blogwright 0.1.0

package/dist/nodes.d.ts

@@ -0,0 +1,34 @@
+import type { OpsContext } from './context.js';
+import type { ResourceNode } from './graph.js';
+export type BuilderImageAction = 'create' | 'update' | 'skip';
+/**
+ * Decide what a builder-image reconcile should do: create when the image is missing or
+ * being deleted, skip when a healthy image already matches the current agent bundle and
+ * log group, otherwise update (agent bundle changed, log group changed, or last build
+ * unhealthy). Pure so the decision is unit-testable independent of the AWS calls.
+ */
+export declare function builderImageAction(image: {
+    state: string;
+} | undefined, recorded: {
+    agentHash?: string | undefined;
+    logGroup?: string | undefined;
+}, hash: string, logGroup: string): BuilderImageAction;
+/**
+ * Create, rebuild, or leave the MicroVM builder image, depending on what's deployed:
+ * create it if missing, rebuild it if the agent bundle (or its log group) changed or the
+ * last build is unhealthy, otherwise no-op. Idempotent and cheap in the common case (a
+ * single GetMicrovmImage + hash compare), so it's safe to run before every deploy — which
+ * is how build-agent changes propagate through CI without a separate `bootstrap`.
+ */
+export declare function reconcileBuilderImage(ctx: OpsContext): Promise<void>;
+/**
+ * The workflow's OIDC subject claim, scoped per environment to match how each one
+ * deploys: previews from any PR ref; staging from pushes to main; production from the
+ * `production` GitHub Environment (release-gated — see production.yml), which lets
+ * deploys be gated behind environment protection rules.
+ */
+export declare function oidcSubClaim(repo: string, env: string, preview: boolean): string;
+/** The deploy role's inline policy statements (exported for tests). */
+export declare function oidcRolePolicyStatements(ctx: OpsContext): object[];
+/** Build the full node set for the current context (production or preview stack). */
+export declare function buildNodes(ctx: OpsContext): ResourceNode[];