@digitaldefiance/express-suite-starter 2.3.5 → 2.3.7

package/scaffolding/api-lib/src/lib/services/email.ts

@@ -0,0 +1,109 @@
+import { SESClient, SendEmailCommand } from '@aws-sdk/client-ses';
+import { IApplication, IBaseDocument } from '@digitaldefiance/node-express-suite';
+
+// Simple debugLog implementation
+function debugLog(debug: boolean, type: 'log' | 'warn' | 'error', ...args: any[]): void {
+  if (debug) {
+    console[type](...args);
+  }
+}
+import { Types } from '@digitaldefiance/mongoose-types';
+import { Environment } from '../environment';
+import { IConstants } from '../interfaces/constants';
+
+/**
+ * A generic service for sending emails using Amazon SES.
+ */
+export class EmailService {
+  private readonly sesClient: SESClient;
+  private readonly emailSender: string;
+  private readonly disableEmailSend: boolean;
+  private readonly debug: boolean;
+  private readonly application: IApplication;
+
+  /**
+   * Constructs an instance of EmailService.
+   * @param config Configuration object containing AWS credentials, region, sender email, and debug/disable flags.
+   */
+  constructor(application: IApplication) {
+    this.application = application;
+    const environment = application.environment as Environment;
+    this.emailSender = environment.emailSender;
+    this.disableEmailSend = environment.disableEmailSend;
+    this.debug = environment.debug;
+
+    // Initialize the SES client with provided AWS credentials and region.
+    this.sesClient = new SESClient({
+      region: environment.aws.region,
+      credentials: {
+        accessKeyId: environment.aws.accessKeyId.value ?? '',
+        secretAccessKey:
+          environment.aws.secretAccessKey.value ?? '',
+      },
+    });
+  }
+
+  /**
+   * Sends an email using Amazon SES.
+   * @param to The recipient's email address.
+   * @param subject The subject line of the email.
+   * @param text The plain text body of the email.
+   * @param html The HTML body of the email.
+   * @returns A Promise that resolves when the email is sent successfully, or rejects on failure.
+   * @throws Error if email sending is disabled or if SES encounters an error.
+   */
+  public async sendEmail(
+    to: string,
+    subject: string,
+    text: string,
+    html: string,
+  ): Promise<void> {
+    if (this.disableEmailSend) {
+      debugLog(
+        this.debug,
+        'log',
+        `Email sending disabled for: ${to} - Subject: ${subject}`,
+      );
+      return;
+    }
+
+    const sendCommand = new SendEmailCommand({
+      Destination: {
+        ToAddresses: [to], // Recipient email address
+      },
+      Message: {
+        Body: {
+          Html: {
+            Charset: 'UTF-8',
+            Data: html, // HTML content of the email
+          },
+          Text: {
+            Charset: 'UTF-8',
+            Data: text, // Plain text content of the email
+          },
+        },
+        Subject: {
+          Charset: 'UTF-8',
+          Data: subject, // Subject of the email
+        },
+      },
+      Source: this.emailSender, // Sender email address (must be verified in SES)
+    });
+
+    try {
+      await this.sesClient.send(sendCommand);
+      debugLog(
+        this.debug,
+        'log',
+        `Email sent successfully to ${to} with subject: ${subject}`,
+      );
+    } catch (error) {
+      console.error(`Failed to send email to ${to}:`, error);
+      throw new Error(
+        `Failed to send email: ${
+          error instanceof Error ? error.message : String(error)
+        }`,
+      );
+    }
+  }
+}

package/scaffolding/api-lib/src/lib/services/index.ts

@@ -0,0 +1 @@
+export * from './email';

package/scaffolding/api-lib/src/lib/shared-types.ts

@@ -0,0 +1,172 @@
+import { NextFunction, Request, RequestHandler, Response } from 'express';
+import { ValidationChain } from 'express-validator';
+import { ClientSession, Document, Model, Types } from '@digitaldefiance/mongoose-types';
+import { Brand } from 'ts-brand';
+import type { IUserDocument } from './documents/user';
+import { CoreLanguageCode } from '@digitaldefiance/i18n-lib';
+import { IKeyPairBufferWithUnEncryptedPrivateKey, ISigningKeyPrivateKeyInfo, ISimplePublicKeyOnly, ISimpleKeyPairBuffer, ISimplePublicKeyOnlyBuffer } from '@digitaldefiance/node-ecies-lib'
+import {IApiErrorResponse, IApiMessageResponse, ISchema, IStatusCodeResponse, IApiExpressValidationErrorResponse, IApiMongoValidationErrorResponse, IUserRoleDocument, IUsedDirectLoginTokenDocument, IRoleDocument, IMnemonicDocument, IEmailTokenDocument } from '@digitaldefiance/node-express-suite';
+
+export type DefaultBackendIdType = Types.ObjectId;
+
+export type MongooseDocument = Document;
+export type MongooseModel<
+  TRawDocType,
+  TQueryHelpers = {},
+  TInstanceMethods = {},
+  TVirtuals = {},
+> = Model<TRawDocType, TQueryHelpers, TInstanceMethods, TVirtuals>;
+
+/**
+ * Transaction callback type for withTransaction
+ */
+export type TransactionCallback<T> = (
+  session: ClientSession | undefined,
+  ...args: Array<unknown>
+) => Promise<T>;
+
+/**
+ * Validated body for express-validator
+ */
+export type ValidatedBody<T extends string> = {
+  [K in T]: unknown;
+};
+
+/**
+ * Schema map interface
+ */
+export type ModelDocMap = {
+  EmailToken: IEmailTokenDocument;
+  Mnemonic: IMnemonicDocument;
+  Role: IRoleDocument;
+  UsedDirectLoginToken: IUsedDirectLoginTokenDocument;
+  User: IUserDocument;
+  UserRole: IUserRoleDocument;
+};
+
+export type SchemaMap = {
+  /**
+   * For each model name, contains the corresponding schema and model
+   */
+  [K in keyof ModelDocMap]: ISchema<ModelDocMap[K]>;
+};
+
+export type ApiRequestHandler<T extends ApiResponse> = (
+  req: Request,
+  res: Response,
+  next: NextFunction,
+) => Promise<IStatusCodeResponse<T>>;
+
+export type TypedHandlers = {
+  [key: string]: ApiRequestHandler<ApiResponse>;
+};
+
+export interface IRouteDefinition<T extends TypedHandlers> {
+  method: 'get' | 'post' | 'put' | 'delete' | 'patch';
+  path: string;
+  options: {
+    handlerKey: keyof T;
+    validation?: (validationLanguage: CoreLanguageCode) => ValidationChain[];
+    useAuthentication: boolean;
+    useCryptoAuthentication: boolean;
+  };
+}
+
+export type RouteHandlers = Record<string, ApiRequestHandler<ApiResponse>>;
+
+export type HttpMethod = 'get' | 'post' | 'put' | 'delete' | 'patch';
+
+export interface RouteConfig<H extends object> {
+  method: HttpMethod;
+  path: string;
+  handlerKey: keyof H;
+  handlerArgs?: Array<unknown>;
+  useAuthentication: boolean;
+  useCryptoAuthentication: boolean;
+  middleware?: RequestHandler[];
+  validation?: FlexibleValidationChain;
+  rawJsonHandler?: boolean;
+  authFailureStatusCode?: number;
+}
+
+export function routeConfig<T extends object>(
+  method: 'get' | 'post' | 'put' | 'delete' | 'patch',
+  path: string,
+  options: {
+    handlerKey: keyof T;
+    validation?: (validationLanguage: CoreLanguageCode) => ValidationChain[];
+    useAuthentication: boolean;
+    useCryptoAuthentication: boolean;
+  },
+): RouteConfig<T> {
+  return {
+    method,
+    path,
+    handlerKey: options.handlerKey,
+    validation: options.validation,
+    useAuthentication: options.useAuthentication,
+    useCryptoAuthentication: options.useCryptoAuthentication,
+  };
+}
+
+export type THandlerArgs<T extends Array<unknown>> = T;
+
+export type FlexibleValidationChain =
+  | ValidationChain[]
+  | ((lang: CoreLanguageCode) => ValidationChain[]);
+
+export type JsonPrimitive = string | number | boolean | null | undefined;
+
+export type JsonResponse =
+  | JsonPrimitive
+  | { [key: string]: JsonResponse }
+  | JsonResponse[];
+
+export type ApiErrorResponse =
+  | IApiErrorResponse
+  | IApiExpressValidationErrorResponse
+  | IApiMongoValidationErrorResponse;
+
+export type ApiResponse = IApiMessageResponse | ApiErrorResponse | JsonResponse;
+
+export type SendFunction<T extends ApiResponse> = (
+  statusCode: number,
+  data: T,
+  res: Response<T>,
+) => void;
+
+export type KeyPairBufferWithUnEncryptedPrivateKey = Brand<
+  IKeyPairBufferWithUnEncryptedPrivateKey,
+  'KeyPairBufferWithUnEncryptedPrivateKey'
+>;
+export type SigningKeyPrivateKeyInfo = Brand<
+  ISigningKeyPrivateKeyInfo,
+  'SigningKeyPrivateKeyInfo'
+>;
+export type SimpleKeyPair = Brand<SimplePublicKeyOnly, 'SimpleKeyPair'>;
+export type SimplePublicKeyOnly = Brand<
+  ISimplePublicKeyOnly,
+  'SimplePublicKeyOnly'
+>;
+export type SimpleKeyPairBuffer = Brand<
+  ISimpleKeyPairBuffer,
+  'SimpleKeyPairBuffer'
+>;
+export type SimplePublicKeyOnlyBuffer = Brand<
+  ISimplePublicKeyOnlyBuffer,
+  'SimplePublicKeyOnlyBuffer'
+>;
+export type HexString = Brand<string, 'HexString'>;
+export type SignatureString = Brand<HexString, 'SignatureString'>;
+export type SignatureBuffer = Buffer & Brand<Buffer, 'SignatureBuffer'>;
+export type ChecksumBuffer = Buffer &
+  Brand<Buffer, 'Sha3Checksum', 'ChecksumBuffer'>;
+export type ChecksumString = Brand<HexString, 'Sha3Checksum', 'ChecksumString'>;
+
+/**
+ * Extended Buffer type for data
+ */
+export type DataBuffer = Buffer & {
+  toBuffer(): Buffer;
+  toHex(): string;
+};

package/scaffolding/devcontainer-mongodb/.devcontainer/.env.example

@@ -0,0 +1,3 @@
+MONGO_PASSWORD={{password}}
+MONGO_INITDB_DATABASE={{workspaceName}}
+COMPOSE_PROJECT_NAME={{prefix}}_devcontainer

package/scaffolding/devcontainer-mongodb/.devcontainer/Dockerfile

@@ -0,0 +1,6 @@
+FROM mcr.microsoft.com/devcontainers/javascript-node:20
+
+# Install MongoDB tools
+RUN apt-get update && export DEBIAN_FRONTEND=noninteractive \
+    && apt-get install -y mongodb-clients \
+    && apt-get clean -y && rm -rf /var/lib/apt/lists/*

package/scaffolding/devcontainer-mongodb/.devcontainer/devcontainer.json.mustache

@@ -0,0 +1,31 @@
+{
+  "name": "{{workspaceName}} - Node.js & MongoDB",
+  "dockerComposeFile": "docker-compose.yml",
+  "service": "app",
+  "workspaceFolder": "/workspaces/${localWorkspaceFolderBasename}",
+  "customizations": {
+    "vscode": {
+      "extensions": [
+        "mongodb.mongodb-vscode",
+        "dbaeumer.vscode-eslint",
+        "esbenp.prettier-vscode",
+        "firsttris.vscode-jest-runner",
+        "nrwl.angular-console"
+      ]
+    }
+  },
+  "hostRequirements": {
+    "memory": "16gb",
+    "cpus": 4
+  },
+  "runArgs": [
+    "--memory=12g",
+    "--memory-swap=16g",
+    "--cpus=4",
+    "--dns=1.1.1.1",
+    "--dns=8.8.8.8",
+    "--add-host=host.docker.internal:host-gateway"    
+  ],
+  "forwardPorts": [3000, 3443, 4200, 27017],
+  "postCreateCommand": "yarn install"
+}

package/scaffolding/devcontainer-mongodb/.devcontainer/docker-compose.yml

@@ -0,0 +1,31 @@
+services:
+  app:
+    build:
+      context: .
+      dockerfile: Dockerfile
+    volumes:
+      - ../..:/workspaces:cached
+    command: sleep infinity
+    network_mode: service:db
+    dns:
+      - 1.1.1.1
+      - 8.8.8.8 
+    extra_hosts:
+      - "host.docker.internal:host-gateway"
+    # Add memory limits to prevent OOM kills
+    mem_limit: 16g
+    memswap_limit: 16g
+    cpus: 4
+
+  db:
+    image: mongo:8
+    restart: unless-stopped
+    volumes:
+      - mongodb-data:/data/db
+    environment:
+      MONGO_INITDB_ROOT_USERNAME: admin
+      MONGO_INITDB_ROOT_PASSWORD: ${MONGO_PASSWORD}
+      MONGO_INITDB_DATABASE: ${MONGO_INITDB_DATABASE}
+
+volumes:
+  mongodb-data:

package/scaffolding/devcontainer-mongodb/.devcontainer/load-env.sh

@@ -0,0 +1,20 @@
+#!/bin/bash
+SCRIPT_DIR=$( cd -- "$( dirname -- "${BASH_SOURCE[0]}" )" &> /dev/null && pwd )
+
+# Check if we're in a /workspaces or /workspace path
+if [[ "${PWD}" =~ ^/workspaces?/ ]]; then
+  WORKSPACE=$(echo "${PWD}" | grep -oP '^/workspaces?/[^/]+')
+elif [ "$(basename "${PWD}")" = ".devcontainer" ]; then
+  WORKSPACE=$(realpath "${PWD}/..")
+else
+  WORKSPACE=$(realpath "${SCRIPT_DIR}/..")
+fi
+
+DEVCONTAINER_DIR="${WORKSPACE}/.devcontainer"
+
+if [ -f "${DEVCONTAINER_DIR}/.env" ]; then
+  echo "Loading environment variables from ${DEVCONTAINER_DIR}/.env"
+  set -a
+  source "${DEVCONTAINER_DIR}/.env"
+  set +a
+fi

package/scaffolding/devcontainer-mongodb/.devcontainer/post-create.sh.hbs

@@ -0,0 +1,54 @@
+#!/bin/bash
+set -e
+SCRIPT_DIR=$( cd -- "$( dirname -- "${BASH_SOURCE[0]}" )" &> /dev/null && pwd )
+WORKSPACE=$(realpath "${SCRIPT_DIR}/..")
+
+echo "Post-create setup starting..."
+
+cd ${WORKSPACE} && source .devcontainer/load-env.sh
+
+# Basic git setup
+git config --global --add safe.directory ${WORKSPACE} 2>/dev/null || true
+
+cd ${WORKSPACE} && ./setup-nvm.sh
+cd ${WORKSPACE} && ./ensure-git-globals.sh
+cd ${WORKSPACE} && ./recover-yarn.sh
+
+cd ${WORKSPACE} && export COREPACK_ENABLE_DOWNLOAD_PROMPT=0 && yes | corepack enable
+
+# Setup Yarn Berry
+echo "Setting up Yarn Berry..."
+cd ${WORKSPACE} && corepack prepare yarn@${DEFAULT_YARN_VERSION} --activate && corepack yarn set version ${DEFAULT_YARN_VERSION} || echo "Yarn Berry setup failed"
+
+# Install dependencies
+echo "Installing dependencies..."
+cd ${WORKSPACE} && corepack yarn config set nodeLinker node-modules
+
+MAX_ATTEMPTS=5;
+WAIT_TIME=2;
+REGISTRY_URL=http://host.docker.internal:4873/;
+ATTEMPTS=0;
+echo 'Waiting for Verdaccio registry at $REGISTRY_URL (Max 10s total, 4s timeout per attempt)...';
+while [ $ATTEMPTS -lt $MAX_ATTEMPTS ]; do
+  # Increased timeouts for cross-host networking stability: 2s connect, 4s total time.
+  if curl -sS -o /dev/null --fail --connect-timeout 2 --max-time 4 $REGISTRY_URL; then
+    echo 'Verdaccio detected. Configuring NPM and YARN.';
+      npm config set registry $REGISTRY_URL --location=project;
+      yarn config set npmRegistryServer $REGISTRY_URL;
+      VERDACCIO=1;
+      break;
+  fi;
+  sleep $WAIT_TIME;
+  ATTEMPTS=$((ATTEMPTS + 1));
+done;
+[ -z "$VERDACCIO" ] && echo 'Verdaccio not detected after 5 attempts. Using default public registry.';
+
+cd ${WORKSPACE} && ./npm-install-globals.sh
+cd ${WORKSPACE} && ./do-yarn.sh || echo "Dependency installation failed"
+
+cd ${WORKSPACE} && /usr/local/bin/mkcert localhost 127.0.0.1 ::1 {{hostname}}
+
+echo ""
+cd ${WORKSPACE} && yarn playwright install --with-deps || echo "Playwright installation failed"
+
+echo "Post-create setup complete"

package/scaffolding/devcontainer-mongodb-replicaset/.devcontainer/.env.example

@@ -0,0 +1,14 @@
+MONGO_INITDB_ROOT_USERNAME=admin
+MONGO_INITDB_ROOT_PASSWORD={{password}}
+MONGO_INITDB_DATABASE={{workspaceName}}
+MONGO_REPLICA_SET_NAME=rs0
+MONGO_PORT=27017
+MONGO_KEYFILE=/tmp/replica.key
+MONGO_DB_PATH=/data/db
+DEFAULT_YARN_VERSION=4.11.0
+DEFAULT_NVM_VERSION=22
+GIT_EMAIL=your@email.com
+GIT_NAME="Your Name"
+DEBUG="false"
+
+COMPOSE_PROJECT_NAME={{prefix}}_devcontainer

package/scaffolding/devcontainer-mongodb-replicaset/.devcontainer/Dockerfile

@@ -0,0 +1,38 @@
+FROM mcr.microsoft.com/devcontainers/javascript-node:1-22-bookworm
+
+# Install MongoDB command line tools - though mongo-database-tools not available on arm64
+ARG MONGO_TOOLS_VERSION=6.0
+RUN . /etc/os-release \
+    && curl -sSL "https://www.mongodb.org/static/pgp/server-${MONGO_TOOLS_VERSION}.asc" | gpg --dearmor > /usr/share/keyrings/mongodb-archive-keyring.gpg \
+    && echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/mongodb-archive-keyring.gpg] http://repo.mongodb.org/apt/debian ${VERSION_CODENAME}/mongodb-org/${MONGO_TOOLS_VERSION} main" | tee /etc/apt/sources.list.d/mongodb-org-${MONGO_TOOLS_VERSION}.list \
+    && apt-get update && export DEBIAN_FRONTEND=noninteractive \
+    && apt-get install -y mongodb-mongosh libnss3-tools golang \
+    && if [ "$(dpkg --print-architecture)" = "amd64" ]; then apt-get install -y mongodb-database-tools; fi \
+    && apt-get clean -y && rm -rf /var/lib/apt/lists/*
+
+# [Optional] Uncomment this section to install additional OS packages.
+# RUN apt-get update && export DEBIAN_FRONTEND=noninteractive \
+#     && apt-get -y install --no-install-recommends <your-package-list-here>
+
+# [Optional] Uncomment if you want to install an additional version of node using nvm
+# ARG EXTRA_NODE_VERSION=10
+# RUN su node -c "source /usr/local/share/nvm/nvm.sh && nvm install ${EXTRA_NODE_VERSION}"
+
+# [Optional] Uncomment if you want to install more global node modules
+# RUN su node -c "npm install -g <your-package-list-here>"
+
+RUN git clone https://github.com/FiloSottile/mkcert && cd mkcert && go build -ldflags "-X main.Version=$(git describe --tags)" && cp mkcert /usr/local/bin && cd .. && rm -rf mkcert && /usr/local/bin/mkcert -install
+
+# Install global npm packages and setup corepack
+RUN npm install -g nx @angular/cli typescript ts-node nodemon && \
+    corepack enable && \
+    corepack prepare yarn@4.9.2 --activate
+
+# Copy and set up custom entrypoint for better signal handling
+COPY entrypoint.sh /usr/local/bin/entrypoint.sh
+RUN chmod +x /usr/local/bin/entrypoint.sh
+
+RUN curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip" && unzip awscliv2.zip && sudo ./aws/install && rm -rf awscliv2.zip aws
+
+# Set the entrypoint
+ENTRYPOINT ["/usr/local/bin/entrypoint.sh"]

package/scaffolding/devcontainer-mongodb-replicaset/.devcontainer/Mongo.Dockerfile

@@ -0,0 +1,24 @@
+# db/Mongo.Dockerfile
+
+FROM mongo:latest
+
+# Generate a secure key for the replica set
+RUN openssl rand -base64 756 > "/tmp/replica.key" \
+  && chmod 600 /tmp/replica.key \
+  && chown mongodb:mongodb /tmp/replica.key
+
+# Remove any existing init scripts to prevent conflicts
+RUN rm -rf /docker-entrypoint-initdb.d/*
+
+# Copy the updated entrypoint script
+COPY mongodb_entrypoint.sh /usr/local/bin/mongodb_entrypoint.sh
+RUN chmod +x /usr/local/bin/mongodb_entrypoint.sh
+
+COPY mongodb_healthcheck.sh /usr/local/bin/mongodb_healthcheck.sh
+RUN chmod +x /usr/local/bin/mongodb_healthcheck.sh
+
+# Override the default entrypoint
+ENTRYPOINT ["/usr/local/bin/mongodb_entrypoint.sh"]
+
+# Expose MongoDB port
+EXPOSE 27017

package/scaffolding/devcontainer-mongodb-replicaset/.devcontainer/devcontainer.json

@@ -0,0 +1,69 @@
+// For format details, see https://aka.ms/devcontainer.json. For config options, see the
+// README at: https://github.com/devcontainers/templates/tree/main/src/javascript-node-mongo
+{
+  "name": "Node.js & Mongo DB",
+  "dockerComposeFile": "docker-compose.yml",
+  "service": "app",
+  "workspaceFolder": "/workspaces/${localWorkspaceFolderBasename}",
+  // Features to add to the dev container. More info: https://containers.dev/features.
+  "features": {
+    "ghcr.io/devcontainers/features/docker-outside-of-docker:1": {}
+  },
+  // Add container environment variables to help with stability
+  "containerEnv": {
+    "COREPACK_ENABLE_DOWNLOAD_PROMPT": "0",
+    "VSCODE_REMOTE_CONTAINERS_SESSION": "${containerSessionId}"
+  },
+  // You can also add hostRequirements to check if the host has enough memory
+  "hostRequirements": {
+    "memory": "16gb",
+    "cpus": 4
+  },
+  "runArgs": [
+    "--memory=12g",
+    "--memory-swap=16g",
+    "--cpus=4",
+    "--dns=1.1.1.1",
+    "--dns=8.8.8.8",
+    "--add-host=host.docker.internal:host-gateway"
+  ],
+  // Configure tool-specific properties.
+  "customizations": {
+    // Configure properties specific to VS Code.
+    "vscode": {
+      // Add the IDs of extensions you want installed when the container is created.
+      "extensions": [
+        "mongodb.mongodb-vscode",
+        "github.vscode-github-actions",
+        "ms-azuretools.vscode-docker",
+        "esbenp.prettier-vscode",
+        "ms-vscode-remote.remote-containers",
+        "firsttris.vscode-jest-runner",
+        "ms-playwright.playwright",
+        "nrwl.angular-console",
+        "GitHub.copilot",
+        "GitHub.copilot-chat",
+        "bruno-api-client.bruno"
+      ]
+    }
+  },
+  // Use 'forwardPorts' to make a list of ports inside the container available locally.
+  "forwardPorts": [
+    3000,
+    3443,
+    4200,
+    27017
+  ],
+  // Use 'postCreateCommand' to run commands after the container is created.
+  "postCreateCommand": "./.devcontainer/post-create.sh",
+  // Uncomment to connect as root instead. More info: https://aka.ms/dev-containers-non-root.
+  "remoteUser": "node",
+  // Add connection timeout and retry settings
+  "shutdownAction": "none",
+  "userEnvProbe": "none",
+  "updateRemoteUserUID": false,
+  "remoteEnv": {
+    "SHELL": "/bin/bash"
+  },
+  "overrideCommand": false,
+}

package/scaffolding/devcontainer-mongodb-replicaset/.devcontainer/docker-compose.yml

@@ -0,0 +1,66 @@
+services:
+  app:
+    build:
+      context: .
+      dockerfile: Dockerfile
+    volumes:
+      - ../..:/workspaces:cached
+    command: ["sleep", "infinity"]
+    dns:
+      - 1.1.1.1
+      - 8.8.8.8
+    extra_hosts:
+      - "host.docker.internal:host-gateway"
+    # Add init system for better signal handling
+    init: true
+    # Add restart policy
+    restart: unless-stopped
+    # Add memory limits to prevent OOM kills
+    mem_limit: 16g
+    memswap_limit: 16g
+    cpus: 4
+    # Add environment variables for debugging
+    environment:
+      - DB_HOST=db:27017
+      - DEBUG=1
+      - CONTAINER_ROLE=app
+    env_file:
+      - .env
+    depends_on:
+      - db
+    ports:
+      - "3000:3000"
+
+  db:
+    build:
+      context: .
+      dockerfile: ./Mongo.Dockerfile
+    container_name: db          # Ensures the container name is 'db'
+    hostname: db                 # Sets the internal hostname to 'db'
+    restart: unless-stopped
+    # Add memory limits to prevent OOM kills
+    mem_limit: 2g
+    memswap_limit: 2g
+    healthcheck:
+      test: ["CMD", "bash", "/usr/local/bin/mongodb_healthcheck.sh"]
+      interval: 30s
+      timeout: 10s
+      retries: 5
+      start_period: 40s
+    ports:
+      - "27017:27017"
+    volumes:
+      - mongodb-data:/data/db
+    environment:
+      - MONGO_INITDB_ROOT_USERNAME=${MONGO_INITDB_ROOT_USERNAME} 
+      - MONGO_INITDB_ROOT_PASSWORD=${MONGO_INITDB_ROOT_PASSWORD}
+      - MONGO_INITDB_DATABASE=${MONGO_INITDB_DATABASE}
+      - MONGO_REPLICA_SET_NAME=${MONGO_REPLICA_SET_NAME}
+      - MONGO_PORT=${MONGO_PORT}
+      - MONGO_KEYFILE=${MONGO_KEYFILE}
+      - MONGO_DB_PATH=${MONGO_DB_PATH}
+      - DB_HOST=127.0.0.1:27017
+      - EDITOR=vim
+
+volumes:
+  mongodb-data:

package/scaffolding/devcontainer-mongodb-replicaset/.devcontainer/entrypoint.sh

@@ -0,0 +1,29 @@
+#!/bin/bash
+set -e
+
+# Print debug info
+echo "Container started. PID: $$"
+echo "Arguments: $@"
+echo "Environment:"
+env | grep -E "(VSCODE|REMOTE)" || true
+
+# Set up signal handlers for graceful shutdown
+trap 'echo "Received SIGTERM, shutting down gracefully..."; exit 0' TERM
+trap 'echo "Received SIGINT, shutting down gracefully..."; exit 0' INT
+
+# Start the original command in background
+if [ $# -gt 0 ]; then
+    echo "Executing: $@"
+    "$@" &
+    CHILD_PID=$!
+    echo "Child process started with PID: $CHILD_PID"
+    
+    # Wait for child process and handle signals
+    wait $CHILD_PID
+    EXIT_CODE=$?
+    echo "Child process exited with code: $EXIT_CODE"
+    exit $EXIT_CODE
+else
+    echo "No command provided, running sleep infinity"
+    exec sleep infinity
+fi