@qpqjs/cli 0.0.0-stage → 0.2.1

package/lib/commonjs/lib/resolveAppSelection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolveAppSelection.js","sourceRoot":"","sources":["../../../src/lib/resolveAppSelection.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,+EAA+E;AAC/E,iEAAiE;AACjE,2CAA2C;AAC3C,+EAA+E;AAC/E,kFAAkF;AAClF,kDAAkD;AAClD,qCAAqC;AACrC,6DAA6D;AAC7D,6EAA6E;AAC7E,+EAA+E;AAC/E,+CAA+C;AAC/C,iCAAqC;AACrC,2CAA+C;AAC/C,uCAAyC;AAUzC,MAAM,eAAe,GAAG,CAAC,SAA6B,EAAE,aAAuB,EAAS,EAAE;IACxF,IAAI,SAAS;QAAE,OAAO,CAAC,KAAK,CAAC,gBAAgB,SAAS,IAAI,CAAC,CAAC;IAC5D,OAAO,CAAC,KAAK,CAAC,eAAe,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzD,OAAO,CAAC,KAAK,CAAC,wDAAwD,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC5F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC;AAEK,MAAM,mBAAmB,GAAG,CAAO,OAA0B,EAAmB,EAAE;IACvF,MAAM,aAAa,GAAG,IAAA,4BAAgB,GAAE,CAAC;IACzC,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,SAAS,GACb,IAAA,kBAAW,EAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAEjI,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,OAAO,CAAC,QAAQ,IAAI,SAAS,KAAK,KAAK;YAAE,OAAO,KAAK,CAAC;QAC1D,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,eAAe,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAClF,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,cAAc,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC9C,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC;IAC1B,CAAC;IAED,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACxB,OAAO,IAAA,sBAAY,EAAC,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;IAClG,CAAC;IAED,OAAO,eAAe,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;AACnD,CAAC,CAAA,CAAC;AA1BW,QAAA,mBAAmB,uBA0B9B","sourcesContent":["// One app-selection contract for every app-facing command (prep / synth / go /\n// go:dev / go:dev:api / go:dev:web / publish). Resolution order:\n//   1. --app <name> / --app=<name> on argv\n//   2. npm_config_app                             (npm run x --app foo, no --)\n//   3. an env var the command already honours     (QPQ_DEV_APP / DEPLOY_APP_NAME)\n//   4. exactly one app under apps/ -> auto-select\n//   5. interactive prompt (TTY only)\n//   6. otherwise: print the valid app list and exit non-zero\n// An unknown name (from any source) also prints the list and exits non-zero.\n// Commands that can meaningfully run for every app may pass allowAll to accept\n// `--app all` (returned as the literal 'all').\nimport { getArgValue } from './args';\nimport { getAvailableApps } from './discovery';\nimport { promptSelect } from './prompts';\n\nexport type ResolveAppOptions = {\n  argv: string[];\n  // Env var this command historically honours (e.g. QPQ_DEV_APP, DEPLOY_APP_NAME).\n  envVar?: string;\n  // Accept `--app all` and return 'all'.\n  allowAll?: boolean;\n};\n\nconst exitWithAppList = (requested: string | undefined, availableApps: string[]): never => {\n  if (requested) console.error(`Unknown app '${requested}'.`);\n  console.error(`Valid apps: ${availableApps.join(', ')}`);\n  console.error(`Pass one with --app <name> (e.g. qpq <command> --app ${availableApps[0]}).`);\n  process.exit(1);\n};\n\nexport const resolveAppSelection = async (options: ResolveAppOptions): Promise<string> => {\n  const availableApps = getAvailableApps();\n  if (availableApps.length === 0) {\n    console.error('No apps found under apps/.');\n    process.exit(1);\n  }\n\n  const requested =\n    getArgValue(options.argv, '--app') || process.env.npm_config_app || (options.envVar ? process.env[options.envVar] : undefined);\n\n  if (requested) {\n    if (options.allowAll && requested === 'all') return 'all';\n    if (!availableApps.includes(requested)) exitWithAppList(requested, availableApps);\n    return requested;\n  }\n\n  if (availableApps.length === 1) {\n    console.log(`Using app: ${availableApps[0]}`);\n    return availableApps[0];\n  }\n\n  if (process.stdin.isTTY) {\n    return promptSelect('Select app', options.allowAll ? [...availableApps, 'all'] : availableApps);\n  }\n\n  return exitWithAppList(undefined, availableApps);\n};\n"]}

package/lib/commonjs/lib/resolveDeployment.d.ts

@@ -0,0 +1,14 @@
+import { QpqAppDeployment } from '@qpqjs/core';
+export declare const DEPLOYMENT_FLAG = "--deployment";
+export type ResolvedDeployment = {
+    deploymentName: string;
+    deployment: QpqAppDeployment;
+};
+/**
+ * Selects an entry of the app's deploy.config.json and writes it into process.env
+ * (identity, environment, feature, settings) before any service config is loaded.
+ * The file is the source of truth: nothing in the shell overrides a value in it.
+ * The platform driver validates its own settings, so an aws entry missing its
+ * account or region fails here, not inside cdk.
+ */
+export declare const resolveDeployment: (argv: string[], appName: string) => Promise<ResolvedDeployment>;

package/lib/commonjs/lib/resolveDeployment.js

@@ -0,0 +1,58 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveDeployment = exports.DEPLOYMENT_FLAG = void 0;
+const config_aws_1 = require("@qpqjs/config-aws");
+const core_1 = require("@qpqjs/core");
+const platforms_1 = require("../platforms");
+const args_1 = require("./args");
+const discovery_1 = require("./discovery");
+const prompts_1 = require("./prompts");
+exports.DEPLOYMENT_FLAG = '--deployment';
+// Which entry to use: the flag, then DEPLOY_NAME (set by a parent qpq command or CI: a
+// selector, never a value), then the sole entry, then a prompt. Headless with several
+// entries and no selection is an error rather than a guess.
+const selectDeploymentName = (argv, appName, configuredNames) => __awaiter(void 0, void 0, void 0, function* () {
+    const requested = (0, args_1.getArgValue)(argv, exports.DEPLOYMENT_FLAG) || process.env[core_1.QpqDeployEnvVar.deployName];
+    if (requested) {
+        if (!configuredNames.includes(requested)) {
+            console.error(`Unknown deployment '${requested}' in ${(0, config_aws_1.getQpqAppDeployConfigPath)((0, discovery_1.getRoot)(), appName)}. Configured: ${configuredNames.join(', ')}`);
+            process.exit(1);
+        }
+        return requested;
+    }
+    if (configuredNames.length === 1) {
+        console.log(`Using deployment: ${configuredNames[0]}`);
+        return configuredNames[0];
+    }
+    if (process.stdin.isTTY) {
+        return (0, prompts_1.promptSelect)('Select deployment', configuredNames);
+    }
+    console.error(`No deployment selected. Pass ${exports.DEPLOYMENT_FLAG} <name>. Configured: ${configuredNames.join(', ')}`);
+    return process.exit(1);
+});
+/**
+ * Selects an entry of the app's deploy.config.json and writes it into process.env
+ * (identity, environment, feature, settings) before any service config is loaded.
+ * The file is the source of truth: nothing in the shell overrides a value in it.
+ * The platform driver validates its own settings, so an aws entry missing its
+ * account or region fails here, not inside cdk.
+ */
+const resolveDeployment = (argv, appName) => __awaiter(void 0, void 0, void 0, function* () {
+    const { deployments } = (0, config_aws_1.getQpqAppDeployConfig)((0, discovery_1.getRoot)(), appName);
+    const deploymentName = yield selectDeploymentName(argv, appName, Object.keys(deployments));
+    const deployment = deployments[deploymentName];
+    (0, config_aws_1.primeDeploymentEnv)(appName, deploymentName, deployment);
+    (0, platforms_1.getPlatformDriver)(deployment.platform).prepareDeployment(deploymentName, deployment);
+    return { deploymentName, deployment };
+});
+exports.resolveDeployment = resolveDeployment;
+//# sourceMappingURL=resolveDeployment.js.map

package/lib/commonjs/lib/resolveDeployment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolveDeployment.js","sourceRoot":"","sources":["../../../src/lib/resolveDeployment.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,kDAAyG;AACzG,sCAAgE;AAEhE,4CAAiD;AACjD,iCAAqC;AACrC,2CAAsC;AACtC,uCAAyC;AAE5B,QAAA,eAAe,GAAG,cAAc,CAAC;AAO9C,uFAAuF;AACvF,sFAAsF;AACtF,4DAA4D;AAC5D,MAAM,oBAAoB,GAAG,CAAO,IAAc,EAAE,OAAe,EAAE,eAAyB,EAAmB,EAAE;IACjH,MAAM,SAAS,GAAG,IAAA,kBAAW,EAAC,IAAI,EAAE,uBAAe,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAe,CAAC,UAAU,CAAC,CAAC;IAEhG,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACzC,OAAO,CAAC,KAAK,CAAC,uBAAuB,SAAS,QAAQ,IAAA,sCAAyB,EAAC,IAAA,mBAAO,GAAE,EAAE,OAAO,CAAC,iBAAiB,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAClJ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,qBAAqB,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACvD,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC;IAED,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACxB,OAAO,IAAA,sBAAY,EAAC,mBAAmB,EAAE,eAAe,CAAC,CAAC;IAC5D,CAAC;IAED,OAAO,CAAC,KAAK,CAAC,gCAAgC,uBAAe,wBAAwB,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnH,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACzB,CAAC,CAAA,CAAC;AAEF;;;;;;GAMG;AACI,MAAM,iBAAiB,GAAG,CAAO,IAAc,EAAE,OAAe,EAA+B,EAAE;IACtG,MAAM,EAAE,WAAW,EAAE,GAAG,IAAA,kCAAqB,EAAC,IAAA,mBAAO,GAAE,EAAE,OAAO,CAAC,CAAC;IAClE,MAAM,cAAc,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IAC3F,MAAM,UAAU,GAAG,WAAW,CAAC,cAAc,CAAC,CAAC;IAE/C,IAAA,+BAAkB,EAAC,OAAO,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC;IACxD,IAAA,6BAAiB,EAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,iBAAiB,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IAErF,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC;AACxC,CAAC,CAAA,CAAC;AATW,QAAA,iBAAiB,qBAS5B","sourcesContent":["import { getQpqAppDeployConfig, getQpqAppDeployConfigPath, primeDeploymentEnv } from '@qpqjs/config-aws';\nimport { QpqAppDeployment, QpqDeployEnvVar } from '@qpqjs/core';\n\nimport { getPlatformDriver } from '../platforms';\nimport { getArgValue } from './args';\nimport { getRoot } from './discovery';\nimport { promptSelect } from './prompts';\n\nexport const DEPLOYMENT_FLAG = '--deployment';\n\nexport type ResolvedDeployment = {\n  deploymentName: string;\n  deployment: QpqAppDeployment;\n};\n\n// Which entry to use: the flag, then DEPLOY_NAME (set by a parent qpq command or CI: a\n// selector, never a value), then the sole entry, then a prompt. Headless with several\n// entries and no selection is an error rather than a guess.\nconst selectDeploymentName = async (argv: string[], appName: string, configuredNames: string[]): Promise<string> => {\n  const requested = getArgValue(argv, DEPLOYMENT_FLAG) || process.env[QpqDeployEnvVar.deployName];\n\n  if (requested) {\n    if (!configuredNames.includes(requested)) {\n      console.error(`Unknown deployment '${requested}' in ${getQpqAppDeployConfigPath(getRoot(), appName)}. Configured: ${configuredNames.join(', ')}`);\n      process.exit(1);\n    }\n    return requested;\n  }\n\n  if (configuredNames.length === 1) {\n    console.log(`Using deployment: ${configuredNames[0]}`);\n    return configuredNames[0];\n  }\n\n  if (process.stdin.isTTY) {\n    return promptSelect('Select deployment', configuredNames);\n  }\n\n  console.error(`No deployment selected. Pass ${DEPLOYMENT_FLAG} <name>. Configured: ${configuredNames.join(', ')}`);\n  return process.exit(1);\n};\n\n/**\n * Selects an entry of the app's deploy.config.json and writes it into process.env\n * (identity, environment, feature, settings) before any service config is loaded.\n * The file is the source of truth: nothing in the shell overrides a value in it.\n * The platform driver validates its own settings, so an aws entry missing its\n * account or region fails here, not inside cdk.\n */\nexport const resolveDeployment = async (argv: string[], appName: string): Promise<ResolvedDeployment> => {\n  const { deployments } = getQpqAppDeployConfig(getRoot(), appName);\n  const deploymentName = await selectDeploymentName(argv, appName, Object.keys(deployments));\n  const deployment = deployments[deploymentName];\n\n  primeDeploymentEnv(appName, deploymentName, deployment);\n  getPlatformDriver(deployment.platform).prepareDeployment(deploymentName, deployment);\n\n  return { deploymentName, deployment };\n};\n"]}

package/lib/commonjs/lib/runCommand.d.ts

@@ -0,0 +1,14 @@
+export type RunCommandOptions = {
+    env?: Record<string, string>;
+    cwd?: string;
+    logCommand?: boolean;
+};
+export declare const runCommand: (command: string, args: string[], options?: RunCommandOptions) => Promise<void>;
+export declare const runCommandBestEffort: (command: string, args: string[], options?: RunCommandOptions) => Promise<void>;
+export type RunCommandPrefixedOptions = {
+    env?: Record<string, string>;
+    cwd?: string;
+    color?: number;
+};
+export declare const nextPrefixColor: () => number;
+export declare const runCommandPrefixed: (label: string, command: string, args: string[], options?: RunCommandPrefixedOptions) => Promise<void>;

package/lib/commonjs/lib/runCommand.js

@@ -0,0 +1,103 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runCommandPrefixed = exports.nextPrefixColor = exports.runCommandBestEffort = exports.runCommand = void 0;
+const child_process_1 = require("child_process");
+// Spawn a command, inheriting stdio, resolving on success. A non-zero exit
+// REJECTS so a failed build/deploy stops the run.
+const runCommand = (command, args, options = {}) => new Promise((resolve, reject) => {
+    var _a, _b;
+    const validArgs = args.filter((a) => !!a);
+    if (options.logCommand) {
+        console.log(`Running command: ${command} ${validArgs.join(' ')}`);
+    }
+    const child = (0, child_process_1.spawn)(command, validArgs, {
+        stdio: 'inherit',
+        // Shell only on Windows (to resolve npm/aws/cdk .cmd shims). On posix, run
+        // without a shell so the already-array args are passed straight to the
+        // program and can't be re-interpreted by `sh -c` — no command injection via
+        // interpolated values (stack names, CI-supplied env, etc.).
+        shell: process.platform === 'win32',
+        cwd: (_a = options.cwd) !== null && _a !== void 0 ? _a : process.cwd(),
+        env: Object.assign(Object.assign({}, process.env), ((_b = options.env) !== null && _b !== void 0 ? _b : {})),
+    });
+    child.on('error', (error) => reject(error));
+    child.on('exit', (code, signal) => {
+        if (signal)
+            return reject(new Error(`${command} was killed with signal ${signal}`));
+        if (code)
+            return reject(new Error(`${command} ${validArgs.join(' ')} exited with code ${code}`));
+        return resolve();
+    });
+});
+exports.runCommand = runCommand;
+// Run a command for its side effect only, swallowing both its output and its
+// exit code — for best-effort cleanup steps (e.g. `docker rm -f` of a container
+// that may not exist) that must never fail the run. Without a shell there's no
+// `>/dev/null 2>&1 || true`, so quieting and non-failing happen here instead.
+const runCommandBestEffort = (command, args, options = {}) => new Promise((resolve) => {
+    var _a, _b;
+    const validArgs = args.filter((a) => !!a);
+    const child = (0, child_process_1.spawn)(command, validArgs, {
+        stdio: 'ignore',
+        shell: process.platform === 'win32',
+        cwd: (_a = options.cwd) !== null && _a !== void 0 ? _a : process.cwd(),
+        env: Object.assign(Object.assign({}, process.env), ((_b = options.env) !== null && _b !== void 0 ? _b : {})),
+    });
+    child.on('error', () => resolve());
+    child.on('exit', () => resolve());
+});
+exports.runCommandBestEffort = runCommandBestEffort;
+const PREFIX_COLORS = [36, 32, 33, 35, 34, 96, 92, 93, 95, 94];
+let colorIndex = 0;
+// Hand each concurrent task a distinct prefix color so interleaved output is
+// scannable.
+const nextPrefixColor = () => {
+    const color = PREFIX_COLORS[colorIndex % PREFIX_COLORS.length];
+    colorIndex += 1;
+    return color;
+};
+exports.nextPrefixColor = nextPrefixColor;
+// Like runCommand, but pipes output and prefixes every line with a colored
+// [label] — for running many commands concurrently without unreadable
+// interleaving. Rejects on non-zero exit.
+const runCommandPrefixed = (label, command, args, options = {}) => new Promise((resolve, reject) => {
+    var _a, _b, _c;
+    const validArgs = args.filter((a) => !!a);
+    const prefix = `\x1b[${(_a = options.color) !== null && _a !== void 0 ? _a : 36}m[${label}]\x1b[0m `;
+    const child = (0, child_process_1.spawn)(command, validArgs, {
+        stdio: ['ignore', 'pipe', 'pipe'],
+        // Shell only on Windows (to resolve npm/aws/cdk .cmd shims). On posix, run
+        // without a shell so the already-array args are passed straight to the
+        // program and can't be re-interpreted by `sh -c` — no command injection via
+        // interpolated values (stack names, CI-supplied env, etc.).
+        shell: process.platform === 'win32',
+        cwd: (_b = options.cwd) !== null && _b !== void 0 ? _b : process.cwd(),
+        env: Object.assign(Object.assign({}, process.env), ((_c = options.env) !== null && _c !== void 0 ? _c : {})),
+    });
+    const attach = (stream, out) => {
+        let buffered = '';
+        stream.on('data', (chunk) => {
+            var _a;
+            buffered += chunk.toString();
+            const lines = buffered.split('\n');
+            buffered = (_a = lines.pop()) !== null && _a !== void 0 ? _a : '';
+            lines.forEach((line) => out.write(`${prefix}${line}\n`));
+        });
+        stream.on('end', () => {
+            if (buffered)
+                out.write(`${prefix}${buffered}\n`);
+        });
+    };
+    attach(child.stdout, process.stdout);
+    attach(child.stderr, process.stderr);
+    child.on('error', (error) => reject(error));
+    child.on('exit', (code, signal) => {
+        if (signal)
+            return reject(new Error(`[${label}] ${command} was killed with signal ${signal}`));
+        if (code)
+            return reject(new Error(`[${label}] ${command} exited with code ${code}`));
+        return resolve();
+    });
+});
+exports.runCommandPrefixed = runCommandPrefixed;
+//# sourceMappingURL=runCommand.js.map

package/lib/commonjs/lib/runCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runCommand.js","sourceRoot":"","sources":["../../../src/lib/runCommand.ts"],"names":[],"mappings":";;;AAAA,iDAAsC;AAYtC,2EAA2E;AAC3E,kDAAkD;AAC3C,MAAM,UAAU,GAAG,CAAC,OAAe,EAAE,IAAc,EAAE,UAA6B,EAAE,EAAiB,EAAE,CAC5G,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;;IAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAE1C,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,oBAAoB,OAAO,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,KAAK,GAAG,IAAA,qBAAK,EAAC,OAAO,EAAE,SAAS,EAAE;QACtC,KAAK,EAAE,SAAS;QAChB,2EAA2E;QAC3E,uEAAuE;QACvE,4EAA4E;QAC5E,4DAA4D;QAC5D,KAAK,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;QACnC,GAAG,EAAE,MAAA,OAAO,CAAC,GAAG,mCAAI,OAAO,CAAC,GAAG,EAAE;QACjC,GAAG,kCAAO,OAAO,CAAC,GAAG,GAAK,CAAC,MAAA,OAAO,CAAC,GAAG,mCAAI,EAAE,CAAC,CAAE;KAChD,CAAC,CAAC;IAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAE5C,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;QAChC,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,OAAO,2BAA2B,MAAM,EAAE,CAAC,CAAC,CAAC;QACpF,IAAI,IAAI;YAAE,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,OAAO,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC,CAAC;QACjG,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AA1BQ,QAAA,UAAU,cA0BlB;AAEL,6EAA6E;AAC7E,gFAAgF;AAChF,+EAA+E;AAC/E,8EAA8E;AACvE,MAAM,oBAAoB,GAAG,CAAC,OAAe,EAAE,IAAc,EAAE,UAA6B,EAAE,EAAiB,EAAE,CACtH,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;;IACtB,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAE1C,MAAM,KAAK,GAAG,IAAA,qBAAK,EAAC,OAAO,EAAE,SAAS,EAAE;QACtC,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;QACnC,GAAG,EAAE,MAAA,OAAO,CAAC,GAAG,mCAAI,OAAO,CAAC,GAAG,EAAE;QACjC,GAAG,kCAAO,OAAO,CAAC,GAAG,GAAK,CAAC,MAAA,OAAO,CAAC,GAAG,mCAAI,EAAE,CAAC,CAAE;KAChD,CAAC,CAAC;IAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACnC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;AACpC,CAAC,CAAC,CAAC;AAbQ,QAAA,oBAAoB,wBAa5B;AASL,MAAM,aAAa,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;AAC/D,IAAI,UAAU,GAAG,CAAC,CAAC;AAEnB,6EAA6E;AAC7E,aAAa;AACN,MAAM,eAAe,GAAG,GAAW,EAAE;IAC1C,MAAM,KAAK,GAAG,aAAa,CAAC,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAC/D,UAAU,IAAI,CAAC,CAAC;IAChB,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAJW,QAAA,eAAe,mBAI1B;AAEF,2EAA2E;AAC3E,sEAAsE;AACtE,0CAA0C;AACnC,MAAM,kBAAkB,GAAG,CAAC,KAAa,EAAE,OAAe,EAAE,IAAc,EAAE,UAAqC,EAAE,EAAiB,EAAE,CAC3I,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;;IAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,QAAQ,MAAA,OAAO,CAAC,KAAK,mCAAI,EAAE,KAAK,KAAK,WAAW,CAAC;IAEhE,MAAM,KAAK,GAAG,IAAA,qBAAK,EAAC,OAAO,EAAE,SAAS,EAAE;QACtC,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;QACjC,2EAA2E;QAC3E,uEAAuE;QACvE,4EAA4E;QAC5E,4DAA4D;QAC5D,KAAK,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;QACnC,GAAG,EAAE,MAAA,OAAO,CAAC,GAAG,mCAAI,OAAO,CAAC,GAAG,EAAE;QACjC,GAAG,kCAAO,OAAO,CAAC,GAAG,GAAK,CAAC,MAAA,OAAO,CAAC,GAAG,mCAAI,EAAE,CAAC,CAAE;KAChD,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,CAAC,MAAgB,EAAE,GAAuB,EAAQ,EAAE;QACjE,IAAI,QAAQ,GAAG,EAAE,CAAC;QAClB,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;;YAClC,QAAQ,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACnC,QAAQ,GAAG,MAAA,KAAK,CAAC,GAAG,EAAE,mCAAI,EAAE,CAAC;YAC7B,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,MAAM,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACpB,IAAI,QAAQ;gBAAE,GAAG,CAAC,KAAK,CAAC,GAAG,MAAM,GAAG,QAAQ,IAAI,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,MAAM,CAAC,KAAK,CAAC,MAAkB,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,CAAC,KAAK,CAAC,MAAkB,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAEjD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAE5C,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;QAChC,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,OAAO,2BAA2B,MAAM,EAAE,CAAC,CAAC,CAAC;QAC/F,IAAI,IAAI;YAAE,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,OAAO,qBAAqB,IAAI,EAAE,CAAC,CAAC,CAAC;QACrF,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAvCQ,QAAA,kBAAkB,sBAuC1B","sourcesContent":["import { spawn } from 'child_process';\nimport type { Readable } from 'stream';\n\nexport type RunCommandOptions = {\n  // Extra environment variables merged over the parent process env.\n  env?: Record<string, string>;\n  // Working directory for the child (defaults to cwd).\n  cwd?: string;\n  // Echo the command before running it.\n  logCommand?: boolean;\n};\n\n// Spawn a command, inheriting stdio, resolving on success. A non-zero exit\n// REJECTS so a failed build/deploy stops the run.\nexport const runCommand = (command: string, args: string[], options: RunCommandOptions = {}): Promise<void> =>\n  new Promise((resolve, reject) => {\n    const validArgs = args.filter((a) => !!a);\n\n    if (options.logCommand) {\n      console.log(`Running command: ${command} ${validArgs.join(' ')}`);\n    }\n\n    const child = spawn(command, validArgs, {\n      stdio: 'inherit',\n      // Shell only on Windows (to resolve npm/aws/cdk .cmd shims). On posix, run\n      // without a shell so the already-array args are passed straight to the\n      // program and can't be re-interpreted by `sh -c` — no command injection via\n      // interpolated values (stack names, CI-supplied env, etc.).\n      shell: process.platform === 'win32',\n      cwd: options.cwd ?? process.cwd(),\n      env: { ...process.env, ...(options.env ?? {}) },\n    });\n\n    child.on('error', (error) => reject(error));\n\n    child.on('exit', (code, signal) => {\n      if (signal) return reject(new Error(`${command} was killed with signal ${signal}`));\n      if (code) return reject(new Error(`${command} ${validArgs.join(' ')} exited with code ${code}`));\n      return resolve();\n    });\n  });\n\n// Run a command for its side effect only, swallowing both its output and its\n// exit code — for best-effort cleanup steps (e.g. `docker rm -f` of a container\n// that may not exist) that must never fail the run. Without a shell there's no\n// `>/dev/null 2>&1 || true`, so quieting and non-failing happen here instead.\nexport const runCommandBestEffort = (command: string, args: string[], options: RunCommandOptions = {}): Promise<void> =>\n  new Promise((resolve) => {\n    const validArgs = args.filter((a) => !!a);\n\n    const child = spawn(command, validArgs, {\n      stdio: 'ignore',\n      shell: process.platform === 'win32',\n      cwd: options.cwd ?? process.cwd(),\n      env: { ...process.env, ...(options.env ?? {}) },\n    });\n\n    child.on('error', () => resolve());\n    child.on('exit', () => resolve());\n  });\n\nexport type RunCommandPrefixedOptions = {\n  env?: Record<string, string>;\n  cwd?: string;\n  // ANSI color code for the prefix (see nextPrefixColor).\n  color?: number;\n};\n\nconst PREFIX_COLORS = [36, 32, 33, 35, 34, 96, 92, 93, 95, 94];\nlet colorIndex = 0;\n\n// Hand each concurrent task a distinct prefix color so interleaved output is\n// scannable.\nexport const nextPrefixColor = (): number => {\n  const color = PREFIX_COLORS[colorIndex % PREFIX_COLORS.length];\n  colorIndex += 1;\n  return color;\n};\n\n// Like runCommand, but pipes output and prefixes every line with a colored\n// [label] — for running many commands concurrently without unreadable\n// interleaving. Rejects on non-zero exit.\nexport const runCommandPrefixed = (label: string, command: string, args: string[], options: RunCommandPrefixedOptions = {}): Promise<void> =>\n  new Promise((resolve, reject) => {\n    const validArgs = args.filter((a) => !!a);\n    const prefix = `\\x1b[${options.color ?? 36}m[${label}]\\x1b[0m `;\n\n    const child = spawn(command, validArgs, {\n      stdio: ['ignore', 'pipe', 'pipe'],\n      // Shell only on Windows (to resolve npm/aws/cdk .cmd shims). On posix, run\n      // without a shell so the already-array args are passed straight to the\n      // program and can't be re-interpreted by `sh -c` — no command injection via\n      // interpolated values (stack names, CI-supplied env, etc.).\n      shell: process.platform === 'win32',\n      cwd: options.cwd ?? process.cwd(),\n      env: { ...process.env, ...(options.env ?? {}) },\n    });\n\n    const attach = (stream: Readable, out: NodeJS.WriteStream): void => {\n      let buffered = '';\n      stream.on('data', (chunk: Buffer) => {\n        buffered += chunk.toString();\n        const lines = buffered.split('\\n');\n        buffered = lines.pop() ?? '';\n        lines.forEach((line) => out.write(`${prefix}${line}\\n`));\n      });\n      stream.on('end', () => {\n        if (buffered) out.write(`${prefix}${buffered}\\n`);\n      });\n    };\n\n    attach(child.stdout as Readable, process.stdout);\n    attach(child.stderr as Readable, process.stderr);\n\n    child.on('error', (error) => reject(error));\n\n    child.on('exit', (code, signal) => {\n      if (signal) return reject(new Error(`[${label}] ${command} was killed with signal ${signal}`));\n      if (code) return reject(new Error(`[${label}] ${command} exited with code ${code}`));\n      return resolve();\n    });\n  });\n"]}

package/lib/commonjs/lib/runTasks.d.ts

@@ -0,0 +1,15 @@
+export type Task = {
+    label: string;
+    run: () => Promise<void>;
+};
+export type TaskFailure = {
+    label: string;
+    error: Error;
+};
+export declare const runTasks: (tasks: Task[], limit: number) => Promise<TaskFailure[]>;
+export type DependencyTask = Task & {
+    id: string;
+    deps: string[];
+};
+export declare const runDependencyTasks: (tasks: DependencyTask[], limit: number) => Promise<TaskFailure[]>;
+export declare const assertNoFailures: (phaseName: string, failures: TaskFailure[]) => void;

package/lib/commonjs/lib/runTasks.js

@@ -0,0 +1,123 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.assertNoFailures = exports.runDependencyTasks = exports.runTasks = void 0;
+// Run tasks with at most `limit` in flight; never rejects — failures come back
+// labelled so a whole wave can finish before we report what broke.
+const runTasks = (tasks, limit) => __awaiter(void 0, void 0, void 0, function* () {
+    const failures = [];
+    let nextIndex = 0;
+    const workerCount = Math.max(1, Math.min(limit, tasks.length));
+    yield Promise.all(Array.from({ length: workerCount }, () => __awaiter(void 0, void 0, void 0, function* () {
+        while (nextIndex < tasks.length) {
+            const task = tasks[nextIndex];
+            nextIndex += 1;
+            try {
+                yield task.run();
+            }
+            catch (error) {
+                failures.push({ label: task.label, error: error });
+            }
+        }
+    })));
+    return failures;
+});
+exports.runTasks = runTasks;
+// Run tasks with at most `limit` in flight, but a task only starts once every
+// task in its `deps` has succeeded. A failure doesn't stop unrelated tasks;
+// dependents of the failed task are skipped (logged, not returned as failures,
+// the root cause already is). Never rejects. Tasks left unstartable by a
+// dependency cycle come back as failures.
+const runDependencyTasks = (tasks, limit) => __awaiter(void 0, void 0, void 0, function* () {
+    const failures = [];
+    const succeeded = new Set();
+    const failed = new Set();
+    const started = new Set();
+    const pipelines = [];
+    let slots = Math.max(1, limit);
+    const waiting = [];
+    const acquire = () => __awaiter(void 0, void 0, void 0, function* () {
+        if (slots > 0) {
+            slots -= 1;
+            return;
+        }
+        yield new Promise((resolve) => waiting.push(resolve));
+    });
+    const release = () => {
+        const next = waiting.shift();
+        if (next) {
+            next();
+        }
+        else {
+            slots += 1;
+        }
+    };
+    const runOne = (task) => __awaiter(void 0, void 0, void 0, function* () {
+        yield acquire();
+        try {
+            yield task.run();
+            succeeded.add(task.id);
+        }
+        catch (error) {
+            failed.add(task.id);
+            failures.push({ label: task.label, error: error });
+        }
+        finally {
+            release();
+        }
+        launchReady();
+    });
+    // Repeatedly sweep until stable: launching one task or cascading one skip can
+    // unblock (or block) tasks earlier in the list.
+    const launchReady = () => {
+        let changed = true;
+        while (changed) {
+            changed = false;
+            for (const task of tasks) {
+                if (started.has(task.id))
+                    continue;
+                if (task.deps.some((dep) => failed.has(dep))) {
+                    started.add(task.id);
+                    failed.add(task.id); // cascade so transitive dependents skip too
+                    console.log(`Skipping ${task.label} (a dependency failed)`);
+                    changed = true;
+                }
+                else if (task.deps.every((dep) => succeeded.has(dep))) {
+                    started.add(task.id);
+                    pipelines.push(runOne(task));
+                    changed = true;
+                }
+            }
+        }
+    };
+    launchReady();
+    // runOne re-invokes launchReady as tasks finish, pushing newly unblocked
+    // pipelines while earlier ones are being awaited; drain until it stays empty.
+    while (pipelines.length > 0) {
+        yield Promise.all(pipelines.splice(0, pipelines.length));
+    }
+    for (const task of tasks) {
+        if (!started.has(task.id)) {
+            failures.push({ label: task.label, error: new Error('unstartable: dependency cycle') });
+        }
+    }
+    return failures;
+});
+exports.runDependencyTasks = runDependencyTasks;
+const assertNoFailures = (phaseName, failures) => {
+    if (failures.length === 0)
+        return;
+    console.error(`\n${phaseName} failed for:`);
+    failures.forEach((failure) => console.error(`  ${failure.label}: ${failure.error.message}`));
+    throw new Error(`${phaseName}: ${failures.length} task(s) failed`);
+};
+exports.assertNoFailures = assertNoFailures;
+//# sourceMappingURL=runTasks.js.map

package/lib/commonjs/lib/runTasks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runTasks.js","sourceRoot":"","sources":["../../../src/lib/runTasks.ts"],"names":[],"mappings":";;;;;;;;;;;;AAGA,+EAA+E;AAC/E,mEAAmE;AAC5D,MAAM,QAAQ,GAAG,CAAO,KAAa,EAAE,KAAa,EAA0B,EAAE;IACrF,MAAM,QAAQ,GAAkB,EAAE,CAAC;IACnC,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/D,MAAM,OAAO,CAAC,GAAG,CACf,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,GAAS,EAAE;QAC7C,OAAO,SAAS,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;YAC9B,SAAS,IAAI,CAAC,CAAC;YACf,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;YACnB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,KAAc,EAAE,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;IACH,CAAC,CAAA,CAAC,CACH,CAAC;IAEF,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAA,CAAC;AApBW,QAAA,QAAQ,YAoBnB;AAUF,8EAA8E;AAC9E,4EAA4E;AAC5E,+EAA+E;AAC/E,yEAAyE;AACzE,0CAA0C;AACnC,MAAM,kBAAkB,GAAG,CAAO,KAAuB,EAAE,KAAa,EAA0B,EAAE;IACzG,MAAM,QAAQ,GAAkB,EAAE,CAAC;IACnC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,SAAS,GAAyB,EAAE,CAAC;IAE3C,IAAI,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC/B,MAAM,OAAO,GAAsB,EAAE,CAAC;IAEtC,MAAM,OAAO,GAAG,GAAwB,EAAE;QACxC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,KAAK,IAAI,CAAC,CAAC;YACX,OAAO;QACT,CAAC;QACD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9D,CAAC,CAAA,CAAC;IAEF,MAAM,OAAO,GAAG,GAAS,EAAE;QACzB,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,EAAE,CAAC;QACT,CAAC;aAAM,CAAC;YACN,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,CAAO,IAAoB,EAAiB,EAAE;QAC3D,MAAM,OAAO,EAAE,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;YACjB,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACpB,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,KAAc,EAAE,CAAC,CAAC;QAC9D,CAAC;gBAAS,CAAC;YACT,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,WAAW,EAAE,CAAC;IAChB,CAAC,CAAA,CAAC;IAEF,8EAA8E;IAC9E,gDAAgD;IAChD,MAAM,WAAW,GAAG,GAAS,EAAE;QAC7B,IAAI,OAAO,GAAG,IAAI,CAAC;QACnB,OAAO,OAAO,EAAE,CAAC;YACf,OAAO,GAAG,KAAK,CAAC;YAChB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBAAE,SAAS;gBACnC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;oBAC7C,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBACrB,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,4CAA4C;oBACjE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,CAAC,KAAK,wBAAwB,CAAC,CAAC;oBAC5D,OAAO,GAAG,IAAI,CAAC;gBACjB,CAAC;qBAAM,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;oBACxD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBACrB,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;oBAC7B,OAAO,GAAG,IAAI,CAAC;gBACjB,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,WAAW,EAAE,CAAC;IACd,yEAAyE;IACzE,8EAA8E;IAC9E,OAAO,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,+BAA+B,CAAC,EAAE,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAA,CAAC;AA7EW,QAAA,kBAAkB,sBA6E7B;AAEK,MAAM,gBAAgB,GAAG,CAAC,SAAiB,EAAE,QAAuB,EAAQ,EAAE;IACnF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAClC,OAAO,CAAC,KAAK,CAAC,KAAK,SAAS,cAAc,CAAC,CAAC;IAC5C,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC7F,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,KAAK,QAAQ,CAAC,MAAM,iBAAiB,CAAC,CAAC;AACrE,CAAC,CAAC;AALW,QAAA,gBAAgB,oBAK3B","sourcesContent":["export type Task = { label: string; run: () => Promise<void> };\nexport type TaskFailure = { label: string; error: Error };\n\n// Run tasks with at most `limit` in flight; never rejects — failures come back\n// labelled so a whole wave can finish before we report what broke.\nexport const runTasks = async (tasks: Task[], limit: number): Promise<TaskFailure[]> => {\n  const failures: TaskFailure[] = [];\n  let nextIndex = 0;\n\n  const workerCount = Math.max(1, Math.min(limit, tasks.length));\n  await Promise.all(\n    Array.from({ length: workerCount }, async () => {\n      while (nextIndex < tasks.length) {\n        const task = tasks[nextIndex];\n        nextIndex += 1;\n        try {\n          await task.run();\n        } catch (error) {\n          failures.push({ label: task.label, error: error as Error });\n        }\n      }\n    }),\n  );\n\n  return failures;\n};\n\nexport type DependencyTask = Task & {\n  // Unique id other tasks reference in `deps` (e.g. a package name).\n  id: string;\n  // Ids of tasks that must succeed before this one starts. Ids not present in\n  // the task list should be filtered out by the caller.\n  deps: string[];\n};\n\n// Run tasks with at most `limit` in flight, but a task only starts once every\n// task in its `deps` has succeeded. A failure doesn't stop unrelated tasks;\n// dependents of the failed task are skipped (logged, not returned as failures,\n// the root cause already is). Never rejects. Tasks left unstartable by a\n// dependency cycle come back as failures.\nexport const runDependencyTasks = async (tasks: DependencyTask[], limit: number): Promise<TaskFailure[]> => {\n  const failures: TaskFailure[] = [];\n  const succeeded = new Set<string>();\n  const failed = new Set<string>();\n  const started = new Set<string>();\n  const pipelines: Array<Promise<void>> = [];\n\n  let slots = Math.max(1, limit);\n  const waiting: Array<() => void> = [];\n\n  const acquire = async (): Promise<void> => {\n    if (slots > 0) {\n      slots -= 1;\n      return;\n    }\n    await new Promise<void>((resolve) => waiting.push(resolve));\n  };\n\n  const release = (): void => {\n    const next = waiting.shift();\n    if (next) {\n      next();\n    } else {\n      slots += 1;\n    }\n  };\n\n  const runOne = async (task: DependencyTask): Promise<void> => {\n    await acquire();\n    try {\n      await task.run();\n      succeeded.add(task.id);\n    } catch (error) {\n      failed.add(task.id);\n      failures.push({ label: task.label, error: error as Error });\n    } finally {\n      release();\n    }\n    launchReady();\n  };\n\n  // Repeatedly sweep until stable: launching one task or cascading one skip can\n  // unblock (or block) tasks earlier in the list.\n  const launchReady = (): void => {\n    let changed = true;\n    while (changed) {\n      changed = false;\n      for (const task of tasks) {\n        if (started.has(task.id)) continue;\n        if (task.deps.some((dep) => failed.has(dep))) {\n          started.add(task.id);\n          failed.add(task.id); // cascade so transitive dependents skip too\n          console.log(`Skipping ${task.label} (a dependency failed)`);\n          changed = true;\n        } else if (task.deps.every((dep) => succeeded.has(dep))) {\n          started.add(task.id);\n          pipelines.push(runOne(task));\n          changed = true;\n        }\n      }\n    }\n  };\n\n  launchReady();\n  // runOne re-invokes launchReady as tasks finish, pushing newly unblocked\n  // pipelines while earlier ones are being awaited; drain until it stays empty.\n  while (pipelines.length > 0) {\n    await Promise.all(pipelines.splice(0, pipelines.length));\n  }\n\n  for (const task of tasks) {\n    if (!started.has(task.id)) {\n      failures.push({ label: task.label, error: new Error('unstartable: dependency cycle') });\n    }\n  }\n\n  return failures;\n};\n\nexport const assertNoFailures = (phaseName: string, failures: TaskFailure[]): void => {\n  if (failures.length === 0) return;\n  console.error(`\\n${phaseName} failed for:`);\n  failures.forEach((failure) => console.error(`  ${failure.label}: ${failure.error.message}`));\n  throw new Error(`${phaseName}: ${failures.length} task(s) failed`);\n};\n"]}

package/lib/commonjs/lib/setupStep.d.ts

@@ -0,0 +1,16 @@
+import { Nullable } from '@qpqjs/core';
+export type SetupCheckResult = {
+    done: boolean;
+    detail?: string;
+};
+/**
+ * One item of a platform's setup checklist. `check` says whether it is already in place
+ * (null when it cannot tell), `run` makes it so. A check-only step (credentials, zones) has a
+ * run that re-checks and throws with guidance, so a failed prerequisite stops the sequence.
+ */
+export type SetupStep = {
+    id: string;
+    name: string;
+    check: () => Promise<Nullable<SetupCheckResult>>;
+    run: () => Promise<void>;
+};

package/lib/commonjs/lib/setupStep.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=setupStep.js.map

package/lib/commonjs/lib/setupStep.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setupStep.js","sourceRoot":"","sources":["../../../src/lib/setupStep.ts"],"names":[],"mappings":"","sourcesContent":["import { Nullable } from '@qpqjs/core';\n\nexport type SetupCheckResult = {\n  done: boolean;\n  // One line for the menu: what exists, or what is missing and how to fix it.\n  detail?: string;\n};\n\n/**\n * One item of a platform's setup checklist. `check` says whether it is already in place\n * (null when it cannot tell), `run` makes it so. A check-only step (credentials, zones) has a\n * run that re-checks and throws with guidance, so a failed prerequisite stops the sequence.\n */\nexport type SetupStep = {\n  id: string;\n  name: string;\n  check: () => Promise<Nullable<SetupCheckResult>>;\n  run: () => Promise<void>;\n};\n"]}

package/lib/commonjs/lib/timing.d.ts

@@ -0,0 +1,2 @@
+export declare const logTimeStart: (name: string) => void;
+export declare const logTimeEnd: (name: string) => void;

package/lib/commonjs/lib/timing.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.logTimeEnd = exports.logTimeStart = void 0;
+const logTimeStart = (name) => console.time(name);
+exports.logTimeStart = logTimeStart;
+const logTimeEnd = (name) => {
+    console.log('When:', new Date().toLocaleTimeString());
+    console.timeEnd(name);
+};
+exports.logTimeEnd = logTimeEnd;
+//# sourceMappingURL=timing.js.map

package/lib/commonjs/lib/timing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"timing.js","sourceRoot":"","sources":["../../../src/lib/timing.ts"],"names":[],"mappings":";;;AAAO,MAAM,YAAY,GAAG,CAAC,IAAY,EAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAA1D,QAAA,YAAY,gBAA8C;AAEhE,MAAM,UAAU,GAAG,CAAC,IAAY,EAAQ,EAAE;IAC/C,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,kBAAkB,EAAE,CAAC,CAAC;IACtD,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AACxB,CAAC,CAAC;AAHW,QAAA,UAAU,cAGrB","sourcesContent":["export const logTimeStart = (name: string): void => console.time(name);\n\nexport const logTimeEnd = (name: string): void => {\n  console.log('When:', new Date().toLocaleTimeString());\n  console.timeEnd(name);\n};\n"]}

package/lib/commonjs/lib/typeWatcher.d.ts

@@ -0,0 +1,2 @@
+import { ChildProcess } from 'child_process';
+export declare const startTypeWatcher: (root: string) => ChildProcess | null;

package/lib/commonjs/lib/typeWatcher.js

@@ -0,0 +1,59 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.startTypeWatcher = void 0;
+// Keeps workspace packages' declaration output (dist/*.d.ts) fresh while
+// `qpq go:dev` runs. The rspack dev builds bundle workspace source directly,
+// so this watcher only feeds the editor and validate-ts, which resolve
+// cross-package types through each package's built declarations.
+//
+// One `tsc -b --watch` over every workspace package that ships types; routine
+// watch chatter is dropped so only real compile errors reach the shared
+// terminal. Opt out with `--no-types`.
+const deploy_rspack_1 = require("@qpqjs/deploy-rspack");
+const child_process_1 = require("child_process");
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+// Routine tsc watch status lines; everything else is worth showing.
+const routineTscPatterns = [/Starting compilation in watch mode/, /File change detected/, /Found 0 errors/];
+const isRoutineTscLine = (line) => routineTscPatterns.some((pattern) => pattern.test(line));
+// Forwards non-routine tsc output line by line under a [types] prefix.
+const forwardTscOutput = (chunk) => {
+    for (const line of chunk.toString().split('\n')) {
+        if (line.trim().length === 0 || isRoutineTscLine(line)) {
+            continue;
+        }
+        console.log(`[types] ${line}`);
+    }
+};
+// A workspace package wants declaration watching when it has a tsconfig and
+// publishes types from its build output. Packages bundled by rspack (views,
+// service handlers) don't ship types and are skipped.
+const isTypedWorkspacePackage = (dir) => {
+    if (!fs_1.default.existsSync(path_1.default.join(dir, 'tsconfig.json'))) {
+        return false;
+    }
+    const packageJson = JSON.parse(fs_1.default.readFileSync(path_1.default.join(dir, 'package.json'), 'utf-8'));
+    return !!(packageJson.types || packageJson.typings);
+};
+const startTypeWatcher = (root) => {
+    var _a, _b;
+    const projectDirs = (0, deploy_rspack_1.getWorkspacePackageDirs)(root).filter(isTypedWorkspacePackage);
+    if (projectDirs.length === 0) {
+        return null;
+    }
+    const relativeDirs = projectDirs.map((dir) => path_1.default.relative(root, dir));
+    const child = (0, child_process_1.spawn)('npx', ['tsc', '-b', ...relativeDirs, '--watch', '--preserveWatchOutput', '--pretty'], {
+        cwd: root,
+        stdio: ['ignore', 'pipe', 'pipe'],
+        shell: process.platform === 'win32',
+    });
+    (_a = child.stdout) === null || _a === void 0 ? void 0 : _a.on('data', forwardTscOutput);
+    (_b = child.stderr) === null || _b === void 0 ? void 0 : _b.on('data', forwardTscOutput);
+    console.log(`Type watcher: tsc -b --watch over ${relativeDirs.length} workspace packages (disable with --no-types).`);
+    return child;
+};
+exports.startTypeWatcher = startTypeWatcher;
+//# sourceMappingURL=typeWatcher.js.map

package/lib/commonjs/lib/typeWatcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"typeWatcher.js","sourceRoot":"","sources":["../../../src/lib/typeWatcher.ts"],"names":[],"mappings":";;;;;;AAAA,yEAAyE;AACzE,6EAA6E;AAC7E,uEAAuE;AACvE,iEAAiE;AACjE,EAAE;AACF,8EAA8E;AAC9E,wEAAwE;AACxE,uCAAuC;AACvC,wDAA+D;AAE/D,iDAAoD;AACpD,4CAAoB;AACpB,gDAAwB;AAExB,oEAAoE;AACpE,MAAM,kBAAkB,GAAG,CAAC,oCAAoC,EAAE,sBAAsB,EAAE,gBAAgB,CAAC,CAAC;AAE5G,MAAM,gBAAgB,GAAG,CAAC,IAAY,EAAW,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAE7G,uEAAuE;AACvE,MAAM,gBAAgB,GAAG,CAAC,KAAa,EAAQ,EAAE;IAC/C,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;YACvD,SAAS;QACX,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IACjC,CAAC;AACH,CAAC,CAAC;AAEF,4EAA4E;AAC5E,4EAA4E;AAC5E,sDAAsD;AACtD,MAAM,uBAAuB,GAAG,CAAC,GAAW,EAAW,EAAE;IACvD,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,cAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC,EAAE,CAAC;QACpD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,YAAE,CAAC,YAAY,CAAC,cAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IACzF,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC;AACtD,CAAC,CAAC;AAEK,MAAM,gBAAgB,GAAG,CAAC,IAAY,EAAuB,EAAE;;IACpE,MAAM,WAAW,GAAG,IAAA,uCAAuB,EAAC,IAAI,CAAC,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC;IAClF,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,YAAY,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,cAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,IAAA,qBAAK,EAAC,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,YAAY,EAAE,SAAS,EAAE,uBAAuB,EAAE,UAAU,CAAC,EAAE;QACzG,GAAG,EAAE,IAAI;QACT,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;QACjC,KAAK,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;KACpC,CAAC,CAAC;IAEH,MAAA,KAAK,CAAC,MAAM,0CAAE,EAAE,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC3C,MAAA,KAAK,CAAC,MAAM,0CAAE,EAAE,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAE3C,OAAO,CAAC,GAAG,CAAC,qCAAqC,YAAY,CAAC,MAAM,gDAAgD,CAAC,CAAC;IAEtH,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAnBW,QAAA,gBAAgB,oBAmB3B","sourcesContent":["// Keeps workspace packages' declaration output (dist/*.d.ts) fresh while\n// `qpq go:dev` runs. The rspack dev builds bundle workspace source directly,\n// so this watcher only feeds the editor and validate-ts, which resolve\n// cross-package types through each package's built declarations.\n//\n// One `tsc -b --watch` over every workspace package that ships types; routine\n// watch chatter is dropped so only real compile errors reach the shared\n// terminal. Opt out with `--no-types`.\nimport { getWorkspacePackageDirs } from '@qpqjs/deploy-rspack';\n\nimport { ChildProcess, spawn } from 'child_process';\nimport fs from 'fs';\nimport path from 'path';\n\n// Routine tsc watch status lines; everything else is worth showing.\nconst routineTscPatterns = [/Starting compilation in watch mode/, /File change detected/, /Found 0 errors/];\n\nconst isRoutineTscLine = (line: string): boolean => routineTscPatterns.some((pattern) => pattern.test(line));\n\n// Forwards non-routine tsc output line by line under a [types] prefix.\nconst forwardTscOutput = (chunk: Buffer): void => {\n  for (const line of chunk.toString().split('\\n')) {\n    if (line.trim().length === 0 || isRoutineTscLine(line)) {\n      continue;\n    }\n    console.log(`[types] ${line}`);\n  }\n};\n\n// A workspace package wants declaration watching when it has a tsconfig and\n// publishes types from its build output. Packages bundled by rspack (views,\n// service handlers) don't ship types and are skipped.\nconst isTypedWorkspacePackage = (dir: string): boolean => {\n  if (!fs.existsSync(path.join(dir, 'tsconfig.json'))) {\n    return false;\n  }\n\n  const packageJson = JSON.parse(fs.readFileSync(path.join(dir, 'package.json'), 'utf-8'));\n  return !!(packageJson.types || packageJson.typings);\n};\n\nexport const startTypeWatcher = (root: string): ChildProcess | null => {\n  const projectDirs = getWorkspacePackageDirs(root).filter(isTypedWorkspacePackage);\n  if (projectDirs.length === 0) {\n    return null;\n  }\n\n  const relativeDirs = projectDirs.map((dir) => path.relative(root, dir));\n  const child = spawn('npx', ['tsc', '-b', ...relativeDirs, '--watch', '--preserveWatchOutput', '--pretty'], {\n    cwd: root,\n    stdio: ['ignore', 'pipe', 'pipe'],\n    shell: process.platform === 'win32',\n  });\n\n  child.stdout?.on('data', forwardTscOutput);\n  child.stderr?.on('data', forwardTscOutput);\n\n  console.log(`Type watcher: tsc -b --watch over ${relativeDirs.length} workspace packages (disable with --no-types).`);\n\n  return child;\n};\n"]}

package/lib/commonjs/lib/userScriptBuilderLayer.d.ts

@@ -0,0 +1,23 @@
+import { JavascriptRuntimeArchitecture } from '@qpqjs/core';
+export type BuilderLayerInstallOptions = {
+    outDir: string;
+    architecture: JavascriptRuntimeArchitecture;
+    rspackVersion: string;
+};
+/** The npm cpu name for a lambda architecture. */
+export declare const getBuilderLayerCpu: (architecture: JavascriptRuntimeArchitecture) => "arm64" | "x64";
+/**
+ * The npm argv that installs rspack for linux and the lambda's cpu into the layer's
+ * nodejs directory. Pure, so the exact invocation is testable without running npm.
+ */
+export declare const getBuilderLayerInstallArgs: ({ outDir, architecture, rspackVersion }: BuilderLayerInstallOptions) => string[];
+export type BuilderLayerRunners = {
+    getNpmVersion: () => string;
+    runNpm: (args: string[]) => void;
+};
+/**
+ * Produces the user-script builder layer directory: `<outDir>/nodejs/node_modules` holding
+ * rspack and its linux binding for the lambda's cpu. Empties `outDir` first and verifies
+ * the binding landed. Needs npm 9 or later for the `--os`/`--cpu` flags.
+ */
+export declare const buildUserScriptBuilderLayer: (options: BuilderLayerInstallOptions, runners?: BuilderLayerRunners) => string;

package/lib/commonjs/lib/userScriptBuilderLayer.js

@@ -0,0 +1,74 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildUserScriptBuilderLayer = exports.getBuilderLayerInstallArgs = exports.getBuilderLayerCpu = void 0;
+const core_1 = require("@qpqjs/core");
+const user_script_1 = require("@qpqjs/user-script");
+const child_process_1 = require("child_process");
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const MIN_NPM_MAJOR = 9;
+// Lambda's layer layout: /opt/nodejs/node_modules is on the function's module path.
+const LAYER_NODE_DIR = 'nodejs';
+const npmCpuByArchitecture = {
+    [core_1.JavascriptRuntimeArchitecture.Arm64]: 'arm64',
+    [core_1.JavascriptRuntimeArchitecture.X86_64]: 'x64',
+};
+/** The npm cpu name for a lambda architecture. */
+const getBuilderLayerCpu = (architecture) => npmCpuByArchitecture[architecture];
+exports.getBuilderLayerCpu = getBuilderLayerCpu;
+/**
+ * The npm argv that installs rspack for linux and the lambda's cpu into the layer's
+ * nodejs directory. Pure, so the exact invocation is testable without running npm.
+ */
+const getBuilderLayerInstallArgs = ({ outDir, architecture, rspackVersion }) => [
+    'install',
+    '--prefix',
+    path_1.default.join(outDir, LAYER_NODE_DIR),
+    '--os=linux',
+    `--cpu=${(0, exports.getBuilderLayerCpu)(architecture)}`,
+    '--libc=glibc',
+    '--omit=dev',
+    '--no-save',
+    '--no-package-lock',
+    '--no-audit',
+    '--no-fund',
+    `@rspack/core@${rspackVersion}`,
+];
+exports.getBuilderLayerInstallArgs = getBuilderLayerInstallArgs;
+const parseMajor = (version) => parseInt(version.split('.')[0], 10);
+const defaultRunners = {
+    getNpmVersion: () => (0, child_process_1.execFileSync)('npm', ['--version'], { encoding: 'utf8' }).trim(),
+    runNpm: (args) => {
+        (0, child_process_1.execFileSync)('npm', args, { stdio: 'inherit' });
+    },
+};
+/**
+ * Produces the user-script builder layer directory: `<outDir>/nodejs/node_modules` holding
+ * rspack and its linux binding for the lambda's cpu. Empties `outDir` first and verifies
+ * the binding landed. Needs npm 9 or later for the `--os`/`--cpu` flags.
+ */
+const buildUserScriptBuilderLayer = (options, runners = defaultRunners) => {
+    const npmVersion = runners.getNpmVersion();
+    if (parseMajor(npmVersion) < MIN_NPM_MAJOR) {
+        throw new Error(`script:builder-layer needs npm ${MIN_NPM_MAJOR} or later for --os/--cpu installs; found ${npmVersion}`);
+    }
+    const nodeDir = path_1.default.join(options.outDir, LAYER_NODE_DIR);
+    fs_1.default.rmSync(options.outDir, { recursive: true, force: true });
+    fs_1.default.mkdirSync(nodeDir, { recursive: true });
+    fs_1.default.writeFileSync(path_1.default.join(nodeDir, 'package.json'), JSON.stringify({ name: 'user-script-builder-layer', private: true }, null, 2));
+    runners.runNpm((0, exports.getBuilderLayerInstallArgs)(options));
+    const bindingDir = path_1.default.join(nodeDir, 'node_modules', '@rspack', `binding-linux-${(0, exports.getBuilderLayerCpu)(options.architecture)}-gnu`);
+    if (!fs_1.default.existsSync(bindingDir)) {
+        throw new Error(`script:builder-layer: expected the rspack binding at [${bindingDir}] after install; the layer would not load on lambda`);
+    }
+    const installed = user_script_1.USER_SCRIPT_BUILDER_LAYER_MODULES.filter((name) => fs_1.default.existsSync(path_1.default.join(nodeDir, 'node_modules', name)));
+    if (installed.length !== user_script_1.USER_SCRIPT_BUILDER_LAYER_MODULES.length) {
+        throw new Error(`script:builder-layer: the layer is missing ${user_script_1.USER_SCRIPT_BUILDER_LAYER_MODULES.filter((name) => !installed.includes(name)).join(', ')}`);
+    }
+    return nodeDir;
+};
+exports.buildUserScriptBuilderLayer = buildUserScriptBuilderLayer;
+//# sourceMappingURL=userScriptBuilderLayer.js.map