@empire-builder-kit/nx 1.0.0-rc.32 → 1.0.0-rc.34

package/src/generators/preset/workspace-files-thin-deploy.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspace-files-thin-deploy.js","sourceRoot":"","sources":["../../../../../../packages/nx/src/generators/preset/workspace-files-thin-deploy.ts"],"names":[],"mappings":";;;AA2EA,oEA6BC;AAYD,sEAsBC;AAGD,0FAuBC;AAGD,oFAmBC;AAGD,0FAiFC;AAGD,8EAmCC;AAGD,gEA4EC;AAGD,gFAoEC;AA6iCD,4EAUC;AA//CY,QAAA,yBAAyB,GACpC,8BAAuC,CAAC;AA4B1C,MAAM,YAAY,GAAG,iBAAiB,CAAC;AACvC,MAAM,cAAc,GAAG,2BAA2B,CAAC;AACnD,MAAM,UAAU,GACd,iEAAiE,CAAC;AAEpE,SAAS,aAAa,CAAC,OAAkC;IACvD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,4CAA4C,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QACjE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,qCAAqC,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,OAA0B;IACrD,OAAO,OAAO,KAAK,SAAS;QAC1B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC;;;;;;;;;;;;;;;;;CAiBL,CAAC;AACF,CAAC;AAED,SAAgB,4BAA4B,CAC1C,OAA0B;IAE1B,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACrC,MAAM,wBAAwB,GAC5B,yEAAyE,CAAC;IAC5E,OAAO;;;;;;;;QAQD,wBAAwB;;;;;;;;;;;;;;2CAcW,CAAC;AAC5C,CAAC;AAED,SAAS,cAAc,CAAC,MAAc,EAAE,MAAc;IACpD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClC,OAAO,MAAM;SACV,IAAI,EAAE;SACN,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC;SACjC,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,+DAA+D;AAC/D,SAAgB,6BAA6B,CAC3C,SAAiB,EACjB,eAAuB;IAEvB,OAAO;yBACgB,eAAe;UAC9B,SAAS;;;;;UAKT,SAAS;;6CAE0B,eAAe;;UAElD,SAAS;;kDAE+B,eAAe;;;aAGpD,SAAS;KACjB,CAAC;AACN,CAAC;AAED,uEAAuE;AACvE,SAAgB,uCAAuC;IACrD,OAAO;;;;;;;;;;;;;;;;;;;;;8CAqBqC,CAAC;AAC/C,CAAC;AAED,+DAA+D;AAC/D,SAAgB,oCAAoC;IAClD,OAAO;;;;;;;;;;;;;;;;;KAiBJ,CAAC;AACN,CAAC;AAED,kFAAkF;AAClF,SAAgB,uCAAuC;IACrD,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4HA+EmH,CAAC;AAC7H,CAAC;AAED,kFAAkF;AAClF,SAAgB,iCAAiC;IAC/C,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wGAiC+F,CAAC;AACzG,CAAC;AAED,kFAAkF;AAClF,SAAgB,0BAA0B;IACxC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uHA0E8G,CAAC;AACxH,CAAC;AAED,kFAAkF;AAClF,SAAgB,kCAAkC;IAChD,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkEN,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,OAAkC;IAClE,MAAM,EAAE,UAAU,EAAE,iBAAiB,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC;IACtE,OAAO;;;;EAIP,mBAAmB,CAAC,iBAAiB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;8BAwBV,YAAY,CAAC,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBAkE9B,UAAU,CAAC,QAAQ;;;;;gBAKnB,UAAU,CAAC,SAAS;gBACpB,UAAU,CAAC,SAAS;;0BAEV,YAAY,CAAC,IAAI;;;;;;;;yBAQlB,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wBA4ClB,IAAI;;;kCAGM,iBAAiB;;;;;;;;;;;;EAYjD,cAAc,CAAC,sBAAsB,uCAAuC,EAAE,EAAE,EAAE,EAAE,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBA6BvE,UAAU,CAAC,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBA6FnB,UAAU,CAAC,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;EAwBzC,cAAc,CAAC,uCAAuC,EAAE,EAAE,EAAE,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBA2E/C,UAAU,CAAC,QAAQ;;;;;;;;gBAQnB,UAAU,CAAC,SAAS;;;;gBAIpB,UAAU,CAAC,SAAS;;;;;0BAKV,YAAY,CAAC,IAAI;;;;;;;;;;2BAUhB,IAAI;;gBAEf,UAAU,CAAC,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;gBA2B3B,UAAU,CAAC,uBAAuB;;;;;;;;;;;;;;;EAehD,cAAc,CAAC,6BAA6B,CAAC,iBAAiB,EAAE,wBAAwB,CAAC,EAAE,EAAE,CAAC;;;;;;;gBAOhF,UAAU,CAAC,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBA0CzB,UAAU,CAAC,QAAQ;;;;;;;;gBAQnB,UAAU,CAAC,SAAS;;;;gBAIpB,UAAU,CAAC,SAAS;;;;;0BAKV,YAAY,CAAC,IAAI;;;;;;;;;;2BAUhB,IAAI;;gBAEf,UAAU,CAAC,gBAAgB;;;;;;;;;;gBAU3B,UAAU,CAAC,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;gBA0B3B,UAAU,CAAC,uBAAuB;;;;;;;;;;;;;;;EAehD,cAAc,CAAC,6BAA6B,CAAC,oBAAoB,EAAE,wBAAwB,CAAC,EAAE,EAAE,CAAC;;;;;;;;;;;;;gBAanF,UAAU,CAAC,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBA4CzB,UAAU,CAAC,QAAQ;;;;;;;;gBAQnB,UAAU,CAAC,SAAS;;;;gBAIpB,UAAU,CAAC,SAAS;;;;;0BAKV,YAAY,CAAC,IAAI;;;;;;;;;;2BAUhB,IAAI;;gBAEf,UAAU,CAAC,gBAAgB;;;;;;;;;;gBAU3B,UAAU,CAAC,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;gBA2B3B,UAAU,CAAC,uBAAuB;;;;;;;;;;;;;;;EAehD,cAAc,CAAC,oCAAoC,EAAE,EAAE,EAAE,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;gBAyB5C,UAAU,CAAC,uBAAuB;;;;;;;;;;;;;;EAchD,cAAc,CAAC,6BAA6B,CAAC,qBAAqB,EAAE,0BAA0B,CAAC,EAAE,EAAE,CAAC;;;;;;;;;;gBAUtF,UAAU,CAAC,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBAmEzB,UAAU,CAAC,QAAQ;;;;;;;;gBAQnB,UAAU,CAAC,SAAS;;;;gBAIpB,UAAU,CAAC,SAAS;;;;;0BAKV,YAAY,CAAC,IAAI;;;;;;;;;;2BAUhB,IAAI;;;gBAGf,UAAU,CAAC,gBAAgB;;;;;;;;;;;;;;;;;gBAiB3B,UAAU,CAAC,gBAAgB;;;;;;;;;;;;;gBAa3B,UAAU,CAAC,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgCzC,cAAc,CAAC,iCAAiC,EAAE,EAAE,EAAE,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAiC9B,IAAI;;;;;;2BAMJ,IAAI;;;;;;;;;;;;;;;;;;;gBAmBf,UAAU,CAAC,uBAAuB;;;;;;;;;;;EAWhD,cAAc,CAAC,6BAA6B,CAAC,kBAAkB,EAAE,wBAAwB,CAAC,EAAE,EAAE,CAAC;;;;;;;;;;0BAUvE,IAAI;;;;;;;;;;;;;;;;;;;;;;;;EAwB5B,cAAc,CAAC,0BAA0B,EAAE,EAAE,EAAE,CAAC;;;;;;;;;EAShD,cAAc,CAAC,kCAAkC,EAAE,EAAE,EAAE,CAAC;;;;gBAI1C,UAAU,CAAC,cAAc;;;;;;;;;;CAUxC,CAAC;AACF,CAAC;AAED,SAAgB,gCAAgC,CAC9C,OAAkC;IAElC,aAAa,CAAC,OAAO,CAAC,CAAC;IACvB,OAAO;QACL,KAAK,EAAE;YACL,CAAC,iCAAyB,CAAC,EAAE,wBAAwB,CAAC,OAAO,CAAC;SAC/D;QACD,YAAY,EAAE,CAAC,iCAAyB,CAAC;KAC1C,CAAC;AACJ,CAAC"}
+{"version":3,"file":"workspace-files-thin-deploy.js","sourceRoot":"","sources":["../../../../../../packages/nx/src/generators/preset/workspace-files-thin-deploy.ts"],"names":[],"mappings":";;;AAwGA,oEA2CC;AAYD,sEAcC;AAGD,sEAsBC;AAGD,0FAuBC;AAGD,oFAmBC;AAGD,0FAiFC;AAGD,8EAmCC;AAGD,gEAmFC;AAGD,gFAoEC;AAk6DD,4EAUC;AAx7ED,yDAA0D;AAE7C,QAAA,yBAAyB,GACpC,8BAAuC,CAAC;AAoC1C,iFAAiF;AACpE,QAAA,4BAA4B,GAAG,uBAAgC,CAAC;AAO7E,MAAM,YAAY,GAAG,iBAAiB,CAAC;AACvC,MAAM,cAAc,GAAG,2BAA2B,CAAC;AACnD,MAAM,UAAU,GACd,iEAAiE,CAAC;AAEpE,SAAS,aAAa,CAAC,OAAkC;IACvD,IACE,OAAO,CAAC,sBAAsB,KAAK,iBAAiB;QACpD,CAAC,OAAO,CAAC,iBAAiB,KAAK,SAAS;YACtC,OAAO,CAAC,YAAY,KAAK,OAAO,CAAC,EACnC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,gFAAgF,CACjF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,4CAA4C,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QACjE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,qCAAqC,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAC1B,OAA0B,EAC1B,eAA2C,gBAAgB;IAE3D,OAAO,OAAO,KAAK,SAAS,IAAI,YAAY,KAAK,OAAO;QACtD,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC;;;;;;;;;;;;;;;;;CAiBL,CAAC;AACF,CAAC;AAED,SAAgB,4BAA4B,CAC1C,OAA0B,EAC1B,eAA2C,gBAAgB,EAC3D,yBAA2D,cAAc;IAEzE,MAAM,KAAK,GAAG,YAAY,KAAK,OAAO,CAAC;IACvC,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IAC/C,+DAA+D;IAC/D,sEAAsE;IACtE,2EAA2E;IAC3E,MAAM,wBAAwB,GAAG,KAAK;QACpC,CAAC,CAAC,iCAAiC;QACnC,CAAC,CAAC,sBAAsB,KAAK,iBAAiB;YAC5C,CAAC,CAAC,oCAAoC;YACtC,CAAC,CAAC,yEAAyE,CAAC;IAChF,OAAO;;;;;;;;QAQD,wBAAwB;;;;;;;;;;;;;;;;;;;qBAmBX,CAAC;AACtB,CAAC;AAED,SAAS,cAAc,CAAC,MAAc,EAAE,MAAc;IACpD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClC,OAAO,MAAM;SACV,IAAI,EAAE;SACN,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC;SACjC,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,mFAAmF;AACnF,SAAgB,6BAA6B;IAC3C,OAAO;;;;;;;;;;;;KAYJ,CAAC;AACN,CAAC;AAED,+DAA+D;AAC/D,SAAgB,6BAA6B,CAC3C,SAAiB,EACjB,eAAuB;IAEvB,OAAO;yBACgB,eAAe;UAC9B,SAAS;;;;;UAKT,SAAS;;6CAE0B,eAAe;;UAElD,SAAS;;kDAE+B,eAAe;;;aAGpD,SAAS;KACjB,CAAC;AACN,CAAC;AAED,uEAAuE;AACvE,SAAgB,uCAAuC;IACrD,OAAO;;;;;;;;;;;;;;;;;;;;;8CAqBqC,CAAC;AAC/C,CAAC;AAED,+DAA+D;AAC/D,SAAgB,oCAAoC;IAClD,OAAO;;;;;;;;;;;;;;;;;KAiBJ,CAAC;AACN,CAAC;AAED,kFAAkF;AAClF,SAAgB,uCAAuC;IACrD,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4HA+EmH,CAAC;AAC7H,CAAC;AAED,kFAAkF;AAClF,SAAgB,iCAAiC;IAC/C,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wGAiC+F,CAAC;AACzG,CAAC;AAED,kFAAkF;AAClF,SAAgB,0BAA0B;IACxC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uHAiF8G,CAAC;AACxH,CAAC;AAED,kFAAkF;AAClF,SAAgB,kCAAkC;IAChD,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkEN,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,OAAkC;IAClE,MAAM,EAAE,UAAU,EAAE,iBAAiB,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC;IACtE,MAAM,cAAc,GAAG,OAAO,CAAC,sBAAsB,KAAK,iBAAiB,CAAC;IAC5E,OAAO;;;;EAIP,mBAAmB,CAAC,iBAAiB,EAAE,OAAO,CAAC,YAAY,CAAC;;;;;;;mDAOX,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY;;;;sBAK5F,iBAAiB,KAAK,SAAS;QAC7B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC;;;;qBAKN;;;;;;;;;;;;;;;;;;;8BAmBsB,YAAY,CAAC,GAAG;;;;;;;;;;;;;;;;;;;;;qEAsBtC,cAAc;QACZ,CAAC,CAAC;;oFAEwE;QAC1E,CAAC,CAAC,EACN;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBA+CU,UAAU,CAAC,QAAQ;;;;;gBAKnB,UAAU,CAAC,SAAS;gBACpB,UAAU,CAAC,SAAS;;0BAEV,YAAY,CAAC,IAAI;;;;;;;;;yBASlB,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wBA2DlB,IAAI;;;kCAGM,iBAAiB;;;;;;;;;;;;EAYjD,cAAc,CAAC,sBAAsB,uCAAuC,EAAE,EAAE,EAAE,EAAE,CAAC,GACnF,cAAc;QACZ,CAAC,CAAC;;;;;;;;;;;;;EAaN,cAAc,CAAC,sBAAsB,uCAAuC,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE;QACnF,CAAC,CAAC,EACN;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBAkCc,UAAU,CAAC,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBAqInB,UAAU,CAAC,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;EA0BzC,cAAc,CAAC,uCAAuC,EAAE,EAAE,EAAE,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBA+E/C,UAAU,CAAC,QAAQ;;;;;;;;gBAQnB,UAAU,CAAC,SAAS;;;;gBAIpB,UAAU,CAAC,SAAS;;;;;0BAKV,YAAY,CAAC,IAAI;;;;;;;;;;2BAUhB,IAAI;;gBAEf,UAAU,CAAC,gBAAgB;;;;;;;;;;;gBAW3B,UAAU,CAAC,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;gBA2B3B,UAAU,CAAC,uBAAuB;;;;;;;;;;;;;gBAalC,UAAU,CAAC,KAAK;;;;;;;;;;;;;;;;;;;;EAoB9B,cAAc,CAAC,6BAA6B,CAAC,iBAAiB,EAAE,wBAAwB,CAAC,EAAE,EAAE,CAAC;;;;;;;;;;gBAUhF,UAAU,CAAC,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBA+CzB,UAAU,CAAC,QAAQ;;;;;;;;gBAQnB,UAAU,CAAC,SAAS;;;;gBAIpB,UAAU,CAAC,SAAS;;;;;0BAKV,YAAY,CAAC,IAAI;;;;;;;;;;2BAUhB,IAAI;;gBAEf,UAAU,CAAC,gBAAgB;;;;;;;;;;gBAU3B,UAAU,CAAC,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;gBA0B3B,UAAU,CAAC,uBAAuB;;;;;;;;;;;;;;;EAehD,cAAc,CAAC,6BAA6B,CAAC,oBAAoB,EAAE,wBAAwB,CAAC,EAAE,EAAE,CAAC;;;;;;;;;;;;;gBAanF,UAAU,CAAC,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBA4CzB,UAAU,CAAC,QAAQ;;;;;;;;gBAQnB,UAAU,CAAC,SAAS;;;;gBAIpB,UAAU,CAAC,SAAS;;;;;0BAKV,YAAY,CAAC,IAAI;;;;;;;;;;2BAUhB,IAAI;;gBAEf,UAAU,CAAC,gBAAgB;;;;;;;;;;gBAU3B,UAAU,CAAC,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;gBA2B3B,UAAU,CAAC,uBAAuB;;;;;;;;;;;;;;;EAehD,cAAc,CAAC,oCAAoC,EAAE,EAAE,EAAE,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;gBAyB5C,UAAU,CAAC,uBAAuB;;;;;;;;;;;;;;EAchD,cAAc,CAAC,6BAA6B,CAAC,qBAAqB,EAAE,0BAA0B,CAAC,EAAE,EAAE,CAAC;;;;;;;;;;;;gBAYtF,UAAU,CAAC,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBAuEzB,UAAU,CAAC,QAAQ;;;;;;;;gBAQnB,UAAU,CAAC,SAAS;;;;gBAIpB,UAAU,CAAC,SAAS;;;;;0BAKV,YAAY,CAAC,IAAI;;;;;;;;;;2BAUhB,IAAI;;;gBAGf,UAAU,CAAC,gBAAgB;;;;;;;;;;;gBAW3B,UAAU,CAAC,gBAAgB;;;;;;;;;;;;;;;;;gBAiB3B,UAAU,CAAC,gBAAgB;;;;;;;;;;;;;gBAa3B,UAAU,CAAC,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgCzC,cAAc,CAAC,iCAAiC,EAAE,EAAE,EAAE,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAiC9B,IAAI;;;;;;2BAMJ,IAAI;;;;;;;;2EAQ4C,uCAAoB;;;;;;;;;EAS7F,cAAc,CAAC,6BAA6B,EAAE,EAAE,EAAE,CAAC;;;;;;;;;;;;;;;;;;;gBAmBrC,UAAU,CAAC,uBAAuB;;;;;;;;;;;EAWhD,cAAc,CAAC,6BAA6B,CAAC,kBAAkB,EAAE,wBAAwB,CAAC,EAAE,EAAE,CAAC;;;;;;;;;;;;;;;;;;;;;;0BAsBvE,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;EAyB5B,cAAc,CAAC,6BAA6B,CAAC,sBAAsB,EAAE,wBAAwB,CAAC,EAAE,EAAE,CAAC;;;;;;;;;;;0BAW3E,IAAI;;;;;;;;;;;;;EAa5B,cAAc,CAAC,0BAA0B,EAAE,EAAE,EAAE,CAAC;;;;;;;;;EAShD,cAAc,CAAC,kCAAkC,EAAE,EAAE,EAAE,CAAC;;;;gBAI1C,UAAU,CAAC,cAAc;;;;;;;;;;EAUvC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAChI,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,iBAAiB,CAAC,OAAkC;IAC3D,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC;IACnD,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBA8BO,UAAU,CAAC,QAAQ;;;;;;;;gBAQnB,UAAU,CAAC,SAAS;;;;gBAIpB,UAAU,CAAC,SAAS;;;;;0BAKV,YAAY,CAAC,IAAI;;;;;;;;;;2BAUhB,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBA8Bf,UAAU,CAAC,uBAAuB;;;;;;;;;;;EAWhD,cAAc,CAAC,6BAA6B,CAAC,sBAAsB,EAAE,wBAAwB,CAAC,EAAE,EAAE,CAAC;;;;;;;;;;;;;;;;;;;;;;;EAuBnG,cAAc,CAAC,6BAA6B,CAAC,sBAAsB,EAAE,wBAAwB,CAAC,EAAE,EAAE,CAAC;;;;;;;;;;0BAU3E,IAAI;;;;gBAId,UAAU,CAAC,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgCxC,CAAC;AACF,CAAC;AAED;;;;;;GAMG;AACH,SAAS,wBAAwB,CAAC,OAAkC;IAClE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC;IACnD,MAAM,kBAAkB,GAAG,CACzB,aAAqB,EACrB,EAAE,CAAC;gBACS,UAAU,CAAC,QAAQ;;;;;;;;gBAQnB,UAAU,CAAC,SAAS;;;;gBAIpB,UAAU,CAAC,SAAS;;;;;0BAKV,YAAY,CAAC,IAAI;;;;;;gBAM3B,aAAa;;;;2BAIF,IAAI,mBAAmB,CAAC;IACjD,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;YAgBZ,CAAC;IACX,MAAM,kBAAkB,GAAG;;;iDAGoB,CAAC;IAChD,OAAO;;;;;;;;;;EAUP,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA8BlB,kBAAkB,CAAC,+DAA+D,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;gBAyBrE,UAAU,CAAC,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA4BzC,cAAc,CAAC,uCAAuC,EAAE,EAAE,EAAE,CAAC;;;;;;;;;;;;;;;;;;;gBAmB/C,UAAU,CAAC,gBAAgB;;;;;;;;;;gBAU3B,UAAU,CAAC,gBAAgB;;;;;;;;EAQzC,aAAa;;gBAEC,UAAU,CAAC,uBAAuB;;;;;;;;;;;;;;;EAehD,cAAc,CAAC,oCAAoC,EAAE,EAAE,EAAE,CAAC;;;;;;;EAO1D,aAAa;;gBAEC,UAAU,CAAC,uBAAuB;;;;;;;;;;;;;;EAchD,cAAc,CAAC,6BAA6B,CAAC,qBAAqB,EAAE,0BAA0B,CAAC,EAAE,EAAE,CAAC;;;;;;;;;;;gBAWtF,UAAU,CAAC,cAAc;;;;;;;;;;;;;;;;EAgBvC,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiClB,kBAAkB,CAAC,yDAAyD,CAAC;;gBAE/D,UAAU,CAAC,gBAAgB;;;;;;;;;;gBAU3B,UAAU,CAAC,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;EA2BzC,cAAc,CAAC,iCAAiC,EAAE,EAAE,EAAE,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;2BA0B9B,IAAI;;;;;2BAKJ,IAAI;;;;;;;2EAO4C,uCAAoB;;;;;;;;EAQ7F,cAAc,CAAC,6BAA6B,EAAE,EAAE,EAAE,CAAC;EACnD,aAAa;;gBAEC,UAAU,CAAC,uBAAuB;;;;;;;;;;;EAWhD,cAAc,CAAC,6BAA6B,CAAC,kBAAkB,EAAE,wBAAwB,CAAC,EAAE,EAAE,CAAC;;;;;;;;;;;wBAWzE,IAAI;;;;;;;;;;;;;EAa1B,cAAc,CAAC,6BAA6B,CAAC,sBAAsB,EAAE,wBAAwB,CAAC,EAAE,EAAE,CAAC;;;;;;;;;;;0BAW3E,IAAI;;;;;;;;;EAS5B,cAAc,CAAC,kCAAkC,EAAE,EAAE,EAAE,CAAC;;;;gBAI1C,UAAU,CAAC,cAAc;;;;;;;;;;;;;;;;;;EAkBvC,kBAAkB;;;;;;;;gDAQ4B,oCAA4B;;;;;;wDAMpB,oCAA4B;;;;;;;;;;;;;;;;;CAiBnF,CAAC;AACF,CAAC;AAED,SAAgB,gCAAgC,CAC9C,OAAkC;IAElC,aAAa,CAAC,OAAO,CAAC,CAAC;IACvB,OAAO;QACL,KAAK,EAAE;YACL,CAAC,iCAAyB,CAAC,EAAE,wBAAwB,CAAC,OAAO,CAAC;SAC/D;QACD,YAAY,EAAE,CAAC,iCAAyB,CAAC;KAC1C,CAAC;AACJ,CAAC"}

package/src/generators/preset/workspace-files-thin-docs.d.ts

@@ -1,5 +1,7 @@
 import { type DeploymentProfile } from '../../repository-policy/index.js';
 export declare function renderThinLifecycleDocumentation(options: {
+    deliveryLane?: 'protected-pair' | 'trunk';
+    productionApprovalMode?: 'promotion-pr' | 'environment-reviewer' | 'trunk-promotion';
     deploymentProfile: DeploymentProfile;
     name: string;
 }): Readonly<Record<string, string>>;

package/src/generators/preset/workspace-files-thin-docs.js

@@ -22,8 +22,16 @@ development through the root \`deploy-local\` target. Do not invoke SST directly
 `,
         'docs/git-workflow.md': `# Protected Git workflow
 
-Ordinary work targets \`develop\`; production promotion is an exact reviewed
-\`develop\` to \`main\` merge followed by the managed sync-back. Keep the
+${options.deliveryLane === 'trunk'
+            ? `Trunk delivery lane: \`main\` is the only protected branch. Ordinary work
+opens a pull request to \`main\` from an up-to-date branch, and every merged
+\`main\` push is a production delivery through the generated Verify and deploy
+workflows. There is no \`develop\` branch, promotion pull request, or sync-back.
+Switch to the protected pair with
+\`pnpm nx g @empire-builder-kit/nx:repository-policy --deliveryLane=protected-pair --apply\`
+followed by the managed upgrade when the team needs a staged promotion.`
+            : `Ordinary work targets \`develop\`; production promotion is an exact reviewed
+\`develop\` to \`main\` merge followed by the managed sync-back.`} Keep the
 generated branch rules, CODEOWNER review, resolved-conversation requirement,
 merge-only history, and read-only default workflow permissions.
 
@@ -47,9 +55,26 @@ local staging, but its protected production promotion requires the candidate
 receipt from a successful managed GitHub staging deployment. \`fully-isolated\`
 uses GitHub for staging and production. Isolated production restores the exact
 candidate recorded by the successful staging deployment.
-When \`starter\` uses its optional manual workflow, \`develop\` routes to
-development and \`main\` routes to production; starter has no automatic caller.
-Every protected job checks out an immutable commit, validates managed source,
+${options.deliveryLane === 'trunk'
+            ? `In the trunk lane every merged \`main\` push calls the deploy workflow for
+production; development stays a local stage.`
+            : `When \`starter\` uses its optional manual workflow, \`develop\` routes to
+development and \`main\` routes to production; starter has no automatic caller.`}
+${options.productionApprovalMode === 'trunk-promotion'
+            ? `Trunk promotion (\`productionApproval.mode: trunk-promotion\`): a successful
+staging lifecycle on \`develop\` continues in the same run. \`promote-production\`
+binds that run's staging deployment receipt and release candidate and promotes
+the reviewed OCI indexes into production, \`execute-production\` deploys
+production from the same candidate under the production environment, and
+\`record-main\` fast-forwards \`main\` to the deployed commit with the production
+environment secret \`EBK_RECORD_MAIN_TOKEN\`, refusing any non-fast-forward
+update. \`main\` keeps deletion, non-fast-forward, and status-check rules but no
+pull-request rule; the develop ruleset keeps CODEOWNER review. A \`main\` push
+verifies only and there is no sync-back. Switch back with
+\`pnpm nx g @empire-builder-kit/nx:repository-policy --productionApprovalMode=promotion-pr --apply\`
+followed by the managed upgrade and a GitHub bootstrap apply.
+`
+            : ''}Every protected job checks out an immutable commit, validates managed source,
 and assumes the derived stage role through the matching GitHub environment.
 The reusable Verify caller delegates job-scoped \`id-token: write\`; each
 credential-bearing job proves both the configured canonical ARN and terminal
@@ -72,6 +97,24 @@ secret; do not add repository-scope fallbacks.
 `,
         'docs/repository-operating-policy.md': `# Repository Operating Policy
 
+## Production capacity
+
+The shared Foundation has three capacity profiles, independent of deployment topology:
+- \`cost-optimized\`: 0–2 ACUs, five-minute idle auto-pause; new starter default.
+- \`balanced\`: 0.5–4 ACUs, always warm.
+- \`standard\`: 2–16 ACUs, always warm; isolated repository default.
+
+All retain 30-day backups, deletion protection, encryption, and managed NAT.
+Pause can delay first requests (typically 15 seconds, sometimes 30 seconds or
+longer); open connections or polling can prevent it. Storage/NAT still cost money.
+Validate cold-resume retries, migration timeouts, and the shared capacity ceiling.
+
+Existing warm \`cost-optimized\` users must use the new generator to report
+\`pnpm nx g @empire-builder-kit/nx:repository-policy --profile=balanced\`, then
+repeat with \`--apply\` before managed upgrade or deployment. This preserves
+0.5–4 ACUs. After upgrade, deliberately select \`--profile=cost-optimized --apply\`
+only to accept scale-to-zero. These commands change policy, not AWS resources.
+
 The committed \`ebk.repository-policy.json\` selects the
 \`${options.deploymentProfile}\` deployment profile and its active stages:
 ${stageList}. Inactive stages are rejected by planning, deployment, refresh,
@@ -192,7 +235,24 @@ immediately.
 
 ## Router WAF rehearsal
 
-Count-mode tuning is optional. Restore ${rehearsalStage} to blocking mode,
+${options.deploymentProfile === 'starter'
+            ? ''
+            : `Isolated profiles rehearse through the managed \`Deploy\` dispatch: with both
+\`security/router-waf-live-evidence.json\` and
+\`security/router-waf-blocking-rehearsal.json\` at their pending seeds on
+\`develop\`, dispatch \`Deploy\` with \`action: rehearse\` and \`probe_url\` set to
+the staging Router health URL. The \`rehearse\` job assumes the staging
+deployment role, performs the non-allowlisted probe before the runner is
+admitted, performs the managed-rule probe and the rate rehearsal inside the
+same temporary allowlist admission that private smoke uses, proves the
+admission removed, retains the sealed files as a run artifact, and opens a
+pull request to \`develop\` carrying them. Merging that pull request satisfies
+the production Router WAF gate for the exact policy digest. Any policy change,
+including an allowlist edit, changes the digest and requires a new rehearsal
+after resetting both seeds. The manual path below remains for operators who
+rehearse from an allowlisted address.
+
+`}Count-mode tuning is optional. Restore ${rehearsalStage} to blocking mode,
 record the bounded allowlist and managed-rule probe results in
 \`security/router-waf-live-evidence.json\`, then run:
 

package/src/generators/preset/workspace-files-thin-docs.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspace-files-thin-docs.js","sourceRoot":"","sources":["../../../../../../packages/nx/src/generators/preset/workspace-files-thin-docs.ts"],"names":[],"mappings":";;AAMA,4EA6OC;AAnPD,+DAI0C;AAE1C,SAAgB,gCAAgC,CAAC,OAGhD;IACC,MAAM,MAAM,GAAG,IAAA,iCAAsB,EAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,cAAc,GAAG,IAAA,mCAAwB,EAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC3E,OAAO;QACL,WAAW,EAAE,KAAK,OAAO,CAAC,IAAI;;;;;;;kBAOhB,OAAO,CAAC,iBAAiB,yBAAyB,SAAS;;;;;CAK5E;QACG,sBAAsB,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiD3B;QACG,qCAAqC,EAAE;;;IAGvC,OAAO,CAAC,iBAAiB;EAC3B,SAAS;;;;;aAKE,OAAO,CAAC,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6DxB;QACG,+BAA+B,EAAE;;;;yBAIZ,OAAO,CAAC,iBAAiB;EAChD,SAAS;;;;;;;;;;eAUI,cAAc;;CAE5B;QACG,sCAAsC,EAAE;;;;;;;gBAO5B,OAAO,CAAC,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;yCA0Ba,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0CtD;KACE,CAAC;AACJ,CAAC"}
+{"version":3,"file":"workspace-files-thin-docs.js","sourceRoot":"","sources":["../../../../../../packages/nx/src/generators/preset/workspace-files-thin-docs.ts"],"names":[],"mappings":";;AAMA,4EAoTC;AA1TD,+DAI0C;AAE1C,SAAgB,gCAAgC,CAAC,OAMhD;IACC,MAAM,MAAM,GAAG,IAAA,iCAAsB,EAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,cAAc,GAAG,IAAA,mCAAwB,EAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC3E,OAAO;QACL,WAAW,EAAE,KAAK,OAAO,CAAC,IAAI;;;;;;;kBAOhB,OAAO,CAAC,iBAAiB,yBAAyB,SAAS;;;;;CAK5E;QACG,sBAAsB,EAAE;;EAG1B,OAAO,CAAC,YAAY,KAAK,OAAO;YAC9B,CAAC,CAAC;;;;;;wEAMkE;YACpE,CAAC,CAAC;iEAEN;;;;;;;;;;;;;;;;;;;;;;;;EAyBE,OAAO,CAAC,YAAY,KAAK,OAAO;YAC9B,CAAC,CAAC;6CACuC;YACzC,CAAC,CAAC;gFAEN;EAEE,OAAO,CAAC,sBAAsB,KAAK,iBAAiB;YAClD,CAAC,CAAC;;;;;;;;;;;;CAYL;YACG,CAAC,CAAC,EACN;;;;;;;;;;;;;;;;;;;;CAoBC;QACG,qCAAqC,EAAE;;;;;;;;;;;;;;;;;;;;;IAqBvC,OAAO,CAAC,iBAAiB;EAC3B,SAAS;;;;;aAKE,OAAO,CAAC,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6DxB;QACG,+BAA+B,EAAE;;;;yBAIZ,OAAO,CAAC,iBAAiB;EAChD,SAAS;;;;;;;;;;eAUI,cAAc;;CAE5B;QACG,sCAAsC,EAAE;;;;;;;gBAO5B,OAAO,CAAC,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;EA2B1B,OAAO,CAAC,iBAAiB,KAAK,SAAS;YACrC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;;;;;;;;;;;;;;;CAgBN,0CAA0C,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0CvD;KACE,CAAC;AACJ,CAAC"}

package/src/generators/preset/workspace-files.d.ts

@@ -1,11 +1,18 @@
 import { type FoundationOwnershipRecord, type WorkspaceOwnershipRecord } from '../../ownership/index.js';
-import { type ConfiguredDeploymentAccounts, type DeploymentProfile } from '../../repository-policy/index.js';
+import { type DeliveryLane, type ProductionApprovalMode, type ConfiguredDeploymentAccounts, type DeploymentProfile } from '../../repository-policy/index.js';
 export interface WorkspaceFileOptions {
+    /** trunk (starter only) protects main alone and delivers production from
+     * every merged main push; protected-pair keeps develop and main. */
+    deliveryLane?: DeliveryLane;
+    dependencyOverrides?: unknown;
     deploymentAccounts?: ConfiguredDeploymentAccounts;
     deploymentProfile?: DeploymentProfile;
     deploymentRegion?: string | null;
     frameworkVersion: string;
     name: string;
+    /** Committed productionApproval.mode; trunk-promotion changes the generated
+     * deploy workflow and drops the sync-back workflow. */
+    productionApprovalMode?: ProductionApprovalMode;
     workspaceDeploymentId?: string;
 }
 export declare const BLUEPRINT_TRUST_AUTHORITY_PATH: "tools/blueprint-trust-check.mjs";

package/src/generators/preset/workspace-files.js

@@ -7,6 +7,7 @@ exports.renderWorkspaceFiles = renderWorkspaceFiles;
 exports.renderWorkspaceRootFilePlan = renderWorkspaceRootFilePlan;
 exports.renderFoundationFilePlan = renderFoundationFilePlan;
 const sensitive_patterns_1 = require("@empire-builder-kit/runtime/sensitive-patterns");
+const dependency_overrides_js_1 = require("./dependency-overrides.js");
 const index_js_1 = require("../../ownership/index.js");
 const index_js_2 = require("../../frontend-security/index.js");
 const index_js_3 = require("../../git-policy/index.js");
@@ -1050,6 +1051,7 @@ const SUPPLY_CHAIN_WORKSPACE_FILE_PLAN = (0, index_js_6.renderSupplyChainWorkspa
     generatedAt: '1970-01-01T00:00:00.000Z',
 });
 const WORKSPACE_SEEDED_PATHS = new Set([
+    dependency_overrides_js_1.DEPENDENCY_OVERRIDES_PATH,
     ...SUPPLY_CHAIN_WORKSPACE_FILE_PLAN.seeded,
     ...workspace_files_developer_agent_js_1.DEVELOPER_AGENT_WORKSPACE_SEEDED_PATHS,
     '.github/CODEOWNERS',
@@ -1168,7 +1170,22 @@ function createWorkspaceOwnership(files, frameworkVersion) {
 }
 function renderWorkspaceFiles(options) {
     const { frameworkVersion, name } = options;
+    const dependencyOverrides = (0, dependency_overrides_js_1.parseDependencyOverrides)(options.dependencyOverrides === undefined
+        ? { schemaVersion: 1, overrides: {} }
+        : options.dependencyOverrides);
     const deploymentProfile = options.deploymentProfile ?? 'starter';
+    const deliveryLane = options.deliveryLane ?? 'protected-pair';
+    if (deliveryLane === 'trunk' && deploymentProfile !== 'starter') {
+        throw new Error('The trunk delivery lane requires the starter deployment profile.');
+    }
+    const trunkLane = deliveryLane === 'trunk';
+    const productionApprovalMode = options.productionApprovalMode ?? 'promotion-pr';
+    if (productionApprovalMode === 'trunk-promotion' &&
+        (deploymentProfile === 'starter' || trunkLane)) {
+        throw new Error('trunk-promotion requires an isolated deployment profile on the protected pair.');
+    }
+    const trunkPromotion = productionApprovalMode === 'trunk-promotion';
+    const protectedBranches = trunkLane ? '[main]' : '[develop, main]';
     const activeStages = (0, index_js_4.activeDeploymentStages)(deploymentProfile);
     const protectedWorkflowStageChoices = deploymentProfile === 'starter'
         ? 'development, production'
@@ -1201,9 +1218,33 @@ function renderWorkspaceFiles(options) {
     const pnpmAction = (0, index_js_3.pinnedAction)(index_js_3.GITHUB_ACTION_PINS.pnpmSetup);
     const setupNodeAction = (0, index_js_3.pinnedAction)(index_js_3.GITHUB_ACTION_PINS.setupNode);
     const uploadArtifactAction = (0, index_js_3.pinnedAction)(index_js_3.GITHUB_ACTION_PINS.uploadArtifact);
-    const protectedDevelopPromotion = "github.event.pull_request.head.repo.full_name == github.repository && github.event.pull_request.head.ref == 'develop' && github.event.pull_request.base.ref == 'main'";
-    const protectedMainSync = "github.event.pull_request.head.repo.full_name == github.repository && github.event.pull_request.head.ref == 'main' && github.event.pull_request.base.ref == 'develop'";
-    const protectedPush = "github.event_name == 'push' && (github.ref == 'refs/heads/main' || github.ref == 'refs/heads/develop')";
+    const cacheAction = (0, index_js_3.pinnedAction)(index_js_3.GITHUB_ACTION_PINS.cache);
+    const nxSetShasAction = (0, index_js_3.pinnedAction)(index_js_3.GITHUB_ACTION_PINS.nxSetShas);
+    // GitHub scopes cache reads to the current branch and its base, so protected
+    // pushes never restore entries written by pull-request runs.
+    const nxCacheSteps = `      - name: Restore the Nx task cache
+        uses: ${cacheAction}
+        with:
+          path: .nx/cache
+          key: nx-\${{ runner.os }}-\${{ hashFiles('pnpm-lock.yaml') }}-\${{ github.sha }}
+          restore-keys: |
+            nx-\${{ runner.os }}-\${{ hashFiles('pnpm-lock.yaml') }}-`;
+    // Isolated profiles bind the staging release candidate when promoting to
+    // production, so a main push never needs a rebuilt candidate.
+    const releaseCandidateBranchCondition = deploymentProfile === 'starter'
+        ? ''
+        : " &&\n      github.ref != 'refs/heads/main'";
+    // In the trunk lane no pull request is a protected route: main is the only
+    // protected branch and every feature pull request targets it.
+    const protectedDevelopPromotion = trunkLane
+        ? 'false'
+        : "github.event.pull_request.head.repo.full_name == github.repository && github.event.pull_request.head.ref == 'develop' && github.event.pull_request.base.ref == 'main'";
+    const protectedMainSync = trunkLane
+        ? 'false'
+        : "github.event.pull_request.head.repo.full_name == github.repository && github.event.pull_request.head.ref == 'main' && github.event.pull_request.base.ref == 'develop'";
+    const protectedPush = trunkLane
+        ? "github.event_name == 'push' && github.ref == 'refs/heads/main'"
+        : "github.event_name == 'push' && (github.ref == 'refs/heads/main' || github.ref == 'refs/heads/develop')";
     const protectedDeploymentRouteJobName = 'protected deployment route';
     const stagingApplyJobPrefix = 'apply staging plan ';
     const files = {
@@ -1217,9 +1258,9 @@ function renderWorkspaceFiles(options) {
 
 on:
   pull_request:
-    branches: [develop, main]
+    branches: ${protectedBranches}
   push:
-    branches: [develop, main]
+    branches: ${protectedBranches}
   workflow_dispatch:
 
 concurrency:
@@ -1326,12 +1367,16 @@ jobs:
           node-version: ${tool_versions_js_1.WORKSPACE_NODE_VERSION}
           cache: pnpm
       - run: pnpm install --frozen-lockfile
+${nxCacheSteps}
       - run: pnpm format:check
+      - name: Resolve the affected base and head for proposed work
+        if: github.event_name == 'pull_request' && !(${protectedDevelopPromotion} || ${protectedMainSync})
+        uses: ${nxSetShasAction}
       - name: Verify proposed workspace
         if: github.event_name == 'pull_request' && !(${protectedDevelopPromotion} || ${protectedMainSync})
         run: |
           pnpm nx run ${name}:verify-proposed
-          pnpm nx run-many -t verify --exclude=${name} --parallel=3
+          pnpm nx affected -t verify --exclude=${name} --parallel=3
       - name: Verify protected develop promotion
         if: github.event_name == 'pull_request' && ${protectedDevelopPromotion}
         run: pnpm nx run-many -t verify --parallel=3
@@ -1387,7 +1432,7 @@ jobs:
       github.event_name == 'push' &&
       needs.acceptance.outputs.history_only != 'true' &&
       (needs.acceptance.outputs.reused == 'true' ||
-      (needs.policy.result == 'success' && needs.verify.result == 'success'))
+      (needs.policy.result == 'success' && needs.verify.result == 'success'))${releaseCandidateBranchCondition}
     runs-on: ubuntu-latest
     steps:
       - uses: ${checkoutAction}
@@ -1400,6 +1445,7 @@ jobs:
           node-version: ${tool_versions_js_1.WORKSPACE_NODE_VERSION}
           cache: pnpm
       - run: pnpm install --frozen-lockfile
+${nxCacheSteps}
       - name: Build immutable release candidates
         env:
           EBK_SOURCE_COMMIT: \${{ github.sha }}
@@ -1407,7 +1453,7 @@ jobs:
           slice_projects="$(pnpm nx show projects --with-target=release-candidate --json | jq -r 'join(",")')"
           test -n "$slice_projects" ||
             { echo 'At least one release-candidate target is required'; exit 1; }
-          pnpm nx run-many -t release-candidate --projects="$slice_projects" --parallel=1
+          pnpm nx run-many -t release-candidate --projects="$slice_projects" --parallel=3
           mkdir -p .ebk/evidence/release-candidate/packages
           IFS=',' read -r -a projects <<< "$slice_projects"
           for project in "\${projects[@]}"; do
@@ -1425,7 +1471,7 @@ jobs:
           include-hidden-files: true
           retention-days: 30
           path: .ebk/evidence/release-candidate
-${(0, workspace_files_thin_deploy_js_1.renderThinDeployVerifyCaller)(deploymentProfile)}
+${(0, workspace_files_thin_deploy_js_1.renderThinDeployVerifyCaller)(deploymentProfile, deliveryLane, productionApprovalMode)}
 `,
         '.github/workflows/deploy.yml': `name: Deploy
 
@@ -7360,8 +7406,11 @@ permissions:
 
 jobs:
   sync-back:
+    # The sync carries history, not deployment evidence: open it after any
+    # completed main run so a failed production deploy cannot lock develop
+    # behind a sync that never opens.
     if: >-
-      github.event.workflow_run.conclusion == 'success' &&
+      github.event.workflow_run.conclusion != 'cancelled' &&
       github.event.workflow_run.event == 'push' &&
       github.event.workflow_run.head_branch == 'main'
     runs-on: ubuntu-latest
@@ -8055,8 +8104,15 @@ seeded decision record aligned with organization-specific budgets and alerts.
 
 - Development uses EC2 NAT, a development bastion, and Aurora scale-to-zero.
 ${deploymentProfile === 'starter' ? '' : '- Staging uses EC2 NAT and Aurora scale-to-zero by default.\n'}- Production always uses managed NAT and retains protected data. Its explicit Repository
-  Operating Policy profile selects either the standard 2-ACU Aurora floor or the
-  cost-optimized 0.5-ACU warm floor.
+  Operating Policy profile selects cost-optimized (0–2 ACUs, pause after five idle
+  minutes), balanced (0.5–4 ACUs, always warm), or standard (2–16 ACUs, always warm).
+  New starter repositories default to cost-optimized. Cold resume typically takes
+  about 15 seconds and can exceed 30 seconds after extended inactivity; validate
+  connection retries, request timeouts, migrations, and background polling.
+  Capacity is shared by all Slices. Open connections can prevent pausing; storage
+  and managed NAT remain billable while Aurora compute is paused.
+  Existing 0.5–4 cost-optimized adopters must explicitly select balanced before
+  upgrade, then opt into cost-optimized separately if cold starts are acceptable.
 - ECS, EventBridge, Cognito, SNS, SSM, and CloudWatch are primarily usage-priced; logs,
   metrics, alarms, and retained data still require active cost review.
 
@@ -9137,7 +9193,7 @@ if (
   costs.aurora?.engineVersion !== '${index_js_4.FOUNDATION_AURORA_ENGINE_VERSION}' ||
   costs.productionProfileSource !== 'ebk.repository-policy.json' ||
   costs.productionProfiles?.standard?.aurora?.min !== '2 ACU' ||
-  costs.productionProfiles?.['cost-optimized']?.aurora?.min !== '0.5 ACU' ||
+  JSON.stringify(costs.productionProfiles) !== JSON.stringify(${JSON.stringify(index_js_4.PRODUCTION_FOUNDATION_PROFILE_CONTRACTS)}) ||
   !costs.stages?.development ||
   JSON.stringify(Object.keys(costs.stages ?? {}).sort()) !==
     JSON.stringify(${JSON.stringify([...activeStages].sort())}) ||
@@ -9230,6 +9286,7 @@ export default $config({
             ],
             exclude: ['.sst', 'dist', 'node_modules'],
         }),
+        [dependency_overrides_js_1.DEPENDENCY_OVERRIDES_PATH]: json(dependencyOverrides),
         'pnpm-workspace.yaml': `packages:
   - 'packages/*'
   - 'packages/*/apps/*'
@@ -9264,6 +9321,7 @@ supportedArchitectures:
 strictDepBuilds: true
 allowBuilds:
 ${index_js_6.FRAMEWORK_REVIEWED_BUILD_PACKAGES.map((packageName) => `  '${packageName}': true`).join('\n')}
+${(0, dependency_overrides_js_1.renderDependencyOverridesYaml)(dependencyOverrides)}
 `,
         'tsconfig.base.json': json({
             compilerOptions: {
@@ -10086,7 +10144,9 @@ process.stdout.write(
 );
 `,
         'tools/ebk-git-policy.mjs': `import { evaluateGitPolicy } from '@empire-builder-kit/nx/git-policy';
+import { deliveryLaneOf, readRepositoryOperatingPolicy } from '@empire-builder-kit/nx/repository-policy';
 import { spawnSync } from 'node:child_process';
+const deliveryLane = deliveryLaneOf(readRepositoryOperatingPolicy(process.cwd()));
 
 const git = (...args) => {
   const result = spawnSync('git', args, { encoding: 'utf8', shell: false });
@@ -10106,14 +10166,14 @@ if (!['pull_request', 'push', 'workflow_dispatch'].includes(eventName)) {
   throw new Error('Unsupported or missing GITHUB_EVENT_NAME; Git policy fails closed.');
 }
 
-const request = { eventName, ref: process.env.GITHUB_REF };
+const request = { deliveryLane, eventName, ref: process.env.GITHUB_REF };
 if (eventName === 'pull_request' || eventName === 'push') {
   git(
     'fetch',
     '--no-tags',
     'origin',
     'main:refs/remotes/origin/main',
-    'develop:refs/remotes/origin/develop',
+    ...(deliveryLane === 'trunk' ? [] : ['develop:refs/remotes/origin/develop']),
   );
 }
 if (eventName === 'pull_request') {
@@ -10129,13 +10189,17 @@ if (eventName === 'pull_request') {
     baseRef,
     headRepository,
     headRef,
-    mainIsAncestorOfDevelop: isAncestor(
-      'refs/remotes/origin/main',
-      'refs/remotes/origin/develop',
-    ),
+    ...(deliveryLane === 'trunk'
+      ? {}
+      : {
+          mainIsAncestorOfDevelop: isAncestor(
+            'refs/remotes/origin/main',
+            'refs/remotes/origin/develop',
+          ),
+        }),
     repository,
   });
-} else if (eventName === 'push') {
+} else if (eventName === 'push' && deliveryLane !== 'trunk') {
   Object.assign(request, {
     baseIsAncestorOfHead: isAncestor('refs/remotes/origin/develop', 'HEAD'),
     mainIsAncestorOfDevelop: isAncestor(
@@ -10248,7 +10312,10 @@ process.stdout.write('Empire Builder Kit workspace source health is green.\\n');
         name,
         nodeVersion: tool_versions_js_1.WORKSPACE_NODE_VERSION,
     }), (0, workspace_files_thin_deploy_js_1.renderThinDeployWorkflowFilePlan)({
+        deliveryLane,
+        productionApprovalMode,
         actionPins: {
+            cache: cacheAction,
             checkout: checkoutAction,
             configureAwsCredentials: configureAwsAction,
             downloadArtifact: downloadArtifactAction,
@@ -10262,11 +10329,20 @@ process.stdout.write('Empire Builder Kit workspace source health is green.\\n');
             node: tool_versions_js_1.WORKSPACE_NODE_VERSION,
             sst: tool_versions_js_1.WORKSPACE_SST_VERSION,
         },
-    }).files, (0, workspace_files_thin_docs_js_1.renderThinLifecycleDocumentation)({ deploymentProfile, name }));
+    }).files, (0, workspace_files_thin_docs_js_1.renderThinLifecycleDocumentation)({
+        deliveryLane,
+        deploymentProfile,
+        name,
+        productionApprovalMode,
+    }));
     const thinReleaseWorkflowPlan = (0, workspace_files_thin_release_js_1.renderThinReleaseWorkflowPlan)();
     Object.assign(files, thinReleaseWorkflowPlan.files);
     for (const obsoletePath of [
         ...thinReleaseWorkflowPlan.obsoletePaths,
+        // The trunk lane has no develop branch to sync main back into; trunk
+        // promotion only ever fast-forwards main from develop, so there is
+        // nothing to sync back either.
+        ...(trunkLane || trunkPromotion ? ['.github/workflows/sync-back.yml'] : []),
         '.github/workflows/performance-aggregate-counts.yml',
         '.github/workflows/performance-cost-actual.yml',
         '.github/workflows/performance-load.yml',