@ninedeploy/schemas 0.10.6 → 0.16.1

package/dist/service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,WAAW;;;;EAAuC,CAAC;AAChE,eAAO,MAAM,SAAS;;;;;;EAAmE,CAAC;AAK1F,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA0FxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D;;;4EAG4E;AAC5E,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA2DxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,2EAA2E;AAC3E,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAC/D,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE/D,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA8ElB,CAAC;AACH,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,OAAO,CAAC,CAAC;AAG9C,eAAO,MAAM,YAAY;;;;;;;;;;;;;;iBAQvB,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAE7D,eAAO,MAAM,MAAM;;;;;;;;;;iBAUjB,CAAC;AACH,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,CAAC;AAE5C,eAAO,MAAM,aAAa;;iBAExB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;iBAUrB,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAEpD;;;;;;;GAOG;AACH,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;iBAapB,CAAC;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAC;AAElD,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;iBAQxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAG1D,eAAO,MAAM,YAAY;;;;;;;;;;iBAiBvB,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAE7D,uDAAuD;AACvD,eAAO,MAAM,WAAW;;;;;;;;iBAQtB,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEtD,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;iBAejB,CAAC;AACH,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,CAAC;AAG5C,eAAO,MAAM,aAAa;;;iBAOxB,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE/D,eAAO,MAAM,OAAO;;;;;;;;iBAQlB,CAAC;AACH,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,OAAO,CAAC,CAAC;AAE9C,8EAA8E;AAC9E,eAAO,MAAM,cAAc;;;;;;;;;iBAAyC,CAAC;AACrE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAG5D,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;iBAWzB,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEjE,eAAO,MAAM,aAAa;;;;iBAIxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;iBAmB1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D;;uEAEuE;AACvE,eAAO,MAAM,gBAAgB;;;;iBAI3B,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAErE,eAAO,MAAM,UAAU;;;;;;;;;iBAKrB,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAGpD,eAAO,MAAM,YAAY;;;;;iBAKvB,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAE7D,4EAA4E;AAC5E,eAAO,MAAM,SAAS;;;;iBAIpB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAC;AAEvD,eAAO,MAAM,eAAe;;;;;;;iBAI1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,eAAO,MAAM,MAAM;;;;;iBAKjB,CAAC;AACH,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,CAAC;AAO5C;;;mBAGmB;AACnB,eAAO,MAAM,6BAA6B;;;;;;;iBAatC,CAAC;AACL,MAAM,MAAM,kCAAkC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAE/F,kFAAkF;AAClF,eAAO,MAAM,6BAA6B;;;iBAOtC,CAAC;AACL,MAAM,MAAM,kCAAkC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAE/F,2DAA2D;AAC3D,eAAO,MAAM,uBAAuB;;;;;;;;iBAQlC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAG9E,eAAO,MAAM,SAAS;;;;iBAMpB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAC;AAGvD,eAAO,MAAM,QAAQ;;;;;;;iBAOnB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;AAEhD,eAAO,MAAM,aAAa;;;;;;;;;;;;iBASxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;iBAGxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,eAAO,MAAM,YAAY;;;;;;iBAGvB,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAGxD,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA4BxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAG1D,eAAO,MAAM,MAAM;;;;;;;;;;;;;iBAYjB,CAAC;AACH,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,CAAC;AAE5C,eAAO,MAAM,YAAY;;;;;;;;;;;;;;iBAAyD,CAAC;AACnF,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD;oEACoE;AACpE,eAAO,MAAM,kBAAkB;;iBAE7B,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAGzE,eAAO,MAAM,eAAe;;;;;;;;;iBAS1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA+DnB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;AAEhD;;;;;;;GAOG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAMvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAI5C,CAAC;AACH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAE5F;;;;GAIG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;iBAsBzB,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AACjE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB;;;iBAKhC,CAAC;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAE/E,eAAO,MAAM,sBAAsB;;;;;;;;;;;;iBAejC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE5E;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CASpF;AAGD,eAAO,MAAM,WAAW;;;;;;;;;;;;;iBAatB,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEtD,eAAO,MAAM,WAAW;;;;;;;;;;iBAMtB,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAGtD,eAAO,MAAM,eAAe;;;;;;;;;iBAM1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,eAAO,MAAM,eAAe;;;iBAK1B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAEnE,eAAO,MAAM,gBAAgB;;iBAE3B,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAGrE,eAAO,MAAM,kBAAkB;;;;;;;;;iBAAkB,CAAC;AAClD,MAAM,MAAM,kBAAkB,GAAG,eAAe,CAAC;AAEjD,eAAO,MAAM,kBAAkB;;;iBAAkB,CAAC;AAClD,MAAM,MAAM,uBAAuB,GAAG,oBAAoB,CAAC;AAE3D,eAAO,MAAM,mBAAmB;;iBAAmB,CAAC;AACpD,MAAM,MAAM,wBAAwB,GAAG,qBAAqB,CAAC;AAG7D,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;iBAM1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAG9D,eAAO,MAAM,YAAY;;;iBAA2E,CAAC;AACrG,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAE7D,eAAO,MAAM,WAAW;;;;;;;iBAOtB,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAGtD,eAAO,MAAM,YAAY;;;;;;EAA0D,CAAC;AACpF,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD,eAAO,MAAM,cAAc;;;;EAAqC,CAAC;AACjE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;iBAanB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;AAEhD,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;iBASzB,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEjE,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;iBAA2B,CAAC;AACvD,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEjE,eAAO,MAAM,kBAAkB;;;;iBAI7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAGpE,eAAO,MAAM,eAAe;;;;;;;;iBAQ1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,eAAO,MAAM,qBAAqB;;;;;;;;iBAA4B,CAAC;AAC/D,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAE/E,eAAO,MAAM,eAAe;;;;;;;;;;;;;iBAM1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,eAAO,MAAM,kBAAkB;;;;;;;;;;iBAU7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC"}
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,WAAW;;;;EAAuC,CAAC;AAChE,eAAO,MAAM,SAAS;;;;;;EAAmE,CAAC;AAE1F;;;;;GAKG;AACH,eAAO,MAAM,aAAa,yBAAwC,CAAC;AAEnE;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;EAAqG,CAAC;AAEpI;;;;GAIG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;kBAahB,CAAC;AACZ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,OAAO,CAAC;AACrC,2CAA2C;AAC3C,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAIpC;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAehD;AAED;;;;;GAKG;AACH,eAAO,MAAM,WAAW;;;;;;;;;;kBAqBb,CAAC;AACZ,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AACtD,KAAK,eAAe,GAAG,IAAI,CAAC,WAAW,EAAE,UAAU,GAAG,aAAa,GAAG,eAAe,CAAC,GAAG;IACvF,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,QAAQ,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC;IACzB,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAAC;CACtC,CAAC;AAEF,+CAA+C;AAC/C,eAAO,MAAM,eAAe,MAAO,IAAI,CAAC,WAAW,EAAE,UAAU,GAAG,aAAa,CAAC,KAAG,MACtB,CAAC;AAE9D;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,eAAe,GAAG,OAAO,CAInF;AAED,wGAAwG;AACxG,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,SAAS,eAAe,EAAE,GAAG,MAAM,GAAG,IAAI,CAoBnF;AAED,sHAAsH;AACtH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,eAAe,GAAG,MAAM,CAK5D;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,MAAM,CA8BnE;AAED,mFAAmF;AACnF,eAAO,MAAM,YAAY;;;;;;;;;;mBAMrB,CAAC;AAEL;;;;;GAKG;AACH,eAAO,MAAM,eAAe;;;EAA8B,CAAC;AAC3D,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAK9D,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA4FxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D;;;4EAG4E;AAC5E,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAmExB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,2EAA2E;AAC3E,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAC/D,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE/D,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAwFlB,CAAC;AACH,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,OAAO,CAAC,CAAC;AAG9C,uGAAuG;AACvG,eAAO,MAAM,YAAY,aAG0G,CAAC;AACpI,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;iBAgBvB,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAE7D,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;iBAsBjB,CAAC;AACH,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,CAAC;AAE5C,eAAO,MAAM,aAAa;;iBAQxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;iBAUrB,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAEpD;;;;;;;GAOG;AACH,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;iBAapB,CAAC;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAC;AAElD,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;iBAQxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAG1D,eAAO,MAAM,YAAY;;;;;;;;;;iBAmBvB,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAE7D;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAUjE;AAED,6FAA6F;AAC7F,eAAO,MAAM,YAAY;;;;iBAYrB,CAAC;AACL,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD,uDAAuD;AACvD,eAAO,MAAM,WAAW;;;;;;;;;;;;;iBAUtB,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEtD,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;iBAiBjB,CAAC;AACH,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,CAAC;AAQ5C,eAAO,MAAM,OAAO;;;;;;;;iBAQlB,CAAC;AACH,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,OAAO,CAAC,CAAC;AAE9C;;;;GAIG;AACH,eAAO,MAAM,cAAc;;;;;;;iBAAqF,CAAC;AACjH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAG5D,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;iBAiBzB,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEjE,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;iBA2B1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D;;uEAEuE;AACvE,eAAO,MAAM,gBAAgB;;;;iBAI3B,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAErE,eAAO,MAAM,UAAU;;;;;;;;;iBAKrB,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAGpD,eAAO,MAAM,YAAY;;;;;iBAOvB,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAE7D,4EAA4E;AAC5E,eAAO,MAAM,SAAS;;;;iBAIpB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAC;AAEvD,eAAO,MAAM,eAAe;;;;;;;iBAI1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,eAAO,MAAM,MAAM;;;;;iBAKjB,CAAC;AACH,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,CAAC;AAO5C;;;mBAGmB;AACnB,eAAO,MAAM,6BAA6B;;;;;;;iBAatC,CAAC;AACL,MAAM,MAAM,kCAAkC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAE/F,kFAAkF;AAClF,eAAO,MAAM,6BAA6B;;;iBAOtC,CAAC;AACL,MAAM,MAAM,kCAAkC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAE/F,2DAA2D;AAC3D,eAAO,MAAM,uBAAuB;;;;;;;;iBAQlC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAG9E,eAAO,MAAM,SAAS;;;;iBAMpB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAC;AAGvD,eAAO,MAAM,QAAQ;;;;;;;iBAOnB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;AAEhD,eAAO,MAAM,aAAa;;;;;;;;;;;;iBASxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;iBAGxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,eAAO,MAAM,YAAY;;;;;;iBAGvB,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAGxD,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA4BxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAG1D,eAAO,MAAM,MAAM;;;;;;;;;;;;;iBAYjB,CAAC;AACH,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,CAAC;AAE5C,eAAO,MAAM,YAAY;;;;;;;;;;;;;;iBAAyD,CAAC;AACnF,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD;oEACoE;AACpE,eAAO,MAAM,kBAAkB;;iBAE7B,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAGzE,eAAO,MAAM,eAAe;;;;;;;;;iBAS1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA+DnB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;AAEhD;;;;;;;GAOG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAMvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAI5C,CAAC;AACH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAE5F;;;;GAIG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;iBAsBzB,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AACjE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB;;;iBAKhC,CAAC;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAE/E,eAAO,MAAM,sBAAsB;;;;;;;;;;;;iBAejC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE5E;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CASpF;AAGD,eAAO,MAAM,WAAW;;;;;;;;;;;;;iBAatB,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEtD,eAAO,MAAM,WAAW;;;;;;;;;;iBAMtB,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAGtD,eAAO,MAAM,eAAe;;;;;;;;;iBAM1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,eAAO,MAAM,eAAe;;;iBAQ1B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAEnE,eAAO,MAAM,gBAAgB;;iBAE3B,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAGrE,eAAO,MAAM,kBAAkB;;;;;;;;;iBAAkB,CAAC;AAClD,MAAM,MAAM,kBAAkB,GAAG,eAAe,CAAC;AAEjD,eAAO,MAAM,kBAAkB;;;iBAAkB,CAAC;AAClD,MAAM,MAAM,uBAAuB,GAAG,oBAAoB,CAAC;AAE3D,eAAO,MAAM,mBAAmB;;iBAAmB,CAAC;AACpD,MAAM,MAAM,wBAAwB,GAAG,qBAAqB,CAAC;AAG7D,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;iBAM1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAG9D,eAAO,MAAM,YAAY;;;iBAA2E,CAAC;AACrG,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAE7D,eAAO,MAAM,WAAW;;;;;;;iBAOtB,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAGtD,eAAO,MAAM,YAAY;;;;;;EAA0D,CAAC;AACpF,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD,eAAO,MAAM,cAAc;;;;EAAqC,CAAC;AACjE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;iBAanB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;AAEhD,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;iBASzB,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEjE,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;iBAA2B,CAAC;AACvD,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEjE,eAAO,MAAM,kBAAkB;;;;iBAI7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAGpE,eAAO,MAAM,eAAe;;;;;;;;iBAQ1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,eAAO,MAAM,qBAAqB;;;;;;;;iBAA4B,CAAC;AAC/D,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAE/E,eAAO,MAAM,eAAe;;;;;;;;;;;;;iBAM1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,eAAO,MAAM,kBAAkB;;;;;;;;;;iBAU7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC"}

package/dist/service.js

@@ -1,7 +1,206 @@
 import { z } from 'zod';
-import { containerPath, dockerVolumeName, envVarName, gitBranch, gitRepoUrl, httpPath, repoBaseDir, repoRelativePath, slug } from './common.js';
+import { containerPath, dockerVolumeName, envVarName, gitBranch, gitRepoUrl, httpPath, providerBaseUrl, repoBaseDir, repoRelativePath, slug } from './common.js';
 export const serviceType = z.enum(['pm2', 'docker', 'compose']);
 export const buildPack = z.enum(['auto', 'nixpacks', 'dockerfile', 'railpack', 'static']);
+/**
+ * 0.16.1: names of the service's environment variables a Dockerfile build
+ * receives as `--build-arg` (the Dockerfile reads them with `ARG`). Opt-in per
+ * name: a build gets none unless listed. Nixpacks and Railpack builds already
+ * see the whole environment.
+ */
+export const buildArgNames = z.array(envVarName.max(100)).max(100);
+/**
+ * 0.16.1: capabilities a docker service may add. Deliberately short: the ones
+ * real workloads ask for (VPNs, packet capture, profilers, realtime audio,
+ * mlock). SYS_ADMIN, SYS_MODULE, DAC_READ_SEARCH and the like are left out —
+ * each is a known path out of the container.
+ */
+export const runtimeCapability = z.enum(['NET_ADMIN', 'NET_RAW', 'SYS_PTRACE', 'SYS_NICE', 'SYS_RESOURCE', 'IPC_LOCK', 'SYS_TIME']);
+/**
+ * 0.16.1 advanced container options for docker services (operator only):
+ * structured fields, never free-form `docker run` flags, so nothing outside
+ * this list (privileged, host mounts, host network…) can be asked for.
+ */
+export const runtimeOptions = z
+    .object({
+    /** `--gpus all` or `--gpus <n>` (needs the NVIDIA container toolkit on the host). */
+    gpus: z.union([z.literal('all'), z.number().int().min(1).max(16)]).nullable().optional(),
+    /** `--shm-size` in MiB; browsers and PyTorch data loaders outgrow Docker's 64. */
+    shmSizeMb: z.number().int().min(1).max(65_536).nullable().optional(),
+    /** `--init`: reaps zombie processes and forwards signals to the app. */
+    init: z.boolean().optional(),
+    /** `--ulimit nofile=N:N`. */
+    ulimitNofile: z.number().int().min(1024).max(1_048_576).nullable().optional(),
+    /** `--cap-add`. */
+    capAdd: z.array(runtimeCapability).max(7).optional(),
+})
+    .strict();
+/**
+ * 0.16.1: the most host ports one service may publish through `portMappings`.
+ * Docker starts one userland proxy process per published port and protocol,
+ * so a 10 000-port range costs 10 000 processes on the host.
+ */
+export const MAX_MAPPED_PORTS = 1000;
+/** Most port-mapping rules per service. */
+export const MAX_PORT_MAPPINGS = 20;
+const IPV4 = /^(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}$/;
+/**
+ * A literal IPv4 or IPv6 address a port can be bound to (no zone, no CIDR).
+ * The unspecified addresses are refused: an empty IP already means "every
+ * address", and two spellings of it would dodge the overlap check.
+ */
+export function isBindableIp(ip) {
+    if (IPV4.test(ip))
+        return ip !== '0.0.0.0';
+    if (ip.length > 45)
+        return false;
+    const halves = ip.split('::');
+    if (halves.length > 2)
+        return false;
+    const groups = halves.flatMap((h) => (h === '' ? [] : h.split(':')));
+    let width = groups.length;
+    if (groups.length > 0 && IPV4.test(groups[groups.length - 1])) {
+        groups.pop();
+        width += 1; // an embedded IPv4 fills two groups
+    }
+    if (!groups.every((g) => /^[0-9A-Fa-f]{1,4}$/.test(g)))
+        return false;
+    if (halves.length === 2 ? width > 7 : width !== 8)
+        return false;
+    // `::`, `0::0`, `0:0:0:0:0:0:0:0`: the unspecified address.
+    return width !== groups.length || groups.some((g) => Number.parseInt(g, 16) !== 0);
+}
+/**
+ * 0.16.1 extra host-port mappings of a docker service: one port or a range,
+ * TCP or UDP, on every host address or one dedicated IP
+ * (`docker run -p 203.0.113.7:27015-27030:27015-27030/udp`). The container
+ * range starts at `containerPort` and is as long as the host range.
+ */
+export const portMapping = z
+    .object({
+    /** Host address to bind; null or omitted = every address of the host. */
+    hostIp: z
+        .string()
+        .max(45)
+        .refine(isBindableIp, 'hostIp must be one IPv4 or IPv6 address of the host (leave it empty for every address)')
+        .nullable()
+        .optional(),
+    hostPort: z.number().int().min(1).max(65535),
+    /** Last host port of a range; null or omitted = the single `hostPort`. */
+    hostPortEnd: z.number().int().min(1).max(65535).nullable().optional(),
+    containerPort: z.number().int().min(1).max(65535),
+    protocol: z.enum(['tcp', 'udp']).default('tcp'),
+    /**
+     * TCP, one port: only these addresses or CIDR ranges may connect. The port
+     * is then published by a small Traefik proxy in front of the service
+     * instead of Docker's `-p`, which a host firewall cannot restrict.
+     */
+    allowFrom: z.array(z.string().trim().min(1).max(64)).min(1).max(100).nullable().optional(),
+})
+    .strict();
+/** How many host ports a mapping publishes. */
+export const mappedPortCount = (m) => Math.max(1, (m.hostPortEnd ?? m.hostPort) - m.hostPort + 1);
+/**
+ * Whether two mappings would bind the same host socket: same protocol,
+ * overlapping ports, and the same IP (or either on every address).
+ */
+export function portMappingsOverlap(a, b) {
+    if ((a.protocol ?? 'tcp') !== (b.protocol ?? 'tcp'))
+        return false;
+    if (a.hostIp && b.hostIp && a.hostIp.toLowerCase() !== b.hostIp.toLowerCase())
+        return false;
+    return a.hostPort <= (b.hostPortEnd ?? b.hostPort) && b.hostPort <= (a.hostPortEnd ?? a.hostPort);
+}
+/** Why a list of mappings cannot be published, or null. Shared by the server, the panel and the CLI. */
+export function portMappingsProblem(list) {
+    let total = 0;
+    for (const [i, m] of list.entries()) {
+        const end = m.hostPortEnd ?? m.hostPort;
+        const label = formatPortMapping(m);
+        if (end < m.hostPort)
+            return `Mapping ${i + 1} (${label}): the range ends before it starts.`;
+        if (m.containerPort + (end - m.hostPort) > 65535)
+            return `Mapping ${i + 1} (${label}): the container range runs past 65535.`;
+        total += end - m.hostPort + 1;
+        if (m.allowFrom?.length && ((m.protocol ?? 'tcp') !== 'tcp' || end !== m.hostPort)) {
+            return `Mapping ${i + 1} (${label}): an allow list works on one TCP port (UDP and ranges cannot be filtered by source).`;
+        }
+        const other = list.slice(0, i).find((o) => portMappingsOverlap(o, m));
+        if (other) {
+            return `Mapping ${i + 1} (${label}) overlaps ${formatPortMapping(other)}: a host port can be published once per address and protocol.`;
+        }
+    }
+    if (total > MAX_MAPPED_PORTS) {
+        return `${total} host ports requested; at most ${MAX_MAPPED_PORTS} per service (Docker runs one proxy process per published port).`;
+    }
+    return null;
+}
+/** The `docker run -p` operand: `27015-27030:27015-27030/udp`, `203.0.113.7:53:53/udp`, `[2001:db8::7]:53:53/udp`. */
+export function formatPortMapping(m) {
+    const span = (m.hostPortEnd ?? m.hostPort) - m.hostPort;
+    const range = (start) => (span > 0 ? `${start}-${start + span}` : String(start));
+    const ip = m.hostIp ? (m.hostIp.includes(':') ? `[${m.hostIp}]:` : `${m.hostIp}:`) : '';
+    return `${ip}${range(m.hostPort)}:${range(m.containerPort)}/${m.protocol ?? 'tcp'}`;
+}
+/**
+ * Parse `27015-27030:27015/udp`, `8080:80`, `5432@10.0.0.0/8`, `53/udp`, `10000-10100/udp`
+ * (no colon = the same ports inside the container), optionally after an IP:
+ * `203.0.113.7:53/udp`, `[2001:db8::7]:8080:80`. A container range must be as
+ * long as the host range. Returns the mapping, or why the text is not one.
+ */
+export function parsePortMapping(text) {
+    // `…@10.0.0.0/8,203.0.113.4`: the allow list of a TCP port.
+    const parts = text.trim().split('@');
+    const t = parts[0];
+    const allowText = parts[1];
+    if (parts.length > 2)
+        return `"${text.trim()}" has more than one @.`;
+    const allowFrom = allowText === undefined ? null : allowText.split(',').map((e) => e.trim()).filter(Boolean);
+    if (allowFrom && allowFrom.length === 0)
+        return `"${text.trim()}": list the addresses after @ (10.0.0.0/8,203.0.113.4).`;
+    const m = /^(?:(\d{1,3}(?:\.\d{1,3}){3})|\[([0-9A-Fa-f:.]+)\]):(\d{1,5})(?:-(\d{1,5}))?(?::(\d{1,5})(?:-(\d{1,5}))?)?(?:\/(tcp|udp))?$/i.exec(t)
+        ?? /^()()(\d{1,5})(?:-(\d{1,5}))?(?::(\d{1,5})(?:-(\d{1,5}))?)?(?:\/(tcp|udp))?$/i.exec(t);
+    if (!m)
+        return `"${t}" is not a port mapping (examples: 8080:80, 27015-27030:27015/udp, 203.0.113.7:53/udp).`;
+    const hostIp = m[1] || m[2] || null;
+    if (hostIp && !isBindableIp(hostIp))
+        return `"${t}": ${hostIp} is not an address a port can be bound to.`;
+    const hostPort = Number(m[3]);
+    const hostPortEnd = m[4] ? Number(m[4]) : null;
+    const containerPort = m[5] ? Number(m[5]) : hostPort;
+    const ports = [hostPort, hostPortEnd ?? hostPort, containerPort];
+    if (ports.some((p) => p < 1 || p > 65535))
+        return `"${t}": ports run from 1 to 65535.`;
+    if (hostPortEnd !== null && hostPortEnd < hostPort)
+        return `"${t}": the range ends before it starts.`;
+    if (m[6] && Number(m[6]) - containerPort !== (hostPortEnd ?? hostPort) - hostPort) {
+        return `"${t}": the container range must be as long as the host range.`;
+    }
+    return {
+        hostIp,
+        hostPort,
+        hostPortEnd: hostPortEnd !== null && hostPortEnd !== hostPort ? hostPortEnd : null,
+        containerPort,
+        protocol: (m[7]?.toLowerCase() ?? 'tcp'),
+        ...(allowFrom ? { allowFrom } : {}),
+    };
+}
+/** The PATCH field: rules checked together (ranges, overlaps, the port budget). */
+export const portMappings = z
+    .array(portMapping)
+    .max(MAX_PORT_MAPPINGS)
+    .superRefine((list, ctx) => {
+    const problem = portMappingsProblem(list);
+    if (problem)
+        ctx.addIssue({ code: 'custom', message: problem });
+});
+/**
+ * 0.16.1 deploy healthcheck: `http` probes the container port (an HTTP answer
+ * below 500, then a TCP connect); `running` only waits for the container to
+ * stay up, for services with no HTTP or TCP port to probe (UDP game servers,
+ * VoIP, queue workers).
+ */
+export const healthCheckMode = z.enum(['http', 'running']);
 /** Optional project/workspace/label tag IDs for new service creation. */
 const tagIds = z.array(z.number().int().positive()).optional();
 export const createService = z.object({
@@ -71,6 +270,8 @@ export const createService = z.object({
         restartPolicy: z.string().regex(/^(no|always|unless-stopped|on-failure(?::\d{1,3})?)$/).optional(),
         // Seconds between SIGTERM and SIGKILL on stop (docker stop -t).
         stopGraceSeconds: z.number().int().min(0).max(300).optional(),
+        /** Env-var names passed to a Dockerfile build as `--build-arg`. */
+        buildArgs: buildArgNames.optional(),
     })
         .default({ buildPack: 'auto', baseDir: '/' }),
 }).superRefine((value, ctx) => {
@@ -101,12 +302,10 @@ export const createService = z.object({
  * still applies `.default()` values for absent keys, which would silently
  * rewrite `type` back to 'docker' and `branch` to 'main' on every PATCH. */
 export const updateService = z.object({
-    // Tag updates are usually handled by `PUT /v1/services/:id/tags`; these
-    // convenience fields let a single PATCH reassign tags together with other
-    // service edits without an extra round-trip.
-    tagProjectIds: tagIds,
-    tagWorkspaceIds: tagIds,
-    tagLabelIds: tagIds,
+    // r335: no tag fields. Tags change only through `PUT /v1/services/:id/tags`
+    // (admin-gated, with the r156 foreign-link rules). The PATCH route used to
+    // accept tagProjectIds/tagWorkspaceIds/tagLabelIds here and then silently
+    // drop them; it now answers 400 `tags_via_put` when a body carries them.
     name: z.string().min(1).max(100).optional(),
     slug: slug.optional(),
     type: serviceType.optional(),
@@ -132,8 +331,16 @@ export const updateService = z.object({
     /** Horizontal replica count for docker services (Traefik load-balances). */
     replicas: z.number().int().min(1).max(10).optional(),
     healthPath: httpPath.optional(),
+    /** Seconds a deploy waits for the healthcheck (10–3600); null restores the 300 s default. */
+    healthTimeoutSeconds: z.number().int().min(10).max(3600).nullable().optional(),
+    /** 'running' = the deploy only waits for the container to stay up (UDP and other non-HTTP services); 'http' or null = the HTTP/TCP probe. */
+    healthCheck: healthCheckMode.nullable().optional(),
+    /** Operator only: advanced container options; null clears them all. */
+    runtimeOptions: runtimeOptions.nullable().optional(),
     port: z.number().int().min(1).max(65535).optional(),
     publishedPort: z.number().int().min(1).max(65535).nullable().optional(),
+    /** Extra host ports, TCP or UDP, single or ranges (docker services on the panel host); null or [] clears them. */
+    portMappings: portMappings.nullable().optional(),
     previewDeploymentsEnabled: z.boolean().optional(),
     previewAutoDestroyOnClose: z.boolean().optional(),
     previewDomainPattern: z.string().nullable().optional(),
@@ -157,6 +364,8 @@ export const updateService = z.object({
         preStopCmd: z.string().nullable().optional(),
         restartPolicy: z.string().regex(/^(no|always|unless-stopped|on-failure(?::\d{1,3})?)$/).optional(),
         stopGraceSeconds: z.number().int().min(0).max(300).optional(),
+        /** Env-var names passed to a Dockerfile build as `--build-arg`; [] clears. */
+        buildArgs: buildArgNames.optional(),
     })
         .optional(),
 });
@@ -201,9 +410,17 @@ export const service = z.object({
     commitSha: z.string().nullable(),
     runtimeId: z.string().nullable(),
     healthPath: z.string(),
+    /** Healthcheck deadline in seconds; null = the 300 s default (0.16.1). */
+    healthTimeoutSeconds: z.number().int().nullable().optional(),
+    /** How a deploy decides the new container is ready (0.16.1). */
+    healthCheck: healthCheckMode.optional(),
+    /** Advanced container options (0.16.1); null = none. */
+    runtimeOptions: runtimeOptions.nullable().optional(),
     autoUrl: z.string().nullable(),
     port: z.number().int().nullable(),
     publishedPort: z.number().int().nullable().optional(),
+    /** Extra host-port mappings, TCP or UDP (0.16.1); [] = none. */
+    portMappings: z.array(portMapping).optional(),
     cpuShares: z.number().int(),
     cpuLimitMilli: z.number().int(),
     memLimitMb: z.number().int(),
@@ -234,12 +451,19 @@ export const service = z.object({
         preStopCmd: z.string().nullable().optional(),
         restartPolicy: z.string(),
         stopGraceSeconds: z.number().int(),
+        /** Env-var names a Dockerfile build receives as `--build-arg` (0.16.1). */
+        buildArgs: z.array(z.string()).optional(),
     })
         .nullable(),
     createdAt: z.string().datetime(),
     updatedAt: z.string().datetime(),
 });
 // ── Sources (private repo credentials) ─────────────────────────────────────
+/** r512: a registry host a `registry` credential may be sent to (`ghcr.io`, `registry.local:5000`). */
+export const registryHost = z
+    .string()
+    .max(255)
+    .regex(/^[A-Za-z0-9]([A-Za-z0-9.-]*[A-Za-z0-9])?(:\d{1,5})?$/, 'Expected a registry host such as ghcr.io or registry.local:5000');
 export const createSource = z.object({
     name: z.string().min(1).max(100),
     type: z.enum(['github', 'gitlab', 'gitea', 'bitbucket', 'custom', 'registry']),
@@ -247,7 +471,15 @@ export const createSource = z.object({
     deployKey: z.string().optional(),
     // Registry-type sources: username for `docker login` (token = password).
     registryUsername: z.string().max(255).optional(),
+    /** r512: registry hosts this credential may be sent to (Docker Hub = docker.io). */
+    registryHosts: z.array(registryHost).max(20).optional(),
     defaultBranch: z.string().optional(),
+    /**
+     * 0.13: self-hosted provider base (Gitea), e.g. `https://git.example.com`.
+     * The server refuses `http:` unless private egress is allowed.
+     * `github_app` is deliberately NOT in `type`: only installation sync creates those sources.
+     */
+    baseUrl: providerBaseUrl.optional(),
 });
 export const source = z.object({
     id: z.number().int(),
@@ -256,11 +488,29 @@ export const source = z.object({
     hasToken: z.boolean(),
     hasDeployKey: z.boolean(),
     registryUsername: z.string().nullable().optional(),
+    /** r512: hosts a registry credential is bound to (registry sources only). */
+    registryHosts: z.array(z.string()).optional(),
     defaultBranch: z.string().nullable(),
+    /** 0.13: self-hosted provider base URL (Gitea); null/absent = not set. */
+    baseUrl: z.string().nullable().optional(),
+    // ── 0.16 T8 surfaces ── multi-node (0.15.2, additive): this PAT or deploy key
+    // may be sent to a node for one clone. Absent on older panels.
+    allowOnNodes: z.boolean().optional(),
+    // ── end 0.16 T8 ──
+    /** 0.15.8: the panel pins this source's git host SSH keys (absent on older panels). */
+    pinHostKeys: z.boolean().optional(),
+    /** 0.15.8: what the pin holds, as fingerprints only. */
+    pinnedHostKeys: z.array(z.object({ host: z.string(), type: z.string(), fingerprint: z.string().nullable() })).optional(),
     createdAt: z.string().datetime(),
     updatedAt: z.string().datetime().optional(),
 });
 export const triggerDeploy = z.object({
+    /**
+     * @deprecated r334: IGNORED by `POST /v1/services/:id/deploys` — a manual
+     * trigger always builds the configured branch head. Pinning a commit here
+     * was never wired (the route reads no body). To redeploy an exact commit,
+     * use `deploys.promote` (another lane's running SHA) or `deploys.rollback`.
+     */
     commitSha: z.string().optional(),
 });
 export const deployment = z.object({
@@ -308,7 +558,9 @@ export const queueResponse = z.object({
 // ── Domains (Traefik routing) ─────────────────────────────────────────────
 export const createDomain = z.object({
     hostname: z.string().min(3).max(253),
-    path: z.string().default('/'),
+    // r473: aligned with the manifest's route.path rule — the consumer strips
+    // it downstream anyway, but the boundary should not depend on that.
+    path: z.string().min(1).max(200).regex(/^\/.*$/).default('/'),
     // Default matches the DB column default and the CLI (`ssl !== false`):
     // HTTPS everywhere unless explicitly disabled.
     ssl: z.boolean().default(true),
@@ -324,6 +576,41 @@ export const createDomain = z.object({
     /** Rate limit: burst peak requests allowed. */
     rateLimitBurst: z.number().int().min(0).max(100000).optional().nullable(),
 });
+/**
+ * Why a redirect regex cannot go to Traefik, or null. Traefik compiles it
+ * with Go's RE2, which has no lookaround and no backreferences — and a regex
+ * Traefik refuses takes the whole dynamic config file down with it, so these
+ * are refused when saved. The rest is checked by compiling it here.
+ */
+export function redirectRegexProblem(regex) {
+    if (/\(\?<?[=!]/.test(regex))
+        return 'lookahead / lookbehind are not supported (Traefik uses Go RE2)';
+    if (/\\[1-9]/.test(regex))
+        return 'backreferences such as \\1 are not supported (Traefik uses Go RE2)';
+    try {
+        new RegExp(regex);
+    }
+    catch (err) {
+        // RegExp only ever throws a SyntaxError here.
+        return `not a valid regular expression (${err.message})`;
+    }
+    return null;
+}
+/** 0.16.1 one redirect rule of a domain (Dokploy's "Redirects"): Traefik `redirectRegex`. */
+export const redirectRule = z
+    .object({
+    /** Matched against the full request URL, e.g. `^https://example.com/old/(.*)`. */
+    regex: z.string().min(1).max(1000),
+    /** The target; `${1}` inserts the first capture group. */
+    replacement: z.string().min(1).max(2000).regex(/^[^\r\n]*$/, 'one line'),
+    /** 301/308 when true, 302/307 when false. */
+    permanent: z.boolean().default(false),
+})
+    .superRefine((r, ctx) => {
+    const problem = redirectRegexProblem(r.regex);
+    if (problem)
+        ctx.addIssue({ code: 'custom', path: ['regex'], message: problem });
+});
 /** PATCHable routing extras for an existing domain. */
 export const domainPatch = z.object({
     ssl: z.boolean().optional(),
@@ -333,6 +620,8 @@ export const domainPatch = z.object({
     ipAllowlist: z.string().max(4000).optional().nullable(),
     rateLimitAverage: z.number().int().min(0).max(100000).optional().nullable(),
     rateLimitBurst: z.number().int().min(0).max(100000).optional().nullable(),
+    /** 0.16.1: redirect rules, applied in order; null or [] removes them. */
+    redirects: z.array(redirectRule).max(10).optional().nullable(),
 });
 export const domain = z.object({
     id: z.number().int(),
@@ -346,19 +635,17 @@ export const domain = z.object({
     ipAllowlist: z.string().nullable().optional(),
     rateLimitAverage: z.number().nullable().optional(),
     rateLimitBurst: z.number().nullable().optional(),
+    /** 0.16.1 redirect rules (absent on older panels). */
+    redirects: z.array(z.object({ regex: z.string(), replacement: z.string(), permanent: z.boolean() })).optional(),
     status: z.string(),
     createdAt: z.string().datetime(),
     updatedAt: z.string().datetime(),
 });
 // ── Webhooks (auto-deploy) ────────────────────────────────────────────────
-export const createWebhook = z.object({
-    branch: gitBranch.optional(),
-    /** Newline/comma-separated globs — deploy only when a changed file matches. */
-    watchPaths: z.string().max(1024).refine((raw) => {
-        const patterns = raw.split(/[\n,]/).map((pattern) => pattern.trim()).filter(Boolean);
-        return patterns.length <= 32 && patterns.every((pattern) => pattern.length <= 256 && (pattern.match(/\*\*/g) ?? []).length <= 4 && (pattern.match(/[?*]/g) ?? []).length <= 16);
-    }, 'watchPaths contains an unsafe glob pattern').optional(),
-});
+// Webhook CREATION is validated by `webhookCreate` in management.ts (the
+// route's schema). The former duplicate here (r473: `createWebhook`) was used
+// by no route and had drifted from the live one — removed rather than left
+// as a trap for someone "hardening" the wrong twin.
 export const webhook = z.object({
     id: z.number().int(),
     branch: z.string(),
@@ -368,12 +655,16 @@ export const webhook = z.object({
     url: z.string(),
     createdAt: z.string().datetime(),
 });
-/** Returned once at creation time — the secret is never retrievable again. */
-export const createdWebhook = webhook.extend({ secret: z.string() });
+/**
+ * Returned once at creation time — the secret is never retrievable again.
+ * r334: the create route answers id/branch/active/sourceId/url/secret only;
+ * `watchPaths` and `createdAt` come from `webhooks.list`.
+ */
+export const createdWebhook = webhook.omit({ watchPaths: true, createdAt: true }).extend({ secret: z.string() });
 // ── Managed databases ─────────────────────────────────────────────────────
 export const createDatabase = z.object({
     name: z.string().min(1).max(100),
-    engine: z.enum(['postgres', 'mysql', 'mariadb', 'redis', 'mongo', 'valkey', 'clickhouse', 'meilisearch', 'rabbitmq']),
+    engine: z.enum(['postgres', 'mysql', 'mariadb', 'redis', 'mongo', 'valkey', 'clickhouse', 'meilisearch', 'rabbitmq', 'keydb', 'dragonfly']),
     version: z.string().optional(),
     projectId: z.number().int().optional(),
     /** Hub/template provisioning is retryable: resume a matching database owned
@@ -382,11 +673,12 @@ export const createDatabase = z.object({
     existingVolume: z.string().optional(),
     extensions: z.array(z.string()).optional(),
     webGuiEnabled: z.boolean().optional(),
-});
-export const databasePatch = z.object({
-    name: z.string().min(1).max(100).optional(),
-    extensions: z.array(z.string()).optional(),
-    webGuiEnabled: z.boolean().optional(),
+    /**
+     * Multi-node (additive): the node to run the database on. null or absent =
+     * the panel host (today). Operator only when non-null; placement is fixed
+     * at create time.
+     */
+    serverId: z.number().int().positive().nullable().optional(),
 });
 export const managedDatabase = z.object({
     id: z.number().int(),
@@ -405,6 +697,14 @@ export const managedDatabase = z.object({
     webGuiPort: z.number().int().nullable().optional(),
     extensions: z.array(z.string()).optional().default([]),
     attachedServices: z.array(z.object({ id: z.number().int(), name: z.string(), slug: z.string() })).optional().default([]),
+    // ── 0.16 T8 surfaces: the node fields the 0.15.3 routes return (additive) ──
+    /** The node the database runs on; null = the panel host. Absent before 0.15.3. */
+    serverId: z.number().int().nullable().optional(),
+    /** That node's name; null for a panel-host database. */
+    serverName: z.string().nullable().optional(),
+    /** The node's last reachability probe; null for a panel-host database or a node not probed yet. */
+    reachable: z.boolean().nullable().optional(),
+    // ── end 0.16 T8 ──
     createdAt: z.string().datetime(),
     updatedAt: z.string().datetime(),
 });
@@ -425,7 +725,9 @@ export const attachment = z.object({
 // ── Environment variables ──────────────────────────────────────────────────
 export const upsertEnvVar = z.object({
     key: envVarName.max(100),
-    value: z.string(),
+    // r473: same 32 KB cap the Hub deployTemplate path applies — the sink
+    // escapes newlines either way, but the twins should not disagree.
+    value: z.string().max(32 * 1024),
     isSecret: z.boolean().optional(),
     overwriteExisting: z.boolean().optional(),
 });
@@ -770,7 +1072,10 @@ export const volumeFileWrite = z.object({
     /** Relative path inside the volume. */
     path: z.string().min(1).max(1024),
     /** Base64-encoded file content (schemas validate; argv never sees it). */
-    contentBase64: z.string().max(8 * 1024 * 1024),
+    contentBase64: z.string().max(8 * 1024 * 1024).refine((value) => {
+        const compact = value.replace(/\s/g, '');
+        return compact.length % 4 === 0 && /^[A-Za-z0-9+/]*={0,2}$/.test(compact);
+    }, { message: 'must be valid base64 content' }),
 });
 export const volumePathCreate = z.object({
     path: z.string().min(1).max(1024),