@relkit/cloud-aws 0.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 rel-kit
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,5 @@
+# @relkit/cloud-aws
+
+Unsupported internal AWS deployment components for RELKIT; use @relkit/cli.
+
+See [@relkit/app](https://github.com/rel-kit/relkit) for supported application APIs.

package/dist/components/RelkitApplicationService/container.d.ts

@@ -0,0 +1,4 @@
+import * as pulumi from "@pulumi/pulumi";
+import { type RelkitEnvironmentInput, type RelkitSecretInput } from "../common.js";
+export declare function containerDefinitions(image: pulumi.Input<string>, logGroupName: pulumi.Input<string>, port: number, livenessPath: string, stopTimeout: number, containerName: string, environmentInput?: RelkitEnvironmentInput, secretsInput?: RelkitSecretInput): pulumi.Output<string>;
+//# sourceMappingURL=container.d.ts.map

package/dist/components/RelkitApplicationService/container.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"container.d.ts","sourceRoot":"","sources":["../../../src/components/RelkitApplicationService/container.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,EAIL,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,EACvB,MAAM,cAAc,CAAC;AAEtB,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAC3B,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAClC,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,MAAM,EACrB,gBAAgB,CAAC,EAAE,sBAAsB,EACzC,YAAY,CAAC,EAAE,iBAAiB,GAC/B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CA2DvB"}

package/dist/components/RelkitApplicationService/container.js

@@ -0,0 +1,64 @@
+import * as aws from "@pulumi/aws";
+import * as pulumi from "@pulumi/pulumi";
+import { environmentEntries, secretEntries, validateMappings, } from "../common.js";
+export function containerDefinitions(image, logGroupName, port, livenessPath, stopTimeout, containerName, environmentInput, secretsInput) {
+    const region = aws.getRegionOutput().name;
+    const environment = [...environmentEntries(environmentInput)];
+    if (!environment.some(({ name }) => name === "AWS_REGION"))
+        environment.push({ name: "AWS_REGION", value: region });
+    const secrets = secretEntries(secretsInput);
+    validateMappings(environment, secrets);
+    return pulumi
+        .all([
+        image,
+        logGroupName,
+        region,
+        ...environment.map(({ value }) => value),
+        ...secrets.map(({ valueFrom }) => valueFrom),
+    ])
+        .apply((values) => {
+        const resolvedImage = values[0];
+        const resolvedLogGroup = values[1];
+        const resolvedRegion = values[2];
+        const environmentValues = environment.map(({ name }, index) => ({
+            name,
+            value: values[index + 3],
+        }));
+        const secretValues = secrets.map(({ name }, index) => ({
+            name,
+            valueFrom: values[index + 3 + environment.length],
+        }));
+        return JSON.stringify([
+            {
+                name: containerName,
+                image: resolvedImage,
+                essential: true,
+                user: "1000",
+                readonlyRootFilesystem: true,
+                stopTimeout,
+                portMappings: [{ containerPort: port, hostPort: port, protocol: "tcp" }],
+                environment: environmentValues,
+                secrets: secretValues,
+                healthCheck: {
+                    command: [
+                        "CMD-SHELL",
+                        `bun -e "fetch('http://127.0.0.1:${port}${livenessPath}').then((r) => process.exit(r.ok ? 0 : 1)).catch(() => process.exit(1))"`,
+                    ],
+                    interval: 30,
+                    timeout: 5,
+                    retries: 3,
+                    startPeriod: 30,
+                },
+                logConfiguration: {
+                    logDriver: "awslogs",
+                    options: {
+                        "awslogs-group": resolvedLogGroup,
+                        "awslogs-region": resolvedRegion,
+                        "awslogs-stream-prefix": "relkit",
+                    },
+                },
+            },
+        ]);
+    });
+}
+//# sourceMappingURL=container.js.map

package/dist/components/RelkitApplicationService/container.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"container.js","sourceRoot":"","sources":["../../../src/components/RelkitApplicationService/container.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,aAAa,CAAC;AACnC,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,gBAAgB,GAGjB,MAAM,cAAc,CAAC;AAEtB,MAAM,UAAU,oBAAoB,CAClC,KAA2B,EAC3B,YAAkC,EAClC,IAAY,EACZ,YAAoB,EACpB,WAAmB,EACnB,aAAqB,EACrB,gBAAyC,EACzC,YAAgC;IAEhC,MAAM,MAAM,GAAG,GAAG,CAAC,eAAe,EAAE,CAAC,IAAI,CAAC;IAC1C,MAAM,WAAW,GAAG,CAAC,GAAG,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC9D,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,KAAK,YAAY,CAAC;QACxD,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,aAAa,CAAC,YAAY,CAAC,CAAC;IAC5C,gBAAgB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACvC,OAAO,MAAM;SACV,GAAG,CAAC;QACH,KAAK;QACL,YAAY;QACZ,MAAM;QACN,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC;QACxC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC;KAC7C,CAAC;SACD,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE;QAChB,MAAM,aAAa,GAAG,MAAM,CAAC,CAAC,CAAW,CAAC;QAC1C,MAAM,gBAAgB,GAAG,MAAM,CAAC,CAAC,CAAW,CAAC;QAC7C,MAAM,cAAc,GAAG,MAAM,CAAC,CAAC,CAAW,CAAC;QAC3C,MAAM,iBAAiB,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YAC9D,IAAI;YACJ,KAAK,EAAE,MAAM,CAAC,KAAK,GAAG,CAAC,CAAW;SACnC,CAAC,CAAC,CAAC;QACJ,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YACrD,IAAI;YACJ,SAAS,EAAE,MAAM,CAAC,KAAK,GAAG,CAAC,GAAG,WAAW,CAAC,MAAM,CAAW;SAC5D,CAAC,CAAC,CAAC;QACJ,OAAO,IAAI,CAAC,SAAS,CAAC;YACpB;gBACE,IAAI,EAAE,aAAa;gBACnB,KAAK,EAAE,aAAa;gBACpB,SAAS,EAAE,IAAI;gBACf,IAAI,EAAE,MAAM;gBACZ,sBAAsB,EAAE,IAAI;gBAC5B,WAAW;gBACX,YAAY,EAAE,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;gBACxE,WAAW,EAAE,iBAAiB;gBAC9B,OAAO,EAAE,YAAY;gBACrB,WAAW,EAAE;oBACX,OAAO,EAAE;wBACP,WAAW;wBACX,mCAAmC,IAAI,GAAG,YAAY,0EAA0E;qBACjI;oBACD,QAAQ,EAAE,EAAE;oBACZ,OAAO,EAAE,CAAC;oBACV,OAAO,EAAE,CAAC;oBACV,WAAW,EAAE,EAAE;iBAChB;gBACD,gBAAgB,EAAE;oBAChB,SAAS,EAAE,SAAS;oBACpB,OAAO,EAAE;wBACP,eAAe,EAAE,gBAAgB;wBACjC,gBAAgB,EAAE,cAAc;wBAChC,uBAAuB,EAAE,QAAQ;qBAClC;iBACF;aACF;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/components/RelkitApplicationService/foundation.d.ts

@@ -0,0 +1,11 @@
+import * as aws from "@pulumi/aws";
+import * as pulumi from "@pulumi/pulumi";
+export interface ServiceFoundation {
+    readonly cluster: aws.ecs.Cluster;
+    readonly executionRole: aws.iam.Role;
+    readonly executionAttachment: aws.iam.RolePolicyAttachment;
+    readonly taskRole: aws.iam.Role;
+    readonly logGroup: aws.cloudwatch.LogGroup;
+}
+export declare function createFoundation(componentName: string, tags: pulumi.Input<Record<string, pulumi.Input<string>>>, retentionInDays: pulumi.Input<number>, parent: pulumi.ComponentResource): ServiceFoundation;
+//# sourceMappingURL=foundation.d.ts.map

package/dist/components/RelkitApplicationService/foundation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"foundation.d.ts","sourceRoot":"","sources":["../../../src/components/RelkitApplicationService/foundation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,aAAa,CAAC;AACnC,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAgBzC,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC;IAClC,QAAQ,CAAC,aAAa,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;IACrC,QAAQ,CAAC,mBAAmB,EAAE,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC;IAC3D,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC;CAC5C;AAED,wBAAgB,gBAAgB,CAC9B,aAAa,EAAE,MAAM,EACrB,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EACxD,eAAe,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EACrC,MAAM,EAAE,MAAM,CAAC,iBAAiB,GAC/B,iBAAiB,CAgDnB"}

package/dist/components/RelkitApplicationService/foundation.js

@@ -0,0 +1,44 @@
+import * as aws from "@pulumi/aws";
+import * as pulumi from "@pulumi/pulumi";
+import { iamRoleName } from "../common.js";
+const EXECUTION_POLICY_ARN = "arn:aws:iam::aws:policy/service-role/AmazonECSTaskExecutionRolePolicy";
+const ASSUME_ROLE_POLICY = JSON.stringify({
+    Version: "2012-10-17",
+    Statement: [
+        {
+            Effect: "Allow",
+            Principal: { Service: "ecs-tasks.amazonaws.com" },
+            Action: "sts:AssumeRole",
+        },
+    ],
+});
+export function createFoundation(componentName, tags, retentionInDays, parent) {
+    const executionRoleName = iamRoleName(componentName, "execution-role");
+    const taskRoleName = iamRoleName(componentName, "task-role");
+    const cluster = new aws.ecs.Cluster(`${componentName}-cluster`, {
+        name: `${componentName}-cluster`,
+        settings: [{ name: "containerInsights", value: "enabled" }],
+        tags,
+    }, { parent });
+    const executionRole = new aws.iam.Role(executionRoleName, {
+        name: executionRoleName,
+        assumeRolePolicy: ASSUME_ROLE_POLICY,
+        tags,
+    }, { parent });
+    const executionAttachment = new aws.iam.RolePolicyAttachment(`${componentName}-execution-policy`, {
+        role: executionRole.name,
+        policyArn: EXECUTION_POLICY_ARN,
+    }, { parent });
+    const taskRole = new aws.iam.Role(taskRoleName, {
+        name: taskRoleName,
+        assumeRolePolicy: ASSUME_ROLE_POLICY,
+        tags,
+    }, { parent });
+    const logGroup = new aws.cloudwatch.LogGroup(`${componentName}-logs`, {
+        name: `/relkit/${componentName}`,
+        retentionInDays,
+        tags,
+    }, { parent });
+    return { cluster, executionRole, executionAttachment, taskRole, logGroup };
+}
+//# sourceMappingURL=foundation.js.map

package/dist/components/RelkitApplicationService/foundation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"foundation.js","sourceRoot":"","sources":["../../../src/components/RelkitApplicationService/foundation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,aAAa,CAAC;AACnC,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,MAAM,oBAAoB,GACxB,uEAAuE,CAAC;AAC1E,MAAM,kBAAkB,GAAG,IAAI,CAAC,SAAS,CAAC;IACxC,OAAO,EAAE,YAAY;IACrB,SAAS,EAAE;QACT;YACE,MAAM,EAAE,OAAO;YACf,SAAS,EAAE,EAAE,OAAO,EAAE,yBAAyB,EAAE;YACjD,MAAM,EAAE,gBAAgB;SACzB;KACF;CACF,CAAC,CAAC;AAUH,MAAM,UAAU,gBAAgB,CAC9B,aAAqB,EACrB,IAAwD,EACxD,eAAqC,EACrC,MAAgC;IAEhC,MAAM,iBAAiB,GAAG,WAAW,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;IACvE,MAAM,YAAY,GAAG,WAAW,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CACjC,GAAG,aAAa,UAAU,EAC1B;QACE,IAAI,EAAE,GAAG,aAAa,UAAU;QAChC,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QAC3D,IAAI;KACL,EACD,EAAE,MAAM,EAAE,CACX,CAAC;IACF,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CACpC,iBAAiB,EACjB;QACE,IAAI,EAAE,iBAAiB;QACvB,gBAAgB,EAAE,kBAAkB;QACpC,IAAI;KACL,EACD,EAAE,MAAM,EAAE,CACX,CAAC;IACF,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAC1D,GAAG,aAAa,mBAAmB,EACnC;QACE,IAAI,EAAE,aAAa,CAAC,IAAI;QACxB,SAAS,EAAE,oBAAoB;KAChC,EACD,EAAE,MAAM,EAAE,CACX,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAC/B,YAAY,EACZ;QACE,IAAI,EAAE,YAAY;QAClB,gBAAgB,EAAE,kBAAkB;QACpC,IAAI;KACL,EACD,EAAE,MAAM,EAAE,CACX,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAC1C,GAAG,aAAa,OAAO,EACvB;QACE,IAAI,EAAE,WAAW,aAAa,EAAE;QAChC,eAAe;QACf,IAAI;KACL,EACD,EAAE,MAAM,EAAE,CACX,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AAC7E,CAAC"}

package/dist/components/RelkitApplicationService/index.d.ts

@@ -0,0 +1,22 @@
+import * as aws from "@pulumi/aws";
+import * as pulumi from "@pulumi/pulumi";
+import type { RelkitApplicationServiceArgs } from "./types.js";
+export type { RelkitApplicationServiceArgs } from "./types.js";
+/** ECS/Fargate application behind an internet-facing ALB with safe deployment defaults. */
+export declare class RelkitApplicationService extends pulumi.ComponentResource {
+    readonly cluster: aws.ecs.Cluster;
+    readonly loadBalancer: aws.lb.LoadBalancer;
+    readonly targetGroup: aws.lb.TargetGroup;
+    readonly listener: aws.lb.Listener;
+    readonly logGroup: aws.cloudwatch.LogGroup;
+    readonly executionRole: aws.iam.Role;
+    readonly taskRole: aws.iam.Role;
+    readonly taskDefinition: aws.ecs.TaskDefinition;
+    readonly service: aws.ecs.Service;
+    readonly scalableTarget: aws.appautoscaling.Target;
+    readonly scalingPolicy: aws.appautoscaling.Policy;
+    readonly image: pulumi.Output<string>;
+    readonly tags: pulumi.Output<Record<string, string>>;
+    constructor(name: string, args: RelkitApplicationServiceArgs, opts?: pulumi.ComponentResourceOptions);
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/components/RelkitApplicationService/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/components/RelkitApplicationService/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,aAAa,CAAC;AACnC,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAUzC,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAC;AAI/D,YAAY,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAC;AAC/D,2FAA2F;AAC3F,qBAAa,wBAAyB,SAAQ,MAAM,CAAC,iBAAiB;IACpE,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC;IAClC,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC,EAAE,CAAC,YAAY,CAAC;IAC3C,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC;IACzC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC;IACnC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC;IAC3C,QAAQ,CAAC,aAAa,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;IACrC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC;IAChD,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,GAAG,CAAC,cAAc,CAAC,MAAM,CAAC;IACnD,QAAQ,CAAC,aAAa,EAAE,GAAG,CAAC,cAAc,CAAC,MAAM,CAAC;IAClD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;gBAEnD,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,4BAA4B,EAClC,IAAI,GAAE,MAAM,CAAC,wBAA6B;CAqK7C"}

package/dist/components/RelkitApplicationService/index.js

@@ -0,0 +1,147 @@
+import * as aws from "@pulumi/aws";
+import * as pulumi from "@pulumi/pulumi";
+import { DEFAULT_LIVENESS_PATH, DEFAULT_READINESS_PATH, DEFAULT_SERVICE_PORT, resourceName, tagsFor, validatePath, validatePort, } from "../common.js";
+import { containerDefinitions } from "./container.js";
+import { createFoundation } from "./foundation.js";
+/** ECS/Fargate application behind an internet-facing ALB with safe deployment defaults. */
+export class RelkitApplicationService extends pulumi.ComponentResource {
+    cluster;
+    loadBalancer;
+    targetGroup;
+    listener;
+    logGroup;
+    executionRole;
+    taskRole;
+    taskDefinition;
+    service;
+    scalableTarget;
+    scalingPolicy;
+    image;
+    tags;
+    constructor(name, args, opts = {}) {
+        const componentName = resourceName(name, "service", args);
+        super("relkit:cloud-aws:RelkitApplicationService", componentName, {}, opts);
+        const tags = tagsFor(name, args);
+        const port = args.containerPort ?? DEFAULT_SERVICE_PORT;
+        const containerName = args.containerName ?? "app";
+        const livenessPath = args.livenessPath ?? DEFAULT_LIVENESS_PATH;
+        const readinessPath = args.readinessPath ?? DEFAULT_READINESS_PATH;
+        const stopTimeout = args.stopTimeoutSeconds ?? 30;
+        const deregistrationDelay = args.deregistrationDelaySeconds ?? 30;
+        validatePort(port, "containerPort");
+        validatePath(livenessPath, "livenessPath");
+        validatePath(readinessPath, "readinessPath");
+        if (!Number.isSafeInteger(stopTimeout) || stopTimeout < 2 || stopTimeout > 120)
+            throw new RangeError("stopTimeoutSeconds must be an integer between 2 and 120.");
+        if (!Number.isSafeInteger(deregistrationDelay) ||
+            deregistrationDelay < 0 ||
+            deregistrationDelay > 3600)
+            throw new RangeError("deregistrationDelaySeconds must be an integer between 0 and 3600.");
+        this.tags = tags;
+        const foundation = createFoundation(componentName, tags, args.logRetentionDays ?? 30, this);
+        this.cluster = foundation.cluster;
+        this.executionRole = foundation.executionRole;
+        this.taskRole = foundation.taskRole;
+        this.logGroup = foundation.logGroup;
+        this.image = pulumi.output(args.image ?? args.registry.imageUri(args.imageTag ?? "latest"));
+        this.targetGroup = new aws.lb.TargetGroup(`${componentName}-target`, {
+            name: resourceName(name, "target", args, 32),
+            vpcId: args.network.vpcId,
+            targetType: "ip",
+            port,
+            protocol: "HTTP",
+            deregistrationDelay,
+            healthCheck: {
+                enabled: true,
+                path: readinessPath,
+                protocol: "HTTP",
+                matcher: "200-399",
+                interval: 30,
+                timeout: 5,
+                healthyThreshold: 2,
+                unhealthyThreshold: 3,
+            },
+            tags,
+        }, { parent: this });
+        this.loadBalancer = new aws.lb.LoadBalancer(`${componentName}-alb`, {
+            name: resourceName(name, "alb", args, 32),
+            loadBalancerType: "application",
+            internal: args.internalLoadBalancer ?? false,
+            securityGroups: [args.network.loadBalancerSecurityGroupId],
+            subnets: args.network.publicSubnetIds,
+            enableDeletionProtection: false,
+            tags,
+        }, { parent: this });
+        this.listener = new aws.lb.Listener(`${componentName}-listener`, {
+            loadBalancerArn: this.loadBalancer.arn,
+            port: 80,
+            protocol: "HTTP",
+            defaultActions: [{ type: "forward", targetGroupArn: this.targetGroup.arn }],
+        }, { parent: this });
+        this.taskDefinition = new aws.ecs.TaskDefinition(`${componentName}-task`, {
+            family: `${componentName}-task`,
+            requiresCompatibilities: ["FARGATE"],
+            networkMode: "awsvpc",
+            cpu: args.cpu ?? "256",
+            memory: args.memory ?? "512",
+            executionRoleArn: this.executionRole.arn,
+            taskRoleArn: this.taskRole.arn,
+            containerDefinitions: containerDefinitions(this.image, this.logGroup.name, port, livenessPath, stopTimeout, containerName, args.environment, args.secrets),
+            tags,
+        }, { parent: this, dependsOn: [foundation.executionAttachment] });
+        this.service = new aws.ecs.Service(`${componentName}-service`, {
+            name: `${componentName}-service`,
+            cluster: this.cluster.arn,
+            taskDefinition: this.taskDefinition.arn,
+            launchType: "FARGATE",
+            desiredCount: args.desiredCount ?? 1,
+            healthCheckGracePeriodSeconds: args.healthCheckGracePeriodSeconds ?? 60,
+            deploymentCircuitBreaker: { enable: true, rollback: true },
+            deploymentMinimumHealthyPercent: 100,
+            deploymentMaximumPercent: 200,
+            enableEcsManagedTags: true,
+            propagateTags: "SERVICE",
+            networkConfiguration: {
+                assignPublicIp: false,
+                subnets: args.network.privateSubnetIds,
+                securityGroups: [args.network.serviceSecurityGroupId],
+            },
+            loadBalancers: [
+                {
+                    targetGroupArn: this.targetGroup.arn,
+                    containerName,
+                    containerPort: port,
+                },
+            ],
+            tags,
+        }, { parent: this, dependsOn: [this.listener] });
+        this.scalableTarget = new aws.appautoscaling.Target(`${componentName}-scalable-target`, {
+            serviceNamespace: "ecs",
+            scalableDimension: "ecs:service:DesiredCount",
+            resourceId: pulumi.interpolate `service/${this.cluster.name}/${this.service.name}`,
+            minCapacity: args.minCapacity ?? 1,
+            maxCapacity: args.maxCapacity ?? 4,
+            tags,
+        }, { parent: this, dependsOn: [this.service] });
+        this.scalingPolicy = new aws.appautoscaling.Policy(`${componentName}-cpu-scaling`, {
+            serviceNamespace: "ecs",
+            scalableDimension: "ecs:service:DesiredCount",
+            resourceId: this.scalableTarget.resourceId,
+            policyType: "TargetTrackingScaling",
+            targetTrackingScalingPolicyConfiguration: {
+                targetValue: args.cpuTargetPercent ?? 70,
+                predefinedMetricSpecification: {
+                    predefinedMetricType: "ECSServiceAverageCPUUtilization",
+                },
+                scaleInCooldown: 60,
+                scaleOutCooldown: 60,
+            },
+        }, { parent: this, dependsOn: [this.scalableTarget] });
+        this.registerOutputs({
+            service: this.service,
+            loadBalancer: this.loadBalancer,
+            image: this.image,
+        });
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/components/RelkitApplicationService/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/components/RelkitApplicationService/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,aAAa,CAAC;AACnC,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,YAAY,EACZ,OAAO,EACP,YAAY,EACZ,YAAY,GACb,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAGnD,2FAA2F;AAC3F,MAAM,OAAO,wBAAyB,SAAQ,MAAM,CAAC,iBAAiB;IAC3D,OAAO,CAAkB;IACzB,YAAY,CAAsB;IAClC,WAAW,CAAqB;IAChC,QAAQ,CAAkB;IAC1B,QAAQ,CAA0B;IAClC,aAAa,CAAe;IAC5B,QAAQ,CAAe;IACvB,cAAc,CAAyB;IACvC,OAAO,CAAkB;IACzB,cAAc,CAA4B;IAC1C,aAAa,CAA4B;IACzC,KAAK,CAAwB;IAC7B,IAAI,CAAwC;IACrD,YACE,IAAY,EACZ,IAAkC,EAClC,OAAwC,EAAE;QAE1C,MAAM,aAAa,GAAG,YAAY,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QAC1D,KAAK,CAAC,2CAA2C,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QAC5E,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,IAAI,oBAAoB,CAAC;QACxD,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,KAAK,CAAC;QAClD,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,qBAAqB,CAAC;QAChE,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,sBAAsB,CAAC;QACnE,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,IAAI,EAAE,CAAC;QAClD,MAAM,mBAAmB,GAAG,IAAI,CAAC,0BAA0B,IAAI,EAAE,CAAC;QAClE,YAAY,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;QACpC,YAAY,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;QAC3C,YAAY,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,IAAI,WAAW,GAAG,CAAC,IAAI,WAAW,GAAG,GAAG;YAC5E,MAAM,IAAI,UAAU,CAAC,0DAA0D,CAAC,CAAC;QACnF,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,mBAAmB,CAAC;YAC1C,mBAAmB,GAAG,CAAC;YACvB,mBAAmB,GAAG,IAAI;YAE1B,MAAM,IAAI,UAAU,CAAC,mEAAmE,CAAC,CAAC;QAC5F,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,MAAM,UAAU,GAAG,gBAAgB,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,CAAC,gBAAgB,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;QAC5F,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;QAClC,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;QAC9C,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,CAAC,CAAC;QAC5F,IAAI,CAAC,WAAW,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,WAAW,CACvC,GAAG,aAAa,SAAS,EACzB;YACE,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC;YAC5C,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;YACzB,UAAU,EAAE,IAAI;YAChB,IAAI;YACJ,QAAQ,EAAE,MAAM;YAChB,mBAAmB;YACnB,WAAW,EAAE;gBACX,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,aAAa;gBACnB,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,SAAS;gBAClB,QAAQ,EAAE,EAAE;gBACZ,OAAO,EAAE,CAAC;gBACV,gBAAgB,EAAE,CAAC;gBACnB,kBAAkB,EAAE,CAAC;aACtB;YACD,IAAI;SACL,EACD,EAAE,MAAM,EAAE,IAAI,EAAE,CACjB,CAAC;QACF,IAAI,CAAC,YAAY,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,YAAY,CACzC,GAAG,aAAa,MAAM,EACtB;YACE,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;YACzC,gBAAgB,EAAE,aAAa;YAC/B,QAAQ,EAAE,IAAI,CAAC,oBAAoB,IAAI,KAAK;YAC5C,cAAc,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,2BAA2B,CAAC;YAC1D,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe;YACrC,wBAAwB,EAAE,KAAK;YAC/B,IAAI;SACL,EACD,EAAE,MAAM,EAAE,IAAI,EAAE,CACjB,CAAC;QACF,IAAI,CAAC,QAAQ,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,QAAQ,CACjC,GAAG,aAAa,WAAW,EAC3B;YACE,eAAe,EAAE,IAAI,CAAC,YAAY,CAAC,GAAG;YACtC,IAAI,EAAE,EAAE;YACR,QAAQ,EAAE,MAAM;YAChB,cAAc,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC;SAC5E,EACD,EAAE,MAAM,EAAE,IAAI,EAAE,CACjB,CAAC;QACF,IAAI,CAAC,cAAc,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,cAAc,CAC9C,GAAG,aAAa,OAAO,EACvB;YACE,MAAM,EAAE,GAAG,aAAa,OAAO;YAC/B,uBAAuB,EAAE,CAAC,SAAS,CAAC;YACpC,WAAW,EAAE,QAAQ;YACrB,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,KAAK;YACtB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,KAAK;YAC5B,gBAAgB,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG;YACxC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG;YAC9B,oBAAoB,EAAE,oBAAoB,CACxC,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,QAAQ,CAAC,IAAI,EAClB,IAAI,EACJ,YAAY,EACZ,WAAW,EACX,aAAa,EACb,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,OAAO,CACb;YACD,IAAI;SACL,EACD,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,UAAU,CAAC,mBAAmB,CAAC,EAAE,CAC9D,CAAC;QACF,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAChC,GAAG,aAAa,UAAU,EAC1B;YACE,IAAI,EAAE,GAAG,aAAa,UAAU;YAChC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG;YACzB,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,GAAG;YACvC,UAAU,EAAE,SAAS;YACrB,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,CAAC;YACpC,6BAA6B,EAAE,IAAI,CAAC,6BAA6B,IAAI,EAAE;YACvE,wBAAwB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;YAC1D,+BAA+B,EAAE,GAAG;YACpC,wBAAwB,EAAE,GAAG;YAC7B,oBAAoB,EAAE,IAAI;YAC1B,aAAa,EAAE,SAAS;YACxB,oBAAoB,EAAE;gBACpB,cAAc,EAAE,KAAK;gBACrB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB;gBACtC,cAAc,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC;aACtD;YACD,aAAa,EAAE;gBACb;oBACE,cAAc,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG;oBACpC,aAAa;oBACb,aAAa,EAAE,IAAI;iBACpB;aACF;YACD,IAAI;SACL,EACD,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAC7C,CAAC;QACF,IAAI,CAAC,cAAc,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,MAAM,CACjD,GAAG,aAAa,kBAAkB,EAClC;YACE,gBAAgB,EAAE,KAAK;YACvB,iBAAiB,EAAE,0BAA0B;YAC7C,UAAU,EAAE,MAAM,CAAC,WAAW,CAAA,WAAW,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;YACjF,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,CAAC;YAClC,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,CAAC;YAClC,IAAI;SACL,EACD,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAC5C,CAAC;QACF,IAAI,CAAC,aAAa,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,MAAM,CAChD,GAAG,aAAa,cAAc,EAC9B;YACE,gBAAgB,EAAE,KAAK;YACvB,iBAAiB,EAAE,0BAA0B;YAC7C,UAAU,EAAE,IAAI,CAAC,cAAc,CAAC,UAAU;YAC1C,UAAU,EAAE,uBAAuB;YACnC,wCAAwC,EAAE;gBACxC,WAAW,EAAE,IAAI,CAAC,gBAAgB,IAAI,EAAE;gBACxC,6BAA6B,EAAE;oBAC7B,oBAAoB,EAAE,iCAAiC;iBACxD;gBACD,eAAe,EAAE,EAAE;gBACnB,gBAAgB,EAAE,EAAE;aACrB;SACF,EACD,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CACnD,CAAC;QACF,IAAI,CAAC,eAAe,CAAC;YACnB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/components/RelkitApplicationService/types.d.ts

@@ -0,0 +1,30 @@
+import type * as pulumi from "@pulumi/pulumi";
+import type { RelkitContainerRegistry } from "../RelkitContainerRegistry/index.js";
+import type { RelkitNetwork } from "../RelkitNetwork/index.js";
+import type { RelkitComponentArgs, RelkitEnvironmentInput, RelkitSecretInput } from "../common.js";
+export interface RelkitApplicationServiceArgs extends RelkitComponentArgs {
+    readonly network: RelkitNetwork;
+    readonly registry: RelkitContainerRegistry;
+    readonly image?: pulumi.Input<string>;
+    readonly imageTag?: pulumi.Input<string>;
+    readonly containerName?: string;
+    readonly containerPort?: number;
+    readonly livenessPath?: string;
+    readonly readinessPath?: string;
+    readonly cpu?: pulumi.Input<string>;
+    readonly memory?: pulumi.Input<string>;
+    readonly desiredCount?: pulumi.Input<number>;
+    readonly minCapacity?: pulumi.Input<number>;
+    readonly maxCapacity?: pulumi.Input<number>;
+    readonly cpuTargetPercent?: pulumi.Input<number>;
+    readonly stopTimeoutSeconds?: number;
+    readonly healthCheckGracePeriodSeconds?: pulumi.Input<number>;
+    readonly deregistrationDelaySeconds?: number;
+    readonly logRetentionDays?: pulumi.Input<number>;
+    readonly internalLoadBalancer?: pulumi.Input<boolean>;
+    /** Non-secret values injected into the application container by deployment. */
+    readonly environment?: RelkitEnvironmentInput;
+    /** Secret source identifiers injected as ECS `valueFrom` mappings. */
+    readonly secrets?: RelkitSecretInput;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/components/RelkitApplicationService/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/components/RelkitApplicationService/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAC9C,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AACnF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,KAAK,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEnG,MAAM,WAAW,4BAA6B,SAAQ,mBAAmB;IACvE,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAC;IAC3C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACtC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACpC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACvC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjD,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,6BAA6B,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9D,QAAQ,CAAC,0BAA0B,CAAC,EAAE,MAAM,CAAC;IAC7C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjD,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACtD,+EAA+E;IAC/E,QAAQ,CAAC,WAAW,CAAC,EAAE,sBAAsB,CAAC;IAC9C,sEAAsE;IACtE,QAAQ,CAAC,OAAO,CAAC,EAAE,iBAAiB,CAAC;CACtC"}

package/dist/components/RelkitApplicationService/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/components/RelkitApplicationService/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/components/RelkitApplicationService/types.ts"],"names":[],"mappings":""}

package/dist/components/RelkitBuckets/index.d.ts

@@ -0,0 +1,11 @@
+import * as pulumi from "@pulumi/pulumi";
+import type { RelkitBucketResource, RelkitBucketsArgs } from "./types.js";
+export * from "./types.js";
+/** Maps logical buckets to stable, private-by-default S3 buckets. */
+export declare class RelkitBuckets extends pulumi.ComponentResource {
+    readonly buckets: readonly RelkitBucketResource[];
+    readonly bucketResources: readonly RelkitBucketResource[];
+    readonly tags: pulumi.Output<Record<string, string>>;
+    constructor(name: string, args: RelkitBucketsArgs, opts?: pulumi.ComponentResourceOptions);
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/components/RelkitBuckets/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/components/RelkitBuckets/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAGzC,OAAO,KAAK,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE1E,cAAc,YAAY,CAAC;AAE3B,qEAAqE;AACrE,qBAAa,aAAc,SAAQ,MAAM,CAAC,iBAAiB;IACzD,QAAQ,CAAC,OAAO,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAClD,QAAQ,CAAC,eAAe,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAC1D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;gBAEzC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,GAAE,MAAM,CAAC,wBAA6B;CAwC9F"}

package/dist/components/RelkitBuckets/index.js

@@ -0,0 +1,48 @@
+import * as aws from "@pulumi/aws";
+import * as pulumi from "@pulumi/pulumi";
+import { awsRegion, environmentName, resourceName, tagsFor } from "../common.js";
+import { normalizeBuckets } from "./validation.js";
+export * from "./types.js";
+/** Maps logical buckets to stable, private-by-default S3 buckets. */
+export class RelkitBuckets extends pulumi.ComponentResource {
+    buckets;
+    bucketResources;
+    tags;
+    constructor(name, args, opts = {}) {
+        const definitions = normalizeBuckets(args);
+        const componentName = resourceName(name, "buckets", args, 64);
+        super("relkit:cloud-aws:RelkitBuckets", componentName, {}, opts);
+        this.tags = tagsFor(name, args);
+        const region = awsRegion(args);
+        this.buckets = definitions.map((definition) => {
+            const childName = resourceName(name, `${definition.id}-bucket`, args, 63);
+            const bucket = new aws.s3.Bucket(childName, {
+                bucket: definition.bucketName ?? childName,
+                acl: definition.visibility === "public" ? "public-read" : "private",
+                forceDestroy: definition.forceDestroy ?? false,
+                ...(definition.versioned === undefined
+                    ? {}
+                    : { versioning: { enabled: definition.versioned } }),
+                region,
+                tags: this.tags,
+            }, { parent: this });
+            return {
+                id: definition.id,
+                bucket,
+                arn: bucket.arn,
+                name: bucket.bucket,
+                visibility: definition.visibility,
+                environment: {
+                    name: environmentName("bucket", definition.id, "NAME"),
+                    value: bucket.bucket,
+                },
+            };
+        });
+        this.bucketResources = this.buckets;
+        this.registerOutputs({
+            bucketArns: this.buckets.map(({ arn }) => arn),
+            bucketNames: this.buckets.map(({ name }) => name),
+        });
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/components/RelkitBuckets/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/components/RelkitBuckets/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,aAAa,CAAC;AACnC,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAGnD,cAAc,YAAY,CAAC;AAE3B,qEAAqE;AACrE,MAAM,OAAO,aAAc,SAAQ,MAAM,CAAC,iBAAiB;IAChD,OAAO,CAAkC;IACzC,eAAe,CAAkC;IACjD,IAAI,CAAwC;IAErD,YAAY,IAAY,EAAE,IAAuB,EAAE,OAAwC,EAAE;QAC3F,MAAM,WAAW,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,aAAa,GAAG,YAAY,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAC9D,KAAK,CAAC,gCAAgC,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QACjE,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;YAC5C,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,EAAE,GAAG,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;YAC1E,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,MAAM,CAC9B,SAAS,EACT;gBACE,MAAM,EAAE,UAAU,CAAC,UAAU,IAAI,SAAS;gBAC1C,GAAG,EAAE,UAAU,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS;gBACnE,YAAY,EAAE,UAAU,CAAC,YAAY,IAAI,KAAK;gBAC9C,GAAG,CAAC,UAAU,CAAC,SAAS,KAAK,SAAS;oBACpC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC;gBACtD,MAAM;gBACN,IAAI,EAAE,IAAI,CAAC,IAAI;aAChB,EACD,EAAE,MAAM,EAAE,IAAI,EAAE,CACjB,CAAC;YACF,OAAO;gBACL,EAAE,EAAE,UAAU,CAAC,EAAE;gBACjB,MAAM;gBACN,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,IAAI,EAAE,MAAM,CAAC,MAAM;gBACnB,UAAU,EAAE,UAAU,CAAC,UAAU;gBACjC,WAAW,EAAE;oBACX,IAAI,EAAE,eAAe,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,EAAE,MAAM,CAAC;oBACtD,KAAK,EAAE,MAAM,CAAC,MAAM;iBACrB;aACF,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC;QACpC,IAAI,CAAC,eAAe,CAAC;YACnB,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC;YAC9C,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC;SAClD,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/components/RelkitBuckets/types.d.ts

@@ -0,0 +1,23 @@
+import type * as aws from "@pulumi/aws";
+import type * as pulumi from "@pulumi/pulumi";
+import type { RelkitComponentArgs, RelkitEnvironmentVariable } from "../common.js";
+export type RelkitBucketVisibility = "private" | "public";
+export interface RelkitBucketDefinition {
+    readonly id: string;
+    readonly visibility?: RelkitBucketVisibility;
+    readonly bucketName?: pulumi.Input<string>;
+    readonly forceDestroy?: pulumi.Input<boolean>;
+    readonly versioned?: pulumi.Input<boolean>;
+}
+export interface RelkitBucketsArgs extends RelkitComponentArgs {
+    readonly buckets: readonly RelkitBucketDefinition[];
+}
+export interface RelkitBucketResource {
+    readonly id: string;
+    readonly bucket: aws.s3.Bucket;
+    readonly arn: pulumi.Output<string>;
+    readonly name: pulumi.Output<string>;
+    readonly visibility: RelkitBucketVisibility;
+    readonly environment: RelkitEnvironmentVariable;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/components/RelkitBuckets/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/components/RelkitBuckets/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,GAAG,MAAM,aAAa,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAC9C,OAAO,KAAK,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AAEnF,MAAM,MAAM,sBAAsB,GAAG,SAAS,GAAG,QAAQ,CAAC;AAE1D,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,UAAU,CAAC,EAAE,sBAAsB,CAAC;IAC7C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3C,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC9C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;CAC5C;AAED,MAAM,WAAW,iBAAkB,SAAQ,mBAAmB;IAC5D,QAAQ,CAAC,OAAO,EAAE,SAAS,sBAAsB,EAAE,CAAC;CACrD;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACrC,QAAQ,CAAC,UAAU,EAAE,sBAAsB,CAAC;IAC5C,QAAQ,CAAC,WAAW,EAAE,yBAAyB,CAAC;CACjD"}

package/dist/components/RelkitBuckets/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/components/RelkitBuckets/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/components/RelkitBuckets/types.ts"],"names":[],"mappings":""}

package/dist/components/RelkitBuckets/validation.d.ts

@@ -0,0 +1,10 @@
+import type { RelkitBucketDefinition, RelkitBucketsArgs } from "./types.js";
+export interface NormalizedBucket {
+    readonly id: string;
+    readonly visibility: "private" | "public";
+    readonly bucketName?: RelkitBucketDefinition["bucketName"];
+    readonly forceDestroy?: RelkitBucketDefinition["forceDestroy"];
+    readonly versioned?: RelkitBucketDefinition["versioned"];
+}
+export declare function normalizeBuckets(args: RelkitBucketsArgs): readonly NormalizedBucket[];
+//# sourceMappingURL=validation.d.ts.map

package/dist/components/RelkitBuckets/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../../src/components/RelkitBuckets/validation.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE5E,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,UAAU,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC1C,QAAQ,CAAC,UAAU,CAAC,EAAE,sBAAsB,CAAC,YAAY,CAAC,CAAC;IAC3D,QAAQ,CAAC,YAAY,CAAC,EAAE,sBAAsB,CAAC,cAAc,CAAC,CAAC;IAC/D,QAAQ,CAAC,SAAS,CAAC,EAAE,sBAAsB,CAAC,WAAW,CAAC,CAAC;CAC1D;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,iBAAiB,GAAG,SAAS,gBAAgB,EAAE,CAkBrF"}

package/dist/components/RelkitBuckets/validation.js

@@ -0,0 +1,22 @@
+import { normalizeId } from "@relkit/contracts";
+export function normalizeBuckets(args) {
+    const ids = new Set();
+    return args.buckets.map((definition) => {
+        const id = normalizeId(definition.id);
+        if (!ids.add(id))
+            throw new TypeError(`Duplicate AWS bucket "${id}".`);
+        const visibility = definition.visibility ?? "private";
+        if (visibility !== "private" && visibility !== "public")
+            throw new TypeError(`AWS bucket "${id}" visibility is invalid.`);
+        if (typeof definition.bucketName === "string" && definition.bucketName.trim() === "")
+            throw new TypeError(`AWS bucket "${id}" bucketName must not be empty.`);
+        return {
+            id,
+            visibility,
+            ...(definition.bucketName === undefined ? {} : { bucketName: definition.bucketName }),
+            ...(definition.forceDestroy === undefined ? {} : { forceDestroy: definition.forceDestroy }),
+            ...(definition.versioned === undefined ? {} : { versioned: definition.versioned }),
+        };
+    });
+}
+//# sourceMappingURL=validation.js.map

package/dist/components/RelkitBuckets/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../src/components/RelkitBuckets/validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAWhD,MAAM,UAAU,gBAAgB,CAAC,IAAuB;IACtD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;QACrC,MAAM,EAAE,GAAG,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACtC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,yBAAyB,EAAE,IAAI,CAAC,CAAC;QACvE,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,IAAI,SAAS,CAAC;QACtD,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,QAAQ;YACrD,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,0BAA0B,CAAC,CAAC;QACnE,IAAI,OAAO,UAAU,CAAC,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE;YAClF,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,iCAAiC,CAAC,CAAC;QAC1E,OAAO;YACL,EAAE;YACF,UAAU;YACV,GAAG,CAAC,UAAU,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC;YACrF,GAAG,CAAC,UAAU,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,UAAU,CAAC,YAAY,EAAE,CAAC;YAC3F,GAAG,CAAC,UAAU,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,CAAC;SACnF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/components/RelkitCaches/client.d.ts

@@ -0,0 +1,20 @@
+export interface RelkitValkeyClientOptions {
+    readonly url: string;
+    readonly tls?: boolean;
+    readonly connectionTimeoutMs?: number;
+}
+/** Promise-only cache operations backed by Bun's native RedisClient. */
+export interface RelkitValkeyClient {
+    readonly connected: boolean;
+    connect(): Promise<void>;
+    close(): void;
+    ping(): Promise<boolean>;
+    get(key: string): Promise<string | null>;
+    set(key: string, value: string, ttlMs?: number): Promise<void>;
+    delete(key: string): Promise<number>;
+    has(key: string): Promise<boolean>;
+    increment(key: string, amount?: number): Promise<number>;
+}
+/** Creates a private native Valkey client without exporting its Bun type. */
+export declare function createValkeyClient(options: RelkitValkeyClientOptions): RelkitValkeyClient;
+//# sourceMappingURL=client.d.ts.map

package/dist/components/RelkitCaches/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../src/components/RelkitCaches/client.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;CACvC;AAED,wEAAwE;AACxE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,KAAK,IAAI,IAAI,CAAC;IACd,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IACzB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACzC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACrC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACnC,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC1D;AAED,6EAA6E;AAC7E,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,yBAAyB,GAAG,kBAAkB,CAsCzF"}