@mesh-tech/mesh-cli 0.36.0 → 0.38.0

package/dist/bin/mesh.chunk-TZAGJTKU.js

@@ -0,0 +1,217 @@
+import {
+  MeshCliError
+} from "./mesh.chunk-IQOBTL42.js";
+
+// packages/mesh-cli/src/commands/init/platform-setup.ts
+import * as fs from "fs";
+import * as path from "path";
+import { execFileSync } from "child_process";
+var PLATFORM_SETUP_DEFAULTS = {
+  env: "dev",
+  region: "us-east-2",
+  profile: "default"
+};
+var DOMAIN_REQUIRED_MESSAGE = "--domain is required: the core stack creates the public Route 53 zone <env>.<domain>, and a placeholder domain scaffolds a zone whose certificate can never validate, so ingress never serves HTTPS.";
+function defaultStateBucket(tenant) {
+  return `${tenant}-mesh-platform-pulumi-state`;
+}
+function defaultPlatformDir(tenant) {
+  return `${tenant}-mesh-platform`;
+}
+function validateEnv(value) {
+  return /^[a-z][a-z0-9-]*$/.test(value.trim()) ? true : "lowercase letters, digits and dashes, starting with a letter";
+}
+function validateRegion(value) {
+  return /^[a-z]{2}(-[a-z]+)+-\d$/.test(value.trim()) ? true : "an AWS region, e.g. us-east-2 or eu-west-1";
+}
+function validateDomain(value) {
+  const domain = value.trim().toLowerCase().replace(/\.$/, "");
+  if (!domain) return "a public domain you control, e.g. q2poc.pub";
+  if (!/^(?=.{1,253}$)([a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?\.)+[a-z]{2,}$/.test(domain)) {
+    return "a public domain you control, e.g. q2poc.pub";
+  }
+  if (/(^|\.)(example\.(com|org|net)|invalid|localhost|test)$/.test(domain)) {
+    return `${domain} is a placeholder \u2014 its ACM certificate can never validate, because nobody can delegate that zone to you. Use a domain you control.`;
+  }
+  return true;
+}
+function validateStateBucket(value) {
+  const bucket = value.trim();
+  return /^[a-z0-9][a-z0-9.-]{1,61}[a-z0-9]$/.test(bucket) && !bucket.includes("..") ? true : "3\u201363 characters: lowercase letters, digits, dots and dashes, starting and ending alphanumeric";
+}
+function resolveTargetDir(tenant, flags, cwd) {
+  const dir = path.resolve(cwd, flags.dir ?? defaultPlatformDir(tenant));
+  if (fs.existsSync(dir) && fs.readdirSync(dir).length > 0) {
+    throw new MeshCliError(`Target directory is not empty: ${dir}`, {
+      remediation: { command: `mesh init platform ${tenant} --dir <empty-dir>` }
+    });
+  }
+  return dir;
+}
+async function resolvePlatformSetup(tenant, flags, deps) {
+  const cwd = deps.cwd ?? process.cwd();
+  const dir = resolveTargetDir(tenant, flags, cwd);
+  const ask = deps.interactive && !flags.yes ? deps.prompts : void 0;
+  const env = flags.env ?? (ask ? await ask.input({ message: "Environment", default: PLATFORM_SETUP_DEFAULTS.env, validate: validateEnv }) : PLATFORM_SETUP_DEFAULTS.env);
+  if (validateEnv(env) !== true) throw new MeshCliError(`Invalid environment '${env}' \u2014 ${validateEnv(env)}.`);
+  const region = flags.region ?? (ask ? await ask.input({ message: "AWS region", default: PLATFORM_SETUP_DEFAULTS.region, validate: validateRegion }) : PLATFORM_SETUP_DEFAULTS.region);
+  if (validateRegion(region) !== true) throw new MeshCliError(`Invalid region '${region}' \u2014 ${validateRegion(region)}.`);
+  let domain = flags.domain;
+  if (domain === void 0) {
+    if (!ask) throw new MeshCliError(DOMAIN_REQUIRED_MESSAGE, { remediation: { command: `mesh init platform ${tenant} --domain <your-domain>` } });
+    domain = await ask.input({
+      message: `Public base domain (the core stack creates the Route 53 zone ${env}.<domain>; its NS records must be delegated from the parent before the deploy can finish)`,
+      validate: validateDomain
+    });
+  }
+  const domainCheck = validateDomain(domain);
+  if (domainCheck !== true) throw new MeshCliError(`Invalid --domain '${domain}' \u2014 ${domainCheck}`);
+  domain = domain.trim().toLowerCase().replace(/\.$/, "");
+  const profile = flags.profile ?? (ask ? await ask.input({ message: "AWS profile the stack config references", default: PLATFORM_SETUP_DEFAULTS.profile }) : PLATFORM_SETUP_DEFAULTS.profile);
+  const bucketDefault = defaultStateBucket(tenant);
+  const stateBucket = flags.stateBucket ?? (ask ? await ask.input({ message: "Pulumi state S3 bucket (holds this platform's state \u2014 created below if it does not exist)", default: bucketDefault, validate: validateStateBucket }) : bucketDefault);
+  const bucketCheck = validateStateBucket(stateBucket);
+  if (bucketCheck !== true) throw new MeshCliError(`Invalid --state-bucket '${stateBucket}' \u2014 ${bucketCheck}`);
+  let createStateBucket = flags.createStateBucket ?? false;
+  if (flags.createStateBucket === void 0 && ask) {
+    createStateBucket = await ask.confirm({
+      message: `Create s3://${stateBucket} in ${region} now (versioned), if it does not exist?`,
+      default: true
+    });
+  }
+  return {
+    tenant,
+    env,
+    region,
+    domain,
+    profile,
+    stateBucket: stateBucket.trim(),
+    dir,
+    createStateBucket
+  };
+}
+function stateBucketCreateCommand(setup) {
+  const location = setup.region === "us-east-1" ? "" : ` --create-bucket-configuration LocationConstraint=${setup.region}`;
+  return `aws s3api create-bucket --bucket ${setup.stateBucket} --region ${setup.region}${location} --profile ${setup.profile}`;
+}
+function awsJson(args, profile) {
+  return execFileSync("aws", [...args, "--profile", profile], {
+    encoding: "utf8",
+    stdio: ["ignore", "pipe", "pipe"]
+  });
+}
+var realStateBucketDeps = {
+  headBucket(setup) {
+    try {
+      awsJson(["s3api", "head-bucket", "--bucket", setup.stateBucket, "--region", setup.region], setup.profile);
+      return true;
+    } catch {
+      return false;
+    }
+  },
+  createBucket(setup) {
+    const args = ["s3api", "create-bucket", "--bucket", setup.stateBucket, "--region", setup.region];
+    if (setup.region !== "us-east-1") args.push("--create-bucket-configuration", `LocationConstraint=${setup.region}`);
+    awsJson(args, setup.profile);
+  },
+  enableVersioning(setup) {
+    awsJson(
+      ["s3api", "put-bucket-versioning", "--bucket", setup.stateBucket, "--region", setup.region, "--versioning-configuration", "Status=Enabled"],
+      setup.profile
+    );
+  }
+};
+async function ensureStateBucket(setup, deps = realStateBucketDeps) {
+  if (!setup.createStateBucket) {
+    return { created: false, present: false, detail: "not requested" };
+  }
+  try {
+    if (deps.headBucket(setup)) {
+      return { created: false, present: true, detail: `s3://${setup.stateBucket} already exists` };
+    }
+  } catch {
+  }
+  try {
+    deps.createBucket(setup);
+  } catch (err) {
+    const why = errorDetail(err);
+    return { created: false, present: false, detail: `could not create s3://${setup.stateBucket} \u2014 ${why}` };
+  }
+  try {
+    deps.enableVersioning(setup);
+    return { created: true, present: true, detail: `created s3://${setup.stateBucket} in ${setup.region} (versioning on)` };
+  } catch (err) {
+    return { created: true, present: true, detail: `created s3://${setup.stateBucket} in ${setup.region}, but versioning could not be enabled \u2014 ${errorDetail(err)}` };
+  }
+}
+function errorDetail(err) {
+  const stderr = err && typeof err === "object" && "stderr" in err ? String(err.stderr ?? "") : "";
+  const text = stderr.trim() || (err instanceof Error ? err.message : String(err));
+  return text.split("\n").filter(Boolean).slice(-1)[0] ?? "unknown error";
+}
+function exportCredentialsCommand(profile) {
+  return `eval "$(aws configure export-credentials --profile ${profile} --format env)"   # mesh deploy reads AWS_ACCESS_KEY_ID; a platform stack carries no mesh:deployerRole`;
+}
+function renderPlatformNextSteps(setup, opts = {}) {
+  const dir = opts.relativeDir ?? setup.dir;
+  const steps = [];
+  if (!opts.bucket?.present) {
+    steps.push(`${stateBucketCreateCommand(setup)}   # the Pulumi state bucket, once`);
+  }
+  steps.push(
+    `cd ${dir}`,
+    "pnpm install",
+    `aws sso login --profile ${setup.profile}   # if this profile is SSO`,
+    exportCredentialsCommand(setup.profile),
+    `cd core && mesh deploy up        # the VPC, EKS, RDS and the public zone ${setup.env}.${setup.domain}`,
+    `# \u2192 then delegate the NS records of ${setup.env}.${setup.domain} from ${setup.domain} at your registrar; the deploy stops at the mesh-gateway Ingress until ACM issues the certificate, then continues`,
+    "cd ../platform && mesh deploy up  # Temporal, Zitadel, the Hub  (needs Docker \u2014 it builds service images)",
+    `mesh login ${setup.tenant}.${setup.env}      # your platform sign-in, once it is up`,
+    "",
+    "Then, in your apps repo, for the hello-world app:",
+    `  mesh init --tenant ${setup.tenant} --platform ${setup.env}`,
+    "  mesh create-app --name hello --primitives service",
+    "  mesh deploy up                   # from the app directory"
+  );
+  return steps;
+}
+async function scaffoldPlatformRepo(setup) {
+  if (fs.existsSync(setup.dir) && fs.readdirSync(setup.dir).length > 0) {
+    throw new MeshCliError(`Target directory is not empty: ${setup.dir}`, {
+      remediation: { command: `mesh init platform ${setup.tenant} --dir <empty-dir>` }
+    });
+  }
+  const { copyTemplate } = await import("./mesh.create-app-NGXACFAU.js");
+  const { findPackageRoot } = await import("./mesh.stack-EFTFAOCV.js");
+  const { syncSkills } = await import("./mesh.skills-MNDSMBIE.js");
+  const templateDir = path.join(findPackageRoot(), "templates", "platform-repo");
+  fs.mkdirSync(setup.dir, { recursive: true });
+  copyTemplate(templateDir, setup.dir, {
+    tenant: setup.tenant,
+    env: setup.env,
+    region: setup.region,
+    domain: setup.domain,
+    profile: setup.profile,
+    stateBucket: setup.stateBucket
+  });
+  syncSkills(setup.dir);
+}
+
+export {
+  PLATFORM_SETUP_DEFAULTS,
+  DOMAIN_REQUIRED_MESSAGE,
+  defaultStateBucket,
+  defaultPlatformDir,
+  validateEnv,
+  validateRegion,
+  validateDomain,
+  validateStateBucket,
+  resolveTargetDir,
+  resolvePlatformSetup,
+  stateBucketCreateCommand,
+  realStateBucketDeps,
+  ensureStateBucket,
+  exportCredentialsCommand,
+  renderPlatformNextSteps,
+  scaffoldPlatformRepo
+};

package/dist/bin/mesh.chunk-TZAGJTKU.js.map

@@ -0,0 +1,6 @@
+{
+  "version": 3,
+  "sources": ["../../src/commands/init/platform-setup.ts"],
+  "mappings": ";;;;;AA0BA,YAAY,QAAQ;AACpB,YAAY,UAAU;AACtB,SAAS,oBAAoB;AAqCtB,IAAM,0BAA0B;AAAA,EACrC,KAAK;AAAA,EACL,QAAQ;AAAA,EACR,SAAS;AACX;AAGO,IAAM,0BACX;AASK,SAAS,mBAAmB,QAAwB;AACzD,SAAO,GAAG,MAAM;AAClB;AAQO,SAAS,mBAAmB,QAAwB;AACzD,SAAO,GAAG,MAAM;AAClB;AASO,SAAS,YAAY,OAA8B;AACxD,SAAO,oBAAoB,KAAK,MAAM,KAAK,CAAC,IACxC,OACA;AACN;AAUO,SAAS,eAAe,OAA8B;AAC3D,SAAO,0BAA0B,KAAK,MAAM,KAAK,CAAC,IAAI,OAAO;AAC/D;AAWO,SAAS,eAAe,OAA8B;AAC3D,QAAM,SAAS,MAAM,KAAK,EAAE,YAAY,EAAE,QAAQ,OAAO,EAAE;AAC3D,MAAI,CAAC,OAAQ,QAAO;AACpB,MAAI,CAAC,kEAAkE,KAAK,MAAM,GAAG;AACnF,WAAO;AAAA,EACT;AACA,MAAI,yDAAyD,KAAK,MAAM,GAAG;AACzE,WAAO,GAAG,MAAM;AAAA,EAClB;AACA,SAAO;AACT;AAUO,SAAS,oBAAoB,OAA8B;AAChE,QAAM,SAAS,MAAM,KAAK;AAC1B,SAAO,qCAAqC,KAAK,MAAM,KAAK,CAAC,OAAO,SAAS,IAAI,IAC7E,OACA;AACN;AAaO,SAAS,iBAAiB,QAAgB,OAA2B,KAAqB;AAC/F,QAAM,MAAW,aAAQ,KAAK,MAAM,OAAO,mBAAmB,MAAM,CAAC;AACrE,MAAO,cAAW,GAAG,KAAQ,eAAY,GAAG,EAAE,SAAS,GAAG;AACxD,UAAM,IAAI,aAAa,kCAAkC,GAAG,IAAI;AAAA,MAC9D,aAAa,EAAE,SAAS,sBAAsB,MAAM,qBAAqB;AAAA,IAC3E,CAAC;AAAA,EACH;AACA,SAAO;AACT;AAeA,eAAsB,qBACpB,QACA,OACA,MACwB;AACxB,QAAM,MAAM,KAAK,OAAO,QAAQ,IAAI;AAGpC,QAAM,MAAM,iBAAiB,QAAQ,OAAO,GAAG;AAC/C,QAAM,MAAM,KAAK,eAAe,CAAC,MAAM,MAAM,KAAK,UAAU;AAE5D,QAAM,MAAM,MAAM,QAAQ,MAAM,MAAM,IAAI,MAAM,EAAE,SAAS,eAAe,SAAS,wBAAwB,KAAK,UAAU,YAAY,CAAC,IAAI,wBAAwB;AACnK,MAAI,YAAY,GAAG,MAAM,KAAM,OAAM,IAAI,aAAa,wBAAwB,GAAG,YAAO,YAAY,GAAG,CAAC,GAAG;AAE3G,QAAM,SACJ,MAAM,WACL,MACG,MAAM,IAAI,MAAM,EAAE,SAAS,cAAc,SAAS,wBAAwB,QAAQ,UAAU,eAAe,CAAC,IAC5G,wBAAwB;AAC9B,MAAI,eAAe,MAAM,MAAM,KAAM,OAAM,IAAI,aAAa,mBAAmB,MAAM,YAAO,eAAe,MAAM,CAAC,GAAG;AAErH,MAAI,SAAS,MAAM;AACnB,MAAI,WAAW,QAAW;AACxB,QAAI,CAAC,IAAK,OAAM,IAAI,aAAa,yBAAyB,EAAE,aAAa,EAAE,SAAS,sBAAsB,MAAM,0BAA0B,EAAE,CAAC;AAC7I,aAAS,MAAM,IAAI,MAAM;AAAA,MACvB,SAAS,gEAAgE,GAAG;AAAA,MAC5E,UAAU;AAAA,IACZ,CAAC;AAAA,EACH;AACA,QAAM,cAAc,eAAe,MAAM;AACzC,MAAI,gBAAgB,KAAM,OAAM,IAAI,aAAa,qBAAqB,MAAM,YAAO,WAAW,EAAE;AAChG,WAAS,OAAO,KAAK,EAAE,YAAY,EAAE,QAAQ,OAAO,EAAE;AAEtD,QAAM,UACJ,MAAM,YACL,MACG,MAAM,IAAI,MAAM,EAAE,SAAS,2CAA2C,SAAS,wBAAwB,QAAQ,CAAC,IAChH,wBAAwB;AAE9B,QAAM,gBAAgB,mBAAmB,MAAM;AAC/C,QAAM,cACJ,MAAM,gBACL,MACG,MAAM,IAAI,MAAM,EAAE,SAAS,kGAA6F,SAAS,eAAe,UAAU,oBAAoB,CAAC,IAC/K;AACN,QAAM,cAAc,oBAAoB,WAAW;AACnD,MAAI,gBAAgB,KAAM,OAAM,IAAI,aAAa,2BAA2B,WAAW,YAAO,WAAW,EAAE;AAE3G,MAAI,oBAAoB,MAAM,qBAAqB;AACnD,MAAI,MAAM,sBAAsB,UAAa,KAAK;AAChD,wBAAoB,MAAM,IAAI,QAAQ;AAAA,MACpC,SAAS,eAAe,WAAW,OAAO,MAAM;AAAA,MAChD,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,aAAa,YAAY,KAAK;AAAA,IAC9B;AAAA,IACA;AAAA,EACF;AACF;AAWO,SAAS,yBAAyB,OAA0E;AACjH,QAAM,WAAW,MAAM,WAAW,cAAc,KAAK,qDAAqD,MAAM,MAAM;AACtH,SAAO,oCAAoC,MAAM,WAAW,aAAa,MAAM,MAAM,GAAG,QAAQ,cAAc,MAAM,OAAO;AAC7H;AAkBA,SAAS,QAAQ,MAAgB,SAAyB;AACxD,SAAO,aAAa,OAAO,CAAC,GAAG,MAAM,aAAa,OAAO,GAAG;AAAA,IAC1D,UAAU;AAAA,IACV,OAAO,CAAC,UAAU,QAAQ,MAAM;AAAA,EAClC,CAAC;AACH;AAGO,IAAM,sBAAuC;AAAA,EAClD,WAAW,OAAO;AAChB,QAAI;AACF,cAAQ,CAAC,SAAS,eAAe,YAAY,MAAM,aAAa,YAAY,MAAM,MAAM,GAAG,MAAM,OAAO;AACxG,aAAO;AAAA,IACT,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EACA,aAAa,OAAO;AAClB,UAAM,OAAO,CAAC,SAAS,iBAAiB,YAAY,MAAM,aAAa,YAAY,MAAM,MAAM;AAE/F,QAAI,MAAM,WAAW,YAAa,MAAK,KAAK,iCAAiC,sBAAsB,MAAM,MAAM,EAAE;AACjH,YAAQ,MAAM,MAAM,OAAO;AAAA,EAC7B;AAAA,EACA,iBAAiB,OAAO;AACtB;AAAA,MACE,CAAC,SAAS,yBAAyB,YAAY,MAAM,aAAa,YAAY,MAAM,QAAQ,8BAA8B,gBAAgB;AAAA,MAC1I,MAAM;AAAA,IACR;AAAA,EACF;AACF;AAcA,eAAsB,kBAAkB,OAAsB,OAAwB,qBAAkD;AACtI,MAAI,CAAC,MAAM,mBAAmB;AAC5B,WAAO,EAAE,SAAS,OAAO,SAAS,OAAO,QAAQ,gBAAgB;AAAA,EACnE;AACA,MAAI;AACF,QAAI,KAAK,WAAW,KAAK,GAAG;AAC1B,aAAO,EAAE,SAAS,OAAO,SAAS,MAAM,QAAQ,QAAQ,MAAM,WAAW,kBAAkB;AAAA,IAC7F;AAAA,EACF,QAAQ;AAAA,EAER;AACA,MAAI;AACF,SAAK,aAAa,KAAK;AAAA,EACzB,SAAS,KAAK;AACZ,UAAM,MAAM,YAAY,GAAG;AAC3B,WAAO,EAAE,SAAS,OAAO,SAAS,OAAO,QAAQ,yBAAyB,MAAM,WAAW,WAAM,GAAG,GAAG;AAAA,EACzG;AACA,MAAI;AACF,SAAK,iBAAiB,KAAK;AAC3B,WAAO,EAAE,SAAS,MAAM,SAAS,MAAM,QAAQ,gBAAgB,MAAM,WAAW,OAAO,MAAM,MAAM,mBAAmB;AAAA,EACxH,SAAS,KAAK;AACZ,WAAO,EAAE,SAAS,MAAM,SAAS,MAAM,QAAQ,gBAAgB,MAAM,WAAW,OAAO,MAAM,MAAM,gDAA2C,YAAY,GAAG,CAAC,GAAG;AAAA,EACnK;AACF;AAGA,SAAS,YAAY,KAAsB;AACzC,QAAM,SAAS,OAAO,OAAO,QAAQ,YAAY,YAAY,MAAM,OAAQ,IAA6B,UAAU,EAAE,IAAI;AACxH,QAAM,OAAO,OAAO,KAAK,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC9E,SAAO,KAAK,MAAM,IAAI,EAAE,OAAO,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK;AAC1D;AAeO,SAAS,yBAAyB,SAAyB;AAChE,SACE,sDAAsD,OAAO;AAGjE;AAaO,SAAS,wBAAwB,OAAsB,OAA8D,CAAC,GAAa;AACxI,QAAM,MAAM,KAAK,eAAe,MAAM;AACtC,QAAM,QAAkB,CAAC;AACzB,MAAI,CAAC,KAAK,QAAQ,SAAS;AACzB,UAAM,KAAK,GAAG,yBAAyB,KAAK,CAAC,oCAAoC;AAAA,EACnF;AACA,QAAM;AAAA,IACJ,MAAM,GAAG;AAAA,IACT;AAAA,IACA,2BAA2B,MAAM,OAAO;AAAA,IACxC,yBAAyB,MAAM,OAAO;AAAA,IACtC,4EAA4E,MAAM,GAAG,IAAI,MAAM,MAAM;AAAA,IACrG,4CAAuC,MAAM,GAAG,IAAI,MAAM,MAAM,SAAS,MAAM,MAAM;AAAA,IACrF;AAAA,IACA,cAAc,MAAM,MAAM,IAAI,MAAM,GAAG;AAAA,IACvC;AAAA,IACA;AAAA,IACA,wBAAwB,MAAM,MAAM,eAAe,MAAM,GAAG;AAAA,IAC5D;AAAA,IACA;AAAA,EACF;AACA,SAAO;AACT;AASA,eAAsB,qBAAqB,OAAqC;AAC9E,MAAO,cAAW,MAAM,GAAG,KAAQ,eAAY,MAAM,GAAG,EAAE,SAAS,GAAG;AACpE,UAAM,IAAI,aAAa,kCAAkC,MAAM,GAAG,IAAI;AAAA,MACpE,aAAa,EAAE,SAAS,sBAAsB,MAAM,MAAM,qBAAqB;AAAA,IACjF,CAAC;AAAA,EACH;AACA,QAAM,EAAE,aAAa,IAAI,MAAM,OAAO,+BAAkB;AACxD,QAAM,EAAE,gBAAgB,IAAI,MAAM,OAAO,0BAAmB;AAC5D,QAAM,EAAE,WAAW,IAAI,MAAM,OAAO,2BAAc;AAClD,QAAM,cAAmB,UAAK,gBAAgB,GAAG,aAAa,eAAe;AAC7E,EAAG,aAAU,MAAM,KAAK,EAAE,WAAW,KAAK,CAAC;AAC3C,eAAa,aAAa,MAAM,KAAK;AAAA,IACnC,QAAQ,MAAM;AAAA,IACd,KAAK,MAAM;AAAA,IACX,QAAQ,MAAM;AAAA,IACd,QAAQ,MAAM;AAAA,IACd,SAAS,MAAM;AAAA,IACf,aAAa,MAAM;AAAA,EACrB,CAAC;AACD,aAAW,MAAM,GAAG;AACtB;",
+  "names": []
+}

package/dist/bin/mesh.chunk-WFFDF346.js

@@ -0,0 +1,59 @@
+// packages/mesh-cli/src/utils/log.ts
+import chalk from "chalk";
+function logPrefix(opts) {
+  const enabled = opts.envFlag === "1" || opts.envFlag !== "0" && !opts.isTTY;
+  return enabled ? `[${opts.now.toISOString().slice(11, 19)}] ` : "";
+}
+function prefix() {
+  return chalk.dim(
+    logPrefix({
+      isTTY: !!process.stderr.isTTY,
+      envFlag: process.env.MESH_LOG_TIMESTAMPS,
+      now: /* @__PURE__ */ new Date()
+    })
+  );
+}
+function logInfo(message) {
+  console.error(prefix() + chalk.blue("\u2139"), message);
+}
+function logSuccess(message) {
+  console.error(prefix() + chalk.green("\u2713"), message);
+}
+function logWarn(message) {
+  console.error(prefix() + chalk.yellow("\u26A0"), message);
+}
+function logError(message) {
+  console.error(prefix() + chalk.red("\u2717"), message);
+}
+function formatElapsed(ms) {
+  const totalSec = Math.max(0, Math.round(ms / 1e3));
+  const h = Math.floor(totalSec / 3600);
+  const m = Math.floor(totalSec % 3600 / 60);
+  const s = totalSec % 60;
+  if (h > 0) return `${h}h ${m}m`;
+  if (m > 0) return `${m}m ${s}s`;
+  return `${s}s`;
+}
+function startHeartbeat(label, intervalMs = 15e3) {
+  const startedAt = Date.now();
+  let lastOutputAt = startedAt;
+  const timer = setInterval(() => {
+    if (Date.now() - lastOutputAt < intervalMs) return;
+    logInfo(`\u2026 still working: ${label} (${formatElapsed(Date.now() - startedAt)} elapsed)`);
+  }, intervalMs);
+  timer.unref?.();
+  return {
+    stop: () => clearInterval(timer),
+    touch: () => {
+      lastOutputAt = Date.now();
+    }
+  };
+}
+
+export {
+  logInfo,
+  logSuccess,
+  logWarn,
+  logError,
+  startHeartbeat
+};

package/dist/bin/mesh.chunk-WFFDF346.js.map

@@ -0,0 +1,6 @@
+{
+  "version": 3,
+  "sources": ["../../src/utils/log.ts"],
+  "mappings": ";AASA,OAAO,WAAW;AAMX,SAAS,UAAU,MAIf;AACT,QAAM,UAAU,KAAK,YAAY,OAAQ,KAAK,YAAY,OAAO,CAAC,KAAK;AACvE,SAAO,UAAU,IAAI,KAAK,IAAI,YAAY,EAAE,MAAM,IAAI,EAAE,CAAC,OAAO;AAClE;AAEA,SAAS,SAAiB;AACxB,SAAO,MAAM;AAAA,IACX,UAAU;AAAA,MACR,OAAO,CAAC,CAAC,QAAQ,OAAO;AAAA,MACxB,SAAS,QAAQ,IAAI;AAAA,MACrB,KAAK,oBAAI,KAAK;AAAA,IAChB,CAAC;AAAA,EACH;AACF;AAEO,SAAS,QAAQ,SAAuB;AAC7C,UAAQ,MAAM,OAAO,IAAI,MAAM,KAAK,QAAG,GAAG,OAAO;AACnD;AAEO,SAAS,WAAW,SAAuB;AAChD,UAAQ,MAAM,OAAO,IAAI,MAAM,MAAM,QAAG,GAAG,OAAO;AACpD;AAEO,SAAS,QAAQ,SAAuB;AAC7C,UAAQ,MAAM,OAAO,IAAI,MAAM,OAAO,QAAG,GAAG,OAAO;AACrD;AAEO,SAAS,SAAS,SAAuB;AAC9C,UAAQ,MAAM,OAAO,IAAI,MAAM,IAAI,QAAG,GAAG,OAAO;AAClD;AAGO,SAAS,cAAc,IAAoB;AAChD,QAAM,WAAW,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK,GAAI,CAAC;AAClD,QAAM,IAAI,KAAK,MAAM,WAAW,IAAI;AACpC,QAAM,IAAI,KAAK,MAAO,WAAW,OAAQ,EAAE;AAC3C,QAAM,IAAI,WAAW;AACrB,MAAI,IAAI,EAAG,QAAO,GAAG,CAAC,KAAK,CAAC;AAC5B,MAAI,IAAI,EAAG,QAAO,GAAG,CAAC,KAAK,CAAC;AAC5B,SAAO,GAAG,CAAC;AACb;AAQO,SAAS,eACd,OACA,aAAa,MAC4B;AACzC,QAAM,YAAY,KAAK,IAAI;AAC3B,MAAI,eAAe;AACnB,QAAM,QAAQ,YAAY,MAAM;AAC9B,QAAI,KAAK,IAAI,IAAI,eAAe,WAAY;AAC5C,YAAQ,yBAAoB,KAAK,KAAK,cAAc,KAAK,IAAI,IAAI,SAAS,CAAC,WAAW;AAAA,EACxF,GAAG,UAAU;AACb,QAAM,QAAQ;AACd,SAAO;AAAA,IACL,MAAM,MAAM,cAAc,KAAK;AAAA,IAC/B,OAAO,MAAM;AACX,qBAAe,KAAK,IAAI;AAAA,IAC1B;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/bin/mesh.cli-reference-H3TOPIET.js

@@ -0,0 +1,158 @@
+// packages/mesh-cli/src/docs/cli-reference.ts
+import os from "node:os";
+function currentMachinePaths() {
+  return { homeDir: os.homedir(), tmpDir: os.tmpdir() };
+}
+function normalizeMachinePaths(value, paths) {
+  const candidates = [
+    { prefix: paths.tmpDir, symbol: "$TMPDIR" },
+    { prefix: paths.homeDir, symbol: "~" }
+  ];
+  const substitutions = candidates.filter((candidate) => candidate.prefix && candidate.prefix !== "/").sort((a, b) => b.prefix.length - a.prefix.length);
+  for (const { prefix, symbol } of substitutions) {
+    if (value === prefix) return symbol;
+    if (value.startsWith(`${prefix}/`)) return symbol + value.slice(prefix.length);
+  }
+  return value;
+}
+function formatDefault(value, paths = currentMachinePaths()) {
+  if (value === void 0 || value === null) return void 0;
+  if (typeof value === "string") return normalizeMachinePaths(value, paths);
+  if (typeof value === "boolean" || typeof value === "number") return String(value);
+  return normalizeMachinePaths(JSON.stringify(value), paths);
+}
+function slugifyCommandPath(path) {
+  return path.trim().toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
+}
+function extractOptions(command) {
+  const options = command.options ?? [];
+  return options.map((option) => option).filter((option) => !option.hidden).map((option) => {
+    const ref = {
+      flags: option.flags ?? "",
+      description: option.description ?? "",
+      required: Boolean(option.mandatory ?? option.required ?? false)
+    };
+    const rendered = formatDefault(option.defaultValue);
+    if (rendered !== void 0) ref.defaultValue = rendered;
+    if (option.argChoices?.length) ref.choices = [...option.argChoices];
+    return ref;
+  });
+}
+function extractArgs(command) {
+  const internals = command;
+  const declared = internals.registeredArguments ?? internals._args ?? [];
+  if (!Array.isArray(declared) || declared.length === 0) return "";
+  return declared.map((argument) => {
+    const arg = argument;
+    const name = typeof arg.name === "function" ? arg.name() : "arg";
+    const spread = arg.variadic ? "..." : "";
+    return arg.required ? `<${name}${spread}>` : `[${name}${spread}]`;
+  }).join(" ");
+}
+function isUndocumented(command) {
+  const internals = command;
+  return internals._name === "help" || internals._hidden === true;
+}
+function extractCommand(command, parentPath, depth) {
+  const internals = command;
+  const name = internals._name ?? "";
+  const path = parentPath ? `${parentPath} ${name}` : name;
+  return {
+    path,
+    name,
+    aliases: [...internals._aliases ?? []],
+    description: internals._description ?? "",
+    args: extractArgs(command),
+    options: extractOptions(command),
+    slug: slugifyCommandPath(path),
+    depth,
+    subcommands: (internals.commands ?? []).filter((child) => !isUndocumented(child)).map((child) => extractCommand(child, path, depth + 1))
+  };
+}
+function extractCliReference(program) {
+  const internals = program;
+  const rootName = internals._name ?? "mesh";
+  return {
+    name: rootName,
+    description: internals._description ?? "",
+    options: extractOptions(program).filter(
+      (option) => !/(^|\s)(-V|--version)(\s|,|$)/.test(option.flags)
+    ),
+    commands: (internals.commands ?? []).filter((child) => !isUndocumented(child)).map((child) => extractCommand(child, rootName, 1))
+  };
+}
+function flattenCommands(reference) {
+  const flat = [];
+  const visit = (command) => {
+    flat.push(command);
+    command.subcommands.forEach(visit);
+  };
+  reference.commands.forEach(visit);
+  return flat;
+}
+function cell(text) {
+  return text.replace(/\\/g, "\\\\").replace(/\|/g, "\\|").replace(/\r?\n/g, " ").trim();
+}
+function renderOptionsTable(options) {
+  if (options.length === 0) return [];
+  const lines = ["| Option | Description | Default |", "| --- | --- | --- |"];
+  for (const option of options) {
+    const notes = [];
+    if (option.required) notes.push("**required**");
+    if (option.choices?.length) notes.push(`one of: ${option.choices.join(", ")}`);
+    const description = [cell(option.description), ...notes].filter(Boolean).join(" \u2014 ");
+    const defaultValue = option.defaultValue === void 0 ? "" : `\`${cell(option.defaultValue)}\``;
+    lines.push(`| \`${cell(option.flags)}\` | ${description} | ${defaultValue} |`);
+  }
+  lines.push("");
+  return lines;
+}
+function renderCommand(command) {
+  const heading = "#".repeat(Math.min(command.depth + 1, 4));
+  const usage = [command.path, command.options.length > 0 ? "[options]" : "", command.args].filter(Boolean).join(" ");
+  const lines = [`${heading} \`${command.path}\``, ""];
+  if (command.description) lines.push(command.description, "");
+  if (command.aliases.length > 0) {
+    lines.push(`Alias: ${command.aliases.map((alias) => `\`${alias}\``).join(", ")}`, "");
+  }
+  lines.push("```bash", usage, "```", "");
+  lines.push(...renderOptionsTable(command.options));
+  command.subcommands.forEach((child) => lines.push(...renderCommand(child)));
+  return lines;
+}
+function renderCliReferenceMarkdown(reference) {
+  const lines = [
+    "<!--",
+    "  GENERATED FILE \u2014 do not edit by hand.",
+    "  Source: the commander tree in packages/mesh-cli/src/program.ts",
+    "  Rebuild: pnpm exec mesh docs cli-reference",
+    "-->",
+    "",
+    "# `mesh` CLI reference",
+    "",
+    reference.description,
+    "",
+    "Every command below is generated from the CLI's own command tree, so this",
+    "page cannot drift from the binary you have installed. Run any command with",
+    "`--help` for the same information at the terminal.",
+    ""
+  ];
+  lines.push(...renderOptionsTable(reference.options));
+  lines.push("## Commands", "");
+  for (const command of reference.commands) {
+    const summary = cell(command.description) || "\u2014";
+    lines.push(`- [\`${command.path}\`](#${command.slug}) \u2014 ${summary}`);
+  }
+  lines.push("");
+  reference.commands.forEach((command) => lines.push(...renderCommand(command)));
+  return `${lines.join("\n").replace(/\n{3,}/g, "\n\n").trimEnd()}
+`;
+}
+export {
+  extractCliReference,
+  flattenCommands,
+  formatDefault,
+  normalizeMachinePaths,
+  renderCliReferenceMarkdown,
+  slugifyCommandPath
+};

package/dist/bin/mesh.cli-reference-H3TOPIET.js.map

@@ -0,0 +1,6 @@
+{
+  "version": 3,
+  "sources": ["../../src/docs/cli-reference.ts"],
+  "mappings": ";AAYA,OAAO,QAAQ;AAkEf,SAAS,sBAAoC;AAC3C,SAAO,EAAE,SAAS,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,EAAE;AACtD;AAeO,SAAS,sBAAsB,OAAe,OAA6B;AAChF,QAAM,aAAwD;AAAA,IAC5D,EAAE,QAAQ,MAAM,QAAQ,QAAQ,UAAU;AAAA,IAC1C,EAAE,QAAQ,MAAM,SAAS,QAAQ,IAAI;AAAA,EACvC;AAEA,QAAM,gBAAgB,WACnB,OAAO,CAAC,cAAc,UAAU,UAAU,UAAU,WAAW,GAAG,EAClE,KAAK,CAAC,GAAG,MAAM,EAAE,OAAO,SAAS,EAAE,OAAO,MAAM;AAEnD,aAAW,EAAE,QAAQ,OAAO,KAAK,eAAe;AAC9C,QAAI,UAAU,OAAQ,QAAO;AAC7B,QAAI,MAAM,WAAW,GAAG,MAAM,GAAG,EAAG,QAAO,SAAS,MAAM,MAAM,OAAO,MAAM;AAAA,EAC/E;AACA,SAAO;AACT;AAUO,SAAS,cACd,OACA,QAAsB,oBAAoB,GACtB;AACpB,MAAI,UAAU,UAAa,UAAU,KAAM,QAAO;AAClD,MAAI,OAAO,UAAU,SAAU,QAAO,sBAAsB,OAAO,KAAK;AACxE,MAAI,OAAO,UAAU,aAAa,OAAO,UAAU,SAAU,QAAO,OAAO,KAAK;AAChF,SAAO,sBAAsB,KAAK,UAAU,KAAK,GAAG,KAAK;AAC3D;AAGO,SAAS,mBAAmB,MAAsB;AACvD,SAAO,KACJ,KAAK,EACL,YAAY,EACZ,QAAQ,eAAe,GAAG,EAC1B,QAAQ,YAAY,EAAE;AAC3B;AAEA,SAAS,eAAe,SAAkC;AACxD,QAAM,UAAW,QAAwC,WAAW,CAAC;AACrE,SAAO,QACJ,IAAI,CAAC,WAAW,MAAoC,EACpD,OAAO,CAAC,WAAW,CAAC,OAAO,MAAM,EACjC,IAAI,CAAC,WAAW;AACf,UAAM,MAAoB;AAAA,MACxB,OAAO,OAAO,SAAS;AAAA,MACvB,aAAa,OAAO,eAAe;AAAA,MACnC,UAAU,QAAQ,OAAO,aAAa,OAAO,YAAY,KAAK;AAAA,IAChE;AACA,UAAM,WAAW,cAAc,OAAO,YAAY;AAClD,QAAI,aAAa,OAAW,KAAI,eAAe;AAC/C,QAAI,OAAO,YAAY,OAAQ,KAAI,UAAU,CAAC,GAAG,OAAO,UAAU;AAClE,WAAO;AAAA,EACT,CAAC;AACL;AAQA,SAAS,YAAY,SAA0B;AAC7C,QAAM,YAAY;AAClB,QAAM,WAAW,UAAU,uBAAuB,UAAU,SAAS,CAAC;AACtE,MAAI,CAAC,MAAM,QAAQ,QAAQ,KAAK,SAAS,WAAW,EAAG,QAAO;AAE9D,SAAO,SACJ,IAAI,CAAC,aAAa;AACjB,UAAM,MAAM;AACZ,UAAM,OAAO,OAAO,IAAI,SAAS,aAAa,IAAI,KAAK,IAAI;AAC3D,UAAM,SAAS,IAAI,WAAW,QAAQ;AACtC,WAAO,IAAI,WAAW,IAAI,IAAI,GAAG,MAAM,MAAM,IAAI,IAAI,GAAG,MAAM;AAAA,EAChE,CAAC,EACA,KAAK,GAAG;AACb;AAYA,SAAS,eAAe,SAA2B;AACjD,QAAM,YAAY;AAClB,SAAO,UAAU,UAAU,UAAU,UAAU,YAAY;AAC7D;AAEA,SAAS,eAAe,SAAkB,YAAoB,OAA8B;AAC1F,QAAM,YAAY;AAClB,QAAM,OAAO,UAAU,SAAS;AAChC,QAAM,OAAO,aAAa,GAAG,UAAU,IAAI,IAAI,KAAK;AAEpD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,SAAS,CAAC,GAAI,UAAU,YAAY,CAAC,CAAE;AAAA,IACvC,aAAa,UAAU,gBAAgB;AAAA,IACvC,MAAM,YAAY,OAAO;AAAA,IACzB,SAAS,eAAe,OAAO;AAAA,IAC/B,MAAM,mBAAmB,IAAI;AAAA,IAC7B;AAAA,IACA,cAAc,UAAU,YAAY,CAAC,GAClC,OAAO,CAAC,UAAU,CAAC,eAAe,KAAK,CAAC,EACxC,IAAI,CAAC,UAAU,eAAe,OAAO,MAAM,QAAQ,CAAC,CAAC;AAAA,EAC1D;AACF;AASO,SAAS,oBAAoB,SAAgC;AAClE,QAAM,YAAY;AAClB,QAAM,WAAW,UAAU,SAAS;AAEpC,SAAO;AAAA,IACL,MAAM;AAAA,IACN,aAAa,UAAU,gBAAgB;AAAA,IACvC,SAAS,eAAe,OAAO,EAAE;AAAA,MAC/B,CAAC,WAAW,CAAC,+BAA+B,KAAK,OAAO,KAAK;AAAA,IAC/D;AAAA,IACA,WAAW,UAAU,YAAY,CAAC,GAC/B,OAAO,CAAC,UAAU,CAAC,eAAe,KAAK,CAAC,EACxC,IAAI,CAAC,UAAU,eAAe,OAAO,UAAU,CAAC,CAAC;AAAA,EACtD;AACF;AAGO,SAAS,gBAAgB,WAA0C;AACxE,QAAM,OAAwB,CAAC;AAC/B,QAAM,QAAQ,CAAC,YAAiC;AAC9C,SAAK,KAAK,OAAO;AACjB,YAAQ,YAAY,QAAQ,KAAK;AAAA,EACnC;AACA,YAAU,SAAS,QAAQ,KAAK;AAChC,SAAO;AACT;AAWA,SAAS,KAAK,MAAsB;AAClC,SAAO,KACJ,QAAQ,OAAO,MAAM,EACrB,QAAQ,OAAO,KAAK,EACpB,QAAQ,UAAU,GAAG,EACrB,KAAK;AACV;AAEA,SAAS,mBAAmB,SAAmC;AAC7D,MAAI,QAAQ,WAAW,EAAG,QAAO,CAAC;AAElC,QAAM,QAAQ,CAAC,sCAAsC,qBAAqB;AAC1E,aAAW,UAAU,SAAS;AAC5B,UAAM,QAAkB,CAAC;AACzB,QAAI,OAAO,SAAU,OAAM,KAAK,cAAc;AAC9C,QAAI,OAAO,SAAS,OAAQ,OAAM,KAAK,WAAW,OAAO,QAAQ,KAAK,IAAI,CAAC,EAAE;AAC7E,UAAM,cAAc,CAAC,KAAK,OAAO,WAAW,GAAG,GAAG,KAAK,EAAE,OAAO,OAAO,EAAE,KAAK,UAAK;AACnF,UAAM,eAAe,OAAO,iBAAiB,SAAY,KAAK,KAAK,KAAK,OAAO,YAAY,CAAC;AAC5F,UAAM,KAAK,OAAO,KAAK,OAAO,KAAK,CAAC,QAAQ,WAAW,MAAM,YAAY,IAAI;AAAA,EAC/E;AACA,QAAM,KAAK,EAAE;AACb,SAAO;AACT;AAEA,SAAS,cAAc,SAAkC;AAGvD,QAAM,UAAU,IAAI,OAAO,KAAK,IAAI,QAAQ,QAAQ,GAAG,CAAC,CAAC;AACzD,QAAM,QAAQ,CAAC,QAAQ,MAAM,QAAQ,QAAQ,SAAS,IAAI,cAAc,IAAI,QAAQ,IAAI,EACrF,OAAO,OAAO,EACd,KAAK,GAAG;AAEX,QAAM,QAAQ,CAAC,GAAG,OAAO,MAAM,QAAQ,IAAI,MAAM,EAAE;AACnD,MAAI,QAAQ,YAAa,OAAM,KAAK,QAAQ,aAAa,EAAE;AAC3D,MAAI,QAAQ,QAAQ,SAAS,GAAG;AAC9B,UAAM,KAAK,UAAU,QAAQ,QAAQ,IAAI,CAAC,UAAU,KAAK,KAAK,IAAI,EAAE,KAAK,IAAI,CAAC,IAAI,EAAE;AAAA,EACtF;AACA,QAAM,KAAK,WAAW,OAAO,OAAO,EAAE;AACtC,QAAM,KAAK,GAAG,mBAAmB,QAAQ,OAAO,CAAC;AACjD,UAAQ,YAAY,QAAQ,CAAC,UAAU,MAAM,KAAK,GAAG,cAAc,KAAK,CAAC,CAAC;AAC1E,SAAO;AACT;AASO,SAAS,2BAA2B,WAAiC;AAC1E,QAAM,QAAQ;AAAA,IACZ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,UAAU;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,QAAM,KAAK,GAAG,mBAAmB,UAAU,OAAO,CAAC;AAEnD,QAAM,KAAK,eAAe,EAAE;AAC5B,aAAW,WAAW,UAAU,UAAU;AACxC,UAAM,UAAU,KAAK,QAAQ,WAAW,KAAK;AAC7C,UAAM,KAAK,QAAQ,QAAQ,IAAI,QAAQ,QAAQ,IAAI,YAAO,OAAO,EAAE;AAAA,EACrE;AACA,QAAM,KAAK,EAAE;AAEb,YAAU,SAAS,QAAQ,CAAC,YAAY,MAAM,KAAK,GAAG,cAAc,OAAO,CAAC,CAAC;AAG7E,SAAO,GAAG,MAAM,KAAK,IAAI,EAAE,QAAQ,WAAW,MAAM,EAAE,QAAQ,CAAC;AAAA;AACjE;",
+  "names": []
+}