@izara_project/izara-core-generate-service-code 1.0.67 → 1.0.69

package/test/resourceArtifacts.test.js

@@ -4,56 +4,137 @@ import { tmpdir } from 'node:os';
 import { join } from 'node:path';
 import test, { after } from 'node:test';
 
+process.env.NODE_ENV = 'test';
+
 import { generateResourceArtifacts } from '../src/emit/resource/generateResourceArtifacts.js';
 
 const roots = new Set();
-after(() => Promise.all([...roots].map(root => rm(root, { recursive: true, force: true }))));
+after(() =>
+  Promise.all(
+    [...roots].map((root) => rm(root, { recursive: true, force: true }))
+  )
+);
 
 test('emits queues, topics, tables, and IAM roles from schema data', async () => {
   const rootPath = await createProject();
   const result = await generateResourceArtifacts(rootPath);
 
-  assert.equal(result.files.length, 4);
-  const resources = await readFile(join(rootPath, 'resource/sls_yaml/generatedCode/source/generated-sns-in-sqs.yml'), 'utf8');
+  assert.equal(result.files.length, 5);
+  const resources = await readFile(
+    join(
+      rootPath,
+      'resource/sls_yaml/generatedCode/source/generated-sns-in-sqs.yml'
+    ),
+    'utf8'
+  );
+  assert.match(
+    resources,
+    /SubscriptionOutCreateToUploadReservedLimitHdrSqs:/
+  );
+  assert.match(resources, /TopicArn: !Ref OutCreate/);
+  assert.match(
+    resources,
+    /Endpoint: "arn:aws:sqs:\${self:custom\.iz_region}:\${self:custom\.iz_accountId}:\${self:custom\.iz_resourcePrefix}UploadReservedLimitHdrSqs"/
+  );
   assert.match(resources, /InCreate:/);
-  for (const queueName of ['FindDataHdrSqs', 'ProcessLogicalHdrSqs', 'PaginateProcessLogicalHdrDsq', 'PaginateProcessLogicalHdrSqs']) {
+  for (const queueName of [
+    'FindDataHdrSqs',
+    'ProcessLogicalHdrSqs',
+    'PaginateProcessLogicalHdrDsq',
+    'PaginateProcessLogicalHdrSqs'
+  ]) {
     assert.match(resources, new RegExp(`^  ${queueName}:`, 'm'));
   }
   assert.match(
-    await readFile(join(rootPath, 'resource/sls_yaml/generatedCode/source/generated-dynamoDB-table.yml'), 'utf8'),
+    await readFile(
+      join(
+        rootPath,
+        'resource/sls_yaml/generatedCode/source/generated-dynamoDB-table.yml'
+      ),
+      'utf8'
+    ),
     /OrdersTable:/
   );
-  const iam = await readFile(join(rootPath, 'app/sls_yaml/generatedCode/source/generate-shared-resource.yml'), 'utf8');
+  const iam = await readFile(
+    join(
+      rootPath,
+      'app/sls_yaml/generatedCode/source/generate-shared-resource.yml'
+    ),
+    'utf8'
+  );
   assert.match(iam, /FlowObjectsRole:/);
   assert.match(iam, /FlowRelationshipRole:/);
   assert.match(iam, /FlowRbacRole:/);
   assert.match(iam, /sqs:ReceiveMessage/);
   assert.match(iam, /sns:Publish/);
-  assert.doesNotMatch(roleBlock(iam, 'WebSocketMainRole'), /Orders|RolePermissions|CreateHdrSqs/);
-  assert.match(roleBlock(iam, 'WebSocketMainRole'), /UserUploadRecords|WebSocketTask|WebSocketCompleteHdrSqs/);
-  assert.doesNotMatch(roleBlock(iam, 'FlowRbacRole'), /Orders|ProcessCreateRelationshipHdrSqs/);
-  assert.match(roleBlock(iam, 'FlowRbacRole'), /RolePermissions|ProcessCreateTargetRoleHdrSqs/);
+  assert.doesNotMatch(
+    roleBlock(iam, 'WebSocketMainRole'),
+    /Orders|RolePermissions|CreateHdrSqs/
+  );
+  assert.match(
+    roleBlock(iam, 'WebSocketMainRole'),
+    /UserUploadRecords|WebSocketTask|WebSocketCompleteHdrSqs/
+  );
+  assert.doesNotMatch(
+    roleBlock(iam, 'FlowRbacRole'),
+    /Orders|ProcessCreateRelationshipHdrSqs/
+  );
+  assert.match(
+    roleBlock(iam, 'FlowRbacRole'),
+    /RolePermissions|ProcessCreateTargetRoleHdrSqs/
+  );
   assert.match(resources, /^  CreateRelationshipHdrSqs:/m);
-  assert.equal((resources.match(/^  CreateRelationshipHdrSqs:/gm) ?? []).length, 1);
+  assert.equal(
+    (resources.match(/^  CreateRelationshipHdrSqs:/gm) ?? []).length,
+    1
+  );
   assert.match(resources, /^  CreateRelationshipCompleteHdrSqs:/m);
   assert.match(resources, /^  GetRelationshipHdrDsq:/m);
-  assert.doesNotMatch(resources, /Process(?:Create|Update|Delete|Get|Change|Move)Relationship/);
+  assert.doesNotMatch(
+    resources,
+    /Process(?:Create|Update|Delete|Get|Change|Move)Relationship/
+  );
   const relationshipRole = roleBlock(iam, 'FlowRelationshipRole');
   assert.match(relationshipRole, /CreateRelationshipHdrSqs/);
   assert.match(relationshipRole, /CreateRelationshipCompleteHdrSqs/);
   assert.match(relationshipRole, /GetRelationshipHdrDsq/);
-  assert.doesNotMatch(relationshipRole, /Process(?:Create|Update|Delete|Get|Change|Move)Relationship/);
+  assert.doesNotMatch(
+    relationshipRole,
+    /Process(?:Create|Update|Delete|Get|Change|Move)Relationship/
+  );
   assert.match(roleBlock(iam, 'RegisterRole'), /s3:GetObject/);
   assert.doesNotMatch(roleBlock(iam, 'RegisterRole'), /dynamodb:|sqs:|sns:/);
-  assert.doesNotMatch(iam, /s3:GetObjectVersion|s3:ListBucket|sqs:DeleteMessageBatch|sqs:GetQueueUrl/);
+  assert.doesNotMatch(
+    iam,
+    /s3:GetObjectVersion|s3:ListBucket|sqs:DeleteMessageBatch|sqs:GetQueueUrl/
+  );
   assert.match(iam, /#<#\/\w+StatementHookCode#>\n\n  \w+Role:/);
+
+  const lambdaRoleConfig = await readFile(
+    join(
+      rootPath,
+      'app/initial_setup/generatedCode/source/generatedLambdaRoleServiceConfig.js'
+    ),
+    'utf8'
+  );
+  assert.match(lambdaRoleConfig, /roleName: 'FlowObjects'/);
+  assert.match(lambdaRoleConfig, /roleName: 'ProcFindData'/);
+  assert.match(lambdaRoleConfig, /roleName: 'FlowRelationship'/);
+  assert.doesNotMatch(lambdaRoleConfig, /roleName: 'FlowObjectsRole'/);
+  assert.doesNotMatch(lambdaRoleConfig, /roleName: 'ProcFindDataRole'/);
+  assert.doesNotMatch(lambdaRoleConfig, /roleName: 'FlowRelationshipRole'/);
+
   for (const filePath of [
     'resource/sls_yaml/generatedCode/source/generated-sns-in-sqs.yml',
     'resource/sls_yaml/generatedCode/source/generated-sns-out.yml',
     'resource/sls_yaml/generatedCode/source/generated-dynamoDB-table.yml',
-    'app/sls_yaml/generatedCode/source/generate-shared-resource.yml'
+    'app/sls_yaml/generatedCode/source/generate-shared-resource.yml',
+    'app/initial_setup/generatedCode/source/generatedLambdaRoleServiceConfig.js'
   ]) {
-    assert.doesNotMatch(await readFile(join(rootPath, filePath), 'utf8'), /\n\n$/);
+    assert.doesNotMatch(
+      await readFile(join(rootPath, filePath), 'utf8'),
+      /\n\n$/
+    );
   }
 });
 
@@ -67,8 +148,17 @@ test('emits one before-logical queue for flows that share an action', async () =
 
   await generateResourceArtifacts(rootPath);
 
-  const resources = await readFile(join(rootPath, 'resource/sls_yaml/generatedCode/source/generated-sns-in-sqs.yml'), 'utf8');
-  assert.equal((resources.match(/^  CreateBeforeLogicalHdrSqs:/gm) ?? []).length, 1);
+  const resources = await readFile(
+    join(
+      rootPath,
+      'resource/sls_yaml/generatedCode/source/generated-sns-in-sqs.yml'
+    ),
+    'utf8'
+  );
+  assert.equal(
+    (resources.match(/^  CreateBeforeLogicalHdrSqs:/gm) ?? []).length,
+    1
+  );
   assert.match(resources, /SubscriptionOutFirstToCreateBeforeLogical:/);
   assert.match(resources, /SubscriptionOutSecondToCreateBeforeLogical:/);
 });
@@ -77,45 +167,105 @@ test('emits the shared WebSocket completion queue and output-topic subscriptions
   const rootPath = await createProject();
   await generateResourceArtifacts(rootPath);
 
-  const resources = await readFile(join(rootPath, 'resource/sls_yaml/generatedCode/source/generated-sns-in-sqs.yml'), 'utf8');
+  const resources = await readFile(
+    join(
+      rootPath,
+      'resource/sls_yaml/generatedCode/source/generated-sns-in-sqs.yml'
+    ),
+    'utf8'
+  );
   assert.match(resources, /^  WebSocketCompleteHdrSqs:/m);
   assert.match(resources, /SubscriptionToOutCustomWebSocketComplete:/);
-  const iam = await readFile(join(rootPath, 'app/sls_yaml/generatedCode/source/generate-shared-resource.yml'), 'utf8');
-  for (const roleName of ['WebSocketMainRole', 'FlowObjectsRole', 'FlowRelationshipRole', 'FlowRbacRole', 'CustomRole', 'UploadRole']) {
+  const iam = await readFile(
+    join(
+      rootPath,
+      'app/sls_yaml/generatedCode/source/generate-shared-resource.yml'
+    ),
+    'utf8'
+  );
+  for (const roleName of [
+    'WebSocketMainRole',
+    'FlowObjectsRole',
+    'FlowRelationshipRole',
+    'FlowRbacRole',
+    'CustomRole',
+    'UploadRole'
+  ]) {
     const role = roleBlock(iam, roleName);
     assert.match(role, /execute-api:ManageConnections/);
-    assert.match(role, /arn:aws:execute-api:\$\{self:custom\.iz_region\}:\$\{self:custom\.iz_accountId\}:\*\/\*/);
+    assert.match(
+      role,
+      /arn:aws:execute-api:\$\{self:custom\.iz_region\}:\$\{self:custom\.iz_accountId\}:\*\/\*/
+    );
   }
-  assert.match(resources, /SubscriptionToOutCreateRelationshipWebSocketComplete:/);
+  assert.match(
+    resources,
+    /SubscriptionToOutCreateRelationshipWebSocketComplete:/
+  );
 });
 
 test('scopes stored-cache permissions to the flow object table', async () => {
   const rootPath = await createProject();
-  await writeFile(join(rootPath, 'app/src/schemas/ObjectSchemas/Cache.js'), "export default { objectType: 'cache', storageResources: { main: { storageType: 'dynamoDB', tableName: 'CurrentData' } } };\n");
-  await writeFile(join(rootPath, 'app/src/schemas/FlowSchemas/Cache.js'), "export default { flowTag: 'cacheFlow', event: ['lambdaSyncApi'], statusType: 'storedCache', objType: { objectType: 'cache' } };\n");
+  await writeFile(
+    join(rootPath, 'app/src/schemas/ObjectSchemas/Cache.js'),
+    "export default { objectType: 'cache', storageResources: { main: { storageType: 'dynamoDB', tableName: 'CurrentData' } } };\n"
+  );
+  await writeFile(
+    join(rootPath, 'app/src/schemas/FlowSchemas/Cache.js'),
+    "export default { flowTag: 'cacheFlow', event: ['lambdaSyncApi'], statusType: 'storedCache', objType: { objectType: 'cache' } };\n"
+  );
 
   await generateResourceArtifacts(rootPath);
 
-  const iam = await readFile(join(rootPath, 'app/sls_yaml/generatedCode/source/generate-shared-resource.yml'), 'utf8');
+  const iam = await readFile(
+    join(
+      rootPath,
+      'app/sls_yaml/generatedCode/source/generate-shared-resource.yml'
+    ),
+    'utf8'
+  );
   const role = roleBlock(iam, 'CacheFlowRole');
   assert.match(role, /CurrentData/);
   assert.doesNotMatch(role, /Orders|WebSocketTask/);
 });
 
 function roleBlock(iam, roleName) {
-  const match = iam.match(new RegExp(`^  ${roleName}:\\n(?:(?!^  [A-Za-z][A-Za-z0-9]*Role:\\n)[\\s\\S])*`, 'm'));
+  const match = iam.match(
+    new RegExp(
+      `^  ${roleName}:\\n(?:(?!^  [A-Za-z][A-Za-z0-9]*Role:\\n)[\\s\\S])*`,
+      'm'
+    )
+  );
   assert.ok(match, `Missing ${roleName} in generated IAM`);
   return match[0];
 }
 
 async function createProject() {
-  const rootPath = await mkdtemp(join(tmpdir(), 'generate-service-code-v2-resource-'));
+  const rootPath = await mkdtemp(
+    join(tmpdir(), 'generate-service-code-v2-resource-')
+  );
   roots.add(rootPath);
   const schemas = join(rootPath, 'app/src/schemas');
-  await Promise.all(['ObjectSchemas', 'RelationshipSchemas', 'FlowSchemas'].map(directory => mkdir(join(schemas, directory), { recursive: true })));
-  await writeFile(join(schemas, 'ObjectSchemas/Order.js'), "export default { objectType: 'order', generatedBy: 'userGenerated', addOnDataStructure: [{ type: 'rbac' }], identifiers: [{ type: 'partitionKey', fieldName: 'orderId' }], storageResources: { main: { storageType: 'dynamoDB', tableName: 'Orders' } } };\n");
-  await writeFile(join(schemas, 'RelationshipSchemas/OrderCustomer.js'), "export default { relationshipTag: 'orderCustomer', links: [] };\n");
-  await writeFile(join(schemas, 'FlowSchemas/Custom.js'), "export default { flowTag: 'custom', event: ['ownTopic'], outputTopic: true };\n");
-  await writeFile(join(schemas, 'FlowSchemas/Upload.js'), "export default { flowTag: 'upload', event: ['s3'] };\n");
+  await Promise.all(
+    ['ObjectSchemas', 'RelationshipSchemas', 'FlowSchemas'].map((directory) =>
+      mkdir(join(schemas, directory), { recursive: true })
+    )
+  );
+  await writeFile(
+    join(schemas, 'ObjectSchemas/Order.js'),
+    "export default { objectType: 'order', generatedBy: 'userGenerated', addOnDataStructure: [{ type: 'rbac' }], identifiers: [{ type: 'partitionKey', fieldName: 'orderId' }], storageResources: { main: { storageType: 'dynamoDB', tableName: 'Orders' } } };\n"
+  );
+  await writeFile(
+    join(schemas, 'RelationshipSchemas/OrderCustomer.js'),
+    "export default { relationshipTag: 'orderCustomer', links: [] };\n"
+  );
+  await writeFile(
+    join(schemas, 'FlowSchemas/Custom.js'),
+    "export default { flowTag: 'custom', event: ['ownTopic'], outputTopic: true };\n"
+  );
+  await writeFile(
+    join(schemas, 'FlowSchemas/Upload.js'),
+    "export default { flowTag: 'upload', event: ['s3'], s3Subscription: { topicName: 'OutCreate', queueName: 'UploadReservedLimitHdrSqs' } };\n"
+  );
   return rootPath;
 }

package/src/emit/rbac/templates/UserRbacFlow_HdrInv.ejs

@@ -1,10 +0,0 @@
-import { middlewareHandler as middleware } from '@izara_project/izara-middleware';
-import callingFlowSharedLib from '@izara_project/izara-core-library-calling-flow';
-import Process<%- flowTag %> from './Process<%- flowTag %>_Main.js';
-
-middleware.setValidatorSchema({});
-export const main = middleware.wrap(async event => Process<%- flowTag %>(
-  event._izContext,
-  event,
-  callingFlowSharedLib.addCallingFlowToPassOnProperties(event)
-));

package/src/emit/relationship/dynamicRelationshipFlowSchemaTemplate.js

@@ -1,11 +0,0 @@
-export function renderDynamicRelationshipFlowSchema(action, flow) {
-  return [
-    '/**',
-    ' * GENERATED DYNAMIC RELATIONSHIP FLOW SCHEMA',
-    ` * Action: ${action}`,
-    ' * Description: Handles dynamic relationship actions for all allowed RelationshipTypes via SQS/DSQ',
-    ' */',
-    `export default ${JSON.stringify(flow, null, 2)};`,
-    ''
-  ].join('\n');
-}