deploy-stack 0.11.1 → 0.12.2

package/README.md

@@ -68,6 +68,7 @@ The interactive wizard will analyze your codebase, detect your framework, estima
 
 * **`npx deploy-stack apply`**
   Wraps Terraform execution in a beautiful, terminal-friendly UI. Automatically provisions your AWS infrastructure and outputs your live CDN and Load Balancer URLs.
+  *Tip: Append `--dry-run` to preview the architecture topology and estimated cost without provisioning anything.*
   
 * **`npx deploy-stack secrets push <file>`**
   Securely encrypts your local environment variables (e.g., `.env.production`) into AWS Secrets Manager and maps them to your ECS container at runtime.
@@ -143,22 +144,21 @@ npx deploy-stack --no-telemetry
 - [x] **Smart Experience:** Zero-config framework auto-discovery for static output directories.
 - [x] **Trust & Observability:** DevSecOps Trivy scanning, automated 5XX alarms, 14-day log retention, and safe local overwrite protections.
 
-### Phase 4: Trust Anchors & TAM Expansion (v0.9.0 - Current)
+### Phase 4: Trust Anchors & TAM Expansion (Completed)
 - [x] **Ecosystem Distribution:** Native GitHub Marketplace Action for rapid discovery.
 - [x] **Cost Transparency:** Pre-flight AWS cost estimator injected directly into the CLI wizard.
 - [x] **Zero Vendor Lock-In:** Explicit `npx deploy-stack eject` command to safely strip `ManagedBy` tags and CLI metadata, leaving behind pure IaC.
 - [x] **Heavy Backend Monoliths:** Hardened, unprivileged container adapters for Go, Nuxt.js, Django, and Rails, complete with automated zero-trust RDS PostgreSQL provisioning.
 
-### Phase 5: The Activation Engine (v0.10.0 - Current)
+### Phase 5: The Activation Engine (Completed)
 - [x] **Local Execution Wrapper:** Native `deploy-stack apply` command with terminal-optimized streaming to eliminate Terraform context switching.
-- [x] **Ecosystem Integrations:** Publishing official plugins to the Astro Integrations directory and backend framework ecosystems.
-- [ ] **Ephemeral PR Previews:** Generating live preview URLs on every GitHub Pull Request, turning single-user tests into team-wide advertisements.
-- [ ] **GitHub Deployments UI Sync:** Wiring up the native GitHub "Environments" tab for instant visual validation that the CLI succeeded in the background.
+- [x] **Ecosystem Integrations:** Official plugins published to the Astro Integrations directory (`astro-deploy-stack`) and Nuxt module registry (`nuxt-deploy-stack`).
 
-### Phase 6: Workflow Interception (IDE, AI, & Local Bridges)
-- [ ] **AI Agent Rulesets:** Publishing `.cursorrules` and Copilot instructions that teach AI assistants exactly how to utilize the CLI on the user's behalf.
+### Phase 6: Migration & Trust Engine (Current)
+- [x] **Dry-Run Visualization:** Interactive pre-flight terminal UI with ASCII topology maps and precise, dynamic AWS cost estimation.
+- [ ] **PaaS Importers:** Auto-parse `vercel.json` or Heroku `Procfile` configurations to map build commands and environment variables automatically.
 - [ ] **Docker Compose to ECS Translator:** Automatically converting a familiar local `docker-compose.yml` into production ECS task definitions.
-- [ ] **Dry-Run Visualization:** Generating a local `docker-compose.yml` mirror and a visual architecture map for local infrastructure validation.
+- [ ] **AI Agent Rulesets:** Publishing `.cursorrules` and Copilot instructions that teach AI assistants exactly how to utilize the CLI on the user's behalf.
 
 ---
 

package/bin/cli.js

@@ -20,6 +20,7 @@ const args = rawArgs.filter((arg) => arg !== '--no-telemetry');
 
 // 3. Parse headless flags
 const isHeadless = args.includes('--headless');
+const isDryRun = args.includes('--dry-run');
 const getFlag = (flagName) => {
     const match = args.find(a => a.startsWith(`--${flagName}=`));
     return match ? match.split('=')[1] : undefined;
@@ -41,7 +42,7 @@ if (args[0] === 'secrets' && args[1] === 'push') {
     const projectName = path.basename(process.cwd());
     pushSecrets(envFile, projectName).catch(console.error);
 } else if (args[0] === 'apply') {
-    applyStack().catch(console.error);
+    applyStack({ isDryRun }).catch(console.error);
 } else if (args[0] === 'doctor') {
     runDoctor().catch(console.error);
 } else if (args[0] === 'destroy') {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deploy-stack",
-  "version": "0.11.1",
+  "version": "0.12.2",
   "description": "Provision production-ready AWS infrastructure and CI/CD pipelines in seconds.",
   "engines": {
     "node": ">=18.0.0"

package/src/commands/apply.js

@@ -3,6 +3,8 @@ import path from 'path';
 import fs from 'fs';
 import { intro, outro, spinner, log, cancel } from '@clack/prompts';
 import color from 'picocolors';
+import { renderDryRunPreview, parseTerraformConfig } from '../utils/visualizer.js';
+import { detectFramework } from '../utils/detector.js';
 
 // Helper to run a command while piping the latest stdout line into a @clack spinner
 function runTerraformCommand(args, cwd, spin, loadingPrefix) {
@@ -69,7 +71,7 @@ function getTerraformOutputs(cwd) {
     });
 }
 
-export async function applyStack() {
+export async function applyStack(options = {}) {
     intro(color.bgCyan(color.black(' deploy-stack apply ☁️  ')));
 
     const targetDir = process.cwd();
@@ -82,20 +84,36 @@ export async function applyStack() {
         process.exit(1);
     }
 
+    // 2. Read the actual AWS configuration from disk (CPU, Memory, Region, Database)
+    const detectedConfig = parseTerraformConfig(tfDir);
+
+    // 3. Detect the framework name using your existing detector
+    const detectedFw = detectFramework(targetDir);
+    detectedConfig.framework = detectedFw ? detectedFw.name : 'Container';
+
+    // 4. Run the visualizer (passing the flag so it knows whether to prompt)
+    if (options.isDryRun) {
+        await renderDryRunPreview(detectedConfig, true);
+        outro(color.green('Dry run complete. No infrastructure was provisioned.'));
+        process.exit(0);
+    } else {
+        await renderDryRunPreview(detectedConfig, false);
+    }
+
     const s = spinner();
 
     try {
-        // 2. Run terraform init
+        // 5. Run terraform init
         s.start('Initializing Terraform plugins...');
         await runTerraformCommand(['init', '-upgrade'], tfDir, s, 'Initializing');
         log.success('Terraform initialized.');
 
-        // 3. Run terraform apply
+        // 6. Run terraform apply
         s.start('Provisioning AWS infrastructure (this may take 3–5 minutes)...');
         await runTerraformCommand(['apply', '-auto-approve'], tfDir, s, 'Provisioning');
         s.stop('AWS infrastructure provisioned successfully!');
 
-        // 4. Extract and print the outputs
+        // 7. Extract and print the outputs
         const outputs = await getTerraformOutputs(tfDir);
 
         const cfUrl = outputs.cloudfront_url?.value;

package/src/commands/init.js

@@ -12,6 +12,7 @@ import { getFrameworkWarning } from '../utils/warnings.js';
 import { provisionStateBucket } from '../utils/aws.js';
 import { generateTemplates } from '../utils/generator.js';
 import { handleExistingFiles } from '../utils/backup.js';
+import { estimateMonthlyCost } from '../utils/visualizer.js';
 
 export async function mainStack({ isHeadless = false, headlessOptions = {} } = {}) {
     const startTime = Date.now();
@@ -60,7 +61,7 @@ export async function mainStack({ isHeadless = false, headlessOptions = {} } = {
         intro(color.bgCyan(color.black(' deploy-stack ☁️  ')));
 
         // 2. Ask for the target directory FIRST
-        const projectName = await text({
+        projectName = await text({
             message: 'Where should we generate the infrastructure? (Type "." for current directory)',
             placeholder: '.',
             initialValue: '.',
@@ -75,8 +76,8 @@ export async function mainStack({ isHeadless = false, headlessOptions = {} } = {
             process.exit(0);
         }
 
-        const actualProjectName = projectName === '.' ? path.basename(process.cwd()) : projectName;
-        const targetDir = projectName === '.' ? process.cwd() : path.join(process.cwd(), projectName);
+        actualProjectName = projectName === '.' ? path.basename(process.cwd()) : projectName;
+        targetDir = projectName === '.' ? process.cwd() : path.join(process.cwd(), projectName);
 
         // 2.5 Run the scanner
         const detectedFramework = detectFramework(targetDir);
@@ -85,7 +86,7 @@ export async function mainStack({ isHeadless = false, headlessOptions = {} } = {
         }
 
         // 2.6 Resolve the framework
-        let finalFramework = detectedFramework ? detectedFramework.id : null;
+        finalFramework = detectedFramework ? detectedFramework.id : null;
 
         if (!finalFramework) {
             finalFramework = await select({
@@ -109,7 +110,7 @@ export async function mainStack({ isHeadless = false, headlessOptions = {} } = {
         }
 
         // --- DJANGO SPECIFIC PROMPT ---
-        let djangoWsgi = 'core.wsgi';
+        djangoWsgi = 'core.wsgi';
         if (finalFramework === 'django') {
             djangoWsgi = await text({
                 message: 'What is the Python module path to your Django wsgi.py?',
@@ -120,7 +121,7 @@ export async function mainStack({ isHeadless = false, headlessOptions = {} } = {
         }
 
         // 3. Prompt for Setup Mode
-        const setupType = await select({
+        setupType = await select({
             message: 'Choose your setup mode:',
             options: [
                 { value: 'quick', label: '⚡ Quickstart (Recommended)', hint: 'Production defaults, minimal prompts' },
@@ -141,7 +142,7 @@ export async function mainStack({ isHeadless = false, headlessOptions = {} } = {
         if (finalFramework === 'rails') defaultPort = '3000';
         if (finalFramework === 'go') defaultPort = '8080';
 
-        let currentGitBranch = 'main';
+        currentGitBranch = 'main';
         try {
             currentGitBranch = execSync('git symbolic-ref --short HEAD', { cwd: targetDir, stdio: 'pipe' }).toString().trim();
         } catch (e) {
@@ -149,7 +150,7 @@ export async function mainStack({ isHeadless = false, headlessOptions = {} } = {
         }
 
         // 5. Ask for Managed Database (Only for Backend/Fullstack Frameworks)
-        let needsDatabase = false;
+        needsDatabase = false;
         const isBackendFramework = ['node', 'nextjs', 'nuxt', 'python', 'django', 'rails', 'go'].includes(finalFramework);
 
         if (isBackendFramework) {
@@ -166,7 +167,7 @@ export async function mainStack({ isHeadless = false, headlessOptions = {} } = {
         }
 
         // 6. Prompt Configuration Group
-        const project = await group(
+        project = await group(
             {
                 region: () =>
                     select({
@@ -234,20 +235,17 @@ export async function mainStack({ isHeadless = false, headlessOptions = {} } = {
     // 7. Map the user's choices and update the variables
     const cpu = project.size === 'small' ? '512' : '256';
     const memory = project.size === 'small' ? '1024' : '512';
-
-    const baseCost = project.size === 'small' ? 35 : 25;
-    const dbCost = needsDatabase ? 14 : 0;
-    const totalCost = baseCost + dbCost;
-
     const computeTier = project.size === 'small' ? 'Small (0.5 vCPU, 1GB RAM)' : 'Micro (0.25 vCPU, 512MB RAM)';
-    const estimatedCost = `~$${totalCost}.00 / month${needsDatabase ? ' (Includes Fargate + RDS PostgreSQL)' : ''}`;
+
+    const costs = estimateMonthlyCost({ cpu: parseInt(cpu), memory: parseInt(memory), hasDb: needsDatabase });
+    const estimatedCost = `~$${costs.totalMonthly} / month${needsDatabase ? ' (Includes Fargate + RDS PostgreSQL)' : ''}`;
 
     const healthCheckPath = project.healthCheckPath || '/';
     const desiredCount = project.desiredCount || '1';
     const deployBranch = project.branch || currentGitBranch;
     const buildDir = detectedFramework?.buildDir || 'dist';
 
-    // 7.4 Check for conflicting CI boilerplate (Rails)
+    // 7.1 Check for conflicting CI boilerplate (Rails)
     if (finalFramework === 'rails') {
         const ciPath = path.join(targetDir, '.github', 'workflows', 'ci.yml');
         const dependabotPath = path.join(targetDir, '.github', 'dependabot.yml');
@@ -271,20 +269,6 @@ export async function mainStack({ isHeadless = false, headlessOptions = {} } = {
         }
     }
 
-    // 7.5. The Pre-Flight Cost Estimator
-    // We explicitly ask for financial consent to eliminate AWS billing anxiety.
-    if (!isHeadless) {
-        console.log(''); // Add a blank line for visual pacing
-        const costConsent = await confirm({
-            message: color.yellow(`⚠️  Pre-Flight Check: This AWS architecture will cost ${estimatedCost}. Proceed with provisioning?`),
-            initialValue: true,
-        });
-        if (!costConsent || typeof costConsent === 'symbol') {
-            cancel('Deployment cancelled. No AWS resources were provisioned.');
-            process.exit(0);
-        }
-    }
-
     // 8. Safely handle existing files (Backup and auto-prune)
     await handleExistingFiles(targetDir, isHeadless);
 
@@ -350,8 +334,10 @@ export async function mainStack({ isHeadless = false, headlessOptions = {} } = {
 
     const isGitInitialized = fsSync.existsSync(path.join(targetDir, '.git'));
 
-    const cdStep = projectName === '.' ? '' : `1. cd ${projectName}\n        `;
-    const applyStep = `${cdStep}npx deploy-stack apply`;
+    const needsCd = projectName && projectName !== '.';
+    const applyStep = needsCd
+        ? `cd ${projectName} && npx deploy-stack apply`
+        : 'npx deploy-stack apply';
 
     const gitInstructions = isGitInitialized
         ? `git add . && git commit -m "chore: add AWS infrastructure and CI/CD" && git push`

package/src/utils/visualizer.js

@@ -0,0 +1,107 @@
+import { note, confirm, isCancel, cancel } from '@clack/prompts';
+import pc from 'picocolors';
+import fs from 'fs';
+import path from 'path';
+
+// Cost benchmarks for AWS us-east-1 baseline (Fargate + ALB)
+const PRICING_TABLE = {
+    fargate: {
+        cpuPerHour: 0.04048,   // per vCPU hour
+        memoryPerHour: 0.004445 // per GB hour
+    },
+    alb: {
+        basePerHour: 0.0225,   // ~$16.20/month
+        lcuPerHour: 0.008      // Baseline ~1 LCU (~$5.76/month)
+    },
+    rds: {
+        microPerHour: 0.016,   // ~$11.68/mo for db.t4g.micro
+        storagePerMonth: 2.30  // 20GB gp3 storage baseline
+    }
+};
+
+// 1. Parse the local terraform files to extract the actual configuration
+export function parseTerraformConfig(tfDir) {
+    const tfvarsPath = path.join(tfDir, 'terraform.tfvars');
+    let region = 'us-east-1';
+    let cpu = 256;
+    let memory = 512;
+    let framework = 'Application';
+
+    if (fs.existsSync(tfvarsPath)) {
+        const content = fs.readFileSync(tfvarsPath, 'utf-8');
+
+        // Use regex to pull values out of the HCL format
+        const regionMatch = content.match(/aws_region\s*=\s*"([^"]+)"/);
+        if (regionMatch) region = regionMatch[1];
+
+        const cpuMatch = content.match(/container_cpu\s*=\s*(\d+)/);
+        if (cpuMatch) cpu = parseInt(cpuMatch[1], 10);
+
+        const memoryMatch = content.match(/container_memory\s*=\s*(\d+)/);
+        if (memoryMatch) memory = parseInt(memoryMatch[1], 10);
+    }
+
+    // Check if database files exist
+    const hasDb = fs.existsSync(path.join(tfDir, 'rds.tf')) || fs.existsSync(path.join(tfDir, 'database.tf'));
+
+    return { framework, region, cpu, memory, hasDb };
+}
+
+// 2. Calculate itemized monthly costs based on task definition settings
+export function estimateMonthlyCost({ cpu = 256, memory = 512, hasDb = false }) {
+    const vCpu = cpu / 1024;
+    const memGb = memory / 1024;
+    const hoursInMonth = 730;
+
+    const fargateCost = ((vCpu * PRICING_TABLE.fargate.cpuPerHour) +
+        (memGb * PRICING_TABLE.fargate.memoryPerHour)) * hoursInMonth;
+    const albCost = (PRICING_TABLE.alb.basePerHour + PRICING_TABLE.alb.lcuPerHour) * hoursInMonth;
+    const dbCost = hasDb ? (PRICING_TABLE.rds.microPerHour * hoursInMonth) + PRICING_TABLE.rds.storagePerMonth : 0;
+
+    const total = fargateCost + albCost + dbCost;
+
+    return {
+        fargateMonthly: fargateCost.toFixed(2),
+        albMonthly: albCost.toFixed(2),
+        dbMonthly: dbCost.toFixed(2),
+        totalMonthly: total.toFixed(2)
+    };
+}
+
+// 3. Render the terminal architecture visualization and requests confirmation
+export async function renderDryRunPreview(config, isDryRunFlag = false) {
+    const { framework = 'Node.js', region = 'us-east-1', cpu = 256, memory = 512, hasDb = false } = config;
+    const cost = estimateMonthlyCost({ cpu, memory, hasDb });
+
+    const hourlyRate = (cost.totalMonthly / 730).toFixed(3); // 730 hours in a month
+
+    const treeOutput = [
+        `${pc.bold('Topology')} (${pc.cyan(region)}):`,
+        `  ${pc.gray('├──')} 🌐 ${pc.bold('ALB')} (Public Entry & Health: ${pc.green('200 OK')})`,
+        `  ${pc.gray('├──')} 🔒 ${pc.bold('IAM OIDC')} (GitHub Auth) & 🐳 ${pc.bold('ECR')} (Registry)`,
+        `  ${pc.gray('└──')} 📦 ${pc.bold('ECS Fargate Cluster')} 🟢 ${pc.green(framework)} [${cpu} CPU / ${memory} MB]`,
+        hasDb ? `       └── 🛢️  ${pc.yellow('Amazon RDS')} (PostgreSQL managed instance)` : '',
+        '',
+        `${pc.bold('Est. Monthly Cost:')} ${pc.green(pc.bold(`~$${cost.totalMonthly}`))} ${pc.dim(`(ALB: $${cost.albMonthly}, Fargate: $${cost.fargateMonthly}${hasDb ? `, RDS: $${cost.dbMonthly}` : ''})`)}`,
+        `  ${pc.dim(`* Hourly billing: ~$${hourlyRate}/hr. Destroy anytime with "npx deploy-stack destroy --yes"`)}`
+    ].filter(Boolean).join('\n');
+
+    note(treeOutput, 'Cloud Infrastructure Pre-Flight Inspection');
+
+    // 4. Check if this is a dry run (print & exit) or full apply (prompt & proceed)
+    if (isDryRunFlag) {
+        return true;
+    }
+
+    const shouldProceed = await confirm({
+        message: 'Review completed. Provision this infrastructure to AWS now?',
+        initialValue: true
+    });
+
+    if (isCancel(shouldProceed) || !shouldProceed) {
+        cancel('Operation canceled. No infrastructure was created.');
+        process.exit(0);
+    }
+
+    return true;
+}