vibecarbon 0.1.0

package/src/deploy.js

@@ -0,0 +1,311 @@
+/**
+ * Vibecarbon Deploy Command
+ * Automates deployment to cloud providers with full environment management
+ */
+
+import { renderHelp } from './lib/cli/help.js';
+import { parseFlags } from './lib/cli/parse-flags.js';
+import {
+  createDNSRecord as cloudflareCreateDNSRecord,
+  createHealthCheck as cloudflareCreateHealthCheck,
+  getZones as cloudflareGetZones,
+  setupHA as setupCloudflareHA,
+  setupSimple as setupCloudflareSimple,
+} from './lib/cloudflare.js';
+import { c } from './lib/colors.js';
+import { checkDependency, runCommand } from './lib/command.js';
+import {
+  loadCredentials,
+  loadProjectConfig,
+  saveCredentials,
+  saveProjectConfig,
+} from './lib/config.js';
+import {
+  checkExistingRepo,
+  checkGitHubAuth,
+  checkGitRemote,
+  commitAndPush,
+  createGitBranch,
+  createGitHubRepository,
+  getGitHubUsername,
+  monitorDeployment,
+  setupGitHubEnvironment,
+  setupGitHubIntegration,
+} from './lib/deploy/github.js';
+import { executeDeployment } from './lib/deploy/orchestrator.js';
+import { gatherDeploymentConfig, resolveDeployMode } from './lib/deploy/prompts.js';
+// New modular imports
+import {
+  DEFAULT_WORKER_MAX,
+  DEFAULT_WORKER_MIN,
+  generateSSHKeyPair,
+  getBranchName,
+  getProviderConfig,
+  normalizeEnvName,
+  waitForSSH,
+} from './lib/deploy/utils.js';
+import { withDeployLog } from './lib/deploy-logger.js';
+import {
+  getZones as hetznerDnsGetZones,
+  setupHA as setupHetznerDnsHA,
+  setupSimple as setupHetznerDnsSimple,
+} from './lib/hetzner-dns.js';
+import { detectPackageManager } from './lib/project.js';
+import { assertInProjectDir } from './lib/project-guard.js';
+import { HetznerS3Provider, sanitizeBucketName } from './lib/providers/hetzner-s3.js';
+import { getProvider, getProviderClass, listProviders } from './lib/providers/index.js';
+import {
+  buildComposeTypeOptions,
+  buildK8sProfileOptions,
+  COMPOSE_MIN_RAM_GB,
+  detectCurrentProfile,
+  K8S_PROFILES,
+} from './lib/server-types.js';
+import { VERSION } from './lib/version.js';
+
+// For backwards compatibility
+const PROVIDERS = {
+  hetzner: getProviderConfig('hetzner'),
+};
+
+// ============================================================================
+// COMMAND SPEC — single source of truth for argv parsing AND help output.
+// ============================================================================
+
+const DEPLOY_MODES = ['compose', 'compose-ha', 'k8s', 'k8s-ha'];
+
+/** @type {import('./lib/cli/parse-flags.js').CommandSpec & { summary?: string, description?: string, examples?: Array<{ command: string, description?: string }> }} */
+const SPEC = {
+  name: 'deploy',
+  summary: 'Deploy a Vibecarbon environment to the cloud',
+  description: [
+    'Most settings (server type, S3, DNS, backup schedule, worker bounds)',
+    'come from the interactive prompt or `.vibecarbon.json`. Power users',
+    'who want one-shot scripted deploys configure `.vibecarbon.json` once',
+    'and re-run with `-y` to skip confirmations.',
+  ].join('\n'),
+  positional: [
+    {
+      name: 'env',
+      optional: true,
+      description: 'Environment to deploy (default: prod)',
+    },
+  ],
+  flags: [
+    { name: 'h', boolean: true, description: 'Show this help' },
+    { name: 'v', boolean: true, description: 'Show version' },
+    { name: 'y', boolean: true, description: 'Skip confirmation prompts' },
+    { name: 'env', value: '<name>', description: 'Environment seed (alternative to positional)' },
+    {
+      name: 'region',
+      value: '<id>',
+      description: 'Primary Hetzner region (e.g. hel1, nbg1, fsn1)',
+    },
+    {
+      name: 'mode',
+      value: '<mode>',
+      enum: DEPLOY_MODES,
+      description: 'Deploy mode',
+    },
+    {
+      name: 'full',
+      boolean: true,
+      description: 'Clear resume state and redo every step from scratch',
+    },
+  ],
+  examples: [
+    { command: 'vibecarbon deploy', description: 'prompts for env (defaults to prod)' },
+    { command: 'vibecarbon deploy prod', description: 'env seeded; prompts for the rest' },
+    {
+      command: 'vibecarbon deploy prod -mode k8s-ha -region hel1 -y',
+      description: 'scripted HA k8s deploy to Helsinki',
+    },
+    {
+      command: 'vibecarbon deploy prod -full',
+      description: 'redo a previously-failed deploy from scratch',
+    },
+  ],
+};
+
+/**
+ * Translate the new flag values into the legacy `args` shape that
+ * gatherDeploymentConfig + executeDeployment + the orchestrator read.
+ * Keeps the orchestration code (hundreds of lines, well-tested)
+ * untouched while the front-end parsing/help layer changes.
+ */
+function buildLegacyArgs(values, positional) {
+  const mode = values.mode || null;
+  const envSeed = positional.env || values.env || null;
+  return {
+    env: envSeed,
+    region: values.region || null,
+    yes: !!values.y,
+    full: !!values.full,
+    // Mode flags — orchestrator branches on these.
+    compose: mode === 'compose' || mode === 'compose-ha',
+    k8s: mode === 'k8s' || mode === 'k8s-ha',
+    ha: mode === 'compose-ha' || mode === 'k8s-ha',
+    // Everything below is no longer settable via CLI flag; the
+    // interactive prompt + `.vibecarbon.json` cover these. Defaults
+    // keep gatherDeploymentConfig's `args.X || envConfig.X || …`
+    // chains working unchanged.
+    secondaryRegion: null,
+    serverType: null,
+    masterServerType: null,
+    workerServerType: null,
+    supabaseServerType: null,
+    domain: null,
+    dnsProvider: null,
+    s3AccessKey: null,
+    s3SecretKey: null,
+    s3Region: null,
+    backupSchedule: null,
+    backupRetentionDays: null,
+    minWorkers: null,
+    maxWorkers: null,
+    // direct / push are mutated by the interactive build-mode prompt
+    // in lib/deploy/prompts.js when CI/CD is configured. Keep them
+    // initialized for the orchestrator's resolveBuildMode read.
+    direct: false,
+    push: false,
+  };
+}
+
+/**
+ * Main command function
+ */
+async function main() {
+  const { values, positional, errors } = parseFlags(process.argv.slice(2), SPEC);
+
+  if (errors.length > 0) {
+    for (const e of errors) {
+      process.stderr.write(`${c.error('✗')} ${e}\n`);
+    }
+    process.stderr.write(`Run ${c.info('vibecarbon deploy -h')} for usage.\n`);
+    process.exit(1);
+  }
+
+  if (values.h) {
+    process.stdout.write(renderHelp(SPEC));
+    process.exit(0);
+  }
+
+  if (values.v) {
+    console.log(`vibecarbon deploy v${VERSION}`);
+    process.exit(0);
+  }
+
+  // 0a. Confirm we're inside a Vibecarbon project before doing anything
+  // that walks the tree. An accidental `vibecarbon deploy` from a parent
+  // directory (e.g. ~/repos) would otherwise scan every sibling repo and
+  // dump real tokens to the operator's scrollback before any "no project
+  // found" message could appear.
+  assertInProjectDir();
+
+  // 0b. Refuse to deploy if the working tree contains likely secrets.
+  // We push the project's tracked files to GitHub during deploy (CI,
+  // GitOps, throwaway e2e repos), and a leak there is permanent
+  // — GitHub's secret-scanner will email the user even if the repo is
+  // deleted seconds later. Block early; tell the operator how to opt
+  // out a confirmed false positive via .vibecarbonignore.
+  await refuseIfSecretsPresent();
+
+  // Build the legacy `args` struct that gatherDeploymentConfig and the
+  // orchestrator both read. Field translations live in buildLegacyArgs;
+  // the orchestration code stays untouched.
+  const args = buildLegacyArgs(values, positional);
+
+  // 1. Gather configuration
+  const gatheredConfig = await gatherDeploymentConfig(args);
+
+  // 2. Execute deployment
+  await executeDeployment(args, gatheredConfig);
+}
+
+/**
+ * Walk the working tree, scan for secrets, exit non-zero with a
+ * formatted finding list if anything turns up.
+ */
+async function refuseIfSecretsPresent() {
+  const { scanTree, formatFindings } = await import('./lib/secret-scan.js');
+  const findings = scanTree(process.cwd());
+  if (findings.length === 0) return;
+  process.stderr.write(`\n${c.error('✗')} Refusing to deploy: secrets detected.\n\n`);
+  process.stderr.write(formatFindings(findings));
+  process.exit(1);
+}
+
+/**
+ * Run function called by CLI
+ */
+export async function run(args) {
+  const originalArgv = process.argv;
+  process.argv = ['node', 'deploy', ...args];
+  // Snoop the env arg (last positional, falls back to "deploy") so the
+  // log filename is informative without re-doing full arg parsing here.
+  const sniffedEnv = args.find((a) => !a.startsWith('-')) ?? 'deploy';
+  try {
+    const { logPath } = await withDeployLog(sniffedEnv, () => main());
+    // Print at the end (and only on success, since errors print their own
+    // path via the catch block in withDeployLog).
+    console.log(`\nDeploy log saved: ${logPath}`);
+  } catch (err) {
+    // The logger has already restored stdout/stderr by the time we reach
+    // this catch. Print where the log lives so the operator can review.
+    const logDirHint = `${process.env.HOME || '~'}/.vibecarbon/logs/`;
+    console.error(`\nDeploy log saved under ${logDirHint}`);
+    throw err;
+  } finally {
+    process.argv = originalArgv;
+  }
+}
+
+// Re-exports for testing and backward compatibility
+export {
+  buildComposeTypeOptions,
+  buildK8sProfileOptions,
+  COMPOSE_MIN_RAM_GB,
+  checkDependency,
+  checkExistingRepo,
+  checkGitHubAuth,
+  checkGitRemote,
+  cloudflareCreateDNSRecord,
+  cloudflareCreateHealthCheck,
+  cloudflareGetZones,
+  commitAndPush,
+  createGitBranch,
+  createGitHubRepository,
+  DEFAULT_WORKER_MAX,
+  DEFAULT_WORKER_MIN,
+  detectCurrentProfile,
+  detectPackageManager,
+  generateSSHKeyPair,
+  getBranchName,
+  getGitHubUsername,
+  getProvider,
+  getProviderClass,
+  HetznerS3Provider,
+  hetznerDnsGetZones,
+  K8S_PROFILES,
+  listProviders,
+  loadCredentials,
+  loadProjectConfig,
+  main,
+  monitorDeployment,
+  normalizeEnvName,
+  PROVIDERS,
+  resolveDeployMode,
+  runCommand,
+  SPEC,
+  sanitizeBucketName,
+  saveCredentials,
+  saveProjectConfig,
+  setupCloudflareHA,
+  setupCloudflareSimple,
+  setupGitHubEnvironment,
+  setupGitHubIntegration,
+  setupHetznerDnsHA,
+  setupHetznerDnsSimple,
+  VERSION,
+  waitForSSH,
+};