fjall 2.20.0 → 2.21.0

package/bin/assets/generators/tunnel/generator.js

@@ -83,7 +83,7 @@ ${t}`,TE=Object.getOwnPropertyDescriptor(Function.prototype,"toString"),NE=Objec
 `);return{buffer:[],stream:r}}flush(){let t=this.flushBuffer(this.buffer,this.mainLogStream,this.mainLogPath);this.buffer=t.buffer,this.mainLogStream=t.stream;let n=this.flushBuffer(this.debugBuffer,this.debugLogStream,this.debugLogPath);this.debugBuffer=n.buffer,this.debugLogStream=n.stream}close(){this.isClosing=!0,this.flush(),this.flushInterval&&(clearInterval(this.flushInterval),this.flushInterval=null),this.mainLogStream&&(this.mainLogStream.end(),this.mainLogStream=null),this.debugLogStream&&(this.debugLogStream.end(),this.debugLogStream=null),this.buffer=[],this.debugBuffer=[],this.initialised=!1,this.isClosing=!1}async closeAndFlush(){this.isClosing=!0,this.flush(),this.flushInterval&&(clearInterval(this.flushInterval),this.flushInterval=null);let t=[];this.mainLogStream&&(t.push(this.mainLogStream),this.mainLogStream=null),this.debugLogStream&&(t.push(this.debugLogStream),this.debugLogStream=null),this.buffer=[],this.debugBuffer=[],this.initialised=!1,await Promise.all(t.map(n=>new Promise(i=>{n.end(()=>i())}))),this.isClosing=!1}};import{createWriteStream as _$,existsSync as S$,mkdirSync as x$}from"fs";import{join as Kv}from"path";var jt={trace:0,debug:1,info:2,warn:3,error:4},Ze={MAX_FILE_SIZE:10*1024*1024,MAX_FILES:5,MAX_BUFFER_SIZE:100,FLUSH_INTERVAL_MS:500,LOG_FILENAME:"fjall.jsonl",DEBUG_LOG_FILENAME:"fjall-debug.jsonl"};import{join as y$}from"path";import{homedir as b$}from"os";function Cr(){let e=process.env.FJALL_LOG_DIR;return e!==void 0&&e!==""?e:y$(b$(),".fjall","logs")}var Kn=class{mainLogger;appName;operationType;logStream=null;logPath;deploymentId;buffer=[];flushInterval=null;isClosing=!1;maxBufferSize=Ze.MAX_BUFFER_SIZE;constructor(t,n,i){this.mainLogger=t,this.appName=n,this.operationType=i,this.deploymentId=`${i}-${Date.now()}`;let r=Cr(),o=Kv(r,"deployments",n);S$(o)||x$(o,{recursive:!0});let a=new Date().toISOString().replace(/[:.]/g,"-"),c=`${i}-${a}.jsonl`;this.logPath=Kv(o,c);try{this.logStream=_$(this.logPath,{flags:"a"}),this.flushInterval=setInterval(()=>this.flush(),Ze.FLUSH_INTERVAL_MS),this.info("DeploymentLogger","Deployment logging initialised",{appName:n,operationType:i,deploymentId:this.deploymentId,logPath:this.logPath})}catch{}}log(t,n,i,r,o,a){if(this.isClosing)return;let c={timestamp:new Date().toISOString(),level:t,component:n,message:i,correlationId:this.deploymentId,...r&&Object.keys(r).length>0&&{data:r},...o&&{stackName:o},...a&&{phase:a}};this.buffer.push(c),this.mainLogger.logWithCorrelation(t,n,i,this.deploymentId,r,o,a),this.buffer.length>=this.maxBufferSize&&this.flush()}flush(){if(!(this.buffer.length===0||!this.logStream)){for(let t of this.buffer)this.logStream.write(JSON.stringify(t)+`
 `);this.buffer=[]}}info(t,n,i){this.log("info",t,n,i)}warn(t,n,i){this.log("warn",t,n,i)}error(t,n,i){this.log("error",t,n,i)}debug(t,n,i){this.log("debug",t,n,i)}stackEvent(t,n,i,r){this.log("info","StackDeployment",i,r,t,n)}dockerEvent(t,n){this.log("info","DockerOperation",t,{percentage:n})}ecsEvent(t,n,i){this.log("info","ECSDeployment",t,{percentage:n,taskCount:i})}close(){this.isClosing=!0,this.flush(),this.flushInterval&&(clearInterval(this.flushInterval),this.flushInterval=null),this.logStream&&(this.logStream.end(),this.logStream=null),this.buffer=[],this.isClosing=!1}getLogPath(){return this.logPath}getDeploymentId(){return this.deploymentId}};var _a=class e{static instance=null;config;debugEnabled;traceEnabled;minLevel;fileWriter;mainLogPath;debugLogPath;constructor(){let t=Cr(),n=Vm(t,"debug"),i=this.parseEnvInt("FJALL_LOG_MAX_SIZE",Ze.MAX_FILE_SIZE),r=this.parseEnvInt("FJALL_LOG_MAX_FILES",Ze.MAX_FILES);this.config={logDir:t,debugLogDir:n,maxFileSize:i,maxFiles:r,maxBufferSize:Ze.MAX_BUFFER_SIZE,flushIntervalMs:Ze.FLUSH_INTERVAL_MS},this.mainLogPath=Vm(t,Ze.LOG_FILENAME),this.debugLogPath=Vm(n,Ze.DEBUG_LOG_FILENAME),this.debugEnabled=process.env.FJALL_DEBUG==="true"||process.env.FJALL_TRACE==="true"||process.argv.includes("--verbose")||process.argv.includes("-v"),this.traceEnabled=process.env.FJALL_TRACE==="true";let o=process.env.FJALL_LOG_LEVEL?.toLowerCase();o&&o in jt?this.minLevel=o:this.traceEnabled?this.minLevel="trace":this.debugEnabled?this.minLevel="debug":this.minLevel="info",this.fileWriter=new ba(this.config,this.mainLogPath,this.debugLogPath,this.debugEnabled)}parseEnvInt(t,n){let i=process.env[t];if(i){let r=parseInt(i,10);if(!isNaN(r)&&r>0)return r}return n}static getInstance(){return e.instance||(e.instance=new e),e.instance}shouldLog(t){return jt[t]>=jt[this.minLevel]}createEntry(t,n,i,r,o,a,c){return{timestamp:new Date().toISOString(),level:t,component:n,message:i,...o&&{correlationId:o},...r&&Object.keys(r).length>0&&{data:r},...a&&{stackName:a},...c&&{phase:c}}}log(t,n,i,r,o,a,c){if(!this.shouldLog(t))return;let u=this.createEntry(t,n,i,r,o,a,c),l=t==="debug"||t==="trace";this.fileWriter.write(u,l),this.writeConsole(u)}writeConsole(t){if(ke.shouldSuppressOutput||ke.isNonInteractive){this.debugEnabled&&this.writeDebugMirror(t);return}let n=this.getConsolePrefix(t.level),i=`[${t.component}]`,r=`${n} ${i} ${t.message}`;t.level==="error"?console.error(r):t.level==="warn"?console.warn(r):console.log(r)}writeDebugMirror(t){let n=this.getConsolePrefix(t.level),i=`[${t.component}]`,r="";if(t.data&&Object.keys(t.data).length>0)try{r=` ${JSON.stringify(t.data)}`}catch{r=" [unserialisable data]"}let o=`${n} ${i} ${t.message}${r}`;process.stderr.write(`${tn(o)}
 `)}getConsolePrefix(t){switch(t){case"error":return"[ERROR]";case"warn":return"[WARN]";case"info":return"[INFO]";case"debug":return"[DEBUG]";case"trace":return"[TRACE]"}}error(t,n,i){this.log("error",t,n,i)}warn(t,n,i){this.log("warn",t,n,i)}info(t,n,i){this.log("info",t,n,i)}debug(t,n,i){this.log("debug",t,n,i)}trace(t,n,i){this.log("trace",t,n,i)}isDebugEnabled(){return this.debugEnabled}isTraceEnabled(){return this.traceEnabled}enableDebug(){this.debugEnabled=!0,jt[this.minLevel]>jt.debug&&(this.minLevel="debug"),this.fileWriter.setDebugEnabled(!0),this.fileWriter.isInitialised&&this.fileWriter.initialiseDebugStream()}withCorrelation(t){return new kr(this,t)}forDeployment(t,n="deploy"){return new Kn(this,t,n)}close(){this.fileWriter.close()}async flushAndClose(){await this.fileWriter.closeAndFlush()}getLogPath(){return this.mainLogPath}getDebugLogPath(){return this.debugLogPath}getLogDir(){return this.config.logDir}logWithCorrelation(t,n,i,r,o,a,c){this.log(t,n,i,o,r,a,c)}static reset(){e.instance&&(e.instance.close(),e.instance=null)}};var ya=_a.getInstance();function Ee(e){return{success:!0,data:e}}function $e(e){return{success:!1,error:e}}var Hv=/^[a-zA-Z][a-zA-Z0-9-]*$/,Z=Object.freeze({IDENTIFIER:Hv,NEW_APP_NAME:/^[a-z][a-z0-9-]*$/,RESOURCE_NAME:/^[a-zA-Z][a-zA-Z0-9]*$/,ECS_SERVICE_NAME:Hv,BUCKET_NAME:/^[a-z][a-z0-9-]*[a-z0-9]$|^[a-z][a-z0-9]*$/,DATABASE_NAME:/^[a-zA-Z][a-zA-Z0-9_]*$/,RESOURCE_TYPE:/^[a-z]+(:[a-z]+)?$/,SSM_PATH:/^\/[a-zA-Z][a-zA-Z0-9-]*(\/[a-zA-Z][a-zA-Z0-9-]*)*$/,SECRET_NAME:/^[a-zA-Z_][a-zA-Z0-9._-]*$/,SSM_COMPONENT:/^[a-zA-Z][a-zA-Z0-9._-]*$/,EMAIL:/^[^\s@]+@[^\s@]+\.[^\s@]+$/,DOCKER_IMAGE:/^[a-z0-9][a-z0-9._-]*[a-z0-9](:[a-z0-9._-]+)?$/,DOMAIN:/^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)+$/i,PASCAL_CASE:/^[A-Z][A-Za-z0-9]*$/,AWS_ACCOUNT_ID:/^\d{12}$/,VPC_ID:/^vpc-[a-z0-9]+$/,ROLE_ARN:/^arn:aws[a-zA-Z-]*:iam::\d{12}:role\/.+$/,CIDR:/^((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\.){3}(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\/(3[0-2]|[12]?\d)$/,SCHEDULE_EXPRESSION:/^(rate\(1 (?:minute|hour|day)\)|rate\((?:[2-9]|[1-9]\d+) (?:minutes|hours|days)\)|cron\([^\s()]+ [^\s()]+ [^\s()]+ [^\s()]+ [^\s()]+ [^\s()]+\))$/,LAMBDA_RUNTIME_IDENTIFIER:/^[A-Za-z0-9._-]+$/,ENV_VAR_NAME:/^[A-Za-z_][A-Za-z0-9_]*$/});var d=Object.freeze({IDENTIFIER:"Must start with a letter, contain only letters, numbers, and hyphens",NEW_APP_NAME:"Must start with a lowercase letter and contain only lowercase letters, numbers, and hyphens",IDENTIFIER_MIN_LENGTH:"Must be at least 2 characters",IDENTIFIER_NO_TRAILING_HYPHEN:"Must not end with a hyphen",IDENTIFIER_NO_CONSECUTIVE_HYPHENS:"Must not contain consecutive hyphens",RESOURCE_NAME:"Must start with a letter and contain only letters and numbers (PascalCase recommended)",ECS_SERVICE_NAME:"Service name must start with a letter and contain only letters, numbers, and hyphens",BUCKET_NAME:"Bucket name must start with a lowercase letter and contain only lowercase letters, numbers, and hyphens",DATABASE_NAME:"Database name must start with a letter and contain only letters, numbers, and underscores",RESOURCE_TYPE:"Resource type must be in format 'category' or 'category:type'",SSM_PATH:"SSM path must start with / and contain valid namespace segments (e.g., /myapp/ApiCluster/service)",SECRET_NAME:"Secret name must start with a letter or underscore and contain only letters, numbers, underscores, hyphens, or periods",SSM_COMPONENT:"Must start with a letter and contain only letters, numbers, periods, hyphens, or underscores",EMAIL:"Please enter a valid email address",DOMAIN:"Please enter a valid domain (e.g., cms.example.com)",DOCKER_IMAGE:"Invalid Docker image name format",REQUIRED:{APP_NAME:"Application name is required",RESOURCE_NAME:"Resource name is required",BUCKET_NAME:"Bucket name is required",SERVICE_NAME:"Service name is required",NETWORK_NAME:"Network name is required",DATABASE_NAME:"Database name is required",ORGANISATION_NAME:"Organisation name is required",EMAIL:"Email is required",NAME:"Name is required",USERNAME:"Username is required",CONTAINER_NAME:"Container name is required",FIRST_NAME:"First name is required",LAST_NAME:"Last name is required",GROUP:"Group is required",PATTERN_NAME:"Pattern name is required",ROUTING_PATH:"Routing path is required",RESOURCE_REFERENCE:"Resource reference is required",RESOURCE_TYPE:"Resource type is required",VARIANT:"Variant is required",SUBTYPE:"Subtype is required",DEPLOY_TARGET:"Deploy target is required",DESTROY_TARGET:"Destroy target is required"},MAX_LENGTH:{APP_NAME:"Application name must be 50 characters or less",RESOURCE_NAME:"Resource name must be 63 characters or less",BUCKET_NAME:"Bucket name must be 63 characters or less",SERVICE_NAME:"Service name must be 255 characters or less",NETWORK_NAME:"Network name must be 50 characters or less",DATABASE_NAME:"Database name must be 63 characters or less",ORGANISATION_NAME:"Organisation name must be 50 characters or less"},PORT:{INTEGER:"Port must be an integer",MIN:"Port must be at least 1",MAX:"Port cannot exceed 65535"},USERNAME:{MAX_LENGTH:"Username cannot exceed 63 characters"},LAMBDA:{MEMORY:{INTEGER:"Lambda memory must be an integer",MIN:"Memory must be at least 128 MB",MAX:"Memory cannot exceed 10240 MB",MULTIPLE:"Memory must be 128 MB or a multiple of 64 MB"},TIMEOUT:{INTEGER:"Timeout must be an integer",MIN:"Timeout must be at least 1 second",MAX:"Timeout cannot exceed 900 seconds"},RUNTIME:"Lambda runtime must contain only letters, digits, dots, underscores, or dashes (e.g. 'NODEJS_20_X' or 'nodejs20.x')"},ENV_VAR_NAME:"Environment variable names must start with a letter or underscore and contain only letters, digits, and underscores",PRIORITY:{INTEGER:"Priority must be an integer",MIN:"Priority must be at least 1",MAX:"Priority cannot exceed 50000"},CAPACITY:{MIN:{INTEGER:"Minimum capacity must be an integer",MIN_0:"Minimum capacity must be at least 0",MIN_1:"Minimum capacity must be at least 1",MAX:"Minimum capacity cannot exceed 100"},MAX:{INTEGER:"Maximum capacity must be an integer",MIN_0:"Maximum capacity must be at least 0",MIN_1:"Maximum capacity must be at least 1",MAX:"Maximum capacity cannot exceed 100"},DESIRED:{INTEGER:"Desired count must be an integer",MIN:"Desired count must be at least 0",MAX:"Desired count cannot exceed 100"},WARM_POOL_REQUIRED:"minCapacity 0 requires a warmPool \u2014 without it, new tasks wait 60-90s for a cold instance launch",WARM_POOL:{MIN_SIZE:{INTEGER:"Warm pool minSize must be an integer",MIN:"Warm pool minSize must be at least 0",MAX:"Warm pool minSize cannot exceed 100"},MIN_SIZE_EXCEEDS_MAX_CAPACITY:"warmPool.minSize cannot exceed maxCapacity \u2014 the warm pool cannot hold more instances than the ASG allows"}},MEMORY_LIMIT:{INTEGER:"Memory limit must be an integer",MIN_512:"Memory limit must be at least 512 MiB",MIN_128:"Memory limit must be at least 128 MiB",MAX:"Memory limit cannot exceed 30720 MiB"},DATABASE:{PORT:{INTEGER:"Database port must be an integer",MIN:"Database port must be at least 1024",MAX:"Database port cannot exceed 65535"},NAME:{REQUIRED:"Database name is required",MAX_LENGTH:"Database name must be 63 characters or less"}},BACKUP_RETENTION:{INTEGER:"Backup retention must be an integer",MIN:"Backup retention must be at least 1 day",MAX:"Backup retention cannot exceed 35 days"},SQS:{VISIBILITY_TIMEOUT:{INTEGER:"Visibility timeout must be an integer",MIN:"Visibility timeout must be at least 0 seconds",MAX:"Visibility timeout cannot exceed 43200 seconds (12 hours)"},RETENTION_PERIOD:{INTEGER:"Retention period must be an integer",MIN:"Retention period must be at least 60 seconds",MAX:"Retention period cannot exceed 1209600 seconds (14 days)"}},READER:{COUNT:{INTEGER:"Reader count must be an integer",MIN:"Reader count must be at least 0",MAX:"Reader count cannot exceed 15"}},IDENTIFIER_SUFFIX:{REQUIRED:"Identifier suffix is required when specified",MAX_LENGTH:"Identifier suffix cannot exceed 50 characters"},ROTATION:{INTEGER:"Rotation days must be an integer",MIN:"Rotation interval must be at least 1 day",MAX:"Rotation interval cannot exceed 365 days"},MAX_CONNECTIONS:{INTEGER:"Max connections must be an integer",MIN:"Max connections must be at least 1",MAX:"Max connections cannot exceed 100"},MONITORING_INTERVAL:{INTEGER:"Monitoring interval must be an integer",MIN:"Monitoring interval must be at least 0",MAX:"Monitoring interval cannot exceed 60 seconds",VALUES:"Monitoring interval must be 0, 1, 5, 10, 15, 30, or 60 seconds"},RETENTION_DAYS:{INTEGER:"Retention days must be an integer",MIN:"Retention days must be at least 1",MAX:"Retention days cannot exceed 365"},BATCH_SIZE:{INTEGER:"Batch size must be an integer",MIN:"Batch size must be at least 1",MAX:"Batch size cannot exceed 10000"},SERVICE:{UNIQUE_WITHIN_CLUSTER:"Service names must be unique within a cluster",MIN_REQUIRED:"At least one service is required",ROUTING_REQUIRED:"Multiple services with ports require routing config (path or host)"},PROXY_CONFIG:{MAX_IDLE_CONNECTIONS:{INTEGER:"Max idle connections must be an integer",MIN:"Max idle connections must be at least 0",MAX:"Max idle connections cannot exceed 100"},BORROW_TIMEOUT:{INTEGER:"Connection borrow timeout must be an integer",MIN:"Connection borrow timeout must be at least 1 second",MAX:"Connection borrow timeout cannot exceed 3600 seconds"}},MAX_AZS:{INTEGER:"Max AZs must be an integer",MIN:"Max AZs must be at least 1",MAX:"Max AZs cannot exceed 3"},BATCHING_WINDOW:{INTEGER:"Max batching window must be an integer",MIN:"Max batching window must be at least 0",MAX:"Max batching window cannot exceed 300 seconds"},HEALTH_CHECK:{INTERVAL:{INTEGER:"Health check interval must be an integer",MIN:"Health check interval must be at least 5 seconds",MAX:"Health check interval cannot exceed 300 seconds"},TIMEOUT:{INTEGER:"Health check timeout must be an integer",MIN:"Health check timeout must be at least 2 seconds",MAX:"Health check timeout cannot exceed 60 seconds"},RETRIES:{INTEGER:"Health check retries must be an integer",MIN:"Health check retries must be at least 1",MAX:"Health check retries cannot exceed 10"},START_PERIOD:{INTEGER:"Health check start period must be an integer",MIN:"Health check start period must be at least 0 seconds",MAX:"Health check start period cannot exceed 300 seconds"}},EPHEMERAL_STORAGE:{INTEGER:"Ephemeral storage size must be an integer",MIN:"Ephemeral storage size must be at least 512 MB",MAX:"Ephemeral storage size cannot exceed 10240 MB"},MAX_MESSAGE_SIZE:{INTEGER:"Max message size must be an integer",MIN:"Max message size must be at least 1024 bytes",MAX:"Max message size cannot exceed 262144 bytes (256 KB)"},CAPACITY_CONSTRAINT:{MIN_LTE_MAX:"minCapacity must be less than or equal to maxCapacity"},DIRECT_ACCESS:{NO_DOMAIN:"directAccess cannot be used with domain (no ALB for HTTPS)",NO_LOAD_BALANCER:"directAccess cannot be used with loadBalancer (mutually exclusive)"},GLOBAL_AURORA:{PRIMARY_REGION_REQUIRED:"primaryRegion is required for GlobalAurora databases"},NAT_GATEWAY:{INTEGER:"NAT gateway count must be an integer",MIN:"NAT gateway count must be at least 0",MAX:"NAT gateway count cannot exceed 3"},CIDR_MASK:{INTEGER:"CIDR mask must be an integer",MIN:"CIDR mask must be at least 16",MAX:"CIDR mask cannot exceed 28"},CPU:{INTEGER:"CPU must be an integer",MIN:"CPU must be at least 256 units",MAX:"CPU cannot exceed 4096 units"},KMS:{KEY_REQUIRED:"KMS key ARN is required when using KMS encryption"},READER_INSTANCES:{MAX:"Cannot have more than 15 reader instances",COUNT_OR_INSTANCES:"Cannot specify both 'count' and 'instances' - use one or the other"},GENERATOR_CAPACITY:{MIN:{MIN:"Minimum capacity must be at least 1",MAX:"Minimum capacity cannot exceed 1000"},MAX:{MIN:"Maximum capacity must be at least 1",MAX:"Maximum capacity cannot exceed 1000"}},INSTANCE_TYPE:"Unknown instance type. Common types include: t4g.micro, t4g.small, m5.large",ARCHITECTURE_MISMATCH:"Architecture mismatch between instance type and AMI",ALLOCATED_STORAGE:{INTEGER:"Allocated storage must be an integer",MIN:"Allocated storage must be at least 20 GB",MAX:"Allocated storage cannot exceed 65536 GB"},DLQ:{MAX_RECEIVE_COUNT:{INTEGER:"Max receive count must be an integer",MIN:"Max receive count must be at least 1",MAX:"Max receive count cannot exceed 1000"}},ALARM:{PERCENTAGE:{MIN:"Threshold must be at least 1%",MAX:"Threshold must be at most 100%"},FREE_STORAGE_GIB:{MIN:"Free storage threshold must be at least 1 GiB"}},REGION:"Invalid AWS region",PASCAL_CASE:"Resource name must start with an uppercase letter and contain only alphanumerics (PascalCase).",IMAGE_DOCKER_MUTEX:"image and docker are mutually exclusive",AWS_ACCOUNT_ID:"AWS account id must be exactly 12 digits (no hyphens)",VPC_ID:"VPC id must look like vpc-abc12345",ROLE_ARN:"Role ARN must have the form arn:aws:iam::<account-id>:role/<name>",CIDR:"CIDR must be in dotted-quad/prefix-length form (e.g. 10.0.0.0/16)",VPC_PEER:{MIN_REQUESTER_ACCOUNTS:"At least one requester account id is required",REGION_REQUIRED:"Peer region is required when specified",ROUTE_TABLE_ID_REQUIRED:"Route table id must not be empty"},SCHEDULE_EXPRESSION:"Schedule expression must be 'rate(N minute|minutes|hour|hours|day|days)' with N>=1, or 'cron(<6-field AWS expression>)'"});var $$=["us-east-2","us-west-2","us-east-1","eu-west-1","eu-central-1","ap-southeast-1"],A$=Object.freeze($$.flatMap(e=>{let t=en(e);return t?[t]:[]})),I$=Object.freeze(["us-east-2","us-west-2","us-east-1","eu-west-1","ap-southeast-1"]);var Sa=["Aurora","Instance","GlobalAurora","ClickHouse"],Rr=["FARGATE","FARGATE_SPOT","EC2"],Be=["standard","resilient","enterprise"],Wm=["tinkerer","lightweight","standard","resilient","enterprise"],Km="custom",Hn=[...Wm,Km];var S1=Object.freeze({RESOURCE_SUFFIXES:Object.freeze({storage:"Storage",database:"Database",cluster:"Cluster",function:"Function",instance:"Instance",compute:"Compute"})}),Xn=["ecs","lambda","ec2"],Jn=Object.freeze({ECS:"ecs",LAMBDA:"lambda",EC2:"ec2"}),xa=["code","container"],Yn=Object.freeze({CODE:"code",CONTAINER:"container"}),Ea=["ARM_64","X86_64"],Xv="ARM_64",qn=["NONE","AWS_IAM"],$a=["public","internal"],Aa=["CPU","MEMORY"],Ia=["ARM","STANDARD"],Hm=["Instance","Aurora"],Pr=["postgresql","mysql"],Jv=["foundation","compliance","hardened"];var Ta=["payload","nextjs"],$1=new Set(Ta),Na=["t3.nano","t3.micro","t3.small","t3.medium","t3.large","t3.xlarge","t3.2xlarge","t3a.nano","t3a.micro","t3a.small","t3a.medium","t3a.large","t3a.xlarge","t3a.2xlarge","t4g.nano","t4g.micro","t4g.small","t4g.medium","t4g.large","t4g.xlarge","t4g.2xlarge","c5.large","c5.xlarge","c5.2xlarge","c5.4xlarge","c5.9xlarge","c5.12xlarge","c5.18xlarge","c5.24xlarge","c5a.large","c5a.xlarge","c5a.2xlarge","c5a.4xlarge","c5a.8xlarge","c5a.12xlarge","c5a.16xlarge","c5a.24xlarge","c6g.medium","c6g.large","c6g.xlarge","c6g.2xlarge","c6g.4xlarge","c6g.8xlarge","c6g.12xlarge","c6g.16xlarge","r5.large","r5.xlarge","r5.2xlarge","r5.4xlarge","r5.8xlarge","r5.12xlarge","r5.16xlarge","r5.24xlarge","r5a.large","r5a.xlarge","r5a.2xlarge","r5a.4xlarge","r5a.8xlarge","r5a.12xlarge","r5a.16xlarge","r5a.24xlarge","r6g.medium","r6g.large","r6g.xlarge","r6g.2xlarge","r6g.4xlarge","r6g.8xlarge","r6g.12xlarge","r6g.16xlarge","i3.large","i3.xlarge","i3.2xlarge","i3.4xlarge","i3.8xlarge","i3.16xlarge","p3.2xlarge","p3.8xlarge","p3.16xlarge","g4dn.xlarge","g4dn.2xlarge","g4dn.4xlarge","g4dn.8xlarge","g4dn.12xlarge","g4dn.16xlarge","m5.large","m5.xlarge","m5.2xlarge","m5.4xlarge","m5.8xlarge","m5.12xlarge","m5.16xlarge","m5.24xlarge","m5a.large","m5a.xlarge","m5a.2xlarge","m5a.4xlarge","m5a.8xlarge","m5a.12xlarge","m5a.16xlarge","m5a.24xlarge"],Yv=[0,1,5,10,15,30,60];function Ge(e,t){return e.includes(t)}var qv=1,Qv=65535;var ey=128,ty=10240,ka=1,Ca=900,Xm=1,Jm=1e3,wr=100,ry=100;var ny=["GET","POST","PUT","DELETE","HEAD","OPTIONS","PATCH"],iy=["standard","assets","upload","website"],Or=["AES256","KMS"];var Ae=e=>s.union([s.literal(!1),e]),Ut={check:e=>e.minCapacity!==void 0&&e.maxCapacity!==void 0?e.minCapacity<=e.maxCapacity:!0,params:{message:d.CAPACITY_CONSTRAINT.MIN_LTE_MAX,path:["maxCapacity"]}},Qn=e=>s.number().int(d.MEMORY_LIMIT.INTEGER).min(e,e===128?d.MEMORY_LIMIT.MIN_128:d.MEMORY_LIMIT.MIN_512).max(30720,d.MEMORY_LIMIT.MAX),M=s.string().min(1,d.REQUIRED.RESOURCE_NAME).max(63,d.MAX_LENGTH.RESOURCE_NAME).regex(Z.RESOURCE_NAME,d.RESOURCE_NAME),ay=s.string().min(1,d.REQUIRED.BUCKET_NAME).max(63,d.MAX_LENGTH.BUCKET_NAME).regex(Z.BUCKET_NAME,d.BUCKET_NAME),sy=s.string().min(1,d.REQUIRED.DATABASE_NAME).max(63,d.MAX_LENGTH.DATABASE_NAME).regex(Z.DATABASE_NAME,d.DATABASE_NAME);function Ym(e,t=Z.IDENTIFIER,n=d.IDENTIFIER){return s.string().min(2,d.IDENTIFIER_MIN_LENGTH).max(50,e).regex(t,n).refine(i=>!i.endsWith("-"),{message:d.IDENTIFIER_NO_TRAILING_HYPHEN}).refine(i=>!i.includes("--"),{message:d.IDENTIFIER_NO_CONSECUTIVE_HYPHENS})}var oe=Ym(d.MAX_LENGTH.APP_NAME),P1=Ym(d.MAX_LENGTH.APP_NAME,Z.NEW_APP_NAME,d.NEW_APP_NAME),Lt=s.number().int(d.PORT.INTEGER).min(qv,d.PORT.MIN).max(Qv,d.PORT.MAX),le=s.object({key:s.string(),sourceText:s.string()}).strict(),T$=s.object({__identifier:s.string()}).strict(),N$=s.object({__expression:s.string()}).strict(),k$=s.object({__call:s.string()}).strict(),C$=s.union([T$,N$,k$]),R$=s.union([s.string(),s.number(),s.boolean(),C$]),Dr=s.record(s.string().regex(Z.ENV_VAR_NAME,d.ENV_VAR_NAME),R$),P$=s.object({id:s.string(),name:s.string().optional(),arn:s.string().optional(),field:s.string().optional()}).strict().refine(e=>e.name!==void 0!=(e.arn!==void 0),{message:"secretsImport requires exactly one of `name` or `arn`."}),cy=s.record(s.string(),P$),w1=s.record(s.string(),s.unknown()),qm=s.enum(Hn).describe(`Application type must be one of: ${Hn.join(", ")}`),Qm=s.enum(Ta).describe(`OpenNext deployment pattern: ${Ta.join(", ")}`),w$=s.enum(["before-imports","after-imports","after-app-init","after-tags","after-resource","end-of-file"]),O$=s.enum(["import","app-init","tags","database","compute","storage","network","messaging","cdn","pattern","vpc-peer","vpc-peer-accepter","cross-plan-connection","custom"]),uy=s.object({sourceText:s.string(),position:w$,afterManagedResource:s.object({type:O$,name:s.string().optional()}).strict().optional(),originalLine:s.number().int().optional(),leadingComments:s.array(s.string()).optional(),orphaned:s.boolean().optional(),orphanedComment:s.string().optional()}).strict(),ly=s.union([s.object({tier:s.enum(Be)}).strict(),s.literal(!1)]),dy=s.union([s.object({instanceType:s.string().optional()}).strict(),s.literal(!1)]),D$=Ym(d.MAX_LENGTH.ORGANISATION_NAME),z$=s.string().regex(Z.EMAIL,d.EMAIL),oy=s.string().refine(e=>Ht.includes(e),{message:d.REGION}),O1=s.object({name:D$,email:z$,accountName:s.string().optional(),primaryRegion:oy.optional().default(Qr),secondaryRegions:s.array(oy).optional(),security:s.enum(Jv).optional(),force:s.boolean().optional()}).strict();function Ra(e){return e.issues.map(t=>`${t.path.length>0?`${t.path.join(".")}: `:""}${t.message}`).join(`
-`)}var zr=s.number().min(1,d.ALARM.PERCENTAGE.MIN).max(100,d.ALARM.PERCENTAGE.MAX),M$=s.number().min(1,d.ALARM.FREE_STORAGE_GIB.MIN),my=s.union([s.literal(!1),s.object({cpuThreshold:zr.optional(),memoryThreshold:zr.optional(),runningTasksMinimum:s.number().int().min(0).optional(),http5xxThreshold:zr.optional()}).strict()]),py=s.union([s.literal(!1),s.object({cpuThreshold:zr.optional(),freeStorageThresholdGiB:M$.optional(),connectionsThreshold:s.number().int().min(1).optional()}).strict()]),fy=s.union([s.literal(!1),s.object({errorRateThreshold:zr.optional(),durationThresholdPercent:zr.optional()}).strict()]);var tt=s.number().int(d.BACKUP_RETENTION.INTEGER).min(1,d.BACKUP_RETENTION.MIN).max(35,d.BACKUP_RETENTION.MAX),ei=s.number().int(d.MONITORING_INTERVAL.INTEGER).refine(e=>Ge(Yv,e),{message:d.MONITORING_INTERVAL.VALUES}),wa=s.number().int(d.DATABASE.PORT.INTEGER).min(1024,d.DATABASE.PORT.MIN).max(65535,d.DATABASE.PORT.MAX),j$=s.enum(Sa).describe(`Database type must be one of: ${Sa.join(", ")}`),U$=s.object({maxConnections:s.number().int(d.MAX_CONNECTIONS.INTEGER).min(1,d.MAX_CONNECTIONS.MIN).max(100,d.MAX_CONNECTIONS.MAX).optional(),maxIdleConnections:s.number().int(d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.INTEGER).min(0,d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MIN).max(100,d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MAX).optional(),connectionBorrowTimeout:s.number().int(d.PROXY_CONFIG.BORROW_TIMEOUT.INTEGER).min(1,d.PROXY_CONFIG.BORROW_TIMEOUT.MIN).max(3600,d.PROXY_CONFIG.BORROW_TIMEOUT.MAX).optional(),requireTLS:s.boolean().optional()}).strict().describe("RDS Proxy configuration"),L$=s.object({instanceType:s.string().optional(),availabilityZone:s.string().optional()}).strict().describe("Read replica configuration"),F$=s.object({automaticallyAfterDays:s.number().int(d.ROTATION.INTEGER).min(1,d.ROTATION.MIN).max(365,d.ROTATION.MAX).optional()}).strict().describe("Secret rotation configuration"),Oa=s.object({username:s.string().min(1,d.REQUIRED.USERNAME).max(63,d.USERNAME.MAX_LENGTH).optional(),secretRotation:F$.optional()}).strict().describe("Database credentials configuration"),Da=Ae(U$),za=Ae(L$),Z$=s.object({scaleWithWriter:s.boolean().optional(),enableDatabaseInsights:s.boolean().optional(),identifierSuffix:s.string().min(1,d.IDENTIFIER_SUFFIX.REQUIRED).max(50,d.IDENTIFIER_SUFFIX.MAX_LENGTH).optional(),availabilityZone:s.string().optional()}).strict().describe("Configuration for a single Aurora reader instance"),ti=s.object({enableDatabaseInsights:s.boolean().optional(),identifierSuffix:s.string().min(1,d.IDENTIFIER_SUFFIX.REQUIRED).max(50,d.IDENTIFIER_SUFFIX.MAX_LENGTH).optional(),availabilityZone:s.string().optional()}).strict().describe("Configuration for Aurora writer instance"),B$=s.object({count:s.number().int(d.READER.COUNT.INTEGER).min(0,d.READER.COUNT.MIN).max(15,d.READER.COUNT.MAX).optional(),instances:s.array(Z$).max(15,d.READER_INSTANCES.MAX).optional(),defaultEnableDatabaseInsights:s.boolean().optional()}).strict().refine(e=>!(e.count!==void 0&&e.instances!==void 0),{message:d.READER_INSTANCES.COUNT_OR_INSTANCES,path:["count"]}).describe("Aurora readers configuration"),ri=Ae(B$),G$=s.object({awsManaged:s.literal(!0)}).strict(),V$=s.object({useCMK:s.literal(!0)}).strict(),gy=s.union([G$,V$]),W$=s.object({mode:s.enum(["standard","advanced"]).optional(),encryptionKey:gy.optional()}).strict().describe("Database Insights configuration"),Ma=Ae(W$),ja=s.object({storageKey:gy.optional()}).strict().describe("Encryption configuration (DESTRUCTIVE to change storageKey)"),hy=s.object({name:M,type:j$,databaseName:s.string().min(1,d.REQUIRED.DATABASE_NAME),instanceType:s.string().optional(),allocatedStorage:s.number().optional(),multiAz:s.boolean().optional(),publiclyAccessible:s.boolean().optional(),databaseInsights:Ma.optional(),port:wa.optional(),deletionProtection:s.boolean().optional(),proxy:Da.optional(),credentials:Oa.optional(),readReplica:za.optional(),encryption:ja.optional(),writer:ti.optional(),readers:ri.optional(),backupRetention:tt.optional(),preferredMaintenanceWindow:s.string().optional(),monitoringInterval:ei.optional(),primaryRegion:s.string().optional(),secondaryRegions:s.array(s.string()).optional(),globalClusterIdentifier:s.string().optional(),enableGlobalWriteForwarding:s.boolean().optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional(),databaseEngine:s.enum(Pr).optional(),engineExpression:s.string().optional(),variableName:s.string().optional(),extraProperties:s.array(le).optional(),alarms:py.optional()}).strict(),Ua=s.object({appName:oe,nameProvidedByFlag:s.boolean().optional(),databaseName:s.string().min(1,d.REQUIRED.DATABASE_NAME).max(63,d.MAX_LENGTH.DATABASE_NAME).regex(Z.DATABASE_NAME,d.DATABASE_NAME),resourceName:M.optional(),connectionConfig:s.object({connectToCompute:s.array(s.string()).optional(),connectToServices:s.array(s.string()).optional()}).strict().optional(),databaseInsights:Ma.optional(),port:wa.optional(),proxy:Da.optional(),credentials:Oa.optional(),encryption:ja.optional(),deletionProtection:s.boolean().optional()}).strict(),vy={databaseType:s.literal("Instance"),instanceType:s.string().optional(),multiAz:s.boolean().optional(),readReplica:za.optional(),publiclyAccessible:s.boolean().optional(),backupRetention:tt.optional(),allocatedStorage:s.number().optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()},yy={databaseType:s.literal("Aurora"),writer:ti.optional(),readers:ri.optional(),backupRetention:tt.optional(),preferredMaintenanceWindow:s.string().optional(),monitoringInterval:ei.optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()},by={databaseType:s.literal("GlobalAurora"),primaryRegion:s.string().min(1,d.GLOBAL_AURORA.PRIMARY_REGION_REQUIRED),secondaryRegions:s.array(s.string()).optional(),globalClusterIdentifier:s.string().optional(),enableGlobalWriteForwarding:s.boolean().optional(),writer:ti.optional(),readers:ri.optional(),backupRetention:tt.optional(),preferredMaintenanceWindow:s.string().optional(),monitoringInterval:ei.optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()},_y=s.object({appName:oe,nameProvidedByFlag:s.boolean().optional(),databaseName:s.string().min(1,d.REQUIRED.DATABASE_NAME).max(63,d.MAX_LENGTH.DATABASE_NAME).regex(Z.DATABASE_NAME,d.DATABASE_NAME),resourceName:M.optional(),connectionConfig:s.object({connectToCompute:s.array(s.string()).optional(),connectToServices:s.array(s.string()).optional()}).strict().optional()}).strict(),Sy={databaseType:s.literal("ClickHouse"),instanceType:s.string().optional(),coldTier:s.union([s.object({mode:s.literal("s3")}).strict(),s.literal(!1)]).optional(),optimiseSchedule:s.union([s.string(),s.literal(!1)]).optional(),backupSchedule:s.union([s.string(),s.literal(!1)]).optional(),backupRetentionDays:tt.optional()},K$=Ua.extend(vy).strict(),H$=Ua.extend(yy).strict(),X$=Ua.extend(by).strict(),J$=_y.extend(Sy).strict(),G1=s.discriminatedUnion("databaseType",[K$,H$,X$,J$]),ep=Ua.extend({resourceName:M}).strict(),Y$=ep.extend(vy).strict(),q$=ep.extend(yy).strict(),Q$=ep.extend(by).strict(),eA=_y.extend({resourceName:M}).strict(),tA=eA.extend(Sy).strict(),V1=s.discriminatedUnion("databaseType",[Y$,q$,Q$,tA]),W1=s.object({appName:oe,databaseName:s.string().min(1,d.REQUIRED.DATABASE_NAME),maxConnections:s.number().int(d.MAX_CONNECTIONS.INTEGER).min(1,d.MAX_CONNECTIONS.MIN).max(100,d.MAX_CONNECTIONS.MAX).optional(),maxIdleConnections:s.number().int(d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.INTEGER).min(0,d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MIN).max(100,d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MAX).optional(),connectionBorrowTimeout:s.number().int(d.PROXY_CONFIG.BORROW_TIMEOUT.INTEGER).min(1,d.PROXY_CONFIG.BORROW_TIMEOUT.MIN).max(3600,d.PROXY_CONFIG.BORROW_TIMEOUT.MAX).optional(),requireTLS:s.boolean().optional(),nameProvidedByFlag:s.boolean().optional()}).strict(),rA=["S","N","B"],Pa=s.object({name:s.string(),type:s.enum(rA)}).strict(),xy=s.object({name:M,partitionKey:Pa,sortKey:Pa.optional(),globalSecondaryIndexes:s.array(s.object({indexName:s.string(),partitionKey:Pa,sortKey:Pa.optional()}).strict()).optional(),ttlAttribute:s.string().optional(),stream:s.boolean().optional(),variableName:s.string().optional(),extraProperties:s.array(le).optional()}).strict(),nA=s.object({mode:s.literal("s3")}).strict(),Ey=s.object({name:M,type:s.literal("ClickHouse"),databaseName:sy,instanceType:s.string().optional(),coldTier:s.union([nA,s.literal(!1)]).optional(),optimiseSchedule:s.union([s.string(),s.literal(!1)]).optional(),backupSchedule:s.union([s.string(),s.literal(!1)]).optional(),backupRetentionDays:tt.optional(),variableName:s.string().optional(),extraProperties:s.array(le).optional()}).strict();var iA=s.object({count:s.number().int(d.NAT_GATEWAY.INTEGER).min(0,d.NAT_GATEWAY.MIN).max(3,d.NAT_GATEWAY.MAX).optional()}).strict().describe("NAT gateway configuration"),$y=Ae(iA),tp=s.enum(["cloudwatch","s3"]),oA=s.object({destination:tp.optional(),retentionDays:s.number().int(d.RETENTION_DAYS.INTEGER).min(1,d.RETENTION_DAYS.MIN).max(365,d.RETENTION_DAYS.MAX).optional(),trafficType:s.enum(["ALL","ACCEPT","REJECT"]).optional()}).strict().describe("VPC flow log configuration"),Ay=Ae(oA),aA=s.object({s3:s.boolean().optional(),dynamodb:s.boolean().optional()}).strict().describe("Gateway VPC endpoints (FREE)"),sA=Ae(aA),cA=s.object({ecr:s.boolean().optional(),secretsManager:s.boolean().optional(),kms:s.boolean().optional(),cloudwatchLogs:s.boolean().optional(),ssm:s.boolean().optional(),sts:s.boolean().optional()}).strict().describe("Interface VPC endpoints (cost per hour)"),uA=Ae(cA),lA=s.object({gateway:sA.optional(),interface:uA.optional()}).strict().describe("VPC endpoints configuration"),Iy=Ae(lA),La=s.object({maxAzs:s.number().int(d.MAX_AZS.INTEGER).min(1,d.MAX_AZS.MIN).max(3,d.MAX_AZS.MAX).optional(),natGateways:$y.optional(),flowLogs:Ay.optional(),vpcEndpoints:Iy.optional(),cidrMask:s.number().int(d.CIDR_MASK.INTEGER).min(16,d.CIDR_MASK.MIN).max(28,d.CIDR_MASK.MAX).optional()}).strict(),Ty=s.string().min(1,d.REQUIRED.NETWORK_NAME).max(50,d.MAX_LENGTH.NETWORK_NAME).regex(Z.RESOURCE_NAME,d.RESOURCE_NAME),Ny=La.extend({name:Ty}).strict(),ky=Ae(La),Y1=s.object({appName:oe,networkName:Ty.optional(),maxAzs:s.number().int(d.MAX_AZS.INTEGER).min(1,d.MAX_AZS.MIN).max(3,d.MAX_AZS.MAX).optional(),natGateways:$y.optional(),flowLogs:Ay.optional(),vpcEndpoints:Iy.optional()}).strict(),dA=Z.CIDR,rp=s.string().regex(dA,d.CIDR),mA=s.object({kind:s.literal("database"),resource:s.string().min(1,d.REQUIRED.RESOURCE_REFERENCE),name:M,allowedFromCidrs:s.array(rp),access:s.enum(["read","write","readWrite"]).optional()}).strict(),pA=s.object({kind:s.literal("ecsService"),resource:s.string().min(1,d.REQUIRED.RESOURCE_REFERENCE),serviceName:s.string().min(1,d.REQUIRED.SERVICE_NAME),name:M,allowedFromCidrs:s.array(rp),port:Lt.optional()}).strict(),fA=s.discriminatedUnion("kind",[mA,pA]),q1=s.object({name:M,peerAppName:s.string().min(1,d.REQUIRED.APP_NAME),peerAccountId:s.string().regex(Z.AWS_ACCOUNT_ID,d.AWS_ACCOUNT_ID),peerRegion:s.string().min(1,d.VPC_PEER.REGION_REQUIRED).optional(),peerVpcId:s.string().regex(Z.VPC_ID,d.VPC_ID).optional(),peerVpcCidr:rp.optional(),peerRoleArn:s.string().regex(Z.ROLE_ARN,d.ROLE_ARN).optional(),peerRouteTableIds:s.array(s.string().min(1,d.VPC_PEER.ROUTE_TABLE_ID_REQUIRED)).optional(),localVpcName:s.string().min(1,d.REQUIRED.NETWORK_NAME).optional(),enableDnsResolution:s.boolean().optional()}).strict(),Q1=s.object({name:M,requesterAccountIds:s.array(s.string().regex(Z.AWS_ACCOUNT_ID,d.AWS_ACCOUNT_ID)).min(1,d.VPC_PEER.MIN_REQUESTER_ACCOUNTS),localVpcName:s.string().min(1,d.REQUIRED.NETWORK_NAME).optional(),publishToSsm:s.boolean().optional(),exposedResources:s.array(fA).optional()}).strict();var Fa=["storage","cdn","compute"],gA=s.object({sid:s.string().optional(),effect:s.enum(["Allow","Deny"]),principals:s.array(s.string()),actions:s.array(s.string()),resources:s.array(s.string()).optional(),conditions:s.record(s.string(),s.record(s.string(),s.union([s.string(),s.array(s.string())]))).optional()}).strict(),Cy=s.object({name:M,bucketName:s.string().optional(),publicReadAccess:s.boolean().optional(),websiteHosting:s.object({indexDocument:s.string(),errorDocument:s.string().optional()}).strict().optional(),backupVaultTier:s.enum(Be).optional(),versioned:s.boolean().optional(),encryption:s.enum(Or).optional(),kmsKeyArn:s.string().optional(),cors:s.array(s.object({allowedOrigins:s.array(s.string()),allowedMethods:s.array(s.string()),allowedHeaders:s.array(s.string()).optional(),exposedHeaders:s.array(s.string()).optional(),maxAge:s.number().optional()}).strict()).optional(),deployment:s.object({source:s.string(),prune:s.boolean().optional(),cacheControl:s.object({maxAge:s.number().optional(),immutable:s.boolean().optional()}).strict().optional()}).strict().optional(),retain:s.boolean().optional(),resourcePolicyStatements:s.array(gA).optional(),stackPlacement:s.enum(Fa).optional(),variableName:s.string().optional(),extraProperties:s.array(le).optional()}).strict().refine(e=>e.encryption!=="KMS"||!!e.kmsKeyArn,{message:d.KMS.KEY_REQUIRED}),oD=s.object({appName:oe,bucketName:ay,nameProvidedByFlag:s.boolean().optional(),storagePreset:s.enum(iy).optional(),publicReadAccess:s.boolean().optional(),websiteHosting:s.object({indexDocument:s.string(),errorDocument:s.string().optional()}).strict().optional(),backupVaultTier:s.enum(Be).optional(),versioned:s.boolean().optional(),encryption:s.enum(Or).optional(),kmsKeyArn:s.string().optional(),cors:s.array(s.object({allowedOrigins:s.array(s.string()),allowedMethods:s.array(s.string()),allowedHeaders:s.array(s.string()).optional(),exposedHeaders:s.array(s.string()).optional(),maxAge:s.number().optional()}).strict()).optional(),connectionConfig:s.object({connectToCompute:s.array(s.string()).optional(),connectToServices:s.array(s.string()).optional()}).strict().optional()}).strict().refine(e=>e.encryption!=="KMS"||!!e.kmsKeyArn,{message:d.KMS.KEY_REQUIRED,path:["kmsKeyArn"]});var np=s.enum(["DESTROY","RETAIN"]),Ry=s.object({name:M,queueType:s.enum(["standard","fifo"]).default("standard"),visibilityTimeout:s.number().int(d.SQS.VISIBILITY_TIMEOUT.INTEGER).min(0,d.SQS.VISIBILITY_TIMEOUT.MIN).max(43200,d.SQS.VISIBILITY_TIMEOUT.MAX).optional(),retentionPeriod:s.number().int(d.SQS.RETENTION_PERIOD.INTEGER).min(60,d.SQS.RETENTION_PERIOD.MIN).max(1209600,d.SQS.RETENTION_PERIOD.MAX).optional(),contentBasedDeduplication:s.boolean().optional(),removalPolicy:np.optional(),variableName:s.string().optional(),extraProperties:s.array(le).optional()}).strict();var Py=s.object({type:s.literal("basic-auth"),username:s.string().min(1),password:s.string().min(1)}).strict(),wy=s.object({name:M,defaultOriginRef:s.string(),behaviours:s.array(s.object({pathPattern:s.string(),originRef:s.string(),cachePolicy:s.enum(["CACHING_OPTIMIZED","CACHING_DISABLED"]).optional()}).strict()).optional(),customDomain:s.string().optional(),certificateArn:s.string().optional(),accessGate:s.union([s.literal(!1),Py]).optional(),extraProperties:s.array(le).optional()}).strict(),pD=s.object({appName:s.string(),name:M.optional(),defaultOriginRef:s.string(),behaviours:s.array(s.object({pathPattern:s.string(),originRef:s.string(),cachePolicy:s.enum(["CACHING_OPTIMIZED","CACHING_DISABLED"]).optional()}).strict()).optional(),customDomain:s.string().optional(),certificateArn:s.string().optional(),accessGate:s.union([s.literal(!1),Py]).optional(),nameProvidedByFlag:s.boolean().optional()}).strict();var hA=new Set(["t4g","c6g","c6gd","c6gn","c7g","c7gd","c7gn","r6g","r6gd","r7g","r7gd","m6g","m6gd","m7g","m7gd","a1","x2gd","im4gn","is4gen","i4g","hpc7g"]);function Za(e){let t=e.split(".")[0]??"";return hA.has(t)?"ARM":"STANDARD"}function ip(e,t){let n=Za(e);return n!==t?{valid:!1,message:`Instance type '${e}' requires ${n} architecture, but '${t}' AMI was specified. Use a ${n==="ARM"?"Graviton instance (t4g, c6g, r6g, m6g, etc.)":"Intel/AMD instance (t3, c5, r5, m5, etc.)"} instead.`}:{valid:!0}}var vA=1,bt=s.object({path:s.string(),context:s.string().min(1,"context cannot be empty").optional(),target:s.string().min(1,"target cannot be empty").optional(),buildArgs:s.record(s.string(),s.string()).optional()}).strict(),vD=bt.partial();var yA=s.object({name:s.string(),clusterName:s.string().optional(),docker:bt.optional(),containerPort:s.number().optional(),secrets:s.array(s.string()).optional(),ssmSecretsPath:s.string().optional(),importedSecretNames:s.array(s.string()).optional()}).strict(),bA=s.object({type:s.enum(["payload"]),name:s.string(),source:s.string()}).strict(),_A=s.object({repositoryName:s.string()}).strict(),SA=s.object({name:s.string(),secrets:s.array(s.string()).optional(),ssmSecretsPath:s.string().optional(),importedSecretNames:s.array(s.string()).optional()}).strict(),xA=s.object({templateHash:s.string(),synthTimestamp:s.string()}).strict(),EA=s.object({constructPath:s.string().max(512),group:s.string().max(128),resourceType:s.string().max(256)}).strict(),yD=s.object({version:s.literal(vA),generatedAt:s.string(),appName:s.string(),services:s.array(yA),lambdas:s.array(SA),pattern:bA.optional(),ecr:_A.optional(),stacks:s.record(s.string(),xA),resourceMap:s.record(s.string(),EA).optional()}).strict();function $A(e){return!(e.image!==void 0&&e.docker!==void 0)}var Dy=s.number().int(d.CAPACITY.MIN.INTEGER).min(Xm,d.GENERATOR_CAPACITY.MIN.MIN).max(Jm,d.GENERATOR_CAPACITY.MIN.MAX),zy=s.number().int(d.CAPACITY.MAX.INTEGER).min(Xm,d.GENERATOR_CAPACITY.MAX.MIN).max(Jm,d.GENERATOR_CAPACITY.MAX.MAX),Mr=s.number().int(d.LAMBDA.MEMORY.INTEGER).min(ey,d.LAMBDA.MEMORY.MIN).max(ty,d.LAMBDA.MEMORY.MAX).refine(e=>e===128||e%64===0,d.LAMBDA.MEMORY.MULTIPLE),My=s.string().regex(Z.LAMBDA_RUNTIME_IDENTIFIER,d.LAMBDA.RUNTIME),op=s.number().int(d.CPU.INTEGER).min(256,d.CPU.MIN).max(4096,d.CPU.MAX),Ga=s.number().int(d.CAPACITY.DESIRED.INTEGER).min(0,d.CAPACITY.DESIRED.MIN).max(wr,d.CAPACITY.DESIRED.MAX),ni=s.object({connectToDatabase:s.array(s.string()).optional()}).strict(),AA=s.object({minSize:s.number().int(d.CAPACITY.WARM_POOL.MIN_SIZE.INTEGER).min(0,d.CAPACITY.WARM_POOL.MIN_SIZE.MIN).max(ry,d.CAPACITY.WARM_POOL.MIN_SIZE.MAX).optional(),reuseOnScaleIn:s.boolean().optional()}).strict(),ap=s.object({instanceType:s.string().optional(),amiHardwareType:s.enum(Ia).optional(),minCapacity:s.number().int(d.CAPACITY.MIN.INTEGER).min(0,d.CAPACITY.MIN.MIN_0).max(wr,d.CAPACITY.MIN.MAX).optional(),maxCapacity:s.number().int(d.CAPACITY.MAX.INTEGER).min(1,d.CAPACITY.MAX.MIN_1).max(wr,d.CAPACITY.MAX.MAX).optional(),memoryLimitMiB:Qn(128).optional(),warmPool:AA.optional(),extraProperties:s.array(le).optional()}).strict().superRefine((e,t)=>{if(!e.instanceType||!e.amiHardwareType)return;let n=ip(e.instanceType,e.amiHardwareType);n.valid||t.addIssue({code:"custom",message:n.message??d.ARCHITECTURE_MISMATCH,path:["instanceType"]})}).superRefine((e,t)=>{e.minCapacity===0&&!e.warmPool&&t.addIssue({code:"custom",message:d.CAPACITY.WARM_POOL_REQUIRED,path:["minCapacity"]}),e.warmPool?.minSize!==void 0&&e.maxCapacity!==void 0&&e.warmPool.minSize>e.maxCapacity&&t.addIssue({code:"custom",message:d.CAPACITY.WARM_POOL.MIN_SIZE_EXCEEDS_MAX_CAPACITY,path:["warmPool","minSize"]})}),IA=s.enum(Xn).describe(`Compute type must be one of: ${Xn.join(", ")}`),sp=s.enum(Rr).describe(`ECS capacity provider must be one of: ${Rr.join(", ")}`),cp=s.string().refine(e=>Ge(Na,e),{message:d.INSTANCE_TYPE}),jy=s.object({sourceType:s.enum(["sqs","dynamodb","eventbridge"]),sourceRef:s.string().describe("Name of the source resource"),batchSize:s.number().int(d.BATCH_SIZE.INTEGER).min(1,d.BATCH_SIZE.MIN).max(1e4,d.BATCH_SIZE.MAX).optional(),startingPosition:s.enum(["TRIM_HORIZON","LATEST"]).optional(),maxBatchingWindow:s.number().int(d.BATCHING_WINDOW.INTEGER).min(0,d.BATCHING_WINDOW.MIN).max(300,d.BATCHING_WINDOW.MAX).optional(),reportBatchItemFailures:s.boolean().optional()}).strict(),TA=s.object({name:s.string().min(1,d.REQUIRED.CONTAINER_NAME).optional(),image:s.string().optional(),port:Lt.optional(),environment:Dr.optional(),secretsImport:cy.optional(),command:s.array(s.string()).optional(),entryPoint:s.array(s.string()).optional(),essential:s.boolean().optional(),healthCheck:s.object({command:s.array(s.string()),interval:s.number().int(d.HEALTH_CHECK.INTERVAL.INTEGER).min(5,d.HEALTH_CHECK.INTERVAL.MIN).max(300,d.HEALTH_CHECK.INTERVAL.MAX).optional(),timeout:s.number().int(d.HEALTH_CHECK.TIMEOUT.INTEGER).min(2,d.HEALTH_CHECK.TIMEOUT.MIN).max(60,d.HEALTH_CHECK.TIMEOUT.MAX).optional(),retries:s.number().int(d.HEALTH_CHECK.RETRIES.INTEGER).min(1,d.HEALTH_CHECK.RETRIES.MIN).max(10,d.HEALTH_CHECK.RETRIES.MAX).optional(),startPeriod:s.number().int(d.HEALTH_CHECK.START_PERIOD.INTEGER).min(0,d.HEALTH_CHECK.START_PERIOD.MIN).max(300,d.HEALTH_CHECK.START_PERIOD.MAX).optional()}).strict().optional(),ssmSecrets:s.array(s.string().regex(Z.SECRET_NAME,d.SECRET_NAME)).optional(),extraProperties:s.array(le).optional()}).strict(),Uy=s.string().min(1,d.REQUIRED.SERVICE_NAME).max(255,d.MAX_LENGTH.SERVICE_NAME).regex(Z.ECS_SERVICE_NAME,d.ECS_SERVICE_NAME),Ly=s.object({domain:s.string().optional(),loadBalancer:s.union([s.literal(!1),s.enum($a)]).optional(),directAccess:s.boolean().optional(),extraProperties:s.array(le).optional()}).strict().refine(e=>!(e.directAccess&&e.domain),{message:d.DIRECT_ACCESS.NO_DOMAIN,path:["directAccess"]}).refine(e=>!(e.directAccess&&typeof e.loadBalancer=="string"),{message:d.DIRECT_ACCESS.NO_LOAD_BALANCER}).describe("Cluster-level configuration"),Ba=s.object({path:s.string().optional(),host:s.string().optional(),priority:s.number().int(d.PRIORITY.INTEGER).min(1,d.PRIORITY.MIN).max(5e4,d.PRIORITY.MAX).optional(),healthCheckPath:s.string().optional()}).strict().describe("Path/host-based routing configuration"),NA=s.object({desiredCount:Ga.optional(),minCapacity:s.number().int(d.CAPACITY.MIN.INTEGER).min(0,d.CAPACITY.MIN.MIN_0).max(wr,d.CAPACITY.MIN.MAX).optional(),maxCapacity:s.number().int(d.CAPACITY.MAX.INTEGER).min(1,d.CAPACITY.MAX.MIN_1).max(wr,d.CAPACITY.MAX.MAX).optional(),scalingType:s.enum(Aa).optional()}).strict().refine(Ut.check,Ut.params).describe("ECS service scaling configuration"),Fy=s.object({name:Uy,docker:bt.optional(),needsDatabaseConnection:s.boolean().optional(),needsStorageConnection:s.boolean().optional(),needsMessagingConnection:s.boolean().optional(),image:s.string().optional(),containers:s.array(TA).optional(),routing:s.union([Ba,s.array(Ba).min(1)]).optional(),cpu:op.optional(),memoryLimitMiB:Qn(512).optional(),desiredCount:Ga.optional(),scaling:Ae(NA).optional(),capacityProvider:sp,ec2Config:ap.optional(),ssmSecretsPath:s.string().regex(Z.SSM_PATH,d.SSM_PATH).optional(),extraProperties:s.array(le).optional(),alarms:my.optional()}).strict().superRefine((e,t)=>{$A(e)||t.addIssue({code:"custom",path:["docker"],message:d.IMAGE_DOCKER_MUTEX})}).describe("Configuration for a service in an ECS cluster"),Zy=s.object({name:M,type:IA,needsConnection:s.boolean(),connectedDatabase:s.array(s.string()).optional(),connectedStorage:s.array(s.string()).optional(),connectedMessaging:s.array(s.string()).optional(),cluster:Ly.optional(),services:s.array(Fy).optional(),docker:bt.partial().optional(),deployment:s.enum(xa).optional(),codePath:s.string().optional(),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(ka,d.LAMBDA.TIMEOUT.MIN).max(Ca,d.LAMBDA.TIMEOUT.MAX).optional(),memory:Mr.optional(),handler:s.string().optional(),runtime:My.optional(),environment:Dr.optional(),secrets:Dr.optional(),eventSources:s.array(jy).optional(),functionUrl:s.object({authType:s.enum(qn)}).strict().optional(),description:s.string().optional(),scheduleExpression:s.string().optional(),architecture:s.enum(Ea).optional(),ephemeralStorageSize:s.number().int(d.EPHEMERAL_STORAGE.INTEGER).min(512,d.EPHEMERAL_STORAGE.MIN).max(10240,d.EPHEMERAL_STORAGE.MAX).optional(),functionName:s.string().optional(),ssmSecrets:s.array(s.string()).optional(),ssmSecretsPath:s.string().optional(),alarms:fy.optional(),instanceType:cp.optional(),enableSSH:s.boolean().optional(),keyName:s.string().optional(),userData:s.string().optional(),securityGroups:s.array(s.string()).optional(),variableName:s.string().optional(),extraProperties:s.array(le).optional()}).strict().superRefine((e,t)=>{if(e.type==="ecs"&&e.services)for(let n=0;n<e.services.length;n++){let i=e.services[n];i?.ec2Config?.instanceType&&!i.ec2Config.amiHardwareType&&Za(i.ec2Config.instanceType)!=="ARM"&&t.addIssue({code:"custom",message:`Service '${i.name??n}' uses instance type '${i.ec2Config.instanceType}' (x86), which requires Docker images built for linux/amd64. The default build targets linux/arm64 (Graviton). Use a Graviton instance type (t4g, c6g, r6g, m6g, etc.) or set amiHardwareType: "STANDARD" to acknowledge x86.`,path:["services",n,"ec2Config","instanceType"]})}e.type==="lambda"&&e.deployment==="container"&&e.architecture==="X86_64"&&t.addIssue({code:"custom",message:"Lambda architecture 'X86_64' requires Docker images built for linux/amd64, but the default build targets linux/arm64. Use 'ARM_64' for Graviton Lambdas (recommended) or ensure your build pipeline targets linux/amd64.",path:["architecture"]})}),TD=s.object({appName:oe,clusterName:M,containerPort:Lt,nameProvidedByFlag:s.boolean().optional(),ecrRepository:s.string().optional(),capacityProvider:sp.optional(),useAppEcr:s.boolean().optional(),desiredCount:Ga.optional(),cpu:op.optional(),memoryLimitMiB:Qn(512).optional(),minCapacity:Dy.optional(),maxCapacity:zy.optional(),ec2Config:ap.optional(),connectionConfig:ni.optional()}).strict().refine(Ut.check,Ut.params),ND=s.object({appName:oe,functionName:M,nameProvidedByFlag:s.boolean().optional(),lambdaType:s.enum(["basic","web","custom"]).optional(),ecrRepository:s.string().optional(),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(ka,d.LAMBDA.TIMEOUT.MIN).max(Ca,d.LAMBDA.TIMEOUT.MAX).optional(),memory:Mr.optional(),enableFunctionUrl:s.boolean().optional(),description:s.string().optional(),enableCors:s.boolean().optional(),corsOrigins:s.string().optional(),corsHeaders:s.string().optional(),corsMethods:s.array(s.enum(ny)).optional(),corsCredentials:s.boolean().optional(),connectionConfig:ni.optional()}).strict(),kD=s.object({appName:oe,instanceName:M,nameProvidedByFlag:s.boolean().optional(),instanceType:cp.optional(),enableSSH:s.boolean().optional(),minCapacity:Dy.optional(),maxCapacity:zy.optional(),connectionConfig:ni.optional()}).strict().refine(Ut.check,Ut.params),CD=s.object({appName:oe,clusterName:M,serviceName:Uy,capacityProvider:sp,containerPort:Lt.optional(),cpu:op.optional(),memoryLimitMiB:Qn(512).optional(),desiredCount:Ga.optional(),ec2Config:ap.optional(),routing:s.union([Ba,s.array(Ba).min(1)]).optional(),docker:bt.partial().optional(),nameProvidedByFlag:s.boolean().optional(),connectionConfig:ni.optional()}).strict(),up=s.object({appName:oe,computeName:M,nameProvidedByFlag:s.boolean().optional(),connectionConfig:ni.optional()}).strict(),kA=up.extend({type:s.literal("ecs"),cluster:Ly.optional(),services:s.array(Fy).min(1,d.SERVICE.MIN_REQUIRED),docker:bt.partial().optional()}).strict().refine(e=>{let t=e.services.filter(n=>n.containers?.some(i=>i.port));return t.length>1?t.every(n=>(Array.isArray(n.routing)?n.routing:n.routing?[n.routing]:[]).some(i=>i.path||i.host)):!0},{message:d.SERVICE.ROUTING_REQUIRED}).refine(e=>{let t=e.services.map(n=>n.name);return new Set(t).size===t.length},{message:d.SERVICE.UNIQUE_WITHIN_CLUSTER}),CA=up.extend({type:s.literal("lambda"),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(ka,d.LAMBDA.TIMEOUT.MIN).max(Ca,d.LAMBDA.TIMEOUT.MAX).optional(),memory:Mr.optional(),handler:s.string().optional(),runtime:My.optional(),environment:Dr.optional(),secrets:Dr.optional(),description:s.string().optional(),functionUrl:s.union([s.object({authType:s.enum(qn).optional()}).strict(),s.literal(!1)]).optional(),eventSources:s.array(jy).optional()}).strict(),RA=up.extend({type:s.literal("ec2"),instanceType:cp.optional(),enableSSH:s.boolean().optional(),keyName:s.string().optional(),userData:s.string().optional(),securityGroups:s.array(s.string()).optional()}).strict(),RD=s.discriminatedUnion("type",[kA,CA,RA]),Oy=s.object({path:s.string().min(1,d.REQUIRED.ROUTING_PATH),priority:s.number().int(d.PRIORITY.INTEGER).min(1,d.PRIORITY.MIN).max(5e4,d.PRIORITY.MAX).optional()}).strict(),By=s.object({name:s.string().min(1,d.REQUIRED.SERVICE_NAME).max(255,d.MAX_LENGTH.SERVICE_NAME).regex(Z.RESOURCE_NAME,d.RESOURCE_NAME),docker:bt.partial().optional(),containerPort:Lt.optional(),needsDatabaseConnection:s.boolean().optional(),routing:s.union([Oy,s.array(Oy).min(1)]).optional()}).strict(),Gy=s.object({appName:oe,instanceType:s.string().optional()}).strict();var lp=s.object({memorySize:Mr.optional(),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(1,d.LAMBDA.TIMEOUT.MIN).max(900,d.LAMBDA.TIMEOUT.MAX).optional(),ephemeralStorageSize:s.number().int(d.EPHEMERAL_STORAGE.INTEGER).min(512,d.EPHEMERAL_STORAGE.MIN).max(10240,d.EPHEMERAL_STORAGE.MAX).optional()}).strict(),Vy=s.object({type:s.enum(Hm).optional(),databaseName:s.string().optional(),databaseEngine:s.enum(Pr).optional(),deletionProtection:s.boolean().optional(),backupRetention:tt.optional(),port:wa.optional(),publiclyAccessible:s.boolean().optional(),allowedIpCidr:s.string().optional(),instanceType:s.string().optional(),allocatedStorage:s.number().int(d.ALLOCATED_STORAGE.INTEGER).min(20,d.ALLOCATED_STORAGE.MIN).max(65536,d.ALLOCATED_STORAGE.MAX).optional(),multiAz:s.boolean().optional(),readReplica:za.optional(),writer:ti.optional(),readers:ri.optional(),allowVpcAccess:s.boolean().optional(),monitoringInterval:ei.optional(),preferredMaintenanceWindow:s.string().optional(),databaseInsights:Ma.optional(),proxy:Da.optional(),credentials:Oa.optional(),encryption:ja.optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()}).strict(),Wy=s.object({server:lp.optional(),imageOptimisation:lp.optional(),revalidation:lp.optional()}).strict(),dp=s.object({versioned:s.boolean().optional()}).strict(),Ky=s.object({assets:dp.optional(),cache:dp.optional(),media:dp.optional()}).strict(),PA=s.object({visibilityTimeout:s.number().int(d.SQS.VISIBILITY_TIMEOUT.INTEGER).min(0,d.SQS.VISIBILITY_TIMEOUT.MIN).max(43200,d.SQS.VISIBILITY_TIMEOUT.MAX).optional(),messageRetentionPeriod:s.number().int(d.SQS.RETENTION_PERIOD.INTEGER).min(60,d.SQS.RETENTION_PERIOD.MIN).max(1209600,d.SQS.RETENTION_PERIOD.MAX).optional(),maxMessageSize:s.number().int(d.MAX_MESSAGE_SIZE.INTEGER).min(1024,d.MAX_MESSAGE_SIZE.MIN).max(262144,d.MAX_MESSAGE_SIZE.MAX).optional(),deadLetterQueue:s.union([s.literal(!1),s.object({enabled:s.boolean().optional(),maxReceiveCount:s.number().int(d.DLQ.MAX_RECEIVE_COUNT.INTEGER).min(1,d.DLQ.MAX_RECEIVE_COUNT.MIN).max(1e3,d.DLQ.MAX_RECEIVE_COUNT.MAX).optional()}).strict()]).optional()}).strict(),Hy=s.object({revalidationQueue:PA.optional()}).strict(),Xy=s.object({domainNames:s.array(s.string()).optional(),certificateArn:s.string().optional()}).strict(),Jy=s.record(s.string().regex(Z.ENV_VAR_NAME,d.ENV_VAR_NAME),s.string()).optional(),wA=s.object({type:s.literal("payload"),name:s.string().min(1,d.REQUIRED.PATTERN_NAME),domain:s.string().optional(),database:Vy.optional(),compute:Wy.optional(),storage:Ky.optional(),messaging:Hy.optional(),cdn:Xy.optional(),environment:Jy}).strict(),OA=s.object({type:s.literal("nextjs"),name:s.string().min(1,d.REQUIRED.PATTERN_NAME),domain:s.string().optional(),database:Vy.optional(),compute:Wy.optional(),storage:Ky.optional(),messaging:Hy.optional(),cdn:Xy.optional(),environment:Jy}).strict(),mp=s.discriminatedUnion("type",[wA,OA]),Yy=s.enum(["lightweight","standard","resilient","custom"]),qy=s.object({type:s.enum(Hm),instanceType:s.string().optional(),backupRetention:tt.optional(),deletionProtection:s.boolean().optional(),encryption:s.union([s.object({useCMK:s.literal(!0)}).strict(),s.literal(!1)]).optional()}).strict(),Qy=s.object({memorySize:Mr.optional(),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(1,d.LAMBDA.TIMEOUT.MIN).max(900,d.LAMBDA.TIMEOUT.MAX).optional()}).strict();var eb=s.object({appName:oe,type:qm,pattern:Qm.optional(),patternConfig:mp.optional(),owner:s.string().optional(),tags:s.record(s.string(),s.string()).optional(),vpcId:s.string().optional(),network:La.optional(),backup:ly.optional(),tunnel:dy.optional(),additionalNetworks:s.array(Ny).optional(),database:s.array(hy),s3:s.array(Cy),compute:s.array(Zy),dynamodb:s.array(xy).optional(),clickhouse:s.array(Ey).optional(),sqs:s.array(Ry).optional(),cdn:wy.optional(),customCodeBlocks:s.array(uy).optional(),additionalManagedImports:s.array(s.object({moduleSpecifier:s.string(),namedImports:s.array(s.string()),defaultImport:s.string().optional()}).strict()).optional()}).strict(),JD=s.object({name:oe,type:qm,pattern:Qm.optional(),patternTier:Yy.optional(),patternDomain:s.string().optional(),customDatabase:qy.optional(),customCompute:Qy.optional(),region:s.string().optional(),owner:s.string().optional(),includeDatabase:s.boolean().optional(),databaseName:s.string().min(1,d.DATABASE.NAME.REQUIRED).max(63,d.DATABASE.NAME.MAX_LENGTH).optional(),vpcId:s.string().optional(),network:ky.optional(),services:s.array(By).optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()}).strict(),YD=s.object({name:M,localResource:s.string().min(1),remoteApp:s.string().min(1),remoteResource:s.string().min(1),permission:s.enum(["read","write","read-write"]),remoteArn:s.string().optional()}).strict();function A(e){return JSON.stringify(e)}function jr(e){return e.map(A).join(", ")}var DA="import:SharedAlarmTopicArn";function Va(e="    "){return`
+`)}var zr=s.number().min(1,d.ALARM.PERCENTAGE.MIN).max(100,d.ALARM.PERCENTAGE.MAX),M$=s.number().min(1,d.ALARM.FREE_STORAGE_GIB.MIN),my=s.union([s.literal(!1),s.object({cpuThreshold:zr.optional(),memoryThreshold:zr.optional(),runningTasksMinimum:s.number().int().min(0).optional(),http5xxThreshold:zr.optional()}).strict()]),py=s.union([s.literal(!1),s.object({cpuThreshold:zr.optional(),freeStorageThresholdGiB:M$.optional(),connectionsThreshold:s.number().int().min(1).optional()}).strict()]),fy=s.union([s.literal(!1),s.object({errorRateThreshold:zr.optional(),durationThresholdPercent:zr.optional()}).strict()]);var tt=s.number().int(d.BACKUP_RETENTION.INTEGER).min(1,d.BACKUP_RETENTION.MIN).max(35,d.BACKUP_RETENTION.MAX),ei=s.number().int(d.MONITORING_INTERVAL.INTEGER).refine(e=>Ge(Yv,e),{message:d.MONITORING_INTERVAL.VALUES}),wa=s.number().int(d.DATABASE.PORT.INTEGER).min(1024,d.DATABASE.PORT.MIN).max(65535,d.DATABASE.PORT.MAX),j$=s.enum(Sa).describe(`Database type must be one of: ${Sa.join(", ")}`),U$=s.object({maxConnections:s.number().int(d.MAX_CONNECTIONS.INTEGER).min(1,d.MAX_CONNECTIONS.MIN).max(100,d.MAX_CONNECTIONS.MAX).optional(),maxIdleConnections:s.number().int(d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.INTEGER).min(0,d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MIN).max(100,d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MAX).optional(),connectionBorrowTimeout:s.number().int(d.PROXY_CONFIG.BORROW_TIMEOUT.INTEGER).min(1,d.PROXY_CONFIG.BORROW_TIMEOUT.MIN).max(3600,d.PROXY_CONFIG.BORROW_TIMEOUT.MAX).optional(),requireTLS:s.boolean().optional()}).strict().describe("RDS Proxy configuration"),L$=s.object({instanceType:s.string().optional(),availabilityZone:s.string().optional()}).strict().describe("Read replica configuration"),F$=s.object({automaticallyAfterDays:s.number().int(d.ROTATION.INTEGER).min(1,d.ROTATION.MIN).max(365,d.ROTATION.MAX).optional()}).strict().describe("Secret rotation configuration"),Oa=s.object({username:s.string().min(1,d.REQUIRED.USERNAME).max(63,d.USERNAME.MAX_LENGTH).optional(),secretRotation:F$.optional()}).strict().describe("Database credentials configuration"),Da=Ae(U$),za=Ae(L$),Z$=s.object({scaleWithWriter:s.boolean().optional(),enableDatabaseInsights:s.boolean().optional(),identifierSuffix:s.string().min(1,d.IDENTIFIER_SUFFIX.REQUIRED).max(50,d.IDENTIFIER_SUFFIX.MAX_LENGTH).optional(),availabilityZone:s.string().optional()}).strict().describe("Configuration for a single Aurora reader instance"),ti=s.object({enableDatabaseInsights:s.boolean().optional(),identifierSuffix:s.string().min(1,d.IDENTIFIER_SUFFIX.REQUIRED).max(50,d.IDENTIFIER_SUFFIX.MAX_LENGTH).optional(),availabilityZone:s.string().optional()}).strict().describe("Configuration for Aurora writer instance"),B$=s.object({count:s.number().int(d.READER.COUNT.INTEGER).min(0,d.READER.COUNT.MIN).max(15,d.READER.COUNT.MAX).optional(),instances:s.array(Z$).max(15,d.READER_INSTANCES.MAX).optional(),defaultEnableDatabaseInsights:s.boolean().optional()}).strict().refine(e=>!(e.count!==void 0&&e.instances!==void 0),{message:d.READER_INSTANCES.COUNT_OR_INSTANCES,path:["count"]}).describe("Aurora readers configuration"),ri=Ae(B$),G$=s.object({awsManaged:s.literal(!0)}).strict(),V$=s.object({useCMK:s.literal(!0)}).strict(),gy=s.union([G$,V$]),W$=s.object({mode:s.enum(["standard","advanced"]).optional(),encryptionKey:gy.optional()}).strict().describe("Database Insights configuration"),Ma=Ae(W$),ja=s.object({storageKey:gy.optional()}).strict().describe("Encryption configuration (DESTRUCTIVE to change storageKey)"),hy=s.object({name:M,type:j$,databaseName:s.string().min(1,d.REQUIRED.DATABASE_NAME),instanceType:s.string().optional(),allocatedStorage:s.number().optional(),multiAz:s.boolean().optional(),publiclyAccessible:s.boolean().optional(),databaseInsights:Ma.optional(),port:wa.optional(),deletionProtection:s.boolean().optional(),proxy:Da.optional(),credentials:Oa.optional(),readReplica:za.optional(),encryption:ja.optional(),writer:ti.optional(),readers:ri.optional(),backupRetention:tt.optional(),preferredMaintenanceWindow:s.string().optional(),monitoringInterval:ei.optional(),primaryRegion:s.string().optional(),secondaryRegions:s.array(s.string()).optional(),globalClusterIdentifier:s.string().optional(),enableGlobalWriteForwarding:s.boolean().optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional(),databaseEngine:s.enum(Pr).optional(),engineExpression:s.string().optional(),variableName:s.string().optional(),extraProperties:s.array(le).optional(),alarms:py.optional()}).strict(),Ua=s.object({appName:oe,nameProvidedByFlag:s.boolean().optional(),databaseName:s.string().min(1,d.REQUIRED.DATABASE_NAME).max(63,d.MAX_LENGTH.DATABASE_NAME).regex(Z.DATABASE_NAME,d.DATABASE_NAME),resourceName:M.optional(),connectionConfig:s.object({connectToCompute:s.array(s.string()).optional(),connectToServices:s.array(s.string()).optional()}).strict().optional(),databaseInsights:Ma.optional(),port:wa.optional(),proxy:Da.optional(),credentials:Oa.optional(),encryption:ja.optional(),deletionProtection:s.boolean().optional()}).strict(),vy={databaseType:s.literal("Instance"),instanceType:s.string().optional(),multiAz:s.boolean().optional(),readReplica:za.optional(),publiclyAccessible:s.boolean().optional(),backupRetention:tt.optional(),allocatedStorage:s.number().optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()},yy={databaseType:s.literal("Aurora"),writer:ti.optional(),readers:ri.optional(),backupRetention:tt.optional(),preferredMaintenanceWindow:s.string().optional(),monitoringInterval:ei.optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()},by={databaseType:s.literal("GlobalAurora"),primaryRegion:s.string().min(1,d.GLOBAL_AURORA.PRIMARY_REGION_REQUIRED),secondaryRegions:s.array(s.string()).optional(),globalClusterIdentifier:s.string().optional(),enableGlobalWriteForwarding:s.boolean().optional(),writer:ti.optional(),readers:ri.optional(),backupRetention:tt.optional(),preferredMaintenanceWindow:s.string().optional(),monitoringInterval:ei.optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()},_y=s.object({appName:oe,nameProvidedByFlag:s.boolean().optional(),databaseName:s.string().min(1,d.REQUIRED.DATABASE_NAME).max(63,d.MAX_LENGTH.DATABASE_NAME).regex(Z.DATABASE_NAME,d.DATABASE_NAME),resourceName:M.optional(),connectionConfig:s.object({connectToCompute:s.array(s.string()).optional(),connectToServices:s.array(s.string()).optional()}).strict().optional()}).strict(),Sy={databaseType:s.literal("ClickHouse"),instanceType:s.string().optional(),coldTier:s.union([s.object({mode:s.literal("s3")}).strict(),s.literal(!1)]).optional(),optimiseSchedule:s.union([s.string(),s.literal(!1)]).optional(),backupSchedule:s.union([s.string(),s.literal(!1)]).optional(),backupRetentionDays:tt.optional()},K$=Ua.extend(vy).strict(),H$=Ua.extend(yy).strict(),X$=Ua.extend(by).strict(),J$=_y.extend(Sy).strict(),G1=s.discriminatedUnion("databaseType",[K$,H$,X$,J$]),ep=Ua.extend({resourceName:M}).strict(),Y$=ep.extend(vy).strict(),q$=ep.extend(yy).strict(),Q$=ep.extend(by).strict(),eA=_y.extend({resourceName:M}).strict(),tA=eA.extend(Sy).strict(),V1=s.discriminatedUnion("databaseType",[Y$,q$,Q$,tA]),W1=s.object({appName:oe,databaseName:s.string().min(1,d.REQUIRED.DATABASE_NAME),maxConnections:s.number().int(d.MAX_CONNECTIONS.INTEGER).min(1,d.MAX_CONNECTIONS.MIN).max(100,d.MAX_CONNECTIONS.MAX).optional(),maxIdleConnections:s.number().int(d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.INTEGER).min(0,d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MIN).max(100,d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MAX).optional(),connectionBorrowTimeout:s.number().int(d.PROXY_CONFIG.BORROW_TIMEOUT.INTEGER).min(1,d.PROXY_CONFIG.BORROW_TIMEOUT.MIN).max(3600,d.PROXY_CONFIG.BORROW_TIMEOUT.MAX).optional(),requireTLS:s.boolean().optional(),nameProvidedByFlag:s.boolean().optional()}).strict(),rA=["S","N","B"],Pa=s.object({name:s.string(),type:s.enum(rA)}).strict(),xy=s.object({name:M,partitionKey:Pa,sortKey:Pa.optional(),globalSecondaryIndexes:s.array(s.object({indexName:s.string(),partitionKey:Pa,sortKey:Pa.optional()}).strict()).optional(),ttlAttribute:s.string().optional(),stream:s.boolean().optional(),variableName:s.string().optional(),extraProperties:s.array(le).optional()}).strict(),nA=s.object({mode:s.literal("s3")}).strict(),Ey=s.object({name:M,type:s.literal("ClickHouse"),databaseName:sy,instanceType:s.string().optional(),coldTier:s.union([nA,s.literal(!1)]).optional(),optimiseSchedule:s.union([s.string(),s.literal(!1)]).optional(),backupSchedule:s.union([s.string(),s.literal(!1)]).optional(),backupRetentionDays:tt.optional(),variableName:s.string().optional(),extraProperties:s.array(le).optional()}).strict();var iA=s.object({count:s.number().int(d.NAT_GATEWAY.INTEGER).min(0,d.NAT_GATEWAY.MIN).max(3,d.NAT_GATEWAY.MAX).optional()}).strict().describe("NAT gateway configuration"),$y=Ae(iA),tp=s.enum(["cloudwatch","s3"]),oA=s.object({destination:tp.optional(),retentionDays:s.number().int(d.RETENTION_DAYS.INTEGER).min(1,d.RETENTION_DAYS.MIN).max(365,d.RETENTION_DAYS.MAX).optional(),trafficType:s.enum(["ALL","ACCEPT","REJECT"]).optional()}).strict().describe("VPC flow log configuration"),Ay=Ae(oA),aA=s.object({s3:s.boolean().optional(),dynamodb:s.boolean().optional()}).strict().describe("Gateway VPC endpoints (FREE)"),sA=Ae(aA),cA=s.object({ecr:s.boolean().optional(),secretsManager:s.boolean().optional(),kms:s.boolean().optional(),cloudwatchLogs:s.boolean().optional(),ssm:s.boolean().optional(),sts:s.boolean().optional()}).strict().describe("Interface VPC endpoints (cost per hour)"),uA=Ae(cA),lA=s.object({gateway:sA.optional(),interface:uA.optional()}).strict().describe("VPC endpoints configuration"),Iy=Ae(lA),La=s.object({maxAzs:s.number().int(d.MAX_AZS.INTEGER).min(1,d.MAX_AZS.MIN).max(3,d.MAX_AZS.MAX).optional(),natGateways:$y.optional(),flowLogs:Ay.optional(),vpcEndpoints:Iy.optional(),cidrMask:s.number().int(d.CIDR_MASK.INTEGER).min(16,d.CIDR_MASK.MIN).max(28,d.CIDR_MASK.MAX).optional()}).strict(),Ty=s.string().min(1,d.REQUIRED.NETWORK_NAME).max(50,d.MAX_LENGTH.NETWORK_NAME).regex(Z.RESOURCE_NAME,d.RESOURCE_NAME),Ny=La.extend({name:Ty}).strict(),ky=Ae(La),Y1=s.object({appName:oe,networkName:Ty.optional(),maxAzs:s.number().int(d.MAX_AZS.INTEGER).min(1,d.MAX_AZS.MIN).max(3,d.MAX_AZS.MAX).optional(),natGateways:$y.optional(),flowLogs:Ay.optional(),vpcEndpoints:Iy.optional()}).strict(),dA=Z.CIDR,rp=s.string().regex(dA,d.CIDR),mA=s.object({kind:s.literal("database"),resource:s.string().min(1,d.REQUIRED.RESOURCE_REFERENCE),name:M,allowedFromCidrs:s.array(rp),access:s.enum(["read","write","readWrite"]).optional()}).strict(),pA=s.object({kind:s.literal("ecsService"),resource:s.string().min(1,d.REQUIRED.RESOURCE_REFERENCE),serviceName:s.string().min(1,d.REQUIRED.SERVICE_NAME),name:M,allowedFromCidrs:s.array(rp),port:Lt.optional()}).strict(),fA=s.discriminatedUnion("kind",[mA,pA]),q1=s.object({name:M,peerAppName:s.string().min(1,d.REQUIRED.APP_NAME),peerAccountId:s.string().regex(Z.AWS_ACCOUNT_ID,d.AWS_ACCOUNT_ID),peerRegion:s.string().min(1,d.VPC_PEER.REGION_REQUIRED).optional(),peerVpcId:s.string().regex(Z.VPC_ID,d.VPC_ID).optional(),peerVpcCidr:rp.optional(),peerRoleArn:s.string().regex(Z.ROLE_ARN,d.ROLE_ARN).optional(),peerRouteTableIds:s.array(s.string().min(1,d.VPC_PEER.ROUTE_TABLE_ID_REQUIRED)).optional(),localVpcName:s.string().min(1,d.REQUIRED.NETWORK_NAME).optional(),enableDnsResolution:s.boolean().optional()}).strict(),Q1=s.object({name:M,requesterAccountIds:s.array(s.string().regex(Z.AWS_ACCOUNT_ID,d.AWS_ACCOUNT_ID)).min(1,d.VPC_PEER.MIN_REQUESTER_ACCOUNTS),localVpcName:s.string().min(1,d.REQUIRED.NETWORK_NAME).optional(),publishToSsm:s.boolean().optional(),exposedResources:s.array(fA).optional()}).strict();var Fa=["storage","cdn","compute"],gA=s.object({sid:s.string().optional(),effect:s.enum(["Allow","Deny"]),principals:s.array(s.string()),actions:s.array(s.string()),resources:s.array(s.string()).optional(),conditions:s.record(s.string(),s.record(s.string(),s.union([s.string(),s.array(s.string())]))).optional()}).strict(),Cy=s.object({name:M,bucketName:s.string().optional(),publicReadAccess:s.boolean().optional(),websiteHosting:s.object({indexDocument:s.string(),errorDocument:s.string().optional()}).strict().optional(),backupVaultTier:s.enum(Be).optional(),versioned:s.boolean().optional(),encryption:s.enum(Or).optional(),kmsKeyArn:s.string().optional(),cors:s.array(s.object({allowedOrigins:s.array(s.string()),allowedMethods:s.array(s.string()),allowedHeaders:s.array(s.string()).optional(),exposedHeaders:s.array(s.string()).optional(),maxAge:s.number().optional()}).strict()).optional(),deployment:s.object({source:s.string(),prune:s.boolean().optional(),cacheControl:s.object({maxAge:s.number().optional(),immutable:s.boolean().optional()}).strict().optional()}).strict().optional(),retain:s.boolean().optional(),resourcePolicyStatements:s.array(gA).optional(),stackPlacement:s.enum(Fa).optional(),variableName:s.string().optional(),extraProperties:s.array(le).optional()}).strict().refine(e=>e.encryption!=="KMS"||!!e.kmsKeyArn,{message:d.KMS.KEY_REQUIRED}),oD=s.object({appName:oe,bucketName:ay,nameProvidedByFlag:s.boolean().optional(),storagePreset:s.enum(iy).optional(),publicReadAccess:s.boolean().optional(),websiteHosting:s.object({indexDocument:s.string(),errorDocument:s.string().optional()}).strict().optional(),backupVaultTier:s.enum(Be).optional(),versioned:s.boolean().optional(),encryption:s.enum(Or).optional(),kmsKeyArn:s.string().optional(),cors:s.array(s.object({allowedOrigins:s.array(s.string()),allowedMethods:s.array(s.string()),allowedHeaders:s.array(s.string()).optional(),exposedHeaders:s.array(s.string()).optional(),maxAge:s.number().optional()}).strict()).optional(),connectionConfig:s.object({connectToCompute:s.array(s.string()).optional(),connectToServices:s.array(s.string()).optional()}).strict().optional()}).strict().refine(e=>e.encryption!=="KMS"||!!e.kmsKeyArn,{message:d.KMS.KEY_REQUIRED,path:["kmsKeyArn"]});var np=s.enum(["DESTROY","RETAIN"]),Ry=s.object({name:M,queueType:s.enum(["standard","fifo"]).default("standard"),visibilityTimeout:s.number().int(d.SQS.VISIBILITY_TIMEOUT.INTEGER).min(0,d.SQS.VISIBILITY_TIMEOUT.MIN).max(43200,d.SQS.VISIBILITY_TIMEOUT.MAX).optional(),retentionPeriod:s.number().int(d.SQS.RETENTION_PERIOD.INTEGER).min(60,d.SQS.RETENTION_PERIOD.MIN).max(1209600,d.SQS.RETENTION_PERIOD.MAX).optional(),contentBasedDeduplication:s.boolean().optional(),removalPolicy:np.optional(),variableName:s.string().optional(),extraProperties:s.array(le).optional()}).strict();var Py=s.object({type:s.literal("basic-auth"),username:s.string().min(1),password:s.string().min(1)}).strict(),wy=s.object({name:M,defaultOriginRef:s.string(),behaviours:s.array(s.object({pathPattern:s.string(),originRef:s.string(),cachePolicy:s.enum(["CACHING_OPTIMIZED","CACHING_DISABLED"]).optional()}).strict()).optional(),customDomain:s.string().optional(),certificateArn:s.string().optional(),accessGate:s.union([s.literal(!1),Py]).optional(),extraProperties:s.array(le).optional()}).strict(),pD=s.object({appName:s.string(),name:M.optional(),defaultOriginRef:s.string(),behaviours:s.array(s.object({pathPattern:s.string(),originRef:s.string(),cachePolicy:s.enum(["CACHING_OPTIMIZED","CACHING_DISABLED"]).optional()}).strict()).optional(),customDomain:s.string().optional(),certificateArn:s.string().optional(),accessGate:s.union([s.literal(!1),Py]).optional(),nameProvidedByFlag:s.boolean().optional()}).strict();var hA=new Set(["t4g","c6g","c6gd","c6gn","c7g","c7gd","c7gn","r6g","r6gd","r7g","r7gd","m6g","m6gd","m7g","m7gd","a1","x2gd","im4gn","is4gen","i4g","hpc7g"]);function Za(e){let t=e.split(".")[0]??"";return hA.has(t)?"ARM":"STANDARD"}function ip(e,t){let n=Za(e);return n!==t?{valid:!1,message:`Instance type '${e}' requires ${n} architecture, but '${t}' AMI was specified. Use a ${n==="ARM"?"Graviton instance (t4g, c6g, r6g, m6g, etc.)":"Intel/AMD instance (t3, c5, r5, m5, etc.)"} instead.`}:{valid:!0}}var vA=1,bt=s.object({path:s.string(),context:s.string().min(1,"context cannot be empty").optional(),target:s.string().min(1,"target cannot be empty").optional(),buildArgs:s.record(s.string(),s.string()).optional()}).strict(),vD=bt.partial();var yA=s.object({name:s.string(),clusterName:s.string().optional(),docker:bt.optional(),containerPort:s.number().optional(),secrets:s.array(s.string()).optional(),ssmSecretsPath:s.string().optional(),importedSecretNames:s.array(s.string()).optional()}).strict(),bA=s.object({type:s.enum(["payload"]),name:s.string(),source:s.string()}).strict(),_A=s.object({repositoryName:s.string()}).strict(),SA=s.object({name:s.string(),secrets:s.array(s.string()).optional(),ssmSecretsPath:s.string().optional(),importedSecretNames:s.array(s.string()).optional()}).strict(),xA=s.object({templateHash:s.string(),synthTimestamp:s.string()}).strict(),EA=s.object({constructPath:s.string().max(512),group:s.string().max(128),resourceType:s.string().max(256)}).strict(),yD=s.object({version:s.literal(vA),generatedAt:s.string(),appName:s.string(),services:s.array(yA),lambdas:s.array(SA),pattern:bA.optional(),ecr:_A.optional(),stacks:s.record(s.string(),xA),resourceMap:s.record(s.string(),EA).optional()}).strict();function $A(e){return!(e.image!==void 0&&e.docker!==void 0)}var Dy=s.number().int(d.CAPACITY.MIN.INTEGER).min(Xm,d.GENERATOR_CAPACITY.MIN.MIN).max(Jm,d.GENERATOR_CAPACITY.MIN.MAX),zy=s.number().int(d.CAPACITY.MAX.INTEGER).min(Xm,d.GENERATOR_CAPACITY.MAX.MIN).max(Jm,d.GENERATOR_CAPACITY.MAX.MAX),Mr=s.number().int(d.LAMBDA.MEMORY.INTEGER).min(ey,d.LAMBDA.MEMORY.MIN).max(ty,d.LAMBDA.MEMORY.MAX).refine(e=>e===128||e%64===0,d.LAMBDA.MEMORY.MULTIPLE),My=s.string().regex(Z.LAMBDA_RUNTIME_IDENTIFIER,d.LAMBDA.RUNTIME),op=s.number().int(d.CPU.INTEGER).min(256,d.CPU.MIN).max(4096,d.CPU.MAX),Ga=s.number().int(d.CAPACITY.DESIRED.INTEGER).min(0,d.CAPACITY.DESIRED.MIN).max(wr,d.CAPACITY.DESIRED.MAX),ni=s.object({connectToDatabase:s.array(s.string()).optional()}).strict(),AA=s.object({minSize:s.number().int(d.CAPACITY.WARM_POOL.MIN_SIZE.INTEGER).min(0,d.CAPACITY.WARM_POOL.MIN_SIZE.MIN).max(ry,d.CAPACITY.WARM_POOL.MIN_SIZE.MAX).optional(),reuseOnScaleIn:s.boolean().optional()}).strict(),ap=s.object({instanceType:s.string().optional(),amiHardwareType:s.enum(Ia).optional(),minCapacity:s.number().int(d.CAPACITY.MIN.INTEGER).min(0,d.CAPACITY.MIN.MIN_0).max(wr,d.CAPACITY.MIN.MAX).optional(),maxCapacity:s.number().int(d.CAPACITY.MAX.INTEGER).min(1,d.CAPACITY.MAX.MIN_1).max(wr,d.CAPACITY.MAX.MAX).optional(),memoryLimitMiB:Qn(128).optional(),warmPool:AA.optional(),extraProperties:s.array(le).optional()}).strict().superRefine((e,t)=>{if(!e.instanceType||!e.amiHardwareType)return;let n=ip(e.instanceType,e.amiHardwareType);n.valid||t.addIssue({code:"custom",message:n.message??d.ARCHITECTURE_MISMATCH,path:["instanceType"]})}).superRefine((e,t)=>{e.minCapacity===0&&!e.warmPool&&t.addIssue({code:"custom",message:d.CAPACITY.WARM_POOL_REQUIRED,path:["minCapacity"]}),e.warmPool?.minSize!==void 0&&e.maxCapacity!==void 0&&e.warmPool.minSize>e.maxCapacity&&t.addIssue({code:"custom",message:d.CAPACITY.WARM_POOL.MIN_SIZE_EXCEEDS_MAX_CAPACITY,path:["warmPool","minSize"]})}),IA=s.enum(Xn).describe(`Compute type must be one of: ${Xn.join(", ")}`),sp=s.enum(Rr).describe(`ECS capacity provider must be one of: ${Rr.join(", ")}`),cp=s.string().refine(e=>Ge(Na,e),{message:d.INSTANCE_TYPE}),jy=s.object({sourceType:s.enum(["sqs","dynamodb","eventbridge"]),sourceRef:s.string().describe("Name of the source resource"),batchSize:s.number().int(d.BATCH_SIZE.INTEGER).min(1,d.BATCH_SIZE.MIN).max(1e4,d.BATCH_SIZE.MAX).optional(),startingPosition:s.enum(["TRIM_HORIZON","LATEST"]).optional(),maxBatchingWindow:s.number().int(d.BATCHING_WINDOW.INTEGER).min(0,d.BATCHING_WINDOW.MIN).max(300,d.BATCHING_WINDOW.MAX).optional(),reportBatchItemFailures:s.boolean().optional()}).strict(),TA=s.object({name:s.string().min(1,d.REQUIRED.CONTAINER_NAME).optional(),image:s.string().optional(),port:Lt.optional(),environment:Dr.optional(),secretsImport:cy.optional(),command:s.array(s.string()).optional(),entryPoint:s.array(s.string()).optional(),essential:s.boolean().optional(),healthCheck:s.object({command:s.array(s.string()),interval:s.number().int(d.HEALTH_CHECK.INTERVAL.INTEGER).min(5,d.HEALTH_CHECK.INTERVAL.MIN).max(300,d.HEALTH_CHECK.INTERVAL.MAX).optional(),timeout:s.number().int(d.HEALTH_CHECK.TIMEOUT.INTEGER).min(2,d.HEALTH_CHECK.TIMEOUT.MIN).max(60,d.HEALTH_CHECK.TIMEOUT.MAX).optional(),retries:s.number().int(d.HEALTH_CHECK.RETRIES.INTEGER).min(1,d.HEALTH_CHECK.RETRIES.MIN).max(10,d.HEALTH_CHECK.RETRIES.MAX).optional(),startPeriod:s.number().int(d.HEALTH_CHECK.START_PERIOD.INTEGER).min(0,d.HEALTH_CHECK.START_PERIOD.MIN).max(300,d.HEALTH_CHECK.START_PERIOD.MAX).optional()}).strict().optional(),ssmSecrets:s.array(s.string().regex(Z.SECRET_NAME,d.SECRET_NAME)).optional(),extraProperties:s.array(le).optional()}).strict(),Uy=s.string().min(1,d.REQUIRED.SERVICE_NAME).max(255,d.MAX_LENGTH.SERVICE_NAME).regex(Z.ECS_SERVICE_NAME,d.ECS_SERVICE_NAME),Ly=s.object({domain:s.string().optional(),loadBalancer:s.union([s.literal(!1),s.enum($a)]).optional(),directAccess:s.boolean().optional(),extraProperties:s.array(le).optional()}).strict().refine(e=>!(e.directAccess&&e.domain),{message:d.DIRECT_ACCESS.NO_DOMAIN,path:["directAccess"]}).refine(e=>!(e.directAccess&&typeof e.loadBalancer=="string"),{message:d.DIRECT_ACCESS.NO_LOAD_BALANCER}).describe("Cluster-level configuration"),Ba=s.object({path:s.string().optional(),host:s.string().optional(),priority:s.number().int(d.PRIORITY.INTEGER).min(1,d.PRIORITY.MIN).max(5e4,d.PRIORITY.MAX).optional(),healthCheckPath:s.string().optional()}).strict().describe("Path/host-based routing configuration"),NA=s.object({desiredCount:Ga.optional(),minCapacity:s.number().int(d.CAPACITY.MIN.INTEGER).min(0,d.CAPACITY.MIN.MIN_0).max(wr,d.CAPACITY.MIN.MAX).optional(),maxCapacity:s.number().int(d.CAPACITY.MAX.INTEGER).min(1,d.CAPACITY.MAX.MIN_1).max(wr,d.CAPACITY.MAX.MAX).optional(),scalingType:s.enum(Aa).optional()}).strict().refine(Ut.check,Ut.params).describe("ECS service scaling configuration"),Fy=s.object({name:Uy,docker:bt.optional(),needsDatabaseConnection:s.boolean().optional(),needsStorageConnection:s.boolean().optional(),needsMessagingConnection:s.boolean().optional(),image:s.string().optional(),containers:s.array(TA).optional(),routing:s.union([Ba,s.array(Ba).min(1)]).optional(),cpu:op.optional(),memoryLimitMiB:Qn(512).optional(),desiredCount:Ga.optional(),scaling:Ae(NA).optional(),capacityProvider:sp,ec2Config:ap.optional(),ssmSecretsPath:s.string().regex(Z.SSM_PATH,d.SSM_PATH).optional(),extraProperties:s.array(le).optional(),alarms:my.optional()}).strict().superRefine((e,t)=>{$A(e)||t.addIssue({code:"custom",path:["docker"],message:d.IMAGE_DOCKER_MUTEX})}).describe("Configuration for a service in an ECS cluster"),Zy=s.object({name:M,type:IA,needsConnection:s.boolean(),connectedDatabase:s.array(s.string()).optional(),connectedStorage:s.array(s.string()).optional(),connectedMessaging:s.array(s.string()).optional(),cluster:Ly.optional(),services:s.array(Fy).optional(),docker:bt.partial().optional(),deployment:s.enum(xa).optional(),codePath:s.string().optional(),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(ka,d.LAMBDA.TIMEOUT.MIN).max(Ca,d.LAMBDA.TIMEOUT.MAX).optional(),memory:Mr.optional(),handler:s.string().optional(),runtime:My.optional(),environment:Dr.optional(),secrets:Dr.optional(),eventSources:s.array(jy).optional(),functionUrl:s.object({authType:s.enum(qn)}).strict().optional(),description:s.string().optional(),scheduleExpression:s.string().optional(),architecture:s.enum(Ea).optional(),ephemeralStorageSize:s.number().int(d.EPHEMERAL_STORAGE.INTEGER).min(512,d.EPHEMERAL_STORAGE.MIN).max(10240,d.EPHEMERAL_STORAGE.MAX).optional(),functionName:s.string().optional(),ssmSecrets:s.array(s.string()).optional(),ssmSecretsPath:s.string().optional(),alarms:fy.optional(),instanceType:cp.optional(),enableSSH:s.boolean().optional(),keyName:s.string().optional(),userData:s.string().optional(),securityGroups:s.array(s.string()).optional(),variableName:s.string().optional(),extraProperties:s.array(le).optional()}).strict().superRefine((e,t)=>{if(e.type==="ecs"&&e.services)for(let n=0;n<e.services.length;n++){let i=e.services[n];i?.ec2Config?.instanceType&&!i.ec2Config.amiHardwareType&&Za(i.ec2Config.instanceType)!=="ARM"&&t.addIssue({code:"custom",message:`Service '${i.name??n}' uses instance type '${i.ec2Config.instanceType}' (x86), which requires Docker images built for linux/amd64. The default build targets linux/arm64 (Graviton). Use a Graviton instance type (t4g, c6g, r6g, m6g, etc.) or set amiHardwareType: "STANDARD" to acknowledge x86.`,path:["services",n,"ec2Config","instanceType"]})}e.type==="lambda"&&e.deployment==="container"&&e.architecture==="X86_64"&&t.addIssue({code:"custom",message:"Lambda architecture 'X86_64' requires Docker images built for linux/amd64, but the default build targets linux/arm64. Use 'ARM_64' for Graviton Lambdas (recommended) or ensure your build pipeline targets linux/amd64.",path:["architecture"]})}),TD=s.object({appName:oe,clusterName:M,containerPort:Lt,nameProvidedByFlag:s.boolean().optional(),ecrRepository:s.string().optional(),capacityProvider:sp.optional(),useAppEcr:s.boolean().optional(),desiredCount:Ga.optional(),cpu:op.optional(),memoryLimitMiB:Qn(512).optional(),minCapacity:Dy.optional(),maxCapacity:zy.optional(),ec2Config:ap.optional(),connectionConfig:ni.optional()}).strict().refine(Ut.check,Ut.params),ND=s.object({appName:oe,functionName:M,nameProvidedByFlag:s.boolean().optional(),lambdaType:s.enum(["basic","web","custom"]).optional(),ecrRepository:s.string().optional(),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(ka,d.LAMBDA.TIMEOUT.MIN).max(Ca,d.LAMBDA.TIMEOUT.MAX).optional(),memory:Mr.optional(),enableFunctionUrl:s.boolean().optional(),description:s.string().optional(),enableCors:s.boolean().optional(),corsOrigins:s.string().optional(),corsHeaders:s.string().optional(),corsMethods:s.array(s.enum(ny)).optional(),corsCredentials:s.boolean().optional(),connectionConfig:ni.optional()}).strict(),kD=s.object({appName:oe,instanceName:M,nameProvidedByFlag:s.boolean().optional(),instanceType:cp.optional(),enableSSH:s.boolean().optional(),minCapacity:Dy.optional(),maxCapacity:zy.optional(),connectionConfig:ni.optional()}).strict().refine(Ut.check,Ut.params),CD=s.object({appName:oe,clusterName:M,serviceName:Uy,capacityProvider:sp,containerPort:Lt.optional(),cpu:op.optional(),memoryLimitMiB:Qn(512).optional(),desiredCount:Ga.optional(),ec2Config:ap.optional(),routing:s.union([Ba,s.array(Ba).min(1)]).optional(),docker:bt.partial().optional(),nameProvidedByFlag:s.boolean().optional(),connectionConfig:ni.optional()}).strict(),up=s.object({appName:oe,computeName:M,nameProvidedByFlag:s.boolean().optional(),connectionConfig:ni.optional()}).strict(),kA=up.extend({type:s.literal("ecs"),cluster:Ly.optional(),services:s.array(Fy).min(1,d.SERVICE.MIN_REQUIRED),docker:bt.partial().optional()}).strict().refine(e=>{let t=e.services.filter(n=>n.containers?.some(i=>i.port));return t.length>1?t.every(n=>(Array.isArray(n.routing)?n.routing:n.routing?[n.routing]:[]).some(i=>i.path||i.host)):!0},{message:d.SERVICE.ROUTING_REQUIRED}).refine(e=>{let t=e.services.map(n=>n.name);return new Set(t).size===t.length},{message:d.SERVICE.UNIQUE_WITHIN_CLUSTER}),CA=up.extend({type:s.literal("lambda"),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(ka,d.LAMBDA.TIMEOUT.MIN).max(Ca,d.LAMBDA.TIMEOUT.MAX).optional(),memory:Mr.optional(),handler:s.string().optional(),runtime:My.optional(),environment:Dr.optional(),secrets:Dr.optional(),description:s.string().optional(),functionUrl:s.union([s.object({authType:s.enum(qn).optional()}).strict(),s.literal(!1)]).optional(),eventSources:s.array(jy).optional()}).strict(),RA=up.extend({type:s.literal("ec2"),instanceType:cp.optional(),enableSSH:s.boolean().optional(),keyName:s.string().optional(),userData:s.string().optional(),securityGroups:s.array(s.string()).optional()}).strict(),RD=s.discriminatedUnion("type",[kA,CA,RA]),Oy=s.object({path:s.string().min(1,d.REQUIRED.ROUTING_PATH),priority:s.number().int(d.PRIORITY.INTEGER).min(1,d.PRIORITY.MIN).max(5e4,d.PRIORITY.MAX).optional()}).strict(),By=s.object({name:s.string().min(1,d.REQUIRED.SERVICE_NAME).max(255,d.MAX_LENGTH.SERVICE_NAME).regex(Z.RESOURCE_NAME,d.RESOURCE_NAME),serviceType:s.enum(["web","worker"]).optional(),docker:bt.partial().optional(),containerPort:Lt.optional(),needsDatabaseConnection:s.boolean().optional(),routing:s.union([Oy,s.array(Oy).min(1)]).optional()}).strict().superRefine((e,t)=>{e.serviceType==="worker"&&(e.containerPort!==void 0&&t.addIssue({code:"custom",path:["containerPort"],message:"Worker services are not reachable inbound; remove containerPort."}),e.routing!==void 0&&t.addIssue({code:"custom",path:["routing"],message:"Worker services have no ALB route; remove routing."}))}),Gy=s.object({appName:oe,instanceType:s.string().optional()}).strict();var lp=s.object({memorySize:Mr.optional(),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(1,d.LAMBDA.TIMEOUT.MIN).max(900,d.LAMBDA.TIMEOUT.MAX).optional(),ephemeralStorageSize:s.number().int(d.EPHEMERAL_STORAGE.INTEGER).min(512,d.EPHEMERAL_STORAGE.MIN).max(10240,d.EPHEMERAL_STORAGE.MAX).optional()}).strict(),Vy=s.object({type:s.enum(Hm).optional(),databaseName:s.string().optional(),databaseEngine:s.enum(Pr).optional(),deletionProtection:s.boolean().optional(),backupRetention:tt.optional(),port:wa.optional(),publiclyAccessible:s.boolean().optional(),allowedIpCidr:s.string().optional(),instanceType:s.string().optional(),allocatedStorage:s.number().int(d.ALLOCATED_STORAGE.INTEGER).min(20,d.ALLOCATED_STORAGE.MIN).max(65536,d.ALLOCATED_STORAGE.MAX).optional(),multiAz:s.boolean().optional(),readReplica:za.optional(),writer:ti.optional(),readers:ri.optional(),allowVpcAccess:s.boolean().optional(),monitoringInterval:ei.optional(),preferredMaintenanceWindow:s.string().optional(),databaseInsights:Ma.optional(),proxy:Da.optional(),credentials:Oa.optional(),encryption:ja.optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()}).strict(),Wy=s.object({server:lp.optional(),imageOptimisation:lp.optional(),revalidation:lp.optional()}).strict(),dp=s.object({versioned:s.boolean().optional()}).strict(),Ky=s.object({assets:dp.optional(),cache:dp.optional(),media:dp.optional()}).strict(),PA=s.object({visibilityTimeout:s.number().int(d.SQS.VISIBILITY_TIMEOUT.INTEGER).min(0,d.SQS.VISIBILITY_TIMEOUT.MIN).max(43200,d.SQS.VISIBILITY_TIMEOUT.MAX).optional(),messageRetentionPeriod:s.number().int(d.SQS.RETENTION_PERIOD.INTEGER).min(60,d.SQS.RETENTION_PERIOD.MIN).max(1209600,d.SQS.RETENTION_PERIOD.MAX).optional(),maxMessageSize:s.number().int(d.MAX_MESSAGE_SIZE.INTEGER).min(1024,d.MAX_MESSAGE_SIZE.MIN).max(262144,d.MAX_MESSAGE_SIZE.MAX).optional(),deadLetterQueue:s.union([s.literal(!1),s.object({enabled:s.boolean().optional(),maxReceiveCount:s.number().int(d.DLQ.MAX_RECEIVE_COUNT.INTEGER).min(1,d.DLQ.MAX_RECEIVE_COUNT.MIN).max(1e3,d.DLQ.MAX_RECEIVE_COUNT.MAX).optional()}).strict()]).optional()}).strict(),Hy=s.object({revalidationQueue:PA.optional()}).strict(),Xy=s.object({domainNames:s.array(s.string()).optional(),certificateArn:s.string().optional()}).strict(),Jy=s.record(s.string().regex(Z.ENV_VAR_NAME,d.ENV_VAR_NAME),s.string()).optional(),wA=s.object({type:s.literal("payload"),name:s.string().min(1,d.REQUIRED.PATTERN_NAME),domain:s.string().optional(),database:Vy.optional(),compute:Wy.optional(),storage:Ky.optional(),messaging:Hy.optional(),cdn:Xy.optional(),environment:Jy}).strict(),OA=s.object({type:s.literal("nextjs"),name:s.string().min(1,d.REQUIRED.PATTERN_NAME),domain:s.string().optional(),database:Vy.optional(),compute:Wy.optional(),storage:Ky.optional(),messaging:Hy.optional(),cdn:Xy.optional(),environment:Jy}).strict(),mp=s.discriminatedUnion("type",[wA,OA]),Yy=s.enum(["lightweight","standard","resilient","custom"]),qy=s.object({type:s.enum(Hm),instanceType:s.string().optional(),backupRetention:tt.optional(),deletionProtection:s.boolean().optional(),encryption:s.union([s.object({useCMK:s.literal(!0)}).strict(),s.literal(!1)]).optional()}).strict(),Qy=s.object({memorySize:Mr.optional(),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(1,d.LAMBDA.TIMEOUT.MIN).max(900,d.LAMBDA.TIMEOUT.MAX).optional()}).strict();var eb=s.object({appName:oe,type:qm,pattern:Qm.optional(),patternConfig:mp.optional(),owner:s.string().optional(),tags:s.record(s.string(),s.string()).optional(),vpcId:s.string().optional(),network:La.optional(),backup:ly.optional(),tunnel:dy.optional(),additionalNetworks:s.array(Ny).optional(),database:s.array(hy),s3:s.array(Cy),compute:s.array(Zy),dynamodb:s.array(xy).optional(),clickhouse:s.array(Ey).optional(),sqs:s.array(Ry).optional(),cdn:wy.optional(),customCodeBlocks:s.array(uy).optional(),additionalManagedImports:s.array(s.object({moduleSpecifier:s.string(),namedImports:s.array(s.string()),defaultImport:s.string().optional()}).strict()).optional()}).strict(),JD=s.object({name:oe,type:qm,pattern:Qm.optional(),patternTier:Yy.optional(),patternDomain:s.string().optional(),customDatabase:qy.optional(),customCompute:Qy.optional(),region:s.string().optional(),owner:s.string().optional(),includeDatabase:s.boolean().optional(),databaseName:s.string().min(1,d.DATABASE.NAME.REQUIRED).max(63,d.DATABASE.NAME.MAX_LENGTH).optional(),vpcId:s.string().optional(),network:ky.optional(),services:s.array(By).optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()}).strict(),YD=s.object({name:M,localResource:s.string().min(1),remoteApp:s.string().min(1),remoteResource:s.string().min(1),permission:s.enum(["read","write","read-write"]),remoteArn:s.string().optional()}).strict();function A(e){return JSON.stringify(e)}function jr(e){return e.map(A).join(", ")}var DA="import:SharedAlarmTopicArn";function Va(e="    "){return`
 ${e}...(getConfig().environment === "production" ? { alertsTopic: ${A(DA)} } : {}),`}function tb(e){if(typeof e!="object"||e===null)return!1;let t=e;return typeof t.__identifier=="string"||typeof t.__expression=="string"||typeof t.__call=="string"}function Ur(e){return e.replace(/[^a-zA-Z0-9]/g," ").split(" ").map((t,n)=>n===0?t.charAt(0).toLowerCase()+t.slice(1):t.charAt(0).toUpperCase()+t.slice(1)).join("")}function Q(e){return e.variableName??Ur(e.name)}function Wa(e,t){for(let n of e.database)if(n.name===t&&n.variableName)return n.variableName;for(let n of e.s3)if(n.name===t&&n.variableName)return n.variableName;for(let n of e.compute)if(n.name===t&&n.variableName)return n.variableName;for(let n of e.dynamodb??[])if(n.name===t&&n.variableName)return n.variableName;for(let n of e.sqs??[])if(n.name===t&&n.variableName)return n.variableName;return Ur(t)}function zA(e){let t=Object.entries(e);return t.length===0?!0:t.length>1?!1:t.every(([,n])=>typeof n=="string"||typeof n=="number"||typeof n=="boolean"||n===null)}function B(e,t="    "){if(e==null)return"undefined";if(typeof e=="string")return JSON.stringify(e);if(typeof e=="number"||typeof e=="boolean")return String(e);if(tb(e)){if("__identifier"in e)return e.__identifier;if("__expression"in e)return e.__expression;if("__call"in e)return e.__call}if(Array.isArray(e))return`[${e.map(n=>B(n,t)).join(", ")}]`;if(typeof e=="object"){let n=Object.entries(e).filter(([,o])=>o!==void 0);if(zA(e)){let o=n.map(([a,c])=>`${a}: ${B(c,t)}`).join(", ");return o?`{ ${o} }`:"{}"}let i=t+"  ",r=n.map(([o,a])=>`${i}${o}: ${B(a,i)}`).join(`,
 `);return r?`{
 ${r}
@@ -335,7 +335,7 @@ ${o}`)}throw r}}function hi(e,t){let n=U.createSourceFile("infrastructure.ts",e,
 `;return i.push(`Custom code from line ${t.originalLine} could not be positioned. Added at end of file.`),e+`
 `+r+t.sourceText}function Gp(e,t,n){if(!t||t.length===0)return{content:e,success:!0};try{let i=Yb(e),r=ot(i),o=[],a=gT(t),c=e;for(let u of a){let l=yT(i,r,u,n,o);c=hT(c,u,l,o)}return{content:c,success:!0,warnings:o.length>0?o:void 0}}catch(i){return e_(i,e)}}function vT(e,t,n,i){if(!t.afterManagedResource)return null;let r=t.afterManagedResource,o=(r.name&&n?.get(r.name))??r.name,a=e.find(u=>u.type===r.type&&u.resourceName===o);if(a)return a.endPos;let c=e.filter(u=>u.type===r.type&&u.isManaged);return c.length===1?c[0].endPos:(i&&i.push(`Resource ${Zp(t.afterManagedResource.type,t.afterManagedResource.name)} not found. Custom code may be orphaned.`),null)}function yT(e,t,n,i,r){switch(n.position){case"before-imports":return 0;case"after-imports":return Jb(t,"import")?.endPos??0;case"after-app-init":return Fp(t,"app-init")?.endPos??null;case"after-tags":return Fp(t,"tags")?.endPos??null;case"after-resource":return vT(t,n,i,r);case"end-of-file":return e.getEnd();default:return null}}function bT(e,t,n){let i=Qb(e,t),r=n.sourceText;return r=qb(i,r)+r,r.endsWith(`
 `)||(r+=`
-`),r}import*as Et from"typescript";var vi=s.enum(["A","AAAA","CNAME","MX","TXT","NS","SRV","CAA"]),_T=s.object({name:s.string(),type:vi,ttl:s.number().optional(),value:s.string(),priority:s.number().optional(),weight:s.number().optional(),port:s.number().optional()}).strict(),ST=s.object({subdomain:s.string(),targetAccount:s.string(),auto:s.boolean()}).strict(),xT=s.object({domainName:s.string(),subjectAlternativeNames:s.array(s.string())}).strict(),i4=s.object({origin:s.string(),ttl:s.number(),records:s.array(_T),delegations:s.array(ST),certificates:s.array(xT)}).strict(),r_=Object.freeze({ORIGIN:"$ORIGIN",TTL:"$TTL",FJALL_DELEGATE:"$FJALL-DELEGATE",FJALL_CERT:"$FJALL-CERT"});var n_=s.discriminatedUnion("kind",[s.object({kind:s.literal("ecs"),appName:s.string()}).strict(),s.object({kind:s.literal("cdn"),appName:s.string()}).strict(),s.object({kind:s.literal("bucket"),bucketName:s.string()}).strict(),s.object({kind:s.literal("custom"),dnsName:s.string(),hostedZoneId:s.string()}).strict()]),ET=n_.options.map(e=>e.shape.kind.value),Vp=s.enum(["A","AAAA"]),Wp=s.enum(["route53","external-delegated","external-records"]),$T=s.object({kind:s.literal("standard"),type:s.enum(["A","AAAA","CNAME","MX","TXT","NS","SRV","CAA"]),name:s.string(),value:s.union([s.string(),s.array(s.string())]),ttl:s.number().int().positive().optional()}).strict(),AT=s.object({kind:s.literal("alias"),type:Vp,name:s.string(),target:n_}).strict(),IT=s.discriminatedUnion("kind",[$T,AT]),TT=s.object({domainName:s.string(),subjectAlternativeNames:s.array(s.string()).optional(),transparencyLogging:s.boolean().optional()}).strict(),NT=s.object({subdomain:s.string(),toAccount:s.string(),auto:s.boolean().optional()}).strict(),s4=s.object({zoneName:s.string(),registrar:Wp,hostedZoneId:s.string().optional(),delegatedSubdomain:s.string().optional(),records:s.array(IT),certificates:s.array(TT),delegations:s.array(NT)}).strict().refine(e=>e.registrar!=="external-delegated"||e.delegatedSubdomain!==void 0,{message:"external-delegated requires delegatedSubdomain"}).refine(e=>e.registrar!=="external-records"||e.delegations.length===0,{message:"external-records forbids delegations"});var p4=Wp.options,f4=vi.options,g4=Vp.options;function ms(e,t){let n=[Ap(e),$p(e),Ep(e)];if(Np(e))n.push(ns(e),is(e));else{let r=Tp(e);n.push(is(e),gp(e),hp(e),_p(e),Sp(e),xp(e),bp(e,r),Ip(e))}let i=n.join("");if(e.customCodeBlocks&&e.customCodeBlocks.length>0){let r=Gp(i,e.customCodeBlocks,t?.resourceMapping);return r.success?Ee(r.content):$e(new Error(`Custom code injection failed: ${r.error??"unknown error"}`))}return Ee(i)}var V4=cb("standard");var g6=new Set(vi.options);var x6=JSON.stringify({compilerOptions:{target:"ES2020",module:"commonjs",lib:["es2020","dom"],declaration:!0,strict:!0,noImplicitAny:!0,strictNullChecks:!0,noImplicitThis:!0,alwaysStrict:!0,noUnusedLocals:!1,noUnusedParameters:!1,noImplicitReturns:!0,noFallthroughCasesInSwitch:!1,inlineSourceMap:!0,inlineSources:!0,experimentalDecorators:!0,strictPropertyInitialization:!1,typeRoots:["./node_modules/@types"]},exclude:["node_modules","cdk.out"]},null,2)+`
-`,E6=JSON.stringify({app:"npx ts-node --prefer-ts-exts --transpile-only infrastructure.ts",assetMetadata:!1,pathMetadata:!1,versionReporting:!1,watch:{include:["**"],exclude:["README.md","cdk*.json","**/*.d.ts","**/*.js","tsconfig.json","package*.json","yarn.lock","node_modules","test"]},context:{"@aws-cdk/aws-lambda:recognizeLayerVersion":!0,"@aws-cdk/core:checkSecretUsage":!0,"@aws-cdk/core:target-partitions":["aws","aws-cn"],"@aws-cdk-containers/ecs-service-extensions:enableDefaultLogDriver":!0,"@aws-cdk/aws-ec2:uniqueImdsv2TemplateName":!0,"@aws-cdk/aws-ecs:arnFormatIncludesClusterName":!0,"@aws-cdk/aws-iam:minimizePolicies":!0,"@aws-cdk/core:validateSnapshotRemovalPolicy":!0,"@aws-cdk/aws-codepipeline:crossAccountKeyAliasStackSafeResourceName":!0,"@aws-cdk/aws-s3:createDefaultLoggingPolicy":!0,"@aws-cdk/aws-sns-subscriptions:restrictSqsDescryption":!0,"@aws-cdk/aws-apigateway:disableCloudWatchRole":!0,"@aws-cdk/core:enablePartitionLiterals":!0,"@aws-cdk/aws-events:eventsTargetQueueSameAccount":!0,"@aws-cdk/aws-iam:standardizedServicePrincipals":!0,"@aws-cdk/aws-ecs:disableExplicitDeploymentControllerForCircuitBreaker":!0,"@aws-cdk/aws-iam:importedRoleStackSafeDefaultPolicyName":!0,"@aws-cdk/aws-s3:serverAccessLogsUseBucketPolicy":!0,"@aws-cdk/aws-route53-patters:useCertificate":!0,"@aws-cdk/customresources:installLatestAwsSdkDefault":!1,"@aws-cdk/aws-rds:databaseProxyUniqueResourceName":!0,"@aws-cdk/aws-codedeploy:removeAlarmsFromDeploymentGroup":!0,"@aws-cdk/aws-apigateway:authorizerChangeDeploymentLogicalId":!0,"@aws-cdk/aws-ec2:launchTemplateDefaultUserData":!0,"@aws-cdk/aws-secretsmanager:useAttachedSecretResourcePolicyForSecretTargetAttachments":!0,"@aws-cdk/aws-redshift:columnId":!0,"@aws-cdk/aws-stepfunctions-tasks:enableEmrServicePolicyV2":!0,"@aws-cdk/aws-ec2:restrictDefaultSecurityGroup":!0,"@aws-cdk/aws-apigateway:requestValidatorUniqueId":!0,"@aws-cdk/aws-kms:aliasNameRef":!0,"@aws-cdk/aws-autoscaling:generateLaunchTemplateInsteadOfLaunchConfig":!0,"@aws-cdk/core:includePrefixInUniqueNameGeneration":!0,"@aws-cdk/aws-opensearchservice:enableOpensearchMultiAzWithStandby":!0}},null,2)+`
-`;import{join as LT,dirname as aU,normalize as FT}from"node:path";var ZT="fjall";function BT(e,t){let n=FT(e);if(n.includes("..")||n.startsWith("/"))throw new Error(`Invalid ${t}: path traversal is not allowed`)}function i_(e){return BT(e,"app name"),LT(ZT,e,GT)}var GT="infrastructure.ts";function VT(e,t,n){let i=e.root?o_.join(e.root,t):t;try{if(qr.existsSync(i)){let r=`${i}.bak`,o=`${r}.tmp`;qr.writeFileSync(o,n),qr.renameSync(o,r)}return Ee(void 0)}catch(r){let o=ct(r);return ya.warn("Generator",`Failed to create backup of ${t}`,{error:tn(o.message)}),$e(o)}}function WT(e,t){try{let n=hi(e,{extractCustomCode:!0}),i=gi(n,t,{skipValidation:!0});return n.customCodeBlocks?.length&&(i.customCodeBlocks=n.customCodeBlocks),Ee({parsed:n,plan:i})}catch(n){return $e(ct(n))}}function KT(e,t){let n=WT(e,t);if(!n.success)throw new Error(`Failed to parse infrastructure: ${n.error.message}`,{cause:n.error});return n.data}function HT(e,t,n){let i=e.safeParse(t);if(!i.success)throw new Error(`Invalid ${n} generator options:
-${Ra(i.error)}`);return i.data}function XT(e,t){let n=i_(t),i=e.read(n)?.toString();if(!i)throw new Error(`App '${t}' not found. Expected infrastructure.ts at: ${n}`);return{path:n,content:i}}async function a_(e,t,n,i,r){let o=HT(t,n,i),{path:a,content:c}=XT(e,o.appName),{plan:u}=KT(c,o.appName),l=await r({tree:e,validated:o,plan:u,infrastructurePath:a,content:c}),m=JT(e,a,c,l);if(!m.success)throw new Error(m.error.message,{cause:m.error})}function JT(e,t,n,i){let r=ms(i);if(!r.success)return $e(r.error);let o=VT(e,t,n);return o.success?(e.write(t,r.data),Ee(void 0)):$e(new Error(`Failed to create backup: ${o.error.message}`))}async function YT(e,t){await a_(e,Gy,t,"tunnel",({validated:n,plan:i})=>{if(i.tunnel&&typeof i.tunnel=="object")throw new Error("Tunnel is already enabled for this application");if(!(i.database.length>0))throw new Error("No databases found \u2014 tunnel requires at least one relational database");let r=n.instanceType?{instanceType:n.instanceType}:{};return{...i,tunnel:r}})}var vU=YT;export{vU as default,YT as tunnelGenerator};
+`),r}import*as Et from"typescript";var vi=s.enum(["A","AAAA","CNAME","MX","TXT","NS","SRV","CAA"]),_T=s.object({name:s.string(),type:vi,ttl:s.number().optional(),value:s.string(),priority:s.number().optional(),weight:s.number().optional(),port:s.number().optional()}).strict(),ST=s.object({subdomain:s.string(),targetAccount:s.string(),auto:s.boolean()}).strict(),xT=s.object({domainName:s.string(),subjectAlternativeNames:s.array(s.string())}).strict(),i4=s.object({origin:s.string(),ttl:s.number(),records:s.array(_T),delegations:s.array(ST),certificates:s.array(xT)}).strict(),r_=Object.freeze({ORIGIN:"$ORIGIN",TTL:"$TTL",FJALL_DELEGATE:"$FJALL-DELEGATE",FJALL_CERT:"$FJALL-CERT"});var n_=s.discriminatedUnion("kind",[s.object({kind:s.literal("ecs"),appName:s.string()}).strict(),s.object({kind:s.literal("cdn"),appName:s.string()}).strict(),s.object({kind:s.literal("bucket"),bucketName:s.string()}).strict(),s.object({kind:s.literal("custom"),dnsName:s.string(),hostedZoneId:s.string()}).strict()]),ET=n_.options.map(e=>e.shape.kind.value),Vp=s.enum(["A","AAAA"]),Wp=s.enum(["route53","external-delegated","external-records"]),$T=s.object({kind:s.literal("standard"),type:s.enum(["A","AAAA","CNAME","MX","TXT","NS","SRV","CAA"]),name:s.string(),value:s.union([s.string(),s.array(s.string())]),ttl:s.number().int().positive().optional()}).strict(),AT=s.object({kind:s.literal("alias"),type:Vp,name:s.string(),target:n_}).strict(),IT=s.discriminatedUnion("kind",[$T,AT]),TT=s.object({domainName:s.string(),subjectAlternativeNames:s.array(s.string()).optional(),transparencyLogging:s.boolean().optional()}).strict(),NT=s.object({subdomain:s.string(),toAccount:s.string(),auto:s.boolean().optional()}).strict(),s4=s.object({zoneName:s.string(),registrar:Wp,hostedZoneId:s.string().optional(),delegatedSubdomain:s.string().optional(),records:s.array(IT),certificates:s.array(TT),delegations:s.array(NT)}).strict().refine(e=>e.registrar!=="external-delegated"||e.delegatedSubdomain!==void 0,{message:"external-delegated requires delegatedSubdomain"}).refine(e=>e.registrar!=="external-records"||e.delegations.length===0,{message:"external-records forbids delegations"});var p4=Wp.options,f4=vi.options,g4=Vp.options;function ms(e,t){let n=[Ap(e),$p(e),Ep(e)];if(Np(e))n.push(ns(e),is(e));else{let r=Tp(e);n.push(is(e),gp(e),hp(e),_p(e),Sp(e),xp(e),bp(e,r),Ip(e))}let i=n.join("");if(e.customCodeBlocks&&e.customCodeBlocks.length>0){let r=Gp(i,e.customCodeBlocks,t?.resourceMapping);return r.success?Ee(r.content):$e(new Error(`Custom code injection failed: ${r.error??"unknown error"}`))}return Ee(i)}var V4=cb("standard");var h6=new Set(vi.options);var E6=JSON.stringify({compilerOptions:{target:"ES2020",module:"commonjs",lib:["es2020","dom"],declaration:!0,strict:!0,noImplicitAny:!0,strictNullChecks:!0,noImplicitThis:!0,alwaysStrict:!0,noUnusedLocals:!1,noUnusedParameters:!1,noImplicitReturns:!0,noFallthroughCasesInSwitch:!1,inlineSourceMap:!0,inlineSources:!0,experimentalDecorators:!0,strictPropertyInitialization:!1,typeRoots:["./node_modules/@types"]},exclude:["node_modules","cdk.out"]},null,2)+`
+`,$6=JSON.stringify({app:"npx ts-node --prefer-ts-exts --transpile-only infrastructure.ts",assetMetadata:!1,pathMetadata:!1,versionReporting:!1,watch:{include:["**"],exclude:["README.md","cdk*.json","**/*.d.ts","**/*.js","tsconfig.json","package*.json","yarn.lock","node_modules","test"]},context:{"@aws-cdk/aws-lambda:recognizeLayerVersion":!0,"@aws-cdk/core:checkSecretUsage":!0,"@aws-cdk/core:target-partitions":["aws","aws-cn"],"@aws-cdk-containers/ecs-service-extensions:enableDefaultLogDriver":!0,"@aws-cdk/aws-ec2:uniqueImdsv2TemplateName":!0,"@aws-cdk/aws-ecs:arnFormatIncludesClusterName":!0,"@aws-cdk/aws-iam:minimizePolicies":!0,"@aws-cdk/core:validateSnapshotRemovalPolicy":!0,"@aws-cdk/aws-codepipeline:crossAccountKeyAliasStackSafeResourceName":!0,"@aws-cdk/aws-s3:createDefaultLoggingPolicy":!0,"@aws-cdk/aws-sns-subscriptions:restrictSqsDescryption":!0,"@aws-cdk/aws-apigateway:disableCloudWatchRole":!0,"@aws-cdk/core:enablePartitionLiterals":!0,"@aws-cdk/aws-events:eventsTargetQueueSameAccount":!0,"@aws-cdk/aws-iam:standardizedServicePrincipals":!0,"@aws-cdk/aws-ecs:disableExplicitDeploymentControllerForCircuitBreaker":!0,"@aws-cdk/aws-iam:importedRoleStackSafeDefaultPolicyName":!0,"@aws-cdk/aws-s3:serverAccessLogsUseBucketPolicy":!0,"@aws-cdk/aws-route53-patters:useCertificate":!0,"@aws-cdk/customresources:installLatestAwsSdkDefault":!1,"@aws-cdk/aws-rds:databaseProxyUniqueResourceName":!0,"@aws-cdk/aws-codedeploy:removeAlarmsFromDeploymentGroup":!0,"@aws-cdk/aws-apigateway:authorizerChangeDeploymentLogicalId":!0,"@aws-cdk/aws-ec2:launchTemplateDefaultUserData":!0,"@aws-cdk/aws-secretsmanager:useAttachedSecretResourcePolicyForSecretTargetAttachments":!0,"@aws-cdk/aws-redshift:columnId":!0,"@aws-cdk/aws-stepfunctions-tasks:enableEmrServicePolicyV2":!0,"@aws-cdk/aws-ec2:restrictDefaultSecurityGroup":!0,"@aws-cdk/aws-apigateway:requestValidatorUniqueId":!0,"@aws-cdk/aws-kms:aliasNameRef":!0,"@aws-cdk/aws-autoscaling:generateLaunchTemplateInsteadOfLaunchConfig":!0,"@aws-cdk/core:includePrefixInUniqueNameGeneration":!0,"@aws-cdk/aws-opensearchservice:enableOpensearchMultiAzWithStandby":!0}},null,2)+`
+`;import{join as LT,dirname as sU,normalize as FT}from"node:path";var ZT="fjall";function BT(e,t){let n=FT(e);if(n.includes("..")||n.startsWith("/"))throw new Error(`Invalid ${t}: path traversal is not allowed`)}function i_(e){return BT(e,"app name"),LT(ZT,e,GT)}var GT="infrastructure.ts";function VT(e,t,n){let i=e.root?o_.join(e.root,t):t;try{if(qr.existsSync(i)){let r=`${i}.bak`,o=`${r}.tmp`;qr.writeFileSync(o,n),qr.renameSync(o,r)}return Ee(void 0)}catch(r){let o=ct(r);return ya.warn("Generator",`Failed to create backup of ${t}`,{error:tn(o.message)}),$e(o)}}function WT(e,t){try{let n=hi(e,{extractCustomCode:!0}),i=gi(n,t,{skipValidation:!0});return n.customCodeBlocks?.length&&(i.customCodeBlocks=n.customCodeBlocks),Ee({parsed:n,plan:i})}catch(n){return $e(ct(n))}}function KT(e,t){let n=WT(e,t);if(!n.success)throw new Error(`Failed to parse infrastructure: ${n.error.message}`,{cause:n.error});return n.data}function HT(e,t,n){let i=e.safeParse(t);if(!i.success)throw new Error(`Invalid ${n} generator options:
+${Ra(i.error)}`);return i.data}function XT(e,t){let n=i_(t),i=e.read(n)?.toString();if(!i)throw new Error(`App '${t}' not found. Expected infrastructure.ts at: ${n}`);return{path:n,content:i}}async function a_(e,t,n,i,r){let o=HT(t,n,i),{path:a,content:c}=XT(e,o.appName),{plan:u}=KT(c,o.appName),l=await r({tree:e,validated:o,plan:u,infrastructurePath:a,content:c}),m=JT(e,a,c,l);if(!m.success)throw new Error(m.error.message,{cause:m.error})}function JT(e,t,n,i){let r=ms(i);if(!r.success)return $e(r.error);let o=VT(e,t,n);return o.success?(e.write(t,r.data),Ee(void 0)):$e(new Error(`Failed to create backup: ${o.error.message}`))}async function YT(e,t){await a_(e,Gy,t,"tunnel",({validated:n,plan:i})=>{if(i.tunnel&&typeof i.tunnel=="object")throw new Error("Tunnel is already enabled for this application");if(!(i.database.length>0))throw new Error("No databases found \u2014 tunnel requires at least one relational database");let r=n.instanceType?{instanceType:n.instanceType}:{};return{...i,tunnel:r}})}var yU=YT;export{yU as default,YT as tunnelGenerator};