vibecarbon 0.9.0 → 0.11.0

package/carbon/ha/standby-init.sh

@@ -1,74 +0,0 @@
-#!/bin/bash
-# Initialize standby PostgreSQL as a streaming replica of the primary.
-#
-# This script runs ON the standby master node and uses kubectl to
-# exec into the postgres pod. It:
-#   1. Stops the standby database
-#   2. Wipes data and runs pg_basebackup from the primary
-#   3. Configures standby.signal and primary_conninfo
-#   4. Restarts as a hot standby
-#
-# Required env vars:
-#   PRIMARY_HOST  — IP address of the primary cluster (master node)
-#
-# Optional env vars:
-#   PRIMARY_PORT  — PostgreSQL port on the primary (default: 5432, use 30432 for NodePort)
-#   REPL_PASSWORD — Replication user password (required; generated by vibecarbon create in .env.local)
-#   NAMESPACE     — Kubernetes namespace (default: vibecarbon)
-
-set -euo pipefail
-
-: "${PRIMARY_HOST:?PRIMARY_HOST is required}"
-PRIMARY_PORT="${PRIMARY_PORT:-5432}"
-: "${REPL_PASSWORD:?REPL_PASSWORD is required — generate one in .env.local and export it before running standby-init.sh}"
-NAMESPACE="${NAMESPACE:-vibecarbon}"
-PGDATA="/var/lib/postgresql/data"
-
-# Find the postgres pod
-POD=$(kubectl get pods -n "$NAMESPACE" -l app.kubernetes.io/name=supabase-db -o jsonpath='{.items[0].metadata.name}')
-if [ -z "$POD" ]; then
-  echo "ERROR: No postgres pod found in namespace $NAMESPACE"
-  exit 1
-fi
-
-echo "Standby init: pod=$POD, primary=$PRIMARY_HOST:$PRIMARY_PORT"
-
-# 1. Stop postgres on standby
-echo "Stopping standby PostgreSQL..."
-kubectl exec -n "$NAMESPACE" "$POD" -- su postgres -c "pg_ctl stop -D $PGDATA -m fast" 2>/dev/null || true
-sleep 5
-
-# 2. Wipe data and run pg_basebackup from primary
-echo "Running pg_basebackup from primary ($PRIMARY_HOST:$PRIMARY_PORT)..."
-kubectl exec -n "$NAMESPACE" "$POD" -- bash -c "
-  rm -rf ${PGDATA}/*
-  PGPASSWORD='${REPL_PASSWORD}' pg_basebackup -h ${PRIMARY_HOST} -p ${PRIMARY_PORT} -U replicator -D ${PGDATA} -Fp -Xs -P -R
-"
-
-# 3. Configure standby signal and primary connection info
-echo "Configuring standby.signal and primary_conninfo..."
-kubectl exec -n "$NAMESPACE" "$POD" -- bash -c "
-  touch ${PGDATA}/standby.signal
-  echo \"primary_conninfo = 'host=${PRIMARY_HOST} port=${PRIMARY_PORT} user=replicator password=${REPL_PASSWORD}'\" >> ${PGDATA}/postgresql.auto.conf
-  chown -R postgres:postgres ${PGDATA}
-"
-
-# 4. Start postgres as hot standby
-echo "Starting standby PostgreSQL..."
-kubectl exec -n "$NAMESPACE" "$POD" -- su postgres -c "pg_ctl start -D $PGDATA -l /var/log/postgresql/postgresql.log"
-
-# 5. Verify recovery mode
-echo "Verifying standby is in recovery mode..."
-sleep 5
-for i in $(seq 1 15); do
-  result=$(kubectl exec -n "$NAMESPACE" "$POD" -- psql -U supabase_admin -tAc 'SELECT pg_is_in_recovery()' 2>/dev/null || echo "")
-  if [ "$result" = "t" ]; then
-    echo "Standby is in recovery mode — streaming replication active"
-    exit 0
-  fi
-  echo "  Waiting for standby to enter recovery mode (attempt $i/15)..."
-  sleep 2
-done
-
-echo "WARNING: Could not confirm standby is in recovery mode"
-exit 1

package/carbon/src/server/lib/request.ts

@@ -1,34 +0,0 @@
-import { logger } from './logger';
-
-/**
- * Extract client IP address from request headers.
- * Checks common proxy headers (x-forwarded-for, x-real-ip, cf-connecting-ip).
- */
-export function getClientIp(c: { req: { header: (name: string) => string | undefined } }): string {
-  // Cloudflare
-  const cfIp = c.req.header('cf-connecting-ip');
-  if (cfIp && isValidIp(cfIp)) return cfIp;
-
-  // Standard proxy headers
-  const forwarded = c.req.header('x-forwarded-for');
-  if (forwarded) {
-    const first = forwarded.split(',')[0].trim();
-    if (isValidIp(first)) return first;
-  }
-
-  const realIp = c.req.header('x-real-ip');
-  if (realIp && isValidIp(realIp)) return realIp;
-
-  logger.warn(
-    'Could not extract client IP from request headers (x-forwarded-for, x-real-ip, cf-connecting-ip). ' +
-      'Using fallback. Check proxy configuration if this happens frequently.'
-  );
-  return '127.0.0.1';
-}
-
-const ipv4Regex = /^(?:\d{1,3}\.){3}\d{1,3}$/;
-const ipv6Regex = /^[a-fA-F0-9:]+$/;
-
-function isValidIp(ip: string): boolean {
-  return ipv4Regex.test(ip) || ipv6Regex.test(ip);
-}

package/src/lib/pod-backups.js

@@ -1,53 +0,0 @@
-/**
- * List Supabase database backups stored inside the Postgres pod's /backups dir
- * (k8s mode, used when an env has no S3 configured). Shared by `backup` and
- * `restore` so the parsing of `ls` output lives in exactly one place.
- */
-
-import { getPostgresPod, sshKubectl } from './ssh.js';
-
-/**
- * @param {string} ip - master node IP
- * @param {string} sshKeyPath - path to the deploy SSH key
- * @param {{ sort?: 'recent' | 'largest' }} [options]
- *   - 'recent' (default) → newest first (`ls -lt`); restore lists by recency.
- *   - 'largest'          → biggest first with human-readable sizes (`ls -lhS`);
- *     backup lists by size.
- * @returns {Array<{ size: string, date: string, name: string }>} parsed entries
- *   (empty array if the pod is unreachable or holds no backups)
- */
-export async function listPodBackups(ip, sshKeyPath, { sort = 'recent' } = {}) {
-  const pod = await getPostgresPod(ip, sshKeyPath);
-  const lsFlags = sort === 'largest' ? '-lhS' : '-lt';
-
-  try {
-    const output = await sshKubectl(ip, sshKeyPath, [
-      'exec',
-      '-n',
-      'vibecarbon',
-      pod,
-      '--',
-      'sh',
-      '-c',
-      `ls ${lsFlags} /backups/*_full.tar.gz /backups/*.sql.gz 2>/dev/null || echo NO_BACKUPS`,
-    ]);
-
-    if (output === 'NO_BACKUPS' || !output) {
-      return [];
-    }
-
-    return output
-      .split('\n')
-      .filter((line) => line.includes('.tar.gz') || line.includes('.sql.gz'))
-      .map((line) => {
-        const parts = line.split(/\s+/);
-        return {
-          size: parts[4],
-          date: `${parts[5]} ${parts[6]} ${parts[7]}`,
-          name: parts[parts.length - 1].replace('/backups/', ''),
-        };
-      });
-  } catch {
-    return [];
-  }
-}