@ctxpipe/aws-cdk 1.0.1

package/lib/internal/data-plane-construct.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-plane-construct.js","sourceRoot":"","sources":["../../src/internal/data-plane-construct.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,iDAAmC;AACnC,yDAA2C;AAC3C,yDAA2C;AAC3C,iEAAmD;AACnD,yDAA2C;AAC3C,+EAAiE;AACjE,2CAAuC;AAGvC,MAAa,kBAAmB,SAAQ,sBAAS;IAC/B,SAAS,CAAqB;IAE9C,YAAmB,KAAgB,EAAE,EAAU,EAAE,KAA8B;QAC7E,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAEjB,MAAM,mBAAmB,GAAG,IAAI,cAAc,CAAC,MAAM,CACnD,IAAI,EACJ,2BAA2B,EAC3B;YACE,oBAAoB,EAAE;gBACpB,oBAAoB,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;gBAC7D,iBAAiB,EAAE,UAAU;gBAC7B,kBAAkB,EAAE,IAAI;aACzB;SACF,CACF,CAAC;QAEF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,UAAU,EAAE;YAC1D,MAAM,EAAE,GAAG,CAAC,qBAAqB,CAAC,cAAc,CAAC;gBAC/C,OAAO,EAAE,GAAG,CAAC,2BAA2B,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC;aAC1D,CAAC;YACF,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC,UAAU,CAAC,mBAAmB,CAAC;YAC5D,mBAAmB,EAAE,KAAK,CAAC,QAAQ,CAAC,YAAY;YAChD,MAAM,EAAE,GAAG,CAAC,eAAe,CAAC,WAAW,CAAC,QAAQ,EAAE;gBAChD,YAAY,EAAE,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC;aAClF,CAAC;YACF,MAAM,EAAE;gBACN,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,mBAAmB,CAAC;aACjE;YACD,GAAG,EAAE,KAAK,CAAC,UAAU,CAAC,GAAG;YACzB,UAAU,EAAE;gBACV,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,mBAAmB;aAC/C;YACD,cAAc,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,eAAe,CAAC;YAClD,gBAAgB,EAAE,IAAI;YACtB,aAAa,EAAE,GAAG,CAAC,aAAa,CAAC,QAAQ;SAC1C,CAAC,CAAC;QAEH,MAAM,kBAAkB,GAAG,IAAI,OAAO,CAAC,gBAAgB,CAAC,IAAI,EAAE,oBAAoB,EAAE;YAClF,wBAAwB,EAAE,qCAAqC;YAC/D,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC;gBAC5C,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,mBAAmB;aAC/C,CAAC,CAAC,SAAS;SACb,CAAC,CAAC;QAEH,MAAM,cAAc,GAAG,IAAI,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,SAAS,EAAE;YAC/D,iBAAiB,EAAE,kBAAkB,CAAC,GAAG;YACzC,mBAAmB,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,oBAAoB,CAAC,eAAe,CAAC;YAC5E,qBAAqB,EAAE,KAAK,CAAC,QAAQ,CAAC,mBAAmB;YACzD,gBAAgB,EAAE,IAAI;YACtB,cAAc,EAAE,KAAK;SACtB,CAAC,CAAC;QACH,cAAc,CAAC,kBAAkB,CAAC,GAAG,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC9D,MAAM,eAAe,GAAG,IAAI,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,iBAAiB,EAAE;YACzE,mBAAmB,EAAE,cAAc,CAAC,GAAG;YACvC,eAAe,EAAE,eAAe;SACjC,CAAC,CAAC;QACH,eAAe,CAAC,kBAAkB,CAAC,GAAG,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAE/D,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,eAAe,EAAE;YACrE,GAAG,EAAE,KAAK,CAAC,UAAU,CAAC,GAAG;YACzB,SAAS,EAAE,IAAI;YACf,aAAa,EAAE,KAAK,CAAC,UAAU,CAAC,gBAAgB;YAChD,aAAa,EAAE,GAAG,CAAC,aAAa,CAAC,MAAM;YACvC,eAAe,EAAE,GAAG,CAAC,eAAe,CAAC,aAAa;YAClD,eAAe,EAAE,GAAG,CAAC,eAAe,CAAC,eAAe;SACrD,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,WAAW,EAAE,cAAc,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;QAExF,IAAI,CAAC,SAAS,GAAG;YACf,SAAS;YACT,mBAAmB;YACnB,cAAc;YACd,eAAe;YACf,oBAAoB;YACpB,UAAU;SACX,CAAC;IACJ,CAAC;CACF;AAhFD,gDAgFC"}

package/lib/internal/ingress-construct.d.ts

@@ -0,0 +1,7 @@
+import { Construct } from "constructs";
+import type { IngressConstructProps, IngressResources } from "./contracts";
+export declare class IngressConstruct extends Construct {
+    readonly resources: IngressResources;
+    constructor(scope: Construct, id: string, props: IngressConstructProps);
+}
+//# sourceMappingURL=ingress-construct.d.ts.map

package/lib/internal/ingress-construct.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ingress-construct.d.ts","sourceRoot":"","sources":["../../src/internal/ingress-construct.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,KAAK,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE3E,qBAAa,gBAAiB,SAAQ,SAAS;IAC7C,SAAgB,SAAS,EAAE,gBAAgB,CAAC;gBAEzB,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB;CAyD9E"}

package/lib/internal/ingress-construct.js

@@ -0,0 +1,94 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IngressConstruct = void 0;
+const elbv2 = __importStar(require("aws-cdk-lib/aws-elasticloadbalancingv2"));
+const route53 = __importStar(require("aws-cdk-lib/aws-route53"));
+const route53Targets = __importStar(require("aws-cdk-lib/aws-route53-targets"));
+const constructs_1 = require("constructs");
+class IngressConstruct extends constructs_1.Construct {
+    resources;
+    constructor(scope, id, props) {
+        super(scope, id);
+        const httpsListener = props.networking.alb.addListener("HttpsListener", {
+            port: 443,
+            protocol: elbv2.ApplicationProtocol.HTTPS,
+            sslPolicy: elbv2.SslPolicy.RECOMMENDED_TLS,
+            open: true,
+            certificates: [props.customDomain.certificate],
+        });
+        httpsListener.addTargets("BackendHttpsTarget", {
+            targets: [
+                props.backendService.loadBalancerTarget({
+                    containerName: "backend",
+                    containerPort: 3000,
+                }),
+            ],
+            port: 3000,
+            protocol: elbv2.ApplicationProtocol.HTTP,
+            healthCheck: {
+                path: "/.status",
+                healthyHttpCodes: "200-399",
+            },
+        });
+        props.networking.httpListener.addAction("HttpRedirect", {
+            action: elbv2.ListenerAction.redirect({
+                protocol: "HTTPS",
+                port: "443",
+                permanent: true,
+            }),
+        });
+        // Trailing dot makes the record name an FQDN so CDK does not append
+        // `zone.zoneName` to it. This lets callers import the hosted zone with
+        // only its ID (e.g. `HostedZone.fromHostedZoneId(...)`), where
+        // `zoneName` is an unresolved token.
+        const fqdnRecordName = `${props.customDomain.domainName}.`;
+        new route53.ARecord(this, "AlbAliasA", {
+            zone: props.customDomain.hostedZone,
+            recordName: fqdnRecordName,
+            target: route53.RecordTarget.fromAlias(new route53Targets.LoadBalancerTarget(props.networking.alb)),
+        });
+        new route53.AaaaRecord(this, "AlbAliasAaaa", {
+            zone: props.customDomain.hostedZone,
+            recordName: fqdnRecordName,
+            target: route53.RecordTarget.fromAlias(new route53Targets.LoadBalancerTarget(props.networking.alb)),
+        });
+        this.resources = {
+            appUrl: `https://${props.customDomain.domainName}`,
+        };
+    }
+}
+exports.IngressConstruct = IngressConstruct;
+//# sourceMappingURL=ingress-construct.js.map

package/lib/internal/ingress-construct.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ingress-construct.js","sourceRoot":"","sources":["../../src/internal/ingress-construct.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,8EAAgE;AAChE,iEAAmD;AACnD,gFAAkE;AAClE,2CAAuC;AAGvC,MAAa,gBAAiB,SAAQ,sBAAS;IAC7B,SAAS,CAAmB;IAE5C,YAAmB,KAAgB,EAAE,EAAU,EAAE,KAA4B;QAC3E,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAEjB,MAAM,aAAa,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,eAAe,EAAE;YACtE,IAAI,EAAE,GAAG;YACT,QAAQ,EAAE,KAAK,CAAC,mBAAmB,CAAC,KAAK;YACzC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,eAAe;YAC1C,IAAI,EAAE,IAAI;YACV,YAAY,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,CAAC;SAC/C,CAAC,CAAC;QACH,aAAa,CAAC,UAAU,CAAC,oBAAoB,EAAE;YAC7C,OAAO,EAAE;gBACP,KAAK,CAAC,cAAc,CAAC,kBAAkB,CAAC;oBACtC,aAAa,EAAE,SAAS;oBACxB,aAAa,EAAE,IAAI;iBACpB,CAAC;aACH;YACD,IAAI,EAAE,IAAI;YACV,QAAQ,EAAE,KAAK,CAAC,mBAAmB,CAAC,IAAI;YACxC,WAAW,EAAE;gBACX,IAAI,EAAE,UAAU;gBAChB,gBAAgB,EAAE,SAAS;aAC5B;SACF,CAAC,CAAC;QAEH,KAAK,CAAC,UAAU,CAAC,YAAY,CAAC,SAAS,CAAC,cAAc,EAAE;YACtD,MAAM,EAAE,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC;gBACpC,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,KAAK;gBACX,SAAS,EAAE,IAAI;aAChB,CAAC;SACH,CAAC,CAAC;QAEH,oEAAoE;QACpE,uEAAuE;QACvE,+DAA+D;QAC/D,qCAAqC;QACrC,MAAM,cAAc,GAAG,GAAG,KAAK,CAAC,YAAY,CAAC,UAAU,GAAG,CAAC;QAC3D,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE;YACrC,IAAI,EAAE,KAAK,CAAC,YAAY,CAAC,UAAU;YACnC,UAAU,EAAE,cAAc;YAC1B,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC,SAAS,CACpC,IAAI,cAAc,CAAC,kBAAkB,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAC5D;SACF,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,cAAc,EAAE;YAC3C,IAAI,EAAE,KAAK,CAAC,YAAY,CAAC,UAAU;YACnC,UAAU,EAAE,cAAc;YAC1B,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC,SAAS,CACpC,IAAI,cAAc,CAAC,kBAAkB,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAC5D;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,SAAS,GAAG;YACf,MAAM,EAAE,WAAW,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE;SACnD,CAAC;IACJ,CAAC;CACF;AA5DD,4CA4DC"}

package/lib/internal/migrate-on-deploy-construct.d.ts

@@ -0,0 +1,7 @@
+import { Construct } from "constructs";
+import type { MigrateOnDeployConstructProps, MigrateOnDeployResources } from "./contracts";
+export declare class MigrateOnDeployConstruct extends Construct {
+    readonly resources: MigrateOnDeployResources;
+    constructor(scope: Construct, id: string, props: MigrateOnDeployConstructProps);
+}
+//# sourceMappingURL=migrate-on-deploy-construct.d.ts.map

package/lib/internal/migrate-on-deploy-construct.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate-on-deploy-construct.d.ts","sourceRoot":"","sources":["../../src/internal/migrate-on-deploy-construct.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,KAAK,EACV,6BAA6B,EAC7B,wBAAwB,EACzB,MAAM,aAAa,CAAC;AAIrB,qBAAa,wBAAyB,SAAQ,SAAS;IACrD,SAAgB,SAAS,EAAE,wBAAwB,CAAC;gBAEjC,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,6BAA6B;CAkLtF"}

package/lib/internal/migrate-on-deploy-construct.js

@@ -0,0 +1,208 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MigrateOnDeployConstruct = void 0;
+const cdk = __importStar(require("aws-cdk-lib"));
+const ec2 = __importStar(require("aws-cdk-lib/aws-ec2"));
+const iam = __importStar(require("aws-cdk-lib/aws-iam"));
+const lambda = __importStar(require("aws-cdk-lib/aws-lambda"));
+const cr = __importStar(require("aws-cdk-lib/custom-resources"));
+const constructs_1 = require("constructs");
+const PROVIDER_FUNCTION_TIMEOUT_SECONDS = 900;
+class MigrateOnDeployConstruct extends constructs_1.Construct {
+    resources;
+    constructor(scope, id, props) {
+        super(scope, id);
+        const onEventHandler = new lambda.Function(this, "MigrateOnEvent", {
+            runtime: lambda.Runtime.NODEJS_20_X,
+            handler: "index.onEvent",
+            timeout: cdk.Duration.seconds(PROVIDER_FUNCTION_TIMEOUT_SECONDS),
+            code: lambda.Code.fromInline(`
+const { ECSClient, RunTaskCommand } = require("@aws-sdk/client-ecs");
+
+exports.onEvent = async (event) => {
+  if (event.RequestType === "Delete") {
+    return {
+      PhysicalResourceId: event.PhysicalResourceId || "ctxpipe-migrate",
+      Data: { Skipped: "true" },
+    };
+  }
+
+  const properties = event.ResourceProperties;
+  const ecs = new ECSClient({});
+  const runTaskResponse = await ecs.send(
+    new RunTaskCommand({
+      cluster: properties.ClusterArn,
+      taskDefinition: properties.TaskDefinitionArn,
+      launchType: "FARGATE",
+      networkConfiguration: {
+        awsvpcConfiguration: {
+          subnets: properties.SubnetIds,
+          securityGroups: properties.SecurityGroupIds,
+          assignPublicIp: "DISABLED",
+        },
+      },
+    }),
+  );
+
+  if (!runTaskResponse.tasks || runTaskResponse.tasks.length === 0) {
+    const failures = (runTaskResponse.failures || []).map((failure) => ({
+      arn: failure.arn,
+      reason: failure.reason,
+      detail: failure.detail,
+    }));
+    throw new Error("Failed to start migration task: " + JSON.stringify(failures));
+  }
+
+  const taskArn = runTaskResponse.tasks[0].taskArn;
+  if (!taskArn) {
+    throw new Error("Migration task started without task ARN");
+  }
+
+  return {
+    PhysicalResourceId: "ctxpipe-migrate",
+    Data: {
+      ClusterArn: properties.ClusterArn,
+      TaskArn: taskArn,
+    },
+  };
+};
+        `),
+        });
+        const isCompleteHandler = new lambda.Function(this, "MigrateIsComplete", {
+            runtime: lambda.Runtime.NODEJS_20_X,
+            handler: "index.isComplete",
+            timeout: cdk.Duration.seconds(PROVIDER_FUNCTION_TIMEOUT_SECONDS),
+            code: lambda.Code.fromInline(`
+const { ECSClient, DescribeTasksCommand } = require("@aws-sdk/client-ecs");
+
+exports.isComplete = async (event) => {
+  if (event.RequestType === "Delete") {
+    return { IsComplete: true };
+  }
+
+  const clusterArn = event.Data.ClusterArn;
+  const taskArn = event.Data.TaskArn;
+  if (!clusterArn || !taskArn) {
+    throw new Error("Missing migration task identifiers");
+  }
+
+  const ecs = new ECSClient({});
+  const describeResponse = await ecs.send(
+    new DescribeTasksCommand({
+      cluster: clusterArn,
+      tasks: [taskArn],
+    }),
+  );
+
+  if (describeResponse.failures && describeResponse.failures.length > 0) {
+    throw new Error("Failed to describe migration task: " + JSON.stringify(describeResponse.failures));
+  }
+
+  const task = describeResponse.tasks && describeResponse.tasks[0];
+  if (!task) {
+    throw new Error("Migration task not found in DescribeTasks");
+  }
+
+  if (task.lastStatus !== "STOPPED") {
+    return { IsComplete: false };
+  }
+
+  const nonZeroExitContainer = (task.containers || []).find((container) => (container.exitCode || 0) !== 0);
+  if (nonZeroExitContainer) {
+    throw new Error(
+      "Migration task failed: " +
+        JSON.stringify({
+          stoppedReason: task.stoppedReason,
+          stopCode: task.stopCode,
+          containerName: nonZeroExitContainer.name,
+          exitCode: nonZeroExitContainer.exitCode,
+          reason: nonZeroExitContainer.reason,
+        }),
+    );
+  }
+
+  return {
+    IsComplete: true,
+    Data: {
+      StoppedReason: task.stoppedReason || "COMPLETED",
+    },
+  };
+};
+        `),
+        });
+        const passRoleArns = [
+            props.tasks.migrateTask.taskRole.roleArn,
+            props.tasks.migrateTask.executionRole?.roleArn,
+        ].filter((arn) => arn !== undefined);
+        onEventHandler.addToRolePolicy(new iam.PolicyStatement({
+            actions: ["ecs:RunTask"],
+            resources: [props.tasks.migrateTask.taskDefinitionArn],
+        }));
+        onEventHandler.addToRolePolicy(new iam.PolicyStatement({
+            actions: ["iam:PassRole"],
+            resources: passRoleArns,
+        }));
+        isCompleteHandler.addToRolePolicy(new iam.PolicyStatement({
+            actions: ["ecs:DescribeTasks"],
+            resources: ["*"],
+        }));
+        const provider = new cr.Provider(this, "MigrateProvider", {
+            onEventHandler,
+            isCompleteHandler,
+            queryInterval: cdk.Duration.seconds(10),
+            totalTimeout: cdk.Duration.seconds(PROVIDER_FUNCTION_TIMEOUT_SECONDS),
+        });
+        const migrateResource = new cdk.CustomResource(this, "RunMigrations", {
+            serviceToken: provider.serviceToken,
+            serviceTimeout: cdk.Duration.seconds(PROVIDER_FUNCTION_TIMEOUT_SECONDS),
+            properties: {
+                ClusterArn: props.networking.cluster.clusterArn,
+                TaskDefinitionArn: props.tasks.migrateTask.taskDefinitionArn,
+                SubnetIds: props.networking.vpc
+                    .selectSubnets({ subnetType: ec2.SubnetType.PRIVATE_WITH_EGRESS })
+                    .subnetIds,
+                SecurityGroupIds: [props.networking.appSecurityGroup.securityGroupId],
+            },
+        });
+        migrateResource.node.addDependency(props.dataPlane.dbCluster);
+        migrateResource.node.addDependency(props.secrets.databaseUrlSecret);
+        this.resources = {
+            migrateResource,
+        };
+    }
+}
+exports.MigrateOnDeployConstruct = MigrateOnDeployConstruct;
+//# sourceMappingURL=migrate-on-deploy-construct.js.map

package/lib/internal/migrate-on-deploy-construct.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate-on-deploy-construct.js","sourceRoot":"","sources":["../../src/internal/migrate-on-deploy-construct.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,iDAAmC;AACnC,yDAA2C;AAC3C,yDAA2C;AAC3C,+DAAiD;AACjD,iEAAmD;AACnD,2CAAuC;AAMvC,MAAM,iCAAiC,GAAG,GAAG,CAAC;AAE9C,MAAa,wBAAyB,SAAQ,sBAAS;IACrC,SAAS,CAA2B;IAEpD,YAAmB,KAAgB,EAAE,EAAU,EAAE,KAAoC;QACnF,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAEjB,MAAM,cAAc,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,EAAE;YACjE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW;YACnC,OAAO,EAAE,eAAe;YACxB,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,iCAAiC,CAAC;YAChE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAC1B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;SAkDC,CACF;SACF,CAAC,CAAC;QAEH,MAAM,iBAAiB,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,mBAAmB,EAAE;YACvE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW;YACnC,OAAO,EAAE,kBAAkB;YAC3B,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,iCAAiC,CAAC;YAChE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAC1B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;SAwDC,CACF;SACF,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG;YACnB,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO;YACxC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,aAAa,EAAE,OAAO;SAC/C,CAAC,MAAM,CAAC,CAAC,GAAG,EAAiB,EAAE,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC;QAEpD,cAAc,CAAC,eAAe,CAC5B,IAAI,GAAG,CAAC,eAAe,CAAC;YACtB,OAAO,EAAE,CAAC,aAAa,CAAC;YACxB,SAAS,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,iBAAiB,CAAC;SACvD,CAAC,CACH,CAAC;QACF,cAAc,CAAC,eAAe,CAC5B,IAAI,GAAG,CAAC,eAAe,CAAC;YACtB,OAAO,EAAE,CAAC,cAAc,CAAC;YACzB,SAAS,EAAE,YAAY;SACxB,CAAC,CACH,CAAC;QACF,iBAAiB,CAAC,eAAe,CAC/B,IAAI,GAAG,CAAC,eAAe,CAAC;YACtB,OAAO,EAAE,CAAC,mBAAmB,CAAC;YAC9B,SAAS,EAAE,CAAC,GAAG,CAAC;SACjB,CAAC,CACH,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,EAAE;YACxD,cAAc;YACd,iBAAiB;YACjB,aAAa,EAAE,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACvC,YAAY,EAAE,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,iCAAiC,CAAC;SACtE,CAAC,CAAC;QAEH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,eAAe,EAAE;YACpE,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,cAAc,EAAE,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,iCAAiC,CAAC;YACvE,UAAU,EAAE;gBACV,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,UAAU;gBAC/C,iBAAiB,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,iBAAiB;gBAC5D,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC,GAAG;qBAC5B,aAAa,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,mBAAmB,EAAE,CAAC;qBACjE,SAAS;gBACZ,gBAAgB,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,gBAAgB,CAAC,eAAe,CAAC;aACtE;SACF,CAAC,CAAC;QAEH,eAAe,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC9D,eAAe,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAEpE,IAAI,CAAC,SAAS,GAAG;YACf,eAAe;SAChB,CAAC;IACJ,CAAC;CACF;AArLD,4DAqLC"}

package/lib/internal/networking-construct.d.ts

@@ -0,0 +1,7 @@
+import { Construct } from "constructs";
+import type { NetworkingConstructProps, NetworkingResources } from "./contracts";
+export declare class NetworkingConstruct extends Construct {
+    readonly resources: NetworkingResources;
+    constructor(scope: Construct, id: string, props: NetworkingConstructProps);
+}
+//# sourceMappingURL=networking-construct.d.ts.map

package/lib/internal/networking-construct.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"networking-construct.d.ts","sourceRoot":"","sources":["../../src/internal/networking-construct.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,KAAK,EACV,wBAAwB,EACxB,mBAAmB,EACpB,MAAM,aAAa,CAAC;AAErB,qBAAa,mBAAoB,SAAQ,SAAS;IAChD,SAAgB,SAAS,EAAE,mBAAmB,CAAC;gBAE5B,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,wBAAwB;CAgGjF"}

package/lib/internal/networking-construct.js

@@ -0,0 +1,112 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NetworkingConstruct = void 0;
+const ec2 = __importStar(require("aws-cdk-lib/aws-ec2"));
+const ecs = __importStar(require("aws-cdk-lib/aws-ecs"));
+const elbv2 = __importStar(require("aws-cdk-lib/aws-elasticloadbalancingv2"));
+const constructs_1 = require("constructs");
+class NetworkingConstruct extends constructs_1.Construct {
+    resources;
+    constructor(scope, id, props) {
+        super(scope, id);
+        const vpc = new ec2.Vpc(this, "Vpc", {
+            maxAzs: props.maxAzs,
+            natGateways: props.natGateways,
+            subnetConfiguration: [
+                {
+                    name: "public",
+                    subnetType: ec2.SubnetType.PUBLIC,
+                    cidrMask: 24,
+                },
+                {
+                    name: "private",
+                    subnetType: ec2.SubnetType.PRIVATE_WITH_EGRESS,
+                    cidrMask: 24,
+                },
+            ],
+        });
+        const appSecurityGroup = new ec2.SecurityGroup(this, "AppSecurityGroup", {
+            vpc,
+            allowAllOutbound: true,
+        });
+        appSecurityGroup.addIngressRule(appSecurityGroup, ec2.Port.tcp(3002), "Allow ECS services to reach UI on 3002");
+        appSecurityGroup.addIngressRule(appSecurityGroup, ec2.Port.tcp(3001), "Allow ECS services to reach codesearch on 3001");
+        const dbSecurityGroup = new ec2.SecurityGroup(this, "DbSecurityGroup", {
+            vpc,
+            allowAllOutbound: true,
+        });
+        dbSecurityGroup.addIngressRule(appSecurityGroup, ec2.Port.tcp(5432), "Allow PostgreSQL from ECS services");
+        const neptuneSecurityGroup = new ec2.SecurityGroup(this, "NeptuneSecurityGroup", {
+            vpc,
+            allowAllOutbound: true,
+        });
+        neptuneSecurityGroup.addIngressRule(appSecurityGroup, ec2.Port.tcp(8182), "Allow Neptune from ECS services");
+        const efsSecurityGroup = new ec2.SecurityGroup(this, "EfsSecurityGroup", {
+            vpc,
+            allowAllOutbound: true,
+        });
+        efsSecurityGroup.addIngressRule(appSecurityGroup, ec2.Port.tcp(2049), "Allow NFS from ECS services");
+        const cluster = new ecs.Cluster(this, "Cluster", {
+            vpc,
+            defaultCloudMapNamespace: {
+                name: "ctxpipe.local",
+            },
+        });
+        const alb = new elbv2.ApplicationLoadBalancer(this, "Alb", {
+            vpc,
+            internetFacing: true,
+            vpcSubnets: {
+                subnetType: ec2.SubnetType.PUBLIC,
+            },
+        });
+        const httpListener = alb.addListener("HttpListener", {
+            port: 80,
+            open: true,
+        });
+        this.resources = {
+            vpc,
+            appSecurityGroup,
+            dbSecurityGroup,
+            neptuneSecurityGroup,
+            efsSecurityGroup,
+            cluster,
+            alb,
+            httpListener,
+        };
+    }
+}
+exports.NetworkingConstruct = NetworkingConstruct;
+//# sourceMappingURL=networking-construct.js.map

package/lib/internal/networking-construct.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"networking-construct.js","sourceRoot":"","sources":["../../src/internal/networking-construct.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,yDAA2C;AAC3C,yDAA2C;AAC3C,8EAAgE;AAChE,2CAAuC;AAMvC,MAAa,mBAAoB,SAAQ,sBAAS;IAChC,SAAS,CAAsB;IAE/C,YAAmB,KAAgB,EAAE,EAAU,EAAE,KAA+B;QAC9E,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAEjB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;YACnC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,mBAAmB,EAAE;gBACnB;oBACE,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,MAAM;oBACjC,QAAQ,EAAE,EAAE;iBACb;gBACD;oBACE,IAAI,EAAE,SAAS;oBACf,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,mBAAmB;oBAC9C,QAAQ,EAAE,EAAE;iBACb;aACF;SACF,CAAC,CAAC;QAEH,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,kBAAkB,EAAE;YACvE,GAAG;YACH,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,gBAAgB,CAAC,cAAc,CAC7B,gBAAgB,EAChB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAClB,wCAAwC,CACzC,CAAC;QACF,gBAAgB,CAAC,cAAc,CAC7B,gBAAgB,EAChB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAClB,gDAAgD,CACjD,CAAC;QAEF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,iBAAiB,EAAE;YACrE,GAAG;YACH,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,eAAe,CAAC,cAAc,CAC5B,gBAAgB,EAChB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAClB,oCAAoC,CACrC,CAAC;QAEF,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,sBAAsB,EAAE;YAC/E,GAAG;YACH,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,oBAAoB,CAAC,cAAc,CACjC,gBAAgB,EAChB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAClB,iCAAiC,CAClC,CAAC;QAEF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,kBAAkB,EAAE;YACvE,GAAG;YACH,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,gBAAgB,CAAC,cAAc,CAC7B,gBAAgB,EAChB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAClB,6BAA6B,CAC9B,CAAC;QAEF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE;YAC/C,GAAG;YACH,wBAAwB,EAAE;gBACxB,IAAI,EAAE,eAAe;aACtB;SACF,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,uBAAuB,CAAC,IAAI,EAAE,KAAK,EAAE;YACzD,GAAG;YACH,cAAc,EAAE,IAAI;YACpB,UAAU,EAAE;gBACV,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,MAAM;aAClC;SACF,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,GAAG,CAAC,WAAW,CAAC,cAAc,EAAE;YACnD,IAAI,EAAE,EAAE;YACR,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;QAEH,IAAI,CAAC,SAAS,GAAG;YACf,GAAG;YACH,gBAAgB;YAChB,eAAe;YACf,oBAAoB;YACpB,gBAAgB;YAChB,OAAO;YACP,GAAG;YACH,YAAY;SACb,CAAC;IACJ,CAAC;CACF;AAnGD,kDAmGC"}

package/lib/internal/outputs-construct.d.ts

@@ -0,0 +1,6 @@
+import { Construct } from "constructs";
+import type { OutputsConstructProps } from "./contracts";
+export declare class OutputsConstruct extends Construct {
+    constructor(scope: Construct, id: string, props: OutputsConstructProps);
+}
+//# sourceMappingURL=outputs-construct.d.ts.map

package/lib/internal/outputs-construct.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"outputs-construct.d.ts","sourceRoot":"","sources":["../../src/internal/outputs-construct.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEzD,qBAAa,gBAAiB,SAAQ,SAAS;gBAC1B,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB;CAyB9E"}

package/lib/internal/outputs-construct.js

@@ -0,0 +1,65 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OutputsConstruct = void 0;
+const cdk = __importStar(require("aws-cdk-lib"));
+const constructs_1 = require("constructs");
+class OutputsConstruct extends constructs_1.Construct {
+    constructor(scope, id, props) {
+        super(scope, id);
+        new cdk.CfnOutput(this, "AppUrl", {
+            value: props.appUrl,
+        });
+        new cdk.CfnOutput(this, "AlbDnsName", {
+            value: props.albDnsName,
+        });
+        new cdk.CfnOutput(this, "DatabaseUrlSecretArn", {
+            value: props.databaseUrlSecretArn,
+        });
+        new cdk.CfnOutput(this, "ModelProviderSecretArn", {
+            value: props.modelProviderSecretArn,
+        });
+        new cdk.CfnOutput(this, "SmtpSecretArn", {
+            value: props.smtpSecretArn,
+        });
+        if (props.connectorSecretArn) {
+            new cdk.CfnOutput(this, "ConnectorSecretArn", {
+                value: props.connectorSecretArn,
+            });
+        }
+    }
+}
+exports.OutputsConstruct = OutputsConstruct;
+//# sourceMappingURL=outputs-construct.js.map

package/lib/internal/outputs-construct.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outputs-construct.js","sourceRoot":"","sources":["../../src/internal/outputs-construct.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,iDAAmC;AACnC,2CAAuC;AAGvC,MAAa,gBAAiB,SAAQ,sBAAS;IAC7C,YAAmB,KAAgB,EAAE,EAAU,EAAE,KAA4B;QAC3E,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAEjB,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE;YAChC,KAAK,EAAE,KAAK,CAAC,MAAM;SACpB,CAAC,CAAC;QACH,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,YAAY,EAAE;YACpC,KAAK,EAAE,KAAK,CAAC,UAAU;SACxB,CAAC,CAAC;QACH,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,sBAAsB,EAAE;YAC9C,KAAK,EAAE,KAAK,CAAC,oBAAoB;SAClC,CAAC,CAAC;QACH,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,wBAAwB,EAAE;YAChD,KAAK,EAAE,KAAK,CAAC,sBAAsB;SACpC,CAAC,CAAC;QACH,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,eAAe,EAAE;YACvC,KAAK,EAAE,KAAK,CAAC,aAAa;SAC3B,CAAC,CAAC;QAEH,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;YAC7B,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,oBAAoB,EAAE;gBAC5C,KAAK,EAAE,KAAK,CAAC,kBAAkB;aAChC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF;AA1BD,4CA0BC"}

package/lib/internal/secrets-construct.d.ts

@@ -0,0 +1,7 @@
+import { Construct } from "constructs";
+import type { SecretsConstructProps, SecretsResources } from "./contracts";
+export declare class SecretsConstruct extends Construct {
+    readonly resources: SecretsResources;
+    constructor(scope: Construct, id: string, props: SecretsConstructProps);
+}
+//# sourceMappingURL=secrets-construct.d.ts.map

package/lib/internal/secrets-construct.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets-construct.d.ts","sourceRoot":"","sources":["../../src/internal/secrets-construct.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,KAAK,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE3E,qBAAa,gBAAiB,SAAQ,SAAS;IAC7C,SAAgB,SAAS,EAAE,gBAAgB,CAAC;gBAEzB,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB;CA6M9E"}