spoonfeeder 0.1.0

package/templates/recipes/deploy/terraform/modules/app/alb.tf

@@ -0,0 +1,34 @@
+resource "aws_lb" "app" {
+  name               = "${var.app_name}-${var.environment}"
+  internal           = false
+  load_balancer_type = "application"
+  security_groups    = [aws_security_group.alb.id]
+  subnets            = var.private_subnet_ids
+}
+
+resource "aws_lb_target_group" "app" {
+  name        = "${var.app_name}-${var.environment}"
+  port        = 3000
+  protocol    = "HTTP"
+  vpc_id      = var.vpc_id
+  target_type = "ip"
+
+  health_check {
+    path                = "/health"
+    healthy_threshold   = 2
+    unhealthy_threshold = 3
+    timeout             = 5
+    interval            = 30
+  }
+}
+
+resource "aws_lb_listener" "app" {
+  load_balancer_arn = aws_lb.app.arn
+  port              = 443
+  protocol          = "HTTPS"
+
+  default_action {
+    type             = "forward"
+    target_group_arn = aws_lb_target_group.app.arn
+  }
+}

package/templates/recipes/deploy/terraform/modules/app/iam.tf

@@ -0,0 +1,30 @@
+resource "aws_iam_role" "ecs_execution" {
+  name = "${var.app_name}-${var.environment}-ecs-execution"
+
+  assume_role_policy = jsonencode({
+    Version = "2012-10-17"
+    Statement = [{
+      Action = "sts:AssumeRole"
+      Effect = "Allow"
+      Principal = { Service = "ecs-tasks.amazonaws.com" }
+    }]
+  })
+}
+
+resource "aws_iam_role_policy_attachment" "ecs_execution" {
+  role       = aws_iam_role.ecs_execution.name
+  policy_arn = "arn:aws:iam::aws:policy/service-role/AmazonECSTaskExecutionRolePolicy"
+}
+
+resource "aws_iam_role" "ecs_task" {
+  name = "${var.app_name}-${var.environment}-ecs-task"
+
+  assume_role_policy = jsonencode({
+    Version = "2012-10-17"
+    Statement = [{
+      Action = "sts:AssumeRole"
+      Effect = "Allow"
+      Principal = { Service = "ecs-tasks.amazonaws.com" }
+    }]
+  })
+}

package/templates/recipes/deploy/terraform/modules/app/main.tf

@@ -0,0 +1,80 @@
+resource "aws_ecs_cluster" "main" {
+  name = "${var.app_name}-${var.environment}"
+
+  setting {
+    name  = "containerInsights"
+    value = "enabled"
+  }
+}
+
+resource "aws_ecs_task_definition" "app" {
+  family                   = "${var.app_name}-${var.environment}"
+  network_mode             = "awsvpc"
+  requires_compatibilities = ["FARGATE"]
+  cpu                      = var.cpu
+  memory                   = var.memory
+  execution_role_arn       = aws_iam_role.ecs_execution.arn
+  task_role_arn            = aws_iam_role.ecs_task.arn
+
+  container_definitions = jsonencode([
+    {
+      name      = var.app_name
+      image     = var.container_image
+      essential = true
+
+      portMappings = [
+        {
+          containerPort = 3000
+          protocol      = "tcp"
+        }
+      ]
+
+      environment = [
+        { name = "NODE_ENV", value = var.environment },
+        { name = "PORT", value = "3000" }
+      ]
+
+      logConfiguration = {
+        logDriver = "awslogs"
+        options = {
+          "awslogs-group"         = aws_cloudwatch_log_group.app.name
+          "awslogs-region"        = var.region
+          "awslogs-stream-prefix" = var.app_name
+        }
+      }
+
+      healthCheck = {
+        command     = ["CMD-SHELL", "curl -f http://localhost:3000/health || exit 1"]
+        interval    = 30
+        timeout     = 5
+        retries     = 3
+        startPeriod = 60
+      }
+    }
+  ])
+}
+
+resource "aws_ecs_service" "app" {
+  name            = "${var.app_name}-${var.environment}"
+  cluster         = aws_ecs_cluster.main.id
+  task_definition = aws_ecs_task_definition.app.arn
+  desired_count   = var.desired_count
+  launch_type     = "FARGATE"
+
+  network_configuration {
+    subnets          = var.private_subnet_ids
+    security_groups  = [aws_security_group.app.id]
+    assign_public_ip = false
+  }
+
+  load_balancer {
+    target_group_arn = aws_lb_target_group.app.arn
+    container_name   = var.app_name
+    container_port   = 3000
+  }
+}
+
+resource "aws_cloudwatch_log_group" "app" {
+  name              = "/ecs/${var.app_name}-${var.environment}"
+  retention_in_days = 30
+}

package/templates/recipes/deploy/terraform/modules/app/outputs.tf

@@ -0,0 +1,11 @@
+output "app_url" {
+  value = "https://${aws_lb.app.dns_name}"
+}
+
+output "cluster_name" {
+  value = aws_ecs_cluster.main.name
+}
+
+output "service_name" {
+  value = aws_ecs_service.app.name
+}

package/templates/recipes/deploy/terraform/modules/app/security.tf

@@ -0,0 +1,37 @@
+resource "aws_security_group" "app" {
+  name   = "${var.app_name}-${var.environment}-app"
+  vpc_id = var.vpc_id
+
+  ingress {
+    from_port       = 3000
+    to_port         = 3000
+    protocol        = "tcp"
+    security_groups = [aws_security_group.alb.id]
+  }
+
+  egress {
+    from_port   = 0
+    to_port     = 0
+    protocol    = "-1"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+}
+
+resource "aws_security_group" "alb" {
+  name   = "${var.app_name}-${var.environment}-alb"
+  vpc_id = var.vpc_id
+
+  ingress {
+    from_port   = 443
+    to_port     = 443
+    protocol    = "tcp"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+
+  egress {
+    from_port   = 0
+    to_port     = 0
+    protocol    = "-1"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+}

package/templates/recipes/deploy/terraform/modules/app/variables.tf

@@ -0,0 +1,42 @@
+variable "app_name" {
+  type = string
+}
+
+variable "environment" {
+  type = string
+}
+
+variable "region" {
+  type    = string
+  default = "eu-west-1"
+}
+
+variable "container_image" {
+  type    = string
+  default = "REGISTRY/IMAGE:latest"
+}
+
+variable "cpu" {
+  type    = number
+  default = 256
+}
+
+variable "memory" {
+  type    = number
+  default = 512
+}
+
+variable "desired_count" {
+  type    = number
+  default = 2
+}
+
+variable "private_subnet_ids" {
+  type    = list(string)
+  default = []
+}
+
+variable "vpc_id" {
+  type    = string
+  default = ""
+}

package/templates/recipes/deploy/terraform/outputs.tf

@@ -0,0 +1,4 @@
+output "app_url" {
+  description = "Application URL"
+  value       = module.app.app_url
+}

package/templates/recipes/deploy/terraform/variables.tf

@@ -0,0 +1,11 @@
+variable "environment" {
+  description = "Deployment environment (dev, staging, production)"
+  type        = string
+  default     = "dev"
+}
+
+variable "region" {
+  description = "Cloud provider region"
+  type        = string
+  default     = "eu-west-1"
+}

package/templates/recipes/devcontainer/.devcontainer/Dockerfile

@@ -0,0 +1,5 @@
+FROM mcr.microsoft.com/devcontainers/typescript-node:22
+
+RUN npm install -g pnpm@10
+
+WORKDIR /workspace

package/templates/recipes/devcontainer/.devcontainer/devcontainer.json

@@ -0,0 +1,32 @@
+{
+  "name": "NestJS Development",
+  "dockerComposeFile": "docker-compose.yml",
+  "service": "app",
+  "workspaceFolder": "/workspace",
+  "features": {
+    "ghcr.io/devcontainers/features/node:1": {
+      "version": "22"
+    },
+    "ghcr.io/devcontainers/features/git:1": {}
+  },
+  "customizations": {
+    "vscode": {
+      "extensions": [
+        "dbaeumer.vscode-eslint",
+        "esbenp.prettier-vscode",
+        "ms-azuretools.vscode-docker",
+        "ckolkman.vscode-postgres"
+      ],
+      "settings": {
+        "editor.formatOnSave": true,
+        "editor.defaultFormatter": "esbenp.prettier-vscode",
+        "editor.codeActionsOnSave": {
+          "source.fixAll.eslint": "explicit"
+        }
+      }
+    }
+  },
+  "forwardPorts": [3000, 5432, 6379],
+  "postCreateCommand": "pnpm install",
+  "remoteUser": "node"
+}

package/templates/recipes/devcontainer/.devcontainer/docker-compose.yml

@@ -0,0 +1,62 @@
+services:
+  app:
+    build:
+      context: ..
+      dockerfile: .devcontainer/Dockerfile
+    image: nestjs-devcontainer
+    volumes:
+      - ..:/workspace:cached
+    command: sleep infinity
+    networks:
+      - devnet
+    depends_on:
+      postgres:
+        condition: service_healthy
+      redis:
+        condition: service_healthy
+    environment:
+      DATABASE_HOST: postgres
+      DATABASE_PORT: 5432
+      DATABASE_USER: postgres
+      DATABASE_PASSWORD: postgres
+      DATABASE_NAME: app_dev
+      REDIS_HOST: redis
+      REDIS_PORT: 6379
+
+  postgres:
+    image: postgres:17-alpine
+    restart: unless-stopped
+    volumes:
+      - pgdata:/var/lib/postgresql/data
+    environment:
+      POSTGRES_USER: postgres
+      POSTGRES_PASSWORD: postgres
+      POSTGRES_DB: app_dev
+    ports:
+      - '5432:5432'
+    networks:
+      - devnet
+    healthcheck:
+      test: ['CMD-SHELL', 'pg_isready -U postgres']
+      interval: 5s
+      timeout: 3s
+      retries: 5
+
+  redis:
+    image: redis:7-alpine
+    restart: unless-stopped
+    ports:
+      - '6379:6379'
+    networks:
+      - devnet
+    healthcheck:
+      test: ['CMD', 'redis-cli', 'ping']
+      interval: 5s
+      timeout: 3s
+      retries: 5
+
+volumes:
+  pgdata:
+
+networks:
+  devnet:

package/templates/recipes/devcontainer/README.md

@@ -0,0 +1,31 @@
+# Dev Container
+
+VS Code Dev Container configuration with Docker Compose services for local development.
+
+## Links
+
+- [Dev Containers Specification](https://containers.dev/)
+- [VS Code Dev Containers](https://code.visualstudio.com/docs/devcontainers/containers)
+- [Dev Container Features](https://containers.dev/features)
+
+## Dependencies
+
+No npm dependencies. Requires Docker Desktop or compatible container runtime.
+
+| Package | Version | Purpose                 |
+| ------- | ------- | ----------------------- |
+| (none)  | -       | Requires Docker Desktop |
+
+## Usage
+
+1. Open the project in VS Code
+2. Install the "Dev Containers" extension
+3. Press `Ctrl+Shift+P` and select "Dev Containers: Reopen in Container"
+4. The container will build and start with Postgres and Redis
+
+## Generated Files
+
+| File                               | Description                               |
+| ---------------------------------- | ----------------------------------------- |
+| `.devcontainer/devcontainer.json`  | VS Code dev container configuration       |
+| `.devcontainer/docker-compose.yml` | Docker Compose services (Postgres, Redis) |

package/templates/recipes/distributed-tracing/README.md

@@ -0,0 +1,45 @@
+# Distributed Tracing (W3C Trace Context)
+
+W3C Trace Context header propagation for services not using full OpenTelemetry auto-instrumentation.
+
+## Links
+
+- [W3C Trace Context Specification](https://www.w3.org/TR/trace-context/)
+- [NestJS Middleware](https://docs.nestjs.com/middleware)
+
+## Dependencies
+
+No additional dependencies required. Implements the W3C specification directly.
+
+| Package | Version | Purpose                                          |
+| ------- | ------- | ------------------------------------------------ |
+| (none)  | -       | W3C trace context header parsing and propagation |
+
+## Usage
+
+Register middleware in your module:
+
+```typescript
+import { TracePropagationMiddleware } from '@/shared/middleware/trace-propagation.middleware';
+
+export class AppModule implements NestModule {
+  configure(consumer: MiddlewareConsumer) {
+    consumer.apply(TracePropagationMiddleware).forRoutes('*');
+  }
+}
+```
+
+Access trace context:
+
+```typescript
+import { traceStorage } from '@/shared/middleware/trace-propagation.middleware';
+
+const ctx = traceStorage.getStore();
+// ctx?.traceId, ctx?.spanId, ctx?.traceFlags
+```
+
+## Generated Files
+
+| File                                                    | Description                                     |
+| ------------------------------------------------------- | ----------------------------------------------- |
+| `src/shared/middleware/trace-propagation.middleware.ts` | W3C trace context header propagation middleware |

package/templates/recipes/distributed-tracing/src/shared/middleware/trace-propagation.middleware.ts

@@ -0,0 +1,68 @@
+import { Injectable, NestMiddleware } from '@nestjs/common';
+import { AsyncLocalStorage } from 'node:async_hooks';
+import { FastifyReply, FastifyRequest } from 'fastify';
+
+export interface TraceContext {
+  traceId: string;
+  spanId: string;
+  traceFlags: number;
+  parentSpanId?: string;
+}
+
+export const traceStorage = new AsyncLocalStorage<TraceContext>();
+
+const TRACEPARENT_HEADER = 'traceparent';
+const TRACEPARENT_REGEX = /^00-([0-9a-f]{32})-([0-9a-f]{16})-([0-9a-f]{2})$/;
+
+function generateHexId(bytes: number): string {
+  const array = new Uint8Array(bytes);
+  crypto.getRandomValues(array);
+  return Array.from(array)
+    .map((b) => b.toString(16).padStart(2, '0'))
+    .join('');
+}
+
+function parseTraceparent(header: string | undefined): TraceContext | null {
+  if (!header) {
+    return null;
+  }
+
+  const match = TRACEPARENT_REGEX.exec(header);
+
+  if (!match) {
+    return null;
+  }
+
+  return {
+    traceId: match[1],
+    parentSpanId: match[2],
+    spanId: generateHexId(8),
+    traceFlags: parseInt(match[3], 16),
+  };
+}
+
+function createTraceContext(): TraceContext {
+  return {
+    traceId: generateHexId(16),
+    spanId: generateHexId(8),
+    traceFlags: 1,
+  };
+}
+
+function formatTraceparent(ctx: TraceContext): string {
+  return `00-${ctx.traceId}-${ctx.spanId}-${ctx.traceFlags.toString(16).padStart(2, '0')}`;
+}
+
+@Injectable()
+export class TracePropagationMiddleware implements NestMiddleware {
+  use(req: FastifyRequest['raw'], res: FastifyReply['raw'], next: () => void): void {
+    const incoming = req.headers[TRACEPARENT_HEADER] as string | undefined;
+    const traceContext = parseTraceparent(incoming) || createTraceContext();
+
+    res.setHeader(TRACEPARENT_HEADER, formatTraceparent(traceContext));
+
+    traceStorage.run(traceContext, () => {
+      next();
+    });
+  }
+}

package/templates/recipes/distributed-tracing/tests/unit/shared/middleware/trace-propagation.middleware.spec.ts

@@ -0,0 +1,76 @@
+import {
+  TracePropagationMiddleware,
+  traceStorage,
+} from '../../../../src/shared/middleware/trace-propagation.middleware';
+
+function createMockRequest(headers: Record<string, string> = {}) {
+  return { headers };
+}
+
+function createMockResponse() {
+  const responseHeaders: Record<string, string> = {};
+  return {
+    setHeader: jest.fn((key: string, value: string) => {
+      responseHeaders[key] = value;
+    }),
+    _headers: responseHeaders,
+  };
+}
+
+describe('TracePropagationMiddleware', () => {
+  let middleware: TracePropagationMiddleware;
+
+  beforeEach(() => {
+    middleware = new TracePropagationMiddleware();
+  });
+
+  it('should create a new trace context when no traceparent header is present', (done) => {
+    const req = createMockRequest();
+    const res = createMockResponse();
+
+    middleware.use(req as any, res as any, () => {
+      const ctx = traceStorage.getStore();
+
+      expect(ctx).toBeDefined();
+      expect(ctx!.traceId).toHaveLength(32);
+      expect(ctx!.spanId).toHaveLength(16);
+      expect(ctx!.traceFlags).toBe(1);
+      expect(ctx!.parentSpanId).toBeUndefined();
+      expect(res.setHeader).toHaveBeenCalledWith('traceparent', expect.stringMatching(/^00-/));
+      done();
+    });
+  });
+
+  it('should parse an incoming traceparent header and preserve the traceId', (done) => {
+    const traceId = 'a'.repeat(32);
+    const parentSpanId = 'b'.repeat(16);
+    const traceparent = `00-${traceId}-${parentSpanId}-01`;
+    const req = createMockRequest({ traceparent });
+    const res = createMockResponse();
+
+    middleware.use(req as any, res as any, () => {
+      const ctx = traceStorage.getStore();
+
+      expect(ctx).toBeDefined();
+      expect(ctx!.traceId).toBe(traceId);
+      expect(ctx!.parentSpanId).toBe(parentSpanId);
+      expect(ctx!.spanId).toHaveLength(16);
+      expect(ctx!.spanId).not.toBe(parentSpanId);
+      done();
+    });
+  });
+
+  it('should fall back to a new context if traceparent is malformed', (done) => {
+    const req = createMockRequest({ traceparent: 'invalid-header' });
+    const res = createMockResponse();
+
+    middleware.use(req as any, res as any, () => {
+      const ctx = traceStorage.getStore();
+
+      expect(ctx).toBeDefined();
+      expect(ctx!.traceId).toHaveLength(32);
+      expect(ctx!.parentSpanId).toBeUndefined();
+      done();
+    });
+  });
+});

package/templates/recipes/docker-compose-dev/Dockerfile.dev

@@ -0,0 +1,14 @@
+FROM node:22-alpine
+
+RUN corepack enable && corepack prepare pnpm@10 --activate
+
+WORKDIR /app
+
+COPY package.json pnpm-lock.yaml ./
+RUN pnpm install
+
+COPY . .
+
+EXPOSE 3000 9229
+
+CMD ["pnpm", "start:debug"]

package/templates/recipes/docker-compose-dev/README.md

@@ -0,0 +1,57 @@
+# Docker Compose Dev
+
+One-command local development environment with hot reload and debugging support.
+
+## Quick Start
+
+```bash
+docker compose -f docker-compose.dev.yml up
+```
+
+This starts all services:
+
+| Service    | URL / Port              | Description                        |
+| ---------- | ----------------------- | ---------------------------------- |
+| `app`      | `http://localhost:3000` | NestJS application with hot reload |
+| `postgres` | `localhost:5432`        | PostgreSQL 16 database             |
+| `redis`    | `localhost:6379`        | Redis 7 cache / message broker     |
+| `adminer`  | `http://localhost:8080` | Database management UI             |
+
+## Debugging
+
+The debug port `9229` is exposed for the Node.js inspector. Attach your IDE debugger to `localhost:9229`.
+
+### VS Code launch.json
+
+```json
+{
+  "type": "node",
+  "request": "attach",
+  "name": "Docker: Attach",
+  "port": 9229,
+  "remoteRoot": "/app",
+  "localRoot": "${workspaceFolder}"
+}
+```
+
+## Hot Reload
+
+Source code is mounted as a volume (`./:/app`), so file changes on the host are reflected inside the container immediately. The `node_modules` directory is kept in an anonymous volume to avoid overwriting container dependencies.
+
+## Environment Variables
+
+The app service reads from `.env` in the project root. Database credentials default to:
+
+| Variable      | Default      |
+| ------------- | ------------ |
+| `DB_USERNAME` | `dev`        |
+| `DB_PASSWORD` | `dev`        |
+| `DB_NAME`     | project name |
+| `PORT`        | `3000`       |
+
+## Generated Files
+
+| File                     | Description                                     |
+| ------------------------ | ----------------------------------------------- |
+| `docker-compose.dev.yml` | Compose file for the local dev environment      |
+| `Dockerfile.dev`         | Development Dockerfile with pnpm and hot reload |