quidproquo-cli 0.1.5

package/lib/commonjs/platforms/aws/goDocker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"goDocker.js","sourceRoot":"","sources":["../../../../src/platforms/aws/goDocker.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,yEAAyE;AACzE,+CAA+C;AAC/C,EAAE;AACF,6EAA6E;AAC7E,0EAA0E;AAC1E,2EAA2E;AAC3E,6EAA6E;AAC7E,6EAA6E;AAC7E,oEAAoE;AACpE,mEAAmE;AACnE,4EAA4E;AAC5E,6EAA6E;AAC7E,oBAAoB;AACpB,sEAAsE;AACtE,gDAAgD;AAChD,EAAE;AACF,yEAAyE;AACzE,4CAA4C;AAC5C,EAAE;AACF,qEAAqE;AACrE,2EAA2E;AAC3E,yEAAyE;AACzE,mBAAmB;AACnB,uEAAgE;AAChE,uEAAkE;AAElE,4CAAoB;AACpB,gDAAwB;AAExB,gDAAoD;AAEpD,mDAA6F;AAC7F,2CAA6C;AAC7C,qDAA4D;AAC5D,mDAAgD;AAChD,qDAAuF;AACvF,iDAAgE;AAChE,6CAA4D;AAC5D,2CAA+D;AAC/D,qDAAyD;AACzD,qCAA0D;AAC1D,qCAAuF;AACvF,2CAAqD;AAErD,MAAM,SAAS,GAAG,kBAAkB,CAAC;AACrC,MAAM,aAAa,GAAG,gBAAgB,CAAC;AAEvC,MAAM,iBAAiB,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,IAAI,CAAC,CAAC;AAC/E,MAAM,kBAAkB,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,IAAI,QAAQ,CAAC;AAExF,0EAA0E;AAC1E,wEAAwE;AACxE,MAAM,mBAAmB,GAAG;IAC1B,mBAAmB;IACnB,uBAAuB;IACvB,mBAAmB;IACnB,YAAY;IACZ,oBAAoB;IACpB,qBAAqB;CACtB,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,OAAe,EAAE,WAAmB,EAAU,EAAE,CAAC,cAAI,CAAC,IAAI,CAAC,IAAA,mBAAO,GAAE,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;AAE9I,MAAM,mBAAmB,GAAG,GAAwB,EAAE;IACpD,IAAI,CAAC;QACH,MAAM,IAAA,uBAAU,EAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,gDAAgD,CAAC,CAAC,CAAC;IACrG,CAAC;IAAC,WAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;AACH,CAAC,CAAA,CAAC;AAEF,MAAM,kBAAkB,GAAG,GAAwB,EAAE;IACnD,4EAA4E;IAC5E,iDAAiD;IACjD,iEAAiE;IACjE,MAAM,UAAU,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC,OAAiB,CAAC;IACrE,OAAO,CAAC,GAAG,CAAC,4BAA4B,SAAS,cAAc,UAAU,GAAG,CAAC,CAAC;IAC9E,MAAM,IAAA,uBAAU,EAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,eAAe,UAAU,EAAE,EAAE,IAAA,qBAAY,GAAE,CAAC,CAAC,CAAC;AACrH,CAAC,CAAA,CAAC;AAEF,4EAA4E;AAC5E,4EAA4E;AAC5E,8EAA8E;AAC9E,0EAA0E;AAC1E,+DAA+D;AAC/D,MAAM,iBAAiB,GAAG,CACxB,KAAa,EACb,OAAe,EACf,WAAmB,EACnB,SAAgC,EAChC,SAAiB,EACF,EAAE;IACjB,MAAM,aAAa,GAAG,GAAG,WAAW,IAAI,SAAS,EAAE,CAAC;IACpD,OAAO,IAAA,+BAAkB,EACvB,GAAG,SAAS,IAAI,WAAW,EAAE,EAC7B,QAAQ,EACR;QACE,wEAAwE;QACxE,iCAAiC;QACjC,IAAI;QACJ,IAAI;QACJ,aAAa;QACb,YAAY;QACZ,MAAM;QACN,GAAG;QACH,QAAQ;QACR,KAAK;QACL,MAAM;QACN,QAAQ;QACR,aAAa;QACb,IAAI;QACJ,IAAI,WAAW,CAAC,OAAO,EAAE,WAAW,CAAC,gBAAgB;QACrD,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACtD,SAAS;QACT,MAAM;QACN,IAAI;QACJ,iDAAiD,SAAS,mEAAmE;KAC9H,EACD,EAAE,KAAK,EAAE,CACV,CAAC;AACJ,CAAC,CAAC;AAEF,4EAA4E;AAC5E,4EAA4E;AAC5E,6EAA6E;AAC7E,2CAA2C;AAC3C,MAAM,eAAe,GAAG,CAAO,KAAa,EAAE,OAAe,EAAE,WAAmB,EAAiB,EAAE;IACnG,MAAM,aAAa,GAAG,GAAG,WAAW,QAAQ,CAAC;IAC7C,KAAK,MAAM,WAAW,IAAI,IAAA,kCAAsB,EAAC,OAAO,EAAE,WAAW,CAAC,EAAE,CAAC;QACvE,MAAM,IAAA,+BAAkB,EACtB,SAAS,WAAW,EAAE,EACtB,QAAQ,EACR;YACE,IAAI;YACJ,IAAI;YACJ,aAAa;YACb,YAAY;YACZ,MAAM;YACN,GAAG;YACH,QAAQ;YACR,KAAK;YACL,MAAM;YACN,QAAQ;YACR,aAAa;YACb,IAAI;YACJ,IAAI,IAAA,uBAAe,EAAC,OAAO,EAAE,WAAW,CAAC,aAAa;YACtD,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACtD,aAAa;YACb,IAAI;YACJ,MAAM;YACN,QAAQ;YACR,WAAW;SACZ,EACD,EAAE,KAAK,EAAE,CACV,CAAC;IACJ,CAAC;AACH,CAAC,CAAA,CAAC;AAEK,MAAM,WAAW,GAAG,CAAO,OAAe,EAAE,IAAgB,EAAiB,EAAE;IACpF,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC9B,OAAO;IACT,CAAC;IAED,IAAI,CAAC,MAAM,IAAA,sCAAqB,GAAE,CAAC,KAAK,KAAK,EAAE,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;QACnD,OAAO;IACT,CAAC;IAED,IAAA,qBAAY,EAAC,WAAW,CAAC,CAAC;IAE1B,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAA,2BAAkB,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvC,IAAA,mBAAU,EAAC,WAAW,CAAC,CAAC;QACxB,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,MAAM,IAAA,0BAAiB,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,IAAA,6BAAoB,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzC,IAAA,mBAAU,EAAC,WAAW,CAAC,CAAC;QACxB,OAAO;IACT,CAAC;IAED,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAElC,MAAM,SAAS,GAAG,MAAM,KAAK,KAAK,CAAC;IACnC,MAAM,OAAO,GAAG,SAAS,IAAI,MAAM,KAAK,KAAK,CAAC;IAC9C,MAAM,OAAO,GAAG,SAAS,IAAI,MAAM,KAAK,KAAK,CAAC;IAC9C,MAAM,OAAO,GAAG,SAAS,IAAI,MAAM,KAAK,KAAK,CAAC;IAC9C,MAAM,SAAS,GAAG,SAAS,IAAI,MAAM,KAAK,OAAO,CAAC;IAClD,MAAM,cAAc,GAAG,OAAO,IAAI,OAAO,IAAI,OAAO,CAAC;IAErD,MAAM,YAAY,GAAG,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,oCAAwB,EAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAE5G,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACtC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAEjC,IAAI,cAAc,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,mBAAmB,EAAE,CAAC;IAC9B,CAAC;IACD,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,kBAAkB,EAAE,CAAC;IAC7B,CAAC;IACD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,yEAAyE;QACzE,kBAAkB;QAClB,MAAM,IAAA,uBAAU,EAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;IACtD,CAAC;IAED,8CAA8C;IAC9C,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;IAEjD,MAAM,IAAA,kBAAU,EAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAEvC,4EAA4E;IAC5E,6EAA6E;IAC7E,yEAAyE;IACzE,gCAAgC;IAChC,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IAC3C,MAAM,IAAA,uBAAU,EAAC,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC;IAE1E,qEAAqE;IACrE,iFAAiF;IACjF,MAAM,gBAAgB,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACtF,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;QACvC,MAAM,IAAA,oBAAY,EAAC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,IAAA,2BAAgB,EACd,cAAc,EACd,MAAM,IAAA,mBAAQ,EACZ,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACzB,KAAK,EAAE,cAAc,OAAO,EAAE;YAC9B,GAAG,EAAE,GAAS,EAAE;gBACd,OAAO,CAAC,GAAG,CAAC,kBAAkB,OAAO,GAAG,CAAC,CAAC;gBAC1C,MAAM,SAAS,GAAG,IAAA,iCAAoB,EAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACzD,MAAM,IAAA,qBAAS,EAAC,IAAA,iDAAsB,EAAC,SAAS,EAAE,cAAI,CAAC,IAAI,CAAC,IAAA,+BAAmB,EAAC,OAAO,EAAE,OAAO,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;YAClH,CAAC,CAAA;SACF,CAAC,CAAC,EACH,iBAAiB,CAClB,CACF,CAAC;IACJ,CAAC;IAED,IAAA,2BAAgB,EACd,gBAAgB,EAChB,MAAM,IAAA,mBAAQ,EACZ,YAAY,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC7B,KAAK,EAAE,gBAAgB,OAAO,EAAE;QAChC,GAAG,EAAE,GAAS,EAAE;YACd,OAAO,CAAC,GAAG,CAAC,oBAAoB,OAAO,GAAG,CAAC,CAAC;YAC5C,MAAM,IAAA,mBAAW,EAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACtC,CAAC,CAAA;KACF,CAAC,CAAC,EACH,iBAAiB,CAClB,CACF,CAAC;IAEF,IAAI,cAAc,EAAE,CAAC;QACnB,yEAAyE;QACzE,qEAAqE;QACrE,wCAAwC;QACxC,IAAA,2BAAgB,EACd,WAAW,EACX,MAAM,IAAA,mBAAQ,EACZ,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACzB,KAAK,EAAE,aAAa,OAAO,EAAE;YAC7B,GAAG,EAAE,GAAS,EAAE;gBACd,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAChD,YAAE,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvD,MAAM,IAAA,+BAAkB,EACtB,aAAa,OAAO,EAAE,EACtB,KAAK,EACL,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,IAAA,yBAAgB,GAAE,GAAG,EAAE,UAAU,EAAE,IAAI,SAAS,GAAG,CAAC,EACtG;oBACE,GAAG,EAAE,IAAA,mBAAO,GAAE;oBACd,GAAG,EAAE,EAAE,mBAAmB,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE;oBAC/D,KAAK,EAAE,IAAA,4BAAe,GAAE;iBACzB,CACF,CAAC;YACJ,CAAC,CAAA;SACF,CAAC,CAAC,EACH,iBAAiB,CAClB,CACF,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,MAAM,UAAU,GAAG,IAAI,GAAG,CACxB,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QACvB,MAAM,SAAS,GAAG,IAAA,iCAAoB,EAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACzD,OAAO;YACL,OAAO;YACP;gBACE,GAAG,EAAE,+CAAoB,CAAC,eAAe,CAAC,SAAS,CAAC;gBACpD,GAAG,EAAE,+CAAoB,CAAC,eAAe,CAAC,SAAS,CAAC;gBACpD,GAAG,EAAE,+CAAoB,CAAC,eAAe,CAAC,SAAS,CAAC;aACrD;SACF,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;IAEF,2EAA2E;IAC3E,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;QAC/D,IAAA,qBAAY,EAAC,SAAS,CAAC,CAAC;QACxB,IAAA,2BAAgB,EACd,YAAY,EACZ,MAAM,IAAA,mBAAQ,EACZ,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACzB,KAAK,EAAE,OAAO,OAAO,EAAE;YACvB,GAAG,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,IAAA,4BAAe,GAAE,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,OAAO,CAAE,CAAC,GAAG,CAAC;SACvG,CAAC,CAAC,EACH,kBAAkB,CACnB,CACF,CAAC;QACF,IAAA,mBAAU,EAAC,SAAS,CAAC,CAAC;IACxB,CAAC;IAED,sDAAsD;IACtD,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;QACrE,IAAA,qBAAY,EAAC,YAAY,CAAC,CAAC;QAC3B,IAAA,2BAAgB,EACd,gBAAgB,EAChB,MAAM,IAAA,mBAAQ,EACX,CAAC,KAAK,EAAE,KAAK,CAAW;aACtB,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;aAChE,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE,CACrB,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACzB,KAAK,EAAE,GAAG,SAAS,IAAI,OAAO,EAAE;YAChC,GAAG,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,IAAA,4BAAe,GAAE,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC,GAAG,CAAC,OAAO,CAAE,CAAC,SAAS,CAAC,CAAC;SAClH,CAAC,CAAC,CACJ,EACH,kBAAkB,CACnB,CACF,CAAC;QACF,IAAA,mBAAU,EAAC,YAAY,CAAC,CAAC;IAC3B,CAAC;IAED,oEAAoE;IACpE,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;QAC9D,IAAA,qBAAY,EAAC,WAAW,CAAC,CAAC;QAC1B,IAAA,2BAAgB,EACd,YAAY,EACZ,MAAM,IAAA,mBAAQ,EACZ,YAAY,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAC7B,KAAK,EAAE,SAAS,OAAO,EAAE;YACzB,GAAG,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,IAAA,4BAAe,GAAE,EAAE,OAAO,EAAE,OAAO,CAAC;SAChE,CAAC,CAAC,EACH,kBAAkB,CACnB,CACF,CAAC;QACF,IAAA,mBAAU,EAAC,WAAW,CAAC,CAAC;IAC1B,CAAC;IAED,IAAA,mBAAU,EAAC,WAAW,CAAC,CAAC;AAC1B,CAAC,CAAA,CAAC;AA5MW,QAAA,WAAW,eA4MtB","sourcesContent":["// `qpq go:docker` — asks the same questions as `qpq go`, then deploys in\n// parallel via docker instead of sequentially:\n//\n//   1. Build everything locally first: QPQ config synth, rspack API bundles,\n//      rspack view bundles, and one self-contained CDK cloud assembly per\n//      service (`cdk synth --output dist/qpq/cdk-docker/<app>/<service>`).\n//   2. Wave 1 (inf): one docker container per service deploys its inf stack,\n//      all concurrently. Containers run only the CDK CLI against the mounted\n//      pre-synthesized assembly — the workspace (and its npm-linked\n//      quidproquo packages) never needs to exist inside the image.\n//   3. Wave 2 (api + web): once every inf stack is done, api and web stacks\n//      for all services deploy concurrently (they depend only on inf, not on\n//      each other).\n//   4. Views: the already-built bundles are synced to S3, one aws-cli\n//      container per service, all concurrently.\n//\n// domain/bootstrap menu options deploy host-side exactly like `qpq go` —\n// a single stack gains nothing from docker.\n//\n// Requires the same env as `go` plus a running docker daemon. Knobs:\n// GO_DOCKER_BUILD_CONCURRENCY (default 4 — local builds are CPU-bound) and\n// GO_DOCKER_DEPLOY_CONCURRENCY (default unlimited — deploys just wait on\n// CloudFormation).\nimport { qpqDeployAwsCdkUtils } from 'quidproquo-deploy-awscdk';\nimport { getServiceRspackConfig } from 'quidproquo-deploy-rspack';\n\nimport fs from 'fs';\nimport path from 'path';\n\nimport { synthCommand } from '../../commands/synth';\nimport { DeployPlan } from '../../lib/deployPrompts';\nimport { getRoot, getServiceDirectory, getServiceNamesWithViews } from '../../lib/discovery';\nimport { runAppHook } from '../../lib/hooks';\nimport { loadServiceQpqConfig } from '../../lib/qpqConfigs';\nimport { runRspack } from '../../lib/rspackRun';\nimport { nextPrefixColor, runCommand, runCommandPrefixed } from '../../lib/runCommand';\nimport { assertNoFailures, runTasks } from '../../lib/runTasks';\nimport { logTimeEnd, logTimeStart } from '../../lib/timing';\nimport { bundleViews, getViewsDistDir } from '../../lib/views';\nimport { isAwsCredentialsValid } from './awsCredentials';\nimport { getCdkAppCommand, getDockerDir } from './cdkApp';\nimport { deployAccountStack, deployBootstrapStack, deployDomainStack } from './stacks';\nimport { getViewsS3Destinations } from './viewsSync';\n\nconst IMAGE_TAG = 'qpq-cdk-deployer';\nconst AWS_CLI_IMAGE = 'amazon/aws-cli';\n\nconst BUILD_CONCURRENCY = Number(process.env.GO_DOCKER_BUILD_CONCURRENCY) || 4;\nconst DEPLOY_CONCURRENCY = Number(process.env.GO_DOCKER_DEPLOY_CONCURRENCY) || Infinity;\n\n// Credentials/region reach the containers via `docker run -e NAME` (value\n// inherited from this process's env, never on the docker command line).\nconst AWS_ENV_PASSTHROUGH = [\n  'AWS_ACCESS_KEY_ID',\n  'AWS_SECRET_ACCESS_KEY',\n  'AWS_SESSION_TOKEN',\n  'AWS_REGION',\n  'AWS_DEFAULT_REGION',\n  'AWS_DEFAULT_ACCOUNT',\n];\n\nconst assemblyDir = (appName: string, serviceName: string): string => path.join(getRoot(), 'dist', 'qpq', 'cdk-docker', appName, serviceName);\n\nconst assertDockerRunning = async (): Promise<void> => {\n  try {\n    await runCommand('docker', ['info', '--format', '\"docker daemon ok — server {{.ServerVersion}}\"']);\n  } catch {\n    throw new Error('Docker daemon is not running (start Docker Desktop and retry).');\n  }\n};\n\nconst buildDeployerImage = async (): Promise<void> => {\n  // Pin the image's CDK CLI to the CLI's own aws-cdk version so it can always\n  // read the assembly schema the host synthesized.\n  // eslint-disable-next-line @typescript-eslint/no-require-imports\n  const cdkVersion = require('aws-cdk/package.json').version as string;\n  console.log(`Building deployer image [${IMAGE_TAG}] (aws-cdk ${cdkVersion})`);\n  await runCommand('docker', ['build', '-t', IMAGE_TAG, '--build-arg', `CDK_VERSION=${cdkVersion}`, getDockerDir()]);\n};\n\n// Deploy one stack from a pre-synthesized assembly in a throwaway container\n// named <service>-<stackType> (e.g. mini-web) so `docker ps` reads cleanly.\n// The assembly mounts read-only and is copied container-local first — the CDK\n// CLI writes lock files next to the assembly it reads, and the copy keeps\n// parallel api/web deploys of the same service fully isolated.\nconst dockerDeployStack = (\n  color: number,\n  appName: string,\n  serviceName: string,\n  stackType: 'inf' | 'api' | 'web',\n  stackName: string,\n): Promise<void> => {\n  const containerName = `${serviceName}-${stackType}`;\n  return runCommandPrefixed(\n    `${stackType}:${serviceName}`,\n    'docker',\n    [\n      // A container left behind by an interrupted run would block reusing the\n      // name — clear it quietly first.\n      'rm',\n      '-f',\n      containerName,\n      '>/dev/null',\n      '2>&1',\n      ';',\n      'docker',\n      'run',\n      '--rm',\n      '--name',\n      containerName,\n      '-v',\n      `\"${assemblyDir(appName, serviceName)}:/assembly:ro\"`,\n      ...AWS_ENV_PASSTHROUGH.flatMap((name) => ['-e', name]),\n      IMAGE_TAG,\n      'bash',\n      '-c',\n      `\"cp -r /assembly /work/assembly && cdk deploy ${stackName} --app /work/assembly --require-approval never --progress events\"`,\n    ],\n    { color },\n  );\n};\n\n// Sync one service's pre-built views to S3 in a throwaway aws-cli container\n// named <service>-views. The official image's entrypoint is `aws`. Multiple\n// destinations (shell → website root + views prefix) run sequentially within\n// the service, reusing the container name.\nconst dockerSyncViews = async (color: number, appName: string, serviceName: string): Promise<void> => {\n  const containerName = `${serviceName}-views`;\n  for (const destination of getViewsS3Destinations(appName, serviceName)) {\n    await runCommandPrefixed(\n      `views:${serviceName}`,\n      'docker',\n      [\n        'rm',\n        '-f',\n        containerName,\n        '>/dev/null',\n        '2>&1',\n        ';',\n        'docker',\n        'run',\n        '--rm',\n        '--name',\n        containerName,\n        '-v',\n        `\"${getViewsDistDir(appName, serviceName)}:/views:ro\"`,\n        ...AWS_ENV_PASSTHROUGH.flatMap((name) => ['-e', name]),\n        AWS_CLI_IMAGE,\n        's3',\n        'sync',\n        '/views',\n        destination,\n      ],\n      { color },\n    );\n  }\n};\n\nexport const awsGoDocker = async (appName: string, plan: DeployPlan): Promise<void> => {\n  if (plan.kind === 'cancelled') {\n    return;\n  }\n\n  if ((await isAwsCredentialsValid()) === false) {\n    console.log('Credentials are expired or invalid.');\n    return;\n  }\n\n  logTimeStart('totalTime');\n\n  if (plan.kind === 'account') {\n    await deployAccountStack(plan.appName);\n    logTimeEnd('totalTime');\n    return;\n  }\n\n  if (plan.kind === 'bootstrap') {\n    if (plan.includeDomain) {\n      await deployDomainStack(plan.appName);\n    }\n    await deployBootstrapStack(plan.appName);\n    logTimeEnd('totalTime');\n    return;\n  }\n\n  const { services, stacks } = plan;\n\n  const allStacks = stacks === 'all';\n  const needInf = allStacks || stacks === 'inf';\n  const needApi = allStacks || stacks === 'api';\n  const needWeb = allStacks || stacks === 'web';\n  const needViews = allStacks || stacks === 'views';\n  const needCdkDeploys = needInf || needApi || needWeb;\n\n  const viewServices = needViews ? services.filter((s) => getServiceNamesWithViews(appName).includes(s)) : [];\n\n  console.log('\\n\\nRunning dockerized deploy\\n\\n');\n  console.log('Executing for services');\n  console.log(services.join(', '));\n\n  if (needCdkDeploys || viewServices.length > 0) {\n    await assertDockerRunning();\n  }\n  if (needCdkDeploys) {\n    await buildDeployerImage();\n  }\n  if (viewServices.length > 0) {\n    // Pull up front so the views wave doesn't race N containers into pulling\n    // the same image.\n    await runCommand('docker', ['pull', AWS_CLI_IMAGE]);\n  }\n\n  // ---- Phase 1: build everything locally ----\n  console.log('\\n=== Phase 1: local builds ===\\n');\n\n  await runAppHook(appName, 'predeploy');\n\n  // Workspace packages resolve through their built dist/ (package.json main),\n  // so bundles would ship stale code unless every lib is tsc'd first. npm runs\n  // the workspaces in topological order; tsc -b is incremental, so this is\n  // seconds when nothing changed.\n  console.log('Building workspace packages');\n  await runCommand('npm', ['run', 'build', '--workspaces', '--if-present']);\n\n  // Synth QPQ configs (shell's config resolves the view bucket names).\n  // In-process (no subprocess per service) — it's just config loads + JSON writes.\n  const qpqSynthServices = [...new Set([...services, ...(needViews ? ['shell'] : [])])];\n  for (const service of qpqSynthServices) {\n    await synthCommand([service, '--app', appName]);\n  }\n\n  if (stacks !== 'views') {\n    assertNoFailures(\n      'API bundling',\n      await runTasks(\n        services.map((service) => ({\n          label: `bundle-api:${service}`,\n          run: async () => {\n            console.log(`Bundling api: [${service}]`);\n            const qpqConfig = loadServiceQpqConfig(appName, service);\n            await runRspack(getServiceRspackConfig(qpqConfig, path.join(getServiceDirectory(appName, service), 'service')));\n          },\n        })),\n        BUILD_CONCURRENCY,\n      ),\n    );\n  }\n\n  assertNoFailures(\n    'Views bundling',\n    await runTasks(\n      viewServices.map((service) => ({\n        label: `bundle-views:${service}`,\n        run: async () => {\n          console.log(`Bundling views: [${service}]`);\n          await bundleViews(appName, service);\n        },\n      })),\n      BUILD_CONCURRENCY,\n    ),\n  );\n\n  if (needCdkDeploys) {\n    // One self-contained cloud assembly per service (all its stacks + staged\n    // assets) — separate --output dirs so synths can run in parallel and\n    // containers never share mutable state.\n    assertNoFailures(\n      'CDK synth',\n      await runTasks(\n        services.map((service) => ({\n          label: `cdk-synth:${service}`,\n          run: async () => {\n            const outputDir = assemblyDir(appName, service);\n            fs.rmSync(outputDir, { recursive: true, force: true });\n            await runCommandPrefixed(\n              `cdk-synth:${service}`,\n              'npx',\n              ['cdk', 'synth', '--all', '--quiet', '--app', `'${getCdkAppCommand()}'`, '--output', `\"${outputDir}\"`],\n              {\n                cwd: getRoot(),\n                env: { DEPLOY_SERVICE_NAME: service, DEPLOY_APP_NAME: appName },\n                color: nextPrefixColor(),\n              },\n            );\n          },\n        })),\n        BUILD_CONCURRENCY,\n      ),\n    );\n  }\n\n  // Stack names come from each service's live config, resolved once up front.\n  const stackNames = new Map(\n    services.map((service) => {\n      const qpqConfig = loadServiceQpqConfig(appName, service);\n      return [\n        service,\n        {\n          inf: qpqDeployAwsCdkUtils.getInfStackName(qpqConfig),\n          api: qpqDeployAwsCdkUtils.getApiStackName(qpqConfig),\n          web: qpqDeployAwsCdkUtils.getWebStackName(qpqConfig),\n        },\n      ];\n    }),\n  );\n\n  // ---- Phase 2: inf stacks, one container per service, all concurrent ----\n  if (needInf) {\n    console.log('\\n=== Phase 2: deploy inf stacks (docker) ===\\n');\n    logTimeStart('infWave');\n    assertNoFailures(\n      'Inf deploy',\n      await runTasks(\n        services.map((service) => ({\n          label: `inf:${service}`,\n          run: () => dockerDeployStack(nextPrefixColor(), appName, service, 'inf', stackNames.get(service)!.inf),\n        })),\n        DEPLOY_CONCURRENCY,\n      ),\n    );\n    logTimeEnd('infWave');\n  }\n\n  // ---- Phase 3: api + web stacks, all concurrent ----\n  if (needApi || needWeb) {\n    console.log('\\n=== Phase 3: deploy api + web stacks (docker) ===\\n');\n    logTimeStart('apiWebWave');\n    assertNoFailures(\n      'Api/Web deploy',\n      await runTasks(\n        (['api', 'web'] as const)\n          .filter((stackType) => (stackType === 'api' ? needApi : needWeb))\n          .flatMap((stackType) =>\n            services.map((service) => ({\n              label: `${stackType}:${service}`,\n              run: () => dockerDeployStack(nextPrefixColor(), appName, service, stackType, stackNames.get(service)![stackType]),\n            })),\n          ),\n        DEPLOY_CONCURRENCY,\n      ),\n    );\n    logTimeEnd('apiWebWave');\n  }\n\n  // ---- Phase 4: sync the pre-built views to S3, all concurrent ----\n  if (viewServices.length > 0) {\n    console.log('\\n=== Phase 4: sync views to S3 (docker) ===\\n');\n    logTimeStart('viewsWave');\n    assertNoFailures(\n      'Views sync',\n      await runTasks(\n        viewServices.map((service) => ({\n          label: `views:${service}`,\n          run: () => dockerSyncViews(nextPrefixColor(), appName, service),\n        })),\n        DEPLOY_CONCURRENCY,\n      ),\n    );\n    logTimeEnd('viewsWave');\n  }\n\n  logTimeEnd('totalTime');\n};\n"]}

package/lib/commonjs/platforms/aws/identity.d.ts

@@ -0,0 +1,2 @@
+import { QpqAppDeployEnvironment } from 'quidproquo-deploy-awscdk';
+export declare const awsPrimeDeployIdentity: (target: QpqAppDeployEnvironment | undefined) => string[];

package/lib/commonjs/platforms/aws/identity.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.awsPrimeDeployIdentity = void 0;
+// AWS deploy identity: service configs and the CDK app read
+// AWS_DEFAULT_ACCOUNT / AWS_DEFAULT_REGION at load time, so they're primed
+// into process.env from the environment's deploy.config.json entry. Already-set
+// env vars win, so CI overrides and older setups keep working.
+//
+// Returns human-readable descriptions of anything still missing — deploys
+// treat that as fatal, local dev commands ignore it.
+const awsPrimeDeployIdentity = (target) => {
+    if ((target === null || target === void 0 ? void 0 : target.accountId) && !process.env.AWS_DEFAULT_ACCOUNT) {
+        process.env.AWS_DEFAULT_ACCOUNT = target.accountId;
+    }
+    if ((target === null || target === void 0 ? void 0 : target.region) && !process.env.AWS_DEFAULT_REGION) {
+        process.env.AWS_DEFAULT_REGION = target.region;
+    }
+    const missing = [];
+    if (!process.env.AWS_DEFAULT_ACCOUNT)
+        missing.push('"accountId" (or AWS_DEFAULT_ACCOUNT)');
+    if (!process.env.AWS_DEFAULT_REGION)
+        missing.push('"region" (or AWS_DEFAULT_REGION)');
+    return missing;
+};
+exports.awsPrimeDeployIdentity = awsPrimeDeployIdentity;
+//# sourceMappingURL=identity.js.map

package/lib/commonjs/platforms/aws/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../../../src/platforms/aws/identity.ts"],"names":[],"mappings":";;;AAEA,4DAA4D;AAC5D,2EAA2E;AAC3E,gFAAgF;AAChF,+DAA+D;AAC/D,EAAE;AACF,0EAA0E;AAC1E,qDAAqD;AAC9C,MAAM,sBAAsB,GAAG,CAAC,MAA2C,EAAY,EAAE;IAC9F,IAAI,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,SAAS,KAAI,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,MAAM,CAAC,SAAS,CAAC;IACrD,CAAC;IACD,IAAI,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,MAAM,KAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC;IACjD,CAAC;IAED,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB;QAAE,OAAO,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IAC3F,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB;QAAE,OAAO,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IACtF,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAZW,QAAA,sBAAsB,0BAYjC","sourcesContent":["import { QpqAppDeployEnvironment } from 'quidproquo-deploy-awscdk';\n\n// AWS deploy identity: service configs and the CDK app read\n// AWS_DEFAULT_ACCOUNT / AWS_DEFAULT_REGION at load time, so they're primed\n// into process.env from the environment's deploy.config.json entry. Already-set\n// env vars win, so CI overrides and older setups keep working.\n//\n// Returns human-readable descriptions of anything still missing — deploys\n// treat that as fatal, local dev commands ignore it.\nexport const awsPrimeDeployIdentity = (target: QpqAppDeployEnvironment | undefined): string[] => {\n  if (target?.accountId && !process.env.AWS_DEFAULT_ACCOUNT) {\n    process.env.AWS_DEFAULT_ACCOUNT = target.accountId;\n  }\n  if (target?.region && !process.env.AWS_DEFAULT_REGION) {\n    process.env.AWS_DEFAULT_REGION = target.region;\n  }\n\n  const missing: string[] = [];\n  if (!process.env.AWS_DEFAULT_ACCOUNT) missing.push('\"accountId\" (or AWS_DEFAULT_ACCOUNT)');\n  if (!process.env.AWS_DEFAULT_REGION) missing.push('\"region\" (or AWS_DEFAULT_REGION)');\n  return missing;\n};\n"]}

package/lib/commonjs/platforms/aws/index.d.ts

@@ -0,0 +1,2 @@
+import { QpqPlatformDriver } from '../types';
+export declare const awsPlatformDriver: QpqPlatformDriver;

package/lib/commonjs/platforms/aws/index.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.awsPlatformDriver = void 0;
+const go_1 = require("./go");
+const goDocker_1 = require("./goDocker");
+const identity_1 = require("./identity");
+const publish_1 = require("./publish");
+const teardown_1 = require("./teardown");
+exports.awsPlatformDriver = {
+    primeDeployIdentity: identity_1.awsPrimeDeployIdentity,
+    go: go_1.awsGo,
+    goDocker: goDocker_1.awsGoDocker,
+    teardown: teardown_1.awsTeardown,
+    publish: publish_1.awsPublish,
+    publishBuild: publish_1.awsPublishBuild,
+    publishUpload: publish_1.awsPublishUpload,
+    publishDeploy: publish_1.awsPublishDeploy,
+};
+//# sourceMappingURL=index.js.map

package/lib/commonjs/platforms/aws/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/platforms/aws/index.ts"],"names":[],"mappings":";;;AACA,6BAA6B;AAC7B,yCAAyC;AACzC,yCAAoD;AACpD,uCAA4F;AAC5F,yCAAyC;AAE5B,QAAA,iBAAiB,GAAsB;IAClD,mBAAmB,EAAE,iCAAsB;IAE3C,EAAE,EAAE,UAAK;IACT,QAAQ,EAAE,sBAAW;IACrB,QAAQ,EAAE,sBAAW;IAErB,OAAO,EAAE,oBAAU;IACnB,YAAY,EAAE,yBAAe;IAC7B,aAAa,EAAE,0BAAgB;IAC/B,aAAa,EAAE,0BAAgB;CAChC,CAAC","sourcesContent":["import { QpqPlatformDriver } from '../types';\nimport { awsGo } from './go';\nimport { awsGoDocker } from './goDocker';\nimport { awsPrimeDeployIdentity } from './identity';\nimport { awsPublish, awsPublishBuild, awsPublishDeploy, awsPublishUpload } from './publish';\nimport { awsTeardown } from './teardown';\n\nexport const awsPlatformDriver: QpqPlatformDriver = {\n  primeDeployIdentity: awsPrimeDeployIdentity,\n\n  go: awsGo,\n  goDocker: awsGoDocker,\n  teardown: awsTeardown,\n\n  publish: awsPublish,\n  publishBuild: awsPublishBuild,\n  publishUpload: awsPublishUpload,\n  publishDeploy: awsPublishDeploy,\n};\n"]}

package/lib/commonjs/platforms/aws/publish.d.ts

@@ -0,0 +1,4 @@
+export declare const awsPublishBuild: (appName: string, serviceNames: string[]) => Promise<void>;
+export declare const awsPublishUpload: (appName: string, serviceNames: string[]) => Promise<void>;
+export declare const awsPublishDeploy: (appName: string, serviceNames: string[]) => Promise<void>;
+export declare const awsPublish: (appName: string, serviceNames: string[]) => Promise<void>;

package/lib/commonjs/platforms/aws/publish.js

@@ -0,0 +1,66 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.awsPublish = exports.awsPublishDeploy = exports.awsPublishUpload = exports.awsPublishBuild = void 0;
+// AWS federated remote publishing — build each backend service as a
+// module-federation remote and publish it into that service's federated code
+// bucket (see ./remote for the three-phase mechanics).
+const awsCredentials_1 = require("./awsCredentials");
+const remote_1 = require("./remote");
+const requireAwsCredentials = () => __awaiter(void 0, void 0, void 0, function* () {
+    if (!(yield (0, awsCredentials_1.isAwsCredentialsValid)())) {
+        console.error('AWS credentials are not valid. Configure them and retry.');
+        process.exit(1);
+    }
+});
+const awsPublishBuild = (appName, serviceNames) => __awaiter(void 0, void 0, void 0, function* () {
+    console.log(`Building federated remotes for [${appName}]: ${serviceNames.join(', ')}`);
+    for (const serviceName of serviceNames) {
+        yield (0, remote_1.buildRemote)(appName, serviceName);
+    }
+    console.log('Done. Next: qpq publish:upload, then qpq publish:deploy.');
+});
+exports.awsPublishBuild = awsPublishBuild;
+const awsPublishUpload = (appName, serviceNames) => __awaiter(void 0, void 0, void 0, function* () {
+    yield requireAwsCredentials();
+    // Resolve every target up front - a missing build fails the whole step
+    // before a single byte is uploaded.
+    const targets = serviceNames.map((serviceName) => (0, remote_1.resolvePublishTarget)(appName, serviceName));
+    console.log(`Uploading federated remotes for [${appName}]: ${serviceNames.join(', ')}`);
+    yield Promise.all(targets.map((target) => (0, remote_1.uploadRemoteVersion)(target)));
+    console.log('Done. Run qpq publish:deploy to flip lambdas to the new versions.');
+});
+exports.awsPublishUpload = awsPublishUpload;
+const awsPublishDeploy = (appName, serviceNames) => __awaiter(void 0, void 0, void 0, function* () {
+    yield requireAwsCredentials();
+    const targets = serviceNames.map((serviceName) => (0, remote_1.resolvePublishTarget)(appName, serviceName));
+    console.log(`Deploying federated remote manifests for [${appName}]: ${serviceNames.join(', ')}`);
+    yield Promise.all(targets.map((target) => (0, remote_1.deployRemoteManifest)(target)));
+    console.log('Done. New lambda cold starts will federate these services from S3.');
+});
+exports.awsPublishDeploy = awsPublishDeploy;
+const awsPublish = (appName, serviceNames) => __awaiter(void 0, void 0, void 0, function* () {
+    yield requireAwsCredentials();
+    console.log(`Publishing federated remotes for [${appName}]: ${serviceNames.join(', ')}`);
+    // 1. Build everything first - any build failure bails before any upload,
+    // so the buckets never end up with a half-published set of services.
+    for (const serviceName of serviceNames) {
+        yield (0, remote_1.buildRemote)(appName, serviceName);
+    }
+    const targets = serviceNames.map((serviceName) => (0, remote_1.resolvePublishTarget)(appName, serviceName));
+    // 2. Upload all version dirs in parallel - manifests untouched, nothing live yet.
+    yield Promise.all(targets.map((target) => (0, remote_1.uploadRemoteVersion)(target)));
+    // 3. Every version dir is fully uploaded - flip the manifests, in parallel.
+    yield Promise.all(targets.map((target) => (0, remote_1.deployRemoteManifest)(target)));
+    console.log('Done. New lambda cold starts will federate these services from S3.');
+});
+exports.awsPublish = awsPublish;
+//# sourceMappingURL=publish.js.map

package/lib/commonjs/platforms/aws/publish.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish.js","sourceRoot":"","sources":["../../../../src/platforms/aws/publish.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,oEAAoE;AACpE,6EAA6E;AAC7E,uDAAuD;AACvD,qDAAyD;AACzD,qCAAwG;AAExG,MAAM,qBAAqB,GAAG,GAAwB,EAAE;IACtD,IAAI,CAAC,CAAC,MAAM,IAAA,sCAAqB,GAAE,CAAC,EAAE,CAAC;QACrC,OAAO,CAAC,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAC1E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAA,CAAC;AAEK,MAAM,eAAe,GAAG,CAAO,OAAe,EAAE,YAAsB,EAAiB,EAAE;IAC9F,OAAO,CAAC,GAAG,CAAC,mCAAmC,OAAO,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEvF,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACvC,MAAM,IAAA,oBAAW,EAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;AAC1E,CAAC,CAAA,CAAC;AARW,QAAA,eAAe,mBAQ1B;AAEK,MAAM,gBAAgB,GAAG,CAAO,OAAe,EAAE,YAAsB,EAAiB,EAAE;IAC/F,MAAM,qBAAqB,EAAE,CAAC;IAE9B,uEAAuE;IACvE,oCAAoC;IACpC,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,IAAA,6BAAoB,EAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;IAE9F,OAAO,CAAC,GAAG,CAAC,oCAAoC,OAAO,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxF,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAA,4BAAmB,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAExE,OAAO,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAC;AACnF,CAAC,CAAA,CAAC;AAXW,QAAA,gBAAgB,oBAW3B;AAEK,MAAM,gBAAgB,GAAG,CAAO,OAAe,EAAE,YAAsB,EAAiB,EAAE;IAC/F,MAAM,qBAAqB,EAAE,CAAC;IAE9B,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,IAAA,6BAAoB,EAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;IAE9F,OAAO,CAAC,GAAG,CAAC,6CAA6C,OAAO,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjG,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAA,6BAAoB,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAEzE,OAAO,CAAC,GAAG,CAAC,oEAAoE,CAAC,CAAC;AACpF,CAAC,CAAA,CAAC;AATW,QAAA,gBAAgB,oBAS3B;AAEK,MAAM,UAAU,GAAG,CAAO,OAAe,EAAE,YAAsB,EAAiB,EAAE;IACzF,MAAM,qBAAqB,EAAE,CAAC;IAE9B,OAAO,CAAC,GAAG,CAAC,qCAAqC,OAAO,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEzF,yEAAyE;IACzE,qEAAqE;IACrE,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACvC,MAAM,IAAA,oBAAW,EAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC1C,CAAC;IACD,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,IAAA,6BAAoB,EAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;IAE9F,kFAAkF;IAClF,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAA,4BAAmB,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAExE,4EAA4E;IAC5E,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAA,6BAAoB,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAEzE,OAAO,CAAC,GAAG,CAAC,oEAAoE,CAAC,CAAC;AACpF,CAAC,CAAA,CAAC;AAnBW,QAAA,UAAU,cAmBrB","sourcesContent":["// AWS federated remote publishing — build each backend service as a\n// module-federation remote and publish it into that service's federated code\n// bucket (see ./remote for the three-phase mechanics).\nimport { isAwsCredentialsValid } from './awsCredentials';\nimport { buildRemote, deployRemoteManifest, resolvePublishTarget, uploadRemoteVersion } from './remote';\n\nconst requireAwsCredentials = async (): Promise<void> => {\n  if (!(await isAwsCredentialsValid())) {\n    console.error('AWS credentials are not valid. Configure them and retry.');\n    process.exit(1);\n  }\n};\n\nexport const awsPublishBuild = async (appName: string, serviceNames: string[]): Promise<void> => {\n  console.log(`Building federated remotes for [${appName}]: ${serviceNames.join(', ')}`);\n\n  for (const serviceName of serviceNames) {\n    await buildRemote(appName, serviceName);\n  }\n\n  console.log('Done. Next: qpq publish:upload, then qpq publish:deploy.');\n};\n\nexport const awsPublishUpload = async (appName: string, serviceNames: string[]): Promise<void> => {\n  await requireAwsCredentials();\n\n  // Resolve every target up front - a missing build fails the whole step\n  // before a single byte is uploaded.\n  const targets = serviceNames.map((serviceName) => resolvePublishTarget(appName, serviceName));\n\n  console.log(`Uploading federated remotes for [${appName}]: ${serviceNames.join(', ')}`);\n  await Promise.all(targets.map((target) => uploadRemoteVersion(target)));\n\n  console.log('Done. Run qpq publish:deploy to flip lambdas to the new versions.');\n};\n\nexport const awsPublishDeploy = async (appName: string, serviceNames: string[]): Promise<void> => {\n  await requireAwsCredentials();\n\n  const targets = serviceNames.map((serviceName) => resolvePublishTarget(appName, serviceName));\n\n  console.log(`Deploying federated remote manifests for [${appName}]: ${serviceNames.join(', ')}`);\n  await Promise.all(targets.map((target) => deployRemoteManifest(target)));\n\n  console.log('Done. New lambda cold starts will federate these services from S3.');\n};\n\nexport const awsPublish = async (appName: string, serviceNames: string[]): Promise<void> => {\n  await requireAwsCredentials();\n\n  console.log(`Publishing federated remotes for [${appName}]: ${serviceNames.join(', ')}`);\n\n  // 1. Build everything first - any build failure bails before any upload,\n  // so the buckets never end up with a half-published set of services.\n  for (const serviceName of serviceNames) {\n    await buildRemote(appName, serviceName);\n  }\n  const targets = serviceNames.map((serviceName) => resolvePublishTarget(appName, serviceName));\n\n  // 2. Upload all version dirs in parallel - manifests untouched, nothing live yet.\n  await Promise.all(targets.map((target) => uploadRemoteVersion(target)));\n\n  // 3. Every version dir is fully uploaded - flip the manifests, in parallel.\n  await Promise.all(targets.map((target) => deployRemoteManifest(target)));\n\n  console.log('Done. New lambda cold starts will federate these services from S3.');\n};\n"]}

package/lib/commonjs/platforms/aws/remote.d.ts

@@ -0,0 +1,11 @@
+export type RemotePublishTarget = {
+    serviceName: string;
+    publishPath: string;
+    manifestHash: string;
+    bucketName: string;
+    servicePrefix: string;
+};
+export declare const buildRemote: (appName: string, serviceName: string) => Promise<void>;
+export declare const resolvePublishTarget: (appName: string, serviceName: string) => RemotePublishTarget;
+export declare const uploadRemoteVersion: (target: RemotePublishTarget) => Promise<void>;
+export declare const deployRemoteManifest: (target: RemotePublishTarget) => Promise<void>;

package/lib/commonjs/platforms/aws/remote.js

@@ -0,0 +1,106 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.deployRemoteManifest = exports.uploadRemoteVersion = exports.resolvePublishTarget = exports.buildRemote = void 0;
+// Build a backend service as a module-federation remote and publish it into the
+// shared federated-code storage drive, under the service's own prefix. After this
+// runs, the already-deployed lambdas load their stories from the bucket (quidproquo's
+// dynamicModuleLoader tries the federated store first, falls back to the bundled
+// code when nothing's published).
+//
+// The store is one storage drive shared across services (via `owner`). Each service
+// opts in with defineFederatedModuleStore(<driveName>) and its lambdas read from
+// s3://<bucket>/<service>. Read access comes from the storage drive's own grants, so
+// the drive + a deploy of each service must exist before publishing. The bucket name
+// resolves from the same service config the deploy used, so it always matches.
+//
+// Publishing is split into three phases so they can run as separate commands
+// (publish:build / publish:upload / publish:deploy) or chained by `qpq publish`:
+//   buildRemote          - rspack the remote + lay out service-remote-published/
+//   uploadRemoteVersion  - sync the hashed version dir (everything BUT manifest.json)
+//   deployRemoteManifest - upload manifest.json, atomically flipping lambdas over
+// Version files always land before the manifest that references them, so a reading
+// lambda never sees a manifest whose files aren't all present yet.
+const quidproquo_actionprocessor_awslambda_1 = require("quidproquo-actionprocessor-awslambda");
+const quidproquo_core_1 = require("quidproquo-core");
+const quidproquo_deploy_rspack_1 = require("quidproquo-deploy-rspack");
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const discovery_1 = require("../../lib/discovery");
+const qpqConfigs_1 = require("../../lib/qpqConfigs");
+const rspackRun_1 = require("../../lib/rspackRun");
+const runCommand_1 = require("../../lib/runCommand");
+const getPublishPath = (appName, serviceName) => path_1.default.join((0, discovery_1.getRoot)(), 'dist', 'apps', appName, 'services', serviceName, 'service-remote-published');
+// Resolve the shared store bucket from the service's defineFederatedModuleStore
+// setting (same derivation the lambda env var uses) and the per-service prefix
+// so many services share one bucket.
+const resolveRemoteStore = (appName, serviceName) => {
+    var _a;
+    const qpqConfig = (0, qpqConfigs_1.loadServiceQpqConfig)(appName, serviceName);
+    const federatedStore = quidproquo_core_1.qpqCoreUtils.getFederatedModuleStore(qpqConfig);
+    if (!federatedStore) {
+        throw new Error(`service [${serviceName}] has no defineFederatedModuleStore(...) - add it (and the matching storage drive) to opt into federation`);
+    }
+    const storageDrive = quidproquo_core_1.qpqCoreUtils.getStorageDriveByName(federatedStore.storageDrive, qpqConfig);
+    if (!storageDrive) {
+        throw new Error(`defineFederatedModuleStore references storage drive [${federatedStore.storageDrive}] which service [${serviceName}] does not declare`);
+    }
+    const bucketName = quidproquo_actionprocessor_awslambda_1.awsNamingUtils.resolveConfigRuntimeResourceNameFromConfig(((_a = storageDrive.owner) === null || _a === void 0 ? void 0 : _a.resourceNameOverride) || storageDrive.storageDrive, qpqConfig, storageDrive.owner);
+    const servicePrefix = quidproquo_core_1.qpqCoreUtils.getApplicationModuleName(qpqConfig);
+    return { bucketName, servicePrefix };
+};
+// Phase 1: rspack the federated remote container and lay out the publishable
+// version dir + manifest.json under service-remote-published/. Validates the
+// federation config up front so a misconfigured service fails before the build.
+const buildRemote = (appName, serviceName) => __awaiter(void 0, void 0, void 0, function* () {
+    resolveRemoteStore(appName, serviceName);
+    const serviceDir = path_1.default.join((0, discovery_1.getServiceDirectory)(appName, serviceName), 'service');
+    const qpqConfig = (0, qpqConfigs_1.loadServiceQpqConfig)(appName, serviceName);
+    console.log(`Building federated remote: [${serviceName}]`);
+    const config = (0, quidproquo_deploy_rspack_1.getServiceRemoteRspackConfig)(qpqConfig, serviceDir);
+    yield (0, rspackRun_1.runRspack)(config);
+    const remoteBuildPath = config.output.path;
+    (0, quidproquo_deploy_rspack_1.publishFederatedRemote)(qpqConfig, remoteBuildPath, getPublishPath(appName, serviceName));
+});
+exports.buildRemote = buildRemote;
+// Resolve a publish target from a prior buildRemote's on-disk output.
+const resolvePublishTarget = (appName, serviceName) => {
+    const publishPath = getPublishPath(appName, serviceName);
+    const manifestPath = path_1.default.join(publishPath, 'manifest.json');
+    if (!fs_1.default.existsSync(manifestPath)) {
+        throw new Error(`no built remote found for [${serviceName}] (missing ${manifestPath}) - run \`qpq publish:build --app ${appName}\` first`);
+    }
+    const manifest = JSON.parse(fs_1.default.readFileSync(manifestPath, 'utf-8'));
+    return Object.assign({ serviceName,
+        publishPath, manifestHash: manifest.hash }, resolveRemoteStore(appName, serviceName));
+};
+exports.resolvePublishTarget = resolvePublishTarget;
+// Phase 2: upload the hashed version dir - everything EXCEPT manifest.json, so
+// nothing referenced by a live manifest changes. Safe to run concurrently across
+// services - each writes only under its own prefix.
+const uploadRemoteVersion = (target) => __awaiter(void 0, void 0, void 0, function* () {
+    const { serviceName, publishPath, manifestHash, bucketName, servicePrefix } = target;
+    console.log(`Uploading [${serviceName}] version [${manifestHash}] to [s3://${bucketName}/${servicePrefix}/${manifestHash}]`);
+    yield (0, runCommand_1.runCommand)('aws', ['s3', 'sync', path_1.default.join(publishPath, manifestHash), `s3://${bucketName}/${servicePrefix}/${manifestHash}`]);
+});
+exports.uploadRemoteVersion = uploadRemoteVersion;
+// Phase 3: upload manifest.json, the pointer lambdas read - this is the moment
+// the new version goes live. Only run once the version dir is fully uploaded.
+const deployRemoteManifest = (target) => __awaiter(void 0, void 0, void 0, function* () {
+    const { serviceName, publishPath, manifestHash, bucketName, servicePrefix } = target;
+    console.log(`Deploying [${serviceName}] manifest for version [${manifestHash}] to [s3://${bucketName}/${servicePrefix}/manifest.json]`);
+    yield (0, runCommand_1.runCommand)('aws', ['s3', 'cp', path_1.default.join(publishPath, 'manifest.json'), `s3://${bucketName}/${servicePrefix}/manifest.json`]);
+});
+exports.deployRemoteManifest = deployRemoteManifest;
+//# sourceMappingURL=remote.js.map

package/lib/commonjs/platforms/aws/remote.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote.js","sourceRoot":"","sources":["../../../../src/platforms/aws/remote.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,gFAAgF;AAChF,kFAAkF;AAClF,sFAAsF;AACtF,iFAAiF;AACjF,kCAAkC;AAClC,EAAE;AACF,oFAAoF;AACpF,iFAAiF;AACjF,qFAAqF;AACrF,qFAAqF;AACrF,+EAA+E;AAC/E,EAAE;AACF,6EAA6E;AAC7E,iFAAiF;AACjF,iFAAiF;AACjF,sFAAsF;AACtF,kFAAkF;AAClF,mFAAmF;AACnF,mEAAmE;AACnE,+FAAsE;AACtE,qDAA+C;AAC/C,uEAAgG;AAEhG,4CAAoB;AACpB,gDAAwB;AAExB,mDAAmE;AACnE,qDAA4D;AAC5D,mDAAgD;AAChD,qDAAkD;AAalD,MAAM,cAAc,GAAG,CAAC,OAAe,EAAE,WAAmB,EAAU,EAAE,CACtE,cAAI,CAAC,IAAI,CAAC,IAAA,mBAAO,GAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,0BAA0B,CAAC,CAAC;AAErG,gFAAgF;AAChF,+EAA+E;AAC/E,qCAAqC;AACrC,MAAM,kBAAkB,GAAG,CAAC,OAAe,EAAE,WAAmB,EAAiD,EAAE;;IACjH,MAAM,SAAS,GAAG,IAAA,iCAAoB,EAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAE7D,MAAM,cAAc,GAAG,8BAAY,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC;IACvE,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,YAAY,WAAW,2GAA2G,CACnI,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,8BAAY,CAAC,qBAAqB,CAAC,cAAc,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAChG,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACb,wDAAwD,cAAc,CAAC,YAAY,oBAAoB,WAAW,oBAAoB,CACvI,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,qDAAc,CAAC,0CAA0C,CAC1E,CAAA,MAAA,YAAY,CAAC,KAAK,0CAAE,oBAAoB,KAAI,YAAY,CAAC,YAAY,EACrE,SAAS,EACT,YAAY,CAAC,KAAK,CACnB,CAAC;IACF,MAAM,aAAa,GAAG,8BAAY,CAAC,wBAAwB,CAAC,SAAS,CAAC,CAAC;IAEvE,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC;AACvC,CAAC,CAAC;AAEF,6EAA6E;AAC7E,6EAA6E;AAC7E,gFAAgF;AACzE,MAAM,WAAW,GAAG,CAAO,OAAe,EAAE,WAAmB,EAAiB,EAAE;IACvF,kBAAkB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAEzC,MAAM,UAAU,GAAG,cAAI,CAAC,IAAI,CAAC,IAAA,+BAAmB,EAAC,OAAO,EAAE,WAAW,CAAC,EAAE,SAAS,CAAC,CAAC;IACnF,MAAM,SAAS,GAAG,IAAA,iCAAoB,EAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAE7D,OAAO,CAAC,GAAG,CAAC,+BAA+B,WAAW,GAAG,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,IAAA,uDAA4B,EAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACnE,MAAM,IAAA,qBAAS,EAAC,MAAM,CAAC,CAAC;IAExB,MAAM,eAAe,GAAG,MAAM,CAAC,MAAO,CAAC,IAAc,CAAC;IACtD,IAAA,iDAAsB,EAAC,SAAS,EAAE,eAAe,EAAE,cAAc,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;AAC3F,CAAC,CAAA,CAAC;AAZW,QAAA,WAAW,eAYtB;AAEF,sEAAsE;AAC/D,MAAM,oBAAoB,GAAG,CAAC,OAAe,EAAE,WAAmB,EAAuB,EAAE;IAChG,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACzD,MAAM,YAAY,GAAG,cAAI,CAAC,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;IAE7D,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,8BAA8B,WAAW,cAAc,YAAY,qCAAqC,OAAO,UAAU,CAAC,CAAC;IAC7I,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAEjE,CAAC;IAEF,uBACE,WAAW;QACX,WAAW,EACX,YAAY,EAAE,QAAQ,CAAC,IAAI,IACxB,kBAAkB,CAAC,OAAO,EAAE,WAAW,CAAC,EAC3C;AACJ,CAAC,CAAC;AAjBW,QAAA,oBAAoB,wBAiB/B;AAEF,+EAA+E;AAC/E,iFAAiF;AACjF,oDAAoD;AAC7C,MAAM,mBAAmB,GAAG,CAAO,MAA2B,EAAiB,EAAE;IACtF,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,MAAM,CAAC;IAErF,OAAO,CAAC,GAAG,CAAC,cAAc,WAAW,cAAc,YAAY,cAAc,UAAU,IAAI,aAAa,IAAI,YAAY,GAAG,CAAC,CAAC;IAC7H,MAAM,IAAA,uBAAU,EAAC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,cAAI,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE,QAAQ,UAAU,IAAI,aAAa,IAAI,YAAY,EAAE,CAAC,CAAC,CAAC;AACvI,CAAC,CAAA,CAAC;AALW,QAAA,mBAAmB,uBAK9B;AAEF,+EAA+E;AAC/E,8EAA8E;AACvE,MAAM,oBAAoB,GAAG,CAAO,MAA2B,EAAiB,EAAE;IACvF,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,MAAM,CAAC;IAErF,OAAO,CAAC,GAAG,CAAC,cAAc,WAAW,2BAA2B,YAAY,cAAc,UAAU,IAAI,aAAa,iBAAiB,CAAC,CAAC;IACxI,MAAM,IAAA,uBAAU,EAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,cAAI,CAAC,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC,EAAE,QAAQ,UAAU,IAAI,aAAa,gBAAgB,CAAC,CAAC,CAAC;AACtI,CAAC,CAAA,CAAC;AALW,QAAA,oBAAoB,wBAK/B","sourcesContent":["// Build a backend service as a module-federation remote and publish it into the\n// shared federated-code storage drive, under the service's own prefix. After this\n// runs, the already-deployed lambdas load their stories from the bucket (quidproquo's\n// dynamicModuleLoader tries the federated store first, falls back to the bundled\n// code when nothing's published).\n//\n// The store is one storage drive shared across services (via `owner`). Each service\n// opts in with defineFederatedModuleStore(<driveName>) and its lambdas read from\n// s3://<bucket>/<service>. Read access comes from the storage drive's own grants, so\n// the drive + a deploy of each service must exist before publishing. The bucket name\n// resolves from the same service config the deploy used, so it always matches.\n//\n// Publishing is split into three phases so they can run as separate commands\n// (publish:build / publish:upload / publish:deploy) or chained by `qpq publish`:\n//   buildRemote          - rspack the remote + lay out service-remote-published/\n//   uploadRemoteVersion  - sync the hashed version dir (everything BUT manifest.json)\n//   deployRemoteManifest - upload manifest.json, atomically flipping lambdas over\n// Version files always land before the manifest that references them, so a reading\n// lambda never sees a manifest whose files aren't all present yet.\nimport { awsNamingUtils } from 'quidproquo-actionprocessor-awslambda';\nimport { qpqCoreUtils } from 'quidproquo-core';\nimport { getServiceRemoteRspackConfig, publishFederatedRemote } from 'quidproquo-deploy-rspack';\n\nimport fs from 'fs';\nimport path from 'path';\n\nimport { getRoot, getServiceDirectory } from '../../lib/discovery';\nimport { loadServiceQpqConfig } from '../../lib/qpqConfigs';\nimport { runRspack } from '../../lib/rspackRun';\nimport { runCommand } from '../../lib/runCommand';\n\n// Everything the upload/deploy phases need to publish a built remote. Resolved\n// from the on-disk build output + service config, so each phase can run in its\n// own process without handing state between commands.\nexport type RemotePublishTarget = {\n  serviceName: string;\n  publishPath: string;\n  manifestHash: string;\n  bucketName: string;\n  servicePrefix: string;\n};\n\nconst getPublishPath = (appName: string, serviceName: string): string =>\n  path.join(getRoot(), 'dist', 'apps', appName, 'services', serviceName, 'service-remote-published');\n\n// Resolve the shared store bucket from the service's defineFederatedModuleStore\n// setting (same derivation the lambda env var uses) and the per-service prefix\n// so many services share one bucket.\nconst resolveRemoteStore = (appName: string, serviceName: string): { bucketName: string; servicePrefix: string } => {\n  const qpqConfig = loadServiceQpqConfig(appName, serviceName);\n\n  const federatedStore = qpqCoreUtils.getFederatedModuleStore(qpqConfig);\n  if (!federatedStore) {\n    throw new Error(\n      `service [${serviceName}] has no defineFederatedModuleStore(...) - add it (and the matching storage drive) to opt into federation`,\n    );\n  }\n  const storageDrive = qpqCoreUtils.getStorageDriveByName(federatedStore.storageDrive, qpqConfig);\n  if (!storageDrive) {\n    throw new Error(\n      `defineFederatedModuleStore references storage drive [${federatedStore.storageDrive}] which service [${serviceName}] does not declare`,\n    );\n  }\n  const bucketName = awsNamingUtils.resolveConfigRuntimeResourceNameFromConfig(\n    storageDrive.owner?.resourceNameOverride || storageDrive.storageDrive,\n    qpqConfig,\n    storageDrive.owner,\n  );\n  const servicePrefix = qpqCoreUtils.getApplicationModuleName(qpqConfig);\n\n  return { bucketName, servicePrefix };\n};\n\n// Phase 1: rspack the federated remote container and lay out the publishable\n// version dir + manifest.json under service-remote-published/. Validates the\n// federation config up front so a misconfigured service fails before the build.\nexport const buildRemote = async (appName: string, serviceName: string): Promise<void> => {\n  resolveRemoteStore(appName, serviceName);\n\n  const serviceDir = path.join(getServiceDirectory(appName, serviceName), 'service');\n  const qpqConfig = loadServiceQpqConfig(appName, serviceName);\n\n  console.log(`Building federated remote: [${serviceName}]`);\n  const config = getServiceRemoteRspackConfig(qpqConfig, serviceDir);\n  await runRspack(config);\n\n  const remoteBuildPath = config.output!.path as string;\n  publishFederatedRemote(qpqConfig, remoteBuildPath, getPublishPath(appName, serviceName));\n};\n\n// Resolve a publish target from a prior buildRemote's on-disk output.\nexport const resolvePublishTarget = (appName: string, serviceName: string): RemotePublishTarget => {\n  const publishPath = getPublishPath(appName, serviceName);\n  const manifestPath = path.join(publishPath, 'manifest.json');\n\n  if (!fs.existsSync(manifestPath)) {\n    throw new Error(`no built remote found for [${serviceName}] (missing ${manifestPath}) - run \\`qpq publish:build --app ${appName}\\` first`);\n  }\n  const manifest = JSON.parse(fs.readFileSync(manifestPath, 'utf-8')) as {\n    hash: string;\n  };\n\n  return {\n    serviceName,\n    publishPath,\n    manifestHash: manifest.hash,\n    ...resolveRemoteStore(appName, serviceName),\n  };\n};\n\n// Phase 2: upload the hashed version dir - everything EXCEPT manifest.json, so\n// nothing referenced by a live manifest changes. Safe to run concurrently across\n// services - each writes only under its own prefix.\nexport const uploadRemoteVersion = async (target: RemotePublishTarget): Promise<void> => {\n  const { serviceName, publishPath, manifestHash, bucketName, servicePrefix } = target;\n\n  console.log(`Uploading [${serviceName}] version [${manifestHash}] to [s3://${bucketName}/${servicePrefix}/${manifestHash}]`);\n  await runCommand('aws', ['s3', 'sync', path.join(publishPath, manifestHash), `s3://${bucketName}/${servicePrefix}/${manifestHash}`]);\n};\n\n// Phase 3: upload manifest.json, the pointer lambdas read - this is the moment\n// the new version goes live. Only run once the version dir is fully uploaded.\nexport const deployRemoteManifest = async (target: RemotePublishTarget): Promise<void> => {\n  const { serviceName, publishPath, manifestHash, bucketName, servicePrefix } = target;\n\n  console.log(`Deploying [${serviceName}] manifest for version [${manifestHash}] to [s3://${bucketName}/${servicePrefix}/manifest.json]`);\n  await runCommand('aws', ['s3', 'cp', path.join(publishPath, 'manifest.json'), `s3://${bucketName}/${servicePrefix}/manifest.json`]);\n};\n"]}

package/lib/commonjs/platforms/aws/stacks.d.ts

@@ -0,0 +1,7 @@
+export declare const deployStack: (stackName: string, env?: Record<string, string>) => Promise<void>;
+export declare const deployServiceStack: (serviceName: string, stackName: string, appName: string) => Promise<void>;
+export declare const destroyStack: (stackName: string, env?: Record<string, string>) => Promise<void>;
+export declare const destroyServiceStack: (serviceName: string, stackName: string, appName: string) => Promise<void>;
+export declare const deployDomainStack: (appName: string) => Promise<void>;
+export declare const deployAccountStack: (appName: string) => Promise<void>;
+export declare const deployBootstrapStack: (appName: string) => Promise<void>;

package/lib/commonjs/platforms/aws/stacks.js

@@ -0,0 +1,91 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.deployBootstrapStack = exports.deployAccountStack = exports.deployDomainStack = exports.destroyServiceStack = exports.destroyStack = exports.deployServiceStack = exports.deployStack = void 0;
+// Host-side `cdk deploy` helpers. No cdk.json anywhere: the CDK app command is
+// passed via --app and runs quidproquo-deploy-awscdk's generic workspace app
+// (bin/qpq-cdk-app.js) under ts-node hooks, with DEPLOY_* in the env.
+const quidproquo_deploy_awscdk_1 = require("quidproquo-deploy-awscdk");
+const path_1 = __importDefault(require("path"));
+const discovery_1 = require("../../lib/discovery");
+const qpqConfigs_1 = require("../../lib/qpqConfigs");
+const runCommand_1 = require("../../lib/runCommand");
+const timing_1 = require("../../lib/timing");
+const cdkApp_1 = require("./cdkApp");
+const deployStack = (stackName_1, ...args_1) => __awaiter(void 0, [stackName_1, ...args_1], void 0, function* (stackName, env = {}) {
+    (0, timing_1.logTimeStart)(stackName);
+    yield (0, runCommand_1.runCommand)('npx', ['cdk', 'deploy', stackName, '--require-approval', 'never', '--app', `'${(0, cdkApp_1.getCdkAppCommand)()}'`, '--output', path_1.default.join('dist', 'qpq', 'cdk.out')], {
+        cwd: (0, discovery_1.getRoot)(),
+        env,
+    });
+    (0, timing_1.logTimeEnd)(stackName);
+});
+exports.deployStack = deployStack;
+const deployServiceStack = (serviceName, stackName, appName) => (0, exports.deployStack)(stackName, {
+    DEPLOY_SERVICE_NAME: serviceName,
+    DEPLOY_APP_NAME: appName,
+});
+exports.deployServiceStack = deployServiceStack;
+// `cdk destroy` still synths the app to find the stack, so it runs the same
+// generic workspace app with the same DEPLOY_* env as deploys — meaning the
+// service bundles under dist/ must exist for asset resolution to succeed.
+const destroyStack = (stackName_1, ...args_1) => __awaiter(void 0, [stackName_1, ...args_1], void 0, function* (stackName, env = {}) {
+    (0, timing_1.logTimeStart)(stackName);
+    yield (0, runCommand_1.runCommand)('npx', ['cdk', 'destroy', stackName, '--force', '--app', `'${(0, cdkApp_1.getCdkAppCommand)()}'`, '--output', path_1.default.join('dist', 'qpq', 'cdk.out')], {
+        cwd: (0, discovery_1.getRoot)(),
+        env,
+    });
+    (0, timing_1.logTimeEnd)(stackName);
+});
+exports.destroyStack = destroyStack;
+const destroyServiceStack = (serviceName, stackName, appName) => (0, exports.destroyStack)(stackName, {
+    DEPLOY_SERVICE_NAME: serviceName,
+    DEPLOY_APP_NAME: appName,
+});
+exports.destroyServiceStack = destroyServiceStack;
+const deployDomainStack = (appName) => __awaiter(void 0, void 0, void 0, function* () {
+    const qpqConfig = (0, qpqConfigs_1.loadServiceQpqConfig)(appName, (0, discovery_1.getServiceNames)(appName)[0]);
+    const stackName = quidproquo_deploy_awscdk_1.qpqDeployAwsCdkUtils.getDomainStackName(qpqConfig);
+    console.log('Deploy Domain: ', stackName);
+    yield (0, exports.deployStack)(stackName, {
+        DEPLOY_SERVICE_NAME: '',
+        DEPLOY_APP_NAME: appName,
+    });
+});
+exports.deployDomainStack = deployDomainStack;
+// Account-level guardrails stack - statically named (one per AWS account,
+// app-agnostic), so no config load is needed to know the name. Callers decide
+// whether an actor deploy should include it (bootstrap skips it; the explicit
+// 'account' menu option always deploys).
+const deployAccountStack = (appName) => __awaiter(void 0, void 0, void 0, function* () {
+    const stackName = quidproquo_deploy_awscdk_1.qpqDeployAwsCdkUtils.getAccountStackName();
+    console.log('Deploy Account: ', stackName);
+    yield (0, exports.deployStack)(stackName, {
+        DEPLOY_SERVICE_NAME: '',
+        DEPLOY_APP_NAME: appName,
+    });
+});
+exports.deployAccountStack = deployAccountStack;
+const deployBootstrapStack = (appName) => __awaiter(void 0, void 0, void 0, function* () {
+    const appPrefix = (0, qpqConfigs_1.getAppPrefix)(appName);
+    const stackName = process.env.ACTOR_NAME
+        ? `${appPrefix}-${process.env.ENVIRONMENT}-${process.env.ACTOR_NAME}-bs`
+        : `${appPrefix}-${process.env.ENVIRONMENT}-bs`;
+    yield (0, exports.deployStack)(stackName, {
+        DEPLOY_SERVICE_NAME: '',
+        DEPLOY_APP_NAME: appName,
+    });
+});
+exports.deployBootstrapStack = deployBootstrapStack;
+//# sourceMappingURL=stacks.js.map

package/lib/commonjs/platforms/aws/stacks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stacks.js","sourceRoot":"","sources":["../../../../src/platforms/aws/stacks.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,+EAA+E;AAC/E,6EAA6E;AAC7E,sEAAsE;AACtE,uEAAgE;AAEhE,gDAAwB;AAExB,mDAA+D;AAC/D,qDAA0E;AAC1E,qDAAkD;AAClD,6CAA4D;AAC5D,qCAA4C;AAErC,MAAM,WAAW,GAAG,yBAA2E,EAAE,gEAAtE,SAAiB,EAAE,MAA8B,EAAE;IACnF,IAAA,qBAAY,EAAC,SAAS,CAAC,CAAC;IACxB,MAAM,IAAA,uBAAU,EACd,KAAK,EACL,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,oBAAoB,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,IAAA,yBAAgB,GAAE,GAAG,EAAE,UAAU,EAAE,cAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,EAChJ;QACE,GAAG,EAAE,IAAA,mBAAO,GAAE;QACd,GAAG;KACJ,CACF,CAAC;IACF,IAAA,mBAAU,EAAC,SAAS,CAAC,CAAC;AACxB,CAAC,CAAA,CAAC;AAXW,QAAA,WAAW,eAWtB;AAEK,MAAM,kBAAkB,GAAG,CAAC,WAAmB,EAAE,SAAiB,EAAE,OAAe,EAAiB,EAAE,CAC3G,IAAA,mBAAW,EAAC,SAAS,EAAE;IACrB,mBAAmB,EAAE,WAAW;IAChC,eAAe,EAAE,OAAO;CACzB,CAAC,CAAC;AAJQ,QAAA,kBAAkB,sBAI1B;AAEL,4EAA4E;AAC5E,4EAA4E;AAC5E,0EAA0E;AACnE,MAAM,YAAY,GAAG,yBAA2E,EAAE,gEAAtE,SAAiB,EAAE,MAA8B,EAAE;IACpF,IAAA,qBAAY,EAAC,SAAS,CAAC,CAAC;IACxB,MAAM,IAAA,uBAAU,EACd,KAAK,EACL,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,IAAA,yBAAgB,GAAE,GAAG,EAAE,UAAU,EAAE,cAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,EAC7H;QACE,GAAG,EAAE,IAAA,mBAAO,GAAE;QACd,GAAG;KACJ,CACF,CAAC;IACF,IAAA,mBAAU,EAAC,SAAS,CAAC,CAAC;AACxB,CAAC,CAAA,CAAC;AAXW,QAAA,YAAY,gBAWvB;AAEK,MAAM,mBAAmB,GAAG,CAAC,WAAmB,EAAE,SAAiB,EAAE,OAAe,EAAiB,EAAE,CAC5G,IAAA,oBAAY,EAAC,SAAS,EAAE;IACtB,mBAAmB,EAAE,WAAW;IAChC,eAAe,EAAE,OAAO;CACzB,CAAC,CAAC;AAJQ,QAAA,mBAAmB,uBAI3B;AAEE,MAAM,iBAAiB,GAAG,CAAO,OAAe,EAAiB,EAAE;IACxE,MAAM,SAAS,GAAG,IAAA,iCAAoB,EAAC,OAAO,EAAE,IAAA,2BAAe,EAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7E,MAAM,SAAS,GAAG,+CAAoB,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC;IAC1C,MAAM,IAAA,mBAAW,EAAC,SAAS,EAAE;QAC3B,mBAAmB,EAAE,EAAE;QACvB,eAAe,EAAE,OAAO;KACzB,CAAC,CAAC;AACL,CAAC,CAAA,CAAC;AARW,QAAA,iBAAiB,qBAQ5B;AAEF,0EAA0E;AAC1E,8EAA8E;AAC9E,8EAA8E;AAC9E,yCAAyC;AAClC,MAAM,kBAAkB,GAAG,CAAO,OAAe,EAAiB,EAAE;IACzE,MAAM,SAAS,GAAG,+CAAoB,CAAC,mBAAmB,EAAE,CAAC;IAC7D,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;IAC3C,MAAM,IAAA,mBAAW,EAAC,SAAS,EAAE;QAC3B,mBAAmB,EAAE,EAAE;QACvB,eAAe,EAAE,OAAO;KACzB,CAAC,CAAC;AACL,CAAC,CAAA,CAAC;AAPW,QAAA,kBAAkB,sBAO7B;AAEK,MAAM,oBAAoB,GAAG,CAAO,OAAe,EAAiB,EAAE;IAC3E,MAAM,SAAS,GAAG,IAAA,yBAAY,EAAC,OAAO,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU;QACtC,CAAC,CAAC,GAAG,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,KAAK;QACxE,CAAC,CAAC,GAAG,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,CAAC;IACjD,MAAM,IAAA,mBAAW,EAAC,SAAS,EAAE;QAC3B,mBAAmB,EAAE,EAAE;QACvB,eAAe,EAAE,OAAO;KACzB,CAAC,CAAC;AACL,CAAC,CAAA,CAAC;AATW,QAAA,oBAAoB,wBAS/B","sourcesContent":["// Host-side `cdk deploy` helpers. No cdk.json anywhere: the CDK app command is\n// passed via --app and runs quidproquo-deploy-awscdk's generic workspace app\n// (bin/qpq-cdk-app.js) under ts-node hooks, with DEPLOY_* in the env.\nimport { qpqDeployAwsCdkUtils } from 'quidproquo-deploy-awscdk';\n\nimport path from 'path';\n\nimport { getRoot, getServiceNames } from '../../lib/discovery';\nimport { getAppPrefix, loadServiceQpqConfig } from '../../lib/qpqConfigs';\nimport { runCommand } from '../../lib/runCommand';\nimport { logTimeEnd, logTimeStart } from '../../lib/timing';\nimport { getCdkAppCommand } from './cdkApp';\n\nexport const deployStack = async (stackName: string, env: Record<string, string> = {}): Promise<void> => {\n  logTimeStart(stackName);\n  await runCommand(\n    'npx',\n    ['cdk', 'deploy', stackName, '--require-approval', 'never', '--app', `'${getCdkAppCommand()}'`, '--output', path.join('dist', 'qpq', 'cdk.out')],\n    {\n      cwd: getRoot(),\n      env,\n    },\n  );\n  logTimeEnd(stackName);\n};\n\nexport const deployServiceStack = (serviceName: string, stackName: string, appName: string): Promise<void> =>\n  deployStack(stackName, {\n    DEPLOY_SERVICE_NAME: serviceName,\n    DEPLOY_APP_NAME: appName,\n  });\n\n// `cdk destroy` still synths the app to find the stack, so it runs the same\n// generic workspace app with the same DEPLOY_* env as deploys — meaning the\n// service bundles under dist/ must exist for asset resolution to succeed.\nexport const destroyStack = async (stackName: string, env: Record<string, string> = {}): Promise<void> => {\n  logTimeStart(stackName);\n  await runCommand(\n    'npx',\n    ['cdk', 'destroy', stackName, '--force', '--app', `'${getCdkAppCommand()}'`, '--output', path.join('dist', 'qpq', 'cdk.out')],\n    {\n      cwd: getRoot(),\n      env,\n    },\n  );\n  logTimeEnd(stackName);\n};\n\nexport const destroyServiceStack = (serviceName: string, stackName: string, appName: string): Promise<void> =>\n  destroyStack(stackName, {\n    DEPLOY_SERVICE_NAME: serviceName,\n    DEPLOY_APP_NAME: appName,\n  });\n\nexport const deployDomainStack = async (appName: string): Promise<void> => {\n  const qpqConfig = loadServiceQpqConfig(appName, getServiceNames(appName)[0]);\n  const stackName = qpqDeployAwsCdkUtils.getDomainStackName(qpqConfig);\n  console.log('Deploy Domain: ', stackName);\n  await deployStack(stackName, {\n    DEPLOY_SERVICE_NAME: '',\n    DEPLOY_APP_NAME: appName,\n  });\n};\n\n// Account-level guardrails stack - statically named (one per AWS account,\n// app-agnostic), so no config load is needed to know the name. Callers decide\n// whether an actor deploy should include it (bootstrap skips it; the explicit\n// 'account' menu option always deploys).\nexport const deployAccountStack = async (appName: string): Promise<void> => {\n  const stackName = qpqDeployAwsCdkUtils.getAccountStackName();\n  console.log('Deploy Account: ', stackName);\n  await deployStack(stackName, {\n    DEPLOY_SERVICE_NAME: '',\n    DEPLOY_APP_NAME: appName,\n  });\n};\n\nexport const deployBootstrapStack = async (appName: string): Promise<void> => {\n  const appPrefix = getAppPrefix(appName);\n  const stackName = process.env.ACTOR_NAME\n    ? `${appPrefix}-${process.env.ENVIRONMENT}-${process.env.ACTOR_NAME}-bs`\n    : `${appPrefix}-${process.env.ENVIRONMENT}-bs`;\n  await deployStack(stackName, {\n    DEPLOY_SERVICE_NAME: '',\n    DEPLOY_APP_NAME: appName,\n  });\n};\n"]}

package/lib/commonjs/platforms/aws/teardown.d.ts

@@ -0,0 +1,2 @@
+import { TeardownPlan } from '../../lib/deployPrompts';
+export declare const awsTeardown: (appName: string, plan: TeardownPlan) => Promise<void>;

package/lib/commonjs/platforms/aws/teardown.js

@@ -0,0 +1,59 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.awsTeardown = void 0;
+// AWS sequential teardown (`qpq teardown`) — the stack phases of `qpq go` in
+// reverse. Per phase it destroys every selected service's web, then api, then
+// inf CDK stacks. Phases don't cross-reference each other's CFN outputs
+// (values flow through SSM), so this order is prudence, not a hard dependency.
+// Bootstrap, domain and account stacks are deliberately out of scope — they
+// outlive any one service and are torn down by hand if ever.
+const quidproquo_deploy_awscdk_1 = require("quidproquo-deploy-awscdk");
+const synth_1 = require("../../commands/synth");
+const qpqConfigs_1 = require("../../lib/qpqConfigs");
+const timing_1 = require("../../lib/timing");
+const awsCredentials_1 = require("./awsCredentials");
+const stacks_1 = require("./stacks");
+const teardownPhases = [
+    { label: 'Web', getStackName: quidproquo_deploy_awscdk_1.qpqDeployAwsCdkUtils.getWebStackName },
+    { label: 'Api', getStackName: quidproquo_deploy_awscdk_1.qpqDeployAwsCdkUtils.getApiStackName },
+    { label: 'Inf', getStackName: quidproquo_deploy_awscdk_1.qpqDeployAwsCdkUtils.getInfStackName },
+];
+const awsTeardown = (appName, plan) => __awaiter(void 0, void 0, void 0, function* () {
+    if (plan.kind === 'cancelled') {
+        return;
+    }
+    const { services } = plan;
+    console.log('\n\nRunning automated teardown\n\n');
+    console.log('Executing for services');
+    console.log(services.join(', '));
+    if ((yield (0, awsCredentials_1.isAwsCredentialsValid)()) === false) {
+        console.log('Credentials are expired or invalid.');
+        return;
+    }
+    (0, timing_1.logTimeStart)('totalTime');
+    // The stack-name utils and the cdk app both read the synthed QPQ configs.
+    yield services.reduce((cur, service) => __awaiter(void 0, void 0, void 0, function* () {
+        yield cur;
+        yield (0, synth_1.synthCommand)([service, '--app', appName]);
+    }), Promise.resolve());
+    for (const { label, getStackName } of teardownPhases) {
+        yield services.reduce((cur, service) => __awaiter(void 0, void 0, void 0, function* () {
+            yield cur;
+            const qpqConfigForService = (0, qpqConfigs_1.loadServiceQpqConfig)(appName, service);
+            console.log(`Destroy ${label}: `, service);
+            yield (0, stacks_1.destroyServiceStack)(service, getStackName(qpqConfigForService), appName);
+        }), Promise.resolve());
+    }
+    (0, timing_1.logTimeEnd)('totalTime');
+});
+exports.awsTeardown = awsTeardown;
+//# sourceMappingURL=teardown.js.map

package/lib/commonjs/platforms/aws/teardown.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"teardown.js","sourceRoot":"","sources":["../../../../src/platforms/aws/teardown.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6EAA6E;AAC7E,8EAA8E;AAC9E,wEAAwE;AACxE,+EAA+E;AAC/E,4EAA4E;AAC5E,6DAA6D;AAC7D,uEAAgE;AAEhE,gDAAoD;AAEpD,qDAA4D;AAC5D,6CAA4D;AAC5D,qDAAyD;AACzD,qCAA+C;AAE/C,MAAM,cAAc,GAAG;IACrB,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,+CAAoB,CAAC,eAAe,EAAE;IACpE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,+CAAoB,CAAC,eAAe,EAAE;IACpE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,+CAAoB,CAAC,eAAe,EAAE;CACrE,CAAC;AAEK,MAAM,WAAW,GAAG,CAAO,OAAe,EAAE,IAAkB,EAAiB,EAAE;IACtF,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC9B,OAAO;IACT,CAAC;IAED,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;IAE1B,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACtC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAEjC,IAAI,CAAC,MAAM,IAAA,sCAAqB,GAAE,CAAC,KAAK,KAAK,EAAE,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;QACnD,OAAO;IACT,CAAC;IAED,IAAA,qBAAY,EAAC,WAAW,CAAC,CAAC;IAE1B,0EAA0E;IAC1E,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAO,GAAG,EAAE,OAAO,EAAE,EAAE;QAC3C,MAAM,GAAG,CAAC;QACV,MAAM,IAAA,oBAAY,EAAC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAClD,CAAC,CAAA,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAEtB,KAAK,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,cAAc,EAAE,CAAC;QACrD,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAO,GAAG,EAAE,OAAO,EAAE,EAAE;YAC3C,MAAM,GAAG,CAAC;YACV,MAAM,mBAAmB,GAAG,IAAA,iCAAoB,EAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACnE,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,IAAI,EAAE,OAAO,CAAC,CAAC;YAC3C,MAAM,IAAA,4BAAmB,EAAC,OAAO,EAAE,YAAY,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC,CAAC;QACjF,CAAC,CAAA,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IACxB,CAAC;IAED,IAAA,mBAAU,EAAC,WAAW,CAAC,CAAC;AAC1B,CAAC,CAAA,CAAC;AAlCW,QAAA,WAAW,eAkCtB","sourcesContent":["// AWS sequential teardown (`qpq teardown`) — the stack phases of `qpq go` in\n// reverse. Per phase it destroys every selected service's web, then api, then\n// inf CDK stacks. Phases don't cross-reference each other's CFN outputs\n// (values flow through SSM), so this order is prudence, not a hard dependency.\n// Bootstrap, domain and account stacks are deliberately out of scope — they\n// outlive any one service and are torn down by hand if ever.\nimport { qpqDeployAwsCdkUtils } from 'quidproquo-deploy-awscdk';\n\nimport { synthCommand } from '../../commands/synth';\nimport { TeardownPlan } from '../../lib/deployPrompts';\nimport { loadServiceQpqConfig } from '../../lib/qpqConfigs';\nimport { logTimeEnd, logTimeStart } from '../../lib/timing';\nimport { isAwsCredentialsValid } from './awsCredentials';\nimport { destroyServiceStack } from './stacks';\n\nconst teardownPhases = [\n  { label: 'Web', getStackName: qpqDeployAwsCdkUtils.getWebStackName },\n  { label: 'Api', getStackName: qpqDeployAwsCdkUtils.getApiStackName },\n  { label: 'Inf', getStackName: qpqDeployAwsCdkUtils.getInfStackName },\n];\n\nexport const awsTeardown = async (appName: string, plan: TeardownPlan): Promise<void> => {\n  if (plan.kind === 'cancelled') {\n    return;\n  }\n\n  const { services } = plan;\n\n  console.log('\\n\\nRunning automated teardown\\n\\n');\n  console.log('Executing for services');\n  console.log(services.join(', '));\n\n  if ((await isAwsCredentialsValid()) === false) {\n    console.log('Credentials are expired or invalid.');\n    return;\n  }\n\n  logTimeStart('totalTime');\n\n  // The stack-name utils and the cdk app both read the synthed QPQ configs.\n  await services.reduce(async (cur, service) => {\n    await cur;\n    await synthCommand([service, '--app', appName]);\n  }, Promise.resolve());\n\n  for (const { label, getStackName } of teardownPhases) {\n    await services.reduce(async (cur, service) => {\n      await cur;\n      const qpqConfigForService = loadServiceQpqConfig(appName, service);\n      console.log(`Destroy ${label}: `, service);\n      await destroyServiceStack(service, getStackName(qpqConfigForService), appName);\n    }, Promise.resolve());\n  }\n\n  logTimeEnd('totalTime');\n};\n"]}

package/lib/commonjs/platforms/aws/viewsSync.d.ts

@@ -0,0 +1,2 @@
+export declare const getViewsS3Destinations: (appName: string, serviceName: string) => string[];
+export declare const syncViewsToS3: (appName: string, serviceName: string) => Promise<void>;

package/lib/commonjs/platforms/aws/viewsSync.js

@@ -0,0 +1,39 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.syncViewsToS3 = exports.getViewsS3Destinations = void 0;
+// Views upload to S3. Bucket names resolve from the shell service's config.
+// shell is the module-federation host: its bundle is the root website, so it
+// syncs to the 'website' bucket root AND to its prefix in the shared 'views'
+// bucket (where every other service's views live).
+const quidproquo_actionprocessor_awslambda_1 = require("quidproquo-actionprocessor-awslambda");
+const qpqConfigs_1 = require("../../lib/qpqConfigs");
+const runCommand_1 = require("../../lib/runCommand");
+const views_1 = require("../../lib/views");
+const getViewsS3Destinations = (appName, serviceName) => {
+    const shellConfig = (0, qpqConfigs_1.loadServiceQpqConfig)(appName, 'shell');
+    const viewsBucketName = quidproquo_actionprocessor_awslambda_1.awsNamingUtils.getConfigRuntimeResourceNameFromConfig('views', shellConfig);
+    const destinations = [`s3://${viewsBucketName}/${serviceName}`];
+    if (serviceName === 'shell') {
+        const websiteBucketName = quidproquo_actionprocessor_awslambda_1.awsNamingUtils.getConfigRuntimeResourceNameFromConfig('website', shellConfig);
+        destinations.push(`s3://${websiteBucketName}`);
+    }
+    return destinations;
+};
+exports.getViewsS3Destinations = getViewsS3Destinations;
+const syncViewsToS3 = (appName, serviceName) => __awaiter(void 0, void 0, void 0, function* () {
+    for (const destination of (0, exports.getViewsS3Destinations)(appName, serviceName)) {
+        console.log(`Copying [${serviceName}] views to [${destination}]`);
+        yield (0, runCommand_1.runCommand)('aws', ['s3', 'sync', (0, views_1.getViewsDistDir)(appName, serviceName), destination]);
+    }
+});
+exports.syncViewsToS3 = syncViewsToS3;
+//# sourceMappingURL=viewsSync.js.map

package/lib/commonjs/platforms/aws/viewsSync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"viewsSync.js","sourceRoot":"","sources":["../../../../src/platforms/aws/viewsSync.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,4EAA4E;AAC5E,6EAA6E;AAC7E,6EAA6E;AAC7E,mDAAmD;AACnD,+FAAsE;AAEtE,qDAA4D;AAC5D,qDAAkD;AAClD,2CAAkD;AAE3C,MAAM,sBAAsB,GAAG,CAAC,OAAe,EAAE,WAAmB,EAAY,EAAE;IACvF,MAAM,WAAW,GAAG,IAAA,iCAAoB,EAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3D,MAAM,eAAe,GAAG,qDAAc,CAAC,sCAAsC,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAEpG,MAAM,YAAY,GAAG,CAAC,QAAQ,eAAe,IAAI,WAAW,EAAE,CAAC,CAAC;IAEhE,IAAI,WAAW,KAAK,OAAO,EAAE,CAAC;QAC5B,MAAM,iBAAiB,GAAG,qDAAc,CAAC,sCAAsC,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACxG,YAAY,CAAC,IAAI,CAAC,QAAQ,iBAAiB,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC,CAAC;AAZW,QAAA,sBAAsB,0BAYjC;AAEK,MAAM,aAAa,GAAG,CAAO,OAAe,EAAE,WAAmB,EAAiB,EAAE;IACzF,KAAK,MAAM,WAAW,IAAI,IAAA,8BAAsB,EAAC,OAAO,EAAE,WAAW,CAAC,EAAE,CAAC;QACvE,OAAO,CAAC,GAAG,CAAC,YAAY,WAAW,eAAe,WAAW,GAAG,CAAC,CAAC;QAClE,MAAM,IAAA,uBAAU,EAAC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAA,uBAAe,EAAC,OAAO,EAAE,WAAW,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC;IAC9F,CAAC;AACH,CAAC,CAAA,CAAC;AALW,QAAA,aAAa,iBAKxB","sourcesContent":["// Views upload to S3. Bucket names resolve from the shell service's config.\n// shell is the module-federation host: its bundle is the root website, so it\n// syncs to the 'website' bucket root AND to its prefix in the shared 'views'\n// bucket (where every other service's views live).\nimport { awsNamingUtils } from 'quidproquo-actionprocessor-awslambda';\n\nimport { loadServiceQpqConfig } from '../../lib/qpqConfigs';\nimport { runCommand } from '../../lib/runCommand';\nimport { getViewsDistDir } from '../../lib/views';\n\nexport const getViewsS3Destinations = (appName: string, serviceName: string): string[] => {\n  const shellConfig = loadServiceQpqConfig(appName, 'shell');\n  const viewsBucketName = awsNamingUtils.getConfigRuntimeResourceNameFromConfig('views', shellConfig);\n\n  const destinations = [`s3://${viewsBucketName}/${serviceName}`];\n\n  if (serviceName === 'shell') {\n    const websiteBucketName = awsNamingUtils.getConfigRuntimeResourceNameFromConfig('website', shellConfig);\n    destinations.push(`s3://${websiteBucketName}`);\n  }\n\n  return destinations;\n};\n\nexport const syncViewsToS3 = async (appName: string, serviceName: string): Promise<void> => {\n  for (const destination of getViewsS3Destinations(appName, serviceName)) {\n    console.log(`Copying [${serviceName}] views to [${destination}]`);\n    await runCommand('aws', ['s3', 'sync', getViewsDistDir(appName, serviceName), destination]);\n  }\n};\n"]}