deploy-stack 0.6.0 → 0.8.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deploy-stack",
-  "version": "0.6.0",
+  "version": "0.8.0",
   "description": "Provision production-ready AWS infrastructure and CI/CD pipelines in seconds.",
   "type": "module",
   "bin": {
@@ -37,6 +37,7 @@
   ],
   "license": "MIT",
   "dependencies": {
+    "@aws-sdk/client-dynamodb": "3.1119.0",
     "@aws-sdk/client-s3": "3.1115.0",
     "@aws-sdk/client-secrets-manager": "3.1112.0",
     "@aws-sdk/client-sts": "3.1115.0",
@@ -44,4 +45,4 @@
     "dotenv": "17.4.2",
     "picocolors": "1.1.1"
   }
-}
+}

package/src/commands/init.js

@@ -11,6 +11,7 @@ import { trackEvent, flushTelemetry } from '../core/telemetry.js';
 import { getFrameworkWarning } from '../utils/warnings.js';
 import { provisionStateBucket } from '../utils/aws.js';
 import { generateTemplates } from '../utils/generator.js';
+import { handleExistingFiles } from '../utils/backup.js';
 
 export async function mainStack() {
     const startTime = Date.now();
@@ -175,21 +176,8 @@ export async function mainStack() {
 
     const buildDir = detectedFramework?.buildDir || 'dist';
 
-    // 5. Check for existing files that might be overwritten
-    const dockerfilePath = path.join(targetDir, 'Dockerfile');
-    const tfDirPath = path.join(targetDir, 'terraform');
-
-    if (fsSync.existsSync(dockerfilePath) || fsSync.existsSync(tfDirPath)) {
-        const overwrite = await confirm({
-            message: color.yellow('⚠️  A Dockerfile or terraform/ folder already exists here. Overwrite them?'),
-            initialValue: false,
-        });
-
-        if (!overwrite) {
-            cancel('Provisioning cancelled to protect existing files.');
-            process.exit(0);
-        }
-    }
+    // 5. Safely handle existing files (Backup and auto-prune)
+    await handleExistingFiles(targetDir);
 
     const s = spinner();
     s.start('Provisioning infrastructure...');

package/src/utils/backup.js

@@ -0,0 +1,60 @@
+import fs from 'fs';
+import path from 'path';
+import { select, isCancel, cancel } from '@clack/prompts';
+import color from 'picocolors';
+
+export async function handleExistingFiles(targetDir) {
+    const tfPath = path.join(targetDir, 'terraform');
+    const dockerfilePath = path.join(targetDir, 'Dockerfile');
+    const wfDir = path.join(targetDir, '.github', 'workflows');
+    const wfPath = path.join(wfDir, 'deploy.yml');
+
+    const tfExists = fs.existsSync(tfPath);
+    const dockerfileExists = fs.existsSync(dockerfilePath);
+    const wfExists = fs.existsSync(wfPath);
+
+    if (!tfExists && !dockerfileExists && !wfExists) {
+        return; // Clean slate
+    }
+
+    const overwriteDecision = await select({
+        message: color.yellow('⚠️  deploy-stack configurations already exist. What would you like to do?'),
+        options: [
+            { value: 'cancel', label: 'Cancel', hint: 'Exit without making changes' },
+            { value: 'backup', label: 'Backup & Regenerate', hint: 'Move old configs to .bak (ignored by Git) and regenerate' }
+        ]
+    });
+
+    if (isCancel(overwriteDecision) || overwriteDecision === 'cancel') {
+        cancel('Operation cancelled to protect existing files.');
+        process.exit(0);
+    }
+
+    // Execute the safe backup
+    const timestamp = Date.now();
+
+    if (tfExists) fs.renameSync(tfPath, `${tfPath}.bak.${timestamp}`);
+    if (dockerfileExists) fs.renameSync(dockerfilePath, `${dockerfilePath}.bak.${timestamp}`);
+    if (wfExists) fs.renameSync(wfPath, `${wfPath}.bak.${timestamp}`);
+
+    ensureGitIgnore(targetDir);
+
+    console.log(color.cyan(`ℹ️  Existing configuration files were safely backed up locally.`));
+}
+
+/**
+ * Appends backup patterns to .gitignore so local clutter never reaches GitHub.
+ */
+function ensureGitIgnore(targetDir) {
+    const gitignorePath = path.join(targetDir, '.gitignore');
+    const ignoreRules = '\n# deploy-stack backups\n*.bak.*\n';
+
+    if (fs.existsSync(gitignorePath)) {
+        const content = fs.readFileSync(gitignorePath, 'utf8');
+        if (!content.includes('*.bak.*')) {
+            fs.appendFileSync(gitignorePath, ignoreRules);
+        }
+    } else {
+        fs.writeFileSync(gitignorePath, ignoreRules);
+    }
+}

package/templates/terraform/main.tf

@@ -1,6 +1,12 @@
 # deploy-stack generated infrastructure
 provider "aws" {
   region = "{{REGION}}"
+
+  default_tags {
+    tags = {
+      ManagedBy = "deploy-stack"
+    }
+  }
 }
 
 locals {
@@ -191,4 +197,21 @@ output "website_url" {
 output "ecr_repository_url" {
   description = "The URL of the ECR repository"
   value       = aws_ecr_repository.app.repository_url
+}
+
+# --- CloudWatch Alarms ---
+resource "aws_cloudwatch_metric_alarm" "alb_5xx_errors" {
+  alarm_name          = "{{PROJECT_NAME}}-high-5xx-errors"
+  comparison_operator = "GreaterThanThreshold"
+  evaluation_periods  = "2"
+  metric_name         = "HTTPCode_Target_5XX_Count"
+  namespace           = "AWS/ApplicationELB"
+  period              = "60"
+  statistic           = "Sum"
+  threshold           = "10"
+  alarm_description   = "Triggers if the ALB receives more than 10 5XX errors in 2 minutes."
+  
+  dimensions = {
+    LoadBalancer = aws_lb.main.arn_suffix
+  }
 }