@stacksjs/ts-cloud 0.16.55 → 0.16.57

package/dist/bin/cli.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env bun
-import{C,zt,n,r,a,Dr,e,u,i,s,R,d,Oo,c,gn,Ee,Bs,js,Vs,zs,f}from"./chunk-ek27709c.js";import{la,H,Ur,w,B,Go,l,o,T,ua,pa,ma,Oe,Ve,it,Ko,Tn,Mi,En,Jo,ya,ba,Sa,va,Ta,j,b,L,ot,k,ye,Qo,He,Wt,Ui,Ie,Yo,Fi,Kt,It,Ea,wa}from"./chunk-rqvrjp8g.js";import"./chunk-z6xnegpe.js";import{Le,x,xn,y,_n,Ji,On,ss,Hr,at,xe,$n,Ln,Mn,Un,Bn,jn,Vn,zn,oe,tr,rr,Hn,qr,qn,Gn,Wn,Kn,Jn,Xn,Qn,Yn,ct,nr,ir,Nt,Gr,or,sr,Xi,xt,Zn,de,ei,ti,ri,Wr,Kr,ni,Jr,ar,cr,lt,_t,Ot,Xr,ue,ii,lc,dc,lr,uc,q,Qi,qe,dt,ut,oi,Qr,si,Yr,ai,ci,Zr,as,pe,ve,Me,Ce,li,dr}from"./chunk-fw1j79zq.js";import{p,ia}from"./chunk-0xfy78nc.js";import{ce,h,Mr}from"./chunk-dg8ceycc.js";import{xr,wt,_r,Or,$r,Lr,bn}from"./chunk-hkx5j0bn.js";import{S,Lt,bi,bs,Sr,Sc,vc,Cc,Si,vi,cn,Mt,ln,ft,ht,Ye,Fe,Ze,yt,vr,Be,et,Ci,Ti,tt,dn,un,po,go,Er,Ut,bt,Ft,ee,bo,Ai,Ri,ks}from"./chunk-jxm62h8r.js";import{rt,Bt,Ar,_s,Os,Rr,he,Ii,Ir,To,Eo,wo,Ao,Ro,Io,W,jt,M,Pi}from"./chunk-nva480hg.js";import{J,I,$o,Ws,Ks,Hc,qc,Ni,Tt,xi}from"./chunk-k1kk78qg.js";import{v}from"./chunk-rbyrd9we.js";import{Q}from"./chunk-9t78j764.js";import{Et,g}from"./chunk-7cactd6c.js";import{We,cs,me,Yi,ui,Zi,eo,en,to,ro,Te,Z,Ke,_e,tn,ur,Je,pr,rn,Xe,mr,pi,nn,mi,gi,ge,mt,fr,hr,yr,on,br,_,io,oo,gc,so,ls,ds,us,ps,gt,ms,ao,co}from"./chunk-3hnczw70.js";import"./chunk-1q6wqzh1.js";import{P}from"./chunk-sy4zws71.js";import{fe}from"./chunk-95djv2ja.js";import{K,vt,xo}from"./chunk-jyvr7eh5.js";import{se,G,pc,mc,Ge}from"./chunk-28124w0n.js";import{Zt,kn,er,Wi,Nn,os}from"./chunk-v0g82agx.js";import"./chunk-cdseg15k.js";import{E}from"./chunk-n2jh5p5x.js";import{pt}from"./chunk-mdcv2vw1.js";import{te,we}from"./chunk-4crz28b9.js";import{V}from"./chunk-p23wfy3r.js";import"./chunk-gr1ra9nj.js";import{Ki}from"./chunk-pr5c0q0k.js";import"./chunk-8fh0gv4q.js";import"./chunk-v9js2b1d.js";import{yi}from"./chunk-q0takzyx.js";import{wr}from"./chunk-bzzwbkrx.js";import{St}from"./chunk-3mhzd931.js";import{F}from"./chunk-jvbe549p.js";import{N}from"./chunk-kqd186ky.js";import{existsSync as Lu}from"node:fs";import xa from"node:fs/promises";import zl from"node:os";import Na from"node:path";import uo from"node:process";import{EventEmitter as Fu}from"node:events";import Bi from"node:process";import Ul from"node:process";import Fa from"node:process";import Ls from"node:process";import Zo from"node:process";import Hl from"node:tty";import km,{stdin as Xh,stdout as ey}from"node:process";class Gl{configPath;config=null;events=[];retryCount=0;maxRetries=3;retryDelayMs=1000;constructor(){let D=zl.homedir(),t=Na.join(D,".config","clapp");this.configPath=Na.join(t,"telemetry.json")}async isEnabled(){if(uo.env.DO_NOT_TRACK==="1"||uo.env.DO_NOT_TRACK==="true")return!1;if(uo.env.NO_TELEMETRY==="1"||uo.env.NO_TELEMETRY==="true")return!1;return(await this.loadConfig()).enabled}async enable(){let D=await this.loadConfig();if(D.enabled=!0,!D.userId)D.userId=this.generateUserId();await this.saveConfig(D)}async disable(){let D=await this.loadConfig();D.enabled=!1,await this.saveConfig(D)}async track(D,t){if(!await this.isEnabled())return;let A={event:D,...t,timestamp:Date.now(),platform:zl.platform(),nodeVersion:uo.version};if(this.events.push(A),this.events.length>=10)await this.send()}async trackCommand(D,t){await this.track("command",{command:D,duration:t})}async trackError(D,t){await this.track("error",{error:D,command:t})}async send(){if(!await this.isEnabled()||this.events.length===0)return!0;try{this.events=[],this.retryCount=0;let t=await this.loadConfig();return t.lastSent=Date.now(),await this.saveConfig(t),!0}catch{if(this.retryCount<this.maxRetries){this.retryCount++;let t=this.retryDelayMs*2**(this.retryCount-1);return await this.sleep(t),this.send()}return this.events=[],this.retryCount=0,!1}}async flush(){if(this.events.length===0)return!0;return this.send()}sleep(D){return new Promise((t)=>setTimeout(t,D))}async status(){let D=await this.loadConfig();return{enabled:D.enabled,doNotTrack:uo.env.DO_NOT_TRACK==="1"||uo.env.DO_NOT_TRACK==="true",eventsQueued:this.events.length,lastSent:D.lastSent}}async loadConfig(){if(this.config)return this.config;try{if(Lu(this.configPath)){let D=await xa.readFile(this.configPath,"utf-8");return this.config=JSON.parse(D),this.config}}catch{}return this.config={enabled:!1},this.config}async saveConfig(D){this.config=D;try{let t=Na.dirname(this.configPath);await xa.mkdir(t,{recursive:!0}),await xa.writeFile(this.configPath,JSON.stringify(D,null,2),"utf-8")}catch{}}generateUserId(){let D=Math.random().toString(36).substring(2,15),t=Date.now().toString(36);return`${D}-${t}`}}var Mh=new Gl;function La(D){return D.replace(/[<[].+/,"").trim()}function ju(D){let t=/<([^>]+)>/g,m=/\[([^\]]+)\]/g,A=[],O=(Y)=>{let X=!1,ne=Y[1];if(ne.startsWith("..."))ne=ne.slice(3),X=!0;return{required:Y[0].startsWith("<"),value:ne,variadic:X}},z;while(z=t.exec(D))A.push(O(z));let U;while(U=m.exec(D))A.push(O(U));return A}function Bu(D){let t={alias:{},boolean:[]};for(let[m,A]of D.entries()){if(A.names.length>1)t.alias[A.names[0]]=A.names.slice(1);if(A.isBoolean)if(A.negated){if(!D.some((z,U)=>U!==m&&z.names.some((Y)=>A.names.includes(Y))&&typeof z.required==="boolean"))t.boolean.push(A.names[0])}else t.boolean.push(A.names[0])}return t}function Wl(D){return D.reduce((t,m)=>t.length>=m.length?t:m,"")}function Oa(D,t){return D.length>=t?D:`${D}${" ".repeat(t-D.length)}`}function Ns(D){return D.replace(/([a-z])-([a-z])/g,(t,m,A)=>m+A.toUpperCase())}function _u(D,t,m){let A=0,O=t.length,z=D,U;for(;A<O;++A)U=z[t[A]],z=z[t[A]]=A===O-1?m:U!=null?U:!!~t[A+1].indexOf(".")||!(+t[A+1]>-1)?{}:[]}function Mu(D,t){for(let m of Object.keys(t)){let A=t[m];if(A.shouldTransform){if(D[m]=Array.prototype.concat.call([],D[m]),typeof A.transformFunction==="function")D[m]=D[m].map(A.transformFunction)}}}function zu(D){let t=/([^\\/]+)$/.exec(D);return t?t[1]:""}function Xo(D){return D.split(".").map((t,m)=>m===0?Ns(t):t).join(".")}class es extends Error{exitCode=2;isUsageError=!0;usage;constructor(D,t){super(D);if(this.name=this.constructor.name,t!==void 0)this.usage=t;if(typeof Error.captureStackTrace==="function")Error.captureStackTrace(this,this.constructor);else this.stack=Error(D).stack}format(D=!1){if(D&&this.stack)return`${this.message}
+import{C,zt,n,r,a,Dr,e,u,i,s,R,d,Oo,c,gn,Ee,Bs,js,Vs,zs,f}from"./chunk-ek27709c.js";import{la,H,Ur,w,B,Go,l,o,T,ua,pa,ma,Oe,Ve,it,Ko,Tn,Mi,En,Jo,ya,ba,Sa,va,Ta,j,b,L,ot,k,ye,Qo,He,Wt,Ui,Ie,Yo,Fi,Kt,It,Ea,wa}from"./chunk-rqvrjp8g.js";import"./chunk-z6xnegpe.js";import{Le,x,xn,y,_n,Ji,On,ss,Hr,at,xe,$n,Ln,Mn,Un,Bn,jn,Vn,zn,oe,tr,rr,Hn,qr,qn,Gn,Wn,Kn,Jn,Xn,Qn,Yn,ct,nr,ir,Nt,Gr,or,sr,Xi,xt,Zn,de,ei,ti,ri,Wr,Kr,ni,Jr,ar,cr,lt,_t,Ot,Xr,ue,ii,lc,dc,lr,uc,q,Qi,qe,dt,ut,oi,Qr,si,Yr,ai,ci,Zr,as,pe,ve,Me,Ce,li,dr}from"./chunk-mn3x457v.js";import{p,ia}from"./chunk-0xfy78nc.js";import{ce,h,Mr}from"./chunk-dg8ceycc.js";import{xr,wt,_r,Or,$r,Lr,bn}from"./chunk-hkx5j0bn.js";import{S,Lt,bi,bs,Sr,Sc,vc,Cc,Si,vi,cn,Mt,ln,ft,ht,Ye,Fe,Ze,yt,vr,Be,et,Ci,Ti,tt,dn,un,po,go,Er,Ut,bt,Ft,ee,bo,Ai,Ri,ks}from"./chunk-jxm62h8r.js";import{rt,Bt,Ar,_s,Os,Rr,he,Ii,Ir,To,Eo,wo,Ao,Ro,Io,W,jt,M,Pi}from"./chunk-nva480hg.js";import{J,I,$o,Ws,Ks,Hc,qc,Ni,Tt,xi}from"./chunk-k1kk78qg.js";import{v}from"./chunk-rbyrd9we.js";import{Q}from"./chunk-9t78j764.js";import{Et,g}from"./chunk-7cactd6c.js";import{We,cs,me,Yi,ui,Zi,eo,en,to,ro,Te,Z,Ke,_e,tn,ur,Je,pr,rn,Xe,mr,pi,nn,mi,gi,ge,mt,fr,hr,yr,on,br,_,io,oo,gc,so,ls,ds,us,ps,gt,ms,ao,co}from"./chunk-s59x3psv.js";import"./chunk-1q6wqzh1.js";import{P}from"./chunk-sy4zws71.js";import{fe}from"./chunk-95djv2ja.js";import{K,vt,xo}from"./chunk-jyvr7eh5.js";import{se,G,pc,mc,Ge}from"./chunk-28124w0n.js";import{Zt,kn,er,Wi,Nn,os}from"./chunk-v0g82agx.js";import"./chunk-cdseg15k.js";import{E}from"./chunk-n2jh5p5x.js";import{pt}from"./chunk-mdcv2vw1.js";import{te,we}from"./chunk-4crz28b9.js";import{V}from"./chunk-p23wfy3r.js";import"./chunk-gr1ra9nj.js";import{Ki}from"./chunk-pr5c0q0k.js";import"./chunk-8fh0gv4q.js";import"./chunk-v9js2b1d.js";import{yi}from"./chunk-q0takzyx.js";import{wr}from"./chunk-bzzwbkrx.js";import{St}from"./chunk-3mhzd931.js";import{F}from"./chunk-jvbe549p.js";import{N}from"./chunk-kqd186ky.js";import{existsSync as Lu}from"node:fs";import xa from"node:fs/promises";import zl from"node:os";import Na from"node:path";import uo from"node:process";import{EventEmitter as Fu}from"node:events";import Bi from"node:process";import Ul from"node:process";import Fa from"node:process";import Ls from"node:process";import Zo from"node:process";import Hl from"node:tty";import km,{stdin as Xh,stdout as ey}from"node:process";class Gl{configPath;config=null;events=[];retryCount=0;maxRetries=3;retryDelayMs=1000;constructor(){let D=zl.homedir(),t=Na.join(D,".config","clapp");this.configPath=Na.join(t,"telemetry.json")}async isEnabled(){if(uo.env.DO_NOT_TRACK==="1"||uo.env.DO_NOT_TRACK==="true")return!1;if(uo.env.NO_TELEMETRY==="1"||uo.env.NO_TELEMETRY==="true")return!1;return(await this.loadConfig()).enabled}async enable(){let D=await this.loadConfig();if(D.enabled=!0,!D.userId)D.userId=this.generateUserId();await this.saveConfig(D)}async disable(){let D=await this.loadConfig();D.enabled=!1,await this.saveConfig(D)}async track(D,t){if(!await this.isEnabled())return;let A={event:D,...t,timestamp:Date.now(),platform:zl.platform(),nodeVersion:uo.version};if(this.events.push(A),this.events.length>=10)await this.send()}async trackCommand(D,t){await this.track("command",{command:D,duration:t})}async trackError(D,t){await this.track("error",{error:D,command:t})}async send(){if(!await this.isEnabled()||this.events.length===0)return!0;try{this.events=[],this.retryCount=0;let t=await this.loadConfig();return t.lastSent=Date.now(),await this.saveConfig(t),!0}catch{if(this.retryCount<this.maxRetries){this.retryCount++;let t=this.retryDelayMs*2**(this.retryCount-1);return await this.sleep(t),this.send()}return this.events=[],this.retryCount=0,!1}}async flush(){if(this.events.length===0)return!0;return this.send()}sleep(D){return new Promise((t)=>setTimeout(t,D))}async status(){let D=await this.loadConfig();return{enabled:D.enabled,doNotTrack:uo.env.DO_NOT_TRACK==="1"||uo.env.DO_NOT_TRACK==="true",eventsQueued:this.events.length,lastSent:D.lastSent}}async loadConfig(){if(this.config)return this.config;try{if(Lu(this.configPath)){let D=await xa.readFile(this.configPath,"utf-8");return this.config=JSON.parse(D),this.config}}catch{}return this.config={enabled:!1},this.config}async saveConfig(D){this.config=D;try{let t=Na.dirname(this.configPath);await xa.mkdir(t,{recursive:!0}),await xa.writeFile(this.configPath,JSON.stringify(D,null,2),"utf-8")}catch{}}generateUserId(){let D=Math.random().toString(36).substring(2,15),t=Date.now().toString(36);return`${D}-${t}`}}var Mh=new Gl;function La(D){return D.replace(/[<[].+/,"").trim()}function ju(D){let t=/<([^>]+)>/g,m=/\[([^\]]+)\]/g,A=[],O=(Y)=>{let X=!1,ne=Y[1];if(ne.startsWith("..."))ne=ne.slice(3),X=!0;return{required:Y[0].startsWith("<"),value:ne,variadic:X}},z;while(z=t.exec(D))A.push(O(z));let U;while(U=m.exec(D))A.push(O(U));return A}function Bu(D){let t={alias:{},boolean:[]};for(let[m,A]of D.entries()){if(A.names.length>1)t.alias[A.names[0]]=A.names.slice(1);if(A.isBoolean)if(A.negated){if(!D.some((z,U)=>U!==m&&z.names.some((Y)=>A.names.includes(Y))&&typeof z.required==="boolean"))t.boolean.push(A.names[0])}else t.boolean.push(A.names[0])}return t}function Wl(D){return D.reduce((t,m)=>t.length>=m.length?t:m,"")}function Oa(D,t){return D.length>=t?D:`${D}${" ".repeat(t-D.length)}`}function Ns(D){return D.replace(/([a-z])-([a-z])/g,(t,m,A)=>m+A.toUpperCase())}function _u(D,t,m){let A=0,O=t.length,z=D,U;for(;A<O;++A)U=z[t[A]],z=z[t[A]]=A===O-1?m:U!=null?U:!!~t[A+1].indexOf(".")||!(+t[A+1]>-1)?{}:[]}function Mu(D,t){for(let m of Object.keys(t)){let A=t[m];if(A.shouldTransform){if(D[m]=Array.prototype.concat.call([],D[m]),typeof A.transformFunction==="function")D[m]=D[m].map(A.transformFunction)}}}function zu(D){let t=/([^\\/]+)$/.exec(D);return t?t[1]:""}function Xo(D){return D.split(".").map((t,m)=>m===0?Ns(t):t).join(".")}class es extends Error{exitCode=2;isUsageError=!0;usage;constructor(D,t){super(D);if(this.name=this.constructor.name,t!==void 0)this.usage=t;if(typeof Error.captureStackTrace==="function")Error.captureStackTrace(this,this.constructor);else this.stack=Error(D).stack}format(D=!1){if(D&&this.stack)return`${this.message}
 
 Stack trace:
 ${this.stack}`;return this.message}}function Uu(D){if(D instanceof es)return!0;return!!D&&typeof D==="object"&&D.name==="ClappError"&&typeof D.message==="string"}function Wu(){let{env:D}=Ul,{TERM:t,TERM_PROGRAM:m}=D;if(Ul.platform!=="win32")return t!=="linux";return Boolean(D.WT_SESSION)||Boolean(D.TERMINUS_SUBLIME)||D.ConEmuTask==="{cmd::Cmder}"||m==="Terminus-Sublime"||m==="vscode"||t==="xterm-256color"||t==="alacritty"||t==="rxvt-unicode"||t==="rxvt-unicode-256color"||D.TERMINAL_EMULATOR==="JetBrains-JediTerm"}var Fs="\x1B",sn=`${Fs}[`;var Vl={to(D,t){if(!t)return`${sn}${D+1}G`;return`${sn}${t+1};${D+1}H`},move(D,t){let m="";if(D<0)m+=`${sn}${-D}D`;else if(D>0)m+=`${sn}${D}C`;if(t<0)m+=`${sn}${-t}A`;else if(t>0)m+=`${sn}${t}B`;return m},up:(D=1)=>`${sn}${D}A`,down:(D=1)=>`${sn}${D}B`,forward:(D=1)=>`${sn}${D}C`,backward:(D=1)=>`${sn}${D}D`,nextLine:(D=1)=>`${sn}E`.repeat(D),prevLine:(D=1)=>`${sn}F`.repeat(D),left:`${sn}G`,hide:`${sn}?25l`,show:`${sn}?25h`,save:`${Fs}7`,restore:`${Fs}8`};var Vh={screen:`${sn}2J`,up:(D=1)=>`${sn}1J`.repeat(D),down:(D=1)=>`${sn}J`.repeat(D),line:`${sn}2K`,lineEnd:`${sn}K`,lineStart:`${sn}1K`,lines(D){let t="";for(let m=0;m<D;m++)t+=this.line+(m<D-1?Vl.up():"");if(D)t+=Vl.left;return t}},qh={screen:`${Fs}c`};function Vu(D,t){let m=[];for(let A=0;A<=t.length;A++)m[A]=[A];for(let A=0;A<=D.length;A++)m[0][A]=A;for(let A=1;A<=t.length;A++)for(let O=1;O<=D.length;O++)if(t.charAt(A-1)===D.charAt(O-1))m[A][O]=m[A-1][O-1];else m[A][O]=Math.min(m[A-1][O-1]+1,m[A][O-1]+1,m[A-1][O]+1);return m[t.length][D.length]}function Kl(D,t,m=2,A=3){return t.map((O)=>({cmd:O,distance:Vu(D,O)})).filter(({distance:O})=>O<=m).sort((O,z)=>O.distance-z.distance).slice(0,A).map(({cmd:O})=>O)}function qu(D,t={}){let m={_:[]},A=t.alias||{},O=new Set(t.boolean||[]),z={};for(let X of Object.keys(A))for(let ne of A[X])z[ne]=X;for(let X of O)if(A[X])for(let ne of A[X])O.add(ne);function U(X,ne){if(X===void 0)return ne;if(typeof ne==="boolean")return ne;return Array.isArray(X)?[...X,ne]:[X,ne]}function Y(X,ne){let re=z[X]||X,ie=U(m[re],ne);if(m[re]=ie,A[re])for(let ae of A[re])m[ae]=ie;if(z[X]&&A[z[X]])for(let ae of A[z[X]])m[ae]=ie;m[X]=ie}for(let X=0;X<D.length;X++){let ne=D[X];if(ne==="--"){m._.push(...D.slice(X+1));break}if(ne.startsWith("--")){let re=ne.indexOf("=");if(re!==-1){let ie=Ns(ne.slice(2,re)),ae=ne.slice(re+1);Y(ie,ae)}else{let ie=ne.slice(2);if(ie.startsWith("no-")){let ke=Ns(ie.slice(3));Y(ke,!1);continue}let ae=Ns(ie),be=z[ae]||ae;if(O.has(be)||O.has(ae))Y(ae,!0);else{let ke=D[X+1];if(ke!==void 0&&!ke.startsWith("-"))Y(ae,ke),X++;else Y(ae,!0)}}}else if(ne.startsWith("-")&&ne.length>1){let re=ne.slice(1);for(let ie=0;ie<re.length;ie++){let ae=re[ie],be=z[ae]||ae;if(ie===re.length-1&&!O.has(be)&&!O.has(ae)){let ke=D[X+1];if(ke!==void 0&&!ke.startsWith("-"))Y(ae,ke),X++;else Y(ae,!0)}else Y(ae,!0)}}else m._.push(ne)}return m}class Jl{rawName;description;name;names;isBoolean;required;config;negated;constructor(D,t,m){if(this.rawName=D,this.description=t,this.config=Object.assign({},m),D=D.replace(/\.\*/g,""),this.negated=!1,this.names=La(D).split(",").map((A)=>{let O=A.trim().replace(/^-{1,2}/,"");if(O.startsWith("no-"))this.negated=!0,O=O.replace(/^no-/,"");return Xo(O)}).sort((A,O)=>A.length>O.length?1:-1),this.name=this.names[this.names.length-1],this.negated&&this.config.default==null)this.config.default=!0;if(D.includes("<"))this.required=!0;else if(D.includes("["))this.required=!1;else this.isBoolean=!0}}var Gh=Fa.argv,Hu=`${Fa.platform}-${Fa.arch} bun-v${typeof Bun<"u"?Bun.version:"unknown"}`,ql=Ls.argv,Gu=`${Ls.platform}-${Ls.arch} node-${Ls.version}`;class ja{rawName;description;config;cli;options;aliasNames;name;namespace;args;commandAction;usageText;versionNumber;examples;helpCallback;globalCommand;beforeHooks;afterHooks;middleware;constructor(D,t,m,A){this.rawName=D,this.description=t,this.config=m,this.cli=A,this.options=[],this.aliasNames=[],this.name=La(D);let O=La(D),z=O.indexOf(":");if(z>0)this.namespace=O.substring(0,z),this.name=O.substring(z+1);if(this.args=ju(D),this.examples=[],this.beforeHooks=[],this.afterHooks=[],this.middleware=[],!m)this.config={}}usage(D){return this.usageText=D,this}allowUnknownOptions(){return this.config.allowUnknownOptions=!0,this}ignoreOptionDefaultValue(){return this.config.ignoreOptionDefaultValue=!0,this}version(D,t="-v, --version"){return this.versionNumber=D,this.option(t,"Display version number"),this}example(D){return this.examples.push(D),this}option(D,t,m){let A=new Jl(D,t,m);return this.options.push(A),this}alias(D){return this.aliasNames.push(D),this}action(D){return this.commandAction=D,this}before(D){return this.beforeHooks.push(D),this}after(D){return this.afterHooks.push(D),this}use(D){return this.middleware.push(D),this}isMatched(D){if(this.aliasNames.includes(D))return!0;if(this.namespace)return`${this.namespace}:${this.name}`===D;return this.name===D}get isDefaultCommand(){return this.name===""||this.aliasNames.includes("!")}get isGlobalCommand(){return this instanceof Ba}get displayName(){return this.namespace?`${this.namespace}:${this.name}`:this.name}hasOption(D){let t=Xo(D.split(".")[0]);return!!this.options.find((m)=>m.names.some((A)=>Xo(A)===t))}outputHelp(){let{name:D,commands:t}=this.cli,{versionNumber:m,options:A,helpCallback:O}=this.cli.globalCommand,z=[{body:`${D}${m?`/${m}`:""}`}];if(z.push({title:"Usage",body:`  $ ${D} ${this.usageText||this.rawName}`}),(this.isGlobalCommand||this.isDefaultCommand)&&t.length>0){let ne=Wl(t.map((ke)=>ke.rawName)),re=new Map,ie=[];for(let ke of t)if(ke.namespace){if(!re.has(ke.namespace))re.set(ke.namespace,[]);re.get(ke.namespace).push(ke)}else ie.push(ke);let ae="";if(ie.sort((ke,le)=>ke.rawName<le.rawName?-1:ke.rawName>le.rawName?1:0),ie.length>0)ae+=ie.map((ke)=>`  ${Oa(ke.rawName,ne.length)}  ${ke.description}`).join(`
@@ -28,7 +28,7 @@ Received ${m}, cleaning up...`),D)try{await D()}catch(A){console.error("Error du
 `)),this.enableDidYouMean){let t=[];for(let A of this.commands){if(A.displayName)t.push(A.displayName);if(A.aliasNames)t.push(...A.aliasNames)}let m=Kl(D,t);if(m.length>0)console.log(Ho.yellow("Did you mean one of these?")),m.forEach((A)=>console.log(`  ${Ho.dim("•")} ${this.name} ${A}`)),console.log("")}console.log(Ho.dim("Run"),`${this.name} --help`,Ho.dim("to see all available commands")),Bi.exit(1)}async parse(D=ql,t={}){let{run:m=!0,exitOnError:A=!1}=t;if(A)try{return await this.parse(D,{run:m})}catch(X){throw this.handleUsageError(X),X}if(this.rawArgs=D,!this.name)this.name=D[1]?zu(D[1]):"cli";let O=!0,z=D.slice(2),U=z[0];if(U&&!U.startsWith("-")){for(let X of this.commands)if(X.isMatched(U)){let ne=this.mri(z,X);O=!1;let re={...ne,args:ne.args.slice(1)};this.setParsedInfo(re,X,U),this.emit(`command:${U}`,X);break}if(O){let X=z[1];if(X&&!X.startsWith("-")){let ne=`${U}:${X}`;for(let re of this.commands)if(re.isMatched(ne)){let ie=this.mri(z,re);O=!1;let ae={...ie,args:ie.args.slice(2)};this.setParsedInfo(ae,re,ne),this.emit(`command:${ne}`,re);break}}}}if(O){for(let X of this.commands)if(X.name===""){O=!1;let ne=this.mri(z,X);this.setParsedInfo(ne,X),this.emit("command:!",X);break}}if(O){let X=this.mri(D.slice(2));this.setParsedInfo(X)}if(this.options.verbose)this.isVerbose=!0;if(this.options.quiet)this.isQuiet=!0;if(this.options.debug)this.isDebug=!0;if(this.options.noInteraction||this.options.interaction===!1)this.isNoInteraction=!0;if(this.options.env)this.environment=String(this.options.env);if(this.options.dryRun)this.isDryRun=!0;if(this.options.force)this.isForce=!0;if(this.options.noEmoji||this.options.emoji===!1)this.useEmoji=!1;if(this.options.theme)this.theme=String(this.options.theme);if(this.options.noCache||this.options.cache===!1)this.isNoCache=!0;if(this.options.help&&this.showHelpOnExit)this.outputHelp(),m=!1,this.unsetMatchedCommand();if(this.options.version&&this.showVersionOnExit&&this.matchedCommandName==null)this.outputVersion(),m=!1,this.unsetMatchedCommand();let Y={args:this.args,options:this.options};if(m)await this.runMatchedCommand();if(!this.matchedCommand&&this.args[0]){if(this.emit("command:*"),!(this.listenerCount("command:*")>0))this.showCommandNotFound(this.args[0])}return Y}mri(D,t){let m=[...this.globalCommand.options,...t?t.options:[]],A=Bu(m),O=[],z=D.indexOf("--");if(z>-1)O=D.slice(z+1),D=D.slice(0,z);let U=qu(D,A),Y={_:U._};for(let ae of Object.keys(U))if(ae!=="_")Y[Xo(ae)]=U[ae];let X=Y._,ne={"--":O},re=t&&t.config.ignoreOptionDefaultValue?t.config.ignoreOptionDefaultValue:this.globalCommand.config.ignoreOptionDefaultValue,ie=Object.create(null);for(let ae of m){if(!re&&ae.config.default!==void 0)for(let be of ae.names)ne[be]=ae.config.default;if(Array.isArray(ae.config.type)){if(ie[ae.name]===void 0)ie[ae.name]={shouldTransform:!0,transformFunction:ae.config.type[0]}}}for(let ae of Object.keys(Y))if(ae!=="_"){let be=ae.split(".");_u(ne,be,Y[ae]),Mu(ne,ie)}return{args:X,options:ne}}async run(D=ql){return this.parse(D,{run:!0,exitOnError:!0})}handleUsageError(D){if(!Uu(D)||D.isUsageError===!1)return;let t=D.message||"command-line error",m=this.name?`${this.name}: `:"",A=/--help/.test(t)?"":D.usage?`
 Usage: ${D.usage}`:`
 Run \`${this.name??"cli"} --help\` for usage.`;Bi.stderr.write(`${m}${t}${A}
-`),Bi.exit(D.exitCode??2)}async runMatchedCommand(){let{args:D,options:t,matchedCommand:m}=this;if(!m||!m.commandAction)return;m.checkUnknownOptions(),m.checkOptionValue(),m.checkRequiredArgs();let A=[];m.args.forEach((Y,X)=>{if(Y.variadic)A.push(D.slice(X));else A.push(D[X])}),A.push(t);let O={command:m,args:A,options:t};for(let Y of m.beforeHooks)await Y(O);let z,U=async()=>{let Y=m.commandAction.apply(this,A);if(Y instanceof Promise)z=await Y;else z=Y;return z};if(m.middleware.length>0){let Y=0,X=async()=>{if(Y<m.middleware.length){let ne=m.middleware[Y++];await ne({...O,next:X})}else await U()};await X()}else await U();for(let Y of m.afterHooks)await Y(O);return z}removeSignalHandlers(){if(!this.signalHandlersSet)return this;return Bi.removeAllListeners("SIGINT"),Bi.removeAllListeners("SIGTERM"),this.signalHandlersSet=!1,this}destroy(){this.removeSignalHandlers(),this.commands=[],this.rawArgs=[],this.args=[],this.options={},this.matchedCommand=void 0,this.matchedCommandName=void 0,this.removeAllListeners()}}class Yl{cache;enabled;cleanupInterval=null;hits=0;misses=0;constructor(){this.cache=new Map,this.enabled=!0,this.startCleanupInterval()}startCleanupInterval(){if(this.cleanupInterval)return;this.cleanupInterval=setInterval(()=>{this.cleanup()},30000),this.cleanupInterval.unref()}stopCleanup(){if(this.cleanupInterval)clearInterval(this.cleanupInterval),this.cleanupInterval=null}isEnabled(){return this.enabled}get(D){if(!this.enabled){this.misses++;return}let t=this.cache.get(D);if(!t){this.misses++;return}if(Date.now()-t.timestamp>t.ttl){this.cache.delete(D),this.misses++;return}return this.hits++,t.value}set(D,t,m=5000){if(!this.enabled)return;this.cache.set(D,{value:t,timestamp:Date.now(),ttl:m})}has(D){if(!this.enabled)return!1;let t=this.cache.get(D);if(!t)return!1;if(Date.now()-t.timestamp>t.ttl)return this.cache.delete(D),!1;return!0}delete(D){this.cache.delete(D)}clear(){this.cache.clear()}disable(){this.enabled=!1,this.clear()}enable(){this.enabled=!0}stats(){return{size:this.cache.size,enabled:this.enabled,hits:this.hits,misses:this.misses}}resetStats(){this.hits=0,this.misses=0}keys(){return Array.from(this.cache.keys())}cleanup(){let D=Date.now();for(let[t,m]of this.cache.entries())if(D-m.timestamp>m.ttl)this.cache.delete(t)}destroy(){this.stopCleanup(),this.clear(),this.resetStats()}}var Jh=new Yl;function Zu(){if("FORCE_COLOR"in Zo.env)return Zo.env.FORCE_COLOR!=="0";if("NO_COLOR"in Zo.env||Zo.env.TERM==="dumb")return!1;if(Zo.platform==="win32")return!0;return Hl.isatty(1)&&Hl.isatty(2)}var Zl=Zu();function Xt(D,t){if(!Zl)return(m)=>m;return(m)=>D+m+t}var Qu=Xt("\x1B[0m","\x1B[0m"),Xu=Xt("\x1B[31m","\x1B[39m"),em=Xt("\x1B[32m","\x1B[39m"),tm=Xt("\x1B[33m","\x1B[39m"),nm=Xt("\x1B[34m","\x1B[39m"),rm=Xt("\x1B[35m","\x1B[39m"),im=Xt("\x1B[36m","\x1B[39m"),om=Xt("\x1B[37m","\x1B[39m"),sm=Xt("\x1B[90m","\x1B[39m"),am=Xt("\x1B[1m","\x1B[22m"),cm=Xt("\x1B[3m","\x1B[23m"),lm=Xt("\x1B[4m","\x1B[24m"),dm=Xt("\x1B[2m","\x1B[22m"),um=Xt("\x1B[7m","\x1B[27m"),mm=Xt("\x1B[8m","\x1B[28m"),pm=Xt("\x1B[9m","\x1B[29m"),fm=Xt("\x1B[41m","\x1B[49m"),gm=Xt("\x1B[42m","\x1B[49m"),hm=Xt("\x1B[43m","\x1B[49m"),ym=Xt("\x1B[44m","\x1B[49m"),vm=Xt("\x1B[45m","\x1B[49m"),bm=Xt("\x1B[46m","\x1B[49m"),wm=Xt("\x1B[47m","\x1B[49m"),Sm=Zl,Cm={reset:Qu,red:Xu,green:em,yellow:tm,blue:nm,magenta:rm,cyan:im,white:om,gray:sm,bold:am,italic:cm,underline:lm,dim:dm,inverse:um,hidden:mm,strikethrough:pm,bgRed:fm,bgGreen:gm,bgYellow:hm,bgBlue:ym,bgMagenta:vm,bgCyan:bm,bgWhite:wm,isColorSupported:Sm},$m=Cm,Am=["up","down","left","right","space","enter","cancel"],ty={actions:new Set(Am),aliases:new Map([["k","up"],["j","down"],["h","left"],["l","right"],["\x03","cancel"],["escape","cancel"]]),messages:{cancel:"Canceled",error:"Something went wrong"}};var ny=km.platform.startsWith("win"),ry=Symbol("clapp:cancel");var Rm=Wu();var Qt=(D,t)=>Rm?D:t,iy=Qt("◆","*"),oy=Qt("■","x"),sy=Qt("▲","x"),ay=Qt("◇","o"),cy=Qt("┌","T"),Im=Qt("│","|"),ly=Qt("└","—"),dy=Qt("●",">"),uy=Qt("○"," "),my=Qt("◻","[•]"),py=Qt("◼","[+]"),fy=Qt("◻","[ ]"),gy=Qt("▪","•"),hy=Qt("─","-"),yy=Qt("╮","+"),vy=Qt("├","+"),by=Qt("╯","+"),wy=Qt("●","•"),Sy=Qt("◆","*"),Cy=Qt("▲","!"),$y=Qt("■","x");var ky={light:Qt("─","-"),heavy:Qt("━","="),block:Qt("█","#")};function Pm(){return`${$m.gray(Im)}  `}var Ay=Pm();var Ma="0.16.55";function Ql(D,t,m=process.env){let A=t?.options.find((U)=>U.name==="profile");if((!A||/\baws\b/i.test(A.description))&&typeof D.profile==="string"&&D.profile)m.AWS_PROFILE=D.profile,delete m.AWS_ACCESS_KEY_ID,delete m.AWS_SECRET_ACCESS_KEY,delete m.AWS_SESSION_TOKEN;if(!t?.options.some((U)=>U.name==="region")&&typeof D.region==="string"&&D.region)m.AWS_REGION=D.region,m.AWS_DEFAULT_REGION=D.region}import{existsSync as za}from"node:fs";import{mkdir as xm,writeFile as Xl}from"node:fs/promises";function Ua(D){D.command("init","Initialize a new ts-cloud project").option("--mode <mode>","Deployment mode: server or serverless").option("--name <name>","Project name").option("--region <region>","AWS Region").action(async(t)=>{if(i("Initializing ts-cloud Project"),za("cloud.config.ts")){if(!await d("cloud.config.ts already exists. Overwrite?",!1)){e("Initialization cancelled");return}}let m=t?.name||await R("Project name","my-app"),A=t?.mode||await Oo("Select deployment mode",["serverless","server"]),O=t?.region||await Oo("Select AWS region",["us-east-1","us-west-2","eu-west-1","eu-central-1","ap-southeast-1"]),z=new s("Creating configuration file...");z.start();let U=`import { defineConfig } from '@ts-cloud/core'
+`),Bi.exit(D.exitCode??2)}async runMatchedCommand(){let{args:D,options:t,matchedCommand:m}=this;if(!m||!m.commandAction)return;m.checkUnknownOptions(),m.checkOptionValue(),m.checkRequiredArgs();let A=[];m.args.forEach((Y,X)=>{if(Y.variadic)A.push(D.slice(X));else A.push(D[X])}),A.push(t);let O={command:m,args:A,options:t};for(let Y of m.beforeHooks)await Y(O);let z,U=async()=>{let Y=m.commandAction.apply(this,A);if(Y instanceof Promise)z=await Y;else z=Y;return z};if(m.middleware.length>0){let Y=0,X=async()=>{if(Y<m.middleware.length){let ne=m.middleware[Y++];await ne({...O,next:X})}else await U()};await X()}else await U();for(let Y of m.afterHooks)await Y(O);return z}removeSignalHandlers(){if(!this.signalHandlersSet)return this;return Bi.removeAllListeners("SIGINT"),Bi.removeAllListeners("SIGTERM"),this.signalHandlersSet=!1,this}destroy(){this.removeSignalHandlers(),this.commands=[],this.rawArgs=[],this.args=[],this.options={},this.matchedCommand=void 0,this.matchedCommandName=void 0,this.removeAllListeners()}}class Yl{cache;enabled;cleanupInterval=null;hits=0;misses=0;constructor(){this.cache=new Map,this.enabled=!0,this.startCleanupInterval()}startCleanupInterval(){if(this.cleanupInterval)return;this.cleanupInterval=setInterval(()=>{this.cleanup()},30000),this.cleanupInterval.unref()}stopCleanup(){if(this.cleanupInterval)clearInterval(this.cleanupInterval),this.cleanupInterval=null}isEnabled(){return this.enabled}get(D){if(!this.enabled){this.misses++;return}let t=this.cache.get(D);if(!t){this.misses++;return}if(Date.now()-t.timestamp>t.ttl){this.cache.delete(D),this.misses++;return}return this.hits++,t.value}set(D,t,m=5000){if(!this.enabled)return;this.cache.set(D,{value:t,timestamp:Date.now(),ttl:m})}has(D){if(!this.enabled)return!1;let t=this.cache.get(D);if(!t)return!1;if(Date.now()-t.timestamp>t.ttl)return this.cache.delete(D),!1;return!0}delete(D){this.cache.delete(D)}clear(){this.cache.clear()}disable(){this.enabled=!1,this.clear()}enable(){this.enabled=!0}stats(){return{size:this.cache.size,enabled:this.enabled,hits:this.hits,misses:this.misses}}resetStats(){this.hits=0,this.misses=0}keys(){return Array.from(this.cache.keys())}cleanup(){let D=Date.now();for(let[t,m]of this.cache.entries())if(D-m.timestamp>m.ttl)this.cache.delete(t)}destroy(){this.stopCleanup(),this.clear(),this.resetStats()}}var Jh=new Yl;function Zu(){if("FORCE_COLOR"in Zo.env)return Zo.env.FORCE_COLOR!=="0";if("NO_COLOR"in Zo.env||Zo.env.TERM==="dumb")return!1;if(Zo.platform==="win32")return!0;return Hl.isatty(1)&&Hl.isatty(2)}var Zl=Zu();function Xt(D,t){if(!Zl)return(m)=>m;return(m)=>D+m+t}var Qu=Xt("\x1B[0m","\x1B[0m"),Xu=Xt("\x1B[31m","\x1B[39m"),em=Xt("\x1B[32m","\x1B[39m"),tm=Xt("\x1B[33m","\x1B[39m"),nm=Xt("\x1B[34m","\x1B[39m"),rm=Xt("\x1B[35m","\x1B[39m"),im=Xt("\x1B[36m","\x1B[39m"),om=Xt("\x1B[37m","\x1B[39m"),sm=Xt("\x1B[90m","\x1B[39m"),am=Xt("\x1B[1m","\x1B[22m"),cm=Xt("\x1B[3m","\x1B[23m"),lm=Xt("\x1B[4m","\x1B[24m"),dm=Xt("\x1B[2m","\x1B[22m"),um=Xt("\x1B[7m","\x1B[27m"),mm=Xt("\x1B[8m","\x1B[28m"),pm=Xt("\x1B[9m","\x1B[29m"),fm=Xt("\x1B[41m","\x1B[49m"),gm=Xt("\x1B[42m","\x1B[49m"),hm=Xt("\x1B[43m","\x1B[49m"),ym=Xt("\x1B[44m","\x1B[49m"),vm=Xt("\x1B[45m","\x1B[49m"),bm=Xt("\x1B[46m","\x1B[49m"),wm=Xt("\x1B[47m","\x1B[49m"),Sm=Zl,Cm={reset:Qu,red:Xu,green:em,yellow:tm,blue:nm,magenta:rm,cyan:im,white:om,gray:sm,bold:am,italic:cm,underline:lm,dim:dm,inverse:um,hidden:mm,strikethrough:pm,bgRed:fm,bgGreen:gm,bgYellow:hm,bgBlue:ym,bgMagenta:vm,bgCyan:bm,bgWhite:wm,isColorSupported:Sm},$m=Cm,Am=["up","down","left","right","space","enter","cancel"],ty={actions:new Set(Am),aliases:new Map([["k","up"],["j","down"],["h","left"],["l","right"],["\x03","cancel"],["escape","cancel"]]),messages:{cancel:"Canceled",error:"Something went wrong"}};var ny=km.platform.startsWith("win"),ry=Symbol("clapp:cancel");var Rm=Wu();var Qt=(D,t)=>Rm?D:t,iy=Qt("◆","*"),oy=Qt("■","x"),sy=Qt("▲","x"),ay=Qt("◇","o"),cy=Qt("┌","T"),Im=Qt("│","|"),ly=Qt("└","—"),dy=Qt("●",">"),uy=Qt("○"," "),my=Qt("◻","[•]"),py=Qt("◼","[+]"),fy=Qt("◻","[ ]"),gy=Qt("▪","•"),hy=Qt("─","-"),yy=Qt("╮","+"),vy=Qt("├","+"),by=Qt("╯","+"),wy=Qt("●","•"),Sy=Qt("◆","*"),Cy=Qt("▲","!"),$y=Qt("■","x");var ky={light:Qt("─","-"),heavy:Qt("━","="),block:Qt("█","#")};function Pm(){return`${$m.gray(Im)}  `}var Ay=Pm();var Ma="0.16.57";function Ql(D,t,m=process.env){let A=t?.options.find((U)=>U.name==="profile");if((!A||/\baws\b/i.test(A.description))&&typeof D.profile==="string"&&D.profile)m.AWS_PROFILE=D.profile,delete m.AWS_ACCESS_KEY_ID,delete m.AWS_SECRET_ACCESS_KEY,delete m.AWS_SESSION_TOKEN;if(!t?.options.some((U)=>U.name==="region")&&typeof D.region==="string"&&D.region)m.AWS_REGION=D.region,m.AWS_DEFAULT_REGION=D.region}import{existsSync as za}from"node:fs";import{mkdir as xm,writeFile as Xl}from"node:fs/promises";function Ua(D){D.command("init","Initialize a new ts-cloud project").option("--mode <mode>","Deployment mode: server or serverless").option("--name <name>","Project name").option("--region <region>","AWS Region").action(async(t)=>{if(i("Initializing ts-cloud Project"),za("cloud.config.ts")){if(!await d("cloud.config.ts already exists. Overwrite?",!1)){e("Initialization cancelled");return}}let m=t?.name||await R("Project name","my-app"),A=t?.mode||await Oo("Select deployment mode",["serverless","server"]),O=t?.region||await Oo("Select AWS region",["us-east-1","us-west-2","eu-west-1","eu-central-1","ap-southeast-1"]),z=new s("Creating configuration file...");z.start();let U=`import { defineConfig } from '@ts-cloud/core'
 
 export default defineConfig({
   project: {
@@ -315,7 +315,7 @@ Resources to create: ${Re}`);let ze={};for(let Ne of Object.values(ne.Resources|
 No changes detected - infrastructure is up to date`);return}if(e(`
 Changes detected:
 `),$e.length>0){n(`Resources to add (${$e.length}):`);for(let Ae of $e){let Re=be[Ae].Type;e(`  + ${Ae} (${Re})`)}console.log()}if(Pe.length>0){r(`Resources to remove (${Pe.length}):`);for(let Ae of Pe){let Re=ae[Ae].Type;e(`  - ${Ae} (${Re})`)}console.log()}if(Se.length>0){a(`Resources to modify (${Se.length}):`);for(let Ae of Se){let Re=be[Ae].Type;e(`  ~ ${Ae} (${Re})`)}console.log()}e("Summary:"),e(`  - Add: ${$e.length}`),e(`  - Remove: ${Pe.length}`),e(`  - Modify: ${Se.length}`),e("\nRun `cloud deploy` to apply these changes")}catch(m){r(`Diff failed: ${m.message}`)}})}function zi(D,t=0){let m=Number(D);return Number.isFinite(m)?m:t}function Ja(D){return zi(D)*1024}function cp(D){let t=D?.date?.trim(),m=D?.time?.trim();if(!t||!m)return null;let A=new Date(`${t}T${m}Z`);return Number.isFinite(A.getTime())?A.toISOString():null}function lp(D,t,m){let A;try{A=JSON.parse(D)}catch{return[]}let O=(A?.sysstat?.hosts??[]).flatMap((U)=>U.statistics??[]),z=[];for(let U of O){let Y=cp(U.timestamp);if(!Y)continue;let X=new Date(Y).getTime();if(X<t.getTime()||X>m.getTime())continue;let ne=U["cpu-load"]?.find((ie)=>ie.cpu==="all")??U["cpu-load"]?.[0],re=zi(ne?.idle,100);z.push({timestamp:Y,cpuUsedPercent:Math.max(0,Math.min(100,100-re)),cpuUserPercent:zi(ne?.user),cpuSystemPercent:zi(ne?.system),cpuIowaitPercent:zi(ne?.iowait),memoryUsedPercent:zi(U.memory?.["memused-percent"]),memoryUsedBytes:Ja(U.memory?.memused),memoryAvailableBytes:Ja(U.memory?.avail),swapUsedPercent:zi(U.memory?.["swpused-percent"]),swapUsedBytes:Ja(U.memory?.swpused)})}return z.sort((U,Y)=>U.timestamp.localeCompare(Y.timestamp))}function dp(D){return Object.fromEntries(Object.entries(D.time_series??{}).map(([t,m])=>[t,(m.values??[]).map(([A,O])=>({timestamp:new Date(Number(A)*1000).toISOString(),value:zi(O,Number.NaN)})).filter((A)=>Number.isFinite(A.value))]))}function pd(D){return D.length?D.reduce((t,m)=>t+m,0)/D.length:null}function Ya(D){return D.length?Math.max(...D):null}function up(D){return D.length?Math.min(...D):null}async function fd(D){let[t,m]=await Promise.all([D.client.getServerMetrics(D.serverId,{types:["cpu","disk","network"],start:D.from,end:D.to,step:D.step}),_e(D.remote.host,"LC_ALL=C sadf -j -- -u -r -S",D.remote).catch(()=>"")]),A=lp(m,D.from,D.to),O=dp(t),U=(O.cpu??[]).map((ie)=>Math.max(0,Math.min(100,ie.value/Math.max(1,D.cores)))),Y=A.map((ie)=>ie.cpuUsedPercent),X=U.length?U:Y,ne=A.map((ie)=>ie.memoryUsedPercent),re=A.map((ie)=>ie.swapUsedPercent);return{from:D.from.toISOString(),to:D.to.toISOString(),cores:D.cores,host:A,provider:O,summary:{cpuAveragePercent:pd(X),cpuPeakPercent:Ya(X),memoryAveragePercent:pd(ne),memoryPeakPercent:Ya(ne),memoryMinimumAvailableBytes:up(A.map((ie)=>ie.memoryAvailableBytes)),swapPeakPercent:Ya(re)}}}function mp(D){if(D.length===0)throw Error("A server name cannot be empty.");if(D.length>253)throw Error(`'${D}' is longer than the 253 characters a hostname allows.`);for(let t of D.split(".")){if(t.length===0)throw Error(`'${D}' has an empty label — a hostname cannot contain '..'.`);if(t.length>63)throw Error(`'${t}' is longer than the 63 characters a hostname label allows.`);if(!/^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/i.test(t))throw Error(`'${t}' is not a valid hostname label. Use letters, digits and hyphens, not starting or ending with a hyphen.`)}}async function gd(D,t,m){if(mp(t),D===t)throw Error(`'${D}' is already named that.`);if((await m.takenNames()).some((z)=>z===t&&z!==D))throw Error(`'${t}' is already taken. Server names have to be unique within a provider project.`);let O=[];if(m.providerName&&m.renameProvider){let{providerName:z,renameProvider:U}=m;O.push({id:"provider",title:"Rename the server at the provider",change:{from:D,to:t},satisfied:async()=>await z()===t,apply:()=>U(t)})}if(m.stateName&&m.writeStateName){let{stateName:z,writeStateName:U}=m;O.push({id:"state-pin",title:"Update the recorded name in the local driver state",change:{from:D,to:t},satisfied:async()=>{let Y=await z();return Y===void 0||Y===t},apply:()=>U(t)})}if(m.remoteHostname&&m.setRemoteHostname){let{remoteHostname:z,setRemoteHostname:U}=m;O.push({id:"hostname",title:"Set the hostname on the box",change:{from:D,to:t},satisfied:async()=>await z()===t,apply:()=>U(t)})}return O.push({id:"inventory",title:"Rename the fleet inventory record",change:{from:D,to:t},satisfied:async()=>m.inventoryName()===t,apply:async()=>{await m.renameInventory(t)}}),{operation:"server:rename",target:D,steps:O}}function hd(D){let t=`'${D.replace(/'/g,`'"'"'`)}'`;return["set -eu",'TS_CLOUD_OLD="$(hostname)"',`hostnamectl set-hostname ${t} 2>/dev/null || { echo ${t} > /etc/hostname && hostname ${t}; }`,'if grep -q "^127.0.1.1" /etc/hosts; then',`  TS_CLOUD_HOSTS="$(sed -E "s/^127\\.0\\.1\\.1.*/127.0.1.1\\t${D}/" /etc/hosts)"`,`  printf '%s\\n' "$TS_CLOUD_HOSTS" > /etc/hosts`,"else",`  printf '127.0.1.1\\t%s\\n' ${t} >> /etc/hosts`,"fi",'printf "%s -> %s\\n" "$TS_CLOUD_OLD" "$(hostname)"'].join(`
-`)}async function pp(){let D=await De(),t=y(process.cwd(),D),m=new xe(t.store),A=new $n(m,[new at("aws"),new at("hetzner"),new at("ssh")]);return{controlPlane:t,store:m,service:A}}async function fi(D){let t=await pp();try{return await D(t)}finally{t.controlPlane.store.close()}}var Vi=(D,t)=>{let m=D.store.list(D.controlPlane.project.id).find((A)=>A.id===t||A.name===t);if(!m)throw Error(`Server ${t} was not found.`);return m},vn=(D)=>{r(D instanceof Error?D.message:String(D)),process.exitCode=1};function Za(D,t){let m=Number.parseInt(D??"",10);return Number.isFinite(m)&&m>=0?m:t}function fp(D="3h"){let t=D.match(/^(\d+)(m|h)$/);if(!t)throw Error("--range must use minutes or hours, for example 30m or 3h.");let m=Number(t[1])*(t[2]==="h"?3600000:60000);if(m<300000||m>86400000)throw Error("--range must be between 5 minutes and 24 hours.");return m}function is(D,t="%"){return D==null?"unavailable":`${D.toFixed(1)}${t}`}async function gp(D,t){let m=await De();if(m.cloud?.provider!=="hetzner")throw Error("server:monitoring currently requires the Hetzner provider.");let A=t.env??process.env.CLOUD_ENV??"production",O=T(m,A),z=await ge(O);if(!z?.serverId)throw Error(`No pinned Hetzner server was found for ${O}.`);if(![z.serverName,String(z.serverId),z.stackName].includes(D))throw Error(`Refusing to read ${D}: project state is pinned to ${z.serverName}.`);let U=ur(m),Y=new Je({apiToken:pr(U.apiToken,m)}),X=await Y.getServer(z.serverId),ne=z.publicIp??X.public_net.ipv4?.ip;if(!ne)throw Error(`Server ${X.name} has no public IPv4 address.`);let re=new Date,ie=new Date(re.getTime()-fp(t.range)),ae=Math.min(3600,Math.max(60,Za(t.step,60))),be=await fd({client:Y,serverId:X.id,cores:Math.max(1,Number(X.server_type.cores)||1),from:ie,to:re,step:ae,remote:{host:ne,user:z.sshUser??U.sshUser,identityFile:U.sshPrivateKeyPath,connectTimeoutSec:15}});if(t.json){console.log(JSON.stringify({schemaVersion:1,server:X.name,result:be},null,2));return}c(["Server","Window","CPU average / peak","RAM average / peak","Minimum available","Swap peak"],[[X.name,`${be.from} to ${be.to}`,`${is(be.summary.cpuAveragePercent)} / ${is(be.summary.cpuPeakPercent)}`,`${is(be.summary.memoryAveragePercent)} / ${is(be.summary.memoryPeakPercent)}`,be.summary.memoryMinimumAvailableBytes==null?"unavailable":`${(be.summary.memoryMinimumAvailableBytes/1073741824).toFixed(2)} GB`,is(be.summary.swapPeakPercent)]])}function yd(D){let t=D.targetType.prices?.find((m)=>m.location===D.location);return{serverId:D.serverId,serverName:D.serverName,location:D.location,from:D.currentType.name,to:D.targetType.name,capacityAvailable:D.capacityAvailable,alreadyComplete:D.alreadyComplete,upgradeDisk:D.upgradeDisk,target:{cores:D.targetType.cores,memoryGb:D.targetType.memory,diskGb:D.targetType.disk,architecture:D.targetType.architecture,cpuType:D.targetType.cpu_type},price:t?{hourlyNet:t.price_hourly.net,hourlyGross:t.price_hourly.gross,monthlyNet:t.price_monthly.net,monthlyGross:t.price_monthly.gross}:void 0}}function hp(D){let t=yd(D);c(["Server","Location","Resize","Capacity","CPU / RAM / disk","Monthly"],[[`${t.serverName} (${t.serverId})`,t.location,`${t.from} -> ${t.to}`,t.capacityAvailable?"available":"waiting",`${t.target.cores??0} / ${t.target.memoryGb??0} GB / ${t.target.diskGb??0} GB`,t.price?.monthlyGross??t.price?.monthlyNet??"not reported"]])}async function yp(D,t,m){let A=await De();if(A.cloud?.provider!=="hetzner")throw Error("server:resize currently requires the Hetzner provider.");let O=m.env??process.env.CLOUD_ENV??"production",z=T(A,O),U=await ge(z),Y=ur(A),X=new Je({apiToken:pr(Y.apiToken,A)}),re=U&&(D===U.serverName||D===String(U.serverId)||D===U.stackName)?await X.getServer(U.serverId):(await X.listServers()).find((Ne)=>Ne.name===D||String(Ne.id)===D);if(!re)throw Error(`Hetzner server ${D} was not found.`);if(U?.serverId&&U.serverId!==re.id)throw Error(`Refusing to resize ${D}: project state is pinned to server ${U.serverId}.`);let ie=Xe(t),ae=m.upgradeDisk!==!1,be=await mr(X,re.id,ie,ae);if(m.json)console.log(JSON.stringify({schemaVersion:1,plan:yd(be)},null,2));else hp(be);if(!m.apply){if(!m.json)e(`Preview only. Re-run with --apply --confirm ${re.name} to execute.`);return}if(m.confirm!==re.name)throw Error(`Resize requires --confirm ${re.name}.`);let ke=U?.publicIp??re.public_net.ipv4?.ip;if(!ke)throw Error(`Server ${re.name} has no public IPv4 address for verification.`);let le={host:ke,user:U?.sshUser??Y.sshUser,identityFile:Y.sshPrivateKeyPath,connectTimeoutSec:15,sshTimeoutMs:600000,routeTimeoutMs:20000},$e=await ps(z),Pe=new Date().toISOString(),Se={schemaVersion:1,operationId:$e?.targetType===ie&&$e.serverId===re.id?$e.operationId:crypto.randomUUID(),stackName:z,serverId:re.id,serverName:re.name,sourceType:be.currentType.name,targetType:ie,upgradeDisk:ae,phase:"planning",status:"running",attempts:$e?.targetType===ie?$e.attempts:0,startedAt:$e?.targetType===ie?$e.startedAt:Pe,updatedAt:Pe,manifest:$e?.targetType===ie?$e.manifest:void 0};await gt(Se);let Ae=Za(m.pollSeconds,900)*1000,Re=Za(m.maxWaitMinutes,0)*60000,ze=Date.now();for(;;){let Ne=await mr(X,re.id,ie,ae);if(!Ne.capacityAvailable&&!Ne.alreadyComplete){if(Se={...Se,phase:"waiting-capacity",status:"waiting-capacity",updatedAt:new Date().toISOString()},await gt(Se),!m.wait){if(!m.json)e(`${ie} has no capacity in ${Ne.location}. The server remains running and unchanged. Use --wait to poll safely.`);return}if(Re>0&&Date.now()-ze>=Re)throw Error(`Timed out waiting for ${ie} capacity in ${Ne.location}.`);if(!m.json)e(`Waiting ${Math.round(Ae/1000)} seconds for ${ie} capacity...`);await Bun.sleep(Ae);continue}let je=await ms(z);try{let Ue=await(async()=>{try{return Se={...Se,status:"running",attempts:Se.attempts+1,updatedAt:new Date().toISOString()},await gt(Se),await pi({client:X,serverId:re.id,targetType:ie,upgradeDisk:ae,resumeFromOff:Se.phase==="shutting-down"||Se.phase==="resizing"||Se.phase==="powering-on"||Se.phase==="verifying",manifest:Se.manifest,hooks:{preflight:async()=>{let Ct=await mi(le);return Se={...Se,manifest:Ct,updatedAt:new Date().toISOString()},await gt(Se),Ct},afterBoot:async(Ct,At,nt,kt)=>gi(le,At,nt,kt),onPhase:async(Ct,At)=>{if(Se={...Se,phase:Ct,status:Ct==="waiting-capacity"?"waiting-capacity":Ct==="complete"?"completed":"running",updatedAt:new Date().toISOString()},await gt(Se),!m.json)e(`${Ct}${At?` ${JSON.stringify(At)}`:""}`)}}})}finally{await je()}})();if(Se={...Se,status:Ue.status==="completed"||Ue.status==="already-complete"?"completed":Ue.status==="recovered"?"recovered":"waiting-capacity",lastError:Ue.status==="recovered"?Ue.error:void 0,updatedAt:new Date().toISOString()},await gt(Se),m.json)console.log(JSON.stringify({schemaVersion:1,result:Ue},null,2));else if(Ue.status==="completed"||Ue.status==="already-complete")n(`${re.name} is on ${ie} and passed full post-boot verification.`);else if(Ue.status==="recovered"&&Ue.retryable&&m.wait){e(`Capacity race recovered safely. Waiting ${Math.round(Ae/1000)} seconds before retry.`),await Bun.sleep(Ae);continue}else if(Ue.status==="recovered")throw Error(`Resize did not complete and the original server was recovered: ${Ue.error}`);return}catch(Ue){throw Se={...Se,status:"failed",lastError:Ue instanceof Error?Ue.message:String(Ue),updatedAt:new Date().toISOString()},await gt(Se),Ue}}}async function vp(D,t){let m=await De();if(m.cloud?.provider!=="hetzner")throw Error("server:optimize currently requires the Hetzner provider.");let A=t.env??process.env.CLOUD_ENV??"production",O=T(m,A),z=await ge(O);if(!z?.serverId)throw Error(`No pinned Hetzner server was found for ${O}.`);if(![z.serverName,String(z.serverId),z.stackName].includes(D))throw Error(`Refusing to optimize ${D}: project state is pinned to ${z.serverName}.`);let U=ur(m),Y=new Je({apiToken:pr(U.apiToken,m)}),X=await Y.getServer(z.serverId),ne=z.publicIp??X.public_net.ipv4?.ip;if(!ne)throw Error(`Server ${X.name} has no public IPv4 address.`);let re=so(m);if(t.json)console.log(JSON.stringify({schemaVersion:1,server:X.name,plan:re},null,2));else c(["Server","Firewall ports","Monitoring","Auto updates","Swap","SSH passwords"],[[X.name,re.firewallPorts.join(","),re.monitoring?"on":"off",re.autoUpdates?"on":"off",`${re.swapGb} GB`,"disabled"]]);if(!t.apply){if(!t.json)e(`Preview only. Re-run with --apply --confirm ${X.name} to execute.`);return}if(t.confirm!==X.name)throw Error(`Optimization requires --confirm ${X.name}.`);let ie={host:ne,user:z.sshUser??U.sshUser,identityFile:U.sshPrivateKeyPath,connectTimeoutSec:15},ae=await nn(ie),be=ae.routeProbes.filter((nt)=>!nt.ok),ke=m.infrastructure?.compute,le=Z(ke)?new Set(["nginx.service","bun-gateway.service","ts-cloud-nginx.service"]):new Set,$e=ae.failedUnits.filter((nt)=>!le.has(nt));if($e.length>0)throw Error(`Preflight found failed services: ${$e.join(", ")}`);if(be.length>0)throw Error(`Preflight found unhealthy routes: ${be.map((nt)=>nt.domain).join(", ")}`);let Pe=Z(ke)?[]:Object.values(m.sites??{}).flatMap((nt)=>typeof nt?.port==="number"&&![80,443].includes(nt.port)?[nt.port]:[]),Se=rn({allowSsh:ke?.allowSsh!==!1,sitePorts:Pe,allowedPorts:ke?.firewall?.allowedPorts}),Ae=(z.firewallId?(await Y.listFirewalls()).find((nt)=>nt.id===z.firewallId):void 0)??(await Y.listFirewalls()).find((nt)=>nt.name===`${m.project.slug}-${A}-app-fw`);if(!Ae)throw Error(`Managed firewall for ${X.name} was not found.`);let Re=await Y.setFirewallRules(Ae.id,Se);await Promise.all(Re.map((nt)=>Y.waitForAction(nt.id))),await ls(m,ie);let[ze,Ne]=await Promise.all([nn(ie),ds(ie)]),je=us(re,Ne),Ue=gc(ae,ze),Ct=ze.routeProbes.filter((nt)=>!nt.ok);if(Ue.stoppedServices.length>0)je.push(`services stopped: ${Ue.stoppedServices.join(", ")}`);if(Ue.changedRouteFragments.length>0)je.push(`route fragments changed: ${Ue.changedRouteFragments.join(", ")}`);if(Ue.missingRouteIds.length>0)je.push(`routes disappeared: ${Ue.missingRouteIds.join(", ")}`);if(Ue.changedReleaseLinks.length>0)je.push(`release links changed: ${Ue.changedReleaseLinks.join(", ")}`);if(Ue.missingData.length>0)je.push(`databases or volumes disappeared: ${Ue.missingData.join(", ")}`);if(Ct.length>0)je.push(`unhealthy routes: ${Ct.map((nt)=>nt.domain).join(", ")}`);if(je.length>0)throw Error(`Host optimization verification failed: ${je.join("; ")}`);let At={serverId:X.id,serverName:X.name,services:ze.runningServices.length,routes:ze.routeIds.length,healthyDomains:ze.routeProbes.length,releaseLinks:ze.releaseLinks.length,databasesAndVolumes:ze.dataCatalog.length,report:Ne};if(t.json)console.log(JSON.stringify({schemaVersion:1,result:At},null,2));else n(`${X.name} passed full host, rpx route, service, release, and data verification.`)}async function bp(D,t,m){let A=await De(),O=m.env??"production",z=T(A,O);await fi(async(U)=>{let Y=Vi(U,D),X=U.store.list(U.controlPlane.project.id,!0),ne=Y.provider==="hetzner"&&Y.providerId?(()=>{try{let Ae=ur(A);return new Je({apiToken:pr(Ae.apiToken,A)})}catch{return null}})():null,re=Y.providerId?Number(Y.providerId):Number.NaN,ie=await ge(z),ae=ie!=null&&ie.serverId===re,be=new Hr,ke=Y.trustState==="pinned",le={takenNames:async()=>{let Ae=X.map((Re)=>Re.name);if(ne)Ae.push(...(await ne.listServers()).map((Re)=>Re.name));return Ae},inventoryName:()=>U.store.get(Y.id)?.name??Y.name,renameInventory:(Ae)=>{U.store.update(Y.id,{name:Ae})},...ne&&Number.isFinite(re)?{providerName:async()=>(await ne.getServer(re)).name,renameProvider:async(Ae)=>{await ne.renameServer(re,Ae)}}:{},...ae?{stateName:async()=>(await ge(z))?.serverName,writeStateName:async(Ae)=>{let Re=await ge(z);if(Re)await mt(z,{...Re,serverName:Ae})}}:{},...ke?{remoteHostname:async()=>{let Ae=await be.exec(Y,"hostname");return Ae.code===0?Ae.stdout.trim():void 0},setRemoteHostname:async(Ae)=>{let Re=await be.exec(Y,hd(Ae));if(Re.code!==0)throw Error(Re.stderr.trim()||`hostname exited ${Re.code}`)}}:{}},$e=await gd(Y.name,t,le),Pe=await Us($e);if(!m.apply){let Ae=[ne?"":"provider record (no provider id or no API token)",ae?"":"local state pin (none points at this server)",ke?"":"box hostname (host key is not pinned — run server:validate first)"].filter(Boolean);if(m.json){console.log(JSON.stringify({schemaVersion:1,operation:$e.operation,target:$e.target,rename:{from:Y.name,to:t},notCovered:Ae,steps:Pe.map((Re)=>({id:Re.step.id,title:Re.step.title,state:Re.state,change:Re.step.change,reason:Re.reason}))},null,2));return}for(let Re of qs($e,Pe))console.log(Re);for(let Re of Ae)console.log(`  not covered: ${Re}`);console.log("  Re-run with --apply to perform it.");return}let Se=await Hs($e,Pe,{log:(Ae)=>e(Ae),audit:(Ae)=>U.controlPlane.store.appendEvent({projectId:U.controlPlane.project.id,resourceId:Y.resourceId,type:`${Ae.operation}.${Ae.step}.${Ae.state}`,level:Ae.state==="failed"?"error":"info",payload:{target:Ae.target,renameTo:t,...Ae.error?{error:Ae.error}:{}}})});if(m.json)console.log(JSON.stringify({schemaVersion:1,outcome:Se},null,2));if(!Se.success){let Ae=Se.steps.find((Re)=>Re.state==="failed");throw Error(`${$e.operation} stopped at '${Ae?.title}': ${Ae?.error}. Earlier steps stayed applied; re-run the same command to continue from here.`)}if(!m.json)n(`Renamed ${Y.name} to ${t}.`)})}function Qa(D){D.command("capabilities [server]","Show provider and target operation support").option("--json","Print structured JSON").action(async(t,m)=>{try{await fi(async(A)=>{let O=t?[Vi(A,t)]:A.store.list(A.controlPlane.project.id),z=O.flatMap((U)=>Object.entries(U.capabilities).map(([Y,X])=>({server:U.name,provider:U.provider,action:Y,...X})));if(m.json)console.log(JSON.stringify({schemaVersion:1,targets:z},null,2));else c(["Server","Provider","Action","Support","Explanation"],z.map((U)=>[U.server,U.provider,U.action,U.supported?"supported":"unsupported",U.reason??"—"]))})}catch(A){vn(A)}}),D.command("server:resize <name> <type>","Safely resize Hetzner compute with full host verification").option("--env <environment>","Deployment environment",{default:"production"}).option("--apply","Execute the reviewed resize plan").option("--confirm <name>","Exact server name required for mutation").option("--upgrade-disk","Permanently expand the root disk to the target size",{default:!0}).option("--wait","Poll capacity without taking the server offline until placement is available").option("--poll-seconds <seconds>","Capacity retry interval",{default:"900"}).option("--max-wait-minutes <minutes>","Stop waiting after this many minutes; 0 waits indefinitely",{default:"0"}).option("--json","Print structured JSON").action(async(t,m,A)=>{try{await yp(t,m,A)}catch(O){vn(O)}}),D.command("server:optimize <name>","Reconcile and verify a production Hetzner host").option("--env <environment>","Deployment environment",{default:"production"}).option("--apply","Apply the reviewed host optimization plan").option("--confirm <name>","Exact server name required for mutation").option("--json","Print structured JSON").action(async(t,m)=>{try{await vp(t,m)}catch(A){vn(A)}}),D.command("server:monitoring <name>","Read historical Hetzner CPU, RAM, swap, disk, and network metrics").option("--env <environment>","Deployment environment",{default:"production"}).option("--range <duration>","Historical window from 5m to 24h",{default:"3h"}).option("--step <seconds>","Hetzner provider sample interval",{default:"60"}).option("--json","Print structured JSON").action(async(t,m)=>{try{await gp(t,m)}catch(A){vn(A)}}),D.command("server:list","List fleet servers").option("--json","Print structured JSON").action(async(t)=>{try{await fi(async(m)=>{let A=m.store.list(m.controlPlane.project.id);if(t.json)console.log(JSON.stringify(A,null,2));else c(["Name","Provider ID","Provider / region","Status / trust","Roles","CPU / memory","Heartbeat"],A.map((O)=>[O.name,O.providerId??"—",`${O.provider} / ${O.region??"external"}`,`${O.status} / ${O.trustState}`,O.roles.join(","),`${O.capacity.cpu??0} / ${O.capacity.memoryBytes??0}`,O.heartbeatAt??"never"]))})}catch(m){vn(m)}}),D.command("server:create <name>","Enroll a provisioned or existing server").option("--provider <provider>","aws, hetzner, or ssh",{default:"ssh"}).option("--provider-id <id>","Stable provider identity").option("--endpoint <host>","SSH hostname or IP").option("--user <user>","Non-root SSH user",{default:"deploy"}).option("--credential-ref <ref>","Secret reference",{default:"secret://fleet/agent"}).option("--region <region>","Provider region").option("--roles <roles>","Comma-separated roles",{default:"application"}).option("--labels <labels>","Comma-separated key=value labels").action(async(t,m)=>{try{await fi(async(A)=>{let O=m.provider;if(!["aws","hetzner","ssh"].includes(O)||!m.endpoint)throw Error("A supported --provider and --endpoint are required; provisioning and enrollment are separate operations.");let z=A.service.enroll({organizationId:A.controlPlane.organization.id,projectId:A.controlPlane.project.id,name:t,provider:O,providerId:m.providerId,endpoint:m.endpoint,sshUser:m.user??"deploy",credentialRef:m.credentialRef??"secret://fleet/agent",region:m.region,roles:String(m.roles??"application").split(","),labels:Object.fromEntries(String(m.labels??"").split(",").map((U)=>U.split("=")).filter((U)=>U[0]&&U[1]))});n(`Enrolled ${z.name} as ${z.id}; no remote mutation was performed.`)})}catch(A){vn(A)}}),D.command("server:validate <name>","Pin trust and validate a server").option("--accept-host-key <fingerprint>","Accept reviewed rotation").option("--json","Print JSON").action(async(t,m)=>{try{await fi(async(A)=>{let O=Vi(A,t);if(O=await A.service.test(O.id),O.trustState==="rotation_pending"){if(!m.acceptHostKey)throw Error(`Host key changed to ${O.pendingHostKey}; review it first.`);O=A.service.reviewHostKey(O.id,m.acceptHostKey)}let z=await A.service.validate(O.id);if(m.json)console.log(JSON.stringify(z.validation,null,2));else c(["Severity","Code","Finding","Remediation"],(z.validation?.findings??[]).map((U)=>[U.severity,U.code,U.message,U.remediation??"—"]));if(!z.validation?.valid)process.exitCode=1})}catch(A){vn(A)}}),D.command("server:bootstrap <name>","Preview or queue bootstrap").option("--apply","Apply reviewed plan").action(async(t,m)=>{try{await fi(async(A)=>{let O=A.service.bootstrap(Vi(A,t).id,!!m.apply);if(O.preview)c(["Step"],O.steps.map((z)=>[z]));else n(`Bootstrap queued: ${O.operation?.id}`)})}catch(A){vn(A)}}),D.command("server:rename <name> <new-name>","Rename a server in place, without recreating it").option("--env <environment>","Deployment environment",{default:"production"}).option("--apply","Perform the reviewed rename plan").option("--json","Print structured JSON").action(async(t,m,A)=>{try{await bp(t,m,A)}catch(O){vn(O)}}),D.command("server:drain <name>","Drain without terminating").option("--complete","Mark movement complete").action(async(t,m)=>{try{await fi(async(A)=>n(A.service.drain(Vi(A,t).id,!!m.complete).status))}catch(A){vn(A)}}),D.command("server:uncordon <name>","Return a server to scheduling").action(async(t)=>{try{await fi(async(m)=>{m.service.uncordon(Vi(m,t).id),n(`Uncordoned ${t}.`)})}catch(m){vn(m)}}),D.command("server:archive <name>","Archive inventory without termination").option("--confirm <name>","Exact name").action(async(t,m)=>{try{await fi(async(A)=>{A.service.archive(Vi(A,t).id,m.confirm??""),n(`Archived ${t}; provider infrastructure was not terminated.`)})}catch(A){vn(A)}}),D.command("server:ssh <name>","Open strict SSH using the enrolled endpoint").action(async(t)=>{try{await fi(async(m)=>{let A=Vi(m,t);if(A.trustState!=="pinned")throw Error("Validate and pin the server host key first.");let O=Bun.spawn(["ssh","-p",String(A.sshPort),"-o","StrictHostKeyChecking=yes",`${A.sshUser}@${A.endpoint}`],{stdin:"inherit",stdout:"inherit",stderr:"inherit"}),z=await O.exited;if(z)process.exitCode=z})}catch(m){vn(m)}});for(let[t,m]of[["server:logs <name>","Use the runtime log service"],["server:deploy <name>","Use immutable release deployment"],["server:reboot <name>","Reboot provider compute"],["server:destroy <name>","Terminate provider compute"],["server:recipe <name> <recipe>","Apply a server recipe"],["server:firewall:add <name> <rule>","Add firewall rule"],["server:firewall:list <name>","List firewall rules"],["server:firewall:remove <name> <rule>","Remove firewall rule"],["server:ssl:install <domain>","Install TLS"],["server:ssl:renew <domain>","Renew TLS"],["server:snapshot <name>","Create provider snapshot"],["server:snapshot:restore <name> <snapshot-id>","Restore provider snapshot"],["server:update <name>","Update OS packages"],["server:secure <name>","Apply OS hardening"]])D.command(t,m).action(async(...A)=>Rn(t.split(" ")[0],{target:String(A[0]??""),nextAction:"Use the dashboard capability view or the corresponding runtime, release, firewall, backup, or maintenance service."}))}import{existsSync as vd,mkdirSync as wp,readFileSync as Sp,writeFileSync as Cp}from"node:fs";import{join as bd,resolve as $p}from"node:path";var Xa=(D)=>{r(D instanceof Error?D.message:String(D)),process.exitCode=1};async function kp(){try{return await De()}catch{return}}function Ap(D){if(D===void 0)return;let t=Number(D);if(!Number.isInteger(t)||t<1||t>65535)throw Error(`--port must be a port number, not '${D}'.`);return t}function wd(D,t,m){let A=D?.ssh?.hosts?.find((O)=>O.host===t);return new br({hosts:t?[A??{host:t}]:D?.ssh?.hosts,user:m.user,port:Ap(m.port),privateKeyPath:m.key,hostKey:D?.ssh?.hostKey,sudo:D?.ssh?.sudo,profile:m.profile??D?.ssh?.profile,publicIp:D?.ssh?.publicIp,lan:D?.ssh?.lan})}var Sd=1073741824;function ec(D){D.command("ssh:preflight [host]","Check a bring-your-own Linux host before adopting it").option("--user <user>","SSH user (default: ssh.hosts[].user, then root)").option("--port <port>","SSH port (default: ssh.hosts[].port, then 22)").option("--key <path>","SSH private key (default: ssh.hosts[].privateKeyPath, then ~/.ssh/id_ed25519)").option("--profile <profile>","raspberry-pi or generic (default: ssh.profile, then generic)").option("--json","Print the facts and findings as JSON").action(async(t,m)=>{try{let A=await kp(),O=wd(A,t,m),z=t??O.targetHost(),U=await O.ensureHostKey(z),{facts:Y,findings:X}=await O.preflight(z);if(m.json)console.log(JSON.stringify({schemaVersion:1,host:z,hostKeyFingerprint:U.fingerprint,facts:Y,findings:X},null,2));else{if(i(`Preflight ${z}`),U.pinnedNow)e(`Pinned host key ${U.fingerprint}`);if(e(`${Y.os} on ${Y.arch}, ${Y.cpuCores} cores, ${(Y.memoryBytes/Sd).toFixed(1)} GiB memory, ${(Y.diskFreeBytes/Sd).toFixed(1)} GiB free`),Y.piModel)e(Y.piModel);if(Y.lanIp)e(`LAN address ${Y.lanIp}`);if(console.log(on(X)),yr(X))r("The host is not ready; fix the errors above and run the preflight again.");else n("The host is ready to adopt.")}if(yr(X))process.exitCode=1}catch(A){Xa(A)}}),D.command("ssh:bootstrap","Adopt the configured host: pin its key, run the preflight, then bootstrap it").option("--env <environment>","Deployment environment",{default:"production"}).option("--dry-run","Print the bootstrap script instead of running it").action(async(t)=>{try{let m=await De(),A=t.env??"production";if(t.dryRun){let U=hr(m),[Y]=U.hosts;console.log(fr({config:m,environment:A,profile:U.profile,sudoUser:Y.user!=="root"?Y.user:void 0,lan:U.lan}));return}let O=wd(m,void 0,{});i(`Adopt ${O.targetHost()}`);let z=await O.provisionComputeInfrastructure({config:m,environment:A});n(`${z.appPublicIp} is bootstrapped; deploy with: cloud deploy --env ${A}`)}catch(m){Xa(m)}}),D.command("ssh:first-boot","Write cloud-init first-boot files for a freshly flashed Raspberry Pi OS or Ubuntu image").option("--os <os>","raspberry-pi-os or ubuntu",{default:"raspberry-pi-os"}).option("--out <dir>","Directory to write user-data, network-config and meta-data into (never a mounted card; copy them yourself)").option("--hostname <name>","Hostname of the new host").option("--user <user>","Deploy user created on first boot (default: ssh.hosts[].user, then pi)").option("--key <path>","Public key authorized for the user",{default:"~/.ssh/id_ed25519.pub"}).option("--wifi-ssid <ssid>","Join this Wi-Fi network on first boot").option("--wifi-passphrase-env <name>","Environment variable holding the Wi-Fi passphrase",{default:"WIFI_PASSWORD"}).option("--wifi-country <cc>","Wi-Fi regulatory domain, e.g. DE").option("--timezone <tz>","IANA timezone, e.g. Europe/Berlin").option("--locale <locale>","System locale, e.g. en_US.UTF-8").option("--env <environment>","Deployment environment the embedded bootstrap is built for",{default:"production"}).option("--force","Overwrite files already in --out").action(async(t)=>{try{if(!t.out)throw Error("--out <dir> is required.");if(!t.hostname)throw Error("--hostname <name> is required.");let m=t.os??"raspberry-pi-os";if(!(m in io))throw Error(`--os must be raspberry-pi-os or ubuntu, not '${m}'.`);let A=await De(),O=t.env??"production",z=hr(A,{hosts:A.ssh?.hosts?.length?void 0:[{host:t.hostname}],profile:m==="raspberry-pi-os"?"raspberry-pi":void 0}),U=t.user??(A.ssh?.hosts?.[0]?.user??"pi"),Y=tn(t.key??"~/.ssh/id_ed25519.pub");if(!vd(Y))throw Error(`Public key not found at ${Y}; pass --key <path to a .pub file>.`);let X=Sp(Y,"utf8").trim(),ne;if(t.wifiSsid){let ke=t.wifiPassphraseEnv??"WIFI_PASSWORD",le=process.env[ke];if(!le)throw Error(`--wifi-ssid needs the passphrase in $${ke} (set it in the environment, not on the command line).`);if(!t.wifiCountry)throw Error("--wifi-country <cc> is required with --wifi-ssid.");ne={ssid:t.wifiSsid,passphrase:le,country:t.wifiCountry}}let re=fr({config:A,environment:O,profile:z.profile,sudoUser:U!=="root"?U:void 0,lan:z.lan}),ie=oo({hostname:t.hostname,user:U,publicKey:X,timezone:t.timezone,locale:t.locale,wifi:ne},re,{os:m}),ae=$p(t.out);wp(ae,{recursive:!0});let be=Object.keys(ie.files).filter((ke)=>vd(bd(ae,ke)));if(be.length>0&&!t.force)throw Error(`${be.join(", ")} already exist in ${ae}; pass --force to overwrite.`);for(let[ke,le]of Object.entries(ie.files))Cp(bd(ae,ke),le,{mode:384});i(`First boot for ${t.hostname}`),n(`Wrote ${Object.keys(ie.files).join(", ")} to ${ae}`),console.log(ie.instructions)}catch(m){Xa(m)}})}async function Rp(){let D=await De(),t=y(process.cwd(),D),m=new Ln(t.store),A=new Mn(m,new xe(t.store));return{controlPlane:t,store:m,service:A}}async function fs(D){let t=await Rp();try{await D(t)}catch(m){r(m instanceof Error?m.message:String(m)),process.exitCode=1}finally{t.controlPlane.store.close()}}var Gs=(D)=>Object.fromEntries(String(D??"").split(",").map((t)=>t.split("=")).filter((t)=>t[0]&&t[1])),Cd=(D)=>Object.fromEntries(Object.entries(Gs(D)).map(([t,m])=>[t,Number(m)]));function tc(D){D.command("pool:list","List capacity pools and reservations").option("--json","Print structured JSON").action(async(t)=>fs((m)=>{let A=m.store.listPools(m.controlPlane.project.id);if(t.json)console.log(JSON.stringify(A,null,2));else c(["Name","Purpose","Backend","Region / arch","Status","Capacity","Concurrency"],A.map((O)=>[O.name,O.purpose,O.backend,`${O.region??"any"} / ${O.architecture??"any"}`,O.status,JSON.stringify(O.capacity),String(O.concurrency)]))})),D.command("pool:create <name>","Create a capacity pool").option("--purpose <purpose>","application, build, worker, monitoring, or backup",{default:"application"}).option("--backend <backend>","server, ecs, or asg",{default:"server"}).option("--capacity <values>","cpu=4,memoryBytes=8589934592,diskBytes=...").option("--region <region>","Required region").option("--arch <architecture>","Required architecture").option("--labels <labels>","Pool key=value labels").option("--selector <labels>","Required server labels").option("--max <count>","Maximum workloads",{default:"10"}).option("--concurrency <count>","Build concurrency",{default:"1"}).action(async(t,m)=>fs((A)=>{let{purpose:O,backend:z}=m;if(!["application","build","worker","monitoring","backup"].includes(O)||!["server","ecs","asg"].includes(z))throw Error("Unsupported pool purpose or backend.");let U=A.store.createPool({organizationId:A.controlPlane.organization.id,projectId:A.controlPlane.project.id,name:t,purpose:O,backend:z,region:m.region,architecture:m.arch,labels:Gs(m.labels),requiredServerLabels:Gs(m.selector),toleratedTaints:[],capacity:{cpu:0,memoryBytes:0,diskBytes:0,gpu:0,...Cd(m.capacity)},maxWorkloads:Number(m.max),costWeight:1,concurrency:Number(m.concurrency),ephemeralWorkspaces:!0,allowProductionSecrets:!1,status:"active"});n(`Created ${U.name} (${U.id}).`)})),D.command("pool:add-server <pool> <server>","Attach an enrolled server to a pool").action(async(t,m)=>fs((A)=>{let O=A.store.listPools(A.controlPlane.project.id).find((U)=>U.id===t||U.name===t),z=new xe(A.controlPlane.store).list(A.controlPlane.project.id).find((U)=>U.id===m||U.name===m);if(!O||!z)throw Error("Pool or server was not found.");A.store.addMember(O.id,z.id),n(`Attached ${z.name} to ${O.name}.`)})),D.command("placement:explain","Explain eligible and rejected placement targets").option("--purpose <purpose>","Workload purpose",{default:"application"}).option("--resources <values>","Requested resources").option("--region <region>","Required region").option("--arch <architecture>","Required architecture").option("--labels <labels>","Required pool labels").option("--json","Print structured JSON").action(async(t)=>fs((m)=>{let A=m.service.explain(m.controlPlane.project.id,{purpose:t.purpose,resources:Cd(t.resources),region:t.region,architecture:t.arch,labels:Gs(t.labels)});if(t.json)console.log(JSON.stringify(A,null,2));else c(["Pool","Server","Eligible","Available","Fit / spread / cost","Reasons"],A.map((O)=>[O.poolName,O.serverId??"provider-managed",O.eligible?"yes":"no",JSON.stringify(O.available),`${O.score.fit.toFixed(2)} / ${O.score.spread} / ${O.score.cost}`,O.reasons.join("; ")||"eligible"]))})),D.command("pool:drain <pool>","Move stateless placements and block stateful placements").action(async(t)=>fs((m)=>{let A=m.store.listPools(m.controlPlane.project.id).find((z)=>z.id===t||z.name===t);if(!A)throw Error("Pool was not found.");let O=m.service.drainPool(A.id);n(`Draining ${A.name}: moved ${O.moved.length}, blocked ${O.blocked.length} stateful placement(s).`)}))}async function Ip(){let D=await De(),t=y(process.cwd(),D),m=new Un(t.store),A=new Bn(m);return{controlPlane:t,store:m,service:A}}async function fo(D){let t=await Ip();try{await D(t)}catch(m){r(m instanceof Error?m.message:String(m)),process.exitCode=1}finally{t.controlPlane.store.close()}}var gs=(D,t)=>{let m=D.store.list(D.controlPlane.project.id).find((A)=>A.id===t||A.name===t);if(!m)throw Error("Regional topology was not found.");return m},Pp=(D)=>D.split(",").map((t,m)=>{let[A,O="aws"]=t.split(":");return{region:String(A),provider:O,role:m===0?"primary":"secondary"}}),Dp=(D)=>{let t=new Set(["s3","dynamodb","secrets"]),m=D.split(",").map((O)=>O.trim()),A=m.find((O)=>!t.has(O));if(A)throw Error(`Unsupported replication kind: ${A}`);return m};function nc(D){D.command("region:list","List regional topology, traffic, and replication health").option("--json","Print structured JSON").action(async(t)=>fo((m)=>{let A=m.store.list(m.controlPlane.project.id).map((O)=>({topology:O,targets:m.store.targets(O.id),channels:m.store.channels(O.id),route:m.store.route(O.id),executions:m.store.executions(O.id)}));if(t.json)console.log(JSON.stringify(A,null,2));else c(["Name","Hostname","Active","Status","Revision","Replication"],A.map((O)=>[O.topology.name,O.topology.hostname,O.topology.activeRegion,O.topology.status,O.topology.revision??"—",`${O.channels.filter((z)=>z.status==="in_sync").length}/${O.channels.length} in sync`]))})),D.command("region:create <name>","Create a persistent multi-region topology").option("--hostname <hostname>","Traffic hostname").option("--regions <regions>","Comma-separated region[:provider], primary first").option("--replicate <kinds>","s3,dynamodb,secrets",{default:"s3,dynamodb,secrets"}).option("--max-lag <seconds>","Maximum failover lag",{default:"30"}).option("--cdn","Enable CloudFront edge state").option("--waf","Enable WAF edge state").action(async(t,m)=>fo((A)=>{if(!m.hostname||!m.regions)throw Error("--hostname and --regions are required.");let O=A.service.create({organizationId:A.controlPlane.organization.id,projectId:A.controlPlane.project.id,name:t,hostname:m.hostname,regions:Pp(m.regions),trafficPolicy:"active_passive",dataPolicy:{replicate:Dp(String(m.replicate)),maxLagSeconds:Number(m.maxLag),retainOnDestroy:!0},dnsProvider:"route53",cdnEnabled:!!m.cdn,wafEnabled:!!m.waf});n(`Created ${O.name} (${O.id}); run region:rollout with an immutable manifest.`)})),D.command("region:plan <name> <operation>","Preview exact regional execution steps").option("--target <region>","Failover or failback region").action(async(t,m,A)=>fo((O)=>c(["Step"],O.service.plan(gs(O,t).id,m,A.target).map((z)=>[z])))),D.command("region:rollout <name> <revision>","Queue secondary-first regional stack rollout").option("--manifest <file>","Regional stack manifest JSON").action(async(t,m,A)=>fo(async(O)=>{let z=A.manifest?await Bun.file(A.manifest).json():{},U=O.service.enqueue({topologyId:gs(O,t).id,kind:"rollout",revision:m,manifest:z});n(`Regional rollout queued: ${U.operation.id}`)})),D.command("region:failover <name> <region>","Queue health and RPO-gated failover").action(async(t,m)=>fo((A)=>{let O=A.service.enqueue({topologyId:gs(A,t).id,kind:"failover",targetRegion:m});n(`Failover queued: ${O.operation.id}`)})),D.command("region:failback <name> <region>","Queue health and RPO-gated failback").action(async(t,m)=>fo((A)=>{let O=A.service.enqueue({topologyId:gs(A,t).id,kind:"failback",targetRegion:m});n(`Failback queued: ${O.operation.id}`)})),D.command("region:destroy <name>","Drain traffic and delete regional stacks while retaining data").option("--confirm <name>","Exact topology name").action(async(t,m)=>fo((A)=>{let O=A.service.enqueue({topologyId:gs(A,t).id,kind:"destroy",confirmation:m.confirm});n(`Regional teardown queued: ${O.operation.id}; replicated data remains retained.`)}))}var hs="0.16.55";async function Ep(){let D=await De(),t=y(process.cwd(),D),m=new jn(t.store),A=new Vn(m),O=["releases","artifacts","operations","logs","previews","snapshots","orphaned_resources"].map((z)=>new zn(z,t.store,t.project.id,t.organization.id));return{controlPlane:t,store:m,service:A,cleanup:O}}async function ki(D){let t=await Ep();try{await D(t)}catch(m){r(m instanceof Error?m.message:String(m)),process.exitCode=1}finally{t.controlPlane.store.close()}}function rc(D){D.command("maintenance:list","List updates, campaigns, cleanup plans, and DR drills").option("--json","Print structured JSON").action(async(t)=>ki((m)=>{let A={manifests:m.store.manifests(m.controlPlane.organization.id),windows:m.store.windows(m.controlPlane.project.id),campaigns:m.store.campaigns(m.controlPlane.project.id),cleanups:m.store.cleanups(m.controlPlane.project.id),drills:m.store.drills(m.controlPlane.project.id)},O=[...A.manifests.map((z)=>["update",z.version,z.compatibility.compatible?"compatible":"blocked",z.compatibility.reasons.join("; ")||z.channel]),...A.campaigns.map((z)=>["upgrade",z.id,z.status,z.currentStage??z.fromVersion]),...A.cleanups.map((z)=>["cleanup",z.kind,z.status,`${z.candidates.length} items / ${z.estimatedBytes} bytes`]),...A.drills.map((z)=>["DR drill",z.scenario,z.status,z.isolatedTarget])];if(t.json)console.log(JSON.stringify(A,null,2));else c(["Area","Name / version","Status","Detail"],O)})),D.command("maintenance:key:add <name> <pem>","Trust an Ed25519 update signing key").action(async(t,m)=>ki(async(A)=>{let O=A.store.addTrustedKey({organizationId:A.controlPlane.organization.id,name:t,publicKeyPem:await Bun.file(m).text()});n(`Trusted ${O.name}: ${O.fingerprint}`)})),D.command("maintenance:manifest <document> <signature> <key>","Verify and import a signed update manifest").action(async(t,m,A)=>ki(async(O)=>{let z=await Bun.file(t).json(),U=(await Bun.file(m).text()).trim(),Y=O.store.importManifest({organizationId:O.controlPlane.organization.id,keyId:A,document:z,signature:U,current:{schemaVersion:O.controlPlane.store.health().schemaVersion,currentVersion:hs,platform:process.platform,architecture:process.arch}});n(`Verified ${Y.version}; ${Y.compatibility.compatible?"compatible":"blocked: "+Y.compatibility.reasons.join("; ")}`)})),D.command("maintenance:window <name> <schedule>","Create an approved maintenance window").option("--timezone <timezone>","IANA timezone",{default:"UTC"}).option("--minutes <minutes>","Duration",{default:"60"}).action(async(t,m,A)=>ki((O)=>{let z=O.store.createWindow({projectId:O.controlPlane.project.id,name:t,schedule:m,timezone:A.timezone,durationMinutes:Number(A.minutes),allowedOperations:["platform.upgrade"],requireApproval:!0});n(`Created ${z.name} (${z.id}).`)})),D.command("platform:upgrade <manifest> <backup>","Plan and queue a signed staged platform update").option("--strategy <strategy>","canary or rolling",{default:"canary"}).option("--batch <count>","Rolling batch size",{default:"1"}).action(async(t,m,A)=>ki((O)=>{let z=new xe(O.controlPlane.store).list(O.controlPlane.project.id).filter((X)=>X.status==="ready").map((X)=>({serverId:X.id,target:X.name,previousVersion:X.bootstrapVersion??hs}));if(!z.length)z.push({target:"control-plane",previousVersion:hs});let U=O.store.createCampaign({projectId:O.controlPlane.project.id,manifestId:t,fromVersion:hs,strategy:A.strategy==="rolling"?"rolling":"canary",batchSize:Number(A.batch),healthGate:{kind:"platform"},backupId:m,targets:z}),Y=O.service.enqueueCampaign(U.id);n(`Staged upgrade queued: ${Y.operation.id}`)})),D.command("cleanup:preview <kind>","Discover a bounded cleanup candidate set without deleting").option("--older-than <days>","Minimum age",{default:"30"}).action(async(t,m)=>ki(async(A)=>{let O=await A.service.previewCleanup({projectId:A.controlPlane.project.id,kind:t,criteria:{olderThanDays:Number(m.olderThan)}},A.cleanup);c(["ID","Candidate","Bytes"],O.candidates.map((z)=>[z.id,z.label,String(z.bytes)])),e(`Apply with: cloud cleanup:apply ${O.id} --confirm "DELETE ${O.candidates.length} ${O.kind}"`)})),D.command("cleanup:apply <plan>","Apply an unchanged cleanup preview").option("--confirm <text>","Exact preview confirmation").action(async(t,m)=>ki((A)=>{let O=A.service.enqueueCleanup(t,String(m.confirm??""));n(`Cleanup queued: ${O.operation.id}`)})),D.command("dr:plan <scenario> <target>","Plan an isolated disaster-recovery drill").option("--rpo <minutes>","RPO objective",{default:"60"}).option("--rto <minutes>","RTO objective",{default:"30"}).option("--recovery-point <id>","Recovery point").option("--topology <id>","Regional topology").action(async(t,m,A)=>ki((O)=>{let z=O.store.createDrill({projectId:O.controlPlane.project.id,scenario:t,isolatedTarget:m,expectedRpoMinutes:Number(A.rpo),expectedRtoMinutes:Number(A.rto),recoveryPointId:A.recoveryPoint,topologyId:A.topology});n(`Planned isolated drill ${z.id}.`)})),D.command("dr:run <drill>","Queue an isolated disaster-recovery drill").action(async(t)=>ki((m)=>{let A=m.service.enqueueDrill(t);n(`DR drill queued: ${A.operation.id}`)}))}async function ic(){try{return(await De()).project.region||process.env.AWS_REGION||"us-east-1"}catch{return process.env.AWS_REGION||"us-east-1"}}function oc(D){D.command("function:list","List all Lambda functions").option("--region <region>","AWS region").action(async(t)=>{i("Lambda Functions");let m=t?.region||await ic(),A=new P(m);try{let{Functions:O=[]}=await A.listFunctions({MaxItems:50});if(!O.length){e("No functions found");return}c(["Name","Runtime","Memory","Timeout","Last Modified"],O.map((z)=>[z.FunctionName??"-",z.Runtime??"-",z.MemorySize?`${z.MemorySize} MB`:"-",z.Timeout?`${z.Timeout}s`:"-",z.LastModified??"-"]))}catch(O){r(`Failed to list functions: ${O.message}`),process.exitCode=1}}),D.command("function:invoke <name>","Invoke a Lambda function").option("--payload <json>","Event payload as JSON",{default:"{}"}).option("--async","Fire-and-forget (Event invocation)").option("--region <region>","AWS region").action(async(t,m)=>{i(`Invoking ${t}`);let A=m?.region||await ic(),O=new P(A),z=new s("Invoking function...");z.start();try{let U=await O.invoke({FunctionName:t,InvocationType:m?.async?"Event":"RequestResponse",Payload:m?.payload||"{}",LogType:m?.async?"None":"Tail"});if(U.FunctionError){if(z.fail(`Function returned an error (${U.FunctionError})`),U.Payload)e(U.Payload);process.exitCode=1;return}if(z.succeed(`Invoked (status ${U.StatusCode})`),U.Payload)e(`
+`)}async function pp(){let D=await De(),t=y(process.cwd(),D),m=new xe(t.store),A=new $n(m,[new at("aws"),new at("hetzner"),new at("ssh")]);return{controlPlane:t,store:m,service:A}}async function fi(D){let t=await pp();try{return await D(t)}finally{t.controlPlane.store.close()}}var Vi=(D,t)=>{let m=D.store.list(D.controlPlane.project.id).find((A)=>A.id===t||A.name===t);if(!m)throw Error(`Server ${t} was not found.`);return m},vn=(D)=>{r(D instanceof Error?D.message:String(D)),process.exitCode=1};function Za(D,t){let m=Number.parseInt(D??"",10);return Number.isFinite(m)&&m>=0?m:t}function fp(D="3h"){let t=D.match(/^(\d+)(m|h)$/);if(!t)throw Error("--range must use minutes or hours, for example 30m or 3h.");let m=Number(t[1])*(t[2]==="h"?3600000:60000);if(m<300000||m>86400000)throw Error("--range must be between 5 minutes and 24 hours.");return m}function is(D,t="%"){return D==null?"unavailable":`${D.toFixed(1)}${t}`}async function gp(D,t){let m=await De();if(m.cloud?.provider!=="hetzner")throw Error("server:monitoring currently requires the Hetzner provider.");let A=t.env??process.env.CLOUD_ENV??"production",O=T(m,A),z=await ge(O);if(!z?.serverId)throw Error(`No pinned Hetzner server was found for ${O}.`);if(![z.serverName,String(z.serverId),z.stackName].includes(D))throw Error(`Refusing to read ${D}: project state is pinned to ${z.serverName}.`);let U=ur(m),Y=new Je({apiToken:pr(U.apiToken,m)}),X=await Y.getServer(z.serverId),ne=z.publicIp??X.public_net.ipv4?.ip;if(!ne)throw Error(`Server ${X.name} has no public IPv4 address.`);let re=new Date,ie=new Date(re.getTime()-fp(t.range)),ae=Math.min(3600,Math.max(60,Za(t.step,60))),be=await fd({client:Y,serverId:X.id,cores:Math.max(1,Number(X.server_type.cores)||1),from:ie,to:re,step:ae,remote:{host:ne,user:z.sshUser??U.sshUser,identityFile:U.sshPrivateKeyPath,connectTimeoutSec:15}});if(t.json){console.log(JSON.stringify({schemaVersion:1,server:X.name,result:be},null,2));return}c(["Server","Window","CPU average / peak","RAM average / peak","Minimum available","Swap peak"],[[X.name,`${be.from} to ${be.to}`,`${is(be.summary.cpuAveragePercent)} / ${is(be.summary.cpuPeakPercent)}`,`${is(be.summary.memoryAveragePercent)} / ${is(be.summary.memoryPeakPercent)}`,be.summary.memoryMinimumAvailableBytes==null?"unavailable":`${(be.summary.memoryMinimumAvailableBytes/1073741824).toFixed(2)} GB`,is(be.summary.swapPeakPercent)]])}function yd(D){let t=D.targetType.prices?.find((m)=>m.location===D.location);return{serverId:D.serverId,serverName:D.serverName,location:D.location,from:D.currentType.name,to:D.targetType.name,capacityAvailable:D.capacityAvailable,alreadyComplete:D.alreadyComplete,upgradeDisk:D.upgradeDisk,target:{cores:D.targetType.cores,memoryGb:D.targetType.memory,diskGb:D.targetType.disk,architecture:D.targetType.architecture,cpuType:D.targetType.cpu_type},price:t?{hourlyNet:t.price_hourly.net,hourlyGross:t.price_hourly.gross,monthlyNet:t.price_monthly.net,monthlyGross:t.price_monthly.gross}:void 0}}function hp(D){let t=yd(D);c(["Server","Location","Resize","Capacity","CPU / RAM / disk","Monthly"],[[`${t.serverName} (${t.serverId})`,t.location,`${t.from} -> ${t.to}`,t.capacityAvailable?"available":"waiting",`${t.target.cores??0} / ${t.target.memoryGb??0} GB / ${t.target.diskGb??0} GB`,t.price?.monthlyGross??t.price?.monthlyNet??"not reported"]])}async function yp(D,t,m){let A=await De();if(A.cloud?.provider!=="hetzner")throw Error("server:resize currently requires the Hetzner provider.");let O=m.env??process.env.CLOUD_ENV??"production",z=T(A,O),U=await ge(z),Y=ur(A),X=new Je({apiToken:pr(Y.apiToken,A)}),re=U&&(D===U.serverName||D===String(U.serverId)||D===U.stackName)?await X.getServer(U.serverId):(await X.listServers()).find((Ne)=>Ne.name===D||String(Ne.id)===D);if(!re)throw Error(`Hetzner server ${D} was not found.`);if(U?.serverId&&U.serverId!==re.id)throw Error(`Refusing to resize ${D}: project state is pinned to server ${U.serverId}.`);let ie=Xe(t),ae=m.upgradeDisk!==!1,be=await mr(X,re.id,ie,ae);if(m.json)console.log(JSON.stringify({schemaVersion:1,plan:yd(be)},null,2));else hp(be);if(!m.apply){if(!m.json)e(`Preview only. Re-run with --apply --confirm ${re.name} to execute.`);return}if(m.confirm!==re.name)throw Error(`Resize requires --confirm ${re.name}.`);let ke=U?.publicIp??re.public_net.ipv4?.ip;if(!ke)throw Error(`Server ${re.name} has no public IPv4 address for verification.`);let le={host:ke,user:U?.sshUser??Y.sshUser,identityFile:Y.sshPrivateKeyPath,connectTimeoutSec:15,sshTimeoutMs:600000,routeTimeoutMs:20000},$e=await ps(z),Pe=new Date().toISOString(),Se={schemaVersion:1,operationId:$e?.targetType===ie&&$e.serverId===re.id?$e.operationId:crypto.randomUUID(),stackName:z,serverId:re.id,serverName:re.name,sourceType:be.currentType.name,targetType:ie,upgradeDisk:ae,phase:"planning",status:"running",attempts:$e?.targetType===ie?$e.attempts:0,startedAt:$e?.targetType===ie?$e.startedAt:Pe,updatedAt:Pe,manifest:$e?.targetType===ie?$e.manifest:void 0};await gt(Se);let Ae=Za(m.pollSeconds,900)*1000,Re=Za(m.maxWaitMinutes,0)*60000,ze=Date.now();for(;;){let Ne=await mr(X,re.id,ie,ae);if(!Ne.capacityAvailable&&!Ne.alreadyComplete){if(Se={...Se,phase:"waiting-capacity",status:"waiting-capacity",updatedAt:new Date().toISOString()},await gt(Se),!m.wait){if(!m.json)e(`${ie} has no capacity in ${Ne.location}. The server remains running and unchanged. Use --wait to poll safely.`);return}if(Re>0&&Date.now()-ze>=Re)throw Error(`Timed out waiting for ${ie} capacity in ${Ne.location}.`);if(!m.json)e(`Waiting ${Math.round(Ae/1000)} seconds for ${ie} capacity...`);await Bun.sleep(Ae);continue}let je=await ms(z);try{let Ue=await(async()=>{try{return Se={...Se,status:"running",attempts:Se.attempts+1,updatedAt:new Date().toISOString()},await gt(Se),await pi({client:X,serverId:re.id,targetType:ie,upgradeDisk:ae,resumeFromOff:Se.phase==="shutting-down"||Se.phase==="resizing"||Se.phase==="powering-on"||Se.phase==="verifying",manifest:Se.manifest,hooks:{preflight:async()=>{let Ct=await mi(le);return Se={...Se,manifest:Ct,updatedAt:new Date().toISOString()},await gt(Se),Ct},afterBoot:async(Ct,At,nt,kt)=>gi(le,At,nt,kt),onPhase:async(Ct,At)=>{if(Se={...Se,phase:Ct,status:Ct==="waiting-capacity"?"waiting-capacity":Ct==="complete"?"completed":"running",updatedAt:new Date().toISOString()},await gt(Se),!m.json)e(`${Ct}${At?` ${JSON.stringify(At)}`:""}`)}}})}finally{await je()}})();if(Se={...Se,status:Ue.status==="completed"||Ue.status==="already-complete"?"completed":Ue.status==="recovered"?"recovered":"waiting-capacity",lastError:Ue.status==="recovered"?Ue.error:void 0,updatedAt:new Date().toISOString()},await gt(Se),m.json)console.log(JSON.stringify({schemaVersion:1,result:Ue},null,2));else if(Ue.status==="completed"||Ue.status==="already-complete")n(`${re.name} is on ${ie} and passed full post-boot verification.`);else if(Ue.status==="recovered"&&Ue.retryable&&m.wait){e(`Capacity race recovered safely. Waiting ${Math.round(Ae/1000)} seconds before retry.`),await Bun.sleep(Ae);continue}else if(Ue.status==="recovered")throw Error(`Resize did not complete and the original server was recovered: ${Ue.error}`);return}catch(Ue){throw Se={...Se,status:"failed",lastError:Ue instanceof Error?Ue.message:String(Ue),updatedAt:new Date().toISOString()},await gt(Se),Ue}}}async function vp(D,t){let m=await De();if(m.cloud?.provider!=="hetzner")throw Error("server:optimize currently requires the Hetzner provider.");let A=t.env??process.env.CLOUD_ENV??"production",O=T(m,A),z=await ge(O);if(!z?.serverId)throw Error(`No pinned Hetzner server was found for ${O}.`);if(![z.serverName,String(z.serverId),z.stackName].includes(D))throw Error(`Refusing to optimize ${D}: project state is pinned to ${z.serverName}.`);let U=ur(m),Y=new Je({apiToken:pr(U.apiToken,m)}),X=await Y.getServer(z.serverId),ne=z.publicIp??X.public_net.ipv4?.ip;if(!ne)throw Error(`Server ${X.name} has no public IPv4 address.`);let re=so(m);if(t.json)console.log(JSON.stringify({schemaVersion:1,server:X.name,plan:re},null,2));else c(["Server","Firewall ports","Monitoring","Auto updates","Swap","SSH passwords"],[[X.name,re.firewallPorts.join(","),re.monitoring?"on":"off",re.autoUpdates?"on":"off",`${re.swapGb} GB`,"disabled"]]);if(!t.apply){if(!t.json)e(`Preview only. Re-run with --apply --confirm ${X.name} to execute.`);return}if(t.confirm!==X.name)throw Error(`Optimization requires --confirm ${X.name}.`);let ie={host:ne,user:z.sshUser??U.sshUser,identityFile:U.sshPrivateKeyPath,connectTimeoutSec:15},ae=await nn(ie),be=ae.routeProbes.filter((nt)=>!nt.ok),ke=m.infrastructure?.compute,le=Z(ke)?new Set(["nginx.service","bun-gateway.service","ts-cloud-nginx.service"]):new Set,$e=ae.failedUnits.filter((nt)=>!le.has(nt));if($e.length>0)throw Error(`Preflight found failed services: ${$e.join(", ")}`);if(be.length>0)throw Error(`Preflight found unhealthy routes: ${be.map((nt)=>nt.domain).join(", ")}`);let Pe=Z(ke)?[]:Object.values(m.sites??{}).flatMap((nt)=>typeof nt?.port==="number"&&![80,443].includes(nt.port)?[nt.port]:[]),Se=rn({allowSsh:ke?.allowSsh!==!1,sitePorts:Pe,allowedPorts:ke?.firewall?.allowedPorts}),Ae=(z.firewallId?(await Y.listFirewalls()).find((nt)=>nt.id===z.firewallId):void 0)??(await Y.listFirewalls()).find((nt)=>nt.name===`${m.project.slug}-${A}-app-fw`);if(!Ae)throw Error(`Managed firewall for ${X.name} was not found.`);let Re=await Y.setFirewallRules(Ae.id,Se);await Promise.all(Re.map((nt)=>Y.waitForAction(nt.id))),await ls(m,ie);let[ze,Ne]=await Promise.all([nn(ie),ds(ie)]),je=us(re,Ne),Ue=gc(ae,ze),Ct=ze.routeProbes.filter((nt)=>!nt.ok);if(Ue.stoppedServices.length>0)je.push(`services stopped: ${Ue.stoppedServices.join(", ")}`);if(Ue.changedRouteFragments.length>0)je.push(`route fragments changed: ${Ue.changedRouteFragments.join(", ")}`);if(Ue.missingRouteIds.length>0)je.push(`routes disappeared: ${Ue.missingRouteIds.join(", ")}`);if(Ue.changedReleaseLinks.length>0)je.push(`release links changed: ${Ue.changedReleaseLinks.join(", ")}`);if(Ue.missingData.length>0)je.push(`databases or volumes disappeared: ${Ue.missingData.join(", ")}`);if(Ct.length>0)je.push(`unhealthy routes: ${Ct.map((nt)=>nt.domain).join(", ")}`);if(je.length>0)throw Error(`Host optimization verification failed: ${je.join("; ")}`);let At={serverId:X.id,serverName:X.name,services:ze.runningServices.length,routes:ze.routeIds.length,healthyDomains:ze.routeProbes.length,releaseLinks:ze.releaseLinks.length,databasesAndVolumes:ze.dataCatalog.length,report:Ne};if(t.json)console.log(JSON.stringify({schemaVersion:1,result:At},null,2));else n(`${X.name} passed full host, rpx route, service, release, and data verification.`)}async function bp(D,t,m){let A=await De(),O=m.env??"production",z=T(A,O);await fi(async(U)=>{let Y=Vi(U,D),X=U.store.list(U.controlPlane.project.id,!0),ne=Y.provider==="hetzner"&&Y.providerId?(()=>{try{let Ae=ur(A);return new Je({apiToken:pr(Ae.apiToken,A)})}catch{return null}})():null,re=Y.providerId?Number(Y.providerId):Number.NaN,ie=await ge(z),ae=ie!=null&&ie.serverId===re,be=new Hr,ke=Y.trustState==="pinned",le={takenNames:async()=>{let Ae=X.map((Re)=>Re.name);if(ne)Ae.push(...(await ne.listServers()).map((Re)=>Re.name));return Ae},inventoryName:()=>U.store.get(Y.id)?.name??Y.name,renameInventory:(Ae)=>{U.store.update(Y.id,{name:Ae})},...ne&&Number.isFinite(re)?{providerName:async()=>(await ne.getServer(re)).name,renameProvider:async(Ae)=>{await ne.renameServer(re,Ae)}}:{},...ae?{stateName:async()=>(await ge(z))?.serverName,writeStateName:async(Ae)=>{let Re=await ge(z);if(Re)await mt(z,{...Re,serverName:Ae})}}:{},...ke?{remoteHostname:async()=>{let Ae=await be.exec(Y,"hostname");return Ae.code===0?Ae.stdout.trim():void 0},setRemoteHostname:async(Ae)=>{let Re=await be.exec(Y,hd(Ae));if(Re.code!==0)throw Error(Re.stderr.trim()||`hostname exited ${Re.code}`)}}:{}},$e=await gd(Y.name,t,le),Pe=await Us($e);if(!m.apply){let Ae=[ne?"":"provider record (no provider id or no API token)",ae?"":"local state pin (none points at this server)",ke?"":"box hostname (host key is not pinned — run server:validate first)"].filter(Boolean);if(m.json){console.log(JSON.stringify({schemaVersion:1,operation:$e.operation,target:$e.target,rename:{from:Y.name,to:t},notCovered:Ae,steps:Pe.map((Re)=>({id:Re.step.id,title:Re.step.title,state:Re.state,change:Re.step.change,reason:Re.reason}))},null,2));return}for(let Re of qs($e,Pe))console.log(Re);for(let Re of Ae)console.log(`  not covered: ${Re}`);console.log("  Re-run with --apply to perform it.");return}let Se=await Hs($e,Pe,{log:(Ae)=>e(Ae),audit:(Ae)=>U.controlPlane.store.appendEvent({projectId:U.controlPlane.project.id,resourceId:Y.resourceId,type:`${Ae.operation}.${Ae.step}.${Ae.state}`,level:Ae.state==="failed"?"error":"info",payload:{target:Ae.target,renameTo:t,...Ae.error?{error:Ae.error}:{}}})});if(m.json)console.log(JSON.stringify({schemaVersion:1,outcome:Se},null,2));if(!Se.success){let Ae=Se.steps.find((Re)=>Re.state==="failed");throw Error(`${$e.operation} stopped at '${Ae?.title}': ${Ae?.error}. Earlier steps stayed applied; re-run the same command to continue from here.`)}if(!m.json)n(`Renamed ${Y.name} to ${t}.`)})}function Qa(D){D.command("capabilities [server]","Show provider and target operation support").option("--json","Print structured JSON").action(async(t,m)=>{try{await fi(async(A)=>{let O=t?[Vi(A,t)]:A.store.list(A.controlPlane.project.id),z=O.flatMap((U)=>Object.entries(U.capabilities).map(([Y,X])=>({server:U.name,provider:U.provider,action:Y,...X})));if(m.json)console.log(JSON.stringify({schemaVersion:1,targets:z},null,2));else c(["Server","Provider","Action","Support","Explanation"],z.map((U)=>[U.server,U.provider,U.action,U.supported?"supported":"unsupported",U.reason??"—"]))})}catch(A){vn(A)}}),D.command("server:resize <name> <type>","Safely resize Hetzner compute with full host verification").option("--env <environment>","Deployment environment",{default:"production"}).option("--apply","Execute the reviewed resize plan").option("--confirm <name>","Exact server name required for mutation").option("--upgrade-disk","Permanently expand the root disk to the target size",{default:!0}).option("--wait","Poll capacity without taking the server offline until placement is available").option("--poll-seconds <seconds>","Capacity retry interval",{default:"900"}).option("--max-wait-minutes <minutes>","Stop waiting after this many minutes; 0 waits indefinitely",{default:"0"}).option("--json","Print structured JSON").action(async(t,m,A)=>{try{await yp(t,m,A)}catch(O){vn(O)}}),D.command("server:optimize <name>","Reconcile and verify a production Hetzner host").option("--env <environment>","Deployment environment",{default:"production"}).option("--apply","Apply the reviewed host optimization plan").option("--confirm <name>","Exact server name required for mutation").option("--json","Print structured JSON").action(async(t,m)=>{try{await vp(t,m)}catch(A){vn(A)}}),D.command("server:monitoring <name>","Read historical Hetzner CPU, RAM, swap, disk, and network metrics").option("--env <environment>","Deployment environment",{default:"production"}).option("--range <duration>","Historical window from 5m to 24h",{default:"3h"}).option("--step <seconds>","Hetzner provider sample interval",{default:"60"}).option("--json","Print structured JSON").action(async(t,m)=>{try{await gp(t,m)}catch(A){vn(A)}}),D.command("server:list","List fleet servers").option("--json","Print structured JSON").action(async(t)=>{try{await fi(async(m)=>{let A=m.store.list(m.controlPlane.project.id);if(t.json)console.log(JSON.stringify(A,null,2));else c(["Name","Provider ID","Provider / region","Status / trust","Roles","CPU / memory","Heartbeat"],A.map((O)=>[O.name,O.providerId??"—",`${O.provider} / ${O.region??"external"}`,`${O.status} / ${O.trustState}`,O.roles.join(","),`${O.capacity.cpu??0} / ${O.capacity.memoryBytes??0}`,O.heartbeatAt??"never"]))})}catch(m){vn(m)}}),D.command("server:create <name>","Enroll a provisioned or existing server").option("--provider <provider>","aws, hetzner, or ssh",{default:"ssh"}).option("--provider-id <id>","Stable provider identity").option("--endpoint <host>","SSH hostname or IP").option("--user <user>","Non-root SSH user",{default:"deploy"}).option("--credential-ref <ref>","Secret reference",{default:"secret://fleet/agent"}).option("--region <region>","Provider region").option("--roles <roles>","Comma-separated roles",{default:"application"}).option("--labels <labels>","Comma-separated key=value labels").action(async(t,m)=>{try{await fi(async(A)=>{let O=m.provider;if(!["aws","hetzner","ssh"].includes(O)||!m.endpoint)throw Error("A supported --provider and --endpoint are required; provisioning and enrollment are separate operations.");let z=A.service.enroll({organizationId:A.controlPlane.organization.id,projectId:A.controlPlane.project.id,name:t,provider:O,providerId:m.providerId,endpoint:m.endpoint,sshUser:m.user??"deploy",credentialRef:m.credentialRef??"secret://fleet/agent",region:m.region,roles:String(m.roles??"application").split(","),labels:Object.fromEntries(String(m.labels??"").split(",").map((U)=>U.split("=")).filter((U)=>U[0]&&U[1]))});n(`Enrolled ${z.name} as ${z.id}; no remote mutation was performed.`)})}catch(A){vn(A)}}),D.command("server:validate <name>","Pin trust and validate a server").option("--accept-host-key <fingerprint>","Accept reviewed rotation").option("--json","Print JSON").action(async(t,m)=>{try{await fi(async(A)=>{let O=Vi(A,t);if(O=await A.service.test(O.id),O.trustState==="rotation_pending"){if(!m.acceptHostKey)throw Error(`Host key changed to ${O.pendingHostKey}; review it first.`);O=A.service.reviewHostKey(O.id,m.acceptHostKey)}let z=await A.service.validate(O.id);if(m.json)console.log(JSON.stringify(z.validation,null,2));else c(["Severity","Code","Finding","Remediation"],(z.validation?.findings??[]).map((U)=>[U.severity,U.code,U.message,U.remediation??"—"]));if(!z.validation?.valid)process.exitCode=1})}catch(A){vn(A)}}),D.command("server:bootstrap <name>","Preview or queue bootstrap").option("--apply","Apply reviewed plan").action(async(t,m)=>{try{await fi(async(A)=>{let O=A.service.bootstrap(Vi(A,t).id,!!m.apply);if(O.preview)c(["Step"],O.steps.map((z)=>[z]));else n(`Bootstrap queued: ${O.operation?.id}`)})}catch(A){vn(A)}}),D.command("server:rename <name> <new-name>","Rename a server in place, without recreating it").option("--env <environment>","Deployment environment",{default:"production"}).option("--apply","Perform the reviewed rename plan").option("--json","Print structured JSON").action(async(t,m,A)=>{try{await bp(t,m,A)}catch(O){vn(O)}}),D.command("server:drain <name>","Drain without terminating").option("--complete","Mark movement complete").action(async(t,m)=>{try{await fi(async(A)=>n(A.service.drain(Vi(A,t).id,!!m.complete).status))}catch(A){vn(A)}}),D.command("server:uncordon <name>","Return a server to scheduling").action(async(t)=>{try{await fi(async(m)=>{m.service.uncordon(Vi(m,t).id),n(`Uncordoned ${t}.`)})}catch(m){vn(m)}}),D.command("server:archive <name>","Archive inventory without termination").option("--confirm <name>","Exact name").action(async(t,m)=>{try{await fi(async(A)=>{A.service.archive(Vi(A,t).id,m.confirm??""),n(`Archived ${t}; provider infrastructure was not terminated.`)})}catch(A){vn(A)}}),D.command("server:ssh <name>","Open strict SSH using the enrolled endpoint").action(async(t)=>{try{await fi(async(m)=>{let A=Vi(m,t);if(A.trustState!=="pinned")throw Error("Validate and pin the server host key first.");let O=Bun.spawn(["ssh","-p",String(A.sshPort),"-o","StrictHostKeyChecking=yes",`${A.sshUser}@${A.endpoint}`],{stdin:"inherit",stdout:"inherit",stderr:"inherit"}),z=await O.exited;if(z)process.exitCode=z})}catch(m){vn(m)}});for(let[t,m]of[["server:logs <name>","Use the runtime log service"],["server:deploy <name>","Use immutable release deployment"],["server:reboot <name>","Reboot provider compute"],["server:destroy <name>","Terminate provider compute"],["server:recipe <name> <recipe>","Apply a server recipe"],["server:firewall:add <name> <rule>","Add firewall rule"],["server:firewall:list <name>","List firewall rules"],["server:firewall:remove <name> <rule>","Remove firewall rule"],["server:ssl:install <domain>","Install TLS"],["server:ssl:renew <domain>","Renew TLS"],["server:snapshot <name>","Create provider snapshot"],["server:snapshot:restore <name> <snapshot-id>","Restore provider snapshot"],["server:update <name>","Update OS packages"],["server:secure <name>","Apply OS hardening"]])D.command(t,m).action(async(...A)=>Rn(t.split(" ")[0],{target:String(A[0]??""),nextAction:"Use the dashboard capability view or the corresponding runtime, release, firewall, backup, or maintenance service."}))}import{existsSync as vd,mkdirSync as wp,readFileSync as Sp,writeFileSync as Cp}from"node:fs";import{join as bd,resolve as $p}from"node:path";var Xa=(D)=>{r(D instanceof Error?D.message:String(D)),process.exitCode=1};async function kp(){try{return await De()}catch{return}}function Ap(D){if(D===void 0)return;let t=Number(D);if(!Number.isInteger(t)||t<1||t>65535)throw Error(`--port must be a port number, not '${D}'.`);return t}function wd(D,t,m){let A=D?.ssh?.hosts?.find((O)=>O.host===t);return new br({hosts:t?[A??{host:t}]:D?.ssh?.hosts,user:m.user,port:Ap(m.port),privateKeyPath:m.key,hostKey:D?.ssh?.hostKey,sudo:D?.ssh?.sudo,profile:m.profile??D?.ssh?.profile,publicIp:D?.ssh?.publicIp,lan:D?.ssh?.lan})}var Sd=1073741824;function ec(D){D.command("ssh:preflight [host]","Check a bring-your-own Linux host before adopting it").option("--user <user>","SSH user (default: ssh.hosts[].user, then root)").option("--port <port>","SSH port (default: ssh.hosts[].port, then 22)").option("--key <path>","SSH private key (default: ssh.hosts[].privateKeyPath, then ~/.ssh/id_ed25519)").option("--profile <profile>","raspberry-pi or generic (default: ssh.profile, then generic)").option("--json","Print the facts and findings as JSON").action(async(t,m)=>{try{let A=await kp(),O=wd(A,t,m),z=t??O.targetHost(),U=await O.ensureHostKey(z),{facts:Y,findings:X}=await O.preflight(z);if(m.json)console.log(JSON.stringify({schemaVersion:1,host:z,hostKeyFingerprint:U.fingerprint,facts:Y,findings:X},null,2));else{if(i(`Preflight ${z}`),U.pinnedNow)e(`Pinned host key ${U.fingerprint}`);if(e(`${Y.os} on ${Y.arch}, ${Y.cpuCores} cores, ${(Y.memoryBytes/Sd).toFixed(1)} GiB memory, ${(Y.diskFreeBytes/Sd).toFixed(1)} GiB free`),Y.piModel)e(Y.piModel);if(Y.lanIp)e(`LAN address ${Y.lanIp}`);if(console.log(on(X)),yr(X))r("The host is not ready; fix the errors above and run the preflight again.");else n("The host is ready to adopt.")}if(yr(X))process.exitCode=1}catch(A){Xa(A)}}),D.command("ssh:bootstrap","Adopt the configured host: pin its key, run the preflight, then bootstrap it").option("--env <environment>","Deployment environment",{default:"production"}).option("--dry-run","Print the bootstrap script instead of running it").action(async(t)=>{try{let m=await De(),A=t.env??"production";if(t.dryRun){let U=hr(m),[Y]=U.hosts;console.log(fr({config:m,environment:A,profile:U.profile,sudoUser:Y.user!=="root"?Y.user:void 0,lan:U.lan}));return}let O=wd(m,void 0,{});i(`Adopt ${O.targetHost()}`);let z=await O.provisionComputeInfrastructure({config:m,environment:A});n(`${z.appPublicIp} is bootstrapped; deploy with: cloud deploy --env ${A}`)}catch(m){Xa(m)}}),D.command("ssh:first-boot","Write cloud-init first-boot files for a freshly flashed Raspberry Pi OS or Ubuntu image").option("--os <os>","raspberry-pi-os or ubuntu",{default:"raspberry-pi-os"}).option("--out <dir>","Directory to write user-data, network-config and meta-data into (never a mounted card; copy them yourself)").option("--hostname <name>","Hostname of the new host").option("--user <user>","Deploy user created on first boot (default: ssh.hosts[].user, then pi)").option("--key <path>","Public key authorized for the user",{default:"~/.ssh/id_ed25519.pub"}).option("--wifi-ssid <ssid>","Join this Wi-Fi network on first boot").option("--wifi-passphrase-env <name>","Environment variable holding the Wi-Fi passphrase",{default:"WIFI_PASSWORD"}).option("--wifi-country <cc>","Wi-Fi regulatory domain, e.g. DE").option("--timezone <tz>","IANA timezone, e.g. Europe/Berlin").option("--locale <locale>","System locale, e.g. en_US.UTF-8").option("--env <environment>","Deployment environment the embedded bootstrap is built for",{default:"production"}).option("--force","Overwrite files already in --out").action(async(t)=>{try{if(!t.out)throw Error("--out <dir> is required.");if(!t.hostname)throw Error("--hostname <name> is required.");let m=t.os??"raspberry-pi-os";if(!(m in io))throw Error(`--os must be raspberry-pi-os or ubuntu, not '${m}'.`);let A=await De(),O=t.env??"production",z=hr(A,{hosts:A.ssh?.hosts?.length?void 0:[{host:t.hostname}],profile:m==="raspberry-pi-os"?"raspberry-pi":void 0}),U=t.user??(A.ssh?.hosts?.[0]?.user??"pi"),Y=tn(t.key??"~/.ssh/id_ed25519.pub");if(!vd(Y))throw Error(`Public key not found at ${Y}; pass --key <path to a .pub file>.`);let X=Sp(Y,"utf8").trim(),ne;if(t.wifiSsid){let ke=t.wifiPassphraseEnv??"WIFI_PASSWORD",le=process.env[ke];if(!le)throw Error(`--wifi-ssid needs the passphrase in $${ke} (set it in the environment, not on the command line).`);if(!t.wifiCountry)throw Error("--wifi-country <cc> is required with --wifi-ssid.");ne={ssid:t.wifiSsid,passphrase:le,country:t.wifiCountry}}let re=fr({config:A,environment:O,profile:z.profile,sudoUser:U!=="root"?U:void 0,lan:z.lan}),ie=oo({hostname:t.hostname,user:U,publicKey:X,timezone:t.timezone,locale:t.locale,wifi:ne},re,{os:m}),ae=$p(t.out);wp(ae,{recursive:!0});let be=Object.keys(ie.files).filter((ke)=>vd(bd(ae,ke)));if(be.length>0&&!t.force)throw Error(`${be.join(", ")} already exist in ${ae}; pass --force to overwrite.`);for(let[ke,le]of Object.entries(ie.files))Cp(bd(ae,ke),le,{mode:384});i(`First boot for ${t.hostname}`),n(`Wrote ${Object.keys(ie.files).join(", ")} to ${ae}`),console.log(ie.instructions)}catch(m){Xa(m)}})}async function Rp(){let D=await De(),t=y(process.cwd(),D),m=new Ln(t.store),A=new Mn(m,new xe(t.store));return{controlPlane:t,store:m,service:A}}async function fs(D){let t=await Rp();try{await D(t)}catch(m){r(m instanceof Error?m.message:String(m)),process.exitCode=1}finally{t.controlPlane.store.close()}}var Gs=(D)=>Object.fromEntries(String(D??"").split(",").map((t)=>t.split("=")).filter((t)=>t[0]&&t[1])),Cd=(D)=>Object.fromEntries(Object.entries(Gs(D)).map(([t,m])=>[t,Number(m)]));function tc(D){D.command("pool:list","List capacity pools and reservations").option("--json","Print structured JSON").action(async(t)=>fs((m)=>{let A=m.store.listPools(m.controlPlane.project.id);if(t.json)console.log(JSON.stringify(A,null,2));else c(["Name","Purpose","Backend","Region / arch","Status","Capacity","Concurrency"],A.map((O)=>[O.name,O.purpose,O.backend,`${O.region??"any"} / ${O.architecture??"any"}`,O.status,JSON.stringify(O.capacity),String(O.concurrency)]))})),D.command("pool:create <name>","Create a capacity pool").option("--purpose <purpose>","application, build, worker, monitoring, or backup",{default:"application"}).option("--backend <backend>","server, ecs, or asg",{default:"server"}).option("--capacity <values>","cpu=4,memoryBytes=8589934592,diskBytes=...").option("--region <region>","Required region").option("--arch <architecture>","Required architecture").option("--labels <labels>","Pool key=value labels").option("--selector <labels>","Required server labels").option("--max <count>","Maximum workloads",{default:"10"}).option("--concurrency <count>","Build concurrency",{default:"1"}).action(async(t,m)=>fs((A)=>{let{purpose:O,backend:z}=m;if(!["application","build","worker","monitoring","backup"].includes(O)||!["server","ecs","asg"].includes(z))throw Error("Unsupported pool purpose or backend.");let U=A.store.createPool({organizationId:A.controlPlane.organization.id,projectId:A.controlPlane.project.id,name:t,purpose:O,backend:z,region:m.region,architecture:m.arch,labels:Gs(m.labels),requiredServerLabels:Gs(m.selector),toleratedTaints:[],capacity:{cpu:0,memoryBytes:0,diskBytes:0,gpu:0,...Cd(m.capacity)},maxWorkloads:Number(m.max),costWeight:1,concurrency:Number(m.concurrency),ephemeralWorkspaces:!0,allowProductionSecrets:!1,status:"active"});n(`Created ${U.name} (${U.id}).`)})),D.command("pool:add-server <pool> <server>","Attach an enrolled server to a pool").action(async(t,m)=>fs((A)=>{let O=A.store.listPools(A.controlPlane.project.id).find((U)=>U.id===t||U.name===t),z=new xe(A.controlPlane.store).list(A.controlPlane.project.id).find((U)=>U.id===m||U.name===m);if(!O||!z)throw Error("Pool or server was not found.");A.store.addMember(O.id,z.id),n(`Attached ${z.name} to ${O.name}.`)})),D.command("placement:explain","Explain eligible and rejected placement targets").option("--purpose <purpose>","Workload purpose",{default:"application"}).option("--resources <values>","Requested resources").option("--region <region>","Required region").option("--arch <architecture>","Required architecture").option("--labels <labels>","Required pool labels").option("--json","Print structured JSON").action(async(t)=>fs((m)=>{let A=m.service.explain(m.controlPlane.project.id,{purpose:t.purpose,resources:Cd(t.resources),region:t.region,architecture:t.arch,labels:Gs(t.labels)});if(t.json)console.log(JSON.stringify(A,null,2));else c(["Pool","Server","Eligible","Available","Fit / spread / cost","Reasons"],A.map((O)=>[O.poolName,O.serverId??"provider-managed",O.eligible?"yes":"no",JSON.stringify(O.available),`${O.score.fit.toFixed(2)} / ${O.score.spread} / ${O.score.cost}`,O.reasons.join("; ")||"eligible"]))})),D.command("pool:drain <pool>","Move stateless placements and block stateful placements").action(async(t)=>fs((m)=>{let A=m.store.listPools(m.controlPlane.project.id).find((z)=>z.id===t||z.name===t);if(!A)throw Error("Pool was not found.");let O=m.service.drainPool(A.id);n(`Draining ${A.name}: moved ${O.moved.length}, blocked ${O.blocked.length} stateful placement(s).`)}))}async function Ip(){let D=await De(),t=y(process.cwd(),D),m=new Un(t.store),A=new Bn(m);return{controlPlane:t,store:m,service:A}}async function fo(D){let t=await Ip();try{await D(t)}catch(m){r(m instanceof Error?m.message:String(m)),process.exitCode=1}finally{t.controlPlane.store.close()}}var gs=(D,t)=>{let m=D.store.list(D.controlPlane.project.id).find((A)=>A.id===t||A.name===t);if(!m)throw Error("Regional topology was not found.");return m},Pp=(D)=>D.split(",").map((t,m)=>{let[A,O="aws"]=t.split(":");return{region:String(A),provider:O,role:m===0?"primary":"secondary"}}),Dp=(D)=>{let t=new Set(["s3","dynamodb","secrets"]),m=D.split(",").map((O)=>O.trim()),A=m.find((O)=>!t.has(O));if(A)throw Error(`Unsupported replication kind: ${A}`);return m};function nc(D){D.command("region:list","List regional topology, traffic, and replication health").option("--json","Print structured JSON").action(async(t)=>fo((m)=>{let A=m.store.list(m.controlPlane.project.id).map((O)=>({topology:O,targets:m.store.targets(O.id),channels:m.store.channels(O.id),route:m.store.route(O.id),executions:m.store.executions(O.id)}));if(t.json)console.log(JSON.stringify(A,null,2));else c(["Name","Hostname","Active","Status","Revision","Replication"],A.map((O)=>[O.topology.name,O.topology.hostname,O.topology.activeRegion,O.topology.status,O.topology.revision??"—",`${O.channels.filter((z)=>z.status==="in_sync").length}/${O.channels.length} in sync`]))})),D.command("region:create <name>","Create a persistent multi-region topology").option("--hostname <hostname>","Traffic hostname").option("--regions <regions>","Comma-separated region[:provider], primary first").option("--replicate <kinds>","s3,dynamodb,secrets",{default:"s3,dynamodb,secrets"}).option("--max-lag <seconds>","Maximum failover lag",{default:"30"}).option("--cdn","Enable CloudFront edge state").option("--waf","Enable WAF edge state").action(async(t,m)=>fo((A)=>{if(!m.hostname||!m.regions)throw Error("--hostname and --regions are required.");let O=A.service.create({organizationId:A.controlPlane.organization.id,projectId:A.controlPlane.project.id,name:t,hostname:m.hostname,regions:Pp(m.regions),trafficPolicy:"active_passive",dataPolicy:{replicate:Dp(String(m.replicate)),maxLagSeconds:Number(m.maxLag),retainOnDestroy:!0},dnsProvider:"route53",cdnEnabled:!!m.cdn,wafEnabled:!!m.waf});n(`Created ${O.name} (${O.id}); run region:rollout with an immutable manifest.`)})),D.command("region:plan <name> <operation>","Preview exact regional execution steps").option("--target <region>","Failover or failback region").action(async(t,m,A)=>fo((O)=>c(["Step"],O.service.plan(gs(O,t).id,m,A.target).map((z)=>[z])))),D.command("region:rollout <name> <revision>","Queue secondary-first regional stack rollout").option("--manifest <file>","Regional stack manifest JSON").action(async(t,m,A)=>fo(async(O)=>{let z=A.manifest?await Bun.file(A.manifest).json():{},U=O.service.enqueue({topologyId:gs(O,t).id,kind:"rollout",revision:m,manifest:z});n(`Regional rollout queued: ${U.operation.id}`)})),D.command("region:failover <name> <region>","Queue health and RPO-gated failover").action(async(t,m)=>fo((A)=>{let O=A.service.enqueue({topologyId:gs(A,t).id,kind:"failover",targetRegion:m});n(`Failover queued: ${O.operation.id}`)})),D.command("region:failback <name> <region>","Queue health and RPO-gated failback").action(async(t,m)=>fo((A)=>{let O=A.service.enqueue({topologyId:gs(A,t).id,kind:"failback",targetRegion:m});n(`Failback queued: ${O.operation.id}`)})),D.command("region:destroy <name>","Drain traffic and delete regional stacks while retaining data").option("--confirm <name>","Exact topology name").action(async(t,m)=>fo((A)=>{let O=A.service.enqueue({topologyId:gs(A,t).id,kind:"destroy",confirmation:m.confirm});n(`Regional teardown queued: ${O.operation.id}; replicated data remains retained.`)}))}var hs="0.16.57";async function Ep(){let D=await De(),t=y(process.cwd(),D),m=new jn(t.store),A=new Vn(m),O=["releases","artifacts","operations","logs","previews","snapshots","orphaned_resources"].map((z)=>new zn(z,t.store,t.project.id,t.organization.id));return{controlPlane:t,store:m,service:A,cleanup:O}}async function ki(D){let t=await Ep();try{await D(t)}catch(m){r(m instanceof Error?m.message:String(m)),process.exitCode=1}finally{t.controlPlane.store.close()}}function rc(D){D.command("maintenance:list","List updates, campaigns, cleanup plans, and DR drills").option("--json","Print structured JSON").action(async(t)=>ki((m)=>{let A={manifests:m.store.manifests(m.controlPlane.organization.id),windows:m.store.windows(m.controlPlane.project.id),campaigns:m.store.campaigns(m.controlPlane.project.id),cleanups:m.store.cleanups(m.controlPlane.project.id),drills:m.store.drills(m.controlPlane.project.id)},O=[...A.manifests.map((z)=>["update",z.version,z.compatibility.compatible?"compatible":"blocked",z.compatibility.reasons.join("; ")||z.channel]),...A.campaigns.map((z)=>["upgrade",z.id,z.status,z.currentStage??z.fromVersion]),...A.cleanups.map((z)=>["cleanup",z.kind,z.status,`${z.candidates.length} items / ${z.estimatedBytes} bytes`]),...A.drills.map((z)=>["DR drill",z.scenario,z.status,z.isolatedTarget])];if(t.json)console.log(JSON.stringify(A,null,2));else c(["Area","Name / version","Status","Detail"],O)})),D.command("maintenance:key:add <name> <pem>","Trust an Ed25519 update signing key").action(async(t,m)=>ki(async(A)=>{let O=A.store.addTrustedKey({organizationId:A.controlPlane.organization.id,name:t,publicKeyPem:await Bun.file(m).text()});n(`Trusted ${O.name}: ${O.fingerprint}`)})),D.command("maintenance:manifest <document> <signature> <key>","Verify and import a signed update manifest").action(async(t,m,A)=>ki(async(O)=>{let z=await Bun.file(t).json(),U=(await Bun.file(m).text()).trim(),Y=O.store.importManifest({organizationId:O.controlPlane.organization.id,keyId:A,document:z,signature:U,current:{schemaVersion:O.controlPlane.store.health().schemaVersion,currentVersion:hs,platform:process.platform,architecture:process.arch}});n(`Verified ${Y.version}; ${Y.compatibility.compatible?"compatible":"blocked: "+Y.compatibility.reasons.join("; ")}`)})),D.command("maintenance:window <name> <schedule>","Create an approved maintenance window").option("--timezone <timezone>","IANA timezone",{default:"UTC"}).option("--minutes <minutes>","Duration",{default:"60"}).action(async(t,m,A)=>ki((O)=>{let z=O.store.createWindow({projectId:O.controlPlane.project.id,name:t,schedule:m,timezone:A.timezone,durationMinutes:Number(A.minutes),allowedOperations:["platform.upgrade"],requireApproval:!0});n(`Created ${z.name} (${z.id}).`)})),D.command("platform:upgrade <manifest> <backup>","Plan and queue a signed staged platform update").option("--strategy <strategy>","canary or rolling",{default:"canary"}).option("--batch <count>","Rolling batch size",{default:"1"}).action(async(t,m,A)=>ki((O)=>{let z=new xe(O.controlPlane.store).list(O.controlPlane.project.id).filter((X)=>X.status==="ready").map((X)=>({serverId:X.id,target:X.name,previousVersion:X.bootstrapVersion??hs}));if(!z.length)z.push({target:"control-plane",previousVersion:hs});let U=O.store.createCampaign({projectId:O.controlPlane.project.id,manifestId:t,fromVersion:hs,strategy:A.strategy==="rolling"?"rolling":"canary",batchSize:Number(A.batch),healthGate:{kind:"platform"},backupId:m,targets:z}),Y=O.service.enqueueCampaign(U.id);n(`Staged upgrade queued: ${Y.operation.id}`)})),D.command("cleanup:preview <kind>","Discover a bounded cleanup candidate set without deleting").option("--older-than <days>","Minimum age",{default:"30"}).action(async(t,m)=>ki(async(A)=>{let O=await A.service.previewCleanup({projectId:A.controlPlane.project.id,kind:t,criteria:{olderThanDays:Number(m.olderThan)}},A.cleanup);c(["ID","Candidate","Bytes"],O.candidates.map((z)=>[z.id,z.label,String(z.bytes)])),e(`Apply with: cloud cleanup:apply ${O.id} --confirm "DELETE ${O.candidates.length} ${O.kind}"`)})),D.command("cleanup:apply <plan>","Apply an unchanged cleanup preview").option("--confirm <text>","Exact preview confirmation").action(async(t,m)=>ki((A)=>{let O=A.service.enqueueCleanup(t,String(m.confirm??""));n(`Cleanup queued: ${O.operation.id}`)})),D.command("dr:plan <scenario> <target>","Plan an isolated disaster-recovery drill").option("--rpo <minutes>","RPO objective",{default:"60"}).option("--rto <minutes>","RTO objective",{default:"30"}).option("--recovery-point <id>","Recovery point").option("--topology <id>","Regional topology").action(async(t,m,A)=>ki((O)=>{let z=O.store.createDrill({projectId:O.controlPlane.project.id,scenario:t,isolatedTarget:m,expectedRpoMinutes:Number(A.rpo),expectedRtoMinutes:Number(A.rto),recoveryPointId:A.recoveryPoint,topologyId:A.topology});n(`Planned isolated drill ${z.id}.`)})),D.command("dr:run <drill>","Queue an isolated disaster-recovery drill").action(async(t)=>ki((m)=>{let A=m.service.enqueueDrill(t);n(`DR drill queued: ${A.operation.id}`)}))}async function ic(){try{return(await De()).project.region||process.env.AWS_REGION||"us-east-1"}catch{return process.env.AWS_REGION||"us-east-1"}}function oc(D){D.command("function:list","List all Lambda functions").option("--region <region>","AWS region").action(async(t)=>{i("Lambda Functions");let m=t?.region||await ic(),A=new P(m);try{let{Functions:O=[]}=await A.listFunctions({MaxItems:50});if(!O.length){e("No functions found");return}c(["Name","Runtime","Memory","Timeout","Last Modified"],O.map((z)=>[z.FunctionName??"-",z.Runtime??"-",z.MemorySize?`${z.MemorySize} MB`:"-",z.Timeout?`${z.Timeout}s`:"-",z.LastModified??"-"]))}catch(O){r(`Failed to list functions: ${O.message}`),process.exitCode=1}}),D.command("function:invoke <name>","Invoke a Lambda function").option("--payload <json>","Event payload as JSON",{default:"{}"}).option("--async","Fire-and-forget (Event invocation)").option("--region <region>","AWS region").action(async(t,m)=>{i(`Invoking ${t}`);let A=m?.region||await ic(),O=new P(A),z=new s("Invoking function...");z.start();try{let U=await O.invoke({FunctionName:t,InvocationType:m?.async?"Event":"RequestResponse",Payload:m?.payload||"{}",LogType:m?.async?"None":"Tail"});if(U.FunctionError){if(z.fail(`Function returned an error (${U.FunctionError})`),U.Payload)e(U.Payload);process.exitCode=1;return}if(z.succeed(`Invoked (status ${U.StatusCode})`),U.Payload)e(`
 Response:`),e(U.Payload);if(U.LogResult)e(`
 Logs:`),e(Buffer.from(U.LogResult,"base64").toString("utf-8"))}catch(U){z.fail(`Invocation failed: ${U.message}`),process.exitCode=1}}),D.command("function:logs <name>","View recent function logs").option("--tail","Continuously stream new log events").option("--filter <pattern>","CloudWatch filter pattern").option("--since <minutes>","Look back this many minutes",{default:"15"}).option("--region <region>","AWS region").action(async(t,m)=>{i(`Logs for ${t}`);let A=m?.region||await ic(),O=new se(A),z=t.startsWith("/aws/lambda/")?t:`/aws/lambda/${t}`,U=Number(m?.since??15),Y=(X)=>{for(let ne of X){let re=ne.timestamp?new Date(ne.timestamp).toISOString():"";e(`${re}  ${(ne.message??"").trimEnd()}`)}};try{let X=Date.now()-U*60000,{events:ne=[]}=await O.filterLogEvents({logGroupName:z,startTime:X,filterPattern:m?.filter,limit:200});if(Y(ne),ne.length)X=(ne[ne.length-1].timestamp??X)+1;if(m?.tail){e(`
 (streaming — Ctrl+C to stop)`);for(;;){await new Promise((ie)=>setTimeout(ie,3000));let{events:re=[]}=await O.filterLogEvents({logGroupName:z,startTime:X,filterPattern:m?.filter,limit:200});if(re.length)Y(re),X=(re[re.length-1].timestamp??X)+1}}}catch(X){r(`Failed to read logs: ${X.message}`),process.exitCode=1}})}async function $d(D){let t=Bun.spawn(["docker",...D],{stdin:"inherit",stdout:"inherit",stderr:"pipe"}),[m,A]=await Promise.all([t.exited,new Response(t.stderr).text()]);return{ok:m===0,exitCode:m,command:["docker",...D].join(" "),stderr:A.trim()}}function sc(D){D.command("container:build","Build a Docker image").option("--tag <tag>","Image tag",{default:"latest"}).option("--file <dockerfile>","Dockerfile",{default:"Dockerfile"}).option("--dry-run","Print the exact command").option("--json","Print result JSON").action(async(t)=>{let m=["build","--file",t.file??"Dockerfile","--tag",t.tag??"latest","."];if(t.dryRun){console.log(`docker ${m.join(" ")}`);return}let A=await $d(m);if(t.json)console.log(JSON.stringify(A));if(!A.ok)r(A.stderr||`docker exited ${A.exitCode}`),process.exitCode=A.exitCode;else n(`Built ${t.tag??"latest"}.`)}),D.command("container:push","Push an already-tagged image").option("--image <image>","Full registry image reference").option("--dry-run","Print command").option("--json","Print JSON").action(async(t)=>{if(!t.image){r("--image with a full registry reference is required; credentials must come from docker credential helpers."),process.exitCode=2;return}if(t.dryRun){console.log(`docker push ${t.image}`);return}let m=await $d(["push",t.image]);if(t.json)console.log(JSON.stringify(m));if(!m.ok)r(m.stderr),process.exitCode=m.exitCode;else n(`Pushed ${t.image}.`)}),D.command("container:deploy","Deploy a container image").action(async()=>Rn("container:deploy",{message:"Direct ECS mutation is not registered as a shared release driver.",nextAction:"Import the image as an application and use the immutable release deployment workflow."}))}function ac(D){D.command("domain:list","List all domains").option("--provider <provider>","DNS provider: porkbun, godaddy, cloudflare, or route53").action(async(t)=>{i("Domains");try{let m=zr(t?.provider),A=fn(t?.provider)?.provider||"unknown",O=new s(`Fetching domains from ${A}...`);O.start();let z=await m.listDomains();if(O.succeed(`Found ${z.length} domain(s)`),z.length===0){e("No domains found in this provider");return}let U=z.map((Y)=>[Y,"Active","-",A.charAt(0).toUpperCase()+A.slice(1)]);c(["Domain","Status","SSL","Provider"],U)}catch(m){r(`Failed to list domains: ${m instanceof Error?m.message:String(m)}`)}}),D.command("domain:add <domain>","Add a new domain").option("--provider <provider>","DNS provider: porkbun, godaddy, cloudflare, or route53").action(async(t,m)=>{i(`Adding Domain: ${t}`);try{let A=zr(m?.provider),O=fn(m?.provider)?.provider||"unknown",z=new s(`Checking if ${O} can manage ${t}...`);if(z.start(),await A.canManageDomain(t))z.succeed(`Domain ${t} is already available in ${O}`),e(`
@@ -400,7 +400,7 @@ ${X.instanceId}:`),e(X.output?.trimEnd()||"(no output)")}catch(A){r(`History loo
 `),{runComputeRecipe:Y}=await import("./chunk-pexjxc5g.js"),X=await Y({driver:_({config:O}),slug:O.project.slug,environment:z,logger:f},{name:t,script:U,user:A?.user});for(let ne of X.perInstance||[])e(`
 ${ne.instanceId}:`),e(ne.output?.trimEnd()||"(no output)");if(!X.success)process.exitCode=1}catch(O){r(`Recipe failed: ${O.message}`),process.exitCode=1}}),D.command("db:restore-backup [from]","Restore the app database from an on-box ts-backups dump (latest, or a given file)").option("--env <environment>","Environment (production, staging, development)").action(async(t,m)=>{i("Database Restore");try{let A=await De(),O=m?.env||"production",{restoreDatabaseBackup:z}=await import("./chunk-pexjxc5g.js"),U=await z({driver:_({config:A}),slug:A.project.slug,environment:O,logger:f},{database:w(A),from:t});for(let Y of U.perInstance||[])e(`  ${Y.instanceId}: ${Y.output?.trim()||Y.status}`);if(!U.success)r(`Restore failed: ${U.error||"unknown error"}`),process.exitCode=1}catch(A){r(`Restore failed: ${A.message}`),process.exitCode=1}}),D.command("quick-deploy","Generate a push-to-deploy CI pipeline for your git provider (Forge Quick Deploy)").option("--env <environment>","Environment to deploy on push",{default:"production"}).option("--provider <provider>","CI provider (github, gitlab, bitbucket); defaults to the origin remote").option("--site <site>","Deploy only this configured site").option("--skip-dns-verification","Generate a deploy that skips DNS verification and record creation").option("--ssh-key-secret <name>","CI secret/variable containing the Hetzner deployment SSH private key",{default:"SSH_PRIVATE_KEY"}).option("--force","Overwrite an existing pipeline file").action(async(t)=>{i("Quick Deploy (push-to-deploy)");try{let m=await De(),{buildQuickDeployCi:A,inferQuickDeployProvider:O}=await import("./chunk-tbp1gf1p.js"),z=t?.provider?.toLowerCase();if(z&&!["github","gitlab","bitbucket"].includes(z))throw Error(`Unsupported CI provider '${t?.provider}'. Use github, gitlab, or bitbucket.`);let U=z;if(!U)try{let X=cl("git remote get-url origin",{stdio:["ignore","pipe","ignore"]}).toString().trim();U=O(X)}catch{}let Y=A(m,t?.env||"production",{provider:U,site:t?.site,skipDnsVerification:t?.skipDnsVerification,setup:wn("pantry.lock")?"pantry":"bun",sshPrivateKeySecret:t?.sshKeySecret});if(!Y){a("Could not resolve a GitHub, GitLab, or Bitbucket provider from --provider, the origin remote, or a configured site repository."),process.exitCode=1;return}if(wn(Y.path)&&!t?.force){a(`${Y.path} already exists — re-run with --force to overwrite.`);return}iu(Kf(Y.path),{recursive:!0}),Gf(Y.path,Y.content),n(`Wrote ${Y.path} (${Y.provider}, deploys on push to '${Y.branch}').`),e("Next: commit it and add your provider credentials as CI secrets/variables.")}catch(m){r(`Quick deploy setup failed: ${m.message}`),process.exitCode=1}}),D.command("down","Put the serverless app into maintenance mode (503)").option("--env <environment>","Environment (production, staging, development)").option("--secret <secret>","Bypass secret (send as x-maintenance-bypass header)").action(async(t)=>{try{let m=await De(),A=t?.env||"production",{setMaintenance:O}=await import("./chunk-1cccv502.js");await O(m,A,!0,t?.secret)}catch(m){r(`Failed to enable maintenance mode: ${m.message}`),process.exitCode=1}}),D.command("up","Bring the serverless app out of maintenance mode").option("--env <environment>","Environment (production, staging, development)").action(async(t)=>{try{let m=await De(),A=t?.env||"production",{setMaintenance:O}=await import("./chunk-1cccv502.js");await O(m,A,!1)}catch(m){r(`Failed to disable maintenance mode: ${m.message}`),process.exitCode=1}}),D.command("command <cmd>","Run a command on the serverless CLI function (e.g. migrations)").option("--env <environment>","Environment (production, staging, development)").action(async(t,m)=>{try{let A=await De(),O=m?.env||"production",{runAndRecordCommand:z}=await import("./chunk-1cccv502.js"),{id:U,output:Y}=await z(A,O,t);if(e(Y),U>0)e(`
 (recorded as #${U} — re-run with \`cloud command:again ${U}\`)`)}catch(A){r(`Command failed: ${A.message}`),process.exitCode=1}}),D.command("command:history","List recorded CLI-function command invocations").option("--env <environment>","Environment (production, staging, development)").option("--limit <n>","Show at most this many (most recent)",{default:"20"}).action(async(t)=>{try{let m=await De(),A=t?.env||"production",{listCommandHistory:O}=await import("./chunk-1cccv502.js"),z=await O(m,A);if(!z.length){e("No command history yet.");return}let U=Number(t?.limit??20);i(`Command history — ${m.project.slug} (${A})`),c(["#","When","Status","Command"],z.slice(-U).reverse().map((Y)=>[String(Y.id),Y.timestamp,Y.status,Y.command]))}catch(m){r(`Failed to read history: ${m.message}`),process.exitCode=1}}),D.command("command:again [id]","Re-run a recorded command (defaults to the most recent)").option("--env <environment>","Environment (production, staging, development)").action(async(t,m)=>{try{let A=await De(),O=m?.env||"production",{getCommandRecord:z,runAndRecordCommand:U}=await import("./chunk-1cccv502.js"),Y=await z(A,O,t?Number(t):void 0);if(!Y){r(t?`No command #${t} in history.`:"No command history to re-run."),process.exitCode=1;return}e(`Re-running #${Y.id}: ${Y.command}`);let X=await U(A,O,Y.command);if(e(X.output),X.id>0)e(`
-(recorded as #${X.id})`)}catch(A){r(`Command failed: ${A.message}`),process.exitCode=1}}),D.command("serverless:db-shell <sql>","Run a SQL statement against a private serverless database (via the CLI function)").option("--env <environment>","Environment (production, staging, development)").action(async(t,m)=>{try{let A=await De(),O=m?.env||"production",{runDbQuery:z}=await import("./chunk-1cccv502.js"),U=await z(A,O,t);e(U)}catch(A){r(`Query failed: ${A.message}`),process.exitCode=1}}),D.command("serverless:db-scale <min> <max>","Rescale the serverless Aurora cluster (min/max ACUs)").option("--env <environment>","Environment (production, staging, development)").action(async(t,m,A)=>{i("Scaling serverless database");try{let O=await De(),z=A?.env||"production",U=Number(t),Y=Number(m);if(!(U>0)||!(Y>=U)){r("Provide valid capacities: min > 0 and max >= min (e.g. `serverless:db-scale 0.5 8`)."),process.exitCode=1;return}let{scaleServerlessDatabase:X}=await import("./chunk-1cccv502.js");await X(O,z,U,Y)}catch(O){r(`Scale failed: ${O.message}`),process.exitCode=1}}),D.command("serverless:db-restore","Restore the serverless Aurora cluster to a point in time (as a new cluster)").option("--env <environment>","Environment (production, staging, development)").option("--to <timestamp>","Restore to this ISO-8601 time (UTC)").option("--latest","Restore to the latest restorable time").option("--target <id>","New cluster identifier (defaults to <cluster>-restore-<stamp>)").action(async(t)=>{i("Restoring serverless database");try{let m=await De(),A=t?.env||"production",O;if(t?.to){if(O=new Date(t.to),Number.isNaN(O.getTime())){r(`Invalid --to timestamp: ${t.to} (use ISO-8601, e.g. 2026-06-18T10:00:00Z).`),process.exitCode=1;return}}let{restoreServerlessDatabase:z}=await import("./chunk-1cccv502.js");await z(m,A,{toTime:O,latest:t?.latest,target:t?.target})}catch(m){r(`Restore failed: ${m.message}`),process.exitCode=1}}),D.command("serverless:info","Show an operational summary of a deployed serverless app").option("--env <environment>","Environment (production, staging, development)").action(async(t)=>{try{let m=await De(),A=t?.env||"production",{serverlessInfo:O}=await import("./chunk-1cccv502.js"),z=await O(m,A);if(i(`${z.slug} (${z.environment})`),e(`Stack:    ${z.stackStatus}`),e(`Region:   ${z.region}`),z.endpoint)e(`URL:      ${z.endpoint}`);if(z.assetUrl)e(`Assets:   ${z.assetUrl}`);if(e(`Scheduler:${z.scheduler==="off"?" off":` ${z.scheduler}`}`),e(`Queues:   ${z.queues.length?z.queues.join(", "):"none"}`),e(`Warming:  ${z.provisionedConcurrency>0?`provisioned concurrency ×${z.provisionedConcurrency}`:"none / ping-warm"}`),z.lastRelease)e(`Release:  ${z.lastRelease.sha.slice(0,12)} @ ${z.lastRelease.timestamp}`);c(["Function","Version","Provisioned"],z.functions.map((U)=>[U.name,U.version,U.provisioned?`${U.provisioned.status} ${U.provisioned.allocated}/${U.provisioned.requested}`:"—"]))}catch(m){r(`Failed to read info: ${m.message}`),process.exitCode=1}}),D.command("dashboard:build","Build the management dashboard with live data baked in").option("--env <environment>","Environment (production, staging, development)").option("--ui <dir>","UI directory (default ./ui)",{default:"ui"}).action(async(t)=>{i("Building management dashboard (live data)");try{let{existsSync:m}=await import("node:fs"),A=t?.ui||"ui";if(!m(`${A}/package.json`)){r(`No UI project at ${A}/ (expected ${A}/package.json). Pass --ui <dir>.`),process.exitCode=1;return}let O=await De(),z=t?.env||"production";u("Gathering live data from AWS");let U=null;if(O.environments?.[z]?.app){let{resolveDashboardData:re}=await import("./chunk-et6hzqpx.js"),ie=await re(O,z).catch((ae)=>(a(`Serverless data unavailable (${ae.message}) — that view uses sample data.`),null));if(ie)U={...U??{},...ie}}if(O.infrastructure?.compute){let{resolveServerDashboardData:re}=await import("./chunk-akv3qkam.js"),ie=await re(O,z).catch(()=>null);if(ie){if(ie._serverReachable===!1)a("Server box not reachable over SSM — server view uses config + sample data.");U={...U??{},...ie}}}u("Building dashboard");let{encodeDashboardPayload:Y}=await import("./chunk-d2fq60kd.js"),{execSync:X}=await import("node:child_process"),{rmSync:ne}=await import("node:fs");for(let re of[".stx/ssg-cache",".stx/cache"])ne(`${A}/${re}`,{recursive:!0,force:!0});X("bun run build",{cwd:A,stdio:"inherit",env:{...process.env,...U?{TSCLOUD_DASHBOARD_DATA:Y(U)}:{}}}),n(`Dashboard built → ${A}/dist${U?" (live data)":" (sample data)"}`)}catch(m){r(`Dashboard build failed: ${m.message}`),process.exitCode=1}}),D.command("serverless:build-php-layer","Build + publish the ts-cloud PHP runtime layer (requires Docker)").option("--arch <architecture>","x86_64 or arm64",{default:"x86_64"}).option("--php <version>","PHP version",{default:"8.3"}).option("--name <name>","Layer name",{default:"tscloud-php"}).option("--bucket <bucket>","S3 bucket to stage the layer zip (defaults to {slug}-layers)").option("--region <region>","AWS region").action(async(t)=>{i("Building PHP runtime layer");try{let m=await De().catch(()=>null),A=t?.region||m?.project.region||"us-east-1",O=t?.arch||"x86_64",z=t?.php||"8.3",U=`${t?.name||"tscloud-php"}-${z.replace(".","")}-${O}`,Y=t?.bucket||`${m?.project.slug||"tscloud"}-layers`,{buildPhpRuntimeLayerZip:X}=await import("./chunk-sbate1ky.js"),{S3Client:ne}=await import("./chunk-5s91mpty.js"),{LambdaClient:re}=await import("./chunk-bzpeqh5z.js"),ie=X({architecture:O,phpVersion:z,onStep:($e)=>u($e)});e(`Layer: ${ie.fileCount} files, ${(ie.zip.length/1024/1024).toFixed(1)} MB`);let ae=new ne(A);if(!await ae.bucketExists(Y))u(`Creating layer bucket ${Y}`),await ae.createBucket(Y);let be=`layers/${U}.zip`;u("Uploading layer zip"),await ae.putObject({bucket:Y,key:be,body:ie.zip,contentType:"application/zip"}),u("Publishing layer version");let le=await new re(A).publishLayerVersion({LayerName:U,Description:`ts-cloud PHP ${z} runtime (${O})`,Content:{S3Bucket:Y,S3Key:be},CompatibleRuntimes:["provided.al2023"],CompatibleArchitectures:[O]});Ee(["PHP runtime layer published","",`ARN: ${le.LayerVersionArn}`,"","Reference it in your config:",`  app: { kind: 'php', layers: ['${le.LayerVersionArn}'] }`,"or set TSCLOUD_PHP_LAYER_ARN before deploying."].join(`
+(recorded as #${X.id})`)}catch(A){r(`Command failed: ${A.message}`),process.exitCode=1}}),D.command("serverless:db-shell <sql>","Run a SQL statement against a private serverless database (via the CLI function)").option("--env <environment>","Environment (production, staging, development)").action(async(t,m)=>{try{let A=await De(),O=m?.env||"production",{runDbQuery:z}=await import("./chunk-1cccv502.js"),U=await z(A,O,t);e(U)}catch(A){r(`Query failed: ${A.message}`),process.exitCode=1}}),D.command("serverless:db-scale <min> <max>","Rescale the serverless Aurora cluster (min/max ACUs)").option("--env <environment>","Environment (production, staging, development)").action(async(t,m,A)=>{i("Scaling serverless database");try{let O=await De(),z=A?.env||"production",U=Number(t),Y=Number(m);if(!(U>0)||!(Y>=U)){r("Provide valid capacities: min > 0 and max >= min (e.g. `serverless:db-scale 0.5 8`)."),process.exitCode=1;return}let{scaleServerlessDatabase:X}=await import("./chunk-1cccv502.js");await X(O,z,U,Y)}catch(O){r(`Scale failed: ${O.message}`),process.exitCode=1}}),D.command("serverless:db-restore","Restore the serverless Aurora cluster to a point in time (as a new cluster)").option("--env <environment>","Environment (production, staging, development)").option("--to <timestamp>","Restore to this ISO-8601 time (UTC)").option("--latest","Restore to the latest restorable time").option("--target <id>","New cluster identifier (defaults to <cluster>-restore-<stamp>)").action(async(t)=>{i("Restoring serverless database");try{let m=await De(),A=t?.env||"production",O;if(t?.to){if(O=new Date(t.to),Number.isNaN(O.getTime())){r(`Invalid --to timestamp: ${t.to} (use ISO-8601, e.g. 2026-06-18T10:00:00Z).`),process.exitCode=1;return}}let{restoreServerlessDatabase:z}=await import("./chunk-1cccv502.js");await z(m,A,{toTime:O,latest:t?.latest,target:t?.target})}catch(m){r(`Restore failed: ${m.message}`),process.exitCode=1}}),D.command("serverless:info","Show an operational summary of a deployed serverless app").option("--env <environment>","Environment (production, staging, development)").action(async(t)=>{try{let m=await De(),A=t?.env||"production",{serverlessInfo:O}=await import("./chunk-1cccv502.js"),z=await O(m,A);if(i(`${z.slug} (${z.environment})`),e(`Stack:    ${z.stackStatus}`),e(`Region:   ${z.region}`),z.endpoint)e(`URL:      ${z.endpoint}`);if(z.assetUrl)e(`Assets:   ${z.assetUrl}`);if(e(`Scheduler:${z.scheduler==="off"?" off":` ${z.scheduler}`}`),e(`Queues:   ${z.queues.length?z.queues.join(", "):"none"}`),e(`Warming:  ${z.provisionedConcurrency>0?`provisioned concurrency ×${z.provisionedConcurrency}`:"none / ping-warm"}`),z.lastRelease)e(`Release:  ${z.lastRelease.sha.slice(0,12)} @ ${z.lastRelease.timestamp}`);c(["Function","Version","Provisioned"],z.functions.map((U)=>[U.name,U.version,U.provisioned?`${U.provisioned.status} ${U.provisioned.allocated}/${U.provisioned.requested}`:"—"]))}catch(m){r(`Failed to read info: ${m.message}`),process.exitCode=1}}),D.command("dashboard:build","Build the management dashboard with live data baked in").option("--env <environment>","Environment (production, staging, development)").option("--ui <dir>","UI directory (default ./ui)",{default:"ui"}).action(async(t)=>{i("Building management dashboard (live data)");try{let{existsSync:m}=await import("node:fs"),A=t?.ui||"ui";if(!m(`${A}/package.json`)){r(`No UI project at ${A}/ (expected ${A}/package.json). Pass --ui <dir>.`),process.exitCode=1;return}let O=await De(),z=t?.env||"production";u("Gathering live data from AWS");let U=null;if(O.environments?.[z]?.app){let{resolveDashboardData:re}=await import("./chunk-et6hzqpx.js"),ie=await re(O,z).catch((ae)=>(a(`Serverless data unavailable (${ae.message}) — that view uses sample data.`),null));if(ie)U={...U??{},...ie}}if(O.infrastructure?.compute){let{resolveServerDashboardData:re}=await import("./chunk-gx5wqrgh.js"),ie=await re(O,z).catch(()=>null);if(ie){if(ie._serverReachable===!1)a("Server box not reachable over SSM — server view uses config + sample data.");U={...U??{},...ie}}}u("Building dashboard");let{encodeDashboardPayload:Y}=await import("./chunk-d2fq60kd.js"),{execSync:X}=await import("node:child_process"),{rmSync:ne}=await import("node:fs");for(let re of[".stx/ssg-cache",".stx/cache"])ne(`${A}/${re}`,{recursive:!0,force:!0});X("bun run build",{cwd:A,stdio:"inherit",env:{...process.env,...U?{TSCLOUD_DASHBOARD_DATA:Y(U)}:{}}}),n(`Dashboard built → ${A}/dist${U?" (live data)":" (sample data)"}`)}catch(m){r(`Dashboard build failed: ${m.message}`),process.exitCode=1}}),D.command("serverless:build-php-layer","Build + publish the ts-cloud PHP runtime layer (requires Docker)").option("--arch <architecture>","x86_64 or arm64",{default:"x86_64"}).option("--php <version>","PHP version",{default:"8.3"}).option("--name <name>","Layer name",{default:"tscloud-php"}).option("--bucket <bucket>","S3 bucket to stage the layer zip (defaults to {slug}-layers)").option("--region <region>","AWS region").action(async(t)=>{i("Building PHP runtime layer");try{let m=await De().catch(()=>null),A=t?.region||m?.project.region||"us-east-1",O=t?.arch||"x86_64",z=t?.php||"8.3",U=`${t?.name||"tscloud-php"}-${z.replace(".","")}-${O}`,Y=t?.bucket||`${m?.project.slug||"tscloud"}-layers`,{buildPhpRuntimeLayerZip:X}=await import("./chunk-sbate1ky.js"),{S3Client:ne}=await import("./chunk-5s91mpty.js"),{LambdaClient:re}=await import("./chunk-bzpeqh5z.js"),ie=X({architecture:O,phpVersion:z,onStep:($e)=>u($e)});e(`Layer: ${ie.fileCount} files, ${(ie.zip.length/1024/1024).toFixed(1)} MB`);let ae=new ne(A);if(!await ae.bucketExists(Y))u(`Creating layer bucket ${Y}`),await ae.createBucket(Y);let be=`layers/${U}.zip`;u("Uploading layer zip"),await ae.putObject({bucket:Y,key:be,body:ie.zip,contentType:"application/zip"}),u("Publishing layer version");let le=await new re(A).publishLayerVersion({LayerName:U,Description:`ts-cloud PHP ${z} runtime (${O})`,Content:{S3Bucket:Y,S3Key:be},CompatibleRuntimes:["provided.al2023"],CompatibleArchitectures:[O]});Ee(["PHP runtime layer published","",`ARN: ${le.LayerVersionArn}`,"","Reference it in your config:",`  app: { kind: 'php', layers: ['${le.LayerVersionArn}'] }`,"or set TSCLOUD_PHP_LAYER_ARN before deploying."].join(`
 `),"green")}catch(m){r(`Layer build failed: ${m.message}`),process.exitCode=1}}),D.command("serverless:build-node-layer","Build + publish a ts-cloud Node custom runtime layer (any version, incl. 24)").option("--arch <architecture>","x86_64 or arm64",{default:"x86_64"}).option("--node <version>","Node version (e.g. 24)",{default:"24"}).option("--name <name>","Layer name",{default:"tscloud-node"}).option("--bucket <bucket>","S3 bucket to stage the layer zip (defaults to {slug}-layers)").option("--region <region>","AWS region").action(async(t)=>{i("Building Node runtime layer");try{let m=await De().catch(()=>null),A=t?.region||m?.project.region||"us-east-1",O=t?.arch||"x86_64",z=t?.node||"24",{buildNodeRuntimeLayerZip:U}=await import("./chunk-sbate1ky.js"),{S3Client:Y}=await import("./chunk-5s91mpty.js"),{LambdaClient:X}=await import("./chunk-bzpeqh5z.js"),ne=U({architecture:O,version:z,onStep:($e)=>u($e)}),re=`${t?.name||"tscloud-node"}-${ne.version.split(".")[0]}-${O}`,ie=t?.bucket||`${m?.project.slug||"tscloud"}-layers`;e(`Layer: Node ${ne.version}, ${(ne.zip.length/1024/1024).toFixed(1)} MB`);let ae=new Y(A);if(!await ae.bucketExists(ie))u(`Creating layer bucket ${ie}`),await ae.createBucket(ie);let be=`layers/${re}.zip`;u("Uploading layer zip"),await ae.putObject({bucket:ie,key:be,body:ne.zip,contentType:"application/zip"}),u("Publishing layer version");let le=await new X(A).publishLayerVersion({LayerName:re,Description:`ts-cloud Node ${ne.version} runtime (${O})`,Content:{S3Bucket:ie,S3Key:be},CompatibleRuntimes:["provided.al2023"],CompatibleArchitectures:[O]});Ee(["Node runtime layer published","",`ARN: ${le.LayerVersionArn}`,"","Reference it in your config:",`  app: { kind: 'node', runtimeVersion: '${ne.version.split(".")[0]}', layers: ['${le.LayerVersionArn}'] }`,"or set TSCLOUD_NODE_LAYER_ARN before deploying."].join(`
 `),"green")}catch(m){r(`Layer build failed: ${m.message}`),process.exitCode=1}}),D.command("serverless:build-bun-layer","Build + publish a ts-cloud Bun custom runtime layer").option("--arch <architecture>","x86_64 or arm64",{default:"x86_64"}).option("--bun <version>",'Bun version (e.g. 1.3.13, or "latest")',{default:"latest"}).option("--name <name>","Layer name",{default:"tscloud-bun"}).option("--bucket <bucket>","S3 bucket to stage the layer zip (defaults to {slug}-layers)").option("--region <region>","AWS region").action(async(t)=>{i("Building Bun runtime layer");try{let m=await De().catch(()=>null),A=t?.region||m?.project.region||"us-east-1",O=t?.arch||"x86_64",z=t?.bun||"latest",{buildBunRuntimeLayerZip:U}=await import("./chunk-sbate1ky.js"),{S3Client:Y}=await import("./chunk-5s91mpty.js"),{LambdaClient:X}=await import("./chunk-bzpeqh5z.js"),ne=U({architecture:O,version:z,onStep:($e)=>u($e)}),re=`${t?.name||"tscloud-bun"}-${ne.version.replace(/\./g,"")}-${O}`,ie=t?.bucket||`${m?.project.slug||"tscloud"}-layers`;e(`Layer: Bun ${ne.version}, ${(ne.zip.length/1024/1024).toFixed(1)} MB`);let ae=new Y(A);if(!await ae.bucketExists(ie))u(`Creating layer bucket ${ie}`),await ae.createBucket(ie);let be=`layers/${re}.zip`;u("Uploading layer zip"),await ae.putObject({bucket:ie,key:be,body:ne.zip,contentType:"application/zip"}),u("Publishing layer version");let le=await new X(A).publishLayerVersion({LayerName:re,Description:`ts-cloud Bun ${ne.version} runtime (${O})`,Content:{S3Bucket:ie,S3Key:be},CompatibleRuntimes:["provided.al2023"],CompatibleArchitectures:[O]});Ee(["Bun runtime layer published","",`ARN: ${le.LayerVersionArn}`,"","Reference it in your config:",`  app: { kind: 'bun', layers: ['${le.LayerVersionArn}'] }`,"or set TSCLOUD_BUN_LAYER_ARN before deploying."].join(`
 `),"green")}catch(m){r(`Layer build failed: ${m.message}`),process.exitCode=1}}),D.command("deploy:status","Check deployment status").option("--stack <name>","Stack name").option("--env <environment>","Environment").action(async(t)=>{i("Deployment Status");try{let m=await De(),A=t?.env||"production",O=t?.stack||T(m,A),z=m.project.region||"us-east-1";e(`Stack: ${O}`),e(`Region: ${z}`);let U=new s("Checking deployment status...");U.start();let X=await new v(z).describeStacks({stackName:O});if(X.Stacks.length===0){U.fail("Stack not found"),Dr("No deployment found for this environment");return}let ne=X.Stacks[0];if(U.succeed("Status retrieved"),e(`

package/dist/bin/dashboard-server.js

@@ -1 +1 @@
-import"./chunk-rqvrjp8g.js";import"./chunk-z6xnegpe.js";import"./chunk-dg8ceycc.js";import"./chunk-jxm62h8r.js";import{dr}from"./chunk-fw1j79zq.js";import"./chunk-0xfy78nc.js";import"./chunk-7cactd6c.js";import"./chunk-95djv2ja.js";import"./chunk-hkx5j0bn.js";import"./chunk-3hnczw70.js";import"./chunk-rbyrd9we.js";import"./chunk-28124w0n.js";import"./chunk-9t78j764.js";import"./chunk-n2jh5p5x.js";import"./chunk-nva480hg.js";import"./chunk-mdcv2vw1.js";import"./chunk-4crz28b9.js";import"./chunk-p23wfy3r.js";import"./chunk-sy4zws71.js";import"./chunk-k1kk78qg.js";import"./chunk-1q6wqzh1.js";import"./chunk-ek27709c.js";import"./chunk-jyvr7eh5.js";import"./chunk-cdseg15k.js";import"./chunk-gr1ra9nj.js";import"./chunk-3mhzd931.js";import"./chunk-jvbe549p.js";import n from"node:process";function r(o){let e=n.argv.indexOf(o);return e===-1?void 0:n.argv[e+1]}function t(o){return n.argv.includes(o)}async function i(){let o=await dr({host:r("--host")??"127.0.0.1",port:Number(r("--port")??7676),environment:r("--env"),box:t("--box"),verbose:t("--verbose")});console.log("ts-cloud Local Dashboard"),console.log(`Serving ${o.url}`),await new Promise((e)=>{let s=()=>{o.server.stop(!0),e()};n.once("SIGINT",s),n.once("SIGTERM",s)})}i();
+import"./chunk-rqvrjp8g.js";import"./chunk-z6xnegpe.js";import"./chunk-dg8ceycc.js";import"./chunk-jxm62h8r.js";import{dr}from"./chunk-mn3x457v.js";import"./chunk-0xfy78nc.js";import"./chunk-7cactd6c.js";import"./chunk-95djv2ja.js";import"./chunk-hkx5j0bn.js";import"./chunk-s59x3psv.js";import"./chunk-rbyrd9we.js";import"./chunk-28124w0n.js";import"./chunk-9t78j764.js";import"./chunk-n2jh5p5x.js";import"./chunk-nva480hg.js";import"./chunk-mdcv2vw1.js";import"./chunk-4crz28b9.js";import"./chunk-p23wfy3r.js";import"./chunk-sy4zws71.js";import"./chunk-k1kk78qg.js";import"./chunk-1q6wqzh1.js";import"./chunk-ek27709c.js";import"./chunk-jyvr7eh5.js";import"./chunk-cdseg15k.js";import"./chunk-gr1ra9nj.js";import"./chunk-3mhzd931.js";import"./chunk-jvbe549p.js";import n from"node:process";function r(o){let e=n.argv.indexOf(o);return e===-1?void 0:n.argv[e+1]}function t(o){return n.argv.includes(o)}async function i(){let o=await dr({host:r("--host")??"127.0.0.1",port:Number(r("--port")??7676),environment:r("--env"),box:t("--box"),verbose:t("--verbose")});console.log("ts-cloud Local Dashboard"),console.log(`Serving ${o.url}`),await new Promise((e)=>{let s=()=>{o.server.stop(!0),e()};n.once("SIGINT",s),n.once("SIGTERM",s)})}i();