (!(await shellOk("which rbenv"))) {
-			await shell("brew install rbenv ruby-build");
-		}
-		const installed = await shellOk(`rbenv versions --bare | grep -q "^${version}$"`);
-		if (!installed) {
-			await shell(`rbenv install ${version}`);
-		}
-		await shell(`rbenv local ${version}`);
-	}
-
-	async shellEnv(_version: string): Promise<Record<string, string>> {
-		if (await shellOk("which rbenv")) {
-			try {
-				const result = await shell("rbenv init - bash", { silent: true });
-				return parseRbenvEnv(result.stdout);
-			} catch {
-				return {};
-			}
-		}
-		return {};
-	}
-}
-
-function parseRbenvEnv(output: string): Record<string, string> {
-	const env: Record<string, string> = {};
-	for (const line of output.split("\n")) {
-		const match = /^export\s+(\w+)="?([^"]*)"?/.exec(line);
-		if (match) {
-			env[match[1]!] = match[2]!;
-		}
-	}
-	return env;
-}

package/src/runtimes/types.ts

@@ -1,16 +0,0 @@
-/**
- * Runtime installer interface.
- */
-
-export interface RuntimeInstaller {
-	readonly runtime: string;
-
-	/** Detect the version from project files (.nvmrc, .ruby-version, etc.) */
-	detectVersion(projectDir: string): Promise<string | undefined>;
-
-	/** Ensure the runtime version is installed */
-	install(version: string): Promise<void>;
-
-	/** Get any shell env modifications needed (PATH, etc.) */
-	shellEnv(version: string): Promise<Record<string, string>>;
-}

package/src/secret-generator.ts

@@ -1,32 +0,0 @@
-/**
- * Secret and value generators for Launchfile env vars.
- */
-
-import { randomBytes, randomUUID } from "node:crypto";
-import type { Generator } from "@launchfile/sdk";
-import { allocatePort } from "./port-allocator.js";
-
-/**
- * Generate a value based on the generator type.
- */
-export async function generateValue(
-	generator: Generator,
-	existingPorts?: Set<number>,
-): Promise<string> {
-	switch (generator) {
-		case "secret":
-			return randomBytes(32).toString("base64url");
-		case "uuid":
-			return randomUUID();
-		case "port": {
-			const port = await allocatePort(`generated-${Date.now()}`, existingPorts ?? new Set());
-			return String(port);
-		}
-	}
-}
-
-/** Generate a password suitable for database users */
-export function generatePassword(): string {
-	// URL-safe so it can go in connection strings without encoding
-	return randomBytes(24).toString("base64url");
-}