@fjall/generator 0.89.5 → 0.94.0

package/dist/src/schemas/constants.d.ts

@@ -12,8 +12,7 @@ export declare const DEFAULTS: Readonly<{
         compute: "Compute";
     }>;
 }>;
-export declare const DATABASE_TYPES: readonly ["Aurora", "Instance", "GlobalAurora"];
-export type DatabaseType = (typeof DATABASE_TYPES)[number];
+export { DATABASE_TYPES, type DatabaseType } from "./sharedTypes.js";
 export declare const COMPUTE_TYPES: readonly ["ecs", "lambda", "ec2"];
 export type ComputeType = (typeof COMPUTE_TYPES)[number];
 export declare const COMPUTE_TYPE: Readonly<{
@@ -30,8 +29,8 @@ export declare const DEPLOYMENT_TYPE: Readonly<{
 export declare const COMPUTE_ARCHITECTURES: readonly ["ARM_64", "X86_64"];
 export type ComputeArchitecture = (typeof COMPUTE_ARCHITECTURES)[number];
 export declare const DEFAULT_COMPUTE_ARCHITECTURE: ComputeArchitecture;
-export declare const ECS_CAPACITY_PROVIDERS: readonly ["FARGATE", "FARGATE_SPOT", "EC2"];
-export type EcsCapacityProvider = (typeof ECS_CAPACITY_PROVIDERS)[number];
+export { ECS_CAPACITY_PROVIDERS, type EcsCapacityProvider, } from "./sharedTypes.js";
+import type { EcsCapacityProvider } from "./sharedTypes.js";
 export declare const DEFAULT_CAPACITY_PROVIDER: EcsCapacityProvider;
 /**
  * OpenNext deployment patterns.
@@ -41,7 +40,7 @@ export declare const DEFAULT_CAPACITY_PROVIDER: EcsCapacityProvider;
 export declare const PATTERN_TYPE_VALUES: readonly ["payload", "nextjs"];
 export type PatternType = (typeof PATTERN_TYPE_VALUES)[number];
 export declare const PATTERN_TYPES: ReadonlySet<string>;
-export { APP_TYPES, CUSTOM_TIER, type AppType, } from "../presets/tierPresets.js";
+export { APP_TYPES, CUSTOM_TIER, type AppType } from "./sharedTypes.js";
 export declare const EC2_INSTANCE_TYPES: readonly ["t3.nano", "t3.micro", "t3.small", "t3.medium", "t3.large", "t3.xlarge", "t3.2xlarge", "t3a.nano", "t3a.micro", "t3a.small", "t3a.medium", "t3a.large", "t3a.xlarge", "t3a.2xlarge", "t4g.nano", "t4g.micro", "t4g.small", "t4g.medium", "t4g.large", "t4g.xlarge", "t4g.2xlarge", "c5.large", "c5.xlarge", "c5.2xlarge", "c5.4xlarge", "c5.9xlarge", "c5.12xlarge", "c5.18xlarge", "c5.24xlarge", "c5a.large", "c5a.xlarge", "c5a.2xlarge", "c5a.4xlarge", "c5a.8xlarge", "c5a.12xlarge", "c5a.16xlarge", "c5a.24xlarge", "c6g.medium", "c6g.large", "c6g.xlarge", "c6g.2xlarge", "c6g.4xlarge", "c6g.8xlarge", "c6g.12xlarge", "c6g.16xlarge", "r5.large", "r5.xlarge", "r5.2xlarge", "r5.4xlarge", "r5.8xlarge", "r5.12xlarge", "r5.16xlarge", "r5.24xlarge", "r5a.large", "r5a.xlarge", "r5a.2xlarge", "r5a.4xlarge", "r5a.8xlarge", "r5a.12xlarge", "r5a.16xlarge", "r5a.24xlarge", "r6g.medium", "r6g.large", "r6g.xlarge", "r6g.2xlarge", "r6g.4xlarge", "r6g.8xlarge", "r6g.12xlarge", "r6g.16xlarge", "i3.large", "i3.xlarge", "i3.2xlarge", "i3.4xlarge", "i3.8xlarge", "i3.16xlarge", "p3.2xlarge", "p3.8xlarge", "p3.16xlarge", "g4dn.xlarge", "g4dn.2xlarge", "g4dn.4xlarge", "g4dn.8xlarge", "g4dn.12xlarge", "g4dn.16xlarge", "m5.large", "m5.xlarge", "m5.2xlarge", "m5.4xlarge", "m5.8xlarge", "m5.12xlarge", "m5.16xlarge", "m5.24xlarge", "m5a.large", "m5a.xlarge", "m5a.2xlarge", "m5a.4xlarge", "m5a.8xlarge", "m5a.12xlarge", "m5a.16xlarge", "m5a.24xlarge"];
 export type EC2InstanceType = (typeof EC2_INSTANCE_TYPES)[number];
 export declare const VALID_MONITORING_INTERVALS: readonly [0, 1, 5, 10, 15, 30, 60];
@@ -74,5 +73,4 @@ export declare const STORAGE_PRESET_TYPES: readonly ["standard", "assets", "uplo
 export type StoragePresetType = (typeof STORAGE_PRESET_TYPES)[number];
 export declare const S3_ENCRYPTION_TYPES: readonly ["AES256", "KMS"];
 export type S3EncryptionType = (typeof S3_ENCRYPTION_TYPES)[number];
-export declare const BACKUP_VAULT_TIERS: readonly ["standard", "resilient", "enterprise"];
-export type BackupVaultTier = (typeof BACKUP_VAULT_TIERS)[number];
+export { BACKUP_VAULT_TIERS, type BackupVaultTier } from "./sharedTypes.js";

package/dist/src/schemas/constants.js

@@ -1,218 +1 @@
-/**
- * Shared constants for Fjall CLI generators
- * These defaults are designed to draw attention when not properly configured
- */
-export const DEFAULTS = Object.freeze({
-    // Resource naming conventions
-    RESOURCE_SUFFIXES: Object.freeze({
-        storage: "Storage",
-        database: "Database",
-        cluster: "Cluster",
-        function: "Function",
-        instance: "Instance",
-        compute: "Compute",
-    }),
-});
-// Resource type constants for validation
-export const DATABASE_TYPES = ["Aurora", "Instance", "GlobalAurora"];
-export const COMPUTE_TYPES = ["ecs", "lambda", "ec2"];
-// Object form for cleaner comparisons: COMPUTE_TYPE.ECS, COMPUTE_TYPE.LAMBDA, etc.
-export const COMPUTE_TYPE = Object.freeze({
-    ECS: "ecs",
-    LAMBDA: "lambda",
-    EC2: "ec2",
-});
-// Deployment types for Lambda compute resources
-export const DEPLOYMENT_TYPES = ["code", "container"];
-export const DEPLOYMENT_TYPE = Object.freeze({
-    CODE: "code",
-    CONTAINER: "container",
-});
-export const COMPUTE_ARCHITECTURES = ["ARM_64", "X86_64"];
-export const DEFAULT_COMPUTE_ARCHITECTURE = "ARM_64";
-export const ECS_CAPACITY_PROVIDERS = [
-    "FARGATE",
-    "FARGATE_SPOT",
-    "EC2",
-];
-export const DEFAULT_CAPACITY_PROVIDER = "FARGATE";
-/**
- * OpenNext deployment patterns.
- * - payload: Payload CMS (always has database + migrations)
- * - nextjs: Pure Next.js (optional database)
- */
-export const PATTERN_TYPE_VALUES = ["payload", "nextjs"];
-export const PATTERN_TYPES = new Set(PATTERN_TYPE_VALUES);
-export { APP_TYPES, CUSTOM_TIER, } from "../presets/tierPresets.js";
-// Common EC2 instance types (not exhaustive, but covers common cases)
-export const EC2_INSTANCE_TYPES = [
-    // General purpose
-    "t3.nano",
-    "t3.micro",
-    "t3.small",
-    "t3.medium",
-    "t3.large",
-    "t3.xlarge",
-    "t3.2xlarge",
-    "t3a.nano",
-    "t3a.micro",
-    "t3a.small",
-    "t3a.medium",
-    "t3a.large",
-    "t3a.xlarge",
-    "t3a.2xlarge",
-    "t4g.nano",
-    "t4g.micro",
-    "t4g.small",
-    "t4g.medium",
-    "t4g.large",
-    "t4g.xlarge",
-    "t4g.2xlarge",
-    // Compute optimised
-    "c5.large",
-    "c5.xlarge",
-    "c5.2xlarge",
-    "c5.4xlarge",
-    "c5.9xlarge",
-    "c5.12xlarge",
-    "c5.18xlarge",
-    "c5.24xlarge",
-    "c5a.large",
-    "c5a.xlarge",
-    "c5a.2xlarge",
-    "c5a.4xlarge",
-    "c5a.8xlarge",
-    "c5a.12xlarge",
-    "c5a.16xlarge",
-    "c5a.24xlarge",
-    "c6g.medium",
-    "c6g.large",
-    "c6g.xlarge",
-    "c6g.2xlarge",
-    "c6g.4xlarge",
-    "c6g.8xlarge",
-    "c6g.12xlarge",
-    "c6g.16xlarge",
-    // Memory optimised
-    "r5.large",
-    "r5.xlarge",
-    "r5.2xlarge",
-    "r5.4xlarge",
-    "r5.8xlarge",
-    "r5.12xlarge",
-    "r5.16xlarge",
-    "r5.24xlarge",
-    "r5a.large",
-    "r5a.xlarge",
-    "r5a.2xlarge",
-    "r5a.4xlarge",
-    "r5a.8xlarge",
-    "r5a.12xlarge",
-    "r5a.16xlarge",
-    "r5a.24xlarge",
-    "r6g.medium",
-    "r6g.large",
-    "r6g.xlarge",
-    "r6g.2xlarge",
-    "r6g.4xlarge",
-    "r6g.8xlarge",
-    "r6g.12xlarge",
-    "r6g.16xlarge",
-    // Storage optimised
-    "i3.large",
-    "i3.xlarge",
-    "i3.2xlarge",
-    "i3.4xlarge",
-    "i3.8xlarge",
-    "i3.16xlarge",
-    // Accelerated computing
-    "p3.2xlarge",
-    "p3.8xlarge",
-    "p3.16xlarge",
-    "g4dn.xlarge",
-    "g4dn.2xlarge",
-    "g4dn.4xlarge",
-    "g4dn.8xlarge",
-    "g4dn.12xlarge",
-    "g4dn.16xlarge",
-    // Previous generation (still common)
-    "m5.large",
-    "m5.xlarge",
-    "m5.2xlarge",
-    "m5.4xlarge",
-    "m5.8xlarge",
-    "m5.12xlarge",
-    "m5.16xlarge",
-    "m5.24xlarge",
-    "m5a.large",
-    "m5a.xlarge",
-    "m5a.2xlarge",
-    "m5a.4xlarge",
-    "m5a.8xlarge",
-    "m5a.12xlarge",
-    "m5a.16xlarge",
-    "m5a.24xlarge",
-];
-// Valid monitoring intervals for enhanced monitoring (in seconds)
-export const VALID_MONITORING_INTERVALS = [0, 1, 5, 10, 15, 30, 60];
-/** Includes check for `as const` arrays (centralises the widening cast) */
-export function constIncludes(arr, value) {
-    return arr.includes(value);
-}
-// Port constraints
-export const MIN_PORT = 1;
-export const MAX_PORT = 65535;
-/**
- * Default database port: 35255 (FJALL on phone keypad)
- * Used when no explicit port is specified in tier presets or configuration.
- */
-export const DEFAULT_DATABASE_PORT = 35255;
-// Lambda constraints — AWS service hard limits
-export const MIN_LAMBDA_MEMORY = 128;
-export const MAX_LAMBDA_MEMORY = 10240;
-export const MIN_LAMBDA_TIMEOUT = 1;
-export const MAX_LAMBDA_TIMEOUT = 900;
-// ECS constraints — Fjall guardrails (ASG maxSize is the effective AWS ceiling;
-// these cap the generator UI to prevent accidental large-scale provisioning)
-export const MIN_ECS_CAPACITY = 1;
-export const MAX_ECS_CAPACITY = 1000;
-// Per-service scaling ceiling — limits individual service/ASG capacity to prevent
-// accidental large-scale provisioning within a single service definition.
-export const MAX_SCALING_CAPACITY = 100;
-// Warm pool constraints and defaults — Fjall guardrails, not AWS hard limits
-// (ASG maxSize is the effective AWS ceiling; these cap the generator UI)
-export const MAX_WARM_POOL_SIZE = 100;
-export const DEFAULT_WARM_POOL_MIN_SIZE = 1;
-export const DEFAULT_WARM_POOL_REUSE_ON_SCALE_IN = true;
-// Default container port for ECS clusters and services.
-// 3000 is the most common default for Node.js frameworks (Express, Next.js, Remix).
-export const DEFAULT_CONTAINER_PORT = 3000;
-// Default EC2 instance type — Graviton-based, free-tier eligible
-export const DEFAULT_EC2_INSTANCE_TYPE = "t4g.micro";
-/** AWS Secrets Manager recommended rotation interval (days) */
-export const DEFAULT_SECRET_ROTATION_DAYS = 30;
-// Valid HTTP methods for Lambda CORS
-export const HTTP_METHODS = [
-    "GET",
-    "POST",
-    "PUT",
-    "DELETE",
-    "HEAD",
-    "OPTIONS",
-    "PATCH",
-];
-// S3 storage preset types (generator-level concept, resolved to params before plan creation)
-export const STORAGE_PRESET_TYPES = [
-    "standard",
-    "assets",
-    "upload",
-    "website",
-];
-// S3 encryption types
-export const S3_ENCRYPTION_TYPES = ["AES256", "KMS"];
-// Backup vault tiers for disaster recovery
-export const BACKUP_VAULT_TIERS = [
-    "standard",
-    "resilient",
-    "enterprise",
-];
+const g=Object.freeze({RESOURCE_SUFFIXES:Object.freeze({storage:"Storage",database:"Database",cluster:"Cluster",function:"Function",instance:"Instance",compute:"Compute"})});import{DATABASE_TYPES as X}from"./sharedTypes.js";const t=["ecs","lambda","ec2"],x=Object.freeze({ECS:"ecs",LAMBDA:"lambda",EC2:"ec2"}),l=["code","container"],o=Object.freeze({CODE:"code",CONTAINER:"container"}),c=["ARM_64","X86_64"],E="ARM_64";import{ECS_CAPACITY_PROVIDERS as V}from"./sharedTypes.js";const T="FARGATE",a=["payload","nextjs"],_=new Set(a);import{APP_TYPES as G,CUSTOM_TIER as z}from"./sharedTypes.js";const A=["t3.nano","t3.micro","t3.small","t3.medium","t3.large","t3.xlarge","t3.2xlarge","t3a.nano","t3a.micro","t3a.small","t3a.medium","t3a.large","t3a.xlarge","t3a.2xlarge","t4g.nano","t4g.micro","t4g.small","t4g.medium","t4g.large","t4g.xlarge","t4g.2xlarge","c5.large","c5.xlarge","c5.2xlarge","c5.4xlarge","c5.9xlarge","c5.12xlarge","c5.18xlarge","c5.24xlarge","c5a.large","c5a.xlarge","c5a.2xlarge","c5a.4xlarge","c5a.8xlarge","c5a.12xlarge","c5a.16xlarge","c5a.24xlarge","c6g.medium","c6g.large","c6g.xlarge","c6g.2xlarge","c6g.4xlarge","c6g.8xlarge","c6g.12xlarge","c6g.16xlarge","r5.large","r5.xlarge","r5.2xlarge","r5.4xlarge","r5.8xlarge","r5.12xlarge","r5.16xlarge","r5.24xlarge","r5a.large","r5a.xlarge","r5a.2xlarge","r5a.4xlarge","r5a.8xlarge","r5a.12xlarge","r5a.16xlarge","r5a.24xlarge","r6g.medium","r6g.large","r6g.xlarge","r6g.2xlarge","r6g.4xlarge","r6g.8xlarge","r6g.12xlarge","r6g.16xlarge","i3.large","i3.xlarge","i3.2xlarge","i3.4xlarge","i3.8xlarge","i3.16xlarge","p3.2xlarge","p3.8xlarge","p3.16xlarge","g4dn.xlarge","g4dn.2xlarge","g4dn.4xlarge","g4dn.8xlarge","g4dn.12xlarge","g4dn.16xlarge","m5.large","m5.xlarge","m5.2xlarge","m5.4xlarge","m5.8xlarge","m5.12xlarge","m5.16xlarge","m5.24xlarge","m5a.large","m5a.xlarge","m5a.2xlarge","m5a.4xlarge","m5a.8xlarge","m5a.12xlarge","m5a.16xlarge","m5a.24xlarge"],n=[0,1,5,10,15,30,60];function s(e,r){return e.includes(r)}const P=1,p=65535,S=35255,O=128,m=10240,C=1,M=900,I=1,R=1e3,D=100,N=100,L=1,U=!0,i=3e3,Y="t4g.micro",d=30,u=["GET","POST","PUT","DELETE","HEAD","OPTIONS","PATCH"],F=["standard","assets","upload","website"],f=["AES256","KMS"];import{BACKUP_VAULT_TIERS as w}from"./sharedTypes.js";export{G as APP_TYPES,w as BACKUP_VAULT_TIERS,c as COMPUTE_ARCHITECTURES,x as COMPUTE_TYPE,t as COMPUTE_TYPES,z as CUSTOM_TIER,X as DATABASE_TYPES,g as DEFAULTS,T as DEFAULT_CAPACITY_PROVIDER,E as DEFAULT_COMPUTE_ARCHITECTURE,i as DEFAULT_CONTAINER_PORT,S as DEFAULT_DATABASE_PORT,Y as DEFAULT_EC2_INSTANCE_TYPE,d as DEFAULT_SECRET_ROTATION_DAYS,L as DEFAULT_WARM_POOL_MIN_SIZE,U as DEFAULT_WARM_POOL_REUSE_ON_SCALE_IN,o as DEPLOYMENT_TYPE,l as DEPLOYMENT_TYPES,A as EC2_INSTANCE_TYPES,V as ECS_CAPACITY_PROVIDERS,u as HTTP_METHODS,R as MAX_ECS_CAPACITY,m as MAX_LAMBDA_MEMORY,M as MAX_LAMBDA_TIMEOUT,p as MAX_PORT,D as MAX_SCALING_CAPACITY,N as MAX_WARM_POOL_SIZE,I as MIN_ECS_CAPACITY,O as MIN_LAMBDA_MEMORY,C as MIN_LAMBDA_TIMEOUT,P as MIN_PORT,_ as PATTERN_TYPES,a as PATTERN_TYPE_VALUES,f as S3_ENCRYPTION_TYPES,F as STORAGE_PRESET_TYPES,n as VALID_MONITORING_INTERVALS,s as constIncludes};

package/dist/src/schemas/databaseSchemas.d.ts

@@ -119,9 +119,9 @@ export declare const DatabaseResourcePlanSchema: z.ZodObject<{
     }>;
     databaseName: z.ZodString;
     instanceType: z.ZodOptional<z.ZodString>;
+    allocatedStorage: z.ZodOptional<z.ZodNumber>;
     multiAz: z.ZodOptional<z.ZodBoolean>;
     publiclyAccessible: z.ZodOptional<z.ZodBoolean>;
-    enableSecretRotation: z.ZodOptional<z.ZodBoolean>;
     databaseInsights: z.ZodOptional<z.ZodUnion<[z.ZodLiteral<false>, z.ZodObject<{
         mode: z.ZodOptional<z.ZodEnum<{
             standard: "standard";
@@ -192,6 +192,11 @@ export declare const DatabaseResourcePlanSchema: z.ZodObject<{
         key: z.ZodString;
         sourceText: z.ZodString;
     }, z.core.$strict>>>;
+    alarms: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodObject<{
+        cpuThreshold: z.ZodOptional<z.ZodNumber>;
+        freeStorageThresholdGiB: z.ZodOptional<z.ZodNumber>;
+        connectionsThreshold: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>]>>;
 }, z.core.$strict>;
 /**
  * Database generator schema using discriminated union.

package/dist/src/schemas/databaseSchemas.js

@@ -1,366 +1 @@
-import { z } from "zod";
-import { VALIDATION_PATTERNS, VALIDATION_MESSAGES, } from "../validation/patterns.js";
-import { DATABASE_TYPES, VALID_MONITORING_INTERVALS, constIncludes, } from "./constants.js";
-import { optionalOrDisabled, ResourceNameSchema, AppNameSchema, ExtraPropertySchema, } from "./baseSchemas.js";
-// ─── Reusable database-specific validation schemas ───────────────────────────
-/** Reusable backup retention validation. Range: 1-35 days. */
-export const BackupRetentionSchema = z
-    .number()
-    .int(VALIDATION_MESSAGES.BACKUP_RETENTION.INTEGER)
-    .min(1, VALIDATION_MESSAGES.BACKUP_RETENTION.MIN)
-    .max(35, VALIDATION_MESSAGES.BACKUP_RETENTION.MAX);
-/** Reusable monitoring interval validation. Must be one of: 0, 1, 5, 10, 15, 30, 60. */
-export const MonitoringIntervalSchema = z
-    .number()
-    .int(VALIDATION_MESSAGES.MONITORING_INTERVAL.INTEGER)
-    .refine((val) => constIncludes(VALID_MONITORING_INTERVALS, val), {
-    message: VALIDATION_MESSAGES.MONITORING_INTERVAL.VALUES,
-});
-/** Reusable database port validation. Range: 1024-65535. */
-export const DatabasePortSchema = z
-    .number()
-    .int(VALIDATION_MESSAGES.DATABASE.PORT.INTEGER)
-    .min(1024, VALIDATION_MESSAGES.DATABASE.PORT.MIN)
-    .max(65535, VALIDATION_MESSAGES.DATABASE.PORT.MAX);
-// ─── Database type ───────────────────────────────────────────────────────────
-export const DatabaseTypeSchema = z
-    .enum(DATABASE_TYPES)
-    .describe(`Database type must be one of: ${DATABASE_TYPES.join(", ")}`);
-// ─── Nested configuration schemas ────────────────────────────────────────────
-export const ProxyConfigSchema = z
-    .object({
-    maxConnections: z
-        .number()
-        .int(VALIDATION_MESSAGES.MAX_CONNECTIONS.INTEGER)
-        .min(1, VALIDATION_MESSAGES.MAX_CONNECTIONS.MIN)
-        .max(100, VALIDATION_MESSAGES.MAX_CONNECTIONS.MAX)
-        .optional(),
-    maxIdleConnections: z
-        .number()
-        .int(VALIDATION_MESSAGES.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.INTEGER)
-        .min(0, VALIDATION_MESSAGES.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MIN)
-        .max(100, VALIDATION_MESSAGES.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MAX)
-        .optional(),
-    connectionBorrowTimeout: z
-        .number()
-        .int(VALIDATION_MESSAGES.PROXY_CONFIG.BORROW_TIMEOUT.INTEGER)
-        .min(1, VALIDATION_MESSAGES.PROXY_CONFIG.BORROW_TIMEOUT.MIN)
-        .max(3600, VALIDATION_MESSAGES.PROXY_CONFIG.BORROW_TIMEOUT.MAX)
-        .optional(),
-    requireTLS: z.boolean().optional(),
-})
-    .strict()
-    .describe("RDS Proxy configuration");
-export const ReadReplicaConfigSchema = z
-    .object({
-    instanceType: z.string().optional(),
-    availabilityZone: z.string().optional(),
-})
-    .strict()
-    .describe("Read replica configuration");
-export const SecretRotationConfigSchema = z
-    .object({
-    automaticallyAfterDays: z
-        .number()
-        .int(VALIDATION_MESSAGES.ROTATION.INTEGER)
-        .min(1, VALIDATION_MESSAGES.ROTATION.MIN)
-        .max(365, VALIDATION_MESSAGES.ROTATION.MAX)
-        .optional(),
-})
-    .strict()
-    .describe("Secret rotation configuration");
-export const CredentialsConfigSchema = z
-    .object({
-    username: z
-        .string()
-        .min(1, VALIDATION_MESSAGES.REQUIRED.USERNAME)
-        .max(63, VALIDATION_MESSAGES.USERNAME.MAX_LENGTH)
-        .optional(),
-    secretRotation: SecretRotationConfigSchema.optional(),
-})
-    .strict()
-    .describe("Database credentials configuration");
-export const ProxyConfigOrFalseSchema = optionalOrDisabled(ProxyConfigSchema);
-export const ReadReplicaConfigOrFalseSchema = optionalOrDisabled(ReadReplicaConfigSchema);
-// ─── Aurora-specific nested configuration ────────────────────────────────────
-export const AuroraReaderConfigSchema = z
-    .object({
-    scaleWithWriter: z.boolean().optional(),
-    enableDatabaseInsights: z.boolean().optional(),
-    identifierSuffix: z
-        .string()
-        .min(1, VALIDATION_MESSAGES.IDENTIFIER_SUFFIX.REQUIRED)
-        .max(50, VALIDATION_MESSAGES.IDENTIFIER_SUFFIX.MAX_LENGTH)
-        .optional(),
-    availabilityZone: z.string().optional(),
-})
-    .strict()
-    .describe("Configuration for a single Aurora reader instance");
-export const AuroraWriterConfigSchema = z
-    .object({
-    enableDatabaseInsights: z.boolean().optional(),
-    identifierSuffix: z
-        .string()
-        .min(1, VALIDATION_MESSAGES.IDENTIFIER_SUFFIX.REQUIRED)
-        .max(50, VALIDATION_MESSAGES.IDENTIFIER_SUFFIX.MAX_LENGTH)
-        .optional(),
-    availabilityZone: z.string().optional(),
-})
-    .strict()
-    .describe("Configuration for Aurora writer instance");
-export const AuroraReadersConfigSchema = z
-    .object({
-    count: z
-        .number()
-        .int(VALIDATION_MESSAGES.READER.COUNT.INTEGER)
-        .min(0, VALIDATION_MESSAGES.READER.COUNT.MIN)
-        .max(15, VALIDATION_MESSAGES.READER.COUNT.MAX)
-        .optional(),
-    instances: z
-        .array(AuroraReaderConfigSchema)
-        .max(15, VALIDATION_MESSAGES.READER_INSTANCES.MAX)
-        .optional(),
-    defaultEnableDatabaseInsights: z.boolean().optional(),
-})
-    .strict()
-    .refine((data) => !(data.count !== undefined && data.instances !== undefined), {
-    message: VALIDATION_MESSAGES.READER_INSTANCES.COUNT_OR_INSTANCES,
-    path: ["count"],
-})
-    .describe("Aurora readers configuration");
-export const AuroraReadersConfigOrFalseSchema = optionalOrDisabled(AuroraReadersConfigSchema);
-// ─── Encryption key specification ────────────────────────────────────────────
-export const AwsManagedKeySchema = z
-    .object({
-    awsManaged: z.literal(true),
-})
-    .strict();
-export const CustomerManagedKeyMarkerSchema = z
-    .object({
-    useCMK: z.literal(true),
-})
-    .strict();
-export const EncryptionKeySpecSchema = z.union([
-    AwsManagedKeySchema,
-    CustomerManagedKeyMarkerSchema,
-]);
-export const DatabaseInsightsConfigSchema = z
-    .object({
-    mode: z.enum(["standard", "advanced"]).optional(),
-    encryptionKey: EncryptionKeySpecSchema.optional(),
-})
-    .strict()
-    .describe("Database Insights configuration");
-export const DatabaseInsightsConfigOrFalseSchema = optionalOrDisabled(DatabaseInsightsConfigSchema);
-export const EncryptionConfigSchema = z
-    .object({
-    storageKey: EncryptionKeySpecSchema.optional(),
-})
-    .strict()
-    .describe("Encryption configuration (DESTRUCTIVE to change storageKey)");
-// ─── Database resource plan ──────────────────────────────────────────────────
-export const DatabaseResourcePlanSchema = z
-    .object({
-    name: ResourceNameSchema,
-    type: DatabaseTypeSchema,
-    databaseName: z.string().min(1, VALIDATION_MESSAGES.REQUIRED.DATABASE_NAME),
-    // Instance-specific props (only apply when type is "Instance")
-    instanceType: z.string().optional(),
-    multiAz: z.boolean().optional(),
-    publiclyAccessible: z.boolean().optional(),
-    enableSecretRotation: z.boolean().optional(),
-    // Shared props (Instance and Aurora)
-    databaseInsights: DatabaseInsightsConfigOrFalseSchema.optional(),
-    port: DatabasePortSchema.optional(),
-    deletionProtection: z.boolean().optional(),
-    // Nested configurations (presence-based: object = enabled, false = disabled)
-    proxy: ProxyConfigOrFalseSchema.optional(),
-    credentials: CredentialsConfigSchema.optional(),
-    // Instance-specific nested config
-    readReplica: ReadReplicaConfigOrFalseSchema.optional(),
-    // Shared encryption config (Instance and Aurora)
-    encryption: EncryptionConfigSchema.optional(),
-    // Aurora/GlobalAurora-specific props
-    writer: AuroraWriterConfigSchema.optional(),
-    readers: AuroraReadersConfigOrFalseSchema.optional(),
-    // Shared operational props (Instance, Aurora, GlobalAurora)
-    backupRetention: BackupRetentionSchema.optional(),
-    preferredMaintenanceWindow: z.string().optional(),
-    monitoringInterval: MonitoringIntervalSchema.optional(),
-    // GlobalAurora-specific props
-    primaryRegion: z.string().optional(),
-    secondaryRegions: z.array(z.string()).optional(),
-    globalClusterIdentifier: z.string().optional(),
-    enableGlobalWriteForwarding: z.boolean().optional(),
-    // Shared restore/snapshot props
-    snapshotIdentifier: z.string().optional(),
-    snapshotUsername: z.string().optional(),
-    // Round-trip preservation fields (set by AST parser, used by generator)
-    databaseEngine: z.enum(["postgresql", "mysql"]).optional(),
-    engineExpression: z.string().optional(),
-    variableName: z.string().optional(),
-    extraProperties: z.array(ExtraPropertySchema).optional(),
-})
-    .strict();
-// ─── Database generator schemas ──────────────────────────────────────────────
-// Common fields shared across all database types
-const DatabaseGeneratorBaseSchema = z
-    .object({
-    appName: AppNameSchema,
-    nameProvidedByFlag: z.boolean().optional(),
-    databaseName: z
-        .string()
-        .min(1, VALIDATION_MESSAGES.REQUIRED.DATABASE_NAME)
-        .max(63, VALIDATION_MESSAGES.MAX_LENGTH.DATABASE_NAME)
-        .regex(VALIDATION_PATTERNS.DATABASE_NAME, VALIDATION_MESSAGES.DATABASE_NAME),
-    resourceName: ResourceNameSchema.optional(),
-    connectionConfig: z
-        .object({
-        /** Connect to entire compute resources (legacy, cluster-level) */
-        connectToCompute: z.array(z.string()).optional(),
-        /** Connect to specific ECS services (format: "ClusterName/ServiceName") */
-        connectToServices: z.array(z.string()).optional(),
-    })
-        .strict()
-        .optional(),
-    // Shared fields (all database types)
-    databaseInsights: DatabaseInsightsConfigOrFalseSchema.optional(),
-    port: DatabasePortSchema.optional(),
-    proxy: ProxyConfigOrFalseSchema.optional(),
-    credentials: CredentialsConfigSchema.optional(),
-    encryption: EncryptionConfigSchema.optional(),
-    deletionProtection: z.boolean().optional(),
-})
-    .strict();
-// Type-specific field definitions shared between CLI and UI schemas
-const instanceSpecificFields = {
-    databaseType: z.literal("Instance"),
-    instanceType: z.string().optional(),
-    multiAz: z.boolean().optional(),
-    readReplica: ReadReplicaConfigOrFalseSchema.optional(),
-    publiclyAccessible: z.boolean().optional(),
-    backupRetention: BackupRetentionSchema.optional(),
-    allocatedStorage: z.number().optional(),
-    snapshotIdentifier: z.string().optional(),
-    snapshotUsername: z.string().optional(),
-};
-const auroraSpecificFields = {
-    databaseType: z.literal("Aurora"),
-    writer: AuroraWriterConfigSchema.optional(),
-    readers: AuroraReadersConfigOrFalseSchema.optional(),
-    backupRetention: BackupRetentionSchema.optional(),
-    preferredMaintenanceWindow: z.string().optional(),
-    monitoringInterval: MonitoringIntervalSchema.optional(),
-    snapshotIdentifier: z.string().optional(),
-    snapshotUsername: z.string().optional(),
-};
-const globalAuroraSpecificFields = {
-    databaseType: z.literal("GlobalAurora"),
-    primaryRegion: z
-        .string()
-        .min(1, VALIDATION_MESSAGES.GLOBAL_AURORA.PRIMARY_REGION_REQUIRED),
-    secondaryRegions: z.array(z.string()).optional(),
-    globalClusterIdentifier: z.string().optional(),
-    enableGlobalWriteForwarding: z.boolean().optional(),
-    writer: AuroraWriterConfigSchema.optional(),
-    readers: AuroraReadersConfigOrFalseSchema.optional(),
-    backupRetention: BackupRetentionSchema.optional(),
-    preferredMaintenanceWindow: z.string().optional(),
-    monitoringInterval: MonitoringIntervalSchema.optional(),
-    snapshotIdentifier: z.string().optional(),
-    snapshotUsername: z.string().optional(),
-};
-const InstanceDatabaseGeneratorSchema = DatabaseGeneratorBaseSchema.extend(instanceSpecificFields).strict();
-const AuroraDatabaseGeneratorSchema = DatabaseGeneratorBaseSchema.extend(auroraSpecificFields).strict();
-const GlobalAuroraDatabaseGeneratorSchema = DatabaseGeneratorBaseSchema.extend(globalAuroraSpecificFields).strict();
-/**
- * Database generator schema using discriminated union.
- * This ensures type-specific fields are only allowed for the correct database type:
- * - Instance: instanceType, multiAz, readReplica
- * - Aurora: writer, readers, backupRetention
- * - GlobalAurora: primaryRegion (required!), secondaryRegions, enableGlobalWriteForwarding
- */
-export const DatabaseGeneratorSchema = z.discriminatedUnion("databaseType", [
-    InstanceDatabaseGeneratorSchema,
-    AuroraDatabaseGeneratorSchema,
-    GlobalAuroraDatabaseGeneratorSchema,
-]);
-// Base schema with required resourceName for UI
-const DatabaseGeneratorBaseSchemaFromUI = DatabaseGeneratorBaseSchema.extend({
-    resourceName: ResourceNameSchema,
-}).strict();
-/**
- * Stricter schema for UI-originated database creation.
- * Requires resourceName to prevent silent failures where
- * the generator falls back to a default name that may conflict.
- */
-const InstanceDatabaseGeneratorSchemaFromUI = DatabaseGeneratorBaseSchemaFromUI.extend(instanceSpecificFields).strict();
-const AuroraDatabaseGeneratorSchemaFromUI = DatabaseGeneratorBaseSchemaFromUI.extend(auroraSpecificFields).strict();
-const GlobalAuroraDatabaseGeneratorSchemaFromUI = DatabaseGeneratorBaseSchemaFromUI.extend(globalAuroraSpecificFields).strict();
-export const DatabaseGeneratorSchemaFromUI = z.discriminatedUnion("databaseType", [
-    InstanceDatabaseGeneratorSchemaFromUI,
-    AuroraDatabaseGeneratorSchemaFromUI,
-    GlobalAuroraDatabaseGeneratorSchemaFromUI,
-]);
-/**
- * Schema for adding RDS Proxy to an existing database.
- * Used by the `fjall add proxy` command.
- */
-export const AddProxyGeneratorSchema = z
-    .object({
-    appName: AppNameSchema,
-    databaseName: z.string().min(1, VALIDATION_MESSAGES.REQUIRED.DATABASE_NAME),
-    maxConnections: z
-        .number()
-        .int(VALIDATION_MESSAGES.MAX_CONNECTIONS.INTEGER)
-        .min(1, VALIDATION_MESSAGES.MAX_CONNECTIONS.MIN)
-        .max(100, VALIDATION_MESSAGES.MAX_CONNECTIONS.MAX)
-        .optional(),
-    maxIdleConnections: z
-        .number()
-        .int(VALIDATION_MESSAGES.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.INTEGER)
-        .min(0, VALIDATION_MESSAGES.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MIN)
-        .max(100, VALIDATION_MESSAGES.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MAX)
-        .optional(),
-    connectionBorrowTimeout: z
-        .number()
-        .int(VALIDATION_MESSAGES.PROXY_CONFIG.BORROW_TIMEOUT.INTEGER)
-        .min(1, VALIDATION_MESSAGES.PROXY_CONFIG.BORROW_TIMEOUT.MIN)
-        .max(3600, VALIDATION_MESSAGES.PROXY_CONFIG.BORROW_TIMEOUT.MAX)
-        .optional(),
-    requireTLS: z.boolean().optional(),
-    nameProvidedByFlag: z.boolean().optional(),
-})
-    .strict();
-// ─── DynamoDB schemas ────────────────────────────────────────────────────────
-const DYNAMODB_ATTRIBUTE_TYPES = ["S", "N", "B"];
-const DynamoDBKeySchema = z
-    .object({
-    name: z.string(),
-    type: z.enum(DYNAMODB_ATTRIBUTE_TYPES),
-})
-    .strict();
-/**
- * DynamoDB table resource plan schema (for OpenNext patterns)
- */
-export const DynamoDBResourcePlanSchema = z
-    .object({
-    name: ResourceNameSchema,
-    partitionKey: DynamoDBKeySchema,
-    sortKey: DynamoDBKeySchema.optional(),
-    globalSecondaryIndexes: z
-        .array(z
-        .object({
-        indexName: z.string(),
-        partitionKey: DynamoDBKeySchema,
-        sortKey: DynamoDBKeySchema.optional(),
-    })
-        .strict())
-        .optional(),
-    ttlAttribute: z.string().optional(),
-    stream: z.boolean().optional(),
-    // Round-trip preservation
-    variableName: z.string().optional(),
-    extraProperties: z.array(ExtraPropertySchema).optional(),
-})
-    .strict();
+import{z as o}from"zod";import{VALIDATION_PATTERNS as _,VALIDATION_MESSAGES as t}from"../validation/patterns.js";import{DATABASE_TYPES as I,VALID_MONITORING_INTERVALS as x,constIncludes as D}from"./constants.js";import{optionalOrDisabled as a,ResourceNameSchema as n,AppNameSchema as E,ExtraPropertySchema as N}from"./baseSchemas.js";import{RdsAlarmConfigSchema as M}from"./alarmSchemas.js";const i=o.number().int(t.BACKUP_RETENTION.INTEGER).min(1,t.BACKUP_RETENTION.MIN).max(35,t.BACKUP_RETENTION.MAX),c=o.number().int(t.MONITORING_INTERVAL.INTEGER).refine(e=>D(x,e),{message:t.MONITORING_INTERVAL.VALUES}),b=o.number().int(t.DATABASE.PORT.INTEGER).min(1024,t.DATABASE.PORT.MIN).max(65535,t.DATABASE.PORT.MAX),y=o.enum(I).describe(`Database type must be one of: ${I.join(", ")}`),h=o.object({maxConnections:o.number().int(t.MAX_CONNECTIONS.INTEGER).min(1,t.MAX_CONNECTIONS.MIN).max(100,t.MAX_CONNECTIONS.MAX).optional(),maxIdleConnections:o.number().int(t.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.INTEGER).min(0,t.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MIN).max(100,t.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MAX).optional(),connectionBorrowTimeout:o.number().int(t.PROXY_CONFIG.BORROW_TIMEOUT.INTEGER).min(1,t.PROXY_CONFIG.BORROW_TIMEOUT.MIN).max(3600,t.PROXY_CONFIG.BORROW_TIMEOUT.MAX).optional(),requireTLS:o.boolean().optional()}).strict().describe("RDS Proxy configuration"),f=o.object({instanceType:o.string().optional(),availabilityZone:o.string().optional()}).strict().describe("Read replica configuration"),G=o.object({automaticallyAfterDays:o.number().int(t.ROTATION.INTEGER).min(1,t.ROTATION.MIN).max(365,t.ROTATION.MAX).optional()}).strict().describe("Secret rotation configuration"),A=o.object({username:o.string().min(1,t.REQUIRED.USERNAME).max(63,t.USERNAME.MAX_LENGTH).optional(),secretRotation:G.optional()}).strict().describe("Database credentials configuration"),R=a(h),T=a(f),X=o.object({scaleWithWriter:o.boolean().optional(),enableDatabaseInsights:o.boolean().optional(),identifierSuffix:o.string().min(1,t.IDENTIFIER_SUFFIX.REQUIRED).max(50,t.IDENTIFIER_SUFFIX.MAX_LENGTH).optional(),availabilityZone:o.string().optional()}).strict().describe("Configuration for a single Aurora reader instance"),l=o.object({enableDatabaseInsights:o.boolean().optional(),identifierSuffix:o.string().min(1,t.IDENTIFIER_SUFFIX.REQUIRED).max(50,t.IDENTIFIER_SUFFIX.MAX_LENGTH).optional(),availabilityZone:o.string().optional()}).strict().describe("Configuration for Aurora writer instance"),U=o.object({count:o.number().int(t.READER.COUNT.INTEGER).min(0,t.READER.COUNT.MIN).max(15,t.READER.COUNT.MAX).optional(),instances:o.array(X).max(15,t.READER_INSTANCES.MAX).optional(),defaultEnableDatabaseInsights:o.boolean().optional()}).strict().refine(e=>!(e.count!==void 0&&e.instances!==void 0),{message:t.READER_INSTANCES.COUNT_OR_INSTANCES,path:["count"]}).describe("Aurora readers configuration"),p=a(U),F=o.object({awsManaged:o.literal(!0)}).strict(),P=o.object({useCMK:o.literal(!0)}).strict(),d=o.union([F,P]),B=o.object({mode:o.enum(["standard","advanced"]).optional(),encryptionKey:d.optional()}).strict().describe("Database Insights configuration"),g=a(B),O=o.object({storageKey:d.optional()}).strict().describe("Encryption configuration (DESTRUCTIVE to change storageKey)"),z=o.object({name:n,type:y,databaseName:o.string().min(1,t.REQUIRED.DATABASE_NAME),instanceType:o.string().optional(),allocatedStorage:o.number().optional(),multiAz:o.boolean().optional(),publiclyAccessible:o.boolean().optional(),databaseInsights:g.optional(),port:b.optional(),deletionProtection:o.boolean().optional(),proxy:R.optional(),credentials:A.optional(),readReplica:T.optional(),encryption:O.optional(),writer:l.optional(),readers:p.optional(),backupRetention:i.optional(),preferredMaintenanceWindow:o.string().optional(),monitoringInterval:c.optional(),primaryRegion:o.string().optional(),secondaryRegions:o.array(o.string()).optional(),globalClusterIdentifier:o.string().optional(),enableGlobalWriteForwarding:o.boolean().optional(),snapshotIdentifier:o.string().optional(),snapshotUsername:o.string().optional(),databaseEngine:o.enum(["postgresql","mysql"]).optional(),engineExpression:o.string().optional(),variableName:o.string().optional(),extraProperties:o.array(N).optional(),alarms:M.optional()}).strict(),r=o.object({appName:E,nameProvidedByFlag:o.boolean().optional(),databaseName:o.string().min(1,t.REQUIRED.DATABASE_NAME).max(63,t.MAX_LENGTH.DATABASE_NAME).regex(_.DATABASE_NAME,t.DATABASE_NAME),resourceName:n.optional(),connectionConfig:o.object({connectToCompute:o.array(o.string()).optional(),connectToServices:o.array(o.string()).optional()}).strict().optional(),databaseInsights:g.optional(),port:b.optional(),proxy:R.optional(),credentials:A.optional(),encryption:O.optional(),deletionProtection:o.boolean().optional()}).strict(),S={databaseType:o.literal("Instance"),instanceType:o.string().optional(),multiAz:o.boolean().optional(),readReplica:T.optional(),publiclyAccessible:o.boolean().optional(),backupRetention:i.optional(),allocatedStorage:o.number().optional(),snapshotIdentifier:o.string().optional(),snapshotUsername:o.string().optional()},u={databaseType:o.literal("Aurora"),writer:l.optional(),readers:p.optional(),backupRetention:i.optional(),preferredMaintenanceWindow:o.string().optional(),monitoringInterval:c.optional(),snapshotIdentifier:o.string().optional(),snapshotUsername:o.string().optional()},C={databaseType:o.literal("GlobalAurora"),primaryRegion:o.string().min(1,t.GLOBAL_AURORA.PRIMARY_REGION_REQUIRED),secondaryRegions:o.array(o.string()).optional(),globalClusterIdentifier:o.string().optional(),enableGlobalWriteForwarding:o.boolean().optional(),writer:l.optional(),readers:p.optional(),backupRetention:i.optional(),preferredMaintenanceWindow:o.string().optional(),monitoringInterval:c.optional(),snapshotIdentifier:o.string().optional(),snapshotUsername:o.string().optional()},L=r.extend(S).strict(),j=r.extend(u).strict(),Y=r.extend(C).strict(),Z=o.discriminatedUnion("databaseType",[L,j,Y]),m=r.extend({resourceName:n}).strict(),K=m.extend(S).strict(),W=m.extend(u).strict(),v=m.extend(C).strict(),$=o.discriminatedUnion("databaseType",[K,W,v]),J=o.object({appName:E,databaseName:o.string().min(1,t.REQUIRED.DATABASE_NAME),maxConnections:o.number().int(t.MAX_CONNECTIONS.INTEGER).min(1,t.MAX_CONNECTIONS.MIN).max(100,t.MAX_CONNECTIONS.MAX).optional(),maxIdleConnections:o.number().int(t.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.INTEGER).min(0,t.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MIN).max(100,t.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MAX).optional(),connectionBorrowTimeout:o.number().int(t.PROXY_CONFIG.BORROW_TIMEOUT.INTEGER).min(1,t.PROXY_CONFIG.BORROW_TIMEOUT.MIN).max(3600,t.PROXY_CONFIG.BORROW_TIMEOUT.MAX).optional(),requireTLS:o.boolean().optional(),nameProvidedByFlag:o.boolean().optional()}).strict(),w=["S","N","B"],s=o.object({name:o.string(),type:o.enum(w)}).strict(),oo=o.object({name:n,partitionKey:s,sortKey:s.optional(),globalSecondaryIndexes:o.array(o.object({indexName:o.string(),partitionKey:s,sortKey:s.optional()}).strict()).optional(),ttlAttribute:o.string().optional(),stream:o.boolean().optional(),variableName:o.string().optional(),extraProperties:o.array(N).optional()}).strict();export{J as AddProxyGeneratorSchema,X as AuroraReaderConfigSchema,p as AuroraReadersConfigOrFalseSchema,U as AuroraReadersConfigSchema,l as AuroraWriterConfigSchema,F as AwsManagedKeySchema,i as BackupRetentionSchema,A as CredentialsConfigSchema,P as CustomerManagedKeyMarkerSchema,Z as DatabaseGeneratorSchema,$ as DatabaseGeneratorSchemaFromUI,g as DatabaseInsightsConfigOrFalseSchema,B as DatabaseInsightsConfigSchema,b as DatabasePortSchema,z as DatabaseResourcePlanSchema,y as DatabaseTypeSchema,oo as DynamoDBResourcePlanSchema,O as EncryptionConfigSchema,d as EncryptionKeySpecSchema,c as MonitoringIntervalSchema,R as ProxyConfigOrFalseSchema,h as ProxyConfigSchema,T as ReadReplicaConfigOrFalseSchema,f as ReadReplicaConfigSchema,G as SecretRotationConfigSchema};