@tolinax/ayoune-cli 2026.9.0 → 2026.10.0

package/lib/commands/provision/_detectTools.js

@@ -0,0 +1,52 @@
+// Provider-tool detection — checks whether the CLI binary needed by a
+// provider subcommand is installed and prints a clear "how to install"
+// message if not. Pattern lifted from `detectRuntime()` in
+// `createSelfHostUpdateCommand.ts`.
+import { runCommand } from "../../helpers/dockerCompose.js";
+import { cliError } from "../../helpers/cliError.js";
+import { EXIT_GENERAL_ERROR } from "../../exitCodes.js";
+const TOOL_PROBES = {
+    terraform: {
+        cmd: "terraform version",
+        expect: "Terraform v",
+        install: "Install Terraform: https://developer.hashicorp.com/terraform/install — or `brew install terraform` / `choco install terraform`.",
+    },
+    aws: {
+        cmd: "aws --version",
+        expect: "aws-cli",
+        install: "Install AWS CLI: https://docs.aws.amazon.com/cli/latest/userguide/getting-started-install.html",
+    },
+    gcloud: {
+        cmd: "gcloud --version",
+        expect: "Google Cloud SDK",
+        install: "Install gcloud: https://cloud.google.com/sdk/docs/install",
+    },
+    az: {
+        cmd: "az --version",
+        expect: "azure-cli",
+        install: "Install Azure CLI: https://learn.microsoft.com/en-us/cli/azure/install-azure-cli",
+    },
+    doctl: {
+        cmd: "doctl version",
+        expect: "doctl version",
+        install: "Install doctl: https://docs.digitalocean.com/reference/doctl/how-to/install/",
+    },
+};
+/**
+ * Verify that a provider tool is installed. Aborts via cliError when
+ * missing — the user gets one clear "install X" line instead of a confusing
+ * shell error from the actual provider command.
+ */
+export function requireTool(tool) {
+    const probe = TOOL_PROBES[tool];
+    const out = runCommand(`${probe.cmd} 2>&1`);
+    if (!out.toLowerCase().includes(probe.expect.toLowerCase())) {
+        cliError(`${tool} is not installed or not on PATH.\n  ${probe.install}`, EXIT_GENERAL_ERROR);
+    }
+}
+/** Check whether a tool is installed without aborting — used by `ay doctor`. */
+export function hasTool(tool) {
+    const probe = TOOL_PROBES[tool];
+    const out = runCommand(`${probe.cmd} 2>&1`);
+    return out.toLowerCase().includes(probe.expect.toLowerCase());
+}

package/lib/commands/provision/_stateFile.js

@@ -0,0 +1,36 @@
+// Per-provider provisioning state — persisted to
+// `~/.ayoune/provision/<provider>.json`. Holds whatever the wizard collected
+// + outputs from the provider tool (terraform outputs, CFN stack name, etc.)
+// so `ay provision status` and `ay provision destroy` can find their way
+// back without re-prompting.
+import { readFile, writeFile, mkdir } from "fs/promises";
+import { existsSync } from "fs";
+import path from "path";
+import os from "os";
+export function getStateDir() {
+    return path.join(os.homedir(), ".ayoune", "provision");
+}
+export function getStatePath(provider) {
+    return path.join(getStateDir(), `${provider}.json`);
+}
+export async function readState(provider) {
+    const file = getStatePath(provider);
+    if (!existsSync(file))
+        return null;
+    try {
+        const raw = await readFile(file, "utf-8");
+        return JSON.parse(raw);
+    }
+    catch (_a) {
+        return null;
+    }
+}
+export async function writeState(state) {
+    const dir = getStateDir();
+    if (!existsSync(dir))
+        await mkdir(dir, { recursive: true });
+    const file = getStatePath(state.provider);
+    state.updatedAt = new Date().toISOString();
+    await writeFile(file, JSON.stringify(state, null, 2), "utf-8");
+    return file;
+}

package/lib/commands/provision/_wizard.js

@@ -0,0 +1,60 @@
+// Shared param-collection wizard. Each provider subcommand starts here to
+// gather the cross-cutting fields (domain, license key, modules, contact
+// email) before tacking on its provider-specific questions. Keeps the
+// per-provider files focused on what's actually different between them.
+export const COMMON_MODULES = [
+    "crm",
+    "marketing",
+    "hr",
+    "ecommerce",
+    "pm",
+    "automation",
+    "accounting",
+    "support",
+    "reporting",
+    "monitoring",
+];
+export async function runBaseWizard(opts) {
+    const inquirer = (await import("inquirer")).default;
+    return inquirer.prompt([
+        {
+            type: "input",
+            name: "domain",
+            message: "Domain to deploy under (e.g. ayoune.example.com):",
+            validate: (v) => v.length > 3 || "Domain is required",
+        },
+        {
+            type: "input",
+            name: "contactEmail",
+            message: "Contact email (used for cert-manager / billing):",
+            validate: (v) => /.+@.+\..+/.test(v) || "Valid email required",
+        },
+        {
+            type: "input",
+            name: "licenseKey",
+            message: "License key (leave blank for 14-day trial):",
+            default: "",
+        },
+        {
+            type: "checkbox",
+            name: "modules",
+            message: "Select modules to enable:",
+            choices: COMMON_MODULES,
+            default: ["crm"],
+        },
+        {
+            type: opts.regionChoices ? "list" : "input",
+            name: "region",
+            message: "Region:",
+            choices: opts.regionChoices,
+            default: opts.defaultRegion,
+        },
+        {
+            type: opts.instanceChoices ? "list" : "input",
+            name: "instanceSize",
+            message: "Instance size:",
+            choices: opts.instanceChoices,
+            default: opts.defaultInstance,
+        },
+    ]);
+}

package/lib/commands/provision/aws.js

@@ -0,0 +1,107 @@
+// `ay provision aws` — deploy aYOUne to AWS via the marketplace
+// CloudFormation template at infrastructure/marketplace/aws/cloudformation.yaml.
+//
+// Far thinner than the Hetzner subcommand because CloudFormation handles all
+// the heavy lifting — we just collect parameters and shell out to
+// `aws cloudformation deploy`.
+import path from "path";
+import { existsSync } from "fs";
+import chalk from "chalk";
+import { spawn } from "child_process";
+import { spinner } from "../../../index.js";
+import { cliError } from "../../helpers/cliError.js";
+import { EXIT_GENERAL_ERROR } from "../../exitCodes.js";
+import { requireTool } from "./_detectTools.js";
+import { runBaseWizard } from "./_wizard.js";
+import { writeState } from "./_stateFile.js";
+const AWS_REGIONS = ["us-east-1", "us-west-2", "eu-central-1", "eu-west-1", "ap-southeast-1"];
+const AWS_INSTANCE_TYPES = ["t3.medium", "t3.large", "m6i.large", "m6i.xlarge", "c6i.xlarge"];
+function streamCmd(cmd, args) {
+    return new Promise((resolve) => {
+        const child = spawn(cmd, args, {
+            stdio: "inherit",
+            shell: process.platform === "win32",
+        });
+        child.on("exit", (code) => resolve(code !== null && code !== void 0 ? code : 0));
+        child.on("error", () => resolve(1));
+    });
+}
+export function addAwsSubcommand(prov) {
+    prov
+        .command("aws")
+        .description("Provision aYOUne to AWS via CloudFormation")
+        .option("--stack-name <name>", "CloudFormation stack name", "ayoune")
+        .option("--region <region>", "AWS region")
+        .option("--dry-run", "Show what would be deployed without applying", false)
+        .action(async (options) => {
+        var _a;
+        try {
+            requireTool("aws");
+            const template = findMarketplaceFile("aws", "cloudformation.yaml");
+            if (!template) {
+                cliError("Could not find infrastructure/marketplace/aws/cloudformation.yaml — run from the monorepo.", EXIT_GENERAL_ERROR);
+            }
+            const base = await runBaseWizard({
+                regionChoices: AWS_REGIONS,
+                defaultRegion: (_a = options.region) !== null && _a !== void 0 ? _a : "us-east-1",
+                instanceChoices: AWS_INSTANCE_TYPES,
+                defaultInstance: "t3.large",
+            });
+            const params = [
+                `Domain=${base.domain}`,
+                `ContactEmail=${base.contactEmail}`,
+                `LicenseKey=${base.licenseKey || "trial"}`,
+                `InstanceType=${base.instanceSize}`,
+                `EnabledModules=${base.modules.join(",")}`,
+            ];
+            if (options.dryRun) {
+                console.log(chalk.yellow("\n  --dry-run set — would run:"));
+                console.log(chalk.dim(`    aws cloudformation deploy --template-file ${template} --stack-name ${options.stackName} --region ${base.region} --parameter-overrides ${params.join(" ")}`));
+                return;
+            }
+            spinner.start({ text: "Deploying CloudFormation stack...", color: "cyan" });
+            const code = await streamCmd("aws", [
+                "cloudformation",
+                "deploy",
+                "--template-file",
+                template,
+                "--stack-name",
+                options.stackName,
+                "--region",
+                base.region,
+                "--capabilities",
+                "CAPABILITY_NAMED_IAM",
+                "--parameter-overrides",
+                ...params,
+            ]);
+            if (code !== 0)
+                cliError("CloudFormation deploy failed", EXIT_GENERAL_ERROR);
+            spinner.success({ text: "Stack deployed" });
+            const file = await writeState({
+                provider: "aws",
+                createdAt: new Date().toISOString(),
+                updatedAt: new Date().toISOString(),
+                region: base.region,
+                domain: base.domain,
+                modules: base.modules,
+                params: { stackName: options.stackName, instanceType: base.instanceSize },
+            });
+            console.log(chalk.dim(`  State file: ${file}`));
+        }
+        catch (e) {
+            cliError(e.message || "AWS provisioning failed", EXIT_GENERAL_ERROR);
+        }
+    });
+}
+function findMarketplaceFile(provider, file) {
+    let dir = process.cwd();
+    while (true) {
+        const candidate = path.join(dir, "infrastructure", "marketplace", provider, file);
+        if (existsSync(candidate))
+            return candidate;
+        const parent = path.dirname(dir);
+        if (parent === dir)
+            return null;
+        dir = parent;
+    }
+}

package/lib/commands/provision/azure.js

@@ -0,0 +1,113 @@
+// `ay provision azure` — deploy aYOUne to Azure via the marketplace ARM
+// template at infrastructure/marketplace/azure/azuredeploy.json.
+import path from "path";
+import { existsSync } from "fs";
+import chalk from "chalk";
+import { spawn } from "child_process";
+import { spinner } from "../../../index.js";
+import { cliError } from "../../helpers/cliError.js";
+import { EXIT_GENERAL_ERROR } from "../../exitCodes.js";
+import { requireTool } from "./_detectTools.js";
+import { runBaseWizard } from "./_wizard.js";
+import { writeState } from "./_stateFile.js";
+const AZURE_REGIONS = ["westeurope", "northeurope", "eastus", "westus2", "southeastasia"];
+const AZURE_VM_SIZES = ["Standard_D2s_v5", "Standard_D4s_v5", "Standard_D8s_v5"];
+function streamCmd(cmd, args) {
+    return new Promise((resolve) => {
+        const child = spawn(cmd, args, {
+            stdio: "inherit",
+            shell: process.platform === "win32",
+        });
+        child.on("exit", (code) => resolve(code !== null && code !== void 0 ? code : 0));
+        child.on("error", () => resolve(1));
+    });
+}
+export function addAzureSubcommand(prov) {
+    prov
+        .command("azure")
+        .description("Provision aYOUne to Azure via ARM template")
+        .option("--resource-group <rg>", "Resource group name", "ayoune")
+        .option("--region <region>", "Azure region")
+        .option("--dry-run", "Print commands without running them", false)
+        .action(async (options) => {
+        var _a;
+        try {
+            requireTool("az");
+            const template = findMarketplaceFile("azure", "azuredeploy.json");
+            if (!template) {
+                cliError("Could not find infrastructure/marketplace/azure/azuredeploy.json — run from the monorepo.", EXIT_GENERAL_ERROR);
+            }
+            const base = await runBaseWizard({
+                regionChoices: AZURE_REGIONS,
+                defaultRegion: (_a = options.region) !== null && _a !== void 0 ? _a : "westeurope",
+                instanceChoices: AZURE_VM_SIZES,
+                defaultInstance: "Standard_D4s_v5",
+            });
+            const params = [
+                `domain=${base.domain}`,
+                `contactEmail=${base.contactEmail}`,
+                `licenseKey=${base.licenseKey || "trial"}`,
+                `vmSize=${base.instanceSize}`,
+                `enabledModules=${base.modules.join(",")}`,
+            ];
+            if (options.dryRun) {
+                console.log(chalk.yellow("\n  --dry-run set — would run:"));
+                console.log(chalk.dim(`    az group create --name ${options.resourceGroup} --location ${base.region}`));
+                console.log(chalk.dim(`    az deployment group create --resource-group ${options.resourceGroup} --template-file ${template} --parameters ${params.join(" ")}`));
+                return;
+            }
+            spinner.start({ text: "Creating resource group...", color: "cyan" });
+            const groupCode = await streamCmd("az", [
+                "group",
+                "create",
+                "--name",
+                options.resourceGroup,
+                "--location",
+                base.region,
+            ]);
+            if (groupCode !== 0)
+                cliError("Resource group create failed", EXIT_GENERAL_ERROR);
+            spinner.success({ text: "Resource group ready" });
+            spinner.start({ text: "Deploying ARM template...", color: "cyan" });
+            const deployCode = await streamCmd("az", [
+                "deployment",
+                "group",
+                "create",
+                "--resource-group",
+                options.resourceGroup,
+                "--template-file",
+                template,
+                "--parameters",
+                ...params,
+            ]);
+            if (deployCode !== 0)
+                cliError("ARM deployment failed", EXIT_GENERAL_ERROR);
+            spinner.success({ text: "ARM deployment complete" });
+            const file = await writeState({
+                provider: "azure",
+                createdAt: new Date().toISOString(),
+                updatedAt: new Date().toISOString(),
+                region: base.region,
+                domain: base.domain,
+                modules: base.modules,
+                params: { resourceGroup: options.resourceGroup, vmSize: base.instanceSize },
+            });
+            console.log(chalk.dim(`  State file: ${file}`));
+        }
+        catch (e) {
+            cliError(e.message || "Azure provisioning failed", EXIT_GENERAL_ERROR);
+        }
+    });
+}
+function findMarketplaceFile(provider, file) {
+    let dir = process.cwd();
+    while (true) {
+        const candidate = path.join(dir, "infrastructure", "marketplace", provider, file);
+        if (existsSync(candidate))
+            return candidate;
+        const parent = path.dirname(dir);
+        if (parent === dir)
+            return null;
+        dir = parent;
+    }
+}

package/lib/commands/provision/destroy.js

@@ -0,0 +1,119 @@
+// `ay provision destroy <provider>` — tear down a provisioned environment.
+//
+// Reads the saved state file, then dispatches to the provider-native
+// teardown command. Always confirms first (unless --yes) — this is the
+// most destructive command in the CLI.
+import chalk from "chalk";
+import { spawn } from "child_process";
+import { spinner } from "../../../index.js";
+import { cliError } from "../../helpers/cliError.js";
+import { EXIT_GENERAL_ERROR, EXIT_MISUSE } from "../../exitCodes.js";
+import { readState } from "./_stateFile.js";
+import { requireTool } from "./_detectTools.js";
+const PROVIDERS = ["hetzner", "aws", "gcp", "azure", "digitalocean"];
+function streamCmd(cmd, args, cwd) {
+    return new Promise((resolve) => {
+        const child = spawn(cmd, args, {
+            cwd,
+            stdio: "inherit",
+            shell: process.platform === "win32",
+        });
+        child.on("exit", (code) => resolve(code !== null && code !== void 0 ? code : 0));
+        child.on("error", () => resolve(1));
+    });
+}
+export function addDestroySubcommand(prov) {
+    prov
+        .command("destroy <provider>")
+        .description("Tear down a provisioned environment for the given provider")
+        .option("-y, --yes", "Skip confirmation prompt", false)
+        .action(async (provider, options) => {
+        var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
+        try {
+            if (!PROVIDERS.includes(provider)) {
+                cliError(`Unknown provider "${provider}" — expected one of: ${PROVIDERS.join(", ")}`, EXIT_MISUSE);
+            }
+            const state = await readState(provider);
+            if (!state) {
+                cliError(`No provisioning state for "${provider}". Nothing to destroy.`, EXIT_MISUSE);
+            }
+            if (!options.yes && process.stdin.isTTY) {
+                const inquirer = (await import("inquirer")).default;
+                const { ok } = await inquirer.prompt([
+                    {
+                        type: "confirm",
+                        name: "ok",
+                        message: chalk.red(`DESTROY the ${provider} deployment for ${state.domain}? This is irreversible.`),
+                        default: false,
+                    },
+                ]);
+                if (!ok)
+                    return;
+            }
+            let code;
+            switch (provider) {
+                case "hetzner": {
+                    requireTool("terraform");
+                    const workDir = (_a = state.params) === null || _a === void 0 ? void 0 : _a.workDir;
+                    if (!workDir)
+                        cliError("Missing terraform working dir in state file", EXIT_GENERAL_ERROR);
+                    spinner.start({ text: "Running `terraform destroy`...", color: "red" });
+                    code = await streamCmd("terraform", ["destroy", "-auto-approve"], workDir);
+                    break;
+                }
+                case "aws": {
+                    requireTool("aws");
+                    const stackName = (_c = (_b = state.params) === null || _b === void 0 ? void 0 : _b.stackName) !== null && _c !== void 0 ? _c : "ayoune";
+                    spinner.start({ text: "Deleting CloudFormation stack...", color: "red" });
+                    code = await streamCmd("aws", [
+                        "cloudformation",
+                        "delete-stack",
+                        "--stack-name",
+                        stackName,
+                        "--region",
+                        (_d = state.region) !== null && _d !== void 0 ? _d : "",
+                    ]);
+                    break;
+                }
+                case "gcp": {
+                    requireTool("gcloud");
+                    const cluster = (_f = (_e = state.params) === null || _e === void 0 ? void 0 : _e.cluster) !== null && _f !== void 0 ? _f : "ayoune";
+                    const project = (_g = state.params) === null || _g === void 0 ? void 0 : _g.project;
+                    spinner.start({ text: "Deleting GKE cluster...", color: "red" });
+                    code = await streamCmd("gcloud", [
+                        "container",
+                        "clusters",
+                        "delete",
+                        cluster,
+                        "--region",
+                        (_h = state.region) !== null && _h !== void 0 ? _h : "",
+                        "--project",
+                        project,
+                        "--quiet",
+                    ]);
+                    break;
+                }
+                case "azure": {
+                    requireTool("az");
+                    const rg = (_k = (_j = state.params) === null || _j === void 0 ? void 0 : _j.resourceGroup) !== null && _k !== void 0 ? _k : "ayoune";
+                    spinner.start({ text: "Deleting resource group...", color: "red" });
+                    code = await streamCmd("az", ["group", "delete", "--name", rg, "--yes"]);
+                    break;
+                }
+                case "digitalocean": {
+                    requireTool("doctl");
+                    console.log(chalk.yellow("  doctl does not store the app id locally. Run `doctl apps list` and `doctl apps delete <id>` manually."));
+                    return;
+                }
+            }
+            if (code !== 0) {
+                spinner.error({ text: "Destroy failed" });
+                cliError("Destroy failed", EXIT_GENERAL_ERROR);
+            }
+            spinner.success({ text: `${provider} environment destroyed` });
+        }
+        catch (e) {
+            cliError(e.message || "Destroy failed", EXIT_GENERAL_ERROR);
+        }
+    });
+}

package/lib/commands/provision/digitalocean.js

@@ -0,0 +1,82 @@
+// `ay provision digitalocean` — deploy aYOUne to DO App Platform via the
+// marketplace app spec at infrastructure/marketplace/digitalocean/app-spec.yaml.
+import path from "path";
+import { existsSync } from "fs";
+import chalk from "chalk";
+import { spawn } from "child_process";
+import { spinner } from "../../../index.js";
+import { cliError } from "../../helpers/cliError.js";
+import { EXIT_GENERAL_ERROR } from "../../exitCodes.js";
+import { requireTool } from "./_detectTools.js";
+import { runBaseWizard } from "./_wizard.js";
+import { writeState } from "./_stateFile.js";
+const DO_REGIONS = ["fra1", "ams3", "lon1", "nyc3", "sfo3", "sgp1"];
+const DO_INSTANCE_SIZES = ["basic-xs", "basic-s", "basic-m", "basic-l", "professional-xs", "professional-s"];
+function streamCmd(cmd, args) {
+    return new Promise((resolve) => {
+        const child = spawn(cmd, args, {
+            stdio: "inherit",
+            shell: process.platform === "win32",
+        });
+        child.on("exit", (code) => resolve(code !== null && code !== void 0 ? code : 0));
+        child.on("error", () => resolve(1));
+    });
+}
+export function addDigitalOceanSubcommand(prov) {
+    prov
+        .command("digitalocean")
+        .alias("do")
+        .description("Provision aYOUne to DigitalOcean App Platform")
+        .option("--dry-run", "Print commands without running them", false)
+        .action(async (options) => {
+        try {
+            requireTool("doctl");
+            const spec = findMarketplaceFile("digitalocean", "app-spec.yaml");
+            if (!spec) {
+                cliError("Could not find infrastructure/marketplace/digitalocean/app-spec.yaml — run from the monorepo.", EXIT_GENERAL_ERROR);
+            }
+            const base = await runBaseWizard({
+                regionChoices: DO_REGIONS,
+                defaultRegion: "fra1",
+                instanceChoices: DO_INSTANCE_SIZES,
+                defaultInstance: "basic-m",
+            });
+            if (options.dryRun) {
+                console.log(chalk.yellow("\n  --dry-run set — would run:"));
+                console.log(chalk.dim(`    doctl apps create --spec ${spec}`));
+                console.log(chalk.dim(`    (with domain=${base.domain}, region=${base.region}, size=${base.instanceSize})`));
+                return;
+            }
+            spinner.start({ text: "Creating DigitalOcean app...", color: "cyan" });
+            const code = await streamCmd("doctl", ["apps", "create", "--spec", spec]);
+            if (code !== 0)
+                cliError("App create failed", EXIT_GENERAL_ERROR);
+            spinner.success({ text: "App created" });
+            const file = await writeState({
+                provider: "digitalocean",
+                createdAt: new Date().toISOString(),
+                updatedAt: new Date().toISOString(),
+                region: base.region,
+                domain: base.domain,
+                modules: base.modules,
+                params: { instanceSize: base.instanceSize },
+            });
+            console.log(chalk.dim(`  State file: ${file}`));
+        }
+        catch (e) {
+            cliError(e.message || "DigitalOcean provisioning failed", EXIT_GENERAL_ERROR);
+        }
+    });
+}
+function findMarketplaceFile(provider, file) {
+    let dir = process.cwd();
+    while (true) {
+        const candidate = path.join(dir, "infrastructure", "marketplace", provider, file);
+        if (existsSync(candidate))
+            return candidate;
+        const parent = path.dirname(dir);
+        if (parent === dir)
+            return null;
+        dir = parent;
+    }
+}