@stacksjs/ts-cloud 0.16.36 → 0.16.38

package/dist/bin/chunk-e51ajfyr.js

@@ -0,0 +1 @@
+import{ls}from"./chunk-7rpj0qhb.js";export{ls as encodeDashboardPayload};

package/dist/bin/{chunk-r3gxhy1k.js → chunk-e6mfcw0v.js}

@@ -1,6 +1,6 @@
-import{Xt}from"./chunk-qxg95ndf.js";var f={};Xt(f,{ProgressBar:()=>v,Spinner:()=>o,box:()=>ve,checkAwsCli:()=>_o,checkAwsCredentials:()=>Oo,colorize:()=>jt,colors:()=>C,confirm:()=>d,error:()=>r,formatBytes:()=>an,formatDuration:()=>b,getAwsAccountId:()=>$o,getAwsRegions:()=>Lo,header:()=>i,info:()=>e,prompt:()=>R,select:()=>ws,step:()=>p,success:()=>n,table:()=>c,warn:()=>a,warning:()=>Er});var C={reset:"\x1B[0m",bright:"\x1B[1m",dim:"\x1B[2m",red:"\x1B[31m",green:"\x1B[32m",yellow:"\x1B[33m",blue:"\x1B[34m",magenta:"\x1B[35m",cyan:"\x1B[36m",white:"\x1B[37m",gray:"\x1B[90m"};function jt(t,s){return`${C[s]}${t}${C.reset}`}function n(t){console.log(`${C.green}✓${C.reset} ${t}`)}function r(t){console.error(`${C.red}✗${C.reset} ${t}`)}function a(t){console.warn(`${C.yellow}⚠${C.reset} ${t}`)}var Er=a;function e(t){console.log(`${C.blue}ℹ${C.reset} ${t}`)}function p(t){console.log(`${C.cyan}→${C.reset} ${t}`)}function i(t){console.log(`
+import{Xt}from"./chunk-qxg95ndf.js";var f={};Xt(f,{ProgressBar:()=>v,Spinner:()=>s,box:()=>ve,checkAwsCli:()=>_s,checkAwsCredentials:()=>Os,colorize:()=>jt,colors:()=>C,confirm:()=>d,error:()=>r,formatBytes:()=>an,formatDuration:()=>b,getAwsAccountId:()=>$s,getAwsRegions:()=>Ls,header:()=>i,info:()=>e,prompt:()=>R,select:()=>Ao,step:()=>p,success:()=>n,table:()=>c,warn:()=>a,warning:()=>Er});var C={reset:"\x1B[0m",bright:"\x1B[1m",dim:"\x1B[2m",red:"\x1B[31m",green:"\x1B[32m",yellow:"\x1B[33m",blue:"\x1B[34m",magenta:"\x1B[35m",cyan:"\x1B[36m",white:"\x1B[37m",gray:"\x1B[90m"};function jt(t,o){return`${C[o]}${t}${C.reset}`}function n(t){console.log(`${C.green}✓${C.reset} ${t}`)}function r(t){console.error(`${C.red}✗${C.reset} ${t}`)}function a(t){console.warn(`${C.yellow}⚠${C.reset} ${t}`)}var Er=a;function e(t){console.log(`${C.blue}ℹ${C.reset} ${t}`)}function p(t){console.log(`${C.cyan}→${C.reset} ${t}`)}function i(t){console.log(`
 ${C.bright}${C.cyan}${t}${C.reset}
-`)}var x=!!(process.env.CI||process.env.GITHUB_ACTIONS||process.env.BUILDKITE||process.env.CIRCLECI||process.env.GITLAB_CI);class o{frames=["⠋","⠙","⠹","⠸","⠼","⠴","⠦","⠧","⠇","⠏"];interval=null;currentFrame=0;message;constructor(t){this.message=t}get text(){return this.message}set text(t){if(this.message=t,x&&this.interval)console.log(`  ${t}`)}start(){if(x){console.log(`  ${this.message}`),this.interval=!0;return}this.interval=setInterval(()=>{process.stdout.write(`\r${C.cyan}${this.frames[this.currentFrame]}${C.reset} ${this.message}`),this.currentFrame=(this.currentFrame+1)%this.frames.length},80)}succeed(t){this.stop(),n(t||this.message)}fail(t){this.stop(),r(t||this.message)}warn(t){this.stop(),Er(t||this.message)}stop(){if(this.interval){if(!x)process.stdout.write("\r");if(typeof this.interval==="object")clearInterval(this.interval);this.interval=null}}}class v{total;current=0;width=40;constructor(t){this.total=t}update(t){this.current=t,this.render()}increment(){this.current++,this.render()}render(){let t=Math.floor(this.current/this.total*100),s=Math.floor(this.current/this.total*this.width),l=this.width-s,u=`${"█".repeat(s)}${"░".repeat(l)}`;if(process.stdout.write(`\r${C.cyan}${u}${C.reset} ${t}% (${this.current}/${this.total})`),this.current>=this.total)process.stdout.write(`
-`)}}async function R(t,s){let l=await import("node:readline"),u=l.createInterface({input:process.stdin,output:process.stdout});return new Promise((h)=>{let g=s?`${C.cyan}?${C.reset} ${t} ${C.gray}(${s})${C.reset}: `:`${C.cyan}?${C.reset} ${t}: `;u.question(g,(m)=>{u.close(),h(m||s||"")})})}async function d(t,s=!1){let l=await R(`${t} (y/n)`,s?"y":"n");return l.toLowerCase()==="y"||l.toLowerCase()==="yes"}async function ws(t,s){console.log(`${C.cyan}?${C.reset} ${t}`),s.forEach((h,g)=>{console.log(`  ${C.gray}${g+1}.${C.reset} ${h}`)});let l=await R("Select","1"),u=Number.parseInt(l)-1;if(u>=0&&u<s.length)return s[u];return s[0]}function c(t,s){let l=t.map((h,g)=>{let m=Math.max(...s.map((w)=>(w[g]||"").length));return Math.max(h.length,m)}),u=t.map((h,g)=>h.padEnd(l[g])).join("  ");console.log(jt(u,"bright")),console.log(jt("─".repeat(u.length),"gray")),s.forEach((h)=>{let g=h.map((m,w)=>(m||"").padEnd(l[w])).join("  ");console.log(g)})}function an(t){if(t===0)return"0 B";let s=1024,l=["B","KB","MB","GB","TB"],u=Math.floor(Math.log(t)/Math.log(s));return`${Number.parseFloat((t/s**u).toFixed(2))} ${l[u]}`}function b(t){if(t<1000)return`${t}ms`;let s=Math.floor(t/1000);if(s<60)return`${s}s`;let l=Math.floor(s/60),u=s%60;if(l<60)return`${l}m ${u}s`;let h=Math.floor(l/60),g=l%60;return`${h}h ${g}m`}function ve(t,s="cyan"){let l=t.split(`
-`),u=Math.max(...l.map((g)=>g.length)),h="─".repeat(u+2);console.log(jt(`┌${h}┐`,s)),l.forEach((g)=>{console.log(jt(`│ ${g.padEnd(u)} │`,s))}),console.log(jt(`└${h}┘`,s))}async function _o(){return!0}async function Oo(){try{let{AWSClient:t}=await import("./chunk-2cx4k97r.js");return await new t().request({service:"sts",region:"us-east-1",method:"POST",path:"/",body:new URLSearchParams({Action:"GetCallerIdentity",Version:"2011-06-15"}).toString()}),!0}catch{return!1}}async function $o(){try{let{AWSClient:t}=await import("./chunk-2cx4k97r.js"),l=await new t().request({service:"sts",region:"us-east-1",method:"POST",path:"/",body:new URLSearchParams({Action:"GetCallerIdentity",Version:"2011-06-15"}).toString()});return l.Account||l.GetCallerIdentityResult?.Account||null}catch{return null}}async function Lo(){try{let{AWSClient:t}=await import("./chunk-2cx4k97r.js"),l=await new t().request({service:"ec2",region:"us-east-1",method:"POST",path:"/",body:new URLSearchParams({Action:"DescribeRegions",Version:"2016-11-15"}).toString()}),u=[];if(l.regionInfo){let h=Array.isArray(l.regionInfo)?l.regionInfo:[l.regionInfo];u.push(...h.map((g)=>g.regionName))}return u.length>0?u:y()}catch{return y()}}function y(){return["us-east-1","us-east-2","us-west-1","us-west-2","eu-west-1","eu-central-1","ap-southeast-1","ap-northeast-1"]}
-export{C,jt,n,r,a,Er,e,p,i,o,R,d,ws,c,an,ve,_o,Oo,$o,Lo,f};
+`)}var x=!!(process.env.CI||process.env.GITHUB_ACTIONS||process.env.BUILDKITE||process.env.CIRCLECI||process.env.GITLAB_CI);class s{frames=["⠋","⠙","⠹","⠸","⠼","⠴","⠦","⠧","⠇","⠏"];interval=null;currentFrame=0;message;constructor(t){this.message=t}get text(){return this.message}set text(t){if(this.message=t,x&&this.interval)console.log(`  ${t}`)}start(){if(x){console.log(`  ${this.message}`),this.interval=!0;return}this.interval=setInterval(()=>{process.stdout.write(`\r${C.cyan}${this.frames[this.currentFrame]}${C.reset} ${this.message}`),this.currentFrame=(this.currentFrame+1)%this.frames.length},80)}succeed(t){this.stop(),n(t||this.message)}fail(t){this.stop(),r(t||this.message)}warn(t){this.stop(),Er(t||this.message)}stop(){if(this.interval){if(!x)process.stdout.write("\r");if(typeof this.interval==="object")clearInterval(this.interval);this.interval=null}}}class v{total;current=0;width=40;constructor(t){this.total=t}update(t){this.current=t,this.render()}increment(){this.current++,this.render()}render(){let t=Math.floor(this.current/this.total*100),o=Math.floor(this.current/this.total*this.width),l=this.width-o,u=`${"█".repeat(o)}${"░".repeat(l)}`;if(process.stdout.write(`\r${C.cyan}${u}${C.reset} ${t}% (${this.current}/${this.total})`),this.current>=this.total)process.stdout.write(`
+`)}}async function R(t,o){let l=await import("node:readline"),u=l.createInterface({input:process.stdin,output:process.stdout});return new Promise((h)=>{let g=o?`${C.cyan}?${C.reset} ${t} ${C.gray}(${o})${C.reset}: `:`${C.cyan}?${C.reset} ${t}: `;u.question(g,(m)=>{u.close(),h(m||o||"")})})}async function d(t,o=!1){let l=await R(`${t} (y/n)`,o?"y":"n");return l.toLowerCase()==="y"||l.toLowerCase()==="yes"}async function Ao(t,o){console.log(`${C.cyan}?${C.reset} ${t}`),o.forEach((h,g)=>{console.log(`  ${C.gray}${g+1}.${C.reset} ${h}`)});let l=await R("Select","1"),u=Number.parseInt(l)-1;if(u>=0&&u<o.length)return o[u];return o[0]}function c(t,o){let l=t.map((h,g)=>{let m=Math.max(...o.map((w)=>(w[g]||"").length));return Math.max(h.length,m)}),u=t.map((h,g)=>h.padEnd(l[g])).join("  ");console.log(jt(u,"bright")),console.log(jt("─".repeat(u.length),"gray")),o.forEach((h)=>{let g=h.map((m,w)=>(m||"").padEnd(l[w])).join("  ");console.log(g)})}function an(t){if(t===0)return"0 B";let o=1024,l=["B","KB","MB","GB","TB"],u=Math.floor(Math.log(t)/Math.log(o));return`${Number.parseFloat((t/o**u).toFixed(2))} ${l[u]}`}function b(t){if(t<1000)return`${t}ms`;let o=Math.floor(t/1000);if(o<60)return`${o}s`;let l=Math.floor(o/60),u=o%60;if(l<60)return`${l}m ${u}s`;let h=Math.floor(l/60),g=l%60;return`${h}h ${g}m`}function ve(t,o="cyan"){let l=t.split(`
+`),u=Math.max(...l.map((g)=>g.length)),h="─".repeat(u+2);console.log(jt(`┌${h}┐`,o)),l.forEach((g)=>{console.log(jt(`│ ${g.padEnd(u)} │`,o))}),console.log(jt(`└${h}┘`,o))}async function _s(){return!0}async function Os(){try{let{AWSClient:t}=await import("./chunk-7rkg1yph.js");return await new t().request({service:"sts",region:"us-east-1",method:"POST",path:"/",body:new URLSearchParams({Action:"GetCallerIdentity",Version:"2011-06-15"}).toString()}),!0}catch{return!1}}async function $s(){try{let{AWSClient:t}=await import("./chunk-7rkg1yph.js"),l=await new t().request({service:"sts",region:"us-east-1",method:"POST",path:"/",body:new URLSearchParams({Action:"GetCallerIdentity",Version:"2011-06-15"}).toString()});return l.Account||l.GetCallerIdentityResult?.Account||null}catch{return null}}async function Ls(){try{let{AWSClient:t}=await import("./chunk-7rkg1yph.js"),l=await new t().request({service:"ec2",region:"us-east-1",method:"POST",path:"/",body:new URLSearchParams({Action:"DescribeRegions",Version:"2016-11-15"}).toString()}),u=[];if(l.regionInfo){let h=Array.isArray(l.regionInfo)?l.regionInfo:[l.regionInfo];u.push(...h.map((g)=>g.regionName))}return u.length>0?u:y()}catch{return y()}}function y(){return["us-east-1","us-east-2","us-west-1","us-west-2","eu-west-1","eu-central-1","ap-southeast-1","ap-northeast-1"]}
+export{C,jt,n,r,a,Er,e,p,i,s,R,d,Ao,c,an,ve,_s,Os,$s,Ls,f};

package/dist/bin/chunk-fh5bjm3d.js

@@ -0,0 +1 @@
+import{bd,Sd,vd,Cd,Op,$p}from"./chunk-0c1fv0xt.js";import"./chunk-w8jfw39t.js";import"./chunk-5wqjqh6c.js";import"./chunk-0ynfqf9t.js";import"./chunk-gc8p1tdr.js";import"./chunk-tt3m3fda.js";import"./chunk-dmwfnbg0.js";export{Op as deleteStaticSite,Sd as deployStaticSite,$p as deployStaticSiteFull,bd as generateStaticSiteTemplate,Cd as invalidateCache,vd as uploadStaticFiles};

package/dist/bin/chunk-fw6hbyeg.js

@@ -0,0 +1 @@
+import{I}from"./chunk-wga7gj0h.js";import"./chunk-dmwfnbg0.js";export{I as LambdaClient};

package/dist/bin/{chunk-ymfnqae6.js → chunk-gc8p1tdr.js}

@@ -1,4 +1,4 @@
-import{u}from"./chunk-7rwc5bvv.js";class F{client;region;constructor(e="us-east-1"){this.region=e,this.client=new u}async createHostedZone(e){let t=e.CallerReference||`${Date.now()}-${Math.random().toString(36).slice(2)}`,o=`<?xml version="1.0" encoding="UTF-8"?>
+import{u}from"./chunk-dmwfnbg0.js";class F{client;region;constructor(e="us-east-1"){this.region=e,this.client=new u}async createHostedZone(e){let t=e.CallerReference||`${Date.now()}-${Math.random().toString(36).slice(2)}`,o=`<?xml version="1.0" encoding="UTF-8"?>
 <CreateHostedZoneRequest xmlns="https://route53.amazonaws.com/doc/2013-04-01/">
   <Name>${e.Name}</Name>
   <CallerReference>${t}</CallerReference>`;if(e.HostedZoneConfig){if(o+=`

package/dist/bin/chunk-h7gfd2yq.js

@@ -0,0 +1 @@
+import{V}from"./chunk-sqmays54.js";import"./chunk-dmwfnbg0.js";export{V as SQSClient};

package/dist/bin/{chunk-r8e263ne.js → chunk-hjq05rxh.js}

@@ -1,4 +1,4 @@
-import{h}from"./chunk-twmeg17s.js";var y=(e)=>e==null?void 0:String(e),w=(e)=>Number(e)===1,C=(e,r)=>{try{return e==null?r:JSON.parse(String(e))}catch{return r}};function b(e){return{id:String(e.id),organizationId:String(e.organization_id),projectId:String(e.project_id),scope:{type:String(e.scope_type),id:String(e.scope_id),environmentId:y(e.environment_id),resourceId:y(e.resource_id),previewId:y(e.preview_id)},key:String(e.key),kind:String(e.kind),value:y(e.value),valueFingerprint:String(e.value_fingerprint),secretRef:y(e.secret_ref),backend:String(e.backend),backendVersion:y(e.backend_version),origin:String(e.origin),required:w(e.required),metadata:C(e.metadata,{}),lastUsedAt:y(e.last_used_at),rotatedAt:y(e.rotated_at),version:Number(e.version),createdAt:String(e.created_at),updatedAt:String(e.updated_at)}}function I(e){return{entryId:String(e.entry_id),resourceId:String(e.resource_id),injectionTarget:String(e.injection_target),required:w(e.required),requiresRedeploy:w(e.requires_redeploy),lastDeployedVersion:e.last_deployed_version==null?void 0:Number(e.last_deployed_version),createdAt:String(e.created_at),updatedAt:String(e.updated_at)}}class Rr{controlPlane;now;constructor(e,r=()=>new Date){this.controlPlane=e;this.now=r}get(e){let r=this.controlPlane.database.query("SELECT * FROM configuration_entries WHERE id=?").get(e);return r?b(r):void 0}find(e,r,n){let t=this.controlPlane.database.query("SELECT * FROM configuration_entries WHERE project_id=? AND scope_type=? AND scope_id=? AND key=?").get(e,r.type,r.id,n);return t?b(t):void 0}list(e){let r=["project_id=?"],n=[e.projectId];if(e.scope)r.push("scope_type=?","scope_id=?"),n.push(e.scope.type,e.scope.id);if(e.kind)r.push("kind=?"),n.push(e.kind);return this.controlPlane.database.query(`SELECT * FROM configuration_entries WHERE ${r.join(" AND ")} ORDER BY key,scope_type,scope_id`).all(...n).map(b)}create(e){this.validateScope(e),this.validateEntry(e);let r=crypto.randomUUID(),n=this.now().toISOString();return this.controlPlane.database.run("INSERT INTO configuration_entries (id,organization_id,project_id,scope_type,scope_id,environment_id,resource_id,preview_id,key,kind,value,value_fingerprint,secret_ref,backend,backend_version,origin,required,metadata,last_used_at,rotated_at,version,created_at,updated_at) VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)",[r,e.organizationId,e.projectId,e.scope.type,e.scope.id,e.scope.environmentId??null,e.scope.resourceId??null,e.scope.previewId??null,e.key,e.kind,e.value??null,e.valueFingerprint,e.secretRef??null,e.backend,e.backendVersion??null,e.origin,e.required?1:0,JSON.stringify(e.metadata),e.lastUsedAt??null,e.rotatedAt??null,1,n,n]),this.get(r)}update(e,r,n){let t=this.get(e);if(!t)throw Error("Configuration entry was not found.");if(this.validateEntry({...t,...n}),this.controlPlane.database.run("UPDATE configuration_entries SET value=?,value_fingerprint=?,secret_ref=?,backend=?,backend_version=?,required=?,metadata=?,rotated_at=?,version=version+1,updated_at=? WHERE id=? AND version=?",[n.value??null,n.valueFingerprint,n.secretRef??null,n.backend,n.backendVersion??null,n.required?1:0,JSON.stringify(n.metadata),n.rotatedAt??null,this.now().toISOString(),e,r]).changes!==1)throw Error("Configuration entry changed; refresh and retry.");return this.get(e)}remove(e,r){let n=this.get(e);if(!n)throw Error("Configuration entry was not found.");if(n.version!==r)throw Error("Configuration entry changed; refresh and retry.");if(this.controlPlane.database.run("DELETE FROM configuration_entries WHERE id=? AND version=?",[e,r]).changes<1)throw Error("Configuration entry changed; refresh and retry.");return n}setDependency(e){let r=this.now().toISOString();return this.controlPlane.database.run("INSERT INTO configuration_dependencies (entry_id,resource_id,injection_target,required,requires_redeploy,last_deployed_version,created_at,updated_at) VALUES (?,?,?,?,?,?,?,?) ON CONFLICT(entry_id,resource_id) DO UPDATE SET injection_target=excluded.injection_target,required=excluded.required,requires_redeploy=excluded.requires_redeploy,last_deployed_version=excluded.last_deployed_version,updated_at=excluded.updated_at",[e.entryId,e.resourceId,e.injectionTarget,e.required?1:0,e.requiresRedeploy?1:0,e.lastDeployedVersion??null,r,r]),this.dependencies(e.entryId).find((n)=>n.resourceId===e.resourceId)}dependencies(e){return this.controlPlane.database.query("SELECT * FROM configuration_dependencies WHERE entry_id=? ORDER BY resource_id").all(e).map(I)}dependenciesForResource(e){return this.controlPlane.database.query("SELECT * FROM configuration_dependencies WHERE resource_id=? ORDER BY entry_id").all(e).map(I)}mutation(e){let r=this.controlPlane.database.query("SELECT request_hash,result FROM configuration_mutations WHERE idempotency_key=?").get(e);return r?{requestHash:r.request_hash,result:C(r.result,{})}:void 0}recordMutation(e){this.controlPlane.database.run("INSERT INTO configuration_mutations (id,project_id,idempotency_key,request_hash,result,actor_id,created_at) VALUES (?,?,?,?,?,?,?)",[crypto.randomUUID(),e.projectId,e.idempotencyKey,e.requestHash,JSON.stringify(e.result),e.actorId??null,this.now().toISOString()])}validateEntry(e){if(!/^[A-Za-z_][A-Za-z0-9_]{0,255}$/.test(e.key))throw Error(`Invalid configuration key: ${e.key}`);if(e.kind==="variable"&&(e.value==null||e.secretRef||e.backend!=="plaintext"))throw Error("Variables require a plaintext value and cannot use a secret backend.");if(e.kind==="secret"&&(e.value!=null||!e.secretRef||e.backend==="plaintext"))throw Error("Secrets require a non-plaintext backend reference and cannot store a plaintext value.")}validateScope(e){let r=this.controlPlane.getProject(e.projectId);if(!r||r.organizationId!==e.organizationId)throw Error("Configuration project does not belong to the organization.");let n=e.scope;if(n.type==="project"){if(n.id!==e.projectId||n.environmentId||n.resourceId||n.previewId)throw Error("Project configuration scope must reference only its project.");return}if(n.type==="environment"){let i=this.controlPlane.database.query("SELECT project_id FROM environments WHERE id=?").get(n.id);if(!i||i.project_id!==e.projectId||n.environmentId&&n.environmentId!==n.id||n.resourceId||n.previewId)throw Error("Environment configuration scope does not belong to the project.");return}if(n.type==="service"||n.type==="function"){let i=this.controlPlane.getResource(n.id);if(!i||i.projectId!==e.projectId||n.type==="function"&&i.kind!=="function"||n.resourceId&&n.resourceId!==n.id||n.environmentId&&i.environmentId!==n.environmentId||n.previewId)throw Error(`${n.type==="function"?"Function":"Service"} configuration scope does not belong to the project.`);return}let t=this.controlPlane.database.query("SELECT project_id,base_environment_id,resource_id FROM preview_instances WHERE id=?").get(n.id);if(!t||t.project_id!==e.projectId||n.previewId&&n.previewId!==n.id||n.environmentId&&n.environmentId!==t.base_environment_id||n.resourceId&&n.resourceId!==t.resource_id)throw Error("Preview configuration scope does not belong to the project.")}}var E=/^[A-Za-z_][A-Za-z0-9_]{0,255}$/;function j(e){let r={n:`
+import{h}from"./chunk-6r5mehaj.js";var y=(e)=>e==null?void 0:String(e),w=(e)=>Number(e)===1,C=(e,r)=>{try{return e==null?r:JSON.parse(String(e))}catch{return r}};function b(e){return{id:String(e.id),organizationId:String(e.organization_id),projectId:String(e.project_id),scope:{type:String(e.scope_type),id:String(e.scope_id),environmentId:y(e.environment_id),resourceId:y(e.resource_id),previewId:y(e.preview_id)},key:String(e.key),kind:String(e.kind),value:y(e.value),valueFingerprint:String(e.value_fingerprint),secretRef:y(e.secret_ref),backend:String(e.backend),backendVersion:y(e.backend_version),origin:String(e.origin),required:w(e.required),metadata:C(e.metadata,{}),lastUsedAt:y(e.last_used_at),rotatedAt:y(e.rotated_at),version:Number(e.version),createdAt:String(e.created_at),updatedAt:String(e.updated_at)}}function I(e){return{entryId:String(e.entry_id),resourceId:String(e.resource_id),injectionTarget:String(e.injection_target),required:w(e.required),requiresRedeploy:w(e.requires_redeploy),lastDeployedVersion:e.last_deployed_version==null?void 0:Number(e.last_deployed_version),createdAt:String(e.created_at),updatedAt:String(e.updated_at)}}class Rr{controlPlane;now;constructor(e,r=()=>new Date){this.controlPlane=e;this.now=r}get(e){let r=this.controlPlane.database.query("SELECT * FROM configuration_entries WHERE id=?").get(e);return r?b(r):void 0}find(e,r,n){let t=this.controlPlane.database.query("SELECT * FROM configuration_entries WHERE project_id=? AND scope_type=? AND scope_id=? AND key=?").get(e,r.type,r.id,n);return t?b(t):void 0}list(e){let r=["project_id=?"],n=[e.projectId];if(e.scope)r.push("scope_type=?","scope_id=?"),n.push(e.scope.type,e.scope.id);if(e.kind)r.push("kind=?"),n.push(e.kind);return this.controlPlane.database.query(`SELECT * FROM configuration_entries WHERE ${r.join(" AND ")} ORDER BY key,scope_type,scope_id`).all(...n).map(b)}create(e){this.validateScope(e),this.validateEntry(e);let r=crypto.randomUUID(),n=this.now().toISOString();return this.controlPlane.database.run("INSERT INTO configuration_entries (id,organization_id,project_id,scope_type,scope_id,environment_id,resource_id,preview_id,key,kind,value,value_fingerprint,secret_ref,backend,backend_version,origin,required,metadata,last_used_at,rotated_at,version,created_at,updated_at) VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)",[r,e.organizationId,e.projectId,e.scope.type,e.scope.id,e.scope.environmentId??null,e.scope.resourceId??null,e.scope.previewId??null,e.key,e.kind,e.value??null,e.valueFingerprint,e.secretRef??null,e.backend,e.backendVersion??null,e.origin,e.required?1:0,JSON.stringify(e.metadata),e.lastUsedAt??null,e.rotatedAt??null,1,n,n]),this.get(r)}update(e,r,n){let t=this.get(e);if(!t)throw Error("Configuration entry was not found.");if(this.validateEntry({...t,...n}),this.controlPlane.database.run("UPDATE configuration_entries SET value=?,value_fingerprint=?,secret_ref=?,backend=?,backend_version=?,required=?,metadata=?,rotated_at=?,version=version+1,updated_at=? WHERE id=? AND version=?",[n.value??null,n.valueFingerprint,n.secretRef??null,n.backend,n.backendVersion??null,n.required?1:0,JSON.stringify(n.metadata),n.rotatedAt??null,this.now().toISOString(),e,r]).changes!==1)throw Error("Configuration entry changed; refresh and retry.");return this.get(e)}remove(e,r){let n=this.get(e);if(!n)throw Error("Configuration entry was not found.");if(n.version!==r)throw Error("Configuration entry changed; refresh and retry.");if(this.controlPlane.database.run("DELETE FROM configuration_entries WHERE id=? AND version=?",[e,r]).changes<1)throw Error("Configuration entry changed; refresh and retry.");return n}setDependency(e){let r=this.now().toISOString();return this.controlPlane.database.run("INSERT INTO configuration_dependencies (entry_id,resource_id,injection_target,required,requires_redeploy,last_deployed_version,created_at,updated_at) VALUES (?,?,?,?,?,?,?,?) ON CONFLICT(entry_id,resource_id) DO UPDATE SET injection_target=excluded.injection_target,required=excluded.required,requires_redeploy=excluded.requires_redeploy,last_deployed_version=excluded.last_deployed_version,updated_at=excluded.updated_at",[e.entryId,e.resourceId,e.injectionTarget,e.required?1:0,e.requiresRedeploy?1:0,e.lastDeployedVersion??null,r,r]),this.dependencies(e.entryId).find((n)=>n.resourceId===e.resourceId)}dependencies(e){return this.controlPlane.database.query("SELECT * FROM configuration_dependencies WHERE entry_id=? ORDER BY resource_id").all(e).map(I)}dependenciesForResource(e){return this.controlPlane.database.query("SELECT * FROM configuration_dependencies WHERE resource_id=? ORDER BY entry_id").all(e).map(I)}mutation(e){let r=this.controlPlane.database.query("SELECT request_hash,result FROM configuration_mutations WHERE idempotency_key=?").get(e);return r?{requestHash:r.request_hash,result:C(r.result,{})}:void 0}recordMutation(e){this.controlPlane.database.run("INSERT INTO configuration_mutations (id,project_id,idempotency_key,request_hash,result,actor_id,created_at) VALUES (?,?,?,?,?,?,?)",[crypto.randomUUID(),e.projectId,e.idempotencyKey,e.requestHash,JSON.stringify(e.result),e.actorId??null,this.now().toISOString()])}validateEntry(e){if(!/^[A-Za-z_][A-Za-z0-9_]{0,255}$/.test(e.key))throw Error(`Invalid configuration key: ${e.key}`);if(e.kind==="variable"&&(e.value==null||e.secretRef||e.backend!=="plaintext"))throw Error("Variables require a plaintext value and cannot use a secret backend.");if(e.kind==="secret"&&(e.value!=null||!e.secretRef||e.backend==="plaintext"))throw Error("Secrets require a non-plaintext backend reference and cannot store a plaintext value.")}validateScope(e){let r=this.controlPlane.getProject(e.projectId);if(!r||r.organizationId!==e.organizationId)throw Error("Configuration project does not belong to the organization.");let n=e.scope;if(n.type==="project"){if(n.id!==e.projectId||n.environmentId||n.resourceId||n.previewId)throw Error("Project configuration scope must reference only its project.");return}if(n.type==="environment"){let i=this.controlPlane.database.query("SELECT project_id FROM environments WHERE id=?").get(n.id);if(!i||i.project_id!==e.projectId||n.environmentId&&n.environmentId!==n.id||n.resourceId||n.previewId)throw Error("Environment configuration scope does not belong to the project.");return}if(n.type==="service"||n.type==="function"){let i=this.controlPlane.getResource(n.id);if(!i||i.projectId!==e.projectId||n.type==="function"&&i.kind!=="function"||n.resourceId&&n.resourceId!==n.id||n.environmentId&&i.environmentId!==n.environmentId||n.previewId)throw Error(`${n.type==="function"?"Function":"Service"} configuration scope does not belong to the project.`);return}let t=this.controlPlane.database.query("SELECT project_id,base_environment_id,resource_id FROM preview_instances WHERE id=?").get(n.id);if(!t||t.project_id!==e.projectId||n.previewId&&n.previewId!==n.id||n.environmentId&&n.environmentId!==t.base_environment_id||n.resourceId&&n.resourceId!==t.resource_id)throw Error("Preview configuration scope does not belong to the project.")}}var E=/^[A-Za-z_][A-Za-z0-9_]{0,255}$/;function j(e){let r={n:`
 `,r:"\r",t:"\t","\\":"\\",'"':'"',$:"$"};return e.replace(/\\(n|r|t|\\|"|\$)/g,(n,t)=>r[t])}function Gc(e){let r={},n=[],t=e.replace(/\r\n?/g,`
 `).split(`
 `);for(let i=0;i<t.length;i++){let s=i+1,c=t[i];if(!c.trim()||c.trimStart().startsWith("#"))continue;if(/^\s*export\s+/.test(c))c=c.replace(/^\s*export\s+/,"");let u=c.match(/^\s*([^=\s]+)\s*=\s*(.*)$/);if(!u){n.push({line:s,severity:"error",code:"invalid_line",message:"Expected KEY=VALUE."});continue}let o=u[1],a=u[2];if(!E.test(o)){n.push({line:s,key:o,severity:"error",code:"invalid_key",message:`Invalid environment variable name: ${o}`});continue}let d=a;if(a.startsWith('"')||a.startsWith("'")){let g=a[0],l=[a.slice(1)],v=!1;while(!0){let f=l[l.length-1],m=!1,S=-1;for(let k=0;k<f.length;k++){if(g==='"'&&f[k]==="\\"&&!m){m=!0;continue}if(f[k]===g&&!m){S=k;break}m=!1}if(S>=0){l[l.length-1]=f.slice(0,S),v=!0;break}if(++i>=t.length)break;l.push(t[i])}if(!v){n.push({line:s,key:o,severity:"error",code:"unterminated_quote",message:`Unterminated quoted value for ${o}.`});continue}if(d=l.join(`

package/dist/bin/chunk-jxnw879g.js

@@ -0,0 +1 @@
+import{g}from"./chunk-tt3m3fda.js";import"./chunk-dmwfnbg0.js";export{g as S3Client};

package/dist/bin/chunk-k3yq569a.js

@@ -0,0 +1 @@
+import{Lp,Mp,Up,Fp}from"./chunk-4bp4k1x2.js";import"./chunk-tt3m3fda.js";import"./chunk-dmwfnbg0.js";import"./chunk-q8hp4dfy.js";import"./chunk-55cckkb2.js";export{Fp as deleteFailoverReplicaBuckets,Lp as ensureFailoverReplicaBuckets,Mp as grantFailoverReplicaAccess,Up as seedFailoverReplicas};

package/dist/bin/{chunk-bfzdbe4g.js → chunk-mbr9j2fw.js}

@@ -1,6 +1,6 @@
-var Ld={newConnectionsPerSecond:50,concurrentPerSource:100,synPerSecond:2000,burst:100,icmpPerSecond:5,banSeconds:600};function h(e){return{...Ld,...e.thresholds}}var _=/^(?:\d{1,3}\.){3}\d{1,3}(?:\/\d{1,2})?$|^[0-9a-f:]+(?:\/\d{1,3})?$/i;function ds(e){if(!_.test(e))return!1;let[t,n]=e.split("/");if(t.includes(":"))return n==null||Number(n)>=0&&Number(n)<=128;let s=t.split(".");if(s.length!==4||s.some((a)=>Number(a)>255||a===""))return!1;return n==null||Number(n)>=0&&Number(n)<=32}function f(e){return[...new Set((e??[]).map((t)=>t.trim()).filter(ds))]}function y(e){let t=(e??[80,443]).filter((n)=>Number.isInteger(n)&&n>=1&&n<=65535);return[...new Set(t)].sort((n,s)=>n-s)}function Md(e={}){let t=h(e);return{"net.ipv4.tcp_syncookies":"1","net.ipv4.tcp_max_syn_backlog":String(Math.max(4096,t.synPerSecond*4)),"net.ipv4.tcp_synack_retries":"2","net.ipv4.tcp_abort_on_overflow":"1","net.ipv4.tcp_fin_timeout":"15","net.ipv4.tcp_keepalive_time":"300","net.ipv4.tcp_keepalive_intvl":"30","net.ipv4.tcp_keepalive_probes":"3","net.core.somaxconn":"4096","net.core.netdev_max_backlog":"16384","net.ipv4.conf.all.rp_filter":"1","net.ipv4.conf.default.rp_filter":"1","net.ipv4.conf.all.accept_source_route":"0","net.ipv4.conf.all.accept_redirects":"0","net.ipv4.conf.all.send_redirects":"0","net.ipv6.conf.all.accept_redirects":"0","net.ipv6.conf.all.accept_source_route":"0","net.ipv4.icmp_echo_ignore_broadcasts":"1","net.ipv4.icmp_ignore_bogus_error_responses":"1","net.netfilter.nf_conntrack_max":"262144","net.netfilter.nf_conntrack_tcp_timeout_established":"3600"}}function Ud(e={}){let t=["# Managed by ts-cloud. Edits are overwritten on the next deploy.","# Network hardening against L3/L4 floods.",""];for(let[n,s]of Object.entries(Md(e)))t.push(`${n} = ${s}`);return`${t.join(`
+var Md={newConnectionsPerSecond:50,concurrentPerSource:100,synPerSecond:2000,burst:100,icmpPerSecond:5,banSeconds:600};function h(e){return{...Md,...e.thresholds}}var _=/^(?:\d{1,3}\.){3}\d{1,3}(?:\/\d{1,2})?$|^[0-9a-f:]+(?:\/\d{1,3})?$/i;function uo(e){if(!_.test(e))return!1;let[t,n]=e.split("/");if(t.includes(":"))return n==null||Number(n)>=0&&Number(n)<=128;let s=t.split(".");if(s.length!==4||s.some((a)=>Number(a)>255||a===""))return!1;return n==null||Number(n)>=0&&Number(n)<=32}function f(e){return[...new Set((e??[]).map((t)=>t.trim()).filter(uo))]}function y(e){let t=(e??[80,443]).filter((n)=>Number.isInteger(n)&&n>=1&&n<=65535);return[...new Set(t)].sort((n,s)=>n-s)}function Ud(e={}){let t=h(e);return{"net.ipv4.tcp_syncookies":"1","net.ipv4.tcp_max_syn_backlog":String(Math.max(4096,t.synPerSecond*4)),"net.ipv4.tcp_synack_retries":"2","net.ipv4.tcp_abort_on_overflow":"1","net.ipv4.tcp_fin_timeout":"15","net.ipv4.tcp_keepalive_time":"300","net.ipv4.tcp_keepalive_intvl":"30","net.ipv4.tcp_keepalive_probes":"3","net.core.somaxconn":"4096","net.core.netdev_max_backlog":"16384","net.ipv4.conf.all.rp_filter":"1","net.ipv4.conf.default.rp_filter":"1","net.ipv4.conf.all.accept_source_route":"0","net.ipv4.conf.all.accept_redirects":"0","net.ipv4.conf.all.send_redirects":"0","net.ipv6.conf.all.accept_redirects":"0","net.ipv6.conf.all.accept_source_route":"0","net.ipv4.icmp_echo_ignore_broadcasts":"1","net.ipv4.icmp_ignore_bogus_error_responses":"1","net.netfilter.nf_conntrack_max":"262144","net.netfilter.nf_conntrack_tcp_timeout_established":"3600"}}function Fd(e={}){let t=["# Managed by ts-cloud. Edits are overwritten on the next deploy.","# Network hardening against L3/L4 floods.",""];for(let[n,s]of Object.entries(Ud(e)))t.push(`${n} = ${s}`);return`${t.join(`
 `)}
-`}function Fd(e={}){let t=h(e),n=y(e.ports),s=f(e.allowlist),a=f(e.blocklist),l=e.monitorOnly?"counter":"counter drop",i=e.originProtection?.enabled?f(e.originProtection.cdnRanges):[],c=s.filter((r)=>!r.includes(":")),p=s.filter((r)=>r.includes(":")),u=a.filter((r)=>!r.includes(":")),o=["#!/usr/sbin/nft -f","# Managed by ts-cloud. Edits are overwritten on the next deploy.","","table inet ts_cloud_ddos","delete table inet ts_cloud_ddos","","table inet ts_cloud_ddos {","  # Sources that tripped a limit, with a timeout so a ban self-expires.",`  set banned4 { type ipv4_addr; flags timeout; timeout ${t.banSeconds}s; }`,`  set banned6 { type ipv6_addr; flags timeout; timeout ${t.banSeconds}s; }`];if(c.length>0)o.push(`  set allow4 { type ipv4_addr; flags interval; elements = { ${c.join(", ")} } }`);if(p.length>0)o.push(`  set allow6 { type ipv6_addr; flags interval; elements = { ${p.join(", ")} } }`);if(u.length>0)o.push(`  set block4 { type ipv4_addr; flags interval; elements = { ${u.join(", ")} } }`);if(i.length>0)o.push(`  set cdn4 { type ipv4_addr; flags interval; elements = { ${i.filter((r)=>!r.includes(":")).join(", ")} } }`);if(o.push("","  chain input {","    type filter hook input priority -150; policy accept;","","    # Established traffic is already paid for; never re-inspect it.","    ct state established,related accept","    iif lo accept","","    # Invalid packets are never legitimate and are cheap to drop early.","    ct state invalid counter drop"),c.length>0)o.push("    ip saddr @allow4 accept");if(p.length>0)o.push("    ip6 saddr @allow6 accept");if(u.length>0)o.push("    ip saddr @block4 counter drop");if(o.push("    ip saddr @banned4 counter drop","    ip6 saddr @banned6 counter drop",""),o.push("    # Nonsense TCP flag combinations: scanners and stack fingerprinting.","    tcp flags & (fin|syn) == (fin|syn) counter drop","    tcp flags & (syn|rst) == (syn|rst) counter drop","    tcp flags & (fin|rst) == (fin|rst) counter drop","    tcp flags & (fin|ack) == fin counter drop","    tcp flags & (syn|fin|ack|rst|psh|urg) == 0x0 counter drop","","    # Ping stays usable, ping floods do not.",`    ip protocol icmp icmp type echo-request limit rate ${t.icmpPerSecond}/second burst ${t.burst} packets accept`,"    ip protocol icmp icmp type echo-request counter drop",""),n.length>0){let r=n.join(", ");if(o.push("    # Platform-wide SYN ceiling. Above it the kernel falls back to cookies.",`    tcp dport { ${r} } ct state new limit rate ${t.synPerSecond}/second burst ${t.burst} packets accept`,"","    # Per-source new-connection rate. This is what stops one host hammering.",`    tcp dport { ${r} } ct state new meter conn_rate4 { ip saddr limit rate over ${t.newConnectionsPerSecond}/second burst ${t.burst} packets } add @banned4 { ip saddr } ${l}`,`    tcp dport { ${r} } ct state new meter conn_rate6 { ip6 saddr limit rate over ${t.newConnectionsPerSecond}/second burst ${t.burst} packets } add @banned6 { ip6 saddr } ${l}`,"","    # Concurrency ceiling per source: the slow-loris defence.",`    tcp dport { ${r} } ct state new meter conn_count4 { ip saddr ct count over ${t.concurrentPerSource} } ${l}`,`    tcp dport { ${r} } ct state new meter conn_count6 { ip6 saddr ct count over ${t.concurrentPerSource} } ${l}`,""),i.length>0)o.push("    # Origin protection: reject traffic that skipped the CDN and came","    # straight to the box, which is how an attacker bypasses the edge.",`    tcp dport { ${r} } ip saddr != @cdn4 counter drop`,"")}return o.push("  }","}",""),o.join(`
+`}function Bd(e={}){let t=h(e),n=y(e.ports),s=f(e.allowlist),a=f(e.blocklist),l=e.monitorOnly?"counter":"counter drop",i=e.originProtection?.enabled?f(e.originProtection.cdnRanges):[],c=s.filter((r)=>!r.includes(":")),p=s.filter((r)=>r.includes(":")),u=a.filter((r)=>!r.includes(":")),o=["#!/usr/sbin/nft -f","# Managed by ts-cloud. Edits are overwritten on the next deploy.","","table inet ts_cloud_ddos","delete table inet ts_cloud_ddos","","table inet ts_cloud_ddos {","  # Sources that tripped a limit, with a timeout so a ban self-expires.",`  set banned4 { type ipv4_addr; flags timeout; timeout ${t.banSeconds}s; }`,`  set banned6 { type ipv6_addr; flags timeout; timeout ${t.banSeconds}s; }`];if(c.length>0)o.push(`  set allow4 { type ipv4_addr; flags interval; elements = { ${c.join(", ")} } }`);if(p.length>0)o.push(`  set allow6 { type ipv6_addr; flags interval; elements = { ${p.join(", ")} } }`);if(u.length>0)o.push(`  set block4 { type ipv4_addr; flags interval; elements = { ${u.join(", ")} } }`);if(i.length>0)o.push(`  set cdn4 { type ipv4_addr; flags interval; elements = { ${i.filter((r)=>!r.includes(":")).join(", ")} } }`);if(o.push("","  chain input {","    type filter hook input priority -150; policy accept;","","    # Established traffic is already paid for; never re-inspect it.","    ct state established,related accept","    iif lo accept","","    # Invalid packets are never legitimate and are cheap to drop early.","    ct state invalid counter drop"),c.length>0)o.push("    ip saddr @allow4 accept");if(p.length>0)o.push("    ip6 saddr @allow6 accept");if(u.length>0)o.push("    ip saddr @block4 counter drop");if(o.push("    ip saddr @banned4 counter drop","    ip6 saddr @banned6 counter drop",""),o.push("    # Nonsense TCP flag combinations: scanners and stack fingerprinting.","    tcp flags & (fin|syn) == (fin|syn) counter drop","    tcp flags & (syn|rst) == (syn|rst) counter drop","    tcp flags & (fin|rst) == (fin|rst) counter drop","    tcp flags & (fin|ack) == fin counter drop","    tcp flags & (syn|fin|ack|rst|psh|urg) == 0x0 counter drop","","    # Ping stays usable, ping floods do not.",`    ip protocol icmp icmp type echo-request limit rate ${t.icmpPerSecond}/second burst ${t.burst} packets accept`,"    ip protocol icmp icmp type echo-request counter drop",""),n.length>0){let r=n.join(", ");if(o.push("    # Platform-wide SYN ceiling. Above it the kernel falls back to cookies.",`    tcp dport { ${r} } ct state new limit rate ${t.synPerSecond}/second burst ${t.burst} packets accept`,"","    # Per-source new-connection rate. This is what stops one host hammering.",`    tcp dport { ${r} } ct state new meter conn_rate4 { ip saddr limit rate over ${t.newConnectionsPerSecond}/second burst ${t.burst} packets } add @banned4 { ip saddr } ${l}`,`    tcp dport { ${r} } ct state new meter conn_rate6 { ip6 saddr limit rate over ${t.newConnectionsPerSecond}/second burst ${t.burst} packets } add @banned6 { ip6 saddr } ${l}`,"","    # Concurrency ceiling per source: the slow-loris defence.",`    tcp dport { ${r} } ct state new meter conn_count4 { ip saddr ct count over ${t.concurrentPerSource} } ${l}`,`    tcp dport { ${r} } ct state new meter conn_count6 { ip6 saddr ct count over ${t.concurrentPerSource} } ${l}`,""),i.length>0)o.push("    # Origin protection: reject traffic that skipped the CDN and came","    # straight to the box, which is how an attacker bypasses the edge.",`    tcp dport { ${r} } ip saddr != @cdn4 counter drop`,"")}return o.push("  }","}",""),o.join(`
 `)}function Cr(e={}){return`#!/usr/bin/env bash
 # Managed by ts-cloud. Installs L3/L4 flood mitigation.
 set -euo pipefail
@@ -13,11 +13,11 @@ fi
 
 install -d -m 0755 /etc/ts-cloud /etc/nftables.d
 cat > /etc/sysctl.d/90-ts-cloud-ddos.conf <<'SYSCTL_EOF'
-${Ud(e)}SYSCTL_EOF
+${Fd(e)}SYSCTL_EOF
 sysctl --system >/dev/null
 
 cat > /etc/nftables.d/ts-cloud-ddos.nft.new <<'NFT_EOF'
-${Fd(e)}NFT_EOF
+${Bd(e)}NFT_EOF
 
 # Syntax-check before applying: a bad ruleset would leave the box unprotected.
 if ! nft -c -f /etc/nftables.d/ts-cloud-ddos.nft.new; then
@@ -40,5 +40,5 @@ include "/etc/nftables.d/ts-cloud-ddos.nft"
 fi
 systemctl enable nftables >/dev/null 2>&1 || true
 echo "ts-cloud: L3/L4 mitigation active"
-`}var b=["off","monitor","rate_limit","challenge","lockdown"];function Xp(e,t=[]){let n=[],s=Math.max(1,e.baselineRequestsPerSecond),a=e.requestsPerSecond/s,l=0,i=(g,v)=>{n.push(v),l=Math.max(l,b.indexOf(g))},c=a>=3;if(c)i("monitor",`Traffic is ${a.toFixed(1)}x the baseline.`);let p=e.topSourceShare>=0.25,u=e.errorRate>=0.25,o=(e.suspiciousAgentShare??0)>=0.5,r=e.uniqueSources>0&&e.requestsPerSecond/e.uniqueSources>=50;if(c&&p)i("rate_limit",`One source accounts for ${(e.topSourceShare*100).toFixed(0)}% of traffic.`);if(c&&r)i("rate_limit","Request rate per unique source is far above what a browser produces.");if(c&&u)i("challenge",`Error rate is ${(e.errorRate*100).toFixed(0)}% under load.`);if(c&&o)i("challenge","Most requests carry no recognisable browser agent.");if(a>=20&&(p||u||o||r))i("lockdown",`Traffic is ${a.toFixed(0)}x the baseline with attack-shaped characteristics.`);if(!c&&e.topSourceShare>=0.6&&e.requestsPerSecond>s)i("rate_limit","A single source dominates traffic without an overall surge.");let d=b[l],m={off:1,monitor:1,rate_limit:0.5,challenge:0.25,lockdown:0.1}[d];return{level:d,reasons:n,rateLimitFactor:m,challengeEnabled:d==="challenge"||d==="lockdown",staticOnly:d==="lockdown",banCandidates:d==="off"||d==="monitor"?[]:f(t)}}function us(e,t){return Math.max(1,Math.floor(e*t.rateLimitFactor))}
-export{Ld,ds,Md,Ud,Fd,Cr,Xp,us};
+`}var b=["off","monitor","rate_limit","challenge","lockdown"];function tm(e,t=[]){let n=[],s=Math.max(1,e.baselineRequestsPerSecond),a=e.requestsPerSecond/s,l=0,i=(g,v)=>{n.push(v),l=Math.max(l,b.indexOf(g))},c=a>=3;if(c)i("monitor",`Traffic is ${a.toFixed(1)}x the baseline.`);let p=e.topSourceShare>=0.25,u=e.errorRate>=0.25,o=(e.suspiciousAgentShare??0)>=0.5,r=e.uniqueSources>0&&e.requestsPerSecond/e.uniqueSources>=50;if(c&&p)i("rate_limit",`One source accounts for ${(e.topSourceShare*100).toFixed(0)}% of traffic.`);if(c&&r)i("rate_limit","Request rate per unique source is far above what a browser produces.");if(c&&u)i("challenge",`Error rate is ${(e.errorRate*100).toFixed(0)}% under load.`);if(c&&o)i("challenge","Most requests carry no recognisable browser agent.");if(a>=20&&(p||u||o||r))i("lockdown",`Traffic is ${a.toFixed(0)}x the baseline with attack-shaped characteristics.`);if(!c&&e.topSourceShare>=0.6&&e.requestsPerSecond>s)i("rate_limit","A single source dominates traffic without an overall surge.");let d=b[l],m={off:1,monitor:1,rate_limit:0.5,challenge:0.25,lockdown:0.1}[d];return{level:d,reasons:n,rateLimitFactor:m,challengeEnabled:d==="challenge"||d==="lockdown",staticOnly:d==="lockdown",banCandidates:d==="off"||d==="monitor"?[]:f(t)}}function po(e,t){return Math.max(1,Math.floor(e*t.rateLimitFactor))}
+export{Md,uo,Ud,Fd,Bd,Cr,tm,po};

package/dist/bin/chunk-nhrwct94.js

@@ -0,0 +1 @@
+import{Hc,lm}from"./chunk-8zn63v9h.js";import"./chunk-gc8p1tdr.js";import"./chunk-tt3m3fda.js";import"./chunk-dmwfnbg0.js";export{Hc as EmailClient,lm as email};

package/dist/bin/chunk-pa4fymr0.js

@@ -0,0 +1 @@
+import{dm,um,Zs,Wc,ea,ta,gn,Ue,A,ra,Kc,H,xr,w,Kd,Ri,na,ia,B,Lo,Jd,Xd,Qd,Yd,l,o,pm,mm,T,oa,sa,aa,gm,fm,ke,ca,Ii,Zd,hm,ym,Fe,Et,la,Jc,Xc,bm,Qc,Yc,Zc,Mo,da,tt,Uo,fn,Pi,hn,Be,eu,Fo,Bo,ua,pa,ma,ga,fa,ha,Te,j,tu,ru,el,b,L,rt,N,tl,wt,ge,Ht,Sm,rl,Ee,jo,je,Gt,Di,we,Vo,xe,nu,Ni,Ae,Re,ne,ki,X,qt,At,Ie,t,yn,vm,nl,ya,Cm,Tm,Em,wm,ba,Am,Rm,Im,Pm,Dm,Nm,km,xm,_m,Om,$m,Lm,iu,ou,su,au,cu,lu,du,Wt,il,ol,_r,xi,Mm,sl,Um,Fm,bn,Bm,jm,Vm,zm,Hm,Gm,uu,pu,mu,gu,fu,_i,qm,Sn,hu,al,yu,Sa,fe,bu,Su,Rt,zo,Kt,vu,cl,Cu,Tu,Eu,ll,he,Wm,Km,Jm,Xm,wu,Qm,Pe,Ym,Zm,eg,va,Ca,Au,dl,ul,tg,rg,ng,ig,og,Ru,Ta,sg,ag,cg,lg,dg,Iu,Pu,ug,pg,mg,gg,fg,hg,yg,Du,bg,pl,Ea,Sg,vg,Cg,Tg,ml,gl,fl,Eg,wa,Nu,ku,xu,_u,Aa,Ou,wg,Ag,Rg,Ig,Pg,Dg,Ng,$u,Lu,Mu,Uu,hl,kg,xg,_g,Og,$g,Lg,Mg,Ug,Fg,Fu,Bu,ju,Vu,Bg,jg,yl,Vg,bl,Sl,vl,Cl,zg,Hg,Gg,qg,nt,Oi,Wg,Kg,Jg,Xg,Qg,Yg,Zg,ef,zu,tf,rf,Tl,El,nf,of,Hu,sf,af,cf,lf,df,uf,pf,mf,gf,ff,hf,yf,bf,Sf,vf,Cf,Tf,Ef,wf,Af,Rf,Ra,Gu,Ia,qu,Pa,Wu,Da,Ku,Na,Ju,Or,Xu,ka,Qu,$i,Yu,xa,Zu,_a,ep,wl,If,Al,Pf,Oa,tp,$r,rp,Rl,Df,$a,np,Il,Nf,Pl,kf,Dl,xf,La,ip,Nl,_f,kl,Of,xl,$f,_l,Lf,Ma,op,Ua,sp,Ol,Mf,$l,Uf,Ll,Ff,Ml,Bf,Ul,jf,Fl,Vf,Fa,ap,Bl,zf,jl,Hf,Vl,Gf,zl,qf,Hl,Wf,Gl,Kf,ql,Wl,Kl,Jl,Xl,Jf,Ql,Xf,Yl,Qf,Zl,Yf,It,ed,cp,Ho,Ba,vn,lp,Li,Jt,ja,Va,dp,up,za,td,Ha,rd,Zf,eh,Ga,qa,Wa,nd,Mi,id,od,Go,Ka,Ja,sd,pp,mp,gp,th,ad,cd,rh,fp,ld,hp,yp,bp,nh,dd,Cn,Xa,ud,ih,Sp,qo,Wo,Qa,pd,oh,Ya,vp,md,sh,gd,ah,fd,ch}from"./chunk-q8hp4dfy.js";import{Za,Y,ec,Ko,Cp,Pt,Tp,Ep,Tn,wp,Ap,Rp,Ip,Pp}from"./chunk-55cckkb2.js";export{xa as ABTestManager,je as AI,Cu as AWSAPIError,Pa as AWSConfigManager,vm as AWS_PSEUDO_PARAMETERS,nt as AWS_REGIONS,Vo as ApiGateway,yn as Arn,ne as AssetHasher,Ae as Auth,Ra as BackupManager,Yl as BatchProcessingManager,ka as BlueGreenManager,Vl as BounceComplaintHandler,_l as BuildOptimizationManager,Be as CDN,qa as CHAIN_HEADER,la as CLOUDFRONT_FAILOVER_STATUS_CODES,af as COMMON_CROSS_ACCOUNT_ROLES,Di as Cache,$i as CanaryManager,Nl as CertificateManager,Rt as CloudError,nl as CloudFormationBuilder,yu as CloudFormationClient,Su as CloudFrontClient,Da as CloudTrailManager,Vu as CommandHistory,Ie as Communication,b as Compute,zo as ConfigurationError,Ma as ContainerRegistryManager,Kt as CredentialError,bl as CrossRegionReferenceManager,ou as DASHBOARD_ENTRY,su as DASHBOARD_PORT_BASE,au as DASHBOARD_PORT_SPAN,iu as DASHBOARD_STATE_DIR,Jc as DEFAULT_FAILOVER_STATUS_CODES,Mi as DEFAULT_RECURSION_LIMITS,Pe as DEFAULT_SERVICE_LIMITS,Zs as DEFAULT_STATE_DIR,eu as DEFAULT_STORAGE_FAILOVER_STATUS_CODES,Ga as DEPTH_HEADER,Ql as DLQMonitoringManager,Te as DNS,Bl as DNSSECManager,Gt as Database,Pl as DatabaseUserManager,he as DebugLogger,Zd as DependencyGraph,Re as Deployment,vu as DeploymentError,Ia as DisasterRecoveryManager,N as Email,ql as EmailAdvanced,zl as EmailAnalyticsManager,Wl as EmailHandlers,Gl as EmailTemplateManager,Tu as ErrorCodes,Bo as FAILOVER_REPLICA_POLICY_SID,Xl as FIFOQueueManager,va as FileCache,rt as FileSystem,t as Fn,Sl as GlobalResourceManager,Na as GuardDutyManager,Ru as HashCache,md as HealthCheckManager,xl as ImageScanningManager,Ht as JobLoader,ud as LARAVEL_SERVERLESS_BUILD_STEPS,Ll as LambdaConcurrencyManager,Fl as LambdaDLQManager,Ml as LambdaDestinationsManager,Ol as LambdaLayersManager,Ul as LambdaVPCManager,$l as LambdaVersionsManager,Oa as LogsManager,lp as MANAGED_NODE_VERSIONS,il as MANAGEMENT_DASHBOARD_SITE_PREFIX,xe as Messaging,Al as MetricsManager,Rl as MigrationManager,ml as MockCloudFormation,fl as MockDynamoDB,gl as MockS3,Ni as Monitoring,Tl as MultiAccountManager,yl as MultiRegionManager,Lu as MultiStepProgress,L as Network,gd as NetworkSecurityManager,Yc as ORIGIN_CONNECTION_ATTEMPTS,Zc as ORIGIN_CONNECTION_TIMEOUT,Xc as ORIGIN_GROUP_ALLOWED_METHODS,bm as ORIGIN_GROUP_ID_SUFFIX,Qc as ORIGIN_GROUP_SELECTION_CRITERIA,El as OrganizationManager,Sp as PHP_DEFAULT_EXCLUDES,dp as PHP_LAYER_EXTENSIONS,X as ParameterStore,Il as PerformanceManager,we as Permissions,wt as Phone,Kl as PhoneAdvanced,tl as PhoneHandlers,wa as PreviewEnvironmentManager,Aa as PreviewNotificationService,$u as ProgressBar,_a as ProgressiveDeploymentManager,Yd as Pseudo,ge as Queue,Zl as QueueManagementManager,dm as QueuePresets,Hu as RECOMMENDED_ACCOUNT_STRUCTURES,sf as RECOMMENDED_SCPS,Fu as REPL,ju as REPLCommandBuilder,Bu as REPLContext,Iu as RateLimiter,um as RealtimePresets,Go as RecursionGuard,At as Redirects,vl as RegionPairManager,Et as Registry,$a as ReplicaManager,fd as ResourceManagementManager,jl as Route53ResolverManager,Fa as Route53RoutingManager,Sa as S3Client,fe as S3Error,Ee as SMS,Wc as STATE_DIR_ENV_VAR,Fo as STORAGE_FAILOVER_METADATA_KEY,qt as Search,ki as Secrets,La as SecretsManager,Dl as SecretsRotationManager,j as Security,Or as SecurityHubManager,kl as SecurityScanningManager,Hl as SenderReputationManager,Ua as ServiceMeshManager,jo as Sftp,Jl as SmsAdvanced,rl as SmsHandlers,Mu as Spinner,Cl as StackDependencyManager,Sm as StacksIntegration,pd as StaticSiteManager,Fe as Storage,Ya as StorageAdvancedManager,$r as SyntheticsManager,Wa as TRACE_HEADER,Uu as TaskList,Lo as TemplateBuilder,Ca as TemplateCache,cl as ValidationError,nu as Workflow,wl as XRayManager,Zu as abTestManager,el as amazonLinuxImageId,ru as amazonLinuxImageParameter,hm as analyzeStackDiff,Ba as artifactKey,fn as assertOriginGroupMethods,$g as autocomplete,Wu as awsConfigManager,Gu as backupManager,sg as batch,Qf as batchProcessingManager,Qu as blueGreenManager,Gf as bounceComplaintHandler,eh as buildBunRuntimeLayerZip,ya as buildCloudFormationTemplate,fa as buildFailoverReplicaPolicyStatement,ia as buildMailEnv,Zf as buildNodeRuntimeLayerZip,Lf as buildOptimizationManager,da as buildOriginGroup,Uo as buildOriginGroups,ih as buildPhpRuntimeLayerZip,ga as buildReplicationConfiguration,ma as buildReplicationRole,Yu as canaryManager,fg as categorizeChanges,_f as certificateManager,Xm as checkIAMPermissions,ad as checkInvocation,Ym as checkServiceQuotas,Pu as chunk,Ap as clearSigningKeyCache,Du as cloudConfigSchema,Ku as cloudTrailManager,Wo as collectPhpAppEntries,Um as composePresets,Va as composeServerlessAppTemplate,op as containerRegistryManager,Rm as createApiBackendPreset,bp as createCliHandler,qm as createCredentialProvider,Lm as createDashboardSite,km as createDataPipelinePreset,ll as createError,ba as createExistingStaticFullStackPreset,Am as createFullStackAppPreset,nh as createHandlers,hp as createHttpHandler,Pm as createJamstackPreset,Om as createLaravelPreset,xm as createMLApiPreset,Dm as createMicroservicesPreset,Eg as createMockAWS,Tm as createNodeJsServerPreset,Em as createNodeJsServerlessPreset,Fm as createPreset,Ko as createPresignedUrl,Cp as createPresignedUrlAsync,yp as createQueueHandler,Nm as createRealtimeAppPreset,bu as createS3Client,$m as createServerlessLaravelPreset,wm as createServerlessNodePreset,Cm as createStaticSitePreset,_m as createTraditionalWebAppPreset,Im as createWordPressPreset,It as createZip,zg as crossRegionReferenceManager,kf as databaseUserManager,pl as defaultLocalConfig,xr as deploymentCoexistenceError,cu as deriveManagementDashboardPort,Kc as detectDeploymentTargets,Km as detectMisconfigurations,Za as detectServiceRegion,pg as diffTemplates,Xf as dlqMonitoringManager,zf as dnssecManager,qu as drManager,qf as emailAnalyticsManager,Kf as emailTemplateManager,fp as eventToRequest,sl as extendPreset,Jf as fifoQueueManager,og as findChangedFiles,uf as formatAccountStructure,Ig as formatBytes,ym as formatDiff,Pg as formatDuration,Mg as formatFlagSuggestions,Bg as formatHistory,jg as formatHistoryStats,Ng as formatKeyValue,Dg as formatList,Rg as formatProgressBar,zu as formatRegion,tf as formatRegionList,kg as formatSuggestion,wg as formatTable,Ag as formatTree,mu as fromEC2Metadata,gu as fromECSMetadata,uu as fromEnvironment,pu as fromSharedCredentials,fu as fromWebIdentity,nd as functionFingerprint,Ha as generateAppImageDockerfile,Af as generateApprovalConfig,ed as generateBootstrap,xu as generateCleanupWorkflow,_u as generateCostReportWorkflow,lf as generateCrossAccountRoleCF,Tf as generateDeploymentConfig,yf as generateDeploymentPipeline,pf as generateDeploymentWorkflow,o as generateLogicalId,Cf as generateManualPipeline,hf as generateMatrixWorkflow,Ef as generateMultiEnvConfig,bf as generateMultiEnvPipeline,mf as generateMultiEnvWorkflow,gf as generatePRPreviewWorkflow,Rf as generateParallelConfig,dd as generatePhpFpmConfig,td as generatePhpLayerDockerfile,Sf as generatePreviewPipeline,ku as generatePreviewWorkflow,l as generateResourceName,wf as generateScheduledConfig,vf as generateScheduledPipeline,ff as generateScheduledWorkflow,al as getAccountId,Wg as getAllRegions,Yg as getClosestRegion,Ug as getCommandUsage,_g as getContextualHelp,_i as getCredentials,hg as getDeploymentStrategy,yg as getDiffStats,mg as getDiffSummary,Eu as getErrorDetails,Ea as getLocalConfig,Cg as getLocalCredentials,vg as getLocalEndpoint,Tg as getLocalEnvVars,Zm as getQuotaUsageSummary,cf as getRecommendedStructure,Oi as getRegion,rf as getRegionStats,Jg as getRegionsByCompliance,Kg as getRegionsByLocation,Xg as getRegionsByPricingTier,wu as getRequiredPermissions,Rp as getSigningKeyCacheSize,pm as getTimestamp,Hg as globalResourceManager,Ju as guardDutyManager,Wt as hasManagementDashboardSite,tg as hashBuffer,rg as hashDirectory,dl as hashFile,ng as hashManifest,ul as hashString,sh as healthCheckManager,$f as imageScanningManager,od as inspectInvocation,mp as installRecursionFetch,sd as invocationContext,tu as isArmInstanceType,xg as isLikelyTypo,Sg as isLocalDevelopment,_r as isManagementDashboardSiteName,Ip as isNodeCryptoAvailable,Pi as isS3RestEndpoint,ta as isStateDirConfigured,ra as isStatePath,Qg as isValidRegion,Pp as isWebCryptoAvailable,Ff as lambdaConcurrencyManager,Vf as lambdaDLQManager,Bf as lambdaDestinationsManager,Mf as lambdaLayersManager,jf as lambdaVPCManager,Uf as lambdaVersionsManager,Xa as laravelServerlessEnvDefaults,tp as logsManager,Kd as mailEnabled,na as mailFirewallPorts,Pt as makeAWSRequest,Ep as makeAWSRequestAsync,Tp as makeAWSRequestOnce,ol as managementDashboardSiteName,bn as mergeInfrastructure,Pf as metricsManager,Df as migrationManager,nf as multiAccountManager,Vg as multiRegionManager,ah as networkSecurityManager,of as organizationManager,Qa as packagePhpApp,vn as packageServerlessApp,Ta as parallel,ag as parallelMap,cg as parallelWithRetry,id as parseChain,wp as parseJSONResponse,Tn as parseXMLResponse,Nf as performanceManager,za as phpLayerBuildStage,up as phpLayerPackages,Cn as phpRuntimeLayerAssets,Nu as previewManager,Ou as previewNotifications,ug as processInChunks,ep as progressiveDeploymentManager,Ka as propagationHeaders,Yf as queueManagementManager,ig as quickHash,Ja as recursionBlockedResponse,Gg as regionPairManager,np as replicaManager,gg as requiresReplacement,th as resetRecursionRuntime,rh as resolveApp,w as resolveAppDatabase,B as resolveCloudProvider,Sn as resolveCredentials,lu as resolveDashboardDomain,du as resolveDashboardDomains,fm as resolveDeployBucketName,H as resolveDeploymentMode,Mo as resolveFailoverStatusCodes,Ri as resolveMailService,Mm as resolveManagementDashboardSite,xi as resolveManagementDashboardSites,tt as resolveOriginConnection,T as resolveProjectStackName,ja as resolveQueueNames,Jt as resolveQueues,pp as resolveRecursionConfig,hu as resolveRegion,ke as resolveServerlessAppStackName,ca as resolveServerlessArtifactBucketName,Ii as resolveServerlessAssetBucketName,Li as resolveServerlessRuntime,aa as resolveSiteBucketName,sa as resolveSiteResourceName,oa as resolveSiteStackName,A as resolveStatePath,gm as resolveStorageBucketName,ua as resolveStorageFailover,ch as resourceManagementManager,ld as responseToResult,Hf as route53ResolverManager,ap as route53RoutingManager,cp as runBuildHooks,qo as runPhpBuildHooks,pa as s3RegionalDomain,mm as sanitizeName,Og as searchCommands,ip as secretsManager,xf as secretsRotationManager,Xu as securityHubManager,Of as securityScanningManager,Wf as senderReputationManager,lg as sequence,sp as serviceMeshManager,ea as setStateDir,Ho as sha256,gp as sharedRecursionGuard,rd as sharedRuntimeLoop,Y as signRequest,ec as signRequestAsync,qg as stackDependencyManager,gn as stateDir,Ue as statePath,oh as staticSiteManager,vp as storageAdvancedManager,ha as storageFailoverReplicasFromTemplate,hl as suggestCommand,Lg as suggestFlags,Qm as suggestIAMPolicy,eg as suggestQuotaIncrease,ef as suggestRegionPairs,Zg as suggestRegions,rp as syntheticsManager,Au as templateCache,df as validateAccountStructure,bg as validateAgainstSchema,Fg as validateCommand,Wm as validateConfiguration,Jm as validateCredentials,hn as validateOriginGroups,Qd as validateResourceLimits,Jd as validateTemplate,Xd as validateTemplateSize,Hm as withCDN,zm as withCache,Vm as withDatabase,cd as withInvocation,Bm as withMonitoring,Gm as withQueue,jm as withSecurity,dg as withTimeout,If as xrayManager};