create-qpq-app 0.1.26 → 0.1.28

package/lib/esm/steps/index.js

@@ -4,13 +4,14 @@ import { deleteDocusaurus } from './003_deleteDocusaurus';
 import { deleteQpqjsApp } from './004_deleteQpqjsApp';
 import { applyAppIdentity } from './005_applyAppIdentity';
 import { applyDomain } from './006_applyDomain';
-import { pinRegistryVersions } from './007_pinRegistryVersions';
-import { transpileToJavaScript } from './008_transpileToJavaScript';
-import { restoreGitignore } from './009_restoreGitignore';
-import { gitInit } from './010_gitInit';
-import { npmInstall } from './011_npmInstall';
-import { buildWorkspaces } from './012_buildWorkspaces';
-import { printNextSteps } from './013_printNextSteps';
+import { applyDockerHost } from './007_applyDockerHost';
+import { pinRegistryVersions } from './008_pinRegistryVersions';
+import { transpileToJavaScript } from './009_transpileToJavaScript';
+import { restoreGitignore } from './010_restoreGitignore';
+import { gitInit } from './011_gitInit';
+import { npmInstall } from './012_npmInstall';
+import { buildWorkspaces } from './013_buildWorkspaces';
+import { printNextSteps } from './014_printNextSteps';
 // The pipeline: always this list, always this order; the numeric file
 // prefixes match, so the steps directory reads top to bottom. Steps decide
 // for themselves (shouldRun) whether the collected answers apply to them.
@@ -21,6 +22,7 @@ export const createQpqAppSteps = [
     deleteQpqjsApp,
     applyAppIdentity,
     applyDomain,
+    applyDockerHost,
     pinRegistryVersions,
     transpileToJavaScript,
     restoreGitignore,
@@ -29,5 +31,5 @@ export const createQpqAppSteps = [
     buildWorkspaces,
     printNextSteps,
 ];
-export { applyAppIdentity, applyDomain, buildWorkspaces, copyTemplate, deleteDocusaurus, deleteQpqjsApp, gitInit, npmInstall, pinRegistryVersions, preflight, printNextSteps, restoreGitignore, transpileToJavaScript, };
+export { applyAppIdentity, applyDockerHost, applyDomain, buildWorkspaces, copyTemplate, deleteDocusaurus, deleteQpqjsApp, gitInit, npmInstall, pinRegistryVersions, preflight, printNextSteps, restoreGitignore, transpileToJavaScript, };
 //# sourceMappingURL=index.js.map

package/lib/esm/steps/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/steps/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,sEAAsE;AACtE,2EAA2E;AAC3E,0EAA0E;AAC1E,MAAM,CAAC,MAAM,iBAAiB,GAAuB;IACnD,SAAS;IACT,YAAY;IACZ,gBAAgB;IAChB,cAAc;IACd,gBAAgB;IAChB,WAAW;IACX,mBAAmB;IACnB,qBAAqB;IACrB,gBAAgB;IAChB,OAAO;IACP,UAAU;IACV,eAAe;IACf,cAAc;CACf,CAAC;AAEF,OAAO,EACL,gBAAgB,EAChB,WAAW,EACX,eAAe,EACf,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,OAAO,EACP,UAAU,EACV,mBAAmB,EACnB,SAAS,EACT,cAAc,EACd,gBAAgB,EAChB,qBAAqB,GACtB,CAAC","sourcesContent":["import { CreateQpqAppStep } from '../types';\nimport { preflight } from './001_preflight';\nimport { copyTemplate } from './002_copyTemplate';\nimport { deleteDocusaurus } from './003_deleteDocusaurus';\nimport { deleteQpqjsApp } from './004_deleteQpqjsApp';\nimport { applyAppIdentity } from './005_applyAppIdentity';\nimport { applyDomain } from './006_applyDomain';\nimport { pinRegistryVersions } from './007_pinRegistryVersions';\nimport { transpileToJavaScript } from './008_transpileToJavaScript';\nimport { restoreGitignore } from './009_restoreGitignore';\nimport { gitInit } from './010_gitInit';\nimport { npmInstall } from './011_npmInstall';\nimport { buildWorkspaces } from './012_buildWorkspaces';\nimport { printNextSteps } from './013_printNextSteps';\n\n// The pipeline: always this list, always this order; the numeric file\n// prefixes match, so the steps directory reads top to bottom. Steps decide\n// for themselves (shouldRun) whether the collected answers apply to them.\nexport const createQpqAppSteps: CreateQpqAppStep[] = [\n  preflight,\n  copyTemplate,\n  deleteDocusaurus,\n  deleteQpqjsApp,\n  applyAppIdentity,\n  applyDomain,\n  pinRegistryVersions,\n  transpileToJavaScript,\n  restoreGitignore,\n  gitInit,\n  npmInstall,\n  buildWorkspaces,\n  printNextSteps,\n];\n\nexport {\n  applyAppIdentity,\n  applyDomain,\n  buildWorkspaces,\n  copyTemplate,\n  deleteDocusaurus,\n  deleteQpqjsApp,\n  gitInit,\n  npmInstall,\n  pinRegistryVersions,\n  preflight,\n  printNextSteps,\n  restoreGitignore,\n  transpileToJavaScript,\n};\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/steps/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,sEAAsE;AACtE,2EAA2E;AAC3E,0EAA0E;AAC1E,MAAM,CAAC,MAAM,iBAAiB,GAAuB;IACnD,SAAS;IACT,YAAY;IACZ,gBAAgB;IAChB,cAAc;IACd,gBAAgB;IAChB,WAAW;IACX,eAAe;IACf,mBAAmB;IACnB,qBAAqB;IACrB,gBAAgB;IAChB,OAAO;IACP,UAAU;IACV,eAAe;IACf,cAAc;CACf,CAAC;AAEF,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,WAAW,EACX,eAAe,EACf,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,OAAO,EACP,UAAU,EACV,mBAAmB,EACnB,SAAS,EACT,cAAc,EACd,gBAAgB,EAChB,qBAAqB,GACtB,CAAC","sourcesContent":["import { CreateQpqAppStep } from '../types';\nimport { preflight } from './001_preflight';\nimport { copyTemplate } from './002_copyTemplate';\nimport { deleteDocusaurus } from './003_deleteDocusaurus';\nimport { deleteQpqjsApp } from './004_deleteQpqjsApp';\nimport { applyAppIdentity } from './005_applyAppIdentity';\nimport { applyDomain } from './006_applyDomain';\nimport { applyDockerHost } from './007_applyDockerHost';\nimport { pinRegistryVersions } from './008_pinRegistryVersions';\nimport { transpileToJavaScript } from './009_transpileToJavaScript';\nimport { restoreGitignore } from './010_restoreGitignore';\nimport { gitInit } from './011_gitInit';\nimport { npmInstall } from './012_npmInstall';\nimport { buildWorkspaces } from './013_buildWorkspaces';\nimport { printNextSteps } from './014_printNextSteps';\n\n// The pipeline: always this list, always this order; the numeric file\n// prefixes match, so the steps directory reads top to bottom. Steps decide\n// for themselves (shouldRun) whether the collected answers apply to them.\nexport const createQpqAppSteps: CreateQpqAppStep[] = [\n  preflight,\n  copyTemplate,\n  deleteDocusaurus,\n  deleteQpqjsApp,\n  applyAppIdentity,\n  applyDomain,\n  applyDockerHost,\n  pinRegistryVersions,\n  transpileToJavaScript,\n  restoreGitignore,\n  gitInit,\n  npmInstall,\n  buildWorkspaces,\n  printNextSteps,\n];\n\nexport {\n  applyAppIdentity,\n  applyDockerHost,\n  applyDomain,\n  buildWorkspaces,\n  copyTemplate,\n  deleteDocusaurus,\n  deleteQpqjsApp,\n  gitInit,\n  npmInstall,\n  pinRegistryVersions,\n  preflight,\n  printNextSteps,\n  restoreGitignore,\n  transpileToJavaScript,\n};\n"]}

package/lib/esm/types/CreateQpqAppAnswers.d.ts

@@ -3,6 +3,8 @@ export type CreateQpqAppAnswers = {
     appName: string;
     language: AppLanguage;
     domain: string;
+    dockerRegistry: string;
+    dockerHost: string;
     initialiseGit: boolean;
     installDependencies: boolean;
 };

package/lib/esm/types/CreateQpqAppAnswers.js.map

@@ -1 +1 @@
-{"version":3,"file":"CreateQpqAppAnswers.js","sourceRoot":"","sources":["../../../src/types/CreateQpqAppAnswers.ts"],"names":[],"mappings":"","sourcesContent":["import { AppLanguage } from './AppLanguage';\n\n// Everything the pipeline needs to know, collected ONCE (flags first, prompts\n// for whatever is still missing) before any step runs: steps never prompt.\nexport type CreateQpqAppAnswers = {\n  appName: string;\n  language: AppLanguage;\n  domain: string;\n  initialiseGit: boolean;\n  installDependencies: boolean;\n};\n"]}
+{"version":3,"file":"CreateQpqAppAnswers.js","sourceRoot":"","sources":["../../../src/types/CreateQpqAppAnswers.ts"],"names":[],"mappings":"","sourcesContent":["import { AppLanguage } from './AppLanguage';\n\n// Everything the pipeline needs to know, collected ONCE (flags first, prompts\n// for whatever is still missing) before any step runs: steps never prompt.\nexport type CreateQpqAppAnswers = {\n  appName: string;\n  language: AppLanguage;\n  domain: string;\n  // Docker registry the image is pushed to ('' = local docker store only).\n  dockerRegistry: string;\n  // Address browsers use for the docker host ('' = localhost).\n  dockerHost: string;\n  initialiseGit: boolean;\n  installDependencies: boolean;\n};\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-qpq-app",
-  "version": "0.1.26",
+  "version": "0.1.28",
   "description": "Scaffold a new quidproquo app: npx create-qpq-app my-app",
   "main": "./lib/commonjs/index.js",
   "module": "./lib/esm/index.js",
@@ -55,7 +55,7 @@
   },
   "devDependencies": {
     "@types/node": "^22.13.13",
-    "quidproquo-tsconfig": "0.1.26"
+    "quidproquo-tsconfig": "0.1.28"
   },
   "bin": {
     "create-qpq-app": "./lib/commonjs/bin/createQpqApp.js"

package/template/README.md

@@ -28,7 +28,8 @@ curl -H "Host: qpqjs.development.localhost" http://localhost:8080/api/shell/v1/h
 
 ```
 apps/<app>/                       # qpqjs
-  deploy.config.json              # { "prefix", "environments" }: deploy identity per environment
+  deploy.config.json              # { "deployments": { "<name>": { platform, name, environment, ... } } }
+  devServer.config.ts             # optional: dev server ports (also the docker image's) + local QPQ config overrides
   tsconfig.federated.json         # generated by `npm run prep`: cross-view type aliases
   packages/                       # app-wide libs (config, constants, service-utils)
   services/<svc>/
@@ -48,7 +49,7 @@ There is no tools/ directory. All build, dev, and deploy orchestration ships in
 
 - **Libraries** build to their own `dist/` with `tsc -b` (TypeScript project references, so only what changed rebuilds). Each lib's `package.json` `main`, `types`, and `exports` point at `dist/src`, and npm workspaces symlink it into `node_modules/@qpqjs/*`, so imports resolve like any npm package. Libs build before services because the root `workspaces` array lists all lib globs ahead of `apps/*/services/*/service`.
 - **Service backends** are bundled to AWS Lambda by Rspack, programmatically at deploy time (`qpq go` calls `getServiceRspackConfig` from `quidproquo-deploy-rspack`). There are no per-service `rspack.config.ts` files or `bundle` scripts, and a service's `build` script only type-checks.
-- **Views** are microfrontends built by Rspack and `@module-federation/enhanced`. There are no per-view federation config files: exposes are computed at build time from `// federated.export` markers, and remotes are discovered from sibling views packages (dev port from each service's `defineDevServerOptions({ port })` in its `infrastructure.ts`). The only generated artifact is `apps/<app>/tsconfig.federated.json`, regenerated with `npm run prep` after adding or removing a marker.
+- **Views** are microfrontends built by Rspack and `@module-federation/enhanced`. There are no per-view federation config files: exposes are computed at build time from `// federated.export` markers, and remotes are discovered from sibling views packages (dev port from each service's `defineDevServerOptions({ views: { port } })` in its `infrastructure.ts`). The only generated artifact is `apps/<app>/tsconfig.federated.json`, regenerated with `npm run prep` after adding or removing a marker.
 - **The dev server** (`npx qpq go:dev:api`, powered by `quidproquo-dev-server`) loads each service's `infrastructure.ts` directly, so no synth is needed, just built libs. Its bundle externalizes `node_modules` (an externals function in its rspack config) so native modules like `sqlite3` load at runtime from their install location.
 - **The `admin` service** owns the log and admin backbone. Every service's config references `defineAdminSettings(Admin, …)` and `logServiceName: Admin`, so the dev server resolves log globals from the `admin` module. Running a single service without `admin` spams `Global config qpq-log-retention-days not found`.
 
@@ -93,7 +94,7 @@ npx qpq go             # interactive aws deploy: pick app, services, stacks (inf
                        # bundles (rspack production), cdk deploy, and s3 sync per phase
 ```
 
-`qpq go` needs AWS credentials plus a deploy identity: either an `"environments"` map in `apps/<app>/deploy.config.json` (`{ "prefix", "environments": { "<env>": { "accountId", "region" } } }`, selected with `--env <name>`) or the legacy `ENVIRONMENT` and `AWS_DEFAULT_*` env vars. App-specific bootstrap and account extras live in `apps/<app>/bootstrap.qpq.ts` and `apps/<app>/account.qpq.ts` as config fragments; the identity plumbing is provided by the generic CDK app in `quidproquo-deploy-awscdk`.
+`qpq go` needs AWS credentials plus a deployment: an entry in `apps/<app>/deploy.config.json` selected with `--deployment <name>`. Each entry is the whole story for that target (`platform`, `name`, `environment`, optional `feature`, `platformSettings` such as `accountId`/`region` for aws, and optional string `settings` that reach `infrastructure.ts` through `getDeploySetting`). The file is the source of truth: no env var or flag overrides it, so to change a target you edit the file or add an entry. Service configs read the primed `APPLICATION_NAME`, `ENVIRONMENT` and `FEATURE_NAME` env vars. App-specific bootstrap and account extras live in `apps/<app>/bootstrap.qpq.ts` and `apps/<app>/account.qpq.ts` as config fragments; the identity plumbing is provided by the generic CDK app in `quidproquo-deploy-awscdk`.
 
 - Production views bundles get prod remote URLs (the `views` host on the primary root, under the app's domain resolver) derived from the service's qpq config. Dev bundles use localhost ports.
 - `cdk.context.json` at the repo root is CDK's regenerable Route53 lookup cache. It is written on the first deploy, and checking it in means later synths need no live AWS lookups.

package/template/apps/qpqjs/bootstrap.qpq.ts

@@ -6,6 +6,7 @@ import {
   defineApi,
   defineDns,
   defineEmailReceivingDomain,
+  getDeploySettingList,
   QPQConfig,
 } from 'quidproquo';
 import {
@@ -17,10 +18,10 @@ import {
 } from 'quidproquo-config-aws';
 import { QpqAppDeployContext } from 'quidproquo-deploy-awscdk';
 
-import { QPQJS_DOMAINS, QpqjsServiceEnum } from '@qpqjs/constants';
+import { QpqjsServiceEnum } from '@qpqjs/constants';
 
 export default ({ region }: QpqAppDeployContext): QPQConfig => [
-  defineDns(QPQJS_DOMAINS),
+  defineDns(getDeploySettingList('ROOT_DOMAINS')),
 
   // inbox.<env>.<root>: verified with SES and MX-routed to it, for every defineEmailReceiver.
   defineEmailReceivingDomain('inbox'),

package/template/apps/qpqjs/deploy.config.json

@@ -1,23 +1,56 @@
 {
-  "prefix": "qpqjs",
-  "environments": {
+  "deployments": {
     "development": {
       "platform": "aws",
-      "accountId": "061039804449",
-      "region": "ap-southeast-2"
+      "name": "qpqjs",
+      "environment": "development",
+      "platformSettings": {
+        "accountId": "061039804449",
+        "region": "ap-southeast-2"
+      },
+      "settings": {
+        "ROOT_DOMAINS": "quidproquojs.com, qpqjs.com"
+      }
     },
     "staging": {
       "platform": "aws",
-      "accountId": "061039804449",
-      "region": "us-east-1"
+      "name": "qpqjs",
+      "environment": "staging",
+      "platformSettings": {
+        "accountId": "061039804449",
+        "region": "us-east-1"
+      },
+      "settings": {
+        "ROOT_DOMAINS": "quidproquojs.com, qpqjs.com"
+      }
     },
     "production": {
       "platform": "aws",
-      "accountId": "761018864142",
-      "region": "ap-southeast-2"
+      "name": "qpqjs",
+      "environment": "production",
+      "platformSettings": {
+        "accountId": "761018864142",
+        "region": "ap-southeast-2"
+      },
+      "settings": {
+        "ROOT_DOMAINS": "quidproquojs.com, qpqjs.com"
+      }
     },
     "local": {
-      "platform": "docker"
+      "platform": "docker",
+      "name": "qpqjs",
+      "environment": "local",
+      "settings": {
+        "ROOT_DOMAINS": "quidproquojs.com, qpqjs.com"
+      },
+      "platformSettings": {
+        "portMappings": "80:8080, 8888:8888, 3001:3001, 3090:3090",
+        "registry": "192.168.8.88:5000",
+        "arch": "linux/amd64",
+        "tag": "latest",
+        "publicHost": "192.168.8.88",
+        "dataPath": "/mnt/user/appdata/qpq-qpqjs"
+      }
     }
   }
 }

package/template/apps/qpqjs/devServer.config.ts

@@ -0,0 +1,13 @@
+import { DevServerConfigOverrides } from 'quidproquo-dev-server';
+
+// App-level dev server settings. The ports are the same locally and inside the docker image,
+// so a url that works against `npm run dev` works against the deployed container too.
+const devServerConfig: DevServerConfigOverrides = {
+  ports: {
+    api: 8080,
+    webSocket: 8888,
+    fileStorage: 3001,
+  },
+};
+
+export default devServerConfig;

package/template/apps/qpqjs/packages/constants/src/index.ts

@@ -1,4 +1,3 @@
-export * from './domain';
 export * from './QpqjsServiceEnum';
 export * from './smokeProbe';
 export * from './userDirectory';

package/template/apps/qpqjs/packages/service-utils/src/defineQpqjsService.ts

@@ -8,6 +8,7 @@ import {
   defineDns,
   defineEmailReceivingDomain,
   defineFrontendBundleOptions,
+  getDeploySettingList,
   QPQConfig,
 } from 'quidproquo';
 import {
@@ -16,6 +17,7 @@ import {
   defineAwsDataStoreRemovalPolicy,
   defineAwsServiceAccountInfo,
   defineWafProtection,
+  getAwsServiceAccountInfosForDeployments,
 } from 'quidproquo-config-aws';
 import {
   defineAdminSettings,
@@ -25,17 +27,17 @@ import {
 
 import { execSync } from 'child_process';
 import {
-  QPQJS_DOMAINS,
   QPQJS_USER_DIRECTORY,
   QpqjsServiceEnum,
   qpqjsServiceNames,
 } from '@qpqjs/constants';
 
-const productionAccountId = '761018864142';
-const stagingAccountId = '761018864142';
-const developmentAccountId = '061039804449';
-const modulePrefix = 'qpqjs';
-const developerNames: string[] = [];
+// Identity comes from the selected deployment in deploy.config.json, primed by the CLI.
+const modulePrefix = process.env.APPLICATION_NAME!;
+
+// Deployments (by name in deploy.config.json) whose services this one may reach
+// across accounts. Add a developer's feature deployment here to share with it.
+const crossDeploymentNames = ['production', 'staging'];
 
 export const defineQpqjsService = (
   service: QpqjsServiceEnum,
@@ -50,7 +52,7 @@ export const defineQpqjsService = (
     process.env.ENVIRONMENT!,
     configRoot,
     apiBuildPath,
-    process.env.ACTOR_NAME
+    process.env.FEATURE_NAME
   ),
 
   defineApplicationVersion(
@@ -59,7 +61,8 @@ export const defineQpqjsService = (
       .trim()}-${new Date().toISOString()}`
   ),
 
-  defineDns(QPQJS_DOMAINS),
+  // Root domains come from the deployment's ROOT_DOMAINS setting, primary first.
+  defineDns(getDeploySettingList('ROOT_DOMAINS')),
   // Same domain bootstrap.qpq.ts declares: bootstrap owns the records, a service's
   // defineEmailReceiver resolves its recipients from it.
   defineEmailReceivingDomain('inbox'),
@@ -76,27 +79,7 @@ export const defineQpqjsService = (
     process.env.AWS_DEFAULT_ACCOUNT!,
     process.env.AWS_DEFAULT_REGION!,
 
-    qpqjsServiceNames.flatMap((crossServiceName) => [
-      {
-        environment: 'production',
-        moduleName: crossServiceName,
-        awsAccountId: productionAccountId,
-        awsRegion: process.env.AWS_DEFAULT_REGION!,
-      },
-      {
-        environment: 'staging',
-        moduleName: crossServiceName,
-        awsAccountId: stagingAccountId,
-        awsRegion: process.env.AWS_DEFAULT_REGION!,
-      },
-      ...developerNames.map((actorName) => ({
-        environment: 'development',
-        moduleName: crossServiceName,
-        feature: actorName,
-        awsAccountId: developmentAccountId,
-        awsRegion: process.env.AWS_DEFAULT_REGION!,
-      })),
-    ]),
+    getAwsServiceAccountInfosForDeployments(crossDeploymentNames, qpqjsServiceNames),
     {
       apiLayers,
       lambdaMaxMemoryInMiB: lambdaMemoryInMiB,

package/template/apps/qpqjs/services/admin/service/src/infrastructure.ts

@@ -4,7 +4,7 @@ import { QpqjsServiceEnum } from '@qpqjs/constants';
 import { defineQpqjsService } from '@qpqjs/service-utils';
 
 export default [
-  defineDevServerOptions({ port: 3082 }),
+  defineDevServerOptions({ views: { port: 3082 } }),
 
   // never change the app name, it will result in a new stack!
   defineQpqjsService(

package/template/apps/qpqjs/services/admin/views/src/app/app.tsx

@@ -1,30 +1,20 @@
+import {
+  getApiUrl,
+  getFederatedViewsUrl,
+  getWebSocketUrl,
+} from 'quidproquo-web';
 import { App as QpqAdminApp } from 'quidproquo-web-admin';
 import { BaseUrlResolvers } from 'quidproquo-web-react';
 
 import { QpqjsServiceEnum } from '@qpqjs/constants';
 
-export const getApiBaseUrl = () => {
-  const [_views, ...domainParts] = window.location.host.split('.');
-  const domain = domainParts.join('.');
+export const getApiBaseUrl = () => getApiUrl(QpqjsServiceEnum.Admin);
 
-  return window.location.hostname !== 'localhost'
-    ? `${window.location.protocol}//api.${domain}/${QpqjsServiceEnum.Admin}`
-    : `http://localhost:8080/api/${QpqjsServiceEnum.Admin}`;
-};
-
-export const getWsBaseUrl = () => {
-  const [_views, ...domainParts] = window.location.host.split('.');
-  const domain = domainParts.join('.');
-
-  return window.location.hostname !== 'localhost'
-    ? `wss://qpqadmin.${QpqjsServiceEnum.Admin}.${domain}`
-    : `ws://localhost:8888/${QpqjsServiceEnum.Admin}/qpqadmin`;
-};
+export const getWsBaseUrl = () =>
+  getWebSocketUrl(QpqjsServiceEnum.Admin, 'qpqadmin');
 
 export const getMFManifestBaseUrl = () =>
-  window.location.hostname !== 'localhost'
-    ? `${window.location.origin}${window.location.pathname.substring(0, window.location.pathname.lastIndexOf('/'))}`
-    : `http://localhost:3082`;
+  getFederatedViewsUrl(QpqjsServiceEnum.Admin);
 
 const urlResolvers: BaseUrlResolvers = {
   getApiUrl: getApiBaseUrl,

package/template/apps/qpqjs/services/design/service/src/infrastructure.ts

@@ -4,7 +4,7 @@ import { QpqjsServiceEnum } from '@qpqjs/constants';
 import { defineQpqjsService } from '@qpqjs/service-utils';
 
 export default [
-  defineDevServerOptions({ port: 3081 }),
+  defineDevServerOptions({ views: { port: 3081 } }),
 
   // never change the app name, it will result in a new stack!
   defineQpqjsService(

package/template/apps/qpqjs/services/design/views/src/components/LandingPage/components/NavBar.tsx

@@ -1,14 +1,6 @@
-// Docs live on the docs. subdomain of whatever apex this page is served from
-// (minus the views. prefix on federated views); localhost falls back to prod.
-const getDocsUrl = (): string => {
-  const { hostname, protocol, host } = window.location;
+import { getWebEntryUrl } from 'quidproquo-web';
 
-  if (hostname === 'localhost' || hostname.endsWith('.localhost')) {
-    return 'https://docs.quidproquojs.com';
-  }
-
-  return `${protocol}//docs.${host.replace(/^views\./, '')}`;
-};
+const getDocsUrl = (): string => getWebEntryUrl('docs');
 
 export function NavBar() {
   return (

package/template/apps/qpqjs/services/design/views/src/components/WelcomeScreen/WelcomeScreen.tsx

@@ -1,5 +1,7 @@
 // federated.export: This file will be exported using module federation
 
+import { getApiUrl } from 'quidproquo-web';
+
 import { type CSSProperties, useState } from 'react';
 
 const containerStyle: CSSProperties = {
@@ -39,17 +41,7 @@ const resultStyle: CSSProperties = {
   color: '#1a2733',
 };
 
-// The shell API: the local QPQ dev server when running on localhost, otherwise
-// api.<domain root> (the page host, minus the views. prefix on remote views).
-const getShellApiBaseUrl = (): string => {
-  const { hostname, protocol, host } = window.location;
-
-  if (hostname === 'localhost' || hostname.endsWith('.localhost')) {
-    return 'http://localhost:8080/api/shell';
-  }
-
-  return `${protocol}//api.${host.replace(/^views\./, '')}/shell`;
-};
+const getShellApiBaseUrl = (): string => getApiUrl('shell');
 
 export const WelcomeScreen = () => {
   const [healthResult, setHealthResult] = useState<string | null>(null);

package/template/apps/qpqjs/services/shell/service/src/infrastructure.ts

@@ -67,7 +67,11 @@ const docsWebEntryOptions: QPQConfigAdvancedWebEntrySettings = {
 };
 
 export default [
-  defineDevServerOptions({ port: 3080 }),
+  defineDevServerOptions({
+    views: { port: 3080 },
+    // The docker image hosts the docs site on this port; AWS gives it docs.<domain>.
+    webEntries: { docs: { port: 3090 } },
+  }),
 
   // never change the app name, it will result in a new stack!
   defineQpqjsService(

package/template/apps/qpqjs/services/test/models/src/SmokeProbeRecord.ts

@@ -12,6 +12,9 @@ export type SmokeProbeRecord = {
   scope?: string;
   ambientScope?: string;
   path?: string;
+  // Set by the kvs stream handler: the attribute names on the record's image,
+  // so a test can prove no backend bookkeeping attribute reaches a handler.
+  imageAttributes?: string[];
   // Set by the email handler: the provider's spf/dkim verdicts on the message.
   authentication?: string;
 };

package/template/apps/qpqjs/services/test/service/src/infrastructure.ts

@@ -3,12 +3,10 @@ import { defineDevServerOptions } from 'quidproquo-dev-server/config';
 import { QpqjsServiceEnum } from '@qpqjs/constants';
 import { defineQpqjsService } from '@qpqjs/service-utils';
 
-import { defineEcho } from './echo/config/defineEcho';
 import { defineSmoke } from './smoke/config/defineSmoke';
-import { defineTick } from './tick/config/defineTick';
 
 export default [
-  defineDevServerOptions({ port: 3083 }),
+  defineDevServerOptions({ views: { port: 3083 } }),
 
   // never change the app name, it will result in a new stack!
   defineQpqjsService(
@@ -18,8 +16,4 @@ export default [
   ),
 
   defineSmoke(),
-
-  defineEcho(),
-
-  defineTick(),
 ];