@codedrifters/configulator 0.0.196 → 0.0.197

package/lib/index.js

@@ -186,11 +186,13 @@ __export(index_exports, {
   AwsDeployWorkflow: () => AwsDeployWorkflow,
   AwsDeploymentConfig: () => AwsDeploymentConfig,
   AwsDeploymentTarget: () => AwsDeploymentTarget,
+  AwsTeardownWorkflow: () => AwsTeardownWorkflow,
   BUILT_IN_BUNDLES: () => BUILT_IN_BUNDLES,
   CLAUDE_RULE_TARGET: () => CLAUDE_RULE_TARGET,
   COMPLETE_JOB_ID: () => COMPLETE_JOB_ID,
   DEFAULT_PRIORITY_LABELS: () => DEFAULT_PRIORITY_LABELS,
   DEFAULT_STATUS_LABELS: () => DEFAULT_STATUS_LABELS,
+  DEFAULT_TEARDOWN_BRANCH_PATTERNS: () => DEFAULT_TEARDOWN_BRANCH_PATTERNS,
   DEFAULT_TYPE_LABELS: () => DEFAULT_TYPE_LABELS,
   JsiiFaker: () => JsiiFaker,
   MCP_TRANSPORT: () => MCP_TRANSPORT,
@@ -5914,7 +5916,7 @@ var DEFAULT_FAVICON_SVG = `<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0
 `;
 
 // src/projects/aws-cdk-project.ts
-var import_projen19 = require("projen");
+var import_projen20 = require("projen");
 var import_javascript5 = require("projen/lib/javascript");
 var import_release2 = require("projen/lib/release");
 var import_ts_deepmerge3 = require("ts-deepmerge");
@@ -6190,8 +6192,212 @@ var AwsDeployWorkflow = class _AwsDeployWorkflow extends import_projen18.Compone
   }
 };
 
+// src/workflows/aws-teardown-workflow.ts
+var import_projen19 = require("projen");
+var import_github3 = require("projen/lib/github");
+var import_workflows_model6 = require("projen/lib/github/workflows-model");
+var DEFAULT_TEARDOWN_BRANCH_PATTERNS = [
+  "feat/*",
+  "fix/*",
+  "feature/*"
+];
+var resolveBranchPatterns = (explicit, targets) => {
+  if (explicit && explicit.length > 0) {
+    return [...explicit];
+  }
+  const derived = Array.from(
+    new Set(
+      targets.flatMap((target) => target.branches.map((b) => b.branch)).filter((branch) => typeof branch === "string").filter((branch) => branch.includes("*"))
+    )
+  );
+  if (derived.length > 0) {
+    return derived;
+  }
+  return [...DEFAULT_TEARDOWN_BRANCH_PATTERNS];
+};
+var AwsTeardownWorkflow = class extends import_projen19.Component {
+  constructor(rootProject, options) {
+    super(rootProject);
+    this.rootProject = rootProject;
+    const {
+      awsDestructionTargets,
+      repoTagName,
+      stageTypeTagName,
+      environmentTypeTagName,
+      branchNameTagName,
+      deleteBranchPatterns
+    } = options;
+    if (!repoTagName) {
+      throw new Error("AwsTeardownWorkflow requires `repoTagName`");
+    }
+    if (!stageTypeTagName) {
+      throw new Error("AwsTeardownWorkflow requires `stageTypeTagName`");
+    }
+    if (!environmentTypeTagName) {
+      throw new Error("AwsTeardownWorkflow requires `environmentTypeTagName`");
+    }
+    if (!branchNameTagName) {
+      throw new Error("AwsTeardownWorkflow requires `branchNameTagName`");
+    }
+    if (!(rootProject instanceof MonorepoProject)) {
+      throw new Error(
+        "AwsTeardownWorkflow requires the root project to be a MonorepoProject"
+      );
+    }
+    const github = import_github3.GitHub.of(this.rootProject);
+    if (!github) {
+      throw new Error(
+        "AwsTeardownWorkflow requires a GitHub component in the root project"
+      );
+    }
+    const branchPatterns = resolveBranchPatterns(
+      deleteBranchPatterns,
+      awsDestructionTargets
+    );
+    const workflow = new import_github3.GithubWorkflow(github, "teardown-dev");
+    workflow.on({
+      workflowDispatch: {},
+      schedule: [
+        {
+          cron: "32 6 * * *"
+        }
+      ],
+      delete: {
+        branches: branchPatterns
+      }
+    });
+    awsDestructionTargets.forEach((target) => {
+      const {
+        awsStageType,
+        deploymentTargetRole,
+        account,
+        region,
+        ciDeploymentConfig
+      } = target;
+      const { roleArn } = ciDeploymentConfig ?? {};
+      workflow.addJob(
+        `teardown-${awsStageType}-${deploymentTargetRole}-${account}-${region}`.toLowerCase(),
+        {
+          name: `Teardown Stacks in ${awsStageType}/${deploymentTargetRole}/${account}/${region}`,
+          runsOn: ["ubuntu-latest"],
+          permissions: {
+            contents: import_workflows_model6.JobPermission.READ,
+            idToken: import_workflows_model6.JobPermission.WRITE
+          },
+          env: {
+            REPO: "${{ github.repository }}",
+            REGIONS: [region].join(" ")
+          },
+          steps: [
+            {
+              name: `AWS Creds ${account}/${region}`,
+              uses: "aws-actions/configure-aws-credentials@v6",
+              with: {
+                "role-to-assume": roleArn,
+                "aws-region": region,
+                "role-duration-seconds": 900
+              }
+            },
+            {
+              name: "Fetch All Branches",
+              id: "fetch_branches",
+              uses: "actions/github-script@v9",
+              with: {
+                script: [
+                  "const all = await github.paginate(github.rest.repos.listBranches, {",
+                  "  owner: context.repo.owner,",
+                  "  repo: context.repo.repo,",
+                  "  per_page: 100",
+                  "});",
+                  "const names = all.map(b => b.name);",
+                  "console.log(`Found branches: ${names}`);",
+                  'core.setOutput("json", JSON.stringify(names));'
+                ].join("\n")
+              }
+            },
+            {
+              name: "Save Branches to File",
+              run: [
+                'echo "Saving branches to file"',
+                "echo '${{ steps.fetch_branches.outputs.json }}' | jq -r '.[]' | sort -u > branches.txt",
+                'echo "Branches:"',
+                "cat branches.txt"
+              ].join("\n")
+            },
+            {
+              name: "Find Stacks by Tag",
+              id: "find_stacks",
+              run: [
+                "set -euo pipefail",
+                ": > candidates.txt  # columns: arn region branchTag",
+                "# Build tag filters",
+                `TAG_FILTERS=( "Key=${repoTagName},Values=$REPO" )`,
+                `TAG_FILTERS+=( "Key=${stageTypeTagName},Values=${awsStageType}" )`,
+                `TAG_FILTERS+=( "Key=${environmentTypeTagName},Values=${deploymentTargetRole}" )`,
+                "for r in $REGIONS; do",
+                `  echo "Scanning region: $r"`,
+                "  aws resourcegroupstaggingapi get-resources \\",
+                '    --region "$r" \\',
+                '    --resource-type-filters "cloudformation:stack" \\',
+                '    --tag-filters "${TAG_FILTERS[@]}" \\',
+                ` | jq -r --arg r "$r" '`,
+                "    .ResourceTagMappingList[]",
+                "    | . as $res",
+                `    | ($res.Tags[] | select(.Key=="${branchNameTagName}") | .Value) as $branch`,
+                '    | [$res.ResourceARN, $r, ($branch // "")]',
+                "    | @tsv",
+                "    ' >> candidates.txt",
+                "done",
+                "echo 'Tagged stacks:'",
+                `(echo -e "ARN\\tREGION\\tBRANCH"; cat candidates.txt) | column -t -s $'\\t'`
+              ].join("\n")
+            },
+            {
+              name: "Determine Orphan Stacks (No Matching Branch)",
+              run: [
+                "set -euo pipefail",
+                ": > orphans.txt  # arn region branch",
+                "while IFS=$'\\t' read -r arn region branch; do",
+                '  [ -z "$arn" ] && continue',
+                '  if [ -z "$branch" ]; then',
+                "    # If no Branch tag, treat as not-a-preview; skip",
+                "    continue",
+                "  fi",
+                '  if ! grep -Fxq "$branch" branches.txt; then',
+                '    echo -e "$arn\\t$region\\t$branch" >> orphans.txt',
+                "  fi",
+                "done < candidates.txt",
+                "",
+                "if [ -s orphans.txt ]; then",
+                '  echo "Orphan stacks (no matching branch):"',
+                `  (echo -e "ARN\\tREGION\\tBRANCH"; cat orphans.txt) | column -t -s $'\\t'`,
+                "else",
+                '  echo "No orphan stacks found."',
+                "fi"
+              ].join("\n")
+            },
+            {
+              name: "Delete Orphan Stacks",
+              if: "hashFiles('orphans.txt') != ''",
+              run: [
+                "set -euo pipefail",
+                "while IFS=$'\\t' read -r arn region branch; do",
+                '  [ -z "$arn" ] && continue',
+                `  stack_name=$(cut -d'/' -f2 <<<"$arn")`,
+                '  echo "Deleting $stack_name (branch=$branch) in $region"',
+                '  aws cloudformation delete-stack --region "$region" --stack-name "$stack_name" || true',
+                "done < orphans.txt"
+              ].join("\n")
+            }
+          ]
+        }
+      );
+    });
+  }
+};
+
 // src/projects/aws-cdk-project.ts
-var AwsCdkProject = class extends import_projen19.awscdk.AwsCdkTypeScriptApp {
+var AwsCdkProject = class extends import_projen20.awscdk.AwsCdkTypeScriptApp {
   constructor(userOptions) {
     if (!(userOptions.parent instanceof MonorepoProject)) {
       throw new Error(
@@ -6322,6 +6528,9 @@ var AwsCdkProject = class extends import_projen19.awscdk.AwsCdkTypeScriptApp {
     deployWorkflows.forEach(
       (workflowOptions) => new AwsDeployWorkflow(this, workflowOptions)
     );
+    if (options.teardownWorkflow) {
+      new AwsTeardownWorkflow(parent, options.teardownWorkflow);
+    }
     const turboActive = TurboRepo.of(parent) !== void 0;
     if (turboActive) {
       const turbo = new TurboRepo(this);
@@ -6382,9 +6591,9 @@ var AwsCdkProject = class extends import_projen19.awscdk.AwsCdkTypeScriptApp {
 
 // src/typescript/typescript-config.ts
 var import_node_path2 = require("path");
-var import_projen20 = require("projen");
+var import_projen21 = require("projen");
 var import_path2 = require("projen/lib/util/path");
-var TypeScriptConfig = class extends import_projen20.Component {
+var TypeScriptConfig = class extends import_projen21.Component {
   constructor(project) {
     super(project);
     let tsPaths = {};
@@ -6422,11 +6631,13 @@ var TypeScriptConfig = class extends import_projen20.Component {
   AwsDeployWorkflow,
   AwsDeploymentConfig,
   AwsDeploymentTarget,
+  AwsTeardownWorkflow,
   BUILT_IN_BUNDLES,
   CLAUDE_RULE_TARGET,
   COMPLETE_JOB_ID,
   DEFAULT_PRIORITY_LABELS,
   DEFAULT_STATUS_LABELS,
+  DEFAULT_TEARDOWN_BRANCH_PATTERNS,
   DEFAULT_TYPE_LABELS,
   JsiiFaker,
   MCP_TRANSPORT,