@go-to-k/cdkd 0.167.2 → 0.167.3

package/dist/cli.js

@@ -56904,7 +56904,8 @@ async function runEcsTask(task, options, state) {
 			sidecarIp: state.network.sidecarIp,
 			...options.skipHostPortPublish ? { skipHostPortPublish: true } : {},
 			...options.addHostFlags && options.addHostFlags.length > 0 ? { addHostFlags: options.addHostFlags } : {},
-			...(options.networkAliasesByContainer?.get(container.name)?.length ?? 0) > 0 ? { networkAliases: options.networkAliasesByContainer.get(container.name) } : {}
+			...(options.networkAliasesByContainer?.get(container.name)?.length ?? 0) > 0 ? { networkAliases: options.networkAliasesByContainer.get(container.name) } : {},
+			...options.profileCredentialsFile && { profileCredentialsFile: options.profileCredentialsFile }
 		}));
 	}
 	const startedByName = /* @__PURE__ */ new Map();
@@ -57236,6 +57237,7 @@ function buildDockerRunArgs(opts) {
 		const hostPort = pm.hostPort ?? pm.containerPort;
 		args.push("-p", `${containerHost}:${hostPort}:${pm.containerPort}/${pm.protocol}`);
 	}
+	if (opts.profileCredentialsFile) args.push("-v", `${opts.profileCredentialsFile.hostPath}:${opts.profileCredentialsFile.containerPath}:ro`);
 	for (const mp of container.mountPoints) {
 		const v = volumeByName.get(mp.sourceVolume);
 		if (!v) continue;
@@ -57257,6 +57259,10 @@ function buildDockerRunArgs(opts) {
 		...opts.sidecarIp !== void 0 && { sidecarIp: opts.sidecarIp }
 	});
 	Object.assign(finalEnv, metaEnv);
+	if (opts.profileCredentialsFile) {
+		finalEnv["AWS_SHARED_CREDENTIALS_FILE"] = opts.profileCredentialsFile.containerPath;
+		finalEnv["AWS_PROFILE"] = opts.profileCredentialsFile.profileName;
+	}
 	Object.assign(finalEnv, container.environment);
 	for (const s of secrets) finalEnv[s.name] = s.value;
 	const overrides = opts.envOverrides;
@@ -57326,6 +57332,7 @@ async function localRunTaskCommand(target, options) {
 	let sigintHandler;
 	let sigintCount = 0;
 	let stateProvider;
+	let profileCredsFile;
 	let cleanupPromise;
 	const cleanup = async () => {
 		if (!cleanupPromise) cleanupPromise = (async () => {
@@ -57334,6 +57341,11 @@ async function localRunTaskCommand(target, options) {
 			} catch (err) {
 				getLogger().debug(`cleanup failed: ${err instanceof Error ? err.message : String(err)}`);
 			}
+			if (profileCredsFile) try {
+				await profileCredsFile.dispose();
+			} catch (err) {
+				getLogger().debug(`Failed to remove profile credentials tmpdir ${profileCredsFile.hostPath}: ${err instanceof Error ? err.message : String(err)}`);
+			}
 		})();
 		await cleanupPromise;
 	};
@@ -57395,6 +57407,7 @@ async function localRunTaskCommand(target, options) {
 			assumedCredentials = await assumeTaskRole$1(resolvedRoleArn, options.region);
 		}
 		const sidecarCredentials = await resolveSidecarCredentials(options, assumedCredentials);
+		if (options.profile && sidecarCredentials && !assumedCredentials) profileCredsFile = await writeProfileCredentialsFile(options.profile, sidecarCredentials);
 		const envOverrides = readEnvOverridesFile$2(options.envVars);
 		const runOpts = {
 			cluster: options.cluster,
@@ -57409,6 +57422,11 @@ async function localRunTaskCommand(target, options) {
 		if (options.platform) runOpts.platformOverride = options.platform;
 		if (options.region) runOpts.region = options.region;
 		if (options.ecrRoleArn) runOpts.ecrRoleArn = options.ecrRoleArn;
+		if (profileCredsFile) runOpts.profileCredentialsFile = {
+			hostPath: profileCredsFile.hostPath,
+			containerPath: profileCredsFile.containerPath,
+			profileName: profileCredsFile.profileName
+		};
 		const result = await runEcsTask(task, runOpts, state);
 		if (options.detach) {
 			logger.info("Task containers started in detached mode; cdkd is exiting.");
@@ -58659,6 +58677,7 @@ async function localStartServiceCommand(targets, options) {
 	let sigintHandler;
 	let sigintCount = 0;
 	let sharedNetwork;
+	let profileCredsFile;
 	const cleanup = singleFlight(async () => {
 		await Promise.allSettled(perTarget.map(async (pt) => {
 			if (pt.controller) await pt.controller.shutdown();
@@ -58667,6 +58686,14 @@ async function localStartServiceCommand(targets, options) {
 				await Promise.allSettled(pt.runState.replicas.map((r) => cleanupEcsRun(r.state, { keepRunning: false }).catch(() => void 0)));
 			}
 		}));
+		if (profileCredsFile) {
+			try {
+				await profileCredsFile.dispose();
+			} catch (err) {
+				getLogger().warn(`Failed to remove profile credentials tmpdir ${profileCredsFile.hostPath}: ${err instanceof Error ? err.message : String(err)}`);
+			}
+			profileCredsFile = void 0;
+		}
 		if (sharedNetwork) {
 			try {
 				await destroyTaskNetwork(sharedNetwork);
@@ -58715,6 +58742,7 @@ async function localStartServiceCommand(targets, options) {
 		} catch (err) {
 			throw new LocalStartServiceError(`Failed to create shared service network: ${err instanceof Error ? err.message : String(err)}`);
 		}
+		if (options.profile && sidecarCredentials) profileCredsFile = await writeProfileCredentialsFile(options.profile, sidecarCredentials);
 		const discovery = {
 			registry,
 			cloudMapIndexByStack,
@@ -58731,7 +58759,7 @@ async function localStartServiceCommand(targets, options) {
 		};
 		process.on("SIGINT", sigintHandler);
 		process.on("SIGTERM", sigintHandler);
-		for (const pt of perTarget) pt.controller = await bootOneTarget(pt.target, pt.runState, stacks, options, discovery, skipPull);
+		for (const pt of perTarget) pt.controller = await bootOneTarget(pt.target, pt.runState, stacks, options, discovery, skipPull, profileCredsFile);
 		const summary = perTarget.map((pt) => `${pt.controller.service.serviceName} (${pt.controller.activeReplicaCount()} replica(s))`).join(", ");
 		logger.info(`Service(s) running: ${summary}. Press ^C to shut down.`);
 		await Promise.all(perTarget.map((pt) => pt.controller.waitForShutdown()));
@@ -58749,16 +58777,16 @@ async function localStartServiceCommand(targets, options) {
 * options) is scoped locally. Returns the started controller for the
 * outer code to wait + tear down.
 */
-async function bootOneTarget(target, runState, stacks, options, discovery, skipPull) {
+async function bootOneTarget(target, runState, stacks, options, discovery, skipPull, profileCredsFile) {
 	const candidate = pickCandidateStack(parseEcsTarget(target).stackPattern, stacks);
 	const stateProvider = createLocalStateProvider(options, candidate?.stackName ?? "", candidate?.region);
 	try {
-		return await runOneTarget(target, runState, stacks, options, discovery, skipPull, stateProvider);
+		return await runOneTarget(target, runState, stacks, options, discovery, skipPull, stateProvider, profileCredsFile);
 	} finally {
 		if (stateProvider) stateProvider.dispose();
 	}
 }
-async function runOneTarget(target, runState, stacks, options, discovery, skipPull, stateProvider) {
+async function runOneTarget(target, runState, stacks, options, discovery, skipPull, stateProvider, profileCredsFile) {
 	const logger = getLogger();
 	const imageContext = await buildEcsImageResolutionContext(target, stacks, options, stateProvider);
 	const service = resolveEcsServiceTarget(target, stacks, imageContext);
@@ -58804,6 +58832,11 @@ async function runOneTarget(target, runState, stacks, options, discovery, skipPu
 	if (options.platform) taskOpts.platformOverride = options.platform;
 	if (options.region) taskOpts.region = options.region;
 	if (options.ecrRoleArn) taskOpts.ecrRoleArn = options.ecrRoleArn;
+	if (profileCredsFile && !assumedCredentials) taskOpts.profileCredentialsFile = {
+		hostPath: profileCredsFile.hostPath,
+		containerPath: profileCredsFile.containerPath,
+		profileName: profileCredsFile.profileName
+	};
 	return startEcsService(service, {
 		maxTasks: options.maxTasks,
 		restartPolicy: options.restartPolicy,
@@ -60882,7 +60915,7 @@ function reorderArgs(argv) {
 */
 async function main() {
 	const program = new Command();
-	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.167.2");
+	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.167.3");
 	program.addCommand(createBootstrapCommand());
 	program.addCommand(createSynthCommand());
 	program.addCommand(createListCommand());