@empire-builder-kit/nx 1.0.0-rc.38 → 1.0.0-rc.39

package/src/generators/slice/built-in-plan-database-lifecycle-files.js

@@ -300,7 +300,7 @@ RUN --network=none pnpm --config.inject-workspace-packages=true --config.store-d
 
 FROM ${frozen_container_js_1.WORKLOAD_CONTAINER_NODE_IMAGE}
 WORKDIR /app
-ADD --chown=node:node --chmod=0444 --checksum=sha256:e5bb2084ccf45087bda1c9bffdea0eb15ee67f0b91646106e466714f9de3c7e3 https://truststore.pki.rds.amazonaws.com/global/global-bundle.pem ./rds-global-bundle.pem
+ADD --chown=node:node --chmod=0444 --checksum=sha256:fe45bbebf92ad3e27a583bbb2ddd1553c521ed4d49af5514dc0a40372ea5395c https://truststore.pki.rds.amazonaws.com/global/global-bundle.pem ./rds-global-bundle.pem
 COPY --from=build --chown=node:node /opt/migration ./
 COPY --chown=node:node packages/${name}/jobs/database-lifecycle-logging.mjs ./jobs/database-lifecycle-logging.mjs
 COPY --chown=node:node packages/${name}/jobs/bootstrap-database.mjs ./jobs/bootstrap-database.mjs
@@ -1616,7 +1616,6 @@ const requiredIdentifier = (name) => {
   }
   return value;
 };
-const quoteIdentifier = (value) => '"' + value.replaceAll('"', '""') + '"';
 let migrationId = 'unresolved';
 let migrationPhase = 'configuration';
 let failedMigrationPhase;
@@ -1742,7 +1741,7 @@ async function main() {
   const host = required('EBK_DATABASE_HOST');
   const database = required('EBK_DATABASE_NAME');
   const username = required('EBK_DATABASE_USERNAME');
-  const readwriteRole = requiredIdentifier('EBK_DATABASE_READWRITE_ROLE');
+  requiredIdentifier('EBK_DATABASE_READWRITE_ROLE');
   const region = required('AWS_REGION');
   const caBundlePath = required('EBK_RDS_CA_BUNDLE');
   const port = Number(required('EBK_DATABASE_PORT'));
@@ -1873,18 +1872,8 @@ async function main() {
         throw error;
       }
     }
-    migrationPhase = 'audit-capability';
-    await client.query(
-      'REVOKE UPDATE, DELETE, TRUNCATE ON TABLE ' +
-        'authorization_audit, data_lifecycle_audit FROM ' +
-        quoteIdentifier(readwriteRole),
-    );
-    await client.query(
-      'GRANT EXECUTE ON FUNCTION ' +
-        'ebk_prune_authorization_audit(timestamptz, integer), ' +
-        'ebk_prune_data_lifecycle_audit(timestamptz, integer) TO ' +
-        quoteIdentifier(readwriteRole),
-    );
+    // Optional SQL owns only declared feature migrations. Framework audit,
+    // authorization, inbox and retention stay on their DynamoDB adapters.
     if (clientFailure) throw clientFailure;
     migrationCount = files.length;
   } catch (error) {

package/src/generators/slice/built-in-plan-foundation-files.d.ts

@@ -1,2 +1,3 @@
+import { type FoundationCapability } from '../../foundation/capability-plan.js';
 /** @internal */
-export declare function renderSliceFoundationFiles(name: string, pascalName: string): Readonly<Record<string, string>>;
+export declare function renderSliceFoundationFiles(name: string, pascalName: string, capabilities?: readonly FoundationCapability[]): Readonly<Record<string, string>>;

package/src/generators/slice/built-in-plan-foundation-files.js

@@ -1,8 +1,14 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.renderSliceFoundationFiles = renderSliceFoundationFiles;
+const capability_plan_js_1 = require("../../foundation/capability-plan.js");
 /** @internal */
-function renderSliceFoundationFiles(name, pascalName) {
+function renderSliceFoundationFiles(name, pascalName, capabilities = capability_plan_js_1.LEGACY_STANDARD_FOUNDATION_CAPABILITIES) {
+    const network = capabilities.includes('network');
+    const containers = capabilities.includes('container-compute');
+    const postgres = capabilities.includes('postgres');
+    if ((postgres && (!network || !containers)) || (containers && !network))
+        throw new Error('Slice Foundation requirements must include complete network/container/SQL dependencies.');
     return {
         'infra/foundation.ts': `import {
   foundationSsmPath,
@@ -33,9 +39,13 @@ export function getFoundation() {
     capabilities: foundationParameter('capabilities').apply((value: string) =>
       value.split(',').map((capability) => capability.trim()),
     ),
-    clusterId: foundationParameter('clusterId'),
+${containers
+            ? `    clusterId: foundationParameter('clusterId'),
+`
+            : ''}\
     contractVersion: foundationParameter('contractVersion'),
-    databaseClusterArn: foundationParameter('databaseClusterArn'),
+${postgres
+            ? `    databaseClusterArn: foundationParameter('databaseClusterArn'),
     databaseClusterEndpoint: foundationParameter('databaseClusterEndpoint'),
     databaseClusterId: foundationParameter('databaseClusterId'),
     databaseClusterResourceId: foundationParameter(
@@ -44,6 +54,8 @@ export function getFoundation() {
     databaseHost: foundationParameter('databaseHost'),
     databaseMasterSecretArn: foundationParameter('databaseMasterSecretArn'),
     databasePort: foundationParameter('databasePort').apply(Number),
+`
+            : ''}\
     eventBusArn: foundationParameter('eventBusArn'),
     eventBusName: foundationParameter('eventBusName'),
     hasPublicDomain: foundationParameter('hasPublicDomain').apply(
@@ -58,17 +70,26 @@ export function getFoundation() {
     routerDistributionId: foundationParameter('routerDistributionId'),
     routerUrl: foundationParameter('routerUrl'),
     schemaVersion: foundationParameter('schemaVersion').apply(Number),
-    vpcId: foundationParameter('vpcId'),
+${network
+            ? `    vpcId: foundationParameter('vpcId'),
+`
+            : ''}\
   };
 }
 
 export function getFoundationInfrastructure() {
   const discovery = getFoundation();
-  const vpc = sst.aws.Vpc.get('FoundationVpc', discovery.vpcId);
-  const cluster = sst.aws.Cluster.get('FoundationCluster', {
+${network
+            ? `  const vpc = sst.aws.Vpc.get('FoundationVpc', discovery.vpcId);
+`
+            : ''}\
+${containers
+            ? `  const cluster = sst.aws.Cluster.get('FoundationCluster', {
     id: discovery.clusterId,
     vpc,
   });
+`
+            : ''}\
   const router = sst.aws.Router.get(
     'FoundationRouter',
     discovery.routerDistributionId,
@@ -82,8 +103,9 @@ export function getFoundationInfrastructure() {
     discovery.eventBusName,
   );
   return {
-    cluster,
-    database: {
+${containers ? '    cluster,\n' : ''}\
+${postgres
+            ? `    database: {
       clusterArn: discovery.databaseClusterArn,
       clusterEndpoint: discovery.databaseClusterEndpoint,
       clusterResourceId: discovery.databaseClusterResourceId,
@@ -91,11 +113,13 @@ export function getFoundationInfrastructure() {
       masterSecretArn: discovery.databaseMasterSecretArn,
       port: discovery.databasePort,
     },
+`
+            : ''}\
     discovery,
     eventBus,
     router,
     userPool,
-    vpc,
+${network ? '    vpc,\n' : ''}\
   };
 }
 
@@ -109,7 +133,7 @@ export function registerProductSlice() {
     type: 'String',
     value: JSON.stringify({
       consumerStage: stages.consumerStage,
-      foundationContract: '^1.0.0',
+      foundationContract: '^2.0.0',
       foundationStage: stages.foundationStage,
       name: '${name}',
       registrationVersion: 1,

package/src/generators/slice/built-in-plan-frontend-files.js

@@ -47,7 +47,7 @@ function renderProductFrontendFiles(name, pascalName) {
             },
             deploymentProof: {
                 generatedStandardProfile: 'server-rendered-opennext',
-                privateStaticFirstProfile: 'gupta-leary-site',
+                privateStaticFirstProfile: 'reference-static-site',
                 staticExportSliceGeneration: 'post-1.0',
             },
             evidence: {
@@ -185,7 +185,7 @@ interaction boundary and may receive only intentional serializable view models.
 Application policy, validation, and mutations remain server-authoritative.
 
 The generated Standard profile proves server-rendered OpenNext behavior. The
-required static-first proof belongs to the private \`gupta-leary-site\`
+required static-first proof belongs to the private \`reference-static-site\`
 application. Static-export Slice generation and an organization design-system
 generator are post-1.0 work; do not imitate either contract inside this Slice.
 

package/src/generators/slice/built-in-plan-infrastructure-files.d.ts

@@ -1,2 +1,2 @@
 /** @internal */
-export declare function renderProductInfrastructureFiles(name: string, pascalName: string, workspace: string, protectedRuntimeStages?: readonly ('development' | 'production' | 'staging')[]): Readonly<Record<string, string>>;
+export declare function renderProductInfrastructureFiles(name: string, pascalName: string, workspace: string, protectedRuntimeStages?: readonly ('development' | 'production' | 'staging')[], sql?: boolean, network?: boolean): Readonly<Record<string, string>>;