@ctxpipe/aws-cdk 0.0.0-beta-20260528142254

package/lib/internal/contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.d.ts","sourceRoot":"","sources":["../../src/internal/contracts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,GAAG,MAAM,aAAa,CAAC;AACxC,OAAO,KAAK,KAAK,GAAG,MAAM,oCAAoC,CAAC;AAC/D,OAAO,KAAK,KAAK,GAAG,MAAM,qBAAqB,CAAC;AAChD,OAAO,KAAK,KAAK,GAAG,MAAM,qBAAqB,CAAC;AAChD,OAAO,KAAK,KAAK,GAAG,MAAM,qBAAqB,CAAC;AAChD,OAAO,KAAK,KAAK,KAAK,MAAM,wCAAwC,CAAC;AACrE,OAAO,KAAK,KAAK,OAAO,MAAM,yBAAyB,CAAC;AACxD,OAAO,KAAK,KAAK,GAAG,MAAM,qBAAqB,CAAC;AAChD,OAAO,KAAK,KAAK,OAAO,MAAM,yBAAyB,CAAC;AACxD,OAAO,KAAK,KAAK,cAAc,MAAM,gCAAgC,CAAC;AACtE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,KAAK,EAAE,4BAA4B,EAAE,wBAAwB,EAAE,MAAM,UAAU,CAAC;AACvF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAE5C,MAAM,WAAW,gCAAiC,SAAQ,wBAAwB;IAChF,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,WAAW,CAAC;IACzC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,YAAY,CAAC;CACxC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;CACzC;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;KAC9B,CAAC;IACF,QAAQ,CAAC,QAAQ,EAAE;QACjB,QAAQ,CAAC,mBAAmB,EAAE,GAAG,CAAC,aAAa,CAAC;QAChD,QAAQ,CAAC,kBAAkB,EAAE,GAAG,CAAC,YAAY,CAAC;QAC9C,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;KACvC,CAAC;IACF,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;QAClC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;QACjC,QAAQ,CAAC,EAAE,EAAE,eAAe,CAAC;QAC7B,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;QACrC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;KACnC,CAAC;IACF,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;IAC9C,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;CACtC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC;IACtB,QAAQ,CAAC,gBAAgB,EAAE,GAAG,CAAC,aAAa,CAAC;IAC7C,QAAQ,CAAC,eAAe,EAAE,GAAG,CAAC,aAAa,CAAC;IAC5C,QAAQ,CAAC,oBAAoB,EAAE,GAAG,CAAC,aAAa,CAAC;IACjD,QAAQ,CAAC,gBAAgB,EAAE,GAAG,CAAC,aAAa,CAAC;IAC7C,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC;IAC9B,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,uBAAuB,CAAC;IAC5C,QAAQ,CAAC,YAAY,EAAE,KAAK,CAAC,mBAAmB,CAAC;CAClD;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,eAAe,CAAC;IACxC,QAAQ,CAAC,mBAAmB,EAAE,cAAc,CAAC,MAAM,CAAC;IACpD,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC,YAAY,CAAC;IAC9C,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC,aAAa,CAAC;IAChD,QAAQ,CAAC,oBAAoB,EAAE,GAAG,CAAC,UAAU,CAAC;IAC9C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAC,MAAM,CAAC;IAC3C,QAAQ,CAAC,iBAAiB,EAAE,cAAc,CAAC,MAAM,CAAC;IAClD,QAAQ,CAAC,mBAAmB,EAAE,cAAc,CAAC,MAAM,CAAC;IACpD,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAC,MAAM,CAAC;IAC3C,QAAQ,CAAC,eAAe,CAAC,EAAE,cAAc,CAAC,MAAM,CAAC;IACjD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CACnD;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,qBAAqB,CAAC;IAChD,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,qBAAqB,CAAC;IAC/C,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,qBAAqB,CAAC;IAC3C,QAAQ,CAAC,cAAc,EAAE,GAAG,CAAC,qBAAqB,CAAC;IACnD,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,qBAAqB,CAAC;CACjD;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,cAAc,EAAE,GAAG,CAAC,cAAc,CAAC;IAC5C,QAAQ,CAAC,aAAa,EAAE,GAAG,CAAC,cAAc,CAAC;IAC3C,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,cAAc,CAAC;IACvC,QAAQ,CAAC,iBAAiB,EAAE,GAAG,CAAC,cAAc,CAAC;CAChD;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,eAAe,EAAE,GAAG,CAAC,cAAc,CAAC;CAC9C;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;IACzC,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAC;IAC3C,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC;CAC1C;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAC;IACvC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,mBAAmB,EAAE,GAAG,CAAC,WAAW,CAAC;IAC9C,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,WAAW,CAAC;IACzC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,4BAA4B,CAAC;IACzD,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;IACzC,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAC;IACvC,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,gCAAgC,CAAC;IACxD,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAC;IAC3C,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC;CAC1C;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;IACzC,QAAQ,CAAC,KAAK,EAAE,wBAAwB,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC;IACzC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,WAAW,CAAC;CAC1C;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;IACzC,QAAQ,CAAC,cAAc,EAAE,GAAG,CAAC,cAAc,CAAC;IAC5C,QAAQ,CAAC,YAAY,EAAE,gCAAgC,CAAC;CACzD;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;IACzC,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAC;IACvC,QAAQ,CAAC,KAAK,EAAE,wBAAwB,CAAC;IACzC,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;CACpC;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CACtC"}

package/lib/internal/contracts.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=contracts.js.map

package/lib/internal/contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.js","sourceRoot":"","sources":["../../src/internal/contracts.ts"],"names":[],"mappings":""}

package/lib/internal/data-plane-construct.d.ts

@@ -0,0 +1,7 @@
+import { Construct } from "constructs";
+import type { DataPlaneConstructProps, DataPlaneResources } from "./contracts";
+export declare class DataPlaneConstruct extends Construct {
+    readonly resources: DataPlaneResources;
+    constructor(scope: Construct, id: string, props: DataPlaneConstructProps);
+}
+//# sourceMappingURL=data-plane-construct.d.ts.map

package/lib/internal/data-plane-construct.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-plane-construct.d.ts","sourceRoot":"","sources":["../../src/internal/data-plane-construct.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,KAAK,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAE/E,qBAAa,kBAAmB,SAAQ,SAAS;IAC/C,SAAgB,SAAS,EAAE,kBAAkB,CAAC;gBAE3B,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,uBAAuB;CAgFhF"}

package/lib/internal/data-plane-construct.js

@@ -0,0 +1,114 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DataPlaneConstruct = void 0;
+const cdk = __importStar(require("aws-cdk-lib"));
+const ec2 = __importStar(require("aws-cdk-lib/aws-ec2"));
+const efs = __importStar(require("aws-cdk-lib/aws-efs"));
+const neptune = __importStar(require("aws-cdk-lib/aws-neptune"));
+const rds = __importStar(require("aws-cdk-lib/aws-rds"));
+const secretsmanager = __importStar(require("aws-cdk-lib/aws-secretsmanager"));
+const constructs_1 = require("constructs");
+class DataPlaneConstruct extends constructs_1.Construct {
+    resources;
+    constructor(scope, id, props) {
+        super(scope, id);
+        const dbCredentialsSecret = new secretsmanager.Secret(this, "DatabaseCredentialsSecret", {
+            generateSecretString: {
+                secretStringTemplate: JSON.stringify({ username: "ctxpipe" }),
+                generateStringKey: "password",
+                excludePunctuation: true,
+            },
+        });
+        const dbCluster = new rds.DatabaseCluster(this, "Database", {
+            engine: rds.DatabaseClusterEngine.auroraPostgres({
+                version: rds.AuroraPostgresEngineVersion.of("16.4", "16"),
+            }),
+            credentials: rds.Credentials.fromSecret(dbCredentialsSecret),
+            defaultDatabaseName: props.defaults.databaseName,
+            writer: rds.ClusterInstance.provisioned("writer", {
+                instanceType: ec2.InstanceType.of(props.sizeProfile.database.auroraInstanceClass, props.sizeProfile.database.auroraInstanceSize),
+            }),
+            backup: {
+                retention: cdk.Duration.days(props.defaults.backupRetentionDays),
+            },
+            vpc: props.networking.vpc,
+            vpcSubnets: {
+                subnetType: ec2.SubnetType.PRIVATE_WITH_EGRESS,
+            },
+            securityGroups: [props.networking.dbSecurityGroup],
+            storageEncrypted: true,
+            removalPolicy: cdk.RemovalPolicy.SNAPSHOT,
+        });
+        const neptuneSubnetGroup = new neptune.CfnDBSubnetGroup(this, "NeptuneSubnetGroup", {
+            dbSubnetGroupDescription: "Private subnets for ctxpipe neptune",
+            subnetIds: props.networking.vpc.selectSubnets({
+                subnetType: ec2.SubnetType.PRIVATE_WITH_EGRESS,
+            }).subnetIds,
+        });
+        const neptuneCluster = new neptune.CfnDBCluster(this, "Neptune", {
+            dbSubnetGroupName: neptuneSubnetGroup.ref,
+            vpcSecurityGroupIds: [props.networking.neptuneSecurityGroup.securityGroupId],
+            backupRetentionPeriod: props.defaults.backupRetentionDays,
+            storageEncrypted: true,
+            iamAuthEnabled: false,
+        });
+        neptuneCluster.applyRemovalPolicy(cdk.RemovalPolicy.SNAPSHOT);
+        const neptuneInstance = new neptune.CfnDBInstance(this, "NeptuneInstance", {
+            dbClusterIdentifier: neptuneCluster.ref,
+            dbInstanceClass: props.sizeProfile.database.neptuneInstanceClass,
+        });
+        neptuneInstance.applyRemovalPolicy(cdk.RemovalPolicy.SNAPSHOT);
+        const codesearchFileSystem = new efs.FileSystem(this, "CodesearchEfs", {
+            vpc: props.networking.vpc,
+            encrypted: true,
+            securityGroup: props.networking.efsSecurityGroup,
+            removalPolicy: cdk.RemovalPolicy.RETAIN,
+            lifecyclePolicy: efs.LifecyclePolicy.AFTER_14_DAYS,
+            performanceMode: efs.PerformanceMode.GENERAL_PURPOSE,
+        });
+        const graphDbUri = cdk.Fn.join("", ["bolt+s://", neptuneCluster.attrEndpoint, ":8182"]);
+        this.resources = {
+            dbCluster,
+            dbCredentialsSecret,
+            neptuneCluster,
+            neptuneInstance,
+            codesearchFileSystem,
+            graphDbUri,
+        };
+    }
+}
+exports.DataPlaneConstruct = DataPlaneConstruct;
+//# sourceMappingURL=data-plane-construct.js.map

package/lib/internal/data-plane-construct.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-plane-construct.js","sourceRoot":"","sources":["../../src/internal/data-plane-construct.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,iDAAmC;AACnC,yDAA2C;AAC3C,yDAA2C;AAC3C,iEAAmD;AACnD,yDAA2C;AAC3C,+EAAiE;AACjE,2CAAuC;AAGvC,MAAa,kBAAmB,SAAQ,sBAAS;IAC/B,SAAS,CAAqB;IAE9C,YAAmB,KAAgB,EAAE,EAAU,EAAE,KAA8B;QAC7E,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAEjB,MAAM,mBAAmB,GAAG,IAAI,cAAc,CAAC,MAAM,CACnD,IAAI,EACJ,2BAA2B,EAC3B;YACE,oBAAoB,EAAE;gBACpB,oBAAoB,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;gBAC7D,iBAAiB,EAAE,UAAU;gBAC7B,kBAAkB,EAAE,IAAI;aACzB;SACF,CACF,CAAC;QAEF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,UAAU,EAAE;YAC1D,MAAM,EAAE,GAAG,CAAC,qBAAqB,CAAC,cAAc,CAAC;gBAC/C,OAAO,EAAE,GAAG,CAAC,2BAA2B,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC;aAC1D,CAAC;YACF,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC,UAAU,CAAC,mBAAmB,CAAC;YAC5D,mBAAmB,EAAE,KAAK,CAAC,QAAQ,CAAC,YAAY;YAChD,MAAM,EAAE,GAAG,CAAC,eAAe,CAAC,WAAW,CAAC,QAAQ,EAAE;gBAChD,YAAY,EAAE,GAAG,CAAC,YAAY,CAAC,EAAE,CAC/B,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,mBAAmB,EAC9C,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAC9C;aACF,CAAC;YACF,MAAM,EAAE;gBACN,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,mBAAmB,CAAC;aACjE;YACD,GAAG,EAAE,KAAK,CAAC,UAAU,CAAC,GAAG;YACzB,UAAU,EAAE;gBACV,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,mBAAmB;aAC/C;YACD,cAAc,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,eAAe,CAAC;YAClD,gBAAgB,EAAE,IAAI;YACtB,aAAa,EAAE,GAAG,CAAC,aAAa,CAAC,QAAQ;SAC1C,CAAC,CAAC;QAEH,MAAM,kBAAkB,GAAG,IAAI,OAAO,CAAC,gBAAgB,CAAC,IAAI,EAAE,oBAAoB,EAAE;YAClF,wBAAwB,EAAE,qCAAqC;YAC/D,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC;gBAC5C,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,mBAAmB;aAC/C,CAAC,CAAC,SAAS;SACb,CAAC,CAAC;QAEH,MAAM,cAAc,GAAG,IAAI,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,SAAS,EAAE;YAC/D,iBAAiB,EAAE,kBAAkB,CAAC,GAAG;YACzC,mBAAmB,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,oBAAoB,CAAC,eAAe,CAAC;YAC5E,qBAAqB,EAAE,KAAK,CAAC,QAAQ,CAAC,mBAAmB;YACzD,gBAAgB,EAAE,IAAI;YACtB,cAAc,EAAE,KAAK;SACtB,CAAC,CAAC;QACH,cAAc,CAAC,kBAAkB,CAAC,GAAG,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC9D,MAAM,eAAe,GAAG,IAAI,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,iBAAiB,EAAE;YACzE,mBAAmB,EAAE,cAAc,CAAC,GAAG;YACvC,eAAe,EAAE,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,oBAAoB;SACjE,CAAC,CAAC;QACH,eAAe,CAAC,kBAAkB,CAAC,GAAG,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAE/D,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,eAAe,EAAE;YACrE,GAAG,EAAE,KAAK,CAAC,UAAU,CAAC,GAAG;YACzB,SAAS,EAAE,IAAI;YACf,aAAa,EAAE,KAAK,CAAC,UAAU,CAAC,gBAAgB;YAChD,aAAa,EAAE,GAAG,CAAC,aAAa,CAAC,MAAM;YACvC,eAAe,EAAE,GAAG,CAAC,eAAe,CAAC,aAAa;YAClD,eAAe,EAAE,GAAG,CAAC,eAAe,CAAC,eAAe;SACrD,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,WAAW,EAAE,cAAc,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;QAExF,IAAI,CAAC,SAAS,GAAG;YACf,SAAS;YACT,mBAAmB;YACnB,cAAc;YACd,eAAe;YACf,oBAAoB;YACpB,UAAU;SACX,CAAC;IACJ,CAAC;CACF;AAnFD,gDAmFC"}

package/lib/internal/ingress-construct.d.ts

@@ -0,0 +1,7 @@
+import { Construct } from "constructs";
+import type { IngressConstructProps, IngressResources } from "./contracts";
+export declare class IngressConstruct extends Construct {
+    readonly resources: IngressResources;
+    constructor(scope: Construct, id: string, props: IngressConstructProps);
+}
+//# sourceMappingURL=ingress-construct.d.ts.map

package/lib/internal/ingress-construct.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ingress-construct.d.ts","sourceRoot":"","sources":["../../src/internal/ingress-construct.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,KAAK,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE3E,qBAAa,gBAAiB,SAAQ,SAAS;IAC7C,SAAgB,SAAS,EAAE,gBAAgB,CAAC;gBAEzB,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB;CAyD9E"}

package/lib/internal/ingress-construct.js

@@ -0,0 +1,94 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IngressConstruct = void 0;
+const elbv2 = __importStar(require("aws-cdk-lib/aws-elasticloadbalancingv2"));
+const route53 = __importStar(require("aws-cdk-lib/aws-route53"));
+const route53Targets = __importStar(require("aws-cdk-lib/aws-route53-targets"));
+const constructs_1 = require("constructs");
+class IngressConstruct extends constructs_1.Construct {
+    resources;
+    constructor(scope, id, props) {
+        super(scope, id);
+        const httpsListener = props.networking.alb.addListener("HttpsListener", {
+            port: 443,
+            protocol: elbv2.ApplicationProtocol.HTTPS,
+            sslPolicy: elbv2.SslPolicy.RECOMMENDED_TLS,
+            open: true,
+            certificates: [props.customDomain.certificate],
+        });
+        httpsListener.addTargets("BackendHttpsTarget", {
+            targets: [
+                props.backendService.loadBalancerTarget({
+                    containerName: "backend",
+                    containerPort: 3000,
+                }),
+            ],
+            port: 3000,
+            protocol: elbv2.ApplicationProtocol.HTTP,
+            healthCheck: {
+                path: "/.status",
+                healthyHttpCodes: "200-399",
+            },
+        });
+        props.networking.httpListener.addAction("HttpRedirect", {
+            action: elbv2.ListenerAction.redirect({
+                protocol: "HTTPS",
+                port: "443",
+                permanent: true,
+            }),
+        });
+        // Trailing dot makes the record name an FQDN so CDK does not append
+        // `zone.zoneName` to it. This lets callers import the hosted zone with
+        // only its ID (e.g. `HostedZone.fromHostedZoneId(...)`), where
+        // `zoneName` is an unresolved token.
+        const fqdnRecordName = `${props.customDomain.domainName}.`;
+        new route53.ARecord(this, "AlbAliasA", {
+            zone: props.customDomain.hostedZone,
+            recordName: fqdnRecordName,
+            target: route53.RecordTarget.fromAlias(new route53Targets.LoadBalancerTarget(props.networking.alb)),
+        });
+        new route53.AaaaRecord(this, "AlbAliasAaaa", {
+            zone: props.customDomain.hostedZone,
+            recordName: fqdnRecordName,
+            target: route53.RecordTarget.fromAlias(new route53Targets.LoadBalancerTarget(props.networking.alb)),
+        });
+        this.resources = {
+            appUrl: `https://${props.customDomain.domainName}`,
+        };
+    }
+}
+exports.IngressConstruct = IngressConstruct;
+//# sourceMappingURL=ingress-construct.js.map

package/lib/internal/ingress-construct.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ingress-construct.js","sourceRoot":"","sources":["../../src/internal/ingress-construct.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,8EAAgE;AAChE,iEAAmD;AACnD,gFAAkE;AAClE,2CAAuC;AAGvC,MAAa,gBAAiB,SAAQ,sBAAS;IAC7B,SAAS,CAAmB;IAE5C,YAAmB,KAAgB,EAAE,EAAU,EAAE,KAA4B;QAC3E,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAEjB,MAAM,aAAa,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,eAAe,EAAE;YACtE,IAAI,EAAE,GAAG;YACT,QAAQ,EAAE,KAAK,CAAC,mBAAmB,CAAC,KAAK;YACzC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,eAAe;YAC1C,IAAI,EAAE,IAAI;YACV,YAAY,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,CAAC;SAC/C,CAAC,CAAC;QACH,aAAa,CAAC,UAAU,CAAC,oBAAoB,EAAE;YAC7C,OAAO,EAAE;gBACP,KAAK,CAAC,cAAc,CAAC,kBAAkB,CAAC;oBACtC,aAAa,EAAE,SAAS;oBACxB,aAAa,EAAE,IAAI;iBACpB,CAAC;aACH;YACD,IAAI,EAAE,IAAI;YACV,QAAQ,EAAE,KAAK,CAAC,mBAAmB,CAAC,IAAI;YACxC,WAAW,EAAE;gBACX,IAAI,EAAE,UAAU;gBAChB,gBAAgB,EAAE,SAAS;aAC5B;SACF,CAAC,CAAC;QAEH,KAAK,CAAC,UAAU,CAAC,YAAY,CAAC,SAAS,CAAC,cAAc,EAAE;YACtD,MAAM,EAAE,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC;gBACpC,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,KAAK;gBACX,SAAS,EAAE,IAAI;aAChB,CAAC;SACH,CAAC,CAAC;QAEH,oEAAoE;QACpE,uEAAuE;QACvE,+DAA+D;QAC/D,qCAAqC;QACrC,MAAM,cAAc,GAAG,GAAG,KAAK,CAAC,YAAY,CAAC,UAAU,GAAG,CAAC;QAC3D,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE;YACrC,IAAI,EAAE,KAAK,CAAC,YAAY,CAAC,UAAU;YACnC,UAAU,EAAE,cAAc;YAC1B,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC,SAAS,CACpC,IAAI,cAAc,CAAC,kBAAkB,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAC5D;SACF,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,cAAc,EAAE;YAC3C,IAAI,EAAE,KAAK,CAAC,YAAY,CAAC,UAAU;YACnC,UAAU,EAAE,cAAc;YAC1B,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC,SAAS,CACpC,IAAI,cAAc,CAAC,kBAAkB,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAC5D;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,SAAS,GAAG;YACf,MAAM,EAAE,WAAW,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE;SACnD,CAAC;IACJ,CAAC;CACF;AA5DD,4CA4DC"}

package/lib/internal/migrate-on-deploy-construct.d.ts

@@ -0,0 +1,7 @@
+import { Construct } from "constructs";
+import type { MigrateOnDeployConstructProps, MigrateOnDeployResources } from "./contracts";
+export declare class MigrateOnDeployConstruct extends Construct {
+    readonly resources: MigrateOnDeployResources;
+    constructor(scope: Construct, id: string, props: MigrateOnDeployConstructProps);
+}
+//# sourceMappingURL=migrate-on-deploy-construct.d.ts.map

package/lib/internal/migrate-on-deploy-construct.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate-on-deploy-construct.d.ts","sourceRoot":"","sources":["../../src/internal/migrate-on-deploy-construct.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,KAAK,EACV,6BAA6B,EAC7B,wBAAwB,EACzB,MAAM,aAAa,CAAC;AAIrB,qBAAa,wBAAyB,SAAQ,SAAS;IACrD,SAAgB,SAAS,EAAE,wBAAwB,CAAC;gBAEjC,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,6BAA6B;CAkLtF"}

package/lib/internal/migrate-on-deploy-construct.js

@@ -0,0 +1,208 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MigrateOnDeployConstruct = void 0;
+const cdk = __importStar(require("aws-cdk-lib"));
+const ec2 = __importStar(require("aws-cdk-lib/aws-ec2"));
+const iam = __importStar(require("aws-cdk-lib/aws-iam"));
+const lambda = __importStar(require("aws-cdk-lib/aws-lambda"));
+const cr = __importStar(require("aws-cdk-lib/custom-resources"));
+const constructs_1 = require("constructs");
+const PROVIDER_FUNCTION_TIMEOUT_SECONDS = 900;
+class MigrateOnDeployConstruct extends constructs_1.Construct {
+    resources;
+    constructor(scope, id, props) {
+        super(scope, id);
+        const onEventHandler = new lambda.Function(this, "MigrateOnEvent", {
+            runtime: lambda.Runtime.NODEJS_20_X,
+            handler: "index.onEvent",
+            timeout: cdk.Duration.seconds(PROVIDER_FUNCTION_TIMEOUT_SECONDS),
+            code: lambda.Code.fromInline(`
+const { ECSClient, RunTaskCommand } = require("@aws-sdk/client-ecs");
+
+exports.onEvent = async (event) => {
+  if (event.RequestType === "Delete") {
+    return {
+      PhysicalResourceId: event.PhysicalResourceId || "ctxpipe-migrate",
+      Data: { Skipped: "true" },
+    };
+  }
+
+  const properties = event.ResourceProperties;
+  const ecs = new ECSClient({});
+  const runTaskResponse = await ecs.send(
+    new RunTaskCommand({
+      cluster: properties.ClusterArn,
+      taskDefinition: properties.TaskDefinitionArn,
+      launchType: "FARGATE",
+      networkConfiguration: {
+        awsvpcConfiguration: {
+          subnets: properties.SubnetIds,
+          securityGroups: properties.SecurityGroupIds,
+          assignPublicIp: "DISABLED",
+        },
+      },
+    }),
+  );
+
+  if (!runTaskResponse.tasks || runTaskResponse.tasks.length === 0) {
+    const failures = (runTaskResponse.failures || []).map((failure) => ({
+      arn: failure.arn,
+      reason: failure.reason,
+      detail: failure.detail,
+    }));
+    throw new Error("Failed to start migration task: " + JSON.stringify(failures));
+  }
+
+  const taskArn = runTaskResponse.tasks[0].taskArn;
+  if (!taskArn) {
+    throw new Error("Migration task started without task ARN");
+  }
+
+  return {
+    PhysicalResourceId: "ctxpipe-migrate",
+    Data: {
+      ClusterArn: properties.ClusterArn,
+      TaskArn: taskArn,
+    },
+  };
+};
+        `),
+        });
+        const isCompleteHandler = new lambda.Function(this, "MigrateIsComplete", {
+            runtime: lambda.Runtime.NODEJS_20_X,
+            handler: "index.isComplete",
+            timeout: cdk.Duration.seconds(PROVIDER_FUNCTION_TIMEOUT_SECONDS),
+            code: lambda.Code.fromInline(`
+const { ECSClient, DescribeTasksCommand } = require("@aws-sdk/client-ecs");
+
+exports.isComplete = async (event) => {
+  if (event.RequestType === "Delete") {
+    return { IsComplete: true };
+  }
+
+  const clusterArn = event.Data.ClusterArn;
+  const taskArn = event.Data.TaskArn;
+  if (!clusterArn || !taskArn) {
+    throw new Error("Missing migration task identifiers");
+  }
+
+  const ecs = new ECSClient({});
+  const describeResponse = await ecs.send(
+    new DescribeTasksCommand({
+      cluster: clusterArn,
+      tasks: [taskArn],
+    }),
+  );
+
+  if (describeResponse.failures && describeResponse.failures.length > 0) {
+    throw new Error("Failed to describe migration task: " + JSON.stringify(describeResponse.failures));
+  }
+
+  const task = describeResponse.tasks && describeResponse.tasks[0];
+  if (!task) {
+    throw new Error("Migration task not found in DescribeTasks");
+  }
+
+  if (task.lastStatus !== "STOPPED") {
+    return { IsComplete: false };
+  }
+
+  const nonZeroExitContainer = (task.containers || []).find((container) => (container.exitCode || 0) !== 0);
+  if (nonZeroExitContainer) {
+    throw new Error(
+      "Migration task failed: " +
+        JSON.stringify({
+          stoppedReason: task.stoppedReason,
+          stopCode: task.stopCode,
+          containerName: nonZeroExitContainer.name,
+          exitCode: nonZeroExitContainer.exitCode,
+          reason: nonZeroExitContainer.reason,
+        }),
+    );
+  }
+
+  return {
+    IsComplete: true,
+    Data: {
+      StoppedReason: task.stoppedReason || "COMPLETED",
+    },
+  };
+};
+        `),
+        });
+        const passRoleArns = [
+            props.tasks.migrateTask.taskRole.roleArn,
+            props.tasks.migrateTask.executionRole?.roleArn,
+        ].filter((arn) => arn !== undefined);
+        onEventHandler.addToRolePolicy(new iam.PolicyStatement({
+            actions: ["ecs:RunTask"],
+            resources: [props.tasks.migrateTask.taskDefinitionArn],
+        }));
+        onEventHandler.addToRolePolicy(new iam.PolicyStatement({
+            actions: ["iam:PassRole"],
+            resources: passRoleArns,
+        }));
+        isCompleteHandler.addToRolePolicy(new iam.PolicyStatement({
+            actions: ["ecs:DescribeTasks"],
+            resources: ["*"],
+        }));
+        const provider = new cr.Provider(this, "MigrateProvider", {
+            onEventHandler,
+            isCompleteHandler,
+            queryInterval: cdk.Duration.seconds(10),
+            totalTimeout: cdk.Duration.seconds(PROVIDER_FUNCTION_TIMEOUT_SECONDS),
+        });
+        const migrateResource = new cdk.CustomResource(this, "RunMigrations", {
+            serviceToken: provider.serviceToken,
+            serviceTimeout: cdk.Duration.seconds(PROVIDER_FUNCTION_TIMEOUT_SECONDS),
+            properties: {
+                ClusterArn: props.networking.cluster.clusterArn,
+                TaskDefinitionArn: props.tasks.migrateTask.taskDefinitionArn,
+                SubnetIds: props.networking.vpc
+                    .selectSubnets({ subnetType: ec2.SubnetType.PRIVATE_WITH_EGRESS })
+                    .subnetIds,
+                SecurityGroupIds: [props.networking.appSecurityGroup.securityGroupId],
+            },
+        });
+        migrateResource.node.addDependency(props.dataPlane.dbCluster);
+        migrateResource.node.addDependency(props.secrets.databaseUrlSecret);
+        this.resources = {
+            migrateResource,
+        };
+    }
+}
+exports.MigrateOnDeployConstruct = MigrateOnDeployConstruct;
+//# sourceMappingURL=migrate-on-deploy-construct.js.map

package/lib/internal/migrate-on-deploy-construct.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate-on-deploy-construct.js","sourceRoot":"","sources":["../../src/internal/migrate-on-deploy-construct.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,iDAAmC;AACnC,yDAA2C;AAC3C,yDAA2C;AAC3C,+DAAiD;AACjD,iEAAmD;AACnD,2CAAuC;AAMvC,MAAM,iCAAiC,GAAG,GAAG,CAAC;AAE9C,MAAa,wBAAyB,SAAQ,sBAAS;IACrC,SAAS,CAA2B;IAEpD,YAAmB,KAAgB,EAAE,EAAU,EAAE,KAAoC;QACnF,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAEjB,MAAM,cAAc,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,EAAE;YACjE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW;YACnC,OAAO,EAAE,eAAe;YACxB,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,iCAAiC,CAAC;YAChE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAC1B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;SAkDC,CACF;SACF,CAAC,CAAC;QAEH,MAAM,iBAAiB,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,mBAAmB,EAAE;YACvE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW;YACnC,OAAO,EAAE,kBAAkB;YAC3B,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,iCAAiC,CAAC;YAChE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAC1B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;SAwDC,CACF;SACF,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG;YACnB,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO;YACxC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,aAAa,EAAE,OAAO;SAC/C,CAAC,MAAM,CAAC,CAAC,GAAG,EAAiB,EAAE,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC;QAEpD,cAAc,CAAC,eAAe,CAC5B,IAAI,GAAG,CAAC,eAAe,CAAC;YACtB,OAAO,EAAE,CAAC,aAAa,CAAC;YACxB,SAAS,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,iBAAiB,CAAC;SACvD,CAAC,CACH,CAAC;QACF,cAAc,CAAC,eAAe,CAC5B,IAAI,GAAG,CAAC,eAAe,CAAC;YACtB,OAAO,EAAE,CAAC,cAAc,CAAC;YACzB,SAAS,EAAE,YAAY;SACxB,CAAC,CACH,CAAC;QACF,iBAAiB,CAAC,eAAe,CAC/B,IAAI,GAAG,CAAC,eAAe,CAAC;YACtB,OAAO,EAAE,CAAC,mBAAmB,CAAC;YAC9B,SAAS,EAAE,CAAC,GAAG,CAAC;SACjB,CAAC,CACH,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,EAAE;YACxD,cAAc;YACd,iBAAiB;YACjB,aAAa,EAAE,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACvC,YAAY,EAAE,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,iCAAiC,CAAC;SACtE,CAAC,CAAC;QAEH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,eAAe,EAAE;YACpE,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,cAAc,EAAE,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,iCAAiC,CAAC;YACvE,UAAU,EAAE;gBACV,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,UAAU;gBAC/C,iBAAiB,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,iBAAiB;gBAC5D,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC,GAAG;qBAC5B,aAAa,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,mBAAmB,EAAE,CAAC;qBACjE,SAAS;gBACZ,gBAAgB,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,gBAAgB,CAAC,eAAe,CAAC;aACtE;SACF,CAAC,CAAC;QAEH,eAAe,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC9D,eAAe,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAEpE,IAAI,CAAC,SAAS,GAAG;YACf,eAAe;SAChB,CAAC;IACJ,CAAC;CACF;AArLD,4DAqLC"}

package/lib/internal/networking-construct.d.ts

@@ -0,0 +1,7 @@
+import { Construct } from "constructs";
+import type { NetworkingConstructProps, NetworkingResources } from "./contracts";
+export declare class NetworkingConstruct extends Construct {
+    readonly resources: NetworkingResources;
+    constructor(scope: Construct, id: string, props: NetworkingConstructProps);
+}
+//# sourceMappingURL=networking-construct.d.ts.map

package/lib/internal/networking-construct.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"networking-construct.d.ts","sourceRoot":"","sources":["../../src/internal/networking-construct.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,KAAK,EACV,wBAAwB,EACxB,mBAAmB,EACpB,MAAM,aAAa,CAAC;AAErB,qBAAa,mBAAoB,SAAQ,SAAS;IAChD,SAAgB,SAAS,EAAE,mBAAmB,CAAC;gBAE5B,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,wBAAwB;CAgGjF"}

package/lib/internal/networking-construct.js

@@ -0,0 +1,112 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NetworkingConstruct = void 0;
+const ec2 = __importStar(require("aws-cdk-lib/aws-ec2"));
+const ecs = __importStar(require("aws-cdk-lib/aws-ecs"));
+const elbv2 = __importStar(require("aws-cdk-lib/aws-elasticloadbalancingv2"));
+const constructs_1 = require("constructs");
+class NetworkingConstruct extends constructs_1.Construct {
+    resources;
+    constructor(scope, id, props) {
+        super(scope, id);
+        const vpc = new ec2.Vpc(this, "Vpc", {
+            maxAzs: props.maxAzs,
+            natGateways: props.natGateways,
+            subnetConfiguration: [
+                {
+                    name: "public",
+                    subnetType: ec2.SubnetType.PUBLIC,
+                    cidrMask: 24,
+                },
+                {
+                    name: "private",
+                    subnetType: ec2.SubnetType.PRIVATE_WITH_EGRESS,
+                    cidrMask: 24,
+                },
+            ],
+        });
+        const appSecurityGroup = new ec2.SecurityGroup(this, "AppSecurityGroup", {
+            vpc,
+            allowAllOutbound: true,
+        });
+        appSecurityGroup.addIngressRule(appSecurityGroup, ec2.Port.tcp(3002), "Allow ECS services to reach UI on 3002");
+        appSecurityGroup.addIngressRule(appSecurityGroup, ec2.Port.tcp(3001), "Allow ECS services to reach codesearch on 3001");
+        const dbSecurityGroup = new ec2.SecurityGroup(this, "DbSecurityGroup", {
+            vpc,
+            allowAllOutbound: true,
+        });
+        dbSecurityGroup.addIngressRule(appSecurityGroup, ec2.Port.tcp(5432), "Allow PostgreSQL from ECS services");
+        const neptuneSecurityGroup = new ec2.SecurityGroup(this, "NeptuneSecurityGroup", {
+            vpc,
+            allowAllOutbound: true,
+        });
+        neptuneSecurityGroup.addIngressRule(appSecurityGroup, ec2.Port.tcp(8182), "Allow Neptune from ECS services");
+        const efsSecurityGroup = new ec2.SecurityGroup(this, "EfsSecurityGroup", {
+            vpc,
+            allowAllOutbound: true,
+        });
+        efsSecurityGroup.addIngressRule(appSecurityGroup, ec2.Port.tcp(2049), "Allow NFS from ECS services");
+        const cluster = new ecs.Cluster(this, "Cluster", {
+            vpc,
+            defaultCloudMapNamespace: {
+                name: "ctxpipe.local",
+            },
+        });
+        const alb = new elbv2.ApplicationLoadBalancer(this, "Alb", {
+            vpc,
+            internetFacing: true,
+            vpcSubnets: {
+                subnetType: ec2.SubnetType.PUBLIC,
+            },
+        });
+        const httpListener = alb.addListener("HttpListener", {
+            port: 80,
+            open: true,
+        });
+        this.resources = {
+            vpc,
+            appSecurityGroup,
+            dbSecurityGroup,
+            neptuneSecurityGroup,
+            efsSecurityGroup,
+            cluster,
+            alb,
+            httpListener,
+        };
+    }
+}
+exports.NetworkingConstruct = NetworkingConstruct;
+//# sourceMappingURL=networking-construct.js.map

package/lib/internal/networking-construct.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"networking-construct.js","sourceRoot":"","sources":["../../src/internal/networking-construct.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,yDAA2C;AAC3C,yDAA2C;AAC3C,8EAAgE;AAChE,2CAAuC;AAMvC,MAAa,mBAAoB,SAAQ,sBAAS;IAChC,SAAS,CAAsB;IAE/C,YAAmB,KAAgB,EAAE,EAAU,EAAE,KAA+B;QAC9E,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAEjB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;YACnC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,mBAAmB,EAAE;gBACnB;oBACE,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,MAAM;oBACjC,QAAQ,EAAE,EAAE;iBACb;gBACD;oBACE,IAAI,EAAE,SAAS;oBACf,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,mBAAmB;oBAC9C,QAAQ,EAAE,EAAE;iBACb;aACF;SACF,CAAC,CAAC;QAEH,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,kBAAkB,EAAE;YACvE,GAAG;YACH,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,gBAAgB,CAAC,cAAc,CAC7B,gBAAgB,EAChB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAClB,wCAAwC,CACzC,CAAC;QACF,gBAAgB,CAAC,cAAc,CAC7B,gBAAgB,EAChB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAClB,gDAAgD,CACjD,CAAC;QAEF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,iBAAiB,EAAE;YACrE,GAAG;YACH,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,eAAe,CAAC,cAAc,CAC5B,gBAAgB,EAChB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAClB,oCAAoC,CACrC,CAAC;QAEF,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,sBAAsB,EAAE;YAC/E,GAAG;YACH,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,oBAAoB,CAAC,cAAc,CACjC,gBAAgB,EAChB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAClB,iCAAiC,CAClC,CAAC;QAEF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,kBAAkB,EAAE;YACvE,GAAG;YACH,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,gBAAgB,CAAC,cAAc,CAC7B,gBAAgB,EAChB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAClB,6BAA6B,CAC9B,CAAC;QAEF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE;YAC/C,GAAG;YACH,wBAAwB,EAAE;gBACxB,IAAI,EAAE,eAAe;aACtB;SACF,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,uBAAuB,CAAC,IAAI,EAAE,KAAK,EAAE;YACzD,GAAG;YACH,cAAc,EAAE,IAAI;YACpB,UAAU,EAAE;gBACV,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,MAAM;aAClC;SACF,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,GAAG,CAAC,WAAW,CAAC,cAAc,EAAE;YACnD,IAAI,EAAE,EAAE;YACR,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;QAEH,IAAI,CAAC,SAAS,GAAG;YACf,GAAG;YACH,gBAAgB;YAChB,eAAe;YACf,oBAAoB;YACpB,gBAAgB;YAChB,OAAO;YACP,GAAG;YACH,YAAY;SACb,CAAC;IACJ,CAAC;CACF;AAnGD,kDAmGC"}

package/lib/internal/outputs-construct.d.ts

@@ -0,0 +1,6 @@
+import { Construct } from "constructs";
+import type { OutputsConstructProps } from "./contracts";
+export declare class OutputsConstruct extends Construct {
+    constructor(scope: Construct, id: string, props: OutputsConstructProps);
+}
+//# sourceMappingURL=outputs-construct.d.ts.map

package/lib/internal/outputs-construct.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"outputs-construct.d.ts","sourceRoot":"","sources":["../../src/internal/outputs-construct.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEzD,qBAAa,gBAAiB,SAAQ,SAAS;gBAC1B,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB;CAyB9E"}