@stacksjs/cloud 0.66.0 → 0.68.0

package/src/cloud/cli.ts

@@ -1,14 +0,0 @@
-import type { Construct } from 'constructs'
-import type { NestedCloudProps } from '../types'
-import { CfnOutput as Output } from 'aws-cdk-lib'
-
-export interface CliStackProps extends NestedCloudProps {}
-
-export class CliStack {
-  constructor(scope: Construct, props: CliStackProps) {
-    new Output(scope, 'CliSetupUrl', {
-      value: `https://api.${props.domain}/install`,
-      description: 'URL to trigger the CLI setup function',
-    })
-  }
-}

package/src/cloud/dashboard.ts

@@ -1,85 +0,0 @@
-// // TODO: finish this cloudwatch dashboard
-// // import type { aws_lambda as lambda } from 'aws-cdk-lib'
-// import { Aws, CfnOutput as Output, aws_cloudwatch as cloudwatch } from 'aws-cdk-lib'
-// import type { Construct } from 'constructs'
-// import type { NestedCloudProps } from '../types'
-//
-// export interface DashboardStackProps extends NestedCloudProps {
-//   dashboardName?: string
-// }
-//
-// export class DashboardStack {
-//   // lambdaFunction: lambda.Function
-//   dashboard: cloudwatch.Dashboard
-//
-//   constructor(scope: Construct, props: DashboardStackProps) {
-//     const dashboardName = props.dashboardName || 'StacksDashboard'
-//
-//     // Create Sample Lambda Function which will create metrics
-//     // this.lambdaFunction = new Function(this, 'SampleLambda', {
-//     //   handler: 'lambda-handler.handler',
-//     //   runtime: Runtime.PYTHON_3_7,
-//     //   code: new AssetCode(`./lambda`),
-//     //   memorySize: 512,
-//     //   timeout: Duration.seconds(10),
-//     // })
-//
-//     // Create CloudWatch Dashboard
-//     this.dashboard = new cloudwatch.Dashboard(scope, 'SampleLambdaDashboard', {
-//       dashboardName,
-//     })
-//
-//     // Create Title for Dashboard
-//     this.dashboard.addWidgets(new cloudwatch.TextWidget({
-//       markdown: `# Dashboard: `,
-//       // markdown: `# Dashboard: ${this.lambdaFunction.functionName}`,
-//       height: 1,
-//       width: 24,
-//     }))
-//
-//     // Create CloudWatch Dashboard Widgets: Errors, Invocations, Duration, Throttles
-//     this.dashboard.addWidgets(new cloudwatch.GraphWidget({
-//       title: 'Invocations',
-//       left: [this.lambdaFunction.metricInvocations()],
-//       width: 24,
-//     }))
-//
-//     this.dashboard.addWidgets(new cloudwatch.GraphWidget({
-//       title: 'Errors',
-//       left: [this.lambdaFunction.metricErrors()],
-//       width: 24,
-//     }))
-//
-//     this.dashboard.addWidgets(new cloudwatch.GraphWidget({
-//       title: 'Duration',
-//       left: [this.lambdaFunction.metricDuration()],
-//       width: 24,
-//     }))
-//
-//     this.dashboard.addWidgets(new cloudwatch.GraphWidget({
-//       title: 'Throttles',
-//       left: [this.lambdaFunction.metricThrottles()],
-//       width: 24,
-//     }))
-//
-//     // Create Widget to show last 20 Log Entries
-//     this.dashboard.addWidgets(new cloudwatch.LogQueryWidget({
-//       logGroupNames: [this.lambdaFunction.logGroup.logGroupName],
-//       queryLines: [
-//         'fields @timestamp, @message',
-//         'sort @timestamp desc',
-//         'limit 20',
-//       ],
-//       width: 24,
-//     }))
-//
-//     // Generate Output
-//     const cloudwatchDashboardURL = `https://${Aws.REGION}.console.aws.amazon.com/cloudwatch/home?region=${Aws.REGION}#dashboards:name=${dashboardName}`
-//
-//     new Output(scope, 'DashboardOutput', {
-//       value: cloudwatchDashboardURL,
-//       description: 'The CloudWatch Dashboard URL',
-//       exportName: 'StacksDashboardURL',
-//     })
-//   }
-// }

package/src/cloud/docs.ts

@@ -1,50 +0,0 @@
-import type { CfnResource } from 'aws-cdk-lib'
-import type { Construct } from 'constructs'
-import type { NestedCloudProps } from '../types'
-import { config } from '@stacksjs/config'
-import { path as p } from '@stacksjs/path'
-import { storage } from '@stacksjs/storage'
-import { originRequestFunctionHash } from '@stacksjs/utils'
-import { AssetHashType, aws_lambda as lambda, CfnOutput as Output, RemovalPolicy } from 'aws-cdk-lib'
-
-export interface DocsStackProps extends NestedCloudProps {
-  //
-}
-
-export class DocsStack {
-  originRequestFunction: lambda.Function
-
-  constructor(scope: Construct, props: DocsStackProps) {
-    // if docsPrefix is not set, then we know we are in docsMode and the documentation lives at the root of the domain
-    const docsPrefix = 'docs'
-
-    // this edge function ensures pretty docs urls
-    // soon to be reused for our Meema features
-    this.originRequestFunction = new lambda.Function(scope, 'OriginRequestFunction', {
-      // this needs to have timestamp to ensure uniqueness. Since Origin Request (Lambda@Edge) functions are replicated functions, the
-      // deletion process takes a "long time". This way, the function is always unique in cases of quick recreations.
-      functionName: `${props.slug}-${props.appEnv}-origin-request-${props.timestamp}`,
-      description: 'The Stacks Origin Request function that prettifies URLs by removing the .html extension',
-      runtime: lambda.Runtime.NODEJS_20_X,
-      handler: 'dist/origin-request.handler',
-      code: lambda.Code.fromAsset(p.cloudPath('dist.zip'), {
-        assetHash: originRequestFunctionHash(),
-        assetHashType: AssetHashType.CUSTOM,
-      }),
-    })
-
-    // applying this is a workaround for failing deployments due to the following DELETE_FAILED error:
-    // > Resource handler returned message: "Lambda was unable to delete arn:aws:lambda:us-east-1:92330274019:function:stacks-cloud-production-OriginRequestFunction4FA39-XQadJcSWY8Lz:1 because it is a replicated function. Please see our documentation for Deleting Lambda@Edge Functions and Replicas. (Service: Lambda, Status Code: 400, Request ID: 83bd3112-aaa4-4980-bfcf-3ee2052a0435)" (RequestToken: c91aed31-1a62-9425-c25d-4fc0fccfa45f, HandlerErrorCode: InvalidRequest)
-    // if we do not delete this resource, then it circumvents trying to delete the function and the deployment succeeds
-    // buddy cloud:cleanup is what will be suggested running after user ensured no more sensitive data is in the buckets
-    const cfnOriginRequestFunction = this.originRequestFunction.node.defaultChild as CfnResource
-    cfnOriginRequestFunction.applyRemovalPolicy(RemovalPolicy.RETAIN)
-
-    if (!config.app.docMode && storage.hasFiles(p.projectPath('docs'))) {
-      new Output(scope, 'DocsUrl', {
-        value: `https://${docsPrefix}.${props.domain}`,
-        description: 'The URL of the deployed documentation',
-      })
-    }
-  }
-}

package/src/cloud/index.ts

@@ -1,141 +0,0 @@
-import type { Construct } from 'constructs'
-import type { CloudOptions } from '../types'
-import { config } from '@stacksjs/config'
-import { Stack } from 'aws-cdk-lib'
-import { AiStack } from './ai'
-import { CdnStack } from './cdn'
-import { CliStack } from './cli'
-import { ComputeStack } from './compute'
-import { DeploymentStack } from './deployment'
-import { DnsStack } from './dns'
-import { DocsStack } from './docs'
-import { EmailStack } from './email'
-import { FileSystemStack } from './file-system'
-import { JumpBoxStack } from './jump-box'
-import { NetworkStack } from './network'
-import { PermissionsStack } from './permissions'
-import { QueueStack } from './queue'
-import { RedirectsStack } from './redirects'
-import { SecurityStack } from './security'
-import { StorageStack } from './storage'
-
-// import { DashboardStack } from './dashboard'
-
-export class Cloud extends Stack {
-  dns: DnsStack
-  security: SecurityStack
-  storage: StorageStack
-  network: NetworkStack
-  fileSystem: FileSystemStack
-  jumpBox: JumpBoxStack
-  docs: DocsStack
-  email: EmailStack
-  redirects: RedirectsStack
-  permissions: PermissionsStack
-  ai: AiStack
-  cli: CliStack
-  api?: ComputeStack
-  cdn!: CdnStack
-  queue?: QueueStack
-  deployment!: DeploymentStack
-  scope: Construct
-  props: CloudOptions
-
-  constructor(scope: Construct, id: string, props: CloudOptions) {
-    super(scope, id, props)
-    this.scope = scope
-    this.props = props
-
-    // please beware: be careful changing the order of the stack creations below
-    this.dns = new DnsStack(this, props)
-    this.security = new SecurityStack(this, {
-      ...props,
-      zone: this.dns.zone,
-    })
-
-    this.storage = new StorageStack(this, {
-      ...props,
-      kmsKey: this.security.kmsKey,
-      originAccessIdentity: this.security.originAccessIdentity,
-    })
-
-    this.network = new NetworkStack(this, props)
-
-    this.fileSystem = new FileSystemStack(this, {
-      ...props,
-      vpc: this.network.vpc,
-    })
-
-    this.jumpBox = new JumpBoxStack(this, {
-      ...props,
-      vpc: this.network.vpc,
-      fileSystem: this.fileSystem.fileSystem,
-    })
-
-    this.docs = new DocsStack(this, props)
-
-    this.email = new EmailStack(this, {
-      ...props,
-      zone: this.dns.zone,
-    })
-
-    this.redirects = new RedirectsStack(this, props)
-
-    this.permissions = new PermissionsStack(this)
-
-    // new DashboardStack(this)
-
-    this.ai = new AiStack(this, props)
-
-    this.cli = new CliStack(this, props)
-  }
-
-  // we use an async init() method here because we need to wait for the
-
-  async init(): Promise<void> {
-    const props = this.props
-
-    if (this.shouldDeployApi()) {
-      this.api = new ComputeStack(this, {
-        ...props,
-        vpc: this.network.vpc,
-        fileSystem: this.fileSystem.fileSystem,
-        zone: this.dns.zone,
-        certificate: this.security.certificate,
-      })
-
-      this.queue = new QueueStack(this, {
-        ...props,
-        cluster: this.api.cluster,
-        taskDefinition: this.api.taskDefinition,
-      })
-
-      await this.queue.init()
-    }
-
-    this.cdn = new CdnStack(this, {
-      ...props,
-      publicBucket: this.storage.publicBucket,
-      docsBucket: this.storage.docsBucket,
-      logBucket: this.storage.logBucket,
-      certificate: this.security.certificate,
-      firewall: this.security.firewall,
-      originRequestFunction: this.docs.originRequestFunction,
-      zone: this.dns.zone,
-      lb: this.api?.lb,
-    })
-
-    this.deployment = new DeploymentStack(this, {
-      ...props,
-      publicBucket: this.storage.publicBucket,
-      privateBucket: this.storage.privateBucket,
-      docsBucket: this.storage.docsBucket,
-      mainDistribution: this.cdn.mainDistribution,
-      docsDistribution: this.cdn.docsDistribution,
-    })
-  }
-
-  shouldDeployApi(): boolean {
-    return config.cloud.api?.deploy ?? false
-  }
-}

package/src/cloud/router-layer/nodejs/package.json

@@ -1,15 +0,0 @@
-{
-  "name": "stacks-router-layer",
-  "version": "0.66.0",
-  "description": "",
-  "author": "",
-  "license": "MIT",
-  "keywords": [],
-  "main": "index.js",
-  "scripts": {
-    "test": "echo \"Error: no test specified\" && exit 1"
-  },
-  "dependencies": {
-    "@stacksjs/router": "^0.64.6"
-  }
-}

package/src/cloud/search-engine.ts

@@ -1,108 +0,0 @@
-// async manageSearchEngine() {
-//   const vpc = this.vpc
-
-//   // Security Group
-//   const bastionSecurityGroup = new ec2.SecurityGroup(this, 'BastionSecurityGroup', {
-//     vpc,
-//     allowAllOutbound: true,
-//     securityGroupName: `${this.appName}-${appEnv}-bastion-sg`,
-//   })
-
-//   const opensearchSecurityGroup = new ec2.SecurityGroup(this, 'OpenSearchSecurityGroup', {
-//     vpc,
-//     securityGroupName: `${this.appName}-${appEnv}-opensearch-sg`,
-//   })
-
-//   opensearchSecurityGroup.addIngressRule(bastionSecurityGroup, ec2.Port.tcp(443))
-
-//   // Service-linked role that Amazon OpenSearch Service will use
-//   const iamClient = new IAMClient({})
-//   const response = await iamClient.send(
-//     new ListRolesCommand({
-//       PathPrefix: '/aws-service-role/opensearchservice.amazonaws.com/',
-//     }),
-//   )
-
-//   // Only if the role for OpenSearch Service doesn't exist, it will be created.
-//   if (response.Roles && response.Roles?.length === 0) {
-//     new iam.CfnServiceLinkedRole(this, 'OpenSearchServiceLinkedRole', {
-//       awsServiceName: 'es.amazonaws.com',
-//     })
-//   }
-
-//   // Bastion host to access Opensearch Dashboards
-//   new ec2.BastionHostLinux(this, 'BastionHost', {
-//     vpc,
-//     securityGroup: bastionSecurityGroup,
-//     machineImage: ec2.MachineImage.latestAmazonLinux2023(),
-//     blockDevices: [
-//       {
-//         deviceName: '/dev/xvda',
-//         volume: ec2.BlockDeviceVolume.ebs(10, {
-//           encrypted: true,
-//         }),
-//       },
-//     ],
-//   })
-
-//   // OpenSearch domain
-//   const domain = new opensearch.Domain(this, 'OpenSearchDomain', {
-//     version: opensearch.EngineVersion.OPENSEARCH_2_9,
-//     nodeToNodeEncryption: true,
-//     enforceHttps: true,
-//     encryptionAtRest: {
-//       enabled: true,
-//     },
-//     vpc,
-//     // unsure if there are "better" ways to do this
-//     vpcSubnets: [
-//       { subnetGroupName: `${this.appName}-${appEnv}-private-subnet-1` },
-//       { subnetGroupName: `${this.appName}-${appEnv}-private-subnet-2` },
-//     ],
-
-//     capacity: {
-//       masterNodes: 2,
-//       dataNodes: 2,
-//       multiAzWithStandbyEnabled: true,
-//     },
-//     ebs: {
-//       volumeSize: 10,
-//       volumeType: ec2.EbsDeviceVolumeType.GP3, // or opensearch.EbsVolumeType.IO1
-//     },
-//     removalPolicy: RemovalPolicy.DESTROY,
-//     zoneAwareness: {
-//       enabled: true,
-//       availabilityZoneCount: 2,
-//     },
-//     securityGroups: [opensearchSecurityGroup],
-//   })
-
-//   domain.addAccessPolicies(
-//     new iam.PolicyStatement({
-//       principals: [new iam.AnyPrincipal()],
-//       actions: ['es:ESHttp*'],
-//       resources: [`${domain.domainArn}/*`],
-//     }),
-//   )
-
-//   // // Lambda
-//   // const dataIndexFunction = PythonFunction(this, 'DataIndex', {
-//   //   runtime: lambda.Runtime.PYTHON_3_10,
-//   //   entry: 'lambda',
-//   //   vpc,
-//   //   environment: {
-//   //     OPENSEARCH_HOST: domain.domainEndpoint,
-//   //   },
-//   // })
-
-//   // domain.connections.allowFrom(dataIndexFunction, Port.tcp(443))
-
-//   // Outputs
-//   new Output(this, 'OpenSearchDomainHost', {
-//     value: domain.domainEndpoint,
-//   })
-
-//   // new Output(this, 'IndexingFunctionName', {
-//   //   value: dataIndexFunction.functionName,
-//   // })
-// }

package/src/edge/origin-request.ts

@@ -1,55 +0,0 @@
-const config = {
-  suffix: '.html',
-  removeTrailingSlash: false,
-}
-
-const regexSuffixless = /\/[^/.]+$/ // e.g. "/some/page" but not "/", "/some/" or "/some.jpg"
-const regexTrailingSlash = /.+\/$/ // e.g. "/some/" or "/some/page/" but not root "/"
-
-// TODO: narrow types here
-export function handler(event: any, context: any, callback: any): void {
-  const { request } = event.Records[0].cf
-  const { uri } = request
-  const { suffix } = config
-
-  if (uri === '/') {
-    request.uri = '/index.html'
-    callback(null, request)
-    return
-  }
-
-  // Append ".html" to origin request
-  if (uri.match(regexSuffixless)) {
-    request.uri = uri + suffix
-    callback(null, request)
-    return
-  }
-
-  // Remove trailing slash and append ".html" to origin request
-  if (uri.match(regexTrailingSlash)) {
-    request.uri = `${uri.slice(0, -1)}.html`
-    callback(null, request)
-    return
-  }
-
-  // Redirect (301) non-root requests ending in "/" to URI without trailing slash
-  // if (removeTrailingSlash && uri.match(/.+\/$/)) {
-  //   const response = {
-  //     // body: '',
-  //     // bodyEncoding: 'text',
-  //     headers: {
-  //       location: [{
-  //         key: 'Location',
-  //         value: uri.slice(0, -1),
-  //       }],
-  //     },
-  //     status: '301',
-  //     statusDescription: 'Moved Permanently',
-  //   }
-  //   callback(null, response)
-  //   return
-  // }
-
-  // If nothing matches, return request unchanged
-  callback(null, request)
-}