@empire-builder-kit/nx 1.0.0-rc.37 → 1.0.0-rc.39

package/src/generators/slice/built-in-plan-operations-files.js

@@ -6,12 +6,12 @@ const feature_registry_js_1 = require("../feature-registry.js");
 const logging_registry_js_1 = require("../logging-registry.js");
 const built_in_plan_shared_js_1 = require("./built-in-plan-shared.js");
 /** @internal */
-function renderSliceOperationsFiles(name, workspace = 'workspace', frameworkVersion = 'workspace-installed') {
+function renderSliceOperationsFiles(name, workspace = 'workspace', frameworkVersion = 'workspace-installed', sql = true) {
     const pascalName = name
         .split('-')
         .map((segment) => segment[0]?.toUpperCase() + segment.slice(1))
         .join('');
-    return {
+    const files = {
         'operations/features.json': (0, built_in_plan_shared_js_1.json)({
             features: [
                 {
@@ -30,10 +30,14 @@ function renderSliceOperationsFiles(name, workspace = 'workspace', frameworkVers
                     description: 'Logical database health and lifecycle behavior.',
                     id: 'database',
                 },
-                {
-                    description: 'Database bootstrap, migration, and protected retirement behavior.',
-                    id: 'database-lifecycle',
-                },
+                ...(sql
+                    ? [
+                        {
+                            description: 'Database bootstrap, migration, and protected retirement behavior.',
+                            id: 'database-lifecycle',
+                        },
+                    ]
+                    : []),
                 {
                     description: 'Retention, export, correction, deletion, and hold behavior.',
                     id: 'data-lifecycle',
@@ -141,6 +145,8 @@ function renderSliceOperationsFiles(name, workspace = 'workspace', frameworkVers
                 'job-data-retention-maintenance',
                 'job-data-retention-maintenance-launcher',
                 'job-data-retention-orchestration',
+                'key-value-stream-delivery',
+                'key-value-reconciliation',
                 'machine-client-provisioner',
                 'machine-authorization-proof',
                 'machine-authorization-proof-target',
@@ -148,14 +154,17 @@ function renderSliceOperationsFiles(name, workspace = 'workspace', frameworkVers
                 'next-revalidation-seeder',
                 'next-revalidation-subscriber',
                 'next-server',
+                ...(sql ? ['sql-outbox-relay'] : []),
             ],
-            databaseComponents: [
-                'database-bootstrap',
-                'database-migration',
-                'database-migration-orchestration',
-                'database-retirement',
-                'database-retirement-orchestration',
-            ],
+            databaseComponents: sql
+                ? [
+                    'database-bootstrap',
+                    'database-migration',
+                    'database-migration-orchestration',
+                    'database-retirement',
+                    'database-retirement-orchestration',
+                ]
+                : [],
             schemaVersion: logging_registry_js_1.SLICE_LOGGING_REGISTRY_SCHEMA_VERSION,
         }),
         'docs/runbooks/log-investigation.md': `# Log investigation
@@ -192,9 +201,12 @@ if (ownership.schemaVersion !== ${index_js_1.GENERATED_OWNERSHIP_SCHEMA_VERSION}
 if (!ownership.foundation.capabilities.includes('deployment')) {
   throw new Error('Slice does not declare the Foundation deployment capability.');
 }
-const databaseBindings = JSON.parse(
+${sql
+            ? `const databaseBindings = JSON.parse(
   readFileSync(new URL('../database/bindings.json', import.meta.url), 'utf8'),
 );
+`
+            : 'const databaseBindings = {};\n'}\
 const featureRegistry = JSON.parse(
   readFileSync(new URL('../operations/features.json', import.meta.url), 'utf8'),
 );
@@ -275,59 +287,45 @@ if (origin) {
 process.stdout.write('${name} live-mode prerequisites verified.\\n');
 `,
         'scripts/check-database.mjs': `import { existsSync, readFileSync } from 'node:fs';
-import { createDatabaseBindingPlan } from '@empire-builder-kit/nx/foundation';
+import { createDatabaseBindingPlan, validateDatabaseBindings } from '@empire-builder-kit/nx/foundation';
 import databaseBindings from '../database/bindings.json' with { type: 'json' };
 
 const migration = new URL('../database/migrations/0000_initial.sql', import.meta.url);
 if (!existsSync(migration) || !readFileSync(migration, 'utf8').includes('CREATE TABLE')) {
   throw new Error('The initial database migration is missing or invalid.');
 }
-const plan = createDatabaseBindingPlan(databaseBindings, {
-  slice: '${name}',
-  stage: process.env.EBK_STAGE ?? 'development',
-});
+const stage = process.env.EBK_STAGE ?? 'development';
+// Task prerequisites validate declarations before local allocation exists.
+// Canonical stages retain the complete deployed identifier/length validation.
+const plan = /^personal-[a-f0-9]{24}$/.test(stage)
+  ? validateDatabaseBindings(databaseBindings, { slice: '${name}' })
+  : createDatabaseBindingPlan(databaseBindings, { slice: '${name}', stage });
 if (!plan.active.primary) throw new Error('Database binding "primary" is required.');
 process.stdout.write('${name} database history verified.\\n');
 `,
-        'scripts/local-database.mjs': `import { spawnSync } from 'node:child_process';
-import { createDatabaseBindingPlan, resolveLocalDatabaseContract } from '@empire-builder-kit/nx/foundation';
+        'scripts/local-database.mjs': `import { fileURLToPath } from 'node:url';
+import { validateDatabaseBindings, runLocalDatabaseLifecycle } from '@empire-builder-kit/nx/foundation';
 import databaseBindings from '../database/bindings.json' with { type: 'json' };
 
 const action = process.argv[2];
 if (action !== 'up' && action !== 'down') {
   throw new Error('Usage: node scripts/local-database.mjs <up|down>');
 }
-const plan = createDatabaseBindingPlan(databaseBindings, {
+const plan = validateDatabaseBindings(databaseBindings, {
   slice: '${name}',
-  stage: 'development',
 });
 const activeDatabase = plan.active.primary;
 if (!activeDatabase) throw new Error('Database binding "primary" is required.');
-const local = resolveLocalDatabaseContract({
+await runLocalDatabaseLifecycle({
+  action,
+  composeFile: fileURLToPath(new URL('../database/docker-compose.yml', import.meta.url)),
   database: activeDatabase,
   slice: '${name}',
 });
-const project = process.env.COMPOSE_PROJECT_NAME ?? ('ebk-${name}-' + activeDatabase)
-  .replace(/[^a-z0-9_-]/g, '_')
-  .toLowerCase();
-const args = ['compose', '--project-name', project, '-f', 'database/docker-compose.yml'];
-args.push(...(action === 'up' ? ['up', '-d', '--wait'] : ['down']));
-const result = spawnSync('docker', args, {
-  env: {
-    ...process.env,
-    EBK_LOCAL_DATABASE: local.database,
-    EBK_LOCAL_DATABASE_PASSWORD: local.password,
-    EBK_LOCAL_DATABASE_PORT: String(local.port),
-    EBK_LOCAL_DATABASE_USERNAME: local.username,
-  },
-  stdio: 'inherit',
-});
-if (result.error) throw result.error;
-if (result.status !== 0) process.exit(result.status ?? 1);
 `,
         'scripts/confirm-deploy.mjs': `const stageArg = process.argv.find((value) => value.startsWith('--stage='));
 const stage = stageArg?.slice('--stage='.length) ?? 'development';
-process.stdout.write('${name} infrastructure and database migrations completed for ' + stage + '.\\n');
+process.stdout.write('${name} infrastructure${sql ? ' and database migrations' : ''} completed for ' + stage + '.\\n');
 `,
         'scripts/migrate-database.mjs': `import { createHash } from 'node:crypto';
 import {
@@ -540,6 +538,7 @@ export {};
   'EBK_APPCONFIG_ENVIRONMENT_ID',
   'EBK_APPCONFIG_PROFILE_ID',
   'EBK_FLEET_ORIGIN',
+  'EBK_KEY_VALUE_TABLE',
   'EBK_LOCAL_SOURCE_TREE',
   'EBK_PERFORMANCE_ACCOUNT_FINGERPRINT',
   'EBK_PERFORMANCE_CANDIDATE_DIGEST',
@@ -557,7 +556,8 @@ export {};
   'NEXT_TELEMETRY_DISABLED',
   'SST',
   'SST_RESOURCE_App',
-  'SST_RESOURCE_${pascalName}PrimaryDatabase',
+  'SST_RESOURCE_${pascalName}KeyValueAccess',
+${sql ? `  'SST_RESOURCE_${pascalName}PrimaryDatabase',\n` : ''}\
   'SST_RESOURCE_FoundationIdentity',
 ]);
 
@@ -566,6 +566,7 @@ const ebkRequiredNextBuildEnvironmentKeys = [
   'AUTH_USER_POOL_ID',
   'CI',
   'EBK_FLEET_ORIGIN',
+  'EBK_KEY_VALUE_TABLE',
   'EBK_LOCAL_SOURCE_TREE',
   'EBK_PERFORMANCE_ACCOUNT_FINGERPRINT',
   'EBK_PERFORMANCE_CANDIDATE_DIGEST',
@@ -583,7 +584,8 @@ const ebkRequiredNextBuildEnvironmentKeys = [
   'NEXT_TELEMETRY_DISABLED',
   'SST',
   'SST_RESOURCE_App',
-  'SST_RESOURCE_${pascalName}PrimaryDatabase',
+  'SST_RESOURCE_${pascalName}KeyValueAccess',
+${sql ? `  'SST_RESOURCE_${pascalName}PrimaryDatabase',\n` : ''}\
   'SST_RESOURCE_FoundationIdentity',
 ] as const;
 
@@ -694,20 +696,29 @@ export default $config({
     };
   },
   async run() {
-    const { installStageIamBoundaryTransforms } =
-      await import('@empire-builder-kit/nx/aws-authority');
-    registerExactNextBuildEnvironmentTransform();
-    const personalStagePattern = /^personal-[a-z0-9](?:[a-z0-9-]{0,34}[a-z0-9])?$/;
+    const personalStagePattern = /^personal-[a-f0-9]{24}$/;
     if ($dev && !personalStagePattern.test($app.stage)) {
       throw new Error(
         'SST dev requires the framework-derived personal stage. Use ebk dev.',
       );
     }
-    if (!$dev && personalStagePattern.test($app.stage)) {
+    if (!$dev && $app.stage.startsWith('personal-')) {
+      // The task-only Nx cleanup executor derives and verifies this exact ID.
+      // It invokes native SST remove, never deploy/refresh. Pulumi destroy owns
+      // the retained resource graph; do not materialize a production graph here.
+      const cleanupTask = process.env.EBK_NX_TASK_CLEANUP;
+      if (/^[a-f0-9]{24}$/.test(cleanupTask ?? '') && $app.stage === 'personal-' + cleanupTask) {
+        return {};
+      }
       throw new Error(
         'A personal stage may run only through the framework development adapter.',
       );
     }
+    const {
+      installLambdaPolicyWriteOrdering,
+      installStageIamBoundaryTransforms,
+    } = await import('@empire-builder-kit/nx/aws-authority');
+    registerExactNextBuildEnvironmentTransform();
     const accountId = process.env.AWS_EXPECTED_ACCOUNT_ID?.trim() ?? '';
     if (!/^[0-9]{12}$/.test(accountId)) {
       throw new Error(
@@ -719,15 +730,34 @@ export default $config({
       instanceProfileResource: aws.iam.InstanceProfile,
       registerTransform: $transform,
       roleResource: aws.iam.Role,
+      resourceStage: $app.stage,
       stage: ($dev ? 'development' : $app.stage) as
         | 'development'
         | 'staging'
         | 'production',
     });
+    // Order Function URL and Lambda permission policy writes before any
+    // resource registers; the pinned providers otherwise race them.
+    installLambdaPolicyWriteOrdering({
+      mergeOptions: $util.mergeOptions,
+      registerStackTransformation: $util.runtime.registerStackTransformation,
+    });
     const { app } = await import('./infra/index.js');
     return app();
   },
 });
+`,
+        'tools/ebk-next-dev.mjs': `import { createRequire } from 'node:module';
+import { dirname, join } from 'node:path';
+const require = createRequire(import.meta.url);
+const packageRoot = dirname(require.resolve('@empire-builder-kit/nx/package.json'));
+const { runNativeWebCommand } = require(join(packageRoot, 'src/local-dev/web-launch.js'));
+try {
+  process.exitCode = await runNativeWebCommand('${name}');
+} catch (error) {
+  console.error(error instanceof Error ? error.message : String(error));
+  process.exitCode = 1;
+}
 `,
         'tools/ebk-next-build-environment.mjs': `import { spawnSync } from 'node:child_process';
 import {
@@ -754,6 +784,7 @@ const applicationKeys = new Set(${JSON.stringify([
             'EBK_APPCONFIG_ENVIRONMENT_ID',
             'EBK_APPCONFIG_PROFILE_ID',
             'EBK_FLEET_ORIGIN',
+            'EBK_KEY_VALUE_TABLE',
             'EBK_LOCAL_SOURCE_TREE',
             'EBK_PERFORMANCE_ACCOUNT_FINGERPRINT',
             'EBK_PERFORMANCE_CANDIDATE_DIGEST',
@@ -771,7 +802,8 @@ const applicationKeys = new Set(${JSON.stringify([
             'NEXT_TELEMETRY_DISABLED',
             'SST',
             'SST_RESOURCE_App',
-            `SST_RESOURCE_${pascalName}PrimaryDatabase`,
+            `SST_RESOURCE_${pascalName}KeyValueAccess`,
+            ...(sql ? [`SST_RESOURCE_${pascalName}PrimaryDatabase`] : []),
             'SST_RESOURCE_FoundationIdentity',
         ], null, 2)});
 const operatingKeys = new Set(
@@ -1062,6 +1094,7 @@ if (result.status !== 0) {
                 'api/**/*.ts',
                 'infra/**/*.ts',
                 'jobs/**/*.ts',
+                'performance/**/*.ts',
                 'reliability/**/*.ts',
                 'secrets/**/*.ts',
                 'services/**/*.ts',
@@ -1075,5 +1108,11 @@ if (result.status !== 0) {
             exclude: ['.sst', 'dist', 'node_modules'],
         }),
     };
+    const sqlOnlyPaths = new Set([
+        'scripts/check-database.mjs',
+        'scripts/local-database.mjs',
+        'scripts/migrate-database.mjs',
+    ]);
+    return Object.fromEntries(Object.entries(files).filter(([path]) => sql || !sqlOnlyPaths.has(path)));
 }
 //# sourceMappingURL=built-in-plan-operations-files.js.map