@phila/cli 0.0.1

package/dist/templates/webapp-ecs-dotnet/apps/api/obj/Debug/net8.0/Api.GeneratedMSBuildEditorConfig.editorconfig

@@ -0,0 +1,19 @@
+is_global = true
+build_property.TargetFramework = net8.0
+build_property.TargetPlatformMinVersion = 
+build_property.UsingMicrosoftNETSdkWeb = true
+build_property.ProjectTypeGuids = 
+build_property.InvariantGlobalization = 
+build_property.PlatformNeutralAssembly = 
+build_property.EnforceExtendedAnalyzerRules = 
+build_property._SupportedPlatformList = Linux,macOS,Windows
+build_property.RootNamespace = Api
+build_property.RootNamespace = Api
+build_property.ProjectDir = /Users/alejandro.lopez/code/phila-ctl/packages/cli/dist/templates/webapp-ecs-dotnet/apps/api/
+build_property.EnableComHosting = 
+build_property.EnableGeneratedComInterfaceComImportInterop = 
+build_property.RazorLangVersion = 8.0
+build_property.SupportLocalizedComponentNames = 
+build_property.GenerateRazorMetadataSourceChecksumAttributes = 
+build_property.MSBuildProjectDirectory = /Users/alejandro.lopez/code/phila-ctl/packages/cli/dist/templates/webapp-ecs-dotnet/apps/api
+build_property._RazorSourceGeneratorDebug = 

package/dist/templates/webapp-ecs-dotnet/apps/api/obj/Debug/net8.0/Api.GlobalUsings.g.cs

@@ -0,0 +1,17 @@
+// <auto-generated/>
+global using global::Microsoft.AspNetCore.Builder;
+global using global::Microsoft.AspNetCore.Hosting;
+global using global::Microsoft.AspNetCore.Http;
+global using global::Microsoft.AspNetCore.Routing;
+global using global::Microsoft.Extensions.Configuration;
+global using global::Microsoft.Extensions.DependencyInjection;
+global using global::Microsoft.Extensions.Hosting;
+global using global::Microsoft.Extensions.Logging;
+global using global::System;
+global using global::System.Collections.Generic;
+global using global::System.IO;
+global using global::System.Linq;
+global using global::System.Net.Http;
+global using global::System.Net.Http.Json;
+global using global::System.Threading;
+global using global::System.Threading.Tasks;

package/dist/templates/webapp-ecs-dotnet/apps/api/obj/project.assets.json

@@ -0,0 +1,75 @@
+{
+  "version": 3,
+  "targets": {
+    "net8.0": {}
+  },
+  "libraries": {},
+  "projectFileDependencyGroups": {
+    "net8.0": []
+  },
+  "packageFolders": {
+    "/Users/alejandro.lopez/.nuget/packages/": {}
+  },
+  "project": {
+    "version": "1.0.0",
+    "restore": {
+      "projectUniqueName": "/Users/alejandro.lopez/code/phila-ctl/templates/webapp-ecs-dotnet/apps/api/Api.csproj",
+      "projectName": "Api",
+      "projectPath": "/Users/alejandro.lopez/code/phila-ctl/templates/webapp-ecs-dotnet/apps/api/Api.csproj",
+      "packagesPath": "/Users/alejandro.lopez/.nuget/packages/",
+      "outputPath": "/Users/alejandro.lopez/code/phila-ctl/templates/webapp-ecs-dotnet/apps/api/obj/",
+      "projectStyle": "PackageReference",
+      "configFilePaths": [
+        "/Users/alejandro.lopez/.nuget/NuGet/NuGet.Config"
+      ],
+      "originalTargetFrameworks": [
+        "net8.0"
+      ],
+      "sources": {
+        "https://api.nuget.org/v3/index.json": {},
+        "https://philagov-102658671810.d.codeartifact.us-east-1.amazonaws.com/nuget/se-team/v3/index.json": {}
+      },
+      "frameworks": {
+        "net8.0": {
+          "targetAlias": "net8.0",
+          "projectReferences": {}
+        }
+      },
+      "warningProperties": {
+        "warnAsError": [
+          "NU1605"
+        ]
+      },
+      "restoreAuditProperties": {
+        "enableAudit": "true",
+        "auditLevel": "low",
+        "auditMode": "direct"
+      }
+    },
+    "frameworks": {
+      "net8.0": {
+        "targetAlias": "net8.0",
+        "imports": [
+          "net461",
+          "net462",
+          "net47",
+          "net471",
+          "net472",
+          "net48",
+          "net481"
+        ],
+        "assetTargetFallback": true,
+        "warn": true,
+        "frameworkReferences": {
+          "Microsoft.AspNetCore.App": {
+            "privateAssets": "none"
+          },
+          "Microsoft.NETCore.App": {
+            "privateAssets": "all"
+          }
+        },
+        "runtimeIdentifierGraphPath": "/usr/local/share/dotnet/sdk/8.0.403/PortableRuntimeIdentifierGraph.json"
+      }
+    }
+  }
+}

package/dist/templates/webapp-ecs-dotnet/apps/api/obj/project.nuget.cache

@@ -0,0 +1,8 @@
+{
+  "version": 2,
+  "dgSpecHash": "ASDKz60ePsw=",
+  "success": true,
+  "projectFilePath": "/Users/alejandro.lopez/code/phila-ctl/templates/webapp-ecs-dotnet/apps/api/Api.csproj",
+  "expectedPackageFiles": [],
+  "logs": []
+}

package/dist/templates/webapp-ecs-dotnet/cdk/app.ts.tmpl

@@ -0,0 +1,60 @@
+#!/usr/bin/env node
+import 'source-map-support/register';
+import * as path from 'path';
+import { App, Aspects, Stack } from 'aws-cdk-lib';
+import * as ecs from 'aws-cdk-lib/aws-ecs';
+import { AwsSolutionsChecks, NIST80053R5Checks } from 'cdk-nag';
+import { StaticSite, EcsApi, Confidentiality, Environment } from '@phila/constructs';
+
+const app = new App();
+
+// Environment is determined by CDK context
+const environment = app.node.tryGetContext('environment') as Environment;
+
+if (!environment) {
+  throw new Error('Environment must be specified via context. Use: cdk deploy -c environment=dev');
+}
+
+// Read compliance frameworks from context
+const compliance = app.node.tryGetContext('compliance');
+const complianceFrameworks = compliance ? compliance.split(',') : [];
+
+// Application context with governance metadata
+const context = {
+  appName: '{{appName}}',
+  environment,
+  department: '{{department}}',
+  team: '{{team}}',
+  contact: '{{contact}}',
+  compliance: complianceFrameworks,
+  confidentiality: Confidentiality.{{CONFIDENTIALITY}},
+};
+
+// Stack name follows pattern: {appName}-{environment}
+const stack = new Stack(app, '{{appName}}-' + environment, {
+  env: {
+    account: process.env.CDK_DEFAULT_ACCOUNT,
+    region: process.env.CDK_DEFAULT_REGION || 'us-east-1',
+  },
+  stackName: '{{appName}}-' + environment,
+});
+
+// Create the StaticSite construct for the Nuxt frontend
+new StaticSite(stack, '{{appName}}Site', {
+  ...context,
+  assetDir: '../frontend/dist',
+});
+
+// Create the EcsApi construct for the containerized .NET API backend
+new EcsApi(stack, '{{appName}}Api', {
+  ...context,
+  apiId: 'api',
+  image: ecs.ContainerImage.fromAsset(path.join(__dirname, '../apps/api')),
+  containerPort: 80,
+});
+
+// Apply compliance checks
+Aspects.of(app).add(new NIST80053R5Checks({ verbose: true }));
+Aspects.of(app).add(new AwsSolutionsChecks({ verbose: true }));
+
+app.synth();

package/dist/templates/webapp-ecs-dotnet/cdk/cdk.json

@@ -0,0 +1,38 @@
+{
+  "app": "npx ts-node --prefer-ts-exts app.ts",
+  "watch": {
+    "include": ["**"],
+    "exclude": [
+      "README.md",
+      "cdk*.json",
+      "**/*.d.ts",
+      "**/*.js",
+      "tsconfig.json",
+      "package*.json",
+      "node_modules",
+      "test"
+    ]
+  },
+  "context": {
+    "@aws-cdk/aws-lambda:recognizeLayerVersion": true,
+    "@aws-cdk/core:checkSecretUsage": true,
+    "@aws-cdk/core:target-partitions": ["aws", "aws-cn"],
+    "@aws-cdk-containers/ecs-service-extensions:enableDefaultLogDriver": true,
+    "@aws-cdk/aws-ec2:uniqueImdsv2TemplateName": true,
+    "@aws-cdk/aws-ecs:arnFormatIncludesClusterName": true,
+    "@aws-cdk/aws-iam:minimizePolicies": true,
+    "@aws-cdk/core:validateSnapshotRemovalPolicy": true,
+    "@aws-cdk/aws-codepipeline:crossAccountKeyAliasStackSafeResourceName": true,
+    "@aws-cdk/aws-s3:createDefaultLoggingPolicy": true,
+    "@aws-cdk/aws-sns-subscriptions:restrictSqsDescryption": true,
+    "@aws-cdk/aws-apigateway:disableCloudWatchRole": true,
+    "@aws-cdk/core:enablePartitionLiterals": true,
+    "@aws-cdk/aws-events:eventsTargetQueueSameAccount": true,
+    "@aws-cdk/aws-iam:standardizedServicePrincipals": true,
+    "@aws-cdk/aws-ecs:disableExplicitDeploymentControllerForCircuitBreaker": true,
+    "@aws-cdk/aws-iam:importedRoleStackSafeDefaultPolicyName": true,
+    "@aws-cdk/aws-s3:serverAccessLogsUseBucketPolicy": true,
+    "@aws-cdk/aws-route53-patters:useCertificate": true,
+    "@aws-cdk/customresources:installLatestAwsSdkDefault": false
+  }
+}

package/dist/templates/webapp-ecs-dotnet/cdk/tsconfig.json

@@ -0,0 +1,25 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "commonjs",
+    "lib": ["ES2022"],
+    "declaration": true,
+    "strict": true,
+    "noImplicitAny": true,
+    "strictNullChecks": true,
+    "noImplicitThis": true,
+    "alwaysStrict": true,
+    "noUnusedLocals": false,
+    "noUnusedParameters": false,
+    "noImplicitReturns": true,
+    "noFallthroughCasesInSwitch": false,
+    "inlineSourceMap": true,
+    "inlineSources": true,
+    "experimentalDecorators": true,
+    "strictPropertyInitialization": false,
+    "outDir": "./dist",
+    "rootDir": "./"
+  },
+  "include": ["./*.ts"],
+  "exclude": ["node_modules", "cdk.out"]
+}

package/dist/templates/webapp-ecs-dotnet/package.json.tmpl

@@ -0,0 +1,23 @@
+{
+  "name": "{{appName}}",
+  "version": "1.0.0",
+  "description": "Web application with Nuxt frontend and .NET ECS containerized API backend",
+  "private": true,
+  "scripts": {
+    "build": "npm run build:frontend && npm run build:api",
+    "build:frontend": "cd frontend && npm run build",
+    "build:api": "cd apps/api && docker build -t {{appName}}-api .",
+    "dev": "cd frontend && npm run dev",
+    "test": "npm test --workspaces --if-present",
+    "synth": "cd cdk && cdk synth",
+    "deploy": "cd cdk && cdk deploy",
+    "diff": "cd cdk && cdk diff"
+  },
+  "workspaces": [
+    "cdk",
+    "frontend"
+  ],
+  "devDependencies": {
+    "typescript": "^5.3.0"
+  }
+}

package/dist/templates/webapp-ecs-dotnet/tsconfig.json

@@ -0,0 +1,26 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "commonjs",
+    "lib": ["ES2022"],
+    "declaration": true,
+    "strict": true,
+    "noImplicitAny": true,
+    "strictNullChecks": true,
+    "noImplicitThis": true,
+    "alwaysStrict": true,
+    "noUnusedLocals": false,
+    "noUnusedParameters": false,
+    "noImplicitReturns": true,
+    "noFallthroughCasesInSwitch": false,
+    "inlineSourceMap": true,
+    "inlineSources": true,
+    "experimentalDecorators": true,
+    "strictPropertyInitialization": false,
+    "skipLibCheck": true,
+    "esModuleInterop": true,
+    "resolveJsonModule": true,
+    "forceConsistentCasingInFileNames": true
+  },
+  "exclude": ["node_modules", "cdk", "apps", "frontend"]
+}

package/dist/templates/webapp-ecs-node/README.md.tmpl

@@ -0,0 +1,207 @@
+# {{appName}}
+
+Web application with Nuxt SSG frontend and ECS containerized API backend using Philadelphia constructs.
+
+Generated on {{timestamp}}
+
+## Architecture
+
+![Architecture Diagram](https://github.com/CityOfPhiladelphia/phila-ctl/blob/main/packages/constructs/docs/diagrams/webapp-ecs.drawio)
+
+View the [architecture diagram](https://github.com/CityOfPhiladelphia/phila-ctl/blob/main/packages/constructs/docs/diagrams/webapp-ecs.drawio) in draw.io or VS Code with the Draw.io extension.
+
+## Quick Start
+
+### Prerequisites
+
+- Node.js 20+
+- Docker (for building container images)
+- AWS CLI configured with SSO
+- AWS profile named `phila-{{appName}}`
+
+### Setup
+
+```bash
+# Install dependencies
+npm install
+
+# Build all packages
+npm run build
+```
+
+### Development
+
+```bash
+# Run frontend dev server
+npm run dev
+
+# Run API locally (requires Docker)
+cd apps/api && npm run dev
+
+# Build frontend for production
+npm run build:frontend
+
+# Build API Docker image
+npm run build:api
+```
+
+### Deployment
+
+```bash
+# Configure AWS profile
+export AWS_PROFILE=phila-{{appName}}
+
+# Deploy to dev environment
+city deploy dev
+
+# Deploy to test environment
+city deploy test
+
+# Deploy to production (requires confirmation)
+city deploy prod
+```
+
+### Shipping Updates
+
+```bash
+# Ship frontend changes to S3/CloudFront
+city ship dev --web
+
+# Ship API changes (rebuilds and deploys ECS container)
+city ship dev --ecs api
+```
+
+## Project Structure
+
+```
+.
+├── cdk/                    # CDK infrastructure code
+│   └── app.ts              # Main CDK application
+├── frontend/               # Nuxt 3 SSG frontend
+│   ├── pages/              # File-based routing
+│   ├── app.vue             # Root component
+│   └── nuxt.config.ts      # Nuxt configuration
+├── apps/                   # Backend code
+│   └── api/                # Express API container
+│       ├── index.ts        # API routes
+│       └── Dockerfile      # Container build file
+└── city.config.json        # City CLI configuration
+```
+
+## Frontend
+
+The frontend uses [Nuxt 3](https://nuxt.com) with Static Site Generation (SSG):
+
+- Pre-renders to static HTML for S3/CloudFront
+- File-based routing in `pages/` directory
+- TypeScript support enabled
+
+### Adding Pages
+
+Create Vue files in `frontend/pages/`:
+
+```vue
+<!-- frontend/pages/about.vue -->
+<template>
+  <div>
+    <h1>About</h1>
+  </div>
+</template>
+```
+
+This automatically creates a route at `/about`.
+
+## API
+
+The API uses [Express](https://expressjs.com/) running in an ECS Fargate container behind an Application Load Balancer.
+
+### Adding Endpoints
+
+Edit `apps/api/index.ts`:
+
+```typescript
+app.get('/users', (req, res) => {
+  res.json({ users: [] });
+});
+```
+
+### Environment Variables
+
+ECS containers automatically receive:
+- `APP_NAME` - Application name ({{appName}})
+- `ENVIRONMENT` - Current environment (dev/test/prod)
+
+### Local Development
+
+Run the API locally:
+
+```bash
+cd apps/api
+npm run dev
+```
+
+Or build and run the Docker container:
+
+```bash
+cd apps/api
+docker build -t {{appName}}-api .
+docker run -p 80:80 -e APP_NAME={{appName}} -e ENVIRONMENT=dev {{appName}}-api
+```
+
+## Resources Created
+
+This application creates:
+
+**Frontend:**
+- **S3 Bucket** - Static asset storage
+- **CloudFront Distribution** - CDN with HTTPS
+- **Origin Access Control** - Secure S3 access
+
+**API:**
+- **ECS Fargate Service** - Containerized compute
+- **Application Load Balancer** - HTTP/HTTPS ingress
+- **ECS Cluster** - Container orchestration
+- **ECR Repository** - Docker image storage
+- **VPC Security Groups** - Network security
+- **IAM Roles** - Task execution permissions
+
+**Shared:**
+- **SSM Parameters** - Resource discovery
+- **CloudWatch Logs** - Application logs
+- **KMS Keys** - Encryption
+
+## URLs
+
+After deployment, URLs are available via:
+
+```bash
+# Frontend URL
+city config list --env dev | grep cloudfront
+
+# API URL (ALB endpoint)
+city config list --env dev | grep ecs-api
+```
+
+## Adding a Database
+
+To add a database, use one of these templates instead:
+- `webapp-ecs-postgres-node` - For PostgreSQL
+
+## Scaling
+
+ECS automatically adjusts:
+- **Dev**: 1 container instance
+- **Test/Prod**: 2+ container instances with auto-scaling
+
+Container resources default to:
+- CPU: 256 units (0.25 vCPU)
+- Memory: 512 MB
+
+Adjust in `cdk/app.ts` by passing `cpu` and `memoryLimitMiB` props to `EcsApi`.
+
+## Support
+
+For issues or questions:
+- [Philadelphia Infrastructure Library Documentation](https://github.com/CityOfPhiladelphia/phila-ctl)
+- [Express Documentation](https://expressjs.com/)
+- [Nuxt Documentation](https://nuxt.com/docs)

package/dist/templates/webapp-ecs-node/apps/api/Dockerfile

@@ -0,0 +1,33 @@
+# ABOUTME: Multi-stage Docker build for Express API
+# ABOUTME: Creates minimal production image with compiled TypeScript
+
+# Build stage
+FROM node:20-alpine AS builder
+
+WORKDIR /app
+
+COPY package*.json ./
+RUN npm ci
+
+COPY tsconfig.json ./
+COPY *.ts ./
+RUN npm run build
+
+# Production stage
+FROM node:20-alpine
+
+WORKDIR /app
+
+# Copy package files and install production dependencies only
+COPY package*.json ./
+RUN npm ci --omit=dev
+
+# Copy compiled JavaScript from builder
+COPY --from=builder /app/dist ./dist
+
+# Run as non-root user for security
+USER node
+
+EXPOSE 80
+
+CMD ["node", "dist/index.js"]

package/dist/templates/webapp-ecs-node/apps/api/index.ts

@@ -0,0 +1,74 @@
+// ABOUTME: Express API server for ECS container deployment
+// ABOUTME: Provides REST endpoints for the web application backend
+
+import express, { Request, Response, NextFunction } from 'express';
+import cors from 'cors';
+
+const app = express();
+const PORT = process.env.PORT || 80;
+
+// Middleware
+app.use(cors());
+app.use(express.json());
+
+// Request logging
+app.use((req: Request, _res: Response, next: NextFunction) => {
+  console.log(`${new Date().toISOString()} ${req.method} ${req.path}`);
+  next();
+});
+
+// Health check endpoint (required for ALB health checks)
+app.get('/health', (_req: Request, res: Response) => {
+  res.json({
+    status: 'healthy',
+    timestamp: new Date().toISOString(),
+  });
+});
+
+// Hello world endpoint
+app.get('/hello', (req: Request, res: Response) => {
+  const name = req.query.name || 'World';
+  res.json({
+    message: `Hello, ${name}!`,
+    appName: process.env.APP_NAME,
+    environment: process.env.ENVIRONMENT,
+    timestamp: new Date().toISOString(),
+  });
+});
+
+// Example POST endpoint
+app.post('/items', (req: Request, res: Response) => {
+  const body = req.body;
+  console.log('Creating item:', body);
+
+  res.status(201).json({
+    message: 'Item created',
+    item: body,
+  });
+});
+
+// Example GET with path parameter
+app.get('/items/:id', (req: Request, res: Response) => {
+  const { id } = req.params;
+
+  res.json({
+    id,
+    message: `Retrieved item ${id}`,
+  });
+});
+
+// Error handler
+app.use((err: Error, _req: Request, res: Response, _next: NextFunction) => {
+  console.error('Error:', err);
+  res.status(500).json({
+    error: 'Internal Server Error',
+    message: err.message,
+  });
+});
+
+// Start server
+app.listen(PORT, () => {
+  console.log(`Server running on port ${PORT}`);
+  console.log(`APP_NAME: ${process.env.APP_NAME}`);
+  console.log(`ENVIRONMENT: ${process.env.ENVIRONMENT}`);
+});

package/dist/templates/webapp-ecs-node/apps/api/package.json

@@ -0,0 +1,22 @@
+{
+  "name": "api",
+  "version": "1.0.0",
+  "private": true,
+  "main": "dist/index.js",
+  "scripts": {
+    "build": "tsc",
+    "start": "node dist/index.js",
+    "dev": "ts-node index.ts"
+  },
+  "dependencies": {
+    "cors": "^2.8.5",
+    "express": "^4.18.2"
+  },
+  "devDependencies": {
+    "@types/cors": "^2.8.17",
+    "@types/express": "^4.17.21",
+    "@types/node": "^20.10.0",
+    "ts-node": "^10.9.0",
+    "typescript": "^5.3.0"
+  }
+}

package/dist/templates/webapp-ecs-node/apps/api/tsconfig.json

@@ -0,0 +1,18 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "commonjs",
+    "lib": ["ES2022"],
+    "outDir": "./dist",
+    "rootDir": "./",
+    "strict": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "forceConsistentCasingInFileNames": true,
+    "declaration": true,
+    "declarationMap": true,
+    "sourceMap": true
+  },
+  "include": ["*.ts"],
+  "exclude": ["node_modules", "dist"]
+}