vibecarbon 0.1.1 → 0.1.3

package/carbon/content/docs/cli.mdx

@@ -55,12 +55,12 @@ npx vibecarbon create
 
 # Power-user / CI
 npx vibecarbon create my-saas -y -admin-email admin@example.com -admin-password secret123
-npx vibecarbon create my-saas -git -install
+npx vibecarbon create my-saas -install
 ```
 
 Generates secure secrets (JWT, database password, Supabase keys), copies the
-template, optionally runs `pnpm install`, optionally initializes a git
-repository, and creates the admin user in Supabase Auth.
+template, initializes a git repository (with pre-commit + pre-push hooks),
+optionally runs `pnpm install`, and creates the admin user in Supabase Auth.
 
 | Flag | Description |
 |------|-------------|
@@ -68,9 +68,10 @@ repository, and creates the admin user in Supabase Auth.
 | `-admin-email <email>` | Admin email for dashboard access |
 | `-admin-password <pw>` | Admin password for dashboard access |
 | `-pm <name>` | Package manager: `npm`, `pnpm` (default), or `bun` |
-| `-git` | Initialize a git repository (default: off; opt-in) |
 | `-install` | Run `<pm> install` during create (default: deferred to first `vibecarbon up`) |
 
+A git repository is initialized automatically (with pre-commit + pre-push hooks). If `git` isn't on PATH, this step is skipped silently with a hint to run `git init` manually afterwards.
+
 ---
 
 ## up

package/carbon/docker-compose.yml

@@ -129,9 +129,31 @@ services:
       - -c
       - archive_mode=on
       - -c
-      - archive_command=/usr/local/bin/wal-g wal-push %p
+      # Fault-tolerant wrapper around `wal-g wal-push`. If wal-g fails (S3
+      # outage, bad creds, missing bucket), the wrapper retries with backoff
+      # then logs "WAL_ARCHIVE_FAILED" to stderr and exits 0 so PG can recycle
+      # the segment instead of pinning the entire pg_wal directory. Without
+      # this, a single archive failure pins WAL forever and fills the disk
+      # within days (~20 GiB/day of WAL on an idle Supabase DB given
+      # archive_timeout below, because supabase extensions like pg_cron,
+      # pg_stat_statements, realtime publications all generate background
+      # writes every minute). RCA: prod-1 2026-05-26, 58 GiB of WAL retained
+      # in 3 days because wal-g couldn't reach the configured S3 bucket;
+      # disk filled, db went into Error state, /api/v1/notifications 500'd,
+      # whole stack down. Trade-off: a persistent archive outage leaves a
+      # PITR gap, but the DB stays up — strictly better than the previous
+      # behavior for a SaaS template. Grep `docker logs db` for
+      # WAL_ARCHIVE_FAILED to detect silent backup regressions.
+      - archive_command=/etc/postgresql/wal-archive.sh %p
       - -c
-      - archive_timeout=60
+      # 60s was too aggressive — on an idle Supabase DB, that forces a
+      # 16 MiB segment switch every minute regardless of write volume (PG14+
+      # is supposed to skip empty switches but supabase's bundled extensions
+      # write enough every minute to trip it). 23 GiB/day of WAL baseline.
+      # 900s (15 min) drops baseline to ~1.5 GiB/day with an RPO cap that's
+      # plenty for SaaS workloads. Override via postgresql.conf or compose
+      # if tighter RPO is needed.
+      - archive_timeout=900
       - -c
       # hot_standby=on lets a server in recovery mode (i.e. our standby)
       # accept read-only psql connections. Required so failover's
@@ -167,6 +189,7 @@ services:
       WALG_COMPRESSION_METHOD: lz4
     volumes:
       - db_data:/var/lib/postgresql/data
+      - ./volumes/db/wal-archive.sh:/etc/postgresql/wal-archive.sh:ro,Z
       - ./volumes/db/roles.sql:/docker-entrypoint-initdb.d/init-scripts/98-roles.sql:Z
       - ./volumes/db/jwt.sql:/docker-entrypoint-initdb.d/init-scripts/99-jwt.sql:Z
       - ./volumes/db/realtime.sql:/docker-entrypoint-initdb.d/migrations/99-realtime.sql:Z

package/carbon/functions/main/index.ts

@@ -0,0 +1,17 @@
+// Edge Functions main entrypoint.
+//
+// docker-compose.prod.yml starts the supabase/edge-runtime container with
+// `--main-service /home/deno/functions/main`, which requires this file to
+// exist. Without it the container crash-loops with
+// "could not find an appropriate entrypoint".
+//
+// This stub returns 404 for any path. Add real edge functions by routing in
+// the request handler below, or by mounting per-function directories under
+// functions/<name>/index.ts and updating this dispatcher.
+
+Deno.serve((_req: Request) => {
+  return new Response(
+    JSON.stringify({ error: 'No edge function configured for this path' }),
+    { status: 404, headers: { 'content-type': 'application/json' } }
+  );
+});

package/carbon/src/client/components/ui/button.tsx

@@ -3,10 +3,7 @@ import { cva, type VariantProps } from 'class-variance-authority';
 import * as React from 'react';
 
 import { cn } from '@/lib/utils';
-
-const SparkBurst = React.lazy(() =>
-  import('../effects/SparkBurst').then((m) => ({ default: m.SparkBurst }))
-);
+import { SparkBurst } from '../effects/SparkBurst';
 
 const buttonVariants = cva(
   "cursor-pointer focus-visible:border-ring focus-visible:ring-ring/50 aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40 aria-invalid:border-destructive dark:aria-invalid:border-destructive/50 rounded-4xl border border-transparent text-sm leading-none font-medium focus-visible:ring-[3px] aria-invalid:ring-[3px] [&_svg:not([class*='size-'])]:size-4 inline-flex items-center justify-center whitespace-nowrap transition-all disabled:cursor-default [&_svg]:pointer-events-none shrink-0 [&_svg]:shrink-0 outline-none group/button select-none",
@@ -109,9 +106,7 @@ function Button({
     >
       {resolvedChildren}
       {hasSparkle && (
-        <React.Suspense>
-          <SparkBurst delay={0.05} count={10} palette="primary" trigger={sparkTrigger} />
-        </React.Suspense>
+        <SparkBurst delay={0.05} count={10} palette="primary" trigger={sparkTrigger} />
       )}
     </ButtonPrimitive>
   );

package/carbon/vite.config.ts

@@ -68,7 +68,19 @@ export default defineConfig(({ mode }) => {
               return 'vendor-react';
             if (id.includes('node_modules/@supabase/')) return 'vendor-supabase';
             if (id.includes('node_modules/@tanstack/react-query')) return 'vendor-query';
-            if (id.includes('node_modules/recharts')) return 'vendor-charts';
+            // DO NOT split recharts into its own chunk. With rolldown-vite (Vite 8 +
+            // rolldown 1.x), splitting a CJS-React consumer causes rolldown to bundle
+            // a *second* copy of React inside that chunk to satisfy the CJS interop
+            // for `import * as React from 'react'`. The main entry then imports its
+            // React namespace (X.lazy, X.useState) from the recharts chunk while
+            // page chunks still import from vendor-react — two Reacts in one app.
+            // React.lazy elements created by one and rendered by the other resolve
+            // to {} and React throws minified #306 ("Lazy element type must resolve
+            // to a class or function") on first render → ErrorBoundary catches →
+            // white screen. Verified 2026-05-26 against rolldown 1.0.1 by patching
+            // the deployed vendor-react and dumping the failing lazy's payload.
+            // Leave recharts in the default chunk so React stays single-copy.
+            // if (id.includes('node_modules/recharts')) return 'vendor-charts';
             if (id.includes('node_modules/framer-motion')) return 'vendor-motion';
             if (
               id.includes('node_modules/cmdk') ||

package/carbon/volumes/db/wal-archive.sh

@@ -0,0 +1,43 @@
+#!/bin/bash
+# Fault-tolerant archive_command for Postgres + wal-g.
+#
+# Standard archive_command (`wal-g wal-push %p`) blocks WAL recycling until it
+# succeeds. If wal-g fails for any reason (S3 outage, bad credentials, bucket
+# missing, network), pg_wal grows unbounded — combined with archive_timeout
+# this fills the disk in days even on an idle DB.
+#
+# This wrapper:
+#   1. Tries `wal-g wal-push` with $RETRIES attempts and exponential backoff.
+#   2. On final failure, logs loudly to stderr (visible in `docker logs db`)
+#      and exits 0 so PG can recycle the segment. PITR coverage degrades for
+#      the failed segment; the database stays up.
+#
+# Trade-off: a persistent archive outage means a gap in your PITR chain. The
+# alternative — letting WAL fill the disk and taking the DB offline — is worse
+# for any SaaS template. Monitor for the "WAL_ARCHIVE_FAILED" line to detect
+# silent backup regressions.
+#
+# Invoked by postgres as: wal-archive.sh <wal-file-path>
+# %p is passed by Postgres and is the absolute path to the WAL segment.
+
+set -u
+WAL_PATH="${1:?archive_command requires a WAL file path}"
+RETRIES="${WAL_ARCHIVE_RETRIES:-3}"
+SLEEP_BASE="${WAL_ARCHIVE_SLEEP:-2}"
+
+attempt=1
+while [ "$attempt" -le "$RETRIES" ]; do
+    if /usr/local/bin/wal-g wal-push "$WAL_PATH"; then
+        exit 0
+    fi
+    if [ "$attempt" -lt "$RETRIES" ]; then
+        sleep_for=$((SLEEP_BASE ** attempt))
+        sleep "$sleep_for"
+    fi
+    attempt=$((attempt + 1))
+done
+
+# All retries exhausted. Loud, greppable log line so monitoring/alerting can
+# catch this — but exit 0 so PG recycles the segment instead of pinning it.
+echo "WAL_ARCHIVE_FAILED: wal-g wal-push '$WAL_PATH' failed after $RETRIES attempts; allowing PG to recycle (PITR gap for this segment)" >&2
+exit 0

package/carbon/volumes/loki/loki-config.yml

@@ -56,3 +56,11 @@ compactor:
   retention_enabled: true
   retention_delete_delay: 2h
   compaction_interval: 10m
+  # Loki 3.x requires delete_request_store when retention_enabled is true,
+  # otherwise the container fails to start with "CONFIG ERROR: invalid
+  # compactor config: compactor.delete-request-store should be configured
+  # when retention is enabled" and crash-loops. RCA: prod-1 2026-05-26,
+  # loki had been restart-looping since first deploy because of this.
+  # filesystem matches the storage_config above; switch to s3/gcs if the
+  # rest of loki storage moves off filesystem.
+  delete_request_store: filesystem

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vibecarbon",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "description": "Create and manage production-ready Vibecarbon applications",
   "type": "module",
   "bin": "./src/cli.js",

package/src/create.js

@@ -152,11 +152,6 @@ const SPEC = {
       boolean: true,
       description: 'Skip prompts (requires -admin-email and -admin-password)',
     },
-    {
-      name: 'git',
-      boolean: true,
-      description: 'Initialize a git repository (default: off; opt-in)',
-    },
     {
       name: 'install',
       boolean: true,
@@ -476,14 +471,13 @@ async function bootstrap(cliArgs) {
   }
 
   // Build the legacy `args` shape that the orchestration code reads.
-  // -git is opt-in (default off), so noGit (the legacy field) is the
-  // INVERSE of values.git.
+  // Git init always runs when `git` is on PATH; falls back to no-repo silently
+  // if git isn't installed. No CLI flag needed either way.
   const args = {
     projectName: positional.projectName || null,
     yes: !!values.y,
     install: !!values.install,
     skipLockfile: !!values['skip-lockfile'],
-    noGit: !values.git,
     packageManager: /** @type {string|null} */ (values.pm),
     adminEmail: /** @type {string|null} */ (values['admin-email']),
     adminPassword: /** @type {string|null} */ (values['admin-password']),
@@ -502,7 +496,6 @@ async function bootstrap(cliArgs) {
   // and can't escape cwd (CVE-class path-traversal).
   let projectName = args.projectName;
   let packageManager = args.packageManager || detectPackageManager();
-  let initGit = !args.noGit;
   let adminEmail = args.adminEmail;
   let adminPassword = args.adminPassword;
 
@@ -566,13 +559,6 @@ async function bootstrap(cliArgs) {
             initialValue: packageManager,
           });
         },
-        git: () => {
-          if (args.noGit) return Promise.resolve(false);
-          return p.confirm({
-            message: 'Initialize a git repository for version control?',
-            initialValue: true,
-          });
-        },
       },
       {
         onCancel: () => {
@@ -586,7 +572,6 @@ async function bootstrap(cliArgs) {
     adminEmail = project.adminEmail;
     adminPassword = project.adminPassword;
     packageManager = project.packageManager;
-    initGit = project.git;
   } else {
     // Non-interactive validation
     if (!projectName) {
@@ -633,7 +618,6 @@ async function bootstrap(cliArgs) {
       `Project:          ${projectName}`,
       `Admin:            ${adminEmail}`,
       `Package manager:  ${packageManager}`,
-      `Git:              ${initGit ? 'yes' : 'no'}`,
     ].join('\n'),
     'Configuration',
   );
@@ -1120,8 +1104,16 @@ async function bootstrap(cliArgs) {
     }
   }
 
-  // Initialize git
-  if (initGit) {
+  // Initialize git. Always attempted; skipped silently with a friendly note
+  // if the `git` binary isn't on PATH (no flag exposed for opt-out).
+  let gitAvailable = true;
+  try {
+    execFileSync('git', ['--version'], { stdio: 'ignore' });
+  } catch {
+    gitAvailable = false;
+  }
+
+  if (gitAvailable) {
     s.message('Initializing git repository');
     copyTemplate('.gitignore', join(projectDir, '.gitignore'), variables);
 
@@ -1205,6 +1197,10 @@ ${runCmd} test:prepush
     writeFileSync(join(hooksDir, 'pre-push'), prePushHook);
     chmodSync(join(hooksDir, 'pre-push'), 0o755);
     await tick();
+  } else {
+    p.log.info(
+      "git not found on PATH — skipping repo init. Install git and run 'git init' in this directory to enable version control + pre-commit/pre-push hooks.",
+    );
   }
 
   // Store template version and file checksums for `vibecarbon upgrade`