deploymaster-panel 0.0.0-stage → 1.0.0

package/.env.example

@@ -0,0 +1,15 @@
+PORT=9000
+HOST=0.0.0.0
+# HTTP selalu aktif untuk testing (http://IP:9000)
+# HTTPS aktif otomatis jika cert tersedia. Untuk testing bisa auto-generate self-signed:
+HTTPS_PORT=9443
+HTTPS_ENABLED=true
+AUTO_SELF_SIGNED=true
+# Jika punya cert asli, isi path ini (relatif atau absolut):
+# TLS_CERT_PATH=./certs/cert.pem
+# TLS_KEY_PATH=./certs/key.pem
+TLS_CERT_PATH=
+TLS_KEY_PATH=
+DATA_DIR=./data
+APPS_DIR=./apps
+UPLOAD_DIR=./uploads

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 DeployMaster Contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,62 @@
-# Temporary Holding Version
+# DeployMaster — Panel Deployment Node.js & Next.js (On-Premise, Windows & Ubuntu)
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Self-hosted deployment service: upload project `.zip` via **HTTP (testing)** / **HTTPS (produksi)**, manifest otomatis, build, jalan, rollback.
+
+## Fitur
+- ✅ Deploy **Node.js & Next.js** (Express, Nest, Vite, Nuxt terdeteksi otomatis)
+- ✅ Jalan di **Windows & Ubuntu** (murni Node.js, tanpa Docker)
+- ✅ Upload via **HTTP :9000** (testing) + **HTTPS :9443** (produksi, self-signed / cert asli)
+- ✅ **Auto-manifest** (`deployment-manifest.json`) + checklist syarat deploy
+- ✅ **Rollback**: 5 release terakhir, redeploy gagal = auto-rollback, rollback manual 1 klik
+- ✅ UI menarik + **Dokumentasi HTML** di `/docs.html`
+- ✅ Start/stop/restart, log live, env editor, port manager
+
+## Cepat mulai (dari source)
+```bash
+cp .env.example .env
+npm install
+npm start
+# HTTP  http://localhost:9000  (testing/upload)
+# HTTPS https://localhost:9443 (self-signed auto)
+```
+
+## Pakai via npm (setelah publish)
+```bash
+npx deploymaster
+# atau global:
+npm i -g deploymaster
+deploymaster --port 9000 --https-port 9443
+```
+Data client tersimpan di `./deploymaster-data`, `./deploymaster-apps`
+(bisa diubah via ENV `DATA_DIR`, `APPS_DIR`, `UPLOAD_DIR`).
+
+## Publish ke npm
+```bash
+npm login
+npm publish --access public
+```
+
+## Syarat project agar bisa deploy
+1. `package.json` di root ZIP
+2. `scripts.start` (cth. `next start` / `node server.js`)
+3. `scripts.build` untuk Next/Nuxt/Vite/Nest (cth. `next build`)
+4. Support `process.env.PORT` (Next otomatis; Express wajib `app.listen(process.env.PORT || 3000)`)
+5. Jangan sertakan `node_modules` / `.next` di ZIP
+
+Detail lengkap: buka `/docs.html` → bagian **Syarat Project**.
+
+## Rollback
+- Tiap deploy = `apps/<nama>/releases/<timestamp>/` (maks 5).
+- Redeploy gagal → otomatis balik ke versi sebelumnya.
+- Manual: kartu app → Manifest & Rollback → tab Rollback → pilih versi.
+
+## Struktur
+```
+src/server.js    HTTP+HTTPS + API
+src/detector.js  deteksi framework + checklist syarat
+src/deployer.js  deploy/redeploy/rollback + build
+src/proc.js      process manager Win/Ubuntu
+src/store.js     JSON DB
+public/index.html  UI panel
+public/docs.html   dokumentasi HTML
+```

package/bin/deploymaster.js

@@ -0,0 +1,52 @@
+#!/usr/bin/env node
+// DeployMaster CLI — jalan via `npx deploymaster` / global install.
+// Bisa dijalankan dari folder mana saja; data disimpan di folder kerja saat ini
+// atau sesuai ENV (DATA_DIR, APPS_DIR, UPLOAD_DIR).
+const path = require('path');
+const fs = require('fs');
+
+const args = process.argv.slice(2);
+if (args.includes('--help') || args.includes('-h')) {
+  console.log(`
+DeployMaster v1.0 — panel deployment Node.js & Next.js (Windows & Ubuntu)
+
+Pakai:
+  npx deploymaster                 # jalan di http://localhost:9000 + https://localhost:9443
+  npx deploymaster --port 9000 --https-port 9443
+  deploymaster                     # bila install global (npm i -g deploymaster)
+
+Opsi:
+  --port <n>         HTTP panel (default 9000 / ENV PORT)
+  --https-port <n>   HTTPS panel (default 9443 / ENV HTTPS_PORT)
+  --no-https         matikan HTTPS
+  --help             tampilkan ini
+
+Env (.env / environment):
+  PORT, HTTPS_PORT, HTTPS_ENABLED, AUTO_SELF_SIGNED,
+  DATA_DIR, APPS_DIR, UPLOAD_DIR, TLS_CERT_PATH, TLS_KEY_PATH
+
+Lalu buka http://localhost:9000 (testing) atau https://localhost:9443.
+Dokumentasi: https://localhost:9000/docs.html
+`);
+  process.exit(0);
+}
+
+for (let i = 0; i < args.length; i++) {
+  if (args[i] === '--port' && args[i + 1]) process.env.PORT = args[i + 1];
+  if (args[i] === '--https-port' && args[i + 1]) process.env.HTTPS_PORT = args[i + 1];
+  if (args[i] === '--no-https') process.env.HTTPS_ENABLED = 'false';
+}
+
+// Default folder data relatif ke CWD (agar npx dari mana saja tetap jalan),
+// bukan relatif ke lokasi paket. Buat dulu sebelum config dimuat.
+for (const k of ['DATA_DIR', 'APPS_DIR', 'UPLOAD_DIR']) {
+  if (!process.env[k]) process.env[k] = path.join(process.cwd(), k === 'DATA_DIR' ? 'deploymaster-data' : k === 'APPS_DIR' ? 'deploymaster-apps' : 'deploymaster-uploads');
+}
+
+// Resolve server.js relatif ke paket ini
+const server = path.join(__dirname, '..', 'src', 'server.js');
+if (!fs.existsSync(server)) {
+  console.error('server.js tidak ditemukan di paket:', server);
+  process.exit(1);
+}
+require(server);

package/package.json

@@ -1,6 +1,46 @@
 {
   "name": "deploymaster-panel",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "1.0.0",
+  "description": "DeployMaster - Self-hosted deployment service untuk Node.js & Next.js (Windows & Ubuntu, HTTP/HTTPS, auto-manifest)",
+  "main": "src/server.js",
+  "bin": {
+    "deploymaster": "bin/deploymaster.js"
+  },
+  "files": [
+    "src/",
+    "public/",
+    "bin/",
+    "scripts/",
+    "README.md",
+    "LICENSE",
+    ".env.example"
+  ],
+  "type": "commonjs",
+  "license": "MIT",
+  "keywords": [
+    "deployment",
+    "nodejs",
+    "nextjs",
+    "on-premise",
+    "self-hosted",
+    "windows",
+    "ubuntu",
+    "rollback"
+  ],
+  "engines": {
+    "node": ">=18"
+  },
+  "preferGlobal": true,
+  "scripts": {
+    "start": "node src/server.js",
+    "dev": "node --watch src/server.js"
+  },
+  "dependencies": {
+    "adm-zip": "^0.5.16",
+    "cors": "^2.8.5",
+    "dotenv": "^16.4.5",
+    "express": "^4.19.2",
+    "multer": "^1.4.5-lts.1",
+    "selfsigned": "^2.4.1"
+  }
+}

package/public/app.js

@@ -0,0 +1,186 @@
+let APPS = [], SYS = null, curId = null, analyzedManifest = null;
+
+document.querySelectorAll('.navbtn').forEach(b => b.onclick = () => {
+  document.querySelectorAll('.navbtn').forEach(x => x.className = 'navbtn btn bg-slate-800 text-left');
+  b.className = 'navbtn btn bg-sky-500 text-slate-950 text-left';
+  const v = b.dataset.nav;
+  document.getElementById('title').textContent = v === 'dash' ? 'Dashboard' : v === 'deploy' ? 'Deploy Baru (Upload ZIP via HTTP/HTTPS)' : 'Sistem & HTTPS';
+  for (const s of ['dash', 'deploy', 'system']) document.getElementById('view-' + s).classList.toggle('hidden', s !== v);
+});
+
+// drop zone
+const drop = document.getElementById('drop'), fFile = document.getElementById('fFile');
+drop.onclick = () => fFile.click();
+drop.ondragover = e => { e.preventDefault(); drop.style.background = '#0f2743'; };
+drop.ondragleave = () => drop.style.background = '';
+drop.ondrop = e => { e.preventDefault(); drop.style.background = ''; if (e.dataTransfer.files[0]) { fFile.files = e.dataTransfer.files; showF(); } };
+fFile.onchange = showF;
+function showF() { document.getElementById('fName2').textContent = fFile.files[0] ? '📦 ' + fFile.files[0].name : ''; if (!document.getElementById('fName').value && fFile.files[0]) document.getElementById('fName').value = fFile.files[0].name.replace(/\.zip$/i, '').toLowerCase().replace(/[^a-z0-9]+/g, '-'); }
+
+function gotoStep(n) {
+  for (const i of [1, 2, 3]) {
+    document.getElementById('step' + i).classList.toggle('hidden', i !== n);
+    document.getElementById('d' + i).classList.toggle('step-on', i <= n);
+  }
+}
+function resetWizard() { gotoStep(1); document.getElementById('deployResult').innerHTML = ''; }
+
+async function api(u, o) { const r = await fetch(u, o); const j = await r.json().catch(() => ({})); if (!r.ok) throw new Error(j.error || 'Error ' + r.status); return j; }
+
+async function loadAll() {
+  SYS = await api('/api/system');
+  document.getElementById('httpBadge').textContent = `🌐 HTTP :${SYS.httpPort} (testing)`;
+  document.getElementById('httpsBadge').textContent = SYS.tlsReady ? `🔒 HTTPS :${SYS.httpsPort} aktif` : '🔓 HTTPS belum aktif';
+  document.getElementById('srvInfo').innerHTML = `${SYS.os}<br>Node ${SYS.node}<br>HTTP :${SYS.httpPort} • HTTPS :${SYS.httpsPort}`;
+  document.getElementById('sys').innerHTML = `<div class="grid md:grid-cols-2 gap-2 text-sm">
+    <div>OS: <b>${SYS.os}</b></div><div>Node: <b>${SYS.node}</b></div>
+    <div>CPU: <b>${SYS.cpus} core</b></div><div>RAM: <b>${SYS.freeMemMB}/${SYS.totalMemMB} MB free</b></div>
+    <div>HTTP: <b class="text-emerald-300">http://&lt;IP&gt;:${SYS.httpPort}</b></div>
+    <div>HTTPS: <b class="text-sky-300">${SYS.tlsReady ? 'https://<IP>:' + SYS.httpsPort + ' (' + SYS.tlsInfo + ')' : 'belum aktif'}</b></div>
+    <div>Saran port app: <b>${SYS.suggestPort}</b></div><div>Riwayat release: <b>${SYS.maxReleases}x (rollback)</b></div></div>`;
+  APPS = await api('/api/apps');
+  renderStats(); renderApps();
+}
+function renderStats() {
+  const run = APPS.filter(a => a.running).length;
+  document.getElementById('stats').innerHTML = `
+    <div class="card p-4"><div class="text-xs text-slate-400">Total Aplikasi</div><div class="text-3xl font-black">${APPS.length}</div></div>
+    <div class="card p-4"><div class="text-xs text-slate-400">Running</div><div class="text-3xl font-black text-emerald-400">${run}</div></div>
+    <div class="card p-4"><div class="text-xs text-slate-400">CPU / RAM free</div><div class="text-xl font-black">${SYS.cpus} core • ${SYS.freeMemMB}MB</div></div>
+    <div class="card p-4"><div class="text-xs text-slate-400">Akses Panel</div><div class="text-sm font-bold text-sky-300">HTTP :${SYS.httpPort} testing<br>HTTPS :${SYS.httpsPort} produksi</div></div>`;
+}
+function statusBadge(a) {
+  if (a.status === 'running') return '<span class="badge bg-emerald-500/20 text-emerald-300">● RUNNING</span>';
+  if (a.status === 'running-unhealthy') return '<span class="badge bg-amber-500/20 text-amber-300">● RUNNING (unhealthy)</span>';
+  if (a.status === 'building') return '<span class="badge bg-sky-500/20 text-sky-300">◌ BUILDING</span>';
+  return '<span class="badge bg-slate-600/40 text-slate-300">■ STOPPED</span>';
+}
+function renderApps() {
+  const q = (document.getElementById('q').value || '').toLowerCase();
+  const el = document.getElementById('apps');
+  const list = APPS.filter(a => a.name.toLowerCase().includes(q));
+  el.innerHTML = list.length ? '' : '<div class="text-slate-400 text-sm">Belum ada aplikasi. Klik <b>＋ Deploy Baru</b>.</div>';
+  for (const a of list) {
+    const d = document.createElement('div');
+    d.className = 'card p-4';
+    const isW = (a.serviceType === 'worker' || a.manifest?.serviceType === 'worker' || !a.port);
+    d.innerHTML = `<div class="flex items-center gap-2 mb-1"><b>${a.name}</b>${statusBadge(a)}
+      <span class="text-xs text-slate-400 ml-auto">${isW ? '⚙️ worker • tanpa port' : ':' + a.port} • ${a.manifest?.framework || '-'}</span></div>
+      <div class="text-xs text-slate-400 mb-2">release <code>${a.currentRelease || '-'}</code> • ${(a.releases || []).length} versi • pid ${a.pid || '-'}</div>
+      <div class="flex flex-wrap gap-1.5 text-xs">
+        <button class="btn bg-emerald-600 text-xs" onclick="act('${a.id}','start')">▶ Start</button>
+        <button class="btn bg-slate-700 text-xs" onclick="act('${a.id}','stop')">■ Stop</button>
+        <button class="btn bg-sky-600 text-xs" onclick="act('${a.id}','restart')">↻ Restart</button>
+        <button class="btn bg-slate-700 text-xs" onclick="openLogs('${a.id}')">📜 Log</button>
+        <button class="btn bg-violet-600 text-xs" onclick="openMan('${a.id}')">📄 Manifest & Rollback</button>
+        <button class="btn bg-red-700 text-xs" onclick="del('${a.id}')">🗑</button>
+      </div>
+      <a class="text-xs text-sky-300 mt-2 inline-block" target="_blank" ${isW ? 'style="display:none"' : ''} href="http://${location.hostname}:${a.port}">↗ buka http://${location.hostname}:${a.port}</a>${isW ? '<div class="text-xs text-slate-400 mt-2">⚙️ Background service — cek output di 📜 Log</div>' : ''}`;
+    el.appendChild(d);
+  }
+}
+async function act(id, k) { try { await api(`/api/apps/${id}/${k}`, { method: 'POST' }); await loadAll(); } catch (e) { alert(e.message); } }
+async function del(id) { if (!confirm('Hapus aplikasi + semua release?')) return; await api('/api/apps/' + id, { method: 'DELETE' }); await loadAll(); }
+
+async function analyze() {
+  if (!fFile.files[0]) return alert('Pilih file .zip dulu');
+  const svc = document.getElementById('fType').value || 'web';
+  const fd = new FormData();
+  fd.append('file', fFile.files[0]);
+  fd.append('name', document.getElementById('fName').value || 'my-app');
+  fd.append('serviceType', svc);
+  try {
+    const r = await (await fetch('/api/apps/analyze', { method: 'POST', body: fd })).json();
+    if (r.error) throw new Error(r.error);
+    analyzedManifest = r.manifest;
+    if (svc === 'worker') { analyzedManifest.serviceType = 'worker'; analyzedManifest.port = null; if (analyzedManifest.env) delete analyzedManifest.env.PORT; }
+    else {
+      if (document.getElementById('fPort').value) analyzedManifest.port = parseInt(document.getElementById('fPort').value, 10);
+      else document.getElementById('fPort').value = analyzedManifest.port;
+      analyzedManifest.env = { ...(analyzedManifest.env || {}), PORT: String(analyzedManifest.port) };
+    }
+    document.getElementById('fManifest').value = JSON.stringify(analyzedManifest, null, 2);
+    const cl = r.analysis.checks.map(c => `<div class="text-sm"> ${c.ok ? '<span class="check-ok">✅</span>' : (c.required ? '<span class="check-bad">❌</span>' : '<span>⚠️</span>')} <b>${c.label}</b><div class="text-xs text-slate-400 ml-6">${c.hint}</div></div>`).join('');
+    document.getElementById('checklist').innerHTML = `<div class="card p-3" style="background:#0b1220">
+      <div class="font-bold mb-1">Framework: <span class="text-sky-300">${r.analysis.framework}</span> • ${r.analysis.canDeploy ? '<span class="check-ok">Siap deploy ✅</span>' : '<span class="check-bad">Belum bisa deploy ❌ — perbaiki checklist merah</span>'}</div>${cl}
+      <div class="text-xs mt-2"><a class="text-sky-300" href="/docs.html#syarat">📖 Lihat syarat lengkap di Dokumentasi</a></div></div>`;
+    gotoStep(2);
+  } catch (e) { alert(e.message); }
+}
+async function doDeploy() {
+  let manifest = null, env = {};
+  try { manifest = JSON.parse(document.getElementById('fManifest').value); } catch { return alert('Manifest bukan JSON valid'); }
+  try { env = JSON.parse(document.getElementById('fEnv').value || '{}'); } catch { return alert('Env bukan JSON valid'); }
+  const fd = new FormData();
+  fd.append('file', fFile.files[0]);
+  fd.append('name', document.getElementById('fName').value || manifest.name || 'my-app');
+  fd.append('serviceType', manifest.serviceType || 'web');
+  if (manifest.port) fd.append('port', manifest.port);
+  fd.append('manifest', JSON.stringify(manifest));
+  fd.append('env', JSON.stringify(env));
+  gotoStep(3);
+  document.getElementById('deployResult').innerHTML = '<div class="text-sky-300">⏳ Installing → building → starting… (bisa 1–5 menit)</div>';
+  try {
+    const r = await (await fetch('/api/apps/deploy', { method: 'POST', body: fd })).json();
+    if (r.error) throw new Error(r.error + (r.analysis ? '\n\nChecklist:\n' + r.analysis.checks.map(c => (c.ok ? '✅ ' : '❌ ') + c.label + ' — ' + c.hint).join('\n') : ''));
+    document.getElementById('deployResult').innerHTML = `<div class="card p-4" style="background:#052e16;border-color:#16a34a">
+      <div class="font-black text-emerald-300 text-lg">✅ Deploy sukses!</div>
+      <div class="text-sm">App <b>${r.name}</b> ${r.port ? `live di <b>http://&lt;IP&gt;:${r.port}</b>` : 'running sebagai <b>worker (tanpa port)</b> — cek 📜 Log'} (release <code>${r.currentRelease}</code>)</div>
+      <div class="text-xs text-slate-300 mt-1">Rollback tersedia: setiap redeploy menyimpan ${SYS.maxReleases} versi. Lihat Manifest & Rollback.</div></div>`;
+    await loadAll();
+  } catch (e) { document.getElementById('deployResult').innerHTML = `<div class="card p-4" style="background:#3f1d1d"><b class="text-red-300">❌ Deploy gagal</b><pre class="text-xs whitespace-pre-wrap">${e.message}</pre><a class="text-sky-300 text-xs" href="/docs.html#trouble">📖 Troubleshooting</a></div>`; }
+}
+
+// logs & manifest
+async function openLogs(id) {
+  curId = id; const a = APPS.find(x => x.id === id);
+  document.getElementById('logTitle').textContent = '📜 Log — ' + (a ? a.name : id);
+  document.getElementById('logModal').showModal(); refreshLogs();
+}
+async function refreshLogs() {
+  const r = await api(`/api/apps/${curId}/logs?lines=300`);
+  document.getElementById('logBody').textContent = (r.mem ? '── live ──\n' + r.mem : '') + '\n── file ──\n' + r.file;
+  document.getElementById('logBody').scrollTop = 1e9;
+}
+function showTab(t) {
+  document.getElementById('tab-man').classList.toggle('hidden', t !== 'man');
+  document.getElementById('tab-rel').classList.toggle('hidden', t !== 'rel');
+}
+async function openMan(id) {
+  curId = id; showTab('man');
+  const m = await api(`/api/apps/${id}/manifest`);
+  document.getElementById('manEdit').value = JSON.stringify(m, null, 2);
+  const rels = await api(`/api/apps/${id}/releases`);
+  document.getElementById('relList').innerHTML = rels.map(r => `<div class="flex items-center gap-2 text-sm py-1 border-b border-slate-800">
+    <code class="text-xs">${r.release}</code>${r.current ? '<span class="badge bg-emerald-500/20 text-emerald-300">AKTIF</span>' : ''}
+    <span class="text-xs text-slate-400">${r.manifest?.framework || ''}</span>
+    ${r.current ? '' : `<button class="btn bg-amber-500 text-slate-950 text-xs ml-auto" onclick="doRollback('${r.release}')">↩ Rollback ke sini</button>`}</div>`).join('')
+    + `<button class="btn bg-amber-500 text-slate-950 text-xs mt-3" onclick="doRollback('')">↩ Rollback ke versi sebelumnya</button>
+    <div class="text-xs text-slate-400 mt-2">Rollback = stop → pindah release → start. Tanpa build ulang, jadi cepat. Maks ${SYS.maxReleases} versi disimpan.</div>`;
+  document.getElementById('manModal').showModal();
+}
+async function saveManifest() {
+  try { const m = JSON.parse(document.getElementById('manEdit').value); await api(`/api/apps/${curId}/manifest`, { method: 'PUT', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify(m) }); alert('Manifest tersimpan. Restart app agar berlaku.'); await loadAll(); }
+  catch (e) { alert(e.message); }
+}
+function redeployUp() { document.getElementById('reFile').click(); }
+document.getElementById('reFile').onchange = async (e) => {
+  const f = e.target.files[0]; if (!f) return;
+  if (!confirm('Redeploy ' + f.name + '? Versi lama tetap tersimpan untuk rollback.')) return;
+  const fd = new FormData(); fd.append('file', f);
+  try {
+    const r = await (await fetch(`/api/apps/${curId}/redeploy`, { method: 'POST', body: fd })).json();
+    if (r.error) throw new Error(r.error);
+    alert('✅ Redeploy sukses → ' + r.currentRelease); document.getElementById('manModal').close(); await loadAll();
+  } catch (err) { alert('❌ ' + err.message); }
+};
+async function doRollback(rel) {
+  if (!confirm('Rollback ke ' + (rel || 'versi sebelumnya') + '?')) return;
+  try { const r = await api(`/api/apps/${curId}/rollback`, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ release: rel || undefined }) }); alert('✅ Rollback sukses → ' + r.currentRelease); document.getElementById('manModal').close(); await loadAll(); }
+  catch (e) { alert(e.message); }
+}
+async function genTLS() {
+  try { const r = await api('/api/tls/generate', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ cn: location.hostname }) }); document.getElementById('tlsMsg').textContent = '✅ ' + r.note; }
+  catch (e) { document.getElementById('tlsMsg').textContent = '❌ ' + e.message; }
+}
+loadAll();

package/public/docs.html

@@ -0,0 +1,188 @@
+<!DOCTYPE html>
+<html lang="id">
+<head>
+<meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0">
+<title>Dokumentasi DeployMaster</title>
+<script src="https://cdn.tailwindcss.com"></script>
+<style>body{background:#0b1220;color:#e2e8f0;font-family:Inter,system-ui,sans-serif} .card{background:#111c33;border:1px solid #1e3a5f;border-radius:14px} code{background:#020617;padding:2px 6px;border-radius:6px;color:#7dd3fc} pre{background:#020617;border:1px solid #1e293b;border-radius:12px;padding:12px;overflow:auto;font-size:12px} a{color:#38bdf8} h2{font-size:20px;font-weight:800;margin:28px 0 8px} h3{font-weight:700;margin:14px 0 6px} li{margin:4px 0}</style>
+</head>
+<body class="max-w-4xl mx-auto p-6">
+<a href="/">← Kembali ke Panel</a>
+<h1 class="text-3xl font-black mt-2">📖 Dokumentasi DeployMaster</h1>
+<p class="text-slate-400">Self-hosted deployment service untuk <b>Node.js & Next.js</b> di PC client (on-premise / lokal). Jalan di <b>Windows & Ubuntu</b>. Upload project via <b>HTTP (testing)</b> & <b>HTTPS (produksi)</b>. Manifest otomatis + rollback.</p>
+
+<div class="card p-4 mt-4 text-sm">
+<b>Daftar isi:</b> <a href="#arsitektur">Arsitektur</a> • <a href="#syarat">Syarat Project</a> • <a href="#zip">Cara ZIP & Upload</a> • <a href="#manifest">Manifest</a> • <a href="#rollback">Rollback</a> • <a href="#https">HTTP/HTTPS</a> • <a href="#install">Install Win/Ubuntu</a> • <a href="#trouble">Troubleshooting</a>
+</div>
+
+<h2 id="arsitektur">1. Arsitektur — kenapa bisa Windows & Ubuntu?</h2>
+<div class="card p-4 text-sm">
+Panel ini <b>100% Node.js</b>, jadi cross-platform. Satu folder <code>DEPLOYMENT-MASTER</code> dijalankan di PC client (Windows / Ubuntu), lalu browser akses panelnya.<br><br>
+<pre>PC Client (Windows / Ubuntu)
+├── Panel DeployMaster :9000 (HTTP, testing) + :9443 (HTTPS)
+├── apps/&lt;nama&gt;/releases/&lt;tanggal&gt;/  ← 5 versi terakhir (rollback)
+├── apps/&lt;nama&gt;/current.txt               ← penunjuk versi aktif
+└── tiap app jalan di port sendiri :3001, :3002, ...</pre>
+<ul class="list-disc ml-5">
+<li><b>Windows:</b> proses via <code>cmd.exe</code>, kill via <code>taskkill /T /F</code>.</li>
+<li><b>Ubuntu:</b> proses via <code>sh</code>, kill via group signal.</li>
+<li>Tidak butuh Docker. Hanya butuh <b>Node.js 18+</b>.</li>
+</ul></div>
+
+<h2 id="syarat">2. Apa yang dibutuhkan agar project bisa deploy?</h2>
+<div class="card p-4 text-sm">
+<p>Panel otomatis cek ini saat <b>Analisis</b>. Yang <b>❌ merah = wajib</b>, ⚠️ = opsional.</p>
+<h3>✅ Wajib (Web)</h3>
+<ul class="list-disc ml-5">
+<li><b>package.json di root ZIP</b> — berisi <code>name</code>, <code>dependencies</code>, <code>scripts</code>.</li>
+<li><b>scripts.start</b> — perintah jalan produksi. Contoh:
+<pre>"scripts": {
+  "start": "next start",      // Next.js
+  "start": "node server.js",  // Express polos
+  "start": "node dist/main.js"// NestJS
+}</pre></li>
+<li><b>scripts.build (untuk Next/Nuxt/Vite/Nest)</b> — contoh <code>"build": "next build"</code>. Node polos boleh kosong.</li>
+<li><b>Mendukung env PORT</b> — Panel meng-inject <code>PORT=3001,3002,…</code> tiap app.
+<ul class="list-disc ml-5">
+<li>Next.js/Nuxt: <b>otomatis</b> (tidak perlu ubah apa-apa).</li>
+<li>Express: wajib <code>app.listen(process.env.PORT || 3000)</code>. ❌ Jangan hardcode <code>app.listen(3000)</code> saja.</li>
+</ul></li>
+</ul>
+<h3>⚙️ Khusus Worker (background, tanpa port)</h3>
+<ul class="list-disc ml-5">
+<li>Pilih tipe <b>Worker</b> saat deploy — <b>port tidak wajib</b>, healthcheck = proses hidup (tanpa HTTP).</li>
+<li>Syarat hanya: <code>package.json</code> + <code>scripts.start</code> yang jalan terus (cth. <code>"start": "node worker.js"</code>). Contoh worker olah data:</li>
+</ul>
+<pre>const { setTimeout: sleep } = require('timers/promises');
+(async () => { while (true) { console.log('proses data...', new Date().toISOString()); await sleep(5000); } })();</pre>
+<h3>⚠️ Opsional (disarankan)</h3>
+<ul class="list-disc ml-5">
+<li><b>Lockfile</b> (<code>package-lock.json</code> / <code>pnpm-lock.yaml</code> / <code>yarn.lock</code>) agar install reproducible.</li>
+<li><b>engines.node</b> — contoh <code>"engines": {"node": "20.x"}</code> sebagai penanda versi.</li>
+<li><b>next.config.*</b> — boleh tidak ada (pakai default).</li>
+<li><b>.env.example</b> — sebagai referensi env, Panel akan meminta isi env saat deploy.</li>
+</ul>
+<h3>Contoh minimal Express (server.js)</h3>
+<pre>const express = require('express');
+const app = express();
+app.get('/', (req,res) => res.send('ok'));
+const PORT = process.env.PORT || 3000;
+app.listen(PORT, () => console.log('live :' + PORT));</pre>
+<h3>Contoh package.json Next.js</h3>
+<pre>{
+  "name": "toko-online",
+  "scripts": { "dev": "next dev", "build": "next build", "start": "next start" },
+  "dependencies": { "next": "14.2.0", "react": "18.3.1", "react-dom": "18.3.1" }
+}</pre>
+</div>
+
+<h2 id="zip">3. Cara ZIP & upload (HTTP dulu, HTTPS nanti)</h2>
+<div class="card p-4 text-sm">
+<ol class="list-decimal ml-5">
+<li>Di folder project, pastikan <code>package.json</code> terlihat langsung (bukan di dalam subfolder).</li>
+<li>ZIP <b>isi folder</b>, bukan foldernya. Di Windows: blok semua file → klik kanan → Send to → Compressed. Di Ubuntu: <code>zip -r app.zip . -x "node_modules/*" ".next/*" ".git/*"</code>.</li>
+<li>Jangan sertakan <code>node_modules</code> & <code>.next</code> (Panel akan build ulang).</li>
+<li>Buka panel: testing via <code>http://IP-PC:9000</code> → <b>Deploy Baru</b> → upload ZIP → <b>Analisis</b> → <b>Deploy</b>.</li>
+<li>Produksi: sama persis, tapi buka <code>https://IP-PC:9443</code>.</li>
+</ol>
+<pre>✅ BENAR (buka ZIP langsung ketemu package.json):
+app.zip
+ ├── package.json
+ ├── server.js / src / app / pages
+ └── next.config.js (opsional)
+
+❌ SALAH (double folder — panel tetap toleransi tapi jangan dibiasakan):
+app.zip
+ └── my-app/package.json ...</pre>
+</div>
+
+<h2 id="manifest">4. Manifest — otomatis dibuatkan</h2>
+<div class="card p-4 text-sm">
+<p>Setiap deploy menghasilkan <code>deployment-manifest.json</code> di folder release. Bisa diedit di Panel → <b>Manifest & Rollback</b>.</p>
+<pre>{
+  "version": 1,
+  "name": "toko-online",
+  "framework": "nextjs",
+  "nodeVersion": "20.x",
+  "port": 3001,
+  "installCommand": "npm install",
+  "buildCommand": "npm run build",
+  "startCommand": "npm start",
+  "healthCheck": { "path": "/", "timeoutSec": 30 },
+  "env": { "NODE_ENV": "production", "PORT": "3001" },
+  "release": "2026-10-15T10-00-00",
+  "createdAt": "..."
+}</pre>
+<ul class="list-disc ml-5">
+<li><b>framework</b> terdeteksi dari dependencies: <code>next</code>→nextjs, <code>@nestjs/core</code>→nestjs, <code>express/fastify/koa</code>→nodejs-express, <code>vite</code>→vite.</li>
+<li><b>installCommand</b> menyesuaikan <code>packageManager</code> (npm/pnpm/yarn).</li>
+<li>Edit manifest → <b>Simpan</b> → <b>Restart</b> agar berlaku.</li>
+</ul></div>
+
+<h2 id="rollback">5. Rollback build (jangan lupa!)</h2>
+<div class="card p-4 text-sm">
+<ul class="list-disc ml-5">
+<li>Setiap <b>Deploy / Redeploy</b> = release baru <code>releases/&lt;timestamp&gt;</code>. Maks <b>5 versi</b> disimpan (terbaru).</li>
+<li><b>Redeploy gagal → otomatis rollback</b> ke versi sebelumnya (tanpa klik apa-apa).</li>
+<li><b>Rollback manual:</b> Panel → kartu app → <b>📄 Manifest & Rollback → tab Rollback</b> → pilih versi → <b>↩ Rollback ke sini</b>. Prosesnya stop → pindah pointer <code>current.txt</code> → start. Cepat karena tanpa build ulang.</li>
+<li>API: <code>POST /api/apps/:id/rollback {"release": "2026-..."}</code> (kosongkan = versi sebelumnya). Daftar: <code>GET /api/apps/:id/releases</code>.</li>
+</ul>
+<pre>releases/
+ ├── 2026-10-15T10-00-00/  ← v1 (bisa rollback ke sini)
+ └── 2026-10-15T11-20-00/  ← v2 AKTIF (current.txt menunjuk sini)</pre>
+</div>
+
+<h2 id="https">6. HTTP untuk testing, HTTPS untuk produksi</h2>
+<div class="card p-4 text-sm">
+<ul class="list-disc ml-5">
+<li><b>HTTP :9000</b> selalu aktif → untuk testing/upload lokal.</li>
+<li><b>HTTPS :9443</b> aktif jika ada cert. Tanpa cert asli, Panel auto-generate <b>self-signed</b> (browser warning merah = wajar untuk testing).</li>
+<li>Panel → <b>Sistem & HTTPS → ⚡ Generate Self-Signed</b>, lalu restart panel, akses <code>https://IP:9443</code>.</li>
+<li>Cert asli (produksi): isi <code>.env</code> → <code>TLS_CERT_PATH</code> & <code>TLS_KEY_PATH</code> (mis. dari Let's Encrypt / kantor), restart.</li>
+</ul>
+<pre># .env
+HTTPS_ENABLED=true
+HTTPS_PORT=9443
+AUTO_SELF_SIGNED=true   # false bila sudah punya cert asli
+TLS_CERT_PATH=./certs/cert.pem
+TLS_KEY_PATH=./certs/key.pem</pre>
+</div>
+
+<h2 id="install">7. Install di Windows & Ubuntu</h2>
+<div class="card p-4 text-sm">
+<h3>Butuh: Node.js 18+ saja</h3>
+<pre># Ubuntu
+curl -fsSL https://deb.nodesource.com/setup_20.x | sudo -E bash -
+sudo apt install -y nodejs zip
+git clone &lt;repo&gt; DEPLOYMENT-MASTER && cd DEPLOYMENT-MASTER
+cp .env.example .env
+npm install
+npm start
+# akses http://IP:9000
+
+# Windows (PowerShell)
+node --version   # pastikan 18+
+cd DEPLOYMENT-MASTER
+copy .env.example .env
+npm install
+npm start
+# akses http://localhost:9000</pre>
+<h3>Autostart (opsional)</h3>
+<ul class="list-disc ml-5">
+<li>Ubuntu: buat systemd service <code>deploymaster.service</code> → <code>ExecStart=/usr/bin/node /opt/DEPLOYMENT-MASTER/src/server.js</code>.</li>
+<li>Windows: Task Scheduler → jalankan <code>npm start</code> saat logon, atau bungkus dengan NSSM/pm2-windows.</li>
+</ul></div>
+
+<h2 id="trouble">8. Troubleshooting</h2>
+<div class="card p-4 text-sm"><ul class="list-disc ml-5">
+<li><b>"Syarat deploy belum terpenuhi"</b> → baca checklist merah, perbaiki <code>package.json</code>, ZIP ulang.</li>
+<li><b>"Proses langsung exit"</b> → cek <b>📜 Log</b>. Umumnya salah <code>startCommand</code> atau crash karena env kurang.</li>
+<li><b>"Port sudah dipakai"</b> → ganti port atau stop app lama.</li>
+<li><b>"running-unhealthy"</b> → app jalan tapi <code>/</code> tidak balas 200 dalam 30 detik. Cek route <code>/</code> & <code>PORT</code>.</li>
+<li><b>ZIP double folder</b> → ZIP isinya, bukan foldernya.</li>
+<li><b>HTTPS warning merah</b> → wajar untuk self-signed. Klik Advanced → Proceed. Hilang bila pakai cert asli.</li>
+</ul></div>
+
+<p class="text-center text-slate-500 text-xs mt-8">DeployMaster v1.0 — Windows & Ubuntu • HTTP/HTTPS • Auto-manifest • Rollback</p>
+</body>
+</html>