blogwright 0.1.0

package/dist/commands.js

@@ -0,0 +1,269 @@
+import { colors, findRepoRoot } from 'blogwright-core';
+import { syncAfterDeploy } from 'blogwright-pds';
+import { invalidateChanged, invalidateCloudFront, manifestKey, microvmLogGroup, runBuild, } from './deploy.js';
+import { applyGraph, destroyGraph } from './graph.js';
+import { clearRunningMicrovms } from './microvms.js';
+import { buildNodes, reconcileBuilderImage } from './nodes.js';
+import { formatDuration, renderHistoryTable, renderStatusTree, renderSummary, } from './render.js';
+import { buildRepoZip, COMMIT_FILE, listRepoFiles } from './repo.js';
+/** One line per invalidation outcome, shared by the summary card and logs. */
+function describeInvalidation(inv) {
+    if (inv.mode === 'none')
+        return 'nothing changed — skipped';
+    if (inv.mode === 'paths')
+        return `${inv.count} changed path${inv.count === 1 ? '' : 's'}`;
+    return inv.count > 0 ? `everything (/*) — ${inv.count} paths over cap` : 'everything (/*)';
+}
+/**
+ * Canonical origin the live site is served from: the custom domain if configured,
+ * else the distribution's CloudFront domain. Used for robots.txt / sitemap.xml URLs.
+ */
+function siteBaseUrl(ctx) {
+    if (ctx.domain)
+        return `https://${ctx.domain}`;
+    const cf = ctx.state.resources['cloudfront-distribution']?.domainName;
+    return typeof cf === 'string' ? `https://${cf}` : undefined;
+}
+/** Create the full infrastructure graph. */
+export async function bootstrap(ctx) {
+    ctx.logger.info(colors.bold(`Bootstrapping "${ctx.env}" (bucket ${ctx.names.bucket})`));
+    // The state bucket must exist before anything else can persist state.
+    await applyGraph(buildNodes(ctx), ctx);
+    ctx.logger.ok(`bootstrap complete for "${ctx.env}"`);
+    const domain = ctx.state.resources['cloudfront-distribution']?.domainName;
+    if (typeof domain === 'string')
+        ctx.logger.info(`Site will be served at https://${domain}`);
+}
+/** Destroy the full infrastructure graph. */
+export async function destroy(ctx, opts) {
+    if (!opts.yes) {
+        throw new Error(`refusing to destroy "${ctx.env}" without --yes`);
+    }
+    ctx.logger.info(colors.bold(`Destroying "${ctx.env}"`));
+    // Running builder MicroVMs pin the image and make its deletion fail; clear them first
+    // (or let the operator cancel and wait for in-flight builds to finish).
+    if (!(await clearRunningMicrovms(ctx)))
+        return;
+    await destroyGraph(buildNodes(ctx), ctx);
+    await ctx.store.delete();
+    ctx.logger.ok(`destroyed "${ctx.env}"`);
+}
+/** Zip the repo, upload it, run the builder MicroVM, and invalidate the cache. */
+export async function deploy(ctx) {
+    const startedAt = Date.now();
+    const cwd = await findRepoRoot(ctx.ports.fs);
+    const hash = await ctx.ports.vcs.revisionHash(cwd);
+    ctx.logger.info(colors.bold(`Deploying ${hash} to "${ctx.env}"`));
+    const files = await listRepoFiles(ctx.ports, cwd, ctx.config.sourceIgnore, ctx.config.sourceInclude);
+    ctx.logger.step(`zipping ${files.length} files`);
+    const zip = await buildRepoZip(ctx.ports.fs, cwd, files, { [COMMIT_FILE]: hash });
+    const sourceKey = `build/${hash}.zip`;
+    await ctx.clients.s3.putObject(ctx.names.bucket, sourceKey, zip, 'application/zip');
+    ctx.logger.ok(`uploaded ${sourceKey} (${(zip.byteLength / 1024).toFixed(0)} KiB)`);
+    // Rebuild the builder image first if the agent bundle changed, so build-agent fixes
+    // ship on the same deploy (no-op when unchanged).
+    await reconcileBuilderImage(ctx);
+    const manifest = await runBuild(ctx, { hash, sourceKey, baseUrl: siteBaseUrl(ctx) });
+    const invalidation = await invalidateChanged(ctx, hash);
+    // Production content changed — mirror it to the PDS (non-fatal; see syncAfterDeploy).
+    await syncAfterDeploy(ctx);
+    const url = siteBaseUrl(ctx);
+    const rows = [
+        { label: 'revision', value: hash },
+        { label: 'environment', value: ctx.env },
+        { label: 'source', value: `${files.length} files, ${(zip.byteLength / 1024).toFixed(0)} KiB` },
+        { label: 'build', value: formatDuration(manifest.durationMs) },
+        { label: 'invalidated', value: describeInvalidation(invalidation) },
+        ...(url ? [{ label: 'site', value: colors.cyan(url) }] : []),
+    ];
+    for (const line of renderSummary('deploy summary', rows, ctx.ports.terminal.isInteractive)) {
+        ctx.logger.info(line);
+    }
+    ctx.logger.ok(`deployed ${hash} in ${formatDuration(Date.now() - startedAt)}`);
+}
+/** Re-run the builder against an existing source zip for the given hash. */
+export async function rollback(ctx, hash) {
+    const sourceKey = `build/${hash}.zip`;
+    if (!(await ctx.clients.s3.objectExists(ctx.names.bucket, sourceKey))) {
+        throw new Error(`no build artifact at ${sourceKey}; cannot roll back to ${hash}`);
+    }
+    ctx.logger.info(colors.bold(`Rolling back "${ctx.env}" to ${hash}`));
+    const startedAt = Date.now();
+    await runBuild(ctx, { hash, sourceKey, baseUrl: siteBaseUrl(ctx) });
+    await invalidateChanged(ctx, hash);
+    // A rollback changes production content too, but the PDS mirrors the *working tree*
+    // content, which a rollback does not restore — so only warn about the divergence.
+    if (ctx.env === 'production' && ctx.config.pds) {
+        ctx.logger.warn('rollback does not sync the PDS (records mirror the current repo content); ' +
+            'check out the rolled-back revision and run `blogwright pds sync` if needed');
+    }
+    ctx.logger.ok(`rolled back to ${hash} in ${formatDuration(Date.now() - startedAt)}`);
+}
+function assertPreviewId(id) {
+    if (!/^[a-z0-9-]+$/.test(id)) {
+        throw new Error(`preview id must be lowercase alphanumeric/dashes (e.g. pr-42), got "${id}"`);
+    }
+}
+/** Provision the shared preview stack (one CloudFront distribution + host router + OIDC role). */
+export async function previewBootstrap(ctx) {
+    if (!ctx.domain)
+        throw new Error('preview bootstrap requires a domain (e.g. preview.example.com)');
+    ctx.logger.info(colors.bold(`Bootstrapping preview stack (bucket ${ctx.names.bucket})`));
+    await applyGraph(buildNodes(ctx), ctx);
+    ctx.logger.ok('preview stack ready');
+}
+/** Build the current repo and publish it to this PR's preview prefix. Prints the URL. */
+export async function previewDeploy(ctx, id) {
+    assertPreviewId(id);
+    const startedAt = Date.now();
+    const cwd = await findRepoRoot(ctx.ports.fs);
+    const hash = await ctx.ports.vcs.revisionHash(cwd);
+    ctx.logger.info(colors.bold(`Preview deploy ${id} (${hash})`));
+    const files = await listRepoFiles(ctx.ports, cwd, ctx.config.sourceIgnore, ctx.config.sourceInclude);
+    ctx.logger.step(`zipping ${files.length} files`);
+    const zip = await buildRepoZip(ctx.ports.fs, cwd, files, { [COMMIT_FILE]: hash });
+    const sourceKey = `build/${hash}.zip`;
+    await ctx.clients.s3.putObject(ctx.names.bucket, sourceKey, zip, 'application/zip');
+    // Rebuild the shared preview builder image if the agent bundle changed (no-op when
+    // unchanged), so agent fixes reach PR previews too.
+    await reconcileBuilderImage(ctx);
+    const url = `https://${id}.${ctx.domain}`;
+    await runBuild(ctx, {
+        hash,
+        sourceKey,
+        sitePrefix: `previews/${id}/site/`,
+        target: `preview-${id}`,
+        baseUrl: url,
+    });
+    ctx.logger.ok(`preview ready in ${formatDuration(Date.now() - startedAt)}: ${url}`);
+    return url;
+}
+/** Remove one PR's preview (delete its prefix). No invalidation — previews aren't cached. */
+export async function previewDestroy(ctx, id) {
+    assertPreviewId(id);
+    const count = await ctx.clients.s3.deletePrefix(ctx.names.bucket, `previews/${id}/`);
+    ctx.logger.ok(`removed preview ${id} (${count} object(s))`);
+}
+/** List active previews (by prefix). */
+export async function previewList(ctx) {
+    const objects = await ctx.clients.s3.listObjects(ctx.names.bucket, 'previews/');
+    const ids = [...new Set(objects.map((o) => o.key.split('/')[1]).filter(Boolean))].sort();
+    if (ids.length === 0) {
+        ctx.logger.info('no active previews');
+        return;
+    }
+    for (const id of ids)
+        ctx.logger.info(`  ${id}  https://${id}.${ctx.domain}`);
+}
+/** Tear down the entire shared preview stack. */
+export async function previewTeardown(ctx, opts) {
+    if (!opts.yes)
+        throw new Error('refusing to tear down the preview stack without --yes');
+    ctx.logger.info(colors.bold('Tearing down preview stack'));
+    if (!(await clearRunningMicrovms(ctx)))
+        return;
+    await destroyGraph(buildNodes(ctx), ctx);
+    await ctx.store.delete();
+    ctx.logger.ok('preview stack destroyed');
+}
+/** Empty the live site/ prefix (leaves infra and build history intact). */
+export async function deleteSite(ctx) {
+    const count = await ctx.clients.s3.deletePrefix(ctx.names.bucket, 'site/');
+    ctx.logger.ok(`deleted ${count} object(s) under site/`);
+    await invalidateCloudFront(ctx);
+}
+/** List deployment history from build manifests. */
+export async function history(ctx) {
+    const objects = await ctx.clients.s3.listObjects(ctx.names.bucket, 'build/manifests/');
+    if (objects.length === 0) {
+        ctx.logger.info('no deployments yet');
+        return;
+    }
+    const manifests = [];
+    for (const obj of objects) {
+        const text = await ctx.clients.s3.getObjectText(ctx.names.bucket, obj.key);
+        if (!text)
+            continue;
+        try {
+            manifests.push(JSON.parse(text));
+        }
+        catch {
+            // One corrupt manifest must not take down the whole listing.
+            ctx.logger.warn(`skipping unreadable manifest ${obj.key}`);
+        }
+    }
+    manifests.sort((a, b) => b.finishedAt.localeCompare(a.finishedAt));
+    if (ctx.ports.terminal.isInteractive) {
+        for (const line of renderHistoryTable(manifests, Date.now()))
+            ctx.logger.info(line);
+        return;
+    }
+    // The plain form is the stable contract for CI logs and agents.
+    ctx.logger.info(colors.bold('hash          status      finished                 duration'));
+    for (const m of manifests) {
+        const cell = m.status === 'succeeded'
+            ? colors.green(m.status.padEnd(10))
+            : colors.red(m.status.padEnd(10));
+        ctx.logger.info(`${m.hash.padEnd(13)} ${cell}  ${m.finishedAt}  ${(m.durationMs / 1000).toFixed(0)}s`);
+    }
+}
+/** Show CloudWatch build logs for a given hash. */
+export async function logs(ctx, hash) {
+    const text = await ctx.clients.s3.getObjectText(ctx.names.bucket, manifestKey(hash));
+    let manifest;
+    try {
+        manifest = text ? JSON.parse(text) : undefined;
+    }
+    catch {
+        ctx.logger.warn(`manifest for ${hash} is unreadable — showing the unfiltered log window`);
+    }
+    // Filter to the build's time window (± a minute) from the manifest.
+    const startTime = manifest ? Date.parse(manifest.startedAt) - 60_000 : undefined;
+    const endTime = manifest ? Date.parse(manifest.finishedAt) + 60_000 : undefined;
+    const events = await ctx.clients.logs.filterEvents(microvmLogGroup(ctx), {
+        ...(startTime !== undefined ? { startTime } : {}),
+        ...(endTime !== undefined ? { endTime } : {}),
+    });
+    if (events.length === 0) {
+        ctx.logger.info(`no log events for ${hash}`);
+        return;
+    }
+    for (const e of events) {
+        ctx.logger.info(`${colors.dim(new Date(e.timestamp).toISOString())} ${e.message.trimEnd()}`);
+    }
+}
+/** Show the planned graph against live state (drift view). */
+export async function status(ctx) {
+    ctx.logger.info(colors.bold(`Status for "${ctx.env}" (bucket ${ctx.names.bucket})`));
+    const pretty = ctx.ports.terminal.isInteractive;
+    const entries = [];
+    for (const node of buildNodes(ctx)) {
+        let exists = false;
+        try {
+            exists = await node.read(ctx);
+        }
+        catch (err) {
+            if (pretty) {
+                entries.push({ title: node.title, state: 'error', detail: err.message });
+            }
+            else {
+                ctx.logger.warn(`${node.title}: read failed (${err.message})`);
+            }
+            continue;
+        }
+        const outputs = ctx.state.resources[node.id];
+        const detail = outputs ? JSON.stringify(outputs) : undefined;
+        if (pretty) {
+            entries.push({ title: node.title, state: exists ? 'present' : 'missing', detail });
+            continue;
+        }
+        // The plain form is the stable contract for CI logs and agents.
+        const mark = exists ? colors.green('present') : colors.yellow('missing');
+        ctx.logger.info(`  ${mark}  ${node.title} ${detail ? colors.dim(detail) : ''}`);
+    }
+    if (pretty) {
+        for (const line of renderStatusTree(entries))
+            ctx.logger.info(line);
+    }
+}
+//# sourceMappingURL=commands.js.map

package/dist/commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands.js","sourceRoot":"","sources":["../src/commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAGjD,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,WAAW,EACX,eAAe,EACf,QAAQ,GAET,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,gBAAgB,EAChB,aAAa,GAGd,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAErE,8EAA8E;AAC9E,SAAS,oBAAoB,CAAC,GAAsD;IAClF,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,2BAA2B,CAAC;IAC5D,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,GAAG,GAAG,CAAC,KAAK,gBAAgB,GAAG,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IAC1F,OAAO,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,qBAAqB,GAAG,CAAC,KAAK,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,CAAC;AAC7F,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,GAAe;IAClC,IAAI,GAAG,CAAC,MAAM;QAAE,OAAO,WAAW,GAAG,CAAC,MAAM,EAAE,CAAC;IAC/C,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,yBAAyB,CAAC,EAAE,UAAU,CAAC;IACtE,OAAO,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9D,CAAC;AAED,4CAA4C;AAC5C,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,GAAe;IAC7C,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,GAAG,CAAC,GAAG,aAAa,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACxF,sEAAsE;IACtE,MAAM,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IACvC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,2BAA2B,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,yBAAyB,CAAC,EAAE,UAAU,CAAC;IAC1E,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,kCAAkC,MAAM,EAAE,CAAC,CAAC;AAC9F,CAAC;AAED,6CAA6C;AAC7C,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,GAAe,EAAE,IAAsB;IACnE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,wBAAwB,GAAG,CAAC,GAAG,iBAAiB,CAAC,CAAC;IACpE,CAAC;IACD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IACxD,sFAAsF;IACtF,wEAAwE;IACxE,IAAI,CAAC,CAAC,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO;IAC/C,MAAM,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IACzC,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IACzB,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,cAAc,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;AAC1C,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,GAAe;IAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IACnD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,IAAI,QAAQ,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IAElE,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IACrG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IAClF,MAAM,SAAS,GAAG,SAAS,IAAI,MAAM,CAAC;IACtC,MAAM,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,iBAAiB,CAAC,CAAC;IACpF,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,SAAS,KAAK,CAAC,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAEnF,oFAAoF;IACpF,kDAAkD;IAClD,MAAM,qBAAqB,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrF,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACxD,sFAAsF;IACtF,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;IAE3B,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAiB;QACzB,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE;QAClC,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,GAAG,CAAC,GAAG,EAAE;QACxC,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,MAAM,WAAW,CAAC,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE;QAC9F,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE;QAC9D,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,oBAAoB,CAAC,YAAY,CAAC,EAAE;QACnE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7D,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,gBAAgB,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QAC3F,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IACD,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,IAAI,OAAO,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;AACjF,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,GAAe,EAAE,IAAY;IAC1D,MAAM,SAAS,GAAG,SAAS,IAAI,MAAM,CAAC;IACtC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,wBAAwB,SAAS,yBAAyB,IAAI,EAAE,CAAC,CAAC;IACpF,CAAC;IACD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,GAAG,CAAC,GAAG,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;IACrE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,QAAQ,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACpE,MAAM,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACnC,oFAAoF;IACpF,kFAAkF;IAClF,IAAI,GAAG,CAAC,GAAG,KAAK,YAAY,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QAC/C,GAAG,CAAC,MAAM,CAAC,IAAI,CACb,4EAA4E;YAC1E,4EAA4E,CAC/E,CAAC;IACJ,CAAC;IACD,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,kBAAkB,IAAI,OAAO,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,eAAe,CAAC,EAAU;IACjC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,uEAAuE,EAAE,GAAG,CAAC,CAAC;IAChG,CAAC;AACH,CAAC;AAED,kGAAkG;AAClG,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAe;IACpD,IAAI,CAAC,GAAG,CAAC,MAAM;QACb,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uCAAuC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzF,MAAM,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IACvC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,qBAAqB,CAAC,CAAC;AACvC,CAAC;AAED,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAe,EAAE,EAAU;IAC7D,eAAe,CAAC,EAAE,CAAC,CAAC;IACpB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IACnD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC;IAE/D,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IACrG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IAClF,MAAM,SAAS,GAAG,SAAS,IAAI,MAAM,CAAC;IACtC,MAAM,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,iBAAiB,CAAC,CAAC;IAEpF,mFAAmF;IACnF,oDAAoD;IACpD,MAAM,qBAAqB,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,GAAG,GAAG,WAAW,EAAE,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;IAC1C,MAAM,QAAQ,CAAC,GAAG,EAAE;QAClB,IAAI;QACJ,SAAS;QACT,UAAU,EAAE,YAAY,EAAE,QAAQ;QAClC,MAAM,EAAE,WAAW,EAAE,EAAE;QACvB,OAAO,EAAE,GAAG;KACb,CAAC,CAAC;IACH,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,oBAAoB,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;IACpF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAe,EAAE,EAAU;IAC9D,eAAe,CAAC,EAAE,CAAC,CAAC;IACpB,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC;IACrF,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,mBAAmB,EAAE,KAAK,KAAK,aAAa,CAAC,CAAC;AAC9D,CAAC;AAED,wCAAwC;AACxC,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAe;IAC/C,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAChF,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACzF,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACtC,OAAO;IACT,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,GAAG;QAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,aAAa,EAAE,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;AAChF,CAAC;AAED,iDAAiD;AACjD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAe,EAAE,IAAsB;IAC3E,IAAI,CAAC,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IACxF,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,CAAC;IAC3D,IAAI,CAAC,CAAC,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO;IAC/C,MAAM,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IACzC,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IACzB,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,yBAAyB,CAAC,CAAC;AAC3C,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAe;IAC9C,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3E,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,WAAW,KAAK,wBAAwB,CAAC,CAAC;IACxD,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;AAClC,CAAC;AAED,oDAAoD;AACpD,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,GAAe;IAC3C,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IACvF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACtC,OAAO;IACT,CAAC;IACD,MAAM,SAAS,GAAqB,EAAE,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3E,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,IAAI,CAAC;YACH,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAmB,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,6DAA6D;YAC7D,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,gCAAgC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IACD,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IACnE,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;QACrC,KAAK,MAAM,IAAI,IAAI,kBAAkB,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;YAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpF,OAAO;IACT,CAAC;IACD,gEAAgE;IAChE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC,CAAC;IAC5F,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,GACR,CAAC,CAAC,MAAM,KAAK,WAAW;YACtB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACnC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QACtC,GAAG,CAAC,MAAM,CAAC,IAAI,CACb,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CACtF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,mDAAmD;AACnD,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,GAAe,EAAE,IAAY;IACtD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IACrF,IAAI,QAAoC,CAAC;IACzC,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,IAAI,oDAAoD,CAAC,CAAC;IAC5F,CAAC;IACD,oEAAoE;IACpE,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACjF,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAChF,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE;QACvE,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9C,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC;QAC7C,OAAO;IACT,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC/F,CAAC;AACH,CAAC;AAED,8DAA8D;AAC9D,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,GAAe;IAC1C,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,GAAG,CAAC,GAAG,aAAa,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACrF,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC;IAChD,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YACtF,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,kBAAmB,GAAa,CAAC,OAAO,GAAG,CAAC,CAAC;YAC5E,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7D,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;YACnF,SAAS;QACX,CAAC;QACD,gEAAgE;QAChE,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACzE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,KAAK,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,MAAM,EAAE,CAAC;QACX,KAAK,MAAM,IAAI,IAAI,gBAAgB,CAAC,OAAO,CAAC;YAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtE,CAAC;AACH,CAAC"}

package/dist/context.d.ts

@@ -0,0 +1,50 @@
+import { StateStore, type AwsClients, type FileSystem, type Names, type OpsConfig, type OpsState } from 'blogwright-core';
+import { type Logger } from './logger.js';
+import type { Ports } from './ports.js';
+export interface OpsContext {
+    env: string;
+    domain: string | undefined;
+    /** True for the shared preview stack (host-routed, per-PR prefixes). */
+    preview: boolean;
+    config: OpsConfig;
+    names: Names;
+    accountId: string;
+    clients: AwsClients;
+    ports: Ports;
+    /**
+     * Directory holding the build-agent artifacts — Dockerfile, bundled server.js,
+     * and agent-manifest.json — copied into this package by its build
+     * (scripts/copy-agent.mjs). Resolved at the composition root; tests inject one.
+     */
+    agentDir: string;
+    state: OpsState;
+    store: StateStore;
+    logger: Logger;
+    /** Persist the working state to S3. */
+    save(): Promise<void>;
+}
+export interface ContextOptions {
+    env: string;
+    configPath?: string | undefined;
+    domain?: string | undefined;
+    endpointOverride?: string | undefined;
+    preview?: boolean | undefined;
+    /** Adapter overrides; anything omitted defaults to the real (node) adapter. */
+    ports?: Partial<Ports> | undefined;
+}
+export interface ConfigSource {
+    env: string;
+    /** Repo root the default config candidates resolve against. */
+    root: string;
+    /** Explicit config file; when set it is the only candidate. */
+    configPath?: string | undefined;
+}
+/** Load and parse the first config candidate that exists. Exported for tests. */
+export declare function loadConfig(fs: FileSystem, source: ConfigSource): Promise<OpsConfig>;
+/**
+ * Build the runtime context: load config, resolve the account id, derive names, create
+ * clients, and load topology state from S3. The state bucket name is deterministic, which
+ * resolves the bootstrap chicken-and-egg. This is the composition root — the only place
+ * real adapters are constructed and wired.
+ */
+export declare function createContext(opts: ContextOptions): Promise<OpsContext>;

package/dist/context.js

@@ -0,0 +1,77 @@
+import { resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { createClients, createNodeFileSystem, createNodeTerminal, deriveNames, FileNotFoundError, findRepoRoot, parseConfig, StateStore, } from 'blogwright-core';
+import { createFetchPing } from './adapters/fetch-ping.js';
+import { createProcessVcs } from './adapters/process-vcs.js';
+import { createLogger } from './logger.js';
+/** Load and parse the first config candidate that exists. Exported for tests. */
+export async function loadConfig(fs, source) {
+    const candidates = source.configPath
+        ? [source.configPath]
+        : [
+            resolve(source.root, `config/${source.env}.jsonc`),
+            resolve(source.root, 'ops.config.jsonc'),
+        ];
+    for (const path of candidates) {
+        try {
+            return parseConfig(await fs.readText(path));
+        }
+        catch (err) {
+            if (!(err instanceof FileNotFoundError))
+                throw err;
+        }
+    }
+    throw new Error(`no config found for environment "${source.env}" — looked for ${candidates.join(', ')}`);
+}
+/**
+ * Build the runtime context: load config, resolve the account id, derive names, create
+ * clients, and load topology state from S3. The state bucket name is deterministic, which
+ * resolves the bootstrap chicken-and-egg. This is the composition root — the only place
+ * real adapters are constructed and wired.
+ */
+export async function createContext(opts) {
+    const ports = {
+        fs: opts.ports?.fs ?? createNodeFileSystem(),
+        vcs: opts.ports?.vcs ?? createProcessVcs(),
+        terminal: opts.ports?.terminal ?? createNodeTerminal(),
+        ping: opts.ports?.ping ?? createFetchPing(),
+    };
+    const logger = createLogger(ports.terminal);
+    const agentDir = fileURLToPath(new URL('../agent', import.meta.url));
+    const root = await findRepoRoot(ports.fs);
+    const config = await loadConfig(ports.fs, {
+        env: opts.env,
+        root,
+        configPath: opts.configPath,
+    });
+    const domain = opts.domain ?? config.domain;
+    const clients = createClients({
+        region: config.region,
+        endpointOverride: opts.endpointOverride,
+    });
+    const accountId = await clients.sts.getAccountId();
+    const names = deriveNames(opts.env, accountId, config);
+    const store = new StateStore(clients.s3, names.bucket, opts.env);
+    // load() already returns empty state for a not-yet-created bucket/object; any other
+    // error (corrupt state, AccessDenied, transient S3) must surface, not be masked.
+    const state = await store.load();
+    const ctx = {
+        env: opts.env,
+        domain,
+        preview: opts.preview ?? false,
+        config,
+        names,
+        accountId,
+        clients,
+        ports,
+        agentDir,
+        state,
+        store,
+        logger,
+        save: async () => {
+            await store.save(state);
+        },
+    };
+    return ctx;
+}
+//# sourceMappingURL=context.js.map

package/dist/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,kBAAkB,EAClB,WAAW,EACX,iBAAiB,EACjB,YAAY,EACZ,WAAW,EACX,UAAU,GAMX,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAe,MAAM,aAAa,CAAC;AA4CxD,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,EAAc,EAAE,MAAoB;IACnE,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU;QAClC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;QACrB,CAAC,CAAC;YACE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,MAAM,CAAC,GAAG,QAAQ,CAAC;YAClD,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,kBAAkB,CAAC;SACzC,CAAC;IACN,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,OAAO,WAAW,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,CAAC,GAAG,YAAY,iBAAiB,CAAC;gBAAE,MAAM,GAAG,CAAC;QACrD,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CACb,oCAAoC,MAAM,CAAC,GAAG,kBAAkB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACxF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAoB;IACtD,MAAM,KAAK,GAAU;QACnB,EAAE,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,oBAAoB,EAAE;QAC5C,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,IAAI,gBAAgB,EAAE;QAC1C,QAAQ,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,IAAI,kBAAkB,EAAE;QACtD,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,IAAI,eAAe,EAAE;KAC5C,CAAC;IACF,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,EAAE,EAAE;QACxC,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,IAAI;QACJ,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC;IAE5C,MAAM,OAAO,GAAG,aAAa,CAAC;QAC5B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;KACxC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;IACnD,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACjE,oFAAoF;IACpF,iFAAiF;IACjF,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;IAEjC,MAAM,GAAG,GAAe;QACtB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,MAAM;QACN,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,KAAK;QAC9B,MAAM;QACN,KAAK;QACL,SAAS;QACT,OAAO;QACP,KAAK;QACL,QAAQ;QACR,KAAK;QACL,KAAK;QACL,MAAM;QACN,IAAI,EAAE,KAAK,IAAI,EAAE;YACf,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;KACF,CAAC;IACF,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/deploy.d.ts

@@ -0,0 +1,57 @@
+import type { OpsContext } from './context.js';
+export interface DeployManifest {
+    hash: string;
+    sourceKey: string;
+    status: 'succeeded' | 'failed';
+    startedAt: string;
+    finishedAt: string;
+    durationMs: number;
+    microvmId: string;
+    message?: string;
+}
+/** Terminal outcome the log poller extracts from the agent's build markers. */
+export interface AgentStatus {
+    state: 'idle' | 'building' | 'done' | 'failed';
+    message?: string | undefined;
+}
+declare function manifestKey(hash: string): string;
+/**
+ * Resolve the MicroVM build log group from bootstrapped state rather than re-deriving it.
+ * The image and the build-role IAM policy bake this name in at bootstrap, so if the derived
+ * name (`ctx.names.microvmLogGroup`) is renamed in code later, a deploy must still target
+ * the group the running stack actually logs to — otherwise the VM's logs land in (or are
+ * denied to) a different group and `pollBuild` waits on an empty one.
+ */
+export declare function microvmLogGroup(ctx: OpsContext): string;
+/**
+ * Poll the CloudWatch build log group for the agent's output, streaming new lines and
+ * detecting the terminal marker (the source of truth). Each cycle also nudges the VM
+ * endpoint to keep the agent's event loop alive so the build triggers reliably.
+ * Exported for tests.
+ */
+export declare function pollBuild(ctx: OpsContext, hash: string, startTime: number, endpoint: string, token: string): Promise<AgentStatus>;
+/**
+ * Run the builder MicroVM against a source zip already present at `sourceKey`, stream
+ * its logs, terminate it, and record a deployment manifest. Shared by deploy + rollback.
+ */
+export declare function runBuild(ctx: OpsContext, opts: {
+    hash: string;
+    sourceKey: string;
+    sitePrefix?: string;
+    target?: string;
+    /** Canonical origin the site is served from, for robots.txt/sitemap.xml. */
+    baseUrl?: string | undefined;
+}): Promise<DeployManifest>;
+export declare function invalidateCloudFront(ctx: OpsContext, paths?: string[]): Promise<void>;
+/** What a deploy's cache invalidation actually did, for the deploy summary. */
+export interface InvalidationSummary {
+    mode: 'none' | 'paths' | 'all';
+    count: number;
+}
+/**
+ * Invalidate only the URL paths that changed in this build (from the agent's manifest),
+ * so unchanged pages stay cached. Falls back to `/*` when the manifest is missing or the
+ * changed set is larger than the configured cap.
+ */
+export declare function invalidateChanged(ctx: OpsContext, hash: string): Promise<InvalidationSummary>;
+export { manifestKey };