@codedrifters/configulator 0.0.424 → 0.0.425

package/lib/index.mjs

@@ -41932,6 +41932,33 @@ import { BuildWorkflow } from "projen/lib/build";
 import { GitHub as GitHub5, WorkflowSteps as WorkflowSteps2 } from "projen/lib/github";
 import { JobPermission as JobPermission5 } from "projen/lib/github/workflows-model";
 
+// src/workflows/deploy-gate.ts
+var DEPLOY_GATE = {
+  /**
+   * Hold each deploy job behind a GitHub environment so its protection rules —
+   * required reviewers, wait timers, deployment branch policies — apply before
+   * the job is sent to a runner.
+   */
+  ENVIRONMENT: "environment"
+};
+var resolveEnvironmentGate = (gate, environmentName, componentName) => {
+  const trimmed = environmentName?.trim();
+  if (gate === void 0) {
+    if (trimmed) {
+      throw new Error(
+        `${componentName} requires \`gate\` to be set when \`environmentName\` is supplied, got "${environmentName}" with no gate`
+      );
+    }
+    return void 0;
+  }
+  if (!trimmed) {
+    throw new Error(
+      `${componentName} requires a non-empty \`environmentName\` when \`gate\` is "${gate}"`
+    );
+  }
+  return trimmed;
+};
+
 // src/workflows/home-repository.ts
 var HOME_REPOSITORY_PATTERN = /^[A-Za-z0-9._-]+\/[A-Za-z0-9._-]+$/;
 var renderHomeRepositoryCondition = (homeRepository, componentName) => {
@@ -42299,6 +42326,11 @@ var AwsDeployWorkflow = class _AwsDeployWorkflow extends Component22 {
       artifact: options.diff?.artifact ?? true,
       summary: options.diff?.summary ?? true
     };
+    this.environmentName = resolveEnvironmentGate(
+      options.gate,
+      options.environmentName,
+      "AwsDeployWorkflow"
+    );
     this.homeRepository = options.homeRepository;
     const homeRepositoryCondition = renderHomeRepositoryCondition(
       this.homeRepository,
@@ -42386,10 +42418,12 @@ var AwsDeployWorkflow = class _AwsDeployWorkflow extends Component22 {
         ...homeRepositoryCondition ? [homeRepositoryCondition] : [],
         ...branchFilterCondition ? [`(${branchFilterCondition})`] : []
       ].join(" && ") + " }}";
+      const gatedOnDiff = !!this.environmentName && this.diffOptions.enabled;
       this.buildWorkflow.addPostBuildJob(deployJobName, {
         name: `Deploy ${this.project.name} ${target.awsStageType}/${target.deploymentTargetRole}/${target.account}/${target.region}`,
         needs: [
           "build",
+          ...gatedOnDiff ? [this.buildDiffJobName(target)] : [],
           ...this.deployAfterTargets.map((p) => {
             return this.buildJobName(p);
           })
@@ -42400,6 +42434,7 @@ var AwsDeployWorkflow = class _AwsDeployWorkflow extends Component22 {
           idToken: JobPermission5.WRITE,
           pullRequests: JobPermission5.WRITE
         },
+        ...this.environmentName ? { environment: this.environmentName } : void 0,
         concurrency: deployJobName,
         if: jobCondition,
         steps: [...this.deploySteps(target)]
@@ -43394,6 +43429,7 @@ export {
   DEFAULT_UNBLOCK_COMMENT_TEMPLATE,
   DEFAULT_UNBLOCK_DEPENDENTS_ENABLED,
   DEFAULT_UPSTREAM_CONFIGULATOR_ENABLED,
+  DEPLOY_GATE,
   DOCS_SYNC_AUDIT_SCHEMA_VERSION,
   GITHUB_ISSUE_TYPES,
   GITHUB_ISSUE_TYPE_BY_TITLE_PREFIX,
@@ -43624,6 +43660,7 @@ export {
   resolveBuildPolicy,
   resolveBundleAgentTiers,
   resolveDefaultAgentTier,
+  resolveEnvironmentGate,
   resolveIssueDefaults,
   resolveIssueTemplates,
   resolveModelAlias,