@cloudnux/cli 0.20.0 → 0.21.0

package/.deploy/aws/sns/main.tf

@@ -0,0 +1,33 @@
+# SNS Trigger Module - main.tf
+
+data "aws_sns_topic" "this" {
+  for_each = var.event_sources
+  name     = each.value.topic_name
+}
+
+resource "aws_sns_topic_subscription" "this" {
+  for_each = var.event_sources
+
+  topic_arn = data.aws_sns_topic.this[each.key].arn
+  protocol  = "lambda"
+  endpoint  = var.lambda_arn
+
+  filter_policy       = try(each.value.filter_policy, null)
+  filter_policy_scope = try(each.value.filter_policy, null) != null ? try(each.value.filter_policy_scope, "MessageAttributes") : null
+
+  lifecycle {
+    create_before_destroy = true
+  }
+}
+
+# SNS (unlike SQS event source mappings) requires an explicit resource-based
+# permission for the topic to invoke the Lambda function.
+resource "aws_lambda_permission" "allow_sns" {
+  for_each = var.event_sources
+
+  statement_id  = "AllowExecutionFromSNS-${each.key}"
+  action        = "lambda:InvokeFunction"
+  function_name = var.lambda_name
+  principal     = "sns.amazonaws.com"
+  source_arn    = data.aws_sns_topic.this[each.key].arn
+}

package/.deploy/aws/sns/variables.tf

@@ -0,0 +1,18 @@
+variable "event_sources" {
+  description = "Map of SNS event source configurations"
+  type = map(object({
+    topic_name          = string
+    filter_policy       = optional(string)
+    filter_policy_scope = optional(string, "MessageAttributes")
+  }))
+}
+
+variable "lambda_name" {
+  description = "Name of the Lambda function"
+  type        = string
+}
+
+variable "lambda_arn" {
+  description = "ARN of the Lambda function"
+  type        = string
+}

package/dist/cli.mjs

@@ -2954,6 +2954,7 @@ var transformTriggerTemplate = {
         http: "../.deploy/aws/http",
         scheduler: "../.deploy/aws/scheduler",
         sqs: "../.deploy/aws/sqs",
+        sns: "../.deploy/aws/sns",
         websocket: "../.deploy/aws/websocket"
       },
       ...entrypoint

package/dist/index.mjs

@@ -2800,6 +2800,7 @@ var transformTriggerTemplate = {
         http: "../.deploy/aws/http",
         scheduler: "../.deploy/aws/scheduler",
         sqs: "../.deploy/aws/sqs",
+        sns: "../.deploy/aws/sns",
         websocket: "../.deploy/aws/websocket"
       },
       ...entrypoint

package/dist/templates/cloud/entrypoint-triggers.tf.ejs

@@ -98,6 +98,25 @@ module "sqs_trigger_for_<%= namespace %>_<%= module %>" {
 }
 <%_ } _%>
 
+<%_
+// ── Event (SNS) triggers ─────────────────────────────────────────────────────
+const snsEntries = Object.entries(entries).filter(([, e]) => e.trigger.type.toLowerCase() === "event" && e.trigger.options.sourceType?.toLowerCase() === "sns");
+_%>
+<%_ if (snsEntries.length > 0) { _%>
+module "sns_trigger_for_<%= namespace %>_<%= module %>" {
+  source      = "<%= tfModules.sns %>"
+  lambda_name = "<%= namespace %>_<%= module %>"
+  lambda_arn  = data.aws_lambda_function.this.arn
+  event_sources = {
+  <%_ for (const [key, entry] of snsEntries) { _%>
+    "<%= key %>" = {
+      topic_name = "<%= entry.trigger.options.source %>"
+    }
+  <%_ } _%>
+  }
+}
+<%_ } _%>
+
 <%_
 // ── WebSocket triggers ───────────────────────────────────────────────────────
 const wsEntries = Object.entries(entries).filter(([, e]) => e.trigger.type.toLowerCase() === "websocket");

package/dist/templates/local/dev-server.ts.ejs

@@ -12,6 +12,8 @@ import <%=svc.varName%> from "<%-svc.path%>";
 
 // __dirname is injected by the esbuild banner and resolves to the workingDir/env folder
 process.env.DEV_CLOUD_LOCATION_PATH ??= path.join(__dirname, '.local-location');
+process.env.DEV_CLOUD_STORAGE_BUCKET ??= path.join(__dirname, '.local-storage');
+process.env.DEV_CLOUD_EMAIL_DIR ??= path.join(__dirname, '.local-email');
 
 useCloudProvider(localCloudProvider<% if (serviceOverrides.length) { %>, { serviceFactories: { <%- serviceOverrides.map(svc => `"${svc.kind}": ${svc.varName}`).join(', ') %> } }<% } %>);
 
@@ -21,8 +23,8 @@ import <%=module%>Entries from "./<%=module%>"
 
 const router = createRouter();
 
-router.register(queuesPlugin, { prefix: "queues", config: { persistence: { directory: path.join(__dirname, 'queue-data') } } });
-router.register(schedulerPlugin, { prefix: "schedules", config: { persistence: { directory: path.join(__dirname, 'scheduler-data') } } });
+router.register(queuesPlugin, { prefix: "queues", config: { persistence: { directory: path.join(__dirname, '.queue-data') } } });
+router.register(schedulerPlugin, { prefix: "schedules", config: { persistence: { directory: path.join(__dirname, '.scheduler-data') } } });
 router.register(devConsolePlugin, {  prefix: 'console' });
 router.register(websocketsPlugin, { prefix: "websockets" });
 router.register(invokesPlugin);

package/dist/templates/local/module.ts.ejs

@@ -34,11 +34,20 @@ async function entries(app: RouterInstance) {
           return scheduleHandler(src["<%= entry.handler %>"], job,execution)
        }});
     <%_ } _%>
-    <%_ if(entry.trigger.type === "event") { _%>
-         app.queues.addQueue("<%=entry.trigger.options.source%>",
+    <%_ if(entry.trigger.type === "event") {
+          // SNS-sourced entries get their own subscriber queue - a topic can have
+          // multiple independent subscribers, unlike a plain SQS-sourced queue
+          // which is addressed directly and only ever has the one consumer.
+          const isTopic = entry.trigger.options.sourceType === "sns";
+          const queueName = isTopic ? `${entry.trigger.options.source}--${module}--${name}` : entry.trigger.options.source;
+    _%>
+         app.queues.addQueue("<%=queueName%>",
           (msg) => eventBrokerHandler(src["<%= entry.handler %>"], msg),
           "<%=module%>"
           );
+      <%_ if(isTopic) { _%>
+         app.queues.subscribeTopic("<%=entry.trigger.options.source%>", "<%=queueName%>");
+      <%_ } _%>
     <%_ } _%>
     <%_ if(entry.trigger.type === "invoke") { _%>
         app.invokes.register("<%=module%>","<%= entry.trigger.options.name %>",

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@cloudnux/cli",
-	"version": "0.20.0",
+	"version": "0.21.0",
 	"license": "MIT",
 	"repository": {
 		"type": "git",