blogwright-core 0.1.0

package/dist/aws/iam.js

@@ -0,0 +1,122 @@
+import { AwsError } from './errors.js';
+import { formEncode } from './form.js';
+import { allTags, textTag } from './xml.js';
+const VERSION = '2010-05-08';
+/** IAM client (query protocol) — roles with inline policies. */
+export class IamClient {
+    client;
+    constructor(client) {
+        this.client = client;
+    }
+    async call(params) {
+        const res = await this.client.send({
+            service: 'iam',
+            method: 'POST',
+            path: '/',
+            headers: { 'content-type': 'application/x-www-form-urlencoded; charset=utf-8' },
+            body: formEncode({ ...params, Version: VERSION }),
+        });
+        return res.text();
+    }
+    /** Return the role ARN, or undefined if the role does not exist. */
+    async getRoleArn(roleName) {
+        try {
+            const xml = await this.call({ Action: 'GetRole', RoleName: roleName });
+            return textTag(xml, 'Arn');
+        }
+        catch (err) {
+            if (err instanceof AwsError && err.isNotFound)
+                return undefined;
+            throw err;
+        }
+    }
+    /** Create a role (idempotent) and return its ARN. */
+    async ensureRole(roleName, assumeRolePolicy, description) {
+        try {
+            const xml = await this.call({
+                Action: 'CreateRole',
+                RoleName: roleName,
+                AssumeRolePolicyDocument: JSON.stringify(assumeRolePolicy),
+                Description: description,
+            });
+            const arn = textTag(xml, 'Arn');
+            if (!arn)
+                throw new Error('CreateRole returned no Arn');
+            return arn;
+        }
+        catch (err) {
+            if (err instanceof AwsError && err.isAlreadyExists) {
+                const arn = await this.getRoleArn(roleName);
+                if (arn) {
+                    // CreateRole's trust document is ignored for an existing role, so a
+                    // changed trust (e.g. a renamed githubRepo in the OIDC sub claim)
+                    // would silently keep granting the old principal. Reconcile it.
+                    await this.call({
+                        Action: 'UpdateAssumeRolePolicy',
+                        RoleName: roleName,
+                        PolicyDocument: JSON.stringify(assumeRolePolicy),
+                    });
+                    return arn;
+                }
+            }
+            throw err;
+        }
+    }
+    async putRolePolicy(roleName, policyName, policy) {
+        await this.call({
+            Action: 'PutRolePolicy',
+            RoleName: roleName,
+            PolicyName: policyName,
+            PolicyDocument: JSON.stringify(policy),
+        });
+    }
+    async listRolePolicies(roleName) {
+        const names = [];
+        let marker;
+        do {
+            const xml = await this.call({
+                Action: 'ListRolePolicies',
+                RoleName: roleName,
+                Marker: marker,
+            });
+            for (const m of allTags(xml, 'member'))
+                names.push(m.trim());
+            marker = textTag(xml, 'IsTruncated') === 'true' ? textTag(xml, 'Marker') : undefined;
+        } while (marker);
+        return names;
+    }
+    async deleteRolePolicy(roleName, policyName) {
+        await this.call({ Action: 'DeleteRolePolicy', RoleName: roleName, PolicyName: policyName });
+    }
+    /** Create an OIDC identity provider (idempotent). Account-global; never deleted here. */
+    async ensureOidcProvider(url, clientId, thumbprint) {
+        try {
+            await this.call({
+                Action: 'CreateOpenIDConnectProvider',
+                Url: url,
+                'ClientIDList.member.1': clientId,
+                'ThumbprintList.member.1': thumbprint,
+            });
+        }
+        catch (err) {
+            if (err instanceof AwsError && err.isAlreadyExists)
+                return;
+            throw err;
+        }
+    }
+    /** Delete a role, first removing any inline policies. Idempotent. */
+    async deleteRole(roleName) {
+        try {
+            for (const policy of await this.listRolePolicies(roleName)) {
+                await this.deleteRolePolicy(roleName, policy);
+            }
+            await this.call({ Action: 'DeleteRole', RoleName: roleName });
+        }
+        catch (err) {
+            if (err instanceof AwsError && err.isNotFound)
+                return;
+            throw err;
+        }
+    }
+}
+//# sourceMappingURL=iam.js.map

package/dist/aws/iam.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"iam.js","sourceRoot":"","sources":["../../src/aws/iam.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEvC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AAE5C,MAAM,OAAO,GAAG,YAAY,CAAC;AAE7B,gEAAgE;AAChE,MAAM,OAAO,SAAS;IACS;IAA7B,YAA6B,MAAqB;QAArB,WAAM,GAAN,MAAM,CAAe;IAAG,CAAC;IAE9C,KAAK,CAAC,IAAI,CAAC,MAA0C;QAC3D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YACjC,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,GAAG;YACT,OAAO,EAAE,EAAE,cAAc,EAAE,kDAAkD,EAAE;YAC/E,IAAI,EAAE,UAAU,CAAC,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;SAClD,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC;IAED,oEAAoE;IACpE,KAAK,CAAC,UAAU,CAAC,QAAgB;QAC/B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;YACvE,OAAO,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,QAAQ,IAAI,GAAG,CAAC,UAAU;gBAAE,OAAO,SAAS,CAAC;YAChE,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,qDAAqD;IACrD,KAAK,CAAC,UAAU,CACd,QAAgB,EAChB,gBAAwB,EACxB,WAAoB;QAEpB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC;gBAC1B,MAAM,EAAE,YAAY;gBACpB,QAAQ,EAAE,QAAQ;gBAClB,wBAAwB,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC;gBAC1D,WAAW,EAAE,WAAW;aACzB,CAAC,CAAC;YACH,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAChC,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;YACxD,OAAO,GAAG,CAAC;QACb,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,QAAQ,IAAI,GAAG,CAAC,eAAe,EAAE,CAAC;gBACnD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;gBAC5C,IAAI,GAAG,EAAE,CAAC;oBACR,oEAAoE;oBACpE,kEAAkE;oBAClE,gEAAgE;oBAChE,MAAM,IAAI,CAAC,IAAI,CAAC;wBACd,MAAM,EAAE,wBAAwB;wBAChC,QAAQ,EAAE,QAAQ;wBAClB,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC;qBACjD,CAAC,CAAC;oBACH,OAAO,GAAG,CAAC;gBACb,CAAC;YACH,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,QAAgB,EAAE,UAAkB,EAAE,MAAc;QACtE,MAAM,IAAI,CAAC,IAAI,CAAC;YACd,MAAM,EAAE,eAAe;YACvB,QAAQ,EAAE,QAAQ;YAClB,UAAU,EAAE,UAAU;YACtB,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;SACvC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,QAAgB;QACrC,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,MAA0B,CAAC;QAC/B,GAAG,CAAC;YACF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC;gBAC1B,MAAM,EAAE,kBAAkB;gBAC1B,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,MAAM;aACf,CAAC,CAAC;YACH,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7D,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,aAAa,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACvF,CAAC,QAAQ,MAAM,EAAE;QACjB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,QAAgB,EAAE,UAAkB;QACzD,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED,yFAAyF;IACzF,KAAK,CAAC,kBAAkB,CAAC,GAAW,EAAE,QAAgB,EAAE,UAAkB;QACxE,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC;gBACd,MAAM,EAAE,6BAA6B;gBACrC,GAAG,EAAE,GAAG;gBACR,uBAAuB,EAAE,QAAQ;gBACjC,yBAAyB,EAAE,UAAU;aACtC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,QAAQ,IAAI,GAAG,CAAC,eAAe;gBAAE,OAAO;YAC3D,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,qEAAqE;IACrE,KAAK,CAAC,UAAU,CAAC,QAAgB;QAC/B,IAAI,CAAC;YACH,KAAK,MAAM,MAAM,IAAI,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC3D,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAChD,CAAC;YACD,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,QAAQ,IAAI,GAAG,CAAC,UAAU;gBAAE,OAAO;YACtD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;CACF"}

package/dist/aws/logs.d.ts

@@ -0,0 +1,32 @@
+import type { SigningClient } from './signer.js';
+export interface LogEvent {
+    eventId: string;
+    timestamp: number;
+    message: string;
+}
+export interface FilterEventsOptions {
+    startTime?: number | undefined;
+    endTime?: number | undefined;
+}
+/** CloudWatch Logs client (AWS JSON 1.1). */
+export declare class LogsClient {
+    private readonly client;
+    constructor(client: SigningClient);
+    private call;
+    ensureLogGroup(name: string): Promise<void>;
+    putRetentionPolicy(name: string, retentionInDays: number): Promise<void>;
+    logGroupExists(name: string): Promise<boolean>;
+    deleteLogGroup(name: string): Promise<void>;
+    /** Fetch events across a log group within an optional time window. */
+    filterEvents(logGroupName: string, opts?: FilterEventsOptions): Promise<LogEvent[]>;
+    putDeliverySource(name: string, resourceArn: string, logType: string): Promise<string>;
+    putDeliveryDestination(name: string, logGroupArn: string): Promise<string>;
+    createDelivery(deliverySourceName: string, deliveryDestinationArn: string): Promise<void>;
+    /** The delivery id linking a given source (needed to delete it), or undefined if none. */
+    findDeliveryIdBySource(deliverySourceName: string): Promise<string | undefined>;
+    /** Ids of every delivery attached to a delivery source. */
+    deliveriesForSource(sourceName: string): Promise<string[]>;
+    deleteDelivery(id: string): Promise<void>;
+    deleteDeliverySource(name: string): Promise<void>;
+    deleteDeliveryDestination(name: string): Promise<void>;
+}

package/dist/aws/logs.js

@@ -0,0 +1,148 @@
+import { AwsError } from './errors.js';
+const TARGET = 'Logs_20140328';
+/** CloudWatch Logs client (AWS JSON 1.1). */
+export class LogsClient {
+    client;
+    constructor(client) {
+        this.client = client;
+    }
+    async call(op, payload) {
+        const res = await this.client.send({
+            service: 'logs',
+            method: 'POST',
+            path: '/',
+            headers: {
+                'content-type': 'application/x-amz-json-1.1',
+                'x-amz-target': `${TARGET}.${op}`,
+            },
+            body: JSON.stringify(payload),
+        });
+        const text = res.text();
+        return (text ? JSON.parse(text) : {});
+    }
+    async ensureLogGroup(name) {
+        try {
+            await this.call('CreateLogGroup', { logGroupName: name });
+        }
+        catch (err) {
+            if (err instanceof AwsError && err.isAlreadyExists)
+                return;
+            throw err;
+        }
+    }
+    async putRetentionPolicy(name, retentionInDays) {
+        await this.call('PutRetentionPolicy', { logGroupName: name, retentionInDays });
+    }
+    async logGroupExists(name) {
+        const out = await this.call('DescribeLogGroups', { logGroupNamePrefix: name });
+        return (out.logGroups ?? []).some((g) => g.logGroupName === name);
+    }
+    async deleteLogGroup(name) {
+        try {
+            await this.call('DeleteLogGroup', { logGroupName: name });
+        }
+        catch (err) {
+            if (err instanceof AwsError && err.isNotFound)
+                return;
+            throw err;
+        }
+    }
+    /** Fetch events across a log group within an optional time window. */
+    async filterEvents(logGroupName, opts = {}) {
+        const events = [];
+        let nextToken;
+        do {
+            const out = await this.call('FilterLogEvents', {
+                logGroupName,
+                ...(opts.startTime !== undefined ? { startTime: opts.startTime } : {}),
+                ...(opts.endTime !== undefined ? { endTime: opts.endTime } : {}),
+                ...(nextToken ? { nextToken } : {}),
+            });
+            for (const e of out.events ?? []) {
+                events.push({ eventId: e.eventId, timestamp: e.timestamp, message: e.message });
+            }
+            nextToken = out.nextToken;
+        } while (nextToken);
+        return events;
+    }
+    // --- CloudWatch vended log delivery (used to send CloudFront access logs here) ---
+    async putDeliverySource(name, resourceArn, logType) {
+        const out = await this.call('PutDeliverySource', {
+            name,
+            resourceArn,
+            logType,
+        });
+        return out.deliverySource?.arn ?? '';
+    }
+    async putDeliveryDestination(name, logGroupArn) {
+        const out = await this.call('PutDeliveryDestination', { name, deliveryDestinationConfiguration: { destinationResourceArn: logGroupArn } });
+        return out.deliveryDestination?.arn ?? '';
+    }
+    async createDelivery(deliverySourceName, deliveryDestinationArn) {
+        try {
+            await this.call('CreateDelivery', { deliverySourceName, deliveryDestinationArn });
+        }
+        catch (err) {
+            if (err instanceof AwsError && err.isAlreadyExists)
+                return;
+            throw err;
+        }
+    }
+    /** The delivery id linking a given source (needed to delete it), or undefined if none. */
+    async findDeliveryIdBySource(deliverySourceName) {
+        let nextToken;
+        do {
+            const out = await this.call('DescribeDeliveries', nextToken ? { nextToken } : {});
+            const match = (out.deliveries ?? []).find((d) => d.deliverySourceName === deliverySourceName);
+            if (match?.id)
+                return match.id;
+            nextToken = out.nextToken;
+        } while (nextToken);
+        return undefined;
+    }
+    /** Ids of every delivery attached to a delivery source. */
+    async deliveriesForSource(sourceName) {
+        const ids = [];
+        let nextToken;
+        do {
+            const out = await this.call('DescribeDeliveries', nextToken ? { nextToken } : {});
+            for (const d of out.deliveries ?? []) {
+                if (d.deliverySourceName === sourceName)
+                    ids.push(d.id);
+            }
+            nextToken = out.nextToken;
+        } while (nextToken);
+        return ids;
+    }
+    async deleteDelivery(id) {
+        try {
+            await this.call('DeleteDelivery', { id });
+        }
+        catch (err) {
+            if (err instanceof AwsError && err.isNotFound)
+                return;
+            throw err;
+        }
+    }
+    async deleteDeliverySource(name) {
+        try {
+            await this.call('DeleteDeliverySource', { name });
+        }
+        catch (err) {
+            if (err instanceof AwsError && err.isNotFound)
+                return;
+            throw err;
+        }
+    }
+    async deleteDeliveryDestination(name) {
+        try {
+            await this.call('DeleteDeliveryDestination', { name });
+        }
+        catch (err) {
+            if (err instanceof AwsError && err.isNotFound)
+                return;
+            throw err;
+        }
+    }
+}
+//# sourceMappingURL=logs.js.map

package/dist/aws/logs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logs.js","sourceRoot":"","sources":["../../src/aws/logs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAGvC,MAAM,MAAM,GAAG,eAAe,CAAC;AAa/B,6CAA6C;AAC7C,MAAM,OAAO,UAAU;IACQ;IAA7B,YAA6B,MAAqB;QAArB,WAAM,GAAN,MAAM,CAAe;IAAG,CAAC;IAE9C,KAAK,CAAC,IAAI,CAAI,EAAU,EAAE,OAAe;QAC/C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YACjC,OAAO,EAAE,MAAM;YACf,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,GAAG;YACT,OAAO,EAAE;gBACP,cAAc,EAAE,4BAA4B;gBAC5C,cAAc,EAAE,GAAG,MAAM,IAAI,EAAE,EAAE;aAClC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;SAC9B,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAM,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,IAAY;QAC/B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,QAAQ,IAAI,GAAG,CAAC,eAAe;gBAAE,OAAO;YAC3D,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,IAAY,EAAE,eAAuB;QAC5D,MAAM,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,IAAY;QAC/B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CACzB,mBAAmB,EACnB,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAC7B,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,IAAY;QAC/B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,QAAQ,IAAI,GAAG,CAAC,UAAU;gBAAE,OAAO;YACtD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,KAAK,CAAC,YAAY,CAAC,YAAoB,EAAE,OAA4B,EAAE;QACrE,MAAM,MAAM,GAAe,EAAE,CAAC;QAC9B,IAAI,SAA6B,CAAC;QAClC,GAAG,CAAC;YACF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAA8C,iBAAiB,EAAE;gBAC1F,YAAY;gBACZ,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtE,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpC,CAAC,CAAC;YACH,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;gBACjC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAClF,CAAC;YACD,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;QAC5B,CAAC,QAAQ,SAAS,EAAE;QACpB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,oFAAoF;IAEpF,KAAK,CAAC,iBAAiB,CAAC,IAAY,EAAE,WAAmB,EAAE,OAAe;QACxE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAwC,mBAAmB,EAAE;YACtF,IAAI;YACJ,WAAW;YACX,OAAO;SACR,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,cAAc,EAAE,GAAG,IAAI,EAAE,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,IAAY,EAAE,WAAmB;QAC5D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CACzB,wBAAwB,EACxB,EAAE,IAAI,EAAE,gCAAgC,EAAE,EAAE,sBAAsB,EAAE,WAAW,EAAE,EAAE,CACpF,CAAC;QACF,OAAO,GAAG,CAAC,mBAAmB,EAAE,GAAG,IAAI,EAAE,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,kBAA0B,EAAE,sBAA8B;QAC7E,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,CAAC,CAAC;QACpF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,QAAQ,IAAI,GAAG,CAAC,eAAe;gBAAE,OAAO;YAC3D,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,0FAA0F;IAC1F,KAAK,CAAC,sBAAsB,CAAC,kBAA0B;QACrD,IAAI,SAA6B,CAAC;QAClC,GAAG,CAAC;YACF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAGxB,oBAAoB,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACzD,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,kBAAkB,KAAK,kBAAkB,CAAC,CAAC;YAC9F,IAAI,KAAK,EAAE,EAAE;gBAAE,OAAO,KAAK,CAAC,EAAE,CAAC;YAC/B,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;QAC5B,CAAC,QAAQ,SAAS,EAAE;QACpB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,2DAA2D;IAC3D,KAAK,CAAC,mBAAmB,CAAC,UAAkB;QAC1C,MAAM,GAAG,GAAa,EAAE,CAAC;QACzB,IAAI,SAA6B,CAAC;QAClC,GAAG,CAAC;YACF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAGxB,oBAAoB,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACzD,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;gBACrC,IAAI,CAAC,CAAC,kBAAkB,KAAK,UAAU;oBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC1D,CAAC;YACD,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;QAC5B,CAAC,QAAQ,SAAS,EAAE;QACpB,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,EAAU;QAC7B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,QAAQ,IAAI,GAAG,CAAC,UAAU;gBAAE,OAAO;YACtD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,IAAY;QACrC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,QAAQ,IAAI,GAAG,CAAC,UAAU;gBAAE,OAAO;YACtD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,yBAAyB,CAAC,IAAY;QAC1C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,QAAQ,IAAI,GAAG,CAAC,UAAU;gBAAE,OAAO;YACtD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;CACF"}

package/dist/aws/microvms.d.ts

@@ -0,0 +1,85 @@
+import type { SigningClient } from './signer.js';
+export interface CreateImageInput {
+    name: string;
+    codeArtifactUri: string;
+    baseImageArn: string;
+    buildRoleArn: string;
+    /** Baseline memory in GB (converted to minimumMemoryInMiB). */
+    memoryGb?: number | undefined;
+    logGroupName?: string | undefined;
+    description?: string | undefined;
+    clientToken?: string | undefined;
+    /** Image-level environment variables baked into the snapshot (max 50). */
+    environmentVariables?: Record<string, string> | undefined;
+    /**
+     * Enable lifecycle hooks (listener on the given port). The /run hook is what makes
+     * the execution role's credentials available at runtime; the service also requires
+     * the /ready hook whenever any hook is enabled.
+     */
+    hooks?: {
+        port: number;
+    } | undefined;
+}
+export interface MicrovmImage {
+    imageArn: string;
+    imageName: string;
+    state: string;
+    imageVersion: string | undefined;
+}
+export interface RunMicrovmInput {
+    imageIdentifier: string;
+    executionRoleArn: string;
+    /** Idempotency token so a retried launch does not start a second MicroVM. */
+    clientToken?: string | undefined;
+    /** Only valid when the image has the run hook enabled; omit for hookless images. */
+    runHookPayload?: string | undefined;
+    maximumDurationInSeconds: number;
+    idlePolicy: {
+        autoResumeEnabled: boolean;
+        maxIdleDurationSeconds: number;
+        suspendedDurationSeconds: number;
+    };
+    ingressNetworkConnectors: string[];
+    egressNetworkConnectors: string[];
+    logGroupName?: string | undefined;
+}
+export interface Microvm {
+    microvmId: string;
+    state: string;
+    endpoint: string;
+    /** ARN of the image this MicroVM was launched from (scopes cleanup to one stack). */
+    imageArn?: string | undefined;
+    imageVersion?: string | undefined;
+}
+/** Lambda-managed network connector ARNs (region-templated). */
+export declare function networkConnectors(region: string): {
+    allIngress: string;
+    internetEgress: string;
+};
+export declare class MicrovmsClient {
+    private readonly client;
+    constructor(client: SigningClient);
+    private call;
+    private imageBody;
+    createImage(input: CreateImageInput): Promise<MicrovmImage>;
+    updateImage(id: string, input: CreateImageInput): Promise<MicrovmImage>;
+    getImage(id: string): Promise<MicrovmImage | undefined>;
+    deleteImage(id: string): Promise<void>;
+    runMicrovm(input: RunMicrovmInput): Promise<Microvm>;
+    getMicrovm(id: string): Promise<Microvm | undefined>;
+    /**
+     * MicroVMs in the account (paginated), for quota accounting and cleanup. Pass
+     * `imageIdentifier` to scope the list to one builder image server-side.
+     *
+     * `maxResults` is always sent: the ListMicrovms operation defines it as a defaulted
+     * query parameter, and the service normalizes a missing default into the request before
+     * validating the SigV4 signature — so omitting it produces an intermittent
+     * SignatureDoesNotMatch that GetMicrovm/DeleteMicrovm (no query params) never hit.
+     */
+    listMicrovms(opts?: {
+        imageIdentifier?: string | undefined;
+        maxResults?: number | undefined;
+    }): Promise<Microvm[]>;
+    terminateMicrovm(id: string): Promise<void>;
+    createAuthToken(id: string, expirationInMinutes: number): Promise<string>;
+}

package/dist/aws/microvms.js

@@ -0,0 +1,182 @@
+import { AwsError } from './errors.js';
+/**
+ * Lambda MicroVMs control-plane client (`lambda-microvms` API, 2025-09-09).
+ *
+ * The API is served off the standard Lambda endpoint (`lambda.<region>.amazonaws.com`,
+ * SigV4 signing name `lambda`) and is REST-JSON, with operations distinguished by the
+ * `/2025-09-09/` path prefix. Shapes below follow the published API reference. The floci
+ * emulator does not implement this service, so it is covered by transport mocks in tests.
+ */
+const API = '/2025-09-09';
+const PATHS = {
+    images: `${API}/microvm-images`,
+    image: (id) => `${API}/microvm-images/${encodeURIComponent(id)}`,
+    microvms: `${API}/microvms`,
+    microvm: (id) => `${API}/microvms/${encodeURIComponent(id)}`,
+    authToken: (id) => `${API}/microvms/${encodeURIComponent(id)}/auth-token`,
+};
+function normalizeMicrovm(res) {
+    return {
+        microvmId: res.microvmId ?? res.id ?? '',
+        state: res.state ?? '',
+        endpoint: res.endpoint ?? '',
+        ...(res.imageArn ? { imageArn: res.imageArn } : {}),
+        ...(res.imageVersion ? { imageVersion: res.imageVersion } : {}),
+    };
+}
+/** Lambda-managed network connector ARNs (region-templated). */
+export function networkConnectors(region) {
+    return {
+        allIngress: `arn:aws:lambda:${region}:aws:network-connector:aws-network-connector:ALL_INGRESS`,
+        internetEgress: `arn:aws:lambda:${region}:aws:network-connector:aws-network-connector:INTERNET_EGRESS`,
+    };
+}
+function normalizeImage(res) {
+    return {
+        imageArn: res.imageArn ?? '',
+        imageName: res.name ?? '',
+        state: res.state ?? '',
+        imageVersion: res.imageVersion ?? res.latestActiveImageVersion,
+    };
+}
+export class MicrovmsClient {
+    client;
+    constructor(client) {
+        this.client = client;
+    }
+    async call(method, path, payload, query) {
+        const res = await this.client.send({
+            service: 'microvms',
+            method,
+            path,
+            ...(query ? { query } : {}),
+            headers: { 'content-type': 'application/json' },
+            ...(payload !== undefined ? { body: JSON.stringify(payload) } : {}),
+        });
+        const text = res.text();
+        return (text ? JSON.parse(text) : {});
+    }
+    imageBody(input) {
+        return {
+            codeArtifact: { uri: input.codeArtifactUri },
+            baseImageArn: input.baseImageArn,
+            buildRoleArn: input.buildRoleArn,
+            ...(input.memoryGb !== undefined
+                ? { resources: [{ minimumMemoryInMiB: Math.round(input.memoryGb * 1024) }] }
+                : {}),
+            ...(input.logGroupName ? { logging: { cloudWatch: { logGroup: input.logGroupName } } } : {}),
+            ...(input.environmentVariables ? { environmentVariables: input.environmentVariables } : {}),
+            ...(input.hooks
+                ? {
+                    hooks: {
+                        port: input.hooks.port,
+                        microvmHooks: { run: 'ENABLED', runTimeoutInSeconds: 60 },
+                        microvmImageHooks: { ready: 'ENABLED', readyTimeoutInSeconds: 120 },
+                    },
+                }
+                : {}),
+            ...(input.description !== undefined ? { description: input.description } : {}),
+            ...(input.clientToken !== undefined ? { clientToken: input.clientToken } : {}),
+        };
+    }
+    async createImage(input) {
+        const body = { name: input.name, ...this.imageBody(input) };
+        return normalizeImage(await this.call('POST', PATHS.images, body));
+    }
+    async updateImage(id, input) {
+        // A PUT is idempotent on the image itself, so no clientToken is needed — and reusing one
+        // across separate update attempts triggers "clientToken used with different parameters".
+        const { clientToken, ...body } = this.imageBody(input);
+        void clientToken;
+        return normalizeImage(await this.call('PUT', PATHS.image(id), body));
+    }
+    async getImage(id) {
+        try {
+            return normalizeImage(await this.call('GET', PATHS.image(id)));
+        }
+        catch (err) {
+            if (err instanceof AwsError && err.isNotFound)
+                return undefined;
+            throw err;
+        }
+    }
+    async deleteImage(id) {
+        try {
+            await this.call('DELETE', PATHS.image(id));
+        }
+        catch (err) {
+            if (err instanceof AwsError && err.isNotFound)
+                return;
+            throw err;
+        }
+    }
+    async runMicrovm(input) {
+        const body = {
+            imageIdentifier: input.imageIdentifier,
+            executionRoleArn: input.executionRoleArn,
+            idlePolicy: input.idlePolicy,
+            ingressNetworkConnectors: input.ingressNetworkConnectors,
+            egressNetworkConnectors: input.egressNetworkConnectors,
+            maximumDurationInSeconds: input.maximumDurationInSeconds,
+            ...(input.clientToken ? { clientToken: input.clientToken } : {}),
+            ...(input.runHookPayload ? { runHookPayload: input.runHookPayload } : {}),
+            ...(input.logGroupName ? { logging: { cloudWatch: { logGroup: input.logGroupName } } } : {}),
+        };
+        return this.call('POST', PATHS.microvms, body);
+    }
+    async getMicrovm(id) {
+        try {
+            return await this.call('GET', PATHS.microvm(id));
+        }
+        catch (err) {
+            if (err instanceof AwsError && err.isNotFound)
+                return undefined;
+            throw err;
+        }
+    }
+    /**
+     * MicroVMs in the account (paginated), for quota accounting and cleanup. Pass
+     * `imageIdentifier` to scope the list to one builder image server-side.
+     *
+     * `maxResults` is always sent: the ListMicrovms operation defines it as a defaulted
+     * query parameter, and the service normalizes a missing default into the request before
+     * validating the SigV4 signature — so omitting it produces an intermittent
+     * SignatureDoesNotMatch that GetMicrovm/DeleteMicrovm (no query params) never hit.
+     */
+    async listMicrovms(opts = {}) {
+        const all = [];
+        let token;
+        do {
+            const query = {
+                maxResults: opts.maxResults ?? 50, // service cap; larger values are rejected (400)
+                ...(opts.imageIdentifier ? { imageIdentifier: opts.imageIdentifier } : {}),
+                ...(token ? { nextToken: token } : {}),
+            };
+            // The ListMicrovms response nests the collection under `items` (with `microvms` kept
+            // as a defensive fallback), each item carrying microvmId/state/imageArn.
+            const page = await this.call('GET', PATHS.microvms, undefined, query);
+            for (const item of page.items ?? page.microvms ?? [])
+                all.push(normalizeMicrovm(item));
+            token = page.nextToken;
+        } while (token);
+        return all;
+    }
+    async terminateMicrovm(id) {
+        try {
+            await this.call('DELETE', PATHS.microvm(id));
+        }
+        catch (err) {
+            if (err instanceof AwsError && err.isNotFound)
+                return;
+            throw err;
+        }
+    }
+    async createAuthToken(id, expirationInMinutes) {
+        const out = await this.call('POST', PATHS.authToken(id), {
+            allowedPorts: [{ allPorts: {} }],
+            expirationInMinutes,
+        });
+        return out.authToken?.['X-aws-proxy-auth'] ?? '';
+    }
+}
+//# sourceMappingURL=microvms.js.map

package/dist/aws/microvms.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"microvms.js","sourceRoot":"","sources":["../../src/aws/microvms.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAGvC;;;;;;;GAOG;AAEH,MAAM,GAAG,GAAG,aAAa,CAAC;AAE1B,MAAM,KAAK,GAAG;IACZ,MAAM,EAAE,GAAG,GAAG,iBAAiB;IAC/B,KAAK,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,GAAG,GAAG,mBAAmB,kBAAkB,CAAC,EAAE,CAAC,EAAE;IACxE,QAAQ,EAAE,GAAG,GAAG,WAAW;IAC3B,OAAO,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,GAAG,GAAG,aAAa,kBAAkB,CAAC,EAAE,CAAC,EAAE;IACpE,SAAS,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,GAAG,GAAG,aAAa,kBAAkB,CAAC,EAAE,CAAC,aAAa;CAClF,CAAC;AAiEF,SAAS,gBAAgB,CAAC,GAAoB;IAC5C,OAAO;QACL,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,EAAE,IAAI,EAAE;QACxC,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE;QACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE;QAC5B,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChE,CAAC;AACJ,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,OAAO;QACL,UAAU,EAAE,kBAAkB,MAAM,0DAA0D;QAC9F,cAAc,EAAE,kBAAkB,MAAM,8DAA8D;KACvG,CAAC;AACJ,CAAC;AAUD,SAAS,cAAc,CAAC,GAAkB;IACxC,OAAO;QACL,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE;QAC5B,SAAS,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE;QACzB,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE;QACtB,YAAY,EAAE,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC,wBAAwB;KAC/D,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,cAAc;IACI;IAA7B,YAA6B,MAAqB;QAArB,WAAM,GAAN,MAAM,CAAe;IAAG,CAAC;IAE9C,KAAK,CAAC,IAAI,CAChB,MAAc,EACd,IAAY,EACZ,OAAgB,EAChB,KAAmD;QAEnD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YACjC,OAAO,EAAE,UAAU;YACnB,MAAM;YACN,IAAI;YACJ,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3B,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpE,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAM,CAAC;IAC7C,CAAC;IAEO,SAAS,CAAC,KAAuB;QACvC,OAAO;YACL,YAAY,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,eAAe,EAAE;YAC5C,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS;gBAC9B,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,kBAAkB,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,EAAE;gBAC5E,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5F,GAAG,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,KAAK,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3F,GAAG,CAAC,KAAK,CAAC,KAAK;gBACb,CAAC,CAAC;oBACE,KAAK,EAAE;wBACL,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI;wBACtB,YAAY,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,mBAAmB,EAAE,EAAE,EAAE;wBACzD,iBAAiB,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,qBAAqB,EAAE,GAAG,EAAE;qBACpE;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9E,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/E,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAuB;QACvC,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5D,OAAO,cAAc,CAAC,MAAM,IAAI,CAAC,IAAI,CAAgB,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IACpF,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,EAAU,EAAE,KAAuB;QACnD,yFAAyF;QACzF,yFAAyF;QACzF,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAA4B,CAAC;QAClF,KAAK,WAAW,CAAC;QACjB,OAAO,cAAc,CAAC,MAAM,IAAI,CAAC,IAAI,CAAgB,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IACtF,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,EAAU;QACvB,IAAI,CAAC;YACH,OAAO,cAAc,CAAC,MAAM,IAAI,CAAC,IAAI,CAAgB,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAChF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,QAAQ,IAAI,GAAG,CAAC,UAAU;gBAAE,OAAO,SAAS,CAAC;YAChE,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,EAAU;QAC1B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,QAAQ,IAAI,GAAG,CAAC,UAAU;gBAAE,OAAO;YACtD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAsB;QACrC,MAAM,IAAI,GAAG;YACX,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;YACxD,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;YACtD,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;YACxD,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzE,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7F,CAAC;QACF,OAAO,IAAI,CAAC,IAAI,CAAU,MAAM,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,EAAU;QACzB,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,IAAI,CAAU,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,QAAQ,IAAI,GAAG,CAAC,UAAU;gBAAE,OAAO,SAAS,CAAC;YAChE,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,YAAY,CAChB,OAAkF,EAAE;QAEpF,MAAM,GAAG,GAAc,EAAE,CAAC;QAC1B,IAAI,KAAyB,CAAC;QAC9B,GAAG,CAAC;YACF,MAAM,KAAK,GAAgD;gBACzD,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE,EAAE,gDAAgD;gBACnF,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1E,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACvC,CAAC;YACF,qFAAqF;YACrF,yEAAyE;YACzE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAIzB,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;YAC5C,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,IAAI,EAAE;gBAAE,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;YACvF,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC;QACzB,CAAC,QAAQ,KAAK,EAAE;QAChB,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,EAAU;QAC/B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,QAAQ,IAAI,GAAG,CAAC,UAAU;gBAAE,OAAO;YACtD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,EAAU,EAAE,mBAA2B;QAC3D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CACzB,MAAM,EACN,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,EACnB;YACE,YAAY,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;YAChC,mBAAmB;SACpB,CACF,CAAC;QACF,OAAO,GAAG,CAAC,SAAS,EAAE,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC;IACnD,CAAC;CACF"}

package/dist/aws/route53.d.ts

@@ -0,0 +1,19 @@
+import type { SigningClient } from './signer.js';
+export interface DnsRecord {
+    name: string;
+    type: string;
+    value: string;
+    ttl?: number;
+}
+/** Route53 client (REST-XML). Global service, signed in us-east-1. */
+export declare class Route53Client {
+    private readonly client;
+    constructor(client: SigningClient);
+    /** Find the hosted zone id for a domain (e.g. "preview.example.com"). */
+    hostedZoneId(dnsName: string): Promise<string | undefined>;
+    private change;
+    /** Create or update a record (idempotent). */
+    upsertRecord(zoneId: string, record: DnsRecord): Promise<void>;
+    /** Delete a record; ignores an already-absent record. */
+    deleteRecord(zoneId: string, record: DnsRecord): Promise<void>;
+}