agent-bundle 0.1.0

package/dist/cli/deploy/aws-ecs-role.js

@@ -0,0 +1,114 @@
+import { errorHasCode } from "./aws-cli.js";
+import { EXECUTION_POLICY_ARN, EXECUTION_ROLE_NAME, } from "./aws-ecs-shared.js";
+function toAssumeRolePolicy() {
+    return JSON.stringify({
+        Version: "2012-10-17",
+        Statement: [
+            {
+                Effect: "Allow",
+                Principal: {
+                    Service: "ecs-tasks.amazonaws.com",
+                },
+                Action: "sts:AssumeRole",
+            },
+        ],
+    });
+}
+async function resolveExecutionRoleArn(input) {
+    try {
+        const existing = await input.awsCliJsonImpl({
+            region: input.region,
+            args: ["iam", "get-role", "--role-name", EXECUTION_ROLE_NAME],
+            stderr: input.stderr,
+        });
+        const arn = existing.Role?.Arn;
+        if (!arn) {
+            throw new Error(`IAM role ${EXECUTION_ROLE_NAME} exists but has no ARN.`);
+        }
+        return arn;
+    }
+    catch (error) {
+        if (!errorHasCode(error, "NoSuchEntity")) {
+            throw error;
+        }
+        const created = await input.awsCliJsonImpl({
+            region: input.region,
+            args: [
+                "iam",
+                "create-role",
+                "--role-name",
+                EXECUTION_ROLE_NAME,
+                "--assume-role-policy-document",
+                toAssumeRolePolicy(),
+            ],
+            stderr: input.stderr,
+        });
+        const createdArn = created.Role?.Arn;
+        if (!createdArn) {
+            throw new Error(`Failed to create IAM role ${EXECUTION_ROLE_NAME}.`);
+        }
+        return createdArn;
+    }
+}
+async function attachExecutionPolicy(input) {
+    await input.awsCliExecImpl({
+        region: input.region,
+        args: [
+            "iam",
+            "attach-role-policy",
+            "--role-name",
+            EXECUTION_ROLE_NAME,
+            "--policy-arn",
+            EXECUTION_POLICY_ARN,
+        ],
+        stderr: input.stderr,
+    });
+}
+async function upsertSecretsPolicy(input) {
+    const secretPolicy = JSON.stringify({
+        Version: "2012-10-17",
+        Statement: [
+            {
+                Effect: "Allow",
+                Action: ["secretsmanager:GetSecretValue"],
+                Resource: [input.secretArn],
+            },
+        ],
+    });
+    await input.awsCliExecImpl({
+        region: input.region,
+        args: [
+            "iam",
+            "put-role-policy",
+            "--role-name",
+            EXECUTION_ROLE_NAME,
+            "--policy-name",
+            "agent-bundle-secrets-access",
+            "--policy-document",
+            secretPolicy,
+        ],
+        stderr: input.stderr,
+    });
+}
+export async function ensureExecutionRole(input) {
+    const roleArn = await resolveExecutionRoleArn({
+        region: input.region,
+        stderr: input.stderr,
+        awsCliJsonImpl: input.awsCliJsonImpl,
+    });
+    await attachExecutionPolicy({
+        region: input.region,
+        stderr: input.stderr,
+        awsCliExecImpl: input.awsCliExecImpl,
+    });
+    if (input.secretArn) {
+        await upsertSecretsPolicy({
+            region: input.region,
+            secretArn: input.secretArn,
+            stderr: input.stderr,
+            awsCliExecImpl: input.awsCliExecImpl,
+        });
+    }
+    return roleArn;
+}
+//# sourceMappingURL=aws-ecs-role.js.map

package/dist/cli/deploy/aws-ecs-role.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aws-ecs-role.js","sourceRoot":"","sources":["../../../src/cli/deploy/aws-ecs-role.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EACL,oBAAoB,EACpB,mBAAmB,GAGpB,MAAM,qBAAqB,CAAC;AAc7B,SAAS,kBAAkB;IACzB,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,OAAO,EAAE,YAAY;QACrB,SAAS,EAAE;YACT;gBACE,MAAM,EAAE,OAAO;gBACf,SAAS,EAAE;oBACT,OAAO,EAAE,yBAAyB;iBACnC;gBACD,MAAM,EAAE,gBAAgB;aACzB;SACF;KACF,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,KAItC;IACC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,cAAc,CAAgB;YACzD,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,IAAI,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,mBAAmB,CAAC;YAC7D,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC;QAE/B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CAAC,YAAY,mBAAmB,yBAAyB,CAAC,CAAC;QAC5E,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,cAAc,CAAC,EAAE,CAAC;YACzC,MAAM,KAAK,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,cAAc,CAAmB;YAC3D,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,IAAI,EAAE;gBACJ,KAAK;gBACL,aAAa;gBACb,aAAa;gBACb,mBAAmB;gBACnB,+BAA+B;gBAC/B,kBAAkB,EAAE;aACrB;YACD,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;QAErC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,6BAA6B,mBAAmB,GAAG,CAAC,CAAC;QACvE,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,KAIpC;IACC,MAAM,KAAK,CAAC,cAAc,CAAC;QACzB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,IAAI,EAAE;YACJ,KAAK;YACL,oBAAoB;YACpB,aAAa;YACb,mBAAmB;YACnB,cAAc;YACd,oBAAoB;SACrB;QACD,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,KAKlC;IACC,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC;QAClC,OAAO,EAAE,YAAY;QACrB,SAAS,EAAE;YACT;gBACE,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,CAAC,+BAA+B,CAAC;gBACzC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;aAC5B;SACF;KACF,CAAC,CAAC;IAEH,MAAM,KAAK,CAAC,cAAc,CAAC;QACzB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,IAAI,EAAE;YACJ,KAAK;YACL,iBAAiB;YACjB,aAAa;YACb,mBAAmB;YACnB,eAAe;YACf,6BAA6B;YAC7B,mBAAmB;YACnB,YAAY;SACb;QACD,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAMzC;IACC,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC;QAC5C,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CAAC,CAAC;IAEH,MAAM,qBAAqB,CAAC;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CAAC,CAAC;IAEH,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACpB,MAAM,mBAAmB,CAAC;YACxB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,cAAc,EAAE,KAAK,CAAC,cAAc;SACrC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/cli/deploy/aws-ecs-service.d.ts

@@ -0,0 +1,37 @@
+import type { Writable } from "node:stream";
+import { type AwsCliExecJson, type AwsCliExecText, type AwsEcsDeployConfig, type DeploymentNames } from "./aws-ecs-shared.js";
+export declare function ensureLogGroup(input: {
+    region: string;
+    logGroupName: string;
+    stderr?: Writable;
+    awsCliExecImpl: AwsCliExecText;
+    awsCliJsonImpl: AwsCliExecJson;
+}): Promise<void>;
+export declare function registerTaskDefinition(input: {
+    region: string;
+    names: DeploymentNames;
+    imageUri: string;
+    roleArn: string;
+    deployConfig: AwsEcsDeployConfig;
+    secretArn?: string;
+    secretNames: string[];
+    stderr?: Writable;
+    awsCliJsonImpl: AwsCliExecJson;
+}): Promise<string>;
+export declare function ensureService(input: {
+    region: string;
+    names: DeploymentNames;
+    taskDefinitionArn: string;
+    subnetIds: string[];
+    securityGroupId: string;
+    desiredCount: number;
+    stderr?: Writable;
+    awsCliExecImpl: AwsCliExecText;
+    awsCliJsonImpl: AwsCliExecJson;
+}): Promise<void>;
+export declare function resolveServicePublicIp(input: {
+    region: string;
+    names: DeploymentNames;
+    stderr?: Writable;
+    awsCliJsonImpl: AwsCliExecJson;
+}): Promise<string | undefined>;

package/dist/cli/deploy/aws-ecs-service.js

@@ -0,0 +1,207 @@
+import { toNetworkConfiguration, toSecretEnvRefs, } from "./aws-ecs-shared.js";
+export async function ensureLogGroup(input) {
+    const described = await input.awsCliJsonImpl({
+        region: input.region,
+        args: ["logs", "describe-log-groups", "--log-group-name-prefix", input.logGroupName],
+        stderr: input.stderr,
+    });
+    const exists = (described.logGroups ?? []).some((group) => group.logGroupName === input.logGroupName);
+    if (exists) {
+        return;
+    }
+    await input.awsCliExecImpl({
+        region: input.region,
+        args: ["logs", "create-log-group", "--log-group-name", input.logGroupName],
+        stderr: input.stderr,
+    });
+}
+export async function registerTaskDefinition(input) {
+    const containerDefinitions = [
+        {
+            name: input.names.serviceName,
+            image: input.imageUri,
+            essential: true,
+            portMappings: [
+                {
+                    containerPort: input.deployConfig.containerPort,
+                    protocol: "tcp",
+                },
+            ],
+            ...(input.secretArn && input.secretNames.length > 0
+                ? { secrets: toSecretEnvRefs(input.secretArn, input.secretNames) }
+                : {}),
+            logConfiguration: {
+                logDriver: "awslogs",
+                options: {
+                    "awslogs-group": input.names.logGroupName,
+                    "awslogs-region": input.region,
+                    "awslogs-stream-prefix": input.names.serviceName,
+                },
+            },
+        },
+    ];
+    const registered = await input.awsCliJsonImpl({
+        region: input.region,
+        args: [
+            "ecs",
+            "register-task-definition",
+            "--family",
+            input.names.taskFamily,
+            "--requires-compatibilities",
+            "FARGATE",
+            "--network-mode",
+            "awsvpc",
+            "--cpu",
+            input.deployConfig.cpu,
+            "--memory",
+            input.deployConfig.memory,
+            "--execution-role-arn",
+            input.roleArn,
+            "--task-role-arn",
+            input.roleArn,
+            "--container-definitions",
+            JSON.stringify(containerDefinitions),
+        ],
+        stderr: input.stderr,
+    });
+    const taskDefinitionArn = registered.taskDefinition?.taskDefinitionArn;
+    if (!taskDefinitionArn) {
+        throw new Error(`Failed to register task definition for ${input.names.taskFamily}.`);
+    }
+    return taskDefinitionArn;
+}
+async function createOrUpdateService(input) {
+    const networkConfiguration = JSON.stringify(toNetworkConfiguration(input.subnetIds, input.securityGroupId));
+    if (input.existingStatus && input.existingStatus !== "INACTIVE") {
+        await input.awsCliExecImpl({
+            region: input.region,
+            args: [
+                "ecs",
+                "update-service",
+                "--cluster",
+                input.names.clusterName,
+                "--service",
+                input.names.serviceName,
+                "--task-definition",
+                input.taskDefinitionArn,
+                "--desired-count",
+                String(input.desiredCount),
+                "--network-configuration",
+                networkConfiguration,
+                "--force-new-deployment",
+            ],
+            stderr: input.stderr,
+        });
+        return;
+    }
+    await input.awsCliExecImpl({
+        region: input.region,
+        args: [
+            "ecs",
+            "create-service",
+            "--cluster",
+            input.names.clusterName,
+            "--service-name",
+            input.names.serviceName,
+            "--task-definition",
+            input.taskDefinitionArn,
+            "--launch-type",
+            "FARGATE",
+            "--desired-count",
+            String(input.desiredCount),
+            "--network-configuration",
+            networkConfiguration,
+        ],
+        stderr: input.stderr,
+    });
+}
+export async function ensureService(input) {
+    const described = await input.awsCliJsonImpl({
+        region: input.region,
+        args: [
+            "ecs",
+            "describe-services",
+            "--cluster",
+            input.names.clusterName,
+            "--services",
+            input.names.serviceName,
+        ],
+        stderr: input.stderr,
+    });
+    await createOrUpdateService({
+        region: input.region,
+        names: input.names,
+        taskDefinitionArn: input.taskDefinitionArn,
+        subnetIds: input.subnetIds,
+        securityGroupId: input.securityGroupId,
+        desiredCount: input.desiredCount,
+        existingStatus: described.services[0]?.status,
+        stderr: input.stderr,
+        awsCliExecImpl: input.awsCliExecImpl,
+    });
+    await input.awsCliExecImpl({
+        region: input.region,
+        args: [
+            "ecs",
+            "wait",
+            "services-stable",
+            "--cluster",
+            input.names.clusterName,
+            "--services",
+            input.names.serviceName,
+        ],
+        stderr: input.stderr,
+    });
+}
+function findNetworkInterfaceId(taskOutput) {
+    const details = taskOutput.tasks?.[0]?.attachments?.flatMap((attachment) => attachment.details ?? []) ?? [];
+    return details.find((detail) => detail.name === "networkInterfaceId")?.value;
+}
+export async function resolveServicePublicIp(input) {
+    const listed = await input.awsCliJsonImpl({
+        region: input.region,
+        args: [
+            "ecs",
+            "list-tasks",
+            "--cluster",
+            input.names.clusterName,
+            "--service-name",
+            input.names.serviceName,
+            "--desired-status",
+            "RUNNING",
+        ],
+        stderr: input.stderr,
+    });
+    const taskArn = listed.taskArns?.[0];
+    if (!taskArn) {
+        return undefined;
+    }
+    const taskDetails = await input.awsCliJsonImpl({
+        region: input.region,
+        args: [
+            "ecs",
+            "describe-tasks",
+            "--cluster",
+            input.names.clusterName,
+            "--tasks",
+            taskArn,
+        ],
+        stderr: input.stderr,
+    });
+    const networkInterfaceId = findNetworkInterfaceId(taskDetails);
+    if (!networkInterfaceId) {
+        return undefined;
+    }
+    const networkInterfaces = await input.awsCliJsonImpl({
+        region: input.region,
+        args: [
+            "ec2",
+            "describe-network-interfaces",
+            "--network-interface-ids",
+            networkInterfaceId,
+        ],
+        stderr: input.stderr,
+    });
+    return networkInterfaces.NetworkInterfaces?.[0]?.Association?.PublicIp;
+}
+//# sourceMappingURL=aws-ecs-service.js.map

package/dist/cli/deploy/aws-ecs-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aws-ecs-service.js","sourceRoot":"","sources":["../../../src/cli/deploy/aws-ecs-service.ts"],"names":[],"mappings":"AAEA,OAAO,EAKL,sBAAsB,EACtB,eAAe,GAChB,MAAM,qBAAqB,CAAC;AA2C7B,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAMpC;IACC,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,cAAc,CAA0B;QACpE,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,IAAI,EAAE,CAAC,MAAM,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,KAAK,CAAC,YAAY,CAAC;QACpF,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,CAAC,SAAS,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY,CAAC,CAAC;IACtG,IAAI,MAAM,EAAE,CAAC;QACX,OAAO;IACT,CAAC;IAED,MAAM,KAAK,CAAC,cAAc,CAAC;QACzB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,IAAI,EAAE,CAAC,MAAM,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,KAAK,CAAC,YAAY,CAAC;QAC1E,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAU5C;IACC,MAAM,oBAAoB,GAAG;QAC3B;YACE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW;YAC7B,KAAK,EAAE,KAAK,CAAC,QAAQ;YACrB,SAAS,EAAE,IAAI;YACf,YAAY,EAAE;gBACZ;oBACE,aAAa,EAAE,KAAK,CAAC,YAAY,CAAC,aAAa;oBAC/C,QAAQ,EAAE,KAAK;iBAChB;aACF;YACD,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;gBACjD,CAAC,CAAC,EAAE,OAAO,EAAE,eAAe,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE;gBAClE,CAAC,CAAC,EAAE,CAAC;YACP,gBAAgB,EAAE;gBAChB,SAAS,EAAE,SAAS;gBACpB,OAAO,EAAE;oBACP,eAAe,EAAE,KAAK,CAAC,KAAK,CAAC,YAAY;oBACzC,gBAAgB,EAAE,KAAK,CAAC,MAAM;oBAC9B,uBAAuB,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW;iBACjD;aACF;SACF;KACF,CAAC;IAEF,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,cAAc,CAA+B;QAC1E,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,IAAI,EAAE;YACJ,KAAK;YACL,0BAA0B;YAC1B,UAAU;YACV,KAAK,CAAC,KAAK,CAAC,UAAU;YACtB,4BAA4B;YAC5B,SAAS;YACT,gBAAgB;YAChB,QAAQ;YACR,OAAO;YACP,KAAK,CAAC,YAAY,CAAC,GAAG;YACtB,UAAU;YACV,KAAK,CAAC,YAAY,CAAC,MAAM;YACzB,sBAAsB;YACtB,KAAK,CAAC,OAAO;YACb,iBAAiB;YACjB,KAAK,CAAC,OAAO;YACb,yBAAyB;YACzB,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC;SACrC;QACD,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;IAEH,MAAM,iBAAiB,GAAG,UAAU,CAAC,cAAc,EAAE,iBAAiB,CAAC;IACvE,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,0CAA0C,KAAK,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC;IACvF,CAAC;IAED,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,KAUpC;IACC,MAAM,oBAAoB,GAAG,IAAI,CAAC,SAAS,CACzC,sBAAsB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,eAAe,CAAC,CAC/D,CAAC;IAEF,IAAI,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,cAAc,KAAK,UAAU,EAAE,CAAC;QAChE,MAAM,KAAK,CAAC,cAAc,CAAC;YACzB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,IAAI,EAAE;gBACJ,KAAK;gBACL,gBAAgB;gBAChB,WAAW;gBACX,KAAK,CAAC,KAAK,CAAC,WAAW;gBACvB,WAAW;gBACX,KAAK,CAAC,KAAK,CAAC,WAAW;gBACvB,mBAAmB;gBACnB,KAAK,CAAC,iBAAiB;gBACvB,iBAAiB;gBACjB,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC;gBAC1B,yBAAyB;gBACzB,oBAAoB;gBACpB,wBAAwB;aACzB;YACD,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,KAAK,CAAC,cAAc,CAAC;QACzB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,IAAI,EAAE;YACJ,KAAK;YACL,gBAAgB;YAChB,WAAW;YACX,KAAK,CAAC,KAAK,CAAC,WAAW;YACvB,gBAAgB;YAChB,KAAK,CAAC,KAAK,CAAC,WAAW;YACvB,mBAAmB;YACnB,KAAK,CAAC,iBAAiB;YACvB,eAAe;YACf,SAAS;YACT,iBAAiB;YACjB,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC;YAC1B,yBAAyB;YACzB,oBAAoB;SACrB;QACD,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAUnC;IACC,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,cAAc,CAAyB;QACnE,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,IAAI,EAAE;YACJ,KAAK;YACL,mBAAmB;YACnB,WAAW;YACX,KAAK,CAAC,KAAK,CAAC,WAAW;YACvB,YAAY;YACZ,KAAK,CAAC,KAAK,CAAC,WAAW;SACxB;QACD,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;IAEH,MAAM,qBAAqB,CAAC;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,cAAc,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM;QAC7C,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CAAC,CAAC;IAEH,MAAM,KAAK,CAAC,cAAc,CAAC;QACzB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,IAAI,EAAE;YACJ,KAAK;YACL,MAAM;YACN,iBAAiB;YACjB,WAAW;YACX,KAAK,CAAC,KAAK,CAAC,WAAW;YACvB,YAAY;YACZ,KAAK,CAAC,KAAK,CAAC,WAAW;SACxB;QACD,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,sBAAsB,CAAC,UAA+B;IAC7D,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;IAC5G,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,oBAAoB,CAAC,EAAE,KAAK,CAAC;AAC/E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAK5C;IACC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,cAAc,CAAkB;QACzD,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,IAAI,EAAE;YACJ,KAAK;YACL,YAAY;YACZ,WAAW;YACX,KAAK,CAAC,KAAK,CAAC,WAAW;YACvB,gBAAgB;YAChB,KAAK,CAAC,KAAK,CAAC,WAAW;YACvB,kBAAkB;YAClB,SAAS;SACV;QACD,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;IAErC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,cAAc,CAAsB;QAClE,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,IAAI,EAAE;YACJ,KAAK;YACL,gBAAgB;YAChB,WAAW;YACX,KAAK,CAAC,KAAK,CAAC,WAAW;YACvB,SAAS;YACT,OAAO;SACR;QACD,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;IACH,MAAM,kBAAkB,GAAG,sBAAsB,CAAC,WAAW,CAAC,CAAC;IAE/D,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,iBAAiB,GAAG,MAAM,KAAK,CAAC,cAAc,CAAkC;QACpF,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,IAAI,EAAE;YACJ,KAAK;YACL,6BAA6B;YAC7B,yBAAyB;YACzB,kBAAkB;SACnB;QACD,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;IAEH,OAAO,iBAAiB,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC;AACzE,CAAC"}

package/dist/cli/deploy/aws-ecs-shared.d.ts

@@ -0,0 +1,59 @@
+import type { Writable } from "node:stream";
+import type { AwsCliExecOptions } from "./aws-cli.js";
+export declare const EXECUTION_ROLE_NAME = "agent-bundle-ecs-execution-role";
+export declare const EXECUTION_POLICY_ARN = "arn:aws:iam::aws:policy/service-role/AmazonECSTaskExecutionRolePolicy";
+export type AwsCliExecJson = <T>(options: AwsCliExecOptions) => Promise<T>;
+export type AwsCliExecText = (options: AwsCliExecOptions) => Promise<{
+    stdout: string;
+}>;
+export type AwsCliExecWithStatus = (options: AwsCliExecOptions) => Promise<{
+    stdout: string;
+    exitCode: number;
+    stderr: string;
+}>;
+export type AwsEcsDeployConfig = {
+    cpu: string;
+    memory: string;
+    desiredCount: number;
+    containerPort: number;
+};
+export type DeployToAwsEcsOptions = {
+    region: string;
+    bundleName: string;
+    imageUri: string;
+    secrets: Record<string, string>;
+    deployConfig: AwsEcsDeployConfig;
+    stdout?: Writable;
+    stderr?: Writable;
+    awsCliExecImpl?: AwsCliExecWithStatus;
+    awsCliJsonImpl?: AwsCliExecJson;
+};
+export type DeployToAwsEcsResult = {
+    clusterName: string;
+    serviceName: string;
+    taskDefinitionArn: string;
+    securityGroupId: string;
+    secretArn?: string;
+    publicIp?: string;
+};
+export type DeploymentNames = {
+    prefix: string;
+    clusterName: string;
+    serviceName: string;
+    taskFamily: string;
+    securityGroupName: string;
+    secretName: string;
+    logGroupName: string;
+};
+export declare function createAwsDeploymentNames(bundleName: string): DeploymentNames;
+export declare function toNetworkConfiguration(subnetIds: string[], securityGroupId: string): {
+    awsvpcConfiguration: {
+        subnets: string[];
+        securityGroups: string[];
+        assignPublicIp: "ENABLED";
+    };
+};
+export declare function toSecretEnvRefs(secretArn: string, secretNames: string[]): Array<{
+    name: string;
+    valueFrom: string;
+}>;

package/dist/cli/deploy/aws-ecs-shared.js

@@ -0,0 +1,30 @@
+export const EXECUTION_ROLE_NAME = "agent-bundle-ecs-execution-role";
+export const EXECUTION_POLICY_ARN = "arn:aws:iam::aws:policy/service-role/AmazonECSTaskExecutionRolePolicy";
+export function createAwsDeploymentNames(bundleName) {
+    const prefix = `agent-bundle-${bundleName}`;
+    return {
+        prefix,
+        clusterName: prefix,
+        serviceName: prefix,
+        taskFamily: prefix,
+        securityGroupName: prefix,
+        secretName: prefix,
+        logGroupName: `/ecs/${prefix}`,
+    };
+}
+export function toNetworkConfiguration(subnetIds, securityGroupId) {
+    return {
+        awsvpcConfiguration: {
+            subnets: subnetIds,
+            securityGroups: [securityGroupId],
+            assignPublicIp: "ENABLED",
+        },
+    };
+}
+export function toSecretEnvRefs(secretArn, secretNames) {
+    return secretNames.map((name) => ({
+        name,
+        valueFrom: `${secretArn}:${name}::`,
+    }));
+}
+//# sourceMappingURL=aws-ecs-shared.js.map

package/dist/cli/deploy/aws-ecs-shared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aws-ecs-shared.js","sourceRoot":"","sources":["../../../src/cli/deploy/aws-ecs-shared.ts"],"names":[],"mappings":"AAIA,MAAM,CAAC,MAAM,mBAAmB,GAAG,iCAAiC,CAAC;AACrE,MAAM,CAAC,MAAM,oBAAoB,GAAG,uEAAuE,CAAC;AAgD5G,MAAM,UAAU,wBAAwB,CAAC,UAAkB;IACzD,MAAM,MAAM,GAAG,gBAAgB,UAAU,EAAE,CAAC;IAE5C,OAAO;QACL,MAAM;QACN,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,MAAM;QACnB,UAAU,EAAE,MAAM;QAClB,iBAAiB,EAAE,MAAM;QACzB,UAAU,EAAE,MAAM;QAClB,YAAY,EAAE,QAAQ,MAAM,EAAE;KAC/B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,SAAmB,EAAE,eAAuB;IAOjF,OAAO;QACL,mBAAmB,EAAE;YACnB,OAAO,EAAE,SAAS;YAClB,cAAc,EAAE,CAAC,eAAe,CAAC;YACjC,cAAc,EAAE,SAAS;SAC1B;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,SAAiB,EACjB,WAAqB;IAErB,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAChC,IAAI;QACJ,SAAS,EAAE,GAAG,SAAS,IAAI,IAAI,IAAI;KACpC,CAAC,CAAC,CAAC;AACN,CAAC"}

package/dist/cli/deploy/aws-ecs.d.ts

@@ -0,0 +1,3 @@
+import { type DeployToAwsEcsOptions, type DeployToAwsEcsResult } from "./aws-ecs-shared.js";
+export { createAwsDeploymentNames, type AwsEcsDeployConfig, type DeployToAwsEcsOptions, type DeployToAwsEcsResult, } from "./aws-ecs-shared.js";
+export declare function deployToAwsEcs(options: DeployToAwsEcsOptions): Promise<DeployToAwsEcsResult>;

package/dist/cli/deploy/aws-ecs.js

@@ -0,0 +1,141 @@
+import { awsCliExec, awsCliJson, } from "./aws-cli.js";
+import { ensureCluster, ensureSecurityGroup, resolveDefaultVpcId, resolveSubnetIds, toAwsCliTextExecutor, upsertSecret, } from "./aws-ecs-infra.js";
+import { ensureExecutionRole } from "./aws-ecs-role.js";
+import { ensureLogGroup, ensureService, registerTaskDefinition, resolveServicePublicIp, } from "./aws-ecs-service.js";
+import { EXECUTION_ROLE_NAME, createAwsDeploymentNames, } from "./aws-ecs-shared.js";
+export { createAwsDeploymentNames, } from "./aws-ecs-shared.js";
+async function prepareInfrastructure(input) {
+    input.stdout.write(`[deploy/aws] Upserting secret ${input.names.secretName}\n`);
+    const secretArn = await upsertSecret({
+        region: input.region,
+        secretName: input.names.secretName,
+        secrets: input.secrets,
+        stderr: input.stderr,
+        awsCliJsonImpl: input.awsCliJsonImpl,
+    });
+    input.stdout.write("[deploy/aws] Discovering default VPC and subnets\n");
+    const vpcId = await resolveDefaultVpcId({
+        region: input.region,
+        stderr: input.stderr,
+        awsCliJsonImpl: input.awsCliJsonImpl,
+    });
+    const subnetIds = await resolveSubnetIds({
+        region: input.region,
+        vpcId,
+        stderr: input.stderr,
+        awsCliJsonImpl: input.awsCliJsonImpl,
+    });
+    input.stdout.write(`[deploy/aws] Ensuring security group ${input.names.securityGroupName}\n`);
+    const securityGroupId = await ensureSecurityGroup({
+        region: input.region,
+        vpcId,
+        groupName: input.names.securityGroupName,
+        containerPort: input.containerPort,
+        stderr: input.stderr,
+        awsCliExecImpl: input.awsCliExecImpl,
+        awsCliJsonImpl: input.awsCliJsonImpl,
+    });
+    return {
+        vpcId,
+        subnetIds,
+        securityGroupId,
+        secretArn,
+    };
+}
+async function deployService(input) {
+    input.stdout.write(`[deploy/aws] Ensuring IAM role ${EXECUTION_ROLE_NAME}\n`);
+    const roleArn = await ensureExecutionRole({
+        region: input.region,
+        secretArn: input.secretArn,
+        stderr: input.stderr,
+        awsCliExecImpl: input.awsCliExecTextImpl,
+        awsCliJsonImpl: input.awsCliJsonImpl,
+    });
+    input.stdout.write(`[deploy/aws] Ensuring CloudWatch log group ${input.names.logGroupName}\n`);
+    await ensureLogGroup({
+        region: input.region,
+        logGroupName: input.names.logGroupName,
+        stderr: input.stderr,
+        awsCliExecImpl: input.awsCliExecTextImpl,
+        awsCliJsonImpl: input.awsCliJsonImpl,
+    });
+    input.stdout.write(`[deploy/aws] Registering task definition ${input.names.taskFamily}\n`);
+    const taskDefinitionArn = await registerTaskDefinition({
+        region: input.region,
+        names: input.names,
+        imageUri: input.imageUri,
+        roleArn,
+        deployConfig: input.deployConfig,
+        secretArn: input.secretArn,
+        secretNames: Object.keys(input.secrets),
+        stderr: input.stderr,
+        awsCliJsonImpl: input.awsCliJsonImpl,
+    });
+    input.stdout.write(`[deploy/aws] Creating or updating ECS service ${input.names.serviceName}\n`);
+    await ensureService({
+        region: input.region,
+        names: input.names,
+        taskDefinitionArn,
+        subnetIds: input.subnetIds,
+        securityGroupId: input.securityGroupId,
+        desiredCount: input.deployConfig.desiredCount,
+        stderr: input.stderr,
+        awsCliExecImpl: input.awsCliExecTextImpl,
+        awsCliJsonImpl: input.awsCliJsonImpl,
+    });
+    return taskDefinitionArn;
+}
+export async function deployToAwsEcs(options) {
+    const stdout = options.stdout ?? process.stdout;
+    const awsCliExecImpl = options.awsCliExecImpl ?? awsCliExec;
+    const awsCliJsonImpl = options.awsCliJsonImpl ?? awsCliJson;
+    const awsCliExecTextImpl = toAwsCliTextExecutor(awsCliExecImpl);
+    const names = createAwsDeploymentNames(options.bundleName);
+    stdout.write(`[deploy/aws] Ensuring ECS cluster ${names.clusterName}\n`);
+    await ensureCluster({
+        region: options.region,
+        clusterName: names.clusterName,
+        stderr: options.stderr,
+        awsCliJsonImpl,
+    });
+    const infrastructure = await prepareInfrastructure({
+        region: options.region,
+        names,
+        containerPort: options.deployConfig.containerPort,
+        secrets: options.secrets,
+        stderr: options.stderr,
+        stdout,
+        awsCliExecImpl,
+        awsCliJsonImpl,
+    });
+    const taskDefinitionArn = await deployService({
+        region: options.region,
+        names,
+        imageUri: options.imageUri,
+        deployConfig: options.deployConfig,
+        secrets: options.secrets,
+        secretArn: infrastructure.secretArn,
+        subnetIds: infrastructure.subnetIds,
+        securityGroupId: infrastructure.securityGroupId,
+        stderr: options.stderr,
+        stdout,
+        awsCliExecTextImpl,
+        awsCliJsonImpl,
+    });
+    stdout.write("[deploy/aws] Resolving service public IP\n");
+    const publicIp = await resolveServicePublicIp({
+        region: options.region,
+        names,
+        stderr: options.stderr,
+        awsCliJsonImpl,
+    });
+    return {
+        clusterName: names.clusterName,
+        serviceName: names.serviceName,
+        taskDefinitionArn,
+        securityGroupId: infrastructure.securityGroupId,
+        secretArn: infrastructure.secretArn,
+        publicIp,
+    };
+}
+//# sourceMappingURL=aws-ecs.js.map

package/dist/cli/deploy/aws-ecs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aws-ecs.js","sourceRoot":"","sources":["../../../src/cli/deploy/aws-ecs.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,UAAU,EACV,UAAU,GACX,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,aAAa,EACb,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,EACpB,YAAY,GACb,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EACL,cAAc,EACd,aAAa,EACb,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,mBAAmB,EACnB,wBAAwB,GAKzB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,wBAAwB,GAIzB,MAAM,qBAAqB,CAAC;AAS7B,KAAK,UAAU,qBAAqB,CAAC,KASpC;IACC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,KAAK,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC;IAChF,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC;QACnC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,UAAU;QAClC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CAAC,CAAC;IAEH,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACzE,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC;QACtC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC;QACvC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK;QACL,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CAAC,CAAC;IAEH,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,wCAAwC,KAAK,CAAC,KAAK,CAAC,iBAAiB,IAAI,CAAC,CAAC;IAC9F,MAAM,eAAe,GAAG,MAAM,mBAAmB,CAAC;QAChD,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK;QACL,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,iBAAiB;QACxC,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CAAC,CAAC;IAEH,OAAO;QACL,KAAK;QACL,SAAS;QACT,eAAe;QACf,SAAS;KACV,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,KAa5B;IACC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,mBAAmB,IAAI,CAAC,CAAC;IAC9E,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC;QACxC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,cAAc,EAAE,KAAK,CAAC,kBAAkB;QACxC,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CAAC,CAAC;IAEH,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,8CAA8C,KAAK,CAAC,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC;IAC/F,MAAM,cAAc,CAAC;QACnB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,YAAY;QACtC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,cAAc,EAAE,KAAK,CAAC,kBAAkB;QACxC,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CAAC,CAAC;IAEH,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,4CAA4C,KAAK,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC;IAC3F,MAAM,iBAAiB,GAAG,MAAM,sBAAsB,CAAC;QACrD,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,OAAO;QACP,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;QACvC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CAAC,CAAC;IAEH,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,iDAAiD,KAAK,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,CAAC;IACjG,MAAM,aAAa,CAAC;QAClB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,iBAAiB;QACjB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,YAAY;QAC7C,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,cAAc,EAAE,KAAK,CAAC,kBAAkB;QACxC,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CAAC,CAAC;IAEH,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAA8B;IACjE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAChD,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,UAAU,CAAC;IAC5D,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,UAAU,CAAC;IAC5D,MAAM,kBAAkB,GAAG,oBAAoB,CAAC,cAAc,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,wBAAwB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAE3D,MAAM,CAAC,KAAK,CAAC,qCAAqC,KAAK,CAAC,WAAW,IAAI,CAAC,CAAC;IACzE,MAAM,aAAa,CAAC;QAClB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,cAAc;KACf,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,MAAM,qBAAqB,CAAC;QACjD,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,KAAK;QACL,aAAa,EAAE,OAAO,CAAC,YAAY,CAAC,aAAa;QACjD,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM;QACN,cAAc;QACd,cAAc;KACf,CAAC,CAAC;IAEH,MAAM,iBAAiB,GAAG,MAAM,aAAa,CAAC;QAC5C,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,KAAK;QACL,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,SAAS,EAAE,cAAc,CAAC,SAAS;QACnC,SAAS,EAAE,cAAc,CAAC,SAAS;QACnC,eAAe,EAAE,cAAc,CAAC,eAAe;QAC/C,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM;QACN,kBAAkB;QAClB,cAAc;KACf,CAAC,CAAC;IAEH,MAAM,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC;QAC5C,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,KAAK;QACL,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,cAAc;KACf,CAAC,CAAC;IAEH,OAAO;QACL,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,iBAAiB;QACjB,eAAe,EAAE,cAAc,CAAC,eAAe;QAC/C,SAAS,EAAE,cAAc,CAAC,SAAS;QACnC,QAAQ;KACT,CAAC;AACJ,CAAC"}

package/dist/cli/deploy/aws-prerequisites.d.ts

@@ -0,0 +1,16 @@
+import type { Writable } from "node:stream";
+import { type AwsCliExecOptions, type CommandRunner } from "./aws-cli.js";
+export type EnsureAwsPrerequisitesOptions = {
+    region: string;
+    requireDocker?: boolean;
+    stdout?: Writable;
+    stderr?: Writable;
+    runCommandImpl?: CommandRunner;
+    awsCliJsonImpl?: <T>(options: AwsCliExecOptions) => Promise<T>;
+};
+export type EnsureAwsPrerequisitesResult = {
+    accountId: string;
+    arn: string;
+    userId: string;
+};
+export declare function ensureAwsPrerequisites(options: EnsureAwsPrerequisitesOptions): Promise<EnsureAwsPrerequisitesResult>;

package/dist/cli/deploy/aws-prerequisites.js

@@ -0,0 +1,28 @@
+import { awsCliJson, runCommand, } from "./aws-cli.js";
+async function ensureCommandExists(command, runCommandImpl) {
+    await runCommandImpl(command, ["--version"]);
+}
+export async function ensureAwsPrerequisites(options) {
+    const runCommandImpl = options.runCommandImpl ?? runCommand;
+    const awsCliJsonImpl = options.awsCliJsonImpl ?? awsCliJson;
+    const stdout = options.stdout ?? process.stdout;
+    const requireDocker = options.requireDocker !== false;
+    stdout.write("[deploy/aws] Checking AWS CLI availability\n");
+    await ensureCommandExists("aws", runCommandImpl);
+    if (requireDocker) {
+        stdout.write("[deploy/aws] Checking Docker CLI availability\n");
+        await ensureCommandExists("docker", runCommandImpl);
+    }
+    stdout.write("[deploy/aws] Verifying AWS credentials with STS\n");
+    const identity = await awsCliJsonImpl({
+        region: options.region,
+        args: ["sts", "get-caller-identity"],
+        stderr: options.stderr,
+    });
+    return {
+        accountId: identity.Account,
+        arn: identity.Arn,
+        userId: identity.UserId,
+    };
+}
+//# sourceMappingURL=aws-prerequisites.js.map