@stacksjs/ts-cloud 0.11.7 → 0.12.1

package/dist/bin/chunk-8h1qr6x4.js

@@ -0,0 +1,50 @@
+import{dh as L}from"./chunk-xyt490vp.js";class Q{client;region;constructor(j="us-east-1"){this.region=j,this.client=new L}async createHostedZone(j){let k=j.CallerReference||`${Date.now()}-${Math.random().toString(36).slice(2)}`,F=`<?xml version="1.0" encoding="UTF-8"?>
+<CreateHostedZoneRequest xmlns="https://route53.amazonaws.com/doc/2013-04-01/">
+  <Name>${j.Name}</Name>
+  <CallerReference>${k}</CallerReference>`;if(j.HostedZoneConfig){if(F+=`
+  <HostedZoneConfig>`,j.HostedZoneConfig.Comment)F+=`
+    <Comment>${j.HostedZoneConfig.Comment}</Comment>`;if(j.HostedZoneConfig.PrivateZone!==void 0)F+=`
+    <PrivateZone>${j.HostedZoneConfig.PrivateZone}</PrivateZone>`;F+=`
+  </HostedZoneConfig>`}if(j.VPC)F+=`
+  <VPC>
+    <VPCRegion>${j.VPC.VPCRegion}</VPCRegion>
+    <VPCId>${j.VPC.VPCId}</VPCId>
+  </VPC>`;if(j.DelegationSetId)F+=`
+  <DelegationSetId>${j.DelegationSetId}</DelegationSetId>`;F+=`
+</CreateHostedZoneRequest>`;let J=await this.client.request({service:"route53",region:this.region,method:"POST",path:"/2013-04-01/hostedzone",headers:{"content-type":"application/xml"},body:F});return this.parseCreateHostedZoneResponse(J)}async listHostedZones(j){let k={};if(j?.Marker)k.marker=j.Marker;if(j?.MaxItems)k.maxitems=j.MaxItems;let F=await this.client.request({service:"route53",region:this.region,method:"GET",path:"/2013-04-01/hostedzone",queryParams:Object.keys(k).length>0?k:void 0});return this.parseListHostedZonesResponse(F)}async listHostedZonesByName(j){let k={};if(j?.DNSName)k.dnsname=j.DNSName;if(j?.HostedZoneId)k.hostedzoneid=j.HostedZoneId;if(j?.MaxItems)k.maxitems=j.MaxItems;let F=await this.client.request({service:"route53",region:this.region,method:"GET",path:"/2013-04-01/hostedzonesbyname",queryParams:Object.keys(k).length>0?k:void 0});return this.parseListHostedZonesResponse(F)}async getHostedZone(j){let k=j.Id.replace("/hostedzone/",""),F=await this.client.request({service:"route53",region:this.region,method:"GET",path:`/2013-04-01/hostedzone/${k}`});return this.parseGetHostedZoneResponse(F)}async deleteHostedZone(j){let k=j.Id.replace("/hostedzone/","");await this.client.request({service:"route53",region:this.region,method:"DELETE",path:`/2013-04-01/hostedzone/${k}`})}async listResourceRecordSets(j){let k=j.HostedZoneId.replace("/hostedzone/",""),F={};if(j.StartRecordName)F.name=j.StartRecordName;if(j.StartRecordType)F.type=j.StartRecordType;if(j.StartRecordIdentifier)F.identifier=j.StartRecordIdentifier;if(j.MaxItems)F.maxitems=j.MaxItems;let J=await this.client.request({service:"route53",region:this.region,method:"GET",path:`/2013-04-01/hostedzone/${k}/rrset`,queryParams:Object.keys(F).length>0?F:void 0});return this.parseListResourceRecordSetsResponse(J)}async changeResourceRecordSets(j){let k=j.HostedZoneId.replace("/hostedzone/",""),F=`<?xml version="1.0" encoding="UTF-8"?>
+<ChangeResourceRecordSetsRequest xmlns="https://route53.amazonaws.com/doc/2013-04-01/">
+  <ChangeBatch>`;if(j.ChangeBatch.Comment)F+=`
+    <Comment>${this.escapeXml(j.ChangeBatch.Comment)}</Comment>`;F+=`
+    <Changes>`;for(let H of j.ChangeBatch.Changes){if(F+=`
+      <Change>
+        <Action>${H.Action}</Action>
+        <ResourceRecordSet>
+          <Name>${H.ResourceRecordSet.Name}</Name>
+          <Type>${H.ResourceRecordSet.Type}</Type>`,H.ResourceRecordSet.TTL!==void 0)F+=`
+          <TTL>${H.ResourceRecordSet.TTL}</TTL>`;if(H.ResourceRecordSet.SetIdentifier)F+=`
+          <SetIdentifier>${H.ResourceRecordSet.SetIdentifier}</SetIdentifier>`;if(H.ResourceRecordSet.Weight!==void 0)F+=`
+          <Weight>${H.ResourceRecordSet.Weight}</Weight>`;if(H.ResourceRecordSet.Region)F+=`
+          <Region>${H.ResourceRecordSet.Region}</Region>`;if(H.ResourceRecordSet.Failover)F+=`
+          <Failover>${H.ResourceRecordSet.Failover}</Failover>`;if(H.ResourceRecordSet.HealthCheckId)F+=`
+          <HealthCheckId>${H.ResourceRecordSet.HealthCheckId}</HealthCheckId>`;if(H.ResourceRecordSet.ResourceRecords&&H.ResourceRecordSet.ResourceRecords.length>0){F+=`
+          <ResourceRecords>`;for(let K of H.ResourceRecordSet.ResourceRecords)F+=`
+            <ResourceRecord>
+              <Value>${this.escapeXml(K.Value)}</Value>
+            </ResourceRecord>`;F+=`
+          </ResourceRecords>`}if(H.ResourceRecordSet.AliasTarget)F+=`
+          <AliasTarget>
+            <HostedZoneId>${H.ResourceRecordSet.AliasTarget.HostedZoneId}</HostedZoneId>
+            <DNSName>${H.ResourceRecordSet.AliasTarget.DNSName}</DNSName>
+            <EvaluateTargetHealth>${H.ResourceRecordSet.AliasTarget.EvaluateTargetHealth}</EvaluateTargetHealth>
+          </AliasTarget>`;if(H.ResourceRecordSet.GeoLocation){if(F+=`
+          <GeoLocation>`,H.ResourceRecordSet.GeoLocation.ContinentCode)F+=`
+            <ContinentCode>${H.ResourceRecordSet.GeoLocation.ContinentCode}</ContinentCode>`;if(H.ResourceRecordSet.GeoLocation.CountryCode)F+=`
+            <CountryCode>${H.ResourceRecordSet.GeoLocation.CountryCode}</CountryCode>`;if(H.ResourceRecordSet.GeoLocation.SubdivisionCode)F+=`
+            <SubdivisionCode>${H.ResourceRecordSet.GeoLocation.SubdivisionCode}</SubdivisionCode>`;F+=`
+          </GeoLocation>`}F+=`
+        </ResourceRecordSet>
+      </Change>`}F+=`
+    </Changes>
+  </ChangeBatch>
+</ChangeResourceRecordSetsRequest>`;let J=await this.client.request({service:"route53",region:this.region,method:"POST",path:`/2013-04-01/hostedzone/${k}/rrset`,headers:{"content-type":"application/xml"},body:F});return this.parseChangeResourceRecordSetsResponse(J)}escapeXml(j){return j.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&apos;")}parseCreateHostedZoneResponse(j){let k=j.CreateHostedZoneResponse||j;return{HostedZone:this.parseHostedZone(k.HostedZone),ChangeInfo:{Id:k.ChangeInfo?.Id||"",Status:k.ChangeInfo?.Status||"",SubmittedAt:k.ChangeInfo?.SubmittedAt||""},DelegationSet:this.parseDelegationSet(k.DelegationSet),Location:k.Location||""}}parseListHostedZonesResponse(j){let k=j.ListHostedZonesResponse||j.ListHostedZonesByNameResponse||j,F=k.HostedZones?.HostedZone||k.HostedZones||[];if(!Array.isArray(F))F=F?[F]:[];return{HostedZones:F.map((J)=>this.parseHostedZone(J)),IsTruncated:k.IsTruncated==="true"||k.IsTruncated===!0,MaxItems:k.MaxItems||"100",Marker:k.Marker,NextMarker:k.NextMarker}}parseGetHostedZoneResponse(j){let k=j.GetHostedZoneResponse||j;return{HostedZone:this.parseHostedZone(k.HostedZone),DelegationSet:this.parseDelegationSet(k.DelegationSet),VPCs:k.VPCs?.VPC?Array.isArray(k.VPCs.VPC)?k.VPCs.VPC:[k.VPCs.VPC]:void 0}}parseListResourceRecordSetsResponse(j){let k=j.ListResourceRecordSetsResponse||j,F=k.ResourceRecordSets?.ResourceRecordSet||k.ResourceRecordSets||[];if(!Array.isArray(F))F=F?[F]:[];return{ResourceRecordSets:F.map((J)=>this.parseResourceRecordSet(J)),IsTruncated:k.IsTruncated==="true"||k.IsTruncated===!0,MaxItems:k.MaxItems||"100",NextRecordName:k.NextRecordName,NextRecordType:k.NextRecordType,NextRecordIdentifier:k.NextRecordIdentifier}}parseChangeResourceRecordSetsResponse(j){let k=j.ChangeResourceRecordSetsResponse||j;return{ChangeInfo:{Id:k.ChangeInfo?.Id||"",Status:k.ChangeInfo?.Status||"",SubmittedAt:k.ChangeInfo?.SubmittedAt||"",Comment:k.ChangeInfo?.Comment}}}parseHostedZone(j){if(!j)return{Id:"",Name:""};return{Id:j.Id||"",Name:j.Name||"",CallerReference:j.CallerReference,Config:j.Config?{Comment:j.Config.Comment,PrivateZone:j.Config.PrivateZone==="true"||j.Config.PrivateZone===!0}:void 0,ResourceRecordSetCount:j.ResourceRecordSetCount?Number(j.ResourceRecordSetCount):void 0}}parseDelegationSet(j){if(!j)return{NameServers:[]};let k=j.NameServers?.NameServer||j.NameServers||[];if(!Array.isArray(k))k=k?[k]:[];return{Id:j.Id,CallerReference:j.CallerReference,NameServers:k}}parseResourceRecordSet(j){if(!j)return{Name:"",Type:""};let k=j.ResourceRecords?.ResourceRecord||j.ResourceRecords||[];if(!Array.isArray(k))k=k?[k]:[];return{Name:j.Name||"",Type:j.Type||"",TTL:j.TTL?Number(j.TTL):void 0,ResourceRecords:k.map((F)=>({Value:F.Value||F})),AliasTarget:j.AliasTarget?{HostedZoneId:j.AliasTarget.HostedZoneId,DNSName:j.AliasTarget.DNSName,EvaluateTargetHealth:j.AliasTarget.EvaluateTargetHealth==="true"||j.AliasTarget.EvaluateTargetHealth===!0}:void 0,SetIdentifier:j.SetIdentifier,Weight:j.Weight?Number(j.Weight):void 0,Region:j.Region,GeoLocation:j.GeoLocation,Failover:j.Failover,HealthCheckId:j.HealthCheckId}}async findHostedZoneByName(j){let k=j.endsWith(".")?j:`${j}.`;return(await this.listHostedZonesByName({DNSName:k})).HostedZones.find((H)=>H.Name===k)||null}async createARecord(j){let k=Array.isArray(j.Value)?j.Value:[j.Value];return this.changeResourceRecordSets({HostedZoneId:j.HostedZoneId,ChangeBatch:{Changes:[{Action:"UPSERT",ResourceRecordSet:{Name:j.Name,Type:"A",TTL:j.TTL||300,ResourceRecords:k.map((F)=>({Value:F}))}}]}})}async createCnameRecord(j){return this.changeResourceRecordSets({HostedZoneId:j.HostedZoneId,ChangeBatch:{Changes:[{Action:"UPSERT",ResourceRecordSet:{Name:j.Name,Type:"CNAME",TTL:j.TTL||300,ResourceRecords:[{Value:j.Value}]}}]}})}async createAliasRecord(j){return this.changeResourceRecordSets({HostedZoneId:j.HostedZoneId,ChangeBatch:{Changes:[{Action:"UPSERT",ResourceRecordSet:{Name:j.Name,Type:j.Type||"A",AliasTarget:{HostedZoneId:j.TargetHostedZoneId,DNSName:j.TargetDNSName,EvaluateTargetHealth:j.EvaluateTargetHealth??!1}}}]}})}async createTxtRecord(j){let F=(Array.isArray(j.Value)?j.Value:[j.Value]).map((J)=>{if(!J.startsWith('"'))return`"${J}"`;return J});return this.changeResourceRecordSets({HostedZoneId:j.HostedZoneId,ChangeBatch:{Changes:[{Action:"UPSERT",ResourceRecordSet:{Name:j.Name,Type:"TXT",TTL:j.TTL||300,ResourceRecords:F.map((J)=>({Value:J}))}}]}})}async createMxRecord(j){return this.changeResourceRecordSets({HostedZoneId:j.HostedZoneId,ChangeBatch:{Changes:[{Action:"UPSERT",ResourceRecordSet:{Name:j.Name,Type:"MX",TTL:j.TTL||300,ResourceRecords:j.Values.map((k)=>({Value:`${k.priority} ${k.mailServer}`}))}}]}})}async deleteRecord(j){return this.changeResourceRecordSets({HostedZoneId:j.HostedZoneId,ChangeBatch:{Changes:[{Action:"DELETE",ResourceRecordSet:j.RecordSet}]}})}async waitForChange(j,k=60,F=5000){let J=j.replace("/change/","");for(let H=0;H<k;H++){let K=await this.client.request({service:"route53",region:this.region,method:"GET",path:`/2013-04-01/change/${J}`});if((K.GetChangeResponse?.ChangeInfo?.Status||K.ChangeInfo?.Status)==="INSYNC")return!0;await new Promise((O)=>setTimeout(O,F))}return!1}async findOrCreateHostedZone(j){let k=j.domainName.endsWith(".")?j.domainName:`${j.domainName}.`,F=await this.findHostedZoneByName(k);if(F){let H=await this.getHostedZone({Id:F.Id});return{hostedZone:F,nameServers:H.DelegationSet.NameServers,isNew:!1}}let J=await this.createHostedZone({Name:k,HostedZoneConfig:{Comment:j.comment||`Hosted zone for ${j.domainName}`,PrivateZone:j.privateZone},VPC:j.vpc});return{hostedZone:J.HostedZone,nameServers:J.DelegationSet.NameServers,isNew:!0}}static getRootDomain(j){let k=j.replace(/\.$/,"").split(".");if(k.length<=2)return j;return k.slice(-2).join(".")}async findHostedZoneForDomain(j){let F=j.replace(/\.$/,"").split(".");for(let J=0;J<F.length-1;J++){let H=F.slice(J).join("."),K=await this.findHostedZoneByName(H);if(K)return K}return null}async ensureHostedZone(j){let k=await this.findOrCreateHostedZone({domainName:j.domainName,comment:j.comment});return{hostedZoneId:k.hostedZone.Id.replace("/hostedzone/",""),nameServers:k.nameServers,isNew:k.isNew,action:k.isNew?"created":"found"}}async setupDomainDns(j){let{domain:k,createIfNotExists:F=!0}=j,J=await this.findHostedZoneByName(k);if(J){let K=await this.getHostedZone({Id:J.Id});return{success:!0,hostedZoneId:J.Id.replace("/hostedzone/",""),nameServers:K.DelegationSet.NameServers,isNew:!1,message:`Found existing hosted zone for ${k}`}}if(!F)return{success:!1,hostedZoneId:null,nameServers:[],isNew:!1,message:`No hosted zone found for ${k} and createIfNotExists is false`};let H=await this.createHostedZone({Name:k,HostedZoneConfig:{Comment:`Created automatically by ts-cloud for ${k}`}});return{success:!0,hostedZoneId:H.HostedZone.Id.replace("/hostedzone/",""),nameServers:H.DelegationSet.NameServers,isNew:!0,message:`Created new hosted zone for ${k}. Please update your domain registrar with these name servers: ${H.DelegationSet.NameServers.join(", ")}`}}static CloudFrontHostedZoneId="Z2FDTNDATAQYW2";static S3WebsiteHostedZoneIds={"us-east-1":"Z3AQBSTGFYJSTF","us-east-2":"Z2O1EMRO9K5GLX","us-west-1":"Z2F56UZL2M1ACD","us-west-2":"Z3BJ6K6RIION7M","ap-east-1":"ZNB98KWMFR0R6","ap-south-1":"Z11RGJOFQNVJUP","ap-northeast-1":"Z2M4EHUR26P7ZW","ap-northeast-2":"Z3W03O7B5YMIYP","ap-northeast-3":"Z2YQB5RD63NC85","ap-southeast-1":"Z3O0J2DXBE1FTB","ap-southeast-2":"Z1WCIGYICN2BYD","ca-central-1":"Z1QDHH18159H29","eu-central-1":"Z21DNDUVLTQW6Q","eu-west-1":"Z1BKCTXD74EZPE","eu-west-2":"Z3GKZC51ZF0DB4","eu-west-3":"Z3R1K369G5AVDG","eu-north-1":"Z3BAZG2TWCNX0D","sa-east-1":"Z7KQH4QJS55SO"};static ALBHostedZoneIds={"us-east-1":"Z35SXDOTRQ7X7K","us-east-2":"Z3AADJGX6KTTL2","us-west-1":"Z368ELLRRE2KJ0","us-west-2":"Z1H1FL5HABSF5","ap-east-1":"Z3DQVH9N71FHZ0","ap-south-1":"ZP97RAFLXTNZK","ap-northeast-1":"Z14GRHDCWA56QT","ap-northeast-2":"ZWKZPGTI48KDX","ap-northeast-3":"Z5LXEBD8Y73MNV","ap-southeast-1":"Z1LMS91P8CMLE5","ap-southeast-2":"Z1GM3OXH4ZPM65","ca-central-1":"ZQSVJUPU6J1EY","eu-central-1":"Z215JYRZR1TBD5","eu-west-1":"Z32O12XQLNTSW2","eu-west-2":"ZHURV8PSTC4K8","eu-west-3":"Z3Q77PNBQS71R4","eu-north-1":"Z23TAZ6LKFMNIO","sa-east-1":"Z2P70J7HTTTPLU"};static APIGatewayHostedZoneIds={"us-east-1":"Z1UJRXOUMOOFQ8","us-east-2":"ZOJJZC49E0EPZ","us-west-1":"Z2MUQ32089INYE","us-west-2":"Z2OJLYMUO9EFXC","ap-east-1":"Z3FD1VL90ND7K5","ap-south-1":"Z3VO1THU9YC4UR","ap-northeast-1":"Z1YSHQZHG15GKL","ap-northeast-2":"Z20JF4UZKIW1U8","ap-northeast-3":"Z2YQB5RD63NC85","ap-southeast-1":"ZL327KTPIQFUL","ap-southeast-2":"Z2RPCDW04V8134","ca-central-1":"Z19DQILCV0OWEC","eu-central-1":"Z1U9ULNL0V5AJ3","eu-west-1":"ZLY8HYME6SFDD","eu-west-2":"ZJ5UAJN8Y3Z2Q","eu-west-3":"Z3KY65QIEKYHQQ","eu-north-1":"Z3UWIKFBOOGXPP","sa-east-1":"ZCMLWB8V5SYIT"}}
+export{Q as og};

package/dist/bin/{chunk-w32xv8n4.js → chunk-9vdc7adf.js}

@@ -1,8 +1,8 @@
-import{Eg as I}from"./chunk-dz1ec589.js";var y=(e)=>e==null?void 0:String(e),b=(e)=>Number(e)===1,E=(e,r)=>{try{return e==null?r:JSON.parse(String(e))}catch{return r}};function S(e){return{id:String(e.id),organizationId:String(e.organization_id),projectId:String(e.project_id),scope:{type:String(e.scope_type),id:String(e.scope_id),environmentId:y(e.environment_id),resourceId:y(e.resource_id),previewId:y(e.preview_id)},key:String(e.key),kind:String(e.kind),value:y(e.value),valueFingerprint:String(e.value_fingerprint),secretRef:y(e.secret_ref),backend:String(e.backend),backendVersion:y(e.backend_version),origin:String(e.origin),required:b(e.required),metadata:E(e.metadata,{}),lastUsedAt:y(e.last_used_at),rotatedAt:y(e.rotated_at),version:Number(e.version),createdAt:String(e.created_at),updatedAt:String(e.updated_at)}}function C(e){return{entryId:String(e.entry_id),resourceId:String(e.resource_id),injectionTarget:String(e.injection_target),required:b(e.required),requiresRedeploy:b(e.requires_redeploy),lastDeployedVersion:e.last_deployed_version==null?void 0:Number(e.last_deployed_version),createdAt:String(e.created_at),updatedAt:String(e.updated_at)}}class q{controlPlane;now;constructor(e,r=()=>new Date){this.controlPlane=e;this.now=r}get(e){let r=this.controlPlane.database.query("SELECT * FROM configuration_entries WHERE id=?").get(e);return r?S(r):void 0}find(e,r,n){let t=this.controlPlane.database.query("SELECT * FROM configuration_entries WHERE project_id=? AND scope_type=? AND scope_id=? AND key=?").get(e,r.type,r.id,n);return t?S(t):void 0}list(e){let r=["project_id=?"],n=[e.projectId];if(e.scope)r.push("scope_type=?","scope_id=?"),n.push(e.scope.type,e.scope.id);if(e.kind)r.push("kind=?"),n.push(e.kind);return this.controlPlane.database.query(`SELECT * FROM configuration_entries WHERE ${r.join(" AND ")} ORDER BY key,scope_type,scope_id`).all(...n).map(S)}create(e){this.validateScope(e),this.validateEntry(e);let r=crypto.randomUUID(),n=this.now().toISOString();return this.controlPlane.database.run("INSERT INTO configuration_entries (id,organization_id,project_id,scope_type,scope_id,environment_id,resource_id,preview_id,key,kind,value,value_fingerprint,secret_ref,backend,backend_version,origin,required,metadata,last_used_at,rotated_at,version,created_at,updated_at) VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)",[r,e.organizationId,e.projectId,e.scope.type,e.scope.id,e.scope.environmentId??null,e.scope.resourceId??null,e.scope.previewId??null,e.key,e.kind,e.value??null,e.valueFingerprint,e.secretRef??null,e.backend,e.backendVersion??null,e.origin,e.required?1:0,JSON.stringify(e.metadata),e.lastUsedAt??null,e.rotatedAt??null,1,n,n]),this.get(r)}update(e,r,n){let t=this.get(e);if(!t)throw Error("Configuration entry was not found.");if(this.validateEntry({...t,...n}),this.controlPlane.database.run("UPDATE configuration_entries SET value=?,value_fingerprint=?,secret_ref=?,backend=?,backend_version=?,required=?,metadata=?,rotated_at=?,version=version+1,updated_at=? WHERE id=? AND version=?",[n.value??null,n.valueFingerprint,n.secretRef??null,n.backend,n.backendVersion??null,n.required?1:0,JSON.stringify(n.metadata),n.rotatedAt??null,this.now().toISOString(),e,r]).changes!==1)throw Error("Configuration entry changed; refresh and retry.");return this.get(e)}remove(e,r){let n=this.get(e);if(!n)throw Error("Configuration entry was not found.");if(n.version!==r)throw Error("Configuration entry changed; refresh and retry.");if(this.controlPlane.database.run("DELETE FROM configuration_entries WHERE id=? AND version=?",[e,r]).changes<1)throw Error("Configuration entry changed; refresh and retry.");return n}setDependency(e){let r=this.now().toISOString();return this.controlPlane.database.run("INSERT INTO configuration_dependencies (entry_id,resource_id,injection_target,required,requires_redeploy,last_deployed_version,created_at,updated_at) VALUES (?,?,?,?,?,?,?,?) ON CONFLICT(entry_id,resource_id) DO UPDATE SET injection_target=excluded.injection_target,required=excluded.required,requires_redeploy=excluded.requires_redeploy,last_deployed_version=excluded.last_deployed_version,updated_at=excluded.updated_at",[e.entryId,e.resourceId,e.injectionTarget,e.required?1:0,e.requiresRedeploy?1:0,e.lastDeployedVersion??null,r,r]),this.dependencies(e.entryId).find((n)=>n.resourceId===e.resourceId)}dependencies(e){return this.controlPlane.database.query("SELECT * FROM configuration_dependencies WHERE entry_id=? ORDER BY resource_id").all(e).map(C)}dependenciesForResource(e){return this.controlPlane.database.query("SELECT * FROM configuration_dependencies WHERE resource_id=? ORDER BY entry_id").all(e).map(C)}mutation(e){let r=this.controlPlane.database.query("SELECT request_hash,result FROM configuration_mutations WHERE idempotency_key=?").get(e);return r?{requestHash:r.request_hash,result:E(r.result,{})}:void 0}recordMutation(e){this.controlPlane.database.run("INSERT INTO configuration_mutations (id,project_id,idempotency_key,request_hash,result,actor_id,created_at) VALUES (?,?,?,?,?,?,?)",[crypto.randomUUID(),e.projectId,e.idempotencyKey,e.requestHash,JSON.stringify(e.result),e.actorId??null,this.now().toISOString()])}validateEntry(e){if(!/^[A-Za-z_][A-Za-z0-9_]{0,255}$/.test(e.key))throw Error(`Invalid configuration key: ${e.key}`);if(e.kind==="variable"&&(e.value==null||e.secretRef||e.backend!=="plaintext"))throw Error("Variables require a plaintext value and cannot use a secret backend.");if(e.kind==="secret"&&(e.value!=null||!e.secretRef||e.backend==="plaintext"))throw Error("Secrets require a non-plaintext backend reference and cannot store a plaintext value.")}validateScope(e){let r=this.controlPlane.getProject(e.projectId);if(!r||r.organizationId!==e.organizationId)throw Error("Configuration project does not belong to the organization.");let n=e.scope;if(n.type==="project"){if(n.id!==e.projectId||n.environmentId||n.resourceId||n.previewId)throw Error("Project configuration scope must reference only its project.");return}if(n.type==="environment"){let i=this.controlPlane.database.query("SELECT project_id FROM environments WHERE id=?").get(n.id);if(!i||i.project_id!==e.projectId||n.environmentId&&n.environmentId!==n.id||n.resourceId||n.previewId)throw Error("Environment configuration scope does not belong to the project.");return}if(n.type==="service"||n.type==="function"){let i=this.controlPlane.getResource(n.id);if(!i||i.projectId!==e.projectId||n.type==="function"&&i.kind!=="function"||n.resourceId&&n.resourceId!==n.id||n.environmentId&&i.environmentId!==n.environmentId||n.previewId)throw Error(`${n.type==="function"?"Function":"Service"} configuration scope does not belong to the project.`);return}let t=this.controlPlane.database.query("SELECT project_id,base_environment_id,resource_id FROM preview_instances WHERE id=?").get(n.id);if(!t||t.project_id!==e.projectId||n.previewId&&n.previewId!==n.id||n.environmentId&&n.environmentId!==t.base_environment_id||n.resourceId&&n.resourceId!==t.resource_id)throw Error("Preview configuration scope does not belong to the project.")}}var _=/^[A-Za-z_][A-Za-z0-9_]{0,255}$/;function A(e){let r={n:`
-`,r:"\r",t:"\t","\\":"\\",'"':'"',$:"$"};return e.replace(/\\(n|r|t|\\|"|\$)/g,(n,t)=>r[t])}function R(e){let r={},n=[],t=e.replace(/\r\n?/g,`
+import{Eg as I}from"./chunk-scqmd4qv.js";var _=(e)=>e==null?void 0:String(e),b=(e)=>Number(e)===1,y=(e,r)=>{try{return e==null?r:JSON.parse(String(e))}catch{return r}};function C(e){return{id:String(e.id),organizationId:String(e.organization_id),projectId:String(e.project_id),scope:{type:String(e.scope_type),id:String(e.scope_id),environmentId:_(e.environment_id),resourceId:_(e.resource_id),previewId:_(e.preview_id)},key:String(e.key),kind:String(e.kind),value:_(e.value),valueFingerprint:String(e.value_fingerprint),secretRef:_(e.secret_ref),backend:String(e.backend),backendVersion:_(e.backend_version),origin:String(e.origin),required:b(e.required),metadata:y(e.metadata,{}),lastUsedAt:_(e.last_used_at),rotatedAt:_(e.rotated_at),version:Number(e.version),createdAt:String(e.created_at),updatedAt:String(e.updated_at)}}function R(e){return{entryId:String(e.entry_id),resourceId:String(e.resource_id),injectionTarget:String(e.injection_target),required:b(e.required),requiresRedeploy:b(e.requires_redeploy),lastDeployedVersion:e.last_deployed_version==null?void 0:Number(e.last_deployed_version),createdAt:String(e.created_at),updatedAt:String(e.updated_at)}}class q{controlPlane;now;constructor(e,r=()=>new Date){this.controlPlane=e;this.now=r}get(e){let r=this.controlPlane.database.query("SELECT * FROM configuration_entries WHERE id=?").get(e);return r?C(r):void 0}find(e,r,o){let t=this.controlPlane.database.query("SELECT * FROM configuration_entries WHERE project_id=? AND scope_type=? AND scope_id=? AND key=?").get(e,r.type,r.id,o);return t?C(t):void 0}list(e){let r=["project_id=?"],o=[e.projectId];if(e.scope)r.push("scope_type=?","scope_id=?"),o.push(e.scope.type,e.scope.id);if(e.kind)r.push("kind=?"),o.push(e.kind);return this.controlPlane.database.query(`SELECT * FROM configuration_entries WHERE ${r.join(" AND ")} ORDER BY key,scope_type,scope_id`).all(...o).map(C)}create(e){this.validateScope(e),this.validateEntry(e);let r=crypto.randomUUID(),o=this.now().toISOString();return this.controlPlane.database.run("INSERT INTO configuration_entries (id,organization_id,project_id,scope_type,scope_id,environment_id,resource_id,preview_id,key,kind,value,value_fingerprint,secret_ref,backend,backend_version,origin,required,metadata,last_used_at,rotated_at,version,created_at,updated_at) VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)",[r,e.organizationId,e.projectId,e.scope.type,e.scope.id,e.scope.environmentId??null,e.scope.resourceId??null,e.scope.previewId??null,e.key,e.kind,e.value??null,e.valueFingerprint,e.secretRef??null,e.backend,e.backendVersion??null,e.origin,e.required?1:0,JSON.stringify(e.metadata),e.lastUsedAt??null,e.rotatedAt??null,1,o,o]),this.get(r)}update(e,r,o){let t=this.get(e);if(!t)throw Error("Configuration entry was not found.");if(this.validateEntry({...t,...o}),this.controlPlane.database.run("UPDATE configuration_entries SET value=?,value_fingerprint=?,secret_ref=?,backend=?,backend_version=?,required=?,metadata=?,rotated_at=?,version=version+1,updated_at=? WHERE id=? AND version=?",[o.value??null,o.valueFingerprint,o.secretRef??null,o.backend,o.backendVersion??null,o.required?1:0,JSON.stringify(o.metadata),o.rotatedAt??null,this.now().toISOString(),e,r]).changes!==1)throw Error("Configuration entry changed; refresh and retry.");return this.get(e)}remove(e,r){let o=this.get(e);if(!o)throw Error("Configuration entry was not found.");if(o.version!==r)throw Error("Configuration entry changed; refresh and retry.");if(this.controlPlane.database.run("DELETE FROM configuration_entries WHERE id=? AND version=?",[e,r]).changes<1)throw Error("Configuration entry changed; refresh and retry.");return o}setDependency(e){let r=this.now().toISOString();return this.controlPlane.database.run("INSERT INTO configuration_dependencies (entry_id,resource_id,injection_target,required,requires_redeploy,last_deployed_version,created_at,updated_at) VALUES (?,?,?,?,?,?,?,?) ON CONFLICT(entry_id,resource_id) DO UPDATE SET injection_target=excluded.injection_target,required=excluded.required,requires_redeploy=excluded.requires_redeploy,last_deployed_version=excluded.last_deployed_version,updated_at=excluded.updated_at",[e.entryId,e.resourceId,e.injectionTarget,e.required?1:0,e.requiresRedeploy?1:0,e.lastDeployedVersion??null,r,r]),this.dependencies(e.entryId).find((o)=>o.resourceId===e.resourceId)}dependencies(e){return this.controlPlane.database.query("SELECT * FROM configuration_dependencies WHERE entry_id=? ORDER BY resource_id").all(e).map(R)}dependenciesForResource(e){return this.controlPlane.database.query("SELECT * FROM configuration_dependencies WHERE resource_id=? ORDER BY entry_id").all(e).map(R)}mutation(e){let r=this.controlPlane.database.query("SELECT request_hash,result FROM configuration_mutations WHERE idempotency_key=?").get(e);return r?{requestHash:r.request_hash,result:y(r.result,{})}:void 0}recordMutation(e){this.controlPlane.database.run("INSERT INTO configuration_mutations (id,project_id,idempotency_key,request_hash,result,actor_id,created_at) VALUES (?,?,?,?,?,?,?)",[crypto.randomUUID(),e.projectId,e.idempotencyKey,e.requestHash,JSON.stringify(e.result),e.actorId??null,this.now().toISOString()])}validateEntry(e){if(!/^[A-Za-z_][A-Za-z0-9_]{0,255}$/.test(e.key))throw Error(`Invalid configuration key: ${e.key}`);if(e.kind==="variable"&&(e.value==null||e.secretRef||e.backend!=="plaintext"))throw Error("Variables require a plaintext value and cannot use a secret backend.");if(e.kind==="secret"&&(e.value!=null||!e.secretRef||e.backend==="plaintext"))throw Error("Secrets require a non-plaintext backend reference and cannot store a plaintext value.")}validateScope(e){let r=this.controlPlane.getProject(e.projectId);if(!r||r.organizationId!==e.organizationId)throw Error("Configuration project does not belong to the organization.");let o=e.scope;if(o.type==="project"){if(o.id!==e.projectId||o.environmentId||o.resourceId||o.previewId)throw Error("Project configuration scope must reference only its project.");return}if(o.type==="environment"){let n=this.controlPlane.database.query("SELECT project_id FROM environments WHERE id=?").get(o.id);if(!n||n.project_id!==e.projectId||o.environmentId&&o.environmentId!==o.id||o.resourceId||o.previewId)throw Error("Environment configuration scope does not belong to the project.");return}if(o.type==="service"||o.type==="function"){let n=this.controlPlane.getResource(o.id);if(!n||n.projectId!==e.projectId||o.type==="function"&&n.kind!=="function"||o.resourceId&&o.resourceId!==o.id||o.environmentId&&n.environmentId!==o.environmentId||o.previewId)throw Error(`${o.type==="function"?"Function":"Service"} configuration scope does not belong to the project.`);return}let t=this.controlPlane.database.query("SELECT project_id,base_environment_id,resource_id FROM preview_instances WHERE id=?").get(o.id);if(!t||t.project_id!==e.projectId||o.previewId&&o.previewId!==o.id||o.environmentId&&o.environmentId!==t.base_environment_id||o.resourceId&&o.resourceId!==t.resource_id)throw Error("Preview configuration scope does not belong to the project.")}}var P=/^[A-Za-z_][A-Za-z0-9_]{0,255}$/;function O(e){let r={n:`
+`,r:"\r",t:"\t","\\":"\\",'"':'"',$:"$"};return e.replace(/\\(n|r|t|\\|"|\$)/g,(o,t)=>r[t])}function x(e){let r={},o=[],t=e.replace(/\r\n?/g,`
 `).split(`
-`);for(let i=0;i<t.length;i++){let s=i+1,c=t[i];if(!c.trim()||c.trimStart().startsWith("#"))continue;if(/^\s*export\s+/.test(c))c=c.replace(/^\s*export\s+/,"");let u=c.match(/^\s*([^=\s]+)\s*=\s*(.*)$/);if(!u){n.push({line:s,severity:"error",code:"invalid_line",message:"Expected KEY=VALUE."});continue}let o=u[1],a=u[2];if(!_.test(o)){n.push({line:s,key:o,severity:"error",code:"invalid_key",message:`Invalid environment variable name: ${o}`});continue}let d=a;if(a.startsWith('"')||a.startsWith("'")){let g=a[0],l=[a.slice(1)],v=!1;while(!0){let f=l[l.length-1],m=!1,k=-1;for(let h=0;h<f.length;h++){if(g==='"'&&f[h]==="\\"&&!m){m=!0;continue}if(f[h]===g&&!m){k=h;break}m=!1}if(k>=0){l[l.length-1]=f.slice(0,k),v=!0;break}if(++i>=t.length)break;l.push(t[i])}if(!v){n.push({line:s,key:o,severity:"error",code:"unterminated_quote",message:`Unterminated quoted value for ${o}.`});continue}if(d=l.join(`
-`),g==='"')d=A(d)}else d=a.replace(/\s+#.*$/,"").trim();if(Object.hasOwn(r,o)){let g=r[o]!==d;if(n.push({line:s,key:o,severity:g?"error":"warning",code:g?"conflict":"duplicate",message:g?`${o} has conflicting values.`:`${o} is duplicated with the same value.`}),g)continue}r[o]=d}return{values:r,diagnostics:n,valid:!n.some((i)=>i.severity==="error")}}function j(e){return Object.entries(e).sort(([r],[n])=>r.localeCompare(n)).map(([r,n])=>{if(!_.test(r))throw Error(`Invalid environment variable name: ${r}`);return`${r}=${JSON.stringify(n)}`}).join(`
+`);for(let n=0;n<t.length;n++){let s=n+1,c=t[n];if(!c.trim()||c.trimStart().startsWith("#"))continue;if(/^\s*export\s+/.test(c))c=c.replace(/^\s*export\s+/,"");let l=c.match(/^\s*([^=\s]+)\s*=\s*(.*)$/);if(!l){o.push({line:s,severity:"error",code:"invalid_line",message:"Expected KEY=VALUE."});continue}let i=l[1],a=l[2];if(!P.test(i)){o.push({line:s,key:i,severity:"error",code:"invalid_key",message:`Invalid environment variable name: ${i}`});continue}let d=a;if(a.startsWith('"')||a.startsWith("'")){let g=a[0],f=[a.slice(1)],S=!1;while(!0){let m=f[f.length-1],h=!1,E=-1;for(let u=0;u<m.length;u++){if(g==='"'&&m[u]==="\\"&&!h){h=!0;continue}if(m[u]===g&&!h){E=u;break}h=!1}if(E>=0){f[f.length-1]=m.slice(0,E),S=!0;break}if(++n>=t.length)break;f.push(t[n])}if(!S){o.push({line:s,key:i,severity:"error",code:"unterminated_quote",message:`Unterminated quoted value for ${i}.`});continue}if(d=f.join(`
+`),g==='"')d=O(d)}else d=a.replace(/\s+#.*$/,"").trim();if(Object.hasOwn(r,i)){let g=r[i]!==d;if(o.push({line:s,key:i,severity:g?"error":"warning",code:g?"conflict":"duplicate",message:g?`${i} has conflicting values.`:`${i} is duplicated with the same value.`}),g)continue}r[i]=d}return{values:r,diagnostics:o,valid:!o.some((n)=>n.severity==="error")}}function j(e){return Object.entries(e).sort(([r],[o])=>r.localeCompare(o)).map(([r,o])=>{if(!P.test(r))throw Error(`Invalid environment variable name: ${r}`);return`${r}=${JSON.stringify(o)}`}).join(`
 `)+(Object.keys(e).length?`
-`:"")}import{createCipheriv as D,createDecipheriv as O,createHash as x,randomBytes as M}from"node:crypto";class w{controlPlane;now;kind="local_encrypted";key;constructor(e,r,n=()=>new Date){this.controlPlane=e;this.now=n;if(!r)throw Error("Configuration encryption key is required.");this.key=x("sha256").update(`ts-cloud:configuration:${r}`).digest()}encrypt(e){let r=M(12),n=D("aes-256-gcm",this.key,r),t=Buffer.concat([n.update(e,"utf8"),n.final()]);return`v1.${r.toString("base64url")}.${n.getAuthTag().toString("base64url")}.${t.toString("base64url")}`}decrypt(e){let[r,n,t,i]=e.split(".");if(r!=="v1"||!n||!t||!i)throw Error("Encrypted configuration secret is unavailable.");try{let s=O("aes-256-gcm",this.key,Buffer.from(n,"base64url"));return s.setAuthTag(Buffer.from(t,"base64url")),Buffer.concat([s.update(Buffer.from(i,"base64url")),s.final()]).toString("utf8")}catch{throw Error("Encrypted configuration secret could not be decrypted.")}}async put(e){if(!e.value)throw Error("Configuration secrets cannot be empty.");let r=e.reference??`secret://configuration/${e.name}/${crypto.randomUUID()}`;if(!/^secret:\/\/configuration\/[A-Za-z0-9._/-]+$/.test(r))throw Error("Invalid local configuration secret reference.");let t=(this.controlPlane.database.query("SELECT version FROM configuration_secret_values WHERE reference=?").get(r)?.version??0)+1,i=this.now().toISOString();return this.controlPlane.database.run("INSERT INTO configuration_secret_values (reference,ciphertext,fingerprint,version,created_at,updated_at) VALUES (?,?,?,?,?,?) ON CONFLICT(reference) DO UPDATE SET ciphertext=excluded.ciphertext,fingerprint=excluded.fingerprint,version=excluded.version,updated_at=excluded.updated_at",[r,this.encrypt(e.value),x("sha256").update(e.value).digest("hex"),t,i,i]),{reference:r,version:String(t)}}async resolve(e){let r=this.controlPlane.database.query("SELECT ciphertext FROM configuration_secret_values WHERE reference=?").get(e);if(!r)throw Error("Configuration secret was not found.");return this.decrypt(r.ciphertext)}async remove(e){this.controlPlane.database.run("DELETE FROM configuration_secret_values WHERE reference=?",[e])}async validate(e){return!!this.controlPlane.database.query("SELECT 1 AS found FROM configuration_secret_values WHERE reference=?").get(e)}}class T{client;region;kind="aws_secrets_manager";constructor(e,r){this.client=e;this.region=r}async put(e){if(e.reference){let n=this.id(e.reference),t=await this.client.putSecretValue({SecretId:n,SecretString:e.value,ClientRequestToken:e.idempotencyKey});return{reference:e.reference,version:t.VersionId??e.idempotencyKey}}let r=await this.client.createSecret({Name:e.name,SecretString:e.value,ClientRequestToken:e.idempotencyKey,Tags:[{Key:"managed-by",Value:"ts-cloud"}]});return{reference:`aws-sm://${this.region}/${encodeURIComponent(r.ARN??r.Name??e.name)}`,version:r.VersionId??e.idempotencyKey}}async resolve(e){let r=await this.client.getSecretValue({SecretId:this.id(e)});if(r.SecretString==null)throw Error("AWS Secrets Manager value is unavailable.");return r.SecretString}async remove(e){await this.client.deleteSecret({SecretId:this.id(e),RecoveryWindowInDays:7})}async validate(e){try{return await this.client.describeSecret(this.id(e)),!0}catch{return!1}}id(e){let r=new URL(e);if(r.protocol!=="aws-sm:"||r.hostname!==this.region)throw Error("Invalid AWS Secrets Manager reference.");return decodeURIComponent(r.pathname.slice(1))}}class V{client;region;kind="aws_ssm";constructor(e,r){this.client=e;this.region=r}async put(e){let r=e.reference?this.name(e.reference):`/${e.name.replace(/^\/+/,"")}`,n=await this.client.putParameter({Name:r,Value:e.value,Type:"SecureString",Overwrite:!!e.reference,Description:"Managed by ts-cloud"});return{reference:`aws-ssm://${this.region}${r}`,version:String(n.Version??1)}}async resolve(e){let r=await this.client.getParameter({Name:this.name(e),WithDecryption:!0});if(r.Parameter?.Value==null)throw Error("AWS SSM parameter value is unavailable.");return r.Parameter.Value}async remove(e){await this.client.deleteParameter({Name:this.name(e)})}async validate(e){try{return!!(await this.client.getParameter({Name:this.name(e),WithDecryption:!1})).Parameter}catch{return!1}}name(e){let r=new URL(e);if(r.protocol!=="aws-ssm:"||r.hostname!==this.region||!r.pathname.startsWith("/"))throw Error("Invalid AWS SSM reference.");return r.pathname}}class W{kind="external";async put(){throw Error("External secret references cannot be written by ts-cloud.")}async resolve(){throw Error("External secrets must be resolved by the deployment provider.")}async remove(){}async validate(e){return/^(?:vault|doppler|op|external):\/\//.test(e)}}import{createHmac as B}from"node:crypto";var K=/^(?:secret|aws-sm|aws-ssm|vault|doppler|op|external):\/\//,N=/^(?:AWS_|TS_CLOUD_|PORT$|HOST$)/;function p(e){return[...new Set(e)].sort()}function P(e,r={}){let n=e.kind==="secret";return{id:e.id,key:e.key,kind:e.kind,scope:e.scope,inherited:!!r.inherited,overridden:!!r.overridden,required:e.required,backend:!n||r.canReadSecretMetadata?e.backend:void 0,backendVersion:!n||r.canReadSecretMetadata?e.backendVersion:void 0,reference:n&&r.canReadSecretMetadata?e.secretRef:void 0,value:!n?e.value:void 0,lastUsedAt:e.lastUsedAt,rotatedAt:e.rotatedAt,version:e.version,updatedAt:e.updatedAt}}class L{store;backends=new Map;fingerprintKey;now;constructor(e,r){if(this.store=e,this.fingerprintKey=r.fingerprintKey??r.encryptionKey,this.now=r.now??(()=>new Date),!this.fingerprintKey)throw Error("Configuration fingerprint key is required.");let n=r.backends??[new w(e.controlPlane,r.encryptionKey,this.now)];for(let t of n)this.backends.set(t.kind,t)}list(e){let r=e.search?.toLowerCase();return this.store.list(e).filter((n)=>!r||n.key.toLowerCase().includes(r)).map((n)=>P(n,{canReadSecretMetadata:e.canReadSecretMetadata}))}plan(e){let r=this.store.list({projectId:e.projectId,scope:e.scope}),n=new Map(r.map((o)=>[o.key,o])),t=[],i=[],s=[],c=[];for(let[o,a]of Object.entries(e.values)){t.push(...this.warnings(o,a));let d=n.get(o);if(!d)i.push(o);else if(d.valueFingerprint!==this.fingerprint(a))s.push(o);else c.push(o)}let u=e.removeMissing?r.filter((o)=>!Object.hasOwn(e.values,o.key)).map((o)=>o.key):[];return{added:p(i),changed:p(s),removed:p(u),unchanged:p(c),affectedResourceIds:this.affectedResources(e.projectId,e.scope,[...i,...s,...u]),warnings:t}}async set(e){let r=this.requestHash(e),n=e.idempotencyKey;if(n){let f=this.store.mutation(n);if(f){if(f.requestHash!==r)throw Error("Idempotency key was already used for a different configuration mutation.");let m=this.store.get(String(f.result.entryId??""));if(!m)throw Error("Idempotent configuration result is no longer available.");return{entry:m,mutation:f.result.mutation,warnings:[]}}}if(e.value!=null&&K.test(e.value))throw Error("Secret references must use the reference field, not a plaintext value field.");let t=this.store.find(e.projectId,e.scope,e.key),i=this.fingerprint(e.value??e.reference??"");if(t&&e.expectedVersion!=null&&t.version!==e.expectedVersion)throw Error("Configuration entry changed; refresh and retry.");if(t&&t.kind!==e.kind)throw Error("Delete the existing entry before changing between variable and secret kinds.");let s=e.kind==="variable"?"plaintext":e.backend??(e.reference?"external":"local_encrypted");if(!!t&&(t.valueFingerprint!==i||t.backend!==s||t.required!==!!e.required)&&(this.isProduction(t)||this.store.dependencies(t.id).length>0)&&!e.confirmed)throw Error("Confirmation is required because this replacement affects production or dependent services.");let u=e.reference,o;if(e.kind==="secret"){let f=this.backend(s);if(e.reference&&e.value==null){if(!await f.validate(e.reference))throw Error("Secret backend reference is unavailable or invalid.");o=t?.backendVersion??"external"}else{if(e.value==null)throw Error("A secret value or external reference is required.");let m=await f.put({reference:t?.backend===s?t.secretRef:void 0,name:this.backendName(e),value:e.value,idempotencyKey:n??crypto.randomUUID()});u=m.reference,o=m.version}}let a=e.kind==="variable"?e.value:void 0;if(e.kind==="variable"&&a==null)throw Error("A variable value is required.");let d=!t||t.valueFingerprint!==i||t.backend!==s||t.secretRef!==u||t.backendVersion!==o||t.required!==!!e.required,g=t?d?this.store.update(t.id,t.version,{value:a,valueFingerprint:i,secretRef:u,backend:s,backendVersion:o,required:!!e.required,metadata:I(e.metadata??t.metadata),rotatedAt:e.kind==="secret"?this.now().toISOString():t.rotatedAt}):t:this.store.create({organizationId:e.organizationId,projectId:e.projectId,scope:e.scope,key:e.key,kind:e.kind,value:a,valueFingerprint:i,secretRef:u,backend:s,backendVersion:o,origin:e.origin??"managed",required:!!e.required,metadata:I(e.metadata??{}),rotatedAt:e.kind==="secret"?this.now().toISOString():void 0}),l=this.affectedResources(e.projectId,e.scope,[e.key]),v={added:t?[]:[e.key],changed:t&&d?[e.key]:[],removed:[],unchanged:t&&!d?[e.key]:[],affectedResourceIds:l,versions:{[e.key]:g.version}};if(n)this.store.recordMutation({projectId:e.projectId,idempotencyKey:n,requestHash:r,actorId:e.actorId,result:{entryId:g.id,mutation:v}});return this.audit(e.projectId,e.actorId,t&&d?"configuration.updated":t?"configuration.unchanged":"configuration.created",g,l),{entry:g,mutation:v,warnings:this.warnings(e.key,e.value??"")}}async importDotenv(e){let r=R(e.source);if(!r.valid)return{document:r,warnings:[]};let n=new Set(e.secretKeys??[]),t={added:[],changed:[],removed:[],unchanged:[],affectedResourceIds:[],versions:{}},i=[];for(let[s,c]of Object.entries(r.values)){let u=await this.set({...e,source:void 0,key:s,value:c,kind:n.has(s)?"secret":"variable",idempotencyKey:e.idempotencyKey?`${e.idempotencyKey}:${s}`:void 0});t.added.push(...u.mutation.added),t.changed.push(...u.mutation.changed),t.unchanged.push(...u.mutation.unchanged),t.affectedResourceIds.push(...u.mutation.affectedResourceIds),Object.assign(t.versions,u.mutation.versions),i.push(...u.warnings)}return t.added=p(t.added),t.changed=p(t.changed),t.unchanged=p(t.unchanged),t.affectedResourceIds=p(t.affectedResourceIds),{document:r,mutation:t,warnings:i}}exportVariables(e){return j(Object.fromEntries(this.store.list({projectId:e.projectId,scope:e.scope,kind:"variable"}).map((r)=>[r.key,r.value??""])))}async transfer(e){let r=this.store.get(e.entryId);if(!r)throw Error("Configuration entry was not found.");if(r.scope.type===e.targetScope.type&&r.scope.id===e.targetScope.id)throw Error("Choose a different destination scope.");let n=r.kind==="variable"?r.value:r.backend==="external"?void 0:await this.backend(r.backend).resolve(r.secretRef),t=r.kind==="secret"?r.backend:void 0,i=await this.set({organizationId:r.organizationId,projectId:r.projectId,scope:e.targetScope,key:r.key,kind:r.kind,value:n,reference:r.backend==="external"?r.secretRef:void 0,backend:t,required:r.required,metadata:r.metadata,confirmed:e.confirmed,actorId:e.actorId,idempotencyKey:e.idempotencyKey?`${e.idempotencyKey}:copy`:void 0,origin:r.origin});if(e.mode==="move")await this.remove({entryId:r.id,expectedVersion:r.version,confirmed:e.confirmed,actorId:e.actorId});let s={added:i.mutation.added,changed:i.mutation.changed,removed:e.mode==="move"?[r.key]:[],unchanged:i.mutation.unchanged,affectedResourceIds:p([...i.mutation.affectedResourceIds,...this.affectedResources(r.projectId,r.scope,[r.key])]),versions:i.mutation.versions};return{entry:i.entry,mutation:s}}async resolve(e){let r=this.store.list({projectId:e.projectId}),n=r.filter((a)=>this.applies(a,e)).sort((a,d)=>this.rank(a.scope.type)-this.rank(d.scope.type)),t=new Map,i=new Set;for(let a of n){if(t.has(a.key))i.add(a.key);t.set(a.key,a)}let s={},c={},u=[],o=new Set(e.allowedPreviewSecrets??[]);for(let[a,d]of t){if(e.previewId&&d.kind==="secret"&&d.scope.type!=="preview"&&(!e.trustedPreview||!o.has(a)))continue;if(d.kind==="variable")s[a]=d.value??"";else if(e.nativeReferences)s[a]=d.secretRef;else{let g=this.backend(d.backend);if(!await g.validate(d.secretRef)){if(u.push({key:a,code:"stale_reference",message:`${a} points to an unavailable secret.`}),d.required)u.push({key:a,code:"missing_required",message:`${a} is required but unavailable.`});continue}s[a]=await g.resolve(d.secretRef)}c[a]=P(d,{inherited:d.scope.type!==(e.previewId?"preview":e.functionId?"function":e.resourceId?"service":e.environmentId?"environment":"project"),overridden:i.has(a),canReadSecretMetadata:e.canReadSecretMetadata}),this.store.controlPlane.database.run("UPDATE configuration_entries SET last_used_at=? WHERE id=?",[this.now().toISOString(),d.id])}return{values:s,entries:c,warnings:u,configurationHash:this.fingerprint([...t.values()].map((a)=>`${a.key}:${a.valueFingerprint}:${a.version}`).sort().join(`
-`))}}async reveal(e){let r=this.store.get(e.entryId);if(!r||r.kind!=="secret")throw Error("Configuration secret was not found.");if(!e.canRevealSecrets)throw Error("Secret reveal permission is required.");if(!e.recentlyAuthenticated)throw Error("Recent authentication is required to reveal a secret.");let n=await this.backend(r.backend).resolve(r.secretRef);return this.audit(r.projectId,e.actorId,"configuration.secret.revealed",r,[]),n}async remove(e){let r=this.store.get(e.entryId);if(!r)throw Error("Configuration entry was not found.");let n=this.store.dependencies(r.id);if(((r.scope.environmentId?this.store.controlPlane.listEnvironments(r.projectId).some((c)=>c.id===r.scope.environmentId&&c.kind==="production"):r.scope.type==="project")||n.length)&&!e.confirmed)throw Error("Confirmation is required because this configuration affects production or dependent services.");if(r.kind==="secret"&&r.backend!=="external")await this.backend(r.backend).remove(r.secretRef);this.store.remove(r.id,e.expectedVersion);let i=p(n.map((c)=>c.resourceId)),s={added:[],changed:[],removed:[r.key],unchanged:[],affectedResourceIds:i,versions:{}};return this.audit(r.projectId,e.actorId,"configuration.deleted",r,i),s}applies(e,r){if(e.scope.type==="project")return!0;if(e.scope.type==="environment")return e.scope.id===r.environmentId;if(e.scope.type==="service")return e.scope.id===r.resourceId;if(e.scope.type==="function")return e.scope.id===r.functionId;return e.scope.id===r.previewId}rank(e){return{project:0,environment:1,service:2,function:3,preview:4}[e]}fingerprint(e){return`hmac-sha256:${B("sha256",this.fingerprintKey).update(e).digest("hex")}`}requestHash(e){return this.fingerprint(JSON.stringify({...e,idempotencyKey:void 0,actorId:void 0}))}backend(e){let r=this.backends.get(e);if(!r)throw Error(`Configuration secret backend is not configured: ${e}`);return r}backendName(e){return`ts-cloud/${e.projectId}/${e.scope.type}/${e.scope.id}/${e.key}`.replace(/[^A-Za-z0-9/_+=.@-]/g,"-")}isProduction(e){return e.scope.type==="project"||!!e.scope.environmentId&&this.store.controlPlane.listEnvironments(e.projectId).some((r)=>r.id===e.scope.environmentId&&r.kind==="production")}warnings(e,r){let n=[];if(N.test(e))n.push({key:e,code:"reserved",message:`${e} may be reserved by the runtime or provider.`});if(Buffer.byteLength(r)>65536)n.push({key:e,code:"limit",message:`${e} exceeds the portable 64 KiB value limit.`});return n}affectedResources(e,r,n){let t=this.store.list({projectId:e,scope:r}).filter((i)=>n.includes(i.key)).flatMap((i)=>this.store.dependencies(i.id).map((s)=>s.resourceId));if(r.type==="service"||r.type==="function")return p([...t,r.id]);if(r.type==="environment")return p([...t,...this.store.controlPlane.listResources(e,r.id).map((i)=>i.id)]);if(r.type==="preview"){let i=this.store.controlPlane.database.query("SELECT resource_id FROM preview_instances WHERE id=?").get(r.id);return p([...t,...i?[i.resource_id]:[]])}return p([...t,...this.store.controlPlane.listResources(e).map((i)=>i.id)])}audit(e,r,n,t,i){this.store.controlPlane.appendEvent({projectId:e,actorId:r,type:n,payload:{entryId:t.id,key:t.key,kind:t.kind,scopeType:t.scope.type,scopeId:t.scope.id,backend:t.backend,version:t.version,affectedResourceIds:i}})}}async function X(e,r,n,t){let i={added:0,changed:0,removed:0,overridden:0},s=async(c,u)=>{let o=e.store.list({projectId:r.project.id,scope:c,kind:"variable"}),a=new Set(Object.keys(u));for(let d of o.filter((g)=>g.origin==="config"&&!a.has(g.key)))await e.remove({entryId:d.id,expectedVersion:d.version,confirmed:!0,actorId:t}),i.removed++;for(let[d,g]of Object.entries(u)){let l=e.store.find(r.project.id,c,d);if(l?.origin!=="config"){if(l)i.overridden++;else await e.set({organizationId:r.organization.id,projectId:r.project.id,scope:c,key:d,kind:"variable",value:String(g),origin:"config",confirmed:!0,actorId:t}),i.added++;continue}if(l.value===String(g))continue;await e.set({organizationId:r.organization.id,projectId:r.project.id,scope:c,key:d,kind:"variable",value:String(g),origin:"config",confirmed:!0,actorId:t,expectedVersion:l.version}),i.changed++}};for(let[c,u]of Object.entries(n.environments??{})){let o=r.environments.get(c);if(!o)continue;let a=u,d={...a.variables??{},...a.app?.env??{}};await s({type:"environment",id:o.id,environmentId:o.id},d);for(let[g,l]of Object.entries(n.sites??{})){let v=r.store.listResources(r.project.id,o.id).find((f)=>f.kind==="application"&&f.slug===g);if(v)await s({type:"service",id:v.id,environmentId:o.id,resourceId:v.id},{...l.env??{}})}for(let[g,l]of Object.entries(n.infrastructure?.functions??{})){let v=r.store.listResources(r.project.id,o.id).find((f)=>f.kind==="function"&&f.slug===g);if(v)await s({type:"function",id:v.id,environmentId:o.id,resourceId:v.id},{...l.environment??{}})}}return i}export{q as rg,R as sg,j as tg,w as ug,T as vg,V as wg,W as xg,L as yg,X as zg};
+`:"")}import{createCipheriv as T,createDecipheriv as k,createHash as D,randomBytes as W}from"node:crypto";class w{controlPlane;now;kind="local_encrypted";key;constructor(e,r,o=()=>new Date){this.controlPlane=e;this.now=o;if(!r)throw Error("Configuration encryption key is required.");this.key=D("sha256").update(`ts-cloud:configuration:${r}`).digest()}encrypt(e){let r=W(12),o=T("aes-256-gcm",this.key,r),t=Buffer.concat([o.update(e,"utf8"),o.final()]);return`v1.${r.toString("base64url")}.${o.getAuthTag().toString("base64url")}.${t.toString("base64url")}`}decrypt(e){let[r,o,t,n]=e.split(".");if(r!=="v1"||!o||!t||!n)throw Error("Encrypted configuration secret is unavailable.");try{let s=k("aes-256-gcm",this.key,Buffer.from(o,"base64url"));return s.setAuthTag(Buffer.from(t,"base64url")),Buffer.concat([s.update(Buffer.from(n,"base64url")),s.final()]).toString("utf8")}catch{throw Error("Encrypted configuration secret could not be decrypted.")}}async put(e){if(!e.value)throw Error("Configuration secrets cannot be empty.");let r=e.reference??`secret://configuration/${e.name}/${crypto.randomUUID()}`;if(!/^secret:\/\/configuration\/[A-Za-z0-9._/-]+$/.test(r))throw Error("Invalid local configuration secret reference.");let t=(this.controlPlane.database.query("SELECT version FROM configuration_secret_values WHERE reference=?").get(r)?.version??0)+1,n=this.now().toISOString();return this.controlPlane.database.run("INSERT INTO configuration_secret_values (reference,ciphertext,fingerprint,version,created_at,updated_at) VALUES (?,?,?,?,?,?) ON CONFLICT(reference) DO UPDATE SET ciphertext=excluded.ciphertext,fingerprint=excluded.fingerprint,version=excluded.version,updated_at=excluded.updated_at",[r,this.encrypt(e.value),D("sha256").update(e.value).digest("hex"),t,n,n]),{reference:r,version:String(t)}}async resolve(e){let r=this.controlPlane.database.query("SELECT ciphertext FROM configuration_secret_values WHERE reference=?").get(e);if(!r)throw Error("Configuration secret was not found.");return this.decrypt(r.ciphertext)}async remove(e){this.controlPlane.database.run("DELETE FROM configuration_secret_values WHERE reference=?",[e])}async validate(e){return!!this.controlPlane.database.query("SELECT 1 AS found FROM configuration_secret_values WHERE reference=?").get(e)}}class N{client;region;kind="aws_secrets_manager";constructor(e,r){this.client=e;this.region=r}async put(e){if(e.reference){let o=this.id(e.reference),t=await this.client.putSecretValue({SecretId:o,SecretString:e.value,ClientRequestToken:e.idempotencyKey});return{reference:e.reference,version:t.VersionId??e.idempotencyKey}}let r=await this.client.createSecret({Name:e.name,SecretString:e.value,ClientRequestToken:e.idempotencyKey,Tags:[{Key:"managed-by",Value:"ts-cloud"}]});return{reference:`aws-sm://${this.region}/${encodeURIComponent(r.ARN??r.Name??e.name)}`,version:r.VersionId??e.idempotencyKey}}async resolve(e){let r=await this.client.getSecretValue({SecretId:this.id(e)});if(r.SecretString==null)throw Error("AWS Secrets Manager value is unavailable.");return r.SecretString}async remove(e){await this.client.deleteSecret({SecretId:this.id(e),RecoveryWindowInDays:7})}async validate(e){try{return await this.client.describeSecret(this.id(e)),!0}catch{return!1}}id(e){let r=new URL(e);if(r.protocol!=="aws-sm:"||r.hostname!==this.region)throw Error("Invalid AWS Secrets Manager reference.");return decodeURIComponent(r.pathname.slice(1))}}class ${client;region;kind="aws_ssm";constructor(e,r){this.client=e;this.region=r}async put(e){let r=e.reference?this.name(e.reference):`/${e.name.replace(/^\/+/,"")}`,o=await this.client.putParameter({Name:r,Value:e.value,Type:"SecureString",Overwrite:!!e.reference,Description:"Managed by ts-cloud"});return{reference:`aws-ssm://${this.region}${r}`,version:String(o.Version??1)}}async resolve(e){let r=await this.client.getParameter({Name:this.name(e),WithDecryption:!0});if(r.Parameter?.Value==null)throw Error("AWS SSM parameter value is unavailable.");return r.Parameter.Value}async remove(e){await this.client.deleteParameter({Name:this.name(e)})}async validate(e){try{return!!(await this.client.getParameter({Name:this.name(e),WithDecryption:!1})).Parameter}catch{return!1}}name(e){let r=new URL(e);if(r.protocol!=="aws-ssm:"||r.hostname!==this.region||!r.pathname.startsWith("/"))throw Error("Invalid AWS SSM reference.");return r.pathname}}class M{kind="external";async put(){throw Error("External secret references cannot be written by ts-cloud.")}async resolve(){throw Error("External secrets must be resolved by the deployment provider.")}async remove(){}async validate(e){return/^(?:vault|doppler|op|external):\/\//.test(e)}}import{createHmac as L}from"node:crypto";var B=/^(?:secret|aws-sm|aws-ssm|vault|doppler|op|external):\/\//,U=/^(?:AWS_|TS_CLOUD_|PORT$|HOST$)/;function v(e){return[...new Set(e)].sort()}function A(e,r={}){let o=e.kind==="secret";return{id:e.id,key:e.key,kind:e.kind,scope:e.scope,inherited:!!r.inherited,overridden:!!r.overridden,required:e.required,backend:!o||r.canReadSecretMetadata?e.backend:void 0,backendVersion:!o||r.canReadSecretMetadata?e.backendVersion:void 0,reference:o&&r.canReadSecretMetadata?e.secretRef:void 0,value:!o?e.value:void 0,lastUsedAt:e.lastUsedAt,rotatedAt:e.rotatedAt,version:e.version,updatedAt:e.updatedAt}}class V{store;backends=new Map;fingerprintKey;now;constructor(e,r){if(this.store=e,this.fingerprintKey=r.fingerprintKey??r.encryptionKey,this.now=r.now??(()=>new Date),!this.fingerprintKey)throw Error("Configuration fingerprint key is required.");let o=r.backends??[new w(e.controlPlane,r.encryptionKey,this.now)];for(let t of o)this.backends.set(t.kind,t)}list(e){let r=e.search?.toLowerCase();return this.store.list(e).filter((o)=>!r||o.key.toLowerCase().includes(r)).map((o)=>A(o,{canReadSecretMetadata:e.canReadSecretMetadata}))}plan(e){let r=this.store.list({projectId:e.projectId,scope:e.scope}),o=new Map(r.map((i)=>[i.key,i])),t=[],n=[],s=[],c=[];for(let[i,a]of Object.entries(e.values)){t.push(...this.warnings(i,a));let d=o.get(i);if(!d)n.push(i);else if(d.valueFingerprint!==this.fingerprint(a))s.push(i);else c.push(i)}let l=e.removeMissing?r.filter((i)=>!Object.hasOwn(e.values,i.key)).map((i)=>i.key):[];return{added:v(n),changed:v(s),removed:v(l),unchanged:v(c),affectedResourceIds:this.affectedResources(e.projectId,e.scope,[...n,...s,...l]),warnings:t}}async set(e){let r=this.requestHash(e),o=e.idempotencyKey;if(o){let m=this.store.mutation(o);if(m){if(m.requestHash!==r)throw Error("Idempotency key was already used for a different configuration mutation.");let h=this.store.get(String(m.result.entryId??""));if(!h)throw Error("Idempotent configuration result is no longer available.");return{entry:h,mutation:m.result.mutation,warnings:[]}}}if(e.value!=null&&B.test(e.value))throw Error("Secret references must use the reference field, not a plaintext value field.");let t=this.store.find(e.projectId,e.scope,e.key),n=this.fingerprint(e.value??e.reference??"");if(t&&e.expectedVersion!=null&&t.version!==e.expectedVersion)throw Error("Configuration entry changed; refresh and retry.");if(t&&t.kind!==e.kind)throw Error("Delete the existing entry before changing between variable and secret kinds.");let s=e.kind==="variable"?"plaintext":e.backend??(e.reference?"external":"local_encrypted");if(!!t&&(t.valueFingerprint!==n||t.backend!==s||t.required!==!!e.required)&&(this.isProduction(t)||this.store.dependencies(t.id).length>0)&&!e.confirmed)throw Error("Confirmation is required because this replacement affects production or dependent services.");let l=e.reference,i;if(e.kind==="secret"){let m=this.backend(s);if(e.reference&&e.value==null){if(!await m.validate(e.reference))throw Error("Secret backend reference is unavailable or invalid.");i=t?.backendVersion??"external"}else{if(e.value==null)throw Error("A secret value or external reference is required.");let h=await m.put({reference:t?.backend===s?t.secretRef:void 0,name:this.backendName(e),value:e.value,idempotencyKey:o??crypto.randomUUID()});l=h.reference,i=h.version}}let a=e.kind==="variable"?e.value:void 0;if(e.kind==="variable"&&a==null)throw Error("A variable value is required.");let d=!t||t.valueFingerprint!==n||t.backend!==s||t.secretRef!==l||t.backendVersion!==i||t.required!==!!e.required,g=t?d?this.store.update(t.id,t.version,{value:a,valueFingerprint:n,secretRef:l,backend:s,backendVersion:i,required:!!e.required,metadata:I(e.metadata??t.metadata),rotatedAt:e.kind==="secret"?this.now().toISOString():t.rotatedAt}):t:this.store.create({organizationId:e.organizationId,projectId:e.projectId,scope:e.scope,key:e.key,kind:e.kind,value:a,valueFingerprint:n,secretRef:l,backend:s,backendVersion:i,origin:e.origin??"managed",required:!!e.required,metadata:I(e.metadata??{}),rotatedAt:e.kind==="secret"?this.now().toISOString():void 0}),f=this.affectedResources(e.projectId,e.scope,[e.key]),S={added:t?[]:[e.key],changed:t&&d?[e.key]:[],removed:[],unchanged:t&&!d?[e.key]:[],affectedResourceIds:f,versions:{[e.key]:g.version}};if(o)this.store.recordMutation({projectId:e.projectId,idempotencyKey:o,requestHash:r,actorId:e.actorId,result:{entryId:g.id,mutation:S}});return this.audit(e.projectId,e.actorId,t&&d?"configuration.updated":t?"configuration.unchanged":"configuration.created",g,f),{entry:g,mutation:S,warnings:this.warnings(e.key,e.value??"")}}async importDotenv(e){let r=x(e.source);if(!r.valid)return{document:r,warnings:[]};let o=new Set(e.secretKeys??[]),t={added:[],changed:[],removed:[],unchanged:[],affectedResourceIds:[],versions:{}},n=[];for(let[s,c]of Object.entries(r.values)){let l=await this.set({...e,source:void 0,key:s,value:c,kind:o.has(s)?"secret":"variable",idempotencyKey:e.idempotencyKey?`${e.idempotencyKey}:${s}`:void 0});t.added.push(...l.mutation.added),t.changed.push(...l.mutation.changed),t.unchanged.push(...l.mutation.unchanged),t.affectedResourceIds.push(...l.mutation.affectedResourceIds),Object.assign(t.versions,l.mutation.versions),n.push(...l.warnings)}return t.added=v(t.added),t.changed=v(t.changed),t.unchanged=v(t.unchanged),t.affectedResourceIds=v(t.affectedResourceIds),{document:r,mutation:t,warnings:n}}exportVariables(e){return j(Object.fromEntries(this.store.list({projectId:e.projectId,scope:e.scope,kind:"variable"}).map((r)=>[r.key,r.value??""])))}async transfer(e){let r=this.store.get(e.entryId);if(!r)throw Error("Configuration entry was not found.");if(r.scope.type===e.targetScope.type&&r.scope.id===e.targetScope.id)throw Error("Choose a different destination scope.");let o=r.kind==="variable"?r.value:r.backend==="external"?void 0:await this.backend(r.backend).resolve(r.secretRef),t=r.kind==="secret"?r.backend:void 0,n=await this.set({organizationId:r.organizationId,projectId:r.projectId,scope:e.targetScope,key:r.key,kind:r.kind,value:o,reference:r.backend==="external"?r.secretRef:void 0,backend:t,required:r.required,metadata:r.metadata,confirmed:e.confirmed,actorId:e.actorId,idempotencyKey:e.idempotencyKey?`${e.idempotencyKey}:copy`:void 0,origin:r.origin});if(e.mode==="move")await this.remove({entryId:r.id,expectedVersion:r.version,confirmed:e.confirmed,actorId:e.actorId});let s={added:n.mutation.added,changed:n.mutation.changed,removed:e.mode==="move"?[r.key]:[],unchanged:n.mutation.unchanged,affectedResourceIds:v([...n.mutation.affectedResourceIds,...this.affectedResources(r.projectId,r.scope,[r.key])]),versions:n.mutation.versions};return{entry:n.entry,mutation:s}}async resolve(e){let r=this.store.list({projectId:e.projectId}),o=r.filter((a)=>this.applies(a,e)).sort((a,d)=>this.rank(a.scope.type)-this.rank(d.scope.type)),t=new Map,n=new Set;for(let a of o){if(t.has(a.key))n.add(a.key);t.set(a.key,a)}let s={},c={},l=[],i=new Set(e.allowedPreviewSecrets??[]);for(let[a,d]of t){if(e.previewId&&d.kind==="secret"&&d.scope.type!=="preview"&&(!e.trustedPreview||!i.has(a)))continue;if(d.kind==="variable")s[a]=d.value??"";else if(e.nativeReferences)s[a]=d.secretRef;else{let g=this.backend(d.backend);if(!await g.validate(d.secretRef)){if(l.push({key:a,code:"stale_reference",message:`${a} points to an unavailable secret.`}),d.required)l.push({key:a,code:"missing_required",message:`${a} is required but unavailable.`});continue}s[a]=await g.resolve(d.secretRef)}c[a]=A(d,{inherited:d.scope.type!==(e.previewId?"preview":e.functionId?"function":e.resourceId?"service":e.environmentId?"environment":"project"),overridden:n.has(a),canReadSecretMetadata:e.canReadSecretMetadata}),this.store.controlPlane.database.run("UPDATE configuration_entries SET last_used_at=? WHERE id=?",[this.now().toISOString(),d.id])}return{values:s,entries:c,warnings:l,configurationHash:this.fingerprint([...t.values()].map((a)=>`${a.key}:${a.valueFingerprint}:${a.version}`).sort().join(`
+`))}}async reveal(e){let r=this.store.get(e.entryId);if(!r||r.kind!=="secret")throw Error("Configuration secret was not found.");if(!e.canRevealSecrets)throw Error("Secret reveal permission is required.");if(!e.recentlyAuthenticated)throw Error("Recent authentication is required to reveal a secret.");let o=await this.backend(r.backend).resolve(r.secretRef);return this.audit(r.projectId,e.actorId,"configuration.secret.revealed",r,[]),o}async remove(e){let r=this.store.get(e.entryId);if(!r)throw Error("Configuration entry was not found.");let o=this.store.dependencies(r.id);if(((r.scope.environmentId?this.store.controlPlane.listEnvironments(r.projectId).some((c)=>c.id===r.scope.environmentId&&c.kind==="production"):r.scope.type==="project")||o.length)&&!e.confirmed)throw Error("Confirmation is required because this configuration affects production or dependent services.");if(r.kind==="secret"&&r.backend!=="external")await this.backend(r.backend).remove(r.secretRef);this.store.remove(r.id,e.expectedVersion);let n=v(o.map((c)=>c.resourceId)),s={added:[],changed:[],removed:[r.key],unchanged:[],affectedResourceIds:n,versions:{}};return this.audit(r.projectId,e.actorId,"configuration.deleted",r,n),s}applies(e,r){if(e.scope.type==="project")return!0;if(e.scope.type==="environment")return e.scope.id===r.environmentId;if(e.scope.type==="service")return e.scope.id===r.resourceId;if(e.scope.type==="function")return e.scope.id===r.functionId;return e.scope.id===r.previewId}rank(e){return{project:0,environment:1,service:2,function:3,preview:4}[e]}fingerprint(e){return`hmac-sha256:${L("sha256",this.fingerprintKey).update(e).digest("hex")}`}requestHash(e){return this.fingerprint(JSON.stringify({...e,idempotencyKey:void 0,actorId:void 0}))}backend(e){let r=this.backends.get(e);if(!r)throw Error(`Configuration secret backend is not configured: ${e}`);return r}backendName(e){return`ts-cloud/${e.projectId}/${e.scope.type}/${e.scope.id}/${e.key}`.replace(/[^A-Za-z0-9/_+=.@-]/g,"-")}isProduction(e){return e.scope.type==="project"||!!e.scope.environmentId&&this.store.controlPlane.listEnvironments(e.projectId).some((r)=>r.id===e.scope.environmentId&&r.kind==="production")}warnings(e,r){let o=[];if(U.test(e))o.push({key:e,code:"reserved",message:`${e} may be reserved by the runtime or provider.`});if(Buffer.byteLength(r)>65536)o.push({key:e,code:"limit",message:`${e} exceeds the portable 64 KiB value limit.`});return o}affectedResources(e,r,o){let t=this.store.list({projectId:e,scope:r}).filter((n)=>o.includes(n.key)).flatMap((n)=>this.store.dependencies(n.id).map((s)=>s.resourceId));if(r.type==="service"||r.type==="function")return v([...t,r.id]);if(r.type==="environment")return v([...t,...this.store.controlPlane.listResources(e,r.id).map((n)=>n.id)]);if(r.type==="preview"){let n=this.store.controlPlane.database.query("SELECT resource_id FROM preview_instances WHERE id=?").get(r.id);return v([...t,...n?[n.resource_id]:[]])}return v([...t,...this.store.controlPlane.listResources(e).map((n)=>n.id)])}audit(e,r,o,t,n){this.store.controlPlane.appendEvent({projectId:e,actorId:r,type:o,payload:{entryId:t.id,key:t.key,kind:t.kind,scopeType:t.scope.type,scopeId:t.scope.id,backend:t.backend,version:t.version,affectedResourceIds:n}})}}async function X(e,r,o,t){let n={added:0,changed:0,removed:0,overridden:0},s=async(c,l)=>{let i=e.store.list({projectId:r.project.id,scope:c,kind:"variable"}),a=new Set(Object.keys(l));for(let d of i.filter((g)=>g.origin==="config"&&!a.has(g.key)))await e.remove({entryId:d.id,expectedVersion:d.version,confirmed:!0,actorId:t}),n.removed++;for(let[d,g]of Object.entries(l)){let f=e.store.find(r.project.id,c,d);if(f?.origin!=="config"){if(f)n.overridden++;else await e.set({organizationId:r.organization.id,projectId:r.project.id,scope:c,key:d,kind:"variable",value:String(g),origin:"config",confirmed:!0,actorId:t}),n.added++;continue}if(f.value===String(g))continue;await e.set({organizationId:r.organization.id,projectId:r.project.id,scope:c,key:d,kind:"variable",value:String(g),origin:"config",confirmed:!0,actorId:t,expectedVersion:f.version}),n.changed++}};for(let[c,l]of Object.entries(o.environments??{})){let i=r.environments.get(c);if(!i)continue;let a=l,d={...a.variables??{},...a.app?.env??{}};await s({type:"environment",id:i.id,environmentId:i.id},d);for(let[g,f]of Object.entries(o.sites??{})){let S=r.store.listResources(r.project.id,i.id).find((m)=>m.kind==="application"&&m.slug===g);if(S)await s({type:"service",id:S.id,environmentId:i.id,resourceId:S.id},{...f.env??{}})}for(let[g,f]of Object.entries(o.infrastructure?.functions??{})){let S=r.store.listResources(r.project.id,i.id).find((m)=>m.kind==="function"&&m.slug===g);if(S)await s({type:"function",id:S.id,environmentId:i.id,resourceId:S.id},{...f.environment??{}})}}return n}export{q as rg,x as sg,j as tg,w as ug,N as vg,$ as wg,M as xg,V as yg,X as zg};

package/dist/bin/chunk-a1dd6sby.js

@@ -0,0 +1 @@
+import{Oe as a,Pe as b,Qe as c,Re as d,Se as e,Te as f,Ue as g,Ve as h,We as i,Xe as j}from"./chunk-tj0xb2d8.js";import"./chunk-ett305ym.js";import"./chunk-3276rveh.js";import"./chunk-smbycpt5.js";import"./chunk-k5vprsef.js";import"./chunk-awa1qade.js";import"./chunk-4n0j3n3b.js";import"./chunk-f11xf3n6.js";import"./chunk-54bqchag.js";import"./chunk-xyt490vp.js";import"./chunk-5bhx3bsa.js";import"./chunk-c8sypnbe.js";export{a as sharedBoxProbeScript,e as serverLogSources,j as resolveServerDashboardData,i as resolveConfigOnlyServerDashboardData,g as parseServerSecurity,f as parseServerLogs,h as parseDeployHistory,c as parseBlock,b as metricsScript,d as mergeDiscoveredSites};

package/dist/bin/chunk-a4dw35gs.js

@@ -0,0 +1 @@
+import{fd as a}from"./chunk-mrm4m4dk.js";import"./chunk-xyt490vp.js";import"./chunk-c8sypnbe.js";export{a as STSClient};

package/dist/bin/chunk-a9d55ker.js

@@ -0,0 +1 @@
+import{Hd as a}from"./chunk-b6by94pk.js";import"./chunk-xyt490vp.js";import"./chunk-c8sypnbe.js";export{a as SQSClient};

package/dist/bin/chunk-awa1qade.js

@@ -0,0 +1,9 @@
+import{Eh as Zj,Fh as $j}from"./chunk-5bhx3bsa.js";function XZ(j,Z){return`/var/www/${j}-${Z}`}var Lj=new Set(["laravel","php","statamic","wordpress"]);function zj(j){return j.type!=null&&Lj.has(j.type)}function Nj(j){let Z=j.proxyTo;if(Z==null)return[];return(Array.isArray(Z)?Z:[Z]).map((z)=>String(z).trim()).filter((z)=>z.length>0)}function Uj(j){return Nj(j).length>0}function Wj(j){if(j.deploy)return j.deploy;if(zj(j))return"server";if(j.start)return"server";return"bucket"}function _(j){if(j.redirect)return"redirect";if(Uj(j))return"proxy";if(zj(j))return"server-php";if(Wj(j)==="bucket")return"bucket";return j.start?"server-app":"server-static"}function kj(j){return j.infrastructure?.compute!=null||Boolean(j.cloud?.attachTo?.trim())}function JZ(j,Z={}){let $=[],z=[],J=j.sites||{},W=kj(j),q=$j(j);if(q)$.push(q);let w=new Map;for(let[x,X]of Object.entries(J)){if(!X)continue;let F=Wj(X),L=_(X);if(L==="redirect"){if(!X.domain)$.push(`Site '${x}' is a redirect site but has no \`domain\` to redirect from.`);if(!(typeof X.redirect==="string"?X.redirect:X.redirect?.to))$.push(`Site '${x}' is a redirect site but has no redirect target (\`redirect\` / \`redirect.to\`).`);if(!W)$.push(`Site '${x}' is a redirect site but no \`infrastructure.compute\` is configured to host the gateway that serves the redirect.`);let Q=[];if(X.start)Q.push("start");if(X.root)Q.push("root");if(X.proxyTo)Q.push("proxyTo");if(Q.length>0)z.push(`Site '${x}' is a redirect site but also sets ${Q.join(", ")}. These are ignored.`);continue}if(L==="proxy"){if(!X.domain)$.push(`Site '${x}' is a proxy site but has no \`domain\` to route from.`);if(!W)$.push(`Site '${x}' is a proxy site but no \`infrastructure.compute\` is configured to host the gateway that forwards it.`);let H=[];if(X.start)H.push("start");if(X.root)H.push("root");if(typeof X.port==="number")H.push("port");if(X.build)H.push("build");if(X.preStart&&X.preStart.length>0)H.push("preStart");if(H.length>0)z.push(`Site '${x}' sets \`proxyTo\`, so ts-cloud ships and supervises nothing for it. ${H.join(", ")} ${H.length===1?"is":"are"} ignored — remove ${H.length===1?"it":"them"}, or drop \`proxyTo\` to let ts-cloud own the service.`);continue}if(F==="server"&&!X.start&&!X.root){$.push(`Site '${x}' sets deploy:'server' but declares neither \`start\` (dynamic app) nor \`root\` (static site to serve). Add one.`);continue}if(L==="server-php"){if(!W)$.push(`Site '${x}' is a PHP site (type:'${X.type}') but no \`infrastructure.compute\` is configured. Add a server (infrastructure.compute) with PHP provisioning.`);if(!X.repository?.url)$.push(`Site '${x}' is a PHP site (type:'${X.type}') but has no \`repository.url\` to clone. PHP sites deploy via git.`)}else if(L==="server-app"){if(!W)$.push(`Site '${x}' deploys to a server (deploy:'server'${X.deploy?"":" inferred from `start`"}) but no \`infrastructure.compute\` is configured. Set deploy:'bucket' or add a server (infrastructure.compute).`);if(typeof X.port==="number"){let H=Z.occupiedPorts?.get(X.port);if(H)$.push(`Site '${x}' wants port ${X.port}, which project '${H}' already serves on this box. Attached projects share one port namespace. Give '${x}' a free port, or let the attach allocate one.`);let Q=w.get(X.port);if(Q)$.push(`Sites '${Q}' and '${x}' both use port ${X.port}. Server apps sharing a box must use distinct ports.`);else w.set(X.port,x)}}else if(L==="server-static"){if(!X.root)$.push(`Site '${x}' is a server static site (deploy:'server', no \`start\`) but has no \`root\` directory to serve.`);if(!W)$.push(`Site '${x}' deploys to a server (deploy:'server') but no \`infrastructure.compute\` is configured. Set deploy:'bucket' or add a server (infrastructure.compute).`)}else{if(!X.root)$.push(`Site '${x}' deploys to a bucket but has no \`root\` directory to upload.`);let H=[];if(X.start)H.push("start");if(typeof X.port==="number")H.push("port");if(X.preStart&&X.preStart.length>0)H.push("preStart");if(H.length>0)z.push(`Site '${x}' deploys to a bucket but sets server-only field(s): ${H.join(", ")}. These are ignored. Set deploy:'server' to use them.`)}}return{errors:$,warnings:z}}function QZ(j){let Z=_(j);return Z!=="bucket"&&Z!=="redirect"&&Z!=="proxy"}function qZ(j){return _(j)==="bucket"}function xZ(j,Z){if(Zj(j)==="serverless")return!0;let $=Object.entries(j.sites??{}).filter(([,J])=>J!=null),z=Z?$.filter(([J])=>J===Z):$;if(z.length===0)return!0;return!z.every(([,J])=>{let W=_(J);return W==="redirect"||W==="proxy"})}var P={php:"php.net",nginx:"nginx.org",composer:"getcomposer.org",mysql:"mysql.com",mariadb:"mariadb.com/server",postgres:"postgresql.org",vitess:"vitess.io",etcd:"etcd.io",redis:"redis.io",memcached:"memcached.org",meilisearch:"meilisearch.com",mail:"github.com/mail-os/mail",git:"git-scm.com",certbot:"certbot.eff.org",bun:"bun.sh",node:"nodejs.org",deno:"deno.land"};var f="/opt/pantry";function b(j){return`'${j.split("'").join("'\\''")}'`}function KZ(j={}){return["export DEBIAN_FRONTEND=noninteractive","export PANTRY_SERVICE_SCOPE=system","export PANTRY_INSTALL_DIR=/usr/local/bin",j.version?`export PANTRY_VERSION=${b(j.version)}`:'export PANTRY_VERSION="${PANTRY_VERSION:-latest}"',"command -v curl >/dev/null 2>&1 || (apt-get update -y && apt-get install -y curl ca-certificates)","command -v unzip >/dev/null 2>&1 || (apt-get update -y && apt-get install -y unzip)",'OS=$(uname -s | tr \'[:upper:]\' \'[:lower:]\'); ARCH=$(uname -m); case "$ARCH" in x86_64|amd64) ARCH=x64 ;; arm64|aarch64) ARCH=arm64 ;; esac; ZIP="pantry-${OS}-${ARCH}.zip"; if [ "${PANTRY_VERSION:-latest}" = latest ]; then REL=\'latest/download\'; else REL="download/v${PANTRY_VERSION}"; fi; TMP=$(mktemp -d); curl -fsSL -o "${TMP}/${ZIP}" "https://github.com/pantry-pm/pantry/releases/${REL}/${ZIP}"; unzip -o "${TMP}/${ZIP}" -d /usr/local/bin; chmod +x /usr/local/bin/pantry; rm -rf "${TMP}"','export PATH="/usr/local/bin:$PATH"',"mkdir -p /opt/pantry"]}function c(){return'eval "$(cd /opt/pantry && pantry env 2>/dev/null)" || true'}function A(j){if(j.length===0)return[];return[`(cd /opt/pantry && pantry install ${[...new Set(j)].map(b).join(" ")})`]}function Xj(j){return[...new Set(j)].flatMap((Z)=>[`(cd /opt/pantry && pantry start ${b(Z)})`,`(cd /opt/pantry && pantry enable ${b(Z)})`])}var M="/etc/mail",V="mail-server",d="mail",p=`${f}/pantry/.bin`;function D(j){return`'${String(j).split("'").join("'\\''")}'`}function N(j){return`"${j.replace(/\\/g,"\\\\").replace(/"/g,"\\\"")}"`}function fj(j){return[j.version?`${P.mail}@${j.version}`:P.mail]}function r(j,Z){return`${M}/dkim/${Z}.${j.dkim.selector}.pem`}function Aj(j){let Z=["# Generated by ts-cloud. Edits are overwritten on the next deploy —","# change `services.mail` in the cloud config instead.","","[server]",`host = ${N(j.bindAddress)}`,`port = ${j.ports.smtp}`,`hostname = ${N(j.hostname)}`];if(j.domains.length>0)Z.push(`local_domains = ${N(j.domains.join(", "))}`);if(j.mode==="catcher")Z.push("catch_all = true");if(Z.push(`max_message_size = ${j.maxMessageSize}`,"","[tls]",`enabled = ${j.tls.enabled}`),j.tls.certPath)Z.push(`cert_path = ${N(j.tls.certPath)}`);if(j.tls.keyPath)Z.push(`key_path = ${N(j.tls.keyPath)}`);if(Z.push("","[auth]",`enabled = ${j.mode==="server"}`,"","[antispam]",`dnsbl = ${j.spam.dnsbl}`,`greylist = ${j.spam.greylist}`,`spam_filter = ${j.spam.enabled}`,`junk_score = ${j.spam.junkScore}`,`reject_score = ${j.spam.rejectScore}`,"","[dkim]",`rotation_enabled = ${j.dkim.enabled&&j.dkim.rotate}`,`rotation_interval_days = ${j.dkim.rotateIntervalDays}`,"","[acme]",`enabled = ${j.tls.acme}`),j.tls.acmeEmail)Z.push(`email = ${N(j.tls.acmeEmail)}`);if(Z.push("","[webhook]",`enabled = ${!!j.webhookUrl}`),j.webhookUrl)Z.push(`url = ${N(j.webhookUrl)}`);return Z.push(""),Z.join(`
+`)}function vj(j){let Z=["# Generated by ts-cloud. See /etc/mail/config.toml for the rest.",`SMTP_DB_PATH=${j.storagePath}/mail.db`,`SMTP_DELIVERY_METHOD=${j.delivery==="ses"?"ses":"direct"}`];if(j.delivery==="ses")Z.push(`SMTP_SES_REGION=${j.sesRegion}`);if(j.ports.submission)Z.push(`SUBMISSION_PORT=${j.ports.submission}`);if(j.ports.submissions)Z.push(`SMTPS_PORT=${j.ports.submissions}`);if(j.ports.imap)Z.push("IMAP_ENABLED=1",`IMAP_PORT=${j.ports.imap}`);if(j.webmail.enabled)Z.push("SMTP_ENABLE_WEBMAIL=true",`SMTP_WEBMAIL_PORT=${j.webmail.port}`,`SMTP_WEBMAIL_SECURE_COOKIES=${j.tls.enabled}`);if(j.tls.requireForAuth)Z.push("SMTP_REQUIRE_TLS_FOR_AUTH=true");if(j.dkim.enabled&&j.domains.length>0){let[$,...z]=j.domains;if(Z.push(`DKIM_DOMAIN=${$}`,`DKIM_SELECTOR=${j.dkim.selector}`,`DKIM_PRIVATE_KEY_PATH=${r(j,$)}`),z.length>0){let J=z.map((W)=>`${W}:${j.dkim.selector}:${r(j,W)}`);Z.push(`DKIM_EXTRA_KEYS=${J.join(",")}`)}}return Z.push(""),Z.join(`
+`)}function Rj(j){let Z=[j.ports.smtp,j.ports.submission,j.ports.submissions,j.ports.imap,j.ports.imaps].some(($)=>typeof $==="number"&&$<1024);return["[Unit]","Description=Mail server (SMTP/IMAP + webmail)","After=network-online.target","Wants=network-online.target","","[Service]","Type=simple",`User=${V}`,`Group=${V}`,`WorkingDirectory=${j.storagePath}`,`EnvironmentFile=${M}/mail.env`,`Environment="PATH=${p}:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"`,`ExecStart=${p}/mail serve --config ${M}/config.toml`,"Restart=always","RestartSec=5","LimitNOFILE=65536",...Z?["AmbientCapabilities=CAP_NET_BIND_SERVICE","CapabilityBoundingSet=CAP_NET_BIND_SERVICE"]:[],"NoNewPrivileges=true","PrivateTmp=true","ProtectSystem=strict","ProtectHome=true","ProtectKernelTunables=true","ProtectKernelModules=true","ProtectControlGroups=true",`ReadWritePaths=${j.storagePath} ${M}`,"","[Install]","WantedBy=multi-user.target",""].join(`
+`)}function Ej(j){if(!j.dkim.enabled||j.domains.length===0)return[];let Z=[`mkdir -p ${M}/dkim`];for(let $ of j.domains){let z=r(j,$);Z.push(`if [ ! -f ${D(z)} ]; then openssl genrsa -out ${D(z)} 2048; fi`,`chmod 0600 ${D(z)}`,`echo "DKIM ${j.dkim.selector}._domainkey.${$} IN TXT v=DKIM1; k=rsa; p=$(openssl rsa -in ${D(z)} -pubout -outform PEM 2>/dev/null | grep -v '^-----' | tr -d '\\n')"`)}return Z.push(`chown -R ${V}:${V} ${M}/dkim`),Z}function Pj(j){if(j.accounts.length===0)return[];let Z=($)=>`runuser -u ${V} -- env SMTP_DB_PATH=${D(`${j.storagePath}/mail.db`)} ${p}/mail user:local ${$} || true`;return j.accounts.flatMap(($)=>[Z(`create ${D($.address)} ${D($.password)} ${D($.address)}`),Z(`change-password ${D($.address)} ${D($.password)}`)])}function Jj(j){if(!j.enabled)return[];return[...A(fj(j)),`id -u ${V} >/dev/null 2>&1 || useradd --system --no-create-home --shell /usr/sbin/nologin ${V}`,`mkdir -p ${j.storagePath} ${M}`,`chown -R ${V}:${V} ${j.storagePath}`,`cat > ${M}/config.toml <<'TS_CLOUD_MAIL_CONF_EOF'`,Aj(j),"TS_CLOUD_MAIL_CONF_EOF",`cat > ${M}/mail.env <<'TS_CLOUD_MAIL_ENV_EOF'`,vj(j),"TS_CLOUD_MAIL_ENV_EOF",`chmod 0640 ${M}/mail.env`,`chown root:${V} ${M}/mail.env`,...Ej(j),`cat > /etc/systemd/system/${d}.service <<'TS_CLOUD_MAIL_UNIT_EOF'`,Rj(j),"TS_CLOUD_MAIL_UNIT_EOF","systemctl daemon-reload",`systemctl enable ${d}`,`systemctl restart ${d}`,...Pj(j)]}var B=`${f}/pantry/.bin`,n=15306,l=15991,u=15999,Qj=16101,g=2379,C="/var/lib/vitess",t=100;function yj(j){return j===!0||typeof j==="object"&&j!==null}function Ij(j){return typeof j==="object"&&j!==null?j:{}}function Y(j){return`'${String(j).split("'").join("'\\''")}'`}function Sj(j){let $=[j.version?`vitess.io@${j.version}`:"vitess.io"];if(j.mode!=="combo"&&!j.etcdEndpoint)$.push("etcd.io");return $.push("mysql.com@8.0.43"),$}var G="vitess",Tj=`${B}:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin`,Kj="/usr/local/lib/vitess",i=new Map;function o(j){return`${Kj}/${j}.sh`}function v(j,Z){return i.set(j,_j(Z)),`/bin/sh ${o(j)}`}function qj(){let j=[`mkdir -p ${Kj}`];for(let[Z,$]of i)j.push(`cat > ${o(Z)} <<'TS_CLOUD_VITESS_LAUNCHER_EOF'`,$,"TS_CLOUD_VITESS_LAUNCHER_EOF",`chmod 0755 ${o(Z)}`);return j}function _j(j){return["#!/bin/sh","set -e",`cd ${f}`,`PANTRY_ENV="$(pantry env 2>/dev/null | grep -E '^(export [A-Za-z_]|[A-Za-z_][A-Za-z0-9_]*=)' || true)"`,'if [ -n "$PANTRY_ENV" ]; then eval "$PANTRY_ENV"; fi',`VT_MYSQL_ROOT="$(dirname "$(dirname "$(readlink -f ${B}/mysqld 2>/dev/null)")")"`,`VTROOT="$(dirname "$(dirname "$(readlink -f ${B}/mysqlctld 2>/dev/null)")")"`,"export VT_MYSQL_ROOT VTROOT",'LD_LIBRARY_PATH="$VT_MYSQL_ROOT/lib:$VTROOT/lib${LD_LIBRARY_PATH:+:$LD_LIBRARY_PATH}"',"export LD_LIBRARY_PATH",`exec ${j.join(" ")}`].join(`
+`)}function R(j){let Z=["[Unit]",`Description=${j.description}`,`After=network.target${j.after?.length?` ${j.after.join(" ")}`:""}`];if(j.requires?.length)Z.push(`Requires=${j.requires.join(" ")}`);return Z.push("","[Service]","Type=simple",`User=${G}`,`Group=${G}`,`Environment="PATH=${Tj}"`,`Environment="VTDATAROOT=${C}"`,...Object.entries(j.environment??{}).map(([$,z])=>`Environment="${$}=${z}"`),...(j.execStartPre??[]).map(($)=>`ExecStartPre=${$}`),`ExecStart=${j.execStart}`,"Restart=always","RestartSec=5","LimitNOFILE=65535","","[Install]","WantedBy=multi-user.target"),Z.join(`
+`)}function xj(j,Z){return[`cat > /etc/systemd/system/${j}.service <<'TS_CLOUD_VITESS_UNIT_EOF'`,Z,"TS_CLOUD_VITESS_UNIT_EOF"]}function bj(j){let Z=j.cell??"zone1",$=j.vtgatePort??n,J=`${((j.keyspaces?.length)?j.keyspaces:[{name:"app"}]).map((W)=>{let q=(W.sharded?["-80","80-"]:["0"]).map((w)=>`shards:{name:"${w}"}`).join(" ");return`keyspaces:{name:"${W.name}" ${q}}`}).join(" ")} cells:"${Z}"`;return R({description:"Vitess (vtcombo, single-process development stack)",execStart:v("vtcombo",[`${B}/vtcombo`,`--cell ${Z}`,`--proto-topo ${Y(J)}`,`--mysql-server-port ${$}`,"--mysql-server-bind-address 127.0.0.1","--mysql-auth-server-impl none","--start-mysql",`--port ${l}`,`--grpc-port ${u}`])})}function uj(){return R({description:"etcd (Vitess topology store)",execStart:v("etcd",[`${B}/etcd`,`--data-dir ${C}/etcd`,`--listen-client-urls http://127.0.0.1:${g}`,`--advertise-client-urls http://127.0.0.1:${g}`]),execStartPre:[`+/bin/mkdir -p ${C}/etcd`,`+/bin/chown ${G}:${G} ${C}/etcd`]})}function s(j){return["--topo-implementation etcd2",`--topo-global-server-address ${j.etcdEndpoint??`http://127.0.0.1:${g}`}`,"--topo-global-root /vitess/global"]}function gj(j){let Z=!j.etcdEndpoint;return R({description:"Vitess vtctld (control plane)",after:Z?["vitess-etcd.service"]:[],requires:Z?["vitess-etcd.service"]:[],execStart:v("vtctld",[`${B}/vtctld`,...s(j),`--cell ${j.cell??"zone1"}`,"--service-map grpc-vtctl,grpc-vtctld",`--grpc-port ${u}`,`--port ${u+1}`])})}function hj(j,Z,$){let z=j.cell??"zone1";return R({description:`Vitess vttablet (${Z}/${$})`,after:["vitess-vtctld.service","vitess-mysqlctld.service"],requires:["vitess-mysqlctld.service"],execStart:v("vttablet",[`${B}/vttablet`,...s(j),`--tablet-path ${z}-${String(t).padStart(10,"0")}`,`--init-keyspace ${Z}`,`--init-shard ${$}`,"--init-tablet-type replica",`--service-map ${Y("grpc-queryservice,grpc-tabletmanager,grpc-updatestream")}`,`--port ${Qj}`,`--grpc-port ${Qj+1}`,`--db-port ${j.mysqlPort??3306}`,`--mycnf-mysql-port ${j.mysqlPort??3306}`])})}function mj(j){return R({description:"Vitess mysqlctld (managed mysqld)",execStart:v("mysqlctld",[`${B}/mysqlctld`,`--tablet-uid ${t}`,`--mysql-port ${j.mysqlPort??3306}`,'--init-db-sql-file "$VTROOT/config/init_db.sql"',"--wait-time 2m"]),execStartPre:[`+/bin/mkdir -p ${C}`,`+/bin/chown ${G}:${G} ${C}`]})}var wj="/etc/vitess/auth.json",y="/var/lib/vitess/vtgate-auth.sha256";function cj(j){let Z=j.username??"vitess",$=j.password??"";return["mkdir -p /etc/vitess",'VTESS_AUTH_TMP="$(mktemp)"',`cat > "$VTESS_AUTH_TMP" <<'TS_CLOUD_VITESS_AUTH_EOF'`,JSON.stringify({[Z]:[{Password:$,UserData:Z}]}),"TS_CLOUD_VITESS_AUTH_EOF",`VTESS_VTGATE_AUTH_SHA="$(sha256sum "$VTESS_AUTH_TMP" | awk '{print $1}')"`,"VTESS_VTGATE_AUTH_CHANGED=1",`if [ -f ${y} ] && [ "$(cat ${y})" = "$VTESS_VTGATE_AUTH_SHA" ]; then VTESS_VTGATE_AUTH_CHANGED=0; fi`,`install -o ${G} -g ${G} -m 0600 "$VTESS_AUTH_TMP" ${wj}`,'rm -f "$VTESS_AUTH_TMP"']}function dj(j){let Z=j.cell??"zone1";return R({description:"Vitess vtgate (query router)",after:["vitess-vtctld.service"],execStart:v("vtgate",[`${B}/vtgate`,...s(j),`--cell ${Z}`,`--cells-to-watch ${Z}`,"--tablet-types-to-wait PRIMARY,REPLICA",`--service-map ${Y("grpc-vtgateservice")}`,`--mysql-server-port ${j.vtgatePort??n}`,`--mysql-server-bind-address ${j.bindAddress??"127.0.0.1"}`,"--mysql-auth-server-impl static",`--mysql-auth-server-static-file ${wj}`,`--port ${l}`,`--grpc-port ${l+1}`])})}function pj(j){let Z=j.cell??"zone1",$=j.etcdEndpoint??`http://127.0.0.1:${g}`,z=`${B}/vtctldclient --server 127.0.0.1:${u}`,J=[`for i in $(seq 1 30); do ${z} GetCellInfoNames >/dev/null 2>&1 && break; sleep 2; done`,`if ! ${z} GetCellInfoNames 2>/dev/null | grep -qx ${Y(Z)}; then`,`  ${z} AddCellInfo --root ${Y(`/vitess/${Z}`)} --server-address ${Y($)} ${Y(Z)}`,"fi"];for(let W of j.keyspaces??[]){let q=W.sharded?" --sharded":"";J.push(`if ! ${z} GetKeyspace ${Y(W.name)} >/dev/null 2>&1; then`,`  ${z} CreateKeyspace${q} ${Y(W.name)}`,"fi");let w=`${Z}-${String(t).padStart(10,"0")}`;for(let x of W.sharded?["-80","80-"]:["0"]){let X=`${W.name}/${x}`;J.push("for i in $(seq 1 90); do",`  if ${z} GetShard ${Y(X)} 2>/dev/null | grep -q '"is_primary_serving": *true'; then break; fi`,`  ${z} PlannedReparentShard ${Y(X)} --new-primary ${Y(w)} >/dev/null 2>&1 && break`,`  ${z} InitShardPrimary --force ${Y(X)} ${Y(w)} >/dev/null 2>&1 && break`,"  sleep 2","done",`if ! ${z} GetShard ${Y(X)} 2>/dev/null | grep -q '"is_primary_serving": *true'; then`,`  echo "no primary could be elected for ${X}" >&2; exit 1`,"fi")}J.push(`${z} RebuildKeyspaceGraph ${Y(W.name)} >/dev/null`)}return J}function Hj(j){let Z=j.vtgatePort??n;return["for i in $(seq 1 60); do",`  if (cd ${f} && eval "$(pantry env 2>/dev/null)"; MYSQL_PWD=${Y(j.password??"")} ${B}/mysql -h 127.0.0.1 -P ${Z} -u ${Y(j.username??"vitess")} --connect-timeout=2 -e 'SHOW KEYSPACES') >/dev/null 2>&1; then`,`    echo "vtgate is serving on ${Z}"; exit 0`,"  fi","  sleep 2","done",`echo "vtgate did not become ready on port ${Z}" >&2`,"exit 1"]}function Yj(j){if(!yj(j))return[];let Z=Ij(j),$=Z.mode==="combo";i.clear();let z=[...A(Sj(Z)),`VT_MYSQL_LIB="$(dirname "$(dirname "$(readlink -f ${B}/mysqld)")")/lib"`,'if [ -d "$VT_MYSQL_LIB" ]; then',`  printf '%s\\n' "$VT_MYSQL_LIB" > /etc/ld.so.conf.d/vitess-mysql.conf`,"  ldconfig","else",'  echo "mysqld library directory not found under $VT_MYSQL_LIB" >&2; exit 1',"fi",`id -u ${G} >/dev/null 2>&1 || useradd --system --home-dir ${C} --shell /usr/sbin/nologin ${G}`,`mkdir -p ${C}`,`chown -R ${G}:${G} ${C}`];if($)return z.push(...xj("vitess-vtcombo",bj(Z)),...qj(),"systemctl daemon-reload","systemctl enable --now vitess-vtcombo.service",...Hj(Z)),z;z.push(...cj(Z));let J=[];if(!Z.etcdEndpoint)J.push(["vitess-etcd",uj()]);J.push(["vitess-vtctld",gj(Z)],["vitess-mysqlctld",mj(Z)],["vitess-vtgate",dj(Z)]);for(let W of Z.keyspaces??[])for(let q of W.sharded?["-80","80-"]:["0"])J.push([`vitess-vttablet-${W.name}-${q.replace(/-/g,"x")}`,hj(Z,W.name,q)]);for(let[W,q]of J)z.push(...xj(W,q));z.push(...qj()),z.push("systemctl daemon-reload");for(let[W]of J)z.push(`systemctl enable --now ${W}.service`);return z.push(`if [ "$VTESS_VTGATE_AUTH_CHANGED" = 1 ]; then systemctl restart vitess-vtgate.service; printf '%s\\n' "$VTESS_VTGATE_AUTH_SHA" > ${y}; chown ${G}:${G} ${y}; chmod 0600 ${y}; fi`,...pj(Z),...Hj(Z)),z}var rj=new Set(["singlestore","vitess"]);function Gj(j){if(j?.engine&&rj.has(j.engine))return!1;return!j?.host||j.host==="127.0.0.1"||j.host==="localhost"}function e(j,Z="psql"){let $=j?.port??5432;if(Gj(j))return`${Z} -p ${$} -U postgres`;let z=j?.username||"postgres";return`${j?.password?`PGPASSWORD='${j.password.replace(/'/g,"'\\''")}' `:""}${Z} -h ${j.host} -p ${$} -U ${z} -w`}function O(j){return j===!0||typeof j==="object"&&j!=null}function lj(j){let Z=[],$=[];if(O(j.mysql))Z.push(typeof j.mysql==="object"&&j.mysql.version?`mysql.com@${j.mysql.version}`:"mysql.com@8.0.43"),$.push("mysql");else if(O(j.mariadb))Z.push(P.mariadb),$.push("mariadb");if(O(j.postgres))Z.push("postgresql.org"),$.push("postgres");if(O(j.redis))Z.push("redis.io"),$.push("redis");if(O(j.memcached))Z.push("memcached.org"),$.push("memcached");if(O(j.meilisearch))Z.push("meilisearch.com"),$.push("meilisearch");return{packages:Z,services:$}}function NZ(j={},Z={}){let $=lj(j),z=Yj(j.vitess),J=Z.mail?Jj(Z.mail):[];if($.packages.length===0)return[...z,...J];return[...A($.packages),...Xj($.services),...z,...J]}function UZ(j,Z={}){if(!j?.name)return[];if(!Gj(j))return[];let $=j.name,z=j.username||$,J=j.password||"",W=O(Z.postgres)||j.engine==="postgres",q=O(Z.mariadb)||j.engine==="mariadb",w=O(Z.mysql)||j.engine==="mysql";if(W&&!w&&!q){let Q=(K)=>`"${K.replace(/"/g,'""')}"`,k=(K)=>`'${K.replace(/'/g,"''")}'`,E=(K,T)=>["DO $$ BEGIN",`  IF NOT EXISTS (SELECT FROM pg_roles WHERE rolname = ${k(K)}) THEN`,`    CREATE ROLE ${Q(K)} LOGIN PASSWORD ${k(T)};`,"  ELSE",`    ALTER ROLE ${Q(K)} LOGIN PASSWORD ${k(T)};`,"  END IF;","END $$;"],I=(K)=>{let T=K.databases&&K.databases.length>0?K.databases:[$],h=[];for(let m of T)if(K.access==="readonly")h.push(`GRANT CONNECT ON DATABASE ${Q(m)} TO ${Q(K.username)};`,`\\connect ${Q(m)}`,`GRANT USAGE ON SCHEMA public TO ${Q(K.username)};`,`GRANT SELECT ON ALL TABLES IN SCHEMA public TO ${Q(K.username)};`,`ALTER DEFAULT PRIVILEGES FOR ROLE ${Q(z)} IN SCHEMA public GRANT SELECT ON TABLES TO ${Q(K.username)};`,"\\connect postgres");else h.push(`GRANT ALL PRIVILEGES ON DATABASE ${Q(m)} TO ${Q(K.username)};`);return h},S=j.users||[],Oj=j.port??5432;return[c(),`for i in $(seq 1 30); do pg_isready -p ${Oj} -q && break; sleep 2; done`,`${e(j)} <<'TS_CLOUD_PG_EOF'`,...E(z,J),`SELECT 'CREATE DATABASE ${Q($)} OWNER ${Q(z)}' WHERE NOT EXISTS (SELECT FROM pg_database WHERE datname = ${k($)})\\gexec`,...S.flatMap((K)=>[...E(K.username,K.password),...I(K)]),"TS_CLOUD_PG_EOF"]}let x=q?"/var/lib/pantry/mariadb/mariadbd.sock":"/var/lib/pantry/mysql/mysqld.sock",X=(Q)=>Q.replace(/`/g,"``"),F=(Q)=>Q.replace(/\\/g,"\\\\").replace(/'/g,"\\'"),L=(Q)=>{let k=Q.databases&&Q.databases.length>0?Q.databases:[$],E=Q.access==="readonly"?"SELECT":"ALL PRIVILEGES",I=[`CREATE USER IF NOT EXISTS '${F(Q.username)}'@'%' IDENTIFIED BY '${F(Q.password)}';`,`CREATE USER IF NOT EXISTS '${F(Q.username)}'@'localhost' IDENTIFIED BY '${F(Q.password)}';`,`ALTER USER '${F(Q.username)}'@'%' IDENTIFIED BY '${F(Q.password)}';`,`ALTER USER '${F(Q.username)}'@'localhost' IDENTIFIED BY '${F(Q.password)}';`];for(let S of k)I.push(`GRANT ${E} ON \`${X(S)}\`.* TO '${F(Q.username)}'@'%';`,`GRANT ${E} ON \`${X(S)}\`.* TO '${F(Q.username)}'@'localhost';`);return I},H=j.users||[];return[c(),`for i in $(seq 1 30); do mysqladmin --socket=${x} -u root ping 2>/dev/null | grep -q alive && break; sleep 2; done`,`mysql --socket=${x} -u root <<'TS_CLOUD_SQL_EOF'`,`CREATE DATABASE IF NOT EXISTS \`${X($)}\` CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;`,...L({username:z,password:J}),...H.flatMap(L),"FLUSH PRIVILEGES;","TS_CLOUD_SQL_EOF"]}function kZ(j){if(!j?.name)return{};let Z=j.engine==="singlestore",$=j.engine==="vitess",z=j.engine==="postgres"?"pgsql":Z?"singlestore":$?"vitess":"mysql",J=j.port??(j.engine==="postgres"?5432:$?15306:3306),W={DB_CONNECTION:z,DB_HOST:j.host||"127.0.0.1",DB_PORT:String(J),DB_DATABASE:j.name};if(j.username)W.DB_USERNAME=j.username;if(j.password)W.DB_PASSWORD=j.password;if((Z||$)&&j.ssl!==!1)W.DB_SSL="true";return W}var jj="/var/backups/ts-cloud",oj="/etc/ts-cloud/backups.config.ts",Fj="/etc/cron.d/ts-cloud-backups",a="/usr/local/bin/ts-cloud-backup.sh";function nj(j){if(!j.name)return null;let Z=j.host||"127.0.0.1",$=j.engine==="postgres",z=$?"postgresql":"mysql",J=j.port??($?5432:3306),W=(q)=>q.replace(/\\/g,"\\\\").replace(/'/g,"\\'");return["  {",`    type: '${z}',`,`    name: '${W(j.name)}',`,"    connection: {",`      hostname: '${W(Z)}',`,`      port: ${J},`,`      database: '${W(j.name)}',`,`      username: '${W(j.username||j.name)}',`,`      password: '${W(j.password||"")}',`,"      ssl: false,","    },","    includeSchema: true,","    includeData: true,","  },"].join(`
+`)}function tj(j,Z){let $=j?nj(j):null,z=Z.bucket?["  destinations: [","    {","      type: 's3',",`      bucket: '${Z.bucket}',`,"      prefix: 'db-backups',",...Z.endpoint?[`      endpoint: '${Z.endpoint}',`]:[],"      optional: false,","    },","  ],"]:[];return["import type { BackupConfig } from 'ts-backups'","","const config: BackupConfig = {","  verbose: true,",`  outputPath: '${jj}',`,"  retention: {",`    count: ${Z.retentionCount??5},`,`    maxAge: ${Z.retentionDays??30},`,"  },","  databases: [",...$?[$]:[],"  ],",...z,"}","","export default config",""].join(`
+`)}function vZ(j){let{database:Z,backups:$}=j;if(!$.enabled)return[];let z=$.schedule||"0 2 * * *",J=tj(Z,$);return["export DEBIAN_FRONTEND=noninteractive",`mkdir -p /etc/ts-cloud ${jj}`,"command -v bun >/dev/null 2>&1 || (curl -fsSL https://bun.sh/install | bash && ln -sf /root/.bun/bin/bun /usr/local/bin/bun)","bun add -g ts-backups || true",`cat > ${oj} <<'TS_CLOUD_BACKUP_CFG_EOF'`,J.replace(/\n$/,""),"TS_CLOUD_BACKUP_CFG_EOF",`cat > ${a} <<'TS_CLOUD_BACKUP_RUN_EOF'`,"#!/bin/bash","set -uo pipefail",'export PATH="/root/.bun/bin:/usr/local/bin:$PATH"','notify() { [ -x /usr/local/bin/ts-cloud-notify ] && /usr/local/bin/ts-cloud-notify "$1" || true; }',"cd /etc/ts-cloud",'if ! ts-backups backup --config /etc/ts-cloud/backups.config.ts; then notify "❌ ts-cloud backup failed"; exit 1; fi',"TS_CLOUD_BACKUP_RUN_EOF",`chmod +x ${a}`,`cat > ${Fj} <<'TS_CLOUD_BACKUP_CRON_EOF'`,`${z} root ${a} >> /var/log/ts-cloud-backup.log 2>&1`,"TS_CLOUD_BACKUP_CRON_EOF",`chmod 644 ${Fj}`]}function ij(j){return j==="mariadb"?"/var/lib/pantry/mariadb/mariadbd.sock":"/var/lib/pantry/mysql/mysqld.sock"}function RZ(j,Z={}){if(!j?.name)return[];let $=j.name,z=j.engine==="postgres",J=Z.from?`TS_CLOUD_DUMP="${Z.from}"`:`TS_CLOUD_DUMP="$(find ${jj} -type f -name '*${$}*.sql' -o -type f -name '*${$}*.sql.gz' 2>/dev/null | xargs -r ls -1t 2>/dev/null | head -1)"`,W=z?`${e(j)} -d "${$}"`:`mysql --socket=${ij(j.engine)} -u root "${$}"`;return["set -uo pipefail",'eval "$(cd /opt/pantry && pantry env 2>/dev/null)" || true',J,'[ -n "$TS_CLOUD_DUMP" ] && [ -f "$TS_CLOUD_DUMP" ] || { echo "no backup dump found to restore" >&2; exit 1; }','echo "[ts-cloud] restoring '+$+' from $TS_CLOUD_DUMP"',`case "$TS_CLOUD_DUMP" in *.gz) gunzip -c "$TS_CLOUD_DUMP" ;; *) cat "$TS_CLOUD_DUMP" ;; esac | ${W}`,'echo "restore complete"']}var Mj=["storage",".env"],PZ=4;function U(j){return`${j.replace(/\/+$/,"")}/.ts-cloud`}function sj(j){return`${U(j)}/deploy-history.log`}function ej(j,Z){return`${U(j)}/deploys/${Z}.log`}function Dj(j){return`${U(j)}/shared-paths`}function yZ(j,Z){let $=j.replace(/\/+$/,"");return{base:$,releases:`${$}/releases`,shared:`${$}/shared`,current:`${$}/current`,release:`${$}/releases/${Z}`}}function Vj(j){let Z=j.split("/").pop()||j;if(Z===".env"||Z.startsWith(".env."))return!0;return/\.[a-z0-9]+$/i.test(Z)}function aj(j){return typeof j==="string"?j:j.path}function IZ(j){let Z=new Map;for(let $ of j)Z.set(aj($),$);return[...Z.values()]}function Cj(j,Z){if(typeof Z==="string")return{path:Z,target:`${j.shared}/${Z}`,seed:!0};return{path:Z.path,target:Z.target??`${j.shared}/${Z.path}`,seed:Z.seed!==!1}}function jZ(j){return["ts_cloud_adopt_shared() {",'  TS_CLOUD_SP="$1"','  TS_CLOUD_DST="$2"',`  TS_CLOUD_SRC="${j.current}/$TS_CLOUD_SP"`,'  if [ -e "$TS_CLOUD_DST" ]; then return 0; fi','  if [ -L "$TS_CLOUD_SRC" ] || [ ! -e "$TS_CLOUD_SRC" ]; then return 0; fi','  mkdir -p "$(dirname "$TS_CLOUD_DST")"','  cp -a "$TS_CLOUD_SRC" "$TS_CLOUD_DST"',"  for TS_CLOUD_SIDECAR in -wal -shm; do",'    if [ -f "$TS_CLOUD_SRC$TS_CLOUD_SIDECAR" ]; then cp -a "$TS_CLOUD_SRC$TS_CLOUD_SIDECAR" "$TS_CLOUD_DST$TS_CLOUD_SIDECAR"; fi',"  done",'  echo "[ts-cloud] adopted $TS_CLOUD_SP from the live release into shared/ — it now survives deploys"',"  return 0","}"]}function SZ(j,Z=Mj){let $=[`mkdir -p ${j.releases} ${j.shared}`,...jZ(j)],z=Z.map((W)=>Cj(j,W));for(let{path:W,target:q,seed:w}of z){if(!w)continue;if($.push(`ts_cloud_adopt_shared '${W}' '${q}'`),Vj(W))$.push(`mkdir -p "$(dirname ${q})"`,`touch ${q}`);else if(W==="storage")$.push(`mkdir -p ${q}/app/public`,`mkdir -p ${q}/framework/cache/data`,`mkdir -p ${q}/framework/sessions`,`mkdir -p ${q}/framework/testing`,`mkdir -p ${q}/framework/views`,`mkdir -p ${q}/logs`);else $.push(`mkdir -p ${q}`)}let J=Dj(j.base);return $.push(`mkdir -p ${U(j.base)}`,`cat > ${J} <<'TS_CLOUD_SHARED_PATHS_EOF'`,...z.map((W)=>`${W.path}	${W.target}`),"TS_CLOUD_SHARED_PATHS_EOF"),$}function TZ(j,Z=900){let $=`${U(j.base)}/deploy.lock`;return[`mkdir -p "$(dirname ${$})"`,`exec 9>${$}`,`flock -w ${Z} 9 || { echo "[ts-cloud] another deploy of this site has held the lock for ${Z}s — refusing to race it" >&2; exit 1; }`]}function _Z(j){let Z=`${j.release}.incoming`;return[`rm -rf ${Z}`,`mkdir -p ${Z}`,...ZZ(j),'if [ "$TS_CLOUD_IS_LIVE" = "yes" ]; then',`  TS_CLOUD_STAGED=${Z}`,"else",`  rm -rf ${j.release}`,`  mkdir -p ${j.release}`,`  rmdir ${Z}`,`  TS_CLOUD_STAGED=${j.release}`,"fi"]}function bZ(j){let Z=`TS_CLOUD_TRAP_LIVE="$(readlink -f ${j.current} 2>/dev/null || true)"`,$=`TS_CLOUD_TRAP_TARGET="$(readlink -f ${j.release} 2>/dev/null || echo ${j.release})"`;return`trap '${`if [ $? -ne 0 ]; then ${Z}; ${$}; [ "$TS_CLOUD_TRAP_LIVE" = "$TS_CLOUD_TRAP_TARGET" ] || rm -rf ${j.release}; fi`}' EXIT`}function ZZ(j){return[`TS_CLOUD_LIVE_PATH="$(readlink -f ${j.current} 2>/dev/null || true)"`,`TS_CLOUD_RELEASE_PATH="$(readlink -f ${j.release} 2>/dev/null || echo ${j.release})"`,'if [ -n "$TS_CLOUD_LIVE_PATH" ] && [ "$TS_CLOUD_LIVE_PATH" = "$TS_CLOUD_RELEASE_PATH" ]; then TS_CLOUD_IS_LIVE=yes; else TS_CLOUD_IS_LIVE=no; fi']}function uZ(j){let Z=`${j.release}.incoming`;return[`if [ "$TS_CLOUD_STAGED" = "${Z}" ]; then`,`  rm -rf ${j.release}.previous`,`  mv ${j.release} ${j.release}.previous`,`  mv ${Z} ${j.release}`,`  rm -rf ${j.release}.previous`,"fi"]}function $Z(j,Z){return[`if [ -f ${j} ] && [ ! -L ${j} ] && [ -s ${j} ] && [ ! -s ${Z} ]; then`,`  cp -a ${j} ${Z}`,`  echo "[ts-cloud] seeded shared/ from the release's own copy of the file"`,"fi"]}function gZ(j,Z=Mj){let $=[];for(let z of Z){let{path:J,target:W,seed:q}=Cj(j,z),w=`${j.release}/${J}`,x=[`rm -rf ${w}`,`mkdir -p "$(dirname ${w})"`,`ln -sfn ${W} ${w}`];if(q){if(J!==".env"&&Vj(J))$.push(...$Z(w,W));$.push(...x);continue}$.push(`if [ -e ${W} ]; then`,...x.map((X)=>`  ${X}`),"fi")}return $}function Bj(j,Z){let $=Dj(j.base);return[`if [ -f ${$} ]; then`,'  while IFS="\t" read -r TS_CLOUD_SP TS_CLOUD_TGT; do','    [ -n "$TS_CLOUD_SP" ] || continue',`    [ -n "$TS_CLOUD_TGT" ] || TS_CLOUD_TGT="${j.shared}/$TS_CLOUD_SP"`,'    [ -e "$TS_CLOUD_TGT" ] || continue',`    rm -rf ${Z}/"$TS_CLOUD_SP"`,`    mkdir -p "$(dirname ${Z}/"$TS_CLOUD_SP")"`,`    ln -sfn "$TS_CLOUD_TGT" ${Z}/"$TS_CLOUD_SP"`,`  done < ${$}`,"fi"]}function hZ(j){return[`ln -sfn ${j.release} ${j.current}.tmp`,`mv -Tf ${j.current}.tmp ${j.current}`]}function mZ(j,Z={}){let $=Z.to?[`[ -d ${j.releases}/${Z.to} ] || { echo "rollback target ${j.releases}/${Z.to} not found" >&2; exit 1; }`,...Bj(j,`${j.releases}/${Z.to}`),`ln -sfn ${j.releases}/${Z.to} ${j.current}.tmp`,`mv -Tf ${j.current}.tmp ${j.current}`]:[`TS_CLOUD_CURRENT=$(readlink -f ${j.current} 2>/dev/null || true)`,`TS_CLOUD_PREV=$(ls -1dt ${j.releases}/*/ 2>/dev/null | sed 's#/$##' | while read -r r; do [ "$(readlink -f "$r")" != "$TS_CLOUD_CURRENT" ] && { echo "$r"; break; }; done)`,'[ -n "$TS_CLOUD_PREV" ] || { echo "no previous release to roll back to" >&2; exit 1; }',...Bj(j,'"$TS_CLOUD_PREV"'),`ln -sfn "$TS_CLOUD_PREV" ${j.current}.tmp`,`mv -Tf ${j.current}.tmp ${j.current}`,'echo "rolled back to $TS_CLOUD_PREV"'];if(!Z.unitBase)return $;let z=Z.unitBase;return[...$,`TS_CLOUD_RB_ID=$(basename "$(readlink -f ${j.current})")`,`if [ -f /etc/systemd/system/${z}@.service ]; then systemctl start "${z}@\${TS_CLOUD_RB_ID}.service"; sleep 2; systemctl is-active --quiet "${z}@\${TS_CLOUD_RB_ID}.service" || { echo "rolled-back release failed to start" >&2; exit 1; }; systemctl enable "${z}@\${TS_CLOUD_RB_ID}.service" 2>/dev/null || true; systemctl list-units --plain --no-legend --type=service "${z}@*.service" 2>/dev/null | awk '{print $1}' | { grep -v "^${z}@\${TS_CLOUD_RB_ID}.service$" || true; } | while read -r TS_CLOUD_U; do systemctl stop "$TS_CLOUD_U" 2>/dev/null || true; systemctl disable "$TS_CLOUD_U" 2>/dev/null || true; done; elif [ -f /etc/systemd/system/${z}.service ]; then systemctl restart ${z}.service; fi`]}function cZ(j,Z=4){let $=Math.max(1,Z);return[`TS_CLOUD_CURRENT=$(readlink -f ${j.current} 2>/dev/null || true)`,`ls -1dt ${j.releases}/*/ 2>/dev/null | sed 's#/$##' | tail -n +${$+1} | while read -r TS_CLOUD_OLD; do`,'  [ "$(readlink -f "$TS_CLOUD_OLD")" = "$TS_CLOUD_CURRENT" ] || rm -rf "$TS_CLOUD_OLD"',"done"]}function zZ(j){return`${U(j)}/owner`}function dZ(j,Z){let $=zZ(j);return[`if [ -f "${$}" ]; then`,`  TS_CLOUD_OWNER=$(cat "${$}")`,`  if [ "$TS_CLOUD_OWNER" != "${Z}" ]; then`,`    echo "[ts-cloud] REFUSING deploy: ${j} belongs to project '$TS_CLOUD_OWNER', not '${Z}'. Another project on this box derives the same site key — give one of them a distinct site name/domain, or remove ${$} to transfer ownership." >&2`,"    exit 1","  fi","else",`  mkdir -p "$(dirname "${$}")"`,`  printf '%s\\n' "${Z}" > "${$}"`,"fi"]}function pZ(j,Z){let $=U(j),z=ej(j,Z.releaseId),J=sj(j),W=Math.max(1,Z.keepLogs??20),q=Z.commit||"",w=Z.branch||"";return[`mkdir -p ${$}/deploys`,`exec > >(tee -a ${z}) 2>&1`,`echo "[ts-cloud] deploy ${Z.releaseId} commit=${q} branch=${w} starting $(date -u +%Y-%m-%dT%H:%M:%SZ)"`,"ts_cloud_record_deploy() {","  TS_CLOUD_RC=$?",'  if [ "$TS_CLOUD_RC" -eq 0 ]; then TS_CLOUD_ST=success; else TS_CLOUD_ST=failed; fi',`  printf '%s\\t%s\\t%s\\t%s\\trc=%s\\n' "$(date -u +%Y-%m-%dT%H:%M:%SZ)" "${Z.releaseId}" "${q}" "$TS_CLOUD_ST" "$TS_CLOUD_RC" >> ${J}`,"}","trap ts_cloud_record_deploy EXIT",`ls -1t ${$}/deploys/*.log 2>/dev/null | tail -n +${W+1} | while read -r TS_CLOUD_OLDLOG; do rm -f "$TS_CLOUD_OLDLOG"; done`]}
+export{XZ as vf,zj as wf,Nj as xf,_ as yf,kj as zf,JZ as Af,QZ as Bf,qZ as Cf,xZ as Df,f as Ef,KZ as Ff,c as Gf,A as Hf,Xj as If,Yj as Jf,Gj as Kf,e as Lf,NZ as Mf,UZ as Nf,kZ as Of,a as Pf,vZ as Qf,RZ as Rf,Mj as Sf,PZ as Tf,sj as Uf,yZ as Vf,aj as Wf,IZ as Xf,SZ as Yf,TZ as Zf,_Z as _f,bZ as $f,uZ as ag,gZ as bg,hZ as cg,mZ as dg,cZ as eg,dZ as fg,pZ as gg};

package/dist/bin/chunk-b6by94pk.js

@@ -0,0 +1,2 @@
+import{dh as E}from"./chunk-xyt490vp.js";class J{client;region;constructor(b="us-east-1",w){this.region=b,this.client=new E}async createQueue(b){let h={Action:"CreateQueue",QueueName:b.fifo&&!b.queueName.endsWith(".fifo")?`${b.queueName}.fifo`:b.queueName,Version:"2012-11-05"},j=1;if(b.visibilityTimeout!==void 0)h[`Attribute.${j}.Name`]="VisibilityTimeout",h[`Attribute.${j}.Value`]=b.visibilityTimeout.toString(),j++;if(b.messageRetentionPeriod!==void 0)h[`Attribute.${j}.Name`]="MessageRetentionPeriod",h[`Attribute.${j}.Value`]=b.messageRetentionPeriod.toString(),j++;if(b.delaySeconds!==void 0)h[`Attribute.${j}.Name`]="DelaySeconds",h[`Attribute.${j}.Value`]=b.delaySeconds.toString(),j++;if(b.maxMessageSize!==void 0)h[`Attribute.${j}.Name`]="MaximumMessageSize",h[`Attribute.${j}.Value`]=b.maxMessageSize.toString(),j++;if(b.receiveMessageWaitTime!==void 0)h[`Attribute.${j}.Name`]="ReceiveMessageWaitTimeSeconds",h[`Attribute.${j}.Value`]=b.receiveMessageWaitTime.toString(),j++;if(b.fifo){if(h[`Attribute.${j}.Name`]="FifoQueue",h[`Attribute.${j}.Value`]="true",j++,b.contentBasedDeduplication)h[`Attribute.${j}.Name`]="ContentBasedDeduplication",h[`Attribute.${j}.Value`]="true",j++}if(b.deadLetterTargetArn&&b.maxReceiveCount)h[`Attribute.${j}.Name`]="RedrivePolicy",h[`Attribute.${j}.Value`]=JSON.stringify({deadLetterTargetArn:b.deadLetterTargetArn,maxReceiveCount:b.maxReceiveCount}),j++;if(b.tags&&Object.keys(b.tags).length>0){let B=1;for(let[F,G]of Object.entries(b.tags))h[`Tag.${B}.Key`]=F,h[`Tag.${B}.Value`]=G,B++}let z=await this.client.request({service:"sqs",region:this.region,method:"POST",path:"/",body:new URLSearchParams(h).toString()});return{QueueUrl:z.QueueUrl||z.CreateQueueResult?.QueueUrl}}async listQueues(b){let w={Action:"ListQueues",Version:"2012-11-05"};if(b)w.QueueNamePrefix=b;let h=await this.client.request({service:"sqs",region:this.region,method:"POST",path:"/",body:new URLSearchParams(w).toString()}),j=[];if(h.QueueUrl)j.push(h.QueueUrl);else if(h.ListQueuesResult?.QueueUrl)if(Array.isArray(h.ListQueuesResult.QueueUrl))j.push(...h.ListQueuesResult.QueueUrl);else j.push(h.ListQueuesResult.QueueUrl);return{QueueUrls:j}}async getQueueAttributes(b){let w={Action:"GetQueueAttributes",QueueUrl:b,Version:"2012-11-05","AttributeName.1":"All"},h=await this.client.request({service:"sqs",region:this.region,method:"POST",path:"/",body:new URLSearchParams(w).toString()});return{Attributes:h.Attributes||h.GetQueueAttributesResult?.Attributes||{}}}async getQueueUrl(b){let w={Action:"GetQueueUrl",QueueName:b,Version:"2012-11-05"},h=await this.client.request({service:"sqs",region:this.region,method:"POST",path:"/",body:new URLSearchParams(w).toString()});return{QueueUrl:h.QueueUrl||h.GetQueueUrlResult?.QueueUrl}}async deleteQueue(b){let w={Action:"DeleteQueue",QueueUrl:b,Version:"2012-11-05"};await this.client.request({service:"sqs",region:this.region,method:"POST",path:"/",body:new URLSearchParams(w).toString()})}async purgeQueue(b){let w={Action:"PurgeQueue",QueueUrl:b,Version:"2012-11-05"};await this.client.request({service:"sqs",region:this.region,method:"POST",path:"/",body:new URLSearchParams(w).toString()})}async sendMessage(b){let w={Action:"SendMessage",QueueUrl:b.queueUrl,MessageBody:b.messageBody,Version:"2012-11-05"};if(b.delaySeconds!==void 0)w.DelaySeconds=b.delaySeconds;if(b.messageGroupId)w.MessageGroupId=b.messageGroupId;if(b.messageDeduplicationId)w.MessageDeduplicationId=b.messageDeduplicationId;let h=await this.client.request({service:"sqs",region:this.region,method:"POST",path:"/",body:new URLSearchParams(w).toString()});return{MessageId:h.MessageId||h.SendMessageResult?.MessageId}}async receiveMessages(b){let w={Action:"ReceiveMessage",QueueUrl:b.queueUrl,Version:"2012-11-05"};if(b.maxMessages!==void 0)w.MaxNumberOfMessages=b.maxMessages;if(b.visibilityTimeout!==void 0)w.VisibilityTimeout=b.visibilityTimeout;if(b.waitTimeSeconds!==void 0)w.WaitTimeSeconds=b.waitTimeSeconds;let h=await this.client.request({service:"sqs",region:this.region,method:"POST",path:"/",body:new URLSearchParams(w).toString()}),j=[],z=h.Message||h.ReceiveMessageResult?.Message;if(z)if(Array.isArray(z))j.push(...z.map((B)=>({MessageId:B.MessageId,ReceiptHandle:B.ReceiptHandle,Body:B.Body})));else j.push({MessageId:z.MessageId,ReceiptHandle:z.ReceiptHandle,Body:z.Body});return{Messages:j}}async deleteMessage(b,w){let h={Action:"DeleteMessage",QueueUrl:b,ReceiptHandle:w,Version:"2012-11-05"};await this.client.request({service:"sqs",region:this.region,method:"POST",path:"/",body:new URLSearchParams(h).toString()})}}
+export{J as Hd};

package/dist/bin/chunk-c8sypnbe.js

@@ -0,0 +1,2 @@
+import{createRequire as g}from"node:module";var d=Object.defineProperty;var h=(b,a)=>()=>(a||b((a={exports:{}}).exports,a),a.exports);var e=(b)=>b;function f(b,a){this[b]=e.bind(null,a)}var i=(b,a)=>{for(var c in a)d(b,c,{get:a[c],enumerable:!0,configurable:!0,set:f.bind(a,c)})};var k=g(import.meta.url);
+export{h as np,i as op,k as pp};

package/dist/bin/chunk-cx4e3d4w.js

@@ -0,0 +1 @@
+import{p as a,q as b,r as c,s as d,t as e,u as f}from"./chunk-xbk2y43r.js";import"./chunk-mpjg0kc7.js";import"./chunk-v3rzf9d0.js";import"./chunk-f11xf3n6.js";import"./chunk-8h1qr6x4.js";import"./chunk-54bqchag.js";import"./chunk-xyt490vp.js";import"./chunk-c8sypnbe.js";export{c as uploadStaticFiles,d as invalidateCache,a as generateStaticSiteTemplate,f as deployStaticSiteFull,b as deployStaticSite,e as deleteStaticSite};

package/dist/bin/chunk-d5a3vheh.js

@@ -0,0 +1,2 @@
+import{Ig as w}from"./chunk-qsdf5kzk.js";import{Pg as E}from"./chunk-xjp3v95e.js";import{Xo as u,ap as D,bp as F,io as H,ko as C,uo as R}from"./chunk-5bhx3bsa.js";import{execFileSync as P}from"node:child_process";import{mkdirSync as _,mkdtempSync as k,rmSync as S,writeFileSync as Z}from"node:fs";import{tmpdir as m}from"node:os";import{dirname as h,join as J}from"node:path";function A(M,q){for(let z of q){let V=J(M,z.name);_(h(V),{recursive:!0}),Z(V,z.data,z.mode?{mode:z.mode}:void 0)}}async function p(M){let{app:q,projectRoot:z,region:V,repository:W}=M,b=q.architecture??"x86_64",f=b==="arm64"?"linux/arm64":"linux/amd64",U=q.kind==="php",K=M.onStep??(()=>{}),N=k(J(m(),"tscloud-img-"));try{let $=J(N,"app");_($,{recursive:!0});let v,B;if(U){D({projectRoot:z,app:q,skipBuild:M.skipBuild,onStep:K}),K("staging application tree");let G=F(z);A($,G),A(J(N,"runtime"),u().map((T)=>({name:T.path,data:T.contents,mode:T.mode})));let O=q.handlers?.http??"public/index.php";v={http:O,queue:q.handlers?.queue??O,cli:q.handlers?.cli??O},B=H(G.map((T)=>`${T.name}:${T.data.length}`).join("|"))}else{K("bundling application");let G=await C({projectRoot:z,app:q,skipBuild:M.skipBuild,onStep:K});Z(J($,"index.mjs"),G.bundle),v=G.handlers,B=G.sha256}let x=B.slice(0,16);Z(J(N,"Dockerfile"),R({kind:q.kind??"node",phpVersion:q.phpVersion,architecture:b}));let I=new w(V),Q;try{Q=(await I.describeRepositories({repositoryNames:[W]})).repositories?.[0]?.repositoryUri??""}catch{Q=""}if(!Q)K(`creating ECR repository ${W}`),Q=(await I.createRepository({repositoryName:W,imageScanningConfiguration:{scanOnPush:!0}})).repository?.repositoryUri??"";if(!Q)throw Error(`could not resolve ECR repository URI for ${W}`);let X=`${Q}:${x}`;K("docker build"),P("docker",["build","--platform",f,"--provenance=false","--sbom=false","-t",X,N],{stdio:"inherit"}),K("ecr auth + push");let Y=(await I.getAuthorizationToken()).authorizationData?.[0];if(!Y?.authorizationToken||!Y.proxyEndpoint)throw Error("failed to get an ECR authorization token");let j=Y.proxyEndpoint.replace(/^https?:\/\//,""),L=J(N,".docker");return _(L,{recursive:!0}),Z(J(L,"config.json"),JSON.stringify({auths:{[j]:{auth:Y.authorizationToken}}})),P("docker",["push",X],{stdio:"inherit",env:{...process.env,DOCKER_CONFIG:L}}),E(`Image: ${X}`),{imageUri:X,tag:x,handlers:v}}finally{S(N,{recursive:!0,force:!0})}}
+export{p as Hg};

package/dist/bin/chunk-e1fym2bd.js

@@ -0,0 +1 @@
+import{rg as a,sg as b,tg as c,ug as d,vg as e,wg as f,xg as g,yg as h,zg as i}from"./chunk-9vdc7adf.js";import"./chunk-scqmd4qv.js";import"./chunk-5bhx3bsa.js";import"./chunk-c8sypnbe.js";export{i as synchronizeConfiguredConfiguration,c as serializeDotenv,b as parseDotenv,d as LocalEncryptedConfigurationBackend,g as ExternalConfigurationBackend,a as ConfigurationStore,h as ConfigurationService,f as AwsSsmConfigurationBackend,e as AwsSecretsManagerConfigurationBackend};

package/dist/bin/chunk-ej4h0q2y.js

@@ -0,0 +1 @@
+import{_d as a}from"./chunk-r61qmhv1.js";import"./chunk-xyt490vp.js";import"./chunk-c8sypnbe.js";export{a as LambdaClient};

package/dist/bin/chunk-ett305ym.js

@@ -0,0 +1,4 @@
+import{dh as O}from"./chunk-xyt490vp.js";class Q{client;region;constructor(q="us-east-1"){this.region=q,this.client=new O}async describeInstances(q){let z={Action:"DescribeInstances",Version:"2016-11-15"};if(q?.InstanceIds)q.InstanceIds.forEach((G,J)=>{z[`InstanceId.${J+1}`]=G});if(q?.Filters)q.Filters.forEach((G,J)=>{z[`Filter.${J+1}.Name`]=G.Name,G.Values.forEach((K,L)=>{z[`Filter.${J+1}.Value.${L+1}`]=K})});if(q?.MaxResults)z.MaxResults=String(q.MaxResults);if(q?.NextToken)z.NextToken=q.NextToken;let H=await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()}),B=H.DescribeInstancesResponse||H;return{Reservations:this.parseReservations(B.reservationSet?.item),NextToken:B.nextToken}}async getInstance(q){return(await this.describeInstances({InstanceIds:[q]})).Reservations?.[0]?.Instances?.[0]}async getConsoleOutput(q,z){let H={Action:"GetConsoleOutput",Version:"2016-11-15",InstanceId:q};if(z)H.Latest="true";let B=await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(H).toString()}),G=B.GetConsoleOutputResponse||B;return{InstanceId:G.instanceId,Output:G.output,Timestamp:G.timestamp}}async getConsoleOutputDecoded(q,z){let H=await this.getConsoleOutput(q,z?.latest);if(!H.Output)return"No console output available yet";let B=Buffer.from(H.Output,"base64").toString("utf-8");if(z?.tailLines)return B.split(`
+`).slice(-z.tailLines).join(`
+`);return B}async describeInstanceStatus(q){let z={Action:"DescribeInstanceStatus",Version:"2016-11-15"};if(q?.InstanceIds)q.InstanceIds.forEach((B,G)=>{z[`InstanceId.${G+1}`]=B});if(q?.IncludeAllInstances)z.IncludeAllInstances="true";if(q?.Filters)q.Filters.forEach((B,G)=>{z[`Filter.${G+1}.Name`]=B.Name,B.Values.forEach((J,K)=>{z[`Filter.${G+1}.Value.${K+1}`]=J})});let H=await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()});return{InstanceStatuses:this.parseArray(H.instanceStatusSet?.item).map((B)=>({InstanceId:B.instanceId,InstanceState:B.instanceState?{Code:Number.parseInt(B.instanceState.code),Name:B.instanceState.name}:void 0,InstanceStatus:B.instanceStatus?{Status:B.instanceStatus.status,Details:this.parseArray(B.instanceStatus.details?.item).map((G)=>({Name:G.name,Status:G.status}))}:void 0,SystemStatus:B.systemStatus?{Status:B.systemStatus.status,Details:this.parseArray(B.systemStatus.details?.item).map((G)=>({Name:G.name,Status:G.status}))}:void 0}))}}async startInstances(q){let z={Action:"StartInstances",Version:"2016-11-15"};q.forEach((B,G)=>{z[`InstanceId.${G+1}`]=B});let H=await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()});return{StartingInstances:this.parseArray(H.instancesSet?.item).map((B)=>({InstanceId:B.instanceId,CurrentState:B.currentState?{Name:B.currentState.name}:void 0,PreviousState:B.previousState?{Name:B.previousState.name}:void 0}))}}async stopInstances(q,z){let H={Action:"StopInstances",Version:"2016-11-15"};if(q.forEach((G,J)=>{H[`InstanceId.${J+1}`]=G}),z)H.Force="true";let B=await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(H).toString()});return{StoppingInstances:this.parseArray(B.instancesSet?.item).map((G)=>({InstanceId:G.instanceId,CurrentState:G.currentState?{Name:G.currentState.name}:void 0,PreviousState:G.previousState?{Name:G.previousState.name}:void 0}))}}async rebootInstances(q){let z={Action:"RebootInstances",Version:"2016-11-15"};q.forEach((H,B)=>{z[`InstanceId.${B+1}`]=H}),await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()})}async terminateInstances(q){let z={Action:"TerminateInstances",Version:"2016-11-15"};q.forEach((B,G)=>{z[`InstanceId.${G+1}`]=B});let H=await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()});return{TerminatingInstances:this.parseArray(H.instancesSet?.item).map((B)=>({InstanceId:B.instanceId,CurrentState:B.currentState?{Name:B.currentState.name}:void 0,PreviousState:B.previousState?{Name:B.previousState.name}:void 0}))}}async createImage(q){let z={Action:"CreateImage",Version:"2016-11-15",InstanceId:q.InstanceId,Name:q.Name};if(q.Description)z.Description=q.Description;if(q.NoReboot!==void 0)z.NoReboot=String(q.NoReboot);if(q.TagSpecifications)q.TagSpecifications.forEach((G,J)=>{z[`TagSpecification.${J+1}.ResourceType`]=G.ResourceType,G.Tags.forEach((K,L)=>{z[`TagSpecification.${J+1}.Tag.${L+1}.Key`]=K.Key,z[`TagSpecification.${J+1}.Tag.${L+1}.Value`]=K.Value})});let H=await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()});return{ImageId:(H.CreateImageResponse||H).imageId}}async deregisterImage(q){await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams({Action:"DeregisterImage",Version:"2016-11-15",ImageId:q}).toString()})}async describeVpcs(q){let z={Action:"DescribeVpcs",Version:"2016-11-15"};if(q?.VpcIds)q.VpcIds.forEach((B,G)=>{z[`VpcId.${G+1}`]=B});if(q?.Filters)q.Filters.forEach((B,G)=>{z[`Filter.${G+1}.Name`]=B.Name,B.Values.forEach((J,K)=>{z[`Filter.${G+1}.Value.${K+1}`]=J})});let H=await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()});return{Vpcs:this.parseArray(H.vpcSet?.item).map((B)=>({VpcId:B.vpcId,CidrBlock:B.cidrBlock,State:B.state,DhcpOptionsId:B.dhcpOptionsId,InstanceTenancy:B.instanceTenancy,IsDefault:B.isDefault==="true",Tags:this.parseTags(B.tagSet?.item)}))}}async describeSubnets(q){let z={Action:"DescribeSubnets",Version:"2016-11-15"};if(q?.SubnetIds)q.SubnetIds.forEach((B,G)=>{z[`SubnetId.${G+1}`]=B});if(q?.Filters)q.Filters.forEach((B,G)=>{z[`Filter.${G+1}.Name`]=B.Name,B.Values.forEach((J,K)=>{z[`Filter.${G+1}.Value.${K+1}`]=J})});let H=await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()});return{Subnets:this.parseArray(H.subnetSet?.item).map((B)=>({SubnetId:B.subnetId,VpcId:B.vpcId,CidrBlock:B.cidrBlock,AvailabilityZone:B.availabilityZone,AvailableIpAddressCount:Number.parseInt(B.availableIpAddressCount),State:B.state,MapPublicIpOnLaunch:B.mapPublicIpOnLaunch==="true",Tags:this.parseTags(B.tagSet?.item)}))}}async describeSecurityGroups(q){let z={Action:"DescribeSecurityGroups",Version:"2016-11-15"};if(q?.GroupIds)q.GroupIds.forEach((B,G)=>{z[`GroupId.${G+1}`]=B});if(q?.GroupNames)q.GroupNames.forEach((B,G)=>{z[`GroupName.${G+1}`]=B});if(q?.Filters)q.Filters.forEach((B,G)=>{z[`Filter.${G+1}.Name`]=B.Name,B.Values.forEach((J,K)=>{z[`Filter.${G+1}.Value.${K+1}`]=J})});let H=await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()});return{SecurityGroups:this.parseArray(H.securityGroupInfo?.item).map((B)=>({GroupId:B.groupId,GroupName:B.groupName,Description:B.groupDescription,VpcId:B.vpcId,IpPermissions:this.parseIpPermissions(B.ipPermissions?.item),IpPermissionsEgress:this.parseIpPermissions(B.ipPermissionsEgress?.item),Tags:this.parseTags(B.tagSet?.item)}))}}async describeInternetGateways(q){let z={Action:"DescribeInternetGateways",Version:"2016-11-15"};if(q?.InternetGatewayIds)q.InternetGatewayIds.forEach((B,G)=>{z[`InternetGatewayId.${G+1}`]=B});if(q?.Filters)q.Filters.forEach((B,G)=>{z[`Filter.${G+1}.Name`]=B.Name,B.Values.forEach((J,K)=>{z[`Filter.${G+1}.Value.${K+1}`]=J})});let H=await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()});return{InternetGateways:this.parseArray(H.internetGatewaySet?.item).map((B)=>({InternetGatewayId:B.internetGatewayId,Attachments:this.parseArray(B.attachmentSet?.item).map((G)=>({VpcId:G.vpcId,State:G.state})),Tags:this.parseTags(B.tagSet?.item)}))}}async describeAddresses(q){let z={Action:"DescribeAddresses",Version:"2016-11-15"};if(q?.AllocationIds)q.AllocationIds.forEach((B,G)=>{z[`AllocationId.${G+1}`]=B});if(q?.PublicIps)q.PublicIps.forEach((B,G)=>{z[`PublicIp.${G+1}`]=B});if(q?.Filters)q.Filters.forEach((B,G)=>{z[`Filter.${G+1}.Name`]=B.Name,B.Values.forEach((J,K)=>{z[`Filter.${G+1}.Value.${K+1}`]=J})});let H=await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()});return{Addresses:this.parseArray(H.addressesSet?.item).map((B)=>({PublicIp:B.publicIp,AllocationId:B.allocationId,AssociationId:B.associationId,InstanceId:B.instanceId,NetworkInterfaceId:B.networkInterfaceId,PrivateIpAddress:B.privateIpAddress,Domain:B.domain,Tags:this.parseTags(B.tagSet?.item)}))}}async allocateAddress(q){let z={Action:"AllocateAddress",Version:"2016-11-15"};if(q?.Domain)z.Domain=q.Domain;if(q?.TagSpecifications)q.TagSpecifications.forEach((B,G)=>{z[`TagSpecification.${G+1}.ResourceType`]=B.ResourceType,B.Tags.forEach((J,K)=>{z[`TagSpecification.${G+1}.Tag.${K+1}.Key`]=J.Key,z[`TagSpecification.${G+1}.Tag.${K+1}.Value`]=J.Value})});let H=await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()});return{AllocationId:H.allocationId,PublicIp:H.publicIp,Domain:H.domain}}async associateAddress(q){let z={Action:"AssociateAddress",Version:"2016-11-15"};if(q.AllocationId)z.AllocationId=q.AllocationId;if(q.PublicIp)z.PublicIp=q.PublicIp;if(q.InstanceId)z.InstanceId=q.InstanceId;if(q.NetworkInterfaceId)z.NetworkInterfaceId=q.NetworkInterfaceId;if(q.PrivateIpAddress)z.PrivateIpAddress=q.PrivateIpAddress;if(q.AllowReassociation)z.AllowReassociation="true";return{AssociationId:(await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()})).associationId}}async createTags(q){let z={Action:"CreateTags",Version:"2016-11-15"};q.Resources.forEach((H,B)=>{z[`ResourceId.${B+1}`]=H}),q.Tags.forEach((H,B)=>{z[`Tag.${B+1}.Key`]=H.Key,z[`Tag.${B+1}.Value`]=H.Value}),await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()})}async waitForInstanceState(q,z,H){let B=H?.maxWaitMs||300000,G=H?.pollIntervalMs||5000,J=Date.now();while(Date.now()-J<B){let K;try{K=await this.getInstance(q)}catch{K=void 0}if(K?.State?.Name===z)return K;await new Promise((L)=>setTimeout(L,G))}return}async createVpc(q){let z={Action:"CreateVpc",Version:"2016-11-15",CidrBlock:q.CidrBlock};if(q.InstanceTenancy)z.InstanceTenancy=q.InstanceTenancy;if(q.TagSpecifications)q.TagSpecifications.forEach((J,K)=>{z[`TagSpecification.${K+1}.ResourceType`]=J.ResourceType,J.Tags.forEach((L,M)=>{z[`TagSpecification.${K+1}.Tag.${M+1}.Key`]=L.Key,z[`TagSpecification.${K+1}.Tag.${M+1}.Value`]=L.Value})});let H=await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()}),G=(H.CreateVpcResponse||H).vpc;return{Vpc:G?{VpcId:G.vpcId,CidrBlock:G.cidrBlock,State:G.state,DhcpOptionsId:G.dhcpOptionsId,InstanceTenancy:G.instanceTenancy,IsDefault:G.isDefault==="true",Tags:this.parseTags(G.tagSet?.item)}:void 0}}async createSubnet(q){let z={Action:"CreateSubnet",Version:"2016-11-15",VpcId:q.VpcId,CidrBlock:q.CidrBlock};if(q.AvailabilityZone)z.AvailabilityZone=q.AvailabilityZone;if(q.TagSpecifications)q.TagSpecifications.forEach((J,K)=>{z[`TagSpecification.${K+1}.ResourceType`]=J.ResourceType,J.Tags.forEach((L,M)=>{z[`TagSpecification.${K+1}.Tag.${M+1}.Key`]=L.Key,z[`TagSpecification.${K+1}.Tag.${M+1}.Value`]=L.Value})});let H=await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()}),G=(H.CreateSubnetResponse||H).subnet;return{Subnet:G?{SubnetId:G.subnetId,VpcId:G.vpcId,CidrBlock:G.cidrBlock,AvailabilityZone:G.availabilityZone,AvailableIpAddressCount:G.availableIpAddressCount?Number.parseInt(G.availableIpAddressCount):void 0,State:G.state,MapPublicIpOnLaunch:G.mapPublicIpOnLaunch==="true",Tags:this.parseTags(G.tagSet?.item)}:void 0}}async modifySubnetAttribute(q){let z={Action:"ModifySubnetAttribute",Version:"2016-11-15",SubnetId:q.SubnetId};if(q.MapPublicIpOnLaunch!==void 0)z["MapPublicIpOnLaunch.Value"]=String(q.MapPublicIpOnLaunch.Value);await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()})}async createSecurityGroup(q){let z={Action:"CreateSecurityGroup",Version:"2016-11-15",GroupName:q.GroupName,GroupDescription:q.Description};if(q.VpcId)z.VpcId=q.VpcId;if(q.TagSpecifications)q.TagSpecifications.forEach((G,J)=>{z[`TagSpecification.${J+1}.ResourceType`]=G.ResourceType,G.Tags.forEach((K,L)=>{z[`TagSpecification.${J+1}.Tag.${L+1}.Key`]=K.Key,z[`TagSpecification.${J+1}.Tag.${L+1}.Value`]=K.Value})});let H=await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()});return{GroupId:(H.CreateSecurityGroupResponse||H).groupId}}async authorizeSecurityGroupIngress(q){let z={Action:"AuthorizeSecurityGroupIngress",Version:"2016-11-15",GroupId:q.GroupId};this.encodeIpPermissions(z,q.IpPermissions),await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()})}async authorizeSecurityGroupEgress(q){let z={Action:"AuthorizeSecurityGroupEgress",Version:"2016-11-15",GroupId:q.GroupId};this.encodeIpPermissions(z,q.IpPermissions),await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()})}async describeRouteTables(q){let z={Action:"DescribeRouteTables",Version:"2016-11-15"};if(q?.RouteTableIds)q.RouteTableIds.forEach((G,J)=>{z[`RouteTableId.${J+1}`]=G});if(q?.Filters)q.Filters.forEach((G,J)=>{z[`Filter.${J+1}.Name`]=G.Name,G.Values.forEach((K,L)=>{z[`Filter.${J+1}.Value.${L+1}`]=K})});let H=await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()}),B=H.DescribeRouteTablesResponse||H;return{RouteTables:this.parseArray(B.routeTableSet?.item).map((G)=>({RouteTableId:G.routeTableId,VpcId:G.vpcId,Routes:this.parseArray(G.routeSet?.item).map((J)=>({DestinationCidrBlock:J.destinationCidrBlock,GatewayId:J.gatewayId,NatGatewayId:J.natGatewayId,State:J.state})),Associations:this.parseArray(G.associationSet?.item).map((J)=>({RouteTableAssociationId:J.routeTableAssociationId,SubnetId:J.subnetId,Main:J.main==="true"||J.main===!0})),Tags:this.parseTags(G.tagSet?.item)}))}}async deleteVpc(q){let z={Action:"DeleteVpc",Version:"2016-11-15",VpcId:q};await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()})}async deleteSubnet(q){let z={Action:"DeleteSubnet",Version:"2016-11-15",SubnetId:q};await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()})}async deleteSecurityGroup(q){await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams({Action:"DeleteSecurityGroup",Version:"2016-11-15",GroupId:q}).toString()})}async describeNetworkInterfaces(q){let z={Action:"DescribeNetworkInterfaces",Version:"2016-11-15"};if(q?.NetworkInterfaceIds)q.NetworkInterfaceIds.forEach((G,J)=>{z[`NetworkInterfaceId.${J+1}`]=G});if(q?.Filters)q.Filters.forEach((G,J)=>{z[`Filter.${J+1}.Name`]=G.Name,G.Values.forEach((K,L)=>{z[`Filter.${J+1}.Value.${L+1}`]=K})});let H=await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()}),B=H.DescribeNetworkInterfacesResponse||H;return{NetworkInterfaces:this.parseArray(B.networkInterfaceSet?.item).map((G)=>({NetworkInterfaceId:G.networkInterfaceId,SubnetId:G.subnetId,VpcId:G.vpcId,Status:G.status,Attachment:G.attachment?{AttachmentId:G.attachment.attachmentId,InstanceId:G.attachment.instanceId,Status:G.attachment.status}:void 0}))}}async detachNetworkInterface(q,z){let H={Action:"DetachNetworkInterface",Version:"2016-11-15",AttachmentId:q};if(z)H.Force="true";await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(H).toString()})}async deleteNetworkInterface(q){let z={Action:"DeleteNetworkInterface",Version:"2016-11-15",NetworkInterfaceId:q};await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()})}async describeRegions(){let q={Action:"DescribeRegions",Version:"2016-11-15"},z=await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(q).toString()}),H=z.DescribeRegionsResponse||z;return{Regions:this.parseArray(H.regionInfo?.item).map((B)=>({RegionName:B.regionName,Endpoint:B.regionEndpoint}))}}async runInstances(q){let z={Action:"RunInstances",Version:"2016-11-15",ImageId:q.ImageId,InstanceType:q.InstanceType,MinCount:String(q.MinCount),MaxCount:String(q.MaxCount)};if(q.SecurityGroupIds)q.SecurityGroupIds.forEach((G,J)=>{z[`SecurityGroupId.${J+1}`]=G});if(q.SubnetId)z.SubnetId=q.SubnetId;if(q.UserData)z.UserData=q.UserData;if(q.IamInstanceProfile){if(q.IamInstanceProfile.Name)z["IamInstanceProfile.Name"]=q.IamInstanceProfile.Name;if(q.IamInstanceProfile.Arn)z["IamInstanceProfile.Arn"]=q.IamInstanceProfile.Arn}if(q.TagSpecifications)q.TagSpecifications.forEach((G,J)=>{z[`TagSpecification.${J+1}.ResourceType`]=G.ResourceType,G.Tags.forEach((K,L)=>{z[`TagSpecification.${J+1}.Tag.${L+1}.Key`]=K.Key,z[`TagSpecification.${J+1}.Tag.${L+1}.Value`]=K.Value})});let H=await this.client.request({service:"ec2",region:this.region,method:"POST",path:"/",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(z).toString()}),B=H.RunInstancesResponse||H;return{Instances:this.parseInstances(B.instancesSet?.item||B.instancesSet)}}encodeIpPermissions(q,z){z.forEach((H,B)=>{let G=`IpPermissions.${B+1}`;if(H.IpProtocol!==void 0)q[`${G}.IpProtocol`]=H.IpProtocol;if(H.FromPort!==void 0)q[`${G}.FromPort`]=String(H.FromPort);if(H.ToPort!==void 0)q[`${G}.ToPort`]=String(H.ToPort);if(H.IpRanges)H.IpRanges.forEach((J,K)=>{if(J.CidrIp)q[`${G}.IpRanges.${K+1}.CidrIp`]=J.CidrIp;if(J.Description)q[`${G}.IpRanges.${K+1}.Description`]=J.Description});if(H.Ipv6Ranges)H.Ipv6Ranges.forEach((J,K)=>{if(J.CidrIpv6)q[`${G}.Ipv6Ranges.${K+1}.CidrIpv6`]=J.CidrIpv6;if(J.Description)q[`${G}.Ipv6Ranges.${K+1}.Description`]=J.Description});if(H.UserIdGroupPairs)H.UserIdGroupPairs.forEach((J,K)=>{if(J.GroupId)q[`${G}.Groups.${K+1}.GroupId`]=J.GroupId;if(J.UserId)q[`${G}.Groups.${K+1}.UserId`]=J.UserId;if(J.Description)q[`${G}.Groups.${K+1}.Description`]=J.Description})})}parseArray(q){if(!q)return[];return Array.isArray(q)?q:[q]}parseFirstIpv6Address(q){for(let z of this.parseArray(q))for(let H of this.parseArray(z?.ipv6AddressesSet?.item))if(H?.ipv6Address)return H.ipv6Address;return}parseTags(q){return this.parseArray(q).map((z)=>({Key:z.key,Value:z.value}))}parseReservations(q){return this.parseArray(q).map((z)=>({ReservationId:z.reservationId,Instances:this.parseInstances(z.instancesSet?.item||z.instancesSet)}))}parseInstances(q){return this.parseArray(q).map((z)=>({InstanceId:z.instanceId,ImageId:z.imageId,InstanceType:z.instanceType,State:z.instanceState?{Code:Number.parseInt(z.instanceState.code),Name:z.instanceState.name}:void 0,PrivateIpAddress:z.privateIpAddress,PublicIpAddress:z.ipAddress,Ipv6Address:this.parseFirstIpv6Address(z.networkInterfaceSet?.item),SubnetId:z.subnetId,VpcId:z.vpcId,SecurityGroups:this.parseArray(z.groupSet?.item).map((H)=>({GroupId:H.groupId,GroupName:H.groupName})),Tags:this.parseTags(z.tagSet?.item),LaunchTime:z.launchTime,Placement:z.placement?{AvailabilityZone:z.placement.availabilityZone,Tenancy:z.placement.tenancy}:void 0,Architecture:z.architecture,RootDeviceType:z.rootDeviceType,RootDeviceName:z.rootDeviceName,BlockDeviceMappings:this.parseArray(z.blockDeviceMapping?.item).map((H)=>({DeviceName:H.deviceName,Ebs:H.ebs?{VolumeId:H.ebs.volumeId,Status:H.ebs.status,AttachTime:H.ebs.attachTime,DeleteOnTermination:H.ebs.deleteOnTermination==="true"}:void 0})),IamInstanceProfile:z.iamInstanceProfile?{Arn:z.iamInstanceProfile.arn,Id:z.iamInstanceProfile.id}:void 0}))}parseIpPermissions(q){return this.parseArray(q).map((z)=>({IpProtocol:z.ipProtocol,FromPort:z.fromPort?Number.parseInt(z.fromPort):void 0,ToPort:z.toPort?Number.parseInt(z.toPort):void 0,IpRanges:this.parseArray(z.ipRanges?.item).map((H)=>({CidrIp:H.cidrIp,Description:H.description})),Ipv6Ranges:this.parseArray(z.ipv6Ranges?.item).map((H)=>({CidrIpv6:H.cidrIpv6,Description:H.description})),UserIdGroupPairs:this.parseArray(z.groups?.item).map((H)=>({GroupId:H.groupId,UserId:H.userId,Description:H.description}))}))}}
+export{Q as Ye};

package/dist/bin/chunk-f11xf3n6.js

@@ -0,0 +1,2 @@
+import{dh as _}from"./chunk-xyt490vp.js";class ${client;region;constructor(j="us-east-1",q){this.region=j,this.client=new _(void 0,{profile:q})}async createStack(j){let q={Action:"CreateStack",StackName:j.stackName,Version:"2010-05-15"};if(j.templateBody)q.TemplateBody=j.templateBody;else if(j.templateUrl)q.TemplateURL=j.templateUrl;else throw Error("Either templateBody or templateUrl must be provided");if(j.parameters)j.parameters.forEach((z,H)=>{q[`Parameters.member.${H+1}.ParameterKey`]=z.ParameterKey,q[`Parameters.member.${H+1}.ParameterValue`]=z.ParameterValue});if(j.capabilities)j.capabilities.forEach((z,H)=>{q[`Capabilities.member.${H+1}`]=z});if(j.roleArn)q.RoleARN=j.roleArn;if(j.tags)j.tags.forEach((z,H)=>{q[`Tags.member.${H+1}.Key`]=z.Key,q[`Tags.member.${H+1}.Value`]=z.Value});if(j.timeoutInMinutes)q.TimeoutInMinutes=j.timeoutInMinutes;if(j.onFailure)q.OnFailure=j.onFailure;let G=await this.client.request({service:"cloudformation",region:this.region,method:"POST",path:"/",body:new URLSearchParams(q).toString()});return{StackId:G.StackId||G.CreateStackResult?.StackId}}async updateStack(j){let q={Action:"UpdateStack",StackName:j.stackName,Version:"2010-05-15"};if(j.templateBody)q.TemplateBody=j.templateBody;else if(j.templateUrl)q.TemplateURL=j.templateUrl;if(j.parameters)j.parameters.forEach((z,H)=>{if(q[`Parameters.member.${H+1}.ParameterKey`]=z.ParameterKey,z.UsePreviousValue)q[`Parameters.member.${H+1}.UsePreviousValue`]="true";else q[`Parameters.member.${H+1}.ParameterValue`]=z.ParameterValue});if(j.capabilities)j.capabilities.forEach((z,H)=>{q[`Capabilities.member.${H+1}`]=z});if(j.roleArn)q.RoleARN=j.roleArn;if(j.tags)j.tags.forEach((z,H)=>{q[`Tags.member.${H+1}.Key`]=z.Key,q[`Tags.member.${H+1}.Value`]=z.Value});let G=await this.client.request({service:"cloudformation",region:this.region,method:"POST",path:"/",body:new URLSearchParams(q).toString()});return{StackId:G.StackId||G.UpdateStackResult?.StackId}}async deleteStack(j,q,G){let z={Action:"DeleteStack",StackName:j,Version:"2010-05-15"};if(q)z.RoleARN=q;if(G&&G.length>0)G.forEach((H,Q)=>{z[`RetainResources.member.${Q+1}`]=H});await this.client.request({service:"cloudformation",region:this.region,method:"POST",path:"/",body:new URLSearchParams(z).toString()})}async describeStacks(j={}){let q={Action:"DescribeStacks",Version:"2010-05-15"};if(j.stackName)q.StackName=j.stackName;let G=await this.client.request({service:"cloudformation",region:this.region,method:"POST",path:"/",body:new URLSearchParams(q).toString()});return{Stacks:this.parseStacksResponse(G)}}async describeStackEvents(j){let q={Action:"DescribeStackEvents",StackName:j,Version:"2010-05-15"},G=await this.client.request({service:"cloudformation",region:this.region,method:"POST",path:"/",body:new URLSearchParams(q).toString()});return{StackEvents:this.parseStackEvents(G)}}async listStackResources(j){let q={Action:"ListStackResources",StackName:j,Version:"2010-05-15"},z=(await this.client.request({service:"cloudformation",region:this.region,method:"POST",path:"/",body:new URLSearchParams(q).toString()}))?.ListStackResourcesResult?.StackResourceSummaries?.member,H=[];if(z)H=Array.isArray(z)?z:[z];return{StackResourceSummaries:H}}async waitForStack(j,q){let G={"stack-create-complete":["CREATE_COMPLETE"],"stack-update-complete":["UPDATE_COMPLETE"],"stack-delete-complete":["DELETE_COMPLETE"]},z=["CREATE_FAILED","ROLLBACK_FAILED","ROLLBACK_COMPLETE","UPDATE_ROLLBACK_FAILED","UPDATE_ROLLBACK_COMPLETE"],H=G[q],Q=360,J=0;while(J<360)try{let I=await this.describeStacks({stackName:j});if(I.Stacks.length===0){if(q==="stack-delete-complete")return;if(J%10===0)console.log(`[waitForStack] Attempt ${J}: Stack not visible yet`);await new Promise((O)=>setTimeout(O,2000)),J++;continue}let L=I.Stacks[0];if(J%10===0)console.log(`[waitForStack] Attempt ${J}: Status = ${L.StackStatus}${L.StackStatusReason?` (${L.StackStatusReason})`:""}`);if(H.includes(L.StackStatus))return;if((q==="stack-create-complete"||q==="stack-update-complete")&&(L.StackStatus==="DELETE_IN_PROGRESS"||L.StackStatus==="DELETE_COMPLETE")){console.log("[waitForStack] Stack is being deleted (creation/update failed)");let O="";try{let U=await this.describeStackEvents(j);console.log("[waitForStack] Stack events (most recent first):");for(let X of U.StackEvents.slice(0,15))if(X.ResourceStatus.includes("FAILED")||X.ResourceStatusReason){if(console.log(`  ${X.LogicalResourceId}: ${X.ResourceStatus} - ${X.ResourceStatusReason||"No reason provided"}`),X.ResourceStatus.includes("FAILED")&&X.ResourceStatusReason&&!O)O=X.ResourceStatusReason}}catch{}let V=O||L.StackStatusReason||"Check CloudFormation console for details.";throw Error(`Stack creation/update failed - stack is being deleted. Reason: ${V}`)}if(L.StackStatus==="DELETE_FAILED"&&q==="stack-delete-complete"){let O=Error("Stack deletion failed - may have resources that need to be retained");throw O.code="DELETE_FAILED",O.stackStatus=L.StackStatus,O.statusReason=L.StackStatusReason,O}if(z.includes(L.StackStatus))throw Error(`Stack reached failure status: ${L.StackStatus}`);await new Promise((O)=>setTimeout(O,5000)),J++}catch(I){if(q==="stack-delete-complete"&&I.message?.includes("does not exist"))return;if(q==="stack-create-complete"&&I.message?.includes("does not exist")){if(J%10===0)console.log(`[waitForStack] Attempt ${J}: Stack does not exist (error), retrying...`);await new Promise((L)=>setTimeout(L,2000)),J++;continue}throw console.log(`[waitForStack] Unexpected error: ${I.message}`),I}throw console.log(`[waitForStack] Timeout after ${J} attempts`),Error(`Timeout waiting for stack to reach ${q}`)}async validateTemplate(j){let q={Action:"ValidateTemplate",TemplateBody:j,Version:"2010-05-15"};return await this.client.request({service:"cloudformation",region:this.region,method:"POST",path:"/",body:new URLSearchParams(q).toString()})}async listStacks(j){let q={Action:"ListStacks",Version:"2010-05-15"};if(j)j.forEach((I,L)=>{q[`StackStatusFilter.member.${L+1}`]=I});let G=await this.client.request({service:"cloudformation",region:this.region,method:"POST",path:"/",body:new URLSearchParams(q).toString()}),z=G.ListStacksResponse||G,H=z.ListStacksResult||z,Q=H.StackSummaries?.member||H.StackSummaries||[];return{StackSummaries:(Array.isArray(Q)?Q:Q?[Q]:[]).map((I)=>({StackId:I.StackId||"",StackName:I.StackName||"",TemplateDescription:I.TemplateDescription,CreationTime:I.CreationTime||"",LastUpdatedTime:I.LastUpdatedTime,DeletionTime:I.DeletionTime,StackStatus:I.StackStatus||""}))}}async createChangeSet(j){let q={Action:"CreateChangeSet",StackName:j.stackName,ChangeSetName:j.changeSetName,Version:"2010-05-15"};if(j.templateBody)q.TemplateBody=j.templateBody;else if(j.templateUrl)q.TemplateURL=j.templateUrl;if(j.parameters)j.parameters.forEach((z,H)=>{q[`Parameters.member.${H+1}.ParameterKey`]=z.ParameterKey,q[`Parameters.member.${H+1}.ParameterValue`]=z.ParameterValue});if(j.capabilities)j.capabilities.forEach((z,H)=>{q[`Capabilities.member.${H+1}`]=z});if(j.changeSetType)q.ChangeSetType=j.changeSetType;let G=await this.client.request({service:"cloudformation",region:this.region,method:"POST",path:"/",body:new URLSearchParams(q).toString()});return{Id:G.Id,StackId:G.StackId}}async describeChangeSet(j,q){let G={Action:"DescribeChangeSet",StackName:j,ChangeSetName:q,Version:"2010-05-15"};return await this.client.request({service:"cloudformation",region:this.region,method:"POST",path:"/",body:new URLSearchParams(G).toString()})}async executeChangeSet(j,q){let G={Action:"ExecuteChangeSet",StackName:j,ChangeSetName:q,Version:"2010-05-15"};await this.client.request({service:"cloudformation",region:this.region,method:"POST",path:"/",body:new URLSearchParams(G).toString()})}async deleteChangeSet(j,q){let G={Action:"DeleteChangeSet",StackName:j,ChangeSetName:q,Version:"2010-05-15"};await this.client.request({service:"cloudformation",region:this.region,method:"POST",path:"/",body:new URLSearchParams(G).toString()})}async getStackOutputs(j){let q=await this.describeStacks({stackName:j});if(!q.Stacks||q.Stacks.length===0)throw Error(`Stack ${j} not found`);let G=q.Stacks[0],z={};if(G.Outputs)for(let H of G.Outputs)z[H.OutputKey]=H.OutputValue;return z}async getTemplate(j){let q={Action:"GetTemplate",StackName:j,Version:"2010-05-15"},G=await this.client.request({service:"cloudformation",region:this.region,method:"POST",path:"/",body:new URLSearchParams(q).toString()});return{TemplateBody:G?.GetTemplateResult?.TemplateBody||G?.TemplateBody||""}}parseStacksResponse(j){let q=[],G=j?.DescribeStacksResult?.Stacks?.member||j?.Stacks?.member||j?.Stacks||j;if(G&&!Array.isArray(G))G=[G];if(Array.isArray(G)){for(let z of G)if(z.StackId||z.StackName){let H;if(z.Outputs?.member)H=(Array.isArray(z.Outputs.member)?z.Outputs.member:[z.Outputs.member]).map((J)=>({OutputKey:J.OutputKey,OutputValue:J.OutputValue,Description:J.Description,ExportName:J.ExportName}));q.push({StackId:z.StackId,StackName:z.StackName,StackStatus:z.StackStatus,CreationTime:z.CreationTime,LastUpdatedTime:z.LastUpdatedTime,StackStatusReason:z.StackStatusReason,Outputs:H})}}else if(j.StackId)q.push({StackId:j.StackId,StackName:j.StackName,StackStatus:j.StackStatus,CreationTime:j.CreationTime,LastUpdatedTime:j.LastUpdatedTime});return q}parseStackEvents(j){let q=[],G=j?.DescribeStackEventsResult?.StackEvents?.member||j?.StackEvents?.member||j?.StackEvents||[];if(G&&!Array.isArray(G))G=[G];for(let z of G)if(z.LogicalResourceId)q.push({Timestamp:z.Timestamp,ResourceType:z.ResourceType,LogicalResourceId:z.LogicalResourceId,ResourceStatus:z.ResourceStatus,ResourceStatusReason:z.ResourceStatusReason});return q}async waitForStackWithProgress(j,q,G){let z={"stack-create-complete":["CREATE_COMPLETE"],"stack-update-complete":["UPDATE_COMPLETE"],"stack-delete-complete":["DELETE_COMPLETE"]},H=["CREATE_FAILED","ROLLBACK_FAILED","ROLLBACK_COMPLETE","UPDATE_ROLLBACK_FAILED","UPDATE_ROLLBACK_COMPLETE"],Q=z[q],J=360,I=0,L=new Set;while(I<360)try{if(G)try{let X=[...(await this.describeStackEvents(j)).StackEvents||[]].reverse();for(let Y of X){let Z=`${Y.LogicalResourceId}-${Y.ResourceStatus}-${Y.Timestamp}`;if(!L.has(Z))L.add(Z),G({resourceId:Y.LogicalResourceId,resourceType:Y.ResourceType,status:Y.ResourceStatus,reason:Y.ResourceStatusReason,timestamp:Y.Timestamp})}}catch{}let O=await this.describeStacks({stackName:j});if(O.Stacks.length===0){if(q==="stack-delete-complete")return;await new Promise((U)=>setTimeout(U,2000)),I++;continue}let V=O.Stacks[0];if(Q.includes(V.StackStatus))return;if(V.StackStatus==="DELETE_FAILED"&&q==="stack-delete-complete"){let U=Error("Stack deletion failed - may have resources that need to be retained");throw U.code="DELETE_FAILED",U.stackStatus=V.StackStatus,U.statusReason=V.StackStatusReason,U}if(H.includes(V.StackStatus))throw Error(`Stack reached failure status: ${V.StackStatus}`);await new Promise((U)=>setTimeout(U,3000)),I++}catch(O){if(q==="stack-delete-complete"&&O.message?.includes("does not exist"))return;if(q==="stack-create-complete"&&O.message?.includes("does not exist")){await new Promise((V)=>setTimeout(V,2000)),I++;continue}throw O}throw Error(`Timeout waiting for stack to reach ${q}`)}async waitForStackComplete(j,q=120,G=5000){let z=["CREATE_COMPLETE","UPDATE_COMPLETE","DELETE_COMPLETE"],H=["CREATE_FAILED","UPDATE_FAILED","DELETE_FAILED","ROLLBACK_COMPLETE","ROLLBACK_FAILED","UPDATE_ROLLBACK_COMPLETE","UPDATE_ROLLBACK_FAILED"];for(let Q=0;Q<q;Q++)try{let J=await this.describeStacks({stackName:j});if(J.Stacks.length===0)return{success:!0,status:"DELETE_COMPLETE"};let I=J.Stacks[0],L=I.StackStatus;if(z.includes(L))return{success:!0,status:L};if(H.includes(L))return{success:!1,status:L,reason:I.StackStatusReason};await new Promise((O)=>setTimeout(O,G))}catch(J){if(J.message?.includes("does not exist"))return{success:!0,status:"DELETE_COMPLETE"};throw J}return{success:!1,status:"TIMEOUT",reason:"Timeout waiting for stack operation"}}}
+export{$ as jg};

package/dist/bin/chunk-fq7ktvgy.js

@@ -0,0 +1,3 @@
+import{_d as E}from"./chunk-r61qmhv1.js";import{jg as n}from"./chunk-f11xf3n6.js";import{qg as C}from"./chunk-54bqchag.js";import{Lg as k,Mg as Xz,Ng as l,Pg as F,Qg as Y,Rg as m,Yg as Zz}from"./chunk-xjp3v95e.js";import{dh as Jz}from"./chunk-xyt490vp.js";import{$h as $z,Yo as Yz,ai as Wz,bi as Mz,cp as Hz,jo as Oz,ko as _z,mo as Kz,oo as Qz,po as jz}from"./chunk-5bhx3bsa.js";import{pp as t}from"./chunk-c8sypnbe.js";import{existsSync as Lz,readdirSync as Uz,readFileSync as Bz,statSync as Ez}from"node:fs";import{join as Pz,relative as Rz}from"node:path";class d{client;region;constructor(z="us-east-1",G){this.region=z,this.client=new Jz}async createSecret(z){let G={Name:z.Name};if(z.Description)G.Description=z.Description;if(z.KmsKeyId)G.KmsKeyId=z.KmsKeyId;if(z.SecretBinary)G.SecretBinary=z.SecretBinary;if(z.SecretString)G.SecretString=z.SecretString;if(z.Tags&&z.Tags.length>0)G.Tags=z.Tags;if(z.AddReplicaRegions&&z.AddReplicaRegions.length>0)G.AddReplicaRegions=z.AddReplicaRegions;if(z.ForceOverwriteReplicaSecret!==void 0)G.ForceOverwriteReplicaSecret=z.ForceOverwriteReplicaSecret;G.ClientRequestToken=z.ClientRequestToken||crypto.randomUUID();let J=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.CreateSecret","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(G)});return{ARN:J.ARN,Name:J.Name,VersionId:J.VersionId,ReplicationStatus:J.ReplicationStatus}}async updateSecret(z){let G={SecretId:z.SecretId};if(z.Description)G.Description=z.Description;if(z.KmsKeyId)G.KmsKeyId=z.KmsKeyId;if(z.SecretBinary)G.SecretBinary=z.SecretBinary;if(z.SecretString)G.SecretString=z.SecretString;let J=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.UpdateSecret","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(G)});return{ARN:J.ARN,Name:J.Name,VersionId:J.VersionId}}async putSecretValue(z){let G={SecretId:z.SecretId};if(z.SecretBinary)G.SecretBinary=z.SecretBinary;if(z.SecretString)G.SecretString=z.SecretString;if(z.VersionStages&&z.VersionStages.length>0)G.VersionStages=z.VersionStages;if(z.ClientRequestToken)G.ClientRequestToken=z.ClientRequestToken;let J=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.PutSecretValue","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(G)});return{ARN:J.ARN,Name:J.Name,VersionId:J.VersionId,VersionStages:J.VersionStages}}async getSecretValue(z){let G={SecretId:z.SecretId};if(z.VersionId)G.VersionId=z.VersionId;if(z.VersionStage)G.VersionStage=z.VersionStage;let J=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.GetSecretValue","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(G)});return{ARN:J.ARN,Name:J.Name,VersionId:J.VersionId,SecretBinary:J.SecretBinary,SecretString:J.SecretString,VersionStages:J.VersionStages,CreatedDate:J.CreatedDate}}async describeSecret(z){let G={SecretId:z},J=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.DescribeSecret","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(G)});return this.parseSecret(J)}async listSecrets(z){let G={};if(z?.MaxResults)G.MaxResults=z.MaxResults;if(z?.NextToken)G.NextToken=z.NextToken;if(z?.Filters&&z.Filters.length>0)G.Filters=z.Filters;if(z?.SortOrder)G.SortOrder=z.SortOrder;let J=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.ListSecrets","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(G)});return{SecretList:J.SecretList?.map((X)=>this.parseSecret(X)),NextToken:J.NextToken}}async deleteSecret(z){let G={SecretId:z.SecretId};if(z.RecoveryWindowInDays!==void 0)G.RecoveryWindowInDays=z.RecoveryWindowInDays;if(z.ForceDeleteWithoutRecovery!==void 0)G.ForceDeleteWithoutRecovery=z.ForceDeleteWithoutRecovery;let J=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.DeleteSecret","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(G)});return{ARN:J.ARN,Name:J.Name,DeletionDate:J.DeletionDate}}async restoreSecret(z){let G={SecretId:z},J=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.RestoreSecret","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(G)});return{ARN:J.ARN,Name:J.Name}}async rotateSecret(z){let G={SecretId:z.SecretId};if(z.ClientRequestToken)G.ClientRequestToken=z.ClientRequestToken;if(z.RotationLambdaARN)G.RotationLambdaARN=z.RotationLambdaARN;if(z.RotationRules)G.RotationRules=z.RotationRules;if(z.RotateImmediately!==void 0)G.RotateImmediately=z.RotateImmediately;let J=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.RotateSecret","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(G)});return{ARN:J.ARN,Name:J.Name,VersionId:J.VersionId}}async cancelRotateSecret(z){let G={SecretId:z},J=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.CancelRotateSecret","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(G)});return{ARN:J.ARN,Name:J.Name}}async getResourcePolicy(z){let G={SecretId:z},J=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.GetResourcePolicy","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(G)});return{ARN:J.ARN,Name:J.Name,ResourcePolicy:J.ResourcePolicy}}async putResourcePolicy(z){let G={SecretId:z.SecretId,ResourcePolicy:z.ResourcePolicy};if(z.BlockPublicPolicy!==void 0)G.BlockPublicPolicy=z.BlockPublicPolicy;let J=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.PutResourcePolicy","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(G)});return{ARN:J.ARN,Name:J.Name}}async deleteResourcePolicy(z){let G={SecretId:z},J=await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.DeleteResourcePolicy","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(G)});return{ARN:J.ARN,Name:J.Name}}async tagResource(z){let G={SecretId:z.SecretId,Tags:z.Tags};await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.TagResource","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(G)})}async untagResource(z){let G={SecretId:z.SecretId,TagKeys:z.TagKeys};await this.client.request({service:"secretsmanager",region:this.region,method:"POST",path:"/",headers:{"X-Amz-Target":"secretsmanager.UntagResource","Content-Type":"application/x-amz-json-1.1"},body:JSON.stringify(G)})}async setString(z,G,J){try{let X=await this.putSecretValue({SecretId:z,SecretString:G});return{ARN:X.ARN,VersionId:X.VersionId}}catch(X){if(X.code==="ResourceNotFoundException"){let Z=await this.createSecret({Name:z,SecretString:G,Description:J?.description,KmsKeyId:J?.kmsKeyId,Tags:J?.tags});return{ARN:Z.ARN,VersionId:Z.VersionId}}throw X}}async setJson(z,G,J){return this.setString(z,JSON.stringify(G),J)}async getString(z){return(await this.getSecretValue({SecretId:z})).SecretString}async getJson(z){let G=await this.getString(z);if(G)return JSON.parse(G);return}async listAll(){let z=[],G;do{let J=await this.listSecrets({NextToken:G});if(J.SecretList)z.push(...J.SecretList);G=J.NextToken}while(G);return z}parseSecret(z){return{ARN:z.ARN,Name:z.Name,Description:z.Description,KmsKeyId:z.KmsKeyId,RotationEnabled:z.RotationEnabled,RotationLambdaARN:z.RotationLambdaARN,RotationRules:z.RotationRules,LastRotatedDate:z.LastRotatedDate,LastChangedDate:z.LastChangedDate,LastAccessedDate:z.LastAccessedDate,DeletedDate:z.DeletedDate,NextRotationDate:z.NextRotationDate,Tags:z.Tags,SecretVersionsToStages:z.SecretVersionsToStages,CreatedDate:z.CreatedDate,PrimaryRegion:z.PrimaryRegion}}}function q(z,G){let J=z.environments?.[G]?.app;if(!J)throw Error(`No serverless app configured for environment '${G}'. Add environments.${G}.app to your config.`);let X=z.project.slug,Z=z.environments?.[G]?.region||z.project.region||"us-east-1";return{app:J,slug:X,region:Z,stackName:$z(z,G),artifactBucket:Wz(X,G),assetsBucket:Mz(X,G)}}function iz(z,G){let J=q(z,G),X=`${J.slug}-${G}`;return{region:J.region,slug:J.slug,stackName:J.stackName,functions:{http:`${X}-http`,queue:`${X}-queue`,cli:`${X}-cli`}}}async function N(z,G=8){let J;for(let X=0;X<G;X++)try{return await z()}catch(Z){let $=Z?.code||Z?.name||"",W=String(Z?.message||"");if($==="ResourceConflictException"||/update is in progress|currently in the following state/i.test(W)){J=Z,await new Promise((M)=>setTimeout(M,3000));continue}throw Z}throw J}var Tz=(z,G)=>`releases/${z}/${G}/current.json`;async function p(z,G,J,X){try{return await z.getObjectJson(G,Tz(J,X))}catch{return null}}async function Vz(z,G,J,X,Z){await z.putObjectJson(G,Tz(J,X),Z)}async function hz(z,G){if(!z.secrets)return{};let J=new d(G),X={},Z=Array.isArray(z.secrets)?z.secrets.map(($)=>({envName:$.split("/").pop().toUpperCase().replace(/[^A-Z0-9_]/g,"_"),secretId:$})):Object.entries(z.secrets).map(([$,W])=>({envName:$,secretId:W}));if(Array.isArray(z.secrets)){let $=new Map;for(let{envName:M,secretId:O}of Z)$.set(M,[...$.get(M)??[],O]);let W=[...$.entries()].filter(([,M])=>M.length>1);if(W.length){let M=W.map(([O,K])=>`${O} ← ${K.join(", ")}`).join("; ");throw Error(`serverless secrets: multiple secrets map to the same env var (${M}). Use the map form { ENV_NAME: 'secret/id' } to disambiguate.`)}}for(let{envName:$,secretId:W}of Z){let O=(await J.getSecretValue({SecretId:W})).SecretString??"";try{let K=JSON.parse(O);if(K&&typeof K==="object"&&!Array.isArray(K)){for(let[H,j]of Object.entries(K))X[H]=String(j);continue}}catch{}X[$]=O}return X}function Iz(z,G){let J={},X=G.DbProxyEndpoint||G.DbEndpoint;if(X)J.DB_CONNECTION="mysql",J.DB_HOST=X,J.DB_PORT="3306",J.DB_DATABASE=J.DB_DATABASE||"app";if(G.CacheEndpoint){if(J.REDIS_HOST=G.CacheEndpoint,J.REDIS_PORT="6379",z.cache?.driver==="elasticache")J.CACHE_STORE="redis",J.CACHE_DRIVER="redis",J.SESSION_DRIVER="redis"}return J}function o(z,G,J,X,Z,$,W,M={}){let O=z.kind==="php"?Yz({cacheDriver:z.cache?.driver==="elasticache"?"redis":"dynamodb"}):{};return{TSCLOUD_LAMBDA_MODE:X,TSCLOUD_ENV:J,MAINTENANCE_MODE:"0",...z.octane?{TSCLOUD_OCTANE:"1"}:{},...z.serveAssets?{TSCLOUD_SERVE_ASSETS:"1"}:{},...z.redirectRobotsTxt===!1?{TSCLOUD_REDIRECT_ROBOTS_TXT:"0"}:{},...O,...M,...G.app.cache?.driver!=="elasticache"?{TSCLOUD_CACHE_TABLE:`${G.slug}-${J}-cache`}:{},...W?{TSCLOUD_QUEUE:W,SQS_QUEUE:W}:{},...$?{ASSET_URL:$}:{},...z.env??{},...Z}}function Nz(z){let G=z.slice(z.lastIndexOf(".")).toLowerCase();return{".html":"text/html",".css":"text/css",".js":"text/javascript",".mjs":"text/javascript",".json":"application/json",".svg":"image/svg+xml",".png":"image/png",".jpg":"image/jpeg",".jpeg":"image/jpeg",".gif":"image/gif",".webp":"image/webp",".ico":"image/x-icon",".woff":"font/woff",".woff2":"font/woff2",".txt":"text/plain",".map":"application/json"}[G]??"application/octet-stream"}function*Fz(z){for(let G of Uz(z)){let J=Pz(z,G);if(Ez(J).isDirectory())yield*Fz(J);else yield J}}async function Cz(z,G,J,X,Z=!1){let $=0;for(let W of Fz(J)){let M=Rz(J,W).replace(/\\/g,"/");if(!Z&&M.split("/").some((O)=>O.startsWith(".")))continue;await z.putObject({bucket:G,key:`${X}/${M}`,body:Bz(W),contentType:Nz(W),cacheControl:"public, max-age=31536000, immutable"}),$++}return $}function Sz(z,G){let J=Object.entries(G).reduce((X,[Z,$])=>X+Buffer.byteLength(`${Z}=${$}`,"utf8"),0);if(J>4096){let X=Object.entries(G).map(([Z,$])=>[Z,Buffer.byteLength(`${Z}=${$}`,"utf8")]).sort((Z,$)=>$[1]-Z[1]).slice(0,5).map(([Z,$])=>`${Z} (${$}B)`).join(", ");throw Error(`${z}: environment variables total ${J}B, over AWS's 4096B limit (${J-4096}B too large). Largest: ${X}. Move large/secret values out of env — store them in Secrets Manager and fetch at cold start.`)}}async function b(z,G,J,X){Sz(G,J),await N(()=>z.updateFunctionConfiguration({FunctionName:G,Environment:{Variables:J}})),await z.waitForFunctionActive(G,120);let Z=X.kind==="image"?{FunctionName:G,ImageUri:X.imageUri}:{FunctionName:G,S3Bucket:X.bucket,S3Key:X.key};await N(()=>z.updateFunctionCode(Z)),await z.waitForFunctionActive(G,120)}async function c(z,G){let X=(await N(()=>z.publishVersion({FunctionName:G}))).Version;if(!X)throw Error(`publishVersion returned no version for ${G}`);return await N(()=>z.updateAlias({FunctionName:G,Name:"live",FunctionVersion:X})),X}async function rz(z,G,J={}){let X=q(z,G),{app:Z,slug:$,region:W,stackName:M,artifactBucket:O}=X,K=J.projectRoot??process.cwd();m(`Deploying serverless app: ${$} (${G})`),F(`Stack: ${M}`),F(`Region: ${W}`);let H=new C(W),j=new n(W),V=new E(W),L=Z.kind==="php",U=Z.packaging==="image",Q=Kz(Z),R,A,w,i,g=[];if(U&&Q.usesLayer&&Q.layerKind!=="php")throw Error(`packaging: 'image' currently supports PHP and managed Node runtimes. ${Q.kind}${Q.kind==="node"?` ${Q.version}`:""} uses a custom runtime — `+"use the default zip packaging (the runtime layer is built + attached automatically).");if(U){Y("Building + pushing container image");let{buildAndPushServerlessImage:_}=await import("./chunk-r6gdcz5c.js"),P=await _({app:Z,projectRoot:K,region:W,repository:`${$}-${G}`,skipBuild:J.skipBuild,onStep:(D)=>F(`  ${D}`)});R=P.handlers,A={kind:"image",imageUri:P.imageUri},w=P.tag,g.push({ParameterKey:"ImageUri",ParameterValue:P.imageUri})}else{Y("Packaging application");let _=L?Hz({projectRoot:K,app:Z,skipBuild:J.skipBuild,onStep:(B)=>F(`  ${B}`)}):await _z({projectRoot:K,app:Z,skipBuild:J.skipBuild,onStep:(B)=>F(`  ${B}`)}),P=Oz($,G,_.sha256);if(F(`Artifact: ${_.sha256.slice(0,12)} (${(_.zip.length/1024).toFixed(0)} KB)`),R=_.handlers,w=_.sha256,Q.usesLayer){let B=Q.layerEnvVar?process.env[Q.layerEnvVar]:void 0;if(i=Z.layers??(B?[B]:void 0),!i?.length){let Dz=Q.layerKind==="php"?"serverless:build-php-layer":Q.layerKind==="bun"?"serverless:build-bun-layer":"serverless:build-node-layer";throw Error(`${Q.kind} apps on provided.al2023 need a runtime layer. Set environments.<env>.app.layers or the ${Q.layerEnvVar} env var (build one with \`cloud ${Dz}\`)${Q.kind==="node"?", or use a managed Node version (18/20/22)":""}.`)}}if(!await H.bucketExists(O))Y(`Creating artifact bucket ${O}`),await H.createBucket(O);if(await H.headObject(O,P).then((B)=>B!==null).catch(()=>!1))F("Artifact already uploaded — reusing");else Y("Uploading artifact"),await H.putObject({bucket:O,key:P,body:_.zip,contentType:"application/zip"});A={kind:"zip",bucket:O,key:P},g.push({ParameterKey:"ArtifactBucket",ParameterValue:O},{ParameterKey:"ArtifactKey",ParameterValue:P})}let T=jz({config:z,environment:G,app:Z,handlers:R,runtimeLayers:i}),e=JSON.stringify(T.template),zz=["CAPABILITY_NAMED_IAM"],S=await j.describeStacks({stackName:M}).then((_)=>_.Stacks[0]?.StackStatus).catch(()=>{return}),f=S!==void 0;if(S&&/DELETE_IN_PROGRESS/.test(S))Y("Waiting for an in-progress stack delete to finish"),await j.waitForStack(M,"stack-delete-complete").catch(()=>{}),f=!1;else if(S&&/(?:ROLLBACK_COMPLETE|REVIEW_IN_PROGRESS|CREATE_FAILED)/.test(S))Y(`Deleting unusable stack (status ${S}) before recreate`),await j.deleteStack(M),await j.waitForStack(M,"stack-delete-complete").catch(()=>{}),f=!1;Y(f?"Updating infrastructure stack":"Creating infrastructure stack");try{if(f)await j.updateStack({stackName:M,templateBody:e,parameters:g,capabilities:zz}),await j.waitForStack(M,"stack-update-complete");else await j.createStack({stackName:M,templateBody:e,parameters:g,capabilities:zz,onFailure:"DELETE"}),await j.waitForStack(M,"stack-create-complete")}catch(_){if(/No updates are to be performed/i.test(String(_?.message)))F("No infrastructure changes");else throw _}let r=await j.getStackOutputs(M).catch(()=>({})),h;if(Z.assets){let _=Pz(K,Z.assets);if(Lz(_)){let P=Z.assetDomain||r.AssetsCdnDomain;h=P?`https://${P}/${w}`:void 0,Y(`Syncing assets from ${Z.assets}`);let D=await Cz(H,X.assetsBucket,_,w,Z.dotFilesAsAssets);F(`Uploaded ${D} asset(s)${h?` → ${h}`:""}`)}else l(`Assets directory not found: ${_}`)}Y("Resolving secrets");let x=await hz(Z,W);if(Z.database?.connection==="aurora-serverless")try{let P=await new d(W).getSecretValue({SecretId:`${$}/${G}/db`}),D=JSON.parse(P.SecretString??"{}");if(D.username)x.DB_USERNAME=D.username;if(D.password)x.DB_PASSWORD=D.password}catch(_){l(`Could not resolve Aurora DB credentials: ${_.message}`)}if(!await H.bucketExists(O))await H.createBucket(O);let v=await p(H,O,$,G),I={},a=T.queueNames[0],s=Iz(Z,r);if(Y("Activating functions"),I.http=o(Z,X,G,"http",x,h,a,s),await b(V,T.functionNames.http,I.http,A),I.cli=o(Z,X,G,"cli",x,h,a,s),await b(V,T.functionNames.cli,I.cli,A),T.queueNames.length)I.queue=o(Z,X,G,"queue",x,h,a,s),await b(V,T.functionNames.queue,I.queue,A);let Gz=(Z.provisionedConcurrency??0)>0,u={};if(Gz){if(Y("Publishing versions + flipping live alias"),u.http=await c(V,T.functionNames.http),u.cli=await c(V,T.functionNames.cli),T.queueNames.length)u.queue=await c(V,T.functionNames.queue)}if(await Vz(H,O,$,G,{sha:w,code:A,previousSha:v?.sha,previousCode:v?.code,previousFunctionEnv:v?.functionEnv,...Gz?{functionVersions:u,previousFunctionVersions:v?.functionVersions}:{},functionEnv:I,functionNames:{http:T.functionNames.http,cli:T.functionNames.cli,...T.queueNames.length?{queue:T.functionNames.queue}:{}},assetUrl:h,timestamp:new Date().toISOString()}),!J.skipDeployHooks&&Z.deploy?.length){Y("Running deploy hooks");for(let _ of Z.deploy){F(`  deploy: ${_}`);let P=await V.invoke({FunctionName:T.functionNames.cli,InvocationType:"RequestResponse",Payload:{command:_},LogType:"Tail"});if(P.FunctionError)throw Xz("Deploy hook failed — the new build is ALREADY LIVE."),F(`  Roll back with: cloud serverless:rollback --env ${G}`),Error(`Deploy hook failed (${_}): ${P.Payload}`)}}let y=r.HttpApiEndpoint;if(!J.skipHealthCheck&&y){Y("Health check");try{let _=await fetch(y,{method:"GET"});F(`GET ${y} → ${_.status}`)}catch(_){l(`Health check could not reach ${y}: ${_.message}`)}}Zz(["Serverless deploy complete","",y?`URL:   ${y}`:"",`Stack: ${M}`,`Build: ${w.slice(0,12)}`].filter(Boolean).join(`
+`),"green")}async function az(z,G){let J=q(z,G),X=new C(J.region),Z=new E(J.region),$=await p(X,J.artifactBucket,J.slug,G);if(!$)throw Error("No previous release to redeploy. Run a full deploy first.");m(`Redeploying ${J.slug} (${G}) — build ${$.sha.slice(0,12)}`);for(let[W,M]of Object.entries($.functionNames)){if(!M)continue;Y(`Re-activating ${W} (${M})`),await b(Z,M,$.functionEnv[W]??{},$.code);let O=$.functionVersions?.[W];if(O)await N(()=>Z.updateAlias({FunctionName:M,Name:"live",FunctionVersion:O}))}k("Redeploy complete")}async function sz(z,G){let J=q(z,G),X=new C(J.region),Z=new E(J.region),$=await p(X,J.artifactBucket,J.slug,G);if(!$?.previousCode)throw Error("No previous release to roll back to.");m(`Rolling back ${J.slug} (${G}) → ${$.previousSha?.slice(0,12)}`);for(let[W,M]of Object.entries($.functionNames)){if(!M)continue;Y(`Restoring ${W} (${M})`);let O=$.previousFunctionEnv?.[W]??$.functionEnv[W]??{};await b(Z,M,O,$.previousCode);let K=$.previousFunctionVersions?.[W];if(K)await N(()=>Z.updateAlias({FunctionName:M,Name:"live",FunctionVersion:K}))}await Vz(X,J.artifactBucket,J.slug,G,{...$,sha:$.previousSha??$.sha,code:$.previousCode,functionEnv:$.previousFunctionEnv??$.functionEnv,functionVersions:$.previousFunctionVersions??$.functionVersions,previousSha:void 0,previousCode:void 0,previousFunctionEnv:void 0,previousFunctionVersions:void 0,timestamp:new Date().toISOString()}),k("Rollback complete")}async function oz(z,G,J,X){let Z=q(z,G),$=new E(Z.region),W=`${Z.slug}-${G}-http`,O={...(await $.getFunction(W)).Configuration?.Environment?.Variables??{}};if(O.MAINTENANCE_MODE=J?"1":"0",J&&X)O.MAINTENANCE_BYPASS_SECRET=X;if(!J)delete O.MAINTENANCE_BYPASS_SECRET;if(await N(()=>$.updateFunctionConfiguration({FunctionName:W,Environment:{Variables:O}})),(Z.app.provisionedConcurrency??0)>0)await $.waitForFunctionActive(W,120),await c($,W);k(J?"Application is now in maintenance mode (503)":"Application is live")}async function yz(z,G,J){let X=q(z,G),Z=new E(X.region),$=`${X.slug}-${G}-cli`,W=await Z.invoke({FunctionName:$,InvocationType:"RequestResponse",Payload:{command:J},LogType:"Tail"});if(W.FunctionError)throw Error(`Command failed: ${W.Payload}`);return W.Payload??""}var wz=(z,G)=>`commands/${z}/${G}/history.json`,kz=50;async function qz(z,G,J,X){try{return(await z.getObjectJson(G,wz(J,X)))?.records??[]}catch{return[]}}async function tz(z,G,J){let X=q(z,G),Z=new E(X.region),$=`${X.slug}-${G}-cli`,W=await Z.invoke({FunctionName:$,InvocationType:"RequestResponse",Payload:{command:J},LogType:"Tail"}),M=W.Payload??"",O=W.FunctionError?"error":"ok",K=-1;try{let H=new C(X.region);if(await H.bucketExists(X.artifactBucket)){let j=await qz(H,X.artifactBucket,X.slug,G);K=j.reduce((V,L)=>Math.max(V,L.id),0)+1,j.push({id:K,command:J,timestamp:new Date().toISOString(),status:O,output:M.slice(0,4000)}),await H.putObjectJson(X.artifactBucket,wz(X.slug,G),{records:j.slice(-kz)})}}catch{}if(W.FunctionError)throw Error(`Command failed${K>0?` (#${K})`:""}: ${M}`);return{id:K,status:O,output:M}}async function xz(z,G){let J=q(z,G),X=new C(J.region);return qz(X,J.artifactBucket,J.slug,G)}async function nz(z,G,J){let X=await xz(z,G);if(!X.length)return;return J==null?X[X.length-1]:X.find((Z)=>Z.id===J)}async function ez(z,G,J){let X=Buffer.from(J,"utf-8").toString("base64");return yz(z,G,`tscloud:db-query --sql-base64=${X}`)}async function zG(z,G){let J=q(z,G),X=new n(J.region),Z=new E(J.region),$=new C(J.region),W="not deployed",M={};try{let{Stacks:U}=await X.describeStacks({stackName:J.stackName});W=U?.[0]?.StackStatus??W;for(let Q of U?.[0]?.Outputs??[])if(Q.OutputKey)M[Q.OutputKey]=Q.OutputValue??""}catch{}let O=Qz(J.app,J.slug,G),K=J.app.provisionedConcurrency??0,H=["http","cli",...O.length?["queue"]:[]],j=`${J.slug}-${G}`,V=[];for(let U of H){let Q=`${j}-${U}`,R={mode:U,name:Q,version:"$LATEST"};if(K>0){let A=await Z.getAlias(Q,"live").catch(()=>null);if(A?.FunctionVersion){R.version=A.FunctionVersion;let w=await Z.getProvisionedConcurrencyConfig(Q,"live").catch(()=>null);if(w)R.provisioned={status:w.Status??"-",allocated:w.AllocatedProvisionedConcurrentExecutions??0,requested:w.RequestedProvisionedConcurrentExecutions??0}}}V.push(R)}let L=await p($,J.artifactBucket,J.slug,G).catch(()=>null);return{slug:J.slug,environment:G,region:J.region,stackStatus:W,endpoint:M.HttpApiEndpoint,assetUrl:L?.assetUrl,scheduler:J.app.scheduler??"on",queues:O,provisionedConcurrency:K,functions:V,lastRelease:L?{sha:L.sha,timestamp:L.timestamp}:void 0}}function Az(z,G){return`${z}-${G}-db`}async function GG(z,G,J,X){let Z=q(z,G);if(Z.app.database?.connection!=="aurora-serverless")throw Error("No Aurora Serverless v2 database is configured for this environment.");let{RDSClient:$}=await import("./chunk-4esma5m9.js"),W=new $(Z.region),M=Az(Z.slug,G);Y(`Scaling ${M} → ${J}–${X} ACUs`),await W.modifyDBCluster({DBClusterIdentifier:M,ServerlessV2ScalingConfiguration:{MinCapacity:J,MaxCapacity:X},ApplyImmediately:!0}),k(`Scaling applied to ${M} (takes effect shortly).`)}async function JG(z,G,J){let X=q(z,G);if(X.app.database?.connection!=="aurora-serverless")throw Error("No Aurora Serverless v2 database is configured for this environment.");if(!J.toTime&&!J.latest)throw Error("Specify a restore point: --to <ISO timestamp> or --latest.");let{RDSClient:Z}=await import("./chunk-4esma5m9.js"),$=new Z(X.region),W=Az(X.slug,G),M=J.latest?"latest":J.toTime.toISOString().replace(/[^0-9]/g,"").slice(0,14),O=J.target??`${W}-restore-${M}`;Y(`Restoring ${W} → new cluster ${O} (${J.latest?"latest restorable time":J.toTime.toISOString()})`),await $.restoreDBClusterToPointInTime({DBClusterIdentifier:O,SourceDBClusterIdentifier:W,RestoreToTime:J.toTime,UseLatestRestorableTime:J.latest}),Y("Waiting for the restored cluster to be ready");for(let K=0;K<120;K++){let{DBClusters:H}=await $.describeDBClusters({DBClusterIdentifier:O}),j=H?.[0]?.Status;if(j&&j!=="creating")break;await new Promise((V)=>setTimeout(V,15000))}return Y("Adding a writer instance"),await $.createDBInstance({DBInstanceIdentifier:`${O}-1`,DBClusterIdentifier:O,Engine:"aurora-mysql",DBInstanceClass:"db.serverless"}),k(`Restore complete → cluster ${O} with writer ${O}-1. Point an env's database at it once available.`),O}
+export{d as Id,iz as Jd,hz as Kd,Iz as Ld,o as Md,Sz as Nd,rz as Od,az as Pd,sz as Qd,oz as Rd,yz as Sd,tz as Td,xz as Ud,nz as Vd,ez as Wd,zG as Xd,GG as Yd,JG as Zd};

package/dist/bin/chunk-fyq4th2m.js

@@ -0,0 +1 @@
+import{Gd as a}from"./chunk-m22krd4z.js";import"./chunk-b6by94pk.js";import"./chunk-fq7ktvgy.js";import"./chunk-r61qmhv1.js";import"./chunk-4n0j3n3b.js";import"./chunk-f11xf3n6.js";import"./chunk-54bqchag.js";import"./chunk-xjp3v95e.js";import"./chunk-xyt490vp.js";import"./chunk-5bhx3bsa.js";import"./chunk-c8sypnbe.js";export{a as resolveDashboardData};

package/dist/bin/chunk-g67qr8yf.js

@@ -0,0 +1 @@
+import{Ye as a}from"./chunk-ett305ym.js";import"./chunk-xyt490vp.js";import"./chunk-c8sypnbe.js";export{a as EC2Client};

package/dist/bin/chunk-gc82cx4h.js

@@ -0,0 +1 @@
+import{ch as a,dh as b,eh as c,fh as d}from"./chunk-xyt490vp.js";import"./chunk-c8sypnbe.js";export{a as resolveS3Endpoint,d as detectCredentialSource,c as buildQueryParams,b as AWSClient};