@izara_project/izara-core-generate-service-code 1.0.64 → 1.0.66
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +73 -11
- package/index.js +0 -5
- package/package.json +7 -6
- package/src/compile/compileProject.js +26 -0
- package/src/compile/loadSchemas.js +28 -0
- package/src/emit/crud/dynamicCrudFlowSchemaTemplate.js +11 -0
- package/src/emit/crud/emitCrudApplicationArtifacts.js +157 -0
- package/src/emit/crud/emitDynamicCrudFlowSchemas.js +84 -0
- package/src/emit/crud/generateCrudApplicationArtifacts.js +16 -0
- package/src/emit/crud/generateDynamicCrudFlowSchemas.js +21 -0
- package/src/emit/crud/loadLocalSchemaArrays.js +8 -0
- package/src/{codeGenerators/app/src/generatedCode/Flow/FlowObjects/templates/crud → emit/crud/templates}/CreateEndpoint_Main.ejs +1 -1
- package/src/{codeGenerators/app/src/generatedCode/Flow/FlowObjects/templates/crud → emit/crud/templates}/DeleteEndpoint_Main.ejs +1 -1
- package/src/{codeGenerators/app/src/generatedCode/Flow/FlowObjects/templates/step → emit/crud/templates}/FlowEndpointBeforeLogical_Main.ejs +2 -2
- package/src/emit/crud/templates/FlowEndpointComplete_Main.ejs +75 -0
- package/src/{codeGenerators/app/src/generatedCode/Flow/FlowSchemas/templates/endpoint → emit/crud/templates}/FlowEndpoint_HdrWbs.ejs +1 -1
- package/src/{codeGenerators/app/src/generatedCode/ProcessLogical/templates/ProcessLogical_HdrSqs.ejs → emit/crud/templates/FlowHandler_HdrSqs.ejs} +52 -56
- package/src/{codeGenerators/app/src/generatedCode/Flow/FlowSchemas/templates/endpoint → emit/crud/templates}/FlowMain_Wbs.ejs +1 -3
- package/src/emit/crud/templates/GetRangeEndpoint_Main.ejs +127 -0
- package/src/{codeGenerators/app/src/generatedCode/Flow/FlowObjects/templates/crud → emit/crud/templates}/UpdateEndpoint_Main.ejs +1 -1
- package/src/emit/custom/customFlows.js +70 -0
- package/src/emit/custom/emitCustomFlowApplicationArtifacts.js +308 -0
- package/src/emit/custom/generateCustomFlowApplicationArtifacts.js +22 -0
- package/src/{codeGenerators/app/src/generatedCode/Flow/FlowSchemas/templates/endpoint → emit/custom/templates}/FlowEndpoint_Main.ejs +1 -1
- package/src/{codeGenerators/app/src/generatedCode/Flow/FlowSchemas/templates/step → emit/custom/templates}/FlowStep_Main.ejs +1 -1
- package/src/{codeGenerators/app/src/generatedCode/Flow/FlowSchemas → emit/custom}/templates/s3/ConfirmReserved_Main.ejs +5 -5
- package/src/{codeGenerators/app/src/generatedCode/Flow/FlowSchemas → emit/custom}/templates/s3/CreateObject_HdrWbs.ejs +1 -1
- package/src/{codeGenerators/app/src/generatedCode/Flow/FlowSchemas → emit/custom}/templates/s3/CreateObject_Main.ejs +3 -3
- package/src/{codeGenerators/app/src/generatedCode/Flow/FlowSchemas → emit/custom}/templates/s3/CreatePreSignUrl_Main.ejs +4 -5
- package/src/{codeGenerators/app/src/generatedCode/Flow/FlowSchemas → emit/custom}/templates/s3/FlowHandler_HdrS3.ejs +2 -8
- package/src/{codeGenerators/app/src/generatedCode/Flow/FlowSchemas → emit/custom}/templates/s3/ProcessS3File_Main.ejs +1 -1
- package/src/{codeGenerators/app/src/generatedCode/Flow/FlowSchemas → emit/custom}/templates/s3/ReservedLimit_Main.ejs +5 -6
- package/src/emit/custom/templates/triggerCache/CheckTriggerCache_HdrSqs.ejs +32 -0
- package/src/emit/custom/templates/triggerCache/CheckTriggerCache_Main.ejs +63 -0
- package/src/emit/custom/templates/triggerCache/TriggerCacheComplete_Main.ejs +35 -0
- package/src/emit/custom/templates/triggerCache/TriggerCache_Main.ejs +16 -0
- package/src/emit/function/functionYamlArtifact.js +111 -0
- package/src/emit/rbac/emitDynamicRbacFlowSchemas.js +117 -0
- package/src/emit/rbac/emitRbacApplicationArtifacts.js +256 -0
- package/src/emit/rbac/generateCreateTargetRoleHandler.js +19 -0
- package/src/emit/rbac/generateDynamicRbacFlowSchemas.js +21 -0
- package/src/emit/rbac/rbacFlowTag.js +7 -0
- package/src/emit/rbac/templates/CreateTargetRole_HdrSqs.ejs +24 -0
- package/src/emit/rbac/templates/CreateTargetRole_Main.ejs +25 -0
- package/src/emit/rbac/templates/DynamicRbacFlowSchema.ejs +5 -0
- package/src/emit/rbac/templates/ListRbac_HdrApi.ejs +17 -0
- package/src/emit/rbac/templates/ListRbac_HdrSqs.ejs +13 -0
- package/src/emit/rbac/templates/ListRbac_Main.ejs +29 -0
- package/src/emit/rbac/templates/RbacMutation_Main.ejs +22 -0
- package/src/emit/rbac/templates/UserRbacFlow_HdrInv.ejs +10 -0
- package/src/emit/rbac/templates/UserRbacFlow_Main.ejs +44 -0
- package/src/emit/rbac/templates/UserRoleMutation_Main.ejs +33 -0
- package/src/emit/relationship/dynamicRelationshipFlowSchemaTemplate.js +11 -0
- package/src/emit/relationship/emitDynamicRelationshipFlowSchemas.js +66 -0
- package/src/emit/relationship/emitRelationshipApplicationArtifacts.js +147 -0
- package/src/emit/relationship/generateDynamicRelationshipFlowSchemas.js +23 -0
- package/src/emit/relationship/generateRelationshipApplicationArtifacts.js +22 -0
- package/src/{codeGenerators/app/src/generatedCode/Flow/FlowRelationships/templates/relationship/ProcessChangeRelationshipComplete_Main.ejs → emit/relationship/templates/ChangeRelationshipComplete_Main.ejs} +1 -1
- package/src/{codeGenerators/app/src/generatedCode/Flow/FlowRelationships/templates/relationship/ProcessChangeRelationship_Main.ejs → emit/relationship/templates/ChangeRelationship_Main.ejs} +10 -2
- package/src/{codeGenerators/app/src/generatedCode/Flow/FlowRelationships/templates/relationship/ProcessCreateRelationshipComplete_Main.ejs → emit/relationship/templates/CreateRelationshipComplete_Main.ejs} +1 -1
- package/src/{codeGenerators/app/src/generatedCode/Flow/FlowRelationships/templates/relationship/ProcessCreateRelationship_Main.ejs → emit/relationship/templates/CreateRelationship_Main.ejs} +1 -1
- package/src/{codeGenerators/app/src/generatedCode/Flow/FlowRelationships/templates/relationship/ProcessDeleteRelationshipComplete_Main.ejs → emit/relationship/templates/DeleteRelationshipComplete_Main.ejs} +1 -1
- package/src/{codeGenerators/app/src/generatedCode/Flow/FlowRelationships/templates/relationship/ProcessDeleteRelationship_Main.ejs → emit/relationship/templates/DeleteRelationship_Main.ejs} +1 -1
- package/src/emit/relationship/templates/FlowHandler_HdrApi.ejs +51 -0
- package/src/{codeGenerators/app/src/generatedCode/Flow/_shared/handlers → emit/relationship/templates}/FlowHandler_HdrDsq.ejs +1 -1
- package/src/emit/relationship/templates/FlowHandler_HdrInv.ejs +45 -0
- package/src/{codeGenerators/app/src/generatedCode/Flow/FlowRelationships/templates/relationship/ProcessGetRelationshipComplete_Main.ejs → emit/relationship/templates/GetRelationshipComplete_Main.ejs} +1 -1
- package/src/{codeGenerators/app/src/generatedCode/Flow/FlowRelationships/templates/relationship/ProcessGetRelationship_Main.ejs → emit/relationship/templates/GetRelationship_Main.ejs} +1 -1
- package/src/{codeGenerators/app/src/generatedCode/Flow/FlowRelationships/templates/relationship/ProcessMoveRelationship_Main.ejs → emit/relationship/templates/MoveRelationship_Main.ejs} +9 -1
- package/src/{codeGenerators/app/src/generatedCode/Flow/FlowRelationships/templates/relationship/ProcessUpdateRelationshipComplete_Main.ejs → emit/relationship/templates/UpdateRelationshipComplete_Main.ejs} +1 -1
- package/src/{codeGenerators/app/src/generatedCode/Flow/FlowRelationships/templates/relationship/ProcessUpdateRelationship_Main.ejs → emit/relationship/templates/UpdateRelationship_Main.ejs} +1 -1
- package/src/emit/resource/emitResourceArtifacts.js +300 -0
- package/src/emit/resource/generateResourceArtifacts.js +20 -0
- package/src/{codeGenerators/resource/sls_yaml/templates/crud → emit/resource/templates}/ResourceBeforeLogicalYaml.ejs +1 -1
- package/src/{codeGenerators/resource/sls_yaml/templates/crud → emit/resource/templates}/ResourceSqsYaml.ejs +6 -6
- package/src/{codeGenerators/app/sls_yaml → emit/resource}/templates/SharedResource_Yaml.ejs +8 -8
- package/src/emit/system/emitSystemWebSocketArtifacts.js +182 -0
- package/src/generate.js +60 -126
- package/src/output/commitArtifacts.js +213 -0
- package/src/output/mergeHooks.js +55 -0
- package/src/output/validateArtifacts.js +62 -0
- package/src/plan/buildGenerationPlan.js +50 -0
- package/test/core.test.js +159 -0
- package/test/createTargetRoleHandler.test.js +68 -0
- package/test/crudApplicationArtifacts.test.js +107 -0
- package/test/customFlowApplicationArtifacts.test.js +294 -0
- package/test/dynamicCrudFlowSchemas.test.js +136 -0
- package/test/dynamicRbacFlowSchemas.test.js +101 -0
- package/test/dynamicRelationshipFlowSchemas.test.js +99 -0
- package/test/functionYamlArtifact.test.js +34 -0
- package/test/intTestApi.test.js +29 -0
- package/test/publicApi.test.js +209 -0
- package/test/relationshipApplicationArtifacts.test.js +68 -0
- package/test/resourceArtifacts.test.js +121 -0
- package/jsconfig.json +0 -9
- package/src/__tests__/getIntTestConfig.test.js +0 -51
- package/src/__tests__/intTestGeneratorShared.test.cjs +0 -169
- package/src/__tests__/pathIntTest.test.js +0 -103
- package/src/codeGenerators/app/initial_setup/InitialSetupGenerator.js +0 -199
- package/src/codeGenerators/app/initial_setup/templates/InitialSetup_LambdaRole.ejs +0 -50
- package/src/codeGenerators/app/initial_setup/templates/InitialSetup_SnsService.ejs +0 -15
- package/src/codeGenerators/app/initial_setup/templates/InitialSetup_TableName.ejs +0 -9
- package/src/codeGenerators/app/sls_yaml/FindDataYamlGenerator.js +0 -23
- package/src/codeGenerators/app/sls_yaml/FunctionYamlGenerator.js +0 -322
- package/src/codeGenerators/app/sls_yaml/ProcessLogicalYamlGenerator.js +0 -21
- package/src/codeGenerators/app/sls_yaml/RoleNameConfigGenerator.js +0 -48
- package/src/codeGenerators/app/sls_yaml/SharedResourceYamlGenerator.js +0 -504
- package/src/codeGenerators/app/sls_yaml/__tests__/SharedResourceYamlGenerator.test.js +0 -235
- package/src/codeGenerators/app/sls_yaml/_policy/PolicyEmitter.js +0 -46
- package/src/codeGenerators/app/sls_yaml/_policy/PolicyRegistry.js +0 -94
- package/src/codeGenerators/app/sls_yaml/_policy/__tests__/PolicyEmitter.test.js +0 -55
- package/src/codeGenerators/app/sls_yaml/_policy/__tests__/PolicyRegistry.test.js +0 -48
- package/src/codeGenerators/app/sls_yaml/_policy/templates/ManagedPolicy_Yaml.ejs +0 -22
- package/src/codeGenerators/app/sls_yaml/renderYamlTemplate.js +0 -13
- package/src/codeGenerators/app/sls_yaml/templates/FindData_Yaml.ejs +0 -10
- package/src/codeGenerators/app/sls_yaml/templates/FunctionYaml_Api.ejs +0 -21
- package/src/codeGenerators/app/sls_yaml/templates/FunctionYaml_EventBridge.ejs +0 -14
- package/src/codeGenerators/app/sls_yaml/templates/FunctionYaml_Inv.ejs +0 -6
- package/src/codeGenerators/app/sls_yaml/templates/FunctionYaml_Sqs.ejs +0 -11
- package/src/codeGenerators/app/sls_yaml/templates/FunctionYaml_Wbs.ejs +0 -11
- package/src/codeGenerators/app/sls_yaml/templates/ProcessLogical_Yaml.ejs +0 -32
- package/src/codeGenerators/app/sls_yaml/templates/RoleNameConfig_Yaml.ejs +0 -5
- package/src/codeGenerators/app/src/generatedCode/FindData/FindDataGenerator.js +0 -238
- package/src/codeGenerators/app/src/generatedCode/FindData/templates/FindData_HdrSqs.ejs +0 -87
- package/src/codeGenerators/app/src/generatedCode/FindData/templates/FindData_Main.ejs +0 -108
- package/src/codeGenerators/app/src/generatedCode/FindData/templates/GetByStorage/getByDynamo.ejs +0 -32
- package/src/codeGenerators/app/src/generatedCode/FindData/templates/GetByStorage/getByGraph.ejs +0 -87
- package/src/codeGenerators/app/src/generatedCode/Flow/FlowObjects/.gitkeep +0 -0
- package/src/codeGenerators/app/src/generatedCode/Flow/FlowObjects/EndpointsGenerator.js +0 -120
- package/src/codeGenerators/app/src/generatedCode/Flow/FlowObjects/templates/step/FlowEndpointComplete_Main.ejs +0 -313
- package/src/codeGenerators/app/src/generatedCode/Flow/FlowRbac/RbacFlowGenerator.js +0 -116
- package/src/codeGenerators/app/src/generatedCode/Flow/FlowRbac/templates/rbac/CreateRolePermissions.ejs +0 -135
- package/src/codeGenerators/app/src/generatedCode/Flow/FlowRbac/templates/rbac/CreateTargetRole.ejs +0 -131
- package/src/codeGenerators/app/src/generatedCode/Flow/FlowRbac/templates/rbac/CreateUserRole.ejs +0 -150
- package/src/codeGenerators/app/src/generatedCode/Flow/FlowRbac/templates/rbac/DeleteRolePermissions.ejs +0 -132
- package/src/codeGenerators/app/src/generatedCode/Flow/FlowRbac/templates/rbac/DeleteTargetRole.ejs +0 -132
- package/src/codeGenerators/app/src/generatedCode/Flow/FlowRbac/templates/rbac/DeleteUserFromRole.ejs +0 -150
- package/src/codeGenerators/app/src/generatedCode/Flow/FlowRbac/templates/rbac/FlowRbac_Main.ejs +0 -252
- package/src/codeGenerators/app/src/generatedCode/Flow/FlowRbac/templates/rbac/ListRolePermissions.ejs +0 -120
- package/src/codeGenerators/app/src/generatedCode/Flow/FlowRbac/templates/rbac/ListTargetRole.ejs +0 -122
- package/src/codeGenerators/app/src/generatedCode/Flow/FlowRbac/templates/rbac/ListUserInRoles.ejs +0 -117
- package/src/codeGenerators/app/src/generatedCode/Flow/FlowRelationships/RelationshipFlowGenerator.js +0 -148
- package/src/codeGenerators/app/src/generatedCode/Flow/FlowSchemas/.gitkeep +0 -0
- package/src/codeGenerators/app/src/generatedCode/Flow/FlowSchemas/StatusFieldGenerator.js +0 -109
- package/src/codeGenerators/app/src/generatedCode/Flow/FlowSchemas/WebSocketGenerator.js +0 -122
- package/src/codeGenerators/app/src/generatedCode/Flow/FlowSchemas/templates/endpoint/FlowEntryPoint_Main.ejs +0 -38
- package/src/codeGenerators/app/src/generatedCode/Flow/FlowSchemas/templates/statusField/CompleteStatusFieldSns_Yaml.ejs +0 -52
- package/src/codeGenerators/app/src/generatedCode/Flow/FlowSchemas/templates/statusField/CompleteStatusField_HdrSqs.ejs +0 -84
- package/src/codeGenerators/app/src/generatedCode/Flow/FlowSchemas/templates/statusField/CompleteStatusField_Main.ejs +0 -78
- package/src/codeGenerators/app/src/generatedCode/Flow/FlowSchemas/templates/step/plugIns/FlowStep_ByConfig_Awaiting_Main.ejs +0 -123
- package/src/codeGenerators/app/src/generatedCode/Flow/FlowSchemas/templates/step/plugIns/FlowStep_ByConfig_Paginated_Main.ejs +0 -59
- package/src/codeGenerators/app/src/generatedCode/Flow/FlowSchemas/templates/step/plugIns/FlowStep_PlugIn_Main.ejs +0 -72
- package/src/codeGenerators/app/src/generatedCode/Flow/FlowSchemas/templates/step/plugIns/FlowStep_RecievePlugIn_Main.ejs +0 -76
- package/src/codeGenerators/app/src/generatedCode/Flow/FlowSchemas/templates/step/plugIns/templateAwaitingStep.ejs +0 -41
- package/src/codeGenerators/app/src/generatedCode/Flow/FlowSchemas/templates/step/plugIns/templateSendPlugin.ejs +0 -18
- package/src/codeGenerators/app/src/generatedCode/Flow/FlowSchemas/templates/webSocket/ProcessWebSocketFlow_Yaml.ejs +0 -26
- package/src/codeGenerators/app/src/generatedCode/Flow/FlowSchemas/templates/webSocket/ProcessWebSocketSub_Yaml.ejs +0 -7
- package/src/codeGenerators/app/src/generatedCode/Flow/FlowSchemas/templates/webSocket/ProcessWebSocket_HdrSqs.ejs +0 -66
- package/src/codeGenerators/app/src/generatedCode/Flow/FlowSchemas/templates/webSocket/ProcessWebSocket_Main.ejs +0 -115
- package/src/codeGenerators/app/src/generatedCode/Flow/FlowSchemas/templates/webSocket/ProcessWebSocket_Yaml.ejs +0 -36
- package/src/codeGenerators/app/src/generatedCode/Flow/FlowSchemas/templates/webSocket/WebSocketConnect_Main.ejs +0 -52
- package/src/codeGenerators/app/src/generatedCode/Flow/FlowSchemas/templates/webSocket/WebSocketConnect_Yaml.ejs +0 -13
- package/src/codeGenerators/app/src/generatedCode/Flow/FlowSchemas/templates/webSocket/WebSocketDynamoDb_Yaml.ejs +0 -28
- package/src/codeGenerators/app/src/generatedCode/Flow/_shared/events/BaseDsqHandler.js +0 -55
- package/src/codeGenerators/app/src/generatedCode/Flow/_shared/events/BaseSqsHandler.js +0 -66
- package/src/codeGenerators/app/src/generatedCode/Flow/_shared/events/__tests__/BaseDsqHandler.test.js +0 -93
- package/src/codeGenerators/app/src/generatedCode/Flow/_shared/events/dsq.js +0 -5
- package/src/codeGenerators/app/src/generatedCode/Flow/_shared/events/eventBridge.js +0 -25
- package/src/codeGenerators/app/src/generatedCode/Flow/_shared/events/extTopic.js +0 -6
- package/src/codeGenerators/app/src/generatedCode/Flow/_shared/events/lambdaSyncApi.js +0 -43
- package/src/codeGenerators/app/src/generatedCode/Flow/_shared/events/lambdaSyncInv.js +0 -43
- package/src/codeGenerators/app/src/generatedCode/Flow/_shared/events/ownTopic.js +0 -54
- package/src/codeGenerators/app/src/generatedCode/Flow/_shared/events/registry.js +0 -17
- package/src/codeGenerators/app/src/generatedCode/Flow/_shared/events/s3.js +0 -56
- package/src/codeGenerators/app/src/generatedCode/Flow/_shared/events/s3Components/ConfirmAfterUploadS3Generator.js +0 -46
- package/src/codeGenerators/app/src/generatedCode/Flow/_shared/events/s3Components/CreateObjectGenerator.js +0 -50
- package/src/codeGenerators/app/src/generatedCode/Flow/_shared/events/s3Components/CreatePreSignUrlGenerator.js +0 -48
- package/src/codeGenerators/app/src/generatedCode/Flow/_shared/events/s3Components/ProcessAfterUploadS3Generator.js +0 -49
- package/src/codeGenerators/app/src/generatedCode/Flow/_shared/events/s3Components/ReservedLimitGenerator.js +0 -47
- package/src/codeGenerators/app/src/generatedCode/Flow/_shared/shared/eventTypes.js +0 -23
- package/src/codeGenerators/app/src/generatedCode/Flow/_shared/shared/flowClassifier.js +0 -50
- package/src/codeGenerators/app/src/generatedCode/Flow/_shared/shared/flowEntryPointBase.js +0 -106
- package/src/codeGenerators/app/src/generatedCode/Flow/_shared/shared/flowMainFunctionBase.js +0 -172
- package/src/codeGenerators/app/src/generatedCode/Flow/_shared/shared/flowNaming.js +0 -37
- package/src/codeGenerators/app/src/generatedCode/Flow/_shared/shared/flowSelection.js +0 -19
- package/src/codeGenerators/app/src/generatedCode/Flow/_shared/shared/flowStepBase.js +0 -235
- package/src/codeGenerators/app/src/generatedCode/Flow/_shared/shared/flowStepNormalizer.js +0 -75
- package/src/codeGenerators/app/src/generatedCode/Flow/_shared/shared/flowValidator.js +0 -236
- package/src/codeGenerators/app/src/generatedCode/Flow/_shared/shared/propertyNormalizer.js +0 -15
- package/src/codeGenerators/app/src/generatedCode/Flow/_shared/shared/registry.js +0 -7
- package/src/codeGenerators/app/src/generatedCode/Flow/_shared/shared/roleNameDetection.js +0 -49
- package/src/codeGenerators/app/src/generatedCode/Flow/_shared/shared/triggerCacheBase.js +0 -177
- package/src/codeGenerators/app/src/generatedCode/Flow/_shared/triggerCache/CheckTriggerCache_HdrSqs.ejs +0 -89
- package/src/codeGenerators/app/src/generatedCode/Flow/_shared/triggerCache/CheckTriggerCache_Main.ejs +0 -83
- package/src/codeGenerators/app/src/generatedCode/Flow/_shared/triggerCache/ProcessTriggerCache_HdrSqs.ejs +0 -103
- package/src/codeGenerators/app/src/generatedCode/Flow/_shared/triggerCache/ProcessTriggerCache_Main.ejs +0 -58
- package/src/codeGenerators/app/src/generatedCode/Flow/_shared/triggerCache/TriggerCacheComplete_HdrDsq.ejs +0 -104
- package/src/codeGenerators/app/src/generatedCode/Flow/_shared/triggerCache/TriggerCacheComplete_HdrSqs.ejs +0 -88
- package/src/codeGenerators/app/src/generatedCode/Flow/_shared/triggerCache/TriggerCacheComplete_Main.ejs +0 -80
- package/src/codeGenerators/app/src/generatedCode/Flow/_shared/triggerCache/TriggerCacheQueue_Yaml.ejs +0 -36
- package/src/codeGenerators/app/src/generatedCode/Flow/_shared/yaml/SharedFunctionSqs_Yaml.ejs +0 -13
- package/src/codeGenerators/app/src/generatedCode/ProcessLogical/ProcessLogicalGenerator.js +0 -29
- package/src/codeGenerators/app/src/generatedCode/ProcessLogical/templates/PaginateProcessLogical_HdrDsq.ejs +0 -177
- package/src/codeGenerators/app/src/generatedCode/ProcessLogical/templates/PaginateProcessLogical_HdrSqs.ejs +0 -155
- package/src/codeGenerators/app/src/generatedCode/ProcessLogical/templates/PaginateProcessLogical_Main.ejs +0 -268
- package/src/codeGenerators/app/src/generatedCode/ProcessLogical/templates/ProcessLogical_Main.ejs +0 -450
- package/src/codeGenerators/app/src/generatedCode/SystemFlowSchemas/RegisterGenerator.js +0 -149
- package/src/codeGenerators/app/src/generatedCode/SystemFlowSchemas/templates/register/RegisterComplete_HdrSqs.ejs +0 -85
- package/src/codeGenerators/app/src/generatedCode/SystemFlowSchemas/templates/register/RegisterComplete_Main.ejs +0 -176
- package/src/codeGenerators/app/src/generatedCode/SystemFlowSchemas/templates/register/Register_HdrWbs.ejs +0 -80
- package/src/codeGenerators/app/src/generatedCode/SystemFlowSchemas/templates/register/Register_Main.ejs +0 -164
- package/src/codeGenerators/app/src/generatedCode/libs/ConstsGenerator.js +0 -28
- package/src/codeGenerators/app/src/generatedCode/libs/GenerateCodeLibsGenerator.js +0 -28
- package/src/codeGenerators/app/src/generatedCode/libs/templates/Consts.ejs +0 -448
- package/src/codeGenerators/app/src/generatedCode/libs/templates/GenerateCodeLibs.ejs +0 -124
- package/src/codeGenerators/resource/sls_yaml/DynamoDBGenerator.js +0 -87
- package/src/codeGenerators/resource/sls_yaml/FlowOutGenerator.js +0 -70
- package/src/codeGenerators/resource/sls_yaml/FlowResourceYamlGenerator.js +0 -182
- package/src/core/renderTemplateFile.js +0 -22
- package/src/core/validate.js +0 -165
- package/src/generateCode.js +0 -358
- package/src/generateSchema.js +0 -123
- package/src/parsers/flowSchemaParser.js +0 -112
- package/src/parsers/objectSchemaParser.js +0 -39
- package/src/parsers/relationshipSchemaParser.js +0 -51
- package/src/schemaGenerators/app/src/schemas/FlowSchemas/FlowSchemaGenerator.js +0 -107
- package/src/schemaGenerators/app/src/schemas/FlowSchemas/RbacFlowSchemaGenerator.js +0 -98
- package/src/schemaGenerators/app/src/schemas/FlowSchemas/RelationshipFlowSchemaGenerator.js +0 -89
- package/src/schemaGenerators/app/src/schemas/FlowSchemas/templates/DynamicFlowSchemaTemplate.ejs +0 -41
- package/src/schemaGenerators/app/src/schemas/FlowSchemas/templates/DynamicRbacFlowSchemaTemplate.ejs +0 -20
- package/src/schemaGenerators/app/src/schemas/FlowSchemas/templates/RelationshipFlowSchemaTemplate.ejs +0 -33
- package/src/schemaGenerators/app/src/schemas/FlowSchemas/templates/UserRbacFlowSchemaTemplate.ejs +0 -22
- package/src/schemaGenerators/app/src/schemas/ObjectSchemas/AttributeTreeSchemaGenerator.js +0 -124
- package/src/schemaGenerators/app/src/schemas/ObjectSchemas/PropertyValueSchemaGenerator.js +0 -119
- package/src/schemaGenerators/app/src/schemas/ObjectSchemas/templates/DynamicAttributeTreeManagerSchemaTemplate.ejs +0 -14
- package/src/schemaGenerators/app/src/schemas/ObjectSchemas/templates/DynamicAttributeTreeStandardSchemaTemplate.ejs +0 -13
- package/src/schemaGenerators/app/src/schemas/ObjectSchemas/templates/DynamicPropertyValueSchemaTemplate.ejs +0 -15
- package/src/schemaGenerators/app/src/schemas/RelationshipSchemas/AttributeTreeRelationshipSchemaGenerator.js +0 -149
- package/src/schemaGenerators/app/src/schemas/RelationshipSchemas/PropertyValueRelationshipSchemaGenerator.js +0 -143
- package/src/schemaGenerators/app/src/schemas/RelationshipSchemas/templates/DynamicAttributeTreeRelationshipSchemaTemplate.ejs +0 -7
- package/src/schemaGenerators/app/src/schemas/RelationshipSchemas/templates/DynamicPropertyValueRelationshipSchemaTemplate.ejs +0 -7
- package/src/schemaGenerators/app/src/schemas/SystemTextSchemas/SystemTextGenerator.js +0 -102
- package/src/schemaGenerators/app/src/schemas/SystemTextSchemas/templates/SystemText_Template.ejs +0 -10
- package/test_schema.js +0 -2
- /package/src/{codeGenerators/app/src/generatedCode/Flow/_shared/handlers → emit/crud/templates}/FlowHandler_HdrApi.ejs +0 -0
- /package/src/{codeGenerators/app/src/generatedCode/Flow/_shared/handlers → emit/crud/templates}/FlowHandler_HdrInv.ejs +0 -0
- /package/src/{codeGenerators/app/src/generatedCode/Flow/FlowObjects/templates/crud → emit/crud/templates}/GetEndpoint_Main.ejs +0 -0
- /package/src/{codeGenerators/app/src/generatedCode/Flow/FlowSchemas → emit/custom}/templates/s3/ConfirmReserved_HdrSqs.ejs +0 -0
- /package/src/{codeGenerators/app/src/generatedCode/Flow/FlowSchemas → emit/custom}/templates/s3/CreatePreSignUrl_HdrSqs.ejs +0 -0
- /package/src/{codeGenerators/app/src/generatedCode/Flow/FlowSchemas → emit/custom}/templates/s3/ReservedLimit_HdrSqs.ejs +0 -0
- /package/src/{codeGenerators/app/src/generatedCode/Flow/_shared/handlers → emit/relationship/templates}/FlowHandler_HdrSqs.ejs +0 -0
- /package/src/{codeGenerators/app/src/generatedCode/Flow/FlowRelationships/templates/relationship/ProcessMoveRelationshipComplete_Main.ejs → emit/relationship/templates/MoveRelationshipComplete_Main.ejs} +0 -0
- /package/src/{codeGenerators/resource/sls_yaml → emit/resource}/templates/DynamoDBTable_Yaml.ejs +0 -0
- /package/src/{codeGenerators/resource/sls_yaml → emit/resource}/templates/FlowOut_Yaml.ejs +0 -0
- /package/src/{codeGenerators/resource/sls_yaml/templates/crud → emit/resource/templates}/ResourceYaml.ejs +0 -0
- /package/src/{codeGenerators/resource/sls_yaml → emit/resource}/templates/SystemDynamoDB_Yaml.ejs +0 -0
|
@@ -1,235 +0,0 @@
|
|
|
1
|
-
import { describe, it, expect, beforeEach } from '@jest/globals';
|
|
2
|
-
import path from 'path';
|
|
3
|
-
import fs from 'fs/promises';
|
|
4
|
-
import os from 'os';
|
|
5
|
-
import { policyRegistry } from '../_policy/PolicyRegistry.js';
|
|
6
|
-
import { generateSharedResourceYaml } from '../SharedResourceYamlGenerator.js';
|
|
7
|
-
|
|
8
|
-
describe('generateSharedResourceYaml', () => {
|
|
9
|
-
let tmpDir;
|
|
10
|
-
|
|
11
|
-
beforeEach(async () => {
|
|
12
|
-
tmpDir = await fs.mkdtemp(path.join(os.tmpdir(), 'iz-shared-resource-'));
|
|
13
|
-
policyRegistry.clear();
|
|
14
|
-
|
|
15
|
-
await fs.mkdir(
|
|
16
|
-
path.join(tmpDir, 'resource', 'sls_yaml', 'generatedCode', 'source'),
|
|
17
|
-
{ recursive: true }
|
|
18
|
-
);
|
|
19
|
-
await fs.mkdir(
|
|
20
|
-
path.join(tmpDir, 'app', 'sls_yaml', 'generatedCode', 'source'),
|
|
21
|
-
{ recursive: true }
|
|
22
|
-
);
|
|
23
|
-
|
|
24
|
-
await fs.writeFile(
|
|
25
|
-
path.join(
|
|
26
|
-
tmpDir,
|
|
27
|
-
'resource',
|
|
28
|
-
'sls_yaml',
|
|
29
|
-
'generatedCode',
|
|
30
|
-
'source',
|
|
31
|
-
'generated-dynamoDB-table.yml'
|
|
32
|
-
),
|
|
33
|
-
[
|
|
34
|
-
'Resources:',
|
|
35
|
-
' AwaitingStepTable:',
|
|
36
|
-
' Properties:',
|
|
37
|
-
' TableName: ${self:custom.iz_resourcePrefix}AwaitingStep',
|
|
38
|
-
' WebSocketTaskTable:',
|
|
39
|
-
' Properties:',
|
|
40
|
-
' TableName: ${self:custom.iz_resourcePrefix}WebSocketTask'
|
|
41
|
-
].join('\n'),
|
|
42
|
-
'utf8'
|
|
43
|
-
);
|
|
44
|
-
|
|
45
|
-
await fs.writeFile(
|
|
46
|
-
path.join(
|
|
47
|
-
tmpDir,
|
|
48
|
-
'resource',
|
|
49
|
-
'sls_yaml',
|
|
50
|
-
'generatedCode',
|
|
51
|
-
'source',
|
|
52
|
-
'generated-sns-in-sqs.yml'
|
|
53
|
-
),
|
|
54
|
-
[
|
|
55
|
-
'Resources:',
|
|
56
|
-
' ReservationsSqs:',
|
|
57
|
-
' Properties:',
|
|
58
|
-
' QueueName: ${self:custom.iz_resourcePrefix}ReservationsSqs',
|
|
59
|
-
' ReservationsSqsDLQ:',
|
|
60
|
-
' Properties:',
|
|
61
|
-
' QueueName: ${self:custom.iz_resourcePrefix}ReservationsSqsDLQ',
|
|
62
|
-
' InReservations:',
|
|
63
|
-
' Properties:',
|
|
64
|
-
' TopicName: ${self:custom.iz_serviceTag}_${self:custom.iz_stage}_ReservationsComplete_In',
|
|
65
|
-
' InReservationsMain:',
|
|
66
|
-
' Properties:',
|
|
67
|
-
' TopicName: ${self:custom.iz_serviceTag}_${self:custom.iz_stage}_Reservations_In',
|
|
68
|
-
' InCreateRolePermissions:',
|
|
69
|
-
' Properties:',
|
|
70
|
-
' TopicName: ${self:custom.iz_serviceTag}_${self:custom.iz_stage}_CreateRolePermissions_In'
|
|
71
|
-
].join('\n'),
|
|
72
|
-
'utf8'
|
|
73
|
-
);
|
|
74
|
-
|
|
75
|
-
await fs.writeFile(
|
|
76
|
-
path.join(
|
|
77
|
-
tmpDir,
|
|
78
|
-
'resource',
|
|
79
|
-
'sls_yaml',
|
|
80
|
-
'generatedCode',
|
|
81
|
-
'source',
|
|
82
|
-
'generated-sns-out.yml'
|
|
83
|
-
),
|
|
84
|
-
[
|
|
85
|
-
'Resources:',
|
|
86
|
-
' OutReservations:',
|
|
87
|
-
' Properties:',
|
|
88
|
-
' TopicName: ${self:custom.iz_serviceTag}_${self:custom.iz_stage}_Reservations_Out'
|
|
89
|
-
].join('\n'),
|
|
90
|
-
'utf8'
|
|
91
|
-
);
|
|
92
|
-
|
|
93
|
-
await fs.writeFile(
|
|
94
|
-
path.join(
|
|
95
|
-
tmpDir,
|
|
96
|
-
'app',
|
|
97
|
-
'sls_yaml',
|
|
98
|
-
'generatedCode',
|
|
99
|
-
'source',
|
|
100
|
-
'flow-schema.yml'
|
|
101
|
-
),
|
|
102
|
-
[
|
|
103
|
-
'ReservationsCompleteSqs:',
|
|
104
|
-
' role: WebSocketMainRole',
|
|
105
|
-
' events:',
|
|
106
|
-
' - sqs:',
|
|
107
|
-
' arn: arn:aws:sqs:${self:custom.iz_region}:${self:custom.iz_accountId}:${self:custom.iz_resourcePrefix}ReservationsCompleteSqs'
|
|
108
|
-
].join('\n'),
|
|
109
|
-
'utf8'
|
|
110
|
-
);
|
|
111
|
-
|
|
112
|
-
await fs.writeFile(
|
|
113
|
-
path.join(
|
|
114
|
-
tmpDir,
|
|
115
|
-
'app',
|
|
116
|
-
'sls_yaml',
|
|
117
|
-
'generatedCode',
|
|
118
|
-
'source',
|
|
119
|
-
'role-name-config.yml'
|
|
120
|
-
),
|
|
121
|
-
[
|
|
122
|
-
'# for createIamRole',
|
|
123
|
-
'- arn:aws:iam::${self:custom.iz_accountId}:role/${self:custom.iz_resourcePrefix}FlowObjectsRole',
|
|
124
|
-
'- arn:aws:iam::${self:custom.iz_accountId}:role/${self:custom.iz_resourcePrefix}ProcFindDataRole',
|
|
125
|
-
'- arn:aws:iam::${self:custom.iz_accountId}:role/${self:custom.iz_resourcePrefix}RegisterRole',
|
|
126
|
-
'- arn:aws:iam::${self:custom.iz_accountId}:role/${self:custom.iz_resourcePrefix}ReservationsRole',
|
|
127
|
-
'- arn:aws:iam::${self:custom.iz_accountId}:role/${self:custom.iz_resourcePrefix}WebSocketMainRole'
|
|
128
|
-
].join('\n'),
|
|
129
|
-
'utf8'
|
|
130
|
-
);
|
|
131
|
-
});
|
|
132
|
-
|
|
133
|
-
it('registers scoped IAM statements and avoids broad defaults', async () => {
|
|
134
|
-
await generateSharedResourceYaml(
|
|
135
|
-
{ objects: [{ objectType: 'Foo' }], flows: [] },
|
|
136
|
-
{ outputPath: tmpDir }
|
|
137
|
-
);
|
|
138
|
-
|
|
139
|
-
const grouped = policyRegistry.toGroupedByRole();
|
|
140
|
-
const resources = grouped.FlowObjectsRole.statements.flatMap(
|
|
141
|
-
statement => statement.resource
|
|
142
|
-
);
|
|
143
|
-
const actions = grouped.FlowObjectsRole.statements.flatMap(
|
|
144
|
-
statement => statement.action
|
|
145
|
-
);
|
|
146
|
-
|
|
147
|
-
expect(Object.keys(grouped).sort()).toEqual(
|
|
148
|
-
expect.arrayContaining([
|
|
149
|
-
'FlowObjectsRole',
|
|
150
|
-
'ProcFindDataRole',
|
|
151
|
-
'RegisterRole',
|
|
152
|
-
'ReservationsRole',
|
|
153
|
-
'WebSocketMainRole'
|
|
154
|
-
])
|
|
155
|
-
);
|
|
156
|
-
expect(resources).toContain(
|
|
157
|
-
'arn:aws:s3:::${self:custom.iz_serviceSchemaBucketName}/perServiceSchemas/*'
|
|
158
|
-
);
|
|
159
|
-
expect(resources).toContain(
|
|
160
|
-
'arn:aws:dynamodb:${self:custom.iz_region}:${self:custom.iz_accountId}:table/${self:custom.iz_resourcePrefix}AwaitingStep'
|
|
161
|
-
);
|
|
162
|
-
const reservationResources = grouped.ReservationsRole.statements.flatMap(
|
|
163
|
-
statement => statement.resource
|
|
164
|
-
);
|
|
165
|
-
const reservationActions = grouped.ReservationsRole.statements.flatMap(
|
|
166
|
-
statement => statement.action
|
|
167
|
-
);
|
|
168
|
-
|
|
169
|
-
expect(reservationResources).toContain(
|
|
170
|
-
'arn:aws:sns:${self:custom.iz_region}:${self:custom.iz_accountId}:${self:custom.iz_serviceTag}_${self:custom.iz_stage}_Reservations_Out'
|
|
171
|
-
);
|
|
172
|
-
expect(reservationResources).not.toContain(
|
|
173
|
-
'arn:aws:sns:${self:custom.iz_region}:${self:custom.iz_accountId}:${self:custom.iz_serviceTag}_${self:custom.iz_stage}_ReservationsComplete_In'
|
|
174
|
-
);
|
|
175
|
-
expect(resources).not.toContain(
|
|
176
|
-
'arn:aws:sns:${self:custom.iz_region}:${self:custom.iz_accountId}:${self:custom.iz_serviceTag}_${self:custom.iz_stage}_CreateRolePermissions_In'
|
|
177
|
-
);
|
|
178
|
-
expect(reservationActions).toContain('sns:Publish');
|
|
179
|
-
expect(reservationActions).not.toContain('sns:Subscribe');
|
|
180
|
-
expect(resources).not.toContain(
|
|
181
|
-
'arn:aws:dynamodb:${self:custom.iz_region}:${self:custom.iz_accountId}:table/${self:custom.iz_resourcePrefix}*'
|
|
182
|
-
);
|
|
183
|
-
});
|
|
184
|
-
|
|
185
|
-
it('adds WebSocket permissions only for WebSocketMainRole', async () => {
|
|
186
|
-
await generateSharedResourceYaml(
|
|
187
|
-
{ flows: [{ flowTag: 'dummy', event: ['ownTopic'] }] },
|
|
188
|
-
{ outputPath: tmpDir }
|
|
189
|
-
);
|
|
190
|
-
|
|
191
|
-
const grouped = policyRegistry.toGroupedByRole();
|
|
192
|
-
const wsActions = grouped.WebSocketMainRole.statements.flatMap(
|
|
193
|
-
statement => statement.action
|
|
194
|
-
);
|
|
195
|
-
|
|
196
|
-
expect(wsActions).toContain('execute-api:ManageConnections');
|
|
197
|
-
expect(wsActions).not.toContain('execute-api:Invoke');
|
|
198
|
-
|
|
199
|
-
for (const [roleName, roleData] of Object.entries(grouped)) {
|
|
200
|
-
if (roleName === 'WebSocketMainRole') continue;
|
|
201
|
-
const actions = roleData.statements.flatMap(statement => statement.action);
|
|
202
|
-
expect(actions).not.toContain('execute-api:ManageConnections');
|
|
203
|
-
expect(actions).not.toContain('execute-api:Invoke');
|
|
204
|
-
}
|
|
205
|
-
});
|
|
206
|
-
|
|
207
|
-
it('only emits roles present in role-name-config', async () => {
|
|
208
|
-
policyRegistry.add(
|
|
209
|
-
'UnexpectedRole',
|
|
210
|
-
'sns:Publish',
|
|
211
|
-
'arn:aws:sns:${self:custom.iz_region}:${self:custom.iz_accountId}:unexpected'
|
|
212
|
-
);
|
|
213
|
-
|
|
214
|
-
await generateSharedResourceYaml(
|
|
215
|
-
{ objects: [{ objectType: 'Foo' }], flows: [] },
|
|
216
|
-
{ outputPath: tmpDir }
|
|
217
|
-
);
|
|
218
|
-
|
|
219
|
-
const content = await fs.readFile(
|
|
220
|
-
path.join(
|
|
221
|
-
tmpDir,
|
|
222
|
-
'app',
|
|
223
|
-
'sls_yaml',
|
|
224
|
-
'generatedCode',
|
|
225
|
-
'source',
|
|
226
|
-
'generate-shared-resource.yml'
|
|
227
|
-
),
|
|
228
|
-
'utf8'
|
|
229
|
-
);
|
|
230
|
-
|
|
231
|
-
expect(content).toContain('FlowObjectsRole:');
|
|
232
|
-
expect(content).toContain('WebSocketMainRole:');
|
|
233
|
-
expect(content).not.toContain('UnexpectedRole:');
|
|
234
|
-
});
|
|
235
|
-
});
|
|
@@ -1,46 +0,0 @@
|
|
|
1
|
-
// src/codeGenerators/app/sls_yaml/_policy/PolicyEmitter.js
|
|
2
|
-
//
|
|
3
|
-
// Reads the PolicyRegistry at the end of the generation run and emits one
|
|
4
|
-
// per-role .yml file containing a single AWS::IAM::ManagedPolicy. Each
|
|
5
|
-
// managed policy attaches to its base role via `Roles: [ !Ref <RoleName> ]`.
|
|
6
|
-
//
|
|
7
|
-
// IMPORTANT: This emitter runs AFTER SharedResourceYamlGenerator so the
|
|
8
|
-
// managed policies can reference the roles that generator just emitted.
|
|
9
|
-
// See generateCode.js for the ordering.
|
|
10
|
-
|
|
11
|
-
import fs from 'fs/promises';
|
|
12
|
-
import path from 'path';
|
|
13
|
-
import ejs from 'ejs';
|
|
14
|
-
import { fileURLToPath } from 'url';
|
|
15
|
-
|
|
16
|
-
const __filename = fileURLToPath(import.meta.url);
|
|
17
|
-
const __dirname = path.dirname(__filename);
|
|
18
|
-
|
|
19
|
-
/**
|
|
20
|
-
* @param {import('./PolicyRegistry.js').PolicyRegistry} registry
|
|
21
|
-
* @param {{ outputPath: string }} options
|
|
22
|
-
*/
|
|
23
|
-
export async function emitManagedPolicies(registry, options) {
|
|
24
|
-
const outDir = path.join(
|
|
25
|
-
options.outputPath,
|
|
26
|
-
'app',
|
|
27
|
-
'sls_yaml',
|
|
28
|
-
'generatedCode',
|
|
29
|
-
'source',
|
|
30
|
-
'iam-managed-policies'
|
|
31
|
-
);
|
|
32
|
-
await fs.mkdir(outDir, { recursive: true });
|
|
33
|
-
|
|
34
|
-
const grouped = registry.toGroupedByRole();
|
|
35
|
-
const templatePath = path.join(__dirname, 'templates', 'ManagedPolicy_Yaml.ejs');
|
|
36
|
-
const tpl = await fs.readFile(templatePath, 'utf8');
|
|
37
|
-
|
|
38
|
-
for (const [roleName, { statements }] of Object.entries(grouped)) {
|
|
39
|
-
const policyName = roleName.replace(/role$/i, '');
|
|
40
|
-
const content = ejs.render(tpl, { roleName, policyName, statements });
|
|
41
|
-
const outFile = path.join(outDir, `${policyName}Policy.yml`);
|
|
42
|
-
await fs.writeFile(outFile, content, 'utf8');
|
|
43
|
-
}
|
|
44
|
-
|
|
45
|
-
console.log(` [PolicyEmitter] Wrote ${Object.keys(grouped).length} managed-policy file(s) to ${outDir}`);
|
|
46
|
-
}
|
|
@@ -1,94 +0,0 @@
|
|
|
1
|
-
// src/codeGenerators/app/sls_yaml/_policy/PolicyRegistry.js
|
|
2
|
-
//
|
|
3
|
-
// In-memory IAM permission registry. Decoupled generators register
|
|
4
|
-
// (roleName, action, resource) tuples at any point during generation.
|
|
5
|
-
// PolicyEmitter reads the registry after all generators have run and
|
|
6
|
-
// emits one AWS::IAM::ManagedPolicy per role with deduplicated statements.
|
|
7
|
-
//
|
|
8
|
-
// Internal shape:
|
|
9
|
-
// Map<roleName, Map<action, Set<resource>>>
|
|
10
|
-
// The action→resource-set grouping means adding the same resource twice
|
|
11
|
-
// is a no-op (Set semantics), and multiple resources for one action get
|
|
12
|
-
// rendered as a Resource: [ ... ] array (required by IAM policy syntax).
|
|
13
|
-
|
|
14
|
-
export class PolicyRegistry {
|
|
15
|
-
constructor() {
|
|
16
|
-
/** @type {Map<string, Map<string, Set<string>>>} */
|
|
17
|
-
this._roles = new Map();
|
|
18
|
-
/** @type {Set<string>} Roles whose entries have been fully replaced via .set() */
|
|
19
|
-
this._replaced = new Set();
|
|
20
|
-
}
|
|
21
|
-
|
|
22
|
-
add(roleName, action, resource) {
|
|
23
|
-
if (this._replaced.has(roleName)) {
|
|
24
|
-
throw new Error(
|
|
25
|
-
`PolicyRegistry.add("${roleName}", ...): role was previously replaced via .set(); ` +
|
|
26
|
-
`use .set() again or call .resetRole() first.`
|
|
27
|
-
);
|
|
28
|
-
}
|
|
29
|
-
if (!this._roles.has(roleName)) this._roles.set(roleName, new Map());
|
|
30
|
-
const actions = this._roles.get(roleName);
|
|
31
|
-
if (!actions.has(action)) actions.set(action, new Set());
|
|
32
|
-
actions.get(action).add(resource);
|
|
33
|
-
}
|
|
34
|
-
|
|
35
|
-
addMany(roleName, perms) {
|
|
36
|
-
for (const p of perms) this.add(roleName, p.action, p.resource);
|
|
37
|
-
}
|
|
38
|
-
|
|
39
|
-
/** Fully replace a role's permission set (discards anything previously added). */
|
|
40
|
-
set(roleName, perms) {
|
|
41
|
-
this._roles.set(roleName, new Map());
|
|
42
|
-
this._replaced.add(roleName);
|
|
43
|
-
for (const p of perms) {
|
|
44
|
-
const actions = this._roles.get(roleName);
|
|
45
|
-
if (!actions.has(p.action)) actions.set(p.action, new Set());
|
|
46
|
-
actions.get(p.action).add(p.resource);
|
|
47
|
-
}
|
|
48
|
-
}
|
|
49
|
-
|
|
50
|
-
/** Forget all registrations for a role (allows re-add). */
|
|
51
|
-
resetRole(roleName) {
|
|
52
|
-
this._roles.delete(roleName);
|
|
53
|
-
this._replaced.delete(roleName);
|
|
54
|
-
}
|
|
55
|
-
|
|
56
|
-
/** Forget every role. Used between test cases or if a caller wants a clean slate. */
|
|
57
|
-
clear() {
|
|
58
|
-
this._roles.clear();
|
|
59
|
-
this._replaced.clear();
|
|
60
|
-
}
|
|
61
|
-
|
|
62
|
-
/**
|
|
63
|
-
* Return a serializable view of the registry grouped by role, with each role's
|
|
64
|
-
* permissions rendered as IAM-style statements (action + resource arrays).
|
|
65
|
-
* @returns {Record<string, { statements: Array<{ action: string[], resource: string[] }> }>}
|
|
66
|
-
*/
|
|
67
|
-
toGroupedByRole() {
|
|
68
|
-
const out = {};
|
|
69
|
-
for (const [roleName, actions] of this._roles.entries()) {
|
|
70
|
-
const statements = [];
|
|
71
|
-
for (const [action, resources] of actions.entries()) {
|
|
72
|
-
if (resources.size === 0) continue;
|
|
73
|
-
statements.push({
|
|
74
|
-
action: [action],
|
|
75
|
-
resource: [...resources]
|
|
76
|
-
});
|
|
77
|
-
}
|
|
78
|
-
if (statements.length > 0) out[roleName] = { statements };
|
|
79
|
-
}
|
|
80
|
-
return out;
|
|
81
|
-
}
|
|
82
|
-
|
|
83
|
-
/** List of role names currently registered (useful for the emitter to iterate). */
|
|
84
|
-
registeredRoles() {
|
|
85
|
-
return [...this._roles.keys()];
|
|
86
|
-
}
|
|
87
|
-
}
|
|
88
|
-
|
|
89
|
-
/**
|
|
90
|
-
* Module-level singleton — most callers want the shared registry across
|
|
91
|
-
* the whole generation run. Tests instantiate PolicyRegistry directly
|
|
92
|
-
* to avoid cross-test pollution.
|
|
93
|
-
*/
|
|
94
|
-
export const policyRegistry = new PolicyRegistry();
|
|
@@ -1,55 +0,0 @@
|
|
|
1
|
-
import { describe, it, expect, beforeEach, afterEach } from '@jest/globals';
|
|
2
|
-
import fs from 'fs/promises';
|
|
3
|
-
import path from 'path';
|
|
4
|
-
import os from 'os';
|
|
5
|
-
import { PolicyRegistry } from '../PolicyRegistry.js';
|
|
6
|
-
import { emitManagedPolicies } from '../PolicyEmitter.js';
|
|
7
|
-
|
|
8
|
-
describe('emitManagedPolicies', () => {
|
|
9
|
-
let tmpDir, reg;
|
|
10
|
-
beforeEach(async () => {
|
|
11
|
-
tmpDir = await fs.mkdtemp(path.join(os.tmpdir(), 'iz-policy-emitter-'));
|
|
12
|
-
reg = new PolicyRegistry();
|
|
13
|
-
});
|
|
14
|
-
afterEach(async () => { await fs.rm(tmpDir, { recursive: true, force: true }); });
|
|
15
|
-
|
|
16
|
-
it('emits one .yml file per registered role', async () => {
|
|
17
|
-
reg.add('FindDataRole', 's3:GetObject', 'arn:aws:s3:::a/*');
|
|
18
|
-
reg.add('RegisterRole', 'dynamodb:GetItem', 'arn:aws:dynamodb:*:*:table/x');
|
|
19
|
-
await emitManagedPolicies(reg, { outputPath: tmpDir });
|
|
20
|
-
const files = await fs.readdir(path.join(tmpDir, 'app', 'sls_yaml', 'generatedCode', 'source', 'iam-managed-policies'));
|
|
21
|
-
expect(files.sort()).toEqual(['FindDataPolicy.yml', 'RegisterPolicy.yml']);
|
|
22
|
-
});
|
|
23
|
-
|
|
24
|
-
it('emits empty dir + no files when registry is empty', async () => {
|
|
25
|
-
await emitManagedPolicies(reg, { outputPath: tmpDir });
|
|
26
|
-
const outDir = path.join(tmpDir, 'app', 'sls_yaml', 'generatedCode', 'source', 'iam-managed-policies');
|
|
27
|
-
const stat = await fs.stat(outDir);
|
|
28
|
-
expect(stat.isDirectory()).toBe(true);
|
|
29
|
-
const files = await fs.readdir(outDir);
|
|
30
|
-
expect(files).toEqual([]);
|
|
31
|
-
});
|
|
32
|
-
|
|
33
|
-
it('writes YAML that references the role via !Ref', async () => {
|
|
34
|
-
reg.add('FindDataRole', 's3:GetObject', 'arn:aws:s3:::a/*');
|
|
35
|
-
await emitManagedPolicies(reg, { outputPath: tmpDir });
|
|
36
|
-
const content = await fs.readFile(
|
|
37
|
-
path.join(tmpDir, 'app', 'sls_yaml', 'generatedCode', 'source', 'iam-managed-policies', 'FindDataPolicy.yml'),
|
|
38
|
-
'utf8'
|
|
39
|
-
);
|
|
40
|
-
expect(content).toContain('Type: AWS::IAM::ManagedPolicy');
|
|
41
|
-
expect(content).toContain('Roles:');
|
|
42
|
-
expect(content).toContain('!Ref FindDataRole');
|
|
43
|
-
expect(content).toContain('s3:GetObject');
|
|
44
|
-
});
|
|
45
|
-
|
|
46
|
-
it('does NOT crash on roles with statements containing Serverless CFN variables', async () => {
|
|
47
|
-
reg.add('FindDataRole', 's3:GetObject', 'arn:aws:s3:::${self:custom.iz_serviceSchemaBucketName}/*');
|
|
48
|
-
await emitManagedPolicies(reg, { outputPath: tmpDir });
|
|
49
|
-
const content = await fs.readFile(
|
|
50
|
-
path.join(tmpDir, 'app', 'sls_yaml', 'generatedCode', 'source', 'iam-managed-policies', 'FindDataPolicy.yml'),
|
|
51
|
-
'utf8'
|
|
52
|
-
);
|
|
53
|
-
expect(content).toContain('${self:custom.iz_serviceSchemaBucketName}');
|
|
54
|
-
});
|
|
55
|
-
});
|
|
@@ -1,48 +0,0 @@
|
|
|
1
|
-
import { describe, it, expect, beforeEach } from '@jest/globals';
|
|
2
|
-
import { policyRegistry, PolicyRegistry } from '../PolicyRegistry.js';
|
|
3
|
-
|
|
4
|
-
describe('PolicyRegistry', () => {
|
|
5
|
-
let reg;
|
|
6
|
-
beforeEach(() => { reg = new PolicyRegistry(); });
|
|
7
|
-
|
|
8
|
-
it('add() dedupes identical (role, action, resource) tuples', () => {
|
|
9
|
-
reg.add('Role1', 's3:GetObject', 'arn:aws:s3:::bucket/*');
|
|
10
|
-
reg.add('Role1', 's3:GetObject', 'arn:aws:s3:::bucket/*');
|
|
11
|
-
expect(reg.toGroupedByRole().Role1.statements).toHaveLength(1);
|
|
12
|
-
});
|
|
13
|
-
|
|
14
|
-
it('add() groups multiple resources under one (role, action)', () => {
|
|
15
|
-
reg.add('Role1', 's3:GetObject', 'arn:aws:s3:::a/*');
|
|
16
|
-
reg.add('Role1', 's3:GetObject', 'arn:aws:s3:::b/*');
|
|
17
|
-
const stmt = reg.toGroupedByRole().Role1.statements[0];
|
|
18
|
-
expect(stmt.action).toEqual(['s3:GetObject']);
|
|
19
|
-
expect(stmt.resource).toEqual(['arn:aws:s3:::a/*', 'arn:aws:s3:::b/*']);
|
|
20
|
-
});
|
|
21
|
-
|
|
22
|
-
it('addMany() inserts batch in one call', () => {
|
|
23
|
-
reg.addMany('Role1', [
|
|
24
|
-
{ action: 's3:GetObject', resource: 'arn:aws:s3:::a/*' },
|
|
25
|
-
{ action: 's3:ListBucket', resource: 'arn:aws:s3:::a' }
|
|
26
|
-
]);
|
|
27
|
-
expect(reg.toGroupedByRole().Role1.statements).toHaveLength(2);
|
|
28
|
-
});
|
|
29
|
-
|
|
30
|
-
it('set() replaces baseline for a role (full override)', () => {
|
|
31
|
-
reg.add('Role1', 's3:GetObject', 'arn:aws:s3:::a/*'); // baseline
|
|
32
|
-
reg.set('Role1', [{ action: 'dynamodb:GetItem', resource: 'arn:aws:dynamodb:*:*:table/x' }]);
|
|
33
|
-
expect(reg.toGroupedByRole().Role1.statements).toHaveLength(1);
|
|
34
|
-
expect(reg.toGroupedByRole().Role1.statements[0].action).toEqual(['dynamodb:GetItem']);
|
|
35
|
-
});
|
|
36
|
-
|
|
37
|
-
it('toGroupedByRole() returns empty object when nothing registered', () => {
|
|
38
|
-
expect(reg.toGroupedByRole()).toEqual({});
|
|
39
|
-
});
|
|
40
|
-
|
|
41
|
-
it('toGroupedByRole() preserves insertion order within a role', () => {
|
|
42
|
-
reg.add('Role1', 's3:GetObject', 'arn:aws:s3:::a/*');
|
|
43
|
-
reg.add('Role1', 'dynamodb:GetItem', 'arn:aws:dynamodb:*:*:table/x');
|
|
44
|
-
reg.add('Role1', 's3:ListBucket', 'arn:aws:s3:::a');
|
|
45
|
-
const stmts = reg.toGroupedByRole().Role1.statements;
|
|
46
|
-
expect(stmts.map(s => s.action[0])).toEqual(['s3:GetObject', 'dynamodb:GetItem', 's3:ListBucket']);
|
|
47
|
-
});
|
|
48
|
-
});
|
|
@@ -1,22 +0,0 @@
|
|
|
1
|
-
Resources:
|
|
2
|
-
<%- policyName %>Policy:
|
|
3
|
-
Type: AWS::IAM::ManagedPolicy
|
|
4
|
-
Properties:
|
|
5
|
-
ManagedPolicyName: ${self:custom.iz_resourcePrefix}<%- policyName %>Policy
|
|
6
|
-
Description: "Managed policy for <%- roleName %> (auto-generated by PolicyEmitter)"
|
|
7
|
-
PolicyDocument:
|
|
8
|
-
Version: "2012-10-17"
|
|
9
|
-
Statement:
|
|
10
|
-
<% statements.forEach((stmt) => { -%>
|
|
11
|
-
- Effect: Allow
|
|
12
|
-
Action:
|
|
13
|
-
<% stmt.action.forEach((a) => { -%>
|
|
14
|
-
- <%- a %>
|
|
15
|
-
<% }) -%>
|
|
16
|
-
Resource:
|
|
17
|
-
<% stmt.resource.forEach((r) => { -%>
|
|
18
|
-
- "<%- r %>"
|
|
19
|
-
<% }) -%>
|
|
20
|
-
<% }) -%>
|
|
21
|
-
Roles:
|
|
22
|
-
- !Ref <%- roleName %>
|
|
@@ -1,13 +0,0 @@
|
|
|
1
|
-
import path from 'path';
|
|
2
|
-
import { writeRenderedTemplate } from '../../../core/renderTemplateFile.js';
|
|
3
|
-
|
|
4
|
-
async function renderYamlTemplate(templatePath, outputPath, templateData, logLabel) {
|
|
5
|
-
try {
|
|
6
|
-
await writeRenderedTemplate(templatePath, outputPath, templateData);
|
|
7
|
-
console.log(` [${logLabel}] Wrote ${path.basename(outputPath)} to ${outputPath}`);
|
|
8
|
-
} catch (error) {
|
|
9
|
-
console.error(` [${logLabel}] Error rendering ${path.basename(templatePath)}:`, error);
|
|
10
|
-
}
|
|
11
|
-
}
|
|
12
|
-
|
|
13
|
-
export { renderYamlTemplate };
|
|
@@ -1,10 +0,0 @@
|
|
|
1
|
-
<%- functionName %>:
|
|
2
|
-
handler: <%- handlerPath %>
|
|
3
|
-
name: ${self:custom.iz_resourcePrefix}<%- functionName %>
|
|
4
|
-
role: <%- roleName %>Role
|
|
5
|
-
#<#<%- functionName %>FunctionSetting#>
|
|
6
|
-
#<#/<%- functionName %>FunctionSetting#>
|
|
7
|
-
events:
|
|
8
|
-
- sqs:
|
|
9
|
-
arn: arn:aws:sqs:${self:custom.iz_region}:${self:custom.iz_accountId}:${self:custom.iz_resourcePrefix}<%- functionName %>
|
|
10
|
-
batchSize: 10
|
|
@@ -1,21 +0,0 @@
|
|
|
1
|
-
<%- functionNameConfig %>:
|
|
2
|
-
handler: <%- handlerPath %>
|
|
3
|
-
name: ${self:custom.iz_resourcePrefix}<%- functionNameConfig %>
|
|
4
|
-
role: <%- roleName %>
|
|
5
|
-
#<#<%- functionNameConfig %>FunctionSetting#>
|
|
6
|
-
#<#/<%- functionNameConfig %>FunctionSetting#>
|
|
7
|
-
events:
|
|
8
|
-
<% for (const route of apiRoutes) { -%>
|
|
9
|
-
- httpApi:
|
|
10
|
-
path: <%- route.path %>
|
|
11
|
-
method: post
|
|
12
|
-
#<#<%- route.upperName %>AppLevelAuthorizer#>
|
|
13
|
-
# authorizer: authorizerServiceSchema
|
|
14
|
-
#<#/<%- route.upperName %>AppLevelAuthorizer#>
|
|
15
|
-
- httpApi:
|
|
16
|
-
path: <%- route.path %>/{targetUserId}
|
|
17
|
-
method: post
|
|
18
|
-
#<#<%- route.upperName %>UserLevelAuthorizer#>
|
|
19
|
-
# authorizer: authorizerIdentifiers
|
|
20
|
-
#<#/<%- route.upperName %>UserLevelAuthorizer#>
|
|
21
|
-
<% } -%>
|
|
@@ -1,14 +0,0 @@
|
|
|
1
|
-
${self:custom.iz_resourcePrefix}<%= functionNameConfig %>:
|
|
2
|
-
handler: <%= handlerPath %>
|
|
3
|
-
role: <%= roleName %>
|
|
4
|
-
description: <%= flowTag %> (EventBridge Schedule)
|
|
5
|
-
<% if (locals.schedules && schedules.length > 0) { -%>
|
|
6
|
-
events:
|
|
7
|
-
<% schedules.forEach(function(sched) { -%>
|
|
8
|
-
- schedule:
|
|
9
|
-
name: ${self:custom.iz_resourcePrefix}<%= sched.name %>
|
|
10
|
-
description: '<%= sched.description %>'
|
|
11
|
-
rate: <%= sched.rate[0] %>
|
|
12
|
-
enabled: true
|
|
13
|
-
<% }); -%>
|
|
14
|
-
<% } -%>
|
|
@@ -1,11 +0,0 @@
|
|
|
1
|
-
<%- functionNameConfig %>:
|
|
2
|
-
handler: <%- handlerPath %>
|
|
3
|
-
name: ${self:custom.iz_resourcePrefix}<%- functionNameConfig %>
|
|
4
|
-
role: <%- roleName %>
|
|
5
|
-
#<#<%- functionNameConfig %>FunctionSetting#>
|
|
6
|
-
#<#/<%- functionNameConfig %>FunctionSetting#>
|
|
7
|
-
events:
|
|
8
|
-
- sqs:
|
|
9
|
-
arn: arn:aws:sqs:${self:custom.iz_region}:${self:custom.iz_accountId}:${self:custom.iz_resourcePrefix}<%- queueName %>
|
|
10
|
-
batchSize: 10
|
|
11
|
-
<%- filterPatterns %>
|
|
@@ -1,11 +0,0 @@
|
|
|
1
|
-
<%- functionNameConfig %>:
|
|
2
|
-
handler: <%- handlerPath %>
|
|
3
|
-
name: ${self:custom.iz_resourcePrefix}<%- functionNameConfig %>
|
|
4
|
-
role: <%- roleName %>
|
|
5
|
-
#<#<%- functionNameConfig %>FunctionSetting#>
|
|
6
|
-
#<#/<%- functionNameConfig %>FunctionSetting#>
|
|
7
|
-
events:
|
|
8
|
-
- websocket:
|
|
9
|
-
route: <%- routeName %>
|
|
10
|
-
# authorizer: ${self:custom.iz_authorizerAppLevel}
|
|
11
|
-
# identifierResource: 'route.request.header.Auth'
|
|
@@ -1,32 +0,0 @@
|
|
|
1
|
-
ProcessLogicalSqs:
|
|
2
|
-
handler: src/generatedCode/ProcessLogical/source/ProcessLogical_HdrSqs.main
|
|
3
|
-
name: ${self:custom.iz_resourcePrefix}ProcessLogicalHdrSqs
|
|
4
|
-
role: ProcFindDataRole
|
|
5
|
-
#<#ProcessLogicalhdrSqsFunctionSetting#>
|
|
6
|
-
#<#/ProcessLogicalhdrSqsFunctionSetting#>
|
|
7
|
-
events:
|
|
8
|
-
- sqs:
|
|
9
|
-
arn: arn:aws:sqs:${self:custom.iz_region}:${self:custom.iz_accountId}:${self:custom.iz_resourcePrefix}ProcessLogicalHdrSqs
|
|
10
|
-
batchSize: 10
|
|
11
|
-
|
|
12
|
-
PaginateProLogicalDsq:
|
|
13
|
-
handler: src/generatedCode/ProcessLogical/source/PaginateProcessLogical_HdrDsq.main
|
|
14
|
-
name: ${self:custom.iz_resourcePrefix}PaginateProcessLogicalHdrDsq
|
|
15
|
-
role: ProcFindDataRole
|
|
16
|
-
#<#PaginateProcessLogicalhdrDsqFunctionSetting#>
|
|
17
|
-
#<#/PaginateProcessLogicalhdrDsqFunctionSetting#>
|
|
18
|
-
events:
|
|
19
|
-
- sqs:
|
|
20
|
-
arn: arn:aws:sqs:${self:custom.iz_region}:${self:custom.iz_accountId}:${self:custom.iz_resourcePrefix}PaginateProcessLogicalHdrDsq
|
|
21
|
-
batchSize: 10
|
|
22
|
-
|
|
23
|
-
PaginateProLogicalSqs:
|
|
24
|
-
handler: src/generatedCode/ProcessLogical/source/PaginateProcessLogical_HdrSqs.main
|
|
25
|
-
name: ${self:custom.iz_resourcePrefix}PaginateProcessLogicalHdrSqs
|
|
26
|
-
role: ProcFindDataRole
|
|
27
|
-
#<#PaginateProcessLogicalHdrSqsFunctionSetting#>
|
|
28
|
-
#<#/PaginateProcessLogicalHdrSqsFunctionSetting#>
|
|
29
|
-
events:
|
|
30
|
-
- sqs:
|
|
31
|
-
arn: arn:aws:sqs:${self:custom.iz_region}:${self:custom.iz_accountId}:${self:custom.iz_resourcePrefix}PaginateProcessLogicalHdrSqs
|
|
32
|
-
batchSize: 10
|