hereya-cli 0.3.4 → 0.4.0

package/README.md

@@ -20,7 +20,7 @@ $ npm install -g hereya-cli
 $ hereya COMMAND
 running command...
 $ hereya (--version)
-hereya-cli/0.3.4 linux-x64 node-v20.13.1
+hereya-cli/0.4.0 linux-x64 node-v20.13.1
 $ hereya --help [COMMAND]
 USAGE
   $ hereya COMMAND
@@ -31,6 +31,7 @@ USAGE
 <!-- commands -->
 * [`hereya add PACKAGE`](#hereya-add-package)
 * [`hereya bootstrap INFRASTRUCTURETYPE`](#hereya-bootstrap-infrastructuretype)
+* [`hereya deploy`](#hereya-deploy)
 * [`hereya down`](#hereya-down)
 * [`hereya env`](#hereya-env)
 * [`hereya help [COMMAND]`](#hereya-help-command)
@@ -38,6 +39,7 @@ USAGE
 * [`hereya remote exec [PKGPATH]`](#hereya-remote-exec-pkgpath)
 * [`hereya remove PACKAGE`](#hereya-remove-package)
 * [`hereya run CMD`](#hereya-run-cmd)
+* [`hereya undeploy`](#hereya-undeploy)
 * [`hereya up`](#hereya-up)
 * [`hereya workspace create NAME`](#hereya-workspace-create-name)
 * [`hereya workspace delete NAME`](#hereya-workspace-delete-name)
@@ -68,7 +70,7 @@ EXAMPLES
   $ hereya add cloudy/docker_postgres
 ```
 
-_See code: [src/commands/add/index.ts](https://github.com/hereya/hereya-cli/blob/v0.3.4/src/commands/add/index.ts)_
+_See code: [src/commands/add/index.ts](https://github.com/hereya/hereya-cli/blob/v0.4.0/src/commands/add/index.ts)_
 
 ## `hereya bootstrap INFRASTRUCTURETYPE`
 
@@ -93,7 +95,28 @@ EXAMPLES
   $ hereya bootstrap local
 ```
 
-_See code: [src/commands/bootstrap/index.ts](https://github.com/hereya/hereya-cli/blob/v0.3.4/src/commands/bootstrap/index.ts)_
+_See code: [src/commands/bootstrap/index.ts](https://github.com/hereya/hereya-cli/blob/v0.4.0/src/commands/bootstrap/index.ts)_
+
+## `hereya deploy`
+
+Deploy a hereya project using the project deployment package
+
+```
+USAGE
+  $ hereya deploy [--chdir <value>] [-w <value>]
+
+FLAGS
+  -w, --workspace=<value>  name of the workspace to deploy the packages for
+      --chdir=<value>      directory to run command in
+
+DESCRIPTION
+  Deploy a hereya project using the project deployment package
+
+EXAMPLES
+  $ hereya deploy
+```
+
+_See code: [src/commands/deploy/index.ts](https://github.com/hereya/hereya-cli/blob/v0.4.0/src/commands/deploy/index.ts)_
 
 ## `hereya down`
 
@@ -114,7 +137,7 @@ EXAMPLES
   $ hereya down
 ```
 
-_See code: [src/commands/down/index.ts](https://github.com/hereya/hereya-cli/blob/v0.3.4/src/commands/down/index.ts)_
+_See code: [src/commands/down/index.ts](https://github.com/hereya/hereya-cli/blob/v0.4.0/src/commands/down/index.ts)_
 
 ## `hereya env`
 
@@ -137,7 +160,7 @@ EXAMPLES
   $ hereya env -w dev
 ```
 
-_See code: [src/commands/env/index.ts](https://github.com/hereya/hereya-cli/blob/v0.3.4/src/commands/env/index.ts)_
+_See code: [src/commands/env/index.ts](https://github.com/hereya/hereya-cli/blob/v0.4.0/src/commands/env/index.ts)_
 
 ## `hereya help [COMMAND]`
 
@@ -183,7 +206,7 @@ EXAMPLES
   $ hereya init myProject -w=defaultWorkspace --chdir=./myProject
 ```
 
-_See code: [src/commands/init/index.ts](https://github.com/hereya/hereya-cli/blob/v0.3.4/src/commands/init/index.ts)_
+_See code: [src/commands/init/index.ts](https://github.com/hereya/hereya-cli/blob/v0.4.0/src/commands/init/index.ts)_
 
 ## `hereya remote exec [PKGPATH]`
 
@@ -191,13 +214,14 @@ remotely provision or destroy a package
 
 ```
 USAGE
-  $ hereya remote exec [PKGPATH] [-o <value>]
+  $ hereya remote exec [PKGPATH] [-o <value>] [-s <value>]
 
 ARGUMENTS
   PKGPATH  The path to the package to provision or destroy
 
 FLAGS
   -o, --output=<value>  The path to store the output env in
+  -s, --source=<value>  The source of the project to provision or destroy the package for
 
 DESCRIPTION
   remotely provision or destroy a package
@@ -206,7 +230,7 @@ EXAMPLES
   $ hereya remote exec
 ```
 
-_See code: [src/commands/remote/exec/index.ts](https://github.com/hereya/hereya-cli/blob/v0.3.4/src/commands/remote/exec/index.ts)_
+_See code: [src/commands/remote/exec/index.ts](https://github.com/hereya/hereya-cli/blob/v0.4.0/src/commands/remote/exec/index.ts)_
 
 ## `hereya remove PACKAGE`
 
@@ -229,7 +253,7 @@ EXAMPLES
   $ hereya remove cloudy/docker_postgres
 ```
 
-_See code: [src/commands/remove/index.ts](https://github.com/hereya/hereya-cli/blob/v0.3.4/src/commands/remove/index.ts)_
+_See code: [src/commands/remove/index.ts](https://github.com/hereya/hereya-cli/blob/v0.4.0/src/commands/remove/index.ts)_
 
 ## `hereya run CMD`
 
@@ -255,7 +279,28 @@ EXAMPLES
   $ hereya run -w uat -- node index.js
 ```
 
-_See code: [src/commands/run/index.ts](https://github.com/hereya/hereya-cli/blob/v0.3.4/src/commands/run/index.ts)_
+_See code: [src/commands/run/index.ts](https://github.com/hereya/hereya-cli/blob/v0.4.0/src/commands/run/index.ts)_
+
+## `hereya undeploy`
+
+Undeploy a hereya project by removing all resources.
+
+```
+USAGE
+  $ hereya undeploy [--chdir <value>] [-w <value>]
+
+FLAGS
+  -w, --workspace=<value>  name of the workspace to undeploy the packages for
+      --chdir=<value>      directory to run command in
+
+DESCRIPTION
+  Undeploy a hereya project by removing all resources.
+
+EXAMPLES
+  $ hereya undeploy
+```
+
+_See code: [src/commands/undeploy/index.ts](https://github.com/hereya/hereya-cli/blob/v0.4.0/src/commands/undeploy/index.ts)_
 
 ## `hereya up`
 
@@ -276,7 +321,7 @@ EXAMPLES
   $ hereya up
 ```
 
-_See code: [src/commands/up/index.ts](https://github.com/hereya/hereya-cli/blob/v0.3.4/src/commands/up/index.ts)_
+_See code: [src/commands/up/index.ts](https://github.com/hereya/hereya-cli/blob/v0.4.0/src/commands/up/index.ts)_
 
 ## `hereya workspace create NAME`
 
@@ -296,7 +341,7 @@ EXAMPLES
   $ hereya workspace create dev
 ```
 
-_See code: [src/commands/workspace/create/index.ts](https://github.com/hereya/hereya-cli/blob/v0.3.4/src/commands/workspace/create/index.ts)_
+_See code: [src/commands/workspace/create/index.ts](https://github.com/hereya/hereya-cli/blob/v0.4.0/src/commands/workspace/create/index.ts)_
 
 ## `hereya workspace delete NAME`
 
@@ -316,7 +361,7 @@ EXAMPLES
   $ hereya workspace delete dev
 ```
 
-_See code: [src/commands/workspace/delete/index.ts](https://github.com/hereya/hereya-cli/blob/v0.3.4/src/commands/workspace/delete/index.ts)_
+_See code: [src/commands/workspace/delete/index.ts](https://github.com/hereya/hereya-cli/blob/v0.4.0/src/commands/workspace/delete/index.ts)_
 
 ## `hereya workspace env`
 
@@ -336,7 +381,7 @@ EXAMPLES
   $ hereya workspace env -w dev
 ```
 
-_See code: [src/commands/workspace/env/index.ts](https://github.com/hereya/hereya-cli/blob/v0.3.4/src/commands/workspace/env/index.ts)_
+_See code: [src/commands/workspace/env/index.ts](https://github.com/hereya/hereya-cli/blob/v0.4.0/src/commands/workspace/env/index.ts)_
 
 ## `hereya workspace install PACKAGE`
 
@@ -362,7 +407,7 @@ EXAMPLES
   $ hereya workspace install hereya/aws-cognito
 ```
 
-_See code: [src/commands/workspace/install/index.ts](https://github.com/hereya/hereya-cli/blob/v0.3.4/src/commands/workspace/install/index.ts)_
+_See code: [src/commands/workspace/install/index.ts](https://github.com/hereya/hereya-cli/blob/v0.4.0/src/commands/workspace/install/index.ts)_
 
 ## `hereya workspace uninstall PACKAGE`
 
@@ -388,5 +433,5 @@ EXAMPLES
   $ hereya workspace uninstall hereya/aws-cognito
 ```
 
-_See code: [src/commands/workspace/uninstall/index.ts](https://github.com/hereya/hereya-cli/blob/v0.3.4/src/commands/workspace/uninstall/index.ts)_
+_See code: [src/commands/workspace/uninstall/index.ts](https://github.com/hereya/hereya-cli/blob/v0.4.0/src/commands/workspace/uninstall/index.ts)_
 <!-- commandsstop -->

package/dist/commands/add/index.js

@@ -61,6 +61,7 @@ export default class Add extends Command {
             package: args.package,
             parameters,
             project: config.project,
+            skipDeploy: true,
             workspace: config.workspace,
         });
         if (!provisionOutput.success) {
@@ -77,6 +78,7 @@ export default class Add extends Command {
             workspace: config.workspace,
         });
         await configManager.addPackage({
+            deploy: metadata.deploy,
             package: args.package,
             projectRootDir,
         });

package/dist/commands/deploy/index.d.ts

@@ -0,0 +1,10 @@
+import { Command } from '@oclif/core';
+export default class Deploy extends Command {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        chdir: import("@oclif/core/lib/interfaces/parser.js").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
+        workspace: import("@oclif/core/lib/interfaces/parser.js").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/deploy/index.js

@@ -0,0 +1,108 @@
+import { Command, Flags } from '@oclif/core';
+import path from 'node:path';
+import { getBackend } from '../../backend/index.js';
+import { destroyPackage, provisionPackage } from '../../infrastructure/index.js';
+import { getConfigManager } from '../../lib/config/index.js';
+import { getEnvManager } from '../../lib/env/index.js';
+import { getParameterManager } from '../../lib/parameter/index.js';
+import Up from '../up/index.js';
+export default class Deploy extends Command {
+    static description = 'Deploy a hereya project using the project deployment package';
+    static examples = [
+        '<%= config.bin %> <%= command.id %>',
+    ];
+    static flags = {
+        chdir: Flags.string({
+            description: 'directory to run command in',
+            required: false,
+        }),
+        workspace: Flags.string({
+            char: 'w',
+            description: 'name of the workspace to deploy the packages for',
+            required: false,
+        }),
+    };
+    async run() {
+        const { flags } = await this.parse(Deploy);
+        const projectRootDir = path.resolve(flags.chdir || process.env.HEREYA_PROJECT_ROOT_DIR || process.cwd());
+        const configManager = getConfigManager();
+        const loadConfigOutput = await configManager.loadConfig({ projectRootDir });
+        if (!loadConfigOutput.found) {
+            this.warn(`Project not initialized. Run 'hereya init' first.`);
+            return;
+        }
+        const { config } = loadConfigOutput;
+        const deployPackages = Object.keys(config.deploy ?? {});
+        const backend = await getBackend();
+        const savedStateOutput = await backend.getState({
+            project: config.project,
+        });
+        let savedPackages = [];
+        if (savedStateOutput.found) {
+            savedPackages = Object.keys(savedStateOutput.config.deploy ?? {});
+        }
+        const removedPackages = savedPackages.filter((packageName) => !deployPackages.includes(packageName));
+        const workspace = flags.workspace || config.workspace;
+        const getWorkspaceEnvOutput = await backend.getWorkspaceEnv({
+            project: config.project,
+            workspace,
+        });
+        if (!getWorkspaceEnvOutput.success) {
+            this.error(getWorkspaceEnvOutput.reason);
+        }
+        const { env: workspaceEnv } = getWorkspaceEnvOutput;
+        const parameterManager = getParameterManager();
+        const envManager = getEnvManager();
+        const { env: projectEnv } = await envManager.getProjectEnv({
+            markSecret: true,
+            projectRootDir,
+            workspace,
+        });
+        await Promise.all(removedPackages.map(async (packageName) => {
+            const { parameters } = await parameterManager.getPackageParameters({
+                package: packageName,
+                projectRootDir,
+                workspace,
+            });
+            const destroyOutput = await destroyPackage({
+                env: workspaceEnv,
+                package: packageName,
+                parameters,
+                project: config.project,
+                projectEnv,
+                projectRootDir,
+                workspace,
+            });
+            if (!destroyOutput.success) {
+                this.error(destroyOutput.reason);
+            }
+            this.log(`Package ${packageName} un-deployed successfully`);
+        }));
+        await Up.run(['--chdir', projectRootDir, '--workspace', workspace]);
+        const { env: newProjectEnv } = await envManager.getProjectEnv({
+            markSecret: true,
+            projectRootDir,
+            workspace,
+        });
+        await Promise.all(deployPackages.map(async (packageName) => {
+            const { parameters } = await parameterManager.getPackageParameters({
+                package: packageName,
+                projectRootDir,
+                workspace,
+            });
+            const provisionOutput = await provisionPackage({
+                env: workspaceEnv,
+                package: packageName,
+                parameters,
+                project: config.project,
+                projectEnv: newProjectEnv,
+                projectRootDir,
+                workspace,
+            });
+            if (!provisionOutput.success) {
+                this.error(provisionOutput.reason);
+            }
+            this.log(`Package ${packageName} deployed successfully`);
+        }));
+    }
+}

package/dist/commands/remote/exec/index.d.ts

@@ -7,6 +7,7 @@ export default class RemoteExec extends Command {
     static examples: string[];
     static flags: {
         output: import("@oclif/core/lib/interfaces/parser.js").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
+        source: import("@oclif/core/lib/interfaces/parser.js").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
     };
     run(): Promise<void>;
 }

package/dist/commands/remote/exec/index.js

@@ -1,4 +1,5 @@
 import { Args, Command, Flags } from '@oclif/core';
+import path from 'node:path';
 import { getIac } from '../../../iac/index.js';
 import { getInfrastructure } from '../../../infrastructure/index.js';
 import { save } from '../../../lib/yaml-utils.js';
@@ -19,6 +20,11 @@ export default class RemoteExec extends Command {
             description: 'The path to store the output env in',
             required: false,
         }),
+        source: Flags.string({
+            char: 's',
+            description: 'The source of the project to provision or destroy the package for',
+            required: false,
+        }),
     };
     async run() {
         const { args, flags } = await this.parse(RemoteExec);
@@ -28,6 +34,11 @@ export default class RemoteExec extends Command {
         const iacType = process.env.HEREYA_IAC_TYPE;
         const destroy = process.env.HEREYA_DESTROY === 'true';
         const infraType = process.env.HEREYA_INFRA_TYPE;
+        const deploy = process.env.HEREYA_DEPLOY === 'true';
+        const source = flags.source ? path.resolve(flags.source) : '';
+        if (deploy && !source) {
+            return this.error('Deploy packages provisioning requires a source path');
+        }
         if (!id || !iacType || !infraType) {
             return this.error(`
                 Missing required environment variables:
@@ -39,6 +50,12 @@ export default class RemoteExec extends Command {
         const input = {
             env: workspaceEnv, id, parameters, pkgPath: args.pkgPath || process.cwd(),
         };
+        if (deploy) {
+            input.parameters = {
+                ...input.parameters,
+                hereyaProjectRootDir: source,
+            };
+        }
         const iac$ = getIac({ type: iacType });
         if (!iac$.supported) {
             return this.error(iac$.reason);

package/dist/commands/remove/index.js

@@ -31,7 +31,7 @@ export default class Remove extends Command {
             return;
         }
         const { config } = loadConfigOutput;
-        if (!(args.package in (config.packages ?? {}))) {
+        if (!(args.package in (config.packages ?? {})) && !(args.package in (config.deploy ?? {}))) {
             this.warn(`Package ${args.package} not found in project.`);
             return;
         }
@@ -55,13 +55,16 @@ export default class Remove extends Command {
             package: args.package,
             parameters,
             project: config.project,
+            skipDeploy: true,
             workspace: config.workspace,
         });
         if (!destroyOutput.success) {
             this.error(destroyOutput.reason);
         }
         const { env, metadata } = destroyOutput;
-        this.log(`Infrastructure resources for ${args.package} have been destroyed`);
+        if (!metadata.deploy) {
+            this.log(`Infrastructure resources for ${args.package} have been destroyed`);
+        }
         this.log('removing package env vars from project');
         const envManager = getEnvManager();
         await envManager.removeProjectEnv({
@@ -71,8 +74,9 @@ export default class Remove extends Command {
             workspace: config.workspace
         });
         await configManager.removePackage({
+            deploy: metadata.deploy,
             package: args.package,
-            projectRootDir
+            projectRootDir,
         });
         const { config: newConfig } = await configManager.loadConfig({ projectRootDir });
         await backend.saveState(newConfig);

package/dist/commands/undeploy/index.d.ts

@@ -0,0 +1,10 @@
+import { Command } from '@oclif/core';
+export default class Undeploy extends Command {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        chdir: import("@oclif/core/lib/interfaces/parser.js").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
+        workspace: import("@oclif/core/lib/interfaces/parser.js").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/undeploy/index.js

@@ -0,0 +1,75 @@
+import { Command, Flags } from '@oclif/core';
+import path from 'node:path';
+import { getBackend } from '../../backend/index.js';
+import { destroyPackage } from '../../infrastructure/index.js';
+import { getConfigManager } from '../../lib/config/index.js';
+import { getEnvManager } from '../../lib/env/index.js';
+import { getParameterManager } from '../../lib/parameter/index.js';
+import Down from '../down/index.js';
+export default class Undeploy extends Command {
+    static description = 'Undeploy a hereya project by removing all resources.';
+    static examples = [
+        '<%= config.bin %> <%= command.id %>',
+    ];
+    static flags = {
+        chdir: Flags.string({
+            description: 'directory to run command in',
+            required: false,
+        }),
+        workspace: Flags.string({
+            char: 'w',
+            description: 'name of the workspace to undeploy the packages for',
+            required: false,
+        }),
+    };
+    async run() {
+        const { flags } = await this.parse(Undeploy);
+        const projectRootDir = path.resolve(flags.chdir || process.env.HEREYA_PROJECT_ROOT_DIR || process.cwd());
+        const configManager = getConfigManager();
+        const loadConfigOutput = await configManager.loadConfig({ projectRootDir });
+        if (!loadConfigOutput.found) {
+            this.warn(`Project not initialized. Run 'hereya init' first.`);
+            return;
+        }
+        const { config } = loadConfigOutput;
+        const deployPackages = Object.keys(config.deploy ?? {});
+        const workspace = flags.workspace || config.workspace;
+        const backend = await getBackend();
+        const getWorkspaceEnvOutput = await backend.getWorkspaceEnv({
+            project: config.project,
+            workspace,
+        });
+        if (!getWorkspaceEnvOutput.success) {
+            this.error(getWorkspaceEnvOutput.reason);
+        }
+        const { env: workspaceEnv } = getWorkspaceEnvOutput;
+        const parameterManager = getParameterManager();
+        const envManager = getEnvManager();
+        const { env: projectEnv } = await envManager.getProjectEnv({
+            markSecret: true,
+            projectRootDir,
+            workspace,
+        });
+        await Promise.all(deployPackages.map(async (packageName) => {
+            const { parameters } = await parameterManager.getPackageParameters({
+                package: packageName,
+                projectRootDir,
+                workspace,
+            });
+            const destroyOutput = await destroyPackage({
+                env: workspaceEnv,
+                package: packageName,
+                parameters,
+                project: config.project,
+                projectEnv,
+                projectRootDir,
+                workspace,
+            });
+            if (!destroyOutput.success) {
+                this.error(destroyOutput.reason);
+            }
+            this.log(`Package ${packageName} un-deployed successfully`);
+        }));
+        await Down.run(['--chdir', projectRootDir, '--workspace', workspace]);
+    }
+}

package/dist/commands/up/index.js

@@ -91,7 +91,7 @@ export default class Up extends Command {
             return { env, metadata, packageName };
         }));
         const envManager = getEnvManager();
-        for (const { env, metadata, packageName } of removed) {
+        for (const { env, metadata } of removed) {
             // eslint-disable-next-line no-await-in-loop
             await Promise.all([
                 envManager.removeProjectEnv({
@@ -100,10 +100,6 @@ export default class Up extends Command {
                     projectRootDir,
                     workspace,
                 }),
-                configManager.removePackage({
-                    package: packageName,
-                    projectRootDir,
-                })
             ]);
         }
         for (const { env, metadata } of added) {

package/dist/infrastructure/aws.d.ts

@@ -1,11 +1,15 @@
-import { BootstrapInput, DestroyInput, DestroyOutput, Infrastructure, ProvisionInput, ProvisionOutput, ResolveEnvInput, ResolveEnvOutput, SaveEnvInput, SaveEnvOutput } from './common.js';
+import { BootstrapInput, DeployInput, DeployOutput, DestroyInput, DestroyOutput, Infrastructure, ProvisionInput, ProvisionOutput, ResolveEnvInput, ResolveEnvOutput, SaveEnvInput, SaveEnvOutput, UndeployInput, UndeployOutput } from './common.js';
 export declare class AwsInfrastructure implements Infrastructure {
     bootstrap(_: BootstrapInput): Promise<void>;
+    deploy(input: DeployInput): Promise<DeployOutput>;
     destroy(input: DestroyInput): Promise<DestroyOutput>;
     provision(input: ProvisionInput): Promise<ProvisionOutput>;
     resolveEnv(input: ResolveEnvInput): Promise<ResolveEnvOutput>;
     saveEnv(input: SaveEnvInput): Promise<SaveEnvOutput>;
+    undeploy(input: UndeployInput): Promise<UndeployOutput>;
     private getEnv;
+    private getFilesToUpload;
     private removeEnv;
-    private runCdkBuild;
+    private runCodeBuild;
+    private uploadProjectFiles;
 }

package/dist/infrastructure/aws.js

@@ -1,7 +1,14 @@
 import { BatchGetBuildsCommand, CodeBuildClient, StartBuildCommand } from '@aws-sdk/client-codebuild';
+import { DeleteObjectsCommand, PutObjectCommand, S3Client } from '@aws-sdk/client-s3';
 import { DeleteParameterCommand, GetParameterCommand, PutParameterCommand, SSMClient } from '@aws-sdk/client-ssm';
 import { GetCallerIdentityCommand, STSClient } from '@aws-sdk/client-sts';
+import { glob } from 'glob';
+import ignore from 'ignore';
+import { randomUUID } from 'node:crypto';
+import fs from 'node:fs/promises';
+import path from 'node:path';
 import { IacType } from '../iac/common.js';
+import { fileExists, getAnyPath } from '../lib/filesystem.js';
 import { runShell } from '../lib/shell.js';
 import { InfrastructureType } from './common.js';
 import { provisionPackage } from './index.js';
@@ -17,9 +24,42 @@ export class AwsInfrastructure {
             throw new Error(output.reason);
         }
     }
+    async deploy(input) {
+        let files = [];
+        let s3Bucket = '';
+        let s3Client = new S3Client({});
+        let s3Key = '';
+        try {
+            ({ files, s3Bucket, s3Client, s3Key } = await this.uploadProjectFiles(input));
+            input.parameters = {
+                ...input.parameters,
+                hereyaProjectEnv: JSON.stringify(input.projectEnv ?? {}),
+            };
+            const output = await this.runCodeBuild({
+                ...input,
+                deploy: true,
+                sourceS3Key: s3Key
+            });
+            if (!output.success) {
+                return output;
+            }
+            const env = await this.getEnv(input.id);
+            return { env, success: true };
+        }
+        finally {
+            if (s3Key && files.length > 0) {
+                await s3Client.send(new DeleteObjectsCommand({
+                    Bucket: s3Bucket,
+                    Delete: {
+                        Objects: files.map(file => ({ Key: `${s3Key}/${file}` }))
+                    }
+                }));
+            }
+        }
+    }
     async destroy(input) {
         const env = await this.getEnv(input.id);
-        const output = await this.runCdkBuild({ ...input, destroy: true });
+        const output = await this.runCodeBuild({ ...input, destroy: true });
         if (!output.success) {
             return output;
         }
@@ -27,7 +67,7 @@ export class AwsInfrastructure {
         return { env, success: true };
     }
     async provision(input) {
-        const output = await this.runCdkBuild(input);
+        const output = await this.runCodeBuild(input);
         if (!output.success) {
             return output;
         }
@@ -42,7 +82,10 @@ export class AwsInfrastructure {
                 Name: input.value,
                 WithDecryption: true,
             }));
-            return { value: response.Parameter?.Value ?? input.value };
+            return {
+                isSecret: response.Parameter?.Type === 'SecureString',
+                value: response.Parameter?.Value ?? input.value
+            };
         }
         return { value: input.value };
     }
@@ -63,6 +106,46 @@ export class AwsInfrastructure {
             return { reason: error.message, success: false };
         }
     }
+    async undeploy(input) {
+        let files = [];
+        let s3Bucket = '';
+        let s3Client = new S3Client({});
+        let s3Key = '';
+        let env = {};
+        try {
+            env = await this.getEnv(input.id);
+        }
+        catch (error) {
+            console.log(`Could not get env for ${input.id}: ${error.message}. Continuing with undeployment...`);
+        }
+        try {
+            ({ files, s3Bucket, s3Client, s3Key } = await this.uploadProjectFiles(input));
+            input.parameters = {
+                ...input.parameters,
+                hereyaProjectEnv: JSON.stringify(input.projectEnv ?? {}),
+            };
+            const output = await this.runCodeBuild({
+                ...input,
+                deploy: true,
+                destroy: true,
+                sourceS3Key: s3Key
+            });
+            if (!output.success) {
+                return output;
+            }
+            return { env, success: true };
+        }
+        finally {
+            if (s3Key && files.length > 0) {
+                await s3Client.send(new DeleteObjectsCommand({
+                    Bucket: s3Bucket,
+                    Delete: {
+                        Objects: files.map(file => ({ Key: `${s3Key}/${file}` }))
+                    }
+                }));
+            }
+        }
+    }
     async getEnv(id) {
         const ssmClient = new SSMClient({});
         const ssmParameterName = `/hereya/${id}`;
@@ -71,6 +154,16 @@ export class AwsInfrastructure {
         }));
         return JSON.parse(ssmParameter.Parameter?.Value ?? '{}');
     }
+    async getFilesToUpload(rootDir) {
+        const ig = ignore.default();
+        const ignoreFilePath = await getAnyPath(`${rootDir}/.hereyaignore`, `${rootDir}/.gitignore`);
+        if (await fileExists(ignoreFilePath)) {
+            const ignoreFileContent = await fs.readFile(ignoreFilePath, 'utf8');
+            ig.add(ignoreFileContent);
+        }
+        const files = glob.sync('**/*', { cwd: rootDir, nodir: true });
+        return files.filter(file => !ig.ignores(file));
+    }
     async removeEnv(id) {
         const ssmClient = new SSMClient({});
         const ssmParameterName = `/hereya/${id}`;
@@ -78,7 +171,7 @@ export class AwsInfrastructure {
             Name: ssmParameterName,
         }));
     }
-    async runCdkBuild(input) {
+    async runCodeBuild(input) {
         const codebuildClient = new CodeBuildClient({});
         let codebuildProjectName = '';
         switch (input.iacType) {
@@ -127,6 +220,16 @@ export class AwsInfrastructure {
                     type: 'PLAINTEXT',
                     value: input.destroy ? 'true' : '',
                 },
+                {
+                    name: 'HEREYA_DEPLOY',
+                    type: 'PLAINTEXT',
+                    value: input.deploy ? 'true' : '',
+                },
+                {
+                    name: 'HEREYA_PROJECT_S3_KEY',
+                    type: 'PLAINTEXT',
+                    value: input.deploy ? input.sourceS3Key : '',
+                }
             ],
             projectName: codebuildProjectName,
         }));
@@ -152,4 +255,19 @@ export class AwsInfrastructure {
         }
         return { success: true };
     }
+    async uploadProjectFiles(input) {
+        const s3Key = `${input.id}/${randomUUID()}`;
+        const s3Bucket = 'hereya-projects-source-code';
+        const files = await this.getFilesToUpload(input.projectRootDir);
+        const s3Client = new S3Client({});
+        await Promise.all(files.map(async (file) => {
+            console.log(`Uploading ${file} to s3://${s3Bucket}/${s3Key}`);
+            await s3Client.send(new PutObjectCommand({
+                Body: await fs.readFile(path.join(input.projectRootDir, file)),
+                Bucket: s3Bucket,
+                Key: `${s3Key}/${file}`,
+            }));
+        }));
+        return { files, s3Bucket, s3Client, s3Key };
+    }
 }

package/dist/infrastructure/common.d.ts

@@ -7,10 +7,12 @@ export declare enum InfrastructureType {
 }
 export interface Infrastructure {
     bootstrap(input: BootstrapInput): Promise<void>;
+    deploy(input: DeployInput): Promise<DeployOutput>;
     destroy(input: DestroyInput): Promise<DestroyOutput>;
     provision(input: ProvisionInput): Promise<ProvisionOutput>;
     resolveEnv(input: ResolveEnvInput): Promise<ResolveEnvOutput>;
     saveEnv(input: SaveEnvInput): Promise<SaveEnvOutput>;
+    undeploy(input: UndeployInput): Promise<UndeployOutput>;
 }
 export type BootstrapInput = {
     force?: boolean;
@@ -39,10 +41,20 @@ export type ProvisionOutput = {
 };
 export type DestroyInput = ProvisionInput;
 export type DestroyOutput = ProvisionOutput;
+export type DeployInput = {
+    projectEnv: {
+        [key: string]: string;
+    };
+    projectRootDir: string;
+} & ProvisionInput;
+export type DeployOutput = ProvisionOutput;
+export type UndeployInput = DeployInput;
+export type UndeployOutput = DeployOutput;
 export type ResolveEnvInput = {
     value: string;
 };
 export type ResolveEnvOutput = {
+    isSecret?: boolean;
     value: string;
 };
 export type SaveEnvInput = {

package/dist/infrastructure/index.d.ts

@@ -19,6 +19,11 @@ export type ProvisionPackageInput = {
         [key: string]: string;
     };
     project?: string;
+    projectEnv?: {
+        [key: string]: string;
+    };
+    projectRootDir?: string;
+    skipDeploy?: boolean;
     workspace?: string;
 };
 export type ProvisionPackageOutput = {

package/dist/infrastructure/index.js

@@ -36,8 +36,24 @@ export async function destroyPackage(input) {
     if (!infrastructure$.supported) {
         return { reason: infrastructure$.reason, success: false };
     }
+    if (metadata.deploy && input.skipDeploy) {
+        console.log(`Skipping un-deployment of ${input.package}...`);
+        return { env: {}, metadata, success: true };
+    }
     const { infrastructure } = infrastructure$;
-    const destroyOutput = await infrastructure.destroy({
+    const destroyOutput = metadata.deploy ? await infrastructure.undeploy({
+        canonicalName,
+        env: input.env,
+        iacType: metadata.iac,
+        id: ((input.project || input.workspace) ? [input.project, input.workspace, canonicalName] : [canonicalName])
+            .filter(Boolean).join('')
+            .replaceAll(/[^\dA-Za-z]/g, ''),
+        parameters: input.parameters,
+        pkgName: input.package,
+        pkgUrl: packageUri,
+        projectEnv: input.projectEnv ?? {},
+        projectRootDir: input.projectRootDir,
+    }) : await infrastructure.destroy({
         canonicalName,
         env: input.env,
         iacType: metadata.iac,
@@ -63,8 +79,24 @@ export async function provisionPackage(input) {
     if (!infrastructure$.supported) {
         return { reason: infrastructure$.reason, success: false };
     }
+    if (metadata.deploy && input.skipDeploy) {
+        console.log(`Skipping deployment of ${input.package}...`);
+        return { env: {}, metadata, success: true };
+    }
     const { infrastructure } = infrastructure$;
-    const provisionOutput = await infrastructure.provision({
+    const provisionOutput = metadata.deploy ? await infrastructure.deploy({
+        canonicalName,
+        env: input.env,
+        iacType: metadata.iac,
+        id: ((input.project || input.workspace) ? [input.project, input.workspace, canonicalName] : [canonicalName])
+            .filter(Boolean).join('')
+            .replaceAll(/[^\dA-Za-z]/g, ''),
+        parameters: input.parameters,
+        pkgName: input.package,
+        pkgUrl: packageUri,
+        projectEnv: input.projectEnv ?? {},
+        projectRootDir: input.projectRootDir,
+    }) : await infrastructure.provision({
         canonicalName,
         env: input.env,
         iacType: metadata.iac,

package/dist/infrastructure/local.d.ts

@@ -1,6 +1,7 @@
-import { Infrastructure, ProvisionInput, ProvisionOutput, SaveEnvInput, SaveEnvOutput } from './common.js';
+import { DeployInput, DeployOutput, Infrastructure, ProvisionInput, ProvisionOutput, SaveEnvInput, SaveEnvOutput, UndeployInput, UndeployOutput } from './common.js';
 export declare class LocalInfrastructure implements Infrastructure {
     bootstrap(): Promise<void>;
+    deploy(input: DeployInput): Promise<DeployOutput>;
     destroy(input: ProvisionInput): Promise<ProvisionOutput>;
     provision(input: ProvisionInput): Promise<ProvisionOutput>;
     resolveEnv(input: {
@@ -9,6 +10,7 @@ export declare class LocalInfrastructure implements Infrastructure {
         value: string;
     }>;
     saveEnv(input: SaveEnvInput): Promise<SaveEnvOutput>;
+    undeploy(input: UndeployInput): Promise<UndeployOutput>;
     private download;
     private isNotEmpty;
 }

package/dist/infrastructure/local.js

@@ -7,6 +7,14 @@ export class LocalInfrastructure {
     async bootstrap() {
         console.log('Bootstrapping local infrastructure');
     }
+    async deploy(input) {
+        input.parameters = {
+            ...input.parameters,
+            hereyaProjectEnv: JSON.stringify(input.projectEnv ?? {}),
+            hereyaProjectRootDir: input.projectRootDir
+        };
+        return this.provision(input);
+    }
     async destroy(input) {
         // noinspection DuplicatedCode
         const destPath = path.join(os.homedir(), '.hereya', input.id, input.canonicalName);
@@ -56,6 +64,14 @@ export class LocalInfrastructure {
         console.log(`Saving env to ${input.id}`);
         return { success: true };
     }
+    async undeploy(input) {
+        input.parameters = {
+            ...input.parameters,
+            hereyaProjectEnv: JSON.stringify(input.projectEnv ?? {}),
+            hereyaProjectRootDir: input.projectRootDir
+        };
+        return this.destroy(input);
+    }
     async download(pkgUrl, destPath) {
         if (await this.isNotEmpty(destPath)) {
             console.log(`Package already downloaded at ${destPath}`);

package/dist/lib/config/common.d.ts

@@ -15,6 +15,11 @@ export type LoadConfigOutput = {
     found: true;
 };
 export interface Config {
+    deploy?: {
+        [key: string]: {
+            version: string;
+        };
+    };
     packages?: {
         [key: string]: {
             version: string;
@@ -28,6 +33,7 @@ export interface SaveConfigInput {
     projectRootDir?: string;
 }
 export type AddPackageInput = {
+    deploy?: boolean;
     package: string;
     projectRootDir?: string;
 };

package/dist/lib/config/simple.js

@@ -6,12 +6,21 @@ export class SimpleConfigManager {
         const { config } = await this.loadConfig({ projectRootDir: input.projectRootDir });
         await yaml.save({
             ...config,
-            packages: {
-                ...config.packages,
-                [input.package]: {
-                    version: ''
+            ...(input.deploy ? {
+                deploy: {
+                    ...config.deploy,
+                    [input.package]: {
+                        version: '',
+                    }
                 }
-            },
+            } : {
+                packages: {
+                    ...config.packages,
+                    [input.package]: {
+                        version: '',
+                    }
+                }
+            }),
         }, await this.getConfigPath(input.projectRootDir));
     }
     async loadConfig(input) {
@@ -25,9 +34,16 @@ export class SimpleConfigManager {
     async removePackage(input) {
         const { config } = await this.loadConfig({ projectRootDir: input.projectRootDir });
         const newPackages = { ...config.packages };
-        delete newPackages[input.package];
+        const newDeploy = { ...config.deploy };
+        if (input.deploy) {
+            delete newDeploy[input.package];
+        }
+        else {
+            delete newPackages[input.package];
+        }
         await yaml.save({
             ...config,
+            deploy: newDeploy,
             packages: newPackages,
         }, await this.getConfigPath(input.projectRootDir));
     }

package/dist/lib/env/index.d.ts

@@ -17,6 +17,7 @@ export type AddEnvInput = {
 };
 export type RemoveEnvInput = AddEnvInput;
 export type GetProjectEnvInput = {
+    markSecret?: boolean;
     projectRootDir?: string;
     workspace: string;
 };

package/dist/lib/env/index.js

@@ -17,7 +17,7 @@ export class EnvManager {
         if (!found) {
             return { env: {} };
         }
-        const resolvedEnv = await resolveEnvValues(env);
+        const resolvedEnv = await resolveEnvValues(env, { markSecret: input.markSecret });
         return { env: resolvedEnv };
     }
     async removeProjectEnv(input) {

package/dist/lib/env-utils.d.ts

@@ -3,6 +3,8 @@ export declare function logEnv(env: {
 }, logFn?: (_: string) => void): void;
 export declare function resolveEnvValues(env: {
     [key: string]: string;
+}, options?: {
+    markSecret?: boolean;
 }): Promise<{
     [key: string]: string;
 }>;

package/dist/lib/env-utils.js

@@ -4,17 +4,20 @@ export function logEnv(env, logFn = console.log) {
         logFn(`${key}=${value}`);
     }
 }
-export async function resolveEnvValues(env) {
+export async function resolveEnvValues(env, options = {}) {
     return Object.fromEntries(await Promise.all(Object.entries(env)
         .map(async ([key, value]) => {
         const infraType = value.split(':')[0];
-        const infra$ = await getInfrastructure({ type: infraType });
+        const infra$ = getInfrastructure({ type: infraType });
         if (!infra$.supported) {
             throw new Error(infra$.reason);
         }
         const { infrastructure } = infra$;
         const valueWithoutInfra = value.split(':').slice(1).join(':');
-        const { value: resolvedValue } = await infrastructure.resolveEnv({ value: valueWithoutInfra });
-        return [key, resolvedValue];
+        const { isSecret, value: resolvedValue } = await infrastructure.resolveEnv({
+            value: valueWithoutInfra
+        });
+        const finalValue = options.markSecret && isSecret ? `secret://${resolvedValue}` : resolvedValue;
+        return [key, finalValue];
     })));
 }

package/dist/lib/filesystem.d.ts

@@ -1 +1,2 @@
 export declare function getAnyPath(...candidates: string[]): Promise<string>;
+export declare function fileExists(filePath: string): Promise<boolean>;

package/dist/lib/filesystem.js

@@ -13,3 +13,12 @@ export async function getAnyPath(...candidates) {
     };
     return checkAccess(0);
 }
+export async function fileExists(filePath) {
+    try {
+        await access(filePath, constants.F_OK);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}

package/dist/lib/package/index.d.ts

@@ -19,12 +19,15 @@ export type ResolvePackageOutput = {
     reason: string;
 };
 export declare const PackageMetadata: z.ZodObject<{
+    deploy: z.ZodOptional<z.ZodBoolean>;
     iac: z.ZodNativeEnum<typeof IacType>;
     infra: z.ZodNativeEnum<typeof InfrastructureType>;
 }, "strip", z.ZodTypeAny, {
     iac: IacType;
     infra: InfrastructureType;
+    deploy?: boolean | undefined;
 }, {
     iac: IacType;
     infra: InfrastructureType;
+    deploy?: boolean | undefined;
 }>;

package/dist/lib/package/index.js

@@ -40,6 +40,7 @@ export function getPackageCanonicalName(packageName) {
     return packageName.replace('/', '-');
 }
 export const PackageMetadata = z.object({
+    deploy: z.boolean().optional(),
     iac: z.nativeEnum(IacType),
     infra: z.nativeEnum(InfrastructureType),
 });

package/oclif.manifest.json

@@ -87,6 +87,48 @@
         "index.js"
       ]
     },
+    "deploy": {
+      "aliases": [],
+      "args": {},
+      "description": "Deploy a hereya project using the project deployment package",
+      "examples": [
+        "<%= config.bin %> <%= command.id %>"
+      ],
+      "flags": {
+        "chdir": {
+          "description": "directory to run command in",
+          "name": "chdir",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "workspace": {
+          "char": "w",
+          "description": "name of the workspace to deploy the packages for",
+          "name": "workspace",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "deploy",
+      "pluginAlias": "hereya-cli",
+      "pluginName": "hereya-cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": false,
+      "isESM": true,
+      "relativePath": [
+        "dist",
+        "commands",
+        "deploy",
+        "index.js"
+      ]
+    },
     "down": {
       "aliases": [],
       "args": {},
@@ -309,6 +351,48 @@
         "index.js"
       ]
     },
+    "undeploy": {
+      "aliases": [],
+      "args": {},
+      "description": "Undeploy a hereya project by removing all resources.",
+      "examples": [
+        "<%= config.bin %> <%= command.id %>"
+      ],
+      "flags": {
+        "chdir": {
+          "description": "directory to run command in",
+          "name": "chdir",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "workspace": {
+          "char": "w",
+          "description": "name of the workspace to undeploy the packages for",
+          "name": "workspace",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "undeploy",
+      "pluginAlias": "hereya-cli",
+      "pluginName": "hereya-cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": false,
+      "isESM": true,
+      "relativePath": [
+        "dist",
+        "commands",
+        "undeploy",
+        "index.js"
+      ]
+    },
     "up": {
       "aliases": [],
       "args": {},
@@ -373,6 +457,15 @@
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
+        },
+        "source": {
+          "char": "s",
+          "description": "The source of the project to provision or destroy the package for",
+          "name": "source",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
         }
       },
       "hasDynamicHelp": false,
@@ -606,5 +699,5 @@
       ]
     }
   },
-  "version": "0.3.4"
+  "version": "0.4.0"
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "hereya-cli",
   "description": "Developer's Package Manager for Seamless Infrastructure Integration.",
-  "version": "0.3.4",
+  "version": "0.4.0",
   "author": "The Hereya team",
   "bin": {
     "hereya": "./bin/run.js"
@@ -10,13 +10,17 @@
   "dependencies": {
     "@aws-sdk/client-cloudformation": "^3.577.0",
     "@aws-sdk/client-codebuild": "^3.583.0",
+    "@aws-sdk/client-s3": "^3.583.0",
     "@aws-sdk/client-ssm": "^3.583.0",
     "@aws-sdk/client-sts": "^3.582.0",
+    "@aws-sdk/lib-storage": "^3.583.0",
     "@esm2cjs/execa": "^6.1.1-cjs.1",
     "@oclif/core": "^3",
     "@oclif/plugin-help": "^6",
     "@oclif/plugin-plugins": "^5",
     "@octokit/rest": "^20.1.1",
+    "glob": "^10.4.1",
+    "ignore": "^5.3.1",
     "simple-git": "^3.24.0",
     "yaml": "^2.4.2",
     "zod": "^3.23.8"
@@ -73,7 +77,7 @@
   },
   "repository": "hereya/hereya-cli",
   "scripts": {
-    "generate": "oclif generate command $COMMAND && shx mkdir src/commands/$COMMAND && shx mv src/commands/$COMMAND.ts src/commands/$COMMAND/index.ts && shx mv test/commands/$COMMAND.test.ts src/commands/$COMMAND/index.test.ts && shx rm -rf test",
+    "generate": "npx oclif generate command $COMMAND && shx mkdir src/commands/$COMMAND && shx mv src/commands/$COMMAND.ts src/commands/$COMMAND/index.ts && shx mv test/commands/$COMMAND.test.ts src/commands/$COMMAND/index.test.ts && shx rm -rf test",
     "dev": "./bin/dev.js",
     "build": "shx rm -rf dist && tsc -b",
     "lint": "eslint .",