@mesh-tech/mesh-cli 0.1.0 → 0.12.0

package/templates/api-web-db/api/src/index.ts.hbs

@@ -1,123 +0,0 @@
-import { serve } from "@hono/node-server";
-import { Hono } from "hono";
-import { cors } from "hono/cors";
-import { logger } from "hono/logger";
-import { Pool } from "pg";
-import {
-  SecretsManagerClient,
-  GetSecretValueCommand,
-} from "@aws-sdk/client-secrets-manager";
-
-const app = new Hono();
-
-// Middleware
-app.use("*", logger());
-app.use("*", cors());
-
-// =============================================================================
-// Database Connection
-// =============================================================================
-
-let dbPool: Pool | null = null;
-
-async function getDbPassword(): Promise<string> {
-  const secretArn = process.env.DB_SECRET_ARN;
-  if (!secretArn) {
-    throw new Error("DB_SECRET_ARN not configured");
-  }
-
-  const client = new SecretsManagerClient({ region: "us-east-1" });
-  const response = await client.send(
-    new GetSecretValueCommand({ SecretId: secretArn })
-  );
-
-  if (!response.SecretString) {
-    throw new Error("No secret value found");
-  }
-
-  const secret = JSON.parse(response.SecretString);
-  return secret.password;
-}
-
-async function getDbPool(): Promise<Pool> {
-  if (dbPool) return dbPool;
-
-  const password = await getDbPassword();
-
-  dbPool = new Pool({
-    host: process.env.DB_HOST || "localhost",
-    port: parseInt(process.env.DB_PORT || "5432", 10),
-    database: process.env.DB_NAME || "postgres",
-    user: process.env.DB_USER || "postgres",
-    password,
-    ssl: { rejectUnauthorized: false },
-    max: 10,
-    idleTimeoutMillis: 30000,
-    connectionTimeoutMillis: 5000,
-  });
-
-  return dbPool;
-}
-
-// =============================================================================
-// Routes
-// =============================================================================
-
-// Root - API info
-app.get("/", (c) =>
-  c.json({
-    name: "{{name}}-api",
-    version: "1.0.0",
-    endpoints: ["/health", "/hello", "/db"],
-  })
-);
-
-// Health check (required for ALB)
-app.get("/health", (c) => c.json({ status: "ok" }));
-
-// Hello endpoint
-app.get("/hello", (c) => {
-  return c.json({
-    message: "Hello from {{name}} API!",
-    stage: process.env.STAGE || "unknown",
-    timestamp: new Date().toISOString(),
-  });
-});
-
-// Database endpoint
-app.get("/db", async (c) => {
-  try {
-    const pool = await getDbPool();
-    const result = await pool.query(
-      "SELECT version(), current_database(), current_user"
-    );
-    const row = result.rows[0];
-
-    return c.json({
-      status: "connected",
-      database: row.current_database,
-      user: row.current_user,
-      version: row.version,
-      timestamp: new Date().toISOString(),
-    });
-  } catch (error) {
-    return c.json(
-      {
-        status: "error",
-        message: error instanceof Error ? error.message : "Unknown error",
-      },
-      500
-    );
-  }
-});
-
-// =============================================================================
-// Start Server
-// =============================================================================
-
-const port = parseInt(process.env.PORT || "3001", 10);
-console.log(`API server starting on port ${port}...`);
-
-serve({ fetch: app.fetch, port });
-
-console.log(`API server running at http://localhost:${port}`);

package/templates/api-web-db/package.json.hbs

@@ -1,27 +0,0 @@
-{
-  "name": "{{name}}",
-  "private": true,
-  "type": "module",
-  "scripts": {
-    "typecheck": "tsc --noEmit",
-    "sst:patch": "patch-sst-pulumi .",
-    "dev": "pnpm run sst:patch && sst dev",
-    "deploy": "pnpm run sst:patch && sst deploy",
-    "deploy:dev": "pnpm run sst:patch && sst deploy --stage dev",
-    "deploy:prod": "pnpm run sst:patch && sst deploy --stage prod",
-    "remove": "sst remove"
-  },
-  "dependencies": {
-    "@mesh-tech/infra-components": "workspace:*",
-    "@pulumi/aws": "6.66.2",
-    "@pulumi/docker-build": "^0.0.15",
-    "@pulumi/eks": "4.2.0",
-    "@pulumi/kubernetes": "4.24.1",
-    "@pulumi/pulumi": "3.214.1",
-    "sst": "^3.3.61"
-  },
-  "devDependencies": {
-    "@aws-sdk/credential-providers": "^3.964.0",
-    "typescript": "^5.7.2"
-  }
-}

package/templates/api-web-db/sst.config.ts.hbs

@@ -1,151 +0,0 @@
-/// <reference path="./.sst/platform/config.d.ts" />
-
-export default $config({
-  app(input) {
-    return {
-      name: "{{name}}",
-      removal: input?.stage === "prod" ? "retain" : "remove",
-      protect: ["prod"].includes(input?.stage ?? ""),
-      home: "aws",
-      providers: {
-        aws: {
-          region: "us-east-1",
-        },
-      },
-    };
-  },
-  async run() {
-    // Dynamic imports (SST requirement for non-SST packages)
-    const { mesh } = await import("@mesh-tech/infra-components");
-    const { config, getPlatform } = await import("../config.js");
-
-    const stage = $app.stage;
-    const tenant = config.tenant;
-    const platform = getPlatform(stage);
-
-    // Create tenant environment (isolated per-app namespace)
-    // DevCommand enables unified dev tunnel (mesh tunnel dev) for DB access
-    const env = new mesh.apps.AppEnvironment("env", {
-      tenant,
-      platform,
-      stage,
-      appName: "{{name}}",
-      dev: $dev,
-      namespace: true,
-      DevCommand: sst.x.DevCommand,
-    });
-
-    // Create database
-    // Credentials are injected at runtime via envFromSecrets:
-    // - Dev mode: mesh db exec fetches from Secrets Manager
-    // - K8s mode: ExternalSecrets syncs to K8s Secret, envFrom injects
-    const db = new mesh.apps.Database("db", {
-      env,
-    });
-
-    // Prisma DevCommand for migrations and Studio
-    // Usage: npx sst shell --target Prisma -- npx prisma <command>
-    // Uses mesh db exec to load DATABASE_URL from secret (same as web/api)
-    new sst.x.DevCommand("Prisma", {
-      dev: {
-        title: "prisma",
-        command: $interpolate`pnpm exec mesh db exec --secret=${db.secretArn} --ssl=require -- npx prisma studio`,
-        directory: "./web",
-        autostart: false,
-      },
-    });
-
-    // ==========================================================================
-    // API Service (Hono)
-    // ==========================================================================
-    const api = new mesh.apps.Service(
-      "api",
-      {
-        dev: $dev,
-        tenant,
-        stage,
-        appName: "{{name}}",
-        namespace: env.namespace!,
-        rootDir: $cli.paths.root,
-        src: "./api",
-        port: 3001,
-        devCommand: ["pnpm", "dev"],
-        environment: {
-          APP_NAME: "api",
-          STAGE: stage,
-          NODE_ENV: $dev ? "development" : "production",
-        },
-        // Inject DB credentials via envFromSecrets (works in both dev and K8s mode)
-        // Dev: mesh db exec fetches from Secrets Manager at runtime
-        // K8s: ExternalSecret syncs to K8s Secret, envFrom injects
-        envFromSecrets: $dev ? [db.secretArn] : [db.k8sSecretName!],
-        ingress: env.buildIngress({
-          subdomain: "{{name}}-api",
-          healthCheckPath: "/health",
-        }),
-        waitForDns: true,
-        replicas: 1,
-        resources: {
-          cpu: $dev ? "50m" : "100m",
-          memory: "128Mi",
-        },
-      },
-      {
-        providers: env.providers,
-        parent: env,
-      },
-    );
-
-    // ==========================================================================
-    // Web Service (React Router v7)
-    // ==========================================================================
-    const web = new mesh.apps.Service(
-      "web",
-      {
-        dev: $dev,
-        tenant,
-        stage,
-        appName: "{{name}}",
-        namespace: env.namespace!,
-        rootDir: $cli.paths.root,
-        src: "./web",
-        port: 3000,
-        devCommand: ["pnpm", "dev"],
-        environment: {
-          APP_NAME: "web",
-          STAGE: stage,
-          NODE_ENV: $dev ? "development" : "production",
-          API_URL: api.serviceEndpoint ?? api.url,
-          PUBLIC_API_URL: api.url,
-        },
-        // Inject DB credentials via envFromSecrets (works in both dev and K8s mode)
-        // Dev: mesh db exec fetches from Secrets Manager at runtime
-        // K8s: ExternalSecret syncs to K8s Secret, envFrom injects
-        envFromSecrets: $dev ? [db.secretArn] : [db.k8sSecretName!],
-        ingress: env.buildIngress({
-          subdomain: "{{name}}",
-          healthCheckPath: "/",
-        }),
-        waitForDns: true,
-        replicas: 1,
-        resources: {
-          cpu: $dev ? "50m" : "200m",
-          memory: $dev ? "128Mi" : "256Mi",
-        },
-      },
-      {
-        providers: env.providers,
-        parent: env,
-        dependsOn: [api],
-      },
-    );
-
-    return {
-      namespace: env.namespace,
-      apiUrl: api.url,
-      webUrl: web.url,
-      databaseUrl: db.url,
-      databaseName: db.name,
-    };
-  },
-});

package/templates/api-web-db/web/.dockerignore

@@ -1,3 +0,0 @@
-node_modules
-build
-.react-router

package/templates/api-web-db/web/Dockerfile

@@ -1,17 +0,0 @@
-FROM node:22-alpine AS builder
-WORKDIR /app
-RUN corepack enable && corepack prepare pnpm@latest --activate
-COPY package.json pnpm-lock.yaml* ./
-RUN pnpm install
-COPY . .
-RUN pnpm build
-
-FROM node:22-alpine
-WORKDIR /app
-RUN corepack enable && corepack prepare pnpm@latest --activate
-COPY package.json pnpm-lock.yaml* ./
-RUN pnpm install --prod --frozen-lockfile || pnpm install --prod
-COPY --from=builder /app/build ./build
-ENV NODE_ENV=production PORT=3000
-EXPOSE 3000
-CMD ["pnpm", "start"]

package/templates/api-web-db/web/app/lib/db.server.ts

@@ -1,36 +0,0 @@
-/**
- * Database connection for server-side code (loaders/actions)
- *
- * Uses Prisma v7 adapter pattern with DATABASE_URL from environment.
- * - Dev mode: DATABASE_URL includes password (set by mesh db exec from SecretImport)
- * - K8s mode: DATABASE_URL comes from ExternalSecret via envFrom
- *
- * This pattern eliminates runtime Secrets Manager calls.
- */
-
-import { Pool } from "pg";
-import { PrismaClient } from "../../src/generated/prisma/client";
-import { PrismaPg } from "@prisma/adapter-pg";
-
-let prisma: PrismaClient | null = null;
-
-export function getDb(): PrismaClient {
-  if (!prisma) {
-    // Create pg Pool with SSL for RDS (required even through SSM tunnel)
-    const pool = new Pool({
-      connectionString: process.env.DATABASE_URL,
-      ssl: { rejectUnauthorized: false },
-    });
-    const adapter = new PrismaPg(pool);
-    prisma = new PrismaClient({ adapter });
-  }
-  return prisma;
-}
-
-// Cleanup function for graceful shutdown
-export async function closeDb(): Promise<void> {
-  if (prisma) {
-    await prisma.$disconnect();
-    prisma = null;
-  }
-}

package/templates/api-web-db/web/app/root.tsx

@@ -1,29 +0,0 @@
-import {
-  Links,
-  Meta,
-  Outlet,
-  Scripts,
-  ScrollRestoration,
-} from "react-router";
-
-export function Layout({ children }: { children: React.ReactNode }) {
-  return (
-    <html lang="en">
-      <head>
-        <meta charSet="utf-8" />
-        <meta name="viewport" content="width=device-width, initial-scale=1" />
-        <Meta />
-        <Links />
-      </head>
-      <body style={{ fontFamily: "system-ui, sans-serif", margin: 0 }}>
-        {children}
-        <ScrollRestoration />
-        <Scripts />
-      </body>
-    </html>
-  );
-}
-
-export default function App() {
-  return <Outlet />;
-}

package/templates/api-web-db/web/app/routes/home.tsx.hbs

@@ -1,114 +0,0 @@
-import type { Route } from "./+types/home";
-
-export function meta({}: Route.MetaArgs) {
-  return [
-    { title: "{{titleCase name}}" },
-    { name: "description", content: "{{titleCase name}} - Mesh App" },
-  ];
-}
-
-export async function loader({}: Route.LoaderArgs) {
-  const apiUrl = process.env.API_URL || "http://localhost:3001";
-
-  // Fetch API hello endpoint
-  let apiData = { message: "API unavailable", timestamp: null };
-  try {
-    const response = await fetch(`${apiUrl}/hello`);
-    apiData = await response.json();
-  } catch (error) {
-    console.error("API fetch error:", error);
-  }
-
-  // Fetch database status
-  let dbData = { status: "unknown", database: null, user: null, version: null };
-  try {
-    const response = await fetch(`${apiUrl}/db`);
-    dbData = await response.json();
-  } catch (error) {
-    console.error("DB fetch error:", error);
-    dbData = { status: "error", database: null, user: null, version: null };
-  }
-
-  return {
-    message: apiData.message,
-    timestamp: apiData.timestamp,
-    stage: process.env.STAGE || "unknown",
-    db: dbData,
-  };
-}
-
-export default function Home({ loaderData }: Route.ComponentProps) {
-  const { message, timestamp, stage, db } = loaderData;
-  const dbConnected = db?.status === "connected";
-
-  return (
-    <div style=\{{ padding: "2rem", maxWidth: "600px", margin: "0 auto" }}>
-      <h1 style=\{{ fontSize: "2rem", marginBottom: "1rem" }}>{{titleCase name}}</h1>
-
-      <div
-        style=\{{
-          background: "#f0f9ff",
-          border: "1px solid #0ea5e9",
-          borderRadius: "8px",
-          padding: "1rem",
-          marginBottom: "1rem",
-        }}
-      >
-        <h2 style=\{{ margin: "0 0 0.5rem 0", fontSize: "1rem" }}>
-          Web (React Router v7)
-        </h2>
-        <p style=\{{ margin: 0, color: "#666" }}>Stage: {stage}</p>
-      </div>
-
-      <div
-        style=\{{
-          background: "#f0fdf4",
-          border: "1px solid #22c55e",
-          borderRadius: "8px",
-          padding: "1rem",
-          marginBottom: "1rem",
-        }}
-      >
-        <h2 style=\{{ margin: "0 0 0.5rem 0", fontSize: "1rem" }}>
-          API Response (Hono)
-        </h2>
-        <p style=\{{ margin: "0 0 0.25rem 0" }}>Message: {message}</p>
-        {timestamp && (
-          <p style=\{{ margin: 0, color: "#666", fontSize: "0.875rem" }}>
-            Timestamp: {timestamp}
-          </p>
-        )}
-      </div>
-
-      <div
-        style=\{{
-          background: dbConnected ? "#fdf4ff" : "#fef2f2",
-          border: `1px solid ${dbConnected ? "#a855f7" : "#ef4444"}`,
-          borderRadius: "8px",
-          padding: "1rem",
-        }}
-      >
-        <h2 style=\{{ margin: "0 0 0.5rem 0", fontSize: "1rem" }}>
-          Database (RDS)
-        </h2>
-        <p style=\{{ margin: "0 0 0.25rem 0" }}>
-          Status: {dbConnected ? "Connected" : `${db?.status || "Unknown"}`}
-        </p>
-        {dbConnected && (
-          <>
-            <p style=\{{ margin: "0 0 0.25rem 0", color: "#666", fontSize: "0.875rem" }}>
-              Database: {db.database}
-            </p>
-            <p style=\{{ margin: 0, color: "#666", fontSize: "0.875rem" }}>
-              User: {db.user}
-            </p>
-          </>
-        )}
-      </div>
-
-      <p style=\{{ marginTop: "1.5rem", color: "#666", fontSize: "0.875rem" }}>
-        Edit files in <code>web/</code> or <code>api/</code> to see live reload!
-      </p>
-    </div>
-  );
-}

package/templates/api-web-db/web/app/routes.ts

@@ -1,3 +0,0 @@
-import { type RouteConfig, index } from "@react-router/dev/routes";
-
-export default [index("routes/home.tsx")] satisfies RouteConfig;

package/templates/api-web-db/web/package.json.hbs

@@ -1,30 +0,0 @@
-{
-  "name": "{{name}}-web",
-  "type": "module",
-  "scripts": {
-    "dev": "react-router dev",
-    "build": "react-router build",
-    "start": "react-router-serve ./build/server/index.js"
-  },
-  "dependencies": {
-    "@prisma/adapter-pg": "^7.0.0",
-    "@prisma/client": "^7.0.0",
-    "@react-router/node": "^7.1.1",
-    "@react-router/serve": "^7.1.1",
-    "isbot": "^5.1.17",
-    "pg": "^8.13.0",
-    "prisma": "^7.0.0",
-    "react": "^19.0.0",
-    "react-dom": "^19.0.0",
-    "react-router": "^7.1.1"
-  },
-  "devDependencies": {
-    "@react-router/dev": "^7.1.1",
-    "@types/node": "^22.10.5",
-    "@types/pg": "^8.11.0",
-    "@types/react": "^19.0.2",
-    "@types/react-dom": "^19.0.2",
-    "typescript": "^5.7.2",
-    "vite": "^6.0.7"
-  }
-}

package/templates/api-web-db/web/prisma/schema.prisma

@@ -1,25 +0,0 @@
-// Prisma v7 Schema
-// Docs: https://www.prisma.io/docs
-
-generator client {
-  provider = "prisma-client"
-  output   = "../src/generated/prisma"
-}
-
-datasource db {
-  provider = "postgresql"
-  // Note: url is configured in prisma.config.ts (Prisma v7 pattern)
-}
-
-// =============================================================================
-// Example Model - Replace with your domain models
-// =============================================================================
-
-model Example {
-  id        String   @id @default(cuid())
-  name      String
-  createdAt DateTime @default(now())
-  updatedAt DateTime @updatedAt
-
-  @@map("examples")
-}

package/templates/api-web-db/web/prisma.config.ts

@@ -1,18 +0,0 @@
-/**
- * Prisma v7 configuration for CLI commands (migrations, db push, etc.)
- *
- * Usage with SST:
- *   npx sst shell --target Prisma -- npx prisma db push
- *   npx sst shell --target Prisma -- npx prisma migrate dev --name <name>
- *   npx sst shell --target Prisma -- npx prisma studio
- */
-
-import { defineConfig } from "prisma/config";
-
-export default defineConfig({
-  schema: "prisma/schema.prisma",
-
-  datasource: {
-    url: process.env.DATABASE_URL!,
-  },
-});

package/templates/api-web-db/web/react-router.config.ts

@@ -1,5 +0,0 @@
-import type { Config } from "@react-router/dev/config";
-
-export default {
-  ssr: true,
-} satisfies Config;

package/templates/api-web-db/web/tsconfig.json

@@ -1,19 +0,0 @@
-{
-  "include": [
-    "**/*.ts",
-    "**/*.tsx",
-    ".react-router/types/**/*"
-  ],
-  "compilerOptions": {
-    "target": "ES2022",
-    "lib": ["DOM", "DOM.Iterable", "ES2022"],
-    "types": ["node", "@react-router/node", "vite/client"],
-    "module": "ESNext",
-    "moduleResolution": "bundler",
-    "jsx": "react-jsx",
-    "strict": true,
-    "skipLibCheck": true,
-    "noEmit": true,
-    "rootDirs": [".", "./.react-router/types"]
-  }
-}

package/templates/api-web-db/web/vite.config.ts

@@ -1,9 +0,0 @@
-import { reactRouter } from "@react-router/dev/vite";
-import { defineConfig } from "vite";
-
-export default defineConfig({
-  plugins: [reactRouter()],
-  server: {
-    port: parseInt(process.env.PORT || "3000", 10),
-  },
-});