devpush 0.0.0-stage → 1.0.0-beta.3

package/src/server/projects/compose-metadata.ts

@@ -0,0 +1,174 @@
+import { parse as parseYaml } from 'yaml'
+
+export type ProjectComposeMetadata = {
+  services: Array<string>
+  volumes: Array<string>
+  warnings: Array<string>
+  suggestedRoute: {
+    path: string
+    service: string
+    port: number
+    stripPrefix: boolean
+  } | null
+}
+
+export function parseComposeMetadata(
+  composeText: string,
+): ProjectComposeMetadata {
+  const document = parseYaml(composeText)
+  const root = isRecord(document) ? document : {}
+  const services = isRecord(root.services)
+    ? Object.keys(root.services).filter(Boolean).sort()
+    : []
+  const volumes = new Set<string>()
+  const warnings = new Set<string>()
+  const routeTargets = new Map<string, { service: string; port: number }>()
+
+  if (isRecord(root.volumes)) {
+    for (const volumeName of Object.keys(root.volumes)) {
+      if (volumeName) {
+        volumes.add(volumeName)
+      }
+    }
+  }
+
+  if (isRecord(root.services)) {
+    for (const [serviceName, service] of Object.entries(root.services)) {
+      if (
+        isRecord(service) &&
+        Array.isArray(service.ports) &&
+        service.ports.length > 0
+      ) {
+        warnings.add(
+          `Published ports on ${serviceName} are ignored during devpush deployments; managed Traefik ingress remains the only public entrypoint.`,
+        )
+        for (const port of service.ports) {
+          addRouteTarget(routeTargets, serviceName, port)
+        }
+      }
+      if (isRecord(service) && Array.isArray(service.expose)) {
+        for (const port of service.expose) {
+          addRouteTarget(routeTargets, serviceName, port)
+        }
+      }
+      if (isRecord(service) && service.network_mode === 'host') {
+        warnings.add(
+          `${serviceName} uses host networking, which devpush ignores to preserve managed network isolation.`,
+        )
+      }
+      if (!isRecord(service) || !Array.isArray(service.volumes)) {
+        continue
+      }
+
+      for (const mount of service.volumes) {
+        const volumeName = getComposeVolumeName(mount)
+        if (volumeName) {
+          volumes.add(volumeName)
+        }
+      }
+    }
+  }
+
+  const targets = Array.from(routeTargets.values())
+  const port80Targets = targets.filter((target) => target.port === 80)
+  const suggestedTarget =
+    port80Targets.length === 1
+      ? port80Targets[0]
+      : targets.length === 1
+        ? targets[0]
+        : undefined
+
+  return {
+    services,
+    volumes: Array.from(volumes).sort(),
+    warnings: Array.from(warnings),
+    suggestedRoute: suggestedTarget
+      ? {
+          path: '/',
+          service: suggestedTarget.service,
+          port: suggestedTarget.port,
+          stripPrefix: false,
+        }
+      : null,
+  }
+}
+
+function addRouteTarget(
+  targets: Map<string, { service: string; port: number }>,
+  service: string,
+  value: unknown,
+) {
+  const port = getComposeTcpTargetPort(value)
+  if (port) {
+    targets.set(`${service}:${port}`, { service, port })
+  }
+}
+
+function getComposeTcpTargetPort(value: unknown) {
+  if (typeof value === 'number') {
+    return isValidPort(value) ? value : null
+  }
+  if (typeof value === 'string') {
+    const [mapping = '', protocol = 'tcp'] = value.split('/')
+    if (protocol.toLowerCase() !== 'tcp') {
+      return null
+    }
+    const target = mapping.split(':').at(-1)
+    const port = Number.parseInt(target ?? '', 10)
+    return isValidPort(port) ? port : null
+  }
+  if (!isRecord(value)) {
+    return null
+  }
+  if (
+    typeof value.protocol === 'string' &&
+    value.protocol.toLowerCase() !== 'tcp'
+  ) {
+    return null
+  }
+  const target = value.target
+  if (typeof target === 'number') {
+    return isValidPort(target) ? target : null
+  }
+  if (typeof target === 'string') {
+    const port = Number.parseInt(target, 10)
+    return isValidPort(port) ? port : null
+  }
+  return null
+}
+
+function isValidPort(port: number) {
+  return Number.isInteger(port) && port > 0 && port <= 65_535
+}
+
+function getComposeVolumeName(mount: unknown) {
+  if (typeof mount === 'string') {
+    const [source = ''] = mount.split(':')
+    const trimmed = source.trim()
+    return isNamedComposeVolume(trimmed) ? trimmed : null
+  }
+  if (!isRecord(mount)) {
+    return null
+  }
+  const type = typeof mount.type === 'string' ? mount.type : null
+  const source = typeof mount.source === 'string' ? mount.source.trim() : ''
+  if (type && type !== 'volume') {
+    return null
+  }
+  return isNamedComposeVolume(source) ? source : null
+}
+
+function isNamedComposeVolume(value: string | null | undefined) {
+  return Boolean(
+    value &&
+    !value.startsWith('/') &&
+    !value.startsWith('./') &&
+    !value.startsWith('../') &&
+    !value.startsWith('~/') &&
+    !value.includes('$'),
+  )
+}
+
+function isRecord(value: unknown): value is Record<string, unknown> {
+  return typeof value === 'object' && value !== null && !Array.isArray(value)
+}

package/src/server/projects/configuration-state.ts

@@ -0,0 +1,90 @@
+import { sql } from 'drizzle-orm'
+import type { AtomicStore } from '#devpush/server/db/atomic'
+import type { ApiMutationAdmission } from '#devpush/server/api/admission'
+import type { ProjectRuntimeConfig } from '#devpush/lib/project-runtime-config'
+import {
+  requireProjectRuntimeConfig,
+  hostLifecycleCommandsChanged,
+  hostLifecycleCommandsUseChangedSource,
+} from '#devpush/lib/project-runtime-config'
+import {
+  projectSettingsGuard,
+  rethrowSettingsConflict,
+} from '#devpush/server/settings-version'
+import type { ProjectRoute } from './types'
+
+export function invalidDomainBasePathCleanup(
+  store: AtomicStore,
+  input: {
+    projectId: string
+    routes: ProjectRoute[]
+    now: Date
+    guard?: ReturnType<typeof sql>
+  },
+) {
+  return store.run(sql`update domains set base_path = null,updated_at = ${input.now.getTime()}
+    where project_id = ${input.projectId} and base_path is not null and base_path <> '' and ${input.guard ?? sql`1`}
+    and not exists(select 1 from json_each(${JSON.stringify(input.routes)}) as route
+      where json_extract(route.value,'$.path') = domains.base_path
+      and (coalesce(json_extract(route.value,'$.environmentId'),'') = '' or json_extract(route.value,'$.environmentId') = domains.environment_id))`)
+}
+
+export async function updateProjectRuntimeState(
+  store: AtomicStore,
+  input: {
+    projectId: string
+    userId: string
+    settingsVersion: number
+    currentRuntimeConfig: unknown
+    runtimeConfig: ProjectRuntimeConfig
+    composeMetadata?: unknown
+    routes?: ProjectRoute[]
+    now: Date
+    admission?: ApiMutationAdmission
+  },
+) {
+  const current = requireProjectRuntimeConfig(input.currentRuntimeConfig)
+  const manager =
+    hostLifecycleCommandsChanged(current, input.runtimeConfig) ||
+    hostLifecycleCommandsUseChangedSource({
+      currentRepoFullName: '',
+      nextRepoFullName: '',
+      currentRuntimeConfig: current,
+      nextRuntimeConfig: input.runtimeConfig,
+    })
+  const envIds = [
+    ...new Set(
+      input.routes?.map((route) => route.environmentId).filter(Boolean) ?? [],
+    ),
+  ]
+  const guard = sql`${projectSettingsGuard(input.projectId, input.userId, input.settingsVersion, manager)}
+    and runtime_config = ${JSON.stringify(input.currentRuntimeConfig)} and ${input.admission?.guard ?? sql`1`}
+    and not exists(select 1 from json_each(${JSON.stringify(envIds)}) needed
+      where not exists(select 1 from environments where id = needed.value and project_id = ${input.projectId} and status = 'active'))`
+  const metadata =
+    input.composeMetadata === undefined
+      ? sql`case when ${current.path} is not ${input.runtimeConfig.path} then null else compose_metadata end`
+      : sql`${input.composeMetadata === null ? null : JSON.stringify(input.composeMetadata)}`
+  try {
+    const [rows] = await store.batch([
+      store.all(sql`update projects set settings_version = case when ${guard} then settings_version + 1 else null end,
+        runtime_config = ${JSON.stringify(input.runtimeConfig)},compose_metadata = ${metadata},updated_at = ${input.now.getTime()}
+        ${input.routes ? sql`, routes = ${JSON.stringify(input.routes)}` : sql``}
+        where id = ${input.projectId} and status = 'active' returning id`),
+      ...(input.admission?.statements ?? []),
+      ...(input.routes
+        ? [
+            invalidDomainBasePathCleanup(store, {
+              projectId: input.projectId,
+              routes: input.routes,
+              now: input.now,
+              guard: sql`${projectSettingsGuard(input.projectId, input.userId, input.settingsVersion + 1, manager)} and ${input.admission?.guard ?? sql`1`}`,
+            }),
+          ]
+        : []),
+    ])
+    return rows.length === 1
+  } catch (error) {
+    rethrowSettingsConflict(error)
+  }
+}