create-qpq-app 0.1.26 → 0.1.28

package/template/docusaurus/docs/actions/core/key-value-store/ask-key-value-store-query.md

@@ -52,6 +52,7 @@ function* askKeyValueStoreQuery<KvsItem>(
 | Property | Type | Default | Description |
 | --- | --- | --- | --- |
 | `filter` | `KvsQueryOperation` | – | An extra condition applied to non-key attributes **after** the key match. Filtered-out rows still count against `limit`. |
+| `indexName` | `string` | – | Force the query onto the [index](../../../config/core/key-value-store.md#indexes-gsis) declared with this name, read in its sort order. Without it, the table serves the query if its keys cover the key condition, otherwise the first declared index whose keys do — so an index sharing the table's keys is only reached by naming it here. An undeclared name throws `IndexNotFound`. |
 | `sortAscending` | `boolean` | `true` | Order results by the sort key. `false` returns the newest/highest first. |
 | `limit` | `number` | – | Maximum number of records to return in this page. |
 | `nextPageKey` | `string` | – | Opaque cursor from a previous page's `nextPageKey`; pass it to fetch the following page. |
@@ -118,8 +119,9 @@ When `nextPageKey` is set, pass it back as `options.nextPageKey` to fetch the ne
 | --- | --- |
 | `KeyValueStoreQueryErrorTypeEnum.ServiceUnavailable` | DynamoDB internal error or throttling. |
 | `KeyValueStoreQueryErrorTypeEnum.ResourceNotFound` | The underlying table does not exist. |
-| `KeyValueStoreQueryErrorTypeEnum.InvalidScope` | The `scope` option is malformed (empty, `.`, over 128 characters, or containing path separators, `..`, `@`, or null bytes), the store's partition key is not string-typed, a scoped query's key condition does not constrain the partition key (or constrains it with an operator that cannot be scoped), or a partition-key condition value contains the reserved `@@QPQSCOPE@@` delimiter (reserved on string-pk stores, so unscoped queries reject it too). |
+| `KeyValueStoreQueryErrorTypeEnum.InvalidScope` | The `scope` option is malformed (empty, `.`, over 128 characters, or containing path separators, `..`, `@`, or null bytes), the store's partition key is not string-typed, a scoped query's key condition does not constrain the partition key or an [index](../../../config/core/key-value-store.md#indexes-gsis) partition key (or constrains one with an operator that cannot be scoped: an index partition key only takes `=`), a condition names an attribute containing `@@QPQ`, an index partition-key condition value doesn't match that index's declared type, or a partition-key condition value contains the reserved `@@QPQ` marker (reserved on string-pk stores, so unscoped queries reject it too). |
 | `KeyValueStoreQueryErrorTypeEnum.StoreNotFound` | The key value store is not declared in the qpq config (misconfiguration, e.g. a wrong name or a missing `defineKeyValueStore`). |
+| `KeyValueStoreQueryErrorTypeEnum.IndexNotFound` | The `indexName` option names an index the store doesn't declare. |
 
 Catch errors with `askCatch` — it returns `{ success: true, result }` or `{ success: false, error }`.
 

package/template/docusaurus/docs/actions/core/key-value-store/ask-key-value-store-scan.md

@@ -70,7 +70,7 @@ When `nextPageKey` is set, pass it back as the third argument to fetch the next
 | --- | --- |
 | `KeyValueStoreScanErrorTypeEnum.ServiceUnavailable` | DynamoDB internal error or throttling. |
 | `KeyValueStoreScanErrorTypeEnum.ResourceNotFound` | The underlying table does not exist. |
-| `KeyValueStoreScanErrorTypeEnum.InvalidScope` | The `scope` option is malformed (empty, `.`, over 128 characters, or containing path separators, `..`, `@`, or null bytes), the store's partition key is not string-typed, or a scoped call's partition-key value contains the reserved `@@QPQSCOPE@@` delimiter. |
+| `KeyValueStoreScanErrorTypeEnum.InvalidScope` | The `scope` option is malformed (empty, `.`, over 128 characters, or containing path separators, `..`, `@`, or null bytes), the store's partition key is not string-typed, a scoped call's partition-key value contains the reserved `@@QPQ` marker, a scoped call's `filterCondition` names an attribute containing `@@QPQ`, or a scoped `filterCondition`'s partition-key comparison uses an operator that cannot be scoped. |
 | `KeyValueStoreScanErrorTypeEnum.StoreNotFound` | The key value store is not declared in the qpq config (misconfiguration, e.g. a wrong name or a missing `defineKeyValueStore`). |
 
 Catch errors with `askCatch` — it returns `{ success: true, result }` or `{ success: false, error }`.

package/template/docusaurus/docs/actions/core/key-value-store/ask-key-value-store-update.md

@@ -101,7 +101,7 @@ Each `path` is a `KvsAttributePath` — either a top-level attribute name (`'bal
 | --- | --- |
 | `KeyValueStoreUpdateErrorTypeEnum.ServiceUnavailable` | DynamoDB internal error or throttling. |
 | `KeyValueStoreUpdateErrorTypeEnum.ResourceNotFound` | The underlying table does not exist. |
-| `KeyValueStoreUpdateErrorTypeEnum.InvalidScope` | The `scope` option is malformed (empty, `.`, over 128 characters, or containing path separators, `..`, `@`, or null bytes), the store's partition key is not string-typed, or the partition-key value contains the reserved `@@QPQSCOPE@@` delimiter (reserved on string-pk stores, so unscoped calls reject it too). |
+| `KeyValueStoreUpdateErrorTypeEnum.InvalidScope` | The `scope` option is malformed (empty, `.`, over 128 characters, or containing path separators, `..`, `@`, or null bytes), the store's partition key is not string-typed, the partition-key value contains the reserved `@@QPQ` marker (reserved on string-pk stores, so unscoped calls reject it too), a scoped update names an attribute containing `@@QPQ`, or a scoped update targets an [index](../../../config/core/key-value-store.md#indexes-gsis) partition key with anything other than a whole-value `Set`/`SetIfNotExists`/`Remove` of the declared type (`Increment`, `Add`, `Delete`, and nested paths are refused). |
 | `KeyValueStoreUpdateErrorTypeEnum.StoreNotFound` | The key value store is not declared in the qpq config (misconfiguration, e.g. a wrong name or a missing `defineKeyValueStore`). |
 
 Catch errors with `askCatch` — it returns `{ success: true, result }` or `{ success: false, error }`.

package/template/docusaurus/docs/actions/core/key-value-store/ask-key-value-store-upsert.md

@@ -61,7 +61,7 @@ function* askKeyValueStoreUpsert<KvsItem>(
 | `KeyValueStoreUpsertErrorTypeEnum.ResourceNotFound` | The underlying table does not exist. |
 | `KeyValueStoreUpsertErrorTypeEnum.Conflict` | A conditional (`ifNotExists`) write lost to an existing item — final, the slot is taken. Namespaced — not the generic `ErrorTypeEnum.Conflict` — so retry logic can target the write race specifically without also catching domain-level conflicts. |
 | `KeyValueStoreUpsertErrorTypeEnum.WriteContention` | A conditional (`ifNotExists`) write lost to another write (a transaction) holding the item right now — transient, the item may still be absent once it settles. |
-| `KeyValueStoreUpsertErrorTypeEnum.InvalidScope` | The `scope` option is malformed (empty, `.`, over 128 characters, or containing path separators, `..`, `@`, or null bytes), the store's partition key is not string-typed, or the partition-key value contains the reserved `@@QPQSCOPE@@` delimiter (reserved on string-pk stores, so unscoped calls reject it too). |
+| `KeyValueStoreUpsertErrorTypeEnum.InvalidScope` | The `scope` option is malformed (empty, `.`, over 128 characters, or containing path separators, `..`, `@`, or null bytes), the store's partition key is not string-typed, the partition-key value contains the reserved `@@QPQ` marker (reserved on string-pk stores, so unscoped calls reject it too), a scoped item has an attribute name containing `@@QPQ`, or a scoped item's [index](../../../config/core/key-value-store.md#indexes-gsis) partition-key value doesn't match that index's declared type. |
 | `KeyValueStoreUpsertErrorTypeEnum.StoreNotFound` | The key value store is not declared in the qpq config (misconfiguration, e.g. a wrong name or a missing `defineKeyValueStore`). |
 
 Catch errors with `askCatch` — it returns `{ success: true, result }` or `{ success: false, error }`.

package/template/docusaurus/docs/config/core/key-value-store.md

@@ -83,7 +83,7 @@ defineKeyValueStore('events', kvsKey('deviceId'), [kvsKey('timestamp', 'number')
 
 ## Indexes (GSIs)
 
-Each entry in `options.indexes` is a `CompositeKvsIndex<T>` — either a bare attribute name (a partition-key-only index) or an object with a `partitionKey` and optional `sortKey`:
+Each entry in `options.indexes` is a `CompositeKvsIndex<T>` — either a bare attribute name (a partition-key-only index) or an object with a `partitionKey`, optional `sortKey`, and optional `name`:
 
 ```typescript
 import { defineKeyValueStore, kvsKey } from 'quidproquo-core';
@@ -94,11 +94,21 @@ defineKeyValueStore('orders', 'orderId', [], {
     { partitionKey: 'customerId', sortKey: kvsKey('createdAt', 'number') },
     // Query orders by status (partition-only index)
     'status',
+    // Two indexes on the same partition key need an explicit name
+    { name: 'byStatusAndTotal', partitionKey: 'status', sortKey: kvsKey('total', 'number') },
   ],
 });
 ```
 
-On AWS each index becomes a Global Secondary Index whose name is the index's partition-key attribute (`customerId`, `status` above).
+`name` defaults to the partition-key attribute (`customerId`, `status` above) and is what [askKeyValueStoreQuery](../../actions/core/key-value-store/ask-key-value-store-query.md)'s `indexName` option targets; `defineKeyValueStore` throws if two indexes resolve to the same name. On AWS each index becomes a Global Secondary Index deployed under this name.
+
+A query without `indexName` runs against the table if its keys cover every attribute in the key condition, otherwise the first declared index whose keys do.
+
+### Indexes on a scoped store
+
+A store with `scoped: true` (see [`scoped`](#options--qpqconfigadvancedkeyvaluestoresettingst-optional)) can still declare `indexes`. On AWS, an index whose partition key isn't the table's partition key is keyed on a hidden `@@QPQGSI_<attribute>@@` attribute holding the scope-composed value; the index keeps its declared name and sort key, and stories never see the hidden attribute. A scoped store's index partition key must be a `'string'` or `'number'` key, since a scope can't be composed onto a `'binary'` key — `defineKeyValueStore` throws at config time otherwise.
+
+Adding or removing an index on an already-deployed scoped store needs two deploys: remove the index and deploy, then re-add it and deploy. CloudFormation can't change a GSI's key schema in place, and rows written before the new index exists only appear in it once they're rewritten.
 
 ## Change data capture (`onStream`)
 

package/template/docusaurus/docs/config/features/event-doc.md

@@ -25,7 +25,7 @@ export default [
 
 ## Registering a collection's functions
 
-`functions` is an `EventDocFunctions` object: `{ storeName, type, foldSnapshotViews, foldDocumentState, collectReferences, collectReferencesFromState, validateEvent, render? }`. The object `createEventDocDefinition` returns — given `storeName`/`type` in its config — satisfies this shape directly, so a collection with no service-only render can register its definition verbatim. A collection that needs a render step only service code can perform (resolving linked docs, reading blob-drive assets) layers it on with `extendEventDocFunctions(definition, { render })`, which returns a new object and never mutates the definition itself.
+`functions` is an `EventDocFunctions` object: `{ storeName, type, getSnapshotCacheKey, foldSnapshotViews, foldDocumentState, collectReferences, collectReferencesFromState, validateEvent, render? }`. The object `createEventDocDefinition` returns — given `storeName`/`type` in its config — satisfies this shape directly, so a collection with no service-only render can register its definition verbatim. A collection that needs a render step only service code can perform (resolving linked docs, reading blob-drive assets) layers it on with `extendEventDocFunctions(definition, { render })`, which returns a new object and never mutates the definition itself.
 
 `runtime` is a [`QpqFunctionRuntime`](../core/dynamic-functions.md#runtime--qpqfunctionruntime-required) path to that SAME export — the dynamic-functions pattern: identity is read off the object here at config time, behaviour is loaded from the path by the processors at request time. Both must point at the exact object being registered, or the registration and the runtime will disagree about what the collection can do.
 
@@ -55,6 +55,7 @@ The collection's callable surface, read for its identity (`storeName`, `type`) a
 | --- | --- | --- | --- |
 | `storeName` | `string` | yes | Name of the summary store to create and serve. Also derives the events table and asset bucket names. |
 | `type` | `string` | yes | The document type this collection holds — the store's partition value, so one store can (via the split helpers) hold several types. |
+| `getSnapshotCacheKey` | `() => string` | yes | The key this collection's snapshots are filed under (see [Snapshot cache key](#snapshot-cache-key)). `''` is the legacy layout. A member rather than a value because the data layer reaches a definition only through dynamic functions. |
 | `foldSnapshotViews` | `(events, seedViews?) => Nullable<EventDocSnapshotViews>` | yes | Every view of a log prefix, era-pinned — what a snapshot stores. Invoked by the event store's stream projector (which also writes the summary row from the fold's `summary` view). |
 | `foldDocumentState` | `(events, seedState?) => unknown` | yes | The document view at one point, LATEST-shaped, resumable from a stored snapshot's era-pinned document state. The read side's fold: render, references, as-of reads, and the append hooks' state derivation all go through it. |
 | `collectReferences` | `(events) => EventDocLink[]` | yes | The `EventDocLink`s this doc's whole HISTORY depends on; `[]` for a leaf doc type. Invoked by the transfer manifest walk (it exports the whole history). |
@@ -62,6 +63,26 @@ The collection's callable surface, read for its identity (`storeName`, `type`) a
 | `validateEvent` | `(event, state) => Nullable<string> \| AskResponse<Nullable<string>>` | yes | The append pre-write gate: checked against the state the event will land on, before the write (see [askEventDocEventAppend](../../actions/features/event-doc/ask-event-doc-event-append.md)). Return a rejection reason string to refuse the append, `null` to allow it. A collection with no domain rules can pass `() => null`. |
 | `render` | `(input: EventDocRenderInput) => EventDocRenderResult \| AskResponse<EventDocRenderResult>` | no | Render the resolved, already-folded document state (`input.state`, resolved snapshot-seeded by the route). Omit and `GET {basePath}/{id}/render` 404s as "no renderer configured". Plain function or story — the dynamic-functions processor runs either. |
 
+#### Snapshot cache key
+
+A snapshot is a memo of "fold these events with this seed and reducer". The events are immutable, so the memo stays valid until the fold code changes. A change to the MEANING of existing events is a schema version bump with a migration. An additive change — a new defaulted field in a version's seed, a new event type, a new reducer case — needs no migration, but every stored snapshot is now the output of code you no longer run, and a reader resuming from one would see the old shape (a `undefined` where the new field should be).
+
+`snapshotCacheKey` on `createEventDocDefinition` names the fold code. It is part of the snapshot row's partition key (`docId#viewName#key`) and the offloaded blob's path, so after you change it every reader finds no snapshot, refolds the whole log from the seed, and the stream projector files a fresh snapshot under the new key on the document's next append. The bootstrap base handed to the editor carries the key too, so a workspace snapshot held in the browser across a deploy is refetched rather than trusted. Rows under an old key are left to persist.
+
+```typescript
+export const contentItemEventDoc = createEventDocDefinition({
+  storeName: CONTENT_STORE,
+  type: 'content',
+  schemaVersion: 1,
+  versions: [contentItemV1],
+  // Bump when v1's seed or reducer changes in place; every stored snapshot is then refolded.
+  snapshotCacheKey: '2026-09-23-image-assets',
+  api,
+});
+```
+
+Refolding is lazy: a document pays one whole-log fold per reader until its next append reprojects it. To pay that up front, an admin job can walk each collection's documents (inside each storage scope) and call `askEventDocReprojectHead(docId)`, which re-runs the projector at the log head under the current key.
+
 ### `runtime` — `QpqFunctionRuntime` (required)
 
 A reference to the module exporting `functions`, usually a relative path string of the form `'/path/to/file::exportedObjectName'` — see [defineDynamicFunctions](../core/dynamic-functions.md#runtime--qpqfunctionruntime-required). Must resolve to the SAME object passed as `functions`.

package/template/docusaurus/docs/getting-started.md

@@ -45,9 +45,9 @@ curl http://localhost:8080/api/shell/v1/health
 myapp/
 ├── package.json              # workspace root — run all commands from here
 └── apps/myapp/
-    ├── deploy.config.json    # environments: development + production (docker)
+    ├── deploy.config.json    # deployments: development + production (docker)
     ├── packages/
-    │   ├── constants/        # domain, service enum, user directory name
+    │   ├── constants/        # service enum, user directory name
     │   ├── config/
     │   └── service-utils/    # the shared config every service starts from
     └── services/
@@ -106,14 +106,14 @@ itself.
 
 ## Deploy it
 
-Both scaffolded environments deploy as a single docker image — the whole
+Both scaffolded deployments build a single docker image — the whole
 app, one container:
 
 ```bash
 npm run go
 ```
 
-Pick an environment when prompted (or pass `--env development`), and the
+Pick a deployment when prompted (or pass `--deployment development`), and the
 build prints the `docker run` command when the image is ready:
 
 ```bash
@@ -122,7 +122,7 @@ docker run --rm -p 80:8080 -p 8080:8080 -p 8888:8888 -p 3001:3001 \
   qpq-myapp:development
 ```
 
-Then open [http://localhost](http://localhost). Environments live in
+Then open [http://localhost](http://localhost). Deployments live in
 `apps/myapp/deploy.config.json` — an app can move platforms (docker → AWS)
 with a config change, not a rewrite.
 

package/template/scripts/deployedSmoke.mjs

@@ -11,13 +11,14 @@
 //   ACTIONS_ID_TOKEN_REQUEST_TOKEN  provided by Actions when the job has id-token: write
 //   SMOKE_ROOTS                     optional comma list to run a subset of the roots
 //
-// Urls are derived, not configured: the roots come from the app's constants
-// package (the same list every service's defineDns reads), hosts follow the
-// app's default domain shape (see getRootHosts), and the api gateway maps each
-// service under its own base path:
+// Urls are derived, not configured: the roots come from the deployment's
+// ROOT_DOMAINS setting in apps/qpqjs/deploy.config.json (the same list every
+// service's defineDns reads; the deployment is named after the environment),
+// hosts follow the app's default domain shape (see getRootHosts), and the api
+// gateway maps each service under its own base path:
 //   https://api.<environment>.<root>/<service>
 
-import { createRequire } from 'node:module';
+import { readFileSync } from 'node:fs';
 import { dirname, join } from 'node:path';
 import { fileURLToPath } from 'node:url';
 
@@ -25,10 +26,9 @@ import { getRootHosts, runEdgeChecks } from './smoke/runEdgeChecks.mjs';
 import { runSmokeRun } from './smoke/runSmokeRun.mjs';
 
 const SERVICE_NAME = 'test';
-// The built constants package: the deploy job builds the app before this runs.
-const DOMAIN_CONSTANTS_PATH = join(
+const DEPLOY_CONFIG_PATH = join(
   dirname(fileURLToPath(import.meta.url)),
-  '../apps/qpqjs/packages/constants/dist/src/domain.js'
+  '../apps/qpqjs/deploy.config.json'
 );
 
 const log = (message) => console.log(`deployed-smoke: ${message}`);
@@ -46,24 +46,29 @@ const requireEnv = (name) => {
   return value;
 };
 
-const getRoots = () => {
-  const { QPQJS_DOMAINS } = createRequire(import.meta.url)(
-    DOMAIN_CONSTANTS_PATH
-  );
-  if (!QPQJS_DOMAINS?.length) {
-    fail(`no QPQJS_DOMAINS in ${DOMAIN_CONSTANTS_PATH}; build the app first`);
+const splitList = (value) =>
+  (value ?? '')
+    .split(',')
+    .map((item) => item.trim())
+    .filter(Boolean);
+
+const getRoots = (environment) => {
+  const { deployments } = JSON.parse(readFileSync(DEPLOY_CONFIG_PATH, 'utf8'));
+  const allRoots = splitList(deployments[environment]?.settings?.ROOT_DOMAINS);
+  if (!allRoots.length) {
+    fail(
+      `deployment '${environment}' in ${DEPLOY_CONFIG_PATH} has no ROOT_DOMAINS setting`
+    );
   }
 
-  const subset = process.env.SMOKE_ROOTS?.split(',')
-    .map((root) => root.trim())
-    .filter(Boolean);
-  if (!subset?.length) {
-    return QPQJS_DOMAINS;
+  const subset = splitList(process.env.SMOKE_ROOTS);
+  if (!subset.length) {
+    return allRoots;
   }
 
-  const unknown = subset.filter((root) => !QPQJS_DOMAINS.includes(root));
+  const unknown = subset.filter((root) => !allRoots.includes(root));
   if (unknown.length > 0) {
-    fail(`SMOKE_ROOTS names roots not in QPQJS_DOMAINS: ${unknown.join(', ')}`);
+    fail(`SMOKE_ROOTS names roots not in ROOT_DOMAINS: ${unknown.join(', ')}`);
   }
   return subset;
 };
@@ -101,7 +106,7 @@ const smokeRoot = async (hosts, allHosts) => {
 };
 
 const environment = requireEnv('SMOKE_ENVIRONMENT');
-const roots = getRoots();
+const roots = getRoots(environment);
 const allHosts = roots.map((root) => getRootHosts(root, environment));
 
 log(`environment=${environment} roots=${roots.join(', ')}`);

package/template/scripts/localSmoke.mjs

@@ -30,10 +30,11 @@ import { fileURLToPath } from 'node:url';
 
 import { runSmokeRun } from './smoke/runSmokeRun.mjs';
 
-// The dev server defaults to this anyway; set explicitly so a CI runner that
-// already has ENVIRONMENT set (the deploy workflow does) cannot change what
-// the smoke routes expect from the token. Must match the job's `environment:`.
-const ENVIRONMENT = 'development';
+// The deployment (an entry in apps/qpqjs/deploy.config.json) the dev server
+// runs as. There are several, so it has to be named or a headless cli exits.
+// Its environment must match what the smoke routes expect from the token, i.e.
+// the job's `environment:`.
+const DEPLOYMENT = 'development';
 
 // There is more than one app under apps/, so the app has to be named: without
 // it the cli exits with the app list rather than picking one.
@@ -134,7 +135,7 @@ const stopServer = (server) =>
   });
 
 const main = async () => {
-  log(`starting dev server (app=${APP_NAME} env=${ENVIRONMENT})`);
+  log(`starting dev server (app=${APP_NAME} deployment=${DEPLOYMENT})`);
 
   // node on the cli directly, NOT `npx qpq`: npx is another process in front
   // of the one we need to signal, and SIGTERM stops at it. The cli would never
@@ -143,11 +144,10 @@ const main = async () => {
   // the handler is.
   const server = spawn(
     process.execPath,
-    [QPQ_BIN, 'go:dev:api', '--app', APP_NAME],
+    [QPQ_BIN, 'go:dev:api', '--app', APP_NAME, '--deployment', DEPLOYMENT],
     {
       cwd: APP_ROOT,
       stdio: 'inherit',
-      env: { ...process.env, ENVIRONMENT },
     }
   );
 

package/lib/commonjs/lib/replaceInFileExact.d.ts

@@ -1 +0,0 @@
-export declare const replaceInFileExact: (filePath: string, from: string, to: string) => void;

package/lib/commonjs/lib/replaceInFileExact.js

@@ -1,18 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.replaceInFileExact = void 0;
-const fs_1 = __importDefault(require("fs"));
-// Replace an exact string in one file, throwing if it isn't there. Targeted
-// edits should fail loudly when the template drifts.
-const replaceInFileExact = (filePath, from, to) => {
-    const original = fs_1.default.readFileSync(filePath, 'utf8');
-    if (!original.includes(from)) {
-        throw new Error(`Expected to find "${from}" in ${filePath}. Has the template changed?`);
-    }
-    fs_1.default.writeFileSync(filePath, original.split(from).join(to));
-};
-exports.replaceInFileExact = replaceInFileExact;
-//# sourceMappingURL=replaceInFileExact.js.map

package/lib/commonjs/lib/replaceInFileExact.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"replaceInFileExact.js","sourceRoot":"","sources":["../../../src/lib/replaceInFileExact.ts"],"names":[],"mappings":";;;;;;AAAA,4CAAoB;AAEpB,4EAA4E;AAC5E,qDAAqD;AAC9C,MAAM,kBAAkB,GAAG,CAAC,QAAgB,EAAE,IAAY,EAAE,EAAU,EAAQ,EAAE;IACrF,MAAM,QAAQ,GAAG,YAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,QAAQ,QAAQ,6BAA6B,CAAC,CAAC;IAC1F,CAAC;IACD,YAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;AAC5D,CAAC,CAAC;AANW,QAAA,kBAAkB,sBAM7B","sourcesContent":["import fs from 'fs';\n\n// Replace an exact string in one file, throwing if it isn't there. Targeted\n// edits should fail loudly when the template drifts.\nexport const replaceInFileExact = (filePath: string, from: string, to: string): void => {\n  const original = fs.readFileSync(filePath, 'utf8');\n  if (!original.includes(from)) {\n    throw new Error(`Expected to find \"${from}\" in ${filePath}. Has the template changed?`);\n  }\n  fs.writeFileSync(filePath, original.split(from).join(to));\n};\n"]}

package/lib/commonjs/steps/013_printNextSteps.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"013_printNextSteps.js","sourceRoot":"","sources":["../../../src/steps/013_printNextSteps.ts"],"names":[],"mappings":";;;;;;;;;;;;AAEa,QAAA,cAAc,GAAqB;IAC9C,IAAI,EAAE,MAAM;IAEZ,GAAG,EAAE,KAAoB,EAAE,4CAAf,EAAE,OAAO,EAAE;QACrB,MAAM,OAAO,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,kCAAkC,CAAC;QAEtF,OAAO,CAAC,GAAG,CAAC;UACN,OAAO,CAAC,OAAO;;;;;;;OAOlB,OAAO,CAAC,OAAO;EACpB,OAAO;;;8BAGqB,OAAO,CAAC,OAAO,oCAAoC,OAAO,CAAC,MAAM;CAC9F,CAAC,CAAC;IACD,CAAC,CAAA;CACF,CAAC","sourcesContent":["import { CreateQpqAppStep } from '../types';\n\nexport const printNextSteps: CreateQpqAppStep = {\n  name: 'Done',\n\n  run: async ({ answers }) => {\n    const install = answers.installDependencies ? '' : '  npm install\\n  npm run build\\n';\n\n    console.log(`\nCreated ${answers.appName}!\n\nYour app has five services (admin, auth, design, shell and todo) and\ndeploys as a single docker image.\n\nNext steps:\n\n  cd ${answers.appName}\n${install}  npm run dev        # api on http://localhost:8080, web on http://localhost:3080\n  npm run deploy     # build the docker image (then run the printed docker command)\n\nDeploy config lives in apps/${answers.appName}/deploy.config.json; the domain (${answers.domain}) lives in the app's constants package.\n`);\n  },\n};\n"]}

package/lib/esm/lib/replaceInFileExact.d.ts

@@ -1 +0,0 @@
-export declare const replaceInFileExact: (filePath: string, from: string, to: string) => void;

package/lib/esm/lib/replaceInFileExact.js

@@ -1,11 +0,0 @@
-import fs from 'fs';
-// Replace an exact string in one file, throwing if it isn't there. Targeted
-// edits should fail loudly when the template drifts.
-export const replaceInFileExact = (filePath, from, to) => {
-    const original = fs.readFileSync(filePath, 'utf8');
-    if (!original.includes(from)) {
-        throw new Error(`Expected to find "${from}" in ${filePath}. Has the template changed?`);
-    }
-    fs.writeFileSync(filePath, original.split(from).join(to));
-};
-//# sourceMappingURL=replaceInFileExact.js.map

package/lib/esm/lib/replaceInFileExact.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"replaceInFileExact.js","sourceRoot":"","sources":["../../../src/lib/replaceInFileExact.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AAEpB,4EAA4E;AAC5E,qDAAqD;AACrD,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,QAAgB,EAAE,IAAY,EAAE,EAAU,EAAQ,EAAE;IACrF,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,QAAQ,QAAQ,6BAA6B,CAAC,CAAC;IAC1F,CAAC;IACD,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;AAC5D,CAAC,CAAC","sourcesContent":["import fs from 'fs';\n\n// Replace an exact string in one file, throwing if it isn't there. Targeted\n// edits should fail loudly when the template drifts.\nexport const replaceInFileExact = (filePath: string, from: string, to: string): void => {\n  const original = fs.readFileSync(filePath, 'utf8');\n  if (!original.includes(from)) {\n    throw new Error(`Expected to find \"${from}\" in ${filePath}. Has the template changed?`);\n  }\n  fs.writeFileSync(filePath, original.split(from).join(to));\n};\n"]}

package/lib/esm/steps/013_printNextSteps.js

@@ -1,21 +0,0 @@
-export const printNextSteps = {
-    name: 'Done',
-    run: async ({ answers }) => {
-        const install = answers.installDependencies ? '' : '  npm install\n  npm run build\n';
-        console.log(`
-Created ${answers.appName}!
-
-Your app has five services (admin, auth, design, shell and todo) and
-deploys as a single docker image.
-
-Next steps:
-
-  cd ${answers.appName}
-${install}  npm run dev        # api on http://localhost:8080, web on http://localhost:3080
-  npm run deploy     # build the docker image (then run the printed docker command)
-
-Deploy config lives in apps/${answers.appName}/deploy.config.json; the domain (${answers.domain}) lives in the app's constants package.
-`);
-    },
-};
-//# sourceMappingURL=013_printNextSteps.js.map

package/lib/esm/steps/013_printNextSteps.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"013_printNextSteps.js","sourceRoot":"","sources":["../../../src/steps/013_printNextSteps.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,cAAc,GAAqB;IAC9C,IAAI,EAAE,MAAM;IAEZ,GAAG,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;QACzB,MAAM,OAAO,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,kCAAkC,CAAC;QAEtF,OAAO,CAAC,GAAG,CAAC;UACN,OAAO,CAAC,OAAO;;;;;;;OAOlB,OAAO,CAAC,OAAO;EACpB,OAAO;;;8BAGqB,OAAO,CAAC,OAAO,oCAAoC,OAAO,CAAC,MAAM;CAC9F,CAAC,CAAC;IACD,CAAC;CACF,CAAC","sourcesContent":["import { CreateQpqAppStep } from '../types';\n\nexport const printNextSteps: CreateQpqAppStep = {\n  name: 'Done',\n\n  run: async ({ answers }) => {\n    const install = answers.installDependencies ? '' : '  npm install\\n  npm run build\\n';\n\n    console.log(`\nCreated ${answers.appName}!\n\nYour app has five services (admin, auth, design, shell and todo) and\ndeploys as a single docker image.\n\nNext steps:\n\n  cd ${answers.appName}\n${install}  npm run dev        # api on http://localhost:8080, web on http://localhost:3080\n  npm run deploy     # build the docker image (then run the printed docker command)\n\nDeploy config lives in apps/${answers.appName}/deploy.config.json; the domain (${answers.domain}) lives in the app's constants package.\n`);\n  },\n};\n"]}

package/template/apps/qpqjs/packages/constants/src/domain.ts

@@ -1,3 +0,0 @@
-// Root domains the app is served on, primary first. Every api, web entry and
-// websocket is created on each of them; absolute URLs bake to the primary.
-export const QPQJS_DOMAINS = ['quidproquojs.com', 'qpqjs.com'];

package/template/apps/qpqjs/services/test/service/src/echo/config/defineEcho.ts

@@ -1,9 +0,0 @@
-import { QPQConfig } from 'quidproquo';
-import { defineDynamicRoutes } from 'quidproquo-features';
-
-import * as controllers from '../controller';
-
-// The echo routes carry their own method/path/schema on the handler; this just
-// registers the controller module under the service's src root.
-export const defineEcho = (): QPQConfig =>
-  defineDynamicRoutes(controllers, '/echo/controller');

package/template/apps/qpqjs/services/test/service/src/smoke/constants/smokeProbe.ts

@@ -1,39 +0,0 @@
-// Throwaway resources the smoke tests exercise, one per kind of owned
-// resource the service role is granted by tag / name convention (see the
-// tag-based IAM grants in quidproquo-deploy-awscdk). Nothing else uses them.
-// The store and drive names live in @qpqjs/constants because testa reaches
-// them cross-service.
-export const SMOKE_PROBE_PARAMETER = 'smokeProbe';
-export const SMOKE_PROBE_PARAMETER_VALUE = 'smoke-probe-parameter';
-export const SMOKE_PROBE_SECRET = 'smokeProbe';
-export const SMOKE_PROBE_EVENT_BUS = 'smokeProbe';
-
-// The queue subscribed to the probe event bus, and the message type that
-// flows bus -> queue -> store marker for the event bus test.
-export const SMOKE_PROBE_EVENT_QUEUE = 'smokeProbeEvents';
-export const SMOKE_PROBE_EVENT_TYPE = 'smokeProbeEvent';
-
-// Scoped probe resources: every call must carry a scope, an unscoped one is
-// refused. Only the test service uses them, so they stay service-level.
-export const SMOKE_SCOPED_PROBE_STORE = 'smokeScopedProbe';
-export const SMOKE_SCOPED_PROBE_DRIVE = 'smoke-scoped-probe';
-
-// The file event drives: an unscoped and a scoped one, both with create and
-// delete handlers that write a marker row the file event test polls for.
-export const SMOKE_FILE_EVENT_DRIVE = 'smoke-file-event';
-
-// A scoped store with a change stream; the handler writes a marker row the
-// kvs stream test polls for.
-export const SMOKE_STREAM_PROBE_STORE = 'smokeStreamProbe';
-
-// The crypto key the encrypted probe drive and store name: proves the
-// alias-conditioned KMS grant lets the service role write and read data
-// encrypted with a defineCryptoKey. Not 'smokeProbe': the signing key of that
-// name is a KMS alias too, and the two would collide.
-export const SMOKE_CRYPTO_KEY = 'smokeCrypto';
-export const SMOKE_ENCRYPTED_PROBE_STORE = 'smokeEncryptedProbe';
-export const SMOKE_ENCRYPTED_PROBE_DRIVE = 'smoke-encrypted-probe';
-
-// Inbound email: the receiver's onEmail writes a marker the email test polls for.
-// Deployed only.
-export const SMOKE_EMAIL_RECEIVER = 'smoke';

package/template/apps/qpqjs/services/test/service/src/smoke/models/index.ts

@@ -1,5 +0,0 @@
-export * from './GithubOidcClaims';
-export * from './SmokeEventDocAppendQueueEvent';
-export * from './SmokeEventDocMark';
-export * from './SmokeProbeEventQueueEvent';
-export * from './SmokeTestRequestedQueueEvent';

package/template/apps/qpqjs/services/test/service/src/smoke/queue/index.ts

@@ -1,3 +0,0 @@
-export * from './onSmokeEventDocAppend';
-export * from './onSmokeProbeEvent';
-export * from './onSmokeTestRequested';

package/template/apps/qpqjs/services/test/service/src/smoke/storageDrive/index.ts

@@ -1,4 +0,0 @@
-export * from './onSmokeEmailReceived';
-export * from './onSmokeFileEvent';
-export * from './smokeEmailMarkerId';
-export * from './smokeFileEventMarkerId';

package/template/apps/qpqjs/services/test/service/src/smoke/tests/crossService/index.ts

@@ -1,3 +0,0 @@
-export * from './askRunCrossServiceKeyValueStoreTest';
-export * from './askRunCrossServiceSigningKeyTest';
-export * from './askRunCrossServiceStorageDriveTest';

package/template/apps/qpqjs/services/test/service/src/smoke/tests/keyValueStore/index.ts

@@ -1 +0,0 @@
-export * from './askRunKeyValueStoreTest';

package/template/apps/qpqjs/services/test/service/src/smoke/tests/scopedKeyValueStore/askRunScopedKeyValueStoreTest.ts

@@ -1,102 +0,0 @@
-import {
-  askCatch,
-  askKeyValueStoreDelete,
-  askKeyValueStoreGet,
-  askKeyValueStoreGetBase,
-  askKeyValueStoreQuery,
-  askKeyValueStoreUpsert,
-  askKeyValueStoreUpsertBase,
-  askNewGuid,
-  AskResponse,
-  kvsEqual,
-} from 'quidproquo';
-
-import { SMOKE_PROBE_STORE } from '@qpqjs/constants';
-import { SmokeProbeRecord } from '@qpqjs/test-models';
-
-import { SMOKE_SCOPED_PROBE_STORE } from '../../constants/smokeProbe';
-import { askSmokeAssert } from '../askSmokeAssert';
-
-// The scope gate on a store, on whichever backend is running: a scoped store
-// serves scoped calls (including a query) and keeps two scopes apart,
-// refuses an unscoped call, and an unscoped store refuses a scoped one. On
-// dynamo the scope is composed into the partition key, so the read-back also
-// proves the composed form never leaks to the caller.
-export function* askRunScopedKeyValueStoreTest(): AskResponse<void> {
-  const probeId = yield* askNewGuid();
-  const scopeA = `smoke-a-${probeId}`;
-  const scopeB = `smoke-b-${probeId}`;
-  const category = `scoped-kvs-${probeId}`;
-
-  const record: SmokeProbeRecord = { probeId, category, value: 1 };
-  yield* askKeyValueStoreUpsert<SmokeProbeRecord>(
-    SMOKE_SCOPED_PROBE_STORE,
-    record,
-    { scope: scopeA }
-  );
-
-  const written = yield* askKeyValueStoreGet<SmokeProbeRecord>(
-    SMOKE_SCOPED_PROBE_STORE,
-    probeId,
-    { scope: scopeA }
-  );
-  yield* askSmokeAssert(
-    written?.probeId === probeId && written.value === 1,
-    'scoped get did not return the record with its raw key'
-  );
-
-  // A scoped query must constrain the partition key (the scope is composed
-  // into it on dynamo), so the query is on probeId, not the category index.
-  const byKey = yield* askKeyValueStoreQuery<SmokeProbeRecord>(
-    SMOKE_SCOPED_PROBE_STORE,
-    kvsEqual('probeId', probeId),
-    { scope: scopeA }
-  );
-  yield* askSmokeAssert(
-    byKey.items.some((item) => item.category === category),
-    'scoped query by partition key did not return the record'
-  );
-
-  const fromB = yield* askKeyValueStoreGet<SmokeProbeRecord>(
-    SMOKE_SCOPED_PROBE_STORE,
-    probeId,
-    { scope: scopeB }
-  );
-  yield* askSmokeAssert(
-    !fromB,
-    'record written under scope A is visible from scope B'
-  );
-
-  const unscopedGet = yield* askCatch(
-    askKeyValueStoreGet<SmokeProbeRecord>(SMOKE_SCOPED_PROBE_STORE, probeId)
-  );
-  yield* askSmokeAssert(
-    !unscopedGet.success &&
-      unscopedGet.error.errorType ===
-        askKeyValueStoreGetBase.errorType.InvalidScope,
-    'unscoped get on the scoped store was not refused with InvalidScope'
-  );
-
-  const scopedUpsertOnUnscopedStore = yield* askCatch(
-    askKeyValueStoreUpsert<SmokeProbeRecord>(SMOKE_PROBE_STORE, record, {
-      scope: scopeA,
-    })
-  );
-  yield* askSmokeAssert(
-    !scopedUpsertOnUnscopedStore.success &&
-      scopedUpsertOnUnscopedStore.error.errorType ===
-        askKeyValueStoreUpsertBase.errorType.InvalidScope,
-    'scoped upsert on the unscoped store was not refused with InvalidScope'
-  );
-
-  yield* askKeyValueStoreDelete(SMOKE_SCOPED_PROBE_STORE, probeId, undefined, {
-    scope: scopeA,
-  });
-
-  const deleted = yield* askKeyValueStoreGet<SmokeProbeRecord>(
-    SMOKE_SCOPED_PROBE_STORE,
-    probeId,
-    { scope: scopeA }
-  );
-  yield* askSmokeAssert(!deleted, 'scoped record still present after delete');
-}

package/template/apps/qpqjs/services/test/service/src/smoke/tests/signingKey/index.ts

@@ -1 +0,0 @@
-export * from './askRunSigningKeyTest';