panopticon-cli 0.1.3 → 0.2.0

package/templates/docker/spring-boot/docker-compose.yml

@@ -0,0 +1,71 @@
+version: '3.8'
+
+services:
+  app:
+    build:
+      context: .
+      dockerfile: Dockerfile.dev
+    ports:
+      - "${APP_PORT:-8080}:8080"
+      - "${DEBUG_PORT:-5005}:5005"
+    volumes:
+      - .:/app
+      - maven-cache:/root/.m2
+    environment:
+      - SPRING_PROFILES_ACTIVE=dev
+      - SPRING_DATASOURCE_URL=jdbc:postgresql://postgres:5432/${DB_NAME:-appdb}
+      - SPRING_DATASOURCE_USERNAME=${DB_USER:-postgres}
+      - SPRING_DATASOURCE_PASSWORD=${DB_PASSWORD:-postgres}
+      - SPRING_REDIS_HOST=redis
+      - SPRING_REDIS_PORT=6379
+    depends_on:
+      postgres:
+        condition: service_healthy
+      redis:
+        condition: service_started
+    networks:
+      - app-network
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.${COMPOSE_PROJECT_NAME:-app}.rule=Host(`${HOSTNAME:-app.pan.localhost}`)"
+      - "traefik.http.services.${COMPOSE_PROJECT_NAME:-app}.loadbalancer.server.port=8080"
+
+  postgres:
+    image: postgres:16-alpine
+    environment:
+      - POSTGRES_DB=${DB_NAME:-appdb}
+      - POSTGRES_USER=${DB_USER:-postgres}
+      - POSTGRES_PASSWORD=${DB_PASSWORD:-postgres}
+    volumes:
+      - postgres-data:/var/lib/postgresql/data
+    ports:
+      - "${DB_PORT:-5432}:5432"
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U ${DB_USER:-postgres}"]
+      interval: 5s
+      timeout: 5s
+      retries: 5
+    networks:
+      - app-network
+
+  redis:
+    image: redis:7-alpine
+    ports:
+      - "${REDIS_PORT:-6379}:6379"
+    volumes:
+      - redis-data:/data
+    networks:
+      - app-network
+
+volumes:
+  postgres-data:
+  redis-data:
+  maven-cache:
+
+networks:
+  app-network:
+    driver: bridge
+  # Connect to Traefik network if available
+  traefik:
+    external: true
+    name: traefik_default

package/templates/traefik/README.md

@@ -0,0 +1,106 @@
+# Panopticon Traefik Configuration
+
+Traefik reverse proxy for local development with HTTPS.
+
+## Directory Structure
+
+```
+~/.panopticon/traefik/
+├── docker-compose.yml      # Traefik container definition
+├── traefik.yml             # Static configuration
+├── dynamic/                # Dynamic routing configs
+│   └── panopticon.yml      # Dashboard routing
+├── certs/                  # mkcert SSL certificates
+│   ├── _wildcard.pan.localhost.pem
+│   └── _wildcard.pan.localhost-key.pem
+└── README.md               # This file
+```
+
+## URLs
+
+| URL | Service |
+|-----|---------|
+| `https://pan.localhost` | Panopticon Dashboard (Frontend) |
+| `https://pan.localhost/api/*` | Panopticon Dashboard (API) |
+| `http://localhost:8080` | Traefik Dashboard |
+
+## How It Works
+
+### Static Configuration (`traefik.yml`)
+- Defines entry points (HTTP:80, HTTPS:443)
+- Enables Traefik dashboard on port 8080
+- Configures file provider for dynamic configs
+- Sets up TLS with wildcard certificates
+
+### Dynamic Configuration (`dynamic/panopticon.yml`)
+- Routes `https://pan.localhost` to dashboard frontend (port 3001)
+- Routes `https://pan.localhost/api/*` to dashboard API (port 3002)
+- Uses `host.docker.internal` to access host-based services
+
+### Docker Compose
+- Runs Traefik v3.0 in a container
+- Exposes ports 80, 443, 8080
+- Mounts configuration files and certificates
+- Uses `panopticon` network for container communication
+
+## Prerequisites
+
+1. **mkcert certificates** must be generated first:
+   ```bash
+   mkcert "*.pan.localhost" "*.localhost" localhost 127.0.0.1 ::1
+   ```
+   Certificates should be in `~/.panopticon/traefik/certs/`
+
+2. **DNS/Hosts configuration**:
+   - Add to `/etc/hosts`: `127.0.0.1 pan.localhost`
+   - Wildcard `*.localhost` resolves automatically on most systems
+
+## Usage
+
+Start Traefik:
+```bash
+cd ~/.panopticon/traefik
+docker-compose up -d
+```
+
+Stop Traefik:
+```bash
+cd ~/.panopticon/traefik
+docker-compose down
+```
+
+View logs:
+```bash
+docker logs -f panopticon-traefik
+```
+
+## Managed by CLI
+
+These commands are automated via `pan` CLI:
+- `pan install` - Sets up Traefik (creates configs, generates certs)
+- `pan up` - Starts Traefik container
+- `pan down` - Stops Traefik container
+
+## Adding Workspace Routes
+
+Workspace-specific routes should be added as separate YAML files in `dynamic/`:
+
+```yaml
+# dynamic/feature-pan-4.yml
+http:
+  routers:
+    workspace-feature-pan-4-frontend:
+      rule: "Host(`feature-pan-4.myn.localhost`)"
+      service: workspace-feature-pan-4-frontend
+      entryPoints:
+        - websecure
+      tls: {}
+
+  services:
+    workspace-feature-pan-4-frontend:
+      loadBalancer:
+        servers:
+          - url: "http://workspace-feature-pan-4-frontend:3000"
+```
+
+These are auto-generated by `pan workspace create` and `pan workspace start`.

package/templates/traefik/docker-compose.yml

@@ -0,0 +1,40 @@
+services:
+  traefik:
+    image: traefik:v3.0
+    container_name: panopticon-traefik
+    restart: unless-stopped
+    ports:
+      - "8081:80"     # HTTP (redirects to HTTPS)
+      - "8443:443"    # HTTPS
+      - "8082:8080"   # Traefik Dashboard
+    volumes:
+      # Traefik configuration
+      - ./traefik.yml:/etc/traefik/traefik.yml:ro
+      - ./dynamic:/etc/traefik/dynamic:ro
+
+      # TLS certificates (mkcert generated)
+      - ./certs:/etc/traefik/certs:ro
+
+      # Docker socket for service discovery
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+
+    networks:
+      - panopticon
+
+    labels:
+      - "traefik.enable=true"
+
+      # Dashboard routing (traefik.pan.localhost:8080)
+      - "traefik.http.routers.traefik-dashboard.rule=Host(`traefik.pan.localhost`)"
+      - "traefik.http.routers.traefik-dashboard.entrypoints=websecure"
+      - "traefik.http.routers.traefik-dashboard.tls=true"
+      - "traefik.http.routers.traefik-dashboard.service=api@internal"
+
+    extra_hosts:
+      # Allow Traefik to reach host services (dashboard on ports 3001/3002)
+      - "host.docker.internal:host-gateway"
+
+networks:
+  panopticon:
+    name: panopticon
+    driver: bridge

package/templates/traefik/dynamic/panopticon.yml

@@ -0,0 +1,51 @@
+# Dynamic routing configuration for Panopticon Dashboard
+# Routes traffic from pan.localhost to host-based services
+
+http:
+  routers:
+    # Dashboard Frontend (pan.localhost)
+    panopticon-frontend:
+      rule: "Host(`pan.localhost`) && !PathPrefix(`/api`)"
+      entryPoints:
+        - websecure
+      service: panopticon-frontend
+      tls:
+        domains:
+          - main: "pan.localhost"
+            sans:
+              - "*.pan.localhost"
+
+    # Dashboard API (pan.localhost/api/*)
+    panopticon-api:
+      rule: "Host(`pan.localhost`) && PathPrefix(`/api`)"
+      entryPoints:
+        - websecure
+      service: panopticon-api
+      middlewares:
+        - api-stripprefix
+      tls: {}
+
+  services:
+    # Frontend service (running on host:3001)
+    panopticon-frontend:
+      loadBalancer:
+        servers:
+          - url: "http://host.docker.internal:3001"
+
+    # API service (running on host:3002)
+    panopticon-api:
+      loadBalancer:
+        servers:
+          - url: "http://host.docker.internal:3002"
+
+  middlewares:
+    # Strip /api prefix before forwarding to API service
+    api-stripprefix:
+      stripPrefix:
+        prefixes:
+          - "/api"
+
+tls:
+  certificates:
+    - certFile: /etc/traefik/certs/_wildcard.pan.localhost.pem
+      keyFile: /etc/traefik/certs/_wildcard.pan.localhost-key.pem

package/templates/traefik/dynamic/workspace.yml.template

@@ -0,0 +1,34 @@
+# Workspace Routing Template
+# This template is used to generate dynamic configs for workspaces
+# Variables: {{WORKSPACE_NAME}}, {{PROJECT_NAME}}, {{FRONTEND_PORT}}, {{API_PORT}}
+
+http:
+  routers:
+    # Workspace frontend
+    {{WORKSPACE_NAME}}-frontend:
+      rule: "Host(`{{WORKSPACE_NAME}}.{{PROJECT_NAME}}.localhost`)"
+      entryPoints:
+        - websecure
+      service: {{WORKSPACE_NAME}}-frontend
+      tls: {}
+
+    # Workspace API (if API port is specified)
+    {{WORKSPACE_NAME}}-api:
+      rule: "Host(`api-{{WORKSPACE_NAME}}.{{PROJECT_NAME}}.localhost`)"
+      entryPoints:
+        - websecure
+      service: {{WORKSPACE_NAME}}-api
+      tls: {}
+
+  services:
+    {{WORKSPACE_NAME}}-frontend:
+      loadBalancer:
+        servers:
+          - url: "http://host.docker.internal:{{FRONTEND_PORT}}"
+        passHostHeader: true
+
+    {{WORKSPACE_NAME}}-api:
+      loadBalancer:
+        servers:
+          - url: "http://host.docker.internal:{{API_PORT}}"
+        passHostHeader: true

package/templates/traefik/traefik.yml

@@ -0,0 +1,45 @@
+# Traefik Static Configuration
+# This file configures Traefik's core behavior
+
+# API and Dashboard
+api:
+  dashboard: true
+  insecure: true  # Dashboard accessible without auth on localhost
+
+# Entry Points
+entryPoints:
+  web:
+    address: ":80"
+    # Redirect HTTP to HTTPS
+    http:
+      redirections:
+        entryPoint:
+          to: websecure
+          scheme: https
+
+  websecure:
+    address: ":443"
+    http:
+      tls: {}
+
+# Providers
+providers:
+  # File provider for dynamic configuration
+  file:
+    directory: /etc/traefik/dynamic
+    watch: true
+
+  # Docker provider (for future workspace containers)
+  docker:
+    endpoint: "unix:///var/run/docker.sock"
+    exposedByDefault: false
+    network: panopticon
+
+# Logging
+log:
+  level: INFO
+  format: common
+
+# Access Logs
+accessLog:
+  format: common

package/dist/chunk-FR2P66GU.js

@@ -1,352 +0,0 @@
-var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
-  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
-}) : x)(function(x) {
-  if (typeof require !== "undefined") return require.apply(this, arguments);
-  throw Error('Dynamic require of "' + x + '" is not supported');
-});
-
-// src/lib/paths.ts
-import { homedir } from "os";
-import { join } from "path";
-var PANOPTICON_HOME = join(homedir(), ".panopticon");
-var CONFIG_DIR = PANOPTICON_HOME;
-var SKILLS_DIR = join(PANOPTICON_HOME, "skills");
-var COMMANDS_DIR = join(PANOPTICON_HOME, "commands");
-var AGENTS_DIR = join(PANOPTICON_HOME, "agents");
-var BACKUPS_DIR = join(PANOPTICON_HOME, "backups");
-var COSTS_DIR = join(PANOPTICON_HOME, "costs");
-var CONFIG_FILE = join(CONFIG_DIR, "config.toml");
-var CLAUDE_DIR = join(homedir(), ".claude");
-var CODEX_DIR = join(homedir(), ".codex");
-var CURSOR_DIR = join(homedir(), ".cursor");
-var GEMINI_DIR = join(homedir(), ".gemini");
-var SYNC_TARGETS = {
-  claude: {
-    skills: join(CLAUDE_DIR, "skills"),
-    commands: join(CLAUDE_DIR, "commands")
-  },
-  codex: {
-    skills: join(CODEX_DIR, "skills"),
-    commands: join(CODEX_DIR, "commands")
-  },
-  cursor: {
-    skills: join(CURSOR_DIR, "skills"),
-    commands: join(CURSOR_DIR, "commands")
-  },
-  gemini: {
-    skills: join(GEMINI_DIR, "skills"),
-    commands: join(GEMINI_DIR, "commands")
-  }
-};
-var TEMPLATES_DIR = join(PANOPTICON_HOME, "templates");
-var CLAUDE_MD_TEMPLATES = join(TEMPLATES_DIR, "claude-md", "sections");
-var INIT_DIRS = [
-  PANOPTICON_HOME,
-  SKILLS_DIR,
-  COMMANDS_DIR,
-  AGENTS_DIR,
-  BACKUPS_DIR,
-  COSTS_DIR,
-  TEMPLATES_DIR,
-  CLAUDE_MD_TEMPLATES
-];
-
-// src/lib/config.ts
-import { readFileSync, writeFileSync, existsSync } from "fs";
-import { parse, stringify } from "@iarna/toml";
-var DEFAULT_CONFIG = {
-  panopticon: {
-    version: "1.0.0"
-  },
-  sync: {
-    targets: ["claude"],
-    backup_before_sync: true
-  },
-  trackers: {
-    primary: "linear"
-  },
-  dashboard: {
-    port: 3001,
-    api_port: 3002
-  }
-};
-function loadConfig() {
-  if (!existsSync(CONFIG_FILE)) {
-    return DEFAULT_CONFIG;
-  }
-  try {
-    const content = readFileSync(CONFIG_FILE, "utf8");
-    const parsed = parse(content);
-    return { ...DEFAULT_CONFIG, ...parsed };
-  } catch (error) {
-    console.error("Warning: Failed to parse config, using defaults");
-    return DEFAULT_CONFIG;
-  }
-}
-function saveConfig(config) {
-  const content = stringify(config);
-  writeFileSync(CONFIG_FILE, content, "utf8");
-}
-function getDefaultConfig() {
-  return { ...DEFAULT_CONFIG };
-}
-
-// src/lib/shell.ts
-import { existsSync as existsSync2, readFileSync as readFileSync2, appendFileSync } from "fs";
-import { homedir as homedir2 } from "os";
-import { join as join2 } from "path";
-function detectShell() {
-  const shell = process.env.SHELL || "";
-  if (shell.includes("zsh")) return "zsh";
-  if (shell.includes("bash")) return "bash";
-  if (shell.includes("fish")) return "fish";
-  return "unknown";
-}
-function getShellRcFile(shell) {
-  const home = homedir2();
-  switch (shell) {
-    case "zsh":
-      return join2(home, ".zshrc");
-    case "bash":
-      const bashrc = join2(home, ".bashrc");
-      if (existsSync2(bashrc)) return bashrc;
-      return join2(home, ".bash_profile");
-    case "fish":
-      return join2(home, ".config", "fish", "config.fish");
-    default:
-      return null;
-  }
-}
-var ALIAS_LINE = 'alias pan="panopticon"';
-var ALIAS_MARKER = "# Panopticon CLI alias";
-function hasAlias(rcFile) {
-  if (!existsSync2(rcFile)) return false;
-  const content = readFileSync2(rcFile, "utf8");
-  return content.includes(ALIAS_MARKER) || content.includes(ALIAS_LINE);
-}
-function addAlias(rcFile) {
-  if (hasAlias(rcFile)) return;
-  const aliasBlock = `
-${ALIAS_MARKER}
-${ALIAS_LINE}
-`;
-  appendFileSync(rcFile, aliasBlock, "utf8");
-}
-function getAliasInstructions(shell) {
-  const rcFile = getShellRcFile(shell);
-  if (!rcFile) {
-    return `Add this to your shell config:
-  ${ALIAS_LINE}`;
-  }
-  return `Alias added to ${rcFile}. Run:
-  source ${rcFile}`;
-}
-
-// src/lib/backup.ts
-import { existsSync as existsSync3, mkdirSync, readdirSync, cpSync, rmSync } from "fs";
-import { join as join3, basename } from "path";
-function createBackupTimestamp() {
-  return (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
-}
-function createBackup(sourceDirs) {
-  const timestamp = createBackupTimestamp();
-  const backupPath = join3(BACKUPS_DIR, timestamp);
-  mkdirSync(backupPath, { recursive: true });
-  const targets = [];
-  for (const sourceDir of sourceDirs) {
-    if (!existsSync3(sourceDir)) continue;
-    const targetName = basename(sourceDir);
-    const targetPath = join3(backupPath, targetName);
-    cpSync(sourceDir, targetPath, { recursive: true });
-    targets.push(targetName);
-  }
-  return {
-    timestamp,
-    path: backupPath,
-    targets
-  };
-}
-function listBackups() {
-  if (!existsSync3(BACKUPS_DIR)) return [];
-  const entries = readdirSync(BACKUPS_DIR, { withFileTypes: true });
-  return entries.filter((e) => e.isDirectory()).map((e) => {
-    const backupPath = join3(BACKUPS_DIR, e.name);
-    const contents = readdirSync(backupPath);
-    return {
-      timestamp: e.name,
-      path: backupPath,
-      targets: contents
-    };
-  }).sort((a, b) => b.timestamp.localeCompare(a.timestamp));
-}
-function restoreBackup(timestamp, targetDirs) {
-  const backupPath = join3(BACKUPS_DIR, timestamp);
-  if (!existsSync3(backupPath)) {
-    throw new Error(`Backup not found: ${timestamp}`);
-  }
-  const contents = readdirSync(backupPath, { withFileTypes: true });
-  for (const entry of contents) {
-    if (!entry.isDirectory()) continue;
-    const sourcePath = join3(backupPath, entry.name);
-    const targetPath = targetDirs[entry.name];
-    if (!targetPath) continue;
-    if (existsSync3(targetPath)) {
-      rmSync(targetPath, { recursive: true });
-    }
-    cpSync(sourcePath, targetPath, { recursive: true });
-  }
-}
-function cleanOldBackups(keepCount = 10) {
-  const backups = listBackups();
-  if (backups.length <= keepCount) return 0;
-  const toRemove = backups.slice(keepCount);
-  let removed = 0;
-  for (const backup of toRemove) {
-    rmSync(backup.path, { recursive: true });
-    removed++;
-  }
-  return removed;
-}
-
-// src/lib/sync.ts
-import { existsSync as existsSync4, mkdirSync as mkdirSync2, readdirSync as readdirSync2, symlinkSync, unlinkSync, lstatSync, readlinkSync } from "fs";
-import { join as join4 } from "path";
-function isPanopticonSymlink(targetPath) {
-  if (!existsSync4(targetPath)) return false;
-  try {
-    const stats = lstatSync(targetPath);
-    if (!stats.isSymbolicLink()) return false;
-    const linkTarget = readlinkSync(targetPath);
-    return linkTarget.includes(".panopticon");
-  } catch {
-    return false;
-  }
-}
-function planSync(runtime) {
-  const targets = SYNC_TARGETS[runtime];
-  const plan = {
-    runtime,
-    skills: [],
-    commands: []
-  };
-  if (existsSync4(SKILLS_DIR)) {
-    const skills = readdirSync2(SKILLS_DIR, { withFileTypes: true }).filter((d) => d.isDirectory());
-    for (const skill of skills) {
-      const sourcePath = join4(SKILLS_DIR, skill.name);
-      const targetPath = join4(targets.skills, skill.name);
-      let status = "new";
-      if (existsSync4(targetPath)) {
-        if (isPanopticonSymlink(targetPath)) {
-          status = "symlink";
-        } else {
-          status = "conflict";
-        }
-      }
-      plan.skills.push({ name: skill.name, sourcePath, targetPath, status });
-    }
-  }
-  if (existsSync4(COMMANDS_DIR)) {
-    const commands = readdirSync2(COMMANDS_DIR, { withFileTypes: true }).filter((d) => d.isDirectory());
-    for (const cmd of commands) {
-      const sourcePath = join4(COMMANDS_DIR, cmd.name);
-      const targetPath = join4(targets.commands, cmd.name);
-      let status = "new";
-      if (existsSync4(targetPath)) {
-        if (isPanopticonSymlink(targetPath)) {
-          status = "symlink";
-        } else {
-          status = "conflict";
-        }
-      }
-      plan.commands.push({ name: cmd.name, sourcePath, targetPath, status });
-    }
-  }
-  return plan;
-}
-function executeSync(runtime, options = {}) {
-  const plan = planSync(runtime);
-  const result = {
-    created: [],
-    skipped: [],
-    conflicts: []
-  };
-  const targets = SYNC_TARGETS[runtime];
-  mkdirSync2(targets.skills, { recursive: true });
-  mkdirSync2(targets.commands, { recursive: true });
-  for (const item of plan.skills) {
-    if (options.dryRun) {
-      if (item.status === "new" || item.status === "symlink") {
-        result.created.push(item.name);
-      } else {
-        result.conflicts.push(item.name);
-      }
-      continue;
-    }
-    if (item.status === "conflict" && !options.force) {
-      result.conflicts.push(item.name);
-      continue;
-    }
-    if (existsSync4(item.targetPath)) {
-      unlinkSync(item.targetPath);
-    }
-    symlinkSync(item.sourcePath, item.targetPath);
-    result.created.push(item.name);
-  }
-  for (const item of plan.commands) {
-    if (options.dryRun) {
-      if (item.status === "new" || item.status === "symlink") {
-        result.created.push(item.name);
-      } else {
-        result.conflicts.push(item.name);
-      }
-      continue;
-    }
-    if (item.status === "conflict" && !options.force) {
-      result.conflicts.push(item.name);
-      continue;
-    }
-    if (existsSync4(item.targetPath)) {
-      unlinkSync(item.targetPath);
-    }
-    symlinkSync(item.sourcePath, item.targetPath);
-    result.created.push(item.name);
-  }
-  return result;
-}
-
-export {
-  __require,
-  PANOPTICON_HOME,
-  CONFIG_DIR,
-  SKILLS_DIR,
-  COMMANDS_DIR,
-  AGENTS_DIR,
-  BACKUPS_DIR,
-  COSTS_DIR,
-  CONFIG_FILE,
-  CLAUDE_DIR,
-  CODEX_DIR,
-  CURSOR_DIR,
-  GEMINI_DIR,
-  SYNC_TARGETS,
-  TEMPLATES_DIR,
-  CLAUDE_MD_TEMPLATES,
-  INIT_DIRS,
-  loadConfig,
-  saveConfig,
-  getDefaultConfig,
-  detectShell,
-  getShellRcFile,
-  hasAlias,
-  addAlias,
-  getAliasInstructions,
-  createBackupTimestamp,
-  createBackup,
-  listBackups,
-  restoreBackup,
-  cleanOldBackups,
-  isPanopticonSymlink,
-  planSync,
-  executeSync
-};
-//# sourceMappingURL=chunk-FR2P66GU.js.map