Dev

.claude/settings.json

@@ -0,0 +1,5 @@
+{
+  "enabledPlugins": {
+    "frontend-design@claude-plugins-official": true
+  }
+}

.gitignore

@@ -12,3 +12,8 @@ docs/*.sql
 config-to-validate.yaml
 *.bak
 .claude/settings.local.json
+
+plan/
+.stacker
+done.txt
+post-deploy-ran.txt

Cargo.toml

@@ -36,7 +36,7 @@ actix = "0.13.5"
 actix-web-actors = "4.3.1"
 chrono = { version = "0.4.39", features = ["serde", "clock"] }
 config = "0.13.4"
-reqwest = { version = "0.11.23", features = ["json", "blocking", "stream"] }
+reqwest = { version = "0.11.23", features = ["json", "blocking", "stream", "native-tls"] }
 serde = { version = "1.0.195", features = ["derive"] }
 tokio = { version = "1.28.1", features = ["full"] }
 tracing = { version = "0.1.40", features = ["log"] }
@@ -118,6 +118,7 @@ indexmap = ["dep:indexmap"]
 explain = ["actix-casbin-auth/explain", "actix-casbin-auth/logging"]
 
 [build-dependencies]
+protoc-bin-vendored = "3"
 tonic-build = "0.11"
 
 [dev-dependencies]

README.md

@@ -160,7 +160,10 @@ The end-user tool. No server required for local deploys.
 | `stacker status` | Show running containers and health |
 | `stacker logs` | View container logs (`--follow`, `--service`, `--tail`) |
 | `stacker secrets` | Manage local `.env` secrets or remote Vault-backed `service` / `server` secrets |
-| `stacker list deployments` | List deployments on the Stacker server |
+| `stacker list deployments` / `stacker deployments` | List deployments on the Stacker server |
+| `stacker list servers` / `stacker servers` | List saved servers |
+| `stacker list clouds` / `stacker clouds` | List saved cloud credentials |
+| `stacker list ssh-keys` / `stacker ssh-keys` | List per-server SSH key status |
 | `stacker destroy` | Tear down the deployed stack |
 | `stacker config validate` | Validate `stacker.yml` syntax |
 | `stacker config show` | Show resolved configuration |
@@ -181,6 +184,8 @@ The end-user tool. No server required for local deploys.
 | `stacker service list` | List available service templates (20+ built-in) |
 | `stacker agent health` | Check Status Panel agent connectivity and health |
 | `stacker agent status` | Display agent snapshot — containers, versions, uptime |
+| `stacker agent list apps` / `stacker agent apps` | List apps for the target deployment |
+| `stacker agent list containers` / `stacker agent containers` | List containers on the target server |
 | `stacker agent logs <app>` | Retrieve container logs from the remote agent |
 | `stacker agent restart <app>` | Restart a container via the agent |
 | `stacker agent deploy-app` | Deploy or update an app container on the target server. `--runtime kata\|runc` selects container runtime; `--env <name>` selects the deploy environment/profile |
@@ -202,6 +207,7 @@ The end-user tool. No server required for local deploys.
 | `stacker pipe replay <exec-id>` | Re-run a previous pipe execution |
 | `stacker target [local\|cloud\|server]` | Switch deployment target mode |
 | `stacker env [local\|dev\|prod]` | Show or persist the active deploy environment/profile used by app-only updates |
+| `stacker whoami` | Show the active login, subscription plan, and current project deployment context |
 | `stacker submit` | Package current stack and submit to marketplace for review |
 | `stacker marketplace status` | Check submission status for your marketplace templates |
 | `stacker marketplace logs <name>` | Show review comments and history for a submission |

build.rs

@@ -5,8 +5,9 @@ use std::process::Command;
 
 fn main() -> Result<(), Box<dyn std::error::Error>> {
     emit_git_short_hash();
+    configure_protoc()?;
 
-    let proto_includes = collect_proto_include_paths();
+    let proto_includes = collect_proto_include_paths()?;
 
     tonic_build::configure()
         .build_server(false)
@@ -15,9 +16,32 @@ fn main() -> Result<(), Box<dyn std::error::Error>> {
     Ok(())
 }
 
-fn collect_proto_include_paths() -> Vec<PathBuf> {
+fn configure_protoc() -> Result<(), Box<dyn std::error::Error>> {
+    if env::var_os("PROTOC").is_none() {
+        env::set_var("PROTOC", protoc_bin_vendored::protoc_bin_path()?);
+    }
+
+    if env::var_os("PROTOC_INCLUDE").is_none() {
+        env::set_var("PROTOC_INCLUDE", protoc_bin_vendored::include_path()?);
+    }
+
+    println!("cargo:rerun-if-env-changed=PROTOC");
+    println!("cargo:rerun-if-env-changed=PROTOC_INCLUDE");
+
+    Ok(())
+}
+
+fn collect_proto_include_paths() -> Result<Vec<PathBuf>, Box<dyn std::error::Error>> {
     let mut includes = vec![PathBuf::from("proto")];
 
+    let vendored_include = PathBuf::from(protoc_bin_vendored::include_path()?);
+    if vendored_include
+        .join("google/protobuf/struct.proto")
+        .exists()
+    {
+        includes.push(vendored_include);
+    }
+
     for candidate in [
         PathBuf::from("/usr/include"),
         PathBuf::from("/usr/local/include"),
@@ -28,7 +52,7 @@ fn collect_proto_include_paths() -> Vec<PathBuf> {
         }
     }
 
-    includes
+    Ok(includes)
 }
 
 fn emit_git_short_hash() {

configuration.yaml.dist

@@ -71,13 +71,27 @@ connectors:
 #   USER_SERVICE_AUTH_TOKEN, PAYMENT_SERVICE_AUTH_TOKEN
 #   STACKER_AUTH_REQUEST_TIMEOUT_SECS, STACKER_AUTH_CONNECT_TIMEOUT_SECS
 #   DEFAULT_DEPLOY_DIR - Base directory for deployments (default: /home/trydirect)
+#   STACKER_PAYOUT_PROVIDER=mock|stripe_connect
+#   STRIPE_SECRET_KEY or PAYOUT_STRIPE_SECRET_KEY
+#   STRIPE_WEBHOOK_SECRET or PAYOUT_STRIPE_WEBHOOK_SECRET
+#   PAYOUT_ONBOARDING_RETURN_URL, PAYOUT_ONBOARDING_REFRESH_URL
 
 # Deployment settings
 # deployment:
 #   # Base path for app config files on the deployment server
 #   # Can also be set via DEFAULT_DEPLOY_DIR environment variable
 #   config_base_path: /home/trydirect
 
+# Vendor payout provider. Defaults to mock for local/dev/test.
+# For production Stripe Connect, set provider: stripe_connect and provide STRIPE_SECRET_KEY
+# via environment variable rather than committing it here.
+# payouts:
+#   provider: mock
+#   stripe_api_base_url: https://api.stripe.com
+#   onboarding_return_url: https://stacker.try.direct/marketplace/vendor/onboarding/return
+#   onboarding_refresh_url: https://stacker.try.direct/marketplace/vendor/onboarding/refresh
+#   timeout_secs: 15
+
 # Marketplace asset storage (Hetzner Object Storage / S3-compatible)
 # marketplace_assets:
 #   enabled: true

docker-compose.dev.yml

@@ -42,6 +42,9 @@ services:
       # Vault — must point to the real Vault service in the TryDirect network
       - VAULT_ADDRESS=https://vault.try.direct
       - VAULT_TOKEN=${STACKER_VAULT_TOKEN:-change-me}
+      # mTLS client cert for Vault — inline PEMs
+      - VAULT_CLIENT_CERT=${VAULT_CLIENT_CERT:-}
+      - VAULT_CLIENT_KEY=${VAULT_CLIENT_KEY:-}
     depends_on:
       stackerdb:
         condition: service_healthy

docker/dev/docker-compose.yml

@@ -1,5 +1,3 @@
-version: "2.2"
-
 volumes:
   stackerdb:
     driver: local
@@ -8,30 +6,28 @@ volumes:
     driver: local
 
 networks:
-  backend:
+  trydirect_default:
     driver: bridge
-    name: backend
     external: true
   trydirect-network:
     external: true
     name: trydirect-network
 
-
 services:
-
   stacker:
-    image: trydirect/stacker:0.0.8
-    build: .
+    image: trydirect/stacker:latest
+    #image: trydirect/stacker:test
     container_name: stacker
     restart: always
     volumes:
       - ./stacker/files:/app/files
+      - ./.env:/app/.env
       - ./configuration.yaml:/app/configuration.yaml
       - ./access_control.conf:/app/access_control.conf
       - ./migrations:/app/migrations
-      - ./.env:/app/.env
+      - ./stacker/ansible:/ansible/roles:ro
     ports:
-      - "8000:8000"
+      - "8001:8000"
     env_file:
       - ./.env
     environment:
@@ -41,33 +37,27 @@ services:
       stackerdb:
         condition: service_healthy
     networks:
-      - backend
+      - trydirect_default
 
-
-  stacker_queue:
-    image: trydirect/stacker:0.0.7
-    container_name: stacker_queue
+  stackermq:
+    image: trydirect/stacker:latest
+    #image: trydirect/stacker:test  # for testing mcp
+    container_name: stackermq
     restart: always
     volumes:
       - ./configuration.yaml:/app/configuration.yaml
       - ./.env:/app/.env
     environment:
       - RUST_LOG=debug
       - RUST_BACKTRACE=1
-      - AMQP_HOST=rabbitmq
-      - AMQP_PORT=5672
-      - AMQP_USERNAME=guest
-      - AMQP_PASSWORD=guest
     env_file:
       - ./.env
     depends_on:
       stackerdb:
         condition: service_healthy
     entrypoint: /app/console mq listen
     networks:
-      - backend
-      - trydirect-network
-
+      - trydirect_default
 
   stackerdb:
     container_name: stackerdb
@@ -76,17 +66,17 @@ services:
       interval: 10s
       timeout: 5s
       retries: 5
-    image: postgres:18.3
+    image: postgres:16.0
     restart: always
     ports:
-      - 5432
+      - 5434:5432
     env_file:
       - ./.env
     volumes:
       - stackerdb:/var/lib/postgresql/data
       - ./postgresql.conf:/etc/postgresql/postgresql.conf
     networks:
-      - backend
+      - trydirect_default
 
   stackerredis:
     container_name: stackerredis
@@ -105,5 +95,5 @@ services:
       options:
         max-size: "10m"
         tag: "container_{{.Name}}"
-
-
+    networks:
+      - trydirect_default