quidproquo-cli 0.1.5

package/lib/commonjs/lib/runTasks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runTasks.js","sourceRoot":"","sources":["../../../src/lib/runTasks.ts"],"names":[],"mappings":";;;;;;;;;;;;AAGA,+EAA+E;AAC/E,mEAAmE;AAC5D,MAAM,QAAQ,GAAG,CAAO,KAAa,EAAE,KAAa,EAA0B,EAAE;IACrF,MAAM,QAAQ,GAAkB,EAAE,CAAC;IACnC,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/D,MAAM,OAAO,CAAC,GAAG,CACf,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,GAAS,EAAE;QAC7C,OAAO,SAAS,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;YAC9B,SAAS,IAAI,CAAC,CAAC;YACf,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;YACnB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,KAAc,EAAE,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;IACH,CAAC,CAAA,CAAC,CACH,CAAC;IAEF,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAA,CAAC;AApBW,QAAA,QAAQ,YAoBnB;AAEK,MAAM,gBAAgB,GAAG,CAAC,SAAiB,EAAE,QAAuB,EAAQ,EAAE;IACnF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAClC,OAAO,CAAC,KAAK,CAAC,KAAK,SAAS,cAAc,CAAC,CAAC;IAC5C,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC7F,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,KAAK,QAAQ,CAAC,MAAM,iBAAiB,CAAC,CAAC;AACrE,CAAC,CAAC;AALW,QAAA,gBAAgB,oBAK3B","sourcesContent":["export type Task = { label: string; run: () => Promise<void> };\nexport type TaskFailure = { label: string; error: Error };\n\n// Run tasks with at most `limit` in flight; never rejects — failures come back\n// labelled so a whole wave can finish before we report what broke.\nexport const runTasks = async (tasks: Task[], limit: number): Promise<TaskFailure[]> => {\n  const failures: TaskFailure[] = [];\n  let nextIndex = 0;\n\n  const workerCount = Math.max(1, Math.min(limit, tasks.length));\n  await Promise.all(\n    Array.from({ length: workerCount }, async () => {\n      while (nextIndex < tasks.length) {\n        const task = tasks[nextIndex];\n        nextIndex += 1;\n        try {\n          await task.run();\n        } catch (error) {\n          failures.push({ label: task.label, error: error as Error });\n        }\n      }\n    }),\n  );\n\n  return failures;\n};\n\nexport const assertNoFailures = (phaseName: string, failures: TaskFailure[]): void => {\n  if (failures.length === 0) return;\n  console.error(`\\n${phaseName} failed for:`);\n  failures.forEach((failure) => console.error(`  ${failure.label}: ${failure.error.message}`));\n  throw new Error(`${phaseName}: ${failures.length} task(s) failed`);\n};\n"]}

package/lib/commonjs/lib/timing.d.ts

@@ -0,0 +1,2 @@
+export declare const logTimeStart: (name: string) => void;
+export declare const logTimeEnd: (name: string) => void;

package/lib/commonjs/lib/timing.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.logTimeEnd = exports.logTimeStart = void 0;
+const logTimeStart = (name) => console.time(name);
+exports.logTimeStart = logTimeStart;
+const logTimeEnd = (name) => {
+    console.log('When:', new Date().toLocaleTimeString());
+    console.timeEnd(name);
+};
+exports.logTimeEnd = logTimeEnd;
+//# sourceMappingURL=timing.js.map

package/lib/commonjs/lib/timing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"timing.js","sourceRoot":"","sources":["../../../src/lib/timing.ts"],"names":[],"mappings":";;;AAAO,MAAM,YAAY,GAAG,CAAC,IAAY,EAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAA1D,QAAA,YAAY,gBAA8C;AAEhE,MAAM,UAAU,GAAG,CAAC,IAAY,EAAQ,EAAE;IAC/C,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,kBAAkB,EAAE,CAAC,CAAC;IACtD,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AACxB,CAAC,CAAC;AAHW,QAAA,UAAU,cAGrB","sourcesContent":["export const logTimeStart = (name: string): void => console.time(name);\n\nexport const logTimeEnd = (name: string): void => {\n  console.log('When:', new Date().toLocaleTimeString());\n  console.timeEnd(name);\n};\n"]}

package/lib/commonjs/lib/views.d.ts

@@ -0,0 +1,2 @@
+export declare const bundleViews: (appName: string, serviceName: string) => Promise<void>;
+export declare const getViewsDistDir: (appName: string, serviceName: string) => string;

package/lib/commonjs/lib/views.js

@@ -0,0 +1,32 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getViewsDistDir = exports.bundleViews = void 0;
+// Views build — programmatic (getViewsRspackConfig), platform-neutral. Where
+// the built views get hosted is a platform driver concern (see
+// platforms/<platform>/viewsSync).
+const quidproquo_deploy_rspack_1 = require("quidproquo-deploy-rspack");
+const path_1 = __importDefault(require("path"));
+const discovery_1 = require("./discovery");
+const rspackRun_1 = require("./rspackRun");
+const bundleViews = (appName, serviceName) => __awaiter(void 0, void 0, void 0, function* () {
+    const viewsDir = path_1.default.join((0, discovery_1.getServiceDirectory)(appName, serviceName), 'views');
+    process.env.NODE_ENV = 'production';
+    delete process.env.LOCAL_DEV_SERVER;
+    yield (0, rspackRun_1.runRspack)((0, quidproquo_deploy_rspack_1.getViewsRspackConfig)(viewsDir));
+});
+exports.bundleViews = bundleViews;
+const getViewsDistDir = (appName, serviceName) => path_1.default.join((0, discovery_1.getRoot)(), 'dist', 'apps', appName, 'services', serviceName, 'views');
+exports.getViewsDistDir = getViewsDistDir;
+//# sourceMappingURL=views.js.map

package/lib/commonjs/lib/views.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"views.js","sourceRoot":"","sources":["../../../src/lib/views.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,6EAA6E;AAC7E,+DAA+D;AAC/D,mCAAmC;AACnC,uEAAgE;AAEhE,gDAAwB;AAExB,2CAA2D;AAC3D,2CAAwC;AAEjC,MAAM,WAAW,GAAG,CAAO,OAAe,EAAE,WAAmB,EAAiB,EAAE;IACvF,MAAM,QAAQ,GAAG,cAAI,CAAC,IAAI,CAAC,IAAA,+BAAmB,EAAC,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,CAAC;IAE/E,OAAO,CAAC,GAAG,CAAC,QAAQ,GAAG,YAAY,CAAC;IACpC,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAEpC,MAAM,IAAA,qBAAS,EAAC,IAAA,+CAAoB,EAAC,QAAQ,CAAC,CAAC,CAAC;AAClD,CAAC,CAAA,CAAC;AAPW,QAAA,WAAW,eAOtB;AAEK,MAAM,eAAe,GAAG,CAAC,OAAe,EAAE,WAAmB,EAAU,EAAE,CAC9E,cAAI,CAAC,IAAI,CAAC,IAAA,mBAAO,GAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;AADrE,QAAA,eAAe,mBACsD","sourcesContent":["// Views build — programmatic (getViewsRspackConfig), platform-neutral. Where\n// the built views get hosted is a platform driver concern (see\n// platforms/<platform>/viewsSync).\nimport { getViewsRspackConfig } from 'quidproquo-deploy-rspack';\n\nimport path from 'path';\n\nimport { getRoot, getServiceDirectory } from './discovery';\nimport { runRspack } from './rspackRun';\n\nexport const bundleViews = async (appName: string, serviceName: string): Promise<void> => {\n  const viewsDir = path.join(getServiceDirectory(appName, serviceName), 'views');\n\n  process.env.NODE_ENV = 'production';\n  delete process.env.LOCAL_DEV_SERVER;\n\n  await runRspack(getViewsRspackConfig(viewsDir));\n};\n\nexport const getViewsDistDir = (appName: string, serviceName: string): string =>\n  path.join(getRoot(), 'dist', 'apps', appName, 'services', serviceName, 'views');\n"]}

package/lib/commonjs/platforms/aws/awsCredentials.d.ts

@@ -0,0 +1 @@
+export declare const isAwsCredentialsValid: () => Promise<boolean>;

package/lib/commonjs/platforms/aws/awsCredentials.js

@@ -0,0 +1,28 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isAwsCredentialsValid = void 0;
+const client_sts_1 = require("@aws-sdk/client-sts");
+const isAwsCredentialsValid = () => __awaiter(void 0, void 0, void 0, function* () {
+    try {
+        const client = new client_sts_1.STSClient({
+            region: process.env.AWS_REGION || process.env.AWS_DEFAULT_REGION || 'us-east-1',
+        });
+        yield client.send(new client_sts_1.GetCallerIdentityCommand({}));
+        return true;
+    }
+    catch (error) {
+        console.log('Error validating AWS credentials:', error);
+        return false;
+    }
+});
+exports.isAwsCredentialsValid = isAwsCredentialsValid;
+//# sourceMappingURL=awsCredentials.js.map

package/lib/commonjs/platforms/aws/awsCredentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"awsCredentials.js","sourceRoot":"","sources":["../../../../src/platforms/aws/awsCredentials.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,oDAA0E;AAEnE,MAAM,qBAAqB,GAAG,GAA2B,EAAE;IAChE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,sBAAS,CAAC;YAC3B,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,WAAW;SAChF,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,qCAAwB,CAAC,EAAE,CAAC,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;QACxD,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,CAAA,CAAC;AAXW,QAAA,qBAAqB,yBAWhC","sourcesContent":["import { GetCallerIdentityCommand, STSClient } from '@aws-sdk/client-sts';\n\nexport const isAwsCredentialsValid = async (): Promise<boolean> => {\n  try {\n    const client = new STSClient({\n      region: process.env.AWS_REGION || process.env.AWS_DEFAULT_REGION || 'us-east-1',\n    });\n    await client.send(new GetCallerIdentityCommand({}));\n    return true;\n  } catch (error) {\n    console.log('Error validating AWS credentials:', error);\n    return false;\n  }\n};\n"]}

package/lib/commonjs/platforms/aws/cdkApp.d.ts

@@ -0,0 +1,2 @@
+export declare const getCdkAppCommand: () => string;
+export declare const getDockerDir: () => string;

package/lib/commonjs/platforms/aws/cdkApp.js

@@ -0,0 +1,19 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getDockerDir = exports.getCdkAppCommand = void 0;
+const path_1 = __importDefault(require("path"));
+const packageRoot_1 = require("../../lib/packageRoot");
+// The CDK app command (`cdk ... --app "<this>"`): quidproquo-deploy-awscdk's
+// generic workspace app under ts-node hooks, with DEPLOY_* in the env.
+const getCdkAppCommand = () => {
+    const cdkAppScript = path_1.default.join((0, packageRoot_1.getOwnPackageRoot)(), 'lib', 'commonjs', 'bin', 'qpqCdkApp.js');
+    return `node -r ts-node/register/transpile-only "${cdkAppScript}"`;
+};
+exports.getCdkAppCommand = getCdkAppCommand;
+// The docker build context for the go:docker deployer image.
+const getDockerDir = () => path_1.default.join((0, packageRoot_1.getOwnPackageRoot)(), 'docker', 'cdk-deployer');
+exports.getDockerDir = getDockerDir;
+//# sourceMappingURL=cdkApp.js.map

package/lib/commonjs/platforms/aws/cdkApp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cdkApp.js","sourceRoot":"","sources":["../../../../src/platforms/aws/cdkApp.ts"],"names":[],"mappings":";;;;;;AAAA,gDAAwB;AAExB,uDAA0D;AAE1D,6EAA6E;AAC7E,uEAAuE;AAChE,MAAM,gBAAgB,GAAG,GAAW,EAAE;IAC3C,MAAM,YAAY,GAAG,cAAI,CAAC,IAAI,CAAC,IAAA,+BAAiB,GAAE,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;IAC9F,OAAO,4CAA4C,YAAY,GAAG,CAAC;AACrE,CAAC,CAAC;AAHW,QAAA,gBAAgB,oBAG3B;AAEF,6DAA6D;AACtD,MAAM,YAAY,GAAG,GAAW,EAAE,CAAC,cAAI,CAAC,IAAI,CAAC,IAAA,+BAAiB,GAAE,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;AAAtF,QAAA,YAAY,gBAA0E","sourcesContent":["import path from 'path';\n\nimport { getOwnPackageRoot } from '../../lib/packageRoot';\n\n// The CDK app command (`cdk ... --app \"<this>\"`): quidproquo-deploy-awscdk's\n// generic workspace app under ts-node hooks, with DEPLOY_* in the env.\nexport const getCdkAppCommand = (): string => {\n  const cdkAppScript = path.join(getOwnPackageRoot(), 'lib', 'commonjs', 'bin', 'qpqCdkApp.js');\n  return `node -r ts-node/register/transpile-only \"${cdkAppScript}\"`;\n};\n\n// The docker build context for the go:docker deployer image.\nexport const getDockerDir = (): string => path.join(getOwnPackageRoot(), 'docker', 'cdk-deployer');\n"]}

package/lib/commonjs/platforms/aws/go.d.ts

@@ -0,0 +1,2 @@
+import { DeployPlan } from '../../lib/deployPrompts';
+export declare const awsGo: (appName: string, plan: DeployPlan) => Promise<void>;

package/lib/commonjs/platforms/aws/go.js

@@ -0,0 +1,116 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.awsGo = void 0;
+// AWS sequential deploy (`qpq go`). Per service it: synths the QPQ config,
+// rspack-bundles the backend (programmatic — no per-service rspack.config.ts),
+// deploys the inf/api/web CDK stacks (cdk runs the generic workspace app via
+// --app), bundles views (rspack, production) and syncs them to S3.
+const quidproquo_deploy_awscdk_1 = require("quidproquo-deploy-awscdk");
+const quidproquo_deploy_rspack_1 = require("quidproquo-deploy-rspack");
+const path_1 = __importDefault(require("path"));
+const synth_1 = require("../../commands/synth");
+const discovery_1 = require("../../lib/discovery");
+const hooks_1 = require("../../lib/hooks");
+const qpqConfigs_1 = require("../../lib/qpqConfigs");
+const rspackRun_1 = require("../../lib/rspackRun");
+const runCommand_1 = require("../../lib/runCommand");
+const timing_1 = require("../../lib/timing");
+const views_1 = require("../../lib/views");
+const awsCredentials_1 = require("./awsCredentials");
+const stacks_1 = require("./stacks");
+const viewsSync_1 = require("./viewsSync");
+const buildAndDeploy = (serviceName, needsSynth, needsBuildApi, needsInfStack, needsApiStack, needsWebStack, needsViewStack, appName) => __awaiter(void 0, void 0, void 0, function* () {
+    if (needsSynth) {
+        console.log('Synth QPQ Configs');
+        yield (0, synth_1.synthCommand)([serviceName, '--app', appName]);
+    }
+    const qpqConfigForService = (0, qpqConfigs_1.loadServiceQpqConfig)(appName, serviceName);
+    if (needsBuildApi) {
+        console.log('Building Api: ', serviceName);
+        yield (0, rspackRun_1.runRspack)((0, quidproquo_deploy_rspack_1.getServiceRspackConfig)(qpqConfigForService, path_1.default.join((0, discovery_1.getServiceDirectory)(appName, serviceName), 'service')));
+    }
+    if (needsInfStack) {
+        console.log('Deploy Inf: ', serviceName);
+        yield (0, stacks_1.deployServiceStack)(serviceName, quidproquo_deploy_awscdk_1.qpqDeployAwsCdkUtils.getInfStackName(qpqConfigForService), appName);
+    }
+    if (needsApiStack) {
+        console.log('Deploy Api: ', serviceName);
+        yield (0, stacks_1.deployServiceStack)(serviceName, quidproquo_deploy_awscdk_1.qpqDeployAwsCdkUtils.getApiStackName(qpqConfigForService), appName);
+    }
+    if (needsWebStack) {
+        console.log('Deploy Web: ', serviceName);
+        yield (0, stacks_1.deployServiceStack)(serviceName, quidproquo_deploy_awscdk_1.qpqDeployAwsCdkUtils.getWebStackName(qpqConfigForService), appName);
+    }
+    if (needsViewStack && (0, discovery_1.getServiceNamesWithViews)(appName).includes(serviceName)) {
+        console.log('Building Views: ', serviceName);
+        yield (0, views_1.bundleViews)(appName, serviceName);
+        yield (0, viewsSync_1.syncViewsToS3)(appName, serviceName);
+    }
+});
+const awsGo = (appName, plan) => __awaiter(void 0, void 0, void 0, function* () {
+    if (plan.kind === 'cancelled') {
+        return;
+    }
+    (0, timing_1.logTimeStart)('totalTime');
+    if (plan.kind === 'account') {
+        yield (0, stacks_1.deployAccountStack)(plan.appName);
+        (0, timing_1.logTimeEnd)('totalTime');
+        return;
+    }
+    if (plan.kind === 'bootstrap') {
+        // Actor bootstraps deploy into a shared account — leave the account-level
+        // guardrails stack alone (deploy it explicitly via the 'account' option).
+        if (process.env.ACTOR_NAME) {
+            console.log('Skipping account stack for actor deploy');
+        }
+        else {
+            yield (0, stacks_1.deployAccountStack)(plan.appName);
+        }
+        if (plan.includeDomain) {
+            yield (0, stacks_1.deployDomainStack)(plan.appName);
+        }
+        yield (0, stacks_1.deployBootstrapStack)(plan.appName);
+        (0, timing_1.logTimeEnd)('totalTime');
+        return;
+    }
+    const { services, stacks } = plan;
+    const shouldBuildApi = stacks !== 'views';
+    console.log('\n\nRunning automated deploy\n\n');
+    console.log('Executing for services');
+    console.log(services.join(', '));
+    if ((yield (0, awsCredentials_1.isAwsCredentialsValid)()) === false) {
+        console.log('Credentials are expired or invalid.');
+        return;
+    }
+    const allStacks = stacks === 'all';
+    yield (0, hooks_1.runAppHook)(appName, 'predeploy');
+    // Workspace packages resolve through their built dist/ (package.json main),
+    // so bundles would ship stale code unless every lib is tsc'd first.
+    console.log('Building workspace packages');
+    yield (0, runCommand_1.runCommand)('npm', ['run', 'build', '--workspaces', '--if-present']);
+    // Views uploads resolve bucket names from the shell service's config.
+    if (allStacks || stacks === 'views') {
+        yield (0, synth_1.synthCommand)(['shell', '--app', appName]);
+    }
+    for (let phase = 0; phase <= 5; phase += 1) {
+        yield services.reduce((cur, service) => __awaiter(void 0, void 0, void 0, function* () {
+            yield cur;
+            return buildAndDeploy(service, phase === 0, phase === 1 && shouldBuildApi, phase === 2 && (allStacks || stacks === 'inf'), phase === 3 && (allStacks || stacks === 'api'), phase === 4 && (allStacks || stacks === 'web'), phase === 5 && (allStacks || stacks === 'views'), appName);
+        }), Promise.resolve());
+    }
+    (0, timing_1.logTimeEnd)('totalTime');
+});
+exports.awsGo = awsGo;
+//# sourceMappingURL=go.js.map

package/lib/commonjs/platforms/aws/go.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"go.js","sourceRoot":"","sources":["../../../../src/platforms/aws/go.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2EAA2E;AAC3E,+EAA+E;AAC/E,6EAA6E;AAC7E,mEAAmE;AACnE,uEAAgE;AAChE,uEAAkE;AAElE,gDAAwB;AAExB,gDAAoD;AAEpD,mDAAoF;AACpF,2CAA6C;AAC7C,qDAA4D;AAC5D,mDAAgD;AAChD,qDAAkD;AAClD,6CAA4D;AAC5D,2CAA8C;AAC9C,qDAAyD;AACzD,qCAA2G;AAC3G,2CAA4C;AAE5C,MAAM,cAAc,GAAG,CACrB,WAAmB,EACnB,UAAmB,EACnB,aAAsB,EACtB,aAAsB,EACtB,aAAsB,EACtB,aAAsB,EACtB,cAAuB,EACvB,OAAe,EACA,EAAE;IACjB,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QACjC,MAAM,IAAA,oBAAY,EAAC,CAAC,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,mBAAmB,GAAG,IAAA,iCAAoB,EAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAEvE,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC;QAC3C,MAAM,IAAA,qBAAS,EAAC,IAAA,iDAAsB,EAAC,mBAAmB,EAAE,cAAI,CAAC,IAAI,CAAC,IAAA,+BAAmB,EAAC,OAAO,EAAE,WAAW,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IAChI,CAAC;IAED,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QACzC,MAAM,IAAA,2BAAkB,EAAC,WAAW,EAAE,+CAAoB,CAAC,eAAe,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC,CAAC;IAC5G,CAAC;IAED,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QACzC,MAAM,IAAA,2BAAkB,EAAC,WAAW,EAAE,+CAAoB,CAAC,eAAe,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC,CAAC;IAC5G,CAAC;IAED,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QACzC,MAAM,IAAA,2BAAkB,EAAC,WAAW,EAAE,+CAAoB,CAAC,eAAe,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC,CAAC;IAC5G,CAAC;IAED,IAAI,cAAc,IAAI,IAAA,oCAAwB,EAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9E,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,WAAW,CAAC,CAAC;QAC7C,MAAM,IAAA,mBAAW,EAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACxC,MAAM,IAAA,yBAAa,EAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC,CAAA,CAAC;AAEK,MAAM,KAAK,GAAG,CAAO,OAAe,EAAE,IAAgB,EAAiB,EAAE;IAC9E,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC9B,OAAO;IACT,CAAC;IAED,IAAA,qBAAY,EAAC,WAAW,CAAC,CAAC;IAE1B,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAA,2BAAkB,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvC,IAAA,mBAAU,EAAC,WAAW,CAAC,CAAC;QACxB,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC9B,0EAA0E;QAC1E,0EAA0E;QAC1E,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;QACzD,CAAC;aAAM,CAAC;YACN,MAAM,IAAA,2BAAkB,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,MAAM,IAAA,0BAAiB,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,IAAA,6BAAoB,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzC,IAAA,mBAAU,EAAC,WAAW,CAAC,CAAC;QACxB,OAAO;IACT,CAAC;IAED,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAClC,MAAM,cAAc,GAAG,MAAM,KAAK,OAAO,CAAC;IAE1C,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACtC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAEjC,IAAI,CAAC,MAAM,IAAA,sCAAqB,GAAE,CAAC,KAAK,KAAK,EAAE,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;QACnD,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,KAAK,KAAK,CAAC;IAEnC,MAAM,IAAA,kBAAU,EAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAEvC,4EAA4E;IAC5E,oEAAoE;IACpE,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IAC3C,MAAM,IAAA,uBAAU,EAAC,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC;IAE1E,sEAAsE;IACtE,IAAI,SAAS,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACpC,MAAM,IAAA,oBAAY,EAAC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAO,GAAG,EAAE,OAAO,EAAE,EAAE;YAC3C,MAAM,GAAG,CAAC;YACV,OAAO,cAAc,CACnB,OAAO,EACP,KAAK,KAAK,CAAC,EACX,KAAK,KAAK,CAAC,IAAI,cAAc,EAC7B,KAAK,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,KAAK,KAAK,CAAC,EAC9C,KAAK,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,KAAK,KAAK,CAAC,EAC9C,KAAK,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,KAAK,KAAK,CAAC,EAC9C,KAAK,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,KAAK,OAAO,CAAC,EAChD,OAAO,CACR,CAAC;QACJ,CAAC,CAAA,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IACxB,CAAC;IAED,IAAA,mBAAU,EAAC,WAAW,CAAC,CAAC;AAC1B,CAAC,CAAA,CAAC;AAxEW,QAAA,KAAK,SAwEhB","sourcesContent":["// AWS sequential deploy (`qpq go`). Per service it: synths the QPQ config,\n// rspack-bundles the backend (programmatic — no per-service rspack.config.ts),\n// deploys the inf/api/web CDK stacks (cdk runs the generic workspace app via\n// --app), bundles views (rspack, production) and syncs them to S3.\nimport { qpqDeployAwsCdkUtils } from 'quidproquo-deploy-awscdk';\nimport { getServiceRspackConfig } from 'quidproquo-deploy-rspack';\n\nimport path from 'path';\n\nimport { synthCommand } from '../../commands/synth';\nimport { DeployPlan } from '../../lib/deployPrompts';\nimport { getServiceDirectory, getServiceNamesWithViews } from '../../lib/discovery';\nimport { runAppHook } from '../../lib/hooks';\nimport { loadServiceQpqConfig } from '../../lib/qpqConfigs';\nimport { runRspack } from '../../lib/rspackRun';\nimport { runCommand } from '../../lib/runCommand';\nimport { logTimeEnd, logTimeStart } from '../../lib/timing';\nimport { bundleViews } from '../../lib/views';\nimport { isAwsCredentialsValid } from './awsCredentials';\nimport { deployAccountStack, deployBootstrapStack, deployDomainStack, deployServiceStack } from './stacks';\nimport { syncViewsToS3 } from './viewsSync';\n\nconst buildAndDeploy = async (\n  serviceName: string,\n  needsSynth: boolean,\n  needsBuildApi: boolean,\n  needsInfStack: boolean,\n  needsApiStack: boolean,\n  needsWebStack: boolean,\n  needsViewStack: boolean,\n  appName: string,\n): Promise<void> => {\n  if (needsSynth) {\n    console.log('Synth QPQ Configs');\n    await synthCommand([serviceName, '--app', appName]);\n  }\n\n  const qpqConfigForService = loadServiceQpqConfig(appName, serviceName);\n\n  if (needsBuildApi) {\n    console.log('Building Api: ', serviceName);\n    await runRspack(getServiceRspackConfig(qpqConfigForService, path.join(getServiceDirectory(appName, serviceName), 'service')));\n  }\n\n  if (needsInfStack) {\n    console.log('Deploy Inf: ', serviceName);\n    await deployServiceStack(serviceName, qpqDeployAwsCdkUtils.getInfStackName(qpqConfigForService), appName);\n  }\n\n  if (needsApiStack) {\n    console.log('Deploy Api: ', serviceName);\n    await deployServiceStack(serviceName, qpqDeployAwsCdkUtils.getApiStackName(qpqConfigForService), appName);\n  }\n\n  if (needsWebStack) {\n    console.log('Deploy Web: ', serviceName);\n    await deployServiceStack(serviceName, qpqDeployAwsCdkUtils.getWebStackName(qpqConfigForService), appName);\n  }\n\n  if (needsViewStack && getServiceNamesWithViews(appName).includes(serviceName)) {\n    console.log('Building Views: ', serviceName);\n    await bundleViews(appName, serviceName);\n    await syncViewsToS3(appName, serviceName);\n  }\n};\n\nexport const awsGo = async (appName: string, plan: DeployPlan): Promise<void> => {\n  if (plan.kind === 'cancelled') {\n    return;\n  }\n\n  logTimeStart('totalTime');\n\n  if (plan.kind === 'account') {\n    await deployAccountStack(plan.appName);\n    logTimeEnd('totalTime');\n    return;\n  }\n\n  if (plan.kind === 'bootstrap') {\n    // Actor bootstraps deploy into a shared account — leave the account-level\n    // guardrails stack alone (deploy it explicitly via the 'account' option).\n    if (process.env.ACTOR_NAME) {\n      console.log('Skipping account stack for actor deploy');\n    } else {\n      await deployAccountStack(plan.appName);\n    }\n    if (plan.includeDomain) {\n      await deployDomainStack(plan.appName);\n    }\n    await deployBootstrapStack(plan.appName);\n    logTimeEnd('totalTime');\n    return;\n  }\n\n  const { services, stacks } = plan;\n  const shouldBuildApi = stacks !== 'views';\n\n  console.log('\\n\\nRunning automated deploy\\n\\n');\n  console.log('Executing for services');\n  console.log(services.join(', '));\n\n  if ((await isAwsCredentialsValid()) === false) {\n    console.log('Credentials are expired or invalid.');\n    return;\n  }\n\n  const allStacks = stacks === 'all';\n\n  await runAppHook(appName, 'predeploy');\n\n  // Workspace packages resolve through their built dist/ (package.json main),\n  // so bundles would ship stale code unless every lib is tsc'd first.\n  console.log('Building workspace packages');\n  await runCommand('npm', ['run', 'build', '--workspaces', '--if-present']);\n\n  // Views uploads resolve bucket names from the shell service's config.\n  if (allStacks || stacks === 'views') {\n    await synthCommand(['shell', '--app', appName]);\n  }\n\n  for (let phase = 0; phase <= 5; phase += 1) {\n    await services.reduce(async (cur, service) => {\n      await cur;\n      return buildAndDeploy(\n        service,\n        phase === 0,\n        phase === 1 && shouldBuildApi,\n        phase === 2 && (allStacks || stacks === 'inf'),\n        phase === 3 && (allStacks || stacks === 'api'),\n        phase === 4 && (allStacks || stacks === 'web'),\n        phase === 5 && (allStacks || stacks === 'views'),\n        appName,\n      );\n    }, Promise.resolve());\n  }\n\n  logTimeEnd('totalTime');\n};\n"]}

package/lib/commonjs/platforms/aws/goDocker.d.ts

@@ -0,0 +1,2 @@
+import { DeployPlan } from '../../lib/deployPrompts';
+export declare const awsGoDocker: (appName: string, plan: DeployPlan) => Promise<void>;

package/lib/commonjs/platforms/aws/goDocker.js

@@ -0,0 +1,287 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.awsGoDocker = void 0;
+// `qpq go:docker` — asks the same questions as `qpq go`, then deploys in
+// parallel via docker instead of sequentially:
+//
+//   1. Build everything locally first: QPQ config synth, rspack API bundles,
+//      rspack view bundles, and one self-contained CDK cloud assembly per
+//      service (`cdk synth --output dist/qpq/cdk-docker/<app>/<service>`).
+//   2. Wave 1 (inf): one docker container per service deploys its inf stack,
+//      all concurrently. Containers run only the CDK CLI against the mounted
+//      pre-synthesized assembly — the workspace (and its npm-linked
+//      quidproquo packages) never needs to exist inside the image.
+//   3. Wave 2 (api + web): once every inf stack is done, api and web stacks
+//      for all services deploy concurrently (they depend only on inf, not on
+//      each other).
+//   4. Views: the already-built bundles are synced to S3, one aws-cli
+//      container per service, all concurrently.
+//
+// domain/bootstrap menu options deploy host-side exactly like `qpq go` —
+// a single stack gains nothing from docker.
+//
+// Requires the same env as `go` plus a running docker daemon. Knobs:
+// GO_DOCKER_BUILD_CONCURRENCY (default 4 — local builds are CPU-bound) and
+// GO_DOCKER_DEPLOY_CONCURRENCY (default unlimited — deploys just wait on
+// CloudFormation).
+const quidproquo_deploy_awscdk_1 = require("quidproquo-deploy-awscdk");
+const quidproquo_deploy_rspack_1 = require("quidproquo-deploy-rspack");
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const synth_1 = require("../../commands/synth");
+const discovery_1 = require("../../lib/discovery");
+const hooks_1 = require("../../lib/hooks");
+const qpqConfigs_1 = require("../../lib/qpqConfigs");
+const rspackRun_1 = require("../../lib/rspackRun");
+const runCommand_1 = require("../../lib/runCommand");
+const runTasks_1 = require("../../lib/runTasks");
+const timing_1 = require("../../lib/timing");
+const views_1 = require("../../lib/views");
+const awsCredentials_1 = require("./awsCredentials");
+const cdkApp_1 = require("./cdkApp");
+const stacks_1 = require("./stacks");
+const viewsSync_1 = require("./viewsSync");
+const IMAGE_TAG = 'qpq-cdk-deployer';
+const AWS_CLI_IMAGE = 'amazon/aws-cli';
+const BUILD_CONCURRENCY = Number(process.env.GO_DOCKER_BUILD_CONCURRENCY) || 4;
+const DEPLOY_CONCURRENCY = Number(process.env.GO_DOCKER_DEPLOY_CONCURRENCY) || Infinity;
+// Credentials/region reach the containers via `docker run -e NAME` (value
+// inherited from this process's env, never on the docker command line).
+const AWS_ENV_PASSTHROUGH = [
+    'AWS_ACCESS_KEY_ID',
+    'AWS_SECRET_ACCESS_KEY',
+    'AWS_SESSION_TOKEN',
+    'AWS_REGION',
+    'AWS_DEFAULT_REGION',
+    'AWS_DEFAULT_ACCOUNT',
+];
+const assemblyDir = (appName, serviceName) => path_1.default.join((0, discovery_1.getRoot)(), 'dist', 'qpq', 'cdk-docker', appName, serviceName);
+const assertDockerRunning = () => __awaiter(void 0, void 0, void 0, function* () {
+    try {
+        yield (0, runCommand_1.runCommand)('docker', ['info', '--format', '"docker daemon ok — server {{.ServerVersion}}"']);
+    }
+    catch (_a) {
+        throw new Error('Docker daemon is not running (start Docker Desktop and retry).');
+    }
+});
+const buildDeployerImage = () => __awaiter(void 0, void 0, void 0, function* () {
+    // Pin the image's CDK CLI to the CLI's own aws-cdk version so it can always
+    // read the assembly schema the host synthesized.
+    // eslint-disable-next-line @typescript-eslint/no-require-imports
+    const cdkVersion = require('aws-cdk/package.json').version;
+    console.log(`Building deployer image [${IMAGE_TAG}] (aws-cdk ${cdkVersion})`);
+    yield (0, runCommand_1.runCommand)('docker', ['build', '-t', IMAGE_TAG, '--build-arg', `CDK_VERSION=${cdkVersion}`, (0, cdkApp_1.getDockerDir)()]);
+});
+// Deploy one stack from a pre-synthesized assembly in a throwaway container
+// named <service>-<stackType> (e.g. mini-web) so `docker ps` reads cleanly.
+// The assembly mounts read-only and is copied container-local first — the CDK
+// CLI writes lock files next to the assembly it reads, and the copy keeps
+// parallel api/web deploys of the same service fully isolated.
+const dockerDeployStack = (color, appName, serviceName, stackType, stackName) => {
+    const containerName = `${serviceName}-${stackType}`;
+    return (0, runCommand_1.runCommandPrefixed)(`${stackType}:${serviceName}`, 'docker', [
+        // A container left behind by an interrupted run would block reusing the
+        // name — clear it quietly first.
+        'rm',
+        '-f',
+        containerName,
+        '>/dev/null',
+        '2>&1',
+        ';',
+        'docker',
+        'run',
+        '--rm',
+        '--name',
+        containerName,
+        '-v',
+        `"${assemblyDir(appName, serviceName)}:/assembly:ro"`,
+        ...AWS_ENV_PASSTHROUGH.flatMap((name) => ['-e', name]),
+        IMAGE_TAG,
+        'bash',
+        '-c',
+        `"cp -r /assembly /work/assembly && cdk deploy ${stackName} --app /work/assembly --require-approval never --progress events"`,
+    ], { color });
+};
+// Sync one service's pre-built views to S3 in a throwaway aws-cli container
+// named <service>-views. The official image's entrypoint is `aws`. Multiple
+// destinations (shell → website root + views prefix) run sequentially within
+// the service, reusing the container name.
+const dockerSyncViews = (color, appName, serviceName) => __awaiter(void 0, void 0, void 0, function* () {
+    const containerName = `${serviceName}-views`;
+    for (const destination of (0, viewsSync_1.getViewsS3Destinations)(appName, serviceName)) {
+        yield (0, runCommand_1.runCommandPrefixed)(`views:${serviceName}`, 'docker', [
+            'rm',
+            '-f',
+            containerName,
+            '>/dev/null',
+            '2>&1',
+            ';',
+            'docker',
+            'run',
+            '--rm',
+            '--name',
+            containerName,
+            '-v',
+            `"${(0, views_1.getViewsDistDir)(appName, serviceName)}:/views:ro"`,
+            ...AWS_ENV_PASSTHROUGH.flatMap((name) => ['-e', name]),
+            AWS_CLI_IMAGE,
+            's3',
+            'sync',
+            '/views',
+            destination,
+        ], { color });
+    }
+});
+const awsGoDocker = (appName, plan) => __awaiter(void 0, void 0, void 0, function* () {
+    if (plan.kind === 'cancelled') {
+        return;
+    }
+    if ((yield (0, awsCredentials_1.isAwsCredentialsValid)()) === false) {
+        console.log('Credentials are expired or invalid.');
+        return;
+    }
+    (0, timing_1.logTimeStart)('totalTime');
+    if (plan.kind === 'account') {
+        yield (0, stacks_1.deployAccountStack)(plan.appName);
+        (0, timing_1.logTimeEnd)('totalTime');
+        return;
+    }
+    if (plan.kind === 'bootstrap') {
+        if (plan.includeDomain) {
+            yield (0, stacks_1.deployDomainStack)(plan.appName);
+        }
+        yield (0, stacks_1.deployBootstrapStack)(plan.appName);
+        (0, timing_1.logTimeEnd)('totalTime');
+        return;
+    }
+    const { services, stacks } = plan;
+    const allStacks = stacks === 'all';
+    const needInf = allStacks || stacks === 'inf';
+    const needApi = allStacks || stacks === 'api';
+    const needWeb = allStacks || stacks === 'web';
+    const needViews = allStacks || stacks === 'views';
+    const needCdkDeploys = needInf || needApi || needWeb;
+    const viewServices = needViews ? services.filter((s) => (0, discovery_1.getServiceNamesWithViews)(appName).includes(s)) : [];
+    console.log('\n\nRunning dockerized deploy\n\n');
+    console.log('Executing for services');
+    console.log(services.join(', '));
+    if (needCdkDeploys || viewServices.length > 0) {
+        yield assertDockerRunning();
+    }
+    if (needCdkDeploys) {
+        yield buildDeployerImage();
+    }
+    if (viewServices.length > 0) {
+        // Pull up front so the views wave doesn't race N containers into pulling
+        // the same image.
+        yield (0, runCommand_1.runCommand)('docker', ['pull', AWS_CLI_IMAGE]);
+    }
+    // ---- Phase 1: build everything locally ----
+    console.log('\n=== Phase 1: local builds ===\n');
+    yield (0, hooks_1.runAppHook)(appName, 'predeploy');
+    // Workspace packages resolve through their built dist/ (package.json main),
+    // so bundles would ship stale code unless every lib is tsc'd first. npm runs
+    // the workspaces in topological order; tsc -b is incremental, so this is
+    // seconds when nothing changed.
+    console.log('Building workspace packages');
+    yield (0, runCommand_1.runCommand)('npm', ['run', 'build', '--workspaces', '--if-present']);
+    // Synth QPQ configs (shell's config resolves the view bucket names).
+    // In-process (no subprocess per service) — it's just config loads + JSON writes.
+    const qpqSynthServices = [...new Set([...services, ...(needViews ? ['shell'] : [])])];
+    for (const service of qpqSynthServices) {
+        yield (0, synth_1.synthCommand)([service, '--app', appName]);
+    }
+    if (stacks !== 'views') {
+        (0, runTasks_1.assertNoFailures)('API bundling', yield (0, runTasks_1.runTasks)(services.map((service) => ({
+            label: `bundle-api:${service}`,
+            run: () => __awaiter(void 0, void 0, void 0, function* () {
+                console.log(`Bundling api: [${service}]`);
+                const qpqConfig = (0, qpqConfigs_1.loadServiceQpqConfig)(appName, service);
+                yield (0, rspackRun_1.runRspack)((0, quidproquo_deploy_rspack_1.getServiceRspackConfig)(qpqConfig, path_1.default.join((0, discovery_1.getServiceDirectory)(appName, service), 'service')));
+            }),
+        })), BUILD_CONCURRENCY));
+    }
+    (0, runTasks_1.assertNoFailures)('Views bundling', yield (0, runTasks_1.runTasks)(viewServices.map((service) => ({
+        label: `bundle-views:${service}`,
+        run: () => __awaiter(void 0, void 0, void 0, function* () {
+            console.log(`Bundling views: [${service}]`);
+            yield (0, views_1.bundleViews)(appName, service);
+        }),
+    })), BUILD_CONCURRENCY));
+    if (needCdkDeploys) {
+        // One self-contained cloud assembly per service (all its stacks + staged
+        // assets) — separate --output dirs so synths can run in parallel and
+        // containers never share mutable state.
+        (0, runTasks_1.assertNoFailures)('CDK synth', yield (0, runTasks_1.runTasks)(services.map((service) => ({
+            label: `cdk-synth:${service}`,
+            run: () => __awaiter(void 0, void 0, void 0, function* () {
+                const outputDir = assemblyDir(appName, service);
+                fs_1.default.rmSync(outputDir, { recursive: true, force: true });
+                yield (0, runCommand_1.runCommandPrefixed)(`cdk-synth:${service}`, 'npx', ['cdk', 'synth', '--all', '--quiet', '--app', `'${(0, cdkApp_1.getCdkAppCommand)()}'`, '--output', `"${outputDir}"`], {
+                    cwd: (0, discovery_1.getRoot)(),
+                    env: { DEPLOY_SERVICE_NAME: service, DEPLOY_APP_NAME: appName },
+                    color: (0, runCommand_1.nextPrefixColor)(),
+                });
+            }),
+        })), BUILD_CONCURRENCY));
+    }
+    // Stack names come from each service's live config, resolved once up front.
+    const stackNames = new Map(services.map((service) => {
+        const qpqConfig = (0, qpqConfigs_1.loadServiceQpqConfig)(appName, service);
+        return [
+            service,
+            {
+                inf: quidproquo_deploy_awscdk_1.qpqDeployAwsCdkUtils.getInfStackName(qpqConfig),
+                api: quidproquo_deploy_awscdk_1.qpqDeployAwsCdkUtils.getApiStackName(qpqConfig),
+                web: quidproquo_deploy_awscdk_1.qpqDeployAwsCdkUtils.getWebStackName(qpqConfig),
+            },
+        ];
+    }));
+    // ---- Phase 2: inf stacks, one container per service, all concurrent ----
+    if (needInf) {
+        console.log('\n=== Phase 2: deploy inf stacks (docker) ===\n');
+        (0, timing_1.logTimeStart)('infWave');
+        (0, runTasks_1.assertNoFailures)('Inf deploy', yield (0, runTasks_1.runTasks)(services.map((service) => ({
+            label: `inf:${service}`,
+            run: () => dockerDeployStack((0, runCommand_1.nextPrefixColor)(), appName, service, 'inf', stackNames.get(service).inf),
+        })), DEPLOY_CONCURRENCY));
+        (0, timing_1.logTimeEnd)('infWave');
+    }
+    // ---- Phase 3: api + web stacks, all concurrent ----
+    if (needApi || needWeb) {
+        console.log('\n=== Phase 3: deploy api + web stacks (docker) ===\n');
+        (0, timing_1.logTimeStart)('apiWebWave');
+        (0, runTasks_1.assertNoFailures)('Api/Web deploy', yield (0, runTasks_1.runTasks)(['api', 'web']
+            .filter((stackType) => (stackType === 'api' ? needApi : needWeb))
+            .flatMap((stackType) => services.map((service) => ({
+            label: `${stackType}:${service}`,
+            run: () => dockerDeployStack((0, runCommand_1.nextPrefixColor)(), appName, service, stackType, stackNames.get(service)[stackType]),
+        }))), DEPLOY_CONCURRENCY));
+        (0, timing_1.logTimeEnd)('apiWebWave');
+    }
+    // ---- Phase 4: sync the pre-built views to S3, all concurrent ----
+    if (viewServices.length > 0) {
+        console.log('\n=== Phase 4: sync views to S3 (docker) ===\n');
+        (0, timing_1.logTimeStart)('viewsWave');
+        (0, runTasks_1.assertNoFailures)('Views sync', yield (0, runTasks_1.runTasks)(viewServices.map((service) => ({
+            label: `views:${service}`,
+            run: () => dockerSyncViews((0, runCommand_1.nextPrefixColor)(), appName, service),
+        })), DEPLOY_CONCURRENCY));
+        (0, timing_1.logTimeEnd)('viewsWave');
+    }
+    (0, timing_1.logTimeEnd)('totalTime');
+});
+exports.awsGoDocker = awsGoDocker;
+//# sourceMappingURL=goDocker.js.map