Merge pull request #19 from depot/lambda

Author: jacobwgillespie

.dockerignore

@@ -0,0 +1,4 @@
+dist/
+node_modules/
+.env*
+*.log

.env.example

@@ -0,0 +1,7 @@
+# AWS Configuration
+AWS_REGION=us-east-1
+TABLE_NAME=oidc-data
+
+# Application secrets (these would be stored in AWS Secrets Manager or Parameter Store)
+ADMIN_TOKEN=your-admin-token
+GITHUB_TOKEN=your-github-token

Dockerfile

@@ -0,0 +1,26 @@
+FROM node:22 AS build
+
+RUN npm i -g corepack@latest
+RUN corepack enable
+WORKDIR /app
+COPY package.json pnpm-lock.yaml ./
+RUN --mount=type=cache,id=pnpm,target=/root/.local/share/pnpm/store pnpm install --frozen-lockfile
+COPY . .
+RUN pnpm run build
+
+FROM node:22 AS deps
+
+RUN npm i -g corepack@latest
+RUN corepack enable
+WORKDIR /app
+COPY package.json pnpm-lock.yaml ./
+RUN --mount=type=cache,id=pnpm,target=/root/.local/share/pnpm/store pnpm install --frozen-lockfile --prod
+
+FROM public.ecr.aws/lambda/nodejs:22
+
+WORKDIR ${LAMBDA_TASK_ROOT}
+COPY package.json ./
+COPY --from=deps /app/node_modules node_modules
+COPY --from=build /app/dist/index.mjs ./
+ENV NODE_ENV production
+CMD ["index.handler"]

LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2023 Depot Technologies, Inc. <[email protected]>
+Copyright (c) 2023-2025 Depot Technologies, Inc. <[email protected]>
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

client/package.json

@@ -15,12 +15,12 @@
   },
   "dependencies": {
     "@actions/core": "^1.11.1",
-    "@actions/github": "^6.0.0",
+    "@actions/github": "^6.0.1",
     "@actions/http-client": "^2.2.3"
   },
   "devDependencies": {
-    "esbuild": "^0.25.0",
-    "typescript": "^5.7.2"
+    "esbuild": "^0.25.9",
+    "typescript": "^5.9.2"
   },
   "publishConfig": {
     "access": "public"

depot.json

@@ -0,0 +1 @@
+{"id": "l73lv7j4c2"}

package.json

@@ -1,33 +1,39 @@
 {
+  "type": "module",
   "private": true,
   "packageManager": "[email protected]",
   "scripts": {
-    "deploy": "wrangler deploy",
-    "dev": "wrangler dev",
-    "logs": "wrangler tail",
+    "build": "rm -rf dist && esbuild src/index.ts --bundle --platform=node --target=node22 --format=esm --packages=external --outfile=dist/index.mjs",
+    "clean": "rm -rf dist",
     "refresh-session": "tsx support/refresh-session.ts",
     "refresh-session:local": "env OTP=\"$(op item get --vault 'actions-oidc' 'GitHub - depot-public-oidc' --otp)\" USERNAME=depot-public-oidc PASSWORD=\"$(op item get --vault 'actions-oidc' 'GitHub - depot-public-oidc' --fields password --reveal)\" LOCAL=true tsx support/refresh-session.ts"
   },
   "dependencies": {
-    "@github/stable-socket": "^1.1.1",
-    "@octokit/request": "^9.1.3",
-    "@sentry/node": "^10.0.0",
+    "@aws-sdk/client-dynamodb": "^3.888.0",
+    "@aws-sdk/lib-dynamodb": "^3.888.0",
+    "@hono/otel": "^0.5.0",
+    "@octokit/request": "^10.0.3",
+    "@opentelemetry/api": "^1.9.0",
+    "@opentelemetry/exporter-trace-otlp-http": "^0.205.0",
+    "@opentelemetry/sdk-node": "^0.205.0",
+    "@opentelemetry/sdk-trace-node": "^2.1.0",
+    "@sentry/node": "^10.11.0",
     "abort-controller-x": "^0.4.3",
     "date-fns": "^4.1.0",
-    "hono": "^4.6.13",
+    "hono": "^4.9.7",
     "rfc4648": "^1.5.4",
-    "zod": "^3.24.1"
+    "zod": "^4.1.8"
   },
   "devDependencies": {
-    "@cloudflare/workers-types": "^4.20250311.0",
     "@octokit/webhooks-types": "^7.6.1",
-    "playwright": "^1.49.1",
-    "prettier": "^3.4.2",
-    "prettier-plugin-organize-imports": "^4.1.0",
-    "prettier-plugin-pkg": "^0.18.1",
-    "tsx": "^4.19.2",
-    "typescript": "^5.7.2",
-    "wrangler": "^3.114.1"
+    "@types/node": "^24.3.3",
+    "esbuild": "^0.25.9",
+    "playwright": "^1.55.0",
+    "prettier": "^3.6.2",
+    "prettier-plugin-organize-imports": "^4.2.0",
+    "prettier-plugin-pkg": "^0.21.2",
+    "tsx": "^4.20.5",
+    "typescript": "^5.9.2"
   },
   "prettier": {
     "bracketSpacing": false,