@stacksjs/ts-cloud 0.5.7 → 0.5.8

package/dist/deploy/serverless-app.d.ts

@@ -43,6 +43,8 @@ export declare function resolveServerlessFunctions(config: CloudConfig, environm
         cli: string;
     };
 };
+/** Resolve secrets from Secrets Manager into a flat env map. */
+export declare function resolveSecrets(app: ServerlessAppConfig, region: string): Promise<Record<string, string>>;
 /**
  * Derive framework env vars (DB/Redis hosts) from the deployed stack outputs so
  * a Laravel app connects to the Aurora/RDS-Proxy/ElastiCache resources the
@@ -72,6 +74,24 @@ export declare function rollbackServerlessApp(config: CloudConfig, environment:
 export declare function setMaintenance(config: CloudConfig, environment: EnvironmentType, enabled: boolean, bypassSecret?: string): Promise<void>;
 /** Invoke the CLI function with an arbitrary command (e.g. `cloud command "migrate"`). */
 export declare function runRemoteCommand(config: CloudConfig, environment: EnvironmentType, command: string): Promise<string>;
+/** One recorded `cloud command` invocation. */
+export interface CommandRecord {
+    id: number;
+    command: string;
+    timestamp: string;
+    status: 'ok' | 'error';
+    output: string;
+}
+/** Run a command on the CLI function AND record it to the history log (best-effort). */
+export declare function runAndRecordCommand(config: CloudConfig, environment: EnvironmentType, command: string): Promise<{
+    id: number;
+    status: 'ok' | 'error';
+    output: string;
+}>;
+/** Return the recorded command history (most-recent last). */
+export declare function listCommandHistory(config: CloudConfig, environment: EnvironmentType): Promise<CommandRecord[]>;
+/** Look up one history record by id (or the most recent when id is omitted). */
+export declare function getCommandRecord(config: CloudConfig, environment: EnvironmentType, id?: number): Promise<CommandRecord | undefined>;
 /**
  * Run a SQL statement against a (private, in-VPC) serverless database via the CLI
  * function — no bastion needed. Requires the `tscloud/serverless` PHP bridge

package/dist/index.js

@@ -26187,34 +26187,39 @@ function composeServerlessAppTemplate(opts) {
   }
   if (app.warm && app.warm > 0) {
     const TARGETS_PER_RULE = 5;
-    const ruleCount = Math.ceil(app.warm / TARGETS_PER_RULE);
-    let warmed = 0;
-    for (let r = 0;r < ruleCount; r++) {
-      const targets = Math.min(TARGETS_PER_RULE, app.warm - warmed);
-      resources[`WarmerRule${r}`] = {
-        Type: "AWS::Events::Rule",
+    const fnResource = { http: "HttpFunction", queue: "QueueFunction", cli: "CliFunction" };
+    const warmModes = (app.warmFunctions ?? ["http"]).filter((m) => m !== "queue" || hasQueue);
+    for (const mode of warmModes) {
+      const cap = mode.charAt(0).toUpperCase() + mode.slice(1);
+      const ruleCount = Math.ceil(app.warm / TARGETS_PER_RULE);
+      let warmed = 0;
+      for (let r = 0;r < ruleCount; r++) {
+        const targets = Math.min(TARGETS_PER_RULE, app.warm - warmed);
+        resources[`Warmer${cap}Rule${r}`] = {
+          Type: "AWS::Events::Rule",
+          Properties: {
+            Name: `${slug}-${environment}-warmer-${mode}-${r}`,
+            ScheduleExpression: "rate(5 minutes)",
+            State: "ENABLED",
+            Targets: Array.from({ length: targets }, (_, i) => ({
+              Id: `warm-${mode}-${r}-${i}`,
+              Arn: Fn2.getAtt(fnResource[mode], "Arn"),
+              Input: JSON.stringify({ warmer: true })
+            }))
+          }
+        };
+        warmed += targets;
+      }
+      resources[`Warmer${cap}Permission`] = {
+        Type: "AWS::Lambda::Permission",
         Properties: {
-          Name: `${slug}-${environment}-warmer-${r}`,
-          ScheduleExpression: "rate(5 minutes)",
-          State: "ENABLED",
-          Targets: Array.from({ length: targets }, (_, i) => ({
-            Id: `warm-${r}-${i}`,
-            Arn: Fn2.getAtt("HttpFunction", "Arn"),
-            Input: JSON.stringify({ warmer: true })
-          }))
+          FunctionName: Fn2.ref(fnResource[mode]),
+          Action: "lambda:InvokeFunction",
+          Principal: "events.amazonaws.com",
+          SourceArn: Fn2.sub(`arn:aws:events:\${AWS::Region}:\${AWS::AccountId}:rule/${slug}-${environment}-warmer-${mode}-*`)
         }
       };
-      warmed += targets;
     }
-    resources.WarmerPermission = {
-      Type: "AWS::Lambda::Permission",
-      Properties: {
-        FunctionName: Fn2.ref("HttpFunction"),
-        Action: "lambda:InvokeFunction",
-        Principal: "events.amazonaws.com",
-        SourceArn: Fn2.sub(`arn:aws:events:\${AWS::Region}:\${AWS::AccountId}:rule/${slug}-${environment}-warmer-*`)
-      }
-    };
   }
   if (cacheEnabled) {
     resources.CacheTable = {
@@ -26807,6 +26812,8 @@ function parseRecordBody(body) {
 function createQueueHandler(handler8) {
   return async (event) => {
     const batchItemFailures = [];
+    if (event.warmer)
+      return { batchItemFailures };
     if (!handler8)
       return { batchItemFailures };
     for (const record of event.Records ?? []) {
@@ -26821,6 +26828,8 @@ function createQueueHandler(handler8) {
 }
 function createCliHandler(handler8) {
   return async (event) => {
+    if (event.warmer)
+      return { statusCode: 0, output: "warm" };
     if (!handler8)
       return { statusCode: 501, output: "No CLI handler configured" };
     return handler8(event);
@@ -58022,6 +58031,9 @@ function colorize(text, color) {
 function success(message) {
   console.log(`${colors.green}✓${colors.reset} ${message}`);
 }
+function error(message) {
+  console.error(`${colors.red}✗${colors.reset} ${message}`);
+}
 function warn(message) {
   console.warn(`${colors.yellow}⚠${colors.reset} ${message}`);
 }
@@ -83301,6 +83313,16 @@ async function resolveSecrets(app, region) {
   const sm = new SecretsManagerClient(region);
   const out = {};
   const entries = Array.isArray(app.secrets) ? app.secrets.map((name) => ({ envName: name.split("/").pop().toUpperCase().replace(/[^A-Z0-9_]/g, "_"), secretId: name })) : Object.entries(app.secrets).map(([envName, secretId]) => ({ envName, secretId }));
+  if (Array.isArray(app.secrets)) {
+    const byName = new Map;
+    for (const { envName, secretId } of entries)
+      byName.set(envName, [...byName.get(envName) ?? [], secretId]);
+    const clashes = [...byName.entries()].filter(([, ids]) => ids.length > 1);
+    if (clashes.length) {
+      const detail = clashes.map(([name, ids]) => `${name} ← ${ids.join(", ")}`).join("; ");
+      throw new Error(`serverless secrets: multiple secrets map to the same env var (${detail}). Use the map form { ENV_NAME: 'secret/id' } to disambiguate.`);
+    }
+  }
   for (const { envName, secretId } of entries) {
     const value = await sm.getSecretValue({ SecretId: secretId });
     const str = value.SecretString ?? "";
@@ -83586,6 +83608,8 @@ async function deployServerlessApp(config6, environment, opts = {}) {
         LogType: "Tail"
       });
       if (res.FunctionError) {
+        error("Deploy hook failed — the new build is ALREADY LIVE.");
+        info(`  Roll back with: cloud serverless:rollback --env ${environment}`);
         throw new Error(`Deploy hook failed (${command}): ${res.Payload}`);
       }
     }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@stacksjs/ts-cloud",
   "type": "module",
-  "version": "0.5.7",
+  "version": "0.5.8",
   "description": "A lightweight, performant infrastructure-as-code library and CLI for deploying both server-based (EC2) and serverless applications.",
   "author": "Chris Breuer <chris@stacksjs.com>",
   "license": "MIT",
@@ -89,8 +89,8 @@
     "test": "bun test"
   },
   "dependencies": {
-    "@ts-cloud/aws-types": "0.5.7",
-    "@ts-cloud/core": "0.5.7",
+    "@ts-cloud/aws-types": "0.5.8",
+    "@ts-cloud/core": "0.5.8",
     "@stacksjs/ts-xml": "^0.1.0"
   },
   "devDependencies": {