@stacksjs/buddy 0.70.205 → 0.70.206

package/dist/commands/deploy.js

@@ -690,7 +690,7 @@ async function runHetznerDeploy(args) {
     process.exit(ExitCode.FatalError);
   }
   const attachTo = tsCloudConfig.cloud?.attachTo;
-  let ip;
+  let ip, ipv6;
   if (attachTo) {
     const box = await resolveAttachTargetBox(attachTo, environment);
     if (!box?.publicIp) {
@@ -698,6 +698,7 @@ async function runHetznerDeploy(args) {
       process.exit(ExitCode.FatalError);
     }
     ip = box.publicIp;
+    ipv6 = box.publicIpv6;
     log.info(`Attaching to '${attachTo}' box '${box.serverName}' (${ip}) \u2014 skipping provisioning`);
     const compute = (tsCloudConfig.infrastructure ??= {}).compute ??= {};
     compute.webServer = "rpx";
@@ -717,6 +718,7 @@ async function runHetznerDeploy(args) {
     log.info("Provisioning Hetzner compute infrastructure...");
     const outputs = await driver.provisionComputeInfrastructure({ config: scrubLoopbackSitePortsForFirewall(tsCloudConfig), environment });
     ip = outputs.appPublicIp;
+    ipv6 = outputs.appPublicIpv6;
     log.success("Hetzner compute infrastructure ready");
     if (outputs.appInstanceId)
       log.info(`Server ID: ${outputs.appInstanceId}`);
@@ -815,7 +817,7 @@ async function runHetznerDeploy(args) {
     }
   });
   if (ok)
-    await reconcileHetznerDns(onlySite ? { [onlySite]: sites[onlySite] } : sites, ip, log);
+    await reconcileHetznerDns(onlySite ? { [onlySite]: sites[onlySite] } : sites, ip, log, ipv6);
   if (ok)
     await reconcileConfigDns(onlySite ? { [onlySite]: sites[onlySite] } : sites, log);
   if (ok) {
@@ -921,7 +923,13 @@ async function resolveAttachTargetBox(owner, environment) {
   }, byLabel = await req(`label_selector=${encodeURIComponent(`ts-cloud/project=${owner},ts-cloud/environment=${environment},ts-cloud/role=app`)}`), chosen = pick(byLabel) || pick(await req(`name=${encodeURIComponent(`${owner}-${environment}-app`)}`));
   if (!chosen)
     return null;
-  return { serverId: chosen.id, serverName: chosen.name, publicIp: chosen.public_net?.ipv4?.ip };
+  const { hetznerBoxIpv6 } = await import("@stacksjs/ts-cloud");
+  return {
+    serverId: chosen.id,
+    serverName: chosen.name,
+    publicIp: chosen.public_net?.ipv4?.ip,
+    publicIpv6: hetznerBoxIpv6?.(chosen.public_net?.ipv6?.ip)
+  };
 }
 export async function provisionMailTenant(ip, logger) {
   if (!hasExplicitEmailConfig())
@@ -1291,7 +1299,7 @@ async function reconcileConfigDns(sites, logger) {
       logger.warn(`DNS (config/dns.ts) reconcile for ${domain} failed: ${err instanceof Error ? err.message : String(err)}`);
     }
 }
-async function verifyDnsRecord(provider, domain, fqdn, ip) {
+async function verifyDnsRecord(provider, domain, fqdn, ip, recordType = "A") {
   try {
     if (typeof provider?.listRecords !== "function")
       return !0;
@@ -1300,13 +1308,17 @@ async function verifyDnsRecord(provider, domain, fqdn, ip) {
       return !0;
     return res.records.some((r) => {
       const name = typeof r?.name === "string" ? r.name.replace(/\.$/, "") : "";
-      return r?.type === "A" && name === fqdn && r?.content === ip;
+      return r?.type === recordType && name === fqdn && r?.content === ip;
     });
   } catch {
     return !0;
   }
 }
-async function reconcileHetznerDns(sites, ip, logger) {
+const IPV6_EXCLUDED_HOSTS = new Set(["mail", "smtp", "imap", "mx"]);
+function skipIpv6ForHost(fqdn) {
+  return IPV6_EXCLUDED_HOSTS.has(fqdn.split(".")[0] ?? "");
+}
+async function reconcileHetznerDns(sites, ip, logger, ipv6) {
   const domains = new Set;
   for (const site of Object.values(sites))
     if (site?.domain && typeof site.domain === "string")
@@ -1382,6 +1394,20 @@ async function reconcileHetznerDns(sites, ip, logger) {
           logger.success(`  DNS: ${fqdn} \u2192 ${ip} (${provider.name})`);
         else
           logger.warn(`  DNS: ${fqdn} \u2192 ${ip} reported success at ${provider.name} but no matching A record exists \u2014 create it manually: A ${fqdn} \u2192 ${ip}`);
+        if (!ipv6 || skipIpv6ForHost(fqdn))
+          continue;
+        const v6res = await provider.upsertRecord(domain, { name: fqdn, type: "AAAA", content: ipv6, ttl: 600 });
+        if (v6res?.success === !1) {
+          logger.warn(`  DNS: ${fqdn} \u2192 ${ipv6} failed: ${v6res.error || v6res.message || "unknown error"}`);
+          continue;
+        }
+        const v6Cleanup = await removeStaleServerAddressRecords(provider, domain, fqdn, ipv6, "AAAA");
+        for (const warning of v6Cleanup)
+          logger.warn(`  DNS: ${fqdn} cleanup: ${warning}`);
+        if (await verifyDnsRecord(provider, domain, fqdn, ipv6, "AAAA"))
+          logger.success(`  DNS: ${fqdn} \u2192 ${ipv6} (${provider.name})`);
+        else
+          logger.warn(`  DNS: ${fqdn} \u2192 ${ipv6} reported success at ${provider.name} but no matching AAAA record exists \u2014 create it manually: AAAA ${fqdn} \u2192 ${ipv6}`);
       }
     } catch (err) {
       logger.warn(`  DNS: ${domain} reconciliation failed: ${err?.message || err}`);

package/package.json

@@ -2,7 +2,7 @@
   "name": "@stacksjs/buddy",
   "type": "module",
   "sideEffects": false,
-  "version": "0.70.205",
+  "version": "0.70.206",
   "description": "Meet Buddy. The Stacks runtime.",
   "author": "Chris Breuer",
   "contributors": [
@@ -137,7 +137,7 @@
     "@stacksjs/ui": "^0.70.180",
     "@stacksjs/utils": "^0.70.180",
     "@stacksjs/validation": "^0.70.180",
-    "@stacksjs/ts-cloud": "^0.7.84",
+    "@stacksjs/ts-cloud": "^0.7.85",
     "ajv": "^8.20.0",
     "ajv-formats": "^3.0.1"
   },