fjall 3.8.0 → 3.8.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/bin/.bundled +2 -2
- package/bin/assets/generators/account/generator.js +1 -1
- package/bin/assets/generators/application/generator.js +1 -1
- package/bin/assets/generators/cdn/generator.js +1 -1
- package/bin/assets/generators/compute/generator.js +1 -1
- package/bin/assets/generators/compute/service/generator.js +1 -1
- package/bin/assets/generators/database/generator.js +1 -1
- package/bin/assets/generators/database/proxy/generator.js +1 -1
- package/bin/assets/generators/domain/generator.js +1 -1
- package/bin/assets/generators/network/generator.js +1 -1
- package/bin/assets/generators/organisation/generator.js +1 -1
- package/bin/assets/generators/shared/files/package.json +2 -2
- package/bin/assets/generators/storage/s3/generator.js +1 -1
- package/bin/assets/generators/tunnel/generator.js +1 -1
- package/bin/fjall.bundle.js +2 -2
- package/package.json +3 -3
|
@@ -67,7 +67,7 @@ var LT=Object.defineProperty;var vt=(e,t)=>{for(var n in t)LT(e,n,{get:t[n],enum
|
|
|
67
67
|
|
|
68
68
|
Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}for(let a of e.seen.entries()){let c=a[1];if(t===a[0]){o(a);continue}if(e.external){let l=e.external.registry.get(a[0])?.id;if(t!==a[0]&&l){o(a);continue}}if(e.metadataRegistry.get(a[0])?.id){o(a);continue}if(c.cycle){o(a);continue}if(c.count>1&&e.reused==="ref"){o(a);continue}}}function er(e,t){let n=e.seen.get(t);if(!n)throw new Error("Unprocessed schema. This is a bug in Zod.");let i=c=>{let u=e.seen.get(c);if(u.ref===null)return;let l=u.def??u.schema,m={...l},p=u.ref;if(u.ref=null,p){i(p);let h=e.seen.get(p),x=h.schema;if(x.$ref&&(e.target==="draft-07"||e.target==="draft-04"||e.target==="openapi-3.0")?(l.allOf=l.allOf??[],l.allOf.push(x)):Object.assign(l,x),Object.assign(l,m),c._zod.parent===p)for(let K in l)K==="$ref"||K==="allOf"||K in m||delete l[K];if(x.$ref&&h.def)for(let K in l)K==="$ref"||K==="allOf"||K in h.def&&JSON.stringify(l[K])===JSON.stringify(h.def[K])&&delete l[K]}let g=c._zod.parent;if(g&&g!==p){i(g);let h=e.seen.get(g);if(h?.schema.$ref&&(l.$ref=h.schema.$ref,h.def))for(let x in l)x==="$ref"||x==="allOf"||x in h.def&&JSON.stringify(l[x])===JSON.stringify(h.def[x])&&delete l[x]}e.override({zodSchema:c,jsonSchema:l,path:u.path??[]})};for(let c of[...e.seen.entries()].reverse())i(c[0]);let r={};if(e.target==="draft-2020-12"?r.$schema="https://json-schema.org/draft/2020-12/schema":e.target==="draft-07"?r.$schema="http://json-schema.org/draft-07/schema#":e.target==="draft-04"?r.$schema="http://json-schema.org/draft-04/schema#":e.target,e.external?.uri){let c=e.external.registry.get(t)?.id;if(!c)throw new Error("Schema is missing an `id` property");r.$id=e.external.uri(c)}Object.assign(r,n.def??n.schema);let o=e.metadataRegistry.get(t)?.id;o!==void 0&&r.id===o&&delete r.id;let a=e.external?.defs??{};for(let c of e.seen.entries()){let u=c[1];u.def&&u.defId&&(u.def.id===u.defId&&delete u.def.id,a[u.defId]=u.def)}e.external||Object.keys(a).length>0&&(e.target==="draft-2020-12"?r.$defs=a:r.definitions=a);try{let c=JSON.parse(JSON.stringify(r));return Object.defineProperty(c,"~standard",{value:{...t["~standard"],jsonSchema:{input:xn(t,"input",e.processors),output:xn(t,"output",e.processors)}},enumerable:!1,writable:!1}),c}catch{throw new Error("Error converting schema to JSON.")}}function Re(e,t){let n=t??{seen:new Set};if(n.seen.has(e))return!1;n.seen.add(e);let i=e._zod.def;if(i.type==="transform")return!0;if(i.type==="array")return Re(i.element,n);if(i.type==="set")return Re(i.valueType,n);if(i.type==="lazy")return Re(i.getter(),n);if(i.type==="promise"||i.type==="optional"||i.type==="nonoptional"||i.type==="nullable"||i.type==="readonly"||i.type==="default"||i.type==="prefault")return Re(i.innerType,n);if(i.type==="intersection")return Re(i.left,n)||Re(i.right,n);if(i.type==="record"||i.type==="map")return Re(i.keyType,n)||Re(i.valueType,n);if(i.type==="pipe")return e._zod.traits.has("$ZodCodec")?!0:Re(i.in,n)||Re(i.out,n);if(i.type==="object"){for(let r in i.shape)if(Re(i.shape[r],n))return!0;return!1}if(i.type==="union"){for(let r of i.options)if(Re(r,n))return!0;return!1}if(i.type==="tuple"){for(let r of i.items)if(Re(r,n))return!0;return!!(i.rest&&Re(i.rest,n))}return!1}var ep=(e,t={})=>n=>{let i=qt({...n,processors:t});return B(e,i),Qt(i,e),er(i,e)},xn=(e,t,n={})=>i=>{let{libraryOptions:r,target:o}=i??{},a=qt({...r??{},target:o,io:t,processors:n});return B(e,a),Qt(a,e),er(a,e)};var D0={guid:"uuid",url:"uri",datetime:"date-time",json_string:"json-string",regex:""},tp=(e,t,n,i)=>{let r=n;r.type="string";let{minimum:o,maximum:a,format:c,patterns:u,contentEncoding:l}=e._zod.bag;if(typeof o=="number"&&(r.minLength=o),typeof a=="number"&&(r.maxLength=a),c&&(r.format=D0[c]??c,r.format===""&&delete r.format,c==="time"&&delete r.format),l&&(r.contentEncoding=l),u&&u.size>0){let m=[...u];m.length===1?r.pattern=m[0].source:m.length>1&&(r.allOf=[...m.map(p=>({...t.target==="draft-07"||t.target==="draft-04"||t.target==="openapi-3.0"?{type:"string"}:{},pattern:p.source}))])}},rp=(e,t,n,i)=>{let r=n,{minimum:o,maximum:a,format:c,multipleOf:u,exclusiveMaximum:l,exclusiveMinimum:m}=e._zod.bag;typeof c=="string"&&c.includes("int")?r.type="integer":r.type="number";let p=typeof m=="number"&&m>=(o??Number.NEGATIVE_INFINITY),g=typeof l=="number"&&l<=(a??Number.POSITIVE_INFINITY),h=t.target==="draft-04"||t.target==="openapi-3.0";p?h?(r.minimum=m,r.exclusiveMinimum=!0):r.exclusiveMinimum=m:typeof o=="number"&&(r.minimum=o),g?h?(r.maximum=l,r.exclusiveMaximum=!0):r.exclusiveMaximum=l:typeof a=="number"&&(r.maximum=a),typeof u=="number"&&(r.multipleOf=u)},np=(e,t,n,i)=>{n.type="boolean"},ip=(e,t,n,i)=>{if(t.unrepresentable==="throw")throw new Error("BigInt cannot be represented in JSON Schema")},op=(e,t,n,i)=>{if(t.unrepresentable==="throw")throw new Error("Symbols cannot be represented in JSON Schema")},ap=(e,t,n,i)=>{t.target==="openapi-3.0"?(n.type="string",n.nullable=!0,n.enum=[null]):n.type="null"},sp=(e,t,n,i)=>{if(t.unrepresentable==="throw")throw new Error("Undefined cannot be represented in JSON Schema")},cp=(e,t,n,i)=>{if(t.unrepresentable==="throw")throw new Error("Void cannot be represented in JSON Schema")},up=(e,t,n,i)=>{n.not={}},lp=(e,t,n,i)=>{},dp=(e,t,n,i)=>{},mp=(e,t,n,i)=>{if(t.unrepresentable==="throw")throw new Error("Date cannot be represented in JSON Schema")},pp=(e,t,n,i)=>{let r=e._zod.def,o=Ei(r.entries);o.every(a=>typeof a=="number")&&(n.type="number"),o.every(a=>typeof a=="string")&&(n.type="string"),n.enum=o},fp=(e,t,n,i)=>{let r=e._zod.def,o=[];for(let a of r.values)if(a===void 0){if(t.unrepresentable==="throw")throw new Error("Literal `undefined` cannot be represented in JSON Schema")}else if(typeof a=="bigint"){if(t.unrepresentable==="throw")throw new Error("BigInt literals cannot be represented in JSON Schema");o.push(Number(a))}else o.push(a);if(o.length!==0)if(o.length===1){let a=o[0];n.type=a===null?"null":typeof a,t.target==="draft-04"||t.target==="openapi-3.0"?n.enum=[a]:n.const=a}else o.every(a=>typeof a=="number")&&(n.type="number"),o.every(a=>typeof a=="string")&&(n.type="string"),o.every(a=>typeof a=="boolean")&&(n.type="boolean"),o.every(a=>a===null)&&(n.type="null"),n.enum=o},gp=(e,t,n,i)=>{if(t.unrepresentable==="throw")throw new Error("NaN cannot be represented in JSON Schema")},vp=(e,t,n,i)=>{let r=n,o=e._zod.pattern;if(!o)throw new Error("Pattern not found in template literal");r.type="string",r.pattern=o.source},hp=(e,t,n,i)=>{let r=n,o={type:"string",format:"binary",contentEncoding:"binary"},{minimum:a,maximum:c,mime:u}=e._zod.bag;a!==void 0&&(o.minLength=a),c!==void 0&&(o.maxLength=c),u?u.length===1?(o.contentMediaType=u[0],Object.assign(r,o)):(Object.assign(r,o),r.anyOf=u.map(l=>({contentMediaType:l}))):Object.assign(r,o)},bp=(e,t,n,i)=>{n.type="boolean"},yp=(e,t,n,i)=>{if(t.unrepresentable==="throw")throw new Error("Custom types cannot be represented in JSON Schema")},Sp=(e,t,n,i)=>{if(t.unrepresentable==="throw")throw new Error("Function types cannot be represented in JSON Schema")},_p=(e,t,n,i)=>{if(t.unrepresentable==="throw")throw new Error("Transforms cannot be represented in JSON Schema")},Ep=(e,t,n,i)=>{if(t.unrepresentable==="throw")throw new Error("Map cannot be represented in JSON Schema")},Ap=(e,t,n,i)=>{if(t.unrepresentable==="throw")throw new Error("Set cannot be represented in JSON Schema")},xp=(e,t,n,i)=>{let r=n,o=e._zod.def,{minimum:a,maximum:c}=e._zod.bag;typeof a=="number"&&(r.minItems=a),typeof c=="number"&&(r.maxItems=c),r.type="array",r.items=B(o.element,t,{...i,path:[...i.path,"items"]})},Ip=(e,t,n,i)=>{let r=n,o=e._zod.def;r.type="object",r.properties={};let a=o.shape;for(let l in a)r.properties[l]=B(a[l],t,{...i,path:[...i.path,"properties",l]});let c=new Set(Object.keys(a)),u=new Set([...c].filter(l=>{let m=o.shape[l]._zod;return t.io==="input"?m.optin===void 0:m.optout===void 0}));u.size>0&&(r.required=Array.from(u)),o.catchall?._zod.def.type==="never"?r.additionalProperties=!1:o.catchall?o.catchall&&(r.additionalProperties=B(o.catchall,t,{...i,path:[...i.path,"additionalProperties"]})):t.io==="output"&&(r.additionalProperties=!1)},bs=(e,t,n,i)=>{let r=e._zod.def,o=r.inclusive===!1,a=r.options.map((c,u)=>B(c,t,{...i,path:[...i.path,o?"oneOf":"anyOf",u]}));o?n.oneOf=a:n.anyOf=a},$p=(e,t,n,i)=>{let r=e._zod.def,o=B(r.left,t,{...i,path:[...i.path,"allOf",0]}),a=B(r.right,t,{...i,path:[...i.path,"allOf",1]}),c=l=>"allOf"in l&&Object.keys(l).length===1,u=[...c(o)?o.allOf:[o],...c(a)?a.allOf:[a]];n.allOf=u},Tp=(e,t,n,i)=>{let r=n,o=e._zod.def;r.type="array";let a=t.target==="draft-2020-12"?"prefixItems":"items",c=t.target==="draft-2020-12"||t.target==="openapi-3.0"?"items":"additionalItems",u=o.items.map((g,h)=>B(g,t,{...i,path:[...i.path,a,h]})),l=o.rest?B(o.rest,t,{...i,path:[...i.path,c,...t.target==="openapi-3.0"?[o.items.length]:[]]}):null;t.target==="draft-2020-12"?(r.prefixItems=u,l&&(r.items=l)):t.target==="openapi-3.0"?(r.items={anyOf:u},l&&r.items.anyOf.push(l),r.minItems=u.length,l||(r.maxItems=u.length)):(r.items=u,l&&(r.additionalItems=l));let{minimum:m,maximum:p}=e._zod.bag;typeof m=="number"&&(r.minItems=m),typeof p=="number"&&(r.maxItems=p)},Rp=(e,t,n,i)=>{let r=n,o=e._zod.def;r.type="object";let a=o.keyType,u=a._zod.bag?.patterns;if(o.mode==="loose"&&u&&u.size>0){let m=B(o.valueType,t,{...i,path:[...i.path,"patternProperties","*"]});r.patternProperties={};for(let p of u)r.patternProperties[p.source]=m}else(t.target==="draft-07"||t.target==="draft-2020-12")&&(r.propertyNames=B(o.keyType,t,{...i,path:[...i.path,"propertyNames"]})),r.additionalProperties=B(o.valueType,t,{...i,path:[...i.path,"additionalProperties"]});let l=a._zod.values;if(l){let m=[...l].filter(p=>typeof p=="string"||typeof p=="number");m.length>0&&(r.required=m)}},Np=(e,t,n,i)=>{let r=e._zod.def,o=B(r.innerType,t,i),a=t.seen.get(e);t.target==="openapi-3.0"?(a.ref=r.innerType,n.nullable=!0):n.anyOf=[o,{type:"null"}]},Pp=(e,t,n,i)=>{let r=e._zod.def;B(r.innerType,t,i);let o=t.seen.get(e);o.ref=r.innerType},Cp=(e,t,n,i)=>{let r=e._zod.def;B(r.innerType,t,i);let o=t.seen.get(e);o.ref=r.innerType,n.default=JSON.parse(JSON.stringify(r.defaultValue))},kp=(e,t,n,i)=>{let r=e._zod.def;B(r.innerType,t,i);let o=t.seen.get(e);o.ref=r.innerType,t.io==="input"&&(n._prefault=JSON.parse(JSON.stringify(r.defaultValue)))},Op=(e,t,n,i)=>{let r=e._zod.def;B(r.innerType,t,i);let o=t.seen.get(e);o.ref=r.innerType;let a;try{a=r.catchValue(void 0)}catch{throw new Error("Dynamic catch values are not supported in JSON Schema")}n.default=a},Dp=(e,t,n,i)=>{let r=e._zod.def,o=r.in._zod.traits.has("$ZodTransform"),a=t.io==="input"?o?r.out:r.in:r.out;B(a,t,i);let c=t.seen.get(e);c.ref=a},wp=(e,t,n,i)=>{let r=e._zod.def;B(r.innerType,t,i);let o=t.seen.get(e);o.ref=r.innerType,n.readOnly=!0},Mp=(e,t,n,i)=>{let r=e._zod.def;B(r.innerType,t,i);let o=t.seen.get(e);o.ref=r.innerType},ys=(e,t,n,i)=>{let r=e._zod.def;B(r.innerType,t,i);let o=t.seen.get(e);o.ref=r.innerType},jp=(e,t,n,i)=>{let r=e._zod.innerType;B(r,t,i);let o=t.seen.get(e);o.ref=r},hs={string:tp,number:rp,boolean:np,bigint:ip,symbol:op,null:ap,undefined:sp,void:cp,never:up,any:lp,unknown:dp,date:mp,enum:pp,literal:fp,nan:gp,template_literal:vp,file:hp,success:bp,custom:yp,function:Sp,transform:_p,map:Ep,set:Ap,array:xp,object:Ip,union:bs,intersection:$p,tuple:Tp,record:Rp,nullable:Np,nonoptional:Pp,default:Cp,prefault:kp,catch:Op,pipe:Dp,readonly:wp,promise:Mp,optional:ys,lazy:jp};function Ss(e,t){if("_idmap"in e){let i=e,r=qt({...t,processors:hs}),o={};for(let u of i._idmap.entries()){let[l,m]=u;B(m,r)}let a={},c={registry:i,uri:t?.uri,defs:o};r.external=c;for(let u of i._idmap.entries()){let[l,m]=u;Qt(r,m),a[l]=er(r,m)}if(Object.keys(o).length>0){let u=r.target==="draft-2020-12"?"$defs":"definitions";a.__shared={[u]:o}}return{schemas:a}}let n=qt({...t,processors:hs});return B(e,n),Qt(n,e),er(n,e)}var _s=class{get metadataRegistry(){return this.ctx.metadataRegistry}get target(){return this.ctx.target}get unrepresentable(){return this.ctx.unrepresentable}get override(){return this.ctx.override}get io(){return this.ctx.io}get counter(){return this.ctx.counter}set counter(t){this.ctx.counter=t}get seen(){return this.ctx.seen}constructor(t){let n=t?.target??"draft-2020-12";n==="draft-4"&&(n="draft-04"),n==="draft-7"&&(n="draft-07"),this.ctx=qt({processors:hs,target:n,...t?.metadata&&{metadata:t.metadata},...t?.unrepresentable&&{unrepresentable:t.unrepresentable},...t?.override&&{override:t.override},...t?.io&&{io:t.io}})}process(t,n={path:[],schemaPath:[]}){return B(t,this.ctx,n)}emit(t,n){n&&(n.cycles&&(this.ctx.cycles=n.cycles),n.reused&&(this.ctx.reused=n.reused),n.external&&(this.ctx.external=n.external)),Qt(this.ctx,t);let i=er(this.ctx,t),{"~standard":r,...o}=i;return o}};var Ky={};var Ui={};vt(Ui,{ZodAny:()=>cf,ZodArray:()=>mf,ZodBase64:()=>Bs,ZodBase64URL:()=>Zs,ZodBigInt:()=>kn,ZodBigIntFormat:()=>Ws,ZodBoolean:()=>Cn,ZodCIDRv4:()=>Us,ZodCIDRv6:()=>Fs,ZodCUID:()=>Os,ZodCUID2:()=>Ds,ZodCatch:()=>Df,ZodCodec:()=>qi,ZodCustom:()=>Qi,ZodCustomStringFormat:()=>Nn,ZodDate:()=>Ki,ZodDefault:()=>Rf,ZodDiscriminatedUnion:()=>ff,ZodE164:()=>Vs,ZodEmail:()=>Ps,ZodEmoji:()=>Cs,ZodEnum:()=>Tn,ZodExactOptional:()=>If,ZodFile:()=>Af,ZodFunction:()=>Vf,ZodGUID:()=>Bi,ZodIPv4:()=>zs,ZodIPv6:()=>Ls,ZodIntersection:()=>gf,ZodJWT:()=>Gs,ZodKSUID:()=>js,ZodLazy:()=>Ff,ZodLiteral:()=>Ef,ZodMAC:()=>ef,ZodMap:()=>Sf,ZodNaN:()=>Mf,ZodNanoID:()=>ks,ZodNever:()=>lf,ZodNonOptional:()=>qs,ZodNull:()=>af,ZodNullable:()=>Tf,ZodNumber:()=>Pn,ZodNumberFormat:()=>Ar,ZodObject:()=>Xi,ZodOptional:()=>Js,ZodPipe:()=>Ji,ZodPrefault:()=>Pf,ZodPreprocess:()=>jf,ZodPromise:()=>Zf,ZodReadonly:()=>zf,ZodRecord:()=>$n,ZodSet:()=>_f,ZodString:()=>Rn,ZodStringFormat:()=>W,ZodSuccess:()=>Of,ZodSymbol:()=>nf,ZodTemplateLiteral:()=>Uf,ZodTransform:()=>xf,ZodTuple:()=>hf,ZodType:()=>C,ZodULID:()=>ws,ZodURL:()=>Wi,ZodUUID:()=>Et,ZodUndefined:()=>of,ZodUnion:()=>Yi,ZodUnknown:()=>uf,ZodVoid:()=>df,ZodXID:()=>Ms,ZodXor:()=>pf,_ZodString:()=>Ns,_default:()=>Nf,_function:()=>r_,any:()=>OS,array:()=>Hi,base64:()=>vS,base64url:()=>hS,bigint:()=>RS,boolean:()=>rf,catch:()=>wf,check:()=>n_,cidrv4:()=>fS,cidrv6:()=>gS,codec:()=>qS,cuid:()=>aS,cuid2:()=>sS,custom:()=>i_,date:()=>wS,describe:()=>o_,discriminatedUnion:()=>FS,e164:()=>bS,email:()=>Yy,emoji:()=>iS,enum:()=>Xs,exactOptional:()=>$f,file:()=>HS,float32:()=>xS,float64:()=>IS,function:()=>r_,guid:()=>Jy,hash:()=>AS,hex:()=>ES,hostname:()=>_S,httpUrl:()=>nS,instanceof:()=>s_,int:()=>Ts,int32:()=>$S,int64:()=>NS,intersection:()=>vf,invertCodec:()=>QS,ipv4:()=>dS,ipv6:()=>pS,json:()=>u_,jwt:()=>yS,keyof:()=>MS,ksuid:()=>lS,lazy:()=>Bf,literal:()=>KS,looseObject:()=>LS,looseRecord:()=>ZS,mac:()=>mS,map:()=>VS,meta:()=>a_,nan:()=>JS,nanoid:()=>oS,nativeEnum:()=>WS,never:()=>Ks,nonoptional:()=>kf,null:()=>sf,nullable:()=>Vi,nullish:()=>XS,number:()=>tf,object:()=>jS,optional:()=>Zi,partialRecord:()=>BS,pipe:()=>Rs,prefault:()=>Cf,preprocess:()=>l_,promise:()=>t_,readonly:()=>Lf,record:()=>yf,refine:()=>Gf,set:()=>GS,strictObject:()=>zS,string:()=>Fi,stringFormat:()=>SS,stringbool:()=>c_,success:()=>YS,superRefine:()=>Wf,symbol:()=>CS,templateLiteral:()=>e_,transform:()=>Ys,tuple:()=>bf,uint32:()=>TS,uint64:()=>PS,ulid:()=>cS,undefined:()=>kS,union:()=>Hs,unknown:()=>Er,url:()=>rS,uuid:()=>qy,uuidv4:()=>Qy,uuidv6:()=>eS,uuidv7:()=>tS,void:()=>DS,xid:()=>uS,xor:()=>US});var Es={};vt(Es,{endsWith:()=>vn,gt:()=>St,gte:()=>Te,includes:()=>fn,length:()=>_r,lowercase:()=>mn,lt:()=>yt,lte:()=>Ve,maxLength:()=>Sr,maxSize:()=>Jt,mime:()=>hn,minLength:()=>Dt,minSize:()=>_t,multipleOf:()=>Yt,negative:()=>ps,nonnegative:()=>gs,nonpositive:()=>fs,normalize:()=>bn,overwrite:()=>lt,positive:()=>ms,property:()=>vs,regex:()=>dn,size:()=>yr,slugify:()=>En,startsWith:()=>gn,toLowerCase:()=>Sn,toUpperCase:()=>_n,trim:()=>yn,uppercase:()=>pn});var In={};vt(In,{ZodISODate:()=>xs,ZodISODateTime:()=>As,ZodISODuration:()=>$s,ZodISOTime:()=>Is,date:()=>Lp,datetime:()=>zp,duration:()=>Fp,time:()=>Up});var As=f("ZodISODateTime",(e,t)=>{gd.init(e,t),W.init(e,t)});function zp(e){return ym(As,e)}var xs=f("ZodISODate",(e,t)=>{vd.init(e,t),W.init(e,t)});function Lp(e){return Sm(xs,e)}var Is=f("ZodISOTime",(e,t)=>{hd.init(e,t),W.init(e,t)});function Up(e){return _m(Is,e)}var $s=f("ZodISODuration",(e,t)=>{bd.init(e,t),W.init(e,t)});function Fp(e){return Em($s,e)}var Hy=(e,t)=>{Ti.init(e,t),e.name="ZodError",Object.defineProperties(e,{format:{value:n=>Ni(e,n)},flatten:{value:n=>Ri(e,n)},addIssue:{value:n=>{e.issues.push(n),e.message=JSON.stringify(e.issues,tn,2)}},addIssues:{value:n=>{e.issues.push(...n),e.message=JSON.stringify(e.issues,tn,2)}},isEmpty:{get(){return e.issues.length===0}}})},M0=f("ZodError",Hy),je=f("ZodError",Hy,{Parent:Error});var Bp=on(je),Zp=an(je),Vp=sn(je),Gp=cn(je),Wp=Sa(je),Kp=_a(je),Hp=Ea(je),Xp=Aa(je),Yp=xa(je),Jp=Ia(je),qp=$a(je),Qp=Ta(je);var Xy=new WeakMap;function Gi(e,t,n){let i=Object.getPrototypeOf(e),r=Xy.get(i);if(r||(r=new Set,Xy.set(i,r)),!r.has(t)){r.add(t);for(let o in n){let a=n[o];Object.defineProperty(i,o,{configurable:!0,enumerable:!1,get(){let c=a.bind(this);return Object.defineProperty(this,o,{configurable:!0,writable:!0,enumerable:!0,value:c}),c},set(c){Object.defineProperty(this,o,{configurable:!0,writable:!0,enumerable:!0,value:c})}})}}}var C=f("ZodType",(e,t)=>(P.init(e,t),Object.assign(e["~standard"],{jsonSchema:{input:xn(e,"input"),output:xn(e,"output")}}),e.toJSONSchema=ep(e,{}),e.def=t,e.type=t.type,Object.defineProperty(e,"_def",{value:t}),e.parse=(n,i)=>Bp(e,n,i,{callee:e.parse}),e.safeParse=(n,i)=>Vp(e,n,i),e.parseAsync=async(n,i)=>Zp(e,n,i,{callee:e.parseAsync}),e.safeParseAsync=async(n,i)=>Gp(e,n,i),e.spa=e.safeParseAsync,e.encode=(n,i)=>Wp(e,n,i),e.decode=(n,i)=>Kp(e,n,i),e.encodeAsync=async(n,i)=>Hp(e,n,i),e.decodeAsync=async(n,i)=>Xp(e,n,i),e.safeEncode=(n,i)=>Yp(e,n,i),e.safeDecode=(n,i)=>Jp(e,n,i),e.safeEncodeAsync=async(n,i)=>qp(e,n,i),e.safeDecodeAsync=async(n,i)=>Qp(e,n,i),Gi(e,"ZodType",{check(...n){let i=this.def;return this.clone(_.mergeDefs(i,{checks:[...i.checks??[],...n.map(r=>typeof r=="function"?{_zod:{check:r,def:{check:"custom"},onattach:[]}}:r)]}),{parent:!0})},with(...n){return this.check(...n)},clone(n,i){return Ie(this,n,i)},brand(){return this},register(n,i){return n.add(this,i),this},refine(n,i){return this.check(Gf(n,i))},superRefine(n,i){return this.check(Wf(n,i))},overwrite(n){return this.check(lt(n))},optional(){return Zi(this)},exactOptional(){return $f(this)},nullable(){return Vi(this)},nullish(){return Zi(Vi(this))},nonoptional(n){return kf(this,n)},array(){return Hi(this)},or(n){return Hs([this,n])},and(n){return vf(this,n)},transform(n){return Rs(this,Ys(n))},default(n){return Nf(this,n)},prefault(n){return Cf(this,n)},catch(n){return wf(this,n)},pipe(n){return Rs(this,n)},readonly(){return Lf(this)},describe(n){let i=this.clone();return ge.add(i,{description:n}),i},meta(...n){if(n.length===0)return ge.get(this);let i=this.clone();return ge.add(i,n[0]),i},isOptional(){return this.safeParse(void 0).success},isNullable(){return this.safeParse(null).success},apply(n){return n(this)}}),Object.defineProperty(e,"description",{get(){return ge.get(e)?.description},configurable:!0}),e)),Ns=f("_ZodString",(e,t)=>{br.init(e,t),C.init(e,t),e._zod.processJSONSchema=(i,r,o)=>tp(e,i,r,o);let n=e._zod.bag;e.format=n.format??null,e.minLength=n.minimum??null,e.maxLength=n.maximum??null,Gi(e,"_ZodString",{regex(...i){return this.check(dn(...i))},includes(...i){return this.check(fn(...i))},startsWith(...i){return this.check(gn(...i))},endsWith(...i){return this.check(vn(...i))},min(...i){return this.check(Dt(...i))},max(...i){return this.check(Sr(...i))},length(...i){return this.check(_r(...i))},nonempty(...i){return this.check(Dt(1,...i))},lowercase(i){return this.check(mn(i))},uppercase(i){return this.check(pn(i))},trim(){return this.check(yn())},normalize(...i){return this.check(bn(...i))},toLowerCase(){return this.check(Sn())},toUpperCase(){return this.check(_n())},slugify(){return this.check(En())}})}),Rn=f("ZodString",(e,t)=>{br.init(e,t),Ns.init(e,t),e.email=n=>e.check(Wa(Ps,n)),e.url=n=>e.check(Li(Wi,n)),e.jwt=n=>e.check(ds(Gs,n)),e.emoji=n=>e.check(Ja(Cs,n)),e.guid=n=>e.check(zi(Bi,n)),e.uuid=n=>e.check(Ka(Et,n)),e.uuidv4=n=>e.check(Ha(Et,n)),e.uuidv6=n=>e.check(Xa(Et,n)),e.uuidv7=n=>e.check(Ya(Et,n)),e.nanoid=n=>e.check(qa(ks,n)),e.guid=n=>e.check(zi(Bi,n)),e.cuid=n=>e.check(Qa(Os,n)),e.cuid2=n=>e.check(es(Ds,n)),e.ulid=n=>e.check(ts(ws,n)),e.base64=n=>e.check(cs(Bs,n)),e.base64url=n=>e.check(us(Zs,n)),e.xid=n=>e.check(rs(Ms,n)),e.ksuid=n=>e.check(ns(js,n)),e.ipv4=n=>e.check(is(zs,n)),e.ipv6=n=>e.check(os(Ls,n)),e.cidrv4=n=>e.check(as(Us,n)),e.cidrv6=n=>e.check(ss(Fs,n)),e.e164=n=>e.check(ls(Vs,n)),e.datetime=n=>e.check(zp(n)),e.date=n=>e.check(Lp(n)),e.time=n=>e.check(Up(n)),e.duration=n=>e.check(Fp(n))});function Fi(e){return gm(Rn,e)}var W=f("ZodStringFormat",(e,t)=>{G.init(e,t),Ns.init(e,t)}),Ps=f("ZodEmail",(e,t)=>{ad.init(e,t),W.init(e,t)});function Yy(e){return Wa(Ps,e)}var Bi=f("ZodGUID",(e,t)=>{id.init(e,t),W.init(e,t)});function Jy(e){return zi(Bi,e)}var Et=f("ZodUUID",(e,t)=>{od.init(e,t),W.init(e,t)});function qy(e){return Ka(Et,e)}function Qy(e){return Ha(Et,e)}function eS(e){return Xa(Et,e)}function tS(e){return Ya(Et,e)}var Wi=f("ZodURL",(e,t)=>{sd.init(e,t),W.init(e,t)});function rS(e){return Li(Wi,e)}function nS(e){return Li(Wi,{protocol:Ze.httpProtocol,hostname:Ze.domain,..._.normalizeParams(e)})}var Cs=f("ZodEmoji",(e,t)=>{cd.init(e,t),W.init(e,t)});function iS(e){return Ja(Cs,e)}var ks=f("ZodNanoID",(e,t)=>{ud.init(e,t),W.init(e,t)});function oS(e){return qa(ks,e)}var Os=f("ZodCUID",(e,t)=>{ld.init(e,t),W.init(e,t)});function aS(e){return Qa(Os,e)}var Ds=f("ZodCUID2",(e,t)=>{dd.init(e,t),W.init(e,t)});function sS(e){return es(Ds,e)}var ws=f("ZodULID",(e,t)=>{md.init(e,t),W.init(e,t)});function cS(e){return ts(ws,e)}var Ms=f("ZodXID",(e,t)=>{pd.init(e,t),W.init(e,t)});function uS(e){return rs(Ms,e)}var js=f("ZodKSUID",(e,t)=>{fd.init(e,t),W.init(e,t)});function lS(e){return ns(js,e)}var zs=f("ZodIPv4",(e,t)=>{yd.init(e,t),W.init(e,t)});function dS(e){return is(zs,e)}var ef=f("ZodMAC",(e,t)=>{_d.init(e,t),W.init(e,t)});function mS(e){return hm(ef,e)}var Ls=f("ZodIPv6",(e,t)=>{Sd.init(e,t),W.init(e,t)});function pS(e){return os(Ls,e)}var Us=f("ZodCIDRv4",(e,t)=>{Ed.init(e,t),W.init(e,t)});function fS(e){return as(Us,e)}var Fs=f("ZodCIDRv6",(e,t)=>{Ad.init(e,t),W.init(e,t)});function gS(e){return ss(Fs,e)}var Bs=f("ZodBase64",(e,t)=>{Id.init(e,t),W.init(e,t)});function vS(e){return cs(Bs,e)}var Zs=f("ZodBase64URL",(e,t)=>{$d.init(e,t),W.init(e,t)});function hS(e){return us(Zs,e)}var Vs=f("ZodE164",(e,t)=>{Td.init(e,t),W.init(e,t)});function bS(e){return ls(Vs,e)}var Gs=f("ZodJWT",(e,t)=>{Rd.init(e,t),W.init(e,t)});function yS(e){return ds(Gs,e)}var Nn=f("ZodCustomStringFormat",(e,t)=>{Nd.init(e,t),W.init(e,t)});function SS(e,t,n={}){return An(Nn,e,t,n)}function _S(e){return An(Nn,"hostname",Ze.hostname,e)}function ES(e){return An(Nn,"hex",Ze.hex,e)}function AS(e,t){let n=t?.enc??"hex",i=`${e}_${n}`,r=Ze[i];if(!r)throw new Error(`Unrecognized hash format: ${i}`);return An(Nn,i,r,t)}var Pn=f("ZodNumber",(e,t)=>{Ma.init(e,t),C.init(e,t),e._zod.processJSONSchema=(i,r,o)=>rp(e,i,r,o),Gi(e,"ZodNumber",{gt(i,r){return this.check(St(i,r))},gte(i,r){return this.check(Te(i,r))},min(i,r){return this.check(Te(i,r))},lt(i,r){return this.check(yt(i,r))},lte(i,r){return this.check(Ve(i,r))},max(i,r){return this.check(Ve(i,r))},int(i){return this.check(Ts(i))},safe(i){return this.check(Ts(i))},positive(i){return this.check(St(0,i))},nonnegative(i){return this.check(Te(0,i))},negative(i){return this.check(yt(0,i))},nonpositive(i){return this.check(Ve(0,i))},multipleOf(i,r){return this.check(Yt(i,r))},step(i,r){return this.check(Yt(i,r))},finite(){return this}});let n=e._zod.bag;e.minValue=Math.max(n.minimum??Number.NEGATIVE_INFINITY,n.exclusiveMinimum??Number.NEGATIVE_INFINITY)??null,e.maxValue=Math.min(n.maximum??Number.POSITIVE_INFINITY,n.exclusiveMaximum??Number.POSITIVE_INFINITY)??null,e.isInt=(n.format??"").includes("int")||Number.isSafeInteger(n.multipleOf??.5),e.isFinite=!0,e.format=n.format??null});function tf(e){return Am(Pn,e)}var Ar=f("ZodNumberFormat",(e,t)=>{Pd.init(e,t),Pn.init(e,t)});function Ts(e){return Im(Ar,e)}function xS(e){return $m(Ar,e)}function IS(e){return Tm(Ar,e)}function $S(e){return Rm(Ar,e)}function TS(e){return Nm(Ar,e)}var Cn=f("ZodBoolean",(e,t)=>{Oi.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,i,r)=>np(e,n,i,r)});function rf(e){return Pm(Cn,e)}var kn=f("ZodBigInt",(e,t)=>{ja.init(e,t),C.init(e,t),e._zod.processJSONSchema=(i,r,o)=>ip(e,i,r,o),e.gte=(i,r)=>e.check(Te(i,r)),e.min=(i,r)=>e.check(Te(i,r)),e.gt=(i,r)=>e.check(St(i,r)),e.gte=(i,r)=>e.check(Te(i,r)),e.min=(i,r)=>e.check(Te(i,r)),e.lt=(i,r)=>e.check(yt(i,r)),e.lte=(i,r)=>e.check(Ve(i,r)),e.max=(i,r)=>e.check(Ve(i,r)),e.positive=i=>e.check(St(BigInt(0),i)),e.negative=i=>e.check(yt(BigInt(0),i)),e.nonpositive=i=>e.check(Ve(BigInt(0),i)),e.nonnegative=i=>e.check(Te(BigInt(0),i)),e.multipleOf=(i,r)=>e.check(Yt(i,r));let n=e._zod.bag;e.minValue=n.minimum??null,e.maxValue=n.maximum??null,e.format=n.format??null});function RS(e){return km(kn,e)}var Ws=f("ZodBigIntFormat",(e,t)=>{Cd.init(e,t),kn.init(e,t)});function NS(e){return Dm(Ws,e)}function PS(e){return wm(Ws,e)}var nf=f("ZodSymbol",(e,t)=>{kd.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,i,r)=>op(e,n,i,r)});function CS(e){return Mm(nf,e)}var of=f("ZodUndefined",(e,t)=>{Od.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,i,r)=>sp(e,n,i,r)});function kS(e){return jm(of,e)}var af=f("ZodNull",(e,t)=>{Dd.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,i,r)=>ap(e,n,i,r)});function sf(e){return zm(af,e)}var cf=f("ZodAny",(e,t)=>{wd.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,i,r)=>lp(e,n,i,r)});function OS(){return Lm(cf)}var uf=f("ZodUnknown",(e,t)=>{Md.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,i,r)=>dp(e,n,i,r)});function Er(){return Um(uf)}var lf=f("ZodNever",(e,t)=>{jd.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,i,r)=>up(e,n,i,r)});function Ks(e){return Fm(lf,e)}var df=f("ZodVoid",(e,t)=>{zd.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,i,r)=>cp(e,n,i,r)});function DS(e){return Bm(df,e)}var Ki=f("ZodDate",(e,t)=>{Ld.init(e,t),C.init(e,t),e._zod.processJSONSchema=(i,r,o)=>mp(e,i,r,o),e.min=(i,r)=>e.check(Te(i,r)),e.max=(i,r)=>e.check(Ve(i,r));let n=e._zod.bag;e.minDate=n.minimum?new Date(n.minimum):null,e.maxDate=n.maximum?new Date(n.maximum):null});function wS(e){return Zm(Ki,e)}var mf=f("ZodArray",(e,t)=>{Ud.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,i,r)=>xp(e,n,i,r),e.element=t.element,Gi(e,"ZodArray",{min(n,i){return this.check(Dt(n,i))},nonempty(n){return this.check(Dt(1,n))},max(n,i){return this.check(Sr(n,i))},length(n,i){return this.check(_r(n,i))},unwrap(){return this.element}})});function Hi(e,t){return Wm(mf,e,t)}function MS(e){let t=e._zod.def.shape;return Xs(Object.keys(t))}var Xi=f("ZodObject",(e,t)=>{Fd.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,i,r)=>Ip(e,n,i,r),_.defineLazy(e,"shape",()=>t.shape),Gi(e,"ZodObject",{keyof(){return Xs(Object.keys(this._zod.def.shape))},catchall(n){return this.clone({...this._zod.def,catchall:n})},passthrough(){return this.clone({...this._zod.def,catchall:Er()})},loose(){return this.clone({...this._zod.def,catchall:Er()})},strict(){return this.clone({...this._zod.def,catchall:Ks()})},strip(){return this.clone({...this._zod.def,catchall:void 0})},extend(n){return _.extend(this,n)},safeExtend(n){return _.safeExtend(this,n)},merge(n){return _.merge(this,n)},pick(n){return _.pick(this,n)},omit(n){return _.omit(this,n)},partial(...n){return _.partial(Js,this,n[0])},required(...n){return _.required(qs,this,n[0])}})});function jS(e,t){let n={type:"object",shape:e??{},..._.normalizeParams(t)};return new Xi(n)}function zS(e,t){return new Xi({type:"object",shape:e,catchall:Ks(),..._.normalizeParams(t)})}function LS(e,t){return new Xi({type:"object",shape:e,catchall:Er(),..._.normalizeParams(t)})}var Yi=f("ZodUnion",(e,t)=>{Di.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,i,r)=>bs(e,n,i,r),e.options=t.options});function Hs(e,t){return new Yi({type:"union",options:e,..._.normalizeParams(t)})}var pf=f("ZodXor",(e,t)=>{Yi.init(e,t),Bd.init(e,t),e._zod.processJSONSchema=(n,i,r)=>bs(e,n,i,r),e.options=t.options});function US(e,t){return new pf({type:"union",options:e,inclusive:!1,..._.normalizeParams(t)})}var ff=f("ZodDiscriminatedUnion",(e,t)=>{Yi.init(e,t),Zd.init(e,t)});function FS(e,t,n){return new ff({type:"union",options:t,discriminator:e,..._.normalizeParams(n)})}var gf=f("ZodIntersection",(e,t)=>{Vd.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,i,r)=>$p(e,n,i,r)});function vf(e,t){return new gf({type:"intersection",left:e,right:t})}var hf=f("ZodTuple",(e,t)=>{za.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,i,r)=>Tp(e,n,i,r),e.rest=n=>e.clone({...e._zod.def,rest:n})});function bf(e,t,n){let i=t instanceof P,r=i?n:t,o=i?t:null;return new hf({type:"tuple",items:e,rest:o,..._.normalizeParams(r)})}var $n=f("ZodRecord",(e,t)=>{Gd.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,i,r)=>Rp(e,n,i,r),e.keyType=t.keyType,e.valueType=t.valueType});function yf(e,t,n){return!t||!t._zod?new $n({type:"record",keyType:Fi(),valueType:e,..._.normalizeParams(t)}):new $n({type:"record",keyType:e,valueType:t,..._.normalizeParams(n)})}function BS(e,t,n){let i=Ie(e);return i._zod.values=void 0,new $n({type:"record",keyType:i,valueType:t,..._.normalizeParams(n)})}function ZS(e,t,n){return new $n({type:"record",keyType:e,valueType:t,mode:"loose",..._.normalizeParams(n)})}var Sf=f("ZodMap",(e,t)=>{Wd.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,i,r)=>Ep(e,n,i,r),e.keyType=t.keyType,e.valueType=t.valueType,e.min=(...n)=>e.check(_t(...n)),e.nonempty=n=>e.check(_t(1,n)),e.max=(...n)=>e.check(Jt(...n)),e.size=(...n)=>e.check(yr(...n))});function VS(e,t,n){return new Sf({type:"map",keyType:e,valueType:t,..._.normalizeParams(n)})}var _f=f("ZodSet",(e,t)=>{Kd.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,i,r)=>Ap(e,n,i,r),e.min=(...n)=>e.check(_t(...n)),e.nonempty=n=>e.check(_t(1,n)),e.max=(...n)=>e.check(Jt(...n)),e.size=(...n)=>e.check(yr(...n))});function GS(e,t){return new _f({type:"set",valueType:e,..._.normalizeParams(t)})}var Tn=f("ZodEnum",(e,t)=>{Hd.init(e,t),C.init(e,t),e._zod.processJSONSchema=(i,r,o)=>pp(e,i,r,o),e.enum=t.entries,e.options=Object.values(t.entries);let n=new Set(Object.keys(t.entries));e.extract=(i,r)=>{let o={};for(let a of i)if(n.has(a))o[a]=t.entries[a];else throw new Error(`Key ${a} not found in enum`);return new Tn({...t,checks:[],..._.normalizeParams(r),entries:o})},e.exclude=(i,r)=>{let o={...t.entries};for(let a of i)if(n.has(a))delete o[a];else throw new Error(`Key ${a} not found in enum`);return new Tn({...t,checks:[],..._.normalizeParams(r),entries:o})}});function Xs(e,t){let n=Array.isArray(e)?Object.fromEntries(e.map(i=>[i,i])):e;return new Tn({type:"enum",entries:n,..._.normalizeParams(t)})}function WS(e,t){return new Tn({type:"enum",entries:e,..._.normalizeParams(t)})}var Ef=f("ZodLiteral",(e,t)=>{Xd.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,i,r)=>fp(e,n,i,r),e.values=new Set(t.values),Object.defineProperty(e,"value",{get(){if(t.values.length>1)throw new Error("This schema contains multiple valid literal values. Use `.values` instead.");return t.values[0]}})});function KS(e,t){return new Ef({type:"literal",values:Array.isArray(e)?e:[e],..._.normalizeParams(t)})}var Af=f("ZodFile",(e,t)=>{Yd.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,i,r)=>hp(e,n,i,r),e.min=(n,i)=>e.check(_t(n,i)),e.max=(n,i)=>e.check(Jt(n,i)),e.mime=(n,i)=>e.check(hn(Array.isArray(n)?n:[n],i))});function HS(e){return Km(Af,e)}var xf=f("ZodTransform",(e,t)=>{Jd.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,i,r)=>_p(e,n,i,r),e._zod.parse=(n,i)=>{if(i.direction==="backward")throw new Gt(e.constructor.name);n.addIssue=o=>{if(typeof o=="string")n.issues.push(_.issue(o,n.value,t));else{let a=o;a.fatal&&(a.continue=!1),a.code??(a.code="custom"),a.input??(a.input=n.value),a.inst??(a.inst=e),n.issues.push(_.issue(a))}};let r=t.transform(n.value,n);return r instanceof Promise?r.then(o=>(n.value=o,n.fallback=!0,n)):(n.value=r,n.fallback=!0,n)}});function Ys(e){return new xf({type:"transform",transform:e})}var Js=f("ZodOptional",(e,t)=>{La.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,i,r)=>ys(e,n,i,r),e.unwrap=()=>e._zod.def.innerType});function Zi(e){return new Js({type:"optional",innerType:e})}var If=f("ZodExactOptional",(e,t)=>{qd.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,i,r)=>ys(e,n,i,r),e.unwrap=()=>e._zod.def.innerType});function $f(e){return new If({type:"optional",innerType:e})}var Tf=f("ZodNullable",(e,t)=>{Qd.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,i,r)=>Np(e,n,i,r),e.unwrap=()=>e._zod.def.innerType});function Vi(e){return new Tf({type:"nullable",innerType:e})}function XS(e){return Zi(Vi(e))}var Rf=f("ZodDefault",(e,t)=>{em.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,i,r)=>Cp(e,n,i,r),e.unwrap=()=>e._zod.def.innerType,e.removeDefault=e.unwrap});function Nf(e,t){return new Rf({type:"default",innerType:e,get defaultValue(){return typeof t=="function"?t():_.shallowClone(t)}})}var Pf=f("ZodPrefault",(e,t)=>{tm.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,i,r)=>kp(e,n,i,r),e.unwrap=()=>e._zod.def.innerType});function Cf(e,t){return new Pf({type:"prefault",innerType:e,get defaultValue(){return typeof t=="function"?t():_.shallowClone(t)}})}var qs=f("ZodNonOptional",(e,t)=>{rm.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,i,r)=>Pp(e,n,i,r),e.unwrap=()=>e._zod.def.innerType});function kf(e,t){return new qs({type:"nonoptional",innerType:e,..._.normalizeParams(t)})}var Of=f("ZodSuccess",(e,t)=>{nm.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,i,r)=>bp(e,n,i,r),e.unwrap=()=>e._zod.def.innerType});function YS(e){return new Of({type:"success",innerType:e})}var Df=f("ZodCatch",(e,t)=>{im.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,i,r)=>Op(e,n,i,r),e.unwrap=()=>e._zod.def.innerType,e.removeCatch=e.unwrap});function wf(e,t){return new Df({type:"catch",innerType:e,catchValue:typeof t=="function"?t:()=>t})}var Mf=f("ZodNaN",(e,t)=>{om.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,i,r)=>gp(e,n,i,r)});function JS(e){return Gm(Mf,e)}var Ji=f("ZodPipe",(e,t)=>{Ua.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,i,r)=>Dp(e,n,i,r),e.in=t.in,e.out=t.out});function Rs(e,t){return new Ji({type:"pipe",in:e,out:t})}var qi=f("ZodCodec",(e,t)=>{Ji.init(e,t),wi.init(e,t)});function qS(e,t,n){return new qi({type:"pipe",in:e,out:t,transform:n.decode,reverseTransform:n.encode})}function QS(e){let t=e._zod.def;return new qi({type:"pipe",in:t.out,out:t.in,transform:t.reverseTransform,reverseTransform:t.transform})}var jf=f("ZodPreprocess",(e,t)=>{Ji.init(e,t),am.init(e,t)}),zf=f("ZodReadonly",(e,t)=>{sm.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,i,r)=>wp(e,n,i,r),e.unwrap=()=>e._zod.def.innerType});function Lf(e){return new zf({type:"readonly",innerType:e})}var Uf=f("ZodTemplateLiteral",(e,t)=>{cm.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,i,r)=>vp(e,n,i,r)});function e_(e,t){return new Uf({type:"template_literal",parts:e,..._.normalizeParams(t)})}var Ff=f("ZodLazy",(e,t)=>{dm.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,i,r)=>jp(e,n,i,r),e.unwrap=()=>e._zod.def.getter()});function Bf(e){return new Ff({type:"lazy",getter:e})}var Zf=f("ZodPromise",(e,t)=>{lm.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,i,r)=>Mp(e,n,i,r),e.unwrap=()=>e._zod.def.innerType});function t_(e){return new Zf({type:"promise",innerType:e})}var Vf=f("ZodFunction",(e,t)=>{um.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,i,r)=>Sp(e,n,i,r)});function r_(e){return new Vf({type:"function",input:Array.isArray(e?.input)?bf(e?.input):e?.input??Hi(Er()),output:e?.output??Er()})}var Qi=f("ZodCustom",(e,t)=>{mm.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,i,r)=>yp(e,n,i,r)});function n_(e){let t=new H({check:"custom"});return t._zod.check=e,t}function i_(e,t){return Hm(Qi,e??(()=>!0),t)}function Gf(e,t={}){return Xm(Qi,e,t)}function Wf(e,t){return Ym(e,t)}var o_=Jm,a_=qm;function s_(e,t={}){let n=new Qi({type:"custom",check:"custom",fn:i=>i instanceof e,abort:!0,..._.normalizeParams(t)});return n._zod.bag.Class=e,n._zod.check=i=>{i.value instanceof e||i.issues.push({code:"invalid_type",expected:e.name,input:i.value,inst:n,path:[...n._zod.def.path??[]]})},n}var c_=(...e)=>Qm({Codec:qi,Boolean:Cn,String:Rn},...e);function u_(e){let t=Bf(()=>Hs([Fi(e),tf(),rf(),sf(),Hi(t),yf(Fi(),t)]));return t}function l_(e,t){return new jf({type:"pipe",in:Ys(e),out:t})}var z0={invalid_type:"invalid_type",too_big:"too_big",too_small:"too_small",invalid_format:"invalid_format",not_multiple_of:"not_multiple_of",unrecognized_keys:"unrecognized_keys",invalid_union:"invalid_union",invalid_key:"invalid_key",invalid_element:"invalid_element",invalid_value:"invalid_value",custom:"custom"};function L0(e){re({customError:e})}function U0(){return re().customError}var Kf;Kf||(Kf={});var A={...Ui,...Es,iso:In},F0=new Set(["$schema","$ref","$defs","definitions","$id","id","$comment","$anchor","$vocabulary","$dynamicRef","$dynamicAnchor","type","enum","const","anyOf","oneOf","allOf","not","properties","required","additionalProperties","patternProperties","propertyNames","minProperties","maxProperties","items","prefixItems","additionalItems","minItems","maxItems","uniqueItems","contains","minContains","maxContains","minLength","maxLength","pattern","format","minimum","maximum","exclusiveMinimum","exclusiveMaximum","multipleOf","description","default","contentEncoding","contentMediaType","contentSchema","unevaluatedItems","unevaluatedProperties","if","then","else","dependentSchemas","dependentRequired","nullable","readOnly"]);function B0(e,t){let n=e.$schema;return n==="https://json-schema.org/draft/2020-12/schema"?"draft-2020-12":n==="http://json-schema.org/draft-07/schema#"?"draft-7":n==="http://json-schema.org/draft-04/schema#"?"draft-4":t??"draft-2020-12"}function Z0(e,t){if(!e.startsWith("#"))throw new Error("External $ref is not supported, only local refs (#/...) are allowed");let n=e.slice(1).split("/").filter(Boolean);if(n.length===0)return t.rootSchema;let i=t.version==="draft-2020-12"?"$defs":"definitions";if(n[0]===i){let r=n[1];if(!r||!t.defs[r])throw new Error(`Reference not found: ${e}`);return t.defs[r]}throw new Error(`Reference not found: ${e}`)}function d_(e,t){if(e.not!==void 0){if(typeof e.not=="object"&&Object.keys(e.not).length===0)return A.never();throw new Error("not is not supported in Zod (except { not: {} } for never)")}if(e.unevaluatedItems!==void 0)throw new Error("unevaluatedItems is not supported");if(e.unevaluatedProperties!==void 0)throw new Error("unevaluatedProperties is not supported");if(e.if!==void 0||e.then!==void 0||e.else!==void 0)throw new Error("Conditional schemas (if/then/else) are not supported");if(e.dependentSchemas!==void 0||e.dependentRequired!==void 0)throw new Error("dependentSchemas and dependentRequired are not supported");if(e.$ref){let r=e.$ref;if(t.refs.has(r))return t.refs.get(r);if(t.processing.has(r))return A.lazy(()=>{if(!t.refs.has(r))throw new Error(`Circular reference not resolved: ${r}`);return t.refs.get(r)});t.processing.add(r);let o=Z0(r,t),a=Se(o,t);return t.refs.set(r,a),t.processing.delete(r),a}if(e.enum!==void 0){let r=e.enum;if(t.version==="openapi-3.0"&&e.nullable===!0&&r.length===1&&r[0]===null)return A.null();if(r.length===0)return A.never();if(r.length===1)return A.literal(r[0]);if(r.every(a=>typeof a=="string"))return A.enum(r);let o=r.map(a=>A.literal(a));return o.length<2?o[0]:A.union([o[0],o[1],...o.slice(2)])}if(e.const!==void 0)return A.literal(e.const);let n=e.type;if(Array.isArray(n)){let r=n.map(o=>{let a={...e,type:o};return d_(a,t)});return r.length===0?A.never():r.length===1?r[0]:A.union(r)}if(!n)return A.any();let i;switch(n){case"string":{let r=A.string();if(e.format){let o=e.format;o==="email"?r=r.check(A.email()):o==="uri"||o==="uri-reference"?r=r.check(A.url()):o==="uuid"||o==="guid"?r=r.check(A.uuid()):o==="date-time"?r=r.check(A.iso.datetime()):o==="date"?r=r.check(A.iso.date()):o==="time"?r=r.check(A.iso.time()):o==="duration"?r=r.check(A.iso.duration()):o==="ipv4"?r=r.check(A.ipv4()):o==="ipv6"?r=r.check(A.ipv6()):o==="mac"?r=r.check(A.mac()):o==="cidr"?r=r.check(A.cidrv4()):o==="cidr-v6"?r=r.check(A.cidrv6()):o==="base64"?r=r.check(A.base64()):o==="base64url"?r=r.check(A.base64url()):o==="e164"?r=r.check(A.e164()):o==="jwt"?r=r.check(A.jwt()):o==="emoji"?r=r.check(A.emoji()):o==="nanoid"?r=r.check(A.nanoid()):o==="cuid"?r=r.check(A.cuid()):o==="cuid2"?r=r.check(A.cuid2()):o==="ulid"?r=r.check(A.ulid()):o==="xid"?r=r.check(A.xid()):o==="ksuid"&&(r=r.check(A.ksuid()))}typeof e.minLength=="number"&&(r=r.min(e.minLength)),typeof e.maxLength=="number"&&(r=r.max(e.maxLength)),e.pattern&&(r=r.regex(new RegExp(e.pattern))),i=r;break}case"number":case"integer":{let r=n==="integer"?A.number().int():A.number();typeof e.minimum=="number"&&(r=r.min(e.minimum)),typeof e.maximum=="number"&&(r=r.max(e.maximum)),typeof e.exclusiveMinimum=="number"?r=r.gt(e.exclusiveMinimum):e.exclusiveMinimum===!0&&typeof e.minimum=="number"&&(r=r.gt(e.minimum)),typeof e.exclusiveMaximum=="number"?r=r.lt(e.exclusiveMaximum):e.exclusiveMaximum===!0&&typeof e.maximum=="number"&&(r=r.lt(e.maximum)),typeof e.multipleOf=="number"&&(r=r.multipleOf(e.multipleOf)),i=r;break}case"boolean":{i=A.boolean();break}case"null":{i=A.null();break}case"object":{let r={},o=e.properties||{},a=new Set(e.required||[]);for(let[u,l]of Object.entries(o)){let m=Se(l,t);r[u]=a.has(u)?m:m.optional()}if(e.propertyNames){let u=Se(e.propertyNames,t),l=e.additionalProperties&&typeof e.additionalProperties=="object"?Se(e.additionalProperties,t):A.any();if(Object.keys(r).length===0){i=A.record(u,l);break}let m=A.object(r).passthrough(),p=A.looseRecord(u,l);i=A.intersection(m,p);break}if(e.patternProperties){let u=e.patternProperties,l=Object.keys(u),m=[];for(let g of l){let h=Se(u[g],t),x=A.string().regex(new RegExp(g));m.push(A.looseRecord(x,h))}let p=[];if(Object.keys(r).length>0&&p.push(A.object(r).passthrough()),p.push(...m),p.length===0)i=A.object({}).passthrough();else if(p.length===1)i=p[0];else{let g=A.intersection(p[0],p[1]);for(let h=2;h<p.length;h++)g=A.intersection(g,p[h]);i=g}break}let c=A.object(r);e.additionalProperties===!1?i=c.strict():typeof e.additionalProperties=="object"?i=c.catchall(Se(e.additionalProperties,t)):i=c.passthrough();break}case"array":{let r=e.prefixItems,o=e.items;if(r&&Array.isArray(r)){let a=r.map(u=>Se(u,t)),c=o&&typeof o=="object"&&!Array.isArray(o)?Se(o,t):void 0;c?i=A.tuple(a).rest(c):i=A.tuple(a),typeof e.minItems=="number"&&(i=i.check(A.minLength(e.minItems))),typeof e.maxItems=="number"&&(i=i.check(A.maxLength(e.maxItems)))}else if(Array.isArray(o)){let a=o.map(u=>Se(u,t)),c=e.additionalItems&&typeof e.additionalItems=="object"?Se(e.additionalItems,t):void 0;c?i=A.tuple(a).rest(c):i=A.tuple(a),typeof e.minItems=="number"&&(i=i.check(A.minLength(e.minItems))),typeof e.maxItems=="number"&&(i=i.check(A.maxLength(e.maxItems)))}else if(o!==void 0){let a=Se(o,t),c=A.array(a);typeof e.minItems=="number"&&(c=c.min(e.minItems)),typeof e.maxItems=="number"&&(c=c.max(e.maxItems)),i=c}else i=A.array(A.any());break}default:throw new Error(`Unsupported type: ${n}`)}return i}function Se(e,t){if(typeof e=="boolean")return e?A.any():A.never();let n=d_(e,t),i=e.type||e.enum!==void 0||e.const!==void 0;if(e.anyOf&&Array.isArray(e.anyOf)){let c=e.anyOf.map(l=>Se(l,t)),u=A.union(c);n=i?A.intersection(n,u):u}if(e.oneOf&&Array.isArray(e.oneOf)){let c=e.oneOf.map(l=>Se(l,t)),u=A.xor(c);n=i?A.intersection(n,u):u}if(e.allOf&&Array.isArray(e.allOf))if(e.allOf.length===0)n=i?n:A.any();else{let c=i?n:Se(e.allOf[0],t),u=i?0:1;for(let l=u;l<e.allOf.length;l++)c=A.intersection(c,Se(e.allOf[l],t));n=c}e.nullable===!0&&t.version==="openapi-3.0"&&(n=A.nullable(n)),e.readOnly===!0&&(n=A.readonly(n)),e.default!==void 0&&(n=n.default(e.default));let r={},o=["$id","id","$comment","$anchor","$vocabulary","$dynamicRef","$dynamicAnchor"];for(let c of o)c in e&&(r[c]=e[c]);let a=["contentEncoding","contentMediaType","contentSchema"];for(let c of a)c in e&&(r[c]=e[c]);for(let c of Object.keys(e))F0.has(c)||(r[c]=e[c]);return Object.keys(r).length>0&&t.registry.add(n,r),e.description&&(n=n.describe(e.description)),n}function m_(e,t){if(typeof e=="boolean")return e?A.any():A.never();let n;try{n=JSON.parse(JSON.stringify(e))}catch{throw new Error("fromJSONSchema input is not valid JSON (possibly cyclic); use $defs/$ref for recursive schemas")}let i=B0(n,t?.defaultTarget),r=n.$defs||n.definitions||{},o={version:i,defs:r,refs:new Map,processing:new Set,rootSchema:n,registry:t?.registry??ge};return Se(n,o)}var Hf={};vt(Hf,{bigint:()=>K0,boolean:()=>W0,date:()=>H0,number:()=>G0,string:()=>V0});function V0(e){return vm(Rn,e)}function G0(e){return xm(Pn,e)}function W0(e){return Cm(Cn,e)}function K0(e){return Om(kn,e)}function H0(e){return Vm(Ki,e)}re(Fa());var X0=Object.defineProperty,On=(e,t)=>X0(e,"name",{value:t,configurable:!0}),Xf=["production","staging","development","platform","compliance"],p_={production:"Production",staging:"Staging",development:"Development",platform:"Platform",compliance:"Compliance"},Y0=new Set(Xf);function ec(e){return Y0.has(e)}On(ec,"isAccountStage");var eo={ROOT:"root",PLATFORM:"platform"},J0=[...Xf,eo.ROOT];function f_(e){return ec(e)?p_[e]:e.charAt(0).toUpperCase()+e.slice(1)}On(f_,"getEnvironmentLabel");var g_=["organisation","platform","account"],q0=s.enum(g_),Qs={ORGANISATION:"organisation",PLATFORM:"platform",ACCOUNT:"account"},Q0={[Qs.ORGANISATION]:!0,[Qs.PLATFORM]:!0,[Qs.ACCOUNT]:!0},eP=new Set(Object.keys(Q0));function v_(e){return eP.has(e)}On(v_,"isAccountTier");function Yf(e){return e===eo.ROOT?"organisation":e===eo.PLATFORM?"platform":"account"}On(Yf,"environmentToTier");function h_(e){return e==null||e===""||e===eo.ROOT?null:ec(e)?e:null}On(h_,"stageFromWireEnvironment");function to(e){return e.tier??Yf(e.environment)}On(to,"accountTier");var tP=Object.defineProperty,ro=(e,t)=>tP(e,"name",{value:t,configurable:!0});var b_=Object.freeze({"AWS::IAM::Role":"security","AWS::IAM::Policy":"security","AWS::IAM::OIDCProvider":"security","AWS::EC2::SecurityGroup":"security","AWS::KMS::Key":"security","AWS::KMS::Alias":"security","AWS::EC2::VPC":"network","AWS::EC2::Subnet":"network","AWS::EC2::InternetGateway":"network","AWS::EC2::NatGateway":"network","AWS::EC2::RouteTable":"network","AWS::EC2::Route":"network","AWS::EC2::VPCGatewayAttachment":"network","AWS::EC2::SubnetRouteTableAssociation":"network","AWS::EC2::EIP":"network","AWS::ECS::Cluster":"compute","AWS::ECS::Service":"compute","AWS::ECS::TaskDefinition":"compute","AWS::Lambda::Function":"compute","AWS::ElasticLoadBalancingV2::LoadBalancer":"compute","AWS::ElasticLoadBalancingV2::TargetGroup":"compute","AWS::ElasticLoadBalancingV2::Listener":"compute","AWS::ElasticLoadBalancingV2::ListenerRule":"compute","AWS::RDS::DBInstance":"database","AWS::RDS::DBCluster":"database","AWS::SecretsManager::Secret":"database","AWS::S3::Bucket":"storage","AWS::S3::BucketPolicy":"storage","AWS::CloudTrail::Trail":"monitoring","AWS::CloudWatch::Alarm":"monitoring","AWS::Logs::LogGroup":"monitoring","AWS::Events::EventBus":"events","AWS::Events::Rule":"events","AWS::ECR::Repository":"registry","AWS::CodeBuild::Project":"registry","AWS::Route53::RecordSet":"dns","AWS::CertificateManager::Certificate":"dns","AWS::CloudFront::Distribution":"dns","AWS::Backup::BackupVault":"backup","AWS::Backup::BackupPlan":"backup","AWS::Backup::BackupSelection":"backup","AWS::SSO::PermissionSet":"identity","AWS::SSO::Assignment":"identity","AWS::Organizations::Account":"identity","AWS::CDK::Metadata":"compute","AWS::CloudFormation::CustomResource":"compute","AWS::CloudFormation::WaitCondition":"compute","AWS::CloudFormation::WaitConditionHandle":"compute"}),Jf=new Set;function y_(e){if(!e)return"compute";if(e.startsWith("Custom::"))return b_[e]??"compute";let t=b_[e];return t||Jf.add(e),t??"compute"}ro(y_,"categoriseResource");function rP(){return new Set(Jf)}ro(rP,"getUnmappedResourceTypes");function nP(){Jf.clear()}ro(nP,"clearUnmappedResourceTypes");var iP=Object.freeze({"AWS::EC2::NatGateway":120,"AWS::RDS::DBInstance":300,"AWS::RDS::DBCluster":300,"AWS::CloudFront::Distribution":300,"AWS::ECS::Service":180,"AWS::ElasticLoadBalancingV2::LoadBalancer":60,"AWS::EC2::SecurityGroup":10,"AWS::IAM::Role":15,"AWS::IAM::Policy":15,"AWS::IAM::OIDCProvider":10,"AWS::S3::Bucket":10,"AWS::S3::BucketPolicy":5,"AWS::Lambda::Function":30,"AWS::EC2::VPC":15,"AWS::EC2::Subnet":15,"AWS::EC2::InternetGateway":10,"AWS::EC2::RouteTable":5,"AWS::EC2::Route":5,"AWS::EC2::VPCGatewayAttachment":10,"AWS::EC2::SubnetRouteTableAssociation":5,"AWS::EC2::EIP":10,"AWS::ECS::Cluster":15,"AWS::ECS::TaskDefinition":10,"AWS::ElasticLoadBalancingV2::TargetGroup":10,"AWS::ElasticLoadBalancingV2::Listener":10,"AWS::ElasticLoadBalancingV2::ListenerRule":5,"AWS::SecretsManager::Secret":10,"AWS::Logs::LogGroup":5,"AWS::CloudWatch::Alarm":10,"AWS::CloudTrail::Trail":15,"AWS::Events::EventBus":5,"AWS::Events::Rule":5,"AWS::ECR::Repository":10,"AWS::Route53::RecordSet":30,"AWS::CertificateManager::Certificate":60,"AWS::KMS::Key":15,"AWS::KMS::Alias":5,"AWS::Backup::BackupVault":10,"AWS::Backup::BackupPlan":10,"AWS::Backup::BackupSelection":10,"AWS::SSO::PermissionSet":15,"AWS::SSO::Assignment":10,"AWS::Organizations::Account":60}),oP=30;function S_(e){return iP[e]??oP}ro(S_,"getExpectedDuration");var aP=Object.freeze({"AWS::Lambda::Function":"Lambda Function","AWS::IAM::Role":"IAM Role","AWS::IAM::Policy":"IAM Policy","AWS::S3::Bucket":"S3 Bucket","AWS::DynamoDB::Table":"DynamoDB Table","AWS::EC2::Instance":"EC2 Instance","AWS::EC2::SecurityGroup":"Security Group","AWS::EC2::VPC":"VPC","AWS::EC2::Subnet":"Subnet","AWS::EC2::InternetGateway":"Internet Gateway","AWS::EC2::RouteTable":"Route Table","AWS::EC2::Route":"Route","AWS::ECS::Cluster":"ECS Cluster","AWS::ECS::Service":"ECS Service","AWS::ECS::TaskDefinition":"Task Definition","AWS::ElasticLoadBalancingV2::LoadBalancer":"Load Balancer","AWS::ElasticLoadBalancingV2::TargetGroup":"Target Group","AWS::ElasticLoadBalancingV2::Listener":"Listener","AWS::CloudFormation::Stack":"CloudFormation Stack","AWS::CDK::Metadata":"CDK Metadata","Custom::CDKBucketDeployment":"Bucket Deployment","AWS::SSM::Parameter":"SSM Parameter","AWS::CloudWatch::Alarm":"CloudWatch Alarm","AWS::Logs::LogGroup":"Log Group","AWS::ApiGateway::RestApi":"API Gateway","AWS::ApiGateway::Deployment":"API Deployment","AWS::ApiGateway::Stage":"API Stage","AWS::ApiGateway::Method":"API Method","AWS::ApiGateway::Resource":"API Resource","AWS::CloudFront::Distribution":"CloudFront Distribution","AWS::Route53::RecordSet":"Route53 Record","AWS::RDS::DBInstance":"RDS Instance","AWS::RDS::DBCluster":"RDS Cluster","AWS::SQS::Queue":"SQS Queue","AWS::SNS::Topic":"SNS Topic","AWS::Events::Rule":"EventBridge Rule","AWS::StepFunctions::StateMachine":"Step Function","AWS::EC2::NatGateway":"NAT Gateway","AWS::EC2::EIP":"Elastic IP","AWS::EC2::VPCGatewayAttachment":"Gateway Attachment","AWS::EC2::SubnetRouteTableAssociation":"Route Association","AWS::CloudTrail::Trail":"CloudTrail","AWS::IAM::OIDCProvider":"OIDC Provider","AWS::Events::EventBus":"Event Bus","AWS::Backup::BackupVault":"Backup Vault","AWS::Backup::BackupPlan":"Backup Plan","AWS::Backup::BackupSelection":"Backup Selection","AWS::SecretsManager::Secret":"Secret","AWS::KMS::Key":"KMS Key","AWS::KMS::Alias":"KMS Alias","AWS::ECR::Repository":"ECR Repository","AWS::CertificateManager::Certificate":"Certificate","AWS::ElasticLoadBalancingV2::ListenerRule":"Listener Rule","AWS::EC2::IPAM":"IPAM","AWS::EC2::IPAMPool":"IPAM Pool","AWS::EC2::IPAMPoolCidr":"IPAM Pool CIDR","Custom::ram":"RAM","Custom::ipamDelegateAdmin":"IPAM Delegate Admin","Custom::CostAllocationTags":"Cost Allocation Tags","Custom::ActivateOrganisationsAccess":"Activate Organisations Access","Custom::Organizations_TagResource":"Organisations Tag Resource","AWS::CloudFormation::CustomResource":"Custom Resource","AWS::CloudFormation::WaitCondition":"Wait Condition","AWS::CloudFormation::WaitConditionHandle":"Wait Condition Handle","AWS::SSO::PermissionSet":"SSO Permission Set","AWS::SSO::Assignment":"SSO Assignment","AWS::Organizations::Account":"Organisations Account","AWS::S3::BucketPolicy":"S3 Bucket Policy","AWS::CodeBuild::Project":"CodeBuild Project"});function __(e){return aP[e]||e.split("::").pop()||e}ro(__,"getFriendlyResourceType");var sP=Object.defineProperty,cP=(e,t)=>sP(e,"name",{value:t,configurable:!0}),uP={"github.com":"github","gitlab.com":"gitlab","bitbucket.org":"bitbucket"},lP=/^https?:\/\/([^/]+)\/(.+?)\/([^/.]+?)(?:\.git)?$/,dP=/^git@([^:]+):(.+?)\/([^/.]+?)(?:\.git)?$/,mP=/^ssh:\/\/[^@]+@([^:/]+)(?::\d+)?\/(.+?)\/([^/.]+?)(?:\.git)?$/;function E_(e){if(!e)return null;let t=e.replace(/^(https?:\/\/)[^@]+@/,"$1"),n=t.match(lP)??t.match(dP)??e.match(mP);if(!n)return null;let[,i,r,o]=n;return!i||!r||!o?null:{provider:uP[i]??"other",owner:r,repo:o,host:i}}cP(E_,"parseGitRemoteUrl");var qf=["read","write","deploy","secrets:read","secrets:write","destroy","admin","applications:read","applications:deploy","deploy:oidc:mint"],A_={read:"user",write:"user",deploy:"user","secrets:read":"user","secrets:write":"user",destroy:"user",admin:"admin","applications:read":"user","applications:deploy":"user","deploy:oidc:mint":"machine"},pP=qf.filter(e=>A_[e]==="machine"),fP=qf.filter(e=>A_[e]==="user");var gP=Object.defineProperty,Dn=(e,t)=>gP(e,"name",{value:t,configurable:!0}),rc=/^[a-zA-Z_][a-zA-Z0-9._-]*$/,Qf="Secret name must start with a letter or underscore and contain only letters, numbers, underscores, hyphens, or periods",no=/^[a-zA-Z][a-zA-Z0-9._-]*$/,nc="Must start with a letter and contain only letters, numbers, periods, hyphens, or underscores";var tc=s.string().regex(no,nc),x_=s.object({app:tc.describe("Application name"),cluster:tc.optional().describe("Cluster name"),service:tc.optional().describe("Service name"),lambda:tc.optional().describe("Lambda function name")}).strict().refine(e=>!(e.service&&!e.cluster),{message:"Cluster is required when service is specified"}).refine(e=>!(e.lambda&&(e.cluster||e.service)),{message:"Lambda is mutually exclusive with cluster and service"}).refine(e=>e.cluster!=="lambda",{message:'The cluster name "lambda" is reserved for lambda-scoped parameter paths'});function eg(e){let t=[e.app];return e.lambda?t.push("lambda",e.lambda):(e.cluster&&t.push(e.cluster),e.service&&e.cluster&&t.push(e.service)),t}Dn(eg,"buildNamespaceParts");function tg(e,t){let n=eg(e);return t&&n.push(t),"/"+n.join("/")}Dn(tg,"buildParameterPath");function rg(e){let t=e.split("/").filter(Boolean);if(t.length<2)return null;let n=t[t.length-1]??"",i={app:t[0]??""};return t.length>=4&&t[1]==="lambda"?i.lambda=t[2]:t.length>=3&&(i.cluster=t[1],t.length>=4&&(i.service=t[2])),{namespace:i,name:n}}Dn(rg,"parseParameterPath");function I_(e){let t=rg(e);return t?x_.safeParse(t.namespace).success&&tg(t.namespace,t.name)===e:!1}Dn(I_,"isManageablePath");function $_(e){let t={};for(let n of e.split(`
|
|
69
69
|
`)){let i=n.trim();if(!i||i.startsWith("#"))continue;let r=i.replace(/^export\s+/,""),o=r.indexOf("=");if(o===-1)continue;let a=r.slice(0,o).trim();if(!rc.test(a))continue;let c=r.slice(o+1);c.length>=2&&c.startsWith('"')&&c.endsWith('"')?t[a]=c.slice(1,-1).replace(/\\([\\"$`nr])/g,(u,l)=>l==="n"?`
|
|
70
|
-
`:l==="r"?"\r":l):c.length>=2&&c.startsWith("'")&&c.endsWith("'")?t[a]=c.slice(1,-1):t[a]=c}return t}Dn($_,"parseDotEnv");function T_(e){return e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`").replace(/\n/g,"\\n").replace(/\r/g,"\\r")}Dn(T_,"escapeDotEnvValue");var R_=s.object({awsAccountId:s.string(),accountName:s.string().nullable(),status:s.string(),role:s.string(),roleArn:s.string(),environment:s.string().optional(),connectedAt:s.string()}),vP=s.object({accounts:s.array(R_)});var hP=Object.defineProperty,xr=(e,t)=>hP(e,"name",{value:t,configurable:!0});function ng(e){let t=[e.primaryRegion,...e.secondaryRegions??[],e.disasterRecoveryRegion].filter(n=>n!==void 0);return[...new Set(t)]}xr(ng,"deriveRegionsFromOrgConfig");function ig(e){return e.environment??to(e)}xr(ig,"environmentOrTier");function og(e,t){return`${e.toLowerCase()}-${qr(t)}`}xr(og,"generateTargetName");function ag(e,t){let n=[];for(let i of e){if(to(i)==="organisation")continue;let r=ig(i);for(let o of t)n.push({name:og(i.name,o),accountName:i.name,accountId:i.id,environment:r,region:o})}return n.sort((i,r)=>{let o=i.environment.localeCompare(r.environment);if(o!==0)return o;let a=i.accountName.localeCompare(r.accountName);return a!==0?a:i.region.localeCompare(r.region)})}xr(ag,"deriveTargets");function N_(e){return ag(e.providerAccounts,ng(e))}xr(N_,"deriveAllTargets");function bP(e,t){if(t.length===0)return e;let n=new Set([e.primaryRegion,e.disasterRecoveryRegion].filter(Boolean)),i=t.filter(r=>!n.has(r));return{...e,secondaryRegions:i.length>0?i:void 0}}xr(bP,"mergeSecondaryRegions");function P_(e,t){return e.find(n=>n.name===t)}xr(P_,"findTarget");var yP=Object.defineProperty,SP=(e,t)=>yP(e,"name",{value:t,configurable:!0});function C_(e,t){if(t!==void 0){if(t.trim()==="")throw new Error("buildAppConfigPath: container must be a non-empty string");return`${t}/fjall/${e}`}return`fjall/${e}`}SP(C_,"buildAppConfigPath");var _P=Object.defineProperty,wn=(e,t)=>_P(e,"name",{value:t,configurable:!0}),sg="infrastructure.ts",cg="fjall";function k_(e,t){let n=t?.excludedPathPrefixes,i=t?.excludedPathSegments,r=[];for(let o of e){if(!ug(o.path)||n&&D_(o.path,n)||i&&w_(o.path,i))continue;let a=lg(o.path);a!==null&&r.push({configPath:O_(o.path),boundaryPath:a})}return r}wn(k_,"findInfrastructurePaths");function ug(e){return e===sg||e.endsWith(`/${sg}`)}wn(ug,"isInfrastructureFile");function lg(e){let t=e.split("/");for(let n=0;n<t.length-1;n++)if(t[n]===cg)return t.slice(0,n+1).join("/");return null}wn(lg,"findBoundaryPath");function O_(e){return e.slice(0,-`/${sg}`.length)}wn(O_,"toConfigDir");function D_(e,t){for(let n of t)if(e.startsWith(n))return!0;return!1}wn(D_,"hasExcludedPrefix");function w_(e,t){let n=e.split("/");for(let i=0;i<n.length-1;i++)if(t.has(n[i]))return!0;return!1}wn(w_,"hasExcludedSegment");var EP=Object.defineProperty,dg=(e,t)=>EP(e,"name",{value:t,configurable:!0});function M_(e){if(e.length===0)return null;let t=[];for(let i of e){let r=j_(i.boundaryPath);if(r===null)return null;t.push(r)}let n=z_(t);return n.length===0?null:n.join("/")}dg(M_,"inferContainerFromCandidates");function j_(e){let t=e.split("/").filter(i=>i.length>0);if(t.length===0||t[t.length-1]!==cg)return null;let n=t.slice(0,t.length-1);return n.length===0?null:n}dg(j_,"extractContainer");function z_(e){if(e.length===0)return[];let[t,...n]=e,i=[];for(let r=0;r<t.length;r+=1){let o=t[r];for(let a of n)if(a[r]!==o)return i;i.push(o)}return i}dg(z_,"longestCommonPrefix");var AP=Object.defineProperty,L_=(e,t)=>AP(e,"name",{value:t,configurable:!0}),U_=["fjall","organisation","platform","account"];function F_(e){return U_.includes(e.toLowerCase())}L_(F_,"isReservedAppName");var B_="-cache";function Z_(e){return ht(e).endsWith(B_)}L_(Z_,"hasReservedAppNameSuffix");var xP=Object.defineProperty,mg=(e,t)=>xP(e,"name",{value:t,configurable:!0});function G_(e){return{success:!0,data:e}}mg(G_,"success");function io(e){return{success:!1,error:e}}mg(io,"failure");var V_="sha256:",ic=12,IP=new RegExp(`-sha-[0-9a-f]{${ic}}$`);function W_(e,t,n){if(!e.startsWith(V_))return io(new Error(`expected sha256:... digest, got ${e.slice(0,32)}`));let i=e.slice(V_.length);if(i.length<ic)return io(new Error(`digest hex payload too short (need >=${ic} chars, got ${i.length})`));let r=t.trim();if(r==="")return io(new Error("serviceName must be a non-empty string"));let o;if(n!==void 0){let u=n.trim();if(u==="")return io(new Error("target, when supplied, must be a non-empty string; omit the argument instead"));o=u.toLowerCase()}let a=i.slice(0,ic).toLowerCase(),c=o!==void 0?`${r.toLowerCase()}-${o}`:r.toLowerCase();return G_(`${c}-sha-${a}`)}mg(W_,"deriveContentHashTag");var $P=Object.defineProperty,TP=(e,t)=>$P(e,"name",{value:t,configurable:!0}),K_=["full","code-only","rollback","restart"],RP=s.enum(K_),H_=/^[a-zA-Z0-9._-]+$/,X_=s.string().min(1).max(128).regex(H_),Y_=s.object({serviceName:s.string().min(1),imageTag:X_,imageDigest:s.string().min(1).optional(),imageUri:s.string().min(1),ecrRepositoryArn:s.string().min(1).optional(),taskDefinitionArn:s.string().min(1).optional(),previousTaskDefinitionArn:s.string().min(1).optional(),functionArn:s.string().min(1).optional(),publishedVersion:s.string().min(1).optional()}).strict(),NP=s.array(Y_);function J_(e,t){return`${e}${t}`}TP(J_,"artefactOutputKey");var PP=Object.defineProperty,q_=(e,t)=>PP(e,"name",{value:t,configurable:!0}),At=["payload","nextjs","staticsite"],pg=new Set(At);function fg(e){return typeof e=="string"&&pg.has(e)}q_(fg,"isPatternType");var Mn={payload:{label:"Payload CMS",constructIdSuffix:"Payload",artefact:"opennext-lambda",stackPlacement:"compute",deployable:!0},nextjs:{label:"Next.js",constructIdSuffix:"Nextjs",artefact:"opennext-lambda",stackPlacement:"compute",deployable:!1},staticsite:{label:"Static site",constructIdSuffix:"StaticSite",artefact:"static-assets",stackPlacement:"cdn",deployable:!0}},Q_=At.filter(e=>Mn[e].deployable),gg=At.filter(e=>Mn[e].artefact==="opennext-lambda"),CP=new Set(gg);function vg(e){return e!=null&&CP.has(e)}q_(vg,"isOpenNextPatternType");var oo=["multipage","spa"];var kP=Object.defineProperty,hg=(e,t)=>kP(e,"name",{value:t,configurable:!0}),eE="noreply";function tE(e){return`${eE}@${e}`}hg(tE,"defaultFormsFromAddress");function rE(e){return`https://${e}`}hg(rE,"defaultFormsCorsOrigin");function oc(e,t){let n=e.split("@");if(n.length!==2)return!1;let[i,r]=n;return i===void 0||i===""||r===void 0?!1:r.toLowerCase()===t.toLowerCase()}hg(oc,"isAddressAtDomain");var nE=2;var OP=s.object({devDomain:s.string().min(1),hostedZoneId:s.string().min(1).optional(),parentDomain:s.string().min(1).optional(),parentDelegationRoleArn:s.string().min(1).optional()}).strict().superRefine((e,t)=>{if(e.hostedZoneId!==void 0){e.parentDomain!==void 0&&t.addIssue({code:"custom",path:["parentDomain"],message:"hostedZoneId (adopt mode) is mutually exclusive with parentDomain \u2014 the adopted zone was already delegated; omit parentDomain"}),e.parentDelegationRoleArn!==void 0&&t.addIssue({code:"custom",path:["parentDelegationRoleArn"],message:"hostedZoneId (adopt mode) is mutually exclusive with parentDelegationRoleArn \u2014 the adopted zone was already delegated; omit parentDelegationRoleArn"});return}e.parentDelegationRoleArn!==void 0&&e.parentDomain===void 0&&t.addIssue({code:"custom",path:["parentDomain"],message:"parentDelegationRoleArn requires parentDomain \u2014 set parentDomain to the parent zone the DelegationRole belongs to"}),e.parentDomain!==void 0&&!e.devDomain.endsWith(`.${e.parentDomain}`)&&t.addIssue({code:"custom",path:["parentDomain"],message:"parentDomain must be a proper DNS suffix of devDomain \u2014 devDomain must end with `.<parentDomain>`"})}),iE={appId:s.string().min(1),appKebab:s.string().min(1),engineVersion:s.string().min(1).optional(),adoptSlotEcr:s.boolean().optional(),phase:s.enum(["zone","full"]).optional(),domain:OP.optional()},DP=s.object(iE).strict(),wP=s.object({...iE,version:s.literal(nE),appName:s.string().min(1)}).strict().refine(e=>e.appName===`fjall-dev-${e.appKebab}`,{message:"appName must equal `fjall-dev-${appKebab}` (single-source identity)",path:["appName"]});var jP=Object.defineProperty,jn=(e,t)=>jP(e,"name",{value:t,configurable:!0});function bg(e){return e.success===!0}jn(bg,"isSuccess");function yg(e){return e.success===!1}jn(yg,"isFailure");function N(e){return{success:!0,data:e}}jn(N,"success");function I(e){return{success:!1,error:e}}jn(I,"failure");async function Sg(e){try{let t=await e();return N(t)}catch(t){return I(ct(t))}}jn(Sg,"tryAsync");function _g(e){try{let t=e();return N(t)}catch(t){return I(ct(t))}}jn(_g,"trySync");var zP=Object.defineProperty,LP=(e,t)=>zP(e,"name",{value:t,configurable:!0}),oE=/^[a-zA-Z][a-zA-Z0-9-]*$/,UP=no.source.replace(/^\^|\$$/g,""),j=Object.freeze({IDENTIFIER:oE,NEW_APP_NAME:/^[a-z][a-z0-9-]*$/,RESOURCE_NAME:/^[a-zA-Z][a-zA-Z0-9]*$/,ECS_SERVICE_NAME:oE,BUCKET_NAME:/^[a-z][a-z0-9-]*[a-z0-9]$|^[a-z][a-z0-9]*$/,DATABASE_NAME:/^[a-zA-Z][a-zA-Z0-9_]*$/,RESOURCE_TYPE:/^[a-z]+(:[a-z]+)?$/,SSM_PATH:new RegExp(`^(?:/${UP})+$`),SECRET_NAME:rc,SSM_COMPONENT:no,EMAIL:/^[^\s@]+@[^\s@]+\.[^\s@]+$/,DOCKER_IMAGE:/^[a-z0-9][a-z0-9._-]*[a-z0-9](:[a-z0-9._-]+)?$/,DOMAIN:/^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)+$/i,HTTP_ORIGIN:/^https?:\/\/[a-z0-9.-]+(:\d+)?$/i,PASCAL_CASE:/^[A-Z][A-Za-z0-9]*$/,AWS_ACCOUNT_ID:/^\d{12}$/,VPC_ID:/^vpc-[a-z0-9]+$/,ROLE_ARN:/^arn:aws[a-zA-Z-]*:iam::\d{12}:role\/.+$/,CIDR:/^((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\.){3}(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\/(3[0-2]|[12]?\d)$/,SCHEDULE_EXPRESSION:/^(rate\(1 (?:minute|hour|day)\)|rate\((?:[2-9]|[1-9]\d+) (?:minutes|hours|days)\)|cron\([^\s()]+ [^\s()]+ [^\s()]+ [^\s()]+ [^\s()]+ [^\s()]+\))$/,LAMBDA_RUNTIME_IDENTIFIER:/^[A-Za-z0-9._-]+$/,ENV_VAR_NAME:/^[A-Za-z_][A-Za-z0-9_]*$/});function Eg(e){let t=/^rate\((\d+) (minute|minutes|hour|hours|day|days)\)$/.exec(e);if(!t)return;let n=t[1],i=t[2];if(n===void 0||i===void 0)return;let r=parseInt(n,10);if(!Number.isFinite(r)||r<1)return;let o=i==="minute"||i==="hour"||i==="day";if(!(o&&r!==1)&&!(!o&&r===1))return i==="minute"||i==="minutes"?{everyMs:r*6e4}:i==="hour"||i==="hours"?{everyMs:r*60*6e4}:{everyMs:r*24*60*6e4}}LP(Eg,"parseRateExpression");var d=Object.freeze({IDENTIFIER:"Must start with a letter, contain only letters, numbers, and hyphens",NEW_APP_NAME:"Must start with a lowercase letter and contain only lowercase letters, numbers, and hyphens",IDENTIFIER_MIN_LENGTH:"Must be at least 2 characters",IDENTIFIER_NO_TRAILING_HYPHEN:"Must not end with a hyphen",IDENTIFIER_NO_CONSECUTIVE_HYPHENS:"Must not contain consecutive hyphens",RESOURCE_NAME:"Must start with a letter and contain only letters and numbers (PascalCase recommended)",ECS_SERVICE_NAME:"Service name must start with a letter and contain only letters, numbers, and hyphens",BUCKET_NAME:"Bucket name must start with a lowercase letter and contain only lowercase letters, numbers, and hyphens",DATABASE_NAME:"Database name must start with a letter and contain only letters, numbers, and underscores",RESOURCE_TYPE:"Resource type must be in format 'category' or 'category:type'",SSM_PATH:"SSM path must start with / and contain valid namespace segments (e.g., /myapp/ApiCluster/service)",SECRET_NAME:Qf,SSM_COMPONENT:nc,EMAIL:"Please enter a valid email address",DOMAIN:"Please enter a valid domain (e.g., cms.example.com)",DOCKER_IMAGE:"Invalid Docker image name format",REQUIRED:{APP_NAME:"Application name is required",RESOURCE_NAME:"Resource name is required",BUCKET_NAME:"Bucket name is required",SERVICE_NAME:"Service name is required",NETWORK_NAME:"Network name is required",DATABASE_NAME:"Database name is required",ORGANISATION_NAME:"Organisation name is required",EMAIL:"Email is required",NAME:"Name is required",USERNAME:"Username is required",CONTAINER_NAME:"Container name is required",GROUP:"Group is required",PATTERN_NAME:"Pattern name is required",SOURCE:"Source directory is required",BUILD_COMMAND:"Build command is required",OUTPUT_DIR:"Output directory is required",FORMS_TO:"Forms recipient address is required",ROUTING_PATH:"Routing path is required",RESOURCE_REFERENCE:"Resource reference is required",RESOURCE_TYPE:"Resource type is required",VARIANT:"Variant is required",SUBTYPE:"Subtype is required",DEPLOY_TARGET:"Deploy target is required",DESTROY_TARGET:"Destroy target is required"},MAX_LENGTH:{APP_NAME:"Application name must be 50 characters or less",RESOURCE_NAME:"Resource name must be 63 characters or less",BUCKET_NAME:"Bucket name must be 63 characters or less",SERVICE_NAME:"Service name must be 255 characters or less",NETWORK_NAME:"Network name must be 50 characters or less",DATABASE_NAME:"Database name must be 63 characters or less",ORGANISATION_NAME:"Organisation name must be 50 characters or less"},PORT:{INTEGER:"Port must be an integer",MIN:"Port must be at least 1",MAX:"Port cannot exceed 65535"},USERNAME:{MAX_LENGTH:"Username cannot exceed 63 characters"},LAMBDA:{MEMORY:{INTEGER:"Lambda memory must be an integer",MIN:"Memory must be at least 128 MB",MAX:"Memory cannot exceed 10240 MB",MULTIPLE:"Memory must be 128 MB or a multiple of 64 MB"},TIMEOUT:{INTEGER:"Timeout must be an integer",MIN:"Timeout must be at least 1 second",MAX:"Timeout cannot exceed 900 seconds"},RUNTIME:"Lambda runtime must contain only letters, digits, dots, underscores, or dashes (e.g. 'NODEJS_20_X' or 'nodejs20.x')"},ENV_VAR_NAME:"Environment variable names must start with a letter or underscore and contain only letters, digits, and underscores",PRIORITY:{INTEGER:"Priority must be an integer",MIN:"Priority must be at least 1",MAX:"Priority cannot exceed 50000"},CAPACITY:{MIN:{INTEGER:"Minimum capacity must be an integer",MIN_0:"Minimum capacity must be at least 0",MIN_1:"Minimum capacity must be at least 1",MAX:"Minimum capacity cannot exceed 100"},MAX:{INTEGER:"Maximum capacity must be an integer",MIN_0:"Maximum capacity must be at least 0",MIN_1:"Maximum capacity must be at least 1",MAX:"Maximum capacity cannot exceed 100"},DESIRED:{INTEGER:"Desired count must be an integer",MIN:"Desired count must be at least 0",MAX:"Desired count cannot exceed 100"},WARM_POOL_REQUIRED:"minCapacity 0 requires a warmPool \u2014 without it, new tasks wait 60-90s for a cold instance launch",WARM_POOL:{MIN_SIZE:{INTEGER:"Warm pool minSize must be an integer",MIN:"Warm pool minSize must be at least 0",MAX:"Warm pool minSize cannot exceed 100"},MIN_SIZE_EXCEEDS_MAX_CAPACITY:"warmPool.minSize cannot exceed maxCapacity \u2014 the warm pool cannot hold more instances than the ASG allows"}},MEMORY_LIMIT:{INTEGER:"Memory limit must be an integer",MIN_512:"Memory limit must be at least 512 MiB",MIN_128:"Memory limit must be at least 128 MiB",MAX:"Memory limit cannot exceed 30720 MiB"},DATABASE:{PORT:{INTEGER:"Database port must be an integer",MIN:"Database port must be at least 1024",MAX:"Database port cannot exceed 65535"},NAME:{REQUIRED:"Database name is required",MAX_LENGTH:"Database name must be 63 characters or less"}},BACKUP_RETENTION:{INTEGER:"Backup retention must be an integer",MIN:"Backup retention must be at least 1 day",MAX:"Backup retention cannot exceed 35 days"},SQS:{VISIBILITY_TIMEOUT:{INTEGER:"Visibility timeout must be an integer",MIN:"Visibility timeout must be at least 0 seconds",MAX:"Visibility timeout cannot exceed 43200 seconds (12 hours)"},RETENTION_PERIOD:{INTEGER:"Retention period must be an integer",MIN:"Retention period must be at least 60 seconds",MAX:"Retention period cannot exceed 1209600 seconds (14 days)"}},READER:{COUNT:{INTEGER:"Reader count must be an integer",MIN:"Reader count must be at least 0",MAX:"Reader count cannot exceed 15"}},IDENTIFIER_SUFFIX:{REQUIRED:"Identifier suffix is required when specified",MAX_LENGTH:"Identifier suffix cannot exceed 50 characters"},ROTATION:{INTEGER:"Rotation days must be an integer",MIN:"Rotation interval must be at least 1 day",MAX:"Rotation interval cannot exceed 365 days"},MAX_CONNECTIONS:{INTEGER:"Max connections must be an integer",MIN:"Max connections must be at least 1",MAX:"Max connections cannot exceed 100"},MONITORING_INTERVAL:{INTEGER:"Monitoring interval must be an integer",MIN:"Monitoring interval must be at least 0",MAX:"Monitoring interval cannot exceed 60 seconds",VALUES:"Monitoring interval must be 0, 1, 5, 10, 15, 30, or 60 seconds"},RETENTION_DAYS:{INTEGER:"Retention days must be an integer",MIN:"Retention days must be at least 1",MAX:"Retention days cannot exceed 365"},BATCH_SIZE:{INTEGER:"Batch size must be an integer",MIN:"Batch size must be at least 1",MAX:"Batch size cannot exceed 10000"},SERVICE:{UNIQUE_WITHIN_CLUSTER:"Service names must be unique within a cluster",MIN_REQUIRED:"At least one service is required",ROUTING_REQUIRED:"Multiple services with ports require routing config (path or host)"},PROXY_CONFIG:{MAX_IDLE_CONNECTIONS:{INTEGER:"Max idle connections must be an integer",MIN:"Max idle connections must be at least 0",MAX:"Max idle connections cannot exceed 100"},BORROW_TIMEOUT:{INTEGER:"Connection borrow timeout must be an integer",MIN:"Connection borrow timeout must be at least 1 second",MAX:"Connection borrow timeout cannot exceed 3600 seconds"}},MAX_AZS:{INTEGER:"Max AZs must be an integer",MIN:"Max AZs must be at least 1",MAX:"Max AZs cannot exceed 3"},BATCHING_WINDOW:{INTEGER:"Max batching window must be an integer",MIN:"Max batching window must be at least 0",MAX:"Max batching window cannot exceed 300 seconds"},HEALTH_CHECK:{INTERVAL:{INTEGER:"Health check interval must be an integer",MIN:"Health check interval must be at least 5 seconds",MAX:"Health check interval cannot exceed 300 seconds"},TIMEOUT:{INTEGER:"Health check timeout must be an integer",MIN:"Health check timeout must be at least 2 seconds",MAX:"Health check timeout cannot exceed 60 seconds"},RETRIES:{INTEGER:"Health check retries must be an integer",MIN:"Health check retries must be at least 1",MAX:"Health check retries cannot exceed 10"},START_PERIOD:{INTEGER:"Health check start period must be an integer",MIN:"Health check start period must be at least 0 seconds",MAX:"Health check start period cannot exceed 300 seconds"}},EPHEMERAL_STORAGE:{INTEGER:"Ephemeral storage size must be an integer",MIN:"Ephemeral storage size must be at least 512 MB",MAX:"Ephemeral storage size cannot exceed 10240 MB"},MAX_MESSAGE_SIZE:{INTEGER:"Max message size must be an integer",MIN:"Max message size must be at least 1024 bytes",MAX:"Max message size cannot exceed 262144 bytes (256 KB)"},CAPACITY_CONSTRAINT:{MIN_LTE_MAX:"minCapacity must be less than or equal to maxCapacity"},DIRECT_ACCESS:{NO_DOMAIN:"directAccess cannot be used with domain (no ALB for HTTPS)",NO_LOAD_BALANCER:"directAccess cannot be used with loadBalancer (mutually exclusive)"},GLOBAL_AURORA:{PRIMARY_REGION_REQUIRED:"primaryRegion is required for GlobalAurora databases"},NAT_GATEWAY:{INTEGER:"NAT gateway count must be an integer",MIN:"NAT gateway count must be at least 0",MAX:"NAT gateway count cannot exceed 3"},CIDR_MASK:{INTEGER:"CIDR mask must be an integer",MIN:"CIDR mask must be at least 16",MAX:"CIDR mask cannot exceed 28"},CPU:{INTEGER:"CPU must be an integer",MIN:"CPU must be at least 256 units",MAX:"CPU cannot exceed 4096 units"},KMS:{KEY_REQUIRED:"KMS key ARN is required when using KMS encryption"},READER_INSTANCES:{MAX:"Cannot have more than 15 reader instances",COUNT_OR_INSTANCES:"Cannot specify both 'count' and 'instances' - use one or the other"},GENERATOR_CAPACITY:{MIN:{MIN:"Minimum capacity must be at least 1",MAX:"Minimum capacity cannot exceed 1000"},MAX:{MIN:"Maximum capacity must be at least 1",MAX:"Maximum capacity cannot exceed 1000"}},INSTANCE_TYPE:"Unknown instance type. Common types include: t4g.micro, t4g.small, m5.large",ARCHITECTURE_MISMATCH:"Architecture mismatch between instance type and AMI",ALLOCATED_STORAGE:{INTEGER:"Allocated storage must be an integer",MIN:"Allocated storage must be at least 20 GB",MAX:"Allocated storage cannot exceed 65536 GB"},DLQ:{MAX_RECEIVE_COUNT:{INTEGER:"Max receive count must be an integer",MIN:"Max receive count must be at least 1",MAX:"Max receive count cannot exceed 1000"}},ALARM:{PERCENTAGE:{MIN:"Threshold must be at least 1%",MAX:"Threshold must be at most 100%"},FREE_STORAGE_GIB:{MIN:"Free storage threshold must be at least 1 GiB"}},REGION:"Invalid AWS region",PASCAL_CASE:"Resource name must start with an uppercase letter and contain only alphanumerics (PascalCase).",IMAGE_DOCKER_MUTEX:"image and docker are mutually exclusive",AWS_ACCOUNT_ID:"AWS account id must be exactly 12 digits (no hyphens)",VPC_ID:"VPC id must look like vpc-abc12345",ROLE_ARN:"Role ARN must have the form arn:aws:iam::<account-id>:role/<name>",CIDR:"CIDR must be in dotted-quad/prefix-length form (e.g. 10.0.0.0/16)",VPC_PEER:{MIN_REQUESTER_ACCOUNTS:"At least one requester account id is required",REGION_REQUIRED:"Peer region is required when specified",ROUTE_TABLE_ID_REQUIRED:"Route table id must not be empty"},SCHEDULE_EXPRESSION:"Schedule expression must be 'rate(N minute|minutes|hour|hours|day|days)' with N>=1, or 'cron(<6-field AWS expression>)'"});var FP=Object.defineProperty,qe=(e,t)=>FP(e,"name",{value:t,configurable:!0}),BP=["us-east-2","us-west-2","us-east-1","eu-west-1","eu-central-1","ap-southeast-1"],ZP=Object.freeze(BP.flatMap(e=>{let t=Jr(e);return t?[t]:[]})),Ag=Object.freeze(["us-east-2","us-west-2","us-east-1","eu-west-1","ap-southeast-1"]);function ac(e){return e?e.split(",").map(t=>t.trim()).filter(Boolean):[]}qe(ac,"parseRegionList");function xg(e){return kt.includes(e)}qe(xg,"isValidRegion");function Ig(e){return/^[a-z]{2}-[a-z]+-[1-9]$/.test(e)}qe(Ig,"isValidRegionFormat");function $g(e){if(!e)return Ag.slice(0,3);let t=e.toLowerCase().split("-"),n=t[0],i=t.length>1?t[1]:"",r=[];return n&&i&&(r=kt.filter(o=>o.startsWith(`${n}-${i}`))),r.length===0&&n&&(r=kt.filter(o=>o.startsWith(`${n}-`))),r.length>0?r.slice(0,3):Ag.slice(0,3)}qe($g,"getSuggestions");function Tg(e){if(xg(e))return!0;let t=$g(e);return Ig(e)?`Unknown region. Try: ${t.join(", ")}`:`Invalid format. Try: ${t.join(", ")}`}qe(Tg,"validateRegion");function aE(e){if(!e||e.trim()==="")return!0;let t=ac(e);for(let n of t){let i=Tg(n);if(i!==!0)return i}return!0}qe(aE,"validateRegionList");function Rg(e,t){return e.filter(n=>n!==t)}qe(Rg,"filterDuplicateRegions");function Ng(e){return{label:e.city,value:e.code,description:e.optIn?`${e.code} \u2014 opt-in required`:e.code}}qe(Ng,"toRegionOption");function sE(){return Ye.map(Ng)}qe(sE,"getRegionOptions");function cE(e){return Ye.filter(t=>t.code!==e).map(Ng)}qe(cE,"getRegionOptionsExcluding");function uE(e){let t=Ye.find(n=>n.code===e);return t?t.city:e}qe(uE,"getRegionName");function lE(e){return t=>{let n=ac(t);return Rg(n,e)}}qe(lE,"createRegionFormatter");var sc="3.8.0";var cc=["Aurora","Instance","GlobalAurora","ClickHouse"],zn=["FARGATE","FARGATE_SPOT","EC2"],dt=["standard","resilient","enterprise"],uc=["tinkerer","lightweight","standard","resilient","enterprise"],Pg="custom",ao=[...uc,Pg];var VP=Object.defineProperty,GP=(e,t)=>VP(e,"name",{value:t,configurable:!0}),CU=Object.freeze({RESOURCE_SUFFIXES:Object.freeze({storage:"Storage",database:"Database",cluster:"Cluster",function:"Function",instance:"Instance",compute:"Compute"})}),so=["ecs","lambda","ec2"],Ln=Object.freeze({ECS:"ecs",LAMBDA:"lambda",EC2:"ec2"}),lc=["code","container"],co=Object.freeze({CODE:"code",CONTAINER:"container"}),dc=["ARM_64","X86_64"],dE="ARM_64",uo=["NONE","AWS_IAM"],mc=["public","internal"],pc=["CPU","MEMORY"],fc=["ARM","STANDARD"],Cg=["Instance","Aurora"],Un=["postgresql","mysql"],mE=["foundation","compliance","hardened"];var gc=["t3.nano","t3.micro","t3.small","t3.medium","t3.large","t3.xlarge","t3.2xlarge","t3a.nano","t3a.micro","t3a.small","t3a.medium","t3a.large","t3a.xlarge","t3a.2xlarge","t4g.nano","t4g.micro","t4g.small","t4g.medium","t4g.large","t4g.xlarge","t4g.2xlarge","c5.large","c5.xlarge","c5.2xlarge","c5.4xlarge","c5.9xlarge","c5.12xlarge","c5.18xlarge","c5.24xlarge","c5a.large","c5a.xlarge","c5a.2xlarge","c5a.4xlarge","c5a.8xlarge","c5a.12xlarge","c5a.16xlarge","c5a.24xlarge","c6g.medium","c6g.large","c6g.xlarge","c6g.2xlarge","c6g.4xlarge","c6g.8xlarge","c6g.12xlarge","c6g.16xlarge","r5.large","r5.xlarge","r5.2xlarge","r5.4xlarge","r5.8xlarge","r5.12xlarge","r5.16xlarge","r5.24xlarge","r5a.large","r5a.xlarge","r5a.2xlarge","r5a.4xlarge","r5a.8xlarge","r5a.12xlarge","r5a.16xlarge","r5a.24xlarge","r6g.medium","r6g.large","r6g.xlarge","r6g.2xlarge","r6g.4xlarge","r6g.8xlarge","r6g.12xlarge","r6g.16xlarge","i3.large","i3.xlarge","i3.2xlarge","i3.4xlarge","i3.8xlarge","i3.16xlarge","p3.2xlarge","p3.8xlarge","p3.16xlarge","g4dn.xlarge","g4dn.2xlarge","g4dn.4xlarge","g4dn.8xlarge","g4dn.12xlarge","g4dn.16xlarge","m5.large","m5.xlarge","m5.2xlarge","m5.4xlarge","m5.8xlarge","m5.12xlarge","m5.16xlarge","m5.24xlarge","m5a.large","m5a.xlarge","m5a.2xlarge","m5a.4xlarge","m5a.8xlarge","m5a.12xlarge","m5a.16xlarge","m5a.24xlarge"],pE=[0,1,5,10,15,30,60];function Qe(e,t){return e.includes(t)}GP(Qe,"constIncludes");var fE=1,gE=65535,MU=Object.freeze({postgresql:5432,mysql:3306}),vE=128,hE=10240,vc=1,hc=900,kg=1,Og=1e3,Fn=100,bE=100;var yE=3e3;var SE=["GET","POST","PUT","DELETE","HEAD","OPTIONS","PATCH"],_E=["standard","assets","upload","website"],Bn=["AES256","KMS"];var WP=Object.defineProperty,lo=(e,t)=>WP(e,"name",{value:t,configurable:!0}),ze=lo(e=>s.union([s.literal(!1),e]),"optionalOrDisabled"),Ir={check:lo(e=>e.minCapacity!==void 0&&e.maxCapacity!==void 0?e.minCapacity<=e.maxCapacity:!0,"check"),params:{message:d.CAPACITY_CONSTRAINT.MIN_LTE_MAX,path:["maxCapacity"]}},mo=lo(e=>s.number().int(d.MEMORY_LIMIT.INTEGER).min(e,e===128?d.MEMORY_LIMIT.MIN_128:d.MEMORY_LIMIT.MIN_512).max(30720,d.MEMORY_LIMIT.MAX),"memoryLimitMiBSchema"),F=s.string().min(1,d.REQUIRED.RESOURCE_NAME).max(63,d.MAX_LENGTH.RESOURCE_NAME).regex(j.RESOURCE_NAME,d.RESOURCE_NAME),AE=s.string().min(1,d.REQUIRED.BUCKET_NAME).max(63,d.MAX_LENGTH.BUCKET_NAME).regex(j.BUCKET_NAME,d.BUCKET_NAME),xE=s.string().min(1,d.REQUIRED.DATABASE_NAME).max(63,d.MAX_LENGTH.DATABASE_NAME).regex(j.DATABASE_NAME,d.DATABASE_NAME);function bc(e,t=j.IDENTIFIER,n=d.IDENTIFIER){return s.string().min(2,d.IDENTIFIER_MIN_LENGTH).max(50,e).regex(t,n).refine(i=>!i.endsWith("-"),{message:d.IDENTIFIER_NO_TRAILING_HYPHEN}).refine(i=>!i.includes("--"),{message:d.IDENTIFIER_NO_CONSECUTIVE_HYPHENS})}lo(bc,"identifierSchema");var de=bc(d.MAX_LENGTH.APP_NAME),ZU=bc(d.MAX_LENGTH.APP_NAME,j.NEW_APP_NAME,d.NEW_APP_NAME),$r=s.number().int(d.PORT.INTEGER).min(fE,d.PORT.MIN).max(gE,d.PORT.MAX),_e=s.object({key:s.string(),sourceText:s.string()}).strict(),KP=s.object({__identifier:s.string()}).strict(),HP=s.object({__expression:s.string()}).strict(),XP=s.object({__call:s.string()}).strict(),YP=s.union([KP,HP,XP]),JP=s.union([s.string(),s.number(),s.boolean(),YP]),Zn=s.record(s.string().regex(j.ENV_VAR_NAME,d.ENV_VAR_NAME),JP),qP=s.object({id:s.string(),name:s.string().optional(),arn:s.string().optional(),field:s.string().optional()}).strict().refine(e=>e.name!==void 0!=(e.arn!==void 0),{message:"secretsImport requires exactly one of `name` or `arn`."}),IE=s.record(s.string(),qP),VU=s.record(s.string(),s.unknown()),Dg=s.enum(ao).describe(`Application type must be one of: ${ao.join(", ")}`),wg=s.enum(At).describe(`OpenNext deployment pattern: ${At.join(", ")}`),QP=s.enum(["before-imports","after-imports","after-app-init","after-tags","after-resource","end-of-file"]),eC=s.enum(["import","app-init","tags","database","compute","storage","network","messaging","cdn","pattern","vpc-peer","vpc-peer-accepter","cross-plan-connection","custom"]),$E=s.object({sourceText:s.string(),position:QP,afterManagedResource:s.object({type:eC,name:s.string().optional()}).strict().optional(),originalLine:s.number().int().optional(),leadingComments:s.array(s.string()).optional(),orphaned:s.boolean().optional(),orphanedComment:s.string().optional()}).strict(),TE=s.union([s.object({tier:s.enum(dt)}).strict(),s.literal(!1)]),RE=s.union([s.object({instanceType:s.string().optional()}).strict(),s.literal(!1)]),tC=bc(d.MAX_LENGTH.ORGANISATION_NAME),rC=s.string().regex(j.EMAIL,d.EMAIL),EE=s.string().refine(e=>kt.includes(e),{message:d.REGION}),GU=s.object({name:tC,email:rC,accountName:s.string().optional(),primaryRegion:EE.optional().default(Yr),secondaryRegions:s.array(EE).optional(),security:s.enum(mE).optional(),force:s.boolean().optional()}).strict();function po(e){return e.issues.map(t=>`${t.path.length>0?`${t.path.join(".")}: `:""}${t.message}`).join(`
|
|
70
|
+
`:l==="r"?"\r":l):c.length>=2&&c.startsWith("'")&&c.endsWith("'")?t[a]=c.slice(1,-1):t[a]=c}return t}Dn($_,"parseDotEnv");function T_(e){return e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`").replace(/\n/g,"\\n").replace(/\r/g,"\\r")}Dn(T_,"escapeDotEnvValue");var R_=s.object({awsAccountId:s.string(),accountName:s.string().nullable(),status:s.string(),role:s.string(),roleArn:s.string(),environment:s.string().optional(),connectedAt:s.string()}),vP=s.object({accounts:s.array(R_)});var hP=Object.defineProperty,xr=(e,t)=>hP(e,"name",{value:t,configurable:!0});function ng(e){let t=[e.primaryRegion,...e.secondaryRegions??[],e.disasterRecoveryRegion].filter(n=>n!==void 0);return[...new Set(t)]}xr(ng,"deriveRegionsFromOrgConfig");function ig(e){return e.environment??to(e)}xr(ig,"environmentOrTier");function og(e,t){return`${e.toLowerCase()}-${qr(t)}`}xr(og,"generateTargetName");function ag(e,t){let n=[];for(let i of e){if(to(i)==="organisation")continue;let r=ig(i);for(let o of t)n.push({name:og(i.name,o),accountName:i.name,accountId:i.id,environment:r,region:o})}return n.sort((i,r)=>{let o=i.environment.localeCompare(r.environment);if(o!==0)return o;let a=i.accountName.localeCompare(r.accountName);return a!==0?a:i.region.localeCompare(r.region)})}xr(ag,"deriveTargets");function N_(e){return ag(e.providerAccounts,ng(e))}xr(N_,"deriveAllTargets");function bP(e,t){if(t.length===0)return e;let n=new Set([e.primaryRegion,e.disasterRecoveryRegion].filter(Boolean)),i=t.filter(r=>!n.has(r));return{...e,secondaryRegions:i.length>0?i:void 0}}xr(bP,"mergeSecondaryRegions");function P_(e,t){return e.find(n=>n.name===t)}xr(P_,"findTarget");var yP=Object.defineProperty,SP=(e,t)=>yP(e,"name",{value:t,configurable:!0});function C_(e,t){if(t!==void 0){if(t.trim()==="")throw new Error("buildAppConfigPath: container must be a non-empty string");return`${t}/fjall/${e}`}return`fjall/${e}`}SP(C_,"buildAppConfigPath");var _P=Object.defineProperty,wn=(e,t)=>_P(e,"name",{value:t,configurable:!0}),sg="infrastructure.ts",cg="fjall";function k_(e,t){let n=t?.excludedPathPrefixes,i=t?.excludedPathSegments,r=[];for(let o of e){if(!ug(o.path)||n&&D_(o.path,n)||i&&w_(o.path,i))continue;let a=lg(o.path);a!==null&&r.push({configPath:O_(o.path),boundaryPath:a})}return r}wn(k_,"findInfrastructurePaths");function ug(e){return e===sg||e.endsWith(`/${sg}`)}wn(ug,"isInfrastructureFile");function lg(e){let t=e.split("/");for(let n=0;n<t.length-1;n++)if(t[n]===cg)return t.slice(0,n+1).join("/");return null}wn(lg,"findBoundaryPath");function O_(e){return e.slice(0,-`/${sg}`.length)}wn(O_,"toConfigDir");function D_(e,t){for(let n of t)if(e.startsWith(n))return!0;return!1}wn(D_,"hasExcludedPrefix");function w_(e,t){let n=e.split("/");for(let i=0;i<n.length-1;i++)if(t.has(n[i]))return!0;return!1}wn(w_,"hasExcludedSegment");var EP=Object.defineProperty,dg=(e,t)=>EP(e,"name",{value:t,configurable:!0});function M_(e){if(e.length===0)return null;let t=[];for(let i of e){let r=j_(i.boundaryPath);if(r===null)return null;t.push(r)}let n=z_(t);return n.length===0?null:n.join("/")}dg(M_,"inferContainerFromCandidates");function j_(e){let t=e.split("/").filter(i=>i.length>0);if(t.length===0||t[t.length-1]!==cg)return null;let n=t.slice(0,t.length-1);return n.length===0?null:n}dg(j_,"extractContainer");function z_(e){if(e.length===0)return[];let[t,...n]=e,i=[];for(let r=0;r<t.length;r+=1){let o=t[r];for(let a of n)if(a[r]!==o)return i;i.push(o)}return i}dg(z_,"longestCommonPrefix");var AP=Object.defineProperty,L_=(e,t)=>AP(e,"name",{value:t,configurable:!0}),U_=["fjall","organisation","platform","account"];function F_(e){return U_.includes(e.toLowerCase())}L_(F_,"isReservedAppName");var B_="-cache";function Z_(e){return ht(e).endsWith(B_)}L_(Z_,"hasReservedAppNameSuffix");var xP=Object.defineProperty,mg=(e,t)=>xP(e,"name",{value:t,configurable:!0});function G_(e){return{success:!0,data:e}}mg(G_,"success");function io(e){return{success:!1,error:e}}mg(io,"failure");var V_="sha256:",ic=12,IP=new RegExp(`-sha-[0-9a-f]{${ic}}$`);function W_(e,t,n){if(!e.startsWith(V_))return io(new Error(`expected sha256:... digest, got ${e.slice(0,32)}`));let i=e.slice(V_.length);if(i.length<ic)return io(new Error(`digest hex payload too short (need >=${ic} chars, got ${i.length})`));let r=t.trim();if(r==="")return io(new Error("serviceName must be a non-empty string"));let o;if(n!==void 0){let u=n.trim();if(u==="")return io(new Error("target, when supplied, must be a non-empty string; omit the argument instead"));o=u.toLowerCase()}let a=i.slice(0,ic).toLowerCase(),c=o!==void 0?`${r.toLowerCase()}-${o}`:r.toLowerCase();return G_(`${c}-sha-${a}`)}mg(W_,"deriveContentHashTag");var $P=Object.defineProperty,TP=(e,t)=>$P(e,"name",{value:t,configurable:!0}),K_=["full","code-only","rollback","restart"],RP=s.enum(K_),H_=/^[a-zA-Z0-9._-]+$/,X_=s.string().min(1).max(128).regex(H_),Y_=s.object({serviceName:s.string().min(1),imageTag:X_,imageDigest:s.string().min(1).optional(),imageUri:s.string().min(1),ecrRepositoryArn:s.string().min(1).optional(),taskDefinitionArn:s.string().min(1).optional(),previousTaskDefinitionArn:s.string().min(1).optional(),functionArn:s.string().min(1).optional(),publishedVersion:s.string().min(1).optional()}).strict(),NP=s.array(Y_);function J_(e,t){return`${e}${t}`}TP(J_,"artefactOutputKey");var PP=Object.defineProperty,q_=(e,t)=>PP(e,"name",{value:t,configurable:!0}),At=["payload","nextjs","staticsite"],pg=new Set(At);function fg(e){return typeof e=="string"&&pg.has(e)}q_(fg,"isPatternType");var Mn={payload:{label:"Payload CMS",constructIdSuffix:"Payload",artefact:"opennext-lambda",stackPlacement:"compute",deployable:!0},nextjs:{label:"Next.js",constructIdSuffix:"Nextjs",artefact:"opennext-lambda",stackPlacement:"compute",deployable:!1},staticsite:{label:"Static site",constructIdSuffix:"StaticSite",artefact:"static-assets",stackPlacement:"cdn",deployable:!0}},Q_=At.filter(e=>Mn[e].deployable),gg=At.filter(e=>Mn[e].artefact==="opennext-lambda"),CP=new Set(gg);function vg(e){return e!=null&&CP.has(e)}q_(vg,"isOpenNextPatternType");var oo=["multipage","spa"];var kP=Object.defineProperty,hg=(e,t)=>kP(e,"name",{value:t,configurable:!0}),eE="noreply";function tE(e){return`${eE}@${e}`}hg(tE,"defaultFormsFromAddress");function rE(e){return`https://${e}`}hg(rE,"defaultFormsCorsOrigin");function oc(e,t){let n=e.split("@");if(n.length!==2)return!1;let[i,r]=n;return i===void 0||i===""||r===void 0?!1:r.toLowerCase()===t.toLowerCase()}hg(oc,"isAddressAtDomain");var nE=2;var OP=s.object({devDomain:s.string().min(1),hostedZoneId:s.string().min(1).optional(),parentDomain:s.string().min(1).optional(),parentDelegationRoleArn:s.string().min(1).optional()}).strict().superRefine((e,t)=>{if(e.hostedZoneId!==void 0){e.parentDomain!==void 0&&t.addIssue({code:"custom",path:["parentDomain"],message:"hostedZoneId (adopt mode) is mutually exclusive with parentDomain \u2014 the adopted zone was already delegated; omit parentDomain"}),e.parentDelegationRoleArn!==void 0&&t.addIssue({code:"custom",path:["parentDelegationRoleArn"],message:"hostedZoneId (adopt mode) is mutually exclusive with parentDelegationRoleArn \u2014 the adopted zone was already delegated; omit parentDelegationRoleArn"});return}e.parentDelegationRoleArn!==void 0&&e.parentDomain===void 0&&t.addIssue({code:"custom",path:["parentDomain"],message:"parentDelegationRoleArn requires parentDomain \u2014 set parentDomain to the parent zone the DelegationRole belongs to"}),e.parentDomain!==void 0&&!e.devDomain.endsWith(`.${e.parentDomain}`)&&t.addIssue({code:"custom",path:["parentDomain"],message:"parentDomain must be a proper DNS suffix of devDomain \u2014 devDomain must end with `.<parentDomain>`"})}),iE={appId:s.string().min(1),appKebab:s.string().min(1),engineVersion:s.string().min(1).optional(),adoptSlotEcr:s.boolean().optional(),phase:s.enum(["zone","full"]).optional(),domain:OP.optional()},DP=s.object(iE).strict(),wP=s.object({...iE,version:s.literal(nE),appName:s.string().min(1)}).strict().refine(e=>e.appName===`fjall-dev-${e.appKebab}`,{message:"appName must equal `fjall-dev-${appKebab}` (single-source identity)",path:["appName"]});var jP=Object.defineProperty,jn=(e,t)=>jP(e,"name",{value:t,configurable:!0});function bg(e){return e.success===!0}jn(bg,"isSuccess");function yg(e){return e.success===!1}jn(yg,"isFailure");function N(e){return{success:!0,data:e}}jn(N,"success");function I(e){return{success:!1,error:e}}jn(I,"failure");async function Sg(e){try{let t=await e();return N(t)}catch(t){return I(ct(t))}}jn(Sg,"tryAsync");function _g(e){try{let t=e();return N(t)}catch(t){return I(ct(t))}}jn(_g,"trySync");var zP=Object.defineProperty,LP=(e,t)=>zP(e,"name",{value:t,configurable:!0}),oE=/^[a-zA-Z][a-zA-Z0-9-]*$/,UP=no.source.replace(/^\^|\$$/g,""),j=Object.freeze({IDENTIFIER:oE,NEW_APP_NAME:/^[a-z][a-z0-9-]*$/,RESOURCE_NAME:/^[a-zA-Z][a-zA-Z0-9]*$/,ECS_SERVICE_NAME:oE,BUCKET_NAME:/^[a-z][a-z0-9-]*[a-z0-9]$|^[a-z][a-z0-9]*$/,DATABASE_NAME:/^[a-zA-Z][a-zA-Z0-9_]*$/,RESOURCE_TYPE:/^[a-z]+(:[a-z]+)?$/,SSM_PATH:new RegExp(`^(?:/${UP})+$`),SECRET_NAME:rc,SSM_COMPONENT:no,EMAIL:/^[^\s@]+@[^\s@]+\.[^\s@]+$/,DOCKER_IMAGE:/^[a-z0-9][a-z0-9._-]*[a-z0-9](:[a-z0-9._-]+)?$/,DOMAIN:/^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)+$/i,HTTP_ORIGIN:/^https?:\/\/[a-z0-9.-]+(:\d+)?$/i,PASCAL_CASE:/^[A-Z][A-Za-z0-9]*$/,AWS_ACCOUNT_ID:/^\d{12}$/,VPC_ID:/^vpc-[a-z0-9]+$/,ROLE_ARN:/^arn:aws[a-zA-Z-]*:iam::\d{12}:role\/.+$/,CIDR:/^((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\.){3}(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\/(3[0-2]|[12]?\d)$/,SCHEDULE_EXPRESSION:/^(rate\(1 (?:minute|hour|day)\)|rate\((?:[2-9]|[1-9]\d+) (?:minutes|hours|days)\)|cron\([^\s()]+ [^\s()]+ [^\s()]+ [^\s()]+ [^\s()]+ [^\s()]+\))$/,LAMBDA_RUNTIME_IDENTIFIER:/^[A-Za-z0-9._-]+$/,ENV_VAR_NAME:/^[A-Za-z_][A-Za-z0-9_]*$/});function Eg(e){let t=/^rate\((\d+) (minute|minutes|hour|hours|day|days)\)$/.exec(e);if(!t)return;let n=t[1],i=t[2];if(n===void 0||i===void 0)return;let r=parseInt(n,10);if(!Number.isFinite(r)||r<1)return;let o=i==="minute"||i==="hour"||i==="day";if(!(o&&r!==1)&&!(!o&&r===1))return i==="minute"||i==="minutes"?{everyMs:r*6e4}:i==="hour"||i==="hours"?{everyMs:r*60*6e4}:{everyMs:r*24*60*6e4}}LP(Eg,"parseRateExpression");var d=Object.freeze({IDENTIFIER:"Must start with a letter, contain only letters, numbers, and hyphens",NEW_APP_NAME:"Must start with a lowercase letter and contain only lowercase letters, numbers, and hyphens",IDENTIFIER_MIN_LENGTH:"Must be at least 2 characters",IDENTIFIER_NO_TRAILING_HYPHEN:"Must not end with a hyphen",IDENTIFIER_NO_CONSECUTIVE_HYPHENS:"Must not contain consecutive hyphens",RESOURCE_NAME:"Must start with a letter and contain only letters and numbers (PascalCase recommended)",ECS_SERVICE_NAME:"Service name must start with a letter and contain only letters, numbers, and hyphens",BUCKET_NAME:"Bucket name must start with a lowercase letter and contain only lowercase letters, numbers, and hyphens",DATABASE_NAME:"Database name must start with a letter and contain only letters, numbers, and underscores",RESOURCE_TYPE:"Resource type must be in format 'category' or 'category:type'",SSM_PATH:"SSM path must start with / and contain valid namespace segments (e.g., /myapp/ApiCluster/service)",SECRET_NAME:Qf,SSM_COMPONENT:nc,EMAIL:"Please enter a valid email address",DOMAIN:"Please enter a valid domain (e.g., cms.example.com)",DOCKER_IMAGE:"Invalid Docker image name format",REQUIRED:{APP_NAME:"Application name is required",RESOURCE_NAME:"Resource name is required",BUCKET_NAME:"Bucket name is required",SERVICE_NAME:"Service name is required",NETWORK_NAME:"Network name is required",DATABASE_NAME:"Database name is required",ORGANISATION_NAME:"Organisation name is required",EMAIL:"Email is required",NAME:"Name is required",USERNAME:"Username is required",CONTAINER_NAME:"Container name is required",GROUP:"Group is required",PATTERN_NAME:"Pattern name is required",SOURCE:"Source directory is required",BUILD_COMMAND:"Build command is required",OUTPUT_DIR:"Output directory is required",FORMS_TO:"Forms recipient address is required",ROUTING_PATH:"Routing path is required",RESOURCE_REFERENCE:"Resource reference is required",RESOURCE_TYPE:"Resource type is required",VARIANT:"Variant is required",SUBTYPE:"Subtype is required",DEPLOY_TARGET:"Deploy target is required",DESTROY_TARGET:"Destroy target is required"},MAX_LENGTH:{APP_NAME:"Application name must be 50 characters or less",RESOURCE_NAME:"Resource name must be 63 characters or less",BUCKET_NAME:"Bucket name must be 63 characters or less",SERVICE_NAME:"Service name must be 255 characters or less",NETWORK_NAME:"Network name must be 50 characters or less",DATABASE_NAME:"Database name must be 63 characters or less",ORGANISATION_NAME:"Organisation name must be 50 characters or less"},PORT:{INTEGER:"Port must be an integer",MIN:"Port must be at least 1",MAX:"Port cannot exceed 65535"},USERNAME:{MAX_LENGTH:"Username cannot exceed 63 characters"},LAMBDA:{MEMORY:{INTEGER:"Lambda memory must be an integer",MIN:"Memory must be at least 128 MB",MAX:"Memory cannot exceed 10240 MB",MULTIPLE:"Memory must be 128 MB or a multiple of 64 MB"},TIMEOUT:{INTEGER:"Timeout must be an integer",MIN:"Timeout must be at least 1 second",MAX:"Timeout cannot exceed 900 seconds"},RUNTIME:"Lambda runtime must contain only letters, digits, dots, underscores, or dashes (e.g. 'NODEJS_20_X' or 'nodejs20.x')"},ENV_VAR_NAME:"Environment variable names must start with a letter or underscore and contain only letters, digits, and underscores",PRIORITY:{INTEGER:"Priority must be an integer",MIN:"Priority must be at least 1",MAX:"Priority cannot exceed 50000"},CAPACITY:{MIN:{INTEGER:"Minimum capacity must be an integer",MIN_0:"Minimum capacity must be at least 0",MIN_1:"Minimum capacity must be at least 1",MAX:"Minimum capacity cannot exceed 100"},MAX:{INTEGER:"Maximum capacity must be an integer",MIN_0:"Maximum capacity must be at least 0",MIN_1:"Maximum capacity must be at least 1",MAX:"Maximum capacity cannot exceed 100"},DESIRED:{INTEGER:"Desired count must be an integer",MIN:"Desired count must be at least 0",MAX:"Desired count cannot exceed 100"},WARM_POOL_REQUIRED:"minCapacity 0 requires a warmPool \u2014 without it, new tasks wait 60-90s for a cold instance launch",WARM_POOL:{MIN_SIZE:{INTEGER:"Warm pool minSize must be an integer",MIN:"Warm pool minSize must be at least 0",MAX:"Warm pool minSize cannot exceed 100"},MIN_SIZE_EXCEEDS_MAX_CAPACITY:"warmPool.minSize cannot exceed maxCapacity \u2014 the warm pool cannot hold more instances than the ASG allows"}},MEMORY_LIMIT:{INTEGER:"Memory limit must be an integer",MIN_512:"Memory limit must be at least 512 MiB",MIN_128:"Memory limit must be at least 128 MiB",MAX:"Memory limit cannot exceed 30720 MiB"},DATABASE:{PORT:{INTEGER:"Database port must be an integer",MIN:"Database port must be at least 1024",MAX:"Database port cannot exceed 65535"},NAME:{REQUIRED:"Database name is required",MAX_LENGTH:"Database name must be 63 characters or less"}},BACKUP_RETENTION:{INTEGER:"Backup retention must be an integer",MIN:"Backup retention must be at least 1 day",MAX:"Backup retention cannot exceed 35 days"},SQS:{VISIBILITY_TIMEOUT:{INTEGER:"Visibility timeout must be an integer",MIN:"Visibility timeout must be at least 0 seconds",MAX:"Visibility timeout cannot exceed 43200 seconds (12 hours)"},RETENTION_PERIOD:{INTEGER:"Retention period must be an integer",MIN:"Retention period must be at least 60 seconds",MAX:"Retention period cannot exceed 1209600 seconds (14 days)"}},READER:{COUNT:{INTEGER:"Reader count must be an integer",MIN:"Reader count must be at least 0",MAX:"Reader count cannot exceed 15"}},IDENTIFIER_SUFFIX:{REQUIRED:"Identifier suffix is required when specified",MAX_LENGTH:"Identifier suffix cannot exceed 50 characters"},ROTATION:{INTEGER:"Rotation days must be an integer",MIN:"Rotation interval must be at least 1 day",MAX:"Rotation interval cannot exceed 365 days"},MAX_CONNECTIONS:{INTEGER:"Max connections must be an integer",MIN:"Max connections must be at least 1",MAX:"Max connections cannot exceed 100"},MONITORING_INTERVAL:{INTEGER:"Monitoring interval must be an integer",MIN:"Monitoring interval must be at least 0",MAX:"Monitoring interval cannot exceed 60 seconds",VALUES:"Monitoring interval must be 0, 1, 5, 10, 15, 30, or 60 seconds"},RETENTION_DAYS:{INTEGER:"Retention days must be an integer",MIN:"Retention days must be at least 1",MAX:"Retention days cannot exceed 365"},BATCH_SIZE:{INTEGER:"Batch size must be an integer",MIN:"Batch size must be at least 1",MAX:"Batch size cannot exceed 10000"},SERVICE:{UNIQUE_WITHIN_CLUSTER:"Service names must be unique within a cluster",MIN_REQUIRED:"At least one service is required",ROUTING_REQUIRED:"Multiple services with ports require routing config (path or host)"},PROXY_CONFIG:{MAX_IDLE_CONNECTIONS:{INTEGER:"Max idle connections must be an integer",MIN:"Max idle connections must be at least 0",MAX:"Max idle connections cannot exceed 100"},BORROW_TIMEOUT:{INTEGER:"Connection borrow timeout must be an integer",MIN:"Connection borrow timeout must be at least 1 second",MAX:"Connection borrow timeout cannot exceed 3600 seconds"}},MAX_AZS:{INTEGER:"Max AZs must be an integer",MIN:"Max AZs must be at least 1",MAX:"Max AZs cannot exceed 3"},BATCHING_WINDOW:{INTEGER:"Max batching window must be an integer",MIN:"Max batching window must be at least 0",MAX:"Max batching window cannot exceed 300 seconds"},HEALTH_CHECK:{INTERVAL:{INTEGER:"Health check interval must be an integer",MIN:"Health check interval must be at least 5 seconds",MAX:"Health check interval cannot exceed 300 seconds"},TIMEOUT:{INTEGER:"Health check timeout must be an integer",MIN:"Health check timeout must be at least 2 seconds",MAX:"Health check timeout cannot exceed 60 seconds"},RETRIES:{INTEGER:"Health check retries must be an integer",MIN:"Health check retries must be at least 1",MAX:"Health check retries cannot exceed 10"},START_PERIOD:{INTEGER:"Health check start period must be an integer",MIN:"Health check start period must be at least 0 seconds",MAX:"Health check start period cannot exceed 300 seconds"}},EPHEMERAL_STORAGE:{INTEGER:"Ephemeral storage size must be an integer",MIN:"Ephemeral storage size must be at least 512 MB",MAX:"Ephemeral storage size cannot exceed 10240 MB"},MAX_MESSAGE_SIZE:{INTEGER:"Max message size must be an integer",MIN:"Max message size must be at least 1024 bytes",MAX:"Max message size cannot exceed 262144 bytes (256 KB)"},CAPACITY_CONSTRAINT:{MIN_LTE_MAX:"minCapacity must be less than or equal to maxCapacity"},DIRECT_ACCESS:{NO_DOMAIN:"directAccess cannot be used with domain (no ALB for HTTPS)",NO_LOAD_BALANCER:"directAccess cannot be used with loadBalancer (mutually exclusive)"},GLOBAL_AURORA:{PRIMARY_REGION_REQUIRED:"primaryRegion is required for GlobalAurora databases"},NAT_GATEWAY:{INTEGER:"NAT gateway count must be an integer",MIN:"NAT gateway count must be at least 0",MAX:"NAT gateway count cannot exceed 3"},CIDR_MASK:{INTEGER:"CIDR mask must be an integer",MIN:"CIDR mask must be at least 16",MAX:"CIDR mask cannot exceed 28"},CPU:{INTEGER:"CPU must be an integer",MIN:"CPU must be at least 256 units",MAX:"CPU cannot exceed 4096 units"},KMS:{KEY_REQUIRED:"KMS key ARN is required when using KMS encryption"},READER_INSTANCES:{MAX:"Cannot have more than 15 reader instances",COUNT_OR_INSTANCES:"Cannot specify both 'count' and 'instances' - use one or the other"},GENERATOR_CAPACITY:{MIN:{MIN:"Minimum capacity must be at least 1",MAX:"Minimum capacity cannot exceed 1000"},MAX:{MIN:"Maximum capacity must be at least 1",MAX:"Maximum capacity cannot exceed 1000"}},INSTANCE_TYPE:"Unknown instance type. Common types include: t4g.micro, t4g.small, m5.large",ARCHITECTURE_MISMATCH:"Architecture mismatch between instance type and AMI",ALLOCATED_STORAGE:{INTEGER:"Allocated storage must be an integer",MIN:"Allocated storage must be at least 20 GB",MAX:"Allocated storage cannot exceed 65536 GB"},DLQ:{MAX_RECEIVE_COUNT:{INTEGER:"Max receive count must be an integer",MIN:"Max receive count must be at least 1",MAX:"Max receive count cannot exceed 1000"}},ALARM:{PERCENTAGE:{MIN:"Threshold must be at least 1%",MAX:"Threshold must be at most 100%"},FREE_STORAGE_GIB:{MIN:"Free storage threshold must be at least 1 GiB"}},REGION:"Invalid AWS region",PASCAL_CASE:"Resource name must start with an uppercase letter and contain only alphanumerics (PascalCase).",IMAGE_DOCKER_MUTEX:"image and docker are mutually exclusive",AWS_ACCOUNT_ID:"AWS account id must be exactly 12 digits (no hyphens)",VPC_ID:"VPC id must look like vpc-abc12345",ROLE_ARN:"Role ARN must have the form arn:aws:iam::<account-id>:role/<name>",CIDR:"CIDR must be in dotted-quad/prefix-length form (e.g. 10.0.0.0/16)",VPC_PEER:{MIN_REQUESTER_ACCOUNTS:"At least one requester account id is required",REGION_REQUIRED:"Peer region is required when specified",ROUTE_TABLE_ID_REQUIRED:"Route table id must not be empty"},SCHEDULE_EXPRESSION:"Schedule expression must be 'rate(N minute|minutes|hour|hours|day|days)' with N>=1, or 'cron(<6-field AWS expression>)'"});var FP=Object.defineProperty,qe=(e,t)=>FP(e,"name",{value:t,configurable:!0}),BP=["us-east-2","us-west-2","us-east-1","eu-west-1","eu-central-1","ap-southeast-1"],ZP=Object.freeze(BP.flatMap(e=>{let t=Jr(e);return t?[t]:[]})),Ag=Object.freeze(["us-east-2","us-west-2","us-east-1","eu-west-1","ap-southeast-1"]);function ac(e){return e?e.split(",").map(t=>t.trim()).filter(Boolean):[]}qe(ac,"parseRegionList");function xg(e){return kt.includes(e)}qe(xg,"isValidRegion");function Ig(e){return/^[a-z]{2}-[a-z]+-[1-9]$/.test(e)}qe(Ig,"isValidRegionFormat");function $g(e){if(!e)return Ag.slice(0,3);let t=e.toLowerCase().split("-"),n=t[0],i=t.length>1?t[1]:"",r=[];return n&&i&&(r=kt.filter(o=>o.startsWith(`${n}-${i}`))),r.length===0&&n&&(r=kt.filter(o=>o.startsWith(`${n}-`))),r.length>0?r.slice(0,3):Ag.slice(0,3)}qe($g,"getSuggestions");function Tg(e){if(xg(e))return!0;let t=$g(e);return Ig(e)?`Unknown region. Try: ${t.join(", ")}`:`Invalid format. Try: ${t.join(", ")}`}qe(Tg,"validateRegion");function aE(e){if(!e||e.trim()==="")return!0;let t=ac(e);for(let n of t){let i=Tg(n);if(i!==!0)return i}return!0}qe(aE,"validateRegionList");function Rg(e,t){return e.filter(n=>n!==t)}qe(Rg,"filterDuplicateRegions");function Ng(e){return{label:e.city,value:e.code,description:e.optIn?`${e.code} \u2014 opt-in required`:e.code}}qe(Ng,"toRegionOption");function sE(){return Ye.map(Ng)}qe(sE,"getRegionOptions");function cE(e){return Ye.filter(t=>t.code!==e).map(Ng)}qe(cE,"getRegionOptionsExcluding");function uE(e){let t=Ye.find(n=>n.code===e);return t?t.city:e}qe(uE,"getRegionName");function lE(e){return t=>{let n=ac(t);return Rg(n,e)}}qe(lE,"createRegionFormatter");var sc="3.8.1";var cc=["Aurora","Instance","GlobalAurora","ClickHouse"],zn=["FARGATE","FARGATE_SPOT","EC2"],dt=["standard","resilient","enterprise"],uc=["tinkerer","lightweight","standard","resilient","enterprise"],Pg="custom",ao=[...uc,Pg];var VP=Object.defineProperty,GP=(e,t)=>VP(e,"name",{value:t,configurable:!0}),CU=Object.freeze({RESOURCE_SUFFIXES:Object.freeze({storage:"Storage",database:"Database",cluster:"Cluster",function:"Function",instance:"Instance",compute:"Compute"})}),so=["ecs","lambda","ec2"],Ln=Object.freeze({ECS:"ecs",LAMBDA:"lambda",EC2:"ec2"}),lc=["code","container"],co=Object.freeze({CODE:"code",CONTAINER:"container"}),dc=["ARM_64","X86_64"],dE="ARM_64",uo=["NONE","AWS_IAM"],mc=["public","internal"],pc=["CPU","MEMORY"],fc=["ARM","STANDARD"],Cg=["Instance","Aurora"],Un=["postgresql","mysql"],mE=["foundation","compliance","hardened"];var gc=["t3.nano","t3.micro","t3.small","t3.medium","t3.large","t3.xlarge","t3.2xlarge","t3a.nano","t3a.micro","t3a.small","t3a.medium","t3a.large","t3a.xlarge","t3a.2xlarge","t4g.nano","t4g.micro","t4g.small","t4g.medium","t4g.large","t4g.xlarge","t4g.2xlarge","c5.large","c5.xlarge","c5.2xlarge","c5.4xlarge","c5.9xlarge","c5.12xlarge","c5.18xlarge","c5.24xlarge","c5a.large","c5a.xlarge","c5a.2xlarge","c5a.4xlarge","c5a.8xlarge","c5a.12xlarge","c5a.16xlarge","c5a.24xlarge","c6g.medium","c6g.large","c6g.xlarge","c6g.2xlarge","c6g.4xlarge","c6g.8xlarge","c6g.12xlarge","c6g.16xlarge","r5.large","r5.xlarge","r5.2xlarge","r5.4xlarge","r5.8xlarge","r5.12xlarge","r5.16xlarge","r5.24xlarge","r5a.large","r5a.xlarge","r5a.2xlarge","r5a.4xlarge","r5a.8xlarge","r5a.12xlarge","r5a.16xlarge","r5a.24xlarge","r6g.medium","r6g.large","r6g.xlarge","r6g.2xlarge","r6g.4xlarge","r6g.8xlarge","r6g.12xlarge","r6g.16xlarge","i3.large","i3.xlarge","i3.2xlarge","i3.4xlarge","i3.8xlarge","i3.16xlarge","p3.2xlarge","p3.8xlarge","p3.16xlarge","g4dn.xlarge","g4dn.2xlarge","g4dn.4xlarge","g4dn.8xlarge","g4dn.12xlarge","g4dn.16xlarge","m5.large","m5.xlarge","m5.2xlarge","m5.4xlarge","m5.8xlarge","m5.12xlarge","m5.16xlarge","m5.24xlarge","m5a.large","m5a.xlarge","m5a.2xlarge","m5a.4xlarge","m5a.8xlarge","m5a.12xlarge","m5a.16xlarge","m5a.24xlarge"],pE=[0,1,5,10,15,30,60];function Qe(e,t){return e.includes(t)}GP(Qe,"constIncludes");var fE=1,gE=65535,MU=Object.freeze({postgresql:5432,mysql:3306}),vE=128,hE=10240,vc=1,hc=900,kg=1,Og=1e3,Fn=100,bE=100;var yE=3e3;var SE=["GET","POST","PUT","DELETE","HEAD","OPTIONS","PATCH"],_E=["standard","assets","upload","website"],Bn=["AES256","KMS"];var WP=Object.defineProperty,lo=(e,t)=>WP(e,"name",{value:t,configurable:!0}),ze=lo(e=>s.union([s.literal(!1),e]),"optionalOrDisabled"),Ir={check:lo(e=>e.minCapacity!==void 0&&e.maxCapacity!==void 0?e.minCapacity<=e.maxCapacity:!0,"check"),params:{message:d.CAPACITY_CONSTRAINT.MIN_LTE_MAX,path:["maxCapacity"]}},mo=lo(e=>s.number().int(d.MEMORY_LIMIT.INTEGER).min(e,e===128?d.MEMORY_LIMIT.MIN_128:d.MEMORY_LIMIT.MIN_512).max(30720,d.MEMORY_LIMIT.MAX),"memoryLimitMiBSchema"),F=s.string().min(1,d.REQUIRED.RESOURCE_NAME).max(63,d.MAX_LENGTH.RESOURCE_NAME).regex(j.RESOURCE_NAME,d.RESOURCE_NAME),AE=s.string().min(1,d.REQUIRED.BUCKET_NAME).max(63,d.MAX_LENGTH.BUCKET_NAME).regex(j.BUCKET_NAME,d.BUCKET_NAME),xE=s.string().min(1,d.REQUIRED.DATABASE_NAME).max(63,d.MAX_LENGTH.DATABASE_NAME).regex(j.DATABASE_NAME,d.DATABASE_NAME);function bc(e,t=j.IDENTIFIER,n=d.IDENTIFIER){return s.string().min(2,d.IDENTIFIER_MIN_LENGTH).max(50,e).regex(t,n).refine(i=>!i.endsWith("-"),{message:d.IDENTIFIER_NO_TRAILING_HYPHEN}).refine(i=>!i.includes("--"),{message:d.IDENTIFIER_NO_CONSECUTIVE_HYPHENS})}lo(bc,"identifierSchema");var de=bc(d.MAX_LENGTH.APP_NAME),ZU=bc(d.MAX_LENGTH.APP_NAME,j.NEW_APP_NAME,d.NEW_APP_NAME),$r=s.number().int(d.PORT.INTEGER).min(fE,d.PORT.MIN).max(gE,d.PORT.MAX),_e=s.object({key:s.string(),sourceText:s.string()}).strict(),KP=s.object({__identifier:s.string()}).strict(),HP=s.object({__expression:s.string()}).strict(),XP=s.object({__call:s.string()}).strict(),YP=s.union([KP,HP,XP]),JP=s.union([s.string(),s.number(),s.boolean(),YP]),Zn=s.record(s.string().regex(j.ENV_VAR_NAME,d.ENV_VAR_NAME),JP),qP=s.object({id:s.string(),name:s.string().optional(),arn:s.string().optional(),field:s.string().optional()}).strict().refine(e=>e.name!==void 0!=(e.arn!==void 0),{message:"secretsImport requires exactly one of `name` or `arn`."}),IE=s.record(s.string(),qP),VU=s.record(s.string(),s.unknown()),Dg=s.enum(ao).describe(`Application type must be one of: ${ao.join(", ")}`),wg=s.enum(At).describe(`OpenNext deployment pattern: ${At.join(", ")}`),QP=s.enum(["before-imports","after-imports","after-app-init","after-tags","after-resource","end-of-file"]),eC=s.enum(["import","app-init","tags","database","compute","storage","network","messaging","cdn","pattern","vpc-peer","vpc-peer-accepter","cross-plan-connection","custom"]),$E=s.object({sourceText:s.string(),position:QP,afterManagedResource:s.object({type:eC,name:s.string().optional()}).strict().optional(),originalLine:s.number().int().optional(),leadingComments:s.array(s.string()).optional(),orphaned:s.boolean().optional(),orphanedComment:s.string().optional()}).strict(),TE=s.union([s.object({tier:s.enum(dt)}).strict(),s.literal(!1)]),RE=s.union([s.object({instanceType:s.string().optional()}).strict(),s.literal(!1)]),tC=bc(d.MAX_LENGTH.ORGANISATION_NAME),rC=s.string().regex(j.EMAIL,d.EMAIL),EE=s.string().refine(e=>kt.includes(e),{message:d.REGION}),GU=s.object({name:tC,email:rC,accountName:s.string().optional(),primaryRegion:EE.optional().default(Yr),secondaryRegions:s.array(EE).optional(),security:s.enum(mE).optional(),force:s.boolean().optional()}).strict();function po(e){return e.issues.map(t=>`${t.path.length>0?`${t.path.join(".")}: `:""}${t.message}`).join(`
|
|
71
71
|
`)}lo(po,"getZodErrorMessage");var Vn=s.number().min(1,d.ALARM.PERCENTAGE.MIN).max(100,d.ALARM.PERCENTAGE.MAX),nC=s.number().min(1,d.ALARM.FREE_STORAGE_GIB.MIN),NE=s.union([s.literal(!1),s.object({cpuThreshold:Vn.optional(),memoryThreshold:Vn.optional(),runningTasksMinimum:s.number().int().min(0).optional(),http5xxThreshold:Vn.optional()}).strict()]),PE=s.union([s.literal(!1),s.object({cpuThreshold:Vn.optional(),freeStorageThresholdGiB:nC.optional(),connectionsThreshold:s.number().int().min(1).optional()}).strict()]),CE=s.union([s.literal(!1),s.object({errorRateThreshold:Vn.optional(),durationThresholdPercent:Vn.optional()}).strict()]);var Mt=s.number().int(d.BACKUP_RETENTION.INTEGER).min(1,d.BACKUP_RETENTION.MIN).max(35,d.BACKUP_RETENTION.MAX),fo=s.number().int(d.MONITORING_INTERVAL.INTEGER).refine(e=>Qe(pE,e),{message:d.MONITORING_INTERVAL.VALUES}),Sc=s.number().int(d.DATABASE.PORT.INTEGER).min(1024,d.DATABASE.PORT.MIN).max(65535,d.DATABASE.PORT.MAX),iC=s.enum(cc).describe(`Database type must be one of: ${cc.join(", ")}`),oC=s.object({maxConnections:s.number().int(d.MAX_CONNECTIONS.INTEGER).min(1,d.MAX_CONNECTIONS.MIN).max(100,d.MAX_CONNECTIONS.MAX).optional(),maxIdleConnections:s.number().int(d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.INTEGER).min(0,d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MIN).max(100,d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MAX).optional(),connectionBorrowTimeout:s.number().int(d.PROXY_CONFIG.BORROW_TIMEOUT.INTEGER).min(1,d.PROXY_CONFIG.BORROW_TIMEOUT.MIN).max(3600,d.PROXY_CONFIG.BORROW_TIMEOUT.MAX).optional(),requireTLS:s.boolean().optional()}).strict().describe("RDS Proxy configuration"),aC=s.object({instanceType:s.string().optional(),availabilityZone:s.string().optional()}).strict().describe("Read replica configuration"),sC=s.object({automaticallyAfterDays:s.number().int(d.ROTATION.INTEGER).min(1,d.ROTATION.MIN).max(365,d.ROTATION.MAX).optional()}).strict().describe("Secret rotation configuration"),_c=s.object({username:s.string().min(1,d.REQUIRED.USERNAME).max(63,d.USERNAME.MAX_LENGTH).optional(),secretRotation:sC.optional()}).strict().describe("Database credentials configuration"),Ec=ze(oC),Ac=ze(aC),cC=s.object({scaleWithWriter:s.boolean().optional(),enableDatabaseInsights:s.boolean().optional(),identifierSuffix:s.string().min(1,d.IDENTIFIER_SUFFIX.REQUIRED).max(50,d.IDENTIFIER_SUFFIX.MAX_LENGTH).optional(),availabilityZone:s.string().optional()}).strict().describe("Configuration for a single Aurora reader instance"),go=s.object({enableDatabaseInsights:s.boolean().optional(),identifierSuffix:s.string().min(1,d.IDENTIFIER_SUFFIX.REQUIRED).max(50,d.IDENTIFIER_SUFFIX.MAX_LENGTH).optional(),availabilityZone:s.string().optional()}).strict().describe("Configuration for Aurora writer instance"),uC=s.object({count:s.number().int(d.READER.COUNT.INTEGER).min(0,d.READER.COUNT.MIN).max(15,d.READER.COUNT.MAX).optional(),instances:s.array(cC).max(15,d.READER_INSTANCES.MAX).optional(),defaultEnableDatabaseInsights:s.boolean().optional()}).strict().refine(e=>!(e.count!==void 0&&e.instances!==void 0),{message:d.READER_INSTANCES.COUNT_OR_INSTANCES,path:["count"]}).describe("Aurora readers configuration"),vo=ze(uC),lC=s.object({awsManaged:s.literal(!0)}).strict(),dC=s.object({useCMK:s.literal(!0)}).strict(),kE=s.union([lC,dC]),mC=s.object({mode:s.enum(["standard","advanced"]).optional(),encryptionKey:kE.optional()}).strict().describe("Database Insights configuration"),xc=ze(mC),Ic=s.object({storageKey:kE.optional()}).strict().describe("Encryption configuration (DESTRUCTIVE to change storageKey)"),OE=s.object({name:F,type:iC,databaseName:s.string().min(1,d.REQUIRED.DATABASE_NAME),instanceType:s.string().optional(),allocatedStorage:s.number().optional(),multiAz:s.boolean().optional(),publiclyAccessible:s.boolean().optional(),databaseInsights:xc.optional(),port:Sc.optional(),deletionProtection:s.boolean().optional(),proxy:Ec.optional(),credentials:_c.optional(),readReplica:Ac.optional(),encryption:Ic.optional(),writer:go.optional(),readers:vo.optional(),backupRetention:Mt.optional(),preferredMaintenanceWindow:s.string().optional(),monitoringInterval:fo.optional(),primaryRegion:s.string().optional(),secondaryRegions:s.array(s.string()).optional(),globalClusterIdentifier:s.string().optional(),enableGlobalWriteForwarding:s.boolean().optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional(),databaseEngine:s.enum(Un).optional(),engineExpression:s.string().optional(),variableName:s.string().optional(),extraProperties:s.array(_e).optional(),alarms:PE.optional()}).strict(),$c=s.object({appName:de,nameProvidedByFlag:s.boolean().optional(),databaseName:s.string().min(1,d.REQUIRED.DATABASE_NAME).max(63,d.MAX_LENGTH.DATABASE_NAME).regex(j.DATABASE_NAME,d.DATABASE_NAME),resourceName:F.optional(),connectionConfig:s.object({connectToCompute:s.array(s.string()).optional(),connectToServices:s.array(s.string()).optional()}).strict().optional(),databaseInsights:xc.optional(),port:Sc.optional(),proxy:Ec.optional(),credentials:_c.optional(),encryption:Ic.optional(),deletionProtection:s.boolean().optional()}).strict(),DE={databaseType:s.literal("Instance"),instanceType:s.string().optional(),multiAz:s.boolean().optional(),readReplica:Ac.optional(),publiclyAccessible:s.boolean().optional(),backupRetention:Mt.optional(),allocatedStorage:s.number().optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()},wE={databaseType:s.literal("Aurora"),writer:go.optional(),readers:vo.optional(),backupRetention:Mt.optional(),preferredMaintenanceWindow:s.string().optional(),monitoringInterval:fo.optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()},ME={databaseType:s.literal("GlobalAurora"),primaryRegion:s.string().min(1,d.GLOBAL_AURORA.PRIMARY_REGION_REQUIRED),secondaryRegions:s.array(s.string()).optional(),globalClusterIdentifier:s.string().optional(),enableGlobalWriteForwarding:s.boolean().optional(),writer:go.optional(),readers:vo.optional(),backupRetention:Mt.optional(),preferredMaintenanceWindow:s.string().optional(),monitoringInterval:fo.optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()},jE=s.object({appName:de,nameProvidedByFlag:s.boolean().optional(),databaseName:s.string().min(1,d.REQUIRED.DATABASE_NAME).max(63,d.MAX_LENGTH.DATABASE_NAME).regex(j.DATABASE_NAME,d.DATABASE_NAME),resourceName:F.optional(),connectionConfig:s.object({connectToCompute:s.array(s.string()).optional(),connectToServices:s.array(s.string()).optional()}).strict().optional()}).strict(),zE={databaseType:s.literal("ClickHouse"),instanceType:s.string().optional(),coldTier:s.union([s.object({mode:s.literal("s3")}).strict(),s.literal(!1)]).optional(),optimiseSchedule:s.union([s.string(),s.literal(!1)]).optional(),backupSchedule:s.union([s.string(),s.literal(!1)]).optional(),backupRetentionDays:Mt.optional()},pC=$c.extend(DE).strict(),fC=$c.extend(wE).strict(),gC=$c.extend(ME).strict(),vC=jE.extend(zE).strict(),t4=s.discriminatedUnion("databaseType",[pC,fC,gC,vC]),Mg=$c.extend({resourceName:F}).strict(),hC=Mg.extend(DE).strict(),bC=Mg.extend(wE).strict(),yC=Mg.extend(ME).strict(),SC=jE.extend({resourceName:F}).strict(),_C=SC.extend(zE).strict(),r4=s.discriminatedUnion("databaseType",[hC,bC,yC,_C]),LE=s.object({appName:de,databaseName:s.string().min(1,d.REQUIRED.DATABASE_NAME),maxConnections:s.number().int(d.MAX_CONNECTIONS.INTEGER).min(1,d.MAX_CONNECTIONS.MIN).max(100,d.MAX_CONNECTIONS.MAX).optional(),maxIdleConnections:s.number().int(d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.INTEGER).min(0,d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MIN).max(100,d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MAX).optional(),connectionBorrowTimeout:s.number().int(d.PROXY_CONFIG.BORROW_TIMEOUT.INTEGER).min(1,d.PROXY_CONFIG.BORROW_TIMEOUT.MIN).max(3600,d.PROXY_CONFIG.BORROW_TIMEOUT.MAX).optional(),requireTLS:s.boolean().optional(),nameProvidedByFlag:s.boolean().optional()}).strict(),EC=["S","N","B"],yc=s.object({name:s.string(),type:s.enum(EC)}).strict(),UE=s.object({name:F,partitionKey:yc,sortKey:yc.optional(),globalSecondaryIndexes:s.array(s.object({indexName:s.string(),partitionKey:yc,sortKey:yc.optional()}).strict()).optional(),ttlAttribute:s.string().optional(),stream:s.boolean().optional(),variableName:s.string().optional(),extraProperties:s.array(_e).optional()}).strict(),AC=s.object({mode:s.literal("s3")}).strict(),FE=s.object({name:F,type:s.literal("ClickHouse"),databaseName:xE,instanceType:s.string().optional(),coldTier:s.union([AC,s.literal(!1)]).optional(),optimiseSchedule:s.union([s.string(),s.literal(!1)]).optional(),backupSchedule:s.union([s.string(),s.literal(!1)]).optional(),backupRetentionDays:Mt.optional(),variableName:s.string().optional(),extraProperties:s.array(_e).optional()}).strict();var xC=s.object({count:s.number().int(d.NAT_GATEWAY.INTEGER).min(0,d.NAT_GATEWAY.MIN).max(3,d.NAT_GATEWAY.MAX).optional()}).strict().describe("NAT gateway configuration"),BE=ze(xC),jg=s.enum(["cloudwatch","s3"]),IC=s.object({destination:jg.optional(),retentionDays:s.number().int(d.RETENTION_DAYS.INTEGER).min(1,d.RETENTION_DAYS.MIN).max(365,d.RETENTION_DAYS.MAX).optional(),trafficType:s.enum(["ALL","ACCEPT","REJECT"]).optional()}).strict().describe("VPC flow log configuration"),ZE=ze(IC),$C=s.object({s3:s.boolean().optional(),dynamodb:s.boolean().optional()}).strict().describe("Gateway VPC endpoints (FREE)"),TC=ze($C),RC=s.object({ecr:s.boolean().optional(),secretsManager:s.boolean().optional(),kms:s.boolean().optional(),cloudwatchLogs:s.boolean().optional(),ssm:s.boolean().optional(),sts:s.boolean().optional()}).strict().describe("Interface VPC endpoints (cost per hour)"),NC=ze(RC),PC=s.object({gateway:TC.optional(),interface:NC.optional()}).strict().describe("VPC endpoints configuration"),VE=ze(PC),Tc=s.object({maxAzs:s.number().int(d.MAX_AZS.INTEGER).min(1,d.MAX_AZS.MIN).max(3,d.MAX_AZS.MAX).optional(),natGateways:BE.optional(),flowLogs:ZE.optional(),vpcEndpoints:VE.optional(),cidrMask:s.number().int(d.CIDR_MASK.INTEGER).min(16,d.CIDR_MASK.MIN).max(28,d.CIDR_MASK.MAX).optional()}).strict(),GE=s.string().min(1,d.REQUIRED.NETWORK_NAME).max(50,d.MAX_LENGTH.NETWORK_NAME).regex(j.RESOURCE_NAME,d.RESOURCE_NAME),WE=Tc.extend({name:GE}).strict(),KE=ze(Tc),s4=s.object({appName:de,networkName:GE.optional(),maxAzs:s.number().int(d.MAX_AZS.INTEGER).min(1,d.MAX_AZS.MIN).max(3,d.MAX_AZS.MAX).optional(),natGateways:BE.optional(),flowLogs:ZE.optional(),vpcEndpoints:VE.optional()}).strict(),CC=j.CIDR,zg=s.string().regex(CC,d.CIDR),kC=s.object({kind:s.literal("database"),resource:s.string().min(1,d.REQUIRED.RESOURCE_REFERENCE),name:F,allowedFromCidrs:s.array(zg),access:s.enum(["read","write","readWrite"]).optional()}).strict(),OC=s.object({kind:s.literal("ecsService"),resource:s.string().min(1,d.REQUIRED.RESOURCE_REFERENCE),serviceName:s.string().min(1,d.REQUIRED.SERVICE_NAME),name:F,allowedFromCidrs:s.array(zg),port:$r.optional()}).strict(),DC=s.discriminatedUnion("kind",[kC,OC]),c4=s.object({name:F,peerAppName:s.string().min(1,d.REQUIRED.APP_NAME),peerAccountId:s.string().regex(j.AWS_ACCOUNT_ID,d.AWS_ACCOUNT_ID),peerRegion:s.string().min(1,d.VPC_PEER.REGION_REQUIRED).optional(),peerVpcId:s.string().regex(j.VPC_ID,d.VPC_ID).optional(),peerVpcCidr:zg.optional(),peerRoleArn:s.string().regex(j.ROLE_ARN,d.ROLE_ARN).optional(),peerRouteTableIds:s.array(s.string().min(1,d.VPC_PEER.ROUTE_TABLE_ID_REQUIRED)).optional(),localVpcName:s.string().min(1,d.REQUIRED.NETWORK_NAME).optional(),enableDnsResolution:s.boolean().optional()}).strict(),u4=s.object({name:F,requesterAccountIds:s.array(s.string().regex(j.AWS_ACCOUNT_ID,d.AWS_ACCOUNT_ID)).min(1,d.VPC_PEER.MIN_REQUESTER_ACCOUNTS),localVpcName:s.string().min(1,d.REQUIRED.NETWORK_NAME).optional(),publishToSsm:s.boolean().optional(),exposedResources:s.array(DC).optional()}).strict();var Rc=["storage","cdn","compute"],wC=s.object({sid:s.string().optional(),effect:s.enum(["Allow","Deny"]),principals:s.array(s.string()),actions:s.array(s.string()),resources:s.array(s.string()).optional(),conditions:s.record(s.string(),s.record(s.string(),s.union([s.string(),s.array(s.string())]))).optional()}).strict(),HE=s.object({name:F,bucketName:s.string().optional(),publicReadAccess:s.boolean().optional(),websiteHosting:s.object({indexDocument:s.string(),errorDocument:s.string().optional()}).strict().optional(),backupVaultTier:s.enum(dt).optional(),versioned:s.boolean().optional(),encryption:s.enum(Bn).optional(),kmsKeyArn:s.string().optional(),cors:s.array(s.object({allowedOrigins:s.array(s.string()),allowedMethods:s.array(s.string()),allowedHeaders:s.array(s.string()).optional(),exposedHeaders:s.array(s.string()).optional(),maxAge:s.number().optional()}).strict()).optional(),deployment:s.object({source:s.string(),prune:s.boolean().optional(),cacheControl:s.object({maxAge:s.number().optional(),immutable:s.boolean().optional()}).strict().optional()}).strict().optional(),retain:s.boolean().optional(),resourcePolicyStatements:s.array(wC).optional(),stackPlacement:s.enum(Rc).optional(),variableName:s.string().optional(),extraProperties:s.array(_e).optional()}).strict().refine(e=>e.encryption!=="KMS"||!!e.kmsKeyArn,{message:d.KMS.KEY_REQUIRED}),g4=s.object({appName:de,bucketName:AE,nameProvidedByFlag:s.boolean().optional(),storagePreset:s.enum(_E).optional(),publicReadAccess:s.boolean().optional(),websiteHosting:s.object({indexDocument:s.string(),errorDocument:s.string().optional()}).strict().optional(),backupVaultTier:s.enum(dt).optional(),versioned:s.boolean().optional(),encryption:s.enum(Bn).optional(),kmsKeyArn:s.string().optional(),cors:s.array(s.object({allowedOrigins:s.array(s.string()),allowedMethods:s.array(s.string()),allowedHeaders:s.array(s.string()).optional(),exposedHeaders:s.array(s.string()).optional(),maxAge:s.number().optional()}).strict()).optional(),connectionConfig:s.object({connectToCompute:s.array(s.string()).optional(),connectToServices:s.array(s.string()).optional()}).strict().optional()}).strict().refine(e=>e.encryption!=="KMS"||!!e.kmsKeyArn,{message:d.KMS.KEY_REQUIRED,path:["kmsKeyArn"]});var Lg=s.enum(["DESTROY","RETAIN"]),XE=s.object({name:F,queueType:s.enum(["standard","fifo"]).default("standard"),visibilityTimeout:s.number().int(d.SQS.VISIBILITY_TIMEOUT.INTEGER).min(0,d.SQS.VISIBILITY_TIMEOUT.MIN).max(43200,d.SQS.VISIBILITY_TIMEOUT.MAX).optional(),retentionPeriod:s.number().int(d.SQS.RETENTION_PERIOD.INTEGER).min(60,d.SQS.RETENTION_PERIOD.MIN).max(1209600,d.SQS.RETENTION_PERIOD.MAX).optional(),contentBasedDeduplication:s.boolean().optional(),removalPolicy:Lg.optional(),variableName:s.string().optional(),extraProperties:s.array(_e).optional()}).strict();var YE=s.object({type:s.literal("basic-auth"),username:s.string().min(1),password:s.string().min(1)}).strict(),JE=s.object({name:F,defaultOriginRef:s.string(),behaviours:s.array(s.object({pathPattern:s.string(),originRef:s.string(),cachePolicy:s.enum(["CACHING_OPTIMIZED","CACHING_DISABLED"]).optional()}).strict()).optional(),customDomain:s.string().optional(),certificateArn:s.string().optional(),accessGate:s.union([s.literal(!1),YE]).optional(),extraProperties:s.array(_e).optional()}).strict(),A4=s.object({appName:s.string(),name:F.optional(),defaultOriginRef:s.string(),behaviours:s.array(s.object({pathPattern:s.string(),originRef:s.string(),cachePolicy:s.enum(["CACHING_OPTIMIZED","CACHING_DISABLED"]).optional()}).strict()).optional(),customDomain:s.string().optional(),certificateArn:s.string().optional(),accessGate:s.union([s.literal(!1),YE]).optional(),nameProvidedByFlag:s.boolean().optional()}).strict();var MC=Object.defineProperty,Ug=(e,t)=>MC(e,"name",{value:t,configurable:!0}),jC=new Set(["t4g","c6g","c6gd","c6gn","c7g","c7gd","c7gn","r6g","r6gd","r7g","r7gd","m6g","m6gd","m7g","m7gd","a1","x2gd","im4gn","is4gen","i4g","hpc7g"]);function Gn(e){let t=e.split(".")[0]??"";return jC.has(t)?"ARM":"STANDARD"}Ug(Gn,"getArchitectureForInstanceType");function Nc(e,t){let n=Gn(e);return n!==t?{valid:!1,message:`Instance type '${e}' requires ${n} architecture, but '${t}' AMI was specified. Use a ${n==="ARM"?"Graviton instance (t4g, c6g, r6g, m6g, etc.)":"Intel/AMD instance (t3, c5, r5, m5, etc.)"} instead.`}:{valid:!0}}Ug(Nc,"validateArchitectureMatch");function qE(e,t){return Gn(e)===t}Ug(qE,"isArchitectureCompatible");var zC=Object.defineProperty,Pc=(e,t)=>zC(e,"name",{value:t,configurable:!0});var LC=1,UC=/^[A-Za-z0-9_.-]+$/,FC=s.object({id:s.string().min(1,"buildSecret id cannot be empty").regex(UC,"buildSecret id may contain only letters, digits, '_', '.', and '-' (no comma, '=', or whitespace, which would break the buildx --secret argv)"),ssm:s.string().min(1,"ssm parameter name cannot be empty").optional(),secretsManager:s.object({name:s.string().min(1,"secret name cannot be empty").optional(),arn:s.string().min(1,"secret arn cannot be empty").optional(),field:s.string().min(1,"secret field cannot be empty").optional()}).strict().refine(e=>e.name===void 0!=(e.arn===void 0),"secretsManager requires exactly one of name or arn").optional(),env:s.string().min(1,"env variable name cannot be empty").optional()}).strict().superRefine((e,t)=>{[e.ssm,e.secretsManager,e.env].filter(n=>n!==void 0).length!==1&&t.addIssue({code:s.ZodIssueCode.custom,message:"buildSecret requires exactly one source (ssm, secretsManager, or env)"})}),BC=s.union([s.string(),s.object({ssm:s.string().min(1,"ssm parameter name cannot be empty").optional(),secretsManager:s.object({name:s.string().min(1,"secret name cannot be empty").optional(),arn:s.string().min(1,"secret arn cannot be empty").optional(),field:s.string().min(1,"secret field cannot be empty").optional()}).strict().refine(e=>e.name===void 0!=(e.arn===void 0),"secretsManager requires exactly one of name or arn").optional(),env:s.string().min(1,"env variable name cannot be empty").optional(),acknowledgePublic:s.boolean().optional()}).strict().superRefine((e,t)=>{[e.ssm,e.secretsManager,e.env].filter(n=>n!==void 0).length!==1&&t.addIssue({code:s.ZodIssueCode.custom,message:"buildArg value requires exactly one source (ssm, secretsManager, or env)"})})]),xt=s.object({path:s.string(),context:s.string().min(1,"context cannot be empty").optional(),target:s.string().min(1,"target cannot be empty").optional(),buildArgs:s.record(s.string(),BC).optional(),buildSecrets:s.array(FC).optional()}).strict(),R4=xt.partial();function ZC(e,t){if(t===void 0)return e;let n=t.context??e.context,i=t.target??e.target,r=t.buildArgs??e.buildArgs,o=t.buildSecrets??e.buildSecrets;return{path:t.path??e.path,...n!==void 0&&{context:n},...i!==void 0&&{target:i},...r!==void 0&&{buildArgs:r},...o!==void 0&&{buildSecrets:o}}}Pc(ZC,"mergeDockerBuild");function Fg(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}Pc(Fg,"isRecord");function QE(e){if(!Fg(e)||typeof e.path!="string"||e.path.length===0)return;let t=typeof e.context=="string"&&e.context.length>0?e.context:void 0,n=typeof e.target=="string"&&e.target.length>0?e.target:void 0,i=Fg(e.buildArgs)&&Object.keys(e.buildArgs).length>0?e.buildArgs:void 0,r=Array.isArray(e.buildSecrets)&&e.buildSecrets.length>0?e.buildSecrets:void 0,o={path:e.path,...t!==void 0&&{context:t},...n!==void 0&&{target:n},...i!==void 0&&{buildArgs:i},...r!==void 0&&{buildSecrets:r}},a=xt.safeParse(o);return a.success?a.data:void 0}Pc(QE,"normaliseDockerBuild");function VC(e){if(e===void 0)return;let t=QE(e);return t===void 0?void 0:JSON.stringify(t)}Pc(VC,"dockerBuildFingerprint");var GC=s.object({name:s.string(),clusterName:s.string().optional(),docker:xt.optional(),containerPort:s.number().optional(),secrets:s.array(s.string()).optional(),ssmSecretsPath:s.string().optional(),importedSecretNames:s.array(s.string()).optional()}).strict(),WC=s.object({type:s.enum(At),name:s.string(),source:s.string()}).strict(),KC=s.object({repositoryName:s.string()}).strict(),HC=s.object({name:s.string(),secrets:s.array(s.string()).optional(),ssmSecretsPath:s.string().optional(),importedSecretNames:s.array(s.string()).optional(),docker:xt.optional(),imageKey:s.string().optional()}).strict(),XC=s.object({templateHash:s.string(),synthTimestamp:s.string()}).strict(),YC=s.object({constructPath:s.string().max(512),group:s.string().max(128),resourceType:s.string().max(256)}).strict(),N4=s.object({version:s.literal(LC),generatedAt:s.string(),appName:s.string(),services:s.array(GC),lambdas:s.array(HC),pattern:WC.optional(),ecr:KC.optional(),stacks:s.record(s.string(),XC),resourceMap:s.record(s.string(),YC).optional()}).strict();var JC=Object.defineProperty,qC=(e,t)=>JC(e,"name",{value:t,configurable:!0});function tA(e){return!(e.image!==void 0&&e.docker!==void 0)}qC(tA,"imageDockerMutexCheck");var rA=s.number().int(d.CAPACITY.MIN.INTEGER).min(kg,d.GENERATOR_CAPACITY.MIN.MIN).max(Og,d.GENERATOR_CAPACITY.MIN.MAX),nA=s.number().int(d.CAPACITY.MAX.INTEGER).min(kg,d.GENERATOR_CAPACITY.MAX.MIN).max(Og,d.GENERATOR_CAPACITY.MAX.MAX),Wn=s.number().int(d.LAMBDA.MEMORY.INTEGER).min(vE,d.LAMBDA.MEMORY.MIN).max(hE,d.LAMBDA.MEMORY.MAX).refine(e=>e===128||e%64===0,d.LAMBDA.MEMORY.MULTIPLE),iA=s.string().regex(j.LAMBDA_RUNTIME_IDENTIFIER,d.LAMBDA.RUNTIME),Bg=s.number().int(d.CPU.INTEGER).min(256,d.CPU.MIN).max(4096,d.CPU.MAX),kc=s.number().int(d.CAPACITY.DESIRED.INTEGER).min(0,d.CAPACITY.DESIRED.MIN).max(Fn,d.CAPACITY.DESIRED.MAX),ho=s.object({connectToDatabase:s.array(s.string()).optional()}).strict(),QC=s.object({minSize:s.number().int(d.CAPACITY.WARM_POOL.MIN_SIZE.INTEGER).min(0,d.CAPACITY.WARM_POOL.MIN_SIZE.MIN).max(bE,d.CAPACITY.WARM_POOL.MIN_SIZE.MAX).optional(),reuseOnScaleIn:s.boolean().optional()}).strict(),Zg=s.object({instanceType:s.string().optional(),amiHardwareType:s.enum(fc).optional(),minCapacity:s.number().int(d.CAPACITY.MIN.INTEGER).min(0,d.CAPACITY.MIN.MIN_0).max(Fn,d.CAPACITY.MIN.MAX).optional(),maxCapacity:s.number().int(d.CAPACITY.MAX.INTEGER).min(1,d.CAPACITY.MAX.MIN_1).max(Fn,d.CAPACITY.MAX.MAX).optional(),memoryLimitMiB:mo(128).optional(),warmPool:QC.optional(),extraProperties:s.array(_e).optional()}).strict().superRefine((e,t)=>{if(!e.instanceType||!e.amiHardwareType)return;let n=Nc(e.instanceType,e.amiHardwareType);n.valid||t.addIssue({code:"custom",message:n.message??d.ARCHITECTURE_MISMATCH,path:["instanceType"]})}).superRefine((e,t)=>{e.minCapacity===0&&!e.warmPool&&t.addIssue({code:"custom",message:d.CAPACITY.WARM_POOL_REQUIRED,path:["minCapacity"]}),e.warmPool?.minSize!==void 0&&e.maxCapacity!==void 0&&e.warmPool.minSize>e.maxCapacity&&t.addIssue({code:"custom",message:d.CAPACITY.WARM_POOL.MIN_SIZE_EXCEEDS_MAX_CAPACITY,path:["warmPool","minSize"]})}),ek=s.enum(so).describe(`Compute type must be one of: ${so.join(", ")}`),Vg=s.enum(zn).describe(`ECS capacity provider must be one of: ${zn.join(", ")}`),Gg=s.string().refine(e=>Qe(gc,e),{message:d.INSTANCE_TYPE}),oA=s.object({sourceType:s.enum(["sqs","dynamodb","eventbridge"]),sourceRef:s.string().describe("Name of the source resource"),batchSize:s.number().int(d.BATCH_SIZE.INTEGER).min(1,d.BATCH_SIZE.MIN).max(1e4,d.BATCH_SIZE.MAX).optional(),startingPosition:s.enum(["TRIM_HORIZON","LATEST"]).optional(),maxBatchingWindow:s.number().int(d.BATCHING_WINDOW.INTEGER).min(0,d.BATCHING_WINDOW.MIN).max(300,d.BATCHING_WINDOW.MAX).optional(),reportBatchItemFailures:s.boolean().optional()}).strict(),tk=s.object({name:s.string().min(1,d.REQUIRED.CONTAINER_NAME).optional(),image:s.string().optional(),port:$r.optional(),environment:Zn.optional(),secretsImport:IE.optional(),command:s.array(s.string()).optional(),entryPoint:s.array(s.string()).optional(),essential:s.boolean().optional(),healthCheck:s.object({command:s.array(s.string()),interval:s.number().int(d.HEALTH_CHECK.INTERVAL.INTEGER).min(5,d.HEALTH_CHECK.INTERVAL.MIN).max(300,d.HEALTH_CHECK.INTERVAL.MAX).optional(),timeout:s.number().int(d.HEALTH_CHECK.TIMEOUT.INTEGER).min(2,d.HEALTH_CHECK.TIMEOUT.MIN).max(60,d.HEALTH_CHECK.TIMEOUT.MAX).optional(),retries:s.number().int(d.HEALTH_CHECK.RETRIES.INTEGER).min(1,d.HEALTH_CHECK.RETRIES.MIN).max(10,d.HEALTH_CHECK.RETRIES.MAX).optional(),startPeriod:s.number().int(d.HEALTH_CHECK.START_PERIOD.INTEGER).min(0,d.HEALTH_CHECK.START_PERIOD.MIN).max(300,d.HEALTH_CHECK.START_PERIOD.MAX).optional()}).strict().optional(),ssmSecrets:s.array(s.string().regex(j.SECRET_NAME,d.SECRET_NAME)).optional(),extraProperties:s.array(_e).optional()}).strict(),aA=s.string().min(1,d.REQUIRED.SERVICE_NAME).max(255,d.MAX_LENGTH.SERVICE_NAME).regex(j.ECS_SERVICE_NAME,d.ECS_SERVICE_NAME),sA=s.object({domain:s.string().optional(),loadBalancer:s.union([s.literal(!1),s.enum(mc)]).optional(),directAccess:s.boolean().optional(),extraProperties:s.array(_e).optional()}).strict().refine(e=>!(e.directAccess&&e.domain),{message:d.DIRECT_ACCESS.NO_DOMAIN,path:["directAccess"]}).refine(e=>!(e.directAccess&&typeof e.loadBalancer=="string"),{message:d.DIRECT_ACCESS.NO_LOAD_BALANCER}).describe("Cluster-level configuration"),Cc=s.object({path:s.string().optional(),host:s.string().optional(),priority:s.number().int(d.PRIORITY.INTEGER).min(1,d.PRIORITY.MIN).max(5e4,d.PRIORITY.MAX).optional(),healthCheckPath:s.string().optional()}).strict().describe("Path/host-based routing configuration"),rk=s.object({desiredCount:kc.optional(),minCapacity:s.number().int(d.CAPACITY.MIN.INTEGER).min(0,d.CAPACITY.MIN.MIN_0).max(Fn,d.CAPACITY.MIN.MAX).optional(),maxCapacity:s.number().int(d.CAPACITY.MAX.INTEGER).min(1,d.CAPACITY.MAX.MIN_1).max(Fn,d.CAPACITY.MAX.MAX).optional(),scalingType:s.enum(pc).optional()}).strict().refine(Ir.check,Ir.params).describe("ECS service scaling configuration"),cA=s.object({name:aA,docker:xt.optional(),needsDatabaseConnection:s.boolean().optional(),needsStorageConnection:s.boolean().optional(),needsMessagingConnection:s.boolean().optional(),image:s.string().optional(),containers:s.array(tk).optional(),routing:s.union([Cc,s.array(Cc).min(1)]).optional(),cpu:Bg.optional(),memoryLimitMiB:mo(512).optional(),desiredCount:kc.optional(),scaling:ze(rk).optional(),capacityProvider:Vg,ec2Config:Zg.optional(),ssmSecretsPath:s.string().regex(j.SSM_PATH,d.SSM_PATH).optional(),extraProperties:s.array(_e).optional(),alarms:NE.optional()}).strict().superRefine((e,t)=>{tA(e)||t.addIssue({code:"custom",path:["docker"],message:d.IMAGE_DOCKER_MUTEX})}).describe("Configuration for a service in an ECS cluster"),uA=s.object({name:F,type:ek,needsConnection:s.boolean(),connectedDatabase:s.array(s.string()).optional(),connectedStorage:s.array(s.string()).optional(),connectedMessaging:s.array(s.string()).optional(),cluster:sA.optional(),services:s.array(cA).optional(),docker:xt.partial().optional(),deployment:s.enum(lc).optional(),codePath:s.string().optional(),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(vc,d.LAMBDA.TIMEOUT.MIN).max(hc,d.LAMBDA.TIMEOUT.MAX).optional(),memory:Wn.optional(),handler:s.string().optional(),runtime:iA.optional(),environment:Zn.optional(),secrets:Zn.optional(),eventSources:s.array(oA).optional(),functionUrl:s.object({authType:s.enum(uo)}).strict().optional(),description:s.string().optional(),scheduleExpression:s.string().optional(),architecture:s.enum(dc).optional(),ephemeralStorageSize:s.number().int(d.EPHEMERAL_STORAGE.INTEGER).min(512,d.EPHEMERAL_STORAGE.MIN).max(10240,d.EPHEMERAL_STORAGE.MAX).optional(),functionName:s.string().optional(),ssmSecrets:s.array(s.string()).optional(),ssmSecretsPath:s.string().optional(),alarms:CE.optional(),instanceType:Gg.optional(),enableSSH:s.boolean().optional(),keyName:s.string().optional(),userData:s.string().optional(),securityGroups:s.array(s.string()).optional(),variableName:s.string().optional(),extraProperties:s.array(_e).optional()}).strict().superRefine((e,t)=>{if(e.type==="ecs"&&e.services)for(let n=0;n<e.services.length;n++){let i=e.services[n];i?.ec2Config?.instanceType&&!i.ec2Config.amiHardwareType&&Gn(i.ec2Config.instanceType)!=="ARM"&&t.addIssue({code:"custom",message:`Service '${i.name??n}' uses instance type '${i.ec2Config.instanceType}' (x86), which requires Docker images built for linux/amd64. The default build targets linux/arm64 (Graviton). Use a Graviton instance type (t4g, c6g, r6g, m6g, etc.) or set amiHardwareType: "STANDARD" to acknowledge x86.`,path:["services",n,"ec2Config","instanceType"]})}e.type==="lambda"&&e.deployment==="container"&&e.architecture==="X86_64"&&t.addIssue({code:"custom",message:"Lambda architecture 'X86_64' requires Docker images built for linux/amd64, but the default build targets linux/arm64. Use 'ARM_64' for Graviton Lambdas (recommended) or ensure your build pipeline targets linux/amd64.",path:["architecture"]})}),z4=s.object({appName:de,clusterName:F,containerPort:$r,nameProvidedByFlag:s.boolean().optional(),ecrRepository:s.string().optional(),capacityProvider:Vg.optional(),useAppEcr:s.boolean().optional(),desiredCount:kc.optional(),cpu:Bg.optional(),memoryLimitMiB:mo(512).optional(),minCapacity:rA.optional(),maxCapacity:nA.optional(),ec2Config:Zg.optional(),connectionConfig:ho.optional()}).strict().refine(Ir.check,Ir.params),L4=s.object({appName:de,functionName:F,nameProvidedByFlag:s.boolean().optional(),lambdaType:s.enum(["basic","web","custom"]).optional(),ecrRepository:s.string().optional(),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(vc,d.LAMBDA.TIMEOUT.MIN).max(hc,d.LAMBDA.TIMEOUT.MAX).optional(),memory:Wn.optional(),enableFunctionUrl:s.boolean().optional(),description:s.string().optional(),enableCors:s.boolean().optional(),corsOrigins:s.string().optional(),corsHeaders:s.string().optional(),corsMethods:s.array(s.enum(SE)).optional(),corsCredentials:s.boolean().optional(),connectionConfig:ho.optional()}).strict(),U4=s.object({appName:de,instanceName:F,nameProvidedByFlag:s.boolean().optional(),instanceType:Gg.optional(),enableSSH:s.boolean().optional(),minCapacity:rA.optional(),maxCapacity:nA.optional(),connectionConfig:ho.optional()}).strict().refine(Ir.check,Ir.params),F4=s.object({appName:de,clusterName:F,serviceName:aA,capacityProvider:Vg,containerPort:$r.optional(),cpu:Bg.optional(),memoryLimitMiB:mo(512).optional(),desiredCount:kc.optional(),ec2Config:Zg.optional(),routing:s.union([Cc,s.array(Cc).min(1)]).optional(),docker:xt.partial().optional(),nameProvidedByFlag:s.boolean().optional(),connectionConfig:ho.optional()}).strict(),Wg=s.object({appName:de,computeName:F,nameProvidedByFlag:s.boolean().optional(),connectionConfig:ho.optional()}).strict(),nk=Wg.extend({type:s.literal("ecs"),cluster:sA.optional(),services:s.array(cA).min(1,d.SERVICE.MIN_REQUIRED),docker:xt.partial().optional()}).strict().refine(e=>{let t=e.services.filter(n=>n.containers?.some(i=>i.port));return t.length>1?t.every(n=>(Array.isArray(n.routing)?n.routing:n.routing?[n.routing]:[]).some(i=>i.path||i.host)):!0},{message:d.SERVICE.ROUTING_REQUIRED}).refine(e=>{let t=e.services.map(n=>n.name);return new Set(t).size===t.length},{message:d.SERVICE.UNIQUE_WITHIN_CLUSTER}),ik=Wg.extend({type:s.literal("lambda"),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(vc,d.LAMBDA.TIMEOUT.MIN).max(hc,d.LAMBDA.TIMEOUT.MAX).optional(),memory:Wn.optional(),handler:s.string().optional(),runtime:iA.optional(),environment:Zn.optional(),secrets:Zn.optional(),description:s.string().optional(),functionUrl:s.union([s.object({authType:s.enum(uo).optional()}).strict(),s.literal(!1)]).optional(),eventSources:s.array(oA).optional()}).strict(),ok=Wg.extend({type:s.literal("ec2"),instanceType:Gg.optional(),enableSSH:s.boolean().optional(),keyName:s.string().optional(),userData:s.string().optional(),securityGroups:s.array(s.string()).optional()}).strict(),B4=s.discriminatedUnion("type",[nk,ik,ok]),eA=s.object({path:s.string().min(1,d.REQUIRED.ROUTING_PATH),priority:s.number().int(d.PRIORITY.INTEGER).min(1,d.PRIORITY.MIN).max(5e4,d.PRIORITY.MAX).optional()}).strict(),lA=s.object({name:s.string().min(1,d.REQUIRED.SERVICE_NAME).max(255,d.MAX_LENGTH.SERVICE_NAME).regex(j.RESOURCE_NAME,d.RESOURCE_NAME),serviceType:s.enum(["web","worker"]).optional(),docker:xt.partial().optional(),containerPort:$r.optional(),needsDatabaseConnection:s.boolean().optional(),routing:s.union([eA,s.array(eA).min(1)]).optional()}).strict().superRefine((e,t)=>{e.serviceType==="worker"&&(e.containerPort!==void 0&&t.addIssue({code:"custom",path:["containerPort"],message:"Worker services are not reachable inbound; remove containerPort."}),e.routing!==void 0&&t.addIssue({code:"custom",path:["routing"],message:"Worker services have no ALB route; remove routing."}))}),Z4=s.object({appName:de,instanceType:s.string().optional()}).strict();var Kg=s.object({memorySize:Wn.optional(),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(1,d.LAMBDA.TIMEOUT.MIN).max(900,d.LAMBDA.TIMEOUT.MAX).optional(),ephemeralStorageSize:s.number().int(d.EPHEMERAL_STORAGE.INTEGER).min(512,d.EPHEMERAL_STORAGE.MIN).max(10240,d.EPHEMERAL_STORAGE.MAX).optional()}).strict(),dA=s.object({type:s.enum(Cg).optional(),databaseName:s.string().optional(),databaseEngine:s.enum(Un).optional(),deletionProtection:s.boolean().optional(),backupRetention:Mt.optional(),port:Sc.optional(),publiclyAccessible:s.boolean().optional(),allowedIpCidr:s.string().optional(),instanceType:s.string().optional(),allocatedStorage:s.number().int(d.ALLOCATED_STORAGE.INTEGER).min(20,d.ALLOCATED_STORAGE.MIN).max(65536,d.ALLOCATED_STORAGE.MAX).optional(),multiAz:s.boolean().optional(),readReplica:Ac.optional(),writer:go.optional(),readers:vo.optional(),allowVpcAccess:s.boolean().optional(),monitoringInterval:fo.optional(),preferredMaintenanceWindow:s.string().optional(),databaseInsights:xc.optional(),proxy:Ec.optional(),credentials:_c.optional(),encryption:Ic.optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()}).strict(),mA=s.object({server:Kg.optional(),imageOptimisation:Kg.optional(),revalidation:Kg.optional()}).strict(),Hg=s.object({versioned:s.boolean().optional()}).strict(),pA=s.object({assets:Hg.optional(),cache:Hg.optional(),media:Hg.optional()}).strict(),ak=s.object({visibilityTimeout:s.number().int(d.SQS.VISIBILITY_TIMEOUT.INTEGER).min(0,d.SQS.VISIBILITY_TIMEOUT.MIN).max(43200,d.SQS.VISIBILITY_TIMEOUT.MAX).optional(),messageRetentionPeriod:s.number().int(d.SQS.RETENTION_PERIOD.INTEGER).min(60,d.SQS.RETENTION_PERIOD.MIN).max(1209600,d.SQS.RETENTION_PERIOD.MAX).optional(),maxMessageSize:s.number().int(d.MAX_MESSAGE_SIZE.INTEGER).min(1024,d.MAX_MESSAGE_SIZE.MIN).max(262144,d.MAX_MESSAGE_SIZE.MAX).optional(),deadLetterQueue:s.union([s.literal(!1),s.object({enabled:s.boolean().optional(),maxReceiveCount:s.number().int(d.DLQ.MAX_RECEIVE_COUNT.INTEGER).min(1,d.DLQ.MAX_RECEIVE_COUNT.MIN).max(1e3,d.DLQ.MAX_RECEIVE_COUNT.MAX).optional()}).strict()]).optional()}).strict(),fA=s.object({revalidationQueue:ak.optional()}).strict(),gA=s.object({domainNames:s.array(s.string()).optional(),certificateArn:s.string().optional()}).strict(),vA=s.record(s.string().regex(j.ENV_VAR_NAME,d.ENV_VAR_NAME),s.string()).optional(),sk=s.object({type:s.literal("payload"),name:s.string().min(1,d.REQUIRED.PATTERN_NAME),domain:s.string().optional(),database:dA.optional(),compute:mA.optional(),storage:pA.optional(),messaging:fA.optional(),cdn:gA.optional(),environment:vA}).strict(),ck=s.object({type:s.literal("nextjs"),name:s.string().min(1,d.REQUIRED.PATTERN_NAME),domain:s.string().optional(),database:dA.optional(),compute:mA.optional(),storage:pA.optional(),messaging:fA.optional(),cdn:gA.optional(),environment:vA}).strict(),Xg=s.enum(oo),uk=s.object({command:s.string().min(1,d.REQUIRED.BUILD_COMMAND),outputDir:s.string().min(1,d.REQUIRED.OUTPUT_DIR)}).strict(),lk=s.object({headers:s.boolean().optional(),contentSecurityPolicy:s.string().optional()}).strict(),dk=s.object({to:s.string().min(1,d.REQUIRED.FORMS_TO).regex(j.EMAIL,d.EMAIL),from:s.string().regex(j.EMAIL,d.EMAIL).optional(),corsOrigin:s.string().regex(j.HTTP_ORIGIN,"corsOrigin must be an exact origin such as https://example.com (no path, no trailing slash)").optional(),maxConcurrency:s.number().int().min(1).max(100).optional()}).strict(),mk=s.object({behaviours:s.array(s.unknown()).optional()}).strict(),Yg=s.object({type:s.literal("staticsite"),name:s.string().min(1,d.REQUIRED.PATTERN_NAME),source:s.string().min(1,d.REQUIRED.SOURCE),build:uk,routing:Xg.optional(),security:lk.optional(),domain:s.string().optional(),forms:dk.optional(),cdn:mk.optional()}).strict().superRefine((e,t)=>{if(e.forms===void 0)return;let n=e.domain;if(n===void 0||n===""){t.addIssue({code:"custom",path:["domain"],message:"A domain is required when forms are enabled: SES sends only from a verified identity, and the site's domain is the identity the pattern verifies"});return}let i=e.forms.from;i!==void 0&&!oc(i,n)&&t.addIssue({code:"custom",path:["forms","from"],message:`forms.from must be an address at ${n} (the verified SES identity) \u2014 for example noreply@${n}. Use forms.to for the recipient.`})}),bo=s.discriminatedUnion("type",[sk,ck,Yg]),hA=s.enum(["lightweight","standard","resilient","custom"]),bA=s.object({type:s.enum(Cg),instanceType:s.string().optional(),backupRetention:Mt.optional(),deletionProtection:s.boolean().optional(),encryption:s.union([s.object({useCMK:s.literal(!0)}).strict(),s.literal(!1)]).optional()}).strict(),yA=s.object({memorySize:Wn.optional(),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(1,d.LAMBDA.TIMEOUT.MIN).max(900,d.LAMBDA.TIMEOUT.MAX).optional()}).strict();var SA=s.object({appName:de,type:Dg,pattern:wg.optional(),patternConfig:bo.optional(),owner:s.string().optional(),tags:s.record(s.string(),s.string()).optional(),vpcId:s.string().optional(),network:Tc.optional(),backup:TE.optional(),tunnel:RE.optional(),additionalNetworks:s.array(WE).optional(),database:s.array(OE),s3:s.array(HE),compute:s.array(uA),dynamodb:s.array(UE).optional(),clickhouse:s.array(FE).optional(),sqs:s.array(XE).optional(),cdn:JE.optional(),customCodeBlocks:s.array($E).optional(),additionalManagedImports:s.array(s.object({moduleSpecifier:s.string(),namedImports:s.array(s.string()),defaultImport:s.string().optional()}).strict()).optional()}).strict(),u6=s.object({name:de,type:Dg,pattern:wg.optional(),patternTier:hA.optional(),patternDomain:s.string().optional(),source:s.string().min(1,d.REQUIRED.SOURCE).optional(),buildCommand:s.string().min(1,d.REQUIRED.BUILD_COMMAND).optional(),outputDir:s.string().min(1,d.REQUIRED.OUTPUT_DIR).optional(),routing:Xg.optional(),formsTo:s.string().min(1,d.REQUIRED.FORMS_TO).regex(j.EMAIL,d.EMAIL).optional(),corsOrigin:s.string().regex(j.HTTP_ORIGIN,"corsOrigin must be an exact origin such as https://example.com (no path, no trailing slash)").optional(),customDatabase:bA.optional(),customCompute:yA.optional(),region:s.string().optional(),owner:s.string().optional(),includeDatabase:s.boolean().optional(),databaseName:s.string().min(1,d.DATABASE.NAME.REQUIRED).max(63,d.DATABASE.NAME.MAX_LENGTH).optional(),vpcId:s.string().optional(),network:KE.optional(),services:s.array(lA).optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()}).strict().superRefine((e,t)=>{e.formsTo!==void 0&&(e.patternDomain!==void 0&&e.patternDomain!==""||t.addIssue({code:"custom",path:["patternDomain"],message:"A domain is required when forms are enabled: SES sends only from a verified identity, and the site's domain is the identity the pattern verifies"}))}),l6=s.object({name:F,localResource:s.string().min(1),remoteApp:s.string().min(1),remoteResource:s.string().min(1),permission:s.enum(["read","write","read-write"]),remoteArn:s.string().optional()}).strict();var pk=["fjall-managed","external","external-manual"],g6=s.enum(pk);var _A=s.object({givenName:s.string().min(1),familyName:s.string().min(1),displayName:s.string().min(1).optional(),expires:s.string().min(1).optional()}).strict(),EA=s.object({name:s.string().min(1),path:s.string().min(1).optional()}).strict(),fk=s.union([s.object({managedPolicyArn:s.string().min(1)}).strict(),s.object({customerManagedPolicy:EA}).strict()]),gk=s.object({managedPolicies:s.array(s.string().min(1)).optional(),inlinePolicy:s.record(s.string(),s.unknown()).optional(),customerManagedPolicies:s.array(EA).optional(),permissionsBoundary:fk.optional(),sessionDuration:s.string().min(1).optional(),description:s.string().optional(),accounts:s.union([s.array(s.string().min(1)),s.literal("all")]).optional(),includeManagementAccount:s.boolean().optional(),groups:s.array(s.string().min(1)).optional()}).strict(),vk=s.object({description:s.string().optional()}).strict(),Oc=s.string().regex(j.EMAIL,d.EMAIL),Jg={groups:s.record(s.string(),vk).optional(),permissionSets:s.record(s.string(),gk).optional(),memberships:s.record(s.string(),s.array(Oc)).optional(),resolutionVersion:s.number().int().min(1).optional(),defaultPermissionSets:s.boolean().optional()},hk=s.discriminatedUnion("source",[s.object({...Jg,source:s.literal("fjall-managed"),users:s.record(Oc,_A)}).strict(),s.object({...Jg,source:s.literal("external")}).strict(),s.object({...Jg,source:s.literal("external-manual"),users:s.record(Oc,_A).optional()}).strict()]),v6=s.object({name:F,type:s.literal("organisation").optional(),organisationName:s.string().min(1).optional(),orgEmail:Oc.optional(),accounts:s.unknown().optional(),accountIds:s.record(s.string(),s.string()).optional(),identityCentre:s.union([hk,s.literal(!1)]).optional(),allowedRegions:s.array(s.string().min(1)).optional()}).strict();var bk=Object.defineProperty,yk=(e,t)=>bk(e,"name",{value:t,configurable:!0}),Sk=[1,3,5,7,14,30,60,90,120,150,180,365,400,545,731,1827,3653],_k=s.object({buildkiteQueue:s.string().min(1,"buildkiteQueue cannot be empty").max(100).regex(/^[a-zA-Z0-9-_]+$/,"buildkiteQueue must be alphanumeric with hyphens/underscores"),buildkiteOrgSlug:s.string().min(1,"buildkiteOrgSlug cannot be empty").max(100).regex(/^[a-z0-9-]+$/,"buildkiteOrgSlug must be a lowercase Buildkite organisation slug"),agentTokenSsmParameterName:s.string().min(2).regex(/^\//,"agentTokenSsmParameterName must be a full path (leading /)").optional(),agentTokenKmsKeyArn:s.string().min(1).optional(),fjallApiKeySsmParameterName:s.string().min(2).regex(/^\//,"fjallApiKeySsmParameterName must be a full path (leading /)").optional(),instanceType:s.string().min(1).default("c8g.xlarge"),agentVolumeSizeGib:s.number().int().min(20).max(1e3).default(250),agentMinInstances:s.number().int().min(0).default(0),agentMaxInstances:s.number().int().min(1).default(2),agentsPerInstance:s.number().int().min(1).default(1),spotCapacityPercentage:s.number().int().min(0).max(100).default(0),scaleInIdlePeriodSeconds:s.number().int().min(60).default(600),disconnectAfterUptimeSeconds:s.number().int().min(3600).default(86400),maxInstanceLifetimeDays:s.number().int().min(1).max(365).default(7),terminateInstanceAfterJob:s.boolean().default(!1),purgeBuildsOnDiskFull:s.boolean().default(!0),terminateInstanceOnDiskFull:s.boolean().default(!1),logRetentionDays:s.number().int().min(1).default(30),agentLogRetentionDays:s.literal(Sk).default(7),buildkiteAgentRelease:s.enum(["stable","beta","edge"]).default("stable"),buildkiteAgentTags:s.string().default(""),buildkiteAgentTimestampLines:s.boolean().default(!1),buildkiteAgentExperiments:s.string().default(""),buildkiteAgentTracingBackend:s.enum(["","datadog","opentelemetry"]).default(""),buildkiteAgentCancelGracePeriodSeconds:s.number().int().min(10).default(60),enableSecretsPlugin:s.boolean().default(!0),enableEcrPlugin:s.boolean().default(!1),enableDockerLoginPlugin:s.boolean().default(!1),enableDockerUserNamespaceRemap:s.boolean().default(!0),enableDockerExperimental:s.boolean().default(!1),dockerNetworkingProtocol:s.enum(["ipv4","dualstack"]).default("ipv4"),enableInstanceStorage:s.boolean().default(!1),mountTmpfsAtTmp:s.boolean().default(!0),buildkiteAgentEnableGitMirrors:s.boolean().default(!1),bootstrapScriptUrl:s.string().default(""),agentEnvFileUrl:s.string().default(""),scalerEventSchedulePeriod:s.string().min(1).default("1 minute"),scalerMinPollInterval:s.string().min(1).default("10s"),scaleOutFactor:s.string().min(1).default("1.0"),scaleOutWaitingForJobs:s.boolean().default(!1),rolePermissionsBoundaryArn:s.string().min(1).optional(),alarmSnsTopicArn:s.string().min(1).optional(),applicationId:s.string().min(1).optional(),costAllocationEnvironment:s.string().min(1).optional(),costAllocationOwner:s.string().min(1).optional()}).strict(),Ek=_k.refine(e=>e.agentMinInstances<=e.agentMaxInstances,{message:"agentMinInstances must be <= agentMaxInstances"});function Ak(e){let t=Ek.safeParse(e);if(!t.success){let n=t.error.issues.map(i=>` - ${i.path.join(".")||"(root)"}: ${i.message}`).join(`
|
|
72
72
|
`);throw new Error(`Buildkite: invalid props:
|
|
73
73
|
${n}`)}return t.data}yk(Ak,"validateBuildkiteProps");var xk=Object.defineProperty,Ik=(e,t)=>xk(e,"name",{value:t,configurable:!0});function $k(e){return`FjallDeployBoundary${e}`}Ik($k,"deployBoundaryName");var qg={Sid:"FjallInheritAdministratorAccess",Effect:"Allow",Action:"*",Resource:"*"},AA=[{Sid:"FjallDenyOrgAndAccountEscape",Effect:"Deny",Action:["organizations:LeaveOrganization","account:CloseAccount"],Resource:"*"},{Sid:"FjallDenyDisableAuditLogging",Effect:"Deny",Action:["cloudtrail:StopLogging"],Resource:"*"},{Sid:"FjallDenyBoundarySelfEscape",Effect:"Deny",Action:["iam:DeleteRolePermissionsBoundary"],Resource:"*"},{Sid:"FjallDenyDisableKmsKey",Effect:"Deny",Action:["kms:DisableKey"],Resource:"*"}],xA=[...AA,{Sid:"FjallDenyStandingHumanCredentials",Effect:"Deny",Action:["iam:CreateUser","iam:CreateLoginProfile","iam:CreateAccessKey","iam:CreateAccountAlias"],Resource:"*"},{Sid:"FjallDenyDisableConfigRecorder",Effect:"Deny",Action:["config:StopConfigurationRecorder"],Resource:"*"}],Tk=[...xA,{Sid:"FjallDenyAccountPasswordPolicyTamper",Effect:"Deny",Action:["iam:UpdateAccountPasswordPolicy","iam:DeleteAccountPasswordPolicy"],Resource:"*"},{Sid:"FjallDenyDisableDefaultEbsEncryption",Effect:"Deny",Action:["ec2:DisableEbsEncryptionByDefault"],Resource:"*"}],k6={foundation:[qg,...AA],compliance:[qg,...xA],hardened:[qg,...Tk]};var Rk=Object.defineProperty,Ne=(e,t)=>Rk(e,"name",{value:t,configurable:!0});var Qg="sts.amazonaws.com";function Nk(e){return`FjallDevDeploy${e}`}Ne(Nk,"devDeployRoleName");function Pk(e){return`FjallDevProvisioner${e}`}Ne(Pk,"devProvisionerRoleName");function Ck(e){return`FjallDevSyncWriter${e}`}Ne(Ck,"devSyncWriterRoleName");var kk="FjallDevBoundary";function IA(e){return`arn:aws:iam::${e}:policy/${kk}`}Ne(IA,"devBoundaryPolicyArn");function $A(e){return`org:${e}:dev-provisioner`}Ne($A,"devProvisionerSubject");function TA(e){return`org:${e}:dev-sync`}Ne(TA,"devSyncSubject");function Ok(e){let{fjallOrgId:t,providerArn:n,issuerDomain:i}=e,r={[`${i}:aud`]:Qg};return[{Sid:"FjallMachineSubject",Effect:"Allow",Principal:{Federated:n},Action:"sts:AssumeRoleWithWebIdentity",Condition:{StringEquals:{...r,[`${i}:sub`]:`org:${t}:*`}}},{Sid:"FjallUserSubjects",Effect:"Allow",Principal:{Federated:n},Action:"sts:AssumeRoleWithWebIdentity",Condition:{StringEquals:r,StringLike:{[`${i}:sub`]:`org:${t}:user:*`}}},{Sid:"FjallServiceSubjects",Effect:"Allow",Principal:{Federated:n},Action:"sts:AssumeRoleWithWebIdentity",Condition:{StringEquals:{...r,[`${i}:sub`]:[`org:${t}:discovery`,`org:${t}:connection`,`org:${t}:org-setup`,`org:${t}:dev-substrate-setup`]}}}]}Ne(Ok,"buildNarrowedDeployTrustStatements");function Dk(e){let{fjallOrgId:t,providerArn:n,issuerDomain:i,accountId:r}=e;return[{Sid:"FjallDevSubjectsThisAccount",Effect:"Allow",Principal:{Federated:n},Action:"sts:AssumeRoleWithWebIdentity",Condition:{StringEquals:{[`${i}:aud`]:Qg},StringLike:{[`${i}:sub`]:`org:${t}:dev:${r}:*`}}}]}Ne(Dk,"buildDevDeployTrustStatements");function ev(e){let{providerArn:t,issuerDomain:n,sid:i,subject:r}=e;return[{Sid:i,Effect:"Allow",Principal:{Federated:t},Action:"sts:AssumeRoleWithWebIdentity",Condition:{StringEquals:{[`${n}:aud`]:Qg,[`${n}:sub`]:r}}}]}Ne(ev,"buildServiceSubjectTrustStatements");function wk(e){return ev({...e,sid:"FjallDevProvisionerSubject",subject:$A(e.fjallOrgId)})}Ne(wk,"buildDevProvisionerTrustStatements");function Mk(e){return ev({...e,sid:"FjallDevSyncSubject",subject:TA(e.fjallOrgId)})}Ne(Mk,"buildDevSyncWriterTrustStatements");function jk({accountId:e}){return[{Sid:"FjallDevEcsTaggedMutations",Effect:"Allow",Action:["ecs:UpdateService","ecs:DeleteService","ecs:RunTask","ecs:StopTask"],Resource:`arn:aws:ecs:*:${e}:*`,Condition:{StringEquals:{"aws:ResourceTag/fjall:dev":"true"}}},{Sid:"FjallDevEcsTaggedCreates",Effect:"Allow",Action:["ecs:RegisterTaskDefinition","ecs:CreateService"],Resource:"*",Condition:{StringEquals:{"aws:RequestTag/fjall:dev":"true"}}},{Sid:"FjallDevEcsTagOnCreate",Effect:"Allow",Action:["ecs:TagResource"],Resource:`arn:aws:ecs:*:${e}:*`,Condition:{StringEquals:{"ecs:CreateAction":["RegisterTaskDefinition","CreateService","RunTask"]}}},{Sid:"FjallDevEcsReads",Effect:"Allow",Action:["ecs:Describe*","ecs:List*"],Resource:"*"},{Sid:"FjallDevEcsDeregisterTaskDefinition",Effect:"Allow",Action:["ecs:DeregisterTaskDefinition"],Resource:`arn:aws:ecs:*:${e}:task-definition/fjall-dev-*`},{Sid:"FjallDevElbTaggedMutations",Effect:"Allow",Action:["elasticloadbalancing:ModifyRule","elasticloadbalancing:DeleteRule","elasticloadbalancing:ModifyTargetGroup","elasticloadbalancing:ModifyTargetGroupAttributes","elasticloadbalancing:DeleteTargetGroup","elasticloadbalancing:RegisterTargets","elasticloadbalancing:DeregisterTargets"],Resource:`arn:aws:elasticloadbalancing:*:${e}:*`,Condition:{StringEquals:{"aws:ResourceTag/fjall:dev":"true"}}},{Sid:"FjallDevElbTaggedCreates",Effect:"Allow",Action:["elasticloadbalancing:CreateTargetGroup","elasticloadbalancing:CreateRule"],Resource:`arn:aws:elasticloadbalancing:*:${e}:*`,Condition:{StringEquals:{"aws:RequestTag/fjall:dev":"true"}}},{Sid:"FjallDevElbTagOnCreate",Effect:"Allow",Action:["elasticloadbalancing:AddTags"],Resource:`arn:aws:elasticloadbalancing:*:${e}:*`,Condition:{StringEquals:{"elasticloadbalancing:CreateAction":["CreateTargetGroup","CreateRule"]}}},{Sid:"FjallDevElbReads",Effect:"Allow",Action:["elasticloadbalancing:Describe*"],Resource:"*"},{Sid:"FjallDevSsmDevTree",Effect:"Allow",Action:["ssm:GetParameter*","ssm:PutParameter","ssm:AddTagsToResource"],Resource:`arn:aws:ssm:*:${e}:parameter/fjall/dev/*`},{Sid:"FjallDevLogsMutations",Effect:"Allow",Action:["logs:PutRetentionPolicy","logs:DeleteLogGroup"],Resource:`arn:aws:logs:*:${e}:log-group:/fjall/dev/*`},{Sid:"FjallDevLogsTaggedCreate",Effect:"Allow",Action:["logs:CreateLogGroup","logs:TagResource"],Resource:`arn:aws:logs:*:${e}:log-group:/fjall/dev/*`,Condition:{StringEquals:{"aws:RequestTag/fjall:dev":"true"}}},{Sid:"FjallDevLogsRead",Effect:"Allow",Action:["logs:GetLogEvents","logs:DescribeLogStreams","logs:FilterLogEvents"],Resource:`arn:aws:logs:*:${e}:log-group:/fjall/dev/*`},{Sid:"FjallDevLogsDescribeGroups",Effect:"Allow",Action:["logs:DescribeLogGroups"],Resource:"*"},{Sid:"FjallDevKmsViaDevAlias",Effect:"Allow",Action:["kms:Encrypt","kms:Decrypt","kms:GenerateDataKey"],Resource:`arn:aws:kms:*:${e}:key/*`,Condition:{"ForAnyValue:StringLike":{"kms:ResourceAliases":"alias/fjall-dev-*"}}},{Sid:"FjallDevKmsSsmSecureString",Effect:"Allow",Action:["kms:Encrypt","kms:Decrypt","kms:GenerateDataKey"],Resource:`arn:aws:kms:*:${e}:key/*`,Condition:{StringLike:{"kms:ViaService":"ssm.*.amazonaws.com"}}},{Sid:"FjallDevEcrAuthToken",Effect:"Allow",Action:["ecr:GetAuthorizationToken"],Resource:"*"},{Sid:"FjallDevEcrPushPull",Effect:"Allow",Action:["ecr:PutImage","ecr:InitiateLayerUpload","ecr:UploadLayerPart","ecr:CompleteLayerUpload","ecr:BatchCheckLayerAvailability","ecr:BatchGetImage","ecr:GetDownloadUrlForLayer","ecr:DescribeImages"],Resource:`arn:aws:ecr:*:${e}:repository/*`},{Sid:"FjallDevPassDevPathRoles",Effect:"Allow",Action:["iam:PassRole"],Resource:`arn:aws:iam::${e}:role/fjall/dev/*`}]}Ne(jk,"buildDevDeployPolicyStatements");function zk({accountId:e}){return[{Sid:"FjallDevProvisionerBoundedRoleWrites",Effect:"Allow",Action:["iam:CreateRole","iam:PutRolePolicy","iam:AttachRolePolicy"],Resource:`arn:aws:iam::${e}:role/fjall/dev/*`,Condition:{StringEquals:{"iam:PermissionsBoundary":IA(e)}}},{Sid:"FjallDevProvisionerPathRoleOps",Effect:"Allow",Action:["iam:DeleteRole","iam:DeleteRolePolicy","iam:DetachRolePolicy","iam:ListRolePolicies","iam:TagRole"],Resource:`arn:aws:iam::${e}:role/fjall/dev/*`},{Sid:"FjallDevProvisionerListRoles",Effect:"Allow",Action:["iam:ListRoles"],Resource:"*"},{Sid:"FjallDevProvisionerDevMasterSecrets",Effect:"Allow",Action:["secretsmanager:GetSecretValue"],Resource:`arn:aws:secretsmanager:*:${e}:secret:fjall-dev-*`},{Sid:"FjallDevProvisionerKmsDecryptViaSecretsManager",Effect:"Allow",Action:["kms:Decrypt"],Resource:`arn:aws:kms:*:${e}:key/*`,Condition:{StringLike:{"kms:ViaService":"secretsmanager.*.amazonaws.com"}}},{Sid:"FjallDevProvisionerDataApi",Effect:"Allow",Action:["rds-data:ExecuteStatement","rds-data:BatchExecuteStatement","rds-data:BeginTransaction","rds-data:CommitTransaction","rds-data:RollbackTransaction"],Resource:`arn:aws:rds:*:${e}:cluster:fjall-dev-*`},{Sid:"FjallDevProvisionerMetrics",Effect:"Allow",Action:["cloudwatch:GetMetricData"],Resource:"*"},{Sid:"FjallDevProvisionerOrphanDiscovery",Effect:"Allow",Action:["tag:GetResources"],Resource:"*"},{Sid:"FjallDevProvisionerSsmTeardown",Effect:"Allow",Action:["ssm:DeleteParameter*"],Resource:`arn:aws:ssm:*:${e}:parameter/fjall/dev/*`},{Sid:"FjallDevProvisionerLogsTeardown",Effect:"Allow",Action:["logs:DeleteLogGroup"],Resource:`arn:aws:logs:*:${e}:log-group:/fjall/dev/*`},{Sid:"FjallDevProvisionerTaggedTeardown",Effect:"Allow",Action:["ecs:UpdateService","ecs:StopTask","ecs:DeleteService","elasticloadbalancing:DeleteRule","elasticloadbalancing:DeleteTargetGroup","elasticloadbalancing:DeregisterTargets"],Resource:[`arn:aws:ecs:*:${e}:*`,`arn:aws:elasticloadbalancing:*:${e}:*`],Condition:{StringEquals:{"aws:ResourceTag/fjall:dev":"true"}}},{Sid:"FjallDevProvisionerTeardownReads",Effect:"Allow",Action:["ecs:Describe*","elasticloadbalancing:Describe*"],Resource:"*"},{Sid:"FjallDevProvisionerImageJanitor",Effect:"Allow",Action:["ecr:ListImages","ecr:DescribeImages","ecr:BatchDeleteImage"],Resource:`arn:aws:ecr:*:${e}:repository/*`},{Sid:"FjallDevProvisionerSsmReadAll",Effect:"Allow",Action:["ssm:GetParameter*"],Resource:`arn:aws:ssm:*:${e}:parameter/*`},{Sid:"FjallDevProvisionerKmsDecryptViaSsm",Effect:"Allow",Action:["kms:Decrypt"],Resource:`arn:aws:kms:*:${e}:key/*`,Condition:{StringLike:{"kms:ViaService":"ssm.*.amazonaws.com"}}}]}Ne(zk,"buildDevProvisionerPolicyStatements");function Lk({accountId:e}){return[{Sid:"FjallDevSyncPrefixReadWrite",Effect:"Allow",Action:["s3:GetObject","s3:PutObject"],Resource:`arn:aws:s3:::fjall-dev-sync-${e}-*/*`,Condition:{StringEquals:{"aws:ResourceAccount":e}}}]}Ne(Lk,"buildDevSyncWriterPolicyStatements");function Uk({accountId:e}){return[{Sid:"FjallDevBoundarySsmDevRead",Effect:"Allow",Action:["ssm:GetParameter*"],Resource:`arn:aws:ssm:*:${e}:parameter/fjall/dev/*`},{Sid:"FjallDevBoundaryKmsDecryptDevAlias",Effect:"Allow",Action:["kms:Decrypt"],Resource:`arn:aws:kms:*:${e}:key/*`,Condition:{"ForAnyValue:StringLike":{"kms:ResourceAliases":"alias/fjall-dev-*"}}},{Sid:"FjallDevBoundarySyncPrefixReadWrite",Effect:"Allow",Action:["s3:GetObject","s3:PutObject"],Resource:`arn:aws:s3:::fjall-dev-sync-${e}-*/*`,Condition:{StringEquals:{"aws:ResourceAccount":e}}},{Sid:"FjallDevBoundarySlotLogs",Effect:"Allow",Action:["logs:CreateLogStream","logs:PutLogEvents"],Resource:`arn:aws:logs:*:${e}:log-group:/fjall/dev/*`},{Sid:"FjallDevBoundarySyncQueue",Effect:"Allow",Action:["sqs:ReceiveMessage","sqs:DeleteMessage","sqs:GetQueueUrl"],Resource:`arn:aws:sqs:*:${e}:fjall-dev-sync-${e}-*`}]}Ne(Uk,"buildDevBoundaryStatements");var Fk=Object.defineProperty,mt=(e,t)=>Fk(e,"name",{value:t,configurable:!0});function $(e){return JSON.stringify(e)}mt($,"escapeStringLiteral");function Tr(e){return e.map($).join(", ")}mt(Tr,"formatStringArray");var Bk="import:SharedAlarmTopicArn";function Rr(e=" "){return`
|