@stacksjs/ts-cloud 0.7.108 → 0.7.110

package/dist/index.js

@@ -3,17 +3,12 @@ import {
   API_TOKEN_DEFAULT_TTL_MS,
   API_TOKEN_MAX_TTL_MS,
   API_VERSION,
-  AUTHORIZATION_CAPABILITIES,
   AUTH_ACTION_TOKEN_TTL_MS,
   AUTH_MFA_CHALLENGE_TTL_MS,
   AUTH_OIDC_TRANSACTION_TTL_MS,
   AUTH_SESSION_ABSOLUTE_TTL_MS,
   AUTH_SESSION_IDLE_TTL_MS,
-  AlertEvaluator,
-  AlertStore,
-  ApiServiceError,
   AuthenticationStore,
-  AutomationApiService,
   AutomationIdentityStore,
   AwsAuroraDataAdapter,
   AwsAuroraTransport,
@@ -33,27 +28,17 @@ import {
   BunDockerRuntime,
   BunDockerVolumeRuntime,
   BunFilesystemArchiveRuntime,
-  CONTROL_PLANE_SCHEMA_VERSION,
-  CloudBlockVolumeDriver,
-  ComposeApplicationService,
-  ComposeApplicationStore,
   ConfigurationService,
   ConfigurationStore,
   ContainerDataAdapter,
   ControlPlaneBackupSource,
   ControlPlaneCleanupDriver,
-  ControlPlaneStore,
-  DEFAULT_TELEMETRY_POLICY,
-  DEPLOYMENT_QUEUE_KINDS,
   DIAGNOSTIC_PRESETS,
   DataServiceLifecycle,
   DataServiceStore,
   DockerDataTransport,
   DockerDiscoveryAdapter,
-  DockerNamedVolumeDriver,
   DockerVolumeBackupSource,
-  DurableOperationQueue,
-  DurableQueueWorker,
   EcsRuntimeAdapter,
   EncryptedDataSecretStore,
   EventBridgeJobAdapter,
@@ -64,34 +49,23 @@ import {
   GiteaSourceAdapter,
   GithubSourceAdapter,
   GitlabSourceAdapter,
-  HealthCheckRunner,
-  InvalidOperationTransitionError,
   JobProviderReconciler,
   JobService,
   JobStore,
   LambdaRuntimeAdapter,
   LocalEncryptedConfigurationBackend,
   LogicalDatabaseBackupSource,
-  MAX_CONTROL_PLANE_ERROR_BYTES,
-  MAX_CONTROL_PLANE_JSON_BYTES,
   MaintenanceService,
   MaintenanceStore,
-  NotificationRouter,
-  OptimisticConcurrencyError,
   PlacementService,
   PlacementStore,
   PreDeployScanner,
-  PreviewEnvironmentService,
-  PreviewEnvironmentStore,
-  QueueCancellationError,
-  QueueTimeoutError,
   RELEASE_QUEUE_KINDS,
   RegionService,
   RegionStore,
   ReleaseService,
   ReleaseStore,
   RemoteBuildService,
-  RetryableOperationError,
   RuntimeOperationService,
   RuntimeStreamRegistry,
   S3BackupDestinationAdapter,
@@ -101,13 +75,11 @@ import {
   SecurityScannerRunner,
   ServerCronJobAdapter,
   ServerDataAdapter,
-  ServerPathVolumeDriver,
   SourceConnectionStore,
   SourceProviderError,
   SshFleetDriver,
   SystemFleetSshTransport,
   SystemdDiscoveryAdapter,
-  TelemetryStore,
   TransportDisasterRecoveryDriver,
   TransportPlatformMaintenanceDriver,
   TransportRemoteBuildDriver,
@@ -115,9 +87,6 @@ import {
   TsCloudApiError,
   TsCloudClient,
   UnavailableRegionalDriver,
-  UnsupportedSchemaVersionError,
-  VolumeService,
-  VolumeStore,
   activateImmutableRelease,
   ageSeconds,
   assertReleaseStrategy,
@@ -125,33 +94,23 @@ import {
   attachSbomToRelease,
   attachVulnerabilitySummary,
   authEncryptionKeyFile,
-  authorizeOrganization,
   authorizeRuntimePath,
   backupCredentialStatus,
   beginOidcAuthorization,
-  buildComposeLogsCommand,
-  buildComposeRuntimeCommand,
-  buildComposeScaleCommand,
-  buildComposeShellCommand,
   buildFunctionEnv,
   bytes,
   canonicalJson,
   capabilities,
   capacity,
   cloneSourceBinding,
-  completeComposeVolumeDeletion,
   completeOidcAuthorization,
-  composeProjectName,
   compressBackup,
   config,
   connectionGuidance,
-  controlPlaneDatabaseFile,
-  controlPlaneMigrations,
   createApiV1Handler,
   createAsgBuildDriver,
   createBackupQueueHandlers,
   createDataServiceQueueHandlers,
-  createDeploymentQueueHandlers,
   createEcsBuildDriver,
   createFleetQueueHandlers,
   createJobQueueHandlers,
@@ -163,7 +122,6 @@ import {
   createRuntimeAdapters,
   createServerBuildDriver,
   createSourceAdapter,
-  createVolumeQueueHandlers,
   dashboardActions,
   dataServiceCapabilities,
   decodeBase32,
@@ -173,34 +131,26 @@ import {
   deployServerlessApp,
   deploySite,
   desiredState,
-  diffCompose,
   discoverGitRefs,
   discoverOidcProvider,
   discoverRuntimeInventory,
   dockerWorkloads,
   documentDigest,
   ecsWorkloads,
-  effectiveCapabilities,
   encodeBase32,
   encryptBackup,
   ensureDefaultSecurityPolicies,
-  evaluateTelemetryAlertRules,
   eventBridgeScheduleInput,
-  exportCompose,
   formatScanResults,
   generateCycloneDxSbom,
   generateImageSbom,
-  getComposeTemplate,
   getConfig,
   hotp,
   infraEnvFromOutputs,
-  isQuietHours,
   jobProviderCapability,
   lambdaWorkloads,
-  listComposeTemplates,
   listSourceReferences,
   loadCloudConfig,
-  loadTelemetryPolicy,
   maintenanceWindowOpen,
   manifestDigest,
   matchTotpCounter,
@@ -208,15 +158,10 @@ import {
   normalizeRuntimeStatus,
   normalizeScheduleExpression,
   normalizeSourceEvent,
-  normalizeTelemetryPolicy,
   openApiDocument,
-  parseCompose,
-  parseComposeCatalog,
   parseDockerInspect,
   parseDotenv,
   parseSystemdRecords,
-  pathTemplate,
-  planComposeTemplateUpgrade,
   previewSchedule,
   processSourceWebhook,
   productionChangeReview,
@@ -227,31 +172,21 @@ import {
   recordPreDeploySecretScan,
   recordSkippedSecretScan,
   redactRuntimeConfig,
-  redactTelemetryText,
-  redactTelemetryValue,
   redeployServerlessApp,
   releaseStrategyCapabilities,
   releaseTrafficPlan,
   removeSourceWebhook,
-  renderComposeTemplate,
   renderServerCron,
-  requestHash,
   resolveAuthEncryptionKey,
   resolveDashboardAction,
-  resolveQueuedDeploymentCommand,
   resolveRuntimeInventory,
-  roleCapabilities,
   rollbackImmutableRelease,
   rollbackServerlessApp,
   runRemoteCommand,
   runtimeId,
   sanitizeCloudConfig,
-  sanitizeControlPlaneValue,
   sanitizeOidcReturnPath,
-  saveTelemetryPolicy,
   scanForSecrets,
-  scopeContains,
-  searchControlPlane,
   secureContainerRelease,
   securityScope,
   sendAuthenticationEmail,
@@ -259,31 +194,21 @@ import {
   setMaintenance,
   startLocalDashboardServer,
   syncSourceRepositories,
-  synchronizeComposeVolumes,
   synchronizeConfiguredConfiguration,
   synchronizeConfiguredJobs,
   systemdWorkloads,
-  telemetryBucketLabel,
-  telemetryCursor,
-  telemetryEstimatedMonthlyCost,
-  telemetryPercentile,
-  telemetryPolicyKey,
   testSourceConnection,
   totp,
   totpUri,
   unsupportedCapabilities,
-  unsupportedVolumeCapabilities,
   updateCompatibility,
-  validateAttachment,
   validateBackupDestination,
-  validateMountPath,
   verifyArtifactSignature,
   verifyTotp,
   verifyUpdateSignature,
-  volumeCapabilities,
   webhookEndpoint,
   zeroCapacity
-} from "./chunk-eg8ck25v.js";
+} from "./chunk-wmz8x3cy.js";
 import {
   deleteStaticSite,
   deployStaticSite,
@@ -294,10 +219,10 @@ import {
   generateStaticSiteTemplate,
   invalidateCache,
   uploadStaticFiles
-} from "./chunk-ef2dwfrg.js";
+} from "./chunk-8kh577qh.js";
 import {
   buildAndPushServerlessImage
-} from "./chunk-3g4r09dd.js";
+} from "./chunk-wmbep3b5.js";
 import {
   ApplicationAutoScalingClient,
   BedrockClient,
@@ -335,7 +260,12 @@ import {
   providerEndpoint,
   remapKey,
   resolveObjectStorage
-} from "./chunk-ybcz6sxc.js";
+} from "./chunk-x6yzgv7y.js";
+import {
+  EmailClient,
+  IAMClient,
+  SESClient
+} from "./chunk-hpv68b4a.js";
 import {
   CloudFrontClient
 } from "./chunk-01d86gt1.js";
@@ -360,6 +290,9 @@ import {
   detectDnsProvider,
   dnsProviders
 } from "./chunk-gttvakpv.js";
+import {
+  Route53Client
+} from "./chunk-32e7ya18.js";
 import {
   AwsDriver,
   CloudDriverFactory,
@@ -405,7 +338,213 @@ import {
   waitForCloudInit,
   waitForSsh,
   wrapCloudInitUserData
-} from "./chunk-33sy72r8.js";
+} from "./chunk-d3vx2ekv.js";
+import {
+  EC2Client,
+  SSMClient
+} from "./chunk-7m60qnc8.js";
+import {
+  CloudFormationClient
+} from "./chunk-4cjrg98a.js";
+import {
+  S3Client
+} from "./chunk-wj3s95p9.js";
+import {
+  AWSClient
+} from "./chunk-zqtpg06c.js";
+import {
+  AUTHORIZATION_CAPABILITIES,
+  AlertEvaluator,
+  AlertStore,
+  AnomalyConfigStore,
+  ApiServiceError,
+  AutomationApiService,
+  AwsSpendTransport,
+  CONTROL_PLANE_SCHEMA_VERSION,
+  CloudBlockVolumeDriver,
+  ComposeApplicationService,
+  ComposeApplicationStore,
+  ComputeSpendTransport,
+  ControlPlaneStore,
+  CounterTracker,
+  DEFAULT_METER_MAPPINGS,
+  DEFAULT_PRICE_BOOK,
+  DEFAULT_TELEMETRY_POLICY,
+  DEFAULT_THRESHOLDS,
+  DEPLOYMENT_QUEUE_KINDS,
+  DETECTABLE_SIGNALS,
+  DockerNamedVolumeDriver,
+  DurableOperationQueue,
+  DurableQueueWorker,
+  ENFORCEMENT_ACTIONS,
+  ENFORCEMENT_DESCRIPTIONS,
+  ENFORCEMENT_SEVERITY,
+  FOCUS_VERSION,
+  HealthCheckRunner,
+  InvalidOperationTransitionError,
+  MAX_CONTROL_PLANE_ERROR_BYTES,
+  MAX_CONTROL_PLANE_JSON_BYTES,
+  METERS,
+  METER_KEYS,
+  MICRO_CENTS,
+  MIN_PROJECTION_CONFIDENCE,
+  NotificationRouter,
+  OptimisticConcurrencyError,
+  PreviewEnvironmentService,
+  PreviewEnvironmentStore,
+  QueueCancellationError,
+  QueueTimeoutError,
+  RecordingSpendTransport,
+  RetryableOperationError,
+  SENSITIVITY_THRESHOLDS,
+  SPEND_CYCLE_SECONDS,
+  SPEND_GATE_SETTING,
+  SPEND_LEASE_SETTING,
+  ServerPathVolumeDriver,
+  SignalSource,
+  SpendCapError,
+  SpendGate,
+  SpendLoopLease,
+  SpendNotificationRouter,
+  SpendRunner,
+  SpendService,
+  SpendStore,
+  TelemetryStore,
+  URGENT_SPEND_EVENTS,
+  USER_VISIBLE_ACTIONS,
+  UnsupportedSchemaVersionError,
+  VolumeService,
+  VolumeStore,
+  aggregateDeltas,
+  anomalyOptionsForSignal,
+  assertSpendAllows,
+  authorizeOrganization,
+  budgetWindow,
+  buildComposeLogsCommand,
+  buildComposeRuntimeCommand,
+  buildComposeScaleCommand,
+  buildComposeShellCommand,
+  completeComposeVolumeDeletion,
+  composeProjectName,
+  compositeSpendTransport,
+  controlPlaneDatabaseFile,
+  controlPlaneMigrations,
+  createDeploymentQueueHandlers,
+  createEnforcementHandlers,
+  createVolumeQueueHandlers,
+  detectAnomalies,
+  detectLatestAnomaly,
+  diffCompose,
+  effectiveCapabilities,
+  evaluateBudget,
+  evaluateTelemetryAlertRules,
+  ewma,
+  exportCompose,
+  findMapping,
+  findPriceEntry,
+  formatCents,
+  formatTimeToExhaustion,
+  getComposeTemplate,
+  governingLimitCents,
+  handleSpendRequest,
+  hourBucket,
+  hourBucketsBetween,
+  isOperationAllowed,
+  isQuietHours,
+  isValidTimeZone,
+  listComposeTemplates,
+  loadTelemetryPolicy,
+  lookbackHoursForSignal,
+  median,
+  medianAbsoluteDeviation,
+  mergeDecisions,
+  mergePriceBooks,
+  meterTelemetry,
+  normalizeTelemetryPolicy,
+  optionsForSignal,
+  parseCompose,
+  parseComposeCatalog,
+  pathTemplate,
+  percentOfLimit,
+  planComposeTemplateUpgrade,
+  planEnforcement,
+  previousBudgetWindow,
+  priceUsage,
+  priceUsageLines,
+  projectSpend,
+  redactTelemetryText,
+  redactTelemetryValue,
+  renderComposeTemplate,
+  requestHash,
+  resolveQueuedDeploymentCommand,
+  robustZScore,
+  roleCapabilities,
+  roundCents,
+  routeMatches,
+  runEnforcement,
+  sanitizeControlPlaneValue,
+  saveTelemetryPolicy,
+  scopeContains,
+  scopeKey,
+  searchControlPlane,
+  signalDefinition,
+  spendNotificationText,
+  spendOpenApiPaths,
+  startSpendLoop,
+  streamFocusJsonl,
+  strongestActiveAction,
+  synchronizeComposeVolumes,
+  telemetryBucketLabel,
+  telemetryCursor,
+  telemetryEstimatedMonthlyCost,
+  telemetryPercentile,
+  telemetryPolicyKey,
+  tieredMicroCents,
+  toFocusJsonl,
+  toFocusRecords,
+  unsupportedVolumeCapabilities,
+  usageDeltaKey,
+  utcInstantOfLocal,
+  validateAttachment,
+  validateMountPath,
+  volumeCapabilities,
+  zeroFill,
+  zoneOffsetMs,
+  zonedParts
+} from "./chunk-19bs955w.js";
+import {
+  DEFAULT_ATTACK_MODE_HOURS,
+  MAX_CONTROL_HOURS,
+  ProtectionControlStore,
+  RATE_LIMIT_KEY_SEPARATOR,
+  RateLimiter as RateLimiter2,
+  applyControlsToDdos,
+  applyControlsToRateLimits,
+  defaultRateLimitRules,
+  describePosture,
+  globMatches,
+  rateLimitHeaders,
+  rateLimitKey,
+  ruleMatches
+} from "./chunk-d48vtdj4.js";
+import {
+  escapeSecLang,
+  globToRegex,
+  isSafePattern,
+  renderWafConfig,
+  renderWafInstallScript,
+  wafEventTelemetry
+} from "./chunk-va2yd85b.js";
+import {
+  DEFAULT_DDOS_THRESHOLDS,
+  applyMitigationFactor,
+  isValidCidr,
+  planMitigation,
+  renderDdosInstallScript,
+  renderNftablesRuleset,
+  renderSysctlFile,
+  sysctlHardening
+} from "./chunk-aa2dkn7b.js";
 import {
   ABTestManager,
   AI,
@@ -423,6 +562,7 @@ import {
   BounceComplaintHandler,
   BuildOptimizationManager,
   CDN,
+  CHAIN_HEADER,
   COMMON_CROSS_ACCOUNT_ROLES,
   Cache,
   CanaryManager,
@@ -441,8 +581,10 @@ import {
   DASHBOARD_PORT_BASE,
   DASHBOARD_PORT_SPAN,
   DASHBOARD_STATE_DIR,
+  DEFAULT_RECURSION_LIMITS,
   DEFAULT_SERVICE_LIMITS,
   DEFAULT_STATE_DIR,
+  DEPTH_HEADER,
   DLQMonitoringManager,
   DNS,
   DNSSECManager,
@@ -511,6 +653,7 @@ import {
   REPLContext,
   RateLimiter,
   RealtimePresets,
+  RecursionGuard,
   Redirects,
   RegionPairManager,
   Registry,
@@ -538,6 +681,7 @@ import {
   Storage,
   StorageAdvancedManager,
   SyntheticsManager,
+  TRACE_HEADER,
   TaskList,
   TemplateBuilder,
   TemplateCache,
@@ -563,6 +707,7 @@ import {
   categorizeChanges,
   certificateManager,
   checkIAMPermissions,
+  checkInvocation,
   checkServiceQuotas,
   chunk,
   clearSigningKeyCache,
@@ -645,6 +790,7 @@ import {
   fromEnvironment,
   fromSharedCredentials,
   fromWebIdentity,
+  functionFingerprint,
   generateAppImageDockerfile,
   generateApprovalConfig,
   generateBootstrap,
@@ -704,6 +850,9 @@ import {
   hashString,
   healthCheckManager,
   imageScanningManager,
+  inspectInvocation,
+  installRecursionFetch,
+  invocationContext,
   isLikelyTypo,
   isLocalDevelopment,
   isManagementDashboardSiteName,
@@ -735,6 +884,7 @@ import {
   parallel,
   parallelMap,
   parallelWithRetry,
+  parseChain,
   parseJSONResponse,
   parseXMLResponse,
   performanceManager,
@@ -745,11 +895,14 @@ import {
   previewNotifications,
   processInChunks,
   progressiveDeploymentManager,
+  propagationHeaders,
   queueManagementManager,
   quickHash,
+  recursionBlockedResponse,
   regionPairManager,
   replicaManager,
   requiresReplacement,
+  resetRecursionRuntime,
   resolveApp,
   resolveAppDatabase,
   resolveCloudProvider,
@@ -763,6 +916,7 @@ import {
   resolveProjectStackName,
   resolveQueueNames,
   resolveQueues,
+  resolveRecursionConfig,
   resolveRegion,
   resolveServerlessAppStackName,
   resolveServerlessArtifactBucketName,
@@ -790,6 +944,7 @@ import {
   serviceMeshManager,
   setStateDir,
   sha256,
+  sharedRecursionGuard,
   sharedRuntimeLoop,
   signRequest,
   signRequestAsync,
@@ -814,33 +969,13 @@ import {
   withCDN,
   withCache,
   withDatabase,
+  withInvocation,
   withMonitoring,
   withQueue,
   withSecurity,
   withTimeout,
   xrayManager
-} from "./chunk-c6db5m63.js";
-import {
-  EC2Client,
-  SSMClient
-} from "./chunk-7m60qnc8.js";
-import {
-  CloudFormationClient
-} from "./chunk-4cjrg98a.js";
-import {
-  EmailClient,
-  IAMClient,
-  SESClient
-} from "./chunk-hpv68b4a.js";
-import {
-  Route53Client
-} from "./chunk-32e7ya18.js";
-import {
-  S3Client
-} from "./chunk-wj3s95p9.js";
-import {
-  AWSClient
-} from "./chunk-zqtpg06c.js";
+} from "./chunk-t2s3gdq6.js";
 import {
   __require
 } from "./chunk-v0bahtg2.js";
@@ -5113,6 +5248,9 @@ class AcmeClient {
   }
 }
 export {
+  zonedParts,
+  zoneOffsetMs,
+  zeroFill,
   zeroCapacity,
   xrayManager,
   wrapCloudInitUserData,
@@ -5120,12 +5258,14 @@ export {
   withSecurity,
   withQueue,
   withMonitoring,
+  withInvocation,
   withDatabase,
   withCache,
   withCDN,
   webhookEndpoint,
   waitForSsh,
   waitForCloudInit,
+  wafEventTelemetry,
   volumeCapabilities,
   verifyUpdateSignature,
   verifyTotp,
@@ -5144,12 +5284,17 @@ export {
   validateAttachment,
   validateAgainstSchema,
   validateAccountStructure,
+  utcInstantOfLocal,
+  usageDeltaKey,
   uploadStaticFiles,
   updateCompatibility,
   unsupportedVolumeCapabilities,
   unsupportedCapabilities,
   totpUri,
   totp,
+  toFocusRecords,
+  toFocusJsonl,
+  tieredMicroCents,
   testSourceConnection,
   templateCache,
   telemetryPolicyKey,
@@ -5158,6 +5303,7 @@ export {
   telemetryCursor,
   telemetryBucketLabel,
   systemdWorkloads,
+  sysctlHardening,
   syntheticsManager,
   synchronizeConfiguredJobs,
   synchronizeConfiguredConfiguration,
@@ -5169,19 +5315,26 @@ export {
   suggestIAMPolicy,
   suggestFlags,
   suggestCommand,
+  strongestActiveAction,
+  streamFocusJsonl,
   storageAdvancedManager,
   staticSiteManager,
   statePath,
   stateDir,
+  startSpendLoop,
   startLocalDashboardServer,
   stackDependencyManager,
   sshExecOrThrow,
   sshExec,
+  spendOpenApiPaths,
+  spendNotificationText,
+  signalDefinition,
   signRequestAsync,
   signRequest,
   signCloudFrontUrl,
   signCloudFrontCookies,
   sharedRuntimeLoop,
+  sharedRecursionGuard,
   sha256,
   setupDns01Challenge,
   setStateDir,
@@ -5201,6 +5354,7 @@ export {
   searchControlPlane,
   searchCommands,
   scpUpload,
+  scopeKey,
   scopeContains,
   scanForSecrets,
   saveTelemetryPolicy,
@@ -5211,12 +5365,17 @@ export {
   runtimeId,
   runRemoteCommand,
   runPhpBuildHooks,
+  runEnforcement,
   runBuildHooks,
+  ruleMatches,
+  routeMatches,
   route53RoutingManager,
   route53ResolverManager,
+  roundCents,
   rollbackServerlessApp,
   rollbackImmutableRelease,
   roleCapabilities,
+  robustZScore,
   responseToResult,
   resourceManagementManager,
   resolveUiSource,
@@ -5233,6 +5392,7 @@ export {
   resolveServerlessAppStackName,
   resolveRuntimeInventory,
   resolveRegion,
+  resolveRecursionConfig,
   resolveQueues,
   resolveQueuedDeploymentCommand,
   resolveQueueNames,
@@ -5253,11 +5413,17 @@ export {
   resolveAuthEncryptionKey,
   resolveAppDatabase,
   resolveApp,
+  resetRecursionRuntime,
   requiresReplacement,
   requestHash,
   replicaManager,
   renewRpxCertificates,
+  renderWafInstallScript,
+  renderWafConfig,
+  renderSysctlFile,
   renderServerCron,
+  renderNftablesRuleset,
+  renderDdosInstallScript,
   renderComposeTemplate,
   removeStaleServerAddressRecords,
   removeSourceWebhook,
@@ -5270,28 +5436,39 @@ export {
   redactTelemetryValue,
   redactTelemetryText,
   redactRuntimeConfig,
+  recursionBlockedResponse,
   recordSkippedSecretScan,
   recordPreDeploySecretScan,
   recordDashboardHostPosture,
   reconcileSourceWebhook,
   reconcileJobObservation,
   reconcileAddressRecords,
+  rateLimitKey,
+  rateLimitHeaders,
   quickHash,
   queueManagementManager,
   publicKeyFingerprint,
   providerEndpoint,
+  propagationHeaders,
+  projectSpend,
   progressiveDeploymentManager,
   productionChangeReview,
   processSourceWebhook,
   processInChunks,
+  priceUsageLines,
+  priceUsage,
+  previousBudgetWindow,
   previewSchedule,
   previewNotifications,
   previewManager,
+  planMitigation,
+  planEnforcement,
   planComposeTemplateUpgrade,
   phpRuntimeLayerAssets,
   phpLayerPackages,
   phpLayerBuildStage,
   performanceManager,
+  percentOfLimit,
   pathTemplate,
   parseXMLResponse,
   parseSystemdRecords,
@@ -5300,12 +5477,14 @@ export {
   parseDockerInspect,
   parseComposeCatalog,
   parseCompose,
+  parseChain,
   parallelWithRetry,
   parallelMap,
   parallel,
   packageServerlessApp,
   packagePhpApp,
   organizationManager,
+  optionsForSignal,
   openApiDocument,
   normalizeTelemetryPolicy,
   normalizeSshPublicKey,
@@ -5321,7 +5500,12 @@ export {
   migrationManager,
   migrateObjectStorage,
   metricsManager,
+  meterTelemetry,
+  mergePriceBooks,
   mergeInfrastructure,
+  mergeDecisions,
+  medianAbsoluteDeviation,
+  median,
   mediaObjectHeaders,
   matchTotpCounter,
   manifestDigest,
@@ -5330,6 +5514,7 @@ export {
   makeAWSRequestAsync,
   makeAWSRequest,
   maintenanceWindowOpen,
+  lookbackHoursForSignal,
   logsManager,
   loadTelemetryPolicy,
   loadCloudConfig,
@@ -5346,16 +5531,25 @@ export {
   keyMatchesFilters,
   jobProviderCapability,
   isWebCryptoAvailable,
+  isValidTimeZone,
   isValidRegion,
+  isValidCidr,
   isStatePath,
+  isSafePattern,
   isQuietHours,
+  isOperationAllowed,
   isNodeCryptoAvailable,
   isManagementDashboardSiteName,
   isLocalDevelopment,
   isLikelyTypo,
+  invocationContext,
   invalidateCache,
+  installRecursionFetch,
+  inspectInvocation,
   infraEnvFromOutputs,
   imageScanningManager,
+  hourBucketsBetween,
+  hourBucket,
   hotp,
   hostAcceptsIpv6,
   healthCheckManager,
@@ -5365,8 +5559,12 @@ export {
   hashDirectory,
   hashBuffer,
   hasManagementDashboardSite,
+  handleSpendRequest,
   guardDutyManager,
+  governingLimitCents,
   globalResourceManager,
+  globToRegex,
+  globMatches,
   getTimestamp,
   getSigningKeyCacheSize,
   getRequiredPermissions,
@@ -5425,12 +5623,14 @@ export {
   generateBootstrap,
   generateApprovalConfig,
   generateAppImageDockerfile,
+  functionFingerprint,
   fromWebIdentity,
   fromSharedCredentials,
   fromEnvironment,
   fromECSMetadata,
   fromEC2Metadata,
   formatTree,
+  formatTimeToExhaustion,
   formatTable,
   formatSuggestion,
   formatScanResults,
@@ -5444,15 +5644,21 @@ export {
   formatFlagSuggestions,
   formatDuration,
   formatDiff,
+  formatCents,
   formatBytes,
   formatAccountStructure,
+  findPriceEntry,
+  findMapping,
   findChangedFiles,
   fifoQueueManager,
   extendPreset,
   exportCompose,
+  ewma,
   eventToRequest,
   eventBridgeScheduleInput,
   evaluateTelemetryAlertRules,
+  evaluateBudget,
+  escapeSecLang,
   ensureSshKey,
   ensureServer,
   ensureManagementDashboard,
@@ -5477,9 +5683,12 @@ export {
   diffCompose,
   detectServiceRegion,
   detectMisconfigurations,
+  detectLatestAnomaly,
   detectDnsProvider,
   detectDeploymentTargets,
+  detectAnomalies,
   desiredState as desiredJobProviderState,
+  describePosture,
   deriveManagementDashboardPort,
   deploymentCoexistenceError,
   deployStaticSiteWithExternalDnsFull,
@@ -5491,6 +5700,7 @@ export {
   deployServerlessApp,
   deployAllComputeSites,
   deleteStaticSite,
+  defaultRateLimitRules,
   defaultLocalConfig,
   defaultConfig,
   decryptBackup,
@@ -5541,6 +5751,7 @@ export {
   createFleetQueueHandlers,
   createExistingStaticFullStackPreset,
   createError,
+  createEnforcementHandlers,
   createEcsBuildDriver,
   createDnsProvider,
   createDeploymentQueueHandlers,
@@ -5561,6 +5772,7 @@ export {
   connectionGuidance,
   config,
   compressBackup,
+  compositeSpendTransport,
   composeServerlessAppTemplate,
   composeProjectName,
   composePresets,
@@ -5576,6 +5788,7 @@ export {
   cleanupDns01Challenge,
   chunk,
   checkServiceQuotas,
+  checkInvocation,
   checkIAMPermissions,
   certificateManager,
   categorizeChanges,
@@ -5601,6 +5814,7 @@ export {
   buildCloudFormationTemplate,
   buildBunRuntimeLayerZip,
   buildAndPushServerlessImage,
+  budgetWindow,
   bounceComplaintHandler,
   blueGreenManager,
   beginOidcAuthorization,
@@ -5616,9 +5830,15 @@ export {
   attachVulnerabilitySummary,
   attachSbomToRelease,
   attachProvenanceToRelease,
+  assertSpendAllows,
   assertReleaseStrategy,
   artifactKey,
+  applyMitigationFactor,
+  applyControlsToRateLimits,
+  applyControlsToDdos,
+  anomalyOptionsForSignal,
   analyzeStackDiff,
+  aggregateDeltas,
   ageSeconds,
   activateImmutableRelease,
   abTestManager,
@@ -5631,6 +5851,8 @@ export {
   UnsupportedSchemaVersionError,
   UnifiedDnsValidator,
   UnavailableRegionalDriver,
+  USER_VISIBLE_ACTIONS,
+  URGENT_SPEND_EVENTS,
   TsCloudClient,
   TsCloudApiError,
   TrivyImageScanner,
@@ -5644,6 +5866,7 @@ export {
   TemplateBuilder,
   TelemetryStore,
   TaskList,
+  TRACE_HEADER,
   SystemdDiscoveryAdapter,
   SystemFleetSshTransport,
   SyntheticsManager,
@@ -5655,11 +5878,19 @@ export {
   StackDependencyManager,
   SshFleetDriver,
   Spinner,
+  SpendStore,
+  SpendService,
+  SpendRunner,
+  SpendNotificationRouter,
+  SpendLoopLease,
+  SpendGate,
+  SpendCapError,
   SourceProviderError,
   SourceConnectionStore,
   exports_send as SmsHandlers,
   SmsClient,
   exports_advanced3 as SmsAdvanced,
+  SignalSource,
   Sftp,
   ServiceMeshManager,
   ServerPathVolumeDriver,
@@ -5682,9 +5913,13 @@ export {
   STATE_DIR_ENV_VAR,
   SSMClient,
   SQSClient,
+  SPEND_LEASE_SETTING,
+  SPEND_GATE_SETTING,
+  SPEND_CYCLE_SECONDS,
   SNSClient,
   SMS,
   SESClient,
+  SENSITIVITY_THRESHOLDS,
   SECRET_PATTERNS,
   S3Error,
   S3Client,
@@ -5708,6 +5943,8 @@ export {
   RegionService,
   RegionPairManager,
   Redirects,
+  RecursionGuard,
+  RecordingSpendTransport,
   RealtimePresets,
   RateLimiter,
   REPLContext,
@@ -5717,12 +5954,14 @@ export {
   RECOMMENDED_SCPS,
   RECOMMENDED_ACCOUNT_STRUCTURES,
   RDSClient,
+  RATE_LIMIT_KEY_SEPARATOR,
   QueueTimeoutError,
   QueuePresets,
   QueueManagementManager,
   QueueCancellationError,
   Queue,
   Pseudo,
+  ProtectionControlStore,
   ProgressiveDeploymentManager,
   ProgressBar,
   PreviewNotificationService,
@@ -5761,8 +6000,13 @@ export {
   Messaging,
   MaintenanceStore,
   MaintenanceService,
+  MIN_PROJECTION_CONFIDENCE,
+  MICRO_CENTS,
+  METER_KEYS,
+  METERS,
   MAX_CONTROL_PLANE_JSON_BYTES,
   MAX_CONTROL_PLANE_ERROR_BYTES,
+  MAX_CONTROL_HOURS,
   MANAGEMENT_DASHBOARD_SITE_PREFIX,
   MANAGEMENT_DASHBOARD_SITE,
   MANAGED_NODE_VERSIONS,
@@ -5805,6 +6049,7 @@ export {
   FilesystemBackupSource,
   FileSystem,
   FileCache,
+  FOCUS_VERSION,
   FIFOQueueManager,
   ExternalConfigurationBackend,
   EventBridgeJobAdapter,
@@ -5818,7 +6063,11 @@ export {
   exports_advanced as EmailAdvanced,
   Email,
   ElastiCacheClient,
+  RateLimiter2 as EdgeRateLimiter,
   EcsRuntimeAdapter,
+  ENFORCEMENT_SEVERITY,
+  ENFORCEMENT_DESCRIPTIONS,
+  ENFORCEMENT_ACTIONS,
   ELBv2Client,
   EFSClient,
   ECSClient,
@@ -5845,16 +6094,25 @@ export {
   DNS,
   DLQMonitoringManager,
   DIAGNOSTIC_PRESETS,
+  DETECTABLE_SIGNALS,
+  DEPTH_HEADER,
   DEPLOYMENT_QUEUE_KINDS,
+  DEFAULT_THRESHOLDS,
   DEFAULT_TELEMETRY_POLICY,
   DEFAULT_STATE_DIR,
   DEFAULT_SERVICE_LIMITS,
+  DEFAULT_RECURSION_LIMITS,
+  DEFAULT_PRICE_BOOK,
+  DEFAULT_METER_MAPPINGS,
+  DEFAULT_DDOS_THRESHOLDS,
+  DEFAULT_ATTACK_MODE_HOURS,
   DASHBOARD_STATE_DIR,
   DASHBOARD_PORT_SPAN,
   DASHBOARD_PORT_BASE,
   DASHBOARD_ENTRY,
   CrossRegionReferenceManager,
   CredentialError,
+  CounterTracker,
   ControlPlaneStore,
   ControlPlaneCleanupDriver,
   ControlPlaneBackupSource,
@@ -5864,6 +6122,7 @@ export {
   ConfigurationStore,
   ConfigurationService,
   ConfigurationError,
+  ComputeSpendTransport,
   Compute,
   ComprehendClient,
   ComposeApplicationStore,
@@ -5883,6 +6142,7 @@ export {
   Cache,
   CONTROL_PLANE_SCHEMA_VERSION,
   COMMON_CROSS_ACCOUNT_ROLES,
+  CHAIN_HEADER,
   CDN,
   BunFilesystemArchiveRuntime,
   BunDockerVolumeRuntime,
@@ -5898,6 +6158,7 @@ export {
   BackupManager,
   BackupCoordinator,
   AwsSsmConfigurationBackend,
+  AwsSpendTransport,
   AwsSecretsManagerConfigurationBackend,
   AwsRegionalDriver,
   AwsRdsTransport,
@@ -5919,6 +6180,7 @@ export {
   ApplicationAutoScalingClient,
   ApiServiceError,
   ApiGateway,
+  AnomalyConfigStore,
   AlertStore,
   AlertEvaluator,
   AcmeClient,