@swovohq/fuel 0.1.0

package/dist/infra/template-engine.js

@@ -0,0 +1,233 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseTfvars = parseTfvars;
+exports.serializeTfvars = serializeTfvars;
+exports.patchMainTf = patchMainTf;
+exports.patchBackendTf = patchBackendTf;
+exports.patchDefaultTfvars = patchDefaultTfvars;
+exports.pruneUnusedModules = pruneUnusedModules;
+exports.copyWorkflowFiles = copyWorkflowFiles;
+exports.generateInfra = generateInfra;
+const fs = __importStar(require("fs-extra"));
+const path = __importStar(require("path"));
+const crypto = __importStar(require("crypto"));
+const chalk_1 = __importDefault(require("chalk"));
+const s3_state_bucket_1 = require("./s3-state-bucket");
+// Modules that must never be removed during pruning, regardless of main.tf references
+const MODULES_DONT_REMOVE = ['secret-main'];
+/**
+ * Generate a random 32-char hex database password.
+ */
+function generateDbPassword() {
+    return crypto.randomBytes(16).toString('hex');
+}
+/**
+ * Fetch the caller's public IPv4 address and return it as a /32 CIDR block.
+ */
+async function fetchPublicIpCidr() {
+    const res = await fetch('https://checkip.amazonaws.com');
+    if (!res.ok) {
+        throw new Error(`Failed to fetch public IP: ${res.status} ${res.statusText}`);
+    }
+    const ip = (await res.text()).trim();
+    return `${ip}/32`;
+}
+/**
+ * Parse a .tfvars file content into a Record<string, string>.
+ * Handles lines in the format: key = "value"
+ */
+function parseTfvars(content) {
+    const result = {};
+    for (const line of content.split('\n')) {
+        const eqIdx = line.indexOf('=');
+        if (eqIdx === -1)
+            continue;
+        const key = line.slice(0, eqIdx).trim();
+        if (!key || key.startsWith('#'))
+            continue;
+        let value = line.slice(eqIdx + 1).trim();
+        // Strip surrounding double-quotes
+        if (value.startsWith('"') && value.endsWith('"')) {
+            value = value.slice(1, -1);
+        }
+        result[key] = value;
+    }
+    return result;
+}
+/**
+ * Serialize a Record<string, string> into .tfvars format.
+ * Produces: key = "value"\n lines joined with newline, ending with newline.
+ */
+function serializeTfvars(vars) {
+    return (Object.entries(vars)
+        .map(([k, v]) => `${k} = "${v}"`)
+        .join('\n') + '\n');
+}
+/**
+ * Patch main.tf: replace all ../../modules references with ./modules.
+ */
+async function patchMainTf(infraRoot) {
+    const filePath = path.join(infraRoot, 'main.tf');
+    const content = await fs.readFile(filePath, 'utf8');
+    const patched = content.replaceAll('../../modules', './modules');
+    await fs.writeFile(filePath, patched, 'utf8');
+}
+/**
+ * Patch backend.tf: replace {project_name}, {aws_region}, and {unique_suffix} placeholders.
+ */
+async function patchBackendTf(infraRoot, projectName, awsRegion, uniqueSuffix) {
+    const filePath = path.join(infraRoot, 'backend.tf');
+    const content = await fs.readFile(filePath, 'utf8');
+    const patched = content
+        .replaceAll('{project_name}', projectName)
+        .replaceAll('{aws_region}', awsRegion)
+        .replaceAll('{unique_suffix}', uniqueSuffix);
+    await fs.writeFile(filePath, patched, 'utf8');
+}
+/**
+ * Patch default.tfvars: set project_name, aws_region, db_password from config and credentials.
+ */
+async function patchDefaultTfvars(infraRoot, config, credentials) {
+    const filePath = path.join(infraRoot, 'default.tfvars');
+    const content = await fs.readFile(filePath, 'utf8');
+    const vars = parseTfvars(content);
+    vars['project_name'] = config.name;
+    vars['aws_region'] = credentials.AWS_REGION;
+    vars['db_password'] = generateDbPassword();
+    vars['access_ip_range'] = await fetchPublicIpCidr();
+    await fs.writeFile(filePath, serializeTfvars(vars), 'utf8');
+}
+/**
+ * Prune modules not referenced in main.tf (after patching).
+ * Always keeps modules listed in MODULES_DONT_REMOVE (e.g., secret-main).
+ */
+async function pruneUnusedModules(infraRoot) {
+    const mainTfPath = path.join(infraRoot, 'main.tf');
+    const content = await fs.readFile(mainTfPath, 'utf8');
+    // Extract all referenced module source paths: source = "./modules/<name>"
+    const usedModules = new Set(MODULES_DONT_REMOVE);
+    const regex = /source\s*=\s*"\.\/modules\/([^"]+)"/g;
+    let match;
+    while ((match = regex.exec(content)) !== null) {
+        usedModules.add(match[1]);
+    }
+    const modulesDir = path.join(infraRoot, 'modules');
+    const entries = await fs.readdir(modulesDir, { withFileTypes: true });
+    for (const entry of entries) {
+        if (entry.isDirectory() && !usedModules.has(entry.name)) {
+            await fs.remove(path.join(modulesDir, entry.name));
+        }
+    }
+}
+/**
+ * Copy GitHub Actions workflow files into <projectDir>/.github/workflows/.
+ * Replaces what Terraform's github_repository_file resources used to do.
+ */
+async function copyWorkflowFiles(projectDir, config, infraSrcRoot) {
+    const workflowsDir = path.join(projectDir, '.github', 'workflows');
+    await fs.ensureDir(workflowsDir);
+    // Read template files
+    const deployTemplatePath = path.join(infraSrcRoot, 'modules', 'github-actions', 'github-workflows-ecs', 'build_and_deploy.yml');
+    const testsTemplatePath = path.join(infraSrcRoot, 'modules', 'github-actions', 'github-workflows-app', 'tests.yml');
+    const deployTemplate = await fs.readFile(deployTemplatePath, 'utf8');
+    const testsContent = await fs.readFile(testsTemplatePath, 'utf8');
+    // Copy tests.yml as-is
+    await fs.writeFile(path.join(workflowsDir, 'tests.yml'), testsContent, 'utf8');
+    // Helper: apply substitutions for a given service entry
+    function applySubstitutions(template, name, dockerfile, buildEnv, branch, secretName) {
+        const buildArgs = buildEnv && Object.keys(buildEnv).length > 0
+            ? Object.entries(buildEnv)
+                .map(([k, v]) => `--build-arg ${k.toUpperCase()}=${v}`)
+                .join(' ')
+            : '';
+        return template
+            .replaceAll('REPLACEME', name)
+            .replaceAll('DOCKERFILE', dockerfile)
+            .replaceAll('BUILDARGS', buildArgs)
+            .replaceAll('BRANCHREPLACE', branch)
+            .replaceAll('SECRETNAME', secretName);
+    }
+    // Write a workflow file per app
+    for (const app of config.apps) {
+        const content = applySubstitutions(deployTemplate, app.name, app.dockerfile ?? 'Dockerfile', app.build_env, app.branch ?? 'main', `${app.name}-secrets`);
+        await fs.writeFile(path.join(workflowsDir, `${app.name}.yaml`), content, 'utf8');
+        // Write a workflow file per worker within this app
+        for (const worker of app.workers ?? []) {
+            const workerContent = applySubstitutions(deployTemplate, worker.name, worker.dockerfile ?? 'Dockerfile', app.build_env, app.branch ?? 'main', `${app.name}-secrets`);
+            await fs.writeFile(path.join(workflowsDir, `${worker.name}.yaml`), workerContent, 'utf8');
+        }
+    }
+}
+/**
+ * Generate a self-contained /infra folder in targetRoot.
+ * Copies ECS templates and all Terraform modules, then patches and prunes.
+ *
+ * The fuel-infrastructure sibling path is resolved via:
+ *   - FUEL_INFRA_PATH env var (override for testing / CI)
+ *   - process.cwd()/../fuel-infrastructure (default monorepo layout)
+ */
+async function generateInfra(targetRoot, config, credentials) {
+    const infraSourceRoot = process.env.FUEL_INFRA_PATH ??
+        path.resolve(__dirname, '..', '..', '..', 'infra');
+    const infraRoot = path.join(targetRoot, 'infra');
+    const templateSrc = path.join(infraSourceRoot, 'templates', 'ecs');
+    const modulesSrc = path.join(infraSourceRoot, 'modules');
+    if (!(await fs.pathExists(templateSrc))) {
+        throw new Error(`Template source not found: ${templateSrc}. ` +
+            `Set FUEL_INFRA_PATH env var or ensure packages/infra exists in the monorepo.`);
+    }
+    console.log(chalk_1.default.cyan('  Generating infra folder...'));
+    // Step 1: Copy all 9 ECS template files into <project>/infra/
+    await fs.copy(templateSrc, infraRoot);
+    // Step 2: Copy all Terraform modules into <project>/infra/modules/
+    await fs.copy(modulesSrc, path.join(infraRoot, 'modules'));
+    // Step 3: Patch main.tf — replace ../../modules with ./modules
+    await patchMainTf(infraRoot);
+    // Step 4: Patch backend.tf — replace {project_name}, {aws_region}, and {unique_suffix}
+    const suffix = await (0, s3_state_bucket_1.loadOrCreateSuffix)(targetRoot);
+    await patchBackendTf(infraRoot, config.name, credentials.AWS_REGION, suffix);
+    // Step 5: Patch default.tfvars — fill ssl, project_name, aws_region, db_password
+    await patchDefaultTfvars(infraRoot, config, credentials);
+    // Step 6: Prune modules not referenced in patched main.tf
+    await pruneUnusedModules(infraRoot);
+    // Step 7: Copy GitHub Actions workflow files into <project>/.github/workflows/
+    await copyWorkflowFiles(targetRoot, config, infraSourceRoot);
+    console.log(chalk_1.default.green('  ✓ Infra folder generated'));
+}
+//# sourceMappingURL=template-engine.js.map

package/dist/infra/template-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"template-engine.js","sourceRoot":"","sources":["../../src/infra/template-engine.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiCA,kCAeC;AAMD,0CAMC;AAKD,kCAKC;AAKD,wCAaC;AAKD,gDAeC;AAMD,gDAoBC;AAMD,8CA+EC;AAUD,sCA6CC;AAlRD,6CAA8B;AAC9B,2CAA4B;AAC5B,+CAAgC;AAChC,kDAAyB;AAEzB,uDAAsD;AAEtD,sFAAsF;AACtF,MAAM,mBAAmB,GAAG,CAAC,aAAa,CAAC,CAAA;AAE3C;;GAEG;AACH,SAAS,kBAAkB;IACzB,OAAO,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;AAC/C,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,iBAAiB;IAC9B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,+BAA+B,CAAC,CAAA;IACxD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAA;IAC/E,CAAC;IACD,MAAM,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IACpC,OAAO,GAAG,EAAE,KAAK,CAAA;AACnB,CAAC;AAED;;;GAGG;AACH,SAAgB,WAAW,CAAC,OAAe;IACzC,MAAM,MAAM,GAA2B,EAAE,CAAA;IACzC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAC/B,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,SAAQ;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAA;QACvC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAQ;QACzC,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QACxC,kCAAkC;QAClC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACjD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QAC5B,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;IACrB,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;GAGG;AACH,SAAgB,eAAe,CAAC,IAA4B;IAC1D,OAAO,CACL,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;SACjB,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC;SAChC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CACrB,CAAA;AACH,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,WAAW,CAAC,SAAiB;IACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;IAChD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IACnD,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,eAAe,EAAE,WAAW,CAAC,CAAA;IAChE,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;AAC/C,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,cAAc,CAClC,SAAiB,EACjB,WAAmB,EACnB,SAAiB,EACjB,YAAoB;IAEpB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAA;IACnD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IACnD,MAAM,OAAO,GAAG,OAAO;SACpB,UAAU,CAAC,gBAAgB,EAAE,WAAW,CAAC;SACzC,UAAU,CAAC,cAAc,EAAE,SAAS,CAAC;SACrC,UAAU,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAA;IAC9C,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;AAC/C,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,kBAAkB,CACtC,SAAiB,EACjB,MAAmB,EACnB,WAAwB;IAExB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAA;IACvD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IACnD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAA;IAEjC,IAAI,CAAC,cAAc,CAAC,GAAG,MAAM,CAAC,IAAI,CAAA;IAClC,IAAI,CAAC,YAAY,CAAC,GAAG,WAAW,CAAC,UAAU,CAAA;IAC3C,IAAI,CAAC,aAAa,CAAC,GAAG,kBAAkB,EAAE,CAAA;IAC1C,IAAI,CAAC,iBAAiB,CAAC,GAAG,MAAM,iBAAiB,EAAE,CAAA;IAEnD,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,eAAe,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAA;AAC7D,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,kBAAkB,CAAC,SAAiB;IACxD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;IAClD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;IAErD,0EAA0E;IAC1E,MAAM,WAAW,GAAG,IAAI,GAAG,CAAS,mBAAmB,CAAC,CAAA;IACxD,MAAM,KAAK,GAAG,sCAAsC,CAAA;IACpD,IAAI,KAA6B,CAAA;IACjC,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC9C,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IAC3B,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;IAClD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;IAErE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACxD,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;QACpD,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,iBAAiB,CACrC,UAAkB,EAClB,MAAmB,EACnB,YAAoB;IAEpB,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,WAAW,CAAC,CAAA;IAClE,MAAM,EAAE,CAAC,SAAS,CAAC,YAAY,CAAC,CAAA;IAEhC,sBAAsB;IACtB,MAAM,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAClC,YAAY,EACZ,SAAS,EACT,gBAAgB,EAChB,sBAAsB,EACtB,sBAAsB,CACvB,CAAA;IACD,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CACjC,YAAY,EACZ,SAAS,EACT,gBAAgB,EAChB,sBAAsB,EACtB,WAAW,CACZ,CAAA;IAED,MAAM,cAAc,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAA;IACpE,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAA;IAEjE,uBAAuB;IACvB,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,CAAA;IAE9E,wDAAwD;IACxD,SAAS,kBAAkB,CACzB,QAAgB,EAChB,IAAY,EACZ,UAAkB,EAClB,QAA4C,EAC5C,MAAc,EACd,UAAkB;QAElB,MAAM,SAAS,GACb,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC;YAC1C,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;iBACrB,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC;iBACtD,IAAI,CAAC,GAAG,CAAC;YACd,CAAC,CAAC,EAAE,CAAA;QAER,OAAO,QAAQ;aACZ,UAAU,CAAC,WAAW,EAAE,IAAI,CAAC;aAC7B,UAAU,CAAC,YAAY,EAAE,UAAU,CAAC;aACpC,UAAU,CAAC,WAAW,EAAE,SAAS,CAAC;aAClC,UAAU,CAAC,eAAe,EAAE,MAAM,CAAC;aACnC,UAAU,CAAC,YAAY,EAAE,UAAU,CAAC,CAAA;IACzC,CAAC;IAED,gCAAgC;IAChC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,kBAAkB,CAChC,cAAc,EACd,GAAG,CAAC,IAAI,EACR,GAAG,CAAC,UAAU,IAAI,YAAY,EAC9B,GAAG,CAAC,SAAS,EACb,GAAG,CAAC,MAAM,IAAI,MAAM,EACpB,GAAG,GAAG,CAAC,IAAI,UAAU,CACtB,CAAA;QACD,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,GAAG,CAAC,IAAI,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;QAEhF,mDAAmD;QACnD,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;YACvC,MAAM,aAAa,GAAG,kBAAkB,CACtC,cAAc,EACd,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,UAAU,IAAI,YAAY,EACjC,GAAG,CAAC,SAAS,EACb,GAAG,CAAC,MAAM,IAAI,MAAM,EACpB,GAAG,GAAG,CAAC,IAAI,UAAU,CACtB,CAAA;YACD,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,MAAM,CAAC,IAAI,OAAO,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,CAAA;QAC3F,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACI,KAAK,UAAU,aAAa,CACjC,UAAkB,EAClB,MAAmB,EACnB,WAAwB;IAExB,MAAM,eAAe,GACnB,OAAO,CAAC,GAAG,CAAC,eAAe;QAC3B,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;IAEpD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;IAChD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,WAAW,EAAE,KAAK,CAAC,CAAA;IAClE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,SAAS,CAAC,CAAA;IAExD,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CACb,8BAA8B,WAAW,IAAI;YAC3C,8EAA8E,CACjF,CAAA;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC,CAAA;IAEvD,8DAA8D;IAC9D,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAA;IAErC,mEAAmE;IACnE,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAA;IAE1D,+DAA+D;IAC/D,MAAM,WAAW,CAAC,SAAS,CAAC,CAAA;IAE5B,uFAAuF;IACvF,MAAM,MAAM,GAAG,MAAM,IAAA,oCAAkB,EAAC,UAAU,CAAC,CAAA;IACnD,MAAM,cAAc,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;IAE5E,iFAAiF;IACjF,MAAM,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC,CAAA;IAExD,0DAA0D;IAC1D,MAAM,kBAAkB,CAAC,SAAS,CAAC,CAAA;IAEnC,+EAA+E;IAC/E,MAAM,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,eAAe,CAAC,CAAA;IAE5D,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAA;AACxD,CAAC"}

package/dist/infra/tofu-runner.d.ts

@@ -0,0 +1,26 @@
+import { Credentials } from './types';
+export interface TofuRunResult {
+    completedPasses: number[];
+    failedPass: number | null;
+    outputs: Record<string, {
+        value: any;
+        type: string;
+    }> | null;
+}
+export interface TofuVars {
+    db_password: string;
+    db_username: string;
+    db_name: string;
+}
+export declare class TofuPassError extends Error {
+    readonly failedPass: number;
+    readonly completedPasses: number[];
+    constructor(failedPass: number, completedPasses: number[]);
+}
+export interface TofuSequenceOptions {
+    planOnly?: boolean;
+}
+export declare function buildDestroyArgs(credentials: Credentials, tofuVars: TofuVars): string[];
+export declare function runTofuDestroy(infraDir: string, credentials: Credentials, tofuVars: TofuVars): Promise<void>;
+export declare function runTofuSequence(infraDir: string, credentials: Credentials, tofuVars: TofuVars, options?: TofuSequenceOptions): Promise<TofuRunResult>;
+//# sourceMappingURL=tofu-runner.d.ts.map

package/dist/infra/tofu-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tofu-runner.d.ts","sourceRoot":"","sources":["../../src/infra/tofu-runner.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AAGrC,MAAM,WAAW,aAAa;IAC5B,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,KAAK,EAAE,GAAG,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,IAAI,CAAA;CAC7D;AAED,MAAM,WAAW,QAAQ;IACvB,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,qBAAa,aAAc,SAAQ,KAAK;aAEpB,UAAU,EAAE,MAAM;aAClB,eAAe,EAAE,MAAM,EAAE;gBADzB,UAAU,EAAE,MAAM,EAClB,eAAe,EAAE,MAAM,EAAE;CAK5C;AAyBD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,OAAO,CAAA;CACnB;AA+GD,wBAAgB,gBAAgB,CAC9B,WAAW,EAAE,WAAW,EACxB,QAAQ,EAAE,QAAQ,GACjB,MAAM,EAAE,CAMV;AAED,wBAAsB,cAAc,CAClC,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,WAAW,EACxB,QAAQ,EAAE,QAAQ,GACjB,OAAO,CAAC,IAAI,CAAC,CAoBf;AAED,wBAAsB,eAAe,CACnC,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,WAAW,EACxB,QAAQ,EAAE,QAAQ,EAClB,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,aAAa,CAAC,CA+ExB"}

package/dist/infra/tofu-runner.js

@@ -0,0 +1,210 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TofuPassError = void 0;
+exports.buildDestroyArgs = buildDestroyArgs;
+exports.runTofuDestroy = runTofuDestroy;
+exports.runTofuSequence = runTofuSequence;
+const child_process_1 = require("child_process");
+const chalk_1 = __importDefault(require("chalk"));
+const subprocess_1 = require("./subprocess");
+class TofuPassError extends Error {
+    constructor(failedPass, completedPasses) {
+        super(`Tofu pass ${failedPass} failed after ${MAX_ATTEMPTS} attempts`);
+        this.failedPass = failedPass;
+        this.completedPasses = completedPasses;
+        this.name = 'TofuPassError';
+    }
+}
+exports.TofuPassError = TofuPassError;
+const MAX_ATTEMPTS = 3;
+const TRANSIENT_PATTERNS = [
+    /RequestError/i,
+    /ThrottlingException/i,
+    /5\d\d/,
+    /timeout/i,
+    /connection reset/i,
+    /TooManyRequests/i,
+];
+function isTransient(output) {
+    return TRANSIENT_PATTERNS.some((pattern) => pattern.test(output));
+}
+function buildAwsEnv(credentials) {
+    return {
+        AWS_ACCESS_KEY_ID: credentials.AWS_ACCESS_KEY_ID,
+        AWS_SECRET_ACCESS_KEY: credentials.AWS_SECRET_ACCESS_KEY,
+        AWS_REGION: credentials.AWS_REGION,
+    };
+}
+function buildVarArgs(credentials, tofuVars, skipEcs) {
+    return [
+        '-var-file=default.tfvars',
+        `-var=github_token=${credentials.GITHUB_TOKEN}`,
+        `-var=github_username=${credentials.GITHUB_USERNAME}`,
+        `-var=aws_access_key_id=${credentials.AWS_ACCESS_KEY_ID}`,
+        `-var=aws_secret_access_key=${credentials.AWS_SECRET_ACCESS_KEY}`,
+        `-var=aws_region=${credentials.AWS_REGION}`,
+        `-var=github_organization=${credentials.GITHUB_ORGANIZATION}`,
+        `-var=db_password=${tofuVars.db_password}`,
+        `-var=db_username=${tofuVars.db_username}`,
+        `-var=db_name=${tofuVars.db_name}`,
+        `-var=skip_ecs=${skipEcs}`,
+    ];
+}
+function buildApplyArgs(passTargets, credentials, tofuVars, skipEcs) {
+    return [
+        'apply',
+        '-auto-approve',
+        ...buildVarArgs(credentials, tofuVars, skipEcs),
+        ...passTargets,
+    ];
+}
+function buildPlanArgs(passTargets, credentials, tofuVars, skipEcs) {
+    return [
+        'plan',
+        ...buildVarArgs(credentials, tofuVars, skipEcs),
+        ...passTargets,
+    ];
+}
+async function runPassWithRetry(passNum, passLabel, args, cwd, env) {
+    for (let attempt = 1; attempt <= MAX_ATTEMPTS; attempt++) {
+        const { code, combined } = await (0, subprocess_1.spawnStreaming)(args, cwd, env);
+        if (code === 0) {
+            return;
+        }
+        if (!isTransient(combined) || attempt === MAX_ATTEMPTS) {
+            throw new Error(`Pass ${passNum} (${passLabel}) failed after attempt ${attempt}`);
+        }
+        console.warn(chalk_1.default.yellow(`Warning: Pass ${passNum} attempt ${attempt} failed with transient error. Retrying...`));
+    }
+}
+async function collectOutputs(infraDir, env) {
+    return new Promise((resolve, reject) => {
+        const proc = (0, child_process_1.spawn)('tofu', ['output', '-json'], {
+            stdio: ['ignore', 'pipe', 'pipe'],
+            cwd: infraDir,
+            env: env ? { ...process.env, ...env } : undefined,
+        });
+        let stdout = '';
+        let stderr = '';
+        proc.stdout.on('data', (chunk) => {
+            stdout += chunk.toString();
+        });
+        proc.stderr.on('data', (chunk) => {
+            stderr += chunk.toString();
+        });
+        proc.on('close', (code) => {
+            if ((code ?? 1) !== 0) {
+                reject(new Error(`tofu output -json failed: ${stderr}`));
+                return;
+            }
+            try {
+                resolve(JSON.parse(stdout));
+            }
+            catch (e) {
+                reject(new Error(`Failed to parse tofu output JSON: ${e.message}`));
+            }
+        });
+    });
+}
+function buildDestroyArgs(credentials, tofuVars) {
+    return [
+        'destroy',
+        '-auto-approve',
+        ...buildVarArgs(credentials, tofuVars, false),
+    ];
+}
+async function runTofuDestroy(infraDir, credentials, tofuVars) {
+    const awsEnv = buildAwsEnv(credentials);
+    // Initialize OpenTofu
+    console.log(chalk_1.default.cyan('--- Initializing OpenTofu ---'));
+    const { code: initCode } = await (0, subprocess_1.spawnStreaming)(['init'], infraDir, awsEnv);
+    if (initCode !== 0) {
+        console.error(chalk_1.default.red('✗ OpenTofu init failed'));
+        process.exit(1);
+    }
+    console.log(chalk_1.default.green('✓ OpenTofu initialized'));
+    // Run destroy
+    console.log(chalk_1.default.cyan('--- Destroying infrastructure ---'));
+    const args = buildDestroyArgs(credentials, tofuVars);
+    const { code } = await (0, subprocess_1.spawnStreaming)(args, infraDir, awsEnv);
+    if (code !== 0) {
+        throw new Error('OpenTofu destroy failed. Check the output above for details.');
+    }
+    console.log(chalk_1.default.green('✓ Infrastructure destroyed'));
+}
+async function runTofuSequence(infraDir, credentials, tofuVars, options) {
+    const awsEnv = buildAwsEnv(credentials);
+    // Initialize OpenTofu
+    console.log(chalk_1.default.cyan('--- Initializing OpenTofu ---'));
+    const { code: initCode } = await (0, subprocess_1.spawnStreaming)(['init'], infraDir, awsEnv);
+    if (initCode !== 0) {
+        console.error(chalk_1.default.red('✗ OpenTofu init failed'));
+        process.exit(1);
+    }
+    console.log(chalk_1.default.green('✓ OpenTofu initialized'));
+    // Define pass configurations
+    const passes = [
+        {
+            num: 1,
+            label: 'ECR + GitHub repo',
+            targets: ['-target=module.ecr', '-target=module.github_repo'],
+            skipEcs: true,
+        },
+        {
+            num: 2,
+            label: 'GitHub Actions',
+            targets: ['-target=module.github_actions', '-target=module.github_repo', '-target=module.github_oidc'],
+            skipEcs: true,
+        },
+        {
+            num: 3,
+            label: 'Full apply',
+            targets: [],
+            skipEcs: false,
+        },
+    ];
+    const result = {
+        completedPasses: [],
+        failedPass: null,
+        outputs: null,
+    };
+    const planOnly = options?.planOnly ?? false;
+    for (const pass of passes) {
+        const mode = planOnly ? 'Plan' : 'Pass';
+        console.log(chalk_1.default.cyan(`--- ${mode} ${pass.num}/3: ${pass.label} ---`));
+        try {
+            const args = planOnly
+                ? buildPlanArgs(pass.targets, credentials, tofuVars, pass.skipEcs)
+                : buildApplyArgs(pass.targets, credentials, tofuVars, pass.skipEcs);
+            if (planOnly) {
+                const { code } = await (0, subprocess_1.spawnStreaming)(args, infraDir, awsEnv);
+                if (code !== 0) {
+                    throw new Error(`Plan ${pass.num} (${pass.label}) failed`);
+                }
+            }
+            else {
+                await runPassWithRetry(pass.num, pass.label, args, infraDir, awsEnv);
+            }
+            result.completedPasses.push(pass.num);
+            console.log(chalk_1.default.green(`✓ ${mode} ${pass.num} complete`));
+        }
+        catch (err) {
+            result.failedPass = pass.num;
+            if (planOnly) {
+                console.log(chalk_1.default.red(`✗ Plan ${pass.num} failed.`));
+                throw err;
+            }
+            console.log(chalk_1.default.red(`✗ Pass ${pass.num} failed after ${MAX_ATTEMPTS} attempts.`));
+            throw new TofuPassError(pass.num, [...result.completedPasses]);
+        }
+    }
+    if (!planOnly) {
+        // Collect outputs after all passes
+        result.outputs = await collectOutputs(infraDir, awsEnv);
+    }
+    return result;
+}
+//# sourceMappingURL=tofu-runner.js.map

package/dist/infra/tofu-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tofu-runner.js","sourceRoot":"","sources":["../../src/infra/tofu-runner.ts"],"names":[],"mappings":";;;;;;AAmKA,4CASC;AAED,wCAwBC;AAED,0CAoFC;AA5RD,iDAAqC;AACrC,kDAAyB;AAEzB,6CAA6C;AAc7C,MAAa,aAAc,SAAQ,KAAK;IACtC,YACkB,UAAkB,EAClB,eAAyB;QAEzC,KAAK,CAAC,aAAa,UAAU,iBAAiB,YAAY,WAAW,CAAC,CAAA;QAHtD,eAAU,GAAV,UAAU,CAAQ;QAClB,oBAAe,GAAf,eAAe,CAAU;QAGzC,IAAI,CAAC,IAAI,GAAG,eAAe,CAAA;IAC7B,CAAC;CACF;AARD,sCAQC;AAED,MAAM,YAAY,GAAG,CAAC,CAAA;AAEtB,MAAM,kBAAkB,GAAa;IACnC,eAAe;IACf,sBAAsB;IACtB,OAAO;IACP,UAAU;IACV,mBAAmB;IACnB,kBAAkB;CACnB,CAAA;AAED,SAAS,WAAW,CAAC,MAAc;IACjC,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA;AACnE,CAAC;AAED,SAAS,WAAW,CAAC,WAAwB;IAC3C,OAAO;QACL,iBAAiB,EAAE,WAAW,CAAC,iBAAiB;QAChD,qBAAqB,EAAE,WAAW,CAAC,qBAAqB;QACxD,UAAU,EAAE,WAAW,CAAC,UAAU;KACnC,CAAA;AACH,CAAC;AAMD,SAAS,YAAY,CACnB,WAAwB,EACxB,QAAkB,EAClB,OAAgB;IAEhB,OAAO;QACL,0BAA0B;QAC1B,qBAAqB,WAAW,CAAC,YAAY,EAAE;QAC/C,wBAAwB,WAAW,CAAC,eAAe,EAAE;QACrD,0BAA0B,WAAW,CAAC,iBAAiB,EAAE;QACzD,8BAA8B,WAAW,CAAC,qBAAqB,EAAE;QACjE,mBAAmB,WAAW,CAAC,UAAU,EAAE;QAC3C,4BAA4B,WAAW,CAAC,mBAAmB,EAAE;QAC7D,oBAAoB,QAAQ,CAAC,WAAW,EAAE;QAC1C,oBAAoB,QAAQ,CAAC,WAAW,EAAE;QAC1C,gBAAgB,QAAQ,CAAC,OAAO,EAAE;QAClC,iBAAiB,OAAO,EAAE;KAC3B,CAAA;AACH,CAAC;AAED,SAAS,cAAc,CACrB,WAAqB,EACrB,WAAwB,EACxB,QAAkB,EAClB,OAAgB;IAEhB,OAAO;QACL,OAAO;QACP,eAAe;QACf,GAAG,YAAY,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC;QAC/C,GAAG,WAAW;KACf,CAAA;AACH,CAAC;AAED,SAAS,aAAa,CACpB,WAAqB,EACrB,WAAwB,EACxB,QAAkB,EAClB,OAAgB;IAEhB,OAAO;QACL,MAAM;QACN,GAAG,YAAY,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC;QAC/C,GAAG,WAAW;KACf,CAAA;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,OAAe,EACf,SAAiB,EACjB,IAAc,EACd,GAAW,EACX,GAA4B;IAE5B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,YAAY,EAAE,OAAO,EAAE,EAAE,CAAC;QACzD,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAA,2BAAc,EAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;QAE/D,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;YACf,OAAM;QACR,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,OAAO,KAAK,YAAY,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,QAAQ,OAAO,KAAK,SAAS,0BAA0B,OAAO,EAAE,CAAC,CAAA;QACnF,CAAC;QAED,OAAO,CAAC,IAAI,CACV,eAAK,CAAC,MAAM,CACV,iBAAiB,OAAO,YAAY,OAAO,2CAA2C,CACvF,CACF,CAAA;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,QAAgB,EAChB,GAA4B;IAE5B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,IAAI,GAAG,IAAA,qBAAK,EAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE;YAC9C,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,GAAG,EAAE,QAAQ;YACb,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS;SAClD,CAAC,CAAA;QAEF,IAAI,MAAM,GAAG,EAAE,CAAA;QACf,IAAI,MAAM,GAAG,EAAE,CAAA;QAEf,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACvC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAA;QAC5B,CAAC,CAAC,CAAA;QAEF,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACvC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAA;QAC5B,CAAC,CAAC,CAAA;QAEF,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAmB,EAAE,EAAE;YACvC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtB,MAAM,CAAC,IAAI,KAAK,CAAC,6BAA6B,MAAM,EAAE,CAAC,CAAC,CAAA;gBACxD,OAAM;YACR,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;YAC7B,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,CAAC,IAAI,KAAK,CAAC,qCAAsC,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;YAChF,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAgB,gBAAgB,CAC9B,WAAwB,EACxB,QAAkB;IAElB,OAAO;QACL,SAAS;QACT,eAAe;QACf,GAAG,YAAY,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC;KAC9C,CAAA;AACH,CAAC;AAEM,KAAK,UAAU,cAAc,CAClC,QAAgB,EAChB,WAAwB,EACxB,QAAkB;IAElB,MAAM,MAAM,GAAG,WAAW,CAAC,WAAW,CAAC,CAAA;IAEvC,sBAAsB;IACtB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC,CAAA;IACxD,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAA,2BAAc,EAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;IAC3E,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QACnB,OAAO,CAAC,KAAK,CAAC,eAAK,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAA;QAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAA;IAElD,cAAc;IACd,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC,CAAA;IAC5D,MAAM,IAAI,GAAG,gBAAgB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;IACpD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAA,2BAAc,EAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;IAC7D,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAA;IACjF,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAA;AACxD,CAAC;AAEM,KAAK,UAAU,eAAe,CACnC,QAAgB,EAChB,WAAwB,EACxB,QAAkB,EAClB,OAA6B;IAE7B,MAAM,MAAM,GAAG,WAAW,CAAC,WAAW,CAAC,CAAA;IAEvC,sBAAsB;IACtB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC,CAAA;IACxD,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAA,2BAAc,EAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;IAC3E,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QACnB,OAAO,CAAC,KAAK,CAAC,eAAK,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAA;QAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAA;IAElD,6BAA6B;IAC7B,MAAM,MAAM,GAAG;QACb;YACE,GAAG,EAAE,CAAC;YACN,KAAK,EAAE,mBAAmB;YAC1B,OAAO,EAAE,CAAC,oBAAoB,EAAE,4BAA4B,CAAC;YAC7D,OAAO,EAAE,IAAI;SACd;QACD;YACE,GAAG,EAAE,CAAC;YACN,KAAK,EAAE,gBAAgB;YACvB,OAAO,EAAE,CAAC,+BAA+B,EAAE,4BAA4B,EAAE,4BAA4B,CAAC;YACtG,OAAO,EAAE,IAAI;SACd;QACD;YACE,GAAG,EAAE,CAAC;YACN,KAAK,EAAE,YAAY;YACnB,OAAO,EAAE,EAAE;YACX,OAAO,EAAE,KAAK;SACf;KACF,CAAA;IAED,MAAM,MAAM,GAAkB;QAC5B,eAAe,EAAE,EAAE;QACnB,UAAU,EAAE,IAAI;QAChB,OAAO,EAAE,IAAI;KACd,CAAA;IAED,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,KAAK,CAAA;IAE3C,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAA;QACvC,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,IAAI,CAAC,GAAG,OAAO,IAAI,CAAC,KAAK,MAAM,CAAC,CAAC,CAAA;QAEvE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,QAAQ;gBACnB,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC;gBAClE,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;YAErE,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAA,2BAAc,EAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;gBAC7D,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;oBACf,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,KAAK,UAAU,CAAC,CAAA;gBAC5D,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;YACtE,CAAC;YAED,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACrC,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC,CAAA;QAC5D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAA;YAC5B,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC,CAAA;gBACpD,MAAM,GAAG,CAAA;YACX,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,GAAG,iBAAiB,YAAY,YAAY,CAAC,CAAC,CAAA;YACnF,MAAM,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC,CAAA;QAChE,CAAC;IACH,CAAC;IAED,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,mCAAmC;QACnC,MAAM,CAAC,OAAO,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IACzD,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/infra/types.d.ts

@@ -0,0 +1,69 @@
+import { z } from 'zod';
+declare const WorkerSchema: z.ZodObject<{
+    name: z.ZodString;
+    dockerfile: z.ZodString;
+}, z.core.$strip>;
+export declare const AppSchema: z.ZodObject<{
+    name: z.ZodString;
+    technology: z.ZodEnum<{
+        nest: "nest";
+        react: "react";
+    }>;
+    dockerfile: z.ZodString;
+    health_check_path: z.ZodString;
+    domain: z.ZodString;
+    port: z.ZodNumber;
+    branch: z.ZodDefault<z.ZodString>;
+    template_repo_branch: z.ZodDefault<z.ZodString>;
+    postgres: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    redis: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    variables: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
+    build_env: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
+    workers: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        dockerfile: z.ZodString;
+    }, z.core.$strip>>>>;
+    cpu_units: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    memory_units: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    db_instance_type: z.ZodOptional<z.ZodString>;
+    db_allocated_storage: z.ZodOptional<z.ZodNumber>;
+    redis_instance_type: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const InfraConfigSchema: z.ZodObject<{
+    name: z.ZodString;
+    deployment: z.ZodLiteral<"ecs">;
+    ssl: z.ZodString;
+    apps: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        technology: z.ZodEnum<{
+            nest: "nest";
+            react: "react";
+        }>;
+        dockerfile: z.ZodString;
+        health_check_path: z.ZodString;
+        domain: z.ZodString;
+        port: z.ZodNumber;
+        branch: z.ZodDefault<z.ZodString>;
+        template_repo_branch: z.ZodDefault<z.ZodString>;
+        postgres: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        redis: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        variables: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
+        build_env: z.ZodDefault<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>>;
+        workers: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            dockerfile: z.ZodString;
+        }, z.core.$strip>>>>;
+        cpu_units: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        memory_units: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        db_instance_type: z.ZodOptional<z.ZodString>;
+        db_allocated_storage: z.ZodOptional<z.ZodNumber>;
+        redis_instance_type: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type AppConfig = z.infer<typeof AppSchema>;
+export type InfraConfig = z.infer<typeof InfraConfigSchema>;
+export { WorkerSchema };
+export declare const REQUIRED_CREDENTIAL_KEYS: readonly ["AWS_ACCESS_KEY_ID", "AWS_SECRET_ACCESS_KEY", "AWS_REGION", "GITHUB_TOKEN", "GITHUB_USERNAME", "GITHUB_ORGANIZATION"];
+export type CredentialKey = typeof REQUIRED_CREDENTIAL_KEYS[number];
+export type Credentials = Record<CredentialKey, string>;
+//# sourceMappingURL=types.d.ts.map

package/dist/infra/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/infra/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,QAAA,MAAM,YAAY;;;iBAGhB,CAAA;AAEF,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;iBAmBpB,CAAA;AAEF,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAK5B,CAAA;AAEF,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAA;AACjD,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAA;AAC3D,OAAO,EAAE,YAAY,EAAE,CAAA;AAEvB,eAAO,MAAM,wBAAwB,iIAO3B,CAAA;AAEV,MAAM,MAAM,aAAa,GAAG,OAAO,wBAAwB,CAAC,MAAM,CAAC,CAAA;AACnE,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,CAAA"}

package/dist/infra/types.js

@@ -0,0 +1,44 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.REQUIRED_CREDENTIAL_KEYS = exports.WorkerSchema = exports.InfraConfigSchema = exports.AppSchema = void 0;
+const zod_1 = require("zod");
+const WorkerSchema = zod_1.z.object({
+    name: zod_1.z.string().min(1),
+    dockerfile: zod_1.z.string().min(1),
+});
+exports.WorkerSchema = WorkerSchema;
+exports.AppSchema = zod_1.z.object({
+    name: zod_1.z.string().min(1),
+    technology: zod_1.z.enum(['nest', 'react']),
+    dockerfile: zod_1.z.string().min(1),
+    health_check_path: zod_1.z.string().min(1),
+    domain: zod_1.z.string().min(1),
+    port: zod_1.z.number().int().positive(),
+    branch: zod_1.z.string().default('main'),
+    template_repo_branch: zod_1.z.string().default('main'),
+    postgres: zod_1.z.boolean().optional().default(false),
+    redis: zod_1.z.boolean().optional().default(false),
+    variables: zod_1.z.record(zod_1.z.string(), zod_1.z.string()).optional().default({}),
+    build_env: zod_1.z.record(zod_1.z.string(), zod_1.z.string()).optional().default({}),
+    workers: zod_1.z.array(WorkerSchema).optional().default([]),
+    cpu_units: zod_1.z.number().int().positive().optional().default(1024),
+    memory_units: zod_1.z.number().int().positive().optional().default(2048),
+    db_instance_type: zod_1.z.string().optional(),
+    db_allocated_storage: zod_1.z.number().int().positive().optional(),
+    redis_instance_type: zod_1.z.string().optional(),
+});
+exports.InfraConfigSchema = zod_1.z.object({
+    name: zod_1.z.string().min(1),
+    deployment: zod_1.z.literal('ecs'),
+    ssl: zod_1.z.string().min(1),
+    apps: zod_1.z.array(exports.AppSchema).min(1),
+});
+exports.REQUIRED_CREDENTIAL_KEYS = [
+    'AWS_ACCESS_KEY_ID',
+    'AWS_SECRET_ACCESS_KEY',
+    'AWS_REGION',
+    'GITHUB_TOKEN',
+    'GITHUB_USERNAME',
+    'GITHUB_ORGANIZATION',
+];
+//# sourceMappingURL=types.js.map

package/dist/infra/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/infra/types.ts"],"names":[],"mappings":";;;AAAA,6BAAuB;AAEvB,MAAM,YAAY,GAAG,OAAC,CAAC,MAAM,CAAC;IAC5B,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC9B,CAAC,CAAA;AAgCO,oCAAY;AA9BR,QAAA,SAAS,GAAG,OAAC,CAAC,MAAM,CAAC;IAChC,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,UAAU,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,iBAAiB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACjC,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;IAClC,oBAAoB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;IAChD,QAAQ,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC/C,KAAK,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC5C,SAAS,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAClE,SAAS,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAClE,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACrD,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC/D,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClE,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,oBAAoB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5D,mBAAmB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC3C,CAAC,CAAA;AAEW,QAAA,iBAAiB,GAAG,OAAC,CAAC,MAAM,CAAC;IACxC,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,UAAU,EAAE,OAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAC5B,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,IAAI,EAAE,OAAC,CAAC,KAAK,CAAC,iBAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CAChC,CAAC,CAAA;AAMW,QAAA,wBAAwB,GAAG;IACtC,mBAAmB;IACnB,uBAAuB;IACvB,YAAY;IACZ,cAAc;IACd,iBAAiB;IACjB,qBAAqB;CACb,CAAA"}