@stacksjs/buddy 0.70.77 → 0.70.79

package/dist/commands/deploy.js

@@ -731,6 +731,8 @@ async function runHetznerDeploy(args) {
     ".git",
     ".github",
     ".cache",
+    "bin",
+    "dist",
     ".stx",
     "tmp",
     "temp",

package/dist/commands/migrate.d.ts

@@ -1,2 +1,4 @@
+import { confirm } from '@stacksjs/cli';
 import type { CLI } from '@stacksjs/types';
 export declare function migrate(buddy: CLI): void;
+declare type FreshGuard = 'allow' | 'confirm' | 'disabled';

package/dist/commands/migrate.js

@@ -1,6 +1,6 @@
 import { closeSync, existsSync, mkdirSync, openSync, readdirSync, readFileSync, rmSync } from "node:fs";
 import process from "node:process";
-import { confirm, intro, log, onUnknownSubcommand, outro } from "@stacksjs/cli";
+import { confirm, intro, log, onUnknownSubcommand, outro, text } from "@stacksjs/cli";
 import { Action } from "@stacksjs/enums";
 import { hasTTY, isCI } from "@stacksjs/env";
 import { appPath, frameworkPath, projectPath } from "@stacksjs/path";
@@ -132,6 +132,37 @@ async function confirmDestructiveMigrations(opts) {
   }
   return confirm({ message: "Apply these destructive changes?", initial: !1 });
 }
+function parseGuardBool(raw) {
+  if (raw == null || raw === "")
+    return;
+  const v = raw.toLowerCase().trim();
+  if (v === "1" || v === "true" || v === "yes" || v === "on")
+    return !0;
+  if (v === "0" || v === "false" || v === "no" || v === "off")
+    return !1;
+  return;
+}
+function parseFreshGuard(raw) {
+  const v = raw?.toLowerCase().trim();
+  return v === "allow" || v === "confirm" || v === "disabled" ? v : void 0;
+}
+async function resolveMigrationGuards() {
+  const isProd = /^prod/i.test(process.env.APP_ENV || "local");
+  let cfg = {};
+  try {
+    const { awaitConfig } = await import("@stacksjs/config");
+    cfg = (await awaitConfig()).database?.safety ?? {};
+  } catch (error) {
+    log.debug(`[migrate] safety config unavailable, using defaults: ${error instanceof Error ? error.message : String(error)}`);
+  }
+  const confirmMigrate = parseGuardBool(process.env.DB_MIGRATE_CONFIRM) ?? cfg.confirmMigrate ?? !0, migrateFresh = parseFreshGuard(process.env.DB_MIGRATE_FRESH) ?? cfg.migrateFresh ?? (isProd ? "disabled" : "allow");
+  return { confirmMigrate, migrateFresh };
+}
+function currentDatabaseLabel() {
+  if ((process.env.DB_CONNECTION || "sqlite").toLowerCase() === "sqlite")
+    return process.env.DB_DATABASE_PATH || "database/stacks.sqlite";
+  return process.env.DB_DATABASE || "stacks";
+}
 export function migrate(buddy) {
   const descriptions = {
     migrate: "Migrates your database",
@@ -172,6 +203,19 @@ export function migrate(buddy) {
       await outro("Diff complete \u2014 no changes applied.", { startTime: perf, useSeconds: !0 });
       process.exit(ExitCode.Success);
     }
+    if ((await resolveMigrationGuards()).confirmMigrate && !options.force)
+      if (isCI || !hasTTY)
+        log.debug("[migrate] confirmMigrate guard skipped \u2014 non-interactive environment.");
+      else {
+        const APP_ENV = process.env.APP_ENV || "local";
+        if (!await confirm({
+          message: `Run migrations against the ${APP_ENV} database "${currentDatabaseLabel()}"?`,
+          initial: !0
+        })) {
+          await outro("Migration cancelled \u2014 no changes applied.", { startTime: perf, useSeconds: !0 });
+          process.exit(ExitCode.Success);
+        }
+      }
     const lock = acquireMigrationLock();
     if (!lock.acquired) {
       log.error("Another migration is already running (.stacks/migrations.lock exists). Wait for it to finish, or remove the lockfile if it is stale.");
@@ -226,7 +270,7 @@ export function migrate(buddy) {
     });
     process.exit(ExitCode.Success);
   });
-  buddy.command("migrate:fresh", descriptions.migrate).alias("db:fresh").option("-d, --diff", "Show the SQL that would be run", { default: !1 }).option("-p, --project [project]", descriptions.project, { default: !1 }).option("-s, --seed", "Run database seeders after migration", { default: !1 }).option("-a, --auth", descriptions.auth, { default: !0 }).option("--no-auth", "Skip auth/oauth table migrations").option("--verbose", descriptions.verbose, { default: !1 }).action(async (options) => {
+  buddy.command("migrate:fresh", descriptions.migrate).alias("db:fresh").option("-d, --diff", "Show the SQL that would be run", { default: !1 }).option("-p, --project [project]", descriptions.project, { default: !1 }).option("-s, --seed", "Run database seeders after migration", { default: !1 }).option("-a, --auth", descriptions.auth, { default: !0 }).option("--no-auth", "Skip auth/oauth table migrations").option("-f, --force", 'Skip the drop-database confirmation (only honored when the migrateFresh guard is "allow")', { default: !1 }).option("--verbose", descriptions.verbose, { default: !1 }).action(async (options) => {
     log.debug("Running `buddy migrate:fresh` ...", options);
     const perf = await intro("buddy migrate:fresh"), validation = validateModelsExist();
     if (!validation.valid) {
@@ -235,6 +279,28 @@ export function migrate(buddy) {
 `);
       process.exit(ExitCode.FatalError);
     }
+    const guards = await resolveMigrationGuards(), dbLabel = currentDatabaseLabel(), APP_ENV = process.env.APP_ENV || "local";
+    if (guards.migrateFresh === "disabled") {
+      log.error(`\`buddy migrate:fresh\` is disabled by your migration safety guards (it DROPS every table).
+  Target: ${APP_ENV} database "${dbLabel}"
+  To allow it, set database.safety.migrateFresh to 'allow' in config/database.ts,
+  or run once with: DB_MIGRATE_FRESH=allow ./buddy migrate:fresh`);
+      await outro('migrate:fresh refused \u2014 the migrateFresh guard is set to "disabled".', { startTime: perf, useSeconds: !0 });
+      process.exit(ExitCode.FatalError);
+    }
+    if (!(guards.migrateFresh === "allow" && options.force === !0)) {
+      if (isCI || !hasTTY) {
+        const hint = guards.migrateFresh === "confirm" ? 'Guard is "confirm": migrate:fresh must be run interactively.' : "Re-run with --force to drop the database non-interactively.";
+        log.error(`Refusing to drop the ${APP_ENV} database "${dbLabel}" in a non-interactive environment. ${hint}`);
+        await outro("migrate:fresh cancelled.", { startTime: perf, useSeconds: !0 });
+        process.exit(ExitCode.FatalError);
+      }
+      log.warn(`This will DROP ALL TABLES in the ${APP_ENV} database "${dbLabel}" and rebuild them from scratch. All data will be lost.`);
+      if ((await text({ message: `Type the database name "${dbLabel}" to confirm (blank to cancel):` })).trim() !== dbLabel) {
+        await outro("migrate:fresh cancelled \u2014 confirmation did not match.", { startTime: perf, useSeconds: !0 });
+        process.exit(ExitCode.Success);
+      }
+    }
     const result = await runAction(Action.MigrateFresh, options);
     if (result.isErr)
       log.error("Model migrations failed \u2014 applying auth/notification/RBAC table guarantees before exiting.");

package/dist/commands/serve.js

@@ -81,6 +81,11 @@ export function serve(buddy) {
             log.error(`API proxy to ${apiBase} failed: ${error.message}`);
             return new Response("Bad Gateway", { status: 502 });
           }
+        if (existsSync(join(process.cwd(), "resources/views/blog.stx"))) {
+          const { renderBlogFeed } = await import("@stacksjs/actions/blog"), feed = await renderBlogFeed(req);
+          if (feed)
+            return feed;
+        }
         globalThis.__stxServeSearch = url.search;
         globalThis.__stxServeCookies = parseCookies(req);
         return;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@stacksjs/buddy",
   "type": "module",
-  "version": "0.70.77",
+  "version": "0.70.79",
   "description": "Meet Buddy. The Stacks runtime.",
   "author": "Chris Breuer",
   "contributors": [
@@ -135,7 +135,7 @@
     "@stacksjs/ui": "^0.70.23",
     "@stacksjs/utils": "^0.70.23",
     "@stacksjs/validation": "^0.70.23",
-    "@stacksjs/ts-cloud": "^0.7.16"
+    "@stacksjs/ts-cloud": "^0.7.17"
   },
   "devDependencies": {
     "better-dx": "^0.2.16"