@fastagent-sh/fastagent 0.21.1 → 0.22.0

package/dist/deploy/agentcore/run.d.ts

@@ -7,23 +7,27 @@ export interface AgentcoreRunPlan {
     name: string;
     /** Template path relative to the run cwd (kit layout: `agent/agentcore.template.yaml`). */
     templatePath: string;
-    /** Dockerfile path for `-f` (kit layout only; the default context Dockerfile otherwise). */
-    dockerfilePath?: string;
-    /** Image tag for this deploy — the CALLER mints it unique (a timestamp): CloudFormation only rolls
-     *  the runtime when the ImageUri value changes, so a reused tag would deploy nothing. */
+    /** Dockerfile path for `-f`. */
+    dockerfilePath: string;
+    /** Image tag for this deploy — the CALLER mints it unique (a timestamp). */
     tag: string;
-    /** AWS region from the caller's environment (AWS_REGION/AWS_DEFAULT_REGION), else resolved via
-     *  `aws configure get region` — an unset region is a gate (the ECR registry hostname needs it). */
+    /**
+     * AWS region from the caller's environment (AWS_REGION/AWS_DEFAULT_REGION), else resolved via `aws configure get
+     * region`.
+     */
     region?: string;
-    /** Secret env-var name → value (model key or FASTAGENT_AUTH_SEED + channel secrets). Mapped to the
-     *  template's parameter names via {@link cfnParamName}; delivered via the params file, never argv. */
+    /** Env-var name → value: the value file's carried variables, plus FASTAGENT_AUTH_SEED for a file credential. */
     secrets: Record<string, string>;
-    /** Required secret names with NO local value — gated before any side effect. */
+    /** Declared names the value file supplies no value for — the run gates on these before any side effect. */
     missingSecrets: string[];
+    /** That value file, workspace-relative, so the gate names the file this deploy actually read. */
+    valueFile: string;
     /** Every declared channel and its ingress — the driver asks which of them have a webhook. */
     channels: readonly DeclaredChannel[];
-    /** What the stack contains — the plan's own reading, so this driver cannot disagree with the
-     *  template about whether a forwarder (and with it the state bucket and its parameters) exists. */
+    /**
+     * What the stack contains — the plan's own reading, so this driver cannot disagree with the template about whether a
+     * forwarder (and its artifact bucket parameters) exists.
+     */
     topology: AgentcoreTopology;
 }
 export type AgentcoreRunOutcome = {
@@ -35,26 +39,22 @@ export type AgentcoreRunOutcome = {
     gate: string;
 };
 /** Stack outputs (`describe-stacks --query "Stacks[0].Outputs"`) → { OutputKey: OutputValue }. */
-export declare function parseStackOutputs(stdout: string): Record<string, string>;
-/** The `--parameter-overrides file://` payload: a JSON array of "Key=Value" strings. The auth seed
- *  is CHUNKED across FastagentAuthSeed(2…) — AgentCore env values cap at 2048 chars and a real OAuth
- *  auth.json's base64 exceeds it; `start` reassembles (collectAuthSeed). Every chunk is emitted on
- *  every deploy, including empty trailing chunks, so CloudFormation cannot retain stale values. */
-export declare function paramsFileContent(imageUri: string, secrets: Record<string, string>, forwarder?: {
+/**
+ * `Stacks[0].Outputs` as a map, or `undefined` when the document is not that list at all.
+ *
+ * `null` IS AN ANSWER, and an empty map is what it says: that is what JMESPath prints for a stack with no
+ * Outputs section, i.e. a template edited or generated without one. Reading it as unreadable blamed
+ * `aws cloudformation describe-stacks` — a command that had just succeeded — instead of letting the caller's
+ * own "no RuntimeArn, regenerate with --force" gate say what to do. Distinct from empty stdout, which is the
+ * CLI printing nothing at all (aws-cli.ts, point 4).
+ */
+export declare function pickStackOutputs(parsed: unknown): Record<string, string> | undefined;
+/** The `--parameter-overrides file://` payload: a JSON array of "Key=Value" strings. */
+export declare function paramsFileContent(imageUri: string, secrets: Record<string, string>, forwarder: {
     bucket: string;
     key: string;
 }): string;
-export interface CheckpointReply {
-    written: boolean;
-    reason?: string;
-}
-/** Parse the runtime's checkpoint acknowledgement without treating malformed output as success. */
-export declare function parseCheckpointReply(stdout: string): CheckpointReply | undefined;
-/**
- * Run the deploy through `aws` + `docker`. `log` reports progress; the injected registrars perform
- * post-deploy webhook steps from the builder machine against the forwarder's Function URL. Every
- * gate is fail-visible; `writeSecretFile` is the caller's 0600-temp-file seam (see the header).
- */
+/** Run the deploy through `aws` + `docker`. */
 export declare function deployAgentcoreRun(plan: AgentcoreRunPlan, aws: CliRunner, docker: CliRunner, log: (msg: string) => void, writeSecretFile: (content: string) => Promise<string>, writeForwarderZip: (bytes: Uint8Array) => Promise<string>, registrars: Registrars, 
 /** Injected in tests; the probe itself stays inside the run so no deploy can skip it. */
 probe?: {