@stringsync/splates 0.0.52 → 0.0.54

package/index.js

@@ -702,6 +702,7 @@ import {
 } from "@stringsync/splates-server/coordinator";
 import { fail as fail5 } from "@stringsync/splates-server/exit";
 import { infraConfigure } from "@stringsync/splates-server/infra/configure";
+import { secretsEnvironmentUrl } from "@stringsync/splates-server/infra/secrets";
 import { Projects } from "@stringsync/splates-server/projects";
 import { repository as repository7 } from "@stringsync/splates-server/records";
 import { savedTunnelOf } from "@stringsync/splates-server/server";
@@ -709,7 +710,7 @@ import { FsStorage as FsStorage2 } from "@stringsync/splates-server/storage";
 import { cli as cli8 } from "webappwiz/cmd";
 import { z as z9 } from "zod";
 var splatesInfra = cli8("infra").description("the Pulumi project that makes everything the server's box needs in AWS, Cloudflare and GitHub, which `splates server deploy` then installs splates on");
-splatesInfra.command("init").use(repository7({ needs: "own" })).description("write a Pulumi project in <dir>, its program a dozen lines using the components of @stringsync/splates-server/infra, and the stack's config from the flags; run again, it writes only what is not so already and keeps values you changed. It fills the stack's config from what splates keeps (the projects, the saved tunnel, the Cloudflare ids, and each secret from the creds store), requesting on the Creds page any cred not kept and exiting `requested`; run again once saved. When the Pulumi ESC environment `coordinator-access` makes (splates/aws) is there, the stack imports it. It records the directory in ~/.splates/coordinator/infra.json, where `splates server deploy` finds the stack. Then `bun add @stringsync/splates-server @pulumi/pulumi @pulumi/aws @pulumi/awsx @pulumi/cloudflare @pulumi/github @pulumi/tls @pulumi/random` there and `pulumi up`").arg("dir", z9.string(), { description: "where the Pulumi project goes" }).option("stack", z9.string(), { default: "prod", description: "the stack" }).option("host", z9.string(), {
+splatesInfra.command("init").use(repository7({ needs: "own" })).description("write a Pulumi project in <dir>, its program a dozen lines using the components of @stringsync/splates-server/infra, and the stack's config from the flags; run again, it writes only what is not so already and keeps values you changed. It fills the stack's config from what splates keeps (the projects, the saved tunnel, the Cloudflare ids). The secrets never pass through splates: it makes the Pulumi ESC environment splates/secrets with a placeholder for each (the Cloudflare token, a GitHub token per owner, the Anthropic key), which the stack imports and the user replaces on the Pulumi site; `splates setup` has a step for each saying how to get it. When the Pulumi ESC environment `coordinator-access` makes (splates/aws) is there, the stack imports it. It records the directory in ~/.splates/coordinator/infra.json, where `splates server deploy` finds the stack. Its runtime is bun, which runs the program's TypeScript itself. Commit the project but not Pulumi.<stack>.yaml, which holds your own accounts and ids and which the .gitignore it writes keeps out of git; init writes it again from what splates keeps. Then `bun add @stringsync/splates-server @pulumi/pulumi @pulumi/aws @pulumi/awsx @pulumi/cloudflare @pulumi/github @pulumi/tls @pulumi/random` there and `pulumi up`").arg("dir", z9.string(), { description: "where the Pulumi project goes" }).option("stack", z9.string(), { default: "prod", description: "the stack" }).option("host", z9.string(), {
   default: "",
   description: "the public host name, as in splates.example.com; the saved tunnel's by default"
 }).option("email", z9.string(), {
@@ -754,9 +755,13 @@ splatesInfra.command("init").use(repository7({ needs: "own" })).description("wri
     stack: opts.stack
   });
   ctx.log.info(written.length === 0 ? "already so: nothing written" : `wrote ${written.join(", ")}`);
+  ctx.log.info(`Pulumi.${opts.stack}.yaml stays out of git: it holds your own accounts and ids, and init writes it again from what splates keeps`);
   for (const command of todo) {
     ctx.log.info(`still to run in ${opts.dir}: ${command}`);
   }
+  if (org !== null) {
+    ctx.log.info(`paste each secret over its placeholder at ${secretsEnvironmentUrl(org)}: \`splates setup\` has a step for each saying how to get it`);
+  }
 });
 
 // server.ts
@@ -869,9 +874,22 @@ splatesServer.command("ssh").description("open a root shell on the box over SSH,
   const { exitCode } = await ctx.ps.spawn(shell(ctx, standing).login(opts.command));
   ctx.ps.exit(exitCode);
 });
-splatesServer.command("destroy").description("say how to destroy the box: its Pulumi stack made it, so the stack unmakes it").action(async (_opts, ctx) => {
+splatesServer.command("destroy").description("unmake the box and everything its Pulumi stack made (its role, snapshots, creds, tunnel and deploy keys), lifting the box's termination protection first: anything only on the box is lost. The stack and its config stay, so the setup's Make the box step, or `splates server deploy`, makes it again. Without --yes, says what it would destroy").option("yes", z10.boolean(), {
+  default: false,
+  description: "destroy without asking"
+}).action(async (opts, ctx) => {
   const infra = await box(ctx).infra();
-  fail6("usage", infra === null ? "no infra project here: run `pulumi destroy` in the one `splates server infra init` wrote" : `run \`pulumi destroy\` in ${infra.dir}, after lifting the termination protection (\`disableApiTermination\`) on the instance. Anything only on the box is lost`);
+  if (infra === null) {
+    fail6("not_found", "no infra project here: nothing to destroy, since `splates server infra init` has not written one");
+  }
+  const standing = await box(ctx).status();
+  const what = standing === null ? `what the stack in ${infra.dir} made` : `the box at ${standing.ipv4} (${standing.instanceId}) and everything the stack in ${infra.dir} made`;
+  if (!opts.yes) {
+    fail6("usage", `this destroys ${what}, and anything only on the box is lost: run again with --yes`, { dir: infra.dir, box: standing });
+  }
+  ctx.log.info(`Destroying ${what}, a few minutes…`);
+  await box(ctx).destroy();
+  ctx.log.info("Destroyed. The stack and its config stay for making it again.");
 });
 splatesServer.command("needs").description("kept for `splates server deploy`, which runs it on the box: print the name of each cred this box's store lacks of those the server needs, one per line").rest("roots", z10.string(), {
   description: "each project's clone on this machine"
@@ -1015,12 +1033,17 @@ function printProgress(log, progress) {
       const notes = [
         step.optional ? "optional" : "",
         step.status === "waiting" ? `after ${step.after.join(", ")}` : "",
-        step.problem ?? ""
+        step.problem ?? "",
+        step.warning === null ? "" : "to put right"
       ].filter(Boolean);
       log.info(`  ${MARKS[step.status]} ${step.id}  ${step.title}${notes.length > 0 ? color2.dim(`  ${notes.join("; ")}`) : ""}`);
     }
   }
-  const next = progress.areas.flatMap((area) => area.steps).find((step) => step.id === progress.next);
+  const steps = progress.areas.flatMap((area) => area.steps);
+  const next = steps.find((step) => step.id === progress.next);
+  for (const step of steps.filter((each) => each.warning !== null)) {
+    log.info(`${color2.yellow("put right:")} ${step.title}  ${color2.dim(`splates setup ${step.id}`)}`);
+  }
   log.info(next === undefined ? color2.green("nothing left to set up") : `next: ${next.title}  ${color2.dim(`splates setup ${next.id}`)}`);
 }
 function printStep(log, step) {
@@ -1029,6 +1052,9 @@ function printStep(log, step) {
   if (step.detail !== null) {
     log.info(step.detail);
   }
+  if (step.warning !== null) {
+    log.info(`${color2.yellow("put right:")} ${step.warning}`);
+  }
   log.info(`you:    ${step.user}`);
   log.info(`agent:  ${step.agent}`);
   if (step.after.length > 0) {

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@stringsync/splates",
-	"version": "0.0.52",
+	"version": "0.0.54",
 	"description": "Runs several AI coding agents on one repository at once, each in its own git worktree",
 	"license": "MIT",
 	"author": "stringsync LLC",
@@ -17,7 +17,7 @@
 		"access": "public"
 	},
 	"dependencies": {
-		"@stringsync/splates-server": "^0.0.52",
+		"@stringsync/splates-server": "^0.0.54",
 		"webappwiz": "0.0.47",
 		"zod": "^4.4.3"
 	},