@mesh-tech/mesh-cli 0.1.0

package/dist/bin/mesh.d.ts

@@ -0,0 +1,16 @@
+#!/usr/bin/env node
+/**
+ * mesh - CLI for Mesh Lab development utilities
+ *
+ * Commands:
+ *   mesh create-app     Scaffold a new tenant application
+ *   mesh dev            Start DB tunnel and run sst dev
+ *   mesh tunnel         Start SSM tunnel to platform services
+ *   mesh db connect     Start DB tunnel for manual access
+ *   mesh db credentials Print database credentials
+ *   mesh db env         Export DATABASE_URL for shell
+ *   mesh db psql        Connect to database with psql
+ *   mesh secrets exec   Run command with secrets as env vars
+ */
+export {};
+//# sourceMappingURL=mesh.d.ts.map

package/dist/bin/mesh.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mesh.d.ts","sourceRoot":"","sources":["../../bin/mesh.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;GAYG"}

package/dist/bin/mesh.js

@@ -0,0 +1,40 @@
+#!/usr/bin/env node
+/**
+ * mesh - CLI for Mesh Lab development utilities
+ *
+ * Commands:
+ *   mesh create-app     Scaffold a new tenant application
+ *   mesh dev            Start DB tunnel and run sst dev
+ *   mesh tunnel         Start SSM tunnel to platform services
+ *   mesh db connect     Start DB tunnel for manual access
+ *   mesh db credentials Print database credentials
+ *   mesh db env         Export DATABASE_URL for shell
+ *   mesh db psql        Connect to database with psql
+ *   mesh secrets exec   Run command with secrets as env vars
+ */
+import { program } from "commander";
+import { registerDbCommands } from "../src/commands/db/index.js";
+import { registerDeployCommand } from "../src/commands/deploy.js";
+import { registerDevCommand } from "../src/commands/dev.js";
+import { registerCreateAppCommand } from "../src/commands/create-app.js";
+import { registerLoginCommand } from "../src/commands/login.js";
+import { registerRegistryCommands } from "../src/commands/registry.js";
+import { registerStackCommand } from "../src/commands/stack.js";
+import { registerTunnelCommands } from "../src/commands/tunnel/index.js";
+import { registerSecretsCommands } from "../src/commands/secrets/index.js";
+program
+    .name("mesh")
+    .description("CLI for Mesh Lab development utilities")
+    .version("0.0.1");
+// Register command groups
+registerLoginCommand(program);
+registerRegistryCommands(program);
+registerDbCommands(program);
+registerDeployCommand(program);
+registerDevCommand(program);
+registerCreateAppCommand(program);
+registerStackCommand(program);
+registerTunnelCommands(program);
+registerSecretsCommands(program);
+program.parse();
+//# sourceMappingURL=mesh.js.map

package/dist/bin/mesh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mesh.js","sourceRoot":"","sources":["../../bin/mesh.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAE3E,OAAO;KACJ,IAAI,CAAC,MAAM,CAAC;KACZ,WAAW,CAAC,wCAAwC,CAAC;KACrD,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,0BAA0B;AAC1B,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,wBAAwB,CAAC,OAAO,CAAC,CAAC;AAClC,kBAAkB,CAAC,OAAO,CAAC,CAAC;AAC5B,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,kBAAkB,CAAC,OAAO,CAAC,CAAC;AAC5B,wBAAwB,CAAC,OAAO,CAAC,CAAC;AAClC,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,uBAAuB,CAAC,OAAO,CAAC,CAAC;AAEjC,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/dist/src/commands/create-app.d.ts

@@ -0,0 +1,10 @@
+/**
+ * mesh create-app - Scaffold a new tenant application
+ *
+ * Creates a new application using one of the available templates:
+ * - api-web-db: API + Web + Database (default)
+ * - temporal-api-worker: Temporal Worker + API for workflows
+ */
+import { Command } from "commander";
+export declare function registerCreateAppCommand(program: Command): void;
+//# sourceMappingURL=create-app.d.ts.map

package/dist/src/commands/create-app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-app.d.ts","sourceRoot":"","sources":["../../../src/commands/create-app.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAyEpC,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAuI/D"}

package/dist/src/commands/create-app.js

@@ -0,0 +1,176 @@
+/**
+ * mesh create-app - Scaffold a new tenant application
+ *
+ * Creates a new application using one of the available templates:
+ * - api-web-db: API + Web + Database (default)
+ * - temporal-api-worker: Temporal Worker + API for workflows
+ */
+import * as fs from "fs";
+import * as path from "path";
+import { fileURLToPath } from "url";
+import Handlebars from "handlebars";
+import { logInfo, logSuccess, logError, logWarn } from "../utils/index.js";
+// Get package root (works from both src/ and dist/)
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+// Navigate from dist/src/commands/ or src/commands/ to package root
+const packageRoot = path.resolve(__dirname, "..", "..", "..");
+// Available templates
+const TEMPLATES = {
+    "api-web-db": "API + Web + Database application",
+    "temporal-api-worker": "Temporal Worker + API for workflow orchestration",
+};
+// Register Handlebars helpers
+Handlebars.registerHelper("titleCase", (str) => {
+    return str
+        .split("-")
+        .map((word) => word.charAt(0).toUpperCase() + word.slice(1))
+        .join(" ");
+});
+/**
+ * Recursively copy a directory, processing .hbs templates
+ */
+function copyTemplate(srcDir, destDir, context) {
+    const entries = fs.readdirSync(srcDir, { withFileTypes: true });
+    for (const entry of entries) {
+        const srcPath = path.join(srcDir, entry.name);
+        let destName = entry.name;
+        // Remove .hbs extension for template files
+        if (destName.endsWith(".hbs")) {
+            destName = destName.slice(0, -4);
+        }
+        const destPath = path.join(destDir, destName);
+        if (entry.isDirectory()) {
+            fs.mkdirSync(destPath, { recursive: true });
+            copyTemplate(srcPath, destPath, context);
+        }
+        else if (entry.name.endsWith(".hbs")) {
+            // Process Handlebars template
+            const templateContent = fs.readFileSync(srcPath, "utf-8");
+            const template = Handlebars.compile(templateContent);
+            const output = template(context);
+            fs.writeFileSync(destPath, output);
+        }
+        else {
+            // Copy file as-is
+            fs.copyFileSync(srcPath, destPath);
+        }
+    }
+}
+export function registerCreateAppCommand(program) {
+    program
+        .command("create-app")
+        .description("Scaffold a new tenant application")
+        .requiredOption("--tenant <tenant>", "Tenant name (e.g., acme)")
+        .requiredOption("--name <name>", "Application name (e.g., billing)")
+        .option("--template <template>", `Template to use: ${Object.keys(TEMPLATES).join(", ")}`, "api-web-db")
+        .option("--test", "Create in tests/tenants/ directory", false)
+        .action(async (options) => {
+        const { tenant, name, template, test } = options;
+        // Validate template
+        if (!Object.keys(TEMPLATES).includes(template)) {
+            logError(`Unknown template: ${template}`);
+            logInfo(`Available templates:`);
+            for (const [name, desc] of Object.entries(TEMPLATES)) {
+                console.log(`  ${name.padEnd(20)} - ${desc}`);
+            }
+            process.exit(1);
+        }
+        logInfo(`Creating app '${name}' for tenant '${tenant}'...`);
+        logInfo(`Template: ${template} (${TEMPLATES[template]})`);
+        if (test) {
+            logInfo("Creating in tests/ directory");
+        }
+        // Determine output directory
+        const cwd = process.cwd();
+        let appsDir;
+        // Base directory depends on --test flag
+        const baseDir = test ? "tests/tenants" : "tenants";
+        // Check common locations
+        const possiblePaths = [
+            path.join(cwd, baseDir, tenant, "apps"),
+            path.join(cwd, "..", tenant, "apps"),
+            path.join(cwd, "apps"),
+        ];
+        const foundPath = possiblePaths.find((p) => fs.existsSync(p));
+        if (foundPath) {
+            appsDir = foundPath;
+        }
+        else {
+            // Default to {baseDir}/{tenant}/apps relative to cwd
+            appsDir = path.join(cwd, baseDir, tenant, "apps");
+            if (!fs.existsSync(path.join(cwd, baseDir, tenant))) {
+                logError(`Tenant directory not found: ${baseDir}/${tenant}/`);
+                logInfo("Create the tenant directory first, or run from within it.");
+                process.exit(1);
+            }
+            if (!fs.existsSync(appsDir)) {
+                logInfo(`Creating apps directory: ${appsDir}`);
+                fs.mkdirSync(appsDir, { recursive: true });
+            }
+        }
+        const appDir = path.join(appsDir, name);
+        // Check if app already exists
+        if (fs.existsSync(appDir)) {
+            logError(`App directory already exists: ${appDir}`);
+            logInfo("Choose a different name or remove the existing directory.");
+            process.exit(1);
+        }
+        // Find template directory (at package root, not in dist)
+        const templateDir = path.join(packageRoot, "templates", template);
+        if (!fs.existsSync(templateDir)) {
+            logError(`Template not found: ${templateDir}`);
+            logInfo("Make sure the mesh-cli package is installed correctly.");
+            process.exit(1);
+        }
+        // Create context for templates
+        const context = {
+            name,
+            tenant,
+        };
+        // Create app directory
+        logInfo(`Creating app at ${appDir}...`);
+        fs.mkdirSync(appDir, { recursive: true });
+        // Copy and process templates
+        try {
+            copyTemplate(templateDir, appDir, context);
+            logSuccess(`Created app structure at ${appDir}`);
+        }
+        catch (error) {
+            logError(`Failed to create app: ${error}`);
+            // Clean up on failure
+            fs.rmSync(appDir, { recursive: true, force: true });
+            process.exit(1);
+        }
+        // Check if config.ts exists in parent apps directory
+        const configPath = path.join(appsDir, "config.ts");
+        if (!fs.existsSync(configPath)) {
+            logWarn(`No config.ts found at ${configPath}`);
+            logInfo("You may need to create a shared config.ts for tenant apps.");
+            logInfo("See existing apps for an example.");
+        }
+        // Print next steps
+        console.log("");
+        logSuccess("App created successfully!");
+        console.log("");
+        console.log("Next steps:");
+        console.log(`  cd ${appDir}`);
+        console.log("  pnpm install");
+        if (template === "temporal-api-worker") {
+            console.log("");
+            console.log("For development:");
+            console.log("  1. Start dev server: pnpm mesh dev");
+            console.log("     (auto-starts tunnel to Temporal + DB)");
+            console.log("  2. Start worker manually in SST dev UI");
+            console.log("  3. Open Temporal Web UI: http://localhost:8080");
+        }
+        else {
+            console.log("  pnpm mesh dev");
+        }
+        console.log("");
+        console.log("To deploy:");
+        console.log("  pnpm deploy --stage dev");
+        console.log("");
+    });
+}
+//# sourceMappingURL=create-app.js.map

package/dist/src/commands/create-app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-app.js","sourceRoot":"","sources":["../../../src/commands/create-app.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,UAAU,MAAM,YAAY,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAE3E,oDAAoD;AACpD,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AAC3C,oEAAoE;AACpE,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAE9D,sBAAsB;AACtB,MAAM,SAAS,GAAG;IAChB,YAAY,EAAE,kCAAkC;IAChD,qBAAqB,EAAE,kDAAkD;CACjE,CAAC;AAWX,8BAA8B;AAC9B,UAAU,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC,GAAW,EAAE,EAAE;IACrD,OAAO,GAAG;SACP,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SAC3D,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC,CAAC,CAAC;AAEH;;GAEG;AACH,SAAS,YAAY,CACnB,MAAc,EACd,OAAe,EACf,OAA+B;IAE/B,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAEhE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC;QAE1B,2CAA2C;QAC3C,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9B,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACnC,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAE9C,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5C,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC3C,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACvC,8BAA8B;YAC9B,MAAM,eAAe,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC1D,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;YACrD,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;YACjC,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACrC,CAAC;aAAM,CAAC;YACN,kBAAkB;YAClB,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,OAAgB;IACvD,OAAO;SACJ,OAAO,CAAC,YAAY,CAAC;SACrB,WAAW,CAAC,mCAAmC,CAAC;SAChD,cAAc,CAAC,mBAAmB,EAAE,0BAA0B,CAAC;SAC/D,cAAc,CAAC,eAAe,EAAE,kCAAkC,CAAC;SACnE,MAAM,CACL,uBAAuB,EACvB,oBAAoB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EACvD,YAAY,CACb;SACA,MAAM,CAAC,QAAQ,EAAE,oCAAoC,EAAE,KAAK,CAAC;SAC7D,MAAM,CAAC,KAAK,EAAE,OAAyB,EAAE,EAAE;QAC1C,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;QAEjD,oBAAoB;QACpB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/C,QAAQ,CAAC,qBAAqB,QAAQ,EAAE,CAAC,CAAC;YAC1C,OAAO,CAAC,sBAAsB,CAAC,CAAC;YAChC,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;gBACrD,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;YAChD,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,OAAO,CAAC,iBAAiB,IAAI,iBAAiB,MAAM,MAAM,CAAC,CAAC;QAC5D,OAAO,CAAC,aAAa,QAAQ,KAAK,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC1D,IAAI,IAAI,EAAE,CAAC;YACT,OAAO,CAAC,8BAA8B,CAAC,CAAC;QAC1C,CAAC;QAED,6BAA6B;QAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,IAAI,OAAe,CAAC;QAEpB,wCAAwC;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;QAEnD,yBAAyB;QACzB,MAAM,aAAa,GAAG;YACpB,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC;YACvC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC;YACpC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC;SACvB,CAAC;QAEF,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9D,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,GAAG,SAAS,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,qDAAqD;YACrD,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YAElD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;gBACpD,QAAQ,CAAC,+BAA+B,OAAO,IAAI,MAAM,GAAG,CAAC,CAAC;gBAC9D,OAAO,CAAC,2DAA2D,CAAC,CAAC;gBACrE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YAED,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5B,OAAO,CAAC,4BAA4B,OAAO,EAAE,CAAC,CAAC;gBAC/C,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAExC,8BAA8B;QAC9B,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,QAAQ,CAAC,iCAAiC,MAAM,EAAE,CAAC,CAAC;YACpD,OAAO,CAAC,2DAA2D,CAAC,CAAC;YACrE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,yDAAyD;QACzD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;QAElE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAChC,QAAQ,CAAC,uBAAuB,WAAW,EAAE,CAAC,CAAC;YAC/C,OAAO,CAAC,wDAAwD,CAAC,CAAC;YAClE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,+BAA+B;QAC/B,MAAM,OAAO,GAAG;YACd,IAAI;YACJ,MAAM;SACP,CAAC;QAEF,uBAAuB;QACvB,OAAO,CAAC,mBAAmB,MAAM,KAAK,CAAC,CAAC;QACxC,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE1C,6BAA6B;QAC7B,IAAI,CAAC;YACH,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;YAC3C,UAAU,CAAC,4BAA4B,MAAM,EAAE,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,yBAAyB,KAAK,EAAE,CAAC,CAAC;YAC3C,sBAAsB;YACtB,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,qDAAqD;QACrD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACnD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,yBAAyB,UAAU,EAAE,CAAC,CAAC;YAC/C,OAAO,CAAC,4DAA4D,CAAC,CAAC;YACtE,OAAO,CAAC,mCAAmC,CAAC,CAAC;QAC/C,CAAC;QAED,mBAAmB;QACnB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,UAAU,CAAC,2BAA2B,CAAC,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,QAAQ,MAAM,EAAE,CAAC,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAE9B,IAAI,QAAQ,KAAK,qBAAqB,EAAE,CAAC;YACvC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;YACpD,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;YAC1D,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;YACxD,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;QAClE,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QACjC,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/src/commands/db/connect.d.ts

@@ -0,0 +1,13 @@
+/**
+ * mesh db connect - Start DB tunnel for manual psql access
+ *
+ * Usage:
+ *   mesh db connect --tenant mesh --env dev-temporal
+ */
+interface ConnectOptions {
+    tenant?: string;
+    env?: string;
+}
+export declare function connectCommand(options: ConnectOptions): Promise<void>;
+export {};
+//# sourceMappingURL=connect.d.ts.map

package/dist/src/commands/db/connect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect.d.ts","sourceRoot":"","sources":["../../../../src/commands/db/connect.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAUH,UAAU,cAAc;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,wBAAsB,cAAc,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAmE3E"}

package/dist/src/commands/db/connect.js

@@ -0,0 +1,68 @@
+/**
+ * mesh db connect - Start DB tunnel for manual psql access
+ *
+ * Usage:
+ *   mesh db connect --tenant mesh --env dev-temporal
+ */
+import { spawn } from "child_process";
+import { detectContext, getPlatformBastionInfo, logInfo, logError, } from "../../utils/index.js";
+export async function connectCommand(options) {
+    // Resolve tenant/env - explicit or auto-detect
+    let tenant;
+    let platformEnv;
+    if (options.tenant && options.env) {
+        tenant = options.tenant;
+        platformEnv = options.env;
+        logInfo(`Explicit mode: Tenant=${tenant}, Env=${platformEnv}`);
+    }
+    else if (options.tenant || options.env) {
+        logError("Both --tenant and --env are required");
+        logInfo("Usage: mesh db connect --tenant mesh --env dev-temporal");
+        process.exit(1);
+    }
+    else {
+        const ctx = detectContext();
+        tenant = ctx.tenant;
+        platformEnv = ctx.platformEnv;
+        logInfo(`Auto-detected: Tenant=${tenant}, Env=${platformEnv}`);
+    }
+    const bastion = await getPlatformBastionInfo(tenant, platformEnv);
+    const rdsService = bastion.services.rds;
+    if (!rdsService) {
+        logError("RDS service not available in platform bastion");
+        process.exit(1);
+    }
+    console.log("");
+    logInfo(`Tunnel will forward localhost:5432 → ${rdsService.host}:${rdsService.port}`);
+    console.log("");
+    logInfo("In another terminal, connect with:");
+    console.log("  psql -h localhost -p 5432 -U <username> -d <database>");
+    console.log("");
+    logInfo("Or use: mesh db credentials --tenant ... --env ... --app ...");
+    console.log("");
+    logInfo("Press Ctrl+C to stop the tunnel");
+    console.log("");
+    // Start SSM tunnel
+    const tunnel = spawn("aws", [
+        "ssm",
+        "start-session",
+        "--target",
+        bastion.instanceId,
+        "--document-name",
+        "AWS-StartPortForwardingSessionToRemoteHost",
+        "--parameters",
+        JSON.stringify({
+            host: [rdsService.host],
+            portNumber: [String(rdsService.port)],
+            localPortNumber: ["5432"],
+        }),
+    ], { stdio: "inherit" });
+    tunnel.on("error", (err) => {
+        console.error("Failed to start tunnel:", err.message);
+        process.exit(1);
+    });
+    tunnel.on("exit", (code) => {
+        process.exit(code ?? 0);
+    });
+}
+//# sourceMappingURL=connect.js.map

package/dist/src/commands/db/connect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect.js","sourceRoot":"","sources":["../../../../src/commands/db/connect.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,EACL,aAAa,EACb,sBAAsB,EACtB,OAAO,EACP,QAAQ,GACT,MAAM,sBAAsB,CAAC;AAO9B,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAuB;IAC1D,+CAA+C;IAC/C,IAAI,MAAc,CAAC;IACnB,IAAI,WAAmB,CAAC;IAExB,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAClC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QACxB,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC;QAC1B,OAAO,CAAC,yBAAyB,MAAM,SAAS,WAAW,EAAE,CAAC,CAAC;IACjE,CAAC;SAAM,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QACzC,QAAQ,CAAC,sCAAsC,CAAC,CAAC;QACjD,OAAO,CAAC,yDAAyD,CAAC,CAAC;QACnE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QACpB,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;QAC9B,OAAO,CAAC,yBAAyB,MAAM,SAAS,WAAW,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAClE,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;IAExC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,QAAQ,CAAC,+CAA+C,CAAC,CAAC;QAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,wCAAwC,UAAU,CAAC,IAAI,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;IACtF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,oCAAoC,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,8DAA8D,CAAC,CAAC;IACxE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,iCAAiC,CAAC,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,mBAAmB;IACnB,MAAM,MAAM,GAAG,KAAK,CAClB,KAAK,EACL;QACE,KAAK;QACL,eAAe;QACf,UAAU;QACV,OAAO,CAAC,UAAU;QAClB,iBAAiB;QACjB,4CAA4C;QAC5C,cAAc;QACd,IAAI,CAAC,SAAS,CAAC;YACb,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;YACvB,UAAU,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACrC,eAAe,EAAE,CAAC,MAAM,CAAC;SAC1B,CAAC;KACH,EACD,EAAE,KAAK,EAAE,SAAS,EAAE,CACrB,CAAC;IAEF,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;QACzB,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QACtD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;QACzB,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/src/commands/db/credentials.d.ts

@@ -0,0 +1,16 @@
+/**
+ * mesh db credentials - Print database credentials
+ *
+ * Usage:
+ *   mesh db credentials --tenant mesh --env dev-temporal --app rdc --app-tenant encore --app-stage dev
+ */
+interface CredentialsOptions {
+    tenant?: string;
+    env?: string;
+    app?: string;
+    appTenant?: string;
+    appStage?: string;
+}
+export declare function credentialsCommand(options: CredentialsOptions): Promise<void>;
+export {};
+//# sourceMappingURL=credentials.d.ts.map

package/dist/src/commands/db/credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../../../src/commands/db/credentials.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AASH,UAAU,kBAAkB;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,IAAI,CAAC,CAkDf"}

package/dist/src/commands/db/credentials.js

@@ -0,0 +1,56 @@
+/**
+ * mesh db credentials - Print database credentials
+ *
+ * Usage:
+ *   mesh db credentials --tenant mesh --env dev-temporal --app rdc --app-tenant encore --app-stage dev
+ */
+import { detectContext, getDatabaseUrl, logInfo, logError, } from "../../utils/index.js";
+export async function credentialsCommand(options) {
+    // Resolve platform tenant/env
+    let platformTenant;
+    let platformEnv;
+    if (options.tenant && options.env) {
+        platformTenant = options.tenant;
+        platformEnv = options.env;
+        logInfo(`Platform: Tenant=${platformTenant}, Env=${platformEnv}`);
+    }
+    else if (options.tenant || options.env) {
+        logError("Both --tenant and --env are required");
+        logInfo("Usage: mesh db credentials --tenant mesh --env dev-temporal --app rdc --app-tenant encore --app-stage dev");
+        process.exit(1);
+    }
+    else {
+        const ctx = detectContext();
+        platformTenant = ctx.tenant;
+        platformEnv = ctx.platformEnv;
+        logInfo(`Auto-detected: Tenant=${platformTenant}, Env=${platformEnv}`);
+    }
+    // Resolve app credentials
+    const appTenant = options.appTenant ?? platformTenant;
+    const appStage = options.appStage ?? platformEnv;
+    const appName = options.app;
+    if (appName) {
+        logInfo(`App credentials: tenant=${appTenant}, stage=${appStage}, app=${appName}`);
+    }
+    // Get DATABASE_URL
+    const databaseUrl = await getDatabaseUrl(appTenant, appStage, { app: appName });
+    const parsed = new URL(databaseUrl);
+    console.log("");
+    console.log("Database Credentials:");
+    console.log(`  Host:     ${parsed.hostname}`);
+    console.log(`  Port:     ${parsed.port || 5432}`);
+    console.log(`  Database: ${parsed.pathname.slice(1)}`);
+    console.log(`  Username: ${parsed.username}`);
+    console.log(`  Password: ${decodeURIComponent(parsed.password)}`);
+    console.log("");
+    console.log("DATABASE_URL:");
+    console.log(`  ${databaseUrl}`);
+    console.log("");
+    console.log("For tunnel usage (localhost:5432):");
+    const tunnelUrl = new URL(databaseUrl);
+    tunnelUrl.hostname = "localhost";
+    tunnelUrl.port = "5432";
+    console.log(`  ${tunnelUrl.toString()}`);
+    console.log("");
+}
+//# sourceMappingURL=credentials.js.map

package/dist/src/commands/db/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../../../src/commands/db/credentials.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,aAAa,EACb,cAAc,EACd,OAAO,EACP,QAAQ,GACT,MAAM,sBAAsB,CAAC;AAU9B,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAA2B;IAE3B,8BAA8B;IAC9B,IAAI,cAAsB,CAAC;IAC3B,IAAI,WAAmB,CAAC;IAExB,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAClC,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC;QAChC,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC;QAC1B,OAAO,CAAC,oBAAoB,cAAc,SAAS,WAAW,EAAE,CAAC,CAAC;IACpE,CAAC;SAAM,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QACzC,QAAQ,CAAC,sCAAsC,CAAC,CAAC;QACjD,OAAO,CAAC,2GAA2G,CAAC,CAAC;QACrH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;QAC5B,cAAc,GAAG,GAAG,CAAC,MAAM,CAAC;QAC5B,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;QAC9B,OAAO,CAAC,yBAAyB,cAAc,SAAS,WAAW,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,0BAA0B;IAC1B,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,cAAc,CAAC;IACtD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,WAAW,CAAC;IACjD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC;IAE5B,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,CAAC,2BAA2B,SAAS,WAAW,QAAQ,SAAS,OAAO,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,mBAAmB;IACnB,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IAChF,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IAEpC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACrC,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CAAC,eAAe,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAClE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC7B,OAAO,CAAC,GAAG,CAAC,KAAK,WAAW,EAAE,CAAC,CAAC;IAChC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IACvC,SAAS,CAAC,QAAQ,GAAG,WAAW,CAAC;IACjC,SAAS,CAAC,IAAI,GAAG,MAAM,CAAC;IACxB,OAAO,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACzC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC"}

package/dist/src/commands/db/env.d.ts

@@ -0,0 +1,15 @@
+/**
+ * mesh db env - Export DATABASE_URL for shell
+ *
+ * Usage: eval $(mesh db env --tenant mesh --env dev-temporal --app rdc --app-tenant encore --app-stage dev)
+ */
+interface EnvOptions {
+    tenant?: string;
+    env?: string;
+    app?: string;
+    appTenant?: string;
+    appStage?: string;
+}
+export declare function envCommand(options: EnvOptions): Promise<void>;
+export {};
+//# sourceMappingURL=env.d.ts.map

package/dist/src/commands/db/env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../../../src/commands/db/env.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAUH,UAAU,UAAU;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CA6CnE"}

package/dist/src/commands/db/env.js

@@ -0,0 +1,50 @@
+/**
+ * mesh db env - Export DATABASE_URL for shell
+ *
+ * Usage: eval $(mesh db env --tenant mesh --env dev-temporal --app rdc --app-tenant encore --app-stage dev)
+ */
+import { detectContext, getDatabaseUrl, rewriteDatabaseUrl, logInfo, logError, } from "../../utils/index.js";
+export async function envCommand(options) {
+    // Resolve platform tenant/env
+    let platformTenant;
+    let platformEnv;
+    if (options.tenant && options.env) {
+        platformTenant = options.tenant;
+        platformEnv = options.env;
+        // Use stderr for info so stdout is clean for eval
+        console.error(`ℹ Platform: Tenant=${platformTenant}, Env=${platformEnv}`);
+    }
+    else if (options.tenant || options.env) {
+        logError("Both --tenant and --env are required");
+        logInfo("Usage: eval $(mesh db env --tenant mesh --env dev-temporal --app rdc --app-tenant encore --app-stage dev)");
+        process.exit(1);
+    }
+    else {
+        const ctx = detectContext();
+        platformTenant = ctx.tenant;
+        platformEnv = ctx.platformEnv;
+        console.error(`ℹ Auto-detected: Tenant=${platformTenant}, Env=${platformEnv}`);
+    }
+    // Resolve app credentials
+    const appTenant = options.appTenant ?? platformTenant;
+    const appStage = options.appStage ?? platformEnv;
+    const appName = options.app;
+    if (appName) {
+        console.error(`ℹ App credentials: tenant=${appTenant}, stage=${appStage}, app=${appName}`);
+    }
+    // Get DATABASE_URL and rewrite for tunnel
+    const rawUrl = await getDatabaseUrl(appTenant, appStage, { app: appName });
+    const tunnelUrl = rewriteDatabaseUrl(rawUrl, { endpoint: "localhost:5432" });
+    const parsed = new URL(tunnelUrl);
+    // Output export statements (to stdout for eval).
+    // WARNING: Contains plaintext credentials. Use only with:
+    //   eval "$(mesh db env ...)"
+    // Do NOT run bare — credentials will appear in terminal and shell history.
+    console.log(`export DATABASE_URL="${tunnelUrl}"`);
+    console.log('export DB_HOST="localhost"');
+    console.log('export DB_PORT="5432"');
+    console.log(`export DB_NAME="${parsed.pathname.slice(1)}"`);
+    console.log(`export DB_USERNAME="${parsed.username}"`);
+    console.log(`export DB_PASSWORD="${decodeURIComponent(parsed.password)}"`);
+}
+//# sourceMappingURL=env.js.map

package/dist/src/commands/db/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../../../src/commands/db/env.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,aAAa,EACb,cAAc,EACd,kBAAkB,EAClB,OAAO,EACP,QAAQ,GACT,MAAM,sBAAsB,CAAC;AAU9B,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAmB;IAClD,8BAA8B;IAC9B,IAAI,cAAsB,CAAC;IAC3B,IAAI,WAAmB,CAAC;IAExB,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAClC,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC;QAChC,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC;QAC1B,kDAAkD;QAClD,OAAO,CAAC,KAAK,CAAC,sBAAsB,cAAc,SAAS,WAAW,EAAE,CAAC,CAAC;IAC5E,CAAC;SAAM,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QACzC,QAAQ,CAAC,sCAAsC,CAAC,CAAC;QACjD,OAAO,CAAC,2GAA2G,CAAC,CAAC;QACrH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;QAC5B,cAAc,GAAG,GAAG,CAAC,MAAM,CAAC;QAC5B,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;QAC9B,OAAO,CAAC,KAAK,CAAC,2BAA2B,cAAc,SAAS,WAAW,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,0BAA0B;IAC1B,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,cAAc,CAAC;IACtD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,WAAW,CAAC;IACjD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC;IAE5B,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,CAAC,KAAK,CAAC,6BAA6B,SAAS,WAAW,QAAQ,SAAS,OAAO,EAAE,CAAC,CAAC;IAC7F,CAAC;IAED,0CAA0C;IAC1C,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3E,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IAElC,iDAAiD;IACjD,0DAA0D;IAC1D,8BAA8B;IAC9B,2EAA2E;IAC3E,OAAO,CAAC,GAAG,CAAC,wBAAwB,SAAS,GAAG,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;IAC1C,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACrC,OAAO,CAAC,GAAG,CAAC,mBAAmB,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC5D,OAAO,CAAC,GAAG,CAAC,uBAAuB,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,uBAAuB,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAC7E,CAAC"}

package/dist/src/commands/db/exec.d.ts

@@ -0,0 +1,54 @@
+/**
+ * mesh db exec - Run any command with database connection
+ *
+ * Three modes of operation:
+ *
+ * 1. Explicit mode (recommended for ad-hoc use):
+ *    mesh db exec --tenant=<tenant> --env=<env> [--ssl=require] -- <command>
+ *    - Uses explicit tenant/env to find platform bastion
+ *    - Starts tunnel if needed
+ *    - Similar to: mesh tunnel --tenant mesh --env dev
+ *
+ * 2. Direct mode (for sst dev integration):
+ *    mesh db exec --secret=<arn> [--ssl=require] -- <command>
+ *    - Uses secret ARN directly, expects tunnel already running
+ *    - Ideal for sst.config.ts devCommand
+ *
+ * 3. Discovery mode (legacy, auto-detection):
+ *    mesh db exec [--stage=<stage>] -- <command>
+ *    - Auto-discovers tenant/env from filesystem and config files
+ *    - Can be fragile if project structure doesn't match expected patterns
+ *    - Starts tunnel if needed
+ *
+ * Examples:
+ *   # Explicit mode (recommended)
+ *   mesh db exec --tenant mesh --env dev --ssl=require -- npx prisma db push
+ *   mesh db exec -t mesh -e dev -- npx prisma migrate dev
+ *
+ *   # Direct mode (in sst.config.ts)
+ *   mesh db exec --secret=arn:aws:secretsmanager:... --ssl=require -- pnpm dev
+ *
+ *   # Discovery mode (legacy)
+ *   mesh db exec -- npx prisma db push
+ *   mesh db exec --stage=dev -- npx prisma migrate dev
+ */
+export interface ExecOptions {
+    /** Platform tenant for bastion lookup */
+    tenant?: string;
+    /** Platform environment for bastion lookup */
+    env?: string;
+    /** App name for credentials path */
+    app?: string;
+    /** Tenant for app credentials (if different from platform tenant) */
+    appTenant?: string;
+    /** Stage for app credentials */
+    appStage?: string;
+    /** Secret ARN for direct mode */
+    secret?: string;
+    /** SSL mode */
+    ssl?: string;
+    /** Local tunnel port */
+    port?: string;
+}
+export declare function execCommand(commandArgs: string[], options: ExecOptions): Promise<void>;
+//# sourceMappingURL=exec.d.ts.map

package/dist/src/commands/db/exec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exec.d.ts","sourceRoot":"","sources":["../../../../src/commands/db/exec.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAmEH,MAAM,WAAW,WAAW;IAC1B,yCAAyC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8CAA8C;IAC9C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,oCAAoC;IACpC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,qEAAqE;IACrE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gCAAgC;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iCAAiC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,wBAAwB;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAgGD,wBAAsB,WAAW,CAC/B,WAAW,EAAE,MAAM,EAAE,EACrB,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,IAAI,CAAC,CA+Mf"}