fjall 3.3.0 → 3.5.2

package/bin/assets/generators/account/generator.js

@@ -118,10 +118,10 @@ try {
 
 Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}for(let a of e.seen.entries()){let c=a[1];if(t===a[0]){o(a);continue}if(e.external){let l=e.external.registry.get(a[0])?.id;if(t!==a[0]&&l){o(a);continue}}if(e.metadataRegistry.get(a[0])?.id){o(a);continue}if(c.cycle){o(a);continue}if(c.count>1&&e.reused==="ref"){o(a);continue}}}function Wt(e,t){let n=e.seen.get(t);if(!n)throw new Error("Unprocessed schema. This is a bug in Zod.");let i=c=>{let u=e.seen.get(c);if(u.ref===null)return;let l=u.def??u.schema,m={...l},p=u.ref;if(u.ref=null,p){i(p);let h=e.seen.get(p),x=h.schema;if(x.$ref&&(e.target==="draft-07"||e.target==="draft-04"||e.target==="openapi-3.0")?(l.allOf=l.allOf??[],l.allOf.push(x)):Object.assign(l,x),Object.assign(l,m),c._zod.parent===p)for(let K in l)K==="$ref"||K==="allOf"||K in m||delete l[K];if(x.$ref&&h.def)for(let K in l)K==="$ref"||K==="allOf"||K in h.def&&JSON.stringify(l[K])===JSON.stringify(h.def[K])&&delete l[K]}let g=c._zod.parent;if(g&&g!==p){i(g);let h=e.seen.get(g);if(h?.schema.$ref&&(l.$ref=h.schema.$ref,h.def))for(let x in l)x==="$ref"||x==="allOf"||x in h.def&&JSON.stringify(l[x])===JSON.stringify(h.def[x])&&delete l[x]}e.override({zodSchema:c,jsonSchema:l,path:u.path??[]})};for(let c of[...e.seen.entries()].reverse())i(c[0]);let r={};if(e.target==="draft-2020-12"?r.$schema="https://json-schema.org/draft/2020-12/schema":e.target==="draft-07"?r.$schema="http://json-schema.org/draft-07/schema#":e.target==="draft-04"?r.$schema="http://json-schema.org/draft-04/schema#":e.target,e.external?.uri){let c=e.external.registry.get(t)?.id;if(!c)throw new Error("Schema is missing an `id` property");r.$id=e.external.uri(c)}Object.assign(r,n.def??n.schema);let o=e.metadataRegistry.get(t)?.id;o!==void 0&&r.id===o&&delete r.id;let a=e.external?.defs??{};for(let c of e.seen.entries()){let u=c[1];u.def&&u.defId&&(u.def.id===u.defId&&delete u.def.id,a[u.defId]=u.def)}e.external||Object.keys(a).length>0&&(e.target==="draft-2020-12"?r.$defs=a:r.definitions=a);try{let c=JSON.parse(JSON.stringify(r));return Object.defineProperty(c,"~standard",{value:{...t["~standard"],jsonSchema:{input:nn(t,"input",e.processors),output:nn(t,"output",e.processors)}},enumerable:!1,writable:!1}),c}catch{throw new Error("Error converting schema to JSON.")}}function Ie(e,t){let n=t??{seen:new Set};if(n.seen.has(e))return!1;n.seen.add(e);let i=e._zod.def;if(i.type==="transform")return!0;if(i.type==="array")return Ie(i.element,n);if(i.type==="set")return Ie(i.valueType,n);if(i.type==="lazy")return Ie(i.getter(),n);if(i.type==="promise"||i.type==="optional"||i.type==="nonoptional"||i.type==="nullable"||i.type==="readonly"||i.type==="default"||i.type==="prefault")return Ie(i.innerType,n);if(i.type==="intersection")return Ie(i.left,n)||Ie(i.right,n);if(i.type==="record"||i.type==="map")return Ie(i.keyType,n)||Ie(i.valueType,n);if(i.type==="pipe")return e._zod.traits.has("$ZodCodec")?!0:Ie(i.in,n)||Ie(i.out,n);if(i.type==="object"){for(let r in i.shape)if(Ie(i.shape[r],n))return!0;return!1}if(i.type==="union"){for(let r of i.options)if(Ie(r,n))return!0;return!1}if(i.type==="tuple"){for(let r of i.items)if(Ie(r,n))return!0;return!!(i.rest&&Ie(i.rest,n))}return!1}var mm=(e,t={})=>n=>{let i=Bt({...n,processors:t});return L(e,i),Gt(i,e),Wt(i,e)},nn=(e,t,n={})=>i=>{let{libraryOptions:r,target:o}=i??{},a=Bt({...r??{},target:o,io:t,processors:n});return L(e,a),Gt(a,e),Wt(a,e)};var ZR={guid:"uuid",url:"uri",datetime:"date-time",json_string:"json-string",regex:""},pm=(e,t,n,i)=>{let r=n;r.type="string";let{minimum:o,maximum:a,format:c,patterns:u,contentEncoding:l}=e._zod.bag;if(typeof o=="number"&&(r.minLength=o),typeof a=="number"&&(r.maxLength=a),c&&(r.format=ZR[c]??c,r.format===""&&delete r.format,c==="time"&&delete r.format),l&&(r.contentEncoding=l),u&&u.size>0){let m=[...u];m.length===1?r.pattern=m[0].source:m.length>1&&(r.allOf=[...m.map(p=>({...t.target==="draft-07"||t.target==="draft-04"||t.target==="openapi-3.0"?{type:"string"}:{},pattern:p.source}))])}},fm=(e,t,n,i)=>{let r=n,{minimum:o,maximum:a,format:c,multipleOf:u,exclusiveMaximum:l,exclusiveMinimum:m}=e._zod.bag;typeof c=="string"&&c.includes("int")?r.type="integer":r.type="number";let p=typeof m=="number"&&m>=(o??Number.NEGATIVE_INFINITY),g=typeof l=="number"&&l<=(a??Number.POSITIVE_INFINITY),h=t.target==="draft-04"||t.target==="openapi-3.0";p?h?(r.minimum=m,r.exclusiveMinimum=!0):r.exclusiveMinimum=m:typeof o=="number"&&(r.minimum=o),g?h?(r.maximum=l,r.exclusiveMaximum=!0):r.exclusiveMaximum=l:typeof a=="number"&&(r.maximum=a),typeof u=="number"&&(r.multipleOf=u)},gm=(e,t,n,i)=>{n.type="boolean"},vm=(e,t,n,i)=>{if(t.unrepresentable==="throw")throw new Error("BigInt cannot be represented in JSON Schema")},hm=(e,t,n,i)=>{if(t.unrepresentable==="throw")throw new Error("Symbols cannot be represented in JSON Schema")},ym=(e,t,n,i)=>{t.target==="openapi-3.0"?(n.type="string",n.nullable=!0,n.enum=[null]):n.type="null"},bm=(e,t,n,i)=>{if(t.unrepresentable==="throw")throw new Error("Undefined cannot be represented in JSON Schema")},Sm=(e,t,n,i)=>{if(t.unrepresentable==="throw")throw new Error("Void cannot be represented in JSON Schema")},_m=(e,t,n,i)=>{n.not={}},Em=(e,t,n,i)=>{},Am=(e,t,n,i)=>{},xm=(e,t,n,i)=>{if(t.unrepresentable==="throw")throw new Error("Date cannot be represented in JSON Schema")},$m=(e,t,n,i)=>{let r=e._zod.def,o=ei(r.entries);o.every(a=>typeof a=="number")&&(n.type="number"),o.every(a=>typeof a=="string")&&(n.type="string"),n.enum=o},Im=(e,t,n,i)=>{let r=e._zod.def,o=[];for(let a of r.values)if(a===void 0){if(t.unrepresentable==="throw")throw new Error("Literal `undefined` cannot be represented in JSON Schema")}else if(typeof a=="bigint"){if(t.unrepresentable==="throw")throw new Error("BigInt literals cannot be represented in JSON Schema");o.push(Number(a))}else o.push(a);if(o.length!==0)if(o.length===1){let a=o[0];n.type=a===null?"null":typeof a,t.target==="draft-04"||t.target==="openapi-3.0"?n.enum=[a]:n.const=a}else o.every(a=>typeof a=="number")&&(n.type="number"),o.every(a=>typeof a=="string")&&(n.type="string"),o.every(a=>typeof a=="boolean")&&(n.type="boolean"),o.every(a=>a===null)&&(n.type="null"),n.enum=o},Tm=(e,t,n,i)=>{if(t.unrepresentable==="throw")throw new Error("NaN cannot be represented in JSON Schema")},Rm=(e,t,n,i)=>{let r=n,o=e._zod.pattern;if(!o)throw new Error("Pattern not found in template literal");r.type="string",r.pattern=o.source},Nm=(e,t,n,i)=>{let r=n,o={type:"string",format:"binary",contentEncoding:"binary"},{minimum:a,maximum:c,mime:u}=e._zod.bag;a!==void 0&&(o.minLength=a),c!==void 0&&(o.maxLength=c),u?u.length===1?(o.contentMediaType=u[0],Object.assign(r,o)):(Object.assign(r,o),r.anyOf=u.map(l=>({contentMediaType:l}))):Object.assign(r,o)},Pm=(e,t,n,i)=>{n.type="boolean"},km=(e,t,n,i)=>{if(t.unrepresentable==="throw")throw new Error("Custom types cannot be represented in JSON Schema")},Cm=(e,t,n,i)=>{if(t.unrepresentable==="throw")throw new Error("Function types cannot be represented in JSON Schema")},Om=(e,t,n,i)=>{if(t.unrepresentable==="throw")throw new Error("Transforms cannot be represented in JSON Schema")},Dm=(e,t,n,i)=>{if(t.unrepresentable==="throw")throw new Error("Map cannot be represented in JSON Schema")},wm=(e,t,n,i)=>{if(t.unrepresentable==="throw")throw new Error("Set cannot be represented in JSON Schema")},zm=(e,t,n,i)=>{let r=n,o=e._zod.def,{minimum:a,maximum:c}=e._zod.bag;typeof a=="number"&&(r.minItems=a),typeof c=="number"&&(r.maxItems=c),r.type="array",r.items=L(o.element,t,{...i,path:[...i.path,"items"]})},Mm=(e,t,n,i)=>{let r=n,o=e._zod.def;r.type="object",r.properties={};let a=o.shape;for(let l in a)r.properties[l]=L(a[l],t,{...i,path:[...i.path,"properties",l]});let c=new Set(Object.keys(a)),u=new Set([...c].filter(l=>{let m=o.shape[l]._zod;return t.io==="input"?m.optin===void 0:m.optout===void 0}));u.size>0&&(r.required=Array.from(u)),o.catchall?._zod.def.type==="never"?r.additionalProperties=!1:o.catchall?o.catchall&&(r.additionalProperties=L(o.catchall,t,{...i,path:[...i.path,"additionalProperties"]})):t.io==="output"&&(r.additionalProperties=!1)},Ua=(e,t,n,i)=>{let r=e._zod.def,o=r.inclusive===!1,a=r.options.map((c,u)=>L(c,t,{...i,path:[...i.path,o?"oneOf":"anyOf",u]}));o?n.oneOf=a:n.anyOf=a},jm=(e,t,n,i)=>{let r=e._zod.def,o=L(r.left,t,{...i,path:[...i.path,"allOf",0]}),a=L(r.right,t,{...i,path:[...i.path,"allOf",1]}),c=l=>"allOf"in l&&Object.keys(l).length===1,u=[...c(o)?o.allOf:[o],...c(a)?a.allOf:[a]];n.allOf=u},Um=(e,t,n,i)=>{let r=n,o=e._zod.def;r.type="array";let a=t.target==="draft-2020-12"?"prefixItems":"items",c=t.target==="draft-2020-12"||t.target==="openapi-3.0"?"items":"additionalItems",u=o.items.map((g,h)=>L(g,t,{...i,path:[...i.path,a,h]})),l=o.rest?L(o.rest,t,{...i,path:[...i.path,c,...t.target==="openapi-3.0"?[o.items.length]:[]]}):null;t.target==="draft-2020-12"?(r.prefixItems=u,l&&(r.items=l)):t.target==="openapi-3.0"?(r.items={anyOf:u},l&&r.items.anyOf.push(l),r.minItems=u.length,l||(r.maxItems=u.length)):(r.items=u,l&&(r.additionalItems=l));let{minimum:m,maximum:p}=e._zod.bag;typeof m=="number"&&(r.minItems=m),typeof p=="number"&&(r.maxItems=p)},Lm=(e,t,n,i)=>{let r=n,o=e._zod.def;r.type="object";let a=o.keyType,u=a._zod.bag?.patterns;if(o.mode==="loose"&&u&&u.size>0){let m=L(o.valueType,t,{...i,path:[...i.path,"patternProperties","*"]});r.patternProperties={};for(let p of u)r.patternProperties[p.source]=m}else(t.target==="draft-07"||t.target==="draft-2020-12")&&(r.propertyNames=L(o.keyType,t,{...i,path:[...i.path,"propertyNames"]})),r.additionalProperties=L(o.valueType,t,{...i,path:[...i.path,"additionalProperties"]});let l=a._zod.values;if(l){let m=[...l].filter(p=>typeof p=="string"||typeof p=="number");m.length>0&&(r.required=m)}},Fm=(e,t,n,i)=>{let r=e._zod.def,o=L(r.innerType,t,i),a=t.seen.get(e);t.target==="openapi-3.0"?(a.ref=r.innerType,n.nullable=!0):n.anyOf=[o,{type:"null"}]},Zm=(e,t,n,i)=>{let r=e._zod.def;L(r.innerType,t,i);let o=t.seen.get(e);o.ref=r.innerType},Vm=(e,t,n,i)=>{let r=e._zod.def;L(r.innerType,t,i);let o=t.seen.get(e);o.ref=r.innerType,n.default=JSON.parse(JSON.stringify(r.defaultValue))},Bm=(e,t,n,i)=>{let r=e._zod.def;L(r.innerType,t,i);let o=t.seen.get(e);o.ref=r.innerType,t.io==="input"&&(n._prefault=JSON.parse(JSON.stringify(r.defaultValue)))},Gm=(e,t,n,i)=>{let r=e._zod.def;L(r.innerType,t,i);let o=t.seen.get(e);o.ref=r.innerType;let a;try{a=r.catchValue(void 0)}catch{throw new Error("Dynamic catch values are not supported in JSON Schema")}n.default=a},Wm=(e,t,n,i)=>{let r=e._zod.def,o=r.in._zod.traits.has("$ZodTransform"),a=t.io==="input"?o?r.out:r.in:r.out;L(a,t,i);let c=t.seen.get(e);c.ref=a},Km=(e,t,n,i)=>{let r=e._zod.def;L(r.innerType,t,i);let o=t.seen.get(e);o.ref=r.innerType,n.readOnly=!0},Hm=(e,t,n,i)=>{let r=e._zod.def;L(r.innerType,t,i);let o=t.seen.get(e);o.ref=r.innerType},La=(e,t,n,i)=>{let r=e._zod.def;L(r.innerType,t,i);let o=t.seen.get(e);o.ref=r.innerType},Xm=(e,t,n,i)=>{let r=e._zod.innerType;L(r,t,i);let o=t.seen.get(e);o.ref=r},ja={string:pm,number:fm,boolean:gm,bigint:vm,symbol:hm,null:ym,undefined:bm,void:Sm,never:_m,any:Em,unknown:Am,date:xm,enum:$m,literal:Im,nan:Tm,template_literal:Rm,file:Nm,success:Pm,custom:km,function:Cm,transform:Om,map:Dm,set:wm,array:zm,object:Mm,union:Ua,intersection:jm,tuple:Um,record:Lm,nullable:Fm,nonoptional:Zm,default:Vm,prefault:Bm,catch:Gm,pipe:Wm,readonly:Km,promise:Hm,optional:La,lazy:Xm};function Fa(e,t){if("_idmap"in e){let i=e,r=Bt({...t,processors:ja}),o={};for(let u of i._idmap.entries()){let[l,m]=u;L(m,r)}let a={},c={registry:i,uri:t?.uri,defs:o};r.external=c;for(let u of i._idmap.entries()){let[l,m]=u;Gt(r,m),a[l]=Wt(r,m)}if(Object.keys(o).length>0){let u=r.target==="draft-2020-12"?"$defs":"definitions";a.__shared={[u]:o}}return{schemas:a}}let n=Bt({...t,processors:ja});return L(e,n),Gt(n,e),Wt(n,e)}var Za=class{get metadataRegistry(){return this.ctx.metadataRegistry}get target(){return this.ctx.target}get unrepresentable(){return this.ctx.unrepresentable}get override(){return this.ctx.override}get io(){return this.ctx.io}get counter(){return this.ctx.counter}set counter(t){this.ctx.counter=t}get seen(){return this.ctx.seen}constructor(t){let n=t?.target??"draft-2020-12";n==="draft-4"&&(n="draft-04"),n==="draft-7"&&(n="draft-07"),this.ctx=Bt({processors:ja,target:n,...t?.metadata&&{metadata:t.metadata},...t?.unrepresentable&&{unrepresentable:t.unrepresentable},...t?.override&&{override:t.override},...t?.io&&{io:t.io}})}process(t,n={path:[],schemaPath:[]}){return L(t,this.ctx,n)}emit(t,n){n&&(n.cycles&&(this.ctx.cycles=n.cycles),n.reused&&(this.ctx.reused=n.reused),n.external&&(this.ctx.external=n.external)),Gt(this.ctx,t);let i=Wt(this.ctx,t),{"~standard":r,...o}=i;return o}};var hy={};var yi={};At(yi,{ZodAny:()=>bp,ZodArray:()=>Ap,ZodBase64:()=>us,ZodBase64URL:()=>ls,ZodBigInt:()=>mn,ZodBigIntFormat:()=>ps,ZodBoolean:()=>dn,ZodCIDRv4:()=>ss,ZodCIDRv6:()=>cs,ZodCUID:()=>es,ZodCUID2:()=>ts,ZodCatch:()=>Gp,ZodCodec:()=>Pi,ZodCustom:()=>ki,ZodCustomStringFormat:()=>un,ZodDate:()=>$i,ZodDefault:()=>Up,ZodDiscriminatedUnion:()=>$p,ZodE164:()=>ds,ZodEmail:()=>Ja,ZodEmoji:()=>qa,ZodEnum:()=>sn,ZodExactOptional:()=>zp,ZodFile:()=>Dp,ZodFunction:()=>tf,ZodGUID:()=>Si,ZodIPv4:()=>os,ZodIPv6:()=>as,ZodIntersection:()=>Ip,ZodJWT:()=>ms,ZodKSUID:()=>is,ZodLazy:()=>qp,ZodLiteral:()=>Op,ZodMAC:()=>mp,ZodMap:()=>kp,ZodNaN:()=>Kp,ZodNanoID:()=>Qa,ZodNever:()=>_p,ZodNonOptional:()=>bs,ZodNull:()=>hp,ZodNullable:()=>jp,ZodNumber:()=>ln,ZodNumberFormat:()=>gr,ZodObject:()=>Ti,ZodOptional:()=>ys,ZodPipe:()=>Ni,ZodPrefault:()=>Fp,ZodPreprocess:()=>Hp,ZodPromise:()=>ef,ZodReadonly:()=>Xp,ZodRecord:()=>an,ZodSet:()=>Cp,ZodString:()=>cn,ZodStringFormat:()=>W,ZodSuccess:()=>Bp,ZodSymbol:()=>gp,ZodTemplateLiteral:()=>Jp,ZodTransform:()=>wp,ZodTuple:()=>Rp,ZodType:()=>k,ZodULID:()=>rs,ZodURL:()=>xi,ZodUUID:()=>mt,ZodUndefined:()=>vp,ZodUnion:()=>Ri,ZodUnknown:()=>Sp,ZodVoid:()=>Ep,ZodXID:()=>ns,ZodXor:()=>xp,_ZodString:()=>Ya,_default:()=>Lp,_function:()=>Ib,any:()=>nb,array:()=>Ii,base64:()=>Ly,base64url:()=>Fy,bigint:()=>qy,boolean:()=>fp,catch:()=>Wp,check:()=>Tb,cidrv4:()=>jy,cidrv6:()=>Uy,codec:()=>Eb,cuid:()=>Py,cuid2:()=>ky,custom:()=>Rb,date:()=>ob,describe:()=>Nb,discriminatedUnion:()=>db,e164:()=>Zy,email:()=>Sy,emoji:()=>Ry,enum:()=>vs,exactOptional:()=>Mp,file:()=>yb,float32:()=>Hy,float64:()=>Xy,function:()=>Ib,guid:()=>_y,hash:()=>Ky,hex:()=>Wy,hostname:()=>Gy,httpUrl:()=>Ty,instanceof:()=>kb,int:()=>Ha,int32:()=>Yy,int64:()=>Qy,intersection:()=>Tp,invertCodec:()=>Ab,ipv4:()=>wy,ipv6:()=>My,json:()=>Ob,jwt:()=>Vy,keyof:()=>ab,ksuid:()=>Dy,lazy:()=>Qp,literal:()=>hb,looseObject:()=>ub,looseRecord:()=>pb,mac:()=>zy,map:()=>fb,meta:()=>Pb,nan:()=>_b,nanoid:()=>Ny,nativeEnum:()=>vb,never:()=>fs,nonoptional:()=>Vp,null:()=>yp,nullable:()=>Ei,nullish:()=>bb,number:()=>pp,object:()=>sb,optional:()=>_i,partialRecord:()=>mb,pipe:()=>Xa,prefault:()=>Zp,preprocess:()=>Db,promise:()=>$b,readonly:()=>Yp,record:()=>Pp,refine:()=>rf,set:()=>gb,strictObject:()=>cb,string:()=>bi,stringFormat:()=>By,stringbool:()=>Cb,success:()=>Sb,superRefine:()=>nf,symbol:()=>tb,templateLiteral:()=>xb,transform:()=>hs,tuple:()=>Np,uint32:()=>Jy,uint64:()=>eb,ulid:()=>Cy,undefined:()=>rb,union:()=>gs,unknown:()=>fr,url:()=>Iy,uuid:()=>Ey,uuidv4:()=>Ay,uuidv6:()=>xy,uuidv7:()=>$y,void:()=>ib,xid:()=>Oy,xor:()=>lb});var Va={};At(Va,{endsWith:()=>Xr,gt:()=>lt,gte:()=>$e,includes:()=>Kr,length:()=>pr,lowercase:()=>Gr,lt:()=>ut,lte:()=>Ue,maxLength:()=>mr,maxSize:()=>Vt,mime:()=>Yr,minLength:()=>$t,minSize:()=>dt,multipleOf:()=>Zt,negative:()=>Da,nonnegative:()=>za,nonpositive:()=>wa,normalize:()=>Jr,overwrite:()=>ot,positive:()=>Oa,property:()=>Ma,regex:()=>Br,size:()=>dr,slugify:()=>tn,startsWith:()=>Hr,toLowerCase:()=>Qr,toUpperCase:()=>en,trim:()=>qr,uppercase:()=>Wr});var on={};At(on,{ZodISODate:()=>Ga,ZodISODateTime:()=>Ba,ZodISODuration:()=>Ka,ZodISOTime:()=>Wa,date:()=>Jm,datetime:()=>Ym,duration:()=>Qm,time:()=>qm});var Ba=f("ZodISODateTime",(e,t)=>{Tl.init(e,t),W.init(e,t)});function Ym(e){return kd(Ba,e)}var Ga=f("ZodISODate",(e,t)=>{Rl.init(e,t),W.init(e,t)});function Jm(e){return Cd(Ga,e)}var Wa=f("ZodISOTime",(e,t)=>{Nl.init(e,t),W.init(e,t)});function qm(e){return Od(Wa,e)}var Ka=f("ZodISODuration",(e,t)=>{Pl.init(e,t),W.init(e,t)});function Qm(e){return Dd(Ka,e)}var yy=(e,t)=>{oi.init(e,t),e.name="ZodError",Object.defineProperties(e,{format:{value:n=>si(e,n)},flatten:{value:n=>ai(e,n)},addIssue:{value:n=>{e.issues.push(n),e.message=JSON.stringify(e.issues,wr,2)}},addIssues:{value:n=>{e.issues.push(...n),e.message=JSON.stringify(e.issues,wr,2)}},isEmpty:{get(){return e.issues.length===0}}})},BR=f("ZodError",yy),Oe=f("ZodError",yy,{Parent:Error});var ep=jr(Oe),tp=Ur(Oe),rp=Lr(Oe),np=Fr(Oe),ip=Fo(Oe),op=Zo(Oe),ap=Vo(Oe),sp=Bo(Oe),cp=Go(Oe),up=Wo(Oe),lp=Ko(Oe),dp=Ho(Oe);var by=new WeakMap;function Ai(e,t,n){let i=Object.getPrototypeOf(e),r=by.get(i);if(r||(r=new Set,by.set(i,r)),!r.has(t)){r.add(t);for(let o in n){let a=n[o];Object.defineProperty(i,o,{configurable:!0,enumerable:!1,get(){let c=a.bind(this);return Object.defineProperty(this,o,{configurable:!0,writable:!0,enumerable:!0,value:c}),c},set(c){Object.defineProperty(this,o,{configurable:!0,writable:!0,enumerable:!0,value:c})}})}}}var k=f("ZodType",(e,t)=>(P.init(e,t),Object.assign(e["~standard"],{jsonSchema:{input:nn(e,"input"),output:nn(e,"output")}}),e.toJSONSchema=mm(e,{}),e.def=t,e.type=t.type,Object.defineProperty(e,"_def",{value:t}),e.parse=(n,i)=>ep(e,n,i,{callee:e.parse}),e.safeParse=(n,i)=>rp(e,n,i),e.parseAsync=async(n,i)=>tp(e,n,i,{callee:e.parseAsync}),e.safeParseAsync=async(n,i)=>np(e,n,i),e.spa=e.safeParseAsync,e.encode=(n,i)=>ip(e,n,i),e.decode=(n,i)=>op(e,n,i),e.encodeAsync=async(n,i)=>ap(e,n,i),e.decodeAsync=async(n,i)=>sp(e,n,i),e.safeEncode=(n,i)=>cp(e,n,i),e.safeDecode=(n,i)=>up(e,n,i),e.safeEncodeAsync=async(n,i)=>lp(e,n,i),e.safeDecodeAsync=async(n,i)=>dp(e,n,i),Ai(e,"ZodType",{check(...n){let i=this.def;return this.clone(_.mergeDefs(i,{checks:[...i.checks??[],...n.map(r=>typeof r=="function"?{_zod:{check:r,def:{check:"custom"},onattach:[]}}:r)]}),{parent:!0})},with(...n){return this.check(...n)},clone(n,i){return Ae(this,n,i)},brand(){return this},register(n,i){return n.add(this,i),this},refine(n,i){return this.check(rf(n,i))},superRefine(n,i){return this.check(nf(n,i))},overwrite(n){return this.check(ot(n))},optional(){return _i(this)},exactOptional(){return Mp(this)},nullable(){return Ei(this)},nullish(){return _i(Ei(this))},nonoptional(n){return Vp(this,n)},array(){return Ii(this)},or(n){return gs([this,n])},and(n){return Tp(this,n)},transform(n){return Xa(this,hs(n))},default(n){return Lp(this,n)},prefault(n){return Zp(this,n)},catch(n){return Wp(this,n)},pipe(n){return Xa(this,n)},readonly(){return Yp(this)},describe(n){let i=this.clone();return pe.add(i,{description:n}),i},meta(...n){if(n.length===0)return pe.get(this);let i=this.clone();return pe.add(i,n[0]),i},isOptional(){return this.safeParse(void 0).success},isNullable(){return this.safeParse(null).success},apply(n){return n(this)}}),Object.defineProperty(e,"description",{get(){return pe.get(e)?.description},configurable:!0}),e)),Ya=f("_ZodString",(e,t)=>{lr.init(e,t),k.init(e,t),e._zod.processJSONSchema=(i,r,o)=>pm(e,i,r,o);let n=e._zod.bag;e.format=n.format??null,e.minLength=n.minimum??null,e.maxLength=n.maximum??null,Ai(e,"_ZodString",{regex(...i){return this.check(Br(...i))},includes(...i){return this.check(Kr(...i))},startsWith(...i){return this.check(Hr(...i))},endsWith(...i){return this.check(Xr(...i))},min(...i){return this.check($t(...i))},max(...i){return this.check(mr(...i))},length(...i){return this.check(pr(...i))},nonempty(...i){return this.check($t(1,...i))},lowercase(i){return this.check(Gr(i))},uppercase(i){return this.check(Wr(i))},trim(){return this.check(qr())},normalize(...i){return this.check(Jr(...i))},toLowerCase(){return this.check(Qr())},toUpperCase(){return this.check(en())},slugify(){return this.check(tn())}})}),cn=f("ZodString",(e,t)=>{lr.init(e,t),Ya.init(e,t),e.email=n=>e.check(pa(Ja,n)),e.url=n=>e.check(hi(xi,n)),e.jwt=n=>e.check(Ca(ms,n)),e.emoji=n=>e.check(ya(qa,n)),e.guid=n=>e.check(vi(Si,n)),e.uuid=n=>e.check(fa(mt,n)),e.uuidv4=n=>e.check(ga(mt,n)),e.uuidv6=n=>e.check(va(mt,n)),e.uuidv7=n=>e.check(ha(mt,n)),e.nanoid=n=>e.check(ba(Qa,n)),e.guid=n=>e.check(vi(Si,n)),e.cuid=n=>e.check(Sa(es,n)),e.cuid2=n=>e.check(_a(ts,n)),e.ulid=n=>e.check(Ea(rs,n)),e.base64=n=>e.check(Na(us,n)),e.base64url=n=>e.check(Pa(ls,n)),e.xid=n=>e.check(Aa(ns,n)),e.ksuid=n=>e.check(xa(is,n)),e.ipv4=n=>e.check($a(os,n)),e.ipv6=n=>e.check(Ia(as,n)),e.cidrv4=n=>e.check(Ta(ss,n)),e.cidrv6=n=>e.check(Ra(cs,n)),e.e164=n=>e.check(ka(ds,n)),e.datetime=n=>e.check(Ym(n)),e.date=n=>e.check(Jm(n)),e.time=n=>e.check(qm(n)),e.duration=n=>e.check(Qm(n))});function bi(e){return Td(cn,e)}var W=f("ZodStringFormat",(e,t)=>{G.init(e,t),Ya.init(e,t)}),Ja=f("ZodEmail",(e,t)=>{yl.init(e,t),W.init(e,t)});function Sy(e){return pa(Ja,e)}var Si=f("ZodGUID",(e,t)=>{vl.init(e,t),W.init(e,t)});function _y(e){return vi(Si,e)}var mt=f("ZodUUID",(e,t)=>{hl.init(e,t),W.init(e,t)});function Ey(e){return fa(mt,e)}function Ay(e){return ga(mt,e)}function xy(e){return va(mt,e)}function $y(e){return ha(mt,e)}var xi=f("ZodURL",(e,t)=>{bl.init(e,t),W.init(e,t)});function Iy(e){return hi(xi,e)}function Ty(e){return hi(xi,{protocol:je.httpProtocol,hostname:je.domain,..._.normalizeParams(e)})}var qa=f("ZodEmoji",(e,t)=>{Sl.init(e,t),W.init(e,t)});function Ry(e){return ya(qa,e)}var Qa=f("ZodNanoID",(e,t)=>{_l.init(e,t),W.init(e,t)});function Ny(e){return ba(Qa,e)}var es=f("ZodCUID",(e,t)=>{El.init(e,t),W.init(e,t)});function Py(e){return Sa(es,e)}var ts=f("ZodCUID2",(e,t)=>{Al.init(e,t),W.init(e,t)});function ky(e){return _a(ts,e)}var rs=f("ZodULID",(e,t)=>{xl.init(e,t),W.init(e,t)});function Cy(e){return Ea(rs,e)}var ns=f("ZodXID",(e,t)=>{$l.init(e,t),W.init(e,t)});function Oy(e){return Aa(ns,e)}var is=f("ZodKSUID",(e,t)=>{Il.init(e,t),W.init(e,t)});function Dy(e){return xa(is,e)}var os=f("ZodIPv4",(e,t)=>{kl.init(e,t),W.init(e,t)});function wy(e){return $a(os,e)}var mp=f("ZodMAC",(e,t)=>{Ol.init(e,t),W.init(e,t)});function zy(e){return Nd(mp,e)}var as=f("ZodIPv6",(e,t)=>{Cl.init(e,t),W.init(e,t)});function My(e){return Ia(as,e)}var ss=f("ZodCIDRv4",(e,t)=>{Dl.init(e,t),W.init(e,t)});function jy(e){return Ta(ss,e)}var cs=f("ZodCIDRv6",(e,t)=>{wl.init(e,t),W.init(e,t)});function Uy(e){return Ra(cs,e)}var us=f("ZodBase64",(e,t)=>{Ml.init(e,t),W.init(e,t)});function Ly(e){return Na(us,e)}var ls=f("ZodBase64URL",(e,t)=>{jl.init(e,t),W.init(e,t)});function Fy(e){return Pa(ls,e)}var ds=f("ZodE164",(e,t)=>{Ul.init(e,t),W.init(e,t)});function Zy(e){return ka(ds,e)}var ms=f("ZodJWT",(e,t)=>{Ll.init(e,t),W.init(e,t)});function Vy(e){return Ca(ms,e)}var un=f("ZodCustomStringFormat",(e,t)=>{Fl.init(e,t),W.init(e,t)});function By(e,t,n={}){return rn(un,e,t,n)}function Gy(e){return rn(un,"hostname",je.hostname,e)}function Wy(e){return rn(un,"hex",je.hex,e)}function Ky(e,t){let n=t?.enc??"hex",i=`${e}_${n}`,r=je[i];if(!r)throw new Error(`Unrecognized hash format: ${i}`);return rn(un,i,r,t)}var ln=f("ZodNumber",(e,t)=>{na.init(e,t),k.init(e,t),e._zod.processJSONSchema=(i,r,o)=>fm(e,i,r,o),Ai(e,"ZodNumber",{gt(i,r){return this.check(lt(i,r))},gte(i,r){return this.check($e(i,r))},min(i,r){return this.check($e(i,r))},lt(i,r){return this.check(ut(i,r))},lte(i,r){return this.check(Ue(i,r))},max(i,r){return this.check(Ue(i,r))},int(i){return this.check(Ha(i))},safe(i){return this.check(Ha(i))},positive(i){return this.check(lt(0,i))},nonnegative(i){return this.check($e(0,i))},negative(i){return this.check(ut(0,i))},nonpositive(i){return this.check(Ue(0,i))},multipleOf(i,r){return this.check(Zt(i,r))},step(i,r){return this.check(Zt(i,r))},finite(){return this}});let n=e._zod.bag;e.minValue=Math.max(n.minimum??Number.NEGATIVE_INFINITY,n.exclusiveMinimum??Number.NEGATIVE_INFINITY)??null,e.maxValue=Math.min(n.maximum??Number.POSITIVE_INFINITY,n.exclusiveMaximum??Number.POSITIVE_INFINITY)??null,e.isInt=(n.format??"").includes("int")||Number.isSafeInteger(n.multipleOf??.5),e.isFinite=!0,e.format=n.format??null});function pp(e){return wd(ln,e)}var gr=f("ZodNumberFormat",(e,t)=>{Zl.init(e,t),ln.init(e,t)});function Ha(e){return Md(gr,e)}function Hy(e){return jd(gr,e)}function Xy(e){return Ud(gr,e)}function Yy(e){return Ld(gr,e)}function Jy(e){return Fd(gr,e)}var dn=f("ZodBoolean",(e,t)=>{di.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,i,r)=>gm(e,n,i,r)});function fp(e){return Zd(dn,e)}var mn=f("ZodBigInt",(e,t)=>{ia.init(e,t),k.init(e,t),e._zod.processJSONSchema=(i,r,o)=>vm(e,i,r,o),e.gte=(i,r)=>e.check($e(i,r)),e.min=(i,r)=>e.check($e(i,r)),e.gt=(i,r)=>e.check(lt(i,r)),e.gte=(i,r)=>e.check($e(i,r)),e.min=(i,r)=>e.check($e(i,r)),e.lt=(i,r)=>e.check(ut(i,r)),e.lte=(i,r)=>e.check(Ue(i,r)),e.max=(i,r)=>e.check(Ue(i,r)),e.positive=i=>e.check(lt(BigInt(0),i)),e.negative=i=>e.check(ut(BigInt(0),i)),e.nonpositive=i=>e.check(Ue(BigInt(0),i)),e.nonnegative=i=>e.check($e(BigInt(0),i)),e.multipleOf=(i,r)=>e.check(Zt(i,r));let n=e._zod.bag;e.minValue=n.minimum??null,e.maxValue=n.maximum??null,e.format=n.format??null});function qy(e){return Bd(mn,e)}var ps=f("ZodBigIntFormat",(e,t)=>{Vl.init(e,t),mn.init(e,t)});function Qy(e){return Wd(ps,e)}function eb(e){return Kd(ps,e)}var gp=f("ZodSymbol",(e,t)=>{Bl.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,i,r)=>hm(e,n,i,r)});function tb(e){return Hd(gp,e)}var vp=f("ZodUndefined",(e,t)=>{Gl.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,i,r)=>bm(e,n,i,r)});function rb(e){return Xd(vp,e)}var hp=f("ZodNull",(e,t)=>{Wl.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,i,r)=>ym(e,n,i,r)});function yp(e){return Yd(hp,e)}var bp=f("ZodAny",(e,t)=>{Kl.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,i,r)=>Em(e,n,i,r)});function nb(){return Jd(bp)}var Sp=f("ZodUnknown",(e,t)=>{Hl.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,i,r)=>Am(e,n,i,r)});function fr(){return qd(Sp)}var _p=f("ZodNever",(e,t)=>{Xl.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,i,r)=>_m(e,n,i,r)});function fs(e){return Qd(_p,e)}var Ep=f("ZodVoid",(e,t)=>{Yl.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,i,r)=>Sm(e,n,i,r)});function ib(e){return em(Ep,e)}var $i=f("ZodDate",(e,t)=>{Jl.init(e,t),k.init(e,t),e._zod.processJSONSchema=(i,r,o)=>xm(e,i,r,o),e.min=(i,r)=>e.check($e(i,r)),e.max=(i,r)=>e.check(Ue(i,r));let n=e._zod.bag;e.minDate=n.minimum?new Date(n.minimum):null,e.maxDate=n.maximum?new Date(n.maximum):null});function ob(e){return tm($i,e)}var Ap=f("ZodArray",(e,t)=>{ql.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,i,r)=>zm(e,n,i,r),e.element=t.element,Ai(e,"ZodArray",{min(n,i){return this.check($t(n,i))},nonempty(n){return this.check($t(1,n))},max(n,i){return this.check(mr(n,i))},length(n,i){return this.check(pr(n,i))},unwrap(){return this.element}})});function Ii(e,t){return im(Ap,e,t)}function ab(e){let t=e._zod.def.shape;return vs(Object.keys(t))}var Ti=f("ZodObject",(e,t)=>{Ql.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,i,r)=>Mm(e,n,i,r),_.defineLazy(e,"shape",()=>t.shape),Ai(e,"ZodObject",{keyof(){return vs(Object.keys(this._zod.def.shape))},catchall(n){return this.clone({...this._zod.def,catchall:n})},passthrough(){return this.clone({...this._zod.def,catchall:fr()})},loose(){return this.clone({...this._zod.def,catchall:fr()})},strict(){return this.clone({...this._zod.def,catchall:fs()})},strip(){return this.clone({...this._zod.def,catchall:void 0})},extend(n){return _.extend(this,n)},safeExtend(n){return _.safeExtend(this,n)},merge(n){return _.merge(this,n)},pick(n){return _.pick(this,n)},omit(n){return _.omit(this,n)},partial(...n){return _.partial(ys,this,n[0])},required(...n){return _.required(bs,this,n[0])}})});function sb(e,t){let n={type:"object",shape:e??{},..._.normalizeParams(t)};return new Ti(n)}function cb(e,t){return new Ti({type:"object",shape:e,catchall:fs(),..._.normalizeParams(t)})}function ub(e,t){return new Ti({type:"object",shape:e,catchall:fr(),..._.normalizeParams(t)})}var Ri=f("ZodUnion",(e,t)=>{mi.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,i,r)=>Ua(e,n,i,r),e.options=t.options});function gs(e,t){return new Ri({type:"union",options:e,..._.normalizeParams(t)})}var xp=f("ZodXor",(e,t)=>{Ri.init(e,t),ed.init(e,t),e._zod.processJSONSchema=(n,i,r)=>Ua(e,n,i,r),e.options=t.options});function lb(e,t){return new xp({type:"union",options:e,inclusive:!1,..._.normalizeParams(t)})}var $p=f("ZodDiscriminatedUnion",(e,t)=>{Ri.init(e,t),td.init(e,t)});function db(e,t,n){return new $p({type:"union",options:t,discriminator:e,..._.normalizeParams(n)})}var Ip=f("ZodIntersection",(e,t)=>{rd.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,i,r)=>jm(e,n,i,r)});function Tp(e,t){return new Ip({type:"intersection",left:e,right:t})}var Rp=f("ZodTuple",(e,t)=>{oa.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,i,r)=>Um(e,n,i,r),e.rest=n=>e.clone({...e._zod.def,rest:n})});function Np(e,t,n){let i=t instanceof P,r=i?n:t,o=i?t:null;return new Rp({type:"tuple",items:e,rest:o,..._.normalizeParams(r)})}var an=f("ZodRecord",(e,t)=>{nd.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,i,r)=>Lm(e,n,i,r),e.keyType=t.keyType,e.valueType=t.valueType});function Pp(e,t,n){return!t||!t._zod?new an({type:"record",keyType:bi(),valueType:e,..._.normalizeParams(t)}):new an({type:"record",keyType:e,valueType:t,..._.normalizeParams(n)})}function mb(e,t,n){let i=Ae(e);return i._zod.values=void 0,new an({type:"record",keyType:i,valueType:t,..._.normalizeParams(n)})}function pb(e,t,n){return new an({type:"record",keyType:e,valueType:t,mode:"loose",..._.normalizeParams(n)})}var kp=f("ZodMap",(e,t)=>{id.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,i,r)=>Dm(e,n,i,r),e.keyType=t.keyType,e.valueType=t.valueType,e.min=(...n)=>e.check(dt(...n)),e.nonempty=n=>e.check(dt(1,n)),e.max=(...n)=>e.check(Vt(...n)),e.size=(...n)=>e.check(dr(...n))});function fb(e,t,n){return new kp({type:"map",keyType:e,valueType:t,..._.normalizeParams(n)})}var Cp=f("ZodSet",(e,t)=>{od.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,i,r)=>wm(e,n,i,r),e.min=(...n)=>e.check(dt(...n)),e.nonempty=n=>e.check(dt(1,n)),e.max=(...n)=>e.check(Vt(...n)),e.size=(...n)=>e.check(dr(...n))});function gb(e,t){return new Cp({type:"set",valueType:e,..._.normalizeParams(t)})}var sn=f("ZodEnum",(e,t)=>{ad.init(e,t),k.init(e,t),e._zod.processJSONSchema=(i,r,o)=>$m(e,i,r,o),e.enum=t.entries,e.options=Object.values(t.entries);let n=new Set(Object.keys(t.entries));e.extract=(i,r)=>{let o={};for(let a of i)if(n.has(a))o[a]=t.entries[a];else throw new Error(`Key ${a} not found in enum`);return new sn({...t,checks:[],..._.normalizeParams(r),entries:o})},e.exclude=(i,r)=>{let o={...t.entries};for(let a of i)if(n.has(a))delete o[a];else throw new Error(`Key ${a} not found in enum`);return new sn({...t,checks:[],..._.normalizeParams(r),entries:o})}});function vs(e,t){let n=Array.isArray(e)?Object.fromEntries(e.map(i=>[i,i])):e;return new sn({type:"enum",entries:n,..._.normalizeParams(t)})}function vb(e,t){return new sn({type:"enum",entries:e,..._.normalizeParams(t)})}var Op=f("ZodLiteral",(e,t)=>{sd.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,i,r)=>Im(e,n,i,r),e.values=new Set(t.values),Object.defineProperty(e,"value",{get(){if(t.values.length>1)throw new Error("This schema contains multiple valid literal values. Use `.values` instead.");return t.values[0]}})});function hb(e,t){return new Op({type:"literal",values:Array.isArray(e)?e:[e],..._.normalizeParams(t)})}var Dp=f("ZodFile",(e,t)=>{cd.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,i,r)=>Nm(e,n,i,r),e.min=(n,i)=>e.check(dt(n,i)),e.max=(n,i)=>e.check(Vt(n,i)),e.mime=(n,i)=>e.check(Yr(Array.isArray(n)?n:[n],i))});function yb(e){return om(Dp,e)}var wp=f("ZodTransform",(e,t)=>{ud.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,i,r)=>Om(e,n,i,r),e._zod.parse=(n,i)=>{if(i.direction==="backward")throw new Mt(e.constructor.name);n.addIssue=o=>{if(typeof o=="string")n.issues.push(_.issue(o,n.value,t));else{let a=o;a.fatal&&(a.continue=!1),a.code??(a.code="custom"),a.input??(a.input=n.value),a.inst??(a.inst=e),n.issues.push(_.issue(a))}};let r=t.transform(n.value,n);return r instanceof Promise?r.then(o=>(n.value=o,n.fallback=!0,n)):(n.value=r,n.fallback=!0,n)}});function hs(e){return new wp({type:"transform",transform:e})}var ys=f("ZodOptional",(e,t)=>{aa.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,i,r)=>La(e,n,i,r),e.unwrap=()=>e._zod.def.innerType});function _i(e){return new ys({type:"optional",innerType:e})}var zp=f("ZodExactOptional",(e,t)=>{ld.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,i,r)=>La(e,n,i,r),e.unwrap=()=>e._zod.def.innerType});function Mp(e){return new zp({type:"optional",innerType:e})}var jp=f("ZodNullable",(e,t)=>{dd.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,i,r)=>Fm(e,n,i,r),e.unwrap=()=>e._zod.def.innerType});function Ei(e){return new jp({type:"nullable",innerType:e})}function bb(e){return _i(Ei(e))}var Up=f("ZodDefault",(e,t)=>{md.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,i,r)=>Vm(e,n,i,r),e.unwrap=()=>e._zod.def.innerType,e.removeDefault=e.unwrap});function Lp(e,t){return new Up({type:"default",innerType:e,get defaultValue(){return typeof t=="function"?t():_.shallowClone(t)}})}var Fp=f("ZodPrefault",(e,t)=>{pd.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,i,r)=>Bm(e,n,i,r),e.unwrap=()=>e._zod.def.innerType});function Zp(e,t){return new Fp({type:"prefault",innerType:e,get defaultValue(){return typeof t=="function"?t():_.shallowClone(t)}})}var bs=f("ZodNonOptional",(e,t)=>{fd.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,i,r)=>Zm(e,n,i,r),e.unwrap=()=>e._zod.def.innerType});function Vp(e,t){return new bs({type:"nonoptional",innerType:e,..._.normalizeParams(t)})}var Bp=f("ZodSuccess",(e,t)=>{gd.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,i,r)=>Pm(e,n,i,r),e.unwrap=()=>e._zod.def.innerType});function Sb(e){return new Bp({type:"success",innerType:e})}var Gp=f("ZodCatch",(e,t)=>{vd.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,i,r)=>Gm(e,n,i,r),e.unwrap=()=>e._zod.def.innerType,e.removeCatch=e.unwrap});function Wp(e,t){return new Gp({type:"catch",innerType:e,catchValue:typeof t=="function"?t:()=>t})}var Kp=f("ZodNaN",(e,t)=>{hd.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,i,r)=>Tm(e,n,i,r)});function _b(e){return nm(Kp,e)}var Ni=f("ZodPipe",(e,t)=>{sa.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,i,r)=>Wm(e,n,i,r),e.in=t.in,e.out=t.out});function Xa(e,t){return new Ni({type:"pipe",in:e,out:t})}var Pi=f("ZodCodec",(e,t)=>{Ni.init(e,t),pi.init(e,t)});function Eb(e,t,n){return new Pi({type:"pipe",in:e,out:t,transform:n.decode,reverseTransform:n.encode})}function Ab(e){let t=e._zod.def;return new Pi({type:"pipe",in:t.out,out:t.in,transform:t.reverseTransform,reverseTransform:t.transform})}var Hp=f("ZodPreprocess",(e,t)=>{Ni.init(e,t),yd.init(e,t)}),Xp=f("ZodReadonly",(e,t)=>{bd.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,i,r)=>Km(e,n,i,r),e.unwrap=()=>e._zod.def.innerType});function Yp(e){return new Xp({type:"readonly",innerType:e})}var Jp=f("ZodTemplateLiteral",(e,t)=>{Sd.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,i,r)=>Rm(e,n,i,r)});function xb(e,t){return new Jp({type:"template_literal",parts:e,..._.normalizeParams(t)})}var qp=f("ZodLazy",(e,t)=>{Ad.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,i,r)=>Xm(e,n,i,r),e.unwrap=()=>e._zod.def.getter()});function Qp(e){return new qp({type:"lazy",getter:e})}var ef=f("ZodPromise",(e,t)=>{Ed.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,i,r)=>Hm(e,n,i,r),e.unwrap=()=>e._zod.def.innerType});function $b(e){return new ef({type:"promise",innerType:e})}var tf=f("ZodFunction",(e,t)=>{_d.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,i,r)=>Cm(e,n,i,r)});function Ib(e){return new tf({type:"function",input:Array.isArray(e?.input)?Np(e?.input):e?.input??Ii(fr()),output:e?.output??fr()})}var ki=f("ZodCustom",(e,t)=>{xd.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,i,r)=>km(e,n,i,r)});function Tb(e){let t=new X({check:"custom"});return t._zod.check=e,t}function Rb(e,t){return am(ki,e??(()=>!0),t)}function rf(e,t={}){return sm(ki,e,t)}function nf(e,t){return cm(e,t)}var Nb=um,Pb=lm;function kb(e,t={}){let n=new ki({type:"custom",check:"custom",fn:i=>i instanceof e,abort:!0,..._.normalizeParams(t)});return n._zod.bag.Class=e,n._zod.check=i=>{i.value instanceof e||i.issues.push({code:"invalid_type",expected:e.name,input:i.value,inst:n,path:[...n._zod.def.path??[]]})},n}var Cb=(...e)=>dm({Codec:Pi,Boolean:dn,String:cn},...e);function Ob(e){let t=Qp(()=>gs([bi(e),pp(),fp(),yp(),Ii(t),Pp(bi(),t)]));return t}function Db(e,t){return new Hp({type:"pipe",in:hs(e),out:t})}var WR={invalid_type:"invalid_type",too_big:"too_big",too_small:"too_small",invalid_format:"invalid_format",not_multiple_of:"not_multiple_of",unrecognized_keys:"unrecognized_keys",invalid_union:"invalid_union",invalid_key:"invalid_key",invalid_element:"invalid_element",invalid_value:"invalid_value",custom:"custom"};function KR(e){ee({customError:e})}function HR(){return ee().customError}var of;of||(of={});var A={...yi,...Va,iso:on},XR=new Set(["$schema","$ref","$defs","definitions","$id","id","$comment","$anchor","$vocabulary","$dynamicRef","$dynamicAnchor","type","enum","const","anyOf","oneOf","allOf","not","properties","required","additionalProperties","patternProperties","propertyNames","minProperties","maxProperties","items","prefixItems","additionalItems","minItems","maxItems","uniqueItems","contains","minContains","maxContains","minLength","maxLength","pattern","format","minimum","maximum","exclusiveMinimum","exclusiveMaximum","multipleOf","description","default","contentEncoding","contentMediaType","contentSchema","unevaluatedItems","unevaluatedProperties","if","then","else","dependentSchemas","dependentRequired","nullable","readOnly"]);function YR(e,t){let n=e.$schema;return n==="https://json-schema.org/draft/2020-12/schema"?"draft-2020-12":n==="http://json-schema.org/draft-07/schema#"?"draft-7":n==="http://json-schema.org/draft-04/schema#"?"draft-4":t??"draft-2020-12"}function JR(e,t){if(!e.startsWith("#"))throw new Error("External $ref is not supported, only local refs (#/...) are allowed");let n=e.slice(1).split("/").filter(Boolean);if(n.length===0)return t.rootSchema;let i=t.version==="draft-2020-12"?"$defs":"definitions";if(n[0]===i){let r=n[1];if(!r||!t.defs[r])throw new Error(`Reference not found: ${e}`);return t.defs[r]}throw new Error(`Reference not found: ${e}`)}function wb(e,t){if(e.not!==void 0){if(typeof e.not=="object"&&Object.keys(e.not).length===0)return A.never();throw new Error("not is not supported in Zod (except { not: {} } for never)")}if(e.unevaluatedItems!==void 0)throw new Error("unevaluatedItems is not supported");if(e.unevaluatedProperties!==void 0)throw new Error("unevaluatedProperties is not supported");if(e.if!==void 0||e.then!==void 0||e.else!==void 0)throw new Error("Conditional schemas (if/then/else) are not supported");if(e.dependentSchemas!==void 0||e.dependentRequired!==void 0)throw new Error("dependentSchemas and dependentRequired are not supported");if(e.$ref){let r=e.$ref;if(t.refs.has(r))return t.refs.get(r);if(t.processing.has(r))return A.lazy(()=>{if(!t.refs.has(r))throw new Error(`Circular reference not resolved: ${r}`);return t.refs.get(r)});t.processing.add(r);let o=JR(r,t),a=ye(o,t);return t.refs.set(r,a),t.processing.delete(r),a}if(e.enum!==void 0){let r=e.enum;if(t.version==="openapi-3.0"&&e.nullable===!0&&r.length===1&&r[0]===null)return A.null();if(r.length===0)return A.never();if(r.length===1)return A.literal(r[0]);if(r.every(a=>typeof a=="string"))return A.enum(r);let o=r.map(a=>A.literal(a));return o.length<2?o[0]:A.union([o[0],o[1],...o.slice(2)])}if(e.const!==void 0)return A.literal(e.const);let n=e.type;if(Array.isArray(n)){let r=n.map(o=>{let a={...e,type:o};return wb(a,t)});return r.length===0?A.never():r.length===1?r[0]:A.union(r)}if(!n)return A.any();let i;switch(n){case"string":{let r=A.string();if(e.format){let o=e.format;o==="email"?r=r.check(A.email()):o==="uri"||o==="uri-reference"?r=r.check(A.url()):o==="uuid"||o==="guid"?r=r.check(A.uuid()):o==="date-time"?r=r.check(A.iso.datetime()):o==="date"?r=r.check(A.iso.date()):o==="time"?r=r.check(A.iso.time()):o==="duration"?r=r.check(A.iso.duration()):o==="ipv4"?r=r.check(A.ipv4()):o==="ipv6"?r=r.check(A.ipv6()):o==="mac"?r=r.check(A.mac()):o==="cidr"?r=r.check(A.cidrv4()):o==="cidr-v6"?r=r.check(A.cidrv6()):o==="base64"?r=r.check(A.base64()):o==="base64url"?r=r.check(A.base64url()):o==="e164"?r=r.check(A.e164()):o==="jwt"?r=r.check(A.jwt()):o==="emoji"?r=r.check(A.emoji()):o==="nanoid"?r=r.check(A.nanoid()):o==="cuid"?r=r.check(A.cuid()):o==="cuid2"?r=r.check(A.cuid2()):o==="ulid"?r=r.check(A.ulid()):o==="xid"?r=r.check(A.xid()):o==="ksuid"&&(r=r.check(A.ksuid()))}typeof e.minLength=="number"&&(r=r.min(e.minLength)),typeof e.maxLength=="number"&&(r=r.max(e.maxLength)),e.pattern&&(r=r.regex(new RegExp(e.pattern))),i=r;break}case"number":case"integer":{let r=n==="integer"?A.number().int():A.number();typeof e.minimum=="number"&&(r=r.min(e.minimum)),typeof e.maximum=="number"&&(r=r.max(e.maximum)),typeof e.exclusiveMinimum=="number"?r=r.gt(e.exclusiveMinimum):e.exclusiveMinimum===!0&&typeof e.minimum=="number"&&(r=r.gt(e.minimum)),typeof e.exclusiveMaximum=="number"?r=r.lt(e.exclusiveMaximum):e.exclusiveMaximum===!0&&typeof e.maximum=="number"&&(r=r.lt(e.maximum)),typeof e.multipleOf=="number"&&(r=r.multipleOf(e.multipleOf)),i=r;break}case"boolean":{i=A.boolean();break}case"null":{i=A.null();break}case"object":{let r={},o=e.properties||{},a=new Set(e.required||[]);for(let[u,l]of Object.entries(o)){let m=ye(l,t);r[u]=a.has(u)?m:m.optional()}if(e.propertyNames){let u=ye(e.propertyNames,t),l=e.additionalProperties&&typeof e.additionalProperties=="object"?ye(e.additionalProperties,t):A.any();if(Object.keys(r).length===0){i=A.record(u,l);break}let m=A.object(r).passthrough(),p=A.looseRecord(u,l);i=A.intersection(m,p);break}if(e.patternProperties){let u=e.patternProperties,l=Object.keys(u),m=[];for(let g of l){let h=ye(u[g],t),x=A.string().regex(new RegExp(g));m.push(A.looseRecord(x,h))}let p=[];if(Object.keys(r).length>0&&p.push(A.object(r).passthrough()),p.push(...m),p.length===0)i=A.object({}).passthrough();else if(p.length===1)i=p[0];else{let g=A.intersection(p[0],p[1]);for(let h=2;h<p.length;h++)g=A.intersection(g,p[h]);i=g}break}let c=A.object(r);e.additionalProperties===!1?i=c.strict():typeof e.additionalProperties=="object"?i=c.catchall(ye(e.additionalProperties,t)):i=c.passthrough();break}case"array":{let r=e.prefixItems,o=e.items;if(r&&Array.isArray(r)){let a=r.map(u=>ye(u,t)),c=o&&typeof o=="object"&&!Array.isArray(o)?ye(o,t):void 0;c?i=A.tuple(a).rest(c):i=A.tuple(a),typeof e.minItems=="number"&&(i=i.check(A.minLength(e.minItems))),typeof e.maxItems=="number"&&(i=i.check(A.maxLength(e.maxItems)))}else if(Array.isArray(o)){let a=o.map(u=>ye(u,t)),c=e.additionalItems&&typeof e.additionalItems=="object"?ye(e.additionalItems,t):void 0;c?i=A.tuple(a).rest(c):i=A.tuple(a),typeof e.minItems=="number"&&(i=i.check(A.minLength(e.minItems))),typeof e.maxItems=="number"&&(i=i.check(A.maxLength(e.maxItems)))}else if(o!==void 0){let a=ye(o,t),c=A.array(a);typeof e.minItems=="number"&&(c=c.min(e.minItems)),typeof e.maxItems=="number"&&(c=c.max(e.maxItems)),i=c}else i=A.array(A.any());break}default:throw new Error(`Unsupported type: ${n}`)}return i}function ye(e,t){if(typeof e=="boolean")return e?A.any():A.never();let n=wb(e,t),i=e.type||e.enum!==void 0||e.const!==void 0;if(e.anyOf&&Array.isArray(e.anyOf)){let c=e.anyOf.map(l=>ye(l,t)),u=A.union(c);n=i?A.intersection(n,u):u}if(e.oneOf&&Array.isArray(e.oneOf)){let c=e.oneOf.map(l=>ye(l,t)),u=A.xor(c);n=i?A.intersection(n,u):u}if(e.allOf&&Array.isArray(e.allOf))if(e.allOf.length===0)n=i?n:A.any();else{let c=i?n:ye(e.allOf[0],t),u=i?0:1;for(let l=u;l<e.allOf.length;l++)c=A.intersection(c,ye(e.allOf[l],t));n=c}e.nullable===!0&&t.version==="openapi-3.0"&&(n=A.nullable(n)),e.readOnly===!0&&(n=A.readonly(n)),e.default!==void 0&&(n=n.default(e.default));let r={},o=["$id","id","$comment","$anchor","$vocabulary","$dynamicRef","$dynamicAnchor"];for(let c of o)c in e&&(r[c]=e[c]);let a=["contentEncoding","contentMediaType","contentSchema"];for(let c of a)c in e&&(r[c]=e[c]);for(let c of Object.keys(e))XR.has(c)||(r[c]=e[c]);return Object.keys(r).length>0&&t.registry.add(n,r),e.description&&(n=n.describe(e.description)),n}function zb(e,t){if(typeof e=="boolean")return e?A.any():A.never();let n;try{n=JSON.parse(JSON.stringify(e))}catch{throw new Error("fromJSONSchema input is not valid JSON (possibly cyclic); use $defs/$ref for recursive schemas")}let i=YR(n,t?.defaultTarget),r=n.$defs||n.definitions||{},o={version:i,defs:r,refs:new Map,processing:new Set,rootSchema:n,registry:t?.registry??pe};return ye(n,o)}var af={};At(af,{bigint:()=>tN,boolean:()=>eN,date:()=>rN,number:()=>QR,string:()=>qR});function qR(e){return Rd(cn,e)}function QR(e){return zd(ln,e)}function eN(e){return Vd(dn,e)}function tN(e){return Gd(mn,e)}function rN(e){return rm($i,e)}ee(ca());var nN=Object.defineProperty,Mb=(e,t)=>nN(e,"name",{value:t,configurable:!0});function sf(e){let t=e.replace(/\./g,"-");return{hostedZoneId:`${t}-hosted-zone-id`,certificateArn:`${t}-certificate-arn`,usEast1CertificateArn:`${t}-us-east-1-certificate-arn`,delegationRoleArn:`${t}-delegation-role-arn`,nameservers:`${t}-nameservers`}}Mb(sf,"getDomainExportNames");function jb(e){return typeof e.hostedZoneId=="string"}Mb(jb,"isManagedDomainBinding");var iN=Object.defineProperty,Kt=(e,t)=>iN(e,"name",{value:t,configurable:!0});function Ke(e){return e.replace(/[-_](.)/g,(t,n)=>n.toUpperCase()).replace(/^./,t=>t.toUpperCase())}Kt(Ke,"toPascalCase");function pt(e){return e.replace(/([A-Z]+)([A-Z][a-z])/g,"$1-$2").replace(/([a-z\d])([A-Z])/g,"$1-$2").replace(/[\s_]+/g,"-").toLowerCase()}Kt(pt,"toKebab");function pn(e){return pt(e).replace(/-/g,"_")}Kt(pn,"toValidDatabaseName");function Ub(e){return pt(e).replace(/-/g,"_").toUpperCase()}Kt(Ub,"toScreamingSnake");function Lb(e){return e.length===0?e:e.charAt(0).toUpperCase()+e.slice(1)}Kt(Lb,"capitalise");function Fb(e){return e.split(".").join("")}Kt(Fb,"getSafeZoneName");function vr(e){return e.toLowerCase().replace(/[^a-z0-9]/g,"")}Kt(vr,"accountConstructKey");function Zb(e){let t=e.replace(new RegExp("\\P{ASCII}","gu"),"");return vr(t)===vr(e)&&vr(e)!==""}Kt(Zb,"hasAsciiStableConstructKey");var oN=Object.defineProperty,aN=(e,t)=>oN(e,"name",{value:t,configurable:!0});function Vb(e){return`${Ke(e)}ImageTag`}aN(Vb,"imageTagParameterName");var sN=Object.defineProperty,cN=(e,t)=>sN(e,"name",{value:t,configurable:!0});function Bb(e){let t=new Map;for(let n of e){let i=vr(n);if(i==="")return{kind:"empty-construct-key",name:n};let r=t.get(i);if(r!==void 0)return{kind:"duplicate-construct-key",name:n,existingName:r,constructKey:i};t.set(i,n)}return null}cN(Bb,"findAccountNameCollision");var uN=Object.defineProperty,Ci=(e,t)=>uN(e,"name",{value:t,configurable:!0}),Ht="us-east-2";var He=Object.freeze([{code:"us-east-2",name:"US East",city:"Ohio",country:"USA",optIn:!1},{code:"us-west-2",name:"US West",city:"Oregon",country:"USA",optIn:!1},{code:"us-east-1",name:"US East",city:"N. Virginia",country:"USA",optIn:!1},{code:"eu-west-1",name:"EU West",city:"Ireland",country:"Ireland",optIn:!1},{code:"eu-central-1",name:"EU Central",city:"Frankfurt",country:"Germany",optIn:!1},{code:"ap-southeast-1",name:"Asia Pacific",city:"Singapore",country:"Singapore",optIn:!1},{code:"ap-northeast-1",name:"Asia Pacific",city:"Tokyo",country:"Japan",optIn:!1},{code:"ap-southeast-2",name:"Asia Pacific",city:"Sydney",country:"Australia",optIn:!1},{code:"us-west-1",name:"US West",city:"N. California",country:"USA",optIn:!1},{code:"ca-central-1",name:"Canada",city:"Central",country:"Canada",optIn:!1},{code:"af-south-1",name:"Africa",city:"Cape Town",country:"South Africa",optIn:!0},{code:"ap-east-1",name:"Asia Pacific",city:"Hong Kong",country:"Hong Kong",optIn:!0},{code:"ap-northeast-2",name:"Asia Pacific",city:"Seoul",country:"South Korea",optIn:!1},{code:"ap-northeast-3",name:"Asia Pacific",city:"Osaka",country:"Japan",optIn:!1},{code:"ap-south-1",name:"Asia Pacific",city:"Mumbai",country:"India",optIn:!1},{code:"ap-south-2",name:"Asia Pacific",city:"Hyderabad",country:"India",optIn:!0},{code:"ap-southeast-3",name:"Asia Pacific",city:"Jakarta",country:"Indonesia",optIn:!0},{code:"ap-southeast-4",name:"Asia Pacific",city:"Melbourne",country:"Australia",optIn:!0},{code:"eu-central-2",name:"EU Central",city:"Zurich",country:"Switzerland",optIn:!0},{code:"eu-north-1",name:"EU North",city:"Stockholm",country:"Sweden",optIn:!1},{code:"eu-south-1",name:"EU South",city:"Milan",country:"Italy",optIn:!0},{code:"eu-south-2",name:"EU South",city:"Spain",country:"Spain",optIn:!0},{code:"eu-west-2",name:"EU West",city:"London",country:"UK",optIn:!1},{code:"eu-west-3",name:"EU West",city:"Paris",country:"France",optIn:!1},{code:"me-central-1",name:"Middle East",city:"UAE",country:"UAE",optIn:!0},{code:"me-south-1",name:"Middle East",city:"Bahrain",country:"Bahrain",optIn:!0},{code:"sa-east-1",name:"South America",city:"S\xE3o Paulo",country:"Brazil",optIn:!1},{code:"ap-southeast-5",name:"Asia Pacific",city:"Kuala Lumpur",country:"Malaysia",optIn:!0},{code:"ap-southeast-6",name:"Asia Pacific",city:"Auckland",country:"New Zealand",optIn:!0},{code:"ap-southeast-7",name:"Asia Pacific",city:"Bangkok",country:"Thailand",optIn:!0},{code:"ap-east-2",name:"Asia Pacific",city:"Taipei",country:"Taiwan",optIn:!0},{code:"ca-west-1",name:"Canada West",city:"Calgary",country:"Canada",optIn:!0},{code:"il-central-1",name:"Israel",city:"Tel Aviv",country:"Israel",optIn:!0},{code:"mx-central-1",name:"Mexico",city:"Central",country:"Mexico",optIn:!0}]),Tt=Object.freeze(He.map(e=>e.code)),Ss=new Set(He.filter(e=>e.optIn).map(e=>e.code));function _s(e){return`${e} is an opt-in region: it must be enabled in the AWS account (Account settings \u2192 Regions) before deployment will succeed.`}Ci(_s,"optInRegionWarning");function fn(e){return He.find(t=>t.code===e)}Ci(fn,"getRegionInfo");function gn(e){let t=e.split("-");return t.length===3&&t[0]&&t[1]&&t[2]?`${t[0]}${t[1][0]}${t[2]}`:e}Ci(gn,"abbreviateRegion");var lN=Object.freeze({"Europe/London":"eu-west-2","Europe/Jersey":"eu-west-2","Europe/Guernsey":"eu-west-2","Europe/Isle_of_Man":"eu-west-2","Europe/Dublin":"eu-west-1","Europe/Paris":"eu-west-3","Europe/Berlin":"eu-central-1","Europe/Amsterdam":"eu-central-1","Europe/Brussels":"eu-central-1","Europe/Luxembourg":"eu-central-1","Europe/Vienna":"eu-central-1","Europe/Prague":"eu-central-1","Europe/Warsaw":"eu-central-1","Europe/Budapest":"eu-central-1","Europe/Zurich":"eu-central-2","Europe/Stockholm":"eu-north-1","Europe/Oslo":"eu-north-1","Europe/Copenhagen":"eu-north-1","Europe/Helsinki":"eu-north-1","Europe/Tallinn":"eu-north-1","Europe/Riga":"eu-north-1","Europe/Vilnius":"eu-north-1","Europe/Rome":"eu-south-1","Europe/Malta":"eu-south-1","Europe/Athens":"eu-south-1","Europe/Madrid":"eu-south-2","Europe/Lisbon":"eu-south-2","America/New_York":"us-east-1","America/Detroit":"us-east-1","America/Toronto":"ca-central-1","America/Montreal":"ca-central-1","America/Halifax":"ca-central-1","America/Winnipeg":"ca-central-1","America/Chicago":"us-east-2","America/Indiana/Indianapolis":"us-east-2","America/Mexico_City":"us-east-2","America/Denver":"us-west-2","America/Phoenix":"us-west-2","America/Edmonton":"us-west-2","America/Vancouver":"us-west-2","America/Los_Angeles":"us-west-1","America/Tijuana":"us-west-1","America/Sao_Paulo":"sa-east-1","America/Argentina/Buenos_Aires":"sa-east-1","America/Santiago":"sa-east-1","America/Montevideo":"sa-east-1","America/Lima":"sa-east-1","America/Bogota":"us-east-1","Asia/Tokyo":"ap-northeast-1","Asia/Seoul":"ap-northeast-2","Asia/Hong_Kong":"ap-east-1","Asia/Shanghai":"ap-east-1","Asia/Taipei":"ap-east-1","Asia/Macau":"ap-east-1","Asia/Singapore":"ap-southeast-1","Asia/Kuala_Lumpur":"ap-southeast-1","Asia/Bangkok":"ap-southeast-1","Asia/Ho_Chi_Minh":"ap-southeast-1","Asia/Manila":"ap-southeast-1","Asia/Jakarta":"ap-southeast-3","Asia/Kolkata":"ap-south-1","Asia/Calcutta":"ap-south-1","Asia/Karachi":"ap-south-1","Asia/Dhaka":"ap-south-1","Asia/Colombo":"ap-south-1","Asia/Dubai":"me-central-1","Asia/Muscat":"me-central-1","Asia/Qatar":"me-south-1","Asia/Bahrain":"me-south-1","Asia/Riyadh":"me-south-1","Asia/Kuwait":"me-south-1","Asia/Jerusalem":"me-south-1","Australia/Sydney":"ap-southeast-2","Australia/Brisbane":"ap-southeast-2","Australia/Canberra":"ap-southeast-2","Australia/Melbourne":"ap-southeast-4","Australia/Hobart":"ap-southeast-4","Australia/Adelaide":"ap-southeast-4","Pacific/Auckland":"ap-southeast-2","Pacific/Honolulu":"us-west-1","Africa/Johannesburg":"af-south-1","Africa/Casablanca":"eu-south-2","Africa/Cairo":"me-south-1","Indian/Maldives":"ap-south-1"}),dN=Object.freeze({Europe:"eu-central-1",America:"us-east-1",Asia:"ap-southeast-1",Australia:"ap-southeast-2",Pacific:"ap-southeast-2",Africa:"af-south-1",Atlantic:"eu-west-1",Indian:"ap-south-1"}),mN=Object.freeze({"af-south-1":"eu-west-1","ap-east-1":"ap-southeast-1","ap-southeast-3":"ap-southeast-1","ap-southeast-4":"ap-southeast-2","eu-central-2":"eu-central-1","eu-south-1":"eu-central-1","eu-south-2":"eu-west-3","me-central-1":"ap-south-1","me-south-1":"ap-south-1"});function cf(e){return Ss.has(e)?mN[e]??Ht:e}Ci(cf,"toDeployableRegion");function Es(e){if(!e)return;let t=lN[e];if(t!==void 0)return cf(t);let n=e.split("/")[0];if(n===void 0)return;let i=dN[n];return i===void 0?void 0:cf(i)}Ci(Es,"suggestRegionForTimezone");var pN=Object.defineProperty,Oi=(e,t)=>pN(e,"name",{value:t,configurable:!0});function As(e){return pt(e).replace(/[^a-z0-9]+/g,"-").replace(/^-+|-+$/g,"")}Oi(As,"slugifyAccountName");function Gb(e,t){let n=As(e),i=As(t);return n===""?i:i===""?n:`${n}-${i}`}Oi(Gb,"defaultConnectedAccountName");function Wb(e,t){let n=As(t);return n===""?e:`${e}-${n}`}Oi(Wb,"suffixedAccountName");var Kb=new Set(He.map(e=>gn(e.code)));function Hb(e){let t=e.toLowerCase().split(/[-\s_]+/).filter(i=>i.length>0),n=t[t.length-1];if(n!==void 0&&Kb.has(n))return n}Oi(Hb,"findTrailingRegionShortCode");function Xb(e){return`Account name must not end with a region code ("-${e}") \u2014 the region is added automatically when deploying. Remove the "-${e}" suffix.`}Oi(Xb,"regionSuffixRejectionMessage");var fN=Object.defineProperty,vn=(e,t)=>fN(e,"name",{value:t,configurable:!0});function hr(e){return e instanceof Error?e:new Error(String(e))}vn(hr,"normaliseError");function Rt(e){return e instanceof Error?e.message:typeof e=="string"?e:e&&typeof e=="object"&&"message"in e?String(e.message):"An unknown error occurred"}vn(Rt,"getErrorMessage");function uf(e,t){return!e||typeof e!="object"?!1:"code"in e&&e.code===t}vn(uf,"hasErrorCode");function xs(e){if(!(!e||typeof e!="object")&&"code"in e&&typeof e.code=="string")return e.code}vn(xs,"getErrorCode");function lf(e){return e instanceof Error?e.stack:void 0}vn(lf,"getErrorStack");function df(e){let t=Rt(e),n=xs(e);return n&&n!=="UNKNOWN_ERROR"?`[${n}] ${t}`:t}vn(df,"formatErrorString");var gN=Object.defineProperty,vN=(e,t)=>gN(e,"name",{value:t,configurable:!0});function Yb(e){let t,n=!1;return()=>(n||(t=e(),n=!0),t)}vN(Yb,"singleton");var hN=Object.defineProperty,mf=(e,t)=>hN(e,"name",{value:t,configurable:!0}),Jb=new Set(["NODE_OPTIONS","NODE_PATH","NODE_EXTRA_CA_CERTS","NODE_DEBUG","NODE_PRESERVE_SYMLINKS","LD_PRELOAD","LD_LIBRARY_PATH","LD_AUDIT","LD_BIND_NOW","DYLD_INSERT_LIBRARIES","DYLD_LIBRARY_PATH","DYLD_FRAMEWORK_PATH","PYTHONPATH","PYTHONSTARTUP","PERL5LIB","PERL5OPT","RUBYLIB","RUBYOPT","HOME","XDG_CONFIG_HOME","AWS_SHARED_CREDENTIALS_FILE","AWS_CONFIG_FILE","SHELL","BASH_ENV","ENV","ZDOTDIR"]);function qb(e){return Object.fromEntries(Object.entries(e).filter(([t])=>!Jb.has(t.toUpperCase())))}mf(qb,"filterDangerousEnvVars");var yN=/(fjall_(?:ak|dk)_)[A-Z2-7]{16}\.[A-Z2-7]{40}/g;function Qb(e){return e.replace(/-----BEGIN [A-Z ]*PRIVATE KEY-----(?:[^"\\]|\\[\\nrt"])*?-----END [A-Z ]*PRIVATE KEY-----/g,"-----BEGIN [REDACTED] PRIVATE KEY-----...-----END [REDACTED] PRIVATE KEY-----").replace(/-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g,"-----BEGIN [REDACTED] PRIVATE KEY-----...-----END [REDACTED] PRIVATE KEY-----").replace(/(\w+:\/\/[^:]+:)[^@]+(@)/gi,"$1***$2").replace(/(?<![a-zA-Z])(password|passwd|secret|api[_-]?key|token|auth|credential)([=:])["']?[^\s"']+/gi,"$1$2***").replace(/\b(ghu_|ghs_|ghp_|gho_|github_pat_)[A-Za-z0-9_]+/g,"$1***").replace(/\b(sk|rk)_(live|test)_[A-Za-z0-9]{8,}/g,"$1_$2_***").replace(/\bwhsec_[A-Za-z0-9]{8,}/g,"whsec_***").replace(/(?<=Authorization:\s*Bearer\s+)[A-Za-z0-9._~+/=-]+/gi,"***").replace(/\b(AKIA|ASIA)[A-Z0-9]{12,}\b/g,"$1***").replace(/(?<=aws_secret_access_key\s*=\s*["']?|SecretAccessKey[=:]\s*|"(aws)?secretAccessKey":\s*"|"aws_secret_access_key":\s*")[A-Za-z0-9/+=]{40,}/gi,"***").replace(/(?<="(aws)?sessionToken":\s*"|"aws_session_token":\s*")[^"]+/gi,"***").replace(/(?<=aws_session_token\s*[=:]\s*["']?|SessionToken[=:]\s*["']?)[^\s"']+/gi,"***").replace(/(?<="(internal[Aa]piKey|fjallCallbackToken)":\s*")[^"]+/g,"***").replace(yN,"$1***")}mf(Qb,"maskSensitiveOutput");function eS(e){let t=[],n="",i=!1,r=!1,o=!1,a=!1;for(let c of e){if(o){n+=c,o=!1;continue}if(c==="\\"&&!i){o=!0;continue}if(c==="'"&&!r){i=!i,a=!0;continue}if(c==='"'&&!i){r=!r,a=!0;continue}if(c===" "&&!i&&!r){(n||a)&&(t.push(n),n="",a=!1);continue}n+=c}if(i||r)throw new Error(`Unbalanced ${i?"single":"double"} quote in command: ${e.slice(0,80)}`);if(o)throw new Error(`Trailing backslash in command: ${e.slice(0,80)}`);return(n||a)&&t.push(n),t}mf(eS,"parseShellArgs");var bN=Object.defineProperty,SN=(e,t)=>bN(e,"name",{value:t,configurable:!0}),_N=SN(e=>new Promise(t=>setTimeout(t,e)),"sleep");var EN=Object.defineProperty,tS=(e,t)=>EN(e,"name",{value:t,configurable:!0});async function rS(e,t,n){let i=new Array(e.length);if(e.length===0)return i;let r=Math.max(1,Math.min(t,e.length)),o=0,a=tS(async()=>{for(;o<e.length;){let c=o++;try{let u=await n(e[c],c);i[c]={status:"fulfilled",value:u}}catch(u){i[c]={status:"rejected",reason:u}}}},"worker");return await Promise.all(Array.from({length:r},()=>a())),i}tS(rS,"mapSettledWithConcurrency");var AN=Object.defineProperty,hn=(e,t)=>AN(e,"name",{value:t,configurable:!0}),pf=["production","staging","development","platform","compliance"],nS={production:"Production",staging:"Staging",development:"Development",platform:"Platform",compliance:"Compliance"},xN=new Set(pf);function Is(e){return xN.has(e)}hn(Is,"isAccountStage");var Di={ROOT:"root",PLATFORM:"platform"},$N=[...pf,Di.ROOT];function iS(e){return Is(e)?nS[e]:e.charAt(0).toUpperCase()+e.slice(1)}hn(iS,"getEnvironmentLabel");var oS=["organisation","platform","account"],IN=s.enum(oS),$s={ORGANISATION:"organisation",PLATFORM:"platform",ACCOUNT:"account"},TN={[$s.ORGANISATION]:!0,[$s.PLATFORM]:!0,[$s.ACCOUNT]:!0},RN=new Set(Object.keys(TN));function aS(e){return RN.has(e)}hn(aS,"isAccountTier");function ff(e){return e===Di.ROOT?"organisation":e===Di.PLATFORM?"platform":"account"}hn(ff,"environmentToTier");function sS(e){return e==null||e===""||e===Di.ROOT?null:Is(e)?e:null}hn(sS,"stageFromWireEnvironment");function wi(e){return e.tier??ff(e.environment)}hn(wi,"accountTier");var NN=Object.defineProperty,zi=(e,t)=>NN(e,"name",{value:t,configurable:!0});var cS=Object.freeze({"AWS::IAM::Role":"security","AWS::IAM::Policy":"security","AWS::IAM::OIDCProvider":"security","AWS::EC2::SecurityGroup":"security","AWS::KMS::Key":"security","AWS::KMS::Alias":"security","AWS::EC2::VPC":"network","AWS::EC2::Subnet":"network","AWS::EC2::InternetGateway":"network","AWS::EC2::NatGateway":"network","AWS::EC2::RouteTable":"network","AWS::EC2::Route":"network","AWS::EC2::VPCGatewayAttachment":"network","AWS::EC2::SubnetRouteTableAssociation":"network","AWS::EC2::EIP":"network","AWS::ECS::Cluster":"compute","AWS::ECS::Service":"compute","AWS::ECS::TaskDefinition":"compute","AWS::Lambda::Function":"compute","AWS::ElasticLoadBalancingV2::LoadBalancer":"compute","AWS::ElasticLoadBalancingV2::TargetGroup":"compute","AWS::ElasticLoadBalancingV2::Listener":"compute","AWS::ElasticLoadBalancingV2::ListenerRule":"compute","AWS::RDS::DBInstance":"database","AWS::RDS::DBCluster":"database","AWS::SecretsManager::Secret":"database","AWS::S3::Bucket":"storage","AWS::S3::BucketPolicy":"storage","AWS::CloudTrail::Trail":"monitoring","AWS::CloudWatch::Alarm":"monitoring","AWS::Logs::LogGroup":"monitoring","AWS::Events::EventBus":"events","AWS::Events::Rule":"events","AWS::ECR::Repository":"registry","AWS::CodeBuild::Project":"registry","AWS::Route53::RecordSet":"dns","AWS::CertificateManager::Certificate":"dns","AWS::CloudFront::Distribution":"dns","AWS::Backup::BackupVault":"backup","AWS::Backup::BackupPlan":"backup","AWS::Backup::BackupSelection":"backup","AWS::SSO::PermissionSet":"identity","AWS::SSO::Assignment":"identity","AWS::Organizations::Account":"identity","AWS::CDK::Metadata":"compute","AWS::CloudFormation::CustomResource":"compute","AWS::CloudFormation::WaitCondition":"compute","AWS::CloudFormation::WaitConditionHandle":"compute"}),gf=new Set;function uS(e){if(!e)return"compute";if(e.startsWith("Custom::"))return cS[e]??"compute";let t=cS[e];return t||gf.add(e),t??"compute"}zi(uS,"categoriseResource");function PN(){return new Set(gf)}zi(PN,"getUnmappedResourceTypes");function kN(){gf.clear()}zi(kN,"clearUnmappedResourceTypes");var CN=Object.freeze({"AWS::EC2::NatGateway":120,"AWS::RDS::DBInstance":300,"AWS::RDS::DBCluster":300,"AWS::CloudFront::Distribution":300,"AWS::ECS::Service":180,"AWS::ElasticLoadBalancingV2::LoadBalancer":60,"AWS::EC2::SecurityGroup":10,"AWS::IAM::Role":15,"AWS::IAM::Policy":15,"AWS::IAM::OIDCProvider":10,"AWS::S3::Bucket":10,"AWS::S3::BucketPolicy":5,"AWS::Lambda::Function":30,"AWS::EC2::VPC":15,"AWS::EC2::Subnet":15,"AWS::EC2::InternetGateway":10,"AWS::EC2::RouteTable":5,"AWS::EC2::Route":5,"AWS::EC2::VPCGatewayAttachment":10,"AWS::EC2::SubnetRouteTableAssociation":5,"AWS::EC2::EIP":10,"AWS::ECS::Cluster":15,"AWS::ECS::TaskDefinition":10,"AWS::ElasticLoadBalancingV2::TargetGroup":10,"AWS::ElasticLoadBalancingV2::Listener":10,"AWS::ElasticLoadBalancingV2::ListenerRule":5,"AWS::SecretsManager::Secret":10,"AWS::Logs::LogGroup":5,"AWS::CloudWatch::Alarm":10,"AWS::CloudTrail::Trail":15,"AWS::Events::EventBus":5,"AWS::Events::Rule":5,"AWS::ECR::Repository":10,"AWS::Route53::RecordSet":30,"AWS::CertificateManager::Certificate":60,"AWS::KMS::Key":15,"AWS::KMS::Alias":5,"AWS::Backup::BackupVault":10,"AWS::Backup::BackupPlan":10,"AWS::Backup::BackupSelection":10,"AWS::SSO::PermissionSet":15,"AWS::SSO::Assignment":10,"AWS::Organizations::Account":60}),ON=30;function lS(e){return CN[e]??ON}zi(lS,"getExpectedDuration");var DN=Object.freeze({"AWS::Lambda::Function":"Lambda Function","AWS::IAM::Role":"IAM Role","AWS::IAM::Policy":"IAM Policy","AWS::S3::Bucket":"S3 Bucket","AWS::DynamoDB::Table":"DynamoDB Table","AWS::EC2::Instance":"EC2 Instance","AWS::EC2::SecurityGroup":"Security Group","AWS::EC2::VPC":"VPC","AWS::EC2::Subnet":"Subnet","AWS::EC2::InternetGateway":"Internet Gateway","AWS::EC2::RouteTable":"Route Table","AWS::EC2::Route":"Route","AWS::ECS::Cluster":"ECS Cluster","AWS::ECS::Service":"ECS Service","AWS::ECS::TaskDefinition":"Task Definition","AWS::ElasticLoadBalancingV2::LoadBalancer":"Load Balancer","AWS::ElasticLoadBalancingV2::TargetGroup":"Target Group","AWS::ElasticLoadBalancingV2::Listener":"Listener","AWS::CloudFormation::Stack":"CloudFormation Stack","AWS::CDK::Metadata":"CDK Metadata","Custom::CDKBucketDeployment":"Bucket Deployment","AWS::SSM::Parameter":"SSM Parameter","AWS::CloudWatch::Alarm":"CloudWatch Alarm","AWS::Logs::LogGroup":"Log Group","AWS::ApiGateway::RestApi":"API Gateway","AWS::ApiGateway::Deployment":"API Deployment","AWS::ApiGateway::Stage":"API Stage","AWS::ApiGateway::Method":"API Method","AWS::ApiGateway::Resource":"API Resource","AWS::CloudFront::Distribution":"CloudFront Distribution","AWS::Route53::RecordSet":"Route53 Record","AWS::RDS::DBInstance":"RDS Instance","AWS::RDS::DBCluster":"RDS Cluster","AWS::SQS::Queue":"SQS Queue","AWS::SNS::Topic":"SNS Topic","AWS::Events::Rule":"EventBridge Rule","AWS::StepFunctions::StateMachine":"Step Function","AWS::EC2::NatGateway":"NAT Gateway","AWS::EC2::EIP":"Elastic IP","AWS::EC2::VPCGatewayAttachment":"Gateway Attachment","AWS::EC2::SubnetRouteTableAssociation":"Route Association","AWS::CloudTrail::Trail":"CloudTrail","AWS::IAM::OIDCProvider":"OIDC Provider","AWS::Events::EventBus":"Event Bus","AWS::Backup::BackupVault":"Backup Vault","AWS::Backup::BackupPlan":"Backup Plan","AWS::Backup::BackupSelection":"Backup Selection","AWS::SecretsManager::Secret":"Secret","AWS::KMS::Key":"KMS Key","AWS::KMS::Alias":"KMS Alias","AWS::ECR::Repository":"ECR Repository","AWS::CertificateManager::Certificate":"Certificate","AWS::ElasticLoadBalancingV2::ListenerRule":"Listener Rule","AWS::EC2::IPAM":"IPAM","AWS::EC2::IPAMPool":"IPAM Pool","AWS::EC2::IPAMPoolCidr":"IPAM Pool CIDR","Custom::ram":"RAM","Custom::ipamDelegateAdmin":"IPAM Delegate Admin","Custom::CostAllocationTags":"Cost Allocation Tags","Custom::ActivateOrganisationsAccess":"Activate Organisations Access","Custom::Organizations_TagResource":"Organisations Tag Resource","AWS::CloudFormation::CustomResource":"Custom Resource","AWS::CloudFormation::WaitCondition":"Wait Condition","AWS::CloudFormation::WaitConditionHandle":"Wait Condition Handle","AWS::SSO::PermissionSet":"SSO Permission Set","AWS::SSO::Assignment":"SSO Assignment","AWS::Organizations::Account":"Organisations Account","AWS::S3::BucketPolicy":"S3 Bucket Policy","AWS::CodeBuild::Project":"CodeBuild Project"});function dS(e){return DN[e]||e.split("::").pop()||e}zi(dS,"getFriendlyResourceType");var wN=Object.defineProperty,zN=(e,t)=>wN(e,"name",{value:t,configurable:!0}),MN={"github.com":"github","gitlab.com":"gitlab","bitbucket.org":"bitbucket"},jN=/^https?:\/\/([^/]+)\/(.+?)\/([^/.]+?)(?:\.git)?$/,UN=/^git@([^:]+):(.+?)\/([^/.]+?)(?:\.git)?$/,LN=/^ssh:\/\/[^@]+@([^:/]+)(?::\d+)?\/(.+?)\/([^/.]+?)(?:\.git)?$/;function mS(e){if(!e)return null;let t=e.replace(/^(https?:\/\/)[^@]+@/,"$1"),n=t.match(jN)??t.match(UN)??e.match(LN);if(!n)return null;let[,i,r,o]=n;return!i||!r||!o?null:{provider:MN[i]??"other",owner:r,repo:o,host:i}}zN(mS,"parseGitRemoteUrl");var vf=["read","write","deploy","secrets:read","secrets:write","destroy","admin","applications:read","applications:deploy","deploy:oidc:mint"],pS={read:"user",write:"user",deploy:"user","secrets:read":"user","secrets:write":"user",destroy:"user",admin:"admin","applications:read":"user","applications:deploy":"user","deploy:oidc:mint":"machine"},FN=vf.filter(e=>pS[e]==="machine"),ZN=vf.filter(e=>pS[e]==="user");var VN=Object.defineProperty,yn=(e,t)=>VN(e,"name",{value:t,configurable:!0}),Rs=/^[a-zA-Z_][a-zA-Z0-9._-]*$/,hf="Secret name must start with a letter or underscore and contain only letters, numbers, underscores, hyphens, or periods",Mi=/^[a-zA-Z][a-zA-Z0-9._-]*$/,Ns="Must start with a letter and contain only letters, numbers, periods, hyphens, or underscores";var Ts=s.string().regex(Mi,Ns),fS=s.object({app:Ts.describe("Application name"),cluster:Ts.optional().describe("Cluster name"),service:Ts.optional().describe("Service name"),lambda:Ts.optional().describe("Lambda function name")}).strict().refine(e=>!(e.service&&!e.cluster),{message:"Cluster is required when service is specified"}).refine(e=>!(e.lambda&&(e.cluster||e.service)),{message:"Lambda is mutually exclusive with cluster and service"}).refine(e=>e.cluster!=="lambda",{message:'The cluster name "lambda" is reserved for lambda-scoped parameter paths'});function yf(e){let t=[e.app];return e.lambda?t.push("lambda",e.lambda):(e.cluster&&t.push(e.cluster),e.service&&e.cluster&&t.push(e.service)),t}yn(yf,"buildNamespaceParts");function bf(e,t){let n=yf(e);return t&&n.push(t),"/"+n.join("/")}yn(bf,"buildParameterPath");function Sf(e){let t=e.split("/").filter(Boolean);if(t.length<2)return null;let n=t[t.length-1]??"",i={app:t[0]??""};return t.length>=4&&t[1]==="lambda"?i.lambda=t[2]:t.length>=3&&(i.cluster=t[1],t.length>=4&&(i.service=t[2])),{namespace:i,name:n}}yn(Sf,"parseParameterPath");function gS(e){let t=Sf(e);return t?fS.safeParse(t.namespace).success&&bf(t.namespace,t.name)===e:!1}yn(gS,"isManageablePath");function vS(e){let t={};for(let n of e.split(`
 `)){let i=n.trim();if(!i||i.startsWith("#"))continue;let r=i.replace(/^export\s+/,""),o=r.indexOf("=");if(o===-1)continue;let a=r.slice(0,o).trim();if(!Rs.test(a))continue;let c=r.slice(o+1);c.length>=2&&c.startsWith('"')&&c.endsWith('"')?t[a]=c.slice(1,-1).replace(/\\([\\"$`nr])/g,(u,l)=>l==="n"?`
-`:l==="r"?"\r":l):c.length>=2&&c.startsWith("'")&&c.endsWith("'")?t[a]=c.slice(1,-1):t[a]=c}return t}yn(vS,"parseDotEnv");function hS(e){return e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`").replace(/\n/g,"\\n").replace(/\r/g,"\\r")}yn(hS,"escapeDotEnvValue");var yS=s.object({awsAccountId:s.string(),accountName:s.string().nullable(),status:s.string(),role:s.string(),roleArn:s.string(),environment:s.string().optional(),connectedAt:s.string()}),BN=s.object({accounts:s.array(yS)});var GN=Object.defineProperty,yr=(e,t)=>GN(e,"name",{value:t,configurable:!0});function _f(e){let t=[e.primaryRegion,...e.secondaryRegions??[],e.disasterRecoveryRegion].filter(n=>n!==void 0);return[...new Set(t)]}yr(_f,"deriveRegionsFromOrgConfig");function Ef(e){return e.environment??wi(e)}yr(Ef,"environmentOrTier");function Af(e,t){return`${e.toLowerCase()}-${gn(t)}`}yr(Af,"generateTargetName");function xf(e,t){let n=[];for(let i of e){if(wi(i)==="organisation")continue;let r=Ef(i);for(let o of t)n.push({name:Af(i.name,o),accountName:i.name,accountId:i.id,environment:r,region:o})}return n.sort((i,r)=>{let o=i.environment.localeCompare(r.environment);if(o!==0)return o;let a=i.accountName.localeCompare(r.accountName);return a!==0?a:i.region.localeCompare(r.region)})}yr(xf,"deriveTargets");function bS(e){return xf(e.providerAccounts,_f(e))}yr(bS,"deriveAllTargets");function WN(e,t){if(t.length===0)return e;let n=new Set([e.primaryRegion,e.disasterRecoveryRegion].filter(Boolean)),i=t.filter(r=>!n.has(r));return{...e,secondaryRegions:i.length>0?i:void 0}}yr(WN,"mergeSecondaryRegions");function SS(e,t){return e.find(n=>n.name===t)}yr(SS,"findTarget");var KN=Object.defineProperty,HN=(e,t)=>KN(e,"name",{value:t,configurable:!0});function _S(e,t){if(t!==void 0){if(t.trim()==="")throw new Error("buildAppConfigPath: container must be a non-empty string");return`${t}/fjall/${e}`}return`fjall/${e}`}HN(_S,"buildAppConfigPath");var XN=Object.defineProperty,bn=(e,t)=>XN(e,"name",{value:t,configurable:!0}),$f="infrastructure.ts",If="fjall";function ES(e,t){let n=t?.excludedPathPrefixes,i=t?.excludedPathSegments,r=[];for(let o of e){if(!Tf(o.path)||n&&xS(o.path,n)||i&&$S(o.path,i))continue;let a=Rf(o.path);a!==null&&r.push({configPath:AS(o.path),boundaryPath:a})}return r}bn(ES,"findInfrastructurePaths");function Tf(e){return e===$f||e.endsWith(`/${$f}`)}bn(Tf,"isInfrastructureFile");function Rf(e){let t=e.split("/");for(let n=0;n<t.length-1;n++)if(t[n]===If)return t.slice(0,n+1).join("/");return null}bn(Rf,"findBoundaryPath");function AS(e){return e.slice(0,-`/${$f}`.length)}bn(AS,"toConfigDir");function xS(e,t){for(let n of t)if(e.startsWith(n))return!0;return!1}bn(xS,"hasExcludedPrefix");function $S(e,t){let n=e.split("/");for(let i=0;i<n.length-1;i++)if(t.has(n[i]))return!0;return!1}bn($S,"hasExcludedSegment");var YN=Object.defineProperty,Nf=(e,t)=>YN(e,"name",{value:t,configurable:!0});function IS(e){if(e.length===0)return null;let t=[];for(let i of e){let r=TS(i.boundaryPath);if(r===null)return null;t.push(r)}let n=RS(t);return n.length===0?null:n.join("/")}Nf(IS,"inferContainerFromCandidates");function TS(e){let t=e.split("/").filter(i=>i.length>0);if(t.length===0||t[t.length-1]!==If)return null;let n=t.slice(0,t.length-1);return n.length===0?null:n}Nf(TS,"extractContainer");function RS(e){if(e.length===0)return[];let[t,...n]=e,i=[];for(let r=0;r<t.length;r+=1){let o=t[r];for(let a of n)if(a[r]!==o)return i;i.push(o)}return i}Nf(RS,"longestCommonPrefix");var JN=Object.defineProperty,NS=(e,t)=>JN(e,"name",{value:t,configurable:!0}),PS=["fjall","organisation","platform","account"];function kS(e){return PS.includes(e.toLowerCase())}NS(kS,"isReservedAppName");var CS="-cache";function OS(e){return pt(e).endsWith(CS)}NS(OS,"hasReservedAppNameSuffix");var qN=Object.defineProperty,Pf=(e,t)=>qN(e,"name",{value:t,configurable:!0});function wS(e){return{success:!0,data:e}}Pf(wS,"success");function ji(e){return{success:!1,error:e}}Pf(ji,"failure");var DS="sha256:",Ps=12,QN=new RegExp(`-sha-[0-9a-f]{${Ps}}$`);function zS(e,t,n){if(!e.startsWith(DS))return ji(new Error(`expected sha256:... digest, got ${e.slice(0,32)}`));let i=e.slice(DS.length);if(i.length<Ps)return ji(new Error(`digest hex payload too short (need >=${Ps} chars, got ${i.length})`));let r=t.trim();if(r==="")return ji(new Error("serviceName must be a non-empty string"));let o;if(n!==void 0){let u=n.trim();if(u==="")return ji(new Error("target, when supplied, must be a non-empty string; omit the argument instead"));o=u.toLowerCase()}let a=i.slice(0,Ps).toLowerCase(),c=o!==void 0?`${r.toLowerCase()}-${o}`:r.toLowerCase();return wS(`${c}-sha-${a}`)}Pf(zS,"deriveContentHashTag");var eP=Object.defineProperty,tP=(e,t)=>eP(e,"name",{value:t,configurable:!0}),MS=["full","code-only","rollback","restart"],rP=s.enum(MS),jS=/^[a-zA-Z0-9._-]+$/,US=s.string().min(1).max(128).regex(jS),LS=s.object({serviceName:s.string().min(1),imageTag:US,imageDigest:s.string().min(1).optional(),imageUri:s.string().min(1),ecrRepositoryArn:s.string().min(1).optional(),taskDefinitionArn:s.string().min(1).optional(),previousTaskDefinitionArn:s.string().min(1).optional(),functionArn:s.string().min(1).optional(),publishedVersion:s.string().min(1).optional()}).strict(),nP=s.array(LS);function FS(e,t){return`${e}${t}`}tP(FS,"artefactOutputKey");var iP=Object.defineProperty,ZS=(e,t)=>iP(e,"name",{value:t,configurable:!0}),ft=["payload","nextjs","staticsite"],kf=new Set(ft);function Cf(e){return typeof e=="string"&&kf.has(e)}ZS(Cf,"isPatternType");var Sn={payload:{label:"Payload CMS",constructIdSuffix:"Payload",artefact:"opennext-lambda",stackPlacement:"compute",deployable:!0},nextjs:{label:"Next.js",constructIdSuffix:"Nextjs",artefact:"opennext-lambda",stackPlacement:"compute",deployable:!1},staticsite:{label:"Static site",constructIdSuffix:"StaticSite",artefact:"static-assets",stackPlacement:"cdn",deployable:!0}},VS=ft.filter(e=>Sn[e].deployable),Of=ft.filter(e=>Sn[e].artefact==="opennext-lambda"),oP=new Set(Of);function Df(e){return e!=null&&oP.has(e)}ZS(Df,"isOpenNextPatternType");var Ui=["multipage","spa"];var aP=Object.defineProperty,wf=(e,t)=>aP(e,"name",{value:t,configurable:!0}),BS="noreply";function GS(e){return`${BS}@${e}`}wf(GS,"defaultFormsFromAddress");function WS(e){return`https://${e}`}wf(WS,"defaultFormsCorsOrigin");function ks(e,t){let n=e.split("@");if(n.length!==2)return!1;let[i,r]=n;return i===void 0||i===""||r===void 0?!1:r.toLowerCase()===t.toLowerCase()}wf(ks,"isAddressAtDomain");var KS=2;var sP=s.object({devDomain:s.string().min(1),hostedZoneId:s.string().min(1).optional(),parentDomain:s.string().min(1).optional(),parentDelegationRoleArn:s.string().min(1).optional()}).strict().superRefine((e,t)=>{if(e.hostedZoneId!==void 0){e.parentDomain!==void 0&&t.addIssue({code:"custom",path:["parentDomain"],message:"hostedZoneId (adopt mode) is mutually exclusive with parentDomain \u2014 the adopted zone was already delegated; omit parentDomain"}),e.parentDelegationRoleArn!==void 0&&t.addIssue({code:"custom",path:["parentDelegationRoleArn"],message:"hostedZoneId (adopt mode) is mutually exclusive with parentDelegationRoleArn \u2014 the adopted zone was already delegated; omit parentDelegationRoleArn"});return}e.parentDelegationRoleArn!==void 0&&e.parentDomain===void 0&&t.addIssue({code:"custom",path:["parentDomain"],message:"parentDelegationRoleArn requires parentDomain \u2014 set parentDomain to the parent zone the DelegationRole belongs to"}),e.parentDomain!==void 0&&!e.devDomain.endsWith(`.${e.parentDomain}`)&&t.addIssue({code:"custom",path:["parentDomain"],message:"parentDomain must be a proper DNS suffix of devDomain \u2014 devDomain must end with `.<parentDomain>`"})}),HS={appId:s.string().min(1),appKebab:s.string().min(1),engineVersion:s.string().min(1).optional(),adoptSlotEcr:s.boolean().optional(),phase:s.enum(["zone","full"]).optional(),domain:sP.optional()},cP=s.object(HS).strict(),uP=s.object({...HS,version:s.literal(KS),appName:s.string().min(1)}).strict().refine(e=>e.appName===`fjall-dev-${e.appKebab}`,{message:"appName must equal `fjall-dev-${appKebab}` (single-source identity)",path:["appName"]});var dP=Object.defineProperty,_n=(e,t)=>dP(e,"name",{value:t,configurable:!0});function XS(e){return e.success===!0}_n(XS,"isSuccess");function YS(e){return e.success===!1}_n(YS,"isFailure");function N(e){return{success:!0,data:e}}_n(N,"success");function R(e){return{success:!1,error:e}}_n(R,"failure");async function JS(e){try{let t=await e();return N(t)}catch(t){return R(hr(t))}}_n(JS,"tryAsync");function qS(e){try{let t=e();return N(t)}catch(t){return R(hr(t))}}_n(qS,"trySync");var mP=Object.defineProperty,pP=(e,t)=>mP(e,"name",{value:t,configurable:!0}),QS=/^[a-zA-Z][a-zA-Z0-9-]*$/,fP=Mi.source.replace(/^\^|\$$/g,""),z=Object.freeze({IDENTIFIER:QS,NEW_APP_NAME:/^[a-z][a-z0-9-]*$/,RESOURCE_NAME:/^[a-zA-Z][a-zA-Z0-9]*$/,ECS_SERVICE_NAME:QS,BUCKET_NAME:/^[a-z][a-z0-9-]*[a-z0-9]$|^[a-z][a-z0-9]*$/,DATABASE_NAME:/^[a-zA-Z][a-zA-Z0-9_]*$/,RESOURCE_TYPE:/^[a-z]+(:[a-z]+)?$/,SSM_PATH:new RegExp(`^(?:/${fP})+$`),SECRET_NAME:Rs,SSM_COMPONENT:Mi,EMAIL:/^[^\s@]+@[^\s@]+\.[^\s@]+$/,DOCKER_IMAGE:/^[a-z0-9][a-z0-9._-]*[a-z0-9](:[a-z0-9._-]+)?$/,DOMAIN:/^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)+$/i,HTTP_ORIGIN:/^https?:\/\/[a-z0-9.-]+(:\d+)?$/i,PASCAL_CASE:/^[A-Z][A-Za-z0-9]*$/,AWS_ACCOUNT_ID:/^\d{12}$/,VPC_ID:/^vpc-[a-z0-9]+$/,ROLE_ARN:/^arn:aws[a-zA-Z-]*:iam::\d{12}:role\/.+$/,CIDR:/^((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\.){3}(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\/(3[0-2]|[12]?\d)$/,SCHEDULE_EXPRESSION:/^(rate\(1 (?:minute|hour|day)\)|rate\((?:[2-9]|[1-9]\d+) (?:minutes|hours|days)\)|cron\([^\s()]+ [^\s()]+ [^\s()]+ [^\s()]+ [^\s()]+ [^\s()]+\))$/,LAMBDA_RUNTIME_IDENTIFIER:/^[A-Za-z0-9._-]+$/,ENV_VAR_NAME:/^[A-Za-z_][A-Za-z0-9_]*$/});function zf(e){let t=/^rate\((\d+) (minute|minutes|hour|hours|day|days)\)$/.exec(e);if(!t)return;let n=t[1],i=t[2];if(n===void 0||i===void 0)return;let r=parseInt(n,10);if(!Number.isFinite(r)||r<1)return;let o=i==="minute"||i==="hour"||i==="day";if(!(o&&r!==1)&&!(!o&&r===1))return i==="minute"||i==="minutes"?{everyMs:r*6e4}:i==="hour"||i==="hours"?{everyMs:r*60*6e4}:{everyMs:r*24*60*6e4}}pP(zf,"parseRateExpression");var d=Object.freeze({IDENTIFIER:"Must start with a letter, contain only letters, numbers, and hyphens",NEW_APP_NAME:"Must start with a lowercase letter and contain only lowercase letters, numbers, and hyphens",IDENTIFIER_MIN_LENGTH:"Must be at least 2 characters",IDENTIFIER_NO_TRAILING_HYPHEN:"Must not end with a hyphen",IDENTIFIER_NO_CONSECUTIVE_HYPHENS:"Must not contain consecutive hyphens",RESOURCE_NAME:"Must start with a letter and contain only letters and numbers (PascalCase recommended)",ECS_SERVICE_NAME:"Service name must start with a letter and contain only letters, numbers, and hyphens",BUCKET_NAME:"Bucket name must start with a lowercase letter and contain only lowercase letters, numbers, and hyphens",DATABASE_NAME:"Database name must start with a letter and contain only letters, numbers, and underscores",RESOURCE_TYPE:"Resource type must be in format 'category' or 'category:type'",SSM_PATH:"SSM path must start with / and contain valid namespace segments (e.g., /myapp/ApiCluster/service)",SECRET_NAME:hf,SSM_COMPONENT:Ns,EMAIL:"Please enter a valid email address",DOMAIN:"Please enter a valid domain (e.g., cms.example.com)",DOCKER_IMAGE:"Invalid Docker image name format",REQUIRED:{APP_NAME:"Application name is required",RESOURCE_NAME:"Resource name is required",BUCKET_NAME:"Bucket name is required",SERVICE_NAME:"Service name is required",NETWORK_NAME:"Network name is required",DATABASE_NAME:"Database name is required",ORGANISATION_NAME:"Organisation name is required",EMAIL:"Email is required",NAME:"Name is required",USERNAME:"Username is required",CONTAINER_NAME:"Container name is required",GROUP:"Group is required",PATTERN_NAME:"Pattern name is required",SOURCE:"Source directory is required",BUILD_COMMAND:"Build command is required",OUTPUT_DIR:"Output directory is required",FORMS_TO:"Forms recipient address is required",ROUTING_PATH:"Routing path is required",RESOURCE_REFERENCE:"Resource reference is required",RESOURCE_TYPE:"Resource type is required",VARIANT:"Variant is required",SUBTYPE:"Subtype is required",DEPLOY_TARGET:"Deploy target is required",DESTROY_TARGET:"Destroy target is required"},MAX_LENGTH:{APP_NAME:"Application name must be 50 characters or less",RESOURCE_NAME:"Resource name must be 63 characters or less",BUCKET_NAME:"Bucket name must be 63 characters or less",SERVICE_NAME:"Service name must be 255 characters or less",NETWORK_NAME:"Network name must be 50 characters or less",DATABASE_NAME:"Database name must be 63 characters or less",ORGANISATION_NAME:"Organisation name must be 50 characters or less"},PORT:{INTEGER:"Port must be an integer",MIN:"Port must be at least 1",MAX:"Port cannot exceed 65535"},USERNAME:{MAX_LENGTH:"Username cannot exceed 63 characters"},LAMBDA:{MEMORY:{INTEGER:"Lambda memory must be an integer",MIN:"Memory must be at least 128 MB",MAX:"Memory cannot exceed 10240 MB",MULTIPLE:"Memory must be 128 MB or a multiple of 64 MB"},TIMEOUT:{INTEGER:"Timeout must be an integer",MIN:"Timeout must be at least 1 second",MAX:"Timeout cannot exceed 900 seconds"},RUNTIME:"Lambda runtime must contain only letters, digits, dots, underscores, or dashes (e.g. 'NODEJS_20_X' or 'nodejs20.x')"},ENV_VAR_NAME:"Environment variable names must start with a letter or underscore and contain only letters, digits, and underscores",PRIORITY:{INTEGER:"Priority must be an integer",MIN:"Priority must be at least 1",MAX:"Priority cannot exceed 50000"},CAPACITY:{MIN:{INTEGER:"Minimum capacity must be an integer",MIN_0:"Minimum capacity must be at least 0",MIN_1:"Minimum capacity must be at least 1",MAX:"Minimum capacity cannot exceed 100"},MAX:{INTEGER:"Maximum capacity must be an integer",MIN_0:"Maximum capacity must be at least 0",MIN_1:"Maximum capacity must be at least 1",MAX:"Maximum capacity cannot exceed 100"},DESIRED:{INTEGER:"Desired count must be an integer",MIN:"Desired count must be at least 0",MAX:"Desired count cannot exceed 100"},WARM_POOL_REQUIRED:"minCapacity 0 requires a warmPool \u2014 without it, new tasks wait 60-90s for a cold instance launch",WARM_POOL:{MIN_SIZE:{INTEGER:"Warm pool minSize must be an integer",MIN:"Warm pool minSize must be at least 0",MAX:"Warm pool minSize cannot exceed 100"},MIN_SIZE_EXCEEDS_MAX_CAPACITY:"warmPool.minSize cannot exceed maxCapacity \u2014 the warm pool cannot hold more instances than the ASG allows"}},MEMORY_LIMIT:{INTEGER:"Memory limit must be an integer",MIN_512:"Memory limit must be at least 512 MiB",MIN_128:"Memory limit must be at least 128 MiB",MAX:"Memory limit cannot exceed 30720 MiB"},DATABASE:{PORT:{INTEGER:"Database port must be an integer",MIN:"Database port must be at least 1024",MAX:"Database port cannot exceed 65535"},NAME:{REQUIRED:"Database name is required",MAX_LENGTH:"Database name must be 63 characters or less"}},BACKUP_RETENTION:{INTEGER:"Backup retention must be an integer",MIN:"Backup retention must be at least 1 day",MAX:"Backup retention cannot exceed 35 days"},SQS:{VISIBILITY_TIMEOUT:{INTEGER:"Visibility timeout must be an integer",MIN:"Visibility timeout must be at least 0 seconds",MAX:"Visibility timeout cannot exceed 43200 seconds (12 hours)"},RETENTION_PERIOD:{INTEGER:"Retention period must be an integer",MIN:"Retention period must be at least 60 seconds",MAX:"Retention period cannot exceed 1209600 seconds (14 days)"}},READER:{COUNT:{INTEGER:"Reader count must be an integer",MIN:"Reader count must be at least 0",MAX:"Reader count cannot exceed 15"}},IDENTIFIER_SUFFIX:{REQUIRED:"Identifier suffix is required when specified",MAX_LENGTH:"Identifier suffix cannot exceed 50 characters"},ROTATION:{INTEGER:"Rotation days must be an integer",MIN:"Rotation interval must be at least 1 day",MAX:"Rotation interval cannot exceed 365 days"},MAX_CONNECTIONS:{INTEGER:"Max connections must be an integer",MIN:"Max connections must be at least 1",MAX:"Max connections cannot exceed 100"},MONITORING_INTERVAL:{INTEGER:"Monitoring interval must be an integer",MIN:"Monitoring interval must be at least 0",MAX:"Monitoring interval cannot exceed 60 seconds",VALUES:"Monitoring interval must be 0, 1, 5, 10, 15, 30, or 60 seconds"},RETENTION_DAYS:{INTEGER:"Retention days must be an integer",MIN:"Retention days must be at least 1",MAX:"Retention days cannot exceed 365"},BATCH_SIZE:{INTEGER:"Batch size must be an integer",MIN:"Batch size must be at least 1",MAX:"Batch size cannot exceed 10000"},SERVICE:{UNIQUE_WITHIN_CLUSTER:"Service names must be unique within a cluster",MIN_REQUIRED:"At least one service is required",ROUTING_REQUIRED:"Multiple services with ports require routing config (path or host)"},PROXY_CONFIG:{MAX_IDLE_CONNECTIONS:{INTEGER:"Max idle connections must be an integer",MIN:"Max idle connections must be at least 0",MAX:"Max idle connections cannot exceed 100"},BORROW_TIMEOUT:{INTEGER:"Connection borrow timeout must be an integer",MIN:"Connection borrow timeout must be at least 1 second",MAX:"Connection borrow timeout cannot exceed 3600 seconds"}},MAX_AZS:{INTEGER:"Max AZs must be an integer",MIN:"Max AZs must be at least 1",MAX:"Max AZs cannot exceed 3"},BATCHING_WINDOW:{INTEGER:"Max batching window must be an integer",MIN:"Max batching window must be at least 0",MAX:"Max batching window cannot exceed 300 seconds"},HEALTH_CHECK:{INTERVAL:{INTEGER:"Health check interval must be an integer",MIN:"Health check interval must be at least 5 seconds",MAX:"Health check interval cannot exceed 300 seconds"},TIMEOUT:{INTEGER:"Health check timeout must be an integer",MIN:"Health check timeout must be at least 2 seconds",MAX:"Health check timeout cannot exceed 60 seconds"},RETRIES:{INTEGER:"Health check retries must be an integer",MIN:"Health check retries must be at least 1",MAX:"Health check retries cannot exceed 10"},START_PERIOD:{INTEGER:"Health check start period must be an integer",MIN:"Health check start period must be at least 0 seconds",MAX:"Health check start period cannot exceed 300 seconds"}},EPHEMERAL_STORAGE:{INTEGER:"Ephemeral storage size must be an integer",MIN:"Ephemeral storage size must be at least 512 MB",MAX:"Ephemeral storage size cannot exceed 10240 MB"},MAX_MESSAGE_SIZE:{INTEGER:"Max message size must be an integer",MIN:"Max message size must be at least 1024 bytes",MAX:"Max message size cannot exceed 262144 bytes (256 KB)"},CAPACITY_CONSTRAINT:{MIN_LTE_MAX:"minCapacity must be less than or equal to maxCapacity"},DIRECT_ACCESS:{NO_DOMAIN:"directAccess cannot be used with domain (no ALB for HTTPS)",NO_LOAD_BALANCER:"directAccess cannot be used with loadBalancer (mutually exclusive)"},GLOBAL_AURORA:{PRIMARY_REGION_REQUIRED:"primaryRegion is required for GlobalAurora databases"},NAT_GATEWAY:{INTEGER:"NAT gateway count must be an integer",MIN:"NAT gateway count must be at least 0",MAX:"NAT gateway count cannot exceed 3"},CIDR_MASK:{INTEGER:"CIDR mask must be an integer",MIN:"CIDR mask must be at least 16",MAX:"CIDR mask cannot exceed 28"},CPU:{INTEGER:"CPU must be an integer",MIN:"CPU must be at least 256 units",MAX:"CPU cannot exceed 4096 units"},KMS:{KEY_REQUIRED:"KMS key ARN is required when using KMS encryption"},READER_INSTANCES:{MAX:"Cannot have more than 15 reader instances",COUNT_OR_INSTANCES:"Cannot specify both 'count' and 'instances' - use one or the other"},GENERATOR_CAPACITY:{MIN:{MIN:"Minimum capacity must be at least 1",MAX:"Minimum capacity cannot exceed 1000"},MAX:{MIN:"Maximum capacity must be at least 1",MAX:"Maximum capacity cannot exceed 1000"}},INSTANCE_TYPE:"Unknown instance type. Common types include: t4g.micro, t4g.small, m5.large",ARCHITECTURE_MISMATCH:"Architecture mismatch between instance type and AMI",ALLOCATED_STORAGE:{INTEGER:"Allocated storage must be an integer",MIN:"Allocated storage must be at least 20 GB",MAX:"Allocated storage cannot exceed 65536 GB"},DLQ:{MAX_RECEIVE_COUNT:{INTEGER:"Max receive count must be an integer",MIN:"Max receive count must be at least 1",MAX:"Max receive count cannot exceed 1000"}},ALARM:{PERCENTAGE:{MIN:"Threshold must be at least 1%",MAX:"Threshold must be at most 100%"},FREE_STORAGE_GIB:{MIN:"Free storage threshold must be at least 1 GiB"}},REGION:"Invalid AWS region",PASCAL_CASE:"Resource name must start with an uppercase letter and contain only alphanumerics (PascalCase).",IMAGE_DOCKER_MUTEX:"image and docker are mutually exclusive",AWS_ACCOUNT_ID:"AWS account id must be exactly 12 digits (no hyphens)",VPC_ID:"VPC id must look like vpc-abc12345",ROLE_ARN:"Role ARN must have the form arn:aws:iam::<account-id>:role/<name>",CIDR:"CIDR must be in dotted-quad/prefix-length form (e.g. 10.0.0.0/16)",VPC_PEER:{MIN_REQUESTER_ACCOUNTS:"At least one requester account id is required",REGION_REQUIRED:"Peer region is required when specified",ROUTE_TABLE_ID_REQUIRED:"Route table id must not be empty"},SCHEDULE_EXPRESSION:"Schedule expression must be 'rate(N minute|minutes|hour|hours|day|days)' with N>=1, or 'cron(<6-field AWS expression>)'"});var gP=Object.defineProperty,Xe=(e,t)=>gP(e,"name",{value:t,configurable:!0}),vP=["us-east-2","us-west-2","us-east-1","eu-west-1","eu-central-1","ap-southeast-1"],hP=Object.freeze(vP.flatMap(e=>{let t=fn(e);return t?[t]:[]})),Mf=Object.freeze(["us-east-2","us-west-2","us-east-1","eu-west-1","ap-southeast-1"]);function Cs(e){return e?e.split(",").map(t=>t.trim()).filter(Boolean):[]}Xe(Cs,"parseRegionList");function jf(e){return Tt.includes(e)}Xe(jf,"isValidRegion");function Uf(e){return/^[a-z]{2}-[a-z]+-[1-9]$/.test(e)}Xe(Uf,"isValidRegionFormat");function Lf(e){if(!e)return Mf.slice(0,3);let t=e.toLowerCase().split("-"),n=t[0],i=t.length>1?t[1]:"",r=[];return n&&i&&(r=Tt.filter(o=>o.startsWith(`${n}-${i}`))),r.length===0&&n&&(r=Tt.filter(o=>o.startsWith(`${n}-`))),r.length>0?r.slice(0,3):Mf.slice(0,3)}Xe(Lf,"getSuggestions");function Ff(e){if(jf(e))return!0;let t=Lf(e);return Uf(e)?`Unknown region. Try: ${t.join(", ")}`:`Invalid format. Try: ${t.join(", ")}`}Xe(Ff,"validateRegion");function e_(e){if(!e||e.trim()==="")return!0;let t=Cs(e);for(let n of t){let i=Ff(n);if(i!==!0)return i}return!0}Xe(e_,"validateRegionList");function Zf(e,t){return e.filter(n=>n!==t)}Xe(Zf,"filterDuplicateRegions");function Vf(e){return{label:e.city,value:e.code,description:e.optIn?`${e.code} \u2014 opt-in required`:e.code}}Xe(Vf,"toRegionOption");function t_(){return He.map(Vf)}Xe(t_,"getRegionOptions");function r_(e){return He.filter(t=>t.code!==e).map(Vf)}Xe(r_,"getRegionOptionsExcluding");function n_(e){let t=He.find(n=>n.code===e);return t?t.city:e}Xe(n_,"getRegionName");function i_(e){return t=>{let n=Cs(t);return Zf(n,e)}}Xe(i_,"createRegionFormatter");var Os="3.3.0";var Ds=["Aurora","Instance","GlobalAurora","ClickHouse"],En=["FARGATE","FARGATE_SPOT","EC2"],at=["standard","resilient","enterprise"],ws=["tinkerer","lightweight","standard","resilient","enterprise"],Bf="custom",Li=[...ws,Bf];var yP=Object.defineProperty,bP=(e,t)=>yP(e,"name",{value:t,configurable:!0}),vj=Object.freeze({RESOURCE_SUFFIXES:Object.freeze({storage:"Storage",database:"Database",cluster:"Cluster",function:"Function",instance:"Instance",compute:"Compute"})}),Fi=["ecs","lambda","ec2"],An=Object.freeze({ECS:"ecs",LAMBDA:"lambda",EC2:"ec2"}),zs=["code","container"],Zi=Object.freeze({CODE:"code",CONTAINER:"container"}),Ms=["ARM_64","X86_64"],o_="ARM_64",Vi=["NONE","AWS_IAM"],js=["public","internal"],Us=["CPU","MEMORY"],Ls=["ARM","STANDARD"],Gf=["Instance","Aurora"],xn=["postgresql","mysql"],a_=["foundation","compliance","hardened"];var Fs=["t3.nano","t3.micro","t3.small","t3.medium","t3.large","t3.xlarge","t3.2xlarge","t3a.nano","t3a.micro","t3a.small","t3a.medium","t3a.large","t3a.xlarge","t3a.2xlarge","t4g.nano","t4g.micro","t4g.small","t4g.medium","t4g.large","t4g.xlarge","t4g.2xlarge","c5.large","c5.xlarge","c5.2xlarge","c5.4xlarge","c5.9xlarge","c5.12xlarge","c5.18xlarge","c5.24xlarge","c5a.large","c5a.xlarge","c5a.2xlarge","c5a.4xlarge","c5a.8xlarge","c5a.12xlarge","c5a.16xlarge","c5a.24xlarge","c6g.medium","c6g.large","c6g.xlarge","c6g.2xlarge","c6g.4xlarge","c6g.8xlarge","c6g.12xlarge","c6g.16xlarge","r5.large","r5.xlarge","r5.2xlarge","r5.4xlarge","r5.8xlarge","r5.12xlarge","r5.16xlarge","r5.24xlarge","r5a.large","r5a.xlarge","r5a.2xlarge","r5a.4xlarge","r5a.8xlarge","r5a.12xlarge","r5a.16xlarge","r5a.24xlarge","r6g.medium","r6g.large","r6g.xlarge","r6g.2xlarge","r6g.4xlarge","r6g.8xlarge","r6g.12xlarge","r6g.16xlarge","i3.large","i3.xlarge","i3.2xlarge","i3.4xlarge","i3.8xlarge","i3.16xlarge","p3.2xlarge","p3.8xlarge","p3.16xlarge","g4dn.xlarge","g4dn.2xlarge","g4dn.4xlarge","g4dn.8xlarge","g4dn.12xlarge","g4dn.16xlarge","m5.large","m5.xlarge","m5.2xlarge","m5.4xlarge","m5.8xlarge","m5.12xlarge","m5.16xlarge","m5.24xlarge","m5a.large","m5a.xlarge","m5a.2xlarge","m5a.4xlarge","m5a.8xlarge","m5a.12xlarge","m5a.16xlarge","m5a.24xlarge"],s_=[0,1,5,10,15,30,60];function Ye(e,t){return e.includes(t)}bP(Ye,"constIncludes");var c_=1,u_=65535,_j=Object.freeze({postgresql:5432,mysql:3306}),l_=128,d_=10240,Zs=1,Vs=900,Wf=1,Kf=1e3,$n=100,m_=100;var p_=3e3;var f_=["GET","POST","PUT","DELETE","HEAD","OPTIONS","PATCH"],g_=["standard","assets","upload","website"],In=["AES256","KMS"];var SP=Object.defineProperty,Bi=(e,t)=>SP(e,"name",{value:t,configurable:!0}),De=Bi(e=>s.union([s.literal(!1),e]),"optionalOrDisabled"),br={check:Bi(e=>e.minCapacity!==void 0&&e.maxCapacity!==void 0?e.minCapacity<=e.maxCapacity:!0,"check"),params:{message:d.CAPACITY_CONSTRAINT.MIN_LTE_MAX,path:["maxCapacity"]}},Gi=Bi(e=>s.number().int(d.MEMORY_LIMIT.INTEGER).min(e,e===128?d.MEMORY_LIMIT.MIN_128:d.MEMORY_LIMIT.MIN_512).max(30720,d.MEMORY_LIMIT.MAX),"memoryLimitMiBSchema"),U=s.string().min(1,d.REQUIRED.RESOURCE_NAME).max(63,d.MAX_LENGTH.RESOURCE_NAME).regex(z.RESOURCE_NAME,d.RESOURCE_NAME),h_=s.string().min(1,d.REQUIRED.BUCKET_NAME).max(63,d.MAX_LENGTH.BUCKET_NAME).regex(z.BUCKET_NAME,d.BUCKET_NAME),y_=s.string().min(1,d.REQUIRED.DATABASE_NAME).max(63,d.MAX_LENGTH.DATABASE_NAME).regex(z.DATABASE_NAME,d.DATABASE_NAME);function Bs(e,t=z.IDENTIFIER,n=d.IDENTIFIER){return s.string().min(2,d.IDENTIFIER_MIN_LENGTH).max(50,e).regex(t,n).refine(i=>!i.endsWith("-"),{message:d.IDENTIFIER_NO_TRAILING_HYPHEN}).refine(i=>!i.includes("--"),{message:d.IDENTIFIER_NO_CONSECUTIVE_HYPHENS})}Bi(Bs,"identifierSchema");var le=Bs(d.MAX_LENGTH.APP_NAME),Rj=Bs(d.MAX_LENGTH.APP_NAME,z.NEW_APP_NAME,d.NEW_APP_NAME),Sr=s.number().int(d.PORT.INTEGER).min(c_,d.PORT.MIN).max(u_,d.PORT.MAX),be=s.object({key:s.string(),sourceText:s.string()}).strict(),_P=s.object({__identifier:s.string()}).strict(),EP=s.object({__expression:s.string()}).strict(),AP=s.object({__call:s.string()}).strict(),xP=s.union([_P,EP,AP]),$P=s.union([s.string(),s.number(),s.boolean(),xP]),Tn=s.record(s.string().regex(z.ENV_VAR_NAME,d.ENV_VAR_NAME),$P),IP=s.object({id:s.string(),name:s.string().optional(),arn:s.string().optional(),field:s.string().optional()}).strict().refine(e=>e.name!==void 0!=(e.arn!==void 0),{message:"secretsImport requires exactly one of `name` or `arn`."}),b_=s.record(s.string(),IP),Nj=s.record(s.string(),s.unknown()),Hf=s.enum(Li).describe(`Application type must be one of: ${Li.join(", ")}`),Xf=s.enum(ft).describe(`OpenNext deployment pattern: ${ft.join(", ")}`),TP=s.enum(["before-imports","after-imports","after-app-init","after-tags","after-resource","end-of-file"]),RP=s.enum(["import","app-init","tags","database","compute","storage","network","messaging","cdn","pattern","vpc-peer","vpc-peer-accepter","cross-plan-connection","custom"]),S_=s.object({sourceText:s.string(),position:TP,afterManagedResource:s.object({type:RP,name:s.string().optional()}).strict().optional(),originalLine:s.number().int().optional(),leadingComments:s.array(s.string()).optional(),orphaned:s.boolean().optional(),orphanedComment:s.string().optional()}).strict(),__=s.union([s.object({tier:s.enum(at)}).strict(),s.literal(!1)]),E_=s.union([s.object({instanceType:s.string().optional()}).strict(),s.literal(!1)]),NP=Bs(d.MAX_LENGTH.ORGANISATION_NAME),PP=s.string().regex(z.EMAIL,d.EMAIL),v_=s.string().refine(e=>Tt.includes(e),{message:d.REGION}),Pj=s.object({name:NP,email:PP,accountName:s.string().optional(),primaryRegion:v_.optional().default(Ht),secondaryRegions:s.array(v_).optional(),security:s.enum(a_).optional(),force:s.boolean().optional()}).strict();function Wi(e){return e.issues.map(t=>`${t.path.length>0?`${t.path.join(".")}: `:""}${t.message}`).join(`
-`)}Bi(Wi,"getZodErrorMessage");var Rn=s.number().min(1,d.ALARM.PERCENTAGE.MIN).max(100,d.ALARM.PERCENTAGE.MAX),kP=s.number().min(1,d.ALARM.FREE_STORAGE_GIB.MIN),A_=s.union([s.literal(!1),s.object({cpuThreshold:Rn.optional(),memoryThreshold:Rn.optional(),runningTasksMinimum:s.number().int().min(0).optional(),http5xxThreshold:Rn.optional()}).strict()]),x_=s.union([s.literal(!1),s.object({cpuThreshold:Rn.optional(),freeStorageThresholdGiB:kP.optional(),connectionsThreshold:s.number().int().min(1).optional()}).strict()]),$_=s.union([s.literal(!1),s.object({errorRateThreshold:Rn.optional(),durationThresholdPercent:Rn.optional()}).strict()]);var Nt=s.number().int(d.BACKUP_RETENTION.INTEGER).min(1,d.BACKUP_RETENTION.MIN).max(35,d.BACKUP_RETENTION.MAX),Ki=s.number().int(d.MONITORING_INTERVAL.INTEGER).refine(e=>Ye(s_,e),{message:d.MONITORING_INTERVAL.VALUES}),Ws=s.number().int(d.DATABASE.PORT.INTEGER).min(1024,d.DATABASE.PORT.MIN).max(65535,d.DATABASE.PORT.MAX),CP=s.enum(Ds).describe(`Database type must be one of: ${Ds.join(", ")}`),OP=s.object({maxConnections:s.number().int(d.MAX_CONNECTIONS.INTEGER).min(1,d.MAX_CONNECTIONS.MIN).max(100,d.MAX_CONNECTIONS.MAX).optional(),maxIdleConnections:s.number().int(d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.INTEGER).min(0,d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MIN).max(100,d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MAX).optional(),connectionBorrowTimeout:s.number().int(d.PROXY_CONFIG.BORROW_TIMEOUT.INTEGER).min(1,d.PROXY_CONFIG.BORROW_TIMEOUT.MIN).max(3600,d.PROXY_CONFIG.BORROW_TIMEOUT.MAX).optional(),requireTLS:s.boolean().optional()}).strict().describe("RDS Proxy configuration"),DP=s.object({instanceType:s.string().optional(),availabilityZone:s.string().optional()}).strict().describe("Read replica configuration"),wP=s.object({automaticallyAfterDays:s.number().int(d.ROTATION.INTEGER).min(1,d.ROTATION.MIN).max(365,d.ROTATION.MAX).optional()}).strict().describe("Secret rotation configuration"),Ks=s.object({username:s.string().min(1,d.REQUIRED.USERNAME).max(63,d.USERNAME.MAX_LENGTH).optional(),secretRotation:wP.optional()}).strict().describe("Database credentials configuration"),Hs=De(OP),Xs=De(DP),zP=s.object({scaleWithWriter:s.boolean().optional(),enableDatabaseInsights:s.boolean().optional(),identifierSuffix:s.string().min(1,d.IDENTIFIER_SUFFIX.REQUIRED).max(50,d.IDENTIFIER_SUFFIX.MAX_LENGTH).optional(),availabilityZone:s.string().optional()}).strict().describe("Configuration for a single Aurora reader instance"),Hi=s.object({enableDatabaseInsights:s.boolean().optional(),identifierSuffix:s.string().min(1,d.IDENTIFIER_SUFFIX.REQUIRED).max(50,d.IDENTIFIER_SUFFIX.MAX_LENGTH).optional(),availabilityZone:s.string().optional()}).strict().describe("Configuration for Aurora writer instance"),MP=s.object({count:s.number().int(d.READER.COUNT.INTEGER).min(0,d.READER.COUNT.MIN).max(15,d.READER.COUNT.MAX).optional(),instances:s.array(zP).max(15,d.READER_INSTANCES.MAX).optional(),defaultEnableDatabaseInsights:s.boolean().optional()}).strict().refine(e=>!(e.count!==void 0&&e.instances!==void 0),{message:d.READER_INSTANCES.COUNT_OR_INSTANCES,path:["count"]}).describe("Aurora readers configuration"),Xi=De(MP),jP=s.object({awsManaged:s.literal(!0)}).strict(),UP=s.object({useCMK:s.literal(!0)}).strict(),I_=s.union([jP,UP]),LP=s.object({mode:s.enum(["standard","advanced"]).optional(),encryptionKey:I_.optional()}).strict().describe("Database Insights configuration"),Ys=De(LP),Js=s.object({storageKey:I_.optional()}).strict().describe("Encryption configuration (DESTRUCTIVE to change storageKey)"),T_=s.object({name:U,type:CP,databaseName:s.string().min(1,d.REQUIRED.DATABASE_NAME),instanceType:s.string().optional(),allocatedStorage:s.number().optional(),multiAz:s.boolean().optional(),publiclyAccessible:s.boolean().optional(),databaseInsights:Ys.optional(),port:Ws.optional(),deletionProtection:s.boolean().optional(),proxy:Hs.optional(),credentials:Ks.optional(),readReplica:Xs.optional(),encryption:Js.optional(),writer:Hi.optional(),readers:Xi.optional(),backupRetention:Nt.optional(),preferredMaintenanceWindow:s.string().optional(),monitoringInterval:Ki.optional(),primaryRegion:s.string().optional(),secondaryRegions:s.array(s.string()).optional(),globalClusterIdentifier:s.string().optional(),enableGlobalWriteForwarding:s.boolean().optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional(),databaseEngine:s.enum(xn).optional(),engineExpression:s.string().optional(),variableName:s.string().optional(),extraProperties:s.array(be).optional(),alarms:x_.optional()}).strict(),qs=s.object({appName:le,nameProvidedByFlag:s.boolean().optional(),databaseName:s.string().min(1,d.REQUIRED.DATABASE_NAME).max(63,d.MAX_LENGTH.DATABASE_NAME).regex(z.DATABASE_NAME,d.DATABASE_NAME),resourceName:U.optional(),connectionConfig:s.object({connectToCompute:s.array(s.string()).optional(),connectToServices:s.array(s.string()).optional()}).strict().optional(),databaseInsights:Ys.optional(),port:Ws.optional(),proxy:Hs.optional(),credentials:Ks.optional(),encryption:Js.optional(),deletionProtection:s.boolean().optional()}).strict(),R_={databaseType:s.literal("Instance"),instanceType:s.string().optional(),multiAz:s.boolean().optional(),readReplica:Xs.optional(),publiclyAccessible:s.boolean().optional(),backupRetention:Nt.optional(),allocatedStorage:s.number().optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()},N_={databaseType:s.literal("Aurora"),writer:Hi.optional(),readers:Xi.optional(),backupRetention:Nt.optional(),preferredMaintenanceWindow:s.string().optional(),monitoringInterval:Ki.optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()},P_={databaseType:s.literal("GlobalAurora"),primaryRegion:s.string().min(1,d.GLOBAL_AURORA.PRIMARY_REGION_REQUIRED),secondaryRegions:s.array(s.string()).optional(),globalClusterIdentifier:s.string().optional(),enableGlobalWriteForwarding:s.boolean().optional(),writer:Hi.optional(),readers:Xi.optional(),backupRetention:Nt.optional(),preferredMaintenanceWindow:s.string().optional(),monitoringInterval:Ki.optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()},k_=s.object({appName:le,nameProvidedByFlag:s.boolean().optional(),databaseName:s.string().min(1,d.REQUIRED.DATABASE_NAME).max(63,d.MAX_LENGTH.DATABASE_NAME).regex(z.DATABASE_NAME,d.DATABASE_NAME),resourceName:U.optional(),connectionConfig:s.object({connectToCompute:s.array(s.string()).optional(),connectToServices:s.array(s.string()).optional()}).strict().optional()}).strict(),C_={databaseType:s.literal("ClickHouse"),instanceType:s.string().optional(),coldTier:s.union([s.object({mode:s.literal("s3")}).strict(),s.literal(!1)]).optional(),optimiseSchedule:s.union([s.string(),s.literal(!1)]).optional(),backupSchedule:s.union([s.string(),s.literal(!1)]).optional(),backupRetentionDays:Nt.optional()},FP=qs.extend(R_).strict(),ZP=qs.extend(N_).strict(),VP=qs.extend(P_).strict(),BP=k_.extend(C_).strict(),Lj=s.discriminatedUnion("databaseType",[FP,ZP,VP,BP]),Yf=qs.extend({resourceName:U}).strict(),GP=Yf.extend(R_).strict(),WP=Yf.extend(N_).strict(),KP=Yf.extend(P_).strict(),HP=k_.extend({resourceName:U}).strict(),XP=HP.extend(C_).strict(),Fj=s.discriminatedUnion("databaseType",[GP,WP,KP,XP]),Zj=s.object({appName:le,databaseName:s.string().min(1,d.REQUIRED.DATABASE_NAME),maxConnections:s.number().int(d.MAX_CONNECTIONS.INTEGER).min(1,d.MAX_CONNECTIONS.MIN).max(100,d.MAX_CONNECTIONS.MAX).optional(),maxIdleConnections:s.number().int(d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.INTEGER).min(0,d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MIN).max(100,d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MAX).optional(),connectionBorrowTimeout:s.number().int(d.PROXY_CONFIG.BORROW_TIMEOUT.INTEGER).min(1,d.PROXY_CONFIG.BORROW_TIMEOUT.MIN).max(3600,d.PROXY_CONFIG.BORROW_TIMEOUT.MAX).optional(),requireTLS:s.boolean().optional(),nameProvidedByFlag:s.boolean().optional()}).strict(),YP=["S","N","B"],Gs=s.object({name:s.string(),type:s.enum(YP)}).strict(),O_=s.object({name:U,partitionKey:Gs,sortKey:Gs.optional(),globalSecondaryIndexes:s.array(s.object({indexName:s.string(),partitionKey:Gs,sortKey:Gs.optional()}).strict()).optional(),ttlAttribute:s.string().optional(),stream:s.boolean().optional(),variableName:s.string().optional(),extraProperties:s.array(be).optional()}).strict(),JP=s.object({mode:s.literal("s3")}).strict(),D_=s.object({name:U,type:s.literal("ClickHouse"),databaseName:y_,instanceType:s.string().optional(),coldTier:s.union([JP,s.literal(!1)]).optional(),optimiseSchedule:s.union([s.string(),s.literal(!1)]).optional(),backupSchedule:s.union([s.string(),s.literal(!1)]).optional(),backupRetentionDays:Nt.optional(),variableName:s.string().optional(),extraProperties:s.array(be).optional()}).strict();var qP=s.object({count:s.number().int(d.NAT_GATEWAY.INTEGER).min(0,d.NAT_GATEWAY.MIN).max(3,d.NAT_GATEWAY.MAX).optional()}).strict().describe("NAT gateway configuration"),w_=De(qP),Jf=s.enum(["cloudwatch","s3"]),QP=s.object({destination:Jf.optional(),retentionDays:s.number().int(d.RETENTION_DAYS.INTEGER).min(1,d.RETENTION_DAYS.MIN).max(365,d.RETENTION_DAYS.MAX).optional(),trafficType:s.enum(["ALL","ACCEPT","REJECT"]).optional()}).strict().describe("VPC flow log configuration"),z_=De(QP),ek=s.object({s3:s.boolean().optional(),dynamodb:s.boolean().optional()}).strict().describe("Gateway VPC endpoints (FREE)"),tk=De(ek),rk=s.object({ecr:s.boolean().optional(),secretsManager:s.boolean().optional(),kms:s.boolean().optional(),cloudwatchLogs:s.boolean().optional(),ssm:s.boolean().optional(),sts:s.boolean().optional()}).strict().describe("Interface VPC endpoints (cost per hour)"),nk=De(rk),ik=s.object({gateway:tk.optional(),interface:nk.optional()}).strict().describe("VPC endpoints configuration"),M_=De(ik),Qs=s.object({maxAzs:s.number().int(d.MAX_AZS.INTEGER).min(1,d.MAX_AZS.MIN).max(3,d.MAX_AZS.MAX).optional(),natGateways:w_.optional(),flowLogs:z_.optional(),vpcEndpoints:M_.optional(),cidrMask:s.number().int(d.CIDR_MASK.INTEGER).min(16,d.CIDR_MASK.MIN).max(28,d.CIDR_MASK.MAX).optional()}).strict(),j_=s.string().min(1,d.REQUIRED.NETWORK_NAME).max(50,d.MAX_LENGTH.NETWORK_NAME).regex(z.RESOURCE_NAME,d.RESOURCE_NAME),U_=Qs.extend({name:j_}).strict(),L_=De(Qs),Kj=s.object({appName:le,networkName:j_.optional(),maxAzs:s.number().int(d.MAX_AZS.INTEGER).min(1,d.MAX_AZS.MIN).max(3,d.MAX_AZS.MAX).optional(),natGateways:w_.optional(),flowLogs:z_.optional(),vpcEndpoints:M_.optional()}).strict(),ok=z.CIDR,qf=s.string().regex(ok,d.CIDR),ak=s.object({kind:s.literal("database"),resource:s.string().min(1,d.REQUIRED.RESOURCE_REFERENCE),name:U,allowedFromCidrs:s.array(qf),access:s.enum(["read","write","readWrite"]).optional()}).strict(),sk=s.object({kind:s.literal("ecsService"),resource:s.string().min(1,d.REQUIRED.RESOURCE_REFERENCE),serviceName:s.string().min(1,d.REQUIRED.SERVICE_NAME),name:U,allowedFromCidrs:s.array(qf),port:Sr.optional()}).strict(),ck=s.discriminatedUnion("kind",[ak,sk]),Hj=s.object({name:U,peerAppName:s.string().min(1,d.REQUIRED.APP_NAME),peerAccountId:s.string().regex(z.AWS_ACCOUNT_ID,d.AWS_ACCOUNT_ID),peerRegion:s.string().min(1,d.VPC_PEER.REGION_REQUIRED).optional(),peerVpcId:s.string().regex(z.VPC_ID,d.VPC_ID).optional(),peerVpcCidr:qf.optional(),peerRoleArn:s.string().regex(z.ROLE_ARN,d.ROLE_ARN).optional(),peerRouteTableIds:s.array(s.string().min(1,d.VPC_PEER.ROUTE_TABLE_ID_REQUIRED)).optional(),localVpcName:s.string().min(1,d.REQUIRED.NETWORK_NAME).optional(),enableDnsResolution:s.boolean().optional()}).strict(),Xj=s.object({name:U,requesterAccountIds:s.array(s.string().regex(z.AWS_ACCOUNT_ID,d.AWS_ACCOUNT_ID)).min(1,d.VPC_PEER.MIN_REQUESTER_ACCOUNTS),localVpcName:s.string().min(1,d.REQUIRED.NETWORK_NAME).optional(),publishToSsm:s.boolean().optional(),exposedResources:s.array(ck).optional()}).strict();var ec=["storage","cdn","compute"],uk=s.object({sid:s.string().optional(),effect:s.enum(["Allow","Deny"]),principals:s.array(s.string()),actions:s.array(s.string()),resources:s.array(s.string()).optional(),conditions:s.record(s.string(),s.record(s.string(),s.union([s.string(),s.array(s.string())]))).optional()}).strict(),F_=s.object({name:U,bucketName:s.string().optional(),publicReadAccess:s.boolean().optional(),websiteHosting:s.object({indexDocument:s.string(),errorDocument:s.string().optional()}).strict().optional(),backupVaultTier:s.enum(at).optional(),versioned:s.boolean().optional(),encryption:s.enum(In).optional(),kmsKeyArn:s.string().optional(),cors:s.array(s.object({allowedOrigins:s.array(s.string()),allowedMethods:s.array(s.string()),allowedHeaders:s.array(s.string()).optional(),exposedHeaders:s.array(s.string()).optional(),maxAge:s.number().optional()}).strict()).optional(),deployment:s.object({source:s.string(),prune:s.boolean().optional(),cacheControl:s.object({maxAge:s.number().optional(),immutable:s.boolean().optional()}).strict().optional()}).strict().optional(),retain:s.boolean().optional(),resourcePolicyStatements:s.array(uk).optional(),stackPlacement:s.enum(ec).optional(),variableName:s.string().optional(),extraProperties:s.array(be).optional()}).strict().refine(e=>e.encryption!=="KMS"||!!e.kmsKeyArn,{message:d.KMS.KEY_REQUIRED}),tU=s.object({appName:le,bucketName:h_,nameProvidedByFlag:s.boolean().optional(),storagePreset:s.enum(g_).optional(),publicReadAccess:s.boolean().optional(),websiteHosting:s.object({indexDocument:s.string(),errorDocument:s.string().optional()}).strict().optional(),backupVaultTier:s.enum(at).optional(),versioned:s.boolean().optional(),encryption:s.enum(In).optional(),kmsKeyArn:s.string().optional(),cors:s.array(s.object({allowedOrigins:s.array(s.string()),allowedMethods:s.array(s.string()),allowedHeaders:s.array(s.string()).optional(),exposedHeaders:s.array(s.string()).optional(),maxAge:s.number().optional()}).strict()).optional(),connectionConfig:s.object({connectToCompute:s.array(s.string()).optional(),connectToServices:s.array(s.string()).optional()}).strict().optional()}).strict().refine(e=>e.encryption!=="KMS"||!!e.kmsKeyArn,{message:d.KMS.KEY_REQUIRED,path:["kmsKeyArn"]});var Qf=s.enum(["DESTROY","RETAIN"]),Z_=s.object({name:U,queueType:s.enum(["standard","fifo"]).default("standard"),visibilityTimeout:s.number().int(d.SQS.VISIBILITY_TIMEOUT.INTEGER).min(0,d.SQS.VISIBILITY_TIMEOUT.MIN).max(43200,d.SQS.VISIBILITY_TIMEOUT.MAX).optional(),retentionPeriod:s.number().int(d.SQS.RETENTION_PERIOD.INTEGER).min(60,d.SQS.RETENTION_PERIOD.MIN).max(1209600,d.SQS.RETENTION_PERIOD.MAX).optional(),contentBasedDeduplication:s.boolean().optional(),removalPolicy:Qf.optional(),variableName:s.string().optional(),extraProperties:s.array(be).optional()}).strict();var V_=s.object({type:s.literal("basic-auth"),username:s.string().min(1),password:s.string().min(1)}).strict(),B_=s.object({name:U,defaultOriginRef:s.string(),behaviours:s.array(s.object({pathPattern:s.string(),originRef:s.string(),cachePolicy:s.enum(["CACHING_OPTIMIZED","CACHING_DISABLED"]).optional()}).strict()).optional(),customDomain:s.string().optional(),certificateArn:s.string().optional(),accessGate:s.union([s.literal(!1),V_]).optional(),extraProperties:s.array(be).optional()}).strict(),uU=s.object({appName:s.string(),name:U.optional(),defaultOriginRef:s.string(),behaviours:s.array(s.object({pathPattern:s.string(),originRef:s.string(),cachePolicy:s.enum(["CACHING_OPTIMIZED","CACHING_DISABLED"]).optional()}).strict()).optional(),customDomain:s.string().optional(),certificateArn:s.string().optional(),accessGate:s.union([s.literal(!1),V_]).optional(),nameProvidedByFlag:s.boolean().optional()}).strict();var lk=Object.defineProperty,eg=(e,t)=>lk(e,"name",{value:t,configurable:!0}),dk=new Set(["t4g","c6g","c6gd","c6gn","c7g","c7gd","c7gn","r6g","r6gd","r7g","r7gd","m6g","m6gd","m7g","m7gd","a1","x2gd","im4gn","is4gen","i4g","hpc7g"]);function Nn(e){let t=e.split(".")[0]??"";return dk.has(t)?"ARM":"STANDARD"}eg(Nn,"getArchitectureForInstanceType");function tc(e,t){let n=Nn(e);return n!==t?{valid:!1,message:`Instance type '${e}' requires ${n} architecture, but '${t}' AMI was specified. Use a ${n==="ARM"?"Graviton instance (t4g, c6g, r6g, m6g, etc.)":"Intel/AMD instance (t3, c5, r5, m5, etc.)"} instead.`}:{valid:!0}}eg(tc,"validateArchitectureMatch");function G_(e,t){return Nn(e)===t}eg(G_,"isArchitectureCompatible");var mk=Object.defineProperty,rc=(e,t)=>mk(e,"name",{value:t,configurable:!0});var pk=1,fk=/^[A-Za-z0-9_.-]+$/,gk=s.object({id:s.string().min(1,"buildSecret id cannot be empty").regex(fk,"buildSecret id may contain only letters, digits, '_', '.', and '-' (no comma, '=', or whitespace, which would break the buildx --secret argv)"),ssm:s.string().min(1,"ssm parameter name cannot be empty").optional(),secretsManager:s.object({name:s.string().min(1,"secret name cannot be empty").optional(),arn:s.string().min(1,"secret arn cannot be empty").optional(),field:s.string().min(1,"secret field cannot be empty").optional()}).strict().refine(e=>e.name===void 0!=(e.arn===void 0),"secretsManager requires exactly one of name or arn").optional(),env:s.string().min(1,"env variable name cannot be empty").optional()}).strict().superRefine((e,t)=>{[e.ssm,e.secretsManager,e.env].filter(n=>n!==void 0).length!==1&&t.addIssue({code:s.ZodIssueCode.custom,message:"buildSecret requires exactly one source (ssm, secretsManager, or env)"})}),vk=s.union([s.string(),s.object({ssm:s.string().min(1,"ssm parameter name cannot be empty").optional(),secretsManager:s.object({name:s.string().min(1,"secret name cannot be empty").optional(),arn:s.string().min(1,"secret arn cannot be empty").optional(),field:s.string().min(1,"secret field cannot be empty").optional()}).strict().refine(e=>e.name===void 0!=(e.arn===void 0),"secretsManager requires exactly one of name or arn").optional(),env:s.string().min(1,"env variable name cannot be empty").optional(),acknowledgePublic:s.boolean().optional()}).strict().superRefine((e,t)=>{[e.ssm,e.secretsManager,e.env].filter(n=>n!==void 0).length!==1&&t.addIssue({code:s.ZodIssueCode.custom,message:"buildArg value requires exactly one source (ssm, secretsManager, or env)"})})]),gt=s.object({path:s.string(),context:s.string().min(1,"context cannot be empty").optional(),target:s.string().min(1,"target cannot be empty").optional(),buildArgs:s.record(s.string(),vk).optional(),buildSecrets:s.array(gk).optional()}).strict(),fU=gt.partial();function hk(e,t){if(t===void 0)return e;let n=t.context??e.context,i=t.target??e.target,r=t.buildArgs??e.buildArgs,o=t.buildSecrets??e.buildSecrets;return{path:t.path??e.path,...n!==void 0&&{context:n},...i!==void 0&&{target:i},...r!==void 0&&{buildArgs:r},...o!==void 0&&{buildSecrets:o}}}rc(hk,"mergeDockerBuild");function tg(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}rc(tg,"isRecord");function W_(e){if(!tg(e)||typeof e.path!="string"||e.path.length===0)return;let t=typeof e.context=="string"&&e.context.length>0?e.context:void 0,n=typeof e.target=="string"&&e.target.length>0?e.target:void 0,i=tg(e.buildArgs)&&Object.keys(e.buildArgs).length>0?e.buildArgs:void 0,r=Array.isArray(e.buildSecrets)&&e.buildSecrets.length>0?e.buildSecrets:void 0,o={path:e.path,...t!==void 0&&{context:t},...n!==void 0&&{target:n},...i!==void 0&&{buildArgs:i},...r!==void 0&&{buildSecrets:r}},a=gt.safeParse(o);return a.success?a.data:void 0}rc(W_,"normaliseDockerBuild");function yk(e){if(e===void 0)return;let t=W_(e);return t===void 0?void 0:JSON.stringify(t)}rc(yk,"dockerBuildFingerprint");var bk=s.object({name:s.string(),clusterName:s.string().optional(),docker:gt.optional(),containerPort:s.number().optional(),secrets:s.array(s.string()).optional(),ssmSecretsPath:s.string().optional(),importedSecretNames:s.array(s.string()).optional()}).strict(),Sk=s.object({type:s.enum(ft),name:s.string(),source:s.string()}).strict(),_k=s.object({repositoryName:s.string()}).strict(),Ek=s.object({name:s.string(),secrets:s.array(s.string()).optional(),ssmSecretsPath:s.string().optional(),importedSecretNames:s.array(s.string()).optional(),docker:gt.optional(),imageKey:s.string().optional()}).strict(),Ak=s.object({templateHash:s.string(),synthTimestamp:s.string()}).strict(),xk=s.object({constructPath:s.string().max(512),group:s.string().max(128),resourceType:s.string().max(256)}).strict(),gU=s.object({version:s.literal(pk),generatedAt:s.string(),appName:s.string(),services:s.array(bk),lambdas:s.array(Ek),pattern:Sk.optional(),ecr:_k.optional(),stacks:s.record(s.string(),Ak),resourceMap:s.record(s.string(),xk).optional()}).strict();var $k=Object.defineProperty,Ik=(e,t)=>$k(e,"name",{value:t,configurable:!0});function H_(e){return!(e.image!==void 0&&e.docker!==void 0)}Ik(H_,"imageDockerMutexCheck");var X_=s.number().int(d.CAPACITY.MIN.INTEGER).min(Wf,d.GENERATOR_CAPACITY.MIN.MIN).max(Kf,d.GENERATOR_CAPACITY.MIN.MAX),Y_=s.number().int(d.CAPACITY.MAX.INTEGER).min(Wf,d.GENERATOR_CAPACITY.MAX.MIN).max(Kf,d.GENERATOR_CAPACITY.MAX.MAX),Pn=s.number().int(d.LAMBDA.MEMORY.INTEGER).min(l_,d.LAMBDA.MEMORY.MIN).max(d_,d.LAMBDA.MEMORY.MAX).refine(e=>e===128||e%64===0,d.LAMBDA.MEMORY.MULTIPLE),J_=s.string().regex(z.LAMBDA_RUNTIME_IDENTIFIER,d.LAMBDA.RUNTIME),rg=s.number().int(d.CPU.INTEGER).min(256,d.CPU.MIN).max(4096,d.CPU.MAX),ic=s.number().int(d.CAPACITY.DESIRED.INTEGER).min(0,d.CAPACITY.DESIRED.MIN).max($n,d.CAPACITY.DESIRED.MAX),Yi=s.object({connectToDatabase:s.array(s.string()).optional()}).strict(),Tk=s.object({minSize:s.number().int(d.CAPACITY.WARM_POOL.MIN_SIZE.INTEGER).min(0,d.CAPACITY.WARM_POOL.MIN_SIZE.MIN).max(m_,d.CAPACITY.WARM_POOL.MIN_SIZE.MAX).optional(),reuseOnScaleIn:s.boolean().optional()}).strict(),ng=s.object({instanceType:s.string().optional(),amiHardwareType:s.enum(Ls).optional(),minCapacity:s.number().int(d.CAPACITY.MIN.INTEGER).min(0,d.CAPACITY.MIN.MIN_0).max($n,d.CAPACITY.MIN.MAX).optional(),maxCapacity:s.number().int(d.CAPACITY.MAX.INTEGER).min(1,d.CAPACITY.MAX.MIN_1).max($n,d.CAPACITY.MAX.MAX).optional(),memoryLimitMiB:Gi(128).optional(),warmPool:Tk.optional(),extraProperties:s.array(be).optional()}).strict().superRefine((e,t)=>{if(!e.instanceType||!e.amiHardwareType)return;let n=tc(e.instanceType,e.amiHardwareType);n.valid||t.addIssue({code:"custom",message:n.message??d.ARCHITECTURE_MISMATCH,path:["instanceType"]})}).superRefine((e,t)=>{e.minCapacity===0&&!e.warmPool&&t.addIssue({code:"custom",message:d.CAPACITY.WARM_POOL_REQUIRED,path:["minCapacity"]}),e.warmPool?.minSize!==void 0&&e.maxCapacity!==void 0&&e.warmPool.minSize>e.maxCapacity&&t.addIssue({code:"custom",message:d.CAPACITY.WARM_POOL.MIN_SIZE_EXCEEDS_MAX_CAPACITY,path:["warmPool","minSize"]})}),Rk=s.enum(Fi).describe(`Compute type must be one of: ${Fi.join(", ")}`),ig=s.enum(En).describe(`ECS capacity provider must be one of: ${En.join(", ")}`),og=s.string().refine(e=>Ye(Fs,e),{message:d.INSTANCE_TYPE}),q_=s.object({sourceType:s.enum(["sqs","dynamodb","eventbridge"]),sourceRef:s.string().describe("Name of the source resource"),batchSize:s.number().int(d.BATCH_SIZE.INTEGER).min(1,d.BATCH_SIZE.MIN).max(1e4,d.BATCH_SIZE.MAX).optional(),startingPosition:s.enum(["TRIM_HORIZON","LATEST"]).optional(),maxBatchingWindow:s.number().int(d.BATCHING_WINDOW.INTEGER).min(0,d.BATCHING_WINDOW.MIN).max(300,d.BATCHING_WINDOW.MAX).optional(),reportBatchItemFailures:s.boolean().optional()}).strict(),Nk=s.object({name:s.string().min(1,d.REQUIRED.CONTAINER_NAME).optional(),image:s.string().optional(),port:Sr.optional(),environment:Tn.optional(),secretsImport:b_.optional(),command:s.array(s.string()).optional(),entryPoint:s.array(s.string()).optional(),essential:s.boolean().optional(),healthCheck:s.object({command:s.array(s.string()),interval:s.number().int(d.HEALTH_CHECK.INTERVAL.INTEGER).min(5,d.HEALTH_CHECK.INTERVAL.MIN).max(300,d.HEALTH_CHECK.INTERVAL.MAX).optional(),timeout:s.number().int(d.HEALTH_CHECK.TIMEOUT.INTEGER).min(2,d.HEALTH_CHECK.TIMEOUT.MIN).max(60,d.HEALTH_CHECK.TIMEOUT.MAX).optional(),retries:s.number().int(d.HEALTH_CHECK.RETRIES.INTEGER).min(1,d.HEALTH_CHECK.RETRIES.MIN).max(10,d.HEALTH_CHECK.RETRIES.MAX).optional(),startPeriod:s.number().int(d.HEALTH_CHECK.START_PERIOD.INTEGER).min(0,d.HEALTH_CHECK.START_PERIOD.MIN).max(300,d.HEALTH_CHECK.START_PERIOD.MAX).optional()}).strict().optional(),ssmSecrets:s.array(s.string().regex(z.SECRET_NAME,d.SECRET_NAME)).optional(),extraProperties:s.array(be).optional()}).strict(),Q_=s.string().min(1,d.REQUIRED.SERVICE_NAME).max(255,d.MAX_LENGTH.SERVICE_NAME).regex(z.ECS_SERVICE_NAME,d.ECS_SERVICE_NAME),eE=s.object({domain:s.string().optional(),loadBalancer:s.union([s.literal(!1),s.enum(js)]).optional(),directAccess:s.boolean().optional(),extraProperties:s.array(be).optional()}).strict().refine(e=>!(e.directAccess&&e.domain),{message:d.DIRECT_ACCESS.NO_DOMAIN,path:["directAccess"]}).refine(e=>!(e.directAccess&&typeof e.loadBalancer=="string"),{message:d.DIRECT_ACCESS.NO_LOAD_BALANCER}).describe("Cluster-level configuration"),nc=s.object({path:s.string().optional(),host:s.string().optional(),priority:s.number().int(d.PRIORITY.INTEGER).min(1,d.PRIORITY.MIN).max(5e4,d.PRIORITY.MAX).optional(),healthCheckPath:s.string().optional()}).strict().describe("Path/host-based routing configuration"),Pk=s.object({desiredCount:ic.optional(),minCapacity:s.number().int(d.CAPACITY.MIN.INTEGER).min(0,d.CAPACITY.MIN.MIN_0).max($n,d.CAPACITY.MIN.MAX).optional(),maxCapacity:s.number().int(d.CAPACITY.MAX.INTEGER).min(1,d.CAPACITY.MAX.MIN_1).max($n,d.CAPACITY.MAX.MAX).optional(),scalingType:s.enum(Us).optional()}).strict().refine(br.check,br.params).describe("ECS service scaling configuration"),tE=s.object({name:Q_,docker:gt.optional(),needsDatabaseConnection:s.boolean().optional(),needsStorageConnection:s.boolean().optional(),needsMessagingConnection:s.boolean().optional(),image:s.string().optional(),containers:s.array(Nk).optional(),routing:s.union([nc,s.array(nc).min(1)]).optional(),cpu:rg.optional(),memoryLimitMiB:Gi(512).optional(),desiredCount:ic.optional(),scaling:De(Pk).optional(),capacityProvider:ig,ec2Config:ng.optional(),ssmSecretsPath:s.string().regex(z.SSM_PATH,d.SSM_PATH).optional(),extraProperties:s.array(be).optional(),alarms:A_.optional()}).strict().superRefine((e,t)=>{H_(e)||t.addIssue({code:"custom",path:["docker"],message:d.IMAGE_DOCKER_MUTEX})}).describe("Configuration for a service in an ECS cluster"),rE=s.object({name:U,type:Rk,needsConnection:s.boolean(),connectedDatabase:s.array(s.string()).optional(),connectedStorage:s.array(s.string()).optional(),connectedMessaging:s.array(s.string()).optional(),cluster:eE.optional(),services:s.array(tE).optional(),docker:gt.partial().optional(),deployment:s.enum(zs).optional(),codePath:s.string().optional(),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(Zs,d.LAMBDA.TIMEOUT.MIN).max(Vs,d.LAMBDA.TIMEOUT.MAX).optional(),memory:Pn.optional(),handler:s.string().optional(),runtime:J_.optional(),environment:Tn.optional(),secrets:Tn.optional(),eventSources:s.array(q_).optional(),functionUrl:s.object({authType:s.enum(Vi)}).strict().optional(),description:s.string().optional(),scheduleExpression:s.string().optional(),architecture:s.enum(Ms).optional(),ephemeralStorageSize:s.number().int(d.EPHEMERAL_STORAGE.INTEGER).min(512,d.EPHEMERAL_STORAGE.MIN).max(10240,d.EPHEMERAL_STORAGE.MAX).optional(),functionName:s.string().optional(),ssmSecrets:s.array(s.string()).optional(),ssmSecretsPath:s.string().optional(),alarms:$_.optional(),instanceType:og.optional(),enableSSH:s.boolean().optional(),keyName:s.string().optional(),userData:s.string().optional(),securityGroups:s.array(s.string()).optional(),variableName:s.string().optional(),extraProperties:s.array(be).optional()}).strict().superRefine((e,t)=>{if(e.type==="ecs"&&e.services)for(let n=0;n<e.services.length;n++){let i=e.services[n];i?.ec2Config?.instanceType&&!i.ec2Config.amiHardwareType&&Nn(i.ec2Config.instanceType)!=="ARM"&&t.addIssue({code:"custom",message:`Service '${i.name??n}' uses instance type '${i.ec2Config.instanceType}' (x86), which requires Docker images built for linux/amd64. The default build targets linux/arm64 (Graviton). Use a Graviton instance type (t4g, c6g, r6g, m6g, etc.) or set amiHardwareType: "STANDARD" to acknowledge x86.`,path:["services",n,"ec2Config","instanceType"]})}e.type==="lambda"&&e.deployment==="container"&&e.architecture==="X86_64"&&t.addIssue({code:"custom",message:"Lambda architecture 'X86_64' requires Docker images built for linux/amd64, but the default build targets linux/arm64. Use 'ARM_64' for Graviton Lambdas (recommended) or ensure your build pipeline targets linux/amd64.",path:["architecture"]})}),xU=s.object({appName:le,clusterName:U,containerPort:Sr,nameProvidedByFlag:s.boolean().optional(),ecrRepository:s.string().optional(),capacityProvider:ig.optional(),useAppEcr:s.boolean().optional(),desiredCount:ic.optional(),cpu:rg.optional(),memoryLimitMiB:Gi(512).optional(),minCapacity:X_.optional(),maxCapacity:Y_.optional(),ec2Config:ng.optional(),connectionConfig:Yi.optional()}).strict().refine(br.check,br.params),$U=s.object({appName:le,functionName:U,nameProvidedByFlag:s.boolean().optional(),lambdaType:s.enum(["basic","web","custom"]).optional(),ecrRepository:s.string().optional(),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(Zs,d.LAMBDA.TIMEOUT.MIN).max(Vs,d.LAMBDA.TIMEOUT.MAX).optional(),memory:Pn.optional(),enableFunctionUrl:s.boolean().optional(),description:s.string().optional(),enableCors:s.boolean().optional(),corsOrigins:s.string().optional(),corsHeaders:s.string().optional(),corsMethods:s.array(s.enum(f_)).optional(),corsCredentials:s.boolean().optional(),connectionConfig:Yi.optional()}).strict(),IU=s.object({appName:le,instanceName:U,nameProvidedByFlag:s.boolean().optional(),instanceType:og.optional(),enableSSH:s.boolean().optional(),minCapacity:X_.optional(),maxCapacity:Y_.optional(),connectionConfig:Yi.optional()}).strict().refine(br.check,br.params),TU=s.object({appName:le,clusterName:U,serviceName:Q_,capacityProvider:ig,containerPort:Sr.optional(),cpu:rg.optional(),memoryLimitMiB:Gi(512).optional(),desiredCount:ic.optional(),ec2Config:ng.optional(),routing:s.union([nc,s.array(nc).min(1)]).optional(),docker:gt.partial().optional(),nameProvidedByFlag:s.boolean().optional(),connectionConfig:Yi.optional()}).strict(),ag=s.object({appName:le,computeName:U,nameProvidedByFlag:s.boolean().optional(),connectionConfig:Yi.optional()}).strict(),kk=ag.extend({type:s.literal("ecs"),cluster:eE.optional(),services:s.array(tE).min(1,d.SERVICE.MIN_REQUIRED),docker:gt.partial().optional()}).strict().refine(e=>{let t=e.services.filter(n=>n.containers?.some(i=>i.port));return t.length>1?t.every(n=>(Array.isArray(n.routing)?n.routing:n.routing?[n.routing]:[]).some(i=>i.path||i.host)):!0},{message:d.SERVICE.ROUTING_REQUIRED}).refine(e=>{let t=e.services.map(n=>n.name);return new Set(t).size===t.length},{message:d.SERVICE.UNIQUE_WITHIN_CLUSTER}),Ck=ag.extend({type:s.literal("lambda"),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(Zs,d.LAMBDA.TIMEOUT.MIN).max(Vs,d.LAMBDA.TIMEOUT.MAX).optional(),memory:Pn.optional(),handler:s.string().optional(),runtime:J_.optional(),environment:Tn.optional(),secrets:Tn.optional(),description:s.string().optional(),functionUrl:s.union([s.object({authType:s.enum(Vi).optional()}).strict(),s.literal(!1)]).optional(),eventSources:s.array(q_).optional()}).strict(),Ok=ag.extend({type:s.literal("ec2"),instanceType:og.optional(),enableSSH:s.boolean().optional(),keyName:s.string().optional(),userData:s.string().optional(),securityGroups:s.array(s.string()).optional()}).strict(),RU=s.discriminatedUnion("type",[kk,Ck,Ok]),K_=s.object({path:s.string().min(1,d.REQUIRED.ROUTING_PATH),priority:s.number().int(d.PRIORITY.INTEGER).min(1,d.PRIORITY.MIN).max(5e4,d.PRIORITY.MAX).optional()}).strict(),nE=s.object({name:s.string().min(1,d.REQUIRED.SERVICE_NAME).max(255,d.MAX_LENGTH.SERVICE_NAME).regex(z.RESOURCE_NAME,d.RESOURCE_NAME),serviceType:s.enum(["web","worker"]).optional(),docker:gt.partial().optional(),containerPort:Sr.optional(),needsDatabaseConnection:s.boolean().optional(),routing:s.union([K_,s.array(K_).min(1)]).optional()}).strict().superRefine((e,t)=>{e.serviceType==="worker"&&(e.containerPort!==void 0&&t.addIssue({code:"custom",path:["containerPort"],message:"Worker services are not reachable inbound; remove containerPort."}),e.routing!==void 0&&t.addIssue({code:"custom",path:["routing"],message:"Worker services have no ALB route; remove routing."}))}),NU=s.object({appName:le,instanceType:s.string().optional()}).strict();var sg=s.object({memorySize:Pn.optional(),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(1,d.LAMBDA.TIMEOUT.MIN).max(900,d.LAMBDA.TIMEOUT.MAX).optional(),ephemeralStorageSize:s.number().int(d.EPHEMERAL_STORAGE.INTEGER).min(512,d.EPHEMERAL_STORAGE.MIN).max(10240,d.EPHEMERAL_STORAGE.MAX).optional()}).strict(),iE=s.object({type:s.enum(Gf).optional(),databaseName:s.string().optional(),databaseEngine:s.enum(xn).optional(),deletionProtection:s.boolean().optional(),backupRetention:Nt.optional(),port:Ws.optional(),publiclyAccessible:s.boolean().optional(),allowedIpCidr:s.string().optional(),instanceType:s.string().optional(),allocatedStorage:s.number().int(d.ALLOCATED_STORAGE.INTEGER).min(20,d.ALLOCATED_STORAGE.MIN).max(65536,d.ALLOCATED_STORAGE.MAX).optional(),multiAz:s.boolean().optional(),readReplica:Xs.optional(),writer:Hi.optional(),readers:Xi.optional(),allowVpcAccess:s.boolean().optional(),monitoringInterval:Ki.optional(),preferredMaintenanceWindow:s.string().optional(),databaseInsights:Ys.optional(),proxy:Hs.optional(),credentials:Ks.optional(),encryption:Js.optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()}).strict(),oE=s.object({server:sg.optional(),imageOptimisation:sg.optional(),revalidation:sg.optional()}).strict(),cg=s.object({versioned:s.boolean().optional()}).strict(),aE=s.object({assets:cg.optional(),cache:cg.optional(),media:cg.optional()}).strict(),Dk=s.object({visibilityTimeout:s.number().int(d.SQS.VISIBILITY_TIMEOUT.INTEGER).min(0,d.SQS.VISIBILITY_TIMEOUT.MIN).max(43200,d.SQS.VISIBILITY_TIMEOUT.MAX).optional(),messageRetentionPeriod:s.number().int(d.SQS.RETENTION_PERIOD.INTEGER).min(60,d.SQS.RETENTION_PERIOD.MIN).max(1209600,d.SQS.RETENTION_PERIOD.MAX).optional(),maxMessageSize:s.number().int(d.MAX_MESSAGE_SIZE.INTEGER).min(1024,d.MAX_MESSAGE_SIZE.MIN).max(262144,d.MAX_MESSAGE_SIZE.MAX).optional(),deadLetterQueue:s.union([s.literal(!1),s.object({enabled:s.boolean().optional(),maxReceiveCount:s.number().int(d.DLQ.MAX_RECEIVE_COUNT.INTEGER).min(1,d.DLQ.MAX_RECEIVE_COUNT.MIN).max(1e3,d.DLQ.MAX_RECEIVE_COUNT.MAX).optional()}).strict()]).optional()}).strict(),sE=s.object({revalidationQueue:Dk.optional()}).strict(),cE=s.object({domainNames:s.array(s.string()).optional(),certificateArn:s.string().optional()}).strict(),uE=s.record(s.string().regex(z.ENV_VAR_NAME,d.ENV_VAR_NAME),s.string()).optional(),wk=s.object({type:s.literal("payload"),name:s.string().min(1,d.REQUIRED.PATTERN_NAME),domain:s.string().optional(),database:iE.optional(),compute:oE.optional(),storage:aE.optional(),messaging:sE.optional(),cdn:cE.optional(),environment:uE}).strict(),zk=s.object({type:s.literal("nextjs"),name:s.string().min(1,d.REQUIRED.PATTERN_NAME),domain:s.string().optional(),database:iE.optional(),compute:oE.optional(),storage:aE.optional(),messaging:sE.optional(),cdn:cE.optional(),environment:uE}).strict(),ug=s.enum(Ui),Mk=s.object({command:s.string().min(1,d.REQUIRED.BUILD_COMMAND),outputDir:s.string().min(1,d.REQUIRED.OUTPUT_DIR)}).strict(),jk=s.object({headers:s.boolean().optional(),contentSecurityPolicy:s.string().optional()}).strict(),Uk=s.object({to:s.string().min(1,d.REQUIRED.FORMS_TO).regex(z.EMAIL,d.EMAIL),from:s.string().regex(z.EMAIL,d.EMAIL).optional(),corsOrigin:s.string().regex(z.HTTP_ORIGIN,"corsOrigin must be an exact origin such as https://example.com (no path, no trailing slash)").optional(),maxConcurrency:s.number().int().min(1).max(100).optional()}).strict(),Lk=s.object({behaviours:s.array(s.unknown()).optional()}).strict(),lg=s.object({type:s.literal("staticsite"),name:s.string().min(1,d.REQUIRED.PATTERN_NAME),source:s.string().min(1,d.REQUIRED.SOURCE),build:Mk,routing:ug.optional(),security:jk.optional(),domain:s.string().optional(),forms:Uk.optional(),cdn:Lk.optional()}).strict().superRefine((e,t)=>{if(e.forms===void 0)return;let n=e.domain;if(n===void 0||n===""){t.addIssue({code:"custom",path:["domain"],message:"A domain is required when forms are enabled: SES sends only from a verified identity, and the site's domain is the identity the pattern verifies"});return}let i=e.forms.from;i!==void 0&&!ks(i,n)&&t.addIssue({code:"custom",path:["forms","from"],message:`forms.from must be an address at ${n} (the verified SES identity) \u2014 for example noreply@${n}. Use forms.to for the recipient.`})}),Ji=s.discriminatedUnion("type",[wk,zk,lg]),lE=s.enum(["lightweight","standard","resilient","custom"]),dE=s.object({type:s.enum(Gf),instanceType:s.string().optional(),backupRetention:Nt.optional(),deletionProtection:s.boolean().optional(),encryption:s.union([s.object({useCMK:s.literal(!0)}).strict(),s.literal(!1)]).optional()}).strict(),mE=s.object({memorySize:Pn.optional(),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(1,d.LAMBDA.TIMEOUT.MIN).max(900,d.LAMBDA.TIMEOUT.MAX).optional()}).strict();var pE=s.object({appName:le,type:Hf,pattern:Xf.optional(),patternConfig:Ji.optional(),owner:s.string().optional(),tags:s.record(s.string(),s.string()).optional(),vpcId:s.string().optional(),network:Qs.optional(),backup:__.optional(),tunnel:E_.optional(),additionalNetworks:s.array(U_).optional(),database:s.array(T_),s3:s.array(F_),compute:s.array(rE),dynamodb:s.array(O_).optional(),clickhouse:s.array(D_).optional(),sqs:s.array(Z_).optional(),cdn:B_.optional(),customCodeBlocks:s.array(S_).optional(),additionalManagedImports:s.array(s.object({moduleSpecifier:s.string(),namedImports:s.array(s.string()),defaultImport:s.string().optional()}).strict()).optional()}).strict(),XU=s.object({name:le,type:Hf,pattern:Xf.optional(),patternTier:lE.optional(),patternDomain:s.string().optional(),source:s.string().min(1,d.REQUIRED.SOURCE).optional(),buildCommand:s.string().min(1,d.REQUIRED.BUILD_COMMAND).optional(),outputDir:s.string().min(1,d.REQUIRED.OUTPUT_DIR).optional(),routing:ug.optional(),formsTo:s.string().min(1,d.REQUIRED.FORMS_TO).regex(z.EMAIL,d.EMAIL).optional(),corsOrigin:s.string().regex(z.HTTP_ORIGIN,"corsOrigin must be an exact origin such as https://example.com (no path, no trailing slash)").optional(),customDatabase:dE.optional(),customCompute:mE.optional(),region:s.string().optional(),owner:s.string().optional(),includeDatabase:s.boolean().optional(),databaseName:s.string().min(1,d.DATABASE.NAME.REQUIRED).max(63,d.DATABASE.NAME.MAX_LENGTH).optional(),vpcId:s.string().optional(),network:L_.optional(),services:s.array(nE).optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()}).strict().superRefine((e,t)=>{e.formsTo!==void 0&&(e.patternDomain!==void 0&&e.patternDomain!==""||t.addIssue({code:"custom",path:["patternDomain"],message:"A domain is required when forms are enabled: SES sends only from a verified identity, and the site's domain is the identity the pattern verifies"}))}),YU=s.object({name:U,localResource:s.string().min(1),remoteApp:s.string().min(1),remoteResource:s.string().min(1),permission:s.enum(["read","write","read-write"]),remoteArn:s.string().optional()}).strict();var Fk=["fjall-managed","external","external-manual"],tL=s.enum(Fk);var fE=s.object({givenName:s.string().min(1),familyName:s.string().min(1),displayName:s.string().min(1).optional(),expires:s.string().min(1).optional()}).strict(),gE=s.object({name:s.string().min(1),path:s.string().min(1).optional()}).strict(),Zk=s.union([s.object({managedPolicyArn:s.string().min(1)}).strict(),s.object({customerManagedPolicy:gE}).strict()]),Vk=s.object({managedPolicies:s.array(s.string().min(1)).optional(),inlinePolicy:s.record(s.string(),s.unknown()).optional(),customerManagedPolicies:s.array(gE).optional(),permissionsBoundary:Zk.optional(),sessionDuration:s.string().min(1).optional(),description:s.string().optional(),accounts:s.union([s.array(s.string().min(1)),s.literal("all")]).optional(),includeManagementAccount:s.boolean().optional(),groups:s.array(s.string().min(1)).optional()}).strict(),Bk=s.object({description:s.string().optional()}).strict(),oc=s.string().regex(z.EMAIL,d.EMAIL),dg={groups:s.record(s.string(),Bk).optional(),permissionSets:s.record(s.string(),Vk).optional(),memberships:s.record(s.string(),s.array(oc)).optional(),resolutionVersion:s.number().int().min(1).optional(),defaultPermissionSets:s.boolean().optional()},Gk=s.discriminatedUnion("source",[s.object({...dg,source:s.literal("fjall-managed"),users:s.record(oc,fE)}).strict(),s.object({...dg,source:s.literal("external")}).strict(),s.object({...dg,source:s.literal("external-manual"),users:s.record(oc,fE).optional()}).strict()]),rL=s.object({name:U,type:s.literal("organisation").optional(),organisationName:s.string().min(1).optional(),orgEmail:oc.optional(),accounts:s.unknown().optional(),accountIds:s.record(s.string(),s.string()).optional(),identityCentre:s.union([Gk,s.literal(!1)]).optional(),allowedRegions:s.array(s.string().min(1)).optional()}).strict();var Wk=Object.defineProperty,Kk=(e,t)=>Wk(e,"name",{value:t,configurable:!0}),Hk=[1,3,5,7,14,30,60,90,120,150,180,365,400,545,731,1827,3653],Xk=s.object({buildkiteQueue:s.string().min(1,"buildkiteQueue cannot be empty").max(100).regex(/^[a-zA-Z0-9-_]+$/,"buildkiteQueue must be alphanumeric with hyphens/underscores"),buildkiteOrgSlug:s.string().min(1,"buildkiteOrgSlug cannot be empty").max(100).regex(/^[a-z0-9-]+$/,"buildkiteOrgSlug must be a lowercase Buildkite organisation slug"),agentTokenSsmParameterName:s.string().min(2).regex(/^\//,"agentTokenSsmParameterName must be a full path (leading /)"),agentTokenKmsKeyArn:s.string().min(1).optional(),fjallApiKeySsmParameterName:s.string().min(2).regex(/^\//,"fjallApiKeySsmParameterName must be a full path (leading /)").optional(),instanceType:s.string().min(1).default("c8g.xlarge"),agentVolumeSizeGib:s.number().int().min(20).max(1e3).default(250),agentMinInstances:s.number().int().min(0).default(0),agentMaxInstances:s.number().int().min(1).default(2),agentsPerInstance:s.number().int().min(1).default(1),spotCapacityPercentage:s.number().int().min(0).max(100).default(0),scaleInIdlePeriodSeconds:s.number().int().min(60).default(600),disconnectAfterUptimeSeconds:s.number().int().min(3600).default(86400),maxInstanceLifetimeDays:s.number().int().min(1).max(365).default(7),terminateInstanceAfterJob:s.boolean().default(!1),purgeBuildsOnDiskFull:s.boolean().default(!0),terminateInstanceOnDiskFull:s.boolean().default(!1),logRetentionDays:s.number().int().min(1).default(30),agentLogRetentionDays:s.literal(Hk).default(7),buildkiteAgentRelease:s.enum(["stable","beta","edge"]).default("stable"),buildkiteAgentTags:s.string().default(""),buildkiteAgentTimestampLines:s.boolean().default(!1),buildkiteAgentExperiments:s.string().default(""),buildkiteAgentTracingBackend:s.enum(["","datadog","opentelemetry"]).default(""),buildkiteAgentCancelGracePeriodSeconds:s.number().int().min(10).default(60),enableSecretsPlugin:s.boolean().default(!0),enableEcrPlugin:s.boolean().default(!1),enableDockerLoginPlugin:s.boolean().default(!1),enableDockerUserNamespaceRemap:s.boolean().default(!0),enableDockerExperimental:s.boolean().default(!1),dockerNetworkingProtocol:s.enum(["ipv4","dualstack"]).default("ipv4"),enableInstanceStorage:s.boolean().default(!1),mountTmpfsAtTmp:s.boolean().default(!0),buildkiteAgentEnableGitMirrors:s.boolean().default(!1),bootstrapScriptUrl:s.string().default(""),agentEnvFileUrl:s.string().default(""),scalerEventSchedulePeriod:s.string().min(1).default("1 minute"),scalerMinPollInterval:s.string().min(1).default("10s"),scaleOutFactor:s.string().min(1).default("1.0"),scaleOutWaitingForJobs:s.boolean().default(!1),rolePermissionsBoundaryArn:s.string().min(1).optional(),alarmSnsTopicArn:s.string().min(1).optional(),applicationId:s.string().min(1).optional(),costAllocationEnvironment:s.string().min(1).optional(),costAllocationOwner:s.string().min(1).optional()}).strict(),Yk=Xk.refine(e=>e.agentMinInstances<=e.agentMaxInstances,{message:"agentMinInstances must be <= agentMaxInstances"});function Jk(e){let t=Yk.safeParse(e);if(!t.success){let n=t.error.issues.map(i=>`  - ${i.path.join(".")||"(root)"}: ${i.message}`).join(`
+`:l==="r"?"\r":l):c.length>=2&&c.startsWith("'")&&c.endsWith("'")?t[a]=c.slice(1,-1):t[a]=c}return t}yn(vS,"parseDotEnv");function hS(e){return e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`").replace(/\n/g,"\\n").replace(/\r/g,"\\r")}yn(hS,"escapeDotEnvValue");var yS=s.object({awsAccountId:s.string(),accountName:s.string().nullable(),status:s.string(),role:s.string(),roleArn:s.string(),environment:s.string().optional(),connectedAt:s.string()}),BN=s.object({accounts:s.array(yS)});var GN=Object.defineProperty,yr=(e,t)=>GN(e,"name",{value:t,configurable:!0});function _f(e){let t=[e.primaryRegion,...e.secondaryRegions??[],e.disasterRecoveryRegion].filter(n=>n!==void 0);return[...new Set(t)]}yr(_f,"deriveRegionsFromOrgConfig");function Ef(e){return e.environment??wi(e)}yr(Ef,"environmentOrTier");function Af(e,t){return`${e.toLowerCase()}-${gn(t)}`}yr(Af,"generateTargetName");function xf(e,t){let n=[];for(let i of e){if(wi(i)==="organisation")continue;let r=Ef(i);for(let o of t)n.push({name:Af(i.name,o),accountName:i.name,accountId:i.id,environment:r,region:o})}return n.sort((i,r)=>{let o=i.environment.localeCompare(r.environment);if(o!==0)return o;let a=i.accountName.localeCompare(r.accountName);return a!==0?a:i.region.localeCompare(r.region)})}yr(xf,"deriveTargets");function bS(e){return xf(e.providerAccounts,_f(e))}yr(bS,"deriveAllTargets");function WN(e,t){if(t.length===0)return e;let n=new Set([e.primaryRegion,e.disasterRecoveryRegion].filter(Boolean)),i=t.filter(r=>!n.has(r));return{...e,secondaryRegions:i.length>0?i:void 0}}yr(WN,"mergeSecondaryRegions");function SS(e,t){return e.find(n=>n.name===t)}yr(SS,"findTarget");var KN=Object.defineProperty,HN=(e,t)=>KN(e,"name",{value:t,configurable:!0});function _S(e,t){if(t!==void 0){if(t.trim()==="")throw new Error("buildAppConfigPath: container must be a non-empty string");return`${t}/fjall/${e}`}return`fjall/${e}`}HN(_S,"buildAppConfigPath");var XN=Object.defineProperty,bn=(e,t)=>XN(e,"name",{value:t,configurable:!0}),$f="infrastructure.ts",If="fjall";function ES(e,t){let n=t?.excludedPathPrefixes,i=t?.excludedPathSegments,r=[];for(let o of e){if(!Tf(o.path)||n&&xS(o.path,n)||i&&$S(o.path,i))continue;let a=Rf(o.path);a!==null&&r.push({configPath:AS(o.path),boundaryPath:a})}return r}bn(ES,"findInfrastructurePaths");function Tf(e){return e===$f||e.endsWith(`/${$f}`)}bn(Tf,"isInfrastructureFile");function Rf(e){let t=e.split("/");for(let n=0;n<t.length-1;n++)if(t[n]===If)return t.slice(0,n+1).join("/");return null}bn(Rf,"findBoundaryPath");function AS(e){return e.slice(0,-`/${$f}`.length)}bn(AS,"toConfigDir");function xS(e,t){for(let n of t)if(e.startsWith(n))return!0;return!1}bn(xS,"hasExcludedPrefix");function $S(e,t){let n=e.split("/");for(let i=0;i<n.length-1;i++)if(t.has(n[i]))return!0;return!1}bn($S,"hasExcludedSegment");var YN=Object.defineProperty,Nf=(e,t)=>YN(e,"name",{value:t,configurable:!0});function IS(e){if(e.length===0)return null;let t=[];for(let i of e){let r=TS(i.boundaryPath);if(r===null)return null;t.push(r)}let n=RS(t);return n.length===0?null:n.join("/")}Nf(IS,"inferContainerFromCandidates");function TS(e){let t=e.split("/").filter(i=>i.length>0);if(t.length===0||t[t.length-1]!==If)return null;let n=t.slice(0,t.length-1);return n.length===0?null:n}Nf(TS,"extractContainer");function RS(e){if(e.length===0)return[];let[t,...n]=e,i=[];for(let r=0;r<t.length;r+=1){let o=t[r];for(let a of n)if(a[r]!==o)return i;i.push(o)}return i}Nf(RS,"longestCommonPrefix");var JN=Object.defineProperty,NS=(e,t)=>JN(e,"name",{value:t,configurable:!0}),PS=["fjall","organisation","platform","account"];function kS(e){return PS.includes(e.toLowerCase())}NS(kS,"isReservedAppName");var CS="-cache";function OS(e){return pt(e).endsWith(CS)}NS(OS,"hasReservedAppNameSuffix");var qN=Object.defineProperty,Pf=(e,t)=>qN(e,"name",{value:t,configurable:!0});function wS(e){return{success:!0,data:e}}Pf(wS,"success");function ji(e){return{success:!1,error:e}}Pf(ji,"failure");var DS="sha256:",Ps=12,QN=new RegExp(`-sha-[0-9a-f]{${Ps}}$`);function zS(e,t,n){if(!e.startsWith(DS))return ji(new Error(`expected sha256:... digest, got ${e.slice(0,32)}`));let i=e.slice(DS.length);if(i.length<Ps)return ji(new Error(`digest hex payload too short (need >=${Ps} chars, got ${i.length})`));let r=t.trim();if(r==="")return ji(new Error("serviceName must be a non-empty string"));let o;if(n!==void 0){let u=n.trim();if(u==="")return ji(new Error("target, when supplied, must be a non-empty string; omit the argument instead"));o=u.toLowerCase()}let a=i.slice(0,Ps).toLowerCase(),c=o!==void 0?`${r.toLowerCase()}-${o}`:r.toLowerCase();return wS(`${c}-sha-${a}`)}Pf(zS,"deriveContentHashTag");var eP=Object.defineProperty,tP=(e,t)=>eP(e,"name",{value:t,configurable:!0}),MS=["full","code-only","rollback","restart"],rP=s.enum(MS),jS=/^[a-zA-Z0-9._-]+$/,US=s.string().min(1).max(128).regex(jS),LS=s.object({serviceName:s.string().min(1),imageTag:US,imageDigest:s.string().min(1).optional(),imageUri:s.string().min(1),ecrRepositoryArn:s.string().min(1).optional(),taskDefinitionArn:s.string().min(1).optional(),previousTaskDefinitionArn:s.string().min(1).optional(),functionArn:s.string().min(1).optional(),publishedVersion:s.string().min(1).optional()}).strict(),nP=s.array(LS);function FS(e,t){return`${e}${t}`}tP(FS,"artefactOutputKey");var iP=Object.defineProperty,ZS=(e,t)=>iP(e,"name",{value:t,configurable:!0}),ft=["payload","nextjs","staticsite"],kf=new Set(ft);function Cf(e){return typeof e=="string"&&kf.has(e)}ZS(Cf,"isPatternType");var Sn={payload:{label:"Payload CMS",constructIdSuffix:"Payload",artefact:"opennext-lambda",stackPlacement:"compute",deployable:!0},nextjs:{label:"Next.js",constructIdSuffix:"Nextjs",artefact:"opennext-lambda",stackPlacement:"compute",deployable:!1},staticsite:{label:"Static site",constructIdSuffix:"StaticSite",artefact:"static-assets",stackPlacement:"cdn",deployable:!0}},VS=ft.filter(e=>Sn[e].deployable),Of=ft.filter(e=>Sn[e].artefact==="opennext-lambda"),oP=new Set(Of);function Df(e){return e!=null&&oP.has(e)}ZS(Df,"isOpenNextPatternType");var Ui=["multipage","spa"];var aP=Object.defineProperty,wf=(e,t)=>aP(e,"name",{value:t,configurable:!0}),BS="noreply";function GS(e){return`${BS}@${e}`}wf(GS,"defaultFormsFromAddress");function WS(e){return`https://${e}`}wf(WS,"defaultFormsCorsOrigin");function ks(e,t){let n=e.split("@");if(n.length!==2)return!1;let[i,r]=n;return i===void 0||i===""||r===void 0?!1:r.toLowerCase()===t.toLowerCase()}wf(ks,"isAddressAtDomain");var KS=2;var sP=s.object({devDomain:s.string().min(1),hostedZoneId:s.string().min(1).optional(),parentDomain:s.string().min(1).optional(),parentDelegationRoleArn:s.string().min(1).optional()}).strict().superRefine((e,t)=>{if(e.hostedZoneId!==void 0){e.parentDomain!==void 0&&t.addIssue({code:"custom",path:["parentDomain"],message:"hostedZoneId (adopt mode) is mutually exclusive with parentDomain \u2014 the adopted zone was already delegated; omit parentDomain"}),e.parentDelegationRoleArn!==void 0&&t.addIssue({code:"custom",path:["parentDelegationRoleArn"],message:"hostedZoneId (adopt mode) is mutually exclusive with parentDelegationRoleArn \u2014 the adopted zone was already delegated; omit parentDelegationRoleArn"});return}e.parentDelegationRoleArn!==void 0&&e.parentDomain===void 0&&t.addIssue({code:"custom",path:["parentDomain"],message:"parentDelegationRoleArn requires parentDomain \u2014 set parentDomain to the parent zone the DelegationRole belongs to"}),e.parentDomain!==void 0&&!e.devDomain.endsWith(`.${e.parentDomain}`)&&t.addIssue({code:"custom",path:["parentDomain"],message:"parentDomain must be a proper DNS suffix of devDomain \u2014 devDomain must end with `.<parentDomain>`"})}),HS={appId:s.string().min(1),appKebab:s.string().min(1),engineVersion:s.string().min(1).optional(),adoptSlotEcr:s.boolean().optional(),phase:s.enum(["zone","full"]).optional(),domain:sP.optional()},cP=s.object(HS).strict(),uP=s.object({...HS,version:s.literal(KS),appName:s.string().min(1)}).strict().refine(e=>e.appName===`fjall-dev-${e.appKebab}`,{message:"appName must equal `fjall-dev-${appKebab}` (single-source identity)",path:["appName"]});var dP=Object.defineProperty,_n=(e,t)=>dP(e,"name",{value:t,configurable:!0});function XS(e){return e.success===!0}_n(XS,"isSuccess");function YS(e){return e.success===!1}_n(YS,"isFailure");function N(e){return{success:!0,data:e}}_n(N,"success");function R(e){return{success:!1,error:e}}_n(R,"failure");async function JS(e){try{let t=await e();return N(t)}catch(t){return R(hr(t))}}_n(JS,"tryAsync");function qS(e){try{let t=e();return N(t)}catch(t){return R(hr(t))}}_n(qS,"trySync");var mP=Object.defineProperty,pP=(e,t)=>mP(e,"name",{value:t,configurable:!0}),QS=/^[a-zA-Z][a-zA-Z0-9-]*$/,fP=Mi.source.replace(/^\^|\$$/g,""),z=Object.freeze({IDENTIFIER:QS,NEW_APP_NAME:/^[a-z][a-z0-9-]*$/,RESOURCE_NAME:/^[a-zA-Z][a-zA-Z0-9]*$/,ECS_SERVICE_NAME:QS,BUCKET_NAME:/^[a-z][a-z0-9-]*[a-z0-9]$|^[a-z][a-z0-9]*$/,DATABASE_NAME:/^[a-zA-Z][a-zA-Z0-9_]*$/,RESOURCE_TYPE:/^[a-z]+(:[a-z]+)?$/,SSM_PATH:new RegExp(`^(?:/${fP})+$`),SECRET_NAME:Rs,SSM_COMPONENT:Mi,EMAIL:/^[^\s@]+@[^\s@]+\.[^\s@]+$/,DOCKER_IMAGE:/^[a-z0-9][a-z0-9._-]*[a-z0-9](:[a-z0-9._-]+)?$/,DOMAIN:/^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)+$/i,HTTP_ORIGIN:/^https?:\/\/[a-z0-9.-]+(:\d+)?$/i,PASCAL_CASE:/^[A-Z][A-Za-z0-9]*$/,AWS_ACCOUNT_ID:/^\d{12}$/,VPC_ID:/^vpc-[a-z0-9]+$/,ROLE_ARN:/^arn:aws[a-zA-Z-]*:iam::\d{12}:role\/.+$/,CIDR:/^((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\.){3}(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\/(3[0-2]|[12]?\d)$/,SCHEDULE_EXPRESSION:/^(rate\(1 (?:minute|hour|day)\)|rate\((?:[2-9]|[1-9]\d+) (?:minutes|hours|days)\)|cron\([^\s()]+ [^\s()]+ [^\s()]+ [^\s()]+ [^\s()]+ [^\s()]+\))$/,LAMBDA_RUNTIME_IDENTIFIER:/^[A-Za-z0-9._-]+$/,ENV_VAR_NAME:/^[A-Za-z_][A-Za-z0-9_]*$/});function zf(e){let t=/^rate\((\d+) (minute|minutes|hour|hours|day|days)\)$/.exec(e);if(!t)return;let n=t[1],i=t[2];if(n===void 0||i===void 0)return;let r=parseInt(n,10);if(!Number.isFinite(r)||r<1)return;let o=i==="minute"||i==="hour"||i==="day";if(!(o&&r!==1)&&!(!o&&r===1))return i==="minute"||i==="minutes"?{everyMs:r*6e4}:i==="hour"||i==="hours"?{everyMs:r*60*6e4}:{everyMs:r*24*60*6e4}}pP(zf,"parseRateExpression");var d=Object.freeze({IDENTIFIER:"Must start with a letter, contain only letters, numbers, and hyphens",NEW_APP_NAME:"Must start with a lowercase letter and contain only lowercase letters, numbers, and hyphens",IDENTIFIER_MIN_LENGTH:"Must be at least 2 characters",IDENTIFIER_NO_TRAILING_HYPHEN:"Must not end with a hyphen",IDENTIFIER_NO_CONSECUTIVE_HYPHENS:"Must not contain consecutive hyphens",RESOURCE_NAME:"Must start with a letter and contain only letters and numbers (PascalCase recommended)",ECS_SERVICE_NAME:"Service name must start with a letter and contain only letters, numbers, and hyphens",BUCKET_NAME:"Bucket name must start with a lowercase letter and contain only lowercase letters, numbers, and hyphens",DATABASE_NAME:"Database name must start with a letter and contain only letters, numbers, and underscores",RESOURCE_TYPE:"Resource type must be in format 'category' or 'category:type'",SSM_PATH:"SSM path must start with / and contain valid namespace segments (e.g., /myapp/ApiCluster/service)",SECRET_NAME:hf,SSM_COMPONENT:Ns,EMAIL:"Please enter a valid email address",DOMAIN:"Please enter a valid domain (e.g., cms.example.com)",DOCKER_IMAGE:"Invalid Docker image name format",REQUIRED:{APP_NAME:"Application name is required",RESOURCE_NAME:"Resource name is required",BUCKET_NAME:"Bucket name is required",SERVICE_NAME:"Service name is required",NETWORK_NAME:"Network name is required",DATABASE_NAME:"Database name is required",ORGANISATION_NAME:"Organisation name is required",EMAIL:"Email is required",NAME:"Name is required",USERNAME:"Username is required",CONTAINER_NAME:"Container name is required",GROUP:"Group is required",PATTERN_NAME:"Pattern name is required",SOURCE:"Source directory is required",BUILD_COMMAND:"Build command is required",OUTPUT_DIR:"Output directory is required",FORMS_TO:"Forms recipient address is required",ROUTING_PATH:"Routing path is required",RESOURCE_REFERENCE:"Resource reference is required",RESOURCE_TYPE:"Resource type is required",VARIANT:"Variant is required",SUBTYPE:"Subtype is required",DEPLOY_TARGET:"Deploy target is required",DESTROY_TARGET:"Destroy target is required"},MAX_LENGTH:{APP_NAME:"Application name must be 50 characters or less",RESOURCE_NAME:"Resource name must be 63 characters or less",BUCKET_NAME:"Bucket name must be 63 characters or less",SERVICE_NAME:"Service name must be 255 characters or less",NETWORK_NAME:"Network name must be 50 characters or less",DATABASE_NAME:"Database name must be 63 characters or less",ORGANISATION_NAME:"Organisation name must be 50 characters or less"},PORT:{INTEGER:"Port must be an integer",MIN:"Port must be at least 1",MAX:"Port cannot exceed 65535"},USERNAME:{MAX_LENGTH:"Username cannot exceed 63 characters"},LAMBDA:{MEMORY:{INTEGER:"Lambda memory must be an integer",MIN:"Memory must be at least 128 MB",MAX:"Memory cannot exceed 10240 MB",MULTIPLE:"Memory must be 128 MB or a multiple of 64 MB"},TIMEOUT:{INTEGER:"Timeout must be an integer",MIN:"Timeout must be at least 1 second",MAX:"Timeout cannot exceed 900 seconds"},RUNTIME:"Lambda runtime must contain only letters, digits, dots, underscores, or dashes (e.g. 'NODEJS_20_X' or 'nodejs20.x')"},ENV_VAR_NAME:"Environment variable names must start with a letter or underscore and contain only letters, digits, and underscores",PRIORITY:{INTEGER:"Priority must be an integer",MIN:"Priority must be at least 1",MAX:"Priority cannot exceed 50000"},CAPACITY:{MIN:{INTEGER:"Minimum capacity must be an integer",MIN_0:"Minimum capacity must be at least 0",MIN_1:"Minimum capacity must be at least 1",MAX:"Minimum capacity cannot exceed 100"},MAX:{INTEGER:"Maximum capacity must be an integer",MIN_0:"Maximum capacity must be at least 0",MIN_1:"Maximum capacity must be at least 1",MAX:"Maximum capacity cannot exceed 100"},DESIRED:{INTEGER:"Desired count must be an integer",MIN:"Desired count must be at least 0",MAX:"Desired count cannot exceed 100"},WARM_POOL_REQUIRED:"minCapacity 0 requires a warmPool \u2014 without it, new tasks wait 60-90s for a cold instance launch",WARM_POOL:{MIN_SIZE:{INTEGER:"Warm pool minSize must be an integer",MIN:"Warm pool minSize must be at least 0",MAX:"Warm pool minSize cannot exceed 100"},MIN_SIZE_EXCEEDS_MAX_CAPACITY:"warmPool.minSize cannot exceed maxCapacity \u2014 the warm pool cannot hold more instances than the ASG allows"}},MEMORY_LIMIT:{INTEGER:"Memory limit must be an integer",MIN_512:"Memory limit must be at least 512 MiB",MIN_128:"Memory limit must be at least 128 MiB",MAX:"Memory limit cannot exceed 30720 MiB"},DATABASE:{PORT:{INTEGER:"Database port must be an integer",MIN:"Database port must be at least 1024",MAX:"Database port cannot exceed 65535"},NAME:{REQUIRED:"Database name is required",MAX_LENGTH:"Database name must be 63 characters or less"}},BACKUP_RETENTION:{INTEGER:"Backup retention must be an integer",MIN:"Backup retention must be at least 1 day",MAX:"Backup retention cannot exceed 35 days"},SQS:{VISIBILITY_TIMEOUT:{INTEGER:"Visibility timeout must be an integer",MIN:"Visibility timeout must be at least 0 seconds",MAX:"Visibility timeout cannot exceed 43200 seconds (12 hours)"},RETENTION_PERIOD:{INTEGER:"Retention period must be an integer",MIN:"Retention period must be at least 60 seconds",MAX:"Retention period cannot exceed 1209600 seconds (14 days)"}},READER:{COUNT:{INTEGER:"Reader count must be an integer",MIN:"Reader count must be at least 0",MAX:"Reader count cannot exceed 15"}},IDENTIFIER_SUFFIX:{REQUIRED:"Identifier suffix is required when specified",MAX_LENGTH:"Identifier suffix cannot exceed 50 characters"},ROTATION:{INTEGER:"Rotation days must be an integer",MIN:"Rotation interval must be at least 1 day",MAX:"Rotation interval cannot exceed 365 days"},MAX_CONNECTIONS:{INTEGER:"Max connections must be an integer",MIN:"Max connections must be at least 1",MAX:"Max connections cannot exceed 100"},MONITORING_INTERVAL:{INTEGER:"Monitoring interval must be an integer",MIN:"Monitoring interval must be at least 0",MAX:"Monitoring interval cannot exceed 60 seconds",VALUES:"Monitoring interval must be 0, 1, 5, 10, 15, 30, or 60 seconds"},RETENTION_DAYS:{INTEGER:"Retention days must be an integer",MIN:"Retention days must be at least 1",MAX:"Retention days cannot exceed 365"},BATCH_SIZE:{INTEGER:"Batch size must be an integer",MIN:"Batch size must be at least 1",MAX:"Batch size cannot exceed 10000"},SERVICE:{UNIQUE_WITHIN_CLUSTER:"Service names must be unique within a cluster",MIN_REQUIRED:"At least one service is required",ROUTING_REQUIRED:"Multiple services with ports require routing config (path or host)"},PROXY_CONFIG:{MAX_IDLE_CONNECTIONS:{INTEGER:"Max idle connections must be an integer",MIN:"Max idle connections must be at least 0",MAX:"Max idle connections cannot exceed 100"},BORROW_TIMEOUT:{INTEGER:"Connection borrow timeout must be an integer",MIN:"Connection borrow timeout must be at least 1 second",MAX:"Connection borrow timeout cannot exceed 3600 seconds"}},MAX_AZS:{INTEGER:"Max AZs must be an integer",MIN:"Max AZs must be at least 1",MAX:"Max AZs cannot exceed 3"},BATCHING_WINDOW:{INTEGER:"Max batching window must be an integer",MIN:"Max batching window must be at least 0",MAX:"Max batching window cannot exceed 300 seconds"},HEALTH_CHECK:{INTERVAL:{INTEGER:"Health check interval must be an integer",MIN:"Health check interval must be at least 5 seconds",MAX:"Health check interval cannot exceed 300 seconds"},TIMEOUT:{INTEGER:"Health check timeout must be an integer",MIN:"Health check timeout must be at least 2 seconds",MAX:"Health check timeout cannot exceed 60 seconds"},RETRIES:{INTEGER:"Health check retries must be an integer",MIN:"Health check retries must be at least 1",MAX:"Health check retries cannot exceed 10"},START_PERIOD:{INTEGER:"Health check start period must be an integer",MIN:"Health check start period must be at least 0 seconds",MAX:"Health check start period cannot exceed 300 seconds"}},EPHEMERAL_STORAGE:{INTEGER:"Ephemeral storage size must be an integer",MIN:"Ephemeral storage size must be at least 512 MB",MAX:"Ephemeral storage size cannot exceed 10240 MB"},MAX_MESSAGE_SIZE:{INTEGER:"Max message size must be an integer",MIN:"Max message size must be at least 1024 bytes",MAX:"Max message size cannot exceed 262144 bytes (256 KB)"},CAPACITY_CONSTRAINT:{MIN_LTE_MAX:"minCapacity must be less than or equal to maxCapacity"},DIRECT_ACCESS:{NO_DOMAIN:"directAccess cannot be used with domain (no ALB for HTTPS)",NO_LOAD_BALANCER:"directAccess cannot be used with loadBalancer (mutually exclusive)"},GLOBAL_AURORA:{PRIMARY_REGION_REQUIRED:"primaryRegion is required for GlobalAurora databases"},NAT_GATEWAY:{INTEGER:"NAT gateway count must be an integer",MIN:"NAT gateway count must be at least 0",MAX:"NAT gateway count cannot exceed 3"},CIDR_MASK:{INTEGER:"CIDR mask must be an integer",MIN:"CIDR mask must be at least 16",MAX:"CIDR mask cannot exceed 28"},CPU:{INTEGER:"CPU must be an integer",MIN:"CPU must be at least 256 units",MAX:"CPU cannot exceed 4096 units"},KMS:{KEY_REQUIRED:"KMS key ARN is required when using KMS encryption"},READER_INSTANCES:{MAX:"Cannot have more than 15 reader instances",COUNT_OR_INSTANCES:"Cannot specify both 'count' and 'instances' - use one or the other"},GENERATOR_CAPACITY:{MIN:{MIN:"Minimum capacity must be at least 1",MAX:"Minimum capacity cannot exceed 1000"},MAX:{MIN:"Maximum capacity must be at least 1",MAX:"Maximum capacity cannot exceed 1000"}},INSTANCE_TYPE:"Unknown instance type. Common types include: t4g.micro, t4g.small, m5.large",ARCHITECTURE_MISMATCH:"Architecture mismatch between instance type and AMI",ALLOCATED_STORAGE:{INTEGER:"Allocated storage must be an integer",MIN:"Allocated storage must be at least 20 GB",MAX:"Allocated storage cannot exceed 65536 GB"},DLQ:{MAX_RECEIVE_COUNT:{INTEGER:"Max receive count must be an integer",MIN:"Max receive count must be at least 1",MAX:"Max receive count cannot exceed 1000"}},ALARM:{PERCENTAGE:{MIN:"Threshold must be at least 1%",MAX:"Threshold must be at most 100%"},FREE_STORAGE_GIB:{MIN:"Free storage threshold must be at least 1 GiB"}},REGION:"Invalid AWS region",PASCAL_CASE:"Resource name must start with an uppercase letter and contain only alphanumerics (PascalCase).",IMAGE_DOCKER_MUTEX:"image and docker are mutually exclusive",AWS_ACCOUNT_ID:"AWS account id must be exactly 12 digits (no hyphens)",VPC_ID:"VPC id must look like vpc-abc12345",ROLE_ARN:"Role ARN must have the form arn:aws:iam::<account-id>:role/<name>",CIDR:"CIDR must be in dotted-quad/prefix-length form (e.g. 10.0.0.0/16)",VPC_PEER:{MIN_REQUESTER_ACCOUNTS:"At least one requester account id is required",REGION_REQUIRED:"Peer region is required when specified",ROUTE_TABLE_ID_REQUIRED:"Route table id must not be empty"},SCHEDULE_EXPRESSION:"Schedule expression must be 'rate(N minute|minutes|hour|hours|day|days)' with N>=1, or 'cron(<6-field AWS expression>)'"});var gP=Object.defineProperty,Xe=(e,t)=>gP(e,"name",{value:t,configurable:!0}),vP=["us-east-2","us-west-2","us-east-1","eu-west-1","eu-central-1","ap-southeast-1"],hP=Object.freeze(vP.flatMap(e=>{let t=fn(e);return t?[t]:[]})),Mf=Object.freeze(["us-east-2","us-west-2","us-east-1","eu-west-1","ap-southeast-1"]);function Cs(e){return e?e.split(",").map(t=>t.trim()).filter(Boolean):[]}Xe(Cs,"parseRegionList");function jf(e){return Tt.includes(e)}Xe(jf,"isValidRegion");function Uf(e){return/^[a-z]{2}-[a-z]+-[1-9]$/.test(e)}Xe(Uf,"isValidRegionFormat");function Lf(e){if(!e)return Mf.slice(0,3);let t=e.toLowerCase().split("-"),n=t[0],i=t.length>1?t[1]:"",r=[];return n&&i&&(r=Tt.filter(o=>o.startsWith(`${n}-${i}`))),r.length===0&&n&&(r=Tt.filter(o=>o.startsWith(`${n}-`))),r.length>0?r.slice(0,3):Mf.slice(0,3)}Xe(Lf,"getSuggestions");function Ff(e){if(jf(e))return!0;let t=Lf(e);return Uf(e)?`Unknown region. Try: ${t.join(", ")}`:`Invalid format. Try: ${t.join(", ")}`}Xe(Ff,"validateRegion");function e_(e){if(!e||e.trim()==="")return!0;let t=Cs(e);for(let n of t){let i=Ff(n);if(i!==!0)return i}return!0}Xe(e_,"validateRegionList");function Zf(e,t){return e.filter(n=>n!==t)}Xe(Zf,"filterDuplicateRegions");function Vf(e){return{label:e.city,value:e.code,description:e.optIn?`${e.code} \u2014 opt-in required`:e.code}}Xe(Vf,"toRegionOption");function t_(){return He.map(Vf)}Xe(t_,"getRegionOptions");function r_(e){return He.filter(t=>t.code!==e).map(Vf)}Xe(r_,"getRegionOptionsExcluding");function n_(e){let t=He.find(n=>n.code===e);return t?t.city:e}Xe(n_,"getRegionName");function i_(e){return t=>{let n=Cs(t);return Zf(n,e)}}Xe(i_,"createRegionFormatter");var Os="3.5.2";var Ds=["Aurora","Instance","GlobalAurora","ClickHouse"],En=["FARGATE","FARGATE_SPOT","EC2"],at=["standard","resilient","enterprise"],ws=["tinkerer","lightweight","standard","resilient","enterprise"],Bf="custom",Li=[...ws,Bf];var yP=Object.defineProperty,bP=(e,t)=>yP(e,"name",{value:t,configurable:!0}),vj=Object.freeze({RESOURCE_SUFFIXES:Object.freeze({storage:"Storage",database:"Database",cluster:"Cluster",function:"Function",instance:"Instance",compute:"Compute"})}),Fi=["ecs","lambda","ec2"],An=Object.freeze({ECS:"ecs",LAMBDA:"lambda",EC2:"ec2"}),zs=["code","container"],Zi=Object.freeze({CODE:"code",CONTAINER:"container"}),Ms=["ARM_64","X86_64"],o_="ARM_64",Vi=["NONE","AWS_IAM"],js=["public","internal"],Us=["CPU","MEMORY"],Ls=["ARM","STANDARD"],Gf=["Instance","Aurora"],xn=["postgresql","mysql"],a_=["foundation","compliance","hardened"];var Fs=["t3.nano","t3.micro","t3.small","t3.medium","t3.large","t3.xlarge","t3.2xlarge","t3a.nano","t3a.micro","t3a.small","t3a.medium","t3a.large","t3a.xlarge","t3a.2xlarge","t4g.nano","t4g.micro","t4g.small","t4g.medium","t4g.large","t4g.xlarge","t4g.2xlarge","c5.large","c5.xlarge","c5.2xlarge","c5.4xlarge","c5.9xlarge","c5.12xlarge","c5.18xlarge","c5.24xlarge","c5a.large","c5a.xlarge","c5a.2xlarge","c5a.4xlarge","c5a.8xlarge","c5a.12xlarge","c5a.16xlarge","c5a.24xlarge","c6g.medium","c6g.large","c6g.xlarge","c6g.2xlarge","c6g.4xlarge","c6g.8xlarge","c6g.12xlarge","c6g.16xlarge","r5.large","r5.xlarge","r5.2xlarge","r5.4xlarge","r5.8xlarge","r5.12xlarge","r5.16xlarge","r5.24xlarge","r5a.large","r5a.xlarge","r5a.2xlarge","r5a.4xlarge","r5a.8xlarge","r5a.12xlarge","r5a.16xlarge","r5a.24xlarge","r6g.medium","r6g.large","r6g.xlarge","r6g.2xlarge","r6g.4xlarge","r6g.8xlarge","r6g.12xlarge","r6g.16xlarge","i3.large","i3.xlarge","i3.2xlarge","i3.4xlarge","i3.8xlarge","i3.16xlarge","p3.2xlarge","p3.8xlarge","p3.16xlarge","g4dn.xlarge","g4dn.2xlarge","g4dn.4xlarge","g4dn.8xlarge","g4dn.12xlarge","g4dn.16xlarge","m5.large","m5.xlarge","m5.2xlarge","m5.4xlarge","m5.8xlarge","m5.12xlarge","m5.16xlarge","m5.24xlarge","m5a.large","m5a.xlarge","m5a.2xlarge","m5a.4xlarge","m5a.8xlarge","m5a.12xlarge","m5a.16xlarge","m5a.24xlarge"],s_=[0,1,5,10,15,30,60];function Ye(e,t){return e.includes(t)}bP(Ye,"constIncludes");var c_=1,u_=65535,_j=Object.freeze({postgresql:5432,mysql:3306}),l_=128,d_=10240,Zs=1,Vs=900,Wf=1,Kf=1e3,$n=100,m_=100;var p_=3e3;var f_=["GET","POST","PUT","DELETE","HEAD","OPTIONS","PATCH"],g_=["standard","assets","upload","website"],In=["AES256","KMS"];var SP=Object.defineProperty,Bi=(e,t)=>SP(e,"name",{value:t,configurable:!0}),De=Bi(e=>s.union([s.literal(!1),e]),"optionalOrDisabled"),br={check:Bi(e=>e.minCapacity!==void 0&&e.maxCapacity!==void 0?e.minCapacity<=e.maxCapacity:!0,"check"),params:{message:d.CAPACITY_CONSTRAINT.MIN_LTE_MAX,path:["maxCapacity"]}},Gi=Bi(e=>s.number().int(d.MEMORY_LIMIT.INTEGER).min(e,e===128?d.MEMORY_LIMIT.MIN_128:d.MEMORY_LIMIT.MIN_512).max(30720,d.MEMORY_LIMIT.MAX),"memoryLimitMiBSchema"),U=s.string().min(1,d.REQUIRED.RESOURCE_NAME).max(63,d.MAX_LENGTH.RESOURCE_NAME).regex(z.RESOURCE_NAME,d.RESOURCE_NAME),h_=s.string().min(1,d.REQUIRED.BUCKET_NAME).max(63,d.MAX_LENGTH.BUCKET_NAME).regex(z.BUCKET_NAME,d.BUCKET_NAME),y_=s.string().min(1,d.REQUIRED.DATABASE_NAME).max(63,d.MAX_LENGTH.DATABASE_NAME).regex(z.DATABASE_NAME,d.DATABASE_NAME);function Bs(e,t=z.IDENTIFIER,n=d.IDENTIFIER){return s.string().min(2,d.IDENTIFIER_MIN_LENGTH).max(50,e).regex(t,n).refine(i=>!i.endsWith("-"),{message:d.IDENTIFIER_NO_TRAILING_HYPHEN}).refine(i=>!i.includes("--"),{message:d.IDENTIFIER_NO_CONSECUTIVE_HYPHENS})}Bi(Bs,"identifierSchema");var le=Bs(d.MAX_LENGTH.APP_NAME),Rj=Bs(d.MAX_LENGTH.APP_NAME,z.NEW_APP_NAME,d.NEW_APP_NAME),Sr=s.number().int(d.PORT.INTEGER).min(c_,d.PORT.MIN).max(u_,d.PORT.MAX),be=s.object({key:s.string(),sourceText:s.string()}).strict(),_P=s.object({__identifier:s.string()}).strict(),EP=s.object({__expression:s.string()}).strict(),AP=s.object({__call:s.string()}).strict(),xP=s.union([_P,EP,AP]),$P=s.union([s.string(),s.number(),s.boolean(),xP]),Tn=s.record(s.string().regex(z.ENV_VAR_NAME,d.ENV_VAR_NAME),$P),IP=s.object({id:s.string(),name:s.string().optional(),arn:s.string().optional(),field:s.string().optional()}).strict().refine(e=>e.name!==void 0!=(e.arn!==void 0),{message:"secretsImport requires exactly one of `name` or `arn`."}),b_=s.record(s.string(),IP),Nj=s.record(s.string(),s.unknown()),Hf=s.enum(Li).describe(`Application type must be one of: ${Li.join(", ")}`),Xf=s.enum(ft).describe(`OpenNext deployment pattern: ${ft.join(", ")}`),TP=s.enum(["before-imports","after-imports","after-app-init","after-tags","after-resource","end-of-file"]),RP=s.enum(["import","app-init","tags","database","compute","storage","network","messaging","cdn","pattern","vpc-peer","vpc-peer-accepter","cross-plan-connection","custom"]),S_=s.object({sourceText:s.string(),position:TP,afterManagedResource:s.object({type:RP,name:s.string().optional()}).strict().optional(),originalLine:s.number().int().optional(),leadingComments:s.array(s.string()).optional(),orphaned:s.boolean().optional(),orphanedComment:s.string().optional()}).strict(),__=s.union([s.object({tier:s.enum(at)}).strict(),s.literal(!1)]),E_=s.union([s.object({instanceType:s.string().optional()}).strict(),s.literal(!1)]),NP=Bs(d.MAX_LENGTH.ORGANISATION_NAME),PP=s.string().regex(z.EMAIL,d.EMAIL),v_=s.string().refine(e=>Tt.includes(e),{message:d.REGION}),Pj=s.object({name:NP,email:PP,accountName:s.string().optional(),primaryRegion:v_.optional().default(Ht),secondaryRegions:s.array(v_).optional(),security:s.enum(a_).optional(),force:s.boolean().optional()}).strict();function Wi(e){return e.issues.map(t=>`${t.path.length>0?`${t.path.join(".")}: `:""}${t.message}`).join(`
+`)}Bi(Wi,"getZodErrorMessage");var Rn=s.number().min(1,d.ALARM.PERCENTAGE.MIN).max(100,d.ALARM.PERCENTAGE.MAX),kP=s.number().min(1,d.ALARM.FREE_STORAGE_GIB.MIN),A_=s.union([s.literal(!1),s.object({cpuThreshold:Rn.optional(),memoryThreshold:Rn.optional(),runningTasksMinimum:s.number().int().min(0).optional(),http5xxThreshold:Rn.optional()}).strict()]),x_=s.union([s.literal(!1),s.object({cpuThreshold:Rn.optional(),freeStorageThresholdGiB:kP.optional(),connectionsThreshold:s.number().int().min(1).optional()}).strict()]),$_=s.union([s.literal(!1),s.object({errorRateThreshold:Rn.optional(),durationThresholdPercent:Rn.optional()}).strict()]);var Nt=s.number().int(d.BACKUP_RETENTION.INTEGER).min(1,d.BACKUP_RETENTION.MIN).max(35,d.BACKUP_RETENTION.MAX),Ki=s.number().int(d.MONITORING_INTERVAL.INTEGER).refine(e=>Ye(s_,e),{message:d.MONITORING_INTERVAL.VALUES}),Ws=s.number().int(d.DATABASE.PORT.INTEGER).min(1024,d.DATABASE.PORT.MIN).max(65535,d.DATABASE.PORT.MAX),CP=s.enum(Ds).describe(`Database type must be one of: ${Ds.join(", ")}`),OP=s.object({maxConnections:s.number().int(d.MAX_CONNECTIONS.INTEGER).min(1,d.MAX_CONNECTIONS.MIN).max(100,d.MAX_CONNECTIONS.MAX).optional(),maxIdleConnections:s.number().int(d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.INTEGER).min(0,d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MIN).max(100,d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MAX).optional(),connectionBorrowTimeout:s.number().int(d.PROXY_CONFIG.BORROW_TIMEOUT.INTEGER).min(1,d.PROXY_CONFIG.BORROW_TIMEOUT.MIN).max(3600,d.PROXY_CONFIG.BORROW_TIMEOUT.MAX).optional(),requireTLS:s.boolean().optional()}).strict().describe("RDS Proxy configuration"),DP=s.object({instanceType:s.string().optional(),availabilityZone:s.string().optional()}).strict().describe("Read replica configuration"),wP=s.object({automaticallyAfterDays:s.number().int(d.ROTATION.INTEGER).min(1,d.ROTATION.MIN).max(365,d.ROTATION.MAX).optional()}).strict().describe("Secret rotation configuration"),Ks=s.object({username:s.string().min(1,d.REQUIRED.USERNAME).max(63,d.USERNAME.MAX_LENGTH).optional(),secretRotation:wP.optional()}).strict().describe("Database credentials configuration"),Hs=De(OP),Xs=De(DP),zP=s.object({scaleWithWriter:s.boolean().optional(),enableDatabaseInsights:s.boolean().optional(),identifierSuffix:s.string().min(1,d.IDENTIFIER_SUFFIX.REQUIRED).max(50,d.IDENTIFIER_SUFFIX.MAX_LENGTH).optional(),availabilityZone:s.string().optional()}).strict().describe("Configuration for a single Aurora reader instance"),Hi=s.object({enableDatabaseInsights:s.boolean().optional(),identifierSuffix:s.string().min(1,d.IDENTIFIER_SUFFIX.REQUIRED).max(50,d.IDENTIFIER_SUFFIX.MAX_LENGTH).optional(),availabilityZone:s.string().optional()}).strict().describe("Configuration for Aurora writer instance"),MP=s.object({count:s.number().int(d.READER.COUNT.INTEGER).min(0,d.READER.COUNT.MIN).max(15,d.READER.COUNT.MAX).optional(),instances:s.array(zP).max(15,d.READER_INSTANCES.MAX).optional(),defaultEnableDatabaseInsights:s.boolean().optional()}).strict().refine(e=>!(e.count!==void 0&&e.instances!==void 0),{message:d.READER_INSTANCES.COUNT_OR_INSTANCES,path:["count"]}).describe("Aurora readers configuration"),Xi=De(MP),jP=s.object({awsManaged:s.literal(!0)}).strict(),UP=s.object({useCMK:s.literal(!0)}).strict(),I_=s.union([jP,UP]),LP=s.object({mode:s.enum(["standard","advanced"]).optional(),encryptionKey:I_.optional()}).strict().describe("Database Insights configuration"),Ys=De(LP),Js=s.object({storageKey:I_.optional()}).strict().describe("Encryption configuration (DESTRUCTIVE to change storageKey)"),T_=s.object({name:U,type:CP,databaseName:s.string().min(1,d.REQUIRED.DATABASE_NAME),instanceType:s.string().optional(),allocatedStorage:s.number().optional(),multiAz:s.boolean().optional(),publiclyAccessible:s.boolean().optional(),databaseInsights:Ys.optional(),port:Ws.optional(),deletionProtection:s.boolean().optional(),proxy:Hs.optional(),credentials:Ks.optional(),readReplica:Xs.optional(),encryption:Js.optional(),writer:Hi.optional(),readers:Xi.optional(),backupRetention:Nt.optional(),preferredMaintenanceWindow:s.string().optional(),monitoringInterval:Ki.optional(),primaryRegion:s.string().optional(),secondaryRegions:s.array(s.string()).optional(),globalClusterIdentifier:s.string().optional(),enableGlobalWriteForwarding:s.boolean().optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional(),databaseEngine:s.enum(xn).optional(),engineExpression:s.string().optional(),variableName:s.string().optional(),extraProperties:s.array(be).optional(),alarms:x_.optional()}).strict(),qs=s.object({appName:le,nameProvidedByFlag:s.boolean().optional(),databaseName:s.string().min(1,d.REQUIRED.DATABASE_NAME).max(63,d.MAX_LENGTH.DATABASE_NAME).regex(z.DATABASE_NAME,d.DATABASE_NAME),resourceName:U.optional(),connectionConfig:s.object({connectToCompute:s.array(s.string()).optional(),connectToServices:s.array(s.string()).optional()}).strict().optional(),databaseInsights:Ys.optional(),port:Ws.optional(),proxy:Hs.optional(),credentials:Ks.optional(),encryption:Js.optional(),deletionProtection:s.boolean().optional()}).strict(),R_={databaseType:s.literal("Instance"),instanceType:s.string().optional(),multiAz:s.boolean().optional(),readReplica:Xs.optional(),publiclyAccessible:s.boolean().optional(),backupRetention:Nt.optional(),allocatedStorage:s.number().optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()},N_={databaseType:s.literal("Aurora"),writer:Hi.optional(),readers:Xi.optional(),backupRetention:Nt.optional(),preferredMaintenanceWindow:s.string().optional(),monitoringInterval:Ki.optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()},P_={databaseType:s.literal("GlobalAurora"),primaryRegion:s.string().min(1,d.GLOBAL_AURORA.PRIMARY_REGION_REQUIRED),secondaryRegions:s.array(s.string()).optional(),globalClusterIdentifier:s.string().optional(),enableGlobalWriteForwarding:s.boolean().optional(),writer:Hi.optional(),readers:Xi.optional(),backupRetention:Nt.optional(),preferredMaintenanceWindow:s.string().optional(),monitoringInterval:Ki.optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()},k_=s.object({appName:le,nameProvidedByFlag:s.boolean().optional(),databaseName:s.string().min(1,d.REQUIRED.DATABASE_NAME).max(63,d.MAX_LENGTH.DATABASE_NAME).regex(z.DATABASE_NAME,d.DATABASE_NAME),resourceName:U.optional(),connectionConfig:s.object({connectToCompute:s.array(s.string()).optional(),connectToServices:s.array(s.string()).optional()}).strict().optional()}).strict(),C_={databaseType:s.literal("ClickHouse"),instanceType:s.string().optional(),coldTier:s.union([s.object({mode:s.literal("s3")}).strict(),s.literal(!1)]).optional(),optimiseSchedule:s.union([s.string(),s.literal(!1)]).optional(),backupSchedule:s.union([s.string(),s.literal(!1)]).optional(),backupRetentionDays:Nt.optional()},FP=qs.extend(R_).strict(),ZP=qs.extend(N_).strict(),VP=qs.extend(P_).strict(),BP=k_.extend(C_).strict(),Lj=s.discriminatedUnion("databaseType",[FP,ZP,VP,BP]),Yf=qs.extend({resourceName:U}).strict(),GP=Yf.extend(R_).strict(),WP=Yf.extend(N_).strict(),KP=Yf.extend(P_).strict(),HP=k_.extend({resourceName:U}).strict(),XP=HP.extend(C_).strict(),Fj=s.discriminatedUnion("databaseType",[GP,WP,KP,XP]),Zj=s.object({appName:le,databaseName:s.string().min(1,d.REQUIRED.DATABASE_NAME),maxConnections:s.number().int(d.MAX_CONNECTIONS.INTEGER).min(1,d.MAX_CONNECTIONS.MIN).max(100,d.MAX_CONNECTIONS.MAX).optional(),maxIdleConnections:s.number().int(d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.INTEGER).min(0,d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MIN).max(100,d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MAX).optional(),connectionBorrowTimeout:s.number().int(d.PROXY_CONFIG.BORROW_TIMEOUT.INTEGER).min(1,d.PROXY_CONFIG.BORROW_TIMEOUT.MIN).max(3600,d.PROXY_CONFIG.BORROW_TIMEOUT.MAX).optional(),requireTLS:s.boolean().optional(),nameProvidedByFlag:s.boolean().optional()}).strict(),YP=["S","N","B"],Gs=s.object({name:s.string(),type:s.enum(YP)}).strict(),O_=s.object({name:U,partitionKey:Gs,sortKey:Gs.optional(),globalSecondaryIndexes:s.array(s.object({indexName:s.string(),partitionKey:Gs,sortKey:Gs.optional()}).strict()).optional(),ttlAttribute:s.string().optional(),stream:s.boolean().optional(),variableName:s.string().optional(),extraProperties:s.array(be).optional()}).strict(),JP=s.object({mode:s.literal("s3")}).strict(),D_=s.object({name:U,type:s.literal("ClickHouse"),databaseName:y_,instanceType:s.string().optional(),coldTier:s.union([JP,s.literal(!1)]).optional(),optimiseSchedule:s.union([s.string(),s.literal(!1)]).optional(),backupSchedule:s.union([s.string(),s.literal(!1)]).optional(),backupRetentionDays:Nt.optional(),variableName:s.string().optional(),extraProperties:s.array(be).optional()}).strict();var qP=s.object({count:s.number().int(d.NAT_GATEWAY.INTEGER).min(0,d.NAT_GATEWAY.MIN).max(3,d.NAT_GATEWAY.MAX).optional()}).strict().describe("NAT gateway configuration"),w_=De(qP),Jf=s.enum(["cloudwatch","s3"]),QP=s.object({destination:Jf.optional(),retentionDays:s.number().int(d.RETENTION_DAYS.INTEGER).min(1,d.RETENTION_DAYS.MIN).max(365,d.RETENTION_DAYS.MAX).optional(),trafficType:s.enum(["ALL","ACCEPT","REJECT"]).optional()}).strict().describe("VPC flow log configuration"),z_=De(QP),ek=s.object({s3:s.boolean().optional(),dynamodb:s.boolean().optional()}).strict().describe("Gateway VPC endpoints (FREE)"),tk=De(ek),rk=s.object({ecr:s.boolean().optional(),secretsManager:s.boolean().optional(),kms:s.boolean().optional(),cloudwatchLogs:s.boolean().optional(),ssm:s.boolean().optional(),sts:s.boolean().optional()}).strict().describe("Interface VPC endpoints (cost per hour)"),nk=De(rk),ik=s.object({gateway:tk.optional(),interface:nk.optional()}).strict().describe("VPC endpoints configuration"),M_=De(ik),Qs=s.object({maxAzs:s.number().int(d.MAX_AZS.INTEGER).min(1,d.MAX_AZS.MIN).max(3,d.MAX_AZS.MAX).optional(),natGateways:w_.optional(),flowLogs:z_.optional(),vpcEndpoints:M_.optional(),cidrMask:s.number().int(d.CIDR_MASK.INTEGER).min(16,d.CIDR_MASK.MIN).max(28,d.CIDR_MASK.MAX).optional()}).strict(),j_=s.string().min(1,d.REQUIRED.NETWORK_NAME).max(50,d.MAX_LENGTH.NETWORK_NAME).regex(z.RESOURCE_NAME,d.RESOURCE_NAME),U_=Qs.extend({name:j_}).strict(),L_=De(Qs),Kj=s.object({appName:le,networkName:j_.optional(),maxAzs:s.number().int(d.MAX_AZS.INTEGER).min(1,d.MAX_AZS.MIN).max(3,d.MAX_AZS.MAX).optional(),natGateways:w_.optional(),flowLogs:z_.optional(),vpcEndpoints:M_.optional()}).strict(),ok=z.CIDR,qf=s.string().regex(ok,d.CIDR),ak=s.object({kind:s.literal("database"),resource:s.string().min(1,d.REQUIRED.RESOURCE_REFERENCE),name:U,allowedFromCidrs:s.array(qf),access:s.enum(["read","write","readWrite"]).optional()}).strict(),sk=s.object({kind:s.literal("ecsService"),resource:s.string().min(1,d.REQUIRED.RESOURCE_REFERENCE),serviceName:s.string().min(1,d.REQUIRED.SERVICE_NAME),name:U,allowedFromCidrs:s.array(qf),port:Sr.optional()}).strict(),ck=s.discriminatedUnion("kind",[ak,sk]),Hj=s.object({name:U,peerAppName:s.string().min(1,d.REQUIRED.APP_NAME),peerAccountId:s.string().regex(z.AWS_ACCOUNT_ID,d.AWS_ACCOUNT_ID),peerRegion:s.string().min(1,d.VPC_PEER.REGION_REQUIRED).optional(),peerVpcId:s.string().regex(z.VPC_ID,d.VPC_ID).optional(),peerVpcCidr:qf.optional(),peerRoleArn:s.string().regex(z.ROLE_ARN,d.ROLE_ARN).optional(),peerRouteTableIds:s.array(s.string().min(1,d.VPC_PEER.ROUTE_TABLE_ID_REQUIRED)).optional(),localVpcName:s.string().min(1,d.REQUIRED.NETWORK_NAME).optional(),enableDnsResolution:s.boolean().optional()}).strict(),Xj=s.object({name:U,requesterAccountIds:s.array(s.string().regex(z.AWS_ACCOUNT_ID,d.AWS_ACCOUNT_ID)).min(1,d.VPC_PEER.MIN_REQUESTER_ACCOUNTS),localVpcName:s.string().min(1,d.REQUIRED.NETWORK_NAME).optional(),publishToSsm:s.boolean().optional(),exposedResources:s.array(ck).optional()}).strict();var ec=["storage","cdn","compute"],uk=s.object({sid:s.string().optional(),effect:s.enum(["Allow","Deny"]),principals:s.array(s.string()),actions:s.array(s.string()),resources:s.array(s.string()).optional(),conditions:s.record(s.string(),s.record(s.string(),s.union([s.string(),s.array(s.string())]))).optional()}).strict(),F_=s.object({name:U,bucketName:s.string().optional(),publicReadAccess:s.boolean().optional(),websiteHosting:s.object({indexDocument:s.string(),errorDocument:s.string().optional()}).strict().optional(),backupVaultTier:s.enum(at).optional(),versioned:s.boolean().optional(),encryption:s.enum(In).optional(),kmsKeyArn:s.string().optional(),cors:s.array(s.object({allowedOrigins:s.array(s.string()),allowedMethods:s.array(s.string()),allowedHeaders:s.array(s.string()).optional(),exposedHeaders:s.array(s.string()).optional(),maxAge:s.number().optional()}).strict()).optional(),deployment:s.object({source:s.string(),prune:s.boolean().optional(),cacheControl:s.object({maxAge:s.number().optional(),immutable:s.boolean().optional()}).strict().optional()}).strict().optional(),retain:s.boolean().optional(),resourcePolicyStatements:s.array(uk).optional(),stackPlacement:s.enum(ec).optional(),variableName:s.string().optional(),extraProperties:s.array(be).optional()}).strict().refine(e=>e.encryption!=="KMS"||!!e.kmsKeyArn,{message:d.KMS.KEY_REQUIRED}),tU=s.object({appName:le,bucketName:h_,nameProvidedByFlag:s.boolean().optional(),storagePreset:s.enum(g_).optional(),publicReadAccess:s.boolean().optional(),websiteHosting:s.object({indexDocument:s.string(),errorDocument:s.string().optional()}).strict().optional(),backupVaultTier:s.enum(at).optional(),versioned:s.boolean().optional(),encryption:s.enum(In).optional(),kmsKeyArn:s.string().optional(),cors:s.array(s.object({allowedOrigins:s.array(s.string()),allowedMethods:s.array(s.string()),allowedHeaders:s.array(s.string()).optional(),exposedHeaders:s.array(s.string()).optional(),maxAge:s.number().optional()}).strict()).optional(),connectionConfig:s.object({connectToCompute:s.array(s.string()).optional(),connectToServices:s.array(s.string()).optional()}).strict().optional()}).strict().refine(e=>e.encryption!=="KMS"||!!e.kmsKeyArn,{message:d.KMS.KEY_REQUIRED,path:["kmsKeyArn"]});var Qf=s.enum(["DESTROY","RETAIN"]),Z_=s.object({name:U,queueType:s.enum(["standard","fifo"]).default("standard"),visibilityTimeout:s.number().int(d.SQS.VISIBILITY_TIMEOUT.INTEGER).min(0,d.SQS.VISIBILITY_TIMEOUT.MIN).max(43200,d.SQS.VISIBILITY_TIMEOUT.MAX).optional(),retentionPeriod:s.number().int(d.SQS.RETENTION_PERIOD.INTEGER).min(60,d.SQS.RETENTION_PERIOD.MIN).max(1209600,d.SQS.RETENTION_PERIOD.MAX).optional(),contentBasedDeduplication:s.boolean().optional(),removalPolicy:Qf.optional(),variableName:s.string().optional(),extraProperties:s.array(be).optional()}).strict();var V_=s.object({type:s.literal("basic-auth"),username:s.string().min(1),password:s.string().min(1)}).strict(),B_=s.object({name:U,defaultOriginRef:s.string(),behaviours:s.array(s.object({pathPattern:s.string(),originRef:s.string(),cachePolicy:s.enum(["CACHING_OPTIMIZED","CACHING_DISABLED"]).optional()}).strict()).optional(),customDomain:s.string().optional(),certificateArn:s.string().optional(),accessGate:s.union([s.literal(!1),V_]).optional(),extraProperties:s.array(be).optional()}).strict(),uU=s.object({appName:s.string(),name:U.optional(),defaultOriginRef:s.string(),behaviours:s.array(s.object({pathPattern:s.string(),originRef:s.string(),cachePolicy:s.enum(["CACHING_OPTIMIZED","CACHING_DISABLED"]).optional()}).strict()).optional(),customDomain:s.string().optional(),certificateArn:s.string().optional(),accessGate:s.union([s.literal(!1),V_]).optional(),nameProvidedByFlag:s.boolean().optional()}).strict();var lk=Object.defineProperty,eg=(e,t)=>lk(e,"name",{value:t,configurable:!0}),dk=new Set(["t4g","c6g","c6gd","c6gn","c7g","c7gd","c7gn","r6g","r6gd","r7g","r7gd","m6g","m6gd","m7g","m7gd","a1","x2gd","im4gn","is4gen","i4g","hpc7g"]);function Nn(e){let t=e.split(".")[0]??"";return dk.has(t)?"ARM":"STANDARD"}eg(Nn,"getArchitectureForInstanceType");function tc(e,t){let n=Nn(e);return n!==t?{valid:!1,message:`Instance type '${e}' requires ${n} architecture, but '${t}' AMI was specified. Use a ${n==="ARM"?"Graviton instance (t4g, c6g, r6g, m6g, etc.)":"Intel/AMD instance (t3, c5, r5, m5, etc.)"} instead.`}:{valid:!0}}eg(tc,"validateArchitectureMatch");function G_(e,t){return Nn(e)===t}eg(G_,"isArchitectureCompatible");var mk=Object.defineProperty,rc=(e,t)=>mk(e,"name",{value:t,configurable:!0});var pk=1,fk=/^[A-Za-z0-9_.-]+$/,gk=s.object({id:s.string().min(1,"buildSecret id cannot be empty").regex(fk,"buildSecret id may contain only letters, digits, '_', '.', and '-' (no comma, '=', or whitespace, which would break the buildx --secret argv)"),ssm:s.string().min(1,"ssm parameter name cannot be empty").optional(),secretsManager:s.object({name:s.string().min(1,"secret name cannot be empty").optional(),arn:s.string().min(1,"secret arn cannot be empty").optional(),field:s.string().min(1,"secret field cannot be empty").optional()}).strict().refine(e=>e.name===void 0!=(e.arn===void 0),"secretsManager requires exactly one of name or arn").optional(),env:s.string().min(1,"env variable name cannot be empty").optional()}).strict().superRefine((e,t)=>{[e.ssm,e.secretsManager,e.env].filter(n=>n!==void 0).length!==1&&t.addIssue({code:s.ZodIssueCode.custom,message:"buildSecret requires exactly one source (ssm, secretsManager, or env)"})}),vk=s.union([s.string(),s.object({ssm:s.string().min(1,"ssm parameter name cannot be empty").optional(),secretsManager:s.object({name:s.string().min(1,"secret name cannot be empty").optional(),arn:s.string().min(1,"secret arn cannot be empty").optional(),field:s.string().min(1,"secret field cannot be empty").optional()}).strict().refine(e=>e.name===void 0!=(e.arn===void 0),"secretsManager requires exactly one of name or arn").optional(),env:s.string().min(1,"env variable name cannot be empty").optional(),acknowledgePublic:s.boolean().optional()}).strict().superRefine((e,t)=>{[e.ssm,e.secretsManager,e.env].filter(n=>n!==void 0).length!==1&&t.addIssue({code:s.ZodIssueCode.custom,message:"buildArg value requires exactly one source (ssm, secretsManager, or env)"})})]),gt=s.object({path:s.string(),context:s.string().min(1,"context cannot be empty").optional(),target:s.string().min(1,"target cannot be empty").optional(),buildArgs:s.record(s.string(),vk).optional(),buildSecrets:s.array(gk).optional()}).strict(),fU=gt.partial();function hk(e,t){if(t===void 0)return e;let n=t.context??e.context,i=t.target??e.target,r=t.buildArgs??e.buildArgs,o=t.buildSecrets??e.buildSecrets;return{path:t.path??e.path,...n!==void 0&&{context:n},...i!==void 0&&{target:i},...r!==void 0&&{buildArgs:r},...o!==void 0&&{buildSecrets:o}}}rc(hk,"mergeDockerBuild");function tg(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}rc(tg,"isRecord");function W_(e){if(!tg(e)||typeof e.path!="string"||e.path.length===0)return;let t=typeof e.context=="string"&&e.context.length>0?e.context:void 0,n=typeof e.target=="string"&&e.target.length>0?e.target:void 0,i=tg(e.buildArgs)&&Object.keys(e.buildArgs).length>0?e.buildArgs:void 0,r=Array.isArray(e.buildSecrets)&&e.buildSecrets.length>0?e.buildSecrets:void 0,o={path:e.path,...t!==void 0&&{context:t},...n!==void 0&&{target:n},...i!==void 0&&{buildArgs:i},...r!==void 0&&{buildSecrets:r}},a=gt.safeParse(o);return a.success?a.data:void 0}rc(W_,"normaliseDockerBuild");function yk(e){if(e===void 0)return;let t=W_(e);return t===void 0?void 0:JSON.stringify(t)}rc(yk,"dockerBuildFingerprint");var bk=s.object({name:s.string(),clusterName:s.string().optional(),docker:gt.optional(),containerPort:s.number().optional(),secrets:s.array(s.string()).optional(),ssmSecretsPath:s.string().optional(),importedSecretNames:s.array(s.string()).optional()}).strict(),Sk=s.object({type:s.enum(ft),name:s.string(),source:s.string()}).strict(),_k=s.object({repositoryName:s.string()}).strict(),Ek=s.object({name:s.string(),secrets:s.array(s.string()).optional(),ssmSecretsPath:s.string().optional(),importedSecretNames:s.array(s.string()).optional(),docker:gt.optional(),imageKey:s.string().optional()}).strict(),Ak=s.object({templateHash:s.string(),synthTimestamp:s.string()}).strict(),xk=s.object({constructPath:s.string().max(512),group:s.string().max(128),resourceType:s.string().max(256)}).strict(),gU=s.object({version:s.literal(pk),generatedAt:s.string(),appName:s.string(),services:s.array(bk),lambdas:s.array(Ek),pattern:Sk.optional(),ecr:_k.optional(),stacks:s.record(s.string(),Ak),resourceMap:s.record(s.string(),xk).optional()}).strict();var $k=Object.defineProperty,Ik=(e,t)=>$k(e,"name",{value:t,configurable:!0});function H_(e){return!(e.image!==void 0&&e.docker!==void 0)}Ik(H_,"imageDockerMutexCheck");var X_=s.number().int(d.CAPACITY.MIN.INTEGER).min(Wf,d.GENERATOR_CAPACITY.MIN.MIN).max(Kf,d.GENERATOR_CAPACITY.MIN.MAX),Y_=s.number().int(d.CAPACITY.MAX.INTEGER).min(Wf,d.GENERATOR_CAPACITY.MAX.MIN).max(Kf,d.GENERATOR_CAPACITY.MAX.MAX),Pn=s.number().int(d.LAMBDA.MEMORY.INTEGER).min(l_,d.LAMBDA.MEMORY.MIN).max(d_,d.LAMBDA.MEMORY.MAX).refine(e=>e===128||e%64===0,d.LAMBDA.MEMORY.MULTIPLE),J_=s.string().regex(z.LAMBDA_RUNTIME_IDENTIFIER,d.LAMBDA.RUNTIME),rg=s.number().int(d.CPU.INTEGER).min(256,d.CPU.MIN).max(4096,d.CPU.MAX),ic=s.number().int(d.CAPACITY.DESIRED.INTEGER).min(0,d.CAPACITY.DESIRED.MIN).max($n,d.CAPACITY.DESIRED.MAX),Yi=s.object({connectToDatabase:s.array(s.string()).optional()}).strict(),Tk=s.object({minSize:s.number().int(d.CAPACITY.WARM_POOL.MIN_SIZE.INTEGER).min(0,d.CAPACITY.WARM_POOL.MIN_SIZE.MIN).max(m_,d.CAPACITY.WARM_POOL.MIN_SIZE.MAX).optional(),reuseOnScaleIn:s.boolean().optional()}).strict(),ng=s.object({instanceType:s.string().optional(),amiHardwareType:s.enum(Ls).optional(),minCapacity:s.number().int(d.CAPACITY.MIN.INTEGER).min(0,d.CAPACITY.MIN.MIN_0).max($n,d.CAPACITY.MIN.MAX).optional(),maxCapacity:s.number().int(d.CAPACITY.MAX.INTEGER).min(1,d.CAPACITY.MAX.MIN_1).max($n,d.CAPACITY.MAX.MAX).optional(),memoryLimitMiB:Gi(128).optional(),warmPool:Tk.optional(),extraProperties:s.array(be).optional()}).strict().superRefine((e,t)=>{if(!e.instanceType||!e.amiHardwareType)return;let n=tc(e.instanceType,e.amiHardwareType);n.valid||t.addIssue({code:"custom",message:n.message??d.ARCHITECTURE_MISMATCH,path:["instanceType"]})}).superRefine((e,t)=>{e.minCapacity===0&&!e.warmPool&&t.addIssue({code:"custom",message:d.CAPACITY.WARM_POOL_REQUIRED,path:["minCapacity"]}),e.warmPool?.minSize!==void 0&&e.maxCapacity!==void 0&&e.warmPool.minSize>e.maxCapacity&&t.addIssue({code:"custom",message:d.CAPACITY.WARM_POOL.MIN_SIZE_EXCEEDS_MAX_CAPACITY,path:["warmPool","minSize"]})}),Rk=s.enum(Fi).describe(`Compute type must be one of: ${Fi.join(", ")}`),ig=s.enum(En).describe(`ECS capacity provider must be one of: ${En.join(", ")}`),og=s.string().refine(e=>Ye(Fs,e),{message:d.INSTANCE_TYPE}),q_=s.object({sourceType:s.enum(["sqs","dynamodb","eventbridge"]),sourceRef:s.string().describe("Name of the source resource"),batchSize:s.number().int(d.BATCH_SIZE.INTEGER).min(1,d.BATCH_SIZE.MIN).max(1e4,d.BATCH_SIZE.MAX).optional(),startingPosition:s.enum(["TRIM_HORIZON","LATEST"]).optional(),maxBatchingWindow:s.number().int(d.BATCHING_WINDOW.INTEGER).min(0,d.BATCHING_WINDOW.MIN).max(300,d.BATCHING_WINDOW.MAX).optional(),reportBatchItemFailures:s.boolean().optional()}).strict(),Nk=s.object({name:s.string().min(1,d.REQUIRED.CONTAINER_NAME).optional(),image:s.string().optional(),port:Sr.optional(),environment:Tn.optional(),secretsImport:b_.optional(),command:s.array(s.string()).optional(),entryPoint:s.array(s.string()).optional(),essential:s.boolean().optional(),healthCheck:s.object({command:s.array(s.string()),interval:s.number().int(d.HEALTH_CHECK.INTERVAL.INTEGER).min(5,d.HEALTH_CHECK.INTERVAL.MIN).max(300,d.HEALTH_CHECK.INTERVAL.MAX).optional(),timeout:s.number().int(d.HEALTH_CHECK.TIMEOUT.INTEGER).min(2,d.HEALTH_CHECK.TIMEOUT.MIN).max(60,d.HEALTH_CHECK.TIMEOUT.MAX).optional(),retries:s.number().int(d.HEALTH_CHECK.RETRIES.INTEGER).min(1,d.HEALTH_CHECK.RETRIES.MIN).max(10,d.HEALTH_CHECK.RETRIES.MAX).optional(),startPeriod:s.number().int(d.HEALTH_CHECK.START_PERIOD.INTEGER).min(0,d.HEALTH_CHECK.START_PERIOD.MIN).max(300,d.HEALTH_CHECK.START_PERIOD.MAX).optional()}).strict().optional(),ssmSecrets:s.array(s.string().regex(z.SECRET_NAME,d.SECRET_NAME)).optional(),extraProperties:s.array(be).optional()}).strict(),Q_=s.string().min(1,d.REQUIRED.SERVICE_NAME).max(255,d.MAX_LENGTH.SERVICE_NAME).regex(z.ECS_SERVICE_NAME,d.ECS_SERVICE_NAME),eE=s.object({domain:s.string().optional(),loadBalancer:s.union([s.literal(!1),s.enum(js)]).optional(),directAccess:s.boolean().optional(),extraProperties:s.array(be).optional()}).strict().refine(e=>!(e.directAccess&&e.domain),{message:d.DIRECT_ACCESS.NO_DOMAIN,path:["directAccess"]}).refine(e=>!(e.directAccess&&typeof e.loadBalancer=="string"),{message:d.DIRECT_ACCESS.NO_LOAD_BALANCER}).describe("Cluster-level configuration"),nc=s.object({path:s.string().optional(),host:s.string().optional(),priority:s.number().int(d.PRIORITY.INTEGER).min(1,d.PRIORITY.MIN).max(5e4,d.PRIORITY.MAX).optional(),healthCheckPath:s.string().optional()}).strict().describe("Path/host-based routing configuration"),Pk=s.object({desiredCount:ic.optional(),minCapacity:s.number().int(d.CAPACITY.MIN.INTEGER).min(0,d.CAPACITY.MIN.MIN_0).max($n,d.CAPACITY.MIN.MAX).optional(),maxCapacity:s.number().int(d.CAPACITY.MAX.INTEGER).min(1,d.CAPACITY.MAX.MIN_1).max($n,d.CAPACITY.MAX.MAX).optional(),scalingType:s.enum(Us).optional()}).strict().refine(br.check,br.params).describe("ECS service scaling configuration"),tE=s.object({name:Q_,docker:gt.optional(),needsDatabaseConnection:s.boolean().optional(),needsStorageConnection:s.boolean().optional(),needsMessagingConnection:s.boolean().optional(),image:s.string().optional(),containers:s.array(Nk).optional(),routing:s.union([nc,s.array(nc).min(1)]).optional(),cpu:rg.optional(),memoryLimitMiB:Gi(512).optional(),desiredCount:ic.optional(),scaling:De(Pk).optional(),capacityProvider:ig,ec2Config:ng.optional(),ssmSecretsPath:s.string().regex(z.SSM_PATH,d.SSM_PATH).optional(),extraProperties:s.array(be).optional(),alarms:A_.optional()}).strict().superRefine((e,t)=>{H_(e)||t.addIssue({code:"custom",path:["docker"],message:d.IMAGE_DOCKER_MUTEX})}).describe("Configuration for a service in an ECS cluster"),rE=s.object({name:U,type:Rk,needsConnection:s.boolean(),connectedDatabase:s.array(s.string()).optional(),connectedStorage:s.array(s.string()).optional(),connectedMessaging:s.array(s.string()).optional(),cluster:eE.optional(),services:s.array(tE).optional(),docker:gt.partial().optional(),deployment:s.enum(zs).optional(),codePath:s.string().optional(),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(Zs,d.LAMBDA.TIMEOUT.MIN).max(Vs,d.LAMBDA.TIMEOUT.MAX).optional(),memory:Pn.optional(),handler:s.string().optional(),runtime:J_.optional(),environment:Tn.optional(),secrets:Tn.optional(),eventSources:s.array(q_).optional(),functionUrl:s.object({authType:s.enum(Vi)}).strict().optional(),description:s.string().optional(),scheduleExpression:s.string().optional(),architecture:s.enum(Ms).optional(),ephemeralStorageSize:s.number().int(d.EPHEMERAL_STORAGE.INTEGER).min(512,d.EPHEMERAL_STORAGE.MIN).max(10240,d.EPHEMERAL_STORAGE.MAX).optional(),functionName:s.string().optional(),ssmSecrets:s.array(s.string()).optional(),ssmSecretsPath:s.string().optional(),alarms:$_.optional(),instanceType:og.optional(),enableSSH:s.boolean().optional(),keyName:s.string().optional(),userData:s.string().optional(),securityGroups:s.array(s.string()).optional(),variableName:s.string().optional(),extraProperties:s.array(be).optional()}).strict().superRefine((e,t)=>{if(e.type==="ecs"&&e.services)for(let n=0;n<e.services.length;n++){let i=e.services[n];i?.ec2Config?.instanceType&&!i.ec2Config.amiHardwareType&&Nn(i.ec2Config.instanceType)!=="ARM"&&t.addIssue({code:"custom",message:`Service '${i.name??n}' uses instance type '${i.ec2Config.instanceType}' (x86), which requires Docker images built for linux/amd64. The default build targets linux/arm64 (Graviton). Use a Graviton instance type (t4g, c6g, r6g, m6g, etc.) or set amiHardwareType: "STANDARD" to acknowledge x86.`,path:["services",n,"ec2Config","instanceType"]})}e.type==="lambda"&&e.deployment==="container"&&e.architecture==="X86_64"&&t.addIssue({code:"custom",message:"Lambda architecture 'X86_64' requires Docker images built for linux/amd64, but the default build targets linux/arm64. Use 'ARM_64' for Graviton Lambdas (recommended) or ensure your build pipeline targets linux/amd64.",path:["architecture"]})}),xU=s.object({appName:le,clusterName:U,containerPort:Sr,nameProvidedByFlag:s.boolean().optional(),ecrRepository:s.string().optional(),capacityProvider:ig.optional(),useAppEcr:s.boolean().optional(),desiredCount:ic.optional(),cpu:rg.optional(),memoryLimitMiB:Gi(512).optional(),minCapacity:X_.optional(),maxCapacity:Y_.optional(),ec2Config:ng.optional(),connectionConfig:Yi.optional()}).strict().refine(br.check,br.params),$U=s.object({appName:le,functionName:U,nameProvidedByFlag:s.boolean().optional(),lambdaType:s.enum(["basic","web","custom"]).optional(),ecrRepository:s.string().optional(),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(Zs,d.LAMBDA.TIMEOUT.MIN).max(Vs,d.LAMBDA.TIMEOUT.MAX).optional(),memory:Pn.optional(),enableFunctionUrl:s.boolean().optional(),description:s.string().optional(),enableCors:s.boolean().optional(),corsOrigins:s.string().optional(),corsHeaders:s.string().optional(),corsMethods:s.array(s.enum(f_)).optional(),corsCredentials:s.boolean().optional(),connectionConfig:Yi.optional()}).strict(),IU=s.object({appName:le,instanceName:U,nameProvidedByFlag:s.boolean().optional(),instanceType:og.optional(),enableSSH:s.boolean().optional(),minCapacity:X_.optional(),maxCapacity:Y_.optional(),connectionConfig:Yi.optional()}).strict().refine(br.check,br.params),TU=s.object({appName:le,clusterName:U,serviceName:Q_,capacityProvider:ig,containerPort:Sr.optional(),cpu:rg.optional(),memoryLimitMiB:Gi(512).optional(),desiredCount:ic.optional(),ec2Config:ng.optional(),routing:s.union([nc,s.array(nc).min(1)]).optional(),docker:gt.partial().optional(),nameProvidedByFlag:s.boolean().optional(),connectionConfig:Yi.optional()}).strict(),ag=s.object({appName:le,computeName:U,nameProvidedByFlag:s.boolean().optional(),connectionConfig:Yi.optional()}).strict(),kk=ag.extend({type:s.literal("ecs"),cluster:eE.optional(),services:s.array(tE).min(1,d.SERVICE.MIN_REQUIRED),docker:gt.partial().optional()}).strict().refine(e=>{let t=e.services.filter(n=>n.containers?.some(i=>i.port));return t.length>1?t.every(n=>(Array.isArray(n.routing)?n.routing:n.routing?[n.routing]:[]).some(i=>i.path||i.host)):!0},{message:d.SERVICE.ROUTING_REQUIRED}).refine(e=>{let t=e.services.map(n=>n.name);return new Set(t).size===t.length},{message:d.SERVICE.UNIQUE_WITHIN_CLUSTER}),Ck=ag.extend({type:s.literal("lambda"),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(Zs,d.LAMBDA.TIMEOUT.MIN).max(Vs,d.LAMBDA.TIMEOUT.MAX).optional(),memory:Pn.optional(),handler:s.string().optional(),runtime:J_.optional(),environment:Tn.optional(),secrets:Tn.optional(),description:s.string().optional(),functionUrl:s.union([s.object({authType:s.enum(Vi).optional()}).strict(),s.literal(!1)]).optional(),eventSources:s.array(q_).optional()}).strict(),Ok=ag.extend({type:s.literal("ec2"),instanceType:og.optional(),enableSSH:s.boolean().optional(),keyName:s.string().optional(),userData:s.string().optional(),securityGroups:s.array(s.string()).optional()}).strict(),RU=s.discriminatedUnion("type",[kk,Ck,Ok]),K_=s.object({path:s.string().min(1,d.REQUIRED.ROUTING_PATH),priority:s.number().int(d.PRIORITY.INTEGER).min(1,d.PRIORITY.MIN).max(5e4,d.PRIORITY.MAX).optional()}).strict(),nE=s.object({name:s.string().min(1,d.REQUIRED.SERVICE_NAME).max(255,d.MAX_LENGTH.SERVICE_NAME).regex(z.RESOURCE_NAME,d.RESOURCE_NAME),serviceType:s.enum(["web","worker"]).optional(),docker:gt.partial().optional(),containerPort:Sr.optional(),needsDatabaseConnection:s.boolean().optional(),routing:s.union([K_,s.array(K_).min(1)]).optional()}).strict().superRefine((e,t)=>{e.serviceType==="worker"&&(e.containerPort!==void 0&&t.addIssue({code:"custom",path:["containerPort"],message:"Worker services are not reachable inbound; remove containerPort."}),e.routing!==void 0&&t.addIssue({code:"custom",path:["routing"],message:"Worker services have no ALB route; remove routing."}))}),NU=s.object({appName:le,instanceType:s.string().optional()}).strict();var sg=s.object({memorySize:Pn.optional(),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(1,d.LAMBDA.TIMEOUT.MIN).max(900,d.LAMBDA.TIMEOUT.MAX).optional(),ephemeralStorageSize:s.number().int(d.EPHEMERAL_STORAGE.INTEGER).min(512,d.EPHEMERAL_STORAGE.MIN).max(10240,d.EPHEMERAL_STORAGE.MAX).optional()}).strict(),iE=s.object({type:s.enum(Gf).optional(),databaseName:s.string().optional(),databaseEngine:s.enum(xn).optional(),deletionProtection:s.boolean().optional(),backupRetention:Nt.optional(),port:Ws.optional(),publiclyAccessible:s.boolean().optional(),allowedIpCidr:s.string().optional(),instanceType:s.string().optional(),allocatedStorage:s.number().int(d.ALLOCATED_STORAGE.INTEGER).min(20,d.ALLOCATED_STORAGE.MIN).max(65536,d.ALLOCATED_STORAGE.MAX).optional(),multiAz:s.boolean().optional(),readReplica:Xs.optional(),writer:Hi.optional(),readers:Xi.optional(),allowVpcAccess:s.boolean().optional(),monitoringInterval:Ki.optional(),preferredMaintenanceWindow:s.string().optional(),databaseInsights:Ys.optional(),proxy:Hs.optional(),credentials:Ks.optional(),encryption:Js.optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()}).strict(),oE=s.object({server:sg.optional(),imageOptimisation:sg.optional(),revalidation:sg.optional()}).strict(),cg=s.object({versioned:s.boolean().optional()}).strict(),aE=s.object({assets:cg.optional(),cache:cg.optional(),media:cg.optional()}).strict(),Dk=s.object({visibilityTimeout:s.number().int(d.SQS.VISIBILITY_TIMEOUT.INTEGER).min(0,d.SQS.VISIBILITY_TIMEOUT.MIN).max(43200,d.SQS.VISIBILITY_TIMEOUT.MAX).optional(),messageRetentionPeriod:s.number().int(d.SQS.RETENTION_PERIOD.INTEGER).min(60,d.SQS.RETENTION_PERIOD.MIN).max(1209600,d.SQS.RETENTION_PERIOD.MAX).optional(),maxMessageSize:s.number().int(d.MAX_MESSAGE_SIZE.INTEGER).min(1024,d.MAX_MESSAGE_SIZE.MIN).max(262144,d.MAX_MESSAGE_SIZE.MAX).optional(),deadLetterQueue:s.union([s.literal(!1),s.object({enabled:s.boolean().optional(),maxReceiveCount:s.number().int(d.DLQ.MAX_RECEIVE_COUNT.INTEGER).min(1,d.DLQ.MAX_RECEIVE_COUNT.MIN).max(1e3,d.DLQ.MAX_RECEIVE_COUNT.MAX).optional()}).strict()]).optional()}).strict(),sE=s.object({revalidationQueue:Dk.optional()}).strict(),cE=s.object({domainNames:s.array(s.string()).optional(),certificateArn:s.string().optional()}).strict(),uE=s.record(s.string().regex(z.ENV_VAR_NAME,d.ENV_VAR_NAME),s.string()).optional(),wk=s.object({type:s.literal("payload"),name:s.string().min(1,d.REQUIRED.PATTERN_NAME),domain:s.string().optional(),database:iE.optional(),compute:oE.optional(),storage:aE.optional(),messaging:sE.optional(),cdn:cE.optional(),environment:uE}).strict(),zk=s.object({type:s.literal("nextjs"),name:s.string().min(1,d.REQUIRED.PATTERN_NAME),domain:s.string().optional(),database:iE.optional(),compute:oE.optional(),storage:aE.optional(),messaging:sE.optional(),cdn:cE.optional(),environment:uE}).strict(),ug=s.enum(Ui),Mk=s.object({command:s.string().min(1,d.REQUIRED.BUILD_COMMAND),outputDir:s.string().min(1,d.REQUIRED.OUTPUT_DIR)}).strict(),jk=s.object({headers:s.boolean().optional(),contentSecurityPolicy:s.string().optional()}).strict(),Uk=s.object({to:s.string().min(1,d.REQUIRED.FORMS_TO).regex(z.EMAIL,d.EMAIL),from:s.string().regex(z.EMAIL,d.EMAIL).optional(),corsOrigin:s.string().regex(z.HTTP_ORIGIN,"corsOrigin must be an exact origin such as https://example.com (no path, no trailing slash)").optional(),maxConcurrency:s.number().int().min(1).max(100).optional()}).strict(),Lk=s.object({behaviours:s.array(s.unknown()).optional()}).strict(),lg=s.object({type:s.literal("staticsite"),name:s.string().min(1,d.REQUIRED.PATTERN_NAME),source:s.string().min(1,d.REQUIRED.SOURCE),build:Mk,routing:ug.optional(),security:jk.optional(),domain:s.string().optional(),forms:Uk.optional(),cdn:Lk.optional()}).strict().superRefine((e,t)=>{if(e.forms===void 0)return;let n=e.domain;if(n===void 0||n===""){t.addIssue({code:"custom",path:["domain"],message:"A domain is required when forms are enabled: SES sends only from a verified identity, and the site's domain is the identity the pattern verifies"});return}let i=e.forms.from;i!==void 0&&!ks(i,n)&&t.addIssue({code:"custom",path:["forms","from"],message:`forms.from must be an address at ${n} (the verified SES identity) \u2014 for example noreply@${n}. Use forms.to for the recipient.`})}),Ji=s.discriminatedUnion("type",[wk,zk,lg]),lE=s.enum(["lightweight","standard","resilient","custom"]),dE=s.object({type:s.enum(Gf),instanceType:s.string().optional(),backupRetention:Nt.optional(),deletionProtection:s.boolean().optional(),encryption:s.union([s.object({useCMK:s.literal(!0)}).strict(),s.literal(!1)]).optional()}).strict(),mE=s.object({memorySize:Pn.optional(),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(1,d.LAMBDA.TIMEOUT.MIN).max(900,d.LAMBDA.TIMEOUT.MAX).optional()}).strict();var pE=s.object({appName:le,type:Hf,pattern:Xf.optional(),patternConfig:Ji.optional(),owner:s.string().optional(),tags:s.record(s.string(),s.string()).optional(),vpcId:s.string().optional(),network:Qs.optional(),backup:__.optional(),tunnel:E_.optional(),additionalNetworks:s.array(U_).optional(),database:s.array(T_),s3:s.array(F_),compute:s.array(rE),dynamodb:s.array(O_).optional(),clickhouse:s.array(D_).optional(),sqs:s.array(Z_).optional(),cdn:B_.optional(),customCodeBlocks:s.array(S_).optional(),additionalManagedImports:s.array(s.object({moduleSpecifier:s.string(),namedImports:s.array(s.string()),defaultImport:s.string().optional()}).strict()).optional()}).strict(),XU=s.object({name:le,type:Hf,pattern:Xf.optional(),patternTier:lE.optional(),patternDomain:s.string().optional(),source:s.string().min(1,d.REQUIRED.SOURCE).optional(),buildCommand:s.string().min(1,d.REQUIRED.BUILD_COMMAND).optional(),outputDir:s.string().min(1,d.REQUIRED.OUTPUT_DIR).optional(),routing:ug.optional(),formsTo:s.string().min(1,d.REQUIRED.FORMS_TO).regex(z.EMAIL,d.EMAIL).optional(),corsOrigin:s.string().regex(z.HTTP_ORIGIN,"corsOrigin must be an exact origin such as https://example.com (no path, no trailing slash)").optional(),customDatabase:dE.optional(),customCompute:mE.optional(),region:s.string().optional(),owner:s.string().optional(),includeDatabase:s.boolean().optional(),databaseName:s.string().min(1,d.DATABASE.NAME.REQUIRED).max(63,d.DATABASE.NAME.MAX_LENGTH).optional(),vpcId:s.string().optional(),network:L_.optional(),services:s.array(nE).optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()}).strict().superRefine((e,t)=>{e.formsTo!==void 0&&(e.patternDomain!==void 0&&e.patternDomain!==""||t.addIssue({code:"custom",path:["patternDomain"],message:"A domain is required when forms are enabled: SES sends only from a verified identity, and the site's domain is the identity the pattern verifies"}))}),YU=s.object({name:U,localResource:s.string().min(1),remoteApp:s.string().min(1),remoteResource:s.string().min(1),permission:s.enum(["read","write","read-write"]),remoteArn:s.string().optional()}).strict();var Fk=["fjall-managed","external","external-manual"],tL=s.enum(Fk);var fE=s.object({givenName:s.string().min(1),familyName:s.string().min(1),displayName:s.string().min(1).optional(),expires:s.string().min(1).optional()}).strict(),gE=s.object({name:s.string().min(1),path:s.string().min(1).optional()}).strict(),Zk=s.union([s.object({managedPolicyArn:s.string().min(1)}).strict(),s.object({customerManagedPolicy:gE}).strict()]),Vk=s.object({managedPolicies:s.array(s.string().min(1)).optional(),inlinePolicy:s.record(s.string(),s.unknown()).optional(),customerManagedPolicies:s.array(gE).optional(),permissionsBoundary:Zk.optional(),sessionDuration:s.string().min(1).optional(),description:s.string().optional(),accounts:s.union([s.array(s.string().min(1)),s.literal("all")]).optional(),includeManagementAccount:s.boolean().optional(),groups:s.array(s.string().min(1)).optional()}).strict(),Bk=s.object({description:s.string().optional()}).strict(),oc=s.string().regex(z.EMAIL,d.EMAIL),dg={groups:s.record(s.string(),Bk).optional(),permissionSets:s.record(s.string(),Vk).optional(),memberships:s.record(s.string(),s.array(oc)).optional(),resolutionVersion:s.number().int().min(1).optional(),defaultPermissionSets:s.boolean().optional()},Gk=s.discriminatedUnion("source",[s.object({...dg,source:s.literal("fjall-managed"),users:s.record(oc,fE)}).strict(),s.object({...dg,source:s.literal("external")}).strict(),s.object({...dg,source:s.literal("external-manual"),users:s.record(oc,fE).optional()}).strict()]),rL=s.object({name:U,type:s.literal("organisation").optional(),organisationName:s.string().min(1).optional(),orgEmail:oc.optional(),accounts:s.unknown().optional(),accountIds:s.record(s.string(),s.string()).optional(),identityCentre:s.union([Gk,s.literal(!1)]).optional(),allowedRegions:s.array(s.string().min(1)).optional()}).strict();var Wk=Object.defineProperty,Kk=(e,t)=>Wk(e,"name",{value:t,configurable:!0}),Hk=[1,3,5,7,14,30,60,90,120,150,180,365,400,545,731,1827,3653],Xk=s.object({buildkiteQueue:s.string().min(1,"buildkiteQueue cannot be empty").max(100).regex(/^[a-zA-Z0-9-_]+$/,"buildkiteQueue must be alphanumeric with hyphens/underscores"),buildkiteOrgSlug:s.string().min(1,"buildkiteOrgSlug cannot be empty").max(100).regex(/^[a-z0-9-]+$/,"buildkiteOrgSlug must be a lowercase Buildkite organisation slug"),agentTokenSsmParameterName:s.string().min(2).regex(/^\//,"agentTokenSsmParameterName must be a full path (leading /)").optional(),agentTokenKmsKeyArn:s.string().min(1).optional(),fjallApiKeySsmParameterName:s.string().min(2).regex(/^\//,"fjallApiKeySsmParameterName must be a full path (leading /)").optional(),instanceType:s.string().min(1).default("c8g.xlarge"),agentVolumeSizeGib:s.number().int().min(20).max(1e3).default(250),agentMinInstances:s.number().int().min(0).default(0),agentMaxInstances:s.number().int().min(1).default(2),agentsPerInstance:s.number().int().min(1).default(1),spotCapacityPercentage:s.number().int().min(0).max(100).default(0),scaleInIdlePeriodSeconds:s.number().int().min(60).default(600),disconnectAfterUptimeSeconds:s.number().int().min(3600).default(86400),maxInstanceLifetimeDays:s.number().int().min(1).max(365).default(7),terminateInstanceAfterJob:s.boolean().default(!1),purgeBuildsOnDiskFull:s.boolean().default(!0),terminateInstanceOnDiskFull:s.boolean().default(!1),logRetentionDays:s.number().int().min(1).default(30),agentLogRetentionDays:s.literal(Hk).default(7),buildkiteAgentRelease:s.enum(["stable","beta","edge"]).default("stable"),buildkiteAgentTags:s.string().default(""),buildkiteAgentTimestampLines:s.boolean().default(!1),buildkiteAgentExperiments:s.string().default(""),buildkiteAgentTracingBackend:s.enum(["","datadog","opentelemetry"]).default(""),buildkiteAgentCancelGracePeriodSeconds:s.number().int().min(10).default(60),enableSecretsPlugin:s.boolean().default(!0),enableEcrPlugin:s.boolean().default(!1),enableDockerLoginPlugin:s.boolean().default(!1),enableDockerUserNamespaceRemap:s.boolean().default(!0),enableDockerExperimental:s.boolean().default(!1),dockerNetworkingProtocol:s.enum(["ipv4","dualstack"]).default("ipv4"),enableInstanceStorage:s.boolean().default(!1),mountTmpfsAtTmp:s.boolean().default(!0),buildkiteAgentEnableGitMirrors:s.boolean().default(!1),bootstrapScriptUrl:s.string().default(""),agentEnvFileUrl:s.string().default(""),scalerEventSchedulePeriod:s.string().min(1).default("1 minute"),scalerMinPollInterval:s.string().min(1).default("10s"),scaleOutFactor:s.string().min(1).default("1.0"),scaleOutWaitingForJobs:s.boolean().default(!1),rolePermissionsBoundaryArn:s.string().min(1).optional(),alarmSnsTopicArn:s.string().min(1).optional(),applicationId:s.string().min(1).optional(),costAllocationEnvironment:s.string().min(1).optional(),costAllocationOwner:s.string().min(1).optional()}).strict(),Yk=Xk.refine(e=>e.agentMinInstances<=e.agentMaxInstances,{message:"agentMinInstances must be <= agentMaxInstances"});function Jk(e){let t=Yk.safeParse(e);if(!t.success){let n=t.error.issues.map(i=>`  - ${i.path.join(".")||"(root)"}: ${i.message}`).join(`
 `);throw new Error(`Buildkite: invalid props:
-${n}`)}return t.data}Kk(Jk,"validateBuildkiteProps");var qk=Object.defineProperty,Qk=(e,t)=>qk(e,"name",{value:t,configurable:!0});function eC(e){return`FjallDeployBoundary${e}`}Qk(eC,"deployBoundaryName");var mg={Sid:"FjallInheritAdministratorAccess",Effect:"Allow",Action:"*",Resource:"*"},vE=[{Sid:"FjallDenyOrgAndAccountEscape",Effect:"Deny",Action:["organizations:LeaveOrganization","account:CloseAccount"],Resource:"*"},{Sid:"FjallDenyDisableAuditLogging",Effect:"Deny",Action:["cloudtrail:StopLogging"],Resource:"*"},{Sid:"FjallDenyBoundarySelfEscape",Effect:"Deny",Action:["iam:DeleteRolePermissionsBoundary"],Resource:"*"},{Sid:"FjallDenyDisableKmsKey",Effect:"Deny",Action:["kms:DisableKey"],Resource:"*"}],hE=[...vE,{Sid:"FjallDenyStandingHumanCredentials",Effect:"Deny",Action:["iam:CreateUser","iam:CreateLoginProfile","iam:CreateAccessKey","iam:CreateAccountAlias"],Resource:"*"},{Sid:"FjallDenyDisableConfigRecorder",Effect:"Deny",Action:["config:StopConfigurationRecorder"],Resource:"*"}],tC=[...hE,{Sid:"FjallDenyAccountPasswordPolicyTamper",Effect:"Deny",Action:["iam:UpdateAccountPasswordPolicy","iam:DeleteAccountPasswordPolicy"],Resource:"*"},{Sid:"FjallDenyDisableDefaultEbsEncryption",Effect:"Deny",Action:["ec2:DisableEbsEncryptionByDefault"],Resource:"*"}],yL={foundation:[mg,...vE],compliance:[mg,...hE],hardened:[mg,...tC]};var rC=Object.defineProperty,Te=(e,t)=>rC(e,"name",{value:t,configurable:!0});var pg="sts.amazonaws.com";function nC(e){return`FjallDevDeploy${e}`}Te(nC,"devDeployRoleName");function iC(e){return`FjallDevProvisioner${e}`}Te(iC,"devProvisionerRoleName");function oC(e){return`FjallDevSyncWriter${e}`}Te(oC,"devSyncWriterRoleName");var aC="FjallDevBoundary";function yE(e){return`arn:aws:iam::${e}:policy/${aC}`}Te(yE,"devBoundaryPolicyArn");function bE(e){return`org:${e}:dev-provisioner`}Te(bE,"devProvisionerSubject");function SE(e){return`org:${e}:dev-sync`}Te(SE,"devSyncSubject");function sC(e){let{fjallOrgId:t,providerArn:n,issuerDomain:i}=e,r={[`${i}:aud`]:pg};return[{Sid:"FjallMachineSubject",Effect:"Allow",Principal:{Federated:n},Action:"sts:AssumeRoleWithWebIdentity",Condition:{StringEquals:{...r,[`${i}:sub`]:`org:${t}:*`}}},{Sid:"FjallUserSubjects",Effect:"Allow",Principal:{Federated:n},Action:"sts:AssumeRoleWithWebIdentity",Condition:{StringEquals:r,StringLike:{[`${i}:sub`]:`org:${t}:user:*`}}},{Sid:"FjallServiceSubjects",Effect:"Allow",Principal:{Federated:n},Action:"sts:AssumeRoleWithWebIdentity",Condition:{StringEquals:{...r,[`${i}:sub`]:[`org:${t}:discovery`,`org:${t}:connection`,`org:${t}:org-setup`]}}}]}Te(sC,"buildNarrowedDeployTrustStatements");function cC(e){let{fjallOrgId:t,providerArn:n,issuerDomain:i,accountId:r}=e;return[{Sid:"FjallDevSubjectsThisAccount",Effect:"Allow",Principal:{Federated:n},Action:"sts:AssumeRoleWithWebIdentity",Condition:{StringEquals:{[`${i}:aud`]:pg},StringLike:{[`${i}:sub`]:`org:${t}:dev:${r}:*`}}}]}Te(cC,"buildDevDeployTrustStatements");function fg(e){let{providerArn:t,issuerDomain:n,sid:i,subject:r}=e;return[{Sid:i,Effect:"Allow",Principal:{Federated:t},Action:"sts:AssumeRoleWithWebIdentity",Condition:{StringEquals:{[`${n}:aud`]:pg,[`${n}:sub`]:r}}}]}Te(fg,"buildServiceSubjectTrustStatements");function uC(e){return fg({...e,sid:"FjallDevProvisionerSubject",subject:bE(e.fjallOrgId)})}Te(uC,"buildDevProvisionerTrustStatements");function lC(e){return fg({...e,sid:"FjallDevSyncSubject",subject:SE(e.fjallOrgId)})}Te(lC,"buildDevSyncWriterTrustStatements");function dC({accountId:e}){return[{Sid:"FjallDevEcsTaggedMutations",Effect:"Allow",Action:["ecs:UpdateService","ecs:DeleteService","ecs:RunTask","ecs:StopTask"],Resource:`arn:aws:ecs:*:${e}:*`,Condition:{StringEquals:{"aws:ResourceTag/fjall:dev":"true"}}},{Sid:"FjallDevEcsTaggedCreates",Effect:"Allow",Action:["ecs:RegisterTaskDefinition","ecs:CreateService"],Resource:"*",Condition:{StringEquals:{"aws:RequestTag/fjall:dev":"true"}}},{Sid:"FjallDevEcsTagOnCreate",Effect:"Allow",Action:["ecs:TagResource"],Resource:`arn:aws:ecs:*:${e}:*`,Condition:{StringEquals:{"ecs:CreateAction":["RegisterTaskDefinition","CreateService","RunTask"]}}},{Sid:"FjallDevEcsReads",Effect:"Allow",Action:["ecs:Describe*","ecs:List*"],Resource:"*"},{Sid:"FjallDevEcsDeregisterTaskDefinition",Effect:"Allow",Action:["ecs:DeregisterTaskDefinition"],Resource:`arn:aws:ecs:*:${e}:task-definition/fjall-dev-*`},{Sid:"FjallDevElbTaggedMutations",Effect:"Allow",Action:["elasticloadbalancing:ModifyRule","elasticloadbalancing:DeleteRule","elasticloadbalancing:ModifyTargetGroup","elasticloadbalancing:ModifyTargetGroupAttributes","elasticloadbalancing:DeleteTargetGroup","elasticloadbalancing:RegisterTargets","elasticloadbalancing:DeregisterTargets"],Resource:`arn:aws:elasticloadbalancing:*:${e}:*`,Condition:{StringEquals:{"aws:ResourceTag/fjall:dev":"true"}}},{Sid:"FjallDevElbTaggedCreates",Effect:"Allow",Action:["elasticloadbalancing:CreateTargetGroup","elasticloadbalancing:CreateRule"],Resource:`arn:aws:elasticloadbalancing:*:${e}:*`,Condition:{StringEquals:{"aws:RequestTag/fjall:dev":"true"}}},{Sid:"FjallDevElbTagOnCreate",Effect:"Allow",Action:["elasticloadbalancing:AddTags"],Resource:`arn:aws:elasticloadbalancing:*:${e}:*`,Condition:{StringEquals:{"elasticloadbalancing:CreateAction":["CreateTargetGroup","CreateRule"]}}},{Sid:"FjallDevElbReads",Effect:"Allow",Action:["elasticloadbalancing:Describe*"],Resource:"*"},{Sid:"FjallDevSsmDevTree",Effect:"Allow",Action:["ssm:GetParameter*","ssm:PutParameter","ssm:AddTagsToResource"],Resource:`arn:aws:ssm:*:${e}:parameter/fjall/dev/*`},{Sid:"FjallDevLogsTaggedMutations",Effect:"Allow",Action:["logs:PutRetentionPolicy","logs:DeleteLogGroup"],Resource:`arn:aws:logs:*:${e}:log-group:/fjall/dev/*`,Condition:{StringEquals:{"aws:ResourceTag/fjall:dev":"true"}}},{Sid:"FjallDevLogsTaggedCreate",Effect:"Allow",Action:["logs:CreateLogGroup","logs:TagResource"],Resource:`arn:aws:logs:*:${e}:log-group:/fjall/dev/*`,Condition:{StringEquals:{"aws:RequestTag/fjall:dev":"true"}}},{Sid:"FjallDevLogsRead",Effect:"Allow",Action:["logs:GetLogEvents","logs:DescribeLogStreams","logs:FilterLogEvents"],Resource:`arn:aws:logs:*:${e}:log-group:/fjall/dev/*`},{Sid:"FjallDevLogsDescribeGroups",Effect:"Allow",Action:["logs:DescribeLogGroups"],Resource:"*"},{Sid:"FjallDevKmsViaDevAlias",Effect:"Allow",Action:["kms:Encrypt","kms:Decrypt","kms:GenerateDataKey"],Resource:`arn:aws:kms:*:${e}:key/*`,Condition:{"ForAnyValue:StringLike":{"kms:ResourceAliases":"alias/fjall-dev-*"}}},{Sid:"FjallDevKmsSsmSecureString",Effect:"Allow",Action:["kms:Encrypt","kms:Decrypt","kms:GenerateDataKey"],Resource:`arn:aws:kms:*:${e}:key/*`,Condition:{StringLike:{"kms:ViaService":"ssm.*.amazonaws.com"}}},{Sid:"FjallDevEcrAuthToken",Effect:"Allow",Action:["ecr:GetAuthorizationToken"],Resource:"*"},{Sid:"FjallDevEcrPushPull",Effect:"Allow",Action:["ecr:PutImage","ecr:InitiateLayerUpload","ecr:UploadLayerPart","ecr:CompleteLayerUpload","ecr:BatchCheckLayerAvailability","ecr:BatchGetImage","ecr:GetDownloadUrlForLayer","ecr:DescribeImages"],Resource:`arn:aws:ecr:*:${e}:repository/*`},{Sid:"FjallDevPassDevPathRoles",Effect:"Allow",Action:["iam:PassRole"],Resource:`arn:aws:iam::${e}:role/fjall/dev/*`}]}Te(dC,"buildDevDeployPolicyStatements");function mC({accountId:e}){return[{Sid:"FjallDevProvisionerBoundedRoleWrites",Effect:"Allow",Action:["iam:CreateRole","iam:PutRolePolicy","iam:AttachRolePolicy"],Resource:`arn:aws:iam::${e}:role/fjall/dev/*`,Condition:{StringEquals:{"iam:PermissionsBoundary":yE(e)}}},{Sid:"FjallDevProvisionerPathRoleOps",Effect:"Allow",Action:["iam:DeleteRole","iam:DeleteRolePolicy","iam:DetachRolePolicy","iam:ListRolePolicies","iam:TagRole"],Resource:`arn:aws:iam::${e}:role/fjall/dev/*`},{Sid:"FjallDevProvisionerListRoles",Effect:"Allow",Action:["iam:ListRoles"],Resource:"*"},{Sid:"FjallDevProvisionerDevMasterSecrets",Effect:"Allow",Action:["secretsmanager:GetSecretValue"],Resource:`arn:aws:secretsmanager:*:${e}:secret:fjall-dev-*`},{Sid:"FjallDevProvisionerDataApi",Effect:"Allow",Action:["rds-data:ExecuteStatement","rds-data:BatchExecuteStatement","rds-data:BeginTransaction","rds-data:CommitTransaction","rds-data:RollbackTransaction"],Resource:`arn:aws:rds:*:${e}:cluster:fjall-dev-*`},{Sid:"FjallDevProvisionerMetrics",Effect:"Allow",Action:["cloudwatch:GetMetricData"],Resource:"*"},{Sid:"FjallDevProvisionerOrphanDiscovery",Effect:"Allow",Action:["tag:GetResources"],Resource:"*"},{Sid:"FjallDevProvisionerSsmTeardown",Effect:"Allow",Action:["ssm:DeleteParameter*"],Resource:`arn:aws:ssm:*:${e}:parameter/fjall/dev/*`},{Sid:"FjallDevProvisionerLogsTeardown",Effect:"Allow",Action:["logs:DeleteLogGroup"],Resource:`arn:aws:logs:*:${e}:log-group:/fjall/dev/*`},{Sid:"FjallDevProvisionerTaggedTeardown",Effect:"Allow",Action:["ecs:UpdateService","ecs:StopTask","ecs:DeleteService","elasticloadbalancing:DeleteRule","elasticloadbalancing:DeleteTargetGroup","elasticloadbalancing:DeregisterTargets"],Resource:[`arn:aws:ecs:*:${e}:*`,`arn:aws:elasticloadbalancing:*:${e}:*`],Condition:{StringEquals:{"aws:ResourceTag/fjall:dev":"true"}}},{Sid:"FjallDevProvisionerImageJanitor",Effect:"Allow",Action:["ecr:ListImages","ecr:DescribeImages","ecr:BatchDeleteImage"],Resource:`arn:aws:ecr:*:${e}:repository/*`},{Sid:"FjallDevProvisionerSsmReadAll",Effect:"Allow",Action:["ssm:GetParameter*"],Resource:`arn:aws:ssm:*:${e}:parameter/*`},{Sid:"FjallDevProvisionerKmsDecryptViaSsm",Effect:"Allow",Action:["kms:Decrypt"],Resource:`arn:aws:kms:*:${e}:key/*`,Condition:{StringLike:{"kms:ViaService":"ssm.*.amazonaws.com"}}}]}Te(mC,"buildDevProvisionerPolicyStatements");function pC({accountId:e}){return[{Sid:"FjallDevSyncPrefixReadWrite",Effect:"Allow",Action:["s3:GetObject","s3:PutObject"],Resource:`arn:aws:s3:::fjall-dev-sync-${e}-*/*`,Condition:{StringEquals:{"aws:ResourceAccount":e}}}]}Te(pC,"buildDevSyncWriterPolicyStatements");function fC({accountId:e}){return[{Sid:"FjallDevBoundarySsmDevRead",Effect:"Allow",Action:["ssm:GetParameter*"],Resource:`arn:aws:ssm:*:${e}:parameter/fjall/dev/*`},{Sid:"FjallDevBoundaryKmsDecryptDevAlias",Effect:"Allow",Action:["kms:Decrypt"],Resource:`arn:aws:kms:*:${e}:key/*`,Condition:{"ForAnyValue:StringLike":{"kms:ResourceAliases":"alias/fjall-dev-*"}}},{Sid:"FjallDevBoundarySyncPrefixReadWrite",Effect:"Allow",Action:["s3:GetObject","s3:PutObject"],Resource:`arn:aws:s3:::fjall-dev-sync-${e}-*/*`,Condition:{StringEquals:{"aws:ResourceAccount":e}}},{Sid:"FjallDevBoundarySlotLogs",Effect:"Allow",Action:["logs:CreateLogStream","logs:PutLogEvents"],Resource:`arn:aws:logs:*:${e}:log-group:/fjall/dev/*`},{Sid:"FjallDevBoundarySyncQueue",Effect:"Allow",Action:["sqs:ReceiveMessage","sqs:DeleteMessage","sqs:GetQueueUrl"],Resource:`arn:aws:sqs:*:${e}:fjall-dev-sync-${e}-*`}]}Te(fC,"buildDevBoundaryStatements");var gC=Object.defineProperty,st=(e,t)=>gC(e,"name",{value:t,configurable:!0});function $(e){return JSON.stringify(e)}st($,"escapeStringLiteral");function _r(e){return e.map($).join(", ")}st(_r,"formatStringArray");var vC="import:SharedAlarmTopicArn";function qi(e="    "){return`
+${n}`)}return t.data}Kk(Jk,"validateBuildkiteProps");var qk=Object.defineProperty,Qk=(e,t)=>qk(e,"name",{value:t,configurable:!0});function eC(e){return`FjallDeployBoundary${e}`}Qk(eC,"deployBoundaryName");var mg={Sid:"FjallInheritAdministratorAccess",Effect:"Allow",Action:"*",Resource:"*"},vE=[{Sid:"FjallDenyOrgAndAccountEscape",Effect:"Deny",Action:["organizations:LeaveOrganization","account:CloseAccount"],Resource:"*"},{Sid:"FjallDenyDisableAuditLogging",Effect:"Deny",Action:["cloudtrail:StopLogging"],Resource:"*"},{Sid:"FjallDenyBoundarySelfEscape",Effect:"Deny",Action:["iam:DeleteRolePermissionsBoundary"],Resource:"*"},{Sid:"FjallDenyDisableKmsKey",Effect:"Deny",Action:["kms:DisableKey"],Resource:"*"}],hE=[...vE,{Sid:"FjallDenyStandingHumanCredentials",Effect:"Deny",Action:["iam:CreateUser","iam:CreateLoginProfile","iam:CreateAccessKey","iam:CreateAccountAlias"],Resource:"*"},{Sid:"FjallDenyDisableConfigRecorder",Effect:"Deny",Action:["config:StopConfigurationRecorder"],Resource:"*"}],tC=[...hE,{Sid:"FjallDenyAccountPasswordPolicyTamper",Effect:"Deny",Action:["iam:UpdateAccountPasswordPolicy","iam:DeleteAccountPasswordPolicy"],Resource:"*"},{Sid:"FjallDenyDisableDefaultEbsEncryption",Effect:"Deny",Action:["ec2:DisableEbsEncryptionByDefault"],Resource:"*"}],yL={foundation:[mg,...vE],compliance:[mg,...hE],hardened:[mg,...tC]};var rC=Object.defineProperty,Te=(e,t)=>rC(e,"name",{value:t,configurable:!0});var pg="sts.amazonaws.com";function nC(e){return`FjallDevDeploy${e}`}Te(nC,"devDeployRoleName");function iC(e){return`FjallDevProvisioner${e}`}Te(iC,"devProvisionerRoleName");function oC(e){return`FjallDevSyncWriter${e}`}Te(oC,"devSyncWriterRoleName");var aC="FjallDevBoundary";function yE(e){return`arn:aws:iam::${e}:policy/${aC}`}Te(yE,"devBoundaryPolicyArn");function bE(e){return`org:${e}:dev-provisioner`}Te(bE,"devProvisionerSubject");function SE(e){return`org:${e}:dev-sync`}Te(SE,"devSyncSubject");function sC(e){let{fjallOrgId:t,providerArn:n,issuerDomain:i}=e,r={[`${i}:aud`]:pg};return[{Sid:"FjallMachineSubject",Effect:"Allow",Principal:{Federated:n},Action:"sts:AssumeRoleWithWebIdentity",Condition:{StringEquals:{...r,[`${i}:sub`]:`org:${t}:*`}}},{Sid:"FjallUserSubjects",Effect:"Allow",Principal:{Federated:n},Action:"sts:AssumeRoleWithWebIdentity",Condition:{StringEquals:r,StringLike:{[`${i}:sub`]:`org:${t}:user:*`}}},{Sid:"FjallServiceSubjects",Effect:"Allow",Principal:{Federated:n},Action:"sts:AssumeRoleWithWebIdentity",Condition:{StringEquals:{...r,[`${i}:sub`]:[`org:${t}:discovery`,`org:${t}:connection`,`org:${t}:org-setup`,`org:${t}:dev-substrate-setup`]}}}]}Te(sC,"buildNarrowedDeployTrustStatements");function cC(e){let{fjallOrgId:t,providerArn:n,issuerDomain:i,accountId:r}=e;return[{Sid:"FjallDevSubjectsThisAccount",Effect:"Allow",Principal:{Federated:n},Action:"sts:AssumeRoleWithWebIdentity",Condition:{StringEquals:{[`${i}:aud`]:pg},StringLike:{[`${i}:sub`]:`org:${t}:dev:${r}:*`}}}]}Te(cC,"buildDevDeployTrustStatements");function fg(e){let{providerArn:t,issuerDomain:n,sid:i,subject:r}=e;return[{Sid:i,Effect:"Allow",Principal:{Federated:t},Action:"sts:AssumeRoleWithWebIdentity",Condition:{StringEquals:{[`${n}:aud`]:pg,[`${n}:sub`]:r}}}]}Te(fg,"buildServiceSubjectTrustStatements");function uC(e){return fg({...e,sid:"FjallDevProvisionerSubject",subject:bE(e.fjallOrgId)})}Te(uC,"buildDevProvisionerTrustStatements");function lC(e){return fg({...e,sid:"FjallDevSyncSubject",subject:SE(e.fjallOrgId)})}Te(lC,"buildDevSyncWriterTrustStatements");function dC({accountId:e}){return[{Sid:"FjallDevEcsTaggedMutations",Effect:"Allow",Action:["ecs:UpdateService","ecs:DeleteService","ecs:RunTask","ecs:StopTask"],Resource:`arn:aws:ecs:*:${e}:*`,Condition:{StringEquals:{"aws:ResourceTag/fjall:dev":"true"}}},{Sid:"FjallDevEcsTaggedCreates",Effect:"Allow",Action:["ecs:RegisterTaskDefinition","ecs:CreateService"],Resource:"*",Condition:{StringEquals:{"aws:RequestTag/fjall:dev":"true"}}},{Sid:"FjallDevEcsTagOnCreate",Effect:"Allow",Action:["ecs:TagResource"],Resource:`arn:aws:ecs:*:${e}:*`,Condition:{StringEquals:{"ecs:CreateAction":["RegisterTaskDefinition","CreateService","RunTask"]}}},{Sid:"FjallDevEcsReads",Effect:"Allow",Action:["ecs:Describe*","ecs:List*"],Resource:"*"},{Sid:"FjallDevEcsDeregisterTaskDefinition",Effect:"Allow",Action:["ecs:DeregisterTaskDefinition"],Resource:`arn:aws:ecs:*:${e}:task-definition/fjall-dev-*`},{Sid:"FjallDevElbTaggedMutations",Effect:"Allow",Action:["elasticloadbalancing:ModifyRule","elasticloadbalancing:DeleteRule","elasticloadbalancing:ModifyTargetGroup","elasticloadbalancing:ModifyTargetGroupAttributes","elasticloadbalancing:DeleteTargetGroup","elasticloadbalancing:RegisterTargets","elasticloadbalancing:DeregisterTargets"],Resource:`arn:aws:elasticloadbalancing:*:${e}:*`,Condition:{StringEquals:{"aws:ResourceTag/fjall:dev":"true"}}},{Sid:"FjallDevElbTaggedCreates",Effect:"Allow",Action:["elasticloadbalancing:CreateTargetGroup","elasticloadbalancing:CreateRule"],Resource:`arn:aws:elasticloadbalancing:*:${e}:*`,Condition:{StringEquals:{"aws:RequestTag/fjall:dev":"true"}}},{Sid:"FjallDevElbTagOnCreate",Effect:"Allow",Action:["elasticloadbalancing:AddTags"],Resource:`arn:aws:elasticloadbalancing:*:${e}:*`,Condition:{StringEquals:{"elasticloadbalancing:CreateAction":["CreateTargetGroup","CreateRule"]}}},{Sid:"FjallDevElbReads",Effect:"Allow",Action:["elasticloadbalancing:Describe*"],Resource:"*"},{Sid:"FjallDevSsmDevTree",Effect:"Allow",Action:["ssm:GetParameter*","ssm:PutParameter","ssm:AddTagsToResource"],Resource:`arn:aws:ssm:*:${e}:parameter/fjall/dev/*`},{Sid:"FjallDevLogsMutations",Effect:"Allow",Action:["logs:PutRetentionPolicy","logs:DeleteLogGroup"],Resource:`arn:aws:logs:*:${e}:log-group:/fjall/dev/*`},{Sid:"FjallDevLogsTaggedCreate",Effect:"Allow",Action:["logs:CreateLogGroup","logs:TagResource"],Resource:`arn:aws:logs:*:${e}:log-group:/fjall/dev/*`,Condition:{StringEquals:{"aws:RequestTag/fjall:dev":"true"}}},{Sid:"FjallDevLogsRead",Effect:"Allow",Action:["logs:GetLogEvents","logs:DescribeLogStreams","logs:FilterLogEvents"],Resource:`arn:aws:logs:*:${e}:log-group:/fjall/dev/*`},{Sid:"FjallDevLogsDescribeGroups",Effect:"Allow",Action:["logs:DescribeLogGroups"],Resource:"*"},{Sid:"FjallDevKmsViaDevAlias",Effect:"Allow",Action:["kms:Encrypt","kms:Decrypt","kms:GenerateDataKey"],Resource:`arn:aws:kms:*:${e}:key/*`,Condition:{"ForAnyValue:StringLike":{"kms:ResourceAliases":"alias/fjall-dev-*"}}},{Sid:"FjallDevKmsSsmSecureString",Effect:"Allow",Action:["kms:Encrypt","kms:Decrypt","kms:GenerateDataKey"],Resource:`arn:aws:kms:*:${e}:key/*`,Condition:{StringLike:{"kms:ViaService":"ssm.*.amazonaws.com"}}},{Sid:"FjallDevEcrAuthToken",Effect:"Allow",Action:["ecr:GetAuthorizationToken"],Resource:"*"},{Sid:"FjallDevEcrPushPull",Effect:"Allow",Action:["ecr:PutImage","ecr:InitiateLayerUpload","ecr:UploadLayerPart","ecr:CompleteLayerUpload","ecr:BatchCheckLayerAvailability","ecr:BatchGetImage","ecr:GetDownloadUrlForLayer","ecr:DescribeImages"],Resource:`arn:aws:ecr:*:${e}:repository/*`},{Sid:"FjallDevPassDevPathRoles",Effect:"Allow",Action:["iam:PassRole"],Resource:`arn:aws:iam::${e}:role/fjall/dev/*`},{Sid:"FjallDevPassSubstrateExecutionRoles",Effect:"Allow",Action:["iam:PassRole"],Resource:`arn:aws:iam::${e}:role/FjallDev*Compute-DevSubstrate*`,Condition:{StringEquals:{"iam:PassedToService":"ecs-tasks.amazonaws.com"}}}]}Te(dC,"buildDevDeployPolicyStatements");function mC({accountId:e}){return[{Sid:"FjallDevProvisionerBoundedRoleWrites",Effect:"Allow",Action:["iam:CreateRole","iam:PutRolePolicy","iam:AttachRolePolicy"],Resource:`arn:aws:iam::${e}:role/fjall/dev/*`,Condition:{StringEquals:{"iam:PermissionsBoundary":yE(e)}}},{Sid:"FjallDevProvisionerPathRoleOps",Effect:"Allow",Action:["iam:DeleteRole","iam:DeleteRolePolicy","iam:DetachRolePolicy","iam:ListRolePolicies","iam:TagRole"],Resource:`arn:aws:iam::${e}:role/fjall/dev/*`},{Sid:"FjallDevProvisionerListRoles",Effect:"Allow",Action:["iam:ListRoles"],Resource:"*"},{Sid:"FjallDevProvisionerDevMasterSecrets",Effect:"Allow",Action:["secretsmanager:GetSecretValue"],Resource:`arn:aws:secretsmanager:*:${e}:secret:fjall-dev-*`},{Sid:"FjallDevProvisionerKmsDecryptViaSecretsManager",Effect:"Allow",Action:["kms:Decrypt"],Resource:`arn:aws:kms:*:${e}:key/*`,Condition:{StringLike:{"kms:ViaService":"secretsmanager.*.amazonaws.com"}}},{Sid:"FjallDevProvisionerDataApi",Effect:"Allow",Action:["rds-data:ExecuteStatement","rds-data:BatchExecuteStatement","rds-data:BeginTransaction","rds-data:CommitTransaction","rds-data:RollbackTransaction"],Resource:`arn:aws:rds:*:${e}:cluster:fjall-dev-*`},{Sid:"FjallDevProvisionerMetrics",Effect:"Allow",Action:["cloudwatch:GetMetricData"],Resource:"*"},{Sid:"FjallDevProvisionerOrphanDiscovery",Effect:"Allow",Action:["tag:GetResources"],Resource:"*"},{Sid:"FjallDevProvisionerSsmTeardown",Effect:"Allow",Action:["ssm:DeleteParameter*"],Resource:`arn:aws:ssm:*:${e}:parameter/fjall/dev/*`},{Sid:"FjallDevProvisionerLogsTeardown",Effect:"Allow",Action:["logs:DeleteLogGroup"],Resource:`arn:aws:logs:*:${e}:log-group:/fjall/dev/*`},{Sid:"FjallDevProvisionerTaggedTeardown",Effect:"Allow",Action:["ecs:UpdateService","ecs:StopTask","ecs:DeleteService","elasticloadbalancing:DeleteRule","elasticloadbalancing:DeleteTargetGroup","elasticloadbalancing:DeregisterTargets"],Resource:[`arn:aws:ecs:*:${e}:*`,`arn:aws:elasticloadbalancing:*:${e}:*`],Condition:{StringEquals:{"aws:ResourceTag/fjall:dev":"true"}}},{Sid:"FjallDevProvisionerImageJanitor",Effect:"Allow",Action:["ecr:ListImages","ecr:DescribeImages","ecr:BatchDeleteImage"],Resource:`arn:aws:ecr:*:${e}:repository/*`},{Sid:"FjallDevProvisionerSsmReadAll",Effect:"Allow",Action:["ssm:GetParameter*"],Resource:`arn:aws:ssm:*:${e}:parameter/*`},{Sid:"FjallDevProvisionerKmsDecryptViaSsm",Effect:"Allow",Action:["kms:Decrypt"],Resource:`arn:aws:kms:*:${e}:key/*`,Condition:{StringLike:{"kms:ViaService":"ssm.*.amazonaws.com"}}}]}Te(mC,"buildDevProvisionerPolicyStatements");function pC({accountId:e}){return[{Sid:"FjallDevSyncPrefixReadWrite",Effect:"Allow",Action:["s3:GetObject","s3:PutObject"],Resource:`arn:aws:s3:::fjall-dev-sync-${e}-*/*`,Condition:{StringEquals:{"aws:ResourceAccount":e}}}]}Te(pC,"buildDevSyncWriterPolicyStatements");function fC({accountId:e}){return[{Sid:"FjallDevBoundarySsmDevRead",Effect:"Allow",Action:["ssm:GetParameter*"],Resource:`arn:aws:ssm:*:${e}:parameter/fjall/dev/*`},{Sid:"FjallDevBoundaryKmsDecryptDevAlias",Effect:"Allow",Action:["kms:Decrypt"],Resource:`arn:aws:kms:*:${e}:key/*`,Condition:{"ForAnyValue:StringLike":{"kms:ResourceAliases":"alias/fjall-dev-*"}}},{Sid:"FjallDevBoundarySyncPrefixReadWrite",Effect:"Allow",Action:["s3:GetObject","s3:PutObject"],Resource:`arn:aws:s3:::fjall-dev-sync-${e}-*/*`,Condition:{StringEquals:{"aws:ResourceAccount":e}}},{Sid:"FjallDevBoundarySlotLogs",Effect:"Allow",Action:["logs:CreateLogStream","logs:PutLogEvents"],Resource:`arn:aws:logs:*:${e}:log-group:/fjall/dev/*`},{Sid:"FjallDevBoundarySyncQueue",Effect:"Allow",Action:["sqs:ReceiveMessage","sqs:DeleteMessage","sqs:GetQueueUrl"],Resource:`arn:aws:sqs:*:${e}:fjall-dev-sync-${e}-*`}]}Te(fC,"buildDevBoundaryStatements");var gC=Object.defineProperty,st=(e,t)=>gC(e,"name",{value:t,configurable:!0});function $(e){return JSON.stringify(e)}st($,"escapeStringLiteral");function _r(e){return e.map($).join(", ")}st(_r,"formatStringArray");var vC="import:SharedAlarmTopicArn";function qi(e="    "){return`
 ${e}...(getConfig().environment === "production" ? { alertsTopic: ${$(vC)} } : {}),`}st(qi,"emitProductionAlertsTopicSpread");function gg(e){if(typeof e!="object"||e===null)return!1;let t=e;return typeof t.__identifier=="string"||typeof t.__expression=="string"||typeof t.__call=="string"}st(gg,"isSpecialValue");function Pt(e){return e.replace(/[^a-zA-Z0-9]/g," ").split(" ").map((t,n)=>n===0?t.charAt(0).toLowerCase()+t.slice(1):t.charAt(0).toUpperCase()+t.slice(1)).join("")}st(Pt,"toVariableName");function Q(e){return e.variableName??Pt(e.name)}st(Q,"getVariableName");function Qi(e,t){for(let n of e.database)if(n.name===t&&n.variableName)return n.variableName;for(let n of e.s3)if(n.name===t&&n.variableName)return n.variableName;for(let n of e.compute)if(n.name===t&&n.variableName)return n.variableName;for(let n of e.dynamodb??[])if(n.name===t&&n.variableName)return n.variableName;for(let n of e.sqs??[])if(n.name===t&&n.variableName)return n.variableName;return Pt(t)}st(Qi,"resolveResourceVariable");function _E(e){let t=Object.entries(e);return t.length===0?!0:t.length>1?!1:t.every(([,n])=>typeof n=="string"||typeof n=="number"||typeof n=="boolean"||n===null)}st(_E,"isSimpleObject");function Z(e,t="    "){if(e==null)return"undefined";if(typeof e=="string")return JSON.stringify(e);if(typeof e=="number"||typeof e=="boolean")return String(e);if(gg(e)){if("__identifier"in e)return e.__identifier;if("__expression"in e)return e.__expression;if("__call"in e)return e.__call}if(Array.isArray(e))return`[${e.map(n=>Z(n,t)).join(", ")}]`;if(typeof e=="object"){let n=Object.entries(e).filter(([,o])=>o!==void 0);if(_E(e)){let o=n.map(([a,c])=>`${a}: ${Z(c,t)}`).join(", ");return o?`{ ${o} }`:"{}"}let i=t+"  ",r=n.map(([o,a])=>`${i}${o}: ${Z(a,i)}`).join(`,
 `);return r?`{
 ${r}