quidproquo-cli 0.1.7 → 0.1.9

package/lib/commonjs/lib/typeWatcher.js

@@ -0,0 +1,59 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.startTypeWatcher = void 0;
+// Keeps workspace packages' declaration output (dist/*.d.ts) fresh while
+// `qpq go:dev` runs. The rspack dev builds bundle workspace source directly,
+// so this watcher only feeds the editor and validate-ts, which resolve
+// cross-package types through each package's built declarations.
+//
+// One `tsc -b --watch` over every workspace package that ships types; routine
+// watch chatter is dropped so only real compile errors reach the shared
+// terminal. Opt out with `--no-types`.
+const quidproquo_deploy_rspack_1 = require("quidproquo-deploy-rspack");
+const child_process_1 = require("child_process");
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+// Routine tsc watch status lines; everything else is worth showing.
+const routineTscPatterns = [/Starting compilation in watch mode/, /File change detected/, /Found 0 errors/];
+const isRoutineTscLine = (line) => routineTscPatterns.some((pattern) => pattern.test(line));
+// Forwards non-routine tsc output line by line under a [types] prefix.
+const forwardTscOutput = (chunk) => {
+    for (const line of chunk.toString().split('\n')) {
+        if (line.trim().length === 0 || isRoutineTscLine(line)) {
+            continue;
+        }
+        console.log(`[types] ${line}`);
+    }
+};
+// A workspace package wants declaration watching when it has a tsconfig and
+// publishes types from its build output. Packages bundled by rspack (views,
+// service handlers) don't ship types and are skipped.
+const isTypedWorkspacePackage = (dir) => {
+    if (!fs_1.default.existsSync(path_1.default.join(dir, 'tsconfig.json'))) {
+        return false;
+    }
+    const packageJson = JSON.parse(fs_1.default.readFileSync(path_1.default.join(dir, 'package.json'), 'utf-8'));
+    return !!(packageJson.types || packageJson.typings);
+};
+const startTypeWatcher = (root) => {
+    var _a, _b;
+    const projectDirs = (0, quidproquo_deploy_rspack_1.getWorkspacePackageDirs)(root).filter(isTypedWorkspacePackage);
+    if (projectDirs.length === 0) {
+        return null;
+    }
+    const relativeDirs = projectDirs.map((dir) => path_1.default.relative(root, dir));
+    const child = (0, child_process_1.spawn)('npx', ['tsc', '-b', ...relativeDirs, '--watch', '--preserveWatchOutput', '--pretty'], {
+        cwd: root,
+        stdio: ['ignore', 'pipe', 'pipe'],
+        shell: process.platform === 'win32',
+    });
+    (_a = child.stdout) === null || _a === void 0 ? void 0 : _a.on('data', forwardTscOutput);
+    (_b = child.stderr) === null || _b === void 0 ? void 0 : _b.on('data', forwardTscOutput);
+    console.log(`Type watcher: tsc -b --watch over ${relativeDirs.length} workspace packages (disable with --no-types).`);
+    return child;
+};
+exports.startTypeWatcher = startTypeWatcher;
+//# sourceMappingURL=typeWatcher.js.map

package/lib/commonjs/lib/typeWatcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"typeWatcher.js","sourceRoot":"","sources":["../../../src/lib/typeWatcher.ts"],"names":[],"mappings":";;;;;;AAAA,yEAAyE;AACzE,6EAA6E;AAC7E,uEAAuE;AACvE,iEAAiE;AACjE,EAAE;AACF,8EAA8E;AAC9E,wEAAwE;AACxE,uCAAuC;AACvC,uEAAmE;AAEnE,iDAAoD;AACpD,4CAAoB;AACpB,gDAAwB;AAExB,oEAAoE;AACpE,MAAM,kBAAkB,GAAG,CAAC,oCAAoC,EAAE,sBAAsB,EAAE,gBAAgB,CAAC,CAAC;AAE5G,MAAM,gBAAgB,GAAG,CAAC,IAAY,EAAW,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAE7G,uEAAuE;AACvE,MAAM,gBAAgB,GAAG,CAAC,KAAa,EAAQ,EAAE;IAC/C,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;YACvD,SAAS;QACX,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IACjC,CAAC;AACH,CAAC,CAAC;AAEF,4EAA4E;AAC5E,4EAA4E;AAC5E,sDAAsD;AACtD,MAAM,uBAAuB,GAAG,CAAC,GAAW,EAAW,EAAE;IACvD,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,cAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC,EAAE,CAAC;QACpD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,YAAE,CAAC,YAAY,CAAC,cAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IACzF,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC;AACtD,CAAC,CAAC;AAEK,MAAM,gBAAgB,GAAG,CAAC,IAAY,EAAuB,EAAE;;IACpE,MAAM,WAAW,GAAG,IAAA,kDAAuB,EAAC,IAAI,CAAC,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC;IAClF,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,YAAY,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,cAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,IAAA,qBAAK,EAAC,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,YAAY,EAAE,SAAS,EAAE,uBAAuB,EAAE,UAAU,CAAC,EAAE;QACzG,GAAG,EAAE,IAAI;QACT,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;QACjC,KAAK,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;KACpC,CAAC,CAAC;IAEH,MAAA,KAAK,CAAC,MAAM,0CAAE,EAAE,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC3C,MAAA,KAAK,CAAC,MAAM,0CAAE,EAAE,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAE3C,OAAO,CAAC,GAAG,CAAC,qCAAqC,YAAY,CAAC,MAAM,gDAAgD,CAAC,CAAC;IAEtH,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAnBW,QAAA,gBAAgB,oBAmB3B","sourcesContent":["// Keeps workspace packages' declaration output (dist/*.d.ts) fresh while\n// `qpq go:dev` runs. The rspack dev builds bundle workspace source directly,\n// so this watcher only feeds the editor and validate-ts, which resolve\n// cross-package types through each package's built declarations.\n//\n// One `tsc -b --watch` over every workspace package that ships types; routine\n// watch chatter is dropped so only real compile errors reach the shared\n// terminal. Opt out with `--no-types`.\nimport { getWorkspacePackageDirs } from 'quidproquo-deploy-rspack';\n\nimport { ChildProcess, spawn } from 'child_process';\nimport fs from 'fs';\nimport path from 'path';\n\n// Routine tsc watch status lines; everything else is worth showing.\nconst routineTscPatterns = [/Starting compilation in watch mode/, /File change detected/, /Found 0 errors/];\n\nconst isRoutineTscLine = (line: string): boolean => routineTscPatterns.some((pattern) => pattern.test(line));\n\n// Forwards non-routine tsc output line by line under a [types] prefix.\nconst forwardTscOutput = (chunk: Buffer): void => {\n  for (const line of chunk.toString().split('\\n')) {\n    if (line.trim().length === 0 || isRoutineTscLine(line)) {\n      continue;\n    }\n    console.log(`[types] ${line}`);\n  }\n};\n\n// A workspace package wants declaration watching when it has a tsconfig and\n// publishes types from its build output. Packages bundled by rspack (views,\n// service handlers) don't ship types and are skipped.\nconst isTypedWorkspacePackage = (dir: string): boolean => {\n  if (!fs.existsSync(path.join(dir, 'tsconfig.json'))) {\n    return false;\n  }\n\n  const packageJson = JSON.parse(fs.readFileSync(path.join(dir, 'package.json'), 'utf-8'));\n  return !!(packageJson.types || packageJson.typings);\n};\n\nexport const startTypeWatcher = (root: string): ChildProcess | null => {\n  const projectDirs = getWorkspacePackageDirs(root).filter(isTypedWorkspacePackage);\n  if (projectDirs.length === 0) {\n    return null;\n  }\n\n  const relativeDirs = projectDirs.map((dir) => path.relative(root, dir));\n  const child = spawn('npx', ['tsc', '-b', ...relativeDirs, '--watch', '--preserveWatchOutput', '--pretty'], {\n    cwd: root,\n    stdio: ['ignore', 'pipe', 'pipe'],\n    shell: process.platform === 'win32',\n  });\n\n  child.stdout?.on('data', forwardTscOutput);\n  child.stderr?.on('data', forwardTscOutput);\n\n  console.log(`Type watcher: tsc -b --watch over ${relativeDirs.length} workspace packages (disable with --no-types).`);\n\n  return child;\n};\n"]}

package/lib/commonjs/platforms/aws/cdkApp.js

@@ -9,8 +9,12 @@ const packageRoot_1 = require("../../lib/packageRoot");
 // The CDK app command (`cdk ... --app "<this>"`): quidproquo-deploy-awscdk's
 // generic workspace app under ts-node hooks, with DEPLOY_* in the env.
 const getCdkAppCommand = () => {
+    // Resolve ts-node from this package, not the workspace cwd — under npm link
+    // the CLI's dependencies are never hoisted into the workspace's node_modules,
+    // so a bare `-r ts-node/...` preload fails there.
+    const tsNodeRegister = require.resolve('ts-node/register/transpile-only');
     const cdkAppScript = path_1.default.join((0, packageRoot_1.getOwnPackageRoot)(), 'lib', 'commonjs', 'bin', 'qpqCdkApp.js');
-    return `node -r ts-node/register/transpile-only "${cdkAppScript}"`;
+    return `node -r "${tsNodeRegister}" "${cdkAppScript}"`;
 };
 exports.getCdkAppCommand = getCdkAppCommand;
 // The docker build context for the go:docker deployer image.

package/lib/commonjs/platforms/aws/cdkApp.js.map

@@ -1 +1 @@
-{"version":3,"file":"cdkApp.js","sourceRoot":"","sources":["../../../../src/platforms/aws/cdkApp.ts"],"names":[],"mappings":";;;;;;AAAA,gDAAwB;AAExB,uDAA0D;AAE1D,6EAA6E;AAC7E,uEAAuE;AAChE,MAAM,gBAAgB,GAAG,GAAW,EAAE;IAC3C,MAAM,YAAY,GAAG,cAAI,CAAC,IAAI,CAAC,IAAA,+BAAiB,GAAE,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;IAC9F,OAAO,4CAA4C,YAAY,GAAG,CAAC;AACrE,CAAC,CAAC;AAHW,QAAA,gBAAgB,oBAG3B;AAEF,6DAA6D;AACtD,MAAM,YAAY,GAAG,GAAW,EAAE,CAAC,cAAI,CAAC,IAAI,CAAC,IAAA,+BAAiB,GAAE,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;AAAtF,QAAA,YAAY,gBAA0E","sourcesContent":["import path from 'path';\n\nimport { getOwnPackageRoot } from '../../lib/packageRoot';\n\n// The CDK app command (`cdk ... --app \"<this>\"`): quidproquo-deploy-awscdk's\n// generic workspace app under ts-node hooks, with DEPLOY_* in the env.\nexport const getCdkAppCommand = (): string => {\n  const cdkAppScript = path.join(getOwnPackageRoot(), 'lib', 'commonjs', 'bin', 'qpqCdkApp.js');\n  return `node -r ts-node/register/transpile-only \"${cdkAppScript}\"`;\n};\n\n// The docker build context for the go:docker deployer image.\nexport const getDockerDir = (): string => path.join(getOwnPackageRoot(), 'docker', 'cdk-deployer');\n"]}
+{"version":3,"file":"cdkApp.js","sourceRoot":"","sources":["../../../../src/platforms/aws/cdkApp.ts"],"names":[],"mappings":";;;;;;AAAA,gDAAwB;AAExB,uDAA0D;AAE1D,6EAA6E;AAC7E,uEAAuE;AAChE,MAAM,gBAAgB,GAAG,GAAW,EAAE;IAC3C,4EAA4E;IAC5E,8EAA8E;IAC9E,kDAAkD;IAClD,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC;IAC1E,MAAM,YAAY,GAAG,cAAI,CAAC,IAAI,CAAC,IAAA,+BAAiB,GAAE,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;IAC9F,OAAO,YAAY,cAAc,MAAM,YAAY,GAAG,CAAC;AACzD,CAAC,CAAC;AAPW,QAAA,gBAAgB,oBAO3B;AAEF,6DAA6D;AACtD,MAAM,YAAY,GAAG,GAAW,EAAE,CAAC,cAAI,CAAC,IAAI,CAAC,IAAA,+BAAiB,GAAE,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;AAAtF,QAAA,YAAY,gBAA0E","sourcesContent":["import path from 'path';\n\nimport { getOwnPackageRoot } from '../../lib/packageRoot';\n\n// The CDK app command (`cdk ... --app \"<this>\"`): quidproquo-deploy-awscdk's\n// generic workspace app under ts-node hooks, with DEPLOY_* in the env.\nexport const getCdkAppCommand = (): string => {\n  // Resolve ts-node from this package, not the workspace cwd — under npm link\n  // the CLI's dependencies are never hoisted into the workspace's node_modules,\n  // so a bare `-r ts-node/...` preload fails there.\n  const tsNodeRegister = require.resolve('ts-node/register/transpile-only');\n  const cdkAppScript = path.join(getOwnPackageRoot(), 'lib', 'commonjs', 'bin', 'qpqCdkApp.js');\n  return `node -r \"${tsNodeRegister}\" \"${cdkAppScript}\"`;\n};\n\n// The docker build context for the go:docker deployer image.\nexport const getDockerDir = (): string => path.join(getOwnPackageRoot(), 'docker', 'cdk-deployer');\n"]}

package/lib/commonjs/platforms/aws/clearResources.d.ts

@@ -0,0 +1,2 @@
+import { ClearResourcesPlan } from '../../lib/clearResourcesPlan';
+export declare const awsClearResources: (appName: string, plan: ClearResourcesPlan) => Promise<void>;

package/lib/commonjs/platforms/aws/clearResources.js

@@ -0,0 +1,167 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.awsClearResources = void 0;
+// AWS implementation of `qpq clear-resources`: empty (never delete) the
+// selected data resources. Storage drives are S3 buckets - emptied including
+// every object version and delete marker, so versioned buckets come out clean
+// too. Key value stores are DynamoDB tables - truncated by scanning keys only
+// and batch-deleting. The stacks and the resources themselves are untouched,
+// so this is the "reset my data" counterpart to `qpq teardown`.
+//
+// Runtime names are resolved from each service's live qpq config with the
+// same naming utils the deployed runtime uses, so what gets emptied is
+// exactly what the app reads and writes.
+const quidproquo_actionprocessor_awslambda_1 = require("quidproquo-actionprocessor-awslambda");
+const quidproquo_config_aws_1 = require("quidproquo-config-aws");
+const quidproquo_core_1 = require("quidproquo-core");
+const client_dynamodb_1 = require("@aws-sdk/client-dynamodb");
+const client_s3_1 = require("@aws-sdk/client-s3");
+const qpqConfigs_1 = require("../../lib/qpqConfigs");
+const awsCredentials_1 = require("./awsCredentials");
+// Same resolution as the runtime's resolveStorageDriveBucketName (not exported
+// from the actionprocessor package root): honour the cross-module owner and
+// its resourceNameOverride.
+const resolveBucketName = (drive, qpqConfig) => {
+    var _a, _b;
+    const storageDriveConfig = quidproquo_core_1.qpqCoreUtils.getStorageDriveByName(drive, qpqConfig);
+    if (!storageDriveConfig) {
+        throw new Error(`Could not find storage drive config for [${drive}]`);
+    }
+    return quidproquo_actionprocessor_awslambda_1.awsNamingUtils.getConfigRuntimeResourceNameFromConfigWithServiceOverride(((_a = storageDriveConfig.owner) === null || _a === void 0 ? void 0 : _a.resourceNameOverride) || drive, qpqConfig, (_b = storageDriveConfig.owner) === null || _b === void 0 ? void 0 : _b.module);
+};
+// Log a progress heartbeat roughly every this-many removals, so a large
+// resource visibly ticks along instead of looking hung.
+const PROGRESS_EVERY = 2000;
+// Empty a bucket including all versions + delete markers. Returns the number
+// of objects/versions removed.
+const emptyBucket = (bucketName, region) => __awaiter(void 0, void 0, void 0, function* () {
+    var _a, _b;
+    const s3 = new client_s3_1.S3Client({ region });
+    let removed = 0;
+    let lastReported = 0;
+    let keyMarker;
+    let versionIdMarker;
+    do {
+        const page = yield s3.send(new client_s3_1.ListObjectVersionsCommand({ Bucket: bucketName, KeyMarker: keyMarker, VersionIdMarker: versionIdMarker }));
+        const objects = [...((_a = page.Versions) !== null && _a !== void 0 ? _a : []), ...((_b = page.DeleteMarkers) !== null && _b !== void 0 ? _b : [])].map((v) => ({
+            Key: v.Key,
+            VersionId: v.VersionId,
+        }));
+        if (objects.length > 0) {
+            yield s3.send(new client_s3_1.DeleteObjectsCommand({ Bucket: bucketName, Delete: { Objects: objects, Quiet: true } }));
+            removed += objects.length;
+        }
+        if (removed - lastReported >= PROGRESS_EVERY) {
+            console.log(`    ... ${removed} objects/versions so far`);
+            lastReported = removed;
+        }
+        keyMarker = page.IsTruncated ? page.NextKeyMarker : undefined;
+        versionIdMarker = page.IsTruncated ? page.NextVersionIdMarker : undefined;
+    } while (keyMarker || versionIdMarker);
+    return removed;
+});
+// Truncate a table: scan key attributes only, batch-delete 25 at a time,
+// retrying unprocessed items. Returns the number of items removed.
+const truncateTable = (tableName, region) => __awaiter(void 0, void 0, void 0, function* () {
+    var _a, _b, _c, _d, _e;
+    const dynamo = new client_dynamodb_1.DynamoDBClient({ region });
+    const described = yield dynamo.send(new client_dynamodb_1.DescribeTableCommand({ TableName: tableName }));
+    const keyAttributes = ((_b = (_a = described.Table) === null || _a === void 0 ? void 0 : _a.KeySchema) !== null && _b !== void 0 ? _b : []).map((k) => k.AttributeName);
+    // Alias every key attribute - a raw name could collide with a reserved word.
+    const projection = keyAttributes.map((_, i) => `#k${i}`).join(', ');
+    const attributeNames = Object.fromEntries(keyAttributes.map((attribute, i) => [`#k${i}`, attribute]));
+    let removed = 0;
+    let lastReported = 0;
+    let exclusiveStartKey;
+    do {
+        const page = yield dynamo.send(new client_dynamodb_1.ScanCommand({
+            TableName: tableName,
+            ProjectionExpression: projection,
+            ExpressionAttributeNames: attributeNames,
+            ExclusiveStartKey: exclusiveStartKey,
+        }));
+        const items = (_c = page.Items) !== null && _c !== void 0 ? _c : [];
+        for (let i = 0; i < items.length; i += 25) {
+            let requests = items.slice(i, i + 25).map((item) => ({ DeleteRequest: { Key: item } }));
+            while (requests.length > 0) {
+                const result = yield dynamo.send(new client_dynamodb_1.BatchWriteItemCommand({ RequestItems: { [tableName]: requests } }));
+                removed += requests.length;
+                const unprocessed = (_e = (_d = result.UnprocessedItems) === null || _d === void 0 ? void 0 : _d[tableName]) !== null && _e !== void 0 ? _e : [];
+                removed -= unprocessed.length;
+                requests = unprocessed;
+                if (requests.length > 0) {
+                    // Throttled - back off briefly before retrying the leftovers.
+                    yield new Promise((resolve) => setTimeout(resolve, 250));
+                }
+            }
+        }
+        if (removed - lastReported >= PROGRESS_EVERY) {
+            console.log(`    ... ${removed} items so far`);
+            lastReported = removed;
+        }
+        exclusiveStartKey = page.LastEvaluatedKey;
+    } while (exclusiveStartKey);
+    return removed;
+});
+const clearResource = (appName, resource) => __awaiter(void 0, void 0, void 0, function* () {
+    const qpqConfig = (0, qpqConfigs_1.loadServiceQpqConfig)(appName, resource.service);
+    const region = quidproquo_config_aws_1.qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);
+    if (resource.kind === 'storageDrive') {
+        const bucketName = resolveBucketName(resource.resourceName, qpqConfig);
+        console.log(`  emptying s3://${bucketName} ...`);
+        try {
+            const removed = yield emptyBucket(bucketName, region);
+            console.log(`  emptied s3://${bucketName} (${removed} objects/versions)`);
+        }
+        catch (error) {
+            if (error instanceof client_s3_1.NoSuchBucket) {
+                console.log(`  skipped s3://${bucketName} (bucket does not exist - not deployed?)`);
+                return;
+            }
+            throw error;
+        }
+        return;
+    }
+    // 'kvs' matches the resourceType every runtime KVS action processor passes,
+    // giving the deployed '-qpqkvs' table name suffix.
+    const tableName = quidproquo_actionprocessor_awslambda_1.awsNamingUtils.getKvsDynamoTableNameFromConfig(resource.resourceName, qpqConfig, 'kvs');
+    console.log(`  truncating ${tableName} ...`);
+    try {
+        const removed = yield truncateTable(tableName, region);
+        console.log(`  truncated ${tableName} (${removed} items)`);
+    }
+    catch (error) {
+        if (error instanceof client_dynamodb_1.ResourceNotFoundException) {
+            console.log(`  skipped ${tableName} (table does not exist - not deployed?)`);
+            return;
+        }
+        throw error;
+    }
+});
+const awsClearResources = (appName, plan) => __awaiter(void 0, void 0, void 0, function* () {
+    if (plan.kind === 'cancelled') {
+        return;
+    }
+    if ((yield (0, awsCredentials_1.isAwsCredentialsValid)()) === false) {
+        console.log('Credentials are expired or invalid.');
+        return;
+    }
+    console.log('\nEmptying resources:');
+    // Sequential on purpose: predictable output, and no burst of parallel scans
+    // against provisioned-throughput tables.
+    for (const resource of plan.resources) {
+        yield clearResource(appName, resource);
+    }
+    console.log('Done.');
+});
+exports.awsClearResources = awsClearResources;
+//# sourceMappingURL=clearResources.js.map

package/lib/commonjs/platforms/aws/clearResources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clearResources.js","sourceRoot":"","sources":["../../../../src/platforms/aws/clearResources.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wEAAwE;AACxE,6EAA6E;AAC7E,8EAA8E;AAC9E,8EAA8E;AAC9E,6EAA6E;AAC7E,gEAAgE;AAChE,EAAE;AACF,0EAA0E;AAC1E,uEAAuE;AACvE,yCAAyC;AACzC,+FAAsE;AACtE,iEAA0D;AAC1D,qDAA0D;AAE1D,8DAOkC;AAClC,kDAA+H;AAG/H,qDAA4D;AAC5D,qDAAyD;AAEzD,+EAA+E;AAC/E,4EAA4E;AAC5E,4BAA4B;AAC5B,MAAM,iBAAiB,GAAG,CAAC,KAAa,EAAE,SAAoB,EAAU,EAAE;;IACxE,MAAM,kBAAkB,GAAG,8BAAY,CAAC,qBAAqB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAEhF,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,4CAA4C,KAAK,GAAG,CAAC,CAAC;IACxE,CAAC;IAED,OAAO,qDAAc,CAAC,yDAAyD,CAC7E,CAAA,MAAA,kBAAkB,CAAC,KAAK,0CAAE,oBAAoB,KAAI,KAAK,EACvD,SAAS,EACT,MAAA,kBAAkB,CAAC,KAAK,0CAAE,MAAM,CACjC,CAAC;AACJ,CAAC,CAAC;AAEF,wEAAwE;AACxE,wDAAwD;AACxD,MAAM,cAAc,GAAG,IAAI,CAAC;AAE5B,6EAA6E;AAC7E,+BAA+B;AAC/B,MAAM,WAAW,GAAG,CAAO,UAAkB,EAAE,MAAc,EAAmB,EAAE;;IAChF,MAAM,EAAE,GAAG,IAAI,oBAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IACpC,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,SAA6B,CAAC;IAClC,IAAI,eAAmC,CAAC;IAExC,GAAG,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,qCAAyB,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,eAAe,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC;QAE1I,MAAM,OAAO,GAAuB,CAAC,GAAG,CAAC,MAAA,IAAI,CAAC,QAAQ,mCAAI,EAAE,CAAC,EAAE,GAAG,CAAC,MAAA,IAAI,CAAC,aAAa,mCAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACxG,GAAG,EAAE,CAAC,CAAC,GAAI;YACX,SAAS,EAAE,CAAC,CAAC,SAAS;SACvB,CAAC,CAAC,CAAC;QAEJ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,gCAAoB,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;YAC3G,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC;QAC5B,CAAC;QAED,IAAI,OAAO,GAAG,YAAY,IAAI,cAAc,EAAE,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,WAAW,OAAO,0BAA0B,CAAC,CAAC;YAC1D,YAAY,GAAG,OAAO,CAAC;QACzB,CAAC;QAED,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9D,eAAe,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,CAAC,QAAQ,SAAS,IAAI,eAAe,EAAE;IAEvC,OAAO,OAAO,CAAC;AACjB,CAAC,CAAA,CAAC;AAEF,yEAAyE;AACzE,mEAAmE;AACnE,MAAM,aAAa,GAAG,CAAO,SAAiB,EAAE,MAAc,EAAmB,EAAE;;IACjF,MAAM,MAAM,GAAG,IAAI,gCAAc,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IAE9C,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,sCAAoB,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IACxF,MAAM,aAAa,GAAG,CAAC,MAAA,MAAA,SAAS,CAAC,KAAK,0CAAE,SAAS,mCAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAc,CAAC,CAAC;IAEtF,6EAA6E;IAC7E,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpE,MAAM,cAAc,GAAG,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IAEtG,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,iBAAkD,CAAC;IAEvD,GAAG,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAC5B,IAAI,6BAAW,CAAC;YACd,SAAS,EAAE,SAAS;YACpB,oBAAoB,EAAE,UAAU;YAChC,wBAAwB,EAAE,cAAc;YACxC,iBAAiB,EAAE,iBAAiB;SACrC,CAAC,CACH,CAAC;QAEF,MAAM,KAAK,GAAG,MAAA,IAAI,CAAC,KAAK,mCAAI,EAAE,CAAC;QAE/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;YAC1C,IAAI,QAAQ,GAAmB,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,aAAa,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;YAExG,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,uCAAqB,CAAC,EAAE,YAAY,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;gBACzG,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC;gBAE3B,MAAM,WAAW,GAAG,MAAA,MAAA,MAAM,CAAC,gBAAgB,0CAAG,SAAS,CAAC,mCAAI,EAAE,CAAC;gBAC/D,OAAO,IAAI,WAAW,CAAC,MAAM,CAAC;gBAC9B,QAAQ,GAAG,WAAW,CAAC;gBAEvB,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACxB,8DAA8D;oBAC9D,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;gBAC3D,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,OAAO,GAAG,YAAY,IAAI,cAAc,EAAE,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,WAAW,OAAO,eAAe,CAAC,CAAC;YAC/C,YAAY,GAAG,OAAO,CAAC;QACzB,CAAC;QAED,iBAAiB,GAAG,IAAI,CAAC,gBAAgB,CAAC;IAC5C,CAAC,QAAQ,iBAAiB,EAAE;IAE5B,OAAO,OAAO,CAAC;AACjB,CAAC,CAAA,CAAC;AAEF,MAAM,aAAa,GAAG,CAAO,OAAe,EAAE,QAA2B,EAAiB,EAAE;IAC1F,MAAM,SAAS,GAAG,IAAA,iCAAoB,EAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,yCAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;IAE7E,IAAI,QAAQ,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QACrC,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QACvE,OAAO,CAAC,GAAG,CAAC,mBAAmB,UAAU,MAAM,CAAC,CAAC;QACjD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACtD,OAAO,CAAC,GAAG,CAAC,kBAAkB,UAAU,KAAK,OAAO,oBAAoB,CAAC,CAAC;QAC5E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,wBAAY,EAAE,CAAC;gBAClC,OAAO,CAAC,GAAG,CAAC,kBAAkB,UAAU,0CAA0C,CAAC,CAAC;gBACpF,OAAO;YACT,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,OAAO;IACT,CAAC;IAED,4EAA4E;IAC5E,mDAAmD;IACnD,MAAM,SAAS,GAAG,qDAAc,CAAC,+BAA+B,CAAC,QAAQ,CAAC,YAAY,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IAC1G,OAAO,CAAC,GAAG,CAAC,gBAAgB,SAAS,MAAM,CAAC,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,eAAe,SAAS,KAAK,OAAO,SAAS,CAAC,CAAC;IAC7D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,2CAAyB,EAAE,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,aAAa,SAAS,yCAAyC,CAAC,CAAC;YAC7E,OAAO;QACT,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC,CAAA,CAAC;AAEK,MAAM,iBAAiB,GAAG,CAAO,OAAe,EAAE,IAAwB,EAAiB,EAAE;IAClG,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC9B,OAAO;IACT,CAAC;IAED,IAAI,CAAC,MAAM,IAAA,sCAAqB,GAAE,CAAC,KAAK,KAAK,EAAE,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;QACnD,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IAErC,4EAA4E;IAC5E,yCAAyC;IACzC,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,MAAM,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACzC,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACvB,CAAC,CAAA,CAAC;AAnBW,QAAA,iBAAiB,qBAmB5B","sourcesContent":["// AWS implementation of `qpq clear-resources`: empty (never delete) the\n// selected data resources. Storage drives are S3 buckets - emptied including\n// every object version and delete marker, so versioned buckets come out clean\n// too. Key value stores are DynamoDB tables - truncated by scanning keys only\n// and batch-deleting. The stacks and the resources themselves are untouched,\n// so this is the \"reset my data\" counterpart to `qpq teardown`.\n//\n// Runtime names are resolved from each service's live qpq config with the\n// same naming utils the deployed runtime uses, so what gets emptied is\n// exactly what the app reads and writes.\nimport { awsNamingUtils } from 'quidproquo-actionprocessor-awslambda';\nimport { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport { QPQConfig, qpqCoreUtils } from 'quidproquo-core';\n\nimport {\n  BatchWriteItemCommand,\n  DescribeTableCommand,\n  DynamoDBClient,\n  ResourceNotFoundException,\n  ScanCommand,\n  WriteRequest,\n} from '@aws-sdk/client-dynamodb';\nimport { DeleteObjectsCommand, ListObjectVersionsCommand, NoSuchBucket, ObjectIdentifier, S3Client } from '@aws-sdk/client-s3';\n\nimport { ClearableResource, ClearResourcesPlan } from '../../lib/clearResourcesPlan';\nimport { loadServiceQpqConfig } from '../../lib/qpqConfigs';\nimport { isAwsCredentialsValid } from './awsCredentials';\n\n// Same resolution as the runtime's resolveStorageDriveBucketName (not exported\n// from the actionprocessor package root): honour the cross-module owner and\n// its resourceNameOverride.\nconst resolveBucketName = (drive: string, qpqConfig: QPQConfig): string => {\n  const storageDriveConfig = qpqCoreUtils.getStorageDriveByName(drive, qpqConfig);\n\n  if (!storageDriveConfig) {\n    throw new Error(`Could not find storage drive config for [${drive}]`);\n  }\n\n  return awsNamingUtils.getConfigRuntimeResourceNameFromConfigWithServiceOverride(\n    storageDriveConfig.owner?.resourceNameOverride || drive,\n    qpqConfig,\n    storageDriveConfig.owner?.module,\n  );\n};\n\n// Log a progress heartbeat roughly every this-many removals, so a large\n// resource visibly ticks along instead of looking hung.\nconst PROGRESS_EVERY = 2000;\n\n// Empty a bucket including all versions + delete markers. Returns the number\n// of objects/versions removed.\nconst emptyBucket = async (bucketName: string, region: string): Promise<number> => {\n  const s3 = new S3Client({ region });\n  let removed = 0;\n  let lastReported = 0;\n  let keyMarker: string | undefined;\n  let versionIdMarker: string | undefined;\n\n  do {\n    const page = await s3.send(new ListObjectVersionsCommand({ Bucket: bucketName, KeyMarker: keyMarker, VersionIdMarker: versionIdMarker }));\n\n    const objects: ObjectIdentifier[] = [...(page.Versions ?? []), ...(page.DeleteMarkers ?? [])].map((v) => ({\n      Key: v.Key!,\n      VersionId: v.VersionId,\n    }));\n\n    if (objects.length > 0) {\n      await s3.send(new DeleteObjectsCommand({ Bucket: bucketName, Delete: { Objects: objects, Quiet: true } }));\n      removed += objects.length;\n    }\n\n    if (removed - lastReported >= PROGRESS_EVERY) {\n      console.log(`    ... ${removed} objects/versions so far`);\n      lastReported = removed;\n    }\n\n    keyMarker = page.IsTruncated ? page.NextKeyMarker : undefined;\n    versionIdMarker = page.IsTruncated ? page.NextVersionIdMarker : undefined;\n  } while (keyMarker || versionIdMarker);\n\n  return removed;\n};\n\n// Truncate a table: scan key attributes only, batch-delete 25 at a time,\n// retrying unprocessed items. Returns the number of items removed.\nconst truncateTable = async (tableName: string, region: string): Promise<number> => {\n  const dynamo = new DynamoDBClient({ region });\n\n  const described = await dynamo.send(new DescribeTableCommand({ TableName: tableName }));\n  const keyAttributes = (described.Table?.KeySchema ?? []).map((k) => k.AttributeName!);\n\n  // Alias every key attribute - a raw name could collide with a reserved word.\n  const projection = keyAttributes.map((_, i) => `#k${i}`).join(', ');\n  const attributeNames = Object.fromEntries(keyAttributes.map((attribute, i) => [`#k${i}`, attribute]));\n\n  let removed = 0;\n  let lastReported = 0;\n  let exclusiveStartKey: Record<string, any> | undefined;\n\n  do {\n    const page = await dynamo.send(\n      new ScanCommand({\n        TableName: tableName,\n        ProjectionExpression: projection,\n        ExpressionAttributeNames: attributeNames,\n        ExclusiveStartKey: exclusiveStartKey,\n      }),\n    );\n\n    const items = page.Items ?? [];\n\n    for (let i = 0; i < items.length; i += 25) {\n      let requests: WriteRequest[] = items.slice(i, i + 25).map((item) => ({ DeleteRequest: { Key: item } }));\n\n      while (requests.length > 0) {\n        const result = await dynamo.send(new BatchWriteItemCommand({ RequestItems: { [tableName]: requests } }));\n        removed += requests.length;\n\n        const unprocessed = result.UnprocessedItems?.[tableName] ?? [];\n        removed -= unprocessed.length;\n        requests = unprocessed;\n\n        if (requests.length > 0) {\n          // Throttled - back off briefly before retrying the leftovers.\n          await new Promise((resolve) => setTimeout(resolve, 250));\n        }\n      }\n    }\n\n    if (removed - lastReported >= PROGRESS_EVERY) {\n      console.log(`    ... ${removed} items so far`);\n      lastReported = removed;\n    }\n\n    exclusiveStartKey = page.LastEvaluatedKey;\n  } while (exclusiveStartKey);\n\n  return removed;\n};\n\nconst clearResource = async (appName: string, resource: ClearableResource): Promise<void> => {\n  const qpqConfig = loadServiceQpqConfig(appName, resource.service);\n  const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n  if (resource.kind === 'storageDrive') {\n    const bucketName = resolveBucketName(resource.resourceName, qpqConfig);\n    console.log(`  emptying s3://${bucketName} ...`);\n    try {\n      const removed = await emptyBucket(bucketName, region);\n      console.log(`  emptied s3://${bucketName} (${removed} objects/versions)`);\n    } catch (error) {\n      if (error instanceof NoSuchBucket) {\n        console.log(`  skipped s3://${bucketName} (bucket does not exist - not deployed?)`);\n        return;\n      }\n      throw error;\n    }\n    return;\n  }\n\n  // 'kvs' matches the resourceType every runtime KVS action processor passes,\n  // giving the deployed '-qpqkvs' table name suffix.\n  const tableName = awsNamingUtils.getKvsDynamoTableNameFromConfig(resource.resourceName, qpqConfig, 'kvs');\n  console.log(`  truncating ${tableName} ...`);\n  try {\n    const removed = await truncateTable(tableName, region);\n    console.log(`  truncated ${tableName} (${removed} items)`);\n  } catch (error) {\n    if (error instanceof ResourceNotFoundException) {\n      console.log(`  skipped ${tableName} (table does not exist - not deployed?)`);\n      return;\n    }\n    throw error;\n  }\n};\n\nexport const awsClearResources = async (appName: string, plan: ClearResourcesPlan): Promise<void> => {\n  if (plan.kind === 'cancelled') {\n    return;\n  }\n\n  if ((await isAwsCredentialsValid()) === false) {\n    console.log('Credentials are expired or invalid.');\n    return;\n  }\n\n  console.log('\\nEmptying resources:');\n\n  // Sequential on purpose: predictable output, and no burst of parallel scans\n  // against provisioned-throughput tables.\n  for (const resource of plan.resources) {\n    await clearResource(appName, resource);\n  }\n\n  console.log('Done.');\n};\n"]}

package/lib/commonjs/platforms/aws/go.js

@@ -16,7 +16,10 @@ exports.awsGo = void 0;
 // AWS sequential deploy (`qpq go`). Per service it: synths the QPQ config,
 // rspack-bundles the backend (programmatic — no per-service rspack.config.ts),
 // deploys the inf/api/web CDK stacks (cdk runs the generic workspace app via
-// --app), bundles views (rspack, production) and syncs them to S3.
+// --app), bundles views (rspack, production) and syncs them to S3. Finally, any
+// service that opts into module federation has its federated remote published
+// (built + uploaded + manifest flipped), so a deploy that ships new backend
+// code also republishes the code the lambdas federate.
 const quidproquo_deploy_awscdk_1 = require("quidproquo-deploy-awscdk");
 const quidproquo_deploy_rspack_1 = require("quidproquo-deploy-rspack");
 const path_1 = __importDefault(require("path"));
@@ -29,6 +32,7 @@ const runCommand_1 = require("../../lib/runCommand");
 const timing_1 = require("../../lib/timing");
 const views_1 = require("../../lib/views");
 const awsCredentials_1 = require("./awsCredentials");
+const publish_1 = require("./publish");
 const stacks_1 = require("./stacks");
 const viewsSync_1 = require("./viewsSync");
 const buildAndDeploy = (serviceName, needsSynth, needsBuildApi, needsInfStack, needsApiStack, needsWebStack, needsViewStack, appName) => __awaiter(void 0, void 0, void 0, function* () {
@@ -110,6 +114,16 @@ const awsGo = (appName, plan) => __awaiter(void 0, void 0, void 0, function* ()
             return buildAndDeploy(service, phase === 0, phase === 1 && shouldBuildApi, phase === 2 && (allStacks || stacks === 'inf'), phase === 3 && (allStacks || stacks === 'api'), phase === 4 && (allStacks || stacks === 'web'), phase === 5 && (allStacks || stacks === 'views'), appName);
         }), Promise.resolve());
     }
+    // Publishing federated remotes only matters once the new backend code is
+    // live, so it's gated on the api stack having been (re)deployed. Services
+    // without defineFederatedModuleStore(...) are skipped.
+    if (allStacks || stacks === 'api') {
+        const federatedServices = (0, qpqConfigs_1.getServiceNamesWithFederation)(appName, services);
+        if (federatedServices.length > 0) {
+            console.log('\n\nPublishing federated backends\n');
+            yield (0, publish_1.awsPublish)(appName, federatedServices);
+        }
+    }
     (0, timing_1.logTimeEnd)('totalTime');
 });
 exports.awsGo = awsGo;

package/lib/commonjs/platforms/aws/go.js.map

@@ -1 +1 @@
-{"version":3,"file":"go.js","sourceRoot":"","sources":["../../../../src/platforms/aws/go.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2EAA2E;AAC3E,+EAA+E;AAC/E,6EAA6E;AAC7E,mEAAmE;AACnE,uEAAgE;AAChE,uEAAkE;AAElE,gDAAwB;AAExB,gDAAoD;AAEpD,mDAAoF;AACpF,2CAA6C;AAC7C,qDAA4D;AAC5D,mDAAgD;AAChD,qDAAkD;AAClD,6CAA4D;AAC5D,2CAA8C;AAC9C,qDAAyD;AACzD,qCAA2G;AAC3G,2CAA4C;AAE5C,MAAM,cAAc,GAAG,CACrB,WAAmB,EACnB,UAAmB,EACnB,aAAsB,EACtB,aAAsB,EACtB,aAAsB,EACtB,aAAsB,EACtB,cAAuB,EACvB,OAAe,EACA,EAAE;IACjB,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QACjC,MAAM,IAAA,oBAAY,EAAC,CAAC,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,mBAAmB,GAAG,IAAA,iCAAoB,EAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAEvE,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC;QAC3C,MAAM,IAAA,qBAAS,EAAC,IAAA,iDAAsB,EAAC,mBAAmB,EAAE,cAAI,CAAC,IAAI,CAAC,IAAA,+BAAmB,EAAC,OAAO,EAAE,WAAW,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IAChI,CAAC;IAED,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QACzC,MAAM,IAAA,2BAAkB,EAAC,WAAW,EAAE,+CAAoB,CAAC,eAAe,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC,CAAC;IAC5G,CAAC;IAED,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QACzC,MAAM,IAAA,2BAAkB,EAAC,WAAW,EAAE,+CAAoB,CAAC,eAAe,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC,CAAC;IAC5G,CAAC;IAED,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QACzC,MAAM,IAAA,2BAAkB,EAAC,WAAW,EAAE,+CAAoB,CAAC,eAAe,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC,CAAC;IAC5G,CAAC;IAED,IAAI,cAAc,IAAI,IAAA,oCAAwB,EAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9E,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,WAAW,CAAC,CAAC;QAC7C,MAAM,IAAA,mBAAW,EAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACxC,MAAM,IAAA,yBAAa,EAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC,CAAA,CAAC;AAEK,MAAM,KAAK,GAAG,CAAO,OAAe,EAAE,IAAgB,EAAiB,EAAE;IAC9E,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC9B,OAAO;IACT,CAAC;IAED,IAAA,qBAAY,EAAC,WAAW,CAAC,CAAC;IAE1B,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAA,2BAAkB,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvC,IAAA,mBAAU,EAAC,WAAW,CAAC,CAAC;QACxB,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC9B,0EAA0E;QAC1E,0EAA0E;QAC1E,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;QACzD,CAAC;aAAM,CAAC;YACN,MAAM,IAAA,2BAAkB,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,MAAM,IAAA,0BAAiB,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,IAAA,6BAAoB,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzC,IAAA,mBAAU,EAAC,WAAW,CAAC,CAAC;QACxB,OAAO;IACT,CAAC;IAED,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAClC,MAAM,cAAc,GAAG,MAAM,KAAK,OAAO,CAAC;IAE1C,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACtC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAEjC,IAAI,CAAC,MAAM,IAAA,sCAAqB,GAAE,CAAC,KAAK,KAAK,EAAE,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;QACnD,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,KAAK,KAAK,CAAC;IAEnC,MAAM,IAAA,kBAAU,EAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAEvC,4EAA4E;IAC5E,oEAAoE;IACpE,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IAC3C,MAAM,IAAA,uBAAU,EAAC,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC;IAE1E,sEAAsE;IACtE,IAAI,SAAS,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACpC,MAAM,IAAA,oBAAY,EAAC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAO,GAAG,EAAE,OAAO,EAAE,EAAE;YAC3C,MAAM,GAAG,CAAC;YACV,OAAO,cAAc,CACnB,OAAO,EACP,KAAK,KAAK,CAAC,EACX,KAAK,KAAK,CAAC,IAAI,cAAc,EAC7B,KAAK,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,KAAK,KAAK,CAAC,EAC9C,KAAK,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,KAAK,KAAK,CAAC,EAC9C,KAAK,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,KAAK,KAAK,CAAC,EAC9C,KAAK,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,KAAK,OAAO,CAAC,EAChD,OAAO,CACR,CAAC;QACJ,CAAC,CAAA,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IACxB,CAAC;IAED,IAAA,mBAAU,EAAC,WAAW,CAAC,CAAC;AAC1B,CAAC,CAAA,CAAC;AAxEW,QAAA,KAAK,SAwEhB","sourcesContent":["// AWS sequential deploy (`qpq go`). Per service it: synths the QPQ config,\n// rspack-bundles the backend (programmatic — no per-service rspack.config.ts),\n// deploys the inf/api/web CDK stacks (cdk runs the generic workspace app via\n// --app), bundles views (rspack, production) and syncs them to S3.\nimport { qpqDeployAwsCdkUtils } from 'quidproquo-deploy-awscdk';\nimport { getServiceRspackConfig } from 'quidproquo-deploy-rspack';\n\nimport path from 'path';\n\nimport { synthCommand } from '../../commands/synth';\nimport { DeployPlan } from '../../lib/deployPrompts';\nimport { getServiceDirectory, getServiceNamesWithViews } from '../../lib/discovery';\nimport { runAppHook } from '../../lib/hooks';\nimport { loadServiceQpqConfig } from '../../lib/qpqConfigs';\nimport { runRspack } from '../../lib/rspackRun';\nimport { runCommand } from '../../lib/runCommand';\nimport { logTimeEnd, logTimeStart } from '../../lib/timing';\nimport { bundleViews } from '../../lib/views';\nimport { isAwsCredentialsValid } from './awsCredentials';\nimport { deployAccountStack, deployBootstrapStack, deployDomainStack, deployServiceStack } from './stacks';\nimport { syncViewsToS3 } from './viewsSync';\n\nconst buildAndDeploy = async (\n  serviceName: string,\n  needsSynth: boolean,\n  needsBuildApi: boolean,\n  needsInfStack: boolean,\n  needsApiStack: boolean,\n  needsWebStack: boolean,\n  needsViewStack: boolean,\n  appName: string,\n): Promise<void> => {\n  if (needsSynth) {\n    console.log('Synth QPQ Configs');\n    await synthCommand([serviceName, '--app', appName]);\n  }\n\n  const qpqConfigForService = loadServiceQpqConfig(appName, serviceName);\n\n  if (needsBuildApi) {\n    console.log('Building Api: ', serviceName);\n    await runRspack(getServiceRspackConfig(qpqConfigForService, path.join(getServiceDirectory(appName, serviceName), 'service')));\n  }\n\n  if (needsInfStack) {\n    console.log('Deploy Inf: ', serviceName);\n    await deployServiceStack(serviceName, qpqDeployAwsCdkUtils.getInfStackName(qpqConfigForService), appName);\n  }\n\n  if (needsApiStack) {\n    console.log('Deploy Api: ', serviceName);\n    await deployServiceStack(serviceName, qpqDeployAwsCdkUtils.getApiStackName(qpqConfigForService), appName);\n  }\n\n  if (needsWebStack) {\n    console.log('Deploy Web: ', serviceName);\n    await deployServiceStack(serviceName, qpqDeployAwsCdkUtils.getWebStackName(qpqConfigForService), appName);\n  }\n\n  if (needsViewStack && getServiceNamesWithViews(appName).includes(serviceName)) {\n    console.log('Building Views: ', serviceName);\n    await bundleViews(appName, serviceName);\n    await syncViewsToS3(appName, serviceName);\n  }\n};\n\nexport const awsGo = async (appName: string, plan: DeployPlan): Promise<void> => {\n  if (plan.kind === 'cancelled') {\n    return;\n  }\n\n  logTimeStart('totalTime');\n\n  if (plan.kind === 'account') {\n    await deployAccountStack(plan.appName);\n    logTimeEnd('totalTime');\n    return;\n  }\n\n  if (plan.kind === 'bootstrap') {\n    // Actor bootstraps deploy into a shared account — leave the account-level\n    // guardrails stack alone (deploy it explicitly via the 'account' option).\n    if (process.env.ACTOR_NAME) {\n      console.log('Skipping account stack for actor deploy');\n    } else {\n      await deployAccountStack(plan.appName);\n    }\n    if (plan.includeDomain) {\n      await deployDomainStack(plan.appName);\n    }\n    await deployBootstrapStack(plan.appName);\n    logTimeEnd('totalTime');\n    return;\n  }\n\n  const { services, stacks } = plan;\n  const shouldBuildApi = stacks !== 'views';\n\n  console.log('\\n\\nRunning automated deploy\\n\\n');\n  console.log('Executing for services');\n  console.log(services.join(', '));\n\n  if ((await isAwsCredentialsValid()) === false) {\n    console.log('Credentials are expired or invalid.');\n    return;\n  }\n\n  const allStacks = stacks === 'all';\n\n  await runAppHook(appName, 'predeploy');\n\n  // Workspace packages resolve through their built dist/ (package.json main),\n  // so bundles would ship stale code unless every lib is tsc'd first.\n  console.log('Building workspace packages');\n  await runCommand('npm', ['run', 'build', '--workspaces', '--if-present']);\n\n  // Views uploads resolve bucket names from the shell service's config.\n  if (allStacks || stacks === 'views') {\n    await synthCommand(['shell', '--app', appName]);\n  }\n\n  for (let phase = 0; phase <= 5; phase += 1) {\n    await services.reduce(async (cur, service) => {\n      await cur;\n      return buildAndDeploy(\n        service,\n        phase === 0,\n        phase === 1 && shouldBuildApi,\n        phase === 2 && (allStacks || stacks === 'inf'),\n        phase === 3 && (allStacks || stacks === 'api'),\n        phase === 4 && (allStacks || stacks === 'web'),\n        phase === 5 && (allStacks || stacks === 'views'),\n        appName,\n      );\n    }, Promise.resolve());\n  }\n\n  logTimeEnd('totalTime');\n};\n"]}
+{"version":3,"file":"go.js","sourceRoot":"","sources":["../../../../src/platforms/aws/go.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2EAA2E;AAC3E,+EAA+E;AAC/E,6EAA6E;AAC7E,gFAAgF;AAChF,8EAA8E;AAC9E,4EAA4E;AAC5E,uDAAuD;AACvD,uEAAgE;AAChE,uEAAkE;AAElE,gDAAwB;AAExB,gDAAoD;AAEpD,mDAAoF;AACpF,2CAA6C;AAC7C,qDAA2F;AAC3F,mDAAgD;AAChD,qDAAkD;AAClD,6CAA4D;AAC5D,2CAA8C;AAC9C,qDAAyD;AACzD,uCAAuC;AACvC,qCAA2G;AAC3G,2CAA4C;AAE5C,MAAM,cAAc,GAAG,CACrB,WAAmB,EACnB,UAAmB,EACnB,aAAsB,EACtB,aAAsB,EACtB,aAAsB,EACtB,aAAsB,EACtB,cAAuB,EACvB,OAAe,EACA,EAAE;IACjB,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QACjC,MAAM,IAAA,oBAAY,EAAC,CAAC,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,mBAAmB,GAAG,IAAA,iCAAoB,EAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAEvE,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC;QAC3C,MAAM,IAAA,qBAAS,EAAC,IAAA,iDAAsB,EAAC,mBAAmB,EAAE,cAAI,CAAC,IAAI,CAAC,IAAA,+BAAmB,EAAC,OAAO,EAAE,WAAW,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IAChI,CAAC;IAED,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QACzC,MAAM,IAAA,2BAAkB,EAAC,WAAW,EAAE,+CAAoB,CAAC,eAAe,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC,CAAC;IAC5G,CAAC;IAED,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QACzC,MAAM,IAAA,2BAAkB,EAAC,WAAW,EAAE,+CAAoB,CAAC,eAAe,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC,CAAC;IAC5G,CAAC;IAED,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QACzC,MAAM,IAAA,2BAAkB,EAAC,WAAW,EAAE,+CAAoB,CAAC,eAAe,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC,CAAC;IAC5G,CAAC;IAED,IAAI,cAAc,IAAI,IAAA,oCAAwB,EAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9E,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,WAAW,CAAC,CAAC;QAC7C,MAAM,IAAA,mBAAW,EAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACxC,MAAM,IAAA,yBAAa,EAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC,CAAA,CAAC;AAEK,MAAM,KAAK,GAAG,CAAO,OAAe,EAAE,IAAgB,EAAiB,EAAE;IAC9E,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC9B,OAAO;IACT,CAAC;IAED,IAAA,qBAAY,EAAC,WAAW,CAAC,CAAC;IAE1B,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAA,2BAAkB,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvC,IAAA,mBAAU,EAAC,WAAW,CAAC,CAAC;QACxB,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC9B,0EAA0E;QAC1E,0EAA0E;QAC1E,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;QACzD,CAAC;aAAM,CAAC;YACN,MAAM,IAAA,2BAAkB,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,MAAM,IAAA,0BAAiB,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,IAAA,6BAAoB,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzC,IAAA,mBAAU,EAAC,WAAW,CAAC,CAAC;QACxB,OAAO;IACT,CAAC;IAED,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAClC,MAAM,cAAc,GAAG,MAAM,KAAK,OAAO,CAAC;IAE1C,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACtC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAEjC,IAAI,CAAC,MAAM,IAAA,sCAAqB,GAAE,CAAC,KAAK,KAAK,EAAE,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;QACnD,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,KAAK,KAAK,CAAC;IAEnC,MAAM,IAAA,kBAAU,EAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAEvC,4EAA4E;IAC5E,oEAAoE;IACpE,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IAC3C,MAAM,IAAA,uBAAU,EAAC,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC;IAE1E,sEAAsE;IACtE,IAAI,SAAS,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACpC,MAAM,IAAA,oBAAY,EAAC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAO,GAAG,EAAE,OAAO,EAAE,EAAE;YAC3C,MAAM,GAAG,CAAC;YACV,OAAO,cAAc,CACnB,OAAO,EACP,KAAK,KAAK,CAAC,EACX,KAAK,KAAK,CAAC,IAAI,cAAc,EAC7B,KAAK,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,KAAK,KAAK,CAAC,EAC9C,KAAK,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,KAAK,KAAK,CAAC,EAC9C,KAAK,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,KAAK,KAAK,CAAC,EAC9C,KAAK,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,KAAK,OAAO,CAAC,EAChD,OAAO,CACR,CAAC;QACJ,CAAC,CAAA,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IACxB,CAAC;IAED,yEAAyE;IACzE,0EAA0E;IAC1E,uDAAuD;IACvD,IAAI,SAAS,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QAClC,MAAM,iBAAiB,GAAG,IAAA,0CAA6B,EAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC3E,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;YACnD,MAAM,IAAA,oBAAU,EAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,IAAA,mBAAU,EAAC,WAAW,CAAC,CAAC;AAC1B,CAAC,CAAA,CAAC;AAnFW,QAAA,KAAK,SAmFhB","sourcesContent":["// AWS sequential deploy (`qpq go`). Per service it: synths the QPQ config,\n// rspack-bundles the backend (programmatic — no per-service rspack.config.ts),\n// deploys the inf/api/web CDK stacks (cdk runs the generic workspace app via\n// --app), bundles views (rspack, production) and syncs them to S3. Finally, any\n// service that opts into module federation has its federated remote published\n// (built + uploaded + manifest flipped), so a deploy that ships new backend\n// code also republishes the code the lambdas federate.\nimport { qpqDeployAwsCdkUtils } from 'quidproquo-deploy-awscdk';\nimport { getServiceRspackConfig } from 'quidproquo-deploy-rspack';\n\nimport path from 'path';\n\nimport { synthCommand } from '../../commands/synth';\nimport { DeployPlan } from '../../lib/deployPrompts';\nimport { getServiceDirectory, getServiceNamesWithViews } from '../../lib/discovery';\nimport { runAppHook } from '../../lib/hooks';\nimport { getServiceNamesWithFederation, loadServiceQpqConfig } from '../../lib/qpqConfigs';\nimport { runRspack } from '../../lib/rspackRun';\nimport { runCommand } from '../../lib/runCommand';\nimport { logTimeEnd, logTimeStart } from '../../lib/timing';\nimport { bundleViews } from '../../lib/views';\nimport { isAwsCredentialsValid } from './awsCredentials';\nimport { awsPublish } from './publish';\nimport { deployAccountStack, deployBootstrapStack, deployDomainStack, deployServiceStack } from './stacks';\nimport { syncViewsToS3 } from './viewsSync';\n\nconst buildAndDeploy = async (\n  serviceName: string,\n  needsSynth: boolean,\n  needsBuildApi: boolean,\n  needsInfStack: boolean,\n  needsApiStack: boolean,\n  needsWebStack: boolean,\n  needsViewStack: boolean,\n  appName: string,\n): Promise<void> => {\n  if (needsSynth) {\n    console.log('Synth QPQ Configs');\n    await synthCommand([serviceName, '--app', appName]);\n  }\n\n  const qpqConfigForService = loadServiceQpqConfig(appName, serviceName);\n\n  if (needsBuildApi) {\n    console.log('Building Api: ', serviceName);\n    await runRspack(getServiceRspackConfig(qpqConfigForService, path.join(getServiceDirectory(appName, serviceName), 'service')));\n  }\n\n  if (needsInfStack) {\n    console.log('Deploy Inf: ', serviceName);\n    await deployServiceStack(serviceName, qpqDeployAwsCdkUtils.getInfStackName(qpqConfigForService), appName);\n  }\n\n  if (needsApiStack) {\n    console.log('Deploy Api: ', serviceName);\n    await deployServiceStack(serviceName, qpqDeployAwsCdkUtils.getApiStackName(qpqConfigForService), appName);\n  }\n\n  if (needsWebStack) {\n    console.log('Deploy Web: ', serviceName);\n    await deployServiceStack(serviceName, qpqDeployAwsCdkUtils.getWebStackName(qpqConfigForService), appName);\n  }\n\n  if (needsViewStack && getServiceNamesWithViews(appName).includes(serviceName)) {\n    console.log('Building Views: ', serviceName);\n    await bundleViews(appName, serviceName);\n    await syncViewsToS3(appName, serviceName);\n  }\n};\n\nexport const awsGo = async (appName: string, plan: DeployPlan): Promise<void> => {\n  if (plan.kind === 'cancelled') {\n    return;\n  }\n\n  logTimeStart('totalTime');\n\n  if (plan.kind === 'account') {\n    await deployAccountStack(plan.appName);\n    logTimeEnd('totalTime');\n    return;\n  }\n\n  if (plan.kind === 'bootstrap') {\n    // Actor bootstraps deploy into a shared account — leave the account-level\n    // guardrails stack alone (deploy it explicitly via the 'account' option).\n    if (process.env.ACTOR_NAME) {\n      console.log('Skipping account stack for actor deploy');\n    } else {\n      await deployAccountStack(plan.appName);\n    }\n    if (plan.includeDomain) {\n      await deployDomainStack(plan.appName);\n    }\n    await deployBootstrapStack(plan.appName);\n    logTimeEnd('totalTime');\n    return;\n  }\n\n  const { services, stacks } = plan;\n  const shouldBuildApi = stacks !== 'views';\n\n  console.log('\\n\\nRunning automated deploy\\n\\n');\n  console.log('Executing for services');\n  console.log(services.join(', '));\n\n  if ((await isAwsCredentialsValid()) === false) {\n    console.log('Credentials are expired or invalid.');\n    return;\n  }\n\n  const allStacks = stacks === 'all';\n\n  await runAppHook(appName, 'predeploy');\n\n  // Workspace packages resolve through their built dist/ (package.json main),\n  // so bundles would ship stale code unless every lib is tsc'd first.\n  console.log('Building workspace packages');\n  await runCommand('npm', ['run', 'build', '--workspaces', '--if-present']);\n\n  // Views uploads resolve bucket names from the shell service's config.\n  if (allStacks || stacks === 'views') {\n    await synthCommand(['shell', '--app', appName]);\n  }\n\n  for (let phase = 0; phase <= 5; phase += 1) {\n    await services.reduce(async (cur, service) => {\n      await cur;\n      return buildAndDeploy(\n        service,\n        phase === 0,\n        phase === 1 && shouldBuildApi,\n        phase === 2 && (allStacks || stacks === 'inf'),\n        phase === 3 && (allStacks || stacks === 'api'),\n        phase === 4 && (allStacks || stacks === 'web'),\n        phase === 5 && (allStacks || stacks === 'views'),\n        appName,\n      );\n    }, Promise.resolve());\n  }\n\n  // Publishing federated remotes only matters once the new backend code is\n  // live, so it's gated on the api stack having been (re)deployed. Services\n  // without defineFederatedModuleStore(...) are skipped.\n  if (allStacks || stacks === 'api') {\n    const federatedServices = getServiceNamesWithFederation(appName, services);\n    if (federatedServices.length > 0) {\n      console.log('\\n\\nPublishing federated backends\\n');\n      await awsPublish(appName, federatedServices);\n    }\n  }\n\n  logTimeEnd('totalTime');\n};\n"]}

package/lib/commonjs/platforms/aws/goDocker.js

@@ -17,8 +17,9 @@ exports.awsGoDocker = void 0;
 // parallel via docker instead of sequentially:
 //
 //   1. Build everything locally first: QPQ config synth, rspack API bundles,
-//      rspack view bundles, and one self-contained CDK cloud assembly per
-//      service (`cdk synth --output dist/qpq/cdk-docker/<app>/<service>`).
+//      rspack view bundles, rspack federated-remote bundles, and one
+//      self-contained CDK cloud assembly per service
+//      (`cdk synth --output dist/qpq/cdk-docker/<app>/<service>`).
 //   2. Wave 1 (inf): one docker container per service deploys its inf stack,
 //      all concurrently. Containers run only the CDK CLI against the mounted
 //      pre-synthesized assembly — the workspace (and its npm-linked
@@ -28,6 +29,9 @@ exports.awsGoDocker = void 0;
 //      each other).
 //   4. Views: the already-built bundles are synced to S3, one aws-cli
 //      container per service, all concurrently.
+//   5. Publish: the already-built federated remotes (backends that opt in with
+//      defineFederatedModuleStore(...)) are synced to S3 and their manifests
+//      flipped, one aws-cli container per service, all concurrently.
 //
 // domain/bootstrap menu options deploy host-side exactly like `qpq go` —
 // a single stack gains nothing from docker.
@@ -51,6 +55,7 @@ const timing_1 = require("../../lib/timing");
 const views_1 = require("../../lib/views");
 const awsCredentials_1 = require("./awsCredentials");
 const cdkApp_1 = require("./cdkApp");
+const remote_1 = require("./remote");
 const stacks_1 = require("./stacks");
 const viewsSync_1 = require("./viewsSync");
 const IMAGE_TAG = 'qpq-cdk-deployer';
@@ -144,6 +149,42 @@ const dockerSyncViews = (color, appName, serviceName) => __awaiter(void 0, void
         ], { color });
     }
 });
+// Publish one service's already-built federated remote to S3 in a throwaway
+// aws-cli container named <service>-publish. The version dir (everything the
+// manifest references) syncs first, then the manifest.json is copied last —
+// same ordering guarantee as the host-side publish, so a reading lambda never
+// sees a manifest whose files aren't all present yet. resolvePublishTarget reads
+// the manifest hash + resolved bucket/prefix from the buildRemote output.
+const dockerPublishRemote = (color, appName, serviceName) => __awaiter(void 0, void 0, void 0, function* () {
+    const { publishPath, manifestHash, bucketName, servicePrefix } = (0, remote_1.resolvePublishTarget)(appName, serviceName);
+    const containerName = `${serviceName}-publish`;
+    // /publish is the service-remote-published dir; the hashed version subdir and
+    // manifest.json both live directly under it.
+    const s3Operations = [
+        ['s3', 'sync', `/publish/${manifestHash}`, `s3://${bucketName}/${servicePrefix}/${manifestHash}`],
+        ['s3', 'cp', '/publish/manifest.json', `s3://${bucketName}/${servicePrefix}/manifest.json`],
+    ];
+    for (const s3Operation of s3Operations) {
+        yield (0, runCommand_1.runCommandPrefixed)(`publish:${serviceName}`, 'docker', [
+            'rm',
+            '-f',
+            containerName,
+            '>/dev/null',
+            '2>&1',
+            ';',
+            'docker',
+            'run',
+            '--rm',
+            '--name',
+            containerName,
+            '-v',
+            `"${publishPath}:/publish:ro"`,
+            ...AWS_ENV_PASSTHROUGH.flatMap((name) => ['-e', name]),
+            AWS_CLI_IMAGE,
+            ...s3Operation,
+        ], { color });
+    }
+});
 const awsGoDocker = (appName, plan) => __awaiter(void 0, void 0, void 0, function* () {
     if (plan.kind === 'cancelled') {
         return;
@@ -177,17 +218,14 @@ const awsGoDocker = (appName, plan) => __awaiter(void 0, void 0, void 0, functio
     console.log('\n\nRunning dockerized deploy\n\n');
     console.log('Executing for services');
     console.log(services.join(', '));
+    // Federated publish needs the api stack (needApi ⇒ needCdkDeploys), so any
+    // docker preflight it requires is already covered by these two checks.
     if (needCdkDeploys || viewServices.length > 0) {
         yield assertDockerRunning();
     }
     if (needCdkDeploys) {
         yield buildDeployerImage();
     }
-    if (viewServices.length > 0) {
-        // Pull up front so the views wave doesn't race N containers into pulling
-        // the same image.
-        yield (0, runCommand_1.runCommand)('docker', ['pull', AWS_CLI_IMAGE]);
-    }
     // ---- Phase 1: build everything locally ----
     console.log('\n=== Phase 1: local builds ===\n');
     yield (0, hooks_1.runAppHook)(appName, 'predeploy');
@@ -203,6 +241,16 @@ const awsGoDocker = (appName, plan) => __awaiter(void 0, void 0, void 0, functio
     for (const service of qpqSynthServices) {
         yield (0, synth_1.synthCommand)([service, '--app', appName]);
     }
+    // Federated remotes are the backend story code, so republish them whenever the
+    // api stack was (re)deployed. Skips services without defineFederatedModuleStore(...).
+    // Detected here (after the workspace build) because it loads each service's config.
+    const federatedServices = needApi ? (0, qpqConfigs_1.getServiceNamesWithFederation)(appName, services) : [];
+    // The aws-cli image backs both the views sync (phase 4) and the federated
+    // publish (phase 5) waves. Pull once now so those waves don't race N containers
+    // into pulling the same image. Docker is already confirmed running above.
+    if (viewServices.length > 0 || federatedServices.length > 0) {
+        yield (0, runCommand_1.runCommand)('docker', ['pull', AWS_CLI_IMAGE]);
+    }
     if (stacks !== 'views') {
         (0, runTasks_1.assertNoFailures)('API bundling', yield (0, runTasks_1.runTasks)(services.map((service) => ({
             label: `bundle-api:${service}`,
@@ -220,6 +268,16 @@ const awsGoDocker = (appName, plan) => __awaiter(void 0, void 0, void 0, functio
             yield (0, views_1.bundleViews)(appName, service);
         }),
     })), BUILD_CONCURRENCY));
+    // Build the federated remotes locally now (rspack needs the workspace), so the
+    // publish wave only has to sync the already-built output — mirroring how views
+    // are bundled here and synced later.
+    (0, runTasks_1.assertNoFailures)('Remote bundling', yield (0, runTasks_1.runTasks)(federatedServices.map((service) => ({
+        label: `bundle-remote:${service}`,
+        run: () => __awaiter(void 0, void 0, void 0, function* () {
+            console.log(`Bundling federated remote: [${service}]`);
+            yield (0, remote_1.buildRemote)(appName, service);
+        }),
+    })), BUILD_CONCURRENCY));
     if (needCdkDeploys) {
         // One self-contained cloud assembly per service (all its stacks + staged
         // assets) — separate --output dirs so synths can run in parallel and
@@ -229,7 +287,7 @@ const awsGoDocker = (appName, plan) => __awaiter(void 0, void 0, void 0, functio
             run: () => __awaiter(void 0, void 0, void 0, function* () {
                 const outputDir = assemblyDir(appName, service);
                 fs_1.default.rmSync(outputDir, { recursive: true, force: true });
-                yield (0, runCommand_1.runCommandPrefixed)(`cdk-synth:${service}`, 'npx', ['cdk', 'synth', '--all', '--quiet', '--app', `'${(0, cdkApp_1.getCdkAppCommand)()}'`, '--output', `"${outputDir}"`], {
+                yield (0, runCommand_1.runCommandPrefixed)(`cdk-synth:${service}`, 'npx', ['cdk', 'synth', '--quiet', '--app', `'${(0, cdkApp_1.getCdkAppCommand)()}'`, '--output', `"${outputDir}"`], {
                     cwd: (0, discovery_1.getRoot)(),
                     env: { DEPLOY_SERVICE_NAME: service, DEPLOY_APP_NAME: appName },
                     color: (0, runCommand_1.nextPrefixColor)(),
@@ -281,6 +339,16 @@ const awsGoDocker = (appName, plan) => __awaiter(void 0, void 0, void 0, functio
         })), DEPLOY_CONCURRENCY));
         (0, timing_1.logTimeEnd)('viewsWave');
     }
+    // ---- Phase 5: publish the pre-built federated remotes to S3, all concurrent ----
+    if (federatedServices.length > 0) {
+        console.log('\n=== Phase 5: publish federated remotes to S3 (docker) ===\n');
+        (0, timing_1.logTimeStart)('publishWave');
+        (0, runTasks_1.assertNoFailures)('Federated publish', yield (0, runTasks_1.runTasks)(federatedServices.map((service) => ({
+            label: `publish:${service}`,
+            run: () => dockerPublishRemote((0, runCommand_1.nextPrefixColor)(), appName, service),
+        })), DEPLOY_CONCURRENCY));
+        (0, timing_1.logTimeEnd)('publishWave');
+    }
     (0, timing_1.logTimeEnd)('totalTime');
 });
 exports.awsGoDocker = awsGoDocker;