@sibyllinesoft/arbiter 0.1.0

package/dist/templates/plopfiles/_modules/backends/rust-axum/templates/src/health.rs.hbs

@@ -0,0 +1,41 @@
+use axum::{routing::get, Json, Router};
+use serde::Serialize;
+
+#[derive(Serialize)]
+struct HealthResponse {
+    status: String,
+    service: String,
+}
+
+#[derive(Serialize)]
+struct ReadyResponse {
+    ready: bool,
+}
+
+#[derive(Serialize)]
+struct LiveResponse {
+    alive: bool,
+}
+
+pub fn router() -> Router {
+    Router::new()
+        .route("/", get(health_check))
+        .route("/ready", get(readiness_check))
+        .route("/live", get(liveness_check))
+}
+
+async fn health_check() -> Json<HealthResponse> {
+    Json(HealthResponse {
+        status: "ok".to_string(),
+        service: "{{kebabCase name}}-backend".to_string(),
+    })
+}
+
+async fn readiness_check() -> Json<ReadyResponse> {
+    // Add database/service checks here
+    Json(ReadyResponse { ready: true })
+}
+
+async fn liveness_check() -> Json<LiveResponse> {
+    Json(LiveResponse { alive: true })
+}

package/dist/templates/plopfiles/_modules/backends/rust-axum/templates/src/main.rs.hbs

@@ -0,0 +1,57 @@
+use axum::{
+    routing::get,
+    Router,
+    Json,
+};
+use serde::Serialize;
+use std::net::SocketAddr;
+use tower_http::cors::{CorsLayer, Any};
+use tower_http::trace::TraceLayer;
+use tracing_subscriber::{layer::SubscriberExt, util::SubscriberInitExt};
+
+mod health;
+
+#[derive(Serialize)]
+struct Message {
+    message: String,
+}
+
+#[tokio::main]
+async fn main() {
+    // Load .env file
+    dotenvy::dotenv().ok();
+
+    // Initialize tracing
+    tracing_subscriber::registry()
+        .with(
+            tracing_subscriber::EnvFilter::try_from_default_env()
+                .unwrap_or_else(|_| "info,{{snakeCase name}}=debug".into()),
+        )
+        .with(tracing_subscriber::fmt::layer())
+        .init();
+
+    // Build router
+    let app = Router::new()
+        .route("/", get(root))
+        .nest("/health", health::router())
+        .layer(CorsLayer::new().allow_origin(Any).allow_methods(Any).allow_headers(Any))
+        .layer(TraceLayer::new_for_http());
+
+    // Get port from environment
+    let port: u16 = std::env::var("PORT")
+        .unwrap_or_else(|_| "3000".to_string())
+        .parse()
+        .expect("PORT must be a number");
+
+    let addr = SocketAddr::from(([0, 0, 0, 0], port));
+    tracing::info!("{{titleCase name}} listening on {}", addr);
+
+    let listener = tokio::net::TcpListener::bind(addr).await.unwrap();
+    axum::serve(listener, app).await.unwrap();
+}
+
+async fn root() -> Json<Message> {
+    Json(Message {
+        message: "Welcome to {{titleCase name}} API".to_string(),
+    })
+}

package/dist/templates/plopfiles/_modules/cloud/aws/module.js

@@ -0,0 +1,33 @@
+/**
+ * AWS Cloud Module
+ *
+ * Provides AWS-specific configuration and Terraform resources.
+ */
+
+import { dirname, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const templatesDir = resolve(__dirname, "templates");
+
+export default function (data) {
+  return [
+    {
+      type: "addMany",
+      destination: "{{projectDir}}/infra/terraform",
+      base: templatesDir,
+      templateFiles: `${templatesDir}/**/*.hbs`,
+      stripExtensions: ["hbs"],
+      data,
+    },
+  ];
+}
+
+export const description = "AWS cloud resources (ECS, RDS, S3, etc.)";
+
+export const envVars = {
+  AWS_REGION: "us-east-1",
+  AWS_PROFILE: "default",
+};
+
+export const requires = ["infra/terraform"];

package/dist/templates/plopfiles/_modules/cloud/aws/templates/aws-alb.tf.hbs

@@ -0,0 +1,92 @@
+# Application Load Balancer
+resource "aws_lb" "main" {
+  name               = "${local.project_name}-alb"
+  internal           = false
+  load_balancer_type = "application"
+  security_groups    = [aws_security_group.alb.id]
+  subnets            = aws_subnet.public[*].id
+
+  enable_deletion_protection = var.environment == "prod"
+}
+
+resource "aws_lb_target_group" "app" {
+  name        = "${local.project_name}-tg"
+  port        = var.app_port
+  protocol    = "HTTP"
+  vpc_id      = aws_vpc.main.id
+  target_type = "ip"
+
+  health_check {
+    path                = "/health"
+    healthy_threshold   = 2
+    unhealthy_threshold = 10
+    timeout             = 60
+    interval            = 300
+    matcher             = "200"
+  }
+}
+
+resource "aws_lb_listener" "app" {
+  load_balancer_arn = aws_lb.main.arn
+  port              = "80"
+  protocol          = "HTTP"
+
+  default_action {
+    type             = "forward"
+    target_group_arn = aws_lb_target_group.app.arn
+  }
+}
+
+# Security Groups
+resource "aws_security_group" "alb" {
+  name        = "${local.project_name}-alb-sg"
+  description = "ALB Security Group"
+  vpc_id      = aws_vpc.main.id
+
+  ingress {
+    from_port   = 80
+    to_port     = 80
+    protocol    = "tcp"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+
+  ingress {
+    from_port   = 443
+    to_port     = 443
+    protocol    = "tcp"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+
+  egress {
+    from_port   = 0
+    to_port     = 0
+    protocol    = "-1"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+}
+
+resource "aws_security_group" "app" {
+  name        = "${local.project_name}-app-sg"
+  description = "Application Security Group"
+  vpc_id      = aws_vpc.main.id
+
+  ingress {
+    from_port       = var.app_port
+    to_port         = var.app_port
+    protocol        = "tcp"
+    security_groups = [aws_security_group.alb.id]
+  }
+
+  egress {
+    from_port   = 0
+    to_port     = 0
+    protocol    = "-1"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+}
+
+# Outputs
+output "alb_dns_name" {
+  description = "ALB DNS name"
+  value       = aws_lb.main.dns_name
+}

package/dist/templates/plopfiles/_modules/cloud/aws/templates/aws-ecs.tf.hbs

@@ -0,0 +1,84 @@
+# ECS Cluster for containerized applications
+resource "aws_ecs_cluster" "main" {
+  name = "${local.project_name}-${var.environment}"
+
+  setting {
+    name  = "containerInsights"
+    value = "enabled"
+  }
+}
+
+# ECS Task Definition
+resource "aws_ecs_task_definition" "app" {
+  family                   = "${local.project_name}-${var.environment}"
+  network_mode             = "awsvpc"
+  requires_compatibilities = ["FARGATE"]
+  cpu                      = 256
+  memory                   = 512
+  execution_role_arn       = aws_iam_role.ecs_execution.arn
+  task_role_arn            = aws_iam_role.ecs_task.arn
+
+  container_definitions = jsonencode([
+    {
+      name  = local.project_name
+      image = "${aws_ecr_repository.app.repository_url}:latest"
+      portMappings = [
+        {
+          containerPort = var.app_port
+          protocol      = "tcp"
+        }
+      ]
+      environment = [
+        { name = "NODE_ENV", value = var.environment },
+        { name = "PORT", value = tostring(var.app_port) }
+      ]
+      logConfiguration = {
+        logDriver = "awslogs"
+        options = {
+          awslogs-group         = aws_cloudwatch_log_group.app.name
+          awslogs-region        = var.aws_region
+          awslogs-stream-prefix = "ecs"
+        }
+      }
+    }
+  ])
+}
+
+# ECS Service
+resource "aws_ecs_service" "app" {
+  name            = local.project_name
+  cluster         = aws_ecs_cluster.main.id
+  task_definition = aws_ecs_task_definition.app.arn
+  desired_count   = var.instance_count
+  launch_type     = "FARGATE"
+
+  network_configuration {
+    subnets          = aws_subnet.private[*].id
+    security_groups  = [aws_security_group.app.id]
+    assign_public_ip = false
+  }
+
+  load_balancer {
+    target_group_arn = aws_lb_target_group.app.arn
+    container_name   = local.project_name
+    container_port   = var.app_port
+  }
+
+  depends_on = [aws_lb_listener.app]
+}
+
+# ECR Repository
+resource "aws_ecr_repository" "app" {
+  name                 = local.project_name
+  image_tag_mutability = "MUTABLE"
+
+  image_scanning_configuration {
+    scan_on_push = true
+  }
+}
+
+# CloudWatch Log Group
+resource "aws_cloudwatch_log_group" "app" {
+  name              = "/ecs/${local.project_name}-${var.environment}"
+  retention_in_days = 30
+}

package/dist/templates/plopfiles/_modules/cloud/aws/templates/aws-iam.tf.hbs

@@ -0,0 +1,60 @@
+# ECS Execution Role
+resource "aws_iam_role" "ecs_execution" {
+  name = "${local.project_name}-ecs-execution-role"
+
+  assume_role_policy = jsonencode({
+    Version = "2012-10-17"
+    Statement = [
+      {
+        Action = "sts:AssumeRole"
+        Effect = "Allow"
+        Principal = {
+          Service = "ecs-tasks.amazonaws.com"
+        }
+      }
+    ]
+  })
+}
+
+resource "aws_iam_role_policy_attachment" "ecs_execution" {
+  role       = aws_iam_role.ecs_execution.name
+  policy_arn = "arn:aws:iam::aws:policy/service-role/AmazonECSTaskExecutionRolePolicy"
+}
+
+# ECS Task Role
+resource "aws_iam_role" "ecs_task" {
+  name = "${local.project_name}-ecs-task-role"
+
+  assume_role_policy = jsonencode({
+    Version = "2012-10-17"
+    Statement = [
+      {
+        Action = "sts:AssumeRole"
+        Effect = "Allow"
+        Principal = {
+          Service = "ecs-tasks.amazonaws.com"
+        }
+      }
+    ]
+  })
+}
+
+# Add additional policies as needed
+# resource "aws_iam_role_policy" "ecs_task_s3" {
+#   name = "${local.project_name}-s3-access"
+#   role = aws_iam_role.ecs_task.id
+#
+#   policy = jsonencode({
+#     Version = "2012-10-17"
+#     Statement = [
+#       {
+#         Effect = "Allow"
+#         Action = [
+#           "s3:GetObject",
+#           "s3:PutObject"
+#         ]
+#         Resource = "${aws_s3_bucket.app.arn}/*"
+#       }
+#     ]
+#   })
+# }

package/dist/templates/plopfiles/_modules/cloud/aws/templates/aws-vpc.tf.hbs

@@ -0,0 +1,106 @@
+# VPC Configuration
+resource "aws_vpc" "main" {
+  cidr_block           = "10.0.0.0/16"
+  enable_dns_hostnames = true
+  enable_dns_support   = true
+
+  tags = {
+    Name = "${local.project_name}-vpc"
+  }
+}
+
+# Public Subnets
+resource "aws_subnet" "public" {
+  count                   = 2
+  vpc_id                  = aws_vpc.main.id
+  cidr_block              = "10.0.${count.index + 1}.0/24"
+  availability_zone       = data.aws_availability_zones.available.names[count.index]
+  map_public_ip_on_launch = true
+
+  tags = {
+    Name = "${local.project_name}-public-${count.index + 1}"
+  }
+}
+
+# Private Subnets
+resource "aws_subnet" "private" {
+  count             = 2
+  vpc_id            = aws_vpc.main.id
+  cidr_block        = "10.0.${count.index + 10}.0/24"
+  availability_zone = data.aws_availability_zones.available.names[count.index]
+
+  tags = {
+    Name = "${local.project_name}-private-${count.index + 1}"
+  }
+}
+
+# Internet Gateway
+resource "aws_internet_gateway" "main" {
+  vpc_id = aws_vpc.main.id
+
+  tags = {
+    Name = "${local.project_name}-igw"
+  }
+}
+
+# NAT Gateway
+resource "aws_eip" "nat" {
+  domain = "vpc"
+
+  tags = {
+    Name = "${local.project_name}-nat-eip"
+  }
+}
+
+resource "aws_nat_gateway" "main" {
+  allocation_id = aws_eip.nat.id
+  subnet_id     = aws_subnet.public[0].id
+
+  tags = {
+    Name = "${local.project_name}-nat"
+  }
+}
+
+# Route Tables
+resource "aws_route_table" "public" {
+  vpc_id = aws_vpc.main.id
+
+  route {
+    cidr_block = "0.0.0.0/0"
+    gateway_id = aws_internet_gateway.main.id
+  }
+
+  tags = {
+    Name = "${local.project_name}-public-rt"
+  }
+}
+
+resource "aws_route_table" "private" {
+  vpc_id = aws_vpc.main.id
+
+  route {
+    cidr_block     = "0.0.0.0/0"
+    nat_gateway_id = aws_nat_gateway.main.id
+  }
+
+  tags = {
+    Name = "${local.project_name}-private-rt"
+  }
+}
+
+resource "aws_route_table_association" "public" {
+  count          = length(aws_subnet.public)
+  subnet_id      = aws_subnet.public[count.index].id
+  route_table_id = aws_route_table.public.id
+}
+
+resource "aws_route_table_association" "private" {
+  count          = length(aws_subnet.private)
+  subnet_id      = aws_subnet.private[count.index].id
+  route_table_id = aws_route_table.private.id
+}
+
+# Data Sources
+data "aws_availability_zones" "available" {
+  state = "available"
+}

package/dist/templates/plopfiles/_modules/cloud/aws/templates/aws.tf.hbs

@@ -0,0 +1,56 @@
+# AWS Provider Configuration
+terraform {
+  required_providers {
+    aws = {
+      source  = "hashicorp/aws"
+      version = "~> 5.0"
+    }
+  }
+}
+
+provider "aws" {
+  region = var.aws_region
+
+  default_tags {
+    tags = local.common_tags
+  }
+}
+
+variable "aws_region" {
+  description = "AWS region"
+  type        = string
+  default     = "us-east-1"
+}
+
+variable "environment" {
+  description = "Environment name (e.g., dev, staging, prod)"
+  type        = string
+  default     = "dev"
+}
+
+variable "app_port" {
+  description = "Application port"
+  type        = number
+  default     = 3000
+}
+
+variable "instance_count" {
+  description = "Number of instances to run"
+  type        = number
+  default     = 1
+}
+
+variable "container_image" {
+  description = "Container image to deploy"
+  type        = string
+  default     = ""
+}
+
+locals {
+  project_name = "{{kebabCase name}}"
+  common_tags = {
+    Project     = local.project_name
+    Environment = var.environment
+    ManagedBy   = "terraform"
+  }
+}

package/dist/templates/plopfiles/_modules/cloud/azure/module.js

@@ -0,0 +1,31 @@
+/**
+ * Azure Cloud Module
+ */
+
+import { dirname, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const templatesDir = resolve(__dirname, "templates");
+
+export default function (data) {
+  return [
+    {
+      type: "addMany",
+      destination: "{{projectDir}}/infra/terraform",
+      base: templatesDir,
+      templateFiles: `${templatesDir}/**/*.hbs`,
+      stripExtensions: ["hbs"],
+      data,
+    },
+  ];
+}
+
+export const description = "Azure cloud resources (Container Apps, SQL, Storage, etc.)";
+
+export const envVars = {
+  ARM_SUBSCRIPTION_ID: "your-subscription-id",
+  AZURE_REGION: "eastus",
+};
+
+export const requires = ["infra/terraform"];

package/dist/templates/plopfiles/_modules/cloud/azure/templates/azure-container-apps.tf.hbs

@@ -0,0 +1,99 @@
+# Container Apps Environment
+resource "azurerm_container_app_environment" "main" {
+  name                = "${local.project_name}-env"
+  location            = azurerm_resource_group.main.location
+  resource_group_name = azurerm_resource_group.main.name
+
+  log_analytics_workspace_id = azurerm_log_analytics_workspace.main.id
+}
+
+# Container App
+resource "azurerm_container_app" "app" {
+  name                         = local.project_name
+  container_app_environment_id = azurerm_container_app_environment.main.id
+  resource_group_name          = azurerm_resource_group.main.name
+  revision_mode                = "Single"
+
+  template {
+    container {
+      name   = local.project_name
+      image  = "${azurerm_container_registry.main.login_server}/${local.project_name}:latest"
+      cpu    = 0.25
+      memory = "0.5Gi"
+
+      env {
+        name  = "NODE_ENV"
+        value = var.environment
+      }
+
+      env {
+        name  = "PORT"
+        value = tostring(var.app_port)
+      }
+
+      liveness_probe {
+        transport = "HTTP"
+        path      = "/health/live"
+        port      = var.app_port
+      }
+
+      readiness_probe {
+        transport = "HTTP"
+        path      = "/health/ready"
+        port      = var.app_port
+      }
+    }
+
+    min_replicas = var.environment == "prod" ? 1 : 0
+    max_replicas = var.environment == "prod" ? 10 : 2
+  }
+
+  ingress {
+    external_enabled = true
+    target_port      = var.app_port
+    traffic_weight {
+      percentage      = 100
+      latest_revision = true
+    }
+  }
+
+  registry {
+    server               = azurerm_container_registry.main.login_server
+    username             = azurerm_container_registry.main.admin_username
+    password_secret_name = "registry-password"
+  }
+
+  secret {
+    name  = "registry-password"
+    value = azurerm_container_registry.main.admin_password
+  }
+}
+
+# Container Registry
+resource "azurerm_container_registry" "main" {
+  name                = replace("${local.project_name}${var.environment}acr", "-", "")
+  resource_group_name = azurerm_resource_group.main.name
+  location            = azurerm_resource_group.main.location
+  sku                 = "Basic"
+  admin_enabled       = true
+}
+
+# Log Analytics
+resource "azurerm_log_analytics_workspace" "main" {
+  name                = "${local.project_name}-logs"
+  location            = azurerm_resource_group.main.location
+  resource_group_name = azurerm_resource_group.main.name
+  sku                 = "PerGB2018"
+  retention_in_days   = 30
+}
+
+# Outputs
+output "container_app_url" {
+  description = "Container App URL"
+  value       = azurerm_container_app.app.latest_revision_fqdn
+}
+
+output "container_registry" {
+  description = "Container Registry login server"
+  value       = azurerm_container_registry.main.login_server
+}