@stacksjs/ts-cloud 0.16.72 → 0.16.74

package/dist/bin/chunk-1pj60edk.js

@@ -0,0 +1 @@
+import{bt}from"./chunk-tvd5w8xq.js";import"./chunk-9cj1fm00.js";export{bt as STSClient};

package/dist/bin/chunk-1qcztara.js

@@ -0,0 +1 @@
+import{Ci}from"./chunk-10z6s9nj.js";import"./chunk-swbb39hj.js";import"./chunk-jh4ajbt1.js";import"./chunk-6wvgwn9q.js";import"./chunk-c99xvba1.js";import"./chunk-rg6r03q3.js";import"./chunk-zph18vv6.js";import"./chunk-9cj1fm00.js";import"./chunk-gghy8mb4.js";import"./chunk-bgjvxdds.js";export{Ci as resolveDashboardData};

package/dist/bin/{chunk-s5gyhgw1.js → chunk-28a6yey5.js}

@@ -1 +1 @@
-import{Tm,Em,da,il,ua,pa,En,Ve,R,ma,ol,H,Fr,A,ou,ne,jr,ga,Jo,le,U,Xo,su,au,cu,lu,l,o,wm,Am,T,fa,ha,ya,Rm,Im,$e,ba,Bi,du,Pm,Dm,ze,Pt,Sa,sl,al,km,cl,ll,dl,Qo,va,ot,Yo,wn,Fi,An,He,uu,Zo,es,Ca,Ta,Ea,wa,Aa,Ra,Ae,j,pu,mu,ul,b,M,st,N,pl,Dt,ye,Xt,Nm,ml,Re,ts,Ge,Qt,ji,Ie,rs,Le,gu,Vi,Pe,De,ie,zi,X,Yt,kt,ke,t,Rn,xm,gl,Ia,_m,Om,$m,Lm,Pa,Mm,Um,Bm,Fm,jm,Vm,zm,Hm,Gm,qm,Wm,Km,fu,hu,yu,bu,Su,vu,Cu,Zt,fl,hl,Vr,Hi,Jm,yl,Xm,Qm,In,Ym,Zm,eg,tg,rg,ng,Tu,Eu,wu,Au,Ru,Gi,ig,Pn,Iu,bl,Pu,Da,be,Du,ku,Nt,ns,er,Nu,Sl,xu,_u,Ou,vl,Se,og,sg,ag,cg,$u,lg,Ne,dg,ug,pg,ka,Na,Lu,Cl,Tl,mg,gg,fg,hg,yg,Mu,xa,bg,Sg,vg,Cg,Tg,Uu,Bu,Eg,wg,Ag,Rg,Ig,Pg,Dg,Fu,kg,El,_a,Ng,xg,_g,Og,wl,Al,Rl,$g,Oa,ju,Vu,zu,Hu,$a,Gu,Lg,Mg,Ug,Bg,Fg,jg,Vg,qu,Wu,Ku,Ju,Il,zg,Hg,Gg,qg,Wg,Kg,Jg,Xg,Qg,Xu,Qu,Yu,Zu,Yg,Zg,Pl,ef,Dl,kl,Nl,xl,tf,rf,nf,of,at,qi,sf,af,cf,lf,df,uf,pf,mf,ep,gf,ff,_l,Ol,hf,yf,tp,bf,Sf,vf,Cf,Tf,Ef,wf,Af,Rf,If,Pf,Df,kf,Nf,xf,_f,Of,$f,Lf,Mf,Uf,La,rp,Ma,np,Ua,ip,Ba,op,Fa,sp,zr,ap,ja,cp,Wi,lp,Va,dp,za,up,$l,Bf,Ll,Ff,Ha,pp,Hr,mp,Ml,jf,Ga,gp,Ul,Vf,Bl,zf,Fl,Hf,qa,fp,jl,Gf,Vl,qf,zl,Wf,Hl,Kf,Wa,hp,Ka,yp,Gl,Jf,ql,Xf,Wl,Qf,Kl,Yf,Jl,Zf,Xl,eh,Ja,bp,Ql,th,Yl,rh,Zl,nh,ed,ih,td,oh,rd,sh,nd,id,od,sd,ad,ah,cd,ch,ld,lh,dd,dh,xt,ud,Sp,is,Xa,Dn,vp,Ki,tr,Qa,Ya,Cp,Tp,Za,pd,ec,md,uh,ph,tc,rc,nc,gd,Ji,fd,hd,os,ic,oc,yd,Ep,wp,Ap,mh,bd,Sd,gh,Rp,vd,Ip,Pp,Dp,fh,Cd,kn,sc,Td,hh,kp,ss,as,ac,Ed,yh,cc,Np,wd,bh,Ad,Sh,Rd,vh}from"./chunk-27t4ve22.js";import{lc,Y,dc,cs,xp,_t,_p,Op,Nn,$p,Lp,Mp,Up,Bp}from"./chunk-bgjvxdds.js";export{Va as ABTestManager,Ge as AI,xu as AWSAPIError,Ua as AWSConfigManager,xm as AWS_PSEUDO_PARAMETERS,at as AWS_REGIONS,rs as ApiGateway,Rn as Arn,ie as AssetHasher,Pe as Auth,La as BackupManager,ld as BatchProcessingManager,ja as BlueGreenManager,Zl as BounceComplaintHandler,Hl as BuildOptimizationManager,He as CDN,rc as CHAIN_HEADER,Sa as CLOUDFRONT_FAILOVER_STATUS_CODES,Sf as COMMON_CROSS_ACCOUNT_ROLES,ji as Cache,Wi as CanaryManager,jl as CertificateManager,Nt as CloudError,gl as CloudFormationBuilder,Pu as CloudFormationClient,ku as CloudFrontClient,Ba as CloudTrailManager,Zu as CommandHistory,ke as Communication,b as Compute,ns as ConfigurationError,Wa as ContainerRegistryManager,er as CredentialError,Dl as CrossRegionReferenceManager,hu as DASHBOARD_ENTRY,yu as DASHBOARD_PORT_BASE,bu as DASHBOARD_PORT_SPAN,fu as DASHBOARD_STATE_DIR,sl as DEFAULT_FAILOVER_STATUS_CODES,Ji as DEFAULT_RECURSION_LIMITS,Ne as DEFAULT_SERVICE_LIMITS,da as DEFAULT_STATE_DIR,uu as DEFAULT_STORAGE_FAILOVER_STATUS_CODES,tc as DEPTH_HEADER,cd as DLQMonitoringManager,Ae as DNS,Ql as DNSSECManager,Qt as Database,Bl as DatabaseUserManager,Se as DebugLogger,du as DependencyGraph,De as Deployment,Nu as DeploymentError,Ma as DisasterRecoveryManager,N as Email,nd as EmailAdvanced,ed as EmailAnalyticsManager,id as EmailHandlers,rd as EmailTemplateManager,_u as ErrorCodes,es as FAILOVER_REPLICA_POLICY_SID,ad as FIFOQueueManager,ka as FileCache,st as FileSystem,t as Fn,kl as GlobalResourceManager,Fa as GuardDutyManager,Mu as HashCache,wd as HealthCheckManager,zl as ImageScanningManager,Xt as JobLoader,Td as LARAVEL_SERVERLESS_BUILD_STEPS,Wl as LambdaConcurrencyManager,Xl as LambdaDLQManager,Kl as LambdaDestinationsManager,Gl as LambdaLayersManager,Jl as LambdaVPCManager,ql as LambdaVersionsManager,Ha as LogsManager,vp as MANAGED_NODE_VERSIONS,fl as MANAGEMENT_DASHBOARD_SITE_PREFIX,Le as Messaging,Ll as MetricsManager,Ml as MigrationManager,wl as MockCloudFormation,Rl as MockDynamoDB,Al as MockS3,Vi as Monitoring,_l as MultiAccountManager,Pl as MultiRegionManager,Wu as MultiStepProgress,M as Network,Ad as NetworkSecurityManager,ll as ORIGIN_CONNECTION_ATTEMPTS,dl as ORIGIN_CONNECTION_TIMEOUT,al as ORIGIN_GROUP_ALLOWED_METHODS,km as ORIGIN_GROUP_ID_SUFFIX,cl as ORIGIN_GROUP_SELECTION_CRITERIA,Ol as OrganizationManager,kp as PHP_DEFAULT_EXCLUDES,Cp as PHP_LAYER_EXTENSIONS,X as ParameterStore,Ul as PerformanceManager,Ie as Permissions,Dt as Phone,od as PhoneAdvanced,pl as PhoneHandlers,Oa as PreviewEnvironmentManager,$a as PreviewNotificationService,qu as ProgressBar,za as ProgressiveDeploymentManager,lu as Pseudo,ye as Queue,dd as QueueManagementManager,Tm as QueuePresets,tp as RECOMMENDED_ACCOUNT_STRUCTURES,bf as RECOMMENDED_SCPS,Xu as REPL,Yu as REPLCommandBuilder,Qu as REPLContext,Uu as RateLimiter,Em as RealtimePresets,os as RecursionGuard,kt as Redirects,Nl as RegionPairManager,Pt as Registry,Ga as ReplicaManager,Rd as ResourceManagementManager,Yl as Route53ResolverManager,Ja as Route53RoutingManager,Da as S3Client,be as S3Error,Re as SMS,il as STATE_DIR_ENV_VAR,Zo as STORAGE_FAILOVER_METADATA_KEY,Yt as Search,zi as Secrets,qa as SecretsManager,Fl as SecretsRotationManager,j as Security,zr as SecurityHubManager,Vl as SecurityScanningManager,td as SenderReputationManager,Ka as ServiceMeshManager,ts as Sftp,sd as SmsAdvanced,ml as SmsHandlers,Ku as Spinner,xl as StackDependencyManager,Nm as StacksIntegration,Ed as StaticSiteManager,ze as Storage,cc as StorageAdvancedManager,Hr as SyntheticsManager,nc as TRACE_HEADER,Ju as TaskList,Xo as TemplateBuilder,Na as TemplateCache,Sl as ValidationError,gu as Workflow,$l as XRayManager,dp as abTestManager,ul as amazonLinuxImageId,mu as amazonLinuxImageParameter,Pm as analyzeStackDiff,Xa as artifactKey,wn as assertOriginGroupMethods,Wg as autocomplete,ip as awsConfigManager,rp as backupManager,bg as batch,lh as batchProcessingManager,cp as blueGreenManager,nh as bounceComplaintHandler,ph as buildBunRuntimeLayerZip,Ia as buildCloudFormationTemplate,Aa as buildFailoverReplicaPolicyStatement,ga as buildMailEnv,uh as buildNodeRuntimeLayerZip,Kf as buildOptimizationManager,va as buildOriginGroup,Yo as buildOriginGroups,hh as buildPhpRuntimeLayerZip,wa as buildReplicationConfiguration,Ea as buildReplicationRole,lp as canaryManager,Ig as categorizeChanges,Gf as certificateManager,cg as checkIAMPermissions,bd as checkInvocation,dg as checkServiceQuotas,Bu as chunk,Lp as clearSigningKeyCache,Fu as cloudConfigSchema,op as cloudTrailManager,as as collectPhpAppEntries,Xm as composePresets,Ya as composeServerlessAppTemplate,hp as containerRegistryManager,Um as createApiBackendPreset,Dp as createCliHandler,ig as createCredentialProvider,Km as createDashboardSite,zm as createDataPipelinePreset,vl as createError,Pa as createExistingStaticFullStackPreset,Mm as createFullStackAppPreset,fh as createHandlers,Ip as createHttpHandler,Fm as createJamstackPreset,qm as createLaravelPreset,Hm as createMLApiPreset,jm as createMicroservicesPreset,$g as createMockAWS,Om as createNodeJsServerPreset,$m as createNodeJsServerlessPreset,Qm as createPreset,cs as createPresignedUrl,xp as createPresignedUrlAsync,Pp as createQueueHandler,Vm as createRealtimeAppPreset,Du as createS3Client,Wm as createServerlessLaravelPreset,Lm as createServerlessNodePreset,_m as createStaticSitePreset,Gm as createTraditionalWebAppPreset,Bm as createWordPressPreset,xt as createZip,tf as crossRegionReferenceManager,zf as databaseUserManager,El as defaultLocalConfig,Fr as deploymentCoexistenceError,Su as deriveManagementDashboardPort,ol as detectDeploymentTargets,sg as detectMisconfigurations,lc as detectServiceRegion,wg as diffTemplates,ch as dlqMonitoringManager,th as dnssecManager,np as drManager,ih as emailAnalyticsManager,sh as emailTemplateManager,Rp as eventToRequest,yl as extendPreset,ah as fifoQueueManager,yg as findChangedFiles,Ef as formatAccountStructure,Bg as formatBytes,Dm as formatDiff,Fg as formatDuration,Jg as formatFlagSuggestions,Yg as formatHistory,Zg as formatHistoryStats,Vg as formatKeyValue,jg as formatList,Ug as formatProgressBar,ep as formatRegion,gf as formatRegionList,zg as formatSuggestion,Lg as formatTable,Mg as formatTree,wu as fromEC2Metadata,Au as fromECSMetadata,Tu as fromEnvironment,Eu as fromSharedCredentials,Ru as fromWebIdentity,gd as functionFingerprint,ec as generateAppImageDockerfile,Mf as generateApprovalConfig,ud as generateBootstrap,zu as generateCleanupWorkflow,Hu as generateCostReportWorkflow,Cf as generateCrossAccountRoleCF,Of as generateDeploymentConfig,Df as generateDeploymentPipeline,wf as generateDeploymentWorkflow,o as generateLogicalId,_f as generateManualPipeline,Pf as generateMatrixWorkflow,$f as generateMultiEnvConfig,kf as generateMultiEnvPipeline,Af as generateMultiEnvWorkflow,Rf as generatePRPreviewWorkflow,Uf as generateParallelConfig,Cd as generatePhpFpmConfig,pd as generatePhpLayerDockerfile,Nf as generatePreviewPipeline,Vu as generatePreviewWorkflow,l as generateResourceName,Lf as generateScheduledConfig,xf as generateScheduledPipeline,If as generateScheduledWorkflow,bl as getAccountId,sf as getAllRegions,uf as getClosestRegion,Xg as getCommandUsage,Gg as getContextualHelp,Gi as getCredentials,Pg as getDeploymentStrategy,Dg as getDiffStats,Ag as getDiffSummary,Ou as getErrorDetails,_a as getLocalConfig,_g as getLocalCredentials,xg as getLocalEndpoint,Og as getLocalEnvVars,ug as getQuotaUsageSummary,vf as getRecommendedStructure,qi as getRegion,ff as getRegionStats,cf as getRegionsByCompliance,af as getRegionsByLocation,lf as getRegionsByPricingTier,$u as getRequiredPermissions,Mp as getSigningKeyCacheSize,wm as getTimestamp,rf as globalResourceManager,sp as guardDutyManager,Zt as hasManagementDashboardSite,mg as hashBuffer,gg as hashDirectory,Cl as hashFile,fg as hashManifest,Tl as hashString,bh as healthCheckManager,Wf as imageScanningManager,hd as inspectInvocation,wp as installRecursionFetch,yd as invocationContext,pu as isArmInstanceType,Hg as isLikelyTypo,Ng as isLocalDevelopment,Vr as isManagementDashboardSiteName,Up as isNodeCryptoAvailable,Fi as isS3RestEndpoint,pa as isStateDirConfigured,ma as isStatePath,df as isValidRegion,Bp as isWebCryptoAvailable,Qf as lambdaConcurrencyManager,eh as lambdaDLQManager,Yf as lambdaDestinationsManager,Jf as lambdaLayersManager,Zf as lambdaVPCManager,Xf as lambdaVersionsManager,sc as laravelServerlessEnvDefaults,pp as logsManager,ou as mailEnabled,jr as mailFirewallPorts,Jo as mailWebmailSites,_t as makeAWSRequest,Op as makeAWSRequestAsync,_p as makeAWSRequestOnce,hl as managementDashboardSiteName,In as mergeInfrastructure,Ff as metricsManager,jf as migrationManager,hf as multiAccountManager,ef as multiRegionManager,Sh as networkSecurityManager,yf as organizationManager,ac as packagePhpApp,Dn as packageServerlessApp,xa as parallel,Sg as parallelMap,vg as parallelWithRetry,fd as parseChain,$p as parseJSONResponse,Nn as parseXMLResponse,Vf as performanceManager,Za as phpLayerBuildStage,Tp as phpLayerPackages,kn as phpRuntimeLayerAssets,ju as previewManager,Gu as previewNotifications,Eg as processInChunks,up as progressiveDeploymentManager,ic as propagationHeaders,dh as queueManagementManager,hg as quickHash,oc as recursionBlockedResponse,nf as regionPairManager,gp as replicaManager,Rg as requiresReplacement,mh as resetRecursionRuntime,gh as resolveApp,A as resolveAppDatabase,U as resolveCloudProvider,Pn as resolveCredentials,vu as resolveDashboardDomain,Cu as resolveDashboardDomains,Im as resolveDeployBucketName,H as resolveDeploymentMode,Qo as resolveFailoverStatusCodes,le as resolveMailProxy,ne as resolveMailService,Jm as resolveManagementDashboardSite,Hi as resolveManagementDashboardSites,ot as resolveOriginConnection,T as resolveProjectStackName,Qa as resolveQueueNames,tr as resolveQueues,Ep as resolveRecursionConfig,Iu as resolveRegion,$e as resolveServerlessAppStackName,ba as resolveServerlessArtifactBucketName,Bi as resolveServerlessAssetBucketName,Ki as resolveServerlessRuntime,ya as resolveSiteBucketName,ha as resolveSiteResourceName,fa as resolveSiteStackName,R as resolveStatePath,Rm as resolveStorageBucketName,Ca as resolveStorageFailover,vh as resourceManagementManager,vd as responseToResult,rh as route53ResolverManager,bp as route53RoutingManager,Sp as runBuildHooks,ss as runPhpBuildHooks,Ta as s3RegionalDomain,Am as sanitizeName,qg as searchCommands,fp as secretsManager,Hf as secretsRotationManager,ap as securityHubManager,qf as securityScanningManager,oh as senderReputationManager,Cg as sequence,yp as serviceMeshManager,ua as setStateDir,is as sha256,Ap as sharedRecursionGuard,md as sharedRuntimeLoop,Y as signRequest,dc as signRequestAsync,of as stackDependencyManager,En as stateDir,Ve as statePath,yh as staticSiteManager,Np as storageAdvancedManager,Ra as storageFailoverReplicasFromTemplate,Il as suggestCommand,Kg as suggestFlags,lg as suggestIAMPolicy,pg as suggestQuotaIncrease,mf as suggestRegionPairs,pf as suggestRegions,mp as syntheticsManager,Lu as templateCache,Tf as validateAccountStructure,kg as validateAgainstSchema,Qg as validateCommand,og as validateConfiguration,ag as validateCredentials,An as validateOriginGroups,cu as validateResourceLimits,su as validateTemplate,au as validateTemplateSize,rg as withCDN,tg as withCache,eg as withDatabase,Sd as withInvocation,Ym as withMonitoring,ng as withQueue,Zm as withSecurity,Tg as withTimeout,Bf as xrayManager};
+import{Tm,Em,da,il,ua,pa,En,ze,I,ma,ol,H,Fr,A,ou,ne,jr,ga,Jo,le,U,Xo,su,au,cu,lu,l,o,wm,Am,T,fa,ha,ya,Rm,Im,$e,ba,Bi,du,Pm,Dm,He,Pt,Sa,sl,al,km,cl,ll,dl,Qo,va,st,Yo,wn,Fi,An,Ge,uu,Zo,es,Ca,Ta,Ea,wa,Aa,Ra,Ae,j,pu,mu,ul,b,M,at,N,pl,Dt,ye,Xt,Nm,ml,Re,ts,qe,Qt,ji,Ie,rs,Le,gu,Vi,Pe,De,ie,zi,X,Yt,kt,ke,t,Rn,xm,gl,Ia,_m,Om,$m,Lm,Pa,Mm,Um,Bm,Fm,jm,Vm,zm,Hm,Gm,qm,Wm,Km,fu,hu,yu,bu,Su,vu,Cu,Zt,fl,hl,Vr,Hi,Jm,yl,Xm,Qm,In,Ym,Zm,eg,tg,rg,ng,Tu,Eu,wu,Au,Ru,Gi,ig,Pn,Iu,bl,Pu,Da,be,Du,ku,Nt,ns,er,Nu,Sl,xu,_u,Ou,vl,Se,og,sg,ag,cg,$u,lg,Ne,dg,ug,pg,ka,Na,Lu,Cl,Tl,mg,gg,fg,hg,yg,Mu,xa,bg,Sg,vg,Cg,Tg,Uu,Bu,Eg,wg,Ag,Rg,Ig,Pg,Dg,Fu,kg,El,_a,Ng,xg,_g,Og,wl,Al,Rl,$g,Oa,ju,Vu,zu,Hu,$a,Gu,Lg,Mg,Ug,Bg,Fg,jg,Vg,qu,Wu,Ku,Ju,Il,zg,Hg,Gg,qg,Wg,Kg,Jg,Xg,Qg,Xu,Qu,Yu,Zu,Yg,Zg,Pl,ef,Dl,kl,Nl,xl,tf,rf,nf,of,ct,qi,sf,af,cf,lf,df,uf,pf,mf,ep,gf,ff,_l,Ol,hf,yf,tp,bf,Sf,vf,Cf,Tf,Ef,wf,Af,Rf,If,Pf,Df,kf,Nf,xf,_f,Of,$f,Lf,Mf,Uf,La,rp,Ma,np,Ua,ip,Ba,op,Fa,sp,zr,ap,ja,cp,Wi,lp,Va,dp,za,up,$l,Bf,Ll,Ff,Ha,pp,Hr,mp,Ml,jf,Ga,gp,Ul,Vf,Bl,zf,Fl,Hf,qa,fp,jl,Gf,Vl,qf,zl,Wf,Hl,Kf,Wa,hp,Ka,yp,Gl,Jf,ql,Xf,Wl,Qf,Kl,Yf,Jl,Zf,Xl,eh,Ja,bp,Ql,th,Yl,rh,Zl,nh,ed,ih,td,oh,rd,sh,nd,id,od,sd,ad,ah,cd,ch,ld,lh,dd,dh,xt,ud,Sp,is,Xa,Dn,vp,Ki,tr,Qa,Ya,Cp,Tp,Za,pd,ec,md,uh,ph,tc,rc,nc,gd,Ji,fd,hd,os,ic,oc,yd,Ep,wp,Ap,mh,bd,Sd,gh,Rp,vd,Ip,Pp,Dp,fh,Cd,kn,sc,Td,hh,kp,ss,as,ac,Ed,yh,cc,Np,wd,bh,Ad,Sh,Rd,vh}from"./chunk-gghy8mb4.js";import{lc,Y,dc,cs,xp,_t,_p,Op,Nn,$p,Lp,Mp,Up,Bp}from"./chunk-bgjvxdds.js";export{Va as ABTestManager,qe as AI,xu as AWSAPIError,Ua as AWSConfigManager,xm as AWS_PSEUDO_PARAMETERS,ct as AWS_REGIONS,rs as ApiGateway,Rn as Arn,ie as AssetHasher,Pe as Auth,La as BackupManager,ld as BatchProcessingManager,ja as BlueGreenManager,Zl as BounceComplaintHandler,Hl as BuildOptimizationManager,Ge as CDN,rc as CHAIN_HEADER,Sa as CLOUDFRONT_FAILOVER_STATUS_CODES,Sf as COMMON_CROSS_ACCOUNT_ROLES,ji as Cache,Wi as CanaryManager,jl as CertificateManager,Nt as CloudError,gl as CloudFormationBuilder,Pu as CloudFormationClient,ku as CloudFrontClient,Ba as CloudTrailManager,Zu as CommandHistory,ke as Communication,b as Compute,ns as ConfigurationError,Wa as ContainerRegistryManager,er as CredentialError,Dl as CrossRegionReferenceManager,hu as DASHBOARD_ENTRY,yu as DASHBOARD_PORT_BASE,bu as DASHBOARD_PORT_SPAN,fu as DASHBOARD_STATE_DIR,sl as DEFAULT_FAILOVER_STATUS_CODES,Ji as DEFAULT_RECURSION_LIMITS,Ne as DEFAULT_SERVICE_LIMITS,da as DEFAULT_STATE_DIR,uu as DEFAULT_STORAGE_FAILOVER_STATUS_CODES,tc as DEPTH_HEADER,cd as DLQMonitoringManager,Ae as DNS,Ql as DNSSECManager,Qt as Database,Bl as DatabaseUserManager,Se as DebugLogger,du as DependencyGraph,De as Deployment,Nu as DeploymentError,Ma as DisasterRecoveryManager,N as Email,nd as EmailAdvanced,ed as EmailAnalyticsManager,id as EmailHandlers,rd as EmailTemplateManager,_u as ErrorCodes,es as FAILOVER_REPLICA_POLICY_SID,ad as FIFOQueueManager,ka as FileCache,at as FileSystem,t as Fn,kl as GlobalResourceManager,Fa as GuardDutyManager,Mu as HashCache,wd as HealthCheckManager,zl as ImageScanningManager,Xt as JobLoader,Td as LARAVEL_SERVERLESS_BUILD_STEPS,Wl as LambdaConcurrencyManager,Xl as LambdaDLQManager,Kl as LambdaDestinationsManager,Gl as LambdaLayersManager,Jl as LambdaVPCManager,ql as LambdaVersionsManager,Ha as LogsManager,vp as MANAGED_NODE_VERSIONS,fl as MANAGEMENT_DASHBOARD_SITE_PREFIX,Le as Messaging,Ll as MetricsManager,Ml as MigrationManager,wl as MockCloudFormation,Rl as MockDynamoDB,Al as MockS3,Vi as Monitoring,_l as MultiAccountManager,Pl as MultiRegionManager,Wu as MultiStepProgress,M as Network,Ad as NetworkSecurityManager,ll as ORIGIN_CONNECTION_ATTEMPTS,dl as ORIGIN_CONNECTION_TIMEOUT,al as ORIGIN_GROUP_ALLOWED_METHODS,km as ORIGIN_GROUP_ID_SUFFIX,cl as ORIGIN_GROUP_SELECTION_CRITERIA,Ol as OrganizationManager,kp as PHP_DEFAULT_EXCLUDES,Cp as PHP_LAYER_EXTENSIONS,X as ParameterStore,Ul as PerformanceManager,Ie as Permissions,Dt as Phone,od as PhoneAdvanced,pl as PhoneHandlers,Oa as PreviewEnvironmentManager,$a as PreviewNotificationService,qu as ProgressBar,za as ProgressiveDeploymentManager,lu as Pseudo,ye as Queue,dd as QueueManagementManager,Tm as QueuePresets,tp as RECOMMENDED_ACCOUNT_STRUCTURES,bf as RECOMMENDED_SCPS,Xu as REPL,Yu as REPLCommandBuilder,Qu as REPLContext,Uu as RateLimiter,Em as RealtimePresets,os as RecursionGuard,kt as Redirects,Nl as RegionPairManager,Pt as Registry,Ga as ReplicaManager,Rd as ResourceManagementManager,Yl as Route53ResolverManager,Ja as Route53RoutingManager,Da as S3Client,be as S3Error,Re as SMS,il as STATE_DIR_ENV_VAR,Zo as STORAGE_FAILOVER_METADATA_KEY,Yt as Search,zi as Secrets,qa as SecretsManager,Fl as SecretsRotationManager,j as Security,zr as SecurityHubManager,Vl as SecurityScanningManager,td as SenderReputationManager,Ka as ServiceMeshManager,ts as Sftp,sd as SmsAdvanced,ml as SmsHandlers,Ku as Spinner,xl as StackDependencyManager,Nm as StacksIntegration,Ed as StaticSiteManager,He as Storage,cc as StorageAdvancedManager,Hr as SyntheticsManager,nc as TRACE_HEADER,Ju as TaskList,Xo as TemplateBuilder,Na as TemplateCache,Sl as ValidationError,gu as Workflow,$l as XRayManager,dp as abTestManager,ul as amazonLinuxImageId,mu as amazonLinuxImageParameter,Pm as analyzeStackDiff,Xa as artifactKey,wn as assertOriginGroupMethods,Wg as autocomplete,ip as awsConfigManager,rp as backupManager,bg as batch,lh as batchProcessingManager,cp as blueGreenManager,nh as bounceComplaintHandler,ph as buildBunRuntimeLayerZip,Ia as buildCloudFormationTemplate,Aa as buildFailoverReplicaPolicyStatement,ga as buildMailEnv,uh as buildNodeRuntimeLayerZip,Kf as buildOptimizationManager,va as buildOriginGroup,Yo as buildOriginGroups,hh as buildPhpRuntimeLayerZip,wa as buildReplicationConfiguration,Ea as buildReplicationRole,lp as canaryManager,Ig as categorizeChanges,Gf as certificateManager,cg as checkIAMPermissions,bd as checkInvocation,dg as checkServiceQuotas,Bu as chunk,Lp as clearSigningKeyCache,Fu as cloudConfigSchema,op as cloudTrailManager,as as collectPhpAppEntries,Xm as composePresets,Ya as composeServerlessAppTemplate,hp as containerRegistryManager,Um as createApiBackendPreset,Dp as createCliHandler,ig as createCredentialProvider,Km as createDashboardSite,zm as createDataPipelinePreset,vl as createError,Pa as createExistingStaticFullStackPreset,Mm as createFullStackAppPreset,fh as createHandlers,Ip as createHttpHandler,Fm as createJamstackPreset,qm as createLaravelPreset,Hm as createMLApiPreset,jm as createMicroservicesPreset,$g as createMockAWS,Om as createNodeJsServerPreset,$m as createNodeJsServerlessPreset,Qm as createPreset,cs as createPresignedUrl,xp as createPresignedUrlAsync,Pp as createQueueHandler,Vm as createRealtimeAppPreset,Du as createS3Client,Wm as createServerlessLaravelPreset,Lm as createServerlessNodePreset,_m as createStaticSitePreset,Gm as createTraditionalWebAppPreset,Bm as createWordPressPreset,xt as createZip,tf as crossRegionReferenceManager,zf as databaseUserManager,El as defaultLocalConfig,Fr as deploymentCoexistenceError,Su as deriveManagementDashboardPort,ol as detectDeploymentTargets,sg as detectMisconfigurations,lc as detectServiceRegion,wg as diffTemplates,ch as dlqMonitoringManager,th as dnssecManager,np as drManager,ih as emailAnalyticsManager,sh as emailTemplateManager,Rp as eventToRequest,yl as extendPreset,ah as fifoQueueManager,yg as findChangedFiles,Ef as formatAccountStructure,Bg as formatBytes,Dm as formatDiff,Fg as formatDuration,Jg as formatFlagSuggestions,Yg as formatHistory,Zg as formatHistoryStats,Vg as formatKeyValue,jg as formatList,Ug as formatProgressBar,ep as formatRegion,gf as formatRegionList,zg as formatSuggestion,Lg as formatTable,Mg as formatTree,wu as fromEC2Metadata,Au as fromECSMetadata,Tu as fromEnvironment,Eu as fromSharedCredentials,Ru as fromWebIdentity,gd as functionFingerprint,ec as generateAppImageDockerfile,Mf as generateApprovalConfig,ud as generateBootstrap,zu as generateCleanupWorkflow,Hu as generateCostReportWorkflow,Cf as generateCrossAccountRoleCF,Of as generateDeploymentConfig,Df as generateDeploymentPipeline,wf as generateDeploymentWorkflow,o as generateLogicalId,_f as generateManualPipeline,Pf as generateMatrixWorkflow,$f as generateMultiEnvConfig,kf as generateMultiEnvPipeline,Af as generateMultiEnvWorkflow,Rf as generatePRPreviewWorkflow,Uf as generateParallelConfig,Cd as generatePhpFpmConfig,pd as generatePhpLayerDockerfile,Nf as generatePreviewPipeline,Vu as generatePreviewWorkflow,l as generateResourceName,Lf as generateScheduledConfig,xf as generateScheduledPipeline,If as generateScheduledWorkflow,bl as getAccountId,sf as getAllRegions,uf as getClosestRegion,Xg as getCommandUsage,Gg as getContextualHelp,Gi as getCredentials,Pg as getDeploymentStrategy,Dg as getDiffStats,Ag as getDiffSummary,Ou as getErrorDetails,_a as getLocalConfig,_g as getLocalCredentials,xg as getLocalEndpoint,Og as getLocalEnvVars,ug as getQuotaUsageSummary,vf as getRecommendedStructure,qi as getRegion,ff as getRegionStats,cf as getRegionsByCompliance,af as getRegionsByLocation,lf as getRegionsByPricingTier,$u as getRequiredPermissions,Mp as getSigningKeyCacheSize,wm as getTimestamp,rf as globalResourceManager,sp as guardDutyManager,Zt as hasManagementDashboardSite,mg as hashBuffer,gg as hashDirectory,Cl as hashFile,fg as hashManifest,Tl as hashString,bh as healthCheckManager,Wf as imageScanningManager,hd as inspectInvocation,wp as installRecursionFetch,yd as invocationContext,pu as isArmInstanceType,Hg as isLikelyTypo,Ng as isLocalDevelopment,Vr as isManagementDashboardSiteName,Up as isNodeCryptoAvailable,Fi as isS3RestEndpoint,pa as isStateDirConfigured,ma as isStatePath,df as isValidRegion,Bp as isWebCryptoAvailable,Qf as lambdaConcurrencyManager,eh as lambdaDLQManager,Yf as lambdaDestinationsManager,Jf as lambdaLayersManager,Zf as lambdaVPCManager,Xf as lambdaVersionsManager,sc as laravelServerlessEnvDefaults,pp as logsManager,ou as mailEnabled,jr as mailFirewallPorts,Jo as mailWebmailSites,_t as makeAWSRequest,Op as makeAWSRequestAsync,_p as makeAWSRequestOnce,hl as managementDashboardSiteName,In as mergeInfrastructure,Ff as metricsManager,jf as migrationManager,hf as multiAccountManager,ef as multiRegionManager,Sh as networkSecurityManager,yf as organizationManager,ac as packagePhpApp,Dn as packageServerlessApp,xa as parallel,Sg as parallelMap,vg as parallelWithRetry,fd as parseChain,$p as parseJSONResponse,Nn as parseXMLResponse,Vf as performanceManager,Za as phpLayerBuildStage,Tp as phpLayerPackages,kn as phpRuntimeLayerAssets,ju as previewManager,Gu as previewNotifications,Eg as processInChunks,up as progressiveDeploymentManager,ic as propagationHeaders,dh as queueManagementManager,hg as quickHash,oc as recursionBlockedResponse,nf as regionPairManager,gp as replicaManager,Rg as requiresReplacement,mh as resetRecursionRuntime,gh as resolveApp,A as resolveAppDatabase,U as resolveCloudProvider,Pn as resolveCredentials,vu as resolveDashboardDomain,Cu as resolveDashboardDomains,Im as resolveDeployBucketName,H as resolveDeploymentMode,Qo as resolveFailoverStatusCodes,le as resolveMailProxy,ne as resolveMailService,Jm as resolveManagementDashboardSite,Hi as resolveManagementDashboardSites,st as resolveOriginConnection,T as resolveProjectStackName,Qa as resolveQueueNames,tr as resolveQueues,Ep as resolveRecursionConfig,Iu as resolveRegion,$e as resolveServerlessAppStackName,ba as resolveServerlessArtifactBucketName,Bi as resolveServerlessAssetBucketName,Ki as resolveServerlessRuntime,ya as resolveSiteBucketName,ha as resolveSiteResourceName,fa as resolveSiteStackName,I as resolveStatePath,Rm as resolveStorageBucketName,Ca as resolveStorageFailover,vh as resourceManagementManager,vd as responseToResult,rh as route53ResolverManager,bp as route53RoutingManager,Sp as runBuildHooks,ss as runPhpBuildHooks,Ta as s3RegionalDomain,Am as sanitizeName,qg as searchCommands,fp as secretsManager,Hf as secretsRotationManager,ap as securityHubManager,qf as securityScanningManager,oh as senderReputationManager,Cg as sequence,yp as serviceMeshManager,ua as setStateDir,is as sha256,Ap as sharedRecursionGuard,md as sharedRuntimeLoop,Y as signRequest,dc as signRequestAsync,of as stackDependencyManager,En as stateDir,ze as statePath,yh as staticSiteManager,Np as storageAdvancedManager,Ra as storageFailoverReplicasFromTemplate,Il as suggestCommand,Kg as suggestFlags,lg as suggestIAMPolicy,pg as suggestQuotaIncrease,mf as suggestRegionPairs,pf as suggestRegions,mp as syntheticsManager,Lu as templateCache,Tf as validateAccountStructure,kg as validateAgainstSchema,Qg as validateCommand,og as validateConfiguration,ag as validateCredentials,An as validateOriginGroups,cu as validateResourceLimits,su as validateTemplate,au as validateTemplateSize,rg as withCDN,tg as withCache,eg as withDatabase,Sd as withInvocation,Ym as withMonitoring,ng as withQueue,Zm as withSecurity,Tg as withTimeout,Bf as xrayManager};

package/dist/bin/{chunk-8wvtmxpw.js → chunk-47yznk07.js}

@@ -1,2 +1,2 @@
-import{es,Aa}from"./chunk-27t4ve22.js";import{g}from"./chunk-zph18vv6.js";var l=()=>{};async function Kp(a,c=l){for(let e of a){let t=new g(e.replicaRegion),i;try{i=await t.headBucket(e.replicaBucket)}catch(r){if(r?.statusCode===301)throw Error(`Failover replica bucket ${e.replicaBucket} already exists outside ${e.replicaRegion}. Pick another failover.bucket or region for infrastructure.storage.${e.name}.`);if(r?.statusCode===403)throw Error(`Failover replica bucket ${e.replicaBucket} exists but this account cannot reach it (S3 names are global, so another account may own it). Set infrastructure.storage.${e.name}.failover.bucket to a name you own.`);throw r}if(i.exists&&i.region&&i.region!==e.replicaRegion)throw Error(`Failover replica bucket ${e.replicaBucket} is in ${i.region}, not ${e.replicaRegion}.`);if(!i.exists)c(`Creating failover replica bucket ${e.replicaBucket} in ${e.replicaRegion}`),await t.createBucket(e.replicaBucket);if(await t.putPublicAccessBlock(e.replicaBucket,{BlockPublicAcls:!0,IgnorePublicAcls:!0,BlockPublicPolicy:!0,RestrictPublicBuckets:!0}),await t.putBucketEncryption(e.replicaBucket,"AES256"),e.replicate){if((await t.getBucketVersioning(e.replicaBucket)).Status!=="Enabled")c(`Enabling versioning on ${e.replicaBucket} (S3 replication requires it)`),await t.putBucketVersioning(e.replicaBucket,"Enabled")}}}async function Jp(a,c,e=l){for(let t of a){let i=c[t.distributionArnOutput];if(!i)throw Error(`Stack output ${t.distributionArnOutput} is missing, so the failover replica ${t.replicaBucket} cannot be scoped to its distribution.`);let r=new g(t.replicaRegion),s={Version:"2012-10-17",Statement:[...((await r.getBucketPolicy(t.replicaBucket))?.Statement??[]).filter((n)=>n?.Sid!==es),Aa({replicaBucket:t.replicaBucket,distributionArn:i})]};e(`Granting ${i} read access to ${t.replicaBucket}`),await r.putBucketPolicy(t.replicaBucket,s)}}async function Xp(a,c=l){let e={};for(let t of a){let i=new g(t.primaryRegion),r=new g(t.replicaRegion),[u,p]=await Promise.all([i.listAllObjects({bucket:t.primaryBucket}),r.listAllObjects({bucket:t.replicaBucket})]),s=new Map(p.map((o)=>[o.Key,o.Size])),n=u.filter((o)=>s.get(o.Key)!==o.Size);for(let o of n)await r.copyObject({sourceBucket:t.primaryBucket,sourceKey:o.Key,destinationBucket:t.replicaBucket,destinationKey:o.Key});if(n.length>0)c(`Copied ${n.length} object(s) from ${t.primaryBucket} to ${t.replicaBucket}`);e[t.replicaBucket]=n.length}return e}async function Qp(a,c=l){for(let e of a){let t=new g(e.replicaRegion);if(!(await t.headBucket(e.replicaBucket)).exists)continue;await t.emptyBucket(e.replicaBucket),await t.deleteBucket(e.replicaBucket),c(`Deleted failover replica bucket ${e.replicaBucket}`)}}
+import{es,Aa}from"./chunk-gghy8mb4.js";import{g}from"./chunk-zph18vv6.js";var l=()=>{};async function Kp(a,c=l){for(let e of a){let t=new g(e.replicaRegion),i;try{i=await t.headBucket(e.replicaBucket)}catch(r){if(r?.statusCode===301)throw Error(`Failover replica bucket ${e.replicaBucket} already exists outside ${e.replicaRegion}. Pick another failover.bucket or region for infrastructure.storage.${e.name}.`);if(r?.statusCode===403)throw Error(`Failover replica bucket ${e.replicaBucket} exists but this account cannot reach it (S3 names are global, so another account may own it). Set infrastructure.storage.${e.name}.failover.bucket to a name you own.`);throw r}if(i.exists&&i.region&&i.region!==e.replicaRegion)throw Error(`Failover replica bucket ${e.replicaBucket} is in ${i.region}, not ${e.replicaRegion}.`);if(!i.exists)c(`Creating failover replica bucket ${e.replicaBucket} in ${e.replicaRegion}`),await t.createBucket(e.replicaBucket);if(await t.putPublicAccessBlock(e.replicaBucket,{BlockPublicAcls:!0,IgnorePublicAcls:!0,BlockPublicPolicy:!0,RestrictPublicBuckets:!0}),await t.putBucketEncryption(e.replicaBucket,"AES256"),e.replicate){if((await t.getBucketVersioning(e.replicaBucket)).Status!=="Enabled")c(`Enabling versioning on ${e.replicaBucket} (S3 replication requires it)`),await t.putBucketVersioning(e.replicaBucket,"Enabled")}}}async function Jp(a,c,e=l){for(let t of a){let i=c[t.distributionArnOutput];if(!i)throw Error(`Stack output ${t.distributionArnOutput} is missing, so the failover replica ${t.replicaBucket} cannot be scoped to its distribution.`);let r=new g(t.replicaRegion),s={Version:"2012-10-17",Statement:[...((await r.getBucketPolicy(t.replicaBucket))?.Statement??[]).filter((n)=>n?.Sid!==es),Aa({replicaBucket:t.replicaBucket,distributionArn:i})]};e(`Granting ${i} read access to ${t.replicaBucket}`),await r.putBucketPolicy(t.replicaBucket,s)}}async function Xp(a,c=l){let e={};for(let t of a){let i=new g(t.primaryRegion),r=new g(t.replicaRegion),[u,p]=await Promise.all([i.listAllObjects({bucket:t.primaryBucket}),r.listAllObjects({bucket:t.replicaBucket})]),s=new Map(p.map((o)=>[o.Key,o.Size])),n=u.filter((o)=>s.get(o.Key)!==o.Size);for(let o of n)await r.copyObject({sourceBucket:t.primaryBucket,sourceKey:o.Key,destinationBucket:t.replicaBucket,destinationKey:o.Key});if(n.length>0)c(`Copied ${n.length} object(s) from ${t.primaryBucket} to ${t.replicaBucket}`);e[t.replicaBucket]=n.length}return e}async function Qp(a,c=l){for(let e of a){let t=new g(e.replicaRegion);if(!(await t.headBucket(e.replicaBucket)).exists)continue;await t.emptyBucket(e.replicaBucket),await t.deleteBucket(e.replicaBucket),c(`Deleted failover replica bucket ${e.replicaBucket}`)}}
 export{Kp,Jp,Xp,Qp};

package/dist/bin/{chunk-0g9ze9v3.js → chunk-613m8vf9.js}

@@ -1 +1 @@
-import{Fp,Id,uc,pc,Pd,jp,Vp,nr,xn,ir,Xi,zp,_n,ls}from"./chunk-ae9epvrr.js";import{rt,Ls,Gc,Pi,Ms,gm}from"./chunk-gwn9pezq.js";import{Kd,wo,Jd,Xd,Qd,Ir,fm,Ao}from"./chunk-7xd2tnjb.js";import{tc,rc,nc,gd,Ji,fd,hd,os,ic,oc}from"./chunk-27t4ve22.js";import"./chunk-bgjvxdds.js";export{rc as CHAIN_HEADER,xn as DEFAULT_ATTACK_MODE_HOURS,Kd as DEFAULT_DDOS_THRESHOLDS,Ji as DEFAULT_RECURSION_LIMITS,tc as DEPTH_HEADER,nr as MAX_CONTROL_HOURS,ir as ProtectionControlStore,Fp as RATE_LIMIT_KEY_SEPARATOR,Pd as RateLimiter,os as RecursionGuard,nc as TRACE_HEADER,_n as applyControlsToDdos,zp as applyControlsToRateLimits,Ao as applyMitigationFactor,Vp as defaultRateLimitRules,Xi as describePosture,rt as escapeSecLang,gd as functionFingerprint,Id as globMatches,Gc as globToRegex,hd as inspectInvocation,Ls as isSafePattern,wo as isValidCidr,ls as mergeControlsIntoConfig,fd as parseChain,fm as planMitigation,ic as propagationHeaders,jp as rateLimitHeaders,pc as rateLimitKey,oc as recursionBlockedResponse,Ir as renderDdosInstallScript,Qd as renderNftablesRuleset,Xd as renderSysctlFile,Pi as renderWafConfig,Ms as renderWafInstallScript,uc as ruleMatches,Jd as sysctlHardening,gm as wafEventTelemetry};
+import{Fp,Id,uc,pc,Pd,jp,Vp,nr,xn,ir,Xi,zp,_n,ls}from"./chunk-ae9epvrr.js";import{nt,Ls,Gc,Pi,Ms,gm}from"./chunk-r5cpsqqk.js";import{Kd,wo,Jd,Xd,Qd,Ir,fm,Ao}from"./chunk-7xd2tnjb.js";import{tc,rc,nc,gd,Ji,fd,hd,os,ic,oc}from"./chunk-gghy8mb4.js";import"./chunk-bgjvxdds.js";export{rc as CHAIN_HEADER,xn as DEFAULT_ATTACK_MODE_HOURS,Kd as DEFAULT_DDOS_THRESHOLDS,Ji as DEFAULT_RECURSION_LIMITS,tc as DEPTH_HEADER,nr as MAX_CONTROL_HOURS,ir as ProtectionControlStore,Fp as RATE_LIMIT_KEY_SEPARATOR,Pd as RateLimiter,os as RecursionGuard,nc as TRACE_HEADER,_n as applyControlsToDdos,zp as applyControlsToRateLimits,Ao as applyMitigationFactor,Vp as defaultRateLimitRules,Xi as describePosture,nt as escapeSecLang,gd as functionFingerprint,Id as globMatches,Gc as globToRegex,hd as inspectInvocation,Ls as isSafePattern,wo as isValidCidr,ls as mergeControlsIntoConfig,fd as parseChain,fm as planMitigation,ic as propagationHeaders,jp as rateLimitHeaders,pc as rateLimitKey,oc as recursionBlockedResponse,Ir as renderDdosInstallScript,Qd as renderNftablesRuleset,Xd as renderSysctlFile,Pi as renderWafConfig,Ms as renderWafInstallScript,uc as ruleMatches,Jd as sysctlHardening,gm as wafEventTelemetry};

package/dist/bin/{chunk-79n440fm.js → chunk-69j7md80.js}

@@ -1,4 +1,4 @@
-import{R}from"./chunk-27t4ve22.js";var l=40,K=[{version:1,name:"core_control_plane",sql:`
+import{I}from"./chunk-gghy8mb4.js";var l=40,K=[{version:1,name:"core_control_plane",sql:`
       CREATE TABLE projects (
         id TEXT PRIMARY KEY,
         slug TEXT NOT NULL UNIQUE,
@@ -1475,17 +1475,17 @@ import{R}from"./chunk-27t4ve22.js";var l=40,K=[{version:1,name:"core_control_pla
       -- once a minute, forever.
       CREATE INDEX telemetry_kind_scope_time_idx
         ON telemetry_records(project_id, kind, timestamp);
-    `}];import{createHash as S,randomBytes as oe}from"node:crypto";import{chmodSync as H,existsSync as Z,mkdirSync as Te,statSync as se}from"node:fs";import{dirname as ee}from"node:path";import{Database as de}from"bun:sqlite";var ce=["project:read","config:read","config:write","deployments:read","deployments:create","deployments:cancel","deployments:rollback","runtime:read","runtime:restart","runtime:logs","runtime:terminal","data:read","data:write","data:admin","backups:read","backups:create","backups:restore","secrets:read","secrets:write","fleet:read","fleet:manage","users:read","users:manage","users:transfer-ownership","audit:read","billing:read","billing:manage","security:read","security:manage","security:waive","sources:read","sources:manage","applications:read","applications:manage","automation:read","automation:manage","tags:manage"],P=["project:read","config:read","deployments:read","runtime:read","runtime:logs","data:read","backups:read","security:read","sources:read","applications:read","billing:read"],Ee={owner:new Set(ce),admin:new Set(ce.filter((e)=>e!=="users:transfer-ownership")),deployer:new Set([...P,"deployments:create","deployments:cancel","deployments:rollback","sources:manage","applications:manage"]),operator:new Set([...P,"runtime:restart","backups:create","security:manage","sources:manage","applications:manage"]),viewer:new Set(P),auditor:new Set(["project:read","config:read","deployments:read","runtime:read","data:read","backups:read","audit:read","security:read","sources:read","applications:read"])};function Cn(e){return Ee[e]}function j(e,t){if(e.type==="organization")return e.id===void 0||e.id===t.organizationId;if(!e.id)return!1;if(e.type==="project")return e.id===t.projectId;if(e.type==="environment")return e.id===t.environmentId;return e.id===t.resourceId}function re(e){let{membership:t,capability:r,target:i}=e;if(!t||t.status!=="active"||t.organizationId!==i.organizationId)return{allowed:!1,reason:"inactive-membership"};let a=e.grants.filter((s)=>s.organizationId===i.organizationId&&s.membershipId===t.id&&s.capability===r&&j(s.scope,i)),E=a.find((s)=>s.effect==="deny");if(E)return{allowed:!1,reason:"explicit-deny",inheritedFrom:{kind:"grant",id:E.id,scope:E.scope}};let T=a.find((s)=>s.effect==="allow");if(T)return{allowed:!0,reason:"explicit-allow",inheritedFrom:{kind:"grant",id:T.id,scope:T.scope}};if(!j(t.scope,i))return{allowed:!1,reason:"scope-mismatch"};if(Cn(t.roleTemplate).has(r))return{allowed:!0,reason:"role-template",inheritedFrom:{kind:"membership",id:t.id,scope:t.scope}};return{allowed:!1,reason:"missing-capability"}}function Tn(e){return ce.filter((t)=>re({...e,capability:t}).allowed)}class p extends Error{constructor(e,t,r){super(`${e} ${t} changed since version ${r}`);this.name="OptimisticConcurrencyError"}}class x extends Error{constructor(e,t){super(`Operation cannot transition from ${e} to ${t}`);this.name="InvalidOperationTransitionError"}}class I extends Error{constructor(e,t){super(`Control-plane schema version ${e} is newer than supported version ${t}`);this.name="UnsupportedSchemaVersionError"}}var te=65536,q=16384,Ne=["succeeded","failed","cancelled","timed_out"],Le={queued:["running","cancelled","timed_out"],running:["queued","succeeded","failed","cancelled","timed_out"],succeeded:[],failed:["queued"],cancelled:["queued"],timed_out:["queued"]},_e=/(?:^|_)(?:authorization|cookie|credential|password|passwd|secret|token|api_?key|private_?key|access_?key)(?:$|_)/i,ie=/(?:authorization|password|secret|token|api[_-]?key|private[_-]?key|access[_-]?key)\s*[=:]\s*[^\s,;]+/gi;function _(e){if(typeof e!=="string")return{};try{return JSON.parse(e)}catch{return{}}}function d(e){return typeof e==="string"?e:void 0}function G(e,t){if(t&&_e.test(t))return"[REDACTED]";if(e===null||typeof e==="boolean"||typeof e==="number")return e;if(typeof e==="string")return e.replace(ie,"[REDACTED]");if(Array.isArray(e))return e.map((r)=>G(r));if(e&&typeof e==="object"){let r={};for(let[i,a]of Object.entries(e))r[i]=G(a,i);return r}return String(e??"")}function h(e,t=te){let r=G(e),i=JSON.stringify(r);if(Buffer.byteLength(i)<=t)return r;return{truncated:!0,originalBytes:Buffer.byteLength(i),preview:i.slice(0,Math.max(0,t-128))}}function N(e){return JSON.stringify(h(e))}function M(e){if(!e)return;let t=e.replace(ie,"[REDACTED]");return Buffer.byteLength(t)<=q?t:`${t.slice(0,q-24)}
-[output truncated]`}function v(e){return{id:String(e.id),slug:String(e.slug),name:String(e.name),description:d(e.description),organizationId:d(e.organization_id),desiredConfigHash:d(e.desired_config_hash),version:Number(e.version),createdAt:String(e.created_at),updatedAt:String(e.updated_at)}}function D(e){return{id:String(e.id),projectId:String(e.project_id),slug:String(e.slug),name:String(e.name),kind:String(e.kind),region:d(e.region),desiredState:_(e.desired_state),discoveredState:_(e.discovered_state),version:Number(e.version),createdAt:String(e.created_at),updatedAt:String(e.updated_at)}}function y(e){return{id:String(e.id),projectId:String(e.project_id),environmentId:d(e.environment_id),kind:String(e.kind),slug:String(e.slug),name:String(e.name),provider:d(e.provider),providerId:d(e.provider_id),desiredState:_(e.desired_state),discoveredState:_(e.discovered_state),metadata:_(e.metadata),version:Number(e.version),createdAt:String(e.created_at),updatedAt:String(e.updated_at)}}function f(e){return{id:String(e.id),kind:String(e.kind),externalId:d(e.external_id),displayName:String(e.display_name),metadata:_(e.metadata),disabledAt:d(e.disabled_at),version:Number(e.version),createdAt:String(e.created_at),updatedAt:String(e.updated_at)}}function u(e){return{id:String(e.id),projectId:d(e.project_id),environmentId:d(e.environment_id),resourceId:d(e.resource_id),actorId:d(e.actor_id),kind:String(e.kind),state:String(e.state),correlationId:String(e.correlation_id),idempotencyKey:d(e.idempotency_key),input:_(e.input),output:_(e.output),error:d(e.error),attempt:Number(e.attempt),priority:Number(e.priority),leaseOwner:d(e.lease_owner),leaseExpiresAt:d(e.lease_expires_at),cancelRequestedAt:d(e.cancel_requested_at),startedAt:d(e.started_at),finishedAt:d(e.finished_at),version:Number(e.version),createdAt:String(e.created_at),updatedAt:String(e.updated_at)}}function Y(e){return{id:String(e.id),sequence:Number(e.sequence),organizationId:d(e.organization_id),projectId:d(e.project_id),operationId:d(e.operation_id),resourceId:d(e.resource_id),actorId:d(e.actor_id),correlationId:String(e.correlation_id),type:String(e.type),level:String(e.level),payload:_(e.payload),createdAt:String(e.created_at)}}function O(e){return{id:String(e.id),projectId:String(e.project_id),name:String(e.name),normalizedName:String(e.normalized_name),color:String(e.color),createdAt:String(e.created_at),updatedAt:String(e.updated_at)}}function b(e){return{id:String(e.id),actorKey:String(e.actor_key),name:String(e.name),routeId:String(e.route_id),query:_(e.query),createdAt:String(e.created_at),updatedAt:String(e.updated_at)}}function F(e){return{actorKey:String(e.actor_key),entityType:String(e.entity_type),entityId:String(e.entity_id),favorite:Number(e.favorite)===1,lastVisitedAt:String(e.last_visited_at),visitCount:Number(e.visit_count)}}function z(e){return{id:String(e.id),slug:String(e.slug),name:String(e.name),createdAt:String(e.created_at),updatedAt:String(e.updated_at)}}function B(e){let t=String(e.scope_type);return{type:t,...t==="organization"?{}:{id:String(e.scope_id)}}}function k(e){return{id:String(e.id),organizationId:String(e.organization_id),actorId:String(e.actor_id),roleTemplate:String(e.role_template),scope:B(e),source:String(e.source??"manual"),status:String(e.status),sessionVersion:Number(e.session_version),lastActiveAt:d(e.last_active_at),createdAt:String(e.created_at),updatedAt:String(e.updated_at)}}function g(e,t){let r=d(e.accepted_at),i=d(e.revoked_at),a=String(e.expires_at),E=i?"revoked":r?"accepted":a<=t?"expired":"pending";return{id:String(e.id),organizationId:String(e.organization_id),email:String(e.email),roleTemplate:String(e.role_template),scope:B(e),invitedByActorId:d(e.invited_by_actor_id),acceptedByActorId:d(e.accepted_by_actor_id),expiresAt:a,acceptedAt:r,revokedAt:i,state:E,createdAt:String(e.created_at),updatedAt:String(e.updated_at)}}function w(e){return{id:String(e.id),organizationId:String(e.organization_id),membershipId:String(e.membership_id),effect:String(e.effect),capability:String(e.capability),scope:B(e),source:String(e.source??"manual"),createdAt:String(e.created_at),updatedAt:String(e.updated_at)}}function U(e){return{type:e.type,id:e.id??null}}function le(e){return Array.from({length:e},()=>"?").join(", ")}function o(e,t,r){return e.run(t,r)}class Br{path;database;nowFn;idFn;constructor(e={}){this.path=e.path??R(e.cwd??process.cwd(),"control-plane.sqlite"),this.nowFn=e.now??(()=>new Date),this.idFn=e.id??(()=>crypto.randomUUID());let t=this.path===":memory:";if(!t){Te(ee(this.path),{recursive:!0,mode:448});try{H(ee(this.path),448)}catch{}}if(this.database=new de(this.path,{create:!0,strict:!0}),this.database.run("PRAGMA foreign_keys = ON"),this.database.run(`PRAGMA busy_timeout = ${Math.max(100,e.busyTimeoutMs??5000)}`),!t)this.database.run("PRAGMA journal_mode = WAL"),this.database.run("PRAGMA synchronous = NORMAL");if(this.migrate(),!t)this.secureDatabaseFiles()}now(){return this.nowFn().toISOString()}secureDatabaseFiles(){for(let e of[this.path,`${this.path}-wal`,`${this.path}-shm`]){if(!Z(e))continue;try{H(e,384)}catch{}}}backupTo(e){this.database.run("VACUUM INTO ?",[e]);try{H(e,384)}catch{}}migrate(){let e=this.database.query("PRAGMA user_version").get(),t=Number(e?.user_version??0);if(t>l)throw new I(t,l);if(t===l)return;let r;if(t>0&&this.path!==":memory:")r=`${this.path}.v${t}.${Date.now()}.bak`,this.backupTo(r);try{if(this.database.transaction(()=>{for(let a of K){if(a.version<=t)continue;this.database.run(a.sql),o(this.database,"INSERT INTO schema_migrations (version, name, applied_at) VALUES (?, ?, ?)",[a.version,a.name,this.now()]),this.database.run(`PRAGMA user_version = ${a.version}`)}}).exclusive(),r)this.setSetting("storage.last_backup",{path:r,createdAt:this.now(),reason:"pre-migration"})}catch(i){let a=r?` Restore from ${r}.`:"";throw Error(`Control-plane migration from schema ${t} failed.${a} ${i instanceof Error?i.message:String(i)}`)}}close(){if(this.path!==":memory:")this.secureDatabaseFiles();this.database.close()}transaction(e){return this.database.transaction(e).immediate()}createProject(e){let t=e.id??this.idFn(),r=this.now();return o(this.database,"INSERT INTO projects (id, slug, name, description, organization_id, desired_config_hash, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?)",[t,e.slug,e.name,e.description??null,e.organizationId??null,e.desiredConfigHash??null,r,r]),this.getProject(t)}getProject(e){let t=this.database.query("SELECT * FROM projects WHERE id = ?").get(e);return t?v(t):void 0}getProjectBySlug(e){let t=this.database.query("SELECT * FROM projects WHERE slug = ?").get(e);return t?v(t):void 0}listProjects(){return this.database.query("SELECT * FROM projects ORDER BY name COLLATE NOCASE, id").all().map(v)}updateProject(e,t,r){let i=this.getProject(e);if(!i||i.version!==t)throw new p("Project",e,t);if(o(this.database,`UPDATE projects SET name = ?, description = ?, organization_id = ?, desired_config_hash = ?, version = version + 1, updated_at = ?
+    `}];import{createHash as S,randomBytes as oe}from"node:crypto";import{chmodSync as H,existsSync as Z,mkdirSync as Te,statSync as se}from"node:fs";import{dirname as ee}from"node:path";import{Database as de}from"bun:sqlite";var ce=["project:read","config:read","config:write","deployments:read","deployments:create","deployments:cancel","deployments:rollback","runtime:read","runtime:restart","runtime:logs","runtime:terminal","data:read","data:write","data:admin","backups:read","backups:create","backups:restore","secrets:read","secrets:write","fleet:read","fleet:manage","users:read","users:manage","users:transfer-ownership","audit:read","billing:read","billing:manage","security:read","security:manage","security:waive","sources:read","sources:manage","applications:read","applications:manage","automation:read","automation:manage","tags:manage"],P=["project:read","config:read","deployments:read","runtime:read","runtime:logs","data:read","backups:read","security:read","sources:read","applications:read","billing:read"],Ee={owner:new Set(ce),admin:new Set(ce.filter((e)=>e!=="users:transfer-ownership")),deployer:new Set([...P,"deployments:create","deployments:cancel","deployments:rollback","sources:manage","applications:manage"]),operator:new Set([...P,"runtime:restart","backups:create","security:manage","sources:manage","applications:manage"]),viewer:new Set(P),auditor:new Set(["project:read","config:read","deployments:read","runtime:read","data:read","backups:read","audit:read","security:read","sources:read","applications:read"])};function Cn(e){return Ee[e]}function j(e,t){if(e.type==="organization")return e.id===void 0||e.id===t.organizationId;if(!e.id)return!1;if(e.type==="project")return e.id===t.projectId;if(e.type==="environment")return e.id===t.environmentId;return e.id===t.resourceId}function re(e){let{membership:t,capability:r,target:i}=e;if(!t||t.status!=="active"||t.organizationId!==i.organizationId)return{allowed:!1,reason:"inactive-membership"};let a=e.grants.filter((s)=>s.organizationId===i.organizationId&&s.membershipId===t.id&&s.capability===r&&j(s.scope,i)),E=a.find((s)=>s.effect==="deny");if(E)return{allowed:!1,reason:"explicit-deny",inheritedFrom:{kind:"grant",id:E.id,scope:E.scope}};let T=a.find((s)=>s.effect==="allow");if(T)return{allowed:!0,reason:"explicit-allow",inheritedFrom:{kind:"grant",id:T.id,scope:T.scope}};if(!j(t.scope,i))return{allowed:!1,reason:"scope-mismatch"};if(Cn(t.roleTemplate).has(r))return{allowed:!0,reason:"role-template",inheritedFrom:{kind:"membership",id:t.id,scope:t.scope}};return{allowed:!1,reason:"missing-capability"}}function Tn(e){return ce.filter((t)=>re({...e,capability:t}).allowed)}class p extends Error{constructor(e,t,r){super(`${e} ${t} changed since version ${r}`);this.name="OptimisticConcurrencyError"}}class x extends Error{constructor(e,t){super(`Operation cannot transition from ${e} to ${t}`);this.name="InvalidOperationTransitionError"}}class X extends Error{constructor(e,t){super(`Control-plane schema version ${e} is newer than supported version ${t}`);this.name="UnsupportedSchemaVersionError"}}var te=65536,q=16384,Ne=["succeeded","failed","cancelled","timed_out"],Le={queued:["running","cancelled","timed_out"],running:["queued","succeeded","failed","cancelled","timed_out"],succeeded:[],failed:["queued"],cancelled:["queued"],timed_out:["queued"]},_e=/(?:^|_)(?:authorization|cookie|credential|password|passwd|secret|token|api_?key|private_?key|access_?key)(?:$|_)/i,ie=/(?:authorization|password|secret|token|api[_-]?key|private[_-]?key|access[_-]?key)\s*[=:]\s*[^\s,;]+/gi;function _(e){if(typeof e!=="string")return{};try{return JSON.parse(e)}catch{return{}}}function d(e){return typeof e==="string"?e:void 0}function G(e,t){if(t&&_e.test(t))return"[REDACTED]";if(e===null||typeof e==="boolean"||typeof e==="number")return e;if(typeof e==="string")return e.replace(ie,"[REDACTED]");if(Array.isArray(e))return e.map((r)=>G(r));if(e&&typeof e==="object"){let r={};for(let[i,a]of Object.entries(e))r[i]=G(a,i);return r}return String(e??"")}function h(e,t=te){let r=G(e),i=JSON.stringify(r);if(Buffer.byteLength(i)<=t)return r;return{truncated:!0,originalBytes:Buffer.byteLength(i),preview:i.slice(0,Math.max(0,t-128))}}function N(e){return JSON.stringify(h(e))}function M(e){if(!e)return;let t=e.replace(ie,"[REDACTED]");return Buffer.byteLength(t)<=q?t:`${t.slice(0,q-24)}
+[output truncated]`}function v(e){return{id:String(e.id),slug:String(e.slug),name:String(e.name),description:d(e.description),organizationId:d(e.organization_id),desiredConfigHash:d(e.desired_config_hash),version:Number(e.version),createdAt:String(e.created_at),updatedAt:String(e.updated_at)}}function D(e){return{id:String(e.id),projectId:String(e.project_id),slug:String(e.slug),name:String(e.name),kind:String(e.kind),region:d(e.region),desiredState:_(e.desired_state),discoveredState:_(e.discovered_state),version:Number(e.version),createdAt:String(e.created_at),updatedAt:String(e.updated_at)}}function y(e){return{id:String(e.id),projectId:String(e.project_id),environmentId:d(e.environment_id),kind:String(e.kind),slug:String(e.slug),name:String(e.name),provider:d(e.provider),providerId:d(e.provider_id),desiredState:_(e.desired_state),discoveredState:_(e.discovered_state),metadata:_(e.metadata),version:Number(e.version),createdAt:String(e.created_at),updatedAt:String(e.updated_at)}}function f(e){return{id:String(e.id),kind:String(e.kind),externalId:d(e.external_id),displayName:String(e.display_name),metadata:_(e.metadata),disabledAt:d(e.disabled_at),version:Number(e.version),createdAt:String(e.created_at),updatedAt:String(e.updated_at)}}function u(e){return{id:String(e.id),projectId:d(e.project_id),environmentId:d(e.environment_id),resourceId:d(e.resource_id),actorId:d(e.actor_id),kind:String(e.kind),state:String(e.state),correlationId:String(e.correlation_id),idempotencyKey:d(e.idempotency_key),input:_(e.input),output:_(e.output),error:d(e.error),attempt:Number(e.attempt),priority:Number(e.priority),leaseOwner:d(e.lease_owner),leaseExpiresAt:d(e.lease_expires_at),cancelRequestedAt:d(e.cancel_requested_at),startedAt:d(e.started_at),finishedAt:d(e.finished_at),version:Number(e.version),createdAt:String(e.created_at),updatedAt:String(e.updated_at)}}function Y(e){return{id:String(e.id),sequence:Number(e.sequence),organizationId:d(e.organization_id),projectId:d(e.project_id),operationId:d(e.operation_id),resourceId:d(e.resource_id),actorId:d(e.actor_id),correlationId:String(e.correlation_id),type:String(e.type),level:String(e.level),payload:_(e.payload),createdAt:String(e.created_at)}}function O(e){return{id:String(e.id),projectId:String(e.project_id),name:String(e.name),normalizedName:String(e.normalized_name),color:String(e.color),createdAt:String(e.created_at),updatedAt:String(e.updated_at)}}function b(e){return{id:String(e.id),actorKey:String(e.actor_key),name:String(e.name),routeId:String(e.route_id),query:_(e.query),createdAt:String(e.created_at),updatedAt:String(e.updated_at)}}function F(e){return{actorKey:String(e.actor_key),entityType:String(e.entity_type),entityId:String(e.entity_id),favorite:Number(e.favorite)===1,lastVisitedAt:String(e.last_visited_at),visitCount:Number(e.visit_count)}}function z(e){return{id:String(e.id),slug:String(e.slug),name:String(e.name),createdAt:String(e.created_at),updatedAt:String(e.updated_at)}}function B(e){let t=String(e.scope_type);return{type:t,...t==="organization"?{}:{id:String(e.scope_id)}}}function k(e){return{id:String(e.id),organizationId:String(e.organization_id),actorId:String(e.actor_id),roleTemplate:String(e.role_template),scope:B(e),source:String(e.source??"manual"),status:String(e.status),sessionVersion:Number(e.session_version),lastActiveAt:d(e.last_active_at),createdAt:String(e.created_at),updatedAt:String(e.updated_at)}}function R(e,t){let r=d(e.accepted_at),i=d(e.revoked_at),a=String(e.expires_at),E=i?"revoked":r?"accepted":a<=t?"expired":"pending";return{id:String(e.id),organizationId:String(e.organization_id),email:String(e.email),roleTemplate:String(e.role_template),scope:B(e),invitedByActorId:d(e.invited_by_actor_id),acceptedByActorId:d(e.accepted_by_actor_id),expiresAt:a,acceptedAt:r,revokedAt:i,state:E,createdAt:String(e.created_at),updatedAt:String(e.updated_at)}}function w(e){return{id:String(e.id),organizationId:String(e.organization_id),membershipId:String(e.membership_id),effect:String(e.effect),capability:String(e.capability),scope:B(e),source:String(e.source??"manual"),createdAt:String(e.created_at),updatedAt:String(e.updated_at)}}function g(e){return{type:e.type,id:e.id??null}}function le(e){return Array.from({length:e},()=>"?").join(", ")}function o(e,t,r){return e.run(t,r)}class Br{path;database;nowFn;idFn;constructor(e={}){this.path=e.path??I(e.cwd??process.cwd(),"control-plane.sqlite"),this.nowFn=e.now??(()=>new Date),this.idFn=e.id??(()=>crypto.randomUUID());let t=this.path===":memory:";if(!t){Te(ee(this.path),{recursive:!0,mode:448});try{H(ee(this.path),448)}catch{}}if(this.database=new de(this.path,{create:!0,strict:!0}),this.database.run("PRAGMA foreign_keys = ON"),this.database.run(`PRAGMA busy_timeout = ${Math.max(100,e.busyTimeoutMs??5000)}`),!t)this.database.run("PRAGMA journal_mode = WAL"),this.database.run("PRAGMA synchronous = NORMAL");if(this.migrate(),!t)this.secureDatabaseFiles()}now(){return this.nowFn().toISOString()}secureDatabaseFiles(){for(let e of[this.path,`${this.path}-wal`,`${this.path}-shm`]){if(!Z(e))continue;try{H(e,384)}catch{}}}backupTo(e){this.database.run("VACUUM INTO ?",[e]);try{H(e,384)}catch{}}migrate(){let e=this.database.query("PRAGMA user_version").get(),t=Number(e?.user_version??0);if(t>l)throw new X(t,l);if(t===l)return;let r;if(t>0&&this.path!==":memory:")r=`${this.path}.v${t}.${Date.now()}.bak`,this.backupTo(r);try{if(this.database.transaction(()=>{for(let a of K){if(a.version<=t)continue;this.database.run(a.sql),o(this.database,"INSERT INTO schema_migrations (version, name, applied_at) VALUES (?, ?, ?)",[a.version,a.name,this.now()]),this.database.run(`PRAGMA user_version = ${a.version}`)}}).exclusive(),r)this.setSetting("storage.last_backup",{path:r,createdAt:this.now(),reason:"pre-migration"})}catch(i){let a=r?` Restore from ${r}.`:"";throw Error(`Control-plane migration from schema ${t} failed.${a} ${i instanceof Error?i.message:String(i)}`)}}close(){if(this.path!==":memory:")this.secureDatabaseFiles();this.database.close()}transaction(e){return this.database.transaction(e).immediate()}createProject(e){let t=e.id??this.idFn(),r=this.now();return o(this.database,"INSERT INTO projects (id, slug, name, description, organization_id, desired_config_hash, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?)",[t,e.slug,e.name,e.description??null,e.organizationId??null,e.desiredConfigHash??null,r,r]),this.getProject(t)}getProject(e){let t=this.database.query("SELECT * FROM projects WHERE id = ?").get(e);return t?v(t):void 0}getProjectBySlug(e){let t=this.database.query("SELECT * FROM projects WHERE slug = ?").get(e);return t?v(t):void 0}listProjects(){return this.database.query("SELECT * FROM projects ORDER BY name COLLATE NOCASE, id").all().map(v)}updateProject(e,t,r){let i=this.getProject(e);if(!i||i.version!==t)throw new p("Project",e,t);if(o(this.database,`UPDATE projects SET name = ?, description = ?, organization_id = ?, desired_config_hash = ?, version = version + 1, updated_at = ?
       WHERE id = ? AND version = ?`,[r.name??i.name,r.description===null?null:r.description??i.description??null,r.organizationId===null?null:r.organizationId??i.organizationId??null,r.desiredConfigHash===null?null:r.desiredConfigHash??i.desiredConfigHash??null,this.now(),e,t]).changes!==1)throw new p("Project",e,t);return this.getProject(e)}createEnvironment(e){let t=e.id??this.idFn(),r=this.now();return o(this.database,`INSERT INTO environments (id, project_id, slug, name, kind, region, desired_state, discovered_state, created_at, updated_at)
       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,[t,e.projectId,e.slug,e.name,e.kind,e.region??null,N(e.desiredState??{}),N(e.discoveredState??{}),r,r]),D(this.database.query("SELECT * FROM environments WHERE id = ?").get(t))}listEnvironments(e){return this.database.query("SELECT * FROM environments WHERE project_id = ? ORDER BY name COLLATE NOCASE, id").all(e).map(D)}getEnvironmentBySlug(e,t){let r=this.database.query("SELECT * FROM environments WHERE project_id = ? AND slug = ?").get(e,t);return r?D(r):void 0}createResource(e){let t=e.id??this.idFn(),r=this.now();return o(this.database,`INSERT INTO resources (id, project_id, environment_id, kind, slug, name, provider, provider_id, desired_state, discovered_state, metadata, created_at, updated_at)
       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,[t,e.projectId,e.environmentId??null,e.kind,e.slug,e.name,e.provider??null,e.providerId??null,N(e.desiredState??{}),N(e.discoveredState??{}),N(e.metadata??{}),r,r]),y(this.database.query("SELECT * FROM resources WHERE id = ?").get(t))}listResources(e,t){return(t?this.database.query("SELECT * FROM resources WHERE project_id = ? AND environment_id = ? ORDER BY kind, name COLLATE NOCASE").all(e,t):this.database.query("SELECT * FROM resources WHERE project_id = ? ORDER BY kind, name COLLATE NOCASE").all(e)).map(y)}getResource(e){let t=this.database.query("SELECT * FROM resources WHERE id = ?").get(e);return t?y(t):void 0}updateResource(e,t,r){let i=this.getResource(e);if(!i||i.version!==t)throw new p("Resource",e,t);if(o(this.database,`UPDATE resources SET name = ?, provider = ?, provider_id = ?, desired_state = ?, discovered_state = ?, metadata = ?,
       version = version + 1, updated_at = ? WHERE id = ? AND version = ?`,[r.name??i.name,r.provider===null?null:r.provider??i.provider??null,r.providerId===null?null:r.providerId??i.providerId??null,N(r.desiredState??i.desiredState),N(r.discoveredState??i.discoveredState),N(r.metadata??i.metadata),this.now(),e,t]).changes!==1)throw new p("Resource",e,t);return this.getResource(e)}createActor(e){let t=e.id??this.idFn(),r=this.now();return o(this.database,"INSERT INTO actors (id, kind, external_id, display_name, metadata, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?)",[t,e.kind,e.externalId??null,e.displayName,N(e.metadata??{}),r,r]),f(this.database.query("SELECT * FROM actors WHERE id = ?").get(t))}getActorByExternalId(e,t){let r=this.database.query("SELECT * FROM actors WHERE kind = ? AND external_id = ?").get(e,t);return r?f(r):void 0}getActor(e){let t=this.database.query("SELECT * FROM actors WHERE id = ?").get(e);return t?f(t):void 0}createOrganization(e){let t=e.slug.trim().toLowerCase();if(!/^[a-z0-9][a-z0-9-]{1,62}[a-z0-9]$/.test(t))throw Error("Organization slugs must contain 3-64 lowercase letters, numbers, or dashes");let r=e.name.trim();if(!r||r.length>100)throw Error("Organization names must contain 1-100 characters");let i=e.id??this.idFn(),a=this.now();return o(this.database,"INSERT INTO organizations (id, slug, name, created_at, updated_at) VALUES (?, ?, ?, ?, ?)",[i,t,r,a,a]),this.getOrganization(i)}getOrganization(e){let t=this.database.query("SELECT * FROM organizations WHERE id = ?").get(e);return t?z(t):void 0}getOrganizationBySlug(e){let t=this.database.query("SELECT * FROM organizations WHERE slug = ?").get(e.trim().toLowerCase());return t?z(t):void 0}listOrganizations(e){return(e?this.database.query(`SELECT organizations.* FROM organizations JOIN organization_memberships ON organization_memberships.organization_id = organizations.id
           WHERE organization_memberships.actor_id = ? AND organization_memberships.status = 'active' ORDER BY organizations.name COLLATE NOCASE`).all(e):this.database.query("SELECT * FROM organizations ORDER BY name COLLATE NOCASE").all()).map(z)}normalizeAuthorizationScope(e,t={type:"organization"}){if(t.type==="organization"){if(t.id&&t.id!==e)throw Error("Organization scope does not match the requested organization");return{type:"organization"}}if(!t.id)throw Error(`${t.type} scopes require an ID`);if(!this.resolveAuthorizationTarget(e,t))throw Error("Authorization scope was not found in this organization");return{type:t.type,id:t.id}}resolveAuthorizationTarget(e,t){if(!this.getOrganization(e))return;if(t.type==="organization")return{organizationId:e};if(!t.id)return;if(t.type==="project"){let i=this.database.query("SELECT id FROM projects WHERE id = ? AND organization_id = ?").get(t.id,e);return i?{organizationId:e,projectId:String(i.id)}:void 0}if(t.type==="environment"){let i=this.database.query("SELECT environments.id, environments.project_id FROM environments JOIN projects ON projects.id = environments.project_id WHERE environments.id = ? AND projects.organization_id = ?").get(t.id,e);return i?{organizationId:e,projectId:String(i.project_id),environmentId:String(i.id)}:void 0}let r=this.database.query(`SELECT resources.id, resources.project_id, resources.environment_id FROM resources
       JOIN projects ON projects.id = resources.project_id WHERE resources.id = ? AND projects.organization_id = ?`).get(t.id,e);return r?{organizationId:e,projectId:String(r.project_id),environmentId:d(r.environment_id),resourceId:String(r.id)}:void 0}createMembership(e){if(!this.getActor(e.actorId))throw Error("Membership actor was not found");let t=this.normalizeAuthorizationScope(e.organizationId,e.scope);if(e.roleTemplate==="owner"&&t.type!=="organization")throw Error("Owners must be scoped to the organization");let r=e.id??this.idFn(),i=this.now();o(this.database,`INSERT INTO organization_memberships (id, organization_id, actor_id, role_template, scope_type, scope_id, source, created_at, updated_at)
-      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`,[r,e.organizationId,e.actorId,e.roleTemplate,t.type,t.id??null,e.source??"manual",i,i]);let a=this.getMembership(r);return this.appendEvent({organizationId:e.organizationId,actorId:e.performedByActorId,type:"organization.membership.created",payload:{membershipId:r,actorId:e.actorId,roleTemplate:e.roleTemplate,scope:U(t)}}),a}getMembership(e){let t=this.database.query("SELECT * FROM organization_memberships WHERE id = ?").get(e);return t?k(t):void 0}getMembershipForActor(e,t){let r=this.database.query("SELECT * FROM organization_memberships WHERE organization_id = ? AND actor_id = ?").get(e,t);return r?k(r):void 0}listMemberships(e,t={}){let r=t.includeRevoked?"":"AND status = 'active'";return this.database.query(`SELECT * FROM organization_memberships WHERE organization_id = ? ${r} ORDER BY created_at, id`).all(e).map(k)}updateMembership(e){let t=this.getMembership(e.id);if(!t)throw Error("Membership was not found");let r=this.normalizeAuthorizationScope(t.organizationId,e.scope??t.scope);if(e.roleTemplate==="owner"&&r.type!=="organization")throw Error("Owners must be scoped to the organization");if(t.roleTemplate==="owner"&&t.status==="active"&&(e.roleTemplate!=="owner"||r.type!=="organization"))this.assertAnotherOwner(t);return o(this.database,"UPDATE organization_memberships SET role_template = ?, scope_type = ?, scope_id = ?, session_version = session_version + 1, updated_at = ? WHERE id = ?",[e.roleTemplate,r.type,r.id??null,this.now(),t.id]),this.appendEvent({organizationId:t.organizationId,actorId:e.actorId,type:"organization.membership.updated",payload:{membershipId:t.id,from:{roleTemplate:t.roleTemplate,scope:U(t.scope)},to:{roleTemplate:e.roleTemplate,scope:U(r)}}}),this.getMembership(t.id)}revokeMembership(e,t){let r=this.getMembership(e);if(!r)throw Error("Membership was not found");if(r.status==="revoked")return r;if(r.roleTemplate==="owner")this.assertAnotherOwner(r);return o(this.database,"UPDATE organization_memberships SET status = 'revoked', session_version = session_version + 1, updated_at = ? WHERE id = ?",[this.now(),e]),this.appendEvent({organizationId:r.organizationId,actorId:t,type:"organization.membership.revoked",payload:{membershipId:e}}),this.getMembership(e)}touchMembership(e){let t=this.now();o(this.database,"UPDATE organization_memberships SET last_active_at = ?, updated_at = ? WHERE id = ? AND status = ?",[t,t,e,"active"]);let r=this.getMembership(e);if(!r)throw Error("Membership was not found");return r}assertAnotherOwner(e){if(Number(this.database.query("SELECT COUNT(*) AS count FROM organization_memberships WHERE organization_id = ? AND status = ? AND role_template = 'owner'").get(e.organizationId,"active")?.count??0)<=1)throw Error("Cannot remove or demote the last organization owner")}createInvitation(e){let t=e.email.trim().toLowerCase();if(!/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(t)||t.length>254)throw Error("A valid invitation email is required");let r=this.normalizeAuthorizationScope(e.organizationId,e.scope);if(e.roleTemplate==="owner"&&r.type!=="organization")throw Error("Owners must be scoped to the organization");let i=oe(32).toString("base64url"),a=S("sha256").update(i).digest("hex"),E=e.id??this.idFn(),T=this.now(),s=new Date(this.nowFn().getTime()+Math.min(2592000000,Math.max(60000,e.expiresInMs??604800000))).toISOString();return o(this.database,`INSERT INTO organization_invitations (id, organization_id, email, role_template, scope_type, scope_id, token_hash, invited_by_actor_id, expires_at, created_at, updated_at)
-      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,[E,e.organizationId,t,e.roleTemplate,r.type,r.id??null,a,e.invitedByActorId??null,s,T,T]),this.appendEvent({organizationId:e.organizationId,actorId:e.invitedByActorId,type:"organization.invitation.created",payload:{invitationId:E,email:t,roleTemplate:e.roleTemplate,scope:U(r),expiresAt:s}}),{invitation:this.getInvitation(E),token:i}}getInvitation(e){let t=this.database.query("SELECT * FROM organization_invitations WHERE id = ?").get(e);return t?g(t,this.now()):void 0}listInvitations(e){return this.database.query("SELECT * FROM organization_invitations WHERE organization_id = ? ORDER BY created_at DESC").all(e).map((t)=>g(t,this.now()))}inspectInvitationToken(e){let t=S("sha256").update(e).digest("hex"),r=this.database.query("SELECT * FROM organization_invitations WHERE token_hash = ?").get(t);return r?g(r,this.now()):void 0}acceptInvitation(e,t){let r=S("sha256").update(e).digest("hex");return this.transaction(()=>{let i=this.database.query("SELECT * FROM organization_invitations WHERE token_hash = ?").get(r);if(!i)throw Error("Invitation is invalid");let a=g(i,this.now());if(a.state!=="pending")throw Error(`Invitation is ${a.state}`);if(!this.getActor(t))throw Error("Invitation actor was not found");if(o(this.database,"UPDATE organization_invitations SET accepted_by_actor_id = ?, accepted_at = ?, updated_at = ? WHERE id = ? AND accepted_at IS NULL AND revoked_at IS NULL AND expires_at > ?",[t,this.now(),this.now(),a.id,this.now()]).changes!==1)throw Error("Invitation is no longer available");let T=this.getMembershipForActor(a.organizationId,t),s=T??this.createMembership({organizationId:a.organizationId,actorId:t,roleTemplate:a.roleTemplate,scope:a.scope,source:"invitation"});if(T&&a.roleTemplate==="owner"&&T.roleTemplate!=="owner")s=this.updateMembership({id:T.id,roleTemplate:"owner",scope:{type:"organization"},actorId:t});else if(T)for(let c of Cn(a.roleTemplate))this.upsertGrant({organizationId:a.organizationId,membershipId:T.id,effect:"allow",capability:c,scope:a.scope,source:"invitation"});return this.appendEvent({organizationId:a.organizationId,actorId:t,type:"organization.invitation.accepted",payload:{invitationId:a.id,membershipId:s.id}}),{invitation:this.getInvitation(a.id),membership:this.getMembership(s.id)}})}revokeInvitation(e,t){let r=this.getInvitation(e);if(!r)throw Error("Invitation was not found");if(r.acceptedAt)throw Error("Accepted invitations cannot be revoked");if(!r.revokedAt)o(this.database,"UPDATE organization_invitations SET revoked_at = ?, updated_at = ? WHERE id = ?",[this.now(),this.now(),e]);return this.appendEvent({organizationId:r.organizationId,actorId:t,type:"organization.invitation.revoked",payload:{invitationId:e}}),this.getInvitation(e)}reissueInvitation(e,t){let r=this.getInvitation(e);if(!r)throw Error("Invitation was not found");if(r.state==="accepted")throw Error("Accepted invitations cannot be reissued");return this.revokeInvitation(e,t),this.createInvitation({organizationId:r.organizationId,email:r.email,roleTemplate:r.roleTemplate,scope:r.scope,invitedByActorId:t})}upsertGrant(e){if(!ce.includes(e.capability))throw Error("Unknown authorization capability");let t=this.getMembership(e.membershipId);if(!t||t.organizationId!==e.organizationId)throw Error("Grant membership was not found in this organization");let r=this.normalizeAuthorizationScope(e.organizationId,e.scope),i=this.now(),a=this.database.query("SELECT * FROM authorization_grants WHERE membership_id = ? AND effect = ? AND capability = ? AND scope_type = ? AND scope_id IS ?").get(e.membershipId,e.effect,e.capability,r.type,r.id??null);if(a)return w(a);let E=e.id??this.idFn();return o(this.database,`INSERT INTO authorization_grants (id, organization_id, membership_id, effect, capability, scope_type, scope_id, source, created_at, updated_at)
-      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,[E,e.organizationId,e.membershipId,e.effect,e.capability,r.type,r.id??null,e.source??"manual",i,i]),o(this.database,"UPDATE organization_memberships SET session_version = session_version + 1, updated_at = ? WHERE id = ?",[i,e.membershipId]),this.appendEvent({organizationId:e.organizationId,actorId:e.actorId,type:"organization.grant.created",payload:{grantId:E,membershipId:e.membershipId,effect:e.effect,capability:e.capability,scope:U(r)}}),this.getGrant(E)}getGrant(e){let t=this.database.query("SELECT * FROM authorization_grants WHERE id = ?").get(e);return t?w(t):void 0}listGrants(e){return this.database.query("SELECT * FROM authorization_grants WHERE membership_id = ? ORDER BY effect DESC, capability, scope_type, scope_id").all(e).map(w)}removeGrant(e,t){let r=this.getGrant(e);if(!r)return!1;let i=o(this.database,"DELETE FROM authorization_grants WHERE id = ?",[e]).changes===1;if(i)o(this.database,"UPDATE organization_memberships SET session_version = session_version + 1, updated_at = ? WHERE id = ?",[this.now(),r.membershipId]),this.appendEvent({organizationId:r.organizationId,actorId:t,type:"organization.grant.removed",payload:{grantId:e,membershipId:r.membershipId}});return i}createOperation(e){if(e.idempotencyKey){let a=this.database.query("SELECT * FROM operations WHERE idempotency_key = ?").get(e.idempotencyKey);if(a)return u(a)}let t=e.id??this.idFn(),r=e.correlationId??this.idFn(),i=this.now();try{return this.transaction(()=>(o(this.database,`INSERT INTO operations (id, project_id, environment_id, resource_id, actor_id, kind, state, correlation_id, idempotency_key, input, output, priority, created_at, updated_at)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`,[r,e.organizationId,e.actorId,e.roleTemplate,t.type,t.id??null,e.source??"manual",i,i]);let a=this.getMembership(r);return this.appendEvent({organizationId:e.organizationId,actorId:e.performedByActorId,type:"organization.membership.created",payload:{membershipId:r,actorId:e.actorId,roleTemplate:e.roleTemplate,scope:g(t)}}),a}getMembership(e){let t=this.database.query("SELECT * FROM organization_memberships WHERE id = ?").get(e);return t?k(t):void 0}getMembershipForActor(e,t){let r=this.database.query("SELECT * FROM organization_memberships WHERE organization_id = ? AND actor_id = ?").get(e,t);return r?k(r):void 0}listMemberships(e,t={}){let r=t.includeRevoked?"":"AND status = 'active'";return this.database.query(`SELECT * FROM organization_memberships WHERE organization_id = ? ${r} ORDER BY created_at, id`).all(e).map(k)}updateMembership(e){let t=this.getMembership(e.id);if(!t)throw Error("Membership was not found");let r=this.normalizeAuthorizationScope(t.organizationId,e.scope??t.scope);if(e.roleTemplate==="owner"&&r.type!=="organization")throw Error("Owners must be scoped to the organization");if(t.roleTemplate==="owner"&&t.status==="active"&&(e.roleTemplate!=="owner"||r.type!=="organization"))this.assertAnotherOwner(t);return o(this.database,"UPDATE organization_memberships SET role_template = ?, scope_type = ?, scope_id = ?, session_version = session_version + 1, updated_at = ? WHERE id = ?",[e.roleTemplate,r.type,r.id??null,this.now(),t.id]),this.appendEvent({organizationId:t.organizationId,actorId:e.actorId,type:"organization.membership.updated",payload:{membershipId:t.id,from:{roleTemplate:t.roleTemplate,scope:g(t.scope)},to:{roleTemplate:e.roleTemplate,scope:g(r)}}}),this.getMembership(t.id)}revokeMembership(e,t){let r=this.getMembership(e);if(!r)throw Error("Membership was not found");if(r.status==="revoked")return r;if(r.roleTemplate==="owner")this.assertAnotherOwner(r);return o(this.database,"UPDATE organization_memberships SET status = 'revoked', session_version = session_version + 1, updated_at = ? WHERE id = ?",[this.now(),e]),this.appendEvent({organizationId:r.organizationId,actorId:t,type:"organization.membership.revoked",payload:{membershipId:e}}),this.getMembership(e)}touchMembership(e){let t=this.now();o(this.database,"UPDATE organization_memberships SET last_active_at = ?, updated_at = ? WHERE id = ? AND status = ?",[t,t,e,"active"]);let r=this.getMembership(e);if(!r)throw Error("Membership was not found");return r}assertAnotherOwner(e){if(Number(this.database.query("SELECT COUNT(*) AS count FROM organization_memberships WHERE organization_id = ? AND status = ? AND role_template = 'owner'").get(e.organizationId,"active")?.count??0)<=1)throw Error("Cannot remove or demote the last organization owner")}createInvitation(e){let t=e.email.trim().toLowerCase();if(!/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(t)||t.length>254)throw Error("A valid invitation email is required");let r=this.normalizeAuthorizationScope(e.organizationId,e.scope);if(e.roleTemplate==="owner"&&r.type!=="organization")throw Error("Owners must be scoped to the organization");let i=oe(32).toString("base64url"),a=S("sha256").update(i).digest("hex"),E=e.id??this.idFn(),T=this.now(),s=new Date(this.nowFn().getTime()+Math.min(2592000000,Math.max(60000,e.expiresInMs??604800000))).toISOString();return o(this.database,`INSERT INTO organization_invitations (id, organization_id, email, role_template, scope_type, scope_id, token_hash, invited_by_actor_id, expires_at, created_at, updated_at)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,[E,e.organizationId,t,e.roleTemplate,r.type,r.id??null,a,e.invitedByActorId??null,s,T,T]),this.appendEvent({organizationId:e.organizationId,actorId:e.invitedByActorId,type:"organization.invitation.created",payload:{invitationId:E,email:t,roleTemplate:e.roleTemplate,scope:g(r),expiresAt:s}}),{invitation:this.getInvitation(E),token:i}}getInvitation(e){let t=this.database.query("SELECT * FROM organization_invitations WHERE id = ?").get(e);return t?R(t,this.now()):void 0}listInvitations(e){return this.database.query("SELECT * FROM organization_invitations WHERE organization_id = ? ORDER BY created_at DESC").all(e).map((t)=>R(t,this.now()))}inspectInvitationToken(e){let t=S("sha256").update(e).digest("hex"),r=this.database.query("SELECT * FROM organization_invitations WHERE token_hash = ?").get(t);return r?R(r,this.now()):void 0}acceptInvitation(e,t){let r=S("sha256").update(e).digest("hex");return this.transaction(()=>{let i=this.database.query("SELECT * FROM organization_invitations WHERE token_hash = ?").get(r);if(!i)throw Error("Invitation is invalid");let a=R(i,this.now());if(a.state!=="pending")throw Error(`Invitation is ${a.state}`);if(!this.getActor(t))throw Error("Invitation actor was not found");if(o(this.database,"UPDATE organization_invitations SET accepted_by_actor_id = ?, accepted_at = ?, updated_at = ? WHERE id = ? AND accepted_at IS NULL AND revoked_at IS NULL AND expires_at > ?",[t,this.now(),this.now(),a.id,this.now()]).changes!==1)throw Error("Invitation is no longer available");let T=this.getMembershipForActor(a.organizationId,t),s=T??this.createMembership({organizationId:a.organizationId,actorId:t,roleTemplate:a.roleTemplate,scope:a.scope,source:"invitation"});if(T&&a.roleTemplate==="owner"&&T.roleTemplate!=="owner")s=this.updateMembership({id:T.id,roleTemplate:"owner",scope:{type:"organization"},actorId:t});else if(T)for(let c of Cn(a.roleTemplate))this.upsertGrant({organizationId:a.organizationId,membershipId:T.id,effect:"allow",capability:c,scope:a.scope,source:"invitation"});return this.appendEvent({organizationId:a.organizationId,actorId:t,type:"organization.invitation.accepted",payload:{invitationId:a.id,membershipId:s.id}}),{invitation:this.getInvitation(a.id),membership:this.getMembership(s.id)}})}revokeInvitation(e,t){let r=this.getInvitation(e);if(!r)throw Error("Invitation was not found");if(r.acceptedAt)throw Error("Accepted invitations cannot be revoked");if(!r.revokedAt)o(this.database,"UPDATE organization_invitations SET revoked_at = ?, updated_at = ? WHERE id = ?",[this.now(),this.now(),e]);return this.appendEvent({organizationId:r.organizationId,actorId:t,type:"organization.invitation.revoked",payload:{invitationId:e}}),this.getInvitation(e)}reissueInvitation(e,t){let r=this.getInvitation(e);if(!r)throw Error("Invitation was not found");if(r.state==="accepted")throw Error("Accepted invitations cannot be reissued");return this.revokeInvitation(e,t),this.createInvitation({organizationId:r.organizationId,email:r.email,roleTemplate:r.roleTemplate,scope:r.scope,invitedByActorId:t})}upsertGrant(e){if(!ce.includes(e.capability))throw Error("Unknown authorization capability");let t=this.getMembership(e.membershipId);if(!t||t.organizationId!==e.organizationId)throw Error("Grant membership was not found in this organization");let r=this.normalizeAuthorizationScope(e.organizationId,e.scope),i=this.now(),a=this.database.query("SELECT * FROM authorization_grants WHERE membership_id = ? AND effect = ? AND capability = ? AND scope_type = ? AND scope_id IS ?").get(e.membershipId,e.effect,e.capability,r.type,r.id??null);if(a)return w(a);let E=e.id??this.idFn();return o(this.database,`INSERT INTO authorization_grants (id, organization_id, membership_id, effect, capability, scope_type, scope_id, source, created_at, updated_at)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,[E,e.organizationId,e.membershipId,e.effect,e.capability,r.type,r.id??null,e.source??"manual",i,i]),o(this.database,"UPDATE organization_memberships SET session_version = session_version + 1, updated_at = ? WHERE id = ?",[i,e.membershipId]),this.appendEvent({organizationId:e.organizationId,actorId:e.actorId,type:"organization.grant.created",payload:{grantId:E,membershipId:e.membershipId,effect:e.effect,capability:e.capability,scope:g(r)}}),this.getGrant(E)}getGrant(e){let t=this.database.query("SELECT * FROM authorization_grants WHERE id = ?").get(e);return t?w(t):void 0}listGrants(e){return this.database.query("SELECT * FROM authorization_grants WHERE membership_id = ? ORDER BY effect DESC, capability, scope_type, scope_id").all(e).map(w)}removeGrant(e,t){let r=this.getGrant(e);if(!r)return!1;let i=o(this.database,"DELETE FROM authorization_grants WHERE id = ?",[e]).changes===1;if(i)o(this.database,"UPDATE organization_memberships SET session_version = session_version + 1, updated_at = ? WHERE id = ?",[this.now(),r.membershipId]),this.appendEvent({organizationId:r.organizationId,actorId:t,type:"organization.grant.removed",payload:{grantId:e,membershipId:r.membershipId}});return i}createOperation(e){if(e.idempotencyKey){let a=this.database.query("SELECT * FROM operations WHERE idempotency_key = ?").get(e.idempotencyKey);if(a)return u(a)}let t=e.id??this.idFn(),r=e.correlationId??this.idFn(),i=this.now();try{return this.transaction(()=>(o(this.database,`INSERT INTO operations (id, project_id, environment_id, resource_id, actor_id, kind, state, correlation_id, idempotency_key, input, output, priority, created_at, updated_at)
           VALUES (?, ?, ?, ?, ?, ?, 'queued', ?, ?, ?, '{}', ?, ?, ?)`,[t,e.projectId??null,e.environmentId??null,e.resourceId??null,e.actorId??null,e.kind,r,e.idempotencyKey??null,N(e.input??{}),e.priority??0,i,i]),this.appendEvent({projectId:e.projectId,operationId:t,resourceId:e.resourceId,actorId:e.actorId,correlationId:r,type:"operation.queued",payload:{kind:e.kind}}),this.getOperation(t)))}catch(a){if(e.idempotencyKey){let E=this.database.query("SELECT * FROM operations WHERE idempotency_key = ?").get(e.idempotencyKey);if(E)return u(E)}throw a}}getOperation(e){let t=this.database.query("SELECT * FROM operations WHERE id = ?").get(e);return t?u(t):void 0}listOperations(e={}){let t=[],r=[];if(e.projectId)t.push("project_id = ?"),r.push(e.projectId);if(e.state)t.push("state = ?"),r.push(e.state);if(e.kind)t.push("kind = ?"),r.push(e.kind);if(e.before)t.push("created_at < ?"),r.push(e.before);let i=Math.min(500,Math.max(1,e.limit??100));r.push(i);let a=t.length?`WHERE ${t.join(" AND ")}`:"";return this.database.query(`SELECT * FROM operations ${a} ORDER BY created_at DESC, id DESC LIMIT ?`).all(...r).map(u)}claimNextOperation(e,t=60000,r){let i=this.now(),a=new Date(this.nowFn().getTime()+t).toISOString();return this.transaction(()=>{let E=r?.length?`AND kind IN (${le(r.length)})`:"",T=r?[...r]:[],s=this.database.query(`SELECT * FROM operations WHERE state = 'queued' ${E} ORDER BY priority DESC, created_at ASC, id ASC LIMIT 1`).get(...T);if(!s)return;let c=u(s);if(o(this.database,`UPDATE operations SET state = 'running', attempt = attempt + 1, lease_owner = ?, lease_expires_at = ?,
         started_at = COALESCE(started_at, ?), updated_at = ?, version = version + 1 WHERE id = ? AND state = 'queued' AND version = ?`,[e,a,i,i,c.id,c.version]).changes!==1)return;return this.appendEvent({projectId:c.projectId,operationId:c.id,resourceId:c.resourceId,actorId:c.actorId,correlationId:c.correlationId,type:"operation.running",payload:{attempt:c.attempt+1,workerId:e}}),this.getOperation(c.id)})}claimOperation(e,t,r=60000){let i=this.now(),a=new Date(this.nowFn().getTime()+r).toISOString();return this.transaction(()=>{let E=this.getOperation(e);if(!E||E.state!=="queued")return;if(o(this.database,`UPDATE operations SET state = 'running', attempt = attempt + 1, lease_owner = ?, lease_expires_at = ?,
         started_at = COALESCE(started_at, ?), updated_at = ?, version = version + 1 WHERE id = ? AND state = 'queued' AND version = ?`,[t,a,i,i,E.id,E.version]).changes!==1)return;return this.appendEvent({projectId:E.projectId,operationId:E.id,resourceId:E.resourceId,actorId:E.actorId,correlationId:E.correlationId,type:"operation.running",payload:{attempt:E.attempt+1,workerId:t}}),this.getOperation(E.id)})}transitionOperation(e,t){return this.transaction(()=>{let r=this.getOperation(e);if(!r)throw Error(`Operation ${e} was not found`);let i=t.expectedVersion??r.version;if(r.version!==i)throw new p("Operation",e,i);if(!Le[r.state].includes(t.to))throw new x(r.state,t.to);let a=this.now(),E=Ne.includes(t.to),T=t.to==="queued";if(o(this.database,`UPDATE operations SET state = ?, output = ?, error = ?, lease_owner = ?, lease_expires_at = ?,
@@ -1494,7 +1494,7 @@ import{R}from"./chunk-27t4ve22.js";var l=40,K=[{version:1,name:"core_control_pla
       ON CONFLICT(key) DO UPDATE SET value = excluded.value, updated_at = excluded.updated_at`,[e,N(t),this.now()])}getSetting(e){let t=this.database.query("SELECT value FROM settings WHERE key = ?").get(e);return t?_(t.value):void 0}upsertTag(e,t,r="#5a8be0"){let i=t.trim().toLowerCase().replace(/\s+/g,"-");if(!/^[a-z0-9][a-z0-9-]{0,31}$/.test(i))throw Error("Tag names must contain 1-32 letters, numbers, or dashes");if(!/^#[0-9a-f]{6}$/i.test(r))throw Error("Tag colors must be six-digit hex colors");let a=this.now(),E=this.database.query("SELECT * FROM tags WHERE project_id = ? AND normalized_name = ?").get(e,i);if(E)return o(this.database,"UPDATE tags SET name = ?, color = ?, updated_at = ? WHERE id = ?",[t.trim(),r.toLowerCase(),a,String(E.id)]),O(this.database.query("SELECT * FROM tags WHERE id = ?").get(String(E.id)));let T=this.idFn();return o(this.database,"INSERT INTO tags (id, project_id, name, normalized_name, color, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?)",[T,e,t.trim(),i,r.toLowerCase(),a,a]),O(this.database.query("SELECT * FROM tags WHERE id = ?").get(T))}listTags(e){return this.database.query("SELECT * FROM tags WHERE project_id = ? ORDER BY normalized_name").all(e).map(O)}assignTag(e,t){if(!this.database.query("SELECT tags.id FROM tags JOIN resources ON resources.project_id = tags.project_id WHERE tags.id = ? AND resources.id = ?").get(t,e))throw Error("The tag and resource must belong to the same project");o(this.database,"INSERT OR IGNORE INTO resource_tags (resource_id, tag_id, created_at) VALUES (?, ?, ?)",[e,t,this.now()])}removeTag(e,t){o(this.database,"DELETE FROM resource_tags WHERE resource_id = ? AND tag_id = ?",[e,t])}listResourceTags(e){return this.database.query(`SELECT resource_tags.resource_id, tags.* FROM resource_tags JOIN tags ON tags.id = resource_tags.tag_id
       WHERE tags.project_id = ? ORDER BY tags.normalized_name`).all(e).map((r)=>({resourceId:String(r.resource_id),tag:O(r)}))}saveFilter(e,t,r,i){let a=t.trim();if(!a||a.length>64)throw Error("Saved filter names must contain 1-64 characters");if(!r||r.length>160||/^[a-z][a-z0-9+.-]*:|^\/\//i.test(r))throw Error("Saved filter routes must be local route IDs or paths");let E=N(i);if(E.length>8192)throw Error("Saved filter queries must be smaller than 8 KB");let T=this.database.query("SELECT * FROM saved_filters WHERE actor_key = ? AND name = ?").get(e,a),s=this.now();if(T)return o(this.database,"UPDATE saved_filters SET route_id = ?, query = ?, updated_at = ? WHERE id = ?",[r,E,s,String(T.id)]),b(this.database.query("SELECT * FROM saved_filters WHERE id = ?").get(String(T.id)));let c=this.idFn();return o(this.database,"INSERT INTO saved_filters (id, actor_key, name, route_id, query, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?)",[c,e,a,r,E,s,s]),b(this.database.query("SELECT * FROM saved_filters WHERE id = ?").get(c))}listSavedFilters(e){return this.database.query("SELECT * FROM saved_filters WHERE actor_key = ? ORDER BY updated_at DESC, name").all(e).map(b)}deleteSavedFilter(e,t){return o(this.database,"DELETE FROM saved_filters WHERE actor_key = ? AND id = ?",[e,t]).changes===1}recordNavigation(e,t,r){let i=this.now();return o(this.database,`INSERT INTO navigation_items (actor_key, entity_type, entity_id, last_visited_at) VALUES (?, ?, ?, ?)
       ON CONFLICT(actor_key, entity_type, entity_id) DO UPDATE SET last_visited_at = excluded.last_visited_at, visit_count = visit_count + 1`,[e,t,r,i]),F(this.database.query("SELECT * FROM navigation_items WHERE actor_key = ? AND entity_type = ? AND entity_id = ?").get(e,t,r))}setFavorite(e,t,r,i){let a=this.now();return o(this.database,`INSERT INTO navigation_items (actor_key, entity_type, entity_id, favorite, last_visited_at) VALUES (?, ?, ?, ?, ?)
-      ON CONFLICT(actor_key, entity_type, entity_id) DO UPDATE SET favorite = excluded.favorite`,[e,t,r,i?1:0,a]),F(this.database.query("SELECT * FROM navigation_items WHERE actor_key = ? AND entity_type = ? AND entity_id = ?").get(e,t,r))}listNavigation(e,t={}){let r=t.favoritesOnly?"AND favorite = 1":"",i=Math.min(100,Math.max(1,t.limit??20));return this.database.query(`SELECT * FROM navigation_items WHERE actor_key = ? ${r} ORDER BY favorite DESC, last_visited_at DESC LIMIT ?`).all(e,i).map(F)}compact(e={}){let t=new Date(this.nowFn().getTime()-(e.eventRetentionDays??90)*86400000).toISOString(),r=new Date(this.nowFn().getTime()-(e.operationRetentionDays??365)*86400000).toISOString(),i=this.transaction(()=>{let a=o(this.database,"DELETE FROM events WHERE created_at < ?",[t]).changes,E=o(this.database,"DELETE FROM operations WHERE created_at < ? AND state IN ('succeeded', 'failed', 'cancelled', 'timed_out')",[r]).changes;return{events:a,operations:E}});if(e.vacuum!==!1)this.database.run("VACUUM");return{deletedEvents:i.events,deletedOperations:i.operations,vacuumed:e.vacuum!==!1}}createBackup(e="manual"){if(this.path===":memory:")throw Error("Cannot create a filesystem backup for an in-memory control plane");let t=`${this.path}.${Date.now()}.bak`;return this.backupTo(t),this.setSetting("storage.last_backup",{path:t,createdAt:this.now(),reason:e}),t}integrityCheck(){let e=this.database.query("PRAGMA integrity_check").all();return e.length===1&&Object.values(e[0])[0]==="ok"?"ok":"corrupt"}health(){let e=Object.fromEntries(["queued","running","succeeded","failed","cancelled","timed_out"].map((a)=>[a,0]));for(let a of this.database.query("SELECT state, COUNT(*) AS count FROM operations GROUP BY state").all())e[String(a.state)]=Number(a.count);let t=this.database.query("PRAGMA journal_mode").get(),r=this.getSetting("storage.last_backup"),i=r&&!Array.isArray(r)&&typeof r==="object"&&typeof r.createdAt==="string"?r.createdAt:void 0;return{path:this.path,schemaVersion:Number(this.database.query("PRAGMA user_version").get()?.user_version??0),supportedSchemaVersion:l,integrity:this.integrityCheck(),journalMode:String(t?.journal_mode??"unknown"),databaseBytes:this.path!==":memory:"&&Z(this.path)?se(this.path).size:this.database.serialize().byteLength,lastBackupAt:i,operations:e,pendingRetryableOperations:e.queued+e.failed+e.timed_out}}exportSnapshot(){let e={};for(let t of this.database.query("SELECT key, value FROM settings ORDER BY key").all())e[String(t.key)]=_(t.value);return{format:"ts-cloud-control-plane",schemaVersion:l,exportedAt:this.now(),organizations:this.database.query("SELECT * FROM organizations ORDER BY id").all().map(z),memberships:this.database.query("SELECT * FROM organization_memberships ORDER BY id").all().map(k),invitations:this.database.query("SELECT * FROM organization_invitations ORDER BY id").all().map((t)=>({...g(t,this.now()),tokenHash:String(t.token_hash)})),grants:this.database.query("SELECT * FROM authorization_grants ORDER BY id").all().map(w),projects:this.database.query("SELECT * FROM projects ORDER BY id").all().map(v),environments:this.database.query("SELECT * FROM environments ORDER BY id").all().map(D),resources:this.database.query("SELECT * FROM resources ORDER BY id").all().map(y),actors:this.database.query("SELECT * FROM actors ORDER BY id").all().map(f),operations:this.database.query("SELECT * FROM operations ORDER BY id").all().map(u),events:this.database.query("SELECT * FROM events ORDER BY sequence").all().map(Y),settings:e,tags:this.database.query("SELECT * FROM tags ORDER BY id").all().map(O),resourceTags:this.database.query("SELECT * FROM resource_tags ORDER BY resource_id, tag_id").all().map((t)=>({resourceId:String(t.resource_id),tagId:String(t.tag_id),createdAt:String(t.created_at)})),savedFilters:this.database.query("SELECT * FROM saved_filters ORDER BY id").all().map(b),navigationItems:this.database.query("SELECT * FROM navigation_items ORDER BY actor_key, entity_type, entity_id").all().map(F)}}importSnapshot(e,t={}){if(e.format!=="ts-cloud-control-plane")throw Error("Unsupported control-plane snapshot format");if(e.schemaVersion>l)throw new I(e.schemaVersion,l);this.transaction(()=>{if((Number(this.database.query("SELECT COUNT(*) AS count FROM projects").get()?.count??0)>0||Number(this.database.query("SELECT COUNT(*) AS count FROM operations").get()?.count??0)>0)&&!t.replace)throw Error("Control plane is not empty; pass replace: true to import this snapshot");if(t.replace)this.database.run("DELETE FROM authorization_grants"),this.database.run("DELETE FROM organization_invitations"),this.database.run("DELETE FROM organization_memberships"),this.database.run("DELETE FROM resource_tags"),this.database.run("DELETE FROM tags"),this.database.run("DELETE FROM saved_filters"),this.database.run("DELETE FROM navigation_items"),this.database.run("DELETE FROM events"),this.database.run("DELETE FROM operations"),this.database.run("DELETE FROM resources"),this.database.run("DELETE FROM environments"),this.database.run("DELETE FROM projects"),this.database.run("DELETE FROM actors"),this.database.run("DELETE FROM organizations"),this.database.run("DELETE FROM settings");for(let i of e.organizations??[])o(this.database,"INSERT INTO organizations (id, slug, name, created_at, updated_at) VALUES (?, ?, ?, ?, ?)",[i.id,i.slug,i.name,i.createdAt,i.updatedAt]);for(let i of e.projects)o(this.database,`INSERT INTO projects (id, slug, name, description, organization_id, desired_config_hash, version, created_at, updated_at)
+      ON CONFLICT(actor_key, entity_type, entity_id) DO UPDATE SET favorite = excluded.favorite`,[e,t,r,i?1:0,a]),F(this.database.query("SELECT * FROM navigation_items WHERE actor_key = ? AND entity_type = ? AND entity_id = ?").get(e,t,r))}listNavigation(e,t={}){let r=t.favoritesOnly?"AND favorite = 1":"",i=Math.min(100,Math.max(1,t.limit??20));return this.database.query(`SELECT * FROM navigation_items WHERE actor_key = ? ${r} ORDER BY favorite DESC, last_visited_at DESC LIMIT ?`).all(e,i).map(F)}compact(e={}){let t=new Date(this.nowFn().getTime()-(e.eventRetentionDays??90)*86400000).toISOString(),r=new Date(this.nowFn().getTime()-(e.operationRetentionDays??365)*86400000).toISOString(),i=this.transaction(()=>{let a=o(this.database,"DELETE FROM events WHERE created_at < ?",[t]).changes,E=o(this.database,"DELETE FROM operations WHERE created_at < ? AND state IN ('succeeded', 'failed', 'cancelled', 'timed_out')",[r]).changes;return{events:a,operations:E}});if(e.vacuum!==!1)this.database.run("VACUUM");return{deletedEvents:i.events,deletedOperations:i.operations,vacuumed:e.vacuum!==!1}}createBackup(e="manual"){if(this.path===":memory:")throw Error("Cannot create a filesystem backup for an in-memory control plane");let t=`${this.path}.${Date.now()}.bak`;return this.backupTo(t),this.setSetting("storage.last_backup",{path:t,createdAt:this.now(),reason:e}),t}integrityCheck(){let e=this.database.query("PRAGMA integrity_check").all();return e.length===1&&Object.values(e[0])[0]==="ok"?"ok":"corrupt"}health(){let e=Object.fromEntries(["queued","running","succeeded","failed","cancelled","timed_out"].map((a)=>[a,0]));for(let a of this.database.query("SELECT state, COUNT(*) AS count FROM operations GROUP BY state").all())e[String(a.state)]=Number(a.count);let t=this.database.query("PRAGMA journal_mode").get(),r=this.getSetting("storage.last_backup"),i=r&&!Array.isArray(r)&&typeof r==="object"&&typeof r.createdAt==="string"?r.createdAt:void 0;return{path:this.path,schemaVersion:Number(this.database.query("PRAGMA user_version").get()?.user_version??0),supportedSchemaVersion:l,integrity:this.integrityCheck(),journalMode:String(t?.journal_mode??"unknown"),databaseBytes:this.path!==":memory:"&&Z(this.path)?se(this.path).size:this.database.serialize().byteLength,lastBackupAt:i,operations:e,pendingRetryableOperations:e.queued+e.failed+e.timed_out}}exportSnapshot(){let e={};for(let t of this.database.query("SELECT key, value FROM settings ORDER BY key").all())e[String(t.key)]=_(t.value);return{format:"ts-cloud-control-plane",schemaVersion:l,exportedAt:this.now(),organizations:this.database.query("SELECT * FROM organizations ORDER BY id").all().map(z),memberships:this.database.query("SELECT * FROM organization_memberships ORDER BY id").all().map(k),invitations:this.database.query("SELECT * FROM organization_invitations ORDER BY id").all().map((t)=>({...R(t,this.now()),tokenHash:String(t.token_hash)})),grants:this.database.query("SELECT * FROM authorization_grants ORDER BY id").all().map(w),projects:this.database.query("SELECT * FROM projects ORDER BY id").all().map(v),environments:this.database.query("SELECT * FROM environments ORDER BY id").all().map(D),resources:this.database.query("SELECT * FROM resources ORDER BY id").all().map(y),actors:this.database.query("SELECT * FROM actors ORDER BY id").all().map(f),operations:this.database.query("SELECT * FROM operations ORDER BY id").all().map(u),events:this.database.query("SELECT * FROM events ORDER BY sequence").all().map(Y),settings:e,tags:this.database.query("SELECT * FROM tags ORDER BY id").all().map(O),resourceTags:this.database.query("SELECT * FROM resource_tags ORDER BY resource_id, tag_id").all().map((t)=>({resourceId:String(t.resource_id),tagId:String(t.tag_id),createdAt:String(t.created_at)})),savedFilters:this.database.query("SELECT * FROM saved_filters ORDER BY id").all().map(b),navigationItems:this.database.query("SELECT * FROM navigation_items ORDER BY actor_key, entity_type, entity_id").all().map(F)}}importSnapshot(e,t={}){if(e.format!=="ts-cloud-control-plane")throw Error("Unsupported control-plane snapshot format");if(e.schemaVersion>l)throw new X(e.schemaVersion,l);this.transaction(()=>{if((Number(this.database.query("SELECT COUNT(*) AS count FROM projects").get()?.count??0)>0||Number(this.database.query("SELECT COUNT(*) AS count FROM operations").get()?.count??0)>0)&&!t.replace)throw Error("Control plane is not empty; pass replace: true to import this snapshot");if(t.replace)this.database.run("DELETE FROM authorization_grants"),this.database.run("DELETE FROM organization_invitations"),this.database.run("DELETE FROM organization_memberships"),this.database.run("DELETE FROM resource_tags"),this.database.run("DELETE FROM tags"),this.database.run("DELETE FROM saved_filters"),this.database.run("DELETE FROM navigation_items"),this.database.run("DELETE FROM events"),this.database.run("DELETE FROM operations"),this.database.run("DELETE FROM resources"),this.database.run("DELETE FROM environments"),this.database.run("DELETE FROM projects"),this.database.run("DELETE FROM actors"),this.database.run("DELETE FROM organizations"),this.database.run("DELETE FROM settings");for(let i of e.organizations??[])o(this.database,"INSERT INTO organizations (id, slug, name, created_at, updated_at) VALUES (?, ?, ?, ?, ?)",[i.id,i.slug,i.name,i.createdAt,i.updatedAt]);for(let i of e.projects)o(this.database,`INSERT INTO projects (id, slug, name, description, organization_id, desired_config_hash, version, created_at, updated_at)
           VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`,[i.id,i.slug,i.name,i.description??null,i.organizationId??null,i.desiredConfigHash??null,i.version,i.createdAt,i.updatedAt]);for(let i of e.environments)o(this.database,`INSERT INTO environments (id, project_id, slug, name, kind, region, desired_state, discovered_state, version, created_at, updated_at)
           VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,[i.id,i.projectId,i.slug,i.name,i.kind,i.region??null,N(i.desiredState),N(i.discoveredState),i.version,i.createdAt,i.updatedAt]);for(let i of e.resources)o(this.database,`INSERT INTO resources (id, project_id, environment_id, kind, slug, name, provider, provider_id, desired_state, discovered_state, metadata, version, created_at, updated_at)
           VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,[i.id,i.projectId,i.environmentId??null,i.kind,i.slug,i.name,i.provider??null,i.providerId??null,N(i.desiredState),N(i.discoveredState),N(i.metadata),i.version,i.createdAt,i.updatedAt]);for(let i of e.actors)o(this.database,`INSERT INTO actors (id, kind, external_id, display_name, metadata, disabled_at, version, created_at, updated_at)
@@ -1504,4 +1504,4 @@ import{R}from"./chunk-27t4ve22.js";var l=40,K=[{version:1,name:"core_control_pla
           VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,[i.id,i.organizationId,i.membershipId,i.effect,i.capability,i.scope.type,i.scope.id??null,i.source??"manual",i.createdAt,i.updatedAt]);for(let i of e.operations)o(this.database,`INSERT INTO operations (id, project_id, environment_id, resource_id, actor_id, kind, state, correlation_id, idempotency_key,
           input, output, error, attempt, priority, lease_owner, lease_expires_at, cancel_requested_at, started_at, finished_at, version, created_at, updated_at)
           VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,[i.id,i.projectId??null,i.environmentId??null,i.resourceId??null,i.actorId??null,i.kind,i.state,i.correlationId,i.idempotencyKey??null,N(i.input),N(i.output),M(i.error)??null,i.attempt,i.priority,i.leaseOwner??null,i.leaseExpiresAt??null,i.cancelRequestedAt??null,i.startedAt??null,i.finishedAt??null,i.version,i.createdAt,i.updatedAt]);for(let i of e.events)o(this.database,`INSERT INTO events (sequence, id, organization_id, project_id, operation_id, resource_id, actor_id, correlation_id, type, level, payload, created_at)
-          VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,[i.sequence,i.id,i.organizationId??null,i.projectId??null,i.operationId??null,i.resourceId??null,i.actorId??null,i.correlationId,i.type,i.level,N(i.payload),i.createdAt]);for(let[i,a]of Object.entries(e.settings))o(this.database,"INSERT INTO settings (key, value, updated_at) VALUES (?, ?, ?)",[i,N(a),this.now()]);for(let i of e.tags??[])o(this.database,"INSERT INTO tags (id, project_id, name, normalized_name, color, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?)",[i.id,i.projectId,i.name,i.normalizedName,i.color,i.createdAt,i.updatedAt]);for(let i of e.resourceTags??[])o(this.database,"INSERT INTO resource_tags (resource_id, tag_id, created_at) VALUES (?, ?, ?)",[i.resourceId,i.tagId,i.createdAt]);for(let i of e.savedFilters??[])o(this.database,"INSERT INTO saved_filters (id, actor_key, name, route_id, query, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?)",[i.id,i.actorKey,i.name,i.routeId,N(i.query),i.createdAt,i.updatedAt]);for(let i of e.navigationItems??[])o(this.database,"INSERT INTO navigation_items (actor_key, entity_type, entity_id, favorite, last_visited_at, visit_count) VALUES (?, ?, ?, ?, ?, ?)",[i.actorKey,i.entityType,i.entityId,i.favorite?1:0,i.lastVisitedAt,i.visitCount])})}}var pe=new Set(["domain","domains","hostname","hostnames","url","repository","repo","image","label","labels"]),ue=new Set(["sha","commit","commitsha","release","releaseid"]);function ae(e,t){if(!e||typeof e!=="object"||Array.isArray(e))return[];let r=[];for(let[i,a]of Object.entries(e)){if(!t.has(i.toLowerCase()))continue;if(typeof a==="string")r.push(a);else if(Array.isArray(a))r.push(...a.filter((E)=>typeof E==="string"))}return r}function Q(e){return e.toLowerCase().trim().replace(/[^a-z0-9._:/@-]+/g," ")}function W(e,t,r){let i=Q(e),a=Q(t),E=Q(r);if(!i)return 0;if(a===i)return 1000;if(a.startsWith(i))return 800-Math.min(100,a.length-i.length);if(a.includes(i))return 650-Math.min(100,a.indexOf(i));let T=i.split(/\s+/).filter(Boolean);if(T.every((c)=>E.includes(c)))return 400+T.length*10;let s=0;for(let c of i){if(s=E.indexOf(c,s),s<0)return 0;s++}return Math.max(1,180-Math.floor(E.length/20))}function Ce(e,t){let r=e.kind.toLowerCase();if(r==="server"||r==="compute")return{type:"server",href:`/server/metrics?env=${encodeURIComponent(t)}`};if(r.includes("database")||["mysql","postgres","postgresql","sqlite","redis"].includes(r))return{type:"database",href:`/server/database?env=${encodeURIComponent(t)}&database=${encodeURIComponent(e.slug)}`};return{type:"service",href:`/server/sites?env=${encodeURIComponent(t)}&service=${encodeURIComponent(e.slug)}`}}function la(e,t){let r=e.getProject(t.projectId);if(!r)return[];let i=e.listEnvironments(r.id),a=new Map(i.map((n)=>[n.id,n])),E=e.listResourceTags(r.id),T=new Map;for(let n of E){let L=T.get(n.resourceId)??[];L.push({id:n.tag.id,name:n.tag.name,color:n.tag.color}),T.set(n.resourceId,L)}let s=[],c=t.allowedResourceSlugs!==void 0;if(!c){s.push({type:"project",id:r.id,title:r.name,subtitle:r.slug,href:`/?project=${encodeURIComponent(r.slug)}`,tags:[],score:0});for(let n of i)s.push({type:"environment",id:n.id,title:n.name,subtitle:`${r.name} · ${n.kind}`,href:`/?env=${encodeURIComponent(n.slug)}`,environment:n.slug,tags:[],score:0})}let V=e.listResources(r.id).filter((n)=>!t.allowedResourceSlugs||t.allowedResourceSlugs.has(n.slug));for(let n of V){let L=n.environmentId?a.get(n.environmentId):void 0,C=T.get(n.id)??[],A=ae(n.desiredState,pe),m=[n.name,n.slug,n.kind,n.provider,n.providerId,L?.slug,...A,...C.map((ne)=>ne.name)].filter(Boolean).join(" "),X=Ce(n,L?.slug??i[0]?.slug??"");s.push({type:X.type,id:n.id,title:n.name,subtitle:[n.kind,...A.slice(0,2)].join(" · "),href:X.href,environment:L?.slug,provider:n.provider,tags:C,score:W(t.query,n.name,m)})}if(!c)for(let n of e.listOperations({projectId:r.id,limit:500})){let L=n.environmentId?a.get(n.environmentId):void 0,C=ae(n.input,ue),A=n.kind.includes("deploy"),m=C[0]??n.kind,X=[n.kind,n.id,n.correlationId,n.state,...C].join(" ");s.push({type:A?"deployment":"operation",id:n.id,title:m,subtitle:`${n.kind} · ${n.state}`,href:`/server/activity?env=${encodeURIComponent(L?.slug??i[0]?.slug??"")}&operation=${encodeURIComponent(n.id)}`,environment:L?.slug,status:n.state,tags:[],score:W(t.query,m,X)})}for(let n of s)if(n.score===0)n.score=W(t.query,n.title,`${n.title} ${n.subtitle} ${n.environment??""} ${n.provider??""}`);let J={service:0,server:1,database:2,deployment:3,environment:4,project:5,operation:6};return s.filter((n)=>n.score>0).sort((n,L)=>L.score-n.score||J[n.type]-J[L.type]||n.title.localeCompare(L.title)||n.id.localeCompare(L.id)).slice(0,Math.min(50,Math.max(1,t.limit??20)))}export{ce,Cn,re,Tn,h,Br,la};
+          VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,[i.sequence,i.id,i.organizationId??null,i.projectId??null,i.operationId??null,i.resourceId??null,i.actorId??null,i.correlationId,i.type,i.level,N(i.payload),i.createdAt]);for(let[i,a]of Object.entries(e.settings))o(this.database,"INSERT INTO settings (key, value, updated_at) VALUES (?, ?, ?)",[i,N(a),this.now()]);for(let i of e.tags??[])o(this.database,"INSERT INTO tags (id, project_id, name, normalized_name, color, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?)",[i.id,i.projectId,i.name,i.normalizedName,i.color,i.createdAt,i.updatedAt]);for(let i of e.resourceTags??[])o(this.database,"INSERT INTO resource_tags (resource_id, tag_id, created_at) VALUES (?, ?, ?)",[i.resourceId,i.tagId,i.createdAt]);for(let i of e.savedFilters??[])o(this.database,"INSERT INTO saved_filters (id, actor_key, name, route_id, query, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?)",[i.id,i.actorKey,i.name,i.routeId,N(i.query),i.createdAt,i.updatedAt]);for(let i of e.navigationItems??[])o(this.database,"INSERT INTO navigation_items (actor_key, entity_type, entity_id, favorite, last_visited_at, visit_count) VALUES (?, ?, ?, ?, ?, ?)",[i.actorKey,i.entityType,i.entityId,i.favorite?1:0,i.lastVisitedAt,i.visitCount])})}}var pe=new Set(["domain","domains","hostname","hostnames","url","repository","repo","image","label","labels"]),ue=new Set(["sha","commit","commitsha","release","releaseid"]);function ae(e,t){if(!e||typeof e!=="object"||Array.isArray(e))return[];let r=[];for(let[i,a]of Object.entries(e)){if(!t.has(i.toLowerCase()))continue;if(typeof a==="string")r.push(a);else if(Array.isArray(a))r.push(...a.filter((E)=>typeof E==="string"))}return r}function Q(e){return e.toLowerCase().trim().replace(/[^a-z0-9._:/@-]+/g," ")}function W(e,t,r){let i=Q(e),a=Q(t),E=Q(r);if(!i)return 0;if(a===i)return 1000;if(a.startsWith(i))return 800-Math.min(100,a.length-i.length);if(a.includes(i))return 650-Math.min(100,a.indexOf(i));let T=i.split(/\s+/).filter(Boolean);if(T.every((c)=>E.includes(c)))return 400+T.length*10;let s=0;for(let c of i){if(s=E.indexOf(c,s),s<0)return 0;s++}return Math.max(1,180-Math.floor(E.length/20))}function Ce(e,t){let r=e.kind.toLowerCase();if(r==="server"||r==="compute")return{type:"server",href:`/server/metrics?env=${encodeURIComponent(t)}`};if(r.includes("database")||["mysql","postgres","postgresql","sqlite","redis"].includes(r))return{type:"database",href:`/server/database?env=${encodeURIComponent(t)}&database=${encodeURIComponent(e.slug)}`};return{type:"service",href:`/server/sites?env=${encodeURIComponent(t)}&service=${encodeURIComponent(e.slug)}`}}function la(e,t){let r=e.getProject(t.projectId);if(!r)return[];let i=e.listEnvironments(r.id),a=new Map(i.map((n)=>[n.id,n])),E=e.listResourceTags(r.id),T=new Map;for(let n of E){let L=T.get(n.resourceId)??[];L.push({id:n.tag.id,name:n.tag.name,color:n.tag.color}),T.set(n.resourceId,L)}let s=[],c=t.allowedResourceSlugs!==void 0;if(!c){s.push({type:"project",id:r.id,title:r.name,subtitle:r.slug,href:`/?project=${encodeURIComponent(r.slug)}`,tags:[],score:0});for(let n of i)s.push({type:"environment",id:n.id,title:n.name,subtitle:`${r.name} · ${n.kind}`,href:`/?env=${encodeURIComponent(n.slug)}`,environment:n.slug,tags:[],score:0})}let V=e.listResources(r.id).filter((n)=>!t.allowedResourceSlugs||t.allowedResourceSlugs.has(n.slug));for(let n of V){let L=n.environmentId?a.get(n.environmentId):void 0,C=T.get(n.id)??[],U=ae(n.desiredState,pe),A=[n.name,n.slug,n.kind,n.provider,n.providerId,L?.slug,...U,...C.map((ne)=>ne.name)].filter(Boolean).join(" "),m=Ce(n,L?.slug??i[0]?.slug??"");s.push({type:m.type,id:n.id,title:n.name,subtitle:[n.kind,...U.slice(0,2)].join(" · "),href:m.href,environment:L?.slug,provider:n.provider,tags:C,score:W(t.query,n.name,A)})}if(!c)for(let n of e.listOperations({projectId:r.id,limit:500})){let L=n.environmentId?a.get(n.environmentId):void 0,C=ae(n.input,ue),U=n.kind.includes("deploy"),A=C[0]??n.kind,m=[n.kind,n.id,n.correlationId,n.state,...C].join(" ");s.push({type:U?"deployment":"operation",id:n.id,title:A,subtitle:`${n.kind} · ${n.state}`,href:`/server/activity?env=${encodeURIComponent(L?.slug??i[0]?.slug??"")}&operation=${encodeURIComponent(n.id)}`,environment:L?.slug,status:n.state,tags:[],score:W(t.query,A,m)})}for(let n of s)if(n.score===0)n.score=W(t.query,n.title,`${n.title} ${n.subtitle} ${n.environment??""} ${n.provider??""}`);let J={service:0,server:1,database:2,deployment:3,environment:4,project:5,operation:6};return s.filter((n)=>n.score>0).sort((n,L)=>L.score-n.score||J[n.type]-J[L.type]||n.title.localeCompare(L.title)||n.id.localeCompare(L.id)).slice(0,Math.min(50,Math.max(1,t.limit??20)))}export{ce,Cn,re,Tn,h,Br,la};

package/dist/bin/{chunk-gsp1secn.js → chunk-6gspchrt.js}

@@ -1,4 +1,4 @@
-import{U}from"./chunk-27t4ve22.js";import"./chunk-bgjvxdds.js";function g(t){let e=t.sites||{};for(let r of Object.values(e))if(r?.repository?.url)return{provider:r.repository.provider,branch:r.repository.branch};return}function m(t){let e=t.trim().toLowerCase();if(e.includes("github.com"))return"github";if(e.includes("gitlab.com"))return"gitlab";if(e.includes("bitbucket.org"))return"bitbucket";return}function a(t){return`'${t.replace(/'/g,"'\\''")}'`}function E(t){return t.replace(/'/g,"''")}function _(t,e){let r=["bunx --bun @stacksjs/ts-cloud deploy","--env",a(t)];if(e.site)r.push("--site",a(e.site));if(e.skipDnsVerification)r.push("--skip-dns-verification");return r.push("--yes"),r.join(" ")}function v(t,e="production",r={}){let l=g(t),n=r.provider||l?.provider;if(n!=="github"&&n!=="gitlab"&&n!=="bitbucket")return null;let i=t.environments?.[e],s=i?.deployBranch||l?.branch||"main",u=_(e,r),c=JSON.stringify(s),d=JSON.stringify(e),p=i?.domain?i.domain.startsWith("http")?i.domain:`https://${i.domain}`:void 0,f=p?`
+import{U}from"./chunk-gghy8mb4.js";import"./chunk-bgjvxdds.js";function g(t){let e=t.sites||{};for(let r of Object.values(e))if(r?.repository?.url)return{provider:r.repository.provider,branch:r.repository.branch};return}function m(t){let e=t.trim().toLowerCase();if(e.includes("github.com"))return"github";if(e.includes("gitlab.com"))return"gitlab";if(e.includes("bitbucket.org"))return"bitbucket";return}function a(t){return`'${t.replace(/'/g,"'\\''")}'`}function E(t){return t.replace(/'/g,"''")}function _(t,e){let r=["bunx --bun @stacksjs/ts-cloud deploy","--env",a(t)];if(e.site)r.push("--site",a(e.site));if(e.skipDnsVerification)r.push("--skip-dns-verification");return r.push("--yes"),r.join(" ")}function v(t,e="production",r={}){let l=g(t),n=r.provider||l?.provider;if(n!=="github"&&n!=="gitlab"&&n!=="bitbucket")return null;let i=t.environments?.[e],s=i?.deployBranch||l?.branch||"main",u=_(e,r),c=JSON.stringify(s),d=JSON.stringify(e),p=i?.domain?i.domain.startsWith("http")?i.domain:`https://${i.domain}`:void 0,f=p?`
       url: ${JSON.stringify(p)}`:"",h=r.setup==="pantry"?`      - name: Setup Pantry
         uses: home-lang/pantry/packages/action@main`:`      - uses: oven-sh/setup-bun@v2
       - run: bun install --frozen-lockfile`,y=U(t)==="hetzner"&&!!t.infrastructure?.compute,o=r.sshPrivateKeySecret||"SSH_PRIVATE_KEY";if(!/^[A-Z_][A-Z0-9_]*$/i.test(o))throw Error(`Invalid SSH private key secret name '${o}'`);let b=y?`