@action-llama/action-llama 0.10.2 → 0.11.0

package/dist/cloud/scheduler-image.js.map

@@ -1 +1 @@
-{"version":3,"file":"scheduler-image.js","sourceRoot":"","sources":["../../src/cloud/scheduler-image.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAC/F,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AAGpC,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAG3D,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAUrF;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,WAAmB;IAC9C,MAAM,KAAK,GAA2B,EAAE,CAAC;IAEzC,cAAc;IACd,MAAM,UAAU,GAAG,WAAW,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAC3D,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,KAAK,CAAC,aAAa,CAAC,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC3D,CAAC;IAED,yBAAyB;IACzB,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7C,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,cAAc;YAAE,SAAS;QAChE,MAAM,SAAS,GAAG,WAAW,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;YAAE,SAAS;QAEjD,uDAAuD;QACvD,MAAM,eAAe,GAAG,WAAW,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;QACpE,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;YAAE,SAAS;QAE3C,mEAAmE;QACnE,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1C,MAAM,QAAQ,GAAG,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAC9C,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE;gBAAE,SAAS;YAC3C,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB;IACzB,OAAO;QACL,iDAAiD;QACjD,EAAE;QACF,qEAAqE;QACrE,gDAAgD;QAChD,oCAAoC;QACpC,EAAE;QACF,cAAc;QACd,sBAAsB;QACtB,8BAA8B;QAC9B,oBAAoB;QACpB,EAAE;QACF,2EAA2E;QAC3E,uEAAuE;QACvE,2BAA2B;QAC3B,EAAE;QACF,gEAAgE;QAChE,qFAAqF;QACrF,0CAA0C;QAC1C,EAAE;QACF,aAAa;QACb,EAAE;QACF,qDAAqD;QACrD,iEAAiE;QACjE,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAwB;IAChE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IAE1D,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAC3C,UAAU,EAAE,CAAC,0BAA0B,CAAC,CAAC;IAEzC,MAAM,YAAY,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;IACtD,MAAM,iBAAiB,GAAG,kBAAkB,EAAE,CAAC;IAE/C,qEAAqE;IACrE,qEAAqE;IACrE,6BAA6B;IAC7B,MAAM,UAAU,GAA2B,EAAE,CAAC;IAC9C,KAAK,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9D,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,GAAG,OAAO,CAAC;IACjD,CAAC;IAED,yEAAyE;IACzE,6EAA6E;IAC7E,gEAAgE;IAChE,MAAM,kBAAkB,GAAG,WAAW,CAAC,WAAW,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC5E,IAAI,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACnC,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,GAAG,YAAY,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,MAAM,GAAG,WAAW,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IACzD,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACvB,KAAK,MAAM,MAAM,IAAI,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;YACzC,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,GAAG,YAAY,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;QACjG,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,2EAA2E;IAC3E,uEAAuE;IACvE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,2BAA2B,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5F,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,aAAa,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAC;IAEhD,MAAM,GAAG,GAAG,aAAa,CAAC,eAAe,CAAC;IAE1C,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC;QACrC,GAAG;QACH,UAAU,EAAE,aAAa;QACzB,UAAU,EAAE,WAAW;QACvB,UAAU;QACV,UAAU;KACX,CAAC,CAAC;IAEH,0BAA0B;IAC1B,UAAU,EAAE,CAAC,yBAAyB,CAAC,CAAC;IACxC,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACnD,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,wBAAwB,CAAC,CAAC;IAE9D,OAAO,WAAW,CAAC;AACrB,CAAC"}
+{"version":3,"file":"scheduler-image.js","sourceRoot":"","sources":["../../src/cloud/scheduler-image.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAC/F,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AAGpC,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAGnD,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAUrF;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,WAAmB;IAC9C,MAAM,KAAK,GAA2B,EAAE,CAAC;IAEzC,cAAc;IACd,MAAM,UAAU,GAAG,WAAW,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAC3D,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,KAAK,CAAC,aAAa,CAAC,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC3D,CAAC;IAED,0CAA0C;IAC1C,MAAM,qBAAqB,GAAG,WAAW,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IACrE,IAAI,UAAU,CAAC,qBAAqB,CAAC,EAAE,CAAC;QACtC,KAAK,CAAC,YAAY,CAAC,GAAG,YAAY,CAAC,qBAAqB,EAAE,OAAO,CAAC,CAAC;IACrE,CAAC;IAED,yBAAyB;IACzB,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7C,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,cAAc;YAAE,SAAS;QAChE,MAAM,SAAS,GAAG,WAAW,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;YAAE,SAAS;QAEjD,uDAAuD;QACvD,MAAM,eAAe,GAAG,WAAW,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;QACpE,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;YAAE,SAAS;QAE3C,mEAAmE;QACnE,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1C,MAAM,QAAQ,GAAG,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAC9C,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE;gBAAE,SAAS;YAC3C,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB;IACzB,OAAO;QACL,iFAAiF;QACjF,yDAAyD;QACzD,EAAE;QACF,cAAc;QACd,sBAAsB;QACtB,8BAA8B;QAC9B,EAAE;QACF,qDAAqD;QACrD,iDAAiD;QACjD,EAAE;QACF,qEAAqE;QACrE,gDAAgD;QAChD,oCAAoC;QACpC,EAAE;QACF,cAAc;QACd,mDAAmD;QACnD,sBAAsB;QACtB,oBAAoB;QACpB,EAAE;QACF,2EAA2E;QAC3E,uEAAuE;QACvE,2BAA2B;QAC3B,EAAE;QACF,gEAAgE;QAChE,qFAAqF;QACrF,0CAA0C;QAC1C,EAAE;QACF,aAAa;QACb,EAAE;QACF,qDAAqD;QACrD,iEAAiE;QACjE,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAwB;IAChE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IAE1D,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAC3C,UAAU,EAAE,CAAC,0BAA0B,CAAC,CAAC;IAEzC,MAAM,YAAY,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;IACtD,MAAM,iBAAiB,GAAG,kBAAkB,EAAE,CAAC;IAE/C,qEAAqE;IACrE,qEAAqE;IACrE,6BAA6B;IAC7B,MAAM,UAAU,GAA2B,EAAE,CAAC;IAC9C,KAAK,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9D,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,GAAG,OAAO,CAAC;IACjD,CAAC;IAED,yEAAyE;IACzE,6EAA6E;IAC7E,gEAAgE;IAChE,MAAM,kBAAkB,GAAG,WAAW,CAAC,WAAW,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC5E,IAAI,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACnC,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,GAAG,YAAY,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,MAAM,GAAG,WAAW,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IACzD,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACvB,KAAK,MAAM,MAAM,IAAI,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;YACzC,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,GAAG,YAAY,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;QACjG,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,2EAA2E;IAC3E,uEAAuE;IACvE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,2BAA2B,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5F,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,aAAa,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAC;IAEhD,MAAM,GAAG,GAAG,SAAS,CAAC,eAAe,CAAC;IAEtC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC;QACrC,GAAG;QACH,UAAU,EAAE,aAAa;QACzB,UAAU,EAAE,WAAW;QACvB,UAAU;QACV,UAAU;KACX,CAAC,CAAC;IAEH,0BAA0B;IAC1B,UAAU,EAAE,CAAC,yBAAyB,CAAC,CAAC;IACxC,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACnD,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,wBAAwB,CAAC,CAAC;IAE9D,OAAO,WAAW,CAAC;AACrB,CAAC"}

package/dist/cloud/state.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Cloud provisioning state persistence.
+ * Stores provisioned resource information at ~/.action-llama/state/<project-hash>.json.
+ */
+import type { ProvisionedResource } from "./provider.js";
+export interface ProvisionedState {
+    projectPath: string;
+    provider: "ecs" | "cloud-run";
+    createdAt: string;
+    updatedAt: string;
+    resources: ProvisionedResource[];
+}
+export declare function loadState(projectPath: string): ProvisionedState | null;
+export declare function saveState(state: ProvisionedState): void;
+export declare function deleteState(projectPath: string): void;
+export declare function createState(projectPath: string, provider: "ecs" | "cloud-run", resources: ProvisionedResource[]): ProvisionedState;
+//# sourceMappingURL=state.d.ts.map

package/dist/cloud/state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../src/cloud/state.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAEzD,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,KAAK,GAAG,WAAW,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,mBAAmB,EAAE,CAAC;CAClC;AAUD,wBAAgB,SAAS,CAAC,WAAW,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI,CAQtE;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,gBAAgB,GAAG,IAAI,CAKvD;AAED,wBAAgB,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAKrD;AAED,wBAAgB,WAAW,CACzB,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,KAAK,GAAG,WAAW,EAC7B,SAAS,EAAE,mBAAmB,EAAE,GAC/B,gBAAgB,CASlB"}

package/dist/cloud/state.js

@@ -0,0 +1,48 @@
+/**
+ * Cloud provisioning state persistence.
+ * Stores provisioned resource information at ~/.action-llama/state/<project-hash>.json.
+ */
+import { createHash } from "crypto";
+import { existsSync, readFileSync, writeFileSync, mkdirSync, unlinkSync } from "fs";
+import { resolve } from "path";
+import { STATE_DIR } from "../shared/paths.js";
+function projectHash(projectPath) {
+    return createHash("sha256").update(projectPath).digest("hex").slice(0, 12);
+}
+function stateFilePath(projectPath) {
+    return resolve(STATE_DIR, `${projectHash(projectPath)}.json`);
+}
+export function loadState(projectPath) {
+    const filePath = stateFilePath(projectPath);
+    if (!existsSync(filePath))
+        return null;
+    try {
+        return JSON.parse(readFileSync(filePath, "utf-8"));
+    }
+    catch {
+        return null;
+    }
+}
+export function saveState(state) {
+    mkdirSync(STATE_DIR, { recursive: true });
+    const filePath = stateFilePath(state.projectPath);
+    state.updatedAt = new Date().toISOString();
+    writeFileSync(filePath, JSON.stringify(state, null, 2));
+}
+export function deleteState(projectPath) {
+    const filePath = stateFilePath(projectPath);
+    if (existsSync(filePath)) {
+        unlinkSync(filePath);
+    }
+}
+export function createState(projectPath, provider, resources) {
+    const now = new Date().toISOString();
+    return {
+        projectPath,
+        provider,
+        createdAt: now,
+        updatedAt: now,
+        resources,
+    };
+}
+//# sourceMappingURL=state.js.map

package/dist/cloud/state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.js","sourceRoot":"","sources":["../../src/cloud/state.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AACpF,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/B,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAW/C,SAAS,WAAW,CAAC,WAAmB;IACtC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,aAAa,CAAC,WAAmB;IACxC,OAAO,OAAO,CAAC,SAAS,EAAE,GAAG,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,WAAmB;IAC3C,MAAM,QAAQ,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;IAC5C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAqB,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAuB;IAC/C,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAClD,KAAK,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,WAAmB;IAC7C,MAAM,QAAQ,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;IAC5C,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,UAAU,CAAC,QAAQ,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,WAAmB,EACnB,QAA6B,EAC7B,SAAgC;IAEhC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,OAAO;QACL,WAAW;QACX,QAAQ;QACR,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG;QACd,SAAS;KACV,CAAC;AACJ,CAAC"}

package/dist/docker/aws-shared.d.ts

@@ -4,7 +4,7 @@
  * Extracted from ECSFargateRuntime to avoid duplicating CodeBuild,
  * ECR, Secrets Manager, and S3 logic across runtimes.
  */
-import type { RuntimeCredentials, BuildImageOpts } from "./runtime.js";
+import type { RuntimeCredentials, BuildImageOpts, AssembleImageOpts } from "./runtime.js";
 export interface AwsSharedConfig {
     awsRegion: string;
     ecrRepository: string;
@@ -33,6 +33,9 @@ export declare class AwsSharedUtils {
     ensureBuildBucket(): Promise<string>;
     ensureCodeBuildProject(projectName: string, bucket: string): Promise<void>;
     buildImageCodeBuild(opts: BuildImageOpts, onProgress?: (message: string) => void): Promise<string>;
+    assembleImageDirect(opts: AssembleImageOpts): Promise<string>;
+    private uploadBlob;
+    buildMultipleImagesCodeBuild(builds: BuildImageOpts[], onProgress?: (message: string) => void): Promise<string[]>;
     private logGroupsCreated;
     ensureLogGroup(logGroupName: string): Promise<void>;
     getLogEvents(logGroup: string, logStream: string, nextToken?: string): Promise<{
@@ -43,9 +46,8 @@ export declare class AwsSharedUtils {
     }>;
     /**
      * Scan log events in a time window using FilterLogEvents.
-     * Returns events in ascending order — suitable for scanning for specific
-     * patterns (e.g. REPORT lines in waitForExit). Uses nextToken to paginate
-     * through all matching events rather than capping at `limit` oldest entries.
+     * Returns events in ascending order. Uses time-bounded queries and limits
+     * to improve performance by starting with a narrower time window.
      */
     filterLogEvents(logGroupName: string, logStreamPrefix: string, limit: number, startTime?: number): Promise<string[]>;
     /**

package/dist/docker/aws-shared.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"aws-shared.d.ts","sourceRoot":"","sources":["../../src/docker/aws-shared.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAiCH,OAAO,KAAK,EAAE,kBAAkB,EAAe,cAAc,EAAE,MAAM,cAAc,CAAC;AAEpF,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,qBAAa,cAAc;IACzB,OAAO,CAAC,MAAM,CAAkB;IAChC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,QAAQ,CAAuB;IACvC,OAAO,CAAC,UAAU,CAAuB;IACzC,OAAO,CAAC,QAAQ,CAAkB;IAClC,OAAO,CAAC,QAAQ,CAAW;IAC3B,OAAO,CAAC,SAAS,CAAY;gBAEjB,MAAM,EAAE,eAAe;IAcnC,YAAY,IAAI,MAAM;IAOtB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM;IAI9D,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAkBnE,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAmBzE;;;OAGG;IACG,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IA8CxE,cAAc,CAAC,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC;IAgBlH,iBAAiB,IAAI,OAAO,CAAC,MAAM,CAAC;IAuBpC,sBAAsB,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAsC1E,mBAAmB,CAAC,IAAI,EAAE,cAAc,EAAE,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC;IAoOxG,OAAO,CAAC,gBAAgB,CAAqB;IAEvC,cAAc,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUnD,YAAY,CAChB,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC;QAAE,MAAM,EAAE,KAAK,CAAC;YAAE,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAc7E;;;;;OAKG;IACG,eAAe,CAAC,YAAY,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAwB1H;;;;OAIG;IACG,kBAAkB,CACtB,YAAY,EAAE,MAAM,EACpB,eAAe,EAAE,MAAM,EACvB,SAAS,CAAC,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAepD;;;OAGG;IACG,aAAa,CAAC,YAAY,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;CAGrG"}
+{"version":3,"file":"aws-shared.d.ts","sourceRoot":"","sources":["../../src/docker/aws-shared.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAwCH,OAAO,KAAK,EAAE,kBAAkB,EAAe,cAAc,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEvG,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,qBAAa,cAAc;IACzB,OAAO,CAAC,MAAM,CAAkB;IAChC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,QAAQ,CAAuB;IACvC,OAAO,CAAC,UAAU,CAAuB;IACzC,OAAO,CAAC,QAAQ,CAAkB;IAClC,OAAO,CAAC,QAAQ,CAAW;IAC3B,OAAO,CAAC,SAAS,CAAY;gBAEjB,MAAM,EAAE,eAAe;IAcnC,YAAY,IAAI,MAAM;IAOtB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM;IAI9D,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAkBnE,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAmBzE;;;OAGG;IACG,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IA8CxE,cAAc,CAAC,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC;IAgBlH,iBAAiB,IAAI,OAAO,CAAC,MAAM,CAAC;IAuBpC,sBAAsB,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAiD1E,mBAAmB,CAAC,IAAI,EAAE,cAAc,EAAE,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC;IA0OlG,mBAAmB,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC;YAkIrD,UAAU;IAsBlB,4BAA4B,CAChC,MAAM,EAAE,cAAc,EAAE,EACxB,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,GACrC,OAAO,CAAC,MAAM,EAAE,CAAC;IAoOpB,OAAO,CAAC,gBAAgB,CAAqB;IAEvC,cAAc,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUnD,YAAY,CAChB,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC;QAAE,MAAM,EAAE,KAAK,CAAC;YAAE,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAc7E;;;;OAIG;IACG,eAAe,CAAC,YAAY,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IA8C1H;;;;OAIG;IACG,kBAAkB,CACtB,YAAY,EAAE,MAAM,EACpB,eAAe,EAAE,MAAM,EACvB,SAAS,CAAC,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAepD;;;OAGG;IACG,aAAa,CAAC,YAAY,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;CAGrG"}

package/dist/docker/aws-shared.js

@@ -8,11 +8,12 @@ import { execFileSync } from "child_process";
 import { createReadStream } from "fs";
 import { SecretsManagerClient, ListSecretsCommand, GetSecretValueCommand, } from "@aws-sdk/client-secrets-manager";
 import { CloudWatchLogsClient, GetLogEventsCommand, FilterLogEventsCommand, CreateLogGroupCommand, } from "@aws-sdk/client-cloudwatch-logs";
-import { CodeBuildClient, StartBuildCommand, BatchGetBuildsCommand, CreateProjectCommand, } from "@aws-sdk/client-codebuild";
+import { CodeBuildClient, StartBuildCommand, BatchGetBuildsCommand, CreateProjectCommand, UpdateProjectCommand, } from "@aws-sdk/client-codebuild";
 import { S3Client, PutObjectCommand, CreateBucketCommand, HeadBucketCommand, } from "@aws-sdk/client-s3";
-import { ECRClient, BatchGetImageCommand, } from "@aws-sdk/client-ecr";
+import { ECRClient, BatchGetImageCommand, PutImageCommand, GetDownloadUrlForLayerCommand, InitiateLayerUploadCommand, UploadLayerPartCommand, CompleteLayerUploadCommand, } from "@aws-sdk/client-ecr";
 import { parseCredentialRef, sanitizeEnvPart } from "../shared/credentials.js";
-import { AWS_CONSTANTS } from "../shared/aws-constants.js";
+import { CONSTANTS } from "../shared/constants.js";
+import { AWS_CONSTANTS } from "../cloud/aws/constants.js";
 export class AwsSharedUtils {
     config;
     prefix;
@@ -23,7 +24,7 @@ export class AwsSharedUtils {
     ecrClient;
     constructor(config) {
         this.config = config;
-        this.prefix = config.secretPrefix || AWS_CONSTANTS.DEFAULT_SECRET_PREFIX;
+        this.prefix = config.secretPrefix || CONSTANTS.DEFAULT_SECRET_PREFIX;
         const clientConfig = { region: config.awsRegion };
         this.smClient = new SecretsManagerClient(clientConfig);
         this.logsClient = new CloudWatchLogsClient(clientConfig);
@@ -154,6 +155,7 @@ export class AwsSharedUtils {
         }
         catch { }
         const serviceRole = `arn:aws:iam::${accountId}:role/${AWS_CONSTANTS.CODEBUILD_ROLE}`;
+        const cache = { type: "LOCAL", modes: ["LOCAL_DOCKER_LAYER_CACHE"] };
         try {
             await this.cbClient.send(new CreateProjectCommand({
                 name: projectName,
@@ -173,6 +175,7 @@ export class AwsSharedUtils {
                         { name: "DOCKERFILE", value: "Dockerfile" },
                     ],
                 },
+                cache,
                 serviceRole,
             }));
         }
@@ -180,6 +183,16 @@ export class AwsSharedUtils {
             if (err.name !== "ResourceAlreadyExistsException") {
                 throw err;
             }
+            // Project exists — ensure cache config is applied
+            try {
+                await this.cbClient.send(new UpdateProjectCommand({
+                    name: projectName,
+                    cache,
+                }));
+            }
+            catch {
+                // Best-effort — build still works without local cache
+            }
         }
     }
     async buildImageCodeBuild(opts, onProgress) {
@@ -334,6 +347,7 @@ export class AwsSharedUtils {
         const projectName = AWS_CONSTANTS.CODEBUILD_PROJECT;
         await this.ensureCodeBuildProject(projectName, bucket);
         const registry = this.config.ecrRepository.split("/")[0];
+        const cacheTag = `${this.config.ecrRepository}:${nameTag}-cache`;
         const buildspec = [
             "version: 0.2",
             "phases:",
@@ -343,11 +357,14 @@ export class AwsSharedUtils {
             // archive is still present (e.g. when sourceType handling changes).
             "      - if ls *.tar.gz 1>/dev/null 2>&1; then tar xzf *.tar.gz && rm -f *.tar.gz; fi",
             "      - aws ecr get-login-password --region $AWS_DEFAULT_REGION | docker login --username AWS --password-stdin $ECR_REGISTRY",
+            "      - docker pull $CACHE_TAG || true",
             "  build:",
             "    commands:",
             "      - ls -la",
-            "      - docker build -t $IMAGE_URI -f $DOCKERFILE .",
+            "      - docker build --cache-from $CACHE_TAG -t $IMAGE_URI -f $DOCKERFILE .",
             "      - docker push $IMAGE_URI",
+            "      - docker tag $IMAGE_URI $CACHE_TAG",
+            "      - docker push $CACHE_TAG",
         ].join("\n");
         const buildRes = await this.cbClient.send(new StartBuildCommand({
             projectName,
@@ -358,6 +375,7 @@ export class AwsSharedUtils {
                 { name: "IMAGE_URI", value: remoteTag },
                 { name: "ECR_REGISTRY", value: registry },
                 { name: "DOCKERFILE", value: "Dockerfile" },
+                { name: "CACHE_TAG", value: cacheTag },
             ],
         }));
         const buildId = buildRes.build?.id;
@@ -396,6 +414,350 @@ export class AwsSharedUtils {
             }
         }
     }
+    // --- Direct image assembly (bypass CodeBuild for thin agents) ---
+    async assembleImageDirect(opts) {
+        const { join, dirname: dirnameFn } = await import("path");
+        const { mkdirSync, writeFileSync, rmSync, readFileSync: readFileSyncBuf } = await import("fs");
+        const { execFileSync } = await import("child_process");
+        const { createHash, randomUUID } = await import("crypto");
+        const { gzipSync } = await import("zlib");
+        const { tmpdir } = await import("os");
+        // Compute content hash for cache check
+        const hash = createHash("sha256");
+        hash.update(opts.baseImage);
+        const sortedEntries = Object.entries(opts.extraFiles).sort(([a], [b]) => a.localeCompare(b));
+        for (const [name, content] of sortedEntries) {
+            hash.update(name);
+            hash.update(content);
+        }
+        const contentHash = hash.digest("hex").slice(0, 16);
+        const nameTag = opts.tag.replace(":", "-");
+        const hashTag = `${nameTag}-${contentHash}`;
+        const remoteTag = `${this.config.ecrRepository}:${hashTag}`;
+        const repoName = this.config.ecrRepository.split("/").pop();
+        opts.onProgress?.(`Checking cache (${hashTag})`);
+        const exists = await this.ecrImageExists(repoName, hashTag, opts.onProgress);
+        if (exists) {
+            opts.onProgress?.("Image unchanged — reusing cached build");
+            return remoteTag;
+        }
+        opts.onProgress?.("Assembling image directly (no CodeBuild)");
+        // Create temp dir with the layer structure: app/static/...
+        const tmpDir = join(tmpdir(), `al-assemble-${randomUUID().slice(0, 8)}`);
+        mkdirSync(join(tmpDir, "app", "static"), { recursive: true });
+        for (const [filename, content] of Object.entries(opts.extraFiles)) {
+            const filePath = join(tmpDir, "app", "static", filename);
+            mkdirSync(dirnameFn(filePath), { recursive: true });
+            writeFileSync(filePath, content);
+        }
+        // Create layer tar via system tar (consistent with buildImageCodeBuild)
+        const tarPath = join(tmpdir(), `al-layer-${randomUUID().slice(0, 8)}.tar`);
+        try {
+            execFileSync("tar", ["cf", tarPath, "-C", tmpDir, "app"], {
+                timeout: 30_000,
+                env: { ...process.env, COPYFILE_DISABLE: "1" },
+            });
+        }
+        finally {
+            try {
+                rmSync(tmpDir, { recursive: true });
+            }
+            catch { }
+        }
+        const tarBuffer = readFileSyncBuf(tarPath);
+        try {
+            rmSync(tarPath);
+        }
+        catch { }
+        const compressedLayer = gzipSync(tarBuffer);
+        const layerDigest = `sha256:${createHash("sha256").update(compressedLayer).digest("hex")}`;
+        const diffId = `sha256:${createHash("sha256").update(tarBuffer).digest("hex")}`;
+        // Get base image manifest
+        opts.onProgress?.("Fetching base image manifest");
+        const baseTag = opts.baseImage.includes(":")
+            ? opts.baseImage.split(":").pop()
+            : opts.baseImage;
+        const baseRes = await this.ecrClient.send(new BatchGetImageCommand({
+            repositoryName: repoName,
+            imageIds: [{ imageTag: baseTag }],
+        }));
+        if (!baseRes.images?.length)
+            throw new Error(`Base image ${baseTag} not found in ECR`);
+        const manifest = JSON.parse(baseRes.images[0].imageManifest);
+        // Fetch config blob via pre-signed URL
+        opts.onProgress?.("Fetching base image config");
+        const configDigest = manifest.config.digest;
+        const configDownload = await this.ecrClient.send(new GetDownloadUrlForLayerCommand({
+            repositoryName: repoName,
+            layerDigest: configDigest,
+        }));
+        const configRes = await fetch(configDownload.downloadUrl);
+        const configJson = JSON.parse(await configRes.text());
+        // Extend config with our layer
+        configJson.rootfs.diff_ids.push(diffId);
+        configJson.history = configJson.history || [];
+        configJson.history.push({
+            created: new Date().toISOString(),
+            created_by: "action-llama assembleImageDirect",
+        });
+        const newConfigBytes = Buffer.from(JSON.stringify(configJson));
+        const newConfigDigest = `sha256:${createHash("sha256").update(newConfigBytes).digest("hex")}`;
+        // Upload layer blob
+        opts.onProgress?.("Uploading layer");
+        await this.uploadBlob(repoName, layerDigest, compressedLayer);
+        // Upload new config blob
+        await this.uploadBlob(repoName, newConfigDigest, newConfigBytes);
+        // Build and push new manifest
+        const newManifest = {
+            schemaVersion: manifest.schemaVersion,
+            mediaType: manifest.mediaType,
+            config: {
+                mediaType: manifest.config.mediaType,
+                size: newConfigBytes.length,
+                digest: newConfigDigest,
+            },
+            layers: [
+                ...manifest.layers,
+                {
+                    mediaType: "application/vnd.docker.image.rootfs.diff.tar.gzip",
+                    size: compressedLayer.length,
+                    digest: layerDigest,
+                },
+            ],
+        };
+        opts.onProgress?.("Pushing image manifest");
+        await this.ecrClient.send(new PutImageCommand({
+            repositoryName: repoName,
+            imageManifest: JSON.stringify(newManifest),
+            imageTag: hashTag,
+        }));
+        return remoteTag;
+    }
+    async uploadBlob(repoName, digest, data) {
+        const initRes = await this.ecrClient.send(new InitiateLayerUploadCommand({
+            repositoryName: repoName,
+        }));
+        await this.ecrClient.send(new UploadLayerPartCommand({
+            repositoryName: repoName,
+            uploadId: initRes.uploadId,
+            partFirstByte: 0,
+            partLastByte: data.length - 1,
+            layerPartBlob: new Uint8Array(data),
+        }));
+        await this.ecrClient.send(new CompleteLayerUploadCommand({
+            repositoryName: repoName,
+            uploadId: initRes.uploadId,
+            layerDigests: [digest],
+        }));
+    }
+    // --- Batched CodeBuild (multiple images in one job) ---
+    async buildMultipleImagesCodeBuild(builds, onProgress) {
+        if (builds.length === 0)
+            return [];
+        if (builds.length === 1)
+            return [await this.buildImageCodeBuild(builds[0], onProgress)];
+        const { join, isAbsolute, dirname: dirnameFn } = await import("path");
+        const { readFileSync, writeFileSync, mkdirSync, copyFileSync, cpSync, existsSync, rmSync, readdirSync } = await import("fs");
+        const { createHash, randomUUID } = await import("crypto");
+        const { tmpdir } = await import("os");
+        const { execFileSync } = await import("child_process");
+        onProgress?.(`Preparing ${builds.length} build contexts`);
+        const combinedCtx = join(tmpdir(), `al-multi-ctx-${randomUUID().slice(0, 8)}`);
+        mkdirSync(combinedCtx, { recursive: true });
+        // Per-build info: compute hash, check cache, prepare context
+        const buildInfos = [];
+        for (let i = 0; i < builds.length; i++) {
+            const opts = builds[i];
+            const subdir = `build-${i}`;
+            const subPath = join(combinedCtx, subdir);
+            mkdirSync(subPath, { recursive: true });
+            const hasExtraFiles = opts.extraFiles && Object.keys(opts.extraFiles).length > 0;
+            // Prepare Dockerfile
+            let dockerfileContent;
+            if (opts.dockerfileContent) {
+                dockerfileContent = opts.dockerfileContent;
+            }
+            else {
+                const resolvedDockerfile = isAbsolute(opts.dockerfile)
+                    ? opts.dockerfile
+                    : join(opts.contextDir, opts.dockerfile);
+                dockerfileContent = readFileSync(resolvedDockerfile, "utf-8");
+                if (opts.baseImage) {
+                    dockerfileContent = dockerfileContent.replace(/^FROM\s+\S+/m, `FROM ${opts.baseImage}`);
+                }
+            }
+            if (hasExtraFiles && !dockerfileContent.includes("COPY static/ /app/static/")) {
+                const copyLine = "COPY static/ /app/static/";
+                const userIdx = dockerfileContent.indexOf("\nUSER ");
+                if (userIdx !== -1) {
+                    dockerfileContent = dockerfileContent.slice(0, userIdx) + "\n" + copyLine + dockerfileContent.slice(userIdx);
+                }
+                else {
+                    dockerfileContent += "\n" + copyLine + "\n";
+                }
+            }
+            writeFileSync(join(subPath, "Dockerfile"), dockerfileContent);
+            if (!opts.dockerfileContent) {
+                copyFileSync(join(opts.contextDir, "package.json"), join(subPath, "package.json"));
+                cpSync(join(opts.contextDir, "dist"), join(subPath, "dist"), { recursive: true });
+                const binSrc = join(opts.contextDir, "docker", "bin");
+                if (existsSync(binSrc)) {
+                    cpSync(binSrc, join(subPath, "docker", "bin"), { recursive: true });
+                }
+            }
+            if (hasExtraFiles) {
+                const staticDir = join(subPath, "static");
+                mkdirSync(staticDir, { recursive: true });
+                for (const [filename, content] of Object.entries(opts.extraFiles)) {
+                    const filePath = join(staticDir, filename);
+                    mkdirSync(dirnameFn(filePath), { recursive: true });
+                    writeFileSync(filePath, content);
+                }
+            }
+            // Compute content hash (same algorithm as buildImageCodeBuild)
+            const hash = createHash("sha256");
+            const hashFile = (p) => { hash.update(p); hash.update(readFileSync(join(subPath, p))); };
+            const hashDir = (dir) => {
+                const entries = readdirSync(join(subPath, dir), { withFileTypes: true })
+                    .sort((a, b) => a.name.localeCompare(b.name));
+                for (const entry of entries) {
+                    const p = join(dir, entry.name);
+                    if (entry.isDirectory())
+                        hashDir(p);
+                    else
+                        hashFile(p);
+                }
+            };
+            hash.update("Dockerfile");
+            hash.update(readFileSync(join(subPath, "Dockerfile")));
+            if (!opts.dockerfileContent) {
+                hashFile("package.json");
+                hashDir("dist");
+                if (existsSync(join(subPath, "docker")))
+                    hashDir("docker");
+            }
+            if (hasExtraFiles)
+                hashDir("static");
+            const contentHash = hash.digest("hex").slice(0, 16);
+            const nameTag = opts.tag.replace(":", "-");
+            const hashTag = `${nameTag}-${contentHash}`;
+            const remoteTag = `${this.config.ecrRepository}:${hashTag}`;
+            buildInfos.push({ idx: i, remoteTag, hashTag, nameTag, cached: false, subdir });
+        }
+        // Check cache for all builds in parallel
+        const repoName = this.config.ecrRepository.split("/").pop();
+        const cacheResults = await Promise.all(buildInfos.map(info => this.ecrImageExists(repoName, info.hashTag, onProgress)));
+        for (let i = 0; i < buildInfos.length; i++) {
+            buildInfos[i].cached = cacheResults[i];
+        }
+        const uncached = buildInfos.filter(b => !b.cached);
+        if (uncached.length === 0) {
+            onProgress?.("All images unchanged — reusing cached builds");
+            try {
+                rmSync(combinedCtx, { recursive: true });
+            }
+            catch { }
+            return buildInfos.map(b => b.remoteTag);
+        }
+        onProgress?.(`Cache: ${buildInfos.length - uncached.length} hit, ${uncached.length} miss — building`);
+        // Tar only uncached build subdirs
+        const tarEntries = uncached.map(b => b.subdir);
+        const tarPath = join(tmpdir(), `al-multi-${randomUUID().slice(0, 8)}.tar.gz`);
+        try {
+            execFileSync("tar", ["czf", tarPath, "-C", combinedCtx, ...tarEntries], {
+                timeout: 120_000,
+                env: { ...process.env, COPYFILE_DISABLE: "1" },
+            });
+        }
+        finally {
+            try {
+                rmSync(combinedCtx, { recursive: true });
+            }
+            catch { }
+        }
+        onProgress?.("Uploading combined build context to S3");
+        const bucket = await this.ensureBuildBucket();
+        const s3Key = `${AWS_CONSTANTS.BUILD_S3_PREFIX}/multi-${Date.now()}.tar.gz`;
+        await this.s3Client.send(new PutObjectCommand({
+            Bucket: bucket,
+            Key: s3Key,
+            Body: createReadStream(tarPath),
+        }));
+        try {
+            rmSync(tarPath);
+        }
+        catch { }
+        const projectName = AWS_CONSTANTS.CODEBUILD_PROJECT;
+        await this.ensureCodeBuildProject(projectName, bucket);
+        const registry = this.config.ecrRepository.split("/")[0];
+        // Generate multi-image buildspec
+        const buildCommands = uncached.flatMap((b) => {
+            const cacheTag = `${this.config.ecrRepository}:${b.nameTag}-cache`;
+            return [
+                `echo "Building ${b.subdir}: ${b.remoteTag}"`,
+                `docker pull ${cacheTag} || true`,
+                `docker build --cache-from ${cacheTag} -t ${b.remoteTag} -f ${b.subdir}/Dockerfile ${b.subdir}`,
+                `docker push ${b.remoteTag}`,
+                `docker tag ${b.remoteTag} ${cacheTag}`,
+                `docker push ${cacheTag}`,
+            ];
+        });
+        const buildspec = [
+            "version: 0.2",
+            "phases:",
+            "  pre_build:",
+            "    commands:",
+            "      - if ls *.tar.gz 1>/dev/null 2>&1; then tar xzf *.tar.gz && rm -f *.tar.gz; fi",
+            `      - aws ecr get-login-password --region $AWS_DEFAULT_REGION | docker login --username AWS --password-stdin ${registry}`,
+            "  build:",
+            "    commands:",
+            ...buildCommands.map(cmd => `      - ${cmd}`),
+        ].join("\n");
+        const buildRes = await this.cbClient.send(new StartBuildCommand({
+            projectName,
+            sourceTypeOverride: "S3",
+            sourceLocationOverride: `${bucket}/${s3Key}`,
+            buildspecOverride: buildspec,
+            environmentVariablesOverride: [
+                { name: "ECR_REGISTRY", value: registry },
+            ],
+        }));
+        const buildId = buildRes.build?.id;
+        if (!buildId)
+            throw new Error("CodeBuild did not return a build ID");
+        onProgress?.(`Queued — building ${uncached.length} images in CodeBuild`);
+        while (true) {
+            await sleep(10_000);
+            const status = await this.cbClient.send(new BatchGetBuildsCommand({ ids: [buildId] }));
+            const build = status.builds?.[0];
+            if (!build)
+                throw new Error(`CodeBuild build ${buildId} not found`);
+            if (build.currentPhase) {
+                const phaseLabels = {
+                    SUBMITTED: "Submitted",
+                    QUEUED: "Queued",
+                    PROVISIONING: "Provisioning build environment",
+                    DOWNLOAD_SOURCE: "Downloading source",
+                    INSTALL: "Installing dependencies",
+                    PRE_BUILD: "Logging in to ECR",
+                    BUILD: `Building ${uncached.length} images`,
+                    POST_BUILD: "Finalizing",
+                    UPLOAD_ARTIFACTS: "Uploading artifacts",
+                    FINALIZING: "Finalizing",
+                    COMPLETED: "Complete",
+                };
+                const label = phaseLabels[build.currentPhase] || build.currentPhase;
+                onProgress?.(label);
+            }
+            if (build.buildComplete) {
+                if (build.buildStatus !== "SUCCEEDED") {
+                    const logs = build.logs?.deepLink || "";
+                    throw new Error(`CodeBuild batch build failed (${build.buildStatus}). Logs: ${logs}`);
+                }
+                return buildInfos.map(b => b.remoteTag);
+            }
+        }
+    }
     // --- CloudWatch Logs ---
     logGroupsCreated = new Set();
     async ensureLogGroup(logGroupName) {
@@ -424,28 +786,48 @@ export class AwsSharedUtils {
     }
     /**
      * Scan log events in a time window using FilterLogEvents.
-     * Returns events in ascending order — suitable for scanning for specific
-     * patterns (e.g. REPORT lines in waitForExit). Uses nextToken to paginate
-     * through all matching events rather than capping at `limit` oldest entries.
+     * Returns events in ascending order. Uses time-bounded queries and limits
+     * to improve performance by starting with a narrower time window.
      */
     async filterLogEvents(logGroupName, logStreamPrefix, limit, startTime) {
-        startTime ??= Date.now() - 24 * 3600_000; // default: last 24 hours
+        // Start with a narrow time window (last 1 hour) for better performance
+        let queryStartTime = startTime ?? (Date.now() - 3600_000); // last 1 hour
+        const fallbackStartTime = startTime ?? (Date.now() - 24 * 3600_000); // last 24 hours
         const allEvents = [];
         let nextToken;
-        do {
-            const res = await this.logsClient.send(new FilterLogEventsCommand({
-                logGroupName,
-                ...(logStreamPrefix ? { logStreamNamePrefix: logStreamPrefix } : {}),
-                startTime,
-                ...(nextToken ? { nextToken } : {}),
-            }));
-            for (const e of res.events ?? []) {
-                const msg = e.message?.trimEnd();
-                if (msg)
-                    allEvents.push(msg);
-            }
-            nextToken = res.nextToken;
-        } while (nextToken);
+        const MAX_PAGES = 10;
+        let pageCount = 0;
+        // Try narrow window first, expand if needed
+        for (const currentStartTime of [queryStartTime, fallbackStartTime]) {
+            if (allEvents.length >= limit)
+                break;
+            if (currentStartTime === fallbackStartTime && queryStartTime >= fallbackStartTime)
+                break;
+            nextToken = undefined;
+            pageCount = 0;
+            do {
+                const res = await this.logsClient.send(new FilterLogEventsCommand({
+                    logGroupName,
+                    ...(logStreamPrefix ? { logStreamNamePrefix: logStreamPrefix } : {}),
+                    startTime: currentStartTime,
+                    ...(nextToken ? { nextToken } : {}),
+                }));
+                for (const e of res.events ?? []) {
+                    const msg = e.message?.trimEnd();
+                    if (msg) {
+                        allEvents.push(msg);
+                        // Early exit if we have enough events
+                        if (allEvents.length >= limit * 3)
+                            break;
+                    }
+                }
+                nextToken = res.nextToken;
+                pageCount++;
+            } while (nextToken && pageCount < MAX_PAGES && allEvents.length < limit * 3);
+            // If we got enough results, no need to try the wider window
+            if (allEvents.length >= limit)
+                break;
+        }
         return allEvents.slice(-limit);
     }
     /**