@relkit/cloud-aws 0.0.0

package/dist/runtime/http.js

@@ -0,0 +1,98 @@
+export async function awsRequest(url, options) {
+    const request = options.init ?? {};
+    const headers = new Headers(request.headers);
+    const body = request.body ?? "";
+    const fetcher = options.fetch ?? globalThis.fetch;
+    const resolvedCredentials = options.credentials ?? (await runtimeCredentials(fetcher));
+    if (resolvedCredentials !== undefined)
+        await sign(url, { ...options, credentials: resolvedCredentials }, headers, body);
+    const { body: requestBody, ...requestWithoutBody } = request;
+    return fetcher(url, {
+        ...requestWithoutBody,
+        ...(requestBody === undefined ? {} : { body: requestBody }),
+        headers,
+    });
+}
+let cachedCredentials;
+async function runtimeCredentials(fetcher) {
+    const path = process.env.AWS_CONTAINER_CREDENTIALS_RELATIVE_URI;
+    if (path === undefined || !path.startsWith("/"))
+        return undefined;
+    if (cachedCredentials !== undefined && cachedCredentials.expiresAt > Date.now() + 60_000)
+        return cachedCredentials.value;
+    const headers = new Headers();
+    const token = process.env.AWS_CONTAINER_AUTHORIZATION_TOKEN;
+    if (token !== undefined)
+        headers.set("authorization", token);
+    const response = await fetcher(`http://169.254.170.2${path}`, { headers });
+    await assertResponse(response, "container credentials");
+    const value = (await response.json());
+    if (typeof value.AccessKeyId !== "string" || typeof value.SecretAccessKey !== "string")
+        throw new Error("AWS container credentials response is invalid");
+    const credentials = {
+        accessKeyId: value.AccessKeyId,
+        secretAccessKey: value.SecretAccessKey,
+        ...(typeof value.Token === "string" ? { sessionToken: value.Token } : {}),
+    };
+    const expiration = typeof value.Expiration === "string" ? Date.parse(value.Expiration) : NaN;
+    cachedCredentials = {
+        value: credentials,
+        expiresAt: Number.isFinite(expiration) ? expiration : Date.now() + 5 * 60_000,
+    };
+    return credentials;
+}
+export async function assertResponse(response, operation) {
+    if (response.ok)
+        return response;
+    throw new Error(`AWS ${operation} failed with status ${response.status}`);
+}
+async function sign(url, options, headers, body) {
+    const credentials = options.credentials;
+    const now = new Date();
+    const amzDate = now.toISOString().replace(/[:-]|\.\d{3}/g, "");
+    const date = amzDate.slice(0, 8);
+    const parsed = new URL(url);
+    const payloadHash = await hash(body);
+    headers.set("host", parsed.host);
+    headers.set("x-amz-date", amzDate);
+    headers.set("x-amz-content-sha256", payloadHash);
+    if (credentials.sessionToken !== undefined)
+        headers.set("x-amz-security-token", credentials.sessionToken);
+    const canonicalHeaders = [...headers.entries()]
+        .map(([key, value]) => [key.toLowerCase(), value.trim().replace(/\s+/g, " ")])
+        .sort(([left], [right]) => left.localeCompare(right));
+    const signedHeaders = canonicalHeaders.map(([key]) => key).join(";");
+    const canonical = canonicalHeaders.map(([key, value]) => `${key}:${value}\n`).join("");
+    const request = [
+        (options.init?.method ?? "GET").toUpperCase(),
+        parsed.pathname || "/",
+        parsed.search.slice(1),
+        canonical,
+        signedHeaders,
+        payloadHash,
+    ].join("\n");
+    const scope = `${date}/${options.region}/${options.service}/aws4_request`;
+    const stringToSign = `AWS4-HMAC-SHA256\n${amzDate}\n${scope}\n${await hash(request)}`;
+    const signingKey = await key(credentials.secretAccessKey, date, options.region, options.service);
+    const signature = hex(await hmac(signingKey, stringToSign));
+    headers.set("authorization", `AWS4-HMAC-SHA256 Credential=${credentials.accessKeyId}/${scope}, SignedHeaders=${signedHeaders}, Signature=${signature}`);
+}
+async function key(secret, date, region, service) {
+    let value = await hmac(`AWS4${secret}`, date);
+    value = await hmac(value, region);
+    value = await hmac(value, service);
+    return hmac(value, "aws4_request");
+}
+async function hmac(keyValue, value) {
+    const keyData = typeof keyValue === "string" ? new TextEncoder().encode(keyValue) : keyValue;
+    const cryptoKey = await crypto.subtle.importKey("raw", keyData, { name: "HMAC", hash: "SHA-256" }, false, ["sign"]);
+    return crypto.subtle.sign("HMAC", cryptoKey, new TextEncoder().encode(value));
+}
+async function hash(value) {
+    const bytes = typeof value === "string" ? new TextEncoder().encode(value) : value;
+    return hex(await crypto.subtle.digest("SHA-256", Uint8Array.from(bytes)));
+}
+function hex(value) {
+    return [...new Uint8Array(value)].map((byte) => byte.toString(16).padStart(2, "0")).join("");
+}
+//# sourceMappingURL=http.js.map

package/dist/runtime/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/runtime/http.ts"],"names":[],"mappings":"AAcA,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAW,EAAE,OAA0B;IACtE,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;IAChC,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IAClD,MAAM,mBAAmB,GAAG,OAAO,CAAC,WAAW,IAAI,CAAC,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;IACvF,IAAI,mBAAmB,KAAK,SAAS;QACnC,MAAM,IAAI,CAAC,GAAG,EAAE,EAAE,GAAG,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACnF,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,kBAAkB,EAAE,GAAG,OAAO,CAAC;IAC7D,OAAO,OAAO,CAAC,GAAG,EAAE;QAClB,GAAG,kBAAkB;QACrB,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAA6C,EAAE,CAAC;QAC7F,OAAO;KACR,CAAC,CAAC;AACL,CAAC;AAED,IAAI,iBAA6F,CAAC;AAElG,KAAK,UAAU,kBAAkB,CAC/B,OAAgC;IAEhC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC;IAChE,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAClE,IAAI,iBAAiB,KAAK,SAAS,IAAI,iBAAiB,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM;QACtF,OAAO,iBAAiB,CAAC,KAAK,CAAC;IACjC,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC;IAC5D,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,uBAAuB,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3E,MAAM,cAAc,CAAC,QAAQ,EAAE,uBAAuB,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAKnC,CAAC;IACF,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,eAAe,KAAK,QAAQ;QACpF,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,MAAM,WAAW,GAAG;QAClB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,GAAG,CAAC,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1E,CAAC;IACF,MAAM,UAAU,GAAG,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC7F,iBAAiB,GAAG;QAClB,KAAK,EAAE,WAAW;QAClB,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,MAAM;KAC9E,CAAC;IACF,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAkB,EAAE,SAAiB;IACxE,IAAI,QAAQ,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC;IACjC,MAAM,IAAI,KAAK,CAAC,OAAO,SAAS,uBAAuB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,KAAK,UAAU,IAAI,CACjB,GAAW,EACX,OAA0B,EAC1B,OAAgB,EAChB,IAAyB;IAEzB,MAAM,WAAW,GAAG,OAAO,CAAC,WAAY,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,OAAO,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;IACrC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACjC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACnC,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,WAAW,CAAC,CAAC;IACjD,IAAI,WAAW,CAAC,YAAY,KAAK,SAAS;QACxC,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,WAAW,CAAC,YAAY,CAAC,CAAC;IAChE,MAAM,gBAAgB,GAAG,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;SAC5C,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAU,CAAC;SACtF,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;IACxD,MAAM,aAAa,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrE,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvF,MAAM,OAAO,GAAG;QACd,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE;QAC7C,MAAM,CAAC,QAAQ,IAAI,GAAG;QACtB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACtB,SAAS;QACT,aAAa;QACb,WAAW;KACZ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,MAAM,KAAK,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,OAAO,eAAe,CAAC;IAC1E,MAAM,YAAY,GAAG,qBAAqB,OAAO,KAAK,KAAK,KAAK,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;IACtF,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,eAAe,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IACjG,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC;IAC5D,OAAO,CAAC,GAAG,CACT,eAAe,EACf,+BAA+B,WAAW,CAAC,WAAW,IAAI,KAAK,mBAAmB,aAAa,eAAe,SAAS,EAAE,CAC1H,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,GAAG,CAChB,MAAc,EACd,IAAY,EACZ,MAAc,EACd,OAAe;IAEf,IAAI,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC;IAC9C,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAClC,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACnC,OAAO,IAAI,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;AACrC,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,QAA8B,EAAE,KAAa;IAC/D,MAAM,OAAO,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC7F,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAC7C,KAAK,EACL,OAAO,EACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EACjC,KAAK,EACL,CAAC,MAAM,CAAC,CACT,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,KAA0B;IAC5C,MAAM,KAAK,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAClF,OAAO,GAAG,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,GAAG,CAAC,KAAkB;IAC7B,OAAO,CAAC,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC/F,CAAC"}

package/dist/runtime/index.d.ts

@@ -0,0 +1,8 @@
+export * from "./buckets.js";
+export * from "./cache.js";
+export * from "./config.js";
+export * from "./events.js";
+export * from "./factory.js";
+export * from "./jobs.js";
+export * from "./observability.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/runtime/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC;AAC1B,cAAc,oBAAoB,CAAC"}

package/dist/runtime/index.js

@@ -0,0 +1,8 @@
+export * from "./buckets.js";
+export * from "./cache.js";
+export * from "./config.js";
+export * from "./events.js";
+export * from "./factory.js";
+export * from "./jobs.js";
+export * from "./observability.js";
+//# sourceMappingURL=index.js.map

package/dist/runtime/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC;AAC1B,cAAc,oBAAoB,CAAC"}

package/dist/runtime/jobs.d.ts

@@ -0,0 +1,15 @@
+import type { JobQueueFactoryContext, JobQueueHandle } from "@relkit/engine";
+import type { JobProvider } from "@relkit/jobs";
+import { type AwsCredentials } from "./config.js";
+export interface AwsJobOptions {
+    readonly region: string;
+    readonly queueUrl?: unknown;
+    readonly endpoint?: unknown;
+    readonly credentials?: AwsCredentials;
+    readonly fetch?: typeof globalThis.fetch | undefined;
+}
+export interface AwsJobProvider extends JobProvider {
+    readonly createQueue: (context: JobQueueFactoryContext) => JobQueueHandle;
+}
+export declare function createSqsJobProvider(options: AwsJobOptions): AwsJobProvider;
+//# sourceMappingURL=jobs.d.ts.map

package/dist/runtime/jobs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jobs.d.ts","sourceRoot":"","sources":["../../src/runtime/jobs.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC7E,OAAO,KAAK,EAA0C,WAAW,EAAE,MAAM,cAAc,CAAC;AACxF,OAAO,EAAE,KAAK,cAAc,EAAQ,MAAM,aAAa,CAAC;AAGxD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,cAAc,CAAC;IACtC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,GAAG,SAAS,CAAC;CACtD;AAED,MAAM,WAAW,cAAe,SAAQ,WAAW;IACjD,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,EAAE,sBAAsB,KAAK,cAAc,CAAC;CAC3E;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,aAAa,GAAG,cAAc,CAiD3E"}

package/dist/runtime/jobs.js

@@ -0,0 +1,133 @@
+import { text } from "./config.js";
+import { assertResponse, awsRequest } from "./http.js";
+export function createSqsJobProvider(options) {
+    const queueUrl = text(options.queueUrl, "AWS job queueUrl");
+    const endpoint = text(options.endpoint, "AWS SQS endpoint") ?? `https://sqs.${options.region}.amazonaws.com`;
+    const auth = options.credentials;
+    const request = async (values, operation) => {
+        if (queueUrl === undefined)
+            throw new Error("AWS job queueUrl is not configured");
+        const response = await awsRequest(endpoint, {
+            service: "sqs",
+            region: options.region,
+            credentials: auth,
+            fetch: options.fetch,
+            init: {
+                method: "POST",
+                headers: { "content-type": "application/x-www-form-urlencoded" },
+                body: new URLSearchParams({
+                    ...values,
+                    QueueUrl: queueUrl,
+                    Version: "2012-11-05",
+                }).toString(),
+            },
+        });
+        await assertResponse(response, operation);
+        return response.text();
+    };
+    const send = async (input, correlationId) => {
+        const xml = await request({ Action: "SendMessage", MessageBody: JSON.stringify({ input, correlationId }) }, "SQS enqueue");
+        return decodeXml(xml.match(/<MessageId>([^<]+)<\/MessageId>/)?.[1] ?? `job-${crypto.randomUUID()}`);
+    };
+    return Object.freeze({
+        enqueue: async (input, requestOptions, context) => {
+            if (context.signal.aborted)
+                throw context.signal.reason ?? new Error("Job operation cancelled");
+            return {
+                instanceId: await send(input, requestOptions.correlationId ?? context.correlationId),
+                accepted: true,
+            };
+        },
+        createQueue: (context) => createQueue(context, request, send),
+    });
+}
+function createQueue(context, request, send) {
+    const entries = new Map();
+    const receipts = new Map();
+    let order = 0;
+    const enqueue = async (value) => {
+        const instanceId = await send(value.input);
+        const acceptedAt = value.acceptedAt ?? Date.now();
+        const entry = Object.freeze({
+            instanceId,
+            accepted: true,
+            duplicate: false,
+            state: "available",
+            input: value.input,
+            profile: context.profile,
+            attempt: 0,
+            acceptedAt,
+            availableAt: acceptedAt,
+            order: ++order,
+        });
+        entries.set(instanceId, entry);
+        return entry;
+    };
+    const acquire = async () => {
+        const xml = await request({
+            Action: "ReceiveMessage",
+            MaxNumberOfMessages: "1",
+            AttributeName: "ApproximateReceiveCount",
+        }, "SQS receive");
+        const message = xml.match(/<Message>([\s\S]*?)<\/Message>/)?.[1];
+        if (message === undefined)
+            return undefined;
+        const instanceId = field(message, "MessageId") ?? `job-${crypto.randomUUID()}`;
+        const body = field(message, "Body");
+        const parsed = body === undefined ? {} : JSON.parse(body);
+        const receipt = field(message, "ReceiptHandle");
+        if (receipt !== undefined)
+            receipts.set(instanceId, receipt);
+        const entry = Object.freeze({
+            instanceId,
+            accepted: true,
+            duplicate: false,
+            state: "leased",
+            input: parsed.input ?? null,
+            profile: context.profile,
+            attempt: Number(field(message, "ApproximateReceiveCount") ?? "1"),
+            acceptedAt: Date.now(),
+            order: ++order,
+        });
+        entries.set(instanceId, entry);
+        return entry;
+    };
+    const transition = async (instanceId, state, transitionOptions = {}) => {
+        const current = entries.get(instanceId);
+        if (current === undefined)
+            throw new Error(`SQS job ${instanceId} is unknown`);
+        const receipt = receipts.get(instanceId);
+        if (receipt !== undefined && (state === "completed" || state === "dead-lettered"))
+            await request({ Action: "DeleteMessage", ReceiptHandle: receipt }, "SQS acknowledge");
+        if (receipt !== undefined && state === "delayed") {
+            const seconds = Math.max(0, Math.ceil(((transitionOptions.availableAt ?? Date.now()) - Date.now()) / 1_000));
+            await request({
+                Action: "ChangeMessageVisibility",
+                ReceiptHandle: receipt,
+                VisibilityTimeout: String(seconds),
+            }, "SQS retry");
+        }
+        const entry = Object.freeze({ ...current, state, ...transitionOptions });
+        entries.set(instanceId, entry);
+        return entry;
+    };
+    return Object.freeze({
+        ready: async () => undefined,
+        enqueue,
+        acquire,
+        transition,
+        get: (id) => entries.get(id),
+    });
+}
+function field(xml, name) {
+    const value = xml.match(new RegExp(`<${name}>([^<]*)<\\/${name}>`))?.[1];
+    return value === undefined ? undefined : decodeXml(value);
+}
+function decodeXml(value) {
+    return value
+        .replaceAll("&quot;", '"')
+        .replaceAll("&amp;", "&")
+        .replaceAll("&lt;", "<")
+        .replaceAll("&gt;", ">");
+}
+//# sourceMappingURL=jobs.js.map

package/dist/runtime/jobs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jobs.js","sourceRoot":"","sources":["../../src/runtime/jobs.ts"],"names":[],"mappings":"AAGA,OAAO,EAAuB,IAAI,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAcvD,MAAM,UAAU,oBAAoB,CAAC,OAAsB;IACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;IAC5D,MAAM,QAAQ,GACZ,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,kBAAkB,CAAC,IAAI,eAAe,OAAO,CAAC,MAAM,gBAAgB,CAAC;IAC9F,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC;IACjC,MAAM,OAAO,GAAG,KAAK,EAAE,MAA8B,EAAE,SAAiB,EAAmB,EAAE;QAC3F,IAAI,QAAQ,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAClF,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,QAAQ,EAAE;YAC1C,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,WAAW,EAAE,IAAI;YACjB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,IAAI,EAAE;gBACJ,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;gBAChE,IAAI,EAAE,IAAI,eAAe,CAAC;oBACxB,GAAG,MAAM;oBACT,QAAQ,EAAE,QAAQ;oBAClB,OAAO,EAAE,YAAY;iBACtB,CAAC,CAAC,QAAQ,EAAE;aACd;SACF,CAAC,CAAC;QACH,MAAM,cAAc,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC1C,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,KAAK,EAAE,KAAc,EAAE,aAAsB,EAAE,EAAE;QAC5D,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,EAAE,EAChF,aAAa,CACd,CAAC;QACF,OAAO,SAAS,CACd,GAAG,CAAC,KAAK,CAAC,iCAAiC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,MAAM,CAAC,UAAU,EAAE,EAAE,CAClF,CAAC;IACJ,CAAC,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,KAAK,EACZ,KAAc,EACd,cAAiC,EACjC,OAA4B,EAC5B,EAAE;YACF,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO;gBACxB,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YACtE,OAAO;gBACL,UAAU,EAAE,MAAM,IAAI,CAAC,KAAK,EAAE,cAAc,CAAC,aAAa,IAAI,OAAO,CAAC,aAAa,CAAC;gBACpF,QAAQ,EAAE,IAAa;aACxB,CAAC;QACJ,CAAC;QACD,WAAW,EAAE,CAAC,OAA+B,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;KACtF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAClB,OAA+B,EAC/B,OAA+E,EAC/E,IAAiE;IAGjE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAiB,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,OAAO,GAAG,KAAK,EAAE,KAA+C,EAAkB,EAAE;QACxF,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC;YAC1B,UAAU;YACV,QAAQ,EAAE,IAAa;YACvB,SAAS,EAAE,KAAK;YAChB,KAAK,EAAE,WAAoB;YAC3B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO,EAAE,CAAC;YACV,UAAU;YACV,WAAW,EAAE,UAAU;YACvB,KAAK,EAAE,EAAE,KAAK;SACf,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC/B,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,KAAK,IAAgC,EAAE;QACrD,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB;YACE,MAAM,EAAE,gBAAgB;YACxB,mBAAmB,EAAE,GAAG;YACxB,aAAa,EAAE,yBAAyB;SACzC,EACD,aAAa,CACd,CAAC;QACF,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,gCAAgC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACjE,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC5C,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,OAAO,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;QAC/E,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAoC,CAAC;QAC9F,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAChD,IAAI,OAAO,KAAK,SAAS;YAAE,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC;YAC1B,UAAU;YACV,QAAQ,EAAE,IAAa;YACvB,SAAS,EAAE,KAAK;YAChB,KAAK,EAAE,QAAiB;YACxB,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,IAAI;YAC3B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,yBAAyB,CAAC,IAAI,GAAG,CAAC;YACjE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;YACtB,KAAK,EAAE,EAAE,KAAK;SACf,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC/B,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,MAAM,UAAU,GAAG,KAAK,EACtB,UAAkB,EAClB,KAAkD,EAClD,oBAAiE,EAAE,EACnD,EAAE;QAClB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACxC,IAAI,OAAO,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,UAAU,aAAa,CAAC,CAAC;QAC/E,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACzC,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,eAAe,CAAC;YAC/E,MAAM,OAAO,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,iBAAiB,CAAC,CAAC;QACxF,IAAI,OAAO,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACjD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CACtB,CAAC,EACD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,WAAW,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC,CAChF,CAAC;YACF,MAAM,OAAO,CACX;gBACE,MAAM,EAAE,yBAAyB;gBACjC,aAAa,EAAE,OAAO;gBACtB,iBAAiB,EAAE,MAAM,CAAC,OAAO,CAAC;aACnC,EACD,WAAW,CACZ,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,GAAG,iBAAiB,EAAE,CAAU,CAAC;QAClF,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC/B,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;QAC5B,OAAO;QACP,OAAO;QACP,UAAU;QACV,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;KAC7B,CAAC,CAAC;AACL,CAAC;AAED,SAAS,KAAK,CAAC,GAAW,EAAE,IAAY;IACtC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,IAAI,eAAe,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACzE,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,KAAK;SACT,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC;SACzB,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC;SACxB,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC;SACvB,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAC7B,CAAC"}

package/dist/runtime/observability.d.ts

@@ -0,0 +1,13 @@
+import { type ObservabilityCollector } from "@relkit/observability";
+export interface AwsObservabilityProvider extends ObservabilityCollector {
+    readonly capabilities: Readonly<{
+        readonly logs: true;
+        readonly traces: true;
+        readonly export: "cloudwatch";
+    }>;
+    readonly ready: () => Promise<void>;
+    readonly release: () => Promise<void>;
+}
+/** CloudWatch receives the container's structured sink; this adapter keeps the same collector protocol. */
+export declare function createAwsObservabilityProvider(): AwsObservabilityProvider;
+//# sourceMappingURL=observability.d.ts.map

package/dist/runtime/observability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"observability.d.ts","sourceRoot":"","sources":["../../src/runtime/observability.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgC,KAAK,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAElG,MAAM,WAAW,wBAAyB,SAAQ,sBAAsB;IACtE,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC;QAC9B,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;QACpB,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;QACtB,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;KAC/B,CAAC,CAAC;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC;AAED,2GAA2G;AAC3G,wBAAgB,8BAA8B,IAAI,wBAAwB,CAYzE"}

package/dist/runtime/observability.js

@@ -0,0 +1,16 @@
+import { createObservabilityCollector } from "@relkit/observability";
+/** CloudWatch receives the container's structured sink; this adapter keeps the same collector protocol. */
+export function createAwsObservabilityProvider() {
+    const collector = createObservabilityCollector();
+    return Object.freeze({
+        ...collector,
+        capabilities: Object.freeze({
+            logs: true,
+            traces: true,
+            export: "cloudwatch",
+        }),
+        ready: async () => undefined,
+        release: async () => collector.clear(),
+    });
+}
+//# sourceMappingURL=observability.js.map

package/dist/runtime/observability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"observability.js","sourceRoot":"","sources":["../../src/runtime/observability.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,EAA+B,MAAM,uBAAuB,CAAC;AAYlG,2GAA2G;AAC3G,MAAM,UAAU,8BAA8B;IAC5C,MAAM,SAAS,GAAG,4BAA4B,EAAE,CAAC;IACjD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,SAAS;QACZ,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC;YAC1B,IAAI,EAAE,IAAa;YACnB,MAAM,EAAE,IAAa;YACrB,MAAM,EAAE,YAAqB;SAC9B,CAAC;QACF,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;QAC5B,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE;KACvC,CAAC,CAAC;AACL,CAAC"}

package/package.json

@@ -0,0 +1,56 @@
+{
+  "name": "@relkit/cloud-aws",
+  "version": "0.0.0",
+  "description": "Unsupported internal AWS deployment components for RELKIT; use @relkit/cli.",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/rel-kit/relkit.git",
+    "directory": "packages/cloud-aws"
+  },
+  "homepage": "https://github.com/rel-kit/relkit#readme",
+  "bugs": {
+    "url": "https://github.com/rel-kit/relkit/issues"
+  },
+  "files": [
+    "dist"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "engines": {
+    "bun": ">=1.3.10"
+  },
+  "type": "module",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./runtime": {
+      "types": "./dist/runtime/index.d.ts",
+      "import": "./dist/runtime/index.js"
+    }
+  },
+  "dependencies": {
+    "@relkit/agents": "0.0.0",
+    "@relkit/app": "0.0.0",
+    "@relkit/buckets": "0.0.0",
+    "@relkit/cache": "0.0.0",
+    "@relkit/contracts": "0.0.0",
+    "@relkit/engine": "0.0.0",
+    "@relkit/events": "0.0.0",
+    "@relkit/graph": "0.0.0",
+    "@relkit/jobs": "0.0.0",
+    "@relkit/observability": "0.0.0",
+    "@relkit/providers-standard": "0.0.0",
+    "@pulumi/aws": "7.42.0",
+    "@pulumi/awsx": "3.8.0",
+    "@pulumi/pulumi": "3.258.0"
+  },
+  "scripts": {
+    "build": "tsc -b",
+    "check": "tsc -b --pretty false",
+    "typecheck": "tsc -b --pretty false"
+  }
+}