fjall 12.4.0 → 13.1.0

package/bin/assets/generators/compute/service/generator.js

@@ -74,7 +74,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 ${gr}`:"",x=[],G=0;for(let er=a-1;er>=g;er--){let ke=o[er]??"",X=G+ke.length+1;if((er>0?gr.length+1:0)+X+u.length+v.length>n)break;x.unshift(ke),G=X}let O=a-x.length>0?`${gr}
 `:"",Pe=x.length>0?`${x.join(`
 `)}
-`:"";return O+Pe+u+v}$c(PA,"extractErrorWindow");var dO=Object.defineProperty,ni=(e,t)=>dO(e,"name",{value:t,configurable:!0});function Xg(e){return e.success===!0}ni(Xg,"isSuccess");function Jg(e){return e.success===!1}ni(Jg,"isFailure");function C(e){return{success:!0,data:e}}ni(C,"success");function I(e){return{success:!1,error:e}}ni(I,"failure");async function qg(e){try{let t=await e();return C(t)}catch(t){return I(yt(t))}}ni(qg,"tryAsync");function Qg(e){try{let t=e();return C(t)}catch(t){return I(yt(t))}}ni(Qg,"trySync");var mO=Object.defineProperty,pO=(e,t)=>mO(e,"name",{value:t,configurable:!0}),kA=/^[a-zA-Z][a-zA-Z0-9-]*$/,fO=Eo.source.replace(/^\^|\$$/g,""),z=Object.freeze({IDENTIFIER:kA,NEW_APP_NAME:/^[a-z][a-z0-9-]*$/,RESOURCE_NAME:/^[a-zA-Z][a-zA-Z0-9]*$/,ECS_SERVICE_NAME:kA,BUCKET_NAME:/^[a-z][a-z0-9-]*[a-z0-9]$|^[a-z][a-z0-9]*$/,DATABASE_NAME:/^[a-zA-Z][a-zA-Z0-9_]*$/,RESOURCE_TYPE:/^[a-z]+(:[a-z]+)?$/,SSM_PATH:new RegExp(`^(?:/${fO})+$`),SECRET_NAME:Ac,SSM_COMPONENT:Eo,EMAIL:/^[^\s@]+@[^\s@]+\.[^\s@]+$/,DOCKER_IMAGE:/^[a-z0-9][a-z0-9._-]*[a-z0-9](:[a-z0-9._-]+)?$/,DOMAIN:/^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)+$/i,HTTP_ORIGIN:/^https?:\/\/[a-z0-9.-]+(:\d+)?$/i,PASCAL_CASE:/^[A-Z][A-Za-z0-9]*$/,AWS_ACCOUNT_ID:/^\d{12}$/,VPC_ID:/^vpc-[a-z0-9]+$/,ROLE_ARN:/^arn:aws[a-zA-Z-]*:iam::\d{12}:role\/.+$/,CIDR:/^((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\.){3}(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\/(3[0-2]|[12]?\d)$/,SCHEDULE_EXPRESSION:/^(rate\(1 (?:minute|hour|day)\)|rate\((?:[2-9]|[1-9]\d+) (?:minutes|hours|days)\)|cron\([^\s()]+ [^\s()]+ [^\s()]+ [^\s()]+ [^\s()]+ [^\s()]+\))$/,LAMBDA_RUNTIME_IDENTIFIER:/^[A-Za-z0-9._-]+$/,ENV_VAR_NAME:/^[A-Za-z_][A-Za-z0-9_]*$/});function eh(e){let t=/^rate\((\d+) (minute|minutes|hour|hours|day|days)\)$/.exec(e);if(!t)return;let n=t[1],i=t[2];if(n===void 0||i===void 0)return;let r=parseInt(n,10);if(!Number.isFinite(r)||r<1)return;let o=i==="minute"||i==="hour"||i==="day";if(!(o&&r!==1)&&!(!o&&r===1))return i==="minute"||i==="minutes"?{everyMs:r*6e4}:i==="hour"||i==="hours"?{everyMs:r*60*6e4}:{everyMs:r*24*60*6e4}}pO(eh,"parseRateExpression");var d=Object.freeze({IDENTIFIER:"Must start with a letter, contain only letters, numbers, and hyphens",NEW_APP_NAME:"Must start with a lowercase letter and contain only lowercase letters, numbers, and hyphens",IDENTIFIER_MIN_LENGTH:"Must be at least 2 characters",IDENTIFIER_NO_TRAILING_HYPHEN:"Must not end with a hyphen",IDENTIFIER_NO_CONSECUTIVE_HYPHENS:"Must not contain consecutive hyphens",RESOURCE_NAME:"Must start with a letter and contain only letters and numbers (PascalCase recommended)",ECS_SERVICE_NAME:"Service name must start with a letter and contain only letters, numbers, and hyphens",BUCKET_NAME:"Bucket name must start with a lowercase letter and contain only lowercase letters, numbers, and hyphens",DATABASE_NAME:"Database name must start with a letter and contain only letters, numbers, and underscores",RESOURCE_TYPE:"Resource type must be in format 'category' or 'category:type'",SSM_PATH:"SSM path must start with / and contain valid namespace segments (e.g., /myapp/ApiCluster/service)",SECRET_NAME:Cg,SSM_COMPONENT:xc,EMAIL:"Please enter a valid email address",DOMAIN:"Please enter a valid domain (e.g., cms.example.com)",DOCKER_IMAGE:"Invalid Docker image name format",REQUIRED:{APP_NAME:"Application name is required",RESOURCE_NAME:"Resource name is required",BUCKET_NAME:"Bucket name is required",SERVICE_NAME:"Service name is required",NETWORK_NAME:"Network name is required",DATABASE_NAME:"Database name is required",ORGANISATION_NAME:"Organisation name is required",EMAIL:"Email is required",NAME:"Name is required",USERNAME:"Username is required",CONTAINER_NAME:"Container name is required",GROUP:"Group is required",PATTERN_NAME:"Pattern name is required",SOURCE:"Source directory is required",BUILD_COMMAND:"Build command is required",OUTPUT_DIR:"Output directory is required",FORMS_TO:"Forms recipient address is required",ROUTING_PATH:"Routing path is required",RESOURCE_REFERENCE:"Resource reference is required",RESOURCE_TYPE:"Resource type is required",VARIANT:"Variant is required",SUBTYPE:"Subtype is required",DEPLOY_TARGET:"Deploy target is required",DESTROY_TARGET:"Destroy target is required"},MAX_LENGTH:{APP_NAME:"Application name must be 50 characters or less",RESOURCE_NAME:"Resource name must be 63 characters or less",BUCKET_NAME:"Bucket name must be 63 characters or less",SERVICE_NAME:"Service name must be 255 characters or less",NETWORK_NAME:"Network name must be 50 characters or less",DATABASE_NAME:"Database name must be 63 characters or less",ORGANISATION_NAME:"Organisation name must be 50 characters or less"},PORT:{INTEGER:"Port must be an integer",MIN:"Port must be at least 1",MAX:"Port cannot exceed 65535"},USERNAME:{MAX_LENGTH:"Username cannot exceed 63 characters"},LAMBDA:{MEMORY:{INTEGER:"Lambda memory must be an integer",MIN:"Memory must be at least 128 MB",MAX:"Memory cannot exceed 10240 MB",MULTIPLE:"Memory must be 128 MB or a multiple of 64 MB"},TIMEOUT:{INTEGER:"Timeout must be an integer",MIN:"Timeout must be at least 1 second",MAX:"Timeout cannot exceed 900 seconds"},RUNTIME:"Lambda runtime must contain only letters, digits, dots, underscores, or dashes (e.g. 'NODEJS_20_X' or 'nodejs20.x')"},ENV_VAR_NAME:"Environment variable names must start with a letter or underscore and contain only letters, digits, and underscores",PRIORITY:{INTEGER:"Priority must be an integer",MIN:"Priority must be at least 1",MAX:"Priority cannot exceed 50000"},CAPACITY:{MIN:{INTEGER:"Minimum capacity must be an integer",MIN_0:"Minimum capacity must be at least 0",MIN_1:"Minimum capacity must be at least 1",MAX:"Minimum capacity cannot exceed 100"},MAX:{INTEGER:"Maximum capacity must be an integer",MIN_0:"Maximum capacity must be at least 0",MIN_1:"Maximum capacity must be at least 1",MAX:"Maximum capacity cannot exceed 100"},DESIRED:{INTEGER:"Desired count must be an integer",MIN:"Desired count must be at least 0",MAX:"Desired count cannot exceed 100"},WARM_POOL_REQUIRED:"minCapacity 0 requires a warmPool \u2014 without it, new tasks wait 60-90s for a cold instance launch",WARM_POOL:{MIN_SIZE:{INTEGER:"Warm pool minSize must be an integer",MIN:"Warm pool minSize must be at least 0",MAX:"Warm pool minSize cannot exceed 100"},MIN_SIZE_EXCEEDS_MAX_CAPACITY:"warmPool.minSize cannot exceed maxCapacity \u2014 the warm pool cannot hold more instances than the ASG allows"}},MEMORY_LIMIT:{INTEGER:"Memory limit must be an integer",MIN_512:"Memory limit must be at least 512 MiB",MIN_128:"Memory limit must be at least 128 MiB",MAX:"Memory limit cannot exceed 30720 MiB"},DATABASE:{PORT:{INTEGER:"Database port must be an integer",MIN:"Database port must be at least 1024",MAX:"Database port cannot exceed 65535"},NAME:{REQUIRED:"Database name is required",MAX_LENGTH:"Database name must be 63 characters or less"}},BACKUP_RETENTION:{INTEGER:"Backup retention must be an integer",MIN:"Backup retention must be at least 1 day",MAX:"Backup retention cannot exceed 35 days"},SQS:{VISIBILITY_TIMEOUT:{INTEGER:"Visibility timeout must be an integer",MIN:"Visibility timeout must be at least 0 seconds",MAX:"Visibility timeout cannot exceed 43200 seconds (12 hours)"},RETENTION_PERIOD:{INTEGER:"Retention period must be an integer",MIN:"Retention period must be at least 60 seconds",MAX:"Retention period cannot exceed 1209600 seconds (14 days)"}},READER:{COUNT:{INTEGER:"Reader count must be an integer",MIN:"Reader count must be at least 0",MAX:"Reader count cannot exceed 15"}},IDENTIFIER_SUFFIX:{REQUIRED:"Identifier suffix is required when specified",MAX_LENGTH:"Identifier suffix cannot exceed 50 characters"},ROTATION:{INTEGER:"Rotation days must be an integer",MIN:"Rotation interval must be at least 1 day",MAX:"Rotation interval cannot exceed 365 days"},MAX_CONNECTIONS:{INTEGER:"Max connections must be an integer",MIN:"Max connections must be at least 1",MAX:"Max connections cannot exceed 100"},MONITORING_INTERVAL:{INTEGER:"Monitoring interval must be an integer",MIN:"Monitoring interval must be at least 0",MAX:"Monitoring interval cannot exceed 60 seconds",VALUES:"Monitoring interval must be 0, 1, 5, 10, 15, 30, or 60 seconds"},RETENTION_DAYS:{INTEGER:"Retention days must be an integer",MIN:"Retention days must be at least 1",MAX:"Retention days cannot exceed 365"},BATCH_SIZE:{INTEGER:"Batch size must be an integer",MIN:"Batch size must be at least 1",MAX:"Batch size cannot exceed 10000"},SERVICE:{UNIQUE_WITHIN_CLUSTER:"Service names must be unique within a cluster",MIN_REQUIRED:"At least one service is required",ROUTING_REQUIRED:"Multiple services with ports require routing config (path or host)"},PROXY_CONFIG:{MAX_IDLE_CONNECTIONS:{INTEGER:"Max idle connections must be an integer",MIN:"Max idle connections must be at least 0",MAX:"Max idle connections cannot exceed 100"},BORROW_TIMEOUT:{INTEGER:"Connection borrow timeout must be an integer",MIN:"Connection borrow timeout must be at least 1 second",MAX:"Connection borrow timeout cannot exceed 3600 seconds"}},MAX_AZS:{INTEGER:"Max AZs must be an integer",MIN:"Max AZs must be at least 1",MAX:"Max AZs cannot exceed 3"},BATCHING_WINDOW:{INTEGER:"Max batching window must be an integer",MIN:"Max batching window must be at least 0",MAX:"Max batching window cannot exceed 300 seconds"},HEALTH_CHECK:{INTERVAL:{INTEGER:"Health check interval must be an integer",MIN:"Health check interval must be at least 5 seconds",MAX:"Health check interval cannot exceed 300 seconds"},TIMEOUT:{INTEGER:"Health check timeout must be an integer",MIN:"Health check timeout must be at least 2 seconds",MAX:"Health check timeout cannot exceed 60 seconds"},RETRIES:{INTEGER:"Health check retries must be an integer",MIN:"Health check retries must be at least 1",MAX:"Health check retries cannot exceed 10"},START_PERIOD:{INTEGER:"Health check start period must be an integer",MIN:"Health check start period must be at least 0 seconds",MAX:"Health check start period cannot exceed 300 seconds"}},EPHEMERAL_STORAGE:{INTEGER:"Ephemeral storage size must be an integer",MIN:"Ephemeral storage size must be at least 512 MB",MAX:"Ephemeral storage size cannot exceed 10240 MB"},MAX_MESSAGE_SIZE:{INTEGER:"Max message size must be an integer",MIN:"Max message size must be at least 1024 bytes",MAX:"Max message size cannot exceed 262144 bytes (256 KB)"},CAPACITY_CONSTRAINT:{MIN_LTE_MAX:"minCapacity must be less than or equal to maxCapacity"},DIRECT_ACCESS:{NO_DOMAIN:"directAccess cannot be used with domain (no ALB for HTTPS)",NO_LOAD_BALANCER:"directAccess cannot be used with loadBalancer (mutually exclusive)"},GLOBAL_AURORA:{PRIMARY_REGION_REQUIRED:"primaryRegion is required for GlobalAurora databases"},NAT_GATEWAY:{INTEGER:"NAT gateway count must be an integer",MIN:"NAT gateway count must be at least 0",MAX:"NAT gateway count cannot exceed 3"},CIDR_MASK:{INTEGER:"CIDR mask must be an integer",MIN:"CIDR mask must be at least 16",MAX:"CIDR mask cannot exceed 28"},CPU:{INTEGER:"CPU must be an integer",MIN:"CPU must be at least 256 units",MAX:"CPU cannot exceed 4096 units"},KMS:{KEY_REQUIRED:"KMS key ARN is required when using KMS encryption"},READER_INSTANCES:{MAX:"Cannot have more than 15 reader instances",COUNT_OR_INSTANCES:"Cannot specify both 'count' and 'instances' - use one or the other"},GENERATOR_CAPACITY:{MIN:{MIN:"Minimum capacity must be at least 1",MAX:"Minimum capacity cannot exceed 1000"},MAX:{MIN:"Maximum capacity must be at least 1",MAX:"Maximum capacity cannot exceed 1000"}},INSTANCE_TYPE:"Unknown instance type. Common types include: t4g.micro, t4g.small, m5.large",ARCHITECTURE_MISMATCH:"Architecture mismatch between instance type and AMI",ALLOCATED_STORAGE:{INTEGER:"Allocated storage must be an integer",MIN:"Allocated storage must be at least 20 GB",MAX:"Allocated storage cannot exceed 65536 GB"},DLQ:{MAX_RECEIVE_COUNT:{INTEGER:"Max receive count must be an integer",MIN:"Max receive count must be at least 1",MAX:"Max receive count cannot exceed 1000"}},ALARM:{PERCENTAGE:{MIN:"Threshold must be at least 1%",MAX:"Threshold must be at most 100%"},FREE_STORAGE_GIB:{MIN:"Free storage threshold must be at least 1 GiB"}},REGION:"Invalid AWS region",PASCAL_CASE:"Resource name must start with an uppercase letter and contain only alphanumerics (PascalCase).",IMAGE_DOCKER_MUTEX:"image and docker are mutually exclusive",AWS_ACCOUNT_ID:"AWS account id must be exactly 12 digits (no hyphens)",VPC_ID:"VPC id must look like vpc-abc12345",ROLE_ARN:"Role ARN must have the form arn:aws:iam::<account-id>:role/<name>",CIDR:"CIDR must be in dotted-quad/prefix-length form (e.g. 10.0.0.0/16)",VPC_PEER:{MIN_REQUESTER_ACCOUNTS:"At least one requester account id is required",REGION_REQUIRED:"Peer region is required when specified",ROUTE_TABLE_ID_REQUIRED:"Route table id must not be empty"},SCHEDULE_EXPRESSION:"Schedule expression must be 'rate(N minute|minutes|hour|hours|day|days)' with N>=1, or 'cron(<6-field AWS expression>)'"});var gO=Object.defineProperty,ot=(e,t)=>gO(e,"name",{value:t,configurable:!0}),hO=["us-east-2","us-west-2","us-east-1","eu-west-1","eu-central-1","ap-southeast-1"],vO=Object.freeze(hO.flatMap(e=>{let t=Yn(e);return t?[t]:[]})),th=Object.freeze(["us-east-2","us-west-2","us-east-1","eu-west-1","ap-southeast-1"]);function Rc(e){return e?e.split(",").map(t=>t.trim()).filter(Boolean):[]}ot(Rc,"parseRegionList");function rh(e){return Zt.includes(e)}ot(rh,"isValidRegion");function nh(e){return/^[a-z]{2}-[a-z]+-[1-9]$/.test(e)}ot(nh,"isValidRegionFormat");function ih(e){if(!e)return th.slice(0,3);let t=e.toLowerCase().split("-"),n=t[0],i=t.length>1?t[1]:"",r=[];return n&&i&&(r=Zt.filter(o=>o.startsWith(`${n}-${i}`))),r.length===0&&n&&(r=Zt.filter(o=>o.startsWith(`${n}-`))),r.length>0?r.slice(0,3):th.slice(0,3)}ot(ih,"getSuggestions");function oh(e){if(rh(e))return!0;let t=ih(e);return nh(e)?`Unknown region. Try: ${t.join(", ")}`:`Invalid format. Try: ${t.join(", ")}`}ot(oh,"validateRegion");function OA(e){if(!e||e.trim()==="")return!0;let t=Rc(e);for(let n of t){let i=oh(n);if(i!==!0)return i}return!0}ot(OA,"validateRegionList");function ah(e,t){return e.filter(n=>n!==t)}ot(ah,"filterDuplicateRegions");function sh(e){return{label:e.city,value:e.code,description:e.optIn?`${e.code} \u2014 opt-in required`:e.code}}ot(sh,"toRegionOption");function DA(){return it.map(sh)}ot(DA,"getRegionOptions");function wA(e){return it.filter(t=>t.code!==e).map(sh)}ot(wA,"getRegionOptionsExcluding");function MA(e){let t=it.find(n=>n.code===e);return t?t.city:e}ot(MA,"getRegionName");function jA(e){return t=>{let n=Rc(t);return ah(n,e)}}ot(jA,"createRegionFormatter");var Nc="12.4.0";var Cc=["Aurora","Instance","GlobalAurora","ClickHouse"],ii=["FARGATE","FARGATE_SPOT","EC2"],St=["standard","resilient","enterprise"],Pc=["tinkerer","lightweight","standard","resilient","enterprise"],ch="custom",Io=[...Pc,ch];var bO=Object.defineProperty,yO=(e,t)=>bO(e,"name",{value:t,configurable:!0}),cF=Object.freeze({RESOURCE_SUFFIXES:Object.freeze({storage:"Storage",database:"Database",cluster:"Cluster",function:"Function",instance:"Instance",compute:"Compute"})}),To=["ecs","lambda","ec2"],oi=Object.freeze({ECS:"ecs",LAMBDA:"lambda",EC2:"ec2"}),kc=["code","container"],$o=Object.freeze({CODE:"code",CONTAINER:"container"}),Oc=["ARM_64","X86_64"],zA="ARM_64",Ro=["NONE","AWS_IAM"],Dc=["public","internal"],wc=["CPU","MEMORY"],Mc=["ARM","STANDARD"],uh=["Instance","Aurora"],ai=["postgresql","mysql"],No=["web","worker"],LA=["foundation","compliance","hardened"];var jc=["t3.nano","t3.micro","t3.small","t3.medium","t3.large","t3.xlarge","t3.2xlarge","t3a.nano","t3a.micro","t3a.small","t3a.medium","t3a.large","t3a.xlarge","t3a.2xlarge","t4g.nano","t4g.micro","t4g.small","t4g.medium","t4g.large","t4g.xlarge","t4g.2xlarge","c5.large","c5.xlarge","c5.2xlarge","c5.4xlarge","c5.9xlarge","c5.12xlarge","c5.18xlarge","c5.24xlarge","c5a.large","c5a.xlarge","c5a.2xlarge","c5a.4xlarge","c5a.8xlarge","c5a.12xlarge","c5a.16xlarge","c5a.24xlarge","c6g.medium","c6g.large","c6g.xlarge","c6g.2xlarge","c6g.4xlarge","c6g.8xlarge","c6g.12xlarge","c6g.16xlarge","r5.large","r5.xlarge","r5.2xlarge","r5.4xlarge","r5.8xlarge","r5.12xlarge","r5.16xlarge","r5.24xlarge","r5a.large","r5a.xlarge","r5a.2xlarge","r5a.4xlarge","r5a.8xlarge","r5a.12xlarge","r5a.16xlarge","r5a.24xlarge","r6g.medium","r6g.large","r6g.xlarge","r6g.2xlarge","r6g.4xlarge","r6g.8xlarge","r6g.12xlarge","r6g.16xlarge","i3.large","i3.xlarge","i3.2xlarge","i3.4xlarge","i3.8xlarge","i3.16xlarge","p3.2xlarge","p3.8xlarge","p3.16xlarge","g4dn.xlarge","g4dn.2xlarge","g4dn.4xlarge","g4dn.8xlarge","g4dn.12xlarge","g4dn.16xlarge","m5.large","m5.xlarge","m5.2xlarge","m5.4xlarge","m5.8xlarge","m5.12xlarge","m5.16xlarge","m5.24xlarge","m5a.large","m5a.xlarge","m5a.2xlarge","m5a.4xlarge","m5a.8xlarge","m5a.12xlarge","m5a.16xlarge","m5a.24xlarge"],UA=[0,1,5,10,15,30,60];function at(e,t){return e.includes(t)}yO(at,"constIncludes");var FA=1,BA=65535,pF=Object.freeze({postgresql:5432,mysql:3306}),VA=128,ZA=10240,zc=1,Lc=900,lh=1,dh=1e3,si=100,GA=100;var WA=3e3;var HA=["GET","POST","PUT","DELETE","HEAD","OPTIONS","PATCH"],KA=["standard","assets","upload","website"],ci=["AES256","KMS"];var SO=Object.defineProperty,Co=(e,t)=>SO(e,"name",{value:t,configurable:!0}),Ge=Co(e=>s.union([s.literal(!1),e]),"optionalOrDisabled"),Fr={check:Co(e=>e.minCapacity!==void 0&&e.maxCapacity!==void 0?e.minCapacity<=e.maxCapacity:!0,"check"),params:{message:d.CAPACITY_CONSTRAINT.MIN_LTE_MAX,path:["maxCapacity"]}},Po=Co(e=>s.number().int(d.MEMORY_LIMIT.INTEGER).min(e,e===128?d.MEMORY_LIMIT.MIN_128:d.MEMORY_LIMIT.MIN_512).max(30720,d.MEMORY_LIMIT.MAX),"memoryLimitMiBSchema"),B=s.string().min(1,d.REQUIRED.RESOURCE_NAME).max(63,d.MAX_LENGTH.RESOURCE_NAME).regex(z.RESOURCE_NAME,d.RESOURCE_NAME),XA=s.string().min(1,d.REQUIRED.BUCKET_NAME).max(63,d.MAX_LENGTH.BUCKET_NAME).regex(z.BUCKET_NAME,d.BUCKET_NAME),JA=s.string().min(1,d.REQUIRED.DATABASE_NAME).max(63,d.MAX_LENGTH.DATABASE_NAME).regex(z.DATABASE_NAME,d.DATABASE_NAME);function Uc(e,t=z.IDENTIFIER,n=d.IDENTIFIER){return s.string().min(2,d.IDENTIFIER_MIN_LENGTH).max(50,e).regex(t,n).refine(i=>!i.endsWith("-"),{message:d.IDENTIFIER_NO_TRAILING_HYPHEN}).refine(i=>!i.includes("--"),{message:d.IDENTIFIER_NO_CONSECUTIVE_HYPHENS})}Co(Uc,"identifierSchema");var ve=Uc(d.MAX_LENGTH.APP_NAME),SF=Uc(d.MAX_LENGTH.APP_NAME,z.NEW_APP_NAME,d.NEW_APP_NAME),Br=s.number().int(d.PORT.INTEGER).min(FA,d.PORT.MIN).max(BA,d.PORT.MAX),Te=s.object({key:s.string(),sourceText:s.string()}).strict(),_O=s.object({__identifier:s.string()}).strict(),EO=s.object({__expression:s.string()}).strict(),AO=s.object({__call:s.string()}).strict(),xO=s.union([_O,EO,AO]),IO=s.union([s.string(),s.number(),s.boolean(),xO]),ui=s.record(s.string().regex(z.ENV_VAR_NAME,d.ENV_VAR_NAME),IO),TO=s.object({id:s.string(),name:s.string().optional(),arn:s.string().optional(),field:s.string().optional()}).strict().refine(e=>e.name!==void 0!=(e.arn!==void 0),{message:"secretsImport requires exactly one of `name` or `arn`."}),qA=s.record(s.string(),TO),_F=s.record(s.string(),s.unknown()),mh=s.enum(Io).describe(`Application type must be one of: ${Io.join(", ")}`),ph=s.enum(Ct).describe(`OpenNext deployment pattern: ${Ct.join(", ")}`),$O=s.enum(["before-imports","after-imports","after-app-init","after-tags","after-resource","end-of-file"]),RO=s.enum(["import","app-init","tags","database","compute","storage","network","messaging","cdn","pattern","vpc-peer","vpc-peer-accepter","cross-plan-connection","custom"]),QA=s.object({sourceText:s.string(),position:$O,afterManagedResource:s.object({type:RO,name:s.string().optional()}).strict().optional(),originalLine:s.number().int().optional(),leadingComments:s.array(s.string()).optional(),orphaned:s.boolean().optional(),orphanedComment:s.string().optional()}).strict(),ex=s.union([s.object({tier:s.enum(St)}).strict(),s.literal(!1)]),tx=s.union([s.object({instanceType:s.string().optional()}).strict(),s.literal(!1)]),NO=Uc(d.MAX_LENGTH.ORGANISATION_NAME),CO=s.string().regex(z.EMAIL,d.EMAIL),YA=s.string().refine(e=>Zt.includes(e),{message:d.REGION}),EF=s.object({name:NO,email:CO,accountName:s.string().optional(),primaryRegion:YA.optional().default(Kn),secondaryRegions:s.array(YA).optional(),security:s.enum(LA).optional(),force:s.boolean().optional()}).strict();function ko(e){return e.issues.map(t=>`${t.path.length>0?`${t.path.join(".")}: `:""}${t.message}`).join(`
+`:"";return O+Pe+u+v}$c(PA,"extractErrorWindow");var dO=Object.defineProperty,ni=(e,t)=>dO(e,"name",{value:t,configurable:!0});function Xg(e){return e.success===!0}ni(Xg,"isSuccess");function Jg(e){return e.success===!1}ni(Jg,"isFailure");function C(e){return{success:!0,data:e}}ni(C,"success");function I(e){return{success:!1,error:e}}ni(I,"failure");async function qg(e){try{let t=await e();return C(t)}catch(t){return I(yt(t))}}ni(qg,"tryAsync");function Qg(e){try{let t=e();return C(t)}catch(t){return I(yt(t))}}ni(Qg,"trySync");var mO=Object.defineProperty,pO=(e,t)=>mO(e,"name",{value:t,configurable:!0}),kA=/^[a-zA-Z][a-zA-Z0-9-]*$/,fO=Eo.source.replace(/^\^|\$$/g,""),z=Object.freeze({IDENTIFIER:kA,NEW_APP_NAME:/^[a-z][a-z0-9-]*$/,RESOURCE_NAME:/^[a-zA-Z][a-zA-Z0-9]*$/,ECS_SERVICE_NAME:kA,BUCKET_NAME:/^[a-z][a-z0-9-]*[a-z0-9]$|^[a-z][a-z0-9]*$/,DATABASE_NAME:/^[a-zA-Z][a-zA-Z0-9_]*$/,RESOURCE_TYPE:/^[a-z]+(:[a-z]+)?$/,SSM_PATH:new RegExp(`^(?:/${fO})+$`),SECRET_NAME:Ac,SSM_COMPONENT:Eo,EMAIL:/^[^\s@]+@[^\s@]+\.[^\s@]+$/,DOCKER_IMAGE:/^[a-z0-9][a-z0-9._-]*[a-z0-9](:[a-z0-9._-]+)?$/,DOMAIN:/^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)+$/i,HTTP_ORIGIN:/^https?:\/\/[a-z0-9.-]+(:\d+)?$/i,PASCAL_CASE:/^[A-Z][A-Za-z0-9]*$/,AWS_ACCOUNT_ID:/^\d{12}$/,VPC_ID:/^vpc-[a-z0-9]+$/,ROLE_ARN:/^arn:aws[a-zA-Z-]*:iam::\d{12}:role\/.+$/,CIDR:/^((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\.){3}(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\/(3[0-2]|[12]?\d)$/,SCHEDULE_EXPRESSION:/^(rate\(1 (?:minute|hour|day)\)|rate\((?:[2-9]|[1-9]\d+) (?:minutes|hours|days)\)|cron\([^\s()]+ [^\s()]+ [^\s()]+ [^\s()]+ [^\s()]+ [^\s()]+\))$/,LAMBDA_RUNTIME_IDENTIFIER:/^[A-Za-z0-9._-]+$/,ENV_VAR_NAME:/^[A-Za-z_][A-Za-z0-9_]*$/});function eh(e){let t=/^rate\((\d+) (minute|minutes|hour|hours|day|days)\)$/.exec(e);if(!t)return;let n=t[1],i=t[2];if(n===void 0||i===void 0)return;let r=parseInt(n,10);if(!Number.isFinite(r)||r<1)return;let o=i==="minute"||i==="hour"||i==="day";if(!(o&&r!==1)&&!(!o&&r===1))return i==="minute"||i==="minutes"?{everyMs:r*6e4}:i==="hour"||i==="hours"?{everyMs:r*60*6e4}:{everyMs:r*24*60*6e4}}pO(eh,"parseRateExpression");var d=Object.freeze({IDENTIFIER:"Must start with a letter, contain only letters, numbers, and hyphens",NEW_APP_NAME:"Must start with a lowercase letter and contain only lowercase letters, numbers, and hyphens",IDENTIFIER_MIN_LENGTH:"Must be at least 2 characters",IDENTIFIER_NO_TRAILING_HYPHEN:"Must not end with a hyphen",IDENTIFIER_NO_CONSECUTIVE_HYPHENS:"Must not contain consecutive hyphens",RESOURCE_NAME:"Must start with a letter and contain only letters and numbers (PascalCase recommended)",ECS_SERVICE_NAME:"Service name must start with a letter and contain only letters, numbers, and hyphens",BUCKET_NAME:"Bucket name must start with a lowercase letter and contain only lowercase letters, numbers, and hyphens",DATABASE_NAME:"Database name must start with a letter and contain only letters, numbers, and underscores",RESOURCE_TYPE:"Resource type must be in format 'category' or 'category:type'",SSM_PATH:"SSM path must start with / and contain valid namespace segments (e.g., /myapp/ApiCluster/service)",SECRET_NAME:Cg,SSM_COMPONENT:xc,EMAIL:"Please enter a valid email address",DOMAIN:"Please enter a valid domain (e.g., cms.example.com)",DOCKER_IMAGE:"Invalid Docker image name format",REQUIRED:{APP_NAME:"Application name is required",RESOURCE_NAME:"Resource name is required",BUCKET_NAME:"Bucket name is required",SERVICE_NAME:"Service name is required",NETWORK_NAME:"Network name is required",DATABASE_NAME:"Database name is required",ORGANISATION_NAME:"Organisation name is required",EMAIL:"Email is required",NAME:"Name is required",USERNAME:"Username is required",CONTAINER_NAME:"Container name is required",GROUP:"Group is required",PATTERN_NAME:"Pattern name is required",SOURCE:"Source directory is required",BUILD_COMMAND:"Build command is required",OUTPUT_DIR:"Output directory is required",FORMS_TO:"Forms recipient address is required",ROUTING_PATH:"Routing path is required",RESOURCE_REFERENCE:"Resource reference is required",RESOURCE_TYPE:"Resource type is required",VARIANT:"Variant is required",SUBTYPE:"Subtype is required",DEPLOY_TARGET:"Deploy target is required",DESTROY_TARGET:"Destroy target is required"},MAX_LENGTH:{APP_NAME:"Application name must be 50 characters or less",RESOURCE_NAME:"Resource name must be 63 characters or less",BUCKET_NAME:"Bucket name must be 63 characters or less",SERVICE_NAME:"Service name must be 255 characters or less",NETWORK_NAME:"Network name must be 50 characters or less",DATABASE_NAME:"Database name must be 63 characters or less",ORGANISATION_NAME:"Organisation name must be 50 characters or less"},PORT:{INTEGER:"Port must be an integer",MIN:"Port must be at least 1",MAX:"Port cannot exceed 65535"},USERNAME:{MAX_LENGTH:"Username cannot exceed 63 characters"},LAMBDA:{MEMORY:{INTEGER:"Lambda memory must be an integer",MIN:"Memory must be at least 128 MB",MAX:"Memory cannot exceed 10240 MB",MULTIPLE:"Memory must be 128 MB or a multiple of 64 MB"},TIMEOUT:{INTEGER:"Timeout must be an integer",MIN:"Timeout must be at least 1 second",MAX:"Timeout cannot exceed 900 seconds"},RUNTIME:"Lambda runtime must contain only letters, digits, dots, underscores, or dashes (e.g. 'NODEJS_20_X' or 'nodejs20.x')"},ENV_VAR_NAME:"Environment variable names must start with a letter or underscore and contain only letters, digits, and underscores",PRIORITY:{INTEGER:"Priority must be an integer",MIN:"Priority must be at least 1",MAX:"Priority cannot exceed 50000"},CAPACITY:{MIN:{INTEGER:"Minimum capacity must be an integer",MIN_0:"Minimum capacity must be at least 0",MIN_1:"Minimum capacity must be at least 1",MAX:"Minimum capacity cannot exceed 100"},MAX:{INTEGER:"Maximum capacity must be an integer",MIN_0:"Maximum capacity must be at least 0",MIN_1:"Maximum capacity must be at least 1",MAX:"Maximum capacity cannot exceed 100"},DESIRED:{INTEGER:"Desired count must be an integer",MIN:"Desired count must be at least 0",MAX:"Desired count cannot exceed 100"},WARM_POOL_REQUIRED:"minCapacity 0 requires a warmPool \u2014 without it, new tasks wait 60-90s for a cold instance launch",WARM_POOL:{MIN_SIZE:{INTEGER:"Warm pool minSize must be an integer",MIN:"Warm pool minSize must be at least 0",MAX:"Warm pool minSize cannot exceed 100"},MIN_SIZE_EXCEEDS_MAX_CAPACITY:"warmPool.minSize cannot exceed maxCapacity \u2014 the warm pool cannot hold more instances than the ASG allows"}},MEMORY_LIMIT:{INTEGER:"Memory limit must be an integer",MIN_512:"Memory limit must be at least 512 MiB",MIN_128:"Memory limit must be at least 128 MiB",MAX:"Memory limit cannot exceed 30720 MiB"},DATABASE:{PORT:{INTEGER:"Database port must be an integer",MIN:"Database port must be at least 1024",MAX:"Database port cannot exceed 65535"},NAME:{REQUIRED:"Database name is required",MAX_LENGTH:"Database name must be 63 characters or less"}},BACKUP_RETENTION:{INTEGER:"Backup retention must be an integer",MIN:"Backup retention must be at least 1 day",MAX:"Backup retention cannot exceed 35 days"},SQS:{VISIBILITY_TIMEOUT:{INTEGER:"Visibility timeout must be an integer",MIN:"Visibility timeout must be at least 0 seconds",MAX:"Visibility timeout cannot exceed 43200 seconds (12 hours)"},RETENTION_PERIOD:{INTEGER:"Retention period must be an integer",MIN:"Retention period must be at least 60 seconds",MAX:"Retention period cannot exceed 1209600 seconds (14 days)"}},READER:{COUNT:{INTEGER:"Reader count must be an integer",MIN:"Reader count must be at least 0",MAX:"Reader count cannot exceed 15"}},IDENTIFIER_SUFFIX:{REQUIRED:"Identifier suffix is required when specified",MAX_LENGTH:"Identifier suffix cannot exceed 50 characters"},ROTATION:{INTEGER:"Rotation days must be an integer",MIN:"Rotation interval must be at least 1 day",MAX:"Rotation interval cannot exceed 365 days"},MAX_CONNECTIONS:{INTEGER:"Max connections must be an integer",MIN:"Max connections must be at least 1",MAX:"Max connections cannot exceed 100"},MONITORING_INTERVAL:{INTEGER:"Monitoring interval must be an integer",MIN:"Monitoring interval must be at least 0",MAX:"Monitoring interval cannot exceed 60 seconds",VALUES:"Monitoring interval must be 0, 1, 5, 10, 15, 30, or 60 seconds"},RETENTION_DAYS:{INTEGER:"Retention days must be an integer",MIN:"Retention days must be at least 1",MAX:"Retention days cannot exceed 365"},BATCH_SIZE:{INTEGER:"Batch size must be an integer",MIN:"Batch size must be at least 1",MAX:"Batch size cannot exceed 10000"},SERVICE:{UNIQUE_WITHIN_CLUSTER:"Service names must be unique within a cluster",MIN_REQUIRED:"At least one service is required",ROUTING_REQUIRED:"Multiple services with ports require routing config (path or host)"},PROXY_CONFIG:{MAX_IDLE_CONNECTIONS:{INTEGER:"Max idle connections must be an integer",MIN:"Max idle connections must be at least 0",MAX:"Max idle connections cannot exceed 100"},BORROW_TIMEOUT:{INTEGER:"Connection borrow timeout must be an integer",MIN:"Connection borrow timeout must be at least 1 second",MAX:"Connection borrow timeout cannot exceed 3600 seconds"}},MAX_AZS:{INTEGER:"Max AZs must be an integer",MIN:"Max AZs must be at least 1",MAX:"Max AZs cannot exceed 3"},BATCHING_WINDOW:{INTEGER:"Max batching window must be an integer",MIN:"Max batching window must be at least 0",MAX:"Max batching window cannot exceed 300 seconds"},HEALTH_CHECK:{INTERVAL:{INTEGER:"Health check interval must be an integer",MIN:"Health check interval must be at least 5 seconds",MAX:"Health check interval cannot exceed 300 seconds"},TIMEOUT:{INTEGER:"Health check timeout must be an integer",MIN:"Health check timeout must be at least 2 seconds",MAX:"Health check timeout cannot exceed 60 seconds"},RETRIES:{INTEGER:"Health check retries must be an integer",MIN:"Health check retries must be at least 1",MAX:"Health check retries cannot exceed 10"},START_PERIOD:{INTEGER:"Health check start period must be an integer",MIN:"Health check start period must be at least 0 seconds",MAX:"Health check start period cannot exceed 300 seconds"}},EPHEMERAL_STORAGE:{INTEGER:"Ephemeral storage size must be an integer",MIN:"Ephemeral storage size must be at least 512 MB",MAX:"Ephemeral storage size cannot exceed 10240 MB"},MAX_MESSAGE_SIZE:{INTEGER:"Max message size must be an integer",MIN:"Max message size must be at least 1024 bytes",MAX:"Max message size cannot exceed 262144 bytes (256 KB)"},CAPACITY_CONSTRAINT:{MIN_LTE_MAX:"minCapacity must be less than or equal to maxCapacity"},DIRECT_ACCESS:{NO_DOMAIN:"directAccess cannot be used with domain (no ALB for HTTPS)",NO_LOAD_BALANCER:"directAccess cannot be used with loadBalancer (mutually exclusive)"},GLOBAL_AURORA:{PRIMARY_REGION_REQUIRED:"primaryRegion is required for GlobalAurora databases"},NAT_GATEWAY:{INTEGER:"NAT gateway count must be an integer",MIN:"NAT gateway count must be at least 0",MAX:"NAT gateway count cannot exceed 3"},CIDR_MASK:{INTEGER:"CIDR mask must be an integer",MIN:"CIDR mask must be at least 16",MAX:"CIDR mask cannot exceed 28"},CPU:{INTEGER:"CPU must be an integer",MIN:"CPU must be at least 256 units",MAX:"CPU cannot exceed 4096 units"},KMS:{KEY_REQUIRED:"KMS key ARN is required when using KMS encryption"},READER_INSTANCES:{MAX:"Cannot have more than 15 reader instances",COUNT_OR_INSTANCES:"Cannot specify both 'count' and 'instances' - use one or the other"},GENERATOR_CAPACITY:{MIN:{MIN:"Minimum capacity must be at least 1",MAX:"Minimum capacity cannot exceed 1000"},MAX:{MIN:"Maximum capacity must be at least 1",MAX:"Maximum capacity cannot exceed 1000"}},INSTANCE_TYPE:"Unknown instance type. Common types include: t4g.micro, t4g.small, m5.large",ARCHITECTURE_MISMATCH:"Architecture mismatch between instance type and AMI",ALLOCATED_STORAGE:{INTEGER:"Allocated storage must be an integer",MIN:"Allocated storage must be at least 20 GB",MAX:"Allocated storage cannot exceed 65536 GB"},DLQ:{MAX_RECEIVE_COUNT:{INTEGER:"Max receive count must be an integer",MIN:"Max receive count must be at least 1",MAX:"Max receive count cannot exceed 1000"}},ALARM:{PERCENTAGE:{MIN:"Threshold must be at least 1%",MAX:"Threshold must be at most 100%"},FREE_STORAGE_GIB:{MIN:"Free storage threshold must be at least 1 GiB"}},REGION:"Invalid AWS region",PASCAL_CASE:"Resource name must start with an uppercase letter and contain only alphanumerics (PascalCase).",IMAGE_DOCKER_MUTEX:"image and docker are mutually exclusive",AWS_ACCOUNT_ID:"AWS account id must be exactly 12 digits (no hyphens)",VPC_ID:"VPC id must look like vpc-abc12345",ROLE_ARN:"Role ARN must have the form arn:aws:iam::<account-id>:role/<name>",CIDR:"CIDR must be in dotted-quad/prefix-length form (e.g. 10.0.0.0/16)",VPC_PEER:{MIN_REQUESTER_ACCOUNTS:"At least one requester account id is required",REGION_REQUIRED:"Peer region is required when specified",ROUTE_TABLE_ID_REQUIRED:"Route table id must not be empty"},SCHEDULE_EXPRESSION:"Schedule expression must be 'rate(N minute|minutes|hour|hours|day|days)' with N>=1, or 'cron(<6-field AWS expression>)'"});var gO=Object.defineProperty,ot=(e,t)=>gO(e,"name",{value:t,configurable:!0}),hO=["us-east-2","us-west-2","us-east-1","eu-west-1","eu-central-1","ap-southeast-1"],vO=Object.freeze(hO.flatMap(e=>{let t=Yn(e);return t?[t]:[]})),th=Object.freeze(["us-east-2","us-west-2","us-east-1","eu-west-1","ap-southeast-1"]);function Rc(e){return e?e.split(",").map(t=>t.trim()).filter(Boolean):[]}ot(Rc,"parseRegionList");function rh(e){return Zt.includes(e)}ot(rh,"isValidRegion");function nh(e){return/^[a-z]{2}-[a-z]+-[1-9]$/.test(e)}ot(nh,"isValidRegionFormat");function ih(e){if(!e)return th.slice(0,3);let t=e.toLowerCase().split("-"),n=t[0],i=t.length>1?t[1]:"",r=[];return n&&i&&(r=Zt.filter(o=>o.startsWith(`${n}-${i}`))),r.length===0&&n&&(r=Zt.filter(o=>o.startsWith(`${n}-`))),r.length>0?r.slice(0,3):th.slice(0,3)}ot(ih,"getSuggestions");function oh(e){if(rh(e))return!0;let t=ih(e);return nh(e)?`Unknown region. Try: ${t.join(", ")}`:`Invalid format. Try: ${t.join(", ")}`}ot(oh,"validateRegion");function OA(e){if(!e||e.trim()==="")return!0;let t=Rc(e);for(let n of t){let i=oh(n);if(i!==!0)return i}return!0}ot(OA,"validateRegionList");function ah(e,t){return e.filter(n=>n!==t)}ot(ah,"filterDuplicateRegions");function sh(e){return{label:e.city,value:e.code,description:e.optIn?`${e.code} \u2014 opt-in required`:e.code}}ot(sh,"toRegionOption");function DA(){return it.map(sh)}ot(DA,"getRegionOptions");function wA(e){return it.filter(t=>t.code!==e).map(sh)}ot(wA,"getRegionOptionsExcluding");function MA(e){let t=it.find(n=>n.code===e);return t?t.city:e}ot(MA,"getRegionName");function jA(e){return t=>{let n=Rc(t);return ah(n,e)}}ot(jA,"createRegionFormatter");var Nc="13.1.0";var Cc=["Aurora","Instance","GlobalAurora","ClickHouse"],ii=["FARGATE","FARGATE_SPOT","EC2"],St=["standard","resilient","enterprise"],Pc=["tinkerer","lightweight","standard","resilient","enterprise"],ch="custom",Io=[...Pc,ch];var bO=Object.defineProperty,yO=(e,t)=>bO(e,"name",{value:t,configurable:!0}),cF=Object.freeze({RESOURCE_SUFFIXES:Object.freeze({storage:"Storage",database:"Database",cluster:"Cluster",function:"Function",instance:"Instance",compute:"Compute"})}),To=["ecs","lambda","ec2"],oi=Object.freeze({ECS:"ecs",LAMBDA:"lambda",EC2:"ec2"}),kc=["code","container"],$o=Object.freeze({CODE:"code",CONTAINER:"container"}),Oc=["ARM_64","X86_64"],zA="ARM_64",Ro=["NONE","AWS_IAM"],Dc=["public","internal"],wc=["CPU","MEMORY"],Mc=["ARM","STANDARD"],uh=["Instance","Aurora"],ai=["postgresql","mysql"],No=["web","worker"],LA=["foundation","compliance","hardened"];var jc=["t3.nano","t3.micro","t3.small","t3.medium","t3.large","t3.xlarge","t3.2xlarge","t3a.nano","t3a.micro","t3a.small","t3a.medium","t3a.large","t3a.xlarge","t3a.2xlarge","t4g.nano","t4g.micro","t4g.small","t4g.medium","t4g.large","t4g.xlarge","t4g.2xlarge","c5.large","c5.xlarge","c5.2xlarge","c5.4xlarge","c5.9xlarge","c5.12xlarge","c5.18xlarge","c5.24xlarge","c5a.large","c5a.xlarge","c5a.2xlarge","c5a.4xlarge","c5a.8xlarge","c5a.12xlarge","c5a.16xlarge","c5a.24xlarge","c6g.medium","c6g.large","c6g.xlarge","c6g.2xlarge","c6g.4xlarge","c6g.8xlarge","c6g.12xlarge","c6g.16xlarge","r5.large","r5.xlarge","r5.2xlarge","r5.4xlarge","r5.8xlarge","r5.12xlarge","r5.16xlarge","r5.24xlarge","r5a.large","r5a.xlarge","r5a.2xlarge","r5a.4xlarge","r5a.8xlarge","r5a.12xlarge","r5a.16xlarge","r5a.24xlarge","r6g.medium","r6g.large","r6g.xlarge","r6g.2xlarge","r6g.4xlarge","r6g.8xlarge","r6g.12xlarge","r6g.16xlarge","i3.large","i3.xlarge","i3.2xlarge","i3.4xlarge","i3.8xlarge","i3.16xlarge","p3.2xlarge","p3.8xlarge","p3.16xlarge","g4dn.xlarge","g4dn.2xlarge","g4dn.4xlarge","g4dn.8xlarge","g4dn.12xlarge","g4dn.16xlarge","m5.large","m5.xlarge","m5.2xlarge","m5.4xlarge","m5.8xlarge","m5.12xlarge","m5.16xlarge","m5.24xlarge","m5a.large","m5a.xlarge","m5a.2xlarge","m5a.4xlarge","m5a.8xlarge","m5a.12xlarge","m5a.16xlarge","m5a.24xlarge"],UA=[0,1,5,10,15,30,60];function at(e,t){return e.includes(t)}yO(at,"constIncludes");var FA=1,BA=65535,pF=Object.freeze({postgresql:5432,mysql:3306}),VA=128,ZA=10240,zc=1,Lc=900,lh=1,dh=1e3,si=100,GA=100;var WA=3e3;var HA=["GET","POST","PUT","DELETE","HEAD","OPTIONS","PATCH"],KA=["standard","assets","upload","website"],ci=["AES256","KMS"];var SO=Object.defineProperty,Co=(e,t)=>SO(e,"name",{value:t,configurable:!0}),Ge=Co(e=>s.union([s.literal(!1),e]),"optionalOrDisabled"),Fr={check:Co(e=>e.minCapacity!==void 0&&e.maxCapacity!==void 0?e.minCapacity<=e.maxCapacity:!0,"check"),params:{message:d.CAPACITY_CONSTRAINT.MIN_LTE_MAX,path:["maxCapacity"]}},Po=Co(e=>s.number().int(d.MEMORY_LIMIT.INTEGER).min(e,e===128?d.MEMORY_LIMIT.MIN_128:d.MEMORY_LIMIT.MIN_512).max(30720,d.MEMORY_LIMIT.MAX),"memoryLimitMiBSchema"),B=s.string().min(1,d.REQUIRED.RESOURCE_NAME).max(63,d.MAX_LENGTH.RESOURCE_NAME).regex(z.RESOURCE_NAME,d.RESOURCE_NAME),XA=s.string().min(1,d.REQUIRED.BUCKET_NAME).max(63,d.MAX_LENGTH.BUCKET_NAME).regex(z.BUCKET_NAME,d.BUCKET_NAME),JA=s.string().min(1,d.REQUIRED.DATABASE_NAME).max(63,d.MAX_LENGTH.DATABASE_NAME).regex(z.DATABASE_NAME,d.DATABASE_NAME);function Uc(e,t=z.IDENTIFIER,n=d.IDENTIFIER){return s.string().min(2,d.IDENTIFIER_MIN_LENGTH).max(50,e).regex(t,n).refine(i=>!i.endsWith("-"),{message:d.IDENTIFIER_NO_TRAILING_HYPHEN}).refine(i=>!i.includes("--"),{message:d.IDENTIFIER_NO_CONSECUTIVE_HYPHENS})}Co(Uc,"identifierSchema");var ve=Uc(d.MAX_LENGTH.APP_NAME),SF=Uc(d.MAX_LENGTH.APP_NAME,z.NEW_APP_NAME,d.NEW_APP_NAME),Br=s.number().int(d.PORT.INTEGER).min(FA,d.PORT.MIN).max(BA,d.PORT.MAX),Te=s.object({key:s.string(),sourceText:s.string()}).strict(),_O=s.object({__identifier:s.string()}).strict(),EO=s.object({__expression:s.string()}).strict(),AO=s.object({__call:s.string()}).strict(),xO=s.union([_O,EO,AO]),IO=s.union([s.string(),s.number(),s.boolean(),xO]),ui=s.record(s.string().regex(z.ENV_VAR_NAME,d.ENV_VAR_NAME),IO),TO=s.object({id:s.string(),name:s.string().optional(),arn:s.string().optional(),field:s.string().optional()}).strict().refine(e=>e.name!==void 0!=(e.arn!==void 0),{message:"secretsImport requires exactly one of `name` or `arn`."}),qA=s.record(s.string(),TO),_F=s.record(s.string(),s.unknown()),mh=s.enum(Io).describe(`Application type must be one of: ${Io.join(", ")}`),ph=s.enum(Ct).describe(`OpenNext deployment pattern: ${Ct.join(", ")}`),$O=s.enum(["before-imports","after-imports","after-app-init","after-tags","after-resource","end-of-file"]),RO=s.enum(["import","app-init","tags","database","compute","storage","network","messaging","cdn","pattern","vpc-peer","vpc-peer-accepter","cross-plan-connection","custom"]),QA=s.object({sourceText:s.string(),position:$O,afterManagedResource:s.object({type:RO,name:s.string().optional()}).strict().optional(),originalLine:s.number().int().optional(),leadingComments:s.array(s.string()).optional(),orphaned:s.boolean().optional(),orphanedComment:s.string().optional()}).strict(),ex=s.union([s.object({tier:s.enum(St)}).strict(),s.literal(!1)]),tx=s.union([s.object({instanceType:s.string().optional()}).strict(),s.literal(!1)]),NO=Uc(d.MAX_LENGTH.ORGANISATION_NAME),CO=s.string().regex(z.EMAIL,d.EMAIL),YA=s.string().refine(e=>Zt.includes(e),{message:d.REGION}),EF=s.object({name:NO,email:CO,accountName:s.string().optional(),primaryRegion:YA.optional().default(Kn),secondaryRegions:s.array(YA).optional(),security:s.enum(LA).optional(),force:s.boolean().optional()}).strict();function ko(e){return e.issues.map(t=>`${t.path.length>0?`${t.path.join(".")}: `:""}${t.message}`).join(`
 `)}Co(ko,"getZodErrorMessage");var Fc=s.number().min(1,d.ALARM.PERCENTAGE.MIN).max(100,d.ALARM.PERCENTAGE.MAX),fh=s.union([Fc,s.literal(!1)]),PO=s.number().min(1,d.ALARM.FREE_STORAGE_GIB.MIN),rx=s.union([s.literal(!1),s.object({cpuThreshold:fh.optional(),memoryThreshold:fh.optional(),runningTasksMinimum:s.number().int().min(0).optional(),http5xxThreshold:fh.optional()}).strict()]),nx=s.union([s.literal(!1),s.object({cpuThreshold:Fc.optional(),freeStorageThresholdGiB:PO.optional(),connectionsThreshold:s.number().int().min(1).optional()}).strict()]),ix=s.union([s.literal(!1),s.object({errorRateThreshold:Fc.optional(),durationThresholdPercent:Fc.optional()}).strict()]);var Gt=s.number().int(d.BACKUP_RETENTION.INTEGER).min(1,d.BACKUP_RETENTION.MIN).max(35,d.BACKUP_RETENTION.MAX),Oo=s.number().int(d.MONITORING_INTERVAL.INTEGER).refine(e=>at(UA,e),{message:d.MONITORING_INTERVAL.VALUES}),Vc=s.number().int(d.DATABASE.PORT.INTEGER).min(1024,d.DATABASE.PORT.MIN).max(65535,d.DATABASE.PORT.MAX),kO=s.enum(Cc).describe(`Database type must be one of: ${Cc.join(", ")}`),OO=s.object({maxConnections:s.number().int(d.MAX_CONNECTIONS.INTEGER).min(1,d.MAX_CONNECTIONS.MIN).max(100,d.MAX_CONNECTIONS.MAX).optional(),maxIdleConnections:s.number().int(d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.INTEGER).min(0,d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MIN).max(100,d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MAX).optional(),connectionBorrowTimeout:s.number().int(d.PROXY_CONFIG.BORROW_TIMEOUT.INTEGER).min(1,d.PROXY_CONFIG.BORROW_TIMEOUT.MIN).max(3600,d.PROXY_CONFIG.BORROW_TIMEOUT.MAX).optional(),requireTLS:s.boolean().optional()}).strict().describe("RDS Proxy configuration"),DO=s.object({instanceType:s.string().optional(),availabilityZone:s.string().optional()}).strict().describe("Read replica configuration"),wO=s.object({automaticallyAfterDays:s.number().int(d.ROTATION.INTEGER).min(1,d.ROTATION.MIN).max(365,d.ROTATION.MAX).optional()}).strict().describe("Secret rotation configuration"),Zc=s.object({username:s.string().min(1,d.REQUIRED.USERNAME).max(63,d.USERNAME.MAX_LENGTH).optional(),secretRotation:wO.optional()}).strict().describe("Database credentials configuration"),Gc=Ge(OO),Wc=Ge(DO),MO=s.object({scaleWithWriter:s.boolean().optional(),enableDatabaseInsights:s.boolean().optional(),identifierSuffix:s.string().min(1,d.IDENTIFIER_SUFFIX.REQUIRED).max(50,d.IDENTIFIER_SUFFIX.MAX_LENGTH).optional(),availabilityZone:s.string().optional()}).strict().describe("Configuration for a single Aurora reader instance"),Do=s.object({enableDatabaseInsights:s.boolean().optional(),identifierSuffix:s.string().min(1,d.IDENTIFIER_SUFFIX.REQUIRED).max(50,d.IDENTIFIER_SUFFIX.MAX_LENGTH).optional(),availabilityZone:s.string().optional()}).strict().describe("Configuration for Aurora writer instance"),jO=s.object({count:s.number().int(d.READER.COUNT.INTEGER).min(0,d.READER.COUNT.MIN).max(15,d.READER.COUNT.MAX).optional(),instances:s.array(MO).max(15,d.READER_INSTANCES.MAX).optional(),defaultEnableDatabaseInsights:s.boolean().optional()}).strict().refine(e=>!(e.count!==void 0&&e.instances!==void 0),{message:d.READER_INSTANCES.COUNT_OR_INSTANCES,path:["count"]}).describe("Aurora readers configuration"),wo=Ge(jO),zO=s.object({awsManaged:s.literal(!0)}).strict(),LO=s.object({useCMK:s.literal(!0)}).strict(),ox=s.union([zO,LO]),UO=s.object({mode:s.enum(["standard","advanced"]).optional(),encryptionKey:ox.optional()}).strict().describe("Database Insights configuration"),Hc=Ge(UO),Kc=s.object({storageKey:ox.optional()}).strict().describe("Encryption configuration (DESTRUCTIVE to change storageKey)"),ax=s.object({name:B,type:kO,databaseName:s.string().min(1,d.REQUIRED.DATABASE_NAME),instanceType:s.string().optional(),allocatedStorage:s.number().optional(),multiAz:s.boolean().optional(),publiclyAccessible:s.boolean().optional(),databaseInsights:Hc.optional(),port:Vc.optional(),deletionProtection:s.boolean().optional(),proxy:Gc.optional(),credentials:Zc.optional(),readReplica:Wc.optional(),encryption:Kc.optional(),writer:Do.optional(),readers:wo.optional(),backupRetention:Gt.optional(),preferredMaintenanceWindow:s.string().optional(),monitoringInterval:Oo.optional(),primaryRegion:s.string().optional(),secondaryRegions:s.array(s.string()).optional(),globalClusterIdentifier:s.string().optional(),enableGlobalWriteForwarding:s.boolean().optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional(),databaseEngine:s.enum(ai).optional(),engineExpression:s.string().optional(),variableName:s.string().optional(),extraProperties:s.array(Te).optional(),alarms:nx.optional()}).strict(),Yc=s.object({appName:ve,nameProvidedByFlag:s.boolean().optional(),databaseName:s.string().min(1,d.REQUIRED.DATABASE_NAME).max(63,d.MAX_LENGTH.DATABASE_NAME).regex(z.DATABASE_NAME,d.DATABASE_NAME),resourceName:B.optional(),connectionConfig:s.object({connectToCompute:s.array(s.string()).optional(),connectToServices:s.array(s.string()).optional()}).strict().optional(),databaseInsights:Hc.optional(),port:Vc.optional(),proxy:Gc.optional(),credentials:Zc.optional(),encryption:Kc.optional(),deletionProtection:s.boolean().optional()}).strict(),sx={databaseType:s.literal("Instance"),instanceType:s.string().optional(),multiAz:s.boolean().optional(),readReplica:Wc.optional(),publiclyAccessible:s.boolean().optional(),backupRetention:Gt.optional(),allocatedStorage:s.number().optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()},cx={databaseType:s.literal("Aurora"),writer:Do.optional(),readers:wo.optional(),backupRetention:Gt.optional(),preferredMaintenanceWindow:s.string().optional(),monitoringInterval:Oo.optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()},ux={databaseType:s.literal("GlobalAurora"),primaryRegion:s.string().min(1,d.GLOBAL_AURORA.PRIMARY_REGION_REQUIRED),secondaryRegions:s.array(s.string()).optional(),globalClusterIdentifier:s.string().optional(),enableGlobalWriteForwarding:s.boolean().optional(),writer:Do.optional(),readers:wo.optional(),backupRetention:Gt.optional(),preferredMaintenanceWindow:s.string().optional(),monitoringInterval:Oo.optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()},lx=s.object({appName:ve,nameProvidedByFlag:s.boolean().optional(),databaseName:s.string().min(1,d.REQUIRED.DATABASE_NAME).max(63,d.MAX_LENGTH.DATABASE_NAME).regex(z.DATABASE_NAME,d.DATABASE_NAME),resourceName:B.optional(),connectionConfig:s.object({connectToCompute:s.array(s.string()).optional(),connectToServices:s.array(s.string()).optional()}).strict().optional()}).strict(),dx={databaseType:s.literal("ClickHouse"),instanceType:s.string().optional(),coldTier:s.union([s.object({mode:s.literal("s3")}).strict(),s.literal(!1)]).optional(),optimiseSchedule:s.union([s.string(),s.literal(!1)]).optional(),backupSchedule:s.union([s.string(),s.literal(!1)]).optional(),backupRetentionDays:Gt.optional()},FO=Yc.extend(sx).strict(),BO=Yc.extend(cx).strict(),VO=Yc.extend(ux).strict(),ZO=lx.extend(dx).strict(),kF=s.discriminatedUnion("databaseType",[FO,BO,VO,ZO]),gh=Yc.extend({resourceName:B}).strict(),GO=gh.extend(sx).strict(),WO=gh.extend(cx).strict(),HO=gh.extend(ux).strict(),KO=lx.extend({resourceName:B}).strict(),YO=KO.extend(dx).strict(),OF=s.discriminatedUnion("databaseType",[GO,WO,HO,YO]),DF=s.object({appName:ve,databaseName:s.string().min(1,d.REQUIRED.DATABASE_NAME),maxConnections:s.number().int(d.MAX_CONNECTIONS.INTEGER).min(1,d.MAX_CONNECTIONS.MIN).max(100,d.MAX_CONNECTIONS.MAX).optional(),maxIdleConnections:s.number().int(d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.INTEGER).min(0,d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MIN).max(100,d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MAX).optional(),connectionBorrowTimeout:s.number().int(d.PROXY_CONFIG.BORROW_TIMEOUT.INTEGER).min(1,d.PROXY_CONFIG.BORROW_TIMEOUT.MIN).max(3600,d.PROXY_CONFIG.BORROW_TIMEOUT.MAX).optional(),requireTLS:s.boolean().optional(),nameProvidedByFlag:s.boolean().optional()}).strict(),XO=["S","N","B"],Bc=s.object({name:s.string(),type:s.enum(XO)}).strict(),mx=s.object({name:B,partitionKey:Bc,sortKey:Bc.optional(),globalSecondaryIndexes:s.array(s.object({indexName:s.string(),partitionKey:Bc,sortKey:Bc.optional()}).strict()).optional(),ttlAttribute:s.string().optional(),stream:s.boolean().optional(),variableName:s.string().optional(),extraProperties:s.array(Te).optional()}).strict(),JO=s.object({mode:s.literal("s3")}).strict(),px=s.object({name:B,type:s.literal("ClickHouse"),databaseName:JA,instanceType:s.string().optional(),coldTier:s.union([JO,s.literal(!1)]).optional(),optimiseSchedule:s.union([s.string(),s.literal(!1)]).optional(),backupSchedule:s.union([s.string(),s.literal(!1)]).optional(),backupRetentionDays:Gt.optional(),variableName:s.string().optional(),extraProperties:s.array(Te).optional()}).strict();var qO=s.object({count:s.number().int(d.NAT_GATEWAY.INTEGER).min(0,d.NAT_GATEWAY.MIN).max(3,d.NAT_GATEWAY.MAX).optional()}).strict().describe("NAT gateway configuration"),fx=Ge(qO),hh=s.enum(["cloudwatch","s3"]),QO=s.object({destination:hh.optional(),retentionDays:s.number().int(d.RETENTION_DAYS.INTEGER).min(1,d.RETENTION_DAYS.MIN).max(365,d.RETENTION_DAYS.MAX).optional(),trafficType:s.enum(["ALL","ACCEPT","REJECT"]).optional()}).strict().describe("VPC flow log configuration"),gx=Ge(QO),eD=s.object({s3:s.boolean().optional(),dynamodb:s.boolean().optional()}).strict().describe("Gateway VPC endpoints (FREE)"),tD=Ge(eD),rD=s.object({ecr:s.boolean().optional(),secretsManager:s.boolean().optional(),kms:s.boolean().optional(),cloudwatchLogs:s.boolean().optional(),ssm:s.boolean().optional(),sts:s.boolean().optional()}).strict().describe("Interface VPC endpoints (cost per hour)"),nD=Ge(rD),iD=s.object({gateway:tD.optional(),interface:nD.optional()}).strict().describe("VPC endpoints configuration"),hx=Ge(iD),Xc=s.object({maxAzs:s.number().int(d.MAX_AZS.INTEGER).min(1,d.MAX_AZS.MIN).max(3,d.MAX_AZS.MAX).optional(),natGateways:fx.optional(),flowLogs:gx.optional(),vpcEndpoints:hx.optional(),cidrMask:s.number().int(d.CIDR_MASK.INTEGER).min(16,d.CIDR_MASK.MIN).max(28,d.CIDR_MASK.MAX).optional()}).strict(),vx=s.string().min(1,d.REQUIRED.NETWORK_NAME).max(50,d.MAX_LENGTH.NETWORK_NAME).regex(z.RESOURCE_NAME,d.RESOURCE_NAME),bx=Xc.extend({name:vx}).strict(),yx=Ge(Xc),LF=s.object({appName:ve,networkName:vx.optional(),maxAzs:s.number().int(d.MAX_AZS.INTEGER).min(1,d.MAX_AZS.MIN).max(3,d.MAX_AZS.MAX).optional(),natGateways:fx.optional(),flowLogs:gx.optional(),vpcEndpoints:hx.optional()}).strict(),oD=z.CIDR,vh=s.string().regex(oD,d.CIDR),aD=s.object({kind:s.literal("database"),resource:s.string().min(1,d.REQUIRED.RESOURCE_REFERENCE),name:B,allowedFromCidrs:s.array(vh),access:s.enum(["read","write","readWrite"]).optional()}).strict(),sD=s.object({kind:s.literal("ecsService"),resource:s.string().min(1,d.REQUIRED.RESOURCE_REFERENCE),serviceName:s.string().min(1,d.REQUIRED.SERVICE_NAME),name:B,allowedFromCidrs:s.array(vh),port:Br.optional()}).strict(),cD=s.discriminatedUnion("kind",[aD,sD]),UF=s.object({name:B,peerAppName:s.string().min(1,d.REQUIRED.APP_NAME),peerAccountId:s.string().regex(z.AWS_ACCOUNT_ID,d.AWS_ACCOUNT_ID),peerRegion:s.string().min(1,d.VPC_PEER.REGION_REQUIRED).optional(),peerVpcId:s.string().regex(z.VPC_ID,d.VPC_ID).optional(),peerVpcCidr:vh.optional(),peerRoleArn:s.string().regex(z.ROLE_ARN,d.ROLE_ARN).optional(),peerRouteTableIds:s.array(s.string().min(1,d.VPC_PEER.ROUTE_TABLE_ID_REQUIRED)).optional(),localVpcName:s.string().min(1,d.REQUIRED.NETWORK_NAME).optional(),enableDnsResolution:s.boolean().optional()}).strict(),FF=s.object({name:B,requesterAccountIds:s.array(s.string().regex(z.AWS_ACCOUNT_ID,d.AWS_ACCOUNT_ID)).min(1,d.VPC_PEER.MIN_REQUESTER_ACCOUNTS),localVpcName:s.string().min(1,d.REQUIRED.NETWORK_NAME).optional(),publishToSsm:s.boolean().optional(),exposedResources:s.array(cD).optional()}).strict();var Jc=["storage","cdn","compute"],uD=s.object({sid:s.string().optional(),effect:s.enum(["Allow","Deny"]),principals:s.array(s.string()),actions:s.array(s.string()),resources:s.array(s.string()).optional(),conditions:s.record(s.string(),s.record(s.string(),s.union([s.string(),s.array(s.string())]))).optional()}).strict(),Sx=s.object({name:B,bucketName:s.string().optional(),publicReadAccess:s.boolean().optional(),websiteHosting:s.object({indexDocument:s.string(),errorDocument:s.string().optional()}).strict().optional(),backupVaultTier:s.enum(St).optional(),versioned:s.boolean().optional(),encryption:s.enum(ci).optional(),kmsKeyArn:s.string().optional(),cors:s.array(s.object({allowedOrigins:s.array(s.string()),allowedMethods:s.array(s.string()),allowedHeaders:s.array(s.string()).optional(),exposedHeaders:s.array(s.string()).optional(),maxAge:s.number().optional()}).strict()).optional(),deployment:s.object({source:s.string(),prune:s.boolean().optional(),cacheControl:s.object({maxAge:s.number().optional(),immutable:s.boolean().optional()}).strict().optional()}).strict().optional(),retain:s.boolean().optional(),resourcePolicyStatements:s.array(uD).optional(),stackPlacement:s.enum(Jc).optional(),variableName:s.string().optional(),extraProperties:s.array(Te).optional()}).strict().refine(e=>e.encryption!=="KMS"||!!e.kmsKeyArn,{message:d.KMS.KEY_REQUIRED}),HF=s.object({appName:ve,bucketName:XA,nameProvidedByFlag:s.boolean().optional(),storagePreset:s.enum(KA).optional(),publicReadAccess:s.boolean().optional(),websiteHosting:s.object({indexDocument:s.string(),errorDocument:s.string().optional()}).strict().optional(),backupVaultTier:s.enum(St).optional(),versioned:s.boolean().optional(),encryption:s.enum(ci).optional(),kmsKeyArn:s.string().optional(),cors:s.array(s.object({allowedOrigins:s.array(s.string()),allowedMethods:s.array(s.string()),allowedHeaders:s.array(s.string()).optional(),exposedHeaders:s.array(s.string()).optional(),maxAge:s.number().optional()}).strict()).optional(),connectionConfig:s.object({connectToCompute:s.array(s.string()).optional(),connectToServices:s.array(s.string()).optional()}).strict().optional()}).strict().refine(e=>e.encryption!=="KMS"||!!e.kmsKeyArn,{message:d.KMS.KEY_REQUIRED,path:["kmsKeyArn"]});var bh=s.enum(["DESTROY","RETAIN"]),_x=s.object({name:B,queueType:s.enum(["standard","fifo"]).default("standard"),visibilityTimeout:s.number().int(d.SQS.VISIBILITY_TIMEOUT.INTEGER).min(0,d.SQS.VISIBILITY_TIMEOUT.MIN).max(43200,d.SQS.VISIBILITY_TIMEOUT.MAX).optional(),retentionPeriod:s.number().int(d.SQS.RETENTION_PERIOD.INTEGER).min(60,d.SQS.RETENTION_PERIOD.MIN).max(1209600,d.SQS.RETENTION_PERIOD.MAX).optional(),contentBasedDeduplication:s.boolean().optional(),removalPolicy:bh.optional(),variableName:s.string().optional(),extraProperties:s.array(Te).optional()}).strict();var Ex=s.object({type:s.literal("basic-auth"),username:s.string().min(1),password:s.string().min(1)}).strict(),Ax=s.object({name:B,defaultOriginRef:s.string(),behaviours:s.array(s.object({pathPattern:s.string(),originRef:s.string(),cachePolicy:s.enum(["CACHING_OPTIMIZED","CACHING_DISABLED"]).optional()}).strict()).optional(),customDomain:s.string().optional(),certificateArn:s.string().optional(),accessGate:s.union([s.literal(!1),Ex]).optional(),extraProperties:s.array(Te).optional()}).strict(),tB=s.object({appName:s.string(),name:B.optional(),defaultOriginRef:s.string(),behaviours:s.array(s.object({pathPattern:s.string(),originRef:s.string(),cachePolicy:s.enum(["CACHING_OPTIMIZED","CACHING_DISABLED"]).optional()}).strict()).optional(),customDomain:s.string().optional(),certificateArn:s.string().optional(),accessGate:s.union([s.literal(!1),Ex]).optional(),nameProvidedByFlag:s.boolean().optional()}).strict();var lD=Object.defineProperty,yh=(e,t)=>lD(e,"name",{value:t,configurable:!0}),dD=new Set(["t4g","c6g","c6gd","c6gn","c7g","c7gd","c7gn","r6g","r6gd","r7g","r7gd","r8g","r8gd","c8g","c8gd","c8gn","m6g","m6gd","m7g","m7gd","m8g","m8gd","x8g","i8g","a1","x2gd","im4gn","is4gen","i4g","hpc7g"]);function li(e){let t=e.split(".")[0]??"";return dD.has(t)?"ARM":"STANDARD"}yh(li,"getArchitectureForInstanceType");function qc(e,t){let n=li(e);return n!==t?{valid:!1,message:`Instance type '${e}' requires ${n} architecture, but '${t}' AMI was specified. Use a ${n==="ARM"?"Graviton instance (t4g, c6g, r6g, m6g, etc.)":"Intel/AMD instance (t3, c5, r5, m5, etc.)"} instead.`}:{valid:!0}}yh(qc,"validateArchitectureMatch");function xx(e,t){return li(e)===t}yh(xx,"isArchitectureCompatible");var mD=Object.defineProperty,Qc=(e,t)=>mD(e,"name",{value:t,configurable:!0});var pD=1;var fD=/^[A-Za-z0-9_.-]+$/,gD=s.object({id:s.string().min(1,"buildSecret id cannot be empty").regex(fD,"buildSecret id may contain only letters, digits, '_', '.', and '-' (no comma, '=', or whitespace, which would break the buildx --secret argv)"),ssm:s.string().min(1,"ssm parameter name cannot be empty").optional(),secretsManager:s.object({name:s.string().min(1,"secret name cannot be empty").optional(),arn:s.string().min(1,"secret arn cannot be empty").optional(),field:s.string().min(1,"secret field cannot be empty").optional()}).strict().refine(e=>e.name===void 0!=(e.arn===void 0),"secretsManager requires exactly one of name or arn").optional(),env:s.string().min(1,"env variable name cannot be empty").optional()}).strict().superRefine((e,t)=>{[e.ssm,e.secretsManager,e.env].filter(n=>n!==void 0).length!==1&&t.addIssue({code:s.ZodIssueCode.custom,message:"buildSecret requires exactly one source (ssm, secretsManager, or env)"})}),hD=s.union([s.string(),s.object({ssm:s.string().min(1,"ssm parameter name cannot be empty").optional(),secretsManager:s.object({name:s.string().min(1,"secret name cannot be empty").optional(),arn:s.string().min(1,"secret arn cannot be empty").optional(),field:s.string().min(1,"secret field cannot be empty").optional()}).strict().refine(e=>e.name===void 0!=(e.arn===void 0),"secretsManager requires exactly one of name or arn").optional(),env:s.string().min(1,"env variable name cannot be empty").optional(),acknowledgePublic:s.boolean().optional()}).strict().superRefine((e,t)=>{[e.ssm,e.secretsManager,e.env].filter(n=>n!==void 0).length!==1&&t.addIssue({code:s.ZodIssueCode.custom,message:"buildArg value requires exactly one source (ssm, secretsManager, or env)"})})]),Pt=s.object({path:s.string(),context:s.string().min(1,"context cannot be empty").optional(),target:s.string().min(1,"target cannot be empty").optional(),buildArgs:s.record(s.string(),hD).optional(),buildSecrets:s.array(gD).optional()}).strict(),aB=Pt.partial();function vD(e,t){if(t===void 0)return e;let n=t.context??e.context,i=t.target??e.target,r=t.buildArgs??e.buildArgs,o=t.buildSecrets??e.buildSecrets;return{path:t.path??e.path,...n!==void 0&&{context:n},...i!==void 0&&{target:i},...r!==void 0&&{buildArgs:r},...o!==void 0&&{buildSecrets:o}}}Qc(vD,"mergeDockerBuild");function Sh(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}Qc(Sh,"isRecord");function Ix(e){if(!Sh(e)||typeof e.path!="string"||e.path.length===0)return;let t=typeof e.context=="string"&&e.context.length>0?e.context:void 0,n=typeof e.target=="string"&&e.target.length>0?e.target:void 0,i=Sh(e.buildArgs)&&Object.keys(e.buildArgs).length>0?e.buildArgs:void 0,r=Array.isArray(e.buildSecrets)&&e.buildSecrets.length>0?e.buildSecrets:void 0,o={path:e.path,...t!==void 0&&{context:t},...n!==void 0&&{target:n},...i!==void 0&&{buildArgs:i},...r!==void 0&&{buildSecrets:r}},a=Pt.safeParse(o);return a.success?a.data:void 0}Qc(Ix,"normaliseDockerBuild");function bD(e){if(e===void 0)return;let t=Ix(e);return t===void 0?void 0:JSON.stringify(t)}Qc(bD,"dockerBuildFingerprint");var yD=s.object({name:s.string(),clusterName:s.string().optional(),docker:Pt.optional(),containerPort:s.number().optional(),secrets:s.array(s.string()).optional(),ssmSecretsPath:s.string().optional(),importedSecretNames:s.array(s.string()).optional(),schemaGateImageTag:s.string().optional()}).strict(),SD=s.object({type:s.enum(Ct),name:s.string(),source:s.string()}).strict(),_D=s.object({repositoryName:s.string()}).strict(),ED=["x86_64","arm64"],AD=s.object({name:s.string(),secrets:s.array(s.string()).optional(),ssmSecretsPath:s.string().optional(),importedSecretNames:s.array(s.string()).optional(),docker:Pt.optional(),imageKey:s.string().optional(),architecture:s.enum(ED).optional()}).strict(),xD=s.object({templateHash:s.string(),synthTimestamp:s.string()}).strict(),ID=s.object({constructPath:s.string().max(512),group:s.string().max(128),resourceType:s.string().max(256)}).strict(),TD=s.object({synthesisedBy:s.string().min(1).max(128),minimumEngineVersion:s.string().min(1).max(32),maximumEngineMajor:s.number().int().min(0).optional(),minimumAwsCdkCli:s.string().min(1).max(32).optional()}).strict(),$D=s.object({appName:s.string().min(1).max(128),slot:s.string().min(1).max(64),clusterName:s.string().min(1).max(128),anchor:s.string().min(1).max(128),pinned:s.boolean(),currentServiceName:s.string().min(1).max(256),legacyKey:s.string().min(1).max(256),legacyAnchor:s.string().min(1).max(256),legacyServiceName:s.string().min(1).max(512),legacyKeyFields:s.array(s.string().max(64)).max(32)}).strict(),RD=s.object({constructPath:s.string().min(1).max(512),resourceType:s.string().min(1).max(256),physicalNameHint:s.string().min(1).max(512),policy:s.enum(["retain","snapshot","adopted"]),destroyDisposition:s.enum(["survives","deleted-on-explicit-destroy"]),reason:s.string().min(1).max(1024),costClass:s.enum(["none","storage","fixed-monthly"]),cleanupHint:s.string().min(1).max(1024)}).strict(),sB=s.object({version:s.literal(pD),generatedAt:s.string(),appName:s.string(),services:s.array(yD),lambdas:s.array(AD),pattern:SD.optional(),ecr:_D.optional(),stacks:s.record(s.string(),xD),resourceMap:s.record(s.string(),ID).optional(),engineCompat:TD.optional(),identityAliases:s.array($D).optional(),residuals:s.array(RD).optional()}).strict();var ND=Object.defineProperty,CD=(e,t)=>ND(e,"name",{value:t,configurable:!0});function $x(e){return!(e.image!==void 0&&e.docker!==void 0)}CD($x,"imageDockerMutexCheck");var Rx=s.number().int(d.CAPACITY.MIN.INTEGER).min(lh,d.GENERATOR_CAPACITY.MIN.MIN).max(dh,d.GENERATOR_CAPACITY.MIN.MAX),Nx=s.number().int(d.CAPACITY.MAX.INTEGER).min(lh,d.GENERATOR_CAPACITY.MAX.MIN).max(dh,d.GENERATOR_CAPACITY.MAX.MAX),di=s.number().int(d.LAMBDA.MEMORY.INTEGER).min(VA,d.LAMBDA.MEMORY.MIN).max(ZA,d.LAMBDA.MEMORY.MAX).refine(e=>e===128||e%64===0,d.LAMBDA.MEMORY.MULTIPLE),Cx=s.string().regex(z.LAMBDA_RUNTIME_IDENTIFIER,d.LAMBDA.RUNTIME),_h=s.number().int(d.CPU.INTEGER).min(256,d.CPU.MIN).max(4096,d.CPU.MAX),tu=s.number().int(d.CAPACITY.DESIRED.INTEGER).min(0,d.CAPACITY.DESIRED.MIN).max(si,d.CAPACITY.DESIRED.MAX),Mo=s.object({connectToDatabase:s.array(s.string()).optional()}).strict(),PD=s.object({minSize:s.number().int(d.CAPACITY.WARM_POOL.MIN_SIZE.INTEGER).min(0,d.CAPACITY.WARM_POOL.MIN_SIZE.MIN).max(GA,d.CAPACITY.WARM_POOL.MIN_SIZE.MAX).optional(),reuseOnScaleIn:s.boolean().optional()}).strict(),Eh=s.object({instanceType:s.string().optional(),amiHardwareType:s.enum(Mc).optional(),minCapacity:s.number().int(d.CAPACITY.MIN.INTEGER).min(0,d.CAPACITY.MIN.MIN_0).max(si,d.CAPACITY.MIN.MAX).optional(),maxCapacity:s.number().int(d.CAPACITY.MAX.INTEGER).min(1,d.CAPACITY.MAX.MIN_1).max(si,d.CAPACITY.MAX.MAX).optional(),memoryLimitMiB:Po(128).optional(),warmPool:PD.optional(),extraProperties:s.array(Te).optional()}).strict().superRefine((e,t)=>{if(!e.instanceType||!e.amiHardwareType)return;let n=qc(e.instanceType,e.amiHardwareType);n.valid||t.addIssue({code:"custom",message:n.message??d.ARCHITECTURE_MISMATCH,path:["instanceType"]})}).superRefine((e,t)=>{e.minCapacity===0&&!e.warmPool&&t.addIssue({code:"custom",message:d.CAPACITY.WARM_POOL_REQUIRED,path:["minCapacity"]}),e.warmPool?.minSize!==void 0&&e.maxCapacity!==void 0&&e.warmPool.minSize>e.maxCapacity&&t.addIssue({code:"custom",message:d.CAPACITY.WARM_POOL.MIN_SIZE_EXCEEDS_MAX_CAPACITY,path:["warmPool","minSize"]})}),kD=s.enum(To).describe(`Compute type must be one of: ${To.join(", ")}`),Ah=s.enum(ii).describe(`ECS capacity provider must be one of: ${ii.join(", ")}`),xh=s.string().refine(e=>at(jc,e),{message:d.INSTANCE_TYPE}),Px=s.object({sourceType:s.enum(["sqs","dynamodb","eventbridge"]),sourceRef:s.string().describe("Name of the source resource"),batchSize:s.number().int(d.BATCH_SIZE.INTEGER).min(1,d.BATCH_SIZE.MIN).max(1e4,d.BATCH_SIZE.MAX).optional(),startingPosition:s.enum(["TRIM_HORIZON","LATEST"]).optional(),maxBatchingWindow:s.number().int(d.BATCHING_WINDOW.INTEGER).min(0,d.BATCHING_WINDOW.MIN).max(300,d.BATCHING_WINDOW.MAX).optional(),reportBatchItemFailures:s.boolean().optional()}).strict(),OD=s.object({name:s.string().min(1,d.REQUIRED.CONTAINER_NAME).optional(),image:s.string().optional(),port:Br.optional(),environment:ui.optional(),secretsImport:qA.optional(),command:s.array(s.string()).optional(),entryPoint:s.array(s.string()).optional(),essential:s.boolean().optional(),healthCheck:s.object({command:s.array(s.string()),interval:s.number().int(d.HEALTH_CHECK.INTERVAL.INTEGER).min(5,d.HEALTH_CHECK.INTERVAL.MIN).max(300,d.HEALTH_CHECK.INTERVAL.MAX).optional(),timeout:s.number().int(d.HEALTH_CHECK.TIMEOUT.INTEGER).min(2,d.HEALTH_CHECK.TIMEOUT.MIN).max(60,d.HEALTH_CHECK.TIMEOUT.MAX).optional(),retries:s.number().int(d.HEALTH_CHECK.RETRIES.INTEGER).min(1,d.HEALTH_CHECK.RETRIES.MIN).max(10,d.HEALTH_CHECK.RETRIES.MAX).optional(),startPeriod:s.number().int(d.HEALTH_CHECK.START_PERIOD.INTEGER).min(0,d.HEALTH_CHECK.START_PERIOD.MIN).max(300,d.HEALTH_CHECK.START_PERIOD.MAX).optional()}).strict().optional(),ssmSecrets:s.array(s.string().regex(z.SECRET_NAME,d.SECRET_NAME)).optional(),extraProperties:s.array(Te).optional()}).strict(),kx=s.string().min(1,d.REQUIRED.SERVICE_NAME).max(255,d.MAX_LENGTH.SERVICE_NAME).regex(z.ECS_SERVICE_NAME,d.ECS_SERVICE_NAME),Ox=s.object({domain:s.string().optional(),loadBalancer:s.union([s.literal(!1),s.enum(Dc)]).optional(),directAccess:s.boolean().optional(),extraProperties:s.array(Te).optional()}).strict().refine(e=>!(e.directAccess&&e.domain),{message:d.DIRECT_ACCESS.NO_DOMAIN,path:["directAccess"]}).refine(e=>!(e.directAccess&&typeof e.loadBalancer=="string"),{message:d.DIRECT_ACCESS.NO_LOAD_BALANCER}).describe("Cluster-level configuration"),eu=s.object({path:s.string().optional(),host:s.string().optional(),priority:s.number().int(d.PRIORITY.INTEGER).min(1,d.PRIORITY.MIN).max(5e4,d.PRIORITY.MAX).optional(),healthCheckPath:s.string().optional()}).strict().describe("Path/host-based routing configuration"),DD=s.object({desiredCount:tu.optional(),minCapacity:s.number().int(d.CAPACITY.MIN.INTEGER).min(0,d.CAPACITY.MIN.MIN_0).max(si,d.CAPACITY.MIN.MAX).optional(),maxCapacity:s.number().int(d.CAPACITY.MAX.INTEGER).min(1,d.CAPACITY.MAX.MIN_1).max(si,d.CAPACITY.MAX.MAX).optional(),scalingType:s.enum(wc).optional()}).strict().refine(Fr.check,Fr.params).describe("ECS service scaling configuration"),Dx=s.object({name:kx,docker:Pt.optional(),needsDatabaseConnection:s.boolean().optional(),needsStorageConnection:s.boolean().optional(),needsMessagingConnection:s.boolean().optional(),image:s.string().optional(),containers:s.array(OD).optional(),routing:s.union([eu,s.array(eu).min(1)]).optional(),serviceType:s.enum(No).optional(),cpu:_h.optional(),memoryLimitMiB:Po(512).optional(),desiredCount:tu.optional(),scaling:Ge(DD).optional(),capacityProvider:Ah,ec2Config:Eh.optional(),ssmSecretsPath:s.string().regex(z.SSM_PATH,d.SSM_PATH).optional(),extraProperties:s.array(Te).optional(),alarms:rx.optional()}).strict().superRefine((e,t)=>{$x(e)||t.addIssue({code:"custom",path:["docker"],message:d.IMAGE_DOCKER_MUTEX})}).describe("Configuration for a service in an ECS cluster"),wx=s.object({name:B,type:kD,needsConnection:s.boolean(),connectedDatabase:s.array(s.string()).optional(),connectedStorage:s.array(s.string()).optional(),connectedMessaging:s.array(s.string()).optional(),cluster:Ox.optional(),services:s.array(Dx).optional(),docker:Pt.partial().optional(),deployment:s.enum(kc).optional(),codePath:s.string().optional(),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(zc,d.LAMBDA.TIMEOUT.MIN).max(Lc,d.LAMBDA.TIMEOUT.MAX).optional(),memory:di.optional(),handler:s.string().optional(),runtime:Cx.optional(),environment:ui.optional(),secrets:ui.optional(),eventSources:s.array(Px).optional(),functionUrl:s.object({authType:s.enum(Ro)}).strict().optional(),description:s.string().optional(),scheduleExpression:s.string().optional(),architecture:s.enum(Oc).optional(),ephemeralStorageSize:s.number().int(d.EPHEMERAL_STORAGE.INTEGER).min(512,d.EPHEMERAL_STORAGE.MIN).max(10240,d.EPHEMERAL_STORAGE.MAX).optional(),functionName:s.string().optional(),ssmSecrets:s.array(s.string()).optional(),ssmSecretsPath:s.string().optional(),alarms:ix.optional(),instanceType:xh.optional(),enableSSH:s.boolean().optional(),keyName:s.string().optional(),userData:s.string().optional(),securityGroups:s.array(s.string()).optional(),variableName:s.string().optional(),extraProperties:s.array(Te).optional()}).strict().superRefine((e,t)=>{if(e.type==="ecs"&&e.services)for(let n=0;n<e.services.length;n++){let i=e.services[n];i?.ec2Config?.instanceType&&!i.ec2Config.amiHardwareType&&li(i.ec2Config.instanceType)!=="ARM"&&t.addIssue({code:"custom",message:`Service '${i.name??n}' uses instance type '${i.ec2Config.instanceType}' (x86), which requires Docker images built for linux/amd64. The default build targets linux/arm64 (Graviton). Use a Graviton instance type (t4g, c6g, r6g, m6g, etc.) or set amiHardwareType: "STANDARD" to acknowledge x86.`,path:["services",n,"ec2Config","instanceType"]})}e.type==="lambda"&&e.deployment==="container"&&e.architecture==="X86_64"&&t.addIssue({code:"custom",message:"Lambda architecture 'X86_64' requires Docker images built for linux/amd64, but the default build targets linux/arm64. Use 'ARM_64' for Graviton Lambdas (recommended) or ensure your build pipeline targets linux/amd64.",path:["architecture"]})}),hB=s.object({appName:ve,clusterName:B,containerPort:Br,nameProvidedByFlag:s.boolean().optional(),ecrRepository:s.string().optional(),capacityProvider:Ah.optional(),useAppEcr:s.boolean().optional(),desiredCount:tu.optional(),cpu:_h.optional(),memoryLimitMiB:Po(512).optional(),minCapacity:Rx.optional(),maxCapacity:Nx.optional(),ec2Config:Eh.optional(),connectionConfig:Mo.optional()}).strict().refine(Fr.check,Fr.params),vB=s.object({appName:ve,functionName:B,nameProvidedByFlag:s.boolean().optional(),lambdaType:s.enum(["basic","web","custom"]).optional(),ecrRepository:s.string().optional(),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(zc,d.LAMBDA.TIMEOUT.MIN).max(Lc,d.LAMBDA.TIMEOUT.MAX).optional(),memory:di.optional(),enableFunctionUrl:s.boolean().optional(),description:s.string().optional(),enableCors:s.boolean().optional(),corsOrigins:s.string().optional(),corsHeaders:s.string().optional(),corsMethods:s.array(s.enum(HA)).optional(),corsCredentials:s.boolean().optional(),connectionConfig:Mo.optional()}).strict(),bB=s.object({appName:ve,instanceName:B,nameProvidedByFlag:s.boolean().optional(),instanceType:xh.optional(),enableSSH:s.boolean().optional(),minCapacity:Rx.optional(),maxCapacity:Nx.optional(),connectionConfig:Mo.optional()}).strict().refine(Fr.check,Fr.params),Mx=s.object({appName:ve,clusterName:B,serviceName:kx,capacityProvider:Ah,containerPort:Br.optional(),cpu:_h.optional(),memoryLimitMiB:Po(512).optional(),desiredCount:tu.optional(),ec2Config:Eh.optional(),routing:s.union([eu,s.array(eu).min(1)]).optional(),docker:Pt.partial().optional(),nameProvidedByFlag:s.boolean().optional(),connectionConfig:Mo.optional()}).strict(),Ih=s.object({appName:ve,computeName:B,nameProvidedByFlag:s.boolean().optional(),connectionConfig:Mo.optional()}).strict(),wD=Ih.extend({type:s.literal("ecs"),cluster:Ox.optional(),services:s.array(Dx).min(1,d.SERVICE.MIN_REQUIRED),docker:Pt.partial().optional()}).strict().refine(e=>{let t=e.services.filter(n=>n.containers?.some(i=>i.port));return t.length>1?t.every(n=>(Array.isArray(n.routing)?n.routing:n.routing?[n.routing]:[]).some(i=>i.path||i.host)):!0},{message:d.SERVICE.ROUTING_REQUIRED}).refine(e=>{let t=e.services.map(n=>n.name);return new Set(t).size===t.length},{message:d.SERVICE.UNIQUE_WITHIN_CLUSTER}),MD=Ih.extend({type:s.literal("lambda"),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(zc,d.LAMBDA.TIMEOUT.MIN).max(Lc,d.LAMBDA.TIMEOUT.MAX).optional(),memory:di.optional(),handler:s.string().optional(),runtime:Cx.optional(),environment:ui.optional(),secrets:ui.optional(),description:s.string().optional(),functionUrl:s.union([s.object({authType:s.enum(Ro).optional()}).strict(),s.literal(!1)]).optional(),eventSources:s.array(Px).optional()}).strict(),jD=Ih.extend({type:s.literal("ec2"),instanceType:xh.optional(),enableSSH:s.boolean().optional(),keyName:s.string().optional(),userData:s.string().optional(),securityGroups:s.array(s.string()).optional()}).strict(),yB=s.discriminatedUnion("type",[wD,MD,jD]),Tx=s.object({path:s.string().min(1,d.REQUIRED.ROUTING_PATH),priority:s.number().int(d.PRIORITY.INTEGER).min(1,d.PRIORITY.MIN).max(5e4,d.PRIORITY.MAX).optional()}).strict(),jx=s.object({name:s.string().min(1,d.REQUIRED.SERVICE_NAME).max(255,d.MAX_LENGTH.SERVICE_NAME).regex(z.RESOURCE_NAME,d.RESOURCE_NAME),serviceType:s.enum(No).optional(),docker:Pt.partial().optional(),containerPort:Br.optional(),needsDatabaseConnection:s.boolean().optional(),routing:s.union([Tx,s.array(Tx).min(1)]).optional()}).strict().superRefine((e,t)=>{e.serviceType==="worker"&&(e.containerPort!==void 0&&t.addIssue({code:"custom",path:["containerPort"],message:"Worker services are not reachable inbound; remove containerPort."}),e.routing!==void 0&&t.addIssue({code:"custom",path:["routing"],message:"Worker services have no ALB route; remove routing."}))}),SB=s.object({appName:ve,instanceType:s.string().optional()}).strict();var Th=s.object({memorySize:di.optional(),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(1,d.LAMBDA.TIMEOUT.MIN).max(900,d.LAMBDA.TIMEOUT.MAX).optional(),ephemeralStorageSize:s.number().int(d.EPHEMERAL_STORAGE.INTEGER).min(512,d.EPHEMERAL_STORAGE.MIN).max(10240,d.EPHEMERAL_STORAGE.MAX).optional()}).strict(),zx=s.object({type:s.enum(uh).optional(),databaseName:s.string().optional(),databaseEngine:s.enum(ai).optional(),deletionProtection:s.boolean().optional(),backupRetention:Gt.optional(),port:Vc.optional(),publiclyAccessible:s.boolean().optional(),allowedIpCidr:s.string().optional(),instanceType:s.string().optional(),allocatedStorage:s.number().int(d.ALLOCATED_STORAGE.INTEGER).min(20,d.ALLOCATED_STORAGE.MIN).max(65536,d.ALLOCATED_STORAGE.MAX).optional(),multiAz:s.boolean().optional(),readReplica:Wc.optional(),writer:Do.optional(),readers:wo.optional(),allowVpcAccess:s.boolean().optional(),monitoringInterval:Oo.optional(),preferredMaintenanceWindow:s.string().optional(),databaseInsights:Hc.optional(),proxy:Gc.optional(),credentials:Zc.optional(),encryption:Kc.optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()}).strict(),Lx=s.object({server:Th.optional(),imageOptimisation:Th.optional(),revalidation:Th.optional()}).strict(),$h=s.object({versioned:s.boolean().optional()}).strict(),Ux=s.object({assets:$h.optional(),cache:$h.optional(),media:$h.optional()}).strict(),zD=s.object({visibilityTimeout:s.number().int(d.SQS.VISIBILITY_TIMEOUT.INTEGER).min(0,d.SQS.VISIBILITY_TIMEOUT.MIN).max(43200,d.SQS.VISIBILITY_TIMEOUT.MAX).optional(),messageRetentionPeriod:s.number().int(d.SQS.RETENTION_PERIOD.INTEGER).min(60,d.SQS.RETENTION_PERIOD.MIN).max(1209600,d.SQS.RETENTION_PERIOD.MAX).optional(),maxMessageSize:s.number().int(d.MAX_MESSAGE_SIZE.INTEGER).min(1024,d.MAX_MESSAGE_SIZE.MIN).max(262144,d.MAX_MESSAGE_SIZE.MAX).optional(),deadLetterQueue:s.union([s.literal(!1),s.object({enabled:s.boolean().optional(),maxReceiveCount:s.number().int(d.DLQ.MAX_RECEIVE_COUNT.INTEGER).min(1,d.DLQ.MAX_RECEIVE_COUNT.MIN).max(1e3,d.DLQ.MAX_RECEIVE_COUNT.MAX).optional()}).strict()]).optional()}).strict(),Fx=s.object({revalidationQueue:zD.optional()}).strict(),Bx=s.object({domainNames:s.array(s.string()).optional(),certificateArn:s.string().optional()}).strict(),Vx=s.record(s.string().regex(z.ENV_VAR_NAME,d.ENV_VAR_NAME),s.string()).optional(),LD=s.object({type:s.literal("payload"),name:s.string().min(1,d.REQUIRED.PATTERN_NAME),domain:s.string().optional(),database:zx.optional(),compute:Lx.optional(),storage:Ux.optional(),messaging:Fx.optional(),cdn:Bx.optional(),environment:Vx}).strict(),UD=s.object({type:s.literal("nextjs"),name:s.string().min(1,d.REQUIRED.PATTERN_NAME),domain:s.string().optional(),database:zx.optional(),compute:Lx.optional(),storage:Ux.optional(),messaging:Fx.optional(),cdn:Bx.optional(),environment:Vx}).strict(),Rh=s.enum(xo),FD=s.object({command:s.string().min(1,d.REQUIRED.BUILD_COMMAND),outputDir:s.string().min(1,d.REQUIRED.OUTPUT_DIR)}).strict(),BD=s.object({headers:s.boolean().optional(),contentSecurityPolicy:s.string().optional()}).strict(),VD=s.object({to:s.string().min(1,d.REQUIRED.FORMS_TO).regex(z.EMAIL,d.EMAIL),from:s.string().regex(z.EMAIL,d.EMAIL).optional(),corsOrigin:s.string().regex(z.HTTP_ORIGIN,"corsOrigin must be an exact origin such as https://example.com (no path, no trailing slash)").optional(),maxConcurrency:s.number().int().min(1).max(100).optional()}).strict(),ZD=s.object({behaviours:s.array(s.unknown()).optional()}).strict(),Nh=s.object({type:s.literal("staticsite"),name:s.string().min(1,d.REQUIRED.PATTERN_NAME),source:s.string().min(1,d.REQUIRED.SOURCE),build:FD,routing:Rh.optional(),security:BD.optional(),domain:s.string().optional(),forms:VD.optional(),cdn:ZD.optional()}).strict().superRefine((e,t)=>{if(e.forms===void 0)return;let n=e.domain;if(n===void 0||n===""){t.addIssue({code:"custom",path:["domain"],message:"A domain is required when forms are enabled: SES sends only from a verified identity, and the site's domain is the identity the pattern verifies"});return}let i=e.forms.from;i!==void 0&&!Tc(i,n)&&t.addIssue({code:"custom",path:["forms","from"],message:`forms.from must be an address at ${n} (the verified SES identity) \u2014 for example noreply@${n}. Use forms.to for the recipient.`})}),jo=s.discriminatedUnion("type",[LD,UD,Nh]),Zx=s.enum(["lightweight","standard","resilient","custom"]),Gx=s.object({type:s.enum(uh),instanceType:s.string().optional(),backupRetention:Gt.optional(),deletionProtection:s.boolean().optional(),encryption:s.union([s.object({useCMK:s.literal(!0)}).strict(),s.literal(!1)]).optional()}).strict(),Wx=s.object({memorySize:di.optional(),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(1,d.LAMBDA.TIMEOUT.MIN).max(900,d.LAMBDA.TIMEOUT.MAX).optional()}).strict();var Hx=s.object({appName:ve,type:mh,pattern:ph.optional(),patternConfig:jo.optional(),owner:s.string().optional(),tags:s.record(s.string(),s.string()).optional(),vpcId:s.string().optional(),network:Xc.optional(),backup:ex.optional(),tunnel:tx.optional(),additionalNetworks:s.array(bx).optional(),database:s.array(ax),s3:s.array(Sx),compute:s.array(wx),dynamodb:s.array(mx).optional(),clickhouse:s.array(px).optional(),sqs:s.array(_x).optional(),cdn:Ax.optional(),customCodeBlocks:s.array(QA).optional(),additionalManagedImports:s.array(s.object({moduleSpecifier:s.string(),namedImports:s.array(s.string()),defaultImport:s.string().optional()}).strict()).optional()}).strict(),UB=s.object({name:ve,type:mh,pattern:ph.optional(),patternTier:Zx.optional(),patternDomain:s.string().optional(),source:s.string().min(1,d.REQUIRED.SOURCE).optional(),buildCommand:s.string().min(1,d.REQUIRED.BUILD_COMMAND).optional(),outputDir:s.string().min(1,d.REQUIRED.OUTPUT_DIR).optional(),routing:Rh.optional(),formsTo:s.string().min(1,d.REQUIRED.FORMS_TO).regex(z.EMAIL,d.EMAIL).optional(),corsOrigin:s.string().regex(z.HTTP_ORIGIN,"corsOrigin must be an exact origin such as https://example.com (no path, no trailing slash)").optional(),customDatabase:Gx.optional(),customCompute:Wx.optional(),region:s.string().optional(),owner:s.string().optional(),includeDatabase:s.boolean().optional(),databaseName:s.string().min(1,d.DATABASE.NAME.REQUIRED).max(63,d.DATABASE.NAME.MAX_LENGTH).optional(),vpcId:s.string().optional(),network:yx.optional(),services:s.array(jx).optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()}).strict().superRefine((e,t)=>{e.formsTo!==void 0&&(e.patternDomain!==void 0&&e.patternDomain!==""||t.addIssue({code:"custom",path:["patternDomain"],message:"A domain is required when forms are enabled: SES sends only from a verified identity, and the site's domain is the identity the pattern verifies"}))}),FB=s.object({name:B,localResource:s.string().min(1),remoteApp:s.string().min(1),remoteResource:s.string().min(1),permission:s.enum(["read","write","read-write"]),remoteArn:s.string().optional()}).strict();var GD=["fjall-managed","external","external-manual"],WB=s.enum(GD);var Kx=s.object({givenName:s.string().min(1),familyName:s.string().min(1),displayName:s.string().min(1).optional(),expires:s.string().min(1).optional()}).strict(),Yx=s.object({name:s.string().min(1),path:s.string().min(1).optional()}).strict(),WD=s.union([s.object({managedPolicyArn:s.string().min(1)}).strict(),s.object({customerManagedPolicy:Yx}).strict()]),HD=s.object({managedPolicies:s.array(s.string().min(1)).optional(),inlinePolicy:s.record(s.string(),s.unknown()).optional(),customerManagedPolicies:s.array(Yx).optional(),permissionsBoundary:WD.optional(),sessionDuration:s.string().min(1).optional(),description:s.string().optional(),accounts:s.union([s.array(s.string().min(1)),s.literal("all")]).optional(),includeManagementAccount:s.boolean().optional(),groups:s.array(s.string().min(1)).optional()}).strict(),KD=s.object({description:s.string().optional()}).strict(),ru=s.string().regex(z.EMAIL,d.EMAIL),Ch={groups:s.record(s.string(),KD).optional(),permissionSets:s.record(s.string(),HD).optional(),memberships:s.record(s.string(),s.array(ru)).optional(),resolutionVersion:s.number().int().min(1).optional(),defaultPermissionSets:s.boolean().optional()},YD=s.discriminatedUnion("source",[s.object({...Ch,source:s.literal("fjall-managed"),users:s.record(ru,Kx)}).strict(),s.object({...Ch,source:s.literal("external")}).strict(),s.object({...Ch,source:s.literal("external-manual"),users:s.record(ru,Kx).optional()}).strict()]),HB=s.object({name:B,type:s.literal("organisation").optional(),organisationName:s.string().min(1).optional(),orgEmail:ru.optional(),accounts:s.unknown().optional(),accountIds:s.record(s.string(),s.string()).optional(),identityCentre:s.union([YD,s.literal(!1)]).optional(),allowedRegions:s.array(s.string().min(1)).optional()}).strict();var XD=Object.defineProperty,JD=(e,t)=>XD(e,"name",{value:t,configurable:!0}),qD=[1,3,5,7,14,30,60,90,120,150,180,365,400,545,731,1827,3653],QD=s.object({buildkiteQueue:s.string().min(1,"buildkiteQueue cannot be empty").max(100).regex(/^[a-zA-Z0-9-_]+$/,"buildkiteQueue must be alphanumeric with hyphens/underscores"),buildkiteOrgSlug:s.string().min(1,"buildkiteOrgSlug cannot be empty").max(100).regex(/^[a-z0-9-]+$/,"buildkiteOrgSlug must be a lowercase Buildkite organisation slug"),agentTokenSsmParameterName:s.string().min(2).regex(/^\//,"agentTokenSsmParameterName must be a full path (leading /)").optional(),agentTokenKmsKeyArn:s.string().min(1).optional(),fjallApiKeySsmParameterName:s.string().min(2).regex(/^\//,"fjallApiKeySsmParameterName must be a full path (leading /)").optional(),instanceType:s.string().min(1).default("c8g.xlarge"),agentVolumeSizeGib:s.number().int().min(20).max(1e3).default(250),agentMinInstances:s.number().int().min(0).default(0),agentMaxInstances:s.number().int().min(1).default(2),agentsPerInstance:s.number().int().min(1).default(1),spotCapacityPercentage:s.number().int().min(0).max(100).default(0),scaleInIdlePeriodSeconds:s.number().int().min(60).default(600),disconnectAfterUptimeSeconds:s.number().int().min(3600).default(86400),maxInstanceLifetimeDays:s.number().int().min(1).max(365).default(7),terminateInstanceAfterJob:s.boolean().default(!1),purgeBuildsOnDiskFull:s.boolean().default(!0),terminateInstanceOnDiskFull:s.boolean().default(!1),logRetentionDays:s.number().int().min(1).default(30),agentLogRetentionDays:s.literal(qD).default(7),buildkiteAgentRelease:s.enum(["stable","beta","edge"]).default("stable"),buildkiteAgentTags:s.string().default(""),buildkiteAgentTimestampLines:s.boolean().default(!1),buildkiteAgentExperiments:s.string().default(""),buildkiteAgentTracingBackend:s.enum(["","datadog","opentelemetry"]).default(""),buildkiteAgentCancelGracePeriodSeconds:s.number().int().min(10).default(60),enableSecretsPlugin:s.boolean().default(!0),enableEcrPlugin:s.boolean().default(!1),enableDockerLoginPlugin:s.boolean().default(!1),enableDockerUserNamespaceRemap:s.boolean().default(!0),enableDockerExperimental:s.boolean().default(!1),dockerNetworkingProtocol:s.enum(["ipv4","dualstack"]).default("ipv4"),enableInstanceStorage:s.boolean().default(!1),mountTmpfsAtTmp:s.boolean().default(!0),buildkiteAgentEnableGitMirrors:s.boolean().default(!1),bootstrapScriptUrl:s.string().default(""),agentEnvFileUrl:s.string().default(""),scalerEventSchedulePeriod:s.string().min(1).default("1 minute"),scalerMinPollInterval:s.string().min(1).default("10s"),scaleOutFactor:s.string().min(1).default("1.0"),scaleOutWaitingForJobs:s.boolean().default(!1),rolePermissionsBoundaryArn:s.string().min(1).optional(),alarmSnsTopicArn:s.string().min(1).optional(),applicationId:s.string().min(1).optional(),costAllocationEnvironment:s.string().min(1).optional(),costAllocationOwner:s.string().min(1).optional()}).strict(),ew=QD.refine(e=>e.agentMinInstances<=e.agentMaxInstances,{message:"agentMinInstances must be <= agentMaxInstances"});function tw(e){let t=ew.safeParse(e);if(!t.success){let n=t.error.issues.map(i=>`  - ${i.path.join(".")||"(root)"}: ${i.message}`).join(`
 `);throw new Error(`Buildkite: invalid props:
 ${n}`)}return t.data}JD(tw,"validateBuildkiteProps");var rw=Object.defineProperty,nw=(e,t)=>rw(e,"name",{value:t,configurable:!0});function iw(e){return`FjallDeployBoundary${e}`}nw(iw,"deployBoundaryName");var Ph={Sid:"FjallInheritAdministratorAccess",Effect:"Allow",Action:"*",Resource:"*"},Xx=[{Sid:"FjallDenyOrgAndAccountEscape",Effect:"Deny",Action:["organizations:LeaveOrganization","account:CloseAccount"],Resource:"*"},{Sid:"FjallDenyDisableAuditLogging",Effect:"Deny",Action:["cloudtrail:StopLogging"],Resource:"*"},{Sid:"FjallDenyBoundarySelfEscape",Effect:"Deny",Action:["iam:DeleteRolePermissionsBoundary"],Resource:"*"},{Sid:"FjallDenyDisableKmsKey",Effect:"Deny",Action:["kms:DisableKey"],Resource:"*"}],Jx=[...Xx,{Sid:"FjallDenyStandingHumanCredentials",Effect:"Deny",Action:["iam:CreateUser","iam:CreateLoginProfile","iam:CreateAccessKey","iam:CreateAccountAlias"],Resource:"*"},{Sid:"FjallDenyDisableConfigRecorder",Effect:"Deny",Action:["config:StopConfigurationRecorder"],Resource:"*"}],ow=[...Jx,{Sid:"FjallDenyAccountPasswordPolicyTamper",Effect:"Deny",Action:["iam:UpdateAccountPasswordPolicy","iam:DeleteAccountPasswordPolicy"],Resource:"*"},{Sid:"FjallDenyDisableDefaultEbsEncryption",Effect:"Deny",Action:["ec2:DisableEbsEncryptionByDefault"],Resource:"*"}],uV={foundation:[Ph,...Xx],compliance:[Ph,...Jx],hardened:[Ph,...ow]};var aw=Object.defineProperty,be=(e,t)=>aw(e,"name",{value:t,configurable:!0});var Dh="sts.amazonaws.com";function sw(e){return`FjallDevDeploy${e}`}be(sw,"devDeployRoleName");function cw(e){return`FjallDevProvisioner${e}`}be(cw,"devProvisionerRoleName");function uw(e){return`FjallDevSyncWriter${e}`}be(uw,"devSyncWriterRoleName");var lw="FjallDevBoundary";function qx(e){return`arn:aws:iam::${e}:policy/${lw}`}be(qx,"devBoundaryPolicyArn");function Qx(e){return`org:${e}:dev-provisioner`}be(Qx,"devProvisionerSubject");function eI(e){return`org:${e}:dev-sync`}be(eI,"devSyncSubject");function kh(e,t){return`org:${e}:acct:${t}`}be(kh,"deployAccountSubject");function Oh(e){return`org:${e}:*`}be(Oh,"genericMachineSubject");var dw=["discovery","connection","org-setup","dev-substrate-setup"];function tI(e,t){return`org:${e}:${t}`}be(tI,"serviceSubject");function mw(e){let{fjallOrgId:t,providerArn:n,issuerDomain:i,accountTier:r,accountId:o}=e,a=e.machineTrustMode??"expanded",c={[`${i}:aud`]:Dh},u;if(a==="account-scoped"){if(r===void 0||!_c(r)||o===void 0)throw new Error(`machineTrustMode "account-scoped" requires a governance accountTier and an accountId (got tier: ${String(r)}, accountId ${o===void 0?"absent":"present"}) \u2014 refusing to fall back to the generic machine subject: a silent fallback would re-widen the trust the \xA74.4a Step-3 contract removes`);u=[kh(t,o)]}else o!==void 0?u=[Oh(t),kh(t,o)]:u=Oh(t);return[{Sid:"FjallMachineSubject",Effect:"Allow",Principal:{Federated:n},Action:"sts:AssumeRoleWithWebIdentity",Condition:{StringEquals:{...c,[`${i}:sub`]:u}}},{Sid:"FjallUserSubjects",Effect:"Allow",Principal:{Federated:n},Action:"sts:AssumeRoleWithWebIdentity",Condition:{StringEquals:c,StringLike:{[`${i}:sub`]:`org:${t}:user:*`}}},{Sid:"FjallServiceSubjects",Effect:"Allow",Principal:{Federated:n},Action:"sts:AssumeRoleWithWebIdentity",Condition:{StringEquals:{...c,[`${i}:sub`]:dw.map(l=>tI(t,l))}}}]}be(mw,"buildNarrowedDeployTrustStatements");function pw(e){let{fjallOrgId:t,providerArn:n,issuerDomain:i,accountId:r}=e;return[{Sid:"FjallDevSubjectsThisAccount",Effect:"Allow",Principal:{Federated:n},Action:"sts:AssumeRoleWithWebIdentity",Condition:{StringEquals:{[`${i}:aud`]:Dh},StringLike:{[`${i}:sub`]:`org:${t}:dev:${r}:*`}}}]}be(pw,"buildDevDeployTrustStatements");function wh(e){let{providerArn:t,issuerDomain:n,sid:i,subject:r}=e;return[{Sid:i,Effect:"Allow",Principal:{Federated:t},Action:"sts:AssumeRoleWithWebIdentity",Condition:{StringEquals:{[`${n}:aud`]:Dh,[`${n}:sub`]:r}}}]}be(wh,"buildServiceSubjectTrustStatements");function fw(e){return wh({...e,sid:"FjallDevProvisionerSubject",subject:Qx(e.fjallOrgId)})}be(fw,"buildDevProvisionerTrustStatements");function gw(e){return wh({...e,sid:"FjallDevSyncSubject",subject:eI(e.fjallOrgId)})}be(gw,"buildDevSyncWriterTrustStatements");function hw({accountId:e}){return[{Sid:"FjallDevEcsTaggedMutations",Effect:"Allow",Action:["ecs:UpdateService","ecs:DeleteService","ecs:RunTask","ecs:StopTask"],Resource:`arn:aws:ecs:*:${e}:*`,Condition:{StringEquals:{"aws:ResourceTag/fjall:dev":"true"}}},{Sid:"FjallDevEcsTaggedCreates",Effect:"Allow",Action:["ecs:RegisterTaskDefinition","ecs:CreateService"],Resource:"*",Condition:{StringEquals:{"aws:RequestTag/fjall:dev":"true"}}},{Sid:"FjallDevEcsTagOnCreate",Effect:"Allow",Action:["ecs:TagResource"],Resource:`arn:aws:ecs:*:${e}:*`,Condition:{StringEquals:{"ecs:CreateAction":["RegisterTaskDefinition","CreateService","RunTask"]}}},{Sid:"FjallDevEcsReads",Effect:"Allow",Action:["ecs:Describe*","ecs:List*"],Resource:"*"},{Sid:"FjallDevEcsDeregisterTaskDefinition",Effect:"Allow",Action:["ecs:DeregisterTaskDefinition"],Resource:`arn:aws:ecs:*:${e}:task-definition/fjall-dev-*`},{Sid:"FjallDevElbTaggedMutations",Effect:"Allow",Action:["elasticloadbalancing:ModifyRule","elasticloadbalancing:DeleteRule","elasticloadbalancing:ModifyTargetGroup","elasticloadbalancing:ModifyTargetGroupAttributes","elasticloadbalancing:DeleteTargetGroup","elasticloadbalancing:RegisterTargets","elasticloadbalancing:DeregisterTargets"],Resource:`arn:aws:elasticloadbalancing:*:${e}:*`,Condition:{StringEquals:{"aws:ResourceTag/fjall:dev":"true"}}},{Sid:"FjallDevElbTaggedCreates",Effect:"Allow",Action:["elasticloadbalancing:CreateTargetGroup","elasticloadbalancing:CreateRule"],Resource:`arn:aws:elasticloadbalancing:*:${e}:*`,Condition:{StringEquals:{"aws:RequestTag/fjall:dev":"true"}}},{Sid:"FjallDevElbTagOnCreate",Effect:"Allow",Action:["elasticloadbalancing:AddTags"],Resource:`arn:aws:elasticloadbalancing:*:${e}:*`,Condition:{StringEquals:{"elasticloadbalancing:CreateAction":["CreateTargetGroup","CreateRule"]}}},{Sid:"FjallDevElbReads",Effect:"Allow",Action:["elasticloadbalancing:Describe*"],Resource:"*"},{Sid:"FjallDevSsmDevTree",Effect:"Allow",Action:["ssm:GetParameter*","ssm:PutParameter","ssm:AddTagsToResource"],Resource:`arn:aws:ssm:*:${e}:parameter/fjall/dev/*`},{Sid:"FjallDevLogsMutations",Effect:"Allow",Action:["logs:PutRetentionPolicy","logs:DeleteLogGroup"],Resource:`arn:aws:logs:*:${e}:log-group:/fjall/dev/*`},{Sid:"FjallDevLogsTaggedCreate",Effect:"Allow",Action:["logs:CreateLogGroup","logs:TagResource"],Resource:`arn:aws:logs:*:${e}:log-group:/fjall/dev/*`,Condition:{StringEquals:{"aws:RequestTag/fjall:dev":"true"}}},{Sid:"FjallDevLogsRead",Effect:"Allow",Action:["logs:GetLogEvents","logs:DescribeLogStreams","logs:FilterLogEvents"],Resource:`arn:aws:logs:*:${e}:log-group:/fjall/dev/*`},{Sid:"FjallDevLogsDescribeGroups",Effect:"Allow",Action:["logs:DescribeLogGroups"],Resource:"*"},{Sid:"FjallDevKmsViaDevAlias",Effect:"Allow",Action:["kms:Encrypt","kms:Decrypt","kms:GenerateDataKey"],Resource:`arn:aws:kms:*:${e}:key/*`,Condition:{"ForAnyValue:StringLike":{"kms:ResourceAliases":"alias/fjall-dev-*"}}},{Sid:"FjallDevKmsSsmSecureString",Effect:"Allow",Action:["kms:Encrypt","kms:Decrypt","kms:GenerateDataKey"],Resource:`arn:aws:kms:*:${e}:key/*`,Condition:{StringLike:{"kms:ViaService":"ssm.*.amazonaws.com"}}},{Sid:"FjallDevEcrAuthToken",Effect:"Allow",Action:["ecr:GetAuthorizationToken"],Resource:"*"},{Sid:"FjallDevEcrPushPull",Effect:"Allow",Action:["ecr:PutImage","ecr:InitiateLayerUpload","ecr:UploadLayerPart","ecr:CompleteLayerUpload","ecr:BatchCheckLayerAvailability","ecr:BatchGetImage","ecr:GetDownloadUrlForLayer","ecr:DescribeImages"],Resource:`arn:aws:ecr:*:${e}:repository/*`},{Sid:"FjallDevPassDevPathRoles",Effect:"Allow",Action:["iam:PassRole"],Resource:`arn:aws:iam::${e}:role/fjall/dev/*`}]}be(hw,"buildDevDeployPolicyStatements");function vw({accountId:e}){return[{Sid:"FjallDevProvisionerBoundedRoleWrites",Effect:"Allow",Action:["iam:CreateRole","iam:PutRolePolicy","iam:AttachRolePolicy"],Resource:`arn:aws:iam::${e}:role/fjall/dev/*`,Condition:{StringEquals:{"iam:PermissionsBoundary":qx(e)}}},{Sid:"FjallDevProvisionerPathRoleOps",Effect:"Allow",Action:["iam:DeleteRole","iam:DeleteRolePolicy","iam:DetachRolePolicy","iam:ListRolePolicies","iam:TagRole"],Resource:`arn:aws:iam::${e}:role/fjall/dev/*`},{Sid:"FjallDevProvisionerListRoles",Effect:"Allow",Action:["iam:ListRoles"],Resource:"*"},{Sid:"FjallDevProvisionerDevMasterSecrets",Effect:"Allow",Action:["secretsmanager:GetSecretValue"],Resource:`arn:aws:secretsmanager:*:${e}:secret:fjall-dev-*`},{Sid:"FjallDevProvisionerKmsDecryptViaSecretsManager",Effect:"Allow",Action:["kms:Decrypt"],Resource:`arn:aws:kms:*:${e}:key/*`,Condition:{StringLike:{"kms:ViaService":"secretsmanager.*.amazonaws.com"}}},{Sid:"FjallDevProvisionerDataApi",Effect:"Allow",Action:["rds-data:ExecuteStatement","rds-data:BatchExecuteStatement","rds-data:BeginTransaction","rds-data:CommitTransaction","rds-data:RollbackTransaction"],Resource:`arn:aws:rds:*:${e}:cluster:fjall-dev-*`},{Sid:"FjallDevProvisionerMetrics",Effect:"Allow",Action:["cloudwatch:GetMetricData"],Resource:"*"},{Sid:"FjallDevProvisionerOrphanDiscovery",Effect:"Allow",Action:["tag:GetResources"],Resource:"*"},{Sid:"FjallDevProvisionerSsmTeardown",Effect:"Allow",Action:["ssm:DeleteParameter*"],Resource:`arn:aws:ssm:*:${e}:parameter/fjall/dev/*`},{Sid:"FjallDevProvisionerLogsTeardown",Effect:"Allow",Action:["logs:DeleteLogGroup"],Resource:`arn:aws:logs:*:${e}:log-group:/fjall/dev/*`},{Sid:"FjallDevProvisionerTaggedTeardown",Effect:"Allow",Action:["ecs:UpdateService","ecs:StopTask","ecs:DeleteService","elasticloadbalancing:DeleteRule","elasticloadbalancing:DeleteTargetGroup","elasticloadbalancing:DeregisterTargets"],Resource:[`arn:aws:ecs:*:${e}:*`,`arn:aws:elasticloadbalancing:*:${e}:*`],Condition:{StringEquals:{"aws:ResourceTag/fjall:dev":"true"}}},{Sid:"FjallDevProvisionerTeardownReads",Effect:"Allow",Action:["ecs:Describe*","elasticloadbalancing:Describe*"],Resource:"*"},{Sid:"FjallDevProvisionerImageJanitor",Effect:"Allow",Action:["ecr:ListImages","ecr:DescribeImages","ecr:BatchDeleteImage"],Resource:`arn:aws:ecr:*:${e}:repository/*`},{Sid:"FjallDevProvisionerSsmReadAll",Effect:"Allow",Action:["ssm:GetParameter*"],Resource:`arn:aws:ssm:*:${e}:parameter/*`},{Sid:"FjallDevProvisionerKmsDecryptViaSsm",Effect:"Allow",Action:["kms:Decrypt"],Resource:`arn:aws:kms:*:${e}:key/*`,Condition:{StringLike:{"kms:ViaService":"ssm.*.amazonaws.com"}}}]}be(vw,"buildDevProvisionerPolicyStatements");function bw({accountId:e}){return[{Sid:"FjallDevSyncPrefixReadWrite",Effect:"Allow",Action:["s3:GetObject","s3:PutObject"],Resource:`arn:aws:s3:::fjall-dev-sync-${e}-*/*`,Condition:{StringEquals:{"aws:ResourceAccount":e}}}]}be(bw,"buildDevSyncWriterPolicyStatements");function yw({accountId:e}){return[{Sid:"FjallDevBoundarySsmDevRead",Effect:"Allow",Action:["ssm:GetParameter*"],Resource:`arn:aws:ssm:*:${e}:parameter/fjall/dev/*`},{Sid:"FjallDevBoundaryKmsDecryptDevAlias",Effect:"Allow",Action:["kms:Decrypt"],Resource:`arn:aws:kms:*:${e}:key/*`,Condition:{"ForAnyValue:StringLike":{"kms:ResourceAliases":"alias/fjall-dev-*"}}},{Sid:"FjallDevBoundarySyncPrefixReadWrite",Effect:"Allow",Action:["s3:GetObject","s3:PutObject"],Resource:`arn:aws:s3:::fjall-dev-sync-${e}-*/*`,Condition:{StringEquals:{"aws:ResourceAccount":e}}},{Sid:"FjallDevBoundarySlotLogs",Effect:"Allow",Action:["logs:CreateLogStream","logs:PutLogEvents"],Resource:`arn:aws:logs:*:${e}:log-group:/fjall/dev/*`},{Sid:"FjallDevBoundarySyncQueue",Effect:"Allow",Action:["sqs:ReceiveMessage","sqs:DeleteMessage","sqs:GetQueueUrl"],Resource:`arn:aws:sqs:*:${e}:fjall-dev-sync-${e}-*`}]}be(yw,"buildDevBoundaryStatements");var Sw=Object.defineProperty,We=(e,t)=>Sw(e,"name",{value:t,configurable:!0});function $(e){return JSON.stringify(e)}We($,"escapeStringLiteral");function Vr(e){return e.map($).join(", ")}We(Vr,"formatStringArray");var _w="import:SharedAlarmTopicArn";function Zr(e="    "){return`
@@ -332,7 +332,7 @@ ${o}`)}throw r}}zu(rn,"convertToResourcePlan");var P1=Object.defineProperty,Ti=(
 `;return i.push(`Custom code from line ${t.originalLine} could not be positioned. Added at end of file.`),e+`
 `+r+t.sourceText}pt(WT,"insertOrOrphanBlock");function Bu(e,t,n){if(!t||t.length===0)return{content:e,success:!0};try{let i=xr(e),r=Ke(i),o=[],a=GT(t),c=e;for(let u of a){let l=KT(i,r,u,n,o);c=WT(c,u,l,o)}return{content:c,success:!0,warnings:o.length>0?o:void 0}}catch(i){return Mt(i,e)}}pt(Bu,"injectCustomCodeBlocks");function HT(e,t,n,i){if(!t.afterManagedResource)return null;let r=t.afterManagedResource,o=(r.name&&n?.get(r.name))??r.name,a=e.find(u=>u.type===r.type&&u.resourceName===o);if(a)return a.endPos;let c=e.filter(u=>u.type===r.type&&u.isManaged);return c.length===1?c[0].endPos:(i&&i.push(`Resource ${Ir(t.afterManagedResource.type,t.afterManagedResource.name)} not found. Custom code may be orphaned.`),null)}pt(HT,"findAfterResourcePosition");function KT(e,t,n,i,r){switch(n.position){case"before-imports":return 0;case"after-imports":return jv(t,"import")?.endPos??0;case"after-app-init":return Lu(t,"app-init")?.endPos??null;case"after-tags":return Lu(t,"tags")?.endPos??null;case"after-resource":return HT(t,n,i,r);case"end-of-file":return e.getEnd();default:return null}}pt(KT,"findCustomCodeInsertPosition");function YT(e,t,n){let i=Fu(e,t),r=n.sourceText;return r=Uu(i,r)+r,r.endsWith(`
 `)||(r+=`
-`),r}pt(YT,"formatCustomCodeForInsertion");function XT(e){try{let t=function(r){r.kind===nn.SyntaxKind.Unknown&&i.push("Unknown node found in AST - possible parse error"),nn.forEachChild(r,t)};pt(t,"visit");let n=xr(e),i=[];return t(n),i.length>0?{valid:!1,errors:i}:{valid:!0}}catch(t){return{valid:!1,errors:[Nt(t)]}}}pt(XT,"validateModifiedFile");import*as xe from"typescript";var pa=s.enum(["A","AAAA","CNAME","MX","TXT","NS","SRV","CAA"]),D1=s.object({name:s.string(),type:pa,ttl:s.number().optional(),value:s.string(),priority:s.number().optional(),weight:s.number().optional(),port:s.number().optional()}).strict(),w1=s.object({subdomain:s.string(),targetAccount:s.string(),auto:s.boolean()}).strict(),M1=s.object({domainName:s.string(),subjectAlternativeNames:s.array(s.string())}).strict(),p9=s.object({origin:s.string(),ttl:s.number(),records:s.array(D1),delegations:s.array(w1),certificates:s.array(M1)}).strict(),jt=Object.freeze({ORIGIN:"$ORIGIN",TTL:"$TTL",FJALL_DELEGATE:"$FJALL-DELEGATE",FJALL_CERT:"$FJALL-CERT"}),JT="ALIAS ";var qT=s.discriminatedUnion("kind",[s.object({kind:s.literal("ecs"),appName:s.string(),computeName:s.string().min(1).optional()}).strict(),s.object({kind:s.literal("cdn"),appName:s.string()}).strict(),s.object({kind:s.literal("bucket"),bucketName:s.string()}).strict(),s.object({kind:s.literal("custom"),dnsName:s.string(),hostedZoneId:s.string()}).strict()]),QT=qT.options.map(e=>e.shape.kind.value),Fv=s.enum(["A","AAAA"]),Bv=s.enum(["route53","external-delegated","external-records"]),e$=s.enum(["zone","full"]),j1=s.object({kind:s.literal("standard"),type:s.enum(["A","AAAA","CNAME","MX","TXT","NS","SRV","CAA"]),name:s.string(),value:s.union([s.string(),s.array(s.string())]),ttl:s.number().int().positive().optional()}).strict(),z1=s.object({kind:s.literal("alias"),type:Fv,name:s.string(),target:qT}).strict(),L1=s.discriminatedUnion("kind",[j1,z1]),U1=s.object({domainName:s.string(),subjectAlternativeNames:s.array(s.string()).optional(),transparencyLogging:s.boolean().optional(),cloudFront:s.boolean().optional()}).strict(),F1=s.object({subdomain:s.string(),toAccount:s.string(),auto:s.boolean().optional()}).strict(),h9=s.object({zoneName:s.string(),registrar:Bv,hostedZoneId:s.string().optional(),delegatedSubdomain:s.string().optional(),adoptedNameServers:s.array(s.string().min(1)).min(1).optional(),records:s.array(L1),certificates:s.array(U1),delegations:s.array(F1)}).strict().refine(e=>e.registrar!=="external-delegated"||e.delegatedSubdomain!==void 0,{message:"external-delegated requires delegatedSubdomain"}).refine(e=>e.registrar!=="external-records"||e.delegations.length===0,{message:"external-records forbids delegations"}).refine(e=>e.registrar==="external-delegated"||e.adoptedNameServers===void 0,{message:"adoptedNameServers requires registrar external-delegated"}).refine(e=>e.registrar!=="external-delegated"||e.hostedZoneId===void 0==(e.adoptedNameServers===void 0),{message:"external-delegated adoption requires hostedZoneId and adoptedNameServers together (both-or-neither)"});var B1=Object.defineProperty,le=(e,t)=>B1(e,"name",{value:t,configurable:!0}),r$=Bv.options,t$=e$.options,V1=pa.options,Z1=Fv.options;function n$(e){let t=[],n=le(r=>{if(xe.isNewExpression(r)&&i$(r.expression)){let o=o$(r);o!==void 0&&t.push(o)}xe.forEachChild(r,n)},"visit");if(n(e),t.length===0)return C(void 0);if(t.length>1)return I(new Error(`Expected exactly one 'new Domain(...)' call per infrastructure file, found ${t.length}`));let i=t[0];return i?C(i):C(void 0)}le(n$,"findDomainConstructCall");function i$(e){return xe.isIdentifier(e)&&e.text==="Domain"}le(i$,"isDomainIdentifier");function o$(e){let t=e.arguments;if(!t||t.length<3)return;let n=t[0],i=t[1],r=t[2];if(!n||!i||!r||!xe.isObjectLiteralExpression(r))return;let o=a$(e);if(o===void 0)return;let a=s$(e),c=xe.isStringLiteral(i)?i.text:void 0;return{callExpression:e,containingStatement:o,propsObjectLiteral:r,domainVarId:a,scopeArgumentText:n.getText(),constructIdLiteral:c}}le(o$,"buildMatch");function a$(e){let t=e;for(;t!==void 0;){if(xe.isExpressionStatement(t)||xe.isVariableStatement(t))return t;t=t.parent}}le(a$,"findContainingTopLevelStatement");function s$(e){let t=e.parent;for(;t!==void 0;){if(xe.isVariableDeclaration(t)&&xe.isIdentifier(t.name)&&t.initializer===e)return t.name.text;t=t.parent}}le(s$,"extractDomainVarId");function c$(e){switch(e.kind){case"registrar_required":return"'registrar' property is required";case"registrar_unsupported":return`'registrar' must be one of ${r$.join(", ")}, got ${JSON.stringify(e.value)}`;case"missing_field":return`'${e.field}' property is required`;case"invalid_literal":return`'${e.field}' ${e.reason}`;case"removed_field":return`'${e.field}' was removed from the Domain API \u2014 ${e.cure}`}}le(c$,"errorMessage");var G1="declare the delegated child as its own Domain with registrar: 'external-delegated' and set 'parentDelegationRoleArn' (the CLI injects it via ManagedDomainBinding.delegationRoleArn); the child UPSERTs its NS records into the parent zone";function u$(e){let t=U(e),n=L(t.registrar,r$);if(n===void 0){let c=t.registrar;if(c===void 0)return I({kind:"registrar_required"});let u=typeof c=="string"?c:Zu(c);return I({kind:"registrar_unsupported",value:u})}let i=b(t.zoneName);if(i===void 0)return I({kind:"missing_field",field:"zoneName"});let r=d$(t.records);if(!r.success)return r;let o=h$(t.certificates);if(!o.success)return o;if(t.delegations!==void 0)return I({kind:"removed_field",field:"delegations",cure:G1});let a={zoneName:i,description:b(t.description),costAllocationEnvironment:b(t.costAllocationEnvironment),tags:v$(t.tags),records:r.data,certificates:o.data};switch(n){case"route53":return C({...a,registrar:n,hostedZoneId:b(t.hostedZoneId)});case"external-delegated":{let c=b(t.delegatedSubdomain);if(c===void 0)return I({kind:"missing_field",field:"delegatedSubdomain"});let u=b(t.hostedZoneId);if(t.hostedZoneId!==void 0&&u===void 0)return I({kind:"invalid_literal",field:"hostedZoneId",reason:"must be a literal string zone id on external-delegated \u2014 dynamic expressions cannot be round-tripped"});let l=se(t.adoptedNameServers);if(t.adoptedNameServers!==void 0&&l===void 0)return I({kind:"invalid_literal",field:"adoptedNameServers",reason:"must be an array of literal NS hostname strings \u2014 the parent NS UPSERT writes them verbatim"});if(u===void 0!=(l===void 0))return I({kind:"invalid_literal",field:u===void 0?"hostedZoneId":"adoptedNameServers",reason:"adopting an existing child zone requires hostedZoneId and adoptedNameServers together (both-or-neither) \u2014 an imported zone exposes no name-server attribute at synth"});let m=b(t.parentDelegationRoleArn);if(t.parentDelegationRoleArn!==void 0&&m===void 0)return I({kind:"invalid_literal",field:"parentDelegationRoleArn",reason:"must be a literal string ARN (VD2-a) \u2014 the CLI injects it via ManagedDomainBinding.delegationRoleArn; dynamic expressions such as Fn.importValue are not supported"});let p=L(t.phase,t$);return t.phase!==void 0&&p===void 0?I({kind:"invalid_literal",field:"phase",reason:`must be one of ${t$.map(g=>`'${g}'`).join(", ")}`}):C({...a,registrar:n,delegatedSubdomain:c,hostedZoneId:u,adoptedNameServers:l,parentDelegationRoleArn:m,phase:p})}case"external-records":return C({...a,registrar:n})}}le(u$,"parseDomainProps");function l$(e){return c$(e)}le(l$,"parseDomainErrorMessage");function d$(e){if(e===void 0)return C([]);if(!Array.isArray(e))return I({kind:"invalid_literal",field:"records",reason:"must be an array"});let t=[];for(let n=0;n<e.length;n++){let i=e[n];if(!N(i))return I({kind:"invalid_literal",field:`records[${n}]`,reason:"must be an object literal"});let r=m$(i,n);if(!r.success)return r;t.push(r.data)}return C(t)}le(d$,"parseRecordsArray");function m$(e,t){let n=b(e.type),i=b(e.name);if(n===void 0)return I({kind:"missing_field",field:`records[${t}].type`});if(i===void 0)return I({kind:"missing_field",field:`records[${t}].name`});if(e.target!==void 0){if(!Z1.some(u=>u===n))return I({kind:"invalid_literal",field:`records[${t}]`,reason:`alias records must have type 'A' or 'AAAA', got '${n}'`});let c=f$(e.target);return C({kind:"alias",type:n,name:i,target:c})}if(!V1.some(c=>c===n))return I({kind:"invalid_literal",field:`records[${t}]`,reason:`unsupported record type '${n}'`});let r=p$(e.value);if(r===void 0)return I({kind:"invalid_literal",field:`records[${t}].value`,reason:`must be a string or array of strings (got ${JSON.stringify(e.value)})`});let o=R(e.ttl),a={kind:"standard",type:n,name:i,value:r,...o!==void 0?{ttl:o}:{}};return C(a)}le(m$,"parseRecord");function p$(e){if(e===void 0)return;if(typeof e=="string")return e;let t=se(e);if(t!==void 0)return t}le(p$,"parseRecordValue");function f$(e){if(_t(e))return g$(e);if(N(e)){let t=L(e.kind,QT);if(t==="ecs"||t==="cdn"){let n=b(e.appName);if(n!==void 0)return{kind:t,appName:n}}if(t==="bucket"){let n=b(e.bucketName);if(n!==void 0)return{kind:t,bucketName:n}}if(t==="custom"){let n=b(e.dnsName),i=b(e.hostedZoneId);if(n!==void 0&&i!==void 0)return{kind:t,dnsName:n,hostedZoneId:i}}}return{kind:"unresolved",sourceText:Zu(e)}}le(f$,"parseTarget");function g$(e){let t=e.__call.trim(),n=t.match(/^([A-Za-z_][\w$]*)\s*\(([\s\S]*)\)\s*$/);if(!n)return{kind:"unresolved",sourceText:t};let i=n[1],r=n[2]??"",o=Vu(r);switch(i){case"fjallApp":{let a=Tr(o,0);if(a===void 0)return{kind:"dynamic",sourceText:t};if(o.length<2)return{kind:"ecs",appName:a};let c=Tr(o,1);return c===void 0?{kind:"dynamic",sourceText:t}:{kind:"ecs",appName:a,computeName:c}}case"fjallCdn":{let a=Tr(o,0);return a===void 0?{kind:"dynamic",sourceText:t}:{kind:"cdn",appName:a}}case"fjallBucket":{let a=Tr(o,0);return a===void 0?{kind:"dynamic",sourceText:t}:{kind:"bucket",bucketName:a}}case"aliasTo":{if(o.length>=2){let a=Tr(o,0),c=Tr(o,1);return a!==void 0&&c!==void 0?{kind:"custom",dnsName:a,hostedZoneId:c}:{kind:"dynamic",sourceText:t}}if(o.length===1){let a=o[0]?.trim()??"",c=Vv(a,"dnsName"),u=Vv(a,"hostedZoneId");return c!==void 0&&u!==void 0?{kind:"custom",dnsName:c,hostedZoneId:u}:{kind:"dynamic",sourceText:t}}return{kind:"unresolved",sourceText:t}}default:return{kind:"unresolved",sourceText:t}}}le(g$,"resolveCallRefTarget");function Vu(e){let t=[],n=0,i=null,r="";for(let a=0;a<e.length;a++){let c=e[a];if(i!==null){if(r+=c,c==="\\"&&a+1<e.length){let u=e[a+1];u!==void 0&&(r+=u,a+=1);continue}c===i&&(i=null);continue}if(c==='"'||c==="'"||c==="`"){i=c,r+=c;continue}if(c==="("||c==="{"||c==="["){n+=1,r+=c;continue}if(c===")"||c==="}"||c==="]"){n-=1,r+=c;continue}if(c===","&&n===0){t.push(r.trim()),r="";continue}r+=c}let o=r.trim();return o.length>0&&t.push(o),t}le(Vu,"splitTopLevelArgs");function Tr(e,t){let n=e[t];if(n===void 0)return;let i=n.trim();if(i.length<2)return;let r=i[0],o=i[i.length-1];if(r===o&&!(r!=='"'&&r!=="'"&&r!=="`"))return i.slice(1,-1)}le(Tr,"extractStringLiteralArg");function Vv(e,t){let n=e.trim().replace(/^\{|\}$/g,""),i=Vu(n);for(let r of i){let o=r.indexOf(":");if(o<0||r.slice(0,o).trim().replace(/["'`]/g,"")!==t)continue;let a=r.slice(o+1).trim();return Tr([a],0)}}le(Vv,"extractObjectFieldString");function h$(e){if(e===void 0)return C([]);if(!Array.isArray(e))return I({kind:"invalid_literal",field:"certificates",reason:"must be an array"});let t=[];for(let n=0;n<e.length;n++){let i=e[n];if(typeof i=="string"){t.push({domainName:i});continue}if(!N(i))return I({kind:"invalid_literal",field:`certificates[${n}]`,reason:"must be a string or object literal"});let r=b(i.domainName);if(r===void 0)return I({kind:"missing_field",field:`certificates[${n}].domainName`});let o=se(i.subjectAlternativeNames),a=j(i.transparencyLogging),c=j(i.cloudFront);if(i.cloudFront!==void 0&&c===void 0)return I({kind:"invalid_literal",field:`certificates[${n}].cloudFront`,reason:"must be a boolean literal \u2014 the CloudFront designation drives the zone-level us-east-1 export contract and cannot be round-tripped from a dynamic expression"});t.push({domainName:r,...o!==void 0?{subjectAlternativeNames:o}:{},...a!==void 0?{transparencyLogging:a}:{},...c!==void 0?{cloudFront:c}:{}})}return C(t)}le(h$,"parseCertificatesArray");function v$(e){if(e===void 0||!N(e))return;let t={};for(let[n,i]of Object.entries(e)){let r=b(i);r!==void 0&&(t[n]=r)}return Object.keys(t).length===0?void 0:t}le(v$,"parseStringRecord");function Zu(e){if(e===void 0)return"undefined";if(e===null)return"null";if(typeof e=="string")return JSON.stringify(e);if(typeof e=="number"||typeof e=="boolean")return String(e);if(Array.isArray(e))return`[${e.map(t=>Zu(t)).join(", ")}]`;if(typeof e=="object"){if("__call"in e)return String(e.__call);if("__identifier"in e)return String(e.__identifier);if("__expression"in e)return String(e.__expression);if("__unknown"in e)return String(e.__unknown)}return String(e)}le(Zu,"stringifyParsedValue");var W1=Object.defineProperty,Qt=(e,t)=>W1(e,"name",{value:t,configurable:!0});function b$(e){return e?.map(t=>({name:t.name,...t.serviceType!==void 0&&{serviceType:t.serviceType},...t.docker!==void 0&&{docker:t.docker},...t.containerPort!==void 0&&{containerPort:t.containerPort},...t.needsDatabaseConnection!==void 0&&{needsDatabaseConnection:t.needsDatabaseConnection},...t.routing!==void 0&&{routing:t.routing}}))}Qt(b$,"toUserServiceConfigs");function y$(e,t,n=!0,i,r){let o={appName:e,type:t,database:[],s3:[],compute:[]};if(t==="custom")return o;let a=t,c=Kt[a];return{...o,database:S$(e,c,a,n,r),compute:x$(e,c,a,n,i),network:c.network,backup:c.backup}}Qt(y$,"planApplicationResources");function S$(e,t,n,i,r){let o=Hh(n),a=t.database[o];return!i||a===null?[]:[{name:e,type:o,databaseName:fn(e),variableName:`${Wt(e)}Database`,...a,...r?.snapshotIdentifier!==void 0&&{snapshotIdentifier:r.snapshotIdentifier},...r?.snapshotUsername!==void 0&&{snapshotUsername:r.snapshotUsername}}]}Qt(S$,"buildDatabasePlan");function _$(e,t){if(!(e===void 0&&t===void 0))return{scaling:{...e!==void 0&&{minCapacity:e},...t!==void 0&&{maxCapacity:t}}}}Qt(_$,"buildScalingConfig");function Zv(e){let{minCapacity:t,maxCapacity:n,...i}=e;return{...i,..._$(t,n)}}Qt(Zv,"planServiceFromTierPreset");function E$(e,t){let n=Zv(e),i=t?.serviceType==="worker",r=t?.containerPort??WA,o=t?.docker;return{...n,...o?.path!==void 0&&{docker:{path:o.path,...o.context!==void 0&&{context:o.context},...o.target!==void 0&&{target:o.target}}},...t?.needsDatabaseConnection!==void 0&&{needsDatabaseConnection:t.needsDatabaseConnection},...i&&{serviceType:"worker"},containers:i?[{}]:[{port:r}]}}Qt(E$,"buildServiceEntry");function A$(e,t){return t||e?.directAccess===!0?e:{...e,loadBalancer:!1}}Qt(A$,"resolveClusterConfig");function x$(e,t,n,i,r){let o=t.compute.ecs,a=(r&&r.length>0?Kh(n,r):o.services.map((u,l)=>({...u,name:l===0?"api":`service-${l+1}`}))).map((u,l)=>E$(u,r?.[l])),c=a.some(u=>u.containers?.some(l=>l.port!==void 0));return[{name:e,type:oi.ECS,needsConnection:i,connectedDatabase:i?[e]:void 0,variableName:`${Wt(e)}Compute`,cluster:A$(o.cluster,c),services:a}]}Qt(x$,"buildComputePlan");function Ni(e,t){let n=[Su(e),yu(e),bu(e)];if(Au(e))n.push(qo(e),ea(e));else{let r=Eu(e);n.push(ea(e),au(e),su(e),gu(e),hu(e),vu(e),du(e,r),_u(e))}let i=n.join("");if(e.customCodeBlocks&&e.customCodeBlocks.length>0){let r=Bu(i,e.customCodeBlocks,t?.resourceMapping);return r.success?C(r.content):I(new Error(`Custom code injection failed: ${r.error??"unknown error"}`))}return C(i)}Qt(Ni,"generateInfrastructureFromPlan");var H1=Object.defineProperty,Ci=(e,t)=>H1(e,"name",{value:t,configurable:!0}),K1=Wh("standard");function I$(e){return jo.options.some(t=>t.shape?.type?.value===e)}Ci(I$,"isPatternConfigType");function T$(e,t,n){let{tier:i="standard",domain:r,database:o,compute:a,cdn:c,environment:u,tags:l}=n??{},m=Iu(i);if(!m&&i!=="custom")return I(new Error(`Invalid pattern tier: "${i}". Valid tiers are: ${[...ra,"custom"].join(", ")}`));if(!I$(t))return I(new Error(`Unsupported pattern type: ${t}`));let p=m?xu(i):null,g=C$(t,e,{domain:r,database:o,compute:a,cdn:c,environment:u,tierPreset:p});if(!g.success)return g;let v=g.data;return C({appName:e,type:"standard",pattern:t,network:p?p.network:K1,backup:p?p.backup:!1,patternConfig:v,database:[],s3:[],compute:[],tags:l??{}})}Ci(T$,"planOpenNextResources");function $$(e,t){return{type:e?.type??t.database.type,instanceType:e?.instanceType??t.database.instanceType,backupRetention:e?.backupRetention??t.database.backupRetention,deletionProtection:e?.deletionProtection??t.database.deletionProtection,...e?.databaseName!==void 0&&{databaseName:e.databaseName},...e?.publiclyAccessible!==void 0&&{publiclyAccessible:e.publiclyAccessible},...e?.allowedIpCidr!==void 0&&{allowedIpCidr:e.allowedIpCidr},...e?.encryption!==void 0&&{encryption:e.encryption}}}Ci($$,"mergeDatabaseConfig");function R$(e,t){return{memorySize:e?.memorySize??t.compute.memorySize,timeout:e?.timeout??t.compute.timeout}}Ci(R$,"mergeComputeConfig");function N$(e){let{encryption:t,...n}=e;return{...n,...t&&{encryption:{storageKey:t}}}}Ci(N$,"toPatternDatabaseConfig");function C$(e,t,n){let{domain:i,database:r,compute:o,cdn:a,environment:c,tierPreset:u}=n,l=u?$$(r,u):r,m=u?R$(o,u):o,p={type:e,name:t,domain:i,database:l?N$(l):void 0,compute:m?{server:m}:void 0,cdn:a?{domainNames:a.domainNames,certificateArn:a.certificateArn}:void 0,environment:c},g=jo.safeParse(p);return g.success?C(g.data):I(new Error(`Invalid pattern config: ${g.error.message}`))}Ci(C$,"buildPatternConfig");var Y1=Object.defineProperty,X1=(e,t)=>Y1(e,"name",{value:t,configurable:!0});function P$(e,t){let n={type:"staticsite",name:e,source:t.source,build:t.build,...t.routing!==void 0&&{routing:t.routing},...t.security!==void 0&&{security:t.security},...t.domain!==void 0&&{domain:t.domain},...t.forms!==void 0&&{forms:t.forms},...t.cdn!==void 0&&{cdn:t.cdn}},i=Nh.safeParse(n);return i.success?C({appName:e,type:"standard",pattern:"staticsite",patternConfig:i.data,database:[],s3:[],compute:[],tags:t.tags??{}}):I(new Error(`Invalid static-site pattern config: ${i.error.message}`))}X1(P$,"planStaticSiteResources");var J1=Object.defineProperty,Gu=(e,t)=>J1(e,"name",{value:t,configurable:!0});function k$(e){let t=e.split("/");if(t.length!==2||!t[0]||!t[1])throw new Error(`Invalid service reference format: '${e}'. Expected 'ClusterName/ServiceName'.`);return t[0]}Gu(k$,"parseServiceReference");function Gv(e,t,n){n==="database"?(e.needsConnection=!0,e.connectedDatabase=[...new Set([...e.connectedDatabase??[],t])]):e.connectedStorage=[...new Set([...e.connectedStorage??[],t])]}Gu(Gv,"addResourceConnection");function Wu(e,t,n,i){let r=new Set(t),o=[...new Set(t.map(k$))];for(let a of o){let c=e.compute.find(u=>u.name===a);if(c?.services){Gv(c,n,i);for(let u of c.services){let l=`${a}/${u.name}`;r.has(l)&&(i==="database"?u.needsDatabaseConnection=!0:u.needsStorageConnection=!0)}}}}Gu(Wu,"applyServiceConnections");function Hu(e,t,n,i){for(let r of e.compute)if(t.includes(r.name)&&(Gv(r,n,i),r.services))for(let o of r.services)i==="database"?o.needsDatabaseConnection=!0:o.needsStorageConnection=!0}Gu(Hu,"applyComputeConnections");var q1=Object.defineProperty,fe=(e,t)=>q1(e,"name",{value:t,configurable:!0});function O$(e){let t=e.database.length>0,n=e.cdn!==void 0;return[{type:"database",label:"Database (RDS)",available:!0},{type:"database:proxy",label:"RDS Proxy",available:t,reason:t?void 0:"Requires at least one database"},{type:"storage:s3",label:"S3 Bucket",available:!0},{type:"network",label:"Network (VPC)",available:!0},{type:"compute:ecs",label:"Compute (ECS)",available:!0},{type:"compute:lambda",label:"Compute (Lambda)",available:!0},{type:"cdn",label:"CDN (CloudFront)",available:!n,reason:n?"A CDN is already configured. Remove existing CDN first.":void 0},{type:"tunnel",label:"Database Tunnel",available:t&&!e.tunnel,reason:t?e.tunnel?"Tunnel is already enabled":void 0:"Requires at least one database"}]}fe(O$,"listAvailableResources");function fa(e,t){if(Hv(e,t.resourceName))return I(new Error(Kv(t.resourceName)));switch(t.type){case"database":return D$(e,t);case"database:proxy":return w$(e,t);case"storage:s3":return C(void 0);case"network":return C(void 0);case"compute:ecs":return!t.services||t.services.length===0?I(new Error("ECS compute requires at least one service.")):C(void 0);case"compute:lambda":return C(void 0);case"cdn":return M$(e,t);case"tunnel":return j$(e);default:{let n=t;return I(new Error(`Unknown resource type: ${String(n)}`))}}}fe(fa,"validateResourceAddition");function D$(e,t){let n=t.databaseName??t.resourceName.toLowerCase();return e.database.some(i=>i.databaseName===n)?I(new Error(`Database name '${n}' already exists. Choose a different database name.`)):t.databaseType==="GlobalAurora"&&!t.primaryRegion?I(new Error("GlobalAurora databases require a primaryRegion.")):C(void 0)}fe(D$,"validateDatabaseAddition");function w$(e,t){let n=e.database.find(i=>i.name===t.targetDatabase||i.databaseName===t.targetDatabase);if(!n){let i=e.database.map(r=>r.name).join(", ")||"none";return I(new Error(`Database '${t.targetDatabase}' not found. Available databases: ${i}`))}return n.proxy!==void 0&&n.proxy!==!1?I(new Error(`Database '${n.name}' already has RDS Proxy enabled.`)):C(void 0)}fe(w$,"validateProxyAddition");function M$(e,t){if(e.cdn)return I(new Error("A CDN is already configured for this application. Remove the existing CDN first."));if(!Wv(e,t.defaultOriginRef))return I(new Error(`Origin '${t.defaultOriginRef}' not found in plan. CDN origin must reference an existing resource.`));if(t.behaviours){for(let n of t.behaviours)if(!Wv(e,n.originRef))return I(new Error(`Behaviour origin '${n.originRef}' not found in plan.`))}return C(void 0)}fe(M$,"validateCdnAddition");function j$(e){return e.tunnel&&typeof e.tunnel=="object"?I(new Error("Tunnel is already enabled for this application.")):e.database.length===0?I(new Error("No databases found \u2014 tunnel requires at least one relational database.")):C(void 0)}fe(j$,"validateTunnelAddition");function Ku(e,t){let n=fa(e,t);if(!n.success)return n;switch(t.type){case"database":return z$(e,t);case"database:proxy":return L$(e,t);case"storage:s3":return U$(e,t);case"network":return F$(e,t);case"compute:ecs":return B$(e,t);case"compute:lambda":return V$(e,t);case"cdn":return Z$(e,t);case"tunnel":return G$(e,t);default:{let i=t;return I(new Error(`Unknown resource type: ${String(i)}`))}}}fe(Ku,"addResourceToPlan");function z$(e,t){let n=t.databaseName??t.resourceName.toLowerCase(),i={name:t.resourceName,type:t.databaseType,databaseName:n},r;switch(t.databaseType){case"Instance":r={...i,...t.instanceType!==void 0?{instanceType:t.instanceType}:{},...t.multiAz!==void 0?{multiAz:t.multiAz}:{},...t.readReplica!==void 0?{readReplica:t.readReplica}:{},...t.publiclyAccessible!==void 0?{publiclyAccessible:t.publiclyAccessible}:{},...t.backupRetention!==void 0?{backupRetention:t.backupRetention}:{}};break;case"Aurora":r={...i,...t.writer!==void 0?{writer:t.writer}:{},...t.readers!==void 0?{readers:t.readers}:{},...t.backupRetention!==void 0?{backupRetention:t.backupRetention}:{},...t.preferredMaintenanceWindow!==void 0?{preferredMaintenanceWindow:t.preferredMaintenanceWindow}:{}};break;case"GlobalAurora":r={...i,primaryRegion:t.primaryRegion,...t.secondaryRegions!==void 0?{secondaryRegions:t.secondaryRegions}:{}};break;default:{let a=t.databaseType;return I(new Error(`Unknown database type: ${String(a)}`))}}let o={...e,database:[...e.database,r]};return Yv(o,t.resourceName,"database",t),C(o)}fe(z$,"addDatabase");function L$(e,t){let n=e.database.map(o=>({...o})),i=n.find(o=>o.name===t.targetDatabase||o.databaseName===t.targetDatabase);if(!i)return I(new Error(`Database '${t.targetDatabase}' not found.`));let r={};return t.maxConnections!==void 0&&(r.maxConnections=t.maxConnections),t.maxIdleConnections!==void 0&&(r.maxIdleConnections=t.maxIdleConnections),t.connectionBorrowTimeout!==void 0&&(r.connectionBorrowTimeout=t.connectionBorrowTimeout),t.requireTLS!==void 0&&(r.requireTLS=t.requireTLS),i.proxy=Object.keys(r).length>0?r:{},C({...e,database:n})}fe(L$,"addProxy");function U$(e,t){let n=t.bucketName??t.resourceName.toLowerCase(),i=he(n),r=e.s3.length,o=r===0?"":`${r+1}`,a={name:i,bucketName:n,variableName:`bucket${o}`,...t.publicReadAccess!==void 0?{publicReadAccess:t.publicReadAccess}:{},...t.versioned!==void 0?{versioned:t.versioned}:{},...t.encryption!==void 0?{encryption:t.encryption}:{},...t.websiteHosting?{websiteHosting:{indexDocument:"index.html"}}:{}},c={...e,s3:[...e.s3,a]};return Yv(c,i,"storage",t),C(c)}fe(U$,"addS3");function F$(e,t){let n={};if(t.maxAzs!==void 0&&(n.maxAzs=t.maxAzs),t.natGateways!==void 0&&(n.natGateways=t.natGateways),t.flowLogs!==void 0&&(n.flowLogs=t.flowLogs),t.vpcEndpoints!==void 0&&(n.vpcEndpoints=t.vpcEndpoints),t.networkName){let i={name:t.networkName,...n};return C({...e,additionalNetworks:[...e.additionalNetworks??[],i]})}return C({...e,network:{...e.network??{},...n}})}fe(F$,"addNetwork");function B$(e,t){let n=t.connectedDatabase??[],i={name:t.resourceName,type:"ecs",needsConnection:n.length>0,connectedDatabase:n,...t.loadBalancer!==void 0?{cluster:{loadBalancer:t.loadBalancer}}:{},services:t.services.map(r=>({name:r.name,capacityProvider:r.capacityProvider??"FARGATE",...r.port!==void 0?{containers:[{port:r.port}]}:{},...r.cpu!==void 0?{cpu:r.cpu}:{},...r.memory!==void 0?{memoryLimitMiB:r.memory}:{}})),...t.docker!==void 0&&{docker:t.docker}};return C({...e,compute:[...e.compute,i]})}fe(B$,"addEcsCompute");function V$(e,t){let n=t.connectedDatabase??[],i={name:t.resourceName,type:"lambda",needsConnection:n.length>0,connectedDatabase:n,...t.timeout!==void 0?{timeout:t.timeout}:{},...t.memory!==void 0?{memory:t.memory}:{},...t.handler!==void 0?{handler:t.handler}:{},...t.runtime!==void 0?{runtime:t.runtime}:{}};return C({...e,compute:[...e.compute,i]})}fe(V$,"addLambdaCompute");function Z$(e,t){let n={name:t.resourceName,defaultOriginRef:t.defaultOriginRef,...t.customDomain!==void 0?{customDomain:t.customDomain}:{},...t.certificateArn!==void 0?{certificateArn:t.certificateArn}:{},...t.behaviours&&t.behaviours.length>0?{behaviours:[...t.behaviours].map(i=>({pathPattern:i.pathPattern,originRef:i.originRef,...i.cachePolicy!==void 0?{cachePolicy:i.cachePolicy}:{}}))}:{}};return C({...e,cdn:n})}fe(Z$,"addCdn");function G$(e,t){let n=t.instanceType?{instanceType:t.instanceType}:{};return C({...e,tunnel:n})}fe(G$,"addTunnel");function Hv(e,t){let n=[...e.database.map(i=>i.name),...(e.clickhouse??[]).map(i=>i.name),...e.s3.map(i=>i.name),...e.compute.map(i=>i.name),...(e.dynamodb??[]).map(i=>i.name),...(e.sqs??[]).map(i=>i.name),...(e.additionalNetworks??[]).map(i=>i.name)];return e.cdn&&n.push(e.cdn.name),n.includes(t)}fe(Hv,"isResourceNameTaken");function Kv(e){return`Resource name '${e}' is already used in this application.`}fe(Kv,"resourceNameTakenMessage");function Wv(e,t){return e.database.some(n=>n.name===t)||e.s3.some(n=>n.name===t)||e.compute.some(n=>n.name===t)||(e.dynamodb??[]).some(n=>n.name===t)||(e.sqs??[]).some(n=>n.name===t)}fe(Wv,"resourceExistsInPlan");function Yv(e,t,n,i){i.connectToCompute&&i.connectToCompute.length>0&&Hu(e,[...i.connectToCompute],t,n),i.connectToServices&&i.connectToServices.length>0&&Wu(e,[...i.connectToServices],t,n)}fe(Yv,"applyConnections");var Q1=Object.defineProperty,eM=(e,t)=>Q1(e,"name",{value:t,configurable:!0});function W$(e,t,n){let i;try{i=Ar(e,{extractCustomCode:!0})}catch(u){return I(new Error(`Failed to parse infrastructure.ts: ${u instanceof Error?u.message:String(u)}`))}let r;try{r=rn(i,t,{skipValidation:!0})}catch(u){return I(new Error(`Failed to build resource plan: ${u instanceof Error?u.message:String(u)}`))}i.customCodeBlocks&&i.customCodeBlocks.length>0&&(r.customCodeBlocks=i.customCodeBlocks);let o=fa(r,n);if(!o.success)return o;let a=Ku(r,n);if(!a.success)return a;let c=Ni(a.data);return c.success?C({originalContent:e,modifiedContent:c.data,addedResource:{type:n.type,name:n.resourceName}}):I(new Error(`Code generation failed: ${c.error.message}`))}eM(W$,"generateResourceChange");var tM=Object.defineProperty,on=(e,t)=>tM(e,"name",{value:t,configurable:!0});function zt(e,...t){let n={};for(let i of t)e[i]!==void 0&&(n[i]=e[i]);return n}on(zt,"pickDefined");function H$(e,t){let n={name:e,type:t.databaseType,databaseName:t.databaseName,...zt(t,"databaseInsights","port","proxy","credentials","encryption","deletionProtection")};switch(t.databaseType){case"Instance":return{...n,...zt(t,"instanceType","multiAz","readReplica","publiclyAccessible","backupRetention","allocatedStorage","snapshotIdentifier","snapshotUsername")};case"Aurora":return{...n,...zt(t,"writer","readers","backupRetention","preferredMaintenanceWindow","monitoringInterval","snapshotIdentifier","snapshotUsername")};case"GlobalAurora":return{...n,primaryRegion:t.primaryRegion,...t.secondaryRegions&&t.secondaryRegions.length>0&&{secondaryRegions:t.secondaryRegions},...zt(t,"globalClusterIdentifier","enableGlobalWriteForwarding","writer","readers","backupRetention","preferredMaintenanceWindow","monitoringInterval","snapshotIdentifier","snapshotUsername")};default:return t}}on(H$,"buildRelationalResourcePlan");function K$(e){return`${e}Database`}on(K$,"defaultRelationalDatabaseName");function Y$(e,t){return`Database name '${e}' already exists in ${t}. Please choose a different database name.`}on(Y$,"duplicateDatabaseNameMessage");function X$(e,t){let n=e.find(r=>r.name===t.databaseName||r.databaseName===t.databaseName);if(!n)return{ok:!1,message:`Database '${t.databaseName}' not found. Available databases: ${e.map(r=>r.name).join(", ")||"none"}`};if(n.proxy!==void 0&&n.proxy!==!1)return{ok:!1,message:`Database '${n.name}' already has RDS Proxy enabled.`};let i=zt(t,"maxConnections","maxIdleConnections","connectionBorrowTimeout","requireTLS");return{ok:!0,database:n,proxyValue:Object.keys(i).length>0?i:{}}}on(X$,"resolveProxyAddition");function J$(e,t){return{name:e,type:"ClickHouse",databaseName:t.databaseName,...zt(t,"instanceType","coldTier","optimiseSchedule","backupSchedule","backupRetentionDays")}}on(J$,"buildClickHouseResourcePlan");function q$(e,t,n){let i=t.storagePreset??"standard",r=Tu[i],o=n===0?"":`${n+1}`;return{name:e,bucketName:t.bucketName,variableName:`bucket${o}`,...r,...zt(t,"publicReadAccess","websiteHosting","backupVaultTier","versioned","encryption","kmsKeyArn","cors")}}on(q$,"buildS3ResourcePlan");var rM=Object.defineProperty,Lt=(e,t)=>rM(e,"name",{value:t,configurable:!0}),nM=new Set(pa.options);function Q$(e){return nM.has(e.toUpperCase())}Lt(Q$,"isRecordType");function eR(e){return e.endsWith(".")?e.slice(0,-1):e}Lt(eR,"stripTrailingDot");function tR(e){let t=!1;for(let n=0;n<e.length;n++)if(e[n]==='"')t=!t;else if(e[n]===";"&&!t)return e.slice(0,n).trimEnd();return e}Lt(tR,"stripInlineComment");function rR(e,t){let n=e.slice(t).join(" "),i=[],r="",o=!1;for(let a of n)a==='"'?(o&&(i.push(r),r=""),o=!o):o&&(r+=a);return i.join(" ")}Lt(rR,"parseTxtValue");function nR(e){let t=/;\s*auto\s*$/.test(e),n=e.replace(/;\s*auto\s*$/,"").trim().match(/^\$FJALL-DELEGATE\s+(\S+)\s+TO\s+(\S+)$/i);if(n)return{subdomain:n[1],targetAccount:n[2],auto:t}}Lt(nR,"parseDelegateDirective");function iR(e){if(e.length<2)return;let t=e[1],n=e.slice(2);return{domainName:t,subjectAlternativeNames:n}}Lt(iR,"parseCertDirective");function oR(e){let t=[],n="",i=!1;for(let r of e)r==='"'?(i=!i,n+=r):/\s/.test(r)&&!i?n.length>0&&(t.push(n),n=""):n+=r;return n.length>0&&t.push(n),t}Lt(oR,"tokenise");function aR(e){if(e.length<2)return;let t=0,n=e[t++],i,r;for(;t<e.length&&r===void 0;){let a=e[t].toUpperCase();if(a==="IN")t++;else if(Q$(a))r=a,t++;else if(/^\d+$/.test(e[t]))i=parseInt(e[t],10),t++;else return}if(!r)return;let o=e.slice(t);switch(r){case"MX":{if(o.length<2)return;let a=parseInt(o[0],10),c=o.slice(1).join(" ");return{name:n,type:r,ttl:i,value:c,priority:a}}case"SRV":{if(o.length<4)return;let a=parseInt(o[0],10),c=parseInt(o[1],10),u=parseInt(o[2],10),l=o[3];return{name:n,type:r,ttl:i,value:l,priority:a,weight:c,port:u}}case"TXT":{let a=rR(e,t);return{name:n,type:r,ttl:i,value:a}}case"CAA":{let a=o.join(" ");return{name:n,type:r,ttl:i,value:a}}case"A":case"AAAA":{if(o.length===0)return;if(o[0].toUpperCase()==="ALIAS"){if(o.length<2)return;let a=o.slice(1).join(" ");return{name:n,type:r,ttl:i,value:`${JT}${a}`}}return{name:n,type:r,ttl:i,value:o[0]}}default:return o.length===0?void 0:{name:n,type:r,ttl:i,value:o[0]}}}Lt(aR,"parseRecord");function sR(e){let t=e.split(`
+`),r}pt(YT,"formatCustomCodeForInsertion");function XT(e){try{let t=function(r){r.kind===nn.SyntaxKind.Unknown&&i.push("Unknown node found in AST - possible parse error"),nn.forEachChild(r,t)};pt(t,"visit");let n=xr(e),i=[];return t(n),i.length>0?{valid:!1,errors:i}:{valid:!0}}catch(t){return{valid:!1,errors:[Nt(t)]}}}pt(XT,"validateModifiedFile");import*as xe from"typescript";var pa=s.enum(["A","AAAA","CNAME","MX","TXT","NS","SRV","CAA"]),D1=s.object({name:s.string(),type:pa,ttl:s.number().optional(),value:s.string(),priority:s.number().optional(),weight:s.number().optional(),port:s.number().optional()}).strict(),w1=s.object({subdomain:s.string(),targetAccount:s.string(),auto:s.boolean()}).strict(),M1=s.object({domainName:s.string(),subjectAlternativeNames:s.array(s.string())}).strict(),p3=s.object({origin:s.string(),ttl:s.number(),records:s.array(D1),delegations:s.array(w1),certificates:s.array(M1)}).strict(),jt=Object.freeze({ORIGIN:"$ORIGIN",TTL:"$TTL",FJALL_DELEGATE:"$FJALL-DELEGATE",FJALL_CERT:"$FJALL-CERT"}),JT="ALIAS ";var qT=s.discriminatedUnion("kind",[s.object({kind:s.literal("ecs"),appName:s.string(),computeName:s.string().min(1).optional()}).strict(),s.object({kind:s.literal("cdn"),appName:s.string()}).strict(),s.object({kind:s.literal("bucket"),bucketName:s.string()}).strict(),s.object({kind:s.literal("custom"),dnsName:s.string(),hostedZoneId:s.string()}).strict()]),QT=qT.options.map(e=>e.shape.kind.value),Fv=s.enum(["A","AAAA"]),Bv=s.enum(["route53","external-delegated","external-records"]),e$=s.enum(["zone","full"]),j1=s.object({kind:s.literal("standard"),type:s.enum(["A","AAAA","CNAME","MX","TXT","NS","SRV","CAA"]),name:s.string(),value:s.union([s.string(),s.array(s.string())]),ttl:s.number().int().positive().optional()}).strict(),z1=s.object({kind:s.literal("alias"),type:Fv,name:s.string(),target:qT}).strict(),L1=s.discriminatedUnion("kind",[j1,z1]),U1=s.object({domainName:s.string(),subjectAlternativeNames:s.array(s.string()).optional(),transparencyLogging:s.boolean().optional(),cloudFront:s.boolean().optional()}).strict(),F1=s.object({subdomain:s.string(),toAccount:s.string(),auto:s.boolean().optional()}).strict(),h3=s.object({zoneName:s.string(),registrar:Bv,hostedZoneId:s.string().optional(),delegatedSubdomain:s.string().optional(),adoptedNameServers:s.array(s.string().min(1)).min(1).optional(),records:s.array(L1),certificates:s.array(U1),delegations:s.array(F1)}).strict().refine(e=>e.registrar!=="external-delegated"||e.delegatedSubdomain!==void 0,{message:"external-delegated requires delegatedSubdomain"}).refine(e=>e.registrar!=="external-records"||e.delegations.length===0,{message:"external-records forbids delegations"}).refine(e=>e.registrar==="external-delegated"||e.adoptedNameServers===void 0,{message:"adoptedNameServers requires registrar external-delegated"}).refine(e=>e.registrar!=="external-delegated"||e.hostedZoneId===void 0==(e.adoptedNameServers===void 0),{message:"external-delegated adoption requires hostedZoneId and adoptedNameServers together (both-or-neither)"});var B1=Object.defineProperty,le=(e,t)=>B1(e,"name",{value:t,configurable:!0}),r$=Bv.options,t$=e$.options,V1=pa.options,Z1=Fv.options;function n$(e){let t=[],n=le(r=>{if(xe.isNewExpression(r)&&i$(r.expression)){let o=o$(r);o!==void 0&&t.push(o)}xe.forEachChild(r,n)},"visit");if(n(e),t.length===0)return C(void 0);if(t.length>1)return I(new Error(`Expected exactly one 'new Domain(...)' call per infrastructure file, found ${t.length}`));let i=t[0];return i?C(i):C(void 0)}le(n$,"findDomainConstructCall");function i$(e){return xe.isIdentifier(e)&&e.text==="Domain"}le(i$,"isDomainIdentifier");function o$(e){let t=e.arguments;if(!t||t.length<3)return;let n=t[0],i=t[1],r=t[2];if(!n||!i||!r||!xe.isObjectLiteralExpression(r))return;let o=a$(e);if(o===void 0)return;let a=s$(e),c=xe.isStringLiteral(i)?i.text:void 0;return{callExpression:e,containingStatement:o,propsObjectLiteral:r,domainVarId:a,scopeArgumentText:n.getText(),constructIdLiteral:c}}le(o$,"buildMatch");function a$(e){let t=e;for(;t!==void 0;){if(xe.isExpressionStatement(t)||xe.isVariableStatement(t))return t;t=t.parent}}le(a$,"findContainingTopLevelStatement");function s$(e){let t=e.parent;for(;t!==void 0;){if(xe.isVariableDeclaration(t)&&xe.isIdentifier(t.name)&&t.initializer===e)return t.name.text;t=t.parent}}le(s$,"extractDomainVarId");function c$(e){switch(e.kind){case"registrar_required":return"'registrar' property is required";case"registrar_unsupported":return`'registrar' must be one of ${r$.join(", ")}, got ${JSON.stringify(e.value)}`;case"missing_field":return`'${e.field}' property is required`;case"invalid_literal":return`'${e.field}' ${e.reason}`;case"removed_field":return`'${e.field}' was removed from the Domain API \u2014 ${e.cure}`}}le(c$,"errorMessage");var G1="declare the delegated child as its own Domain with registrar: 'external-delegated' and set 'parentDelegationRoleArn' (the CLI injects it via ManagedDomainBinding.delegationRoleArn); the child UPSERTs its NS records into the parent zone";function u$(e){let t=U(e),n=L(t.registrar,r$);if(n===void 0){let c=t.registrar;if(c===void 0)return I({kind:"registrar_required"});let u=typeof c=="string"?c:Zu(c);return I({kind:"registrar_unsupported",value:u})}let i=b(t.zoneName);if(i===void 0)return I({kind:"missing_field",field:"zoneName"});let r=d$(t.records);if(!r.success)return r;let o=h$(t.certificates);if(!o.success)return o;if(t.delegations!==void 0)return I({kind:"removed_field",field:"delegations",cure:G1});let a={zoneName:i,description:b(t.description),costAllocationEnvironment:b(t.costAllocationEnvironment),tags:v$(t.tags),records:r.data,certificates:o.data};switch(n){case"route53":return C({...a,registrar:n,hostedZoneId:b(t.hostedZoneId)});case"external-delegated":{let c=b(t.delegatedSubdomain);if(c===void 0)return I({kind:"missing_field",field:"delegatedSubdomain"});let u=b(t.hostedZoneId);if(t.hostedZoneId!==void 0&&u===void 0)return I({kind:"invalid_literal",field:"hostedZoneId",reason:"must be a literal string zone id on external-delegated \u2014 dynamic expressions cannot be round-tripped"});let l=se(t.adoptedNameServers);if(t.adoptedNameServers!==void 0&&l===void 0)return I({kind:"invalid_literal",field:"adoptedNameServers",reason:"must be an array of literal NS hostname strings \u2014 the parent NS UPSERT writes them verbatim"});if(u===void 0!=(l===void 0))return I({kind:"invalid_literal",field:u===void 0?"hostedZoneId":"adoptedNameServers",reason:"adopting an existing child zone requires hostedZoneId and adoptedNameServers together (both-or-neither) \u2014 an imported zone exposes no name-server attribute at synth"});let m=b(t.parentDelegationRoleArn);if(t.parentDelegationRoleArn!==void 0&&m===void 0)return I({kind:"invalid_literal",field:"parentDelegationRoleArn",reason:"must be a literal string ARN (VD2-a) \u2014 the CLI injects it via ManagedDomainBinding.delegationRoleArn; dynamic expressions such as Fn.importValue are not supported"});let p=L(t.phase,t$);return t.phase!==void 0&&p===void 0?I({kind:"invalid_literal",field:"phase",reason:`must be one of ${t$.map(g=>`'${g}'`).join(", ")}`}):C({...a,registrar:n,delegatedSubdomain:c,hostedZoneId:u,adoptedNameServers:l,parentDelegationRoleArn:m,phase:p})}case"external-records":return C({...a,registrar:n})}}le(u$,"parseDomainProps");function l$(e){return c$(e)}le(l$,"parseDomainErrorMessage");function d$(e){if(e===void 0)return C([]);if(!Array.isArray(e))return I({kind:"invalid_literal",field:"records",reason:"must be an array"});let t=[];for(let n=0;n<e.length;n++){let i=e[n];if(!N(i))return I({kind:"invalid_literal",field:`records[${n}]`,reason:"must be an object literal"});let r=m$(i,n);if(!r.success)return r;t.push(r.data)}return C(t)}le(d$,"parseRecordsArray");function m$(e,t){let n=b(e.type),i=b(e.name);if(n===void 0)return I({kind:"missing_field",field:`records[${t}].type`});if(i===void 0)return I({kind:"missing_field",field:`records[${t}].name`});if(e.target!==void 0){if(!Z1.some(u=>u===n))return I({kind:"invalid_literal",field:`records[${t}]`,reason:`alias records must have type 'A' or 'AAAA', got '${n}'`});let c=f$(e.target);return C({kind:"alias",type:n,name:i,target:c})}if(!V1.some(c=>c===n))return I({kind:"invalid_literal",field:`records[${t}]`,reason:`unsupported record type '${n}'`});let r=p$(e.value);if(r===void 0)return I({kind:"invalid_literal",field:`records[${t}].value`,reason:`must be a string or array of strings (got ${JSON.stringify(e.value)})`});let o=R(e.ttl),a={kind:"standard",type:n,name:i,value:r,...o!==void 0?{ttl:o}:{}};return C(a)}le(m$,"parseRecord");function p$(e){if(e===void 0)return;if(typeof e=="string")return e;let t=se(e);if(t!==void 0)return t}le(p$,"parseRecordValue");function f$(e){if(_t(e))return g$(e);if(N(e)){let t=L(e.kind,QT);if(t==="ecs"||t==="cdn"){let n=b(e.appName);if(n!==void 0)return{kind:t,appName:n}}if(t==="bucket"){let n=b(e.bucketName);if(n!==void 0)return{kind:t,bucketName:n}}if(t==="custom"){let n=b(e.dnsName),i=b(e.hostedZoneId);if(n!==void 0&&i!==void 0)return{kind:t,dnsName:n,hostedZoneId:i}}}return{kind:"unresolved",sourceText:Zu(e)}}le(f$,"parseTarget");function g$(e){let t=e.__call.trim(),n=t.match(/^([A-Za-z_][\w$]*)\s*\(([\s\S]*)\)\s*$/);if(!n)return{kind:"unresolved",sourceText:t};let i=n[1],r=n[2]??"",o=Vu(r);switch(i){case"fjallApp":{let a=Tr(o,0);if(a===void 0)return{kind:"dynamic",sourceText:t};if(o.length<2)return{kind:"ecs",appName:a};let c=Tr(o,1);return c===void 0?{kind:"dynamic",sourceText:t}:{kind:"ecs",appName:a,computeName:c}}case"fjallCdn":{let a=Tr(o,0);return a===void 0?{kind:"dynamic",sourceText:t}:{kind:"cdn",appName:a}}case"fjallBucket":{let a=Tr(o,0);return a===void 0?{kind:"dynamic",sourceText:t}:{kind:"bucket",bucketName:a}}case"aliasTo":{if(o.length>=2){let a=Tr(o,0),c=Tr(o,1);return a!==void 0&&c!==void 0?{kind:"custom",dnsName:a,hostedZoneId:c}:{kind:"dynamic",sourceText:t}}if(o.length===1){let a=o[0]?.trim()??"",c=Vv(a,"dnsName"),u=Vv(a,"hostedZoneId");return c!==void 0&&u!==void 0?{kind:"custom",dnsName:c,hostedZoneId:u}:{kind:"dynamic",sourceText:t}}return{kind:"unresolved",sourceText:t}}default:return{kind:"unresolved",sourceText:t}}}le(g$,"resolveCallRefTarget");function Vu(e){let t=[],n=0,i=null,r="";for(let a=0;a<e.length;a++){let c=e[a];if(i!==null){if(r+=c,c==="\\"&&a+1<e.length){let u=e[a+1];u!==void 0&&(r+=u,a+=1);continue}c===i&&(i=null);continue}if(c==='"'||c==="'"||c==="`"){i=c,r+=c;continue}if(c==="("||c==="{"||c==="["){n+=1,r+=c;continue}if(c===")"||c==="}"||c==="]"){n-=1,r+=c;continue}if(c===","&&n===0){t.push(r.trim()),r="";continue}r+=c}let o=r.trim();return o.length>0&&t.push(o),t}le(Vu,"splitTopLevelArgs");function Tr(e,t){let n=e[t];if(n===void 0)return;let i=n.trim();if(i.length<2)return;let r=i[0],o=i[i.length-1];if(r===o&&!(r!=='"'&&r!=="'"&&r!=="`"))return i.slice(1,-1)}le(Tr,"extractStringLiteralArg");function Vv(e,t){let n=e.trim().replace(/^\{|\}$/g,""),i=Vu(n);for(let r of i){let o=r.indexOf(":");if(o<0||r.slice(0,o).trim().replace(/["'`]/g,"")!==t)continue;let a=r.slice(o+1).trim();return Tr([a],0)}}le(Vv,"extractObjectFieldString");function h$(e){if(e===void 0)return C([]);if(!Array.isArray(e))return I({kind:"invalid_literal",field:"certificates",reason:"must be an array"});let t=[];for(let n=0;n<e.length;n++){let i=e[n];if(typeof i=="string"){t.push({domainName:i});continue}if(!N(i))return I({kind:"invalid_literal",field:`certificates[${n}]`,reason:"must be a string or object literal"});let r=b(i.domainName);if(r===void 0)return I({kind:"missing_field",field:`certificates[${n}].domainName`});let o=se(i.subjectAlternativeNames),a=j(i.transparencyLogging),c=j(i.cloudFront);if(i.cloudFront!==void 0&&c===void 0)return I({kind:"invalid_literal",field:`certificates[${n}].cloudFront`,reason:"must be a boolean literal \u2014 the CloudFront designation drives the zone-level us-east-1 export contract and cannot be round-tripped from a dynamic expression"});t.push({domainName:r,...o!==void 0?{subjectAlternativeNames:o}:{},...a!==void 0?{transparencyLogging:a}:{},...c!==void 0?{cloudFront:c}:{}})}return C(t)}le(h$,"parseCertificatesArray");function v$(e){if(e===void 0||!N(e))return;let t={};for(let[n,i]of Object.entries(e)){let r=b(i);r!==void 0&&(t[n]=r)}return Object.keys(t).length===0?void 0:t}le(v$,"parseStringRecord");function Zu(e){if(e===void 0)return"undefined";if(e===null)return"null";if(typeof e=="string")return JSON.stringify(e);if(typeof e=="number"||typeof e=="boolean")return String(e);if(Array.isArray(e))return`[${e.map(t=>Zu(t)).join(", ")}]`;if(typeof e=="object"){if("__call"in e)return String(e.__call);if("__identifier"in e)return String(e.__identifier);if("__expression"in e)return String(e.__expression);if("__unknown"in e)return String(e.__unknown)}return String(e)}le(Zu,"stringifyParsedValue");var W1=Object.defineProperty,Qt=(e,t)=>W1(e,"name",{value:t,configurable:!0});function b$(e){return e?.map(t=>({name:t.name,...t.serviceType!==void 0&&{serviceType:t.serviceType},...t.docker!==void 0&&{docker:t.docker},...t.containerPort!==void 0&&{containerPort:t.containerPort},...t.needsDatabaseConnection!==void 0&&{needsDatabaseConnection:t.needsDatabaseConnection},...t.routing!==void 0&&{routing:t.routing}}))}Qt(b$,"toUserServiceConfigs");function y$(e,t,n=!0,i,r){let o={appName:e,type:t,database:[],s3:[],compute:[]};if(t==="custom")return o;let a=t,c=Kt[a];return{...o,database:S$(e,c,a,n,r),compute:x$(e,c,a,n,i),network:c.network,backup:c.backup}}Qt(y$,"planApplicationResources");function S$(e,t,n,i,r){let o=Hh(n),a=t.database[o];return!i||a===null?[]:[{name:e,type:o,databaseName:fn(e),variableName:`${Wt(e)}Database`,...a,...r?.snapshotIdentifier!==void 0&&{snapshotIdentifier:r.snapshotIdentifier},...r?.snapshotUsername!==void 0&&{snapshotUsername:r.snapshotUsername}}]}Qt(S$,"buildDatabasePlan");function _$(e,t){if(!(e===void 0&&t===void 0))return{scaling:{...e!==void 0&&{minCapacity:e},...t!==void 0&&{maxCapacity:t}}}}Qt(_$,"buildScalingConfig");function Zv(e){let{minCapacity:t,maxCapacity:n,...i}=e;return{...i,..._$(t,n)}}Qt(Zv,"planServiceFromTierPreset");function E$(e,t){let n=Zv(e),i=t?.serviceType==="worker",r=t?.containerPort??WA,o=t?.docker;return{...n,...o?.path!==void 0&&{docker:{path:o.path,...o.context!==void 0&&{context:o.context},...o.target!==void 0&&{target:o.target}}},...t?.needsDatabaseConnection!==void 0&&{needsDatabaseConnection:t.needsDatabaseConnection},...i&&{serviceType:"worker"},containers:i?[{}]:[{port:r}]}}Qt(E$,"buildServiceEntry");function A$(e,t){return t||e?.directAccess===!0?e:{...e,loadBalancer:!1}}Qt(A$,"resolveClusterConfig");function x$(e,t,n,i,r){let o=t.compute.ecs,a=(r&&r.length>0?Kh(n,r):o.services.map((u,l)=>({...u,name:l===0?"api":`service-${l+1}`}))).map((u,l)=>E$(u,r?.[l])),c=a.some(u=>u.containers?.some(l=>l.port!==void 0));return[{name:e,type:oi.ECS,needsConnection:i,connectedDatabase:i?[e]:void 0,variableName:`${Wt(e)}Compute`,cluster:A$(o.cluster,c),services:a}]}Qt(x$,"buildComputePlan");function Ni(e,t){let n=[Su(e),yu(e),bu(e)];if(Au(e))n.push(qo(e),ea(e));else{let r=Eu(e);n.push(ea(e),au(e),su(e),gu(e),hu(e),vu(e),du(e,r),_u(e))}let i=n.join("");if(e.customCodeBlocks&&e.customCodeBlocks.length>0){let r=Bu(i,e.customCodeBlocks,t?.resourceMapping);return r.success?C(r.content):I(new Error(`Custom code injection failed: ${r.error??"unknown error"}`))}return C(i)}Qt(Ni,"generateInfrastructureFromPlan");var H1=Object.defineProperty,Ci=(e,t)=>H1(e,"name",{value:t,configurable:!0}),K1=Wh("standard");function I$(e){return jo.options.some(t=>t.shape?.type?.value===e)}Ci(I$,"isPatternConfigType");function T$(e,t,n){let{tier:i="standard",domain:r,database:o,compute:a,cdn:c,environment:u,tags:l}=n??{},m=Iu(i);if(!m&&i!=="custom")return I(new Error(`Invalid pattern tier: "${i}". Valid tiers are: ${[...ra,"custom"].join(", ")}`));if(!I$(t))return I(new Error(`Unsupported pattern type: ${t}`));let p=m?xu(i):null,g=C$(t,e,{domain:r,database:o,compute:a,cdn:c,environment:u,tierPreset:p});if(!g.success)return g;let v=g.data;return C({appName:e,type:"standard",pattern:t,network:p?p.network:K1,backup:p?p.backup:!1,patternConfig:v,database:[],s3:[],compute:[],tags:l??{}})}Ci(T$,"planOpenNextResources");function $$(e,t){return{type:e?.type??t.database.type,instanceType:e?.instanceType??t.database.instanceType,backupRetention:e?.backupRetention??t.database.backupRetention,deletionProtection:e?.deletionProtection??t.database.deletionProtection,...e?.databaseName!==void 0&&{databaseName:e.databaseName},...e?.publiclyAccessible!==void 0&&{publiclyAccessible:e.publiclyAccessible},...e?.allowedIpCidr!==void 0&&{allowedIpCidr:e.allowedIpCidr},...e?.encryption!==void 0&&{encryption:e.encryption}}}Ci($$,"mergeDatabaseConfig");function R$(e,t){return{memorySize:e?.memorySize??t.compute.memorySize,timeout:e?.timeout??t.compute.timeout}}Ci(R$,"mergeComputeConfig");function N$(e){let{encryption:t,...n}=e;return{...n,...t&&{encryption:{storageKey:t}}}}Ci(N$,"toPatternDatabaseConfig");function C$(e,t,n){let{domain:i,database:r,compute:o,cdn:a,environment:c,tierPreset:u}=n,l=u?$$(r,u):r,m=u?R$(o,u):o,p={type:e,name:t,domain:i,database:l?N$(l):void 0,compute:m?{server:m}:void 0,cdn:a?{domainNames:a.domainNames,certificateArn:a.certificateArn}:void 0,environment:c},g=jo.safeParse(p);return g.success?C(g.data):I(new Error(`Invalid pattern config: ${g.error.message}`))}Ci(C$,"buildPatternConfig");var Y1=Object.defineProperty,X1=(e,t)=>Y1(e,"name",{value:t,configurable:!0});function P$(e,t){let n={type:"staticsite",name:e,source:t.source,build:t.build,...t.routing!==void 0&&{routing:t.routing},...t.security!==void 0&&{security:t.security},...t.domain!==void 0&&{domain:t.domain},...t.forms!==void 0&&{forms:t.forms},...t.cdn!==void 0&&{cdn:t.cdn}},i=Nh.safeParse(n);return i.success?C({appName:e,type:"standard",pattern:"staticsite",patternConfig:i.data,database:[],s3:[],compute:[],tags:t.tags??{}}):I(new Error(`Invalid static-site pattern config: ${i.error.message}`))}X1(P$,"planStaticSiteResources");var J1=Object.defineProperty,Gu=(e,t)=>J1(e,"name",{value:t,configurable:!0});function k$(e){let t=e.split("/");if(t.length!==2||!t[0]||!t[1])throw new Error(`Invalid service reference format: '${e}'. Expected 'ClusterName/ServiceName'.`);return t[0]}Gu(k$,"parseServiceReference");function Gv(e,t,n){n==="database"?(e.needsConnection=!0,e.connectedDatabase=[...new Set([...e.connectedDatabase??[],t])]):e.connectedStorage=[...new Set([...e.connectedStorage??[],t])]}Gu(Gv,"addResourceConnection");function Wu(e,t,n,i){let r=new Set(t),o=[...new Set(t.map(k$))];for(let a of o){let c=e.compute.find(u=>u.name===a);if(c?.services){Gv(c,n,i);for(let u of c.services){let l=`${a}/${u.name}`;r.has(l)&&(i==="database"?u.needsDatabaseConnection=!0:u.needsStorageConnection=!0)}}}}Gu(Wu,"applyServiceConnections");function Hu(e,t,n,i){for(let r of e.compute)if(t.includes(r.name)&&(Gv(r,n,i),r.services))for(let o of r.services)i==="database"?o.needsDatabaseConnection=!0:o.needsStorageConnection=!0}Gu(Hu,"applyComputeConnections");var q1=Object.defineProperty,fe=(e,t)=>q1(e,"name",{value:t,configurable:!0});function O$(e){let t=e.database.length>0,n=e.cdn!==void 0;return[{type:"database",label:"Database (RDS)",available:!0},{type:"database:proxy",label:"RDS Proxy",available:t,reason:t?void 0:"Requires at least one database"},{type:"storage:s3",label:"S3 Bucket",available:!0},{type:"network",label:"Network (VPC)",available:!0},{type:"compute:ecs",label:"Compute (ECS)",available:!0},{type:"compute:lambda",label:"Compute (Lambda)",available:!0},{type:"cdn",label:"CDN (CloudFront)",available:!n,reason:n?"A CDN is already configured. Remove existing CDN first.":void 0},{type:"tunnel",label:"Database Tunnel",available:t&&!e.tunnel,reason:t?e.tunnel?"Tunnel is already enabled":void 0:"Requires at least one database"}]}fe(O$,"listAvailableResources");function fa(e,t){if(Hv(e,t.resourceName))return I(new Error(Kv(t.resourceName)));switch(t.type){case"database":return D$(e,t);case"database:proxy":return w$(e,t);case"storage:s3":return C(void 0);case"network":return C(void 0);case"compute:ecs":return!t.services||t.services.length===0?I(new Error("ECS compute requires at least one service.")):C(void 0);case"compute:lambda":return C(void 0);case"cdn":return M$(e,t);case"tunnel":return j$(e);default:{let n=t;return I(new Error(`Unknown resource type: ${String(n)}`))}}}fe(fa,"validateResourceAddition");function D$(e,t){let n=t.databaseName??t.resourceName.toLowerCase();return e.database.some(i=>i.databaseName===n)?I(new Error(`Database name '${n}' already exists. Choose a different database name.`)):t.databaseType==="GlobalAurora"&&!t.primaryRegion?I(new Error("GlobalAurora databases require a primaryRegion.")):C(void 0)}fe(D$,"validateDatabaseAddition");function w$(e,t){let n=e.database.find(i=>i.name===t.targetDatabase||i.databaseName===t.targetDatabase);if(!n){let i=e.database.map(r=>r.name).join(", ")||"none";return I(new Error(`Database '${t.targetDatabase}' not found. Available databases: ${i}`))}return n.proxy!==void 0&&n.proxy!==!1?I(new Error(`Database '${n.name}' already has RDS Proxy enabled.`)):C(void 0)}fe(w$,"validateProxyAddition");function M$(e,t){if(e.cdn)return I(new Error("A CDN is already configured for this application. Remove the existing CDN first."));if(!Wv(e,t.defaultOriginRef))return I(new Error(`Origin '${t.defaultOriginRef}' not found in plan. CDN origin must reference an existing resource.`));if(t.behaviours){for(let n of t.behaviours)if(!Wv(e,n.originRef))return I(new Error(`Behaviour origin '${n.originRef}' not found in plan.`))}return C(void 0)}fe(M$,"validateCdnAddition");function j$(e){return e.tunnel&&typeof e.tunnel=="object"?I(new Error("Tunnel is already enabled for this application.")):e.database.length===0?I(new Error("No databases found \u2014 tunnel requires at least one relational database.")):C(void 0)}fe(j$,"validateTunnelAddition");function Ku(e,t){let n=fa(e,t);if(!n.success)return n;switch(t.type){case"database":return z$(e,t);case"database:proxy":return L$(e,t);case"storage:s3":return U$(e,t);case"network":return F$(e,t);case"compute:ecs":return B$(e,t);case"compute:lambda":return V$(e,t);case"cdn":return Z$(e,t);case"tunnel":return G$(e,t);default:{let i=t;return I(new Error(`Unknown resource type: ${String(i)}`))}}}fe(Ku,"addResourceToPlan");function z$(e,t){let n=t.databaseName??t.resourceName.toLowerCase(),i={name:t.resourceName,type:t.databaseType,databaseName:n},r;switch(t.databaseType){case"Instance":r={...i,...t.instanceType!==void 0?{instanceType:t.instanceType}:{},...t.multiAz!==void 0?{multiAz:t.multiAz}:{},...t.readReplica!==void 0?{readReplica:t.readReplica}:{},...t.publiclyAccessible!==void 0?{publiclyAccessible:t.publiclyAccessible}:{},...t.backupRetention!==void 0?{backupRetention:t.backupRetention}:{}};break;case"Aurora":r={...i,...t.writer!==void 0?{writer:t.writer}:{},...t.readers!==void 0?{readers:t.readers}:{},...t.backupRetention!==void 0?{backupRetention:t.backupRetention}:{},...t.preferredMaintenanceWindow!==void 0?{preferredMaintenanceWindow:t.preferredMaintenanceWindow}:{}};break;case"GlobalAurora":r={...i,primaryRegion:t.primaryRegion,...t.secondaryRegions!==void 0?{secondaryRegions:t.secondaryRegions}:{}};break;default:{let a=t.databaseType;return I(new Error(`Unknown database type: ${String(a)}`))}}let o={...e,database:[...e.database,r]};return Yv(o,t.resourceName,"database",t),C(o)}fe(z$,"addDatabase");function L$(e,t){let n=e.database.map(o=>({...o})),i=n.find(o=>o.name===t.targetDatabase||o.databaseName===t.targetDatabase);if(!i)return I(new Error(`Database '${t.targetDatabase}' not found.`));let r={};return t.maxConnections!==void 0&&(r.maxConnections=t.maxConnections),t.maxIdleConnections!==void 0&&(r.maxIdleConnections=t.maxIdleConnections),t.connectionBorrowTimeout!==void 0&&(r.connectionBorrowTimeout=t.connectionBorrowTimeout),t.requireTLS!==void 0&&(r.requireTLS=t.requireTLS),i.proxy=Object.keys(r).length>0?r:{},C({...e,database:n})}fe(L$,"addProxy");function U$(e,t){let n=t.bucketName??t.resourceName.toLowerCase(),i=he(n),r=e.s3.length,o=r===0?"":`${r+1}`,a={name:i,bucketName:n,variableName:`bucket${o}`,...t.publicReadAccess!==void 0?{publicReadAccess:t.publicReadAccess}:{},...t.versioned!==void 0?{versioned:t.versioned}:{},...t.encryption!==void 0?{encryption:t.encryption}:{},...t.websiteHosting?{websiteHosting:{indexDocument:"index.html"}}:{}},c={...e,s3:[...e.s3,a]};return Yv(c,i,"storage",t),C(c)}fe(U$,"addS3");function F$(e,t){let n={};if(t.maxAzs!==void 0&&(n.maxAzs=t.maxAzs),t.natGateways!==void 0&&(n.natGateways=t.natGateways),t.flowLogs!==void 0&&(n.flowLogs=t.flowLogs),t.vpcEndpoints!==void 0&&(n.vpcEndpoints=t.vpcEndpoints),t.networkName){let i={name:t.networkName,...n};return C({...e,additionalNetworks:[...e.additionalNetworks??[],i]})}return C({...e,network:{...e.network??{},...n}})}fe(F$,"addNetwork");function B$(e,t){let n=t.connectedDatabase??[],i={name:t.resourceName,type:"ecs",needsConnection:n.length>0,connectedDatabase:n,...t.loadBalancer!==void 0?{cluster:{loadBalancer:t.loadBalancer}}:{},services:t.services.map(r=>({name:r.name,capacityProvider:r.capacityProvider??"FARGATE",...r.port!==void 0?{containers:[{port:r.port}]}:{},...r.cpu!==void 0?{cpu:r.cpu}:{},...r.memory!==void 0?{memoryLimitMiB:r.memory}:{}})),...t.docker!==void 0&&{docker:t.docker}};return C({...e,compute:[...e.compute,i]})}fe(B$,"addEcsCompute");function V$(e,t){let n=t.connectedDatabase??[],i={name:t.resourceName,type:"lambda",needsConnection:n.length>0,connectedDatabase:n,...t.timeout!==void 0?{timeout:t.timeout}:{},...t.memory!==void 0?{memory:t.memory}:{},...t.handler!==void 0?{handler:t.handler}:{},...t.runtime!==void 0?{runtime:t.runtime}:{}};return C({...e,compute:[...e.compute,i]})}fe(V$,"addLambdaCompute");function Z$(e,t){let n={name:t.resourceName,defaultOriginRef:t.defaultOriginRef,...t.customDomain!==void 0?{customDomain:t.customDomain}:{},...t.certificateArn!==void 0?{certificateArn:t.certificateArn}:{},...t.behaviours&&t.behaviours.length>0?{behaviours:[...t.behaviours].map(i=>({pathPattern:i.pathPattern,originRef:i.originRef,...i.cachePolicy!==void 0?{cachePolicy:i.cachePolicy}:{}}))}:{}};return C({...e,cdn:n})}fe(Z$,"addCdn");function G$(e,t){let n=t.instanceType?{instanceType:t.instanceType}:{};return C({...e,tunnel:n})}fe(G$,"addTunnel");function Hv(e,t){let n=[...e.database.map(i=>i.name),...(e.clickhouse??[]).map(i=>i.name),...e.s3.map(i=>i.name),...e.compute.map(i=>i.name),...(e.dynamodb??[]).map(i=>i.name),...(e.sqs??[]).map(i=>i.name),...(e.additionalNetworks??[]).map(i=>i.name)];return e.cdn&&n.push(e.cdn.name),n.includes(t)}fe(Hv,"isResourceNameTaken");function Kv(e){return`Resource name '${e}' is already used in this application.`}fe(Kv,"resourceNameTakenMessage");function Wv(e,t){return e.database.some(n=>n.name===t)||e.s3.some(n=>n.name===t)||e.compute.some(n=>n.name===t)||(e.dynamodb??[]).some(n=>n.name===t)||(e.sqs??[]).some(n=>n.name===t)}fe(Wv,"resourceExistsInPlan");function Yv(e,t,n,i){i.connectToCompute&&i.connectToCompute.length>0&&Hu(e,[...i.connectToCompute],t,n),i.connectToServices&&i.connectToServices.length>0&&Wu(e,[...i.connectToServices],t,n)}fe(Yv,"applyConnections");var Q1=Object.defineProperty,eM=(e,t)=>Q1(e,"name",{value:t,configurable:!0});function W$(e,t,n){let i;try{i=Ar(e,{extractCustomCode:!0})}catch(u){return I(new Error(`Failed to parse infrastructure.ts: ${u instanceof Error?u.message:String(u)}`))}let r;try{r=rn(i,t,{skipValidation:!0})}catch(u){return I(new Error(`Failed to build resource plan: ${u instanceof Error?u.message:String(u)}`))}i.customCodeBlocks&&i.customCodeBlocks.length>0&&(r.customCodeBlocks=i.customCodeBlocks);let o=fa(r,n);if(!o.success)return o;let a=Ku(r,n);if(!a.success)return a;let c=Ni(a.data);return c.success?C({originalContent:e,modifiedContent:c.data,addedResource:{type:n.type,name:n.resourceName}}):I(new Error(`Code generation failed: ${c.error.message}`))}eM(W$,"generateResourceChange");var tM=Object.defineProperty,on=(e,t)=>tM(e,"name",{value:t,configurable:!0});function zt(e,...t){let n={};for(let i of t)e[i]!==void 0&&(n[i]=e[i]);return n}on(zt,"pickDefined");function H$(e,t){let n={name:e,type:t.databaseType,databaseName:t.databaseName,...zt(t,"databaseInsights","port","proxy","credentials","encryption","deletionProtection")};switch(t.databaseType){case"Instance":return{...n,...zt(t,"instanceType","multiAz","readReplica","publiclyAccessible","backupRetention","allocatedStorage","snapshotIdentifier","snapshotUsername")};case"Aurora":return{...n,...zt(t,"writer","readers","backupRetention","preferredMaintenanceWindow","monitoringInterval","snapshotIdentifier","snapshotUsername")};case"GlobalAurora":return{...n,primaryRegion:t.primaryRegion,...t.secondaryRegions&&t.secondaryRegions.length>0&&{secondaryRegions:t.secondaryRegions},...zt(t,"globalClusterIdentifier","enableGlobalWriteForwarding","writer","readers","backupRetention","preferredMaintenanceWindow","monitoringInterval","snapshotIdentifier","snapshotUsername")};default:return t}}on(H$,"buildRelationalResourcePlan");function K$(e){return`${e}Database`}on(K$,"defaultRelationalDatabaseName");function Y$(e,t){return`Database name '${e}' already exists in ${t}. Please choose a different database name.`}on(Y$,"duplicateDatabaseNameMessage");function X$(e,t){let n=e.find(r=>r.name===t.databaseName||r.databaseName===t.databaseName);if(!n)return{ok:!1,message:`Database '${t.databaseName}' not found. Available databases: ${e.map(r=>r.name).join(", ")||"none"}`};if(n.proxy!==void 0&&n.proxy!==!1)return{ok:!1,message:`Database '${n.name}' already has RDS Proxy enabled.`};let i=zt(t,"maxConnections","maxIdleConnections","connectionBorrowTimeout","requireTLS");return{ok:!0,database:n,proxyValue:Object.keys(i).length>0?i:{}}}on(X$,"resolveProxyAddition");function J$(e,t){return{name:e,type:"ClickHouse",databaseName:t.databaseName,...zt(t,"instanceType","coldTier","optimiseSchedule","backupSchedule","backupRetentionDays")}}on(J$,"buildClickHouseResourcePlan");function q$(e,t,n){let i=t.storagePreset??"standard",r=Tu[i],o=n===0?"":`${n+1}`;return{name:e,bucketName:t.bucketName,variableName:`bucket${o}`,...r,...zt(t,"publicReadAccess","websiteHosting","backupVaultTier","versioned","encryption","kmsKeyArn","cors")}}on(q$,"buildS3ResourcePlan");var rM=Object.defineProperty,Lt=(e,t)=>rM(e,"name",{value:t,configurable:!0}),nM=new Set(pa.options);function Q$(e){return nM.has(e.toUpperCase())}Lt(Q$,"isRecordType");function eR(e){return e.endsWith(".")?e.slice(0,-1):e}Lt(eR,"stripTrailingDot");function tR(e){let t=!1;for(let n=0;n<e.length;n++)if(e[n]==='"')t=!t;else if(e[n]===";"&&!t)return e.slice(0,n).trimEnd();return e}Lt(tR,"stripInlineComment");function rR(e,t){let n=e.slice(t).join(" "),i=[],r="",o=!1;for(let a of n)a==='"'?(o&&(i.push(r),r=""),o=!o):o&&(r+=a);return i.join(" ")}Lt(rR,"parseTxtValue");function nR(e){let t=/;\s*auto\s*$/.test(e),n=e.replace(/;\s*auto\s*$/,"").trim().match(/^\$FJALL-DELEGATE\s+(\S+)\s+TO\s+(\S+)$/i);if(n)return{subdomain:n[1],targetAccount:n[2],auto:t}}Lt(nR,"parseDelegateDirective");function iR(e){if(e.length<2)return;let t=e[1],n=e.slice(2);return{domainName:t,subjectAlternativeNames:n}}Lt(iR,"parseCertDirective");function oR(e){let t=[],n="",i=!1;for(let r of e)r==='"'?(i=!i,n+=r):/\s/.test(r)&&!i?n.length>0&&(t.push(n),n=""):n+=r;return n.length>0&&t.push(n),t}Lt(oR,"tokenise");function aR(e){if(e.length<2)return;let t=0,n=e[t++],i,r;for(;t<e.length&&r===void 0;){let a=e[t].toUpperCase();if(a==="IN")t++;else if(Q$(a))r=a,t++;else if(/^\d+$/.test(e[t]))i=parseInt(e[t],10),t++;else return}if(!r)return;let o=e.slice(t);switch(r){case"MX":{if(o.length<2)return;let a=parseInt(o[0],10),c=o.slice(1).join(" ");return{name:n,type:r,ttl:i,value:c,priority:a}}case"SRV":{if(o.length<4)return;let a=parseInt(o[0],10),c=parseInt(o[1],10),u=parseInt(o[2],10),l=o[3];return{name:n,type:r,ttl:i,value:l,priority:a,weight:c,port:u}}case"TXT":{let a=rR(e,t);return{name:n,type:r,ttl:i,value:a}}case"CAA":{let a=o.join(" ");return{name:n,type:r,ttl:i,value:a}}case"A":case"AAAA":{if(o.length===0)return;if(o[0].toUpperCase()==="ALIAS"){if(o.length<2)return;let a=o.slice(1).join(" ");return{name:n,type:r,ttl:i,value:`${JT}${a}`}}return{name:n,type:r,ttl:i,value:o[0]}}default:return o.length===0?void 0:{name:n,type:r,ttl:i,value:o[0]}}}Lt(aR,"parseRecord");function sR(e){let t=e.split(`
 `),n,i=300,r=[],o=[],a=[];for(let c of t){let u=c.trim();if(u===""||u.startsWith(";"))continue;if(u.toUpperCase().startsWith(jt.FJALL_DELEGATE)){let v=nR(u);v&&o.push(v);continue}let l=tR(u);if(l==="")continue;let m=oR(l);if(m.length===0)continue;let p=m[0].toUpperCase();if(p===jt.ORIGIN){if(m.length<2)continue;n=eR(m[1]);continue}if(p===jt.TTL){if(m.length<2)continue;i=parseInt(m[1],10);continue}if(p===jt.FJALL_CERT){let v=iR(m);v&&a.push(v);continue}let g=aR(m);g&&r.push(g)}return n?C({origin:n,ttl:i,records:r,delegations:o,certificates:a}):I(new Error("Missing $ORIGIN directive"))}Lt(sR,"parseZoneFile");function cR(e,t){if(!e.startsWith("fjall:"))return;let n=e.split(":");if(n.length<3)return;let i=n[1],r=n[2],o=`${i}:${r}`;return t.get(o)??t.get(e)}Lt(cR,"resolveAlias");var iM=Object.defineProperty,Xv=(e,t)=>iM(e,"name",{value:t,configurable:!0});function uR(e,t){return e.length>=t?e:e+" ".repeat(t-e.length)}Xv(uR,"padRight");function lR(e,t){let n=uR(e.name,24),i=e.ttl!==void 0&&e.ttl!==t?`${e.ttl} `:"";switch(e.type){case"MX":return`${n} ${i}IN MX ${e.priority??10} ${e.value}`;case"SRV":return`${n} ${i}IN SRV ${e.priority??0} ${e.weight??0} ${e.port??0} ${e.value}`;case"TXT":return`${n} ${i}IN TXT "${e.value}"`;case"CAA":return`${n} ${i}IN CAA ${e.value}`;default:return`${n} ${i}IN ${e.type} ${e.value}`}}Xv(lR,"formatRecord");function dR(e){let t=[];if(t.push("; zone.bind \u2014 managed by fjall"),t.push(`${jt.ORIGIN} ${e.origin}.`),t.push(`${jt.TTL} ${e.ttl}`),t.push(""),e.certificates.length>0){for(let n of e.certificates){let i=[n.domainName,...n.subjectAlternativeNames];t.push(`${jt.FJALL_CERT} ${i.join(" ")}`)}t.push("")}if(e.delegations.length>0){for(let n of e.delegations){let i=n.auto?" ; auto":"";t.push(`${jt.FJALL_DELEGATE} ${n.subdomain} TO ${n.targetAccount}${i}`)}t.push("")}for(let n of e.records)t.push(lR(n,e.ttl));return t.join(`
 `)+`
 `}Xv(dR,"generateZoneFile");var oM=Object.defineProperty,Jv=(e,t)=>oM(e,"name",{value:t,configurable:!0});function mR(e){let{domainName:t,hostedZoneId:n,records:i=[]}=e,r=e.basePath??`fjall/domains/${t}`;return[{path:`${r}/infrastructure.ts`,content:pR({domainName:t,records:i,hostedZoneId:n})},{path:`${r}/package.json`,content:fR(t)},{path:`${r}/tsconfig.json`,content:sM},{path:`${r}/cdk.json`,content:uM},{path:`${r}/cdk.context.json`,content:cM},{path:`${r}/.gitignore`,content:aM}]}Jv(mR,"generateDomainFiles");function pR(e){let{domainName:t,records:n,hostedZoneId:i}=e,r=he(t.split(".").join("")),o=gn(t),a=n.map(l=>{let m=l.ttl!==void 0?`, ttl: ${l.ttl}`:"";return`    { type: ${JSON.stringify(l.type)}, name: ${JSON.stringify(l.name)}, value: ${JSON.stringify(l.value)}${m} },`}),c=a.length>0?`[
@@ -555,8 +555,8 @@ ${v}
 ${x}`}ge(NR,"emitDomainTs");import*as Mi from"fs";import*as GN from"path";import{existsSync as LN,mkdirSync as mz,statSync as pz,appendFileSync as fz}from"fs";import{join as UN}from"path";import{join as Mb}from"path";var pM=Object.defineProperty,CR=(e,t)=>pM(e,"name",{value:t,configurable:!0});function PR(e){return e.mode==="cli"}CR(PR,"isCLIMode");function kR(e){return e.mode==="ink"}CR(kR,"isInkMode");function OR(e,t,n){let i=e.indexOf(t);if(i===-1)return e;let r=t.length,o=0,a="";do a+=e.slice(o,i)+t+n,o=i+r,i=e.indexOf(t,o);while(i!==-1);return a+=e.slice(o),a}function DR(e,t,n,i){let r=0,o="";do{let a=e[i-1]==="\r";o+=e.slice(r,a?i-1:i)+t+(a?`\r
 `:`
 `)+n,r=i+1,i=e.indexOf(`
-`,r)}while(i!==-1);return o+=e.slice(r),o}var wR=(e=0)=>t=>`\x1B[${t+e}m`,rb=(e=0)=>t=>`\x1B[${38+e};5;${t}m`,nb=(e=0)=>(t,n,i)=>`\x1B[${38+e};2;${t};${n};${i}m`,fM=e=>`\x1B[58;5;${e<90?e-30:e-90+8}m`,H={modifier:{reset:[0,0],bold:[1,22],dim:[2,22],italic:[3,23],underline:[4,24],underlineDouble:["4:2",24],underlineCurly:["4:3",24],underlineDotted:["4:4",24],underlineDashed:["4:5",24],overline:[53,55],inverse:[7,27],hidden:[8,28],strikethrough:[9,29]},color:{black:[30,39],red:[31,39],green:[32,39],yellow:[33,39],blue:[34,39],magenta:[35,39],cyan:[36,39],white:[37,39],blackBright:[90,39],gray:[90,39],grey:[90,39],redBright:[91,39],greenBright:[92,39],yellowBright:[93,39],blueBright:[94,39],magentaBright:[95,39],cyanBright:[96,39],whiteBright:[97,39]},bgColor:{bgBlack:[40,49],bgRed:[41,49],bgGreen:[42,49],bgYellow:[43,49],bgBlue:[44,49],bgMagenta:[45,49],bgCyan:[46,49],bgWhite:[47,49],bgBlackBright:[100,49],bgGray:[100,49],bgGrey:[100,49],bgRedBright:[101,49],bgGreenBright:[102,49],bgYellowBright:[103,49],bgBlueBright:[104,49],bgMagentaBright:[105,49],bgCyanBright:[106,49],bgWhiteBright:[107,49]},underlineColor:{underlineBlack:["58;5;0",59],underlineRed:["58;5;1",59],underlineGreen:["58;5;2",59],underlineYellow:["58;5;3",59],underlineBlue:["58;5;4",59],underlineMagenta:["58;5;5",59],underlineCyan:["58;5;6",59],underlineWhite:["58;5;7",59],underlineBlackBright:["58;5;8",59],underlineGray:["58;5;8",59],underlineGrey:["58;5;8",59],underlineRedBright:["58;5;9",59],underlineGreenBright:["58;5;10",59],underlineYellowBright:["58;5;11",59],underlineBlueBright:["58;5;12",59],underlineMagentaBright:["58;5;13",59],underlineCyanBright:["58;5;14",59],underlineWhiteBright:["58;5;15",59]}},F3=Object.keys(H.modifier),gM=Object.keys(H.color),hM=Object.keys(H.bgColor),B3=Object.keys(H.underlineColor),V3=[...gM,...hM];function vM(){let e=new Map;for(let[t,n]of Object.entries(H)){for(let[i,r]of Object.entries(n))H[i]={open:`\x1B[${r[0]}m`,close:`\x1B[${r[1]}m`},n[i]=H[i],e.set(Number.parseInt(r[0],10),r[1]);Object.defineProperty(H,t,{value:n,enumerable:!1})}return Object.defineProperty(H,"codes",{value:e,enumerable:!1}),H.color.close="\x1B[39m",H.bgColor.close="\x1B[49m",H.underlineColor.close="\x1B[59m",H.color.ansi=wR(),H.color.ansi256=rb(),H.color.ansi16m=nb(),H.bgColor.ansi=wR(10),H.bgColor.ansi256=rb(10),H.bgColor.ansi16m=nb(10),H.underlineColor.ansi=fM,H.underlineColor.ansi256=rb(20),H.underlineColor.ansi16m=nb(20),Object.defineProperties(H,{rgbToAnsi256:{value(t,n,i){return t===n&&n===i?t<8?16:t>248?231:Math.round((t-8)/247*24)+232:16+36*Math.round(t/255*5)+6*Math.round(n/255*5)+Math.round(i/255*5)},enumerable:!1},hexToRgb:{value(t){let n=/[\da-f]{6}|[\da-f]{3}/i.exec(t.toString(16));if(!n)return[0,0,0];let[i]=n;i.length===3&&(i=[...i].map(o=>o+o).join(""));let r=Number.parseInt(i,16);return[r>>16&255,r>>8&255,r&255]},enumerable:!1},hexToAnsi256:{value:t=>H.rgbToAnsi256(...H.hexToRgb(t)),enumerable:!1},ansi256ToAnsi:{value(t){if(t<8)return 30+t;if(t<16)return 90+(t-8);let n,i,r;if(t>=232)n=((t-232)*10+8)/255,i=n,r=n;else{t-=16;let c=t%36;n=Math.floor(t/36)/5,i=Math.floor(c/6)/5,r=c%6/5}let o=Math.max(n,i,r)*2;if(o===0)return 30;let a=30+(Math.round(r)<<2|Math.round(i)<<1|Math.round(n));return o===2&&(a+=60),a},enumerable:!1},rgbToAnsi:{value:(t,n,i)=>H.ansi256ToAnsi(H.rgbToAnsi256(t,n,i)),enumerable:!1},hexToAnsi:{value:t=>H.ansi256ToAnsi(H.hexToAnsi256(t)),enumerable:!1}}),H}var bM=vM(),Ut=bM;import ib from"node:process";import yM from"node:os";import MR from"node:tty";function ft(e,t=globalThis.Deno?globalThis.Deno.args:ib.argv){let n=e.startsWith("-")?"":e.length===1?"-":"--",i=t.indexOf(n+e),r=t.indexOf("--");return i!==-1&&(r===-1||i<r)}var{env:ee}=ib,Yu;ft("no-color")||ft("no-colors")||ft("color=false")||ft("color=never")?Yu=0:(ft("color")||ft("colors")||ft("color=true")||ft("color=always"))&&(Yu=1);function zR(){return/^\d+$/.test(ee.FORCE_COLOR)}function SM(){if("FORCE_COLOR"in ee){if(ee.FORCE_COLOR==="false")return 0;if(ee.FORCE_COLOR==="true"||ee.FORCE_COLOR.length===0)return 1;if(zR())return Math.min(Number.parseInt(ee.FORCE_COLOR,10),3)}}function _M(e){return e===0?!1:{level:e,hasBasic:!0,has256:e>=2,has16m:e>=3}}function EM(e,{streamIsTTY:t,sniffFlags:n=!0}={}){let i=SM();i!==void 0&&(Yu=i);let r=n?Yu:i;if(r===0)return 0;if(n){if(ft("color=16m")||ft("color=full")||ft("color=truecolor"))return 3;if(ft("color=256"))return 2}if(r!==void 0&&zR())return r;if("TF_BUILD"in ee&&"AGENT_NAME"in ee)return 1;if(e&&!t&&r===void 0)return 0;let o=r||0;if(ee.TERM==="dumb")return o;if(ib.platform==="win32"){let a=yM.release().split(".");return Number(a[0])>=10&&Number(a[2])>=10586?Number(a[2])>=14931?3:2:1}if("CI"in ee)return["GITHUB_ACTIONS","GITEA_ACTIONS","CIRCLECI"].some(a=>a in ee)?3:["TRAVIS","APPVEYOR","GITLAB_CI","BUILDKITE","DRONE"].some(a=>a in ee)||ee.CI_NAME==="codeship"?1:o;if("TEAMCITY_VERSION"in ee)return/^(?:9\.0*[1-9]\d*\.|\d{2,}\.)/.test(ee.TEAMCITY_VERSION)?1:0;if(ee.COLORTERM==="truecolor"||ee.TERM==="xterm-kitty"||ee.TERM==="xterm-ghostty"||ee.TERM==="wezterm")return 3;if("TERM_PROGRAM"in ee){let a=Number.parseInt((ee.TERM_PROGRAM_VERSION||"").split(".",1)[0],10);switch(ee.TERM_PROGRAM){case"iTerm.app":return a>=3?3:2;case"Apple_Terminal":return 2}}return/-256(?:color)?$/i.test(ee.TERM)?2:/^screen|^xterm|^vt100|^vt220|^rxvt|color|ansi|cygwin|linux/i.test(ee.TERM)||"COLORTERM"in ee?1:o}function jR(e,t={}){let n=EM(e,{streamIsTTY:e&&e.isTTY,...t});return _M(n)}var AM={stdout:jR({isTTY:MR.isatty(1)}),stderr:jR({isTTY:MR.isatty(2)})},LR=AM;var{stdout:UR,stderr:FR}=LR,ga=Symbol("GENERATOR"),ha=Symbol("STYLER"),Ju=Symbol("IS_EMPTY"),Xu=Symbol("LEVEL"),va=Object.create(null),BR=e=>{if(!Number.isSafeInteger(e)||e<0||e>3)throw new Error("The `level` should be an integer from 0 to 3")},xM={enumerable:!0,get(){return this[Xu]},set(e){BR(e),this[Xu]=e}},IM=(e,t={})=>{t.level!==void 0&&BR(t.level);let n=UR?UR.level:0;e[Xu]=t.level===void 0?n:t.level};var TM=e=>{let t=(...n)=>n.join(" ");return IM(t,e),Object.setPrototypeOf(t,ba.prototype),t};function ba(e){return TM(e)}Object.setPrototypeOf(ba.prototype,Function.prototype);for(let[e,t]of Object.entries(Ut))va[e]={get(){let n=ab(this,VR(t.open,t.close,this[ha]),this[Ju]);return Object.defineProperty(this,e,{value:n}),n}};va.visible={get(){let e=ab(this,this[ha],!0);return Object.defineProperty(this,"visible",{value:e}),e}};var $M=(e,t)=>{let n=Ut[t];if(e==="rgb"){let r=(a,c,u)=>n.ansi(Ut.rgbToAnsi(a,c,u));return[r,r,(a,c,u)=>n.ansi256(Ut.rgbToAnsi256(a,c,u)),n.ansi16m]}if(e==="hex"){let r=a=>n.ansi(Ut.hexToAnsi(a));return[r,r,a=>n.ansi256(Ut.hexToAnsi256(a)),a=>n.ansi16m(...Ut.hexToRgb(a))]}let i=r=>n.ansi(Ut.ansi256ToAnsi(r));return[i,i,n.ansi256,n.ansi256]},RM=["rgb","hex","ansi256"];for(let e of RM){let t=e[0].toUpperCase()+e.slice(1);for(let[n,i]of[[e,"color"],["bg"+t,"bgColor"],["underline"+t,"underlineColor"]]){let{close:r}=Ut[i],o=$M(e,i);va[n]={get(){let a=function(c,u,l){let m=o[this.level](c,u,l);return ab(this,VR(m,r,this[ha]),this[Ju])};return Object.defineProperty(this,n,{value:a}),a}}}}var NM=Object.defineProperties(()=>{},{...va,level:{enumerable:!0,get(){return this[ga].level},set(e){this[ga].level=e}}}),VR=(e,t,n)=>{let i,r;return n===void 0?(i=e,r=t):(i=n.openAll+e,r=t+n.closeAll),{open:e,close:t,openAll:i,closeAll:r,parent:n}},ab=(e,t,n)=>{let i=(...r)=>r.length===1?ob(i,""+r[0]):r.length===2?ob(i,r[0]+" "+r[1]):ob(i,r.join(" "));return Object.setPrototypeOf(i,NM),i[ga]=e[ga]??e,i[ha]=t,i[Ju]=n,i},ob=(e,t)=>{if(e[ga][Xu]<=0||!t)return e[Ju]?"":t;let n=e[ha];if(n===void 0)return t;let{openAll:i,closeAll:r}=n;if(t.includes("\x1B"))for(;n!==void 0;)t=OR(t,n.close,n.open),n=n.parent;let o=t.indexOf(`
-`);return o!==-1&&(t=DR(t,r,i,o)),i+t+r};Object.defineProperties(ba.prototype,{...va,level:xM});var CM=ba(),q3=ba({level:FR?FR.level:0});var Fe=CM;import xa from"node:process";import{stripVTControlCharacters as Cj}from"node:util";var ZR=(e=0)=>t=>`\x1B[${t+e}m`,GR=(e=0)=>t=>`\x1B[${38+e};5;${t}m`,WR=(e=0)=>(t,n,i)=>`\x1B[${38+e};2;${t};${n};${i}m`,re={modifier:{reset:[0,0],bold:[1,22],dim:[2,22],italic:[3,23],underline:[4,24],overline:[53,55],inverse:[7,27],hidden:[8,28],strikethrough:[9,29]},color:{black:[30,39],red:[31,39],green:[32,39],yellow:[33,39],blue:[34,39],magenta:[35,39],cyan:[36,39],white:[37,39],blackBright:[90,39],gray:[90,39],grey:[90,39],redBright:[91,39],greenBright:[92,39],yellowBright:[93,39],blueBright:[94,39],magentaBright:[95,39],cyanBright:[96,39],whiteBright:[97,39]},bgColor:{bgBlack:[40,49],bgRed:[41,49],bgGreen:[42,49],bgYellow:[43,49],bgBlue:[44,49],bgMagenta:[45,49],bgCyan:[46,49],bgWhite:[47,49],bgBlackBright:[100,49],bgGray:[100,49],bgGrey:[100,49],bgRedBright:[101,49],bgGreenBright:[102,49],bgYellowBright:[103,49],bgBlueBright:[104,49],bgMagentaBright:[105,49],bgCyanBright:[106,49],bgWhiteBright:[107,49]}},e5=Object.keys(re.modifier),PM=Object.keys(re.color),kM=Object.keys(re.bgColor),t5=[...PM,...kM];function OM(){let e=new Map;for(let[t,n]of Object.entries(re)){for(let[i,r]of Object.entries(n))re[i]={open:`\x1B[${r[0]}m`,close:`\x1B[${r[1]}m`},n[i]=re[i],e.set(r[0],r[1]);Object.defineProperty(re,t,{value:n,enumerable:!1})}return Object.defineProperty(re,"codes",{value:e,enumerable:!1}),re.color.close="\x1B[39m",re.bgColor.close="\x1B[49m",re.color.ansi=ZR(),re.color.ansi256=GR(),re.color.ansi16m=WR(),re.bgColor.ansi=ZR(10),re.bgColor.ansi256=GR(10),re.bgColor.ansi16m=WR(10),Object.defineProperties(re,{rgbToAnsi256:{value(t,n,i){return t===n&&n===i?t<8?16:t>248?231:Math.round((t-8)/247*24)+232:16+36*Math.round(t/255*5)+6*Math.round(n/255*5)+Math.round(i/255*5)},enumerable:!1},hexToRgb:{value(t){let n=/[a-f\d]{6}|[a-f\d]{3}/i.exec(t.toString(16));if(!n)return[0,0,0];let[i]=n;i.length===3&&(i=[...i].map(o=>o+o).join(""));let r=Number.parseInt(i,16);return[r>>16&255,r>>8&255,r&255]},enumerable:!1},hexToAnsi256:{value:t=>re.rgbToAnsi256(...re.hexToRgb(t)),enumerable:!1},ansi256ToAnsi:{value(t){if(t<8)return 30+t;if(t<16)return 90+(t-8);let n,i,r;if(t>=232)n=((t-232)*10+8)/255,i=n,r=n;else{t-=16;let c=t%36;n=Math.floor(t/36)/5,i=Math.floor(c/6)/5,r=c%6/5}let o=Math.max(n,i,r)*2;if(o===0)return 30;let a=30+(Math.round(r)<<2|Math.round(i)<<1|Math.round(n));return o===2&&(a+=60),a},enumerable:!1},rgbToAnsi:{value:(t,n,i)=>re.ansi256ToAnsi(re.rgbToAnsi256(t,n,i)),enumerable:!1},hexToAnsi:{value:t=>re.ansi256ToAnsi(re.hexToAnsi256(t)),enumerable:!1}}),re}var DM=OM(),Et=DM;import sb from"node:process";import wM from"node:os";import HR from"node:tty";function gt(e,t=globalThis.Deno?globalThis.Deno.args:sb.argv){let n=e.startsWith("-")?"":e.length===1?"-":"--",i=t.indexOf(n+e),r=t.indexOf("--");return i!==-1&&(r===-1||i<r)}var{env:ne}=sb,qu;gt("no-color")||gt("no-colors")||gt("color=false")||gt("color=never")?qu=0:(gt("color")||gt("colors")||gt("color=true")||gt("color=always"))&&(qu=1);function MM(){if("FORCE_COLOR"in ne)return ne.FORCE_COLOR==="true"?1:ne.FORCE_COLOR==="false"?0:ne.FORCE_COLOR.length===0?1:Math.min(Number.parseInt(ne.FORCE_COLOR,10),3)}function jM(e){return e===0?!1:{level:e,hasBasic:!0,has256:e>=2,has16m:e>=3}}function zM(e,{streamIsTTY:t,sniffFlags:n=!0}={}){let i=MM();i!==void 0&&(qu=i);let r=n?qu:i;if(r===0)return 0;if(n){if(gt("color=16m")||gt("color=full")||gt("color=truecolor"))return 3;if(gt("color=256"))return 2}if("TF_BUILD"in ne&&"AGENT_NAME"in ne)return 1;if(e&&!t&&r===void 0)return 0;let o=r||0;if(ne.TERM==="dumb")return o;if(sb.platform==="win32"){let a=wM.release().split(".");return Number(a[0])>=10&&Number(a[2])>=10586?Number(a[2])>=14931?3:2:1}if("CI"in ne)return["GITHUB_ACTIONS","GITEA_ACTIONS","CIRCLECI"].some(a=>a in ne)?3:["TRAVIS","APPVEYOR","GITLAB_CI","BUILDKITE","DRONE"].some(a=>a in ne)||ne.CI_NAME==="codeship"?1:o;if("TEAMCITY_VERSION"in ne)return/^(9\.(0*[1-9]\d*)\.|\d{2,}\.)/.test(ne.TEAMCITY_VERSION)?1:0;if(ne.COLORTERM==="truecolor"||ne.TERM==="xterm-kitty"||ne.TERM==="xterm-ghostty"||ne.TERM==="wezterm")return 3;if("TERM_PROGRAM"in ne){let a=Number.parseInt((ne.TERM_PROGRAM_VERSION||"").split(".")[0],10);switch(ne.TERM_PROGRAM){case"iTerm.app":return a>=3?3:2;case"Apple_Terminal":return 2}}return/-256(color)?$/i.test(ne.TERM)?2:/^screen|^xterm|^vt100|^vt220|^rxvt|color|ansi|cygwin|linux/i.test(ne.TERM)||"COLORTERM"in ne?1:o}function KR(e,t={}){let n=zM(e,{streamIsTTY:e&&e.isTTY,...t});return jM(n)}var LM={stdout:KR({isTTY:HR.isatty(1)}),stderr:KR({isTTY:HR.isatty(2)})},YR=LM;function XR(e,t,n){let i=e.indexOf(t);if(i===-1)return e;let r=t.length,o=0,a="";do a+=e.slice(o,i)+t+n,o=i+r,i=e.indexOf(t,o);while(i!==-1);return a+=e.slice(o),a}function JR(e,t,n,i){let r=0,o="";do{let a=e[i-1]==="\r";o+=e.slice(r,a?i-1:i)+t+(a?`\r
+`,r)}while(i!==-1);return o+=e.slice(r),o}var wR=(e=0)=>t=>`\x1B[${t+e}m`,rb=(e=0)=>t=>`\x1B[${38+e};5;${t}m`,nb=(e=0)=>(t,n,i)=>`\x1B[${38+e};2;${t};${n};${i}m`,fM=e=>`\x1B[58;5;${e<90?e-30:e-90+8}m`,H={modifier:{reset:[0,0],bold:[1,22],dim:[2,22],italic:[3,23],underline:[4,24],underlineDouble:["4:2",24],underlineCurly:["4:3",24],underlineDotted:["4:4",24],underlineDashed:["4:5",24],overline:[53,55],inverse:[7,27],hidden:[8,28],strikethrough:[9,29]},color:{black:[30,39],red:[31,39],green:[32,39],yellow:[33,39],blue:[34,39],magenta:[35,39],cyan:[36,39],white:[37,39],blackBright:[90,39],gray:[90,39],grey:[90,39],redBright:[91,39],greenBright:[92,39],yellowBright:[93,39],blueBright:[94,39],magentaBright:[95,39],cyanBright:[96,39],whiteBright:[97,39]},bgColor:{bgBlack:[40,49],bgRed:[41,49],bgGreen:[42,49],bgYellow:[43,49],bgBlue:[44,49],bgMagenta:[45,49],bgCyan:[46,49],bgWhite:[47,49],bgBlackBright:[100,49],bgGray:[100,49],bgGrey:[100,49],bgRedBright:[101,49],bgGreenBright:[102,49],bgYellowBright:[103,49],bgBlueBright:[104,49],bgMagentaBright:[105,49],bgCyanBright:[106,49],bgWhiteBright:[107,49]},underlineColor:{underlineBlack:["58;5;0",59],underlineRed:["58;5;1",59],underlineGreen:["58;5;2",59],underlineYellow:["58;5;3",59],underlineBlue:["58;5;4",59],underlineMagenta:["58;5;5",59],underlineCyan:["58;5;6",59],underlineWhite:["58;5;7",59],underlineBlackBright:["58;5;8",59],underlineGray:["58;5;8",59],underlineGrey:["58;5;8",59],underlineRedBright:["58;5;9",59],underlineGreenBright:["58;5;10",59],underlineYellowBright:["58;5;11",59],underlineBlueBright:["58;5;12",59],underlineMagentaBright:["58;5;13",59],underlineCyanBright:["58;5;14",59],underlineWhiteBright:["58;5;15",59]}},F9=Object.keys(H.modifier),gM=Object.keys(H.color),hM=Object.keys(H.bgColor),B9=Object.keys(H.underlineColor),V9=[...gM,...hM];function vM(){let e=new Map;for(let[t,n]of Object.entries(H)){for(let[i,r]of Object.entries(n))H[i]={open:`\x1B[${r[0]}m`,close:`\x1B[${r[1]}m`},n[i]=H[i],e.set(Number.parseInt(r[0],10),r[1]);Object.defineProperty(H,t,{value:n,enumerable:!1})}return Object.defineProperty(H,"codes",{value:e,enumerable:!1}),H.color.close="\x1B[39m",H.bgColor.close="\x1B[49m",H.underlineColor.close="\x1B[59m",H.color.ansi=wR(),H.color.ansi256=rb(),H.color.ansi16m=nb(),H.bgColor.ansi=wR(10),H.bgColor.ansi256=rb(10),H.bgColor.ansi16m=nb(10),H.underlineColor.ansi=fM,H.underlineColor.ansi256=rb(20),H.underlineColor.ansi16m=nb(20),Object.defineProperties(H,{rgbToAnsi256:{value(t,n,i){return t===n&&n===i?t<8?16:t>248?231:Math.round((t-8)/247*24)+232:16+36*Math.round(t/255*5)+6*Math.round(n/255*5)+Math.round(i/255*5)},enumerable:!1},hexToRgb:{value(t){let n=/[\da-f]{6}|[\da-f]{3}/i.exec(t.toString(16));if(!n)return[0,0,0];let[i]=n;i.length===3&&(i=[...i].map(o=>o+o).join(""));let r=Number.parseInt(i,16);return[r>>16&255,r>>8&255,r&255]},enumerable:!1},hexToAnsi256:{value:t=>H.rgbToAnsi256(...H.hexToRgb(t)),enumerable:!1},ansi256ToAnsi:{value(t){if(t<8)return 30+t;if(t<16)return 90+(t-8);let n,i,r;if(t>=232)n=((t-232)*10+8)/255,i=n,r=n;else{t-=16;let c=t%36;n=Math.floor(t/36)/5,i=Math.floor(c/6)/5,r=c%6/5}let o=Math.max(n,i,r)*2;if(o===0)return 30;let a=30+(Math.round(r)<<2|Math.round(i)<<1|Math.round(n));return o===2&&(a+=60),a},enumerable:!1},rgbToAnsi:{value:(t,n,i)=>H.ansi256ToAnsi(H.rgbToAnsi256(t,n,i)),enumerable:!1},hexToAnsi:{value:t=>H.ansi256ToAnsi(H.hexToAnsi256(t)),enumerable:!1}}),H}var bM=vM(),Ut=bM;import ib from"node:process";import yM from"node:os";import MR from"node:tty";function ft(e,t=globalThis.Deno?globalThis.Deno.args:ib.argv){let n=e.startsWith("-")?"":e.length===1?"-":"--",i=t.indexOf(n+e),r=t.indexOf("--");return i!==-1&&(r===-1||i<r)}var{env:ee}=ib,Yu;ft("no-color")||ft("no-colors")||ft("color=false")||ft("color=never")?Yu=0:(ft("color")||ft("colors")||ft("color=true")||ft("color=always"))&&(Yu=1);function zR(){return/^\d+$/.test(ee.FORCE_COLOR)}function SM(){if("FORCE_COLOR"in ee){if(ee.FORCE_COLOR==="false")return 0;if(ee.FORCE_COLOR==="true"||ee.FORCE_COLOR.length===0)return 1;if(zR())return Math.min(Number.parseInt(ee.FORCE_COLOR,10),3)}}function _M(e){return e===0?!1:{level:e,hasBasic:!0,has256:e>=2,has16m:e>=3}}function EM(e,{streamIsTTY:t,sniffFlags:n=!0}={}){let i=SM();i!==void 0&&(Yu=i);let r=n?Yu:i;if(r===0)return 0;if(n){if(ft("color=16m")||ft("color=full")||ft("color=truecolor"))return 3;if(ft("color=256"))return 2}if(r!==void 0&&zR())return r;if("TF_BUILD"in ee&&"AGENT_NAME"in ee)return 1;if(e&&!t&&r===void 0)return 0;let o=r||0;if(ee.TERM==="dumb")return o;if(ib.platform==="win32"){let a=yM.release().split(".");return Number(a[0])>=10&&Number(a[2])>=10586?Number(a[2])>=14931?3:2:1}if("CI"in ee)return["GITHUB_ACTIONS","GITEA_ACTIONS","CIRCLECI"].some(a=>a in ee)?3:["TRAVIS","APPVEYOR","GITLAB_CI","BUILDKITE","DRONE"].some(a=>a in ee)||ee.CI_NAME==="codeship"?1:o;if("TEAMCITY_VERSION"in ee)return/^(?:9\.0*[1-9]\d*\.|\d{2,}\.)/.test(ee.TEAMCITY_VERSION)?1:0;if(ee.COLORTERM==="truecolor"||ee.TERM==="xterm-kitty"||ee.TERM==="xterm-ghostty"||ee.TERM==="wezterm")return 3;if("TERM_PROGRAM"in ee){let a=Number.parseInt((ee.TERM_PROGRAM_VERSION||"").split(".",1)[0],10);switch(ee.TERM_PROGRAM){case"iTerm.app":return a>=3?3:2;case"Apple_Terminal":return 2}}return/-256(?:color)?$/i.test(ee.TERM)?2:/^screen|^xterm|^vt100|^vt220|^rxvt|color|ansi|cygwin|linux/i.test(ee.TERM)||"COLORTERM"in ee?1:o}function jR(e,t={}){let n=EM(e,{streamIsTTY:e&&e.isTTY,...t});return _M(n)}var AM={stdout:jR({isTTY:MR.isatty(1)}),stderr:jR({isTTY:MR.isatty(2)})},LR=AM;var{stdout:UR,stderr:FR}=LR,ga=Symbol("GENERATOR"),ha=Symbol("STYLER"),Ju=Symbol("IS_EMPTY"),Xu=Symbol("LEVEL"),va=Object.create(null),BR=e=>{if(!Number.isSafeInteger(e)||e<0||e>3)throw new Error("The `level` should be an integer from 0 to 3")},xM={enumerable:!0,get(){return this[Xu]},set(e){BR(e),this[Xu]=e}},IM=(e,t={})=>{t.level!==void 0&&BR(t.level);let n=UR?UR.level:0;e[Xu]=t.level===void 0?n:t.level};var TM=e=>{let t=(...n)=>n.join(" ");return IM(t,e),Object.setPrototypeOf(t,ba.prototype),t};function ba(e){return TM(e)}Object.setPrototypeOf(ba.prototype,Function.prototype);for(let[e,t]of Object.entries(Ut))va[e]={get(){let n=ab(this,VR(t.open,t.close,this[ha]),this[Ju]);return Object.defineProperty(this,e,{value:n}),n}};va.visible={get(){let e=ab(this,this[ha],!0);return Object.defineProperty(this,"visible",{value:e}),e}};var $M=(e,t)=>{let n=Ut[t];if(e==="rgb"){let r=(a,c,u)=>n.ansi(Ut.rgbToAnsi(a,c,u));return[r,r,(a,c,u)=>n.ansi256(Ut.rgbToAnsi256(a,c,u)),n.ansi16m]}if(e==="hex"){let r=a=>n.ansi(Ut.hexToAnsi(a));return[r,r,a=>n.ansi256(Ut.hexToAnsi256(a)),a=>n.ansi16m(...Ut.hexToRgb(a))]}let i=r=>n.ansi(Ut.ansi256ToAnsi(r));return[i,i,n.ansi256,n.ansi256]},RM=["rgb","hex","ansi256"];for(let e of RM){let t=e[0].toUpperCase()+e.slice(1);for(let[n,i]of[[e,"color"],["bg"+t,"bgColor"],["underline"+t,"underlineColor"]]){let{close:r}=Ut[i],o=$M(e,i);va[n]={get(){let a=function(c,u,l){let m=o[this.level](c,u,l);return ab(this,VR(m,r,this[ha]),this[Ju])};return Object.defineProperty(this,n,{value:a}),a}}}}var NM=Object.defineProperties(()=>{},{...va,level:{enumerable:!0,get(){return this[ga].level},set(e){this[ga].level=e}}}),VR=(e,t,n)=>{let i,r;return n===void 0?(i=e,r=t):(i=n.openAll+e,r=t+n.closeAll),{open:e,close:t,openAll:i,closeAll:r,parent:n}},ab=(e,t,n)=>{let i=(...r)=>r.length===1?ob(i,""+r[0]):r.length===2?ob(i,r[0]+" "+r[1]):ob(i,r.join(" "));return Object.setPrototypeOf(i,NM),i[ga]=e[ga]??e,i[ha]=t,i[Ju]=n,i},ob=(e,t)=>{if(e[ga][Xu]<=0||!t)return e[Ju]?"":t;let n=e[ha];if(n===void 0)return t;let{openAll:i,closeAll:r}=n;if(t.includes("\x1B"))for(;n!==void 0;)t=OR(t,n.close,n.open),n=n.parent;let o=t.indexOf(`
+`);return o!==-1&&(t=DR(t,r,i,o)),i+t+r};Object.defineProperties(ba.prototype,{...va,level:xM});var CM=ba(),q9=ba({level:FR?FR.level:0});var Fe=CM;import xa from"node:process";import{stripVTControlCharacters as Cj}from"node:util";var ZR=(e=0)=>t=>`\x1B[${t+e}m`,GR=(e=0)=>t=>`\x1B[${38+e};5;${t}m`,WR=(e=0)=>(t,n,i)=>`\x1B[${38+e};2;${t};${n};${i}m`,re={modifier:{reset:[0,0],bold:[1,22],dim:[2,22],italic:[3,23],underline:[4,24],overline:[53,55],inverse:[7,27],hidden:[8,28],strikethrough:[9,29]},color:{black:[30,39],red:[31,39],green:[32,39],yellow:[33,39],blue:[34,39],magenta:[35,39],cyan:[36,39],white:[37,39],blackBright:[90,39],gray:[90,39],grey:[90,39],redBright:[91,39],greenBright:[92,39],yellowBright:[93,39],blueBright:[94,39],magentaBright:[95,39],cyanBright:[96,39],whiteBright:[97,39]},bgColor:{bgBlack:[40,49],bgRed:[41,49],bgGreen:[42,49],bgYellow:[43,49],bgBlue:[44,49],bgMagenta:[45,49],bgCyan:[46,49],bgWhite:[47,49],bgBlackBright:[100,49],bgGray:[100,49],bgGrey:[100,49],bgRedBright:[101,49],bgGreenBright:[102,49],bgYellowBright:[103,49],bgBlueBright:[104,49],bgMagentaBright:[105,49],bgCyanBright:[106,49],bgWhiteBright:[107,49]}},e5=Object.keys(re.modifier),PM=Object.keys(re.color),kM=Object.keys(re.bgColor),t5=[...PM,...kM];function OM(){let e=new Map;for(let[t,n]of Object.entries(re)){for(let[i,r]of Object.entries(n))re[i]={open:`\x1B[${r[0]}m`,close:`\x1B[${r[1]}m`},n[i]=re[i],e.set(r[0],r[1]);Object.defineProperty(re,t,{value:n,enumerable:!1})}return Object.defineProperty(re,"codes",{value:e,enumerable:!1}),re.color.close="\x1B[39m",re.bgColor.close="\x1B[49m",re.color.ansi=ZR(),re.color.ansi256=GR(),re.color.ansi16m=WR(),re.bgColor.ansi=ZR(10),re.bgColor.ansi256=GR(10),re.bgColor.ansi16m=WR(10),Object.defineProperties(re,{rgbToAnsi256:{value(t,n,i){return t===n&&n===i?t<8?16:t>248?231:Math.round((t-8)/247*24)+232:16+36*Math.round(t/255*5)+6*Math.round(n/255*5)+Math.round(i/255*5)},enumerable:!1},hexToRgb:{value(t){let n=/[a-f\d]{6}|[a-f\d]{3}/i.exec(t.toString(16));if(!n)return[0,0,0];let[i]=n;i.length===3&&(i=[...i].map(o=>o+o).join(""));let r=Number.parseInt(i,16);return[r>>16&255,r>>8&255,r&255]},enumerable:!1},hexToAnsi256:{value:t=>re.rgbToAnsi256(...re.hexToRgb(t)),enumerable:!1},ansi256ToAnsi:{value(t){if(t<8)return 30+t;if(t<16)return 90+(t-8);let n,i,r;if(t>=232)n=((t-232)*10+8)/255,i=n,r=n;else{t-=16;let c=t%36;n=Math.floor(t/36)/5,i=Math.floor(c/6)/5,r=c%6/5}let o=Math.max(n,i,r)*2;if(o===0)return 30;let a=30+(Math.round(r)<<2|Math.round(i)<<1|Math.round(n));return o===2&&(a+=60),a},enumerable:!1},rgbToAnsi:{value:(t,n,i)=>re.ansi256ToAnsi(re.rgbToAnsi256(t,n,i)),enumerable:!1},hexToAnsi:{value:t=>re.ansi256ToAnsi(re.hexToAnsi256(t)),enumerable:!1}}),re}var DM=OM(),Et=DM;import sb from"node:process";import wM from"node:os";import HR from"node:tty";function gt(e,t=globalThis.Deno?globalThis.Deno.args:sb.argv){let n=e.startsWith("-")?"":e.length===1?"-":"--",i=t.indexOf(n+e),r=t.indexOf("--");return i!==-1&&(r===-1||i<r)}var{env:ne}=sb,qu;gt("no-color")||gt("no-colors")||gt("color=false")||gt("color=never")?qu=0:(gt("color")||gt("colors")||gt("color=true")||gt("color=always"))&&(qu=1);function MM(){if("FORCE_COLOR"in ne)return ne.FORCE_COLOR==="true"?1:ne.FORCE_COLOR==="false"?0:ne.FORCE_COLOR.length===0?1:Math.min(Number.parseInt(ne.FORCE_COLOR,10),3)}function jM(e){return e===0?!1:{level:e,hasBasic:!0,has256:e>=2,has16m:e>=3}}function zM(e,{streamIsTTY:t,sniffFlags:n=!0}={}){let i=MM();i!==void 0&&(qu=i);let r=n?qu:i;if(r===0)return 0;if(n){if(gt("color=16m")||gt("color=full")||gt("color=truecolor"))return 3;if(gt("color=256"))return 2}if("TF_BUILD"in ne&&"AGENT_NAME"in ne)return 1;if(e&&!t&&r===void 0)return 0;let o=r||0;if(ne.TERM==="dumb")return o;if(sb.platform==="win32"){let a=wM.release().split(".");return Number(a[0])>=10&&Number(a[2])>=10586?Number(a[2])>=14931?3:2:1}if("CI"in ne)return["GITHUB_ACTIONS","GITEA_ACTIONS","CIRCLECI"].some(a=>a in ne)?3:["TRAVIS","APPVEYOR","GITLAB_CI","BUILDKITE","DRONE"].some(a=>a in ne)||ne.CI_NAME==="codeship"?1:o;if("TEAMCITY_VERSION"in ne)return/^(9\.(0*[1-9]\d*)\.|\d{2,}\.)/.test(ne.TEAMCITY_VERSION)?1:0;if(ne.COLORTERM==="truecolor"||ne.TERM==="xterm-kitty"||ne.TERM==="xterm-ghostty"||ne.TERM==="wezterm")return 3;if("TERM_PROGRAM"in ne){let a=Number.parseInt((ne.TERM_PROGRAM_VERSION||"").split(".")[0],10);switch(ne.TERM_PROGRAM){case"iTerm.app":return a>=3?3:2;case"Apple_Terminal":return 2}}return/-256(color)?$/i.test(ne.TERM)?2:/^screen|^xterm|^vt100|^vt220|^rxvt|color|ansi|cygwin|linux/i.test(ne.TERM)||"COLORTERM"in ne?1:o}function KR(e,t={}){let n=zM(e,{streamIsTTY:e&&e.isTTY,...t});return jM(n)}var LM={stdout:KR({isTTY:HR.isatty(1)}),stderr:KR({isTTY:HR.isatty(2)})},YR=LM;function XR(e,t,n){let i=e.indexOf(t);if(i===-1)return e;let r=t.length,o=0,a="";do a+=e.slice(o,i)+t+n,o=i+r,i=e.indexOf(t,o);while(i!==-1);return a+=e.slice(o),a}function JR(e,t,n,i){let r=0,o="";do{let a=e[i-1]==="\r";o+=e.slice(r,a?i-1:i)+t+(a?`\r
 `:`
 `)+n,r=i+1,i=e.indexOf(`
 `,r)}while(i!==-1);return o+=e.slice(r),o}var{stdout:qR,stderr:QR}=YR,cb=Symbol("GENERATOR"),Pi=Symbol("STYLER"),ya=Symbol("IS_EMPTY"),eN=["ansi","ansi","ansi256","ansi16m"],ki=Object.create(null),UM=(e,t={})=>{if(t.level&&!(Number.isInteger(t.level)&&t.level>=0&&t.level<=3))throw new Error("The `level` option should be an integer from 0 to 3");let n=qR?qR.level:0;e.level=t.level===void 0?n:t.level};var FM=e=>{let t=(...n)=>n.join(" ");return UM(t,e),Object.setPrototypeOf(t,Sa.prototype),t};function Sa(e){return FM(e)}Object.setPrototypeOf(Sa.prototype,Function.prototype);for(let[e,t]of Object.entries(Et))ki[e]={get(){let n=Qu(this,lb(t.open,t.close,this[Pi]),this[ya]);return Object.defineProperty(this,e,{value:n}),n}};ki.visible={get(){let e=Qu(this,this[Pi],!0);return Object.defineProperty(this,"visible",{value:e}),e}};var ub=(e,t,n,...i)=>e==="rgb"?t==="ansi16m"?Et[n].ansi16m(...i):t==="ansi256"?Et[n].ansi256(Et.rgbToAnsi256(...i)):Et[n].ansi(Et.rgbToAnsi(...i)):e==="hex"?ub("rgb",t,n,...Et.hexToRgb(...i)):Et[n][e](...i),BM=["rgb","hex","ansi256"];for(let e of BM){ki[e]={get(){let{level:n}=this;return function(...i){let r=lb(ub(e,eN[n],"color",...i),Et.color.close,this[Pi]);return Qu(this,r,this[ya])}}};let t="bg"+e[0].toUpperCase()+e.slice(1);ki[t]={get(){let{level:n}=this;return function(...i){let r=lb(ub(e,eN[n],"bgColor",...i),Et.bgColor.close,this[Pi]);return Qu(this,r,this[ya])}}}}var VM=Object.defineProperties(()=>{},{...ki,level:{enumerable:!0,get(){return this[cb].level},set(e){this[cb].level=e}}}),lb=(e,t,n)=>{let i,r;return n===void 0?(i=e,r=t):(i=n.openAll+e,r=t+n.closeAll),{open:e,close:t,openAll:i,closeAll:r,parent:n}},Qu=(e,t,n)=>{let i=(...r)=>ZM(i,r.length===1?""+r[0]:r.join(" "));return Object.setPrototypeOf(i,VM),i[cb]=e,i[Pi]=t,i[ya]=n,i},ZM=(e,t)=>{if(e.level<=0||!t)return e[ya]?"":t;let n=e[Pi];if(n===void 0)return t;let{openAll:i,closeAll:r}=n;if(t.includes("\x1B"))for(;n!==void 0;)t=XR(t,n.close,n.open),n=n.parent;let o=t.indexOf(`