@powerhousedao/ph-cli 6.0.0-dev.29 → 6.0.0-dev.30

package/dist/scripts/generate-commands-docs.ts

@@ -0,0 +1,45 @@
+import { writeCliDocsMarkdownFile } from "@powerhousedao/codegen/file-builders";
+import { accessToken } from "../src/commands/access-token.js";
+import { build, connect, preview, studio } from "../src/commands/connect.js";
+import { generate } from "../src/commands/generate.js";
+import { inspect } from "../src/commands/inspect.js";
+import { install } from "../src/commands/install.js";
+import { list } from "../src/commands/list.js";
+import { login } from "../src/commands/login.js";
+import { migrate } from "../src/commands/migrate.js";
+import { phCli } from "../src/commands/ph-cli.js";
+import { switchboard } from "../src/commands/switchboard.js";
+import { uninstall } from "../src/commands/uninstall.js";
+import { vetra } from "../src/commands/vetra.js";
+
+const commands = [
+  { name: "generate", command: generate },
+  { name: "vetra", command: vetra },
+  { name: "connect", command: connect },
+  { name: "connect studio", command: studio },
+  { name: "connect build", command: build },
+  { name: "connect preview", command: preview },
+  { name: "access token", command: accessToken },
+  { name: "inspect", command: inspect },
+  { name: "list", command: list },
+  { name: "migrate", command: migrate },
+  { name: "switchboard", command: switchboard },
+  { name: "login", command: login },
+  { name: "install", command: install },
+  { name: "uninstall", command: uninstall },
+];
+
+const cliDescription = phCli.description ?? "";
+
+async function main() {
+  await writeCliDocsMarkdownFile({
+    filePath: "COMMANDS.md",
+    docsTitle: `Powerhouse CLI Commands (${process.env.WORKSPACE_VERSION || process.env.npm_package_version})`,
+    docsIntroduction:
+      "This document provides detailed information about the available commands in the Powerhouse CLI.",
+    cliDescription,
+    entries: commands,
+  });
+}
+
+await main();

package/dist/scripts/generate-docs-legacy.ts

@@ -0,0 +1,84 @@
+import * as fs from "fs";
+import * as path from "path";
+import { fileURLToPath } from "url";
+
+/**
+ * Generate COMMANDS.md file from the help texts in help.ts
+ */
+async function generateCommandsMd() {
+  try {
+    // Define paths for ES modules
+    const __filename = fileURLToPath(import.meta.url);
+    const __dirname = path.dirname(__filename);
+    const rootDir = path.resolve(__dirname, "..");
+    const helpFilePath = path.join(rootDir, "src", "help.ts");
+    const outputPath = path.join(rootDir, "COMMANDS-LEGACY.md");
+
+    // Read the help.ts file
+    const helpFileContent = fs.readFileSync(helpFilePath, "utf8");
+
+    // Extract all help text constants using regex
+    const helpTextRegex = /export const (\w+)Help = `([\s\S]+?)`;/g;
+    const commands: { name: string; content: string }[] = [];
+
+    let match;
+    while ((match = helpTextRegex.exec(helpFileContent)) !== null) {
+      const commandName = match[1];
+      const helpContent = match[2];
+      commands.push({ name: commandName, content: helpContent });
+    }
+
+    // Sort commands alphabetically
+    commands.sort((a, b) => a.name.localeCompare(b.name));
+
+    // Generate the markdown content
+    let markdown = "# Powerhouse CLI Commands\n\n";
+    markdown +=
+      "This document provides detailed information about the available commands in the Powerhouse CLI.\n\n";
+    markdown += "## Table of Contents\n\n";
+
+    // Add table of contents
+    commands.forEach((command) => {
+      const displayName = formatCommandName(command.name);
+      const anchor = displayName.toLowerCase().replace(/\s+/g, "-");
+      markdown += `- [${displayName}](#${anchor})\n`;
+    });
+
+    markdown += "\n";
+
+    // Add command details
+    commands.forEach((command) => {
+      const displayName = formatCommandName(command.name);
+      markdown += `## ${displayName}\n\n`;
+      markdown += "```\n";
+      markdown += command.content.trim();
+      markdown += "\n```\n\n";
+    });
+
+    // Add footer
+    markdown += "---\n\n";
+    markdown +=
+      "*This document was automatically generated from the help text in the codebase.*\n";
+
+    // Write to COMMANDS.md
+    fs.writeFileSync(outputPath, markdown);
+
+    console.log(`✅ COMMANDS.md has been generated at ${outputPath}`);
+  } catch (error) {
+    console.error("Failed to generate COMMANDS.md:", error);
+    process.exit(1);
+  }
+}
+
+/**
+ * Format command name for display (e.g., "setupGlobals" -> "Setup Globals")
+ */
+function formatCommandName(commandName: string): string {
+  // Convert camelCase to separate words with spaces
+  const name = commandName.replace(/([A-Z])/g, " $1").trim();
+  // Capitalize first letter and convert the rest to lowercase
+  return name.charAt(0).toUpperCase() + name.slice(1);
+}
+
+// Run the script
+generateCommandsMd();

package/dist/scripts/generate-version.ts

@@ -0,0 +1,22 @@
+import { readFileSync, writeFileSync } from "fs";
+import { join } from "path";
+import { fileURLToPath } from "url";
+
+interface PackageJson {
+  version: string;
+}
+
+const __dirname = fileURLToPath(new URL(".", import.meta.url));
+
+// Read package.json
+const packageJson = JSON.parse(
+  readFileSync(join(__dirname, "../package.json"), "utf-8"),
+) as PackageJson;
+
+// Generate version.ts content
+const versionFileContent = `// This file is auto-generated. DO NOT EDIT.
+export const version = "${packageJson.version}";
+`;
+
+// Write version.ts
+writeFileSync(join(__dirname, "../src/version.ts"), versionFileContent);

package/dist/scripts/manage-environment

@@ -0,0 +1,199 @@
+#!/usr/bin/env bash
+
+# =============================================================================
+# Configuration
+# =============================================================================
+PROJECT_NAME=${1:-"global"}
+ACTION=${2:-"status"}
+
+# Nginx config file name - remove leading dot to avoid hidden file issues
+# (nginx's include directive with * glob doesn't match hidden files)
+NGINX_CONFIG_NAME="${PROJECT_NAME#.}"
+if [ "$NGINX_CONFIG_NAME" = "" ]; then
+    NGINX_CONFIG_NAME="default-ph"
+fi
+
+# Get Switchboard port from .env or use default
+if [ -f ".env" ]; then
+    SWITCHBOARD_PORT=$(grep "SWITCHBOARD_PORT=" .env | cut -d'=' -f2)
+fi
+SWITCHBOARD_PORT=${SWITCHBOARD_PORT:-4001}
+
+# =============================================================================
+# OS Detection and Windows Handling
+# =============================================================================
+if [[ "$OSTYPE" == "msys" || "$OSTYPE" == "win32" ]]; then
+    if [ -f "$0.ps1" ]; then
+        powershell -ExecutionPolicy Bypass -File "$0.ps1" -PROJECT_NAME "$PROJECT_NAME" -ACTION "$ACTION"
+    else
+        echo "Error: Windows management script (manage-environment.ps1) not found"
+        exit 1
+    fi
+else
+    # =============================================================================
+    # Service Management
+    # =============================================================================
+    echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+    echo "  Managing project: $PROJECT_NAME"
+    echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+
+    # Function to check if service is properly set up
+    check_setup() {
+        local project_name=$1
+        local error=0
+
+        # Check if .env file exists
+        if [ ! -f ".env" ]; then
+            echo "Error: .env file not found in project directory"
+            error=1
+        fi
+
+        # Check if Nginx configuration exists
+        if [ ! -f "/etc/nginx/sites-available/$NGINX_CONFIG_NAME" ]; then
+            echo "Error: Nginx configuration not found at /etc/nginx/sites-available/$NGINX_CONFIG_NAME"
+            error=1
+        fi
+
+        # Check if database is configured
+        if ! grep -q "DATABASE_URL" ".env"; then
+            echo "Error: Database configuration not found in .env file"
+            error=1
+        fi
+
+        if [ $error -eq 1 ]; then
+            echo "Please run 'ph setup-environment' first to set up the service"
+            exit 1
+        fi
+    }
+
+    # Function to enable/disable Nginx site
+    manage_nginx_site() {
+        local action=$1
+        local site_path="/etc/nginx/sites-available/$NGINX_CONFIG_NAME"
+        local enabled_path="/etc/nginx/sites-enabled/$NGINX_CONFIG_NAME"
+
+        if [ ! -f "$site_path" ]; then
+            echo "Error: Nginx site configuration for $NGINX_CONFIG_NAME not found"
+            return 1
+        fi
+        
+        case "$action" in
+            "enable")
+                if [ ! -L "$enabled_path" ]; then
+                    sudo ln -sf "$site_path" "$enabled_path"
+                    sudo nginx -t && sudo nginx -s reload
+                fi
+                ;;
+            "disable")
+                if [ -L "$enabled_path" ]; then
+                    sudo rm -f "$enabled_path"
+                    sudo nginx -t && sudo nginx -s reload
+                fi
+                ;;
+        esac
+    }
+
+    # Function to start services
+    start_services() {
+        check_setup "$PROJECT_NAME"
+        echo "Starting services..."
+        # Build Connect
+        echo "Building Connect..."
+        ph connect build
+        sudo rm -rf /var/www/html/${PROJECT_NAME}
+        sudo mkdir -p /var/www/html/${PROJECT_NAME}
+        sudo cp -r .ph/connect-build/dist/* /var/www/html/${PROJECT_NAME}/
+        
+        # Enable Nginx site
+        manage_nginx_site "enable"
+        
+        # Start Switchboard via PM2
+        if ! pm2 list | grep -q "switchboard_${PROJECT_NAME}"; then
+            cd $PROJECT_NAME
+            pm2 start "pnpm switchboard --port $SWITCHBOARD_PORT" --name "switchboard_${PROJECT_NAME}"
+            pm2 save
+        else
+            pm2 start "switchboard_${PROJECT_NAME}"
+        fi
+    }
+
+    # Function to stop services
+    stop_services() {
+        check_setup "$PROJECT_NAME"
+        echo "Stopping services..."
+        # Stop Switchboard via PM2
+        if pm2 list | grep -q "switchboard_${PROJECT_NAME}"; then
+            pm2 stop "switchboard_${PROJECT_NAME}"
+        fi
+        
+        # Disable Nginx site
+        manage_nginx_site "disable"
+    }
+
+    case "$ACTION" in
+        "start")
+            start_services
+            ;;
+            
+        "stop")
+            stop_services
+            ;;
+            
+        "restart")
+            echo "Restarting services..."
+            stop_services
+            start_services
+            ;;
+            
+        "status")
+            check_setup "$PROJECT_NAME"
+            echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+            echo "  Service Status for $PROJECT_NAME"
+            echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+            
+            # Create table header
+            printf "%-15s %-10s %-15s %-10s %-10s\n" "Service" "Status" "Memory" "Uptime" "Health"
+            echo "────────────────────────────────────────────────────────────────────"
+            
+            # Check Connect status
+            connect_status="Disabled"
+            connect_health="❌"
+            connect_memory="N/A"
+            connect_uptime="N/A"
+            if [ -L "/etc/nginx/sites-enabled/$NGINX_CONFIG_NAME" ]; then
+                connect_status="Enabled"
+                # Check if Connect is reachable
+                if curl -s -f "http://localhost/$PROJECT_NAME" > /dev/null; then
+                    connect_health="✅"
+                fi
+                # Get Nginx memory usage for the site
+                nginx_pid=$(pgrep -f "nginx.*$PROJECT_NAME" | head -n 1)
+                if [ -n "$nginx_pid" ]; then
+                    connect_memory=$(ps -o rss= -p "$nginx_pid" 2>/dev/null | awk '{printf "%.1fmb", $1/1024}')
+                    connect_uptime=$(ps -o etime= -p "$nginx_pid" 2>/dev/null)
+                fi
+            fi
+            printf "%-15s %-10s %-15s %-10s %-10s\n" "Connect" "$connect_status" "$connect_memory" "$connect_uptime" "$connect_health"
+            
+            # Check Switchboard status
+            switchboard_info=$(pm2 list | grep "switchboard_${PROJECT_NAME}")
+            if [ -n "$switchboard_info" ]; then
+                switchboard_status="Enabled"
+                switchboard_memory=$(echo "$switchboard_info" | awk '{print $12}')
+                switchboard_uptime=$(echo "$switchboard_info" | awk '{print $7}')
+                switchboard_health="✅"
+                printf "%-15s %-10s %-15s %-10s %-10s\n" "Switchboard" "$switchboard_status" "$switchboard_memory" "$switchboard_uptime" "$switchboard_health"
+            else
+                printf "%-15s %-10s %-15s %-10s %-10s\n" "Switchboard" "Disabled" "N/A" "N/A" "❌"
+            fi
+            echo "────────────────────────────────────────────────────────────────────"
+            ;;
+            
+        *)
+            echo "Usage: $0 [project_name] {start|stop|restart|status}"
+            echo "Default project_name: global"
+            echo "Default action: status"
+            exit 1
+            ;;
+    esac
+fi 

package/dist/scripts/setup-environment

@@ -0,0 +1,423 @@
+#!/usr/bin/env bash
+
+# =============================================================================
+# Configuration
+# =============================================================================
+TARGET_TAG=${1:-"latest"}
+PROJECT_NAME=${2:-"global"}
+
+# Nginx config file name - remove leading dot to avoid hidden file issues
+# (nginx's include directive with * glob doesn't match hidden files)
+NGINX_CONFIG_NAME="${PROJECT_NAME#.}"
+if [ "$NGINX_CONFIG_NAME" = "" ]; then
+    NGINX_CONFIG_NAME="default-ph"
+fi
+
+# Function to find an available port
+find_available_port() {
+    local port=4001
+    while netstat -tuln | grep -q ":$port "; do
+        port=$((port + 1))
+    done
+    echo $port
+}
+
+# =============================================================================
+# OS Detection and Windows Handling
+# =============================================================================
+if [[ "$OSTYPE" == "msys" || "$OSTYPE" == "win32" ]]; then
+    if [ -f "$0.ps1" ]; then
+        powershell -ExecutionPolicy Bypass -File "$0.ps1" -TARGET_TAG "$TARGET_TAG"
+    else
+        echo "Error: Windows setup script (setup-environment.ps1) not found"
+        exit 1
+    fi
+else
+    # =============================================================================
+    # Package Installation
+    # =============================================================================
+    sudo apt install -y postgresql postgresql-contrib nginx libnginx-mod-http-brotli-static libnginx-mod-http-brotli-filter
+    sudo sed -i 's/# gzip_vary/gzip_vary/; s/# gzip_proxied/gzip_proxied/; s/# gzip_comp_level/gzip_comp_level/; s/# gzip_buffers/gzip_buffers/; s/# gzip_http_version/gzip_http_version/; s/# gzip_types/gzip_types/' /etc/nginx/nginx.conf
+
+    # =============================================================================
+    # Interactive Package Installation
+    # =============================================================================
+    echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+    echo "  Package Installation"
+    echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+    while true; do
+        read -p "Enter package name to install (or press Enter to skip): " package_name
+        if [ -z "$package_name" ]; then
+            break
+        fi
+        ph install "$package_name"
+    done
+
+    # =============================================================================
+    # Connect Build
+    # =============================================================================
+    ph connect build
+    sudo mkdir -p /var/www/html/$PROJECT_NAME
+    sudo cp -r .ph/connect-build/dist/* /var/www/html/$PROJECT_NAME/
+
+    # =============================================================================
+    # Database Configuration
+    # =============================================================================
+    echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+    echo "  Database Configuration"
+    echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+    echo "Choose database type:"
+    echo "1) Local PostgreSQL database"
+    echo "2) Remote PostgreSQL database"
+    read -p "Enter your choice (1 or 2): " db_choice
+
+    if [ "$db_choice" = "1" ]; then
+        echo "Setting up local PostgreSQL database..."
+        
+        # Generate database credentials
+        DB_PASSWORD="powerhouse"
+        DB_USER="powerhouse"
+        # Convert to lowercase, replace dots with underscores, replace special chars with underscore, ensure starts with letter
+        DB_NAME="powerhouse_$(echo "${PROJECT_NAME}" | tr '[:upper:]' '[:lower:]' | sed 's/\./_/g' | sed 's/[^a-z0-9]/_/g' | sed 's/^[^a-z]/p_/' | cut -c1-63)"
+        
+        # Check if database already exists
+        SKIP_DB_CREATE=false
+        if sudo -u postgres psql -lqt | cut -d \| -f 1 | grep -qw $DB_NAME; then
+            echo "Database $DB_NAME already exists"
+            read -p "Do you want to recreate it? (y/n): " recreate_db
+            if [ "$recreate_db" = "y" ]; then
+                sudo -u postgres psql -c "DROP DATABASE $DB_NAME;"
+            else
+                echo "Using existing database"
+                SKIP_DB_CREATE=true
+            fi
+        fi
+
+        # Create user if it doesn't exist
+        sudo -u postgres psql << EOF
+DO
+\$do\$
+BEGIN
+   IF NOT EXISTS (SELECT FROM pg_catalog.pg_roles WHERE rolname = '$DB_USER') THEN
+      CREATE USER $DB_USER WITH PASSWORD '$DB_PASSWORD';
+   END IF;
+END
+\$do\$;
+EOF
+
+        # Create database if needed
+        if [ "$SKIP_DB_CREATE" = "false" ]; then
+            sudo -u postgres psql -c "CREATE DATABASE $DB_NAME OWNER $DB_USER;"
+        fi
+
+        # Grant privileges
+        sudo -u postgres psql -c "GRANT ALL PRIVILEGES ON DATABASE $DB_NAME TO $DB_USER;"
+        
+        # Configure PostgreSQL
+        sudo sed -i "s/#listen_addresses = 'localhost'/listen_addresses = 'localhost'/" /etc/postgresql/*/main/postgresql.conf
+        
+        # Set DATABASE_URL for local database
+        DATABASE_URL="postgresql://$DB_USER:$DB_PASSWORD@localhost:5432/$DB_NAME"
+        
+        echo "Local database configured successfully!"
+        echo "Database URL: $DATABASE_URL"
+        echo "Please save these credentials securely!"
+    else
+        echo "Enter remote PostgreSQL URL (format: postgresql://user:password@host:port/db)"
+        echo "Example: postgresql://powerhouse:password@db.example.com:5432/powerhouse"
+        read -p "DATABASE_URL: " DATABASE_URL
+    fi
+
+    # Save DATABASE_URL to .env file (update if exists, append if not)
+    if grep -q "^DATABASE_URL=" .env 2>/dev/null; then
+        sudo sed -i "s|^DATABASE_URL=.*|DATABASE_URL=$DATABASE_URL|" .env
+    else
+        echo "DATABASE_URL=$DATABASE_URL" | sudo tee -a .env
+    fi
+
+    # =============================================================================
+    # SSL Configuration
+    # =============================================================================
+    echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+    echo "  SSL Configuration"
+    echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+
+    # Find an available port for Switchboard
+    SWITCHBOARD_PORT=$(find_available_port)
+    echo "Using port $SWITCHBOARD_PORT for Switchboard"
+
+    # Save Switchboard port to configuration (update if exists, append if not)
+    if grep -q "^SWITCHBOARD_PORT=" .env 2>/dev/null; then
+        sudo sed -i "s|^SWITCHBOARD_PORT=.*|SWITCHBOARD_PORT=$SWITCHBOARD_PORT|" .env
+    else
+        echo "SWITCHBOARD_PORT=$SWITCHBOARD_PORT" | sudo tee -a .env
+    fi
+
+    # Add compression settings to nginx.conf if not exists
+    if ! grep -q "brotli_comp_level" /etc/nginx/nginx.conf || ! grep -q "gzip_comp_level" /etc/nginx/nginx.conf; then
+        echo "Adding compression settings to nginx.conf..."
+        # Find the http block in nginx.conf
+        if ! grep -q "brotli_comp_level" /etc/nginx/nginx.conf; then
+            sudo sed -i '/http {/a \    # Brotli compression\n    brotli on;\n    brotli_comp_level 6;\n    brotli_types text/plain text/css application/javascript application/json image/svg+xml application/xml+rss;\n    brotli_static on;' /etc/nginx/nginx.conf
+        fi
+        if ! grep -q "gzip_comp_level" /etc/nginx/nginx.conf; then
+            sudo sed -i '/http {/a \    # Gzip compression\n    gzip on;\n    gzip_vary on;\n    gzip_proxied any;\n    gzip_comp_level 6;\n    gzip_buffers 16 8k;\n    gzip_http_version 1.1;\n    gzip_types text/plain text/css application/javascript application/json image/svg+xml application/xml+rss;' /etc/nginx/nginx.conf
+        fi
+    else
+        echo "Compression settings already present in nginx.conf"
+    fi
+
+    
+
+    echo "Choose SSL configuration:"
+    echo "1) Let's Encrypt certificates for domains"
+    echo "2) Self-signed certificate for machine hostname"
+    read -p "Enter your choice (1 or 2): " ssl_choice
+
+    if [ "$ssl_choice" = "1" ]; then
+        # Install certbot
+        sudo apt install -y certbot python3-certbot-nginx
+        
+        # =============================================================================
+        # Domain Setup
+        # =============================================================================
+        echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+        echo "  Domain Setup"
+        echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+        read -p "Enter Connect domain (e.g. connect.google.com): " connect_domain
+        read -p "Enter Switchboard domain (e.g. switchboard.google.com): " switchboard_domain
+        read -p "Enter admin email for Let's Encrypt notifications: " admin_email
+
+        echo "Using domains:"
+        echo "Connect: $connect_domain"
+        echo "Switchboard: $switchboard_domain"
+
+        # Create initial Nginx configuration for certbot
+        echo "Creating initial Nginx configuration..."
+        sudo tee /etc/nginx/sites-available/$NGINX_CONFIG_NAME > /dev/null << EOF
+server {
+    listen 80;
+    server_name $connect_domain $switchboard_domain;
+    
+    location / {
+        root /var/www/html/$PROJECT_NAME;
+        try_files \$uri \$uri/ /index.html;
+    }
+
+    location /.well-known/acme-challenge/ {
+        root /var/www/html;
+    }
+}
+EOF
+
+        # Enable the site
+        sudo ln -sf /etc/nginx/sites-available/$NGINX_CONFIG_NAME /etc/nginx/sites-enabled/
+        sudo rm -f /etc/nginx/sites-enabled/default
+
+        # Test Nginx configuration
+        sudo nginx -t
+
+        # Restart Nginx to apply changes
+        sudo systemctl restart nginx
+
+        # Obtain SSL certificates
+        echo "Obtaining SSL certificates..."
+        sudo certbot --nginx -d $connect_domain --non-interactive --agree-tos --email $admin_email --redirect
+        sudo certbot --nginx -d $switchboard_domain --non-interactive --agree-tos --email $admin_email --redirect
+
+        # Wait for certbot to finish and certificates to be installed
+        sleep 5
+
+        # Check if certificates were installed
+        if [ ! -f "/etc/letsencrypt/live/$connect_domain/fullchain.pem" ] || [ ! -f "/etc/letsencrypt/live/$switchboard_domain/fullchain.pem" ]; then
+            echo "Error: SSL certificates were not installed properly"
+            echo "Please check the certbot logs at /var/log/letsencrypt/letsencrypt.log"
+            exit 1
+        fi
+
+        # Update Nginx configuration with proper SSL settings
+        echo "Updating Nginx configuration with SSL settings..."
+        sudo tee /etc/nginx/sites-available/$NGINX_CONFIG_NAME > /dev/null << EOF
+server {
+    listen 80;
+    server_name $connect_domain $switchboard_domain;
+    return 301 https://\$host\$request_uri;
+}
+
+server {
+    listen 443 ssl;
+    http2 on;
+    server_name $connect_domain;
+    
+    ssl_certificate /etc/letsencrypt/live/$connect_domain/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/$connect_domain/privkey.pem;
+    
+    # SSL configuration
+    ssl_protocols TLSv1.2 TLSv1.3;
+    ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
+    ssl_prefer_server_ciphers off;
+    ssl_session_timeout 1d;
+    ssl_session_cache shared:SSL:50m;
+    ssl_session_tickets off;
+    ssl_stapling on;
+    ssl_stapling_verify on;
+    resolver 8.8.8.8 8.8.4.4 valid=300s;
+    resolver_timeout 5s;
+
+    # Security headers
+    add_header Strict-Transport-Security "max-age=63072000" always;
+    add_header X-Frame-Options DENY;
+    add_header X-Content-Type-Options nosniff;
+    add_header X-XSS-Protection "1; mode=block";
+
+    if (\$http_x_forwarded_proto = "http") {
+        return 301 https://\$server_name\$request_uri;
+    }
+    
+    location / {
+        root /var/www/html/$PROJECT_NAME;
+        try_files \$uri \$uri/ /index.html;
+        add_header Cache-Control "no-cache";
+        add_header X-Forwarded-Proto \$scheme;
+        add_header X-Forwarded-Host \$host;
+        add_header X-Forwarded-Port \$server_port;
+    }
+
+    location /.well-known/acme-challenge/ {
+        root /var/www/html;
+    }
+}
+
+server {
+    listen 443 ssl;
+    http2 on;
+    server_name $switchboard_domain;
+    
+    ssl_certificate /etc/letsencrypt/live/$switchboard_domain/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/$switchboard_domain/privkey.pem;
+    
+    # SSL configuration
+    ssl_protocols TLSv1.2 TLSv1.3;
+    ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
+    ssl_prefer_server_ciphers off;
+    ssl_session_timeout 1d;
+    ssl_session_cache shared:SSL:50m;
+    ssl_session_tickets off;
+    ssl_stapling on;
+    ssl_stapling_verify on;
+    resolver 8.8.8.8 8.8.4.4 valid=300s;
+    resolver_timeout 5s;
+
+    # Security headers
+    add_header Strict-Transport-Security "max-age=63072000" always;
+    add_header X-Frame-Options DENY;
+    add_header X-Content-Type-Options nosniff;
+    add_header X-XSS-Protection "1; mode=block";
+    
+    location / {
+        proxy_pass http://localhost:$SWITCHBOARD_PORT;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade \$http_upgrade;
+        proxy_set_header Connection 'upgrade';
+        proxy_set_header Host \$host;
+        proxy_cache_bypass \$http_upgrade;
+        proxy_set_header X-Real-IP \$remote_addr;
+        proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto \$scheme;
+    }
+
+    location /.well-known/acme-challenge/ {
+        root /var/www/html;
+    }
+}
+EOF
+
+        # Test and reload Nginx configuration
+        sudo nginx -t && sudo systemctl reload nginx
+
+        # Set up automatic renewal
+        echo "Setting up automatic certificate renewal..."
+        sudo systemctl enable certbot.timer
+        sudo systemctl start certbot.timer
+
+    else
+        # Get machine hostname
+        hostname=$(hostname)
+        
+        # Generate self-signed certificate
+        echo "Generating self-signed certificate for $hostname..."
+        sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 \
+            -keyout /etc/ssl/private/$hostname.key \
+            -out /etc/ssl/certs/$hostname.crt \
+            -subj "/CN=$hostname" \
+            -addext "subjectAltName = DNS:$hostname"
+
+        # Create Nginx configuration for self-signed
+        echo "Creating Nginx configuration..."
+        sudo tee /etc/nginx/sites-available/$NGINX_CONFIG_NAME > /dev/null << EOF
+server {
+    listen 80;
+    server_name $hostname;
+    return 301 https://\$host\$request_uri;
+}
+
+server {
+    listen 443 ssl;
+    http2 on;
+    server_name $hostname;
+
+    ssl_certificate /etc/ssl/certs/$hostname.crt;
+    ssl_certificate_key /etc/ssl/private/$hostname.key;
+
+    # SSL configuration
+    ssl_protocols TLSv1.2 TLSv1.3;
+    ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
+    ssl_prefer_server_ciphers off;
+    ssl_session_timeout 1d;
+    ssl_session_cache shared:SSL:50m;
+    ssl_session_tickets off;
+
+    # Security headers
+    add_header Strict-Transport-Security "max-age=63072000" always;
+    add_header X-Frame-Options DENY;
+    add_header X-Content-Type-Options nosniff;
+    add_header X-XSS-Protection "1; mode=block";
+
+    location / {
+        root /var/www/html/$PROJECT_NAME;
+        try_files \$uri \$uri/ /index.html;
+        add_header Cache-Control "no-cache";
+    }
+
+    location /switchboard/ {
+        proxy_pass http://localhost:$SWITCHBOARD_PORT/;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade \$http_upgrade;
+        proxy_set_header Connection 'upgrade';
+        proxy_set_header Host \$host;
+        proxy_cache_bypass \$http_upgrade;
+        proxy_set_header X-Real-IP \$remote_addr;
+        proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto \$scheme;
+    }
+}
+EOF
+
+        # Enable the site
+        sudo ln -sf /etc/nginx/sites-available/$NGINX_CONFIG_NAME /etc/nginx/sites-enabled/
+        sudo rm -f /etc/nginx/sites-enabled/default
+
+        # Test and reload Nginx configuration
+        sudo nginx -t && sudo systemctl reload nginx
+    fi
+
+    # =============================================================================
+    # Database Schema Setup
+    # =============================================================================
+    pnpm prisma db push --schema node_modules/document-drive/dist/prisma/schema.prisma --skip-generate
+
+    echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+    echo "  Environment setup complete!"
+    echo "  Use 'ph service start' to start services"
+    echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+fi 

package/dist/scripts/setup-environment.ps1

@@ -0,0 +1,313 @@
+# PowerShell script for setting up Powerhouse environment on Windows
+param(
+    [string]$TARGET_TAG = "latest"
+)
+
+# Function to check if running as administrator
+function Test-Administrator {
+    $user = [Security.Principal.WindowsIdentity]::GetCurrent()
+    $principal = New-Object Security.Principal.WindowsPrincipal $user
+    $principal.IsInRole([Security.Principal.WindowsBuiltinRole]::Administrator)
+}
+
+# Check if running as administrator
+if (-not (Test-Administrator)) {
+    Write-Host "Please run this script as Administrator" -ForegroundColor Red
+    exit 1
+}
+
+# Install required packages using winget
+Write-Host "Installing required packages..."
+winget install -e --id PostgreSQL.PostgreSQL
+winget install -e --id NGINX.NGINX
+
+Write-Host "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+Write-Host "  Setting up global project"
+Write-Host "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+
+# Create installation directory if it doesn't exist
+$installPath = "C:\www"
+if (-not (Test-Path $installPath)) {
+    New-Item -ItemType Directory -Path $installPath
+}
+Set-Location $installPath
+
+# Initialize Powerhouse project
+ph init powerhouse --$TARGET_TAG
+Set-Location powerhouse
+
+# Interactive package installation loop
+Write-Host "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+Write-Host "  Package Installation"
+Write-Host "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+while ($true) {
+    $package_name = Read-Host "Enter package name to install (or press Enter to skip)"
+    if ([string]::IsNullOrEmpty($package_name)) {
+        break
+    }
+    ph install $package_name
+}
+
+# Build Connect
+ph connect build
+
+# Database Configuration
+Write-Host "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+Write-Host "  Database Configuration"
+Write-Host "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+Write-Host "Choose database type:"
+Write-Host "1) Local PostgreSQL database"
+Write-Host "2) Remote PostgreSQL database"
+$db_choice = Read-Host "Enter your choice (1 or 2)"
+
+if ($db_choice -eq "1") {
+    Write-Host "Setting up local PostgreSQL database..."
+    
+    # Generate database credentials
+    $DB_PASSWORD = "powerhouse"
+    $DB_USER = "powerhouse"
+    $DB_NAME = "powerhouse"
+    
+    # Create database and user using psql
+    $env:PGPASSWORD = "postgres"  # Default PostgreSQL password
+    psql -U postgres -c "CREATE USER $DB_USER WITH PASSWORD '$DB_PASSWORD';"
+    psql -U postgres -c "CREATE DATABASE $DB_NAME OWNER $DB_USER;"
+    psql -U postgres -c "GRANT ALL PRIVILEGES ON DATABASE $DB_NAME TO $DB_USER;"
+    
+    # Set DATABASE_URL for local database
+    $DATABASE_URL = "postgresql://$DB_USER`:$DB_PASSWORD@localhost:5432/$DB_NAME"
+    
+    Write-Host "Local database configured successfully!"
+    Write-Host "Database URL: $DATABASE_URL"
+    Write-Host "Please save these credentials securely!"
+} else {
+    Write-Host "Enter remote PostgreSQL URL (format: postgresql://user:password@host:port/db)"
+    Write-Host "Example: postgresql://powerhouse:password@db.example.com:5432/powerhouse"
+    $DATABASE_URL = Read-Host "DATABASE_URL"
+}
+
+# Save DATABASE_URL to .env file
+Add-Content -Path "$installPath\powerhouse\.env" -Value "DATABASE_URL=$DATABASE_URL"
+
+# SSL Configuration choice
+Write-Host "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+Write-Host "  SSL Configuration"
+Write-Host "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+Write-Host "Choose SSL configuration:"
+Write-Host "1) Let's Encrypt certificates for domains"
+Write-Host "2) Self-signed certificate for machine hostname"
+$ssl_choice = Read-Host "Enter your choice (1 or 2)"
+
+if ($ssl_choice -eq "1") {
+    # Install certbot for Let's Encrypt
+    winget install -e --id Certbot.Certbot
+    
+    # Domain setup
+    Write-Host "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+    Write-Host "  Domain Setup"
+    Write-Host "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+    $base_domain = Read-Host "Enter base domain (e.g. powerhouse.xyz)"
+    $connect_subdomain = Read-Host "Enter subdomain for Connect service (default: connect)"
+    $switchboard_subdomain = Read-Host "Enter subdomain for Switchboard service (default: switchboard)"
+
+    # Set default subdomains if not provided
+    if ([string]::IsNullOrEmpty($connect_subdomain)) { $connect_subdomain = "connect" }
+    if ([string]::IsNullOrEmpty($switchboard_subdomain)) { $switchboard_subdomain = "switchboard" }
+
+    # Construct full domains
+    $connect_domain = "$connect_subdomain.$base_domain"
+    $switchboard_domain = "$switchboard_subdomain.$base_domain"
+
+    Write-Host "Using domains:"
+    Write-Host "Connect: $connect_domain"
+    Write-Host "Switchboard: $switchboard_domain"
+
+    # Generate temporary SSL certificates
+    Write-Host "Generating temporary SSL certificates..."
+    $sslPath = "C:\nginx\ssl"
+    if (-not (Test-Path $sslPath)) {
+        New-Item -ItemType Directory -Path $sslPath
+    }
+
+    # Create Nginx configuration for domains
+    $nginxConfig = @"
+# Security headers
+add_header Strict-Transport-Security "max-age=63072000" always;
+add_header X-Frame-Options DENY;
+add_header X-Content-Type-Options nosniff;
+add_header X-XSS-Protection "1; mode=block";
+
+server {
+    listen 80;
+    server_name $connect_domain $switchboard_domain;
+    return 301 https://`$host`$request_uri;
+}
+
+server {
+    listen 443 ssl http2;
+    server_name $connect_domain;
+    
+    ssl_certificate $sslPath\temp.crt;
+    ssl_certificate_key $sslPath\temp.key;
+    
+    # SSL configuration
+    ssl_protocols TLSv1.2 TLSv1.3;
+    ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
+    ssl_prefer_server_ciphers off;
+    ssl_session_timeout 1d;
+    ssl_session_cache shared:SSL:50m;
+    ssl_session_tickets off;
+    ssl_stapling on;
+    ssl_stapling_verify on;
+
+    if (`$http_x_forwarded_proto = "http") {
+      return 301 https://`$server_name`$request_uri;
+    }
+    
+    location / {
+        root C:/www/powerhouse/.ph/connect-build/dist;
+        try_files `$uri `$uri/ /index.html;
+        add_header Cache-Control "no-cache";
+        add_header X-Forwarded-Proto `$scheme;
+        add_header X-Forwarded-Host `$host;
+        add_header X-Forwarded-Port `$server_port;
+    }
+}
+
+server {
+    listen 443 ssl http2;
+    server_name $switchboard_domain;
+    
+    ssl_certificate $sslPath\temp.crt;
+    ssl_certificate_key $sslPath\temp.key;
+    
+    location / {
+        proxy_pass http://localhost:4001;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade `$http_upgrade;
+        proxy_set_header Connection 'upgrade';
+        proxy_set_header Host `$host;
+        proxy_cache_bypass `$http_upgrade;
+        proxy_set_header X-Real-IP `$remote_addr;
+        proxy_set_header X-Forwarded-For `$proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto `$scheme;
+    }
+}
+"@
+
+    # Save Nginx configuration
+    $nginxConfig | Out-File -FilePath "C:\nginx\conf\sites-available\powerhouse.conf" -Encoding UTF8
+
+    # Create symbolic link to enable the site
+    if (-not (Test-Path "C:\nginx\conf\sites-enabled")) {
+        New-Item -ItemType Directory -Path "C:\nginx\conf\sites-enabled"
+    }
+    New-Item -ItemType SymbolicLink -Path "C:\nginx\conf\sites-enabled\powerhouse.conf" -Target "C:\nginx\conf\sites-available\powerhouse.conf" -Force
+
+    # Test Nginx configuration
+    nginx -t
+
+    # Restart Nginx
+    Stop-Service nginx
+    Start-Service nginx
+
+    # Obtain SSL certificates
+    Write-Host "Obtaining SSL certificates..."
+    certbot --nginx -d $connect_domain -d $switchboard_domain --non-interactive --agree-tos --email "admin@$base_domain"
+
+} else {
+    # Get machine hostname
+    $hostname = [System.Net.Dns]::GetHostName()
+    
+    # Generate self-signed certificate
+    Write-Host "Generating self-signed certificate for $hostname..."
+    $sslPath = "C:\nginx\ssl"
+    if (-not (Test-Path $sslPath)) {
+        New-Item -ItemType Directory -Path $sslPath
+    }
+
+    # Create Nginx configuration for self-signed
+    $nginxConfig = @"
+# Security headers
+add_header Strict-Transport-Security "max-age=63072000" always;
+add_header X-Frame-Options DENY;
+add_header X-Content-Type-Options nosniff;
+add_header X-XSS-Protection "1; mode=block";
+
+server {
+    listen 80;
+    server_name $hostname;
+    return 301 https://`$host`$request_uri;
+}
+
+server {
+    listen 443 ssl http2;
+    server_name $hostname;
+    
+    ssl_certificate $sslPath\$hostname.crt;
+    ssl_certificate_key $sslPath\$hostname.key;
+    
+    location /connect {
+        proxy_pass http://localhost:3000;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade `$http_upgrade;
+        proxy_set_header Connection 'upgrade';
+        proxy_set_header Host `$host;
+        proxy_cache_bypass `$http_upgrade;
+        proxy_set_header X-Real-IP `$remote_addr;
+        proxy_set_header X-Forwarded-For `$proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto `$scheme;
+    }
+
+    location /switchboard {
+        proxy_pass http://localhost:4001;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade `$http_upgrade;
+        proxy_set_header Connection 'upgrade';
+        proxy_set_header Host `$host;
+        proxy_cache_bypass `$http_upgrade;
+        proxy_set_header X-Real-IP `$remote_addr;
+        proxy_set_header X-Forwarded-For `$proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto `$scheme;
+    }
+}
+"@
+
+    # Save Nginx configuration
+    $nginxConfig | Out-File -FilePath "C:\nginx\conf\sites-available\powerhouse.conf" -Encoding UTF8
+
+    # Create symbolic link to enable the site
+    if (-not (Test-Path "C:\nginx\conf\sites-enabled")) {
+        New-Item -ItemType Directory -Path "C:\nginx\conf\sites-enabled"
+    }
+    New-Item -ItemType SymbolicLink -Path "C:\nginx\conf\sites-enabled\powerhouse.conf" -Target "C:\nginx\conf\sites-available\powerhouse.conf" -Force
+
+    # Test Nginx configuration
+    nginx -t
+
+    # Restart Nginx
+    Stop-Service nginx
+    Start-Service nginx
+}
+
+# Install PM2 globally if not already installed
+if (-not (Get-Command pm2 -ErrorAction SilentlyContinue)) {
+    pnpm install -g pm2
+}
+
+# Run database migrations
+pnpm prisma db push --schema node_modules/document-drive/dist/prisma/schema.prisma --skip-generate
+
+# Start services with PM2
+Write-Host "Starting services with PM2..."
+if ($ssl_choice -eq "2") {
+    # Self-signed certificate - use base paths
+    pm2 start pnpm switchboard --name "switchboard" -- --base-path /switchboard
+} else {
+    # Let's Encrypt - no base paths needed
+    pm2 start "pnpm switchboard" --name "switchboard"
+}
+
+# Save PM2 process list and setup startup script
+pm2 save
+pm2 startup 

package/dist/scripts/setup.sh

@@ -0,0 +1,24 @@
+#!/usr/bin/env bash
+curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.34.0/install.sh | bash
+\. ~/.nvm/nvm.sh
+export NVM_DIR="$HOME/.nvm"
+[ -s "$NVM_DIR/nvm.sh" ] && \. "$NVM_DIR/nvm.sh"  # This loads nvm
+[ -s "$NVM_DIR/bash_completion" ] && \. "$NVM_DIR/bash_completion"  # This loads nvm bash_completion
+nvm --version
+nvm install 22
+curl -fsSL https://get.pnpm.io/install.sh | sh -
+export PNPM_HOME="/home/$USER/.local/share/pnpm"
+export PATH="$PNPM_HOME:$PATH"
+pnpm install -g ph-cmd
+echo ""
+echo "  🎉 Setup Complete! 🎉"
+echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+echo "  To complete installation:"
+echo "  1. Restart your terminal"
+echo "     OR"
+echo "     Run: source ~/.bashrc"
+echo ""
+echo "  2. Start using Powerhouse by typing:"
+echo "     ph"
+echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+echo ""

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@powerhousedao/ph-cli",
-  "version": "6.0.0-dev.29",
+  "version": "6.0.0-dev.30",
   "description": "",
   "license": "AGPL-3.0-only",
   "type": "module",
@@ -37,8 +37,8 @@
     "copyfiles": "^2.4.1",
     "nodemon": "^3.1.9",
     "vitest": "^3.2.4",
-    "document-drive": "6.0.0-dev.29",
-    "document-model": "6.0.0-dev.29"
+    "document-drive": "6.0.0-dev.30",
+    "document-model": "6.0.0-dev.30"
   },
   "dependencies": {
     "chalk": "^5.6.2",
@@ -53,13 +53,13 @@
     "ts-morph": "^26.0.0",
     "vite": "^7.2.6",
     "write-package": "^7.2.0",
-    "@powerhousedao/builder-tools": "6.0.0-dev.29",
-    "@powerhousedao/codegen": "6.0.0-dev.29",
-    "@powerhousedao/common": "6.0.0-dev.29",
-    "@powerhousedao/config": "6.0.0-dev.29",
-    "@powerhousedao/reactor": "6.0.0-dev.29",
-    "@powerhousedao/switchboard": "6.0.0-dev.29",
-    "@renown/sdk": "6.0.0-dev.29"
+    "@powerhousedao/builder-tools": "6.0.0-dev.30",
+    "@powerhousedao/codegen": "6.0.0-dev.30",
+    "@powerhousedao/common": "6.0.0-dev.30",
+    "@powerhousedao/reactor": "6.0.0-dev.30",
+    "@powerhousedao/config": "6.0.0-dev.30",
+    "@powerhousedao/switchboard": "6.0.0-dev.30",
+    "@renown/sdk": "6.0.0-dev.30"
   },
   "scripts": {
     "tsc": "tsc",