@ovrdev/cli 0.1.0-alpha.16

package/dist/plugins/supabase.js

@@ -0,0 +1,356 @@
+import {
+  CONFIG_DIR
+} from "../index-bj59btcy.js";
+
+// src/plugins/supabase.ts
+import { execFile, spawn } from "node:child_process";
+import { existsSync, mkdirSync, readdirSync, readFileSync, rmSync, symlinkSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+var renderVal = (v) => typeof v === "string" ? JSON.stringify(v) : String(v);
+function patchSupabaseConfig(text, patch) {
+  const pending = {};
+  for (const [sec, kv] of Object.entries({ "": { project_id: patch.projectId }, ...patch.set ?? {} })) {
+    pending[sec] = { ...pending[sec] ?? {}, ...kv };
+  }
+  const urls = patch.redirectUrls ?? [];
+  const retarget = (line) => patch.apiPort && /^\s*redirect_uri\s*=/.test(line) ? line.replace(/http:\/\/localhost:\d+\//, `http://localhost:${patch.apiPort}/`) : line;
+  const out = [];
+  const lines = text.split(`
+`);
+  let cur = "";
+  let inUrls = false;
+  let urlsSeen = [];
+  let urlsIndent = "  ";
+  let authHadUrls = false;
+  const flush = (sec) => {
+    for (const [k, v] of Object.entries(pending[sec] ?? {}))
+      out.push(`${k} = ${renderVal(v)}`);
+    delete pending[sec];
+    if (sec === "auth" && !authHadUrls && urls.length) {
+      out.push("additional_redirect_urls = [", ...urls.map((u) => `${urlsIndent}${JSON.stringify(u)},`), "]");
+    }
+  };
+  for (const raw of lines) {
+    const line = retarget(raw);
+    if (inUrls) {
+      const entry = /"([^"]+)"/.exec(line);
+      if (entry)
+        urlsSeen.push(entry[1]);
+      if (line.includes("]")) {
+        inUrls = false;
+        for (const u of urls) {
+          if (!urlsSeen.includes(u))
+            out.push(`${urlsIndent}${JSON.stringify(u)},`);
+        }
+        out.push(line);
+        continue;
+      }
+      out.push(line);
+      continue;
+    }
+    const header = /^\s*\[([^\]]+)\]\s*$/.exec(line);
+    if (header) {
+      flush(cur);
+      cur = header[1];
+      out.push(line);
+      continue;
+    }
+    const kv = /^(\s*)([A-Za-z_][A-Za-z0-9_]*)\s*=/.exec(line);
+    if (kv && pending[cur] && kv[2] in pending[cur]) {
+      out.push(`${kv[1]}${kv[2]} = ${renderVal(pending[cur][kv[2]])}`);
+      delete pending[cur][kv[2]];
+      continue;
+    }
+    if (kv && cur === "auth" && kv[2] === "additional_redirect_urls" && urls.length) {
+      authHadUrls = true;
+      if (line.includes("]")) {
+        const seen = [...line.matchAll(/"([^"]+)"/g)].map((m) => m[1]);
+        const merged = [...seen, ...urls.filter((u) => !seen.includes(u))];
+        out.push(`${kv[1]}additional_redirect_urls = [${merged.map((u) => JSON.stringify(u)).join(", ")}]`);
+        continue;
+      }
+      inUrls = true;
+      urlsSeen = [];
+      urlsIndent = "  ";
+      out.push(line);
+      continue;
+    }
+    out.push(line);
+  }
+  flush(cur);
+  for (const [sec, kv] of Object.entries(pending)) {
+    const entries = Object.entries(kv);
+    if (!entries.length)
+      continue;
+    if (sec)
+      out.push("", `[${sec}]`);
+    for (const [k, v] of entries)
+      out.push(`${k} = ${renderVal(v)}`);
+  }
+  return out.join(`
+`);
+}
+var DEFAULT_CONFIG = `project_id = "ovr"
+
+[api]
+enabled = true
+port = 54321
+
+[db]
+port = 54322
+shadow_port = 54320
+major_version = 17
+
+[db.seed]
+enabled = false
+
+[realtime]
+enabled = true
+
+[storage]
+enabled = true
+
+[auth]
+enabled = true
+site_url = "http://localhost:3000"
+
+[studio]
+enabled = false
+
+[inbucket]
+enabled = false
+
+[analytics]
+enabled = false
+`;
+function statusExports(s) {
+  const out = {};
+  const put = (k, v) => {
+    if (v)
+      out[k] = v;
+  };
+  put("url", s.API_URL);
+  put("publishableKey", s.PUBLISHABLE_KEY);
+  put("secretKey", s.SECRET_KEY);
+  put("dbUrl", s.DB_URL);
+  put("prismaUrl", s.DB_URL);
+  put("graphqlUrl", s.GRAPHQL_URL);
+  put("jwtSecret", s.JWT_SECRET);
+  return out;
+}
+function migrationNeeds(sql) {
+  return {
+    storage: /\bstorage"?\."?\w/.test(sql),
+    realtime: /supabase_realtime_admin|\brealtime"?\."?\w/.test(sql)
+  };
+}
+var run = (cmd, args, opts = {}) => new Promise((resolve) => {
+  execFile(cmd, args, { ...opts, maxBuffer: 16 * 1024 * 1024 }, (err, stdout, stderr) => {
+    resolve({ code: err ? err.code ?? 1 : 0, stdout, stderr });
+  });
+});
+var relink = (target, link) => {
+  rmSync(link, { force: true, recursive: true });
+  symlinkSync(target, link);
+};
+var supabasePlugin = {
+  name: "supabase",
+  async start(spec, ctx) {
+    const { workspace, repo, service, dir } = ctx.scope;
+    const projectId = `ovr-${workspace}-${repo}`.replace(/[^A-Za-z0-9_-]/g, "-");
+    const workdir = join(CONFIG_DIR, "workdirs", `${workspace}.${repo}.${service}`);
+    mkdirSync(join(workdir, "supabase"), { recursive: true });
+    const services = {
+      realtime: true,
+      storage: true,
+      studio: false,
+      inbucket: false,
+      analytics: false,
+      ...spec.services
+    };
+    const repoSupa = join(dir, "supabase");
+    const migrationsDir = join(repoSupa, "migrations");
+    if ((!services.storage || !services.realtime) && existsSync(migrationsDir)) {
+      const sql = readdirSync(migrationsDir).filter((f) => f.endsWith(".sql")).map((f) => readFileSync(join(migrationsDir, f), "utf8")).join(`
+`);
+      const needs = migrationNeeds(sql);
+      for (const svc of ["storage", "realtime"]) {
+        if (!services[svc] && needs[svc]) {
+          throw new Error(`supabase.stack: migrations reference ${svc} (tables/roles) but services.${svc} is false — enable it or the replay fails`);
+        }
+      }
+    }
+    const apiPort = spec.ports?.api ?? await ctx.allocPort("api");
+    const dbPort = spec.ports?.db ?? await ctx.allocPort("db");
+    const shadowPort = await ctx.allocPort("shadow_db");
+    const base = existsSync(join(repoSupa, "config.toml")) ? readFileSync(join(repoSupa, "config.toml"), "utf8") : DEFAULT_CONFIG;
+    const set = {
+      api: { port: apiPort },
+      db: { port: dbPort, shadow_port: shadowPort },
+      studio: { enabled: services.studio },
+      inbucket: { enabled: services.inbucket },
+      analytics: { enabled: services.analytics },
+      realtime: { enabled: services.realtime },
+      storage: { enabled: services.storage }
+    };
+    if (/\[db\.pooler\][^[]*enabled\s*=\s*true/.test(base))
+      set["db.pooler"] = { port: await ctx.allocPort("pooler") };
+    if (!/\[edge_runtime\][^[]*enabled\s*=\s*false/.test(base)) {
+      set.edge_runtime = { inspector_port: await ctx.allocPort("edge_inspector") };
+    }
+    for (const ui of ["studio", "inbucket", "analytics"]) {
+      if (services[ui])
+        set[ui] = { enabled: true, port: await ctx.allocPort(ui) };
+    }
+    writeFileSync(join(workdir, "supabase", "config.toml"), patchSupabaseConfig(base, { projectId, set, redirectUrls: spec.redirectUrls, apiPort }));
+    for (const item of ["migrations", "seed.sql", "functions", "roles.sql"]) {
+      if (existsSync(join(repoSupa, item)))
+        relink(join(repoSupa, item), join(workdir, "supabase", item));
+    }
+    const boot = ctx.sub("boot");
+    ctx.log(`▶ supabase start  (:${apiPort} api, :${dbPort} db — workdir ${workdir})`);
+    const bootOnce = () => new Promise((resolve) => {
+      let out = "";
+      const child = spawn("supabase", ["start", "--workdir", workdir], {
+        cwd: dir,
+        env: ctx.env,
+        stdio: ["ignore", "pipe", "pipe"]
+      });
+      child.stdout.on("data", (d) => {
+        out += String(d);
+      });
+      child.stderr.on("data", (d) => {
+        out += String(d);
+      });
+      boot.pipe(child.stdout);
+      boot.pipe(child.stderr);
+      child.on("exit", (code) => resolve({ code: code ?? 1, out }));
+      child.on("error", () => resolve({ code: 127, out }));
+    });
+    let booted = await bootOnce();
+    if (booted.code !== 0 && /already running/i.test(booted.out)) {
+      boot.log("⟳ stale stack state — supabase stop, retrying once");
+      await run("supabase", ["stop", "--workdir", workdir], { env: ctx.env });
+      booted = await bootOnce();
+    }
+    if (booted.code !== 0) {
+      boot.setStatus("failed");
+      throw new Error(`supabase start exited ${booted.code} (see the boot stream)`);
+    }
+    boot.setStatus("exited");
+    const status = await run("supabase", ["status", "--workdir", workdir, "-o", "json"], { env: ctx.env });
+    let vars = {};
+    try {
+      vars = JSON.parse(status.stdout.slice(status.stdout.indexOf("{"), status.stdout.lastIndexOf("}") + 1));
+    } catch {
+      ctx.log(`⚠ supabase status unparsable (exit ${status.code})`);
+    }
+    const followers = [];
+    const ps = await run("docker", ["ps", "--filter", `name=${projectId}`, "--format", "{{.Names}}"]);
+    for (const name of ps.stdout.split(`
+`).filter(Boolean)) {
+      const short = name.replace(/^supabase_/, "").replace(new RegExp(`_${projectId}$`), "");
+      const sub = ctx.sub(short);
+      const f = spawn("docker", ["logs", "-f", "--tail", "5", name], { stdio: ["ignore", "pipe", "pipe"] });
+      sub.pipe(f.stdout);
+      sub.pipe(f.stderr);
+      f.on("exit", () => sub.setStatus("exited"));
+      followers.push(f);
+    }
+    const actions = [
+      {
+        id: "psql",
+        label: "psql (postgres)",
+        command: "docker",
+        args: ["exec", "-it", `supabase_db_${projectId}`, "psql", "-U", "postgres"],
+        cwd: dir,
+        title: "psql"
+      },
+      {
+        id: "supabase-status",
+        label: "supabase status",
+        command: "supabase",
+        args: ["status", "--workdir", workdir],
+        cwd: dir,
+        title: "status"
+      }
+    ];
+    let resolveExited = () => {};
+    const exited = new Promise((r) => {
+      resolveExited = r;
+    });
+    ctx.log(`✓ supabase up  (${vars.API_URL ?? `http://127.0.0.1:${apiPort}`})`);
+    if (spec.onReady)
+      await spec.onReady();
+    return {
+      exports: {
+        ...statusExports(vars),
+        host: "localhost",
+        port: String(apiPort),
+        ...spec.exports?.({ status: vars, ports: { api: apiPort, db: dbPort } })
+      },
+      info: `:${apiPort}`,
+      actions,
+      ready: spec.ready ? spec.ready({ status: vars, ports: { api: apiPort, db: dbPort } }) : Promise.resolve(),
+      exited,
+      stop: async () => {
+        for (const f of followers)
+          f.kill("SIGTERM");
+        await run("supabase", ["stop", "--workdir", workdir]);
+        resolveExited();
+      }
+    };
+  }
+};
+var kinds = {
+  stack: (opts = {}) => ({
+    plugin: supabasePlugin,
+    spec: opts
+  })
+};
+function supabase() {
+  let scopeDir = "/";
+  let dockerUp = true;
+  return {
+    name: "supabase",
+    kinds,
+    provide(ctx) {
+      scopeDir = ctx.scope.dir;
+      return {};
+    },
+    actions() {
+      return dockerUp ? [] : [
+        {
+          id: "docker-start",
+          label: "docker: start Docker Desktop",
+          command: "open",
+          args: ["-a", "Docker"],
+          cwd: scopeDir,
+          title: "docker"
+        }
+      ];
+    },
+    async diagnose() {
+      const out = [];
+      const cli = await run("supabase", ["--version"]);
+      out.push(cli.code === 0 ? { id: "cli", status: "ok", message: `supabase CLI ${cli.stdout.trim()}` } : { id: "cli", status: "error", message: "supabase CLI not found — brew install supabase/tap/supabase" });
+      const docker = await run("docker", ["info", "--format", "{{.ServerVersion}}"]);
+      dockerUp = docker.code === 0;
+      out.push(dockerUp ? { id: "docker", status: "ok", message: `docker daemon ${docker.stdout.trim()}` } : {
+        id: "docker",
+        status: "error",
+        message: "docker daemon not running — the stack can't start",
+        fix: "docker-start"
+      });
+      return out;
+    }
+  };
+}
+export {
+  supabasePlugin,
+  supabase,
+  statusExports,
+  patchSupabaseConfig,
+  migrationNeeds,
+  DEFAULT_CONFIG
+};

package/dist/util/dotenv.d.ts

@@ -0,0 +1,2 @@
+/** Minimal dotenv parse (KEY=VALUE, optional quotes, # comments). Shared by env sources. */
+export declare function parseDotenv(text: string): Record<string, string>;

package/dist/util/random.d.ts

@@ -0,0 +1,11 @@
+/** A random string of `length` chars from `alphabet` (default: alphanumeric), unbiased. */
+export declare function randomString(length?: number, alphabet?: string): string;
+/**
+ * A random password: alphanumeric plus a few shell/URL-safe symbols by default. `symbols:false`
+ * keeps it strictly alphanumeric (for places that choke on punctuation).
+ */
+export declare function randomPassword(length?: number, opts?: {
+    symbols?: boolean;
+}): string;
+/** A hex token (e.g. a webhook secret) — `bytes` random bytes, hex-encoded (2× length). */
+export declare function randomHex(bytes?: number): string;

package/dist/util/ready.d.ts

@@ -0,0 +1,18 @@
+export type WaitOptions = {
+    /** Give up (reject) after this long. Default 60s. */
+    timeoutMs?: number;
+    /** Delay between attempts. Default 500ms. */
+    intervalMs?: number;
+    /** Label for the timeout error. */
+    label?: string;
+};
+/** Poll until `probe()` resolves truthy, or reject at the deadline. */
+export declare function waitUntil(probe: () => Promise<boolean> | boolean, opts?: WaitOptions): Promise<void>;
+/** Ready when `url` answers (any status < 500 by default, or an exact `status`). */
+export declare function waitHttp(url: string, opts?: WaitOptions & {
+    status?: number;
+}): Promise<void>;
+/** Ready when a TCP connection to `host:port` succeeds. */
+export declare function waitTcp(port: number, opts?: WaitOptions & {
+    host?: string;
+}): Promise<void>;

package/package.json

@@ -0,0 +1,45 @@
+{
+  "name": "@ovrdev/cli",
+  "version": "0.1.0-alpha.16",
+  "description": "Override — the dev control plane: environments, repos, services, tasks",
+  "type": "module",
+  "bin": {
+    "ovr": "dist/cli/index.js"
+  },
+  "files": [
+    "dist",
+    "scripts/postinstall.mjs"
+  ],
+  "exports": {
+    ".": {
+      "types": "./dist/core/core.d.ts",
+      "default": "./dist/core/core.js"
+    },
+    "./plugin/shell": {
+      "types": "./dist/plugins/shell.d.ts",
+      "default": "./dist/plugins/shell.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "engines": {
+    "node": ">=22.6"
+  },
+  "dependencies": {
+    "@clack/prompts": "^1.6.0",
+    "@xterm/headless": "^6.0.0",
+    "ink": "^7.1.0",
+    "node-pty": "^1.1.0",
+    "react": "^19.2.7"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.0",
+    "@types/react": "^19.2.17",
+    "typescript": "^5.7.2"
+  },
+  "scripts": {
+    "build": "bun build src/cli/index.ts src/core/core.ts src/plugins/shell.ts --root src --outdir=dist --target=node --splitting --format=esm --packages=external && tsc -p tsconfig.build.json && node scripts/fix-dts.mjs && bun build packages/plugin-portless/src/index.ts --outdir=packages/plugin-portless/dist --target=node --format=esm --packages=external && tsc -p packages/plugin-portless/tsconfig.build.json && node scripts/fix-dts.mjs packages/plugin-portless/dist && bun build packages/plugin-docker/src/index.ts --outdir=packages/plugin-docker/dist --target=node --format=esm --packages=external && tsc -p packages/plugin-docker/tsconfig.build.json && node scripts/fix-dts.mjs packages/plugin-docker/dist && bun build packages/plugin-infisical/src/index.ts --outdir=packages/plugin-infisical/dist --target=node --format=esm --packages=external && tsc -p packages/plugin-infisical/tsconfig.build.json && node scripts/fix-dts.mjs packages/plugin-infisical/dist && bun build packages/plugin-js/src/index.ts --outdir=packages/plugin-js/dist --target=node --format=esm --packages=external && tsc -p packages/plugin-js/tsconfig.build.json && node scripts/fix-dts.mjs packages/plugin-js/dist && bun build packages/plugin-postgres/src/index.ts --outdir=packages/plugin-postgres/dist --target=node --format=esm --packages=external && bun build packages/plugin-postgres/src/sql-runner.ts --outdir=packages/plugin-postgres/dist --target=node --format=esm && tsc -p packages/plugin-postgres/tsconfig.build.json && node scripts/fix-dts.mjs packages/plugin-postgres/dist && bun build packages/plugin-supabase/src/index.ts --outdir=packages/plugin-supabase/dist --target=node --format=esm --packages=external && tsc -p packages/plugin-supabase/tsconfig.build.json && node scripts/fix-dts.mjs packages/plugin-supabase/dist",
+    "dev": "bun build src/cli/index.ts src/core/core.ts src/plugins/shell.ts --root src --outdir=dist --target=node --splitting --format=esm --packages=external --watch",
+    "postinstall": "node scripts/postinstall.mjs",
+    "test": "bun run build && bun test"
+  }
+}

package/scripts/postinstall.mjs

@@ -0,0 +1,59 @@
+// node-pty ships prebuilt binaries with a separate `spawn-helper`, and the prebuild
+// downloader can drop its executable bit — which surfaces later as a cryptic
+// "posix_spawnp failed" the moment ovr opens a PTY. Re-arm it across EVERY install layout:
+//   • npm / yarn (flat/hoisted):  <nm>/node-pty/prebuilds/<platform>/spawn-helper
+//   • pnpm:                       <nm>/.pnpm/node-pty@*/node_modules/node-pty/prebuilds/…
+//   • nested under ovr:           <ovr>/node_modules/node-pty/prebuilds/…
+// (The earlier version only checked the pnpm layout, so npm installs stayed broken.)
+import { chmodSync, existsSync, readdirSync } from "node:fs"
+import { dirname, join } from "node:path"
+
+const ovrRoot = join(import.meta.dirname, "..") // this file lives at <ovr>/scripts/
+
+/** Nearest ancestor named `node_modules` (the consumer's root when ovr is a dependency). */
+function nearestNodeModules(dir) {
+	let d = dir
+	for (let i = 0; i < 12; i++) {
+		if (d.endsWith("node_modules")) return d
+		const up = dirname(d)
+		if (up === d) return null
+		d = up
+	}
+	return null
+}
+
+// Where node_modules trees might live: the consumer's (ovr-as-dep) and ovr's own (dev/nested).
+const nmRoots = new Set()
+const near = nearestNodeModules(ovrRoot)
+if (near) nmRoots.add(near)
+nmRoots.add(join(ovrRoot, "node_modules"))
+
+// Every node-pty install dir reachable from those roots.
+const ptyDirs = []
+for (const nm of nmRoots) {
+	ptyDirs.push(join(nm, "node-pty")) // flat / hoisted / dev-checkout top level
+	const pnpm = join(nm, ".pnpm")
+	if (existsSync(pnpm)) {
+		for (const p of readdirSync(pnpm)) {
+			if (p.startsWith("node-pty@")) ptyDirs.push(join(pnpm, p, "node_modules", "node-pty"))
+		}
+	}
+}
+
+let armed = 0
+for (const d of ptyDirs) {
+	const prebuilds = join(d, "prebuilds")
+	if (!existsSync(prebuilds)) continue
+	for (const platform of readdirSync(prebuilds)) {
+		const helper = join(prebuilds, platform, "spawn-helper")
+		if (!existsSync(helper)) continue
+		try {
+			chmodSync(helper, 0o755)
+			armed++
+		} catch {
+			// read-only fs / already fine — best effort
+		}
+	}
+}
+
+if (process.env.OVR_POSTINSTALL_DEBUG) console.error(`ovr postinstall: re-armed ${armed} spawn-helper(s)`)