@stacksjs/cloud 0.59.10 → 0.61.0

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@stacksjs/cloud",
   "type": "module",
-  "version": "0.59.10",
+  "version": "0.61.0",
   "description": "The Stacks cloud/serverless integration & implementation.",
   "author": "Chris Breuer",
   "license": "MIT",
@@ -53,19 +53,19 @@
     "prepublishOnly": "bun run build"
   },
   "peerDependencies": {
-    "@aws-sdk/client-bedrock": "^3.525.0",
-    "@aws-sdk/client-cloudformation": "^3.526.0",
-    "@aws-sdk/client-cloudfront": "^3.525.0",
-    "@aws-sdk/client-cloudwatch-logs": "^3.525.0",
-    "@aws-sdk/client-ec2": "^3.525.1",
-    "@aws-sdk/client-efs": "^3.525.0",
-    "@aws-sdk/client-iam": "^3.525.0",
-    "@aws-sdk/client-lambda": "^3.525.0",
-    "@aws-sdk/client-route-53-domains": "^3.525.0",
-    "@aws-sdk/client-s3": "^3.525.0",
-    "@aws-sdk/client-ses": "^3.525.0",
-    "@aws-sdk/client-sesv2": "^3.527.0",
-    "@aws-sdk/client-ssm": "^3.525.0",
+    "@aws-sdk/client-bedrock": "^3.577.0",
+    "@aws-sdk/client-cloudformation": "^3.577.0",
+    "@aws-sdk/client-cloudfront": "^3.577.0",
+    "@aws-sdk/client-cloudwatch-logs": "^3.577.0",
+    "@aws-sdk/client-ec2": "^3.577.0",
+    "@aws-sdk/client-efs": "^3.577.0",
+    "@aws-sdk/client-iam": "^3.577.0",
+    "@aws-sdk/client-lambda": "^3.577.0",
+    "@aws-sdk/client-route-53-domains": "^3.577.0",
+    "@aws-sdk/client-s3": "^3.577.0",
+    "@aws-sdk/client-ses": "^3.577.0",
+    "@aws-sdk/client-sesv2": "^3.577.0",
+    "@aws-sdk/client-ssm": "^3.577.0",
     "@stacksjs/cli": "latest",
     "@stacksjs/config": "latest",
     "@stacksjs/env": "latest",
@@ -78,20 +78,20 @@
     "@stacksjs/validation": "latest"
   },
   "dependencies": {
-    "@aws-sdk/client-bedrock": "^3.525.0",
-    "@aws-sdk/client-cloudformation": "^3.526.0",
-    "@aws-sdk/client-cloudfront": "^3.525.0",
-    "@aws-sdk/client-cloudwatch-logs": "^3.525.0",
-    "@aws-sdk/client-dynamodb": "3.525.0",
-    "@aws-sdk/client-ec2": "^3.525.1",
-    "@aws-sdk/client-efs": "^3.525.0",
-    "@aws-sdk/client-iam": "^3.525.0",
-    "@aws-sdk/client-lambda": "^3.525.0",
-    "@aws-sdk/client-route-53-domains": "^3.525.0",
-    "@aws-sdk/client-s3": "^3.525.0",
-    "@aws-sdk/client-ses": "^3.525.0",
-    "@aws-sdk/client-sesv2": "^3.527.0",
-    "@aws-sdk/client-ssm": "^3.525.0",
+    "@aws-sdk/client-bedrock": "^3.577.0",
+    "@aws-sdk/client-cloudformation": "^3.577.0",
+    "@aws-sdk/client-cloudfront": "^3.577.0",
+    "@aws-sdk/client-cloudwatch-logs": "^3.577.0",
+    "@aws-sdk/client-dynamodb": "3.577.0",
+    "@aws-sdk/client-ec2": "^3.577.0",
+    "@aws-sdk/client-efs": "^3.577.0",
+    "@aws-sdk/client-iam": "^3.577.0",
+    "@aws-sdk/client-lambda": "^3.577.0",
+    "@aws-sdk/client-route-53-domains": "^3.577.0",
+    "@aws-sdk/client-s3": "^3.577.0",
+    "@aws-sdk/client-ses": "^3.577.0",
+    "@aws-sdk/client-sesv2": "^3.577.0",
+    "@aws-sdk/client-ssm": "^3.577.0",
     "@stacksjs/config": "latest",
     "@stacksjs/dns": "latest",
     "@stacksjs/env": "latest",
@@ -101,8 +101,8 @@
     "@stacksjs/storage": "latest",
     "@stacksjs/utils": "latest",
     "@stacksjs/validation": "latest",
-    "aws-cdk": "^2.131.0",
-    "aws-cdk-lib": "^2.131.0",
+    "aws-cdk": "^2.142.1",
+    "aws-cdk-lib": "^2.142.1",
     "aws4fetch": "^1.0.18",
     "constructs": "^10.3.0"
   },

package/src/cloud/ai.ts

@@ -1,11 +1,9 @@
-/* eslint-disable no-new */
+import { config } from '@stacksjs/config'
 import { Duration, CfnOutput as Output, aws_iam as iam, aws_lambda as lambda } from 'aws-cdk-lib'
 import type { Construct } from 'constructs'
-import { config } from '@stacksjs/config'
 import type { NestedCloudProps } from '../types'
 
-export interface AiStackProps extends NestedCloudProps {
-}
+export interface AiStackProps extends NestedCloudProps {}
 
 export class AiStack {
   askAiUrl: lambda.FunctionUrl
@@ -21,18 +19,13 @@ export class AiStack {
 
     const bedrockAccessPolicy = new iam.PolicyStatement({
       effect: iam.Effect.ALLOW,
-      actions: [
-        'bedrock:InvokeModel',
-        'bedrock:InvokeModelWithResponseStream',
-      ],
-      resources: config.ai.models?.map(model => `arn:aws:bedrock:us-east-1::foundation-model/${model}`),
+      actions: ['bedrock:InvokeModel', 'bedrock:InvokeModelWithResponseStream'],
+      resources: config.ai.models?.map((model) => `arn:aws:bedrock:us-east-1::foundation-model/${model}`),
     })
 
     const bedrockAccessRole = new iam.Role(scope, 'BedrockAccessRole', {
       assumedBy: new iam.ServicePrincipal('lambda.amazonaws.com'),
-      managedPolicies: [
-        iam.ManagedPolicy.fromAwsManagedPolicyName('service-role/AWSLambdaBasicExecutionRole'),
-      ],
+      managedPolicies: [iam.ManagedPolicy.fromAwsManagedPolicyName('service-role/AWSLambdaBasicExecutionRole')],
     })
 
     bedrockAccessRole.addToPolicy(bedrockAccessPolicy)

package/src/cloud/aws-sdk-layer/nodejs/package-lock.json

@@ -1,15 +1,15 @@
 {
   "name": "aws-sdk-layer",
-  "version": "0.58.73",
+  "version": "0.60.3",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "aws-sdk-layer",
-      "version": "0.58.73",
+      "version": "0.60.3",
       "license": "ISC",
       "dependencies": {
-        "aws-sdk": "^2.1571.0"
+        "aws-sdk": "^2.1624.0"
       }
     },
     "node_modules/available-typed-arrays": {
@@ -24,9 +24,11 @@
       }
     },
     "node_modules/aws-sdk": {
-      "version": "2.1571.0",
-      "resolved": "https://registry.npmjs.org/aws-sdk/-/aws-sdk-2.1571.0.tgz",
-      "integrity": "sha512-Hixs1aD+7IwsP/Bkb7StFCrOC9ejmw8zBv8xVqEtEughRX6AF8bLKFRoJRbD4V6TrM+gPGpCqoFlpa84HLHkSA==",
+      "version": "2.1624.0",
+      "resolved": "https://registry.npmjs.org/aws-sdk/-/aws-sdk-2.1624.0.tgz",
+      "integrity": "sha512-SxBGDkdmsQTXLKPaY+hLqjlQyZBaGaFD34EhTd4aYuuqT952sxYeDt7w75py4o4O5z4hUUTccqTF9dtpxCPJfg==",
+      "hasInstallScript": true,
+      "license": "Apache-2.0",
       "dependencies": {
         "buffer": "4.9.2",
         "events": "1.1.1",

package/src/cloud/aws-sdk-layer/nodejs/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aws-sdk-layer",
-  "version": "0.59.10",
+  "version": "0.61.0",
   "description": "",
   "author": "",
   "license": "ISC",
@@ -10,6 +10,6 @@
     "test": "echo \"Error: no test specified\" && exit 1"
   },
   "dependencies": {
-    "aws-sdk": "^2.1571.0"
+    "aws-sdk": "^2.1624.0"
   }
 }

package/src/cloud/cdn.ts

@@ -1,15 +1,22 @@
-/* eslint-disable no-new */
-import type { aws_certificatemanager as acm, aws_lambda as lambda, aws_s3 as s3, aws_wafv2 as wafv2 } from 'aws-cdk-lib'
-import { Duration, Fn, CfnOutput as Output, aws_cloudfront as cloudfront, aws_cloudfront_origins as origins, aws_route53 as route53, aws_route53_targets as targets } from 'aws-cdk-lib'
-import type { Construct } from 'constructs'
 import { config } from '@stacksjs/config'
-import { hasFiles } from '@stacksjs/storage'
-import { path as p } from '@stacksjs/path'
 import { env } from '@stacksjs/env'
+import { path as p } from '@stacksjs/path'
+import { hasFiles } from '@stacksjs/storage'
+import type { aws_certificatemanager as acm, aws_lambda as lambda, aws_s3 as s3, aws_wafv2 as wafv2 } from 'aws-cdk-lib'
+import {
+  Duration,
+  Fn,
+  CfnOutput as Output,
+  aws_cloudfront as cloudfront,
+  aws_cloudfront_origins as origins,
+  aws_route53 as route53,
+  aws_route53_targets as targets,
+} from 'aws-cdk-lib'
 import type { ApplicationLoadBalancer } from 'aws-cdk-lib/aws-elasticloadbalancingv2'
 import * as kinesis from 'aws-cdk-lib/aws-kinesis'
-import type { NestedCloudProps } from '../types'
+import type { Construct } from 'constructs'
 import type { EnvKey } from '../../../../env'
+import type { NestedCloudProps } from '../types'
 
 export interface CdnStackProps extends NestedCloudProps {
   certificate: acm.Certificate
@@ -74,9 +81,7 @@ export class CdnStack {
 
     // TODO: make this configurable
     this.realtimeLogConfig = new cloudfront.RealtimeLogConfig(scope, 'StacksRealTimeLogConfig', {
-      endPoints: [
-        cloudfront.Endpoint.fromKinesisStream(logStream),
-      ],
+      endPoints: [cloudfront.Endpoint.fromKinesisStream(logStream)],
       fields: [
         'timestamp',
         'c-ip',
@@ -169,7 +174,7 @@ export class CdnStack {
         return cloudfront.CacheCookieBehavior.none()
       case 'allowList':
         // If you have a list of cookies, replace `myCookie` with your cookie
-        return cloudfront.CacheCookieBehavior.allowList(...config.cloud.cdn?.allowList.cookies || [])
+        return cloudfront.CacheCookieBehavior.allowList(...(config.cloud.cdn?.allowList.cookies || []))
       default:
         return undefined
     }
@@ -200,8 +205,7 @@ export class CdnStack {
   }
 
   allowedMethodsFromString(methods?: 'ALL' | 'GET_HEAD' | 'GET_HEAD_OPTIONS'): cloudfront.AllowedMethods {
-    if (!methods)
-      return cloudfront.AllowedMethods.ALLOW_ALL
+    if (!methods) return cloudfront.AllowedMethods.ALLOW_ALL
 
     switch (methods) {
       case 'ALL':
@@ -216,8 +220,7 @@ export class CdnStack {
   }
 
   cachedMethodsFromString(methods?: 'GET_HEAD' | 'GET_HEAD_OPTIONS'): cloudfront.CachedMethods {
-    if (!methods)
-      return cloudfront.CachedMethods.CACHE_GET_HEAD
+    if (!methods) return cloudfront.CachedMethods.CACHE_GET_HEAD
 
     switch (methods) {
       case 'GET_HEAD':
@@ -230,7 +233,7 @@ export class CdnStack {
   }
 
   shouldDeployApi() {
-    return config.cloud.api?.deploy
+    return config.api?.deploy
   }
 
   apiBehaviorOptions(scope: Construct, props: CdnStackProps): Record<string, cloudfront.BehaviorOptions> {
@@ -376,8 +379,27 @@ export class CdnStack {
     let behaviorOptions: Record<string, cloudfront.BehaviorOptions> = {}
 
     if (this.shouldDeployApi()) {
-      const keysToRemove = ['_HANDLER', '_X_AMZN_TRACE_ID', 'AWS_REGION', 'AWS_EXECUTION_ENV', 'AWS_LAMBDA_FUNCTION_NAME', 'AWS_LAMBDA_FUNCTION_MEMORY_SIZE', 'AWS_LAMBDA_FUNCTION_VERSION', 'AWS_LAMBDA_INITIALIZATION_TYPE', 'AWS_LAMBDA_LOG_GROUP_NAME', 'AWS_LAMBDA_LOG_STREAM_NAME', 'AWS_ACCESS_KEY', 'AWS_ACCESS_KEY_ID', 'AWS_SECRET_ACCESS_KEY', 'AWS_SESSION_TOKEN', 'AWS_LAMBDA_RUNTIME_API', 'LAMBDA_TASK_ROOT', 'LAMBDA_RUNTIME_DIR', '_']
-      keysToRemove.forEach(key => delete env[key as EnvKey])
+      const keysToRemove = [
+        '_HANDLER',
+        '_X_AMZN_TRACE_ID',
+        'AWS_REGION',
+        'AWS_EXECUTION_ENV',
+        'AWS_LAMBDA_FUNCTION_NAME',
+        'AWS_LAMBDA_FUNCTION_MEMORY_SIZE',
+        'AWS_LAMBDA_FUNCTION_VERSION',
+        'AWS_LAMBDA_INITIALIZATION_TYPE',
+        'AWS_LAMBDA_LOG_GROUP_NAME',
+        'AWS_LAMBDA_LOG_STREAM_NAME',
+        'AWS_ACCESS_KEY',
+        'AWS_ACCESS_KEY_ID',
+        'AWS_SECRET_ACCESS_KEY',
+        'AWS_SESSION_TOKEN',
+        'AWS_LAMBDA_RUNTIME_API',
+        'LAMBDA_TASK_ROOT',
+        'LAMBDA_RUNTIME_DIR',
+        '_',
+      ]
+      keysToRemove.forEach((key) => delete env[key as EnvKey])
 
       behaviorOptions = this.apiBehaviorOptions(scope, props)
     }
@@ -409,8 +431,7 @@ export class CdnStack {
   }
 
   setApiCachePolicy(scope: Construct) {
-    if (this.apiCachePolicy)
-      return this.apiCachePolicy
+    if (this.apiCachePolicy) return this.apiCachePolicy
 
     this.apiCachePolicy = new cloudfront.CachePolicy(scope, 'ApiCachePolicy', {
       comment: 'Stacks API Cache Policy',

package/src/cloud/cli.ts

@@ -1,10 +1,8 @@
-/* eslint-disable no-new */
 import { Duration, CfnOutput as Output, aws_lambda as lambda } from 'aws-cdk-lib'
 import type { Construct } from 'constructs'
 import type { NestedCloudProps } from '../types'
 
-export interface CliStackProps extends NestedCloudProps {
-}
+export interface CliStackProps extends NestedCloudProps {}
 
 export class CliStack {
   cliSetupUrl: lambda.FunctionUrl

package/src/cloud/compute.ts

@@ -1,13 +1,21 @@
-/* eslint-disable no-new */
-import type { aws_certificatemanager as acm, aws_efs as efs } from 'aws-cdk-lib'
-import { Duration, CfnOutput as Output, RemovalPolicy, aws_ec2 as ec2, aws_ecs as ecs, aws_route53 as route53, aws_route53_targets as route53Targets, aws_secretsmanager as secretsmanager } from 'aws-cdk-lib'
-import type { Construct } from 'constructs'
-import { path as p } from '@stacksjs/path'
 import { env } from '@stacksjs/env'
-import { LogGroup } from 'aws-cdk-lib/aws-logs'
+import { path as p } from '@stacksjs/path'
+import type { aws_certificatemanager as acm, aws_efs as efs } from 'aws-cdk-lib'
+import {
+  Duration,
+  CfnOutput as Output,
+  RemovalPolicy,
+  aws_ec2 as ec2,
+  aws_ecs as ecs,
+  aws_route53 as route53,
+  aws_route53_targets as route53Targets,
+  aws_secretsmanager as secretsmanager,
+} from 'aws-cdk-lib'
 import * as elbv2 from 'aws-cdk-lib/aws-elasticloadbalancingv2'
-import type { NestedCloudProps } from '../types'
+import { LogGroup } from 'aws-cdk-lib/aws-logs'
+import type { Construct } from 'constructs'
 import type { EnvKey } from '../../../../env'
+import type { NestedCloudProps } from '../types'
 
 export interface ComputeStackProps extends NestedCloudProps {
   vpc: ec2.Vpc
@@ -25,8 +33,7 @@ export class ComputeStack {
     const vpc = props.vpc
     const fileSystem = props.fileSystem
 
-    if (!fileSystem)
-      throw new Error('The file system is missing. Please make sure it was created properly.')
+    if (!fileSystem) throw new Error('The file system is missing. Please make sure it was created properly.')
 
     this.cluster = new ecs.Cluster(scope, 'StacksCluster', {
       clusterName: `${props.slug}-${props.appEnv}-web-server-cluster`,
@@ -79,11 +86,7 @@ export class ComputeStack {
     })
 
     // Assuming serviceSecurityGroup and publicLoadBalancerSG are already defined
-    serviceSecurityGroup.addIngressRule(
-      publicLoadBalancerSG,
-      ec2.Port.allTraffic(),
-      'Ingress from the public ALB',
-    )
+    serviceSecurityGroup.addIngressRule(publicLoadBalancerSG, ec2.Port.allTraffic(), 'Ingress from the public ALB')
 
     this.lb = new elbv2.ApplicationLoadBalancer(scope, 'ApplicationLoadBalancer', {
       http2Enabled: true,
@@ -183,8 +186,27 @@ export class ComputeStack {
       scaleOutCooldown: Duration.seconds(60),
     })
 
-    const keysToRemove = ['_HANDLER', '_X_AMZN_TRACE_ID', 'AWS_REGION', 'AWS_EXECUTION_ENV', 'AWS_LAMBDA_FUNCTION_NAME', 'AWS_LAMBDA_FUNCTION_MEMORY_SIZE', 'AWS_LAMBDA_FUNCTION_VERSION', 'AWS_LAMBDA_INITIALIZATION_TYPE', 'AWS_LAMBDA_LOG_GROUP_NAME', 'AWS_LAMBDA_LOG_STREAM_NAME', 'AWS_ACCESS_KEY', 'AWS_ACCESS_KEY_ID', 'AWS_SECRET_ACCESS_KEY', 'AWS_SESSION_TOKEN', 'AWS_LAMBDA_RUNTIME_API', 'LAMBDA_TASK_ROOT', 'LAMBDA_RUNTIME_DIR', '_']
-    keysToRemove.forEach(key => delete env[key as EnvKey])
+    const keysToRemove = [
+      '_HANDLER',
+      '_X_AMZN_TRACE_ID',
+      'AWS_REGION',
+      'AWS_EXECUTION_ENV',
+      'AWS_LAMBDA_FUNCTION_NAME',
+      'AWS_LAMBDA_FUNCTION_MEMORY_SIZE',
+      'AWS_LAMBDA_FUNCTION_VERSION',
+      'AWS_LAMBDA_INITIALIZATION_TYPE',
+      'AWS_LAMBDA_LOG_GROUP_NAME',
+      'AWS_LAMBDA_LOG_STREAM_NAME',
+      'AWS_ACCESS_KEY',
+      'AWS_ACCESS_KEY_ID',
+      'AWS_SECRET_ACCESS_KEY',
+      'AWS_SESSION_TOKEN',
+      'AWS_LAMBDA_RUNTIME_API',
+      'LAMBDA_TASK_ROOT',
+      'LAMBDA_RUNTIME_DIR',
+      '_',
+    ]
+    keysToRemove.forEach((key) => delete env[key as EnvKey])
 
     const secrets = new secretsmanager.Secret(scope, 'StacksSecrets', {
       secretName: `${props.slug}-${props.appEnv}-secrets`,
@@ -195,7 +217,7 @@ export class ComputeStack {
       },
     })
 
-    secrets.grantRead(service.taskDefinition.executionRole!)
+    secrets.grantRead(service.taskDefinition.executionRole)
     container.addEnvironment('SECRETS_ARN', secrets.secretArn)
 
     const apiPrefix = 'api'

package/src/cloud/dashboard.ts

@@ -1,4 +1,3 @@
-// /* eslint-disable no-new */
 // // TODO: finish this cloudwatch dashboard
 // // import type { aws_lambda as lambda } from 'aws-cdk-lib'
 // import { Aws, CfnOutput as Output, aws_cloudwatch as cloudwatch } from 'aws-cdk-lib'

package/src/cloud/database.ts

@@ -0,0 +1,34 @@
+import type { aws_ec2 as ec2 } from 'aws-cdk-lib'
+import { RemovalPolicy, aws_dynamodb as dynamodb } from 'aws-cdk-lib'
+import type { Construct } from 'constructs'
+import type { NestedCloudProps } from '../types'
+
+export interface DatabaseStackProps extends NestedCloudProps {
+  vpc: ec2.Vpc
+}
+
+export class DatabaseStack {
+  database: dynamodb.Table
+
+  constructor(scope: Construct, props: DatabaseStackProps) {
+    this.database = new dynamodb.Table(scope, 'Database', {
+      tableName: `${props.slug}-${props.appEnv}-database`,
+      partitionKey: {
+        // wip
+        name: 'id',
+        type: dynamodb.AttributeType.STRING,
+      },
+      sortKey: {
+        // wip
+        name: 'sort',
+        type: dynamodb.AttributeType.STRING,
+      },
+      billingMode: dynamodb.BillingMode.PAY_PER_REQUEST,
+      readCapacity: 5,
+      writeCapacity: 5,
+      pointInTimeRecovery: true,
+      removalPolicy: RemovalPolicy.DESTROY,
+      encryption: dynamodb.TableEncryption.AWS_MANAGED,
+    })
+  }
+}

package/src/cloud/deployment.ts

@@ -1,8 +1,7 @@
-/* eslint-disable no-new */
-import type { aws_cloudfront as cloudfront, aws_s3 as s3 } from 'aws-cdk-lib'
-import { AssetHashType, aws_s3_deployment as s3deploy } from 'aws-cdk-lib'
 import { config } from '@stacksjs/config'
 import { websiteSourceHash } from '@stacksjs/utils'
+import type { aws_cloudfront as cloudfront, aws_s3 as s3 } from 'aws-cdk-lib'
+import { AssetHashType, aws_s3_deployment as s3deploy } from 'aws-cdk-lib'
 import type { Construct } from 'constructs'
 import type { NestedCloudProps } from '../types'
 
@@ -24,10 +23,12 @@ export class DeploymentStack {
     this.websiteSource = config.app.docMode === true ? this.docsSource : '../views/dist/'
 
     new s3deploy.BucketDeployment(scope, 'Website', {
-      sources: [s3deploy.Source.asset(this.websiteSource, {
-        assetHash: websiteSourceHash(),
-        assetHashType: AssetHashType.CUSTOM,
-      })],
+      sources: [
+        s3deploy.Source.asset(this.websiteSource, {
+          assetHash: websiteSourceHash(),
+          assetHashType: AssetHashType.CUSTOM,
+        }),
+      ],
       destinationBucket: props.publicBucket,
       distribution: props.cdn,
       distributionPaths: ['/*'],

package/src/cloud/dns.ts

@@ -1,4 +1,3 @@
-/* eslint-disable no-new */
 import { RemovalPolicy, aws_route53 as route53, aws_s3 as s3, aws_route53_targets as targets } from 'aws-cdk-lib'
 import type { Construct } from 'constructs'
 import type { NestedCloudProps } from '../types'

package/src/cloud/docs.ts

@@ -1,11 +1,10 @@
-/* eslint-disable no-new */
-import type { CfnResource } from 'aws-cdk-lib'
-import { AssetHashType, CfnOutput as Output, RemovalPolicy, aws_lambda as lambda } from 'aws-cdk-lib'
-import type { Construct } from 'constructs'
 import { config } from '@stacksjs/config'
 import { path as p } from '@stacksjs/path'
 import { storage } from '@stacksjs/storage'
 import { originRequestFunctionHash } from '@stacksjs/utils'
+import type { CfnResource } from 'aws-cdk-lib'
+import { AssetHashType, CfnOutput as Output, RemovalPolicy, aws_lambda as lambda } from 'aws-cdk-lib'
+import type { Construct } from 'constructs'
 import type { NestedCloudProps } from '../types'
 
 export interface DocsStackProps extends NestedCloudProps {

package/src/cloud/email.ts

@@ -1,6 +1,16 @@
-/* eslint-disable no-new */
-import { Duration, RemovalPolicy, Stack, Tags, aws_iam as iam, aws_lambda as lambda, aws_route53 as route53, aws_s3 as s3, aws_s3_notifications as s3n, aws_ses as ses } from 'aws-cdk-lib'
 import { config } from '@stacksjs/config'
+import {
+  Duration,
+  RemovalPolicy,
+  Stack,
+  Tags,
+  aws_iam as iam,
+  aws_lambda as lambda,
+  aws_route53 as route53,
+  aws_s3 as s3,
+  aws_s3_notifications as s3n,
+  aws_ses as ses,
+} from 'aws-cdk-lib'
 import type { Construct } from 'constructs'
 import type { NestedCloudProps } from '../types'
 
@@ -68,18 +78,16 @@ export class EmailStack {
         sid: 'AllowSESPuts',
         effect: iam.Effect.ALLOW,
         principals: [sesPrincipal],
-        actions: [
-          's3:PutObject',
-        ],
-        resources: [
-            `${this.emailBucket.bucketArn}/*`,
-        ],
+        actions: ['s3:PutObject'],
+        resources: [`${this.emailBucket.bucketArn}/*`],
         conditions: {
           StringEquals: {
             'aws:SourceAccount': Stack.of(scope).account,
           },
           ArnLike: {
-            'aws:SourceArn': `arn:aws:ses:${Stack.of(scope).region}:${Stack.of(scope).account}:receipt-rule-set/${ruleSetName}:receipt-rule/${receiptRuleName}`,
+            'aws:SourceArn': `arn:aws:ses:${Stack.of(scope).region}:${
+              Stack.of(scope).account
+            }:receipt-rule-set/${ruleSetName}:receipt-rule/${receiptRuleName}`,
           },
         },
       }),
@@ -130,10 +138,7 @@ export class EmailStack {
         's3:PutObjectAcl',
         's3:PutObjectVersionAcl',
       ],
-      resources: [
-        this.emailBucket.bucketArn,
-          `${this.emailBucket.bucketArn}/*`,
-      ],
+      resources: [this.emailBucket.bucketArn, `${this.emailBucket.bucketArn}/*`],
     })
 
     const policy = new iam.Policy(scope, 'EmailAccessPolicy', {
@@ -194,10 +199,12 @@ export class EmailStack {
     new route53.MxRecord(scope, 'MxRecord', {
       zone: props.zone,
       recordName: 'mail',
-      values: [{
-        priority: 10,
-        hostName: 'feedback-smtp.us-east-1.amazonses.com',
-      }],
+      values: [
+        {
+          priority: 10,
+          hostName: 'feedback-smtp.us-east-1.amazonses.com',
+        },
+      ],
     })
 
     new route53.TxtRecord(scope, 'TxtSpfRecord', {
@@ -215,9 +222,7 @@ export class EmailStack {
     const lambdaEmailOutboundRole = new iam.Role(scope, 'LambdaEmailOutboundRole', {
       roleName: `${props.slug}-${props.appEnv}-email-outbound`,
       assumedBy: new iam.ServicePrincipal('lambda.amazonaws.com'),
-      managedPolicies: [
-        iam.ManagedPolicy.fromAwsManagedPolicyName('service-role/AWSLambdaBasicExecutionRole'),
-      ],
+      managedPolicies: [iam.ManagedPolicy.fromAwsManagedPolicyName('service-role/AWSLambdaBasicExecutionRole')],
     })
 
     const lambdaEmailOutbound = new lambda.Function(scope, 'LambdaEmailOutbound', {
@@ -247,9 +252,7 @@ export class EmailStack {
     const lambdaEmailInboundRole = new iam.Role(scope, 'LambdaEmailInboundRole', {
       roleName: `${props.slug}-${props.appEnv}-email-inbound`,
       assumedBy: new iam.ServicePrincipal('lambda.amazonaws.com'),
-      managedPolicies: [
-        iam.ManagedPolicy.fromAwsManagedPolicyName('service-role/AWSLambdaBasicExecutionRole'),
-      ],
+      managedPolicies: [iam.ManagedPolicy.fromAwsManagedPolicyName('service-role/AWSLambdaBasicExecutionRole')],
     })
 
     const lambdaEmailInbound = new lambda.Function(scope, 'LambdaEmailInbound', {
@@ -275,10 +278,7 @@ export class EmailStack {
     const inboundS3PolicyStatement = new iam.PolicyStatement({
       effect: iam.Effect.ALLOW,
       actions: ['s3:*'],
-      resources: [
-        this.emailBucket.bucketArn,
-          `${this.emailBucket.bucketArn}/*`,
-      ],
+      resources: [this.emailBucket.bucketArn, `${this.emailBucket.bucketArn}/*`],
     })
 
     lambdaEmailInboundRole.addToPolicy(inboundS3PolicyStatement)
@@ -294,15 +294,15 @@ export class EmailStack {
     const lambdaEmailConverterRole = new iam.Role(scope, 'LambdaEmailConverterRole', {
       roleName: `${props.slug}-${props.appEnv}-email-converter`,
       assumedBy: new iam.ServicePrincipal('lambda.amazonaws.com'),
-      managedPolicies: [
-        iam.ManagedPolicy.fromAwsManagedPolicyName('service-role/AWSLambdaBasicExecutionRole'),
-      ],
+      managedPolicies: [iam.ManagedPolicy.fromAwsManagedPolicyName('service-role/AWSLambdaBasicExecutionRole')],
     })
 
     const lambdaEmailConverter = new lambda.Function(scope, 'LambdaEmailConverter', {
       functionName: `${props.slug}-${props.appEnv}-email-converter`,
       description: 'This Lambda converts raw emails files in to HTML and text.',
-      code: lambda.Code.fromInline('exports.handler = async (event) => {console.log("hello world email converter");return true;};'), // this needs to be updated with the real lambda code
+      code: lambda.Code.fromInline(
+        'exports.handler = async (event) => {console.log("hello world email converter");return true;};',
+      ), // this needs to be updated with the real lambda code
       handler: 'index.handler',
       memorySize: 256,
       role: lambdaEmailConverterRole,
@@ -316,10 +316,7 @@ export class EmailStack {
     const converterS3PolicyStatement = new iam.PolicyStatement({
       effect: iam.Effect.ALLOW,
       actions: ['s3:*'],
-      resources: [
-        this.emailBucket.bucketArn,
-          `${this.emailBucket.bucketArn}/*`,
-      ],
+      resources: [this.emailBucket.bucketArn, `${this.emailBucket.bucketArn}/*`],
     })
 
     new lambda.CfnPermission(scope, 'S3ConverterPermission', {
@@ -330,10 +327,30 @@ export class EmailStack {
 
     lambdaEmailConverterRole.addToPolicy(converterS3PolicyStatement)
 
-    this.emailBucket.addEventNotification(s3.EventType.OBJECT_CREATED_PUT, new s3n.LambdaDestination(lambdaEmailInbound), { prefix: 'tmp/email_in/' })
-    this.emailBucket.addEventNotification(s3.EventType.OBJECT_CREATED_PUT, new s3n.LambdaDestination(lambdaEmailOutbound), { prefix: 'tmp/email_out/json/' })
-    this.emailBucket.addEventNotification(s3.EventType.OBJECT_CREATED_COPY, new s3n.LambdaDestination(lambdaEmailConverter), { prefix: 'sent/' })
-    this.emailBucket.addEventNotification(s3.EventType.OBJECT_CREATED_COPY, new s3n.LambdaDestination(lambdaEmailConverter), { prefix: 'inbox/' })
-    this.emailBucket.addEventNotification(s3.EventType.OBJECT_CREATED_COPY, new s3n.LambdaDestination(lambdaEmailConverter), { prefix: 'today/' })
+    this.emailBucket.addEventNotification(
+      s3.EventType.OBJECT_CREATED_PUT,
+      new s3n.LambdaDestination(lambdaEmailInbound),
+      { prefix: 'tmp/email_in/' },
+    )
+    this.emailBucket.addEventNotification(
+      s3.EventType.OBJECT_CREATED_PUT,
+      new s3n.LambdaDestination(lambdaEmailOutbound),
+      { prefix: 'tmp/email_out/json/' },
+    )
+    this.emailBucket.addEventNotification(
+      s3.EventType.OBJECT_CREATED_COPY,
+      new s3n.LambdaDestination(lambdaEmailConverter),
+      { prefix: 'sent/' },
+    )
+    this.emailBucket.addEventNotification(
+      s3.EventType.OBJECT_CREATED_COPY,
+      new s3n.LambdaDestination(lambdaEmailConverter),
+      { prefix: 'inbox/' },
+    )
+    this.emailBucket.addEventNotification(
+      s3.EventType.OBJECT_CREATED_COPY,
+      new s3n.LambdaDestination(lambdaEmailConverter),
+      { prefix: 'today/' },
+    )
   }
 }