From aaf5c30c0e3b89e52a68ba11d2baf0800e2955df Mon Sep 17 00:00:00 2001
From: Federico Maleh <fedemaleh@yahoo.com.ar>
Date: Sat, 13 Dec 2025 04:35:18 -0300
Subject: [PATCH 1/3] First amplify implementation

---
 .gitignore                                    |   5 +-
 amplify/deployment/module/backend.tf          |   4 +
 amplify/deployment/module/do_tofu             |  63 ++++++++++
 amplify/deployment/module/locals.tf           |   5 +
 amplify/deployment/module/main.tf             | 119 ++++++++++++++++++
 amplify/deployment/module/outputs.tf          |  16 +++
 amplify/deployment/module/provider.tf         |  14 +++
 amplify/deployment/module/variables.tf        |  45 +++++++
 amplify/deployment/workflows/blue_green.yaml  |   2 +
 amplify/deployment/workflows/delete.yaml      |   6 +
 amplify/deployment/workflows/finalize.yaml    |   4 +
 amplify/deployment/workflows/initial.yaml     |   6 +
 amplify/deployment/workflows/rollback.yaml    |   4 +
 amplify/instance/workflows/list.yaml          |   0
 amplify/log/workflows/log.yaml                |   0
 amplify/metric/workflows/list.yaml            |   0
 amplify/metric/workflows/metric.yaml          |   0
 amplify/scope/workflows/create.yaml           |   4 +
 amplify/scope/workflows/delete.yaml           |   4 +
 amplify/scope/workflows/update.yaml           |   4 +
 amplify/specs/actions/create-scope.json.tpl   |  29 +++++
 .../specs/actions/delete-deployment.json.tpl  |  33 +++++
 amplify/specs/actions/delete-scope.json.tpl   |  29 +++++
 .../actions/finalize-blue-green.json.tpl      |  33 +++++
 .../actions/rollback-deployment.json.tpl      |  33 +++++
 .../specs/actions/start-blue-green.json.tpl   |  33 +++++
 amplify/specs/actions/start-initial.json.tpl  |  32 +++++
 amplify/specs/notification-channel.json.tpl   |  34 +++++
 amplify/specs/scope-type-definition.json.tpl  |   9 ++
 amplify/specs/service-spec.json.tpl           |  34 +++++
 30 files changed, 603 insertions(+), 1 deletion(-)
 create mode 100644 amplify/deployment/module/backend.tf
 create mode 100755 amplify/deployment/module/do_tofu
 create mode 100644 amplify/deployment/module/locals.tf
 create mode 100644 amplify/deployment/module/main.tf
 create mode 100644 amplify/deployment/module/outputs.tf
 create mode 100644 amplify/deployment/module/provider.tf
 create mode 100644 amplify/deployment/module/variables.tf
 create mode 100644 amplify/deployment/workflows/blue_green.yaml
 create mode 100644 amplify/deployment/workflows/delete.yaml
 create mode 100644 amplify/deployment/workflows/finalize.yaml
 create mode 100644 amplify/deployment/workflows/initial.yaml
 create mode 100644 amplify/deployment/workflows/rollback.yaml
 create mode 100644 amplify/instance/workflows/list.yaml
 create mode 100644 amplify/log/workflows/log.yaml
 create mode 100644 amplify/metric/workflows/list.yaml
 create mode 100644 amplify/metric/workflows/metric.yaml
 create mode 100644 amplify/scope/workflows/create.yaml
 create mode 100644 amplify/scope/workflows/delete.yaml
 create mode 100644 amplify/scope/workflows/update.yaml
 create mode 100644 amplify/specs/actions/create-scope.json.tpl
 create mode 100644 amplify/specs/actions/delete-deployment.json.tpl
 create mode 100644 amplify/specs/actions/delete-scope.json.tpl
 create mode 100644 amplify/specs/actions/finalize-blue-green.json.tpl
 create mode 100644 amplify/specs/actions/rollback-deployment.json.tpl
 create mode 100644 amplify/specs/actions/start-blue-green.json.tpl
 create mode 100644 amplify/specs/actions/start-initial.json.tpl
 create mode 100644 amplify/specs/notification-channel.json.tpl
 create mode 100644 amplify/specs/scope-type-definition.json.tpl
 create mode 100644 amplify/specs/service-spec.json.tpl

diff --git a/.gitignore b/.gitignore
index dc24eb3e..5fe641e4 100644
--- a/.gitignore
+++ b/.gitignore
@@ -134,4 +134,7 @@ dist
 .idea
 k8s/output
 np-agent-manifest.yaml
-.minikube_mount_pid
\ No newline at end of file
+.minikube_mount_pid
+
+amplify/deployment/module/.terraform
+amplify/deployment/module/.terraform.lock.hcl
\ No newline at end of file
diff --git a/amplify/deployment/module/backend.tf b/amplify/deployment/module/backend.tf
new file mode 100644
index 00000000..b1bfb950
--- /dev/null
+++ b/amplify/deployment/module/backend.tf
@@ -0,0 +1,4 @@
+terraform {
+  backend "s3" {
+  }
+}
\ No newline at end of file
diff --git a/amplify/deployment/module/do_tofu b/amplify/deployment/module/do_tofu
new file mode 100755
index 00000000..8278295b
--- /dev/null
+++ b/amplify/deployment/module/do_tofu
@@ -0,0 +1,63 @@
+#!/bin/bash
+
+set -eou pipefail
+
+CURRENT_DIR=$(dirname "${BASH_SOURCE[0]}")
+
+cd "$CURRENT_DIR"
+
+AWS_REGION="${AWS_REGION:-us-east-1}"
+TF_STATE_BUCKET="test-static-null2"
+TF_LOCK_TABLE="service-provisioning-terraform-state-lock"
+# You need to export the GITHUB_TOKEN as an env var in the agent
+#GITHUB_TOKEN=""
+
+APPLICATION_SLUG=$(echo "$CONTEXT" | jq -r .application.slug)
+SCOPE_SLUG=$(echo "$CONTEXT" | jq -r .scope.slug)
+SCOPE_ID=$(echo "$CONTEXT" | jq -r .scope.id)
+REPOSITORY_URL=$(echo "$CONTEXT" | jq -r .application.repository_url)
+APPLICATION_VERSION="$(echo "$CONTEXT" | jq -r .release.semver)"
+ENV_VARS_JSON=$(echo "$CONTEXT" | jq '.parameters.results | map({(.variable): .values[0].value}) | add')
+RESOURCE_TAGS_JSON=$(echo "$CONTEXT" | jq \
+     '{
+     nullplatform: "true",
+     account: .account.slug,
+     account_id: .account.id,
+     namespace: .namespace.slug,
+     namespace_id: .namespace.id,
+     application: .application.slug,
+     application_id: .application.id,
+     scope: .scope.slug,
+     scope_id: .scope.id,
+     deployment_id: .deployment.id
+     }')
+
+DOMAIN="kwik-e-mart-main.nullapps.io"
+SUBDOMAIN="graviton-amplify"
+
+#echo $APPLICATION_SLUG
+#echo $SCOPE_SLUG
+#echo $SCOPE_ID
+#echo $REPOSITORY_URL
+#echo $APPLICATION_VERSION
+#echo $ENV_VARS_JSON
+#echo $RESOURCE_TAGS_JSON
+#echo $DOMAIN
+#echo $SUBDOMAIN
+
+tofu init \
+  -backend-config="bucket=${TF_STATE_BUCKET}" \
+  -backend-config="key=amplify/$APPLICATION_SLUG/$SCOPE_SLUG-$SCOPE_ID" \
+  -backend-config="region=${AWS_REGION}" \
+  -backend-config="dynamodb_table=${TF_LOCK_TABLE}"
+
+tofu $ACTION -auto-approve \
+  -var="aws_region=${AWS_REGION}" \
+  -var="github_token=${GITHUB_TOKEN}" \
+  -var="application_name=${APPLICATION_SLUG}" \
+  -var="repository_url=${REPOSITORY_URL}" \
+  -var="application_version=${APPLICATION_VERSION}" \
+  -var="env_vars_json=${ENV_VARS_JSON}" \
+  -var="resource_tags_json=${RESOURCE_TAGS_JSON}" \
+  -var="domain=${DOMAIN}" \
+  -var="subdomain=${SUBDOMAIN}"
\ No newline at end of file
diff --git a/amplify/deployment/module/locals.tf b/amplify/deployment/module/locals.tf
new file mode 100644
index 00000000..13e17f79
--- /dev/null
+++ b/amplify/deployment/module/locals.tf
@@ -0,0 +1,5 @@
+locals {
+  git_ref = var.application_version
+  env_vars = jsondecode(var.env_vars_json)
+  resource_tags = jsondecode(var.resource_tags_json)
+}
\ No newline at end of file
diff --git a/amplify/deployment/module/main.tf b/amplify/deployment/module/main.tf
new file mode 100644
index 00000000..905625a9
--- /dev/null
+++ b/amplify/deployment/module/main.tf
@@ -0,0 +1,119 @@
+data "aws_route53_zone" "public" {
+  name = var.domain
+}
+
+resource "aws_amplify_app" "app" {
+  name = var.application_name
+  repository = var.repository_url
+
+  oauth_token = var.github_token
+
+  enable_branch_auto_build = false
+  enable_branch_auto_deletion = false
+  enable_auto_branch_creation = false
+
+  build_spec = <<EOF
+version: 1
+frontend:
+  phases:
+    preBuild:
+      commands:
+        - npm ci
+    build:
+      commands:
+        - npm run build
+  artifacts:
+    baseDirectory: dist
+    files:
+      - '**/*'
+  cache:
+    paths:
+      - node_modules/**/*
+EOF
+}
+
+resource "aws_amplify_branch" "tag" {
+  app_id = aws_amplify_app.app.id
+  branch_name = local.git_ref
+
+  stage = "PRODUCTION"
+  enable_auto_build = true
+
+  environment_variables = local.env_vars
+
+  tags = local.resource_tags
+}
+
+# Use CNAME record pointing to the Amplify-generated domain
+resource "aws_route53_record" "amplify" {
+  zone_id = data.aws_route53_zone.public.zone_id
+  name    = "${var.subdomain}.${var.domain}"
+  type    = "CNAME"
+  ttl     = 300
+
+  records = [aws_amplify_app.app.default_domain]
+}
+
+resource "aws_amplify_domain_association" "domain_association" {
+  app_id = aws_amplify_app.app.id
+  domain_name = var.domain
+
+  # Wait for domain verification to complete (can take 5-15 minutes)
+  wait_for_verification = true
+
+  sub_domain {
+    branch_name = aws_amplify_branch.tag.branch_name
+    prefix      = var.subdomain
+  }
+
+  depends_on = [aws_route53_record.amplify]
+}
+
+resource "null_resource" "trigger_build" {
+  triggers = {
+    branch_id = aws_amplify_branch.tag.id
+    commit_id = var.application_version
+    # Force rebuild when environment variables change
+    env_vars_hash = md5(var.env_vars_json)
+  }
+
+  provisioner "local-exec" {
+    command = <<-EOT
+      set -e
+
+      # Start the build job
+      JOB_ID=$(aws amplify start-job \
+        --app-id ${aws_amplify_app.app.id} \
+        --branch-name ${aws_amplify_branch.tag.branch_name} \
+        --job-type RELEASE \
+        --query 'jobSummary.jobId' \
+        --output text)
+
+      echo "Started Amplify build job: $JOB_ID"
+
+      # Wait for the job to complete
+      while true; do
+        STATUS=$(aws amplify get-job \
+          --app-id ${aws_amplify_app.app.id} \
+          --branch-name ${aws_amplify_branch.tag.branch_name} \
+          --job-id $JOB_ID \
+          --query 'job.summary.status' \
+          --output text)
+
+        echo "Build status: $STATUS"
+
+        if [ "$STATUS" = "SUCCEED" ]; then
+          echo "Build completed successfully!"
+          break
+        elif [ "$STATUS" = "FAILED" ] || [ "$STATUS" = "CANCELLED" ]; then
+          echo "Build failed with status: $STATUS"
+          exit 1
+        fi
+
+        sleep 10
+      done
+    EOT
+  }
+
+  depends_on = [aws_amplify_branch.tag]
+}
\ No newline at end of file
diff --git a/amplify/deployment/module/outputs.tf b/amplify/deployment/module/outputs.tf
new file mode 100644
index 00000000..3f4528e0
--- /dev/null
+++ b/amplify/deployment/module/outputs.tf
@@ -0,0 +1,16 @@
+output "amplify_app_id" {
+  value = aws_amplify_app.app.id
+}
+
+output "amplify_branch" {
+  value = aws_amplify_branch.tag.branch_name
+}
+
+output "public_url" {
+  value = "https://${var.subdomain}.${var.domain}"
+}
+
+
+output "amplify_dns_instructions" {
+  value = aws_amplify_domain_association.domain_association.sub_domain
+}
\ No newline at end of file
diff --git a/amplify/deployment/module/provider.tf b/amplify/deployment/module/provider.tf
new file mode 100644
index 00000000..7847585b
--- /dev/null
+++ b/amplify/deployment/module/provider.tf
@@ -0,0 +1,14 @@
+terraform {
+  required_version = ">= 1.4.0"
+
+  required_providers {
+    aws = {
+      source = "hashicorp/aws"
+      version = "~> 5.0"
+    }
+  }
+}
+
+provider "aws" {
+  region = var.aws_region
+}
\ No newline at end of file
diff --git a/amplify/deployment/module/variables.tf b/amplify/deployment/module/variables.tf
new file mode 100644
index 00000000..8a164b24
--- /dev/null
+++ b/amplify/deployment/module/variables.tf
@@ -0,0 +1,45 @@
+variable "aws_region" {
+  description = "AWS Region"
+  type = string
+  default = "us-east-1"
+}
+
+variable "github_token" {
+  description = "GitHub OAuth token for Amplify"
+  type = string
+  sensitive = true
+}
+
+variable "application_name" {
+  description = "Application slug"
+  type = string
+}
+
+variable "repository_url" {
+  description = "GitHub repository url"
+  type = string
+}
+
+variable "application_version" {
+  description = "Application version to deploy"
+  type = string
+}
+
+variable "env_vars_json" {
+  description = "JSON object with environment variables"
+  type = string
+}
+
+variable "resource_tags_json" {
+  description = "JSON object with tags for AWS resources"
+}
+
+variable "domain" {
+  description = "Root public domain (e.g. nullapps.io"
+  type = string
+}
+
+variable "subdomain" {
+  description = "Application subdomain domain (e.g. app)"
+  type = string
+}
\ No newline at end of file
diff --git a/amplify/deployment/workflows/blue_green.yaml b/amplify/deployment/workflows/blue_green.yaml
new file mode 100644
index 00000000..c5dcb0c6
--- /dev/null
+++ b/amplify/deployment/workflows/blue_green.yaml
@@ -0,0 +1,2 @@
+include:
+  - "$SERVICE_PATH/deployment/workflows/initial.yaml"
\ No newline at end of file
diff --git a/amplify/deployment/workflows/delete.yaml b/amplify/deployment/workflows/delete.yaml
new file mode 100644
index 00000000..5ebe1c20
--- /dev/null
+++ b/amplify/deployment/workflows/delete.yaml
@@ -0,0 +1,6 @@
+steps:
+  - name: tofu
+    type: script
+    file: "$SERVICE_PATH/deployment/module/do_tofu"
+    configuration:
+      ACTION: "destroy"
\ No newline at end of file
diff --git a/amplify/deployment/workflows/finalize.yaml b/amplify/deployment/workflows/finalize.yaml
new file mode 100644
index 00000000..7297d551
--- /dev/null
+++ b/amplify/deployment/workflows/finalize.yaml
@@ -0,0 +1,4 @@
+steps:
+  - name: no_op
+    type: command
+    command: echo "No action needed to create scope"
\ No newline at end of file
diff --git a/amplify/deployment/workflows/initial.yaml b/amplify/deployment/workflows/initial.yaml
new file mode 100644
index 00000000..c978c069
--- /dev/null
+++ b/amplify/deployment/workflows/initial.yaml
@@ -0,0 +1,6 @@
+steps:
+  - name: tofu
+    type: script
+    file: "$SERVICE_PATH/deployment/module/do_tofu"
+    configuration:
+      ACTION: "apply"
\ No newline at end of file
diff --git a/amplify/deployment/workflows/rollback.yaml b/amplify/deployment/workflows/rollback.yaml
new file mode 100644
index 00000000..7297d551
--- /dev/null
+++ b/amplify/deployment/workflows/rollback.yaml
@@ -0,0 +1,4 @@
+steps:
+  - name: no_op
+    type: command
+    command: echo "No action needed to create scope"
\ No newline at end of file
diff --git a/amplify/instance/workflows/list.yaml b/amplify/instance/workflows/list.yaml
new file mode 100644
index 00000000..e69de29b
diff --git a/amplify/log/workflows/log.yaml b/amplify/log/workflows/log.yaml
new file mode 100644
index 00000000..e69de29b
diff --git a/amplify/metric/workflows/list.yaml b/amplify/metric/workflows/list.yaml
new file mode 100644
index 00000000..e69de29b
diff --git a/amplify/metric/workflows/metric.yaml b/amplify/metric/workflows/metric.yaml
new file mode 100644
index 00000000..e69de29b
diff --git a/amplify/scope/workflows/create.yaml b/amplify/scope/workflows/create.yaml
new file mode 100644
index 00000000..7297d551
--- /dev/null
+++ b/amplify/scope/workflows/create.yaml
@@ -0,0 +1,4 @@
+steps:
+  - name: no_op
+    type: command
+    command: echo "No action needed to create scope"
\ No newline at end of file
diff --git a/amplify/scope/workflows/delete.yaml b/amplify/scope/workflows/delete.yaml
new file mode 100644
index 00000000..7dccae8a
--- /dev/null
+++ b/amplify/scope/workflows/delete.yaml
@@ -0,0 +1,4 @@
+steps:
+  - name: no_op
+    type: command
+    command: echo "No action needed to delete scope"
\ No newline at end of file
diff --git a/amplify/scope/workflows/update.yaml b/amplify/scope/workflows/update.yaml
new file mode 100644
index 00000000..4ca8d742
--- /dev/null
+++ b/amplify/scope/workflows/update.yaml
@@ -0,0 +1,4 @@
+steps:
+  - name: no_op
+    type: command
+    command: echo "No action needed to update scope"
\ No newline at end of file
diff --git a/amplify/specs/actions/create-scope.json.tpl b/amplify/specs/actions/create-scope.json.tpl
new file mode 100644
index 00000000..4c0fb3a6
--- /dev/null
+++ b/amplify/specs/actions/create-scope.json.tpl
@@ -0,0 +1,29 @@
+{
+  "name": "create-scope",
+  "slug": "create-scope",
+  "type": "create",
+  "retryable": false,
+  "service_specification_id": "{{ env.Getenv "SERVICE_SPECIFICATION_ID" }}",
+  "parameters": {
+    "schema": {
+      "type": "object",
+      "required": [
+        "scope_id"
+      ],
+      "properties": {
+        "scope_id": {
+          "type": "string"
+        }
+      }
+    },
+    "values": {}
+  },
+  "results": {
+    "schema": {
+      "type": "object",
+      "required": [],
+      "properties": {}
+    },
+    "values": {}
+  }
+}
\ No newline at end of file
diff --git a/amplify/specs/actions/delete-deployment.json.tpl b/amplify/specs/actions/delete-deployment.json.tpl
new file mode 100644
index 00000000..0334b10c
--- /dev/null
+++ b/amplify/specs/actions/delete-deployment.json.tpl
@@ -0,0 +1,33 @@
+{
+  "name": "delete-deployment",
+  "slug": "delete-deployment",
+  "type": "custom",
+  "retryable": false,
+  "service_specification_id": "{{ env.Getenv "SERVICE_SPECIFICATION_ID" }}",
+  "parameters": {
+    "schema": {
+      "type": "object",
+      "required": [
+        "scope_id",
+        "deployment_id"
+      ],
+      "properties": {
+        "scope_id": {
+          "type": "string"
+        },
+        "deployment_id": {
+          "type": "string"
+        }
+      }
+    },
+    "values": {}
+  },
+  "results": {
+    "schema": {
+      "type": "object",
+      "required": [],
+      "properties": {}
+    },
+    "values": {}
+  }
+}
\ No newline at end of file
diff --git a/amplify/specs/actions/delete-scope.json.tpl b/amplify/specs/actions/delete-scope.json.tpl
new file mode 100644
index 00000000..16d9b992
--- /dev/null
+++ b/amplify/specs/actions/delete-scope.json.tpl
@@ -0,0 +1,29 @@
+{
+  "name": "delete-scope",
+  "slug": "delete-scope",
+  "type": "custom",
+  "retryable": false,
+  "service_specification_id": "{{ env.Getenv "SERVICE_SPECIFICATION_ID" }}",
+  "parameters": {
+    "schema": {
+      "type": "object",
+      "required": [
+        "scope_id"
+      ],
+      "properties": {
+        "scope_id": {
+          "type": "string"
+        }
+      }
+    },
+    "values": {}
+  },
+  "results": {
+    "schema": {
+      "type": "object",
+      "required": [],
+      "properties": {}
+    },
+    "values": {}
+  }
+}
\ No newline at end of file
diff --git a/amplify/specs/actions/finalize-blue-green.json.tpl b/amplify/specs/actions/finalize-blue-green.json.tpl
new file mode 100644
index 00000000..4dc780cb
--- /dev/null
+++ b/amplify/specs/actions/finalize-blue-green.json.tpl
@@ -0,0 +1,33 @@
+{
+  "name": "finalize-blue-green",
+  "slug": "finalize-blue-green",
+  "type": "custom",
+  "retryable": false,
+  "service_specification_id": "{{ env.Getenv "SERVICE_SPECIFICATION_ID" }}",
+  "parameters": {
+    "schema": {
+      "type": "object",
+      "required": [
+        "scope_id",
+        "deployment_id"
+      ],
+      "properties": {
+        "scope_id": {
+          "type": "string"
+        },
+        "deployment_id": {
+          "type": "string"
+        }
+      }
+    },
+    "values": {}
+  },
+  "results": {
+    "schema": {
+      "type": "object",
+      "required": [],
+      "properties": {}
+    },
+    "values": {}
+  }
+}
\ No newline at end of file
diff --git a/amplify/specs/actions/rollback-deployment.json.tpl b/amplify/specs/actions/rollback-deployment.json.tpl
new file mode 100644
index 00000000..dcbf4cd1
--- /dev/null
+++ b/amplify/specs/actions/rollback-deployment.json.tpl
@@ -0,0 +1,33 @@
+{
+  "name": "rollback-deployment",
+  "slug": "rollback-deployment",
+  "type": "custom",
+  "retryable": false,
+  "service_specification_id": "{{ env.Getenv "SERVICE_SPECIFICATION_ID" }}",
+  "parameters": {
+    "schema": {
+      "type": "object",
+      "required": [
+        "scope_id",
+        "deployment_id"
+      ],
+      "properties": {
+        "scope_id": {
+          "type": "string"
+        },
+        "deployment_id": {
+          "type": "string"
+        }
+      }
+    },
+    "values": {}
+  },
+  "results": {
+    "schema": {
+      "type": "object",
+      "required": [],
+      "properties": {}
+    },
+    "values": {}
+  }
+}
\ No newline at end of file
diff --git a/amplify/specs/actions/start-blue-green.json.tpl b/amplify/specs/actions/start-blue-green.json.tpl
new file mode 100644
index 00000000..a5e387b5
--- /dev/null
+++ b/amplify/specs/actions/start-blue-green.json.tpl
@@ -0,0 +1,33 @@
+{
+  "name": "start-blue-green",
+  "slug": "start-blue-green",
+  "type": "custom",
+  "retryable": false,
+  "service_specification_id": "{{ env.Getenv "SERVICE_SPECIFICATION_ID" }}",
+  "parameters": {
+    "schema": {
+      "type": "object",
+      "required": [
+        "scope_id",
+        "deployment_id"
+      ],
+      "properties": {
+        "scope_id": {
+          "type": "string"
+        },
+        "deployment_id": {
+          "type": "string"
+        }
+      }
+    },
+    "values": {}
+  },
+  "results": {
+    "schema": {
+      "type": "object",
+      "required": [],
+      "properties": {}
+    },
+    "values": {}
+  }
+}
\ No newline at end of file
diff --git a/amplify/specs/actions/start-initial.json.tpl b/amplify/specs/actions/start-initial.json.tpl
new file mode 100644
index 00000000..b00708e0
--- /dev/null
+++ b/amplify/specs/actions/start-initial.json.tpl
@@ -0,0 +1,32 @@
+{
+  "name": "start-initial",
+  "slug": "start-initial",
+  "type": "custom",
+  "service_specification_id": "{{ env.Getenv "SERVICE_SPECIFICATION_ID" }}",
+  "parameters": {
+    "schema": {
+      "type": "object",
+      "required": [
+        "scope_id",
+        "deployment_id"
+      ],
+      "properties": {
+        "scope_id": {
+          "type": "string"
+        },
+        "deployment_id": {
+          "type": "string"
+        }
+      }
+    },
+    "values": {}
+  },
+  "results": {
+    "schema": {
+      "type": "object",
+      "required": [],
+      "properties": {}
+    },
+    "values": {}
+  }
+}
\ No newline at end of file
diff --git a/amplify/specs/notification-channel.json.tpl b/amplify/specs/notification-channel.json.tpl
new file mode 100644
index 00000000..ee3c7986
--- /dev/null
+++ b/amplify/specs/notification-channel.json.tpl
@@ -0,0 +1,34 @@
+{
+  "nrn": "{{ env.Getenv "NRN" }}",
+  "status": "active",
+  "type": "agent",
+  "source": [
+    "telemetry",
+    "service"
+  ],
+  "configuration": {
+      "api_key": "{{ env.Getenv "NP_API_KEY" }}",
+      "command": {
+        "data": {
+          "cmdline": "{{ env.Getenv "REPO_PATH" }}/entrypoint --service-path={{ env.Getenv "REPO_PATH" }}/{{ env.Getenv "SERVICE_PATH" }}",
+          "environment": {
+            "NP_ACTION_CONTEXT": "'${NOTIFICATION_CONTEXT}'"
+          }
+        },
+        "type": "exec"
+      },
+      "selector": {
+        "environment": "{{ env.Getenv "ENVIRONMENT" }}"
+      }
+  },
+  "filters": {
+    "$or": [
+      {
+        "service.specification.slug": "{{ env.Getenv "SERVICE_SLUG" }}"
+      },
+      {
+        "arguments.scope_provider": "{{ env.Getenv "SERVICE_SPECIFICATION_ID" }}"
+      }
+    ]
+  }
+}
\ No newline at end of file
diff --git a/amplify/specs/scope-type-definition.json.tpl b/amplify/specs/scope-type-definition.json.tpl
new file mode 100644
index 00000000..2d3be235
--- /dev/null
+++ b/amplify/specs/scope-type-definition.json.tpl
@@ -0,0 +1,9 @@
+{
+  "description": "Allows you to deploy frontend applications",
+  "name": "Frontends",
+  "nrn": "{{ env.Getenv "NRN" }}",
+  "provider_id": "{{ env.Getenv "SERVICE_SPECIFICATION_ID" }}",
+  "provider_type": "service",
+  "status": "active",
+  "type": "custom"
+}
\ No newline at end of file
diff --git a/amplify/specs/service-spec.json.tpl b/amplify/specs/service-spec.json.tpl
new file mode 100644
index 00000000..e51a9456
--- /dev/null
+++ b/amplify/specs/service-spec.json.tpl
@@ -0,0 +1,34 @@
+{
+  "assignable_to": "any",
+  "attributes": {
+    "schema": {
+      "properties": {
+        "asset_type": {
+          "default": "bundle",
+          "export": false,
+          "type": "string"
+        }
+      },
+      "required": [],
+      "uiSchema": {
+        "elements": [],
+        "type": "VerticalLayout"
+      }
+    },
+    "values": {}
+  },
+  "dimensions": {},
+  "name": "Frontend",
+  "scopes": {},
+  "selectors": {
+    "category": "Scope",
+    "imported": false,
+    "provider": "AWS",
+    "sub_category": "Amplify"
+  },
+  "type": "scope",
+  "use_default_actions": false,
+  "visible_to": [
+    "{{ env.Getenv "NRN" }}"
+  ]
+}
\ No newline at end of file

From 7ec29b04314fb1ea765df58814b23a4f778edcd0 Mon Sep 17 00:00:00 2001
From: Federico Maleh <fedemaleh@yahoo.com.ar>
Date: Sat, 13 Dec 2025 04:40:16 -0300
Subject: [PATCH 2/3] Fix workflows

---
 amplify/scope/no_op                 | 3 +++
 amplify/scope/workflows/create.yaml | 2 +-
 amplify/scope/workflows/delete.yaml | 6 ++----
 amplify/scope/workflows/update.yaml | 6 ++----
 4 files changed, 8 insertions(+), 9 deletions(-)
 create mode 100755 amplify/scope/no_op

diff --git a/amplify/scope/no_op b/amplify/scope/no_op
new file mode 100755
index 00000000..c6918a62
--- /dev/null
+++ b/amplify/scope/no_op
@@ -0,0 +1,3 @@
+#!/bin/bash
+
+echo "No action needed on this scope"
\ No newline at end of file
diff --git a/amplify/scope/workflows/create.yaml b/amplify/scope/workflows/create.yaml
index 7297d551..1353c84c 100644
--- a/amplify/scope/workflows/create.yaml
+++ b/amplify/scope/workflows/create.yaml
@@ -1,4 +1,4 @@
 steps:
   - name: no_op
     type: command
-    command: echo "No action needed to create scope"
\ No newline at end of file
+    command: "$SERVICE_PATH/scope/no_op"
\ No newline at end of file
diff --git a/amplify/scope/workflows/delete.yaml b/amplify/scope/workflows/delete.yaml
index 7dccae8a..5cd04cd7 100644
--- a/amplify/scope/workflows/delete.yaml
+++ b/amplify/scope/workflows/delete.yaml
@@ -1,4 +1,2 @@
-steps:
-  - name: no_op
-    type: command
-    command: echo "No action needed to delete scope"
\ No newline at end of file
+include:
+  - "$SERVICE_PATH/scope/workflows/create.yaml"
\ No newline at end of file
diff --git a/amplify/scope/workflows/update.yaml b/amplify/scope/workflows/update.yaml
index 4ca8d742..5cd04cd7 100644
--- a/amplify/scope/workflows/update.yaml
+++ b/amplify/scope/workflows/update.yaml
@@ -1,4 +1,2 @@
-steps:
-  - name: no_op
-    type: command
-    command: echo "No action needed to update scope"
\ No newline at end of file
+include:
+  - "$SERVICE_PATH/scope/workflows/create.yaml"
\ No newline at end of file

From a48d0b95e54a919c6ab039c8cded79b5f114bf39 Mon Sep 17 00:00:00 2001
From: Federico Maleh <fedemaleh@yahoo.com.ar>
Date: Sat, 13 Dec 2025 04:53:57 -0300
Subject: [PATCH 3/3] Generate domain based on hosted zone

---
 amplify/deployment/module/do_tofu         | 8 ++++++--
 amplify/deployment/workflows/delete.yaml  | 2 ++
 amplify/deployment/workflows/initial.yaml | 2 ++
 3 files changed, 10 insertions(+), 2 deletions(-)

diff --git a/amplify/deployment/module/do_tofu b/amplify/deployment/module/do_tofu
index 8278295b..50086d04 100755
--- a/amplify/deployment/module/do_tofu
+++ b/amplify/deployment/module/do_tofu
@@ -32,8 +32,12 @@ RESOURCE_TAGS_JSON=$(echo "$CONTEXT" | jq \
      deployment_id: .deployment.id
      }')
 
-DOMAIN="kwik-e-mart-main.nullapps.io"
-SUBDOMAIN="graviton-amplify"
+ HOSTED_PUBLIC_ZONE_ID=$(echo "$CONTEXT" | jq -r '.providers["cloud-providers"].networking.hosted_public_zone_id')
+
+DOMAIN=$(aws route53 get-hosted-zone --id "$HOSTED_PUBLIC_ZONE_ID" --query 'HostedZone.Name' --output text | sed 's/\.$//')
+SUBDOMAIN="$APPLICATION_SLUG-$SCOPE_SLUG"
+
+np scope patch --id "$SCOPE_ID" --body "{\"domain\":\"$SUBDOMAIN.$DOMAIN\"}"
 
 #echo $APPLICATION_SLUG
 #echo $SCOPE_SLUG
diff --git a/amplify/deployment/workflows/delete.yaml b/amplify/deployment/workflows/delete.yaml
index 5ebe1c20..de460983 100644
--- a/amplify/deployment/workflows/delete.yaml
+++ b/amplify/deployment/workflows/delete.yaml
@@ -1,3 +1,5 @@
+provider_categories:
+  - cloud-providers
 steps:
   - name: tofu
     type: script
diff --git a/amplify/deployment/workflows/initial.yaml b/amplify/deployment/workflows/initial.yaml
index c978c069..6adeaf6a 100644
--- a/amplify/deployment/workflows/initial.yaml
+++ b/amplify/deployment/workflows/initial.yaml
@@ -1,3 +1,5 @@
+provider_categories:
+  - cloud-providers
 steps:
   - name: tofu
     type: script