fjall 4.0.0 → 4.2.0

package/bin/assets/generators/application/generator.js

@@ -1,7 +1,7 @@
 import { createRequire as __fjcreateRequire } from "module";
 const require = __fjcreateRequire(import.meta.url);
 
-var M$=Object.defineProperty;var At=(e,t)=>{for(var n in t)M$(e,n,{get:t[n],enumerable:!0})};import{join as tD}from"path";import{join as yI}from"path";import ru from"node:fs";import qn from"node:path";var je={},j$=/[|\\{}()[\]^$+*?.]/g,U$=Object.prototype.hasOwnProperty,Di=function(e,t){return U$.apply(e,[t])};je.hasOwn=Di;je.escapeRegExpChars=function(e){return e?String(e).replace(j$,"\\$&"):""};var L$={"&":"&amp;","<":"&lt;",">":"&gt;",'"':"&#34;","'":"&#39;"},F$=/[&<>'"]/g;function Z$(e){return L$[e]||e}var V$=`var _ENCODE_HTML_RULES = {
+var M$=Object.defineProperty;var At=(e,t)=>{for(var n in t)M$(e,n,{get:t[n],enumerable:!0})};import{join as rD}from"path";import{join as yI}from"path";import ru from"node:fs";import qn from"node:path";var je={},j$=/[|\\{}()[\]^$+*?.]/g,U$=Object.prototype.hasOwnProperty,Di=function(e,t){return U$.apply(e,[t])};je.hasOwn=Di;je.escapeRegExpChars=function(e){return e?String(e).replace(j$,"\\$&"):""};var L$={"&":"&amp;","<":"&lt;",">":"&gt;",'"':"&#34;","'":"&#39;"},F$=/[&<>'"]/g;function Z$(e){return L$[e]||e}var V$=`var _ENCODE_HTML_RULES = {
       "&": "&amp;"
     , "<": "&lt;"
     , ">": "&gt;"
@@ -118,16 +118,16 @@ try {
 
 Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}for(let a of e.seen.entries()){let c=a[1];if(t===a[0]){i(a);continue}if(e.external){let l=e.external.registry.get(a[0])?.id;if(t!==a[0]&&l){i(a);continue}}if(e.metadataRegistry.get(a[0])?.id){i(a);continue}if(c.cycle){i(a);continue}if(c.count>1&&e.reused==="ref"){i(a);continue}}}function Kt(e,t){let n=e.seen.get(t);if(!n)throw new Error("Unprocessed schema. This is a bug in Zod.");let o=c=>{let u=e.seen.get(c);if(u.ref===null)return;let l=u.def??u.schema,m={...l},p=u.ref;if(u.ref=null,p){o(p);let h=e.seen.get(p),x=h.schema;if(x.$ref&&(e.target==="draft-07"||e.target==="draft-04"||e.target==="openapi-3.0")?(l.allOf=l.allOf??[],l.allOf.push(x)):Object.assign(l,x),Object.assign(l,m),c._zod.parent===p)for(let K in l)K==="$ref"||K==="allOf"||K in m||delete l[K];if(x.$ref&&h.def)for(let K in l)K==="$ref"||K==="allOf"||K in h.def&&JSON.stringify(l[K])===JSON.stringify(h.def[K])&&delete l[K]}let g=c._zod.parent;if(g&&g!==p){o(g);let h=e.seen.get(g);if(h?.schema.$ref&&(l.$ref=h.schema.$ref,h.def))for(let x in l)x==="$ref"||x==="allOf"||x in h.def&&JSON.stringify(l[x])===JSON.stringify(h.def[x])&&delete l[x]}e.override({zodSchema:c,jsonSchema:l,path:u.path??[]})};for(let c of[...e.seen.entries()].reverse())o(c[0]);let r={};if(e.target==="draft-2020-12"?r.$schema="https://json-schema.org/draft/2020-12/schema":e.target==="draft-07"?r.$schema="http://json-schema.org/draft-07/schema#":e.target==="draft-04"?r.$schema="http://json-schema.org/draft-04/schema#":e.target,e.external?.uri){let c=e.external.registry.get(t)?.id;if(!c)throw new Error("Schema is missing an `id` property");r.$id=e.external.uri(c)}Object.assign(r,n.def??n.schema);let i=e.metadataRegistry.get(t)?.id;i!==void 0&&r.id===i&&delete r.id;let a=e.external?.defs??{};for(let c of e.seen.entries()){let u=c[1];u.def&&u.defId&&(u.def.id===u.defId&&delete u.def.id,a[u.defId]=u.def)}e.external||Object.keys(a).length>0&&(e.target==="draft-2020-12"?r.$defs=a:r.definitions=a);try{let c=JSON.parse(JSON.stringify(r));return Object.defineProperty(c,"~standard",{value:{...t["~standard"],jsonSchema:{input:ln(t,"input",e.processors),output:ln(t,"output",e.processors)}},enumerable:!1,writable:!1}),c}catch{throw new Error("Error converting schema to JSON.")}}function Ie(e,t){let n=t??{seen:new Set};if(n.seen.has(e))return!1;n.seen.add(e);let o=e._zod.def;if(o.type==="transform")return!0;if(o.type==="array")return Ie(o.element,n);if(o.type==="set")return Ie(o.valueType,n);if(o.type==="lazy")return Ie(o.getter(),n);if(o.type==="promise"||o.type==="optional"||o.type==="nonoptional"||o.type==="nullable"||o.type==="readonly"||o.type==="default"||o.type==="prefault")return Ie(o.innerType,n);if(o.type==="intersection")return Ie(o.left,n)||Ie(o.right,n);if(o.type==="record"||o.type==="map")return Ie(o.keyType,n)||Ie(o.valueType,n);if(o.type==="pipe")return e._zod.traits.has("$ZodCodec")?!0:Ie(o.in,n)||Ie(o.out,n);if(o.type==="object"){for(let r in o.shape)if(Ie(o.shape[r],n))return!0;return!1}if(o.type==="union"){for(let r of o.options)if(Ie(r,n))return!0;return!1}if(o.type==="tuple"){for(let r of o.items)if(Ie(r,n))return!0;return!!(o.rest&&Ie(o.rest,n))}return!1}var xm=(e,t={})=>n=>{let o=Gt({...n,processors:t});return L(e,o),Wt(o,e),Kt(o,e)},ln=(e,t,n={})=>o=>{let{libraryOptions:r,target:i}=o??{},a=Gt({...r??{},target:i,io:t,processors:n});return L(e,a),Wt(a,e),Kt(a,e)};var fR={guid:"uuid",url:"uri",datetime:"date-time",json_string:"json-string",regex:""},$m=(e,t,n,o)=>{let r=n;r.type="string";let{minimum:i,maximum:a,format:c,patterns:u,contentEncoding:l}=e._zod.bag;if(typeof i=="number"&&(r.minLength=i),typeof a=="number"&&(r.maxLength=a),c&&(r.format=fR[c]??c,r.format===""&&delete r.format,c==="time"&&delete r.format),l&&(r.contentEncoding=l),u&&u.size>0){let m=[...u];m.length===1?r.pattern=m[0].source:m.length>1&&(r.allOf=[...m.map(p=>({...t.target==="draft-07"||t.target==="draft-04"||t.target==="openapi-3.0"?{type:"string"}:{},pattern:p.source}))])}},Im=(e,t,n,o)=>{let r=n,{minimum:i,maximum:a,format:c,multipleOf:u,exclusiveMaximum:l,exclusiveMinimum:m}=e._zod.bag;typeof c=="string"&&c.includes("int")?r.type="integer":r.type="number";let p=typeof m=="number"&&m>=(i??Number.NEGATIVE_INFINITY),g=typeof l=="number"&&l<=(a??Number.POSITIVE_INFINITY),h=t.target==="draft-04"||t.target==="openapi-3.0";p?h?(r.minimum=m,r.exclusiveMinimum=!0):r.exclusiveMinimum=m:typeof i=="number"&&(r.minimum=i),g?h?(r.maximum=l,r.exclusiveMaximum=!0):r.exclusiveMaximum=l:typeof a=="number"&&(r.maximum=a),typeof u=="number"&&(r.multipleOf=u)},Tm=(e,t,n,o)=>{n.type="boolean"},Nm=(e,t,n,o)=>{if(t.unrepresentable==="throw")throw new Error("BigInt cannot be represented in JSON Schema")},Rm=(e,t,n,o)=>{if(t.unrepresentable==="throw")throw new Error("Symbols cannot be represented in JSON Schema")},Pm=(e,t,n,o)=>{t.target==="openapi-3.0"?(n.type="string",n.nullable=!0,n.enum=[null]):n.type="null"},km=(e,t,n,o)=>{if(t.unrepresentable==="throw")throw new Error("Undefined cannot be represented in JSON Schema")},Cm=(e,t,n,o)=>{if(t.unrepresentable==="throw")throw new Error("Void cannot be represented in JSON Schema")},Om=(e,t,n,o)=>{n.not={}},Dm=(e,t,n,o)=>{},wm=(e,t,n,o)=>{},zm=(e,t,n,o)=>{if(t.unrepresentable==="throw")throw new Error("Date cannot be represented in JSON Schema")},Mm=(e,t,n,o)=>{let r=e._zod.def,i=oo(r.entries);i.every(a=>typeof a=="number")&&(n.type="number"),i.every(a=>typeof a=="string")&&(n.type="string"),n.enum=i},jm=(e,t,n,o)=>{let r=e._zod.def,i=[];for(let a of r.values)if(a===void 0){if(t.unrepresentable==="throw")throw new Error("Literal `undefined` cannot be represented in JSON Schema")}else if(typeof a=="bigint"){if(t.unrepresentable==="throw")throw new Error("BigInt literals cannot be represented in JSON Schema");i.push(Number(a))}else i.push(a);if(i.length!==0)if(i.length===1){let a=i[0];n.type=a===null?"null":typeof a,t.target==="draft-04"||t.target==="openapi-3.0"?n.enum=[a]:n.const=a}else i.every(a=>typeof a=="number")&&(n.type="number"),i.every(a=>typeof a=="string")&&(n.type="string"),i.every(a=>typeof a=="boolean")&&(n.type="boolean"),i.every(a=>a===null)&&(n.type="null"),n.enum=i},Um=(e,t,n,o)=>{if(t.unrepresentable==="throw")throw new Error("NaN cannot be represented in JSON Schema")},Lm=(e,t,n,o)=>{let r=n,i=e._zod.pattern;if(!i)throw new Error("Pattern not found in template literal");r.type="string",r.pattern=i.source},Fm=(e,t,n,o)=>{let r=n,i={type:"string",format:"binary",contentEncoding:"binary"},{minimum:a,maximum:c,mime:u}=e._zod.bag;a!==void 0&&(i.minLength=a),c!==void 0&&(i.maxLength=c),u?u.length===1?(i.contentMediaType=u[0],Object.assign(r,i)):(Object.assign(r,i),r.anyOf=u.map(l=>({contentMediaType:l}))):Object.assign(r,i)},Zm=(e,t,n,o)=>{n.type="boolean"},Vm=(e,t,n,o)=>{if(t.unrepresentable==="throw")throw new Error("Custom types cannot be represented in JSON Schema")},Bm=(e,t,n,o)=>{if(t.unrepresentable==="throw")throw new Error("Function types cannot be represented in JSON Schema")},Gm=(e,t,n,o)=>{if(t.unrepresentable==="throw")throw new Error("Transforms cannot be represented in JSON Schema")},Wm=(e,t,n,o)=>{if(t.unrepresentable==="throw")throw new Error("Map cannot be represented in JSON Schema")},Km=(e,t,n,o)=>{if(t.unrepresentable==="throw")throw new Error("Set cannot be represented in JSON Schema")},Hm=(e,t,n,o)=>{let r=n,i=e._zod.def,{minimum:a,maximum:c}=e._zod.bag;typeof a=="number"&&(r.minItems=a),typeof c=="number"&&(r.maxItems=c),r.type="array",r.items=L(i.element,t,{...o,path:[...o.path,"items"]})},Xm=(e,t,n,o)=>{let r=n,i=e._zod.def;r.type="object",r.properties={};let a=i.shape;for(let l in a)r.properties[l]=L(a[l],t,{...o,path:[...o.path,"properties",l]});let c=new Set(Object.keys(a)),u=new Set([...c].filter(l=>{let m=i.shape[l]._zod;return t.io==="input"?m.optin===void 0:m.optout===void 0}));u.size>0&&(r.required=Array.from(u)),i.catchall?._zod.def.type==="never"?r.additionalProperties=!1:i.catchall?i.catchall&&(r.additionalProperties=L(i.catchall,t,{...o,path:[...o.path,"additionalProperties"]})):t.io==="output"&&(r.additionalProperties=!1)},Ka=(e,t,n,o)=>{let r=e._zod.def,i=r.inclusive===!1,a=r.options.map((c,u)=>L(c,t,{...o,path:[...o.path,i?"oneOf":"anyOf",u]}));i?n.oneOf=a:n.anyOf=a},Ym=(e,t,n,o)=>{let r=e._zod.def,i=L(r.left,t,{...o,path:[...o.path,"allOf",0]}),a=L(r.right,t,{...o,path:[...o.path,"allOf",1]}),c=l=>"allOf"in l&&Object.keys(l).length===1,u=[...c(i)?i.allOf:[i],...c(a)?a.allOf:[a]];n.allOf=u},Jm=(e,t,n,o)=>{let r=n,i=e._zod.def;r.type="array";let a=t.target==="draft-2020-12"?"prefixItems":"items",c=t.target==="draft-2020-12"||t.target==="openapi-3.0"?"items":"additionalItems",u=i.items.map((g,h)=>L(g,t,{...o,path:[...o.path,a,h]})),l=i.rest?L(i.rest,t,{...o,path:[...o.path,c,...t.target==="openapi-3.0"?[i.items.length]:[]]}):null;t.target==="draft-2020-12"?(r.prefixItems=u,l&&(r.items=l)):t.target==="openapi-3.0"?(r.items={anyOf:u},l&&r.items.anyOf.push(l),r.minItems=u.length,l||(r.maxItems=u.length)):(r.items=u,l&&(r.additionalItems=l));let{minimum:m,maximum:p}=e._zod.bag;typeof m=="number"&&(r.minItems=m),typeof p=="number"&&(r.maxItems=p)},qm=(e,t,n,o)=>{let r=n,i=e._zod.def;r.type="object";let a=i.keyType,u=a._zod.bag?.patterns;if(i.mode==="loose"&&u&&u.size>0){let m=L(i.valueType,t,{...o,path:[...o.path,"patternProperties","*"]});r.patternProperties={};for(let p of u)r.patternProperties[p.source]=m}else(t.target==="draft-07"||t.target==="draft-2020-12")&&(r.propertyNames=L(i.keyType,t,{...o,path:[...o.path,"propertyNames"]})),r.additionalProperties=L(i.valueType,t,{...o,path:[...o.path,"additionalProperties"]});let l=a._zod.values;if(l){let m=[...l].filter(p=>typeof p=="string"||typeof p=="number");m.length>0&&(r.required=m)}},Qm=(e,t,n,o)=>{let r=e._zod.def,i=L(r.innerType,t,o),a=t.seen.get(e);t.target==="openapi-3.0"?(a.ref=r.innerType,n.nullable=!0):n.anyOf=[i,{type:"null"}]},ep=(e,t,n,o)=>{let r=e._zod.def;L(r.innerType,t,o);let i=t.seen.get(e);i.ref=r.innerType},tp=(e,t,n,o)=>{let r=e._zod.def;L(r.innerType,t,o);let i=t.seen.get(e);i.ref=r.innerType,n.default=JSON.parse(JSON.stringify(r.defaultValue))},rp=(e,t,n,o)=>{let r=e._zod.def;L(r.innerType,t,o);let i=t.seen.get(e);i.ref=r.innerType,t.io==="input"&&(n._prefault=JSON.parse(JSON.stringify(r.defaultValue)))},np=(e,t,n,o)=>{let r=e._zod.def;L(r.innerType,t,o);let i=t.seen.get(e);i.ref=r.innerType;let a;try{a=r.catchValue(void 0)}catch{throw new Error("Dynamic catch values are not supported in JSON Schema")}n.default=a},op=(e,t,n,o)=>{let r=e._zod.def,i=r.in._zod.traits.has("$ZodTransform"),a=t.io==="input"?i?r.out:r.in:r.out;L(a,t,o);let c=t.seen.get(e);c.ref=a},ip=(e,t,n,o)=>{let r=e._zod.def;L(r.innerType,t,o);let i=t.seen.get(e);i.ref=r.innerType,n.readOnly=!0},ap=(e,t,n,o)=>{let r=e._zod.def;L(r.innerType,t,o);let i=t.seen.get(e);i.ref=r.innerType},Ha=(e,t,n,o)=>{let r=e._zod.def;L(r.innerType,t,o);let i=t.seen.get(e);i.ref=r.innerType},sp=(e,t,n,o)=>{let r=e._zod.innerType;L(r,t,o);let i=t.seen.get(e);i.ref=r},Wa={string:$m,number:Im,boolean:Tm,bigint:Nm,symbol:Rm,null:Pm,undefined:km,void:Cm,never:Om,any:Dm,unknown:wm,date:zm,enum:Mm,literal:jm,nan:Um,template_literal:Lm,file:Fm,success:Zm,custom:Vm,function:Bm,transform:Gm,map:Wm,set:Km,array:Hm,object:Xm,union:Ka,intersection:Ym,tuple:Jm,record:qm,nullable:Qm,nonoptional:ep,default:tp,prefault:rp,catch:np,pipe:op,readonly:ip,promise:ap,optional:Ha,lazy:sp};function Xa(e,t){if("_idmap"in e){let o=e,r=Gt({...t,processors:Wa}),i={};for(let u of o._idmap.entries()){let[l,m]=u;L(m,r)}let a={},c={registry:o,uri:t?.uri,defs:i};r.external=c;for(let u of o._idmap.entries()){let[l,m]=u;Wt(r,m),a[l]=Kt(r,m)}if(Object.keys(i).length>0){let u=r.target==="draft-2020-12"?"$defs":"definitions";a.__shared={[u]:i}}return{schemas:a}}let n=Gt({...t,processors:Wa});return L(e,n),Wt(n,e),Kt(n,e)}var Ya=class{get metadataRegistry(){return this.ctx.metadataRegistry}get target(){return this.ctx.target}get unrepresentable(){return this.ctx.unrepresentable}get override(){return this.ctx.override}get io(){return this.ctx.io}get counter(){return this.ctx.counter}set counter(t){this.ctx.counter=t}get seen(){return this.ctx.seen}constructor(t){let n=t?.target??"draft-2020-12";n==="draft-4"&&(n="draft-04"),n==="draft-7"&&(n="draft-07"),this.ctx=Gt({processors:Wa,target:n,...t?.metadata&&{metadata:t.metadata},...t?.unrepresentable&&{unrepresentable:t.unrepresentable},...t?.override&&{override:t.override},...t?.io&&{io:t.io}})}process(t,n={path:[],schemaPath:[]}){return L(t,this.ctx,n)}emit(t,n){n&&(n.cycles&&(this.ctx.cycles=n.cycles),n.reused&&(this.ctx.reused=n.reused),n.external&&(this.ctx.external=n.external)),Wt(this.ctx,t);let o=Kt(this.ctx,t),{"~standard":r,...i}=o;return i}};var Gy={};var Ao={};At(Ao,{ZodAny:()=>kp,ZodArray:()=>wp,ZodBase64:()=>hs,ZodBase64URL:()=>ys,ZodBigInt:()=>yn,ZodBigIntFormat:()=>_s,ZodBoolean:()=>hn,ZodCIDRv4:()=>gs,ZodCIDRv6:()=>vs,ZodCUID:()=>cs,ZodCUID2:()=>us,ZodCatch:()=>nf,ZodCodec:()=>wo,ZodCustom:()=>zo,ZodCustomStringFormat:()=>gn,ZodDate:()=>Po,ZodDefault:()=>Jp,ZodDiscriminatedUnion:()=>Mp,ZodE164:()=>bs,ZodEmail:()=>is,ZodEmoji:()=>as,ZodEnum:()=>pn,ZodExactOptional:()=>Hp,ZodFile:()=>Wp,ZodFunction:()=>ff,ZodGUID:()=>$o,ZodIPv4:()=>ps,ZodIPv6:()=>fs,ZodIntersection:()=>jp,ZodJWT:()=>Ss,ZodKSUID:()=>ms,ZodLazy:()=>df,ZodLiteral:()=>Gp,ZodMAC:()=>xp,ZodMap:()=>Vp,ZodNaN:()=>af,ZodNanoID:()=>ss,ZodNever:()=>Op,ZodNonOptional:()=>Ts,ZodNull:()=>Rp,ZodNullable:()=>Yp,ZodNumber:()=>vn,ZodNumberFormat:()=>vr,ZodObject:()=>Co,ZodOptional:()=>Is,ZodPipe:()=>Do,ZodPrefault:()=>Qp,ZodPreprocess:()=>sf,ZodPromise:()=>pf,ZodReadonly:()=>cf,ZodRecord:()=>mn,ZodSet:()=>Bp,ZodString:()=>fn,ZodStringFormat:()=>W,ZodSuccess:()=>rf,ZodSymbol:()=>Tp,ZodTemplateLiteral:()=>lf,ZodTransform:()=>Kp,ZodTuple:()=>Lp,ZodType:()=>k,ZodULID:()=>ls,ZodURL:()=>Ro,ZodUUID:()=>pt,ZodUndefined:()=>Np,ZodUnion:()=>Oo,ZodUnknown:()=>Cp,ZodVoid:()=>Dp,ZodXID:()=>ds,ZodXor:()=>zp,_ZodString:()=>os,_default:()=>qp,_function:()=>eS,any:()=>kb,array:()=>ko,base64:()=>fb,base64url:()=>gb,bigint:()=>Ib,boolean:()=>Ip,catch:()=>of,check:()=>tS,cidrv4:()=>mb,cidrv6:()=>pb,codec:()=>Yb,cuid:()=>ob,cuid2:()=>ib,custom:()=>rS,date:()=>Ob,describe:()=>nS,discriminatedUnion:()=>Ub,e164:()=>vb,email:()=>Hy,emoji:()=>rb,enum:()=>xs,exactOptional:()=>Xp,file:()=>Wb,float32:()=>Eb,float64:()=>Ab,function:()=>eS,guid:()=>Xy,hash:()=>_b,hex:()=>Sb,hostname:()=>bb,httpUrl:()=>tb,instanceof:()=>iS,int:()=>rs,int32:()=>xb,int64:()=>Tb,intersection:()=>Up,invertCodec:()=>Jb,ipv4:()=>ub,ipv6:()=>db,json:()=>sS,jwt:()=>hb,keyof:()=>Db,ksuid:()=>cb,lazy:()=>mf,literal:()=>Gb,looseObject:()=>Mb,looseRecord:()=>Fb,mac:()=>lb,map:()=>Zb,meta:()=>oS,nan:()=>Xb,nanoid:()=>nb,nativeEnum:()=>Bb,never:()=>Es,nonoptional:()=>tf,null:()=>Pp,nullable:()=>To,nullish:()=>Kb,number:()=>$p,object:()=>wb,optional:()=>Io,partialRecord:()=>Lb,pipe:()=>ns,prefault:()=>ef,preprocess:()=>cS,promise:()=>Qb,readonly:()=>uf,record:()=>Zp,refine:()=>gf,set:()=>Vb,strictObject:()=>zb,string:()=>xo,stringFormat:()=>yb,stringbool:()=>aS,success:()=>Hb,superRefine:()=>vf,symbol:()=>Rb,templateLiteral:()=>qb,transform:()=>$s,tuple:()=>Fp,uint32:()=>$b,uint64:()=>Nb,ulid:()=>ab,undefined:()=>Pb,union:()=>As,unknown:()=>gr,url:()=>eb,uuid:()=>Yy,uuidv4:()=>Jy,uuidv6:()=>qy,uuidv7:()=>Qy,void:()=>Cb,xid:()=>sb,xor:()=>jb});var Ja={};At(Ja,{endsWith:()=>tn,gt:()=>dt,gte:()=>$e,includes:()=>Qr,length:()=>fr,lowercase:()=>Jr,lt:()=>lt,lte:()=>Le,maxLength:()=>pr,maxSize:()=>Bt,mime:()=>rn,minLength:()=>Tt,minSize:()=>mt,multipleOf:()=>Vt,negative:()=>Za,nonnegative:()=>Ba,nonpositive:()=>Va,normalize:()=>nn,overwrite:()=>it,positive:()=>Fa,property:()=>Ga,regex:()=>Yr,size:()=>mr,slugify:()=>cn,startsWith:()=>en,toLowerCase:()=>an,toUpperCase:()=>sn,trim:()=>on,uppercase:()=>qr});var dn={};At(dn,{ZodISODate:()=>Qa,ZodISODateTime:()=>qa,ZodISODuration:()=>ts,ZodISOTime:()=>es,date:()=>up,datetime:()=>cp,duration:()=>dp,time:()=>lp});var qa=f("ZodISODateTime",(e,t)=>{Ul.init(e,t),W.init(e,t)});function cp(e){return Vd(qa,e)}var Qa=f("ZodISODate",(e,t)=>{Ll.init(e,t),W.init(e,t)});function up(e){return Bd(Qa,e)}var es=f("ZodISOTime",(e,t)=>{Fl.init(e,t),W.init(e,t)});function lp(e){return Gd(es,e)}var ts=f("ZodISODuration",(e,t)=>{Zl.init(e,t),W.init(e,t)});function dp(e){return Wd(ts,e)}var Wy=(e,t)=>{uo.init(e,t),e.name="ZodError",Object.defineProperties(e,{format:{value:n=>mo(e,n)},flatten:{value:n=>lo(e,n)},addIssue:{value:n=>{e.issues.push(n),e.message=JSON.stringify(e.issues,Fr,2)}},addIssues:{value:n=>{e.issues.push(...n),e.message=JSON.stringify(e.issues,Fr,2)}},isEmpty:{get(){return e.issues.length===0}}})},vR=f("ZodError",Wy),De=f("ZodError",Wy,{Parent:Error});var mp=Br(De),pp=Gr(De),fp=Wr(De),gp=Kr(De),vp=Xi(De),hp=Yi(De),yp=Ji(De),bp=qi(De),Sp=Qi(De),_p=ea(De),Ep=ta(De),Ap=ra(De);var Ky=new WeakMap;function No(e,t,n){let o=Object.getPrototypeOf(e),r=Ky.get(o);if(r||(r=new Set,Ky.set(o,r)),!r.has(t)){r.add(t);for(let i in n){let a=n[i];Object.defineProperty(o,i,{configurable:!0,enumerable:!1,get(){let c=a.bind(this);return Object.defineProperty(this,i,{configurable:!0,writable:!0,enumerable:!0,value:c}),c},set(c){Object.defineProperty(this,i,{configurable:!0,writable:!0,enumerable:!0,value:c})}})}}}var k=f("ZodType",(e,t)=>(P.init(e,t),Object.assign(e["~standard"],{jsonSchema:{input:ln(e,"input"),output:ln(e,"output")}}),e.toJSONSchema=xm(e,{}),e.def=t,e.type=t.type,Object.defineProperty(e,"_def",{value:t}),e.parse=(n,o)=>mp(e,n,o,{callee:e.parse}),e.safeParse=(n,o)=>fp(e,n,o),e.parseAsync=async(n,o)=>pp(e,n,o,{callee:e.parseAsync}),e.safeParseAsync=async(n,o)=>gp(e,n,o),e.spa=e.safeParseAsync,e.encode=(n,o)=>vp(e,n,o),e.decode=(n,o)=>hp(e,n,o),e.encodeAsync=async(n,o)=>yp(e,n,o),e.decodeAsync=async(n,o)=>bp(e,n,o),e.safeEncode=(n,o)=>Sp(e,n,o),e.safeDecode=(n,o)=>_p(e,n,o),e.safeEncodeAsync=async(n,o)=>Ep(e,n,o),e.safeDecodeAsync=async(n,o)=>Ap(e,n,o),No(e,"ZodType",{check(...n){let o=this.def;return this.clone(_.mergeDefs(o,{checks:[...o.checks??[],...n.map(r=>typeof r=="function"?{_zod:{check:r,def:{check:"custom"},onattach:[]}}:r)]}),{parent:!0})},with(...n){return this.check(...n)},clone(n,o){return Ae(this,n,o)},brand(){return this},register(n,o){return n.add(this,o),this},refine(n,o){return this.check(gf(n,o))},superRefine(n,o){return this.check(vf(n,o))},overwrite(n){return this.check(it(n))},optional(){return Io(this)},exactOptional(){return Xp(this)},nullable(){return To(this)},nullish(){return Io(To(this))},nonoptional(n){return tf(this,n)},array(){return ko(this)},or(n){return As([this,n])},and(n){return Up(this,n)},transform(n){return ns(this,$s(n))},default(n){return qp(this,n)},prefault(n){return ef(this,n)},catch(n){return of(this,n)},pipe(n){return ns(this,n)},readonly(){return uf(this)},describe(n){let o=this.clone();return pe.add(o,{description:n}),o},meta(...n){if(n.length===0)return pe.get(this);let o=this.clone();return pe.add(o,n[0]),o},isOptional(){return this.safeParse(void 0).success},isNullable(){return this.safeParse(null).success},apply(n){return n(this)}}),Object.defineProperty(e,"description",{get(){return pe.get(e)?.description},configurable:!0}),e)),os=f("_ZodString",(e,t)=>{dr.init(e,t),k.init(e,t),e._zod.processJSONSchema=(o,r,i)=>$m(e,o,r,i);let n=e._zod.bag;e.format=n.format??null,e.minLength=n.minimum??null,e.maxLength=n.maximum??null,No(e,"_ZodString",{regex(...o){return this.check(Yr(...o))},includes(...o){return this.check(Qr(...o))},startsWith(...o){return this.check(en(...o))},endsWith(...o){return this.check(tn(...o))},min(...o){return this.check(Tt(...o))},max(...o){return this.check(pr(...o))},length(...o){return this.check(fr(...o))},nonempty(...o){return this.check(Tt(1,...o))},lowercase(o){return this.check(Jr(o))},uppercase(o){return this.check(qr(o))},trim(){return this.check(on())},normalize(...o){return this.check(nn(...o))},toLowerCase(){return this.check(an())},toUpperCase(){return this.check(sn())},slugify(){return this.check(cn())}})}),fn=f("ZodString",(e,t)=>{dr.init(e,t),os.init(e,t),e.email=n=>e.check(_a(is,n)),e.url=n=>e.check(Eo(Ro,n)),e.jwt=n=>e.check(La(Ss,n)),e.emoji=n=>e.check(Ia(as,n)),e.guid=n=>e.check(_o($o,n)),e.uuid=n=>e.check(Ea(pt,n)),e.uuidv4=n=>e.check(Aa(pt,n)),e.uuidv6=n=>e.check(xa(pt,n)),e.uuidv7=n=>e.check($a(pt,n)),e.nanoid=n=>e.check(Ta(ss,n)),e.guid=n=>e.check(_o($o,n)),e.cuid=n=>e.check(Na(cs,n)),e.cuid2=n=>e.check(Ra(us,n)),e.ulid=n=>e.check(Pa(ls,n)),e.base64=n=>e.check(Ma(hs,n)),e.base64url=n=>e.check(ja(ys,n)),e.xid=n=>e.check(ka(ds,n)),e.ksuid=n=>e.check(Ca(ms,n)),e.ipv4=n=>e.check(Oa(ps,n)),e.ipv6=n=>e.check(Da(fs,n)),e.cidrv4=n=>e.check(wa(gs,n)),e.cidrv6=n=>e.check(za(vs,n)),e.e164=n=>e.check(Ua(bs,n)),e.datetime=n=>e.check(cp(n)),e.date=n=>e.check(up(n)),e.time=n=>e.check(lp(n)),e.duration=n=>e.check(dp(n))});function xo(e){return Ud(fn,e)}var W=f("ZodStringFormat",(e,t)=>{G.init(e,t),os.init(e,t)}),is=f("ZodEmail",(e,t)=>{Pl.init(e,t),W.init(e,t)});function Hy(e){return _a(is,e)}var $o=f("ZodGUID",(e,t)=>{Nl.init(e,t),W.init(e,t)});function Xy(e){return _o($o,e)}var pt=f("ZodUUID",(e,t)=>{Rl.init(e,t),W.init(e,t)});function Yy(e){return Ea(pt,e)}function Jy(e){return Aa(pt,e)}function qy(e){return xa(pt,e)}function Qy(e){return $a(pt,e)}var Ro=f("ZodURL",(e,t)=>{kl.init(e,t),W.init(e,t)});function eb(e){return Eo(Ro,e)}function tb(e){return Eo(Ro,{protocol:Ue.httpProtocol,hostname:Ue.domain,..._.normalizeParams(e)})}var as=f("ZodEmoji",(e,t)=>{Cl.init(e,t),W.init(e,t)});function rb(e){return Ia(as,e)}var ss=f("ZodNanoID",(e,t)=>{Ol.init(e,t),W.init(e,t)});function nb(e){return Ta(ss,e)}var cs=f("ZodCUID",(e,t)=>{Dl.init(e,t),W.init(e,t)});function ob(e){return Na(cs,e)}var us=f("ZodCUID2",(e,t)=>{wl.init(e,t),W.init(e,t)});function ib(e){return Ra(us,e)}var ls=f("ZodULID",(e,t)=>{zl.init(e,t),W.init(e,t)});function ab(e){return Pa(ls,e)}var ds=f("ZodXID",(e,t)=>{Ml.init(e,t),W.init(e,t)});function sb(e){return ka(ds,e)}var ms=f("ZodKSUID",(e,t)=>{jl.init(e,t),W.init(e,t)});function cb(e){return Ca(ms,e)}var ps=f("ZodIPv4",(e,t)=>{Vl.init(e,t),W.init(e,t)});function ub(e){return Oa(ps,e)}var xp=f("ZodMAC",(e,t)=>{Gl.init(e,t),W.init(e,t)});function lb(e){return Fd(xp,e)}var fs=f("ZodIPv6",(e,t)=>{Bl.init(e,t),W.init(e,t)});function db(e){return Da(fs,e)}var gs=f("ZodCIDRv4",(e,t)=>{Wl.init(e,t),W.init(e,t)});function mb(e){return wa(gs,e)}var vs=f("ZodCIDRv6",(e,t)=>{Kl.init(e,t),W.init(e,t)});function pb(e){return za(vs,e)}var hs=f("ZodBase64",(e,t)=>{Xl.init(e,t),W.init(e,t)});function fb(e){return Ma(hs,e)}var ys=f("ZodBase64URL",(e,t)=>{Yl.init(e,t),W.init(e,t)});function gb(e){return ja(ys,e)}var bs=f("ZodE164",(e,t)=>{Jl.init(e,t),W.init(e,t)});function vb(e){return Ua(bs,e)}var Ss=f("ZodJWT",(e,t)=>{ql.init(e,t),W.init(e,t)});function hb(e){return La(Ss,e)}var gn=f("ZodCustomStringFormat",(e,t)=>{Ql.init(e,t),W.init(e,t)});function yb(e,t,n={}){return un(gn,e,t,n)}function bb(e){return un(gn,"hostname",Ue.hostname,e)}function Sb(e){return un(gn,"hex",Ue.hex,e)}function _b(e,t){let n=t?.enc??"hex",o=`${e}_${n}`,r=Ue[o];if(!r)throw new Error(`Unrecognized hash format: ${o}`);return un(gn,o,r,t)}var vn=f("ZodNumber",(e,t)=>{da.init(e,t),k.init(e,t),e._zod.processJSONSchema=(o,r,i)=>Im(e,o,r,i),No(e,"ZodNumber",{gt(o,r){return this.check(dt(o,r))},gte(o,r){return this.check($e(o,r))},min(o,r){return this.check($e(o,r))},lt(o,r){return this.check(lt(o,r))},lte(o,r){return this.check(Le(o,r))},max(o,r){return this.check(Le(o,r))},int(o){return this.check(rs(o))},safe(o){return this.check(rs(o))},positive(o){return this.check(dt(0,o))},nonnegative(o){return this.check($e(0,o))},negative(o){return this.check(lt(0,o))},nonpositive(o){return this.check(Le(0,o))},multipleOf(o,r){return this.check(Vt(o,r))},step(o,r){return this.check(Vt(o,r))},finite(){return this}});let n=e._zod.bag;e.minValue=Math.max(n.minimum??Number.NEGATIVE_INFINITY,n.exclusiveMinimum??Number.NEGATIVE_INFINITY)??null,e.maxValue=Math.min(n.maximum??Number.POSITIVE_INFINITY,n.exclusiveMaximum??Number.POSITIVE_INFINITY)??null,e.isInt=(n.format??"").includes("int")||Number.isSafeInteger(n.multipleOf??.5),e.isFinite=!0,e.format=n.format??null});function $p(e){return Kd(vn,e)}var vr=f("ZodNumberFormat",(e,t)=>{ed.init(e,t),vn.init(e,t)});function rs(e){return Xd(vr,e)}function Eb(e){return Yd(vr,e)}function Ab(e){return Jd(vr,e)}function xb(e){return qd(vr,e)}function $b(e){return Qd(vr,e)}var hn=f("ZodBoolean",(e,t)=>{vo.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Tm(e,n,o,r)});function Ip(e){return em(hn,e)}var yn=f("ZodBigInt",(e,t)=>{ma.init(e,t),k.init(e,t),e._zod.processJSONSchema=(o,r,i)=>Nm(e,o,r,i),e.gte=(o,r)=>e.check($e(o,r)),e.min=(o,r)=>e.check($e(o,r)),e.gt=(o,r)=>e.check(dt(o,r)),e.gte=(o,r)=>e.check($e(o,r)),e.min=(o,r)=>e.check($e(o,r)),e.lt=(o,r)=>e.check(lt(o,r)),e.lte=(o,r)=>e.check(Le(o,r)),e.max=(o,r)=>e.check(Le(o,r)),e.positive=o=>e.check(dt(BigInt(0),o)),e.negative=o=>e.check(lt(BigInt(0),o)),e.nonpositive=o=>e.check(Le(BigInt(0),o)),e.nonnegative=o=>e.check($e(BigInt(0),o)),e.multipleOf=(o,r)=>e.check(Vt(o,r));let n=e._zod.bag;e.minValue=n.minimum??null,e.maxValue=n.maximum??null,e.format=n.format??null});function Ib(e){return rm(yn,e)}var _s=f("ZodBigIntFormat",(e,t)=>{td.init(e,t),yn.init(e,t)});function Tb(e){return om(_s,e)}function Nb(e){return im(_s,e)}var Tp=f("ZodSymbol",(e,t)=>{rd.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Rm(e,n,o,r)});function Rb(e){return am(Tp,e)}var Np=f("ZodUndefined",(e,t)=>{nd.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,o,r)=>km(e,n,o,r)});function Pb(e){return sm(Np,e)}var Rp=f("ZodNull",(e,t)=>{od.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Pm(e,n,o,r)});function Pp(e){return cm(Rp,e)}var kp=f("ZodAny",(e,t)=>{id.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Dm(e,n,o,r)});function kb(){return um(kp)}var Cp=f("ZodUnknown",(e,t)=>{ad.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,o,r)=>wm(e,n,o,r)});function gr(){return lm(Cp)}var Op=f("ZodNever",(e,t)=>{sd.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Om(e,n,o,r)});function Es(e){return dm(Op,e)}var Dp=f("ZodVoid",(e,t)=>{cd.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Cm(e,n,o,r)});function Cb(e){return mm(Dp,e)}var Po=f("ZodDate",(e,t)=>{ud.init(e,t),k.init(e,t),e._zod.processJSONSchema=(o,r,i)=>zm(e,o,r,i),e.min=(o,r)=>e.check($e(o,r)),e.max=(o,r)=>e.check(Le(o,r));let n=e._zod.bag;e.minDate=n.minimum?new Date(n.minimum):null,e.maxDate=n.maximum?new Date(n.maximum):null});function Ob(e){return pm(Po,e)}var wp=f("ZodArray",(e,t)=>{ld.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Hm(e,n,o,r),e.element=t.element,No(e,"ZodArray",{min(n,o){return this.check(Tt(n,o))},nonempty(n){return this.check(Tt(1,n))},max(n,o){return this.check(pr(n,o))},length(n,o){return this.check(fr(n,o))},unwrap(){return this.element}})});function ko(e,t){return vm(wp,e,t)}function Db(e){let t=e._zod.def.shape;return xs(Object.keys(t))}var Co=f("ZodObject",(e,t)=>{dd.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Xm(e,n,o,r),_.defineLazy(e,"shape",()=>t.shape),No(e,"ZodObject",{keyof(){return xs(Object.keys(this._zod.def.shape))},catchall(n){return this.clone({...this._zod.def,catchall:n})},passthrough(){return this.clone({...this._zod.def,catchall:gr()})},loose(){return this.clone({...this._zod.def,catchall:gr()})},strict(){return this.clone({...this._zod.def,catchall:Es()})},strip(){return this.clone({...this._zod.def,catchall:void 0})},extend(n){return _.extend(this,n)},safeExtend(n){return _.safeExtend(this,n)},merge(n){return _.merge(this,n)},pick(n){return _.pick(this,n)},omit(n){return _.omit(this,n)},partial(...n){return _.partial(Is,this,n[0])},required(...n){return _.required(Ts,this,n[0])}})});function wb(e,t){let n={type:"object",shape:e??{},..._.normalizeParams(t)};return new Co(n)}function zb(e,t){return new Co({type:"object",shape:e,catchall:Es(),..._.normalizeParams(t)})}function Mb(e,t){return new Co({type:"object",shape:e,catchall:gr(),..._.normalizeParams(t)})}var Oo=f("ZodUnion",(e,t)=>{ho.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Ka(e,n,o,r),e.options=t.options});function As(e,t){return new Oo({type:"union",options:e,..._.normalizeParams(t)})}var zp=f("ZodXor",(e,t)=>{Oo.init(e,t),md.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Ka(e,n,o,r),e.options=t.options});function jb(e,t){return new zp({type:"union",options:e,inclusive:!1,..._.normalizeParams(t)})}var Mp=f("ZodDiscriminatedUnion",(e,t)=>{Oo.init(e,t),pd.init(e,t)});function Ub(e,t,n){return new Mp({type:"union",options:t,discriminator:e,..._.normalizeParams(n)})}var jp=f("ZodIntersection",(e,t)=>{fd.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Ym(e,n,o,r)});function Up(e,t){return new jp({type:"intersection",left:e,right:t})}var Lp=f("ZodTuple",(e,t)=>{pa.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Jm(e,n,o,r),e.rest=n=>e.clone({...e._zod.def,rest:n})});function Fp(e,t,n){let o=t instanceof P,r=o?n:t,i=o?t:null;return new Lp({type:"tuple",items:e,rest:i,..._.normalizeParams(r)})}var mn=f("ZodRecord",(e,t)=>{gd.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,o,r)=>qm(e,n,o,r),e.keyType=t.keyType,e.valueType=t.valueType});function Zp(e,t,n){return!t||!t._zod?new mn({type:"record",keyType:xo(),valueType:e,..._.normalizeParams(t)}):new mn({type:"record",keyType:e,valueType:t,..._.normalizeParams(n)})}function Lb(e,t,n){let o=Ae(e);return o._zod.values=void 0,new mn({type:"record",keyType:o,valueType:t,..._.normalizeParams(n)})}function Fb(e,t,n){return new mn({type:"record",keyType:e,valueType:t,mode:"loose",..._.normalizeParams(n)})}var Vp=f("ZodMap",(e,t)=>{vd.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Wm(e,n,o,r),e.keyType=t.keyType,e.valueType=t.valueType,e.min=(...n)=>e.check(mt(...n)),e.nonempty=n=>e.check(mt(1,n)),e.max=(...n)=>e.check(Bt(...n)),e.size=(...n)=>e.check(mr(...n))});function Zb(e,t,n){return new Vp({type:"map",keyType:e,valueType:t,..._.normalizeParams(n)})}var Bp=f("ZodSet",(e,t)=>{hd.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Km(e,n,o,r),e.min=(...n)=>e.check(mt(...n)),e.nonempty=n=>e.check(mt(1,n)),e.max=(...n)=>e.check(Bt(...n)),e.size=(...n)=>e.check(mr(...n))});function Vb(e,t){return new Bp({type:"set",valueType:e,..._.normalizeParams(t)})}var pn=f("ZodEnum",(e,t)=>{yd.init(e,t),k.init(e,t),e._zod.processJSONSchema=(o,r,i)=>Mm(e,o,r,i),e.enum=t.entries,e.options=Object.values(t.entries);let n=new Set(Object.keys(t.entries));e.extract=(o,r)=>{let i={};for(let a of o)if(n.has(a))i[a]=t.entries[a];else throw new Error(`Key ${a} not found in enum`);return new pn({...t,checks:[],..._.normalizeParams(r),entries:i})},e.exclude=(o,r)=>{let i={...t.entries};for(let a of o)if(n.has(a))delete i[a];else throw new Error(`Key ${a} not found in enum`);return new pn({...t,checks:[],..._.normalizeParams(r),entries:i})}});function xs(e,t){let n=Array.isArray(e)?Object.fromEntries(e.map(o=>[o,o])):e;return new pn({type:"enum",entries:n,..._.normalizeParams(t)})}function Bb(e,t){return new pn({type:"enum",entries:e,..._.normalizeParams(t)})}var Gp=f("ZodLiteral",(e,t)=>{bd.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,o,r)=>jm(e,n,o,r),e.values=new Set(t.values),Object.defineProperty(e,"value",{get(){if(t.values.length>1)throw new Error("This schema contains multiple valid literal values. Use `.values` instead.");return t.values[0]}})});function Gb(e,t){return new Gp({type:"literal",values:Array.isArray(e)?e:[e],..._.normalizeParams(t)})}var Wp=f("ZodFile",(e,t)=>{Sd.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Fm(e,n,o,r),e.min=(n,o)=>e.check(mt(n,o)),e.max=(n,o)=>e.check(Bt(n,o)),e.mime=(n,o)=>e.check(rn(Array.isArray(n)?n:[n],o))});function Wb(e){return hm(Wp,e)}var Kp=f("ZodTransform",(e,t)=>{_d.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Gm(e,n,o,r),e._zod.parse=(n,o)=>{if(o.direction==="backward")throw new jt(e.constructor.name);n.addIssue=i=>{if(typeof i=="string")n.issues.push(_.issue(i,n.value,t));else{let a=i;a.fatal&&(a.continue=!1),a.code??(a.code="custom"),a.input??(a.input=n.value),a.inst??(a.inst=e),n.issues.push(_.issue(a))}};let r=t.transform(n.value,n);return r instanceof Promise?r.then(i=>(n.value=i,n.fallback=!0,n)):(n.value=r,n.fallback=!0,n)}});function $s(e){return new Kp({type:"transform",transform:e})}var Is=f("ZodOptional",(e,t)=>{fa.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Ha(e,n,o,r),e.unwrap=()=>e._zod.def.innerType});function Io(e){return new Is({type:"optional",innerType:e})}var Hp=f("ZodExactOptional",(e,t)=>{Ed.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Ha(e,n,o,r),e.unwrap=()=>e._zod.def.innerType});function Xp(e){return new Hp({type:"optional",innerType:e})}var Yp=f("ZodNullable",(e,t)=>{Ad.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Qm(e,n,o,r),e.unwrap=()=>e._zod.def.innerType});function To(e){return new Yp({type:"nullable",innerType:e})}function Kb(e){return Io(To(e))}var Jp=f("ZodDefault",(e,t)=>{xd.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,o,r)=>tp(e,n,o,r),e.unwrap=()=>e._zod.def.innerType,e.removeDefault=e.unwrap});function qp(e,t){return new Jp({type:"default",innerType:e,get defaultValue(){return typeof t=="function"?t():_.shallowClone(t)}})}var Qp=f("ZodPrefault",(e,t)=>{$d.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,o,r)=>rp(e,n,o,r),e.unwrap=()=>e._zod.def.innerType});function ef(e,t){return new Qp({type:"prefault",innerType:e,get defaultValue(){return typeof t=="function"?t():_.shallowClone(t)}})}var Ts=f("ZodNonOptional",(e,t)=>{Id.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,o,r)=>ep(e,n,o,r),e.unwrap=()=>e._zod.def.innerType});function tf(e,t){return new Ts({type:"nonoptional",innerType:e,..._.normalizeParams(t)})}var rf=f("ZodSuccess",(e,t)=>{Td.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Zm(e,n,o,r),e.unwrap=()=>e._zod.def.innerType});function Hb(e){return new rf({type:"success",innerType:e})}var nf=f("ZodCatch",(e,t)=>{Nd.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,o,r)=>np(e,n,o,r),e.unwrap=()=>e._zod.def.innerType,e.removeCatch=e.unwrap});function of(e,t){return new nf({type:"catch",innerType:e,catchValue:typeof t=="function"?t:()=>t})}var af=f("ZodNaN",(e,t)=>{Rd.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Um(e,n,o,r)});function Xb(e){return gm(af,e)}var Do=f("ZodPipe",(e,t)=>{ga.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,o,r)=>op(e,n,o,r),e.in=t.in,e.out=t.out});function ns(e,t){return new Do({type:"pipe",in:e,out:t})}var wo=f("ZodCodec",(e,t)=>{Do.init(e,t),yo.init(e,t)});function Yb(e,t,n){return new wo({type:"pipe",in:e,out:t,transform:n.decode,reverseTransform:n.encode})}function Jb(e){let t=e._zod.def;return new wo({type:"pipe",in:t.out,out:t.in,transform:t.reverseTransform,reverseTransform:t.transform})}var sf=f("ZodPreprocess",(e,t)=>{Do.init(e,t),Pd.init(e,t)}),cf=f("ZodReadonly",(e,t)=>{kd.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,o,r)=>ip(e,n,o,r),e.unwrap=()=>e._zod.def.innerType});function uf(e){return new cf({type:"readonly",innerType:e})}var lf=f("ZodTemplateLiteral",(e,t)=>{Cd.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Lm(e,n,o,r)});function qb(e,t){return new lf({type:"template_literal",parts:e,..._.normalizeParams(t)})}var df=f("ZodLazy",(e,t)=>{wd.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,o,r)=>sp(e,n,o,r),e.unwrap=()=>e._zod.def.getter()});function mf(e){return new df({type:"lazy",getter:e})}var pf=f("ZodPromise",(e,t)=>{Dd.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,o,r)=>ap(e,n,o,r),e.unwrap=()=>e._zod.def.innerType});function Qb(e){return new pf({type:"promise",innerType:e})}var ff=f("ZodFunction",(e,t)=>{Od.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Bm(e,n,o,r)});function eS(e){return new ff({type:"function",input:Array.isArray(e?.input)?Fp(e?.input):e?.input??ko(gr()),output:e?.output??gr()})}var zo=f("ZodCustom",(e,t)=>{zd.init(e,t),k.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Vm(e,n,o,r)});function tS(e){let t=new X({check:"custom"});return t._zod.check=e,t}function rS(e,t){return ym(zo,e??(()=>!0),t)}function gf(e,t={}){return bm(zo,e,t)}function vf(e,t){return Sm(e,t)}var nS=_m,oS=Em;function iS(e,t={}){let n=new zo({type:"custom",check:"custom",fn:o=>o instanceof e,abort:!0,..._.normalizeParams(t)});return n._zod.bag.Class=e,n._zod.check=o=>{o.value instanceof e||o.issues.push({code:"invalid_type",expected:e.name,input:o.value,inst:n,path:[...n._zod.def.path??[]]})},n}var aS=(...e)=>Am({Codec:wo,Boolean:hn,String:fn},...e);function sS(e){let t=mf(()=>As([xo(e),$p(),Ip(),Pp(),ko(t),Zp(xo(),t)]));return t}function cS(e,t){return new sf({type:"pipe",in:$s(e),out:t})}var yR={invalid_type:"invalid_type",too_big:"too_big",too_small:"too_small",invalid_format:"invalid_format",not_multiple_of:"not_multiple_of",unrecognized_keys:"unrecognized_keys",invalid_union:"invalid_union",invalid_key:"invalid_key",invalid_element:"invalid_element",invalid_value:"invalid_value",custom:"custom"};function bR(e){ee({customError:e})}function SR(){return ee().customError}var hf;hf||(hf={});var A={...Ao,...Ja,iso:dn},_R=new Set(["$schema","$ref","$defs","definitions","$id","id","$comment","$anchor","$vocabulary","$dynamicRef","$dynamicAnchor","type","enum","const","anyOf","oneOf","allOf","not","properties","required","additionalProperties","patternProperties","propertyNames","minProperties","maxProperties","items","prefixItems","additionalItems","minItems","maxItems","uniqueItems","contains","minContains","maxContains","minLength","maxLength","pattern","format","minimum","maximum","exclusiveMinimum","exclusiveMaximum","multipleOf","description","default","contentEncoding","contentMediaType","contentSchema","unevaluatedItems","unevaluatedProperties","if","then","else","dependentSchemas","dependentRequired","nullable","readOnly"]);function ER(e,t){let n=e.$schema;return n==="https://json-schema.org/draft/2020-12/schema"?"draft-2020-12":n==="http://json-schema.org/draft-07/schema#"?"draft-7":n==="http://json-schema.org/draft-04/schema#"?"draft-4":t??"draft-2020-12"}function AR(e,t){if(!e.startsWith("#"))throw new Error("External $ref is not supported, only local refs (#/...) are allowed");let n=e.slice(1).split("/").filter(Boolean);if(n.length===0)return t.rootSchema;let o=t.version==="draft-2020-12"?"$defs":"definitions";if(n[0]===o){let r=n[1];if(!r||!t.defs[r])throw new Error(`Reference not found: ${e}`);return t.defs[r]}throw new Error(`Reference not found: ${e}`)}function uS(e,t){if(e.not!==void 0){if(typeof e.not=="object"&&Object.keys(e.not).length===0)return A.never();throw new Error("not is not supported in Zod (except { not: {} } for never)")}if(e.unevaluatedItems!==void 0)throw new Error("unevaluatedItems is not supported");if(e.unevaluatedProperties!==void 0)throw new Error("unevaluatedProperties is not supported");if(e.if!==void 0||e.then!==void 0||e.else!==void 0)throw new Error("Conditional schemas (if/then/else) are not supported");if(e.dependentSchemas!==void 0||e.dependentRequired!==void 0)throw new Error("dependentSchemas and dependentRequired are not supported");if(e.$ref){let r=e.$ref;if(t.refs.has(r))return t.refs.get(r);if(t.processing.has(r))return A.lazy(()=>{if(!t.refs.has(r))throw new Error(`Circular reference not resolved: ${r}`);return t.refs.get(r)});t.processing.add(r);let i=AR(r,t),a=he(i,t);return t.refs.set(r,a),t.processing.delete(r),a}if(e.enum!==void 0){let r=e.enum;if(t.version==="openapi-3.0"&&e.nullable===!0&&r.length===1&&r[0]===null)return A.null();if(r.length===0)return A.never();if(r.length===1)return A.literal(r[0]);if(r.every(a=>typeof a=="string"))return A.enum(r);let i=r.map(a=>A.literal(a));return i.length<2?i[0]:A.union([i[0],i[1],...i.slice(2)])}if(e.const!==void 0)return A.literal(e.const);let n=e.type;if(Array.isArray(n)){let r=n.map(i=>{let a={...e,type:i};return uS(a,t)});return r.length===0?A.never():r.length===1?r[0]:A.union(r)}if(!n)return A.any();let o;switch(n){case"string":{let r=A.string();if(e.format){let i=e.format;i==="email"?r=r.check(A.email()):i==="uri"||i==="uri-reference"?r=r.check(A.url()):i==="uuid"||i==="guid"?r=r.check(A.uuid()):i==="date-time"?r=r.check(A.iso.datetime()):i==="date"?r=r.check(A.iso.date()):i==="time"?r=r.check(A.iso.time()):i==="duration"?r=r.check(A.iso.duration()):i==="ipv4"?r=r.check(A.ipv4()):i==="ipv6"?r=r.check(A.ipv6()):i==="mac"?r=r.check(A.mac()):i==="cidr"?r=r.check(A.cidrv4()):i==="cidr-v6"?r=r.check(A.cidrv6()):i==="base64"?r=r.check(A.base64()):i==="base64url"?r=r.check(A.base64url()):i==="e164"?r=r.check(A.e164()):i==="jwt"?r=r.check(A.jwt()):i==="emoji"?r=r.check(A.emoji()):i==="nanoid"?r=r.check(A.nanoid()):i==="cuid"?r=r.check(A.cuid()):i==="cuid2"?r=r.check(A.cuid2()):i==="ulid"?r=r.check(A.ulid()):i==="xid"?r=r.check(A.xid()):i==="ksuid"&&(r=r.check(A.ksuid()))}typeof e.minLength=="number"&&(r=r.min(e.minLength)),typeof e.maxLength=="number"&&(r=r.max(e.maxLength)),e.pattern&&(r=r.regex(new RegExp(e.pattern))),o=r;break}case"number":case"integer":{let r=n==="integer"?A.number().int():A.number();typeof e.minimum=="number"&&(r=r.min(e.minimum)),typeof e.maximum=="number"&&(r=r.max(e.maximum)),typeof e.exclusiveMinimum=="number"?r=r.gt(e.exclusiveMinimum):e.exclusiveMinimum===!0&&typeof e.minimum=="number"&&(r=r.gt(e.minimum)),typeof e.exclusiveMaximum=="number"?r=r.lt(e.exclusiveMaximum):e.exclusiveMaximum===!0&&typeof e.maximum=="number"&&(r=r.lt(e.maximum)),typeof e.multipleOf=="number"&&(r=r.multipleOf(e.multipleOf)),o=r;break}case"boolean":{o=A.boolean();break}case"null":{o=A.null();break}case"object":{let r={},i=e.properties||{},a=new Set(e.required||[]);for(let[u,l]of Object.entries(i)){let m=he(l,t);r[u]=a.has(u)?m:m.optional()}if(e.propertyNames){let u=he(e.propertyNames,t),l=e.additionalProperties&&typeof e.additionalProperties=="object"?he(e.additionalProperties,t):A.any();if(Object.keys(r).length===0){o=A.record(u,l);break}let m=A.object(r).passthrough(),p=A.looseRecord(u,l);o=A.intersection(m,p);break}if(e.patternProperties){let u=e.patternProperties,l=Object.keys(u),m=[];for(let g of l){let h=he(u[g],t),x=A.string().regex(new RegExp(g));m.push(A.looseRecord(x,h))}let p=[];if(Object.keys(r).length>0&&p.push(A.object(r).passthrough()),p.push(...m),p.length===0)o=A.object({}).passthrough();else if(p.length===1)o=p[0];else{let g=A.intersection(p[0],p[1]);for(let h=2;h<p.length;h++)g=A.intersection(g,p[h]);o=g}break}let c=A.object(r);e.additionalProperties===!1?o=c.strict():typeof e.additionalProperties=="object"?o=c.catchall(he(e.additionalProperties,t)):o=c.passthrough();break}case"array":{let r=e.prefixItems,i=e.items;if(r&&Array.isArray(r)){let a=r.map(u=>he(u,t)),c=i&&typeof i=="object"&&!Array.isArray(i)?he(i,t):void 0;c?o=A.tuple(a).rest(c):o=A.tuple(a),typeof e.minItems=="number"&&(o=o.check(A.minLength(e.minItems))),typeof e.maxItems=="number"&&(o=o.check(A.maxLength(e.maxItems)))}else if(Array.isArray(i)){let a=i.map(u=>he(u,t)),c=e.additionalItems&&typeof e.additionalItems=="object"?he(e.additionalItems,t):void 0;c?o=A.tuple(a).rest(c):o=A.tuple(a),typeof e.minItems=="number"&&(o=o.check(A.minLength(e.minItems))),typeof e.maxItems=="number"&&(o=o.check(A.maxLength(e.maxItems)))}else if(i!==void 0){let a=he(i,t),c=A.array(a);typeof e.minItems=="number"&&(c=c.min(e.minItems)),typeof e.maxItems=="number"&&(c=c.max(e.maxItems)),o=c}else o=A.array(A.any());break}default:throw new Error(`Unsupported type: ${n}`)}return o}function he(e,t){if(typeof e=="boolean")return e?A.any():A.never();let n=uS(e,t),o=e.type||e.enum!==void 0||e.const!==void 0;if(e.anyOf&&Array.isArray(e.anyOf)){let c=e.anyOf.map(l=>he(l,t)),u=A.union(c);n=o?A.intersection(n,u):u}if(e.oneOf&&Array.isArray(e.oneOf)){let c=e.oneOf.map(l=>he(l,t)),u=A.xor(c);n=o?A.intersection(n,u):u}if(e.allOf&&Array.isArray(e.allOf))if(e.allOf.length===0)n=o?n:A.any();else{let c=o?n:he(e.allOf[0],t),u=o?0:1;for(let l=u;l<e.allOf.length;l++)c=A.intersection(c,he(e.allOf[l],t));n=c}e.nullable===!0&&t.version==="openapi-3.0"&&(n=A.nullable(n)),e.readOnly===!0&&(n=A.readonly(n)),e.default!==void 0&&(n=n.default(e.default));let r={},i=["$id","id","$comment","$anchor","$vocabulary","$dynamicRef","$dynamicAnchor"];for(let c of i)c in e&&(r[c]=e[c]);let a=["contentEncoding","contentMediaType","contentSchema"];for(let c of a)c in e&&(r[c]=e[c]);for(let c of Object.keys(e))_R.has(c)||(r[c]=e[c]);return Object.keys(r).length>0&&t.registry.add(n,r),e.description&&(n=n.describe(e.description)),n}function lS(e,t){if(typeof e=="boolean")return e?A.any():A.never();let n;try{n=JSON.parse(JSON.stringify(e))}catch{throw new Error("fromJSONSchema input is not valid JSON (possibly cyclic); use $defs/$ref for recursive schemas")}let o=ER(n,t?.defaultTarget),r=n.$defs||n.definitions||{},i={version:o,defs:r,refs:new Map,processing:new Set,rootSchema:n,registry:t?.registry??pe};return he(n,i)}var yf={};At(yf,{bigint:()=>TR,boolean:()=>IR,date:()=>NR,number:()=>$R,string:()=>xR});function xR(e){return Ld(fn,e)}function $R(e){return Hd(vn,e)}function IR(e){return tm(hn,e)}function TR(e){return nm(yn,e)}function NR(e){return fm(Po,e)}ee(va());var RR=Object.defineProperty,hr=(e,t)=>RR(e,"name",{value:t,configurable:!0}),bf=["production","staging","development","platform","compliance"],dS={production:"Production",staging:"Staging",development:"Development",platform:"Platform",compliance:"Compliance"},PR=new Set(bf);function Ns(e){return PR.has(e)}hr(Ns,"isAccountStage");var jo={ROOT:"root",PLATFORM:"platform"},kR=[...bf,jo.ROOT];function mS(e){return Ns(e)?dS[e]:e.charAt(0).toUpperCase()+e.slice(1)}hr(mS,"getEnvironmentLabel");var Sf=["organisation","platform","account"],CR=s.enum(Sf),Mo={ORGANISATION:"organisation",PLATFORM:"platform",ACCOUNT:"account"},OR={[Mo.ORGANISATION]:!0,[Mo.PLATFORM]:!0,[Mo.ACCOUNT]:!0},DR=new Set(Object.keys(OR));function pS(e){return DR.has(e)}hr(pS,"isAccountTier");var fS=Sf.filter(e=>e!==Mo.ACCOUNT),wR=new Set(fS);function gS(e){return wR.has(e)}hr(gS,"isGovernanceTier");function _f(e){return e===jo.ROOT?"organisation":e===jo.PLATFORM?"platform":"account"}hr(_f,"environmentToTier");function vS(e){return e==null||e===""||e===jo.ROOT?null:Ns(e)?e:null}hr(vS,"stageFromWireEnvironment");function Uo(e){return e.tier??_f(e.environment)}hr(Uo,"accountTier");var zR=Object.defineProperty,Lo=(e,t)=>zR(e,"name",{value:t,configurable:!0});var hS=Object.freeze({"AWS::IAM::Role":"security","AWS::IAM::Policy":"security","AWS::IAM::OIDCProvider":"security","AWS::EC2::SecurityGroup":"security","AWS::KMS::Key":"security","AWS::KMS::Alias":"security","AWS::EC2::VPC":"network","AWS::EC2::Subnet":"network","AWS::EC2::InternetGateway":"network","AWS::EC2::NatGateway":"network","AWS::EC2::RouteTable":"network","AWS::EC2::Route":"network","AWS::EC2::VPCGatewayAttachment":"network","AWS::EC2::SubnetRouteTableAssociation":"network","AWS::EC2::EIP":"network","AWS::ECS::Cluster":"compute","AWS::ECS::Service":"compute","AWS::ECS::TaskDefinition":"compute","AWS::Lambda::Function":"compute","AWS::ElasticLoadBalancingV2::LoadBalancer":"compute","AWS::ElasticLoadBalancingV2::TargetGroup":"compute","AWS::ElasticLoadBalancingV2::Listener":"compute","AWS::ElasticLoadBalancingV2::ListenerRule":"compute","AWS::RDS::DBInstance":"database","AWS::RDS::DBCluster":"database","AWS::SecretsManager::Secret":"database","AWS::S3::Bucket":"storage","AWS::S3::BucketPolicy":"storage","AWS::CloudTrail::Trail":"monitoring","AWS::CloudWatch::Alarm":"monitoring","AWS::Logs::LogGroup":"monitoring","AWS::Events::EventBus":"events","AWS::Events::Rule":"events","AWS::ECR::Repository":"registry","AWS::CodeBuild::Project":"registry","AWS::Route53::RecordSet":"dns","AWS::CertificateManager::Certificate":"dns","AWS::CloudFront::Distribution":"dns","AWS::Backup::BackupVault":"backup","AWS::Backup::BackupPlan":"backup","AWS::Backup::BackupSelection":"backup","AWS::SSO::PermissionSet":"identity","AWS::SSO::Assignment":"identity","AWS::Organizations::Account":"identity","AWS::CDK::Metadata":"compute","AWS::CloudFormation::CustomResource":"compute","AWS::CloudFormation::WaitCondition":"compute","AWS::CloudFormation::WaitConditionHandle":"compute"}),Ef=new Set;function yS(e){if(!e)return"compute";if(e.startsWith("Custom::"))return hS[e]??"compute";let t=hS[e];return t||Ef.add(e),t??"compute"}Lo(yS,"categoriseResource");function MR(){return new Set(Ef)}Lo(MR,"getUnmappedResourceTypes");function jR(){Ef.clear()}Lo(jR,"clearUnmappedResourceTypes");var UR=Object.freeze({"AWS::EC2::NatGateway":120,"AWS::RDS::DBInstance":300,"AWS::RDS::DBCluster":300,"AWS::CloudFront::Distribution":300,"AWS::ECS::Service":180,"AWS::ElasticLoadBalancingV2::LoadBalancer":60,"AWS::EC2::SecurityGroup":10,"AWS::IAM::Role":15,"AWS::IAM::Policy":15,"AWS::IAM::OIDCProvider":10,"AWS::S3::Bucket":10,"AWS::S3::BucketPolicy":5,"AWS::Lambda::Function":30,"AWS::EC2::VPC":15,"AWS::EC2::Subnet":15,"AWS::EC2::InternetGateway":10,"AWS::EC2::RouteTable":5,"AWS::EC2::Route":5,"AWS::EC2::VPCGatewayAttachment":10,"AWS::EC2::SubnetRouteTableAssociation":5,"AWS::EC2::EIP":10,"AWS::ECS::Cluster":15,"AWS::ECS::TaskDefinition":10,"AWS::ElasticLoadBalancingV2::TargetGroup":10,"AWS::ElasticLoadBalancingV2::Listener":10,"AWS::ElasticLoadBalancingV2::ListenerRule":5,"AWS::SecretsManager::Secret":10,"AWS::Logs::LogGroup":5,"AWS::CloudWatch::Alarm":10,"AWS::CloudTrail::Trail":15,"AWS::Events::EventBus":5,"AWS::Events::Rule":5,"AWS::ECR::Repository":10,"AWS::Route53::RecordSet":30,"AWS::CertificateManager::Certificate":60,"AWS::KMS::Key":15,"AWS::KMS::Alias":5,"AWS::Backup::BackupVault":10,"AWS::Backup::BackupPlan":10,"AWS::Backup::BackupSelection":10,"AWS::SSO::PermissionSet":15,"AWS::SSO::Assignment":10,"AWS::Organizations::Account":60}),LR=30;function bS(e){return UR[e]??LR}Lo(bS,"getExpectedDuration");var FR=Object.freeze({"AWS::Lambda::Function":"Lambda Function","AWS::IAM::Role":"IAM Role","AWS::IAM::Policy":"IAM Policy","AWS::S3::Bucket":"S3 Bucket","AWS::DynamoDB::Table":"DynamoDB Table","AWS::EC2::Instance":"EC2 Instance","AWS::EC2::SecurityGroup":"Security Group","AWS::EC2::VPC":"VPC","AWS::EC2::Subnet":"Subnet","AWS::EC2::InternetGateway":"Internet Gateway","AWS::EC2::RouteTable":"Route Table","AWS::EC2::Route":"Route","AWS::ECS::Cluster":"ECS Cluster","AWS::ECS::Service":"ECS Service","AWS::ECS::TaskDefinition":"Task Definition","AWS::ElasticLoadBalancingV2::LoadBalancer":"Load Balancer","AWS::ElasticLoadBalancingV2::TargetGroup":"Target Group","AWS::ElasticLoadBalancingV2::Listener":"Listener","AWS::CloudFormation::Stack":"CloudFormation Stack","AWS::CDK::Metadata":"CDK Metadata","Custom::CDKBucketDeployment":"Bucket Deployment","AWS::SSM::Parameter":"SSM Parameter","AWS::CloudWatch::Alarm":"CloudWatch Alarm","AWS::Logs::LogGroup":"Log Group","AWS::ApiGateway::RestApi":"API Gateway","AWS::ApiGateway::Deployment":"API Deployment","AWS::ApiGateway::Stage":"API Stage","AWS::ApiGateway::Method":"API Method","AWS::ApiGateway::Resource":"API Resource","AWS::CloudFront::Distribution":"CloudFront Distribution","AWS::Route53::RecordSet":"Route53 Record","AWS::RDS::DBInstance":"RDS Instance","AWS::RDS::DBCluster":"RDS Cluster","AWS::SQS::Queue":"SQS Queue","AWS::SNS::Topic":"SNS Topic","AWS::Events::Rule":"EventBridge Rule","AWS::StepFunctions::StateMachine":"Step Function","AWS::EC2::NatGateway":"NAT Gateway","AWS::EC2::EIP":"Elastic IP","AWS::EC2::VPCGatewayAttachment":"Gateway Attachment","AWS::EC2::SubnetRouteTableAssociation":"Route Association","AWS::CloudTrail::Trail":"CloudTrail","AWS::IAM::OIDCProvider":"OIDC Provider","AWS::Events::EventBus":"Event Bus","AWS::Backup::BackupVault":"Backup Vault","AWS::Backup::BackupPlan":"Backup Plan","AWS::Backup::BackupSelection":"Backup Selection","AWS::SecretsManager::Secret":"Secret","AWS::KMS::Key":"KMS Key","AWS::KMS::Alias":"KMS Alias","AWS::ECR::Repository":"ECR Repository","AWS::CertificateManager::Certificate":"Certificate","AWS::ElasticLoadBalancingV2::ListenerRule":"Listener Rule","AWS::EC2::IPAM":"IPAM","AWS::EC2::IPAMPool":"IPAM Pool","AWS::EC2::IPAMPoolCidr":"IPAM Pool CIDR","Custom::ram":"RAM","Custom::ipamDelegateAdmin":"IPAM Delegate Admin","Custom::CostAllocationTags":"Cost Allocation Tags","Custom::ActivateOrganisationsAccess":"Activate Organisations Access","Custom::Organizations_TagResource":"Organisations Tag Resource","AWS::CloudFormation::CustomResource":"Custom Resource","AWS::CloudFormation::WaitCondition":"Wait Condition","AWS::CloudFormation::WaitConditionHandle":"Wait Condition Handle","AWS::SSO::PermissionSet":"SSO Permission Set","AWS::SSO::Assignment":"SSO Assignment","AWS::Organizations::Account":"Organisations Account","AWS::S3::BucketPolicy":"S3 Bucket Policy","AWS::CodeBuild::Project":"CodeBuild Project"});function SS(e){return FR[e]||e.split("::").pop()||e}Lo(SS,"getFriendlyResourceType");var ZR=Object.defineProperty,VR=(e,t)=>ZR(e,"name",{value:t,configurable:!0}),BR={"github.com":"github","gitlab.com":"gitlab","bitbucket.org":"bitbucket"},GR=/^https?:\/\/([^/]+)\/(.+?)\/([^/.]+?)(?:\.git)?$/,WR=/^git@([^:]+):(.+?)\/([^/.]+?)(?:\.git)?$/,KR=/^ssh:\/\/[^@]+@([^:/]+)(?::\d+)?\/(.+?)\/([^/.]+?)(?:\.git)?$/;function _S(e){if(!e)return null;let t=e.replace(/^(https?:\/\/)[^@]+@/,"$1"),n=t.match(GR)??t.match(WR)??e.match(KR);if(!n)return null;let[,o,r,i]=n;return!o||!r||!i?null:{provider:BR[o]??"other",owner:r,repo:i,host:o}}VR(_S,"parseGitRemoteUrl");var Af=["read","write","deploy","secrets:read","secrets:write","destroy","admin","applications:read","applications:deploy","deploy:oidc:mint","deploy:governance"],ES={read:"user",write:"user",deploy:"user","secrets:read":"user","secrets:write":"user",destroy:"user",admin:"admin","applications:read":"user","applications:deploy":"user","deploy:oidc:mint":"machine","deploy:governance":"machine"},HR=Af.filter(e=>ES[e]==="machine");var XR=Af.filter(e=>ES[e]==="user");var YR=Object.defineProperty,bn=(e,t)=>YR(e,"name",{value:t,configurable:!0}),Ps=/^[a-zA-Z_][a-zA-Z0-9._-]*$/,xf="Secret name must start with a letter or underscore and contain only letters, numbers, underscores, hyphens, or periods",Fo=/^[a-zA-Z][a-zA-Z0-9._-]*$/,ks="Must start with a letter and contain only letters, numbers, periods, hyphens, or underscores";var Rs=s.string().regex(Fo,ks),AS=s.object({app:Rs.describe("Application name"),cluster:Rs.optional().describe("Cluster name"),service:Rs.optional().describe("Service name"),lambda:Rs.optional().describe("Lambda function name")}).strict().refine(e=>!(e.service&&!e.cluster),{message:"Cluster is required when service is specified"}).refine(e=>!(e.lambda&&(e.cluster||e.service)),{message:"Lambda is mutually exclusive with cluster and service"}).refine(e=>e.cluster!=="lambda",{message:'The cluster name "lambda" is reserved for lambda-scoped parameter paths'});function $f(e){let t=[e.app];return e.lambda?t.push("lambda",e.lambda):(e.cluster&&t.push(e.cluster),e.service&&e.cluster&&t.push(e.service)),t}bn($f,"buildNamespaceParts");function If(e,t){let n=$f(e);return t&&n.push(t),"/"+n.join("/")}bn(If,"buildParameterPath");function Tf(e){let t=e.split("/").filter(Boolean);if(t.length<2)return null;let n=t[t.length-1]??"",o={app:t[0]??""};return t.length>=4&&t[1]==="lambda"?o.lambda=t[2]:t.length>=3&&(o.cluster=t[1],t.length>=4&&(o.service=t[2])),{namespace:o,name:n}}bn(Tf,"parseParameterPath");function xS(e){let t=Tf(e);return t?AS.safeParse(t.namespace).success&&If(t.namespace,t.name)===e:!1}bn(xS,"isManageablePath");function $S(e){let t={};for(let n of e.split(`
 `)){let o=n.trim();if(!o||o.startsWith("#"))continue;let r=o.replace(/^export\s+/,""),i=r.indexOf("=");if(i===-1)continue;let a=r.slice(0,i).trim();if(!Ps.test(a))continue;let c=r.slice(i+1);c.length>=2&&c.startsWith('"')&&c.endsWith('"')?t[a]=c.slice(1,-1).replace(/\\([\\"$`nr])/g,(u,l)=>l==="n"?`
-`:l==="r"?"\r":l):c.length>=2&&c.startsWith("'")&&c.endsWith("'")?t[a]=c.slice(1,-1):t[a]=c}return t}bn($S,"parseDotEnv");function IS(e){return e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`").replace(/\n/g,"\\n").replace(/\r/g,"\\r")}bn(IS,"escapeDotEnvValue");var TS=s.object({awsAccountId:s.string(),accountName:s.string().nullable(),status:s.string(),role:s.string(),roleArn:s.string(),environment:s.string().optional(),connectedAt:s.string()}),JR=s.object({accounts:s.array(TS)});var qR=Object.defineProperty,yr=(e,t)=>qR(e,"name",{value:t,configurable:!0});function Nf(e){let t=[e.primaryRegion,...e.secondaryRegions??[],e.disasterRecoveryRegion].filter(n=>n!==void 0);return[...new Set(t)]}yr(Nf,"deriveRegionsFromOrgConfig");function Rf(e){return e.environment??Uo(e)}yr(Rf,"environmentOrTier");function Pf(e,t){return`${e.toLowerCase()}-${Ur(t)}`}yr(Pf,"generateTargetName");function kf(e,t){let n=[];for(let o of e){if(Uo(o)==="organisation")continue;let r=Rf(o);for(let i of t)n.push({name:Pf(o.name,i),accountName:o.name,accountId:o.id,environment:r,region:i})}return n.sort((o,r)=>{let i=o.environment.localeCompare(r.environment);if(i!==0)return i;let a=o.accountName.localeCompare(r.accountName);return a!==0?a:o.region.localeCompare(r.region)})}yr(kf,"deriveTargets");function NS(e){return kf(e.providerAccounts,Nf(e))}yr(NS,"deriveAllTargets");function QR(e,t){if(t.length===0)return e;let n=new Set([e.primaryRegion,e.disasterRecoveryRegion].filter(Boolean)),o=t.filter(r=>!n.has(r));return{...e,secondaryRegions:o.length>0?o:void 0}}yr(QR,"mergeSecondaryRegions");function RS(e,t){return e.find(n=>n.name===t)}yr(RS,"findTarget");var eP=Object.defineProperty,tP=(e,t)=>eP(e,"name",{value:t,configurable:!0});function PS(e,t){if(t!==void 0){if(t.trim()==="")throw new Error("buildAppConfigPath: container must be a non-empty string");return`${t}/fjall/${e}`}return`fjall/${e}`}tP(PS,"buildAppConfigPath");var rP=Object.defineProperty,Sn=(e,t)=>rP(e,"name",{value:t,configurable:!0}),Cf="infrastructure.ts",Of="fjall";function kS(e,t){let n=t?.excludedPathPrefixes,o=t?.excludedPathSegments,r=[];for(let i of e){if(!Df(i.path)||n&&OS(i.path,n)||o&&DS(i.path,o))continue;let a=wf(i.path);a!==null&&r.push({configPath:CS(i.path),boundaryPath:a})}return r}Sn(kS,"findInfrastructurePaths");function Df(e){return e===Cf||e.endsWith(`/${Cf}`)}Sn(Df,"isInfrastructureFile");function wf(e){let t=e.split("/");for(let n=0;n<t.length-1;n++)if(t[n]===Of)return t.slice(0,n+1).join("/");return null}Sn(wf,"findBoundaryPath");function CS(e){return e.slice(0,-`/${Cf}`.length)}Sn(CS,"toConfigDir");function OS(e,t){for(let n of t)if(e.startsWith(n))return!0;return!1}Sn(OS,"hasExcludedPrefix");function DS(e,t){let n=e.split("/");for(let o=0;o<n.length-1;o++)if(t.has(n[o]))return!0;return!1}Sn(DS,"hasExcludedSegment");var nP=Object.defineProperty,zf=(e,t)=>nP(e,"name",{value:t,configurable:!0});function wS(e){if(e.length===0)return null;let t=[];for(let o of e){let r=zS(o.boundaryPath);if(r===null)return null;t.push(r)}let n=MS(t);return n.length===0?null:n.join("/")}zf(wS,"inferContainerFromCandidates");function zS(e){let t=e.split("/").filter(o=>o.length>0);if(t.length===0||t[t.length-1]!==Of)return null;let n=t.slice(0,t.length-1);return n.length===0?null:n}zf(zS,"extractContainer");function MS(e){if(e.length===0)return[];let[t,...n]=e,o=[];for(let r=0;r<t.length;r+=1){let i=t[r];for(let a of n)if(a[r]!==i)return o;o.push(i)}return o}zf(MS,"longestCommonPrefix");var oP=Object.defineProperty,jS=(e,t)=>oP(e,"name",{value:t,configurable:!0}),US=["fjall","organisation","platform","account","domain"];function LS(e){return US.includes(e.toLowerCase())}jS(LS,"isReservedAppName");var FS="-cache";function ZS(e){return ut(e).endsWith(FS)}jS(ZS,"hasReservedAppNameSuffix");var iP=Object.defineProperty,Mf=(e,t)=>iP(e,"name",{value:t,configurable:!0});function BS(e){return{success:!0,data:e}}Mf(BS,"success");function Zo(e){return{success:!1,error:e}}Mf(Zo,"failure");var VS="sha256:",Cs=12,aP=new RegExp(`-sha-[0-9a-f]{${Cs}}$`);function GS(e,t,n){if(!e.startsWith(VS))return Zo(new Error(`expected sha256:... digest, got ${e.slice(0,32)}`));let o=e.slice(VS.length);if(o.length<Cs)return Zo(new Error(`digest hex payload too short (need >=${Cs} chars, got ${o.length})`));let r=t.trim();if(r==="")return Zo(new Error("serviceName must be a non-empty string"));let i;if(n!==void 0){let u=n.trim();if(u==="")return Zo(new Error("target, when supplied, must be a non-empty string; omit the argument instead"));i=u.toLowerCase()}let a=o.slice(0,Cs).toLowerCase(),c=i!==void 0?`${r.toLowerCase()}-${i}`:r.toLowerCase();return BS(`${c}-sha-${a}`)}Mf(GS,"deriveContentHashTag");var sP=Object.defineProperty,cP=(e,t)=>sP(e,"name",{value:t,configurable:!0}),WS=["full","code-only","rollback","restart"],uP=s.enum(WS),KS=/^[a-zA-Z0-9._-]+$/,HS=s.string().min(1).max(128).regex(KS),XS=s.object({serviceName:s.string().min(1),imageTag:HS,imageDigest:s.string().min(1).optional(),imageUri:s.string().min(1),ecrRepositoryArn:s.string().min(1).optional(),taskDefinitionArn:s.string().min(1).optional(),previousTaskDefinitionArn:s.string().min(1).optional(),functionArn:s.string().min(1).optional(),publishedVersion:s.string().min(1).optional()}).strict(),lP=s.array(XS);function YS(e,t){return`${e}${t}`}cP(YS,"artefactOutputKey");var dP=Object.defineProperty,JS=(e,t)=>dP(e,"name",{value:t,configurable:!0}),ft=["payload","nextjs","staticsite"],jf=new Set(ft);function Uf(e){return typeof e=="string"&&jf.has(e)}JS(Uf,"isPatternType");var _n={payload:{label:"Payload CMS",constructIdSuffix:"Payload",artefact:"opennext-lambda",stackPlacement:"compute",deployable:!0},nextjs:{label:"Next.js",constructIdSuffix:"Nextjs",artefact:"opennext-lambda",stackPlacement:"compute",deployable:!1},staticsite:{label:"Static site",constructIdSuffix:"StaticSite",artefact:"static-assets",stackPlacement:"cdn",deployable:!0}},qS=ft.filter(e=>_n[e].deployable),Lf=ft.filter(e=>_n[e].artefact==="opennext-lambda"),mP=new Set(Lf);function Ff(e){return e!=null&&mP.has(e)}JS(Ff,"isOpenNextPatternType");var Vo=["multipage","spa"];var pP=Object.defineProperty,Zf=(e,t)=>pP(e,"name",{value:t,configurable:!0}),QS="noreply";function e_(e){return`${QS}@${e}`}Zf(e_,"defaultFormsFromAddress");function t_(e){return`https://${e}`}Zf(t_,"defaultFormsCorsOrigin");function Os(e,t){let n=e.split("@");if(n.length!==2)return!1;let[o,r]=n;return o===void 0||o===""||r===void 0?!1:r.toLowerCase()===t.toLowerCase()}Zf(Os,"isAddressAtDomain");var r_=2;var fP=s.object({devDomain:s.string().min(1),hostedZoneId:s.string().min(1).optional(),parentDomain:s.string().min(1).optional(),parentDelegationRoleArn:s.string().min(1).optional()}).strict().superRefine((e,t)=>{if(e.hostedZoneId!==void 0){e.parentDomain!==void 0&&t.addIssue({code:"custom",path:["parentDomain"],message:"hostedZoneId (adopt mode) is mutually exclusive with parentDomain \u2014 the adopted zone was already delegated; omit parentDomain"}),e.parentDelegationRoleArn!==void 0&&t.addIssue({code:"custom",path:["parentDelegationRoleArn"],message:"hostedZoneId (adopt mode) is mutually exclusive with parentDelegationRoleArn \u2014 the adopted zone was already delegated; omit parentDelegationRoleArn"});return}e.parentDelegationRoleArn!==void 0&&e.parentDomain===void 0&&t.addIssue({code:"custom",path:["parentDomain"],message:"parentDelegationRoleArn requires parentDomain \u2014 set parentDomain to the parent zone the DelegationRole belongs to"}),e.parentDomain!==void 0&&!e.devDomain.endsWith(`.${e.parentDomain}`)&&t.addIssue({code:"custom",path:["parentDomain"],message:"parentDomain must be a proper DNS suffix of devDomain \u2014 devDomain must end with `.<parentDomain>`"})}),n_={appId:s.string().min(1),appKebab:s.string().min(1),engineVersion:s.string().min(1).optional(),adoptSlotEcr:s.boolean().optional(),phase:s.enum(["zone","full"]).optional(),domain:fP.optional()},gP=s.object(n_).strict(),vP=s.object({...n_,version:s.literal(r_),appName:s.string().min(1)}).strict().refine(e=>e.appName===`fjall-dev-${e.appKebab}`,{message:"appName must equal `fjall-dev-${appKebab}` (single-source identity)",path:["appName"]});var yP=Object.defineProperty,En=(e,t)=>yP(e,"name",{value:t,configurable:!0});function o_(e){return e.success===!0}En(o_,"isSuccess");function i_(e){return e.success===!1}En(i_,"isFailure");function R(e){return{success:!0,data:e}}En(R,"success");function T(e){return{success:!1,error:e}}En(T,"failure");async function a_(e){try{let t=await e();return R(t)}catch(t){return T(sr(t))}}En(a_,"tryAsync");function s_(e){try{let t=e();return R(t)}catch(t){return T(sr(t))}}En(s_,"trySync");var bP=Object.defineProperty,SP=(e,t)=>bP(e,"name",{value:t,configurable:!0}),c_=/^[a-zA-Z][a-zA-Z0-9-]*$/,_P=Fo.source.replace(/^\^|\$$/g,""),z=Object.freeze({IDENTIFIER:c_,NEW_APP_NAME:/^[a-z][a-z0-9-]*$/,RESOURCE_NAME:/^[a-zA-Z][a-zA-Z0-9]*$/,ECS_SERVICE_NAME:c_,BUCKET_NAME:/^[a-z][a-z0-9-]*[a-z0-9]$|^[a-z][a-z0-9]*$/,DATABASE_NAME:/^[a-zA-Z][a-zA-Z0-9_]*$/,RESOURCE_TYPE:/^[a-z]+(:[a-z]+)?$/,SSM_PATH:new RegExp(`^(?:/${_P})+$`),SECRET_NAME:Ps,SSM_COMPONENT:Fo,EMAIL:/^[^\s@]+@[^\s@]+\.[^\s@]+$/,DOCKER_IMAGE:/^[a-z0-9][a-z0-9._-]*[a-z0-9](:[a-z0-9._-]+)?$/,DOMAIN:/^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)+$/i,HTTP_ORIGIN:/^https?:\/\/[a-z0-9.-]+(:\d+)?$/i,PASCAL_CASE:/^[A-Z][A-Za-z0-9]*$/,AWS_ACCOUNT_ID:/^\d{12}$/,VPC_ID:/^vpc-[a-z0-9]+$/,ROLE_ARN:/^arn:aws[a-zA-Z-]*:iam::\d{12}:role\/.+$/,CIDR:/^((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\.){3}(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\/(3[0-2]|[12]?\d)$/,SCHEDULE_EXPRESSION:/^(rate\(1 (?:minute|hour|day)\)|rate\((?:[2-9]|[1-9]\d+) (?:minutes|hours|days)\)|cron\([^\s()]+ [^\s()]+ [^\s()]+ [^\s()]+ [^\s()]+ [^\s()]+\))$/,LAMBDA_RUNTIME_IDENTIFIER:/^[A-Za-z0-9._-]+$/,ENV_VAR_NAME:/^[A-Za-z_][A-Za-z0-9_]*$/});function Vf(e){let t=/^rate\((\d+) (minute|minutes|hour|hours|day|days)\)$/.exec(e);if(!t)return;let n=t[1],o=t[2];if(n===void 0||o===void 0)return;let r=parseInt(n,10);if(!Number.isFinite(r)||r<1)return;let i=o==="minute"||o==="hour"||o==="day";if(!(i&&r!==1)&&!(!i&&r===1))return o==="minute"||o==="minutes"?{everyMs:r*6e4}:o==="hour"||o==="hours"?{everyMs:r*60*6e4}:{everyMs:r*24*60*6e4}}SP(Vf,"parseRateExpression");var d=Object.freeze({IDENTIFIER:"Must start with a letter, contain only letters, numbers, and hyphens",NEW_APP_NAME:"Must start with a lowercase letter and contain only lowercase letters, numbers, and hyphens",IDENTIFIER_MIN_LENGTH:"Must be at least 2 characters",IDENTIFIER_NO_TRAILING_HYPHEN:"Must not end with a hyphen",IDENTIFIER_NO_CONSECUTIVE_HYPHENS:"Must not contain consecutive hyphens",RESOURCE_NAME:"Must start with a letter and contain only letters and numbers (PascalCase recommended)",ECS_SERVICE_NAME:"Service name must start with a letter and contain only letters, numbers, and hyphens",BUCKET_NAME:"Bucket name must start with a lowercase letter and contain only lowercase letters, numbers, and hyphens",DATABASE_NAME:"Database name must start with a letter and contain only letters, numbers, and underscores",RESOURCE_TYPE:"Resource type must be in format 'category' or 'category:type'",SSM_PATH:"SSM path must start with / and contain valid namespace segments (e.g., /myapp/ApiCluster/service)",SECRET_NAME:xf,SSM_COMPONENT:ks,EMAIL:"Please enter a valid email address",DOMAIN:"Please enter a valid domain (e.g., cms.example.com)",DOCKER_IMAGE:"Invalid Docker image name format",REQUIRED:{APP_NAME:"Application name is required",RESOURCE_NAME:"Resource name is required",BUCKET_NAME:"Bucket name is required",SERVICE_NAME:"Service name is required",NETWORK_NAME:"Network name is required",DATABASE_NAME:"Database name is required",ORGANISATION_NAME:"Organisation name is required",EMAIL:"Email is required",NAME:"Name is required",USERNAME:"Username is required",CONTAINER_NAME:"Container name is required",GROUP:"Group is required",PATTERN_NAME:"Pattern name is required",SOURCE:"Source directory is required",BUILD_COMMAND:"Build command is required",OUTPUT_DIR:"Output directory is required",FORMS_TO:"Forms recipient address is required",ROUTING_PATH:"Routing path is required",RESOURCE_REFERENCE:"Resource reference is required",RESOURCE_TYPE:"Resource type is required",VARIANT:"Variant is required",SUBTYPE:"Subtype is required",DEPLOY_TARGET:"Deploy target is required",DESTROY_TARGET:"Destroy target is required"},MAX_LENGTH:{APP_NAME:"Application name must be 50 characters or less",RESOURCE_NAME:"Resource name must be 63 characters or less",BUCKET_NAME:"Bucket name must be 63 characters or less",SERVICE_NAME:"Service name must be 255 characters or less",NETWORK_NAME:"Network name must be 50 characters or less",DATABASE_NAME:"Database name must be 63 characters or less",ORGANISATION_NAME:"Organisation name must be 50 characters or less"},PORT:{INTEGER:"Port must be an integer",MIN:"Port must be at least 1",MAX:"Port cannot exceed 65535"},USERNAME:{MAX_LENGTH:"Username cannot exceed 63 characters"},LAMBDA:{MEMORY:{INTEGER:"Lambda memory must be an integer",MIN:"Memory must be at least 128 MB",MAX:"Memory cannot exceed 10240 MB",MULTIPLE:"Memory must be 128 MB or a multiple of 64 MB"},TIMEOUT:{INTEGER:"Timeout must be an integer",MIN:"Timeout must be at least 1 second",MAX:"Timeout cannot exceed 900 seconds"},RUNTIME:"Lambda runtime must contain only letters, digits, dots, underscores, or dashes (e.g. 'NODEJS_20_X' or 'nodejs20.x')"},ENV_VAR_NAME:"Environment variable names must start with a letter or underscore and contain only letters, digits, and underscores",PRIORITY:{INTEGER:"Priority must be an integer",MIN:"Priority must be at least 1",MAX:"Priority cannot exceed 50000"},CAPACITY:{MIN:{INTEGER:"Minimum capacity must be an integer",MIN_0:"Minimum capacity must be at least 0",MIN_1:"Minimum capacity must be at least 1",MAX:"Minimum capacity cannot exceed 100"},MAX:{INTEGER:"Maximum capacity must be an integer",MIN_0:"Maximum capacity must be at least 0",MIN_1:"Maximum capacity must be at least 1",MAX:"Maximum capacity cannot exceed 100"},DESIRED:{INTEGER:"Desired count must be an integer",MIN:"Desired count must be at least 0",MAX:"Desired count cannot exceed 100"},WARM_POOL_REQUIRED:"minCapacity 0 requires a warmPool \u2014 without it, new tasks wait 60-90s for a cold instance launch",WARM_POOL:{MIN_SIZE:{INTEGER:"Warm pool minSize must be an integer",MIN:"Warm pool minSize must be at least 0",MAX:"Warm pool minSize cannot exceed 100"},MIN_SIZE_EXCEEDS_MAX_CAPACITY:"warmPool.minSize cannot exceed maxCapacity \u2014 the warm pool cannot hold more instances than the ASG allows"}},MEMORY_LIMIT:{INTEGER:"Memory limit must be an integer",MIN_512:"Memory limit must be at least 512 MiB",MIN_128:"Memory limit must be at least 128 MiB",MAX:"Memory limit cannot exceed 30720 MiB"},DATABASE:{PORT:{INTEGER:"Database port must be an integer",MIN:"Database port must be at least 1024",MAX:"Database port cannot exceed 65535"},NAME:{REQUIRED:"Database name is required",MAX_LENGTH:"Database name must be 63 characters or less"}},BACKUP_RETENTION:{INTEGER:"Backup retention must be an integer",MIN:"Backup retention must be at least 1 day",MAX:"Backup retention cannot exceed 35 days"},SQS:{VISIBILITY_TIMEOUT:{INTEGER:"Visibility timeout must be an integer",MIN:"Visibility timeout must be at least 0 seconds",MAX:"Visibility timeout cannot exceed 43200 seconds (12 hours)"},RETENTION_PERIOD:{INTEGER:"Retention period must be an integer",MIN:"Retention period must be at least 60 seconds",MAX:"Retention period cannot exceed 1209600 seconds (14 days)"}},READER:{COUNT:{INTEGER:"Reader count must be an integer",MIN:"Reader count must be at least 0",MAX:"Reader count cannot exceed 15"}},IDENTIFIER_SUFFIX:{REQUIRED:"Identifier suffix is required when specified",MAX_LENGTH:"Identifier suffix cannot exceed 50 characters"},ROTATION:{INTEGER:"Rotation days must be an integer",MIN:"Rotation interval must be at least 1 day",MAX:"Rotation interval cannot exceed 365 days"},MAX_CONNECTIONS:{INTEGER:"Max connections must be an integer",MIN:"Max connections must be at least 1",MAX:"Max connections cannot exceed 100"},MONITORING_INTERVAL:{INTEGER:"Monitoring interval must be an integer",MIN:"Monitoring interval must be at least 0",MAX:"Monitoring interval cannot exceed 60 seconds",VALUES:"Monitoring interval must be 0, 1, 5, 10, 15, 30, or 60 seconds"},RETENTION_DAYS:{INTEGER:"Retention days must be an integer",MIN:"Retention days must be at least 1",MAX:"Retention days cannot exceed 365"},BATCH_SIZE:{INTEGER:"Batch size must be an integer",MIN:"Batch size must be at least 1",MAX:"Batch size cannot exceed 10000"},SERVICE:{UNIQUE_WITHIN_CLUSTER:"Service names must be unique within a cluster",MIN_REQUIRED:"At least one service is required",ROUTING_REQUIRED:"Multiple services with ports require routing config (path or host)"},PROXY_CONFIG:{MAX_IDLE_CONNECTIONS:{INTEGER:"Max idle connections must be an integer",MIN:"Max idle connections must be at least 0",MAX:"Max idle connections cannot exceed 100"},BORROW_TIMEOUT:{INTEGER:"Connection borrow timeout must be an integer",MIN:"Connection borrow timeout must be at least 1 second",MAX:"Connection borrow timeout cannot exceed 3600 seconds"}},MAX_AZS:{INTEGER:"Max AZs must be an integer",MIN:"Max AZs must be at least 1",MAX:"Max AZs cannot exceed 3"},BATCHING_WINDOW:{INTEGER:"Max batching window must be an integer",MIN:"Max batching window must be at least 0",MAX:"Max batching window cannot exceed 300 seconds"},HEALTH_CHECK:{INTERVAL:{INTEGER:"Health check interval must be an integer",MIN:"Health check interval must be at least 5 seconds",MAX:"Health check interval cannot exceed 300 seconds"},TIMEOUT:{INTEGER:"Health check timeout must be an integer",MIN:"Health check timeout must be at least 2 seconds",MAX:"Health check timeout cannot exceed 60 seconds"},RETRIES:{INTEGER:"Health check retries must be an integer",MIN:"Health check retries must be at least 1",MAX:"Health check retries cannot exceed 10"},START_PERIOD:{INTEGER:"Health check start period must be an integer",MIN:"Health check start period must be at least 0 seconds",MAX:"Health check start period cannot exceed 300 seconds"}},EPHEMERAL_STORAGE:{INTEGER:"Ephemeral storage size must be an integer",MIN:"Ephemeral storage size must be at least 512 MB",MAX:"Ephemeral storage size cannot exceed 10240 MB"},MAX_MESSAGE_SIZE:{INTEGER:"Max message size must be an integer",MIN:"Max message size must be at least 1024 bytes",MAX:"Max message size cannot exceed 262144 bytes (256 KB)"},CAPACITY_CONSTRAINT:{MIN_LTE_MAX:"minCapacity must be less than or equal to maxCapacity"},DIRECT_ACCESS:{NO_DOMAIN:"directAccess cannot be used with domain (no ALB for HTTPS)",NO_LOAD_BALANCER:"directAccess cannot be used with loadBalancer (mutually exclusive)"},GLOBAL_AURORA:{PRIMARY_REGION_REQUIRED:"primaryRegion is required for GlobalAurora databases"},NAT_GATEWAY:{INTEGER:"NAT gateway count must be an integer",MIN:"NAT gateway count must be at least 0",MAX:"NAT gateway count cannot exceed 3"},CIDR_MASK:{INTEGER:"CIDR mask must be an integer",MIN:"CIDR mask must be at least 16",MAX:"CIDR mask cannot exceed 28"},CPU:{INTEGER:"CPU must be an integer",MIN:"CPU must be at least 256 units",MAX:"CPU cannot exceed 4096 units"},KMS:{KEY_REQUIRED:"KMS key ARN is required when using KMS encryption"},READER_INSTANCES:{MAX:"Cannot have more than 15 reader instances",COUNT_OR_INSTANCES:"Cannot specify both 'count' and 'instances' - use one or the other"},GENERATOR_CAPACITY:{MIN:{MIN:"Minimum capacity must be at least 1",MAX:"Minimum capacity cannot exceed 1000"},MAX:{MIN:"Maximum capacity must be at least 1",MAX:"Maximum capacity cannot exceed 1000"}},INSTANCE_TYPE:"Unknown instance type. Common types include: t4g.micro, t4g.small, m5.large",ARCHITECTURE_MISMATCH:"Architecture mismatch between instance type and AMI",ALLOCATED_STORAGE:{INTEGER:"Allocated storage must be an integer",MIN:"Allocated storage must be at least 20 GB",MAX:"Allocated storage cannot exceed 65536 GB"},DLQ:{MAX_RECEIVE_COUNT:{INTEGER:"Max receive count must be an integer",MIN:"Max receive count must be at least 1",MAX:"Max receive count cannot exceed 1000"}},ALARM:{PERCENTAGE:{MIN:"Threshold must be at least 1%",MAX:"Threshold must be at most 100%"},FREE_STORAGE_GIB:{MIN:"Free storage threshold must be at least 1 GiB"}},REGION:"Invalid AWS region",PASCAL_CASE:"Resource name must start with an uppercase letter and contain only alphanumerics (PascalCase).",IMAGE_DOCKER_MUTEX:"image and docker are mutually exclusive",AWS_ACCOUNT_ID:"AWS account id must be exactly 12 digits (no hyphens)",VPC_ID:"VPC id must look like vpc-abc12345",ROLE_ARN:"Role ARN must have the form arn:aws:iam::<account-id>:role/<name>",CIDR:"CIDR must be in dotted-quad/prefix-length form (e.g. 10.0.0.0/16)",VPC_PEER:{MIN_REQUESTER_ACCOUNTS:"At least one requester account id is required",REGION_REQUIRED:"Peer region is required when specified",ROUTE_TABLE_ID_REQUIRED:"Route table id must not be empty"},SCHEDULE_EXPRESSION:"Schedule expression must be 'rate(N minute|minutes|hour|hours|day|days)' with N>=1, or 'cron(<6-field AWS expression>)'"});var EP=Object.defineProperty,He=(e,t)=>EP(e,"name",{value:t,configurable:!0}),AP=["us-east-2","us-west-2","us-east-1","eu-west-1","eu-central-1","ap-southeast-1"],xP=Object.freeze(AP.flatMap(e=>{let t=jr(e);return t?[t]:[]})),Bf=Object.freeze(["us-east-2","us-west-2","us-east-1","eu-west-1","ap-southeast-1"]);function Ds(e){return e?e.split(",").map(t=>t.trim()).filter(Boolean):[]}He(Ds,"parseRegionList");function Gf(e){return xt.includes(e)}He(Gf,"isValidRegion");function Wf(e){return/^[a-z]{2}-[a-z]+-[1-9]$/.test(e)}He(Wf,"isValidRegionFormat");function Kf(e){if(!e)return Bf.slice(0,3);let t=e.toLowerCase().split("-"),n=t[0],o=t.length>1?t[1]:"",r=[];return n&&o&&(r=xt.filter(i=>i.startsWith(`${n}-${o}`))),r.length===0&&n&&(r=xt.filter(i=>i.startsWith(`${n}-`))),r.length>0?r.slice(0,3):Bf.slice(0,3)}He(Kf,"getSuggestions");function Hf(e){if(Gf(e))return!0;let t=Kf(e);return Wf(e)?`Unknown region. Try: ${t.join(", ")}`:`Invalid format. Try: ${t.join(", ")}`}He(Hf,"validateRegion");function u_(e){if(!e||e.trim()==="")return!0;let t=Ds(e);for(let n of t){let o=Hf(n);if(o!==!0)return o}return!0}He(u_,"validateRegionList");function Xf(e,t){return e.filter(n=>n!==t)}He(Xf,"filterDuplicateRegions");function Yf(e){return{label:e.city,value:e.code,description:e.optIn?`${e.code} \u2014 opt-in required`:e.code}}He(Yf,"toRegionOption");function l_(){return We.map(Yf)}He(l_,"getRegionOptions");function d_(e){return We.filter(t=>t.code!==e).map(Yf)}He(d_,"getRegionOptionsExcluding");function m_(e){let t=We.find(n=>n.code===e);return t?t.city:e}He(m_,"getRegionName");function p_(e){return t=>{let n=Ds(t);return Xf(n,e)}}He(p_,"createRegionFormatter");var ws="4.0.0";var zs=["Aurora","Instance","GlobalAurora","ClickHouse"],An=["FARGATE","FARGATE_SPOT","EC2"],at=["standard","resilient","enterprise"],Ms=["tinkerer","lightweight","standard","resilient","enterprise"],Jf="custom",Bo=[...Ms,Jf];var $P=Object.defineProperty,IP=(e,t)=>$P(e,"name",{value:t,configurable:!0}),xj=Object.freeze({RESOURCE_SUFFIXES:Object.freeze({storage:"Storage",database:"Database",cluster:"Cluster",function:"Function",instance:"Instance",compute:"Compute"})}),Go=["ecs","lambda","ec2"],xn=Object.freeze({ECS:"ecs",LAMBDA:"lambda",EC2:"ec2"}),js=["code","container"],Wo=Object.freeze({CODE:"code",CONTAINER:"container"}),Us=["ARM_64","X86_64"],f_="ARM_64",Ko=["NONE","AWS_IAM"],Ls=["public","internal"],Fs=["CPU","MEMORY"],Zs=["ARM","STANDARD"],qf=["Instance","Aurora"],$n=["postgresql","mysql"],g_=["foundation","compliance","hardened"];var Vs=["t3.nano","t3.micro","t3.small","t3.medium","t3.large","t3.xlarge","t3.2xlarge","t3a.nano","t3a.micro","t3a.small","t3a.medium","t3a.large","t3a.xlarge","t3a.2xlarge","t4g.nano","t4g.micro","t4g.small","t4g.medium","t4g.large","t4g.xlarge","t4g.2xlarge","c5.large","c5.xlarge","c5.2xlarge","c5.4xlarge","c5.9xlarge","c5.12xlarge","c5.18xlarge","c5.24xlarge","c5a.large","c5a.xlarge","c5a.2xlarge","c5a.4xlarge","c5a.8xlarge","c5a.12xlarge","c5a.16xlarge","c5a.24xlarge","c6g.medium","c6g.large","c6g.xlarge","c6g.2xlarge","c6g.4xlarge","c6g.8xlarge","c6g.12xlarge","c6g.16xlarge","r5.large","r5.xlarge","r5.2xlarge","r5.4xlarge","r5.8xlarge","r5.12xlarge","r5.16xlarge","r5.24xlarge","r5a.large","r5a.xlarge","r5a.2xlarge","r5a.4xlarge","r5a.8xlarge","r5a.12xlarge","r5a.16xlarge","r5a.24xlarge","r6g.medium","r6g.large","r6g.xlarge","r6g.2xlarge","r6g.4xlarge","r6g.8xlarge","r6g.12xlarge","r6g.16xlarge","i3.large","i3.xlarge","i3.2xlarge","i3.4xlarge","i3.8xlarge","i3.16xlarge","p3.2xlarge","p3.8xlarge","p3.16xlarge","g4dn.xlarge","g4dn.2xlarge","g4dn.4xlarge","g4dn.8xlarge","g4dn.12xlarge","g4dn.16xlarge","m5.large","m5.xlarge","m5.2xlarge","m5.4xlarge","m5.8xlarge","m5.12xlarge","m5.16xlarge","m5.24xlarge","m5a.large","m5a.xlarge","m5a.2xlarge","m5a.4xlarge","m5a.8xlarge","m5a.12xlarge","m5a.16xlarge","m5a.24xlarge"],v_=[0,1,5,10,15,30,60];function Xe(e,t){return e.includes(t)}IP(Xe,"constIncludes");var h_=1,y_=65535,Rj=Object.freeze({postgresql:5432,mysql:3306}),b_=128,S_=10240,Bs=1,Gs=900,Qf=1,eg=1e3,In=100,__=100;var E_=3e3;var A_=["GET","POST","PUT","DELETE","HEAD","OPTIONS","PATCH"],x_=["standard","assets","upload","website"],Tn=["AES256","KMS"];var TP=Object.defineProperty,Ho=(e,t)=>TP(e,"name",{value:t,configurable:!0}),we=Ho(e=>s.union([s.literal(!1),e]),"optionalOrDisabled"),br={check:Ho(e=>e.minCapacity!==void 0&&e.maxCapacity!==void 0?e.minCapacity<=e.maxCapacity:!0,"check"),params:{message:d.CAPACITY_CONSTRAINT.MIN_LTE_MAX,path:["maxCapacity"]}},Xo=Ho(e=>s.number().int(d.MEMORY_LIMIT.INTEGER).min(e,e===128?d.MEMORY_LIMIT.MIN_128:d.MEMORY_LIMIT.MIN_512).max(30720,d.MEMORY_LIMIT.MAX),"memoryLimitMiBSchema"),U=s.string().min(1,d.REQUIRED.RESOURCE_NAME).max(63,d.MAX_LENGTH.RESOURCE_NAME).regex(z.RESOURCE_NAME,d.RESOURCE_NAME),I_=s.string().min(1,d.REQUIRED.BUCKET_NAME).max(63,d.MAX_LENGTH.BUCKET_NAME).regex(z.BUCKET_NAME,d.BUCKET_NAME),T_=s.string().min(1,d.REQUIRED.DATABASE_NAME).max(63,d.MAX_LENGTH.DATABASE_NAME).regex(z.DATABASE_NAME,d.DATABASE_NAME);function Ws(e,t=z.IDENTIFIER,n=d.IDENTIFIER){return s.string().min(2,d.IDENTIFIER_MIN_LENGTH).max(50,e).regex(t,n).refine(o=>!o.endsWith("-"),{message:d.IDENTIFIER_NO_TRAILING_HYPHEN}).refine(o=>!o.includes("--"),{message:d.IDENTIFIER_NO_CONSECUTIVE_HYPHENS})}Ho(Ws,"identifierSchema");var le=Ws(d.MAX_LENGTH.APP_NAME),zj=Ws(d.MAX_LENGTH.APP_NAME,z.NEW_APP_NAME,d.NEW_APP_NAME),Sr=s.number().int(d.PORT.INTEGER).min(h_,d.PORT.MIN).max(y_,d.PORT.MAX),ye=s.object({key:s.string(),sourceText:s.string()}).strict(),NP=s.object({__identifier:s.string()}).strict(),RP=s.object({__expression:s.string()}).strict(),PP=s.object({__call:s.string()}).strict(),kP=s.union([NP,RP,PP]),CP=s.union([s.string(),s.number(),s.boolean(),kP]),Nn=s.record(s.string().regex(z.ENV_VAR_NAME,d.ENV_VAR_NAME),CP),OP=s.object({id:s.string(),name:s.string().optional(),arn:s.string().optional(),field:s.string().optional()}).strict().refine(e=>e.name!==void 0!=(e.arn!==void 0),{message:"secretsImport requires exactly one of `name` or `arn`."}),N_=s.record(s.string(),OP),Mj=s.record(s.string(),s.unknown()),tg=s.enum(Bo).describe(`Application type must be one of: ${Bo.join(", ")}`),rg=s.enum(ft).describe(`OpenNext deployment pattern: ${ft.join(", ")}`),DP=s.enum(["before-imports","after-imports","after-app-init","after-tags","after-resource","end-of-file"]),wP=s.enum(["import","app-init","tags","database","compute","storage","network","messaging","cdn","pattern","vpc-peer","vpc-peer-accepter","cross-plan-connection","custom"]),R_=s.object({sourceText:s.string(),position:DP,afterManagedResource:s.object({type:wP,name:s.string().optional()}).strict().optional(),originalLine:s.number().int().optional(),leadingComments:s.array(s.string()).optional(),orphaned:s.boolean().optional(),orphanedComment:s.string().optional()}).strict(),P_=s.union([s.object({tier:s.enum(at)}).strict(),s.literal(!1)]),k_=s.union([s.object({instanceType:s.string().optional()}).strict(),s.literal(!1)]),zP=Ws(d.MAX_LENGTH.ORGANISATION_NAME),MP=s.string().regex(z.EMAIL,d.EMAIL),$_=s.string().refine(e=>xt.includes(e),{message:d.REGION}),jj=s.object({name:zP,email:MP,accountName:s.string().optional(),primaryRegion:$_.optional().default(Mr),secondaryRegions:s.array($_).optional(),security:s.enum(g_).optional(),force:s.boolean().optional()}).strict();function Yo(e){return e.issues.map(t=>`${t.path.length>0?`${t.path.join(".")}: `:""}${t.message}`).join(`
-`)}Ho(Yo,"getZodErrorMessage");var Rn=s.number().min(1,d.ALARM.PERCENTAGE.MIN).max(100,d.ALARM.PERCENTAGE.MAX),jP=s.number().min(1,d.ALARM.FREE_STORAGE_GIB.MIN),C_=s.union([s.literal(!1),s.object({cpuThreshold:Rn.optional(),memoryThreshold:Rn.optional(),runningTasksMinimum:s.number().int().min(0).optional(),http5xxThreshold:Rn.optional()}).strict()]),O_=s.union([s.literal(!1),s.object({cpuThreshold:Rn.optional(),freeStorageThresholdGiB:jP.optional(),connectionsThreshold:s.number().int().min(1).optional()}).strict()]),D_=s.union([s.literal(!1),s.object({errorRateThreshold:Rn.optional(),durationThresholdPercent:Rn.optional()}).strict()]);var Rt=s.number().int(d.BACKUP_RETENTION.INTEGER).min(1,d.BACKUP_RETENTION.MIN).max(35,d.BACKUP_RETENTION.MAX),Jo=s.number().int(d.MONITORING_INTERVAL.INTEGER).refine(e=>Xe(v_,e),{message:d.MONITORING_INTERVAL.VALUES}),Hs=s.number().int(d.DATABASE.PORT.INTEGER).min(1024,d.DATABASE.PORT.MIN).max(65535,d.DATABASE.PORT.MAX),UP=s.enum(zs).describe(`Database type must be one of: ${zs.join(", ")}`),LP=s.object({maxConnections:s.number().int(d.MAX_CONNECTIONS.INTEGER).min(1,d.MAX_CONNECTIONS.MIN).max(100,d.MAX_CONNECTIONS.MAX).optional(),maxIdleConnections:s.number().int(d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.INTEGER).min(0,d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MIN).max(100,d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MAX).optional(),connectionBorrowTimeout:s.number().int(d.PROXY_CONFIG.BORROW_TIMEOUT.INTEGER).min(1,d.PROXY_CONFIG.BORROW_TIMEOUT.MIN).max(3600,d.PROXY_CONFIG.BORROW_TIMEOUT.MAX).optional(),requireTLS:s.boolean().optional()}).strict().describe("RDS Proxy configuration"),FP=s.object({instanceType:s.string().optional(),availabilityZone:s.string().optional()}).strict().describe("Read replica configuration"),ZP=s.object({automaticallyAfterDays:s.number().int(d.ROTATION.INTEGER).min(1,d.ROTATION.MIN).max(365,d.ROTATION.MAX).optional()}).strict().describe("Secret rotation configuration"),Xs=s.object({username:s.string().min(1,d.REQUIRED.USERNAME).max(63,d.USERNAME.MAX_LENGTH).optional(),secretRotation:ZP.optional()}).strict().describe("Database credentials configuration"),Ys=we(LP),Js=we(FP),VP=s.object({scaleWithWriter:s.boolean().optional(),enableDatabaseInsights:s.boolean().optional(),identifierSuffix:s.string().min(1,d.IDENTIFIER_SUFFIX.REQUIRED).max(50,d.IDENTIFIER_SUFFIX.MAX_LENGTH).optional(),availabilityZone:s.string().optional()}).strict().describe("Configuration for a single Aurora reader instance"),qo=s.object({enableDatabaseInsights:s.boolean().optional(),identifierSuffix:s.string().min(1,d.IDENTIFIER_SUFFIX.REQUIRED).max(50,d.IDENTIFIER_SUFFIX.MAX_LENGTH).optional(),availabilityZone:s.string().optional()}).strict().describe("Configuration for Aurora writer instance"),BP=s.object({count:s.number().int(d.READER.COUNT.INTEGER).min(0,d.READER.COUNT.MIN).max(15,d.READER.COUNT.MAX).optional(),instances:s.array(VP).max(15,d.READER_INSTANCES.MAX).optional(),defaultEnableDatabaseInsights:s.boolean().optional()}).strict().refine(e=>!(e.count!==void 0&&e.instances!==void 0),{message:d.READER_INSTANCES.COUNT_OR_INSTANCES,path:["count"]}).describe("Aurora readers configuration"),Qo=we(BP),GP=s.object({awsManaged:s.literal(!0)}).strict(),WP=s.object({useCMK:s.literal(!0)}).strict(),w_=s.union([GP,WP]),KP=s.object({mode:s.enum(["standard","advanced"]).optional(),encryptionKey:w_.optional()}).strict().describe("Database Insights configuration"),qs=we(KP),Qs=s.object({storageKey:w_.optional()}).strict().describe("Encryption configuration (DESTRUCTIVE to change storageKey)"),z_=s.object({name:U,type:UP,databaseName:s.string().min(1,d.REQUIRED.DATABASE_NAME),instanceType:s.string().optional(),allocatedStorage:s.number().optional(),multiAz:s.boolean().optional(),publiclyAccessible:s.boolean().optional(),databaseInsights:qs.optional(),port:Hs.optional(),deletionProtection:s.boolean().optional(),proxy:Ys.optional(),credentials:Xs.optional(),readReplica:Js.optional(),encryption:Qs.optional(),writer:qo.optional(),readers:Qo.optional(),backupRetention:Rt.optional(),preferredMaintenanceWindow:s.string().optional(),monitoringInterval:Jo.optional(),primaryRegion:s.string().optional(),secondaryRegions:s.array(s.string()).optional(),globalClusterIdentifier:s.string().optional(),enableGlobalWriteForwarding:s.boolean().optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional(),databaseEngine:s.enum($n).optional(),engineExpression:s.string().optional(),variableName:s.string().optional(),extraProperties:s.array(ye).optional(),alarms:O_.optional()}).strict(),ec=s.object({appName:le,nameProvidedByFlag:s.boolean().optional(),databaseName:s.string().min(1,d.REQUIRED.DATABASE_NAME).max(63,d.MAX_LENGTH.DATABASE_NAME).regex(z.DATABASE_NAME,d.DATABASE_NAME),resourceName:U.optional(),connectionConfig:s.object({connectToCompute:s.array(s.string()).optional(),connectToServices:s.array(s.string()).optional()}).strict().optional(),databaseInsights:qs.optional(),port:Hs.optional(),proxy:Ys.optional(),credentials:Xs.optional(),encryption:Qs.optional(),deletionProtection:s.boolean().optional()}).strict(),M_={databaseType:s.literal("Instance"),instanceType:s.string().optional(),multiAz:s.boolean().optional(),readReplica:Js.optional(),publiclyAccessible:s.boolean().optional(),backupRetention:Rt.optional(),allocatedStorage:s.number().optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()},j_={databaseType:s.literal("Aurora"),writer:qo.optional(),readers:Qo.optional(),backupRetention:Rt.optional(),preferredMaintenanceWindow:s.string().optional(),monitoringInterval:Jo.optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()},U_={databaseType:s.literal("GlobalAurora"),primaryRegion:s.string().min(1,d.GLOBAL_AURORA.PRIMARY_REGION_REQUIRED),secondaryRegions:s.array(s.string()).optional(),globalClusterIdentifier:s.string().optional(),enableGlobalWriteForwarding:s.boolean().optional(),writer:qo.optional(),readers:Qo.optional(),backupRetention:Rt.optional(),preferredMaintenanceWindow:s.string().optional(),monitoringInterval:Jo.optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()},L_=s.object({appName:le,nameProvidedByFlag:s.boolean().optional(),databaseName:s.string().min(1,d.REQUIRED.DATABASE_NAME).max(63,d.MAX_LENGTH.DATABASE_NAME).regex(z.DATABASE_NAME,d.DATABASE_NAME),resourceName:U.optional(),connectionConfig:s.object({connectToCompute:s.array(s.string()).optional(),connectToServices:s.array(s.string()).optional()}).strict().optional()}).strict(),F_={databaseType:s.literal("ClickHouse"),instanceType:s.string().optional(),coldTier:s.union([s.object({mode:s.literal("s3")}).strict(),s.literal(!1)]).optional(),optimiseSchedule:s.union([s.string(),s.literal(!1)]).optional(),backupSchedule:s.union([s.string(),s.literal(!1)]).optional(),backupRetentionDays:Rt.optional()},HP=ec.extend(M_).strict(),XP=ec.extend(j_).strict(),YP=ec.extend(U_).strict(),JP=L_.extend(F_).strict(),Hj=s.discriminatedUnion("databaseType",[HP,XP,YP,JP]),ng=ec.extend({resourceName:U}).strict(),qP=ng.extend(M_).strict(),QP=ng.extend(j_).strict(),ek=ng.extend(U_).strict(),tk=L_.extend({resourceName:U}).strict(),rk=tk.extend(F_).strict(),Xj=s.discriminatedUnion("databaseType",[qP,QP,ek,rk]),Yj=s.object({appName:le,databaseName:s.string().min(1,d.REQUIRED.DATABASE_NAME),maxConnections:s.number().int(d.MAX_CONNECTIONS.INTEGER).min(1,d.MAX_CONNECTIONS.MIN).max(100,d.MAX_CONNECTIONS.MAX).optional(),maxIdleConnections:s.number().int(d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.INTEGER).min(0,d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MIN).max(100,d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MAX).optional(),connectionBorrowTimeout:s.number().int(d.PROXY_CONFIG.BORROW_TIMEOUT.INTEGER).min(1,d.PROXY_CONFIG.BORROW_TIMEOUT.MIN).max(3600,d.PROXY_CONFIG.BORROW_TIMEOUT.MAX).optional(),requireTLS:s.boolean().optional(),nameProvidedByFlag:s.boolean().optional()}).strict(),nk=["S","N","B"],Ks=s.object({name:s.string(),type:s.enum(nk)}).strict(),Z_=s.object({name:U,partitionKey:Ks,sortKey:Ks.optional(),globalSecondaryIndexes:s.array(s.object({indexName:s.string(),partitionKey:Ks,sortKey:Ks.optional()}).strict()).optional(),ttlAttribute:s.string().optional(),stream:s.boolean().optional(),variableName:s.string().optional(),extraProperties:s.array(ye).optional()}).strict(),ok=s.object({mode:s.literal("s3")}).strict(),V_=s.object({name:U,type:s.literal("ClickHouse"),databaseName:T_,instanceType:s.string().optional(),coldTier:s.union([ok,s.literal(!1)]).optional(),optimiseSchedule:s.union([s.string(),s.literal(!1)]).optional(),backupSchedule:s.union([s.string(),s.literal(!1)]).optional(),backupRetentionDays:Rt.optional(),variableName:s.string().optional(),extraProperties:s.array(ye).optional()}).strict();var ik=s.object({count:s.number().int(d.NAT_GATEWAY.INTEGER).min(0,d.NAT_GATEWAY.MIN).max(3,d.NAT_GATEWAY.MAX).optional()}).strict().describe("NAT gateway configuration"),B_=we(ik),og=s.enum(["cloudwatch","s3"]),ak=s.object({destination:og.optional(),retentionDays:s.number().int(d.RETENTION_DAYS.INTEGER).min(1,d.RETENTION_DAYS.MIN).max(365,d.RETENTION_DAYS.MAX).optional(),trafficType:s.enum(["ALL","ACCEPT","REJECT"]).optional()}).strict().describe("VPC flow log configuration"),G_=we(ak),sk=s.object({s3:s.boolean().optional(),dynamodb:s.boolean().optional()}).strict().describe("Gateway VPC endpoints (FREE)"),ck=we(sk),uk=s.object({ecr:s.boolean().optional(),secretsManager:s.boolean().optional(),kms:s.boolean().optional(),cloudwatchLogs:s.boolean().optional(),ssm:s.boolean().optional(),sts:s.boolean().optional()}).strict().describe("Interface VPC endpoints (cost per hour)"),lk=we(uk),dk=s.object({gateway:ck.optional(),interface:lk.optional()}).strict().describe("VPC endpoints configuration"),W_=we(dk),tc=s.object({maxAzs:s.number().int(d.MAX_AZS.INTEGER).min(1,d.MAX_AZS.MIN).max(3,d.MAX_AZS.MAX).optional(),natGateways:B_.optional(),flowLogs:G_.optional(),vpcEndpoints:W_.optional(),cidrMask:s.number().int(d.CIDR_MASK.INTEGER).min(16,d.CIDR_MASK.MIN).max(28,d.CIDR_MASK.MAX).optional()}).strict(),K_=s.string().min(1,d.REQUIRED.NETWORK_NAME).max(50,d.MAX_LENGTH.NETWORK_NAME).regex(z.RESOURCE_NAME,d.RESOURCE_NAME),H_=tc.extend({name:K_}).strict(),X_=we(tc),tU=s.object({appName:le,networkName:K_.optional(),maxAzs:s.number().int(d.MAX_AZS.INTEGER).min(1,d.MAX_AZS.MIN).max(3,d.MAX_AZS.MAX).optional(),natGateways:B_.optional(),flowLogs:G_.optional(),vpcEndpoints:W_.optional()}).strict(),mk=z.CIDR,ig=s.string().regex(mk,d.CIDR),pk=s.object({kind:s.literal("database"),resource:s.string().min(1,d.REQUIRED.RESOURCE_REFERENCE),name:U,allowedFromCidrs:s.array(ig),access:s.enum(["read","write","readWrite"]).optional()}).strict(),fk=s.object({kind:s.literal("ecsService"),resource:s.string().min(1,d.REQUIRED.RESOURCE_REFERENCE),serviceName:s.string().min(1,d.REQUIRED.SERVICE_NAME),name:U,allowedFromCidrs:s.array(ig),port:Sr.optional()}).strict(),gk=s.discriminatedUnion("kind",[pk,fk]),rU=s.object({name:U,peerAppName:s.string().min(1,d.REQUIRED.APP_NAME),peerAccountId:s.string().regex(z.AWS_ACCOUNT_ID,d.AWS_ACCOUNT_ID),peerRegion:s.string().min(1,d.VPC_PEER.REGION_REQUIRED).optional(),peerVpcId:s.string().regex(z.VPC_ID,d.VPC_ID).optional(),peerVpcCidr:ig.optional(),peerRoleArn:s.string().regex(z.ROLE_ARN,d.ROLE_ARN).optional(),peerRouteTableIds:s.array(s.string().min(1,d.VPC_PEER.ROUTE_TABLE_ID_REQUIRED)).optional(),localVpcName:s.string().min(1,d.REQUIRED.NETWORK_NAME).optional(),enableDnsResolution:s.boolean().optional()}).strict(),nU=s.object({name:U,requesterAccountIds:s.array(s.string().regex(z.AWS_ACCOUNT_ID,d.AWS_ACCOUNT_ID)).min(1,d.VPC_PEER.MIN_REQUESTER_ACCOUNTS),localVpcName:s.string().min(1,d.REQUIRED.NETWORK_NAME).optional(),publishToSsm:s.boolean().optional(),exposedResources:s.array(gk).optional()}).strict();var rc=["storage","cdn","compute"],vk=s.object({sid:s.string().optional(),effect:s.enum(["Allow","Deny"]),principals:s.array(s.string()),actions:s.array(s.string()),resources:s.array(s.string()).optional(),conditions:s.record(s.string(),s.record(s.string(),s.union([s.string(),s.array(s.string())]))).optional()}).strict(),Y_=s.object({name:U,bucketName:s.string().optional(),publicReadAccess:s.boolean().optional(),websiteHosting:s.object({indexDocument:s.string(),errorDocument:s.string().optional()}).strict().optional(),backupVaultTier:s.enum(at).optional(),versioned:s.boolean().optional(),encryption:s.enum(Tn).optional(),kmsKeyArn:s.string().optional(),cors:s.array(s.object({allowedOrigins:s.array(s.string()),allowedMethods:s.array(s.string()),allowedHeaders:s.array(s.string()).optional(),exposedHeaders:s.array(s.string()).optional(),maxAge:s.number().optional()}).strict()).optional(),deployment:s.object({source:s.string(),prune:s.boolean().optional(),cacheControl:s.object({maxAge:s.number().optional(),immutable:s.boolean().optional()}).strict().optional()}).strict().optional(),retain:s.boolean().optional(),resourcePolicyStatements:s.array(vk).optional(),stackPlacement:s.enum(rc).optional(),variableName:s.string().optional(),extraProperties:s.array(ye).optional()}).strict().refine(e=>e.encryption!=="KMS"||!!e.kmsKeyArn,{message:d.KMS.KEY_REQUIRED}),uU=s.object({appName:le,bucketName:I_,nameProvidedByFlag:s.boolean().optional(),storagePreset:s.enum(x_).optional(),publicReadAccess:s.boolean().optional(),websiteHosting:s.object({indexDocument:s.string(),errorDocument:s.string().optional()}).strict().optional(),backupVaultTier:s.enum(at).optional(),versioned:s.boolean().optional(),encryption:s.enum(Tn).optional(),kmsKeyArn:s.string().optional(),cors:s.array(s.object({allowedOrigins:s.array(s.string()),allowedMethods:s.array(s.string()),allowedHeaders:s.array(s.string()).optional(),exposedHeaders:s.array(s.string()).optional(),maxAge:s.number().optional()}).strict()).optional(),connectionConfig:s.object({connectToCompute:s.array(s.string()).optional(),connectToServices:s.array(s.string()).optional()}).strict().optional()}).strict().refine(e=>e.encryption!=="KMS"||!!e.kmsKeyArn,{message:d.KMS.KEY_REQUIRED,path:["kmsKeyArn"]});var ag=s.enum(["DESTROY","RETAIN"]),J_=s.object({name:U,queueType:s.enum(["standard","fifo"]).default("standard"),visibilityTimeout:s.number().int(d.SQS.VISIBILITY_TIMEOUT.INTEGER).min(0,d.SQS.VISIBILITY_TIMEOUT.MIN).max(43200,d.SQS.VISIBILITY_TIMEOUT.MAX).optional(),retentionPeriod:s.number().int(d.SQS.RETENTION_PERIOD.INTEGER).min(60,d.SQS.RETENTION_PERIOD.MIN).max(1209600,d.SQS.RETENTION_PERIOD.MAX).optional(),contentBasedDeduplication:s.boolean().optional(),removalPolicy:ag.optional(),variableName:s.string().optional(),extraProperties:s.array(ye).optional()}).strict();var q_=s.object({type:s.literal("basic-auth"),username:s.string().min(1),password:s.string().min(1)}).strict(),Q_=s.object({name:U,defaultOriginRef:s.string(),behaviours:s.array(s.object({pathPattern:s.string(),originRef:s.string(),cachePolicy:s.enum(["CACHING_OPTIMIZED","CACHING_DISABLED"]).optional()}).strict()).optional(),customDomain:s.string().optional(),certificateArn:s.string().optional(),accessGate:s.union([s.literal(!1),q_]).optional(),extraProperties:s.array(ye).optional()}).strict(),hU=s.object({appName:s.string(),name:U.optional(),defaultOriginRef:s.string(),behaviours:s.array(s.object({pathPattern:s.string(),originRef:s.string(),cachePolicy:s.enum(["CACHING_OPTIMIZED","CACHING_DISABLED"]).optional()}).strict()).optional(),customDomain:s.string().optional(),certificateArn:s.string().optional(),accessGate:s.union([s.literal(!1),q_]).optional(),nameProvidedByFlag:s.boolean().optional()}).strict();var hk=Object.defineProperty,sg=(e,t)=>hk(e,"name",{value:t,configurable:!0}),yk=new Set(["t4g","c6g","c6gd","c6gn","c7g","c7gd","c7gn","r6g","r6gd","r7g","r7gd","m6g","m6gd","m7g","m7gd","a1","x2gd","im4gn","is4gen","i4g","hpc7g"]);function Pn(e){let t=e.split(".")[0]??"";return yk.has(t)?"ARM":"STANDARD"}sg(Pn,"getArchitectureForInstanceType");function nc(e,t){let n=Pn(e);return n!==t?{valid:!1,message:`Instance type '${e}' requires ${n} architecture, but '${t}' AMI was specified. Use a ${n==="ARM"?"Graviton instance (t4g, c6g, r6g, m6g, etc.)":"Intel/AMD instance (t3, c5, r5, m5, etc.)"} instead.`}:{valid:!0}}sg(nc,"validateArchitectureMatch");function eE(e,t){return Pn(e)===t}sg(eE,"isArchitectureCompatible");var bk=Object.defineProperty,oc=(e,t)=>bk(e,"name",{value:t,configurable:!0});var Sk=1,_k=/^[A-Za-z0-9_.-]+$/,Ek=s.object({id:s.string().min(1,"buildSecret id cannot be empty").regex(_k,"buildSecret id may contain only letters, digits, '_', '.', and '-' (no comma, '=', or whitespace, which would break the buildx --secret argv)"),ssm:s.string().min(1,"ssm parameter name cannot be empty").optional(),secretsManager:s.object({name:s.string().min(1,"secret name cannot be empty").optional(),arn:s.string().min(1,"secret arn cannot be empty").optional(),field:s.string().min(1,"secret field cannot be empty").optional()}).strict().refine(e=>e.name===void 0!=(e.arn===void 0),"secretsManager requires exactly one of name or arn").optional(),env:s.string().min(1,"env variable name cannot be empty").optional()}).strict().superRefine((e,t)=>{[e.ssm,e.secretsManager,e.env].filter(n=>n!==void 0).length!==1&&t.addIssue({code:s.ZodIssueCode.custom,message:"buildSecret requires exactly one source (ssm, secretsManager, or env)"})}),Ak=s.union([s.string(),s.object({ssm:s.string().min(1,"ssm parameter name cannot be empty").optional(),secretsManager:s.object({name:s.string().min(1,"secret name cannot be empty").optional(),arn:s.string().min(1,"secret arn cannot be empty").optional(),field:s.string().min(1,"secret field cannot be empty").optional()}).strict().refine(e=>e.name===void 0!=(e.arn===void 0),"secretsManager requires exactly one of name or arn").optional(),env:s.string().min(1,"env variable name cannot be empty").optional(),acknowledgePublic:s.boolean().optional()}).strict().superRefine((e,t)=>{[e.ssm,e.secretsManager,e.env].filter(n=>n!==void 0).length!==1&&t.addIssue({code:s.ZodIssueCode.custom,message:"buildArg value requires exactly one source (ssm, secretsManager, or env)"})})]),gt=s.object({path:s.string(),context:s.string().min(1,"context cannot be empty").optional(),target:s.string().min(1,"target cannot be empty").optional(),buildArgs:s.record(s.string(),Ak).optional(),buildSecrets:s.array(Ek).optional()}).strict(),EU=gt.partial();function xk(e,t){if(t===void 0)return e;let n=t.context??e.context,o=t.target??e.target,r=t.buildArgs??e.buildArgs,i=t.buildSecrets??e.buildSecrets;return{path:t.path??e.path,...n!==void 0&&{context:n},...o!==void 0&&{target:o},...r!==void 0&&{buildArgs:r},...i!==void 0&&{buildSecrets:i}}}oc(xk,"mergeDockerBuild");function cg(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}oc(cg,"isRecord");function tE(e){if(!cg(e)||typeof e.path!="string"||e.path.length===0)return;let t=typeof e.context=="string"&&e.context.length>0?e.context:void 0,n=typeof e.target=="string"&&e.target.length>0?e.target:void 0,o=cg(e.buildArgs)&&Object.keys(e.buildArgs).length>0?e.buildArgs:void 0,r=Array.isArray(e.buildSecrets)&&e.buildSecrets.length>0?e.buildSecrets:void 0,i={path:e.path,...t!==void 0&&{context:t},...n!==void 0&&{target:n},...o!==void 0&&{buildArgs:o},...r!==void 0&&{buildSecrets:r}},a=gt.safeParse(i);return a.success?a.data:void 0}oc(tE,"normaliseDockerBuild");function $k(e){if(e===void 0)return;let t=tE(e);return t===void 0?void 0:JSON.stringify(t)}oc($k,"dockerBuildFingerprint");var Ik=s.object({name:s.string(),clusterName:s.string().optional(),docker:gt.optional(),containerPort:s.number().optional(),secrets:s.array(s.string()).optional(),ssmSecretsPath:s.string().optional(),importedSecretNames:s.array(s.string()).optional()}).strict(),Tk=s.object({type:s.enum(ft),name:s.string(),source:s.string()}).strict(),Nk=s.object({repositoryName:s.string()}).strict(),Rk=["x86_64","arm64"],Pk=s.object({name:s.string(),secrets:s.array(s.string()).optional(),ssmSecretsPath:s.string().optional(),importedSecretNames:s.array(s.string()).optional(),docker:gt.optional(),imageKey:s.string().optional(),architecture:s.enum(Rk).optional()}).strict(),kk=s.object({templateHash:s.string(),synthTimestamp:s.string()}).strict(),Ck=s.object({constructPath:s.string().max(512),group:s.string().max(128),resourceType:s.string().max(256)}).strict(),AU=s.object({version:s.literal(Sk),generatedAt:s.string(),appName:s.string(),services:s.array(Ik),lambdas:s.array(Pk),pattern:Tk.optional(),ecr:Nk.optional(),stacks:s.record(s.string(),kk),resourceMap:s.record(s.string(),Ck).optional()}).strict();var Ok=Object.defineProperty,Dk=(e,t)=>Ok(e,"name",{value:t,configurable:!0});function nE(e){return!(e.image!==void 0&&e.docker!==void 0)}Dk(nE,"imageDockerMutexCheck");var oE=s.number().int(d.CAPACITY.MIN.INTEGER).min(Qf,d.GENERATOR_CAPACITY.MIN.MIN).max(eg,d.GENERATOR_CAPACITY.MIN.MAX),iE=s.number().int(d.CAPACITY.MAX.INTEGER).min(Qf,d.GENERATOR_CAPACITY.MAX.MIN).max(eg,d.GENERATOR_CAPACITY.MAX.MAX),kn=s.number().int(d.LAMBDA.MEMORY.INTEGER).min(b_,d.LAMBDA.MEMORY.MIN).max(S_,d.LAMBDA.MEMORY.MAX).refine(e=>e===128||e%64===0,d.LAMBDA.MEMORY.MULTIPLE),aE=s.string().regex(z.LAMBDA_RUNTIME_IDENTIFIER,d.LAMBDA.RUNTIME),ug=s.number().int(d.CPU.INTEGER).min(256,d.CPU.MIN).max(4096,d.CPU.MAX),ac=s.number().int(d.CAPACITY.DESIRED.INTEGER).min(0,d.CAPACITY.DESIRED.MIN).max(In,d.CAPACITY.DESIRED.MAX),ei=s.object({connectToDatabase:s.array(s.string()).optional()}).strict(),wk=s.object({minSize:s.number().int(d.CAPACITY.WARM_POOL.MIN_SIZE.INTEGER).min(0,d.CAPACITY.WARM_POOL.MIN_SIZE.MIN).max(__,d.CAPACITY.WARM_POOL.MIN_SIZE.MAX).optional(),reuseOnScaleIn:s.boolean().optional()}).strict(),lg=s.object({instanceType:s.string().optional(),amiHardwareType:s.enum(Zs).optional(),minCapacity:s.number().int(d.CAPACITY.MIN.INTEGER).min(0,d.CAPACITY.MIN.MIN_0).max(In,d.CAPACITY.MIN.MAX).optional(),maxCapacity:s.number().int(d.CAPACITY.MAX.INTEGER).min(1,d.CAPACITY.MAX.MIN_1).max(In,d.CAPACITY.MAX.MAX).optional(),memoryLimitMiB:Xo(128).optional(),warmPool:wk.optional(),extraProperties:s.array(ye).optional()}).strict().superRefine((e,t)=>{if(!e.instanceType||!e.amiHardwareType)return;let n=nc(e.instanceType,e.amiHardwareType);n.valid||t.addIssue({code:"custom",message:n.message??d.ARCHITECTURE_MISMATCH,path:["instanceType"]})}).superRefine((e,t)=>{e.minCapacity===0&&!e.warmPool&&t.addIssue({code:"custom",message:d.CAPACITY.WARM_POOL_REQUIRED,path:["minCapacity"]}),e.warmPool?.minSize!==void 0&&e.maxCapacity!==void 0&&e.warmPool.minSize>e.maxCapacity&&t.addIssue({code:"custom",message:d.CAPACITY.WARM_POOL.MIN_SIZE_EXCEEDS_MAX_CAPACITY,path:["warmPool","minSize"]})}),zk=s.enum(Go).describe(`Compute type must be one of: ${Go.join(", ")}`),dg=s.enum(An).describe(`ECS capacity provider must be one of: ${An.join(", ")}`),mg=s.string().refine(e=>Xe(Vs,e),{message:d.INSTANCE_TYPE}),sE=s.object({sourceType:s.enum(["sqs","dynamodb","eventbridge"]),sourceRef:s.string().describe("Name of the source resource"),batchSize:s.number().int(d.BATCH_SIZE.INTEGER).min(1,d.BATCH_SIZE.MIN).max(1e4,d.BATCH_SIZE.MAX).optional(),startingPosition:s.enum(["TRIM_HORIZON","LATEST"]).optional(),maxBatchingWindow:s.number().int(d.BATCHING_WINDOW.INTEGER).min(0,d.BATCHING_WINDOW.MIN).max(300,d.BATCHING_WINDOW.MAX).optional(),reportBatchItemFailures:s.boolean().optional()}).strict(),Mk=s.object({name:s.string().min(1,d.REQUIRED.CONTAINER_NAME).optional(),image:s.string().optional(),port:Sr.optional(),environment:Nn.optional(),secretsImport:N_.optional(),command:s.array(s.string()).optional(),entryPoint:s.array(s.string()).optional(),essential:s.boolean().optional(),healthCheck:s.object({command:s.array(s.string()),interval:s.number().int(d.HEALTH_CHECK.INTERVAL.INTEGER).min(5,d.HEALTH_CHECK.INTERVAL.MIN).max(300,d.HEALTH_CHECK.INTERVAL.MAX).optional(),timeout:s.number().int(d.HEALTH_CHECK.TIMEOUT.INTEGER).min(2,d.HEALTH_CHECK.TIMEOUT.MIN).max(60,d.HEALTH_CHECK.TIMEOUT.MAX).optional(),retries:s.number().int(d.HEALTH_CHECK.RETRIES.INTEGER).min(1,d.HEALTH_CHECK.RETRIES.MIN).max(10,d.HEALTH_CHECK.RETRIES.MAX).optional(),startPeriod:s.number().int(d.HEALTH_CHECK.START_PERIOD.INTEGER).min(0,d.HEALTH_CHECK.START_PERIOD.MIN).max(300,d.HEALTH_CHECK.START_PERIOD.MAX).optional()}).strict().optional(),ssmSecrets:s.array(s.string().regex(z.SECRET_NAME,d.SECRET_NAME)).optional(),extraProperties:s.array(ye).optional()}).strict(),cE=s.string().min(1,d.REQUIRED.SERVICE_NAME).max(255,d.MAX_LENGTH.SERVICE_NAME).regex(z.ECS_SERVICE_NAME,d.ECS_SERVICE_NAME),uE=s.object({domain:s.string().optional(),loadBalancer:s.union([s.literal(!1),s.enum(Ls)]).optional(),directAccess:s.boolean().optional(),extraProperties:s.array(ye).optional()}).strict().refine(e=>!(e.directAccess&&e.domain),{message:d.DIRECT_ACCESS.NO_DOMAIN,path:["directAccess"]}).refine(e=>!(e.directAccess&&typeof e.loadBalancer=="string"),{message:d.DIRECT_ACCESS.NO_LOAD_BALANCER}).describe("Cluster-level configuration"),ic=s.object({path:s.string().optional(),host:s.string().optional(),priority:s.number().int(d.PRIORITY.INTEGER).min(1,d.PRIORITY.MIN).max(5e4,d.PRIORITY.MAX).optional(),healthCheckPath:s.string().optional()}).strict().describe("Path/host-based routing configuration"),jk=s.object({desiredCount:ac.optional(),minCapacity:s.number().int(d.CAPACITY.MIN.INTEGER).min(0,d.CAPACITY.MIN.MIN_0).max(In,d.CAPACITY.MIN.MAX).optional(),maxCapacity:s.number().int(d.CAPACITY.MAX.INTEGER).min(1,d.CAPACITY.MAX.MIN_1).max(In,d.CAPACITY.MAX.MAX).optional(),scalingType:s.enum(Fs).optional()}).strict().refine(br.check,br.params).describe("ECS service scaling configuration"),lE=s.object({name:cE,docker:gt.optional(),needsDatabaseConnection:s.boolean().optional(),needsStorageConnection:s.boolean().optional(),needsMessagingConnection:s.boolean().optional(),image:s.string().optional(),containers:s.array(Mk).optional(),routing:s.union([ic,s.array(ic).min(1)]).optional(),cpu:ug.optional(),memoryLimitMiB:Xo(512).optional(),desiredCount:ac.optional(),scaling:we(jk).optional(),capacityProvider:dg,ec2Config:lg.optional(),ssmSecretsPath:s.string().regex(z.SSM_PATH,d.SSM_PATH).optional(),extraProperties:s.array(ye).optional(),alarms:C_.optional()}).strict().superRefine((e,t)=>{nE(e)||t.addIssue({code:"custom",path:["docker"],message:d.IMAGE_DOCKER_MUTEX})}).describe("Configuration for a service in an ECS cluster"),dE=s.object({name:U,type:zk,needsConnection:s.boolean(),connectedDatabase:s.array(s.string()).optional(),connectedStorage:s.array(s.string()).optional(),connectedMessaging:s.array(s.string()).optional(),cluster:uE.optional(),services:s.array(lE).optional(),docker:gt.partial().optional(),deployment:s.enum(js).optional(),codePath:s.string().optional(),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(Bs,d.LAMBDA.TIMEOUT.MIN).max(Gs,d.LAMBDA.TIMEOUT.MAX).optional(),memory:kn.optional(),handler:s.string().optional(),runtime:aE.optional(),environment:Nn.optional(),secrets:Nn.optional(),eventSources:s.array(sE).optional(),functionUrl:s.object({authType:s.enum(Ko)}).strict().optional(),description:s.string().optional(),scheduleExpression:s.string().optional(),architecture:s.enum(Us).optional(),ephemeralStorageSize:s.number().int(d.EPHEMERAL_STORAGE.INTEGER).min(512,d.EPHEMERAL_STORAGE.MIN).max(10240,d.EPHEMERAL_STORAGE.MAX).optional(),functionName:s.string().optional(),ssmSecrets:s.array(s.string()).optional(),ssmSecretsPath:s.string().optional(),alarms:D_.optional(),instanceType:mg.optional(),enableSSH:s.boolean().optional(),keyName:s.string().optional(),userData:s.string().optional(),securityGroups:s.array(s.string()).optional(),variableName:s.string().optional(),extraProperties:s.array(ye).optional()}).strict().superRefine((e,t)=>{if(e.type==="ecs"&&e.services)for(let n=0;n<e.services.length;n++){let o=e.services[n];o?.ec2Config?.instanceType&&!o.ec2Config.amiHardwareType&&Pn(o.ec2Config.instanceType)!=="ARM"&&t.addIssue({code:"custom",message:`Service '${o.name??n}' uses instance type '${o.ec2Config.instanceType}' (x86), which requires Docker images built for linux/amd64. The default build targets linux/arm64 (Graviton). Use a Graviton instance type (t4g, c6g, r6g, m6g, etc.) or set amiHardwareType: "STANDARD" to acknowledge x86.`,path:["services",n,"ec2Config","instanceType"]})}e.type==="lambda"&&e.deployment==="container"&&e.architecture==="X86_64"&&t.addIssue({code:"custom",message:"Lambda architecture 'X86_64' requires Docker images built for linux/amd64, but the default build targets linux/arm64. Use 'ARM_64' for Graviton Lambdas (recommended) or ensure your build pipeline targets linux/amd64.",path:["architecture"]})}),CU=s.object({appName:le,clusterName:U,containerPort:Sr,nameProvidedByFlag:s.boolean().optional(),ecrRepository:s.string().optional(),capacityProvider:dg.optional(),useAppEcr:s.boolean().optional(),desiredCount:ac.optional(),cpu:ug.optional(),memoryLimitMiB:Xo(512).optional(),minCapacity:oE.optional(),maxCapacity:iE.optional(),ec2Config:lg.optional(),connectionConfig:ei.optional()}).strict().refine(br.check,br.params),OU=s.object({appName:le,functionName:U,nameProvidedByFlag:s.boolean().optional(),lambdaType:s.enum(["basic","web","custom"]).optional(),ecrRepository:s.string().optional(),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(Bs,d.LAMBDA.TIMEOUT.MIN).max(Gs,d.LAMBDA.TIMEOUT.MAX).optional(),memory:kn.optional(),enableFunctionUrl:s.boolean().optional(),description:s.string().optional(),enableCors:s.boolean().optional(),corsOrigins:s.string().optional(),corsHeaders:s.string().optional(),corsMethods:s.array(s.enum(A_)).optional(),corsCredentials:s.boolean().optional(),connectionConfig:ei.optional()}).strict(),DU=s.object({appName:le,instanceName:U,nameProvidedByFlag:s.boolean().optional(),instanceType:mg.optional(),enableSSH:s.boolean().optional(),minCapacity:oE.optional(),maxCapacity:iE.optional(),connectionConfig:ei.optional()}).strict().refine(br.check,br.params),wU=s.object({appName:le,clusterName:U,serviceName:cE,capacityProvider:dg,containerPort:Sr.optional(),cpu:ug.optional(),memoryLimitMiB:Xo(512).optional(),desiredCount:ac.optional(),ec2Config:lg.optional(),routing:s.union([ic,s.array(ic).min(1)]).optional(),docker:gt.partial().optional(),nameProvidedByFlag:s.boolean().optional(),connectionConfig:ei.optional()}).strict(),pg=s.object({appName:le,computeName:U,nameProvidedByFlag:s.boolean().optional(),connectionConfig:ei.optional()}).strict(),Uk=pg.extend({type:s.literal("ecs"),cluster:uE.optional(),services:s.array(lE).min(1,d.SERVICE.MIN_REQUIRED),docker:gt.partial().optional()}).strict().refine(e=>{let t=e.services.filter(n=>n.containers?.some(o=>o.port));return t.length>1?t.every(n=>(Array.isArray(n.routing)?n.routing:n.routing?[n.routing]:[]).some(o=>o.path||o.host)):!0},{message:d.SERVICE.ROUTING_REQUIRED}).refine(e=>{let t=e.services.map(n=>n.name);return new Set(t).size===t.length},{message:d.SERVICE.UNIQUE_WITHIN_CLUSTER}),Lk=pg.extend({type:s.literal("lambda"),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(Bs,d.LAMBDA.TIMEOUT.MIN).max(Gs,d.LAMBDA.TIMEOUT.MAX).optional(),memory:kn.optional(),handler:s.string().optional(),runtime:aE.optional(),environment:Nn.optional(),secrets:Nn.optional(),description:s.string().optional(),functionUrl:s.union([s.object({authType:s.enum(Ko).optional()}).strict(),s.literal(!1)]).optional(),eventSources:s.array(sE).optional()}).strict(),Fk=pg.extend({type:s.literal("ec2"),instanceType:mg.optional(),enableSSH:s.boolean().optional(),keyName:s.string().optional(),userData:s.string().optional(),securityGroups:s.array(s.string()).optional()}).strict(),zU=s.discriminatedUnion("type",[Uk,Lk,Fk]),rE=s.object({path:s.string().min(1,d.REQUIRED.ROUTING_PATH),priority:s.number().int(d.PRIORITY.INTEGER).min(1,d.PRIORITY.MIN).max(5e4,d.PRIORITY.MAX).optional()}).strict(),mE=s.object({name:s.string().min(1,d.REQUIRED.SERVICE_NAME).max(255,d.MAX_LENGTH.SERVICE_NAME).regex(z.RESOURCE_NAME,d.RESOURCE_NAME),serviceType:s.enum(["web","worker"]).optional(),docker:gt.partial().optional(),containerPort:Sr.optional(),needsDatabaseConnection:s.boolean().optional(),routing:s.union([rE,s.array(rE).min(1)]).optional()}).strict().superRefine((e,t)=>{e.serviceType==="worker"&&(e.containerPort!==void 0&&t.addIssue({code:"custom",path:["containerPort"],message:"Worker services are not reachable inbound; remove containerPort."}),e.routing!==void 0&&t.addIssue({code:"custom",path:["routing"],message:"Worker services have no ALB route; remove routing."}))}),MU=s.object({appName:le,instanceType:s.string().optional()}).strict();var fg=s.object({memorySize:kn.optional(),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(1,d.LAMBDA.TIMEOUT.MIN).max(900,d.LAMBDA.TIMEOUT.MAX).optional(),ephemeralStorageSize:s.number().int(d.EPHEMERAL_STORAGE.INTEGER).min(512,d.EPHEMERAL_STORAGE.MIN).max(10240,d.EPHEMERAL_STORAGE.MAX).optional()}).strict(),pE=s.object({type:s.enum(qf).optional(),databaseName:s.string().optional(),databaseEngine:s.enum($n).optional(),deletionProtection:s.boolean().optional(),backupRetention:Rt.optional(),port:Hs.optional(),publiclyAccessible:s.boolean().optional(),allowedIpCidr:s.string().optional(),instanceType:s.string().optional(),allocatedStorage:s.number().int(d.ALLOCATED_STORAGE.INTEGER).min(20,d.ALLOCATED_STORAGE.MIN).max(65536,d.ALLOCATED_STORAGE.MAX).optional(),multiAz:s.boolean().optional(),readReplica:Js.optional(),writer:qo.optional(),readers:Qo.optional(),allowVpcAccess:s.boolean().optional(),monitoringInterval:Jo.optional(),preferredMaintenanceWindow:s.string().optional(),databaseInsights:qs.optional(),proxy:Ys.optional(),credentials:Xs.optional(),encryption:Qs.optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()}).strict(),fE=s.object({server:fg.optional(),imageOptimisation:fg.optional(),revalidation:fg.optional()}).strict(),gg=s.object({versioned:s.boolean().optional()}).strict(),gE=s.object({assets:gg.optional(),cache:gg.optional(),media:gg.optional()}).strict(),Zk=s.object({visibilityTimeout:s.number().int(d.SQS.VISIBILITY_TIMEOUT.INTEGER).min(0,d.SQS.VISIBILITY_TIMEOUT.MIN).max(43200,d.SQS.VISIBILITY_TIMEOUT.MAX).optional(),messageRetentionPeriod:s.number().int(d.SQS.RETENTION_PERIOD.INTEGER).min(60,d.SQS.RETENTION_PERIOD.MIN).max(1209600,d.SQS.RETENTION_PERIOD.MAX).optional(),maxMessageSize:s.number().int(d.MAX_MESSAGE_SIZE.INTEGER).min(1024,d.MAX_MESSAGE_SIZE.MIN).max(262144,d.MAX_MESSAGE_SIZE.MAX).optional(),deadLetterQueue:s.union([s.literal(!1),s.object({enabled:s.boolean().optional(),maxReceiveCount:s.number().int(d.DLQ.MAX_RECEIVE_COUNT.INTEGER).min(1,d.DLQ.MAX_RECEIVE_COUNT.MIN).max(1e3,d.DLQ.MAX_RECEIVE_COUNT.MAX).optional()}).strict()]).optional()}).strict(),vE=s.object({revalidationQueue:Zk.optional()}).strict(),hE=s.object({domainNames:s.array(s.string()).optional(),certificateArn:s.string().optional()}).strict(),yE=s.record(s.string().regex(z.ENV_VAR_NAME,d.ENV_VAR_NAME),s.string()).optional(),Vk=s.object({type:s.literal("payload"),name:s.string().min(1,d.REQUIRED.PATTERN_NAME),domain:s.string().optional(),database:pE.optional(),compute:fE.optional(),storage:gE.optional(),messaging:vE.optional(),cdn:hE.optional(),environment:yE}).strict(),Bk=s.object({type:s.literal("nextjs"),name:s.string().min(1,d.REQUIRED.PATTERN_NAME),domain:s.string().optional(),database:pE.optional(),compute:fE.optional(),storage:gE.optional(),messaging:vE.optional(),cdn:hE.optional(),environment:yE}).strict(),vg=s.enum(Vo),Gk=s.object({command:s.string().min(1,d.REQUIRED.BUILD_COMMAND),outputDir:s.string().min(1,d.REQUIRED.OUTPUT_DIR)}).strict(),Wk=s.object({headers:s.boolean().optional(),contentSecurityPolicy:s.string().optional()}).strict(),Kk=s.object({to:s.string().min(1,d.REQUIRED.FORMS_TO).regex(z.EMAIL,d.EMAIL),from:s.string().regex(z.EMAIL,d.EMAIL).optional(),corsOrigin:s.string().regex(z.HTTP_ORIGIN,"corsOrigin must be an exact origin such as https://example.com (no path, no trailing slash)").optional(),maxConcurrency:s.number().int().min(1).max(100).optional()}).strict(),Hk=s.object({behaviours:s.array(s.unknown()).optional()}).strict(),hg=s.object({type:s.literal("staticsite"),name:s.string().min(1,d.REQUIRED.PATTERN_NAME),source:s.string().min(1,d.REQUIRED.SOURCE),build:Gk,routing:vg.optional(),security:Wk.optional(),domain:s.string().optional(),forms:Kk.optional(),cdn:Hk.optional()}).strict().superRefine((e,t)=>{if(e.forms===void 0)return;let n=e.domain;if(n===void 0||n===""){t.addIssue({code:"custom",path:["domain"],message:"A domain is required when forms are enabled: SES sends only from a verified identity, and the site's domain is the identity the pattern verifies"});return}let o=e.forms.from;o!==void 0&&!Os(o,n)&&t.addIssue({code:"custom",path:["forms","from"],message:`forms.from must be an address at ${n} (the verified SES identity) \u2014 for example noreply@${n}. Use forms.to for the recipient.`})}),ti=s.discriminatedUnion("type",[Vk,Bk,hg]),bE=s.enum(["lightweight","standard","resilient","custom"]),SE=s.object({type:s.enum(qf),instanceType:s.string().optional(),backupRetention:Rt.optional(),deletionProtection:s.boolean().optional(),encryption:s.union([s.object({useCMK:s.literal(!0)}).strict(),s.literal(!1)]).optional()}).strict(),_E=s.object({memorySize:kn.optional(),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(1,d.LAMBDA.TIMEOUT.MIN).max(900,d.LAMBDA.TIMEOUT.MAX).optional()}).strict();var EE=s.object({appName:le,type:tg,pattern:rg.optional(),patternConfig:ti.optional(),owner:s.string().optional(),tags:s.record(s.string(),s.string()).optional(),vpcId:s.string().optional(),network:tc.optional(),backup:P_.optional(),tunnel:k_.optional(),additionalNetworks:s.array(H_).optional(),database:s.array(z_),s3:s.array(Y_),compute:s.array(dE),dynamodb:s.array(Z_).optional(),clickhouse:s.array(V_).optional(),sqs:s.array(J_).optional(),cdn:Q_.optional(),customCodeBlocks:s.array(R_).optional(),additionalManagedImports:s.array(s.object({moduleSpecifier:s.string(),namedImports:s.array(s.string()),defaultImport:s.string().optional()}).strict()).optional()}).strict(),AE=s.object({name:le,type:tg,pattern:rg.optional(),patternTier:bE.optional(),patternDomain:s.string().optional(),source:s.string().min(1,d.REQUIRED.SOURCE).optional(),buildCommand:s.string().min(1,d.REQUIRED.BUILD_COMMAND).optional(),outputDir:s.string().min(1,d.REQUIRED.OUTPUT_DIR).optional(),routing:vg.optional(),formsTo:s.string().min(1,d.REQUIRED.FORMS_TO).regex(z.EMAIL,d.EMAIL).optional(),corsOrigin:s.string().regex(z.HTTP_ORIGIN,"corsOrigin must be an exact origin such as https://example.com (no path, no trailing slash)").optional(),customDatabase:SE.optional(),customCompute:_E.optional(),region:s.string().optional(),owner:s.string().optional(),includeDatabase:s.boolean().optional(),databaseName:s.string().min(1,d.DATABASE.NAME.REQUIRED).max(63,d.DATABASE.NAME.MAX_LENGTH).optional(),vpcId:s.string().optional(),network:X_.optional(),services:s.array(mE).optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()}).strict().superRefine((e,t)=>{e.formsTo!==void 0&&(e.patternDomain!==void 0&&e.patternDomain!==""||t.addIssue({code:"custom",path:["patternDomain"],message:"A domain is required when forms are enabled: SES sends only from a verified identity, and the site's domain is the identity the pattern verifies"}))}),nL=s.object({name:U,localResource:s.string().min(1),remoteApp:s.string().min(1),remoteResource:s.string().min(1),permission:s.enum(["read","write","read-write"]),remoteArn:s.string().optional()}).strict();var Xk=["fjall-managed","external","external-manual"],cL=s.enum(Xk);var xE=s.object({givenName:s.string().min(1),familyName:s.string().min(1),displayName:s.string().min(1).optional(),expires:s.string().min(1).optional()}).strict(),$E=s.object({name:s.string().min(1),path:s.string().min(1).optional()}).strict(),Yk=s.union([s.object({managedPolicyArn:s.string().min(1)}).strict(),s.object({customerManagedPolicy:$E}).strict()]),Jk=s.object({managedPolicies:s.array(s.string().min(1)).optional(),inlinePolicy:s.record(s.string(),s.unknown()).optional(),customerManagedPolicies:s.array($E).optional(),permissionsBoundary:Yk.optional(),sessionDuration:s.string().min(1).optional(),description:s.string().optional(),accounts:s.union([s.array(s.string().min(1)),s.literal("all")]).optional(),includeManagementAccount:s.boolean().optional(),groups:s.array(s.string().min(1)).optional()}).strict(),qk=s.object({description:s.string().optional()}).strict(),sc=s.string().regex(z.EMAIL,d.EMAIL),yg={groups:s.record(s.string(),qk).optional(),permissionSets:s.record(s.string(),Jk).optional(),memberships:s.record(s.string(),s.array(sc)).optional(),resolutionVersion:s.number().int().min(1).optional(),defaultPermissionSets:s.boolean().optional()},Qk=s.discriminatedUnion("source",[s.object({...yg,source:s.literal("fjall-managed"),users:s.record(sc,xE)}).strict(),s.object({...yg,source:s.literal("external")}).strict(),s.object({...yg,source:s.literal("external-manual"),users:s.record(sc,xE).optional()}).strict()]),uL=s.object({name:U,type:s.literal("organisation").optional(),organisationName:s.string().min(1).optional(),orgEmail:sc.optional(),accounts:s.unknown().optional(),accountIds:s.record(s.string(),s.string()).optional(),identityCentre:s.union([Qk,s.literal(!1)]).optional(),allowedRegions:s.array(s.string().min(1)).optional()}).strict();var eC=Object.defineProperty,tC=(e,t)=>eC(e,"name",{value:t,configurable:!0}),rC=[1,3,5,7,14,30,60,90,120,150,180,365,400,545,731,1827,3653],nC=s.object({buildkiteQueue:s.string().min(1,"buildkiteQueue cannot be empty").max(100).regex(/^[a-zA-Z0-9-_]+$/,"buildkiteQueue must be alphanumeric with hyphens/underscores"),buildkiteOrgSlug:s.string().min(1,"buildkiteOrgSlug cannot be empty").max(100).regex(/^[a-z0-9-]+$/,"buildkiteOrgSlug must be a lowercase Buildkite organisation slug"),agentTokenSsmParameterName:s.string().min(2).regex(/^\//,"agentTokenSsmParameterName must be a full path (leading /)").optional(),agentTokenKmsKeyArn:s.string().min(1).optional(),fjallApiKeySsmParameterName:s.string().min(2).regex(/^\//,"fjallApiKeySsmParameterName must be a full path (leading /)").optional(),instanceType:s.string().min(1).default("c8g.xlarge"),agentVolumeSizeGib:s.number().int().min(20).max(1e3).default(250),agentMinInstances:s.number().int().min(0).default(0),agentMaxInstances:s.number().int().min(1).default(2),agentsPerInstance:s.number().int().min(1).default(1),spotCapacityPercentage:s.number().int().min(0).max(100).default(0),scaleInIdlePeriodSeconds:s.number().int().min(60).default(600),disconnectAfterUptimeSeconds:s.number().int().min(3600).default(86400),maxInstanceLifetimeDays:s.number().int().min(1).max(365).default(7),terminateInstanceAfterJob:s.boolean().default(!1),purgeBuildsOnDiskFull:s.boolean().default(!0),terminateInstanceOnDiskFull:s.boolean().default(!1),logRetentionDays:s.number().int().min(1).default(30),agentLogRetentionDays:s.literal(rC).default(7),buildkiteAgentRelease:s.enum(["stable","beta","edge"]).default("stable"),buildkiteAgentTags:s.string().default(""),buildkiteAgentTimestampLines:s.boolean().default(!1),buildkiteAgentExperiments:s.string().default(""),buildkiteAgentTracingBackend:s.enum(["","datadog","opentelemetry"]).default(""),buildkiteAgentCancelGracePeriodSeconds:s.number().int().min(10).default(60),enableSecretsPlugin:s.boolean().default(!0),enableEcrPlugin:s.boolean().default(!1),enableDockerLoginPlugin:s.boolean().default(!1),enableDockerUserNamespaceRemap:s.boolean().default(!0),enableDockerExperimental:s.boolean().default(!1),dockerNetworkingProtocol:s.enum(["ipv4","dualstack"]).default("ipv4"),enableInstanceStorage:s.boolean().default(!1),mountTmpfsAtTmp:s.boolean().default(!0),buildkiteAgentEnableGitMirrors:s.boolean().default(!1),bootstrapScriptUrl:s.string().default(""),agentEnvFileUrl:s.string().default(""),scalerEventSchedulePeriod:s.string().min(1).default("1 minute"),scalerMinPollInterval:s.string().min(1).default("10s"),scaleOutFactor:s.string().min(1).default("1.0"),scaleOutWaitingForJobs:s.boolean().default(!1),rolePermissionsBoundaryArn:s.string().min(1).optional(),alarmSnsTopicArn:s.string().min(1).optional(),applicationId:s.string().min(1).optional(),costAllocationEnvironment:s.string().min(1).optional(),costAllocationOwner:s.string().min(1).optional()}).strict(),oC=nC.refine(e=>e.agentMinInstances<=e.agentMaxInstances,{message:"agentMinInstances must be <= agentMaxInstances"});function iC(e){let t=oC.safeParse(e);if(!t.success){let n=t.error.issues.map(o=>`  - ${o.path.join(".")||"(root)"}: ${o.message}`).join(`
+`:l==="r"?"\r":l):c.length>=2&&c.startsWith("'")&&c.endsWith("'")?t[a]=c.slice(1,-1):t[a]=c}return t}bn($S,"parseDotEnv");function IS(e){return e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`").replace(/\n/g,"\\n").replace(/\r/g,"\\r")}bn(IS,"escapeDotEnvValue");var TS=s.object({awsAccountId:s.string(),accountName:s.string().nullable(),status:s.string(),role:s.string(),roleArn:s.string(),environment:s.string().optional(),connectedAt:s.string()}),JR=s.object({accounts:s.array(TS)});var qR=Object.defineProperty,yr=(e,t)=>qR(e,"name",{value:t,configurable:!0});function Nf(e){let t=[e.primaryRegion,...e.secondaryRegions??[],e.disasterRecoveryRegion].filter(n=>n!==void 0);return[...new Set(t)]}yr(Nf,"deriveRegionsFromOrgConfig");function Rf(e){return e.environment??Uo(e)}yr(Rf,"environmentOrTier");function Pf(e,t){return`${e.toLowerCase()}-${Ur(t)}`}yr(Pf,"generateTargetName");function kf(e,t){let n=[];for(let o of e){if(Uo(o)==="organisation")continue;let r=Rf(o);for(let i of t)n.push({name:Pf(o.name,i),accountName:o.name,accountId:o.id,environment:r,region:i})}return n.sort((o,r)=>{let i=o.environment.localeCompare(r.environment);if(i!==0)return i;let a=o.accountName.localeCompare(r.accountName);return a!==0?a:o.region.localeCompare(r.region)})}yr(kf,"deriveTargets");function NS(e){return kf(e.providerAccounts,Nf(e))}yr(NS,"deriveAllTargets");function QR(e,t){if(t.length===0)return e;let n=new Set([e.primaryRegion,e.disasterRecoveryRegion].filter(Boolean)),o=t.filter(r=>!n.has(r));return{...e,secondaryRegions:o.length>0?o:void 0}}yr(QR,"mergeSecondaryRegions");function RS(e,t){return e.find(n=>n.name===t)}yr(RS,"findTarget");var eP=Object.defineProperty,tP=(e,t)=>eP(e,"name",{value:t,configurable:!0});function PS(e,t){if(t!==void 0){if(t.trim()==="")throw new Error("buildAppConfigPath: container must be a non-empty string");return`${t}/fjall/${e}`}return`fjall/${e}`}tP(PS,"buildAppConfigPath");var rP=Object.defineProperty,Sn=(e,t)=>rP(e,"name",{value:t,configurable:!0}),Cf="infrastructure.ts",Of="fjall";function kS(e,t){let n=t?.excludedPathPrefixes,o=t?.excludedPathSegments,r=[];for(let i of e){if(!Df(i.path)||n&&OS(i.path,n)||o&&DS(i.path,o))continue;let a=wf(i.path);a!==null&&r.push({configPath:CS(i.path),boundaryPath:a})}return r}Sn(kS,"findInfrastructurePaths");function Df(e){return e===Cf||e.endsWith(`/${Cf}`)}Sn(Df,"isInfrastructureFile");function wf(e){let t=e.split("/");for(let n=0;n<t.length-1;n++)if(t[n]===Of)return t.slice(0,n+1).join("/");return null}Sn(wf,"findBoundaryPath");function CS(e){return e.slice(0,-`/${Cf}`.length)}Sn(CS,"toConfigDir");function OS(e,t){for(let n of t)if(e.startsWith(n))return!0;return!1}Sn(OS,"hasExcludedPrefix");function DS(e,t){let n=e.split("/");for(let o=0;o<n.length-1;o++)if(t.has(n[o]))return!0;return!1}Sn(DS,"hasExcludedSegment");var nP=Object.defineProperty,zf=(e,t)=>nP(e,"name",{value:t,configurable:!0});function wS(e){if(e.length===0)return null;let t=[];for(let o of e){let r=zS(o.boundaryPath);if(r===null)return null;t.push(r)}let n=MS(t);return n.length===0?null:n.join("/")}zf(wS,"inferContainerFromCandidates");function zS(e){let t=e.split("/").filter(o=>o.length>0);if(t.length===0||t[t.length-1]!==Of)return null;let n=t.slice(0,t.length-1);return n.length===0?null:n}zf(zS,"extractContainer");function MS(e){if(e.length===0)return[];let[t,...n]=e,o=[];for(let r=0;r<t.length;r+=1){let i=t[r];for(let a of n)if(a[r]!==i)return o;o.push(i)}return o}zf(MS,"longestCommonPrefix");var oP=Object.defineProperty,jS=(e,t)=>oP(e,"name",{value:t,configurable:!0}),US=["fjall","organisation","platform","account","domain"];function LS(e){return US.includes(e.toLowerCase())}jS(LS,"isReservedAppName");var FS="-cache";function ZS(e){return ut(e).endsWith(FS)}jS(ZS,"hasReservedAppNameSuffix");var iP=Object.defineProperty,Mf=(e,t)=>iP(e,"name",{value:t,configurable:!0});function BS(e){return{success:!0,data:e}}Mf(BS,"success");function Zo(e){return{success:!1,error:e}}Mf(Zo,"failure");var VS="sha256:",Cs=12,aP=new RegExp(`-sha-[0-9a-f]{${Cs}}$`);function GS(e,t,n){if(!e.startsWith(VS))return Zo(new Error(`expected sha256:... digest, got ${e.slice(0,32)}`));let o=e.slice(VS.length);if(o.length<Cs)return Zo(new Error(`digest hex payload too short (need >=${Cs} chars, got ${o.length})`));let r=t.trim();if(r==="")return Zo(new Error("serviceName must be a non-empty string"));let i;if(n!==void 0){let u=n.trim();if(u==="")return Zo(new Error("target, when supplied, must be a non-empty string; omit the argument instead"));i=u.toLowerCase()}let a=o.slice(0,Cs).toLowerCase(),c=i!==void 0?`${r.toLowerCase()}-${i}`:r.toLowerCase();return BS(`${c}-sha-${a}`)}Mf(GS,"deriveContentHashTag");var sP=Object.defineProperty,cP=(e,t)=>sP(e,"name",{value:t,configurable:!0}),WS=["full","code-only","rollback","restart"],uP=s.enum(WS),KS=/^[a-zA-Z0-9._-]+$/,HS=s.string().min(1).max(128).regex(KS),XS=s.object({serviceName:s.string().min(1),imageTag:HS,imageDigest:s.string().min(1).optional(),imageUri:s.string().min(1),ecrRepositoryArn:s.string().min(1).optional(),taskDefinitionArn:s.string().min(1).optional(),previousTaskDefinitionArn:s.string().min(1).optional(),functionArn:s.string().min(1).optional(),publishedVersion:s.string().min(1).optional()}).strict(),lP=s.array(XS);function YS(e,t){return`${e}${t}`}cP(YS,"artefactOutputKey");var dP=Object.defineProperty,JS=(e,t)=>dP(e,"name",{value:t,configurable:!0}),ft=["payload","nextjs","staticsite"],jf=new Set(ft);function Uf(e){return typeof e=="string"&&jf.has(e)}JS(Uf,"isPatternType");var _n={payload:{label:"Payload CMS",constructIdSuffix:"Payload",artefact:"opennext-lambda",stackPlacement:"compute",deployable:!0},nextjs:{label:"Next.js",constructIdSuffix:"Nextjs",artefact:"opennext-lambda",stackPlacement:"compute",deployable:!1},staticsite:{label:"Static site",constructIdSuffix:"StaticSite",artefact:"static-assets",stackPlacement:"cdn",deployable:!0}},qS=ft.filter(e=>_n[e].deployable),Lf=ft.filter(e=>_n[e].artefact==="opennext-lambda"),mP=new Set(Lf);function Ff(e){return e!=null&&mP.has(e)}JS(Ff,"isOpenNextPatternType");var Vo=["multipage","spa"];var pP=Object.defineProperty,Zf=(e,t)=>pP(e,"name",{value:t,configurable:!0}),QS="noreply";function e_(e){return`${QS}@${e}`}Zf(e_,"defaultFormsFromAddress");function t_(e){return`https://${e}`}Zf(t_,"defaultFormsCorsOrigin");function Os(e,t){let n=e.split("@");if(n.length!==2)return!1;let[o,r]=n;return o===void 0||o===""||r===void 0?!1:r.toLowerCase()===t.toLowerCase()}Zf(Os,"isAddressAtDomain");var r_=2;var fP=s.object({devDomain:s.string().min(1),hostedZoneId:s.string().min(1).optional(),parentDomain:s.string().min(1).optional(),parentDelegationRoleArn:s.string().min(1).optional()}).strict().superRefine((e,t)=>{if(e.hostedZoneId!==void 0){e.parentDomain!==void 0&&t.addIssue({code:"custom",path:["parentDomain"],message:"hostedZoneId (adopt mode) is mutually exclusive with parentDomain \u2014 the adopted zone was already delegated; omit parentDomain"}),e.parentDelegationRoleArn!==void 0&&t.addIssue({code:"custom",path:["parentDelegationRoleArn"],message:"hostedZoneId (adopt mode) is mutually exclusive with parentDelegationRoleArn \u2014 the adopted zone was already delegated; omit parentDelegationRoleArn"});return}e.parentDelegationRoleArn!==void 0&&e.parentDomain===void 0&&t.addIssue({code:"custom",path:["parentDomain"],message:"parentDelegationRoleArn requires parentDomain \u2014 set parentDomain to the parent zone the DelegationRole belongs to"}),e.parentDomain!==void 0&&!e.devDomain.endsWith(`.${e.parentDomain}`)&&t.addIssue({code:"custom",path:["parentDomain"],message:"parentDomain must be a proper DNS suffix of devDomain \u2014 devDomain must end with `.<parentDomain>`"})}),n_={appId:s.string().min(1),appKebab:s.string().min(1),engineVersion:s.string().min(1).optional(),adoptSlotEcr:s.boolean().optional(),adoptCacheEcr:s.boolean().optional(),phase:s.enum(["zone","full"]).optional(),domain:fP.optional()},gP=s.object(n_).strict(),vP=s.object({...n_,version:s.literal(r_),appName:s.string().min(1)}).strict().refine(e=>e.appName===`fjall-dev-${e.appKebab}`,{message:"appName must equal `fjall-dev-${appKebab}` (single-source identity)",path:["appName"]});var yP=Object.defineProperty,En=(e,t)=>yP(e,"name",{value:t,configurable:!0});function o_(e){return e.success===!0}En(o_,"isSuccess");function i_(e){return e.success===!1}En(i_,"isFailure");function R(e){return{success:!0,data:e}}En(R,"success");function T(e){return{success:!1,error:e}}En(T,"failure");async function a_(e){try{let t=await e();return R(t)}catch(t){return T(sr(t))}}En(a_,"tryAsync");function s_(e){try{let t=e();return R(t)}catch(t){return T(sr(t))}}En(s_,"trySync");var bP=Object.defineProperty,SP=(e,t)=>bP(e,"name",{value:t,configurable:!0}),c_=/^[a-zA-Z][a-zA-Z0-9-]*$/,_P=Fo.source.replace(/^\^|\$$/g,""),z=Object.freeze({IDENTIFIER:c_,NEW_APP_NAME:/^[a-z][a-z0-9-]*$/,RESOURCE_NAME:/^[a-zA-Z][a-zA-Z0-9]*$/,ECS_SERVICE_NAME:c_,BUCKET_NAME:/^[a-z][a-z0-9-]*[a-z0-9]$|^[a-z][a-z0-9]*$/,DATABASE_NAME:/^[a-zA-Z][a-zA-Z0-9_]*$/,RESOURCE_TYPE:/^[a-z]+(:[a-z]+)?$/,SSM_PATH:new RegExp(`^(?:/${_P})+$`),SECRET_NAME:Ps,SSM_COMPONENT:Fo,EMAIL:/^[^\s@]+@[^\s@]+\.[^\s@]+$/,DOCKER_IMAGE:/^[a-z0-9][a-z0-9._-]*[a-z0-9](:[a-z0-9._-]+)?$/,DOMAIN:/^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)+$/i,HTTP_ORIGIN:/^https?:\/\/[a-z0-9.-]+(:\d+)?$/i,PASCAL_CASE:/^[A-Z][A-Za-z0-9]*$/,AWS_ACCOUNT_ID:/^\d{12}$/,VPC_ID:/^vpc-[a-z0-9]+$/,ROLE_ARN:/^arn:aws[a-zA-Z-]*:iam::\d{12}:role\/.+$/,CIDR:/^((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\.){3}(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\/(3[0-2]|[12]?\d)$/,SCHEDULE_EXPRESSION:/^(rate\(1 (?:minute|hour|day)\)|rate\((?:[2-9]|[1-9]\d+) (?:minutes|hours|days)\)|cron\([^\s()]+ [^\s()]+ [^\s()]+ [^\s()]+ [^\s()]+ [^\s()]+\))$/,LAMBDA_RUNTIME_IDENTIFIER:/^[A-Za-z0-9._-]+$/,ENV_VAR_NAME:/^[A-Za-z_][A-Za-z0-9_]*$/});function Vf(e){let t=/^rate\((\d+) (minute|minutes|hour|hours|day|days)\)$/.exec(e);if(!t)return;let n=t[1],o=t[2];if(n===void 0||o===void 0)return;let r=parseInt(n,10);if(!Number.isFinite(r)||r<1)return;let i=o==="minute"||o==="hour"||o==="day";if(!(i&&r!==1)&&!(!i&&r===1))return o==="minute"||o==="minutes"?{everyMs:r*6e4}:o==="hour"||o==="hours"?{everyMs:r*60*6e4}:{everyMs:r*24*60*6e4}}SP(Vf,"parseRateExpression");var d=Object.freeze({IDENTIFIER:"Must start with a letter, contain only letters, numbers, and hyphens",NEW_APP_NAME:"Must start with a lowercase letter and contain only lowercase letters, numbers, and hyphens",IDENTIFIER_MIN_LENGTH:"Must be at least 2 characters",IDENTIFIER_NO_TRAILING_HYPHEN:"Must not end with a hyphen",IDENTIFIER_NO_CONSECUTIVE_HYPHENS:"Must not contain consecutive hyphens",RESOURCE_NAME:"Must start with a letter and contain only letters and numbers (PascalCase recommended)",ECS_SERVICE_NAME:"Service name must start with a letter and contain only letters, numbers, and hyphens",BUCKET_NAME:"Bucket name must start with a lowercase letter and contain only lowercase letters, numbers, and hyphens",DATABASE_NAME:"Database name must start with a letter and contain only letters, numbers, and underscores",RESOURCE_TYPE:"Resource type must be in format 'category' or 'category:type'",SSM_PATH:"SSM path must start with / and contain valid namespace segments (e.g., /myapp/ApiCluster/service)",SECRET_NAME:xf,SSM_COMPONENT:ks,EMAIL:"Please enter a valid email address",DOMAIN:"Please enter a valid domain (e.g., cms.example.com)",DOCKER_IMAGE:"Invalid Docker image name format",REQUIRED:{APP_NAME:"Application name is required",RESOURCE_NAME:"Resource name is required",BUCKET_NAME:"Bucket name is required",SERVICE_NAME:"Service name is required",NETWORK_NAME:"Network name is required",DATABASE_NAME:"Database name is required",ORGANISATION_NAME:"Organisation name is required",EMAIL:"Email is required",NAME:"Name is required",USERNAME:"Username is required",CONTAINER_NAME:"Container name is required",GROUP:"Group is required",PATTERN_NAME:"Pattern name is required",SOURCE:"Source directory is required",BUILD_COMMAND:"Build command is required",OUTPUT_DIR:"Output directory is required",FORMS_TO:"Forms recipient address is required",ROUTING_PATH:"Routing path is required",RESOURCE_REFERENCE:"Resource reference is required",RESOURCE_TYPE:"Resource type is required",VARIANT:"Variant is required",SUBTYPE:"Subtype is required",DEPLOY_TARGET:"Deploy target is required",DESTROY_TARGET:"Destroy target is required"},MAX_LENGTH:{APP_NAME:"Application name must be 50 characters or less",RESOURCE_NAME:"Resource name must be 63 characters or less",BUCKET_NAME:"Bucket name must be 63 characters or less",SERVICE_NAME:"Service name must be 255 characters or less",NETWORK_NAME:"Network name must be 50 characters or less",DATABASE_NAME:"Database name must be 63 characters or less",ORGANISATION_NAME:"Organisation name must be 50 characters or less"},PORT:{INTEGER:"Port must be an integer",MIN:"Port must be at least 1",MAX:"Port cannot exceed 65535"},USERNAME:{MAX_LENGTH:"Username cannot exceed 63 characters"},LAMBDA:{MEMORY:{INTEGER:"Lambda memory must be an integer",MIN:"Memory must be at least 128 MB",MAX:"Memory cannot exceed 10240 MB",MULTIPLE:"Memory must be 128 MB or a multiple of 64 MB"},TIMEOUT:{INTEGER:"Timeout must be an integer",MIN:"Timeout must be at least 1 second",MAX:"Timeout cannot exceed 900 seconds"},RUNTIME:"Lambda runtime must contain only letters, digits, dots, underscores, or dashes (e.g. 'NODEJS_20_X' or 'nodejs20.x')"},ENV_VAR_NAME:"Environment variable names must start with a letter or underscore and contain only letters, digits, and underscores",PRIORITY:{INTEGER:"Priority must be an integer",MIN:"Priority must be at least 1",MAX:"Priority cannot exceed 50000"},CAPACITY:{MIN:{INTEGER:"Minimum capacity must be an integer",MIN_0:"Minimum capacity must be at least 0",MIN_1:"Minimum capacity must be at least 1",MAX:"Minimum capacity cannot exceed 100"},MAX:{INTEGER:"Maximum capacity must be an integer",MIN_0:"Maximum capacity must be at least 0",MIN_1:"Maximum capacity must be at least 1",MAX:"Maximum capacity cannot exceed 100"},DESIRED:{INTEGER:"Desired count must be an integer",MIN:"Desired count must be at least 0",MAX:"Desired count cannot exceed 100"},WARM_POOL_REQUIRED:"minCapacity 0 requires a warmPool \u2014 without it, new tasks wait 60-90s for a cold instance launch",WARM_POOL:{MIN_SIZE:{INTEGER:"Warm pool minSize must be an integer",MIN:"Warm pool minSize must be at least 0",MAX:"Warm pool minSize cannot exceed 100"},MIN_SIZE_EXCEEDS_MAX_CAPACITY:"warmPool.minSize cannot exceed maxCapacity \u2014 the warm pool cannot hold more instances than the ASG allows"}},MEMORY_LIMIT:{INTEGER:"Memory limit must be an integer",MIN_512:"Memory limit must be at least 512 MiB",MIN_128:"Memory limit must be at least 128 MiB",MAX:"Memory limit cannot exceed 30720 MiB"},DATABASE:{PORT:{INTEGER:"Database port must be an integer",MIN:"Database port must be at least 1024",MAX:"Database port cannot exceed 65535"},NAME:{REQUIRED:"Database name is required",MAX_LENGTH:"Database name must be 63 characters or less"}},BACKUP_RETENTION:{INTEGER:"Backup retention must be an integer",MIN:"Backup retention must be at least 1 day",MAX:"Backup retention cannot exceed 35 days"},SQS:{VISIBILITY_TIMEOUT:{INTEGER:"Visibility timeout must be an integer",MIN:"Visibility timeout must be at least 0 seconds",MAX:"Visibility timeout cannot exceed 43200 seconds (12 hours)"},RETENTION_PERIOD:{INTEGER:"Retention period must be an integer",MIN:"Retention period must be at least 60 seconds",MAX:"Retention period cannot exceed 1209600 seconds (14 days)"}},READER:{COUNT:{INTEGER:"Reader count must be an integer",MIN:"Reader count must be at least 0",MAX:"Reader count cannot exceed 15"}},IDENTIFIER_SUFFIX:{REQUIRED:"Identifier suffix is required when specified",MAX_LENGTH:"Identifier suffix cannot exceed 50 characters"},ROTATION:{INTEGER:"Rotation days must be an integer",MIN:"Rotation interval must be at least 1 day",MAX:"Rotation interval cannot exceed 365 days"},MAX_CONNECTIONS:{INTEGER:"Max connections must be an integer",MIN:"Max connections must be at least 1",MAX:"Max connections cannot exceed 100"},MONITORING_INTERVAL:{INTEGER:"Monitoring interval must be an integer",MIN:"Monitoring interval must be at least 0",MAX:"Monitoring interval cannot exceed 60 seconds",VALUES:"Monitoring interval must be 0, 1, 5, 10, 15, 30, or 60 seconds"},RETENTION_DAYS:{INTEGER:"Retention days must be an integer",MIN:"Retention days must be at least 1",MAX:"Retention days cannot exceed 365"},BATCH_SIZE:{INTEGER:"Batch size must be an integer",MIN:"Batch size must be at least 1",MAX:"Batch size cannot exceed 10000"},SERVICE:{UNIQUE_WITHIN_CLUSTER:"Service names must be unique within a cluster",MIN_REQUIRED:"At least one service is required",ROUTING_REQUIRED:"Multiple services with ports require routing config (path or host)"},PROXY_CONFIG:{MAX_IDLE_CONNECTIONS:{INTEGER:"Max idle connections must be an integer",MIN:"Max idle connections must be at least 0",MAX:"Max idle connections cannot exceed 100"},BORROW_TIMEOUT:{INTEGER:"Connection borrow timeout must be an integer",MIN:"Connection borrow timeout must be at least 1 second",MAX:"Connection borrow timeout cannot exceed 3600 seconds"}},MAX_AZS:{INTEGER:"Max AZs must be an integer",MIN:"Max AZs must be at least 1",MAX:"Max AZs cannot exceed 3"},BATCHING_WINDOW:{INTEGER:"Max batching window must be an integer",MIN:"Max batching window must be at least 0",MAX:"Max batching window cannot exceed 300 seconds"},HEALTH_CHECK:{INTERVAL:{INTEGER:"Health check interval must be an integer",MIN:"Health check interval must be at least 5 seconds",MAX:"Health check interval cannot exceed 300 seconds"},TIMEOUT:{INTEGER:"Health check timeout must be an integer",MIN:"Health check timeout must be at least 2 seconds",MAX:"Health check timeout cannot exceed 60 seconds"},RETRIES:{INTEGER:"Health check retries must be an integer",MIN:"Health check retries must be at least 1",MAX:"Health check retries cannot exceed 10"},START_PERIOD:{INTEGER:"Health check start period must be an integer",MIN:"Health check start period must be at least 0 seconds",MAX:"Health check start period cannot exceed 300 seconds"}},EPHEMERAL_STORAGE:{INTEGER:"Ephemeral storage size must be an integer",MIN:"Ephemeral storage size must be at least 512 MB",MAX:"Ephemeral storage size cannot exceed 10240 MB"},MAX_MESSAGE_SIZE:{INTEGER:"Max message size must be an integer",MIN:"Max message size must be at least 1024 bytes",MAX:"Max message size cannot exceed 262144 bytes (256 KB)"},CAPACITY_CONSTRAINT:{MIN_LTE_MAX:"minCapacity must be less than or equal to maxCapacity"},DIRECT_ACCESS:{NO_DOMAIN:"directAccess cannot be used with domain (no ALB for HTTPS)",NO_LOAD_BALANCER:"directAccess cannot be used with loadBalancer (mutually exclusive)"},GLOBAL_AURORA:{PRIMARY_REGION_REQUIRED:"primaryRegion is required for GlobalAurora databases"},NAT_GATEWAY:{INTEGER:"NAT gateway count must be an integer",MIN:"NAT gateway count must be at least 0",MAX:"NAT gateway count cannot exceed 3"},CIDR_MASK:{INTEGER:"CIDR mask must be an integer",MIN:"CIDR mask must be at least 16",MAX:"CIDR mask cannot exceed 28"},CPU:{INTEGER:"CPU must be an integer",MIN:"CPU must be at least 256 units",MAX:"CPU cannot exceed 4096 units"},KMS:{KEY_REQUIRED:"KMS key ARN is required when using KMS encryption"},READER_INSTANCES:{MAX:"Cannot have more than 15 reader instances",COUNT_OR_INSTANCES:"Cannot specify both 'count' and 'instances' - use one or the other"},GENERATOR_CAPACITY:{MIN:{MIN:"Minimum capacity must be at least 1",MAX:"Minimum capacity cannot exceed 1000"},MAX:{MIN:"Maximum capacity must be at least 1",MAX:"Maximum capacity cannot exceed 1000"}},INSTANCE_TYPE:"Unknown instance type. Common types include: t4g.micro, t4g.small, m5.large",ARCHITECTURE_MISMATCH:"Architecture mismatch between instance type and AMI",ALLOCATED_STORAGE:{INTEGER:"Allocated storage must be an integer",MIN:"Allocated storage must be at least 20 GB",MAX:"Allocated storage cannot exceed 65536 GB"},DLQ:{MAX_RECEIVE_COUNT:{INTEGER:"Max receive count must be an integer",MIN:"Max receive count must be at least 1",MAX:"Max receive count cannot exceed 1000"}},ALARM:{PERCENTAGE:{MIN:"Threshold must be at least 1%",MAX:"Threshold must be at most 100%"},FREE_STORAGE_GIB:{MIN:"Free storage threshold must be at least 1 GiB"}},REGION:"Invalid AWS region",PASCAL_CASE:"Resource name must start with an uppercase letter and contain only alphanumerics (PascalCase).",IMAGE_DOCKER_MUTEX:"image and docker are mutually exclusive",AWS_ACCOUNT_ID:"AWS account id must be exactly 12 digits (no hyphens)",VPC_ID:"VPC id must look like vpc-abc12345",ROLE_ARN:"Role ARN must have the form arn:aws:iam::<account-id>:role/<name>",CIDR:"CIDR must be in dotted-quad/prefix-length form (e.g. 10.0.0.0/16)",VPC_PEER:{MIN_REQUESTER_ACCOUNTS:"At least one requester account id is required",REGION_REQUIRED:"Peer region is required when specified",ROUTE_TABLE_ID_REQUIRED:"Route table id must not be empty"},SCHEDULE_EXPRESSION:"Schedule expression must be 'rate(N minute|minutes|hour|hours|day|days)' with N>=1, or 'cron(<6-field AWS expression>)'"});var EP=Object.defineProperty,He=(e,t)=>EP(e,"name",{value:t,configurable:!0}),AP=["us-east-2","us-west-2","us-east-1","eu-west-1","eu-central-1","ap-southeast-1"],xP=Object.freeze(AP.flatMap(e=>{let t=jr(e);return t?[t]:[]})),Bf=Object.freeze(["us-east-2","us-west-2","us-east-1","eu-west-1","ap-southeast-1"]);function Ds(e){return e?e.split(",").map(t=>t.trim()).filter(Boolean):[]}He(Ds,"parseRegionList");function Gf(e){return xt.includes(e)}He(Gf,"isValidRegion");function Wf(e){return/^[a-z]{2}-[a-z]+-[1-9]$/.test(e)}He(Wf,"isValidRegionFormat");function Kf(e){if(!e)return Bf.slice(0,3);let t=e.toLowerCase().split("-"),n=t[0],o=t.length>1?t[1]:"",r=[];return n&&o&&(r=xt.filter(i=>i.startsWith(`${n}-${o}`))),r.length===0&&n&&(r=xt.filter(i=>i.startsWith(`${n}-`))),r.length>0?r.slice(0,3):Bf.slice(0,3)}He(Kf,"getSuggestions");function Hf(e){if(Gf(e))return!0;let t=Kf(e);return Wf(e)?`Unknown region. Try: ${t.join(", ")}`:`Invalid format. Try: ${t.join(", ")}`}He(Hf,"validateRegion");function u_(e){if(!e||e.trim()==="")return!0;let t=Ds(e);for(let n of t){let o=Hf(n);if(o!==!0)return o}return!0}He(u_,"validateRegionList");function Xf(e,t){return e.filter(n=>n!==t)}He(Xf,"filterDuplicateRegions");function Yf(e){return{label:e.city,value:e.code,description:e.optIn?`${e.code} \u2014 opt-in required`:e.code}}He(Yf,"toRegionOption");function l_(){return We.map(Yf)}He(l_,"getRegionOptions");function d_(e){return We.filter(t=>t.code!==e).map(Yf)}He(d_,"getRegionOptionsExcluding");function m_(e){let t=We.find(n=>n.code===e);return t?t.city:e}He(m_,"getRegionName");function p_(e){return t=>{let n=Ds(t);return Xf(n,e)}}He(p_,"createRegionFormatter");var ws="4.2.0";var zs=["Aurora","Instance","GlobalAurora","ClickHouse"],An=["FARGATE","FARGATE_SPOT","EC2"],at=["standard","resilient","enterprise"],Ms=["tinkerer","lightweight","standard","resilient","enterprise"],Jf="custom",Bo=[...Ms,Jf];var $P=Object.defineProperty,IP=(e,t)=>$P(e,"name",{value:t,configurable:!0}),$j=Object.freeze({RESOURCE_SUFFIXES:Object.freeze({storage:"Storage",database:"Database",cluster:"Cluster",function:"Function",instance:"Instance",compute:"Compute"})}),Go=["ecs","lambda","ec2"],xn=Object.freeze({ECS:"ecs",LAMBDA:"lambda",EC2:"ec2"}),js=["code","container"],Wo=Object.freeze({CODE:"code",CONTAINER:"container"}),Us=["ARM_64","X86_64"],f_="ARM_64",Ko=["NONE","AWS_IAM"],Ls=["public","internal"],Fs=["CPU","MEMORY"],Zs=["ARM","STANDARD"],qf=["Instance","Aurora"],$n=["postgresql","mysql"],g_=["foundation","compliance","hardened"];var Vs=["t3.nano","t3.micro","t3.small","t3.medium","t3.large","t3.xlarge","t3.2xlarge","t3a.nano","t3a.micro","t3a.small","t3a.medium","t3a.large","t3a.xlarge","t3a.2xlarge","t4g.nano","t4g.micro","t4g.small","t4g.medium","t4g.large","t4g.xlarge","t4g.2xlarge","c5.large","c5.xlarge","c5.2xlarge","c5.4xlarge","c5.9xlarge","c5.12xlarge","c5.18xlarge","c5.24xlarge","c5a.large","c5a.xlarge","c5a.2xlarge","c5a.4xlarge","c5a.8xlarge","c5a.12xlarge","c5a.16xlarge","c5a.24xlarge","c6g.medium","c6g.large","c6g.xlarge","c6g.2xlarge","c6g.4xlarge","c6g.8xlarge","c6g.12xlarge","c6g.16xlarge","r5.large","r5.xlarge","r5.2xlarge","r5.4xlarge","r5.8xlarge","r5.12xlarge","r5.16xlarge","r5.24xlarge","r5a.large","r5a.xlarge","r5a.2xlarge","r5a.4xlarge","r5a.8xlarge","r5a.12xlarge","r5a.16xlarge","r5a.24xlarge","r6g.medium","r6g.large","r6g.xlarge","r6g.2xlarge","r6g.4xlarge","r6g.8xlarge","r6g.12xlarge","r6g.16xlarge","i3.large","i3.xlarge","i3.2xlarge","i3.4xlarge","i3.8xlarge","i3.16xlarge","p3.2xlarge","p3.8xlarge","p3.16xlarge","g4dn.xlarge","g4dn.2xlarge","g4dn.4xlarge","g4dn.8xlarge","g4dn.12xlarge","g4dn.16xlarge","m5.large","m5.xlarge","m5.2xlarge","m5.4xlarge","m5.8xlarge","m5.12xlarge","m5.16xlarge","m5.24xlarge","m5a.large","m5a.xlarge","m5a.2xlarge","m5a.4xlarge","m5a.8xlarge","m5a.12xlarge","m5a.16xlarge","m5a.24xlarge"],v_=[0,1,5,10,15,30,60];function Xe(e,t){return e.includes(t)}IP(Xe,"constIncludes");var h_=1,y_=65535,Pj=Object.freeze({postgresql:5432,mysql:3306}),b_=128,S_=10240,Bs=1,Gs=900,Qf=1,eg=1e3,In=100,__=100;var E_=3e3;var A_=["GET","POST","PUT","DELETE","HEAD","OPTIONS","PATCH"],x_=["standard","assets","upload","website"],Tn=["AES256","KMS"];var TP=Object.defineProperty,Ho=(e,t)=>TP(e,"name",{value:t,configurable:!0}),we=Ho(e=>s.union([s.literal(!1),e]),"optionalOrDisabled"),br={check:Ho(e=>e.minCapacity!==void 0&&e.maxCapacity!==void 0?e.minCapacity<=e.maxCapacity:!0,"check"),params:{message:d.CAPACITY_CONSTRAINT.MIN_LTE_MAX,path:["maxCapacity"]}},Xo=Ho(e=>s.number().int(d.MEMORY_LIMIT.INTEGER).min(e,e===128?d.MEMORY_LIMIT.MIN_128:d.MEMORY_LIMIT.MIN_512).max(30720,d.MEMORY_LIMIT.MAX),"memoryLimitMiBSchema"),U=s.string().min(1,d.REQUIRED.RESOURCE_NAME).max(63,d.MAX_LENGTH.RESOURCE_NAME).regex(z.RESOURCE_NAME,d.RESOURCE_NAME),I_=s.string().min(1,d.REQUIRED.BUCKET_NAME).max(63,d.MAX_LENGTH.BUCKET_NAME).regex(z.BUCKET_NAME,d.BUCKET_NAME),T_=s.string().min(1,d.REQUIRED.DATABASE_NAME).max(63,d.MAX_LENGTH.DATABASE_NAME).regex(z.DATABASE_NAME,d.DATABASE_NAME);function Ws(e,t=z.IDENTIFIER,n=d.IDENTIFIER){return s.string().min(2,d.IDENTIFIER_MIN_LENGTH).max(50,e).regex(t,n).refine(o=>!o.endsWith("-"),{message:d.IDENTIFIER_NO_TRAILING_HYPHEN}).refine(o=>!o.includes("--"),{message:d.IDENTIFIER_NO_CONSECUTIVE_HYPHENS})}Ho(Ws,"identifierSchema");var le=Ws(d.MAX_LENGTH.APP_NAME),Mj=Ws(d.MAX_LENGTH.APP_NAME,z.NEW_APP_NAME,d.NEW_APP_NAME),Sr=s.number().int(d.PORT.INTEGER).min(h_,d.PORT.MIN).max(y_,d.PORT.MAX),ye=s.object({key:s.string(),sourceText:s.string()}).strict(),NP=s.object({__identifier:s.string()}).strict(),RP=s.object({__expression:s.string()}).strict(),PP=s.object({__call:s.string()}).strict(),kP=s.union([NP,RP,PP]),CP=s.union([s.string(),s.number(),s.boolean(),kP]),Nn=s.record(s.string().regex(z.ENV_VAR_NAME,d.ENV_VAR_NAME),CP),OP=s.object({id:s.string(),name:s.string().optional(),arn:s.string().optional(),field:s.string().optional()}).strict().refine(e=>e.name!==void 0!=(e.arn!==void 0),{message:"secretsImport requires exactly one of `name` or `arn`."}),N_=s.record(s.string(),OP),jj=s.record(s.string(),s.unknown()),tg=s.enum(Bo).describe(`Application type must be one of: ${Bo.join(", ")}`),rg=s.enum(ft).describe(`OpenNext deployment pattern: ${ft.join(", ")}`),DP=s.enum(["before-imports","after-imports","after-app-init","after-tags","after-resource","end-of-file"]),wP=s.enum(["import","app-init","tags","database","compute","storage","network","messaging","cdn","pattern","vpc-peer","vpc-peer-accepter","cross-plan-connection","custom"]),R_=s.object({sourceText:s.string(),position:DP,afterManagedResource:s.object({type:wP,name:s.string().optional()}).strict().optional(),originalLine:s.number().int().optional(),leadingComments:s.array(s.string()).optional(),orphaned:s.boolean().optional(),orphanedComment:s.string().optional()}).strict(),P_=s.union([s.object({tier:s.enum(at)}).strict(),s.literal(!1)]),k_=s.union([s.object({instanceType:s.string().optional()}).strict(),s.literal(!1)]),zP=Ws(d.MAX_LENGTH.ORGANISATION_NAME),MP=s.string().regex(z.EMAIL,d.EMAIL),$_=s.string().refine(e=>xt.includes(e),{message:d.REGION}),Uj=s.object({name:zP,email:MP,accountName:s.string().optional(),primaryRegion:$_.optional().default(Mr),secondaryRegions:s.array($_).optional(),security:s.enum(g_).optional(),force:s.boolean().optional()}).strict();function Yo(e){return e.issues.map(t=>`${t.path.length>0?`${t.path.join(".")}: `:""}${t.message}`).join(`
+`)}Ho(Yo,"getZodErrorMessage");var Rn=s.number().min(1,d.ALARM.PERCENTAGE.MIN).max(100,d.ALARM.PERCENTAGE.MAX),jP=s.number().min(1,d.ALARM.FREE_STORAGE_GIB.MIN),C_=s.union([s.literal(!1),s.object({cpuThreshold:Rn.optional(),memoryThreshold:Rn.optional(),runningTasksMinimum:s.number().int().min(0).optional(),http5xxThreshold:Rn.optional()}).strict()]),O_=s.union([s.literal(!1),s.object({cpuThreshold:Rn.optional(),freeStorageThresholdGiB:jP.optional(),connectionsThreshold:s.number().int().min(1).optional()}).strict()]),D_=s.union([s.literal(!1),s.object({errorRateThreshold:Rn.optional(),durationThresholdPercent:Rn.optional()}).strict()]);var Rt=s.number().int(d.BACKUP_RETENTION.INTEGER).min(1,d.BACKUP_RETENTION.MIN).max(35,d.BACKUP_RETENTION.MAX),Jo=s.number().int(d.MONITORING_INTERVAL.INTEGER).refine(e=>Xe(v_,e),{message:d.MONITORING_INTERVAL.VALUES}),Hs=s.number().int(d.DATABASE.PORT.INTEGER).min(1024,d.DATABASE.PORT.MIN).max(65535,d.DATABASE.PORT.MAX),UP=s.enum(zs).describe(`Database type must be one of: ${zs.join(", ")}`),LP=s.object({maxConnections:s.number().int(d.MAX_CONNECTIONS.INTEGER).min(1,d.MAX_CONNECTIONS.MIN).max(100,d.MAX_CONNECTIONS.MAX).optional(),maxIdleConnections:s.number().int(d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.INTEGER).min(0,d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MIN).max(100,d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MAX).optional(),connectionBorrowTimeout:s.number().int(d.PROXY_CONFIG.BORROW_TIMEOUT.INTEGER).min(1,d.PROXY_CONFIG.BORROW_TIMEOUT.MIN).max(3600,d.PROXY_CONFIG.BORROW_TIMEOUT.MAX).optional(),requireTLS:s.boolean().optional()}).strict().describe("RDS Proxy configuration"),FP=s.object({instanceType:s.string().optional(),availabilityZone:s.string().optional()}).strict().describe("Read replica configuration"),ZP=s.object({automaticallyAfterDays:s.number().int(d.ROTATION.INTEGER).min(1,d.ROTATION.MIN).max(365,d.ROTATION.MAX).optional()}).strict().describe("Secret rotation configuration"),Xs=s.object({username:s.string().min(1,d.REQUIRED.USERNAME).max(63,d.USERNAME.MAX_LENGTH).optional(),secretRotation:ZP.optional()}).strict().describe("Database credentials configuration"),Ys=we(LP),Js=we(FP),VP=s.object({scaleWithWriter:s.boolean().optional(),enableDatabaseInsights:s.boolean().optional(),identifierSuffix:s.string().min(1,d.IDENTIFIER_SUFFIX.REQUIRED).max(50,d.IDENTIFIER_SUFFIX.MAX_LENGTH).optional(),availabilityZone:s.string().optional()}).strict().describe("Configuration for a single Aurora reader instance"),qo=s.object({enableDatabaseInsights:s.boolean().optional(),identifierSuffix:s.string().min(1,d.IDENTIFIER_SUFFIX.REQUIRED).max(50,d.IDENTIFIER_SUFFIX.MAX_LENGTH).optional(),availabilityZone:s.string().optional()}).strict().describe("Configuration for Aurora writer instance"),BP=s.object({count:s.number().int(d.READER.COUNT.INTEGER).min(0,d.READER.COUNT.MIN).max(15,d.READER.COUNT.MAX).optional(),instances:s.array(VP).max(15,d.READER_INSTANCES.MAX).optional(),defaultEnableDatabaseInsights:s.boolean().optional()}).strict().refine(e=>!(e.count!==void 0&&e.instances!==void 0),{message:d.READER_INSTANCES.COUNT_OR_INSTANCES,path:["count"]}).describe("Aurora readers configuration"),Qo=we(BP),GP=s.object({awsManaged:s.literal(!0)}).strict(),WP=s.object({useCMK:s.literal(!0)}).strict(),w_=s.union([GP,WP]),KP=s.object({mode:s.enum(["standard","advanced"]).optional(),encryptionKey:w_.optional()}).strict().describe("Database Insights configuration"),qs=we(KP),Qs=s.object({storageKey:w_.optional()}).strict().describe("Encryption configuration (DESTRUCTIVE to change storageKey)"),z_=s.object({name:U,type:UP,databaseName:s.string().min(1,d.REQUIRED.DATABASE_NAME),instanceType:s.string().optional(),allocatedStorage:s.number().optional(),multiAz:s.boolean().optional(),publiclyAccessible:s.boolean().optional(),databaseInsights:qs.optional(),port:Hs.optional(),deletionProtection:s.boolean().optional(),proxy:Ys.optional(),credentials:Xs.optional(),readReplica:Js.optional(),encryption:Qs.optional(),writer:qo.optional(),readers:Qo.optional(),backupRetention:Rt.optional(),preferredMaintenanceWindow:s.string().optional(),monitoringInterval:Jo.optional(),primaryRegion:s.string().optional(),secondaryRegions:s.array(s.string()).optional(),globalClusterIdentifier:s.string().optional(),enableGlobalWriteForwarding:s.boolean().optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional(),databaseEngine:s.enum($n).optional(),engineExpression:s.string().optional(),variableName:s.string().optional(),extraProperties:s.array(ye).optional(),alarms:O_.optional()}).strict(),ec=s.object({appName:le,nameProvidedByFlag:s.boolean().optional(),databaseName:s.string().min(1,d.REQUIRED.DATABASE_NAME).max(63,d.MAX_LENGTH.DATABASE_NAME).regex(z.DATABASE_NAME,d.DATABASE_NAME),resourceName:U.optional(),connectionConfig:s.object({connectToCompute:s.array(s.string()).optional(),connectToServices:s.array(s.string()).optional()}).strict().optional(),databaseInsights:qs.optional(),port:Hs.optional(),proxy:Ys.optional(),credentials:Xs.optional(),encryption:Qs.optional(),deletionProtection:s.boolean().optional()}).strict(),M_={databaseType:s.literal("Instance"),instanceType:s.string().optional(),multiAz:s.boolean().optional(),readReplica:Js.optional(),publiclyAccessible:s.boolean().optional(),backupRetention:Rt.optional(),allocatedStorage:s.number().optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()},j_={databaseType:s.literal("Aurora"),writer:qo.optional(),readers:Qo.optional(),backupRetention:Rt.optional(),preferredMaintenanceWindow:s.string().optional(),monitoringInterval:Jo.optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()},U_={databaseType:s.literal("GlobalAurora"),primaryRegion:s.string().min(1,d.GLOBAL_AURORA.PRIMARY_REGION_REQUIRED),secondaryRegions:s.array(s.string()).optional(),globalClusterIdentifier:s.string().optional(),enableGlobalWriteForwarding:s.boolean().optional(),writer:qo.optional(),readers:Qo.optional(),backupRetention:Rt.optional(),preferredMaintenanceWindow:s.string().optional(),monitoringInterval:Jo.optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()},L_=s.object({appName:le,nameProvidedByFlag:s.boolean().optional(),databaseName:s.string().min(1,d.REQUIRED.DATABASE_NAME).max(63,d.MAX_LENGTH.DATABASE_NAME).regex(z.DATABASE_NAME,d.DATABASE_NAME),resourceName:U.optional(),connectionConfig:s.object({connectToCompute:s.array(s.string()).optional(),connectToServices:s.array(s.string()).optional()}).strict().optional()}).strict(),F_={databaseType:s.literal("ClickHouse"),instanceType:s.string().optional(),coldTier:s.union([s.object({mode:s.literal("s3")}).strict(),s.literal(!1)]).optional(),optimiseSchedule:s.union([s.string(),s.literal(!1)]).optional(),backupSchedule:s.union([s.string(),s.literal(!1)]).optional(),backupRetentionDays:Rt.optional()},HP=ec.extend(M_).strict(),XP=ec.extend(j_).strict(),YP=ec.extend(U_).strict(),JP=L_.extend(F_).strict(),Xj=s.discriminatedUnion("databaseType",[HP,XP,YP,JP]),ng=ec.extend({resourceName:U}).strict(),qP=ng.extend(M_).strict(),QP=ng.extend(j_).strict(),ek=ng.extend(U_).strict(),tk=L_.extend({resourceName:U}).strict(),rk=tk.extend(F_).strict(),Yj=s.discriminatedUnion("databaseType",[qP,QP,ek,rk]),Jj=s.object({appName:le,databaseName:s.string().min(1,d.REQUIRED.DATABASE_NAME),maxConnections:s.number().int(d.MAX_CONNECTIONS.INTEGER).min(1,d.MAX_CONNECTIONS.MIN).max(100,d.MAX_CONNECTIONS.MAX).optional(),maxIdleConnections:s.number().int(d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.INTEGER).min(0,d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MIN).max(100,d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MAX).optional(),connectionBorrowTimeout:s.number().int(d.PROXY_CONFIG.BORROW_TIMEOUT.INTEGER).min(1,d.PROXY_CONFIG.BORROW_TIMEOUT.MIN).max(3600,d.PROXY_CONFIG.BORROW_TIMEOUT.MAX).optional(),requireTLS:s.boolean().optional(),nameProvidedByFlag:s.boolean().optional()}).strict(),nk=["S","N","B"],Ks=s.object({name:s.string(),type:s.enum(nk)}).strict(),Z_=s.object({name:U,partitionKey:Ks,sortKey:Ks.optional(),globalSecondaryIndexes:s.array(s.object({indexName:s.string(),partitionKey:Ks,sortKey:Ks.optional()}).strict()).optional(),ttlAttribute:s.string().optional(),stream:s.boolean().optional(),variableName:s.string().optional(),extraProperties:s.array(ye).optional()}).strict(),ok=s.object({mode:s.literal("s3")}).strict(),V_=s.object({name:U,type:s.literal("ClickHouse"),databaseName:T_,instanceType:s.string().optional(),coldTier:s.union([ok,s.literal(!1)]).optional(),optimiseSchedule:s.union([s.string(),s.literal(!1)]).optional(),backupSchedule:s.union([s.string(),s.literal(!1)]).optional(),backupRetentionDays:Rt.optional(),variableName:s.string().optional(),extraProperties:s.array(ye).optional()}).strict();var ik=s.object({count:s.number().int(d.NAT_GATEWAY.INTEGER).min(0,d.NAT_GATEWAY.MIN).max(3,d.NAT_GATEWAY.MAX).optional()}).strict().describe("NAT gateway configuration"),B_=we(ik),og=s.enum(["cloudwatch","s3"]),ak=s.object({destination:og.optional(),retentionDays:s.number().int(d.RETENTION_DAYS.INTEGER).min(1,d.RETENTION_DAYS.MIN).max(365,d.RETENTION_DAYS.MAX).optional(),trafficType:s.enum(["ALL","ACCEPT","REJECT"]).optional()}).strict().describe("VPC flow log configuration"),G_=we(ak),sk=s.object({s3:s.boolean().optional(),dynamodb:s.boolean().optional()}).strict().describe("Gateway VPC endpoints (FREE)"),ck=we(sk),uk=s.object({ecr:s.boolean().optional(),secretsManager:s.boolean().optional(),kms:s.boolean().optional(),cloudwatchLogs:s.boolean().optional(),ssm:s.boolean().optional(),sts:s.boolean().optional()}).strict().describe("Interface VPC endpoints (cost per hour)"),lk=we(uk),dk=s.object({gateway:ck.optional(),interface:lk.optional()}).strict().describe("VPC endpoints configuration"),W_=we(dk),tc=s.object({maxAzs:s.number().int(d.MAX_AZS.INTEGER).min(1,d.MAX_AZS.MIN).max(3,d.MAX_AZS.MAX).optional(),natGateways:B_.optional(),flowLogs:G_.optional(),vpcEndpoints:W_.optional(),cidrMask:s.number().int(d.CIDR_MASK.INTEGER).min(16,d.CIDR_MASK.MIN).max(28,d.CIDR_MASK.MAX).optional()}).strict(),K_=s.string().min(1,d.REQUIRED.NETWORK_NAME).max(50,d.MAX_LENGTH.NETWORK_NAME).regex(z.RESOURCE_NAME,d.RESOURCE_NAME),H_=tc.extend({name:K_}).strict(),X_=we(tc),rU=s.object({appName:le,networkName:K_.optional(),maxAzs:s.number().int(d.MAX_AZS.INTEGER).min(1,d.MAX_AZS.MIN).max(3,d.MAX_AZS.MAX).optional(),natGateways:B_.optional(),flowLogs:G_.optional(),vpcEndpoints:W_.optional()}).strict(),mk=z.CIDR,ig=s.string().regex(mk,d.CIDR),pk=s.object({kind:s.literal("database"),resource:s.string().min(1,d.REQUIRED.RESOURCE_REFERENCE),name:U,allowedFromCidrs:s.array(ig),access:s.enum(["read","write","readWrite"]).optional()}).strict(),fk=s.object({kind:s.literal("ecsService"),resource:s.string().min(1,d.REQUIRED.RESOURCE_REFERENCE),serviceName:s.string().min(1,d.REQUIRED.SERVICE_NAME),name:U,allowedFromCidrs:s.array(ig),port:Sr.optional()}).strict(),gk=s.discriminatedUnion("kind",[pk,fk]),nU=s.object({name:U,peerAppName:s.string().min(1,d.REQUIRED.APP_NAME),peerAccountId:s.string().regex(z.AWS_ACCOUNT_ID,d.AWS_ACCOUNT_ID),peerRegion:s.string().min(1,d.VPC_PEER.REGION_REQUIRED).optional(),peerVpcId:s.string().regex(z.VPC_ID,d.VPC_ID).optional(),peerVpcCidr:ig.optional(),peerRoleArn:s.string().regex(z.ROLE_ARN,d.ROLE_ARN).optional(),peerRouteTableIds:s.array(s.string().min(1,d.VPC_PEER.ROUTE_TABLE_ID_REQUIRED)).optional(),localVpcName:s.string().min(1,d.REQUIRED.NETWORK_NAME).optional(),enableDnsResolution:s.boolean().optional()}).strict(),oU=s.object({name:U,requesterAccountIds:s.array(s.string().regex(z.AWS_ACCOUNT_ID,d.AWS_ACCOUNT_ID)).min(1,d.VPC_PEER.MIN_REQUESTER_ACCOUNTS),localVpcName:s.string().min(1,d.REQUIRED.NETWORK_NAME).optional(),publishToSsm:s.boolean().optional(),exposedResources:s.array(gk).optional()}).strict();var rc=["storage","cdn","compute"],vk=s.object({sid:s.string().optional(),effect:s.enum(["Allow","Deny"]),principals:s.array(s.string()),actions:s.array(s.string()),resources:s.array(s.string()).optional(),conditions:s.record(s.string(),s.record(s.string(),s.union([s.string(),s.array(s.string())]))).optional()}).strict(),Y_=s.object({name:U,bucketName:s.string().optional(),publicReadAccess:s.boolean().optional(),websiteHosting:s.object({indexDocument:s.string(),errorDocument:s.string().optional()}).strict().optional(),backupVaultTier:s.enum(at).optional(),versioned:s.boolean().optional(),encryption:s.enum(Tn).optional(),kmsKeyArn:s.string().optional(),cors:s.array(s.object({allowedOrigins:s.array(s.string()),allowedMethods:s.array(s.string()),allowedHeaders:s.array(s.string()).optional(),exposedHeaders:s.array(s.string()).optional(),maxAge:s.number().optional()}).strict()).optional(),deployment:s.object({source:s.string(),prune:s.boolean().optional(),cacheControl:s.object({maxAge:s.number().optional(),immutable:s.boolean().optional()}).strict().optional()}).strict().optional(),retain:s.boolean().optional(),resourcePolicyStatements:s.array(vk).optional(),stackPlacement:s.enum(rc).optional(),variableName:s.string().optional(),extraProperties:s.array(ye).optional()}).strict().refine(e=>e.encryption!=="KMS"||!!e.kmsKeyArn,{message:d.KMS.KEY_REQUIRED}),lU=s.object({appName:le,bucketName:I_,nameProvidedByFlag:s.boolean().optional(),storagePreset:s.enum(x_).optional(),publicReadAccess:s.boolean().optional(),websiteHosting:s.object({indexDocument:s.string(),errorDocument:s.string().optional()}).strict().optional(),backupVaultTier:s.enum(at).optional(),versioned:s.boolean().optional(),encryption:s.enum(Tn).optional(),kmsKeyArn:s.string().optional(),cors:s.array(s.object({allowedOrigins:s.array(s.string()),allowedMethods:s.array(s.string()),allowedHeaders:s.array(s.string()).optional(),exposedHeaders:s.array(s.string()).optional(),maxAge:s.number().optional()}).strict()).optional(),connectionConfig:s.object({connectToCompute:s.array(s.string()).optional(),connectToServices:s.array(s.string()).optional()}).strict().optional()}).strict().refine(e=>e.encryption!=="KMS"||!!e.kmsKeyArn,{message:d.KMS.KEY_REQUIRED,path:["kmsKeyArn"]});var ag=s.enum(["DESTROY","RETAIN"]),J_=s.object({name:U,queueType:s.enum(["standard","fifo"]).default("standard"),visibilityTimeout:s.number().int(d.SQS.VISIBILITY_TIMEOUT.INTEGER).min(0,d.SQS.VISIBILITY_TIMEOUT.MIN).max(43200,d.SQS.VISIBILITY_TIMEOUT.MAX).optional(),retentionPeriod:s.number().int(d.SQS.RETENTION_PERIOD.INTEGER).min(60,d.SQS.RETENTION_PERIOD.MIN).max(1209600,d.SQS.RETENTION_PERIOD.MAX).optional(),contentBasedDeduplication:s.boolean().optional(),removalPolicy:ag.optional(),variableName:s.string().optional(),extraProperties:s.array(ye).optional()}).strict();var q_=s.object({type:s.literal("basic-auth"),username:s.string().min(1),password:s.string().min(1)}).strict(),Q_=s.object({name:U,defaultOriginRef:s.string(),behaviours:s.array(s.object({pathPattern:s.string(),originRef:s.string(),cachePolicy:s.enum(["CACHING_OPTIMIZED","CACHING_DISABLED"]).optional()}).strict()).optional(),customDomain:s.string().optional(),certificateArn:s.string().optional(),accessGate:s.union([s.literal(!1),q_]).optional(),extraProperties:s.array(ye).optional()}).strict(),yU=s.object({appName:s.string(),name:U.optional(),defaultOriginRef:s.string(),behaviours:s.array(s.object({pathPattern:s.string(),originRef:s.string(),cachePolicy:s.enum(["CACHING_OPTIMIZED","CACHING_DISABLED"]).optional()}).strict()).optional(),customDomain:s.string().optional(),certificateArn:s.string().optional(),accessGate:s.union([s.literal(!1),q_]).optional(),nameProvidedByFlag:s.boolean().optional()}).strict();var hk=Object.defineProperty,sg=(e,t)=>hk(e,"name",{value:t,configurable:!0}),yk=new Set(["t4g","c6g","c6gd","c6gn","c7g","c7gd","c7gn","r6g","r6gd","r7g","r7gd","m6g","m6gd","m7g","m7gd","a1","x2gd","im4gn","is4gen","i4g","hpc7g"]);function Pn(e){let t=e.split(".")[0]??"";return yk.has(t)?"ARM":"STANDARD"}sg(Pn,"getArchitectureForInstanceType");function nc(e,t){let n=Pn(e);return n!==t?{valid:!1,message:`Instance type '${e}' requires ${n} architecture, but '${t}' AMI was specified. Use a ${n==="ARM"?"Graviton instance (t4g, c6g, r6g, m6g, etc.)":"Intel/AMD instance (t3, c5, r5, m5, etc.)"} instead.`}:{valid:!0}}sg(nc,"validateArchitectureMatch");function eE(e,t){return Pn(e)===t}sg(eE,"isArchitectureCompatible");var bk=Object.defineProperty,oc=(e,t)=>bk(e,"name",{value:t,configurable:!0});var Sk=1;var _k=/^[A-Za-z0-9_.-]+$/,Ek=s.object({id:s.string().min(1,"buildSecret id cannot be empty").regex(_k,"buildSecret id may contain only letters, digits, '_', '.', and '-' (no comma, '=', or whitespace, which would break the buildx --secret argv)"),ssm:s.string().min(1,"ssm parameter name cannot be empty").optional(),secretsManager:s.object({name:s.string().min(1,"secret name cannot be empty").optional(),arn:s.string().min(1,"secret arn cannot be empty").optional(),field:s.string().min(1,"secret field cannot be empty").optional()}).strict().refine(e=>e.name===void 0!=(e.arn===void 0),"secretsManager requires exactly one of name or arn").optional(),env:s.string().min(1,"env variable name cannot be empty").optional()}).strict().superRefine((e,t)=>{[e.ssm,e.secretsManager,e.env].filter(n=>n!==void 0).length!==1&&t.addIssue({code:s.ZodIssueCode.custom,message:"buildSecret requires exactly one source (ssm, secretsManager, or env)"})}),Ak=s.union([s.string(),s.object({ssm:s.string().min(1,"ssm parameter name cannot be empty").optional(),secretsManager:s.object({name:s.string().min(1,"secret name cannot be empty").optional(),arn:s.string().min(1,"secret arn cannot be empty").optional(),field:s.string().min(1,"secret field cannot be empty").optional()}).strict().refine(e=>e.name===void 0!=(e.arn===void 0),"secretsManager requires exactly one of name or arn").optional(),env:s.string().min(1,"env variable name cannot be empty").optional(),acknowledgePublic:s.boolean().optional()}).strict().superRefine((e,t)=>{[e.ssm,e.secretsManager,e.env].filter(n=>n!==void 0).length!==1&&t.addIssue({code:s.ZodIssueCode.custom,message:"buildArg value requires exactly one source (ssm, secretsManager, or env)"})})]),gt=s.object({path:s.string(),context:s.string().min(1,"context cannot be empty").optional(),target:s.string().min(1,"target cannot be empty").optional(),buildArgs:s.record(s.string(),Ak).optional(),buildSecrets:s.array(Ek).optional()}).strict(),AU=gt.partial();function xk(e,t){if(t===void 0)return e;let n=t.context??e.context,o=t.target??e.target,r=t.buildArgs??e.buildArgs,i=t.buildSecrets??e.buildSecrets;return{path:t.path??e.path,...n!==void 0&&{context:n},...o!==void 0&&{target:o},...r!==void 0&&{buildArgs:r},...i!==void 0&&{buildSecrets:i}}}oc(xk,"mergeDockerBuild");function cg(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}oc(cg,"isRecord");function tE(e){if(!cg(e)||typeof e.path!="string"||e.path.length===0)return;let t=typeof e.context=="string"&&e.context.length>0?e.context:void 0,n=typeof e.target=="string"&&e.target.length>0?e.target:void 0,o=cg(e.buildArgs)&&Object.keys(e.buildArgs).length>0?e.buildArgs:void 0,r=Array.isArray(e.buildSecrets)&&e.buildSecrets.length>0?e.buildSecrets:void 0,i={path:e.path,...t!==void 0&&{context:t},...n!==void 0&&{target:n},...o!==void 0&&{buildArgs:o},...r!==void 0&&{buildSecrets:r}},a=gt.safeParse(i);return a.success?a.data:void 0}oc(tE,"normaliseDockerBuild");function $k(e){if(e===void 0)return;let t=tE(e);return t===void 0?void 0:JSON.stringify(t)}oc($k,"dockerBuildFingerprint");var Ik=s.object({name:s.string(),clusterName:s.string().optional(),docker:gt.optional(),containerPort:s.number().optional(),secrets:s.array(s.string()).optional(),ssmSecretsPath:s.string().optional(),importedSecretNames:s.array(s.string()).optional()}).strict(),Tk=s.object({type:s.enum(ft),name:s.string(),source:s.string()}).strict(),Nk=s.object({repositoryName:s.string()}).strict(),Rk=["x86_64","arm64"],Pk=s.object({name:s.string(),secrets:s.array(s.string()).optional(),ssmSecretsPath:s.string().optional(),importedSecretNames:s.array(s.string()).optional(),docker:gt.optional(),imageKey:s.string().optional(),architecture:s.enum(Rk).optional()}).strict(),kk=s.object({templateHash:s.string(),synthTimestamp:s.string()}).strict(),Ck=s.object({constructPath:s.string().max(512),group:s.string().max(128),resourceType:s.string().max(256)}).strict(),Ok=s.object({synthesisedBy:s.string().min(1).max(128),minimumEngineVersion:s.string().min(1).max(32),maximumEngineMajor:s.number().int().min(0).optional(),minimumAwsCdkCli:s.string().min(1).max(32).optional()}).strict(),xU=s.object({version:s.literal(Sk),generatedAt:s.string(),appName:s.string(),services:s.array(Ik),lambdas:s.array(Pk),pattern:Tk.optional(),ecr:Nk.optional(),stacks:s.record(s.string(),kk),resourceMap:s.record(s.string(),Ck).optional(),engineCompat:Ok.optional()}).strict();var Dk=Object.defineProperty,wk=(e,t)=>Dk(e,"name",{value:t,configurable:!0});function nE(e){return!(e.image!==void 0&&e.docker!==void 0)}wk(nE,"imageDockerMutexCheck");var oE=s.number().int(d.CAPACITY.MIN.INTEGER).min(Qf,d.GENERATOR_CAPACITY.MIN.MIN).max(eg,d.GENERATOR_CAPACITY.MIN.MAX),iE=s.number().int(d.CAPACITY.MAX.INTEGER).min(Qf,d.GENERATOR_CAPACITY.MAX.MIN).max(eg,d.GENERATOR_CAPACITY.MAX.MAX),kn=s.number().int(d.LAMBDA.MEMORY.INTEGER).min(b_,d.LAMBDA.MEMORY.MIN).max(S_,d.LAMBDA.MEMORY.MAX).refine(e=>e===128||e%64===0,d.LAMBDA.MEMORY.MULTIPLE),aE=s.string().regex(z.LAMBDA_RUNTIME_IDENTIFIER,d.LAMBDA.RUNTIME),ug=s.number().int(d.CPU.INTEGER).min(256,d.CPU.MIN).max(4096,d.CPU.MAX),ac=s.number().int(d.CAPACITY.DESIRED.INTEGER).min(0,d.CAPACITY.DESIRED.MIN).max(In,d.CAPACITY.DESIRED.MAX),ei=s.object({connectToDatabase:s.array(s.string()).optional()}).strict(),zk=s.object({minSize:s.number().int(d.CAPACITY.WARM_POOL.MIN_SIZE.INTEGER).min(0,d.CAPACITY.WARM_POOL.MIN_SIZE.MIN).max(__,d.CAPACITY.WARM_POOL.MIN_SIZE.MAX).optional(),reuseOnScaleIn:s.boolean().optional()}).strict(),lg=s.object({instanceType:s.string().optional(),amiHardwareType:s.enum(Zs).optional(),minCapacity:s.number().int(d.CAPACITY.MIN.INTEGER).min(0,d.CAPACITY.MIN.MIN_0).max(In,d.CAPACITY.MIN.MAX).optional(),maxCapacity:s.number().int(d.CAPACITY.MAX.INTEGER).min(1,d.CAPACITY.MAX.MIN_1).max(In,d.CAPACITY.MAX.MAX).optional(),memoryLimitMiB:Xo(128).optional(),warmPool:zk.optional(),extraProperties:s.array(ye).optional()}).strict().superRefine((e,t)=>{if(!e.instanceType||!e.amiHardwareType)return;let n=nc(e.instanceType,e.amiHardwareType);n.valid||t.addIssue({code:"custom",message:n.message??d.ARCHITECTURE_MISMATCH,path:["instanceType"]})}).superRefine((e,t)=>{e.minCapacity===0&&!e.warmPool&&t.addIssue({code:"custom",message:d.CAPACITY.WARM_POOL_REQUIRED,path:["minCapacity"]}),e.warmPool?.minSize!==void 0&&e.maxCapacity!==void 0&&e.warmPool.minSize>e.maxCapacity&&t.addIssue({code:"custom",message:d.CAPACITY.WARM_POOL.MIN_SIZE_EXCEEDS_MAX_CAPACITY,path:["warmPool","minSize"]})}),Mk=s.enum(Go).describe(`Compute type must be one of: ${Go.join(", ")}`),dg=s.enum(An).describe(`ECS capacity provider must be one of: ${An.join(", ")}`),mg=s.string().refine(e=>Xe(Vs,e),{message:d.INSTANCE_TYPE}),sE=s.object({sourceType:s.enum(["sqs","dynamodb","eventbridge"]),sourceRef:s.string().describe("Name of the source resource"),batchSize:s.number().int(d.BATCH_SIZE.INTEGER).min(1,d.BATCH_SIZE.MIN).max(1e4,d.BATCH_SIZE.MAX).optional(),startingPosition:s.enum(["TRIM_HORIZON","LATEST"]).optional(),maxBatchingWindow:s.number().int(d.BATCHING_WINDOW.INTEGER).min(0,d.BATCHING_WINDOW.MIN).max(300,d.BATCHING_WINDOW.MAX).optional(),reportBatchItemFailures:s.boolean().optional()}).strict(),jk=s.object({name:s.string().min(1,d.REQUIRED.CONTAINER_NAME).optional(),image:s.string().optional(),port:Sr.optional(),environment:Nn.optional(),secretsImport:N_.optional(),command:s.array(s.string()).optional(),entryPoint:s.array(s.string()).optional(),essential:s.boolean().optional(),healthCheck:s.object({command:s.array(s.string()),interval:s.number().int(d.HEALTH_CHECK.INTERVAL.INTEGER).min(5,d.HEALTH_CHECK.INTERVAL.MIN).max(300,d.HEALTH_CHECK.INTERVAL.MAX).optional(),timeout:s.number().int(d.HEALTH_CHECK.TIMEOUT.INTEGER).min(2,d.HEALTH_CHECK.TIMEOUT.MIN).max(60,d.HEALTH_CHECK.TIMEOUT.MAX).optional(),retries:s.number().int(d.HEALTH_CHECK.RETRIES.INTEGER).min(1,d.HEALTH_CHECK.RETRIES.MIN).max(10,d.HEALTH_CHECK.RETRIES.MAX).optional(),startPeriod:s.number().int(d.HEALTH_CHECK.START_PERIOD.INTEGER).min(0,d.HEALTH_CHECK.START_PERIOD.MIN).max(300,d.HEALTH_CHECK.START_PERIOD.MAX).optional()}).strict().optional(),ssmSecrets:s.array(s.string().regex(z.SECRET_NAME,d.SECRET_NAME)).optional(),extraProperties:s.array(ye).optional()}).strict(),cE=s.string().min(1,d.REQUIRED.SERVICE_NAME).max(255,d.MAX_LENGTH.SERVICE_NAME).regex(z.ECS_SERVICE_NAME,d.ECS_SERVICE_NAME),uE=s.object({domain:s.string().optional(),loadBalancer:s.union([s.literal(!1),s.enum(Ls)]).optional(),directAccess:s.boolean().optional(),extraProperties:s.array(ye).optional()}).strict().refine(e=>!(e.directAccess&&e.domain),{message:d.DIRECT_ACCESS.NO_DOMAIN,path:["directAccess"]}).refine(e=>!(e.directAccess&&typeof e.loadBalancer=="string"),{message:d.DIRECT_ACCESS.NO_LOAD_BALANCER}).describe("Cluster-level configuration"),ic=s.object({path:s.string().optional(),host:s.string().optional(),priority:s.number().int(d.PRIORITY.INTEGER).min(1,d.PRIORITY.MIN).max(5e4,d.PRIORITY.MAX).optional(),healthCheckPath:s.string().optional()}).strict().describe("Path/host-based routing configuration"),Uk=s.object({desiredCount:ac.optional(),minCapacity:s.number().int(d.CAPACITY.MIN.INTEGER).min(0,d.CAPACITY.MIN.MIN_0).max(In,d.CAPACITY.MIN.MAX).optional(),maxCapacity:s.number().int(d.CAPACITY.MAX.INTEGER).min(1,d.CAPACITY.MAX.MIN_1).max(In,d.CAPACITY.MAX.MAX).optional(),scalingType:s.enum(Fs).optional()}).strict().refine(br.check,br.params).describe("ECS service scaling configuration"),lE=s.object({name:cE,docker:gt.optional(),needsDatabaseConnection:s.boolean().optional(),needsStorageConnection:s.boolean().optional(),needsMessagingConnection:s.boolean().optional(),image:s.string().optional(),containers:s.array(jk).optional(),routing:s.union([ic,s.array(ic).min(1)]).optional(),cpu:ug.optional(),memoryLimitMiB:Xo(512).optional(),desiredCount:ac.optional(),scaling:we(Uk).optional(),capacityProvider:dg,ec2Config:lg.optional(),ssmSecretsPath:s.string().regex(z.SSM_PATH,d.SSM_PATH).optional(),extraProperties:s.array(ye).optional(),alarms:C_.optional()}).strict().superRefine((e,t)=>{nE(e)||t.addIssue({code:"custom",path:["docker"],message:d.IMAGE_DOCKER_MUTEX})}).describe("Configuration for a service in an ECS cluster"),dE=s.object({name:U,type:Mk,needsConnection:s.boolean(),connectedDatabase:s.array(s.string()).optional(),connectedStorage:s.array(s.string()).optional(),connectedMessaging:s.array(s.string()).optional(),cluster:uE.optional(),services:s.array(lE).optional(),docker:gt.partial().optional(),deployment:s.enum(js).optional(),codePath:s.string().optional(),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(Bs,d.LAMBDA.TIMEOUT.MIN).max(Gs,d.LAMBDA.TIMEOUT.MAX).optional(),memory:kn.optional(),handler:s.string().optional(),runtime:aE.optional(),environment:Nn.optional(),secrets:Nn.optional(),eventSources:s.array(sE).optional(),functionUrl:s.object({authType:s.enum(Ko)}).strict().optional(),description:s.string().optional(),scheduleExpression:s.string().optional(),architecture:s.enum(Us).optional(),ephemeralStorageSize:s.number().int(d.EPHEMERAL_STORAGE.INTEGER).min(512,d.EPHEMERAL_STORAGE.MIN).max(10240,d.EPHEMERAL_STORAGE.MAX).optional(),functionName:s.string().optional(),ssmSecrets:s.array(s.string()).optional(),ssmSecretsPath:s.string().optional(),alarms:D_.optional(),instanceType:mg.optional(),enableSSH:s.boolean().optional(),keyName:s.string().optional(),userData:s.string().optional(),securityGroups:s.array(s.string()).optional(),variableName:s.string().optional(),extraProperties:s.array(ye).optional()}).strict().superRefine((e,t)=>{if(e.type==="ecs"&&e.services)for(let n=0;n<e.services.length;n++){let o=e.services[n];o?.ec2Config?.instanceType&&!o.ec2Config.amiHardwareType&&Pn(o.ec2Config.instanceType)!=="ARM"&&t.addIssue({code:"custom",message:`Service '${o.name??n}' uses instance type '${o.ec2Config.instanceType}' (x86), which requires Docker images built for linux/amd64. The default build targets linux/arm64 (Graviton). Use a Graviton instance type (t4g, c6g, r6g, m6g, etc.) or set amiHardwareType: "STANDARD" to acknowledge x86.`,path:["services",n,"ec2Config","instanceType"]})}e.type==="lambda"&&e.deployment==="container"&&e.architecture==="X86_64"&&t.addIssue({code:"custom",message:"Lambda architecture 'X86_64' requires Docker images built for linux/amd64, but the default build targets linux/arm64. Use 'ARM_64' for Graviton Lambdas (recommended) or ensure your build pipeline targets linux/amd64.",path:["architecture"]})}),OU=s.object({appName:le,clusterName:U,containerPort:Sr,nameProvidedByFlag:s.boolean().optional(),ecrRepository:s.string().optional(),capacityProvider:dg.optional(),useAppEcr:s.boolean().optional(),desiredCount:ac.optional(),cpu:ug.optional(),memoryLimitMiB:Xo(512).optional(),minCapacity:oE.optional(),maxCapacity:iE.optional(),ec2Config:lg.optional(),connectionConfig:ei.optional()}).strict().refine(br.check,br.params),DU=s.object({appName:le,functionName:U,nameProvidedByFlag:s.boolean().optional(),lambdaType:s.enum(["basic","web","custom"]).optional(),ecrRepository:s.string().optional(),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(Bs,d.LAMBDA.TIMEOUT.MIN).max(Gs,d.LAMBDA.TIMEOUT.MAX).optional(),memory:kn.optional(),enableFunctionUrl:s.boolean().optional(),description:s.string().optional(),enableCors:s.boolean().optional(),corsOrigins:s.string().optional(),corsHeaders:s.string().optional(),corsMethods:s.array(s.enum(A_)).optional(),corsCredentials:s.boolean().optional(),connectionConfig:ei.optional()}).strict(),wU=s.object({appName:le,instanceName:U,nameProvidedByFlag:s.boolean().optional(),instanceType:mg.optional(),enableSSH:s.boolean().optional(),minCapacity:oE.optional(),maxCapacity:iE.optional(),connectionConfig:ei.optional()}).strict().refine(br.check,br.params),zU=s.object({appName:le,clusterName:U,serviceName:cE,capacityProvider:dg,containerPort:Sr.optional(),cpu:ug.optional(),memoryLimitMiB:Xo(512).optional(),desiredCount:ac.optional(),ec2Config:lg.optional(),routing:s.union([ic,s.array(ic).min(1)]).optional(),docker:gt.partial().optional(),nameProvidedByFlag:s.boolean().optional(),connectionConfig:ei.optional()}).strict(),pg=s.object({appName:le,computeName:U,nameProvidedByFlag:s.boolean().optional(),connectionConfig:ei.optional()}).strict(),Lk=pg.extend({type:s.literal("ecs"),cluster:uE.optional(),services:s.array(lE).min(1,d.SERVICE.MIN_REQUIRED),docker:gt.partial().optional()}).strict().refine(e=>{let t=e.services.filter(n=>n.containers?.some(o=>o.port));return t.length>1?t.every(n=>(Array.isArray(n.routing)?n.routing:n.routing?[n.routing]:[]).some(o=>o.path||o.host)):!0},{message:d.SERVICE.ROUTING_REQUIRED}).refine(e=>{let t=e.services.map(n=>n.name);return new Set(t).size===t.length},{message:d.SERVICE.UNIQUE_WITHIN_CLUSTER}),Fk=pg.extend({type:s.literal("lambda"),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(Bs,d.LAMBDA.TIMEOUT.MIN).max(Gs,d.LAMBDA.TIMEOUT.MAX).optional(),memory:kn.optional(),handler:s.string().optional(),runtime:aE.optional(),environment:Nn.optional(),secrets:Nn.optional(),description:s.string().optional(),functionUrl:s.union([s.object({authType:s.enum(Ko).optional()}).strict(),s.literal(!1)]).optional(),eventSources:s.array(sE).optional()}).strict(),Zk=pg.extend({type:s.literal("ec2"),instanceType:mg.optional(),enableSSH:s.boolean().optional(),keyName:s.string().optional(),userData:s.string().optional(),securityGroups:s.array(s.string()).optional()}).strict(),MU=s.discriminatedUnion("type",[Lk,Fk,Zk]),rE=s.object({path:s.string().min(1,d.REQUIRED.ROUTING_PATH),priority:s.number().int(d.PRIORITY.INTEGER).min(1,d.PRIORITY.MIN).max(5e4,d.PRIORITY.MAX).optional()}).strict(),mE=s.object({name:s.string().min(1,d.REQUIRED.SERVICE_NAME).max(255,d.MAX_LENGTH.SERVICE_NAME).regex(z.RESOURCE_NAME,d.RESOURCE_NAME),serviceType:s.enum(["web","worker"]).optional(),docker:gt.partial().optional(),containerPort:Sr.optional(),needsDatabaseConnection:s.boolean().optional(),routing:s.union([rE,s.array(rE).min(1)]).optional()}).strict().superRefine((e,t)=>{e.serviceType==="worker"&&(e.containerPort!==void 0&&t.addIssue({code:"custom",path:["containerPort"],message:"Worker services are not reachable inbound; remove containerPort."}),e.routing!==void 0&&t.addIssue({code:"custom",path:["routing"],message:"Worker services have no ALB route; remove routing."}))}),jU=s.object({appName:le,instanceType:s.string().optional()}).strict();var fg=s.object({memorySize:kn.optional(),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(1,d.LAMBDA.TIMEOUT.MIN).max(900,d.LAMBDA.TIMEOUT.MAX).optional(),ephemeralStorageSize:s.number().int(d.EPHEMERAL_STORAGE.INTEGER).min(512,d.EPHEMERAL_STORAGE.MIN).max(10240,d.EPHEMERAL_STORAGE.MAX).optional()}).strict(),pE=s.object({type:s.enum(qf).optional(),databaseName:s.string().optional(),databaseEngine:s.enum($n).optional(),deletionProtection:s.boolean().optional(),backupRetention:Rt.optional(),port:Hs.optional(),publiclyAccessible:s.boolean().optional(),allowedIpCidr:s.string().optional(),instanceType:s.string().optional(),allocatedStorage:s.number().int(d.ALLOCATED_STORAGE.INTEGER).min(20,d.ALLOCATED_STORAGE.MIN).max(65536,d.ALLOCATED_STORAGE.MAX).optional(),multiAz:s.boolean().optional(),readReplica:Js.optional(),writer:qo.optional(),readers:Qo.optional(),allowVpcAccess:s.boolean().optional(),monitoringInterval:Jo.optional(),preferredMaintenanceWindow:s.string().optional(),databaseInsights:qs.optional(),proxy:Ys.optional(),credentials:Xs.optional(),encryption:Qs.optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()}).strict(),fE=s.object({server:fg.optional(),imageOptimisation:fg.optional(),revalidation:fg.optional()}).strict(),gg=s.object({versioned:s.boolean().optional()}).strict(),gE=s.object({assets:gg.optional(),cache:gg.optional(),media:gg.optional()}).strict(),Vk=s.object({visibilityTimeout:s.number().int(d.SQS.VISIBILITY_TIMEOUT.INTEGER).min(0,d.SQS.VISIBILITY_TIMEOUT.MIN).max(43200,d.SQS.VISIBILITY_TIMEOUT.MAX).optional(),messageRetentionPeriod:s.number().int(d.SQS.RETENTION_PERIOD.INTEGER).min(60,d.SQS.RETENTION_PERIOD.MIN).max(1209600,d.SQS.RETENTION_PERIOD.MAX).optional(),maxMessageSize:s.number().int(d.MAX_MESSAGE_SIZE.INTEGER).min(1024,d.MAX_MESSAGE_SIZE.MIN).max(262144,d.MAX_MESSAGE_SIZE.MAX).optional(),deadLetterQueue:s.union([s.literal(!1),s.object({enabled:s.boolean().optional(),maxReceiveCount:s.number().int(d.DLQ.MAX_RECEIVE_COUNT.INTEGER).min(1,d.DLQ.MAX_RECEIVE_COUNT.MIN).max(1e3,d.DLQ.MAX_RECEIVE_COUNT.MAX).optional()}).strict()]).optional()}).strict(),vE=s.object({revalidationQueue:Vk.optional()}).strict(),hE=s.object({domainNames:s.array(s.string()).optional(),certificateArn:s.string().optional()}).strict(),yE=s.record(s.string().regex(z.ENV_VAR_NAME,d.ENV_VAR_NAME),s.string()).optional(),Bk=s.object({type:s.literal("payload"),name:s.string().min(1,d.REQUIRED.PATTERN_NAME),domain:s.string().optional(),database:pE.optional(),compute:fE.optional(),storage:gE.optional(),messaging:vE.optional(),cdn:hE.optional(),environment:yE}).strict(),Gk=s.object({type:s.literal("nextjs"),name:s.string().min(1,d.REQUIRED.PATTERN_NAME),domain:s.string().optional(),database:pE.optional(),compute:fE.optional(),storage:gE.optional(),messaging:vE.optional(),cdn:hE.optional(),environment:yE}).strict(),vg=s.enum(Vo),Wk=s.object({command:s.string().min(1,d.REQUIRED.BUILD_COMMAND),outputDir:s.string().min(1,d.REQUIRED.OUTPUT_DIR)}).strict(),Kk=s.object({headers:s.boolean().optional(),contentSecurityPolicy:s.string().optional()}).strict(),Hk=s.object({to:s.string().min(1,d.REQUIRED.FORMS_TO).regex(z.EMAIL,d.EMAIL),from:s.string().regex(z.EMAIL,d.EMAIL).optional(),corsOrigin:s.string().regex(z.HTTP_ORIGIN,"corsOrigin must be an exact origin such as https://example.com (no path, no trailing slash)").optional(),maxConcurrency:s.number().int().min(1).max(100).optional()}).strict(),Xk=s.object({behaviours:s.array(s.unknown()).optional()}).strict(),hg=s.object({type:s.literal("staticsite"),name:s.string().min(1,d.REQUIRED.PATTERN_NAME),source:s.string().min(1,d.REQUIRED.SOURCE),build:Wk,routing:vg.optional(),security:Kk.optional(),domain:s.string().optional(),forms:Hk.optional(),cdn:Xk.optional()}).strict().superRefine((e,t)=>{if(e.forms===void 0)return;let n=e.domain;if(n===void 0||n===""){t.addIssue({code:"custom",path:["domain"],message:"A domain is required when forms are enabled: SES sends only from a verified identity, and the site's domain is the identity the pattern verifies"});return}let o=e.forms.from;o!==void 0&&!Os(o,n)&&t.addIssue({code:"custom",path:["forms","from"],message:`forms.from must be an address at ${n} (the verified SES identity) \u2014 for example noreply@${n}. Use forms.to for the recipient.`})}),ti=s.discriminatedUnion("type",[Bk,Gk,hg]),bE=s.enum(["lightweight","standard","resilient","custom"]),SE=s.object({type:s.enum(qf),instanceType:s.string().optional(),backupRetention:Rt.optional(),deletionProtection:s.boolean().optional(),encryption:s.union([s.object({useCMK:s.literal(!0)}).strict(),s.literal(!1)]).optional()}).strict(),_E=s.object({memorySize:kn.optional(),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(1,d.LAMBDA.TIMEOUT.MIN).max(900,d.LAMBDA.TIMEOUT.MAX).optional()}).strict();var EE=s.object({appName:le,type:tg,pattern:rg.optional(),patternConfig:ti.optional(),owner:s.string().optional(),tags:s.record(s.string(),s.string()).optional(),vpcId:s.string().optional(),network:tc.optional(),backup:P_.optional(),tunnel:k_.optional(),additionalNetworks:s.array(H_).optional(),database:s.array(z_),s3:s.array(Y_),compute:s.array(dE),dynamodb:s.array(Z_).optional(),clickhouse:s.array(V_).optional(),sqs:s.array(J_).optional(),cdn:Q_.optional(),customCodeBlocks:s.array(R_).optional(),additionalManagedImports:s.array(s.object({moduleSpecifier:s.string(),namedImports:s.array(s.string()),defaultImport:s.string().optional()}).strict()).optional()}).strict(),AE=s.object({name:le,type:tg,pattern:rg.optional(),patternTier:bE.optional(),patternDomain:s.string().optional(),source:s.string().min(1,d.REQUIRED.SOURCE).optional(),buildCommand:s.string().min(1,d.REQUIRED.BUILD_COMMAND).optional(),outputDir:s.string().min(1,d.REQUIRED.OUTPUT_DIR).optional(),routing:vg.optional(),formsTo:s.string().min(1,d.REQUIRED.FORMS_TO).regex(z.EMAIL,d.EMAIL).optional(),corsOrigin:s.string().regex(z.HTTP_ORIGIN,"corsOrigin must be an exact origin such as https://example.com (no path, no trailing slash)").optional(),customDatabase:SE.optional(),customCompute:_E.optional(),region:s.string().optional(),owner:s.string().optional(),includeDatabase:s.boolean().optional(),databaseName:s.string().min(1,d.DATABASE.NAME.REQUIRED).max(63,d.DATABASE.NAME.MAX_LENGTH).optional(),vpcId:s.string().optional(),network:X_.optional(),services:s.array(mE).optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()}).strict().superRefine((e,t)=>{e.formsTo!==void 0&&(e.patternDomain!==void 0&&e.patternDomain!==""||t.addIssue({code:"custom",path:["patternDomain"],message:"A domain is required when forms are enabled: SES sends only from a verified identity, and the site's domain is the identity the pattern verifies"}))}),oL=s.object({name:U,localResource:s.string().min(1),remoteApp:s.string().min(1),remoteResource:s.string().min(1),permission:s.enum(["read","write","read-write"]),remoteArn:s.string().optional()}).strict();var Yk=["fjall-managed","external","external-manual"],uL=s.enum(Yk);var xE=s.object({givenName:s.string().min(1),familyName:s.string().min(1),displayName:s.string().min(1).optional(),expires:s.string().min(1).optional()}).strict(),$E=s.object({name:s.string().min(1),path:s.string().min(1).optional()}).strict(),Jk=s.union([s.object({managedPolicyArn:s.string().min(1)}).strict(),s.object({customerManagedPolicy:$E}).strict()]),qk=s.object({managedPolicies:s.array(s.string().min(1)).optional(),inlinePolicy:s.record(s.string(),s.unknown()).optional(),customerManagedPolicies:s.array($E).optional(),permissionsBoundary:Jk.optional(),sessionDuration:s.string().min(1).optional(),description:s.string().optional(),accounts:s.union([s.array(s.string().min(1)),s.literal("all")]).optional(),includeManagementAccount:s.boolean().optional(),groups:s.array(s.string().min(1)).optional()}).strict(),Qk=s.object({description:s.string().optional()}).strict(),sc=s.string().regex(z.EMAIL,d.EMAIL),yg={groups:s.record(s.string(),Qk).optional(),permissionSets:s.record(s.string(),qk).optional(),memberships:s.record(s.string(),s.array(sc)).optional(),resolutionVersion:s.number().int().min(1).optional(),defaultPermissionSets:s.boolean().optional()},eC=s.discriminatedUnion("source",[s.object({...yg,source:s.literal("fjall-managed"),users:s.record(sc,xE)}).strict(),s.object({...yg,source:s.literal("external")}).strict(),s.object({...yg,source:s.literal("external-manual"),users:s.record(sc,xE).optional()}).strict()]),lL=s.object({name:U,type:s.literal("organisation").optional(),organisationName:s.string().min(1).optional(),orgEmail:sc.optional(),accounts:s.unknown().optional(),accountIds:s.record(s.string(),s.string()).optional(),identityCentre:s.union([eC,s.literal(!1)]).optional(),allowedRegions:s.array(s.string().min(1)).optional()}).strict();var tC=Object.defineProperty,rC=(e,t)=>tC(e,"name",{value:t,configurable:!0}),nC=[1,3,5,7,14,30,60,90,120,150,180,365,400,545,731,1827,3653],oC=s.object({buildkiteQueue:s.string().min(1,"buildkiteQueue cannot be empty").max(100).regex(/^[a-zA-Z0-9-_]+$/,"buildkiteQueue must be alphanumeric with hyphens/underscores"),buildkiteOrgSlug:s.string().min(1,"buildkiteOrgSlug cannot be empty").max(100).regex(/^[a-z0-9-]+$/,"buildkiteOrgSlug must be a lowercase Buildkite organisation slug"),agentTokenSsmParameterName:s.string().min(2).regex(/^\//,"agentTokenSsmParameterName must be a full path (leading /)").optional(),agentTokenKmsKeyArn:s.string().min(1).optional(),fjallApiKeySsmParameterName:s.string().min(2).regex(/^\//,"fjallApiKeySsmParameterName must be a full path (leading /)").optional(),instanceType:s.string().min(1).default("c8g.xlarge"),agentVolumeSizeGib:s.number().int().min(20).max(1e3).default(250),agentMinInstances:s.number().int().min(0).default(0),agentMaxInstances:s.number().int().min(1).default(2),agentsPerInstance:s.number().int().min(1).default(1),spotCapacityPercentage:s.number().int().min(0).max(100).default(0),scaleInIdlePeriodSeconds:s.number().int().min(60).default(600),disconnectAfterUptimeSeconds:s.number().int().min(3600).default(86400),maxInstanceLifetimeDays:s.number().int().min(1).max(365).default(7),terminateInstanceAfterJob:s.boolean().default(!1),purgeBuildsOnDiskFull:s.boolean().default(!0),terminateInstanceOnDiskFull:s.boolean().default(!1),logRetentionDays:s.number().int().min(1).default(30),agentLogRetentionDays:s.literal(nC).default(7),buildkiteAgentRelease:s.enum(["stable","beta","edge"]).default("stable"),buildkiteAgentTags:s.string().default(""),buildkiteAgentTimestampLines:s.boolean().default(!1),buildkiteAgentExperiments:s.string().default(""),buildkiteAgentTracingBackend:s.enum(["","datadog","opentelemetry"]).default(""),buildkiteAgentCancelGracePeriodSeconds:s.number().int().min(10).default(60),enableSecretsPlugin:s.boolean().default(!0),enableEcrPlugin:s.boolean().default(!1),enableDockerLoginPlugin:s.boolean().default(!1),enableDockerUserNamespaceRemap:s.boolean().default(!0),enableDockerExperimental:s.boolean().default(!1),dockerNetworkingProtocol:s.enum(["ipv4","dualstack"]).default("ipv4"),enableInstanceStorage:s.boolean().default(!1),mountTmpfsAtTmp:s.boolean().default(!0),buildkiteAgentEnableGitMirrors:s.boolean().default(!1),bootstrapScriptUrl:s.string().default(""),agentEnvFileUrl:s.string().default(""),scalerEventSchedulePeriod:s.string().min(1).default("1 minute"),scalerMinPollInterval:s.string().min(1).default("10s"),scaleOutFactor:s.string().min(1).default("1.0"),scaleOutWaitingForJobs:s.boolean().default(!1),rolePermissionsBoundaryArn:s.string().min(1).optional(),alarmSnsTopicArn:s.string().min(1).optional(),applicationId:s.string().min(1).optional(),costAllocationEnvironment:s.string().min(1).optional(),costAllocationOwner:s.string().min(1).optional()}).strict(),iC=oC.refine(e=>e.agentMinInstances<=e.agentMaxInstances,{message:"agentMinInstances must be <= agentMaxInstances"});function aC(e){let t=iC.safeParse(e);if(!t.success){let n=t.error.issues.map(o=>`  - ${o.path.join(".")||"(root)"}: ${o.message}`).join(`
 `);throw new Error(`Buildkite: invalid props:
-${n}`)}return t.data}tC(iC,"validateBuildkiteProps");var aC=Object.defineProperty,sC=(e,t)=>aC(e,"name",{value:t,configurable:!0});function cC(e){return`FjallDeployBoundary${e}`}sC(cC,"deployBoundaryName");var bg={Sid:"FjallInheritAdministratorAccess",Effect:"Allow",Action:"*",Resource:"*"},IE=[{Sid:"FjallDenyOrgAndAccountEscape",Effect:"Deny",Action:["organizations:LeaveOrganization","account:CloseAccount"],Resource:"*"},{Sid:"FjallDenyDisableAuditLogging",Effect:"Deny",Action:["cloudtrail:StopLogging"],Resource:"*"},{Sid:"FjallDenyBoundarySelfEscape",Effect:"Deny",Action:["iam:DeleteRolePermissionsBoundary"],Resource:"*"},{Sid:"FjallDenyDisableKmsKey",Effect:"Deny",Action:["kms:DisableKey"],Resource:"*"}],TE=[...IE,{Sid:"FjallDenyStandingHumanCredentials",Effect:"Deny",Action:["iam:CreateUser","iam:CreateLoginProfile","iam:CreateAccessKey","iam:CreateAccountAlias"],Resource:"*"},{Sid:"FjallDenyDisableConfigRecorder",Effect:"Deny",Action:["config:StopConfigurationRecorder"],Resource:"*"}],uC=[...TE,{Sid:"FjallDenyAccountPasswordPolicyTamper",Effect:"Deny",Action:["iam:UpdateAccountPasswordPolicy","iam:DeleteAccountPasswordPolicy"],Resource:"*"},{Sid:"FjallDenyDisableDefaultEbsEncryption",Effect:"Deny",Action:["ec2:DisableEbsEncryptionByDefault"],Resource:"*"}],$L={foundation:[bg,...IE],compliance:[bg,...TE],hardened:[bg,...uC]};var lC=Object.defineProperty,Te=(e,t)=>lC(e,"name",{value:t,configurable:!0});var Sg="sts.amazonaws.com";function dC(e){return`FjallDevDeploy${e}`}Te(dC,"devDeployRoleName");function mC(e){return`FjallDevProvisioner${e}`}Te(mC,"devProvisionerRoleName");function pC(e){return`FjallDevSyncWriter${e}`}Te(pC,"devSyncWriterRoleName");var fC="FjallDevBoundary";function NE(e){return`arn:aws:iam::${e}:policy/${fC}`}Te(NE,"devBoundaryPolicyArn");function RE(e){return`org:${e}:dev-provisioner`}Te(RE,"devProvisionerSubject");function PE(e){return`org:${e}:dev-sync`}Te(PE,"devSyncSubject");function gC(e){let{fjallOrgId:t,providerArn:n,issuerDomain:o}=e,r={[`${o}:aud`]:Sg};return[{Sid:"FjallMachineSubject",Effect:"Allow",Principal:{Federated:n},Action:"sts:AssumeRoleWithWebIdentity",Condition:{StringEquals:{...r,[`${o}:sub`]:`org:${t}:*`}}},{Sid:"FjallUserSubjects",Effect:"Allow",Principal:{Federated:n},Action:"sts:AssumeRoleWithWebIdentity",Condition:{StringEquals:r,StringLike:{[`${o}:sub`]:`org:${t}:user:*`}}},{Sid:"FjallServiceSubjects",Effect:"Allow",Principal:{Federated:n},Action:"sts:AssumeRoleWithWebIdentity",Condition:{StringEquals:{...r,[`${o}:sub`]:[`org:${t}:discovery`,`org:${t}:connection`,`org:${t}:org-setup`,`org:${t}:dev-substrate-setup`]}}}]}Te(gC,"buildNarrowedDeployTrustStatements");function vC(e){let{fjallOrgId:t,providerArn:n,issuerDomain:o,accountId:r}=e;return[{Sid:"FjallDevSubjectsThisAccount",Effect:"Allow",Principal:{Federated:n},Action:"sts:AssumeRoleWithWebIdentity",Condition:{StringEquals:{[`${o}:aud`]:Sg},StringLike:{[`${o}:sub`]:`org:${t}:dev:${r}:*`}}}]}Te(vC,"buildDevDeployTrustStatements");function _g(e){let{providerArn:t,issuerDomain:n,sid:o,subject:r}=e;return[{Sid:o,Effect:"Allow",Principal:{Federated:t},Action:"sts:AssumeRoleWithWebIdentity",Condition:{StringEquals:{[`${n}:aud`]:Sg,[`${n}:sub`]:r}}}]}Te(_g,"buildServiceSubjectTrustStatements");function hC(e){return _g({...e,sid:"FjallDevProvisionerSubject",subject:RE(e.fjallOrgId)})}Te(hC,"buildDevProvisionerTrustStatements");function yC(e){return _g({...e,sid:"FjallDevSyncSubject",subject:PE(e.fjallOrgId)})}Te(yC,"buildDevSyncWriterTrustStatements");function bC({accountId:e}){return[{Sid:"FjallDevEcsTaggedMutations",Effect:"Allow",Action:["ecs:UpdateService","ecs:DeleteService","ecs:RunTask","ecs:StopTask"],Resource:`arn:aws:ecs:*:${e}:*`,Condition:{StringEquals:{"aws:ResourceTag/fjall:dev":"true"}}},{Sid:"FjallDevEcsTaggedCreates",Effect:"Allow",Action:["ecs:RegisterTaskDefinition","ecs:CreateService"],Resource:"*",Condition:{StringEquals:{"aws:RequestTag/fjall:dev":"true"}}},{Sid:"FjallDevEcsTagOnCreate",Effect:"Allow",Action:["ecs:TagResource"],Resource:`arn:aws:ecs:*:${e}:*`,Condition:{StringEquals:{"ecs:CreateAction":["RegisterTaskDefinition","CreateService","RunTask"]}}},{Sid:"FjallDevEcsReads",Effect:"Allow",Action:["ecs:Describe*","ecs:List*"],Resource:"*"},{Sid:"FjallDevEcsDeregisterTaskDefinition",Effect:"Allow",Action:["ecs:DeregisterTaskDefinition"],Resource:`arn:aws:ecs:*:${e}:task-definition/fjall-dev-*`},{Sid:"FjallDevElbTaggedMutations",Effect:"Allow",Action:["elasticloadbalancing:ModifyRule","elasticloadbalancing:DeleteRule","elasticloadbalancing:ModifyTargetGroup","elasticloadbalancing:ModifyTargetGroupAttributes","elasticloadbalancing:DeleteTargetGroup","elasticloadbalancing:RegisterTargets","elasticloadbalancing:DeregisterTargets"],Resource:`arn:aws:elasticloadbalancing:*:${e}:*`,Condition:{StringEquals:{"aws:ResourceTag/fjall:dev":"true"}}},{Sid:"FjallDevElbTaggedCreates",Effect:"Allow",Action:["elasticloadbalancing:CreateTargetGroup","elasticloadbalancing:CreateRule"],Resource:`arn:aws:elasticloadbalancing:*:${e}:*`,Condition:{StringEquals:{"aws:RequestTag/fjall:dev":"true"}}},{Sid:"FjallDevElbTagOnCreate",Effect:"Allow",Action:["elasticloadbalancing:AddTags"],Resource:`arn:aws:elasticloadbalancing:*:${e}:*`,Condition:{StringEquals:{"elasticloadbalancing:CreateAction":["CreateTargetGroup","CreateRule"]}}},{Sid:"FjallDevElbReads",Effect:"Allow",Action:["elasticloadbalancing:Describe*"],Resource:"*"},{Sid:"FjallDevSsmDevTree",Effect:"Allow",Action:["ssm:GetParameter*","ssm:PutParameter","ssm:AddTagsToResource"],Resource:`arn:aws:ssm:*:${e}:parameter/fjall/dev/*`},{Sid:"FjallDevLogsMutations",Effect:"Allow",Action:["logs:PutRetentionPolicy","logs:DeleteLogGroup"],Resource:`arn:aws:logs:*:${e}:log-group:/fjall/dev/*`},{Sid:"FjallDevLogsTaggedCreate",Effect:"Allow",Action:["logs:CreateLogGroup","logs:TagResource"],Resource:`arn:aws:logs:*:${e}:log-group:/fjall/dev/*`,Condition:{StringEquals:{"aws:RequestTag/fjall:dev":"true"}}},{Sid:"FjallDevLogsRead",Effect:"Allow",Action:["logs:GetLogEvents","logs:DescribeLogStreams","logs:FilterLogEvents"],Resource:`arn:aws:logs:*:${e}:log-group:/fjall/dev/*`},{Sid:"FjallDevLogsDescribeGroups",Effect:"Allow",Action:["logs:DescribeLogGroups"],Resource:"*"},{Sid:"FjallDevKmsViaDevAlias",Effect:"Allow",Action:["kms:Encrypt","kms:Decrypt","kms:GenerateDataKey"],Resource:`arn:aws:kms:*:${e}:key/*`,Condition:{"ForAnyValue:StringLike":{"kms:ResourceAliases":"alias/fjall-dev-*"}}},{Sid:"FjallDevKmsSsmSecureString",Effect:"Allow",Action:["kms:Encrypt","kms:Decrypt","kms:GenerateDataKey"],Resource:`arn:aws:kms:*:${e}:key/*`,Condition:{StringLike:{"kms:ViaService":"ssm.*.amazonaws.com"}}},{Sid:"FjallDevEcrAuthToken",Effect:"Allow",Action:["ecr:GetAuthorizationToken"],Resource:"*"},{Sid:"FjallDevEcrPushPull",Effect:"Allow",Action:["ecr:PutImage","ecr:InitiateLayerUpload","ecr:UploadLayerPart","ecr:CompleteLayerUpload","ecr:BatchCheckLayerAvailability","ecr:BatchGetImage","ecr:GetDownloadUrlForLayer","ecr:DescribeImages"],Resource:`arn:aws:ecr:*:${e}:repository/*`},{Sid:"FjallDevPassDevPathRoles",Effect:"Allow",Action:["iam:PassRole"],Resource:`arn:aws:iam::${e}:role/fjall/dev/*`}]}Te(bC,"buildDevDeployPolicyStatements");function SC({accountId:e}){return[{Sid:"FjallDevProvisionerBoundedRoleWrites",Effect:"Allow",Action:["iam:CreateRole","iam:PutRolePolicy","iam:AttachRolePolicy"],Resource:`arn:aws:iam::${e}:role/fjall/dev/*`,Condition:{StringEquals:{"iam:PermissionsBoundary":NE(e)}}},{Sid:"FjallDevProvisionerPathRoleOps",Effect:"Allow",Action:["iam:DeleteRole","iam:DeleteRolePolicy","iam:DetachRolePolicy","iam:ListRolePolicies","iam:TagRole"],Resource:`arn:aws:iam::${e}:role/fjall/dev/*`},{Sid:"FjallDevProvisionerListRoles",Effect:"Allow",Action:["iam:ListRoles"],Resource:"*"},{Sid:"FjallDevProvisionerDevMasterSecrets",Effect:"Allow",Action:["secretsmanager:GetSecretValue"],Resource:`arn:aws:secretsmanager:*:${e}:secret:fjall-dev-*`},{Sid:"FjallDevProvisionerKmsDecryptViaSecretsManager",Effect:"Allow",Action:["kms:Decrypt"],Resource:`arn:aws:kms:*:${e}:key/*`,Condition:{StringLike:{"kms:ViaService":"secretsmanager.*.amazonaws.com"}}},{Sid:"FjallDevProvisionerDataApi",Effect:"Allow",Action:["rds-data:ExecuteStatement","rds-data:BatchExecuteStatement","rds-data:BeginTransaction","rds-data:CommitTransaction","rds-data:RollbackTransaction"],Resource:`arn:aws:rds:*:${e}:cluster:fjall-dev-*`},{Sid:"FjallDevProvisionerMetrics",Effect:"Allow",Action:["cloudwatch:GetMetricData"],Resource:"*"},{Sid:"FjallDevProvisionerOrphanDiscovery",Effect:"Allow",Action:["tag:GetResources"],Resource:"*"},{Sid:"FjallDevProvisionerSsmTeardown",Effect:"Allow",Action:["ssm:DeleteParameter*"],Resource:`arn:aws:ssm:*:${e}:parameter/fjall/dev/*`},{Sid:"FjallDevProvisionerLogsTeardown",Effect:"Allow",Action:["logs:DeleteLogGroup"],Resource:`arn:aws:logs:*:${e}:log-group:/fjall/dev/*`},{Sid:"FjallDevProvisionerTaggedTeardown",Effect:"Allow",Action:["ecs:UpdateService","ecs:StopTask","ecs:DeleteService","elasticloadbalancing:DeleteRule","elasticloadbalancing:DeleteTargetGroup","elasticloadbalancing:DeregisterTargets"],Resource:[`arn:aws:ecs:*:${e}:*`,`arn:aws:elasticloadbalancing:*:${e}:*`],Condition:{StringEquals:{"aws:ResourceTag/fjall:dev":"true"}}},{Sid:"FjallDevProvisionerTeardownReads",Effect:"Allow",Action:["ecs:Describe*","elasticloadbalancing:Describe*"],Resource:"*"},{Sid:"FjallDevProvisionerImageJanitor",Effect:"Allow",Action:["ecr:ListImages","ecr:DescribeImages","ecr:BatchDeleteImage"],Resource:`arn:aws:ecr:*:${e}:repository/*`},{Sid:"FjallDevProvisionerSsmReadAll",Effect:"Allow",Action:["ssm:GetParameter*"],Resource:`arn:aws:ssm:*:${e}:parameter/*`},{Sid:"FjallDevProvisionerKmsDecryptViaSsm",Effect:"Allow",Action:["kms:Decrypt"],Resource:`arn:aws:kms:*:${e}:key/*`,Condition:{StringLike:{"kms:ViaService":"ssm.*.amazonaws.com"}}}]}Te(SC,"buildDevProvisionerPolicyStatements");function _C({accountId:e}){return[{Sid:"FjallDevSyncPrefixReadWrite",Effect:"Allow",Action:["s3:GetObject","s3:PutObject"],Resource:`arn:aws:s3:::fjall-dev-sync-${e}-*/*`,Condition:{StringEquals:{"aws:ResourceAccount":e}}}]}Te(_C,"buildDevSyncWriterPolicyStatements");function EC({accountId:e}){return[{Sid:"FjallDevBoundarySsmDevRead",Effect:"Allow",Action:["ssm:GetParameter*"],Resource:`arn:aws:ssm:*:${e}:parameter/fjall/dev/*`},{Sid:"FjallDevBoundaryKmsDecryptDevAlias",Effect:"Allow",Action:["kms:Decrypt"],Resource:`arn:aws:kms:*:${e}:key/*`,Condition:{"ForAnyValue:StringLike":{"kms:ResourceAliases":"alias/fjall-dev-*"}}},{Sid:"FjallDevBoundarySyncPrefixReadWrite",Effect:"Allow",Action:["s3:GetObject","s3:PutObject"],Resource:`arn:aws:s3:::fjall-dev-sync-${e}-*/*`,Condition:{StringEquals:{"aws:ResourceAccount":e}}},{Sid:"FjallDevBoundarySlotLogs",Effect:"Allow",Action:["logs:CreateLogStream","logs:PutLogEvents"],Resource:`arn:aws:logs:*:${e}:log-group:/fjall/dev/*`},{Sid:"FjallDevBoundarySyncQueue",Effect:"Allow",Action:["sqs:ReceiveMessage","sqs:DeleteMessage","sqs:GetQueueUrl"],Resource:`arn:aws:sqs:*:${e}:fjall-dev-sync-${e}-*`}]}Te(EC,"buildDevBoundaryStatements");var AC=Object.defineProperty,st=(e,t)=>AC(e,"name",{value:t,configurable:!0});function $(e){return JSON.stringify(e)}st($,"escapeStringLiteral");function _r(e){return e.map($).join(", ")}st(_r,"formatStringArray");var xC="import:SharedAlarmTopicArn";function Er(e="    "){return`
-${e}...(getConfig().environment === "production" ? { alertsTopic: ${$(xC)} } : {}),`}st(Er,"emitProductionAlertsTopicSpread");function Eg(e){if(typeof e!="object"||e===null)return!1;let t=e;return typeof t.__identifier=="string"||typeof t.__expression=="string"||typeof t.__call=="string"}st(Eg,"isSpecialValue");function Pt(e){return e.replace(/[^a-zA-Z0-9]/g," ").split(" ").map((t,n)=>n===0?t.charAt(0).toLowerCase()+t.slice(1):t.charAt(0).toUpperCase()+t.slice(1)).join("")}st(Pt,"toVariableName");function Q(e){return e.variableName??Pt(e.name)}st(Q,"getVariableName");function ri(e,t){for(let n of e.database)if(n.name===t&&n.variableName)return n.variableName;for(let n of e.s3)if(n.name===t&&n.variableName)return n.variableName;for(let n of e.compute)if(n.name===t&&n.variableName)return n.variableName;for(let n of e.dynamodb??[])if(n.name===t&&n.variableName)return n.variableName;for(let n of e.sqs??[])if(n.name===t&&n.variableName)return n.variableName;return Pt(t)}st(ri,"resolveResourceVariable");function kE(e){let t=Object.entries(e);return t.length===0?!0:t.length>1?!1:t.every(([,n])=>typeof n=="string"||typeof n=="number"||typeof n=="boolean"||n===null)}st(kE,"isSimpleObject");function Z(e,t="    "){if(e==null)return"undefined";if(typeof e=="string")return JSON.stringify(e);if(typeof e=="number"||typeof e=="boolean")return String(e);if(Eg(e)){if("__identifier"in e)return e.__identifier;if("__expression"in e)return e.__expression;if("__call"in e)return e.__call}if(Array.isArray(e))return`[${e.map(n=>Z(n,t)).join(", ")}]`;if(typeof e=="object"){let n=Object.entries(e).filter(([,i])=>i!==void 0);if(kE(e)){let i=n.map(([a,c])=>`${a}: ${Z(c,t)}`).join(", ");return i?`{ ${i} }`:"{}"}let o=t+"  ",r=n.map(([i,a])=>`${o}${i}: ${Z(a,o)}`).join(`,
+${n}`)}return t.data}rC(aC,"validateBuildkiteProps");var sC=Object.defineProperty,cC=(e,t)=>sC(e,"name",{value:t,configurable:!0});function uC(e){return`FjallDeployBoundary${e}`}cC(uC,"deployBoundaryName");var bg={Sid:"FjallInheritAdministratorAccess",Effect:"Allow",Action:"*",Resource:"*"},IE=[{Sid:"FjallDenyOrgAndAccountEscape",Effect:"Deny",Action:["organizations:LeaveOrganization","account:CloseAccount"],Resource:"*"},{Sid:"FjallDenyDisableAuditLogging",Effect:"Deny",Action:["cloudtrail:StopLogging"],Resource:"*"},{Sid:"FjallDenyBoundarySelfEscape",Effect:"Deny",Action:["iam:DeleteRolePermissionsBoundary"],Resource:"*"},{Sid:"FjallDenyDisableKmsKey",Effect:"Deny",Action:["kms:DisableKey"],Resource:"*"}],TE=[...IE,{Sid:"FjallDenyStandingHumanCredentials",Effect:"Deny",Action:["iam:CreateUser","iam:CreateLoginProfile","iam:CreateAccessKey","iam:CreateAccountAlias"],Resource:"*"},{Sid:"FjallDenyDisableConfigRecorder",Effect:"Deny",Action:["config:StopConfigurationRecorder"],Resource:"*"}],lC=[...TE,{Sid:"FjallDenyAccountPasswordPolicyTamper",Effect:"Deny",Action:["iam:UpdateAccountPasswordPolicy","iam:DeleteAccountPasswordPolicy"],Resource:"*"},{Sid:"FjallDenyDisableDefaultEbsEncryption",Effect:"Deny",Action:["ec2:DisableEbsEncryptionByDefault"],Resource:"*"}],IL={foundation:[bg,...IE],compliance:[bg,...TE],hardened:[bg,...lC]};var dC=Object.defineProperty,Te=(e,t)=>dC(e,"name",{value:t,configurable:!0});var Sg="sts.amazonaws.com";function mC(e){return`FjallDevDeploy${e}`}Te(mC,"devDeployRoleName");function pC(e){return`FjallDevProvisioner${e}`}Te(pC,"devProvisionerRoleName");function fC(e){return`FjallDevSyncWriter${e}`}Te(fC,"devSyncWriterRoleName");var gC="FjallDevBoundary";function NE(e){return`arn:aws:iam::${e}:policy/${gC}`}Te(NE,"devBoundaryPolicyArn");function RE(e){return`org:${e}:dev-provisioner`}Te(RE,"devProvisionerSubject");function PE(e){return`org:${e}:dev-sync`}Te(PE,"devSyncSubject");function vC(e){let{fjallOrgId:t,providerArn:n,issuerDomain:o}=e,r={[`${o}:aud`]:Sg};return[{Sid:"FjallMachineSubject",Effect:"Allow",Principal:{Federated:n},Action:"sts:AssumeRoleWithWebIdentity",Condition:{StringEquals:{...r,[`${o}:sub`]:`org:${t}:*`}}},{Sid:"FjallUserSubjects",Effect:"Allow",Principal:{Federated:n},Action:"sts:AssumeRoleWithWebIdentity",Condition:{StringEquals:r,StringLike:{[`${o}:sub`]:`org:${t}:user:*`}}},{Sid:"FjallServiceSubjects",Effect:"Allow",Principal:{Federated:n},Action:"sts:AssumeRoleWithWebIdentity",Condition:{StringEquals:{...r,[`${o}:sub`]:[`org:${t}:discovery`,`org:${t}:connection`,`org:${t}:org-setup`,`org:${t}:dev-substrate-setup`]}}}]}Te(vC,"buildNarrowedDeployTrustStatements");function hC(e){let{fjallOrgId:t,providerArn:n,issuerDomain:o,accountId:r}=e;return[{Sid:"FjallDevSubjectsThisAccount",Effect:"Allow",Principal:{Federated:n},Action:"sts:AssumeRoleWithWebIdentity",Condition:{StringEquals:{[`${o}:aud`]:Sg},StringLike:{[`${o}:sub`]:`org:${t}:dev:${r}:*`}}}]}Te(hC,"buildDevDeployTrustStatements");function _g(e){let{providerArn:t,issuerDomain:n,sid:o,subject:r}=e;return[{Sid:o,Effect:"Allow",Principal:{Federated:t},Action:"sts:AssumeRoleWithWebIdentity",Condition:{StringEquals:{[`${n}:aud`]:Sg,[`${n}:sub`]:r}}}]}Te(_g,"buildServiceSubjectTrustStatements");function yC(e){return _g({...e,sid:"FjallDevProvisionerSubject",subject:RE(e.fjallOrgId)})}Te(yC,"buildDevProvisionerTrustStatements");function bC(e){return _g({...e,sid:"FjallDevSyncSubject",subject:PE(e.fjallOrgId)})}Te(bC,"buildDevSyncWriterTrustStatements");function SC({accountId:e}){return[{Sid:"FjallDevEcsTaggedMutations",Effect:"Allow",Action:["ecs:UpdateService","ecs:DeleteService","ecs:RunTask","ecs:StopTask"],Resource:`arn:aws:ecs:*:${e}:*`,Condition:{StringEquals:{"aws:ResourceTag/fjall:dev":"true"}}},{Sid:"FjallDevEcsTaggedCreates",Effect:"Allow",Action:["ecs:RegisterTaskDefinition","ecs:CreateService"],Resource:"*",Condition:{StringEquals:{"aws:RequestTag/fjall:dev":"true"}}},{Sid:"FjallDevEcsTagOnCreate",Effect:"Allow",Action:["ecs:TagResource"],Resource:`arn:aws:ecs:*:${e}:*`,Condition:{StringEquals:{"ecs:CreateAction":["RegisterTaskDefinition","CreateService","RunTask"]}}},{Sid:"FjallDevEcsReads",Effect:"Allow",Action:["ecs:Describe*","ecs:List*"],Resource:"*"},{Sid:"FjallDevEcsDeregisterTaskDefinition",Effect:"Allow",Action:["ecs:DeregisterTaskDefinition"],Resource:`arn:aws:ecs:*:${e}:task-definition/fjall-dev-*`},{Sid:"FjallDevElbTaggedMutations",Effect:"Allow",Action:["elasticloadbalancing:ModifyRule","elasticloadbalancing:DeleteRule","elasticloadbalancing:ModifyTargetGroup","elasticloadbalancing:ModifyTargetGroupAttributes","elasticloadbalancing:DeleteTargetGroup","elasticloadbalancing:RegisterTargets","elasticloadbalancing:DeregisterTargets"],Resource:`arn:aws:elasticloadbalancing:*:${e}:*`,Condition:{StringEquals:{"aws:ResourceTag/fjall:dev":"true"}}},{Sid:"FjallDevElbTaggedCreates",Effect:"Allow",Action:["elasticloadbalancing:CreateTargetGroup","elasticloadbalancing:CreateRule"],Resource:`arn:aws:elasticloadbalancing:*:${e}:*`,Condition:{StringEquals:{"aws:RequestTag/fjall:dev":"true"}}},{Sid:"FjallDevElbTagOnCreate",Effect:"Allow",Action:["elasticloadbalancing:AddTags"],Resource:`arn:aws:elasticloadbalancing:*:${e}:*`,Condition:{StringEquals:{"elasticloadbalancing:CreateAction":["CreateTargetGroup","CreateRule"]}}},{Sid:"FjallDevElbReads",Effect:"Allow",Action:["elasticloadbalancing:Describe*"],Resource:"*"},{Sid:"FjallDevSsmDevTree",Effect:"Allow",Action:["ssm:GetParameter*","ssm:PutParameter","ssm:AddTagsToResource"],Resource:`arn:aws:ssm:*:${e}:parameter/fjall/dev/*`},{Sid:"FjallDevLogsMutations",Effect:"Allow",Action:["logs:PutRetentionPolicy","logs:DeleteLogGroup"],Resource:`arn:aws:logs:*:${e}:log-group:/fjall/dev/*`},{Sid:"FjallDevLogsTaggedCreate",Effect:"Allow",Action:["logs:CreateLogGroup","logs:TagResource"],Resource:`arn:aws:logs:*:${e}:log-group:/fjall/dev/*`,Condition:{StringEquals:{"aws:RequestTag/fjall:dev":"true"}}},{Sid:"FjallDevLogsRead",Effect:"Allow",Action:["logs:GetLogEvents","logs:DescribeLogStreams","logs:FilterLogEvents"],Resource:`arn:aws:logs:*:${e}:log-group:/fjall/dev/*`},{Sid:"FjallDevLogsDescribeGroups",Effect:"Allow",Action:["logs:DescribeLogGroups"],Resource:"*"},{Sid:"FjallDevKmsViaDevAlias",Effect:"Allow",Action:["kms:Encrypt","kms:Decrypt","kms:GenerateDataKey"],Resource:`arn:aws:kms:*:${e}:key/*`,Condition:{"ForAnyValue:StringLike":{"kms:ResourceAliases":"alias/fjall-dev-*"}}},{Sid:"FjallDevKmsSsmSecureString",Effect:"Allow",Action:["kms:Encrypt","kms:Decrypt","kms:GenerateDataKey"],Resource:`arn:aws:kms:*:${e}:key/*`,Condition:{StringLike:{"kms:ViaService":"ssm.*.amazonaws.com"}}},{Sid:"FjallDevEcrAuthToken",Effect:"Allow",Action:["ecr:GetAuthorizationToken"],Resource:"*"},{Sid:"FjallDevEcrPushPull",Effect:"Allow",Action:["ecr:PutImage","ecr:InitiateLayerUpload","ecr:UploadLayerPart","ecr:CompleteLayerUpload","ecr:BatchCheckLayerAvailability","ecr:BatchGetImage","ecr:GetDownloadUrlForLayer","ecr:DescribeImages"],Resource:`arn:aws:ecr:*:${e}:repository/*`},{Sid:"FjallDevPassDevPathRoles",Effect:"Allow",Action:["iam:PassRole"],Resource:`arn:aws:iam::${e}:role/fjall/dev/*`}]}Te(SC,"buildDevDeployPolicyStatements");function _C({accountId:e}){return[{Sid:"FjallDevProvisionerBoundedRoleWrites",Effect:"Allow",Action:["iam:CreateRole","iam:PutRolePolicy","iam:AttachRolePolicy"],Resource:`arn:aws:iam::${e}:role/fjall/dev/*`,Condition:{StringEquals:{"iam:PermissionsBoundary":NE(e)}}},{Sid:"FjallDevProvisionerPathRoleOps",Effect:"Allow",Action:["iam:DeleteRole","iam:DeleteRolePolicy","iam:DetachRolePolicy","iam:ListRolePolicies","iam:TagRole"],Resource:`arn:aws:iam::${e}:role/fjall/dev/*`},{Sid:"FjallDevProvisionerListRoles",Effect:"Allow",Action:["iam:ListRoles"],Resource:"*"},{Sid:"FjallDevProvisionerDevMasterSecrets",Effect:"Allow",Action:["secretsmanager:GetSecretValue"],Resource:`arn:aws:secretsmanager:*:${e}:secret:fjall-dev-*`},{Sid:"FjallDevProvisionerKmsDecryptViaSecretsManager",Effect:"Allow",Action:["kms:Decrypt"],Resource:`arn:aws:kms:*:${e}:key/*`,Condition:{StringLike:{"kms:ViaService":"secretsmanager.*.amazonaws.com"}}},{Sid:"FjallDevProvisionerDataApi",Effect:"Allow",Action:["rds-data:ExecuteStatement","rds-data:BatchExecuteStatement","rds-data:BeginTransaction","rds-data:CommitTransaction","rds-data:RollbackTransaction"],Resource:`arn:aws:rds:*:${e}:cluster:fjall-dev-*`},{Sid:"FjallDevProvisionerMetrics",Effect:"Allow",Action:["cloudwatch:GetMetricData"],Resource:"*"},{Sid:"FjallDevProvisionerOrphanDiscovery",Effect:"Allow",Action:["tag:GetResources"],Resource:"*"},{Sid:"FjallDevProvisionerSsmTeardown",Effect:"Allow",Action:["ssm:DeleteParameter*"],Resource:`arn:aws:ssm:*:${e}:parameter/fjall/dev/*`},{Sid:"FjallDevProvisionerLogsTeardown",Effect:"Allow",Action:["logs:DeleteLogGroup"],Resource:`arn:aws:logs:*:${e}:log-group:/fjall/dev/*`},{Sid:"FjallDevProvisionerTaggedTeardown",Effect:"Allow",Action:["ecs:UpdateService","ecs:StopTask","ecs:DeleteService","elasticloadbalancing:DeleteRule","elasticloadbalancing:DeleteTargetGroup","elasticloadbalancing:DeregisterTargets"],Resource:[`arn:aws:ecs:*:${e}:*`,`arn:aws:elasticloadbalancing:*:${e}:*`],Condition:{StringEquals:{"aws:ResourceTag/fjall:dev":"true"}}},{Sid:"FjallDevProvisionerTeardownReads",Effect:"Allow",Action:["ecs:Describe*","elasticloadbalancing:Describe*"],Resource:"*"},{Sid:"FjallDevProvisionerImageJanitor",Effect:"Allow",Action:["ecr:ListImages","ecr:DescribeImages","ecr:BatchDeleteImage"],Resource:`arn:aws:ecr:*:${e}:repository/*`},{Sid:"FjallDevProvisionerSsmReadAll",Effect:"Allow",Action:["ssm:GetParameter*"],Resource:`arn:aws:ssm:*:${e}:parameter/*`},{Sid:"FjallDevProvisionerKmsDecryptViaSsm",Effect:"Allow",Action:["kms:Decrypt"],Resource:`arn:aws:kms:*:${e}:key/*`,Condition:{StringLike:{"kms:ViaService":"ssm.*.amazonaws.com"}}}]}Te(_C,"buildDevProvisionerPolicyStatements");function EC({accountId:e}){return[{Sid:"FjallDevSyncPrefixReadWrite",Effect:"Allow",Action:["s3:GetObject","s3:PutObject"],Resource:`arn:aws:s3:::fjall-dev-sync-${e}-*/*`,Condition:{StringEquals:{"aws:ResourceAccount":e}}}]}Te(EC,"buildDevSyncWriterPolicyStatements");function AC({accountId:e}){return[{Sid:"FjallDevBoundarySsmDevRead",Effect:"Allow",Action:["ssm:GetParameter*"],Resource:`arn:aws:ssm:*:${e}:parameter/fjall/dev/*`},{Sid:"FjallDevBoundaryKmsDecryptDevAlias",Effect:"Allow",Action:["kms:Decrypt"],Resource:`arn:aws:kms:*:${e}:key/*`,Condition:{"ForAnyValue:StringLike":{"kms:ResourceAliases":"alias/fjall-dev-*"}}},{Sid:"FjallDevBoundarySyncPrefixReadWrite",Effect:"Allow",Action:["s3:GetObject","s3:PutObject"],Resource:`arn:aws:s3:::fjall-dev-sync-${e}-*/*`,Condition:{StringEquals:{"aws:ResourceAccount":e}}},{Sid:"FjallDevBoundarySlotLogs",Effect:"Allow",Action:["logs:CreateLogStream","logs:PutLogEvents"],Resource:`arn:aws:logs:*:${e}:log-group:/fjall/dev/*`},{Sid:"FjallDevBoundarySyncQueue",Effect:"Allow",Action:["sqs:ReceiveMessage","sqs:DeleteMessage","sqs:GetQueueUrl"],Resource:`arn:aws:sqs:*:${e}:fjall-dev-sync-${e}-*`}]}Te(AC,"buildDevBoundaryStatements");var xC=Object.defineProperty,st=(e,t)=>xC(e,"name",{value:t,configurable:!0});function $(e){return JSON.stringify(e)}st($,"escapeStringLiteral");function _r(e){return e.map($).join(", ")}st(_r,"formatStringArray");var $C="import:SharedAlarmTopicArn";function Er(e="    "){return`
+${e}...(getConfig().environment === "production" ? { alertsTopic: ${$($C)} } : {}),`}st(Er,"emitProductionAlertsTopicSpread");function Eg(e){if(typeof e!="object"||e===null)return!1;let t=e;return typeof t.__identifier=="string"||typeof t.__expression=="string"||typeof t.__call=="string"}st(Eg,"isSpecialValue");function Pt(e){return e.replace(/[^a-zA-Z0-9]/g," ").split(" ").map((t,n)=>n===0?t.charAt(0).toLowerCase()+t.slice(1):t.charAt(0).toUpperCase()+t.slice(1)).join("")}st(Pt,"toVariableName");function Q(e){return e.variableName??Pt(e.name)}st(Q,"getVariableName");function ri(e,t){for(let n of e.database)if(n.name===t&&n.variableName)return n.variableName;for(let n of e.s3)if(n.name===t&&n.variableName)return n.variableName;for(let n of e.compute)if(n.name===t&&n.variableName)return n.variableName;for(let n of e.dynamodb??[])if(n.name===t&&n.variableName)return n.variableName;for(let n of e.sqs??[])if(n.name===t&&n.variableName)return n.variableName;return Pt(t)}st(ri,"resolveResourceVariable");function kE(e){let t=Object.entries(e);return t.length===0?!0:t.length>1?!1:t.every(([,n])=>typeof n=="string"||typeof n=="number"||typeof n=="boolean"||n===null)}st(kE,"isSimpleObject");function Z(e,t="    "){if(e==null)return"undefined";if(typeof e=="string")return JSON.stringify(e);if(typeof e=="number"||typeof e=="boolean")return String(e);if(Eg(e)){if("__identifier"in e)return e.__identifier;if("__expression"in e)return e.__expression;if("__call"in e)return e.__call}if(Array.isArray(e))return`[${e.map(n=>Z(n,t)).join(", ")}]`;if(typeof e=="object"){let n=Object.entries(e).filter(([,i])=>i!==void 0);if(kE(e)){let i=n.map(([a,c])=>`${a}: ${Z(c,t)}`).join(", ");return i?`{ ${i} }`:"{}"}let o=t+"  ",r=n.map(([i,a])=>`${o}${i}: ${Z(a,o)}`).join(`,
 `);return r?`{
 ${r}
 ${t}}`:"{}"}return JSON.stringify(e)}st(Z,"formatValue");function C(e,t,n,o="raw"){if(!e)return"";let r;switch(o){case"string":r=$(String(n));break;case"object":r=Z(n);break;case"boolean-or-object":r=n===!1?"false":Z(n);break;default:r=String(n)}return`
     ${t}: ${r},`}st(C,"buildProperty");function ce(e,t="    "){return e?.length?e.map(n=>`
-${t}${n.key}: ${n.sourceText},`).join(""):""}st(ce,"emitExtraProperties");var $C=Object.defineProperty,Ne=(e,t)=>$C(e,"name",{value:t,configurable:!0}),ne=Object.freeze({HOST:"DATABASE_HOST",PORT:"DATABASE_PORT",NAME:"DATABASE_NAME",SSL:"DATABASE_SSL",USERNAME:"DATABASE_USERNAME",PASSWORD:"DATABASE_PASSWORD"}),ni=Object.freeze({USERNAME:"username",PASSWORD:"password"});function Ar(e,t){let n=t.connectedDatabase;return n?.length?e.database.filter(o=>n.includes(o.name)):[]}Ne(Ar,"getConnectedDatabases");function oi(e,t){return`${e}.getCredentials().getImport(${$(t)})`}Ne(oi,"getCredentialExpression");function ii(e){let t=[],n=Ne((o,r,i)=>{t.push({key:o,expression:r,isSecret:i})},"addEntry");if(e.length===1){let o=Q(e[0]);n(ne.HOST,`${o}.getHostEndpoint()`,!1),n(ne.PORT,`${o}.getHostPort()`,!1),n(ne.NAME,`${o}.getDatabaseName()`,!1),n(ne.SSL,'"true"',!1),n(ne.USERNAME,oi(o,ni.USERNAME),!0),n(ne.PASSWORD,oi(o,ni.PASSWORD),!0)}else for(let[o,r]of e.entries()){let i=Q(r),a=o===0?"":`_${o+1}`;n(`${ne.HOST}${a}`,`${i}.getHostEndpoint()`,!1),n(`${ne.PORT}${a}`,`${i}.getHostPort()`,!1),n(`${ne.NAME}${a}`,`${i}.getDatabaseName()`,!1),n(`${ne.SSL}${a}`,'"true"',!1),n(`${ne.USERNAME}${a}`,oi(i,ni.USERNAME),!0),n(`${ne.PASSWORD}${a}`,oi(i,ni.PASSWORD),!0)}return t}Ne(ii,"generateDatabaseEnvVarEntries");function CE(e){return`connections: [${e.map(t=>Q(t)).join(", ")}],`}Ne(CE,"formatConnectionsCode");function cc(e){return e.expression==='"true"'?"true":{__expression:e.expression}}Ne(cc,"toDatabaseEnvVarValue");function uc(e,t){let n={},o={};if(!t.needsConnection||!t.connectedDatabase?.length)return{env:n,secrets:o};let r=Ar(e,t),i=ii(r);for(let a of i){let c=cc(a);a.isSecret?o[a.key]={__expression:a.expression}:n[a.key]=c}return{env:n,secrets:o}}Ne(uc,"buildDatabaseEnvVars");function OE(e){let t="";return t+=C(e.port!==void 0,"port",e.port),t+=C(e.deletionProtection!==void 0,"deletionProtection",e.deletionProtection),t+=C(e.snapshotIdentifier!==void 0,"snapshotIdentifier",e.snapshotIdentifier,"string"),t+=C(e.snapshotUsername!==void 0,"snapshotUsername",e.snapshotUsername,"string"),t+=C(e.monitoringInterval!==void 0,"monitoringInterval",e.monitoringInterval),t}Ne(OE,"generateDatabaseSharedProps");function DE(e){if(e.type!=="Instance")return"";let t="";return t+=C(e.instanceType!==void 0,"instanceType",e.instanceType,"string"),t+=C(e.allocatedStorage!==void 0,"allocatedStorage",e.allocatedStorage),t+=C(e.multiAz!==void 0,"multiAz",e.multiAz),t+=C(e.publiclyAccessible!==void 0,"publiclyAccessible",e.publiclyAccessible),t+=C(e.encryption!==void 0,"encryption",e.encryption,"object"),t+=C(e.databaseInsights!==void 0,"databaseInsights",e.databaseInsights,"boolean-or-object"),t+=C(e.proxy!==void 0,"proxy",e.proxy,"boolean-or-object"),t+=C(e.readReplica!==void 0,"readReplica",e.readReplica,"boolean-or-object"),t+=C(e.credentials!==void 0,"credentials",e.credentials,"object"),t+=C(e.backupRetention!==void 0,"backupRetention",e.backupRetention),t}Ne(DE,"generateDatabaseInstanceProps");function wE(e){if(e.type!=="Aurora"&&e.type!=="GlobalAurora")return"";let t="";return t+=C(e.encryption!==void 0,"encryption",e.encryption,"object"),t+=C(e.databaseInsights!==void 0,"databaseInsights",e.databaseInsights,"boolean-or-object"),t+=C(e.proxy!==void 0,"proxy",e.proxy,"boolean-or-object"),t+=C(e.credentials!==void 0,"credentials",e.credentials,"object"),t+=C(e.writer!==void 0,"writer",e.writer,"object"),t+=C(e.readers!==void 0,"readers",e.readers,"boolean-or-object"),t+=C(e.backupRetention!==void 0,"backupRetention",e.backupRetention),t+=C(e.preferredMaintenanceWindow!==void 0,"preferredMaintenanceWindow",e.preferredMaintenanceWindow,"string"),t}Ne(wE,"generateDatabaseAuroraProps");function zE(e){if(e.type!=="GlobalAurora")return"";let t="";return t+=C(e.primaryRegion!==void 0,"primaryRegion",e.primaryRegion,"string"),e.secondaryRegions!==void 0&&e.secondaryRegions.length>0&&(t+=`
+${t}${n.key}: ${n.sourceText},`).join(""):""}st(ce,"emitExtraProperties");var IC=Object.defineProperty,Ne=(e,t)=>IC(e,"name",{value:t,configurable:!0}),ne=Object.freeze({HOST:"DATABASE_HOST",PORT:"DATABASE_PORT",NAME:"DATABASE_NAME",SSL:"DATABASE_SSL",USERNAME:"DATABASE_USERNAME",PASSWORD:"DATABASE_PASSWORD"}),ni=Object.freeze({USERNAME:"username",PASSWORD:"password"});function Ar(e,t){let n=t.connectedDatabase;return n?.length?e.database.filter(o=>n.includes(o.name)):[]}Ne(Ar,"getConnectedDatabases");function oi(e,t){return`${e}.getCredentials().getImport(${$(t)})`}Ne(oi,"getCredentialExpression");function ii(e){let t=[],n=Ne((o,r,i)=>{t.push({key:o,expression:r,isSecret:i})},"addEntry");if(e.length===1){let o=Q(e[0]);n(ne.HOST,`${o}.getHostEndpoint()`,!1),n(ne.PORT,`${o}.getHostPort()`,!1),n(ne.NAME,`${o}.getDatabaseName()`,!1),n(ne.SSL,'"true"',!1),n(ne.USERNAME,oi(o,ni.USERNAME),!0),n(ne.PASSWORD,oi(o,ni.PASSWORD),!0)}else for(let[o,r]of e.entries()){let i=Q(r),a=o===0?"":`_${o+1}`;n(`${ne.HOST}${a}`,`${i}.getHostEndpoint()`,!1),n(`${ne.PORT}${a}`,`${i}.getHostPort()`,!1),n(`${ne.NAME}${a}`,`${i}.getDatabaseName()`,!1),n(`${ne.SSL}${a}`,'"true"',!1),n(`${ne.USERNAME}${a}`,oi(i,ni.USERNAME),!0),n(`${ne.PASSWORD}${a}`,oi(i,ni.PASSWORD),!0)}return t}Ne(ii,"generateDatabaseEnvVarEntries");function CE(e){return`connections: [${e.map(t=>Q(t)).join(", ")}],`}Ne(CE,"formatConnectionsCode");function cc(e){return e.expression==='"true"'?"true":{__expression:e.expression}}Ne(cc,"toDatabaseEnvVarValue");function uc(e,t){let n={},o={};if(!t.needsConnection||!t.connectedDatabase?.length)return{env:n,secrets:o};let r=Ar(e,t),i=ii(r);for(let a of i){let c=cc(a);a.isSecret?o[a.key]={__expression:a.expression}:n[a.key]=c}return{env:n,secrets:o}}Ne(uc,"buildDatabaseEnvVars");function OE(e){let t="";return t+=C(e.port!==void 0,"port",e.port),t+=C(e.deletionProtection!==void 0,"deletionProtection",e.deletionProtection),t+=C(e.snapshotIdentifier!==void 0,"snapshotIdentifier",e.snapshotIdentifier,"string"),t+=C(e.snapshotUsername!==void 0,"snapshotUsername",e.snapshotUsername,"string"),t+=C(e.monitoringInterval!==void 0,"monitoringInterval",e.monitoringInterval),t}Ne(OE,"generateDatabaseSharedProps");function DE(e){if(e.type!=="Instance")return"";let t="";return t+=C(e.instanceType!==void 0,"instanceType",e.instanceType,"string"),t+=C(e.allocatedStorage!==void 0,"allocatedStorage",e.allocatedStorage),t+=C(e.multiAz!==void 0,"multiAz",e.multiAz),t+=C(e.publiclyAccessible!==void 0,"publiclyAccessible",e.publiclyAccessible),t+=C(e.encryption!==void 0,"encryption",e.encryption,"object"),t+=C(e.databaseInsights!==void 0,"databaseInsights",e.databaseInsights,"boolean-or-object"),t+=C(e.proxy!==void 0,"proxy",e.proxy,"boolean-or-object"),t+=C(e.readReplica!==void 0,"readReplica",e.readReplica,"boolean-or-object"),t+=C(e.credentials!==void 0,"credentials",e.credentials,"object"),t+=C(e.backupRetention!==void 0,"backupRetention",e.backupRetention),t}Ne(DE,"generateDatabaseInstanceProps");function wE(e){if(e.type!=="Aurora"&&e.type!=="GlobalAurora")return"";let t="";return t+=C(e.encryption!==void 0,"encryption",e.encryption,"object"),t+=C(e.databaseInsights!==void 0,"databaseInsights",e.databaseInsights,"boolean-or-object"),t+=C(e.proxy!==void 0,"proxy",e.proxy,"boolean-or-object"),t+=C(e.credentials!==void 0,"credentials",e.credentials,"object"),t+=C(e.writer!==void 0,"writer",e.writer,"object"),t+=C(e.readers!==void 0,"readers",e.readers,"boolean-or-object"),t+=C(e.backupRetention!==void 0,"backupRetention",e.backupRetention),t+=C(e.preferredMaintenanceWindow!==void 0,"preferredMaintenanceWindow",e.preferredMaintenanceWindow,"string"),t}Ne(wE,"generateDatabaseAuroraProps");function zE(e){if(e.type!=="GlobalAurora")return"";let t="";return t+=C(e.primaryRegion!==void 0,"primaryRegion",e.primaryRegion,"string"),e.secondaryRegions!==void 0&&e.secondaryRegions.length>0&&(t+=`
     secondaryRegions: [${_r(e.secondaryRegions)}],`),t+=C(e.globalClusterIdentifier!==void 0,"globalClusterIdentifier",e.globalClusterIdentifier,"string"),t+=C(e.enableGlobalWriteForwarding!==void 0,"enableGlobalWriteForwarding",e.enableGlobalWriteForwarding),t}Ne(zE,"generateDatabaseGlobalAuroraProps");function Ag(e,t){return t.compute.some(n=>n.needsConnection&&n.connectedDatabase?.includes(e.name))}Ne(Ag,"databaseNeedsVariable");function lc(e){if(e.database.length===0)return"";let t="";for(let n=0;n<e.database.length;n++){let o=e.database[n],r=Q(o),i=Ag(o,e),a=n>0,c=i?`const ${r} = `:"";t+=`${a?`
 `:""}${c}app.addDatabase(
   DatabaseFactory.build(${$(o.name)}, {
@@ -152,10 +152,10 @@ ${t}${n.key}: ${n.sourceText},`).join(""):""}st(ce,"emitExtraProperties");var $C
     backupRetentionDays: ${o.backupRetentionDays},`),t+=ce(o.extraProperties),t+=`
   })
 );
-`}return t}Ne(dc,"generateClickHouseCode");function ME(e,t){return t.compute.some(n=>n.connectedDatabase?.includes(e.name))}Ne(ME,"clickhouseNeedsVariable");var IC=Object.defineProperty,mc=(e,t)=>IC(e,"name",{value:t,configurable:!0}),ai=Object.freeze({NAME:"BUCKET_NAME"});function xr(e,t){let{connectedStorage:n}=t;return n?.length?e.s3.filter(o=>n.includes(o.name)):[]}mc(xr,"getConnectedStorage");function si(e){let t=[];if(e.length===1){let n=e[0];if(!n)return t;let o=Q(n);t.push({key:ai.NAME,expression:`${o}.getBucketName()`})}else for(let[n,o]of e.entries()){let r=Q(o),i=n===0?"":`_${n+1}`;t.push({key:`${ai.NAME}${i}`,expression:`${r}.getBucketName()`})}return t}mc(si,"generateStorageEnvVarEntries");function pc(e,t){let n={},o={};if(!t.connectedStorage?.length)return{env:n,secrets:o};let r=xr(e,t),i=si(r);for(let a of i)n[a.key]={__expression:a.expression};return{env:n,secrets:o}}mc(pc,"buildStorageEnvVars");function Cn(e,t,n=[]){let o=e.map(a=>Q(a)),r=t.map(a=>Q(a)),i=n.map(a=>Q(a));return`connections: [${[...o,...r,...i].join(", ")}],`}mc(Cn,"formatAllConnectionsCode");var TC=Object.defineProperty,xg=(e,t)=>TC(e,"name",{value:t,configurable:!0}),Ht=Object.freeze({URL:"QUEUE_URL",ARN:"QUEUE_ARN"});function $r(e,t){let{connectedMessaging:n}=t;return n?.length?(e.sqs??[]).filter(o=>n.includes(o.name)):[]}xg($r,"getConnectedMessaging");function ci(e){let t=[];if(e.length===1){let n=e[0];if(!n)return t;let o=Q(n);t.push({key:Ht.URL,expression:`${o}.getQueueUrl()`}),t.push({key:Ht.ARN,expression:`${o}.getQueueArn()`})}else for(let[n,o]of e.entries()){let r=Q(o),i=n===0?"":`_${n+1}`;t.push({key:`${Ht.URL}${i}`,expression:`${r}.getQueueUrl()`}),t.push({key:`${Ht.ARN}${i}`,expression:`${r}.getQueueArn()`})}return t}xg(ci,"generateMessagingEnvVarEntries");function fc(e,t){let n={},o={};if(!t.connectedMessaging?.length)return{env:n,secrets:o};let r=$r(e,t),i=ci(r);for(let a of i)n[a.key]={__expression:a.expression};return{env:n,secrets:o}}xg(fc,"buildMessagingEnvVars");var NC=Object.defineProperty,On=(e,t)=>NC(e,"name",{value:t,configurable:!0});function Ir(e){return!!(e.needsConnection&&e.connectedDatabase?.length)}On(Ir,"computeHasDatabaseConnections");function Tr(e){return!!e.connectedStorage?.length}On(Tr,"computeHasStorageConnections");function Nr(e){return!!e.connectedMessaging?.length}On(Nr,"computeHasMessagingConnections");function ui(e){return Ir(e)||Tr(e)||Nr(e)}On(ui,"computeHasConnections");var li={ENVIRONMENT:{__expression:"getConfig().environment"}};function Dn(e,t){return Object.entries(e).map(([n,o])=>`${t}${n}: ${Z(o)},`).join(`
+`}return t}Ne(dc,"generateClickHouseCode");function ME(e,t){return t.compute.some(n=>n.connectedDatabase?.includes(e.name))}Ne(ME,"clickhouseNeedsVariable");var TC=Object.defineProperty,mc=(e,t)=>TC(e,"name",{value:t,configurable:!0}),ai=Object.freeze({NAME:"BUCKET_NAME"});function xr(e,t){let{connectedStorage:n}=t;return n?.length?e.s3.filter(o=>n.includes(o.name)):[]}mc(xr,"getConnectedStorage");function si(e){let t=[];if(e.length===1){let n=e[0];if(!n)return t;let o=Q(n);t.push({key:ai.NAME,expression:`${o}.getBucketName()`})}else for(let[n,o]of e.entries()){let r=Q(o),i=n===0?"":`_${n+1}`;t.push({key:`${ai.NAME}${i}`,expression:`${r}.getBucketName()`})}return t}mc(si,"generateStorageEnvVarEntries");function pc(e,t){let n={},o={};if(!t.connectedStorage?.length)return{env:n,secrets:o};let r=xr(e,t),i=si(r);for(let a of i)n[a.key]={__expression:a.expression};return{env:n,secrets:o}}mc(pc,"buildStorageEnvVars");function Cn(e,t,n=[]){let o=e.map(a=>Q(a)),r=t.map(a=>Q(a)),i=n.map(a=>Q(a));return`connections: [${[...o,...r,...i].join(", ")}],`}mc(Cn,"formatAllConnectionsCode");var NC=Object.defineProperty,xg=(e,t)=>NC(e,"name",{value:t,configurable:!0}),Ht=Object.freeze({URL:"QUEUE_URL",ARN:"QUEUE_ARN"});function $r(e,t){let{connectedMessaging:n}=t;return n?.length?(e.sqs??[]).filter(o=>n.includes(o.name)):[]}xg($r,"getConnectedMessaging");function ci(e){let t=[];if(e.length===1){let n=e[0];if(!n)return t;let o=Q(n);t.push({key:Ht.URL,expression:`${o}.getQueueUrl()`}),t.push({key:Ht.ARN,expression:`${o}.getQueueArn()`})}else for(let[n,o]of e.entries()){let r=Q(o),i=n===0?"":`_${n+1}`;t.push({key:`${Ht.URL}${i}`,expression:`${r}.getQueueUrl()`}),t.push({key:`${Ht.ARN}${i}`,expression:`${r}.getQueueArn()`})}return t}xg(ci,"generateMessagingEnvVarEntries");function fc(e,t){let n={},o={};if(!t.connectedMessaging?.length)return{env:n,secrets:o};let r=$r(e,t),i=ci(r);for(let a of i)n[a.key]={__expression:a.expression};return{env:n,secrets:o}}xg(fc,"buildMessagingEnvVars");var RC=Object.defineProperty,On=(e,t)=>RC(e,"name",{value:t,configurable:!0});function Ir(e){return!!(e.needsConnection&&e.connectedDatabase?.length)}On(Ir,"computeHasDatabaseConnections");function Tr(e){return!!e.connectedStorage?.length}On(Tr,"computeHasStorageConnections");function Nr(e){return!!e.connectedMessaging?.length}On(Nr,"computeHasMessagingConnections");function ui(e){return Ir(e)||Tr(e)||Nr(e)}On(ui,"computeHasConnections");var li={ENVIRONMENT:{__expression:"getConfig().environment"}};function Dn(e,t){return Object.entries(e).map(([n,o])=>`${t}${n}: ${Z(o)},`).join(`
 `)}On(Dn,"formatEnvBlock");function wn(e,t,n){return e.length<=1?`{ ${e[0]??""} }`:`{${e.map(o=>`
 ${n}${o},`).join("")}
-${t}}`}On(wn,"formatCompactOrExpandedObject");var RC=Object.defineProperty,jE=(e,t)=>RC(e,"name",{value:t,configurable:!0});function di(e){let t="";if(e.deployment===Wo.CODE&&e.codePath?(t+=`
+${t}}`}On(wn,"formatCompactOrExpandedObject");var PC=Object.defineProperty,jE=(e,t)=>PC(e,"name",{value:t,configurable:!0});function di(e){let t="";if(e.deployment===Wo.CODE&&e.codePath?(t+=`
     deployment: "${Wo.CODE}",
     code: Code.fromAsset(${$(e.codePath)}),`,e.handler&&(t+=`
     handler: ${$(e.handler)},`),e.runtime&&(t+=`
@@ -180,10 +180,10 @@ ${Dn(n,"      ")}
     environment: {`;for(let[p,g]of Object.entries(u))m+=`
       ${p}: ${Z(g)},`;m+=`
     },`}return m+=`
-    ${Cn(i,a,c)}`,m}jE(mi,"generateLambdaConnectionsCode");var PC=Object.defineProperty,kC=(e,t)=>PC(e,"name",{value:t,configurable:!0});function pi(e){let t="";return e.instanceType&&(t+=`
+    ${Cn(i,a,c)}`,m}jE(mi,"generateLambdaConnectionsCode");var kC=Object.defineProperty,CC=(e,t)=>kC(e,"name",{value:t,configurable:!0});function pi(e){let t="";return e.instanceType&&(t+=`
     instanceType: ${$(e.instanceType)},`),e.enableSSH!==void 0&&(t+=e.enableSSH?`
     ssh: {},`:`
-    ssh: false,`),t+=ce(e.extraProperties),t}kC(pi,"generateEc2Code");var CC=Object.defineProperty,vt=(e,t)=>CC(e,"name",{value:t,configurable:!0});function UE(e){let t=[];if(e.instanceType!==void 0&&t.push(`instanceType: ${$(e.instanceType)}`),e.amiHardwareType!==void 0&&t.push(`amiHardwareType: ${$(e.amiHardwareType)}`),e.minCapacity!==void 0&&t.push(`minCapacity: ${e.minCapacity}`),e.maxCapacity!==void 0&&t.push(`maxCapacity: ${e.maxCapacity}`),e.memoryLimitMiB!==void 0&&t.push(`memoryLimitMiB: ${e.memoryLimitMiB}`),e.warmPool!==void 0&&t.push(`warmPool: ${Z(e.warmPool,"      ")}`),e.extraProperties?.length)for(let n of e.extraProperties)t.push(`${n.key}: ${n.sourceText}`);return`
+    ssh: false,`),t+=ce(e.extraProperties),t}CC(pi,"generateEc2Code");var OC=Object.defineProperty,vt=(e,t)=>OC(e,"name",{value:t,configurable:!0});function UE(e){let t=[];if(e.instanceType!==void 0&&t.push(`instanceType: ${$(e.instanceType)}`),e.amiHardwareType!==void 0&&t.push(`amiHardwareType: ${$(e.amiHardwareType)}`),e.minCapacity!==void 0&&t.push(`minCapacity: ${e.minCapacity}`),e.maxCapacity!==void 0&&t.push(`maxCapacity: ${e.maxCapacity}`),e.memoryLimitMiB!==void 0&&t.push(`memoryLimitMiB: ${e.memoryLimitMiB}`),e.warmPool!==void 0&&t.push(`warmPool: ${Z(e.warmPool,"      ")}`),e.extraProperties?.length)for(let n of e.extraProperties)t.push(`${n.key}: ${n.sourceText}`);return`
       ec2Config: ${wn(t,"      ","        ")},`}vt(UE,"generateEcsServiceEc2ConfigCode");function LE(e){if(!e.cluster)return"";let t=[];if(e.cluster.directAccess&&t.push("directAccess: true"),e.cluster.domain&&t.push(`domain: ${$(e.cluster.domain)}`),e.cluster.loadBalancer!==void 0&&t.push(e.cluster.loadBalancer===!1?"loadBalancer: false":`loadBalancer: ${$(e.cluster.loadBalancer)}`),e.cluster.extraProperties?.length)for(let n of e.cluster.extraProperties)t.push(`${n.key}: ${n.sourceText}`);return`
     cluster: ${wn(t,"    ","      ")},`}vt(LE,"generateEcsClusterCode");function FE(e,t,n,o,r,i){let a="";e.name&&(a+=`
         name: ${$(e.name)},`),e.image&&(a+=`
@@ -224,14 +224,14 @@ ${Dn(m,"          ")}
     ecrRepository: app.getDefaultContainerRegistry(),`;if(c+=LE(e),e.services?.length){c+=`
     services: [{`;for(let u=0;u<e.services.length;u++){let l=e.services[u];l&&(u>0&&(c+=`
     }, {`),c+=GE({service:l,isFirstService:u===0,hasConnections:n,dbEnvVars:r,storageEnvVars:i,messagingEnvVars:a,baseEnvVars:o,plan:t,compute:e}))}c+=`
-    }],`}return c+=ce(e.extraProperties),c+=Er(),c}vt(fi,"generateEcsCode");var OC=Object.defineProperty,DC=(e,t)=>OC(e,"name",{value:t,configurable:!0});function gc(e,t){if(e.compute.length===0)return"";let n="";for(let o=0;o<e.compute.length;o++){let r=e.compute[o],i=t.has(r.name)||r.scheduleExpression!==void 0,a=Q(r),c=e.database.length>0||e.s3.length>0||o>0,u=i?`const ${a} = `:"";switch(n+=`${c?`
+    }],`}return c+=ce(e.extraProperties),c+=Er(),c}vt(fi,"generateEcsCode");var DC=Object.defineProperty,wC=(e,t)=>DC(e,"name",{value:t,configurable:!0});function gc(e,t){if(e.compute.length===0)return"";let n="";for(let o=0;o<e.compute.length;o++){let r=e.compute[o],i=t.has(r.name)||r.scheduleExpression!==void 0,a=Q(r),c=e.database.length>0||e.s3.length>0||o>0,u=i?`const ${a} = `:"";switch(n+=`${c?`
 `:""}${u}app.addCompute(
   ComputeFactory.build(${$(r.name)}, {
     type: ${$(r.type)},`,r.type){case"lambda":n+=di(r),n+=mi(r,e);break;case"ec2":n+=pi(r);break;case"ecs":n+=fi(r,e);break;default:{let l=r.type;throw new Error(`Unhandled compute type: ${String(l)}`)}}n+=`
   })
 );
 `,r.scheduleExpression!==void 0&&(n+=`app.addSchedule(${$(`${r.name}Schedule`)}, { schedule: ${$(r.scheduleExpression)}, target: ${a} });
-`)}return n}DC(gc,"generateComputeCode");var wC=Object.defineProperty,zn=(e,t)=>wC(e,"name",{value:t,configurable:!0});function WE(e){let t="";return t+=C(e.bucketName!==void 0,"bucketName",e.bucketName,"string"),t+=C(e.stackPlacement!==void 0&&e.stackPlacement!=="storage","stackPlacement",e.stackPlacement,"string"),t+=C(e.publicReadAccess===!0,"publicReadAccess",!0),t+=C(e.websiteHosting!==void 0,"websiteHosting",e.websiteHosting,"object"),t+=C(e.backupVaultTier!==void 0,"backupVaultTier",e.backupVaultTier,"string"),t+=C(e.versioned!==void 0,"versioned",e.versioned),t+=C(e.encryption!==void 0,"encryption",e.encryption,"string"),t+=C(e.kmsKeyArn!==void 0,"kmsKeyArn",e.kmsKeyArn,"string"),t+=C(e.cors!==void 0&&e.cors.length>0,"cors",e.cors,"object"),t+=C(e.deployment!==void 0,"deployment",e.deployment,"object"),t+=C(e.retain===!0,"retain",!0),t}zn(WE,"generateS3BucketProps");function Ig(e,t){return!!(t.compute.some(n=>n.connectedStorage?.includes(e.name))||t.cdn&&(t.cdn.defaultOriginRef===e.name||t.cdn.behaviours?.some(n=>n.originRef===e.name)))}zn(Ig,"s3NeedsVariable");function vc(e){if(e.s3.length===0)return"";let t="";for(let n=0;n<e.s3.length;n++){let o=e.s3[n],r=Q(o),i=Ig(o,e),a=e.database.length>0||n>0?`
+`)}return n}wC(gc,"generateComputeCode");var zC=Object.defineProperty,zn=(e,t)=>zC(e,"name",{value:t,configurable:!0});function WE(e){let t="";return t+=C(e.bucketName!==void 0,"bucketName",e.bucketName,"string"),t+=C(e.stackPlacement!==void 0&&e.stackPlacement!=="storage","stackPlacement",e.stackPlacement,"string"),t+=C(e.publicReadAccess===!0,"publicReadAccess",!0),t+=C(e.websiteHosting!==void 0,"websiteHosting",e.websiteHosting,"object"),t+=C(e.backupVaultTier!==void 0,"backupVaultTier",e.backupVaultTier,"string"),t+=C(e.versioned!==void 0,"versioned",e.versioned),t+=C(e.encryption!==void 0,"encryption",e.encryption,"string"),t+=C(e.kmsKeyArn!==void 0,"kmsKeyArn",e.kmsKeyArn,"string"),t+=C(e.cors!==void 0&&e.cors.length>0,"cors",e.cors,"object"),t+=C(e.deployment!==void 0,"deployment",e.deployment,"object"),t+=C(e.retain===!0,"retain",!0),t}zn(WE,"generateS3BucketProps");function Ig(e,t){return!!(t.compute.some(n=>n.connectedStorage?.includes(e.name))||t.cdn&&(t.cdn.defaultOriginRef===e.name||t.cdn.behaviours?.some(n=>n.originRef===e.name)))}zn(Ig,"s3NeedsVariable");function vc(e){if(e.s3.length===0)return"";let t="";for(let n=0;n<e.s3.length;n++){let o=e.s3[n],r=Q(o),i=Ig(o,e),a=e.database.length>0||n>0?`
 `:"",c=WE(o),u=i?`const ${r} = `:"",l=ce(o.extraProperties);c||l?t+=`${a}${u}app.addStorage(
   StorageFactory.build(${$(o.name)}, {${c}${l}
   })
@@ -280,7 +280,7 @@ ${r}app.addMessaging(
     removalPolicy: ${$(n.removalPolicy)}`),t+=",",t+=ce(n.extraProperties),t+=Er(),t+=`
   })
 );
-`}return t}zn(yc,"generateSQSCode");var zC=Object.defineProperty,Je=(e,t)=>zC(e,"name",{value:t,configurable:!0}),yt=Object.freeze({database:{type:"Instance",backupRetention:7,deletionProtection:!0},compute:{server:{memorySize:1536,timeout:30},imageOptimisation:{memorySize:1536,timeout:30},revalidation:{memorySize:768,timeout:300}}});function Rr(e,t,n){return t===void 0?"":`
+`}return t}zn(yc,"generateSQSCode");var MC=Object.defineProperty,Je=(e,t)=>MC(e,"name",{value:t,configurable:!0}),yt=Object.freeze({database:{type:"Instance",backupRetention:7,deletionProtection:!0},compute:{server:{memorySize:1536,timeout:30},imageOptimisation:{memorySize:1536,timeout:30},revalidation:{memorySize:768,timeout:300}}});function Rr(e,t,n){return t===void 0?"":`
 ${n}${e}: ${t},`}Je(Rr,"emitScalar");function ht(e,t,n){return t===void 0?"":`
 ${n}${e}: ${JSON.stringify(t)},`}Je(ht,"emitStringField");function gi(e,t,n){return t===void 0?"":t===!1?`
 ${n}${e}: false,`:`
@@ -313,11 +313,11 @@ ${t}domain: ${JSON.stringify(e.domain)},`),n+=Ye("forms",e.forms,t),n+=Ye("cdn",
   })
 );
 
-`,n}Je(vi,"generatePatternCodeWithComments");var MC=Object.defineProperty,kt=(e,t)=>MC(e,"name",{value:t,configurable:!0}),hi="fjall:costAllocation:owner",jC="engineering";function eA(e){return typeof e=="object"&&e!==null&&Object.keys(e).length===0}kt(eA,"isEmptyObject");function Ng(e){let t={...e};return eA(t.flowLogs)&&delete t.flowLogs,t}kt(Ng,"cleanNetworkConfig");function yi(e){if(!e.additionalNetworks||e.additionalNetworks.length===0)return"";let t="";for(let n of e.additionalNetworks){let o=Pt(n.name),r={};n.maxAzs!==void 0&&(r.maxAzs=n.maxAzs),n.natGateways!==void 0&&(r.natGateways=n.natGateways),n.flowLogs!==void 0&&(r.flowLogs=n.flowLogs),n.vpcEndpoints!==void 0&&(r.vpcEndpoints=n.vpcEndpoints);let i=Ng(r);t+=`const ${o} = app.addNetwork(
+`,n}Je(vi,"generatePatternCodeWithComments");var jC=Object.defineProperty,kt=(e,t)=>jC(e,"name",{value:t,configurable:!0}),hi="fjall:costAllocation:owner",UC="engineering";function eA(e){return typeof e=="object"&&e!==null&&Object.keys(e).length===0}kt(eA,"isEmptyObject");function Ng(e){let t={...e};return eA(t.flowLogs)&&delete t.flowLogs,t}kt(Ng,"cleanNetworkConfig");function yi(e){if(!e.additionalNetworks||e.additionalNetworks.length===0)return"";let t="";for(let n of e.additionalNetworks){let o=Pt(n.name),r={};n.maxAzs!==void 0&&(r.maxAzs=n.maxAzs),n.natGateways!==void 0&&(r.natGateways=n.natGateways),n.flowLogs!==void 0&&(r.flowLogs=n.flowLogs),n.vpcEndpoints!==void 0&&(r.vpcEndpoints=n.vpcEndpoints);let i=Ng(r);t+=`const ${o} = app.addNetwork(
   NetworkFactory.build("${n.name}", ${Z(i,"  ")})
 );
 
-`}return t}kt(yi,"generateNetworkCode");function bc(e){let t={};return e.tags&&Object.keys(e.tags).length>0&&Object.assign(t,e.tags),t[hi]||(t[hi]=e.owner||jC),`app.addTags({
+`}return t}kt(yi,"generateNetworkCode");function bc(e){let t={};return e.tags&&Object.keys(e.tags).length>0&&Object.assign(t,e.tags),t[hi]||(t[hi]=e.owner||UC),`app.addTags({
 ${Object.entries(t).map(([n,o])=>`  "${n}": "${o}"`).join(`,
 `)}
 });
@@ -359,10 +359,10 @@ app.addCdn(
     accessGate: ${Z(e.cdn.accessGate,"    ")}`),n+=ce(e.cdn.extraProperties),n+=`
   })
 );
-`,n}kt(Ec,"generateCDNCode");function Ac(e){let t=new Set;if(e.cdn&&(e.cdn.defaultOriginRef&&t.add(e.cdn.defaultOriginRef),e.cdn.behaviours))for(let n of e.cdn.behaviours)t.add(n.originRef);return t}kt(Ac,"collectCdnReferencedResources");function xc(e){return e.patternConfig!==void 0}kt(xc,"usesPatternApproach");var UC=Object.defineProperty,Pr=(e,t)=>UC(e,"name",{value:t,configurable:!0}),bi="service",Rg="0 4 * * ? *",Pg="0 5 * * ? *",Ct=Object.freeze({tinkerer:{displayName:"Tinkerer",description:"Free tier eligible, minimal cost for experimentation",database:{Instance:{instanceType:"t4g.micro",multiAz:!1,proxy:!1,readReplica:!1,publiclyAccessible:!0},Aurora:null,GlobalAurora:null,ClickHouse:null},compute:{ecs:{services:[{name:bi,capacityProvider:"EC2",desiredCount:1,minCapacity:1,maxCapacity:1,ec2Config:{instanceType:"t4g.micro",amiHardwareType:"ARM",minCapacity:1,maxCapacity:1,memoryLimitMiB:400}}],cluster:{directAccess:!0}},lambda:{timeout:30,memory:128}},network:{maxAzs:2,natGateways:!1,flowLogs:!1},backup:!1},lightweight:{displayName:"Lightweight",description:"Streamlined single-AZ deployment for cost efficiency",database:{Instance:{instanceType:"t4g.small",multiAz:!1},Aurora:{readers:!1},GlobalAurora:null,ClickHouse:null},compute:{ecs:{services:[{name:bi,capacityProvider:"FARGATE_SPOT",cpu:256,memoryLimitMiB:512,desiredCount:1,minCapacity:1,maxCapacity:3}]},lambda:{timeout:30,memory:256}},network:{maxAzs:2,natGateways:{count:1},flowLogs:!1},backup:!1},standard:{displayName:"Standard",description:"Production-ready with sensible defaults",database:{Instance:{instanceType:"t4g.large"},Aurora:{readers:{count:1}},GlobalAurora:{readers:{count:1}},ClickHouse:{instanceType:"t4g.medium",coldTier:{mode:"s3"},optimiseSchedule:Rg,backupSchedule:Pg,backupRetentionDays:14}},compute:{ecs:{services:[{name:bi,capacityProvider:"FARGATE",cpu:512,memoryLimitMiB:1024,desiredCount:2,minCapacity:2,maxCapacity:5}]},lambda:{timeout:60,memory:256}},network:{maxAzs:3,natGateways:{count:1},flowLogs:{},vpcEndpoints:{interface:{ecr:!0}}},backup:!1},resilient:{displayName:"Resilient",description:"High availability with enhanced monitoring and scaling",database:{Instance:{instanceType:"r7g.large",encryption:{storageKey:{useCMK:!0}},databaseInsights:{mode:"advanced",encryptionKey:{useCMK:!0}},proxy:{requireTLS:!0}},Aurora:{readers:{count:2},encryption:{storageKey:{useCMK:!0}},databaseInsights:{mode:"advanced",encryptionKey:{useCMK:!0}},proxy:{requireTLS:!0},backupRetention:30},GlobalAurora:{readers:{count:2},encryption:{storageKey:{useCMK:!0}},databaseInsights:{mode:"advanced",encryptionKey:{useCMK:!0}},proxy:{requireTLS:!0},backupRetention:30,enableGlobalWriteForwarding:!0},ClickHouse:{instanceType:"m6g.large",coldTier:{mode:"s3"},optimiseSchedule:Rg,backupSchedule:Pg,backupRetentionDays:14}},compute:{ecs:{services:[{name:bi,capacityProvider:"FARGATE",cpu:1024,memoryLimitMiB:2048,desiredCount:4,minCapacity:4,maxCapacity:20}]},lambda:{timeout:120,memory:512}},network:{maxAzs:3,natGateways:{count:3},flowLogs:{retentionDays:90},vpcEndpoints:{interface:{ecr:!0,secretsManager:!0}}},backup:{tier:"resilient"}},enterprise:{displayName:"Enterprise",description:"Maximum capability with all features enabled",database:{Instance:{instanceType:"r7g.xlarge",encryption:{storageKey:{useCMK:!0}},databaseInsights:{mode:"advanced",encryptionKey:{useCMK:!0}},proxy:{requireTLS:!0},readReplica:{}},Aurora:{readers:{count:2},encryption:{storageKey:{useCMK:!0}},databaseInsights:{mode:"advanced",encryptionKey:{useCMK:!0}},proxy:{requireTLS:!0},backupRetention:35},GlobalAurora:{readers:{count:2},encryption:{storageKey:{useCMK:!0}},databaseInsights:{mode:"advanced",encryptionKey:{useCMK:!0}},proxy:{requireTLS:!0},backupRetention:35,enableGlobalWriteForwarding:!0},ClickHouse:{instanceType:"m6g.xlarge",coldTier:{mode:"s3"},optimiseSchedule:Rg,backupSchedule:Pg,backupRetentionDays:30}},compute:{ecs:{services:[{name:bi,capacityProvider:"FARGATE",cpu:2048,memoryLimitMiB:4096,desiredCount:6,minCapacity:6,maxCapacity:100}]},lambda:{timeout:300,memory:1024}},network:{maxAzs:3,natGateways:{count:3},flowLogs:{destination:"s3",retentionDays:365},vpcEndpoints:{interface:{ecr:!0,secretsManager:!0,kms:!0,cloudwatchLogs:!0}}},backup:{tier:"enterprise"}}});function LC(e,t){return Ct[e].database[t]}Pr(LC,"getDatabasePreset");function FC(e){return Ct[e].compute.ecs}Pr(FC,"getEcsPreset");function kg(e){return Ct[e].network}Pr(kg,"getNetworkPreset");function tA(e){return Ms.filter(t=>Ct[t].database[e]!==null)}Pr(tA,"getAvailableTiersForDatabase");function ZC(e){return tA(e).map(t=>({label:Ct[t].displayName,value:t,description:Ct[t].description}))}Pr(ZC,"getTierOptionsForDatabase");function Cg(e){switch(e){case"tinkerer":case"lightweight":case"standard":return"Instance";case"resilient":case"enterprise":return"Aurora"}}Pr(Cg,"getDefaultDatabaseTypeForTier");function Og(e,t){let n=Ct[e].compute.ecs,o=n.services[0],r=!n.cluster?.directAccess&&n.cluster?.loadBalancer!==!1,i=t.filter(c=>c.serviceType!=="worker").length,a=t.findIndex(c=>c.serviceType!=="worker");return t.map((c,u)=>{let l=u===a,m=c.serviceType==="worker",p;return r&&!m&&(c.routing?p=c.routing:i>1&&(p={path:l?"/*":`/${c.name.toLowerCase()}/*`,...l?{}:{priority:100+u}})),{name:c.name,capacityProvider:o.capacityProvider,ec2Config:o.ec2Config,cpu:o.cpu,memoryLimitMiB:o.memoryLimitMiB,desiredCount:o.desiredCount,minCapacity:o.minCapacity,maxCapacity:o.maxCapacity,routing:p}})}Pr(Og,"applyTierDefaultsToServices");var VC=Object.defineProperty,Dg=(e,t)=>VC(e,"name",{value:t,configurable:!0}),Si=["lightweight","standard","resilient"],BC=[...Si,"custom"],Xt=Object.freeze({lightweight:{displayName:"Lightweight",description:"Cost-effective \xB7 Instance DB, minimal Lambda",database:{type:"Instance",instanceType:"t4g.small",backupRetention:7,deletionProtection:!1},compute:{memorySize:512,timeout:30},network:{maxAzs:2,natGateways:{count:1},flowLogs:!1},backup:!1},standard:{displayName:"Standard",description:"Production-ready \xB7 Instance DB, balanced Lambda",database:{type:"Instance",instanceType:"t4g.large",backupRetention:14,deletionProtection:!0},compute:{memorySize:1536,timeout:60},network:{maxAzs:3,natGateways:{count:1},flowLogs:{}},backup:{tier:"standard"}},resilient:{displayName:"Resilient",description:"High-availability \xB7 Aurora V2, KMS encryption",database:{type:"Aurora",backupRetention:30,deletionProtection:!0,encryption:{useCMK:!0}},compute:{memorySize:2048,timeout:120},network:{maxAzs:3,natGateways:{count:3},flowLogs:{retentionDays:90}},backup:{tier:"resilient"}}});function $c(e){return Xt[e]}Dg($c,"getPatternTierPreset");function rA(){return[{label:Xt.standard.displayName,value:"standard",description:Xt.standard.description},{label:Xt.lightweight.displayName,value:"lightweight",description:Xt.lightweight.description},{label:Xt.resilient.displayName,value:"resilient",description:Xt.resilient.description},{label:"Custom",value:"custom",description:"Full control \xB7 Configure everything"}]}Dg(rA,"getPatternTierOptions");var GC=new Set(Si);function Ic(e){return GC.has(e)}Dg(Ic,"isPatternTierName");var WC=Object.defineProperty,nA=(e,t)=>WC(e,"name",{value:t,configurable:!0}),oA=Object.freeze({standard:{},assets:{versioned:!0,deployment:{source:"./assets"}},upload:{versioned:!0,cors:[{allowedOrigins:["*"],allowedMethods:["GET","PUT","POST"]}]},website:{publicReadAccess:!0,websiteHosting:{indexDocument:"index.html",errorDocument:"error.html"}}});function iA(e){return{...oA[e]}}nA(iA,"getStoragePreset");function aA(){return[{label:"Standard",value:"standard"},{label:"Assets",value:"assets"},{label:"Upload",value:"upload"},{label:"Website Hosting",value:"website"}]}nA(aA,"getStoragePresetOptions");import*as ue from"typescript";import*as O from"typescript";var KC=Object.defineProperty,Mn=(e,t)=>KC(e,"name",{value:t,configurable:!0});function j(e){let t={};for(let n of e.properties){if(!O.isPropertyAssignment(n))continue;let o=O.isIdentifier(n.name)||O.isStringLiteral(n.name)?n.name.text:void 0;o!==void 0&&(t[o]=Yt(n.initializer))}return t}Mn(j,"parseObjectLiteral");function Yt(e){if(O.isStringLiteral(e))return e.text;if(O.isNumericLiteral(e))return Number(e.text);if(e.kind===O.SyntaxKind.TrueKeyword)return!0;if(e.kind===O.SyntaxKind.FalseKeyword)return!1;if(O.isArrayLiteralExpression(e))return e.elements.map(t=>Yt(t));if(O.isObjectLiteralExpression(e))return j(e);if(O.isIdentifier(e))return{__identifier:e.text};if(O.isPropertyAccessExpression(e))return{__expression:e.getText()};if(O.isCallExpression(e))return{__call:e.getText()};if(O.isBinaryExpression(e)&&e.operatorToken.kind===O.SyntaxKind.BarBarToken){let t=Yt(e.left),n=Yt(e.right);return typeof n=="string"?n:t}else if(O.isConditionalExpression(e)){let t=Yt(e.whenTrue),n=Yt(e.whenFalse);return typeof n=="string"||typeof n=="number"?n:t}else if(O.isTemplateExpression(e)||O.isNoSubstitutionTemplateLiteral(e))return{__expression:e.getText()};return{__unknown:e.getText()}}Mn(Yt,"evaluateExpression");function _i(e,t){return Fe(e,n=>{if(O.isVariableStatement(n)){for(let o of n.declarationList.declarations)if(O.isIdentifier(o.name)&&o.name.text===t&&o.initializer){if(O.isStringLiteral(o.initializer))return o.initializer.text;if(O.isObjectLiteralExpression(o.initializer)){let r=j(o.initializer);return JSON.stringify(r)}}}})}Mn(_i,"findVariableValue");function wg(e,t){return Fe(e,n=>{if(O.isVariableStatement(n)){for(let o of n.declarationList.declarations)if(O.isIdentifier(o.name)&&o.name.text===t&&o.initializer&&O.isObjectLiteralExpression(o.initializer))return j(o.initializer)}})}Mn(wg,"findObjectDeclaration");function Ei(e,t){if(!O.isIdentifier(t.expression))return;let n=wg(e,t.expression.text),o=t.name.text;if(n&&n[o]!==void 0)return String(n[o])}Mn(Ei,"evaluatePropertyAccess");function Tc(e,t){let n=t.head.text;for(let o of t.templateSpans){if(O.isIdentifier(o.expression)){let r=_i(e,o.expression.text);if(r)n+=r;else return t.getText(e).replace(/^`|`$/g,"")}else if(O.isPropertyAccessExpression(o.expression)){let r=Ei(e,o.expression);if(r)n+=r;else return t.getText(e).replace(/^`|`$/g,"")}else return t.getText(e).replace(/^`|`$/g,"");n+=o.literal.text}return n}Mn(Tc,"resolveTemplateLiteral");var HC=Object.defineProperty,Y=(e,t)=>HC(e,"name",{value:t,configurable:!0});function qe(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}Y(qe,"isPlainObject");function Ot(e){return qe(e)&&"__identifier"in e}Y(Ot,"isIdentifierRef");function Jt(e){return qe(e)&&"__expression"in e}Y(Jt,"isExpressionRef");function ct(e){return qe(e)&&"__call"in e}Y(ct,"isCallRef");function N(e){return qe(e)&&!("__identifier"in e)&&!("__expression"in e)&&!("__call"in e)&&!("__unknown"in e)}Y(N,"isParsedObject");function y(e){return typeof e=="string"?e:void 0}Y(y,"asString");function I(e){return typeof e=="number"?e:void 0}Y(I,"asNumber");function w(e){return typeof e=="boolean"?e:void 0}Y(w,"asBoolean");function re(e){if(!Array.isArray(e))return;let t=[];for(let n of e)typeof n=="string"&&t.push(n);return t.length>0?t:void 0}Y(re,"asStringArray");function M(e,t){let n=y(e);if(n!==void 0)return Xe(t,n)?n:void 0}Y(M,"asStringUnion");function ze(e){let t={};for(let[n,o]of Object.entries(e))o!==void 0&&(t[n]=o);return t}Y(ze,"omitUndefined");function Nc(e){if(e===null)return"null";if(e===void 0)return"undefined";if(typeof e=="string")return JSON.stringify(e);if(typeof e=="number"||typeof e=="boolean")return String(e);if(Array.isArray(e))return`[${e.map(Nc).join(", ")}]`;if(!qe(e))return String(e);if(Ot(e))return e.__identifier;if(Jt(e))return e.__expression;if(ct(e))return e.__call;if("__unknown"in e&&typeof e.__unknown=="string")return e.__unknown;let t=Object.entries(e);return t.length===0?"{}":`{ ${t.map(([n,o])=>`${n}: ${Nc(o)}`).join(", ")} }`}Y(Nc,"parsedValueToSourceText");function te(e,t){let n=[];for(let[o,r]of Object.entries(e))t.has(o)||r===void 0||n.push({key:o,sourceText:Nc(r)});return n}Y(te,"captureExtraProperties");function qt(e,t){return ue.isPropertyAssignment(e)&&ue.isIdentifier(e.name)&&e.name.text===t}Y(qt,"isNamedProperty");function bt(e){return ue.isCallExpression(e)&&ue.isPropertyAccessExpression(e.expression)&&e.expression.name.text==="getApp"&&ue.isIdentifier(e.expression.expression)&&e.expression.expression.text==="App"}Y(bt,"isAppGetAppCall");function fe(e,t){let{expression:n}=e;return ue.isPropertyAccessExpression(n)&&n.name.text===t&&e.arguments.length>0}Y(fe,"isFactoryMethodCall");function Fe(e,t){let n,o=Y(r=>{n===void 0&&(n=t(r),n===void 0&&ue.forEachChild(r,o))},"visit");return o(e),n}Y(Fe,"findFirstInAst");function be(e,t){let n=[],o=Y(r=>{let i=t(r);i!==null&&n.push(i),ue.forEachChild(r,o)},"visit");return o(e),n}Y(be,"collectFromAst");function Re(e,t){return ue.isCallExpression(e)&&ue.isPropertyAccessExpression(e.expression)&&e.expression.name.text==="build"&&ue.isIdentifier(e.expression.expression)&&e.expression.expression.text===t}Y(Re,"isFactoryBuildCall");function Ze(e){let t=e.parent;if(ue.isVariableDeclaration(t)&&ue.isIdentifier(t.name))return t.name.text}Y(Ze,"extractVariableName");var Qe=Y(()=>e=>e,"typed");function jn(e){if(e!=null){if(e===!1)return!1;if(typeof e=="object"&&!Array.isArray(e))return e}}Y(jn,"asObjectOrFalse");function Dt(e,t){return e===!1?!1:N(e)?t(e):void 0}Y(Dt,"parseBooleanOrConfig");function Se(e,t){return N(e)?t(e):void 0}Y(Se,"parseOptionalConfig");function et(e,t,n){let o=e[t];return N(o)?n(o):void 0}Y(et,"extractSubConfig");import*as V from"typescript";import*as Un from"typescript";var XC=Object.defineProperty,Ve=(e,t)=>XC(e,"name",{value:t,configurable:!0});function Ai(e){return e!==void 0&&qe(e)}Ve(Ai,"isEnvironmentRecord");function sA(e){if(!N(e))return;let t={};for(let[n,o]of Object.entries(e))if(N(o)){let r=y(o.id),i=y(o.name);r&&i&&(t[n]={id:r,name:i,field:y(o.field)})}return Object.keys(t).length>0?t:void 0}Ve(sA,"parseContainerSecretsImport");function cA(e){if(!N(e))return;let t=re(e.command);if(!(!t||t.length===0))return{command:t,interval:I(e.interval),timeout:I(e.timeout),retries:I(e.retries),startPeriod:I(e.startPeriod)}}Ve(cA,"parseContainerHealthCheck");function uA(e){let t=te(e,new Set(["name","image","port","environment","essential","command","entryPoint","secretsImport","secrets","healthCheck"]));return{name:y(e.name),image:y(e.image),port:I(e.port),environment:Ai(e.environment)?e.environment:void 0,essential:w(e.essential),command:re(e.command),entryPoint:re(e.entryPoint),secretsImport:sA(e.secretsImport),ssmSecrets:re(e.secrets),healthCheck:cA(e.healthCheck),extraProperties:t.length>0?t:void 0}}Ve(uA,"parseServiceContainer");function lA(e){if(Array.isArray(e))return e.filter(N).map(t=>({path:y(t.path),host:y(t.host),priority:I(t.priority),healthCheckPath:y(t.healthCheckPath)}));if(N(e))return{path:y(e.path),host:y(e.host),priority:I(e.priority),healthCheckPath:y(e.healthCheckPath)}}Ve(lA,"parseServiceRouting");function dA(e){if(e===!1)return!1;if(N(e))return{minCapacity:I(e.minCapacity),maxCapacity:I(e.maxCapacity),desiredCount:I(e.desiredCount),scalingType:M(e.scalingType,Fs)}}Ve(dA,"parseServiceScaling");var YC=new Set(["instanceType","amiHardwareType","minCapacity","maxCapacity","memoryLimitMiB","warmPool"]);function mA(e){if(!N(e))return;let t=e.warmPool,n=N(t)?{minSize:I(t.minSize),reuseOnScaleIn:w(t.reuseOnScaleIn)}:void 0,o=te(e,YC);return{instanceType:y(e.instanceType),amiHardwareType:M(e.amiHardwareType,Zs),minCapacity:I(e.minCapacity),maxCapacity:I(e.maxCapacity),memoryLimitMiB:I(e.memoryLimitMiB),warmPool:n,extraProperties:o.length>0?o:void 0}}Ve(mA,"parseServiceEc2Config");var JC=new Set(["domain","loadBalancer","directAccess"]);function zg(e){if(!N(e))return;let t=e.loadBalancer,n=te(e,JC);return{domain:y(e.domain),loadBalancer:t===!1?!1:M(t,Ls),directAccess:w(e.directAccess),...n.length>0&&{extraProperties:n}}}Ve(zg,"extractClusterConfig");function Mg(e){let t=e.containers,n=Array.isArray(t)?t.filter(N).map(uA):void 0,o=te(e,new Set(["name","image","docker","ssmSecretsPath","containers","routing","connections","cpu","memoryLimitMiB","desiredCount","scaling","capacityProvider","ec2Config"]));return{name:y(e.name)??"",image:y(e.image),docker:pA(e.docker),ssmSecretsPath:y(e.ssmSecretsPath),containers:n,routing:lA(e.routing),cpu:I(e.cpu),memoryLimitMiB:I(e.memoryLimitMiB),desiredCount:I(e.desiredCount),scaling:dA(e.scaling),capacityProvider:M(e.capacityProvider,An)??"FARGATE",ec2Config:mA(e.ec2Config),...o.length>0&&{extraProperties:o}}}Ve(Mg,"parseEcsService");function pA(e){if(!N(e))return;let t=y(e.path);if(t===void 0)return;let n=y(e.context),o=y(e.target);return{path:t,...n!==void 0&&{context:n},...o!==void 0&&{target:o}}}Ve(pA,"parseServiceDocker");function xi(e,t){let n=y(e);if(n)return n;if(Jt(e)&&e.__expression.startsWith(t+"."))return e.__expression.slice(t.length+1)}Ve(xi,"extractEnumString");function jg(e){return ct(e)?e.__call.match(/\(\s*"([^"]+)"\s*\)/)?.[1]:void 0}Ve(jg,"extractCallStringArg");function _e(e,t,n){n!==void 0&&(e[t]=n)}Ve(_e,"assignIfDefined");var qC=Object.defineProperty,Rc=(e,t)=>qC(e,"name",{value:t,configurable:!0}),QC=10;function Ug(e,t){return Array.isArray(e)?e.filter(Ot).map(n=>t.find(o=>o.variableName===n.__identifier)).filter(n=>n!==void 0).map(n=>n.resourceName):[]}Rc(Ug,"resolveConnectedDatabaseNames");function Lg(e,t){return Array.isArray(e)?e.filter(Ot).map(n=>t.find(o=>o.variableName===n.__identifier)).filter(n=>n!==void 0).map(n=>n.resourceName):[]}Rc(Lg,"resolveConnectedStorageNames");function Fg(e,t,n){if(!Array.isArray(t)||t.length===0)return;let o=t[0];if(!N(o))return;let r=o.containers;if(!Array.isArray(r)||r.length===0)return;let i=r[0];if(!N(i)||!N(i.environment))return;let a=i.environment;(a.DATABASE_HOST||a.DATABASE_PORT||a.DATABASE_NAME)&&(e.needsConnection=!0,n.length>0&&(e.connectedDatabase??[]).length===0&&(e.connectedDatabase=[n[0].name]));for(let c=1;c<=QC;c++)(a[`DATABASE_HOST_${c}`]||a[`DATABASE_PORT_${c}`]||a[`DATABASE_NAME_${c}`])&&(e.needsConnection=!0)}Rc(Fg,"inferDatabaseConnectionsFromEnv");function Zg(e,t,n){if(!Array.isArray(t)||t.length===0)return;let o=t[0];if(!N(o))return;let r=o.containers;if(!Array.isArray(r)||r.length===0)return;let i=r[0];!N(i)||!N(i.environment)||i.environment.BUCKET_NAME&&n.length>0&&(e.connectedStorage??[]).length===0&&(e.connectedStorage=[n[0].name])}Rc(Zg,"inferStorageConnectionsFromEnv");var eO=Object.defineProperty,wt=(e,t)=>eO(e,"name",{value:t,configurable:!0});function fA(e){if(e.arguments.length<2)return null;let t=e.arguments[0],n=e.arguments[1];if(!Un.isStringLiteral(t)||!Un.isObjectLiteralExpression(n))return null;let o=t.text,r=j(n);return{resourceName:o,type:y(r.type)??"ecs",config:r,node:e}}wt(fA,"extractComputeResource");function Pc(e){return be(e,t=>{if(!Un.isCallExpression(t)||!fe(t,"addCompute"))return null;let n=t.arguments[0];if(!Re(n,"ComputeFactory"))return null;let o=fA(n);if(o){let r=Ze(t);r&&(o.variableName=r)}return o})}wt(Pc,"findComputeResources");function kc(e,t,n){let o=te(e.config,n);o.length>0&&(t.extraProperties=o)}wt(kc,"applyExtras");function gA(e,t){let n=e.config.docker;if(N(n)){let i=y(n.path),a=y(n.context),c=y(n.target);(i!==void 0||a!==void 0||c!==void 0)&&(t.docker={...i!==void 0&&{path:i},...a!==void 0&&{context:a},...c!==void 0&&{target:c}})}let o=e.config.cluster;o!==void 0&&(t.cluster=zg(o));let r=e.config.services;r!==void 0&&Array.isArray(r)&&(t.services=r.filter(i=>N(i)).map(Mg)),kc(e,t,new Set(["type","ecrRepository","docker","cluster","services","connections"]))}wt(gA,"convertEcsCompute");function vA(e,t){if(_e(t,"deployment",M(e.config.deployment,js)),_e(t,"timeout",I(e.config.timeout)),_e(t,"memory",I(e.config.memorySize)??I(e.config.memory)),_e(t,"handler",y(e.config.handler)),_e(t,"runtime",xi(e.config.runtime,"Runtime")),Ai(e.config.environment)&&(t.environment=e.config.environment),Ai(e.config.secrets))t.secrets=e.config.secrets;else{let r=re(e.config.secrets);r&&(t.ssmSecrets=r)}let n=e.config.functionUrl;if(N(n)){let r=M(xi(n.authType,"FunctionUrlAuthType"),Ko);r!==void 0&&(t.functionUrl={authType:r})}let o=e.config.code;if(o!==void 0){let r=jg(o);r&&(t.codePath=r)}_e(t,"description",y(e.config.lambdaDescription)),_e(t,"architecture",M(xi(e.config.architecture,"Architecture"),Us)),_e(t,"ephemeralStorageSize",I(e.config.ephemeralStorageSize)),_e(t,"functionName",y(e.config.functionName)),_e(t,"ssmSecretsPath",y(e.config.ssmSecretsPath)),kc(e,t,new Set(["type","deployment","timeout","memorySize","memory","handler","runtime","environment","secrets","functionUrl","code","connections","ecrRepository","containerSecretsImport","lambdaDescription","architecture","ephemeralStorageSize","functionName","ssmSecretsPath"]))}wt(vA,"convertLambdaCompute");function hA(e,t){_e(t,"instanceType",M(e.config.instanceType,Vs));let n=e.config.ssh;n===!1?t.enableSSH=!1:n!==void 0&&N(n)?t.enableSSH=!0:_e(t,"enableSSH",w(e.config.enableSSH)),_e(t,"keyName",y(e.config.keyName)),_e(t,"userData",y(e.config.userData)),e.config.securityGroups!==void 0&&(t.securityGroups=re(e.config.securityGroups)),kc(e,t,new Set(["type","instanceType","ssh","enableSSH","keyName","userData","securityGroups","connections"]))}wt(hA,"convertEc2Compute");function yA(e,t,n,o){let r=t.config.connections;if(!r&&Array.isArray(t.config.services)){let c=t.config.services[0];N(c)&&(r=c.connections)}if(!r)return;let i=Ug(r,n);i.length>0&&(e.needsConnection=!0,e.connectedDatabase=i);let a=Lg(r,o);a.length>0&&(e.connectedStorage=a)}wt(yA,"applyConnectionConfig");function bA(e,t){({ecs:gA,lambda:vA,ec2:hA})[e.type]?.(t,e)}wt(bA,"applyTypeSpecificConfig");function Vg(e,t,n,o){return e.map(r=>{let i=M(r.config.type,Go)??"ecs",a={name:r.resourceName,type:i,needsConnection:!1,connectedDatabase:[],...r.variableName&&{variableName:r.variableName}};return yA(a,r,t,n),bA(a,r),Fg(a,r.config.services,o.database),Zg(a,r.config.services,o.s3),a})}wt(Vg,"convertComputeResources");import*as tt from"typescript";var tO=Object.defineProperty,rO=(e,t)=>tO(e,"name",{value:t,configurable:!0});function Cc(e){return be(e,t=>{if(!tt.isCallExpression(t)||!fe(t,"addSchedule")||t.arguments.length<2)return null;let n=t.arguments[0],o=t.arguments[1];if(!tt.isStringLiteral(n)||!tt.isObjectLiteralExpression(o))return null;let r=j(o),i=y(r.schedule);if(i===void 0)return null;let a=o.properties.find(c=>tt.isPropertyAssignment(c)&&tt.isIdentifier(c.name)&&c.name.text==="target");return!a||!tt.isPropertyAssignment(a)||!tt.isIdentifier(a.initializer)?null:{id:n.text,schedule:i,targetVariableName:a.initializer.text}})}rO(Cc,"findSchedules");import*as J from"typescript";import*as Pe from"typescript";var nO=Object.defineProperty,$i=(e,t)=>nO(e,"name",{value:t,configurable:!0}),Bg=new Set(["S3Bucket"]);function SA(e,t,n){let o=Pe.isIdentifier(e.name)?e.name.text:"";if(t.arguments&&t.arguments.length>=2){let r=t.arguments[1],i=Pe.isStringLiteral(r)?r.text:"",a=t.arguments.length>=3?t.arguments[2]:void 0,c=a&&Pe.isObjectLiteralExpression(a)?j(a):{};return{variableName:o,resourceName:i,bucketClass:n,config:c,node:e}}return null}$i(SA,"extractS3Resource");function _A(e,t){if(t.arguments.length<2)return null;let n=t.arguments[0],o=t.arguments[1];if(!Pe.isStringLiteral(n)||!Pe.isObjectLiteralExpression(o))return null;let r=j(o);return{variableName:Ze(e)??"",resourceName:n.text,bucketClass:"StorageFactory",config:r,node:e}}$i(_A,"extractS3FactoryResource");function Gg(e){return be(e,t=>{if(!Pe.isVariableDeclaration(t)||!t.initializer||!Pe.isNewExpression(t.initializer))return null;let n=t.initializer;if(!Pe.isIdentifier(n.expression))return null;let o=n.expression.text;return Bg.has(o)?SA(t,n,o):null})}$i(Gg,"findS3Resources");function Wg(e){return be(e,t=>{if(!Pe.isCallExpression(t)||!fe(t,"addStorage"))return null;let n=t.arguments[0];return Re(n,"StorageFactory")?_A(t,n):null})}$i(Wg,"findS3FactoryResources");function Kg(e){return e.map(t=>({name:t.resourceName,...y(t.config.bucketName)&&{bucketName:y(t.config.bucketName)},...w(t.config.publicReadAccess)===!0&&{publicReadAccess:!0},...N(t.config.websiteHosting)&&(()=>{let n=t.config.websiteHosting;return{websiteHosting:{indexDocument:y(n.indexDocument)??"index.html",...y(n.errorDocument)&&{errorDocument:y(n.errorDocument)}}}})(),...M(t.config.backupVaultTier,at)&&{backupVaultTier:M(t.config.backupVaultTier,at)},...w(t.config.versioned)!==void 0&&{versioned:w(t.config.versioned)},...M(t.config.encryption,Tn)&&{encryption:M(t.config.encryption,Tn)},...y(t.config.kmsKeyArn)&&{kmsKeyArn:y(t.config.kmsKeyArn)},...Array.isArray(t.config.cors)&&t.config.cors.length>0&&{cors:t.config.cors.filter(N).map(n=>({allowedOrigins:Array.isArray(n.allowedOrigins)?n.allowedOrigins.filter(o=>typeof o=="string"):[],allowedMethods:Array.isArray(n.allowedMethods)?n.allowedMethods.filter(o=>typeof o=="string"):[]}))},...N(t.config.deployment)&&(()=>{let n=t.config.deployment;return{deployment:{source:y(n.source)??"",...w(n.prune)!==void 0&&{prune:w(n.prune)},...N(n.cacheControl)&&(()=>{let o=n.cacheControl;return{cacheControl:{...I(o.maxAge)!==void 0&&{maxAge:I(o.maxAge)},...w(o.immutable)!==void 0&&{immutable:w(o.immutable)}}}})()}}})(),...M(t.config.stackPlacement,rc)&&{stackPlacement:M(t.config.stackPlacement,rc)},...t.variableName&&{variableName:t.variableName},...(()=>{let n=new Set(["bucketName","publicReadAccess","websiteHosting","backupVaultTier","versioned","encryption","kmsKeyArn","cors","deployment","stackPlacement"]),o=te(t.config,n);return o.length>0?{extraProperties:o}:{}})()}))}$i(Kg,"convertS3Resources");var oO=Object.defineProperty,kr=(e,t)=>oO(e,"name",{value:t,configurable:!0}),EA=new Set(["App","Architecture","DatabaseFactory","StorageFactory","ComputeFactory","getConfig","MessagingFactory","CdnFactory","Code","Runtime","FunctionUrlAuthType","NetworkFactory","PatternFactory","VpcPeerFactory","VpcPeerAccepterFactory","CrossPlanConnectionFactory"]);function Oc(e){return!!(e.startsWith("@fjall/")||e==="aws-cdk-lib"||e.startsWith("aws-cdk-lib/")||e==="constructs")}kr(Oc,"isManagedModuleSpecifier");function Me(e){let t=[];for(let n of e.statements){let o=n.getFullStart(),r=n.getEnd();if(J.isImportDeclaration(n)){t.push({type:"import",node:n,startPos:o,endPos:r,isManaged:AA(n)});continue}if(J.isVariableStatement(n)){t.push(xA(n,o,r));continue}if(J.isExpressionStatement(n)){t.push($A(n,o,r));continue}t.push({type:"custom",node:n,startPos:o,endPos:r,isManaged:!1})}return t}kr(Me,"classifyStatements");function AA(e){return J.isStringLiteral(e.moduleSpecifier)?Oc(e.moduleSpecifier.text):!1}kr(AA,"isManagedImport");function xA(e,t,n){for(let o of e.declarationList.declarations)if(o.initializer){if(bt(o.initializer))return{type:"app-init",node:e,resourceName:J.isIdentifier(o.name)?o.name.text:void 0,startPos:t,endPos:n,isManaged:!0};if(J.isIdentifier(o.name)&&o.name.text==="appName"&&J.isStringLiteral(o.initializer))return{type:"app-init",node:e,startPos:t,endPos:n,isManaged:!0};if(J.isNewExpression(o.initializer)){let r=o.initializer;if(J.isIdentifier(r.expression)){let i=r.expression.text;if(Bg.has(i)){let a=r.arguments&&r.arguments.length>=2&&J.isStringLiteral(r.arguments[1])?r.arguments[1].text:void 0;return{type:"storage",node:e,resourceName:a,startPos:t,endPos:n,isManaged:!0}}}}if(J.isCallExpression(o.initializer)){let r=Hg(o.initializer,e,t,n);if(r.type!=="custom")return r}}return{type:"custom",node:e,startPos:t,endPos:n,isManaged:!1}}kr(xA,"classifyVariableStatement");function $A(e,t,n){let o=e.expression;return J.isCallExpression(o)?Hg(o,e,t,n):{type:"custom",node:e,startPos:t,endPos:n,isManaged:!1}}kr($A,"classifyExpressionStatement");function Hg(e,t,n,o){let r=e.expression;if(J.isPropertyAccessExpression(r)&&J.isIdentifier(r.expression)){let i=r.name.text;if(i==="addTags")return{type:"tags",node:t,startPos:n,endPos:o,isManaged:!0};let a={addDatabase:{type:"database",factory:"DatabaseFactory"},addCompute:{type:"compute",factory:"ComputeFactory"},addNetwork:{type:"network",factory:"NetworkFactory"},addMessaging:{type:"messaging",factory:"MessagingFactory"},addCdn:{type:"cdn",factory:"CdnFactory"},addPattern:{type:"pattern",factory:"PatternFactory"},addStorage:{type:"storage",factory:"StorageFactory"},addVpcPeer:{type:"vpc-peer",factory:"VpcPeerFactory"},addVpcPeerAccepter:{type:"vpc-peer-accepter",factory:"VpcPeerAccepterFactory"}}[i];if(a){let c=IA(e,a.factory);return{type:a.type,node:t,resourceName:c,startPos:n,endPos:o,isManaged:!0}}}return{type:"custom",node:t,startPos:n,endPos:o,isManaged:!1}}kr(Hg,"classifyCallExpression");function IA(e,t){if(e.arguments.length===0)return;let n=e.arguments[0];if(!J.isCallExpression(n))return;let o=n.expression;if(!J.isPropertyAccessExpression(o)||o.name.text!=="build"||!J.isIdentifier(o.expression)||o.expression.text!==t||n.arguments.length===0)return;let r=n.arguments[0];if(J.isStringLiteral(r))return r.text}kr(IA,"extractResourceNameFromFactoryCall");import*as TA from"typescript";var iO=Object.defineProperty,Cr=(e,t)=>iO(e,"name",{value:t,configurable:!0}),aO={import:"after-imports","app-init":"after-app-init",tags:"after-tags"};function NA(e){if(!e)return{position:"before-imports"};let t=aO[e.type];return t?{position:t}:{position:"after-resource",afterManagedResource:{type:e.type,name:e.resourceName}}}Cr(NA,"determineCustomBlockPosition");function Ii(e,t){let n=t??Me(e),o=[],r=e.getFullText(),i=null;for(let a of n)if(a.type==="custom"&&!a.isManaged){let{position:c,afterManagedResource:u}=NA(i),l=RA(r,a.node),m=PA(r,a.node),p=e.getLineAndCharacterOfPosition(a.node.getStart());o.push({sourceText:l,position:c,afterManagedResource:u,originalLine:p.line+1,leadingComments:m.length>0?m:void 0})}else a.isManaged&&(i=a);return o}Cr(Ii,"extractCustomCodeBlocks");function RA(e,t){let n=t.getFullStart(),o=t.getEnd(),r=e.slice(n,o).split(`
+`,n}kt(Ec,"generateCDNCode");function Ac(e){let t=new Set;if(e.cdn&&(e.cdn.defaultOriginRef&&t.add(e.cdn.defaultOriginRef),e.cdn.behaviours))for(let n of e.cdn.behaviours)t.add(n.originRef);return t}kt(Ac,"collectCdnReferencedResources");function xc(e){return e.patternConfig!==void 0}kt(xc,"usesPatternApproach");var LC=Object.defineProperty,Pr=(e,t)=>LC(e,"name",{value:t,configurable:!0}),bi="service",Rg="0 4 * * ? *",Pg="0 5 * * ? *",Ct=Object.freeze({tinkerer:{displayName:"Tinkerer",description:"Free tier eligible, minimal cost for experimentation",database:{Instance:{instanceType:"t4g.micro",multiAz:!1,proxy:!1,readReplica:!1,publiclyAccessible:!0},Aurora:null,GlobalAurora:null,ClickHouse:null},compute:{ecs:{services:[{name:bi,capacityProvider:"EC2",desiredCount:1,minCapacity:1,maxCapacity:1,ec2Config:{instanceType:"t4g.micro",amiHardwareType:"ARM",minCapacity:1,maxCapacity:1,memoryLimitMiB:400}}],cluster:{directAccess:!0}},lambda:{timeout:30,memory:128}},network:{maxAzs:2,natGateways:!1,flowLogs:!1},backup:!1},lightweight:{displayName:"Lightweight",description:"Streamlined single-AZ deployment for cost efficiency",database:{Instance:{instanceType:"t4g.small",multiAz:!1},Aurora:{readers:!1},GlobalAurora:null,ClickHouse:null},compute:{ecs:{services:[{name:bi,capacityProvider:"FARGATE_SPOT",cpu:256,memoryLimitMiB:512,desiredCount:1,minCapacity:1,maxCapacity:3}]},lambda:{timeout:30,memory:256}},network:{maxAzs:2,natGateways:{count:1},flowLogs:!1},backup:!1},standard:{displayName:"Standard",description:"Production-ready with sensible defaults",database:{Instance:{instanceType:"t4g.large"},Aurora:{readers:{count:1}},GlobalAurora:{readers:{count:1}},ClickHouse:{instanceType:"t4g.medium",coldTier:{mode:"s3"},optimiseSchedule:Rg,backupSchedule:Pg,backupRetentionDays:14}},compute:{ecs:{services:[{name:bi,capacityProvider:"FARGATE",cpu:512,memoryLimitMiB:1024,desiredCount:2,minCapacity:2,maxCapacity:5}]},lambda:{timeout:60,memory:256}},network:{maxAzs:3,natGateways:{count:1},flowLogs:{},vpcEndpoints:{interface:{ecr:!0}}},backup:!1},resilient:{displayName:"Resilient",description:"High availability with enhanced monitoring and scaling",database:{Instance:{instanceType:"r7g.large",encryption:{storageKey:{useCMK:!0}},databaseInsights:{mode:"advanced",encryptionKey:{useCMK:!0}},proxy:{requireTLS:!0}},Aurora:{readers:{count:2},encryption:{storageKey:{useCMK:!0}},databaseInsights:{mode:"advanced",encryptionKey:{useCMK:!0}},proxy:{requireTLS:!0},backupRetention:30},GlobalAurora:{readers:{count:2},encryption:{storageKey:{useCMK:!0}},databaseInsights:{mode:"advanced",encryptionKey:{useCMK:!0}},proxy:{requireTLS:!0},backupRetention:30,enableGlobalWriteForwarding:!0},ClickHouse:{instanceType:"m6g.large",coldTier:{mode:"s3"},optimiseSchedule:Rg,backupSchedule:Pg,backupRetentionDays:14}},compute:{ecs:{services:[{name:bi,capacityProvider:"FARGATE",cpu:1024,memoryLimitMiB:2048,desiredCount:4,minCapacity:4,maxCapacity:20}]},lambda:{timeout:120,memory:512}},network:{maxAzs:3,natGateways:{count:3},flowLogs:{retentionDays:90},vpcEndpoints:{interface:{ecr:!0,secretsManager:!0}}},backup:{tier:"resilient"}},enterprise:{displayName:"Enterprise",description:"Maximum capability with all features enabled",database:{Instance:{instanceType:"r7g.xlarge",encryption:{storageKey:{useCMK:!0}},databaseInsights:{mode:"advanced",encryptionKey:{useCMK:!0}},proxy:{requireTLS:!0},readReplica:{}},Aurora:{readers:{count:2},encryption:{storageKey:{useCMK:!0}},databaseInsights:{mode:"advanced",encryptionKey:{useCMK:!0}},proxy:{requireTLS:!0},backupRetention:35},GlobalAurora:{readers:{count:2},encryption:{storageKey:{useCMK:!0}},databaseInsights:{mode:"advanced",encryptionKey:{useCMK:!0}},proxy:{requireTLS:!0},backupRetention:35,enableGlobalWriteForwarding:!0},ClickHouse:{instanceType:"m6g.xlarge",coldTier:{mode:"s3"},optimiseSchedule:Rg,backupSchedule:Pg,backupRetentionDays:30}},compute:{ecs:{services:[{name:bi,capacityProvider:"FARGATE",cpu:2048,memoryLimitMiB:4096,desiredCount:6,minCapacity:6,maxCapacity:100}]},lambda:{timeout:300,memory:1024}},network:{maxAzs:3,natGateways:{count:3},flowLogs:{destination:"s3",retentionDays:365},vpcEndpoints:{interface:{ecr:!0,secretsManager:!0,kms:!0,cloudwatchLogs:!0}}},backup:{tier:"enterprise"}}});function FC(e,t){return Ct[e].database[t]}Pr(FC,"getDatabasePreset");function ZC(e){return Ct[e].compute.ecs}Pr(ZC,"getEcsPreset");function kg(e){return Ct[e].network}Pr(kg,"getNetworkPreset");function tA(e){return Ms.filter(t=>Ct[t].database[e]!==null)}Pr(tA,"getAvailableTiersForDatabase");function VC(e){return tA(e).map(t=>({label:Ct[t].displayName,value:t,description:Ct[t].description}))}Pr(VC,"getTierOptionsForDatabase");function Cg(e){switch(e){case"tinkerer":case"lightweight":case"standard":return"Instance";case"resilient":case"enterprise":return"Aurora"}}Pr(Cg,"getDefaultDatabaseTypeForTier");function Og(e,t){let n=Ct[e].compute.ecs,o=n.services[0],r=!n.cluster?.directAccess&&n.cluster?.loadBalancer!==!1,i=t.filter(c=>c.serviceType!=="worker").length,a=t.findIndex(c=>c.serviceType!=="worker");return t.map((c,u)=>{let l=u===a,m=c.serviceType==="worker",p;return r&&!m&&(c.routing?p=c.routing:i>1&&(p={path:l?"/*":`/${c.name.toLowerCase()}/*`,...l?{}:{priority:100+u}})),{name:c.name,capacityProvider:o.capacityProvider,ec2Config:o.ec2Config,cpu:o.cpu,memoryLimitMiB:o.memoryLimitMiB,desiredCount:o.desiredCount,minCapacity:o.minCapacity,maxCapacity:o.maxCapacity,routing:p}})}Pr(Og,"applyTierDefaultsToServices");var BC=Object.defineProperty,Dg=(e,t)=>BC(e,"name",{value:t,configurable:!0}),Si=["lightweight","standard","resilient"],GC=[...Si,"custom"],Xt=Object.freeze({lightweight:{displayName:"Lightweight",description:"Cost-effective \xB7 Instance DB, minimal Lambda",database:{type:"Instance",instanceType:"t4g.small",backupRetention:7,deletionProtection:!1},compute:{memorySize:512,timeout:30},network:{maxAzs:2,natGateways:{count:1},flowLogs:!1},backup:!1},standard:{displayName:"Standard",description:"Production-ready \xB7 Instance DB, balanced Lambda",database:{type:"Instance",instanceType:"t4g.large",backupRetention:14,deletionProtection:!0},compute:{memorySize:1536,timeout:60},network:{maxAzs:3,natGateways:{count:1},flowLogs:{}},backup:{tier:"standard"}},resilient:{displayName:"Resilient",description:"High-availability \xB7 Aurora V2, KMS encryption",database:{type:"Aurora",backupRetention:30,deletionProtection:!0,encryption:{useCMK:!0}},compute:{memorySize:2048,timeout:120},network:{maxAzs:3,natGateways:{count:3},flowLogs:{retentionDays:90}},backup:{tier:"resilient"}}});function $c(e){return Xt[e]}Dg($c,"getPatternTierPreset");function rA(){return[{label:Xt.standard.displayName,value:"standard",description:Xt.standard.description},{label:Xt.lightweight.displayName,value:"lightweight",description:Xt.lightweight.description},{label:Xt.resilient.displayName,value:"resilient",description:Xt.resilient.description},{label:"Custom",value:"custom",description:"Full control \xB7 Configure everything"}]}Dg(rA,"getPatternTierOptions");var WC=new Set(Si);function Ic(e){return WC.has(e)}Dg(Ic,"isPatternTierName");var KC=Object.defineProperty,nA=(e,t)=>KC(e,"name",{value:t,configurable:!0}),oA=Object.freeze({standard:{},assets:{versioned:!0,deployment:{source:"./assets"}},upload:{versioned:!0,cors:[{allowedOrigins:["*"],allowedMethods:["GET","PUT","POST"]}]},website:{publicReadAccess:!0,websiteHosting:{indexDocument:"index.html",errorDocument:"error.html"}}});function iA(e){return{...oA[e]}}nA(iA,"getStoragePreset");function aA(){return[{label:"Standard",value:"standard"},{label:"Assets",value:"assets"},{label:"Upload",value:"upload"},{label:"Website Hosting",value:"website"}]}nA(aA,"getStoragePresetOptions");import*as ue from"typescript";import*as O from"typescript";var HC=Object.defineProperty,Mn=(e,t)=>HC(e,"name",{value:t,configurable:!0});function j(e){let t={};for(let n of e.properties){if(!O.isPropertyAssignment(n))continue;let o=O.isIdentifier(n.name)||O.isStringLiteral(n.name)?n.name.text:void 0;o!==void 0&&(t[o]=Yt(n.initializer))}return t}Mn(j,"parseObjectLiteral");function Yt(e){if(O.isStringLiteral(e))return e.text;if(O.isNumericLiteral(e))return Number(e.text);if(e.kind===O.SyntaxKind.TrueKeyword)return!0;if(e.kind===O.SyntaxKind.FalseKeyword)return!1;if(O.isArrayLiteralExpression(e))return e.elements.map(t=>Yt(t));if(O.isObjectLiteralExpression(e))return j(e);if(O.isIdentifier(e))return{__identifier:e.text};if(O.isPropertyAccessExpression(e))return{__expression:e.getText()};if(O.isCallExpression(e))return{__call:e.getText()};if(O.isBinaryExpression(e)&&e.operatorToken.kind===O.SyntaxKind.BarBarToken){let t=Yt(e.left),n=Yt(e.right);return typeof n=="string"?n:t}else if(O.isConditionalExpression(e)){let t=Yt(e.whenTrue),n=Yt(e.whenFalse);return typeof n=="string"||typeof n=="number"?n:t}else if(O.isTemplateExpression(e)||O.isNoSubstitutionTemplateLiteral(e))return{__expression:e.getText()};return{__unknown:e.getText()}}Mn(Yt,"evaluateExpression");function _i(e,t){return Fe(e,n=>{if(O.isVariableStatement(n)){for(let o of n.declarationList.declarations)if(O.isIdentifier(o.name)&&o.name.text===t&&o.initializer){if(O.isStringLiteral(o.initializer))return o.initializer.text;if(O.isObjectLiteralExpression(o.initializer)){let r=j(o.initializer);return JSON.stringify(r)}}}})}Mn(_i,"findVariableValue");function wg(e,t){return Fe(e,n=>{if(O.isVariableStatement(n)){for(let o of n.declarationList.declarations)if(O.isIdentifier(o.name)&&o.name.text===t&&o.initializer&&O.isObjectLiteralExpression(o.initializer))return j(o.initializer)}})}Mn(wg,"findObjectDeclaration");function Ei(e,t){if(!O.isIdentifier(t.expression))return;let n=wg(e,t.expression.text),o=t.name.text;if(n&&n[o]!==void 0)return String(n[o])}Mn(Ei,"evaluatePropertyAccess");function Tc(e,t){let n=t.head.text;for(let o of t.templateSpans){if(O.isIdentifier(o.expression)){let r=_i(e,o.expression.text);if(r)n+=r;else return t.getText(e).replace(/^`|`$/g,"")}else if(O.isPropertyAccessExpression(o.expression)){let r=Ei(e,o.expression);if(r)n+=r;else return t.getText(e).replace(/^`|`$/g,"")}else return t.getText(e).replace(/^`|`$/g,"");n+=o.literal.text}return n}Mn(Tc,"resolveTemplateLiteral");var XC=Object.defineProperty,Y=(e,t)=>XC(e,"name",{value:t,configurable:!0});function qe(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}Y(qe,"isPlainObject");function Ot(e){return qe(e)&&"__identifier"in e}Y(Ot,"isIdentifierRef");function Jt(e){return qe(e)&&"__expression"in e}Y(Jt,"isExpressionRef");function ct(e){return qe(e)&&"__call"in e}Y(ct,"isCallRef");function N(e){return qe(e)&&!("__identifier"in e)&&!("__expression"in e)&&!("__call"in e)&&!("__unknown"in e)}Y(N,"isParsedObject");function y(e){return typeof e=="string"?e:void 0}Y(y,"asString");function I(e){return typeof e=="number"?e:void 0}Y(I,"asNumber");function w(e){return typeof e=="boolean"?e:void 0}Y(w,"asBoolean");function re(e){if(!Array.isArray(e))return;let t=[];for(let n of e)typeof n=="string"&&t.push(n);return t.length>0?t:void 0}Y(re,"asStringArray");function M(e,t){let n=y(e);if(n!==void 0)return Xe(t,n)?n:void 0}Y(M,"asStringUnion");function ze(e){let t={};for(let[n,o]of Object.entries(e))o!==void 0&&(t[n]=o);return t}Y(ze,"omitUndefined");function Nc(e){if(e===null)return"null";if(e===void 0)return"undefined";if(typeof e=="string")return JSON.stringify(e);if(typeof e=="number"||typeof e=="boolean")return String(e);if(Array.isArray(e))return`[${e.map(Nc).join(", ")}]`;if(!qe(e))return String(e);if(Ot(e))return e.__identifier;if(Jt(e))return e.__expression;if(ct(e))return e.__call;if("__unknown"in e&&typeof e.__unknown=="string")return e.__unknown;let t=Object.entries(e);return t.length===0?"{}":`{ ${t.map(([n,o])=>`${n}: ${Nc(o)}`).join(", ")} }`}Y(Nc,"parsedValueToSourceText");function te(e,t){let n=[];for(let[o,r]of Object.entries(e))t.has(o)||r===void 0||n.push({key:o,sourceText:Nc(r)});return n}Y(te,"captureExtraProperties");function qt(e,t){return ue.isPropertyAssignment(e)&&ue.isIdentifier(e.name)&&e.name.text===t}Y(qt,"isNamedProperty");function bt(e){return ue.isCallExpression(e)&&ue.isPropertyAccessExpression(e.expression)&&e.expression.name.text==="getApp"&&ue.isIdentifier(e.expression.expression)&&e.expression.expression.text==="App"}Y(bt,"isAppGetAppCall");function fe(e,t){let{expression:n}=e;return ue.isPropertyAccessExpression(n)&&n.name.text===t&&e.arguments.length>0}Y(fe,"isFactoryMethodCall");function Fe(e,t){let n,o=Y(r=>{n===void 0&&(n=t(r),n===void 0&&ue.forEachChild(r,o))},"visit");return o(e),n}Y(Fe,"findFirstInAst");function be(e,t){let n=[],o=Y(r=>{let i=t(r);i!==null&&n.push(i),ue.forEachChild(r,o)},"visit");return o(e),n}Y(be,"collectFromAst");function Re(e,t){return ue.isCallExpression(e)&&ue.isPropertyAccessExpression(e.expression)&&e.expression.name.text==="build"&&ue.isIdentifier(e.expression.expression)&&e.expression.expression.text===t}Y(Re,"isFactoryBuildCall");function Ze(e){let t=e.parent;if(ue.isVariableDeclaration(t)&&ue.isIdentifier(t.name))return t.name.text}Y(Ze,"extractVariableName");var Qe=Y(()=>e=>e,"typed");function jn(e){if(e!=null){if(e===!1)return!1;if(typeof e=="object"&&!Array.isArray(e))return e}}Y(jn,"asObjectOrFalse");function Dt(e,t){return e===!1?!1:N(e)?t(e):void 0}Y(Dt,"parseBooleanOrConfig");function Se(e,t){return N(e)?t(e):void 0}Y(Se,"parseOptionalConfig");function et(e,t,n){let o=e[t];return N(o)?n(o):void 0}Y(et,"extractSubConfig");import*as V from"typescript";import*as Un from"typescript";var YC=Object.defineProperty,Ve=(e,t)=>YC(e,"name",{value:t,configurable:!0});function Ai(e){return e!==void 0&&qe(e)}Ve(Ai,"isEnvironmentRecord");function sA(e){if(!N(e))return;let t={};for(let[n,o]of Object.entries(e))if(N(o)){let r=y(o.id),i=y(o.name);r&&i&&(t[n]={id:r,name:i,field:y(o.field)})}return Object.keys(t).length>0?t:void 0}Ve(sA,"parseContainerSecretsImport");function cA(e){if(!N(e))return;let t=re(e.command);if(!(!t||t.length===0))return{command:t,interval:I(e.interval),timeout:I(e.timeout),retries:I(e.retries),startPeriod:I(e.startPeriod)}}Ve(cA,"parseContainerHealthCheck");function uA(e){let t=te(e,new Set(["name","image","port","environment","essential","command","entryPoint","secretsImport","secrets","healthCheck"]));return{name:y(e.name),image:y(e.image),port:I(e.port),environment:Ai(e.environment)?e.environment:void 0,essential:w(e.essential),command:re(e.command),entryPoint:re(e.entryPoint),secretsImport:sA(e.secretsImport),ssmSecrets:re(e.secrets),healthCheck:cA(e.healthCheck),extraProperties:t.length>0?t:void 0}}Ve(uA,"parseServiceContainer");function lA(e){if(Array.isArray(e))return e.filter(N).map(t=>({path:y(t.path),host:y(t.host),priority:I(t.priority),healthCheckPath:y(t.healthCheckPath)}));if(N(e))return{path:y(e.path),host:y(e.host),priority:I(e.priority),healthCheckPath:y(e.healthCheckPath)}}Ve(lA,"parseServiceRouting");function dA(e){if(e===!1)return!1;if(N(e))return{minCapacity:I(e.minCapacity),maxCapacity:I(e.maxCapacity),desiredCount:I(e.desiredCount),scalingType:M(e.scalingType,Fs)}}Ve(dA,"parseServiceScaling");var JC=new Set(["instanceType","amiHardwareType","minCapacity","maxCapacity","memoryLimitMiB","warmPool"]);function mA(e){if(!N(e))return;let t=e.warmPool,n=N(t)?{minSize:I(t.minSize),reuseOnScaleIn:w(t.reuseOnScaleIn)}:void 0,o=te(e,JC);return{instanceType:y(e.instanceType),amiHardwareType:M(e.amiHardwareType,Zs),minCapacity:I(e.minCapacity),maxCapacity:I(e.maxCapacity),memoryLimitMiB:I(e.memoryLimitMiB),warmPool:n,extraProperties:o.length>0?o:void 0}}Ve(mA,"parseServiceEc2Config");var qC=new Set(["domain","loadBalancer","directAccess"]);function zg(e){if(!N(e))return;let t=e.loadBalancer,n=te(e,qC);return{domain:y(e.domain),loadBalancer:t===!1?!1:M(t,Ls),directAccess:w(e.directAccess),...n.length>0&&{extraProperties:n}}}Ve(zg,"extractClusterConfig");function Mg(e){let t=e.containers,n=Array.isArray(t)?t.filter(N).map(uA):void 0,o=te(e,new Set(["name","image","docker","ssmSecretsPath","containers","routing","connections","cpu","memoryLimitMiB","desiredCount","scaling","capacityProvider","ec2Config"]));return{name:y(e.name)??"",image:y(e.image),docker:pA(e.docker),ssmSecretsPath:y(e.ssmSecretsPath),containers:n,routing:lA(e.routing),cpu:I(e.cpu),memoryLimitMiB:I(e.memoryLimitMiB),desiredCount:I(e.desiredCount),scaling:dA(e.scaling),capacityProvider:M(e.capacityProvider,An)??"FARGATE",ec2Config:mA(e.ec2Config),...o.length>0&&{extraProperties:o}}}Ve(Mg,"parseEcsService");function pA(e){if(!N(e))return;let t=y(e.path);if(t===void 0)return;let n=y(e.context),o=y(e.target);return{path:t,...n!==void 0&&{context:n},...o!==void 0&&{target:o}}}Ve(pA,"parseServiceDocker");function xi(e,t){let n=y(e);if(n)return n;if(Jt(e)&&e.__expression.startsWith(t+"."))return e.__expression.slice(t.length+1)}Ve(xi,"extractEnumString");function jg(e){return ct(e)?e.__call.match(/\(\s*"([^"]+)"\s*\)/)?.[1]:void 0}Ve(jg,"extractCallStringArg");function _e(e,t,n){n!==void 0&&(e[t]=n)}Ve(_e,"assignIfDefined");var QC=Object.defineProperty,Rc=(e,t)=>QC(e,"name",{value:t,configurable:!0}),eO=10;function Ug(e,t){return Array.isArray(e)?e.filter(Ot).map(n=>t.find(o=>o.variableName===n.__identifier)).filter(n=>n!==void 0).map(n=>n.resourceName):[]}Rc(Ug,"resolveConnectedDatabaseNames");function Lg(e,t){return Array.isArray(e)?e.filter(Ot).map(n=>t.find(o=>o.variableName===n.__identifier)).filter(n=>n!==void 0).map(n=>n.resourceName):[]}Rc(Lg,"resolveConnectedStorageNames");function Fg(e,t,n){if(!Array.isArray(t)||t.length===0)return;let o=t[0];if(!N(o))return;let r=o.containers;if(!Array.isArray(r)||r.length===0)return;let i=r[0];if(!N(i)||!N(i.environment))return;let a=i.environment;(a.DATABASE_HOST||a.DATABASE_PORT||a.DATABASE_NAME)&&(e.needsConnection=!0,n.length>0&&(e.connectedDatabase??[]).length===0&&(e.connectedDatabase=[n[0].name]));for(let c=1;c<=eO;c++)(a[`DATABASE_HOST_${c}`]||a[`DATABASE_PORT_${c}`]||a[`DATABASE_NAME_${c}`])&&(e.needsConnection=!0)}Rc(Fg,"inferDatabaseConnectionsFromEnv");function Zg(e,t,n){if(!Array.isArray(t)||t.length===0)return;let o=t[0];if(!N(o))return;let r=o.containers;if(!Array.isArray(r)||r.length===0)return;let i=r[0];!N(i)||!N(i.environment)||i.environment.BUCKET_NAME&&n.length>0&&(e.connectedStorage??[]).length===0&&(e.connectedStorage=[n[0].name])}Rc(Zg,"inferStorageConnectionsFromEnv");var tO=Object.defineProperty,wt=(e,t)=>tO(e,"name",{value:t,configurable:!0});function fA(e){if(e.arguments.length<2)return null;let t=e.arguments[0],n=e.arguments[1];if(!Un.isStringLiteral(t)||!Un.isObjectLiteralExpression(n))return null;let o=t.text,r=j(n);return{resourceName:o,type:y(r.type)??"ecs",config:r,node:e}}wt(fA,"extractComputeResource");function Pc(e){return be(e,t=>{if(!Un.isCallExpression(t)||!fe(t,"addCompute"))return null;let n=t.arguments[0];if(!Re(n,"ComputeFactory"))return null;let o=fA(n);if(o){let r=Ze(t);r&&(o.variableName=r)}return o})}wt(Pc,"findComputeResources");function kc(e,t,n){let o=te(e.config,n);o.length>0&&(t.extraProperties=o)}wt(kc,"applyExtras");function gA(e,t){let n=e.config.docker;if(N(n)){let i=y(n.path),a=y(n.context),c=y(n.target);(i!==void 0||a!==void 0||c!==void 0)&&(t.docker={...i!==void 0&&{path:i},...a!==void 0&&{context:a},...c!==void 0&&{target:c}})}let o=e.config.cluster;o!==void 0&&(t.cluster=zg(o));let r=e.config.services;r!==void 0&&Array.isArray(r)&&(t.services=r.filter(i=>N(i)).map(Mg)),kc(e,t,new Set(["type","ecrRepository","docker","cluster","services","connections"]))}wt(gA,"convertEcsCompute");function vA(e,t){if(_e(t,"deployment",M(e.config.deployment,js)),_e(t,"timeout",I(e.config.timeout)),_e(t,"memory",I(e.config.memorySize)??I(e.config.memory)),_e(t,"handler",y(e.config.handler)),_e(t,"runtime",xi(e.config.runtime,"Runtime")),Ai(e.config.environment)&&(t.environment=e.config.environment),Ai(e.config.secrets))t.secrets=e.config.secrets;else{let r=re(e.config.secrets);r&&(t.ssmSecrets=r)}let n=e.config.functionUrl;if(N(n)){let r=M(xi(n.authType,"FunctionUrlAuthType"),Ko);r!==void 0&&(t.functionUrl={authType:r})}let o=e.config.code;if(o!==void 0){let r=jg(o);r&&(t.codePath=r)}_e(t,"description",y(e.config.lambdaDescription)),_e(t,"architecture",M(xi(e.config.architecture,"Architecture"),Us)),_e(t,"ephemeralStorageSize",I(e.config.ephemeralStorageSize)),_e(t,"functionName",y(e.config.functionName)),_e(t,"ssmSecretsPath",y(e.config.ssmSecretsPath)),kc(e,t,new Set(["type","deployment","timeout","memorySize","memory","handler","runtime","environment","secrets","functionUrl","code","connections","ecrRepository","containerSecretsImport","lambdaDescription","architecture","ephemeralStorageSize","functionName","ssmSecretsPath"]))}wt(vA,"convertLambdaCompute");function hA(e,t){_e(t,"instanceType",M(e.config.instanceType,Vs));let n=e.config.ssh;n===!1?t.enableSSH=!1:n!==void 0&&N(n)?t.enableSSH=!0:_e(t,"enableSSH",w(e.config.enableSSH)),_e(t,"keyName",y(e.config.keyName)),_e(t,"userData",y(e.config.userData)),e.config.securityGroups!==void 0&&(t.securityGroups=re(e.config.securityGroups)),kc(e,t,new Set(["type","instanceType","ssh","enableSSH","keyName","userData","securityGroups","connections"]))}wt(hA,"convertEc2Compute");function yA(e,t,n,o){let r=t.config.connections;if(!r&&Array.isArray(t.config.services)){let c=t.config.services[0];N(c)&&(r=c.connections)}if(!r)return;let i=Ug(r,n);i.length>0&&(e.needsConnection=!0,e.connectedDatabase=i);let a=Lg(r,o);a.length>0&&(e.connectedStorage=a)}wt(yA,"applyConnectionConfig");function bA(e,t){({ecs:gA,lambda:vA,ec2:hA})[e.type]?.(t,e)}wt(bA,"applyTypeSpecificConfig");function Vg(e,t,n,o){return e.map(r=>{let i=M(r.config.type,Go)??"ecs",a={name:r.resourceName,type:i,needsConnection:!1,connectedDatabase:[],...r.variableName&&{variableName:r.variableName}};return yA(a,r,t,n),bA(a,r),Fg(a,r.config.services,o.database),Zg(a,r.config.services,o.s3),a})}wt(Vg,"convertComputeResources");import*as tt from"typescript";var rO=Object.defineProperty,nO=(e,t)=>rO(e,"name",{value:t,configurable:!0});function Cc(e){return be(e,t=>{if(!tt.isCallExpression(t)||!fe(t,"addSchedule")||t.arguments.length<2)return null;let n=t.arguments[0],o=t.arguments[1];if(!tt.isStringLiteral(n)||!tt.isObjectLiteralExpression(o))return null;let r=j(o),i=y(r.schedule);if(i===void 0)return null;let a=o.properties.find(c=>tt.isPropertyAssignment(c)&&tt.isIdentifier(c.name)&&c.name.text==="target");return!a||!tt.isPropertyAssignment(a)||!tt.isIdentifier(a.initializer)?null:{id:n.text,schedule:i,targetVariableName:a.initializer.text}})}nO(Cc,"findSchedules");import*as J from"typescript";import*as Pe from"typescript";var oO=Object.defineProperty,$i=(e,t)=>oO(e,"name",{value:t,configurable:!0}),Bg=new Set(["S3Bucket"]);function SA(e,t,n){let o=Pe.isIdentifier(e.name)?e.name.text:"";if(t.arguments&&t.arguments.length>=2){let r=t.arguments[1],i=Pe.isStringLiteral(r)?r.text:"",a=t.arguments.length>=3?t.arguments[2]:void 0,c=a&&Pe.isObjectLiteralExpression(a)?j(a):{};return{variableName:o,resourceName:i,bucketClass:n,config:c,node:e}}return null}$i(SA,"extractS3Resource");function _A(e,t){if(t.arguments.length<2)return null;let n=t.arguments[0],o=t.arguments[1];if(!Pe.isStringLiteral(n)||!Pe.isObjectLiteralExpression(o))return null;let r=j(o);return{variableName:Ze(e)??"",resourceName:n.text,bucketClass:"StorageFactory",config:r,node:e}}$i(_A,"extractS3FactoryResource");function Gg(e){return be(e,t=>{if(!Pe.isVariableDeclaration(t)||!t.initializer||!Pe.isNewExpression(t.initializer))return null;let n=t.initializer;if(!Pe.isIdentifier(n.expression))return null;let o=n.expression.text;return Bg.has(o)?SA(t,n,o):null})}$i(Gg,"findS3Resources");function Wg(e){return be(e,t=>{if(!Pe.isCallExpression(t)||!fe(t,"addStorage"))return null;let n=t.arguments[0];return Re(n,"StorageFactory")?_A(t,n):null})}$i(Wg,"findS3FactoryResources");function Kg(e){return e.map(t=>({name:t.resourceName,...y(t.config.bucketName)&&{bucketName:y(t.config.bucketName)},...w(t.config.publicReadAccess)===!0&&{publicReadAccess:!0},...N(t.config.websiteHosting)&&(()=>{let n=t.config.websiteHosting;return{websiteHosting:{indexDocument:y(n.indexDocument)??"index.html",...y(n.errorDocument)&&{errorDocument:y(n.errorDocument)}}}})(),...M(t.config.backupVaultTier,at)&&{backupVaultTier:M(t.config.backupVaultTier,at)},...w(t.config.versioned)!==void 0&&{versioned:w(t.config.versioned)},...M(t.config.encryption,Tn)&&{encryption:M(t.config.encryption,Tn)},...y(t.config.kmsKeyArn)&&{kmsKeyArn:y(t.config.kmsKeyArn)},...Array.isArray(t.config.cors)&&t.config.cors.length>0&&{cors:t.config.cors.filter(N).map(n=>({allowedOrigins:Array.isArray(n.allowedOrigins)?n.allowedOrigins.filter(o=>typeof o=="string"):[],allowedMethods:Array.isArray(n.allowedMethods)?n.allowedMethods.filter(o=>typeof o=="string"):[]}))},...N(t.config.deployment)&&(()=>{let n=t.config.deployment;return{deployment:{source:y(n.source)??"",...w(n.prune)!==void 0&&{prune:w(n.prune)},...N(n.cacheControl)&&(()=>{let o=n.cacheControl;return{cacheControl:{...I(o.maxAge)!==void 0&&{maxAge:I(o.maxAge)},...w(o.immutable)!==void 0&&{immutable:w(o.immutable)}}}})()}}})(),...M(t.config.stackPlacement,rc)&&{stackPlacement:M(t.config.stackPlacement,rc)},...t.variableName&&{variableName:t.variableName},...(()=>{let n=new Set(["bucketName","publicReadAccess","websiteHosting","backupVaultTier","versioned","encryption","kmsKeyArn","cors","deployment","stackPlacement"]),o=te(t.config,n);return o.length>0?{extraProperties:o}:{}})()}))}$i(Kg,"convertS3Resources");var iO=Object.defineProperty,kr=(e,t)=>iO(e,"name",{value:t,configurable:!0}),EA=new Set(["App","Architecture","DatabaseFactory","StorageFactory","ComputeFactory","getConfig","MessagingFactory","CdnFactory","Code","Runtime","FunctionUrlAuthType","NetworkFactory","PatternFactory","VpcPeerFactory","VpcPeerAccepterFactory","CrossPlanConnectionFactory"]);function Oc(e){return!!(e.startsWith("@fjall/")||e==="aws-cdk-lib"||e.startsWith("aws-cdk-lib/")||e==="constructs")}kr(Oc,"isManagedModuleSpecifier");function Me(e){let t=[];for(let n of e.statements){let o=n.getFullStart(),r=n.getEnd();if(J.isImportDeclaration(n)){t.push({type:"import",node:n,startPos:o,endPos:r,isManaged:AA(n)});continue}if(J.isVariableStatement(n)){t.push(xA(n,o,r));continue}if(J.isExpressionStatement(n)){t.push($A(n,o,r));continue}t.push({type:"custom",node:n,startPos:o,endPos:r,isManaged:!1})}return t}kr(Me,"classifyStatements");function AA(e){return J.isStringLiteral(e.moduleSpecifier)?Oc(e.moduleSpecifier.text):!1}kr(AA,"isManagedImport");function xA(e,t,n){for(let o of e.declarationList.declarations)if(o.initializer){if(bt(o.initializer))return{type:"app-init",node:e,resourceName:J.isIdentifier(o.name)?o.name.text:void 0,startPos:t,endPos:n,isManaged:!0};if(J.isIdentifier(o.name)&&o.name.text==="appName"&&J.isStringLiteral(o.initializer))return{type:"app-init",node:e,startPos:t,endPos:n,isManaged:!0};if(J.isNewExpression(o.initializer)){let r=o.initializer;if(J.isIdentifier(r.expression)){let i=r.expression.text;if(Bg.has(i)){let a=r.arguments&&r.arguments.length>=2&&J.isStringLiteral(r.arguments[1])?r.arguments[1].text:void 0;return{type:"storage",node:e,resourceName:a,startPos:t,endPos:n,isManaged:!0}}}}if(J.isCallExpression(o.initializer)){let r=Hg(o.initializer,e,t,n);if(r.type!=="custom")return r}}return{type:"custom",node:e,startPos:t,endPos:n,isManaged:!1}}kr(xA,"classifyVariableStatement");function $A(e,t,n){let o=e.expression;return J.isCallExpression(o)?Hg(o,e,t,n):{type:"custom",node:e,startPos:t,endPos:n,isManaged:!1}}kr($A,"classifyExpressionStatement");function Hg(e,t,n,o){let r=e.expression;if(J.isPropertyAccessExpression(r)&&J.isIdentifier(r.expression)){let i=r.name.text;if(i==="addTags")return{type:"tags",node:t,startPos:n,endPos:o,isManaged:!0};let a={addDatabase:{type:"database",factory:"DatabaseFactory"},addCompute:{type:"compute",factory:"ComputeFactory"},addNetwork:{type:"network",factory:"NetworkFactory"},addMessaging:{type:"messaging",factory:"MessagingFactory"},addCdn:{type:"cdn",factory:"CdnFactory"},addPattern:{type:"pattern",factory:"PatternFactory"},addStorage:{type:"storage",factory:"StorageFactory"},addVpcPeer:{type:"vpc-peer",factory:"VpcPeerFactory"},addVpcPeerAccepter:{type:"vpc-peer-accepter",factory:"VpcPeerAccepterFactory"}}[i];if(a){let c=IA(e,a.factory);return{type:a.type,node:t,resourceName:c,startPos:n,endPos:o,isManaged:!0}}}return{type:"custom",node:t,startPos:n,endPos:o,isManaged:!1}}kr(Hg,"classifyCallExpression");function IA(e,t){if(e.arguments.length===0)return;let n=e.arguments[0];if(!J.isCallExpression(n))return;let o=n.expression;if(!J.isPropertyAccessExpression(o)||o.name.text!=="build"||!J.isIdentifier(o.expression)||o.expression.text!==t||n.arguments.length===0)return;let r=n.arguments[0];if(J.isStringLiteral(r))return r.text}kr(IA,"extractResourceNameFromFactoryCall");import*as TA from"typescript";var aO=Object.defineProperty,Cr=(e,t)=>aO(e,"name",{value:t,configurable:!0}),sO={import:"after-imports","app-init":"after-app-init",tags:"after-tags"};function NA(e){if(!e)return{position:"before-imports"};let t=sO[e.type];return t?{position:t}:{position:"after-resource",afterManagedResource:{type:e.type,name:e.resourceName}}}Cr(NA,"determineCustomBlockPosition");function Ii(e,t){let n=t??Me(e),o=[],r=e.getFullText(),i=null;for(let a of n)if(a.type==="custom"&&!a.isManaged){let{position:c,afterManagedResource:u}=NA(i),l=RA(r,a.node),m=PA(r,a.node),p=e.getLineAndCharacterOfPosition(a.node.getStart());o.push({sourceText:l,position:c,afterManagedResource:u,originalLine:p.line+1,leadingComments:m.length>0?m:void 0})}else a.isManaged&&(i=a);return o}Cr(Ii,"extractCustomCodeBlocks");function RA(e,t){let n=t.getFullStart(),o=t.getEnd(),r=e.slice(n,o).split(`
 `),i=r.findIndex(a=>a.trim()!=="");return r.slice(i===-1?0:i).join(`
-`)}Cr(RA,"getStatementTextWithComments");function PA(e,t){let n=[],o=TA.getLeadingCommentRanges(e,t.getFullStart());if(o)for(let r of o){let i=e.slice(r.pos,r.end);n.push(i)}return n}Cr(PA,"extractLeadingComments");function Ln(e,t,n,o){let r=o??Me(e);for(let i of r)if(i.type===t&&i.resourceName===n)return{startPos:i.startPos,endPos:i.endPos,node:i.node};return null}Cr(Ln,"findManagedResourcePosition");function Xg(e,t,n){let o=n??Me(e),r=null;for(let i of o)i.type===t&&i.isManaged&&(r=i);return r}Cr(Xg,"getLastManagedStatementOfType");function Yg(e,t){let n=t??Me(e),o={import:[],"app-init":[],tags:[],database:[],compute:[],storage:[],network:[],messaging:[],cdn:[],pattern:[],"vpc-peer":[],"vpc-peer-accepter":[],"cross-plan-connection":[],custom:[]};for(let r of n)o[r.type].push(r);return o}Cr(Yg,"getManagedResourcesByType");import*as zt from"typescript";import*as Ni from"typescript";var sO=Object.defineProperty,Jg=(e,t)=>sO(e,"name",{value:t,configurable:!0}),cO=["S","N","B"];function Ti(e){if(!N(e))return;let t=y(e.name),n=M(e.type,cO);if(!(!t||!n))return{name:t,type:n}}Jg(Ti,"parseDynamoDBKey");function qg(e){let t=e.node;if(!Ni.isCallExpression(t))return null;let n=t.arguments[0];if(!Ni.isCallExpression(n)||n.arguments.length<2)return null;let o=n.arguments[1];if(!Ni.isObjectLiteralExpression(o))return null;let r=j(o),i=Ti(r.partitionKey);if(!i)return null;let a={resourceName:e.resourceName,partitionKey:i,node:e.node};e.variableName&&(a.variableName=e.variableName);let c=Ti(r.sortKey);if(c&&(a.sortKey=c),Array.isArray(r.globalSecondaryIndexes)){let p=r.globalSecondaryIndexes.filter(N).map(g=>{let h=Ti(g.partitionKey);if(!h)return null;let x=y(g.indexName);if(!x)return null;let B={indexName:x,partitionKey:h},K=Ti(g.sortKey);return K&&(B.sortKey=K),B}).filter(g=>g!==null);p.length>0&&(a.globalSecondaryIndexes=p)}let u=y(r.ttlAttribute);u&&(a.ttlAttribute=u);let l=w(r.stream);l!==void 0&&(a.stream=l);let m=te(r,new Set(["type","databaseName","partitionKey","sortKey","globalSecondaryIndexes","ttlAttribute","stream"]));return m.length>0&&(a.extraProperties=m),a}Jg(qg,"extractDynamoDBFields");function Dc(e){if(e.length!==0)return e.map(t=>({name:t.resourceName,partitionKey:t.partitionKey,...ze({sortKey:t.sortKey,globalSecondaryIndexes:t.globalSecondaryIndexes,ttlAttribute:t.ttlAttribute,stream:t.stream,variableName:t.variableName,extraProperties:t.extraProperties})}))}Jg(Dc,"convertDynamoDBResources");import*as Ri from"typescript";var uO=Object.defineProperty,kA=(e,t)=>uO(e,"name",{value:t,configurable:!0}),lO=new Set(["type","databaseName","instanceType","coldTier","optimiseSchedule","backupSchedule","backupRetentionDays"]);function Qg(e){let t=e.node;if(!Ri.isCallExpression(t))return null;let n=t.arguments[0];if(!Ri.isCallExpression(n)||n.arguments.length<2)return null;let o=n.arguments[1];if(!Ri.isObjectLiteralExpression(o))return null;let r=j(o),i={resourceName:e.resourceName,databaseName:e.databaseName,node:e.node};e.variableName&&(i.variableName=e.variableName);let a=y(r.instanceType);a&&(i.instanceType=a);let c=r.coldTier;c===!1?i.coldTier=!1:N(c)&&y(c.mode)==="s3"&&(i.coldTier={mode:"s3"});let u=r.optimiseSchedule;if(u===!1)i.optimiseSchedule=!1;else{let g=y(u);g&&(i.optimiseSchedule=g)}let l=r.backupSchedule;if(l===!1)i.backupSchedule=!1;else{let g=y(l);g&&(i.backupSchedule=g)}let m=I(r.backupRetentionDays);m!==void 0&&(i.backupRetentionDays=m);let p=te(r,lO);return p.length>0&&(i.extraProperties=p),i}kA(Qg,"extractClickHouseFields");function wc(e){if(e.length!==0)return e.map(t=>({name:t.resourceName,type:"ClickHouse",databaseName:t.databaseName,...ze({instanceType:t.instanceType,coldTier:t.coldTier,optimiseSchedule:t.optimiseSchedule,backupSchedule:t.backupSchedule,backupRetentionDays:t.backupRetentionDays,variableName:t.variableName,extraProperties:t.extraProperties})}))}kA(wc,"convertClickHouseResources");var dO=Object.defineProperty,Fn=(e,t)=>dO(e,"name",{value:t,configurable:!0});function CA(e){let t=y(e.databaseEngine);if(t!==void 0&&Xe($n,t))return t;let n=e.engine;if(ct(n)){let o=String(n.__call);if(o.includes("postgres")||o.includes("auroraPostgres"))return"postgresql";if(o.includes("mysql")||o.includes("auroraMysql"))return"mysql"}}Fn(CA,"extractDatabaseEngine");function OA(e){let t=e.engine;if(ct(t))return String(t.__call)}Fn(OA,"extractEngineExpression");var mO=new Set(["type","databaseName","databaseEngine","engine","vpc","port","deletionProtection","instanceType","multiAz","publiclyAccessible","enableSecretRotation","encryption","databaseInsights","proxy","readReplica","credentials","writer","readers","backupRetention","preferredMaintenanceWindow","primaryRegion","secondaryRegions","globalClusterIdentifier","enableGlobalWriteForwarding","snapshotIdentifier","allocatedStorage","monitoringInterval","snapshotUsername"]);function DA(e,t,n){if(n.arguments.length<2)return null;let o=n.arguments[0],r=n.arguments[1];if(!zt.isStringLiteral(o)&&!zt.isTemplateExpression(o))return null;let i=zt.isStringLiteral(o)?o.text:Tc(e,o);if(!zt.isObjectLiteralExpression(r))return null;let a=j(r),c={resourceName:i,type:y(a.type)??"",databaseName:y(a.databaseName)??"",databaseEngine:CA(a),engineExpression:OA(a),port:I(a.port),deletionProtection:w(a.deletionProtection),instanceType:y(a.instanceType),multiAz:w(a.multiAz),publiclyAccessible:w(a.publiclyAccessible),enableSecretRotation:w(a.enableSecretRotation),encryption:Se(a.encryption,Qe()),databaseInsights:Dt(a.databaseInsights,Qe()),proxy:Dt(a.proxy,Qe()),readReplica:Dt(a.readReplica,Qe()),credentials:Se(a.credentials,Qe()),writer:Se(a.writer,Qe()),readers:Dt(a.readers,Qe()),backupRetention:I(a.backupRetention),preferredMaintenanceWindow:y(a.preferredMaintenanceWindow),primaryRegion:y(a.primaryRegion),secondaryRegions:re(a.secondaryRegions),globalClusterIdentifier:y(a.globalClusterIdentifier),enableGlobalWriteForwarding:w(a.enableGlobalWriteForwarding),allocatedStorage:I(a.allocatedStorage),monitoringInterval:I(a.monitoringInterval),snapshotIdentifier:y(a.snapshotIdentifier),snapshotUsername:y(a.snapshotUsername),node:t},u=Ze(t);u&&(c.variableName=u);let l=te(a,mO);return l.length>0&&(c.extraProperties=l),c}Fn(DA,"extractDatabaseResource");function ev(e){return be(e,t=>{if(!zt.isCallExpression(t)||!fe(t,"addDatabase"))return null;let n=t.arguments[0];return Re(n,"DatabaseFactory")?DA(e,t,n):null})}Fn(ev,"findDatabaseResources");function tv(e){let t=[],n=[],o=[];for(let r of e)if(r.type==="DynamoDB"){let i=qg(r);i&&n.push(i)}else if(r.type==="ClickHouse"){let i=Qg(r);i&&o.push(i)}else t.push(r);return{databases:t,dynamodb:n,clickhouse:o}}Fn(tv,"splitDatabaseResources");var pO=["Instance","Aurora","GlobalAurora"];function rv(e){return e.filter(t=>t.type!=="DynamoDB").map(t=>({name:t.resourceName,type:Xe(pO,t.type)?t.type:"Instance",databaseName:t.databaseName,...ze({port:t.port,deletionProtection:t.deletionProtection,instanceType:t.instanceType,multiAz:t.multiAz,publiclyAccessible:t.publiclyAccessible,enableSecretRotation:t.enableSecretRotation,encryption:t.encryption,databaseInsights:t.databaseInsights,proxy:t.proxy,readReplica:t.readReplica,credentials:t.credentials,writer:t.writer,readers:t.readers,backupRetention:t.backupRetention,preferredMaintenanceWindow:t.preferredMaintenanceWindow,primaryRegion:t.primaryRegion,secondaryRegions:t.secondaryRegions,globalClusterIdentifier:t.globalClusterIdentifier,enableGlobalWriteForwarding:t.enableGlobalWriteForwarding,allocatedStorage:t.allocatedStorage,monitoringInterval:t.monitoringInterval,variableName:t.variableName,databaseEngine:t.databaseEngine,engineExpression:t.engineExpression,extraProperties:t.extraProperties})}))}Fn(rv,"convertDatabaseResources");import*as Vn from"typescript";var fO=Object.defineProperty,Zn=(e,t)=>fO(e,"name",{value:t,configurable:!0});function wA(e,t){if(t.arguments.length<2)return null;let n=t.arguments[0],o=t.arguments[1];if(!Vn.isStringLiteral(n)||!Vn.isObjectLiteralExpression(o))return null;let r=j(o),i={resourceName:n.text,queueType:y(r.queueType)??"standard",visibilityTimeout:I(r.visibilityTimeout),retentionPeriod:I(r.messageRetentionPeriod),contentBasedDeduplication:w(r.contentBasedDeduplication),removalPolicy:y(r.removalPolicy),node:e},a=Ze(e);a&&(i.variableName=a);let c=te(r,new Set(["type","queueType","visibilityTimeout","messageRetentionPeriod","contentBasedDeduplication","removalPolicy"]));return c.length>0&&(i.extraProperties=c),i}Zn(wA,"extractSQSResource");function nv(e){if(e!=null){if(e===!1)return!1;if(N(e))return ze({enabled:w(e.enabled),maxReceiveCount:I(e.maxReceiveCount)})}}Zn(nv,"parseDeadLetterQueueConfig");function ov(e){return be(e,t=>{if(!Vn.isCallExpression(t)||!fe(t,"addMessaging"))return null;let n=t.arguments[0];return Re(n,"MessagingFactory")?wA(t,n):null})}Zn(ov,"findSQSResources");function iv(e){if(e.length!==0)return e.map(t=>({name:t.resourceName,queueType:t.queueType==="fifo"?"fifo":"standard",...ze({visibilityTimeout:t.visibilityTimeout,retentionPeriod:t.retentionPeriod,contentBasedDeduplication:t.contentBasedDeduplication,removalPolicy:MA(t.removalPolicy),variableName:t.variableName,extraProperties:t.extraProperties})}))}Zn(iv,"convertSQSResources");var gO=new Set(ag.options);function zA(e){return gO.has(e)}Zn(zA,"isSqsRemovalPolicy");function MA(e){return e!==void 0&&zA(e)?e:void 0}Zn(MA,"toSqsRemovalPolicy");import*as Bn from"typescript";var vO=Object.defineProperty,Pi=(e,t)=>vO(e,"name",{value:t,configurable:!0});function UA(e){if(e.arguments.length<2)return null;let t=e.arguments[0],n=e.arguments[1];return!Bn.isStringLiteral(t)||!Bn.isObjectLiteralExpression(n)?null:{resourceName:t.text,config:j(n),node:e}}Pi(UA,"extractCDNResource");function LA(e,t,n){let o=t.find(i=>i.variableName===e);if(o)return o.resourceName;let r=n.find(i=>i.variableName===e||i.resourceName.charAt(0).toLowerCase()+i.resourceName.slice(1)===e);return r?r.resourceName:e}Pi(LA,"resolveOriginIdentifier");var jA=["CACHING_OPTIMIZED","CACHING_DISABLED"];function av(e){return Fe(e,t=>{if(!Bn.isCallExpression(t)||!fe(t,"addCdn"))return;let n=t.arguments[0];if(Re(n,"CdnFactory"))return UA(n)??void 0})}Pi(av,"findCDNResource");function sv(e,t,n){if(!e)return;let o=e,r=o.config,i=Pi(p=>Ot(p)?LA(p.__identifier,t,n):y(p)??"","resolveOrigin"),a=i(r.origin),c={name:o.resourceName,defaultOriginRef:a};if(Array.isArray(r.behaviours)){let p=r.behaviours.filter(N).map(g=>({pathPattern:y(g.pathPattern)??"",originRef:i(g.origin),...M(g.cachePolicy,jA)!==void 0&&{cachePolicy:M(g.cachePolicy,jA)}}));p.length>0&&(c.behaviours=p)}let u=y(r.customDomain);if(u)c.customDomain=u;else{let p=re(r.domainNames);p&&p.length>0&&(c.customDomain=p[0])}let l=y(r.certificateArn);if(l&&(c.certificateArn=l),r.accessGate!==void 0){if(r.accessGate===!1)c.accessGate=!1;else if(N(r.accessGate)){let p=r.accessGate,g=y(p.type),h=y(p.username),x=y(p.password);g==="basic-auth"&&h&&x&&(c.accessGate={type:"basic-auth",username:h,password:x})}}let m=te(r,new Set(["originType","origin","behaviours","customDomain","domainNames","certificateArn","accessGate"]));return m.length>0&&(c.extraProperties=m),c}Pi(sv,"convertCDNResource");import*as oe from"typescript";var hO=Object.defineProperty,Be=(e,t)=>hO(e,"name",{value:t,configurable:!0}),yO=new Set(og.options);function FA(e){if(e!==void 0)return yO.has(e)?e:void 0}Be(FA,"asFlowLogDestination");function cv(e){return{maxAzs:I(e.maxAzs),natGateways:Dt(e.natGateways,t=>({count:I(t.count)})),flowLogs:Dt(e.flowLogs,t=>({destination:y(t.destination),retentionDays:I(t.retentionDays)})),vpcEndpoints:N(e.vpcEndpoints)?e.vpcEndpoints:void 0}}Be(cv,"parseNetworkConfigFields");function ZA(e,t){if(t.arguments.length<2)return null;let n=t.arguments[0],o=t.arguments[1];if(!oe.isStringLiteral(n))return null;let r=n.text,i=oe.isObjectLiteralExpression(o)?j(o):{},a=cv(i),c={name:r,config:ze({...a}),node:e},u=Ze(e);return u&&(c.variableName=u),c}Be(ZA,"extractNetworkResource");function uv(e){return Fe(e,t=>{if(!bt(t)||t.arguments.length<=1)return;let n=t.arguments[1];if(oe.isObjectLiteralExpression(n)){for(let o of n.properties)if(qt(o,"network")&&oe.isObjectLiteralExpression(o.initializer)){for(let r of o.initializer.properties)if(qt(r,"useExisting")&&oe.isStringLiteral(r.initializer))return r.initializer.text}}})}Be(uv,"findVpcId");function lv(e){return Fe(e,t=>{if(!bt(t)||t.arguments.length<=1)return;let n=t.arguments[1];if(oe.isObjectLiteralExpression(n)){for(let o of n.properties)if(qt(o,"network")){if(o.initializer.kind===oe.SyntaxKind.FalseKeyword)return;if(oe.isObjectLiteralExpression(o.initializer)&&!o.initializer.properties.some(r=>qt(r,"useExisting"))){let r=j(o.initializer);return cv(r)}}}})}Be(lv,"findNetworkConfig");function dv(e){return Fe(e,t=>{if(!bt(t)||t.arguments.length<=1)return;let n=t.arguments[1];if(oe.isObjectLiteralExpression(n)){for(let o of n.properties)if(qt(o,"backup")){if(o.initializer.kind===oe.SyntaxKind.FalseKeyword)return!1;if(oe.isObjectLiteralExpression(o.initializer)){let r=j(o.initializer),i=y(r.tier);if(i)return{tier:i}}}}})}Be(dv,"findBackupConfig");function mv(e){return Fe(e,t=>{if(!bt(t)||t.arguments.length<=1)return;let n=t.arguments[1];if(oe.isObjectLiteralExpression(n)){for(let o of n.properties)if(qt(o,"tunnel")){if(o.initializer.kind===oe.SyntaxKind.FalseKeyword)return!1;if(o.initializer.kind===oe.SyntaxKind.TrueKeyword)return!0;if(oe.isObjectLiteralExpression(o.initializer)){let r=j(o.initializer),i=y(r.instanceType);return i?{instanceType:i}:{}}}}})}Be(mv,"findTunnelConfig");function pv(e){return be(e,t=>{if(!oe.isCallExpression(t)||!fe(t,"addNetwork"))return null;let n=t.arguments[0];return Re(n,"NetworkFactory")?ZA(t,n):null})}Be(pv,"findNetworkResources");function fv(e){let t=e.flowLogs;return{...ze({maxAzs:e.maxAzs,natGateways:e.natGateways,vpcEndpoints:e.vpcEndpoints}),...t!==void 0&&{flowLogs:t===!1?!1:ze({destination:FA(t.destination),retentionDays:t.retentionDays})}}}Be(fv,"buildNetworkFields");function gv(e){if(e)return fv(e)}Be(gv,"convertNetworkConfig");function vv(e){if(e===void 0)return;if(e===!1)return!1;let t=e.tier;if(Xe(at,t))return{tier:t}}Be(vv,"convertBackupConfig");function hv(e){if(e===void 0)return;if(e===!1)return!1;if(e===!0)return{};let t={};return e.instanceType&&(t.instanceType=e.instanceType),t}Be(hv,"convertTunnelConfig");function yv(e){if(!(!e||e.length===0))return e.map(t=>({name:t.name,...fv(t.config)}))}Be(yv,"convertAdditionalNetworks");import*as Gn from"typescript";var bO=Object.defineProperty,de=(e,t)=>bO(e,"name",{value:t,configurable:!0}),SO=["Instance","Aurora"],_O=["postgresql","mysql"];function zc(e){if(!N(e))return;let t={...e.memorySize!==void 0&&{memorySize:I(e.memorySize)},...e.timeout!==void 0&&{timeout:I(e.timeout)},...e.ephemeralStorageSize!==void 0&&{ephemeralStorageSize:I(e.ephemeralStorageSize)}};return Object.keys(t).length>0?t:void 0}de(zc,"parseLambdaConfig");function VA(e){return et(e,"database",t=>({type:M(t.type,SO),databaseName:y(t.databaseName),databaseEngine:M(t.databaseEngine,_O),deletionProtection:w(t.deletionProtection),backupRetention:I(t.backupRetention),port:I(t.port),publiclyAccessible:w(t.publiclyAccessible),allowedIpCidr:y(t.allowedIpCidr),instanceType:y(t.instanceType),allocatedStorage:I(t.allocatedStorage),multiAz:w(t.multiAz),allowVpcAccess:w(t.allowVpcAccess),monitoringInterval:I(t.monitoringInterval),preferredMaintenanceWindow:y(t.preferredMaintenanceWindow),snapshotIdentifier:y(t.snapshotIdentifier),snapshotUsername:y(t.snapshotUsername),readReplica:jn(t.readReplica),writer:Se(t.writer,Qe()),readers:jn(t.readers),databaseInsights:jn(t.databaseInsights),proxy:jn(t.proxy),credentials:Se(t.credentials,Qe()),encryption:Se(t.encryption,Qe())}))}de(VA,"extractPatternDatabaseConfig");function BA(e){return et(e,"compute",t=>({server:Se(t.server,zc),imageOptimisation:Se(t.imageOptimisation,zc),revalidation:Se(t.revalidation,zc)}))}de(BA,"extractPatternComputeConfig");function GA(e){let t=de(n=>({versioned:w(n.versioned)}),"parseVersionedConfig");return et(e,"storage",n=>({assets:Se(n.assets,t),cache:Se(n.cache,t),media:Se(n.media,t)}))}de(GA,"extractPatternStorageConfig");function WA(e){return et(e,"messaging",t=>({revalidationQueue:Se(t.revalidationQueue,n=>({visibilityTimeout:I(n.visibilityTimeout),messageRetentionPeriod:I(n.messageRetentionPeriod),maxMessageSize:I(n.maxMessageSize),deadLetterQueue:nv(n.deadLetterQueue)}))}))}de(WA,"extractPatternMessagingConfig");function KA(e){return et(e,"cdn",t=>({domainNames:re(t.domainNames),certificateArn:y(t.certificateArn)}))}de(KA,"extractPatternCdnConfig");function HA(e){return et(e,"environment",t=>{let n=Object.fromEntries(Object.entries(t).filter(o=>typeof o[1]=="string"));return Object.keys(n).length>0?n:void 0})}de(HA,"extractPatternEnvironmentConfig");function XA(e,t){let n=YA(e);return{name:t,source:y(e.source),build:et(e,"build",o=>({command:y(o.command),outputDir:y(o.outputDir)})),routing:M(e.routing,Vo),security:et(e,"security",o=>({headers:w(o.headers),contentSecurityPolicy:y(o.contentSecurityPolicy)})),domain:y(e.domain),forms:et(e,"forms",o=>({to:y(o.to),from:y(o.from),corsOrigin:y(o.corsOrigin),maxConcurrency:I(o.maxConcurrency)})),cdn:et(e,"cdn",o=>({behaviours:Array.isArray(o.behaviours)?o.behaviours:void 0})),...n.length>0&&{unreadableFields:n}}}de(XA,"extractStaticSiteConfig");function bv(e){return qe(e)&&("__identifier"in e||"__expression"in e||"__call"in e||"__unknown"in e)}de(bv,"isUnreadableRef");function YA(e){let t=[],n=de((r,i)=>{bv(r)&&t.push(i)},"check");n(e.source,"source"),n(e.routing,"routing"),n(e.domain,"domain");let o=[[e.build,"build",["command","outputDir"]],[e.security,"security",["headers","contentSecurityPolicy"]],[e.forms,"forms",["to","from","corsOrigin","maxConcurrency"]],[e.cdn,"cdn",["behaviours"]]];for(let[r,i,a]of o)if(bv(r))t.push(i);else if(N(r))for(let c of a)n(r[c],`${i}.${c}`);return t}de(YA,"collectUnreadableStaticSiteFields");function Qt(e){return e!==void 0&&e!==""}de(Qt,"isReadable");function Mc(e,t){return new Error(`Static-site pattern '${e}' in infrastructure.ts: Fjall could not read ${t.join(", ")} as inline literal(s). Fjall reads these fields out of the file and writes them back, so they must be written inline (source: "./site"), not as a variable or an expression.`)}de(Mc,"unreadableStaticSiteFields");function JA(e,t){let n=t.to;if(!Qt(n))throw Mc(e,["forms.to"]);return{to:n,...t.from!==void 0&&{from:t.from},...t.corsOrigin!==void 0&&{corsOrigin:t.corsOrigin},...t.maxConcurrency!==void 0&&{maxConcurrency:t.maxConcurrency}}}de(JA,"readStaticSiteForms");function qA(e,t){if(e.arguments.length<2)return null;let n=e.arguments[0],o=e.arguments[1];if(!Gn.isStringLiteral(n)||!Gn.isObjectLiteralExpression(o))return null;let r=n.text,i=j(o),a=i.type,c=Ze(t),u=y(i.name);return u?a==="payload"||a==="nextjs"?{variableName:c,constructId:r,type:a,config:{name:u,domain:y(i.domain),database:VA(i),compute:BA(i),storage:GA(i),messaging:WA(i),cdn:KA(i),environment:HA(i)},node:e}:a==="staticsite"?{variableName:c,constructId:r,type:"staticsite",config:XA(i,u),node:e}:null:null}de(qA,"extractPatternResource");function Sv(e){return be(e,t=>{if(!Gn.isCallExpression(t)||!fe(t,"addPattern"))return null;let n=t.arguments[0];return Re(n,"PatternFactory")?qA(n,t):null})}de(Sv,"findPatternResources");function _v(e,t){if(!t||t.length===0)return;let n=t[0];if(e.pattern=n.type,n.type==="staticsite"){let{config:r}=n,i=r.source,a=r.build?.command,c=r.build?.outputDir;if(r.unreadableFields!==void 0)throw Mc(r.name,r.unreadableFields);if(!Qt(i)||!Qt(a)||!Qt(c)){let u=[];throw Qt(i)||u.push("source"),Qt(a)||u.push("build.command"),Qt(c)||u.push("build.outputDir"),Mc(r.name,u)}e.patternConfig={type:"staticsite",name:r.name,source:i,build:{command:a,outputDir:c},routing:r.routing,security:r.security,domain:r.domain,...r.forms!==void 0&&{forms:JA(r.name,r.forms)},cdn:r.cdn};return}let{config:o}=n;e.patternConfig={type:n.type,name:o.name,domain:o.domain,database:o.database,compute:o.compute,storage:o.storage,messaging:o.messaging,cdn:o.cdn,environment:o.environment}}de(_v,"applyPatternConfig");var EO=Object.defineProperty,jc=(e,t)=>EO(e,"name",{value:t,configurable:!0});function QA(e,t){for(let n of t){let o=e.compute.find(r=>r.variableName===n.targetVariableName);o!==void 0&&o.type==="lambda"&&(o.scheduleExpression=n.schedule)}}jc(QA,"applyScheduleBackfill");function ex(e,t){Object.keys(t).length>0&&(e.tags={...t}),t[hi]&&(e.owner=t[hi])}jc(ex,"applyTagsAndOwner");function tx(e){let t=[];for(let n of e)if(Oc(n.moduleSpecifier))if(n.moduleSpecifier==="@fjall/components-infrastructure"||n.moduleSpecifier==="@fjall/infrastructure"){let o=n.namedImports.filter(r=>!EA.has(r));o.length>0&&t.push({moduleSpecifier:n.moduleSpecifier,namedImports:o,defaultImport:n.defaultImport})}else(n.namedImports.length>0||n.defaultImport)&&t.push(n);return t.length>0?t:void 0}jc(tx,"computeAdditionalManagedImports");function ki(e,t,n){let o={appName:t,type:"standard",database:[],s3:[],compute:[]};if(_v(o,e.patternResources),e.vpcId&&(o.vpcId=e.vpcId),o.network=gv(e.network),o.backup=vv(e.backup),o.tunnel=hv(e.tunnel),o.additionalNetworks=yv(e.networkResources),ex(o,e.tags),o.database=rv(e.databaseResources),o.dynamodb=Dc(e.dynamodbResources),o.clickhouse=wc(e.clickhouseResources),o.sqs=iv(e.sqsResources),o.cdn=sv(e.cdnResource,e.s3Resources,e.computeResources),o.s3=Kg(e.s3Resources),o.compute=Vg(e.computeResources,e.databaseResources,e.s3Resources,o),QA(o,e.schedules),o.additionalManagedImports=tx(e.imports),n?.skipValidation)return o;try{return EE.parse(o)}catch(r){if(r instanceof s.ZodError){let i=Yo(r);throw new Error(`Invalid infrastructure configuration:
-${i}`)}throw r}}jc(ki,"convertToResourcePlan");var AO=Object.defineProperty,Wn=(e,t)=>AO(e,"name",{value:t,configurable:!0});function Kn(e,t){let n=V.createSourceFile("infrastructure.ts",e,V.ScriptTarget.Latest,!0,V.ScriptKind.TS),o=rx(n),{appVariableName:r,appName:i}=ox(n),a=uv(n),c=lv(n),u=dv(n),l=mv(n),m=pv(n),p=ev(n),{databases:g,dynamodb:h,clickhouse:x}=tv(p),B=ov(n),K=av(n),nr=[...Gg(n),...Wg(n)],eu=Pc(n),Ge=Cc(n),q=Sv(n),ae=ix(n),wr={sourceFile:n,imports:o,appVariableName:r,appName:i,vpcId:a,network:c,backup:u,tunnel:l,networkResources:m,databaseResources:g,dynamodbResources:h,clickhouseResources:x,sqsResources:B,cdnResource:K,s3Resources:nr,computeResources:eu,schedules:Ge,patternResources:q,tags:ae};return t?.extractCustomCode&&(wr.customCodeBlocks=Ii(n),wr.classifiedStatements=Me(n)),wr}Wn(Kn,"parseInfrastructure");function rx(e){let t=[];return V.forEachChild(e,n=>{if(V.isImportDeclaration(n)){if(!V.isStringLiteral(n.moduleSpecifier))return;let o={moduleSpecifier:n.moduleSpecifier.text,namedImports:[]};n.importClause&&(n.importClause.name&&(o.defaultImport=n.importClause.name.text),n.importClause.namedBindings&&V.isNamedImports(n.importClause.namedBindings)&&(o.namedImports=n.importClause.namedBindings.elements.map(r=>r.name.text))),t.push(o)}}),t}Wn(rx,"extractImports");function nx(e,t){return V.isStringLiteral(t)?t.text:V.isIdentifier(t)?_i(e,t.text)??"":V.isPropertyAccessExpression(t)?Ei(e,t)??"":""}Wn(nx,"resolveAppName");function ox(e){return Fe(e,t=>{if(V.isVariableStatement(t))for(let n of t.declarationList.declarations){if(!n.initializer||!bt(n.initializer))continue;let o=V.isIdentifier(n.name)?n.name.text:"",r=n.initializer.arguments.length>0?nx(e,n.initializer.arguments[0]):"";return{appVariableName:o,appName:r}}})??{appVariableName:"",appName:""}}Wn(ox,"findAppVariable");function ix(e){let t={};function n(o){if(V.isCallExpression(o)&&V.isPropertyAccessExpression(o.expression)&&o.expression.name.text==="addTags"&&V.isIdentifier(o.expression.expression)&&o.arguments.length>0){let r=o.arguments[0];if(V.isObjectLiteralExpression(r)){let i=j(r);for(let[a,c]of Object.entries(i))typeof c=="string"?t[a]=c:Jt(c)&&(t[a]="default-value")}}V.forEachChild(o,n)}return Wn(n,"visit"),n(e),t}Wn(ix,"extractTags");import*as Hn from"typescript";var xO=Object.defineProperty,ge=(e,t)=>xO(e,"name",{value:t,configurable:!0});function Xn(e,t,n){return e.slice(0,t)+n+e.slice(t)}ge(Xn,"insertAtPosition");function Uc(e,t){return e.find(n=>n.type===t)}ge(Uc,"findClassification");function Ev(e,t){return e.filter(n=>n.type===t).pop()}ge(Ev,"findLastClassification");function er(e){return Hn.createSourceFile("infrastructure.ts",e,Hn.ScriptTarget.Latest,!0,Hn.ScriptKind.TS)}ge(er,"parseSourceFile");function Lc(e,t){return e.endsWith(`
+`)}Cr(RA,"getStatementTextWithComments");function PA(e,t){let n=[],o=TA.getLeadingCommentRanges(e,t.getFullStart());if(o)for(let r of o){let i=e.slice(r.pos,r.end);n.push(i)}return n}Cr(PA,"extractLeadingComments");function Ln(e,t,n,o){let r=o??Me(e);for(let i of r)if(i.type===t&&i.resourceName===n)return{startPos:i.startPos,endPos:i.endPos,node:i.node};return null}Cr(Ln,"findManagedResourcePosition");function Xg(e,t,n){let o=n??Me(e),r=null;for(let i of o)i.type===t&&i.isManaged&&(r=i);return r}Cr(Xg,"getLastManagedStatementOfType");function Yg(e,t){let n=t??Me(e),o={import:[],"app-init":[],tags:[],database:[],compute:[],storage:[],network:[],messaging:[],cdn:[],pattern:[],"vpc-peer":[],"vpc-peer-accepter":[],"cross-plan-connection":[],custom:[]};for(let r of n)o[r.type].push(r);return o}Cr(Yg,"getManagedResourcesByType");import*as zt from"typescript";import*as Ni from"typescript";var cO=Object.defineProperty,Jg=(e,t)=>cO(e,"name",{value:t,configurable:!0}),uO=["S","N","B"];function Ti(e){if(!N(e))return;let t=y(e.name),n=M(e.type,uO);if(!(!t||!n))return{name:t,type:n}}Jg(Ti,"parseDynamoDBKey");function qg(e){let t=e.node;if(!Ni.isCallExpression(t))return null;let n=t.arguments[0];if(!Ni.isCallExpression(n)||n.arguments.length<2)return null;let o=n.arguments[1];if(!Ni.isObjectLiteralExpression(o))return null;let r=j(o),i=Ti(r.partitionKey);if(!i)return null;let a={resourceName:e.resourceName,partitionKey:i,node:e.node};e.variableName&&(a.variableName=e.variableName);let c=Ti(r.sortKey);if(c&&(a.sortKey=c),Array.isArray(r.globalSecondaryIndexes)){let p=r.globalSecondaryIndexes.filter(N).map(g=>{let h=Ti(g.partitionKey);if(!h)return null;let x=y(g.indexName);if(!x)return null;let B={indexName:x,partitionKey:h},K=Ti(g.sortKey);return K&&(B.sortKey=K),B}).filter(g=>g!==null);p.length>0&&(a.globalSecondaryIndexes=p)}let u=y(r.ttlAttribute);u&&(a.ttlAttribute=u);let l=w(r.stream);l!==void 0&&(a.stream=l);let m=te(r,new Set(["type","databaseName","partitionKey","sortKey","globalSecondaryIndexes","ttlAttribute","stream"]));return m.length>0&&(a.extraProperties=m),a}Jg(qg,"extractDynamoDBFields");function Dc(e){if(e.length!==0)return e.map(t=>({name:t.resourceName,partitionKey:t.partitionKey,...ze({sortKey:t.sortKey,globalSecondaryIndexes:t.globalSecondaryIndexes,ttlAttribute:t.ttlAttribute,stream:t.stream,variableName:t.variableName,extraProperties:t.extraProperties})}))}Jg(Dc,"convertDynamoDBResources");import*as Ri from"typescript";var lO=Object.defineProperty,kA=(e,t)=>lO(e,"name",{value:t,configurable:!0}),dO=new Set(["type","databaseName","instanceType","coldTier","optimiseSchedule","backupSchedule","backupRetentionDays"]);function Qg(e){let t=e.node;if(!Ri.isCallExpression(t))return null;let n=t.arguments[0];if(!Ri.isCallExpression(n)||n.arguments.length<2)return null;let o=n.arguments[1];if(!Ri.isObjectLiteralExpression(o))return null;let r=j(o),i={resourceName:e.resourceName,databaseName:e.databaseName,node:e.node};e.variableName&&(i.variableName=e.variableName);let a=y(r.instanceType);a&&(i.instanceType=a);let c=r.coldTier;c===!1?i.coldTier=!1:N(c)&&y(c.mode)==="s3"&&(i.coldTier={mode:"s3"});let u=r.optimiseSchedule;if(u===!1)i.optimiseSchedule=!1;else{let g=y(u);g&&(i.optimiseSchedule=g)}let l=r.backupSchedule;if(l===!1)i.backupSchedule=!1;else{let g=y(l);g&&(i.backupSchedule=g)}let m=I(r.backupRetentionDays);m!==void 0&&(i.backupRetentionDays=m);let p=te(r,dO);return p.length>0&&(i.extraProperties=p),i}kA(Qg,"extractClickHouseFields");function wc(e){if(e.length!==0)return e.map(t=>({name:t.resourceName,type:"ClickHouse",databaseName:t.databaseName,...ze({instanceType:t.instanceType,coldTier:t.coldTier,optimiseSchedule:t.optimiseSchedule,backupSchedule:t.backupSchedule,backupRetentionDays:t.backupRetentionDays,variableName:t.variableName,extraProperties:t.extraProperties})}))}kA(wc,"convertClickHouseResources");var mO=Object.defineProperty,Fn=(e,t)=>mO(e,"name",{value:t,configurable:!0});function CA(e){let t=y(e.databaseEngine);if(t!==void 0&&Xe($n,t))return t;let n=e.engine;if(ct(n)){let o=String(n.__call);if(o.includes("postgres")||o.includes("auroraPostgres"))return"postgresql";if(o.includes("mysql")||o.includes("auroraMysql"))return"mysql"}}Fn(CA,"extractDatabaseEngine");function OA(e){let t=e.engine;if(ct(t))return String(t.__call)}Fn(OA,"extractEngineExpression");var pO=new Set(["type","databaseName","databaseEngine","engine","vpc","port","deletionProtection","instanceType","multiAz","publiclyAccessible","enableSecretRotation","encryption","databaseInsights","proxy","readReplica","credentials","writer","readers","backupRetention","preferredMaintenanceWindow","primaryRegion","secondaryRegions","globalClusterIdentifier","enableGlobalWriteForwarding","snapshotIdentifier","allocatedStorage","monitoringInterval","snapshotUsername"]);function DA(e,t,n){if(n.arguments.length<2)return null;let o=n.arguments[0],r=n.arguments[1];if(!zt.isStringLiteral(o)&&!zt.isTemplateExpression(o))return null;let i=zt.isStringLiteral(o)?o.text:Tc(e,o);if(!zt.isObjectLiteralExpression(r))return null;let a=j(r),c={resourceName:i,type:y(a.type)??"",databaseName:y(a.databaseName)??"",databaseEngine:CA(a),engineExpression:OA(a),port:I(a.port),deletionProtection:w(a.deletionProtection),instanceType:y(a.instanceType),multiAz:w(a.multiAz),publiclyAccessible:w(a.publiclyAccessible),enableSecretRotation:w(a.enableSecretRotation),encryption:Se(a.encryption,Qe()),databaseInsights:Dt(a.databaseInsights,Qe()),proxy:Dt(a.proxy,Qe()),readReplica:Dt(a.readReplica,Qe()),credentials:Se(a.credentials,Qe()),writer:Se(a.writer,Qe()),readers:Dt(a.readers,Qe()),backupRetention:I(a.backupRetention),preferredMaintenanceWindow:y(a.preferredMaintenanceWindow),primaryRegion:y(a.primaryRegion),secondaryRegions:re(a.secondaryRegions),globalClusterIdentifier:y(a.globalClusterIdentifier),enableGlobalWriteForwarding:w(a.enableGlobalWriteForwarding),allocatedStorage:I(a.allocatedStorage),monitoringInterval:I(a.monitoringInterval),snapshotIdentifier:y(a.snapshotIdentifier),snapshotUsername:y(a.snapshotUsername),node:t},u=Ze(t);u&&(c.variableName=u);let l=te(a,pO);return l.length>0&&(c.extraProperties=l),c}Fn(DA,"extractDatabaseResource");function ev(e){return be(e,t=>{if(!zt.isCallExpression(t)||!fe(t,"addDatabase"))return null;let n=t.arguments[0];return Re(n,"DatabaseFactory")?DA(e,t,n):null})}Fn(ev,"findDatabaseResources");function tv(e){let t=[],n=[],o=[];for(let r of e)if(r.type==="DynamoDB"){let i=qg(r);i&&n.push(i)}else if(r.type==="ClickHouse"){let i=Qg(r);i&&o.push(i)}else t.push(r);return{databases:t,dynamodb:n,clickhouse:o}}Fn(tv,"splitDatabaseResources");var fO=["Instance","Aurora","GlobalAurora"];function rv(e){return e.filter(t=>t.type!=="DynamoDB").map(t=>({name:t.resourceName,type:Xe(fO,t.type)?t.type:"Instance",databaseName:t.databaseName,...ze({port:t.port,deletionProtection:t.deletionProtection,instanceType:t.instanceType,multiAz:t.multiAz,publiclyAccessible:t.publiclyAccessible,enableSecretRotation:t.enableSecretRotation,encryption:t.encryption,databaseInsights:t.databaseInsights,proxy:t.proxy,readReplica:t.readReplica,credentials:t.credentials,writer:t.writer,readers:t.readers,backupRetention:t.backupRetention,preferredMaintenanceWindow:t.preferredMaintenanceWindow,primaryRegion:t.primaryRegion,secondaryRegions:t.secondaryRegions,globalClusterIdentifier:t.globalClusterIdentifier,enableGlobalWriteForwarding:t.enableGlobalWriteForwarding,allocatedStorage:t.allocatedStorage,monitoringInterval:t.monitoringInterval,variableName:t.variableName,databaseEngine:t.databaseEngine,engineExpression:t.engineExpression,extraProperties:t.extraProperties})}))}Fn(rv,"convertDatabaseResources");import*as Vn from"typescript";var gO=Object.defineProperty,Zn=(e,t)=>gO(e,"name",{value:t,configurable:!0});function wA(e,t){if(t.arguments.length<2)return null;let n=t.arguments[0],o=t.arguments[1];if(!Vn.isStringLiteral(n)||!Vn.isObjectLiteralExpression(o))return null;let r=j(o),i={resourceName:n.text,queueType:y(r.queueType)??"standard",visibilityTimeout:I(r.visibilityTimeout),retentionPeriod:I(r.messageRetentionPeriod),contentBasedDeduplication:w(r.contentBasedDeduplication),removalPolicy:y(r.removalPolicy),node:e},a=Ze(e);a&&(i.variableName=a);let c=te(r,new Set(["type","queueType","visibilityTimeout","messageRetentionPeriod","contentBasedDeduplication","removalPolicy"]));return c.length>0&&(i.extraProperties=c),i}Zn(wA,"extractSQSResource");function nv(e){if(e!=null){if(e===!1)return!1;if(N(e))return ze({enabled:w(e.enabled),maxReceiveCount:I(e.maxReceiveCount)})}}Zn(nv,"parseDeadLetterQueueConfig");function ov(e){return be(e,t=>{if(!Vn.isCallExpression(t)||!fe(t,"addMessaging"))return null;let n=t.arguments[0];return Re(n,"MessagingFactory")?wA(t,n):null})}Zn(ov,"findSQSResources");function iv(e){if(e.length!==0)return e.map(t=>({name:t.resourceName,queueType:t.queueType==="fifo"?"fifo":"standard",...ze({visibilityTimeout:t.visibilityTimeout,retentionPeriod:t.retentionPeriod,contentBasedDeduplication:t.contentBasedDeduplication,removalPolicy:MA(t.removalPolicy),variableName:t.variableName,extraProperties:t.extraProperties})}))}Zn(iv,"convertSQSResources");var vO=new Set(ag.options);function zA(e){return vO.has(e)}Zn(zA,"isSqsRemovalPolicy");function MA(e){return e!==void 0&&zA(e)?e:void 0}Zn(MA,"toSqsRemovalPolicy");import*as Bn from"typescript";var hO=Object.defineProperty,Pi=(e,t)=>hO(e,"name",{value:t,configurable:!0});function UA(e){if(e.arguments.length<2)return null;let t=e.arguments[0],n=e.arguments[1];return!Bn.isStringLiteral(t)||!Bn.isObjectLiteralExpression(n)?null:{resourceName:t.text,config:j(n),node:e}}Pi(UA,"extractCDNResource");function LA(e,t,n){let o=t.find(i=>i.variableName===e);if(o)return o.resourceName;let r=n.find(i=>i.variableName===e||i.resourceName.charAt(0).toLowerCase()+i.resourceName.slice(1)===e);return r?r.resourceName:e}Pi(LA,"resolveOriginIdentifier");var jA=["CACHING_OPTIMIZED","CACHING_DISABLED"];function av(e){return Fe(e,t=>{if(!Bn.isCallExpression(t)||!fe(t,"addCdn"))return;let n=t.arguments[0];if(Re(n,"CdnFactory"))return UA(n)??void 0})}Pi(av,"findCDNResource");function sv(e,t,n){if(!e)return;let o=e,r=o.config,i=Pi(p=>Ot(p)?LA(p.__identifier,t,n):y(p)??"","resolveOrigin"),a=i(r.origin),c={name:o.resourceName,defaultOriginRef:a};if(Array.isArray(r.behaviours)){let p=r.behaviours.filter(N).map(g=>({pathPattern:y(g.pathPattern)??"",originRef:i(g.origin),...M(g.cachePolicy,jA)!==void 0&&{cachePolicy:M(g.cachePolicy,jA)}}));p.length>0&&(c.behaviours=p)}let u=y(r.customDomain);if(u)c.customDomain=u;else{let p=re(r.domainNames);p&&p.length>0&&(c.customDomain=p[0])}let l=y(r.certificateArn);if(l&&(c.certificateArn=l),r.accessGate!==void 0){if(r.accessGate===!1)c.accessGate=!1;else if(N(r.accessGate)){let p=r.accessGate,g=y(p.type),h=y(p.username),x=y(p.password);g==="basic-auth"&&h&&x&&(c.accessGate={type:"basic-auth",username:h,password:x})}}let m=te(r,new Set(["originType","origin","behaviours","customDomain","domainNames","certificateArn","accessGate"]));return m.length>0&&(c.extraProperties=m),c}Pi(sv,"convertCDNResource");import*as oe from"typescript";var yO=Object.defineProperty,Be=(e,t)=>yO(e,"name",{value:t,configurable:!0}),bO=new Set(og.options);function FA(e){if(e!==void 0)return bO.has(e)?e:void 0}Be(FA,"asFlowLogDestination");function cv(e){return{maxAzs:I(e.maxAzs),natGateways:Dt(e.natGateways,t=>({count:I(t.count)})),flowLogs:Dt(e.flowLogs,t=>({destination:y(t.destination),retentionDays:I(t.retentionDays)})),vpcEndpoints:N(e.vpcEndpoints)?e.vpcEndpoints:void 0}}Be(cv,"parseNetworkConfigFields");function ZA(e,t){if(t.arguments.length<2)return null;let n=t.arguments[0],o=t.arguments[1];if(!oe.isStringLiteral(n))return null;let r=n.text,i=oe.isObjectLiteralExpression(o)?j(o):{},a=cv(i),c={name:r,config:ze({...a}),node:e},u=Ze(e);return u&&(c.variableName=u),c}Be(ZA,"extractNetworkResource");function uv(e){return Fe(e,t=>{if(!bt(t)||t.arguments.length<=1)return;let n=t.arguments[1];if(oe.isObjectLiteralExpression(n)){for(let o of n.properties)if(qt(o,"network")&&oe.isObjectLiteralExpression(o.initializer)){for(let r of o.initializer.properties)if(qt(r,"useExisting")&&oe.isStringLiteral(r.initializer))return r.initializer.text}}})}Be(uv,"findVpcId");function lv(e){return Fe(e,t=>{if(!bt(t)||t.arguments.length<=1)return;let n=t.arguments[1];if(oe.isObjectLiteralExpression(n)){for(let o of n.properties)if(qt(o,"network")){if(o.initializer.kind===oe.SyntaxKind.FalseKeyword)return;if(oe.isObjectLiteralExpression(o.initializer)&&!o.initializer.properties.some(r=>qt(r,"useExisting"))){let r=j(o.initializer);return cv(r)}}}})}Be(lv,"findNetworkConfig");function dv(e){return Fe(e,t=>{if(!bt(t)||t.arguments.length<=1)return;let n=t.arguments[1];if(oe.isObjectLiteralExpression(n)){for(let o of n.properties)if(qt(o,"backup")){if(o.initializer.kind===oe.SyntaxKind.FalseKeyword)return!1;if(oe.isObjectLiteralExpression(o.initializer)){let r=j(o.initializer),i=y(r.tier);if(i)return{tier:i}}}}})}Be(dv,"findBackupConfig");function mv(e){return Fe(e,t=>{if(!bt(t)||t.arguments.length<=1)return;let n=t.arguments[1];if(oe.isObjectLiteralExpression(n)){for(let o of n.properties)if(qt(o,"tunnel")){if(o.initializer.kind===oe.SyntaxKind.FalseKeyword)return!1;if(o.initializer.kind===oe.SyntaxKind.TrueKeyword)return!0;if(oe.isObjectLiteralExpression(o.initializer)){let r=j(o.initializer),i=y(r.instanceType);return i?{instanceType:i}:{}}}}})}Be(mv,"findTunnelConfig");function pv(e){return be(e,t=>{if(!oe.isCallExpression(t)||!fe(t,"addNetwork"))return null;let n=t.arguments[0];return Re(n,"NetworkFactory")?ZA(t,n):null})}Be(pv,"findNetworkResources");function fv(e){let t=e.flowLogs;return{...ze({maxAzs:e.maxAzs,natGateways:e.natGateways,vpcEndpoints:e.vpcEndpoints}),...t!==void 0&&{flowLogs:t===!1?!1:ze({destination:FA(t.destination),retentionDays:t.retentionDays})}}}Be(fv,"buildNetworkFields");function gv(e){if(e)return fv(e)}Be(gv,"convertNetworkConfig");function vv(e){if(e===void 0)return;if(e===!1)return!1;let t=e.tier;if(Xe(at,t))return{tier:t}}Be(vv,"convertBackupConfig");function hv(e){if(e===void 0)return;if(e===!1)return!1;if(e===!0)return{};let t={};return e.instanceType&&(t.instanceType=e.instanceType),t}Be(hv,"convertTunnelConfig");function yv(e){if(!(!e||e.length===0))return e.map(t=>({name:t.name,...fv(t.config)}))}Be(yv,"convertAdditionalNetworks");import*as Gn from"typescript";var SO=Object.defineProperty,de=(e,t)=>SO(e,"name",{value:t,configurable:!0}),_O=["Instance","Aurora"],EO=["postgresql","mysql"];function zc(e){if(!N(e))return;let t={...e.memorySize!==void 0&&{memorySize:I(e.memorySize)},...e.timeout!==void 0&&{timeout:I(e.timeout)},...e.ephemeralStorageSize!==void 0&&{ephemeralStorageSize:I(e.ephemeralStorageSize)}};return Object.keys(t).length>0?t:void 0}de(zc,"parseLambdaConfig");function VA(e){return et(e,"database",t=>({type:M(t.type,_O),databaseName:y(t.databaseName),databaseEngine:M(t.databaseEngine,EO),deletionProtection:w(t.deletionProtection),backupRetention:I(t.backupRetention),port:I(t.port),publiclyAccessible:w(t.publiclyAccessible),allowedIpCidr:y(t.allowedIpCidr),instanceType:y(t.instanceType),allocatedStorage:I(t.allocatedStorage),multiAz:w(t.multiAz),allowVpcAccess:w(t.allowVpcAccess),monitoringInterval:I(t.monitoringInterval),preferredMaintenanceWindow:y(t.preferredMaintenanceWindow),snapshotIdentifier:y(t.snapshotIdentifier),snapshotUsername:y(t.snapshotUsername),readReplica:jn(t.readReplica),writer:Se(t.writer,Qe()),readers:jn(t.readers),databaseInsights:jn(t.databaseInsights),proxy:jn(t.proxy),credentials:Se(t.credentials,Qe()),encryption:Se(t.encryption,Qe())}))}de(VA,"extractPatternDatabaseConfig");function BA(e){return et(e,"compute",t=>({server:Se(t.server,zc),imageOptimisation:Se(t.imageOptimisation,zc),revalidation:Se(t.revalidation,zc)}))}de(BA,"extractPatternComputeConfig");function GA(e){let t=de(n=>({versioned:w(n.versioned)}),"parseVersionedConfig");return et(e,"storage",n=>({assets:Se(n.assets,t),cache:Se(n.cache,t),media:Se(n.media,t)}))}de(GA,"extractPatternStorageConfig");function WA(e){return et(e,"messaging",t=>({revalidationQueue:Se(t.revalidationQueue,n=>({visibilityTimeout:I(n.visibilityTimeout),messageRetentionPeriod:I(n.messageRetentionPeriod),maxMessageSize:I(n.maxMessageSize),deadLetterQueue:nv(n.deadLetterQueue)}))}))}de(WA,"extractPatternMessagingConfig");function KA(e){return et(e,"cdn",t=>({domainNames:re(t.domainNames),certificateArn:y(t.certificateArn)}))}de(KA,"extractPatternCdnConfig");function HA(e){return et(e,"environment",t=>{let n=Object.fromEntries(Object.entries(t).filter(o=>typeof o[1]=="string"));return Object.keys(n).length>0?n:void 0})}de(HA,"extractPatternEnvironmentConfig");function XA(e,t){let n=YA(e);return{name:t,source:y(e.source),build:et(e,"build",o=>({command:y(o.command),outputDir:y(o.outputDir)})),routing:M(e.routing,Vo),security:et(e,"security",o=>({headers:w(o.headers),contentSecurityPolicy:y(o.contentSecurityPolicy)})),domain:y(e.domain),forms:et(e,"forms",o=>({to:y(o.to),from:y(o.from),corsOrigin:y(o.corsOrigin),maxConcurrency:I(o.maxConcurrency)})),cdn:et(e,"cdn",o=>({behaviours:Array.isArray(o.behaviours)?o.behaviours:void 0})),...n.length>0&&{unreadableFields:n}}}de(XA,"extractStaticSiteConfig");function bv(e){return qe(e)&&("__identifier"in e||"__expression"in e||"__call"in e||"__unknown"in e)}de(bv,"isUnreadableRef");function YA(e){let t=[],n=de((r,i)=>{bv(r)&&t.push(i)},"check");n(e.source,"source"),n(e.routing,"routing"),n(e.domain,"domain");let o=[[e.build,"build",["command","outputDir"]],[e.security,"security",["headers","contentSecurityPolicy"]],[e.forms,"forms",["to","from","corsOrigin","maxConcurrency"]],[e.cdn,"cdn",["behaviours"]]];for(let[r,i,a]of o)if(bv(r))t.push(i);else if(N(r))for(let c of a)n(r[c],`${i}.${c}`);return t}de(YA,"collectUnreadableStaticSiteFields");function Qt(e){return e!==void 0&&e!==""}de(Qt,"isReadable");function Mc(e,t){return new Error(`Static-site pattern '${e}' in infrastructure.ts: Fjall could not read ${t.join(", ")} as inline literal(s). Fjall reads these fields out of the file and writes them back, so they must be written inline (source: "./site"), not as a variable or an expression.`)}de(Mc,"unreadableStaticSiteFields");function JA(e,t){let n=t.to;if(!Qt(n))throw Mc(e,["forms.to"]);return{to:n,...t.from!==void 0&&{from:t.from},...t.corsOrigin!==void 0&&{corsOrigin:t.corsOrigin},...t.maxConcurrency!==void 0&&{maxConcurrency:t.maxConcurrency}}}de(JA,"readStaticSiteForms");function qA(e,t){if(e.arguments.length<2)return null;let n=e.arguments[0],o=e.arguments[1];if(!Gn.isStringLiteral(n)||!Gn.isObjectLiteralExpression(o))return null;let r=n.text,i=j(o),a=i.type,c=Ze(t),u=y(i.name);return u?a==="payload"||a==="nextjs"?{variableName:c,constructId:r,type:a,config:{name:u,domain:y(i.domain),database:VA(i),compute:BA(i),storage:GA(i),messaging:WA(i),cdn:KA(i),environment:HA(i)},node:e}:a==="staticsite"?{variableName:c,constructId:r,type:"staticsite",config:XA(i,u),node:e}:null:null}de(qA,"extractPatternResource");function Sv(e){return be(e,t=>{if(!Gn.isCallExpression(t)||!fe(t,"addPattern"))return null;let n=t.arguments[0];return Re(n,"PatternFactory")?qA(n,t):null})}de(Sv,"findPatternResources");function _v(e,t){if(!t||t.length===0)return;let n=t[0];if(e.pattern=n.type,n.type==="staticsite"){let{config:r}=n,i=r.source,a=r.build?.command,c=r.build?.outputDir;if(r.unreadableFields!==void 0)throw Mc(r.name,r.unreadableFields);if(!Qt(i)||!Qt(a)||!Qt(c)){let u=[];throw Qt(i)||u.push("source"),Qt(a)||u.push("build.command"),Qt(c)||u.push("build.outputDir"),Mc(r.name,u)}e.patternConfig={type:"staticsite",name:r.name,source:i,build:{command:a,outputDir:c},routing:r.routing,security:r.security,domain:r.domain,...r.forms!==void 0&&{forms:JA(r.name,r.forms)},cdn:r.cdn};return}let{config:o}=n;e.patternConfig={type:n.type,name:o.name,domain:o.domain,database:o.database,compute:o.compute,storage:o.storage,messaging:o.messaging,cdn:o.cdn,environment:o.environment}}de(_v,"applyPatternConfig");var AO=Object.defineProperty,jc=(e,t)=>AO(e,"name",{value:t,configurable:!0});function QA(e,t){for(let n of t){let o=e.compute.find(r=>r.variableName===n.targetVariableName);o!==void 0&&o.type==="lambda"&&(o.scheduleExpression=n.schedule)}}jc(QA,"applyScheduleBackfill");function ex(e,t){Object.keys(t).length>0&&(e.tags={...t}),t[hi]&&(e.owner=t[hi])}jc(ex,"applyTagsAndOwner");function tx(e){let t=[];for(let n of e)if(Oc(n.moduleSpecifier))if(n.moduleSpecifier==="@fjall/components-infrastructure"||n.moduleSpecifier==="@fjall/infrastructure"){let o=n.namedImports.filter(r=>!EA.has(r));o.length>0&&t.push({moduleSpecifier:n.moduleSpecifier,namedImports:o,defaultImport:n.defaultImport})}else(n.namedImports.length>0||n.defaultImport)&&t.push(n);return t.length>0?t:void 0}jc(tx,"computeAdditionalManagedImports");function ki(e,t,n){let o={appName:t,type:"standard",database:[],s3:[],compute:[]};if(_v(o,e.patternResources),e.vpcId&&(o.vpcId=e.vpcId),o.network=gv(e.network),o.backup=vv(e.backup),o.tunnel=hv(e.tunnel),o.additionalNetworks=yv(e.networkResources),ex(o,e.tags),o.database=rv(e.databaseResources),o.dynamodb=Dc(e.dynamodbResources),o.clickhouse=wc(e.clickhouseResources),o.sqs=iv(e.sqsResources),o.cdn=sv(e.cdnResource,e.s3Resources,e.computeResources),o.s3=Kg(e.s3Resources),o.compute=Vg(e.computeResources,e.databaseResources,e.s3Resources,o),QA(o,e.schedules),o.additionalManagedImports=tx(e.imports),n?.skipValidation)return o;try{return EE.parse(o)}catch(r){if(r instanceof s.ZodError){let i=Yo(r);throw new Error(`Invalid infrastructure configuration:
+${i}`)}throw r}}jc(ki,"convertToResourcePlan");var xO=Object.defineProperty,Wn=(e,t)=>xO(e,"name",{value:t,configurable:!0});function Kn(e,t){let n=V.createSourceFile("infrastructure.ts",e,V.ScriptTarget.Latest,!0,V.ScriptKind.TS),o=rx(n),{appVariableName:r,appName:i}=ox(n),a=uv(n),c=lv(n),u=dv(n),l=mv(n),m=pv(n),p=ev(n),{databases:g,dynamodb:h,clickhouse:x}=tv(p),B=ov(n),K=av(n),nr=[...Gg(n),...Wg(n)],eu=Pc(n),Ge=Cc(n),q=Sv(n),ae=ix(n),wr={sourceFile:n,imports:o,appVariableName:r,appName:i,vpcId:a,network:c,backup:u,tunnel:l,networkResources:m,databaseResources:g,dynamodbResources:h,clickhouseResources:x,sqsResources:B,cdnResource:K,s3Resources:nr,computeResources:eu,schedules:Ge,patternResources:q,tags:ae};return t?.extractCustomCode&&(wr.customCodeBlocks=Ii(n),wr.classifiedStatements=Me(n)),wr}Wn(Kn,"parseInfrastructure");function rx(e){let t=[];return V.forEachChild(e,n=>{if(V.isImportDeclaration(n)){if(!V.isStringLiteral(n.moduleSpecifier))return;let o={moduleSpecifier:n.moduleSpecifier.text,namedImports:[]};n.importClause&&(n.importClause.name&&(o.defaultImport=n.importClause.name.text),n.importClause.namedBindings&&V.isNamedImports(n.importClause.namedBindings)&&(o.namedImports=n.importClause.namedBindings.elements.map(r=>r.name.text))),t.push(o)}}),t}Wn(rx,"extractImports");function nx(e,t){return V.isStringLiteral(t)?t.text:V.isIdentifier(t)?_i(e,t.text)??"":V.isPropertyAccessExpression(t)?Ei(e,t)??"":""}Wn(nx,"resolveAppName");function ox(e){return Fe(e,t=>{if(V.isVariableStatement(t))for(let n of t.declarationList.declarations){if(!n.initializer||!bt(n.initializer))continue;let o=V.isIdentifier(n.name)?n.name.text:"",r=n.initializer.arguments.length>0?nx(e,n.initializer.arguments[0]):"";return{appVariableName:o,appName:r}}})??{appVariableName:"",appName:""}}Wn(ox,"findAppVariable");function ix(e){let t={};function n(o){if(V.isCallExpression(o)&&V.isPropertyAccessExpression(o.expression)&&o.expression.name.text==="addTags"&&V.isIdentifier(o.expression.expression)&&o.arguments.length>0){let r=o.arguments[0];if(V.isObjectLiteralExpression(r)){let i=j(r);for(let[a,c]of Object.entries(i))typeof c=="string"?t[a]=c:Jt(c)&&(t[a]="default-value")}}V.forEachChild(o,n)}return Wn(n,"visit"),n(e),t}Wn(ix,"extractTags");import*as Hn from"typescript";var $O=Object.defineProperty,ge=(e,t)=>$O(e,"name",{value:t,configurable:!0});function Xn(e,t,n){return e.slice(0,t)+n+e.slice(t)}ge(Xn,"insertAtPosition");function Uc(e,t){return e.find(n=>n.type===t)}ge(Uc,"findClassification");function Ev(e,t){return e.filter(n=>n.type===t).pop()}ge(Ev,"findLastClassification");function er(e){return Hn.createSourceFile("infrastructure.ts",e,Hn.ScriptTarget.Latest,!0,Hn.ScriptKind.TS)}ge(er,"parseSourceFile");function Lc(e,t){return e.endsWith(`
 
 `)||t.startsWith(`
 `)?"":e.endsWith(`
@@ -373,17 +373,17 @@ ${i}`)}throw r}}jc(ki,"convertToResourcePlan");var AO=Object.defineProperty,Wn=(
 `)?"":`
 `;return i+n+a}ge(cx,"formatCodeForInsertion");function ux(e,t){let{resourceType:n,resourceName:o,newCode:r}=t;try{let i=er(e),a=Av(i,e,n,o);if(xv(a))return a;let c=a,u=c.node.getFullStart(),l=c.endPos,m=e.slice(u,c.node.getStart()),p=lx(m);return{content:e.slice(0,u)+p+r+e.slice(l),success:!0}}catch(i){return St(i,e)}}ge(ux,"updateResourceSurgically");function lx(e){let t=e.match(/^[\s]*[\n\r]+[\s]*/);return t?t[0]:""}ge(lx,"extractLeadingWhitespace");function dx(e,t,n,o){let r=e,i=0;for(let a of t){let c=`// [ORPHANED: was after ${tr(n,o)}]
 `,u=a.sourceText.trim(),l=r.indexOf(u,i);l!==-1&&(r=Xn(r,l,c),i=l+c.length+u.length)}return r}ge(dx,"insertOrphanMarkers");function mx(e,t){let{resourceType:n,resourceName:o,orphanHandling:r}=t,i=[];try{let a=er(e),c=Av(a,e,n,o);if(xv(c))return c;let u=c,l=(Kn(e,{extractCustomCode:!0}).customCodeBlocks??[]).filter(x=>x.position==="after-resource"&&x.afterManagedResource?.type===n&&x.afterManagedResource?.name===o);if(l.length>0)if(r==="preserve-with-warning")i.push(`Custom code after ${tr(n,o)} will be orphaned. Added // [ORPHANED] marker comment.`);else return St(new Error(`Orphan handling "${r}" is not yet implemented`),e);let m=u.node.getFullStart(),p=u.endPos,g=e[p]===`
-`?p+1:p,h=e.slice(0,m)+e.slice(g);return l.length>0&&r==="preserve-with-warning"&&(h=dx(h,l,n,o)),{content:h,success:!0,warnings:i.length>0?i:void 0}}catch(a){return St(a,e)}}ge(mx,"removeResourceSurgically");import*as Or from"typescript";var $O=Object.defineProperty,rt=(e,t)=>$O(e,"name",{value:t,configurable:!0});function vx(e,t){try{let n=er(e),o=new Set;for(let c of n.statements)Or.isImportDeclaration(c)&&o.add(c.getText(n).trim());let r=[];for(let c of t){let u=c.trim();[...o].some(l=>yx(l,u))||r.push(u)}if(r.length===0)return{content:e,success:!0};let i=n.statements.filter(Or.isImportDeclaration).at(-1)?.getEnd()??0,a=`
+`?p+1:p,h=e.slice(0,m)+e.slice(g);return l.length>0&&r==="preserve-with-warning"&&(h=dx(h,l,n,o)),{content:h,success:!0,warnings:i.length>0?i:void 0}}catch(a){return St(a,e)}}ge(mx,"removeResourceSurgically");import*as Or from"typescript";var IO=Object.defineProperty,rt=(e,t)=>IO(e,"name",{value:t,configurable:!0});function vx(e,t){try{let n=er(e),o=new Set;for(let c of n.statements)Or.isImportDeclaration(c)&&o.add(c.getText(n).trim());let r=[];for(let c of t){let u=c.trim();[...o].some(l=>yx(l,u))||r.push(u)}if(r.length===0)return{content:e,success:!0};let i=n.statements.filter(Or.isImportDeclaration).at(-1)?.getEnd()??0,a=`
 `+r.join(`
 `);return{content:Xn(e,i,a),success:!0}}catch(n){return St(n,e)}}rt(vx,"ensureImports");function $v(e){return new Set(e.split(",").map(t=>t.trim()).filter(Boolean))}rt($v,"parseNamedImports");function hx(e,t){let n=$v(e),o=$v(t);for(let r of o)if(!n.has(r))return!1;return!0}rt(hx,"existingImportCoversRequired");function yx(e,t){let n=e.match(px),o=t.match(px);if(!n||!o||n[1]!==o[1])return!1;let r=e.match(fx),i=t.match(fx);return r&&i?hx(r[1],i[1]):!!r==!!i}rt(yx,"importsAreEquivalent");var px=/from\s+["']([^"']+)["']/,fx=/\{([^}]+)\}/,gx={"before-imports":0,"after-imports":1,"after-app-init":2,"after-tags":3,"after-resource":4,"end-of-file":5};function bx(e){return[...e].sort((t,n)=>{let o=gx[n.position]-gx[t.position];return o!==0?o:(n.originalLine??0)-(t.originalLine??0)})}rt(bx,"sortCustomBlocksForInsertion");function Sx(e,t,n,o){if(n!==null){let i=Ax(e,n,t);return Xn(e,n,i)}let r=t.afterManagedResource?`// [ORPHANED: was after ${tr(t.afterManagedResource.type,t.afterManagedResource.name)}]
 `:`// [ORPHANED]
 `;return o.push(`Custom code from line ${t.originalLine} could not be positioned. Added at end of file.`),e+`
 `+r+t.sourceText}rt(Sx,"insertOrOrphanBlock");function Zc(e,t,n){if(!t||t.length===0)return{content:e,success:!0};try{let o=er(e),r=Me(o),i=[],a=bx(t),c=e;for(let u of a){let l=Ex(o,r,u,n,i);c=Sx(c,u,l,i)}return{content:c,success:!0,warnings:i.length>0?i:void 0}}catch(o){return St(o,e)}}rt(Zc,"injectCustomCodeBlocks");function _x(e,t,n,o){if(!t.afterManagedResource)return null;let r=t.afterManagedResource,i=(r.name&&n?.get(r.name))??r.name,a=e.find(u=>u.type===r.type&&u.resourceName===i);if(a)return a.endPos;let c=e.filter(u=>u.type===r.type&&u.isManaged);return c.length===1?c[0].endPos:(o&&o.push(`Resource ${tr(t.afterManagedResource.type,t.afterManagedResource.name)} not found. Custom code may be orphaned.`),null)}rt(_x,"findAfterResourcePosition");function Ex(e,t,n,o,r){switch(n.position){case"before-imports":return 0;case"after-imports":return Ev(t,"import")?.endPos??0;case"after-app-init":return Uc(t,"app-init")?.endPos??null;case"after-tags":return Uc(t,"tags")?.endPos??null;case"after-resource":return _x(t,n,o,r);case"end-of-file":return e.getEnd();default:return null}}rt(Ex,"findCustomCodeInsertPosition");function Ax(e,t,n){let o=Fc(e,t),r=n.sourceText;return r=Lc(o,r)+r,r.endsWith(`
 `)||(r+=`
-`),r}rt(Ax,"formatCustomCodeForInsertion");function xx(e){try{let t=function(r){r.kind===Or.SyntaxKind.Unknown&&o.push("Unknown node found in AST - possible parse error"),Or.forEachChild(r,t)};rt(t,"visit");let n=er(e),o=[];return t(n),o.length>0?{valid:!1,errors:o}:{valid:!0}}catch(t){return{valid:!1,errors:[$t(t)]}}}rt(xx,"validateModifiedFile");import*as ve from"typescript";var Ci=s.enum(["A","AAAA","CNAME","MX","TXT","NS","SRV","CAA"]),IO=s.object({name:s.string(),type:Ci,ttl:s.number().optional(),value:s.string(),priority:s.number().optional(),weight:s.number().optional(),port:s.number().optional()}).strict(),TO=s.object({subdomain:s.string(),targetAccount:s.string(),auto:s.boolean()}).strict(),NO=s.object({domainName:s.string(),subjectAlternativeNames:s.array(s.string())}).strict(),_6=s.object({origin:s.string(),ttl:s.number(),records:s.array(IO),delegations:s.array(TO),certificates:s.array(NO)}).strict(),_t=Object.freeze({ORIGIN:"$ORIGIN",TTL:"$TTL",FJALL_DELEGATE:"$FJALL-DELEGATE",FJALL_CERT:"$FJALL-CERT"}),Vc="ALIAS ";var $x=s.discriminatedUnion("kind",[s.object({kind:s.literal("ecs"),appName:s.string()}).strict(),s.object({kind:s.literal("cdn"),appName:s.string()}).strict(),s.object({kind:s.literal("bucket"),bucketName:s.string()}).strict(),s.object({kind:s.literal("custom"),dnsName:s.string(),hostedZoneId:s.string()}).strict()]),Ix=$x.options.map(e=>e.shape.kind.value),Iv=s.enum(["A","AAAA"]),Tv=s.enum(["route53","external-delegated","external-records"]),Tx=s.enum(["zone","full"]),RO=s.object({kind:s.literal("standard"),type:s.enum(["A","AAAA","CNAME","MX","TXT","NS","SRV","CAA"]),name:s.string(),value:s.union([s.string(),s.array(s.string())]),ttl:s.number().int().positive().optional()}).strict(),PO=s.object({kind:s.literal("alias"),type:Iv,name:s.string(),target:$x}).strict(),kO=s.discriminatedUnion("kind",[RO,PO]),CO=s.object({domainName:s.string(),subjectAlternativeNames:s.array(s.string()).optional(),transparencyLogging:s.boolean().optional(),cloudFront:s.boolean().optional()}).strict(),OO=s.object({subdomain:s.string(),toAccount:s.string(),auto:s.boolean().optional()}).strict(),x6=s.object({zoneName:s.string(),registrar:Tv,hostedZoneId:s.string().optional(),delegatedSubdomain:s.string().optional(),adoptedNameServers:s.array(s.string().min(1)).min(1).optional(),records:s.array(kO),certificates:s.array(CO),delegations:s.array(OO)}).strict().refine(e=>e.registrar!=="external-delegated"||e.delegatedSubdomain!==void 0,{message:"external-delegated requires delegatedSubdomain"}).refine(e=>e.registrar!=="external-records"||e.delegations.length===0,{message:"external-records forbids delegations"}).refine(e=>e.registrar==="external-delegated"||e.adoptedNameServers===void 0,{message:"adoptedNameServers requires registrar external-delegated"}).refine(e=>e.registrar!=="external-delegated"||e.hostedZoneId===void 0==(e.adoptedNameServers===void 0),{message:"external-delegated adoption requires hostedZoneId and adoptedNameServers together (both-or-neither)"});var DO=Object.defineProperty,ie=(e,t)=>DO(e,"name",{value:t,configurable:!0}),Rx=Tv.options,Nx=Tx.options,wO=Ci.options,zO=Iv.options;function Px(e){let t=[],n=ie(r=>{if(ve.isNewExpression(r)&&kx(r.expression)){let i=Cx(r);i!==void 0&&t.push(i)}ve.forEachChild(r,n)},"visit");if(n(e),t.length===0)return R(void 0);if(t.length>1)return T(new Error(`Expected exactly one 'new Domain(...)' call per infrastructure file, found ${t.length}`));let o=t[0];return o?R(o):R(void 0)}ie(Px,"findDomainConstructCall");function kx(e){return ve.isIdentifier(e)&&e.text==="Domain"}ie(kx,"isDomainIdentifier");function Cx(e){let t=e.arguments;if(!t||t.length<3)return;let n=t[0],o=t[1],r=t[2];if(!n||!o||!r||!ve.isObjectLiteralExpression(r))return;let i=Ox(e);if(i===void 0)return;let a=Dx(e),c=ve.isStringLiteral(o)?o.text:void 0;return{callExpression:e,containingStatement:i,propsObjectLiteral:r,domainVarId:a,scopeArgumentText:n.getText(),constructIdLiteral:c}}ie(Cx,"buildMatch");function Ox(e){let t=e;for(;t!==void 0;){if(ve.isExpressionStatement(t)||ve.isVariableStatement(t))return t;t=t.parent}}ie(Ox,"findContainingTopLevelStatement");function Dx(e){let t=e.parent;for(;t!==void 0;){if(ve.isVariableDeclaration(t)&&ve.isIdentifier(t.name)&&t.initializer===e)return t.name.text;t=t.parent}}ie(Dx,"extractDomainVarId");function wx(e){switch(e.kind){case"registrar_required":return"'registrar' property is required";case"registrar_unsupported":return`'registrar' must be one of ${Rx.join(", ")}, got ${JSON.stringify(e.value)}`;case"missing_field":return`'${e.field}' property is required`;case"invalid_literal":return`'${e.field}' ${e.reason}`;case"removed_field":return`'${e.field}' was removed from the Domain API \u2014 ${e.cure}`}}ie(wx,"errorMessage");var MO="declare the delegated child as its own Domain with registrar: 'external-delegated' and set 'parentDelegationRoleArn' (the CLI injects it via ManagedDomainBinding.delegationRoleArn); the child UPSERTs its NS records into the parent zone";function zx(e){let t=j(e),n=M(t.registrar,Rx);if(n===void 0){let c=t.registrar;if(c===void 0)return T({kind:"registrar_required"});let u=typeof c=="string"?c:Gc(c);return T({kind:"registrar_unsupported",value:u})}let o=y(t.zoneName);if(o===void 0)return T({kind:"missing_field",field:"zoneName"});let r=jx(t.records);if(!r.success)return r;let i=Vx(t.certificates);if(!i.success)return i;if(t.delegations!==void 0)return T({kind:"removed_field",field:"delegations",cure:MO});let a={zoneName:o,description:y(t.description),costAllocationEnvironment:y(t.costAllocationEnvironment),tags:Bx(t.tags),records:r.data,certificates:i.data};switch(n){case"route53":return R({...a,registrar:n,hostedZoneId:y(t.hostedZoneId)});case"external-delegated":{let c=y(t.delegatedSubdomain);if(c===void 0)return T({kind:"missing_field",field:"delegatedSubdomain"});let u=y(t.hostedZoneId);if(t.hostedZoneId!==void 0&&u===void 0)return T({kind:"invalid_literal",field:"hostedZoneId",reason:"must be a literal string zone id on external-delegated \u2014 dynamic expressions cannot be round-tripped"});let l=re(t.adoptedNameServers);if(t.adoptedNameServers!==void 0&&l===void 0)return T({kind:"invalid_literal",field:"adoptedNameServers",reason:"must be an array of literal NS hostname strings \u2014 the parent NS UPSERT writes them verbatim"});if(u===void 0!=(l===void 0))return T({kind:"invalid_literal",field:u===void 0?"hostedZoneId":"adoptedNameServers",reason:"adopting an existing child zone requires hostedZoneId and adoptedNameServers together (both-or-neither) \u2014 an imported zone exposes no name-server attribute at synth"});let m=y(t.parentDelegationRoleArn);if(t.parentDelegationRoleArn!==void 0&&m===void 0)return T({kind:"invalid_literal",field:"parentDelegationRoleArn",reason:"must be a literal string ARN (VD2-a) \u2014 the CLI injects it via ManagedDomainBinding.delegationRoleArn; dynamic expressions such as Fn.importValue are not supported"});let p=M(t.phase,Nx);return t.phase!==void 0&&p===void 0?T({kind:"invalid_literal",field:"phase",reason:`must be one of ${Nx.map(g=>`'${g}'`).join(", ")}`}):R({...a,registrar:n,delegatedSubdomain:c,hostedZoneId:u,adoptedNameServers:l,parentDelegationRoleArn:m,phase:p})}case"external-records":return R({...a,registrar:n})}}ie(zx,"parseDomainProps");function Mx(e){return wx(e)}ie(Mx,"parseDomainErrorMessage");function jx(e){if(e===void 0)return R([]);if(!Array.isArray(e))return T({kind:"invalid_literal",field:"records",reason:"must be an array"});let t=[];for(let n=0;n<e.length;n++){let o=e[n];if(!N(o))return T({kind:"invalid_literal",field:`records[${n}]`,reason:"must be an object literal"});let r=Ux(o,n);if(!r.success)return r;t.push(r.data)}return R(t)}ie(jx,"parseRecordsArray");function Ux(e,t){let n=y(e.type),o=y(e.name);if(n===void 0)return T({kind:"missing_field",field:`records[${t}].type`});if(o===void 0)return T({kind:"missing_field",field:`records[${t}].name`});if(e.target!==void 0){if(!zO.some(u=>u===n))return T({kind:"invalid_literal",field:`records[${t}]`,reason:`alias records must have type 'A' or 'AAAA', got '${n}'`});let c=Fx(e.target);return R({kind:"alias",type:n,name:o,target:c})}if(!wO.some(c=>c===n))return T({kind:"invalid_literal",field:`records[${t}]`,reason:`unsupported record type '${n}'`});let r=Lx(e.value);if(r===void 0)return T({kind:"invalid_literal",field:`records[${t}].value`,reason:`must be a string or array of strings (got ${JSON.stringify(e.value)})`});let i=I(e.ttl),a={kind:"standard",type:n,name:o,value:r,...i!==void 0?{ttl:i}:{}};return R(a)}ie(Ux,"parseRecord");function Lx(e){if(e===void 0)return;if(typeof e=="string")return e;let t=re(e);if(t!==void 0)return t}ie(Lx,"parseRecordValue");function Fx(e){if(ct(e))return Zx(e);if(N(e)){let t=M(e.kind,Ix);if(t==="ecs"||t==="cdn"){let n=y(e.appName);if(n!==void 0)return{kind:t,appName:n}}if(t==="bucket"){let n=y(e.bucketName);if(n!==void 0)return{kind:t,bucketName:n}}if(t==="custom"){let n=y(e.dnsName),o=y(e.hostedZoneId);if(n!==void 0&&o!==void 0)return{kind:t,dnsName:n,hostedZoneId:o}}}return{kind:"unresolved",sourceText:Gc(e)}}ie(Fx,"parseTarget");function Zx(e){let t=e.__call.trim(),n=t.match(/^([A-Za-z_][\w$]*)\s*\(([\s\S]*)\)\s*$/);if(!n)return{kind:"unresolved",sourceText:t};let o=n[1],r=n[2]??"",i=Bc(r);switch(o){case"fjallApp":{let a=Dr(i,0);return a===void 0?{kind:"dynamic",sourceText:t}:{kind:"ecs",appName:a}}case"fjallCdn":{let a=Dr(i,0);return a===void 0?{kind:"dynamic",sourceText:t}:{kind:"cdn",appName:a}}case"fjallBucket":{let a=Dr(i,0);return a===void 0?{kind:"dynamic",sourceText:t}:{kind:"bucket",bucketName:a}}case"aliasTo":{if(i.length>=2){let a=Dr(i,0),c=Dr(i,1);return a!==void 0&&c!==void 0?{kind:"custom",dnsName:a,hostedZoneId:c}:{kind:"dynamic",sourceText:t}}if(i.length===1){let a=i[0]?.trim()??"",c=Nv(a,"dnsName"),u=Nv(a,"hostedZoneId");return c!==void 0&&u!==void 0?{kind:"custom",dnsName:c,hostedZoneId:u}:{kind:"dynamic",sourceText:t}}return{kind:"unresolved",sourceText:t}}default:return{kind:"unresolved",sourceText:t}}}ie(Zx,"resolveCallRefTarget");function Bc(e){let t=[],n=0,o=null,r="";for(let a=0;a<e.length;a++){let c=e[a];if(o!==null){if(r+=c,c==="\\"&&a+1<e.length){let u=e[a+1];u!==void 0&&(r+=u,a+=1);continue}c===o&&(o=null);continue}if(c==='"'||c==="'"||c==="`"){o=c,r+=c;continue}if(c==="("||c==="{"||c==="["){n+=1,r+=c;continue}if(c===")"||c==="}"||c==="]"){n-=1,r+=c;continue}if(c===","&&n===0){t.push(r.trim()),r="";continue}r+=c}let i=r.trim();return i.length>0&&t.push(i),t}ie(Bc,"splitTopLevelArgs");function Dr(e,t){let n=e[t];if(n===void 0)return;let o=n.trim();if(o.length<2)return;let r=o[0],i=o[o.length-1];if(r===i&&!(r!=='"'&&r!=="'"&&r!=="`"))return o.slice(1,-1)}ie(Dr,"extractStringLiteralArg");function Nv(e,t){let n=e.trim().replace(/^\{|\}$/g,""),o=Bc(n);for(let r of o){let i=r.indexOf(":");if(i<0||r.slice(0,i).trim().replace(/["'`]/g,"")!==t)continue;let a=r.slice(i+1).trim();return Dr([a],0)}}ie(Nv,"extractObjectFieldString");function Vx(e){if(e===void 0)return R([]);if(!Array.isArray(e))return T({kind:"invalid_literal",field:"certificates",reason:"must be an array"});let t=[];for(let n=0;n<e.length;n++){let o=e[n];if(typeof o=="string"){t.push({domainName:o});continue}if(!N(o))return T({kind:"invalid_literal",field:`certificates[${n}]`,reason:"must be a string or object literal"});let r=y(o.domainName);if(r===void 0)return T({kind:"missing_field",field:`certificates[${n}].domainName`});let i=re(o.subjectAlternativeNames),a=w(o.transparencyLogging),c=w(o.cloudFront);if(o.cloudFront!==void 0&&c===void 0)return T({kind:"invalid_literal",field:`certificates[${n}].cloudFront`,reason:"must be a boolean literal \u2014 the CloudFront designation drives the zone-level us-east-1 export contract and cannot be round-tripped from a dynamic expression"});t.push({domainName:r,...i!==void 0?{subjectAlternativeNames:i}:{},...a!==void 0?{transparencyLogging:a}:{},...c!==void 0?{cloudFront:c}:{}})}return R(t)}ie(Vx,"parseCertificatesArray");function Bx(e){if(e===void 0||!N(e))return;let t={};for(let[n,o]of Object.entries(e)){let r=y(o);r!==void 0&&(t[n]=r)}return Object.keys(t).length===0?void 0:t}ie(Bx,"parseStringRecord");function Gc(e){if(e===void 0)return"undefined";if(e===null)return"null";if(typeof e=="string")return JSON.stringify(e);if(typeof e=="number"||typeof e=="boolean")return String(e);if(Array.isArray(e))return`[${e.map(t=>Gc(t)).join(", ")}]`;if(typeof e=="object"){if("__call"in e)return String(e.__call);if("__identifier"in e)return String(e.__identifier);if("__expression"in e)return String(e.__expression);if("__unknown"in e)return String(e.__unknown)}return String(e)}ie(Gc,"stringifyParsedValue");var jO=Object.defineProperty,rr=(e,t)=>jO(e,"name",{value:t,configurable:!0});function Wc(e){return e?.map(t=>({name:t.name,...t.serviceType!==void 0&&{serviceType:t.serviceType},...t.docker!==void 0&&{docker:t.docker},...t.containerPort!==void 0&&{containerPort:t.containerPort},...t.needsDatabaseConnection!==void 0&&{needsDatabaseConnection:t.needsDatabaseConnection},...t.routing!==void 0&&{routing:t.routing}}))}rr(Wc,"toUserServiceConfigs");function Kc(e,t,n=!0,o,r){let i={appName:e,type:t,database:[],s3:[],compute:[]};if(t==="custom")return i;let a=t,c=Ct[a];return{...i,database:Gx(e,c,a,n,r),compute:Xx(e,c,a,n,o),network:c.network,backup:c.backup}}rr(Kc,"planApplicationResources");function Gx(e,t,n,o,r){let i=Cg(n),a=t.database[i];return!o||a===null?[]:[{name:e,type:i,databaseName:zr(e),variableName:`${Pt(e)}Database`,...a,...r?.snapshotIdentifier!==void 0&&{snapshotIdentifier:r.snapshotIdentifier},...r?.snapshotUsername!==void 0&&{snapshotUsername:r.snapshotUsername}}]}rr(Gx,"buildDatabasePlan");function Wx(e,t){if(!(e===void 0&&t===void 0))return{scaling:{...e!==void 0&&{minCapacity:e},...t!==void 0&&{maxCapacity:t}}}}rr(Wx,"buildScalingConfig");function Kx(e,t){let{minCapacity:n,maxCapacity:o,...r}=e,i=t?.serviceType==="worker",a=t?.containerPort??E_,c=t?.docker;return{...r,...c?.path!==void 0&&{docker:{path:c.path,...c.context!==void 0&&{context:c.context},...c.target!==void 0&&{target:c.target}}},...t?.needsDatabaseConnection!==void 0&&{needsDatabaseConnection:t.needsDatabaseConnection},containers:i?[{}]:[{port:a}],...Wx(n,o)}}rr(Kx,"buildServiceEntry");function Hx(e,t){return t||e?.directAccess===!0?e:{...e,loadBalancer:!1}}rr(Hx,"resolveClusterConfig");function Xx(e,t,n,o,r){let i=t.compute.ecs,a=(r&&r.length>0?Og(n,r):i.services.map((u,l)=>({...u,name:l===0?"api":`service-${l+1}`}))).map((u,l)=>Kx(u,r?.[l])),c=a.some(u=>u.containers?.some(l=>l.port!==void 0));return[{name:e,type:xn.ECS,needsConnection:o,connectedDatabase:o?[e]:void 0,variableName:`${Pt(e)}Compute`,cluster:Hx(i.cluster,c),services:a}]}rr(Xx,"buildComputePlan");function Yn(e,t){let n=[_c(e),Sc(e),bc(e)];if(xc(e))n.push(vi(e),yi(e));else{let r=Ac(e);n.push(yi(e),lc(e),dc(e),vc(e),hc(e),yc(e),gc(e,r),Ec(e))}let o=n.join("");if(e.customCodeBlocks&&e.customCodeBlocks.length>0){let r=Zc(o,e.customCodeBlocks,t?.resourceMapping);return r.success?R(r.content):T(new Error(`Custom code injection failed: ${r.error??"unknown error"}`))}return R(o)}rr(Yn,"generateInfrastructureFromPlan");var UO=Object.defineProperty,Jn=(e,t)=>UO(e,"name",{value:t,configurable:!0}),LO=kg("standard");function Yx(e){return ti.options.some(t=>t.shape?.type?.value===e)}Jn(Yx,"isPatternConfigType");function Hc(e,t,n){let{tier:o="standard",domain:r,database:i,compute:a,cdn:c,environment:u,tags:l}=n??{},m=Ic(o);if(!m&&o!=="custom")return T(new Error(`Invalid pattern tier: "${o}". Valid tiers are: ${[...Si,"custom"].join(", ")}`));if(!Yx(t))return T(new Error(`Unsupported pattern type: ${t}`));let p=m?$c(o):null,g=e$(t,e,{domain:r,database:i,compute:a,cdn:c,environment:u,tierPreset:p});if(!g.success)return g;let h=g.data;return R({appName:e,type:"standard",pattern:t,network:p?p.network:LO,backup:p?p.backup:!1,patternConfig:h,database:[],s3:[],compute:[],tags:l??{}})}Jn(Hc,"planOpenNextResources");function Jx(e,t){return{type:e?.type??t.database.type,instanceType:e?.instanceType??t.database.instanceType,backupRetention:e?.backupRetention??t.database.backupRetention,deletionProtection:e?.deletionProtection??t.database.deletionProtection,...e?.databaseName!==void 0&&{databaseName:e.databaseName},...e?.publiclyAccessible!==void 0&&{publiclyAccessible:e.publiclyAccessible},...e?.allowedIpCidr!==void 0&&{allowedIpCidr:e.allowedIpCidr},...e?.encryption!==void 0&&{encryption:e.encryption}}}Jn(Jx,"mergeDatabaseConfig");function qx(e,t){return{memorySize:e?.memorySize??t.compute.memorySize,timeout:e?.timeout??t.compute.timeout}}Jn(qx,"mergeComputeConfig");function Qx(e){let{encryption:t,...n}=e;return{...n,...t&&{encryption:{storageKey:t}}}}Jn(Qx,"toPatternDatabaseConfig");function e$(e,t,n){let{domain:o,database:r,compute:i,cdn:a,environment:c,tierPreset:u}=n,l=u?Jx(r,u):r,m=u?qx(i,u):i,p={type:e,name:t,domain:o,database:l?Qx(l):void 0,compute:m?{server:m}:void 0,cdn:a?{domainNames:a.domainNames,certificateArn:a.certificateArn}:void 0,environment:c},g=ti.safeParse(p);return g.success?R(g.data):T(new Error(`Invalid pattern config: ${g.error.message}`))}Jn(e$,"buildPatternConfig");var FO=Object.defineProperty,ZO=(e,t)=>FO(e,"name",{value:t,configurable:!0});function Xc(e,t){let n={type:"staticsite",name:e,source:t.source,build:t.build,...t.routing!==void 0&&{routing:t.routing},...t.security!==void 0&&{security:t.security},...t.domain!==void 0&&{domain:t.domain},...t.forms!==void 0&&{forms:t.forms},...t.cdn!==void 0&&{cdn:t.cdn}},o=hg.safeParse(n);return o.success?R({appName:e,type:"standard",pattern:"staticsite",patternConfig:o.data,database:[],s3:[],compute:[],tags:t.tags??{}}):T(new Error(`Invalid static-site pattern config: ${o.error.message}`))}ZO(Xc,"planStaticSiteResources");var VO=Object.defineProperty,Yc=(e,t)=>VO(e,"name",{value:t,configurable:!0});function t$(e){let t=e.split("/");if(t.length!==2||!t[0]||!t[1])throw new Error(`Invalid service reference format: '${e}'. Expected 'ClusterName/ServiceName'.`);return t[0]}Yc(t$,"parseServiceReference");function Rv(e,t,n){n==="database"?(e.needsConnection=!0,e.connectedDatabase=[...new Set([...e.connectedDatabase??[],t])]):e.connectedStorage=[...new Set([...e.connectedStorage??[],t])]}Yc(Rv,"addResourceConnection");function Jc(e,t,n,o){let r=new Set(t),i=[...new Set(t.map(t$))];for(let a of i){let c=e.compute.find(u=>u.name===a);if(c?.services){Rv(c,n,o);for(let u of c.services){let l=`${a}/${u.name}`;r.has(l)&&(o==="database"?u.needsDatabaseConnection=!0:u.needsStorageConnection=!0)}}}}Yc(Jc,"applyServiceConnections");function qc(e,t,n,o){for(let r of e.compute)if(t.includes(r.name)&&(Rv(r,n,o),r.services))for(let i of r.services)o==="database"?i.needsDatabaseConnection=!0:i.needsStorageConnection=!0}Yc(qc,"applyComputeConnections");var BO=Object.defineProperty,me=(e,t)=>BO(e,"name",{value:t,configurable:!0});function r$(e){let t=e.database.length>0,n=e.cdn!==void 0;return[{type:"database",label:"Database (RDS)",available:!0},{type:"database:proxy",label:"RDS Proxy",available:t,reason:t?void 0:"Requires at least one database"},{type:"storage:s3",label:"S3 Bucket",available:!0},{type:"network",label:"Network (VPC)",available:!0},{type:"compute:ecs",label:"Compute (ECS)",available:!0},{type:"compute:lambda",label:"Compute (Lambda)",available:!0},{type:"cdn",label:"CDN (CloudFront)",available:!n,reason:n?"A CDN is already configured. Remove existing CDN first.":void 0},{type:"tunnel",label:"Database Tunnel",available:t&&!e.tunnel,reason:t?e.tunnel?"Tunnel is already enabled":void 0:"Requires at least one database"}]}me(r$,"listAvailableResources");function Oi(e,t){if(g$(e,t.resourceName))return T(new Error(`Resource name '${t.resourceName}' is already used in this application.`));switch(t.type){case"database":return n$(e,t);case"database:proxy":return o$(e,t);case"storage:s3":return R(void 0);case"network":return R(void 0);case"compute:ecs":return!t.services||t.services.length===0?T(new Error("ECS compute requires at least one service.")):R(void 0);case"compute:lambda":return R(void 0);case"cdn":return i$(e,t);case"tunnel":return a$(e);default:{let n=t;return T(new Error(`Unknown resource type: ${String(n)}`))}}}me(Oi,"validateResourceAddition");function n$(e,t){let n=t.databaseName??t.resourceName.toLowerCase();return e.database.some(o=>o.databaseName===n)?T(new Error(`Database name '${n}' already exists. Choose a different database name.`)):t.databaseType==="GlobalAurora"&&!t.primaryRegion?T(new Error("GlobalAurora databases require a primaryRegion.")):R(void 0)}me(n$,"validateDatabaseAddition");function o$(e,t){let n=e.database.find(o=>o.name===t.targetDatabase||o.databaseName===t.targetDatabase);if(!n){let o=e.database.map(r=>r.name).join(", ")||"none";return T(new Error(`Database '${t.targetDatabase}' not found. Available databases: ${o}`))}return n.proxy!==void 0&&n.proxy!==!1?T(new Error(`Database '${n.name}' already has RDS Proxy enabled.`)):R(void 0)}me(o$,"validateProxyAddition");function i$(e,t){if(e.cdn)return T(new Error("A CDN is already configured for this application. Remove the existing CDN first."));if(!Pv(e,t.defaultOriginRef))return T(new Error(`Origin '${t.defaultOriginRef}' not found in plan. CDN origin must reference an existing resource.`));if(t.behaviours){for(let n of t.behaviours)if(!Pv(e,n.originRef))return T(new Error(`Behaviour origin '${n.originRef}' not found in plan.`))}return R(void 0)}me(i$,"validateCdnAddition");function a$(e){return e.tunnel&&typeof e.tunnel=="object"?T(new Error("Tunnel is already enabled for this application.")):e.database.length===0?T(new Error("No databases found \u2014 tunnel requires at least one relational database.")):R(void 0)}me(a$,"validateTunnelAddition");function Qc(e,t){let n=Oi(e,t);if(!n.success)return n;switch(t.type){case"database":return s$(e,t);case"database:proxy":return c$(e,t);case"storage:s3":return u$(e,t);case"network":return l$(e,t);case"compute:ecs":return d$(e,t);case"compute:lambda":return m$(e,t);case"cdn":return p$(e,t);case"tunnel":return f$(e,t);default:{let o=t;return T(new Error(`Unknown resource type: ${String(o)}`))}}}me(Qc,"addResourceToPlan");function s$(e,t){let n=t.databaseName??t.resourceName.toLowerCase(),o={name:t.resourceName,type:t.databaseType,databaseName:n},r;switch(t.databaseType){case"Instance":r={...o,...t.instanceType!==void 0?{instanceType:t.instanceType}:{},...t.multiAz!==void 0?{multiAz:t.multiAz}:{},...t.readReplica!==void 0?{readReplica:t.readReplica}:{},...t.publiclyAccessible!==void 0?{publiclyAccessible:t.publiclyAccessible}:{},...t.backupRetention!==void 0?{backupRetention:t.backupRetention}:{}};break;case"Aurora":r={...o,...t.writer!==void 0?{writer:t.writer}:{},...t.readers!==void 0?{readers:t.readers}:{},...t.backupRetention!==void 0?{backupRetention:t.backupRetention}:{},...t.preferredMaintenanceWindow!==void 0?{preferredMaintenanceWindow:t.preferredMaintenanceWindow}:{}};break;case"GlobalAurora":r={...o,primaryRegion:t.primaryRegion,...t.secondaryRegions!==void 0?{secondaryRegions:t.secondaryRegions}:{}};break;default:{let a=t.databaseType;return T(new Error(`Unknown database type: ${String(a)}`))}}let i={...e,database:[...e.database,r]};return kv(i,t.resourceName,"database",t),R(i)}me(s$,"addDatabase");function c$(e,t){let n=e.database.map(i=>({...i})),o=n.find(i=>i.name===t.targetDatabase||i.databaseName===t.targetDatabase);if(!o)return T(new Error(`Database '${t.targetDatabase}' not found.`));let r={};return t.maxConnections!==void 0&&(r.maxConnections=t.maxConnections),t.maxIdleConnections!==void 0&&(r.maxIdleConnections=t.maxIdleConnections),t.connectionBorrowTimeout!==void 0&&(r.connectionBorrowTimeout=t.connectionBorrowTimeout),t.requireTLS!==void 0&&(r.requireTLS=t.requireTLS),o.proxy=Object.keys(r).length>0?r:{},R({...e,database:n})}me(c$,"addProxy");function u$(e,t){let n=t.bucketName??t.resourceName.toLowerCase(),o=ke(n),r=e.s3.length,i=r===0?"":`${r+1}`,a={name:o,bucketName:n,variableName:`bucket${i}`,...t.publicReadAccess!==void 0?{publicReadAccess:t.publicReadAccess}:{},...t.versioned!==void 0?{versioned:t.versioned}:{},...t.encryption!==void 0?{encryption:t.encryption}:{},...t.websiteHosting?{websiteHosting:{indexDocument:"index.html"}}:{}},c={...e,s3:[...e.s3,a]};return kv(c,o,"storage",t),R(c)}me(u$,"addS3");function l$(e,t){let n={};if(t.maxAzs!==void 0&&(n.maxAzs=t.maxAzs),t.natGateways!==void 0&&(n.natGateways=t.natGateways),t.flowLogs!==void 0&&(n.flowLogs=t.flowLogs),t.vpcEndpoints!==void 0&&(n.vpcEndpoints=t.vpcEndpoints),t.networkName){let o={name:t.networkName,...n};return R({...e,additionalNetworks:[...e.additionalNetworks??[],o]})}return R({...e,network:{...e.network??{},...n}})}me(l$,"addNetwork");function d$(e,t){let n=t.connectedDatabase??[],o={name:t.resourceName,type:"ecs",needsConnection:n.length>0,connectedDatabase:n,...t.loadBalancer!==void 0?{cluster:{loadBalancer:t.loadBalancer}}:{},services:t.services.map(r=>({name:r.name,capacityProvider:r.capacityProvider??"FARGATE",...r.port!==void 0?{containers:[{port:r.port}]}:{},...r.cpu!==void 0?{cpu:r.cpu}:{},...r.memory!==void 0?{memoryLimitMiB:r.memory}:{}})),...t.docker!==void 0&&{docker:t.docker}};return R({...e,compute:[...e.compute,o]})}me(d$,"addEcsCompute");function m$(e,t){let n=t.connectedDatabase??[],o={name:t.resourceName,type:"lambda",needsConnection:n.length>0,connectedDatabase:n,...t.timeout!==void 0?{timeout:t.timeout}:{},...t.memory!==void 0?{memory:t.memory}:{},...t.handler!==void 0?{handler:t.handler}:{},...t.runtime!==void 0?{runtime:t.runtime}:{}};return R({...e,compute:[...e.compute,o]})}me(m$,"addLambdaCompute");function p$(e,t){let n={name:t.resourceName,defaultOriginRef:t.defaultOriginRef,...t.customDomain!==void 0?{customDomain:t.customDomain}:{},...t.certificateArn!==void 0?{certificateArn:t.certificateArn}:{},...t.behaviours&&t.behaviours.length>0?{behaviours:[...t.behaviours].map(o=>({pathPattern:o.pathPattern,originRef:o.originRef,...o.cachePolicy!==void 0?{cachePolicy:o.cachePolicy}:{}}))}:{}};return R({...e,cdn:n})}me(p$,"addCdn");function f$(e,t){let n=t.instanceType?{instanceType:t.instanceType}:{};return R({...e,tunnel:n})}me(f$,"addTunnel");function g$(e,t){let n=[...e.database.map(o=>o.name),...e.s3.map(o=>o.name),...e.compute.map(o=>o.name),...(e.dynamodb??[]).map(o=>o.name),...(e.sqs??[]).map(o=>o.name)];return e.cdn&&n.push(e.cdn.name),n.includes(t)}me(g$,"isResourceNameTaken");function Pv(e,t){return e.database.some(n=>n.name===t)||e.s3.some(n=>n.name===t)||e.compute.some(n=>n.name===t)||(e.dynamodb??[]).some(n=>n.name===t)||(e.sqs??[]).some(n=>n.name===t)}me(Pv,"resourceExistsInPlan");function kv(e,t,n,o){o.connectToCompute&&o.connectToCompute.length>0&&qc(e,[...o.connectToCompute],t,n),o.connectToServices&&o.connectToServices.length>0&&Jc(e,[...o.connectToServices],t,n)}me(kv,"applyConnections");var GO=Object.defineProperty,WO=(e,t)=>GO(e,"name",{value:t,configurable:!0});function v$(e,t,n){let o;try{o=Kn(e,{extractCustomCode:!0})}catch(u){return T(new Error(`Failed to parse infrastructure.ts: ${u instanceof Error?u.message:String(u)}`))}let r;try{r=ki(o,t,{skipValidation:!0})}catch(u){return T(new Error(`Failed to build resource plan: ${u instanceof Error?u.message:String(u)}`))}o.customCodeBlocks&&o.customCodeBlocks.length>0&&(r.customCodeBlocks=o.customCodeBlocks);let i=Oi(r,n);if(!i.success)return i;let a=Qc(r,n);if(!a.success)return a;let c=Yn(a.data);return c.success?R({originalContent:e,modifiedContent:c.data,addedResource:{type:n.type,name:n.resourceName}}):T(new Error(`Code generation failed: ${c.error.message}`))}WO(v$,"generateResourceChange");var KO=Object.defineProperty,Et=(e,t)=>KO(e,"name",{value:t,configurable:!0}),HO=new Set(Ci.options);function h$(e){return HO.has(e.toUpperCase())}Et(h$,"isRecordType");function y$(e){return e.endsWith(".")?e.slice(0,-1):e}Et(y$,"stripTrailingDot");function b$(e){let t=!1;for(let n=0;n<e.length;n++)if(e[n]==='"')t=!t;else if(e[n]===";"&&!t)return e.slice(0,n).trimEnd();return e}Et(b$,"stripInlineComment");function S$(e,t){let n=e.slice(t).join(" "),o=[],r="",i=!1;for(let a of n)a==='"'?(i&&(o.push(r),r=""),i=!i):i&&(r+=a);return o.join(" ")}Et(S$,"parseTxtValue");function _$(e){let t=/;\s*auto\s*$/.test(e),n=e.replace(/;\s*auto\s*$/,"").trim().match(/^\$FJALL-DELEGATE\s+(\S+)\s+TO\s+(\S+)$/i);if(n)return{subdomain:n[1],targetAccount:n[2],auto:t}}Et(_$,"parseDelegateDirective");function E$(e){if(e.length<2)return;let t=e[1],n=e.slice(2);return{domainName:t,subjectAlternativeNames:n}}Et(E$,"parseCertDirective");function A$(e){let t=[],n="",o=!1;for(let r of e)r==='"'?(o=!o,n+=r):/\s/.test(r)&&!o?n.length>0&&(t.push(n),n=""):n+=r;return n.length>0&&t.push(n),t}Et(A$,"tokenise");function x$(e){if(e.length<2)return;let t=0,n=e[t++],o,r;for(;t<e.length&&r===void 0;){let a=e[t].toUpperCase();if(a==="IN")t++;else if(h$(a))r=a,t++;else if(/^\d+$/.test(e[t]))o=parseInt(e[t],10),t++;else return}if(!r)return;let i=e.slice(t);switch(r){case"MX":{if(i.length<2)return;let a=parseInt(i[0],10),c=i.slice(1).join(" ");return{name:n,type:r,ttl:o,value:c,priority:a}}case"SRV":{if(i.length<4)return;let a=parseInt(i[0],10),c=parseInt(i[1],10),u=parseInt(i[2],10),l=i[3];return{name:n,type:r,ttl:o,value:l,priority:a,weight:c,port:u}}case"TXT":{let a=S$(e,t);return{name:n,type:r,ttl:o,value:a}}case"CAA":{let a=i.join(" ");return{name:n,type:r,ttl:o,value:a}}case"A":{if(i.length===0)return;if(i[0].toUpperCase()==="ALIAS"){if(i.length<2)return;let a=i.slice(1).join(" ");return{name:n,type:r,ttl:o,value:`${Vc}${a}`}}return{name:n,type:r,ttl:o,value:i[0]}}default:return i.length===0?void 0:{name:n,type:r,ttl:o,value:i[0]}}}Et(x$,"parseRecord");function $$(e){let t=e.split(`
-`),n,o=300,r=[],i=[],a=[];for(let c of t){let u=c.trim();if(u===""||u.startsWith(";"))continue;if(u.toUpperCase().startsWith(_t.FJALL_DELEGATE)){let h=_$(u);h&&i.push(h);continue}let l=b$(u);if(l==="")continue;let m=A$(l);if(m.length===0)continue;let p=m[0].toUpperCase();if(p===_t.ORIGIN){if(m.length<2)continue;n=y$(m[1]);continue}if(p===_t.TTL){if(m.length<2)continue;o=parseInt(m[1],10);continue}if(p===_t.FJALL_CERT){let h=E$(m);h&&a.push(h);continue}let g=x$(m);g&&r.push(g)}return n?R({origin:n,ttl:o,records:r,delegations:i,certificates:a}):T(new Error("Missing $ORIGIN directive"))}Et($$,"parseZoneFile");function I$(e,t){if(!e.startsWith("fjall:"))return;let n=e.split(":");if(n.length<3)return;let o=n[1],r=n[2],i=`${o}:${r}`;return t.get(i)??t.get(e)}Et(I$,"resolveAlias");var XO=Object.defineProperty,Cv=(e,t)=>XO(e,"name",{value:t,configurable:!0});function T$(e,t){return e.length>=t?e:e+" ".repeat(t-e.length)}Cv(T$,"padRight");function N$(e,t){let n=T$(e.name,24),o=e.ttl!==void 0&&e.ttl!==t?`${e.ttl} `:"";switch(e.type){case"MX":return`${n} ${o}IN MX ${e.priority??10} ${e.value}`;case"SRV":return`${n} ${o}IN SRV ${e.priority??0} ${e.weight??0} ${e.port??0} ${e.value}`;case"TXT":return`${n} ${o}IN TXT "${e.value}"`;case"CAA":return`${n} ${o}IN CAA ${e.value}`;default:return e.type==="A"&&e.value.startsWith(Vc)?`${n} ${o}IN A ${e.value}`:`${n} ${o}IN ${e.type} ${e.value}`}}Cv(N$,"formatRecord");function R$(e){let t=[];if(t.push("; zone.bind \u2014 managed by fjall"),t.push(`${_t.ORIGIN} ${e.origin}.`),t.push(`${_t.TTL} ${e.ttl}`),t.push(""),e.certificates.length>0){for(let n of e.certificates){let o=[n.domainName,...n.subjectAlternativeNames];t.push(`${_t.FJALL_CERT} ${o.join(" ")}`)}t.push("")}if(e.delegations.length>0){for(let n of e.delegations){let o=n.auto?" ; auto":"";t.push(`${_t.FJALL_DELEGATE} ${n.subdomain} TO ${n.targetAccount}${o}`)}t.push("")}for(let n of e.records)t.push(N$(n,e.ttl));return t.join(`
+`),r}rt(Ax,"formatCustomCodeForInsertion");function xx(e){try{let t=function(r){r.kind===Or.SyntaxKind.Unknown&&o.push("Unknown node found in AST - possible parse error"),Or.forEachChild(r,t)};rt(t,"visit");let n=er(e),o=[];return t(n),o.length>0?{valid:!1,errors:o}:{valid:!0}}catch(t){return{valid:!1,errors:[$t(t)]}}}rt(xx,"validateModifiedFile");import*as ve from"typescript";var Ci=s.enum(["A","AAAA","CNAME","MX","TXT","NS","SRV","CAA"]),TO=s.object({name:s.string(),type:Ci,ttl:s.number().optional(),value:s.string(),priority:s.number().optional(),weight:s.number().optional(),port:s.number().optional()}).strict(),NO=s.object({subdomain:s.string(),targetAccount:s.string(),auto:s.boolean()}).strict(),RO=s.object({domainName:s.string(),subjectAlternativeNames:s.array(s.string())}).strict(),E6=s.object({origin:s.string(),ttl:s.number(),records:s.array(TO),delegations:s.array(NO),certificates:s.array(RO)}).strict(),_t=Object.freeze({ORIGIN:"$ORIGIN",TTL:"$TTL",FJALL_DELEGATE:"$FJALL-DELEGATE",FJALL_CERT:"$FJALL-CERT"}),Vc="ALIAS ";var $x=s.discriminatedUnion("kind",[s.object({kind:s.literal("ecs"),appName:s.string()}).strict(),s.object({kind:s.literal("cdn"),appName:s.string()}).strict(),s.object({kind:s.literal("bucket"),bucketName:s.string()}).strict(),s.object({kind:s.literal("custom"),dnsName:s.string(),hostedZoneId:s.string()}).strict()]),Ix=$x.options.map(e=>e.shape.kind.value),Iv=s.enum(["A","AAAA"]),Tv=s.enum(["route53","external-delegated","external-records"]),Tx=s.enum(["zone","full"]),PO=s.object({kind:s.literal("standard"),type:s.enum(["A","AAAA","CNAME","MX","TXT","NS","SRV","CAA"]),name:s.string(),value:s.union([s.string(),s.array(s.string())]),ttl:s.number().int().positive().optional()}).strict(),kO=s.object({kind:s.literal("alias"),type:Iv,name:s.string(),target:$x}).strict(),CO=s.discriminatedUnion("kind",[PO,kO]),OO=s.object({domainName:s.string(),subjectAlternativeNames:s.array(s.string()).optional(),transparencyLogging:s.boolean().optional(),cloudFront:s.boolean().optional()}).strict(),DO=s.object({subdomain:s.string(),toAccount:s.string(),auto:s.boolean().optional()}).strict(),$6=s.object({zoneName:s.string(),registrar:Tv,hostedZoneId:s.string().optional(),delegatedSubdomain:s.string().optional(),adoptedNameServers:s.array(s.string().min(1)).min(1).optional(),records:s.array(CO),certificates:s.array(OO),delegations:s.array(DO)}).strict().refine(e=>e.registrar!=="external-delegated"||e.delegatedSubdomain!==void 0,{message:"external-delegated requires delegatedSubdomain"}).refine(e=>e.registrar!=="external-records"||e.delegations.length===0,{message:"external-records forbids delegations"}).refine(e=>e.registrar==="external-delegated"||e.adoptedNameServers===void 0,{message:"adoptedNameServers requires registrar external-delegated"}).refine(e=>e.registrar!=="external-delegated"||e.hostedZoneId===void 0==(e.adoptedNameServers===void 0),{message:"external-delegated adoption requires hostedZoneId and adoptedNameServers together (both-or-neither)"});var wO=Object.defineProperty,ie=(e,t)=>wO(e,"name",{value:t,configurable:!0}),Rx=Tv.options,Nx=Tx.options,zO=Ci.options,MO=Iv.options;function Px(e){let t=[],n=ie(r=>{if(ve.isNewExpression(r)&&kx(r.expression)){let i=Cx(r);i!==void 0&&t.push(i)}ve.forEachChild(r,n)},"visit");if(n(e),t.length===0)return R(void 0);if(t.length>1)return T(new Error(`Expected exactly one 'new Domain(...)' call per infrastructure file, found ${t.length}`));let o=t[0];return o?R(o):R(void 0)}ie(Px,"findDomainConstructCall");function kx(e){return ve.isIdentifier(e)&&e.text==="Domain"}ie(kx,"isDomainIdentifier");function Cx(e){let t=e.arguments;if(!t||t.length<3)return;let n=t[0],o=t[1],r=t[2];if(!n||!o||!r||!ve.isObjectLiteralExpression(r))return;let i=Ox(e);if(i===void 0)return;let a=Dx(e),c=ve.isStringLiteral(o)?o.text:void 0;return{callExpression:e,containingStatement:i,propsObjectLiteral:r,domainVarId:a,scopeArgumentText:n.getText(),constructIdLiteral:c}}ie(Cx,"buildMatch");function Ox(e){let t=e;for(;t!==void 0;){if(ve.isExpressionStatement(t)||ve.isVariableStatement(t))return t;t=t.parent}}ie(Ox,"findContainingTopLevelStatement");function Dx(e){let t=e.parent;for(;t!==void 0;){if(ve.isVariableDeclaration(t)&&ve.isIdentifier(t.name)&&t.initializer===e)return t.name.text;t=t.parent}}ie(Dx,"extractDomainVarId");function wx(e){switch(e.kind){case"registrar_required":return"'registrar' property is required";case"registrar_unsupported":return`'registrar' must be one of ${Rx.join(", ")}, got ${JSON.stringify(e.value)}`;case"missing_field":return`'${e.field}' property is required`;case"invalid_literal":return`'${e.field}' ${e.reason}`;case"removed_field":return`'${e.field}' was removed from the Domain API \u2014 ${e.cure}`}}ie(wx,"errorMessage");var jO="declare the delegated child as its own Domain with registrar: 'external-delegated' and set 'parentDelegationRoleArn' (the CLI injects it via ManagedDomainBinding.delegationRoleArn); the child UPSERTs its NS records into the parent zone";function zx(e){let t=j(e),n=M(t.registrar,Rx);if(n===void 0){let c=t.registrar;if(c===void 0)return T({kind:"registrar_required"});let u=typeof c=="string"?c:Gc(c);return T({kind:"registrar_unsupported",value:u})}let o=y(t.zoneName);if(o===void 0)return T({kind:"missing_field",field:"zoneName"});let r=jx(t.records);if(!r.success)return r;let i=Vx(t.certificates);if(!i.success)return i;if(t.delegations!==void 0)return T({kind:"removed_field",field:"delegations",cure:jO});let a={zoneName:o,description:y(t.description),costAllocationEnvironment:y(t.costAllocationEnvironment),tags:Bx(t.tags),records:r.data,certificates:i.data};switch(n){case"route53":return R({...a,registrar:n,hostedZoneId:y(t.hostedZoneId)});case"external-delegated":{let c=y(t.delegatedSubdomain);if(c===void 0)return T({kind:"missing_field",field:"delegatedSubdomain"});let u=y(t.hostedZoneId);if(t.hostedZoneId!==void 0&&u===void 0)return T({kind:"invalid_literal",field:"hostedZoneId",reason:"must be a literal string zone id on external-delegated \u2014 dynamic expressions cannot be round-tripped"});let l=re(t.adoptedNameServers);if(t.adoptedNameServers!==void 0&&l===void 0)return T({kind:"invalid_literal",field:"adoptedNameServers",reason:"must be an array of literal NS hostname strings \u2014 the parent NS UPSERT writes them verbatim"});if(u===void 0!=(l===void 0))return T({kind:"invalid_literal",field:u===void 0?"hostedZoneId":"adoptedNameServers",reason:"adopting an existing child zone requires hostedZoneId and adoptedNameServers together (both-or-neither) \u2014 an imported zone exposes no name-server attribute at synth"});let m=y(t.parentDelegationRoleArn);if(t.parentDelegationRoleArn!==void 0&&m===void 0)return T({kind:"invalid_literal",field:"parentDelegationRoleArn",reason:"must be a literal string ARN (VD2-a) \u2014 the CLI injects it via ManagedDomainBinding.delegationRoleArn; dynamic expressions such as Fn.importValue are not supported"});let p=M(t.phase,Nx);return t.phase!==void 0&&p===void 0?T({kind:"invalid_literal",field:"phase",reason:`must be one of ${Nx.map(g=>`'${g}'`).join(", ")}`}):R({...a,registrar:n,delegatedSubdomain:c,hostedZoneId:u,adoptedNameServers:l,parentDelegationRoleArn:m,phase:p})}case"external-records":return R({...a,registrar:n})}}ie(zx,"parseDomainProps");function Mx(e){return wx(e)}ie(Mx,"parseDomainErrorMessage");function jx(e){if(e===void 0)return R([]);if(!Array.isArray(e))return T({kind:"invalid_literal",field:"records",reason:"must be an array"});let t=[];for(let n=0;n<e.length;n++){let o=e[n];if(!N(o))return T({kind:"invalid_literal",field:`records[${n}]`,reason:"must be an object literal"});let r=Ux(o,n);if(!r.success)return r;t.push(r.data)}return R(t)}ie(jx,"parseRecordsArray");function Ux(e,t){let n=y(e.type),o=y(e.name);if(n===void 0)return T({kind:"missing_field",field:`records[${t}].type`});if(o===void 0)return T({kind:"missing_field",field:`records[${t}].name`});if(e.target!==void 0){if(!MO.some(u=>u===n))return T({kind:"invalid_literal",field:`records[${t}]`,reason:`alias records must have type 'A' or 'AAAA', got '${n}'`});let c=Fx(e.target);return R({kind:"alias",type:n,name:o,target:c})}if(!zO.some(c=>c===n))return T({kind:"invalid_literal",field:`records[${t}]`,reason:`unsupported record type '${n}'`});let r=Lx(e.value);if(r===void 0)return T({kind:"invalid_literal",field:`records[${t}].value`,reason:`must be a string or array of strings (got ${JSON.stringify(e.value)})`});let i=I(e.ttl),a={kind:"standard",type:n,name:o,value:r,...i!==void 0?{ttl:i}:{}};return R(a)}ie(Ux,"parseRecord");function Lx(e){if(e===void 0)return;if(typeof e=="string")return e;let t=re(e);if(t!==void 0)return t}ie(Lx,"parseRecordValue");function Fx(e){if(ct(e))return Zx(e);if(N(e)){let t=M(e.kind,Ix);if(t==="ecs"||t==="cdn"){let n=y(e.appName);if(n!==void 0)return{kind:t,appName:n}}if(t==="bucket"){let n=y(e.bucketName);if(n!==void 0)return{kind:t,bucketName:n}}if(t==="custom"){let n=y(e.dnsName),o=y(e.hostedZoneId);if(n!==void 0&&o!==void 0)return{kind:t,dnsName:n,hostedZoneId:o}}}return{kind:"unresolved",sourceText:Gc(e)}}ie(Fx,"parseTarget");function Zx(e){let t=e.__call.trim(),n=t.match(/^([A-Za-z_][\w$]*)\s*\(([\s\S]*)\)\s*$/);if(!n)return{kind:"unresolved",sourceText:t};let o=n[1],r=n[2]??"",i=Bc(r);switch(o){case"fjallApp":{let a=Dr(i,0);return a===void 0?{kind:"dynamic",sourceText:t}:{kind:"ecs",appName:a}}case"fjallCdn":{let a=Dr(i,0);return a===void 0?{kind:"dynamic",sourceText:t}:{kind:"cdn",appName:a}}case"fjallBucket":{let a=Dr(i,0);return a===void 0?{kind:"dynamic",sourceText:t}:{kind:"bucket",bucketName:a}}case"aliasTo":{if(i.length>=2){let a=Dr(i,0),c=Dr(i,1);return a!==void 0&&c!==void 0?{kind:"custom",dnsName:a,hostedZoneId:c}:{kind:"dynamic",sourceText:t}}if(i.length===1){let a=i[0]?.trim()??"",c=Nv(a,"dnsName"),u=Nv(a,"hostedZoneId");return c!==void 0&&u!==void 0?{kind:"custom",dnsName:c,hostedZoneId:u}:{kind:"dynamic",sourceText:t}}return{kind:"unresolved",sourceText:t}}default:return{kind:"unresolved",sourceText:t}}}ie(Zx,"resolveCallRefTarget");function Bc(e){let t=[],n=0,o=null,r="";for(let a=0;a<e.length;a++){let c=e[a];if(o!==null){if(r+=c,c==="\\"&&a+1<e.length){let u=e[a+1];u!==void 0&&(r+=u,a+=1);continue}c===o&&(o=null);continue}if(c==='"'||c==="'"||c==="`"){o=c,r+=c;continue}if(c==="("||c==="{"||c==="["){n+=1,r+=c;continue}if(c===")"||c==="}"||c==="]"){n-=1,r+=c;continue}if(c===","&&n===0){t.push(r.trim()),r="";continue}r+=c}let i=r.trim();return i.length>0&&t.push(i),t}ie(Bc,"splitTopLevelArgs");function Dr(e,t){let n=e[t];if(n===void 0)return;let o=n.trim();if(o.length<2)return;let r=o[0],i=o[o.length-1];if(r===i&&!(r!=='"'&&r!=="'"&&r!=="`"))return o.slice(1,-1)}ie(Dr,"extractStringLiteralArg");function Nv(e,t){let n=e.trim().replace(/^\{|\}$/g,""),o=Bc(n);for(let r of o){let i=r.indexOf(":");if(i<0||r.slice(0,i).trim().replace(/["'`]/g,"")!==t)continue;let a=r.slice(i+1).trim();return Dr([a],0)}}ie(Nv,"extractObjectFieldString");function Vx(e){if(e===void 0)return R([]);if(!Array.isArray(e))return T({kind:"invalid_literal",field:"certificates",reason:"must be an array"});let t=[];for(let n=0;n<e.length;n++){let o=e[n];if(typeof o=="string"){t.push({domainName:o});continue}if(!N(o))return T({kind:"invalid_literal",field:`certificates[${n}]`,reason:"must be a string or object literal"});let r=y(o.domainName);if(r===void 0)return T({kind:"missing_field",field:`certificates[${n}].domainName`});let i=re(o.subjectAlternativeNames),a=w(o.transparencyLogging),c=w(o.cloudFront);if(o.cloudFront!==void 0&&c===void 0)return T({kind:"invalid_literal",field:`certificates[${n}].cloudFront`,reason:"must be a boolean literal \u2014 the CloudFront designation drives the zone-level us-east-1 export contract and cannot be round-tripped from a dynamic expression"});t.push({domainName:r,...i!==void 0?{subjectAlternativeNames:i}:{},...a!==void 0?{transparencyLogging:a}:{},...c!==void 0?{cloudFront:c}:{}})}return R(t)}ie(Vx,"parseCertificatesArray");function Bx(e){if(e===void 0||!N(e))return;let t={};for(let[n,o]of Object.entries(e)){let r=y(o);r!==void 0&&(t[n]=r)}return Object.keys(t).length===0?void 0:t}ie(Bx,"parseStringRecord");function Gc(e){if(e===void 0)return"undefined";if(e===null)return"null";if(typeof e=="string")return JSON.stringify(e);if(typeof e=="number"||typeof e=="boolean")return String(e);if(Array.isArray(e))return`[${e.map(t=>Gc(t)).join(", ")}]`;if(typeof e=="object"){if("__call"in e)return String(e.__call);if("__identifier"in e)return String(e.__identifier);if("__expression"in e)return String(e.__expression);if("__unknown"in e)return String(e.__unknown)}return String(e)}ie(Gc,"stringifyParsedValue");var UO=Object.defineProperty,rr=(e,t)=>UO(e,"name",{value:t,configurable:!0});function Wc(e){return e?.map(t=>({name:t.name,...t.serviceType!==void 0&&{serviceType:t.serviceType},...t.docker!==void 0&&{docker:t.docker},...t.containerPort!==void 0&&{containerPort:t.containerPort},...t.needsDatabaseConnection!==void 0&&{needsDatabaseConnection:t.needsDatabaseConnection},...t.routing!==void 0&&{routing:t.routing}}))}rr(Wc,"toUserServiceConfigs");function Kc(e,t,n=!0,o,r){let i={appName:e,type:t,database:[],s3:[],compute:[]};if(t==="custom")return i;let a=t,c=Ct[a];return{...i,database:Gx(e,c,a,n,r),compute:Xx(e,c,a,n,o),network:c.network,backup:c.backup}}rr(Kc,"planApplicationResources");function Gx(e,t,n,o,r){let i=Cg(n),a=t.database[i];return!o||a===null?[]:[{name:e,type:i,databaseName:zr(e),variableName:`${Pt(e)}Database`,...a,...r?.snapshotIdentifier!==void 0&&{snapshotIdentifier:r.snapshotIdentifier},...r?.snapshotUsername!==void 0&&{snapshotUsername:r.snapshotUsername}}]}rr(Gx,"buildDatabasePlan");function Wx(e,t){if(!(e===void 0&&t===void 0))return{scaling:{...e!==void 0&&{minCapacity:e},...t!==void 0&&{maxCapacity:t}}}}rr(Wx,"buildScalingConfig");function Kx(e,t){let{minCapacity:n,maxCapacity:o,...r}=e,i=t?.serviceType==="worker",a=t?.containerPort??E_,c=t?.docker;return{...r,...c?.path!==void 0&&{docker:{path:c.path,...c.context!==void 0&&{context:c.context},...c.target!==void 0&&{target:c.target}}},...t?.needsDatabaseConnection!==void 0&&{needsDatabaseConnection:t.needsDatabaseConnection},containers:i?[{}]:[{port:a}],...Wx(n,o)}}rr(Kx,"buildServiceEntry");function Hx(e,t){return t||e?.directAccess===!0?e:{...e,loadBalancer:!1}}rr(Hx,"resolveClusterConfig");function Xx(e,t,n,o,r){let i=t.compute.ecs,a=(r&&r.length>0?Og(n,r):i.services.map((u,l)=>({...u,name:l===0?"api":`service-${l+1}`}))).map((u,l)=>Kx(u,r?.[l])),c=a.some(u=>u.containers?.some(l=>l.port!==void 0));return[{name:e,type:xn.ECS,needsConnection:o,connectedDatabase:o?[e]:void 0,variableName:`${Pt(e)}Compute`,cluster:Hx(i.cluster,c),services:a}]}rr(Xx,"buildComputePlan");function Yn(e,t){let n=[_c(e),Sc(e),bc(e)];if(xc(e))n.push(vi(e),yi(e));else{let r=Ac(e);n.push(yi(e),lc(e),dc(e),vc(e),hc(e),yc(e),gc(e,r),Ec(e))}let o=n.join("");if(e.customCodeBlocks&&e.customCodeBlocks.length>0){let r=Zc(o,e.customCodeBlocks,t?.resourceMapping);return r.success?R(r.content):T(new Error(`Custom code injection failed: ${r.error??"unknown error"}`))}return R(o)}rr(Yn,"generateInfrastructureFromPlan");var LO=Object.defineProperty,Jn=(e,t)=>LO(e,"name",{value:t,configurable:!0}),FO=kg("standard");function Yx(e){return ti.options.some(t=>t.shape?.type?.value===e)}Jn(Yx,"isPatternConfigType");function Hc(e,t,n){let{tier:o="standard",domain:r,database:i,compute:a,cdn:c,environment:u,tags:l}=n??{},m=Ic(o);if(!m&&o!=="custom")return T(new Error(`Invalid pattern tier: "${o}". Valid tiers are: ${[...Si,"custom"].join(", ")}`));if(!Yx(t))return T(new Error(`Unsupported pattern type: ${t}`));let p=m?$c(o):null,g=e$(t,e,{domain:r,database:i,compute:a,cdn:c,environment:u,tierPreset:p});if(!g.success)return g;let h=g.data;return R({appName:e,type:"standard",pattern:t,network:p?p.network:FO,backup:p?p.backup:!1,patternConfig:h,database:[],s3:[],compute:[],tags:l??{}})}Jn(Hc,"planOpenNextResources");function Jx(e,t){return{type:e?.type??t.database.type,instanceType:e?.instanceType??t.database.instanceType,backupRetention:e?.backupRetention??t.database.backupRetention,deletionProtection:e?.deletionProtection??t.database.deletionProtection,...e?.databaseName!==void 0&&{databaseName:e.databaseName},...e?.publiclyAccessible!==void 0&&{publiclyAccessible:e.publiclyAccessible},...e?.allowedIpCidr!==void 0&&{allowedIpCidr:e.allowedIpCidr},...e?.encryption!==void 0&&{encryption:e.encryption}}}Jn(Jx,"mergeDatabaseConfig");function qx(e,t){return{memorySize:e?.memorySize??t.compute.memorySize,timeout:e?.timeout??t.compute.timeout}}Jn(qx,"mergeComputeConfig");function Qx(e){let{encryption:t,...n}=e;return{...n,...t&&{encryption:{storageKey:t}}}}Jn(Qx,"toPatternDatabaseConfig");function e$(e,t,n){let{domain:o,database:r,compute:i,cdn:a,environment:c,tierPreset:u}=n,l=u?Jx(r,u):r,m=u?qx(i,u):i,p={type:e,name:t,domain:o,database:l?Qx(l):void 0,compute:m?{server:m}:void 0,cdn:a?{domainNames:a.domainNames,certificateArn:a.certificateArn}:void 0,environment:c},g=ti.safeParse(p);return g.success?R(g.data):T(new Error(`Invalid pattern config: ${g.error.message}`))}Jn(e$,"buildPatternConfig");var ZO=Object.defineProperty,VO=(e,t)=>ZO(e,"name",{value:t,configurable:!0});function Xc(e,t){let n={type:"staticsite",name:e,source:t.source,build:t.build,...t.routing!==void 0&&{routing:t.routing},...t.security!==void 0&&{security:t.security},...t.domain!==void 0&&{domain:t.domain},...t.forms!==void 0&&{forms:t.forms},...t.cdn!==void 0&&{cdn:t.cdn}},o=hg.safeParse(n);return o.success?R({appName:e,type:"standard",pattern:"staticsite",patternConfig:o.data,database:[],s3:[],compute:[],tags:t.tags??{}}):T(new Error(`Invalid static-site pattern config: ${o.error.message}`))}VO(Xc,"planStaticSiteResources");var BO=Object.defineProperty,Yc=(e,t)=>BO(e,"name",{value:t,configurable:!0});function t$(e){let t=e.split("/");if(t.length!==2||!t[0]||!t[1])throw new Error(`Invalid service reference format: '${e}'. Expected 'ClusterName/ServiceName'.`);return t[0]}Yc(t$,"parseServiceReference");function Rv(e,t,n){n==="database"?(e.needsConnection=!0,e.connectedDatabase=[...new Set([...e.connectedDatabase??[],t])]):e.connectedStorage=[...new Set([...e.connectedStorage??[],t])]}Yc(Rv,"addResourceConnection");function Jc(e,t,n,o){let r=new Set(t),i=[...new Set(t.map(t$))];for(let a of i){let c=e.compute.find(u=>u.name===a);if(c?.services){Rv(c,n,o);for(let u of c.services){let l=`${a}/${u.name}`;r.has(l)&&(o==="database"?u.needsDatabaseConnection=!0:u.needsStorageConnection=!0)}}}}Yc(Jc,"applyServiceConnections");function qc(e,t,n,o){for(let r of e.compute)if(t.includes(r.name)&&(Rv(r,n,o),r.services))for(let i of r.services)o==="database"?i.needsDatabaseConnection=!0:i.needsStorageConnection=!0}Yc(qc,"applyComputeConnections");var GO=Object.defineProperty,me=(e,t)=>GO(e,"name",{value:t,configurable:!0});function r$(e){let t=e.database.length>0,n=e.cdn!==void 0;return[{type:"database",label:"Database (RDS)",available:!0},{type:"database:proxy",label:"RDS Proxy",available:t,reason:t?void 0:"Requires at least one database"},{type:"storage:s3",label:"S3 Bucket",available:!0},{type:"network",label:"Network (VPC)",available:!0},{type:"compute:ecs",label:"Compute (ECS)",available:!0},{type:"compute:lambda",label:"Compute (Lambda)",available:!0},{type:"cdn",label:"CDN (CloudFront)",available:!n,reason:n?"A CDN is already configured. Remove existing CDN first.":void 0},{type:"tunnel",label:"Database Tunnel",available:t&&!e.tunnel,reason:t?e.tunnel?"Tunnel is already enabled":void 0:"Requires at least one database"}]}me(r$,"listAvailableResources");function Oi(e,t){if(g$(e,t.resourceName))return T(new Error(`Resource name '${t.resourceName}' is already used in this application.`));switch(t.type){case"database":return n$(e,t);case"database:proxy":return o$(e,t);case"storage:s3":return R(void 0);case"network":return R(void 0);case"compute:ecs":return!t.services||t.services.length===0?T(new Error("ECS compute requires at least one service.")):R(void 0);case"compute:lambda":return R(void 0);case"cdn":return i$(e,t);case"tunnel":return a$(e);default:{let n=t;return T(new Error(`Unknown resource type: ${String(n)}`))}}}me(Oi,"validateResourceAddition");function n$(e,t){let n=t.databaseName??t.resourceName.toLowerCase();return e.database.some(o=>o.databaseName===n)?T(new Error(`Database name '${n}' already exists. Choose a different database name.`)):t.databaseType==="GlobalAurora"&&!t.primaryRegion?T(new Error("GlobalAurora databases require a primaryRegion.")):R(void 0)}me(n$,"validateDatabaseAddition");function o$(e,t){let n=e.database.find(o=>o.name===t.targetDatabase||o.databaseName===t.targetDatabase);if(!n){let o=e.database.map(r=>r.name).join(", ")||"none";return T(new Error(`Database '${t.targetDatabase}' not found. Available databases: ${o}`))}return n.proxy!==void 0&&n.proxy!==!1?T(new Error(`Database '${n.name}' already has RDS Proxy enabled.`)):R(void 0)}me(o$,"validateProxyAddition");function i$(e,t){if(e.cdn)return T(new Error("A CDN is already configured for this application. Remove the existing CDN first."));if(!Pv(e,t.defaultOriginRef))return T(new Error(`Origin '${t.defaultOriginRef}' not found in plan. CDN origin must reference an existing resource.`));if(t.behaviours){for(let n of t.behaviours)if(!Pv(e,n.originRef))return T(new Error(`Behaviour origin '${n.originRef}' not found in plan.`))}return R(void 0)}me(i$,"validateCdnAddition");function a$(e){return e.tunnel&&typeof e.tunnel=="object"?T(new Error("Tunnel is already enabled for this application.")):e.database.length===0?T(new Error("No databases found \u2014 tunnel requires at least one relational database.")):R(void 0)}me(a$,"validateTunnelAddition");function Qc(e,t){let n=Oi(e,t);if(!n.success)return n;switch(t.type){case"database":return s$(e,t);case"database:proxy":return c$(e,t);case"storage:s3":return u$(e,t);case"network":return l$(e,t);case"compute:ecs":return d$(e,t);case"compute:lambda":return m$(e,t);case"cdn":return p$(e,t);case"tunnel":return f$(e,t);default:{let o=t;return T(new Error(`Unknown resource type: ${String(o)}`))}}}me(Qc,"addResourceToPlan");function s$(e,t){let n=t.databaseName??t.resourceName.toLowerCase(),o={name:t.resourceName,type:t.databaseType,databaseName:n},r;switch(t.databaseType){case"Instance":r={...o,...t.instanceType!==void 0?{instanceType:t.instanceType}:{},...t.multiAz!==void 0?{multiAz:t.multiAz}:{},...t.readReplica!==void 0?{readReplica:t.readReplica}:{},...t.publiclyAccessible!==void 0?{publiclyAccessible:t.publiclyAccessible}:{},...t.backupRetention!==void 0?{backupRetention:t.backupRetention}:{}};break;case"Aurora":r={...o,...t.writer!==void 0?{writer:t.writer}:{},...t.readers!==void 0?{readers:t.readers}:{},...t.backupRetention!==void 0?{backupRetention:t.backupRetention}:{},...t.preferredMaintenanceWindow!==void 0?{preferredMaintenanceWindow:t.preferredMaintenanceWindow}:{}};break;case"GlobalAurora":r={...o,primaryRegion:t.primaryRegion,...t.secondaryRegions!==void 0?{secondaryRegions:t.secondaryRegions}:{}};break;default:{let a=t.databaseType;return T(new Error(`Unknown database type: ${String(a)}`))}}let i={...e,database:[...e.database,r]};return kv(i,t.resourceName,"database",t),R(i)}me(s$,"addDatabase");function c$(e,t){let n=e.database.map(i=>({...i})),o=n.find(i=>i.name===t.targetDatabase||i.databaseName===t.targetDatabase);if(!o)return T(new Error(`Database '${t.targetDatabase}' not found.`));let r={};return t.maxConnections!==void 0&&(r.maxConnections=t.maxConnections),t.maxIdleConnections!==void 0&&(r.maxIdleConnections=t.maxIdleConnections),t.connectionBorrowTimeout!==void 0&&(r.connectionBorrowTimeout=t.connectionBorrowTimeout),t.requireTLS!==void 0&&(r.requireTLS=t.requireTLS),o.proxy=Object.keys(r).length>0?r:{},R({...e,database:n})}me(c$,"addProxy");function u$(e,t){let n=t.bucketName??t.resourceName.toLowerCase(),o=ke(n),r=e.s3.length,i=r===0?"":`${r+1}`,a={name:o,bucketName:n,variableName:`bucket${i}`,...t.publicReadAccess!==void 0?{publicReadAccess:t.publicReadAccess}:{},...t.versioned!==void 0?{versioned:t.versioned}:{},...t.encryption!==void 0?{encryption:t.encryption}:{},...t.websiteHosting?{websiteHosting:{indexDocument:"index.html"}}:{}},c={...e,s3:[...e.s3,a]};return kv(c,o,"storage",t),R(c)}me(u$,"addS3");function l$(e,t){let n={};if(t.maxAzs!==void 0&&(n.maxAzs=t.maxAzs),t.natGateways!==void 0&&(n.natGateways=t.natGateways),t.flowLogs!==void 0&&(n.flowLogs=t.flowLogs),t.vpcEndpoints!==void 0&&(n.vpcEndpoints=t.vpcEndpoints),t.networkName){let o={name:t.networkName,...n};return R({...e,additionalNetworks:[...e.additionalNetworks??[],o]})}return R({...e,network:{...e.network??{},...n}})}me(l$,"addNetwork");function d$(e,t){let n=t.connectedDatabase??[],o={name:t.resourceName,type:"ecs",needsConnection:n.length>0,connectedDatabase:n,...t.loadBalancer!==void 0?{cluster:{loadBalancer:t.loadBalancer}}:{},services:t.services.map(r=>({name:r.name,capacityProvider:r.capacityProvider??"FARGATE",...r.port!==void 0?{containers:[{port:r.port}]}:{},...r.cpu!==void 0?{cpu:r.cpu}:{},...r.memory!==void 0?{memoryLimitMiB:r.memory}:{}})),...t.docker!==void 0&&{docker:t.docker}};return R({...e,compute:[...e.compute,o]})}me(d$,"addEcsCompute");function m$(e,t){let n=t.connectedDatabase??[],o={name:t.resourceName,type:"lambda",needsConnection:n.length>0,connectedDatabase:n,...t.timeout!==void 0?{timeout:t.timeout}:{},...t.memory!==void 0?{memory:t.memory}:{},...t.handler!==void 0?{handler:t.handler}:{},...t.runtime!==void 0?{runtime:t.runtime}:{}};return R({...e,compute:[...e.compute,o]})}me(m$,"addLambdaCompute");function p$(e,t){let n={name:t.resourceName,defaultOriginRef:t.defaultOriginRef,...t.customDomain!==void 0?{customDomain:t.customDomain}:{},...t.certificateArn!==void 0?{certificateArn:t.certificateArn}:{},...t.behaviours&&t.behaviours.length>0?{behaviours:[...t.behaviours].map(o=>({pathPattern:o.pathPattern,originRef:o.originRef,...o.cachePolicy!==void 0?{cachePolicy:o.cachePolicy}:{}}))}:{}};return R({...e,cdn:n})}me(p$,"addCdn");function f$(e,t){let n=t.instanceType?{instanceType:t.instanceType}:{};return R({...e,tunnel:n})}me(f$,"addTunnel");function g$(e,t){let n=[...e.database.map(o=>o.name),...e.s3.map(o=>o.name),...e.compute.map(o=>o.name),...(e.dynamodb??[]).map(o=>o.name),...(e.sqs??[]).map(o=>o.name)];return e.cdn&&n.push(e.cdn.name),n.includes(t)}me(g$,"isResourceNameTaken");function Pv(e,t){return e.database.some(n=>n.name===t)||e.s3.some(n=>n.name===t)||e.compute.some(n=>n.name===t)||(e.dynamodb??[]).some(n=>n.name===t)||(e.sqs??[]).some(n=>n.name===t)}me(Pv,"resourceExistsInPlan");function kv(e,t,n,o){o.connectToCompute&&o.connectToCompute.length>0&&qc(e,[...o.connectToCompute],t,n),o.connectToServices&&o.connectToServices.length>0&&Jc(e,[...o.connectToServices],t,n)}me(kv,"applyConnections");var WO=Object.defineProperty,KO=(e,t)=>WO(e,"name",{value:t,configurable:!0});function v$(e,t,n){let o;try{o=Kn(e,{extractCustomCode:!0})}catch(u){return T(new Error(`Failed to parse infrastructure.ts: ${u instanceof Error?u.message:String(u)}`))}let r;try{r=ki(o,t,{skipValidation:!0})}catch(u){return T(new Error(`Failed to build resource plan: ${u instanceof Error?u.message:String(u)}`))}o.customCodeBlocks&&o.customCodeBlocks.length>0&&(r.customCodeBlocks=o.customCodeBlocks);let i=Oi(r,n);if(!i.success)return i;let a=Qc(r,n);if(!a.success)return a;let c=Yn(a.data);return c.success?R({originalContent:e,modifiedContent:c.data,addedResource:{type:n.type,name:n.resourceName}}):T(new Error(`Code generation failed: ${c.error.message}`))}KO(v$,"generateResourceChange");var HO=Object.defineProperty,Et=(e,t)=>HO(e,"name",{value:t,configurable:!0}),XO=new Set(Ci.options);function h$(e){return XO.has(e.toUpperCase())}Et(h$,"isRecordType");function y$(e){return e.endsWith(".")?e.slice(0,-1):e}Et(y$,"stripTrailingDot");function b$(e){let t=!1;for(let n=0;n<e.length;n++)if(e[n]==='"')t=!t;else if(e[n]===";"&&!t)return e.slice(0,n).trimEnd();return e}Et(b$,"stripInlineComment");function S$(e,t){let n=e.slice(t).join(" "),o=[],r="",i=!1;for(let a of n)a==='"'?(i&&(o.push(r),r=""),i=!i):i&&(r+=a);return o.join(" ")}Et(S$,"parseTxtValue");function _$(e){let t=/;\s*auto\s*$/.test(e),n=e.replace(/;\s*auto\s*$/,"").trim().match(/^\$FJALL-DELEGATE\s+(\S+)\s+TO\s+(\S+)$/i);if(n)return{subdomain:n[1],targetAccount:n[2],auto:t}}Et(_$,"parseDelegateDirective");function E$(e){if(e.length<2)return;let t=e[1],n=e.slice(2);return{domainName:t,subjectAlternativeNames:n}}Et(E$,"parseCertDirective");function A$(e){let t=[],n="",o=!1;for(let r of e)r==='"'?(o=!o,n+=r):/\s/.test(r)&&!o?n.length>0&&(t.push(n),n=""):n+=r;return n.length>0&&t.push(n),t}Et(A$,"tokenise");function x$(e){if(e.length<2)return;let t=0,n=e[t++],o,r;for(;t<e.length&&r===void 0;){let a=e[t].toUpperCase();if(a==="IN")t++;else if(h$(a))r=a,t++;else if(/^\d+$/.test(e[t]))o=parseInt(e[t],10),t++;else return}if(!r)return;let i=e.slice(t);switch(r){case"MX":{if(i.length<2)return;let a=parseInt(i[0],10),c=i.slice(1).join(" ");return{name:n,type:r,ttl:o,value:c,priority:a}}case"SRV":{if(i.length<4)return;let a=parseInt(i[0],10),c=parseInt(i[1],10),u=parseInt(i[2],10),l=i[3];return{name:n,type:r,ttl:o,value:l,priority:a,weight:c,port:u}}case"TXT":{let a=S$(e,t);return{name:n,type:r,ttl:o,value:a}}case"CAA":{let a=i.join(" ");return{name:n,type:r,ttl:o,value:a}}case"A":{if(i.length===0)return;if(i[0].toUpperCase()==="ALIAS"){if(i.length<2)return;let a=i.slice(1).join(" ");return{name:n,type:r,ttl:o,value:`${Vc}${a}`}}return{name:n,type:r,ttl:o,value:i[0]}}default:return i.length===0?void 0:{name:n,type:r,ttl:o,value:i[0]}}}Et(x$,"parseRecord");function $$(e){let t=e.split(`
+`),n,o=300,r=[],i=[],a=[];for(let c of t){let u=c.trim();if(u===""||u.startsWith(";"))continue;if(u.toUpperCase().startsWith(_t.FJALL_DELEGATE)){let h=_$(u);h&&i.push(h);continue}let l=b$(u);if(l==="")continue;let m=A$(l);if(m.length===0)continue;let p=m[0].toUpperCase();if(p===_t.ORIGIN){if(m.length<2)continue;n=y$(m[1]);continue}if(p===_t.TTL){if(m.length<2)continue;o=parseInt(m[1],10);continue}if(p===_t.FJALL_CERT){let h=E$(m);h&&a.push(h);continue}let g=x$(m);g&&r.push(g)}return n?R({origin:n,ttl:o,records:r,delegations:i,certificates:a}):T(new Error("Missing $ORIGIN directive"))}Et($$,"parseZoneFile");function I$(e,t){if(!e.startsWith("fjall:"))return;let n=e.split(":");if(n.length<3)return;let o=n[1],r=n[2],i=`${o}:${r}`;return t.get(i)??t.get(e)}Et(I$,"resolveAlias");var YO=Object.defineProperty,Cv=(e,t)=>YO(e,"name",{value:t,configurable:!0});function T$(e,t){return e.length>=t?e:e+" ".repeat(t-e.length)}Cv(T$,"padRight");function N$(e,t){let n=T$(e.name,24),o=e.ttl!==void 0&&e.ttl!==t?`${e.ttl} `:"";switch(e.type){case"MX":return`${n} ${o}IN MX ${e.priority??10} ${e.value}`;case"SRV":return`${n} ${o}IN SRV ${e.priority??0} ${e.weight??0} ${e.port??0} ${e.value}`;case"TXT":return`${n} ${o}IN TXT "${e.value}"`;case"CAA":return`${n} ${o}IN CAA ${e.value}`;default:return e.type==="A"&&e.value.startsWith(Vc)?`${n} ${o}IN A ${e.value}`:`${n} ${o}IN ${e.type} ${e.value}`}}Cv(N$,"formatRecord");function R$(e){let t=[];if(t.push("; zone.bind \u2014 managed by fjall"),t.push(`${_t.ORIGIN} ${e.origin}.`),t.push(`${_t.TTL} ${e.ttl}`),t.push(""),e.certificates.length>0){for(let n of e.certificates){let o=[n.domainName,...n.subjectAlternativeNames];t.push(`${_t.FJALL_CERT} ${o.join(" ")}`)}t.push("")}if(e.delegations.length>0){for(let n of e.delegations){let o=n.auto?" ; auto":"";t.push(`${_t.FJALL_DELEGATE} ${n.subdomain} TO ${n.targetAccount}${o}`)}t.push("")}for(let n of e.records)t.push(N$(n,e.ttl));return t.join(`
 `)+`
-`}Cv(R$,"generateZoneFile");var YO=Object.defineProperty,Ov=(e,t)=>YO(e,"name",{value:t,configurable:!0});function P$(e){let{domainName:t,hostedZoneId:n,records:o=[]}=e,r=`fjall/domains/${t}`;return[{path:`${r}/infrastructure.ts`,content:k$({domainName:t,records:o,hostedZoneId:n})},{path:`${r}/package.json`,content:C$(t)},{path:`${r}/tsconfig.json`,content:qO},{path:`${r}/cdk.json`,content:QO},{path:`${r}/.gitignore`,content:JO}]}Ov(P$,"generateDomainFiles");function k$(e){let{domainName:t,records:n,hostedZoneId:o}=e,r=ke(t.split(".").join("")),i=Ui(t),a=n.map(l=>{let m=l.ttl!==void 0?`, ttl: ${l.ttl}`:"";return`    { type: ${JSON.stringify(l.type)}, name: ${JSON.stringify(l.name)}, value: ${JSON.stringify(l.value)}${m} },`}),c=a.length>0?`[
+`}Cv(R$,"generateZoneFile");var JO=Object.defineProperty,Ov=(e,t)=>JO(e,"name",{value:t,configurable:!0});function P$(e){let{domainName:t,hostedZoneId:n,records:o=[]}=e,r=`fjall/domains/${t}`;return[{path:`${r}/infrastructure.ts`,content:k$({domainName:t,records:o,hostedZoneId:n})},{path:`${r}/package.json`,content:C$(t)},{path:`${r}/tsconfig.json`,content:QO},{path:`${r}/cdk.json`,content:eD},{path:`${r}/.gitignore`,content:qO}]}Ov(P$,"generateDomainFiles");function k$(e){let{domainName:t,records:n,hostedZoneId:o}=e,r=ke(t.split(".").join("")),i=Ui(t),a=n.map(l=>{let m=l.ttl!==void 0?`, ttl: ${l.ttl}`:"";return`    { type: ${JSON.stringify(l.type)}, name: ${JSON.stringify(l.name)}, value: ${JSON.stringify(l.value)}${m} },`}),c=a.length>0?`[
 ${a.join(`
 `)}
   ]`:"[]",u=o?`  hostedZoneId: ${JSON.stringify(o)},
@@ -410,7 +410,7 @@ ${u}  certificates: [
   records: ${c},
 });
 `}Ov(k$,"generateDefaultInfrastructureTs");function C$(e){return JSON.stringify({name:`domain-${e}`,version:ws,scripts:{},devDependencies:{"@types/node":"20.4.9","ts-node":"^10.9.1",typescript:"~5.1.6"},dependencies:{"@fjall/components-infrastructure":`^${ws}`,"aws-cdk-lib":"^2.260.0",constructs:"^10.6.0"}},null,2)+`
-`}Ov(C$,"generateDomainPackageJson");var JO=`node_modules/
+`}Ov(C$,"generateDomainPackageJson");var qO=`node_modules/
 cdk.out/
 *.d.ts
 *.js
@@ -418,10 +418,10 @@ cdk.out/
 .fjall-state*.json.tmp
 .deploy-state.json
 .deploy-state.json.tmp
-`,qO=JSON.stringify({compilerOptions:{target:"ES2020",module:"commonjs",lib:["es2020","dom"],declaration:!0,strict:!0,noImplicitAny:!0,strictNullChecks:!0,noImplicitThis:!0,alwaysStrict:!0,noUnusedLocals:!1,noUnusedParameters:!1,noImplicitReturns:!0,noFallthroughCasesInSwitch:!1,inlineSourceMap:!0,inlineSources:!0,experimentalDecorators:!0,strictPropertyInitialization:!1,typeRoots:["./node_modules/@types"]},exclude:["node_modules","cdk.out"]},null,2)+`
-`,QO=JSON.stringify({app:"npx ts-node --prefer-ts-exts --transpile-only infrastructure.ts",assetMetadata:!1,pathMetadata:!1,versionReporting:!1,watch:{include:["**"],exclude:["README.md","cdk*.json","**/*.d.ts","**/*.js","tsconfig.json","package*.json","yarn.lock","node_modules","test"]},context:{"@aws-cdk/aws-lambda:recognizeLayerVersion":!0,"@aws-cdk/core:checkSecretUsage":!0,"@aws-cdk/core:target-partitions":["aws","aws-cn"],"@aws-cdk-containers/ecs-service-extensions:enableDefaultLogDriver":!0,"@aws-cdk/aws-ec2:uniqueImdsv2TemplateName":!0,"@aws-cdk/aws-ecs:arnFormatIncludesClusterName":!0,"@aws-cdk/aws-iam:minimizePolicies":!0,"@aws-cdk/core:validateSnapshotRemovalPolicy":!0,"@aws-cdk/aws-codepipeline:crossAccountKeyAliasStackSafeResourceName":!0,"@aws-cdk/aws-s3:createDefaultLoggingPolicy":!0,"@aws-cdk/aws-sns-subscriptions:restrictSqsDescryption":!0,"@aws-cdk/aws-apigateway:disableCloudWatchRole":!0,"@aws-cdk/core:enablePartitionLiterals":!0,"@aws-cdk/aws-events:eventsTargetQueueSameAccount":!0,"@aws-cdk/aws-iam:standardizedServicePrincipals":!0,"@aws-cdk/aws-ecs:disableExplicitDeploymentControllerForCircuitBreaker":!0,"@aws-cdk/aws-iam:importedRoleStackSafeDefaultPolicyName":!0,"@aws-cdk/aws-s3:serverAccessLogsUseBucketPolicy":!0,"@aws-cdk/aws-route53-patters:useCertificate":!0,"@aws-cdk/customresources:installLatestAwsSdkDefault":!1,"@aws-cdk/aws-rds:databaseProxyUniqueResourceName":!0,"@aws-cdk/aws-codedeploy:removeAlarmsFromDeploymentGroup":!0,"@aws-cdk/aws-apigateway:authorizerChangeDeploymentLogicalId":!0,"@aws-cdk/aws-ec2:launchTemplateDefaultUserData":!0,"@aws-cdk/aws-secretsmanager:useAttachedSecretResourcePolicyForSecretTargetAttachments":!0,"@aws-cdk/aws-redshift:columnId":!0,"@aws-cdk/aws-stepfunctions-tasks:enableEmrServicePolicyV2":!0,"@aws-cdk/aws-ec2:restrictDefaultSecurityGroup":!0,"@aws-cdk/aws-apigateway:requestValidatorUniqueId":!0,"@aws-cdk/aws-kms:aliasNameRef":!0,"@aws-cdk/aws-autoscaling:generateLaunchTemplateInsteadOfLaunchConfig":!0,"@aws-cdk/core:includePrefixInUniqueNameGeneration":!0,"@aws-cdk/aws-opensearchservice:enableOpensearchMultiAzWithStandby":!0}},null,2)+`
-`;var eD=Object.defineProperty,Dv=(e,t)=>eD(e,"name",{value:t,configurable:!0});async function O$(e,t){let n;try{n=AE.parse(t)}catch(i){throw i instanceof s.ZodError?new Error(`Invalid application generator options:
-${Yo(i)}`,{cause:i}):i}let o;if(n.pattern==="staticsite"){let i=Xc(n.name,{source:n.source??"",build:{command:n.buildCommand??"",outputDir:n.outputDir??""},...n.routing!==void 0&&{routing:n.routing},...n.patternDomain!==void 0&&{domain:n.patternDomain},...n.formsTo!==void 0&&{forms:{to:n.formsTo,...n.corsOrigin!==void 0&&{corsOrigin:n.corsOrigin}}}});if(!i.success)throw new Error(i.error.message);o=i.data}else if(n.pattern){let i=n.includeDatabase??!0,a=n.patternTier||"standard",c=i?a==="custom"&&n.customDatabase?{type:n.customDatabase.type,instanceType:n.customDatabase.instanceType,databaseName:n.databaseName,backupRetention:n.customDatabase.backupRetention,deletionProtection:n.customDatabase.deletionProtection,encryption:n.customDatabase.encryption}:{databaseName:n.databaseName}:void 0,u=a==="custom"&&n.customCompute?{memorySize:n.customCompute.memorySize,timeout:n.customCompute.timeout}:void 0,l=Hc(n.name,n.pattern,{tier:a,domain:n.patternDomain,database:c,compute:u});if(!l.success)throw new Error(l.error.message);o=l.data}else n.type==="custom"?o=await D$(n):o=Kc(n.name,n.type,n.includeDatabase??!0,Wc(n.services),{snapshotIdentifier:n.snapshotIdentifier,snapshotUsername:n.snapshotUsername});n.owner&&(o.owner=n.owner),n.vpcId&&(o.vpcId=n.vpcId),n.network!==void 0&&(o.network=n.network===!1?void 0:n.network);let r=Yn(o);if(!r.success)throw new Error(r.error.message);if(e.write(au(n.name),r.data),n.pattern==="payload"||n.pattern==="nextjs"){let i=tD(eo(n.name),"open-next.config.ts");e.write(i,w$())}uu(e,n.name,{name:n.name,type:n.type,packageName:n.name})}Dv(O$,"applicationGenerator");async function D$(e){let t=e.network||void 0;return{appName:e.name,type:"custom",owner:e.owner,network:t,database:[],s3:[],compute:[]}}Dv(D$,"buildCustomPlan");function w$(){return`// OpenNext configuration - Generated by Fjall CLI
+`,QO=JSON.stringify({compilerOptions:{target:"ES2020",module:"commonjs",lib:["es2020","dom"],declaration:!0,strict:!0,noImplicitAny:!0,strictNullChecks:!0,noImplicitThis:!0,alwaysStrict:!0,noUnusedLocals:!1,noUnusedParameters:!1,noImplicitReturns:!0,noFallthroughCasesInSwitch:!1,inlineSourceMap:!0,inlineSources:!0,experimentalDecorators:!0,strictPropertyInitialization:!1,typeRoots:["./node_modules/@types"]},exclude:["node_modules","cdk.out"]},null,2)+`
+`,eD=JSON.stringify({app:"npx ts-node --prefer-ts-exts --transpile-only infrastructure.ts",assetMetadata:!1,pathMetadata:!1,versionReporting:!1,watch:{include:["**"],exclude:["README.md","cdk*.json","**/*.d.ts","**/*.js","tsconfig.json","package*.json","yarn.lock","node_modules","test"]},context:{"@aws-cdk/aws-lambda:recognizeLayerVersion":!0,"@aws-cdk/core:checkSecretUsage":!0,"@aws-cdk/core:target-partitions":["aws","aws-cn"],"@aws-cdk-containers/ecs-service-extensions:enableDefaultLogDriver":!0,"@aws-cdk/aws-ec2:uniqueImdsv2TemplateName":!0,"@aws-cdk/aws-ecs:arnFormatIncludesClusterName":!0,"@aws-cdk/aws-iam:minimizePolicies":!0,"@aws-cdk/core:validateSnapshotRemovalPolicy":!0,"@aws-cdk/aws-codepipeline:crossAccountKeyAliasStackSafeResourceName":!0,"@aws-cdk/aws-s3:createDefaultLoggingPolicy":!0,"@aws-cdk/aws-sns-subscriptions:restrictSqsDescryption":!0,"@aws-cdk/aws-apigateway:disableCloudWatchRole":!0,"@aws-cdk/core:enablePartitionLiterals":!0,"@aws-cdk/aws-events:eventsTargetQueueSameAccount":!0,"@aws-cdk/aws-iam:standardizedServicePrincipals":!0,"@aws-cdk/aws-ecs:disableExplicitDeploymentControllerForCircuitBreaker":!0,"@aws-cdk/aws-iam:importedRoleStackSafeDefaultPolicyName":!0,"@aws-cdk/aws-s3:serverAccessLogsUseBucketPolicy":!0,"@aws-cdk/aws-route53-patters:useCertificate":!0,"@aws-cdk/customresources:installLatestAwsSdkDefault":!1,"@aws-cdk/aws-rds:databaseProxyUniqueResourceName":!0,"@aws-cdk/aws-codedeploy:removeAlarmsFromDeploymentGroup":!0,"@aws-cdk/aws-apigateway:authorizerChangeDeploymentLogicalId":!0,"@aws-cdk/aws-ec2:launchTemplateDefaultUserData":!0,"@aws-cdk/aws-secretsmanager:useAttachedSecretResourcePolicyForSecretTargetAttachments":!0,"@aws-cdk/aws-redshift:columnId":!0,"@aws-cdk/aws-stepfunctions-tasks:enableEmrServicePolicyV2":!0,"@aws-cdk/aws-ec2:restrictDefaultSecurityGroup":!0,"@aws-cdk/aws-apigateway:requestValidatorUniqueId":!0,"@aws-cdk/aws-kms:aliasNameRef":!0,"@aws-cdk/aws-autoscaling:generateLaunchTemplateInsteadOfLaunchConfig":!0,"@aws-cdk/core:includePrefixInUniqueNameGeneration":!0,"@aws-cdk/aws-opensearchservice:enableOpensearchMultiAzWithStandby":!0}},null,2)+`
+`;var tD=Object.defineProperty,Dv=(e,t)=>tD(e,"name",{value:t,configurable:!0});async function O$(e,t){let n;try{n=AE.parse(t)}catch(i){throw i instanceof s.ZodError?new Error(`Invalid application generator options:
+${Yo(i)}`,{cause:i}):i}let o;if(n.pattern==="staticsite"){let i=Xc(n.name,{source:n.source??"",build:{command:n.buildCommand??"",outputDir:n.outputDir??""},...n.routing!==void 0&&{routing:n.routing},...n.patternDomain!==void 0&&{domain:n.patternDomain},...n.formsTo!==void 0&&{forms:{to:n.formsTo,...n.corsOrigin!==void 0&&{corsOrigin:n.corsOrigin}}}});if(!i.success)throw new Error(i.error.message);o=i.data}else if(n.pattern){let i=n.includeDatabase??!0,a=n.patternTier||"standard",c=i?a==="custom"&&n.customDatabase?{type:n.customDatabase.type,instanceType:n.customDatabase.instanceType,databaseName:n.databaseName,backupRetention:n.customDatabase.backupRetention,deletionProtection:n.customDatabase.deletionProtection,encryption:n.customDatabase.encryption}:{databaseName:n.databaseName}:void 0,u=a==="custom"&&n.customCompute?{memorySize:n.customCompute.memorySize,timeout:n.customCompute.timeout}:void 0,l=Hc(n.name,n.pattern,{tier:a,domain:n.patternDomain,database:c,compute:u});if(!l.success)throw new Error(l.error.message);o=l.data}else n.type==="custom"?o=await D$(n):o=Kc(n.name,n.type,n.includeDatabase??!0,Wc(n.services),{snapshotIdentifier:n.snapshotIdentifier,snapshotUsername:n.snapshotUsername});n.owner&&(o.owner=n.owner),n.vpcId&&(o.vpcId=n.vpcId),n.network!==void 0&&(o.network=n.network===!1?void 0:n.network);let r=Yn(o);if(!r.success)throw new Error(r.error.message);if(e.write(au(n.name),r.data),n.pattern==="payload"||n.pattern==="nextjs"){let i=rD(eo(n.name),"open-next.config.ts");e.write(i,w$())}uu(e,n.name,{name:n.name,type:n.type,packageName:n.name})}Dv(O$,"applicationGenerator");async function D$(e){let t=e.network||void 0;return{appName:e.name,type:"custom",owner:e.owner,network:t,database:[],s3:[],compute:[]}}Dv(D$,"buildCustomPlan");function w$(){return`// OpenNext configuration - Generated by Fjall CLI
 const sharpInstallConfig = {
   packages: ["sharp@0.34.2", "typescript@5.7.3"],
   arch: "arm64" as const,
@@ -447,7 +447,7 @@ const config = {
 };
 
 export default config;
-`}Dv(w$,"generateOpenNextConfig");var WF=O$;export{O$ as applicationGenerator,WF as default};
+`}Dv(w$,"generateOpenNextConfig");var KF=O$;export{O$ as applicationGenerator,KF as default};
 /*! Bundled license information:
 
 ejs/lib/esm/ejs.js: