@tokenbuddy/tb-admin 1.0.36 → 1.0.38

package/src/server-cmd.ts

@@ -1,362 +0,0 @@
-import { execSync, spawnSync, type SpawnSyncReturns } from "child_process";
-import * as fs from "fs";
-import { SellerProviderConfig } from "./config.js";
-
-type ExecRunner = (command: string, options?: Parameters<typeof execSync>[1]) => string | Buffer;
-type SpawnRunner = (command: string, args?: string[], options?: Parameters<typeof spawnSync>[2]) => SpawnSyncReturns<string | Buffer>;
-
-export interface DockerImageInspection {
-  ok: boolean;
-  error?: string;
-  exitCode?: number;
-}
-
-export type ImageInspectRunner = (image: string) => DockerImageInspection;
-
-export interface FlyProviderRuntime {
-  checkFlyctlInstalled?: (flyctlPath?: string) => boolean;
-  execSync?: ExecRunner;
-  spawnSync?: SpawnRunner;
-  imageInspector?: ImageInspectRunner;
-}
-
-/**
- * 检查 flyctl 是否在 PATH 中（或在指定路径）。
- *
- * @param flyctlPath 可选 flyctl 完整路径
- * @returns 是否可用
- */
-export function checkFlyctlInstalled(flyctlPath?: string): boolean {
-  try {
-    execSync(`which ${flyctlPath || "flyctl"}`, { stdio: "ignore" });
-    return true;
-  } catch {
-    return false;
-  }
-}
-
-export function inspectDockerImage(image: string): DockerImageInspection {
-  const result = spawnSync("docker", ["buildx", "imagetools", "inspect", image], {
-    encoding: "utf8",
-    stdio: ["ignore", "pipe", "pipe"]
-  });
-  return dockerImageInspectionFromResult(result);
-}
-
-export function requirePublishedDockerImage(image: string, inspectImage: ImageInspectRunner = inspectDockerImage): void {
-  const inspection = inspectImage(image);
-  if (inspection.ok) {
-    return;
-  }
-  const detail = inspection.error ? ` Detail: ${inspection.error.trim()}` : "";
-  throw new Error(
-    `seller image is not published or is not accessible: ${image}. ` +
-    `Publish it first with RELEASE_VERSION=<v> bash scripts/release/all.sh, or pass an existing registry.fly.io/tb-seller:<v> tag. ` +
-    `No Fly app was created.${detail}`
-  );
-}
-
-function dockerImageInspectionFromResult(result: SpawnSyncReturns<string>): DockerImageInspection {
-  if (result.error) {
-    return { ok: false, error: result.error.message };
-  }
-  if (result.status !== 0) {
-    return {
-      ok: false,
-      exitCode: result.status ?? undefined,
-      error: (result.stderr || result.stdout || "").toString()
-    };
-  }
-  return { ok: true };
-}
-
-export function parseFlyMachineIds(json: string, app: string): string[] {
-  let parsed: unknown;
-  try {
-    parsed = JSON.parse(json || "[]");
-  } catch {
-    throw new Error(`fly machines list returned invalid JSON for ${app}`);
-  }
-
-  if (!Array.isArray(parsed)) {
-    throw new Error(`fly machines list returned an unexpected shape for ${app}`);
-  }
-
-  const ids = parsed
-    .map((item) => {
-      if (item && typeof item === "object" && "id" in item) {
-        const id = (item as { id?: unknown }).id;
-        return typeof id === "string" && id.length > 0 ? id : undefined;
-      }
-      return undefined;
-    })
-    .filter((id): id is string => Boolean(id));
-
-  if (ids.length === 0) {
-    throw new Error(`fly app ${app} has no machines to update`);
-  }
-
-  return ids;
-}
-
-/**
- * `FlyProvider.createSeller` 的输入。
- * 字段未提供时回退到 `SellerProviderConfig` 的默认值。
- */
-export interface SellerCreateOptions {
-  name: string;
-  app?: string;
-  region?: string;
-  image?: string;
-  operatorSecret: string;
-  flyConfig?: string;
-  volumeName?: string;
-  volumeSizeGb?: number;
-  volumeId?: string;
-  volumeSnapshotRetentionDays?: number;
-  initialConfigPath?: string;
-  dryRun?: boolean;
-}
-
-/**
- * Fly.io seller provider：把 admin CLI 的 `tb-admin server create` 命令转成 `flyctl` 调用。
- * 支持 `dryRun` 模式：只打印会执行的命令而不实际修改 Fly 资源。
- */
-export class FlyProvider {
-  private providerConfig?: SellerProviderConfig;
-  private readonly runtime: Required<FlyProviderRuntime>;
-
-  constructor(providerConfig?: SellerProviderConfig, runtime?: FlyProviderRuntime) {
-    this.providerConfig = providerConfig;
-    this.runtime = {
-      checkFlyctlInstalled,
-      execSync,
-      spawnSync,
-      imageInspector: inspectDockerImage,
-      ...runtime
-    };
-  }
-
-  private get flyctl(): string {
-    return this.providerConfig?.flyctl_path || "flyctl";
-  }
-
-  private flyExecOptions(options: Parameters<typeof execSync>[1] = {}): Parameters<typeof execSync>[1] {
-    return {
-      ...options,
-      env: this.flyEnv(options.env)
-    };
-  }
-
-  private flySpawnOptions(options: Parameters<typeof spawnSync>[2] = {}): Parameters<typeof spawnSync>[2] {
-    return {
-      ...options,
-      env: this.flyEnv(options.env)
-    };
-  }
-
-  private flyEnv(env: NodeJS.ProcessEnv | undefined): NodeJS.ProcessEnv {
-    const configuredToken = this.providerConfig?.token;
-    const merged = {
-      ...process.env,
-      ...(env || {})
-    };
-    if (configuredToken && !merged.FLY_API_TOKEN) {
-      merged.FLY_API_TOKEN = configuredToken;
-    }
-    return merged;
-  }
-
-  /**
-   * List apps on Fly.io
-   */
-  public listApps(): string {
-    if (!this.runtime.checkFlyctlInstalled(this.flyctl)) {
-      throw new Error(`\`${this.flyctl}\` is not installed on your system PATH.`);
-    }
-    return this.runtime.execSync(`${this.flyctl} apps list`, this.flyExecOptions({ encoding: "utf8" })) as string;
-  }
-
-  /**
-   * Create and deploy a new seller app on Fly.io
-   */
-  public createSeller(options: SellerCreateOptions): string {
-    const { name, dryRun } = options;
-    // --app overrides the auto-prefixed name; allows bare "tbs-86d81e" or "tb-seller-foo"
-    const appName = options.app || `tb-seller-${name}`;
-
-    const targetImage = options.image;
-    const targetRegion = options.region
-      || this.providerConfig?.default_region
-      || "sin";
-    const operatorSecret = options.operatorSecret
-      || this.providerConfig?.operator_secret
-      || "";
-    const flyConfig = options.flyConfig;
-    const volumeName = options.volumeName
-      || this.providerConfig?.volume_name
-      || "tb_seller_data";
-    const volumeSizeGb = options.volumeSizeGb
-      || this.providerConfig?.volume_size_gb
-      || 1;
-    const volumeSnapshotRetentionDays = options.volumeSnapshotRetentionDays;
-    const volumeId = options.volumeId;
-    const initialConfigPath = options.initialConfigPath;
-
-    if (!targetImage) {
-      throw new Error("seller create requires --image registry.fly.io/tb-seller:<v>");
-    }
-    if (!flyConfig) {
-      throw new Error("seller create requires --fly-config deploy/fly.io/fly.tb-seller.toml");
-    }
-
-    if (dryRun) {
-      const lines = [
-        `[DRY-RUN] Will create fly app: ${appName}`,
-        `  Region: ${targetRegion}`,
-        `  Image:  ${targetImage}`,
-        `  Secret: OPERATOR_SECRET=***${operatorSecret.slice(-4) || "????"}`,
-        `  Volume: ${volumeName} (${volumeSizeGb}GB)`,
-      ];
-      if (flyConfig) lines.push(`  Fly config: ${flyConfig}`);
-      if (initialConfigPath) lines.push(`  Initial config secret: TOKENBUDDY_SELLER_CONFIG_B64 from ${initialConfigPath}`);
-      if (volumeId) lines.push(`  Volume ID: ${volumeId}`);
-      if (volumeSnapshotRetentionDays !== undefined) lines.push(`  Volume snapshot retention: ${volumeSnapshotRetentionDays} days`);
-      return lines.join("\n");
-    }
-
-    if (!this.runtime.checkFlyctlInstalled(this.flyctl)) {
-      throw new Error(`\`${this.flyctl}\` is not installed on PATH.`);
-    }
-
-    if (!operatorSecret) {
-      throw new Error("operator_secret is required. Provide --operator-secret or configure seller_providers.fly.operator_secret");
-    }
-    requireReadableFile(flyConfig, "Fly config");
-    if (initialConfigPath) {
-      requireReadableFile(initialConfigPath, "Initial seller config");
-    }
-    requirePublishedDockerImage(targetImage, this.runtime.imageInspector);
-
-    console.log(`[Fly.io] Creating app ${appName}...`);
-    this.runtime.execSync(`${this.flyctl} apps create ${appName} --machines`, this.flyExecOptions({ stdio: "inherit" }));
-
-    console.log(`[Fly.io] Setting secrets...`);
-    this.importCreateSecrets(appName, operatorSecret, initialConfigPath);
-
-    console.log(`[Fly.io] Deploying image ${targetImage}...`);
-    const deployCmd = `${this.flyctl} deploy -c ${flyConfig} --image ${targetImage} --primary-region ${targetRegion} --app ${appName} --now`;
-    this.runtime.execSync(deployCmd, this.flyExecOptions({ stdio: "inherit" }));
-
-    return `Successfully deployed ${appName} on Fly.io`;
-  }
-
-  private importCreateSecrets(appName: string, operatorSecret: string, initialConfigPath: string | undefined): void {
-    const lines = [
-      "ALLOW_MOCK=false",
-      `OPERATOR_SECRET=${operatorSecret}`
-    ];
-    if (initialConfigPath) {
-      const configContent = fs.readFileSync(initialConfigPath, "utf8");
-      lines.push(`TOKENBUDDY_SELLER_CONFIG_B64=${Buffer.from(configContent, "utf8").toString("base64")}`);
-    }
-    const result = this.runtime.spawnSync(this.flyctl, ["secrets", "import", "--stage", "--app", appName], this.flySpawnOptions({
-      input: `${lines.join("\n")}\n`,
-      stdio: ["pipe", "inherit", "inherit"]
-    }));
-    if (result.error) {
-      throw result.error;
-    }
-    if (result.status !== 0) {
-      throw new Error(`flyctl secrets import failed with exit code ${result.status}`);
-    }
-  }
-
-  /**
-   * Destroy a seller app on Fly.io.
-   * @param nameOrApp  Either a bare name (e.g. "86d81e") or a full app name (e.g. "tbs-86d81e").
-   *                   If the value contains a hyphen, it is treated as the full app name.
-   * @param dryRun
-   */
-  public removeSeller(nameOrApp: string, dryRun?: boolean): string {
-    const appName = nameOrApp.includes("-") ? nameOrApp : `tb-seller-${nameOrApp}`;
-    if (dryRun) {
-      return `[DRY-RUN] Will destroy fly app: ${appName}`;
-    }
-
-    if (!this.runtime.checkFlyctlInstalled(this.flyctl)) {
-      throw new Error(`\`${this.flyctl}\` is not installed.`);
-    }
-
-    console.log(`[Fly.io] Destroying app ${appName}...`);
-    this.runtime.execSync(`${this.flyctl} apps destroy ${appName} --yes`, this.flyExecOptions({ stdio: "inherit" }));
-
-    return `Successfully destroyed ${appName} on Fly.io`;
-  }
-
-  /**
-   * Get status of a specific seller app
-   */
-  public statusApp(name: string): string {
-    const appName = name.includes("-") ? name : `tb-seller-${name}`;
-    if (!this.runtime.checkFlyctlInstalled(this.flyctl)) {
-      throw new Error(`\`${this.flyctl}\` is not installed.`);
-    }
-    return this.runtime.execSync(`${this.flyctl} status --app ${appName}`, this.flyExecOptions({ encoding: "utf8" })) as string;
-  }
-
-  /**
-   * Update an existing seller app's Machines to a new image.
-   *
-   * This intentionally does not call `fly deploy --config`: existing seller
-   * deploys must not reconcile volumes, mounts, or service configuration.
-   */
-  public deploySeller(options: {
-    app: string;
-    config?: string;
-    image?: string;
-    dryRun?: boolean;
-  }): string {
-    const { app, image, dryRun } = options;
-    const targetImage = image;
-
-    if (!targetImage) {
-      throw new Error("seller deploy requires --image registry.fly.io/tb-seller:<v>");
-    }
-
-    if (dryRun) {
-      const lines = [`[DRY-RUN] Will update existing app machines: ${app}`];
-      lines.push(`  Image: ${targetImage}`);
-      lines.push("  Config: unchanged");
-      lines.push("  Volumes: unchanged");
-      return lines.join("\n");
-    }
-
-    if (!this.runtime.checkFlyctlInstalled(this.flyctl)) {
-      throw new Error(`\`${this.flyctl}\` is not installed.`);
-    }
-
-    const machinesJson = this.runtime.execSync(`${this.flyctl} machines list --app ${app} --json`, this.flyExecOptions({ encoding: "utf8" })) as string;
-    const machineIds = parseFlyMachineIds(machinesJson, app);
-
-    console.log(`[Fly.io] Updating ${app} image on ${machineIds.length} machine(s)...`);
-    for (const machineId of machineIds) {
-      this.runtime.execSync(
-        `${this.flyctl} machine update ${machineId} --app ${app} --image ${targetImage} --yes`,
-        this.flyExecOptions({ stdio: "inherit" })
-      );
-    }
-    return `Successfully updated ${app} image`;
-  }
-}
-
-function requireReadableFile(filePath: string, label: string): void {
-  if (!fs.existsSync(filePath)) {
-    throw new Error(`${label} file does not exist: ${filePath}`);
-  }
-  const stat = fs.statSync(filePath);
-  if (!stat.isFile()) {
-    throw new Error(`${label} path is not a file: ${filePath}`);
-  }
-  fs.accessSync(filePath, fs.constants.R_OK);
-}