@qpqjs/cli 0.0.0-stage → 0.2.1

package/lib/esm/platforms/aws/cdkApp.js

@@ -0,0 +1,22 @@
+import path from 'path';
+import { getOwnPackageRoot } from '../../lib/packageRoot';
+// The CDK app command (`cdk ... --app "<this>"`): @qpqjs/deploy-aws's
+// generic workspace app under ts-node hooks, with DEPLOY_* in the env.
+export const getCdkAppCommand = () => {
+    // Resolve ts-node from this package, not the workspace cwd — under npm link
+    // the CLI's dependencies are never hoisted into the workspace's node_modules,
+    // so a bare `-r ts-node/...` preload fails there.
+    const tsNodeRegister = require.resolve('ts-node/register/transpile-only');
+    const cdkAppScript = path.join(getOwnPackageRoot(), 'lib', 'commonjs', 'bin', 'qpqCdkApp.js');
+    return `node -r "${tsNodeRegister}" "${cdkAppScript}"`;
+};
+// The CLI's own aws-cdk. The go:docker deployer image pins to it and a saved
+// build records it, so the CDK that deploys an assembly is always the one that
+// synthesized it and can read its schema.
+export const getCdkCliVersion = () => {
+    // eslint-disable-next-line @typescript-eslint/no-require-imports
+    return require('aws-cdk/package.json').version;
+};
+// The docker build context for the go:docker deployer image.
+export const getDockerDir = () => path.join(getOwnPackageRoot(), 'docker', 'cdk-deployer');
+//# sourceMappingURL=cdkApp.js.map

package/lib/esm/platforms/aws/cdkApp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cdkApp.js","sourceRoot":"","sources":["../../../../src/platforms/aws/cdkApp.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE1D,sEAAsE;AACtE,uEAAuE;AACvE,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAW,EAAE;IAC3C,4EAA4E;IAC5E,8EAA8E;IAC9E,kDAAkD;IAClD,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC;IAC1E,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;IAC9F,OAAO,YAAY,cAAc,MAAM,YAAY,GAAG,CAAC;AACzD,CAAC,CAAC;AAEF,6EAA6E;AAC7E,+EAA+E;AAC/E,0CAA0C;AAC1C,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAW,EAAE;IAC3C,iEAAiE;IACjE,OAAO,OAAO,CAAC,sBAAsB,CAAC,CAAC,OAAiB,CAAC;AAC3D,CAAC,CAAC;AAEF,6DAA6D;AAC7D,MAAM,CAAC,MAAM,YAAY,GAAG,GAAW,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC","sourcesContent":["import path from 'path';\n\nimport { getOwnPackageRoot } from '../../lib/packageRoot';\n\n// The CDK app command (`cdk ... --app \"<this>\"`): @qpqjs/deploy-aws's\n// generic workspace app under ts-node hooks, with DEPLOY_* in the env.\nexport const getCdkAppCommand = (): string => {\n  // Resolve ts-node from this package, not the workspace cwd — under npm link\n  // the CLI's dependencies are never hoisted into the workspace's node_modules,\n  // so a bare `-r ts-node/...` preload fails there.\n  const tsNodeRegister = require.resolve('ts-node/register/transpile-only');\n  const cdkAppScript = path.join(getOwnPackageRoot(), 'lib', 'commonjs', 'bin', 'qpqCdkApp.js');\n  return `node -r \"${tsNodeRegister}\" \"${cdkAppScript}\"`;\n};\n\n// The CLI's own aws-cdk. The go:docker deployer image pins to it and a saved\n// build records it, so the CDK that deploys an assembly is always the one that\n// synthesized it and can read its schema.\nexport const getCdkCliVersion = (): string => {\n  // eslint-disable-next-line @typescript-eslint/no-require-imports\n  return require('aws-cdk/package.json').version as string;\n};\n\n// The docker build context for the go:docker deployer image.\nexport const getDockerDir = (): string => path.join(getOwnPackageRoot(), 'docker', 'cdk-deployer');\n"]}

package/lib/esm/platforms/aws/clearResources.d.ts

@@ -0,0 +1,2 @@
+import { ClearResourcesPlan } from '../../lib/clearResourcesPlan';
+export declare const awsClearResources: (appName: string, plan: ClearResourcesPlan) => Promise<void>;

package/lib/esm/platforms/aws/clearResources.js

@@ -0,0 +1,151 @@
+// AWS implementation of `qpq clear-resources`: empty (never delete) the
+// selected data resources. Storage drives are S3 buckets - emptied including
+// every object version and delete marker, so versioned buckets come out clean
+// too. Key value stores are DynamoDB tables - truncated by scanning keys only
+// and batch-deleting. The stacks and the resources themselves are untouched,
+// so this is the "reset my data" counterpart to `qpq teardown`.
+//
+// Runtime names are resolved from each service's live qpq config with the
+// same naming utils the deployed runtime uses, so what gets emptied is
+// exactly what the app reads and writes.
+import { awsNamingUtils } from '@qpqjs/actionprocessor-aws';
+import { qpqConfigAwsUtils } from '@qpqjs/config-aws';
+import { qpqCoreUtils } from '@qpqjs/core';
+import { BatchWriteItemCommand, DescribeTableCommand, DynamoDBClient, ResourceNotFoundException, ScanCommand, } from '@aws-sdk/client-dynamodb';
+import { DeleteObjectsCommand, ListObjectVersionsCommand, NoSuchBucket, S3Client } from '@aws-sdk/client-s3';
+import { loadServiceQpqConfig } from '../../lib/qpqConfigs';
+import { isAwsCredentialsValid } from './awsCredentials';
+// Same resolution as the runtime's resolveStorageDriveBucketName (not exported
+// from the actionprocessor package root): honour the cross-module owner and
+// its resourceNameOverride.
+const resolveBucketName = (drive, qpqConfig) => {
+    const storageDriveConfig = qpqCoreUtils.getStorageDriveByName(drive, qpqConfig);
+    if (!storageDriveConfig) {
+        throw new Error(`Could not find storage drive config for [${drive}]`);
+    }
+    return awsNamingUtils.getConfigRuntimeResourceNameFromConfigWithServiceOverride(storageDriveConfig.owner?.resourceNameOverride || drive, qpqConfig, storageDriveConfig.owner?.module);
+};
+// Log a progress heartbeat roughly every this-many removals, so a large
+// resource visibly ticks along instead of looking hung.
+const PROGRESS_EVERY = 2000;
+// Empty a bucket including all versions + delete markers. Returns the number
+// of objects/versions removed.
+const emptyBucket = async (bucketName, region) => {
+    const s3 = new S3Client({ region });
+    let removed = 0;
+    let lastReported = 0;
+    let keyMarker;
+    let versionIdMarker;
+    do {
+        const page = await s3.send(new ListObjectVersionsCommand({ Bucket: bucketName, KeyMarker: keyMarker, VersionIdMarker: versionIdMarker }));
+        const objects = [...(page.Versions ?? []), ...(page.DeleteMarkers ?? [])].map((v) => ({
+            Key: v.Key,
+            VersionId: v.VersionId,
+        }));
+        if (objects.length > 0) {
+            await s3.send(new DeleteObjectsCommand({ Bucket: bucketName, Delete: { Objects: objects, Quiet: true } }));
+            removed += objects.length;
+        }
+        if (removed - lastReported >= PROGRESS_EVERY) {
+            console.log(`    ... ${removed} objects/versions so far`);
+            lastReported = removed;
+        }
+        keyMarker = page.IsTruncated ? page.NextKeyMarker : undefined;
+        versionIdMarker = page.IsTruncated ? page.NextVersionIdMarker : undefined;
+    } while (keyMarker || versionIdMarker);
+    return removed;
+};
+// Truncate a table: scan key attributes only, batch-delete 25 at a time,
+// retrying unprocessed items. Returns the number of items removed.
+const truncateTable = async (tableName, region) => {
+    const dynamo = new DynamoDBClient({ region });
+    const described = await dynamo.send(new DescribeTableCommand({ TableName: tableName }));
+    const keyAttributes = (described.Table?.KeySchema ?? []).map((k) => k.AttributeName);
+    // Alias every key attribute - a raw name could collide with a reserved word.
+    const projection = keyAttributes.map((_, i) => `#k${i}`).join(', ');
+    const attributeNames = Object.fromEntries(keyAttributes.map((attribute, i) => [`#k${i}`, attribute]));
+    let removed = 0;
+    let lastReported = 0;
+    let exclusiveStartKey;
+    do {
+        const page = await dynamo.send(new ScanCommand({
+            TableName: tableName,
+            ProjectionExpression: projection,
+            ExpressionAttributeNames: attributeNames,
+            ExclusiveStartKey: exclusiveStartKey,
+        }));
+        const items = page.Items ?? [];
+        for (let i = 0; i < items.length; i += 25) {
+            let requests = items.slice(i, i + 25).map((item) => ({ DeleteRequest: { Key: item } }));
+            while (requests.length > 0) {
+                const result = await dynamo.send(new BatchWriteItemCommand({ RequestItems: { [tableName]: requests } }));
+                removed += requests.length;
+                const unprocessed = result.UnprocessedItems?.[tableName] ?? [];
+                removed -= unprocessed.length;
+                requests = unprocessed;
+                if (requests.length > 0) {
+                    // Throttled - back off briefly before retrying the leftovers.
+                    await new Promise((resolve) => setTimeout(resolve, 250));
+                }
+            }
+        }
+        if (removed - lastReported >= PROGRESS_EVERY) {
+            console.log(`    ... ${removed} items so far`);
+            lastReported = removed;
+        }
+        exclusiveStartKey = page.LastEvaluatedKey;
+    } while (exclusiveStartKey);
+    return removed;
+};
+const clearResource = async (appName, resource) => {
+    const qpqConfig = loadServiceQpqConfig(appName, resource.service);
+    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);
+    if (resource.kind === 'storageDrive') {
+        const bucketName = resolveBucketName(resource.resourceName, qpqConfig);
+        console.log(`  emptying s3://${bucketName} ...`);
+        try {
+            const removed = await emptyBucket(bucketName, region);
+            console.log(`  emptied s3://${bucketName} (${removed} objects/versions)`);
+        }
+        catch (error) {
+            if (error instanceof NoSuchBucket) {
+                console.log(`  skipped s3://${bucketName} (bucket does not exist - not deployed?)`);
+                return;
+            }
+            throw error;
+        }
+        return;
+    }
+    // 'kvs' matches the resourceType every runtime KVS action processor passes,
+    // giving the deployed '-qpqkvs' table name suffix.
+    const tableName = awsNamingUtils.getKvsDynamoTableNameFromConfig(resource.resourceName, qpqConfig, 'kvs');
+    console.log(`  truncating ${tableName} ...`);
+    try {
+        const removed = await truncateTable(tableName, region);
+        console.log(`  truncated ${tableName} (${removed} items)`);
+    }
+    catch (error) {
+        if (error instanceof ResourceNotFoundException) {
+            console.log(`  skipped ${tableName} (table does not exist - not deployed?)`);
+            return;
+        }
+        throw error;
+    }
+};
+export const awsClearResources = async (appName, plan) => {
+    if (plan.kind === 'cancelled') {
+        return;
+    }
+    if ((await isAwsCredentialsValid()) === false) {
+        console.log('Credentials are expired or invalid.');
+        return;
+    }
+    console.log('\nEmptying resources:');
+    // Sequential on purpose: predictable output, and no burst of parallel scans
+    // against provisioned-throughput tables.
+    for (const resource of plan.resources) {
+        await clearResource(appName, resource);
+    }
+    console.log('Done.');
+};
+//# sourceMappingURL=clearResources.js.map

package/lib/esm/platforms/aws/clearResources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clearResources.js","sourceRoot":"","sources":["../../../../src/platforms/aws/clearResources.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,6EAA6E;AAC7E,8EAA8E;AAC9E,8EAA8E;AAC9E,6EAA6E;AAC7E,gEAAgE;AAChE,EAAE;AACF,0EAA0E;AAC1E,uEAAuE;AACvE,yCAAyC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAa,YAAY,EAAE,MAAM,aAAa,CAAC;AAEtD,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,cAAc,EACd,yBAAyB,EACzB,WAAW,GAEZ,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,YAAY,EAAoB,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAG/H,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAEzD,+EAA+E;AAC/E,4EAA4E;AAC5E,4BAA4B;AAC5B,MAAM,iBAAiB,GAAG,CAAC,KAAa,EAAE,SAAoB,EAAU,EAAE;IACxE,MAAM,kBAAkB,GAAG,YAAY,CAAC,qBAAqB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAEhF,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,4CAA4C,KAAK,GAAG,CAAC,CAAC;IACxE,CAAC;IAED,OAAO,cAAc,CAAC,yDAAyD,CAC7E,kBAAkB,CAAC,KAAK,EAAE,oBAAoB,IAAI,KAAK,EACvD,SAAS,EACT,kBAAkB,CAAC,KAAK,EAAE,MAAM,CACjC,CAAC;AACJ,CAAC,CAAC;AAEF,wEAAwE;AACxE,wDAAwD;AACxD,MAAM,cAAc,GAAG,IAAI,CAAC;AAE5B,6EAA6E;AAC7E,+BAA+B;AAC/B,MAAM,WAAW,GAAG,KAAK,EAAE,UAAkB,EAAE,MAAc,EAAmB,EAAE;IAChF,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IACpC,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,SAA6B,CAAC;IAClC,IAAI,eAAmC,CAAC;IAExC,GAAG,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,yBAAyB,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,eAAe,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC;QAE1I,MAAM,OAAO,GAAuB,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACxG,GAAG,EAAE,CAAC,CAAC,GAAI;YACX,SAAS,EAAE,CAAC,CAAC,SAAS;SACvB,CAAC,CAAC,CAAC;QAEJ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;YAC3G,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC;QAC5B,CAAC;QAED,IAAI,OAAO,GAAG,YAAY,IAAI,cAAc,EAAE,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,WAAW,OAAO,0BAA0B,CAAC,CAAC;YAC1D,YAAY,GAAG,OAAO,CAAC;QACzB,CAAC;QAED,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9D,eAAe,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,CAAC,QAAQ,SAAS,IAAI,eAAe,EAAE;IAEvC,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEF,yEAAyE;AACzE,mEAAmE;AACnE,MAAM,aAAa,GAAG,KAAK,EAAE,SAAiB,EAAE,MAAc,EAAmB,EAAE;IACjF,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IAE9C,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,oBAAoB,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IACxF,MAAM,aAAa,GAAG,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAc,CAAC,CAAC;IAEtF,6EAA6E;IAC7E,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpE,MAAM,cAAc,GAAG,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IAEtG,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,iBAAkD,CAAC;IAEvD,GAAG,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAC5B,IAAI,WAAW,CAAC;YACd,SAAS,EAAE,SAAS;YACpB,oBAAoB,EAAE,UAAU;YAChC,wBAAwB,EAAE,cAAc;YACxC,iBAAiB,EAAE,iBAAiB;SACrC,CAAC,CACH,CAAC;QAEF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAE/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;YAC1C,IAAI,QAAQ,GAAmB,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,aAAa,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;YAExG,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,qBAAqB,CAAC,EAAE,YAAY,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;gBACzG,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC;gBAE3B,MAAM,WAAW,GAAG,MAAM,CAAC,gBAAgB,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;gBAC/D,OAAO,IAAI,WAAW,CAAC,MAAM,CAAC;gBAC9B,QAAQ,GAAG,WAAW,CAAC;gBAEvB,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACxB,8DAA8D;oBAC9D,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;gBAC3D,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,OAAO,GAAG,YAAY,IAAI,cAAc,EAAE,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,WAAW,OAAO,eAAe,CAAC,CAAC;YAC/C,YAAY,GAAG,OAAO,CAAC;QACzB,CAAC;QAED,iBAAiB,GAAG,IAAI,CAAC,gBAAgB,CAAC;IAC5C,CAAC,QAAQ,iBAAiB,EAAE;IAE5B,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,KAAK,EAAE,OAAe,EAAE,QAA2B,EAAiB,EAAE;IAC1F,MAAM,SAAS,GAAG,oBAAoB,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,iBAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;IAE7E,IAAI,QAAQ,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QACrC,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QACvE,OAAO,CAAC,GAAG,CAAC,mBAAmB,UAAU,MAAM,CAAC,CAAC;QACjD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACtD,OAAO,CAAC,GAAG,CAAC,kBAAkB,UAAU,KAAK,OAAO,oBAAoB,CAAC,CAAC;QAC5E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,YAAY,EAAE,CAAC;gBAClC,OAAO,CAAC,GAAG,CAAC,kBAAkB,UAAU,0CAA0C,CAAC,CAAC;gBACpF,OAAO;YACT,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,OAAO;IACT,CAAC;IAED,4EAA4E;IAC5E,mDAAmD;IACnD,MAAM,SAAS,GAAG,cAAc,CAAC,+BAA+B,CAAC,QAAQ,CAAC,YAAY,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IAC1G,OAAO,CAAC,GAAG,CAAC,gBAAgB,SAAS,MAAM,CAAC,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,eAAe,SAAS,KAAK,OAAO,SAAS,CAAC,CAAC;IAC7D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,yBAAyB,EAAE,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,aAAa,SAAS,yCAAyC,CAAC,CAAC;YAC7E,OAAO;QACT,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,EAAE,OAAe,EAAE,IAAwB,EAAiB,EAAE;IAClG,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC9B,OAAO;IACT,CAAC;IAED,IAAI,CAAC,MAAM,qBAAqB,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;QACnD,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IAErC,4EAA4E;IAC5E,yCAAyC;IACzC,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,MAAM,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACzC,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACvB,CAAC,CAAC","sourcesContent":["// AWS implementation of `qpq clear-resources`: empty (never delete) the\n// selected data resources. Storage drives are S3 buckets - emptied including\n// every object version and delete marker, so versioned buckets come out clean\n// too. Key value stores are DynamoDB tables - truncated by scanning keys only\n// and batch-deleting. The stacks and the resources themselves are untouched,\n// so this is the \"reset my data\" counterpart to `qpq teardown`.\n//\n// Runtime names are resolved from each service's live qpq config with the\n// same naming utils the deployed runtime uses, so what gets emptied is\n// exactly what the app reads and writes.\nimport { awsNamingUtils } from '@qpqjs/actionprocessor-aws';\nimport { qpqConfigAwsUtils } from '@qpqjs/config-aws';\nimport { QPQConfig, qpqCoreUtils } from '@qpqjs/core';\n\nimport {\n  BatchWriteItemCommand,\n  DescribeTableCommand,\n  DynamoDBClient,\n  ResourceNotFoundException,\n  ScanCommand,\n  WriteRequest,\n} from '@aws-sdk/client-dynamodb';\nimport { DeleteObjectsCommand, ListObjectVersionsCommand, NoSuchBucket, ObjectIdentifier, S3Client } from '@aws-sdk/client-s3';\n\nimport { ClearableResource, ClearResourcesPlan } from '../../lib/clearResourcesPlan';\nimport { loadServiceQpqConfig } from '../../lib/qpqConfigs';\nimport { isAwsCredentialsValid } from './awsCredentials';\n\n// Same resolution as the runtime's resolveStorageDriveBucketName (not exported\n// from the actionprocessor package root): honour the cross-module owner and\n// its resourceNameOverride.\nconst resolveBucketName = (drive: string, qpqConfig: QPQConfig): string => {\n  const storageDriveConfig = qpqCoreUtils.getStorageDriveByName(drive, qpqConfig);\n\n  if (!storageDriveConfig) {\n    throw new Error(`Could not find storage drive config for [${drive}]`);\n  }\n\n  return awsNamingUtils.getConfigRuntimeResourceNameFromConfigWithServiceOverride(\n    storageDriveConfig.owner?.resourceNameOverride || drive,\n    qpqConfig,\n    storageDriveConfig.owner?.module,\n  );\n};\n\n// Log a progress heartbeat roughly every this-many removals, so a large\n// resource visibly ticks along instead of looking hung.\nconst PROGRESS_EVERY = 2000;\n\n// Empty a bucket including all versions + delete markers. Returns the number\n// of objects/versions removed.\nconst emptyBucket = async (bucketName: string, region: string): Promise<number> => {\n  const s3 = new S3Client({ region });\n  let removed = 0;\n  let lastReported = 0;\n  let keyMarker: string | undefined;\n  let versionIdMarker: string | undefined;\n\n  do {\n    const page = await s3.send(new ListObjectVersionsCommand({ Bucket: bucketName, KeyMarker: keyMarker, VersionIdMarker: versionIdMarker }));\n\n    const objects: ObjectIdentifier[] = [...(page.Versions ?? []), ...(page.DeleteMarkers ?? [])].map((v) => ({\n      Key: v.Key!,\n      VersionId: v.VersionId,\n    }));\n\n    if (objects.length > 0) {\n      await s3.send(new DeleteObjectsCommand({ Bucket: bucketName, Delete: { Objects: objects, Quiet: true } }));\n      removed += objects.length;\n    }\n\n    if (removed - lastReported >= PROGRESS_EVERY) {\n      console.log(`    ... ${removed} objects/versions so far`);\n      lastReported = removed;\n    }\n\n    keyMarker = page.IsTruncated ? page.NextKeyMarker : undefined;\n    versionIdMarker = page.IsTruncated ? page.NextVersionIdMarker : undefined;\n  } while (keyMarker || versionIdMarker);\n\n  return removed;\n};\n\n// Truncate a table: scan key attributes only, batch-delete 25 at a time,\n// retrying unprocessed items. Returns the number of items removed.\nconst truncateTable = async (tableName: string, region: string): Promise<number> => {\n  const dynamo = new DynamoDBClient({ region });\n\n  const described = await dynamo.send(new DescribeTableCommand({ TableName: tableName }));\n  const keyAttributes = (described.Table?.KeySchema ?? []).map((k) => k.AttributeName!);\n\n  // Alias every key attribute - a raw name could collide with a reserved word.\n  const projection = keyAttributes.map((_, i) => `#k${i}`).join(', ');\n  const attributeNames = Object.fromEntries(keyAttributes.map((attribute, i) => [`#k${i}`, attribute]));\n\n  let removed = 0;\n  let lastReported = 0;\n  let exclusiveStartKey: Record<string, any> | undefined;\n\n  do {\n    const page = await dynamo.send(\n      new ScanCommand({\n        TableName: tableName,\n        ProjectionExpression: projection,\n        ExpressionAttributeNames: attributeNames,\n        ExclusiveStartKey: exclusiveStartKey,\n      }),\n    );\n\n    const items = page.Items ?? [];\n\n    for (let i = 0; i < items.length; i += 25) {\n      let requests: WriteRequest[] = items.slice(i, i + 25).map((item) => ({ DeleteRequest: { Key: item } }));\n\n      while (requests.length > 0) {\n        const result = await dynamo.send(new BatchWriteItemCommand({ RequestItems: { [tableName]: requests } }));\n        removed += requests.length;\n\n        const unprocessed = result.UnprocessedItems?.[tableName] ?? [];\n        removed -= unprocessed.length;\n        requests = unprocessed;\n\n        if (requests.length > 0) {\n          // Throttled - back off briefly before retrying the leftovers.\n          await new Promise((resolve) => setTimeout(resolve, 250));\n        }\n      }\n    }\n\n    if (removed - lastReported >= PROGRESS_EVERY) {\n      console.log(`    ... ${removed} items so far`);\n      lastReported = removed;\n    }\n\n    exclusiveStartKey = page.LastEvaluatedKey;\n  } while (exclusiveStartKey);\n\n  return removed;\n};\n\nconst clearResource = async (appName: string, resource: ClearableResource): Promise<void> => {\n  const qpqConfig = loadServiceQpqConfig(appName, resource.service);\n  const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n  if (resource.kind === 'storageDrive') {\n    const bucketName = resolveBucketName(resource.resourceName, qpqConfig);\n    console.log(`  emptying s3://${bucketName} ...`);\n    try {\n      const removed = await emptyBucket(bucketName, region);\n      console.log(`  emptied s3://${bucketName} (${removed} objects/versions)`);\n    } catch (error) {\n      if (error instanceof NoSuchBucket) {\n        console.log(`  skipped s3://${bucketName} (bucket does not exist - not deployed?)`);\n        return;\n      }\n      throw error;\n    }\n    return;\n  }\n\n  // 'kvs' matches the resourceType every runtime KVS action processor passes,\n  // giving the deployed '-qpqkvs' table name suffix.\n  const tableName = awsNamingUtils.getKvsDynamoTableNameFromConfig(resource.resourceName, qpqConfig, 'kvs');\n  console.log(`  truncating ${tableName} ...`);\n  try {\n    const removed = await truncateTable(tableName, region);\n    console.log(`  truncated ${tableName} (${removed} items)`);\n  } catch (error) {\n    if (error instanceof ResourceNotFoundException) {\n      console.log(`  skipped ${tableName} (table does not exist - not deployed?)`);\n      return;\n    }\n    throw error;\n  }\n};\n\nexport const awsClearResources = async (appName: string, plan: ClearResourcesPlan): Promise<void> => {\n  if (plan.kind === 'cancelled') {\n    return;\n  }\n\n  if ((await isAwsCredentialsValid()) === false) {\n    console.log('Credentials are expired or invalid.');\n    return;\n  }\n\n  console.log('\\nEmptying resources:');\n\n  // Sequential on purpose: predictable output, and no burst of parallel scans\n  // against provisioned-throughput tables.\n  for (const resource of plan.resources) {\n    await clearResource(appName, resource);\n  }\n\n  console.log('Done.');\n};\n"]}

package/lib/esm/platforms/aws/go.d.ts

@@ -0,0 +1,2 @@
+import { DeployPlan } from '../../lib/deployPrompts';
+export declare const awsGo: (appName: string, plan: DeployPlan) => Promise<void>;

package/lib/esm/platforms/aws/go.js

@@ -0,0 +1,115 @@
+// AWS sequential deploy (`qpq go`). Per service it: synths the QPQ config,
+// rspack-bundles the backend (programmatic — no per-service rspack.config.ts),
+// deploys the inf/api/web CDK stacks (cdk runs the generic workspace app via
+// --app), bundles views (rspack, production) and syncs them to S3. Finally, any
+// service that opts into module federation has its federated remote published
+// (built + uploaded + manifest flipped), so a deploy that ships new backend
+// code also republishes the code the lambdas federate.
+import { QpqDeployEnvVar } from '@qpqjs/core';
+import { qpqDeployAwsUtils } from '@qpqjs/deploy-aws';
+import { getServiceRspackConfig, runRspack } from '@qpqjs/deploy-rspack';
+import path from 'path';
+import { synthCommand } from '../../commands/synth';
+import { getServiceDirectory, getServiceNamesWithViews } from '../../lib/discovery';
+import { getDefaultHookJobs } from '../../lib/getDefaultHookJobs';
+import { runAppHook, runHookForAppPackages } from '../../lib/hooks';
+import { getServiceNamesWithFederation, loadServiceQpqConfig } from '../../lib/qpqConfigs';
+import { assertNoFailures } from '../../lib/runTasks';
+import { logTimeEnd, logTimeStart } from '../../lib/timing';
+import { bundleViews } from '../../lib/views';
+import { isAwsCredentialsValid } from './awsCredentials';
+import { awsPublish } from './publish';
+import { deployAccountStack, deployBootstrapStack, deployDomainStack, deployServiceStack } from './stacks';
+import { syncViewsToS3 } from './viewsSync';
+const buildAndDeploy = async (serviceName, needsSynth, needsBuildApi, needsInfStack, needsApiStack, needsWebStack, needsViewStack, appName) => {
+    if (needsSynth) {
+        console.log('Synth QPQ Configs');
+        await synthCommand([serviceName, '--app', appName]);
+    }
+    const qpqConfigForService = loadServiceQpqConfig(appName, serviceName);
+    if (needsBuildApi) {
+        console.log('Building Api: ', serviceName);
+        await runRspack(getServiceRspackConfig(qpqConfigForService, path.join(getServiceDirectory(appName, serviceName), 'service')));
+    }
+    if (needsInfStack) {
+        console.log('Deploy Inf: ', serviceName);
+        await deployServiceStack(serviceName, qpqDeployAwsUtils.getInfStackName(qpqConfigForService), appName);
+    }
+    if (needsApiStack) {
+        console.log('Deploy Api: ', serviceName);
+        await deployServiceStack(serviceName, qpqDeployAwsUtils.getApiStackName(qpqConfigForService), appName);
+    }
+    if (needsWebStack) {
+        console.log('Deploy Web: ', serviceName);
+        await deployServiceStack(serviceName, qpqDeployAwsUtils.getWebStackName(qpqConfigForService), appName);
+    }
+    if (needsViewStack && getServiceNamesWithViews(appName).includes(serviceName)) {
+        console.log('Building Views: ', serviceName);
+        await bundleViews(appName, serviceName);
+        await syncViewsToS3(appName, serviceName);
+    }
+};
+export const awsGo = async (appName, plan) => {
+    if (plan.kind === 'cancelled') {
+        return;
+    }
+    logTimeStart('totalTime');
+    if (plan.kind === 'account') {
+        await deployAccountStack(plan.appName);
+        logTimeEnd('totalTime');
+        return;
+    }
+    if (plan.kind === 'bootstrap') {
+        // Feature bootstraps deploy into a shared account — leave the account-level
+        // guardrails stack alone (deploy it explicitly via the 'account' option).
+        if (process.env[QpqDeployEnvVar.featureName]) {
+            console.log('Skipping account stack for feature deploy');
+        }
+        else {
+            await deployAccountStack(plan.appName);
+        }
+        if (plan.includeDomain) {
+            await deployDomainStack(plan.appName);
+        }
+        await deployBootstrapStack(plan.appName);
+        logTimeEnd('totalTime');
+        return;
+    }
+    const { services, stacks } = plan;
+    const shouldBuildApi = stacks !== 'views';
+    console.log('\n\nRunning automated deploy\n\n');
+    console.log('Executing for services');
+    console.log(services.join(', '));
+    if ((await isAwsCredentialsValid()) === false) {
+        console.log('Credentials are expired or invalid.');
+        return;
+    }
+    const allStacks = stacks === 'all';
+    await runAppHook(appName, 'predeploy');
+    // Workspace packages resolve through their built dist/ (package.json main),
+    // so bundles would ship stale code unless every lib is tsc'd first.
+    console.log('Building workspace packages');
+    assertNoFailures('Workspace build', await runHookForAppPackages('build', appName, getDefaultHookJobs()));
+    // Views uploads resolve bucket names from the shell service's config.
+    if (allStacks || stacks === 'views') {
+        await synthCommand(['shell', '--app', appName]);
+    }
+    for (let phase = 0; phase <= 5; phase += 1) {
+        await services.reduce(async (cur, service) => {
+            await cur;
+            return buildAndDeploy(service, phase === 0, phase === 1 && shouldBuildApi, phase === 2 && (allStacks || stacks === 'inf'), phase === 3 && (allStacks || stacks === 'api'), phase === 4 && (allStacks || stacks === 'web'), phase === 5 && (allStacks || stacks === 'views'), appName);
+        }, Promise.resolve());
+    }
+    // Publishing federated remotes only matters once the new backend code is
+    // live, so it's gated on the api stack having been (re)deployed. Services
+    // without defineFederatedModuleStore(...) are skipped.
+    if (allStacks || stacks === 'api') {
+        const federatedServices = getServiceNamesWithFederation(appName, services);
+        if (federatedServices.length > 0) {
+            console.log('\n\nPublishing federated backends\n');
+            await awsPublish(appName, federatedServices);
+        }
+    }
+    logTimeEnd('totalTime');
+};
+//# sourceMappingURL=go.js.map

package/lib/esm/platforms/aws/go.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"go.js","sourceRoot":"","sources":["../../../../src/platforms/aws/go.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,+EAA+E;AAC/E,6EAA6E;AAC7E,gFAAgF;AAChF,8EAA8E;AAC9E,4EAA4E;AAC5E,uDAAuD;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEzE,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEpD,OAAO,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AACpF,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACpE,OAAO,EAAE,6BAA6B,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC3F,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAC3G,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,cAAc,GAAG,KAAK,EAC1B,WAAmB,EACnB,UAAmB,EACnB,aAAsB,EACtB,aAAsB,EACtB,aAAsB,EACtB,aAAsB,EACtB,cAAuB,EACvB,OAAe,EACA,EAAE;IACjB,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QACjC,MAAM,YAAY,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,mBAAmB,GAAG,oBAAoB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAEvE,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC;QAC3C,MAAM,SAAS,CAAC,sBAAsB,CAAC,mBAAmB,EAAE,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IAChI,CAAC;IAED,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QACzC,MAAM,kBAAkB,CAAC,WAAW,EAAE,iBAAiB,CAAC,eAAe,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC,CAAC;IACzG,CAAC;IAED,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QACzC,MAAM,kBAAkB,CAAC,WAAW,EAAE,iBAAiB,CAAC,eAAe,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC,CAAC;IACzG,CAAC;IAED,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QACzC,MAAM,kBAAkB,CAAC,WAAW,EAAE,iBAAiB,CAAC,eAAe,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC,CAAC;IACzG,CAAC;IAED,IAAI,cAAc,IAAI,wBAAwB,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9E,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,WAAW,CAAC,CAAC;QAC7C,MAAM,WAAW,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACxC,MAAM,aAAa,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,KAAK,GAAG,KAAK,EAAE,OAAe,EAAE,IAAgB,EAAiB,EAAE;IAC9E,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC9B,OAAO;IACT,CAAC;IAED,YAAY,CAAC,WAAW,CAAC,CAAC;IAE1B,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvC,UAAU,CAAC,WAAW,CAAC,CAAC;QACxB,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC9B,4EAA4E;QAC5E,0EAA0E;QAC1E,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,WAAW,CAAC,EAAE,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;QAC3D,CAAC;aAAM,CAAC;YACN,MAAM,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,MAAM,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzC,UAAU,CAAC,WAAW,CAAC,CAAC;QACxB,OAAO;IACT,CAAC;IAED,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAClC,MAAM,cAAc,GAAG,MAAM,KAAK,OAAO,CAAC;IAE1C,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACtC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAEjC,IAAI,CAAC,MAAM,qBAAqB,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;QACnD,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,KAAK,KAAK,CAAC;IAEnC,MAAM,UAAU,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAEvC,4EAA4E;IAC5E,oEAAoE;IACpE,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IAC3C,gBAAgB,CAAC,iBAAiB,EAAE,MAAM,qBAAqB,CAAC,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC;IAEzG,sEAAsE;IACtE,IAAI,SAAS,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACpC,MAAM,YAAY,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;YAC3C,MAAM,GAAG,CAAC;YACV,OAAO,cAAc,CACnB,OAAO,EACP,KAAK,KAAK,CAAC,EACX,KAAK,KAAK,CAAC,IAAI,cAAc,EAC7B,KAAK,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,KAAK,KAAK,CAAC,EAC9C,KAAK,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,KAAK,KAAK,CAAC,EAC9C,KAAK,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,KAAK,KAAK,CAAC,EAC9C,KAAK,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,KAAK,OAAO,CAAC,EAChD,OAAO,CACR,CAAC;QACJ,CAAC,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IACxB,CAAC;IAED,yEAAyE;IACzE,0EAA0E;IAC1E,uDAAuD;IACvD,IAAI,SAAS,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QAClC,MAAM,iBAAiB,GAAG,6BAA6B,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC3E,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;YACnD,MAAM,UAAU,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,UAAU,CAAC,WAAW,CAAC,CAAC;AAC1B,CAAC,CAAC","sourcesContent":["// AWS sequential deploy (`qpq go`). Per service it: synths the QPQ config,\n// rspack-bundles the backend (programmatic — no per-service rspack.config.ts),\n// deploys the inf/api/web CDK stacks (cdk runs the generic workspace app via\n// --app), bundles views (rspack, production) and syncs them to S3. Finally, any\n// service that opts into module federation has its federated remote published\n// (built + uploaded + manifest flipped), so a deploy that ships new backend\n// code also republishes the code the lambdas federate.\nimport { QpqDeployEnvVar } from '@qpqjs/core';\nimport { qpqDeployAwsUtils } from '@qpqjs/deploy-aws';\nimport { getServiceRspackConfig, runRspack } from '@qpqjs/deploy-rspack';\n\nimport path from 'path';\n\nimport { synthCommand } from '../../commands/synth';\nimport { DeployPlan } from '../../lib/deployPrompts';\nimport { getServiceDirectory, getServiceNamesWithViews } from '../../lib/discovery';\nimport { getDefaultHookJobs } from '../../lib/getDefaultHookJobs';\nimport { runAppHook, runHookForAppPackages } from '../../lib/hooks';\nimport { getServiceNamesWithFederation, loadServiceQpqConfig } from '../../lib/qpqConfigs';\nimport { assertNoFailures } from '../../lib/runTasks';\nimport { logTimeEnd, logTimeStart } from '../../lib/timing';\nimport { bundleViews } from '../../lib/views';\nimport { isAwsCredentialsValid } from './awsCredentials';\nimport { awsPublish } from './publish';\nimport { deployAccountStack, deployBootstrapStack, deployDomainStack, deployServiceStack } from './stacks';\nimport { syncViewsToS3 } from './viewsSync';\n\nconst buildAndDeploy = async (\n  serviceName: string,\n  needsSynth: boolean,\n  needsBuildApi: boolean,\n  needsInfStack: boolean,\n  needsApiStack: boolean,\n  needsWebStack: boolean,\n  needsViewStack: boolean,\n  appName: string,\n): Promise<void> => {\n  if (needsSynth) {\n    console.log('Synth QPQ Configs');\n    await synthCommand([serviceName, '--app', appName]);\n  }\n\n  const qpqConfigForService = loadServiceQpqConfig(appName, serviceName);\n\n  if (needsBuildApi) {\n    console.log('Building Api: ', serviceName);\n    await runRspack(getServiceRspackConfig(qpqConfigForService, path.join(getServiceDirectory(appName, serviceName), 'service')));\n  }\n\n  if (needsInfStack) {\n    console.log('Deploy Inf: ', serviceName);\n    await deployServiceStack(serviceName, qpqDeployAwsUtils.getInfStackName(qpqConfigForService), appName);\n  }\n\n  if (needsApiStack) {\n    console.log('Deploy Api: ', serviceName);\n    await deployServiceStack(serviceName, qpqDeployAwsUtils.getApiStackName(qpqConfigForService), appName);\n  }\n\n  if (needsWebStack) {\n    console.log('Deploy Web: ', serviceName);\n    await deployServiceStack(serviceName, qpqDeployAwsUtils.getWebStackName(qpqConfigForService), appName);\n  }\n\n  if (needsViewStack && getServiceNamesWithViews(appName).includes(serviceName)) {\n    console.log('Building Views: ', serviceName);\n    await bundleViews(appName, serviceName);\n    await syncViewsToS3(appName, serviceName);\n  }\n};\n\nexport const awsGo = async (appName: string, plan: DeployPlan): Promise<void> => {\n  if (plan.kind === 'cancelled') {\n    return;\n  }\n\n  logTimeStart('totalTime');\n\n  if (plan.kind === 'account') {\n    await deployAccountStack(plan.appName);\n    logTimeEnd('totalTime');\n    return;\n  }\n\n  if (plan.kind === 'bootstrap') {\n    // Feature bootstraps deploy into a shared account — leave the account-level\n    // guardrails stack alone (deploy it explicitly via the 'account' option).\n    if (process.env[QpqDeployEnvVar.featureName]) {\n      console.log('Skipping account stack for feature deploy');\n    } else {\n      await deployAccountStack(plan.appName);\n    }\n    if (plan.includeDomain) {\n      await deployDomainStack(plan.appName);\n    }\n    await deployBootstrapStack(plan.appName);\n    logTimeEnd('totalTime');\n    return;\n  }\n\n  const { services, stacks } = plan;\n  const shouldBuildApi = stacks !== 'views';\n\n  console.log('\\n\\nRunning automated deploy\\n\\n');\n  console.log('Executing for services');\n  console.log(services.join(', '));\n\n  if ((await isAwsCredentialsValid()) === false) {\n    console.log('Credentials are expired or invalid.');\n    return;\n  }\n\n  const allStacks = stacks === 'all';\n\n  await runAppHook(appName, 'predeploy');\n\n  // Workspace packages resolve through their built dist/ (package.json main),\n  // so bundles would ship stale code unless every lib is tsc'd first.\n  console.log('Building workspace packages');\n  assertNoFailures('Workspace build', await runHookForAppPackages('build', appName, getDefaultHookJobs()));\n\n  // Views uploads resolve bucket names from the shell service's config.\n  if (allStacks || stacks === 'views') {\n    await synthCommand(['shell', '--app', appName]);\n  }\n\n  for (let phase = 0; phase <= 5; phase += 1) {\n    await services.reduce(async (cur, service) => {\n      await cur;\n      return buildAndDeploy(\n        service,\n        phase === 0,\n        phase === 1 && shouldBuildApi,\n        phase === 2 && (allStacks || stacks === 'inf'),\n        phase === 3 && (allStacks || stacks === 'api'),\n        phase === 4 && (allStacks || stacks === 'web'),\n        phase === 5 && (allStacks || stacks === 'views'),\n        appName,\n      );\n    }, Promise.resolve());\n  }\n\n  // Publishing federated remotes only matters once the new backend code is\n  // live, so it's gated on the api stack having been (re)deployed. Services\n  // without defineFederatedModuleStore(...) are skipped.\n  if (allStacks || stacks === 'api') {\n    const federatedServices = getServiceNamesWithFederation(appName, services);\n    if (federatedServices.length > 0) {\n      console.log('\\n\\nPublishing federated backends\\n');\n      await awsPublish(appName, federatedServices);\n    }\n  }\n\n  logTimeEnd('totalTime');\n};\n"]}

package/lib/esm/platforms/aws/goDocker.d.ts

@@ -0,0 +1,3 @@
+import { DeployPlan } from '../../lib/deployPrompts';
+import { GoDockerMode } from '../../lib/goDockerMode';
+export declare const awsGoDocker: (appName: string, plan: DeployPlan, mode: GoDockerMode) => Promise<void>;