@geekmidas/cli 9.0.2 → 10.0.0-alpha.1

package/src/init/generators/docker.ts

@@ -1,388 +0,0 @@
-import type { EventsBackend } from '../../types.js';
-import type {
-	GeneratedFile,
-	TemplateConfig,
-	TemplateOptions,
-} from '../templates/index.js';
-
-export interface DatabaseAppConfig {
-	name: string;
-	password: string;
-}
-
-/**
- * Generate docker-compose.yml based on template and options
- */
-export function generateDockerFiles(
-	options: TemplateOptions,
-	template: TemplateConfig,
-	dbApps?: DatabaseAppConfig[],
-): GeneratedFile[] {
-	const { database } = options;
-	const isServerless = template.name === 'serverless';
-	const hasWorker = template.name === 'worker';
-	const isFullstack = options.template === 'fullstack';
-
-	const services: string[] = [];
-	const volumes: string[] = [];
-	const files: GeneratedFile[] = [];
-
-	// PostgreSQL database
-	if (database) {
-		const initVolume =
-			isFullstack && dbApps?.length
-				? `
-      - ./docker/postgres/init.sh:/docker-entrypoint-initdb.d/init.sh:ro`
-				: '';
-
-		const envFile =
-			isFullstack && dbApps?.length
-				? `
-    env_file:
-      - ./docker/.env`
-				: '';
-
-		services.push(`  postgres:
-    image: postgres:18-alpine
-    container_name: ${options.name}-postgres
-    restart: unless-stopped${envFile}
-    environment:
-      POSTGRES_USER: \${POSTGRES_USER:-postgres}
-      POSTGRES_PASSWORD: \${POSTGRES_PASSWORD:-postgres}
-      POSTGRES_DB: \${POSTGRES_DB:-${options.name.replace(/-/g, '_')}_dev}
-    ports:
-      - '\${POSTGRES_HOST_PORT:-5432}:5432'
-    volumes:
-      - dbdata:/var/lib/postgresql/18/data${initVolume}
-    healthcheck:
-      test: ['CMD-SHELL', 'pg_isready -U $$POSTGRES_USER']
-      interval: 5s
-      timeout: 5s
-      retries: 5`);
-		volumes.push('  dbdata:');
-
-		// Generate PostgreSQL init script and .env for fullstack template
-		if (isFullstack && dbApps?.length) {
-			files.push({
-				path: 'docker/postgres/init.sh',
-				content: generatePostgresInitScript(dbApps, options.services?.events),
-			});
-
-			// Generate .env file for docker-compose (contains db passwords)
-			files.push({
-				path: 'docker/.env',
-				content: generateDockerEnv(dbApps, options.services?.events),
-			});
-		}
-	}
-
-	// Redis - different setup for serverless vs standard
-	if (isServerless) {
-		// Use serverless-redis-http for Lambda compatibility
-		services.push(`  redis:
-    image: redis:7-alpine
-    container_name: ${options.name}-redis
-    restart: unless-stopped
-    ports:
-      - '\${REDIS_HOST_PORT:-6379}:6379'
-    volumes:
-      - redis_data:/data
-    healthcheck:
-      test: ['CMD', 'redis-cli', 'ping']
-      interval: 5s
-      timeout: 5s
-      retries: 5
-
-  serverless-redis:
-    image: hiett/serverless-redis-http:latest
-    container_name: ${options.name}-serverless-redis
-    restart: unless-stopped
-    ports:
-      - '\${SRH_HOST_PORT:-8079}:80'
-    environment:
-      SRH_MODE: env
-      SRH_TOKEN: local_dev_token
-      SRH_CONNECTION_STRING: redis://redis:6379
-    depends_on:
-      redis:
-        condition: service_healthy`);
-		volumes.push('  redis_data:');
-	} else {
-		// Standard Redis for non-serverless templates
-		services.push(`  redis:
-    image: redis:7-alpine
-    container_name: ${options.name}-redis
-    restart: unless-stopped
-    ports:
-      - '\${REDIS_HOST_PORT:-6379}:6379'
-    volumes:
-      - redis_data:/data
-    healthcheck:
-      test: ['CMD', 'redis-cli', 'ping']
-      interval: 5s
-      timeout: 5s
-      retries: 5`);
-		volumes.push('  redis_data:');
-	}
-
-	// RabbitMQ for worker template
-	if (hasWorker) {
-		services.push(`  rabbitmq:
-    image: rabbitmq:3-management-alpine
-    container_name: ${options.name}-rabbitmq
-    restart: unless-stopped
-    ports:
-      - '\${RABBITMQ_HOST_PORT:-5672}:5672'
-      - '\${RABBITMQ_MGMT_HOST_PORT:-15672}:15672'
-    environment:
-      RABBITMQ_DEFAULT_USER: guest
-      RABBITMQ_DEFAULT_PASS: guest
-    volumes:
-      - rabbitmq_data:/var/lib/rabbitmq
-    healthcheck:
-      test: ['CMD', 'rabbitmq-diagnostics', 'check_running']
-      interval: 10s
-      timeout: 5s
-      retries: 5`);
-		volumes.push('  rabbitmq_data:');
-	}
-
-	// Mailpit for email testing
-	if (options.services?.mail) {
-		services.push(`  mailpit:
-    image: axllent/mailpit:latest
-    container_name: ${options.name}-mailpit
-    restart: unless-stopped
-    ports:
-      - '\${SMTP_PORT:-1025}:1025'
-      - '\${MAILPIT_PORT:-8025}:8025'
-    environment:
-      MP_SMTP_AUTH: \${SMTP_USER:-${options.name}}:\${SMTP_PASS:-${options.name}}`);
-	}
-
-	// MinIO for S3-compatible object storage
-	if (options.services?.storage) {
-		services.push(`  minio:
-    image: minio/minio:latest
-    container_name: ${options.name}-minio
-    restart: unless-stopped
-    entrypoint: sh
-    command: -c 'mkdir -p /data/\${STORAGE_BUCKET:-${options.name}} && /usr/bin/docker-entrypoint.sh server --console-address ":9001" /data'
-    environment:
-      MINIO_ROOT_USER: \${STORAGE_ACCESS_KEY_ID:-${options.name}}
-      MINIO_ROOT_PASSWORD: \${STORAGE_SECRET_ACCESS_KEY:-${options.name}}
-    ports:
-      - '\${MINIO_API_HOST_PORT:-9000}:9000'
-      - '\${MINIO_CONSOLE_HOST_PORT:-9001}:9001'
-    volumes:
-      - minio_data:/data
-    healthcheck:
-      test: ['CMD', 'mc', 'ready', 'local']
-      interval: 10s
-      timeout: 5s
-      retries: 5`);
-		volumes.push('  minio_data:');
-	}
-
-	// LocalStack for SNS events
-	if (options.services?.events === 'sns') {
-		services.push(`  localstack:
-    image: localstack/localstack:latest
-    container_name: ${options.name}-localstack
-    restart: unless-stopped
-    environment:
-      SERVICES: sns,sqs
-      AWS_DEFAULT_REGION: \${AWS_REGION:-us-east-1}
-      AWS_ACCESS_KEY_ID: \${AWS_ACCESS_KEY_ID:-localstack}
-      AWS_SECRET_ACCESS_KEY: \${AWS_SECRET_ACCESS_KEY:-localstack}
-    ports:
-      - '\${LOCALSTACK_PORT:-4566}:4566'
-    volumes:
-      - localstack_data:/var/lib/localstack
-    healthcheck:
-      test: ['CMD', 'curl', '-f', 'http://localhost:4566/_localstack/health']
-      interval: 10s
-      timeout: 5s
-      retries: 5`);
-		volumes.push('  localstack_data:');
-	}
-
-	// RabbitMQ for rabbitmq events (when not already added by worker template)
-	if (options.services?.events === 'rabbitmq' && !hasWorker) {
-		services.push(`  rabbitmq:
-    image: rabbitmq:3-management-alpine
-    container_name: ${options.name}-rabbitmq
-    restart: unless-stopped
-    ports:
-      - '\${RABBITMQ_HOST_PORT:-5672}:5672'
-      - '\${RABBITMQ_MGMT_HOST_PORT:-15672}:15672'
-    environment:
-      RABBITMQ_DEFAULT_USER: guest
-      RABBITMQ_DEFAULT_PASS: guest
-    volumes:
-      - rabbitmq_data:/var/lib/rabbitmq
-    healthcheck:
-      test: ['CMD', 'rabbitmq-diagnostics', 'check_running']
-      interval: 10s
-      timeout: 5s
-      retries: 5`);
-		if (!volumes.includes('  rabbitmq_data:')) {
-			volumes.push('  rabbitmq_data:');
-		}
-	}
-
-	// Build docker-compose.yml
-	let dockerCompose = `# Use "gkm dev" or "gkm test" to start services.
-# Running "docker compose up" directly will not inject secrets or resolve ports.
-services:
-${services.join('\n\n')}
-`;
-
-	if (volumes.length > 0) {
-		dockerCompose += `
-volumes:
-${volumes.join('\n')}
-`;
-	}
-
-	// Add docker-compose.yml to files
-	files.push({
-		path: 'docker-compose.yml',
-		content: dockerCompose,
-	});
-
-	return files;
-}
-
-/**
- * Generate .env file for docker-compose with database passwords
- */
-function generateDockerEnv(
-	apps: DatabaseAppConfig[],
-	_eventsBackend?: EventsBackend,
-): string {
-	const envVars = apps.map((app) => {
-		const envVar = `${app.name.toUpperCase()}_DB_PASSWORD`;
-		return `${envVar}=${app.password}`;
-	});
-
-	// Always include pgboss password for the dedicated pgboss user
-	envVars.push(`PGBOSS_DB_PASSWORD=pgboss-dev-password`);
-
-	return `# Auto-generated docker environment file
-# Contains database passwords for docker-compose postgres init
-# This file is gitignored - do not commit to version control
-${envVars.join('\n')}
-`;
-}
-
-/**
- * Generate PostgreSQL init shell script that creates per-app users with separate schemas.
- * Uses idempotent DO blocks so the script can be re-run safely.
- * - api user: uses public schema
- * - auth user: uses auth schema with search_path=auth
- * - pgboss user: uses pgboss schema (when events === 'pgboss')
- */
-function generatePostgresInitScript(
-	apps: DatabaseAppConfig[],
-	_eventsBackend?: EventsBackend,
-): string {
-	const userCreations = apps.map((app) => {
-		const userName = app.name.replace(/-/g, '_');
-		const envVar = `${app.name.toUpperCase()}_DB_PASSWORD`;
-		const isApi = app.name === 'api';
-		const schemaName = isApi ? 'public' : userName;
-
-		if (isApi) {
-			return `
-# Create ${app.name} user (uses public schema) - idempotent
-echo "Creating user ${userName}..."
-psql -v ON_ERROR_STOP=1 --username "$POSTGRES_USER" --dbname "$POSTGRES_DB" <<-EOSQL
-    DO \\$\\$
-    BEGIN
-        IF NOT EXISTS (SELECT FROM pg_roles WHERE rolname = '${userName}') THEN
-            CREATE USER ${userName} WITH PASSWORD '$${envVar}';
-        ELSE
-            ALTER USER ${userName} WITH PASSWORD '$${envVar}';
-        END IF;
-    END
-    \\$\\$;
-    GRANT ALL ON SCHEMA public TO ${userName};
-    ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT ALL ON TABLES TO ${userName};
-    ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT ALL ON SEQUENCES TO ${userName};
-EOSQL
-`;
-		}
-		return `
-# Create ${app.name} user with dedicated schema - idempotent
-echo "Creating user ${userName} with schema ${schemaName}..."
-psql -v ON_ERROR_STOP=1 --username "$POSTGRES_USER" --dbname "$POSTGRES_DB" <<-EOSQL
-    DO \\$\\$
-    BEGIN
-        IF NOT EXISTS (SELECT FROM pg_roles WHERE rolname = '${userName}') THEN
-            CREATE USER ${userName} WITH PASSWORD '$${envVar}';
-        ELSE
-            ALTER USER ${userName} WITH PASSWORD '$${envVar}';
-        END IF;
-    END
-    \\$\\$;
-    CREATE SCHEMA IF NOT EXISTS ${schemaName} AUTHORIZATION ${userName};
-    ALTER USER ${userName} SET search_path TO ${schemaName};
-    GRANT USAGE ON SCHEMA ${schemaName} TO ${userName};
-    GRANT ALL ON ALL TABLES IN SCHEMA ${schemaName} TO ${userName};
-    GRANT ALL ON ALL SEQUENCES IN SCHEMA ${schemaName} TO ${userName};
-    ALTER DEFAULT PRIVILEGES IN SCHEMA ${schemaName} GRANT ALL ON TABLES TO ${userName};
-    ALTER DEFAULT PRIVILEGES IN SCHEMA ${schemaName} GRANT ALL ON SEQUENCES TO ${userName};
-EOSQL
-`;
-	});
-
-	// Always add pgboss user and schema.
-	// pgboss reuses the same database with a dedicated user/schema,
-	// so subscribers work out of the box without explicit events config.
-	const pgbossBlock = `
-# Create pgboss user with dedicated schema - idempotent
-echo "Creating pgboss user and schema..."
-psql -v ON_ERROR_STOP=1 --username "$POSTGRES_USER" --dbname "$POSTGRES_DB" <<-EOSQL
-    DO \\$\\$
-    BEGIN
-        IF NOT EXISTS (SELECT FROM pg_roles WHERE rolname = 'pgboss') THEN
-            CREATE USER pgboss WITH PASSWORD '$PGBOSS_DB_PASSWORD';
-        ELSE
-            ALTER USER pgboss WITH PASSWORD '$PGBOSS_DB_PASSWORD';
-        END IF;
-    END
-    \\$\\$;
-    CREATE SCHEMA IF NOT EXISTS pgboss AUTHORIZATION pgboss;
-    ALTER USER pgboss SET search_path TO pgboss;
-    GRANT USAGE ON SCHEMA pgboss TO pgboss;
-    GRANT ALL ON ALL TABLES IN SCHEMA pgboss TO pgboss;
-    GRANT ALL ON ALL SEQUENCES IN SCHEMA pgboss TO pgboss;
-    ALTER DEFAULT PRIVILEGES IN SCHEMA pgboss GRANT ALL ON TABLES TO pgboss;
-    ALTER DEFAULT PRIVILEGES IN SCHEMA pgboss GRANT ALL ON SEQUENCES TO pgboss;
-EOSQL
-`;
-
-	// Add extensions
-	const extensions = `
-# Create extensions
-echo "Creating extensions..."
-psql -v ON_ERROR_STOP=1 --username "$POSTGRES_USER" --dbname "$POSTGRES_DB" <<-EOSQL
-    CREATE EXTENSION IF NOT EXISTS pg_trgm;
-    CREATE EXTENSION IF NOT EXISTS citext;
-EOSQL
-`;
-
-	return `#!/bin/bash
-set -e
-
-# Auto-generated PostgreSQL init script (idempotent - safe to re-run)
-# Creates per-app users with separate schemas in a single database
-# - api: uses public schema
-# - auth: uses auth schema (search_path=auth)
-# - pgboss: uses pgboss schema for event processing
-${extensions}
-${userCreations.join('\n')}${pgbossBlock}
-echo "Database initialization complete!"
-`;
-}

package/src/init/generators/env.ts

@@ -1,62 +0,0 @@
-import type {
-	GeneratedFile,
-	TemplateConfig,
-	TemplateOptions,
-} from '../templates/index.js';
-
-/**
- * Generate environment-related files (.gitignore only).
- * Note: .env files are no longer generated. Use `gkm secrets:init` to initialize
- * encrypted secrets stored in `.gkm/secrets/{stage}.json` with keys stored at
- * `~/.gkm/{project-name}/{stage}.key`.
- */
-export function generateEnvFiles(
-	options: TemplateOptions,
-	_template: TemplateConfig,
-): GeneratedFile[] {
-	const files: GeneratedFile[] = [];
-
-	// Only add .gitignore for non-monorepo (monorepo has it at root)
-	if (!options.monorepo) {
-		const gitignore = `# Dependencies
-node_modules/
-
-# Build output
-dist/
-.gkm/
-
-# Environment (legacy - use gkm secrets instead)
-.env
-.env.local
-.env.*.local
-
-# IDE
-.idea/
-.vscode/
-*.swp
-*.swo
-
-# OS
-.DS_Store
-Thumbs.db
-
-# Logs
-*.log
-npm-debug.log*
-yarn-debug.log*
-pnpm-debug.log*
-
-# Test coverage
-coverage/
-
-# TypeScript cache
-*.tsbuildinfo
-`;
-		files.push({
-			path: '.gitignore',
-			content: gitignore,
-		});
-	}
-
-	return files;
-}

package/src/init/generators/index.ts

@@ -1,6 +0,0 @@
-export { generateAuthAppFiles } from './auth.js';
-export { generateConfigFiles } from './config.js';
-export { generateEnvFiles } from './env.js';
-export { generatePackageJson } from './package.js';
-export { generateSourceFiles } from './source.js';
-export { generateTestFiles } from './test.js';