quidproquo-cli 0.1.5

package/lib/esm/lib/views.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"views.js","sourceRoot":"","sources":["../../../src/lib/views.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,+DAA+D;AAC/D,mCAAmC;AACnC,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAEhE,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAAE,OAAe,EAAE,WAAmB,EAAiB,EAAE;IACvF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,CAAC;IAE/E,OAAO,CAAC,GAAG,CAAC,QAAQ,GAAG,YAAY,CAAC;IACpC,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAEpC,MAAM,SAAS,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC;AAClD,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,OAAe,EAAE,WAAmB,EAAU,EAAE,CAC9E,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC","sourcesContent":["// Views build — programmatic (getViewsRspackConfig), platform-neutral. Where\n// the built views get hosted is a platform driver concern (see\n// platforms/<platform>/viewsSync).\nimport { getViewsRspackConfig } from 'quidproquo-deploy-rspack';\n\nimport path from 'path';\n\nimport { getRoot, getServiceDirectory } from './discovery';\nimport { runRspack } from './rspackRun';\n\nexport const bundleViews = async (appName: string, serviceName: string): Promise<void> => {\n  const viewsDir = path.join(getServiceDirectory(appName, serviceName), 'views');\n\n  process.env.NODE_ENV = 'production';\n  delete process.env.LOCAL_DEV_SERVER;\n\n  await runRspack(getViewsRspackConfig(viewsDir));\n};\n\nexport const getViewsDistDir = (appName: string, serviceName: string): string =>\n  path.join(getRoot(), 'dist', 'apps', appName, 'services', serviceName, 'views');\n"]}

package/lib/esm/platforms/aws/awsCredentials.d.ts

@@ -0,0 +1 @@
+export declare const isAwsCredentialsValid: () => Promise<boolean>;

package/lib/esm/platforms/aws/awsCredentials.js

@@ -0,0 +1,15 @@
+import { GetCallerIdentityCommand, STSClient } from '@aws-sdk/client-sts';
+export const isAwsCredentialsValid = async () => {
+    try {
+        const client = new STSClient({
+            region: process.env.AWS_REGION || process.env.AWS_DEFAULT_REGION || 'us-east-1',
+        });
+        await client.send(new GetCallerIdentityCommand({}));
+        return true;
+    }
+    catch (error) {
+        console.log('Error validating AWS credentials:', error);
+        return false;
+    }
+};
+//# sourceMappingURL=awsCredentials.js.map

package/lib/esm/platforms/aws/awsCredentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"awsCredentials.js","sourceRoot":"","sources":["../../../../src/platforms/aws/awsCredentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAE1E,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,IAAsB,EAAE;IAChE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;YAC3B,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,WAAW;SAChF,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,wBAAwB,CAAC,EAAE,CAAC,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;QACxD,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,CAAC","sourcesContent":["import { GetCallerIdentityCommand, STSClient } from '@aws-sdk/client-sts';\n\nexport const isAwsCredentialsValid = async (): Promise<boolean> => {\n  try {\n    const client = new STSClient({\n      region: process.env.AWS_REGION || process.env.AWS_DEFAULT_REGION || 'us-east-1',\n    });\n    await client.send(new GetCallerIdentityCommand({}));\n    return true;\n  } catch (error) {\n    console.log('Error validating AWS credentials:', error);\n    return false;\n  }\n};\n"]}

package/lib/esm/platforms/aws/cdkApp.d.ts

@@ -0,0 +1,2 @@
+export declare const getCdkAppCommand: () => string;
+export declare const getDockerDir: () => string;

package/lib/esm/platforms/aws/cdkApp.js

@@ -0,0 +1,11 @@
+import path from 'path';
+import { getOwnPackageRoot } from '../../lib/packageRoot';
+// The CDK app command (`cdk ... --app "<this>"`): quidproquo-deploy-awscdk's
+// generic workspace app under ts-node hooks, with DEPLOY_* in the env.
+export const getCdkAppCommand = () => {
+    const cdkAppScript = path.join(getOwnPackageRoot(), 'lib', 'commonjs', 'bin', 'qpqCdkApp.js');
+    return `node -r ts-node/register/transpile-only "${cdkAppScript}"`;
+};
+// The docker build context for the go:docker deployer image.
+export const getDockerDir = () => path.join(getOwnPackageRoot(), 'docker', 'cdk-deployer');
+//# sourceMappingURL=cdkApp.js.map

package/lib/esm/platforms/aws/cdkApp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cdkApp.js","sourceRoot":"","sources":["../../../../src/platforms/aws/cdkApp.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE1D,6EAA6E;AAC7E,uEAAuE;AACvE,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAW,EAAE;IAC3C,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;IAC9F,OAAO,4CAA4C,YAAY,GAAG,CAAC;AACrE,CAAC,CAAC;AAEF,6DAA6D;AAC7D,MAAM,CAAC,MAAM,YAAY,GAAG,GAAW,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC","sourcesContent":["import path from 'path';\n\nimport { getOwnPackageRoot } from '../../lib/packageRoot';\n\n// The CDK app command (`cdk ... --app \"<this>\"`): quidproquo-deploy-awscdk's\n// generic workspace app under ts-node hooks, with DEPLOY_* in the env.\nexport const getCdkAppCommand = (): string => {\n  const cdkAppScript = path.join(getOwnPackageRoot(), 'lib', 'commonjs', 'bin', 'qpqCdkApp.js');\n  return `node -r ts-node/register/transpile-only \"${cdkAppScript}\"`;\n};\n\n// The docker build context for the go:docker deployer image.\nexport const getDockerDir = (): string => path.join(getOwnPackageRoot(), 'docker', 'cdk-deployer');\n"]}

package/lib/esm/platforms/aws/go.d.ts

@@ -0,0 +1,2 @@
+import { DeployPlan } from '../../lib/deployPrompts';
+export declare const awsGo: (appName: string, plan: DeployPlan) => Promise<void>;

package/lib/esm/platforms/aws/go.js

@@ -0,0 +1,100 @@
+// AWS sequential deploy (`qpq go`). Per service it: synths the QPQ config,
+// rspack-bundles the backend (programmatic — no per-service rspack.config.ts),
+// deploys the inf/api/web CDK stacks (cdk runs the generic workspace app via
+// --app), bundles views (rspack, production) and syncs them to S3.
+import { qpqDeployAwsCdkUtils } from 'quidproquo-deploy-awscdk';
+import { getServiceRspackConfig } from 'quidproquo-deploy-rspack';
+import path from 'path';
+import { synthCommand } from '../../commands/synth';
+import { getServiceDirectory, getServiceNamesWithViews } from '../../lib/discovery';
+import { runAppHook } from '../../lib/hooks';
+import { loadServiceQpqConfig } from '../../lib/qpqConfigs';
+import { runRspack } from '../../lib/rspackRun';
+import { runCommand } from '../../lib/runCommand';
+import { logTimeEnd, logTimeStart } from '../../lib/timing';
+import { bundleViews } from '../../lib/views';
+import { isAwsCredentialsValid } from './awsCredentials';
+import { deployAccountStack, deployBootstrapStack, deployDomainStack, deployServiceStack } from './stacks';
+import { syncViewsToS3 } from './viewsSync';
+const buildAndDeploy = async (serviceName, needsSynth, needsBuildApi, needsInfStack, needsApiStack, needsWebStack, needsViewStack, appName) => {
+    if (needsSynth) {
+        console.log('Synth QPQ Configs');
+        await synthCommand([serviceName, '--app', appName]);
+    }
+    const qpqConfigForService = loadServiceQpqConfig(appName, serviceName);
+    if (needsBuildApi) {
+        console.log('Building Api: ', serviceName);
+        await runRspack(getServiceRspackConfig(qpqConfigForService, path.join(getServiceDirectory(appName, serviceName), 'service')));
+    }
+    if (needsInfStack) {
+        console.log('Deploy Inf: ', serviceName);
+        await deployServiceStack(serviceName, qpqDeployAwsCdkUtils.getInfStackName(qpqConfigForService), appName);
+    }
+    if (needsApiStack) {
+        console.log('Deploy Api: ', serviceName);
+        await deployServiceStack(serviceName, qpqDeployAwsCdkUtils.getApiStackName(qpqConfigForService), appName);
+    }
+    if (needsWebStack) {
+        console.log('Deploy Web: ', serviceName);
+        await deployServiceStack(serviceName, qpqDeployAwsCdkUtils.getWebStackName(qpqConfigForService), appName);
+    }
+    if (needsViewStack && getServiceNamesWithViews(appName).includes(serviceName)) {
+        console.log('Building Views: ', serviceName);
+        await bundleViews(appName, serviceName);
+        await syncViewsToS3(appName, serviceName);
+    }
+};
+export const awsGo = async (appName, plan) => {
+    if (plan.kind === 'cancelled') {
+        return;
+    }
+    logTimeStart('totalTime');
+    if (plan.kind === 'account') {
+        await deployAccountStack(plan.appName);
+        logTimeEnd('totalTime');
+        return;
+    }
+    if (plan.kind === 'bootstrap') {
+        // Actor bootstraps deploy into a shared account — leave the account-level
+        // guardrails stack alone (deploy it explicitly via the 'account' option).
+        if (process.env.ACTOR_NAME) {
+            console.log('Skipping account stack for actor deploy');
+        }
+        else {
+            await deployAccountStack(plan.appName);
+        }
+        if (plan.includeDomain) {
+            await deployDomainStack(plan.appName);
+        }
+        await deployBootstrapStack(plan.appName);
+        logTimeEnd('totalTime');
+        return;
+    }
+    const { services, stacks } = plan;
+    const shouldBuildApi = stacks !== 'views';
+    console.log('\n\nRunning automated deploy\n\n');
+    console.log('Executing for services');
+    console.log(services.join(', '));
+    if ((await isAwsCredentialsValid()) === false) {
+        console.log('Credentials are expired or invalid.');
+        return;
+    }
+    const allStacks = stacks === 'all';
+    await runAppHook(appName, 'predeploy');
+    // Workspace packages resolve through their built dist/ (package.json main),
+    // so bundles would ship stale code unless every lib is tsc'd first.
+    console.log('Building workspace packages');
+    await runCommand('npm', ['run', 'build', '--workspaces', '--if-present']);
+    // Views uploads resolve bucket names from the shell service's config.
+    if (allStacks || stacks === 'views') {
+        await synthCommand(['shell', '--app', appName]);
+    }
+    for (let phase = 0; phase <= 5; phase += 1) {
+        await services.reduce(async (cur, service) => {
+            await cur;
+            return buildAndDeploy(service, phase === 0, phase === 1 && shouldBuildApi, phase === 2 && (allStacks || stacks === 'inf'), phase === 3 && (allStacks || stacks === 'api'), phase === 4 && (allStacks || stacks === 'web'), phase === 5 && (allStacks || stacks === 'views'), appName);
+        }, Promise.resolve());
+    }
+    logTimeEnd('totalTime');
+};
+//# sourceMappingURL=go.js.map

package/lib/esm/platforms/aws/go.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"go.js","sourceRoot":"","sources":["../../../../src/platforms/aws/go.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,+EAA+E;AAC/E,6EAA6E;AAC7E,mEAAmE;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAElE,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEpD,OAAO,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AACpF,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAC3G,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,cAAc,GAAG,KAAK,EAC1B,WAAmB,EACnB,UAAmB,EACnB,aAAsB,EACtB,aAAsB,EACtB,aAAsB,EACtB,aAAsB,EACtB,cAAuB,EACvB,OAAe,EACA,EAAE;IACjB,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QACjC,MAAM,YAAY,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,mBAAmB,GAAG,oBAAoB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAEvE,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC;QAC3C,MAAM,SAAS,CAAC,sBAAsB,CAAC,mBAAmB,EAAE,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IAChI,CAAC;IAED,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QACzC,MAAM,kBAAkB,CAAC,WAAW,EAAE,oBAAoB,CAAC,eAAe,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC,CAAC;IAC5G,CAAC;IAED,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QACzC,MAAM,kBAAkB,CAAC,WAAW,EAAE,oBAAoB,CAAC,eAAe,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC,CAAC;IAC5G,CAAC;IAED,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QACzC,MAAM,kBAAkB,CAAC,WAAW,EAAE,oBAAoB,CAAC,eAAe,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC,CAAC;IAC5G,CAAC;IAED,IAAI,cAAc,IAAI,wBAAwB,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9E,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,WAAW,CAAC,CAAC;QAC7C,MAAM,WAAW,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACxC,MAAM,aAAa,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,KAAK,GAAG,KAAK,EAAE,OAAe,EAAE,IAAgB,EAAiB,EAAE;IAC9E,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC9B,OAAO;IACT,CAAC;IAED,YAAY,CAAC,WAAW,CAAC,CAAC;IAE1B,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvC,UAAU,CAAC,WAAW,CAAC,CAAC;QACxB,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC9B,0EAA0E;QAC1E,0EAA0E;QAC1E,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;QACzD,CAAC;aAAM,CAAC;YACN,MAAM,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,MAAM,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzC,UAAU,CAAC,WAAW,CAAC,CAAC;QACxB,OAAO;IACT,CAAC;IAED,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAClC,MAAM,cAAc,GAAG,MAAM,KAAK,OAAO,CAAC;IAE1C,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACtC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAEjC,IAAI,CAAC,MAAM,qBAAqB,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;QACnD,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,KAAK,KAAK,CAAC;IAEnC,MAAM,UAAU,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAEvC,4EAA4E;IAC5E,oEAAoE;IACpE,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IAC3C,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC;IAE1E,sEAAsE;IACtE,IAAI,SAAS,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACpC,MAAM,YAAY,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;YAC3C,MAAM,GAAG,CAAC;YACV,OAAO,cAAc,CACnB,OAAO,EACP,KAAK,KAAK,CAAC,EACX,KAAK,KAAK,CAAC,IAAI,cAAc,EAC7B,KAAK,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,KAAK,KAAK,CAAC,EAC9C,KAAK,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,KAAK,KAAK,CAAC,EAC9C,KAAK,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,KAAK,KAAK,CAAC,EAC9C,KAAK,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,KAAK,OAAO,CAAC,EAChD,OAAO,CACR,CAAC;QACJ,CAAC,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IACxB,CAAC;IAED,UAAU,CAAC,WAAW,CAAC,CAAC;AAC1B,CAAC,CAAC","sourcesContent":["// AWS sequential deploy (`qpq go`). Per service it: synths the QPQ config,\n// rspack-bundles the backend (programmatic — no per-service rspack.config.ts),\n// deploys the inf/api/web CDK stacks (cdk runs the generic workspace app via\n// --app), bundles views (rspack, production) and syncs them to S3.\nimport { qpqDeployAwsCdkUtils } from 'quidproquo-deploy-awscdk';\nimport { getServiceRspackConfig } from 'quidproquo-deploy-rspack';\n\nimport path from 'path';\n\nimport { synthCommand } from '../../commands/synth';\nimport { DeployPlan } from '../../lib/deployPrompts';\nimport { getServiceDirectory, getServiceNamesWithViews } from '../../lib/discovery';\nimport { runAppHook } from '../../lib/hooks';\nimport { loadServiceQpqConfig } from '../../lib/qpqConfigs';\nimport { runRspack } from '../../lib/rspackRun';\nimport { runCommand } from '../../lib/runCommand';\nimport { logTimeEnd, logTimeStart } from '../../lib/timing';\nimport { bundleViews } from '../../lib/views';\nimport { isAwsCredentialsValid } from './awsCredentials';\nimport { deployAccountStack, deployBootstrapStack, deployDomainStack, deployServiceStack } from './stacks';\nimport { syncViewsToS3 } from './viewsSync';\n\nconst buildAndDeploy = async (\n  serviceName: string,\n  needsSynth: boolean,\n  needsBuildApi: boolean,\n  needsInfStack: boolean,\n  needsApiStack: boolean,\n  needsWebStack: boolean,\n  needsViewStack: boolean,\n  appName: string,\n): Promise<void> => {\n  if (needsSynth) {\n    console.log('Synth QPQ Configs');\n    await synthCommand([serviceName, '--app', appName]);\n  }\n\n  const qpqConfigForService = loadServiceQpqConfig(appName, serviceName);\n\n  if (needsBuildApi) {\n    console.log('Building Api: ', serviceName);\n    await runRspack(getServiceRspackConfig(qpqConfigForService, path.join(getServiceDirectory(appName, serviceName), 'service')));\n  }\n\n  if (needsInfStack) {\n    console.log('Deploy Inf: ', serviceName);\n    await deployServiceStack(serviceName, qpqDeployAwsCdkUtils.getInfStackName(qpqConfigForService), appName);\n  }\n\n  if (needsApiStack) {\n    console.log('Deploy Api: ', serviceName);\n    await deployServiceStack(serviceName, qpqDeployAwsCdkUtils.getApiStackName(qpqConfigForService), appName);\n  }\n\n  if (needsWebStack) {\n    console.log('Deploy Web: ', serviceName);\n    await deployServiceStack(serviceName, qpqDeployAwsCdkUtils.getWebStackName(qpqConfigForService), appName);\n  }\n\n  if (needsViewStack && getServiceNamesWithViews(appName).includes(serviceName)) {\n    console.log('Building Views: ', serviceName);\n    await bundleViews(appName, serviceName);\n    await syncViewsToS3(appName, serviceName);\n  }\n};\n\nexport const awsGo = async (appName: string, plan: DeployPlan): Promise<void> => {\n  if (plan.kind === 'cancelled') {\n    return;\n  }\n\n  logTimeStart('totalTime');\n\n  if (plan.kind === 'account') {\n    await deployAccountStack(plan.appName);\n    logTimeEnd('totalTime');\n    return;\n  }\n\n  if (plan.kind === 'bootstrap') {\n    // Actor bootstraps deploy into a shared account — leave the account-level\n    // guardrails stack alone (deploy it explicitly via the 'account' option).\n    if (process.env.ACTOR_NAME) {\n      console.log('Skipping account stack for actor deploy');\n    } else {\n      await deployAccountStack(plan.appName);\n    }\n    if (plan.includeDomain) {\n      await deployDomainStack(plan.appName);\n    }\n    await deployBootstrapStack(plan.appName);\n    logTimeEnd('totalTime');\n    return;\n  }\n\n  const { services, stacks } = plan;\n  const shouldBuildApi = stacks !== 'views';\n\n  console.log('\\n\\nRunning automated deploy\\n\\n');\n  console.log('Executing for services');\n  console.log(services.join(', '));\n\n  if ((await isAwsCredentialsValid()) === false) {\n    console.log('Credentials are expired or invalid.');\n    return;\n  }\n\n  const allStacks = stacks === 'all';\n\n  await runAppHook(appName, 'predeploy');\n\n  // Workspace packages resolve through their built dist/ (package.json main),\n  // so bundles would ship stale code unless every lib is tsc'd first.\n  console.log('Building workspace packages');\n  await runCommand('npm', ['run', 'build', '--workspaces', '--if-present']);\n\n  // Views uploads resolve bucket names from the shell service's config.\n  if (allStacks || stacks === 'views') {\n    await synthCommand(['shell', '--app', appName]);\n  }\n\n  for (let phase = 0; phase <= 5; phase += 1) {\n    await services.reduce(async (cur, service) => {\n      await cur;\n      return buildAndDeploy(\n        service,\n        phase === 0,\n        phase === 1 && shouldBuildApi,\n        phase === 2 && (allStacks || stacks === 'inf'),\n        phase === 3 && (allStacks || stacks === 'api'),\n        phase === 4 && (allStacks || stacks === 'web'),\n        phase === 5 && (allStacks || stacks === 'views'),\n        appName,\n      );\n    }, Promise.resolve());\n  }\n\n  logTimeEnd('totalTime');\n};\n"]}

package/lib/esm/platforms/aws/goDocker.d.ts

@@ -0,0 +1,2 @@
+import { DeployPlan } from '../../lib/deployPrompts';
+export declare const awsGoDocker: (appName: string, plan: DeployPlan) => Promise<void>;

package/lib/esm/platforms/aws/goDocker.js

@@ -0,0 +1,271 @@
+// `qpq go:docker` — asks the same questions as `qpq go`, then deploys in
+// parallel via docker instead of sequentially:
+//
+//   1. Build everything locally first: QPQ config synth, rspack API bundles,
+//      rspack view bundles, and one self-contained CDK cloud assembly per
+//      service (`cdk synth --output dist/qpq/cdk-docker/<app>/<service>`).
+//   2. Wave 1 (inf): one docker container per service deploys its inf stack,
+//      all concurrently. Containers run only the CDK CLI against the mounted
+//      pre-synthesized assembly — the workspace (and its npm-linked
+//      quidproquo packages) never needs to exist inside the image.
+//   3. Wave 2 (api + web): once every inf stack is done, api and web stacks
+//      for all services deploy concurrently (they depend only on inf, not on
+//      each other).
+//   4. Views: the already-built bundles are synced to S3, one aws-cli
+//      container per service, all concurrently.
+//
+// domain/bootstrap menu options deploy host-side exactly like `qpq go` —
+// a single stack gains nothing from docker.
+//
+// Requires the same env as `go` plus a running docker daemon. Knobs:
+// GO_DOCKER_BUILD_CONCURRENCY (default 4 — local builds are CPU-bound) and
+// GO_DOCKER_DEPLOY_CONCURRENCY (default unlimited — deploys just wait on
+// CloudFormation).
+import { qpqDeployAwsCdkUtils } from 'quidproquo-deploy-awscdk';
+import { getServiceRspackConfig } from 'quidproquo-deploy-rspack';
+import fs from 'fs';
+import path from 'path';
+import { synthCommand } from '../../commands/synth';
+import { getRoot, getServiceDirectory, getServiceNamesWithViews } from '../../lib/discovery';
+import { runAppHook } from '../../lib/hooks';
+import { loadServiceQpqConfig } from '../../lib/qpqConfigs';
+import { runRspack } from '../../lib/rspackRun';
+import { nextPrefixColor, runCommand, runCommandPrefixed } from '../../lib/runCommand';
+import { assertNoFailures, runTasks } from '../../lib/runTasks';
+import { logTimeEnd, logTimeStart } from '../../lib/timing';
+import { bundleViews, getViewsDistDir } from '../../lib/views';
+import { isAwsCredentialsValid } from './awsCredentials';
+import { getCdkAppCommand, getDockerDir } from './cdkApp';
+import { deployAccountStack, deployBootstrapStack, deployDomainStack } from './stacks';
+import { getViewsS3Destinations } from './viewsSync';
+const IMAGE_TAG = 'qpq-cdk-deployer';
+const AWS_CLI_IMAGE = 'amazon/aws-cli';
+const BUILD_CONCURRENCY = Number(process.env.GO_DOCKER_BUILD_CONCURRENCY) || 4;
+const DEPLOY_CONCURRENCY = Number(process.env.GO_DOCKER_DEPLOY_CONCURRENCY) || Infinity;
+// Credentials/region reach the containers via `docker run -e NAME` (value
+// inherited from this process's env, never on the docker command line).
+const AWS_ENV_PASSTHROUGH = [
+    'AWS_ACCESS_KEY_ID',
+    'AWS_SECRET_ACCESS_KEY',
+    'AWS_SESSION_TOKEN',
+    'AWS_REGION',
+    'AWS_DEFAULT_REGION',
+    'AWS_DEFAULT_ACCOUNT',
+];
+const assemblyDir = (appName, serviceName) => path.join(getRoot(), 'dist', 'qpq', 'cdk-docker', appName, serviceName);
+const assertDockerRunning = async () => {
+    try {
+        await runCommand('docker', ['info', '--format', '"docker daemon ok — server {{.ServerVersion}}"']);
+    }
+    catch {
+        throw new Error('Docker daemon is not running (start Docker Desktop and retry).');
+    }
+};
+const buildDeployerImage = async () => {
+    // Pin the image's CDK CLI to the CLI's own aws-cdk version so it can always
+    // read the assembly schema the host synthesized.
+    // eslint-disable-next-line @typescript-eslint/no-require-imports
+    const cdkVersion = require('aws-cdk/package.json').version;
+    console.log(`Building deployer image [${IMAGE_TAG}] (aws-cdk ${cdkVersion})`);
+    await runCommand('docker', ['build', '-t', IMAGE_TAG, '--build-arg', `CDK_VERSION=${cdkVersion}`, getDockerDir()]);
+};
+// Deploy one stack from a pre-synthesized assembly in a throwaway container
+// named <service>-<stackType> (e.g. mini-web) so `docker ps` reads cleanly.
+// The assembly mounts read-only and is copied container-local first — the CDK
+// CLI writes lock files next to the assembly it reads, and the copy keeps
+// parallel api/web deploys of the same service fully isolated.
+const dockerDeployStack = (color, appName, serviceName, stackType, stackName) => {
+    const containerName = `${serviceName}-${stackType}`;
+    return runCommandPrefixed(`${stackType}:${serviceName}`, 'docker', [
+        // A container left behind by an interrupted run would block reusing the
+        // name — clear it quietly first.
+        'rm',
+        '-f',
+        containerName,
+        '>/dev/null',
+        '2>&1',
+        ';',
+        'docker',
+        'run',
+        '--rm',
+        '--name',
+        containerName,
+        '-v',
+        `"${assemblyDir(appName, serviceName)}:/assembly:ro"`,
+        ...AWS_ENV_PASSTHROUGH.flatMap((name) => ['-e', name]),
+        IMAGE_TAG,
+        'bash',
+        '-c',
+        `"cp -r /assembly /work/assembly && cdk deploy ${stackName} --app /work/assembly --require-approval never --progress events"`,
+    ], { color });
+};
+// Sync one service's pre-built views to S3 in a throwaway aws-cli container
+// named <service>-views. The official image's entrypoint is `aws`. Multiple
+// destinations (shell → website root + views prefix) run sequentially within
+// the service, reusing the container name.
+const dockerSyncViews = async (color, appName, serviceName) => {
+    const containerName = `${serviceName}-views`;
+    for (const destination of getViewsS3Destinations(appName, serviceName)) {
+        await runCommandPrefixed(`views:${serviceName}`, 'docker', [
+            'rm',
+            '-f',
+            containerName,
+            '>/dev/null',
+            '2>&1',
+            ';',
+            'docker',
+            'run',
+            '--rm',
+            '--name',
+            containerName,
+            '-v',
+            `"${getViewsDistDir(appName, serviceName)}:/views:ro"`,
+            ...AWS_ENV_PASSTHROUGH.flatMap((name) => ['-e', name]),
+            AWS_CLI_IMAGE,
+            's3',
+            'sync',
+            '/views',
+            destination,
+        ], { color });
+    }
+};
+export const awsGoDocker = async (appName, plan) => {
+    if (plan.kind === 'cancelled') {
+        return;
+    }
+    if ((await isAwsCredentialsValid()) === false) {
+        console.log('Credentials are expired or invalid.');
+        return;
+    }
+    logTimeStart('totalTime');
+    if (plan.kind === 'account') {
+        await deployAccountStack(plan.appName);
+        logTimeEnd('totalTime');
+        return;
+    }
+    if (plan.kind === 'bootstrap') {
+        if (plan.includeDomain) {
+            await deployDomainStack(plan.appName);
+        }
+        await deployBootstrapStack(plan.appName);
+        logTimeEnd('totalTime');
+        return;
+    }
+    const { services, stacks } = plan;
+    const allStacks = stacks === 'all';
+    const needInf = allStacks || stacks === 'inf';
+    const needApi = allStacks || stacks === 'api';
+    const needWeb = allStacks || stacks === 'web';
+    const needViews = allStacks || stacks === 'views';
+    const needCdkDeploys = needInf || needApi || needWeb;
+    const viewServices = needViews ? services.filter((s) => getServiceNamesWithViews(appName).includes(s)) : [];
+    console.log('\n\nRunning dockerized deploy\n\n');
+    console.log('Executing for services');
+    console.log(services.join(', '));
+    if (needCdkDeploys || viewServices.length > 0) {
+        await assertDockerRunning();
+    }
+    if (needCdkDeploys) {
+        await buildDeployerImage();
+    }
+    if (viewServices.length > 0) {
+        // Pull up front so the views wave doesn't race N containers into pulling
+        // the same image.
+        await runCommand('docker', ['pull', AWS_CLI_IMAGE]);
+    }
+    // ---- Phase 1: build everything locally ----
+    console.log('\n=== Phase 1: local builds ===\n');
+    await runAppHook(appName, 'predeploy');
+    // Workspace packages resolve through their built dist/ (package.json main),
+    // so bundles would ship stale code unless every lib is tsc'd first. npm runs
+    // the workspaces in topological order; tsc -b is incremental, so this is
+    // seconds when nothing changed.
+    console.log('Building workspace packages');
+    await runCommand('npm', ['run', 'build', '--workspaces', '--if-present']);
+    // Synth QPQ configs (shell's config resolves the view bucket names).
+    // In-process (no subprocess per service) — it's just config loads + JSON writes.
+    const qpqSynthServices = [...new Set([...services, ...(needViews ? ['shell'] : [])])];
+    for (const service of qpqSynthServices) {
+        await synthCommand([service, '--app', appName]);
+    }
+    if (stacks !== 'views') {
+        assertNoFailures('API bundling', await runTasks(services.map((service) => ({
+            label: `bundle-api:${service}`,
+            run: async () => {
+                console.log(`Bundling api: [${service}]`);
+                const qpqConfig = loadServiceQpqConfig(appName, service);
+                await runRspack(getServiceRspackConfig(qpqConfig, path.join(getServiceDirectory(appName, service), 'service')));
+            },
+        })), BUILD_CONCURRENCY));
+    }
+    assertNoFailures('Views bundling', await runTasks(viewServices.map((service) => ({
+        label: `bundle-views:${service}`,
+        run: async () => {
+            console.log(`Bundling views: [${service}]`);
+            await bundleViews(appName, service);
+        },
+    })), BUILD_CONCURRENCY));
+    if (needCdkDeploys) {
+        // One self-contained cloud assembly per service (all its stacks + staged
+        // assets) — separate --output dirs so synths can run in parallel and
+        // containers never share mutable state.
+        assertNoFailures('CDK synth', await runTasks(services.map((service) => ({
+            label: `cdk-synth:${service}`,
+            run: async () => {
+                const outputDir = assemblyDir(appName, service);
+                fs.rmSync(outputDir, { recursive: true, force: true });
+                await runCommandPrefixed(`cdk-synth:${service}`, 'npx', ['cdk', 'synth', '--all', '--quiet', '--app', `'${getCdkAppCommand()}'`, '--output', `"${outputDir}"`], {
+                    cwd: getRoot(),
+                    env: { DEPLOY_SERVICE_NAME: service, DEPLOY_APP_NAME: appName },
+                    color: nextPrefixColor(),
+                });
+            },
+        })), BUILD_CONCURRENCY));
+    }
+    // Stack names come from each service's live config, resolved once up front.
+    const stackNames = new Map(services.map((service) => {
+        const qpqConfig = loadServiceQpqConfig(appName, service);
+        return [
+            service,
+            {
+                inf: qpqDeployAwsCdkUtils.getInfStackName(qpqConfig),
+                api: qpqDeployAwsCdkUtils.getApiStackName(qpqConfig),
+                web: qpqDeployAwsCdkUtils.getWebStackName(qpqConfig),
+            },
+        ];
+    }));
+    // ---- Phase 2: inf stacks, one container per service, all concurrent ----
+    if (needInf) {
+        console.log('\n=== Phase 2: deploy inf stacks (docker) ===\n');
+        logTimeStart('infWave');
+        assertNoFailures('Inf deploy', await runTasks(services.map((service) => ({
+            label: `inf:${service}`,
+            run: () => dockerDeployStack(nextPrefixColor(), appName, service, 'inf', stackNames.get(service).inf),
+        })), DEPLOY_CONCURRENCY));
+        logTimeEnd('infWave');
+    }
+    // ---- Phase 3: api + web stacks, all concurrent ----
+    if (needApi || needWeb) {
+        console.log('\n=== Phase 3: deploy api + web stacks (docker) ===\n');
+        logTimeStart('apiWebWave');
+        assertNoFailures('Api/Web deploy', await runTasks(['api', 'web']
+            .filter((stackType) => (stackType === 'api' ? needApi : needWeb))
+            .flatMap((stackType) => services.map((service) => ({
+            label: `${stackType}:${service}`,
+            run: () => dockerDeployStack(nextPrefixColor(), appName, service, stackType, stackNames.get(service)[stackType]),
+        }))), DEPLOY_CONCURRENCY));
+        logTimeEnd('apiWebWave');
+    }
+    // ---- Phase 4: sync the pre-built views to S3, all concurrent ----
+    if (viewServices.length > 0) {
+        console.log('\n=== Phase 4: sync views to S3 (docker) ===\n');
+        logTimeStart('viewsWave');
+        assertNoFailures('Views sync', await runTasks(viewServices.map((service) => ({
+            label: `views:${service}`,
+            run: () => dockerSyncViews(nextPrefixColor(), appName, service),
+        })), DEPLOY_CONCURRENCY));
+        logTimeEnd('viewsWave');
+    }
+    logTimeEnd('totalTime');
+};
+//# sourceMappingURL=goDocker.js.map

package/lib/esm/platforms/aws/goDocker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"goDocker.js","sourceRoot":"","sources":["../../../../src/platforms/aws/goDocker.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,+CAA+C;AAC/C,EAAE;AACF,6EAA6E;AAC7E,0EAA0E;AAC1E,2EAA2E;AAC3E,6EAA6E;AAC7E,6EAA6E;AAC7E,oEAAoE;AACpE,mEAAmE;AACnE,4EAA4E;AAC5E,6EAA6E;AAC7E,oBAAoB;AACpB,sEAAsE;AACtE,gDAAgD;AAChD,EAAE;AACF,yEAAyE;AACzE,4CAA4C;AAC5C,EAAE;AACF,qEAAqE;AACrE,2EAA2E;AAC3E,yEAAyE;AACzE,mBAAmB;AACnB,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAElE,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEpD,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAC7F,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AACvF,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AACvF,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAErD,MAAM,SAAS,GAAG,kBAAkB,CAAC;AACrC,MAAM,aAAa,GAAG,gBAAgB,CAAC;AAEvC,MAAM,iBAAiB,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,IAAI,CAAC,CAAC;AAC/E,MAAM,kBAAkB,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,IAAI,QAAQ,CAAC;AAExF,0EAA0E;AAC1E,wEAAwE;AACxE,MAAM,mBAAmB,GAAG;IAC1B,mBAAmB;IACnB,uBAAuB;IACvB,mBAAmB;IACnB,YAAY;IACZ,oBAAoB;IACpB,qBAAqB;CACtB,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,OAAe,EAAE,WAAmB,EAAU,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;AAE9I,MAAM,mBAAmB,GAAG,KAAK,IAAmB,EAAE;IACpD,IAAI,CAAC;QACH,MAAM,UAAU,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,gDAAgD,CAAC,CAAC,CAAC;IACrG,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,KAAK,IAAmB,EAAE;IACnD,4EAA4E;IAC5E,iDAAiD;IACjD,iEAAiE;IACjE,MAAM,UAAU,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC,OAAiB,CAAC;IACrE,OAAO,CAAC,GAAG,CAAC,4BAA4B,SAAS,cAAc,UAAU,GAAG,CAAC,CAAC;IAC9E,MAAM,UAAU,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,eAAe,UAAU,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;AACrH,CAAC,CAAC;AAEF,4EAA4E;AAC5E,4EAA4E;AAC5E,8EAA8E;AAC9E,0EAA0E;AAC1E,+DAA+D;AAC/D,MAAM,iBAAiB,GAAG,CACxB,KAAa,EACb,OAAe,EACf,WAAmB,EACnB,SAAgC,EAChC,SAAiB,EACF,EAAE;IACjB,MAAM,aAAa,GAAG,GAAG,WAAW,IAAI,SAAS,EAAE,CAAC;IACpD,OAAO,kBAAkB,CACvB,GAAG,SAAS,IAAI,WAAW,EAAE,EAC7B,QAAQ,EACR;QACE,wEAAwE;QACxE,iCAAiC;QACjC,IAAI;QACJ,IAAI;QACJ,aAAa;QACb,YAAY;QACZ,MAAM;QACN,GAAG;QACH,QAAQ;QACR,KAAK;QACL,MAAM;QACN,QAAQ;QACR,aAAa;QACb,IAAI;QACJ,IAAI,WAAW,CAAC,OAAO,EAAE,WAAW,CAAC,gBAAgB;QACrD,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACtD,SAAS;QACT,MAAM;QACN,IAAI;QACJ,iDAAiD,SAAS,mEAAmE;KAC9H,EACD,EAAE,KAAK,EAAE,CACV,CAAC;AACJ,CAAC,CAAC;AAEF,4EAA4E;AAC5E,4EAA4E;AAC5E,6EAA6E;AAC7E,2CAA2C;AAC3C,MAAM,eAAe,GAAG,KAAK,EAAE,KAAa,EAAE,OAAe,EAAE,WAAmB,EAAiB,EAAE;IACnG,MAAM,aAAa,GAAG,GAAG,WAAW,QAAQ,CAAC;IAC7C,KAAK,MAAM,WAAW,IAAI,sBAAsB,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,CAAC;QACvE,MAAM,kBAAkB,CACtB,SAAS,WAAW,EAAE,EACtB,QAAQ,EACR;YACE,IAAI;YACJ,IAAI;YACJ,aAAa;YACb,YAAY;YACZ,MAAM;YACN,GAAG;YACH,QAAQ;YACR,KAAK;YACL,MAAM;YACN,QAAQ;YACR,aAAa;YACb,IAAI;YACJ,IAAI,eAAe,CAAC,OAAO,EAAE,WAAW,CAAC,aAAa;YACtD,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACtD,aAAa;YACb,IAAI;YACJ,MAAM;YACN,QAAQ;YACR,WAAW;SACZ,EACD,EAAE,KAAK,EAAE,CACV,CAAC;IACJ,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAAE,OAAe,EAAE,IAAgB,EAAiB,EAAE;IACpF,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC9B,OAAO;IACT,CAAC;IAED,IAAI,CAAC,MAAM,qBAAqB,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;QACnD,OAAO;IACT,CAAC;IAED,YAAY,CAAC,WAAW,CAAC,CAAC;IAE1B,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvC,UAAU,CAAC,WAAW,CAAC,CAAC;QACxB,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,MAAM,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzC,UAAU,CAAC,WAAW,CAAC,CAAC;QACxB,OAAO;IACT,CAAC;IAED,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAElC,MAAM,SAAS,GAAG,MAAM,KAAK,KAAK,CAAC;IACnC,MAAM,OAAO,GAAG,SAAS,IAAI,MAAM,KAAK,KAAK,CAAC;IAC9C,MAAM,OAAO,GAAG,SAAS,IAAI,MAAM,KAAK,KAAK,CAAC;IAC9C,MAAM,OAAO,GAAG,SAAS,IAAI,MAAM,KAAK,KAAK,CAAC;IAC9C,MAAM,SAAS,GAAG,SAAS,IAAI,MAAM,KAAK,OAAO,CAAC;IAClD,MAAM,cAAc,GAAG,OAAO,IAAI,OAAO,IAAI,OAAO,CAAC;IAErD,MAAM,YAAY,GAAG,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAE5G,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACtC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAEjC,IAAI,cAAc,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,mBAAmB,EAAE,CAAC;IAC9B,CAAC;IACD,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,kBAAkB,EAAE,CAAC;IAC7B,CAAC;IACD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,yEAAyE;QACzE,kBAAkB;QAClB,MAAM,UAAU,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;IACtD,CAAC;IAED,8CAA8C;IAC9C,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;IAEjD,MAAM,UAAU,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAEvC,4EAA4E;IAC5E,6EAA6E;IAC7E,yEAAyE;IACzE,gCAAgC;IAChC,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IAC3C,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC;IAE1E,qEAAqE;IACrE,iFAAiF;IACjF,MAAM,gBAAgB,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACtF,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;QACvC,MAAM,YAAY,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,gBAAgB,CACd,cAAc,EACd,MAAM,QAAQ,CACZ,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACzB,KAAK,EAAE,cAAc,OAAO,EAAE;YAC9B,GAAG,EAAE,KAAK,IAAI,EAAE;gBACd,OAAO,CAAC,GAAG,CAAC,kBAAkB,OAAO,GAAG,CAAC,CAAC;gBAC1C,MAAM,SAAS,GAAG,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACzD,MAAM,SAAS,CAAC,sBAAsB,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;YAClH,CAAC;SACF,CAAC,CAAC,EACH,iBAAiB,CAClB,CACF,CAAC;IACJ,CAAC;IAED,gBAAgB,CACd,gBAAgB,EAChB,MAAM,QAAQ,CACZ,YAAY,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC7B,KAAK,EAAE,gBAAgB,OAAO,EAAE;QAChC,GAAG,EAAE,KAAK,IAAI,EAAE;YACd,OAAO,CAAC,GAAG,CAAC,oBAAoB,OAAO,GAAG,CAAC,CAAC;YAC5C,MAAM,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACtC,CAAC;KACF,CAAC,CAAC,EACH,iBAAiB,CAClB,CACF,CAAC;IAEF,IAAI,cAAc,EAAE,CAAC;QACnB,yEAAyE;QACzE,qEAAqE;QACrE,wCAAwC;QACxC,gBAAgB,CACd,WAAW,EACX,MAAM,QAAQ,CACZ,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACzB,KAAK,EAAE,aAAa,OAAO,EAAE;YAC7B,GAAG,EAAE,KAAK,IAAI,EAAE;gBACd,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAChD,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvD,MAAM,kBAAkB,CACtB,aAAa,OAAO,EAAE,EACtB,KAAK,EACL,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,gBAAgB,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,SAAS,GAAG,CAAC,EACtG;oBACE,GAAG,EAAE,OAAO,EAAE;oBACd,GAAG,EAAE,EAAE,mBAAmB,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE;oBAC/D,KAAK,EAAE,eAAe,EAAE;iBACzB,CACF,CAAC;YACJ,CAAC;SACF,CAAC,CAAC,EACH,iBAAiB,CAClB,CACF,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,MAAM,UAAU,GAAG,IAAI,GAAG,CACxB,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QACvB,MAAM,SAAS,GAAG,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACzD,OAAO;YACL,OAAO;YACP;gBACE,GAAG,EAAE,oBAAoB,CAAC,eAAe,CAAC,SAAS,CAAC;gBACpD,GAAG,EAAE,oBAAoB,CAAC,eAAe,CAAC,SAAS,CAAC;gBACpD,GAAG,EAAE,oBAAoB,CAAC,eAAe,CAAC,SAAS,CAAC;aACrD;SACF,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;IAEF,2EAA2E;IAC3E,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;QAC/D,YAAY,CAAC,SAAS,CAAC,CAAC;QACxB,gBAAgB,CACd,YAAY,EACZ,MAAM,QAAQ,CACZ,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACzB,KAAK,EAAE,OAAO,OAAO,EAAE;YACvB,GAAG,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,eAAe,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,OAAO,CAAE,CAAC,GAAG,CAAC;SACvG,CAAC,CAAC,EACH,kBAAkB,CACnB,CACF,CAAC;QACF,UAAU,CAAC,SAAS,CAAC,CAAC;IACxB,CAAC;IAED,sDAAsD;IACtD,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;QACrE,YAAY,CAAC,YAAY,CAAC,CAAC;QAC3B,gBAAgB,CACd,gBAAgB,EAChB,MAAM,QAAQ,CACX,CAAC,KAAK,EAAE,KAAK,CAAW;aACtB,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;aAChE,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE,CACrB,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACzB,KAAK,EAAE,GAAG,SAAS,IAAI,OAAO,EAAE;YAChC,GAAG,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,eAAe,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC,GAAG,CAAC,OAAO,CAAE,CAAC,SAAS,CAAC,CAAC;SAClH,CAAC,CAAC,CACJ,EACH,kBAAkB,CACnB,CACF,CAAC;QACF,UAAU,CAAC,YAAY,CAAC,CAAC;IAC3B,CAAC;IAED,oEAAoE;IACpE,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;QAC9D,YAAY,CAAC,WAAW,CAAC,CAAC;QAC1B,gBAAgB,CACd,YAAY,EACZ,MAAM,QAAQ,CACZ,YAAY,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAC7B,KAAK,EAAE,SAAS,OAAO,EAAE;YACzB,GAAG,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,eAAe,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC;SAChE,CAAC,CAAC,EACH,kBAAkB,CACnB,CACF,CAAC;QACF,UAAU,CAAC,WAAW,CAAC,CAAC;IAC1B,CAAC;IAED,UAAU,CAAC,WAAW,CAAC,CAAC;AAC1B,CAAC,CAAC","sourcesContent":["// `qpq go:docker` — asks the same questions as `qpq go`, then deploys in\n// parallel via docker instead of sequentially:\n//\n//   1. Build everything locally first: QPQ config synth, rspack API bundles,\n//      rspack view bundles, and one self-contained CDK cloud assembly per\n//      service (`cdk synth --output dist/qpq/cdk-docker/<app>/<service>`).\n//   2. Wave 1 (inf): one docker container per service deploys its inf stack,\n//      all concurrently. Containers run only the CDK CLI against the mounted\n//      pre-synthesized assembly — the workspace (and its npm-linked\n//      quidproquo packages) never needs to exist inside the image.\n//   3. Wave 2 (api + web): once every inf stack is done, api and web stacks\n//      for all services deploy concurrently (they depend only on inf, not on\n//      each other).\n//   4. Views: the already-built bundles are synced to S3, one aws-cli\n//      container per service, all concurrently.\n//\n// domain/bootstrap menu options deploy host-side exactly like `qpq go` —\n// a single stack gains nothing from docker.\n//\n// Requires the same env as `go` plus a running docker daemon. Knobs:\n// GO_DOCKER_BUILD_CONCURRENCY (default 4 — local builds are CPU-bound) and\n// GO_DOCKER_DEPLOY_CONCURRENCY (default unlimited — deploys just wait on\n// CloudFormation).\nimport { qpqDeployAwsCdkUtils } from 'quidproquo-deploy-awscdk';\nimport { getServiceRspackConfig } from 'quidproquo-deploy-rspack';\n\nimport fs from 'fs';\nimport path from 'path';\n\nimport { synthCommand } from '../../commands/synth';\nimport { DeployPlan } from '../../lib/deployPrompts';\nimport { getRoot, getServiceDirectory, getServiceNamesWithViews } from '../../lib/discovery';\nimport { runAppHook } from '../../lib/hooks';\nimport { loadServiceQpqConfig } from '../../lib/qpqConfigs';\nimport { runRspack } from '../../lib/rspackRun';\nimport { nextPrefixColor, runCommand, runCommandPrefixed } from '../../lib/runCommand';\nimport { assertNoFailures, runTasks } from '../../lib/runTasks';\nimport { logTimeEnd, logTimeStart } from '../../lib/timing';\nimport { bundleViews, getViewsDistDir } from '../../lib/views';\nimport { isAwsCredentialsValid } from './awsCredentials';\nimport { getCdkAppCommand, getDockerDir } from './cdkApp';\nimport { deployAccountStack, deployBootstrapStack, deployDomainStack } from './stacks';\nimport { getViewsS3Destinations } from './viewsSync';\n\nconst IMAGE_TAG = 'qpq-cdk-deployer';\nconst AWS_CLI_IMAGE = 'amazon/aws-cli';\n\nconst BUILD_CONCURRENCY = Number(process.env.GO_DOCKER_BUILD_CONCURRENCY) || 4;\nconst DEPLOY_CONCURRENCY = Number(process.env.GO_DOCKER_DEPLOY_CONCURRENCY) || Infinity;\n\n// Credentials/region reach the containers via `docker run -e NAME` (value\n// inherited from this process's env, never on the docker command line).\nconst AWS_ENV_PASSTHROUGH = [\n  'AWS_ACCESS_KEY_ID',\n  'AWS_SECRET_ACCESS_KEY',\n  'AWS_SESSION_TOKEN',\n  'AWS_REGION',\n  'AWS_DEFAULT_REGION',\n  'AWS_DEFAULT_ACCOUNT',\n];\n\nconst assemblyDir = (appName: string, serviceName: string): string => path.join(getRoot(), 'dist', 'qpq', 'cdk-docker', appName, serviceName);\n\nconst assertDockerRunning = async (): Promise<void> => {\n  try {\n    await runCommand('docker', ['info', '--format', '\"docker daemon ok — server {{.ServerVersion}}\"']);\n  } catch {\n    throw new Error('Docker daemon is not running (start Docker Desktop and retry).');\n  }\n};\n\nconst buildDeployerImage = async (): Promise<void> => {\n  // Pin the image's CDK CLI to the CLI's own aws-cdk version so it can always\n  // read the assembly schema the host synthesized.\n  // eslint-disable-next-line @typescript-eslint/no-require-imports\n  const cdkVersion = require('aws-cdk/package.json').version as string;\n  console.log(`Building deployer image [${IMAGE_TAG}] (aws-cdk ${cdkVersion})`);\n  await runCommand('docker', ['build', '-t', IMAGE_TAG, '--build-arg', `CDK_VERSION=${cdkVersion}`, getDockerDir()]);\n};\n\n// Deploy one stack from a pre-synthesized assembly in a throwaway container\n// named <service>-<stackType> (e.g. mini-web) so `docker ps` reads cleanly.\n// The assembly mounts read-only and is copied container-local first — the CDK\n// CLI writes lock files next to the assembly it reads, and the copy keeps\n// parallel api/web deploys of the same service fully isolated.\nconst dockerDeployStack = (\n  color: number,\n  appName: string,\n  serviceName: string,\n  stackType: 'inf' | 'api' | 'web',\n  stackName: string,\n): Promise<void> => {\n  const containerName = `${serviceName}-${stackType}`;\n  return runCommandPrefixed(\n    `${stackType}:${serviceName}`,\n    'docker',\n    [\n      // A container left behind by an interrupted run would block reusing the\n      // name — clear it quietly first.\n      'rm',\n      '-f',\n      containerName,\n      '>/dev/null',\n      '2>&1',\n      ';',\n      'docker',\n      'run',\n      '--rm',\n      '--name',\n      containerName,\n      '-v',\n      `\"${assemblyDir(appName, serviceName)}:/assembly:ro\"`,\n      ...AWS_ENV_PASSTHROUGH.flatMap((name) => ['-e', name]),\n      IMAGE_TAG,\n      'bash',\n      '-c',\n      `\"cp -r /assembly /work/assembly && cdk deploy ${stackName} --app /work/assembly --require-approval never --progress events\"`,\n    ],\n    { color },\n  );\n};\n\n// Sync one service's pre-built views to S3 in a throwaway aws-cli container\n// named <service>-views. The official image's entrypoint is `aws`. Multiple\n// destinations (shell → website root + views prefix) run sequentially within\n// the service, reusing the container name.\nconst dockerSyncViews = async (color: number, appName: string, serviceName: string): Promise<void> => {\n  const containerName = `${serviceName}-views`;\n  for (const destination of getViewsS3Destinations(appName, serviceName)) {\n    await runCommandPrefixed(\n      `views:${serviceName}`,\n      'docker',\n      [\n        'rm',\n        '-f',\n        containerName,\n        '>/dev/null',\n        '2>&1',\n        ';',\n        'docker',\n        'run',\n        '--rm',\n        '--name',\n        containerName,\n        '-v',\n        `\"${getViewsDistDir(appName, serviceName)}:/views:ro\"`,\n        ...AWS_ENV_PASSTHROUGH.flatMap((name) => ['-e', name]),\n        AWS_CLI_IMAGE,\n        's3',\n        'sync',\n        '/views',\n        destination,\n      ],\n      { color },\n    );\n  }\n};\n\nexport const awsGoDocker = async (appName: string, plan: DeployPlan): Promise<void> => {\n  if (plan.kind === 'cancelled') {\n    return;\n  }\n\n  if ((await isAwsCredentialsValid()) === false) {\n    console.log('Credentials are expired or invalid.');\n    return;\n  }\n\n  logTimeStart('totalTime');\n\n  if (plan.kind === 'account') {\n    await deployAccountStack(plan.appName);\n    logTimeEnd('totalTime');\n    return;\n  }\n\n  if (plan.kind === 'bootstrap') {\n    if (plan.includeDomain) {\n      await deployDomainStack(plan.appName);\n    }\n    await deployBootstrapStack(plan.appName);\n    logTimeEnd('totalTime');\n    return;\n  }\n\n  const { services, stacks } = plan;\n\n  const allStacks = stacks === 'all';\n  const needInf = allStacks || stacks === 'inf';\n  const needApi = allStacks || stacks === 'api';\n  const needWeb = allStacks || stacks === 'web';\n  const needViews = allStacks || stacks === 'views';\n  const needCdkDeploys = needInf || needApi || needWeb;\n\n  const viewServices = needViews ? services.filter((s) => getServiceNamesWithViews(appName).includes(s)) : [];\n\n  console.log('\\n\\nRunning dockerized deploy\\n\\n');\n  console.log('Executing for services');\n  console.log(services.join(', '));\n\n  if (needCdkDeploys || viewServices.length > 0) {\n    await assertDockerRunning();\n  }\n  if (needCdkDeploys) {\n    await buildDeployerImage();\n  }\n  if (viewServices.length > 0) {\n    // Pull up front so the views wave doesn't race N containers into pulling\n    // the same image.\n    await runCommand('docker', ['pull', AWS_CLI_IMAGE]);\n  }\n\n  // ---- Phase 1: build everything locally ----\n  console.log('\\n=== Phase 1: local builds ===\\n');\n\n  await runAppHook(appName, 'predeploy');\n\n  // Workspace packages resolve through their built dist/ (package.json main),\n  // so bundles would ship stale code unless every lib is tsc'd first. npm runs\n  // the workspaces in topological order; tsc -b is incremental, so this is\n  // seconds when nothing changed.\n  console.log('Building workspace packages');\n  await runCommand('npm', ['run', 'build', '--workspaces', '--if-present']);\n\n  // Synth QPQ configs (shell's config resolves the view bucket names).\n  // In-process (no subprocess per service) — it's just config loads + JSON writes.\n  const qpqSynthServices = [...new Set([...services, ...(needViews ? ['shell'] : [])])];\n  for (const service of qpqSynthServices) {\n    await synthCommand([service, '--app', appName]);\n  }\n\n  if (stacks !== 'views') {\n    assertNoFailures(\n      'API bundling',\n      await runTasks(\n        services.map((service) => ({\n          label: `bundle-api:${service}`,\n          run: async () => {\n            console.log(`Bundling api: [${service}]`);\n            const qpqConfig = loadServiceQpqConfig(appName, service);\n            await runRspack(getServiceRspackConfig(qpqConfig, path.join(getServiceDirectory(appName, service), 'service')));\n          },\n        })),\n        BUILD_CONCURRENCY,\n      ),\n    );\n  }\n\n  assertNoFailures(\n    'Views bundling',\n    await runTasks(\n      viewServices.map((service) => ({\n        label: `bundle-views:${service}`,\n        run: async () => {\n          console.log(`Bundling views: [${service}]`);\n          await bundleViews(appName, service);\n        },\n      })),\n      BUILD_CONCURRENCY,\n    ),\n  );\n\n  if (needCdkDeploys) {\n    // One self-contained cloud assembly per service (all its stacks + staged\n    // assets) — separate --output dirs so synths can run in parallel and\n    // containers never share mutable state.\n    assertNoFailures(\n      'CDK synth',\n      await runTasks(\n        services.map((service) => ({\n          label: `cdk-synth:${service}`,\n          run: async () => {\n            const outputDir = assemblyDir(appName, service);\n            fs.rmSync(outputDir, { recursive: true, force: true });\n            await runCommandPrefixed(\n              `cdk-synth:${service}`,\n              'npx',\n              ['cdk', 'synth', '--all', '--quiet', '--app', `'${getCdkAppCommand()}'`, '--output', `\"${outputDir}\"`],\n              {\n                cwd: getRoot(),\n                env: { DEPLOY_SERVICE_NAME: service, DEPLOY_APP_NAME: appName },\n                color: nextPrefixColor(),\n              },\n            );\n          },\n        })),\n        BUILD_CONCURRENCY,\n      ),\n    );\n  }\n\n  // Stack names come from each service's live config, resolved once up front.\n  const stackNames = new Map(\n    services.map((service) => {\n      const qpqConfig = loadServiceQpqConfig(appName, service);\n      return [\n        service,\n        {\n          inf: qpqDeployAwsCdkUtils.getInfStackName(qpqConfig),\n          api: qpqDeployAwsCdkUtils.getApiStackName(qpqConfig),\n          web: qpqDeployAwsCdkUtils.getWebStackName(qpqConfig),\n        },\n      ];\n    }),\n  );\n\n  // ---- Phase 2: inf stacks, one container per service, all concurrent ----\n  if (needInf) {\n    console.log('\\n=== Phase 2: deploy inf stacks (docker) ===\\n');\n    logTimeStart('infWave');\n    assertNoFailures(\n      'Inf deploy',\n      await runTasks(\n        services.map((service) => ({\n          label: `inf:${service}`,\n          run: () => dockerDeployStack(nextPrefixColor(), appName, service, 'inf', stackNames.get(service)!.inf),\n        })),\n        DEPLOY_CONCURRENCY,\n      ),\n    );\n    logTimeEnd('infWave');\n  }\n\n  // ---- Phase 3: api + web stacks, all concurrent ----\n  if (needApi || needWeb) {\n    console.log('\\n=== Phase 3: deploy api + web stacks (docker) ===\\n');\n    logTimeStart('apiWebWave');\n    assertNoFailures(\n      'Api/Web deploy',\n      await runTasks(\n        (['api', 'web'] as const)\n          .filter((stackType) => (stackType === 'api' ? needApi : needWeb))\n          .flatMap((stackType) =>\n            services.map((service) => ({\n              label: `${stackType}:${service}`,\n              run: () => dockerDeployStack(nextPrefixColor(), appName, service, stackType, stackNames.get(service)![stackType]),\n            })),\n          ),\n        DEPLOY_CONCURRENCY,\n      ),\n    );\n    logTimeEnd('apiWebWave');\n  }\n\n  // ---- Phase 4: sync the pre-built views to S3, all concurrent ----\n  if (viewServices.length > 0) {\n    console.log('\\n=== Phase 4: sync views to S3 (docker) ===\\n');\n    logTimeStart('viewsWave');\n    assertNoFailures(\n      'Views sync',\n      await runTasks(\n        viewServices.map((service) => ({\n          label: `views:${service}`,\n          run: () => dockerSyncViews(nextPrefixColor(), appName, service),\n        })),\n        DEPLOY_CONCURRENCY,\n      ),\n    );\n    logTimeEnd('viewsWave');\n  }\n\n  logTimeEnd('totalTime');\n};\n"]}

package/lib/esm/platforms/aws/identity.d.ts

@@ -0,0 +1,2 @@
+import { QpqAppDeployEnvironment } from 'quidproquo-deploy-awscdk';
+export declare const awsPrimeDeployIdentity: (target: QpqAppDeployEnvironment | undefined) => string[];

package/lib/esm/platforms/aws/identity.js

@@ -0,0 +1,22 @@
+// AWS deploy identity: service configs and the CDK app read
+// AWS_DEFAULT_ACCOUNT / AWS_DEFAULT_REGION at load time, so they're primed
+// into process.env from the environment's deploy.config.json entry. Already-set
+// env vars win, so CI overrides and older setups keep working.
+//
+// Returns human-readable descriptions of anything still missing — deploys
+// treat that as fatal, local dev commands ignore it.
+export const awsPrimeDeployIdentity = (target) => {
+    if (target?.accountId && !process.env.AWS_DEFAULT_ACCOUNT) {
+        process.env.AWS_DEFAULT_ACCOUNT = target.accountId;
+    }
+    if (target?.region && !process.env.AWS_DEFAULT_REGION) {
+        process.env.AWS_DEFAULT_REGION = target.region;
+    }
+    const missing = [];
+    if (!process.env.AWS_DEFAULT_ACCOUNT)
+        missing.push('"accountId" (or AWS_DEFAULT_ACCOUNT)');
+    if (!process.env.AWS_DEFAULT_REGION)
+        missing.push('"region" (or AWS_DEFAULT_REGION)');
+    return missing;
+};
+//# sourceMappingURL=identity.js.map

package/lib/esm/platforms/aws/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../../../src/platforms/aws/identity.ts"],"names":[],"mappings":"AAEA,4DAA4D;AAC5D,2EAA2E;AAC3E,gFAAgF;AAChF,+DAA+D;AAC/D,EAAE;AACF,0EAA0E;AAC1E,qDAAqD;AACrD,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,MAA2C,EAAY,EAAE;IAC9F,IAAI,MAAM,EAAE,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,MAAM,CAAC,SAAS,CAAC;IACrD,CAAC;IACD,IAAI,MAAM,EAAE,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC;IACjD,CAAC;IAED,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB;QAAE,OAAO,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IAC3F,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB;QAAE,OAAO,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IACtF,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC","sourcesContent":["import { QpqAppDeployEnvironment } from 'quidproquo-deploy-awscdk';\n\n// AWS deploy identity: service configs and the CDK app read\n// AWS_DEFAULT_ACCOUNT / AWS_DEFAULT_REGION at load time, so they're primed\n// into process.env from the environment's deploy.config.json entry. Already-set\n// env vars win, so CI overrides and older setups keep working.\n//\n// Returns human-readable descriptions of anything still missing — deploys\n// treat that as fatal, local dev commands ignore it.\nexport const awsPrimeDeployIdentity = (target: QpqAppDeployEnvironment | undefined): string[] => {\n  if (target?.accountId && !process.env.AWS_DEFAULT_ACCOUNT) {\n    process.env.AWS_DEFAULT_ACCOUNT = target.accountId;\n  }\n  if (target?.region && !process.env.AWS_DEFAULT_REGION) {\n    process.env.AWS_DEFAULT_REGION = target.region;\n  }\n\n  const missing: string[] = [];\n  if (!process.env.AWS_DEFAULT_ACCOUNT) missing.push('\"accountId\" (or AWS_DEFAULT_ACCOUNT)');\n  if (!process.env.AWS_DEFAULT_REGION) missing.push('\"region\" (or AWS_DEFAULT_REGION)');\n  return missing;\n};\n"]}

package/lib/esm/platforms/aws/index.d.ts

@@ -0,0 +1,2 @@
+import { QpqPlatformDriver } from '../types';
+export declare const awsPlatformDriver: QpqPlatformDriver;

package/lib/esm/platforms/aws/index.js

@@ -0,0 +1,16 @@
+import { awsGo } from './go';
+import { awsGoDocker } from './goDocker';
+import { awsPrimeDeployIdentity } from './identity';
+import { awsPublish, awsPublishBuild, awsPublishDeploy, awsPublishUpload } from './publish';
+import { awsTeardown } from './teardown';
+export const awsPlatformDriver = {
+    primeDeployIdentity: awsPrimeDeployIdentity,
+    go: awsGo,
+    goDocker: awsGoDocker,
+    teardown: awsTeardown,
+    publish: awsPublish,
+    publishBuild: awsPublishBuild,
+    publishUpload: awsPublishUpload,
+    publishDeploy: awsPublishDeploy,
+};
+//# sourceMappingURL=index.js.map

package/lib/esm/platforms/aws/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/platforms/aws/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC5F,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,MAAM,CAAC,MAAM,iBAAiB,GAAsB;IAClD,mBAAmB,EAAE,sBAAsB;IAE3C,EAAE,EAAE,KAAK;IACT,QAAQ,EAAE,WAAW;IACrB,QAAQ,EAAE,WAAW;IAErB,OAAO,EAAE,UAAU;IACnB,YAAY,EAAE,eAAe;IAC7B,aAAa,EAAE,gBAAgB;IAC/B,aAAa,EAAE,gBAAgB;CAChC,CAAC","sourcesContent":["import { QpqPlatformDriver } from '../types';\nimport { awsGo } from './go';\nimport { awsGoDocker } from './goDocker';\nimport { awsPrimeDeployIdentity } from './identity';\nimport { awsPublish, awsPublishBuild, awsPublishDeploy, awsPublishUpload } from './publish';\nimport { awsTeardown } from './teardown';\n\nexport const awsPlatformDriver: QpqPlatformDriver = {\n  primeDeployIdentity: awsPrimeDeployIdentity,\n\n  go: awsGo,\n  goDocker: awsGoDocker,\n  teardown: awsTeardown,\n\n  publish: awsPublish,\n  publishBuild: awsPublishBuild,\n  publishUpload: awsPublishUpload,\n  publishDeploy: awsPublishDeploy,\n};\n"]}

package/lib/esm/platforms/aws/publish.d.ts

@@ -0,0 +1,4 @@
+export declare const awsPublishBuild: (appName: string, serviceNames: string[]) => Promise<void>;
+export declare const awsPublishUpload: (appName: string, serviceNames: string[]) => Promise<void>;
+export declare const awsPublishDeploy: (appName: string, serviceNames: string[]) => Promise<void>;
+export declare const awsPublish: (appName: string, serviceNames: string[]) => Promise<void>;

package/lib/esm/platforms/aws/publish.js

@@ -0,0 +1,50 @@
+// AWS federated remote publishing — build each backend service as a
+// module-federation remote and publish it into that service's federated code
+// bucket (see ./remote for the three-phase mechanics).
+import { isAwsCredentialsValid } from './awsCredentials';
+import { buildRemote, deployRemoteManifest, resolvePublishTarget, uploadRemoteVersion } from './remote';
+const requireAwsCredentials = async () => {
+    if (!(await isAwsCredentialsValid())) {
+        console.error('AWS credentials are not valid. Configure them and retry.');
+        process.exit(1);
+    }
+};
+export const awsPublishBuild = async (appName, serviceNames) => {
+    console.log(`Building federated remotes for [${appName}]: ${serviceNames.join(', ')}`);
+    for (const serviceName of serviceNames) {
+        await buildRemote(appName, serviceName);
+    }
+    console.log('Done. Next: qpq publish:upload, then qpq publish:deploy.');
+};
+export const awsPublishUpload = async (appName, serviceNames) => {
+    await requireAwsCredentials();
+    // Resolve every target up front - a missing build fails the whole step
+    // before a single byte is uploaded.
+    const targets = serviceNames.map((serviceName) => resolvePublishTarget(appName, serviceName));
+    console.log(`Uploading federated remotes for [${appName}]: ${serviceNames.join(', ')}`);
+    await Promise.all(targets.map((target) => uploadRemoteVersion(target)));
+    console.log('Done. Run qpq publish:deploy to flip lambdas to the new versions.');
+};
+export const awsPublishDeploy = async (appName, serviceNames) => {
+    await requireAwsCredentials();
+    const targets = serviceNames.map((serviceName) => resolvePublishTarget(appName, serviceName));
+    console.log(`Deploying federated remote manifests for [${appName}]: ${serviceNames.join(', ')}`);
+    await Promise.all(targets.map((target) => deployRemoteManifest(target)));
+    console.log('Done. New lambda cold starts will federate these services from S3.');
+};
+export const awsPublish = async (appName, serviceNames) => {
+    await requireAwsCredentials();
+    console.log(`Publishing federated remotes for [${appName}]: ${serviceNames.join(', ')}`);
+    // 1. Build everything first - any build failure bails before any upload,
+    // so the buckets never end up with a half-published set of services.
+    for (const serviceName of serviceNames) {
+        await buildRemote(appName, serviceName);
+    }
+    const targets = serviceNames.map((serviceName) => resolvePublishTarget(appName, serviceName));
+    // 2. Upload all version dirs in parallel - manifests untouched, nothing live yet.
+    await Promise.all(targets.map((target) => uploadRemoteVersion(target)));
+    // 3. Every version dir is fully uploaded - flip the manifests, in parallel.
+    await Promise.all(targets.map((target) => deployRemoteManifest(target)));
+    console.log('Done. New lambda cold starts will federate these services from S3.');
+};
+//# sourceMappingURL=publish.js.map