@izara_project/izara-core-generate-service-code 1.0.65 → 1.0.67

package/src/codeGenerators/app/sls_yaml/__tests__/SharedResourceYamlGenerator.test.js

@@ -1,235 +0,0 @@
-import { describe, it, expect, beforeEach } from '@jest/globals';
-import path from 'path';
-import fs from 'fs/promises';
-import os from 'os';
-import { policyRegistry } from '../_policy/PolicyRegistry.js';
-import { generateSharedResourceYaml } from '../SharedResourceYamlGenerator.js';
-
-describe('generateSharedResourceYaml', () => {
-  let tmpDir;
-
-  beforeEach(async () => {
-    tmpDir = await fs.mkdtemp(path.join(os.tmpdir(), 'iz-shared-resource-'));
-    policyRegistry.clear();
-
-    await fs.mkdir(
-      path.join(tmpDir, 'resource', 'sls_yaml', 'generatedCode', 'source'),
-      { recursive: true }
-    );
-    await fs.mkdir(
-      path.join(tmpDir, 'app', 'sls_yaml', 'generatedCode', 'source'),
-      { recursive: true }
-    );
-
-    await fs.writeFile(
-      path.join(
-        tmpDir,
-        'resource',
-        'sls_yaml',
-        'generatedCode',
-        'source',
-        'generated-dynamoDB-table.yml'
-      ),
-      [
-        'Resources:',
-        '  AwaitingStepTable:',
-        '    Properties:',
-        '      TableName: ${self:custom.iz_resourcePrefix}AwaitingStep',
-        '  WebSocketTaskTable:',
-        '    Properties:',
-        '      TableName: ${self:custom.iz_resourcePrefix}WebSocketTask'
-      ].join('\n'),
-      'utf8'
-    );
-
-    await fs.writeFile(
-      path.join(
-        tmpDir,
-        'resource',
-        'sls_yaml',
-        'generatedCode',
-        'source',
-        'generated-sns-in-sqs.yml'
-      ),
-      [
-        'Resources:',
-        '  ReservationsSqs:',
-        '    Properties:',
-        '      QueueName: ${self:custom.iz_resourcePrefix}ReservationsSqs',
-        '  ReservationsSqsDLQ:',
-        '    Properties:',
-        '      QueueName: ${self:custom.iz_resourcePrefix}ReservationsSqsDLQ',
-        '  InReservations:',
-        '    Properties:',
-        '      TopicName: ${self:custom.iz_serviceTag}_${self:custom.iz_stage}_ReservationsComplete_In',
-        '  InReservationsMain:',
-        '    Properties:',
-        '      TopicName: ${self:custom.iz_serviceTag}_${self:custom.iz_stage}_Reservations_In',
-        '  InCreateRolePermissions:',
-        '    Properties:',
-        '      TopicName: ${self:custom.iz_serviceTag}_${self:custom.iz_stage}_CreateRolePermissions_In'
-      ].join('\n'),
-      'utf8'
-    );
-
-    await fs.writeFile(
-      path.join(
-        tmpDir,
-        'resource',
-        'sls_yaml',
-        'generatedCode',
-        'source',
-        'generated-sns-out.yml'
-      ),
-      [
-        'Resources:',
-        '  OutReservations:',
-        '    Properties:',
-        '      TopicName: ${self:custom.iz_serviceTag}_${self:custom.iz_stage}_Reservations_Out'
-      ].join('\n'),
-      'utf8'
-    );
-
-    await fs.writeFile(
-      path.join(
-        tmpDir,
-        'app',
-        'sls_yaml',
-        'generatedCode',
-        'source',
-        'flow-schema.yml'
-      ),
-      [
-        'ReservationsCompleteSqs:',
-        '  role: WebSocketMainRole',
-        '  events:',
-        '    - sqs:',
-        '        arn: arn:aws:sqs:${self:custom.iz_region}:${self:custom.iz_accountId}:${self:custom.iz_resourcePrefix}ReservationsCompleteSqs'
-      ].join('\n'),
-      'utf8'
-    );
-
-    await fs.writeFile(
-      path.join(
-        tmpDir,
-        'app',
-        'sls_yaml',
-        'generatedCode',
-        'source',
-        'role-name-config.yml'
-      ),
-      [
-        '# for createIamRole',
-        '- arn:aws:iam::${self:custom.iz_accountId}:role/${self:custom.iz_resourcePrefix}FlowObjectsRole',
-        '- arn:aws:iam::${self:custom.iz_accountId}:role/${self:custom.iz_resourcePrefix}ProcFindDataRole',
-        '- arn:aws:iam::${self:custom.iz_accountId}:role/${self:custom.iz_resourcePrefix}RegisterRole',
-        '- arn:aws:iam::${self:custom.iz_accountId}:role/${self:custom.iz_resourcePrefix}ReservationsRole',
-        '- arn:aws:iam::${self:custom.iz_accountId}:role/${self:custom.iz_resourcePrefix}WebSocketMainRole'
-      ].join('\n'),
-      'utf8'
-    );
-  });
-
-  it('registers scoped IAM statements and avoids broad defaults', async () => {
-    await generateSharedResourceYaml(
-      { objects: [{ objectType: 'Foo' }], flows: [] },
-      { outputPath: tmpDir }
-    );
-
-    const grouped = policyRegistry.toGroupedByRole();
-    const resources = grouped.FlowObjectsRole.statements.flatMap(
-      statement => statement.resource
-    );
-    const actions = grouped.FlowObjectsRole.statements.flatMap(
-      statement => statement.action
-    );
-
-    expect(Object.keys(grouped).sort()).toEqual(
-      expect.arrayContaining([
-        'FlowObjectsRole',
-        'ProcFindDataRole',
-        'RegisterRole',
-        'ReservationsRole',
-        'WebSocketMainRole'
-      ])
-    );
-    expect(resources).toContain(
-      'arn:aws:s3:::${self:custom.iz_serviceSchemaBucketName}/perServiceSchemas/*'
-    );
-    expect(resources).toContain(
-      'arn:aws:dynamodb:${self:custom.iz_region}:${self:custom.iz_accountId}:table/${self:custom.iz_resourcePrefix}AwaitingStep'
-    );
-    const reservationResources = grouped.ReservationsRole.statements.flatMap(
-      statement => statement.resource
-    );
-    const reservationActions = grouped.ReservationsRole.statements.flatMap(
-      statement => statement.action
-    );
-
-    expect(reservationResources).toContain(
-      'arn:aws:sns:${self:custom.iz_region}:${self:custom.iz_accountId}:${self:custom.iz_serviceTag}_${self:custom.iz_stage}_Reservations_Out'
-    );
-    expect(reservationResources).not.toContain(
-      'arn:aws:sns:${self:custom.iz_region}:${self:custom.iz_accountId}:${self:custom.iz_serviceTag}_${self:custom.iz_stage}_ReservationsComplete_In'
-    );
-    expect(resources).not.toContain(
-      'arn:aws:sns:${self:custom.iz_region}:${self:custom.iz_accountId}:${self:custom.iz_serviceTag}_${self:custom.iz_stage}_CreateRolePermissions_In'
-    );
-    expect(reservationActions).toContain('sns:Publish');
-    expect(reservationActions).not.toContain('sns:Subscribe');
-    expect(resources).not.toContain(
-      'arn:aws:dynamodb:${self:custom.iz_region}:${self:custom.iz_accountId}:table/${self:custom.iz_resourcePrefix}*'
-    );
-  });
-
-  it('adds WebSocket permissions only for WebSocketMainRole', async () => {
-    await generateSharedResourceYaml(
-      { flows: [{ flowTag: 'dummy', event: ['ownTopic'] }] },
-      { outputPath: tmpDir }
-    );
-
-    const grouped = policyRegistry.toGroupedByRole();
-    const wsActions = grouped.WebSocketMainRole.statements.flatMap(
-      statement => statement.action
-    );
-
-    expect(wsActions).toContain('execute-api:ManageConnections');
-    expect(wsActions).not.toContain('execute-api:Invoke');
-
-    for (const [roleName, roleData] of Object.entries(grouped)) {
-      if (roleName === 'WebSocketMainRole') continue;
-      const actions = roleData.statements.flatMap(statement => statement.action);
-      expect(actions).not.toContain('execute-api:ManageConnections');
-      expect(actions).not.toContain('execute-api:Invoke');
-    }
-  });
-
-  it('only emits roles present in role-name-config', async () => {
-    policyRegistry.add(
-      'UnexpectedRole',
-      'sns:Publish',
-      'arn:aws:sns:${self:custom.iz_region}:${self:custom.iz_accountId}:unexpected'
-    );
-
-    await generateSharedResourceYaml(
-      { objects: [{ objectType: 'Foo' }], flows: [] },
-      { outputPath: tmpDir }
-    );
-
-    const content = await fs.readFile(
-      path.join(
-        tmpDir,
-        'app',
-        'sls_yaml',
-        'generatedCode',
-        'source',
-        'generate-shared-resource.yml'
-      ),
-      'utf8'
-    );
-
-    expect(content).toContain('FlowObjectsRole:');
-    expect(content).toContain('WebSocketMainRole:');
-    expect(content).not.toContain('UnexpectedRole:');
-  });
-});

package/src/codeGenerators/app/sls_yaml/_policy/PolicyRegistry.js

@@ -1,56 +0,0 @@
-// src/codeGenerators/app/sls_yaml/_policy/PolicyRegistry.js
-//
-// In-memory IAM permission registry for the shared-resource generator.
-//
-// Internal shape:
-//   Map<roleName, Map<action, Set<resource>>>
-// The action→resource-set grouping means adding the same resource twice
-// is a no-op (Set semantics), and multiple resources for one action get
-// rendered as a Resource: [ ... ] array (required by IAM policy syntax).
-
-export class PolicyRegistry {
-  constructor() {
-    /** @type {Map<string, Map<string, Set<string>>>} */
-    this._roles = new Map();
-  }
-
-  add(roleName, action, resource) {
-    if (!this._roles.has(roleName)) this._roles.set(roleName, new Map());
-    const actions = this._roles.get(roleName);
-    if (!actions.has(action)) actions.set(action, new Set());
-    actions.get(action).add(resource);
-  }
-
-  /** Forget every role. Used between test cases or if a caller wants a clean slate. */
-  clear() {
-    this._roles.clear();
-  }
-
-  /**
-   * Return a serializable view of the registry grouped by role, with each role's
-   * permissions rendered as IAM-style statements (action + resource arrays).
-   * @returns {Record<string, { statements: Array<{ action: string[], resource: string[] }> }>}
-   */
-  toGroupedByRole() {
-    const out = {};
-    for (const [roleName, actions] of this._roles.entries()) {
-      const statements = [];
-      for (const [action, resources] of actions.entries()) {
-        if (resources.size === 0) continue;
-        statements.push({
-          action: [action],
-          resource: [...resources]
-        });
-      }
-      if (statements.length > 0) out[roleName] = { statements };
-    }
-    return out;
-  }
-}
-
-/**
- * Module-level singleton — most callers want the shared registry across
- * the whole generation run. Tests instantiate PolicyRegistry directly
- * to avoid cross-test pollution.
- */
-export const policyRegistry = new PolicyRegistry();

package/src/codeGenerators/app/sls_yaml/_policy/__tests__/PolicyRegistry.test.js

@@ -1,33 +0,0 @@
-import { describe, it, expect, beforeEach } from '@jest/globals';
-import { PolicyRegistry } from '../PolicyRegistry.js';
-
-describe('PolicyRegistry', () => {
-  let reg;
-  beforeEach(() => { reg = new PolicyRegistry(); });
-
-  it('add() dedupes identical (role, action, resource) tuples', () => {
-    reg.add('Role1', 's3:GetObject', 'arn:aws:s3:::bucket/*');
-    reg.add('Role1', 's3:GetObject', 'arn:aws:s3:::bucket/*');
-    expect(reg.toGroupedByRole().Role1.statements).toHaveLength(1);
-  });
-
-  it('add() groups multiple resources under one (role, action)', () => {
-    reg.add('Role1', 's3:GetObject', 'arn:aws:s3:::a/*');
-    reg.add('Role1', 's3:GetObject', 'arn:aws:s3:::b/*');
-    const stmt = reg.toGroupedByRole().Role1.statements[0];
-    expect(stmt.action).toEqual(['s3:GetObject']);
-    expect(stmt.resource).toEqual(['arn:aws:s3:::a/*', 'arn:aws:s3:::b/*']);
-  });
-
-  it('toGroupedByRole() returns empty object when nothing registered', () => {
-    expect(reg.toGroupedByRole()).toEqual({});
-  });
-
-  it('toGroupedByRole() preserves insertion order within a role', () => {
-    reg.add('Role1', 's3:GetObject', 'arn:aws:s3:::a/*');
-    reg.add('Role1', 'dynamodb:GetItem', 'arn:aws:dynamodb:*:*:table/x');
-    reg.add('Role1', 's3:ListBucket', 'arn:aws:s3:::a');
-    const stmts = reg.toGroupedByRole().Role1.statements;
-    expect(stmts.map(s => s.action[0])).toEqual(['s3:GetObject', 'dynamodb:GetItem', 's3:ListBucket']);
-  });
-});

package/src/codeGenerators/app/sls_yaml/renderYamlTemplate.js

@@ -1,13 +0,0 @@
-import path from 'path';
-import { writeRenderedTemplate } from '../../../core/renderTemplateFile.js';
-
-async function renderYamlTemplate(templatePath, outputPath, templateData, logLabel) {
-  try {
-    await writeRenderedTemplate(templatePath, outputPath, templateData);
-    console.log(`  [${logLabel}] Wrote ${path.basename(outputPath)} to ${outputPath}`);
-  } catch (error) {
-    console.error(`  [${logLabel}] Error rendering ${path.basename(templatePath)}:`, error);
-  }
-}
-
-export { renderYamlTemplate };

package/src/codeGenerators/app/sls_yaml/templates/FindData_Yaml.ejs

@@ -1,10 +0,0 @@
-<%- functionName %>:
-  handler: <%- handlerPath %>
-  name: ${self:custom.iz_resourcePrefix}<%- functionName %>
-  role: <%- roleName %>Role
-  #<#<%- functionName %>FunctionSetting#>
-  #<#/<%- functionName %>FunctionSetting#>
-  events:
-    - sqs:
-        arn: arn:aws:sqs:${self:custom.iz_region}:${self:custom.iz_accountId}:${self:custom.iz_resourcePrefix}<%- functionName %>
-        batchSize: 10

package/src/codeGenerators/app/sls_yaml/templates/FunctionYaml_Api.ejs

@@ -1,21 +0,0 @@
-<%- functionNameConfig %>:
-  handler: <%- handlerPath %>
-  name: ${self:custom.iz_resourcePrefix}<%- functionNameConfig %>
-  role: <%- roleName %>
-  #<#<%- functionNameConfig %>FunctionSetting#>
-  #<#/<%- functionNameConfig %>FunctionSetting#>
-  events:
-<% for (const route of apiRoutes) { -%>
-    - httpApi:
-        path: <%- route.path %>
-        method: post
-        #<#<%- route.upperName %>AppLevelAuthorizer#>
-        # authorizer: authorizerServiceSchema
-        #<#/<%- route.upperName %>AppLevelAuthorizer#>
-    - httpApi:
-        path: <%- route.path %>/{targetUserId}
-        method: post
-        #<#<%- route.upperName %>UserLevelAuthorizer#>
-        # authorizer: authorizerIdentifiers
-        #<#/<%- route.upperName %>UserLevelAuthorizer#>
-<% } -%>

package/src/codeGenerators/app/sls_yaml/templates/FunctionYaml_EventBridge.ejs

@@ -1,14 +0,0 @@
-  ${self:custom.iz_resourcePrefix}<%= functionNameConfig %>:
-    handler: <%= handlerPath %>
-    role: <%= roleName %>
-    description: <%= flowTag %> (EventBridge Schedule)
-<% if (locals.schedules && schedules.length > 0) { -%>
-    events:
-<% schedules.forEach(function(sched) { -%>
-      - schedule:
-          name: ${self:custom.iz_resourcePrefix}<%= sched.name %>
-          description: '<%= sched.description %>'
-          rate: <%= sched.rate[0] %>
-          enabled: true
-<% }); -%>
-<% } -%>

package/src/codeGenerators/app/sls_yaml/templates/FunctionYaml_Inv.ejs

@@ -1,6 +0,0 @@
-<%- functionNameConfig %>:
-  handler: <%- handlerPath %>
-  name: ${self:custom.iz_resourcePrefix}<%- functionNameConfig %>
-  role: <%- roleName %>
-  #<#<%- functionNameConfig %>FunctionSetting#>
-  #<#/<%- functionNameConfig %>FunctionSetting#>

package/src/codeGenerators/app/sls_yaml/templates/FunctionYaml_Sqs.ejs

@@ -1,11 +0,0 @@
-<%- functionNameConfig %>:
-  handler: <%- handlerPath %>
-  name: ${self:custom.iz_resourcePrefix}<%- functionNameConfig %>
-  role: <%- roleName %>
-  #<#<%- functionNameConfig %>FunctionSetting#>
-  #<#/<%- functionNameConfig %>FunctionSetting#>
-  events:
-    - sqs:
-        arn: arn:aws:sqs:${self:custom.iz_region}:${self:custom.iz_accountId}:${self:custom.iz_resourcePrefix}<%- queueName %>
-        batchSize: 10
-<%- filterPatterns %>

package/src/codeGenerators/app/sls_yaml/templates/FunctionYaml_Wbs.ejs

@@ -1,11 +0,0 @@
-<%- functionNameConfig %>:
-  handler: <%- handlerPath %>
-  name: ${self:custom.iz_resourcePrefix}<%- functionNameConfig %>
-  role: <%- roleName %>
-  #<#<%- functionNameConfig %>FunctionSetting#>
-  #<#/<%- functionNameConfig %>FunctionSetting#>
-  events:
-    - websocket:
-        route: <%- routeName %>
-        # authorizer: ${self:custom.iz_authorizerAppLevel}
-        # identifierResource: 'route.request.header.Auth'

package/src/codeGenerators/app/sls_yaml/templates/ProcessLogical_Yaml.ejs

@@ -1,32 +0,0 @@
-ProcessLogicalSqs:
-  handler: src/generatedCode/ProcessLogical/source/ProcessLogical_HdrSqs.main
-  name: ${self:custom.iz_resourcePrefix}ProcessLogicalHdrSqs
-  role: ProcFindDataRole
-  #<#ProcessLogicalhdrSqsFunctionSetting#>
-  #<#/ProcessLogicalhdrSqsFunctionSetting#>
-  events:
-  - sqs:
-      arn: arn:aws:sqs:${self:custom.iz_region}:${self:custom.iz_accountId}:${self:custom.iz_resourcePrefix}ProcessLogicalHdrSqs
-      batchSize: 10
-
-PaginateProLogicalDsq:
-  handler: src/generatedCode/ProcessLogical/source/PaginateProcessLogical_HdrDsq.main
-  name: ${self:custom.iz_resourcePrefix}PaginateProcessLogicalHdrDsq
-  role: ProcFindDataRole
-  #<#PaginateProcessLogicalhdrDsqFunctionSetting#>
-  #<#/PaginateProcessLogicalhdrDsqFunctionSetting#>
-  events:
-    - sqs:
-        arn: arn:aws:sqs:${self:custom.iz_region}:${self:custom.iz_accountId}:${self:custom.iz_resourcePrefix}PaginateProcessLogicalHdrDsq
-        batchSize: 10
-
-PaginateProLogicalSqs:
-  handler: src/generatedCode/ProcessLogical/source/PaginateProcessLogical_HdrSqs.main
-  name: ${self:custom.iz_resourcePrefix}PaginateProcessLogicalHdrSqs
-  role: ProcFindDataRole
-  #<#PaginateProcessLogicalHdrSqsFunctionSetting#>
-  #<#/PaginateProcessLogicalHdrSqsFunctionSetting#>
-  events:
-    - sqs:
-        arn: arn:aws:sqs:${self:custom.iz_region}:${self:custom.iz_accountId}:${self:custom.iz_resourcePrefix}PaginateProcessLogicalHdrSqs
-        batchSize: 10

package/src/codeGenerators/app/sls_yaml/templates/RoleNameConfig_Yaml.ejs

@@ -1,5 +0,0 @@
-# for createIamRole
-
-<% roleNameConfigs.forEach(roleNameConfig => { _%>
-- arn:aws:iam::${self:custom.iz_accountId}:role/${self:custom.iz_resourcePrefix}<%- roleNameConfig %>
-<% }) _%>