@stacksjs/ts-cloud 0.16.40 → 0.16.41

package/dist/aws/ec2-launch.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/aws/ec2.d.ts

@@ -441,6 +441,29 @@ export declare class EC2Client {
             Value: boolean;
         };
     }): Promise<void>;
+    /**
+     * Import an SSH public key as an EC2 key pair, for a machine made with
+     * `KeyName`. The private key never leaves the caller.
+     */
+    importKeyPair(options: {
+        KeyName: string;
+        PublicKeyMaterial: string;
+        TagSpecifications?: {
+            ResourceType: string;
+            Tags: {
+                Key: string;
+                Value: string;
+            }[];
+        }[];
+    }): Promise<{
+        KeyName?: string;
+        KeyPairId?: string;
+        KeyFingerprint?: string;
+    }>;
+    /**
+     * Delete an EC2 key pair by name. Deleting one that does not exist succeeds.
+     */
+    deleteKeyPair(keyName: string): Promise<void>;
     /**
      * Create a Security Group
      */
@@ -548,6 +571,30 @@ export declare class EC2Client {
             Name?: string;
             Arn?: string;
         };
+        /** An EC2 key pair, for SSH as the image's default user. */
+        KeyName?: string;
+        /**
+         * What an `shutdown` from inside the instance does. `terminate` lets a
+         * one-off job delete its own machine when it is done.
+         */
+        InstanceInitiatedShutdownBehavior?: 'stop' | 'terminate';
+        /** Root and extra EBS volumes, e.g. a larger root disk. */
+        BlockDeviceMappings?: {
+            DeviceName: string;
+            Ebs?: {
+                VolumeSize?: number;
+                VolumeType?: string;
+                Iops?: number;
+                Throughput?: number;
+                DeleteOnTermination?: boolean;
+                Encrypted?: boolean;
+            };
+        }[];
+        /** Require IMDSv2 tokens, which is what AWS recommends for every instance. */
+        MetadataOptions?: {
+            HttpTokens?: 'required' | 'optional';
+            HttpEndpoint?: 'enabled' | 'disabled';
+        };
         TagSpecifications?: {
             ResourceType: string;
             Tags: {

package/dist/aws/index.js

@@ -1 +1 @@
-import{Se,lr,Cs,Es,rg,Xa,Ya,vs,Ts,Za,nt,K,it,ae,E,Ie,Rn,ec,_e,tc,Dn,ng,Zf,rc,nc,Pn,Nn,eh,th,RS,DS,PS,NS,kt,kS,BS,xS,OS,Bt,rh,nh,ih,xt,sh,oh,ah,kn,_S,LS,$S,ur,MS,FS,US,ic,sc,ig,QS,HS,GS,gr,ch,dh,pr,st,Bn,oc,sg,VS,og,qS,Ot,jS,zS,KS,WS,de,JS,XS,YS,ZS,mr,eI,tI,rI,xn,ac,cc,ag,cg,dc,fr}from"../chunk-ype3pqh5.js";import{be,ot,On,lh}from"../chunk-w78e5n94.js";import{lc,Le,S}from"../chunk-3s8dtcz8.js";import{$e}from"../chunk-varjr6np.js";import{W}from"../chunk-mxprxjd4.js";import{at,le,Me,J,Mt,Ln,ws,Rs,hr,Ar,$n,yr,Ds,Ps,Ns,ks,X,Bs,xs,Os,_s,ue,Ls,$s,Ms,D,pc,Mn,mc,ge,Sr}from"../chunk-3w7q4sjs.js";import{I}from"../chunk-97gre81w.js";import{Br,Re}from"../chunk-ysx5m6cs.js";import{h}from"../chunk-9e4afej1.js";import{o}from"../chunk-bwtxb2hf.js";import{Or,Xg,Yg,Si,n,l,Ph}from"../chunk-cgcthvq9.js";export{ge as ACMClient,Sr as ACMDnsValidator,n as AWSClient,oc as ApplicationAutoScalingClient,lr as AwsBackupClient,th as BedrockAgentClient,eh as BedrockAgentRuntimeClient,Nn as BedrockClient,Pn as BedrockRuntimeClient,h as CloudFormationClient,S as CloudFrontClient,Ie as CloudWatchLogsClient,J as CloudflareProvider,kt as ComprehendClient,Rn as ConnectClient,Ts as CostExplorerClient,Mn as DnsProviderFactory,_e as DynamoDBClient,Br as EC2Client,$e as ECRClient,nt as ECSClient,fr as EFSClient,ec as ELBv2Client,st as ElastiCacheClient,On as EmailClient,pr as EventBridgeClient,Me as GoDaddyProvider,be as IAMClient,sg as ImapServer,gr as KendraClient,E as LambdaClient,tc as OpenSearchClient,at as PROXIABLE_RECORD_TYPES,ic as PersonalizeClient,ig as PersonalizeEventsClient,sc as PersonalizeRuntimeClient,kn as PollyClient,le as PorkbunProvider,W as RDSClient,Bt as RekognitionClient,I as Route53Client,Za as Route53DomainsClient,X as Route53Provider,o as S3Client,ot as SESClient,it as SNSClient,ae as SQSClient,Re as SSMClient,Se as STSClient,Bn as SchedulerClient,K as SecretsManagerClient,Ot as SmsClient,dc as SmsVoiceClient,og as SmtpServer,xn as SupportClient,ac as SupportTemplates,xt as TextractClient,Dn as TranscribeClient,ur as TranslateClient,ue as UnifiedDnsValidator,mr as VoiceClient,kS as analyzeSentiment,Ns as applyDeclaredZoneSettings,Os as applyZoneMigration,l as buildQueryParams,Yg as canonicalUriFor,Si as coerceXmlValues,PS as completeWithClaude,lc as configOrigins,OS as containsPii,nh as countFacesInS3Image,ng as crc32,WS as createDeliveryReceiptHandler,D as createDnsProvider,$s as createGoDaddyValidator,vs as createObjectStorageClient,Ls as createPorkbunValidator,tI as createRecordingHandler,Ms as createRoute53Validator,$S as createSSML,zS as createScheduledSmsHandler,KS as createSmsClient,jS as createSmsInboxHandler,cg as createSmsInfrastructure,rI as createVoiceClient,eI as createVoicemailHandler,rc as decodeEventStream,Zf as decodeEventStreamMessage,yr as delegateZone,Ds as delegateZoneFromConfig,Ps as describeDelegation,ks as describeZoneSettings,Ph as detectCredentialSource,pc as detectDnsProvider,rh as detectLabelsFromS3,xS as detectLanguage,mc as dnsProviders,lh as email,nc as eventStreamError,Bs as exportRoute53Zone,BS as extractEntities,oh as extractFormsFromS3,ah as extractTablesFromS3,sh as extractTextFromS3,JS as formatPhoneNumber,NS as generateEmbeddings,YS as getCountryCode,QS as getRecommendations,HS as getSimilarItems,ag as getSmsInfrastructureStatus,ih as isContentSafe,hr as isNameserverRegistrar,ZS as isSamePhoneNumber,XS as isValidPhoneNumber,Ar as isZoneHost,Es as keyMatchesFilters,DS as listClaudeModels,US as listLanguages,LS as listVoices,rg as migrateObjectStorage,de as normalizePhoneNumber,xs as planZoneMigration,Mt as policyTag,Xa as providerEndpoint,Ln as qualifyName,Rs as reconcileDeclaredRecords,Cs as remapKey,RS as requestModelAccess,ws as resolveDeclaredRecords,Ya as resolveObjectStorage,Or as resolveS3Endpoint,dh as retrieveForRag,Le as s3OriginBucket,$n as sameNameservers,ch as search,cc as setupSmsInfrastructure,Xg as signingNameFor,VS as startImapServer,qS as startSmtpServer,_S as textToSpeech,GS as trackEvent,MS as translate,FS as translateToMultiple,_s as verifyZoneParity};
+import{Se,lr,Cs,Es,rg,Xa,Ya,vs,Ts,Za,nt,K,it,ae,E,Ie,Rn,ec,_e,tc,Dn,ng,Zf,rc,nc,Pn,Nn,eh,th,RS,DS,PS,NS,kt,kS,BS,xS,OS,Bt,rh,nh,ih,xt,sh,oh,ah,kn,_S,LS,$S,ur,MS,FS,US,ic,sc,ig,QS,HS,GS,gr,ch,dh,pr,st,Bn,oc,sg,VS,og,qS,Ot,jS,zS,KS,WS,de,JS,XS,YS,ZS,mr,eI,tI,rI,xn,ac,cc,ag,cg,dc,fr}from"../chunk-ype3pqh5.js";import{be,ot,On,lh}from"../chunk-w78e5n94.js";import{lc,Le,S}from"../chunk-3s8dtcz8.js";import{$e}from"../chunk-varjr6np.js";import{W}from"../chunk-mxprxjd4.js";import{at,le,Me,J,Mt,Ln,ws,Rs,hr,Ar,$n,yr,Ds,Ps,Ns,ks,X,Bs,xs,Os,_s,ue,Ls,$s,Ms,D,pc,Mn,mc,ge,Sr}from"../chunk-3w7q4sjs.js";import{I}from"../chunk-97gre81w.js";import{Br,Re}from"../chunk-fwcf0n8f.js";import{h}from"../chunk-9e4afej1.js";import{o}from"../chunk-bwtxb2hf.js";import{Or,Xg,Yg,Si,n,l,Ph}from"../chunk-cgcthvq9.js";export{ge as ACMClient,Sr as ACMDnsValidator,n as AWSClient,oc as ApplicationAutoScalingClient,lr as AwsBackupClient,th as BedrockAgentClient,eh as BedrockAgentRuntimeClient,Nn as BedrockClient,Pn as BedrockRuntimeClient,h as CloudFormationClient,S as CloudFrontClient,Ie as CloudWatchLogsClient,J as CloudflareProvider,kt as ComprehendClient,Rn as ConnectClient,Ts as CostExplorerClient,Mn as DnsProviderFactory,_e as DynamoDBClient,Br as EC2Client,$e as ECRClient,nt as ECSClient,fr as EFSClient,ec as ELBv2Client,st as ElastiCacheClient,On as EmailClient,pr as EventBridgeClient,Me as GoDaddyProvider,be as IAMClient,sg as ImapServer,gr as KendraClient,E as LambdaClient,tc as OpenSearchClient,at as PROXIABLE_RECORD_TYPES,ic as PersonalizeClient,ig as PersonalizeEventsClient,sc as PersonalizeRuntimeClient,kn as PollyClient,le as PorkbunProvider,W as RDSClient,Bt as RekognitionClient,I as Route53Client,Za as Route53DomainsClient,X as Route53Provider,o as S3Client,ot as SESClient,it as SNSClient,ae as SQSClient,Re as SSMClient,Se as STSClient,Bn as SchedulerClient,K as SecretsManagerClient,Ot as SmsClient,dc as SmsVoiceClient,og as SmtpServer,xn as SupportClient,ac as SupportTemplates,xt as TextractClient,Dn as TranscribeClient,ur as TranslateClient,ue as UnifiedDnsValidator,mr as VoiceClient,kS as analyzeSentiment,Ns as applyDeclaredZoneSettings,Os as applyZoneMigration,l as buildQueryParams,Yg as canonicalUriFor,Si as coerceXmlValues,PS as completeWithClaude,lc as configOrigins,OS as containsPii,nh as countFacesInS3Image,ng as crc32,WS as createDeliveryReceiptHandler,D as createDnsProvider,$s as createGoDaddyValidator,vs as createObjectStorageClient,Ls as createPorkbunValidator,tI as createRecordingHandler,Ms as createRoute53Validator,$S as createSSML,zS as createScheduledSmsHandler,KS as createSmsClient,jS as createSmsInboxHandler,cg as createSmsInfrastructure,rI as createVoiceClient,eI as createVoicemailHandler,rc as decodeEventStream,Zf as decodeEventStreamMessage,yr as delegateZone,Ds as delegateZoneFromConfig,Ps as describeDelegation,ks as describeZoneSettings,Ph as detectCredentialSource,pc as detectDnsProvider,rh as detectLabelsFromS3,xS as detectLanguage,mc as dnsProviders,lh as email,nc as eventStreamError,Bs as exportRoute53Zone,BS as extractEntities,oh as extractFormsFromS3,ah as extractTablesFromS3,sh as extractTextFromS3,JS as formatPhoneNumber,NS as generateEmbeddings,YS as getCountryCode,QS as getRecommendations,HS as getSimilarItems,ag as getSmsInfrastructureStatus,ih as isContentSafe,hr as isNameserverRegistrar,ZS as isSamePhoneNumber,XS as isValidPhoneNumber,Ar as isZoneHost,Es as keyMatchesFilters,DS as listClaudeModels,US as listLanguages,LS as listVoices,rg as migrateObjectStorage,de as normalizePhoneNumber,xs as planZoneMigration,Mt as policyTag,Xa as providerEndpoint,Ln as qualifyName,Rs as reconcileDeclaredRecords,Cs as remapKey,RS as requestModelAccess,ws as resolveDeclaredRecords,Ya as resolveObjectStorage,Or as resolveS3Endpoint,dh as retrieveForRag,Le as s3OriginBucket,$n as sameNameservers,ch as search,cc as setupSmsInfrastructure,Xg as signingNameFor,VS as startImapServer,qS as startSmtpServer,_S as textToSpeech,GS as trackEvent,MS as translate,FS as translateToMultiple,_s as verifyZoneParity};

package/dist/bin/{chunk-az504aqf.js → chunk-040x6j9v.js}

@@ -1 +1 @@
-import{Dr,Jc,Xc,Tt,kr,Nr,xr,_r,gn}from"./chunk-8fxksvw4.js";import"./chunk-mex7tac5.js";import"./chunk-1jwmkbzx.js";import"./chunk-4yym8xm4.js";export{kr as AwsSecretsManagerConfigurationBackend,Nr as AwsSsmConfigurationBackend,_r as ConfigurationService,Dr as ConfigurationStore,xr as ExternalConfigurationBackend,Tt as LocalEncryptedConfigurationBackend,Jc as parseDotenv,Xc as serializeDotenv,gn as synchronizeConfiguredConfiguration};
+import{Dr,Jc,Xc,Tt,kr,Nr,xr,_r,gn}from"./chunk-8e4ck7cg.js";import"./chunk-xq7ngz6q.js";import"./chunk-ddwp5np9.js";import"./chunk-4yym8xm4.js";export{kr as AwsSecretsManagerConfigurationBackend,Nr as AwsSsmConfigurationBackend,_r as ConfigurationService,Dr as ConfigurationStore,xr as ExternalConfigurationBackend,Tt as LocalEncryptedConfigurationBackend,Jc as parseDotenv,Xc as serializeDotenv,gn as synchronizeConfiguredConfiguration};

package/dist/bin/{chunk-0716rh6x.js → chunk-2b9e10db.js}

@@ -1 +1 @@
-import{Gp,an,so,se,qp,Tc,Rd,hs,Wp,Kp,Jp,Ec,ao,ys,wc,cn,br,Xp,yi,Qp,Ac,Id,Pd,bs,Rc,Ic,Sr,co,vr,Pc,Ss,bi,Dd,lo,Dc,kc,uo,kd,Nc,xc,_c,Oc,vs,Nd,xd,Yp,_d,$c,po,Od,$d,Cs,Lt,Ts,Es,ws,Lc,Ld,Mc,As,Zp,ht,em,Uc,Mt,Bc,tm,Fc,Md,rm,ee,Ud,Rs,nm,mo,Si,vi,Is,Bd,Fd,im,Ps,Ds}from"./chunk-v9wf266f.js";import"./chunk-mex7tac5.js";import"./chunk-1jwmkbzx.js";import"./chunk-4yym8xm4.js";export{Cs as AnomalyConfigStore,Bd as AwsSpendTransport,Fd as ComputeSpendTransport,bs as CounterTracker,Ac as DEFAULT_METER_MAPPINGS,Ec as DEFAULT_PRICE_BOOK,co as DEFAULT_THRESHOLDS,Lt as DETECTABLE_SIGNALS,so as ENFORCEMENT_ACTIONS,uo as ENFORCEMENT_DESCRIPTIONS,se as ENFORCEMENT_SEVERITY,Ld as FOCUS_VERSION,an as METERS,Gp as METER_KEYS,qp as MICRO_CENTS,Dd as MIN_PROJECTION_CONFIDENCE,Md as RecordingSpendTransport,Od as SENSITIVITY_THRESHOLDS,vi as SPEND_CYCLE_SECONDS,Uc as SPEND_GATE_SETTING,nm as SPEND_LEASE_SETTING,Es as SignalSource,Bc as SpendCapError,Mt as SpendGate,mo as SpendLoopLease,Rs as SpendNotificationRouter,Si as SpendRunner,ht as SpendService,vr as SpendStore,rm as URGENT_SPEND_EVENTS,kd as USER_VISIBLE_ACTIONS,Ic as aggregateDeltas,po as anomalyOptionsForSignal,tm as assertSpendAllows,br as budgetWindow,im as compositeSpendTransport,Fc as createEnforcementHandlers,_d as detectAnomalies,$c as detectLatestAnomaly,Dc as evaluateBudget,Yp as ewma,Id as findMapping,Rd as findPriceEntry,ee as formatCents,bi as formatTimeToExhaustion,lo as governingLimitCents,Ps as handleSpendRequest,yi as hourBucket,Qp as hourBucketsBetween,Oc as isOperationAllowed,ao as isValidTimeZone,Lc as lookbackHoursForSignal,vs as median,Nd as medianAbsoluteDeviation,kc as mergeDecisions,Jp as mergePriceBooks,Rc as meterTelemetry,ws as optionsForSignal,Ss as percentOfLimit,Nc as planEnforcement,Xp as previousBudgetWindow,hs as priceUsage,Wp as priceUsageLines,Pc as projectSpend,xd as robustZScore,Kp as roundCents,$d as routeMatches,xc as runEnforcement,Sr as scopeKey,Ts as signalDefinition,Ud as spendNotificationText,Ds as spendOpenApiPaths,Is as startSpendLoop,Zp as streamFocusJsonl,_c as strongestActiveAction,Tc as tieredMicroCents,As as toFocusJsonl,Mc as toFocusRecords,Pd as usageDeltaKey,cn as utcInstantOfLocal,em as zeroFill,wc as zoneOffsetMs,ys as zonedParts};
+import{qp,an,so,se,Gp,Tc,Rd,hs,Wp,Kp,Jp,Ec,ao,ys,wc,cn,br,Xp,yi,Qp,Ac,Id,Pd,bs,Rc,Ic,Sr,co,vr,Pc,Ss,bi,Dd,lo,Dc,kc,uo,kd,Nc,xc,_c,Oc,vs,Nd,xd,Yp,_d,$c,po,Od,$d,Cs,Lt,Ts,Es,ws,Lc,Ld,Mc,As,Zp,ht,em,Uc,Mt,Bc,tm,Fc,Md,rm,ee,Ud,Rs,nm,mo,Si,vi,Is,Bd,Fd,im,Ps,Ds}from"./chunk-p8xy9qm7.js";import"./chunk-xq7ngz6q.js";import"./chunk-ddwp5np9.js";import"./chunk-4yym8xm4.js";export{Cs as AnomalyConfigStore,Bd as AwsSpendTransport,Fd as ComputeSpendTransport,bs as CounterTracker,Ac as DEFAULT_METER_MAPPINGS,Ec as DEFAULT_PRICE_BOOK,co as DEFAULT_THRESHOLDS,Lt as DETECTABLE_SIGNALS,so as ENFORCEMENT_ACTIONS,uo as ENFORCEMENT_DESCRIPTIONS,se as ENFORCEMENT_SEVERITY,Ld as FOCUS_VERSION,an as METERS,qp as METER_KEYS,Gp as MICRO_CENTS,Dd as MIN_PROJECTION_CONFIDENCE,Md as RecordingSpendTransport,Od as SENSITIVITY_THRESHOLDS,vi as SPEND_CYCLE_SECONDS,Uc as SPEND_GATE_SETTING,nm as SPEND_LEASE_SETTING,Es as SignalSource,Bc as SpendCapError,Mt as SpendGate,mo as SpendLoopLease,Rs as SpendNotificationRouter,Si as SpendRunner,ht as SpendService,vr as SpendStore,rm as URGENT_SPEND_EVENTS,kd as USER_VISIBLE_ACTIONS,Ic as aggregateDeltas,po as anomalyOptionsForSignal,tm as assertSpendAllows,br as budgetWindow,im as compositeSpendTransport,Fc as createEnforcementHandlers,_d as detectAnomalies,$c as detectLatestAnomaly,Dc as evaluateBudget,Yp as ewma,Id as findMapping,Rd as findPriceEntry,ee as formatCents,bi as formatTimeToExhaustion,lo as governingLimitCents,Ps as handleSpendRequest,yi as hourBucket,Qp as hourBucketsBetween,Oc as isOperationAllowed,ao as isValidTimeZone,Lc as lookbackHoursForSignal,vs as median,Nd as medianAbsoluteDeviation,kc as mergeDecisions,Jp as mergePriceBooks,Rc as meterTelemetry,ws as optionsForSignal,Ss as percentOfLimit,Nc as planEnforcement,Xp as previousBudgetWindow,hs as priceUsage,Wp as priceUsageLines,Pc as projectSpend,xd as robustZScore,Kp as roundCents,$d as routeMatches,xc as runEnforcement,Sr as scopeKey,Ts as signalDefinition,Ud as spendNotificationText,Ds as spendOpenApiPaths,Is as startSpendLoop,Zp as streamFocusJsonl,_c as strongestActiveAction,Tc as tieredMicroCents,As as toFocusJsonl,Mc as toFocusRecords,Pd as usageDeltaKey,cn as utcInstantOfLocal,em as zeroFill,wc as zoneOffsetMs,ys as zonedParts};

package/dist/bin/chunk-2tvtr5fy.js

@@ -0,0 +1 @@
+import{di}from"./chunk-ndf3t76p.js";import"./chunk-pf9dbm3b.js";import"./chunk-k0p394bn.js";import"./chunk-7593hjcq.js";import"./chunk-x6w8jvs1.js";import"./chunk-nmqjmx30.js";import"./chunk-dkf2kcsc.js";import"./chunk-ddwp5np9.js";import"./chunk-4yym8xm4.js";export{di as resolveServerDashboardData};

package/dist/bin/{chunk-22x7vxxw.js → chunk-4azcshw6.js}

@@ -1,2 +1,2 @@
-import{Ho,Sa}from"./chunk-1jwmkbzx.js";import{g}from"./chunk-nmqjmx30.js";var l=()=>{};async function Fp(a,c=l){for(let e of a){let t=new g(e.replicaRegion),i;try{i=await t.headBucket(e.replicaBucket)}catch(r){if(r?.statusCode===301)throw Error(`Failover replica bucket ${e.replicaBucket} already exists outside ${e.replicaRegion}. Pick another failover.bucket or region for infrastructure.storage.${e.name}.`);if(r?.statusCode===403)throw Error(`Failover replica bucket ${e.replicaBucket} exists but this account cannot reach it (S3 names are global, so another account may own it). Set infrastructure.storage.${e.name}.failover.bucket to a name you own.`);throw r}if(i.exists&&i.region&&i.region!==e.replicaRegion)throw Error(`Failover replica bucket ${e.replicaBucket} is in ${i.region}, not ${e.replicaRegion}.`);if(!i.exists)c(`Creating failover replica bucket ${e.replicaBucket} in ${e.replicaRegion}`),await t.createBucket(e.replicaBucket);if(await t.putPublicAccessBlock(e.replicaBucket,{BlockPublicAcls:!0,IgnorePublicAcls:!0,BlockPublicPolicy:!0,RestrictPublicBuckets:!0}),await t.putBucketEncryption(e.replicaBucket,"AES256"),e.replicate){if((await t.getBucketVersioning(e.replicaBucket)).Status!=="Enabled")c(`Enabling versioning on ${e.replicaBucket} (S3 replication requires it)`),await t.putBucketVersioning(e.replicaBucket,"Enabled")}}}async function jp(a,c,e=l){for(let t of a){let i=c[t.distributionArnOutput];if(!i)throw Error(`Stack output ${t.distributionArnOutput} is missing, so the failover replica ${t.replicaBucket} cannot be scoped to its distribution.`);let r=new g(t.replicaRegion),s={Version:"2012-10-17",Statement:[...((await r.getBucketPolicy(t.replicaBucket))?.Statement??[]).filter((n)=>n?.Sid!==Ho),Sa({replicaBucket:t.replicaBucket,distributionArn:i})]};e(`Granting ${i} read access to ${t.replicaBucket}`),await r.putBucketPolicy(t.replicaBucket,s)}}async function Vp(a,c=l){let e={};for(let t of a){let i=new g(t.primaryRegion),r=new g(t.replicaRegion),[u,p]=await Promise.all([i.listAllObjects({bucket:t.primaryBucket}),r.listAllObjects({bucket:t.replicaBucket})]),s=new Map(p.map((o)=>[o.Key,o.Size])),n=u.filter((o)=>s.get(o.Key)!==o.Size);for(let o of n)await r.copyObject({sourceBucket:t.primaryBucket,sourceKey:o.Key,destinationBucket:t.replicaBucket,destinationKey:o.Key});if(n.length>0)c(`Copied ${n.length} object(s) from ${t.primaryBucket} to ${t.replicaBucket}`);e[t.replicaBucket]=n.length}return e}async function zp(a,c=l){for(let e of a){let t=new g(e.replicaRegion);if(!(await t.headBucket(e.replicaBucket)).exists)continue;await t.emptyBucket(e.replicaBucket),await t.deleteBucket(e.replicaBucket),c(`Deleted failover replica bucket ${e.replicaBucket}`)}}
+import{Ho,Sa}from"./chunk-ddwp5np9.js";import{g}from"./chunk-nmqjmx30.js";var l=()=>{};async function Fp(a,c=l){for(let e of a){let t=new g(e.replicaRegion),i;try{i=await t.headBucket(e.replicaBucket)}catch(r){if(r?.statusCode===301)throw Error(`Failover replica bucket ${e.replicaBucket} already exists outside ${e.replicaRegion}. Pick another failover.bucket or region for infrastructure.storage.${e.name}.`);if(r?.statusCode===403)throw Error(`Failover replica bucket ${e.replicaBucket} exists but this account cannot reach it (S3 names are global, so another account may own it). Set infrastructure.storage.${e.name}.failover.bucket to a name you own.`);throw r}if(i.exists&&i.region&&i.region!==e.replicaRegion)throw Error(`Failover replica bucket ${e.replicaBucket} is in ${i.region}, not ${e.replicaRegion}.`);if(!i.exists)c(`Creating failover replica bucket ${e.replicaBucket} in ${e.replicaRegion}`),await t.createBucket(e.replicaBucket);if(await t.putPublicAccessBlock(e.replicaBucket,{BlockPublicAcls:!0,IgnorePublicAcls:!0,BlockPublicPolicy:!0,RestrictPublicBuckets:!0}),await t.putBucketEncryption(e.replicaBucket,"AES256"),e.replicate){if((await t.getBucketVersioning(e.replicaBucket)).Status!=="Enabled")c(`Enabling versioning on ${e.replicaBucket} (S3 replication requires it)`),await t.putBucketVersioning(e.replicaBucket,"Enabled")}}}async function jp(a,c,e=l){for(let t of a){let i=c[t.distributionArnOutput];if(!i)throw Error(`Stack output ${t.distributionArnOutput} is missing, so the failover replica ${t.replicaBucket} cannot be scoped to its distribution.`);let r=new g(t.replicaRegion),s={Version:"2012-10-17",Statement:[...((await r.getBucketPolicy(t.replicaBucket))?.Statement??[]).filter((n)=>n?.Sid!==Ho),Sa({replicaBucket:t.replicaBucket,distributionArn:i})]};e(`Granting ${i} read access to ${t.replicaBucket}`),await r.putBucketPolicy(t.replicaBucket,s)}}async function Vp(a,c=l){let e={};for(let t of a){let i=new g(t.primaryRegion),r=new g(t.replicaRegion),[u,p]=await Promise.all([i.listAllObjects({bucket:t.primaryBucket}),r.listAllObjects({bucket:t.replicaBucket})]),s=new Map(p.map((o)=>[o.Key,o.Size])),n=u.filter((o)=>s.get(o.Key)!==o.Size);for(let o of n)await r.copyObject({sourceBucket:t.primaryBucket,sourceKey:o.Key,destinationBucket:t.replicaBucket,destinationKey:o.Key});if(n.length>0)c(`Copied ${n.length} object(s) from ${t.primaryBucket} to ${t.replicaBucket}`);e[t.replicaBucket]=n.length}return e}async function zp(a,c=l){for(let e of a){let t=new g(e.replicaRegion);if(!(await t.headBucket(e.replicaBucket)).exists)continue;await t.emptyBucket(e.replicaBucket),await t.deleteBucket(e.replicaBucket),c(`Deleted failover replica bucket ${e.replicaBucket}`)}}
 export{Fp,jp,Vp,zp};

package/dist/bin/{chunk-t5kqyr8m.js → chunk-5dqnj5n9.js}

@@ -1 +1 @@
-import{Fp,jp,Vp,zp}from"./chunk-22x7vxxw.js";import"./chunk-nmqjmx30.js";import"./chunk-dkf2kcsc.js";import"./chunk-1jwmkbzx.js";import"./chunk-4yym8xm4.js";export{zp as deleteFailoverReplicaBuckets,Fp as ensureFailoverReplicaBuckets,jp as grantFailoverReplicaAccess,Vp as seedFailoverReplicas};
+import{Fp,jp,Vp,zp}from"./chunk-4azcshw6.js";import"./chunk-nmqjmx30.js";import"./chunk-dkf2kcsc.js";import"./chunk-ddwp5np9.js";import"./chunk-4yym8xm4.js";export{zp as deleteFailoverReplicaBuckets,Fp as ensureFailoverReplicaBuckets,jp as grantFailoverReplicaAccess,Vp as seedFailoverReplicas};

package/dist/bin/chunk-6kt12934.js

@@ -0,0 +1 @@
+import{si}from"./chunk-f8689v5g.js";import"./chunk-9eqpnanr.js";import"./chunk-grwth4nw.js";import"./chunk-7p2va3nj.js";import"./chunk-45a8yv3j.js";import"./chunk-7593hjcq.js";import"./chunk-nmqjmx30.js";import"./chunk-dkf2kcsc.js";import"./chunk-ddwp5np9.js";import"./chunk-4yym8xm4.js";export{si as resolveDashboardData};

package/dist/bin/chunk-7nsjehvx.js

@@ -0,0 +1 @@
+import{Q}from"./chunk-pf9dbm3b.js";import"./chunk-dkf2kcsc.js";export{Q as EC2Client};

package/dist/bin/{chunk-w9rx90s2.js → chunk-89hvgp5e.js}

@@ -1 +1 @@
-import{_p,vd,oc,sc,Cd,Op,$p,Qt,Rn,Yt,Vi,Lp,In,Zo}from"./chunk-zvbc92pc.js";import{Ke,us,fc,ui,ps,Hp}from"./chunk-n7yefy09.js";import{jd,fo,Vd,zd,Hd,Cr,om,ho}from"./chunk-k343q24p.js";import{Ja,Xa,Qa,ad,ji,cd,ld,Jo,Ya,Za}from"./chunk-1jwmkbzx.js";import"./chunk-4yym8xm4.js";export{Xa as CHAIN_HEADER,Rn as DEFAULT_ATTACK_MODE_HOURS,jd as DEFAULT_DDOS_THRESHOLDS,ji as DEFAULT_RECURSION_LIMITS,Ja as DEPTH_HEADER,Qt as MAX_CONTROL_HOURS,Yt as ProtectionControlStore,_p as RATE_LIMIT_KEY_SEPARATOR,Cd as RateLimiter,Jo as RecursionGuard,Qa as TRACE_HEADER,In as applyControlsToDdos,Lp as applyControlsToRateLimits,ho as applyMitigationFactor,$p as defaultRateLimitRules,Vi as describePosture,Ke as escapeSecLang,ad as functionFingerprint,vd as globMatches,fc as globToRegex,ld as inspectInvocation,us as isSafePattern,fo as isValidCidr,Zo as mergeControlsIntoConfig,cd as parseChain,om as planMitigation,Ya as propagationHeaders,Op as rateLimitHeaders,sc as rateLimitKey,Za as recursionBlockedResponse,Cr as renderDdosInstallScript,Hd as renderNftablesRuleset,zd as renderSysctlFile,ui as renderWafConfig,ps as renderWafInstallScript,oc as ruleMatches,Vd as sysctlHardening,Hp as wafEventTelemetry};
+import{_p,vd,oc,sc,Cd,Op,$p,Qt,Rn,Yt,Vi,Lp,In,Zo}from"./chunk-zvbc92pc.js";import{Ke,us,fc,ui,ps,Hp}from"./chunk-n7yefy09.js";import{jd,fo,Vd,zd,Hd,Cr,om,ho}from"./chunk-k343q24p.js";import{Ja,Xa,Qa,ad,ji,cd,ld,Jo,Ya,Za}from"./chunk-ddwp5np9.js";import"./chunk-4yym8xm4.js";export{Xa as CHAIN_HEADER,Rn as DEFAULT_ATTACK_MODE_HOURS,jd as DEFAULT_DDOS_THRESHOLDS,ji as DEFAULT_RECURSION_LIMITS,Ja as DEPTH_HEADER,Qt as MAX_CONTROL_HOURS,Yt as ProtectionControlStore,_p as RATE_LIMIT_KEY_SEPARATOR,Cd as RateLimiter,Jo as RecursionGuard,Qa as TRACE_HEADER,In as applyControlsToDdos,Lp as applyControlsToRateLimits,ho as applyMitigationFactor,$p as defaultRateLimitRules,Vi as describePosture,Ke as escapeSecLang,ad as functionFingerprint,vd as globMatches,fc as globToRegex,ld as inspectInvocation,us as isSafePattern,fo as isValidCidr,Zo as mergeControlsIntoConfig,cd as parseChain,om as planMitigation,Ya as propagationHeaders,Op as rateLimitHeaders,sc as rateLimitKey,Za as recursionBlockedResponse,Cr as renderDdosInstallScript,Hd as renderNftablesRuleset,zd as renderSysctlFile,ui as renderWafConfig,ps as renderWafInstallScript,oc as ruleMatches,Vd as sysctlHardening,Hp as wafEventTelemetry};

package/dist/bin/{chunk-8fxksvw4.js → chunk-8e4ck7cg.js}

@@ -1,4 +1,4 @@
-import{h}from"./chunk-mex7tac5.js";var y=(e)=>e==null?void 0:String(e),w=(e)=>Number(e)===1,C=(e,r)=>{try{return e==null?r:JSON.parse(String(e))}catch{return r}};function b(e){return{id:String(e.id),organizationId:String(e.organization_id),projectId:String(e.project_id),scope:{type:String(e.scope_type),id:String(e.scope_id),environmentId:y(e.environment_id),resourceId:y(e.resource_id),previewId:y(e.preview_id)},key:String(e.key),kind:String(e.kind),value:y(e.value),valueFingerprint:String(e.value_fingerprint),secretRef:y(e.secret_ref),backend:String(e.backend),backendVersion:y(e.backend_version),origin:String(e.origin),required:w(e.required),metadata:C(e.metadata,{}),lastUsedAt:y(e.last_used_at),rotatedAt:y(e.rotated_at),version:Number(e.version),createdAt:String(e.created_at),updatedAt:String(e.updated_at)}}function I(e){return{entryId:String(e.entry_id),resourceId:String(e.resource_id),injectionTarget:String(e.injection_target),required:w(e.required),requiresRedeploy:w(e.requires_redeploy),lastDeployedVersion:e.last_deployed_version==null?void 0:Number(e.last_deployed_version),createdAt:String(e.created_at),updatedAt:String(e.updated_at)}}class Dr{controlPlane;now;constructor(e,r=()=>new Date){this.controlPlane=e;this.now=r}get(e){let r=this.controlPlane.database.query("SELECT * FROM configuration_entries WHERE id=?").get(e);return r?b(r):void 0}find(e,r,n){let t=this.controlPlane.database.query("SELECT * FROM configuration_entries WHERE project_id=? AND scope_type=? AND scope_id=? AND key=?").get(e,r.type,r.id,n);return t?b(t):void 0}list(e){let r=["project_id=?"],n=[e.projectId];if(e.scope)r.push("scope_type=?","scope_id=?"),n.push(e.scope.type,e.scope.id);if(e.kind)r.push("kind=?"),n.push(e.kind);return this.controlPlane.database.query(`SELECT * FROM configuration_entries WHERE ${r.join(" AND ")} ORDER BY key,scope_type,scope_id`).all(...n).map(b)}create(e){this.validateScope(e),this.validateEntry(e);let r=crypto.randomUUID(),n=this.now().toISOString();return this.controlPlane.database.run("INSERT INTO configuration_entries (id,organization_id,project_id,scope_type,scope_id,environment_id,resource_id,preview_id,key,kind,value,value_fingerprint,secret_ref,backend,backend_version,origin,required,metadata,last_used_at,rotated_at,version,created_at,updated_at) VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)",[r,e.organizationId,e.projectId,e.scope.type,e.scope.id,e.scope.environmentId??null,e.scope.resourceId??null,e.scope.previewId??null,e.key,e.kind,e.value??null,e.valueFingerprint,e.secretRef??null,e.backend,e.backendVersion??null,e.origin,e.required?1:0,JSON.stringify(e.metadata),e.lastUsedAt??null,e.rotatedAt??null,1,n,n]),this.get(r)}update(e,r,n){let t=this.get(e);if(!t)throw Error("Configuration entry was not found.");if(this.validateEntry({...t,...n}),this.controlPlane.database.run("UPDATE configuration_entries SET value=?,value_fingerprint=?,secret_ref=?,backend=?,backend_version=?,required=?,metadata=?,rotated_at=?,version=version+1,updated_at=? WHERE id=? AND version=?",[n.value??null,n.valueFingerprint,n.secretRef??null,n.backend,n.backendVersion??null,n.required?1:0,JSON.stringify(n.metadata),n.rotatedAt??null,this.now().toISOString(),e,r]).changes!==1)throw Error("Configuration entry changed; refresh and retry.");return this.get(e)}remove(e,r){let n=this.get(e);if(!n)throw Error("Configuration entry was not found.");if(n.version!==r)throw Error("Configuration entry changed; refresh and retry.");if(this.controlPlane.database.run("DELETE FROM configuration_entries WHERE id=? AND version=?",[e,r]).changes<1)throw Error("Configuration entry changed; refresh and retry.");return n}setDependency(e){let r=this.now().toISOString();return this.controlPlane.database.run("INSERT INTO configuration_dependencies (entry_id,resource_id,injection_target,required,requires_redeploy,last_deployed_version,created_at,updated_at) VALUES (?,?,?,?,?,?,?,?) ON CONFLICT(entry_id,resource_id) DO UPDATE SET injection_target=excluded.injection_target,required=excluded.required,requires_redeploy=excluded.requires_redeploy,last_deployed_version=excluded.last_deployed_version,updated_at=excluded.updated_at",[e.entryId,e.resourceId,e.injectionTarget,e.required?1:0,e.requiresRedeploy?1:0,e.lastDeployedVersion??null,r,r]),this.dependencies(e.entryId).find((n)=>n.resourceId===e.resourceId)}dependencies(e){return this.controlPlane.database.query("SELECT * FROM configuration_dependencies WHERE entry_id=? ORDER BY resource_id").all(e).map(I)}dependenciesForResource(e){return this.controlPlane.database.query("SELECT * FROM configuration_dependencies WHERE resource_id=? ORDER BY entry_id").all(e).map(I)}mutation(e){let r=this.controlPlane.database.query("SELECT request_hash,result FROM configuration_mutations WHERE idempotency_key=?").get(e);return r?{requestHash:r.request_hash,result:C(r.result,{})}:void 0}recordMutation(e){this.controlPlane.database.run("INSERT INTO configuration_mutations (id,project_id,idempotency_key,request_hash,result,actor_id,created_at) VALUES (?,?,?,?,?,?,?)",[crypto.randomUUID(),e.projectId,e.idempotencyKey,e.requestHash,JSON.stringify(e.result),e.actorId??null,this.now().toISOString()])}validateEntry(e){if(!/^[A-Za-z_][A-Za-z0-9_]{0,255}$/.test(e.key))throw Error(`Invalid configuration key: ${e.key}`);if(e.kind==="variable"&&(e.value==null||e.secretRef||e.backend!=="plaintext"))throw Error("Variables require a plaintext value and cannot use a secret backend.");if(e.kind==="secret"&&(e.value!=null||!e.secretRef||e.backend==="plaintext"))throw Error("Secrets require a non-plaintext backend reference and cannot store a plaintext value.")}validateScope(e){let r=this.controlPlane.getProject(e.projectId);if(!r||r.organizationId!==e.organizationId)throw Error("Configuration project does not belong to the organization.");let n=e.scope;if(n.type==="project"){if(n.id!==e.projectId||n.environmentId||n.resourceId||n.previewId)throw Error("Project configuration scope must reference only its project.");return}if(n.type==="environment"){let i=this.controlPlane.database.query("SELECT project_id FROM environments WHERE id=?").get(n.id);if(!i||i.project_id!==e.projectId||n.environmentId&&n.environmentId!==n.id||n.resourceId||n.previewId)throw Error("Environment configuration scope does not belong to the project.");return}if(n.type==="service"||n.type==="function"){let i=this.controlPlane.getResource(n.id);if(!i||i.projectId!==e.projectId||n.type==="function"&&i.kind!=="function"||n.resourceId&&n.resourceId!==n.id||n.environmentId&&i.environmentId!==n.environmentId||n.previewId)throw Error(`${n.type==="function"?"Function":"Service"} configuration scope does not belong to the project.`);return}let t=this.controlPlane.database.query("SELECT project_id,base_environment_id,resource_id FROM preview_instances WHERE id=?").get(n.id);if(!t||t.project_id!==e.projectId||n.previewId&&n.previewId!==n.id||n.environmentId&&n.environmentId!==t.base_environment_id||n.resourceId&&n.resourceId!==t.resource_id)throw Error("Preview configuration scope does not belong to the project.")}}var E=/^[A-Za-z_][A-Za-z0-9_]{0,255}$/;function j(e){let r={n:`
+import{h}from"./chunk-xq7ngz6q.js";var y=(e)=>e==null?void 0:String(e),w=(e)=>Number(e)===1,C=(e,r)=>{try{return e==null?r:JSON.parse(String(e))}catch{return r}};function b(e){return{id:String(e.id),organizationId:String(e.organization_id),projectId:String(e.project_id),scope:{type:String(e.scope_type),id:String(e.scope_id),environmentId:y(e.environment_id),resourceId:y(e.resource_id),previewId:y(e.preview_id)},key:String(e.key),kind:String(e.kind),value:y(e.value),valueFingerprint:String(e.value_fingerprint),secretRef:y(e.secret_ref),backend:String(e.backend),backendVersion:y(e.backend_version),origin:String(e.origin),required:w(e.required),metadata:C(e.metadata,{}),lastUsedAt:y(e.last_used_at),rotatedAt:y(e.rotated_at),version:Number(e.version),createdAt:String(e.created_at),updatedAt:String(e.updated_at)}}function I(e){return{entryId:String(e.entry_id),resourceId:String(e.resource_id),injectionTarget:String(e.injection_target),required:w(e.required),requiresRedeploy:w(e.requires_redeploy),lastDeployedVersion:e.last_deployed_version==null?void 0:Number(e.last_deployed_version),createdAt:String(e.created_at),updatedAt:String(e.updated_at)}}class Dr{controlPlane;now;constructor(e,r=()=>new Date){this.controlPlane=e;this.now=r}get(e){let r=this.controlPlane.database.query("SELECT * FROM configuration_entries WHERE id=?").get(e);return r?b(r):void 0}find(e,r,n){let t=this.controlPlane.database.query("SELECT * FROM configuration_entries WHERE project_id=? AND scope_type=? AND scope_id=? AND key=?").get(e,r.type,r.id,n);return t?b(t):void 0}list(e){let r=["project_id=?"],n=[e.projectId];if(e.scope)r.push("scope_type=?","scope_id=?"),n.push(e.scope.type,e.scope.id);if(e.kind)r.push("kind=?"),n.push(e.kind);return this.controlPlane.database.query(`SELECT * FROM configuration_entries WHERE ${r.join(" AND ")} ORDER BY key,scope_type,scope_id`).all(...n).map(b)}create(e){this.validateScope(e),this.validateEntry(e);let r=crypto.randomUUID(),n=this.now().toISOString();return this.controlPlane.database.run("INSERT INTO configuration_entries (id,organization_id,project_id,scope_type,scope_id,environment_id,resource_id,preview_id,key,kind,value,value_fingerprint,secret_ref,backend,backend_version,origin,required,metadata,last_used_at,rotated_at,version,created_at,updated_at) VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)",[r,e.organizationId,e.projectId,e.scope.type,e.scope.id,e.scope.environmentId??null,e.scope.resourceId??null,e.scope.previewId??null,e.key,e.kind,e.value??null,e.valueFingerprint,e.secretRef??null,e.backend,e.backendVersion??null,e.origin,e.required?1:0,JSON.stringify(e.metadata),e.lastUsedAt??null,e.rotatedAt??null,1,n,n]),this.get(r)}update(e,r,n){let t=this.get(e);if(!t)throw Error("Configuration entry was not found.");if(this.validateEntry({...t,...n}),this.controlPlane.database.run("UPDATE configuration_entries SET value=?,value_fingerprint=?,secret_ref=?,backend=?,backend_version=?,required=?,metadata=?,rotated_at=?,version=version+1,updated_at=? WHERE id=? AND version=?",[n.value??null,n.valueFingerprint,n.secretRef??null,n.backend,n.backendVersion??null,n.required?1:0,JSON.stringify(n.metadata),n.rotatedAt??null,this.now().toISOString(),e,r]).changes!==1)throw Error("Configuration entry changed; refresh and retry.");return this.get(e)}remove(e,r){let n=this.get(e);if(!n)throw Error("Configuration entry was not found.");if(n.version!==r)throw Error("Configuration entry changed; refresh and retry.");if(this.controlPlane.database.run("DELETE FROM configuration_entries WHERE id=? AND version=?",[e,r]).changes<1)throw Error("Configuration entry changed; refresh and retry.");return n}setDependency(e){let r=this.now().toISOString();return this.controlPlane.database.run("INSERT INTO configuration_dependencies (entry_id,resource_id,injection_target,required,requires_redeploy,last_deployed_version,created_at,updated_at) VALUES (?,?,?,?,?,?,?,?) ON CONFLICT(entry_id,resource_id) DO UPDATE SET injection_target=excluded.injection_target,required=excluded.required,requires_redeploy=excluded.requires_redeploy,last_deployed_version=excluded.last_deployed_version,updated_at=excluded.updated_at",[e.entryId,e.resourceId,e.injectionTarget,e.required?1:0,e.requiresRedeploy?1:0,e.lastDeployedVersion??null,r,r]),this.dependencies(e.entryId).find((n)=>n.resourceId===e.resourceId)}dependencies(e){return this.controlPlane.database.query("SELECT * FROM configuration_dependencies WHERE entry_id=? ORDER BY resource_id").all(e).map(I)}dependenciesForResource(e){return this.controlPlane.database.query("SELECT * FROM configuration_dependencies WHERE resource_id=? ORDER BY entry_id").all(e).map(I)}mutation(e){let r=this.controlPlane.database.query("SELECT request_hash,result FROM configuration_mutations WHERE idempotency_key=?").get(e);return r?{requestHash:r.request_hash,result:C(r.result,{})}:void 0}recordMutation(e){this.controlPlane.database.run("INSERT INTO configuration_mutations (id,project_id,idempotency_key,request_hash,result,actor_id,created_at) VALUES (?,?,?,?,?,?,?)",[crypto.randomUUID(),e.projectId,e.idempotencyKey,e.requestHash,JSON.stringify(e.result),e.actorId??null,this.now().toISOString()])}validateEntry(e){if(!/^[A-Za-z_][A-Za-z0-9_]{0,255}$/.test(e.key))throw Error(`Invalid configuration key: ${e.key}`);if(e.kind==="variable"&&(e.value==null||e.secretRef||e.backend!=="plaintext"))throw Error("Variables require a plaintext value and cannot use a secret backend.");if(e.kind==="secret"&&(e.value!=null||!e.secretRef||e.backend==="plaintext"))throw Error("Secrets require a non-plaintext backend reference and cannot store a plaintext value.")}validateScope(e){let r=this.controlPlane.getProject(e.projectId);if(!r||r.organizationId!==e.organizationId)throw Error("Configuration project does not belong to the organization.");let n=e.scope;if(n.type==="project"){if(n.id!==e.projectId||n.environmentId||n.resourceId||n.previewId)throw Error("Project configuration scope must reference only its project.");return}if(n.type==="environment"){let i=this.controlPlane.database.query("SELECT project_id FROM environments WHERE id=?").get(n.id);if(!i||i.project_id!==e.projectId||n.environmentId&&n.environmentId!==n.id||n.resourceId||n.previewId)throw Error("Environment configuration scope does not belong to the project.");return}if(n.type==="service"||n.type==="function"){let i=this.controlPlane.getResource(n.id);if(!i||i.projectId!==e.projectId||n.type==="function"&&i.kind!=="function"||n.resourceId&&n.resourceId!==n.id||n.environmentId&&i.environmentId!==n.environmentId||n.previewId)throw Error(`${n.type==="function"?"Function":"Service"} configuration scope does not belong to the project.`);return}let t=this.controlPlane.database.query("SELECT project_id,base_environment_id,resource_id FROM preview_instances WHERE id=?").get(n.id);if(!t||t.project_id!==e.projectId||n.previewId&&n.previewId!==n.id||n.environmentId&&n.environmentId!==t.base_environment_id||n.resourceId&&n.resourceId!==t.resource_id)throw Error("Preview configuration scope does not belong to the project.")}}var E=/^[A-Za-z_][A-Za-z0-9_]{0,255}$/;function j(e){let r={n:`
 `,r:"\r",t:"\t","\\":"\\",'"':'"',$:"$"};return e.replace(/\\(n|r|t|\\|"|\$)/g,(n,t)=>r[t])}function Jc(e){let r={},n=[],t=e.replace(/\r\n?/g,`
 `).split(`
 `);for(let i=0;i<t.length;i++){let s=i+1,c=t[i];if(!c.trim()||c.trimStart().startsWith("#"))continue;if(/^\s*export\s+/.test(c))c=c.replace(/^\s*export\s+/,"");let u=c.match(/^\s*([^=\s]+)\s*=\s*(.*)$/);if(!u){n.push({line:s,severity:"error",code:"invalid_line",message:"Expected KEY=VALUE."});continue}let o=u[1],a=u[2];if(!E.test(o)){n.push({line:s,key:o,severity:"error",code:"invalid_key",message:`Invalid environment variable name: ${o}`});continue}let d=a;if(a.startsWith('"')||a.startsWith("'")){let g=a[0],l=[a.slice(1)],v=!1;while(!0){let f=l[l.length-1],m=!1,S=-1;for(let k=0;k<f.length;k++){if(g==='"'&&f[k]==="\\"&&!m){m=!0;continue}if(f[k]===g&&!m){S=k;break}m=!1}if(S>=0){l[l.length-1]=f.slice(0,S),v=!0;break}if(++i>=t.length)break;l.push(t[i])}if(!v){n.push({line:s,key:o,severity:"error",code:"unterminated_quote",message:`Unterminated quoted value for ${o}.`});continue}if(d=l.join(`

package/dist/bin/{chunk-f2q239cy.js → chunk-a06d7cyt.js}

@@ -1,2 +1,2 @@
-import{Ko,En,Ka,wn,Xo,Qo}from"./chunk-1jwmkbzx.js";import{e}from"./chunk-45a8yv3j.js";import{yt}from"./chunk-fkzp9sg5.js";import{execFileSync as C}from"node:child_process";import{mkdirSync as w,mkdtempSync as I,rmSync as U,writeFileSync as g}from"node:fs";import{tmpdir as j}from"node:os";import{dirname as O,join as o}from"node:path";function E(s,t){for(let r of t){let d=o(s,r.name);w(O(d),{recursive:!0}),g(d,r.data,r.mode?{mode:r.mode}:void 0)}}async function Mp(s){let{app:t,projectRoot:r,region:d,repository:u}=s,x=t.architecture??"x86_64",R=x==="arm64"?"linux/arm64":"linux/amd64",b=t.kind==="php",n=s.onStep??(()=>{}),a=I(o(j(),"tscloud-img-"));try{let h=o(a,"app");w(h,{recursive:!0});let f,y;if(b){Xo({projectRoot:r,app:t,skipBuild:s.skipBuild,onStep:n}),n("staging application tree");let i=Qo(r);E(h,i),E(o(a,"runtime"),wn().map((c)=>({name:c.path,data:c.contents,mode:c.mode})));let v=t.handlers?.http??"public/index.php";f={http:v,queue:t.handlers?.queue??v,cli:t.handlers?.cli??v},y=Ko(i.map((c)=>`${c.name}:${c.data.length}`).join("|"))}else{n("bundling application");let i=await En({projectRoot:r,app:t,skipBuild:s.skipBuild,onStep:n});g(o(h,"index.mjs"),i.bundle),f=i.handlers,y=i.sha256}let B=y.slice(0,16);g(o(a,"Dockerfile"),Ka({kind:t.kind??"node",phpVersion:t.phpVersion,architecture:x}));let k=new yt(d),p;try{p=(await k.describeRepositories({repositoryNames:[u]})).repositories?.[0]?.repositoryUri??""}catch{p=""}if(!p)n(`creating ECR repository ${u}`),p=(await k.createRepository({repositoryName:u,imageScanningConfiguration:{scanOnPush:!0}})).repository?.repositoryUri??"";if(!p)throw Error(`could not resolve ECR repository URI for ${u}`);let l=`${p}:${B}`;n("docker build"),C("docker",["build","--platform",R,"--provenance=false","--sbom=false","-t",l,a],{stdio:"inherit"}),n("ecr auth + push");let m=(await k.getAuthorizationToken()).authorizationData?.[0];if(!m?.authorizationToken||!m.proxyEndpoint)throw Error("failed to get an ECR authorization token");let A=m.proxyEndpoint.replace(/^https?:\/\//,""),S=o(a,".docker");return w(S,{recursive:!0}),g(o(S,"config.json"),JSON.stringify({auths:{[A]:{auth:m.authorizationToken}}})),C("docker",["push",l],{stdio:"inherit",env:{...process.env,DOCKER_CONFIG:S}}),e(`Image: ${l}`),{imageUri:l,tag:B,handlers:f}}finally{U(a,{recursive:!0,force:!0})}}
+import{Ko,En,Ka,wn,Xo,Qo}from"./chunk-ddwp5np9.js";import{e}from"./chunk-45a8yv3j.js";import{yt}from"./chunk-fkzp9sg5.js";import{execFileSync as C}from"node:child_process";import{mkdirSync as w,mkdtempSync as I,rmSync as U,writeFileSync as g}from"node:fs";import{tmpdir as j}from"node:os";import{dirname as O,join as o}from"node:path";function E(s,t){for(let r of t){let d=o(s,r.name);w(O(d),{recursive:!0}),g(d,r.data,r.mode?{mode:r.mode}:void 0)}}async function Mp(s){let{app:t,projectRoot:r,region:d,repository:u}=s,x=t.architecture??"x86_64",R=x==="arm64"?"linux/arm64":"linux/amd64",b=t.kind==="php",n=s.onStep??(()=>{}),a=I(o(j(),"tscloud-img-"));try{let h=o(a,"app");w(h,{recursive:!0});let f,y;if(b){Xo({projectRoot:r,app:t,skipBuild:s.skipBuild,onStep:n}),n("staging application tree");let i=Qo(r);E(h,i),E(o(a,"runtime"),wn().map((c)=>({name:c.path,data:c.contents,mode:c.mode})));let v=t.handlers?.http??"public/index.php";f={http:v,queue:t.handlers?.queue??v,cli:t.handlers?.cli??v},y=Ko(i.map((c)=>`${c.name}:${c.data.length}`).join("|"))}else{n("bundling application");let i=await En({projectRoot:r,app:t,skipBuild:s.skipBuild,onStep:n});g(o(h,"index.mjs"),i.bundle),f=i.handlers,y=i.sha256}let B=y.slice(0,16);g(o(a,"Dockerfile"),Ka({kind:t.kind??"node",phpVersion:t.phpVersion,architecture:x}));let k=new yt(d),p;try{p=(await k.describeRepositories({repositoryNames:[u]})).repositories?.[0]?.repositoryUri??""}catch{p=""}if(!p)n(`creating ECR repository ${u}`),p=(await k.createRepository({repositoryName:u,imageScanningConfiguration:{scanOnPush:!0}})).repository?.repositoryUri??"";if(!p)throw Error(`could not resolve ECR repository URI for ${u}`);let l=`${p}:${B}`;n("docker build"),C("docker",["build","--platform",R,"--provenance=false","--sbom=false","-t",l,a],{stdio:"inherit"}),n("ecr auth + push");let m=(await k.getAuthorizationToken()).authorizationData?.[0];if(!m?.authorizationToken||!m.proxyEndpoint)throw Error("failed to get an ECR authorization token");let A=m.proxyEndpoint.replace(/^https?:\/\//,""),S=o(a,".docker");return w(S,{recursive:!0}),g(o(S,"config.json"),JSON.stringify({auths:{[A]:{auth:m.authorizationToken}}})),C("docker",["push",l],{stdio:"inherit",env:{...process.env,DOCKER_CONFIG:S}}),e(`Image: ${l}`),{imageUri:l,tag:B,handlers:f}}finally{U(a,{recursive:!0,force:!0})}}
 export{Mp};

package/dist/bin/{chunk-7453cepa.js → chunk-aptdpa3m.js}

@@ -1 +1 @@
-import{bt,Kd,_s,Io,sm,Os,$s,Po,Ft,am,Jd,cm,lm,z,Ls,dm}from"./chunk-1dqn0y04.js";import"./chunk-7p2va3nj.js";import"./chunk-45a8yv3j.js";import"./chunk-7593hjcq.js";import"./chunk-nmqjmx30.js";import"./chunk-dkf2kcsc.js";import"./chunk-1jwmkbzx.js";import"./chunk-4yym8xm4.js";export{Io as assertEnvWithinLimit,_s as buildFunctionEnv,sm as deployServerlessApp,cm as getCommandRecord,Kd as infraEnvFromOutputs,Jd as listCommandHistory,Os as redeployServerlessApp,bt as resolveServerlessFunctions,dm as restoreServerlessDatabase,$s as rollbackServerlessApp,am as runAndRecordCommand,lm as runDbQuery,Ft as runRemoteCommand,Ls as scaleServerlessDatabase,z as serverlessInfo,Po as setMaintenance};
+import{bt,Kd,_s,Io,sm,Os,$s,Po,Ft,am,Jd,cm,lm,z,Ls,dm}from"./chunk-grwth4nw.js";import"./chunk-7p2va3nj.js";import"./chunk-45a8yv3j.js";import"./chunk-7593hjcq.js";import"./chunk-nmqjmx30.js";import"./chunk-dkf2kcsc.js";import"./chunk-ddwp5np9.js";import"./chunk-4yym8xm4.js";export{Io as assertEnvWithinLimit,_s as buildFunctionEnv,sm as deployServerlessApp,cm as getCommandRecord,Kd as infraEnvFromOutputs,Jd as listCommandHistory,Os as redeployServerlessApp,bt as resolveServerlessFunctions,dm as restoreServerlessDatabase,$s as rollbackServerlessApp,am as runAndRecordCommand,lm as runDbQuery,Ft as runRemoteCommand,Ls as scaleServerlessDatabase,z as serverlessInfo,Po as setMaintenance};

package/dist/bin/{chunk-w232tc20.js → chunk-c23r6gjb.js}

@@ -1 +1 @@
-import{Td,Ed,wd,Ad,Up,Bp}from"./chunk-9vszh4dj.js";import"./chunk-ecd4swb7.js";import"./chunk-b2kdxqd5.js";import"./chunk-7593hjcq.js";import"./chunk-f64jvh96.js";import"./chunk-nmqjmx30.js";import"./chunk-dkf2kcsc.js";export{Up as deleteStaticSite,Ed as deployStaticSite,Bp as deployStaticSiteFull,Td as generateStaticSiteTemplate,Ad as invalidateCache,wd as uploadStaticFiles};
+import{Td,Ed,wd,Ad,Up,Bp}from"./chunk-f7jpzyhr.js";import"./chunk-ecd4swb7.js";import"./chunk-gn03w47w.js";import"./chunk-7593hjcq.js";import"./chunk-f64jvh96.js";import"./chunk-nmqjmx30.js";import"./chunk-dkf2kcsc.js";export{Up as deleteStaticSite,Ed as deployStaticSite,Bp as deployStaticSiteFull,Td as generateStaticSiteTemplate,Ad as invalidateCache,wd as uploadStaticFiles};