@stacksjs/cloud 0.58.48 → 0.58.50

package/src/cloud/jump-box.ts

@@ -0,0 +1,48 @@
+/* eslint-disable no-new */
+import type { aws_efs as efs } from 'aws-cdk-lib'
+import { CfnOutput as Output, aws_ec2 as ec2, aws_iam as iam } from 'aws-cdk-lib'
+import type { Construct } from 'constructs'
+import type { NestedCloudProps } from '../types'
+
+export interface JumpBoxStackProps extends NestedCloudProps {
+  vpc: ec2.Vpc
+  fileSystem: efs.FileSystem
+}
+
+// export class DocsStack extends NestedStack {
+export class JumpBoxStack {
+  jumpBox?: ec2.Instance
+
+  constructor(scope: Construct, props: JumpBoxStackProps) {
+    const role = new iam.Role(scope, 'JumpBoxInstanceRole', {
+      assumedBy: new iam.ServicePrincipal('ec2.amazonaws.com'),
+      managedPolicies: [
+        iam.ManagedPolicy.fromAwsManagedPolicyName('AmazonSSMManagedInstanceCore'),
+        iam.ManagedPolicy.fromAwsManagedPolicyName('CloudWatchAgentServerPolicy'),
+      ],
+    })
+
+    // this instance needs to be created once to mount the EFS & clone the Stacks repo
+    this.jumpBox = new ec2.Instance(scope, 'JumpBox', {
+      vpc: props.vpc,
+      instanceType: ec2.InstanceType.of(ec2.InstanceClass.T2, ec2.InstanceSize.MICRO),
+      machineImage: new ec2.AmazonLinuxImage(),
+      role,
+      userData: ec2.UserData.custom(`
+      #!/bin/bash
+      yum update -y
+      yum install -y amazon-efs-utils
+      yum install -y git
+      yum install -y https://s3.us-east-1.amazonaws.com/amazon-ssm-us-east-1/latest/linux_amd64/amazon-ssm-agent.rpm
+      mkdir /mnt/efs
+      mount -t efs ${props.fileSystem.fileSystemId}:/ /mnt/efs
+      git clone https://github.com/stacksjs/stacks.git /mnt/efs
+    `),
+    })
+
+    new Output(scope, 'JumpBoxInstanceId', {
+      value: this.jumpBox.instanceId,
+      description: 'The ID of the EC2 instance that can be used to SSH into the Stacks Cloud.',
+    })
+  }
+}

package/src/cloud/lambda/ask/index.js

@@ -0,0 +1,35 @@
+const AWS = require('aws-sdk')
+
+async function handler(event) {
+  const requestBody = JSON.parse(event.body)
+
+  // Extract the 'question' property from the request body
+  const question = requestBody.question
+  // eslint-disable-next-line no-console
+  console.log(`Question received: ${question}`)
+
+  const bedrockRuntime = new AWS.BedrockRuntime({ apiVersion: '2023-09-30' })
+  const res = await bedrockRuntime.invokeModel({
+    modelId: 'amazon.titan-text-express-v1',
+    contentType: 'application/json',
+    accept: '*/*',
+    body: JSON.stringify({
+      inputText: question,
+      textGenerationConfig: {
+        maxTokenCount: 300,
+        stopSequences: [],
+        temperature: 0.1,
+        topP: 0.9,
+      },
+    }),
+  }).promise()
+
+  return {
+    statusCode: 200,
+    body: res.body.toString(),
+  }
+}
+
+module.exports = {
+  handler,
+}

package/src/cloud/lambda/cli-setup/index.js

@@ -0,0 +1,67 @@
+async function handler() {
+  const setupScriptContents = `if [ -n "$1" ]; then
+  # Check if the directory exists
+  if [ -d "storage/framework/core" ]; then # this is our identifier whether it is a Stacks project
+    :
+  else
+    if [ -d "$1" ]; then
+      echo "Project $1 exists locally. Please use a different name & run again."
+      exit 1
+    else
+      git clone https://github.com/stacksjs/stacks.git $1
+      cd $1
+      # Run the pkgx-install script
+      "./storage/framework/scripts/pkgx-install"
+
+      echo "Project $1 has been created. Please open a new terminal, run 'bun run dev' to start the server."
+
+      exit 1
+    fi
+  fi
+fi
+
+# Get the directory of the current script and go up 3 directories
+PROJECT_ROOT="$(cd "$(dirname "$0")" && pwd)"
+CLI_PATH="$PROJECT_ROOT/storage/framework/core/buddy/src/cli.ts"
+SCRIPT_PATH="$PROJECT_ROOT/storage/framework/scripts/pkgx-install"
+LOG_PATH="$PROJECT_ROOT/storage/logs/console.log"
+
+if [[ $* == *--verbose* ]]; then
+  echo "Project root: $PROJECT_ROOT"
+  echo "CLI path: $CLI_PATH"
+  echo "Script path: $SCRIPT_PATH"
+  echo "Log path: $LOG_PATH"
+fi
+
+cd $PROJECT_ROOT
+# Run the pkgx-install script
+if [[ $* == *--verbose* ]]; then
+  "$SCRIPT_PATH"
+  # bun --bun ./storage/framework/core/buddy/src/cli.ts setup --verbose
+else
+  "$SCRIPT_PATH" > /dev/null 2>&1
+  # bun --bun ./storage/framework/core/buddy/src/cli.ts setup
+fi
+
+# Create a named pipe
+mkfifo /tmp/mypipe
+
+# Run the command, send output to both the console and the pipe
+bun --bun $CLI_PATH setup | tee /tmp/mypipe &
+
+# Read from the pipe, add timestamps, and append to the file
+while IFS= read -r line; do echo "$(date '+[%Y-%m-%d %H:%M:%S]') $line"; done < /tmp/mypipe >> $LOG_PATH
+
+# Remove the named pipe
+rm /tmp/mypipe
+`
+
+  return {
+    statusCode: 200,
+    body: setupScriptContents,
+  }
+}
+
+module.exports = {
+  handler,
+}

package/src/cloud/lambda/summarize/index.js

@@ -0,0 +1,35 @@
+const AWS = require('aws-sdk')
+
+async function handler(event) {
+  const requestBody = JSON.parse(event.body)
+
+  // Extract the 'question' property from the request body
+  const text = requestBody.text
+  // eslint-disable-next-line no-console
+  console.log(`Text received: ${text}`)
+
+  const bedrockRuntime = new AWS.BedrockRuntime({ apiVersion: '2023-09-30' })
+  const res = await bedrockRuntime.invokeModel({
+    modelId: 'amazon.titan-text-express-v1',
+    contentType: 'application/json',
+    accept: '*/*',
+    body: JSON.stringify({
+      inputText: `Summarize the following text: ${text}`,
+      textGenerationConfig: {
+        maxTokenCount: 512,
+        stopSequences: [],
+        temperature: 0,
+        topP: 0.9,
+      },
+    }),
+  }).promise()
+
+  return {
+    statusCode: 200,
+    body: res.body.toString(),
+  }
+}
+
+module.exports = {
+  handler,
+}

package/src/cloud/network.ts

@@ -0,0 +1,32 @@
+import { aws_ec2 as ec2 } from 'aws-cdk-lib'
+import type { Construct } from 'constructs'
+import type { NestedCloudProps } from '../types'
+
+export interface NetworkStackProps extends NestedCloudProps {
+  //
+}
+
+export class NetworkStack {
+  vpc: ec2.Vpc
+
+  constructor(scope: Construct, props: NetworkStackProps) {
+    this.vpc = new ec2.Vpc(scope, 'Network', {
+      vpcName: `${props.slug}-${props.appEnv}-vpc`,
+      ipAddresses: ec2.IpAddresses.cidr('10.0.0.0/16'),
+      maxAzs: 3,
+      natGateways: 0,
+      subnetConfiguration: [
+        {
+          name: 'public-subnet-1',
+          subnetType: ec2.SubnetType.PUBLIC,
+          cidrMask: 24,
+        },
+        {
+          name: 'private-subnet-1',
+          subnetType: ec2.SubnetType.PRIVATE_ISOLATED,
+          cidrMask: 28,
+        },
+      ],
+    })
+  }
+}

package/src/cloud/package/README.md

@@ -0,0 +1,59 @@
+# Stacks Router
+
+This package contains the Stacks Router.
+
+## ☘️ Features
+
+wip
+
+- ⚡️
+
+wip
+
+## 🤖 Usage
+
+wip
+
+```bash
+bun install -d @stacksjs/actions
+```
+
+Now, you can use it in your project:
+
+```js
+import * as router from '@stacksjs/router'
+
+// wip
+```
+
+Learn more in the docs.
+
+## 🧪 Testing
+
+```bash
+bun test
+```
+
+## 📈 Changelog
+
+Please see our [releases](https://github.com/stacksjs/stacks/releases) page for more information on what has changed recently.
+
+## 🚜 Contributing
+
+Please review the [Contributing Guide](https://github.com/stacksjs/contributing) for details.
+
+## 🏝 Community
+
+For help, discussion about best practices, or any other conversation that would benefit from being searchable:
+
+[Discussions on GitHub](https://github.com/stacksjs/stacks/discussions)
+
+For casual chit-chat with others using this package:
+
+[Join the Stacks Discord Server](https://discord.gg/stacksjs)
+
+## 📄 License
+
+The MIT License (MIT). Please see [LICENSE](https://github.com/stacksjs/stacks/tree/main/LICENSE.md) for more information.
+
+Made with 💙

package/src/cloud/package/package.json

@@ -0,0 +1,63 @@
+{
+  "name": "@stacksjs/router",
+  "type": "module",
+  "version": "0.58.50",
+  "description": "The Stacks framework router.",
+  "author": "Chris Breuer",
+  "license": "MIT",
+  "funding": "https://github.com/sponsors/chrisbbreuer",
+  "homepage": "https://github.com/stacksjs/stacks/tree/main/storage/framework/core/router#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/stacksjs/stacks.git",
+    "directory": "./storage/framework/core/router"
+  },
+  "bugs": {
+    "url": "https://github.com/stacksjs/stacks/issues"
+  },
+  "keywords": [
+    "router",
+    "stacks",
+    "framework",
+    "typescript",
+    "javascript"
+  ],
+  "exports": {
+    ".": {
+      "bun": "./src/index.ts",
+      "import": "./dist/index.js"
+    },
+    "./*": {
+      "bun": "./src/*",
+      "import": "./dist/*"
+    }
+  },
+  "module": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "contributors": [
+    "Chris Breuer <chris@stacksjs.org>"
+  ],
+  "files": [
+    "README.md",
+    "dist",
+    "src"
+  ],
+  "scripts": {
+    "build": "bun --bun build.ts",
+    "typecheck": "bun --bun tsc --noEmit",
+    "prepublishOnly": "bun --bun run build"
+  },
+  "peerDependencies": {
+    "@stacksjs/config": "latest",
+    "unplugin-vue-router": "^0.7.0",
+    "vue-router": "^4.2.5"
+  },
+  "dependencies": {
+    "@stacksjs/config": "latest",
+    "unplugin-vue-router": "^0.7.0",
+    "vue-router": "^4.2.5"
+  },
+  "devDependencies": {
+    "@stacksjs/development": "latest"
+  }
+}

package/src/cloud/permissions.ts

@@ -0,0 +1,33 @@
+import { SecretValue, aws_iam as iam } from 'aws-cdk-lib'
+import type { Construct } from 'constructs'
+import { config } from '@stacksjs/config'
+import { string } from '@stacksjs/strings'
+import { env } from '@stacksjs/env'
+import type { NestedCloudProps } from '../types'
+
+export interface PermissionsStackProps extends NestedCloudProps {
+  //
+}
+
+export class PermissionsStack {
+  constructor(scope: Construct) {
+    const teamName = config.team.name
+    const users = config.team.members
+    const password = env.AWS_DEFAULT_PASSWORD || string.random()
+
+    for (const name in users) {
+      // const userEmail = users[userName]
+      const id = `User${string.pascalCase(teamName)}${string.pascalCase(name)}`
+      const userName = string.slug(`${teamName}-${name}`)
+      const user = new iam.User(scope, id, {
+        userName,
+        password: SecretValue.unsafePlainText(password),
+        passwordResetRequired: true,
+      })
+
+      user.addManagedPolicy(iam.ManagedPolicy.fromAwsManagedPolicyName('AdministratorAccess'))
+
+      // TODO: email the userEmail their credentials
+    }
+  }
+}

package/src/cloud/redirects.ts

@@ -0,0 +1,45 @@
+/* eslint-disable no-new */
+import { config } from '@stacksjs/config'
+import { RemovalPolicy, aws_route53 as route53, aws_s3 as s3 } from 'aws-cdk-lib'
+import type { Construct } from 'constructs'
+import type { NestedCloudProps } from '../types'
+
+export interface RedirectsStackProps extends NestedCloudProps {
+  //
+}
+
+export class RedirectsStack {
+  redirectZones: route53.IHostedZone[] = []
+
+  constructor(scope: Construct, props: RedirectsStackProps) {
+    // for each redirect, create a bucket & redirect it to the APP_URL
+    config.dns.redirects?.forEach((redirect) => {
+      // TODO: use string-ts function here instead
+      const slug = redirect.split('.').map((part, index) => index === 0 ? part : part.charAt(0).toUpperCase() + part.slice(1)).join('') // creates a CamelCase slug from the redirect
+      const hostedZone = route53.HostedZone.fromLookup(scope, 'HostedZone', { domainName: redirect })
+
+      const redirectBucket = new s3.Bucket(scope, `RedirectBucket${slug}`, {
+        bucketName: `${redirect}-redirect`,
+        websiteRedirect: {
+          hostName: props.domain,
+          protocol: s3.RedirectProtocol.HTTPS,
+        },
+        removalPolicy: RemovalPolicy.DESTROY,
+        autoDeleteObjects: true,
+      })
+
+      new route53.CnameRecord(scope, `RedirectRecord${slug}`, {
+        zone: hostedZone,
+        recordName: 'redirect',
+        domainName: redirectBucket.bucketWebsiteDomainName,
+      })
+    })
+
+    // TODO: fix this – redirects do not work yet
+    config.dns.redirects?.forEach((redirect) => {
+      const slug = redirect.split('.').map((part, index) => index === 0 ? part : part.charAt(0).toUpperCase() + part.slice(1)).join('') // creates a CamelCase slug from the redirect
+      const hostedZone = route53.HostedZone.fromLookup(scope, `RedirectHostedZone${slug}`, { domainName: redirect })
+      this.redirectZones.push(hostedZone)
+    })
+  }
+}

package/src/cloud/router-layer/nodejs/package.json

@@ -0,0 +1,15 @@
+{
+  "name": "stacks-router-layer",
+  "version": "0.58.50",
+  "description": "",
+  "author": "",
+  "license": "MIT",
+  "keywords": [],
+  "main": "index.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1"
+  },
+  "dependencies": {
+    "@stacksjs/router": "^0.58.49"
+  }
+}

package/src/cloud/search-engine.ts

@@ -0,0 +1,108 @@
+// async manageSearchEngine() {
+//   const vpc = this.vpc
+
+//   // Security Group
+//   const bastionSecurityGroup = new ec2.SecurityGroup(this, 'BastionSecurityGroup', {
+//     vpc,
+//     allowAllOutbound: true,
+//     securityGroupName: `${this.appName}-${appEnv}-bastion-sg`,
+//   })
+
+//   const opensearchSecurityGroup = new ec2.SecurityGroup(this, 'OpenSearchSecurityGroup', {
+//     vpc,
+//     securityGroupName: `${this.appName}-${appEnv}-opensearch-sg`,
+//   })
+
+//   opensearchSecurityGroup.addIngressRule(bastionSecurityGroup, ec2.Port.tcp(443))
+
+//   // Service-linked role that Amazon OpenSearch Service will use
+//   const iamClient = new IAMClient({})
+//   const response = await iamClient.send(
+//     new ListRolesCommand({
+//       PathPrefix: '/aws-service-role/opensearchservice.amazonaws.com/',
+//     }),
+//   )
+
+//   // Only if the role for OpenSearch Service doesn't exist, it will be created.
+//   if (response.Roles && response.Roles?.length === 0) {
+//     new iam.CfnServiceLinkedRole(this, 'OpenSearchServiceLinkedRole', {
+//       awsServiceName: 'es.amazonaws.com',
+//     })
+//   }
+
+//   // Bastion host to access Opensearch Dashboards
+//   new ec2.BastionHostLinux(this, 'BastionHost', {
+//     vpc,
+//     securityGroup: bastionSecurityGroup,
+//     machineImage: ec2.MachineImage.latestAmazonLinux2023(),
+//     blockDevices: [
+//       {
+//         deviceName: '/dev/xvda',
+//         volume: ec2.BlockDeviceVolume.ebs(10, {
+//           encrypted: true,
+//         }),
+//       },
+//     ],
+//   })
+
+//   // OpenSearch domain
+//   const domain = new opensearch.Domain(this, 'OpenSearchDomain', {
+//     version: opensearch.EngineVersion.OPENSEARCH_2_9,
+//     nodeToNodeEncryption: true,
+//     enforceHttps: true,
+//     encryptionAtRest: {
+//       enabled: true,
+//     },
+//     vpc,
+//     // unsure if there are "better" ways to do this
+//     vpcSubnets: [
+//       { subnetGroupName: `${this.appName}-${appEnv}-private-subnet-1` },
+//       { subnetGroupName: `${this.appName}-${appEnv}-private-subnet-2` },
+//     ],
+
+//     capacity: {
+//       masterNodes: 2,
+//       dataNodes: 2,
+//       multiAzWithStandbyEnabled: true,
+//     },
+//     ebs: {
+//       volumeSize: 10,
+//       volumeType: ec2.EbsDeviceVolumeType.GP3, // or opensearch.EbsVolumeType.IO1
+//     },
+//     removalPolicy: RemovalPolicy.DESTROY,
+//     zoneAwareness: {
+//       enabled: true,
+//       availabilityZoneCount: 2,
+//     },
+//     securityGroups: [opensearchSecurityGroup],
+//   })
+
+//   domain.addAccessPolicies(
+//     new iam.PolicyStatement({
+//       principals: [new iam.AnyPrincipal()],
+//       actions: ['es:ESHttp*'],
+//       resources: [`${domain.domainArn}/*`],
+//     }),
+//   )
+
+//   // // Lambda
+//   // const dataIndexFunction = PythonFunction(this, 'DataIndex', {
+//   //   runtime: lambda.Runtime.PYTHON_3_10,
+//   //   entry: 'lambda',
+//   //   vpc,
+//   //   environment: {
+//   //     OPENSEARCH_HOST: domain.domainEndpoint,
+//   //   },
+//   // })
+
+//   // domain.connections.allowFrom(dataIndexFunction, Port.tcp(443))
+
+//   // Outputs
+//   new Output(this, 'OpenSearchDomainHost', {
+//     value: domain.domainEndpoint,
+//   })
+
+//   // new Output(this, 'IndexingFunctionName', {
+//   //   value: dataIndexFunction.functionName,
+//   // })
+// }