gabriel / musehub public
fix BREAKING fix/production-deploy-target #1 / 1
AI Agent gabriel · 3 days ago · Aug 28, 2026 · Diff

fix: push.sh now targets the real Production AWS account, not the old pre-rebuild instance

push.sh was hardcoded to a single shared ECR registry, instance ID, and IAM credential (musehub-infra) — all of which only ever pointed at the Nonproduction account. Running 'push.sh prod' would have deployed to a stale target that doesn't correspond to the real Production account (672469410277) at all.

- Per-environment config (instance ID, ECR registry, AWS profile) for staging vs. prod, since they are separate AWS accounts - Build once, push the same artifact to each target's own ECR registry under its own credentials - prod authenticates via the operator's own musehub-production SSO profile, matching the no-shared-IAM-user design already documented for Production - Added an auth precheck that fails fast with a clear 'aws sso login' message instead of failing deep into the script - deploy.sh: clarified the manual-run example comment; no behavior change, it already receives ECR_IMAGE as a parameter

sha256:7093b91d5684806df3a8d0f4b520e53716bb19f540822aace6e30c5a05cdf6e4 sha
sha256:20ae2cb8b3425921e96f2131287a153721794504a8d0688f67cc2e3cd158e3ef parent
+10 ~5 −4 symbols
2 changed · 1059 in snapshot files
sha256:67e5d9aa806a68a6aa7d1d757a18aca07a3984a48119fe8b62968758e35ba68b snapshot
+10
symbols added
~5
symbols modified
−4
symbols removed
2
files changed
1059
files in snapshot
0
dead code introduced
Semantic Changes 19 symbols
+ .vscode/
+ alembic/
+ alembic/versions/
+ deploy/
+ deploy/load-tests/
+ docs/
+ docs/architecture/
+ docs/guides/
+ docs/issues/
+ docs/issues/assets/
+ docs/legal/
+ docs/mists/
+ docs/production-readiness/
+ docs/reference/
+ docs/releases/
+ docs/roadmaps/
+ musehub/
+ musehub/api/
+ musehub/api/routes/
+ musehub/api/routes/api/
+ musehub/api/routes/musehub/
+ musehub/auth/
+ musehub/core/
+ musehub/crypto/
+ musehub/db/
+ musehub/debug/
+ musehub/graph/
+ musehub/maintenance/
+ musehub/mcp/
+ musehub/mcp/tools/
+ musehub/mcp/write_tools/
+ musehub/middleware/
+ musehub/models/
+ musehub/muse_cli/
+ musehub/proposals/
+ musehub/protocol/
+ musehub/security/
+ musehub/services/
+ musehub/storage/
+ musehub/templates/
+ musehub/templates/mcp/
+ musehub/templates/musehub/
+ musehub/templates/musehub/fragments/
+ musehub/templates/musehub/macros/
+ musehub/templates/musehub/opengraph/
+ musehub/templates/musehub/pages/
+ musehub/templates/musehub/partials/
+ musehub/templates/musehub/static/
+ musehub/templates/musehub/static/vendor/
+ musehub/types/
+ scripts/
+ src/
+ src/scss/
+ src/scss/components/
+ src/scss/pages/
+ src/scss/patterns/
+ src/scss/theme/
+ src/ts/
+ src/ts/pages/
+ tests/
+ tests/unit/
+ tools/
+ workflows/
~ deploy/deploy.sh .sh
~ deploy/push.sh .sh 10 symbols added, 4 symbols removed, 5 symbols modified
− ECR_IMAGE variable variable ECR_IMAGE L36–36
− FULL_IMAGE variable variable FULL_IMAGE L82–82
− PROD_INSTANCE variable variable PROD_INSTANCE L40–40
− STAGING_INSTANCE variable variable STAGING_INSTANCE L39–39
+ AWS_PROFILE variable variable AWS_PROFILE L55–58
+ INSTANCE variable variable INSTANCE L47–50
+ LOCAL_TAG variable variable LOCAL_TAG L126–126
+ check_auth function function check_auth L94–102
+ ecr_image variable variable ecr_image L169–169
+ image variable variable image L148–148
+ pargs variable variable pargs L172–172
+ profile variable variable profile L170–170
+ profile_args function function profile_args L86–92
+ registry variable variable registry L147–147
~ ECR_REGISTRY
~ deploy_cmd_id
~ deploy_to
~ instance_id
~ invocation
Files Changed
~2
1059 in snapshot
~ deploy/deploy.sh .sh
~ deploy/push.sh .sh
← Older Oldest on fix/production-deploy-target
All commits
Newer → Latest on fix/production-deploy-target

0 comments

No comments yet. Be the first to start the discussion.

To add a comment, use the Muse CLI: muse hub commit comment sha256:7093b91d5684806df3a8d0f4b520e53716bb19f540822aace6e30c5a05cdf6e4 --body "your comment"