deploy-stack 0.2.6 → 0.2.8

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deploy-stack",
-  "version": "0.2.6",
+  "version": "0.2.8",
   "description": "Provision production-ready AWS infrastructure and CI/CD pipelines in seconds.",
   "type": "module",
   "bin": {

package/src/commands/init.js

@@ -6,7 +6,7 @@ import color from 'picocolors';
 
 import { checkDependency } from '../utils/system.js';
 import { detectFramework } from '../utils/detector.js';
-import { trackEvent } from '../core/telemetry.js';
+import { trackEvent, flushTelemetry } from '../core/telemetry.js';
 import { getFrameworkWarning } from '../utils/warnings.js';
 import { provisionStateBucket } from '../utils/aws.js';
 import { generateTemplates } from '../utils/generator.js';
@@ -193,6 +193,7 @@ export async function mainStack() {
         s.stop('❌ Failed to provision remote state or authenticate with AWS.');
         console.error(color.red(`AWS Error: ${error.message}`));
         trackEvent('cli-error', { step: 'aws_provisioning', error_code: error.name || 'UNKNOWN' });
+        await flushTelemetry();
         process.exit(1);
     }
 
@@ -251,4 +252,7 @@ export async function mainStack() {
     ${color.magenta('🚀 Infrastructure ready! Need help or have feedback? Grab 15 mins with Anton:')}
     ${color.underline('https://calendly.com/anton-codes-iac/15min')}
     `);
+
+    // 10.Ensure all analytics are sent before the CLI terminates
+    await flushTelemetry();
 }

package/src/core/telemetry.js

@@ -1,9 +1,11 @@
 import crypto from 'crypto';
 
-const TELEMETRY_ENDPOINT = 'https://app.posthog.com/capture';
+const TELEMETRY_ENDPOINT = 'https://eu.i.posthog.com/capture/';
 
 const POSTHOG_API_KEY = 'phc_o2wgA3jVT9rVDiGSDzFAR42zZeiVGhhCY53HXVHUcYGT';
 
+const pendingRequests = [];
+
 export function trackEvent(eventName, properties) {
     // 1. Respect privacy standards
     if (process.env.DO_NOT_TRACK === '1' || process.env.DO_NOT_TRACK === 'true') {
@@ -20,8 +22,8 @@ export function trackEvent(eventName, properties) {
     const payload = {
         api_key: POSTHOG_API_KEY,
         event: eventName,
+        distinct_id: anonymousProjectId,
         properties: {
-            distinct_id: anonymousProjectId, // Used to count unique projects, not identify them
             os: process.platform,
             node_version: process.version,
             ...properties
@@ -29,11 +31,19 @@ export function trackEvent(eventName, properties) {
     };
 
     // 4. Fire and forget (No 'await' so we don't block the user's terminal)
-    fetch(TELEMETRY_ENDPOINT, {
+    const request = fetch(TELEMETRY_ENDPOINT, {
         method: 'POST',
         headers: { 'Content-Type': 'application/json' },
         body: JSON.stringify(payload),
-    }).catch(() => {
+    }).catch((err) => {
         // Silently swallow network errors (e.g., user is offline)
     });
+
+    pendingRequests.push(request);
+}
+
+export async function flushTelemetry() {
+    if (pendingRequests.length > 0) {
+        await Promise.all(pendingRequests);
+    }
 }

package/src/utils/warnings.js

@@ -14,7 +14,11 @@ export function getFrameworkWarning(frameworkId) {
                 color.yellow('\n    1. Ensure your package.json has a "start" script (e.g., "start": "node index.js").') +
                 color.yellow('\n    2. Your app must listen on 0.0.0.0 (not localhost) to receive traffic in Docker.\n\n')
             );
-        // Python / FastAPI warnings can be added here easily!
+        case 'python':
+            return color.yellow(' ⚠️  IMPORTANT: PYTHON SETUP REQUIRED ') +
+                color.yellow('\n    1. Ensure your requirements.txt includes your web framework (e.g., fastapi, uvicorn).') +
+                color.yellow('\n    2. Your app must listen on 0.0.0.0 (not localhost) to receive traffic in Docker.') +
+                color.yellow('\n    3. Ensure your app has a health check route returning 200 OK.\n\n');
         default:
             return '';
     }

package/templates/docker/python.Dockerfile

@@ -1,7 +1,26 @@
 FROM python:3.11-slim
+
+# Prevent Python from writing .pyc files and buffer stdout for cleaner logs
+ENV PYTHONDONTWRITEBYTECODE=1
+ENV PYTHONUNBUFFERED=1
+
 WORKDIR /app
+
+# Create a non-root user for security compliance
+RUN adduser --disabled-password --gecos '' appuser
+
+# Install dependencies without caching to keep the image size small
 COPY requirements.txt .
-RUN pip install -r requirements.txt
+RUN pip install --no-cache-dir -r requirements.txt
+
 COPY . .
+
+# Secure file permissions
+RUN chown -R appuser:appuser /app
+
+# Drop root privileges
+USER appuser
+
 EXPOSE {{PORT}}
+
 CMD ["uvicorn", "main:app", "--host", "0.0.0.0", "--port", "{{PORT}}"]

package/templates/terraform/cloudfront.tf

@@ -55,4 +55,8 @@ resource "aws_cloudfront_distribution" "cdn" {
 output "cloudfront_url" {
   description = "Your globally cached, HTTPS-secured application URL"
   value       = "https://${aws_cloudfront_distribution.cdn.domain_name}"
+}
+
+output "z_NEXT_STEP_REQUIRED" {
+  value = "⚠️ Your infrastructure is up, but these URLs will return 503 errors until you push your code to GitHub and the Actions pipeline deploys your container."
 }