@stacksjs/cloud 0.70.23 → 0.70.26

package/dist/email.d.ts

@@ -1,336 +0,0 @@
-import type { Construct } from 'constructs';
-import type { NestedCloudProps } from '../types';
-
-export declare interface EmailStackProps extends NestedCloudProps {
-  zone: route53.IHostedZone
-}
-export declare class EmailStack {
-  emailBucket: s3.Bucket
-
-  constructor(scope: Construct, props: EmailStackProps) {
-    const bucketPrefix = `${props.slug}-${props.appEnv}`
-    this.emailBucket = new s3.Bucket(scope, 'EmailBucket', {
-      bucketName: `${bucketPrefix}-email-${props.timestamp}`,
-      versioned: true,
-      removalPolicy: RemovalPolicy.DESTROY,
-      autoDeleteObjects: true,
-      encryption: s3.BucketEncryption.S3_MANAGED,
-      lifecycleRules: [
-        {
-          id: '24h',
-          enabled: true,
-          expiration: Duration.days(1),
-          noncurrentVersionExpiration: Duration.days(1),
-          prefix: 'today/',
-        },
-        {
-          id: 'Intelligent transition for Inbox',
-          enabled: true,
-          prefix: 'inbox/',
-          transitions: [
-            {
-              storageClass: s3.StorageClass.INTELLIGENT_TIERING,
-              transitionAfter: Duration.days(0),
-            },
-          ],
-        },
-        {
-          id: 'Intelligent transition for Sent',
-          enabled: true,
-          prefix: 'sent/',
-          transitions: [
-            {
-              storageClass: s3.StorageClass.INTELLIGENT_TIERING,
-              transitionAfter: Duration.days(0),
-            },
-          ],
-        },
-      ],
-    })
-
-    Tags.of(this.emailBucket).add('daily-backup', 'true')
-
-    const sesPrincipal = new iam.ServicePrincipal('ses.amazonaws.com')
-    const ruleSetName = `${props.slug}-${props.appEnv}-email-receipt-rule-set`
-    const receiptRuleName = `${props.slug}-${props.appEnv}-email-receipt-rule`
-
-    const ruleSet = new ses.CfnReceiptRuleSet(scope, 'SESReceiptRuleSet', {
-      ruleSetName,
-    })
-
-    this.emailBucket.addToResourcePolicy(
-      new iam.PolicyStatement({
-        sid: 'AllowSESPuts',
-        effect: iam.Effect.ALLOW,
-        principals: [sesPrincipal],
-        actions: ['s3:PutObject'],
-        resources: [`${this.emailBucket.bucketArn}/*`],
-        conditions: {
-          StringEquals: {
-            'aws:SourceAccount': Stack.of(scope).account,
-          },
-          ArnLike: {
-            'aws:SourceArn': `arn:aws:ses:${Stack.of(scope).region}:${
-              Stack.of(scope).account
-            }:receipt-rule-set/${ruleSetName}:receipt-rule/${receiptRuleName}`,
-          },
-        },
-      }),
-    )
-
-    const receiptRule = new ses.CfnReceiptRule(scope, 'SESReceiptRule', {
-      ruleSetName: ruleSet.ref,
-      rule: {
-        name: receiptRuleName,
-        enabled: true,
-        actions: [
-          {
-            s3Action: {
-              bucketName: this.emailBucket.bucketName,
-              objectKeyPrefix: 'tmp/email_in/',
-            },
-          },
-        ],
-        recipients: config.email.mailboxes || [],
-        scanEnabled: config.email.server?.scan || true,
-        tlsPolicy: 'Require',
-      },
-    })
-
-    receiptRule.node.addDependency(this.emailBucket)
-
-    const iamGroup = new iam.Group(scope, 'IAMGroup', {
-      groupName: `${props.slug}-${props.appEnv}-email-management-s3-group`,
-    })
-
-    const listBucketsPolicyStatement = new iam.PolicyStatement({
-      effect: iam.Effect.ALLOW,
-      actions: ['s3:ListAllMyBuckets'],
-      resources: ['*'],
-    })
-
-    const policyStatement = new iam.PolicyStatement({
-      effect: iam.Effect.ALLOW,
-      actions: [
-        's3:ListBucket',
-        's3:GetObject',
-        's3:PutObject',
-        's3:DeleteObject',
-        's3:GetObjectAcl',
-        's3:GetObjectVersionAcl',
-        's3:PutObjectAcl',
-        's3:PutObjectVersionAcl',
-      ],
-      resources: [this.emailBucket.bucketArn, `${this.emailBucket.bucketArn}/*`],
-    })
-
-    const policy = new iam.Policy(scope, 'EmailAccessPolicy', {
-      policyName: `${props.slug}-${props.appEnv}-email-management-s3-policy`,
-      statements: [policyStatement, listBucketsPolicyStatement],
-    })
-
-    iamGroup.attachInlinePolicy(policy)
-
-    const sesIdentity = new ses.CfnEmailIdentity(scope, 'DomainIdentity', {
-      emailIdentity: props.domain,
-
-      dkimSigningAttributes: {
-        nextSigningKeyLength: 'RSA_2048_BIT',
-      },
-
-      dkimAttributes: {
-        signingEnabled: true,
-      },
-
-      mailFromAttributes: {
-        behaviorOnMxFailure: 'USE_DEFAULT_VALUE',
-        mailFromDomain: `mail.${props.domain}`,
-      },
-
-      feedbackAttributes: {
-        emailForwardingEnabled: true,
-      },
-    })
-
-    new route53.CfnRecordSet(scope, 'DkimRecord1', {
-      hostedZoneName: `${props.zone.zoneName}.`,
-      name: sesIdentity.attrDkimDnsTokenName1,
-      type: 'CNAME',
-      resourceRecords: [sesIdentity.attrDkimDnsTokenValue1],
-      ttl: '1800',
-    })
-
-    new route53.CfnRecordSet(scope, 'DkimRecord2', {
-      hostedZoneName: `${props.zone.zoneName}.`,
-      name: sesIdentity.attrDkimDnsTokenName2,
-      type: 'CNAME',
-      resourceRecords: [sesIdentity.attrDkimDnsTokenValue2],
-      ttl: '1800',
-    })
-
-    new route53.CfnRecordSet(scope, 'DkimRecord3', {
-      hostedZoneName: `${props.zone.zoneName}.`,
-      name: sesIdentity.attrDkimDnsTokenName3,
-      type: 'CNAME',
-      resourceRecords: [sesIdentity.attrDkimDnsTokenValue3],
-      ttl: '1800',
-    })
-
-    new route53.MxRecord(scope, 'MxRecord', {
-      zone: props.zone,
-      recordName: 'mail',
-      values: [
-        {
-          priority: 10,
-          hostName: 'feedback-smtp.us-east-1.amazonses.com',
-        },
-      ],
-    })
-
-    new route53.TxtRecord(scope, 'TxtSpfRecord', {
-      zone: props.zone,
-      recordName: 'mail',
-      values: ['v=spf1 include:amazonses.com ~all'],
-    })
-
-    new route53.TxtRecord(scope, 'TxtDmarcRecord', {
-      zone: props.zone,
-      recordName: '_dmarc',
-      values: [`v=DMARC1;p=quarantine;pct=25;rua=mailto:dmarcreports@${props.domain}`],
-    })
-
-    const lambdaEmailOutboundRole = new iam.Role(scope, 'LambdaEmailOutboundRole', {
-      roleName: `${props.slug}-${props.appEnv}-email-outbound`,
-      assumedBy: new iam.ServicePrincipal('lambda.amazonaws.com'),
-      managedPolicies: [iam.ManagedPolicy.fromAwsManagedPolicyName('service-role/AWSLambdaBasicExecutionRole')],
-    })
-
-    const lambdaEmailOutbound = new lambda.Function(scope, 'LambdaEmailOutbound', {
-      functionName: `${props.slug}-${props.appEnv}-email-outbound`,
-      description: 'Take the JSON and convert it in to an raw email.',
-      code: lambda.Code.fromInline('exports.handler = async (event) => {return true;};'), 
-      handler: 'index.handler',
-      memorySize: 256,
-      runtime: lambda.Runtime.NODEJS_18_X,
-      timeout: Duration.seconds(60),
-      environment: {
-        BUCKET: this.emailBucket.bucketName,
-      },
-      role: lambdaEmailOutboundRole,
-    })
-
-    lambdaEmailOutboundRole.addToPolicy(policyStatement)
-
-    const sesPolicyStatement = new iam.PolicyStatement({
-      effect: iam.Effect.ALLOW,
-      actions: ['ses:SendRawEmail'],
-      resources: ['*'],
-    })
-
-    lambdaEmailOutboundRole.addToPolicy(sesPolicyStatement)
-
-    const lambdaEmailInboundRole = new iam.Role(scope, 'LambdaEmailInboundRole', {
-      roleName: `${props.slug}-${props.appEnv}-email-inbound`,
-      assumedBy: new iam.ServicePrincipal('lambda.amazonaws.com'),
-      managedPolicies: [iam.ManagedPolicy.fromAwsManagedPolicyName('service-role/AWSLambdaBasicExecutionRole')],
-    })
-
-    const lambdaEmailInbound = new lambda.Function(scope, 'LambdaEmailInbound', {
-      functionName: `${props.slug}-${props.appEnv}-email-inbound`,
-      description: 'This Lambda organizes all the incoming emails based on the From and To field.',
-      code: lambda.Code.fromInline('exports.handler = async (event) => {return true;};'), 
-      handler: 'index.handler',
-      memorySize: 256,
-      role: lambdaEmailInboundRole,
-      runtime: lambda.Runtime.NODEJS_18_X,
-      timeout: Duration.seconds(60),
-      environment: {
-        BUCKET: this.emailBucket.bucketName,
-      },
-    })
-
-    new lambda.CfnPermission(scope, 'S3InboundPermission', {
-      action: 'lambda:InvokeFunction',
-      functionName: lambdaEmailInbound.functionName,
-      principal: 's3.amazonaws.com',
-    })
-
-    const inboundS3PolicyStatement = new iam.PolicyStatement({
-      effect: iam.Effect.ALLOW,
-      actions: ['s3:*'],
-      resources: [this.emailBucket.bucketArn, `${this.emailBucket.bucketArn}/*`],
-    })
-
-    lambdaEmailInboundRole.addToPolicy(inboundS3PolicyStatement)
-
-    const sesInboundPolicyStatement = new iam.PolicyStatement({
-      effect: iam.Effect.ALLOW,
-      actions: ['ses:ListIdentities'],
-      resources: ['*'],
-    })
-
-    lambdaEmailInboundRole.addToPolicy(sesInboundPolicyStatement)
-
-    const lambdaEmailConverterRole = new iam.Role(scope, 'LambdaEmailConverterRole', {
-      roleName: `${props.slug}-${props.appEnv}-email-converter`,
-      assumedBy: new iam.ServicePrincipal('lambda.amazonaws.com'),
-      managedPolicies: [iam.ManagedPolicy.fromAwsManagedPolicyName('service-role/AWSLambdaBasicExecutionRole')],
-    })
-
-    const lambdaEmailConverter = new lambda.Function(scope, 'LambdaEmailConverter', {
-      functionName: `${props.slug}-${props.appEnv}-email-converter`,
-      description: 'This Lambda converts raw emails files in to HTML and text.',
-      code: lambda.Code.fromInline(
-        'exports.handler = async (event) => {console.log("hello world email converter");return true;};',
-      ), 
-      handler: 'index.handler',
-      memorySize: 256,
-      role: lambdaEmailConverterRole,
-      runtime: lambda.Runtime.NODEJS_18_X,
-      timeout: Duration.seconds(60),
-      environment: {
-        BUCKET: this.emailBucket.bucketName,
-      },
-    })
-
-    const converterS3PolicyStatement = new iam.PolicyStatement({
-      effect: iam.Effect.ALLOW,
-      actions: ['s3:*'],
-      resources: [this.emailBucket.bucketArn, `${this.emailBucket.bucketArn}/*`],
-    })
-
-    new lambda.CfnPermission(scope, 'S3ConverterPermission', {
-      action: 'lambda:InvokeFunction',
-      functionName: lambdaEmailConverter.functionName,
-      principal: 's3.amazonaws.com',
-    })
-
-    lambdaEmailConverterRole.addToPolicy(converterS3PolicyStatement)
-
-    this.emailBucket.addEventNotification(
-      s3.EventType.OBJECT_CREATED_PUT,
-      new s3n.LambdaDestination(lambdaEmailInbound),
-      { prefix: 'tmp/email_in/' },
-    )
-    this.emailBucket.addEventNotification(
-      s3.EventType.OBJECT_CREATED_PUT,
-      new s3n.LambdaDestination(lambdaEmailOutbound),
-      { prefix: 'tmp/email_out/json/' },
-    )
-    this.emailBucket.addEventNotification(
-      s3.EventType.OBJECT_CREATED_COPY,
-      new s3n.LambdaDestination(lambdaEmailConverter),
-      { prefix: 'sent/' },
-    )
-    this.emailBucket.addEventNotification(
-      s3.EventType.OBJECT_CREATED_COPY,
-      new s3n.LambdaDestination(lambdaEmailConverter),
-      { prefix: 'inbox/' },
-    )
-    this.emailBucket.addEventNotification(
-      s3.EventType.OBJECT_CREATED_COPY,
-      new s3n.LambdaDestination(lambdaEmailConverter),
-      { prefix: 'today/' },
-    )
-  }
-}

package/dist/file-system.d.ts

@@ -1,32 +0,0 @@
-import type { Construct } from 'constructs';
-import type { NestedCloudProps } from '../types';
-
-export declare interface FileSystemStackProps extends NestedCloudProps {
-  vpc: ec2.Vpc
-}
-export declare class FileSystemStack {
-  fileSystem: efs.FileSystem
-  accessPoint: efs.AccessPoint
-
-  constructor(scope: Construct, props: FileSystemStackProps) {
-    this.fileSystem = new efs.FileSystem(scope, 'FileSystem', {
-      fileSystemName: `${props.slug}-${props.appEnv}-efs`,
-      vpc: props.vpc,
-      removalPolicy: RemovalPolicy.DESTROY,
-      lifecyclePolicy: efs.LifecyclePolicy.AFTER_7_DAYS,
-      performanceMode: efs.PerformanceMode.GENERAL_PURPOSE,
-      throughputMode: efs.ThroughputMode.BURSTING,
-      enableAutomaticBackups: true, 
-      encrypted: true,
-    })
-
-    this.accessPoint = new efs.AccessPoint(scope, 'FileSystemAccessPoint', {
-      fileSystem: this.fileSystem,
-      path: '/',
-      posixUser: {
-        uid: '1000',
-        gid: '1000',
-      },
-    })
-  }
-}

package/dist/index.d.ts

@@ -1,118 +0,0 @@
-import type { CloudOptions } from '../types';
-import type { Construct } from 'constructs';
-
-export declare class Cloud extends Stack {
-  dns: DnsStack
-  security: SecurityStack
-  storage: StorageStack
-  network: NetworkStack
-  fileSystem: FileSystemStack
-  jumpBox: JumpBoxStack
-  docs: DocsStack
-  email: EmailStack
-  redirects: RedirectsStack
-  permissions: PermissionsStack
-  ai: AiStack
-  cli: CliStack
-  api?: ComputeStack
-  cdn!: CdnStack
-  queue?: QueueStack
-  deployment!: DeploymentStack
-  scope: Construct
-  props: CloudOptions
-
-  constructor(scope: Construct, id: string, props: CloudOptions) {
-    super(scope, id, props)
-    this.scope = scope
-    this.props = props
-
-    this.dns = new DnsStack(this, props)
-    this.security = new SecurityStack(this, {
-      ...props,
-      zone: this.dns.zone,
-    })
-
-    this.storage = new StorageStack(this, {
-      ...props,
-      kmsKey: this.security.kmsKey,
-      originAccessIdentity: this.security.originAccessIdentity,
-    })
-
-    this.network = new NetworkStack(this, props)
-
-    this.fileSystem = new FileSystemStack(this, {
-      ...props,
-      vpc: this.network.vpc,
-    })
-
-    this.jumpBox = new JumpBoxStack(this, {
-      ...props,
-      vpc: this.network.vpc,
-      fileSystem: this.fileSystem.fileSystem,
-    })
-
-    this.docs = new DocsStack(this, props)
-
-    this.email = new EmailStack(this, {
-      ...props,
-      zone: this.dns.zone,
-    })
-
-    this.redirects = new RedirectsStack(this, props)
-
-    this.permissions = new PermissionsStack(this)
-
-
-    this.ai = new AiStack(this, props)
-
-    this.cli = new CliStack(this, props)
-  }
-
-
-  async init(): Promise<void> {
-    const props = this.props
-
-    if (this.shouldDeployApi()) {
-      this.api = new ComputeStack(this, {
-        ...props,
-        vpc: this.network.vpc,
-        fileSystem: this.fileSystem.fileSystem,
-        zone: this.dns.zone,
-        certificate: this.security.certificate,
-      })
-
-      this.queue = new QueueStack(this, {
-        ...props,
-        cluster: this.api.cluster,
-        taskDefinition: this.api.taskDefinition,
-      })
-
-      await this.queue.init()
-    }
-
-    this.cdn = new CdnStack(this, {
-      ...props,
-      publicBucket: this.storage.publicBucket,
-      docsBucket: this.storage.docsBucket,
-      logBucket: this.storage.logBucket,
-      certificate: this.security.certificate,
-      firewall: this.security.firewall,
-      originRequestFunction: this.docs.originRequestFunction,
-      zone: this.dns.zone,
-      lb: this.api?.lb,
-    })
-
-    this.deployment = new DeploymentStack(this, {
-      ...props,
-      publicBucket: this.storage.publicBucket,
-      privateBucket: this.storage.privateBucket,
-      docsBucket: this.storage.docsBucket,
-      mainDistribution: this.cdn.mainDistribution,
-      docsDistribution: this.cdn.docsDistribution,
-    })
-  }
-
-  shouldDeployApi(): boolean {
-    return config.cloud.api?.deploy ?? false
-  }
-}

package/dist/jump-box.d.ts

@@ -1,42 +0,0 @@
-import type { Construct } from 'constructs';
-import type { NestedCloudProps } from '../types';
-
-export declare interface JumpBoxStackProps extends NestedCloudProps {
-  vpc: ec2.Vpc
-  fileSystem: efs.FileSystem
-}
-export declare class JumpBoxStack {
-  jumpBox?: ec2.Instance
-
-  constructor(scope: Construct, props: JumpBoxStackProps) {
-    const role = new iam.Role(scope, 'JumpBoxInstanceRole', {
-      assumedBy: new iam.ServicePrincipal('ec2.amazonaws.com'),
-      managedPolicies: [
-        iam.ManagedPolicy.fromAwsManagedPolicyName('AmazonSSMManagedInstanceCore'),
-        iam.ManagedPolicy.fromAwsManagedPolicyName('CloudWatchAgentServerPolicy'),
-      ],
-    })
-
-    this.jumpBox = new ec2.Instance(scope, 'JumpBox', {
-      vpc: props.vpc,
-      instanceType: ec2.InstanceType.of(ec2.InstanceClass.T2, ec2.InstanceSize.MICRO),
-      machineImage: new ec2.AmazonLinuxImage(),
-      role,
-      userData: ec2.UserData.custom(`
-      #!/bin/bash
-      yum update -y
-      yum install -y amazon-efs-utils
-      yum install -y git
-      yum install -y https:
-      mkdir /mnt/efs
-      mount -t efs ${props.fileSystem.fileSystemId}:/ /mnt/efs
-      git clone https:
-    `),
-    })
-
-    new Output(scope, 'JumpBoxInstanceId', {
-      value: this.jumpBox.instanceId,
-      description: 'The ID of the EC2 instance that can be used to SSH into the Stacks Cloud.',
-    })
-  }
-}

package/dist/network.d.ts

@@ -1,29 +0,0 @@
-import type { Construct } from 'constructs';
-import type { NestedCloudProps } from '../types';
-
-export declare interface NetworkStackProps extends NestedCloudProps {
-}
-export declare class NetworkStack {
-  vpc: ec2.Vpc
-
-  constructor(scope: Construct, props: NetworkStackProps) {
-    this.vpc = new ec2.Vpc(scope, 'Network', {
-      vpcName: `${props.slug}-${props.appEnv}-vpc`,
-      ipAddresses: ec2.IpAddresses.cidr('10.0.0.0/16'),
-      maxAzs: 3,
-      natGateways: 0,
-      subnetConfiguration: [
-        {
-          name: 'public-subnet-1',
-          subnetType: ec2.SubnetType.PUBLIC,
-          cidrMask: 24,
-        },
-        {
-          name: 'private-subnet-1',
-          subnetType: ec2.SubnetType.PRIVATE_ISOLATED,
-          cidrMask: 28,
-        },
-      ],
-    })
-  }
-}

package/dist/origin-request.d.ts

@@ -1,5 +0,0 @@
-declare const config: {
-  suffix: '.html';
-  removeTrailingSlash: false
-};
-export declare function handler(event: any, context: any, callback: any): void;

package/dist/origin-request.js

@@ -1,31 +0,0 @@
-// src/edge/origin-request.ts
-var config = {
-  suffix: ".html",
-  removeTrailingSlash: false
-};
-var regexSuffixless = /\/[^/.]+$/;
-var regexTrailingSlash = /.+\/$/;
-function handler(event, context, callback) {
-  const { request } = event.Records[0].cf;
-  const { uri } = request;
-  const { suffix } = config;
-  if (uri === "/") {
-    request.uri = "/index.html";
-    callback(null, request);
-    return;
-  }
-  if (uri.match(regexSuffixless)) {
-    request.uri = uri + suffix;
-    callback(null, request);
-    return;
-  }
-  if (uri.match(regexTrailingSlash)) {
-    request.uri = `${uri.slice(0, -1)}.html`;
-    callback(null, request);
-    return;
-  }
-  callback(null, request);
-}
-export {
-  handler
-};

package/dist/permissions.d.ts

@@ -1,25 +0,0 @@
-import type { Construct } from 'constructs';
-import type { NestedCloudProps } from '../types';
-
-export declare interface PermissionsStackProps extends NestedCloudProps {
-}
-export declare class PermissionsStack {
-  constructor(scope: Construct) {
-    const teamName = config.team.name
-    const users = config.team.members
-    const password = env.AWS_DEFAULT_PASSWORD || string.random()
-
-    for (const name in users) {
-      const id = `User${string.pascalCase(teamName)}${string.pascalCase(name)}`
-      const userName = string.slug(`${teamName}-${name}`)
-      const user = new iam.User(scope, id, {
-        userName,
-        password: SecretValue.unsafePlainText(password),
-        passwordResetRequired: true,
-      })
-
-      user.addManagedPolicy(iam.ManagedPolicy.fromAwsManagedPolicyName('AdministratorAccess'))
-
-    }
-  }
-}