hereya-cli 0.10.0 → 0.12.0

package/README.md

@@ -20,7 +20,7 @@ $ npm install -g hereya-cli
 $ hereya COMMAND
 running command...
 $ hereya (--version)
-hereya-cli/0.10.0 linux-x64 node-v20.15.0
+hereya-cli/0.12.0 linux-x64 node-v22.12.0
 $ hereya --help [COMMAND]
 USAGE
   $ hereya COMMAND
@@ -36,7 +36,6 @@ USAGE
 * [`hereya env [NAME]`](#hereya-env-name)
 * [`hereya help [COMMAND]`](#hereya-help-command)
 * [`hereya init PROJECT`](#hereya-init-project)
-* [`hereya remote exec [PKGPATH]`](#hereya-remote-exec-pkgpath)
 * [`hereya remove PACKAGE`](#hereya-remove-package)
 * [`hereya run CMD`](#hereya-run-cmd)
 * [`hereya unbootstrap INFRASTRUCTURETYPE`](#hereya-unbootstrap-infrastructuretype)
@@ -73,7 +72,7 @@ EXAMPLES
   $ hereya add cloudy/docker_postgres
 ```
 
-_See code: [src/commands/add/index.ts](https://github.com/hereya/hereya-cli/blob/v0.10.0/src/commands/add/index.ts)_
+_See code: [src/commands/add/index.ts](https://github.com/hereya/hereya-cli/blob/v0.12.0/src/commands/add/index.ts)_
 
 ## `hereya bootstrap INFRASTRUCTURETYPE`
 
@@ -98,7 +97,7 @@ EXAMPLES
   $ hereya bootstrap local
 ```
 
-_See code: [src/commands/bootstrap/index.ts](https://github.com/hereya/hereya-cli/blob/v0.10.0/src/commands/bootstrap/index.ts)_
+_See code: [src/commands/bootstrap/index.ts](https://github.com/hereya/hereya-cli/blob/v0.12.0/src/commands/bootstrap/index.ts)_
 
 ## `hereya deploy`
 
@@ -119,7 +118,7 @@ EXAMPLES
   $ hereya deploy
 ```
 
-_See code: [src/commands/deploy/index.ts](https://github.com/hereya/hereya-cli/blob/v0.10.0/src/commands/deploy/index.ts)_
+_See code: [src/commands/deploy/index.ts](https://github.com/hereya/hereya-cli/blob/v0.12.0/src/commands/deploy/index.ts)_
 
 ## `hereya down`
 
@@ -141,7 +140,7 @@ EXAMPLES
   $ hereya down
 ```
 
-_See code: [src/commands/down/index.ts](https://github.com/hereya/hereya-cli/blob/v0.10.0/src/commands/down/index.ts)_
+_See code: [src/commands/down/index.ts](https://github.com/hereya/hereya-cli/blob/v0.12.0/src/commands/down/index.ts)_
 
 ## `hereya env [NAME]`
 
@@ -172,7 +171,7 @@ EXAMPLES
   $ hereya env -w dev -l
 ```
 
-_See code: [src/commands/env/index.ts](https://github.com/hereya/hereya-cli/blob/v0.10.0/src/commands/env/index.ts)_
+_See code: [src/commands/env/index.ts](https://github.com/hereya/hereya-cli/blob/v0.12.0/src/commands/env/index.ts)_
 
 ## `hereya help [COMMAND]`
 
@@ -218,31 +217,7 @@ EXAMPLES
   $ hereya init myProject -w=defaultWorkspace --chdir=./myProject
 ```
 
-_See code: [src/commands/init/index.ts](https://github.com/hereya/hereya-cli/blob/v0.10.0/src/commands/init/index.ts)_
-
-## `hereya remote exec [PKGPATH]`
-
-remotely provision or destroy a package
-
-```
-USAGE
-  $ hereya remote exec [PKGPATH] [-o <value>] [-s <value>]
-
-ARGUMENTS
-  PKGPATH  The path to the package to provision or destroy
-
-FLAGS
-  -o, --output=<value>  The path to store the output env in
-  -s, --source=<value>  The source of the project to provision or destroy the package for
-
-DESCRIPTION
-  remotely provision or destroy a package
-
-EXAMPLES
-  $ hereya remote exec
-```
-
-_See code: [src/commands/remote/exec/index.ts](https://github.com/hereya/hereya-cli/blob/v0.10.0/src/commands/remote/exec/index.ts)_
+_See code: [src/commands/init/index.ts](https://github.com/hereya/hereya-cli/blob/v0.12.0/src/commands/init/index.ts)_
 
 ## `hereya remove PACKAGE`
 
@@ -265,7 +240,7 @@ EXAMPLES
   $ hereya remove cloudy/docker_postgres
 ```
 
-_See code: [src/commands/remove/index.ts](https://github.com/hereya/hereya-cli/blob/v0.10.0/src/commands/remove/index.ts)_
+_See code: [src/commands/remove/index.ts](https://github.com/hereya/hereya-cli/blob/v0.12.0/src/commands/remove/index.ts)_
 
 ## `hereya run CMD`
 
@@ -291,7 +266,7 @@ EXAMPLES
   $ hereya run -w uat -- node index.js
 ```
 
-_See code: [src/commands/run/index.ts](https://github.com/hereya/hereya-cli/blob/v0.10.0/src/commands/run/index.ts)_
+_See code: [src/commands/run/index.ts](https://github.com/hereya/hereya-cli/blob/v0.12.0/src/commands/run/index.ts)_
 
 ## `hereya unbootstrap INFRASTRUCTURETYPE`
 
@@ -316,7 +291,7 @@ EXAMPLES
   $ hereya unbootstrap local
 ```
 
-_See code: [src/commands/unbootstrap/index.ts](https://github.com/hereya/hereya-cli/blob/v0.10.0/src/commands/unbootstrap/index.ts)_
+_See code: [src/commands/unbootstrap/index.ts](https://github.com/hereya/hereya-cli/blob/v0.12.0/src/commands/unbootstrap/index.ts)_
 
 ## `hereya undeploy`
 
@@ -337,7 +312,7 @@ EXAMPLES
   $ hereya undeploy
 ```
 
-_See code: [src/commands/undeploy/index.ts](https://github.com/hereya/hereya-cli/blob/v0.10.0/src/commands/undeploy/index.ts)_
+_See code: [src/commands/undeploy/index.ts](https://github.com/hereya/hereya-cli/blob/v0.12.0/src/commands/undeploy/index.ts)_
 
 ## `hereya up`
 
@@ -359,7 +334,7 @@ EXAMPLES
   $ hereya up
 ```
 
-_See code: [src/commands/up/index.ts](https://github.com/hereya/hereya-cli/blob/v0.10.0/src/commands/up/index.ts)_
+_See code: [src/commands/up/index.ts](https://github.com/hereya/hereya-cli/blob/v0.12.0/src/commands/up/index.ts)_
 
 ## `hereya workspace create NAME`
 
@@ -379,7 +354,7 @@ EXAMPLES
   $ hereya workspace create dev
 ```
 
-_See code: [src/commands/workspace/create/index.ts](https://github.com/hereya/hereya-cli/blob/v0.10.0/src/commands/workspace/create/index.ts)_
+_See code: [src/commands/workspace/create/index.ts](https://github.com/hereya/hereya-cli/blob/v0.12.0/src/commands/workspace/create/index.ts)_
 
 ## `hereya workspace delete NAME`
 
@@ -399,7 +374,7 @@ EXAMPLES
   $ hereya workspace delete dev
 ```
 
-_See code: [src/commands/workspace/delete/index.ts](https://github.com/hereya/hereya-cli/blob/v0.10.0/src/commands/workspace/delete/index.ts)_
+_See code: [src/commands/workspace/delete/index.ts](https://github.com/hereya/hereya-cli/blob/v0.12.0/src/commands/workspace/delete/index.ts)_
 
 ## `hereya workspace env [NAME]`
 
@@ -425,7 +400,7 @@ EXAMPLES
   $ hereya workspace env myEnv -w dev
 ```
 
-_See code: [src/commands/workspace/env/index.ts](https://github.com/hereya/hereya-cli/blob/v0.10.0/src/commands/workspace/env/index.ts)_
+_See code: [src/commands/workspace/env/index.ts](https://github.com/hereya/hereya-cli/blob/v0.12.0/src/commands/workspace/env/index.ts)_
 
 ## `hereya workspace env set`
 
@@ -449,7 +424,7 @@ EXAMPLES
   $ hereya workspace env set -w my-workspace -n myVar -v my-value -i aws -s
 ```
 
-_See code: [src/commands/workspace/env/set/index.ts](https://github.com/hereya/hereya-cli/blob/v0.10.0/src/commands/workspace/env/set/index.ts)_
+_See code: [src/commands/workspace/env/set/index.ts](https://github.com/hereya/hereya-cli/blob/v0.12.0/src/commands/workspace/env/set/index.ts)_
 
 ## `hereya workspace env unset`
 
@@ -470,7 +445,7 @@ EXAMPLES
   $ hereya workspace env unset -w my-workspace -n myVar
 ```
 
-_See code: [src/commands/workspace/env/unset/index.ts](https://github.com/hereya/hereya-cli/blob/v0.10.0/src/commands/workspace/env/unset/index.ts)_
+_See code: [src/commands/workspace/env/unset/index.ts](https://github.com/hereya/hereya-cli/blob/v0.12.0/src/commands/workspace/env/unset/index.ts)_
 
 ## `hereya workspace install PACKAGE`
 
@@ -496,7 +471,7 @@ EXAMPLES
   $ hereya workspace install hereya/aws-cognito
 ```
 
-_See code: [src/commands/workspace/install/index.ts](https://github.com/hereya/hereya-cli/blob/v0.10.0/src/commands/workspace/install/index.ts)_
+_See code: [src/commands/workspace/install/index.ts](https://github.com/hereya/hereya-cli/blob/v0.12.0/src/commands/workspace/install/index.ts)_
 
 ## `hereya workspace uninstall PACKAGE`
 
@@ -522,5 +497,5 @@ EXAMPLES
   $ hereya workspace uninstall hereya/aws-cognito
 ```
 
-_See code: [src/commands/workspace/uninstall/index.ts](https://github.com/hereya/hereya-cli/blob/v0.10.0/src/commands/workspace/uninstall/index.ts)_
+_See code: [src/commands/workspace/uninstall/index.ts](https://github.com/hereya/hereya-cli/blob/v0.12.0/src/commands/workspace/uninstall/index.ts)_
 <!-- commandsstop -->

package/dist/iac/common.d.ts

@@ -4,13 +4,21 @@ export interface Iac {
 }
 export declare enum IacType {
     cdk = "cdk",
-    terraform = "terraform"
+    opentf = "opentf",
+    opentofu = "opentofu",
+    terraform = "terraform",
+    tofu = "tofu"
 }
 export type ApplyInput = {
     env: {
         [key: string]: string;
     };
     id: string;
+    infraConfig?: {
+        terraformStateBucketName: string;
+        terraformStateBucketRegion?: string;
+        terraformStateLockTableName: string;
+    };
     parameters?: {
         [key: string]: string;
     };

package/dist/iac/common.js

@@ -1,5 +1,8 @@
 export var IacType;
 (function (IacType) {
     IacType["cdk"] = "cdk";
+    IacType["opentf"] = "opentf";
+    IacType["opentofu"] = "opentofu";
     IacType["terraform"] = "terraform";
+    IacType["tofu"] = "tofu";
 })(IacType || (IacType = {}));

package/dist/iac/index.js

@@ -8,6 +8,15 @@ export function getIac({ type }) {
         case IacType.terraform: {
             return { iac: terraform, supported: true };
         }
+        case IacType.opentofu: {
+            return { iac: terraform, supported: true };
+        }
+        case IacType.opentf: {
+            return { iac: terraform, supported: true };
+        }
+        case IacType.tofu: {
+            return { iac: terraform, supported: true };
+        }
         case IacType.cdk: {
             return { iac: cdk, supported: true };
         }

package/dist/iac/terraform.d.ts

@@ -2,8 +2,9 @@ import { ApplyInput, ApplyOutput, DestroyInput, DestroyOutput, Iac } from './com
 export declare class Terraform implements Iac {
     apply(input: ApplyInput): Promise<ApplyOutput>;
     destroy(input: DestroyInput): Promise<DestroyOutput>;
-    private downloadTerraform;
+    downloadTerraform(): Promise<boolean>;
     private getEnv;
     private getTerraformBinary;
+    private getWithRedirect;
     private terraformBinPath;
 }

package/dist/iac/terraform.js

@@ -8,34 +8,63 @@ import { mapObject } from '../lib/object-utils.js';
 import { runShell } from '../lib/shell.js';
 export class Terraform {
     async apply(input) {
+        if (input.infraConfig &&
+            input.infraConfig.terraformStateBucketName &&
+            input.infraConfig.terraformStateLockTableName &&
+            input.infraConfig.terraformStateBucketRegion) {
+            const backendConfig = `
+      terraform {
+            backend "s3" {
+                bucket = "${input.infraConfig.terraformStateBucketName}"
+                key = "${input.id}/terraform.tfstate"
+                region = "${input.infraConfig.terraformStateBucketRegion}"
+                dynamodb_table = "${input.infraConfig.terraformStateLockTableName}"
+            }
+      }
+      `;
+            const backendFile = path.join(input.pkgPath, 'hereya_terraform_backend.tf');
+            await fs.promises.writeFile(backendFile, backendConfig);
+        }
         try {
             const terraform = await this.getTerraformBinary();
             runShell(terraform, ['init'], {
                 directory: input.pkgPath,
                 env: {
-                    ...mapObject(input.env ?? {}, (key, value) => [`TF_VAR_${key}`, typeof value === "object" ? JSON.stringify(value) : value]),
+                    ...mapObject(input.env ?? {}, (key, value) => [
+                        `TF_VAR_${key}`,
+                        typeof value === 'object' ? JSON.stringify(value) : value,
+                    ]),
                     ...input.env,
-                    ...mapObject(input.parameters ?? {}, (key, value) => [`TF_VAR_${key}`, typeof value === "object" ? JSON.stringify(value) : value])
-                }
+                    ...mapObject(input.parameters ?? {}, (key, value) => [
+                        `TF_VAR_${key}`,
+                        typeof value === 'object' ? JSON.stringify(value) : value,
+                    ]),
+                },
             });
             runShell(terraform, ['apply', '-auto-approve'], {
                 directory: input.pkgPath,
                 env: {
-                    ...mapObject(input.env ?? {}, (key, value) => [`TF_VAR_${key}`, typeof value === "object" ? JSON.stringify(value) : value]),
+                    ...mapObject(input.env ?? {}, (key, value) => [
+                        `TF_VAR_${key}`,
+                        typeof value === 'object' ? JSON.stringify(value) : value,
+                    ]),
                     ...input.env,
-                    ...mapObject(input.parameters ?? {}, (key, value) => [`TF_VAR_${key}`, typeof value === "object" ? JSON.stringify(value) : value])
-                }
+                    ...mapObject(input.parameters ?? {}, (key, value) => [
+                        `TF_VAR_${key}`,
+                        typeof value === 'object' ? JSON.stringify(value) : value,
+                    ]),
+                },
             });
             const env = await this.getEnv(input.pkgPath);
             return {
                 env,
-                success: true
+                success: true,
             };
         }
         catch (error) {
             return {
                 reason: error.message,
-                success: false
+                success: false,
             };
         }
     }
@@ -45,48 +74,60 @@ export class Terraform {
             runShell(terraform, ['init'], {
                 directory: input.pkgPath,
                 env: {
-                    ...mapObject(input.env ?? {}, (key, value) => [`TF_VAR_${key}`, typeof value === "object" ? JSON.stringify(value) : value]),
+                    ...mapObject(input.env ?? {}, (key, value) => [
+                        `TF_VAR_${key}`,
+                        typeof value === 'object' ? JSON.stringify(value) : value,
+                    ]),
                     ...input.env,
-                    ...mapObject(input.parameters ?? {}, (key, value) => [`TF_VAR_${key}`, typeof value === "object" ? JSON.stringify(value) : value])
-                }
+                    ...mapObject(input.parameters ?? {}, (key, value) => [
+                        `TF_VAR_${key}`,
+                        typeof value === 'object' ? JSON.stringify(value) : value,
+                    ]),
+                },
             });
             const env = await this.getEnv(input.pkgPath);
             runShell(terraform, ['destroy', '-auto-approve'], {
                 directory: input.pkgPath,
                 env: {
-                    ...mapObject(input.env ?? {}, (key, value) => [`TF_VAR_${key}`, typeof value === "object" ? JSON.stringify(value) : value]),
+                    ...mapObject(input.env ?? {}, (key, value) => [
+                        `TF_VAR_${key}`,
+                        typeof value === 'object' ? JSON.stringify(value) : value,
+                    ]),
                     ...input.env,
-                    ...mapObject(input.parameters ?? {}, (key, value) => [`TF_VAR_${key}`, typeof value === "object" ? JSON.stringify(value) : value])
-                }
+                    ...mapObject(input.parameters ?? {}, (key, value) => [
+                        `TF_VAR_${key}`,
+                        typeof value === 'object' ? JSON.stringify(value) : value,
+                    ]),
+                },
             });
             return {
                 env,
-                success: true
+                success: true,
             };
         }
         catch (error) {
             return {
                 reason: error.message,
-                success: false
+                success: false,
             };
         }
     }
     async downloadTerraform() {
         const TERRAFORM_DOWNLOAD_URLS = new Map([
-            ['darwin_arm64', 'https://releases.hashicorp.com/terraform/1.5.7/terraform_1.5.7_darwin_arm64.zip'],
-            ['darwin_x64', 'https://releases.hashicorp.com/terraform/1.5.7/terraform_1.5.7_darwin_amd64.zip'],
-            ['freebsd_arm', 'https://releases.hashicorp.com/terraform/1.5.7/terraform_1.5.7_freebsd_arm.zip'],
-            ['freebsd_ia32', 'https://releases.hashicorp.com/terraform/1.5.7/terraform_1.5.7_freebsd_386.zip'],
-            ['freebsd_x64', 'https://releases.hashicorp.com/terraform/1.5.7/terraform_1.5.7_freebsd_amd64.zip'],
-            ['linux_arm', 'https://releases.hashicorp.com/terraform/1.5.7/terraform_1.5.7_linux_arm.zip'],
-            ['linux_arm64', 'https://releases.hashicorp.com/terraform/1.5.7/terraform_1.5.7_linux_arm64.zip'],
-            ['linux_ia32', 'https://releases.hashicorp.com/terraform/1.5.7/terraform_1.5.7_linux_386.zip'],
-            ['linux_x64', 'https://releases.hashicorp.com/terraform/1.5.7/terraform_1.5.7_linux_amd64.zip'],
-            ['openbsd_ia32', 'https://releases.hashicorp.com/terraform/1.5.7/terraform_1.5.7_openbsd_386.zip'],
-            ['openbsd_x64', 'https://releases.hashicorp.com/terraform/1.5.7/terraform_1.5.7_openbsd_amd64.zip'],
-            ['sunos_x64', 'https://releases.hashicorp.com/terraform/1.5.7/terraform_1.5.7_solaris_amd64.zip'],
-            ['win32_ia32', 'https://releases.hashicorp.com/terraform/1.5.7/terraform_1.5.7_windows_386.zip'],
-            ['win32_x64', 'https://releases.hashicorp.com/terraform/1.5.7/terraform_1.5.7_windows_amd64.zip'],
+            ['darwin_arm64', 'https://github.com/opentofu/opentofu/releases/download/v1.9.0/tofu_1.9.0_darwin_arm64.zip'],
+            ['darwin_x64', 'https://github.com/opentofu/opentofu/releases/download/v1.9.0/tofu_1.9.0_darwin_amd64.zip'],
+            ['freebsd_arm', 'https://github.com/opentofu/opentofu/releases/download/v1.9.0/tofu_1.9.0_freebsd_arm.zip'],
+            ['freebsd_ia32', 'https://github.com/opentofu/opentofu/releases/download/v1.9.0/tofu_1.9.0_freebsd_386.zip'],
+            ['freebsd_x64', 'https://github.com/opentofu/opentofu/releases/download/v1.9.0/tofu_1.9.0_freebsd_amd64.zip'],
+            ['linux_arm', 'https://github.com/opentofu/opentofu/releases/download/v1.9.0/tofu_1.9.0_linux_arm.zip'],
+            ['linux_arm64', 'https://github.com/opentofu/opentofu/releases/download/v1.9.0/tofu_1.9.0_linux_arm64.zip'],
+            ['linux_ia32', 'https://github.com/opentofu/opentofu/releases/download/v1.9.0/tofu_1.9.0_linux_386.zip'],
+            ['linux_x64', 'https://github.com/opentofu/opentofu/releases/download/v1.9.0/tofu_1.9.0_linux_amd64.zip'],
+            ['openbsd_ia32', 'https://github.com/opentofu/opentofu/releases/download/v1.9.0/tofu_1.9.0_openbsd_386.zip'],
+            ['openbsd_x64', 'https://github.com/opentofu/opentofu/releases/download/v1.9.0/tofu_1.9.0_openbsd_amd64.zip'],
+            ['sunos_x64', 'https://github.com/opentofu/opentofu/releases/download/v1.9.0/tofu_1.9.0_solaris_amd64.zip'],
+            ['win32_ia32', 'https://github.com/opentofu/opentofu/releases/download/v1.9.0/tofu_1.9.0_windows_386.zip'],
+            ['win32_x64', 'https://github.com/opentofu/opentofu/releases/download/v1.9.0/tofu_1.9.0_windows_amd64.zip'],
         ]);
         const tfPath = this.terraformBinPath();
         try {
@@ -114,7 +155,7 @@ export class Terraform {
             }
         }
         await new Promise((resolve, reject) => {
-            https.get(url, async (response) => {
+            this.getWithRedirect(url, async (response) => {
                 try {
                     await pipeline(response, decompress({ path: path.dirname(tfPath) }));
                     await fs.promises.chmod(tfPath, '0755');
@@ -123,7 +164,7 @@ export class Terraform {
                     throw new Error(`could not download terraform: ${error}`);
                 }
                 resolve(null);
-            }).on('error', error => reject(error));
+            }, reject);
         });
         return true;
     }
@@ -131,7 +172,7 @@ export class Terraform {
         const terraform = await this.getTerraformBinary();
         const resourceOut = runShell(terraform, ['output', '--json'], {
             directory: pkgPath,
-            stdio: 'pipe'
+            stdio: 'pipe',
         });
         let outStr = resourceOut.output.toString().trim();
         const start = outStr.indexOf('{');
@@ -149,7 +190,22 @@ export class Terraform {
         await this.downloadTerraform();
         return this.terraformBinPath();
     }
+    async getWithRedirect(url, handler, reject) {
+        https
+            .get(url, (response) => {
+            if (response.statusCode === 302) {
+                const { location } = response.headers;
+                if (location) {
+                    this.getWithRedirect(location, handler, reject);
+                }
+            }
+            else {
+                handler(response);
+            }
+        })
+            .on('error', (error) => reject(error));
+    }
     terraformBinPath() {
-        return path.join(os.homedir(), '.hereya', 'iac', 'terraform', os.platform() === 'win32' ? 'terraform.exe' : 'terraform');
+        return path.join(os.homedir(), '.hereya', 'iac', 'terraform', 'tofu_1', os.platform() === 'win32' ? 'tofu.exe' : 'tofu');
     }
 }

package/dist/infrastructure/aws.d.ts

@@ -1,5 +1,6 @@
 import { BootstrapInput, DeployInput, DeployOutput, DestroyInput, DestroyOutput, Infrastructure, ProvisionInput, ProvisionOutput, ResolveEnvInput, ResolveEnvOutput, SaveEnvInput, SaveEnvOutput, StoreEnvInput, StoreEnvOutput, UndeployInput, UndeployOutput, UnstoreEnvInput, UnstoreEnvOutput } from './common.js';
 export declare class AwsInfrastructure implements Infrastructure {
+    private configKey;
     bootstrap(_: BootstrapInput): Promise<void>;
     deploy(input: DeployInput): Promise<DeployOutput>;
     destroy(input: DestroyInput): Promise<DestroyOutput>;
@@ -10,9 +11,5 @@ export declare class AwsInfrastructure implements Infrastructure {
     unbootstrap(_: BootstrapInput): Promise<void>;
     undeploy(input: UndeployInput): Promise<UndeployOutput>;
     unstoreEnv(input: UnstoreEnvInput): Promise<UnstoreEnvOutput>;
-    private getEnv;
-    private getFilesToUpload;
-    private removeEnv;
-    private runCodeBuild;
-    private uploadProjectFiles;
+    private getConfig;
 }

package/dist/infrastructure/aws.js

@@ -1,20 +1,16 @@
-import { BatchGetBuildsCommand, CodeBuildClient, StartBuildCommand } from '@aws-sdk/client-codebuild';
-import { DeleteObjectsCommand, PutObjectCommand, S3Client } from '@aws-sdk/client-s3';
 import { GetSecretValueCommand, SecretsManagerClient } from '@aws-sdk/client-secrets-manager';
 import { DeleteParameterCommand, GetParameterCommand, PutParameterCommand, SSMClient } from '@aws-sdk/client-ssm';
 import { GetCallerIdentityCommand, STSClient } from '@aws-sdk/client-sts';
-import { glob } from 'glob';
-import ignore from 'ignore';
 import { randomUUID } from 'node:crypto';
 import fs from 'node:fs/promises';
+import os from 'node:os';
 import path from 'node:path';
-import { IacType } from '../iac/common.js';
-import { fileExists, getAnyPath } from '../lib/filesystem.js';
-import { objectToBase64 } from '../lib/object-utils.js';
+import { getIac } from '../iac/index.js';
+import { downloadPackage } from '../lib/package/index.js';
 import { runShell } from '../lib/shell.js';
-import { InfrastructureType, } from './common.js';
 import { destroyPackage, provisionPackage } from './index.js';
 export class AwsInfrastructure {
+    configKey = '/hereya-bootstrap/config';
     async bootstrap(_) {
         const stsClient = new STSClient({});
         const { Account: accountId } = await stsClient.send(new GetCallerIdentityCommand({}));
@@ -26,7 +22,7 @@ export class AwsInfrastructure {
             throw new Error(output.reason);
         }
         const { env } = output;
-        const key = '/hereya-bootstrap/config';
+        const key = this.configKey;
         const ssmClient = new SSMClient({});
         const value = JSON.stringify(env);
         await ssmClient.send(new PutParameterCommand({
@@ -37,55 +33,77 @@ export class AwsInfrastructure {
         }));
     }
     async deploy(input) {
-        let files = [];
-        let s3Bucket = '';
-        let s3Client = new S3Client({});
-        let s3Key = '';
-        try {
-            ;
-            ({ files, s3Bucket, s3Client, s3Key } = await this.uploadProjectFiles(input));
-            input.parameters = {
-                ...input.parameters,
-                hereyaProjectEnv: objectToBase64(input.projectEnv),
-            };
-            const output = await this.runCodeBuild({
-                ...input,
-                deploy: true,
-                sourceS3Key: s3Key,
-            });
-            if (!output.success) {
-                return output;
-            }
-            const env = await this.getEnv(input.id);
-            return { env, success: true };
-        }
-        finally {
-            if (s3Key && files.length > 0) {
-                await s3Client.send(new DeleteObjectsCommand({
-                    Bucket: s3Bucket,
-                    Delete: {
-                        Objects: files.map((file) => ({ Key: `${s3Key}/${file}` })),
-                    },
-                }));
-            }
-        }
+        input.parameters = {
+            ...input.parameters,
+            hereyaProjectEnv: JSON.stringify(input.projectEnv ?? {}),
+            hereyaProjectRootDir: input.projectRootDir,
+        };
+        return this.provision(input);
     }
     async destroy(input) {
-        const env = await this.getEnv(input.id);
-        const output = await this.runCodeBuild({ ...input, destroy: true });
+        const destPath = path.join(os.homedir(), '.hereya', input.id, input.canonicalName);
+        const downloadPath = await downloadPackage(input.pkgUrl, destPath);
+        const region = process.env.AWS_REGION || process.env.AWS_DEFAULT_REGION;
+        const infraConfig = {
+            ...await this.getConfig(),
+            region,
+        };
+        if (!infraConfig.terraformStateBucketName || !infraConfig.terraformStateLockTableName) {
+            return {
+                reason: 'could not find AWS infrastructure config. Did you run `hereya bootstrap aws`?',
+                success: false,
+            };
+        }
+        const iac$ = getIac({ type: input.iacType });
+        if (!iac$.supported) {
+            return { reason: iac$.reason, success: false };
+        }
+        const { iac } = iac$;
+        const output = await iac.destroy({
+            env: input.env ?? {},
+            id: input.id,
+            infraConfig,
+            parameters: input.parameters,
+            pkgPath: downloadPath,
+        });
         if (!output.success) {
-            return output;
+            return { reason: output.reason, success: false };
         }
-        await this.removeEnv(input.id);
-        return { env, success: true };
+        // Remove downloaded package
+        await fs.rm(downloadPath, { recursive: true });
+        return { env: output.env, success: true };
     }
     async provision(input) {
-        const output = await this.runCodeBuild(input);
+        const destPath = path.join(os.homedir(), '.hereya', input.id, input.canonicalName);
+        const downloadPath = await downloadPackage(input.pkgUrl, destPath);
+        const config = await this.getConfig();
+        const terraformStateBucketRegion = config.terraformStateBucketRegion || process.env.AWS_REGION || process.env.AWS_DEFAULT_REGION;
+        const infraConfig = {
+            ...config,
+            terraformStateBucketRegion,
+        };
+        if (!infraConfig.terraformStateBucketName || !infraConfig.terraformStateLockTableName) {
+            return {
+                reason: 'could not find AWS infrastructure config. Did you run `hereya bootstrap aws`?',
+                success: false,
+            };
+        }
+        const iac$ = getIac({ type: input.iacType });
+        if (!iac$.supported) {
+            return { reason: iac$.reason, success: false };
+        }
+        const { iac } = iac$;
+        const output = await iac.apply({
+            env: input.env ?? {},
+            id: input.id,
+            infraConfig,
+            parameters: input.parameters,
+            pkgPath: downloadPath,
+        });
         if (!output.success) {
-            return output;
+            return { reason: output.reason, success: false };
         }
-        const env = await this.getEnv(input.id);
-        return { env, success: true };
+        return { env: output.env, success: true };
     }
     async resolveEnv(input) {
         try {
@@ -175,45 +193,12 @@ export class AwsInfrastructure {
         }
     }
     async undeploy(input) {
-        let files = [];
-        let s3Bucket = '';
-        let s3Client = new S3Client({});
-        let s3Key = '';
-        let env = {};
-        try {
-            env = await this.getEnv(input.id);
-        }
-        catch (error) {
-            console.log(`Could not get env for ${input.id}: ${error.message}. Continuing with undeployment...`);
-        }
-        try {
-            ;
-            ({ files, s3Bucket, s3Client, s3Key } = await this.uploadProjectFiles(input));
-            input.parameters = {
-                ...input.parameters,
-                hereyaProjectEnv: objectToBase64(input.projectEnv),
-            };
-            const output = await this.runCodeBuild({
-                ...input,
-                deploy: true,
-                destroy: true,
-                sourceS3Key: s3Key,
-            });
-            if (!output.success) {
-                return output;
-            }
-            return { env, success: true };
-        }
-        finally {
-            if (s3Key && files.length > 0) {
-                await s3Client.send(new DeleteObjectsCommand({
-                    Bucket: s3Bucket,
-                    Delete: {
-                        Objects: files.map((file) => ({ Key: `${s3Key}/${file}` })),
-                    },
-                }));
-            }
-        }
+        input.parameters = {
+            ...input.parameters,
+            hereyaProjectEnv: JSON.stringify(input.projectEnv ?? {}),
+            hereyaProjectRootDir: input.projectRootDir,
+        };
+        return this.destroy(input);
     }
     async unstoreEnv(input) {
         const parameterStoreArnPattern = /^arn:aws:ssm:[\da-z-]+:\d{12}:parameter\/[\w./-]+$/;
@@ -233,171 +218,11 @@ export class AwsInfrastructure {
         }));
         return { success: true };
     }
-    async getEnv(id) {
-        const ssmClient = new SSMClient({});
-        const ssmParameterName = `/hereya/${id}`;
-        try {
-            const ssmParameter = await ssmClient.send(new GetParameterCommand({
-                Name: ssmParameterName,
-            }));
-            return JSON.parse(ssmParameter.Parameter?.Value ?? '{}');
-        }
-        catch (error) {
-            if (error.name === 'ParameterNotFound') {
-                console.debug(`Parameter "${ssmParameterName}" does not exist.`);
-                return {};
-            }
-            throw error;
-        }
-    }
-    async getFilesToUpload(rootDir) {
-        const ig = ignore.default();
-        const ignoreFilePath = await getAnyPath(`${rootDir}/.hereyaignore`, `${rootDir}/.gitignore`);
-        if (await fileExists(ignoreFilePath)) {
-            const ignoreFileContent = await fs.readFile(ignoreFilePath, 'utf8');
-            ig.add(ignoreFileContent);
-        }
-        const files = glob.sync('**/*', { cwd: rootDir, nodir: true });
-        return files.filter((file) => !ig.ignores(file));
-    }
-    async removeEnv(id) {
-        const ssmClient = new SSMClient({});
-        const ssmParameterName = `/hereya/${id}`;
-        await ssmClient.send(new DeleteParameterCommand({
-            Name: ssmParameterName,
-        }));
-    }
-    async runCodeBuild(input) {
-        const codebuildClient = new CodeBuildClient({});
-        let codebuildProjectName = '';
-        switch (input.iacType) {
-            case IacType.cdk: {
-                codebuildProjectName = 'hereyaCdk';
-                break;
-            }
-            case IacType.terraform: {
-                codebuildProjectName = 'hereyaTerraform';
-                break;
-            }
-            default: {
-                return { reason: `IAC type ${input.iacType} is not supported yet!`, success: false };
-            }
-        }
-        const ssmClient = new SSMClient({});
-        const parameterName = `/hereya/package-parameters/${input.id}`;
-        const parameterValue = Object.entries(input.parameters ?? {})
-            .map(([key, value]) => `${key}=${typeof value === 'object' ? objectToBase64(value) : value}`)
-            .join(',');
-        if (parameterValue) {
-            await ssmClient.send(new PutParameterCommand({
-                Name: parameterName,
-                Overwrite: true,
-                Type: 'SecureString',
-                Value: parameterValue,
-            }));
-        }
-        const response = await codebuildClient.send(new StartBuildCommand({
-            environmentVariablesOverride: [
-                {
-                    name: 'HEREYA_ID',
-                    type: 'PLAINTEXT',
-                    value: input.id,
-                },
-                {
-                    name: 'HEREYA_IAC_TYPE',
-                    type: 'PLAINTEXT',
-                    value: input.iacType,
-                },
-                {
-                    name: 'HEREYA_INFRA_TYPE',
-                    type: 'PLAINTEXT',
-                    value: InfrastructureType.aws,
-                },
-                {
-                    name: 'HEREYA_PARAMETERS',
-                    type: parameterValue ? 'PARAMETER_STORE' : 'PLAINTEXT',
-                    value: parameterValue ? parameterName : '',
-                },
-                {
-                    name: 'HEREYA_WORKSPACE_ENV',
-                    type: 'PLAINTEXT',
-                    value: Object.entries(input.env ?? {})
-                        .map(([key, value]) => `${key}=${typeof value === 'object' ? objectToBase64(value) : value}`)
-                        .join(','),
-                },
-                {
-                    name: 'PKG_REPO_URL',
-                    type: 'PLAINTEXT',
-                    value: input.pkgUrl,
-                },
-                {
-                    name: 'HEREYA_DESTROY',
-                    type: 'PLAINTEXT',
-                    value: input.destroy ? 'true' : '',
-                },
-                {
-                    name: 'HEREYA_DEPLOY',
-                    type: 'PLAINTEXT',
-                    value: input.deploy ? 'true' : '',
-                },
-                {
-                    name: 'HEREYA_PROJECT_S3_KEY',
-                    type: 'PLAINTEXT',
-                    value: input.deploy ? input.sourceS3Key : '',
-                },
-            ],
-            projectName: codebuildProjectName,
-        }));
-        console.log(`Deployment ${response.build?.id} started successfully.`);
-        const command = new BatchGetBuildsCommand({
-            ids: [response.build?.id ?? ''],
-        });
-        const deploymentResult = await new Promise((resolve) => {
-            const handle = setInterval(async () => {
-                const buildResponse = await codebuildClient.send(command);
-                const build = buildResponse.builds?.[0];
-                if (build?.buildStatus === 'IN_PROGRESS') {
-                    console.log(`Deployment ${response.build?.id} still in progress...`);
-                    return;
-                }
-                clearInterval(handle);
-                console.log(`Deployment ${response.build?.id} finished with status ${build?.buildStatus}.`);
-                resolve(build);
-            }, 10_000); // 10 seconds
-        });
-        if (deploymentResult?.buildStatus !== 'SUCCEEDED') {
-            return { reason: `Deployment failed with status ${deploymentResult?.buildStatus}`, success: false };
-        }
-        // remove the parameter
-        if (parameterValue) {
-            await ssmClient.send(new DeleteParameterCommand({
-                Name: parameterName,
-            }));
-        }
-        return { success: true };
-    }
-    async uploadProjectFiles(input) {
-        const key = '/hereya-bootstrap/config';
+    async getConfig() {
         const ssmClient = new SSMClient({});
-        const response = await ssmClient.send(new GetParameterCommand({
-            Name: key,
-        }));
-        const bootstrapConfig = JSON.parse(response.Parameter?.Value ?? '{}');
-        if (!bootstrapConfig.hereyaSourceCodeBucketName) {
-            throw new Error('hereyaSourceCodeBucketName not found in bootstrap config');
-        }
-        const s3Key = `${input.id}/${randomUUID()}`;
-        const s3Bucket = bootstrapConfig.hereyaSourceCodeBucketName;
-        const files = await this.getFilesToUpload(input.projectRootDir);
-        const s3Client = new S3Client({});
-        await Promise.all(files.map(async (file) => {
-            console.log(`Uploading ${file} to s3://${s3Bucket}/${s3Key}`);
-            await s3Client.send(new PutObjectCommand({
-                Body: await fs.readFile(path.join(input.projectRootDir, file)),
-                Bucket: s3Bucket,
-                Key: `${s3Key}/${file}`,
-            }));
+        const ssmParameter = await ssmClient.send(new GetParameterCommand({
+            Name: this.configKey,
         }));
-        return { files, s3Bucket, s3Client, s3Key };
+        return JSON.parse(ssmParameter.Parameter?.Value ?? '{}');
     }
 }

package/dist/infrastructure/local.d.ts

@@ -14,6 +14,4 @@ export declare class LocalInfrastructure implements Infrastructure {
     unbootstrap(): Promise<void>;
     undeploy(input: UndeployInput): Promise<UndeployOutput>;
     unstoreEnv(_: UnstoreEnvInput): Promise<UnstoreEnvOutput>;
-    private download;
-    private isNotEmpty;
 }

package/dist/infrastructure/local.js

@@ -1,8 +1,8 @@
 import * as fs from 'node:fs/promises';
 import * as os from 'node:os';
 import * as path from 'node:path';
-import { simpleGit } from 'simple-git';
 import { getIac } from '../iac/index.js';
+import { downloadPackage } from '../lib/package/index.js';
 export class LocalInfrastructure {
     async bootstrap() {
         console.log('Bootstrapping local infrastructure');
@@ -18,7 +18,7 @@ export class LocalInfrastructure {
     async destroy(input) {
         // noinspection DuplicatedCode
         const destPath = path.join(os.homedir(), '.hereya', input.id, input.canonicalName);
-        const downloadPath = await this.download(input.pkgUrl, destPath);
+        const downloadPath = await downloadPackage(input.pkgUrl, destPath);
         const iac$ = getIac({ type: input.iacType });
         if (!iac$.supported) {
             return { reason: iac$.reason, success: false };
@@ -40,7 +40,7 @@ export class LocalInfrastructure {
     async provision(input) {
         // noinspection DuplicatedCode
         const destPath = path.join(os.homedir(), '.hereya', input.id, input.canonicalName);
-        const downloadPath = await this.download(input.pkgUrl, destPath);
+        const downloadPath = await downloadPackage(input.pkgUrl, destPath);
         const iac$ = getIac({ type: input.iacType });
         if (!iac$.supported) {
             return { reason: iac$.reason, success: false };
@@ -81,26 +81,4 @@ export class LocalInfrastructure {
     async unstoreEnv(_) {
         return { success: true };
     }
-    async download(pkgUrl, destPath) {
-        if (await this.isNotEmpty(destPath)) {
-            console.log(`Package already downloaded at ${destPath}`);
-            return destPath;
-        }
-        await fs.mkdir(destPath, { recursive: true });
-        console.log(`Downloading package from ${pkgUrl}`);
-        // Initialize simple-git
-        const git = simpleGit();
-        // Clone repository into temp directory
-        await git.clone(pkgUrl, destPath, ['--depth=1']);
-        return destPath;
-    }
-    async isNotEmpty(directoryPath) {
-        try {
-            const files = await fs.readdir(directoryPath);
-            return files.length > 0;
-        }
-        catch {
-            return false; // or you can handle the error as needed
-        }
-    }
 }

package/dist/lib/filesystem.d.ts

@@ -1,2 +1,3 @@
 export declare function getAnyPath(...candidates: string[]): Promise<string>;
 export declare function fileExists(filePath: string): Promise<boolean>;
+export declare function isNotEmpty(directoryPath: string): Promise<boolean>;

package/dist/lib/filesystem.js

@@ -1,4 +1,4 @@
-import { access, constants } from 'node:fs/promises';
+import { access, constants, readdir } from 'node:fs/promises';
 export async function getAnyPath(...candidates) {
     const checkAccess = async (index) => {
         if (index >= candidates.length)
@@ -22,3 +22,12 @@ export async function fileExists(filePath) {
         return false;
     }
 }
+export async function isNotEmpty(directoryPath) {
+    try {
+        const files = await readdir(directoryPath);
+        return files.length > 0;
+    }
+    catch {
+        return false;
+    }
+}

package/dist/lib/package/index.d.ts

@@ -6,6 +6,7 @@ export declare const packageManager: PackageManager;
 export declare function getPackageManager(): PackageManager;
 export declare function resolvePackage(input: ResolvePackageInput): Promise<ResolvePackageOutput>;
 export declare function getPackageCanonicalName(packageName: string): string;
+export declare function downloadPackage(pkgUrl: string, destPath: string): Promise<string>;
 export type ResolvePackageInput = {
     isDeploying?: boolean;
     package: string;

package/dist/lib/package/index.js

@@ -1,7 +1,10 @@
+import * as fs from 'node:fs/promises';
+import { simpleGit } from 'simple-git';
 import * as yaml from 'yaml';
 import { z } from 'zod';
 import { IacType } from '../../iac/common.js';
 import { InfrastructureType } from '../../infrastructure/common.js';
+import { isNotEmpty } from '../filesystem.js';
 import { GitHubPackageManager } from './github.js';
 export const packageManager = new GitHubPackageManager();
 export function getPackageManager() {
@@ -18,7 +21,7 @@ export async function resolvePackage(input) {
     const metadataContentCandidates = (await Promise.all([
         packageManager.getRepoContent({ owner, path: 'hereyarc.yaml', repo }),
         packageManager.getRepoContent({ owner, path: 'hereyarc.yml', repo }),
-    ])).filter(content$ => content$.found);
+    ])).filter((content$) => content$.found);
     if (metadataContentCandidates.length === 0) {
         return { found: false, reason: `No hereya metadata file found in ${pkgUrl}` };
     }
@@ -31,16 +34,16 @@ export async function resolvePackage(input) {
         if (input.isDeploying && metadata.onDeploy) {
             return resolvePackage({ package: metadata.onDeploy.pkg });
         }
-        if (process.env.HEREYA_OVERRIDE_INFRA) {
-            metadata.originalInfra = metadata.infra;
-            metadata.infra = process.env.HEREYA_OVERRIDE_INFRA;
-        }
+        // if (process.env.HEREYA_OVERRIDE_INFRA) {
+        //   metadata.originalInfra = metadata.infra
+        //   metadata.infra = process.env.HEREYA_OVERRIDE_INFRA as InfrastructureType
+        // }
         return {
             canonicalName: getPackageCanonicalName(input.package),
             found: true,
             metadata,
             packageUri: pkgUrl,
-            pkgName: input.package
+            pkgName: input.package,
         };
     }
     catch (error) {
@@ -50,14 +53,29 @@ export async function resolvePackage(input) {
 export function getPackageCanonicalName(packageName) {
     return packageName.replace('/', '-');
 }
+export async function downloadPackage(pkgUrl, destPath) {
+    if (await isNotEmpty(destPath)) {
+        console.log(`Package already downloaded at ${destPath}`);
+        return destPath;
+    }
+    await fs.mkdir(destPath, { recursive: true });
+    console.log(`Downloading package from ${pkgUrl}`);
+    // Initialize simple-git
+    const git = simpleGit();
+    // Clone repository into temp directory
+    await git.clone(pkgUrl, destPath, ['--depth=1']);
+    return destPath;
+}
 export const PackageMetadata = z.object({
     dependencies: z.record(z.string()).optional(),
     deploy: z.boolean().optional(),
     iac: z.nativeEnum(IacType),
     infra: z.nativeEnum(InfrastructureType),
-    onDeploy: z.object({
+    onDeploy: z
+        .object({
         pkg: z.string(),
         version: z.string(),
-    }).optional(),
+    })
+        .optional(),
     originalInfra: z.nativeEnum(InfrastructureType).optional(),
 });

package/oclif.manifest.json

@@ -504,56 +504,6 @@
         "index.js"
       ]
     },
-    "remote:exec": {
-      "aliases": [],
-      "args": {
-        "pkgPath": {
-          "description": "The path to the package to provision or destroy",
-          "name": "pkgPath",
-          "required": false
-        }
-      },
-      "description": "remotely provision or destroy a package",
-      "examples": [
-        "<%= config.bin %> <%= command.id %>"
-      ],
-      "flags": {
-        "output": {
-          "char": "o",
-          "description": "The path to store the output env in",
-          "name": "output",
-          "required": false,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "source": {
-          "char": "s",
-          "description": "The source of the project to provision or destroy the package for",
-          "name": "source",
-          "required": false,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        }
-      },
-      "hasDynamicHelp": false,
-      "hiddenAliases": [],
-      "id": "remote:exec",
-      "pluginAlias": "hereya-cli",
-      "pluginName": "hereya-cli",
-      "pluginType": "core",
-      "strict": true,
-      "enableJsonFlag": false,
-      "isESM": true,
-      "relativePath": [
-        "dist",
-        "commands",
-        "remote",
-        "exec",
-        "index.js"
-      ]
-    },
     "workspace:create": {
       "aliases": [],
       "args": {
@@ -898,5 +848,5 @@
       ]
     }
   },
-  "version": "0.10.0"
+  "version": "0.12.0"
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "hereya-cli",
   "description": "Infrastructure as Package",
-  "version": "0.10.0",
+  "version": "0.12.0",
   "author": "Hereya Developers",
   "bin": {
     "hereya": "./bin/run.js"

package/dist/commands/remote/exec/index.d.ts

@@ -1,13 +0,0 @@
-import { Command } from '@oclif/core';
-export default class RemoteExec extends Command {
-    static args: {
-        pkgPath: import("@oclif/core/lib/interfaces/parser.js").Arg<string | undefined, Record<string, unknown>>;
-    };
-    static description: string;
-    static examples: string[];
-    static flags: {
-        output: import("@oclif/core/lib/interfaces/parser.js").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
-        source: import("@oclif/core/lib/interfaces/parser.js").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
-    };
-    run(): Promise<void>;
-}

package/dist/commands/remote/exec/index.js

@@ -1,90 +0,0 @@
-import { Args, Command, Flags } from '@oclif/core';
-import path from 'node:path';
-import { getIac } from '../../../iac/index.js';
-import { getInfrastructure } from '../../../infrastructure/index.js';
-import { tryBase64ToJSONString } from '../../../lib/object-utils.js';
-import { save } from '../../../lib/yaml-utils.js';
-export default class RemoteExec extends Command {
-    static args = {
-        pkgPath: Args.string({
-            description: 'The path to the package to provision or destroy',
-            required: false,
-        }),
-    };
-    static description = 'remotely provision or destroy a package';
-    static examples = ['<%= config.bin %> <%= command.id %>'];
-    static flags = {
-        output: Flags.string({
-            char: 'o',
-            description: 'The path to store the output env in',
-            required: false,
-        }),
-        source: Flags.string({
-            char: 's',
-            description: 'The source of the project to provision or destroy the package for',
-            required: false,
-        }),
-    };
-    async run() {
-        const { args, flags } = await this.parse(RemoteExec);
-        const workspaceEnv = Object.fromEntries((process.env.HEREYA_WORKSPACE_ENV?.split(',') ?? [])
-            .filter((param) => param.trim())
-            .map((param) => param.split('='))
-            .map(([key, value]) => [key, tryBase64ToJSONString(value)]));
-        const parameters = Object.fromEntries((process.env.HEREYA_PARAMETERS?.split(',') ?? [])
-            .filter((param) => param.trim())
-            .map((param) => param.split('='))
-            .map(([key, value]) => [key, tryBase64ToJSONString(value)]));
-        const id = process.env.HEREYA_ID;
-        const iacType = process.env.HEREYA_IAC_TYPE;
-        const destroy = process.env.HEREYA_DESTROY === 'true';
-        const infraType = process.env.HEREYA_INFRA_TYPE;
-        const deploy = process.env.HEREYA_DEPLOY === 'true';
-        const source = flags.source ? path.resolve(flags.source) : '';
-        if (deploy && !source) {
-            return this.error('Deploy packages provisioning requires a source path');
-        }
-        if (!id || !iacType || !infraType) {
-            return this.error(`
-                Missing required environment variables:
-                HEREYA_ID: ${id}
-                HEREYA_IAC_TYPE: ${iacType}
-                HEREYA_INFRA_TYPE: ${infraType}
-            `);
-        }
-        const input = {
-            env: workspaceEnv,
-            id,
-            parameters,
-            pkgPath: args.pkgPath || process.cwd(),
-        };
-        if (deploy) {
-            input.parameters = {
-                ...input.parameters,
-                hereyaProjectRootDir: source,
-            };
-        }
-        const iac$ = getIac({ type: iacType });
-        if (!iac$.supported) {
-            return this.error(iac$.reason);
-        }
-        const { iac } = iac$;
-        const output = await (destroy ? iac.destroy(input) : iac.apply(input));
-        if (!output.success) {
-            return this.error(output.reason);
-        }
-        if (flags.output) {
-            await save(output.env, flags.output);
-            this.log(`Output env saved to ${flags.output}`);
-        }
-        const infra$ = getInfrastructure({ type: infraType });
-        if (!infra$.supported) {
-            return this.error(infra$.reason);
-        }
-        const { infrastructure } = infra$;
-        const saveOutput = await infrastructure.saveEnv({ env: output.env, id });
-        if (!saveOutput.success) {
-            return this.error(saveOutput.reason);
-        }
-    }
-}