thinkwork-cli 0.12.6 → 0.12.8

package/dist/api-client-MC4NOZ4L.js

@@ -0,0 +1,16 @@
+import {
+  apiFetch,
+  apiFetchRaw,
+  getApiEndpoint2 as getApiEndpoint,
+  readTfVar,
+  resolveApiConfig,
+  resolveTfvarsPath
+} from "./chunk-34NMB5AK.js";
+export {
+  apiFetch,
+  apiFetchRaw,
+  getApiEndpoint,
+  readTfVar,
+  resolveApiConfig,
+  resolveTfvarsPath
+};

package/dist/chunk-34NMB5AK.js

@@ -0,0 +1,359 @@
+var __defProp = Object.defineProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+
+// src/api-client.ts
+import { readFileSync as readFileSync2, existsSync as existsSync3 } from "fs";
+import { execSync as execSync2 } from "child_process";
+
+// src/environments.ts
+import {
+  existsSync,
+  mkdirSync,
+  writeFileSync,
+  readFileSync,
+  readdirSync
+} from "fs";
+import { join } from "path";
+import { homedir } from "os";
+var THINKWORK_HOME = join(homedir(), ".thinkwork");
+var ENVIRONMENTS_DIR = join(THINKWORK_HOME, "environments");
+var ENTERPRISE_DEPLOYMENTS_DIR = join(
+  THINKWORK_HOME,
+  "enterprise-deployments"
+);
+function ensureDir(dir) {
+  if (!existsSync(dir)) mkdirSync(dir, { recursive: true });
+}
+function saveEnvironment(config) {
+  ensureDir(ENVIRONMENTS_DIR);
+  const envDir = join(ENVIRONMENTS_DIR, config.stage);
+  ensureDir(envDir);
+  writeFileSync(
+    join(envDir, "config.json"),
+    JSON.stringify(config, null, 2) + "\n"
+  );
+}
+function saveEnterpriseDeployment(config) {
+  ensureDir(ENTERPRISE_DEPLOYMENTS_DIR);
+  writeFileSync(
+    join(ENTERPRISE_DEPLOYMENTS_DIR, `${config.customerSlug}.json`),
+    JSON.stringify(config, null, 2) + "\n"
+  );
+}
+function loadEnvironment(stage) {
+  const configPath = join(ENVIRONMENTS_DIR, stage, "config.json");
+  if (!existsSync(configPath)) return null;
+  return JSON.parse(readFileSync(configPath, "utf-8"));
+}
+function listEnvironments() {
+  if (!existsSync(ENVIRONMENTS_DIR)) return [];
+  return readdirSync(ENVIRONMENTS_DIR).filter((name) => {
+    return existsSync(join(ENVIRONMENTS_DIR, name, "config.json"));
+  }).map((name) => {
+    return JSON.parse(
+      readFileSync(join(ENVIRONMENTS_DIR, name, "config.json"), "utf-8")
+    );
+  }).sort((a, b) => a.stage.localeCompare(b.stage));
+}
+function resolveTerraformDir(stage) {
+  const env = loadEnvironment(stage);
+  if (env?.terraformDir && existsSync(env.terraformDir)) {
+    return env.terraformDir;
+  }
+  const envVar = process.env.THINKWORK_TERRAFORM_DIR;
+  if (envVar && existsSync(envVar)) return envVar;
+  const cwdTf = join(process.cwd(), "terraform");
+  if (existsSync(join(cwdTf, "main.tf"))) return cwdTf;
+  return null;
+}
+
+// src/terraform.ts
+import { spawn } from "child_process";
+import { existsSync as existsSync2 } from "fs";
+import path from "path";
+function resolveTierDir(terraformDir, stage, tier) {
+  const envDir = path.join(terraformDir, "environments", stage, tier);
+  if (existsSync2(envDir)) {
+    return envDir;
+  }
+  const greenfield = path.join(terraformDir, "examples", "greenfield");
+  if (existsSync2(greenfield)) {
+    return greenfield;
+  }
+  const flat = path.join(terraformDir);
+  if (existsSync2(path.join(flat, "main.tf"))) {
+    return flat;
+  }
+  const cwdTf = path.join(process.cwd(), "terraform");
+  if (existsSync2(path.join(cwdTf, "main.tf"))) {
+    return cwdTf;
+  }
+  return terraformDir;
+}
+async function ensureWorkspace(cwd, stage) {
+  const list = await runTerraformRaw(cwd, ["workspace", "list"]);
+  const workspaces = list.split("\n").map((l) => l.replace("*", "").trim()).filter(Boolean);
+  if (!workspaces.includes(stage)) {
+    await runTerraformRaw(cwd, ["workspace", "new", stage]);
+  } else {
+    await runTerraformRaw(cwd, ["workspace", "select", stage]);
+  }
+}
+function runTerraformRaw(cwd, args) {
+  return new Promise((resolve, reject) => {
+    const proc = spawn("terraform", args, {
+      cwd,
+      stdio: ["pipe", "pipe", "pipe"]
+    });
+    let stdout = "";
+    let stderr = "";
+    proc.stdout.on("data", (d) => stdout += d);
+    proc.stderr.on("data", (d) => stderr += d);
+    proc.on("close", (code) => {
+      if (code === 0) resolve(stdout);
+      else reject(new Error(`terraform ${args.join(" ")} failed (exit ${code}): ${stderr}`));
+    });
+  });
+}
+function runTerraform(cwd, args) {
+  return new Promise((resolve) => {
+    console.log(`
+  \u2192 terraform ${args.join(" ")}
+`);
+    const proc = spawn("terraform", args, {
+      cwd,
+      stdio: "inherit"
+    });
+    proc.on("close", (code) => resolve(code ?? 1));
+  });
+}
+async function ensureInit(cwd) {
+  const dotTerraform = path.join(cwd, ".terraform");
+  if (!existsSync2(dotTerraform)) {
+    const code = await runTerraform(cwd, ["init"]);
+    if (code !== 0) {
+      throw new Error("terraform init failed");
+    }
+  }
+}
+
+// src/aws-discovery.ts
+import { execSync } from "child_process";
+function runAws(cmd) {
+  try {
+    return execSync(`aws ${cmd}`, {
+      encoding: "utf-8",
+      timeout: 15e3,
+      stdio: ["pipe", "pipe", "pipe"]
+    }).trim();
+  } catch {
+    return null;
+  }
+}
+function listDeployedStages(region) {
+  const raw = runAws(
+    `lambda list-functions --region ${region} --query "Functions[?starts_with(FunctionName, 'thinkwork-')].FunctionName" --output json`
+  );
+  if (!raw) return [];
+  try {
+    const functions = JSON.parse(raw);
+    const stages = /* @__PURE__ */ new Set();
+    for (const fn of functions) {
+      const m = fn.match(/^thinkwork-(.+?)-api-graphql-http$/);
+      if (m) stages.add(m[1]);
+    }
+    return [...stages].sort();
+  } catch {
+    return [];
+  }
+}
+function getApiEndpoint(stage, region) {
+  const raw = runAws(
+    `apigatewayv2 get-apis --region ${region} --query "Items[?Name=='thinkwork-${stage}-api'].ApiEndpoint|[0]" --output text`
+  );
+  return raw && raw !== "None" ? raw : null;
+}
+function getApiAuthSecretFromLambda(stage, region) {
+  const raw = runAws(
+    `lambda get-function-configuration --function-name thinkwork-${stage}-api-tenants --region ${region} --query "Environment.Variables.API_AUTH_SECRET" --output text`
+  );
+  return raw && raw !== "None" ? raw : null;
+}
+
+// src/ui.ts
+import chalk from "chalk";
+import ora from "ora";
+var TIER_LABELS = {
+  foundation: "Foundation",
+  data: "Data",
+  app: "App"
+};
+function printHeader(command, stage, identity) {
+  console.log("");
+  console.log(chalk.bold.cyan("  \u2B21 Thinkwork") + chalk.dim(` \u2014 ${command}`));
+  console.log(chalk.dim(`  Stage: ${chalk.white(stage)}`));
+  if (identity) {
+    console.log(chalk.dim(`  AWS:   ${chalk.white(identity.account)} / ${chalk.white(identity.region)}`));
+  }
+  console.log("");
+}
+function printTierHeader(tier, index, total) {
+  const label = TIER_LABELS[tier] ?? tier;
+  const progress = chalk.dim(`[${index + 1}/${total}]`);
+  console.log(`  ${progress} ${chalk.bold(label)}`);
+}
+function printSuccess(message) {
+  console.log(`
+  ${chalk.green("\u2713")} ${chalk.bold(message)}`);
+}
+function printError(message) {
+  console.log(`
+  ${chalk.red("\u2717")} ${chalk.bold.red(message)}`);
+}
+function printMissingApiSessionError(stage, hasSession) {
+  if (!hasSession) {
+    printError(`No API session for stage "${stage}".`);
+    console.log("");
+    console.log(`  ${chalk.bold("To fix:")}  thinkwork login --stage ${stage}`);
+    console.log(
+      chalk.dim(
+        `  (the deploy-side \`thinkwork login\` only configures an AWS profile \u2014
+   it does NOT open an API session.)`
+      )
+    );
+    console.log("");
+  } else {
+    printError(`Session for stage "${stage}" has no tenant cached.`);
+    console.log("");
+    console.log(`  ${chalk.bold("To fix:")}  thinkwork login --stage ${stage}`);
+    console.log(
+      chalk.dim(
+        `  Or pass --tenant <slug>, or set THINKWORK_TENANT.`
+      )
+    );
+    console.log("");
+  }
+}
+function printWarning(message) {
+  console.log(`  ${chalk.yellow("\u26A0")} ${message}`);
+}
+function printSummary(command, stage, tiers, startTime) {
+  const elapsed = ((Date.now() - startTime) / 1e3).toFixed(1);
+  console.log("");
+  console.log(chalk.dim("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+  console.log(`  ${chalk.bold("Command:")}  ${command}`);
+  console.log(`  ${chalk.bold("Stage:")}    ${stage}`);
+  console.log(`  ${chalk.bold("Tiers:")}    ${tiers.map((t) => TIER_LABELS[t] ?? t).join(" \u2192 ")}`);
+  console.log(`  ${chalk.bold("Time:")}     ${elapsed}s`);
+  console.log(chalk.dim("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+}
+
+// src/api-client.ts
+function readTfVar(tfvarsPath, key) {
+  if (!existsSync3(tfvarsPath)) return null;
+  const content = readFileSync2(tfvarsPath, "utf-8");
+  const match = content.match(new RegExp(`^${key}\\s*=\\s*"([^"]*)"`, "m"));
+  return match ? match[1] : null;
+}
+function resolveTfvarsPath(stage) {
+  const tfDir = resolveTerraformDir(stage);
+  if (tfDir) {
+    const direct = `${tfDir}/terraform.tfvars`;
+    if (existsSync3(direct)) return direct;
+  }
+  const terraformDir = process.env.THINKWORK_TERRAFORM_DIR || process.cwd();
+  const cwd = resolveTierDir(terraformDir, stage, "app");
+  return `${cwd}/terraform.tfvars`;
+}
+function getApiEndpoint2(stage, region) {
+  try {
+    const raw = execSync2(
+      `aws apigatewayv2 get-apis --region ${region} --query "Items[?Name=='thinkwork-${stage}-api'].ApiEndpoint|[0]" --output text`,
+      { encoding: "utf-8", timeout: 15e3, stdio: ["pipe", "pipe", "pipe"] }
+    ).trim();
+    return raw && raw !== "None" ? raw : null;
+  } catch {
+    return null;
+  }
+}
+async function apiFetch(apiUrl, authSecret, path2, options = {}, extraHeaders = {}) {
+  const res = await fetch(`${apiUrl}${path2}`, {
+    ...options,
+    headers: {
+      "Content-Type": "application/json",
+      Authorization: `Bearer ${authSecret}`,
+      ...extraHeaders,
+      ...options.headers
+    }
+  });
+  if (!res.ok) {
+    const body = await res.json().catch(() => ({}));
+    throw new Error(body.error || `HTTP ${res.status}`);
+  }
+  return res.json();
+}
+async function apiFetchRaw(apiUrl, authSecret, path2, options = {}, extraHeaders = {}) {
+  const res = await fetch(`${apiUrl}${path2}`, {
+    ...options,
+    headers: {
+      "Content-Type": "application/json",
+      Authorization: `Bearer ${authSecret}`,
+      ...extraHeaders,
+      ...options.headers
+    }
+  });
+  const body = await res.json().catch(() => ({}));
+  return { ok: res.ok, status: res.status, body };
+}
+function resolveApiConfig(stage, regionOverride) {
+  const tfvarsPath = resolveTfvarsPath(stage);
+  const tfAuthSecret = readTfVar(tfvarsPath, "api_auth_secret");
+  const tfRegion = readTfVar(tfvarsPath, "region");
+  const region = regionOverride || tfRegion || "us-east-1";
+  const apiUrl = getApiEndpoint2(stage, region);
+  if (!apiUrl) {
+    printError(
+      `Cannot discover API endpoint for stage "${stage}" in ${region}. Is the stack deployed?`
+    );
+    return null;
+  }
+  const authSecret = tfAuthSecret ?? getApiAuthSecretFromLambda(stage, region);
+  if (!authSecret) {
+    printError(
+      `Cannot read api_auth_secret. Tried terraform.tfvars at ${tfvarsPath} and the \`thinkwork-${stage}-api-tenants\` Lambda env. Deploy the stack or set --profile to a role with lambda:GetFunctionConfiguration.`
+    );
+    return null;
+  }
+  return { apiUrl, authSecret };
+}
+
+export {
+  __export,
+  resolveTierDir,
+  ensureWorkspace,
+  runTerraform,
+  ensureInit,
+  printHeader,
+  printTierHeader,
+  printSuccess,
+  printError,
+  printMissingApiSessionError,
+  printWarning,
+  printSummary,
+  listDeployedStages,
+  getApiEndpoint,
+  saveEnvironment,
+  saveEnterpriseDeployment,
+  loadEnvironment,
+  listEnvironments,
+  resolveTerraformDir,
+  readTfVar,
+  resolveTfvarsPath,
+  getApiEndpoint2,
+  apiFetch,
+  apiFetchRaw,
+  resolveApiConfig
+};