@stacksjs/ts-cloud-core 0.1.1

package/src/cicd/github-actions.ts

@@ -0,0 +1,424 @@
+/**
+ * GitHub Actions Workflow Generator
+ * Generate CI/CD workflows for GitHub Actions
+ */
+
+export interface GitHubActionsOptions {
+  workflowName?: string
+  trigger?: 'push' | 'pull_request' | 'workflow_dispatch' | 'schedule'
+  branches?: string[]
+  schedule?: string // Cron expression
+  environments?: string[]
+  awsRegion?: string
+  awsRole?: string // OIDC role ARN
+  nodeVersion?: string
+  bunVersion?: string
+  deployCommand?: string
+  testCommand?: string
+  buildCommand?: string
+  lintCommand?: string
+}
+
+/**
+ * Generate deployment workflow
+ */
+export function generateDeploymentWorkflow(options: GitHubActionsOptions = {}): string {
+  const {
+    workflowName = 'Deploy',
+    trigger = 'push',
+    branches = ['main'],
+    environments = ['production'],
+    awsRegion = 'us-east-1',
+    awsRole,
+    bunVersion = 'latest',
+    deployCommand = 'bun run cloud deploy',
+    testCommand = 'bun test',
+    buildCommand = 'bun run build',
+  } = options
+
+  const usesOIDC = !!awsRole
+
+  return `name: ${workflowName}
+
+on:
+  ${trigger}:
+    branches:
+${branches.map(b => `      - ${b}`).join('\n')}
+
+env:
+  AWS_REGION: ${awsRegion}
+  BUN_VERSION: ${bunVersion}
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v1
+        with:
+          bun-version: \${{ env.BUN_VERSION }}
+
+      - name: Install dependencies
+        run: bun install
+
+      - name: Run tests
+        run: ${testCommand}
+
+      - name: Build
+        run: ${buildCommand}
+
+  deploy:
+    needs: test
+    runs-on: ubuntu-latest
+    ${environments.length > 0 ? `environment: ${environments[0]}` : ''}
+    permissions:
+      id-token: write
+      contents: read
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v1
+        with:
+          bun-version: \${{ env.BUN_VERSION }}
+
+      - name: Install dependencies
+        run: bun install
+
+      ${usesOIDC
+        ? `- name: Configure AWS credentials (OIDC)
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          role-to-assume: ${awsRole}
+          aws-region: \${{ env.AWS_REGION }}`
+        : `- name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          aws-access-key-id: \${{ secrets.AWS_ACCESS_KEY_ID }}
+          aws-secret-access-key: \${{ secrets.AWS_SECRET_ACCESS_KEY }}
+          aws-region: \${{ env.AWS_REGION }}`}
+
+      - name: Deploy to AWS
+        run: ${deployCommand}
+
+      - name: Post-deployment tests
+        run: bun run cloud test:smoke
+`
+}
+
+/**
+ * Generate multi-environment deployment workflow
+ */
+export function generateMultiEnvWorkflow(options: {
+  environments: Array<{ name: string; branch: string }>
+  awsRegion?: string
+  awsRole?: string
+}): string {
+  const { environments, awsRegion = 'us-east-1', awsRole } = options
+  const usesOIDC = !!awsRole
+
+  return `name: Multi-Environment Deploy
+
+on:
+  push:
+    branches:
+${environments.map(env => `      - ${env.branch}`).join('\n')}
+
+env:
+  AWS_REGION: ${awsRegion}
+
+jobs:
+  determine-environment:
+    runs-on: ubuntu-latest
+    outputs:
+      environment: \${{ steps.set-env.outputs.environment }}
+    steps:
+      - name: Determine environment
+        id: set-env
+        run: |
+${environments.map((env, i) => `          ${i > 0 ? 'elif' : 'if'} [[ "\${{ github.ref }}" == "refs/heads/${env.branch}" ]]; then
+            echo "environment=${env.name}" >> $GITHUB_OUTPUT`).join('\n')}
+          fi
+
+  deploy:
+    needs: determine-environment
+    runs-on: ubuntu-latest
+    environment: \${{ needs.determine-environment.outputs.environment }}
+    permissions:
+      id-token: write
+      contents: read
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v1
+
+      - name: Install dependencies
+        run: bun install
+
+      ${usesOIDC
+        ? `- name: Configure AWS credentials (OIDC)
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          role-to-assume: ${awsRole}
+          aws-region: \${{ env.AWS_REGION }}`
+        : `- name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          aws-access-key-id: \${{ secrets.AWS_ACCESS_KEY_ID }}
+          aws-secret-access-key: \${{ secrets.AWS_SECRET_ACCESS_KEY }}
+          aws-region: \${{ env.AWS_REGION }}`}
+
+      - name: Deploy
+        run: bun run cloud deploy --env=\${{ needs.determine-environment.outputs.environment }}
+`
+}
+
+/**
+ * Generate PR preview workflow
+ */
+export function generatePRPreviewWorkflow(options: {
+  awsRegion?: string
+  awsRole?: string
+  ttl?: number
+} = {}): string {
+  const { awsRegion = 'us-east-1', awsRole, ttl = 24 } = options
+  const usesOIDC = !!awsRole
+
+  return `name: PR Preview Environment
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened, closed]
+
+env:
+  AWS_REGION: ${awsRegion}
+  TTL_HOURS: ${ttl}
+
+jobs:
+  preview:
+    if: github.event.action != 'closed'
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      contents: read
+      pull-requests: write
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v1
+
+      - name: Install dependencies
+        run: bun install
+
+      ${usesOIDC
+        ? `- name: Configure AWS credentials (OIDC)
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          role-to-assume: ${awsRole}
+          aws-region: \${{ env.AWS_REGION }}`
+        : `- name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          aws-access-key-id: \${{ secrets.AWS_ACCESS_KEY_ID }}
+          aws-secret-access-key: \${{ secrets.AWS_SECRET_ACCESS_KEY }}
+          aws-region: \${{ env.AWS_REGION }}`}
+
+      - name: Deploy preview environment
+        id: deploy
+        run: |
+          bun run cloud env:preview \\
+            --branch=\${{ github.head_ref }} \\
+            --pr=\${{ github.event.pull_request.number }} \\
+            --commit=\${{ github.event.pull_request.head.sha }} \\
+            --ttl=\${{ env.TTL_HOURS }}
+
+          PREVIEW_URL=\$(bun run cloud env:preview --get-url \${{ github.head_ref }})
+          echo "preview_url=\$PREVIEW_URL" >> $GITHUB_OUTPUT
+
+      - name: Comment PR with preview URL
+        if: steps.deploy.outputs.preview_url
+        uses: actions/github-script@v7
+        with:
+          script: |
+            const previewUrl = '\${{ steps.deploy.outputs.preview_url }}';
+            const body = \`:rocket: Preview environment deployed!\\n\\n\` +
+              \`**URL:** \${previewUrl}\\n\\n\` +
+              \`**Branch:** \${{ github.head_ref }}\\n\` +
+              \`**Commit:** \${{ github.event.pull_request.head.sha }}\\n\` +
+              \`**Expires:** \${{ env.TTL_HOURS }} hours from now\\n\\n\` +
+              \`_This preview will be automatically destroyed after \${{ env.TTL_HOURS }} hours or when the PR is closed._\`;
+
+            github.rest.issues.createComment({
+              issue_number: context.issue.number,
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              body: body
+            });
+
+  cleanup:
+    if: github.event.action == 'closed'
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      contents: read
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v1
+
+      - name: Install dependencies
+        run: bun install
+
+      ${usesOIDC
+        ? `- name: Configure AWS credentials (OIDC)
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          role-to-assume: ${awsRole}
+          aws-region: \${{ env.AWS_REGION }}`
+        : `- name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          aws-access-key-id: \${{ secrets.AWS_ACCESS_KEY_ID }}
+          aws-secret-access-key: \${{ secrets.AWS_SECRET_ACCESS_KEY }}
+          aws-region: \${{ env.AWS_REGION }}`}
+
+      - name: Destroy preview environment
+        run: |
+          bun run cloud env:preview --destroy \\
+            --branch=\${{ github.head_ref }} \\
+            --pr=\${{ github.event.pull_request.number }}
+`
+}
+
+/**
+ * Generate scheduled deployment workflow
+ */
+export function generateScheduledWorkflow(options: {
+  schedule: string
+  environment: string
+  awsRegion?: string
+  awsRole?: string
+}): string {
+  const { schedule, environment, awsRegion = 'us-east-1', awsRole } = options
+  const usesOIDC = !!awsRole
+
+  return `name: Scheduled Deployment
+
+on:
+  schedule:
+    - cron: '${schedule}'
+  workflow_dispatch:
+
+env:
+  AWS_REGION: ${awsRegion}
+  ENVIRONMENT: ${environment}
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    environment: \${{ env.ENVIRONMENT }}
+    permissions:
+      id-token: write
+      contents: read
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v1
+
+      - name: Install dependencies
+        run: bun install
+
+      ${usesOIDC
+        ? `- name: Configure AWS credentials (OIDC)
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          role-to-assume: ${awsRole}
+          aws-region: \${{ env.AWS_REGION }}`
+        : `- name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          aws-access-key-id: \${{ secrets.AWS_ACCESS_KEY_ID }}
+          aws-secret-access-key: \${{ secrets.AWS_SECRET_ACCESS_KEY }}
+          aws-region: \${{ env.AWS_REGION }}`}
+
+      - name: Deploy
+        run: bun run cloud deploy --env=\${{ env.ENVIRONMENT }}
+`
+}
+
+/**
+ * Generate matrix deployment workflow (multiple regions/accounts)
+ */
+export function generateMatrixWorkflow(options: {
+  matrix: Array<{ environment: string; region: string; account?: string }>
+  awsRole?: string
+}): string {
+  const { matrix, awsRole } = options
+  const usesOIDC = !!awsRole
+
+  return `name: Matrix Deployment
+
+on:
+  workflow_dispatch:
+    inputs:
+      environments:
+        description: 'Environments to deploy (comma-separated)'
+        required: false
+        default: 'all'
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        include:
+${matrix.map(m => `          - environment: ${m.environment}
+            region: ${m.region}${m.account ? `\n            account: ${m.account}` : ''}`).join('\n')}
+    permissions:
+      id-token: write
+      contents: read
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v1
+
+      - name: Install dependencies
+        run: bun install
+
+      ${usesOIDC
+        ? `- name: Configure AWS credentials (OIDC)
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          role-to-assume: ${awsRole}
+          aws-region: \${{ matrix.region }}`
+        : `- name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          aws-access-key-id: \${{ secrets.AWS_ACCESS_KEY_ID }}
+          aws-secret-access-key: \${{ secrets.AWS_SECRET_ACCESS_KEY }}
+          aws-region: \${{ matrix.region }}`}
+
+      - name: Deploy to \${{ matrix.environment }} (\${{ matrix.region }})
+        run: bun run cloud deploy --env=\${{ matrix.environment }} --region=\${{ matrix.region }}
+`
+}

package/src/cicd/gitlab-ci.ts

@@ -0,0 +1,255 @@
+/**
+ * GitLab CI/CD Pipeline Generator
+ * Generate CI/CD pipelines for GitLab
+ */
+
+export interface GitLabCIOptions {
+  stages?: string[]
+  environments?: string[]
+  awsRegion?: string
+  dockerImage?: string
+  bunVersion?: string
+  deployCommand?: string
+  testCommand?: string
+  buildCommand?: string
+}
+
+/**
+ * Generate deployment pipeline
+ */
+export function generateDeploymentPipeline(options: GitLabCIOptions = {}): string {
+  const {
+    stages = ['test', 'build', 'deploy'],
+    environments = ['production'],
+    awsRegion = 'us-east-1',
+    dockerImage = 'oven/bun:latest',
+    deployCommand = 'bun run cloud deploy',
+    testCommand = 'bun test',
+    buildCommand = 'bun run build',
+  } = options
+
+  return `stages:
+${stages.map(s => `  - ${s}`).join('\n')}
+
+variables:
+  AWS_DEFAULT_REGION: ${awsRegion}
+  AWS_REGION: ${awsRegion}
+
+default:
+  image: ${dockerImage}
+  cache:
+    paths:
+      - node_modules/
+      - .bun/
+
+before_script:
+  - bun install
+
+test:
+  stage: test
+  script:
+    - ${testCommand}
+  only:
+    - merge_requests
+    - main
+
+build:
+  stage: build
+  script:
+    - ${buildCommand}
+  artifacts:
+    paths:
+      - dist/
+    expire_in: 1 day
+  only:
+    - merge_requests
+    - main
+
+deploy:
+  stage: deploy
+  script:
+    - ${deployCommand}
+  environment:
+    name: ${environments[0]}
+    url: https://\${CI_PROJECT_NAME}.example.com
+  only:
+    - main
+  when: manual
+`
+}
+
+/**
+ * Generate multi-environment pipeline
+ */
+export function generateMultiEnvPipeline(options: {
+  environments: Array<{ name: string; branch: string; manual?: boolean }>
+  awsRegion?: string
+}): string {
+  const { environments, awsRegion = 'us-east-1' } = options
+
+  const deployJobs = environments.map(env => `
+deploy:${env.name}:
+  stage: deploy
+  script:
+    - bun run cloud deploy --env=${env.name}
+  environment:
+    name: ${env.name}
+    url: https://${env.name}.example.com
+  only:
+    - ${env.branch}
+  ${env.manual ? 'when: manual' : ''}
+`).join('\n')
+
+  return `stages:
+  - test
+  - build
+  - deploy
+
+variables:
+  AWS_DEFAULT_REGION: ${awsRegion}
+
+default:
+  image: oven/bun:latest
+  cache:
+    paths:
+      - node_modules/
+
+test:
+  stage: test
+  script:
+    - bun install
+    - bun test
+
+build:
+  stage: build
+  script:
+    - bun install
+    - bun run build
+  artifacts:
+    paths:
+      - dist/
+${deployJobs}
+`
+}
+
+/**
+ * Generate PR/MR preview pipeline
+ */
+export function generatePreviewPipeline(options: {
+  awsRegion?: string
+  ttl?: number
+} = {}): string {
+  const { awsRegion = 'us-east-1', ttl = 24 } = options
+
+  return `stages:
+  - build
+  - deploy
+  - cleanup
+
+variables:
+  AWS_DEFAULT_REGION: ${awsRegion}
+  TTL_HOURS: ${ttl}
+
+default:
+  image: oven/bun:latest
+
+deploy:preview:
+  stage: deploy
+  script:
+    - bun install
+    - |
+      bun run cloud env:preview \\
+        --branch=\${CI_MERGE_REQUEST_SOURCE_BRANCH_NAME} \\
+        --pr=\${CI_MERGE_REQUEST_IID} \\
+        --commit=\${CI_COMMIT_SHA} \\
+        --ttl=\${TTL_HOURS}
+    - PREVIEW_URL=\$(bun run cloud env:preview --get-url \${CI_MERGE_REQUEST_SOURCE_BRANCH_NAME})
+    - echo "Preview URL: \$PREVIEW_URL"
+  environment:
+    name: preview/\${CI_MERGE_REQUEST_IID}
+    url: \${PREVIEW_URL}
+    on_stop: cleanup:preview
+  only:
+    - merge_requests
+
+cleanup:preview:
+  stage: cleanup
+  script:
+    - bun install
+    - |
+      bun run cloud env:preview --destroy \\
+        --branch=\${CI_MERGE_REQUEST_SOURCE_BRANCH_NAME} \\
+        --pr=\${CI_MERGE_REQUEST_IID}
+  environment:
+    name: preview/\${CI_MERGE_REQUEST_IID}
+    action: stop
+  when: manual
+  only:
+    - merge_requests
+`
+}
+
+/**
+ * Generate scheduled pipeline
+ */
+export function generateScheduledPipeline(options: {
+  environment: string
+  awsRegion?: string
+}): string {
+  const { environment, awsRegion = 'us-east-1' } = options
+
+  return `stages:
+  - deploy
+
+variables:
+  AWS_DEFAULT_REGION: ${awsRegion}
+  ENVIRONMENT: ${environment}
+
+default:
+  image: oven/bun:latest
+
+deploy:scheduled:
+  stage: deploy
+  script:
+    - bun install
+    - bun run cloud deploy --env=\${ENVIRONMENT}
+  environment:
+    name: \${ENVIRONMENT}
+  only:
+    - schedules
+`
+}
+
+/**
+ * Generate manual deployment pipeline
+ */
+export function generateManualPipeline(options: {
+  environments: string[]
+  awsRegion?: string
+}): string {
+  const { environments, awsRegion = 'us-east-1' } = options
+
+  const deployJobs = environments.map(env => `
+deploy:${env}:
+  stage: deploy
+  script:
+    - bun install
+    - bun run cloud deploy --env=${env}
+  environment:
+    name: ${env}
+  when: manual
+  only:
+    - main
+`).join('\n')
+
+  return `stages:
+  - deploy
+
+variables:
+  AWS_DEFAULT_REGION: ${awsRegion}
+
+default:
+  image: oven/bun:latest
+${deployJobs}
+`
+}

package/src/cicd/index.ts

@@ -0,0 +1,8 @@
+/**
+ * CI/CD Integration
+ * Generate workflows for popular CI/CD platforms
+ */
+
+export * from './github-actions'
+export * from './gitlab-ci'
+export * from './circleci'