@gigadrive/network-config 5.1.0 → 5.3.0

package/dist/index.js

@@ -85,6 +85,7 @@ __export(src_exports, {
   dockerFunctionContainerName: () => dockerFunctionContainerName,
   filterFunctionsFromAssets: () => filterFunctionsFromAssets,
   generateConfig: () => generateConfig,
+  generatedSecret: () => generatedSecret,
   getFunctionSettings: () => getFunctionSettings,
   mergeWithFrameworkDefaults: () => mergeWithFrameworkDefaults,
   normalizeContainers: () => normalizeContainers,
@@ -1007,8 +1008,8 @@ var detectContainerProject = import_effect6.Effect.fn("detectContainerProject")(
 });
 
 // src/detection/detect-framework.ts
-var import_platform11 = require("@effect/platform");
-var import_effect17 = require("effect");
+var import_platform12 = require("@effect/platform");
+var import_effect18 = require("effect");
 
 // src/detection/detect-package-manager.ts
 var import_platform4 = require("@effect/platform");
@@ -1057,6 +1058,73 @@ var astro = {
   })
 };
 
+// src/detection/generated-secret.ts
+var generatedSecret = (format) => `{{gigadrive.secret:${format}}}`;
+
+// src/detection/frameworks/php-front-controller.ts
+var phpFrontControllerDefaults = ({
+  documentRoot,
+  writablePaths = [],
+  excludeFiles = [],
+  memory = 256,
+  environmentVariables = {}
+}) => {
+  const entrypoint = documentRoot === "." ? "index.php" : `${documentRoot}/index.php`;
+  return {
+    runtime: "php-84",
+    memory,
+    maxDuration: 30,
+    streaming: false,
+    commands: [],
+    entrypoint,
+    assetsDir: documentRoot,
+    excludeFiles: [".ddev", "node_modules/", ...excludeFiles],
+    routes: [{ source: "/*", destination: entrypoint }],
+    environmentVariables,
+    ...writablePaths.length > 0 ? { package: { writablePaths } } : {}
+  };
+};
+
+// src/detection/frameworks/cakephp.ts
+var cakephp = {
+  slug: "cakephp",
+  name: "CakePHP",
+  language: "php",
+  detectors: [{ matchPackage: "cakephp/cakephp" }, { path: "webroot/index.php" }],
+  priority: 80,
+  getDefaultConfig: () => phpFrontControllerDefaults({
+    documentRoot: "webroot",
+    // config/paths.php puts TMP and LOGS inside the project.
+    writablePaths: [
+      "tmp/cache/models",
+      "tmp/cache/persistent",
+      "tmp/cache/views",
+      "tmp/sessions",
+      "tmp/tests",
+      "logs"
+    ],
+    excludeFiles: ["tests/", "tmp/", "logs/"],
+    // config/app.php reads the salt from env; app_local.php is not committed.
+    environmentVariables: { SECURITY_SALT: generatedSecret("hex") }
+  })
+};
+
+// src/detection/frameworks/codeigniter.ts
+var codeigniter = {
+  slug: "codeigniter",
+  name: "CodeIgniter",
+  language: "php",
+  detectors: [{ matchPackage: "codeigniter4/framework" }, { path: "spark" }],
+  priority: 80,
+  getDefaultConfig: () => phpFrontControllerDefaults({
+    documentRoot: "public",
+    // WRITEPATH: the cache, file session and log handlers write below it.
+    writablePaths: ["writable/cache", "writable/debugbar", "writable/logs", "writable/session", "writable/uploads"],
+    excludeFiles: ["tests/", "writable/"],
+    environmentVariables: { CI_ENVIRONMENT: "production" }
+  })
+};
+
 // src/detection/frameworks/resolve-node-entrypoint.ts
 var import_platform5 = require("@effect/platform");
 var import_effect8 = require("effect");
@@ -1214,6 +1282,21 @@ var hono = {
   refineDefaultConfig: resolveNodeServerEntrypoint
 };
 
+// src/detection/frameworks/laminas.ts
+var laminas = {
+  slug: "laminas",
+  name: "Laminas MVC",
+  language: "php",
+  detectors: [{ matchPackage: "laminas/laminas-mvc" }, { path: "public/index.php" }],
+  priority: 80,
+  getDefaultConfig: () => phpFrontControllerDefaults({
+    documentRoot: "public",
+    // The merged-config and module-map caches of the skeleton.
+    writablePaths: ["data/cache"],
+    excludeFiles: ["test/", "data/cache/"]
+  })
+};
+
 // src/detection/frameworks/laravel.ts
 var laravel = {
   slug: "laravel",
@@ -1232,7 +1315,21 @@ var laravel = {
     populateAssetCache: true,
     excludeFiles: ["tests/", "storage/", ".ddev", "node_modules/"],
     routes: [{ source: "/*", destination: "public/index.php" }],
+    package: {
+      // storage/ is excluded, so the directories Laravel writes compiled
+      // views, file caches, sessions and logs to are created empty.
+      writablePaths: [
+        "bootstrap/cache",
+        "storage/app/public",
+        "storage/framework/cache/data",
+        "storage/framework/sessions",
+        "storage/framework/views",
+        "storage/logs"
+      ]
+    },
     environmentVariables: {
+      // Encrypts cookies and sessions; Laravel cannot serve a page without it.
+      APP_KEY: generatedSecret("laravel-app-key"),
       APP_NAME: "Laravel",
       APP_ENV: "production",
       APP_DEBUG: "false",
@@ -1240,11 +1337,29 @@ var laravel = {
       LOG_DEPRECATIONS_CHANNEL: "stderr",
       LOG_LEVEL: "debug",
       BROADCAST_DRIVER: "log",
-      SESSION_DRIVER: "cookie"
+      SESSION_DRIVER: "cookie",
+      // The skeleton defaults both to `database`, which needs a migrated database.
+      CACHE_STORE: "file",
+      QUEUE_CONNECTION: "sync"
     }
   })
 };
 
+// src/detection/frameworks/mezzio.ts
+var mezzio = {
+  slug: "mezzio",
+  name: "Mezzio",
+  language: "php",
+  detectors: [{ matchPackage: "mezzio/mezzio" }, { path: "public/index.php" }],
+  priority: 80,
+  getDefaultConfig: () => phpFrontControllerDefaults({
+    documentRoot: "public",
+    // config/config.php writes the merged config cache here.
+    writablePaths: ["data/cache"],
+    excludeFiles: ["test/", "data/cache/"]
+  })
+};
+
 // src/detection/frameworks/nestjs.ts
 var import_platform6 = require("@effect/platform");
 var import_effect9 = require("effect");
@@ -1848,6 +1963,43 @@ var nuxt = {
   })
 };
 
+// src/detection/frameworks/php.ts
+var import_platform10 = require("@effect/platform");
+var import_effect14 = require("effect");
+var COMPOSER_FILES = ["composer.json", "composer.lock"];
+var DOCUMENT_ROOTS = ["public", "web", "webroot", "public_html", "htdocs", "."];
+var refinePhpDocumentRoot = (defaults, projectFolder) => import_effect14.Effect.gen(function* () {
+  const fs = yield* import_platform10.FileSystem.FileSystem;
+  const pathService = yield* import_platform10.Path.Path;
+  for (const documentRoot of DOCUMENT_ROOTS) {
+    const frontController = pathService.join(projectFolder, documentRoot, "index.php");
+    if (yield* fs.exists(frontController).pipe(import_effect14.Effect.catchAll(() => import_effect14.Effect.succeed(false)))) {
+      return phpFrontControllerDefaults({ documentRoot, excludeFiles: COMPOSER_FILES });
+    }
+  }
+  return defaults;
+});
+var getDefaultConfig = () => phpFrontControllerDefaults({ documentRoot: ".", excludeFiles: COMPOSER_FILES });
+var frontControllerPath = (documentRoot) => documentRoot === "." ? "index.php" : `${documentRoot}/index.php`;
+var phpComposerProjects = DOCUMENT_ROOTS.map((documentRoot) => ({
+  slug: "php",
+  name: "PHP",
+  language: "php",
+  detectors: [{ path: "composer.json" }, { path: frontControllerPath(documentRoot) }],
+  priority: 7,
+  getDefaultConfig,
+  refineDefaultConfig: refinePhpDocumentRoot
+}));
+var phpSites = DOCUMENT_ROOTS.map((documentRoot) => ({
+  slug: "php-site",
+  name: "PHP",
+  language: "php",
+  detectors: [{ path: frontControllerPath(documentRoot) }],
+  priority: 6,
+  getDefaultConfig: () => ({ ...getDefaultConfig(), installCommand: "" }),
+  refineDefaultConfig: (defaults, projectFolder) => refinePhpDocumentRoot(defaults, projectFolder).pipe(import_effect14.Effect.map((refined) => ({ ...refined, installCommand: "" })))
+}));
+
 // src/detection/frameworks/remix.ts
 var remix = {
   slug: "remix",
@@ -1869,6 +2021,21 @@ var remix = {
   })
 };
 
+// src/detection/frameworks/slim.ts
+var slim = {
+  slug: "slim",
+  name: "Slim",
+  language: "php",
+  detectors: [{ matchPackage: "slim/slim" }, { path: "public/index.php" }],
+  priority: 75,
+  getDefaultConfig: () => phpFrontControllerDefaults({
+    documentRoot: "public",
+    // slim/slim-skeleton logs to logs/ and caches the container and routes in var/cache.
+    writablePaths: ["logs", "var/cache"],
+    excludeFiles: ["tests/", "logs/", "var/"]
+  })
+};
+
 // src/detection/frameworks/sveltekit.ts
 var sveltekit = {
   slug: "sveltekit",
@@ -1908,12 +2075,15 @@ var symfony = {
     assetsDir: "public",
     populateAssetCache: true,
     excludeFiles: ["tests/*", ".ddev", "var"],
-    symlinks: { var: "/tmp" },
     routes: [{ source: "/*", destination: "public/index.php" }],
+    // The kernel's cache and log directories. A symlink to /tmp used to stand
+    // in for them, which the build rejected as pointing outside the project.
+    package: { writablePaths: ["var/cache", "var/log"] },
     environmentVariables: {
       APP_ENV: "prod",
       APP_DEBUG: "false",
-      APP_SECRET: "please_change_this_value_in_your_settings",
+      // CSRF tokens, signed URLs and remember-me cookies.
+      APP_SECRET: generatedSecret("hex"),
       MESSENGER_TRANSPORT_DSN: "doctrine://default?auto_setup=0"
     }
   })
@@ -1939,6 +2109,22 @@ var vite = {
   })
 };
 
+// src/detection/frameworks/yii.ts
+var yii = {
+  slug: "yii",
+  name: "Yii 2",
+  language: "php",
+  detectors: [{ matchPackage: "yiisoft/yii2" }, { path: "web/index.php" }],
+  priority: 80,
+  getDefaultConfig: () => phpFrontControllerDefaults({
+    documentRoot: "web",
+    // @runtime holds cache, logs and sessions; the asset manager publishes
+    // bundles from vendor/ into web/assets when a page first uses them.
+    writablePaths: ["runtime", "web/assets"],
+    excludeFiles: ["tests/", "runtime/", "web/assets/"]
+  })
+};
+
 // src/detection/frameworks/index.ts
 var FRAMEWORK_DEFINITIONS = [
   nextjs,
@@ -1949,15 +2135,23 @@ var FRAMEWORK_DEFINITIONS = [
   astro,
   laravel,
   symfony,
+  cakephp,
+  codeigniter,
+  laminas,
+  mezzio,
+  yii,
+  slim,
   hono,
   elysia,
   fastify,
   express,
+  ...phpComposerProjects,
+  ...phpSites,
   vite
 ].sort((a, b) => b.priority - a.priority);
 
 // src/detection/generate-config.ts
-var import_effect14 = require("effect");
+var import_effect15 = require("effect");
 var getInstallCommand = (pm) => {
   switch (pm) {
     case "bun":
@@ -1973,11 +2167,16 @@ var getInstallCommand = (pm) => {
       return "npm install";
   }
 };
-var generateConfig = import_effect14.Effect.fn("generateConfig")(function* (framework, packageManager, projectFolder, refinedDefaults) {
+var COMPOSER_ROOT_FILES = /* @__PURE__ */ new Set(["composer.json", "composer.lock", "auth.json"]);
+var isPrivatePhpProjectFile = (projectPath) => {
+  const segments = projectPath.split("/").filter((segment) => segment !== "" && segment !== ".");
+  return segments.some((segment) => segment.startsWith(".")) || segments[0] === "vendor" || segments[0] === "node_modules" || segments.length === 1 && COMPOSER_ROOT_FILES.has(segments[0] ?? "");
+};
+var generateConfig = import_effect15.Effect.fn("generateConfig")(function* (framework, packageManager, projectFolder, refinedDefaults) {
   const defaults = refinedDefaults ?? framework.getDefaultConfig(packageManager);
   const installCmd = defaults.installCommand ?? getInstallCommand(packageManager);
-  const commands = [installCmd, ...defaults.commands];
-  yield* import_effect14.Effect.logDebug(`Generating config for ${framework.name}`, {
+  const commands = installCmd ? [installCmd, ...defaults.commands] : [...defaults.commands];
+  yield* import_effect15.Effect.logDebug(`Generating config for ${framework.name}`, {
     runtime: defaults.runtime,
     entrypoint: defaults.entrypoint,
     commands
@@ -2019,6 +2218,7 @@ var generateConfig = import_effect14.Effect.fn("generateConfig")(function* (fram
     if (assetsDir && !defaults.assetPaths && !defaults.assetPrefixes && !defaults.assetManifests) {
       for (const file of yield* collectAssetFiles(projectFolder, assetsDir)) {
         if (framework.language === "php" && /\.(php|phtml|phar)$/i.test(file)) continue;
+        if (framework.language === "php" && isPrivatePhpProjectFile(`${assetsDir}/${file}`)) continue;
         paths.push(`${assetsDir}/${file}`);
         if (!servesDirectoryIndexes || file in overrides) continue;
         if (file === "index.html") {
@@ -2042,31 +2242,31 @@ var generateConfig = import_effect14.Effect.fn("generateConfig")(function* (fram
 });
 
 // src/detection/read-dependencies.ts
-var import_platform10 = require("@effect/platform");
-var import_effect16 = require("effect");
+var import_platform11 = require("@effect/platform");
+var import_effect17 = require("effect");
 
 // src/detection/types.ts
-var import_effect15 = require("effect");
-var ManifestNotFoundError = class extends import_effect15.Schema.TaggedError()("ManifestNotFoundError", {
-  message: import_effect15.Schema.String,
-  filePath: import_effect15.Schema.String
+var import_effect16 = require("effect");
+var ManifestNotFoundError = class extends import_effect16.Schema.TaggedError()("ManifestNotFoundError", {
+  message: import_effect16.Schema.String,
+  filePath: import_effect16.Schema.String
 }) {
 };
-var ManifestReadError = class extends import_effect15.Schema.TaggedError()("ManifestReadError", {
-  message: import_effect15.Schema.String,
-  filePath: import_effect15.Schema.String
+var ManifestReadError = class extends import_effect16.Schema.TaggedError()("ManifestReadError", {
+  message: import_effect16.Schema.String,
+  filePath: import_effect16.Schema.String
 }) {
 };
-var ManifestParseError = class extends import_effect15.Schema.TaggedError()("ManifestParseError", {
-  message: import_effect15.Schema.String,
-  filePath: import_effect15.Schema.String
+var ManifestParseError = class extends import_effect16.Schema.TaggedError()("ManifestParseError", {
+  message: import_effect16.Schema.String,
+  filePath: import_effect16.Schema.String
 }) {
 };
-var FrameworkNotDetectedError = class extends import_effect15.Schema.TaggedError()(
+var FrameworkNotDetectedError = class extends import_effect16.Schema.TaggedError()(
   "FrameworkNotDetectedError",
   {
-    message: import_effect15.Schema.String,
-    directory: import_effect15.Schema.String
+    message: import_effect16.Schema.String,
+    directory: import_effect16.Schema.String
   }
 ) {
 };
@@ -2076,25 +2276,25 @@ var MANIFEST_CONFIG = {
   node: { file: "package.json", depKeys: ["dependencies", "devDependencies"] },
   php: { file: "composer.json", depKeys: ["require", "require-dev"] }
 };
-var readManifest = import_effect16.Effect.fn("readManifest")(function* (filePath) {
-  const fs = yield* import_platform10.FileSystem.FileSystem;
-  const exists = yield* fs.exists(filePath).pipe(import_effect16.Effect.catchAll(() => import_effect16.Effect.succeed(false)));
+var readManifest = import_effect17.Effect.fn("readManifest")(function* (filePath) {
+  const fs = yield* import_platform11.FileSystem.FileSystem;
+  const exists = yield* fs.exists(filePath).pipe(import_effect17.Effect.catchAll(() => import_effect17.Effect.succeed(false)));
   if (!exists) {
-    return yield* import_effect16.Effect.fail(new ManifestNotFoundError({ message: "Manifest not found", filePath }));
+    return yield* import_effect17.Effect.fail(new ManifestNotFoundError({ message: "Manifest not found", filePath }));
   }
-  const content = yield* fs.readFileString(filePath).pipe(import_effect16.Effect.mapError(() => new ManifestReadError({ message: "Failed to read manifest", filePath })));
-  const parsed = yield* import_effect16.Effect.try({
+  const content = yield* fs.readFileString(filePath).pipe(import_effect17.Effect.mapError(() => new ManifestReadError({ message: "Failed to read manifest", filePath })));
+  const parsed = yield* import_effect17.Effect.try({
     try: () => JSON.parse(content),
     catch: () => new ManifestParseError({ message: "Failed to parse manifest JSON", filePath })
   });
   return parsed;
 });
-var readDependencies = import_effect16.Effect.fn("readDependencies")(function* (projectFolder, language) {
-  const pathService = yield* import_platform10.Path.Path;
+var readDependencies = import_effect17.Effect.fn("readDependencies")(function* (projectFolder, language) {
+  const pathService = yield* import_platform11.Path.Path;
   const config = MANIFEST_CONFIG[language];
   const filePath = pathService.join(projectFolder, config.file);
   const manifest = yield* readManifest(filePath).pipe(
-    import_effect16.Effect.catchTag("ManifestNotFoundError", () => import_effect16.Effect.succeed(null))
+    import_effect17.Effect.catchTag("ManifestNotFoundError", () => import_effect17.Effect.succeed(null))
   );
   if (!manifest) {
     return /* @__PURE__ */ new Set();
@@ -2112,9 +2312,9 @@ var readDependencies = import_effect16.Effect.fn("readDependencies")(function* (
 });
 
 // src/detection/detect-framework.ts
-var matchesDetectionItem = import_effect17.Effect.fn("matchesDetectionItem")(function* (item, projectFolder, framework, cachedReadDeps) {
-  const fs = yield* import_platform11.FileSystem.FileSystem;
-  const pathService = yield* import_platform11.Path.Path;
+var matchesDetectionItem = import_effect18.Effect.fn("matchesDetectionItem")(function* (item, projectFolder, framework, cachedReadDeps) {
+  const fs = yield* import_platform12.FileSystem.FileSystem;
+  const pathService = yield* import_platform12.Path.Path;
   if (item.matchPackage != null) {
     const deps = yield* cachedReadDeps(`${projectFolder}\0${framework.language}`);
     if (!deps.has(item.matchPackage)) {
@@ -2123,12 +2323,12 @@ var matchesDetectionItem = import_effect17.Effect.fn("matchesDetectionItem")(fun
   }
   if (item.path != null) {
     const filePath = pathService.join(projectFolder, item.path);
-    const exists = yield* fs.exists(filePath).pipe(import_effect17.Effect.catchAll(() => import_effect17.Effect.succeed(false)));
+    const exists = yield* fs.exists(filePath).pipe(import_effect18.Effect.catchAll(() => import_effect18.Effect.succeed(false)));
     if (!exists) {
       return false;
     }
     if (item.matchContent != null) {
-      const content = yield* fs.readFileString(filePath).pipe(import_effect17.Effect.catchAll(() => import_effect17.Effect.succeed("")));
+      const content = yield* fs.readFileString(filePath).pipe(import_effect18.Effect.catchAll(() => import_effect18.Effect.succeed("")));
       let regexMatch = false;
       try {
         regexMatch = new RegExp(item.matchContent).test(content);
@@ -2141,7 +2341,7 @@ var matchesDetectionItem = import_effect17.Effect.fn("matchesDetectionItem")(fun
   }
   return true;
 });
-var matchesFramework = import_effect17.Effect.fn("matchesFramework")(function* (framework, projectFolder, cachedReadDeps) {
+var matchesFramework = import_effect18.Effect.fn("matchesFramework")(function* (framework, projectFolder, cachedReadDeps) {
   for (const detector of framework.detectors) {
     const matches = yield* matchesDetectionItem(detector, projectFolder, framework, cachedReadDeps);
     if (!matches) {
@@ -2150,9 +2350,9 @@ var matchesFramework = import_effect17.Effect.fn("matchesFramework")(function* (
   }
   return true;
 });
-var detectFramework = import_effect17.Effect.fn("detectFramework")(function* (projectFolder) {
-  yield* import_effect17.Effect.logDebug(`Detecting framework in ${projectFolder}`);
-  const cachedReadDeps = yield* import_effect17.Effect.cachedFunction((key) => {
+var detectFramework = import_effect18.Effect.fn("detectFramework")(function* (projectFolder) {
+  yield* import_effect18.Effect.logDebug(`Detecting framework in ${projectFolder}`);
+  const cachedReadDeps = yield* import_effect18.Effect.cachedFunction((key) => {
     const sepIndex = key.lastIndexOf("\0");
     const folder = key.slice(0, sepIndex);
     const language = key.slice(sepIndex + 1);
@@ -2161,7 +2361,7 @@ var detectFramework = import_effect17.Effect.fn("detectFramework")(function* (pr
   for (const framework of FRAMEWORK_DEFINITIONS) {
     const matches = yield* matchesFramework(framework, projectFolder, cachedReadDeps);
     if (matches) {
-      yield* import_effect17.Effect.log(`Detected framework: ${framework.name}`, { slug: framework.slug });
+      yield* import_effect18.Effect.log(`Detected framework: ${framework.name}`, { slug: framework.slug });
       const detectedPackageManager = yield* detectPackageManager(projectFolder);
       const packageManager = framework.language === "php" ? "composer" : detectedPackageManager;
       const defaults = framework.getDefaultConfig(packageManager);
@@ -2170,7 +2370,7 @@ var detectFramework = import_effect17.Effect.fn("detectFramework")(function* (pr
       return { framework, packageManager, config };
     }
   }
-  return yield* import_effect17.Effect.fail(
+  return yield* import_effect18.Effect.fail(
     new FrameworkNotDetectedError({
       message: `No framework detected in project directory`,
       directory: projectFolder
@@ -2179,9 +2379,9 @@ var detectFramework = import_effect17.Effect.fn("detectFramework")(function* (pr
 });
 
 // src/detection/merge-config.ts
-var import_effect18 = require("effect");
-var mergeWithFrameworkDefaults = import_effect18.Effect.fn("mergeWithFrameworkDefaults")(function* (userConfig, frameworkConfig) {
-  yield* import_effect18.Effect.logDebug("Merging user config with framework defaults");
+var import_effect19 = require("effect");
+var mergeWithFrameworkDefaults = import_effect19.Effect.fn("mergeWithFrameworkDefaults")(function* (userConfig, frameworkConfig) {
+  yield* import_effect19.Effect.logDebug("Merging user config with framework defaults");
   const userHasAssets = (userConfig.assets?.paths?.length ?? 0) > 0 || (userConfig.assets?.prefixes?.length ?? 0) > 0 || (userConfig.assets?.manifests?.length ?? 0) > 0;
   const isContainer = (entrypoint) => entrypoint.runtime === CONTAINER_RUNTIME;
   const userFileFunctions = userConfig.entrypoints.filter((entrypoint) => !isContainer(entrypoint));
@@ -2222,23 +2422,23 @@ var filterFunctionsFromAssets = (config) => {
 };
 
 // src/parse-config.ts
-var import_effect24 = require("effect");
+var import_effect25 = require("effect");
 
 // src/services/raw-config-reader.ts
-var import_platform12 = require("@effect/platform");
-var import_effect20 = require("effect");
+var import_platform13 = require("@effect/platform");
+var import_effect21 = require("effect");
 var import_yaml2 = require("yaml");
 
 // src/services/config-module-loader.ts
-var import_effect19 = require("effect");
+var import_effect20 = require("effect");
 var import_jiti = require("jiti");
 var MISSING_DEFAULT_EXPORT = /* @__PURE__ */ Symbol("MissingDefaultExport");
 var STRICT_DEFAULT_EXPORT_EXTENSIONS = [".ts", ".mts", ".mjs"];
-var ConfigModuleLoader = class extends import_effect19.Effect.Service()("ConfigModuleLoader", {
-  effect: import_effect19.Effect.gen(function* () {
-    const loadConfigModule = import_effect19.Effect.fn("ConfigModuleLoader.loadConfigModule")(function* (filePath) {
+var ConfigModuleLoader = class extends import_effect20.Effect.Service()("ConfigModuleLoader", {
+  effect: import_effect20.Effect.gen(function* () {
+    const loadConfigModule = import_effect20.Effect.fn("ConfigModuleLoader.loadConfigModule")(function* (filePath) {
       const extension = filePath.slice(filePath.lastIndexOf(".")).toLowerCase();
-      const mod = yield* import_effect19.Effect.tryPromise({
+      const mod = yield* import_effect20.Effect.tryPromise({
         try: async () => {
           const jiti = (0, import_jiti.createJiti)(filePath, { fsCache: false, interopDefault: true, moduleCache: false });
           const namespace = await jiti.import(filePath);
@@ -2257,7 +2457,7 @@ var ConfigModuleLoader = class extends import_effect19.Effect.Service()("ConfigM
         })
       });
       if (mod === MISSING_DEFAULT_EXPORT) {
-        return yield* import_effect19.Effect.fail(
+        return yield* import_effect20.Effect.fail(
           new ConfigModuleLoadError({
             message: `Config module at ${filePath} does not have a default export. Export the config object as the default export (or via module.exports for CommonJS files), optionally wrapped in defineConfig.`,
             filePath
@@ -2265,7 +2465,7 @@ var ConfigModuleLoader = class extends import_effect19.Effect.Service()("ConfigM
         );
       }
       if (typeof mod === "function") {
-        return yield* import_effect19.Effect.fail(
+        return yield* import_effect20.Effect.fail(
           new ConfigModuleLoadError({
             message: `Config module at ${filePath} default-exports a function; config factories are not supported. Export a config object instead (optionally wrapped in defineConfig).`,
             filePath
@@ -2273,7 +2473,7 @@ var ConfigModuleLoader = class extends import_effect19.Effect.Service()("ConfigM
         );
       }
       if (typeof mod !== "object" || mod === null || Array.isArray(mod)) {
-        return yield* import_effect19.Effect.fail(
+        return yield* import_effect20.Effect.fail(
           new ConfigModuleLoadError({
             message: `Config module at ${filePath} must default-export a config object.`,
             filePath
@@ -2303,36 +2503,36 @@ var ALLOWED_CONFIG_NAMES = [
   "nebula.json"
 ];
 var MODULE_EXTENSIONS = [".ts", ".mts", ".cts", ".js", ".mjs", ".cjs"];
-var RawConfigReader = class extends import_effect20.Effect.Service()("RawConfigReader", {
+var RawConfigReader = class extends import_effect21.Effect.Service()("RawConfigReader", {
   dependencies: [ConfigModuleLoader.Default],
-  effect: import_effect20.Effect.gen(function* () {
-    const fs = yield* import_platform12.FileSystem.FileSystem;
-    const pathService = yield* import_platform12.Path.Path;
+  effect: import_effect21.Effect.gen(function* () {
+    const fs = yield* import_platform13.FileSystem.FileSystem;
+    const pathService = yield* import_platform13.Path.Path;
     const moduleLoader = yield* ConfigModuleLoader;
-    const findConfig = import_effect20.Effect.fn("RawConfigReader.findConfig")(function* (projectFolder) {
+    const findConfig = import_effect21.Effect.fn("RawConfigReader.findConfig")(function* (projectFolder) {
       for (const name of ALLOWED_CONFIG_NAMES) {
         const filePath = pathService.join(projectFolder, name);
-        const exists = yield* fs.exists(filePath).pipe(import_effect20.Effect.catchAll(() => import_effect20.Effect.succeed(false)));
+        const exists = yield* fs.exists(filePath).pipe(import_effect21.Effect.catchAll(() => import_effect21.Effect.succeed(false)));
         if (exists) {
           return filePath;
         }
       }
       return null;
     });
-    const readRawConfig = import_effect20.Effect.fn("RawConfigReader.readRawConfig")(function* (filePath, options) {
-      const exists = yield* fs.exists(filePath).pipe(import_effect20.Effect.catchAll(() => import_effect20.Effect.succeed(false)));
+    const readRawConfig = import_effect21.Effect.fn("RawConfigReader.readRawConfig")(function* (filePath, options) {
+      const exists = yield* fs.exists(filePath).pipe(import_effect21.Effect.catchAll(() => import_effect21.Effect.succeed(false)));
       if (!exists) {
-        return yield* import_effect20.Effect.fail(
+        return yield* import_effect21.Effect.fail(
           new ConfigFileNotFoundError({ message: `Config file not found at ${filePath}`, filePath })
         );
       }
       const fileContents = yield* fs.readFileString(filePath).pipe(
-        import_effect20.Effect.mapError(
+        import_effect21.Effect.mapError(
           () => new ConfigFileParseError({ message: `Failed to read config file at ${filePath}`, filePath })
         )
       );
       if (fileContents.length === 0) {
-        return yield* import_effect20.Effect.fail(
+        return yield* import_effect21.Effect.fail(
           new ConfigFileEmptyError({ message: `Config file is empty at ${filePath}`, filePath })
         );
       }
@@ -2348,7 +2548,7 @@ var RawConfigReader = class extends import_effect20.Effect.Service()("RawConfigR
             parsed = (0, import_yaml2.parse)(fileContents);
           }
         } catch (error) {
-          return yield* import_effect20.Effect.fail(
+          return yield* import_effect21.Effect.fail(
             new ConfigFileParseError({
               message: `Failed to parse config file at ${filePath}: ${error instanceof Error ? error.message : "Unknown error"}`,
               filePath,
@@ -2358,21 +2558,21 @@ var RawConfigReader = class extends import_effect20.Effect.Service()("RawConfigR
         }
       }
       if (parsed == null) {
-        return yield* import_effect20.Effect.fail(
+        return yield* import_effect21.Effect.fail(
           new ConfigFileParseError({ message: `Config file could not be parsed at ${filePath}`, filePath })
         );
       }
       if (!options?.disableVersionCheck && typeof parsed.version !== "number") {
-        return yield* import_effect20.Effect.fail(
+        return yield* import_effect21.Effect.fail(
           new ConfigVersionError({ message: `Config file is missing version at ${filePath}`, filePath })
         );
       }
       return parsed;
     });
     const readConfigFile = (configFilePath) => readRawConfig(configFilePath, { disableVersionCheck: true }).pipe(
-      import_effect20.Effect.map((parsed) => parsed),
-      import_effect20.Effect.catchTag("ConfigFileNotFoundError", () => import_effect20.Effect.succeed(null)),
-      import_effect20.Effect.withSpan("RawConfigReader.readConfigFile")
+      import_effect21.Effect.map((parsed) => parsed),
+      import_effect21.Effect.catchTag("ConfigFileNotFoundError", () => import_effect21.Effect.succeed(null)),
+      import_effect21.Effect.withSpan("RawConfigReader.readConfigFile")
     );
     return { findConfig, readRawConfig, readConfigFile };
   })
@@ -2382,17 +2582,17 @@ var RawConfigReader = class extends import_effect20.Effect.Service()("RawConfigR
 // src/services/schema-validator.ts
 var import_ajv = __toESM(require("ajv"));
 var import_ajv_formats = __toESM(require("ajv-formats"));
-var import_effect21 = require("effect");
-var SchemaValidator = class extends import_effect21.Effect.Service()("SchemaValidator", {
-  effect: import_effect21.Effect.gen(function* () {
+var import_effect22 = require("effect");
+var SchemaValidator = class extends import_effect22.Effect.Service()("SchemaValidator", {
+  effect: import_effect22.Effect.gen(function* () {
     const ajv = new import_ajv.default();
     (0, import_ajv_formats.default)(ajv);
-    const validate = import_effect21.Effect.fn("SchemaValidator.validate")(function* (config, schema, filePath) {
+    const validate = import_effect22.Effect.fn("SchemaValidator.validate")(function* (config, schema, filePath) {
       const compiledValidate = ajv.compile(schema);
       const valid = compiledValidate(config);
       if (!valid) {
         const errors = compiledValidate.errors?.map((e) => `${e.instancePath || "/"} ${e.message ?? ""}`.trim()) ?? [];
-        return yield* import_effect21.Effect.fail(
+        return yield* import_effect22.Effect.fail(
           new ConfigSchemaValidationError({
             message: `Config file at ${filePath} is invalid: ${ajv.errorsText(compiledValidate.errors)}`,
             filePath,
@@ -2448,7 +2648,7 @@ var getFilesForPattern = async (pattern, projectFolder, excludeFiles = []) => {
 };
 
 // src/services/v4-config-parser.ts
-var import_effect22 = require("effect");
+var import_effect23 = require("effect");
 var import_minimatch2 = require("minimatch");
 var import_node_path2 = require("path");
 var import_safe_regex2 = __toESM(require("safe-regex2"));
@@ -2599,7 +2799,7 @@ var mapRoute = (route, entrypoints) => ({
   negativeRequirements: route.missing,
   status: route.statusCode
 });
-var parseEntrypoints = import_effect22.Effect.fn("parseEntrypoints")(function* (config, projectFolder) {
+var parseEntrypoints = import_effect23.Effect.fn("parseEntrypoints")(function* (config, projectFolder) {
   const entrypoints = [];
   const dockerFunctions = [];
   if (config.functions == null) return { entrypoints, dockerFunctions };
@@ -2610,7 +2810,7 @@ var parseEntrypoints = import_effect22.Effect.fn("parseEntrypoints")(function* (
         functionPath: fnPath
       });
     }
-    const matchedFiles = yield* import_effect22.Effect.tryPromise({
+    const matchedFiles = yield* import_effect23.Effect.tryPromise({
       try: () => getFilesForPattern(fnPath, projectFolder, func.excludeFiles),
       catch: (error) => new FunctionConfigError({
         message: `Failed to resolve files for function pattern '${fnPath}': ${error instanceof Error ? error.message : String(error)}`,
@@ -2685,13 +2885,13 @@ var parseEntrypoints = import_effect22.Effect.fn("parseEntrypoints")(function* (
   }
   return { entrypoints, dockerFunctions };
 });
-var collectAssets = import_effect22.Effect.fn("collectAssets")(function* (config, projectFolder) {
+var collectAssets = import_effect23.Effect.fn("collectAssets")(function* (config, projectFolder) {
   if (config.assets == null) return [];
   const assetNames = yield* collectAssetFiles(projectFolder, config.assets);
   return assetNames.filter((assetName) => getFunctionSettings(`${config.assets}/${assetName}`, config) == null).map((assetName) => `${config.assets}/${assetName}`);
 });
 var reservedRuntimePorts = (entrypoint) => entrypoint.runtime === CONTAINER_RUNTIME ? [] : entrypoint.runtime.startsWith("php-") ? [8080, 9e3] : [8080];
-var parseContainers = import_effect22.Effect.fn("parseContainers")(function* (config, projectFolder, fileEntrypoints, dockerFunctions) {
+var parseContainers = import_effect23.Effect.fn("parseContainers")(function* (config, projectFolder, fileEntrypoints, dockerFunctions) {
   const warnings = [];
   let containers = {};
   if (config.compose != null) {
@@ -2724,16 +2924,16 @@ var parseContainers = import_effect22.Effect.fn("parseContainers")(function* (co
   }
   return { ...result, warnings };
 });
-var V4ConfigParser = class extends import_effect22.Effect.Service()("V4ConfigParser", {
+var V4ConfigParser = class extends import_effect23.Effect.Service()("V4ConfigParser", {
   accessors: true,
-  effect: import_effect22.Effect.succeed({
+  effect: import_effect23.Effect.succeed({
     /**
      * Parses a ConfigV4 into a NormalizedConfig.
      *
      * @param config - The raw V4 config object
      * @param projectFolder - Absolute path to the project root
      */
-    parse: import_effect22.Effect.fn("V4ConfigParser.parse")(function* (config, projectFolder) {
+    parse: import_effect23.Effect.fn("V4ConfigParser.parse")(function* (config, projectFolder) {
       const { entrypoints: fileEntrypoints, dockerFunctions } = yield* parseEntrypoints(config, projectFolder);
       const containers = yield* parseContainers(config, projectFolder, fileEntrypoints, dockerFunctions);
       const entrypoints = [...fileEntrypoints, ...containers.entrypoints];
@@ -2775,7 +2975,7 @@ var V4ConfigParser = class extends import_effect22.Effect.Service()("V4ConfigPar
 };
 
 // src/services/vercel-build-output-parser.ts
-var import_platform13 = require("@effect/platform");
+var import_platform14 = require("@effect/platform");
 
 // ../commons/src/deep-merge.ts
 var deepMerge = (target, ...partials) => {
@@ -2804,7 +3004,7 @@ var deepMerge = (target, ...partials) => {
 };
 
 // src/services/vercel-build-output-parser.ts
-var import_effect23 = require("effect");
+var import_effect24 = require("effect");
 
 // src/build-output-v3/determine-repo-root.ts
 var import_path = __toESM(require("path"));
@@ -2900,11 +3100,11 @@ var translateVercelRuntime = (runtime) => {
 var CONFIG_PATH = ".vercel/output/config.json";
 var FUNCTIONS_FOLDER = ".vercel/output/functions";
 var FUNCTION_CONFIGS_PATTERN = `${FUNCTIONS_FOLDER}/**/*.func/.vc-config.json`;
-var VercelBuildOutputParser = class extends import_effect23.Effect.Service()("VercelBuildOutputParser", {
-  effect: import_effect23.Effect.gen(function* () {
+var VercelBuildOutputParser = class extends import_effect24.Effect.Service()("VercelBuildOutputParser", {
+  effect: import_effect24.Effect.gen(function* () {
     const rawConfigReader = yield* RawConfigReader;
-    const pathService = yield* import_platform13.Path.Path;
-    const parse = import_effect23.Effect.fn("VercelBuildOutputParser.parse")(function* (parseResult, projectFolder) {
+    const pathService = yield* import_platform14.Path.Path;
+    const parse = import_effect24.Effect.fn("VercelBuildOutputParser.parse")(function* (parseResult, projectFolder) {
       const config = yield* rawConfigReader.readConfigFile(pathService.join(projectFolder, CONFIG_PATH));
       if (!config || typeof config.version !== "number" || config.version < 3) {
         return parseResult;
@@ -2916,8 +3116,8 @@ var VercelBuildOutputParser = class extends import_effect23.Effect.Service()("Ve
       merged.regions = [...new Set(merged.regions)];
       return merged;
     });
-    const loadFunctions = import_effect23.Effect.fn("VercelBuildOutputParser.loadFunctions")(function* (config, parseResult, projectFolder) {
-      const functionConfigs = yield* import_effect23.Effect.tryPromise({
+    const loadFunctions = import_effect24.Effect.fn("VercelBuildOutputParser.loadFunctions")(function* (config, parseResult, projectFolder) {
+      const functionConfigs = yield* import_effect24.Effect.tryPromise({
         try: () => getFilesForPattern(FUNCTION_CONFIGS_PATTERN, projectFolder),
         catch: (error) => new ConfigFileParseError({
           message: `Failed to scan for function configs: ${error instanceof Error ? error.message : String(error)}`,
@@ -3834,7 +4034,7 @@ var schema_default = {
 };
 
 // src/parse-config.ts
-var parseConfigRaw = import_effect24.Effect.fn("parseConfigRaw")(function* (filePath, projectFolder) {
+var parseConfigRaw = import_effect25.Effect.fn("parseConfigRaw")(function* (filePath, projectFolder) {
   const rawReader = yield* RawConfigReader;
   const validator = yield* SchemaValidator;
   const v4Parser = yield* V4ConfigParser;
@@ -3845,7 +4045,7 @@ var parseConfigRaw = import_effect24.Effect.fn("parseConfigRaw")(function* (file
   };
   const schema = schemaMap[version];
   if (!schema) {
-    return yield* import_effect24.Effect.fail(
+    return yield* import_effect25.Effect.fail(
       new ConfigVersionError({
         message: `Config file at ${filePath} has an unsupported version: ${version}`,
         filePath,
@@ -3856,11 +4056,11 @@ var parseConfigRaw = import_effect24.Effect.fn("parseConfigRaw")(function* (file
   yield* validator.validate(parsed, schema, filePath);
   return yield* v4Parser.parse(parsed, projectFolder);
 });
-var parseConfig = import_effect24.Effect.fn("parseConfig")(function* (filePath, projectFolder) {
+var parseConfig = import_effect25.Effect.fn("parseConfig")(function* (filePath, projectFolder) {
   const parseResult = yield* parseConfigRaw(filePath, projectFolder);
   return yield* postProcessConfig(parseResult, projectFolder);
 });
-var postProcessConfig = import_effect24.Effect.fn("postProcessConfig")(function* (config, projectFolder) {
+var postProcessConfig = import_effect25.Effect.fn("postProcessConfig")(function* (config, projectFolder) {
   const vercelParser = yield* VercelBuildOutputParser;
   let result = yield* vercelParser.parse(config, projectFolder);
   const hasAssets = (result.assets?.paths?.length ?? 0) > 0 || (result.assets?.prefixes?.length ?? 0) > 0 || (result.assets?.manifests?.length ?? 0) > 0;
@@ -3917,14 +4117,14 @@ var RUNTIME_DEFINITIONS = [
 var AVAILABLE_RUNTIMES = [...RUNTIME_DEFINITIONS];
 
 // src/services/index.ts
-var import_effect25 = require("effect");
-var BaseLayers = import_effect25.Layer.mergeAll(
+var import_effect26 = require("effect");
+var BaseLayers = import_effect26.Layer.mergeAll(
   ConfigModuleLoader.Default,
   RawConfigReader.Default,
   SchemaValidator.Default,
   V4ConfigParser.Default
 );
-var NetworkConfigLive = VercelBuildOutputParser.Default.pipe(import_effect25.Layer.provideMerge(BaseLayers));
+var NetworkConfigLive = VercelBuildOutputParser.Default.pipe(import_effect26.Layer.provideMerge(BaseLayers));
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   ALLOWED_CONFIG_NAMES,
@@ -3982,6 +4182,7 @@ var NetworkConfigLive = VercelBuildOutputParser.Default.pipe(import_effect25.Lay
   dockerFunctionContainerName,
   filterFunctionsFromAssets,
   generateConfig,
+  generatedSecret,
   getFunctionSettings,
   mergeWithFrameworkDefaults,
   normalizeContainers,