@cardelli/ambit 0.4.3 → 0.4.5

package/esm/providers/fly.d.ts

@@ -28,6 +28,23 @@ export interface SafeDeployOptions {
     config?: string;
     region?: string;
     routerId?: string;
+    vmSize?: string;
+    vmCpus?: number;
+    vmMemory?: string;
+    vmCpuKind?: string;
+    vmGpuKind?: string;
+    vmGpus?: number;
+    dockerfile?: string;
+    buildArg?: string[];
+    buildSecret?: string[];
+    buildTarget?: string;
+    localOnly?: boolean;
+    remoteOnly?: boolean;
+    env?: string[];
+    strategy?: string;
+    detach?: boolean;
+    waitTimeout?: string;
+    volumeInitialSize?: number;
 }
 export interface FlyProvider {
     auth: {
@@ -36,6 +53,7 @@ export interface FlyProvider {
             interactive?: boolean;
         }): Promise<string>;
         getToken(): Promise<string>;
+        useOrgToken(org: string): Promise<void>;
     };
     orgs: {
         list(): Promise<Record<string, string>>;

package/esm/providers/fly.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fly.d.ts","sourceRoot":"","sources":["../../src/providers/fly.ts"],"names":[],"mappings":"AAUA,OAAO,EACL,KAAK,MAAM,EACX,KAAK,UAAU,EAIf,KAAK,KAAK,EAEV,KAAK,UAAU,EAIhB,MAAM,mBAAmB,CAAC;AAa3B;;;;GAIG;AACH,qBAAa,cAAe,SAAQ,KAAK;IACvC,+CAA+C;IAC/C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBAEZ,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAMxC;AAMD,MAAM,MAAM,WAAW,GAAG,eAAe,GAAG,eAAe,GAAG,eAAe,CAAC;AAE9E,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,WAAW,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAMD,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAMD,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAMD,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE;QACJ,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,EAAE;YAAE,WAAW,CAAC,EAAE,OAAO,CAAA;SAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QACzD,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;KAC7B,CAAC;IACF,IAAI,EAAE;QACJ,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;KACzC,CAAC;IACF,IAAI,EAAE;QACJ,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACtC,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;QACpD,MAAM,CACJ,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE;YAAE,OAAO,CAAC,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;SAAE,GAC7C,OAAO,CAAC,IAAI,CAAC,CAAC;QACjB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QACvC,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;KAClE,CAAC;IACF,QAAQ,EAAE;QACR,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;QACzC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;QAClE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KACxD,CAAC;IACF,OAAO,EAAE;QACP,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC,CAAC;QACpE,GAAG,CACD,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,IAAI,CAAC,EAAE;YAAE,KAAK,CAAC,EAAE,OAAO,CAAA;SAAE,GACzB,OAAO,CAAC,IAAI,CAAC,CAAC;QACjB,KAAK,CACH,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,CAAC,EAAE;YAAE,KAAK,CAAC,EAAE,OAAO,CAAA;SAAE,GACzB,OAAO,CAAC,IAAI,CAAC,CAAC;QACjB,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KACpC,CAAC;IACF,GAAG,EAAE;QACH,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QACpC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACrD,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KAC9D,CAAC;IACF,KAAK,EAAE;QACL,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACrC,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KACtD,CAAC;IACF,MAAM,EAAE;QACN,MAAM,CACJ,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,GAC3B,OAAO,CAAC,IAAI,CAAC,CAAC;QACjB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KAC7D,CAAC;CACH;AAMD,eAAO,MAAM,iBAAiB,GAAI,QAAQ,MAAM,KAAG,WAogBlD,CAAC"}
+{"version":3,"file":"fly.d.ts","sourceRoot":"","sources":["../../src/providers/fly.ts"],"names":[],"mappings":"AAQA,OAAO,EACL,KAAK,MAAM,EACX,KAAK,UAAU,EAIf,KAAK,KAAK,EAEV,KAAK,UAAU,EAIhB,MAAM,mBAAmB,CAAC;AAa3B;;;;GAIG;AACH,qBAAa,cAAe,SAAQ,KAAK;IACvC,+CAA+C;IAC/C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBAEZ,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAMxC;AAMD,MAAM,MAAM,WAAW,GAAG,eAAe,GAAG,eAAe,GAAG,eAAe,CAAC;AAE9E,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,WAAW,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAMD,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAMD,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IAErB,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAMD,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE;QACJ,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,EAAE;YAAE,WAAW,CAAC,EAAE,OAAO,CAAA;SAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QACzD,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;QAC5B,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KACzC,CAAC;IACF,IAAI,EAAE;QACJ,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;KACzC,CAAC;IACF,IAAI,EAAE;QACJ,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACtC,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;QACpD,MAAM,CACJ,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE;YAAE,OAAO,CAAC,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;SAAE,GAC7C,OAAO,CAAC,IAAI,CAAC,CAAC;QACjB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QACvC,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;KAClE,CAAC;IACF,QAAQ,EAAE;QACR,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;QACzC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;QAClE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KACxD,CAAC;IACF,OAAO,EAAE;QACP,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC,CAAC;QACpE,GAAG,CACD,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,IAAI,CAAC,EAAE;YAAE,KAAK,CAAC,EAAE,OAAO,CAAA;SAAE,GACzB,OAAO,CAAC,IAAI,CAAC,CAAC;QACjB,KAAK,CACH,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,CAAC,EAAE;YAAE,KAAK,CAAC,EAAE,OAAO,CAAA;SAAE,GACzB,OAAO,CAAC,IAAI,CAAC,CAAC;QACjB,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KACpC,CAAC;IACF,GAAG,EAAE;QACH,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QACpC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACrD,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KAC9D,CAAC;IACF,KAAK,EAAE;QACL,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACrC,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KACtD,CAAC;IACF,MAAM,EAAE;QACN,MAAM,CACJ,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,GAC3B,OAAO,CAAC,IAAI,CAAC,CAAC;QACjB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KAC7D,CAAC;CACH;AAMD,eAAO,MAAM,iBAAiB,GAAI,QAAQ,MAAM,KAAG,WAmkBlD,CAAC"}

package/esm/providers/fly.js

@@ -1,14 +1,13 @@
 // =============================================================================
 // Fly.io Provider - Wraps flyctl CLI
 // =============================================================================
-import * as dntShim from "../_dnt.shims.js";
 import { runCommand, runJson } from "../lib/command.js";
 import { Result } from "../lib/result.js";
 import { commandExists, die } from "../lib/cli.js";
 import { dirname, resolve } from "../deps/jsr.io/@std/path/1.1.4/mod.js";
 import { FlyAppInfoListSchema, FlyAppsListSchema, FlyAuthSchema, FlyIpListSchema, FlyMachinesListSchema, FlyOrgsSchema, FlyStatusSchema, } from "../schemas/fly.js";
-import { fileExists } from "../lib/cli.js";
 import { getWorkloadAppName } from "../util/naming.js";
+import { createFlyOrgToken } from "../util/fly-token.js";
 import { extractErrorDetail, getSizeConfig, mapMachines, } from "../util/fly-transforms.js";
 // =============================================================================
 // Deploy Error
@@ -32,13 +31,29 @@ export class FlyDeployError extends Error {
 // Create Fly Provider
 // =============================================================================
 export const createFlyProvider = (token) => {
-    const envOverride = token ? { FLY_API_TOKEN: token } : undefined;
-    const run = (args, opts) => runCommand(args, envOverride
-        ? { ...opts, env: { ...opts?.env, ...envOverride } }
-        : opts);
-    const runJ = (args, opts) => runJson(args, envOverride
-        ? { ...opts, env: { ...opts?.env, ...envOverride } }
-        : opts);
+    const baseEnvOverride = token ? { FLY_API_TOKEN: token } : undefined;
+    let orgToken = null;
+    let orgTokenPromise = null;
+    let orgTokenOrg = null;
+    const ensureOrgToken = async () => {
+        if (orgToken)
+            return orgToken;
+        if (!orgTokenPromise)
+            return null;
+        orgToken = await orgTokenPromise;
+        return orgToken;
+    };
+    const withFlyEnv = async (opts) => {
+        const activeOrgToken = await ensureOrgToken();
+        const envOverride = activeOrgToken
+            ? { FLY_API_TOKEN: activeOrgToken }
+            : baseEnvOverride;
+        return envOverride
+            ? { ...opts, env: { ...opts?.env, ...envOverride } }
+            : opts;
+    };
+    const run = async (args, opts) => runCommand(args, await withFlyEnv(opts));
+    const runJ = async (args, opts) => runJson(args, await withFlyEnv(opts));
     const provider = {
         auth: {
             async ensureInstalled() {
@@ -83,19 +98,27 @@ export const createFlyProvider = (token) => {
                 return parsed.data.email;
             },
             async getToken() {
-                if (token)
-                    return token;
-                const home = dntShim.Deno.env.get("HOME") || dntShim.Deno.env.get("USERPROFILE") || "";
-                const configPath = `${home}/.fly/config.yml`;
-                if (!(await fileExists(configPath))) {
-                    return die("Fly Config Not Found at ~/.fly/config.yml. Run 'ambit auth login' First");
-                }
-                const content = await dntShim.Deno.readTextFile(configPath);
-                const match = content.match(/access_token:\s*(.+)/);
-                if (!match || !match[1]) {
-                    return die("No Access Token Found in ~/.fly/config.yml. Run 'ambit auth login' First");
-                }
-                return match[1].trim();
+                const activeOrgToken = await ensureOrgToken();
+                if (activeOrgToken)
+                    return activeOrgToken;
+                return die("Fly.io Organization Token Not Initialized. Resolve an Organization First");
+            },
+            async useOrgToken(org) {
+                if (orgToken && orgTokenOrg === org)
+                    return;
+                if (orgTokenPromise && orgTokenOrg === org) {
+                    await orgTokenPromise;
+                    return;
+                }
+                orgToken = null;
+                orgTokenOrg = org;
+                orgTokenPromise = createFlyOrgToken(org, { baseToken: token }).then((mintedToken) => {
+                    if (!mintedToken) {
+                        return die(`Failed to Create Fly.io Organization Token for '${org}'`);
+                    }
+                    return mintedToken;
+                });
+                orgToken = await orgTokenPromise;
             },
         },
         orgs: {
@@ -409,6 +432,50 @@ export const createFlyProvider = (token) => {
                 if (options.region) {
                     args.push("--primary-region", options.region);
                 }
+                // VM sizing
+                if (options.vmSize)
+                    args.push("--vm-size", options.vmSize);
+                if (options.vmCpus)
+                    args.push("--vm-cpus", String(options.vmCpus));
+                if (options.vmMemory)
+                    args.push("--vm-memory", options.vmMemory);
+                if (options.vmCpuKind)
+                    args.push("--vm-cpu-kind", options.vmCpuKind);
+                if (options.vmGpuKind)
+                    args.push("--vm-gpu-kind", options.vmGpuKind);
+                if (options.vmGpus)
+                    args.push("--vm-gpus", String(options.vmGpus));
+                // Build options (only meaningful when not using --image)
+                if (!options.image) {
+                    if (options.dockerfile)
+                        args.push("--dockerfile", options.dockerfile);
+                    if (options.buildTarget) {
+                        args.push("--build-target", options.buildTarget);
+                    }
+                    if (options.localOnly)
+                        args.push("--local-only");
+                    if (options.remoteOnly)
+                        args.push("--remote-only");
+                    for (const arg of options.buildArg ?? []) {
+                        args.push("--build-arg", arg);
+                    }
+                    for (const secret of options.buildSecret ?? []) {
+                        args.push("--build-secret", secret);
+                    }
+                }
+                // Deploy behavior
+                for (const e of options.env ?? [])
+                    args.push("--env", e);
+                if (options.strategy)
+                    args.push("--strategy", options.strategy);
+                if (options.detach)
+                    args.push("--detach");
+                if (options.waitTimeout) {
+                    args.push("--wait-timeout", options.waitTimeout);
+                }
+                if (options.volumeInitialSize) {
+                    args.push("--volume-initial-size", String(options.volumeInitialSize));
+                }
                 const result = await run(args);
                 if (!result.ok) {
                     throw new FlyDeployError(flyAppName, result.stderr);

package/esm/schemas/fly.d.ts

@@ -1,4 +1,4 @@
-import { z } from "../deps/jsr.io/@zod/zod/4.3.6/src/index.js";
+import { z } from "../deps/jsr.io/@zod/zod/4.4.3/src/index.js";
 export declare const FlyAuthSchema: z.ZodObject<{
     email: z.ZodString;
 }, z.core.$loose>;

package/esm/schemas/fly.js

@@ -1,7 +1,7 @@
 // =============================================================================
 // Fly.io CLI Response Schemas
 // =============================================================================
-import { z } from "../deps/jsr.io/@zod/zod/4.3.6/src/index.js";
+import { z } from "../deps/jsr.io/@zod/zod/4.4.3/src/index.js";
 // =============================================================================
 // Auth Response
 // =============================================================================

package/esm/schemas/tailscale.d.ts

@@ -1,4 +1,4 @@
-import { z } from "../deps/jsr.io/@zod/zod/4.3.6/src/index.js";
+import { z } from "../deps/jsr.io/@zod/zod/4.4.3/src/index.js";
 export declare const TailscaleAuthKeySchema: z.ZodObject<{
     key: z.ZodString;
     id: z.ZodOptional<z.ZodString>;

package/esm/schemas/tailscale.js

@@ -1,7 +1,7 @@
 // =============================================================================
 // Tailscale API Response Schemas
 // =============================================================================
-import { z } from "../deps/jsr.io/@zod/zod/4.3.6/src/index.js";
+import { z } from "../deps/jsr.io/@zod/zod/4.4.3/src/index.js";
 // =============================================================================
 // Auth Key Schemas
 // =============================================================================

package/esm/util/credentials.d.ts

@@ -1,8 +1,6 @@
 export interface CredentialStore {
     getTailscaleApiKey(): Promise<string | null>;
     setTailscaleApiKey(key: string): Promise<void>;
-    getFlyToken(): Promise<string | null>;
-    setFlyToken(token: string): Promise<void>;
     clear(): Promise<void>;
 }
 export declare const createConfigCredentialStore: () => CredentialStore;
@@ -20,6 +18,5 @@ export declare const checkDependencies: (out: {
     die(msg: string): never;
 }) => Promise<{
     tailscaleKey: string;
-    flyToken: string | null;
 }>;
 //# sourceMappingURL=credentials.d.ts.map

package/esm/util/credentials.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../src/util/credentials.ts"],"names":[],"mappings":"AA4BA,MAAM,WAAW,eAAe;IAC9B,kBAAkB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC7C,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C,WAAW,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACtC,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AA+BD,eAAO,MAAM,2BAA2B,QAAO,eAiC9C,CAAC;AAMF,eAAO,MAAM,kBAAkB,QAAO,eA8BrC,CAAC;AAMF;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB,GAC5B,KAAK;IAAE,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IAAC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,KAAK,CAAA;CAAE,KAC1D,OAAO,CAAC;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAkC3D,CAAC"}
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../src/util/credentials.ts"],"names":[],"mappings":"AA2BA,MAAM,WAAW,eAAe;IAC9B,kBAAkB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC7C,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AA+BD,eAAO,MAAM,2BAA2B,QAAO,eAsB9C,CAAC;AAMF,eAAO,MAAM,kBAAkB,QAAO,eAmBrC,CAAC;AAMF;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB,GAC5B,KAAK;IAAE,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IAAC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,KAAK,CAAA;CAAE,KAC1D,OAAO,CAAC;IAAE,YAAY,EAAE,MAAM,CAAA;CAAE,CA2BlC,CAAC"}

package/esm/util/credentials.js

@@ -1,16 +1,15 @@
 // =============================================================================
-// Credential Store - Persistent Tailscale & Fly.io Token Storage
+// Credential Store - Persistent Tailscale Token Storage
 // =============================================================================
 import * as dntShim from "../_dnt.shims.js";
-import { z } from "../deps/jsr.io/@zod/zod/4.3.6/src/index.js";
+import { z } from "../deps/jsr.io/@zod/zod/4.4.3/src/index.js";
 import { commandExists, ensureConfigDir, fileExists, getConfigDir, } from "../lib/cli.js";
-import { ENV_FLY_API_TOKEN, ENV_TAILSCALE_API_KEY } from "./constants.js";
+import { ENV_TAILSCALE_API_KEY } from "./constants.js";
 // =============================================================================
 // Schema
 // =============================================================================
 const CredentialsSchema = z.object({
     apiKey: z.string().optional(),
-    flyToken: z.string().optional(),
 });
 // =============================================================================
 // Config File Implementation
@@ -45,15 +44,6 @@ export const createConfigCredentialStore = () => {
             data.apiKey = key;
             await writeCredentials(data);
         },
-        async getFlyToken() {
-            const data = await readCredentials();
-            return data.flyToken ?? null;
-        },
-        async setFlyToken(token) {
-            const data = await readCredentials();
-            data.flyToken = token;
-            await writeCredentials(data);
-        },
         async clear() {
             const path = getCredentialsPath();
             try {
@@ -66,7 +56,7 @@ export const createConfigCredentialStore = () => {
     };
 };
 // =============================================================================
-// Default Credential Store (env var → file)
+// Default Credential Store (env var -> file)
 // =============================================================================
 export const getCredentialStore = () => {
     const fileStore = createConfigCredentialStore();
@@ -80,15 +70,6 @@ export const getCredentialStore = () => {
         async setTailscaleApiKey(key) {
             await fileStore.setTailscaleApiKey(key);
         },
-        async getFlyToken() {
-            const envToken = dntShim.Deno.env.get(ENV_FLY_API_TOKEN);
-            if (envToken)
-                return envToken;
-            return await fileStore.getFlyToken();
-        },
-        async setFlyToken(token) {
-            await fileStore.setFlyToken(token);
-        },
         async clear() {
             await fileStore.clear();
         },
@@ -115,10 +96,6 @@ export const checkDependencies = async (out) => {
     if (!key) {
         errors.push("Tailscale API Key Required. Run 'ambit auth login' or set TAILSCALE_API_KEY");
     }
-    const flyToken = await credentials.getFlyToken();
-    if (!flyToken) {
-        errors.push("Fly.io Token Required. Run 'ambit auth login' or set FLY_API_TOKEN");
-    }
     if (errors.length === 1) {
         return out.die(errors[0]);
     }
@@ -127,5 +104,5 @@ export const checkDependencies = async (out) => {
             out.err(e);
         return out.die("Missing Prerequisites");
     }
-    return { tailscaleKey: key, flyToken };
+    return { tailscaleKey: key };
 };

package/esm/util/fly-token.d.ts

@@ -0,0 +1,7 @@
+export declare const parseFlyTokenJson: (raw: string) => string | null;
+export declare const createFlyOrgToken: (org: string, opts?: {
+    baseToken?: string;
+    name?: string;
+    expiry?: string;
+}) => Promise<string | null>;
+//# sourceMappingURL=fly-token.d.ts.map

package/esm/util/fly-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fly-token.d.ts","sourceRoot":"","sources":["../../src/util/fly-token.ts"],"names":[],"mappings":"AAeA,eAAO,MAAM,iBAAiB,GAAI,KAAK,MAAM,KAAG,MAAM,GAAG,IAYxD,CAAC;AAEF,eAAO,MAAM,iBAAiB,GAC5B,KAAK,MAAM,EACX,OAAO;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,KAC5D,OAAO,CAAC,MAAM,GAAG,IAAI,CAqBvB,CAAC"}

package/esm/util/fly-token.js

@@ -0,0 +1,50 @@
+import { z } from "../deps/jsr.io/@zod/zod/4.4.3/src/index.js";
+import { runCommand } from "../lib/command.js";
+import { ENV_FLY_API_TOKEN } from "./constants.js";
+const FLY_TOKEN_EXPIRY = "24h";
+const FlyTokenJsonSchema = z.union([
+    z.string().trim().min(1),
+    z.object({
+        token: z.string().trim().min(1).optional(),
+        access_token: z.string().trim().min(1).optional(),
+        accessToken: z.string().trim().min(1).optional(),
+        Token: z.string().trim().min(1).optional(),
+    }),
+]);
+export const parseFlyTokenJson = (raw) => {
+    try {
+        const result = FlyTokenJsonSchema.safeParse(JSON.parse(raw));
+        if (!result.success)
+            return null;
+        const data = result.data;
+        if (typeof data === "string")
+            return data;
+        return data.token ?? data.access_token ?? data.accessToken ?? data.Token ??
+            null;
+    }
+    catch {
+        return null;
+    }
+};
+export const createFlyOrgToken = async (org, opts) => {
+    const env = opts?.baseToken
+        ? { [ENV_FLY_API_TOKEN]: opts.baseToken }
+        : undefined;
+    const runOpts = env ? { env } : undefined;
+    const result = await runCommand([
+        "fly",
+        "tokens",
+        "create",
+        "org",
+        "--json",
+        "--org",
+        org,
+        "--expiry",
+        opts?.expiry ?? FLY_TOKEN_EXPIRY,
+        "--name",
+        opts?.name ?? `ambit ${org}`,
+    ], runOpts);
+    if (!result.ok)
+        return null;
+    return parseFlyTokenJson(result.stdout);
+};

package/esm/util/fly-transforms.d.ts

@@ -1,5 +1,5 @@
 import type { FlyMachine, FlyMachineGuestSchema } from "../schemas/fly.js";
-import type { z } from "../deps/jsr.io/@zod/zod/4.3.6/src/index.js";
+import type { z } from "../deps/jsr.io/@zod/zod/4.4.3/src/index.js";
 /**
  * Map Fly machine state to internal state.
  * Fly states: created, starting, started, stopping, stopped, destroying, destroyed

package/esm/util/session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/util/session.ts"],"names":[],"mappings":"AAIA,OAAO,EAAqB,KAAK,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAEL,KAAK,iBAAiB,EACvB,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAI/C;;;GAGG;AACH,eAAO,MAAM,WAAW,GAAU,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjE,KAAK,MAAM,CAAC,CAAC,CAAC,EACd,MAAM;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,KACpC,OAAO,CAAC;IAAE,GAAG,EAAE,WAAW,CAAC;IAAC,SAAS,EAAE,iBAAiB,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAOzE,CAAC"}
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/util/session.ts"],"names":[],"mappings":"AAIA,OAAO,EAAqB,KAAK,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAEL,KAAK,iBAAiB,EACvB,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAI/C;;;GAGG;AACH,eAAO,MAAM,WAAW,GAAU,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjE,KAAK,MAAM,CAAC,CAAC,CAAC,EACd,MAAM;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,KACpC,OAAO,CAAC;IAAE,GAAG,EAAE,WAAW,CAAC;IAAC,SAAS,EAAE,iBAAiB,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAQzE,CAAC"}

package/esm/util/session.js

@@ -10,10 +10,11 @@ import { resolveOrg } from "./resolve.js";
  * validates fly CLI + Tailscale key, authenticates with Fly, and resolves org.
  */
 export const initSession = async (out, opts) => {
-    const { tailscaleKey, flyToken } = await checkDependencies(out);
-    const fly = createFlyProvider(flyToken ?? undefined);
+    const { tailscaleKey } = await checkDependencies(out);
+    const fly = createFlyProvider();
     await fly.auth.login({ interactive: !opts.json });
     const tailscale = createTailscaleProvider(tailscaleKey);
     const org = await resolveOrg(fly, opts, out);
+    await fly.auth.useOrgToken(org);
     return { fly, tailscale, org };
 };

package/esm/util/tailscale-local.d.ts

@@ -41,6 +41,14 @@ export declare const patchAclRule: (policy: Record<string, unknown>, src: string
  * No-op if no such rule exists.
  */
 export declare const unpatchAclRule: (policy: Record<string, unknown>, src: string, dst: string) => Record<string, unknown>;
+/**
+ * Returns a new policy with all `acls` references to the given tag removed.
+ * A destination references a tag when it is exactly the tag or uses the
+ * Tailscale `tag:<name>:<port>` form. A source references a tag only when it
+ * exactly matches the tag. Rules left with no sources or destinations are
+ * dropped.
+ */
+export declare const unpatchAclTagReferences: (policy: Record<string, unknown>, tag: string) => Record<string, unknown>;
 /**
  * Returns a new policy with the given tag removed from tagOwners.
  * No-op if the tag is not present.

package/esm/util/tailscale-local.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tailscale-local.d.ts","sourceRoot":"","sources":["../../src/util/tailscale-local.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAMnE,eAAO,MAAM,oBAAoB,QAAa,OAAO,CAAC,OAAO,CAE5D,CAAC;AAEF,eAAO,MAAM,qBAAqB,QAAa,OAAO,CAAC,OAAO,CAM7D,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,kBAAkB,QAAa,OAAO,CAAC,OAAO,CAG1D,CAAC;AAMF,eAAO,MAAM,aAAa,GACxB,UAAU,iBAAiB,EAC3B,UAAU,MAAM,EAChB,YAAW,MAAe,KACzB,OAAO,CAAC,eAAe,CAazB,CAAC;AAMF;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,GAC9B,UAAU,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC/B,IAiBF,CAAC;AAMF,eAAO,MAAM,oBAAoB,GAC/B,QAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,EACtC,KAAK,MAAM,KACV,OASF,CAAC;AAEF,eAAO,MAAM,wBAAwB,GACnC,QAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,EACtC,KAAK,MAAM,KACV,OAgBF,CAAC;AAMF;;;GAGG;AACH,eAAO,MAAM,aAAa,GACxB,QAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,MAAM,EACX,SAAQ,MAAM,EAAwB,KACrC,MAAM,CAAC,MAAM,EAAE,OAAO,CAIxB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,iBAAiB,GAC5B,QAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,MAAM,EACX,OAAO,MAAM,KACZ,MAAM,CAAC,MAAM,EAAE,OAAO,CAYxB,CAAC;AAaF;;;GAGG;AACH,eAAO,MAAM,mBAAmB,GAC9B,QAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,EACtC,KAAK,MAAM,EACX,KAAK,MAAM,KACV,OAUF,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,YAAY,GACvB,QAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,MAAM,EACX,KAAK,MAAM,KACV,MAAM,CAAC,MAAM,EAAE,OAAO,CAOxB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,cAAc,GACzB,QAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,MAAM,EACX,KAAK,MAAM,KACV,MAAM,CAAC,MAAM,EAAE,OAAO,CAaxB,CAAC;AAMF;;;GAGG;AACH,eAAO,MAAM,eAAe,GAC1B,QAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,MAAM,KACV,MAAM,CAAC,MAAM,EAAE,OAAO,CAQxB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,mBAAmB,GAC9B,QAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,MAAM,KACV,MAAM,CAAC,MAAM,EAAE,OAAO,CA+BxB,CAAC"}
+{"version":3,"file":"tailscale-local.d.ts","sourceRoot":"","sources":["../../src/util/tailscale-local.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAMnE,eAAO,MAAM,oBAAoB,QAAa,OAAO,CAAC,OAAO,CAE5D,CAAC;AAEF,eAAO,MAAM,qBAAqB,QAAa,OAAO,CAAC,OAAO,CAM7D,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,kBAAkB,QAAa,OAAO,CAAC,OAAO,CAG1D,CAAC;AAMF,eAAO,MAAM,aAAa,GACxB,UAAU,iBAAiB,EAC3B,UAAU,MAAM,EAChB,YAAW,MAAe,KACzB,OAAO,CAAC,eAAe,CAazB,CAAC;AAMF;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,GAC9B,UAAU,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC/B,IAiBF,CAAC;AAMF,eAAO,MAAM,oBAAoB,GAC/B,QAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,EACtC,KAAK,MAAM,KACV,OASF,CAAC;AAEF,eAAO,MAAM,wBAAwB,GACnC,QAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,EACtC,KAAK,MAAM,KACV,OAgBF,CAAC;AAMF;;;GAGG;AACH,eAAO,MAAM,aAAa,GACxB,QAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,MAAM,EACX,SAAQ,MAAM,EAAwB,KACrC,MAAM,CAAC,MAAM,EAAE,OAAO,CAIxB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,iBAAiB,GAC5B,QAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,MAAM,EACX,OAAO,MAAM,KACZ,MAAM,CAAC,MAAM,EAAE,OAAO,CAYxB,CAAC;AAaF;;;GAGG;AACH,eAAO,MAAM,mBAAmB,GAC9B,QAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,EACtC,KAAK,MAAM,EACX,KAAK,MAAM,KACV,OAUF,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,YAAY,GACvB,QAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,MAAM,EACX,KAAK,MAAM,KACV,MAAM,CAAC,MAAM,EAAE,OAAO,CAOxB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,cAAc,GACzB,QAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,MAAM,EACX,KAAK,MAAM,KACV,MAAM,CAAC,MAAM,EAAE,OAAO,CAaxB,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB,GAClC,QAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,MAAM,KACV,MAAM,CAAC,MAAM,EAAE,OAAO,CAsCxB,CAAC;AAMF;;;GAGG;AACH,eAAO,MAAM,eAAe,GAC1B,QAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,MAAM,KACV,MAAM,CAAC,MAAM,EAAE,OAAO,CAQxB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,mBAAmB,GAC9B,QAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,MAAM,KACV,MAAM,CAAC,MAAM,EAAE,OAAO,CA+BxB,CAAC"}

package/esm/util/tailscale-local.js

@@ -156,6 +156,43 @@ export const unpatchAclRule = (policy, src, dst) => {
         return policy;
     return { ...policy, acls: filtered };
 };
+/**
+ * Returns a new policy with all `acls` references to the given tag removed.
+ * A destination references a tag when it is exactly the tag or uses the
+ * Tailscale `tag:<name>:<port>` form. A source references a tag only when it
+ * exactly matches the tag. Rules left with no sources or destinations are
+ * dropped.
+ */
+export const unpatchAclTagReferences = (policy, tag) => {
+    const acls = policy.acls;
+    if (!Array.isArray(acls))
+        return policy;
+    let changed = false;
+    const tagDstPrefix = `${tag}:`;
+    const cleaned = [];
+    for (const rule of acls) {
+        const src = Array.isArray(rule.src) ? rule.src : undefined;
+        const dst = Array.isArray(rule.dst) ? rule.dst : undefined;
+        const nextSrc = src?.filter((entry) => entry !== tag);
+        const nextDst = dst?.filter((entry) => entry !== tag && !entry.startsWith(tagDstPrefix));
+        if ((src && nextSrc && nextSrc.length !== src.length) ||
+            (dst && nextDst && nextDst.length !== dst.length)) {
+            changed = true;
+        }
+        if (nextSrc?.length === 0 || nextDst?.length === 0) {
+            changed = true;
+            continue;
+        }
+        cleaned.push({
+            ...rule,
+            ...(nextSrc ? { src: nextSrc } : {}),
+            ...(nextDst ? { dst: nextDst } : {}),
+        });
+    }
+    if (!changed)
+        return policy;
+    return { ...policy, acls: cleaned };
+};
 // =============================================================================
 // ACL Policy Un-patching (Pure) — inverse of the patch helpers above
 // =============================================================================

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cardelli/ambit",
-  "version": "0.4.3",
+  "version": "0.4.5",
   "description": "Deploy apps to the cloud that only you and your AI agents can reach",
   "license": "MIT",
   "scripts": {},

package/esm/deps/jsr.io/@cliffy/table/1.0.0/_layout.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"_layout.d.ts","sourceRoot":"","sources":["../../../../../../src/deps/jsr.io/@cliffy/table/1.0.0/_layout.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,KAAK,QAAQ,EAAkB,MAAM,WAAW,CAAC;AAEhE,OAAO,EAAE,GAAG,EAAE,KAAK,OAAO,EAAE,MAAM,UAAU,CAAC;AAC7C,OAAO,KAAK,EAAiB,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAGtE,8BAA8B;AAC9B,UAAU,cAAc;IACtB,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACvB,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,eAAe,EAAE,OAAO,CAAC;IACzB,aAAa,EAAE,OAAO,CAAC;IACvB,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;CACxB;AAED,6BAA6B;AAC7B,qBAAa,WAAW;;IAOpB,OAAO,CAAC,KAAK;IACb,OAAO,CAAC,OAAO;IAPjB;;;;OAIG;gBAEO,KAAK,EAAE,KAAK,EACZ,OAAO,EAAE,aAAa;IAGhC,6BAA6B;IACtB,QAAQ,IAAI,MAAM;IAKzB;;;;OAIG;IACH,SAAS,CAAC,YAAY,IAAI,cAAc;IAuFxC;;;OAGG;IACH,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,GAyDtB,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAGjC,SAAS,CAAC,cAAc,CACtB,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAC3B,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM;IAQlB;;;OAGG;IACH,SAAS,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC;IAM5C;;;;;;;OAOG;IACH,SAAS,CAAC,UAAU,CAClB,IAAI,EAAE,QAAQ,GAAG,IAAI,GAAG,SAAS,EACjC,GAAG,EAAE,GAAG,EACR,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,IAAI;IAcP,OAAO,CAAC,WAAW;IAInB;;;OAGG;IACH,SAAS,CAAC,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,MAAM;IAWlD;;;;;;OAMG;IACH,SAAS,CAAC,SAAS,CACjB,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,EACtB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,cAAc,EACpB,WAAW,CAAC,EAAE,OAAO,GACpB,MAAM;IAwET;;;;;;OAMG;IACH,SAAS,CAAC,UAAU,CAClB,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,EACd,IAAI,EAAE,cAAc,EACpB,QAAQ,CAAC,EAAE,OAAO,GACjB,MAAM;IAqDT;;;;;OAKG;IACH,SAAS,CAAC,eAAe,CACvB,IAAI,EAAE,IAAI,EACV,SAAS,EAAE,MAAM,GAChB;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE;IA6CpC;;;;;;OAMG;IACH,SAAS,CAAC,eAAe,CACvB,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,SAAS,EAC9B,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,SAAS,EAC9B,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,EACtB,IAAI,EAAE,cAAc,GACnB,MAAM;IA2BT;;;;;;;OAOG;IACH,SAAS,CAAC,gBAAgB,CACxB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,SAAS,EAC9B,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,SAAS,EAC9B,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,EACtB,IAAI,EAAE,cAAc,GACnB,MAAM;CAoJV"}

package/esm/deps/jsr.io/@cliffy/table/1.0.0/column.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"column.d.ts","sourceRoot":"","sources":["../../../../../../src/deps/jsr.io/@cliffy/table/1.0.0/column.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAE3C,sBAAsB;AACtB,MAAM,WAAW,aAAa;IAC5B,kCAAkC;IAClC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,qCAAqC;IACrC,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,4BAA4B;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4BAA4B;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wBAAwB;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,MAAM;IACjB;;;OAGG;IACH,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,GAAG,MAAM;IAKpD,SAAS,CAAC,IAAI,EAAE,aAAa,CAAM;IAEnC,0BAA0B;IAC1B,OAAO,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI;IAKrC,4BAA4B;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAK7B,4BAA4B;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAK7B,yBAAyB;IACzB,MAAM,CAAC,MAAM,UAAO,GAAG,IAAI;IAK3B,0BAA0B;IAC1B,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAK9B,4BAA4B;IAC5B,KAAK,CAAC,SAAS,EAAE,SAAS,GAAG,IAAI;IAKjC,4BAA4B;IAC5B,WAAW,IAAI,MAAM,GAAG,SAAS;IAIjC,4BAA4B;IAC5B,WAAW,IAAI,MAAM,GAAG,SAAS;IAIjC,yBAAyB;IACzB,SAAS,IAAI,OAAO,GAAG,SAAS;IAIhC,0BAA0B;IAC1B,UAAU,IAAI,MAAM,GAAG,SAAS;IAIhC,4BAA4B;IAC5B,QAAQ,IAAI,SAAS,GAAG,SAAS;CAGlC"}

package/esm/deps/jsr.io/@cliffy/table/1.0.0/table.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"table.d.ts","sourceRoot":"","sources":["../../../../../../src/deps/jsr.io/@cliffy/table/1.0.0/table.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,MAAM,EAAU,MAAM,aAAa,CAAC;AAClD,OAAO,EAAQ,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AAEzD,OAAO,EAAE,KAAK,OAAO,EAAE,GAAG,EAAE,KAAK,OAAO,EAAE,MAAM,UAAU,CAAC;AAE3D,kCAAkC;AAClC,MAAM,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;AAE5C,sBAAsB;AACtB,MAAM,WAAW,aAAa;IAC5B,yBAAyB;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,0CAA0C;IAC1C,MAAM,EAAE,OAAO,CAAC;IAChB,4BAA4B;IAC5B,WAAW,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IACpC,4BAA4B;IAC5B,WAAW,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IACpC,wBAAwB;IACxB,OAAO,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAChC,4BAA4B;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,kCAAkC;IAClC,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,0BAA0B;IAC1B,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;CACxB;AAED,kBAAkB;AAClB,MAAM,MAAM,SAAS,CAAC,IAAI,SAAS,OAAO,GAAG,OAAO,IAChD,KAAK,CAAC,IAAI,CAAC,GACX,KAAK,CAAC,IAAI,CAAC,CAAC;AAEhB;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,KAAK,CAAC,IAAI,SAAS,OAAO,GAAG,OAAO,CAAE,SAAQ,KAAK,CAAC,IAAI,CAAC;IACpE,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAiB;IAChD,SAAS,CAAC,OAAO,EAAE,aAAa,CAQ9B;IACF,OAAO,CAAC,SAAS,CAAC,CAAM;IAExB;;;;;OAKG;WACoB,IAAI,CAAC,IAAI,SAAS,OAAO,EAC9C,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,GACpB,KAAK,CAAC,IAAI,CAAC;IASd;;;;;OAKG;WACW,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,KAAK;IAInD;;;;OAIG;WACW,KAAK,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,KAAK;IAKvD;;;;OAIG;WACW,MAAM,CAAC,IAAI,SAAS,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI;IAIvE;;;;;OAKG;IACI,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,IAAI;IAM3C;;;;OAIG;IACI,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,GAAG,aAAa,CAAC,GAAG,IAAI;IAO5D;;;;;OAKG;IACI,MAAM,CACX,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,GAAG,aAAa,GAC7B,IAAI;IAWP;;;;OAIG;IACI,MAAM,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI;IAKpC;;;;OAIG;IACI,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI;IAMpC,uDAAuD;IAChD,KAAK,IAAI,KAAK;IAWrB,6BAA6B;IACb,QAAQ,IAAI,MAAM;IAIlC,6BAA6B;IACtB,MAAM,IAAI,IAAI;IAKrB;;;;;OAKG;IACI,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,UAAO,GAAG,IAAI;IAOxE;;;;;OAKG;IACI,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,UAAO,GAAG,IAAI;IAOxE;;;;;OAKG;IACI,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,UAAO,GAAG,IAAI;IAOnD;;;;;OAKG;IACI,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,UAAO,GAAG,IAAI;IAOtE;;;;;OAKG;IACI,MAAM,CAAC,MAAM,UAAO,EAAE,QAAQ,UAAO,GAAG,IAAI;IAOnD;;;;;OAKG;IACI,KAAK,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,UAAO,GAAG,IAAI;IAOzD;;;;OAIG;IACI,KAAK,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI;IAKxC,wBAAwB;IACjB,SAAS,IAAI,GAAG,GAAG,SAAS;IAInC,sBAAsB;IACf,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC;IAI7B,4BAA4B;IACrB,cAAc,IAAI,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAI/C,4BAA4B;IACrB,cAAc,IAAI,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAI/C,6BAA6B;IACtB,SAAS,IAAI,MAAM;IAI1B,wBAAwB;IACjB,UAAU,IAAI,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAI3C,iCAAiC;IAC1B,SAAS,IAAI,OAAO;IAI3B,sCAAsC;IAC/B,eAAe,IAAI,OAAO;IAKjC,uCAAuC;IAChC,aAAa,IAAI,OAAO;IAU/B,gDAAgD;IACzC,SAAS,IAAI,OAAO;IAI3B,2BAA2B;IACpB,QAAQ,IAAI,SAAS;IAI5B,mBAAmB;IACZ,UAAU,IAAI,KAAK,CAAC,MAAM,CAAC;IAIlC,kCAAkC;IAC3B,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;CAGxC"}

package/esm/deps/jsr.io/@cliffy/table/1.0.0/unicode_width.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"unicode_width.d.ts","sourceRoot":"","sources":["../../../../../../src/deps/jsr.io/@cliffy/table/1.0.0/unicode_width.ts"],"names":[],"mappings":"AAsDA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEhD"}

package/esm/deps/jsr.io/@std/cli/1.0.28/_data.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"_data.d.ts","sourceRoot":"","sources":["../../../../../../src/deps/jsr.io/@std/cli/1.0.28/_data.js"],"names":[],"mappings":""}

package/esm/deps/jsr.io/@std/fmt/1.0.9/colors.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"colors.d.ts","sourceRoot":"","sources":["../../../../../../src/deps/jsr.io/@std/fmt/1.0.9/colors.ts"],"names":[],"mappings":"AAoEA,qEAAqE;AACrE,MAAM,WAAW,GAAG;IAClB,0BAA0B;IAC1B,CAAC,EAAE,MAAM,CAAC;IACV,4BAA4B;IAC5B,CAAC,EAAE,MAAM,CAAC;IACV,2BAA2B;IAC3B,CAAC,EAAE,MAAM,CAAC;CACX;AAID;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,QAM7C;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,IAAI,OAAO,CAEzC;AA0BD;;;;;;;;;;;;GAYG;AACH,wBAAgB,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEzC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAExC;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEvC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE1C;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE7C;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE3C;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE1C;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEzC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEvC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEzC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE1C;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAExC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE3C;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAExC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEzC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAExC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE7C;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE9C;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE9C;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE3C;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEzC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE3C;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE5C;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE1C;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE7C;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE1C;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE3C;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAElD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEjD;AAcD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG,MAAM,CAuB9D;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG,MAAM,CAuBhE;AAWD;;;;;;;;;;;;GAYG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEpD"}

package/esm/deps/jsr.io/@std/internal/1.0.12/_os.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"_os.d.ts","sourceRoot":"","sources":["../../../../../../src/deps/jsr.io/@std/internal/1.0.12/_os.ts"],"names":[],"mappings":"AAIA,wBAAgB,YAAY,IAAI,OAAO,CAUtC"}

package/esm/deps/jsr.io/@zod/zod/4.3.6/src/v4/classic/external.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"external.d.ts","sourceRoot":"","sources":["../../../../../../../../../src/deps/jsr.io/@zod/zod/4.3.6/src/v4/classic/external.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,kBAAkB,CAAC;AACzC,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAO5B,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EACL,cAAc,EACd,KAAK,UAAU,EACf,QAAQ,EACR,MAAM,EACN,OAAO,EACP,MAAM,EACN,MAAM,EACN,KAAK,EACL,OAAO,EACP,YAAY,EACZ,aAAa,EACb,WAAW,EACX,YAAY,EACZ,aAAa,EACb,IAAI,EACJ,KAAK,GACN,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,OAAO,KAAK,OAAO,MAAM,qBAAqB,CAAC;AAK/C,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAClF,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAGhC,YAAY,EACV,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,GACf,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC"}