@ctxpipe/aws-cdk 0.0.0-beta-20260528142254

package/README.md

@@ -0,0 +1,131 @@
+# @ctxpipe/aws-cdk
+
+TypeScript AWS CDK library for deploying ctxpipe self-host infrastructure with one high-level construct: `CtxPipe`.
+
+## Quickstart
+
+```ts
+import * as cdk from "aws-cdk-lib";
+import { CtxPipe } from "@ctxpipe/aws-cdk";
+
+const app = new cdk.App();
+const stack = new cdk.Stack(app, "CtxPipeStack");
+
+new CtxPipe(stack, "CtxPipe", {
+  orgSlug: "acme",
+  size: "medium",
+  customDomain: {
+    domainName: "app.example.com",
+    hostedZoneId: "Z0123456789ABCDEF",
+  },
+  modelProvider: {
+    baseUrl: "https://api.openai.com/v1",
+    apiKey: cdk.SecretValue.unsafePlainText("replace-model-api-key"),
+    defaultModel: "gpt-4.1-mini",
+  },
+});
+```
+
+Deploy with your CDK app as usual (`cdk synth`, then `cdk deploy`).
+
+## Required props
+
+- `modelProvider`: OpenAI-compatible model endpoint, key, and model ID.
+- `orgSlug`: organization slug used by the deployed instance. Neptune is single-graph per cluster, so this construct configures one org per stack.
+- `customDomain`: provide `domainName` and `hostedZoneId` to set the public URL to `https://<domainName>` and add:
+  - ACM certificate for the domain (DNS validated in the provided hosted zone),
+  - Route53 DNS validation records required by ACM,
+  - Route53 ALB alias records,
+  - HTTPS listener on ALB,
+  - HTTP -> HTTPS redirect.
+  The same hosted zone ID is also used for SES domain identity and DKIM records.
+
+## Optional props
+
+- `connectorSecrets`: deployment-wide connector secrets (GitHub/Atlassian). Omit for first boot if connectors are not configured yet.
+- `size`: deployment capacity profile (`small`, `medium`, `large`). Defaults to `small` when omitted.
+
+## Sizing profiles
+
+`CtxPipe` is single-tenant by design and ships with three capacity presets:
+
+| Size | ECS task sizes (cpu/memory MiB) | ECS desired count | Aurora writer | Neptune instance | Backup retention |
+|---|---|---|---|---|---|
+| `small` (default) | backend `256/512`, worker `512/1024`, ui `256/512`, codesearch `512/1024`, migrate `256/512` | backend `1`, worker `1`, ui `1`, codesearch `1` | `t4g.small` | `db.t4g.medium` | 7 days |
+| `medium` | backend `512/1024`, worker `1024/2048`, ui `256/512`, codesearch `1024/2048`, migrate `512/1024` | backend `1`, worker `1`, ui `1`, codesearch `1` | `t4g.medium` | `db.t4g.large` | 7 days |
+| `large` | backend `1024/2048`, worker `2048/4096`, ui `512/1024`, codesearch `2048/4096`, migrate `1024/2048` | backend `2`, worker `2`, ui `1`, codesearch `1` | `t4g.large` | `db.t4g.xlarge` | 14 days |
+
+Sizing guidance:
+
+- Use `small` for pilots and cost-sensitive setups with moderate ingestion churn.
+- Use `medium` when ingestion/reindex bursts are frequent and you want more headroom.
+- Use `large` for high-ingestion repositories with stricter latency requirements.
+- Scale worker first when queue pressure grows; codesearch replicas stay conservative.
+
+Networking note:
+
+- All size presets keep private ECS services with NAT egress. Outbound integrations (model providers, GitHub, Atlassian) require internet access from private subnets.
+
+## What `CtxPipe` provisions
+
+- VPC with public + private subnets and NAT egress.
+- ECS cluster and Fargate services for backend, worker, ui, and codesearch.
+  - Service deployments use ECS deployment circuit breaker with automatic rollback.
+- Deploy-time database migration as a one-off ECS Fargate task triggered by a CloudFormation custom resource before service deployment.
+- Aurora PostgreSQL (private), Neptune cluster + instance (private), EFS (codesearch `/data`).
+- Secrets Manager secrets for database URL, model provider, and optional connectors.
+- SES domain identity + DKIM records + SMTP credentials in Secrets Manager for backend email delivery.
+- Public ALB routing to backend only (UI/codesearch remain internal-only).
+- Outputs for app URL and key secret ARNs.
+- Backup defaults enabled for Aurora, Neptune, and EFS.
+
+Runtime defaults injected by the construct include:
+
+- `GRAPH_DB_PROVIDER=neptune`
+- `GRAPH_DB_URI` from Neptune endpoint
+- `GRAPH_DB_URI_<orgSlug>` from the same Neptune endpoint
+- `UI_PROXY_URL=http://ui.ctxpipe.local:3002`
+- `CODESEARCH_URL=http://codesearch.ctxpipe.local:3001`
+- `AUTH_SECRET` generated in Secrets Manager and injected into backend/worker/codesearch/migrate tasks
+- `DATABASE_URL` secret injected into backend/worker/codesearch tasks
+- `SMTP_CONNECTION_URL` and `EMAIL_FROM_ADDRESS` injected into backend from SES SMTP credentials
+  - `EMAIL_FROM_ADDRESS` is always `ctxpipe-noreply@<hosted-zone-apex>`
+
+## Deploy-time migrations
+
+`CtxPipe` runs Postgres migrations automatically during `cdk deploy` by executing an internal one-off ECS task before the long-running ECS services are deployed or updated.
+
+- This migration step is part of the construct internals; consumers do not need to run `ecs run-task` manually.
+- A failed migration fails the CloudFormation deployment, preventing partially-updated services.
+- The migration custom-resource flow is bounded by Lambda/CloudFormation timing limits (up to 15 minutes per deployment operation). If your migrations can exceed that window, run heavy schema/data backfills outside this deploy-time hook (for example with a separate migration workflow).
+
+## Image-tag coupling note
+
+`@ctxpipe/aws-cdk` always uses one internal default GHCR tag for backend/worker/ui/codesearch/migrate task definitions. That tag is release-managed and stamped during CI to the same commit SHA used to publish `ghcr.io/ctxpipe-ai/*:<sha>` images on `main`.
+
+This keeps the package and service images aligned by default with no extra config in `CtxPipeProps`.
+
+## Environment checklist
+
+### Customer-supplied (required)
+
+- `AUTH_BASE_URL` (derived from `customDomain.domainName`)
+- `MODEL_PROVIDER_URL`, `MODEL_PROVIDER_API_KEY`, and `MODEL_FAST_NAME` (provided through `modelProvider`)
+
+### CDK-generated defaults
+
+- `AUTH_SECRET` (Secrets Manager generated value)
+- `DATABASE_URL` (Secrets Manager + Aurora endpoint)
+- `GRAPH_DB_PROVIDER=neptune`
+- `GRAPH_DB_URI` (Neptune endpoint)
+- `GRAPH_DB_URI_<orgSlug>` (Neptune endpoint for the configured org slug)
+- `UI_PROXY_URL` and `CODESEARCH_URL` (internal service DNS)
+- `SMTP_CONNECTION_URL` and `EMAIL_FROM_ADDRESS` (SES SMTP + Secrets Manager)
+
+Because Neptune is single-graph per cluster, this construct does not support multi-tenant self-hosting in one stack. Deploy separate stacks for separate org slugs.
+
+### Optional second deploy (connector onboarding)
+
+- `GITHUB_APP_ID`, `GITHUB_PRIVATE_KEY`, `GITHUB_WEBHOOK_SECRET`
+- `GITHUB_CLIENT_ID`, `GITHUB_CLIENT_SECRET`
+- `ATLASSIAN_CLIENT_ID`, `ATLASSIAN_CLIENT_SECRET`

package/lib/ctxpipe.d.ts

@@ -0,0 +1,20 @@
+import type * as secretsmanager from "aws-cdk-lib/aws-secretsmanager";
+import { Construct } from "constructs";
+import type { CtxPipeProps } from "./types";
+export declare class CtxPipe extends Construct {
+    readonly appUrl: string;
+    readonly databaseUrlSecret: secretsmanager.ISecret;
+    readonly modelProviderSecret: secretsmanager.ISecret;
+    readonly smtpSecret: secretsmanager.ISecret;
+    readonly connectorSecret?: secretsmanager.ISecret;
+    constructor(scope: Construct, id: string, props: CtxPipeProps);
+    private validateModelProvider;
+    private validateOrgSlug;
+    private resolveDefaults;
+    private resolveSizeProfile;
+    private resolveCustomDomain;
+    private resolveHostedZoneName;
+    private normalizeHostedZoneId;
+    private toHostedZoneApiId;
+}
+//# sourceMappingURL=ctxpipe.d.ts.map

package/lib/ctxpipe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ctxpipe.d.ts","sourceRoot":"","sources":["../src/ctxpipe.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,KAAK,cAAc,MAAM,gCAAgC,CAAC;AAEtE,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAevC,OAAO,KAAK,EAAE,YAAY,EAAe,MAAM,SAAS,CAAC;AAuFzD,qBAAa,OAAQ,SAAQ,SAAS;IACpC,SAAgB,MAAM,EAAE,MAAM,CAAC;IAC/B,SAAgB,iBAAiB,EAAE,cAAc,CAAC,OAAO,CAAC;IAC1D,SAAgB,mBAAmB,EAAE,cAAc,CAAC,OAAO,CAAC;IAC5D,SAAgB,UAAU,EAAE,cAAc,CAAC,OAAO,CAAC;IACnD,SAAgB,eAAe,CAAC,EAAE,cAAc,CAAC,OAAO,CAAC;gBAEtC,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY;IA8EpE,OAAO,CAAC,qBAAqB;IAS7B,OAAO,CAAC,eAAe;IAUvB,OAAO,CAAC,eAAe;IAcvB,OAAO,CAAC,kBAAkB;IAK1B,OAAO,CAAC,mBAAmB;IAsB3B,OAAO,CAAC,qBAAqB;IAiE7B,OAAO,CAAC,qBAAqB;IAM7B,OAAO,CAAC,iBAAiB;CAK1B"}

package/lib/ctxpipe.js

@@ -0,0 +1,322 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CtxPipe = void 0;
+const cdk = __importStar(require("aws-cdk-lib"));
+const acm = __importStar(require("aws-cdk-lib/aws-certificatemanager"));
+const ec2 = __importStar(require("aws-cdk-lib/aws-ec2"));
+const lambda = __importStar(require("aws-cdk-lib/aws-lambda"));
+const route53 = __importStar(require("aws-cdk-lib/aws-route53"));
+const cr = __importStar(require("aws-cdk-lib/custom-resources"));
+const constructs_1 = require("constructs");
+const pinned_service_image_tag_1 = require("./pinned-service-image-tag");
+const data_plane_construct_1 = require("./internal/data-plane-construct");
+const ingress_construct_1 = require("./internal/ingress-construct");
+const migrate_on_deploy_construct_1 = require("./internal/migrate-on-deploy-construct");
+const networking_construct_1 = require("./internal/networking-construct");
+const outputs_construct_1 = require("./internal/outputs-construct");
+const secrets_construct_1 = require("./internal/secrets-construct");
+const services_construct_1 = require("./internal/services-construct");
+const task_definitions_construct_1 = require("./internal/task-definitions-construct");
+const DEFAULT_BACKUP_RETENTION_DAYS = 7;
+const ORG_SLUG_PATTERN = /^[a-z0-9-]+$/;
+const DEFAULT_SIZE = "small";
+const SIZE_PROFILES = {
+    small: {
+        size: "small",
+        network: {
+            maxAzs: 2,
+            natGateways: 1,
+        },
+        database: {
+            auroraInstanceClass: ec2.InstanceClass.T4G,
+            auroraInstanceSize: ec2.InstanceSize.SMALL,
+            neptuneInstanceClass: "db.t4g.medium",
+        },
+        tasks: {
+            backend: { cpu: 256, memoryLimitMiB: 512 },
+            worker: { cpu: 512, memoryLimitMiB: 1024 },
+            ui: { cpu: 256, memoryLimitMiB: 512 },
+            codesearch: { cpu: 512, memoryLimitMiB: 1024 },
+            migrate: { cpu: 256, memoryLimitMiB: 512 },
+        },
+        services: {
+            backendDesiredCount: 1,
+            workerDesiredCount: 1,
+            uiDesiredCount: 1,
+            codesearchDesiredCount: 1,
+        },
+        backupRetentionDays: DEFAULT_BACKUP_RETENTION_DAYS,
+    },
+    medium: {
+        size: "medium",
+        network: {
+            maxAzs: 2,
+            natGateways: 1,
+        },
+        database: {
+            auroraInstanceClass: ec2.InstanceClass.T4G,
+            auroraInstanceSize: ec2.InstanceSize.MEDIUM,
+            neptuneInstanceClass: "db.t4g.large",
+        },
+        tasks: {
+            backend: { cpu: 512, memoryLimitMiB: 1024 },
+            worker: { cpu: 1024, memoryLimitMiB: 2048 },
+            ui: { cpu: 256, memoryLimitMiB: 512 },
+            codesearch: { cpu: 1024, memoryLimitMiB: 2048 },
+            migrate: { cpu: 512, memoryLimitMiB: 1024 },
+        },
+        services: {
+            backendDesiredCount: 1,
+            workerDesiredCount: 1,
+            uiDesiredCount: 1,
+            codesearchDesiredCount: 1,
+        },
+        backupRetentionDays: DEFAULT_BACKUP_RETENTION_DAYS,
+    },
+    large: {
+        size: "large",
+        network: {
+            maxAzs: 2,
+            natGateways: 1,
+        },
+        database: {
+            auroraInstanceClass: ec2.InstanceClass.T4G,
+            auroraInstanceSize: ec2.InstanceSize.LARGE,
+            neptuneInstanceClass: "db.t4g.xlarge",
+        },
+        tasks: {
+            backend: { cpu: 1024, memoryLimitMiB: 2048 },
+            worker: { cpu: 2048, memoryLimitMiB: 4096 },
+            ui: { cpu: 512, memoryLimitMiB: 1024 },
+            codesearch: { cpu: 2048, memoryLimitMiB: 4096 },
+            migrate: { cpu: 1024, memoryLimitMiB: 2048 },
+        },
+        services: {
+            backendDesiredCount: 2,
+            workerDesiredCount: 2,
+            uiDesiredCount: 1,
+            codesearchDesiredCount: 1,
+        },
+        backupRetentionDays: 14,
+    },
+};
+class CtxPipe extends constructs_1.Construct {
+    appUrl;
+    databaseUrlSecret;
+    modelProviderSecret;
+    smtpSecret;
+    connectorSecret;
+    constructor(scope, id, props) {
+        super(scope, id);
+        this.validateOrgSlug(props);
+        this.validateModelProvider(props);
+        const sizeProfile = this.resolveSizeProfile(props);
+        const resolvedCustomDomain = this.resolveCustomDomain(props);
+        const defaults = this.resolveDefaults(props, resolvedCustomDomain, sizeProfile);
+        const networking = new networking_construct_1.NetworkingConstruct(this, "Networking", {
+            maxAzs: sizeProfile.network.maxAzs,
+            natGateways: sizeProfile.network.natGateways,
+        });
+        const dataPlane = new data_plane_construct_1.DataPlaneConstruct(this, "DataPlane", {
+            networking: networking.resources,
+            defaults,
+            sizeProfile,
+        });
+        const secrets = new secrets_construct_1.SecretsConstruct(this, "Secrets", {
+            dataPlane: dataPlane.resources,
+            databaseName: defaults.databaseName,
+            modelProviderApiKey: props.modelProvider.apiKey,
+            hostedZone: resolvedCustomDomain.hostedZone,
+            connectorSecrets: props.connectorSecrets,
+            emailFromAddress: defaults.emailFromAddress,
+        });
+        const taskDefinitions = new task_definitions_construct_1.TaskDefinitionsConstruct(this, "TaskDefinitions", {
+            orgSlug: props.orgSlug,
+            networking: networking.resources,
+            dataPlane: dataPlane.resources,
+            secrets: secrets.resources,
+            customDomain: resolvedCustomDomain,
+            modelProviderBaseUrl: props.modelProvider.baseUrl,
+            modelProviderDefaultModel: props.modelProvider.defaultModel,
+            defaultImageTag: defaults.defaultImageTag,
+            sizeProfile,
+        });
+        const migrateOnDeploy = new migrate_on_deploy_construct_1.MigrateOnDeployConstruct(this, "MigrateOnDeploy", {
+            networking: networking.resources,
+            dataPlane: dataPlane.resources,
+            tasks: taskDefinitions.resources,
+            secrets: secrets.resources,
+        });
+        const services = new services_construct_1.ServicesConstruct(this, "Services", {
+            networking: networking.resources,
+            tasks: taskDefinitions.resources,
+            sizeProfile,
+            migrateDependency: migrateOnDeploy.resources.migrateResource,
+        });
+        const ingress = new ingress_construct_1.IngressConstruct(this, "Ingress", {
+            networking: networking.resources,
+            backendService: services.resources.backendService,
+            customDomain: resolvedCustomDomain,
+        });
+        this.databaseUrlSecret = secrets.resources.databaseUrlSecret;
+        this.modelProviderSecret = secrets.resources.modelProviderSecret;
+        this.smtpSecret = secrets.resources.smtpSecret;
+        this.connectorSecret = secrets.resources.connectorSecret;
+        this.appUrl = ingress.resources.appUrl;
+        new outputs_construct_1.OutputsConstruct(this, "Outputs", {
+            appUrl: this.appUrl,
+            albDnsName: networking.resources.alb.loadBalancerDnsName,
+            databaseUrlSecretArn: this.databaseUrlSecret.secretArn,
+            modelProviderSecretArn: this.modelProviderSecret.secretArn,
+            smtpSecretArn: this.smtpSecret.secretArn,
+            connectorSecretArn: this.connectorSecret?.secretArn,
+        });
+    }
+    validateModelProvider(props) {
+        if (props.modelProvider.baseUrl.length === 0) {
+            throw new Error("modelProvider.baseUrl is required");
+        }
+        if (props.modelProvider.defaultModel.length === 0) {
+            throw new Error("modelProvider.defaultModel is required");
+        }
+    }
+    validateOrgSlug(props) {
+        const orgSlug = props.orgSlug.trim();
+        if (orgSlug.length === 0) {
+            throw new Error("orgSlug is required");
+        }
+        if (!ORG_SLUG_PATTERN.test(orgSlug)) {
+            throw new Error("orgSlug must contain only lowercase letters, numbers, or hyphens");
+        }
+    }
+    resolveDefaults(props, customDomain, sizeProfile) {
+        const normalizedZoneName = customDomain.hostedZoneName.replace(/\.$/, "");
+        return {
+            databaseName: "ctxpipe",
+            backupRetentionDays: sizeProfile.backupRetentionDays,
+            defaultImageTag: pinned_service_image_tag_1.PINNED_SERVICE_IMAGE_TAG,
+            emailFromAddress: `ctxpipe-noreply@${normalizedZoneName}`,
+        };
+    }
+    resolveSizeProfile(props) {
+        const size = props.size ?? DEFAULT_SIZE;
+        return SIZE_PROFILES[size];
+    }
+    resolveCustomDomain(props) {
+        const hostedZoneName = this.resolveHostedZoneName(props.customDomain.hostedZoneId);
+        const hostedZone = route53.HostedZone.fromHostedZoneAttributes(this, "CustomDomainHostedZone", {
+            hostedZoneId: this.normalizeHostedZoneId(props.customDomain.hostedZoneId),
+            zoneName: hostedZoneName,
+        });
+        return {
+            ...props.customDomain,
+            hostedZone,
+            hostedZoneName,
+            certificate: new acm.Certificate(this, "CustomDomainCertificate", {
+                domainName: props.customDomain.domainName,
+                validation: acm.CertificateValidation.fromDns(hostedZone),
+            }),
+        };
+    }
+    resolveHostedZoneName(hostedZoneId) {
+        const lookup = new cr.AwsCustomResource(this, "HostedZoneLookup", {
+            onCreate: {
+                service: "Route53",
+                action: "getHostedZone",
+                parameters: {
+                    Id: this.toHostedZoneApiId(hostedZoneId),
+                },
+                physicalResourceId: cr.PhysicalResourceId.of(`route53-hosted-zone-${this.normalizeHostedZoneId(hostedZoneId)}`),
+            },
+            onUpdate: {
+                service: "Route53",
+                action: "getHostedZone",
+                parameters: {
+                    Id: this.toHostedZoneApiId(hostedZoneId),
+                },
+                physicalResourceId: cr.PhysicalResourceId.of(`route53-hosted-zone-${this.normalizeHostedZoneId(hostedZoneId)}`),
+            },
+            policy: cr.AwsCustomResourcePolicy.fromSdkCalls({
+                resources: cr.AwsCustomResourcePolicy.ANY_RESOURCE,
+            }),
+            installLatestAwsSdk: false,
+        });
+        const normalizeFunction = new lambda.Function(this, "HostedZoneNameNormalizeFunction", {
+            runtime: lambda.Runtime.NODEJS_20_X,
+            handler: "index.handler",
+            timeout: cdk.Duration.seconds(15),
+            code: lambda.Code.fromInline(`
+          exports.handler = async (event) => {
+            const physicalId = event.PhysicalResourceId || "hosted-zone-name-normalized";
+            if (event.RequestType === "Delete") {
+              return { PhysicalResourceId: physicalId };
+            }
+
+            const rawName = String(event.ResourceProperties.HostedZoneName || "");
+            const normalizedName = rawName.replace(/\\.$/, "");
+            return {
+              PhysicalResourceId: physicalId,
+              Data: {
+                HostedZoneName: normalizedName
+              }
+            };
+          };
+        `),
+        });
+        const normalizeProvider = new cr.Provider(this, "HostedZoneNameNormalizeProvider", {
+            onEventHandler: normalizeFunction,
+        });
+        const normalizeResource = new cdk.CustomResource(this, "HostedZoneNameNormalize", {
+            serviceToken: normalizeProvider.serviceToken,
+            properties: {
+                HostedZoneName: lookup.getResponseField("HostedZone.Name"),
+            },
+        });
+        return normalizeResource.getAttString("HostedZoneName");
+    }
+    normalizeHostedZoneId(hostedZoneId) {
+        return hostedZoneId.startsWith("/hostedzone/")
+            ? hostedZoneId.slice("/hostedzone/".length)
+            : hostedZoneId;
+    }
+    toHostedZoneApiId(hostedZoneId) {
+        return hostedZoneId.startsWith("/hostedzone/")
+            ? hostedZoneId
+            : `/hostedzone/${hostedZoneId}`;
+    }
+}
+exports.CtxPipe = CtxPipe;
+//# sourceMappingURL=ctxpipe.js.map

package/lib/ctxpipe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ctxpipe.js","sourceRoot":"","sources":["../src/ctxpipe.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,iDAAmC;AACnC,wEAA0D;AAC1D,yDAA2C;AAC3C,+DAAiD;AACjD,iEAAmD;AAEnD,iEAAmD;AACnD,2CAAuC;AACvC,yEAAsE;AAMtE,0EAAqE;AACrE,oEAAgE;AAChE,wFAAkF;AAClF,0EAAsE;AACtE,oEAAgE;AAChE,oEAAgE;AAChE,sEAAkE;AAClE,sFAAiF;AAGjF,MAAM,6BAA6B,GAAG,CAAC,CAAC;AACxC,MAAM,gBAAgB,GAAG,cAAc,CAAC;AACxC,MAAM,YAAY,GAAgB,OAAO,CAAC;AAE1C,MAAM,aAAa,GAA4C;IAC7D,KAAK,EAAE;QACL,IAAI,EAAE,OAAO;QACb,OAAO,EAAE;YACP,MAAM,EAAE,CAAC;YACT,WAAW,EAAE,CAAC;SACf;QACD,QAAQ,EAAE;YACR,mBAAmB,EAAE,GAAG,CAAC,aAAa,CAAC,GAAG;YAC1C,kBAAkB,EAAE,GAAG,CAAC,YAAY,CAAC,KAAK;YAC1C,oBAAoB,EAAE,eAAe;SACtC;QACD,KAAK,EAAE;YACL,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE;YAC1C,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE;YAC1C,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE;YACrC,UAAU,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE;YAC9C,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE;SAC3C;QACD,QAAQ,EAAE;YACR,mBAAmB,EAAE,CAAC;YACtB,kBAAkB,EAAE,CAAC;YACrB,cAAc,EAAE,CAAC;YACjB,sBAAsB,EAAE,CAAC;SAC1B;QACD,mBAAmB,EAAE,6BAA6B;KACnD;IACD,MAAM,EAAE;QACN,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE;YACP,MAAM,EAAE,CAAC;YACT,WAAW,EAAE,CAAC;SACf;QACD,QAAQ,EAAE;YACR,mBAAmB,EAAE,GAAG,CAAC,aAAa,CAAC,GAAG;YAC1C,kBAAkB,EAAE,GAAG,CAAC,YAAY,CAAC,MAAM;YAC3C,oBAAoB,EAAE,cAAc;SACrC;QACD,KAAK,EAAE;YACL,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE;YAC3C,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE;YAC3C,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE;YACrC,UAAU,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE;YAC/C,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE;SAC5C;QACD,QAAQ,EAAE;YACR,mBAAmB,EAAE,CAAC;YACtB,kBAAkB,EAAE,CAAC;YACrB,cAAc,EAAE,CAAC;YACjB,sBAAsB,EAAE,CAAC;SAC1B;QACD,mBAAmB,EAAE,6BAA6B;KACnD;IACD,KAAK,EAAE;QACL,IAAI,EAAE,OAAO;QACb,OAAO,EAAE;YACP,MAAM,EAAE,CAAC;YACT,WAAW,EAAE,CAAC;SACf;QACD,QAAQ,EAAE;YACR,mBAAmB,EAAE,GAAG,CAAC,aAAa,CAAC,GAAG;YAC1C,kBAAkB,EAAE,GAAG,CAAC,YAAY,CAAC,KAAK;YAC1C,oBAAoB,EAAE,eAAe;SACtC;QACD,KAAK,EAAE;YACL,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE;YAC5C,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE;YAC3C,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE;YACtC,UAAU,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE;YAC/C,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE;SAC7C;QACD,QAAQ,EAAE;YACR,mBAAmB,EAAE,CAAC;YACtB,kBAAkB,EAAE,CAAC;YACrB,cAAc,EAAE,CAAC;YACjB,sBAAsB,EAAE,CAAC;SAC1B;QACD,mBAAmB,EAAE,EAAE;KACxB;CACF,CAAC;AAEF,MAAa,OAAQ,SAAQ,sBAAS;IACpB,MAAM,CAAS;IACf,iBAAiB,CAAyB;IAC1C,mBAAmB,CAAyB;IAC5C,UAAU,CAAyB;IACnC,eAAe,CAA0B;IAEzD,YAAmB,KAAgB,EAAE,EAAU,EAAE,KAAmB;QAClE,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAEjB,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,oBAAoB,GAAG,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAE7D,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,oBAAoB,EAAE,WAAW,CAAC,CAAC;QAEhF,MAAM,UAAU,GAAG,IAAI,0CAAmB,CAAC,IAAI,EAAE,YAAY,EAAE;YAC7D,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM;YAClC,WAAW,EAAE,WAAW,CAAC,OAAO,CAAC,WAAW;SAC7C,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,IAAI,yCAAkB,CAAC,IAAI,EAAE,WAAW,EAAE;YAC1D,UAAU,EAAE,UAAU,CAAC,SAAS;YAChC,QAAQ;YACR,WAAW;SACZ,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,IAAI,oCAAgB,CAAC,IAAI,EAAE,SAAS,EAAE;YACpD,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,mBAAmB,EAAE,KAAK,CAAC,aAAa,CAAC,MAAM;YAC/C,UAAU,EAAE,oBAAoB,CAAC,UAAU;YAC3C,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QAEH,MAAM,eAAe,GAAG,IAAI,qDAAwB,CAAC,IAAI,EAAE,iBAAiB,EAAE;YAC5E,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,UAAU,EAAE,UAAU,CAAC,SAAS;YAChC,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,OAAO,EAAE,OAAO,CAAC,SAAS;YAC1B,YAAY,EAAE,oBAAoB;YAClC,oBAAoB,EAAE,KAAK,CAAC,aAAa,CAAC,OAAO;YACjD,yBAAyB,EAAE,KAAK,CAAC,aAAa,CAAC,YAAY;YAC3D,eAAe,EAAE,QAAQ,CAAC,eAAe;YACzC,WAAW;SACZ,CAAC,CAAC;QAEH,MAAM,eAAe,GAAG,IAAI,sDAAwB,CAAC,IAAI,EAAE,iBAAiB,EAAE;YAC5E,UAAU,EAAE,UAAU,CAAC,SAAS;YAChC,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,KAAK,EAAE,eAAe,CAAC,SAAS;YAChC,OAAO,EAAE,OAAO,CAAC,SAAS;SAC3B,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,IAAI,sCAAiB,CAAC,IAAI,EAAE,UAAU,EAAE;YACvD,UAAU,EAAE,UAAU,CAAC,SAAS;YAChC,KAAK,EAAE,eAAe,CAAC,SAAS;YAChC,WAAW;YACX,iBAAiB,EAAE,eAAe,CAAC,SAAS,CAAC,eAAe;SAC7D,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,IAAI,oCAAgB,CAAC,IAAI,EAAE,SAAS,EAAE;YACpD,UAAU,EAAE,UAAU,CAAC,SAAS;YAChC,cAAc,EAAE,QAAQ,CAAC,SAAS,CAAC,cAAc;YACjD,YAAY,EAAE,oBAAoB;SACnC,CAAC,CAAC;QAEH,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,SAAS,CAAC,iBAAiB,CAAC;QAC7D,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC,SAAS,CAAC,mBAAmB,CAAC;QACjE,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC;QAC/C,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,eAAe,CAAC;QACzD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC;QAEvC,IAAI,oCAAgB,CAAC,IAAI,EAAE,SAAS,EAAE;YACpC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,mBAAmB;YACxD,oBAAoB,EAAE,IAAI,CAAC,iBAAiB,CAAC,SAAS;YACtD,sBAAsB,EAAE,IAAI,CAAC,mBAAmB,CAAC,SAAS;YAC1D,aAAa,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS;YACxC,kBAAkB,EAAE,IAAI,CAAC,eAAe,EAAE,SAAS;SACpD,CAAC,CAAC;IACL,CAAC;IAEO,qBAAqB,CAAC,KAAmB;QAC/C,IAAI,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,KAAK,CAAC,aAAa,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAEO,eAAe,CAAC,KAAmB;QACzC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;IAEO,eAAe,CACrB,KAAmB,EACnB,YAA8C,EAC9C,WAA+B;QAE/B,MAAM,kBAAkB,GAAG,YAAY,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC1E,OAAO;YACL,YAAY,EAAE,SAAS;YACvB,mBAAmB,EAAE,WAAW,CAAC,mBAAmB;YACpD,eAAe,EAAE,mDAAwB;YACzC,gBAAgB,EAAE,mBAAmB,kBAAkB,EAAE;SAC1D,CAAC;IACJ,CAAC;IAEO,kBAAkB,CAAC,KAAmB;QAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,YAAY,CAAC;QACxC,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAEO,mBAAmB,CAAC,KAAmB;QAC7C,MAAM,cAAc,GAAG,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QACnF,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,wBAAwB,CAC5D,IAAI,EACJ,wBAAwB,EACxB;YACE,YAAY,EAAE,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC;YACzE,QAAQ,EAAE,cAAc;SACzB,CACF,CAAC;QAEF,OAAO;YACL,GAAG,KAAK,CAAC,YAAY;YACrB,UAAU;YACV,cAAc;YACd,WAAW,EAAE,IAAI,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,yBAAyB,EAAE;gBAChE,UAAU,EAAE,KAAK,CAAC,YAAY,CAAC,UAAU;gBACzC,UAAU,EAAE,GAAG,CAAC,qBAAqB,CAAC,OAAO,CAAC,UAAU,CAAC;aAC1D,CAAC;SACH,CAAC;IACJ,CAAC;IAEO,qBAAqB,CAAC,YAAoB;QAChD,MAAM,MAAM,GAAG,IAAI,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,kBAAkB,EAAE;YAChE,QAAQ,EAAE;gBACR,OAAO,EAAE,SAAS;gBAClB,MAAM,EAAE,eAAe;gBACvB,UAAU,EAAE;oBACV,EAAE,EAAE,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC;iBACzC;gBACD,kBAAkB,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE,CAC1C,uBAAuB,IAAI,CAAC,qBAAqB,CAAC,YAAY,CAAC,EAAE,CAClE;aACF;YACD,QAAQ,EAAE;gBACR,OAAO,EAAE,SAAS;gBAClB,MAAM,EAAE,eAAe;gBACvB,UAAU,EAAE;oBACV,EAAE,EAAE,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC;iBACzC;gBACD,kBAAkB,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE,CAC1C,uBAAuB,IAAI,CAAC,qBAAqB,CAAC,YAAY,CAAC,EAAE,CAClE;aACF;YACD,MAAM,EAAE,EAAE,CAAC,uBAAuB,CAAC,YAAY,CAAC;gBAC9C,SAAS,EAAE,EAAE,CAAC,uBAAuB,CAAC,YAAY;aACnD,CAAC;YACF,mBAAmB,EAAE,KAAK;SAC3B,CAAC,CAAC;QAEH,MAAM,iBAAiB,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,iCAAiC,EAAE;YACrF,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW;YACnC,OAAO,EAAE,eAAe;YACxB,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;;;;;;;;;;;;;;;;SAgB1B,CAAC;SACL,CAAC,CAAC;QAEH,MAAM,iBAAiB,GAAG,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,iCAAiC,EAAE;YACjF,cAAc,EAAE,iBAAiB;SAClC,CAAC,CAAC;QAEH,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,yBAAyB,EAAE;YAChF,YAAY,EAAE,iBAAiB,CAAC,YAAY;YAC5C,UAAU,EAAE;gBACV,cAAc,EAAE,MAAM,CAAC,gBAAgB,CAAC,iBAAiB,CAAC;aAC3D;SACF,CAAC,CAAC;QAEH,OAAO,iBAAiB,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC;IAC1D,CAAC;IAEO,qBAAqB,CAAC,YAAoB;QAChD,OAAO,YAAY,CAAC,UAAU,CAAC,cAAc,CAAC;YAC5C,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC;YAC3C,CAAC,CAAC,YAAY,CAAC;IACnB,CAAC;IAEO,iBAAiB,CAAC,YAAoB;QAC5C,OAAO,YAAY,CAAC,UAAU,CAAC,cAAc,CAAC;YAC5C,CAAC,CAAC,YAAY;YACd,CAAC,CAAC,eAAe,YAAY,EAAE,CAAC;IACpC,CAAC;CACF;AA7ND,0BA6NC"}

package/lib/index.d.ts

@@ -0,0 +1,3 @@
+export { CtxPipe } from "./ctxpipe";
+export type { CtxPipeConnectorSecretsProps, CtxPipeCustomDomainProps, CtxPipeModelProviderProps, CtxPipeProps, CtxPipeSize, } from "./types";
+//# sourceMappingURL=index.d.ts.map

package/lib/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,YAAY,EACV,4BAA4B,EAC5B,wBAAwB,EACxB,yBAAyB,EACzB,YAAY,EACZ,WAAW,GACZ,MAAM,SAAS,CAAC"}

package/lib/index.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CtxPipe = void 0;
+var ctxpipe_1 = require("./ctxpipe");
+Object.defineProperty(exports, "CtxPipe", { enumerable: true, get: function () { return ctxpipe_1.CtxPipe; } });
+//# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,qCAAoC;AAA3B,kGAAA,OAAO,OAAA"}

package/lib/internal/contracts.d.ts

@@ -0,0 +1,154 @@
+import type * as cdk from "aws-cdk-lib";
+import type * as acm from "aws-cdk-lib/aws-certificatemanager";
+import type * as ec2 from "aws-cdk-lib/aws-ec2";
+import type * as ecs from "aws-cdk-lib/aws-ecs";
+import type * as efs from "aws-cdk-lib/aws-efs";
+import type * as elbv2 from "aws-cdk-lib/aws-elasticloadbalancingv2";
+import type * as neptune from "aws-cdk-lib/aws-neptune";
+import type * as rds from "aws-cdk-lib/aws-rds";
+import type * as route53 from "aws-cdk-lib/aws-route53";
+import type * as secretsmanager from "aws-cdk-lib/aws-secretsmanager";
+import type { IDependable } from "constructs";
+import type { CtxPipeConnectorSecretsProps, CtxPipeCustomDomainProps } from "../types";
+import type { CtxPipeSize } from "../types";
+export interface ResolvedCtxPipeCustomDomainProps extends CtxPipeCustomDomainProps {
+    readonly hostedZone: route53.IHostedZone;
+    readonly hostedZoneName: string;
+    readonly certificate: acm.ICertificate;
+}
+export interface CtxPipeResolvedDefaults {
+    readonly databaseName: string;
+    readonly backupRetentionDays: number;
+    readonly defaultImageTag: string;
+    readonly emailFromAddress: string;
+}
+export interface CtxPipeTaskSize {
+    readonly cpu: number;
+    readonly memoryLimitMiB: number;
+}
+export interface CtxPipeServiceScaleProfile {
+    readonly backendDesiredCount: number;
+    readonly workerDesiredCount: number;
+    readonly uiDesiredCount: number;
+    readonly codesearchDesiredCount: number;
+}
+export interface CtxPipeSizeProfile {
+    readonly size: CtxPipeSize;
+    readonly network: {
+        readonly maxAzs: number;
+        readonly natGateways: number;
+    };
+    readonly database: {
+        readonly auroraInstanceClass: ec2.InstanceClass;
+        readonly auroraInstanceSize: ec2.InstanceSize;
+        readonly neptuneInstanceClass: string;
+    };
+    readonly tasks: {
+        readonly backend: CtxPipeTaskSize;
+        readonly worker: CtxPipeTaskSize;
+        readonly ui: CtxPipeTaskSize;
+        readonly codesearch: CtxPipeTaskSize;
+        readonly migrate: CtxPipeTaskSize;
+    };
+    readonly services: CtxPipeServiceScaleProfile;
+    readonly backupRetentionDays: number;
+}
+export interface NetworkingResources {
+    readonly vpc: ec2.Vpc;
+    readonly appSecurityGroup: ec2.SecurityGroup;
+    readonly dbSecurityGroup: ec2.SecurityGroup;
+    readonly neptuneSecurityGroup: ec2.SecurityGroup;
+    readonly efsSecurityGroup: ec2.SecurityGroup;
+    readonly cluster: ecs.Cluster;
+    readonly alb: elbv2.ApplicationLoadBalancer;
+    readonly httpListener: elbv2.ApplicationListener;
+}
+export interface DataPlaneResources {
+    readonly dbCluster: rds.DatabaseCluster;
+    readonly dbCredentialsSecret: secretsmanager.Secret;
+    readonly neptuneCluster: neptune.CfnDBCluster;
+    readonly neptuneInstance: neptune.CfnDBInstance;
+    readonly codesearchFileSystem: efs.FileSystem;
+    readonly graphDbUri: string;
+}
+export interface SecretsResources {
+    readonly authSecret: secretsmanager.Secret;
+    readonly databaseUrlSecret: secretsmanager.Secret;
+    readonly modelProviderSecret: secretsmanager.Secret;
+    readonly smtpSecret: secretsmanager.Secret;
+    readonly connectorSecret?: secretsmanager.Secret;
+    readonly connectorEnv: Record<string, ecs.Secret>;
+}
+export interface TaskDefinitionsResources {
+    readonly backendTask: ecs.FargateTaskDefinition;
+    readonly workerTask: ecs.FargateTaskDefinition;
+    readonly uiTask: ecs.FargateTaskDefinition;
+    readonly codesearchTask: ecs.FargateTaskDefinition;
+    readonly migrateTask: ecs.FargateTaskDefinition;
+}
+export interface ServiceResources {
+    readonly backendService: ecs.FargateService;
+    readonly workerService: ecs.FargateService;
+    readonly uiService: ecs.FargateService;
+    readonly codesearchService: ecs.FargateService;
+}
+export interface IngressResources {
+    readonly appUrl: string;
+}
+export interface MigrateOnDeployResources {
+    readonly migrateResource: cdk.CustomResource;
+}
+export interface NetworkingConstructProps {
+    readonly maxAzs: number;
+    readonly natGateways: number;
+}
+export interface DataPlaneConstructProps {
+    readonly networking: NetworkingResources;
+    readonly defaults: CtxPipeResolvedDefaults;
+    readonly sizeProfile: CtxPipeSizeProfile;
+}
+export interface SecretsConstructProps {
+    readonly dataPlane: DataPlaneResources;
+    readonly databaseName: string;
+    readonly modelProviderApiKey: cdk.SecretValue;
+    readonly hostedZone: route53.IHostedZone;
+    readonly connectorSecrets?: CtxPipeConnectorSecretsProps;
+    readonly emailFromAddress: string;
+}
+export interface TaskDefinitionsConstructProps {
+    readonly orgSlug: string;
+    readonly networking: NetworkingResources;
+    readonly dataPlane: DataPlaneResources;
+    readonly secrets: SecretsResources;
+    readonly customDomain: ResolvedCtxPipeCustomDomainProps;
+    readonly modelProviderBaseUrl: string;
+    readonly modelProviderDefaultModel: string;
+    readonly defaultImageTag: string;
+    readonly sizeProfile: CtxPipeSizeProfile;
+}
+export interface ServicesConstructProps {
+    readonly networking: NetworkingResources;
+    readonly tasks: TaskDefinitionsResources;
+    readonly sizeProfile: CtxPipeSizeProfile;
+    readonly migrateDependency?: IDependable;
+}
+export interface IngressConstructProps {
+    readonly networking: NetworkingResources;
+    readonly backendService: ecs.FargateService;
+    readonly customDomain: ResolvedCtxPipeCustomDomainProps;
+}
+export interface MigrateOnDeployConstructProps {
+    readonly networking: NetworkingResources;
+    readonly dataPlane: DataPlaneResources;
+    readonly tasks: TaskDefinitionsResources;
+    readonly secrets: SecretsResources;
+}
+export interface OutputsConstructProps {
+    readonly appUrl: string;
+    readonly albDnsName: string;
+    readonly databaseUrlSecretArn: string;
+    readonly modelProviderSecretArn: string;
+    readonly smtpSecretArn: string;
+    readonly connectorSecretArn?: string;
+}
+//# sourceMappingURL=contracts.d.ts.map