@mesh-tech/mesh-cli 0.1.0 → 0.12.0

package/fragments/base/index.ts.hbs

@@ -0,0 +1,107 @@
+/**
+ * {{titleCase name}} — Pulumi app definition
+ *
+ * Pattern: getConfig → AppEnvironment → primitives → services → register
+ */
+
+import * as pulumi from "@pulumi/pulumi";
+import * as path from "node:path";
+import { fileURLToPath } from "node:url";
+import { mesh } from "@mesh-tech/app-kit";
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const { tenant, platform, stack, deploy } = mesh.apps.getConfig(pulumi);
+{{#if temporal}}
+
+const TASK_QUEUE = "{{name}}";
+{{/if}}
+
+// =============================================================================
+// Environment
+// =============================================================================
+
+const env = new mesh.apps.AppEnvironment("env", {
+  tenant,
+  platform,
+  stack,
+  deploy,
+  appName: "{{name}}",
+  namespace: true,
+  rootDir: __dirname,
+{{#if temporal}}
+  temporal: {
+    codecServer: {
+      ingressSubdomain: "codec-{{name}}",
+    },
+  },
+{{/if}}
+});
+
+// =============================================================================
+// Primitives
+// =============================================================================
+{{#if database}}
+
+const db = new mesh.apps.Database("db", { env });
+{{/if}}
+{{#if bucket}}
+
+const uploads = new mesh.apps.Bucket("uploads", {
+  env,
+  forceDestroy: stack !== "prod",
+});
+{{/if}}
+
+// =============================================================================
+// Services
+// =============================================================================
+{{#if service}}
+
+const api = new mesh.apps.Service("api", {
+  env,
+  title: "{{titleCase name}} API",
+  description: "HTTP API for {{titleCase name}}",
+  runtime: "node",
+  src: "./api",
+  port: 3000,
+  link: [
+{{#if database}}
+    db.link({ environmentPrefix: "DATABASE" }),
+{{/if}}
+{{#if bucket}}
+    uploads.link({ environmentPrefix: "UPLOADS", access: "readWrite" }),
+{{/if}}
+{{#if temporal}}
+    env.temporal!.link({ environmentPrefix: "TEMPORAL", taskQueue: TASK_QUEUE }),
+{{/if}}
+  ],
+  ingress: env.buildIngress({
+    subdomain: "{{name}}",
+    healthCheckPath: "/health",
+  }),
+  healthCheck: "/health",
+  replicas: deploy ? 2 : 1,
+  resources: { cpu: "100m", memory: "128Mi" },
+});
+{{/if}}
+{{#if temporal}}
+
+const worker = new mesh.apps.TemporalWorker("worker", {
+  env,
+  title: "{{titleCase name}} Worker",
+  description: "Temporal workflow worker for {{titleCase name}}",
+  runtime: "node",
+  src: "./worker",
+  taskQueue: TASK_QUEUE,
+  replicas: 1,
+  resources: { cpu: "100m", memory: "256Mi" },
+});
+{{/if}}
+
+// =============================================================================
+// Outputs
+// =============================================================================
+
+export const app = env.register({
+  description: "{{titleCase name}}",
+});

package/fragments/base/package.json.hbs

@@ -0,0 +1,22 @@
+{
+  "name": "@{{tenant}}/{{name}}",
+  "version": "0.0.1",
+  "private": true,
+  "type": "module",
+  "main": "index.ts",
+  "scripts": {
+    "typecheck": "tsc --noEmit"
+  },
+  "dependencies": {
+    "@mesh-tech/app-kit": "{{#if workspaceDeps}}workspace:*{{else}}^0.1.0{{/if}}",
+    "@mesh-tech/infra-components": "{{#if workspaceDeps}}workspace:*{{else}}^0.1.0{{/if}}",
+    "@pulumi/aws": "6.66.2",
+    "@pulumi/kubernetes": "4.24.1",
+    "@pulumi/pulumi": "3.214.1"
+  },
+  "devDependencies": {
+    "@types/node": "catalog:",
+    "tsx": "catalog:",
+    "typescript": "catalog:"
+  }
+}

package/{templates/api-web-db/api → fragments/base}/tsconfig.json

@@ -3,11 +3,10 @@
     "target": "ES2022",
     "module": "ESNext",
     "moduleResolution": "bundler",
-    "esModuleInterop": true,
     "strict": true,
+    "esModuleInterop": true,
     "skipLibCheck": true,
-    "outDir": "./dist",
-    "rootDir": "./src"
+    "outDir": "dist"
   },
-  "include": ["src/**/*"]
+  "include": ["index.ts"]
 }

package/fragments/bucket/api/src/storage.ts.hbs

@@ -0,0 +1,81 @@
+/**
+ * S3 storage helpers for {{titleCase name}}
+ *
+ * Environment variables (injected by mesh link()):
+ * - UPLOADS_BUCKET: S3 bucket name
+ * - UPLOADS_REGION: AWS region
+ */
+
+import {
+  S3Client,
+  PutObjectCommand,
+  GetObjectCommand,
+  DeleteObjectCommand,
+  ListObjectsV2Command,
+} from "@aws-sdk/client-s3";
+
+if (!process.env.UPLOADS_BUCKET) {
+  throw new Error("UPLOADS_BUCKET environment variable is required");
+}
+const BUCKET = process.env.UPLOADS_BUCKET;
+const REGION = process.env.UPLOADS_REGION ?? "us-east-2";
+
+const s3 = new S3Client({ region: REGION });
+
+/**
+ * Upload a file to S3
+ */
+export async function uploadFile(
+  key: string,
+  body: Buffer | string,
+  contentType?: string
+): Promise<{ key: string; bucket: string }> {
+  await s3.send(
+    new PutObjectCommand({
+      Bucket: BUCKET,
+      Key: key,
+      Body: body,
+      ContentType: contentType,
+    })
+  );
+  return { key, bucket: BUCKET };
+}
+
+/**
+ * Download a file from S3
+ */
+export async function downloadFile(key: string): Promise<Buffer> {
+  const response = await s3.send(
+    new GetObjectCommand({ Bucket: BUCKET, Key: key })
+  );
+  const chunks: Uint8Array[] = [];
+  for await (const chunk of response.Body as AsyncIterable<Uint8Array>) {
+    chunks.push(chunk);
+  }
+  return Buffer.concat(chunks);
+}
+
+/**
+ * Delete a file from S3
+ */
+export async function deleteFile(key: string): Promise<void> {
+  await s3.send(
+    new DeleteObjectCommand({ Bucket: BUCKET, Key: key })
+  );
+}
+
+/**
+ * List files in a prefix
+ */
+export async function listFiles(
+  prefix: string
+): Promise<{ key: string; size: number; lastModified: Date }[]> {
+  const response = await s3.send(
+    new ListObjectsV2Command({ Bucket: BUCKET, Prefix: prefix })
+  );
+  return (response.Contents ?? []).map((obj) => ({
+    key: obj.Key!,
+    size: obj.Size!,
+    lastModified: obj.LastModified!,
+  }));
+}

package/fragments/database/api/src/db.ts.hbs

@@ -0,0 +1,23 @@
+/**
+ * Database connection helper
+ *
+ * Uses Prisma with the pg driver adapter for PostgreSQL.
+ * DATABASE_URL is injected by mesh link().
+ */
+
+import { PrismaClient } from "@prisma/client";
+import { Pool } from "pg";
+import { PrismaPg } from "@prisma/adapter-pg";
+
+const pool = new Pool({ connectionString: process.env.DATABASE_URL });
+const adapter = new PrismaPg(pool);
+
+export const db = new PrismaClient({ adapter });
+
+/**
+ * Get the shared Prisma client instance.
+ * Use this in route handlers and activities.
+ */
+export function getDb(): PrismaClient {
+  return db;
+}

package/fragments/database/prisma/schema.prisma.hbs

@@ -0,0 +1,18 @@
+generator client {
+  provider = "prisma-client-js"
+}
+
+datasource db {
+  provider = "postgresql"
+  url      = env("DATABASE_URL")
+}
+
+// Add your models here
+// Example:
+// model User {
+//   id        String   @id @default(cuid())
+//   email     String   @unique
+//   name      String?
+//   createdAt DateTime @default(now())
+//   updatedAt DateTime @updatedAt
+// }

package/{templates/api-web-db → fragments/service}/api/.dockerignore

@@ -1,2 +1,4 @@
 node_modules
 dist
+*.md
+.git

package/fragments/service/api/package.json.hbs

@@ -0,0 +1,40 @@
+{
+  "name": "@{{tenant}}/{{name}}-api",
+  "version": "0.0.1",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "dev": "tsx watch src/index.ts",
+    "start": "node dist/index.js",
+    "build": "esm-bundle src/index.ts --outfile dist/index.js"
+  },
+  "dependencies": {
+{{#if bucket}}
+    "@aws-sdk/client-s3": "^3.700.0",
+{{/if}}
+    "@hono/node-server": "^1.13.0",
+{{#if temporal}}
+    "@mesh-tech/app-kit": "{{#if workspaceDeps}}workspace:*{{else}}^0.1.0{{/if}}",
+{{/if}}
+{{#if database}}
+    "@prisma/adapter-pg": "^6.0.0",
+    "@prisma/client": "^6.0.0",
+{{/if}}
+{{#if temporal}}
+    "@temporalio/client": "^1.11.7",
+    "@temporalio/common": "^1.11.7",
+{{/if}}
+    "hono": "^4.6.0"{{#if database}},
+    "pg": "^8.13.0"{{/if}}
+  },
+  "devDependencies": {
+    "@mesh-tech/esm-bundle": "{{#if workspaceDeps}}workspace:*{{else}}latest{{/if}}",
+{{#if database}}
+    "@types/pg": "^8.11.0",
+    "prisma": "^6.0.0",
+{{/if}}
+    "@types/node": "^22.10.2",
+    "tsx": "^4.0.0",
+    "typescript": "^5.0.0"
+  }
+}

package/fragments/service/api/src/index.ts.hbs

@@ -0,0 +1,58 @@
+/**
+ * {{titleCase name}} API
+ *
+ * Environment variables injected by mesh link():
+ * - PORT: Server port (default: 3000)
+{{#if database}}
+ * - DATABASE_URL: PostgreSQL connection string
+{{/if}}
+{{#if temporal}}
+ * - TEMPORAL_ADDRESS, TEMPORAL_NAMESPACE, TEMPORAL_TASK_QUEUE
+{{/if}}
+{{#if bucket}}
+ * - UPLOADS_BUCKET, UPLOADS_REGION
+{{/if}}
+ */
+
+import { Hono } from "hono";
+import { serve } from "@hono/node-server";
+{{#if temporal}}
+import { createTemporalClient } from "@mesh-tech/app-kit/temporal-client";
+{{/if}}
+{{#if database}}
+import { getDb } from "./db.js";
+{{/if}}
+
+const PORT = parseInt(process.env.PORT ?? "3000", 10);
+const app = new Hono();
+
+{{#if temporal}}
+const { withClient } = await createTemporalClient();
+{{/if}}
+
+// Health check
+app.get("/health", (c) => c.json({ status: "ok" }));
+
+// Hello endpoint
+app.get("/", (c) => c.json({ message: "{{titleCase name}} API" }));
+
+{{#if temporal}}
+// Start a workflow
+app.post("/workflow", async (c) => {
+  const body = await c.req.json<{ name: string }>();
+  const result = await withClient(async (client) => {
+    const handle = await client.workflow.start("greetingWorkflow", {
+      taskQueue: process.env.TEMPORAL_TASK_QUEUE ?? "{{name}}",
+      workflowId: `greeting-${Date.now()}`,
+      args: [body.name ?? "world"],
+    });
+    return handle.result();
+  });
+  return c.json({ result });
+});
+{{/if}}
+
+// Start server
+serve({ fetch: app.fetch, port: PORT, hostname: "0.0.0.0" }, (info) => {
+  console.log(`[API] {{titleCase name}} listening on port ${info.port}`);
+});

package/{templates/api-web-db → fragments/service/api}/tsconfig.json

@@ -3,9 +3,11 @@
     "target": "ES2022",
     "module": "ESNext",
     "moduleResolution": "bundler",
-    "esModuleInterop": true,
     "strict": true,
-    "skipLibCheck": true
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "outDir": "dist",
+    "rootDir": "src"
   },
-  "include": ["sst.config.ts"]
+  "include": ["src"]
 }

package/fragments/temporal/worker/.dockerignore

@@ -0,0 +1,4 @@
+node_modules
+dist
+*.md
+.git

package/fragments/temporal/worker/Dockerfile

@@ -0,0 +1,15 @@
+FROM node:20-alpine AS builder
+WORKDIR /app
+COPY package.json pnpm-lock.yaml* ./
+RUN corepack enable && pnpm install --frozen-lockfile
+COPY . .
+RUN pnpm build
+
+FROM node:20-alpine
+RUN addgroup -S app && adduser -S app -G app
+WORKDIR /app
+COPY --from=builder /app/package.json /app/pnpm-lock.yaml* ./
+RUN corepack enable && pnpm install --frozen-lockfile --prod
+COPY --from=builder /app/dist ./dist
+USER app
+CMD ["node", "dist/worker.js"]

package/{templates/temporal-api-worker → fragments/temporal}/worker/package.json.hbs

@@ -6,10 +6,10 @@
   "scripts": {
     "dev": "tsx watch src/worker.ts",
     "start": "node dist/worker.js",
-    "build": "tsc && npm run bundle:workflows",
-    "bundle:workflows": "tsx src/bundle-workflows.ts"
+    "build": "esm-bundle src/worker.ts --outfile dist/worker.js --workflows src/workflows.ts --external '@temporalio/*'"
   },
   "dependencies": {
+    "@mesh-tech/app-kit": "0.0.10",
     "@temporalio/activity": "^1.11.7",
     "@temporalio/client": "^1.11.7",
     "@temporalio/common": "^1.11.7",
@@ -18,6 +18,7 @@
     "@temporalio/workflow": "^1.11.7"
   },
   "devDependencies": {
+    "@mesh-tech/esm-bundle": "{{#if workspaceDeps}}workspace:*{{else}}latest{{/if}}",
     "@types/node": "^20.0.0",
     "tsx": "^4.0.0",
     "typescript": "^5.0.0"

package/fragments/temporal/worker/src/activities.ts.hbs

@@ -0,0 +1,14 @@
+/**
+ * {{titleCase name}} Activities
+ *
+ * Activities handle non-deterministic operations:
+ * API calls, database queries, external services, etc.
+ */
+
+/**
+ * Generate a greeting message
+ */
+export async function greet(name: string): Promise<string> {
+  console.log(`[Activity] Generating greeting for ${name}`);
+  return `Hello, ${name}!`;
+}

package/fragments/temporal/worker/src/worker.ts.hbs

@@ -0,0 +1,27 @@
+/**
+ * {{titleCase name}} Temporal Worker
+ *
+ * Uses @mesh-tech/app-kit factories for authenticated connections,
+ * encryption codec, and OpenTelemetry instrumentation.
+ */
+
+import { createTemporalWorker, resolveWorkflows } from "@mesh-tech/app-kit/temporal";
+import * as activities from "./activities.js";
+
+async function run() {
+  const { worker, cleanup } = await createTemporalWorker({
+    activities,
+    ...await resolveWorkflows(import.meta.url),
+  });
+
+  try {
+    await worker.run();
+  } finally {
+    cleanup();
+  }
+}
+
+run().catch((err) => {
+  console.error("[Worker] Fatal error:", err);
+  process.exit(1);
+});

package/fragments/temporal/worker/src/workflows.ts.hbs

@@ -0,0 +1,24 @@
+/**
+ * {{titleCase name}} Workflows
+ *
+ * Rules for workflows:
+ * - Must be deterministic (same inputs = same outputs)
+ * - Cannot use Date.now(), Math.random(), or other non-deterministic APIs
+ * - Use sleep() instead of setTimeout()
+ * - Use proxyActivities() to call activities
+ */
+
+import { proxyActivities, sleep } from "@temporalio/workflow";
+import type * as activities from "./activities.js";
+
+const { greet } = proxyActivities<typeof activities>({
+  startToCloseTimeout: "30 seconds",
+  retry: { maximumAttempts: 3 },
+});
+
+/**
+ * Simple greeting workflow
+ */
+export async function greetingWorkflow(name: string): Promise<string> {
+  return await greet(name);
+}

package/fragments/temporal/worker/tsconfig.json

@@ -0,0 +1,13 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "ESNext",
+    "moduleResolution": "bundler",
+    "strict": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "outDir": "dist",
+    "rootDir": "src"
+  },
+  "include": ["src"]
+}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@mesh-tech/mesh-cli",
-  "version": "0.1.0",
-  "description": "CLI for Mesh platform development — auth, deploy, registry, tunnels, and more",
+  "version": "0.12.0",
+  "description": "CLI for Mesh platform development utilities",
   "type": "module",
   "license": "UNLICENSED",
   "repository": {
@@ -13,38 +13,52 @@
     "mesh": "./dist/bin/mesh.js"
   },
   "files": [
+    "bin/mesh.mjs",
     "dist",
-    "templates"
+    "templates",
+    "fragments",
+    "stack",
+    ".agents",
+    "skills",
+    "assets"
+  ],
+  "keywords": [
+    "tanstack-intent"
   ],
-  "publishConfig": {
-    "access": "public",
-    "registry": "https://registry.npmjs.org"
-  },
-  "scripts": {
-    "build": "tsc",
-    "dev": "tsc --watch",
-    "typecheck": "tsc --noEmit",
-    "prepublishOnly": "tsc"
-  },
   "exports": {
     ".": {
       "types": "./dist/src/index.d.ts",
       "default": "./dist/src/index.js"
-    }
+    },
+    "./package.json": "./package.json"
   },
   "devDependencies": {
-    "@types/node": "^20.0.0"
+    "@mesh-tech/tsconfig": "1.13.0",
+    "@mesh-tech/workflow-viz": "0.2.1",
+    "@tanstack/intent": "^0.3.6",
+    "@types/node": "^20.0.0",
+    "tsx": "^4.20.4"
   },
   "dependencies": {
+    "@aws-sdk/client-route-53": "^3.700.0",
     "@aws-sdk/client-secrets-manager": "^3.700.0",
     "@aws-sdk/client-ssm": "^3.700.0",
-    "@inquirer/input": "^5.0.8",
-    "@inquirer/password": "^5.0.8",
+    "@aws-sdk/client-sts": "^3.700.0",
+    "@inquirer/checkbox": "^4.2.0",
+    "@inquirer/input": "^4.2.1",
+    "@inquirer/password": "^4.0.17",
+    "@inquirer/select": "^4.3.1",
     "chalk": "^5.3.0",
     "commander": "^12.1.0",
-    "handlebars": "^4.7.8"
+    "handlebars": "^4.7.8",
+    "yaml": "^2.8.1",
+    "zod": "^4.2.1"
+  },
+  "optionalDependencies": {
+    "@aws-sdk/client-s3": "^3.864.0",
+    "@temporalio/client": "^1.17.0",
+    "@temporalio/common": "^1.17.0"
   },
-  "engines": {
-    "node": ">=20.0.0"
-  }
+  "main": "./dist/src/index.js",
+  "types": "./dist/src/index.d.ts"
 }