@webiny/project-aws 6.0.0-rc.7 → 6.1.0-beta.0

package/project.d.ts

@@ -1,139 +1,33 @@
 export declare const Project: {
     Id: import("@webiny/project/defineExtension/defineExtension.js").ExtensionComponent<import("zod").ZodObject<{
-        id: import("zod").ZodEffects<import("zod").ZodString, string, string>;
-    }, "strip", import("zod").ZodTypeAny, {
-        id: string;
-    }, {
-        id: string;
-    }>>;
+        id: import("zod").ZodString;
+    }, import("zod/v4/core").$strip>>;
     Telemetry: import("@webiny/project/defineExtension/defineExtension.js").ExtensionComponent<import("zod").ZodObject<{
         enabled: import("zod").ZodDefault<import("zod").ZodBoolean>;
-    }, "strip", import("zod").ZodTypeAny, {
-        enabled: boolean;
-    }, {
-        enabled?: boolean | undefined;
-    }>>;
+    }, import("zod/v4/core").$strip>>;
     AutoInstall: import("@webiny/project/defineExtension/defineExtension.js").ExtensionComponent<import("zod").ZodObject<{
         adminUser: import("zod").ZodObject<{
             firstName: import("zod").ZodString;
             lastName: import("zod").ZodString;
             email: import("zod").ZodString;
             password: import("zod").ZodString;
-        }, "strip", import("zod").ZodTypeAny, {
-            firstName: string;
-            lastName: string;
-            email: string;
-            password: string;
-        }, {
-            firstName: string;
-            lastName: string;
-            email: string;
-            password: string;
-        }>;
-    }, "strip", import("zod").ZodTypeAny, {
-        adminUser: {
-            firstName: string;
-            lastName: string;
-            email: string;
-            password: string;
-        };
-    }, {
-        adminUser: {
-            firstName: string;
-            lastName: string;
-            email: string;
-            password: string;
-        };
-    }>>;
+        }, import("zod/v4/core").$strip>;
+    }, import("zod/v4/core").$strip>>;
     FeatureFlags: import("@webiny/project/defineExtension/defineExtension.js").ExtensionComponent<import("zod").ZodObject<{
         features: import("zod").ZodObject<{
             multiTenancy: import("zod").ZodOptional<import("zod").ZodBoolean>;
             advancedPublishingWorkflow: import("zod").ZodOptional<import("zod").ZodBoolean>;
-            advancedAccessControlLayer: import("zod").ZodOptional<import("zod").ZodUnion<[import("zod").ZodBoolean, import("zod").ZodObject<{
+            advancedAccessControlLayer: import("zod").ZodOptional<import("zod").ZodUnion<readonly [import("zod").ZodBoolean, import("zod").ZodObject<{
                 teams: import("zod").ZodOptional<import("zod").ZodBoolean>;
                 privateFiles: import("zod").ZodOptional<import("zod").ZodBoolean>;
                 folderLevelPermissions: import("zod").ZodOptional<import("zod").ZodBoolean>;
                 hcmsFieldPermissions: import("zod").ZodOptional<import("zod").ZodBoolean>;
-            }, "strip", import("zod").ZodTypeAny, {
-                teams?: boolean | undefined;
-                privateFiles?: boolean | undefined;
-                folderLevelPermissions?: boolean | undefined;
-                hcmsFieldPermissions?: boolean | undefined;
-            }, {
-                teams?: boolean | undefined;
-                privateFiles?: boolean | undefined;
-                folderLevelPermissions?: boolean | undefined;
-                hcmsFieldPermissions?: boolean | undefined;
-            }>]>>;
+            }, import("zod/v4/core").$strip>]>>;
             auditLogs: import("zod").ZodOptional<import("zod").ZodBoolean>;
             recordLocking: import("zod").ZodOptional<import("zod").ZodBoolean>;
             fileManager: import("zod").ZodOptional<import("zod").ZodObject<{
                 threatDetection: import("zod").ZodOptional<import("zod").ZodBoolean>;
-            }, "strip", import("zod").ZodTypeAny, {
-                threatDetection?: boolean | undefined;
-            }, {
-                threatDetection?: boolean | undefined;
-            }>>;
-        }, "strip", import("zod").ZodTypeAny, {
-            multiTenancy?: boolean | undefined;
-            advancedPublishingWorkflow?: boolean | undefined;
-            advancedAccessControlLayer?: boolean | {
-                teams?: boolean | undefined;
-                privateFiles?: boolean | undefined;
-                folderLevelPermissions?: boolean | undefined;
-                hcmsFieldPermissions?: boolean | undefined;
-            } | undefined;
-            auditLogs?: boolean | undefined;
-            recordLocking?: boolean | undefined;
-            fileManager?: {
-                threatDetection?: boolean | undefined;
-            } | undefined;
-        }, {
-            multiTenancy?: boolean | undefined;
-            advancedPublishingWorkflow?: boolean | undefined;
-            advancedAccessControlLayer?: boolean | {
-                teams?: boolean | undefined;
-                privateFiles?: boolean | undefined;
-                folderLevelPermissions?: boolean | undefined;
-                hcmsFieldPermissions?: boolean | undefined;
-            } | undefined;
-            auditLogs?: boolean | undefined;
-            recordLocking?: boolean | undefined;
-            fileManager?: {
-                threatDetection?: boolean | undefined;
-            } | undefined;
-        }>;
-    }, "strip", import("zod").ZodTypeAny, {
-        features: {
-            multiTenancy?: boolean | undefined;
-            advancedPublishingWorkflow?: boolean | undefined;
-            advancedAccessControlLayer?: boolean | {
-                teams?: boolean | undefined;
-                privateFiles?: boolean | undefined;
-                folderLevelPermissions?: boolean | undefined;
-                hcmsFieldPermissions?: boolean | undefined;
-            } | undefined;
-            auditLogs?: boolean | undefined;
-            recordLocking?: boolean | undefined;
-            fileManager?: {
-                threatDetection?: boolean | undefined;
-            } | undefined;
-        };
-    }, {
-        features: {
-            multiTenancy?: boolean | undefined;
-            advancedPublishingWorkflow?: boolean | undefined;
-            advancedAccessControlLayer?: boolean | {
-                teams?: boolean | undefined;
-                privateFiles?: boolean | undefined;
-                folderLevelPermissions?: boolean | undefined;
-                hcmsFieldPermissions?: boolean | undefined;
-            } | undefined;
-            auditLogs?: boolean | undefined;
-            recordLocking?: boolean | undefined;
-            fileManager?: {
-                threatDetection?: boolean | undefined;
-            } | undefined;
-        };
-    }>>;
+            }, import("zod/v4/core").$strip>>;
+        }, import("zod/v4/core").$strip>;
+    }, import("zod/v4/core").$strip>>;
 };

package/pulumi/apps/api/ApiOutput.d.ts

@@ -12,7 +12,6 @@ export declare const ApiOutput: import("@webiny/pulumi").PulumiAppModuleDefiniti
     region: string;
     websocketApiId: string | number | boolean | string[] | number[] | undefined;
     websocketApiUrl: string;
-    migrationLambdaArn: string;
     graphqlLambdaName: string | number | boolean | string[] | number[] | undefined;
     backgroundTaskLambdaArn: string | number | boolean | string[] | number[] | undefined;
     backgroundTaskStepFunctionArn: string | number | boolean | string[] | number[] | undefined;

package/pulumi/apps/api/ApiOutput.js

@@ -20,7 +20,6 @@ export const ApiOutput = createAppModule({
         region: output["region"],
         websocketApiId: output["websocketApiId"],
         websocketApiUrl: output["websocketApiUrl"],
-        migrationLambdaArn: output["migrationLambdaArn"],
         graphqlLambdaName: output["graphqlLambdaName"],
         backgroundTaskLambdaArn: output["backgroundTaskLambdaArn"],
         backgroundTaskStepFunctionArn: output["backgroundTaskStepFunctionArn"],

package/pulumi/apps/api/ApiOutput.js.map

@@ -1 +1 @@
-{"version":3,"names":["createAppModule","getStackOutput","ApiOutput","name","config","app","addHandler","output","Error","apiDomain","apiUrl","graphqlLambdaRole","graphqlLambdaRoleName","cognitoAppClientId","cognitoUserPoolId","cognitoUserPoolPasswordPolicy","dynamoDbTable","region","websocketApiId","websocketApiUrl","migrationLambdaArn","graphqlLambdaName","backgroundTaskLambdaArn","backgroundTaskStepFunctionArn","fileManagerManageLambdaArn","fileManagerManageLambdaRole","fileManagerManageLambdaRoleName","fileManagerDownloadLambdaArn"],"sources":["ApiOutput.ts"],"sourcesContent":["import type { PulumiAppModule } from \"@webiny/pulumi\";\nimport { createAppModule } from \"@webiny/pulumi\";\nimport { getStackOutput } from \"@webiny/project\";\nimport { type IDefaultStackOutput } from \"~/pulumi/types.js\";\n\nexport type ApiOutput = PulumiAppModule<typeof ApiOutput>;\n\nexport const ApiOutput = createAppModule({\n    name: \"ApiOutput\",\n    config(app) {\n        return app.addHandler(async () => {\n            const output = await getStackOutput<IDefaultStackOutput>(\"api\");\n\n            if (!output) {\n                throw new Error(\"API application is not deployed.\");\n            }\n\n            return {\n                apiDomain: output[\"apiDomain\"],\n                apiUrl: output[\"apiUrl\"],\n                graphqlLambdaRole: output[\"graphqlLambdaRole\"],\n                graphqlLambdaRoleName: output[\"graphqlLambdaRoleName\"],\n                cognitoAppClientId: output[\"cognitoAppClientId\"],\n                cognitoUserPoolId: output[\"cognitoUserPoolId\"],\n                cognitoUserPoolPasswordPolicy: output[\"cognitoUserPoolPasswordPolicy\"],\n                dynamoDbTable: output[\"dynamoDbTable\"],\n                region: output[\"region\"],\n                websocketApiId: output[\"websocketApiId\"],\n                websocketApiUrl: output[\"websocketApiUrl\"],\n                migrationLambdaArn: output[\"migrationLambdaArn\"],\n                graphqlLambdaName: output[\"graphqlLambdaName\"],\n                backgroundTaskLambdaArn: output[\"backgroundTaskLambdaArn\"],\n                backgroundTaskStepFunctionArn: output[\"backgroundTaskStepFunctionArn\"],\n                fileManagerManageLambdaArn: output[\"fileManagerManageLambdaArn\"],\n                fileManagerManageLambdaRole: output[\"fileManagerManageLambdaRole\"],\n                fileManagerManageLambdaRoleName: output[\"fileManagerManageLambdaRoleName\"],\n                fileManagerDownloadLambdaArn: output[\"fileManagerDownloadLambdaArn\"]\n            };\n        });\n    }\n});\n"],"mappings":"AACA,SAASA,eAAe,QAAQ,gBAAgB;AAChD,SAASC,cAAc,QAAQ,iBAAiB;AAKhD,OAAO,MAAMC,SAAS,GAAGF,eAAe,CAAC;EACrCG,IAAI,EAAE,WAAW;EACjBC,MAAMA,CAACC,GAAG,EAAE;IACR,OAAOA,GAAG,CAACC,UAAU,CAAC,YAAY;MAC9B,MAAMC,MAAM,GAAG,MAAMN,cAAc,CAAsB,KAAK,CAAC;MAE/D,IAAI,CAACM,MAAM,EAAE;QACT,MAAM,IAAIC,KAAK,CAAC,kCAAkC,CAAC;MACvD;MAEA,OAAO;QACHC,SAAS,EAAEF,MAAM,CAAC,WAAW,CAAC;QAC9BG,MAAM,EAAEH,MAAM,CAAC,QAAQ,CAAC;QACxBI,iBAAiB,EAAEJ,MAAM,CAAC,mBAAmB,CAAC;QAC9CK,qBAAqB,EAAEL,MAAM,CAAC,uBAAuB,CAAC;QACtDM,kBAAkB,EAAEN,MAAM,CAAC,oBAAoB,CAAC;QAChDO,iBAAiB,EAAEP,MAAM,CAAC,mBAAmB,CAAC;QAC9CQ,6BAA6B,EAAER,MAAM,CAAC,+BAA+B,CAAC;QACtES,aAAa,EAAET,MAAM,CAAC,eAAe,CAAC;QACtCU,MAAM,EAAEV,MAAM,CAAC,QAAQ,CAAC;QACxBW,cAAc,EAAEX,MAAM,CAAC,gBAAgB,CAAC;QACxCY,eAAe,EAAEZ,MAAM,CAAC,iBAAiB,CAAC;QAC1Ca,kBAAkB,EAAEb,MAAM,CAAC,oBAAoB,CAAC;QAChDc,iBAAiB,EAAEd,MAAM,CAAC,mBAAmB,CAAC;QAC9Ce,uBAAuB,EAAEf,MAAM,CAAC,yBAAyB,CAAC;QAC1DgB,6BAA6B,EAAEhB,MAAM,CAAC,+BAA+B,CAAC;QACtEiB,0BAA0B,EAAEjB,MAAM,CAAC,4BAA4B,CAAC;QAChEkB,2BAA2B,EAAElB,MAAM,CAAC,6BAA6B,CAAC;QAClEmB,+BAA+B,EAAEnB,MAAM,CAAC,iCAAiC,CAAC;QAC1EoB,4BAA4B,EAAEpB,MAAM,CAAC,8BAA8B;MACvE,CAAC;IACL,CAAC,CAAC;EACN;AACJ,CAAC,CAAC","ignoreList":[]}
+{"version":3,"names":["createAppModule","getStackOutput","ApiOutput","name","config","app","addHandler","output","Error","apiDomain","apiUrl","graphqlLambdaRole","graphqlLambdaRoleName","cognitoAppClientId","cognitoUserPoolId","cognitoUserPoolPasswordPolicy","dynamoDbTable","region","websocketApiId","websocketApiUrl","graphqlLambdaName","backgroundTaskLambdaArn","backgroundTaskStepFunctionArn","fileManagerManageLambdaArn","fileManagerManageLambdaRole","fileManagerManageLambdaRoleName","fileManagerDownloadLambdaArn"],"sources":["ApiOutput.ts"],"sourcesContent":["import type { PulumiAppModule } from \"@webiny/pulumi\";\nimport { createAppModule } from \"@webiny/pulumi\";\nimport { getStackOutput } from \"@webiny/project\";\nimport { type IDefaultStackOutput } from \"~/pulumi/types.js\";\n\nexport type ApiOutput = PulumiAppModule<typeof ApiOutput>;\n\nexport const ApiOutput = createAppModule({\n    name: \"ApiOutput\",\n    config(app) {\n        return app.addHandler(async () => {\n            const output = await getStackOutput<IDefaultStackOutput>(\"api\");\n\n            if (!output) {\n                throw new Error(\"API application is not deployed.\");\n            }\n\n            return {\n                apiDomain: output[\"apiDomain\"],\n                apiUrl: output[\"apiUrl\"],\n                graphqlLambdaRole: output[\"graphqlLambdaRole\"],\n                graphqlLambdaRoleName: output[\"graphqlLambdaRoleName\"],\n                cognitoAppClientId: output[\"cognitoAppClientId\"],\n                cognitoUserPoolId: output[\"cognitoUserPoolId\"],\n                cognitoUserPoolPasswordPolicy: output[\"cognitoUserPoolPasswordPolicy\"],\n                dynamoDbTable: output[\"dynamoDbTable\"],\n                region: output[\"region\"],\n                websocketApiId: output[\"websocketApiId\"],\n                websocketApiUrl: output[\"websocketApiUrl\"],\n                graphqlLambdaName: output[\"graphqlLambdaName\"],\n                backgroundTaskLambdaArn: output[\"backgroundTaskLambdaArn\"],\n                backgroundTaskStepFunctionArn: output[\"backgroundTaskStepFunctionArn\"],\n                fileManagerManageLambdaArn: output[\"fileManagerManageLambdaArn\"],\n                fileManagerManageLambdaRole: output[\"fileManagerManageLambdaRole\"],\n                fileManagerManageLambdaRoleName: output[\"fileManagerManageLambdaRoleName\"],\n                fileManagerDownloadLambdaArn: output[\"fileManagerDownloadLambdaArn\"]\n            };\n        });\n    }\n});\n"],"mappings":"AACA,SAASA,eAAe,QAAQ,gBAAgB;AAChD,SAASC,cAAc,QAAQ,iBAAiB;AAKhD,OAAO,MAAMC,SAAS,GAAGF,eAAe,CAAC;EACrCG,IAAI,EAAE,WAAW;EACjBC,MAAMA,CAACC,GAAG,EAAE;IACR,OAAOA,GAAG,CAACC,UAAU,CAAC,YAAY;MAC9B,MAAMC,MAAM,GAAG,MAAMN,cAAc,CAAsB,KAAK,CAAC;MAE/D,IAAI,CAACM,MAAM,EAAE;QACT,MAAM,IAAIC,KAAK,CAAC,kCAAkC,CAAC;MACvD;MAEA,OAAO;QACHC,SAAS,EAAEF,MAAM,CAAC,WAAW,CAAC;QAC9BG,MAAM,EAAEH,MAAM,CAAC,QAAQ,CAAC;QACxBI,iBAAiB,EAAEJ,MAAM,CAAC,mBAAmB,CAAC;QAC9CK,qBAAqB,EAAEL,MAAM,CAAC,uBAAuB,CAAC;QACtDM,kBAAkB,EAAEN,MAAM,CAAC,oBAAoB,CAAC;QAChDO,iBAAiB,EAAEP,MAAM,CAAC,mBAAmB,CAAC;QAC9CQ,6BAA6B,EAAER,MAAM,CAAC,+BAA+B,CAAC;QACtES,aAAa,EAAET,MAAM,CAAC,eAAe,CAAC;QACtCU,MAAM,EAAEV,MAAM,CAAC,QAAQ,CAAC;QACxBW,cAAc,EAAEX,MAAM,CAAC,gBAAgB,CAAC;QACxCY,eAAe,EAAEZ,MAAM,CAAC,iBAAiB,CAAC;QAC1Ca,iBAAiB,EAAEb,MAAM,CAAC,mBAAmB,CAAC;QAC9Cc,uBAAuB,EAAEd,MAAM,CAAC,yBAAyB,CAAC;QAC1De,6BAA6B,EAAEf,MAAM,CAAC,+BAA+B,CAAC;QACtEgB,0BAA0B,EAAEhB,MAAM,CAAC,4BAA4B,CAAC;QAChEiB,2BAA2B,EAAEjB,MAAM,CAAC,6BAA6B,CAAC;QAClEkB,+BAA+B,EAAElB,MAAM,CAAC,iCAAiC,CAAC;QAC1EmB,4BAA4B,EAAEnB,MAAM,CAAC,8BAA8B;MACvE,CAAC;IACL,CAAC,CAAC;EACN;AACJ,CAAC,CAAC","ignoreList":[]}

package/pulumi/apps/api/createApiPulumiApp.d.ts

@@ -37,9 +37,6 @@ export declare const createApiPulumiApp: () => PulumiApp<{
         websocketApiUrl: import("@pulumi/pulumi").Output<string>;
     };
     cloudfront: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/cloudfront/distribution.js").Distribution>;
-    migration: {
-        function: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/lambda/function.js").Function>;
-    };
     backgroundTask: {
         backgroundTask: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/lambda/function.js").Function>;
         stepFunction: import("@webiny/pulumi").PulumiAppResource<typeof import("@pulumi/aws/sfn/stateMachine.js").StateMachine>;

package/pulumi/apps/api/createApiPulumiApp.js

@@ -1,6 +1,6 @@
 import * as aws from "@pulumi/aws";
 import { createPulumiApp, isResourceOfType } from "@webiny/pulumi";
-import { ApiBackgroundTask, ApiCloudfront, ApiFileManager, ApiGateway, ApiGraphql, ApiMigration, ApiWebsocket, CoreOutput, VpcConfig } from "../index.js";
+import { ApiBackgroundTask, ApiCloudfront, ApiFileManager, ApiGateway, ApiGraphql, ApiWebsocket, CoreOutput, VpcConfig } from "../index.js";
 import { addDomainsUrlsOutputs, withCommonLambdaEnvVariables, withServiceManifest } from "../../utils/index.js";
 import { getEnvVariableAwsRegion } from "../../env/awsRegion.js";
 // import { attachSyncSystem } from "../syncSystem/api/index.js";
@@ -184,7 +184,6 @@ export const createApiPulumiApp = () => {
       });
       const cloudfront = app.addModule(ApiCloudfront);
       const backgroundTask = app.addModule(ApiBackgroundTask);
-      const migration = app.addModule(ApiMigration);
       const scheduler = app.addModule(ApiScheduler);
 
       // const domains = app.getParam(projectAppParams.domains);
@@ -200,7 +199,6 @@ export const createApiPulumiApp = () => {
         cognitoUserPoolPasswordPolicy: core.cognitoUserPoolPasswordPolicy,
         dynamoDbTable: core.primaryDynamodbTableName,
         auditLogsDynamoDbTable: core.auditLogsDynamodbTableName,
-        migrationLambdaArn: migration.function.output.arn,
         graphqlLambdaName: graphql.functions.graphql.output.name,
         graphqlLambdaRole: graphql.role.output.arn,
         graphqlLambdaRoleName: graphql.role.output.name,
@@ -247,7 +245,6 @@ export const createApiPulumiApp = () => {
         apiGateway,
         websocket,
         cloudfront,
-        migration,
         backgroundTask,
         scheduler
       };

package/pulumi/apps/api/createApiPulumiApp.js.map

@@ -1 +1 @@
-{"version":3,"names":["aws","createPulumiApp","isResourceOfType","ApiBackgroundTask","ApiCloudfront","ApiFileManager","ApiGateway","ApiGraphql","ApiMigration","ApiWebsocket","CoreOutput","VpcConfig","addDomainsUrlsOutputs","withCommonLambdaEnvVariables","withServiceManifest","getEnvVariableAwsRegion","applyAwsResourceTags","getAwsAccountId","ApiScheduler","getProjectSdk","getVpcConfigFromExtension","getOsConfigFromExtension","handleGuardDutyEvents","ApiPulumi","createApiPulumiApp","baseApp","name","path","program","app","sdk","projectConfig","getProjectConfig","pulumiResourceNamePrefix","getPulumiResourceNamePrefix","vpcExtensionsConfig","openSearchExtensionConfig","searchEngineParams","params","domainName","process","env","AWS_OS_DOMAIN_NAME","indexPrefix","OPENSEARCH_INDEX_PREFIX","sharedIndexes","OPENSEARCH_SHARED_INDEXES","onResource","resource","startsWith","addHandler","featureFlags","getFeatureFlags","usingAdvancedVpcParams","isFileManagerThreatDetectionEnabled","addResource","useExistingVpc","lambdaFunctionsVpcConfig","Error","lambda","Function","canUseVpc","meta","config","vpcConfig","iam","Role","isLambdaFunctionRole","RolePolicyAttachment","role","output","policyArn","ManagedPolicy","AWSLambdaVPCAccessExecutionRole","pulumiHandlers","getContainer","resolve","execute","isProduction","core","addModule","vpcEnabled","enabled","graphql","COGNITO_REGION","COGNITO_USER_POOL_ID","cognitoUserPoolId","DB_TABLE","primaryDynamodbTableName","DB_TABLE_AUDIT_LOGS","auditLogsDynamodbTableName","DB_TABLE_OPENSEARCH","opensearchDynamodbTableName","OPENSEARCH_ENDPOINT","opensearchDomainEndpoint","S3_BUCKET","fileManagerBucketId","EVENT_BUS","eventBusArn","OKTA_ISSUER","websocket","fileManager","apiGateway","method","function","functions","arn","download","cloudfront","backgroundTask","migration","scheduler","addOutputs","awsAccountId","region","cognitoAppClientId","cognitoUserPoolPasswordPolicy","dynamoDbTable","auditLogsDynamoDbTable","migrationLambdaArn","graphqlLambdaName","graphqlLambdaRole","graphqlLambdaRoleName","backgroundTaskLambdaArn","backgroundTaskStepFunctionArn","stepFunction","fileManagerDownloadLambdaArn","websocketApiId","websocketApi","id","websocketApiUrl","schedulerLambdaInvokeRole","invokeRole","dynamoDbOpensearchTable","cloudfrontDistribution","map","distributionDomain","distributionUrl","usedDomain","usedUrl","addServiceManifest","manifest","bgTaskSfn","resources","distributionId","domain","apply","v","lambdaArn","roleArn"],"sources":["createApiPulumiApp.ts"],"sourcesContent":["import * as aws from \"@pulumi/aws\";\nimport { createPulumiApp, isResourceOfType, type PulumiApp } from \"@webiny/pulumi\";\nimport {\n    ApiBackgroundTask,\n    ApiCloudfront,\n    ApiFileManager,\n    ApiGateway,\n    ApiGraphql,\n    ApiMigration,\n    ApiWebsocket,\n    CoreOutput,\n    VpcConfig\n} from \"~/pulumi/apps/index.js\";\nimport {\n    addDomainsUrlsOutputs,\n    withCommonLambdaEnvVariables,\n    withServiceManifest\n} from \"~/pulumi/utils/index.js\";\nimport { getEnvVariableAwsRegion } from \"~/pulumi/env/awsRegion.js\";\n// import { attachSyncSystem } from \"../syncSystem/api/index.js\";\nimport { applyAwsResourceTags, getAwsAccountId } from \"~/pulumi/apps/awsUtils.js\";\nimport type { WithServiceManifest } from \"~/pulumi/utils/withServiceManifest.js\";\nimport { ApiScheduler } from \"~/pulumi/apps/api/ApiScheduler.js\";\nimport { getProjectSdk } from \"@webiny/project\";\nimport { getVpcConfigFromExtension } from \"~/pulumi/apps/extensions/getVpcConfigFromExtension.js\";\nimport { getOsConfigFromExtension } from \"~/pulumi/apps/extensions/getOsConfigFromExtension.js\";\nimport { handleGuardDutyEvents } from \"./handleGuardDutyEvents.js\";\nimport { ApiPulumi } from \"@webiny/project/abstractions/index.js\";\n\nexport type ApiPulumiApp = ReturnType<typeof createApiPulumiApp>;\n\nexport const createApiPulumiApp = () => {\n    const baseApp = createPulumiApp({\n        name: \"api\",\n        path: \"apps/api\",\n        program: async (app: PulumiApp & WithServiceManifest) => {\n            const sdk = await getProjectSdk();\n            const projectConfig = await sdk.getProjectConfig();\n\n            const pulumiResourceNamePrefix = await sdk.getPulumiResourceNamePrefix();\n            const vpcExtensionsConfig = getVpcConfigFromExtension(projectConfig);\n            const openSearchExtensionConfig = getOsConfigFromExtension(projectConfig);\n\n            let searchEngineParams: typeof openSearchExtensionConfig | null = null;\n\n            if (openSearchExtensionConfig) {\n                searchEngineParams = openSearchExtensionConfig;\n            }\n\n            if (searchEngineParams) {\n                const params = searchEngineParams;\n                if (typeof params === \"object\") {\n                    if (params.domainName) {\n                        process.env.AWS_OS_DOMAIN_NAME = params.domainName;\n                    }\n\n                    if (params.indexPrefix) {\n                        process.env.OPENSEARCH_INDEX_PREFIX = params.indexPrefix;\n                    }\n\n                    if (params.sharedIndexes) {\n                        process.env.OPENSEARCH_SHARED_INDEXES = \"true\";\n                    }\n                }\n            }\n\n            if (pulumiResourceNamePrefix) {\n                app.onResource(resource => {\n                    if (!resource.name.startsWith(pulumiResourceNamePrefix)) {\n                        resource.name = `${pulumiResourceNamePrefix}${resource.name}`;\n                    }\n                });\n            }\n\n            // <-------------------- Enterprise start -------------------->\n            app.addHandler(async () => {\n                const featureFlags = await sdk.getFeatureFlags();\n\n                const usingAdvancedVpcParams =\n                    vpcExtensionsConfig && typeof vpcExtensionsConfig !== \"boolean\";\n\n                if (featureFlags.isFileManagerThreatDetectionEnabled()) {\n                    handleGuardDutyEvents(app as ApiPulumiApp);\n                }\n\n                // Not using advanced VPC params? Then immediately exit.\n                if (usingAdvancedVpcParams) {\n                    const { onResource, addResource } = app;\n                    const { useExistingVpc } = vpcExtensionsConfig;\n\n                    // 1. We first deal with \"existing VPC\" setup.\n                    if (useExistingVpc) {\n                        if (!useExistingVpc.lambdaFunctionsVpcConfig) {\n                            throw new Error(\n                                \"Cannot specify `useExistingVpc` parameter because the `lambdaFunctionsVpcConfig` parameter wasn't provided.\"\n                            );\n                        }\n\n                        onResource(resource => {\n                            if (isResourceOfType(resource, aws.lambda.Function)) {\n                                const canUseVpc = resource.meta.canUseVpc !== false;\n                                if (canUseVpc) {\n                                    resource.config.vpcConfig(\n                                        useExistingVpc!.lambdaFunctionsVpcConfig\n                                    );\n                                }\n                            }\n\n                            if (isResourceOfType(resource, aws.iam.Role)) {\n                                if (resource.meta.isLambdaFunctionRole) {\n                                    addResource(aws.iam.RolePolicyAttachment, {\n                                        name: `${resource.name}-vpc-access-execution-role`,\n                                        config: {\n                                            role: resource.output.name,\n                                            policyArn:\n                                                aws.iam.ManagedPolicy\n                                                    .AWSLambdaVPCAccessExecutionRole\n                                        }\n                                    });\n                                }\n                            }\n                        });\n                    }\n                }\n            });\n            // <-------------------- Enterprise end -------------------->\n\n            // Overrides must be applied via a handler, registered at the very start of the program.\n            // By doing this, we're ensuring user's adjustments are not applied to late.\n            const pulumiHandlers = sdk.getContainer().resolve(ApiPulumi);\n\n            app.addHandler(() => {\n                return pulumiHandlers.execute(app as unknown as ApiPulumiApp);\n            });\n\n            const isProduction = app.env.isProduction;\n\n            // Register core output as a module available to all the other modules\n            const core = app.addModule(CoreOutput);\n\n            // Register VPC config module to be available to other modules.\n            const vpcEnabled =\n                vpcExtensionsConfig === true ||\n                typeof vpcExtensionsConfig === \"object\" ||\n                isProduction;\n\n            app.addModule(VpcConfig, { enabled: vpcEnabled });\n\n            const graphql = app.addModule(ApiGraphql, {\n                env: {\n                    COGNITO_REGION: getEnvVariableAwsRegion(),\n                    COGNITO_USER_POOL_ID: core.cognitoUserPoolId,\n                    DB_TABLE: core.primaryDynamodbTableName,\n                    DB_TABLE_AUDIT_LOGS: core.auditLogsDynamodbTableName,\n                    DB_TABLE_OPENSEARCH: core.opensearchDynamodbTableName,\n                    OPENSEARCH_ENDPOINT: core.opensearchDomainEndpoint,\n\n                    // Not required. Useful for testing purposes / ephemeral environments.\n                    // https://www.webiny.com/docs/key-topics/ci-cd/testing/slow-ephemeral-environments\n                    OPENSEARCH_INDEX_PREFIX: process.env.OPENSEARCH_INDEX_PREFIX,\n                    OPENSEARCH_SHARED_INDEXES: process.env.OPENSEARCH_SHARED_INDEXES,\n\n                    S3_BUCKET: core.fileManagerBucketId,\n                    EVENT_BUS: core.eventBusArn,\n                    // TODO: move to okta plugin\n                    OKTA_ISSUER: process.env[\"OKTA_ISSUER\"]\n                }\n            });\n\n            const websocket = app.addModule(ApiWebsocket);\n\n            const fileManager = app.addModule(ApiFileManager, {\n                env: {\n                    DB_TABLE: core.primaryDynamodbTableName,\n                    DB_TABLE_AUDIT_LOGS: core.auditLogsDynamodbTableName\n                }\n            });\n\n            const apiGateway = app.addModule(ApiGateway, {\n                \"graphql-post\": {\n                    path: \"/graphql\",\n                    method: \"POST\",\n                    function: graphql.functions.graphql.output.arn\n                },\n                \"graphql-options\": {\n                    path: \"/graphql\",\n                    method: \"OPTIONS\",\n                    function: graphql.functions.graphql.output.arn\n                },\n                \"files-any\": {\n                    path: \"/files/{path+}\",\n                    method: \"ANY\",\n                    function: fileManager.functions.download.output.arn\n                },\n                \"private-any\": {\n                    path: \"/private/{path+}\",\n                    method: \"ANY\",\n                    function: fileManager.functions.download.output.arn\n                },\n                \"cms-post\": {\n                    path: \"/cms/{key+}\",\n                    method: \"POST\",\n                    function: graphql.functions.graphql.output.arn\n                },\n                \"cms-options\": {\n                    path: \"/cms/{key+}\",\n                    method: \"OPTIONS\",\n                    function: graphql.functions.graphql.output.arn\n                },\n                \"redirects-get\": {\n                    path: \"/wb/redirects\",\n                    method: \"GET\",\n                    function: graphql.functions.graphql.output.arn\n                },\n                \"redirects-options\": {\n                    path: \"/wb/redirects\",\n                    method: \"OPTIONS\",\n                    function: graphql.functions.graphql.output.arn\n                },\n                \"files-catch-all\": {\n                    path: \"/{path+}\",\n                    method: \"ANY\",\n                    function: fileManager.functions.download.output.arn\n                }\n            });\n\n            const cloudfront = app.addModule(ApiCloudfront);\n            const backgroundTask = app.addModule(ApiBackgroundTask);\n            const migration = app.addModule(ApiMigration);\n            const scheduler = app.addModule(ApiScheduler);\n\n            // const domains = app.getParam(projectAppParams.domains);\n            // if (domains) {\n            //     applyCustomDomain(cloudfront, domains);\n            // }\n\n            app.addOutputs({\n                awsAccountId: getAwsAccountId(app),\n                region: aws.config.region,\n                cognitoUserPoolId: core.cognitoUserPoolId,\n                cognitoAppClientId: core.cognitoAppClientId,\n                cognitoUserPoolPasswordPolicy: core.cognitoUserPoolPasswordPolicy,\n                dynamoDbTable: core.primaryDynamodbTableName,\n                auditLogsDynamoDbTable: core.auditLogsDynamodbTableName,\n                migrationLambdaArn: migration.function.output.arn,\n                graphqlLambdaName: graphql.functions.graphql.output.name,\n                graphqlLambdaRole: graphql.role.output.arn,\n                graphqlLambdaRoleName: graphql.role.output.name,\n                backgroundTaskLambdaArn: backgroundTask.backgroundTask.output.arn,\n                backgroundTaskStepFunctionArn: backgroundTask.stepFunction.output.arn,\n                fileManagerDownloadLambdaArn: fileManager.functions.download.output.arn,\n                websocketApiId: websocket.websocketApi.output.id,\n                websocketApiUrl: websocket.websocketApiUrl,\n                schedulerLambdaInvokeRole: scheduler.invokeRole.output.arn\n            });\n\n            // Only add `dynamoDbOpensearchTable` output if using search engine (ES/OS).\n            if (searchEngineParams) {\n                app.addOutputs({\n                    dynamoDbOpensearchTable: core.opensearchDynamodbTableName\n                });\n            }\n\n            app.addHandler(() => {\n                addDomainsUrlsOutputs({\n                    app,\n                    cloudfrontDistribution: cloudfront,\n                    map: {\n                        distributionDomain: \"cloudfrontApiDomain\",\n                        distributionUrl: \"cloudfrontApiUrl\",\n                        usedDomain: \"apiDomain\",\n                        usedUrl: \"apiUrl\"\n                    }\n                });\n            });\n            // /**\n            //  * We need to attach the Sync System if it exists.\n            //  */\n            // await attachSyncSystem({\n            //     app,\n            //     core,\n            //     env: app.params.run.env\n            // });\n\n            // Applies internal and user-defined AWS tags.\n            await applyAwsResourceTags(\"api\");\n\n            return {\n                fileManager,\n                graphql,\n                apiGateway,\n                websocket,\n                cloudfront,\n                migration,\n                backgroundTask,\n                scheduler\n            };\n        }\n    });\n\n    const app = withServiceManifest(withCommonLambdaEnvVariables(baseApp));\n\n    app.addHandler(() => {\n        app.addServiceManifest({\n            name: \"api\",\n            manifest: {\n                bgTaskSfn: baseApp.resources.backgroundTask.stepFunction.output.arn,\n                cloudfront: {\n                    distributionId: baseApp.resources.cloudfront.output.id,\n                    domain: baseApp.resources.cloudfront.output.domainName.apply(\n                        v => `https://${v}`\n                    )\n                }\n            }\n        });\n\n        app.addServiceManifest({\n            name: \"scheduler\",\n            manifest: {\n                lambdaArn: baseApp.resources.graphql.functions.graphql.output.arn,\n                roleArn: baseApp.resources.scheduler.invokeRole.output.arn\n            }\n        });\n    });\n\n    return app;\n};\n"],"mappings":"AAAA,OAAO,KAAKA,GAAG,MAAM,aAAa;AAClC,SAASC,eAAe,EAAEC,gBAAgB,QAAwB,gBAAgB;AAClF,SACIC,iBAAiB,EACjBC,aAAa,EACbC,cAAc,EACdC,UAAU,EACVC,UAAU,EACVC,YAAY,EACZC,YAAY,EACZC,UAAU,EACVC,SAAS;AAEb,SACIC,qBAAqB,EACrBC,4BAA4B,EAC5BC,mBAAmB;AAEvB,SAASC,uBAAuB;AAChC;AACA,SAASC,oBAAoB,EAAEC,eAAe;AAE9C,SAASC,YAAY;AACrB,SAASC,aAAa,QAAQ,iBAAiB;AAC/C,SAASC,yBAAyB;AAClC,SAASC,wBAAwB;AACjC,SAASC,qBAAqB;AAC9B,SAASC,SAAS,QAAQ,uCAAuC;AAIjE,OAAO,MAAMC,kBAAkB,GAAGA,CAAA,KAAM;EACpC,MAAMC,OAAO,GAAGxB,eAAe,CAAC;IAC5ByB,IAAI,EAAE,KAAK;IACXC,IAAI,EAAE,UAAU;IAChBC,OAAO,EAAE,MAAOC,GAAoC,IAAK;MACrD,MAAMC,GAAG,GAAG,MAAMX,aAAa,CAAC,CAAC;MACjC,MAAMY,aAAa,GAAG,MAAMD,GAAG,CAACE,gBAAgB,CAAC,CAAC;MAElD,MAAMC,wBAAwB,GAAG,MAAMH,GAAG,CAACI,2BAA2B,CAAC,CAAC;MACxE,MAAMC,mBAAmB,GAAGf,yBAAyB,CAACW,aAAa,CAAC;MACpE,MAAMK,yBAAyB,GAAGf,wBAAwB,CAACU,aAAa,CAAC;MAEzE,IAAIM,kBAA2D,GAAG,IAAI;MAEtE,IAAID,yBAAyB,EAAE;QAC3BC,kBAAkB,GAAGD,yBAAyB;MAClD;MAEA,IAAIC,kBAAkB,EAAE;QACpB,MAAMC,MAAM,GAAGD,kBAAkB;QACjC,IAAI,OAAOC,MAAM,KAAK,QAAQ,EAAE;UAC5B,IAAIA,MAAM,CAACC,UAAU,EAAE;YACnBC,OAAO,CAACC,GAAG,CAACC,kBAAkB,GAAGJ,MAAM,CAACC,UAAU;UACtD;UAEA,IAAID,MAAM,CAACK,WAAW,EAAE;YACpBH,OAAO,CAACC,GAAG,CAACG,uBAAuB,GAAGN,MAAM,CAACK,WAAW;UAC5D;UAEA,IAAIL,MAAM,CAACO,aAAa,EAAE;YACtBL,OAAO,CAACC,GAAG,CAACK,yBAAyB,GAAG,MAAM;UAClD;QACJ;MACJ;MAEA,IAAIb,wBAAwB,EAAE;QAC1BJ,GAAG,CAACkB,UAAU,CAACC,QAAQ,IAAI;UACvB,IAAI,CAACA,QAAQ,CAACtB,IAAI,CAACuB,UAAU,CAAChB,wBAAwB,CAAC,EAAE;YACrDe,QAAQ,CAACtB,IAAI,GAAG,GAAGO,wBAAwB,GAAGe,QAAQ,CAACtB,IAAI,EAAE;UACjE;QACJ,CAAC,CAAC;MACN;;MAEA;MACAG,GAAG,CAACqB,UAAU,CAAC,YAAY;QACvB,MAAMC,YAAY,GAAG,MAAMrB,GAAG,CAACsB,eAAe,CAAC,CAAC;QAEhD,MAAMC,sBAAsB,GACxBlB,mBAAmB,IAAI,OAAOA,mBAAmB,KAAK,SAAS;QAEnE,IAAIgB,YAAY,CAACG,mCAAmC,CAAC,CAAC,EAAE;UACpDhC,qBAAqB,CAACO,GAAmB,CAAC;QAC9C;;QAEA;QACA,IAAIwB,sBAAsB,EAAE;UACxB,MAAM;YAAEN,UAAU;YAAEQ;UAAY,CAAC,GAAG1B,GAAG;UACvC,MAAM;YAAE2B;UAAe,CAAC,GAAGrB,mBAAmB;;UAE9C;UACA,IAAIqB,cAAc,EAAE;YAChB,IAAI,CAACA,cAAc,CAACC,wBAAwB,EAAE;cAC1C,MAAM,IAAIC,KAAK,CACX,6GACJ,CAAC;YACL;YAEAX,UAAU,CAACC,QAAQ,IAAI;cACnB,IAAI9C,gBAAgB,CAAC8C,QAAQ,EAAEhD,GAAG,CAAC2D,MAAM,CAACC,QAAQ,CAAC,EAAE;gBACjD,MAAMC,SAAS,GAAGb,QAAQ,CAACc,IAAI,CAACD,SAAS,KAAK,KAAK;gBACnD,IAAIA,SAAS,EAAE;kBACXb,QAAQ,CAACe,MAAM,CAACC,SAAS,CACrBR,cAAc,CAAEC,wBACpB,CAAC;gBACL;cACJ;cAEA,IAAIvD,gBAAgB,CAAC8C,QAAQ,EAAEhD,GAAG,CAACiE,GAAG,CAACC,IAAI,CAAC,EAAE;gBAC1C,IAAIlB,QAAQ,CAACc,IAAI,CAACK,oBAAoB,EAAE;kBACpCZ,WAAW,CAACvD,GAAG,CAACiE,GAAG,CAACG,oBAAoB,EAAE;oBACtC1C,IAAI,EAAE,GAAGsB,QAAQ,CAACtB,IAAI,4BAA4B;oBAClDqC,MAAM,EAAE;sBACJM,IAAI,EAAErB,QAAQ,CAACsB,MAAM,CAAC5C,IAAI;sBAC1B6C,SAAS,EACLvE,GAAG,CAACiE,GAAG,CAACO,aAAa,CAChBC;oBACb;kBACJ,CAAC,CAAC;gBACN;cACJ;YACJ,CAAC,CAAC;UACN;QACJ;MACJ,CAAC,CAAC;MACF;;MAEA;MACA;MACA,MAAMC,cAAc,GAAG5C,GAAG,CAAC6C,YAAY,CAAC,CAAC,CAACC,OAAO,CAACrD,SAAS,CAAC;MAE5DM,GAAG,CAACqB,UAAU,CAAC,MAAM;QACjB,OAAOwB,cAAc,CAACG,OAAO,CAAChD,GAA8B,CAAC;MACjE,CAAC,CAAC;MAEF,MAAMiD,YAAY,GAAGjD,GAAG,CAACY,GAAG,CAACqC,YAAY;;MAEzC;MACA,MAAMC,IAAI,GAAGlD,GAAG,CAACmD,SAAS,CAACtE,UAAU,CAAC;;MAEtC;MACA,MAAMuE,UAAU,GACZ9C,mBAAmB,KAAK,IAAI,IAC5B,OAAOA,mBAAmB,KAAK,QAAQ,IACvC2C,YAAY;MAEhBjD,GAAG,CAACmD,SAAS,CAACrE,SAAS,EAAE;QAAEuE,OAAO,EAAED;MAAW,CAAC,CAAC;MAEjD,MAAME,OAAO,GAAGtD,GAAG,CAACmD,SAAS,CAACzE,UAAU,EAAE;QACtCkC,GAAG,EAAE;UACD2C,cAAc,EAAErE,uBAAuB,CAAC,CAAC;UACzCsE,oBAAoB,EAAEN,IAAI,CAACO,iBAAiB;UAC5CC,QAAQ,EAAER,IAAI,CAACS,wBAAwB;UACvCC,mBAAmB,EAAEV,IAAI,CAACW,0BAA0B;UACpDC,mBAAmB,EAAEZ,IAAI,CAACa,2BAA2B;UACrDC,mBAAmB,EAAEd,IAAI,CAACe,wBAAwB;UAElD;UACA;UACAlD,uBAAuB,EAAEJ,OAAO,CAACC,GAAG,CAACG,uBAAuB;UAC5DE,yBAAyB,EAAEN,OAAO,CAACC,GAAG,CAACK,yBAAyB;UAEhEiD,SAAS,EAAEhB,IAAI,CAACiB,mBAAmB;UACnCC,SAAS,EAAElB,IAAI,CAACmB,WAAW;UAC3B;UACAC,WAAW,EAAE3D,OAAO,CAACC,GAAG,CAAC,aAAa;QAC1C;MACJ,CAAC,CAAC;MAEF,MAAM2D,SAAS,GAAGvE,GAAG,CAACmD,SAAS,CAACvE,YAAY,CAAC;MAE7C,MAAM4F,WAAW,GAAGxE,GAAG,CAACmD,SAAS,CAAC3E,cAAc,EAAE;QAC9CoC,GAAG,EAAE;UACD8C,QAAQ,EAAER,IAAI,CAACS,wBAAwB;UACvCC,mBAAmB,EAAEV,IAAI,CAACW;QAC9B;MACJ,CAAC,CAAC;MAEF,MAAMY,UAAU,GAAGzE,GAAG,CAACmD,SAAS,CAAC1E,UAAU,EAAE;QACzC,cAAc,EAAE;UACZqB,IAAI,EAAE,UAAU;UAChB4E,MAAM,EAAE,MAAM;UACdC,QAAQ,EAAErB,OAAO,CAACsB,SAAS,CAACtB,OAAO,CAACb,MAAM,CAACoC;QAC/C,CAAC;QACD,iBAAiB,EAAE;UACf/E,IAAI,EAAE,UAAU;UAChB4E,MAAM,EAAE,SAAS;UACjBC,QAAQ,EAAErB,OAAO,CAACsB,SAAS,CAACtB,OAAO,CAACb,MAAM,CAACoC;QAC/C,CAAC;QACD,WAAW,EAAE;UACT/E,IAAI,EAAE,gBAAgB;UACtB4E,MAAM,EAAE,KAAK;UACbC,QAAQ,EAAEH,WAAW,CAACI,SAAS,CAACE,QAAQ,CAACrC,MAAM,CAACoC;QACpD,CAAC;QACD,aAAa,EAAE;UACX/E,IAAI,EAAE,kBAAkB;UACxB4E,MAAM,EAAE,KAAK;UACbC,QAAQ,EAAEH,WAAW,CAACI,SAAS,CAACE,QAAQ,CAACrC,MAAM,CAACoC;QACpD,CAAC;QACD,UAAU,EAAE;UACR/E,IAAI,EAAE,aAAa;UACnB4E,MAAM,EAAE,MAAM;UACdC,QAAQ,EAAErB,OAAO,CAACsB,SAAS,CAACtB,OAAO,CAACb,MAAM,CAACoC;QAC/C,CAAC;QACD,aAAa,EAAE;UACX/E,IAAI,EAAE,aAAa;UACnB4E,MAAM,EAAE,SAAS;UACjBC,QAAQ,EAAErB,OAAO,CAACsB,SAAS,CAACtB,OAAO,CAACb,MAAM,CAACoC;QAC/C,CAAC;QACD,eAAe,EAAE;UACb/E,IAAI,EAAE,eAAe;UACrB4E,MAAM,EAAE,KAAK;UACbC,QAAQ,EAAErB,OAAO,CAACsB,SAAS,CAACtB,OAAO,CAACb,MAAM,CAACoC;QAC/C,CAAC;QACD,mBAAmB,EAAE;UACjB/E,IAAI,EAAE,eAAe;UACrB4E,MAAM,EAAE,SAAS;UACjBC,QAAQ,EAAErB,OAAO,CAACsB,SAAS,CAACtB,OAAO,CAACb,MAAM,CAACoC;QAC/C,CAAC;QACD,iBAAiB,EAAE;UACf/E,IAAI,EAAE,UAAU;UAChB4E,MAAM,EAAE,KAAK;UACbC,QAAQ,EAAEH,WAAW,CAACI,SAAS,CAACE,QAAQ,CAACrC,MAAM,CAACoC;QACpD;MACJ,CAAC,CAAC;MAEF,MAAME,UAAU,GAAG/E,GAAG,CAACmD,SAAS,CAAC5E,aAAa,CAAC;MAC/C,MAAMyG,cAAc,GAAGhF,GAAG,CAACmD,SAAS,CAAC7E,iBAAiB,CAAC;MACvD,MAAM2G,SAAS,GAAGjF,GAAG,CAACmD,SAAS,CAACxE,YAAY,CAAC;MAC7C,MAAMuG,SAAS,GAAGlF,GAAG,CAACmD,SAAS,CAAC9D,YAAY,CAAC;;MAE7C;MACA;MACA;MACA;;MAEAW,GAAG,CAACmF,UAAU,CAAC;QACXC,YAAY,EAAEhG,eAAe,CAACY,GAAG,CAAC;QAClCqF,MAAM,EAAElH,GAAG,CAAC+D,MAAM,CAACmD,MAAM;QACzB5B,iBAAiB,EAAEP,IAAI,CAACO,iBAAiB;QACzC6B,kBAAkB,EAAEpC,IAAI,CAACoC,kBAAkB;QAC3CC,6BAA6B,EAAErC,IAAI,CAACqC,6BAA6B;QACjEC,aAAa,EAAEtC,IAAI,CAACS,wBAAwB;QAC5C8B,sBAAsB,EAAEvC,IAAI,CAACW,0BAA0B;QACvD6B,kBAAkB,EAAET,SAAS,CAACN,QAAQ,CAAClC,MAAM,CAACoC,GAAG;QACjDc,iBAAiB,EAAErC,OAAO,CAACsB,SAAS,CAACtB,OAAO,CAACb,MAAM,CAAC5C,IAAI;QACxD+F,iBAAiB,EAAEtC,OAAO,CAACd,IAAI,CAACC,MAAM,CAACoC,GAAG;QAC1CgB,qBAAqB,EAAEvC,OAAO,CAACd,IAAI,CAACC,MAAM,CAAC5C,IAAI;QAC/CiG,uBAAuB,EAAEd,cAAc,CAACA,cAAc,CAACvC,MAAM,CAACoC,GAAG;QACjEkB,6BAA6B,EAAEf,cAAc,CAACgB,YAAY,CAACvD,MAAM,CAACoC,GAAG;QACrEoB,4BAA4B,EAAEzB,WAAW,CAACI,SAAS,CAACE,QAAQ,CAACrC,MAAM,CAACoC,GAAG;QACvEqB,cAAc,EAAE3B,SAAS,CAAC4B,YAAY,CAAC1D,MAAM,CAAC2D,EAAE;QAChDC,eAAe,EAAE9B,SAAS,CAAC8B,eAAe;QAC1CC,yBAAyB,EAAEpB,SAAS,CAACqB,UAAU,CAAC9D,MAAM,CAACoC;MAC3D,CAAC,CAAC;;MAEF;MACA,IAAIrE,kBAAkB,EAAE;QACpBR,GAAG,CAACmF,UAAU,CAAC;UACXqB,uBAAuB,EAAEtD,IAAI,CAACa;QAClC,CAAC,CAAC;MACN;MAEA/D,GAAG,CAACqB,UAAU,CAAC,MAAM;QACjBtC,qBAAqB,CAAC;UAClBiB,GAAG;UACHyG,sBAAsB,EAAE1B,UAAU;UAClC2B,GAAG,EAAE;YACDC,kBAAkB,EAAE,qBAAqB;YACzCC,eAAe,EAAE,kBAAkB;YACnCC,UAAU,EAAE,WAAW;YACvBC,OAAO,EAAE;UACb;QACJ,CAAC,CAAC;MACN,CAAC,CAAC;MACF;MACA;MACA;MACA;MACA;MACA;MACA;MACA;;MAEA;MACA,MAAM3H,oBAAoB,CAAC,KAAK,CAAC;MAEjC,OAAO;QACHqF,WAAW;QACXlB,OAAO;QACPmB,UAAU;QACVF,SAAS;QACTQ,UAAU;QACVE,SAAS;QACTD,cAAc;QACdE;MACJ,CAAC;IACL;EACJ,CAAC,CAAC;EAEF,MAAMlF,GAAG,GAAGf,mBAAmB,CAACD,4BAA4B,CAACY,OAAO,CAAC,CAAC;EAEtEI,GAAG,CAACqB,UAAU,CAAC,MAAM;IACjBrB,GAAG,CAAC+G,kBAAkB,CAAC;MACnBlH,IAAI,EAAE,KAAK;MACXmH,QAAQ,EAAE;QACNC,SAAS,EAAErH,OAAO,CAACsH,SAAS,CAAClC,cAAc,CAACgB,YAAY,CAACvD,MAAM,CAACoC,GAAG;QACnEE,UAAU,EAAE;UACRoC,cAAc,EAAEvH,OAAO,CAACsH,SAAS,CAACnC,UAAU,CAACtC,MAAM,CAAC2D,EAAE;UACtDgB,MAAM,EAAExH,OAAO,CAACsH,SAAS,CAACnC,UAAU,CAACtC,MAAM,CAAC/B,UAAU,CAAC2G,KAAK,CACxDC,CAAC,IAAI,WAAWA,CAAC,EACrB;QACJ;MACJ;IACJ,CAAC,CAAC;IAEFtH,GAAG,CAAC+G,kBAAkB,CAAC;MACnBlH,IAAI,EAAE,WAAW;MACjBmH,QAAQ,EAAE;QACNO,SAAS,EAAE3H,OAAO,CAACsH,SAAS,CAAC5D,OAAO,CAACsB,SAAS,CAACtB,OAAO,CAACb,MAAM,CAACoC,GAAG;QACjE2C,OAAO,EAAE5H,OAAO,CAACsH,SAAS,CAAChC,SAAS,CAACqB,UAAU,CAAC9D,MAAM,CAACoC;MAC3D;IACJ,CAAC,CAAC;EACN,CAAC,CAAC;EAEF,OAAO7E,GAAG;AACd,CAAC","ignoreList":[]}
+{"version":3,"names":["aws","createPulumiApp","isResourceOfType","ApiBackgroundTask","ApiCloudfront","ApiFileManager","ApiGateway","ApiGraphql","ApiWebsocket","CoreOutput","VpcConfig","addDomainsUrlsOutputs","withCommonLambdaEnvVariables","withServiceManifest","getEnvVariableAwsRegion","applyAwsResourceTags","getAwsAccountId","ApiScheduler","getProjectSdk","getVpcConfigFromExtension","getOsConfigFromExtension","handleGuardDutyEvents","ApiPulumi","createApiPulumiApp","baseApp","name","path","program","app","sdk","projectConfig","getProjectConfig","pulumiResourceNamePrefix","getPulumiResourceNamePrefix","vpcExtensionsConfig","openSearchExtensionConfig","searchEngineParams","params","domainName","process","env","AWS_OS_DOMAIN_NAME","indexPrefix","OPENSEARCH_INDEX_PREFIX","sharedIndexes","OPENSEARCH_SHARED_INDEXES","onResource","resource","startsWith","addHandler","featureFlags","getFeatureFlags","usingAdvancedVpcParams","isFileManagerThreatDetectionEnabled","addResource","useExistingVpc","lambdaFunctionsVpcConfig","Error","lambda","Function","canUseVpc","meta","config","vpcConfig","iam","Role","isLambdaFunctionRole","RolePolicyAttachment","role","output","policyArn","ManagedPolicy","AWSLambdaVPCAccessExecutionRole","pulumiHandlers","getContainer","resolve","execute","isProduction","core","addModule","vpcEnabled","enabled","graphql","COGNITO_REGION","COGNITO_USER_POOL_ID","cognitoUserPoolId","DB_TABLE","primaryDynamodbTableName","DB_TABLE_AUDIT_LOGS","auditLogsDynamodbTableName","DB_TABLE_OPENSEARCH","opensearchDynamodbTableName","OPENSEARCH_ENDPOINT","opensearchDomainEndpoint","S3_BUCKET","fileManagerBucketId","EVENT_BUS","eventBusArn","OKTA_ISSUER","websocket","fileManager","apiGateway","method","function","functions","arn","download","cloudfront","backgroundTask","scheduler","addOutputs","awsAccountId","region","cognitoAppClientId","cognitoUserPoolPasswordPolicy","dynamoDbTable","auditLogsDynamoDbTable","graphqlLambdaName","graphqlLambdaRole","graphqlLambdaRoleName","backgroundTaskLambdaArn","backgroundTaskStepFunctionArn","stepFunction","fileManagerDownloadLambdaArn","websocketApiId","websocketApi","id","websocketApiUrl","schedulerLambdaInvokeRole","invokeRole","dynamoDbOpensearchTable","cloudfrontDistribution","map","distributionDomain","distributionUrl","usedDomain","usedUrl","addServiceManifest","manifest","bgTaskSfn","resources","distributionId","domain","apply","v","lambdaArn","roleArn"],"sources":["createApiPulumiApp.ts"],"sourcesContent":["import * as aws from \"@pulumi/aws\";\nimport { createPulumiApp, isResourceOfType, type PulumiApp } from \"@webiny/pulumi\";\nimport {\n    ApiBackgroundTask,\n    ApiCloudfront,\n    ApiFileManager,\n    ApiGateway,\n    ApiGraphql,\n    ApiWebsocket,\n    CoreOutput,\n    VpcConfig\n} from \"~/pulumi/apps/index.js\";\nimport {\n    addDomainsUrlsOutputs,\n    withCommonLambdaEnvVariables,\n    withServiceManifest\n} from \"~/pulumi/utils/index.js\";\nimport { getEnvVariableAwsRegion } from \"~/pulumi/env/awsRegion.js\";\n// import { attachSyncSystem } from \"../syncSystem/api/index.js\";\nimport { applyAwsResourceTags, getAwsAccountId } from \"~/pulumi/apps/awsUtils.js\";\nimport type { WithServiceManifest } from \"~/pulumi/utils/withServiceManifest.js\";\nimport { ApiScheduler } from \"~/pulumi/apps/api/ApiScheduler.js\";\nimport { getProjectSdk } from \"@webiny/project\";\nimport { getVpcConfigFromExtension } from \"~/pulumi/apps/extensions/getVpcConfigFromExtension.js\";\nimport { getOsConfigFromExtension } from \"~/pulumi/apps/extensions/getOsConfigFromExtension.js\";\nimport { handleGuardDutyEvents } from \"./handleGuardDutyEvents.js\";\nimport { ApiPulumi } from \"@webiny/project/abstractions/index.js\";\n\nexport type ApiPulumiApp = ReturnType<typeof createApiPulumiApp>;\n\nexport const createApiPulumiApp = () => {\n    const baseApp = createPulumiApp({\n        name: \"api\",\n        path: \"apps/api\",\n        program: async (app: PulumiApp & WithServiceManifest) => {\n            const sdk = await getProjectSdk();\n            const projectConfig = await sdk.getProjectConfig();\n\n            const pulumiResourceNamePrefix = await sdk.getPulumiResourceNamePrefix();\n            const vpcExtensionsConfig = getVpcConfigFromExtension(projectConfig);\n            const openSearchExtensionConfig = getOsConfigFromExtension(projectConfig);\n\n            let searchEngineParams: typeof openSearchExtensionConfig | null = null;\n\n            if (openSearchExtensionConfig) {\n                searchEngineParams = openSearchExtensionConfig;\n            }\n\n            if (searchEngineParams) {\n                const params = searchEngineParams;\n                if (typeof params === \"object\") {\n                    if (params.domainName) {\n                        process.env.AWS_OS_DOMAIN_NAME = params.domainName;\n                    }\n\n                    if (params.indexPrefix) {\n                        process.env.OPENSEARCH_INDEX_PREFIX = params.indexPrefix;\n                    }\n\n                    if (params.sharedIndexes) {\n                        process.env.OPENSEARCH_SHARED_INDEXES = \"true\";\n                    }\n                }\n            }\n\n            if (pulumiResourceNamePrefix) {\n                app.onResource(resource => {\n                    if (!resource.name.startsWith(pulumiResourceNamePrefix)) {\n                        resource.name = `${pulumiResourceNamePrefix}${resource.name}`;\n                    }\n                });\n            }\n\n            // <-------------------- Enterprise start -------------------->\n            app.addHandler(async () => {\n                const featureFlags = await sdk.getFeatureFlags();\n\n                const usingAdvancedVpcParams =\n                    vpcExtensionsConfig && typeof vpcExtensionsConfig !== \"boolean\";\n\n                if (featureFlags.isFileManagerThreatDetectionEnabled()) {\n                    handleGuardDutyEvents(app as ApiPulumiApp);\n                }\n\n                // Not using advanced VPC params? Then immediately exit.\n                if (usingAdvancedVpcParams) {\n                    const { onResource, addResource } = app;\n                    const { useExistingVpc } = vpcExtensionsConfig;\n\n                    // 1. We first deal with \"existing VPC\" setup.\n                    if (useExistingVpc) {\n                        if (!useExistingVpc.lambdaFunctionsVpcConfig) {\n                            throw new Error(\n                                \"Cannot specify `useExistingVpc` parameter because the `lambdaFunctionsVpcConfig` parameter wasn't provided.\"\n                            );\n                        }\n\n                        onResource(resource => {\n                            if (isResourceOfType(resource, aws.lambda.Function)) {\n                                const canUseVpc = resource.meta.canUseVpc !== false;\n                                if (canUseVpc) {\n                                    resource.config.vpcConfig(\n                                        useExistingVpc!.lambdaFunctionsVpcConfig\n                                    );\n                                }\n                            }\n\n                            if (isResourceOfType(resource, aws.iam.Role)) {\n                                if (resource.meta.isLambdaFunctionRole) {\n                                    addResource(aws.iam.RolePolicyAttachment, {\n                                        name: `${resource.name}-vpc-access-execution-role`,\n                                        config: {\n                                            role: resource.output.name,\n                                            policyArn:\n                                                aws.iam.ManagedPolicy\n                                                    .AWSLambdaVPCAccessExecutionRole\n                                        }\n                                    });\n                                }\n                            }\n                        });\n                    }\n                }\n            });\n            // <-------------------- Enterprise end -------------------->\n\n            // Overrides must be applied via a handler, registered at the very start of the program.\n            // By doing this, we're ensuring user's adjustments are not applied to late.\n            const pulumiHandlers = sdk.getContainer().resolve(ApiPulumi);\n\n            app.addHandler(() => {\n                return pulumiHandlers.execute(app as unknown as ApiPulumiApp);\n            });\n\n            const isProduction = app.env.isProduction;\n\n            // Register core output as a module available to all the other modules\n            const core = app.addModule(CoreOutput);\n\n            // Register VPC config module to be available to other modules.\n            const vpcEnabled =\n                vpcExtensionsConfig === true ||\n                typeof vpcExtensionsConfig === \"object\" ||\n                isProduction;\n\n            app.addModule(VpcConfig, { enabled: vpcEnabled });\n\n            const graphql = app.addModule(ApiGraphql, {\n                env: {\n                    COGNITO_REGION: getEnvVariableAwsRegion(),\n                    COGNITO_USER_POOL_ID: core.cognitoUserPoolId,\n                    DB_TABLE: core.primaryDynamodbTableName,\n                    DB_TABLE_AUDIT_LOGS: core.auditLogsDynamodbTableName,\n                    DB_TABLE_OPENSEARCH: core.opensearchDynamodbTableName,\n                    OPENSEARCH_ENDPOINT: core.opensearchDomainEndpoint,\n\n                    // Not required. Useful for testing purposes / ephemeral environments.\n                    // https://www.webiny.com/docs/key-topics/ci-cd/testing/slow-ephemeral-environments\n                    OPENSEARCH_INDEX_PREFIX: process.env.OPENSEARCH_INDEX_PREFIX,\n                    OPENSEARCH_SHARED_INDEXES: process.env.OPENSEARCH_SHARED_INDEXES,\n\n                    S3_BUCKET: core.fileManagerBucketId,\n                    EVENT_BUS: core.eventBusArn,\n                    // TODO: move to okta plugin\n                    OKTA_ISSUER: process.env[\"OKTA_ISSUER\"]\n                }\n            });\n\n            const websocket = app.addModule(ApiWebsocket);\n\n            const fileManager = app.addModule(ApiFileManager, {\n                env: {\n                    DB_TABLE: core.primaryDynamodbTableName,\n                    DB_TABLE_AUDIT_LOGS: core.auditLogsDynamodbTableName\n                }\n            });\n\n            const apiGateway = app.addModule(ApiGateway, {\n                \"graphql-post\": {\n                    path: \"/graphql\",\n                    method: \"POST\",\n                    function: graphql.functions.graphql.output.arn\n                },\n                \"graphql-options\": {\n                    path: \"/graphql\",\n                    method: \"OPTIONS\",\n                    function: graphql.functions.graphql.output.arn\n                },\n                \"files-any\": {\n                    path: \"/files/{path+}\",\n                    method: \"ANY\",\n                    function: fileManager.functions.download.output.arn\n                },\n                \"private-any\": {\n                    path: \"/private/{path+}\",\n                    method: \"ANY\",\n                    function: fileManager.functions.download.output.arn\n                },\n                \"cms-post\": {\n                    path: \"/cms/{key+}\",\n                    method: \"POST\",\n                    function: graphql.functions.graphql.output.arn\n                },\n                \"cms-options\": {\n                    path: \"/cms/{key+}\",\n                    method: \"OPTIONS\",\n                    function: graphql.functions.graphql.output.arn\n                },\n                \"redirects-get\": {\n                    path: \"/wb/redirects\",\n                    method: \"GET\",\n                    function: graphql.functions.graphql.output.arn\n                },\n                \"redirects-options\": {\n                    path: \"/wb/redirects\",\n                    method: \"OPTIONS\",\n                    function: graphql.functions.graphql.output.arn\n                },\n                \"files-catch-all\": {\n                    path: \"/{path+}\",\n                    method: \"ANY\",\n                    function: fileManager.functions.download.output.arn\n                }\n            });\n\n            const cloudfront = app.addModule(ApiCloudfront);\n            const backgroundTask = app.addModule(ApiBackgroundTask);\n            const scheduler = app.addModule(ApiScheduler);\n\n            // const domains = app.getParam(projectAppParams.domains);\n            // if (domains) {\n            //     applyCustomDomain(cloudfront, domains);\n            // }\n\n            app.addOutputs({\n                awsAccountId: getAwsAccountId(app),\n                region: aws.config.region,\n                cognitoUserPoolId: core.cognitoUserPoolId,\n                cognitoAppClientId: core.cognitoAppClientId,\n                cognitoUserPoolPasswordPolicy: core.cognitoUserPoolPasswordPolicy,\n                dynamoDbTable: core.primaryDynamodbTableName,\n                auditLogsDynamoDbTable: core.auditLogsDynamodbTableName,\n                graphqlLambdaName: graphql.functions.graphql.output.name,\n                graphqlLambdaRole: graphql.role.output.arn,\n                graphqlLambdaRoleName: graphql.role.output.name,\n                backgroundTaskLambdaArn: backgroundTask.backgroundTask.output.arn,\n                backgroundTaskStepFunctionArn: backgroundTask.stepFunction.output.arn,\n                fileManagerDownloadLambdaArn: fileManager.functions.download.output.arn,\n                websocketApiId: websocket.websocketApi.output.id,\n                websocketApiUrl: websocket.websocketApiUrl,\n                schedulerLambdaInvokeRole: scheduler.invokeRole.output.arn\n            });\n\n            // Only add `dynamoDbOpensearchTable` output if using search engine (ES/OS).\n            if (searchEngineParams) {\n                app.addOutputs({\n                    dynamoDbOpensearchTable: core.opensearchDynamodbTableName\n                });\n            }\n\n            app.addHandler(() => {\n                addDomainsUrlsOutputs({\n                    app,\n                    cloudfrontDistribution: cloudfront,\n                    map: {\n                        distributionDomain: \"cloudfrontApiDomain\",\n                        distributionUrl: \"cloudfrontApiUrl\",\n                        usedDomain: \"apiDomain\",\n                        usedUrl: \"apiUrl\"\n                    }\n                });\n            });\n            // /**\n            //  * We need to attach the Sync System if it exists.\n            //  */\n            // await attachSyncSystem({\n            //     app,\n            //     core,\n            //     env: app.params.run.env\n            // });\n\n            // Applies internal and user-defined AWS tags.\n            await applyAwsResourceTags(\"api\");\n\n            return {\n                fileManager,\n                graphql,\n                apiGateway,\n                websocket,\n                cloudfront,\n                backgroundTask,\n                scheduler\n            };\n        }\n    });\n\n    const app = withServiceManifest(withCommonLambdaEnvVariables(baseApp));\n\n    app.addHandler(() => {\n        app.addServiceManifest({\n            name: \"api\",\n            manifest: {\n                bgTaskSfn: baseApp.resources.backgroundTask.stepFunction.output.arn,\n                cloudfront: {\n                    distributionId: baseApp.resources.cloudfront.output.id,\n                    domain: baseApp.resources.cloudfront.output.domainName.apply(\n                        v => `https://${v}`\n                    )\n                }\n            }\n        });\n\n        app.addServiceManifest({\n            name: \"scheduler\",\n            manifest: {\n                lambdaArn: baseApp.resources.graphql.functions.graphql.output.arn,\n                roleArn: baseApp.resources.scheduler.invokeRole.output.arn\n            }\n        });\n    });\n\n    return app;\n};\n"],"mappings":"AAAA,OAAO,KAAKA,GAAG,MAAM,aAAa;AAClC,SAASC,eAAe,EAAEC,gBAAgB,QAAwB,gBAAgB;AAClF,SACIC,iBAAiB,EACjBC,aAAa,EACbC,cAAc,EACdC,UAAU,EACVC,UAAU,EACVC,YAAY,EACZC,UAAU,EACVC,SAAS;AAEb,SACIC,qBAAqB,EACrBC,4BAA4B,EAC5BC,mBAAmB;AAEvB,SAASC,uBAAuB;AAChC;AACA,SAASC,oBAAoB,EAAEC,eAAe;AAE9C,SAASC,YAAY;AACrB,SAASC,aAAa,QAAQ,iBAAiB;AAC/C,SAASC,yBAAyB;AAClC,SAASC,wBAAwB;AACjC,SAASC,qBAAqB;AAC9B,SAASC,SAAS,QAAQ,uCAAuC;AAIjE,OAAO,MAAMC,kBAAkB,GAAGA,CAAA,KAAM;EACpC,MAAMC,OAAO,GAAGvB,eAAe,CAAC;IAC5BwB,IAAI,EAAE,KAAK;IACXC,IAAI,EAAE,UAAU;IAChBC,OAAO,EAAE,MAAOC,GAAoC,IAAK;MACrD,MAAMC,GAAG,GAAG,MAAMX,aAAa,CAAC,CAAC;MACjC,MAAMY,aAAa,GAAG,MAAMD,GAAG,CAACE,gBAAgB,CAAC,CAAC;MAElD,MAAMC,wBAAwB,GAAG,MAAMH,GAAG,CAACI,2BAA2B,CAAC,CAAC;MACxE,MAAMC,mBAAmB,GAAGf,yBAAyB,CAACW,aAAa,CAAC;MACpE,MAAMK,yBAAyB,GAAGf,wBAAwB,CAACU,aAAa,CAAC;MAEzE,IAAIM,kBAA2D,GAAG,IAAI;MAEtE,IAAID,yBAAyB,EAAE;QAC3BC,kBAAkB,GAAGD,yBAAyB;MAClD;MAEA,IAAIC,kBAAkB,EAAE;QACpB,MAAMC,MAAM,GAAGD,kBAAkB;QACjC,IAAI,OAAOC,MAAM,KAAK,QAAQ,EAAE;UAC5B,IAAIA,MAAM,CAACC,UAAU,EAAE;YACnBC,OAAO,CAACC,GAAG,CAACC,kBAAkB,GAAGJ,MAAM,CAACC,UAAU;UACtD;UAEA,IAAID,MAAM,CAACK,WAAW,EAAE;YACpBH,OAAO,CAACC,GAAG,CAACG,uBAAuB,GAAGN,MAAM,CAACK,WAAW;UAC5D;UAEA,IAAIL,MAAM,CAACO,aAAa,EAAE;YACtBL,OAAO,CAACC,GAAG,CAACK,yBAAyB,GAAG,MAAM;UAClD;QACJ;MACJ;MAEA,IAAIb,wBAAwB,EAAE;QAC1BJ,GAAG,CAACkB,UAAU,CAACC,QAAQ,IAAI;UACvB,IAAI,CAACA,QAAQ,CAACtB,IAAI,CAACuB,UAAU,CAAChB,wBAAwB,CAAC,EAAE;YACrDe,QAAQ,CAACtB,IAAI,GAAG,GAAGO,wBAAwB,GAAGe,QAAQ,CAACtB,IAAI,EAAE;UACjE;QACJ,CAAC,CAAC;MACN;;MAEA;MACAG,GAAG,CAACqB,UAAU,CAAC,YAAY;QACvB,MAAMC,YAAY,GAAG,MAAMrB,GAAG,CAACsB,eAAe,CAAC,CAAC;QAEhD,MAAMC,sBAAsB,GACxBlB,mBAAmB,IAAI,OAAOA,mBAAmB,KAAK,SAAS;QAEnE,IAAIgB,YAAY,CAACG,mCAAmC,CAAC,CAAC,EAAE;UACpDhC,qBAAqB,CAACO,GAAmB,CAAC;QAC9C;;QAEA;QACA,IAAIwB,sBAAsB,EAAE;UACxB,MAAM;YAAEN,UAAU;YAAEQ;UAAY,CAAC,GAAG1B,GAAG;UACvC,MAAM;YAAE2B;UAAe,CAAC,GAAGrB,mBAAmB;;UAE9C;UACA,IAAIqB,cAAc,EAAE;YAChB,IAAI,CAACA,cAAc,CAACC,wBAAwB,EAAE;cAC1C,MAAM,IAAIC,KAAK,CACX,6GACJ,CAAC;YACL;YAEAX,UAAU,CAACC,QAAQ,IAAI;cACnB,IAAI7C,gBAAgB,CAAC6C,QAAQ,EAAE/C,GAAG,CAAC0D,MAAM,CAACC,QAAQ,CAAC,EAAE;gBACjD,MAAMC,SAAS,GAAGb,QAAQ,CAACc,IAAI,CAACD,SAAS,KAAK,KAAK;gBACnD,IAAIA,SAAS,EAAE;kBACXb,QAAQ,CAACe,MAAM,CAACC,SAAS,CACrBR,cAAc,CAAEC,wBACpB,CAAC;gBACL;cACJ;cAEA,IAAItD,gBAAgB,CAAC6C,QAAQ,EAAE/C,GAAG,CAACgE,GAAG,CAACC,IAAI,CAAC,EAAE;gBAC1C,IAAIlB,QAAQ,CAACc,IAAI,CAACK,oBAAoB,EAAE;kBACpCZ,WAAW,CAACtD,GAAG,CAACgE,GAAG,CAACG,oBAAoB,EAAE;oBACtC1C,IAAI,EAAE,GAAGsB,QAAQ,CAACtB,IAAI,4BAA4B;oBAClDqC,MAAM,EAAE;sBACJM,IAAI,EAAErB,QAAQ,CAACsB,MAAM,CAAC5C,IAAI;sBAC1B6C,SAAS,EACLtE,GAAG,CAACgE,GAAG,CAACO,aAAa,CAChBC;oBACb;kBACJ,CAAC,CAAC;gBACN;cACJ;YACJ,CAAC,CAAC;UACN;QACJ;MACJ,CAAC,CAAC;MACF;;MAEA;MACA;MACA,MAAMC,cAAc,GAAG5C,GAAG,CAAC6C,YAAY,CAAC,CAAC,CAACC,OAAO,CAACrD,SAAS,CAAC;MAE5DM,GAAG,CAACqB,UAAU,CAAC,MAAM;QACjB,OAAOwB,cAAc,CAACG,OAAO,CAAChD,GAA8B,CAAC;MACjE,CAAC,CAAC;MAEF,MAAMiD,YAAY,GAAGjD,GAAG,CAACY,GAAG,CAACqC,YAAY;;MAEzC;MACA,MAAMC,IAAI,GAAGlD,GAAG,CAACmD,SAAS,CAACtE,UAAU,CAAC;;MAEtC;MACA,MAAMuE,UAAU,GACZ9C,mBAAmB,KAAK,IAAI,IAC5B,OAAOA,mBAAmB,KAAK,QAAQ,IACvC2C,YAAY;MAEhBjD,GAAG,CAACmD,SAAS,CAACrE,SAAS,EAAE;QAAEuE,OAAO,EAAED;MAAW,CAAC,CAAC;MAEjD,MAAME,OAAO,GAAGtD,GAAG,CAACmD,SAAS,CAACxE,UAAU,EAAE;QACtCiC,GAAG,EAAE;UACD2C,cAAc,EAAErE,uBAAuB,CAAC,CAAC;UACzCsE,oBAAoB,EAAEN,IAAI,CAACO,iBAAiB;UAC5CC,QAAQ,EAAER,IAAI,CAACS,wBAAwB;UACvCC,mBAAmB,EAAEV,IAAI,CAACW,0BAA0B;UACpDC,mBAAmB,EAAEZ,IAAI,CAACa,2BAA2B;UACrDC,mBAAmB,EAAEd,IAAI,CAACe,wBAAwB;UAElD;UACA;UACAlD,uBAAuB,EAAEJ,OAAO,CAACC,GAAG,CAACG,uBAAuB;UAC5DE,yBAAyB,EAAEN,OAAO,CAACC,GAAG,CAACK,yBAAyB;UAEhEiD,SAAS,EAAEhB,IAAI,CAACiB,mBAAmB;UACnCC,SAAS,EAAElB,IAAI,CAACmB,WAAW;UAC3B;UACAC,WAAW,EAAE3D,OAAO,CAACC,GAAG,CAAC,aAAa;QAC1C;MACJ,CAAC,CAAC;MAEF,MAAM2D,SAAS,GAAGvE,GAAG,CAACmD,SAAS,CAACvE,YAAY,CAAC;MAE7C,MAAM4F,WAAW,GAAGxE,GAAG,CAACmD,SAAS,CAAC1E,cAAc,EAAE;QAC9CmC,GAAG,EAAE;UACD8C,QAAQ,EAAER,IAAI,CAACS,wBAAwB;UACvCC,mBAAmB,EAAEV,IAAI,CAACW;QAC9B;MACJ,CAAC,CAAC;MAEF,MAAMY,UAAU,GAAGzE,GAAG,CAACmD,SAAS,CAACzE,UAAU,EAAE;QACzC,cAAc,EAAE;UACZoB,IAAI,EAAE,UAAU;UAChB4E,MAAM,EAAE,MAAM;UACdC,QAAQ,EAAErB,OAAO,CAACsB,SAAS,CAACtB,OAAO,CAACb,MAAM,CAACoC;QAC/C,CAAC;QACD,iBAAiB,EAAE;UACf/E,IAAI,EAAE,UAAU;UAChB4E,MAAM,EAAE,SAAS;UACjBC,QAAQ,EAAErB,OAAO,CAACsB,SAAS,CAACtB,OAAO,CAACb,MAAM,CAACoC;QAC/C,CAAC;QACD,WAAW,EAAE;UACT/E,IAAI,EAAE,gBAAgB;UACtB4E,MAAM,EAAE,KAAK;UACbC,QAAQ,EAAEH,WAAW,CAACI,SAAS,CAACE,QAAQ,CAACrC,MAAM,CAACoC;QACpD,CAAC;QACD,aAAa,EAAE;UACX/E,IAAI,EAAE,kBAAkB;UACxB4E,MAAM,EAAE,KAAK;UACbC,QAAQ,EAAEH,WAAW,CAACI,SAAS,CAACE,QAAQ,CAACrC,MAAM,CAACoC;QACpD,CAAC;QACD,UAAU,EAAE;UACR/E,IAAI,EAAE,aAAa;UACnB4E,MAAM,EAAE,MAAM;UACdC,QAAQ,EAAErB,OAAO,CAACsB,SAAS,CAACtB,OAAO,CAACb,MAAM,CAACoC;QAC/C,CAAC;QACD,aAAa,EAAE;UACX/E,IAAI,EAAE,aAAa;UACnB4E,MAAM,EAAE,SAAS;UACjBC,QAAQ,EAAErB,OAAO,CAACsB,SAAS,CAACtB,OAAO,CAACb,MAAM,CAACoC;QAC/C,CAAC;QACD,eAAe,EAAE;UACb/E,IAAI,EAAE,eAAe;UACrB4E,MAAM,EAAE,KAAK;UACbC,QAAQ,EAAErB,OAAO,CAACsB,SAAS,CAACtB,OAAO,CAACb,MAAM,CAACoC;QAC/C,CAAC;QACD,mBAAmB,EAAE;UACjB/E,IAAI,EAAE,eAAe;UACrB4E,MAAM,EAAE,SAAS;UACjBC,QAAQ,EAAErB,OAAO,CAACsB,SAAS,CAACtB,OAAO,CAACb,MAAM,CAACoC;QAC/C,CAAC;QACD,iBAAiB,EAAE;UACf/E,IAAI,EAAE,UAAU;UAChB4E,MAAM,EAAE,KAAK;UACbC,QAAQ,EAAEH,WAAW,CAACI,SAAS,CAACE,QAAQ,CAACrC,MAAM,CAACoC;QACpD;MACJ,CAAC,CAAC;MAEF,MAAME,UAAU,GAAG/E,GAAG,CAACmD,SAAS,CAAC3E,aAAa,CAAC;MAC/C,MAAMwG,cAAc,GAAGhF,GAAG,CAACmD,SAAS,CAAC5E,iBAAiB,CAAC;MACvD,MAAM0G,SAAS,GAAGjF,GAAG,CAACmD,SAAS,CAAC9D,YAAY,CAAC;;MAE7C;MACA;MACA;MACA;;MAEAW,GAAG,CAACkF,UAAU,CAAC;QACXC,YAAY,EAAE/F,eAAe,CAACY,GAAG,CAAC;QAClCoF,MAAM,EAAEhH,GAAG,CAAC8D,MAAM,CAACkD,MAAM;QACzB3B,iBAAiB,EAAEP,IAAI,CAACO,iBAAiB;QACzC4B,kBAAkB,EAAEnC,IAAI,CAACmC,kBAAkB;QAC3CC,6BAA6B,EAAEpC,IAAI,CAACoC,6BAA6B;QACjEC,aAAa,EAAErC,IAAI,CAACS,wBAAwB;QAC5C6B,sBAAsB,EAAEtC,IAAI,CAACW,0BAA0B;QACvD4B,iBAAiB,EAAEnC,OAAO,CAACsB,SAAS,CAACtB,OAAO,CAACb,MAAM,CAAC5C,IAAI;QACxD6F,iBAAiB,EAAEpC,OAAO,CAACd,IAAI,CAACC,MAAM,CAACoC,GAAG;QAC1Cc,qBAAqB,EAAErC,OAAO,CAACd,IAAI,CAACC,MAAM,CAAC5C,IAAI;QAC/C+F,uBAAuB,EAAEZ,cAAc,CAACA,cAAc,CAACvC,MAAM,CAACoC,GAAG;QACjEgB,6BAA6B,EAAEb,cAAc,CAACc,YAAY,CAACrD,MAAM,CAACoC,GAAG;QACrEkB,4BAA4B,EAAEvB,WAAW,CAACI,SAAS,CAACE,QAAQ,CAACrC,MAAM,CAACoC,GAAG;QACvEmB,cAAc,EAAEzB,SAAS,CAAC0B,YAAY,CAACxD,MAAM,CAACyD,EAAE;QAChDC,eAAe,EAAE5B,SAAS,CAAC4B,eAAe;QAC1CC,yBAAyB,EAAEnB,SAAS,CAACoB,UAAU,CAAC5D,MAAM,CAACoC;MAC3D,CAAC,CAAC;;MAEF;MACA,IAAIrE,kBAAkB,EAAE;QACpBR,GAAG,CAACkF,UAAU,CAAC;UACXoB,uBAAuB,EAAEpD,IAAI,CAACa;QAClC,CAAC,CAAC;MACN;MAEA/D,GAAG,CAACqB,UAAU,CAAC,MAAM;QACjBtC,qBAAqB,CAAC;UAClBiB,GAAG;UACHuG,sBAAsB,EAAExB,UAAU;UAClCyB,GAAG,EAAE;YACDC,kBAAkB,EAAE,qBAAqB;YACzCC,eAAe,EAAE,kBAAkB;YACnCC,UAAU,EAAE,WAAW;YACvBC,OAAO,EAAE;UACb;QACJ,CAAC,CAAC;MACN,CAAC,CAAC;MACF;MACA;MACA;MACA;MACA;MACA;MACA;MACA;;MAEA;MACA,MAAMzH,oBAAoB,CAAC,KAAK,CAAC;MAEjC,OAAO;QACHqF,WAAW;QACXlB,OAAO;QACPmB,UAAU;QACVF,SAAS;QACTQ,UAAU;QACVC,cAAc;QACdC;MACJ,CAAC;IACL;EACJ,CAAC,CAAC;EAEF,MAAMjF,GAAG,GAAGf,mBAAmB,CAACD,4BAA4B,CAACY,OAAO,CAAC,CAAC;EAEtEI,GAAG,CAACqB,UAAU,CAAC,MAAM;IACjBrB,GAAG,CAAC6G,kBAAkB,CAAC;MACnBhH,IAAI,EAAE,KAAK;MACXiH,QAAQ,EAAE;QACNC,SAAS,EAAEnH,OAAO,CAACoH,SAAS,CAAChC,cAAc,CAACc,YAAY,CAACrD,MAAM,CAACoC,GAAG;QACnEE,UAAU,EAAE;UACRkC,cAAc,EAAErH,OAAO,CAACoH,SAAS,CAACjC,UAAU,CAACtC,MAAM,CAACyD,EAAE;UACtDgB,MAAM,EAAEtH,OAAO,CAACoH,SAAS,CAACjC,UAAU,CAACtC,MAAM,CAAC/B,UAAU,CAACyG,KAAK,CACxDC,CAAC,IAAI,WAAWA,CAAC,EACrB;QACJ;MACJ;IACJ,CAAC,CAAC;IAEFpH,GAAG,CAAC6G,kBAAkB,CAAC;MACnBhH,IAAI,EAAE,WAAW;MACjBiH,QAAQ,EAAE;QACNO,SAAS,EAAEzH,OAAO,CAACoH,SAAS,CAAC1D,OAAO,CAACsB,SAAS,CAACtB,OAAO,CAACb,MAAM,CAACoC,GAAG;QACjEyC,OAAO,EAAE1H,OAAO,CAACoH,SAAS,CAAC/B,SAAS,CAACoB,UAAU,CAAC5D,MAAM,CAACoC;MAC3D;IACJ,CAAC,CAAC;EACN,CAAC,CAAC;EAEF,OAAO7E,GAAG;AACd,CAAC","ignoreList":[]}

package/pulumi/apps/api/index.d.ts

@@ -3,7 +3,6 @@ export * from "./ApiCloudfront.js";
 export * from "./ApiFileManager.js";
 export * from "./ApiGateway.js";
 export * from "./ApiGraphql.js";
-export * from "./ApiMigration.js";
 export * from "./createApiPulumiApp.js";
 export * from "./ApiOutput.js";
 export * from "./ApiWebsocket.js";

package/pulumi/apps/api/index.js

@@ -3,7 +3,6 @@ export * from "./ApiCloudfront.js";
 export * from "./ApiFileManager.js";
 export * from "./ApiGateway.js";
 export * from "./ApiGraphql.js";
-export * from "./ApiMigration.js";
 export * from "./createApiPulumiApp.js";
 export * from "./ApiOutput.js";
 export * from "./ApiWebsocket.js";

package/pulumi/apps/api/index.js.map

@@ -1 +1 @@
-{"version":3,"names":[],"sources":["index.ts"],"sourcesContent":["export * from \"./ApiBackgroundTask.js\";\nexport * from \"./ApiCloudfront.js\";\nexport * from \"./ApiFileManager.js\";\nexport * from \"./ApiGateway.js\";\nexport * from \"./ApiGraphql.js\";\nexport * from \"./ApiMigration.js\";\nexport * from \"./createApiPulumiApp.js\";\nexport * from \"./ApiOutput.js\";\nexport * from \"./ApiWebsocket.js\";\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA","ignoreList":[]}
+{"version":3,"names":[],"sources":["index.ts"],"sourcesContent":["export * from \"./ApiBackgroundTask.js\";\nexport * from \"./ApiCloudfront.js\";\nexport * from \"./ApiFileManager.js\";\nexport * from \"./ApiGateway.js\";\nexport * from \"./ApiGraphql.js\";\nexport * from \"./createApiPulumiApp.js\";\nexport * from \"./ApiOutput.js\";\nexport * from \"./ApiWebsocket.js\";\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA","ignoreList":[]}

package/pulumi/apps/extensions/getBgDeploymentsConfigFromExtension.d.ts

@@ -2,14 +2,14 @@ import { type IProjectConfigModel } from "@webiny/project/abstractions/models/in
 export declare const getBgDeploymentsConfigFromExtension: (projectConfig: IProjectConfigModel) => false | {
     enabled: boolean;
     domains: {
-        domains: {
-            api: [string, ...string[]];
-            admin: [string, ...string[]];
-            website: [string, ...string[]];
-            preview: [string, ...string[]];
-        };
         acmCertificateArn: string;
         sslSupportMethod: "sni-only" | "vip";
+        domains: {
+            api: import("../blueGreen/types").NonEmptyArray<string>;
+            admin: import("../blueGreen/types").NonEmptyArray<string>;
+            website: import("../blueGreen/types").NonEmptyArray<string>;
+            preview: import("../blueGreen/types").NonEmptyArray<string>;
+        };
     };
     deployments: [{
         name: string;

package/pulumi/extensions/AdminCustomDomains.d.ts

@@ -1,14 +1,9 @@
 import { z } from "zod";
 export declare const AdminCustomDomains: import("@webiny/project/defineExtension/defineExtension").ExtensionComponent<z.ZodObject<{
-    domains: z.ZodArray<z.ZodString, "many">;
-    sslMethod: z.ZodDefault<z.ZodEnum<["sni-only", "vip"]>>;
+    domains: z.ZodArray<z.ZodString>;
+    sslMethod: z.ZodDefault<z.ZodEnum<{
+        "sni-only": "sni-only";
+        vip: "vip";
+    }>>;
     certificateArn: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    domains: string[];
-    sslMethod: "sni-only" | "vip";
-    certificateArn: string;
-}, {
-    domains: string[];
-    certificateArn: string;
-    sslMethod?: "sni-only" | "vip" | undefined;
-}>>;
+}, z.core.$strip>>;

package/pulumi/extensions/AwsTags.d.ts

@@ -1,8 +1,4 @@
 import { z } from "zod";
 export declare const AwsTags: import("@webiny/project/defineExtension/defineExtension").ExtensionComponent<z.ZodObject<{
     tags: z.ZodRecord<z.ZodString, z.ZodString>;
-}, "strip", z.ZodTypeAny, {
-    tags: Record<string, string>;
-}, {
-    tags: Record<string, string>;
-}>>;
+}, z.core.$strip>>;

package/pulumi/extensions/AwsTags.js

@@ -8,7 +8,7 @@ export const AwsTags = defineExtension({
   description: "Apply tags to AWS resources during deployment.",
   multiple: true,
   paramsSchema: z.object({
-    tags: z.record(z.string())
+    tags: z.record(z.string(), z.string())
   })
 });
 

package/pulumi/extensions/AwsTags.js.map

@@ -1 +1 @@
-{"version":3,"names":["z","defineExtension","AwsTags","type","tags","runtimeContext","description","multiple","paramsSchema","object","record","string"],"sources":["AwsTags.ts"],"sourcesContent":["import { z } from \"zod\";\nimport { defineExtension } from \"@webiny/project/defineExtension/index.js\";\n\nexport const AwsTags = defineExtension({\n    type: \"Infra/AwsTags\",\n    tags: { runtimeContext: \"project\" },\n    description: \"Apply tags to AWS resources during deployment.\",\n    multiple: true,\n    paramsSchema: z.object({\n        tags: z.record(z.string())\n    })\n});\n"],"mappings":"AAAA,SAASA,CAAC,QAAQ,KAAK;AACvB,SAASC,eAAe,QAAQ,0CAA0C;AAE1E,OAAO,MAAMC,OAAO,GAAGD,eAAe,CAAC;EACnCE,IAAI,EAAE,eAAe;EACrBC,IAAI,EAAE;IAAEC,cAAc,EAAE;EAAU,CAAC;EACnCC,WAAW,EAAE,gDAAgD;EAC7DC,QAAQ,EAAE,IAAI;EACdC,YAAY,EAAER,CAAC,CAACS,MAAM,CAAC;IACnBL,IAAI,EAAEJ,CAAC,CAACU,MAAM,CAACV,CAAC,CAACW,MAAM,CAAC,CAAC;EAC7B,CAAC;AACL,CAAC,CAAC","ignoreList":[]}
+{"version":3,"names":["z","defineExtension","AwsTags","type","tags","runtimeContext","description","multiple","paramsSchema","object","record","string"],"sources":["AwsTags.ts"],"sourcesContent":["import { z } from \"zod\";\nimport { defineExtension } from \"@webiny/project/defineExtension/index.js\";\n\nexport const AwsTags = defineExtension({\n    type: \"Infra/AwsTags\",\n    tags: { runtimeContext: \"project\" },\n    description: \"Apply tags to AWS resources during deployment.\",\n    multiple: true,\n    paramsSchema: z.object({\n        tags: z.record(z.string(), z.string())\n    })\n});\n"],"mappings":"AAAA,SAASA,CAAC,QAAQ,KAAK;AACvB,SAASC,eAAe,QAAQ,0CAA0C;AAE1E,OAAO,MAAMC,OAAO,GAAGD,eAAe,CAAC;EACnCE,IAAI,EAAE,eAAe;EACrBC,IAAI,EAAE;IAAEC,cAAc,EAAE;EAAU,CAAC;EACnCC,WAAW,EAAE,gDAAgD;EAC7DC,QAAQ,EAAE,IAAI;EACdC,YAAY,EAAER,CAAC,CAACS,MAAM,CAAC;IACnBL,IAAI,EAAEJ,CAAC,CAACU,MAAM,CAACV,CAAC,CAACW,MAAM,CAAC,CAAC,EAAEX,CAAC,CAACW,MAAM,CAAC,CAAC;EACzC,CAAC;AACL,CAAC,CAAC","ignoreList":[]}

package/pulumi/extensions/BlueGreenDeployments.d.ts

@@ -1,134 +1,36 @@
 import { z } from "zod";
+import type { NonEmptyArray } from "../apps/blueGreen/types.js";
 export declare const deploymentsSchema: z.ZodTuple<[z.ZodObject<{
     name: z.ZodString;
     env: z.ZodString;
     variant: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    name: string;
-    env: string;
-    variant: string;
-}, {
-    name: string;
-    env: string;
-    variant: string;
-}>, z.ZodObject<{
+}, z.core.$strip>, z.ZodObject<{
     name: z.ZodString;
     env: z.ZodString;
     variant: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    name: string;
-    env: string;
-    variant: string;
-}, {
-    name: string;
-    env: string;
-    variant: string;
-}>], null>;
-export declare const BlueGreenDeployments: import("@webiny/project/defineExtension/defineExtension").ExtensionComponent<z.ZodObject<{
+}, z.core.$strip>], null>;
+export declare const BlueGreenDeployments: import("@webiny/project/defineExtension/defineExtension.js").ExtensionComponent<z.ZodObject<{
     enabled: z.ZodDefault<z.ZodBoolean>;
     domains: z.ZodObject<{
         acmCertificateArn: z.ZodString;
-        sslSupportMethod: z.ZodEnum<["sni-only", "vip"]>;
-        domains: z.ZodObject<{
-            api: z.ZodArray<z.ZodString, "atleastone">;
-            admin: z.ZodArray<z.ZodString, "atleastone">;
-            website: z.ZodArray<z.ZodString, "atleastone">;
-            preview: z.ZodArray<z.ZodString, "atleastone">;
-        }, "strip", z.ZodTypeAny, {
-            api: [string, ...string[]];
-            admin: [string, ...string[]];
-            website: [string, ...string[]];
-            preview: [string, ...string[]];
-        }, {
-            api: [string, ...string[]];
-            admin: [string, ...string[]];
-            website: [string, ...string[]];
-            preview: [string, ...string[]];
+        sslSupportMethod: z.ZodEnum<{
+            "sni-only": "sni-only";
+            vip: "vip";
         }>;
-    }, "strip", z.ZodTypeAny, {
-        domains: {
-            api: [string, ...string[]];
-            admin: [string, ...string[]];
-            website: [string, ...string[]];
-            preview: [string, ...string[]];
-        };
-        acmCertificateArn: string;
-        sslSupportMethod: "sni-only" | "vip";
-    }, {
-        domains: {
-            api: [string, ...string[]];
-            admin: [string, ...string[]];
-            website: [string, ...string[]];
-            preview: [string, ...string[]];
-        };
-        acmCertificateArn: string;
-        sslSupportMethod: "sni-only" | "vip";
-    }>;
+        domains: z.ZodObject<{
+            api: z.ZodPipe<z.ZodArray<z.ZodString>, z.ZodTransform<NonEmptyArray<string>, string[]>>;
+            admin: z.ZodPipe<z.ZodArray<z.ZodString>, z.ZodTransform<NonEmptyArray<string>, string[]>>;
+            website: z.ZodPipe<z.ZodArray<z.ZodString>, z.ZodTransform<NonEmptyArray<string>, string[]>>;
+            preview: z.ZodPipe<z.ZodArray<z.ZodString>, z.ZodTransform<NonEmptyArray<string>, string[]>>;
+        }, z.core.$strip>;
+    }, z.core.$strip>;
     deployments: z.ZodTuple<[z.ZodObject<{
         name: z.ZodString;
         env: z.ZodString;
         variant: z.ZodString;
-    }, "strip", z.ZodTypeAny, {
-        name: string;
-        env: string;
-        variant: string;
-    }, {
-        name: string;
-        env: string;
-        variant: string;
-    }>, z.ZodObject<{
+    }, z.core.$strip>, z.ZodObject<{
         name: z.ZodString;
         env: z.ZodString;
         variant: z.ZodString;
-    }, "strip", z.ZodTypeAny, {
-        name: string;
-        env: string;
-        variant: string;
-    }, {
-        name: string;
-        env: string;
-        variant: string;
-    }>], null>;
-}, "strip", z.ZodTypeAny, {
-    enabled: boolean;
-    domains: {
-        domains: {
-            api: [string, ...string[]];
-            admin: [string, ...string[]];
-            website: [string, ...string[]];
-            preview: [string, ...string[]];
-        };
-        acmCertificateArn: string;
-        sslSupportMethod: "sni-only" | "vip";
-    };
-    deployments: [{
-        name: string;
-        env: string;
-        variant: string;
-    }, {
-        name: string;
-        env: string;
-        variant: string;
-    }];
-}, {
-    domains: {
-        domains: {
-            api: [string, ...string[]];
-            admin: [string, ...string[]];
-            website: [string, ...string[]];
-            preview: [string, ...string[]];
-        };
-        acmCertificateArn: string;
-        sslSupportMethod: "sni-only" | "vip";
-    };
-    deployments: [{
-        name: string;
-        env: string;
-        variant: string;
-    }, {
-        name: string;
-        env: string;
-        variant: string;
-    }];
-    enabled?: boolean | undefined;
-}>>;
+    }, z.core.$strip>], null>;
+}, z.core.$strip>>;

package/pulumi/extensions/BlueGreenDeployments.js

@@ -1,13 +1,16 @@
 import { z } from "zod";
 import { defineExtension } from "@webiny/project/defineExtension/index.js";
+const nonEmptyStringArray = z.array(z.string()).nonempty().transform(item => {
+  return item;
+});
 const domainsSchema = z.object({
   acmCertificateArn: z.string(),
   sslSupportMethod: z.enum(["sni-only", "vip"]),
   domains: z.object({
-    api: z.array(z.string()).nonempty(),
-    admin: z.array(z.string()).nonempty(),
-    website: z.array(z.string()).nonempty(),
-    preview: z.array(z.string()).nonempty()
+    api: nonEmptyStringArray,
+    admin: nonEmptyStringArray,
+    website: nonEmptyStringArray,
+    preview: nonEmptyStringArray
   })
 });
 const deploymentSchema = z.object({