@stacksjs/ts-cloud 0.10.0 → 0.11.1

package/dist/bin/{chunk-7wzdaqh6.js → chunk-nyc2jxd8.js}

@@ -1,2 +1,2 @@
 var M=[{index:0,id:"clients",label:"Clients"},{index:1,id:"dns",label:"DNS & TLS"},{index:2,id:"edge",label:"Edge"},{index:3,id:"routing",label:"Routing"},{index:4,id:"apps",label:"Applications"},{index:5,id:"runtime",label:"Background runtime"},{index:6,id:"data",label:"Data services"},{index:7,id:"durability",label:"Durability"}],N=[{index:0,id:"clients",label:"Clients"},{index:1,id:"dns",label:"DNS & TLS"},{index:2,id:"edge",label:"Edge"},{index:3,id:"entry",label:"Entry points"},{index:4,id:"compute",label:"Compute"},{index:5,id:"messaging",label:"Messaging & pooling"},{index:6,id:"data",label:"Data services"},{index:7,id:"durability",label:"Durability"}],P=[{match:/^redis/,kind:"cache",label:"Redis"},{match:/^(?:mysql|mariadb)/,kind:"database",label:"MySQL"},{match:/^postgres/,kind:"database",label:"PostgreSQL"},{match:/^meilisearch/,kind:"database",label:"Meilisearch"},{match:/^vitess|^vtgate/,kind:"database",label:"Vitess"},{match:/^memcached/,kind:"cache",label:"Memcached"}],j=/^(?:rpx-gateway|nginx|caddy|traefik|haproxy)$/;function e(n,u=""){let a=n==null?"":String(n).trim();return a&&a!=="-"&&a!=="—"?a:u}function F(n){return Array.isArray(n)?n.length:0}function h(n){let u=e(n).toLowerCase();if(!u)return"unknown";if(["running","live","active","available","success","ok","healthy","enabled"].includes(u))return"ok";if(["failed","stopped","unreachable","error","critical","disabled"].includes(u))return"bad";if(["configured","creating","pending","degraded","shadowed","warn","unknown"].includes(u))return"warn";return"warn"}function r(n,u,a){if(a.has(u.source)&&a.has(u.target))n.push(u)}function I(n,u={}){let a=[],o=[],q=[],f=n.server??{},c=Array.isArray(n.sites)?n.sites:[],L=Array.isArray(n.services)?n.services:[],k=Array.isArray(n.workers)?n.workers:[],m=n.security??{},C=!!n._serverReachable&&!n.metricsUnavailable,T="box";if(!C)q.push("The compute box could not be probed, so live service state is missing; the shape comes from your cloud config.");a.push({id:"internet",label:"Internet",kind:"internet",layer:0,status:"ok",sub:"Public traffic",facts:[],external:!0});let i=[...new Set(c.map((t)=>e(t.domain)||e(t.route).split("/")[0]).filter((t)=>t&&t!=="internal"&&t!=="loopback"))],E=Array.isArray(m.tlsCertificates)?m.tlsCertificates:[],g=E.filter((t)=>Number(t?.daysRemaining??999)<21).length;a.push({id:"dns",label:i.length===1?i[0]:"Public domains",kind:"dns",layer:1,status:g?"warn":i.length?"ok":"unknown",sub:i.length>1?`${i.length} domains`:"DNS & certificates",facts:[{label:"Domains",value:i.length?i.slice(0,6).join(", "):"none resolved"},{label:"Certificates",value:E.length?`${E.length} issued`:"none reported"},...g?[{label:"Expiring",value:`${g} within 21 days`}]:[]],href:"/server/security",external:!0});let v=m.firewall??{},w=Array.isArray(m.ports)?m.ports:[];a.push({id:"firewall",label:"Host firewall",kind:"firewall",layer:2,status:h(v.status),sub:e(v.summary,"Inbound filtering"),facts:[{label:"State",value:e(v.status,"unknown")},{label:"Open ports",value:w.length?w.map((t)=>e(t.listen)).join(", "):"not reported"}],href:"/server/firewall",group:"box"});let y=L.find((t)=>j.test(e(t.name)));a.push({id:"proxy",label:e(y?.name,"Reverse proxy"),kind:"proxy",layer:3,status:y?h(y.status):"unknown",sub:"TLS termination & routing",facts:[{label:"Service",value:e(y?.name,"not detected")},{label:"State",value:e(y?.status,C?"not running":"not probed")},{label:"Routes",value:`${c.length} site${c.length===1?"":"s"}`}],href:"/server/services",group:"box"});for(let t of c){let d=`site:${e(t.name)}`;if(!e(t.name))continue;a.push({id:d,label:e(t.name),kind:"site",layer:4,status:h(t.status),sub:e(t.runtime,"runtime"),facts:[{label:"Route",value:e(t.route,"internal")},{label:"Runtime",value:e(t.runtime,"unknown")},{label:"Delivery",value:e(t.deploy,"unknown")},{label:"TLS",value:e(t.tls,"unknown")},...t.responseMs!=null?[{label:"Response",value:`${Math.round(Number(t.responseMs))} ms`}]:[],...t.httpStatus!=null?[{label:"HTTP",value:String(t.httpStatus)}]:[]],href:"/server/sites",group:"box"})}for(let t of k){let d=`worker:${e(t.name)}`;if(!e(t.name))continue;a.push({id:d,label:e(t.name),kind:"worker",layer:5,status:h(t.status),sub:`${Number(t.processes??1)} process${Number(t.processes??1)===1?"":"es"}`,facts:[{label:"Processes",value:String(t.processes??1)},{label:"State",value:e(t.status,"unknown")},...e(t.site)?[{label:"Site",value:e(t.site)}]:[]],href:"/operations/jobs",group:"box"})}let A=n.serverScheduler??{};if(A.enabled)a.push({id:"scheduler",label:"Scheduler",kind:"scheduler",layer:5,status:"ok",sub:"Cron dispatch",facts:[{label:"Last run",value:e(A.lastRun,"unknown")}],href:"/operations/jobs",group:"box"});let l=L.map((t)=>{let d=e(t.name),s=P.find((p)=>p.match.test(d));return s?{service:t,name:d,...s}:null}).filter((t)=>!!t);for(let t of l)a.push({id:`data:${t.name}`,label:t.label,kind:t.kind,layer:6,status:h(t.service.status),sub:t.name,facts:[{label:"Unit",value:t.name},{label:"State",value:e(t.service.status,"unknown")}],href:"/data/services",group:"box"});let x=n.backup??{};if(x.enabled)a.push({id:"backup",label:"Backups",kind:"backup",layer:7,status:"ok",sub:e(x.destination,"destination"),facts:[{label:"Destination",value:e(x.destination,"unknown")},{label:"Schedule",value:e(x.schedule,"unknown")},{label:"Retention",value:`${x.retention??0} copies`},{label:"Last run",value:e(x.last,"unknown")}],href:"/data/backups"});let b=new Set(a.map((t)=>t.id));r(o,{source:"internet",target:"dns",flow:"request",label:"https"},b),r(o,{source:"dns",target:"firewall",flow:"request",label:"443/80"},b),r(o,{source:"firewall",target:"proxy",flow:"request"},b);for(let t of c){let d=`site:${e(t.name)}`;r(o,{source:"proxy",target:d,flow:"request",label:e(t.path)||void 0,status:h(t.status)},b)}for(let t of k){let d=`worker:${e(t.name)}`,s=`site:${e(t.site)}`;if(b.has(s))r(o,{source:s,target:d,flow:"async",label:"queue"},b);else r(o,{source:"proxy",target:d,flow:"async",label:"queue"},b)}for(let t of k)r(o,{source:"scheduler",target:`worker:${e(t.name)}`,flow:"async",label:"dispatch"},b);let D=[...c.map((t)=>`site:${e(t.name)}`),...k.map((t)=>`worker:${e(t.name)}`)];for(let t of l)for(let d of D)r(o,{source:d,target:`data:${t.name}`,flow:"data",label:"localhost"},b);if(l.length&&D.length)q.push("Data-service edges show co-location on the box: every process on it can reach localhost. They are not a declared per-site binding.");for(let t of l)r(o,{source:`data:${t.name}`,target:"backup",flow:"backup",label:"snapshot"},b);for(let t of c)r(o,{source:`site:${e(t.name)}`,target:"backup",flow:"backup"},b);return{mode:"server",project:e(u.project)||e(n.project?.name)||e(f.name,"project"),environment:e(u.environment)||e(n.environment,"production"),provider:e(f.provider,"unknown"),region:e(f.region,"unknown"),generatedAt:new Date().toISOString(),layers:M,groups:[{id:"box",label:e(f.name,"App server"),sub:[e(f.provider),e(f.region),e(f.ip)].filter(Boolean).join(" · ")}],nodes:a,links:o,notes:q}}function B(n,u={}){let a=[],o=[],q=[],f=n.app??{},c=Array.isArray(n.functions)?n.functions:[],L=Array.isArray(n.queues)?n.queues:[],k=n.metrics??{};if(!c.length)q.push("No Lambda functions were read for this environment, so the compute layer is empty rather than assumed.");a.push({id:"internet",label:"Internet",kind:"internet",layer:0,status:"ok",sub:"Public traffic",facts:[],external:!0});let m=e(f.url),C=m.replace(/^https?:\/\//,"").split("/")[0];a.push({id:"dns",label:C||"Application domain",kind:"dns",layer:1,status:C?"ok":"unknown",sub:"DNS & certificates",facts:[{label:"Endpoint",value:m||"not resolved"}],external:!0});let T=n.waf;if(T)a.push({id:"waf",label:"WAF",kind:"waf",layer:2,status:h(T.status??"active"),sub:e(T.scope,"Managed rules"),facts:[{label:"Web ACL",value:e(T.name,"unnamed")},...T.blocked!=null?[{label:"Blocked (24h)",value:String(T.blocked)}]:[],{label:"Rules",value:String(F(n.wafRules))}],href:"/serverless/firewall"});let i=n.assetsInfo;if(i)a.push({id:"cdn",label:"Asset CDN",kind:"cdn",layer:2,status:"ok",sub:e(i.cdn,"CloudFront"),facts:[{label:"Distribution",value:e(i.cdn,"unknown")},{label:"Custom domain",value:e(i.customDomain,"none")}],href:"/serverless/assets"}),a.push({id:"assets",label:"Asset bucket",kind:"storage",layer:6,status:"ok",sub:e(i.bucket,"S3"),facts:[{label:"Bucket",value:e(i.bucket,"unknown")},...i.files?[{label:"Objects",value:String(i.files)}]:[],...i.sizeMb?[{label:"Size",value:`${i.sizeMb} MB`}]:[]],href:"/serverless/assets"});let E=c.find((s)=>e(s.key).startsWith("http"));a.push({id:"gateway",label:"HTTP entry point",kind:"gateway",layer:3,status:E?"ok":"unknown",sub:"Function URL / API Gateway",facts:[{label:"Endpoint",value:m||"not resolved"},{label:"Invocations (24h)",value:String(k.invocations??0)},...k.errorRatePct!=null?[{label:"Error rate",value:`${k.errorRatePct}%`}]:[]],href:"/serverless/metrics"});for(let s of c){let p=`fn:${e(s.name)}`;if(!e(s.name))continue;let S=Number(s.errors??0),R=Number(s.invocations??0);a.push({id:p,label:e(s.key,e(s.name)),kind:"function",layer:4,status:S>0?R&&S/R>0.02?"bad":"warn":R?"ok":"idle",sub:e(s.runtime,"lambda"),facts:[{label:"Function",value:e(s.name)},{label:"Memory",value:`${s.memory??0} MB`},{label:"Timeout",value:`${s.timeout??0}s`},{label:"Invocations (24h)",value:String(R)},{label:"Errors (24h)",value:String(S)},{label:"p95",value:`${s.p95??0} ms`},...s.provisioned?[{label:"Provisioned",value:e(s.provisioned)}]:[]],href:"/serverless/functions"})}for(let s of L){let p=`queue:${e(s.name)}`;if(!e(s.name))continue;let S=Number(s.dlq??0);a.push({id:p,label:e(s.name),kind:"queue",layer:5,status:S>0?"bad":Number(s.visible??0)>0?"warn":"ok",sub:"SQS",facts:[{label:"Visible",value:String(s.visible??0)},{label:"In flight",value:String(s.inFlight??0)},{label:"Processed (24h)",value:String(s.processed??0)},{label:"Dead letter",value:String(S)}],href:"/serverless/queues"})}let g=n.aurora;if(g)a.push({id:"database",label:"Aurora Serverless",kind:"database",layer:6,status:h(g.status),sub:e(g.engine,"aurora"),facts:[{label:"Cluster",value:e(g.id,"unknown")},{label:"Capacity",value:`${g.currentAcu??0} ACU (${g.minAcu??0}–${g.maxAcu??0})`},{label:"Connections",value:String(g.connections??0)}],href:"/serverless/data"});let v=n.proxy;if(v)a.push({id:"rds-proxy",label:"RDS Proxy",kind:"database",layer:5,status:h(v.status),sub:"Connection pooling",facts:[{label:"Proxy",value:e(v.name,"unknown")},{label:"Endpoint",value:e(v.endpoint,"unknown")},{label:"Pooled",value:String(v.pooledConns??0)}],href:"/serverless/data"});let w=n.redis;if(w)a.push({id:"cache",label:"ElastiCache",kind:"cache",layer:6,status:h(w.status),sub:e(w.node,"redis"),facts:[{label:"Group",value:e(w.id,"unknown")},{label:"Hit rate",value:`${w.hitRate??0}%`}],href:"/serverless/data"});let y=n.efs;if(y)a.push({id:"efs",label:"EFS",kind:"filesystem",layer:6,status:h(y.status),sub:e(y.mount,"/mnt/local"),facts:[{label:"File system",value:e(y.id,"unknown")},{label:"Mount",value:e(y.mount,"unknown")},{label:"Size",value:`${y.sizeMb??0} MB`}],href:"/data/volumes"});let A=n.scheduler??{};if(A.enabled)a.push({id:"scheduler",label:"Scheduler",kind:"scheduler",layer:3,status:"ok",sub:e(A.expression,"rate(1 minute)"),facts:[{label:"Expression",value:e(A.expression,"unknown")},{label:"Last run",value:e(A.lastRun,"unknown")}],href:"/operations/jobs"});let l=new Set(a.map((s)=>s.id)),x=l.has("waf")?"waf":"gateway";r(o,{source:"internet",target:"dns",flow:"request",label:"https"},l),r(o,{source:"dns",target:x,flow:"request"},l),r(o,{source:"dns",target:"cdn",flow:"request",label:"assets"},l),r(o,{source:"waf",target:"gateway",flow:"request",label:"allowed"},l),r(o,{source:"cdn",target:"assets",flow:"data",label:"origin"},l);let b=c.filter((s)=>e(s.key).startsWith("http")),D=c.filter((s)=>e(s.key).startsWith("queue")),t=c.filter((s)=>e(s.key).startsWith("cli"));for(let s of b)r(o,{source:"gateway",target:`fn:${e(s.name)}`,flow:"request",label:"invoke"},l);for(let s of t)r(o,{source:"scheduler",target:`fn:${e(s.name)}`,flow:"async",label:"schedule"},l);for(let s of L){for(let p of b)r(o,{source:`fn:${e(p.name)}`,target:`queue:${e(s.name)}`,flow:"async",label:"publish"},l);for(let p of D)r(o,{source:`queue:${e(s.name)}`,target:`fn:${e(p.name)}`,flow:"async",label:"consume"},l)}let d=["rds-proxy","database","cache","efs","assets"];for(let s of c){let p=`fn:${e(s.name)}`;if(l.has("rds-proxy"))r(o,{source:p,target:"rds-proxy",flow:"data",label:"pooled"},l);else r(o,{source:p,target:"database",flow:"data",label:"sql"},l);for(let S of d.filter((R)=>R!=="rds-proxy"&&R!=="database"))r(o,{source:p,target:S,flow:"data"},l)}return r(o,{source:"rds-proxy",target:"database",flow:"data",label:"sql"},l),{mode:"serverless",project:e(u.project)||e(f.name,"application"),environment:e(u.environment)||e(f.env,"production"),provider:"aws",region:e(f.region,"unknown"),generatedAt:new Date().toISOString(),layers:N,groups:[],nodes:a,links:o,notes:q}}
-export{I as fg,B as gg};
+export{I as gg,B as hg};

package/dist/bin/chunk-pqr8jqnd.js

@@ -0,0 +1 @@
+import{qd as a,rd as b}from"./chunk-cxd5cevb.js";import"./chunk-dbv8w56s.js";import"./chunk-0y89hs67.js";import"./chunk-ks4ewy1s.js";export{a as ACMClient,b as ACMDnsValidator};

package/dist/bin/{chunk-ckxpgwxw.js → chunk-q182t9ba.js}

@@ -1,3 +1,3 @@
-import{Zd as b}from"./chunk-pjpa4x52.js";import{hg as Z}from"./chunk-6eat8ezk.js";import{og as P}from"./chunk-d6zzgvtn.js";import{Jg as V,Kg as ne,Lg as U,Ng as R,Og as m,Pg as M,Wg as ie}from"./chunk-1v6bt68w.js";import{bh as se}from"./chunk-ey9fagrr.js";import{$h as ce,Wo as pe,Zh as ae,_h as oe,ap as fe,ho as le,io as ue,ko as ge,mo as de,no as me}from"./chunk-anm3ae6z.js";import{mp as Q}from"./chunk-b2ymh8k0.js";import{existsSync as Ae,readdirSync as Te,readFileSync as be,statSync as ke}from"node:fs";import{join as Se,relative as Ee}from"node:path";class _{client;region;constructor(e="us-east-1",t){this.region=e,this.client=new se}async createSecret(e){let t={Name:e.Name};if(e.Description)t.Description=e.Description;if(e.KmsKeyId)t.KmsKeyId=e.KmsKeyId;if(e.SecretBinary)t.SecretBinary=e.SecretBinary;if(e.SecretString)t.SecretString=e.SecretString;if(e.Tags&&e.Tags.length>0)t.Tags=e.Tags;if(e.AddReplicaRegions&&e.AddReplicaRegions.length>0)t.AddReplicaRegions=e.AddReplicaRegions;if(e.ForceOverwriteReplicaSecret!==void 0)t.ForceOverwriteReplicaSecret=e.ForceOverwriteReplicaSecret;t.ClientRequestToken=e.ClientRequestToken||crypto.randomUUID();let r=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.CreateSecret","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(t)});return{ARN:r.ARN,Name:r.Name,VersionId:r.VersionId,ReplicationStatus:r.ReplicationStatus}}async updateSecret(e){let t={SecretId:e.SecretId};if(e.Description)t.Description=e.Description;if(e.KmsKeyId)t.KmsKeyId=e.KmsKeyId;if(e.SecretBinary)t.SecretBinary=e.SecretBinary;if(e.SecretString)t.SecretString=e.SecretString;let r=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.UpdateSecret","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(t)});return{ARN:r.ARN,Name:r.Name,VersionId:r.VersionId}}async putSecretValue(e){let t={SecretId:e.SecretId};if(e.SecretBinary)t.SecretBinary=e.SecretBinary;if(e.SecretString)t.SecretString=e.SecretString;if(e.VersionStages&&e.VersionStages.length>0)t.VersionStages=e.VersionStages;if(e.ClientRequestToken)t.ClientRequestToken=e.ClientRequestToken;let r=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.PutSecretValue","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(t)});return{ARN:r.ARN,Name:r.Name,VersionId:r.VersionId,VersionStages:r.VersionStages}}async getSecretValue(e){let t={SecretId:e.SecretId};if(e.VersionId)t.VersionId=e.VersionId;if(e.VersionStage)t.VersionStage=e.VersionStage;let r=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.GetSecretValue","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(t)});return{ARN:r.ARN,Name:r.Name,VersionId:r.VersionId,SecretBinary:r.SecretBinary,SecretString:r.SecretString,VersionStages:r.VersionStages,CreatedDate:r.CreatedDate}}async describeSecret(e){let t={SecretId:e},r=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.DescribeSecret","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(t)});return this.parseSecret(r)}async listSecrets(e){let t={};if(e?.MaxResults)t.MaxResults=e.MaxResults;if(e?.NextToken)t.NextToken=e.NextToken;if(e?.Filters&&e.Filters.length>0)t.Filters=e.Filters;if(e?.SortOrder)t.SortOrder=e.SortOrder;let r=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.ListSecrets","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(t)});return{SecretList:r.SecretList?.map((s)=>this.parseSecret(s)),NextToken:r.NextToken}}async deleteSecret(e){let t={SecretId:e.SecretId};if(e.RecoveryWindowInDays!==void 0)t.RecoveryWindowInDays=e.RecoveryWindowInDays;if(e.ForceDeleteWithoutRecovery!==void 0)t.ForceDeleteWithoutRecovery=e.ForceDeleteWithoutRecovery;let r=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.DeleteSecret","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(t)});return{ARN:r.ARN,Name:r.Name,DeletionDate:r.DeletionDate}}async restoreSecret(e){let t={SecretId:e},r=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.RestoreSecret","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(t)});return{ARN:r.ARN,Name:r.Name}}async rotateSecret(e){let t={SecretId:e.SecretId};if(e.ClientRequestToken)t.ClientRequestToken=e.ClientRequestToken;if(e.RotationLambdaARN)t.RotationLambdaARN=e.RotationLambdaARN;if(e.RotationRules)t.RotationRules=e.RotationRules;if(e.RotateImmediately!==void 0)t.RotateImmediately=e.RotateImmediately;let r=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.RotateSecret","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(t)});return{ARN:r.ARN,Name:r.Name,VersionId:r.VersionId}}async cancelRotateSecret(e){let t={SecretId:e},r=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.CancelRotateSecret","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(t)});return{ARN:r.ARN,Name:r.Name}}async getResourcePolicy(e){let t={SecretId:e},r=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.GetResourcePolicy","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(t)});return{ARN:r.ARN,Name:r.Name,ResourcePolicy:r.ResourcePolicy}}async putResourcePolicy(e){let t={SecretId:e.SecretId,ResourcePolicy:e.ResourcePolicy};if(e.BlockPublicPolicy!==void 0)t.BlockPublicPolicy=e.BlockPublicPolicy;let r=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.PutResourcePolicy","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(t)});return{ARN:r.ARN,Name:r.Name}}async deleteResourcePolicy(e){let t={SecretId:e},r=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.DeleteResourcePolicy","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(t)});return{ARN:r.ARN,Name:r.Name}}async tagResource(e){let t={SecretId:e.SecretId,Tags:e.Tags};await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.TagResource","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(t)})}async untagResource(e){let t={SecretId:e.SecretId,TagKeys:e.TagKeys};await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.UntagResource","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(t)})}async setString(e,t,r){try{let s=await this.putSecretValue({SecretId:e,SecretString:t});return{ARN:s.ARN,VersionId:s.VersionId}}catch(s){if(s.code==="ResourceNotFoundException"){let n=await this.createSecret({Name:e,SecretString:t,Description:r?.description,KmsKeyId:r?.kmsKeyId,Tags:r?.tags});return{ARN:n.ARN,VersionId:n.VersionId}}throw s}}async setJson(e,t,r){return this.setString(e,JSON.stringify(t),r)}async getString(e){return(await this.getSecretValue({SecretId:e})).SecretString}async getJson(e){let t=await this.getString(e);if(t)return JSON.parse(t);return}async listAll(){let e=[],t;do{let r=await this.listSecrets({NextToken:t});if(r.SecretList)e.push(...r.SecretList);t=r.NextToken}while(t);return e}parseSecret(e){return{ARN:e.ARN,Name:e.Name,Description:e.Description,KmsKeyId:e.KmsKeyId,RotationEnabled:e.RotationEnabled,RotationLambdaARN:e.RotationLambdaARN,RotationRules:e.RotationRules,LastRotatedDate:e.LastRotatedDate,LastChangedDate:e.LastChangedDate,LastAccessedDate:e.LastAccessedDate,DeletedDate:e.DeletedDate,NextRotationDate:e.NextRotationDate,Tags:e.Tags,SecretVersionsToStages:e.SecretVersionsToStages,CreatedDate:e.CreatedDate,PrimaryRegion:e.PrimaryRegion}}}function v(e,t){let r=e.environments?.[t]?.app;if(!r)throw Error(`No serverless app configured for environment '${t}'. Add environments.${t}.app to your config.`);let s=e.project.slug,n=e.environments?.[t]?.region||e.project.region||"us-east-1";return{app:r,slug:s,region:n,stackName:ae(e,t),artifactBucket:oe(s,t),assetsBucket:ce(s,t)}}function He(e,t){let r=v(e,t),s=`${r.slug}-${t}`;return{region:r.region,slug:r.slug,stackName:r.stackName,functions:{http:`${s}-http`,queue:`${s}-queue`,cli:`${s}-cli`}}}async function D(e,t=8){let r;for(let s=0;s<t;s++)try{return await e()}catch(n){let i=n?.code||n?.name||"",a=String(n?.message||"");if(i==="ResourceConflictException"||/update is in progress|currently in the following state/i.test(a)){r=n,await new Promise((o)=>setTimeout(o,3000));continue}throw n}throw r}var ye=(e,t)=>`releases/${e}/${t}/current.json`;async function J(e,t,r,s){try{return await e.getObjectJson(t,ye(r,s))}catch{return null}}async function Re(e,t,r,s,n){await e.putObjectJson(t,ye(r,s),n)}async function Ie(e,t){if(!e.secrets)return{};let r=new _(t),s={},n=Array.isArray(e.secrets)?e.secrets.map((i)=>({envName:i.split("/").pop().toUpperCase().replace(/[^A-Z0-9_]/g,"_"),secretId:i})):Object.entries(e.secrets).map(([i,a])=>({envName:i,secretId:a}));if(Array.isArray(e.secrets)){let i=new Map;for(let{envName:o,secretId:c}of n)i.set(o,[...i.get(o)??[],c]);let a=[...i.entries()].filter(([,o])=>o.length>1);if(a.length){let o=a.map(([c,u])=>`${c} ← ${u.join(", ")}`).join("; ");throw Error(`serverless secrets: multiple secrets map to the same env var (${o}). Use the map form { ENV_NAME: 'secret/id' } to disambiguate.`)}}for(let{envName:i,secretId:a}of n){let c=(await r.getSecretValue({SecretId:a})).SecretString??"";try{let u=JSON.parse(c);if(u&&typeof u==="object"&&!Array.isArray(u)){for(let[p,d]of Object.entries(u))s[p]=String(d);continue}}catch{}s[i]=c}return s}function De(e,t){let r={},s=t.DbProxyEndpoint||t.DbEndpoint;if(s)r.DB_CONNECTION="mysql",r.DB_HOST=s,r.DB_PORT="3306",r.DB_DATABASE=r.DB_DATABASE||"app";if(t.CacheEndpoint){if(r.REDIS_HOST=t.CacheEndpoint,r.REDIS_PORT="6379",e.cache?.driver==="elasticache")r.CACHE_STORE="redis",r.CACHE_DRIVER="redis",r.SESSION_DRIVER="redis"}return r}function Y(e,t,r,s,n,i,a,o={}){let c=e.kind==="php"?pe({cacheDriver:e.cache?.driver==="elasticache"?"redis":"dynamodb"}):{};return{TSCLOUD_LAMBDA_MODE:s,TSCLOUD_ENV:r,MAINTENANCE_MODE:"0",...e.octane?{TSCLOUD_OCTANE:"1"}:{},...e.serveAssets?{TSCLOUD_SERVE_ASSETS:"1"}:{},...e.redirectRobotsTxt===!1?{TSCLOUD_REDIRECT_ROBOTS_TXT:"0"}:{},...c,...o,...t.app.cache?.driver!=="elasticache"?{TSCLOUD_CACHE_TABLE:`${t.slug}-${r}-cache`}:{},...a?{TSCLOUD_QUEUE:a,SQS_QUEUE:a}:{},...i?{ASSET_URL:i}:{},...e.env??{},...n}}function Pe(e){let t=e.slice(e.lastIndexOf(".")).toLowerCase();return{".html":"text/html",".css":"text/css",".js":"text/javascript",".mjs":"text/javascript",".json":"application/json",".svg":"image/svg+xml",".png":"image/png",".jpg":"image/jpeg",".jpeg":"image/jpeg",".gif":"image/gif",".webp":"image/webp",".ico":"image/x-icon",".woff":"font/woff",".woff2":"font/woff2",".txt":"text/plain",".map":"application/json"}[t]??"application/octet-stream"}function*he(e){for(let t of Te(e)){let r=Se(e,t);if(ke(r).isDirectory())yield*he(r);else yield r}}async function $e(e,t,r,s,n=!1){let i=0;for(let a of he(r)){let o=Ee(r,a).replace(/\\/g,"/");if(!n&&o.split("/").some((c)=>c.startsWith(".")))continue;await e.putObject({bucket:t,key:`${s}/${o}`,body:be(a),contentType:Pe(a),cacheControl:"public, max-age=31536000, immutable"}),i++}return i}function Oe(e,t){let r=Object.entries(t).reduce((s,[n,i])=>s+Buffer.byteLength(`${n}=${i}`,"utf8"),0);if(r>4096){let s=Object.entries(t).map(([n,i])=>[n,Buffer.byteLength(`${n}=${i}`,"utf8")]).sort((n,i)=>i[1]-n[1]).slice(0,5).map(([n,i])=>`${n} (${i}B)`).join(", ");throw Error(`${e}: environment variables total ${r}B, over AWS's 4096B limit (${r-4096}B too large). Largest: ${s}. Move large/secret values out of env — store them in Secrets Manager and fetch at cold start.`)}}async function F(e,t,r,s){Oe(t,r),await D(()=>e.updateFunctionConfiguration({FunctionName:t,Environment:{Variables:r}})),await e.waitForFunctionActive(t,120);let n=s.kind==="image"?{FunctionName:t,ImageUri:s.imageUri}:{FunctionName:t,S3Bucket:s.bucket,S3Key:s.key};await D(()=>e.updateFunctionCode(n)),await e.waitForFunctionActive(t,120)}async function z(e,t){let s=(await D(()=>e.publishVersion({FunctionName:t}))).Version;if(!s)throw Error(`publishVersion returned no version for ${t}`);return await D(()=>e.updateAlias({FunctionName:t,Name:"live",FunctionVersion:s})),s}async function We(e,t,r={}){let s=v(e,t),{app:n,slug:i,region:a,stackName:o,artifactBucket:c}=s,u=r.projectRoot??process.cwd();M(`Deploying serverless app: ${i} (${t})`),R(`Stack: ${o}`),R(`Region: ${a}`);let p=new P(a),d=new Z(a),y=new b(a),C=n.kind==="php",A=n.packaging==="image",g=ge(n),k,N,h,H,L=[];if(A&&g.usesLayer&&g.layerKind!=="php")throw Error(`packaging: 'image' currently supports PHP and managed Node runtimes. ${g.kind}${g.kind==="node"?` ${g.version}`:""} uses a custom runtime — `+"use the default zip packaging (the runtime layer is built + attached automatically).");if(A){m("Building + pushing container image");let{buildAndPushServerlessImage:l}=await import("./chunk-tna7ay8d.js"),f=await l({app:n,projectRoot:u,region:a,repository:`${i}-${t}`,skipBuild:r.skipBuild,onStep:(w)=>R(`  ${w}`)});k=f.handlers,N={kind:"image",imageUri:f.imageUri},h=f.tag,L.push({ParameterKey:"ImageUri",ParameterValue:f.imageUri})}else{m("Packaging application");let l=C?fe({projectRoot:u,app:n,skipBuild:r.skipBuild,onStep:(T)=>R(`  ${T}`)}):await ue({projectRoot:u,app:n,skipBuild:r.skipBuild,onStep:(T)=>R(`  ${T}`)}),f=le(i,t,l.sha256);if(R(`Artifact: ${l.sha256.slice(0,12)} (${(l.zip.length/1024).toFixed(0)} KB)`),k=l.handlers,h=l.sha256,g.usesLayer){let T=g.layerEnvVar?process.env[g.layerEnvVar]:void 0;if(H=n.layers??(T?[T]:void 0),!H?.length){let Ce=g.layerKind==="php"?"serverless:build-php-layer":g.layerKind==="bun"?"serverless:build-bun-layer":"serverless:build-node-layer";throw Error(`${g.kind} apps on provided.al2023 need a runtime layer. Set environments.<env>.app.layers or the ${g.layerEnvVar} env var (build one with \`cloud ${Ce}\`)${g.kind==="node"?", or use a managed Node version (18/20/22)":""}.`)}}if(!await p.bucketExists(c))m(`Creating artifact bucket ${c}`),await p.createBucket(c);if(await p.headObject(c,f).then((T)=>T!==null).catch(()=>!1))R("Artifact already uploaded — reusing");else m("Uploading artifact"),await p.putObject({bucket:c,key:f,body:l.zip,contentType:"application/zip"});N={kind:"zip",bucket:c,key:f},L.push({ParameterKey:"ArtifactBucket",ParameterValue:c},{ParameterKey:"ArtifactKey",ParameterValue:f})}let S=me({config:e,environment:t,app:n,handlers:k,runtimeLayers:H}),ee=JSON.stringify(S.template),te=["CAPABILITY_NAMED_IAM"],O=await d.describeStacks({stackName:o}).then((l)=>l.Stacks[0]?.StackStatus).catch(()=>{return}),q=O!==void 0;if(O&&/DELETE_IN_PROGRESS/.test(O))m("Waiting for an in-progress stack delete to finish"),await d.waitForStack(o,"stack-delete-complete").catch(()=>{}),q=!1;else if(O&&/(?:ROLLBACK_COMPLETE|REVIEW_IN_PROGRESS|CREATE_FAILED)/.test(O))m(`Deleting unusable stack (status ${O}) before recreate`),await d.deleteStack(o),await d.waitForStack(o,"stack-delete-complete").catch(()=>{}),q=!1;m(q?"Updating infrastructure stack":"Creating infrastructure stack");try{if(q)await d.updateStack({stackName:o,templateBody:ee,parameters:L,capabilities:te}),await d.waitForStack(o,"stack-update-complete");else await d.createStack({stackName:o,templateBody:ee,parameters:L,capabilities:te,onFailure:"DELETE"}),await d.waitForStack(o,"stack-create-complete")}catch(l){if(/No updates are to be performed/i.test(String(l?.message)))R("No infrastructure changes");else throw l}let W=await d.getStackOutputs(o).catch(()=>({})),E;if(n.assets){let l=Se(u,n.assets);if(Ae(l)){let f=n.assetDomain||W.AssetsCdnDomain;E=f?`https://${f}/${h}`:void 0,m(`Syncing assets from ${n.assets}`);let w=await $e(p,s.assetsBucket,l,h,n.dotFilesAsAssets);R(`Uploaded ${w} asset(s)${E?` → ${E}`:""}`)}else U(`Assets directory not found: ${l}`)}m("Resolving secrets");let B=await Ie(n,a);if(n.database?.connection==="aurora-serverless")try{let f=await new _(a).getSecretValue({SecretId:`${i}/${t}/db`}),w=JSON.parse(f.SecretString??"{}");if(w.username)B.DB_USERNAME=w.username;if(w.password)B.DB_PASSWORD=w.password}catch(l){U(`Could not resolve Aurora DB credentials: ${l.message}`)}if(!await p.bucketExists(c))await p.createBucket(c);let K=await J(p,c,i,t),I={},X=S.queueNames[0],G=De(n,W);if(m("Activating functions"),I.http=Y(n,s,t,"http",B,E,X,G),await F(y,S.functionNames.http,I.http,N),I.cli=Y(n,s,t,"cli",B,E,X,G),await F(y,S.functionNames.cli,I.cli,N),S.queueNames.length)I.queue=Y(n,s,t,"queue",B,E,X,G),await F(y,S.functionNames.queue,I.queue,N);let re=(n.provisionedConcurrency??0)>0,j={};if(re){if(m("Publishing versions + flipping live alias"),j.http=await z(y,S.functionNames.http),j.cli=await z(y,S.functionNames.cli),S.queueNames.length)j.queue=await z(y,S.functionNames.queue)}if(await Re(p,c,i,t,{sha:h,code:N,previousSha:K?.sha,previousCode:K?.code,previousFunctionEnv:K?.functionEnv,...re?{functionVersions:j,previousFunctionVersions:K?.functionVersions}:{},functionEnv:I,functionNames:{http:S.functionNames.http,cli:S.functionNames.cli,...S.queueNames.length?{queue:S.functionNames.queue}:{}},assetUrl:E,timestamp:new Date().toISOString()}),!r.skipDeployHooks&&n.deploy?.length){m("Running deploy hooks");for(let l of n.deploy){R(`  deploy: ${l}`);let f=await y.invoke({FunctionName:S.functionNames.cli,InvocationType:"RequestResponse",Payload:{command:l},LogType:"Tail"});if(f.FunctionError)throw ne("Deploy hook failed — the new build is ALREADY LIVE."),R(`  Roll back with: cloud serverless:rollback --env ${t}`),Error(`Deploy hook failed (${l}): ${f.Payload}`)}}let x=W.HttpApiEndpoint;if(!r.skipHealthCheck&&x){m("Health check");try{let l=await fetch(x,{method:"GET"});R(`GET ${x} → ${l.status}`)}catch(l){U(`Health check could not reach ${x}: ${l.message}`)}}ie(["Serverless deploy complete","",x?`URL:   ${x}`:"",`Stack: ${o}`,`Build: ${h.slice(0,12)}`].filter(Boolean).join(`
-`),"green")}async function Xe(e,t){let r=v(e,t),s=new P(r.region),n=new b(r.region),i=await J(s,r.artifactBucket,r.slug,t);if(!i)throw Error("No previous release to redeploy. Run a full deploy first.");M(`Redeploying ${r.slug} (${t}) — build ${i.sha.slice(0,12)}`);for(let[a,o]of Object.entries(i.functionNames)){if(!o)continue;m(`Re-activating ${a} (${o})`),await F(n,o,i.functionEnv[a]??{},i.code);let c=i.functionVersions?.[a];if(c)await D(()=>n.updateAlias({FunctionName:o,Name:"live",FunctionVersion:c}))}V("Redeploy complete")}async function Ge(e,t){let r=v(e,t),s=new P(r.region),n=new b(r.region),i=await J(s,r.artifactBucket,r.slug,t);if(!i?.previousCode)throw Error("No previous release to roll back to.");M(`Rolling back ${r.slug} (${t}) → ${i.previousSha?.slice(0,12)}`);for(let[a,o]of Object.entries(i.functionNames)){if(!o)continue;m(`Restoring ${a} (${o})`);let c=i.previousFunctionEnv?.[a]??i.functionEnv[a]??{};await F(n,o,c,i.previousCode);let u=i.previousFunctionVersions?.[a];if(u)await D(()=>n.updateAlias({FunctionName:o,Name:"live",FunctionVersion:u}))}await Re(s,r.artifactBucket,r.slug,t,{...i,sha:i.previousSha??i.sha,code:i.previousCode,functionEnv:i.previousFunctionEnv??i.functionEnv,functionVersions:i.previousFunctionVersions??i.functionVersions,previousSha:void 0,previousCode:void 0,previousFunctionEnv:void 0,previousFunctionVersions:void 0,timestamp:new Date().toISOString()}),V("Rollback complete")}async function Ye(e,t,r,s){let n=v(e,t),i=new b(n.region),a=`${n.slug}-${t}-http`,c={...(await i.getFunction(a)).Configuration?.Environment?.Variables??{}};if(c.MAINTENANCE_MODE=r?"1":"0",r&&s)c.MAINTENANCE_BYPASS_SECRET=s;if(!r)delete c.MAINTENANCE_BYPASS_SECRET;if(await D(()=>i.updateFunctionConfiguration({FunctionName:a,Environment:{Variables:c}})),(n.app.provisionedConcurrency??0)>0)await i.waitForFunctionActive(a,120),await z(i,a);V(r?"Application is now in maintenance mode (503)":"Application is live")}async function xe(e,t,r){let s=v(e,t),n=new b(s.region),i=`${s.slug}-${t}-cli`,a=await n.invoke({FunctionName:i,InvocationType:"RequestResponse",Payload:{command:r},LogType:"Tail"});if(a.FunctionError)throw Error(`Command failed: ${a.Payload}`);return a.Payload??""}var ve=(e,t)=>`commands/${e}/${t}/history.json`,Ve=50;async function Ne(e,t,r,s){try{return(await e.getObjectJson(t,ve(r,s)))?.records??[]}catch{return[]}}async function Qe(e,t,r){let s=v(e,t),n=new b(s.region),i=`${s.slug}-${t}-cli`,a=await n.invoke({FunctionName:i,InvocationType:"RequestResponse",Payload:{command:r},LogType:"Tail"}),o=a.Payload??"",c=a.FunctionError?"error":"ok",u=-1;try{let p=new P(s.region);if(await p.bucketExists(s.artifactBucket)){let d=await Ne(p,s.artifactBucket,s.slug,t);u=d.reduce((y,C)=>Math.max(y,C.id),0)+1,d.push({id:u,command:r,timestamp:new Date().toISOString(),status:c,output:o.slice(0,4000)}),await p.putObjectJson(s.artifactBucket,ve(s.slug,t),{records:d.slice(-Ve)})}}catch{}if(a.FunctionError)throw Error(`Command failed${u>0?` (#${u})`:""}: ${o}`);return{id:u,status:c,output:o}}async function Be(e,t){let r=v(e,t),s=new P(r.region);return Ne(s,r.artifactBucket,r.slug,t)}async function Ze(e,t,r){let s=await Be(e,t);if(!s.length)return;return r==null?s[s.length-1]:s.find((n)=>n.id===r)}async function et(e,t,r){let s=Buffer.from(r,"utf-8").toString("base64");return xe(e,t,`tscloud:db-query --sql-base64=${s}`)}async function tt(e,t){let r=v(e,t),s=new Z(r.region),n=new b(r.region),i=new P(r.region),a="not deployed",o={};try{let{Stacks:A}=await s.describeStacks({stackName:r.stackName});a=A?.[0]?.StackStatus??a;for(let g of A?.[0]?.Outputs??[])if(g.OutputKey)o[g.OutputKey]=g.OutputValue??""}catch{}let c=de(r.app,r.slug,t),u=r.app.provisionedConcurrency??0,p=["http","cli",...c.length?["queue"]:[]],d=`${r.slug}-${t}`,y=[];for(let A of p){let g=`${d}-${A}`,k={mode:A,name:g,version:"$LATEST"};if(u>0){let N=await n.getAlias(g,"live").catch(()=>null);if(N?.FunctionVersion){k.version=N.FunctionVersion;let h=await n.getProvisionedConcurrencyConfig(g,"live").catch(()=>null);if(h)k.provisioned={status:h.Status??"-",allocated:h.AllocatedProvisionedConcurrentExecutions??0,requested:h.RequestedProvisionedConcurrentExecutions??0}}}y.push(k)}let C=await J(i,r.artifactBucket,r.slug,t).catch(()=>null);return{slug:r.slug,environment:t,region:r.region,stackStatus:a,endpoint:o.HttpApiEndpoint,assetUrl:C?.assetUrl,scheduler:r.app.scheduler??"on",queues:c,provisionedConcurrency:u,functions:y,lastRelease:C?{sha:C.sha,timestamp:C.timestamp}:void 0}}function we(e,t){return`${e}-${t}-db`}async function rt(e,t,r,s){let n=v(e,t);if(n.app.database?.connection!=="aurora-serverless")throw Error("No Aurora Serverless v2 database is configured for this environment.");let{RDSClient:i}=await import("./chunk-tp4c2mv1.js"),a=new i(n.region),o=we(n.slug,t);m(`Scaling ${o} → ${r}–${s} ACUs`),await a.modifyDBCluster({DBClusterIdentifier:o,ServerlessV2ScalingConfiguration:{MinCapacity:r,MaxCapacity:s},ApplyImmediately:!0}),V(`Scaling applied to ${o} (takes effect shortly).`)}async function st(e,t,r){let s=v(e,t);if(s.app.database?.connection!=="aurora-serverless")throw Error("No Aurora Serverless v2 database is configured for this environment.");if(!r.toTime&&!r.latest)throw Error("Specify a restore point: --to <ISO timestamp> or --latest.");let{RDSClient:n}=await import("./chunk-tp4c2mv1.js"),i=new n(s.region),a=we(s.slug,t),o=r.latest?"latest":r.toTime.toISOString().replace(/[^0-9]/g,"").slice(0,14),c=r.target??`${a}-restore-${o}`;m(`Restoring ${a} → new cluster ${c} (${r.latest?"latest restorable time":r.toTime.toISOString()})`),await i.restoreDBClusterToPointInTime({DBClusterIdentifier:c,SourceDBClusterIdentifier:a,RestoreToTime:r.toTime,UseLatestRestorableTime:r.latest}),m("Waiting for the restored cluster to be ready");for(let u=0;u<120;u++){let{DBClusters:p}=await i.describeDBClusters({DBClusterIdentifier:c}),d=p?.[0]?.Status;if(d&&d!=="creating")break;await new Promise((y)=>setTimeout(y,15000))}return m("Adding a writer instance"),await i.createDBInstance({DBInstanceIdentifier:`${c}-1`,DBClusterIdentifier:c,Engine:"aurora-mysql",DBInstanceClass:"db.serverless"}),V(`Restore complete → cluster ${c} with writer ${c}-1. Point an env's database at it once available.`),c}
+import{Zd as b}from"./chunk-nmkm1f68.js";import{ig as Z}from"./chunk-21gggxvf.js";import{pg as P}from"./chunk-4a85nk2q.js";import{Kg as V,Lg as ne,Mg as U,Og as R,Pg as m,Qg as M,Xg as ie}from"./chunk-y3rm37z1.js";import{ch as se}from"./chunk-0y89hs67.js";import{$h as oe,Xo as pe,_h as ae,ai as ce,bp as fe,io as le,jo as ue,lo as ge,no as de,oo as me}from"./chunk-4a97kbk1.js";import{np as Q}from"./chunk-ks4ewy1s.js";import{existsSync as Ae,readdirSync as Te,readFileSync as be,statSync as ke}from"node:fs";import{join as Se,relative as Ee}from"node:path";class _{client;region;constructor(e="us-east-1",t){this.region=e,this.client=new se}async createSecret(e){let t={Name:e.Name};if(e.Description)t.Description=e.Description;if(e.KmsKeyId)t.KmsKeyId=e.KmsKeyId;if(e.SecretBinary)t.SecretBinary=e.SecretBinary;if(e.SecretString)t.SecretString=e.SecretString;if(e.Tags&&e.Tags.length>0)t.Tags=e.Tags;if(e.AddReplicaRegions&&e.AddReplicaRegions.length>0)t.AddReplicaRegions=e.AddReplicaRegions;if(e.ForceOverwriteReplicaSecret!==void 0)t.ForceOverwriteReplicaSecret=e.ForceOverwriteReplicaSecret;t.ClientRequestToken=e.ClientRequestToken||crypto.randomUUID();let r=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.CreateSecret","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(t)});return{ARN:r.ARN,Name:r.Name,VersionId:r.VersionId,ReplicationStatus:r.ReplicationStatus}}async updateSecret(e){let t={SecretId:e.SecretId};if(e.Description)t.Description=e.Description;if(e.KmsKeyId)t.KmsKeyId=e.KmsKeyId;if(e.SecretBinary)t.SecretBinary=e.SecretBinary;if(e.SecretString)t.SecretString=e.SecretString;let r=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.UpdateSecret","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(t)});return{ARN:r.ARN,Name:r.Name,VersionId:r.VersionId}}async putSecretValue(e){let t={SecretId:e.SecretId};if(e.SecretBinary)t.SecretBinary=e.SecretBinary;if(e.SecretString)t.SecretString=e.SecretString;if(e.VersionStages&&e.VersionStages.length>0)t.VersionStages=e.VersionStages;if(e.ClientRequestToken)t.ClientRequestToken=e.ClientRequestToken;let r=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.PutSecretValue","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(t)});return{ARN:r.ARN,Name:r.Name,VersionId:r.VersionId,VersionStages:r.VersionStages}}async getSecretValue(e){let t={SecretId:e.SecretId};if(e.VersionId)t.VersionId=e.VersionId;if(e.VersionStage)t.VersionStage=e.VersionStage;let r=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.GetSecretValue","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(t)});return{ARN:r.ARN,Name:r.Name,VersionId:r.VersionId,SecretBinary:r.SecretBinary,SecretString:r.SecretString,VersionStages:r.VersionStages,CreatedDate:r.CreatedDate}}async describeSecret(e){let t={SecretId:e},r=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.DescribeSecret","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(t)});return this.parseSecret(r)}async listSecrets(e){let t={};if(e?.MaxResults)t.MaxResults=e.MaxResults;if(e?.NextToken)t.NextToken=e.NextToken;if(e?.Filters&&e.Filters.length>0)t.Filters=e.Filters;if(e?.SortOrder)t.SortOrder=e.SortOrder;let r=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.ListSecrets","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(t)});return{SecretList:r.SecretList?.map((s)=>this.parseSecret(s)),NextToken:r.NextToken}}async deleteSecret(e){let t={SecretId:e.SecretId};if(e.RecoveryWindowInDays!==void 0)t.RecoveryWindowInDays=e.RecoveryWindowInDays;if(e.ForceDeleteWithoutRecovery!==void 0)t.ForceDeleteWithoutRecovery=e.ForceDeleteWithoutRecovery;let r=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.DeleteSecret","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(t)});return{ARN:r.ARN,Name:r.Name,DeletionDate:r.DeletionDate}}async restoreSecret(e){let t={SecretId:e},r=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.RestoreSecret","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(t)});return{ARN:r.ARN,Name:r.Name}}async rotateSecret(e){let t={SecretId:e.SecretId};if(e.ClientRequestToken)t.ClientRequestToken=e.ClientRequestToken;if(e.RotationLambdaARN)t.RotationLambdaARN=e.RotationLambdaARN;if(e.RotationRules)t.RotationRules=e.RotationRules;if(e.RotateImmediately!==void 0)t.RotateImmediately=e.RotateImmediately;let r=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.RotateSecret","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(t)});return{ARN:r.ARN,Name:r.Name,VersionId:r.VersionId}}async cancelRotateSecret(e){let t={SecretId:e},r=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.CancelRotateSecret","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(t)});return{ARN:r.ARN,Name:r.Name}}async getResourcePolicy(e){let t={SecretId:e},r=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.GetResourcePolicy","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(t)});return{ARN:r.ARN,Name:r.Name,ResourcePolicy:r.ResourcePolicy}}async putResourcePolicy(e){let t={SecretId:e.SecretId,ResourcePolicy:e.ResourcePolicy};if(e.BlockPublicPolicy!==void 0)t.BlockPublicPolicy=e.BlockPublicPolicy;let r=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.PutResourcePolicy","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(t)});return{ARN:r.ARN,Name:r.Name}}async deleteResourcePolicy(e){let t={SecretId:e},r=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.DeleteResourcePolicy","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(t)});return{ARN:r.ARN,Name:r.Name}}async tagResource(e){let t={SecretId:e.SecretId,Tags:e.Tags};await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.TagResource","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(t)})}async untagResource(e){let t={SecretId:e.SecretId,TagKeys:e.TagKeys};await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.UntagResource","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(t)})}async setString(e,t,r){try{let s=await this.putSecretValue({SecretId:e,SecretString:t});return{ARN:s.ARN,VersionId:s.VersionId}}catch(s){if(s.code==="ResourceNotFoundException"){let n=await this.createSecret({Name:e,SecretString:t,Description:r?.description,KmsKeyId:r?.kmsKeyId,Tags:r?.tags});return{ARN:n.ARN,VersionId:n.VersionId}}throw s}}async setJson(e,t,r){return this.setString(e,JSON.stringify(t),r)}async getString(e){return(await this.getSecretValue({SecretId:e})).SecretString}async getJson(e){let t=await this.getString(e);if(t)return JSON.parse(t);return}async listAll(){let e=[],t;do{let r=await this.listSecrets({NextToken:t});if(r.SecretList)e.push(...r.SecretList);t=r.NextToken}while(t);return e}parseSecret(e){return{ARN:e.ARN,Name:e.Name,Description:e.Description,KmsKeyId:e.KmsKeyId,RotationEnabled:e.RotationEnabled,RotationLambdaARN:e.RotationLambdaARN,RotationRules:e.RotationRules,LastRotatedDate:e.LastRotatedDate,LastChangedDate:e.LastChangedDate,LastAccessedDate:e.LastAccessedDate,DeletedDate:e.DeletedDate,NextRotationDate:e.NextRotationDate,Tags:e.Tags,SecretVersionsToStages:e.SecretVersionsToStages,CreatedDate:e.CreatedDate,PrimaryRegion:e.PrimaryRegion}}}function v(e,t){let r=e.environments?.[t]?.app;if(!r)throw Error(`No serverless app configured for environment '${t}'. Add environments.${t}.app to your config.`);let s=e.project.slug,n=e.environments?.[t]?.region||e.project.region||"us-east-1";return{app:r,slug:s,region:n,stackName:ae(e,t),artifactBucket:oe(s,t),assetsBucket:ce(s,t)}}function He(e,t){let r=v(e,t),s=`${r.slug}-${t}`;return{region:r.region,slug:r.slug,stackName:r.stackName,functions:{http:`${s}-http`,queue:`${s}-queue`,cli:`${s}-cli`}}}async function D(e,t=8){let r;for(let s=0;s<t;s++)try{return await e()}catch(n){let i=n?.code||n?.name||"",a=String(n?.message||"");if(i==="ResourceConflictException"||/update is in progress|currently in the following state/i.test(a)){r=n,await new Promise((o)=>setTimeout(o,3000));continue}throw n}throw r}var ye=(e,t)=>`releases/${e}/${t}/current.json`;async function J(e,t,r,s){try{return await e.getObjectJson(t,ye(r,s))}catch{return null}}async function Re(e,t,r,s,n){await e.putObjectJson(t,ye(r,s),n)}async function Ie(e,t){if(!e.secrets)return{};let r=new _(t),s={},n=Array.isArray(e.secrets)?e.secrets.map((i)=>({envName:i.split("/").pop().toUpperCase().replace(/[^A-Z0-9_]/g,"_"),secretId:i})):Object.entries(e.secrets).map(([i,a])=>({envName:i,secretId:a}));if(Array.isArray(e.secrets)){let i=new Map;for(let{envName:o,secretId:c}of n)i.set(o,[...i.get(o)??[],c]);let a=[...i.entries()].filter(([,o])=>o.length>1);if(a.length){let o=a.map(([c,u])=>`${c} ← ${u.join(", ")}`).join("; ");throw Error(`serverless secrets: multiple secrets map to the same env var (${o}). Use the map form { ENV_NAME: 'secret/id' } to disambiguate.`)}}for(let{envName:i,secretId:a}of n){let c=(await r.getSecretValue({SecretId:a})).SecretString??"";try{let u=JSON.parse(c);if(u&&typeof u==="object"&&!Array.isArray(u)){for(let[p,d]of Object.entries(u))s[p]=String(d);continue}}catch{}s[i]=c}return s}function De(e,t){let r={},s=t.DbProxyEndpoint||t.DbEndpoint;if(s)r.DB_CONNECTION="mysql",r.DB_HOST=s,r.DB_PORT="3306",r.DB_DATABASE=r.DB_DATABASE||"app";if(t.CacheEndpoint){if(r.REDIS_HOST=t.CacheEndpoint,r.REDIS_PORT="6379",e.cache?.driver==="elasticache")r.CACHE_STORE="redis",r.CACHE_DRIVER="redis",r.SESSION_DRIVER="redis"}return r}function Y(e,t,r,s,n,i,a,o={}){let c=e.kind==="php"?pe({cacheDriver:e.cache?.driver==="elasticache"?"redis":"dynamodb"}):{};return{TSCLOUD_LAMBDA_MODE:s,TSCLOUD_ENV:r,MAINTENANCE_MODE:"0",...e.octane?{TSCLOUD_OCTANE:"1"}:{},...e.serveAssets?{TSCLOUD_SERVE_ASSETS:"1"}:{},...e.redirectRobotsTxt===!1?{TSCLOUD_REDIRECT_ROBOTS_TXT:"0"}:{},...c,...o,...t.app.cache?.driver!=="elasticache"?{TSCLOUD_CACHE_TABLE:`${t.slug}-${r}-cache`}:{},...a?{TSCLOUD_QUEUE:a,SQS_QUEUE:a}:{},...i?{ASSET_URL:i}:{},...e.env??{},...n}}function Pe(e){let t=e.slice(e.lastIndexOf(".")).toLowerCase();return{".html":"text/html",".css":"text/css",".js":"text/javascript",".mjs":"text/javascript",".json":"application/json",".svg":"image/svg+xml",".png":"image/png",".jpg":"image/jpeg",".jpeg":"image/jpeg",".gif":"image/gif",".webp":"image/webp",".ico":"image/x-icon",".woff":"font/woff",".woff2":"font/woff2",".txt":"text/plain",".map":"application/json"}[t]??"application/octet-stream"}function*he(e){for(let t of Te(e)){let r=Se(e,t);if(ke(r).isDirectory())yield*he(r);else yield r}}async function $e(e,t,r,s,n=!1){let i=0;for(let a of he(r)){let o=Ee(r,a).replace(/\\/g,"/");if(!n&&o.split("/").some((c)=>c.startsWith(".")))continue;await e.putObject({bucket:t,key:`${s}/${o}`,body:be(a),contentType:Pe(a),cacheControl:"public, max-age=31536000, immutable"}),i++}return i}function Oe(e,t){let r=Object.entries(t).reduce((s,[n,i])=>s+Buffer.byteLength(`${n}=${i}`,"utf8"),0);if(r>4096){let s=Object.entries(t).map(([n,i])=>[n,Buffer.byteLength(`${n}=${i}`,"utf8")]).sort((n,i)=>i[1]-n[1]).slice(0,5).map(([n,i])=>`${n} (${i}B)`).join(", ");throw Error(`${e}: environment variables total ${r}B, over AWS's 4096B limit (${r-4096}B too large). Largest: ${s}. Move large/secret values out of env — store them in Secrets Manager and fetch at cold start.`)}}async function F(e,t,r,s){Oe(t,r),await D(()=>e.updateFunctionConfiguration({FunctionName:t,Environment:{Variables:r}})),await e.waitForFunctionActive(t,120);let n=s.kind==="image"?{FunctionName:t,ImageUri:s.imageUri}:{FunctionName:t,S3Bucket:s.bucket,S3Key:s.key};await D(()=>e.updateFunctionCode(n)),await e.waitForFunctionActive(t,120)}async function z(e,t){let s=(await D(()=>e.publishVersion({FunctionName:t}))).Version;if(!s)throw Error(`publishVersion returned no version for ${t}`);return await D(()=>e.updateAlias({FunctionName:t,Name:"live",FunctionVersion:s})),s}async function We(e,t,r={}){let s=v(e,t),{app:n,slug:i,region:a,stackName:o,artifactBucket:c}=s,u=r.projectRoot??process.cwd();M(`Deploying serverless app: ${i} (${t})`),R(`Stack: ${o}`),R(`Region: ${a}`);let p=new P(a),d=new Z(a),y=new b(a),C=n.kind==="php",A=n.packaging==="image",g=ge(n),k,N,h,H,L=[];if(A&&g.usesLayer&&g.layerKind!=="php")throw Error(`packaging: 'image' currently supports PHP and managed Node runtimes. ${g.kind}${g.kind==="node"?` ${g.version}`:""} uses a custom runtime — `+"use the default zip packaging (the runtime layer is built + attached automatically).");if(A){m("Building + pushing container image");let{buildAndPushServerlessImage:l}=await import("./chunk-6tct7e89.js"),f=await l({app:n,projectRoot:u,region:a,repository:`${i}-${t}`,skipBuild:r.skipBuild,onStep:(w)=>R(`  ${w}`)});k=f.handlers,N={kind:"image",imageUri:f.imageUri},h=f.tag,L.push({ParameterKey:"ImageUri",ParameterValue:f.imageUri})}else{m("Packaging application");let l=C?fe({projectRoot:u,app:n,skipBuild:r.skipBuild,onStep:(T)=>R(`  ${T}`)}):await ue({projectRoot:u,app:n,skipBuild:r.skipBuild,onStep:(T)=>R(`  ${T}`)}),f=le(i,t,l.sha256);if(R(`Artifact: ${l.sha256.slice(0,12)} (${(l.zip.length/1024).toFixed(0)} KB)`),k=l.handlers,h=l.sha256,g.usesLayer){let T=g.layerEnvVar?process.env[g.layerEnvVar]:void 0;if(H=n.layers??(T?[T]:void 0),!H?.length){let Ce=g.layerKind==="php"?"serverless:build-php-layer":g.layerKind==="bun"?"serverless:build-bun-layer":"serverless:build-node-layer";throw Error(`${g.kind} apps on provided.al2023 need a runtime layer. Set environments.<env>.app.layers or the ${g.layerEnvVar} env var (build one with \`cloud ${Ce}\`)${g.kind==="node"?", or use a managed Node version (18/20/22)":""}.`)}}if(!await p.bucketExists(c))m(`Creating artifact bucket ${c}`),await p.createBucket(c);if(await p.headObject(c,f).then((T)=>T!==null).catch(()=>!1))R("Artifact already uploaded — reusing");else m("Uploading artifact"),await p.putObject({bucket:c,key:f,body:l.zip,contentType:"application/zip"});N={kind:"zip",bucket:c,key:f},L.push({ParameterKey:"ArtifactBucket",ParameterValue:c},{ParameterKey:"ArtifactKey",ParameterValue:f})}let S=me({config:e,environment:t,app:n,handlers:k,runtimeLayers:H}),ee=JSON.stringify(S.template),te=["CAPABILITY_NAMED_IAM"],O=await d.describeStacks({stackName:o}).then((l)=>l.Stacks[0]?.StackStatus).catch(()=>{return}),q=O!==void 0;if(O&&/DELETE_IN_PROGRESS/.test(O))m("Waiting for an in-progress stack delete to finish"),await d.waitForStack(o,"stack-delete-complete").catch(()=>{}),q=!1;else if(O&&/(?:ROLLBACK_COMPLETE|REVIEW_IN_PROGRESS|CREATE_FAILED)/.test(O))m(`Deleting unusable stack (status ${O}) before recreate`),await d.deleteStack(o),await d.waitForStack(o,"stack-delete-complete").catch(()=>{}),q=!1;m(q?"Updating infrastructure stack":"Creating infrastructure stack");try{if(q)await d.updateStack({stackName:o,templateBody:ee,parameters:L,capabilities:te}),await d.waitForStack(o,"stack-update-complete");else await d.createStack({stackName:o,templateBody:ee,parameters:L,capabilities:te,onFailure:"DELETE"}),await d.waitForStack(o,"stack-create-complete")}catch(l){if(/No updates are to be performed/i.test(String(l?.message)))R("No infrastructure changes");else throw l}let W=await d.getStackOutputs(o).catch(()=>({})),E;if(n.assets){let l=Se(u,n.assets);if(Ae(l)){let f=n.assetDomain||W.AssetsCdnDomain;E=f?`https://${f}/${h}`:void 0,m(`Syncing assets from ${n.assets}`);let w=await $e(p,s.assetsBucket,l,h,n.dotFilesAsAssets);R(`Uploaded ${w} asset(s)${E?` → ${E}`:""}`)}else U(`Assets directory not found: ${l}`)}m("Resolving secrets");let B=await Ie(n,a);if(n.database?.connection==="aurora-serverless")try{let f=await new _(a).getSecretValue({SecretId:`${i}/${t}/db`}),w=JSON.parse(f.SecretString??"{}");if(w.username)B.DB_USERNAME=w.username;if(w.password)B.DB_PASSWORD=w.password}catch(l){U(`Could not resolve Aurora DB credentials: ${l.message}`)}if(!await p.bucketExists(c))await p.createBucket(c);let K=await J(p,c,i,t),I={},X=S.queueNames[0],G=De(n,W);if(m("Activating functions"),I.http=Y(n,s,t,"http",B,E,X,G),await F(y,S.functionNames.http,I.http,N),I.cli=Y(n,s,t,"cli",B,E,X,G),await F(y,S.functionNames.cli,I.cli,N),S.queueNames.length)I.queue=Y(n,s,t,"queue",B,E,X,G),await F(y,S.functionNames.queue,I.queue,N);let re=(n.provisionedConcurrency??0)>0,j={};if(re){if(m("Publishing versions + flipping live alias"),j.http=await z(y,S.functionNames.http),j.cli=await z(y,S.functionNames.cli),S.queueNames.length)j.queue=await z(y,S.functionNames.queue)}if(await Re(p,c,i,t,{sha:h,code:N,previousSha:K?.sha,previousCode:K?.code,previousFunctionEnv:K?.functionEnv,...re?{functionVersions:j,previousFunctionVersions:K?.functionVersions}:{},functionEnv:I,functionNames:{http:S.functionNames.http,cli:S.functionNames.cli,...S.queueNames.length?{queue:S.functionNames.queue}:{}},assetUrl:E,timestamp:new Date().toISOString()}),!r.skipDeployHooks&&n.deploy?.length){m("Running deploy hooks");for(let l of n.deploy){R(`  deploy: ${l}`);let f=await y.invoke({FunctionName:S.functionNames.cli,InvocationType:"RequestResponse",Payload:{command:l},LogType:"Tail"});if(f.FunctionError)throw ne("Deploy hook failed — the new build is ALREADY LIVE."),R(`  Roll back with: cloud serverless:rollback --env ${t}`),Error(`Deploy hook failed (${l}): ${f.Payload}`)}}let x=W.HttpApiEndpoint;if(!r.skipHealthCheck&&x){m("Health check");try{let l=await fetch(x,{method:"GET"});R(`GET ${x} → ${l.status}`)}catch(l){U(`Health check could not reach ${x}: ${l.message}`)}}ie(["Serverless deploy complete","",x?`URL:   ${x}`:"",`Stack: ${o}`,`Build: ${h.slice(0,12)}`].filter(Boolean).join(`
+`),"green")}async function Xe(e,t){let r=v(e,t),s=new P(r.region),n=new b(r.region),i=await J(s,r.artifactBucket,r.slug,t);if(!i)throw Error("No previous release to redeploy. Run a full deploy first.");M(`Redeploying ${r.slug} (${t}) — build ${i.sha.slice(0,12)}`);for(let[a,o]of Object.entries(i.functionNames)){if(!o)continue;m(`Re-activating ${a} (${o})`),await F(n,o,i.functionEnv[a]??{},i.code);let c=i.functionVersions?.[a];if(c)await D(()=>n.updateAlias({FunctionName:o,Name:"live",FunctionVersion:c}))}V("Redeploy complete")}async function Ge(e,t){let r=v(e,t),s=new P(r.region),n=new b(r.region),i=await J(s,r.artifactBucket,r.slug,t);if(!i?.previousCode)throw Error("No previous release to roll back to.");M(`Rolling back ${r.slug} (${t}) → ${i.previousSha?.slice(0,12)}`);for(let[a,o]of Object.entries(i.functionNames)){if(!o)continue;m(`Restoring ${a} (${o})`);let c=i.previousFunctionEnv?.[a]??i.functionEnv[a]??{};await F(n,o,c,i.previousCode);let u=i.previousFunctionVersions?.[a];if(u)await D(()=>n.updateAlias({FunctionName:o,Name:"live",FunctionVersion:u}))}await Re(s,r.artifactBucket,r.slug,t,{...i,sha:i.previousSha??i.sha,code:i.previousCode,functionEnv:i.previousFunctionEnv??i.functionEnv,functionVersions:i.previousFunctionVersions??i.functionVersions,previousSha:void 0,previousCode:void 0,previousFunctionEnv:void 0,previousFunctionVersions:void 0,timestamp:new Date().toISOString()}),V("Rollback complete")}async function Ye(e,t,r,s){let n=v(e,t),i=new b(n.region),a=`${n.slug}-${t}-http`,c={...(await i.getFunction(a)).Configuration?.Environment?.Variables??{}};if(c.MAINTENANCE_MODE=r?"1":"0",r&&s)c.MAINTENANCE_BYPASS_SECRET=s;if(!r)delete c.MAINTENANCE_BYPASS_SECRET;if(await D(()=>i.updateFunctionConfiguration({FunctionName:a,Environment:{Variables:c}})),(n.app.provisionedConcurrency??0)>0)await i.waitForFunctionActive(a,120),await z(i,a);V(r?"Application is now in maintenance mode (503)":"Application is live")}async function xe(e,t,r){let s=v(e,t),n=new b(s.region),i=`${s.slug}-${t}-cli`,a=await n.invoke({FunctionName:i,InvocationType:"RequestResponse",Payload:{command:r},LogType:"Tail"});if(a.FunctionError)throw Error(`Command failed: ${a.Payload}`);return a.Payload??""}var ve=(e,t)=>`commands/${e}/${t}/history.json`,Ve=50;async function Ne(e,t,r,s){try{return(await e.getObjectJson(t,ve(r,s)))?.records??[]}catch{return[]}}async function Qe(e,t,r){let s=v(e,t),n=new b(s.region),i=`${s.slug}-${t}-cli`,a=await n.invoke({FunctionName:i,InvocationType:"RequestResponse",Payload:{command:r},LogType:"Tail"}),o=a.Payload??"",c=a.FunctionError?"error":"ok",u=-1;try{let p=new P(s.region);if(await p.bucketExists(s.artifactBucket)){let d=await Ne(p,s.artifactBucket,s.slug,t);u=d.reduce((y,C)=>Math.max(y,C.id),0)+1,d.push({id:u,command:r,timestamp:new Date().toISOString(),status:c,output:o.slice(0,4000)}),await p.putObjectJson(s.artifactBucket,ve(s.slug,t),{records:d.slice(-Ve)})}}catch{}if(a.FunctionError)throw Error(`Command failed${u>0?` (#${u})`:""}: ${o}`);return{id:u,status:c,output:o}}async function Be(e,t){let r=v(e,t),s=new P(r.region);return Ne(s,r.artifactBucket,r.slug,t)}async function Ze(e,t,r){let s=await Be(e,t);if(!s.length)return;return r==null?s[s.length-1]:s.find((n)=>n.id===r)}async function et(e,t,r){let s=Buffer.from(r,"utf-8").toString("base64");return xe(e,t,`tscloud:db-query --sql-base64=${s}`)}async function tt(e,t){let r=v(e,t),s=new Z(r.region),n=new b(r.region),i=new P(r.region),a="not deployed",o={};try{let{Stacks:A}=await s.describeStacks({stackName:r.stackName});a=A?.[0]?.StackStatus??a;for(let g of A?.[0]?.Outputs??[])if(g.OutputKey)o[g.OutputKey]=g.OutputValue??""}catch{}let c=de(r.app,r.slug,t),u=r.app.provisionedConcurrency??0,p=["http","cli",...c.length?["queue"]:[]],d=`${r.slug}-${t}`,y=[];for(let A of p){let g=`${d}-${A}`,k={mode:A,name:g,version:"$LATEST"};if(u>0){let N=await n.getAlias(g,"live").catch(()=>null);if(N?.FunctionVersion){k.version=N.FunctionVersion;let h=await n.getProvisionedConcurrencyConfig(g,"live").catch(()=>null);if(h)k.provisioned={status:h.Status??"-",allocated:h.AllocatedProvisionedConcurrentExecutions??0,requested:h.RequestedProvisionedConcurrentExecutions??0}}}y.push(k)}let C=await J(i,r.artifactBucket,r.slug,t).catch(()=>null);return{slug:r.slug,environment:t,region:r.region,stackStatus:a,endpoint:o.HttpApiEndpoint,assetUrl:C?.assetUrl,scheduler:r.app.scheduler??"on",queues:c,provisionedConcurrency:u,functions:y,lastRelease:C?{sha:C.sha,timestamp:C.timestamp}:void 0}}function we(e,t){return`${e}-${t}-db`}async function rt(e,t,r,s){let n=v(e,t);if(n.app.database?.connection!=="aurora-serverless")throw Error("No Aurora Serverless v2 database is configured for this environment.");let{RDSClient:i}=await import("./chunk-wy20ztb6.js"),a=new i(n.region),o=we(n.slug,t);m(`Scaling ${o} → ${r}–${s} ACUs`),await a.modifyDBCluster({DBClusterIdentifier:o,ServerlessV2ScalingConfiguration:{MinCapacity:r,MaxCapacity:s},ApplyImmediately:!0}),V(`Scaling applied to ${o} (takes effect shortly).`)}async function st(e,t,r){let s=v(e,t);if(s.app.database?.connection!=="aurora-serverless")throw Error("No Aurora Serverless v2 database is configured for this environment.");if(!r.toTime&&!r.latest)throw Error("Specify a restore point: --to <ISO timestamp> or --latest.");let{RDSClient:n}=await import("./chunk-wy20ztb6.js"),i=new n(s.region),a=we(s.slug,t),o=r.latest?"latest":r.toTime.toISOString().replace(/[^0-9]/g,"").slice(0,14),c=r.target??`${a}-restore-${o}`;m(`Restoring ${a} → new cluster ${c} (${r.latest?"latest restorable time":r.toTime.toISOString()})`),await i.restoreDBClusterToPointInTime({DBClusterIdentifier:c,SourceDBClusterIdentifier:a,RestoreToTime:r.toTime,UseLatestRestorableTime:r.latest}),m("Waiting for the restored cluster to be ready");for(let u=0;u<120;u++){let{DBClusters:p}=await i.describeDBClusters({DBClusterIdentifier:c}),d=p?.[0]?.Status;if(d&&d!=="creating")break;await new Promise((y)=>setTimeout(y,15000))}return m("Adding a writer instance"),await i.createDBInstance({DBInstanceIdentifier:`${c}-1`,DBClusterIdentifier:c,Engine:"aurora-mysql",DBInstanceClass:"db.serverless"}),V(`Restore complete → cluster ${c} with writer ${c}-1. Point an env's database at it once available.`),c}
 export{_ as Hd,He as Id,Ie as Jd,De as Kd,Y as Ld,Oe as Md,We as Nd,Xe as Od,Ge as Pd,Ye as Qd,xe as Rd,Qe as Sd,Be as Td,Ze as Ud,et as Vd,tt as Wd,rt as Xd,st as Yd};

package/dist/bin/{chunk-pnz5hk8n.js → chunk-r6x7beew.js}

@@ -1,4 +1,4 @@
-import{ld as Z,qd as L,rd as Y,sd as _,td as K}from"./chunk-nb0yjkv5.js";import{vd as U}from"./chunk-6zjy949y.js";import{hg as W}from"./chunk-6eat8ezk.js";import{mg as M}from"./chunk-b35989e3.js";import{og as B}from"./chunk-d6zzgvtn.js";import{mp as j}from"./chunk-b2ymh8k0.js";function J(t){let{bucketName:s,domain:l,aliases:e,certificateArn:m,defaultRootObject:i="index.html",errorDocument:r="404.html",passthroughUrls:a=!1,singlePageApp:d=!1,dynamicApp:b=!1,computeOriginDomain:k,computeOriginPort:R=3008,computeOriginId:P="app-compute",retainOnStackDelete:x=!1}=t,A=x?{DeletionPolicy:"Retain",UpdateReplacePolicy:"Retain"}:{},y=b&&!!k,T=y?["GET","HEAD","OPTIONS","PUT","POST","PATCH","DELETE"]:["GET","HEAD"],F=y?["GET","HEAD"]:["GET","HEAD"],N={},O={};N.S3Bucket={Type:"AWS::S3::Bucket",...A,Properties:{BucketName:s,PublicAccessBlockConfiguration:{BlockPublicAcls:!0,BlockPublicPolicy:!1,IgnorePublicAcls:!0,RestrictPublicBuckets:!1},WebsiteConfiguration:{IndexDocument:i,ErrorDocument:r}}},O.BucketName={Description:"S3 Bucket Name",Value:{Ref:"S3Bucket"}},O.BucketArn={Description:"S3 Bucket ARN",Value:{"Fn::GetAtt":["S3Bucket","Arn"]}},N.CloudFrontOAC={Type:"AWS::CloudFront::OriginAccessControl",...A,Properties:{OriginAccessControlConfig:{Name:`OAC-${s}`,Description:`OAC for ${s}`,OriginAccessControlOriginType:"s3",SigningBehavior:"always",SigningProtocol:"sigv4"}}};let D;if(a&&y)D="InstallRootRedirectFunction",N[D]={Type:"AWS::CloudFront::Function",Properties:{Name:{"Fn::Sub":"${AWS::StackName}-install-root-redirect"},AutoPublish:!0,FunctionConfig:{Comment:"Redirect curl pantry.dev | bash (GET /) to /install.sh on S3",Runtime:"cloudfront-js-2.0"},FunctionCode:`function handler(event) {
+import{ld as Z,qd as L,rd as Y,sd as _,td as K}from"./chunk-cxd5cevb.js";import{vd as U}from"./chunk-gskbezam.js";import{ig as W}from"./chunk-21gggxvf.js";import{ng as M}from"./chunk-dbv8w56s.js";import{pg as B}from"./chunk-4a85nk2q.js";import{np as j}from"./chunk-ks4ewy1s.js";function J(t){let{bucketName:s,domain:l,aliases:e,certificateArn:m,defaultRootObject:i="index.html",errorDocument:r="404.html",passthroughUrls:a=!1,singlePageApp:d=!1,dynamicApp:b=!1,computeOriginDomain:k,computeOriginPort:R=3008,computeOriginId:P="app-compute",retainOnStackDelete:x=!1}=t,A=x?{DeletionPolicy:"Retain",UpdateReplacePolicy:"Retain"}:{},y=b&&!!k,T=y?["GET","HEAD","OPTIONS","PUT","POST","PATCH","DELETE"]:["GET","HEAD"],F=y?["GET","HEAD"]:["GET","HEAD"],N={},O={};N.S3Bucket={Type:"AWS::S3::Bucket",...A,Properties:{BucketName:s,PublicAccessBlockConfiguration:{BlockPublicAcls:!0,BlockPublicPolicy:!1,IgnorePublicAcls:!0,RestrictPublicBuckets:!1},WebsiteConfiguration:{IndexDocument:i,ErrorDocument:r}}},O.BucketName={Description:"S3 Bucket Name",Value:{Ref:"S3Bucket"}},O.BucketArn={Description:"S3 Bucket ARN",Value:{"Fn::GetAtt":["S3Bucket","Arn"]}},N.CloudFrontOAC={Type:"AWS::CloudFront::OriginAccessControl",...A,Properties:{OriginAccessControlConfig:{Name:`OAC-${s}`,Description:`OAC for ${s}`,OriginAccessControlOriginType:"s3",SigningBehavior:"always",SigningProtocol:"sigv4"}}};let D;if(a&&y)D="InstallRootRedirectFunction",N[D]={Type:"AWS::CloudFront::Function",Properties:{Name:{"Fn::Sub":"${AWS::StackName}-install-root-redirect"},AutoPublish:!0,FunctionConfig:{Comment:"Redirect curl pantry.dev | bash (GET /) to /install.sh on S3",Runtime:"cloudfront-js-2.0"},FunctionCode:`function handler(event) {
   var request = event.request;
   if (request.uri === '/' || request.uri === '') {
     return {
@@ -42,7 +42,7 @@ import{ld as Z,qd as L,rd as Y,sd as _,td as K}from"./chunk-nb0yjkv5.js";import{
 │                                                                             │
 │  Verification typically takes 1-2 business days.                            │
 │  After verification, re-run: bunx bunpress deploy                           │
-└─────────────────────────────────────────────────────────────────────────────┘`),{success:!1,stackId:O,stackName:i,bucket:y,message:"CloudFront account verification required. Please contact AWS Support."}}return{success:!1,stackId:O,stackName:i,bucket:y,message:`Stack deployment failed: ${o.message}`}}let u=(await r.describeStacks({stackName:i})).Stacks[0]?.Outputs||[],C=(o)=>u.find((n)=>n.OutputKey===o)?.OutputValue,f=C("DistributionDomain");if(f&&d)console.log(`Creating DNS records via ${d.name}...`),await q(d,e,f);else if(f&&!d)console.log("Skipping DNS record creation (DNS verification was skipped)");return{success:!0,stackId:O,stackName:i,bucket:C("BucketName")||y,distributionId:C("DistributionId"),distributionDomain:f,domain:e,certificateArn:b,message:"Static site infrastructure deployed successfully with external DNS"}}async function q(t,s,l){if(!t){console.log("Skipping DNS record creation (DNS verification was skipped)");return}if(s.split(".").length===2)if(t instanceof Z){console.log(`Creating Route53 alias record for apex domain ${s} -> ${l}`);let i=await t.createCloudFrontAlias({domain:s,name:s,cloudFrontDomainName:l});if(!i.success)console.warn(`Warning: Could not create Route53 alias record: ${i.message}`),console.warn("Please manually create an A-record alias in Route53:"),console.warn(`  ${s} -> ${l}`);else console.log(`Created Route53 alias record: ${s} -> ${l}`);let r=`www.${s}`;console.log(`Creating Route53 alias record for ${r} -> ${l}`);let a=await t.createCloudFrontAlias({domain:s,name:r,cloudFrontDomainName:l});if(!a.success)console.warn(`Warning: Could not create www Route53 alias: ${a.message}`),console.warn("Please manually create an A-record alias in Route53:"),console.warn(`  ${r} -> ${l}`);else console.log(`Created Route53 alias record: ${r} -> ${l}`)}else{try{let d=await t.listRecords(s,"A");if(d.success)for(let b of d.records){let k=b.name.replace(/\.$/,"");if(k===s||k==="")console.log(`Removing existing root A record (${b.content}) to make room for ALIAS...`),await t.deleteRecord(s,{name:s,type:"A",content:b.content})}}catch(d){console.log(`Note: Could not check for conflicting A records: ${d instanceof Error?d.message:d}`)}console.log(`Creating ALIAS record for apex domain ${s} -> ${l}`);let i=await t.upsertRecord(s,{name:s,type:"ALIAS",content:l,ttl:600});if(!i.success)console.warn(`Warning: Could not create ALIAS record: ${i.message}`),console.warn("Please manually create an ALIAS record in your DNS provider:"),console.warn(`  ${s} -> ${l}`);else console.log(`Created ALIAS record: ${s} -> ${l}`);let r=`www.${s}`;console.log(`Creating CNAME record for ${r} -> ${l}`);let a=await t.upsertRecord(s,{name:r,type:"CNAME",content:l,ttl:600});if(!a.success)console.warn(`Warning: Could not create www DNS record: ${a.message}`),console.warn("Please manually create a CNAME record:"),console.warn(`  ${r} -> ${l}`);else console.log(`Created CNAME record: ${r} -> ${l}`)}else{console.log(`Creating CNAME record for ${s} -> ${l}`);let i=await t.upsertRecord(s,{name:s,type:"CNAME",content:l,ttl:600});if(!i.success)console.warn(`Warning: Could not create DNS record: ${i.message}`),console.warn("Please manually create a CNAME record:"),console.warn(`  ${s} -> ${l}`);else console.log(`Created CNAME record: ${s} -> ${l}`)}}async function le(t){let{sourceDir:s,cleanBucket:l=!1,onProgress:e,...m}=t;e?.("infrastructure","Deploying CloudFormation stack...");let i=await G(m);if(!i.success)return i;if(l){e?.("clean","Cleaning old files from S3...");try{await new B(m.region||"us-east-1").emptyBucket(i.bucket)}catch(b){console.log(`Note: Could not clean bucket: ${b.message}`)}}e?.("upload","Uploading files to S3...");let{uploadStaticFiles:r}=await import("./chunk-ddmjjstg.js"),a=await r({sourceDir:s,bucket:i.bucket,region:m.region||"us-east-1",cacheControl:m.cacheControl,onProgress:(b,k,R)=>{e?.("upload",`${b}/${k}: ${R}`)}});if(a.errors.length>0)return{...i,success:!1,message:`Upload errors: ${a.errors.join(", ")}`,filesUploaded:a.uploaded};if(i.distributionId&&a.uploaded>0){e?.("invalidate","Invalidating CloudFront cache...");let{invalidateCache:b}=await import("./chunk-ddmjjstg.js");await b(i.distributionId)}e?.("complete","Deployment complete!");let d=a.skipped>0?`Deployed ${a.uploaded} files (${a.skipped} unchanged) with external DNS`:`Deployed ${a.uploaded} files successfully with external DNS`;return{...i,filesUploaded:a.uploaded,filesSkipped:a.skipped,message:d}}function Q(t){let{bucketName:s,domain:l,certificateArn:e,hostedZoneId:m,defaultRootObject:i="index.html",errorDocument:r="404.html"}=t,a={},d={};a.S3Bucket={Type:"AWS::S3::Bucket",Properties:{BucketName:s,PublicAccessBlockConfiguration:{BlockPublicAcls:!0,BlockPublicPolicy:!1,IgnorePublicAcls:!0,RestrictPublicBuckets:!1},WebsiteConfiguration:{IndexDocument:i,ErrorDocument:r}}},d.BucketName={Description:"S3 Bucket Name",Value:{Ref:"S3Bucket"}},d.BucketArn={Description:"S3 Bucket ARN",Value:{"Fn::GetAtt":["S3Bucket","Arn"]}},a.CloudFrontOAC={Type:"AWS::CloudFront::OriginAccessControl",Properties:{OriginAccessControlConfig:{Name:`OAC-${s}`,Description:`OAC for ${s}`,OriginAccessControlOriginType:"s3",SigningBehavior:"always",SigningProtocol:"sigv4"}}},a.UrlRewriteFunction={Type:"AWS::CloudFront::Function",Properties:{Name:{"Fn::Sub":"${AWS::StackName}-url-rewrite"},AutoPublish:!0,FunctionConfig:{Comment:"Append .html extension to URLs without extensions",Runtime:"cloudfront-js-2.0"},FunctionCode:`function handler(event) {
+└─────────────────────────────────────────────────────────────────────────────┘`),{success:!1,stackId:O,stackName:i,bucket:y,message:"CloudFront account verification required. Please contact AWS Support."}}return{success:!1,stackId:O,stackName:i,bucket:y,message:`Stack deployment failed: ${o.message}`}}let u=(await r.describeStacks({stackName:i})).Stacks[0]?.Outputs||[],C=(o)=>u.find((n)=>n.OutputKey===o)?.OutputValue,f=C("DistributionDomain");if(f&&d)console.log(`Creating DNS records via ${d.name}...`),await q(d,e,f);else if(f&&!d)console.log("Skipping DNS record creation (DNS verification was skipped)");return{success:!0,stackId:O,stackName:i,bucket:C("BucketName")||y,distributionId:C("DistributionId"),distributionDomain:f,domain:e,certificateArn:b,message:"Static site infrastructure deployed successfully with external DNS"}}async function q(t,s,l){if(!t){console.log("Skipping DNS record creation (DNS verification was skipped)");return}if(s.split(".").length===2)if(t instanceof Z){console.log(`Creating Route53 alias record for apex domain ${s} -> ${l}`);let i=await t.createCloudFrontAlias({domain:s,name:s,cloudFrontDomainName:l});if(!i.success)console.warn(`Warning: Could not create Route53 alias record: ${i.message}`),console.warn("Please manually create an A-record alias in Route53:"),console.warn(`  ${s} -> ${l}`);else console.log(`Created Route53 alias record: ${s} -> ${l}`);let r=`www.${s}`;console.log(`Creating Route53 alias record for ${r} -> ${l}`);let a=await t.createCloudFrontAlias({domain:s,name:r,cloudFrontDomainName:l});if(!a.success)console.warn(`Warning: Could not create www Route53 alias: ${a.message}`),console.warn("Please manually create an A-record alias in Route53:"),console.warn(`  ${r} -> ${l}`);else console.log(`Created Route53 alias record: ${r} -> ${l}`)}else{try{let d=await t.listRecords(s,"A");if(d.success)for(let b of d.records){let k=b.name.replace(/\.$/,"");if(k===s||k==="")console.log(`Removing existing root A record (${b.content}) to make room for ALIAS...`),await t.deleteRecord(s,{name:s,type:"A",content:b.content})}}catch(d){console.log(`Note: Could not check for conflicting A records: ${d instanceof Error?d.message:d}`)}console.log(`Creating ALIAS record for apex domain ${s} -> ${l}`);let i=await t.upsertRecord(s,{name:s,type:"ALIAS",content:l,ttl:600});if(!i.success)console.warn(`Warning: Could not create ALIAS record: ${i.message}`),console.warn("Please manually create an ALIAS record in your DNS provider:"),console.warn(`  ${s} -> ${l}`);else console.log(`Created ALIAS record: ${s} -> ${l}`);let r=`www.${s}`;console.log(`Creating CNAME record for ${r} -> ${l}`);let a=await t.upsertRecord(s,{name:r,type:"CNAME",content:l,ttl:600});if(!a.success)console.warn(`Warning: Could not create www DNS record: ${a.message}`),console.warn("Please manually create a CNAME record:"),console.warn(`  ${r} -> ${l}`);else console.log(`Created CNAME record: ${r} -> ${l}`)}else{console.log(`Creating CNAME record for ${s} -> ${l}`);let i=await t.upsertRecord(s,{name:s,type:"CNAME",content:l,ttl:600});if(!i.success)console.warn(`Warning: Could not create DNS record: ${i.message}`),console.warn("Please manually create a CNAME record:"),console.warn(`  ${s} -> ${l}`);else console.log(`Created CNAME record: ${s} -> ${l}`)}}async function le(t){let{sourceDir:s,cleanBucket:l=!1,onProgress:e,...m}=t;e?.("infrastructure","Deploying CloudFormation stack...");let i=await G(m);if(!i.success)return i;if(l){e?.("clean","Cleaning old files from S3...");try{await new B(m.region||"us-east-1").emptyBucket(i.bucket)}catch(b){console.log(`Note: Could not clean bucket: ${b.message}`)}}e?.("upload","Uploading files to S3...");let{uploadStaticFiles:r}=await import("./chunk-xcqmwphz.js"),a=await r({sourceDir:s,bucket:i.bucket,region:m.region||"us-east-1",cacheControl:m.cacheControl,onProgress:(b,k,R)=>{e?.("upload",`${b}/${k}: ${R}`)}});if(a.errors.length>0)return{...i,success:!1,message:`Upload errors: ${a.errors.join(", ")}`,filesUploaded:a.uploaded};if(i.distributionId&&a.uploaded>0){e?.("invalidate","Invalidating CloudFront cache...");let{invalidateCache:b}=await import("./chunk-xcqmwphz.js");await b(i.distributionId)}e?.("complete","Deployment complete!");let d=a.skipped>0?`Deployed ${a.uploaded} files (${a.skipped} unchanged) with external DNS`:`Deployed ${a.uploaded} files successfully with external DNS`;return{...i,filesUploaded:a.uploaded,filesSkipped:a.skipped,message:d}}function Q(t){let{bucketName:s,domain:l,certificateArn:e,hostedZoneId:m,defaultRootObject:i="index.html",errorDocument:r="404.html"}=t,a={},d={};a.S3Bucket={Type:"AWS::S3::Bucket",Properties:{BucketName:s,PublicAccessBlockConfiguration:{BlockPublicAcls:!0,BlockPublicPolicy:!1,IgnorePublicAcls:!0,RestrictPublicBuckets:!1},WebsiteConfiguration:{IndexDocument:i,ErrorDocument:r}}},d.BucketName={Description:"S3 Bucket Name",Value:{Ref:"S3Bucket"}},d.BucketArn={Description:"S3 Bucket ARN",Value:{"Fn::GetAtt":["S3Bucket","Arn"]}},a.CloudFrontOAC={Type:"AWS::CloudFront::OriginAccessControl",Properties:{OriginAccessControlConfig:{Name:`OAC-${s}`,Description:`OAC for ${s}`,OriginAccessControlOriginType:"s3",SigningBehavior:"always",SigningProtocol:"sigv4"}}},a.UrlRewriteFunction={Type:"AWS::CloudFront::Function",Properties:{Name:{"Fn::Sub":"${AWS::StackName}-url-rewrite"},AutoPublish:!0,FunctionConfig:{Comment:"Append .html extension to URLs without extensions",Runtime:"cloudfront-js-2.0"},FunctionCode:`function handler(event) {
   const request = event.request;
   var uri = request.uri;
 

package/dist/bin/chunk-rfqk5xym.js

@@ -0,0 +1 @@
+import{jf as a}from"./chunk-neampxq1.js";import"./chunk-0y89hs67.js";import"./chunk-ks4ewy1s.js";export{a as EC2Client};

package/dist/bin/{chunk-jnsbzqzz.js → chunk-ww770qpn.js}

@@ -1,4 +1,4 @@
-import{zh as ie}from"./chunk-anm3ae6z.js";var C=["project:read","config:read","config:write","deployments:read","deployments:create","deployments:cancel","deployments:rollback","runtime:read","runtime:restart","runtime:logs","runtime:terminal","data:read","data:write","data:admin","backups:read","backups:create","backups:restore","secrets:read","secrets:write","fleet:read","fleet:manage","users:read","users:manage","users:transfer-ownership","audit:read","billing:read","billing:manage","security:read","security:manage","security:waive","sources:read","sources:manage","applications:read","applications:manage","automation:read","automation:manage","tags:manage"],K=["project:read","config:read","deployments:read","runtime:read","runtime:logs","data:read","backups:read","security:read","sources:read","applications:read","billing:read"],se={owner:new Set(C),admin:new Set(C.filter((e)=>e!=="users:transfer-ownership")),deployer:new Set([...K,"deployments:create","deployments:cancel","deployments:rollback","sources:manage","applications:manage"]),operator:new Set([...K,"runtime:restart","backups:create","security:manage","sources:manage","applications:manage"]),viewer:new Set(K),auditor:new Set(["project:read","config:read","deployments:read","runtime:read","data:read","backups:read","audit:read","security:read","sources:read","applications:read"])};function I(e){return se[e]}function P(e,t){if(e.type==="organization")return e.id===void 0||e.id===t.organizationId;if(!e.id)return!1;if(e.type==="project")return e.id===t.projectId;if(e.type==="environment")return e.id===t.environmentId;return e.id===t.resourceId}function Z(e){let{membership:t,capability:r,target:i}=e;if(!t||t.status!=="active"||t.organizationId!==i.organizationId)return{allowed:!1,reason:"inactive-membership"};let a=e.grants.filter((s)=>s.organizationId===i.organizationId&&s.membershipId===t.id&&s.capability===r&&P(s.scope,i)),E=a.find((s)=>s.effect==="deny");if(E)return{allowed:!1,reason:"explicit-deny",inheritedFrom:{kind:"grant",id:E.id,scope:E.scope}};let T=a.find((s)=>s.effect==="allow");if(T)return{allowed:!0,reason:"explicit-allow",inheritedFrom:{kind:"grant",id:T.id,scope:T.scope}};if(!P(t.scope,i))return{allowed:!1,reason:"scope-mismatch"};if(I(t.roleTemplate).has(r))return{allowed:!0,reason:"role-template",inheritedFrom:{kind:"membership",id:t.id,scope:t.scope}};return{allowed:!1,reason:"missing-capability"}}function de(e){return C.filter((t)=>Z({...e,capability:t}).allowed)}import{createHash as h,randomBytes as Ne}from"node:crypto";import{chmodSync as H,existsSync as ee,mkdirSync as ce,statSync as Le}from"node:fs";import{dirname as te}from"node:path";import{Database as _e}from"bun:sqlite";var l=40,j=[{version:1,name:"core_control_plane",sql:`
+import{Ah as ie}from"./chunk-4a97kbk1.js";var C=["project:read","config:read","config:write","deployments:read","deployments:create","deployments:cancel","deployments:rollback","runtime:read","runtime:restart","runtime:logs","runtime:terminal","data:read","data:write","data:admin","backups:read","backups:create","backups:restore","secrets:read","secrets:write","fleet:read","fleet:manage","users:read","users:manage","users:transfer-ownership","audit:read","billing:read","billing:manage","security:read","security:manage","security:waive","sources:read","sources:manage","applications:read","applications:manage","automation:read","automation:manage","tags:manage"],K=["project:read","config:read","deployments:read","runtime:read","runtime:logs","data:read","backups:read","security:read","sources:read","applications:read","billing:read"],se={owner:new Set(C),admin:new Set(C.filter((e)=>e!=="users:transfer-ownership")),deployer:new Set([...K,"deployments:create","deployments:cancel","deployments:rollback","sources:manage","applications:manage"]),operator:new Set([...K,"runtime:restart","backups:create","security:manage","sources:manage","applications:manage"]),viewer:new Set(K),auditor:new Set(["project:read","config:read","deployments:read","runtime:read","data:read","backups:read","audit:read","security:read","sources:read","applications:read"])};function I(e){return se[e]}function P(e,t){if(e.type==="organization")return e.id===void 0||e.id===t.organizationId;if(!e.id)return!1;if(e.type==="project")return e.id===t.projectId;if(e.type==="environment")return e.id===t.environmentId;return e.id===t.resourceId}function Z(e){let{membership:t,capability:r,target:i}=e;if(!t||t.status!=="active"||t.organizationId!==i.organizationId)return{allowed:!1,reason:"inactive-membership"};let a=e.grants.filter((s)=>s.organizationId===i.organizationId&&s.membershipId===t.id&&s.capability===r&&P(s.scope,i)),E=a.find((s)=>s.effect==="deny");if(E)return{allowed:!1,reason:"explicit-deny",inheritedFrom:{kind:"grant",id:E.id,scope:E.scope}};let T=a.find((s)=>s.effect==="allow");if(T)return{allowed:!0,reason:"explicit-allow",inheritedFrom:{kind:"grant",id:T.id,scope:T.scope}};if(!P(t.scope,i))return{allowed:!1,reason:"scope-mismatch"};if(I(t.roleTemplate).has(r))return{allowed:!0,reason:"role-template",inheritedFrom:{kind:"membership",id:t.id,scope:t.scope}};return{allowed:!1,reason:"missing-capability"}}function de(e){return C.filter((t)=>Z({...e,capability:t}).allowed)}import{createHash as h,randomBytes as Ne}from"node:crypto";import{chmodSync as H,existsSync as ee,mkdirSync as ce,statSync as Le}from"node:fs";import{dirname as te}from"node:path";import{Database as _e}from"bun:sqlite";var l=40,j=[{version:1,name:"core_control_plane",sql:`
       CREATE TABLE projects (
         id TEXT PRIMARY KEY,
         slug TEXT NOT NULL UNIQUE,
@@ -1504,4 +1504,4 @@ import{zh as ie}from"./chunk-anm3ae6z.js";var C=["project:read","config:read","c
           VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,[i.id,i.organizationId,i.membershipId,i.effect,i.capability,i.scope.type,i.scope.id??null,i.source??"manual",i.createdAt,i.updatedAt]);for(let i of e.operations)o(this.database,`INSERT INTO operations (id, project_id, environment_id, resource_id, actor_id, kind, state, correlation_id, idempotency_key,
           input, output, error, attempt, priority, lease_owner, lease_expires_at, cancel_requested_at, started_at, finished_at, version, created_at, updated_at)
           VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,[i.id,i.projectId??null,i.environmentId??null,i.resourceId??null,i.actorId??null,i.kind,i.state,i.correlationId,i.idempotencyKey??null,N(i.input),N(i.output),M(i.error)??null,i.attempt,i.priority,i.leaseOwner??null,i.leaseExpiresAt??null,i.cancelRequestedAt??null,i.startedAt??null,i.finishedAt??null,i.version,i.createdAt,i.updatedAt]);for(let i of e.events)o(this.database,`INSERT INTO events (sequence, id, organization_id, project_id, operation_id, resource_id, actor_id, correlation_id, type, level, payload, created_at)
-          VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,[i.sequence,i.id,i.organizationId??null,i.projectId??null,i.operationId??null,i.resourceId??null,i.actorId??null,i.correlationId,i.type,i.level,N(i.payload),i.createdAt]);for(let[i,a]of Object.entries(e.settings))o(this.database,"INSERT INTO settings (key, value, updated_at) VALUES (?, ?, ?)",[i,N(a),this.now()]);for(let i of e.tags??[])o(this.database,"INSERT INTO tags (id, project_id, name, normalized_name, color, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?)",[i.id,i.projectId,i.name,i.normalizedName,i.color,i.createdAt,i.updatedAt]);for(let i of e.resourceTags??[])o(this.database,"INSERT INTO resource_tags (resource_id, tag_id, created_at) VALUES (?, ?, ?)",[i.resourceId,i.tagId,i.createdAt]);for(let i of e.savedFilters??[])o(this.database,"INSERT INTO saved_filters (id, actor_key, name, route_id, query, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?)",[i.id,i.actorKey,i.name,i.routeId,N(i.query),i.createdAt,i.updatedAt]);for(let i of e.navigationItems??[])o(this.database,"INSERT INTO navigation_items (actor_key, entity_type, entity_id, favorite, last_visited_at, visit_count) VALUES (?, ?, ?, ?, ?, ?)",[i.actorKey,i.entityType,i.entityId,i.favorite?1:0,i.lastVisitedAt,i.visitCount])})}}var Oe=new Set(["domain","domains","hostname","hostnames","url","repository","repo","image","label","labels"]),Re=new Set(["sha","commit","commitsha","release","releaseid"]);function oe(e,t){if(!e||typeof e!=="object"||Array.isArray(e))return[];let r=[];for(let[i,a]of Object.entries(e)){if(!t.has(i.toLowerCase()))continue;if(typeof a==="string")r.push(a);else if(Array.isArray(a))r.push(...a.filter((E)=>typeof E==="string"))}return r}function Q(e){return e.toLowerCase().trim().replace(/[^a-z0-9._:/@-]+/g," ")}function W(e,t,r){let i=Q(e),a=Q(t),E=Q(r);if(!i)return 0;if(a===i)return 1000;if(a.startsWith(i))return 800-Math.min(100,a.length-i.length);if(a.includes(i))return 650-Math.min(100,a.indexOf(i));let T=i.split(/\s+/).filter(Boolean);if(T.every((c)=>E.includes(c)))return 400+T.length*10;let s=0;for(let c of i){if(s=E.indexOf(c,s),s<0)return 0;s++}return Math.max(1,180-Math.floor(E.length/20))}function ge(e,t){let r=e.kind.toLowerCase();if(r==="server"||r==="compute")return{type:"server",href:`/server/metrics?env=${encodeURIComponent(t)}`};if(r.includes("database")||["mysql","postgres","postgresql","sqlite","redis"].includes(r))return{type:"database",href:`/server/database?env=${encodeURIComponent(t)}&database=${encodeURIComponent(e.slug)}`};return{type:"service",href:`/server/sites?env=${encodeURIComponent(t)}&service=${encodeURIComponent(e.slug)}`}}function Ue(e,t){let r=e.getProject(t.projectId);if(!r)return[];let i=e.listEnvironments(r.id),a=new Map(i.map((n)=>[n.id,n])),E=e.listResourceTags(r.id),T=new Map;for(let n of E){let L=T.get(n.resourceId)??[];L.push({id:n.tag.id,name:n.tag.name,color:n.tag.color}),T.set(n.resourceId,L)}let s=[],c=t.allowedResourceSlugs!==void 0;if(!c){s.push({type:"project",id:r.id,title:r.name,subtitle:r.slug,href:`/?project=${encodeURIComponent(r.slug)}`,tags:[],score:0});for(let n of i)s.push({type:"environment",id:n.id,title:n.name,subtitle:`${r.name} · ${n.kind}`,href:`/?env=${encodeURIComponent(n.slug)}`,environment:n.slug,tags:[],score:0})}let V=e.listResources(r.id).filter((n)=>!t.allowedResourceSlugs||t.allowedResourceSlugs.has(n.slug));for(let n of V){let L=n.environmentId?a.get(n.environmentId):void 0,O=T.get(n.id)??[],A=oe(n.desiredState,Oe),m=[n.name,n.slug,n.kind,n.provider,n.providerId,L?.slug,...A,...O.map((Te)=>Te.name)].filter(Boolean).join(" "),X=ge(n,L?.slug??i[0]?.slug??"");s.push({type:X.type,id:n.id,title:n.name,subtitle:[n.kind,...A.slice(0,2)].join(" · "),href:X.href,environment:L?.slug,provider:n.provider,tags:O,score:W(t.query,n.name,m)})}if(!c)for(let n of e.listOperations({projectId:r.id,limit:500})){let L=n.environmentId?a.get(n.environmentId):void 0,O=oe(n.input,Re),A=n.kind.includes("deploy"),m=O[0]??n.kind,X=[n.kind,n.id,n.correlationId,n.state,...O].join(" ");s.push({type:A?"deployment":"operation",id:n.id,title:m,subtitle:`${n.kind} · ${n.state}`,href:`/server/activity?env=${encodeURIComponent(L?.slug??i[0]?.slug??"")}&operation=${encodeURIComponent(n.id)}`,environment:L?.slug,status:n.state,tags:[],score:W(t.query,m,X)})}for(let n of s)if(n.score===0)n.score=W(t.query,n.title,`${n.title} ${n.subtitle} ${n.environment??""} ${n.provider??""}`);let J={service:0,server:1,database:2,deployment:3,environment:4,project:5,operation:6};return s.filter((n)=>n.score>0).sort((n,L)=>L.score-n.score||J[n.type]-J[L.type]||n.title.localeCompare(L.title)||n.id.localeCompare(L.id)).slice(0,Math.min(50,Math.max(1,t.limit??20)))}export{C as yg,I as zg,Z as Ag,de as Bg,ne as Cg,Ee as Dg,Ue as Eg};
+          VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,[i.sequence,i.id,i.organizationId??null,i.projectId??null,i.operationId??null,i.resourceId??null,i.actorId??null,i.correlationId,i.type,i.level,N(i.payload),i.createdAt]);for(let[i,a]of Object.entries(e.settings))o(this.database,"INSERT INTO settings (key, value, updated_at) VALUES (?, ?, ?)",[i,N(a),this.now()]);for(let i of e.tags??[])o(this.database,"INSERT INTO tags (id, project_id, name, normalized_name, color, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?)",[i.id,i.projectId,i.name,i.normalizedName,i.color,i.createdAt,i.updatedAt]);for(let i of e.resourceTags??[])o(this.database,"INSERT INTO resource_tags (resource_id, tag_id, created_at) VALUES (?, ?, ?)",[i.resourceId,i.tagId,i.createdAt]);for(let i of e.savedFilters??[])o(this.database,"INSERT INTO saved_filters (id, actor_key, name, route_id, query, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?)",[i.id,i.actorKey,i.name,i.routeId,N(i.query),i.createdAt,i.updatedAt]);for(let i of e.navigationItems??[])o(this.database,"INSERT INTO navigation_items (actor_key, entity_type, entity_id, favorite, last_visited_at, visit_count) VALUES (?, ?, ?, ?, ?, ?)",[i.actorKey,i.entityType,i.entityId,i.favorite?1:0,i.lastVisitedAt,i.visitCount])})}}var Oe=new Set(["domain","domains","hostname","hostnames","url","repository","repo","image","label","labels"]),Re=new Set(["sha","commit","commitsha","release","releaseid"]);function oe(e,t){if(!e||typeof e!=="object"||Array.isArray(e))return[];let r=[];for(let[i,a]of Object.entries(e)){if(!t.has(i.toLowerCase()))continue;if(typeof a==="string")r.push(a);else if(Array.isArray(a))r.push(...a.filter((E)=>typeof E==="string"))}return r}function Q(e){return e.toLowerCase().trim().replace(/[^a-z0-9._:/@-]+/g," ")}function W(e,t,r){let i=Q(e),a=Q(t),E=Q(r);if(!i)return 0;if(a===i)return 1000;if(a.startsWith(i))return 800-Math.min(100,a.length-i.length);if(a.includes(i))return 650-Math.min(100,a.indexOf(i));let T=i.split(/\s+/).filter(Boolean);if(T.every((c)=>E.includes(c)))return 400+T.length*10;let s=0;for(let c of i){if(s=E.indexOf(c,s),s<0)return 0;s++}return Math.max(1,180-Math.floor(E.length/20))}function ge(e,t){let r=e.kind.toLowerCase();if(r==="server"||r==="compute")return{type:"server",href:`/server/metrics?env=${encodeURIComponent(t)}`};if(r.includes("database")||["mysql","postgres","postgresql","sqlite","redis"].includes(r))return{type:"database",href:`/server/database?env=${encodeURIComponent(t)}&database=${encodeURIComponent(e.slug)}`};return{type:"service",href:`/server/sites?env=${encodeURIComponent(t)}&service=${encodeURIComponent(e.slug)}`}}function Ue(e,t){let r=e.getProject(t.projectId);if(!r)return[];let i=e.listEnvironments(r.id),a=new Map(i.map((n)=>[n.id,n])),E=e.listResourceTags(r.id),T=new Map;for(let n of E){let L=T.get(n.resourceId)??[];L.push({id:n.tag.id,name:n.tag.name,color:n.tag.color}),T.set(n.resourceId,L)}let s=[],c=t.allowedResourceSlugs!==void 0;if(!c){s.push({type:"project",id:r.id,title:r.name,subtitle:r.slug,href:`/?project=${encodeURIComponent(r.slug)}`,tags:[],score:0});for(let n of i)s.push({type:"environment",id:n.id,title:n.name,subtitle:`${r.name} · ${n.kind}`,href:`/?env=${encodeURIComponent(n.slug)}`,environment:n.slug,tags:[],score:0})}let V=e.listResources(r.id).filter((n)=>!t.allowedResourceSlugs||t.allowedResourceSlugs.has(n.slug));for(let n of V){let L=n.environmentId?a.get(n.environmentId):void 0,O=T.get(n.id)??[],A=oe(n.desiredState,Oe),m=[n.name,n.slug,n.kind,n.provider,n.providerId,L?.slug,...A,...O.map((Te)=>Te.name)].filter(Boolean).join(" "),X=ge(n,L?.slug??i[0]?.slug??"");s.push({type:X.type,id:n.id,title:n.name,subtitle:[n.kind,...A.slice(0,2)].join(" · "),href:X.href,environment:L?.slug,provider:n.provider,tags:O,score:W(t.query,n.name,m)})}if(!c)for(let n of e.listOperations({projectId:r.id,limit:500})){let L=n.environmentId?a.get(n.environmentId):void 0,O=oe(n.input,Re),A=n.kind.includes("deploy"),m=O[0]??n.kind,X=[n.kind,n.id,n.correlationId,n.state,...O].join(" ");s.push({type:A?"deployment":"operation",id:n.id,title:m,subtitle:`${n.kind} · ${n.state}`,href:`/server/activity?env=${encodeURIComponent(L?.slug??i[0]?.slug??"")}&operation=${encodeURIComponent(n.id)}`,environment:L?.slug,status:n.state,tags:[],score:W(t.query,m,X)})}for(let n of s)if(n.score===0)n.score=W(t.query,n.title,`${n.title} ${n.subtitle} ${n.environment??""} ${n.provider??""}`);let J={service:0,server:1,database:2,deployment:3,environment:4,project:5,operation:6};return s.filter((n)=>n.score>0).sort((n,L)=>L.score-n.score||J[n.type]-J[L.type]||n.title.localeCompare(L.title)||n.id.localeCompare(L.id)).slice(0,Math.min(50,Math.max(1,t.limit??20)))}export{C as zg,I as Ag,Z as Bg,de as Cg,ne as Dg,Ee as Eg,Ue as Fg};

package/dist/bin/chunk-wy20ztb6.js

@@ -0,0 +1 @@
+import{fd as a}from"./chunk-jce28gnz.js";import"./chunk-0y89hs67.js";import"./chunk-ks4ewy1s.js";export{a as RDSClient};