@empire-builder-kit/nx 1.0.0-beta.4

package/src/executors/foundation-preflight/foundation-preflight.js

@@ -0,0 +1,94 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const devkit_1 = require("@nx/devkit");
+const preflight_js_1 = require("../../foundation/preflight.js");
+const discovery_js_1 = require("../../foundation/discovery.js");
+const stages_js_1 = require("../../foundation/stages.js");
+const run_sst_command_js_1 = require("../sst-lifecycle/run-sst-command.js");
+async function deployFoundation(options, context, foundationStage) {
+    const project = options.foundationProject?.trim() || 'foundation';
+    const root = context.projectsConfigurations?.projects[project]?.root;
+    if (!root) {
+        devkit_1.logger.error(`[foundation-preflight] Foundation project ${project} is not registered in the Nx workspace.`);
+        return false;
+    }
+    devkit_1.logger.info(`[foundation-preflight] deploying ${project} at canonical stage ${foundationStage}.`);
+    const result = await (0, run_sst_command_js_1.runSstCommand)('deploy', {
+        cwd: root,
+        ...(options.profile?.trim() ? { profile: options.profile.trim() } : {}),
+        stage: foundationStage,
+        stageMode: 'foundation',
+    }, { ...context, projectName: project });
+    return result.success;
+}
+const executor = async (options, context) => {
+    let stages;
+    try {
+        stages = (0, stages_js_1.resolveFoundationStages)({
+            consumerStage: options.stage,
+            foundationStage: options.foundationStage ?? process.env.EBK_FOUNDATION_STAGE,
+        });
+    }
+    catch (error) {
+        devkit_1.logger.error(error instanceof Error ? error.message : String(error));
+        return { success: false };
+    }
+    const requestedRegion = options.region?.trim() ||
+        process.env.AWS_REGION?.trim() ||
+        process.env.AWS_DEFAULT_REGION?.trim();
+    const reader = (0, preflight_js_1.createFoundationParameterReader)({
+        profile: options.profile,
+        region: requestedRegion,
+    });
+    let region = requestedRegion ?? 'default';
+    try {
+        region = await reader.resolveRegion();
+        let report = await (0, preflight_js_1.evaluateFoundationPreflight)({
+            consumerStage: stages.consumerStage,
+            foundationStage: stages.foundationStage,
+            readParameters: reader.read,
+            region,
+            requirement: {
+                capabilities: options.capabilities ?? discovery_js_1.STANDARD_FOUNDATION_REQUIREMENT.capabilities,
+                contract: options.contract ?? discovery_js_1.STANDARD_FOUNDATION_REQUIREMENT.contract,
+            },
+        });
+        if (report.state === 'absent' &&
+            options.deployIfMissing === true &&
+            !stages.mapped) {
+            const deployed = await deployFoundation(options, context, stages.foundationStage);
+            if (!deployed)
+                return { success: false };
+            report = await (0, preflight_js_1.evaluateFoundationPreflight)({
+                consumerStage: stages.consumerStage,
+                foundationStage: stages.foundationStage,
+                readParameters: reader.read,
+                region,
+                requirement: {
+                    capabilities: options.capabilities ??
+                        discovery_js_1.STANDARD_FOUNDATION_REQUIREMENT.capabilities,
+                    contract: options.contract ?? discovery_js_1.STANDARD_FOUNDATION_REQUIREMENT.contract,
+                },
+            });
+        }
+        const message = (0, preflight_js_1.formatFoundationPreflightReport)(report);
+        if (report.ok) {
+            devkit_1.logger.info(message);
+        }
+        else {
+            devkit_1.logger.error(message);
+        }
+        return { success: report.ok || options.advisory === true };
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        if (options.advisory === true) {
+            devkit_1.logger.warn(`[foundation-preflight] consumerStage=${stages.consumerStage} foundationStage=${stages.foundationStage} region=${region}: skipped because AWS SSM lookup is unavailable. ${message}`);
+            return { success: true };
+        }
+        devkit_1.logger.error(`[foundation-preflight] consumerStage=${stages.consumerStage} foundationStage=${stages.foundationStage} region=${region}: AWS SSM lookup failed. ${message}`);
+        return { success: false };
+    }
+};
+exports.default = executor;
+//# sourceMappingURL=foundation-preflight.js.map

package/src/executors/foundation-preflight/foundation-preflight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"foundation-preflight.js","sourceRoot":"","sources":["../../../../../../packages/nx/src/executors/foundation-preflight/foundation-preflight.ts"],"names":[],"mappings":";;AAAA,uCAAgF;AAChF,gEAIuC;AACvC,gEAAgF;AAEhF,0DAAqE;AACrE,4EAAoE;AAcpE,KAAK,UAAU,gBAAgB,CAC7B,OAAmC,EACnC,OAAwB,EACxB,eAAuB;IAEvB,MAAM,OAAO,GAAG,OAAO,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,YAAY,CAAC;IAClE,MAAM,IAAI,GAAG,OAAO,CAAC,sBAAsB,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC;IACrE,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,eAAM,CAAC,KAAK,CACV,6CAA6C,OAAO,yCAAyC,CAC9F,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,eAAM,CAAC,IAAI,CACT,oCAAoC,OAAO,uBAAuB,eAAe,GAAG,CACrF,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,IAAA,kCAAa,EAChC,QAAQ,EACR;QACE,GAAG,EAAE,IAAI;QACT,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,KAAK,EAAE,eAAe;QACtB,SAAS,EAAE,YAAY;KACxB,EACD,EAAE,GAAG,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,CACrC,CAAC;IACF,OAAO,MAAM,CAAC,OAAO,CAAC;AACxB,CAAC;AAED,MAAM,QAAQ,GAAgD,KAAK,EACjE,OAAO,EACP,OAAO,EACP,EAAE;IACF,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,IAAA,mCAAuB,EAAC;YAC/B,aAAa,EAAE,OAAO,CAAC,KAAK;YAC5B,eAAe,EACb,OAAO,CAAC,eAAe,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB;SAC9D,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAM,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACrE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;IACD,MAAM,eAAe,GACnB,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE;QACtB,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE;QAC9B,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,IAAA,8CAA+B,EAAC;QAC7C,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,eAAe;KACxB,CAAC,CAAC;IACH,IAAI,MAAM,GAAG,eAAe,IAAI,SAAS,CAAC;IAE1C,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,EAAE,CAAC;QACtC,IAAI,MAAM,GAAG,MAAM,IAAA,0CAA2B,EAAC;YAC7C,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,cAAc,EAAE,MAAM,CAAC,IAAI;YAC3B,MAAM;YACN,WAAW,EAAE;gBACX,YAAY,EACV,OAAO,CAAC,YAAY,IAAI,8CAA+B,CAAC,YAAY;gBACtE,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,8CAA+B,CAAC,QAAQ;aACvE;SACF,CAAC,CAAC;QACH,IACE,MAAM,CAAC,KAAK,KAAK,QAAQ;YACzB,OAAO,CAAC,eAAe,KAAK,IAAI;YAChC,CAAC,MAAM,CAAC,MAAM,EACd,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CACrC,OAAO,EACP,OAAO,EACP,MAAM,CAAC,eAAe,CACvB,CAAC;YACF,IAAI,CAAC,QAAQ;gBAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YACzC,MAAM,GAAG,MAAM,IAAA,0CAA2B,EAAC;gBACzC,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,eAAe,EAAE,MAAM,CAAC,eAAe;gBACvC,cAAc,EAAE,MAAM,CAAC,IAAI;gBAC3B,MAAM;gBACN,WAAW,EAAE;oBACX,YAAY,EACV,OAAO,CAAC,YAAY;wBACpB,8CAA+B,CAAC,YAAY;oBAC9C,QAAQ,EACN,OAAO,CAAC,QAAQ,IAAI,8CAA+B,CAAC,QAAQ;iBAC/D;aACF,CAAC,CAAC;QACL,CAAC;QACD,MAAM,OAAO,GAAG,IAAA,8CAA+B,EAAC,MAAM,CAAC,CAAC;QACxD,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,eAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,eAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;IAC7D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC9B,eAAM,CAAC,IAAI,CACT,wCAAwC,MAAM,CAAC,aAAa,oBAAoB,MAAM,CAAC,eAAe,WAAW,MAAM,oDAAoD,OAAO,EAAE,CACrL,CAAC;YACF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QACD,eAAM,CAAC,KAAK,CACV,wCAAwC,MAAM,CAAC,aAAa,oBAAoB,MAAM,CAAC,eAAe,WAAW,MAAM,4BAA4B,OAAO,EAAE,CAC7J,CAAC;QACF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;AACH,CAAC,CAAC;AAEF,kBAAe,QAAQ,CAAC"}

package/src/executors/foundation-preflight/schema.json

@@ -0,0 +1,31 @@
+{
+  "$schema": "https://json-schema.org/schema",
+  "version": 2,
+  "title": "Empire Builder Kit Foundation preflight",
+  "description": "Validate the deployed Standard Foundation discovery contract before operating a Product Slice.",
+  "type": "object",
+  "additionalProperties": false,
+  "properties": {
+    "stage": {
+      "type": "string",
+      "pattern": "^[a-z0-9][a-z0-9-]*$",
+      "default": "development"
+    },
+    "foundationStage": {
+      "type": "string",
+      "pattern": "^[a-z0-9][a-z0-9-]*$"
+    },
+    "region": { "type": "string" },
+    "profile": { "type": "string" },
+    "contract": { "type": "string", "default": "^1.0.0" },
+    "capabilities": {
+      "type": "array",
+      "items": { "type": "string" },
+      "uniqueItems": true
+    },
+    "advisory": { "type": "boolean", "default": false },
+    "deployIfMissing": { "type": "boolean", "default": false },
+    "foundationProject": { "type": "string", "default": "foundation" }
+  },
+  "required": ["stage"]
+}

package/src/executors/foundation-remove-preflight/foundation-remove-preflight.d.ts

@@ -0,0 +1,13 @@
+import { type PromiseExecutor } from '@nx/devkit';
+interface FoundationRemovePreflightOptions {
+    profile?: string;
+    region?: string;
+    stage: string;
+}
+export declare function evaluateFoundationRemoval(foundationStage: string, registrationNames: readonly string[]): {
+    message: string;
+    success: boolean;
+};
+export declare function productSliceRegistrationName(foundationStage: string, parameterName: string | undefined): string;
+declare const executor: PromiseExecutor<FoundationRemovePreflightOptions>;
+export default executor;

package/src/executors/foundation-remove-preflight/foundation-remove-preflight.js

@@ -0,0 +1,69 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.evaluateFoundationRemoval = evaluateFoundationRemoval;
+exports.productSliceRegistrationName = productSliceRegistrationName;
+const client_ssm_1 = require("@aws-sdk/client-ssm");
+const credential_providers_1 = require("@aws-sdk/credential-providers");
+const devkit_1 = require("@nx/devkit");
+const discovery_js_1 = require("../../foundation/discovery.js");
+function evaluateFoundationRemoval(foundationStage, registrationNames) {
+    if (registrationNames.length === 0) {
+        return {
+            message: `[foundation-remove-preflight] foundationStage=${foundationStage}: no Product Slice registrations remain.`,
+            success: true,
+        };
+    }
+    return {
+        message: `[foundation-remove-preflight] foundationStage=${foundationStage}: Foundation removal is blocked by Product Slice registration records: ${registrationNames.join(', ')}. Remove known consumer-stage slice stacks first; investigate every unrecognized record before retrying.`,
+        success: false,
+    };
+}
+function productSliceRegistrationName(foundationStage, parameterName) {
+    const prefix = `${(0, discovery_js_1.productSliceRegistrationRoot)(foundationStage)}/`;
+    if (!parameterName?.startsWith(prefix)) {
+        return `[unrecognized registration] ${parameterName ?? '<missing parameter name>'}`;
+    }
+    const relativeName = parameterName.slice(prefix.length);
+    return /^[a-z0-9][a-z0-9-]*\/[a-z0-9][a-z0-9-]*$/.test(relativeName)
+        ? relativeName
+        : `[unrecognized registration] ${parameterName}`;
+}
+const executor = async (options) => {
+    const region = options.region?.trim() ||
+        process.env.AWS_REGION?.trim() ||
+        process.env.AWS_DEFAULT_REGION?.trim();
+    const client = new client_ssm_1.SSMClient({
+        ...(options.profile
+            ? { credentials: (0, credential_providers_1.fromIni)({ profile: options.profile }) }
+            : {}),
+        ...(region ? { region } : {}),
+    });
+    const registrations = [];
+    let nextToken;
+    try {
+        do {
+            const response = await client.send(new client_ssm_1.GetParametersByPathCommand({
+                NextToken: nextToken,
+                Path: (0, discovery_js_1.productSliceRegistrationRoot)(options.stage),
+                Recursive: true,
+            }));
+            registrations.push(...(response.Parameters ?? []).map(({ Name }) => productSliceRegistrationName(options.stage, Name)));
+            nextToken = response.NextToken;
+        } while (nextToken);
+    }
+    catch (error) {
+        devkit_1.logger.error(`[foundation-remove-preflight] foundationStage=${options.stage}: unable to inspect Product Slice registrations. ${error instanceof Error ? error.message : String(error)}`);
+        return { success: false };
+    }
+    finally {
+        client.destroy();
+    }
+    const result = evaluateFoundationRemoval(options.stage, registrations.sort());
+    if (result.success)
+        devkit_1.logger.info(result.message);
+    else
+        devkit_1.logger.error(result.message);
+    return { success: result.success };
+};
+exports.default = executor;
+//# sourceMappingURL=foundation-remove-preflight.js.map

package/src/executors/foundation-remove-preflight/foundation-remove-preflight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"foundation-remove-preflight.js","sourceRoot":"","sources":["../../../../../../packages/nx/src/executors/foundation-remove-preflight/foundation-remove-preflight.ts"],"names":[],"mappings":";;AAWA,8DAcC;AAED,oEAYC;AAvCD,oDAA4E;AAC5E,wEAAwD;AACxD,uCAA0D;AAC1D,gEAA6E;AAQ7E,SAAgB,yBAAyB,CACvC,eAAuB,EACvB,iBAAoC;IAEpC,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO;YACL,OAAO,EAAE,iDAAiD,eAAe,0CAA0C;YACnH,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IACD,OAAO;QACL,OAAO,EAAE,iDAAiD,eAAe,0EAA0E,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,0GAA0G;QACzR,OAAO,EAAE,KAAK;KACf,CAAC;AACJ,CAAC;AAED,SAAgB,4BAA4B,CAC1C,eAAuB,EACvB,aAAiC;IAEjC,MAAM,MAAM,GAAG,GAAG,IAAA,2CAA4B,EAAC,eAAe,CAAC,GAAG,CAAC;IACnE,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACvC,OAAO,+BAA+B,aAAa,IAAI,0BAA0B,EAAE,CAAC;IACtF,CAAC;IACD,MAAM,YAAY,GAAG,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACxD,OAAO,0CAA0C,CAAC,IAAI,CAAC,YAAY,CAAC;QAClE,CAAC,CAAC,YAAY;QACd,CAAC,CAAC,+BAA+B,aAAa,EAAE,CAAC;AACrD,CAAC;AAED,MAAM,QAAQ,GAAsD,KAAK,EACvE,OAAO,EACP,EAAE;IACF,MAAM,MAAM,GACV,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE;QACtB,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE;QAC9B,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,IAAI,sBAAS,CAAC;QAC3B,GAAG,CAAC,OAAO,CAAC,OAAO;YACjB,CAAC,CAAC,EAAE,WAAW,EAAE,IAAA,8BAAO,EAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,EAAE;YACxD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9B,CAAC,CAAC;IACH,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,IAAI,SAA6B,CAAC;IAClC,IAAI,CAAC;QACH,GAAG,CAAC;YACF,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAChC,IAAI,uCAA0B,CAAC;gBAC7B,SAAS,EAAE,SAAS;gBACpB,IAAI,EAAE,IAAA,2CAA4B,EAAC,OAAO,CAAC,KAAK,CAAC;gBACjD,SAAS,EAAE,IAAI;aAChB,CAAC,CACH,CAAC;YACF,aAAa,CAAC,IAAI,CAChB,GAAG,CAAC,QAAQ,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAC9C,4BAA4B,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAClD,CACF,CAAC;YACF,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;QACjC,CAAC,QAAQ,SAAS,EAAE;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAM,CAAC,KAAK,CACV,iDAAiD,OAAO,CAAC,KAAK,oDAAoD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC3K,CAAC;QACF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC;IAED,MAAM,MAAM,GAAG,yBAAyB,CAAC,OAAO,CAAC,KAAK,EAAE,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9E,IAAI,MAAM,CAAC,OAAO;QAAE,eAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;;QAC3C,eAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;AACrC,CAAC,CAAC;AAEF,kBAAe,QAAQ,CAAC"}

package/src/executors/foundation-remove-preflight/schema.json

@@ -0,0 +1,17 @@
+{
+  "$schema": "https://json-schema.org/schema",
+  "version": 2,
+  "title": "Empire Builder Kit Foundation removal preflight",
+  "type": "object",
+  "additionalProperties": false,
+  "properties": {
+    "stage": {
+      "type": "string",
+      "pattern": "^[a-z0-9][a-z0-9-]*$",
+      "default": "development"
+    },
+    "region": { "type": "string" },
+    "profile": { "type": "string" }
+  },
+  "required": ["stage"]
+}

package/src/executors/refresh/refresh.d.ts

@@ -0,0 +1,4 @@
+import type { PromiseExecutor } from '@nx/devkit';
+import { type SstLifecycleOptions } from '../sst-lifecycle/run-sst-command.js';
+declare const executor: PromiseExecutor<SstLifecycleOptions>;
+export default executor;

package/src/executors/refresh/refresh.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const run_sst_command_js_1 = require("../sst-lifecycle/run-sst-command.js");
+const executor = (options, context) => (0, run_sst_command_js_1.runSstCommand)('refresh', options, context);
+exports.default = executor;
+//# sourceMappingURL=refresh.js.map

package/src/executors/refresh/refresh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"refresh.js","sourceRoot":"","sources":["../../../../../../packages/nx/src/executors/refresh/refresh.ts"],"names":[],"mappings":";;AACA,4EAG6C;AAE7C,MAAM,QAAQ,GAAyC,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAC1E,IAAA,kCAAa,EAAC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAE7C,kBAAe,QAAQ,CAAC"}

package/src/executors/remove/remove.d.ts

@@ -0,0 +1,4 @@
+import type { PromiseExecutor } from '@nx/devkit';
+import { type SstLifecycleOptions } from '../sst-lifecycle/run-sst-command.js';
+declare const executor: PromiseExecutor<SstLifecycleOptions>;
+export default executor;

package/src/executors/remove/remove.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const run_sst_command_js_1 = require("../sst-lifecycle/run-sst-command.js");
+const executor = (options, context) => (0, run_sst_command_js_1.runSstCommand)('remove', options, context);
+exports.default = executor;
+//# sourceMappingURL=remove.js.map

package/src/executors/remove/remove.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remove.js","sourceRoot":"","sources":["../../../../../../packages/nx/src/executors/remove/remove.ts"],"names":[],"mappings":";;AACA,4EAG6C;AAE7C,MAAM,QAAQ,GAAyC,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAC1E,IAAA,kCAAa,EAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAE5C,kBAAe,QAAQ,CAAC"}

package/src/executors/sst-lifecycle/run-sst-command.d.ts

@@ -0,0 +1,28 @@
+import { type ExecutorContext } from '@nx/devkit';
+import { type FoundationStageResolution } from '../../foundation/stages.js';
+export type SstLifecycleCommand = 'deploy' | 'dev' | 'refresh' | 'remove' | 'unlock';
+export interface SstLifecycleOptions {
+    args?: string[];
+    cwd?: string;
+    foundationStage?: string;
+    profile?: string;
+    stage: string;
+    stageMode: 'consumer' | 'foundation';
+    target?: string;
+}
+export interface SstCommandInvocation {
+    args: string[];
+    cwd: string;
+    environment: {
+        EBK_CONSUMER_STAGE: string;
+        EBK_FOUNDATION_STAGE: string;
+    };
+    executable: string;
+}
+export declare function assertSafeSstForwardedArguments(args: readonly string[]): void;
+export declare function assertSstLifecyclePolicy(command: SstLifecycleCommand, stage: string, environment?: NodeJS.ProcessEnv): void;
+export declare function resolveSstLifecycleStages(options: SstLifecycleOptions, environment?: NodeJS.ProcessEnv): FoundationStageResolution;
+export declare function buildSstCommandInvocation(command: SstLifecycleCommand, options: SstLifecycleOptions, context: ExecutorContext, environment?: NodeJS.ProcessEnv): SstCommandInvocation;
+export declare function runSstCommand(command: SstLifecycleCommand, options: SstLifecycleOptions, context: ExecutorContext): Promise<{
+    success: boolean;
+}>;

package/src/executors/sst-lifecycle/run-sst-command.js

@@ -0,0 +1,154 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.assertSafeSstForwardedArguments = assertSafeSstForwardedArguments;
+exports.assertSstLifecyclePolicy = assertSstLifecyclePolicy;
+exports.resolveSstLifecycleStages = resolveSstLifecycleStages;
+exports.buildSstCommandInvocation = buildSstCommandInvocation;
+exports.runSstCommand = runSstCommand;
+const devkit_1 = require("@nx/devkit");
+const node_child_process_1 = require("node:child_process");
+const node_path_1 = require("node:path");
+const stages_js_1 = require("../../foundation/stages.js");
+const PROTECTED_STAGES = new Set(['staging', 'production']);
+const RESERVED_FORWARDED_OPTIONS = new Set([
+    '--config',
+    '--profile',
+    '--stage',
+    '--target',
+]);
+function assertSafeSstForwardedArguments(args) {
+    const reserved = args.find((argument) => {
+        const option = argument.split('=', 1)[0].toLowerCase();
+        return RESERVED_FORWARDED_OPTIONS.has(option);
+    });
+    if (reserved) {
+        const option = reserved.split('=', 1)[0].toLowerCase();
+        throw new Error(`SST forwarded arguments cannot override lifecycle option ${option}. Use the corresponding Nx executor option instead.`);
+    }
+}
+function assertSstLifecyclePolicy(command, stage, environment = process.env) {
+    if (!PROTECTED_STAGES.has(stage))
+        return;
+    if (command === 'dev') {
+        throw new Error(`SST dev is not permitted for protected stage ${stage}.`);
+    }
+    const repository = environment.GITHUB_REPOSITORY;
+    const expectedWorkflowRef = repository
+        ? `${repository}/.github/workflows/deploy.yml@refs/heads/main`
+        : undefined;
+    const trustedWorkflow = Boolean(repository) &&
+        environment.GITHUB_ACTIONS === 'true' &&
+        environment.GITHUB_EVENT_NAME === 'workflow_dispatch' &&
+        environment.GITHUB_REF === 'refs/heads/main' &&
+        environment.GITHUB_WORKFLOW_REF === expectedWorkflowRef;
+    if (!trustedWorkflow) {
+        throw new Error(`SST ${command} for protected stage ${stage} must run from the main-branch deploy workflow.`);
+    }
+    if (command === 'remove' &&
+        stage === 'production' &&
+        environment.EBK_ALLOW_PRODUCTION_REMOVE !== 'true') {
+        throw new Error('Production removal requires EBK_ALLOW_PRODUCTION_REMOVE=true in the protected production environment.');
+    }
+}
+function resolveSstLifecycleStages(options, environment = process.env) {
+    if (options.stageMode === 'foundation') {
+        const stage = (0, stages_js_1.requireFoundationStage)(options.stage);
+        if (options.foundationStage?.trim() &&
+            (0, stages_js_1.requireFoundationStage)(options.foundationStage) !== stage) {
+            throw new Error(`Foundation lifecycle stage ${stage} cannot target Foundation stage ${options.foundationStage.trim()}.`);
+        }
+        return {
+            consumerStage: stage,
+            foundationStage: stage,
+            mapped: false,
+        };
+    }
+    if (options.stageMode !== 'consumer') {
+        throw new Error('SST lifecycle stageMode must be consumer or foundation.');
+    }
+    return (0, stages_js_1.resolveFoundationStages)({
+        consumerStage: options.stage,
+        foundationStage: options.foundationStage ?? environment.EBK_FOUNDATION_STAGE,
+    });
+}
+function buildSstCommandInvocation(command, options, context, environment = process.env) {
+    const configuredRoot = context.projectName
+        ? context.projectsConfigurations?.projects[context.projectName]?.root
+        : undefined;
+    const configuredCwd = options.cwd ?? configuredRoot ?? context.root;
+    const cwd = (0, node_path_1.isAbsolute)(configuredCwd)
+        ? configuredCwd
+        : (0, node_path_1.join)(context.root, configuredCwd);
+    const stages = resolveSstLifecycleStages(options, environment);
+    if (options.stageMode === 'consumer' &&
+        command === 'deploy' &&
+        stages.mapped) {
+        throw new Error(`Full deploy is not permitted for mapped consumer stage ${stages.consumerStage}. Use dev against the ${stages.foundationStage} Foundation until preview routing is supported.`);
+    }
+    assertSstLifecyclePolicy(command, stages.consumerStage, environment);
+    const args = [command, '--stage', stages.consumerStage];
+    if (options.profile) {
+        args.push('--profile', options.profile);
+    }
+    if (options.target) {
+        args.push('--target', options.target);
+    }
+    if (options.args) {
+        assertSafeSstForwardedArguments(options.args);
+        args.push(...options.args);
+    }
+    return {
+        args: [
+            (0, node_path_1.join)(context.root, 'node_modules', 'sst', 'bin', 'sst.mjs'),
+            ...args,
+        ],
+        cwd,
+        environment: {
+            EBK_CONSUMER_STAGE: stages.consumerStage,
+            EBK_FOUNDATION_STAGE: stages.foundationStage,
+        },
+        executable: process.execPath,
+    };
+}
+async function runSstCommand(command, options, context) {
+    let invocation;
+    try {
+        invocation = buildSstCommandInvocation(command, options, context);
+    }
+    catch (error) {
+        devkit_1.logger.error(error instanceof Error ? error.message : String(error));
+        return { success: false };
+    }
+    devkit_1.logger.info(`Running workspace SST: ${command} --stage ${invocation.environment.EBK_CONSUMER_STAGE} foundationStage=${invocation.environment.EBK_FOUNDATION_STAGE} (${invocation.cwd})`);
+    return new Promise((resolve) => {
+        const child = (0, node_child_process_1.spawn)(invocation.executable, invocation.args, {
+            cwd: invocation.cwd,
+            env: { ...process.env, ...invocation.environment },
+            shell: false,
+            stdio: 'inherit',
+        });
+        let settled = false;
+        const settle = (success) => {
+            if (settled)
+                return;
+            settled = true;
+            resolve({ success });
+        };
+        child.on('error', (error) => {
+            devkit_1.logger.error(`Failed to start workspace SST: ${error.message}`);
+            settle(false);
+        });
+        child.on('close', (code, signal) => {
+            if (code !== 0) {
+                devkit_1.logger.error(signal
+                    ? `SST ${command} terminated with signal ${signal}.`
+                    : `SST ${command} exited with status ${code ?? 'unknown'}.`);
+                if (command === 'deploy' || command === 'remove') {
+                    devkit_1.logger.error(`If the stack is locked, run pnpm nx run ${context.projectName ?? '<project>'}:unlock --stage=${options.stage}.`);
+                }
+            }
+            settle(code === 0);
+        });
+    });
+}
+//# sourceMappingURL=run-sst-command.js.map

package/src/executors/sst-lifecycle/run-sst-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-sst-command.js","sourceRoot":"","sources":["../../../../../../packages/nx/src/executors/sst-lifecycle/run-sst-command.ts"],"names":[],"mappings":";;AAwCA,0EAWC;AAED,4DAiCC;AAED,8DA4BC;AAED,8DAiDC;AAED,sCAoDC;AA7ND,uCAA0D;AAC1D,2DAA2C;AAC3C,yCAA6C;AAC7C,0DAIoC;AAyBpC,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;AAC5D,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC;IACzC,UAAU;IACV,WAAW;IACX,SAAS;IACT,UAAU;CACX,CAAC,CAAC;AAEH,SAAgB,+BAA+B,CAAC,IAAuB;IACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;QACtC,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QACvD,OAAO,0BAA0B,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IACH,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CACb,4DAA4D,MAAM,qDAAqD,CACxH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAgB,wBAAwB,CACtC,OAA4B,EAC5B,KAAa,EACb,cAAiC,OAAO,CAAC,GAAG;IAE5C,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO;IACzC,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,gDAAgD,KAAK,GAAG,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,UAAU,GAAG,WAAW,CAAC,iBAAiB,CAAC;IACjD,MAAM,mBAAmB,GAAG,UAAU;QACpC,CAAC,CAAC,GAAG,UAAU,+CAA+C;QAC9D,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,eAAe,GACnB,OAAO,CAAC,UAAU,CAAC;QACnB,WAAW,CAAC,cAAc,KAAK,MAAM;QACrC,WAAW,CAAC,iBAAiB,KAAK,mBAAmB;QACrD,WAAW,CAAC,UAAU,KAAK,iBAAiB;QAC5C,WAAW,CAAC,mBAAmB,KAAK,mBAAmB,CAAC;IAC1D,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,OAAO,OAAO,wBAAwB,KAAK,iDAAiD,CAC7F,CAAC;IACJ,CAAC;IACD,IACE,OAAO,KAAK,QAAQ;QACpB,KAAK,KAAK,YAAY;QACtB,WAAW,CAAC,2BAA2B,KAAK,MAAM,EAClD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,uGAAuG,CACxG,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAgB,yBAAyB,CACvC,OAA4B,EAC5B,cAAiC,OAAO,CAAC,GAAG;IAE5C,IAAI,OAAO,CAAC,SAAS,KAAK,YAAY,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,IAAA,kCAAsB,EAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACpD,IACE,OAAO,CAAC,eAAe,EAAE,IAAI,EAAE;YAC/B,IAAA,kCAAsB,EAAC,OAAO,CAAC,eAAe,CAAC,KAAK,KAAK,EACzD,CAAC;YACD,MAAM,IAAI,KAAK,CACb,8BAA8B,KAAK,mCAAmC,OAAO,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,CACxG,CAAC;QACJ,CAAC;QACD,OAAO;YACL,aAAa,EAAE,KAAK;YACpB,eAAe,EAAE,KAAK;YACtB,MAAM,EAAE,KAAK;SACd,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,IAAA,mCAAuB,EAAC;QAC7B,aAAa,EAAE,OAAO,CAAC,KAAK;QAC5B,eAAe,EACb,OAAO,CAAC,eAAe,IAAI,WAAW,CAAC,oBAAoB;KAC9D,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,yBAAyB,CACvC,OAA4B,EAC5B,OAA4B,EAC5B,OAAwB,EACxB,cAAiC,OAAO,CAAC,GAAG;IAE5C,MAAM,cAAc,GAAG,OAAO,CAAC,WAAW;QACxC,CAAC,CAAC,OAAO,CAAC,sBAAsB,EAAE,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,IAAI;QACrE,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,IAAI,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;IACpE,MAAM,GAAG,GAAG,IAAA,sBAAU,EAAC,aAAa,CAAC;QACnC,CAAC,CAAC,aAAa;QACf,CAAC,CAAC,IAAA,gBAAI,EAAC,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,yBAAyB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC/D,IACE,OAAO,CAAC,SAAS,KAAK,UAAU;QAChC,OAAO,KAAK,QAAQ;QACpB,MAAM,CAAC,MAAM,EACb,CAAC;QACD,MAAM,IAAI,KAAK,CACb,0DAA0D,MAAM,CAAC,aAAa,yBAAyB,MAAM,CAAC,eAAe,iDAAiD,CAC/K,CAAC;IACJ,CAAC;IACD,wBAAwB,CAAC,OAAO,EAAE,MAAM,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;IAExD,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,+BAA+B,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED,OAAO;QACL,IAAI,EAAE;YACJ,IAAA,gBAAI,EAAC,OAAO,CAAC,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC;YAC3D,GAAG,IAAI;SACR;QACD,GAAG;QACH,WAAW,EAAE;YACX,kBAAkB,EAAE,MAAM,CAAC,aAAa;YACxC,oBAAoB,EAAE,MAAM,CAAC,eAAe;SAC7C;QACD,UAAU,EAAE,OAAO,CAAC,QAAQ;KAC7B,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,aAAa,CACjC,OAA4B,EAC5B,OAA4B,EAC5B,OAAwB;IAExB,IAAI,UAAgC,CAAC;IACrC,IAAI,CAAC;QACH,UAAU,GAAG,yBAAyB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACpE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAM,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACrE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;IAED,eAAM,CAAC,IAAI,CACT,0BAA0B,OAAO,YAAY,UAAU,CAAC,WAAW,CAAC,kBAAkB,oBAAoB,UAAU,CAAC,WAAW,CAAC,oBAAoB,KAAK,UAAU,CAAC,GAAG,GAAG,CAC5K,CAAC;IAEF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,IAAA,0BAAK,EAAC,UAAU,CAAC,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE;YAC1D,GAAG,EAAE,UAAU,CAAC,GAAG;YACnB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,WAAW,EAAE;YAClD,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC;QACH,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,MAAM,MAAM,GAAG,CAAC,OAAgB,EAAE,EAAE;YAClC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QACvB,CAAC,CAAC;QAEF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,eAAM,CAAC,KAAK,CAAC,kCAAkC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAChE,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YACjC,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,eAAM,CAAC,KAAK,CACV,MAAM;oBACJ,CAAC,CAAC,OAAO,OAAO,2BAA2B,MAAM,GAAG;oBACpD,CAAC,CAAC,OAAO,OAAO,uBAAuB,IAAI,IAAI,SAAS,GAAG,CAC9D,CAAC;gBACF,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;oBACjD,eAAM,CAAC,KAAK,CACV,2CAA2C,OAAO,CAAC,WAAW,IAAI,WAAW,mBAAmB,OAAO,CAAC,KAAK,GAAG,CACjH,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/src/executors/sst-lifecycle/schema.json

@@ -0,0 +1,45 @@
+{
+  "$schema": "https://json-schema.org/schema",
+  "version": 2,
+  "title": "Empire Builder Kit SST lifecycle executor",
+  "description": "Run a supported SST lifecycle action through the workspace-pinned binary.",
+  "type": "object",
+  "additionalProperties": false,
+  "properties": {
+    "cwd": {
+      "type": "string",
+      "description": "Working directory containing sst.config.ts. Defaults to the Nx project root."
+    },
+    "stage": {
+      "type": "string",
+      "pattern": "^[a-z0-9][a-z0-9-]*$",
+      "description": "SST stage name.",
+      "default": "development"
+    },
+    "stageMode": {
+      "type": "string",
+      "enum": ["consumer", "foundation"],
+      "description": "Whether --stage names a Product Slice consumer stage or a canonical Foundation stage."
+    },
+    "foundationStage": {
+      "type": "string",
+      "pattern": "^[a-z0-9][a-z0-9-]*$",
+      "description": "Optional explicit Foundation stage. Consumer personal/preview stages may use only development."
+    },
+    "profile": {
+      "type": "string",
+      "description": "Optional AWS profile passed to SST."
+    },
+    "target": {
+      "type": "string",
+      "description": "Optional SST target selector."
+    },
+    "args": {
+      "type": "array",
+      "description": "Additional arguments passed to SST. Cannot override --stage, --profile, --target, or --config; use the executor options instead.",
+      "items": { "type": "string" },
+      "default": []
+    }
+  },
+  "required": ["stage", "stageMode"]
+}

package/src/executors/unlock/unlock.d.ts

@@ -0,0 +1,4 @@
+import type { PromiseExecutor } from '@nx/devkit';
+import { type SstLifecycleOptions } from '../sst-lifecycle/run-sst-command.js';
+declare const executor: PromiseExecutor<SstLifecycleOptions>;
+export default executor;

package/src/executors/unlock/unlock.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const run_sst_command_js_1 = require("../sst-lifecycle/run-sst-command.js");
+const executor = (options, context) => (0, run_sst_command_js_1.runSstCommand)('unlock', options, context);
+exports.default = executor;
+//# sourceMappingURL=unlock.js.map

package/src/executors/unlock/unlock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unlock.js","sourceRoot":"","sources":["../../../../../../packages/nx/src/executors/unlock/unlock.ts"],"names":[],"mappings":";;AACA,4EAG6C;AAE7C,MAAM,QAAQ,GAAyC,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAC1E,IAAA,kCAAa,EAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAE5C,kBAAe,QAAQ,CAAC"}

package/src/foundation/aurora-logical-database.d.ts

@@ -0,0 +1,76 @@
+import type { ExecuteStatementCommand, RDSDataClient } from '@aws-sdk/client-rds-data';
+export interface AuroraLogicalDbInputs {
+    clusterArn: string;
+    masterSecretArn: string;
+    database: string;
+    readwriteRole: string;
+    readonlyRole: string;
+    removalPolicy?: 'retain' | 'destroy';
+    rotationToken?: string;
+}
+export interface AuroraLogicalDbState extends AuroraLogicalDbInputs {
+    readwritePassword: string;
+    readonlyPassword: string;
+    id: string;
+}
+export interface DataApiExecutor {
+    execute(database: string, sql: string): Promise<void>;
+    exists(database: string, existsSql: string): Promise<boolean>;
+}
+type ExecuteStatementCommandConstructor = new (input: ConstructorParameters<typeof ExecuteStatementCommand>[0]) => ExecuteStatementCommand;
+export declare class RdsDataApiExecutor implements DataApiExecutor {
+    private readonly client;
+    private readonly resourceArn;
+    private readonly secretArn;
+    private readonly ExecuteStatementCommand;
+    constructor(client: RDSDataClient, resourceArn: string, secretArn: string, ExecuteStatementCommand: ExecuteStatementCommandConstructor);
+    execute(database: string, sql: string): Promise<void>;
+    exists(database: string, existsSql: string): Promise<boolean>;
+}
+export declare function createDatabaseSql(database: string): string;
+export declare function databaseExistsSql(database: string): string;
+export declare function roleExistsSql(role: string): string;
+export declare function createRoleSql(role: string, password: string): string;
+export declare function alterRolePasswordSql(role: string, password: string): string;
+export declare function grantScopedAccessSql(database: string, readwriteRole: string, readonlyRole: string): string[];
+export type PasswordGenerator = () => string;
+export interface PulumiCreateResult {
+    id: string;
+    outs?: Record<string, unknown>;
+}
+export interface PulumiUpdateResult {
+    outs?: Record<string, unknown>;
+}
+export interface AuroraLogicalDbProviderOptions {
+    executorFactory?: (inputs: AuroraLogicalDbInputs) => DataApiExecutor;
+    passwordGenerator?: PasswordGenerator;
+}
+export declare class AuroraLogicalDbProvider {
+    private readonly executorFactory?;
+    private readonly passwordGenerator;
+    constructor(options?: AuroraLogicalDbProviderOptions);
+    private buildExecutor;
+    private generateSecret;
+    create(inputs: AuroraLogicalDbInputs): Promise<PulumiCreateResult>;
+    private createInternal;
+    update(_id: string, olds: AuroraLogicalDbState, news: AuroraLogicalDbInputs): Promise<PulumiUpdateResult>;
+    private updateInternal;
+    delete(_id: string, props: AuroraLogicalDbState): Promise<void>;
+    private deleteInternal;
+}
+export interface AuroraLogicalDbResource {
+    readwritePassword: unknown;
+    readonlyPassword: unknown;
+    [key: string]: unknown;
+}
+export interface AuroraLogicalDbResourceOptions {
+    additionalSecretOutputs?: string[];
+    [key: string]: unknown;
+}
+export interface CreateAuroraLogicalDbOptions {
+    name: string;
+    args: AuroraLogicalDbInputs | Record<string, unknown>;
+    opts?: AuroraLogicalDbResourceOptions;
+}
+export declare function createAuroraLogicalDbResource(options: CreateAuroraLogicalDbOptions): AuroraLogicalDbResource;
+export {};