@poncho-ai/cli 0.38.1 → 0.40.0

package/src/scaffolding.ts

@@ -25,7 +25,8 @@ export const normalizeDeployTarget = (target: string): DeployScaffoldTarget => {
     normalized === "vercel" ||
     normalized === "docker" ||
     normalized === "lambda" ||
-    normalized === "fly"
+    normalized === "fly" ||
+    normalized === "railway"
   ) {
     return normalized;
   }
@@ -223,6 +224,25 @@ const port = Number.parseInt(process.env.PORT ?? "3000", 10);
 await startDevServer(Number.isNaN(port) ? 3000 : port, { workingDir: process.cwd() });
 `;
 
+  let browserEnabled = false;
+  try {
+    const cfg = await loadPonchoConfig(projectDir);
+    browserEnabled = !!cfg?.browser;
+  } catch { /* best-effort */ }
+
+  // Chromium runtime libs for Playwright when `browser: true`. Built as a
+  // single apt-get layer so it can be inserted verbatim into Dockerfiles
+  // for docker/railway/fly targets and stripped out otherwise.
+  const chromiumLibsLayer = browserEnabled
+    ? `RUN apt-get update && apt-get install -y --no-install-recommends \\
+    ca-certificates fonts-liberation libnss3 libatk1.0-0 libatk-bridge2.0-0 \\
+    libcups2 libdrm2 libxkbcommon0 libxcomposite1 libxdamage1 libxfixes3 \\
+    libxrandr2 libgbm1 libpango-1.0-0 libcairo2 libasound2 \\
+  && rm -rf /var/lib/apt/lists/*
+
+`
+    : "";
+
   if (target === "vercel") {
     // Build @vercel/nft trace hints for packages that are dynamically loaded
     // at runtime.  Bare `import("pkg")` with a string literal is enough for
@@ -231,12 +251,6 @@ await startDevServer(Number.isNaN(port) ? 3000 : port, { workingDir: process.cwd
     // an optional package isn't installed.
     const traceHints: string[] = [];
 
-    let browserEnabled = false;
-    try {
-      const cfg = await loadPonchoConfig(projectDir);
-      browserEnabled = !!cfg?.browser;
-    } catch { /* best-effort */ }
-
     if (browserEnabled) {
       traceHints.push(`import("@poncho-ai/browser").catch(() => {});`);
 
@@ -346,16 +360,19 @@ export default async function handler(req, res) {
     const dockerfilePath = resolve(projectDir, "Dockerfile");
     await writeScaffoldFile(
       dockerfilePath,
-      `FROM node:20-slim
+      `FROM node:22-slim
 WORKDIR /app
-COPY package.json package.json
+
+${chromiumLibsLayer}COPY package.json package.json
+RUN npm install --omit=dev
+
 COPY AGENT.md AGENT.md
 COPY poncho.config.js poncho.config.js
 COPY skills skills
 COPY tests tests
 COPY .env.example .env.example
-RUN corepack enable && npm install -g @poncho-ai/cli@^${cliVersion}
 COPY server.js server.js
+
 EXPOSE 3000
 CMD ["node","server.js"]
 `,
@@ -389,6 +406,48 @@ export const handler = async (event = {}) => {
 //
 // Reminders: Create a CloudWatch Events rule that triggers GET /api/reminders/check
 // every 10 minutes (or your preferred interval) with Authorization: Bearer <PONCHO_AUTH_TOKEN>.
+`,
+      { force: options?.force, writtenPaths, baseDir: projectDir },
+    );
+  } else if (target === "railway") {
+    await writeScaffoldFile(
+      resolve(projectDir, "Dockerfile"),
+      `FROM node:22-slim
+WORKDIR /app
+
+${chromiumLibsLayer}COPY package.json package.json
+RUN npm install --omit=dev
+
+COPY AGENT.md AGENT.md
+COPY poncho.config.js poncho.config.js
+COPY skills skills
+COPY tests tests
+COPY .env.example .env.example
+COPY server.js server.js
+
+EXPOSE 3000
+CMD ["node","server.js"]
+`,
+      { force: options?.force, writtenPaths, baseDir: projectDir },
+    );
+    await writeScaffoldFile(resolve(projectDir, "server.js"), sharedServerEntrypoint, {
+      force: options?.force,
+      writtenPaths,
+      baseDir: projectDir,
+    });
+    // Pin Railway to the Dockerfile builder so it doesn't try Nixpacks (which
+    // misreads pnpm-workspace.yaml or missing lockfiles and fails the build
+    // before producing useful logs).
+    await writeScaffoldFile(
+      resolve(projectDir, "railway.toml"),
+      `[build]
+builder = "dockerfile"
+dockerfilePath = "Dockerfile"
+
+[deploy]
+startCommand = "node server.js"
+restartPolicyType = "on_failure"
+restartPolicyMaxRetries = 3
 `,
       { force: options?.force, writtenPaths, baseDir: projectDir },
     );
@@ -409,15 +468,18 @@ export const handler = async (event = {}) => {
     );
     await writeScaffoldFile(
       resolve(projectDir, "Dockerfile"),
-      `FROM node:20-slim
+      `FROM node:22-slim
 WORKDIR /app
-COPY package.json package.json
+
+${chromiumLibsLayer}COPY package.json package.json
+RUN npm install --omit=dev
+
 COPY AGENT.md AGENT.md
 COPY poncho.config.js poncho.config.js
 COPY skills skills
 COPY tests tests
-RUN npm install -g @poncho-ai/cli@^${cliVersion}
 COPY server.js server.js
+
 EXPOSE 3000
 CMD ["node","server.js"]
 `,

package/src/templates.ts

@@ -369,7 +369,7 @@ cron:
 
 - \`poncho dev\`: jobs run via an in-process scheduler.
 - \`poncho build vercel\`: generates \`vercel.json\` cron entries. Set \`CRON_SECRET\` to the same value as \`PONCHO_AUTH_TOKEN\` so Vercel can authenticate.
-- Docker/Fly.io: scheduler runs automatically.
+- Docker/Fly.io/Railway: scheduler runs automatically.
 - Lambda: use AWS EventBridge to trigger \`GET /api/cron/<jobName>\` with \`Authorization: Bearer <token>\`.
 - Trigger manually: \`curl http://localhost:3000/api/cron/daily-report\`
 
@@ -493,6 +493,10 @@ poncho build lambda
 # Fly.io
 poncho build fly
 fly deploy
+
+# Railway
+poncho build railway
+railway up
 \`\`\`
 
 Set environment variables on your deployment platform:

package/src/vfs-zip.ts

@@ -0,0 +1,94 @@
+// Minimal "store" (no-compression) zip writer. Used by the VFS folder-download
+// endpoint. Avoids pulling in a zip dependency.
+
+const CRC_TABLE: Uint32Array = (() => {
+  const table = new Uint32Array(256);
+  for (let i = 0; i < 256; i++) {
+    let c = i;
+    for (let k = 0; k < 8; k++) c = (c & 1) !== 0 ? 0xedb88320 ^ (c >>> 1) : c >>> 1;
+    table[i] = c >>> 0;
+  }
+  return table;
+})();
+
+const crc32 = (data: Uint8Array): number => {
+  let crc = 0xffffffff;
+  for (let i = 0; i < data.length; i++) crc = (CRC_TABLE[(crc ^ data[i]!) & 0xff]! ^ (crc >>> 8)) >>> 0;
+  return (crc ^ 0xffffffff) >>> 0;
+};
+
+const dosDateTime = (date: Date): { time: number; day: number } => {
+  const time = ((date.getHours() & 0x1f) << 11) | ((date.getMinutes() & 0x3f) << 5) | (Math.floor(date.getSeconds() / 2) & 0x1f);
+  const year = Math.max(1980, date.getFullYear());
+  const day = (((year - 1980) & 0x7f) << 9) | (((date.getMonth() + 1) & 0x0f) << 5) | (date.getDate() & 0x1f);
+  return { time, day };
+};
+
+export interface ZipEntry {
+  /** POSIX-style relative path (forward slashes). */
+  name: string;
+  content: Uint8Array;
+  mtime?: Date;
+}
+
+export const buildZip = (entries: ZipEntry[]): Buffer => {
+  const local: Buffer[] = [];
+  const central: Buffer[] = [];
+  let offset = 0;
+
+  for (const entry of entries) {
+    const nameBuf = Buffer.from(entry.name, "utf8");
+    const data = Buffer.from(entry.content);
+    const crc = crc32(entry.content);
+    const { time, day } = dosDateTime(entry.mtime ?? new Date());
+
+    const lfh = Buffer.alloc(30);
+    lfh.writeUInt32LE(0x04034b50, 0);
+    lfh.writeUInt16LE(20, 4);          // version needed
+    lfh.writeUInt16LE(0x0800, 6);      // general purpose flags (bit 11 = UTF-8 name)
+    lfh.writeUInt16LE(0, 8);           // compression method: store
+    lfh.writeUInt16LE(time, 10);
+    lfh.writeUInt16LE(day, 12);
+    lfh.writeUInt32LE(crc, 14);
+    lfh.writeUInt32LE(data.length, 18);
+    lfh.writeUInt32LE(data.length, 22);
+    lfh.writeUInt16LE(nameBuf.length, 26);
+    lfh.writeUInt16LE(0, 28);
+    local.push(lfh, nameBuf, data);
+
+    const cdh = Buffer.alloc(46);
+    cdh.writeUInt32LE(0x02014b50, 0);
+    cdh.writeUInt16LE(20, 4);          // version made by
+    cdh.writeUInt16LE(20, 6);          // version needed
+    cdh.writeUInt16LE(0x0800, 8);      // flags
+    cdh.writeUInt16LE(0, 10);          // compression
+    cdh.writeUInt16LE(time, 12);
+    cdh.writeUInt16LE(day, 14);
+    cdh.writeUInt32LE(crc, 16);
+    cdh.writeUInt32LE(data.length, 20);
+    cdh.writeUInt32LE(data.length, 24);
+    cdh.writeUInt16LE(nameBuf.length, 28);
+    cdh.writeUInt16LE(0, 30);
+    cdh.writeUInt16LE(0, 32);
+    cdh.writeUInt16LE(0, 34);          // disk number
+    cdh.writeUInt16LE(0, 36);          // internal attrs
+    cdh.writeUInt32LE(0, 38);          // external attrs
+    cdh.writeUInt32LE(offset, 42);
+    central.push(cdh, nameBuf);
+
+    offset += lfh.length + nameBuf.length + data.length;
+  }
+
+  const centralBuf = Buffer.concat(central);
+  const eocd = Buffer.alloc(22);
+  eocd.writeUInt32LE(0x06054b50, 0);
+  eocd.writeUInt16LE(0, 4);                   // disk number
+  eocd.writeUInt16LE(0, 6);                   // disk where central dir starts
+  eocd.writeUInt16LE(entries.length, 8);      // entries on this disk
+  eocd.writeUInt16LE(entries.length, 10);     // total entries
+  eocd.writeUInt32LE(centralBuf.length, 12);
+  eocd.writeUInt32LE(offset, 16);             // central dir offset
+  eocd.writeUInt16LE(0, 20);                  // comment length
+
+  return Buffer.concat([...local, centralBuf, eocd]);
+};