feat: embedded WireGuard, password protection, remote services & public settings

apps/temps-cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@temps-sdk/cli",
-  "version": "0.1.14",
+  "version": "0.1.16",
   "description": "CLI for Temps deployment platform",
   "type": "module",
   "bin": {

apps/temps-cli/src/commands/projects/create.ts

@@ -23,6 +23,8 @@ import {
   selectRepository,
   selectBranch,
   detectAndSelectPreset,
+  findRepositoryByName,
+  fetchGitConnections,
 } from '../../lib/git-connection.js'
 import { selectStorageServices } from '../../lib/service-setup.js'
 
@@ -33,46 +35,120 @@ interface CreateOptions {
   preset?: string
   connection?: string
   repo?: string
+  yes?: boolean
 }
 
 export async function create(options: CreateOptions): Promise<void> {
   await requireAuth()
   await setupClient()
 
+  const skipPrompts = options.yes ?? false
+
   newline()
   console.log(colors.bold(`${icons.sparkles} Create New Project`))
   console.log(colors.muted('─'.repeat(40)))
   newline()
 
   try {
     // Step 1: Select Git Connection
-    const connection = await selectGitConnection()
+    let connection
+    if (options.connection) {
+      // Resolve connection by ID
+      const connections = await fetchGitConnections()
+      const connId = parseInt(options.connection, 10)
+      connection = connections.find((c) => c.id === connId)
+      if (!connection) {
+        error(`Git connection with ID ${options.connection} not found.`)
+        return
+      }
+      info(`Using git connection: ${connection.account_name}`)
+    } else if (options.repo && skipPrompts) {
+      // Auto-find the connection that has this repo
+      const parts = options.repo.split('/')
+      if (parts.length !== 2 || !parts[0] || !parts[1]) {
+        error('Repository must be in owner/name format (e.g., myorg/myrepo)')
+        return
+      }
+      const connections = await fetchGitConnections()
+      for (const conn of connections) {
+        const repo = await findRepositoryByName(conn.id, parts[0], parts[1])
+        if (repo) {
+          connection = conn
+          info(`Auto-selected git connection: ${conn.account_name}`)
+          break
+        }
+      }
+      if (!connection) {
+        error(`Repository "${options.repo}" not found in any git connection.`)
+        return
+      }
+    } else {
+      connection = await selectGitConnection()
+    }
     if (!connection) {
       error('No git connection selected. Please set up a git provider first.')
       return
     }
 
     // Step 2: Select Repository
-    const repository = await selectRepository(connection.id)
+    let repository
+    if (options.repo) {
+      // Parse owner/name format
+      const parts = options.repo.split('/')
+      if (parts.length !== 2 || !parts[0] || !parts[1]) {
+        error('Repository must be in owner/name format (e.g., myorg/myrepo)')
+        return
+      }
+      repository = await findRepositoryByName(connection.id, parts[0], parts[1])
+      if (!repository) {
+        error(`Repository "${options.repo}" not found in connection "${connection.account_name}".`)
+        return
+      }
+      info(`Using repository: ${repository.owner}/${repository.name}`)
+    } else {
+      repository = await selectRepository(connection.id)
+    }
     if (!repository) {
       error('No repository selected.')
       return
     }
 
     // Step 3: Select Branch
-    const branch = await selectBranch(connection.id, repository)
+    let branch: string
+    if (options.branch) {
+      branch = options.branch
+      info(`Using branch: ${branch}`)
+    } else {
+      branch = await selectBranch(connection.id, repository)
+    }
 
     // Step 4: Detect and Select Preset
-    const { preset, directory } = await detectAndSelectPreset(repository.id, branch)
+    let preset: string
+    let directory: string
+    if (options.preset) {
+      preset = options.preset
+      directory = options.directory || './'
+      info(`Using preset: ${preset}, directory: ${directory}`)
+    } else {
+      const detected = await detectAndSelectPreset(repository.id, branch)
+      preset = detected.preset
+      directory = detected.directory
+    }
 
     // Step 5: Configure Project Name
-    const projectName = await configureProjectName(repository, directory)
+    let projectName: string
+    if (options.name) {
+      projectName = options.name
+      info(`Using project name: ${projectName}`)
+    } else {
+      projectName = await configureProjectName(repository, directory)
+    }
 
-    // Step 6: Select Storage Services
-    const serviceIds = await selectStorageServices()
+    // Step 6: Select Storage Services (skip with --yes)
+    const serviceIds = skipPrompts ? [] : await selectStorageServices()
 
-    // Step 7: Configure Environment Variables
-    const envVars = await configureEnvironmentVariables()
+    // Step 7: Configure Environment Variables (skip with --yes)
+    const envVars = skipPrompts ? [] : await configureEnvironmentVariables()
 
     // Step 8: Create the Project
     const project = await withSpinner('Creating project...', async () => {
@@ -122,15 +198,20 @@ export async function create(options: CreateOptions): Promise<void> {
 
     newline()
 
-    // Ask if user wants to set as default
-    const setDefault = await promptConfirm({
-      message: 'Set as default project?',
-      default: true,
-    })
-
-    if (setDefault) {
+    // Ask if user wants to set as default (auto-set with --yes)
+    if (skipPrompts) {
       config.set('defaultProject', project.slug)
       success(`Default project set to "${project.slug}"`)
+    } else {
+      const setDefault = await promptConfirm({
+        message: 'Set as default project?',
+        default: true,
+      })
+
+      if (setDefault) {
+        config.set('defaultProject', project.slug)
+        success(`Default project set to "${project.slug}"`)
+      }
     }
 
     newline()

apps/temps-cli/src/commands/projects/index.ts

@@ -27,7 +27,12 @@ export function registerProjectsCommands(program: Command): void {
     .description('Create a new project')
     .option('-n, --name <name>', 'Project name')
     .option('-d, --description <description>', 'Project description')
-    .option('--repo <repository>', 'Git repository URL')
+    .option('--repo <repository>', 'Repository in owner/name format')
+    .option('--branch <branch>', 'Git branch')
+    .option('--directory <directory>', 'Root directory (relative to repo)')
+    .option('--preset <preset>', 'Build preset (e.g., nextjs, nodejs, static, docker)')
+    .option('--connection <id>', 'Git connection ID')
+    .option('-y, --yes', 'Skip optional prompts (services, env vars, set-default)')
     .action(create)
 
   projects

crates/temps-agent/Cargo.toml

@@ -26,5 +26,6 @@ utoipa-swagger-ui = { workspace = true }
 sysinfo = { workspace = true }
 uuid = { workspace = true }
 http-body-util = "0.1"
+bollard = { workspace = true }
 temps-core = { path = "../temps-core" }
 temps-deployer = { path = "../temps-deployer" }

crates/temps-agent/src/handlers.rs

@@ -20,20 +20,23 @@ use crate::NodeHealthReport;
 pub struct AgentState {
     pub container_deployer: Arc<dyn ContainerDeployer>,
     pub image_builder: Arc<dyn ImageBuilder>,
+    /// Direct Docker client for service operations (create/exec/backup).
+    /// None if Docker is not available (shouldn't happen on a real agent).
+    pub docker: Option<bollard::Docker>,
 }
 
 /// Response wrapper for consistent agent API responses.
 #[derive(Serialize, ToSchema)]
 pub struct AgentResponse<T: Serialize> {
-    success: bool,
+    pub(crate) success: bool,
     #[schema(nullable = true)]
-    data: Option<T>,
+    pub(crate) data: Option<T>,
     #[schema(nullable = true)]
-    error: Option<String>,
+    pub(crate) error: Option<String>,
 }
 
 impl<T: Serialize> AgentResponse<T> {
-    fn ok(data: T) -> Json<Self> {
+    pub(crate) fn ok(data: T) -> Json<Self> {
         Json(Self {
             success: true,
             data: Some(data),
@@ -65,13 +68,27 @@ fn error_response(status: StatusCode, message: String) -> impl IntoResponse {
         image_exists,
         import_image,
         health_check,
+        crate::service_handlers::create_service,
+        crate::service_handlers::stop_service,
+        crate::service_handlers::start_service,
+        crate::service_handlers::remove_service,
+        crate::service_handlers::service_status,
+        crate::service_handlers::service_exec,
+        crate::service_handlers::list_services,
+        crate::service_handlers::backup_service,
+        crate::service_handlers::restore_service,
     ),
     components(schemas(
         AgentResponse<temps_deployer::DeployResult>,
         AgentResponse<String>,
         AgentResponse<bool>,
         AgentResponse<temps_deployer::ContainerInfo>,
         AgentResponse<NodeHealthReport>,
+        AgentResponse<crate::ServiceCreateResponse>,
+        AgentResponse<crate::ServiceExecResponse>,
+        AgentResponse<crate::ServiceStatus>,
+        AgentResponse<Vec<crate::ServiceStatus>>,
+        AgentResponse<crate::ServiceBackupResponse>,
         NodeHealthReport,
         temps_deployer::DeployRequest,
         temps_deployer::DeployResult,
@@ -82,10 +99,20 @@ fn error_response(status: StatusCode, message: String) -> impl IntoResponse {
         temps_deployer::ResourceLimits,
         temps_deployer::RestartPolicy,
         temps_deployer::ContainerLogConfig,
+        crate::ServiceCreateRequest,
+        crate::ServiceCreateResponse,
+        crate::ServicePortMapping,
+        crate::ServiceExecRequest,
+        crate::ServiceExecResponse,
+        crate::ServiceBackupRequest,
+        crate::ServiceBackupResponse,
+        crate::ServiceRestoreRequest,
+        crate::S3CredentialsPayload,
+        crate::ServiceStatus,
     )),
     info(
         title = "Temps Agent API",
-        description = "Worker node agent API for container management. All endpoints require Bearer token authentication.",
+        description = "Worker node agent API for container and service management. All endpoints require Bearer token authentication.",
         version = "1.0.0"
     ),
     security(