@codedrifters/configulator 0.0.196 → 0.0.197

package/lib/index.mjs

@@ -6140,6 +6140,210 @@ var AwsDeployWorkflow = class _AwsDeployWorkflow extends Component16 {
   }
 };
 
+// src/workflows/aws-teardown-workflow.ts
+import { Component as Component17 } from "projen";
+import { GitHub as GitHub3, GithubWorkflow } from "projen/lib/github";
+import { JobPermission as JobPermission6 } from "projen/lib/github/workflows-model";
+var DEFAULT_TEARDOWN_BRANCH_PATTERNS = [
+  "feat/*",
+  "fix/*",
+  "feature/*"
+];
+var resolveBranchPatterns = (explicit, targets) => {
+  if (explicit && explicit.length > 0) {
+    return [...explicit];
+  }
+  const derived = Array.from(
+    new Set(
+      targets.flatMap((target) => target.branches.map((b) => b.branch)).filter((branch) => typeof branch === "string").filter((branch) => branch.includes("*"))
+    )
+  );
+  if (derived.length > 0) {
+    return derived;
+  }
+  return [...DEFAULT_TEARDOWN_BRANCH_PATTERNS];
+};
+var AwsTeardownWorkflow = class extends Component17 {
+  constructor(rootProject, options) {
+    super(rootProject);
+    this.rootProject = rootProject;
+    const {
+      awsDestructionTargets,
+      repoTagName,
+      stageTypeTagName,
+      environmentTypeTagName,
+      branchNameTagName,
+      deleteBranchPatterns
+    } = options;
+    if (!repoTagName) {
+      throw new Error("AwsTeardownWorkflow requires `repoTagName`");
+    }
+    if (!stageTypeTagName) {
+      throw new Error("AwsTeardownWorkflow requires `stageTypeTagName`");
+    }
+    if (!environmentTypeTagName) {
+      throw new Error("AwsTeardownWorkflow requires `environmentTypeTagName`");
+    }
+    if (!branchNameTagName) {
+      throw new Error("AwsTeardownWorkflow requires `branchNameTagName`");
+    }
+    if (!(rootProject instanceof MonorepoProject)) {
+      throw new Error(
+        "AwsTeardownWorkflow requires the root project to be a MonorepoProject"
+      );
+    }
+    const github = GitHub3.of(this.rootProject);
+    if (!github) {
+      throw new Error(
+        "AwsTeardownWorkflow requires a GitHub component in the root project"
+      );
+    }
+    const branchPatterns = resolveBranchPatterns(
+      deleteBranchPatterns,
+      awsDestructionTargets
+    );
+    const workflow = new GithubWorkflow(github, "teardown-dev");
+    workflow.on({
+      workflowDispatch: {},
+      schedule: [
+        {
+          cron: "32 6 * * *"
+        }
+      ],
+      delete: {
+        branches: branchPatterns
+      }
+    });
+    awsDestructionTargets.forEach((target) => {
+      const {
+        awsStageType,
+        deploymentTargetRole,
+        account,
+        region,
+        ciDeploymentConfig
+      } = target;
+      const { roleArn } = ciDeploymentConfig ?? {};
+      workflow.addJob(
+        `teardown-${awsStageType}-${deploymentTargetRole}-${account}-${region}`.toLowerCase(),
+        {
+          name: `Teardown Stacks in ${awsStageType}/${deploymentTargetRole}/${account}/${region}`,
+          runsOn: ["ubuntu-latest"],
+          permissions: {
+            contents: JobPermission6.READ,
+            idToken: JobPermission6.WRITE
+          },
+          env: {
+            REPO: "${{ github.repository }}",
+            REGIONS: [region].join(" ")
+          },
+          steps: [
+            {
+              name: `AWS Creds ${account}/${region}`,
+              uses: "aws-actions/configure-aws-credentials@v6",
+              with: {
+                "role-to-assume": roleArn,
+                "aws-region": region,
+                "role-duration-seconds": 900
+              }
+            },
+            {
+              name: "Fetch All Branches",
+              id: "fetch_branches",
+              uses: "actions/github-script@v9",
+              with: {
+                script: [
+                  "const all = await github.paginate(github.rest.repos.listBranches, {",
+                  "  owner: context.repo.owner,",
+                  "  repo: context.repo.repo,",
+                  "  per_page: 100",
+                  "});",
+                  "const names = all.map(b => b.name);",
+                  "console.log(`Found branches: ${names}`);",
+                  'core.setOutput("json", JSON.stringify(names));'
+                ].join("\n")
+              }
+            },
+            {
+              name: "Save Branches to File",
+              run: [
+                'echo "Saving branches to file"',
+                "echo '${{ steps.fetch_branches.outputs.json }}' | jq -r '.[]' | sort -u > branches.txt",
+                'echo "Branches:"',
+                "cat branches.txt"
+              ].join("\n")
+            },
+            {
+              name: "Find Stacks by Tag",
+              id: "find_stacks",
+              run: [
+                "set -euo pipefail",
+                ": > candidates.txt  # columns: arn region branchTag",
+                "# Build tag filters",
+                `TAG_FILTERS=( "Key=${repoTagName},Values=$REPO" )`,
+                `TAG_FILTERS+=( "Key=${stageTypeTagName},Values=${awsStageType}" )`,
+                `TAG_FILTERS+=( "Key=${environmentTypeTagName},Values=${deploymentTargetRole}" )`,
+                "for r in $REGIONS; do",
+                `  echo "Scanning region: $r"`,
+                "  aws resourcegroupstaggingapi get-resources \\",
+                '    --region "$r" \\',
+                '    --resource-type-filters "cloudformation:stack" \\',
+                '    --tag-filters "${TAG_FILTERS[@]}" \\',
+                ` | jq -r --arg r "$r" '`,
+                "    .ResourceTagMappingList[]",
+                "    | . as $res",
+                `    | ($res.Tags[] | select(.Key=="${branchNameTagName}") | .Value) as $branch`,
+                '    | [$res.ResourceARN, $r, ($branch // "")]',
+                "    | @tsv",
+                "    ' >> candidates.txt",
+                "done",
+                "echo 'Tagged stacks:'",
+                `(echo -e "ARN\\tREGION\\tBRANCH"; cat candidates.txt) | column -t -s $'\\t'`
+              ].join("\n")
+            },
+            {
+              name: "Determine Orphan Stacks (No Matching Branch)",
+              run: [
+                "set -euo pipefail",
+                ": > orphans.txt  # arn region branch",
+                "while IFS=$'\\t' read -r arn region branch; do",
+                '  [ -z "$arn" ] && continue',
+                '  if [ -z "$branch" ]; then',
+                "    # If no Branch tag, treat as not-a-preview; skip",
+                "    continue",
+                "  fi",
+                '  if ! grep -Fxq "$branch" branches.txt; then',
+                '    echo -e "$arn\\t$region\\t$branch" >> orphans.txt',
+                "  fi",
+                "done < candidates.txt",
+                "",
+                "if [ -s orphans.txt ]; then",
+                '  echo "Orphan stacks (no matching branch):"',
+                `  (echo -e "ARN\\tREGION\\tBRANCH"; cat orphans.txt) | column -t -s $'\\t'`,
+                "else",
+                '  echo "No orphan stacks found."',
+                "fi"
+              ].join("\n")
+            },
+            {
+              name: "Delete Orphan Stacks",
+              if: "hashFiles('orphans.txt') != ''",
+              run: [
+                "set -euo pipefail",
+                "while IFS=$'\\t' read -r arn region branch; do",
+                '  [ -z "$arn" ] && continue',
+                `  stack_name=$(cut -d'/' -f2 <<<"$arn")`,
+                '  echo "Deleting $stack_name (branch=$branch) in $region"',
+                '  aws cloudformation delete-stack --region "$region" --stack-name "$stack_name" || true',
+                "done < orphans.txt"
+              ].join("\n")
+            }
+          ]
+        }
+      );
+    });
+  }
+};
+
 // src/projects/aws-cdk-project.ts
 var AwsCdkProject = class extends awscdk.AwsCdkTypeScriptApp {
   constructor(userOptions) {
@@ -6272,6 +6476,9 @@ var AwsCdkProject = class extends awscdk.AwsCdkTypeScriptApp {
     deployWorkflows.forEach(
       (workflowOptions) => new AwsDeployWorkflow(this, workflowOptions)
     );
+    if (options.teardownWorkflow) {
+      new AwsTeardownWorkflow(parent, options.teardownWorkflow);
+    }
     const turboActive = TurboRepo.of(parent) !== void 0;
     if (turboActive) {
       const turbo = new TurboRepo(this);
@@ -6332,9 +6539,9 @@ var AwsCdkProject = class extends awscdk.AwsCdkTypeScriptApp {
 
 // src/typescript/typescript-config.ts
 import { relative as relative4 } from "path";
-import { Component as Component17 } from "projen";
+import { Component as Component18 } from "projen";
 import { ensureRelativePathStartsWithDot } from "projen/lib/util/path";
-var TypeScriptConfig = class extends Component17 {
+var TypeScriptConfig = class extends Component18 {
   constructor(project) {
     super(project);
     let tsPaths = {};
@@ -6371,11 +6578,13 @@ export {
   AwsDeployWorkflow,
   AwsDeploymentConfig,
   AwsDeploymentTarget,
+  AwsTeardownWorkflow,
   BUILT_IN_BUNDLES,
   CLAUDE_RULE_TARGET,
   COMPLETE_JOB_ID,
   DEFAULT_PRIORITY_LABELS,
   DEFAULT_STATUS_LABELS,
+  DEFAULT_TEARDOWN_BRANCH_PATTERNS,
   DEFAULT_TYPE_LABELS,
   JsiiFaker,
   MCP_TRANSPORT,