fjall 7.0.0 → 7.1.0

package/bin/assets/generators/network/generator.js

@@ -92,7 +92,7 @@ ${Pe.hex("#D9622E").bold(`--- ${e} ---`)}`),L&&L.start())}Ue(Qk,"step");function
 `);return{buffer:[],stream:r}}flush(){let t=this.flushBuffer(this.buffer,this.mainLogStream,this.mainLogPath);this.buffer=t.buffer,this.mainLogStream=t.stream;let n=this.flushBuffer(this.debugBuffer,this.debugLogStream,this.debugLogPath);this.debugBuffer=n.buffer,this.debugLogStream=n.stream}close(){this.isClosing=!0,this.flush(),this.flushInterval&&(clearInterval(this.flushInterval),this.flushInterval=null),this.mainLogStream&&(this.mainLogStream.end(),this.mainLogStream=null),this.debugLogStream&&(this.debugLogStream.end(),this.debugLogStream=null),this.buffer=[],this.debugBuffer=[],this.initialised=!1,this.isClosing=!1}async closeAndFlush(){this.isClosing=!0,this.flush(),this.flushInterval&&(clearInterval(this.flushInterval),this.flushInterval=null);let t=[];this.mainLogStream&&(t.push(this.mainLogStream),this.mainLogStream=null),this.debugLogStream&&(t.push(this.debugLogStream),this.debugLogStream=null),this.buffer=[],this.debugBuffer=[],this.initialised=!1,await Promise.all(t.map(n=>new Promise(i=>{n.end(()=>i())}))),this.isClosing=!1}};import{createWriteStream as yO,existsSync as SO,mkdirSync as _O}from"fs";import{join as OA}from"path";var Or={trace:0,debug:1,info:2,warn:3,error:4},Fe={MAX_FILE_SIZE:10*1024*1024,MAX_FILES:5,MAX_BUFFER_SIZE:100,FLUSH_INTERVAL_MS:500,LOG_FILENAME:"fjall.jsonl",DEBUG_LOG_FILENAME:"fjall-debug.jsonl"};import{join as gO}from"path";import{homedir as hO}from"os";var pO=Object.defineProperty,fO=(e,t)=>pO(e,"name",{value:t,configurable:!0});function or(){let e=process.env.FJALL_LOG_DIR;return e!==void 0&&e!==""?e:gO(hO(),".fjall","logs")}fO(or,"getDefaultLogDir");var vO=Object.defineProperty,bO=(e,t)=>vO(e,"name",{value:t,configurable:!0}),Io=class{static{bO(this,"DeploymentLoggerImpl")}mainLogger;appName;operationType;logStream=null;logPath;deploymentId;buffer=[];flushInterval=null;isClosing=!1;maxBufferSize=Fe.MAX_BUFFER_SIZE;constructor(t,n,i){this.mainLogger=t,this.appName=n,this.operationType=i,this.deploymentId=`${i}-${Date.now()}`;let r=or(),o=OA(r,"deployments",n);SO(o)||_O(o,{recursive:!0});let a=new Date().toISOString().replace(/[:.]/g,"-"),c=`${i}-${a}.jsonl`;this.logPath=OA(o,c);try{this.logStream=yO(this.logPath,{flags:"a"}),this.flushInterval=setInterval(()=>this.flush(),Fe.FLUSH_INTERVAL_MS),this.info("DeploymentLogger","Deployment logging initialised",{appName:n,operationType:i,deploymentId:this.deploymentId,logPath:this.logPath})}catch{}}log(t,n,i,r,o,a){if(this.isClosing)return;let c={timestamp:new Date().toISOString(),level:t,component:n,message:i,correlationId:this.deploymentId,...r&&Object.keys(r).length>0&&{data:r},...o&&{stackName:o},...a&&{phase:a}};this.buffer.push(c),this.mainLogger.logWithCorrelation(t,n,i,this.deploymentId,r,o,a),this.buffer.length>=this.maxBufferSize&&this.flush()}flush(){if(!(this.buffer.length===0||!this.logStream)){for(let t of this.buffer)this.logStream.write(JSON.stringify(t)+`
 `);this.buffer=[]}}info(t,n,i){this.log("info",t,n,i)}warn(t,n,i){this.log("warn",t,n,i)}error(t,n,i){this.log("error",t,n,i)}debug(t,n,i){this.log("debug",t,n,i)}stackEvent(t,n,i,r){this.log("info","StackDeployment",i,r,t,n)}dockerEvent(t,n){this.log("info","DockerOperation",t,{percentage:n})}ecsEvent(t,n,i){this.log("info","ECSDeployment",t,{percentage:n,taskCount:i})}close(){this.isClosing=!0,this.flush(),this.flushInterval&&(clearInterval(this.flushInterval),this.flushInterval=null),this.logStream&&(this.logStream.end(),this.logStream=null),this.buffer=[],this.isClosing=!1}getLogPath(){return this.logPath}getDeploymentId(){return this.deploymentId}};var EO=Object.defineProperty,AO=(e,t)=>EO(e,"name",{value:t,configurable:!0}),wc=class e{static{AO(this,"Logger")}static instance=null;config;debugEnabled;traceEnabled;minLevel;fileWriter;mainLogPath;debugLogPath;constructor(){let t=or(),n=uh(t,"debug"),i=this.parseEnvInt("FJALL_LOG_MAX_SIZE",Fe.MAX_FILE_SIZE),r=this.parseEnvInt("FJALL_LOG_MAX_FILES",Fe.MAX_FILES);this.config={logDir:t,debugLogDir:n,maxFileSize:i,maxFiles:r,maxBufferSize:Fe.MAX_BUFFER_SIZE,flushIntervalMs:Fe.FLUSH_INTERVAL_MS},this.mainLogPath=uh(t,Fe.LOG_FILENAME),this.debugLogPath=uh(n,Fe.DEBUG_LOG_FILENAME),this.debugEnabled=process.env.FJALL_DEBUG==="true"||process.env.FJALL_TRACE==="true"||process.argv.includes("--verbose")||process.argv.includes("-v"),this.traceEnabled=process.env.FJALL_TRACE==="true";let o=process.env.FJALL_LOG_LEVEL?.toLowerCase();o&&o in Or?this.minLevel=o:this.traceEnabled?this.minLevel="trace":this.debugEnabled?this.minLevel="debug":this.minLevel="info",this.fileWriter=new Oc(this.config,this.mainLogPath,this.debugLogPath,this.debugEnabled)}parseEnvInt(t,n){let i=process.env[t];if(i){let r=parseInt(i,10);if(!isNaN(r)&&r>0)return r}return n}static getInstance(){return e.instance||(e.instance=new e),e.instance}shouldLog(t){return Or[t]>=Or[this.minLevel]}createEntry(t,n,i,r,o,a,c){return{timestamp:new Date().toISOString(),level:t,component:n,message:i,...o&&{correlationId:o},...r&&Object.keys(r).length>0&&{data:r},...a&&{stackName:a},...c&&{phase:c}}}log(t,n,i,r,o,a,c){if(!this.shouldLog(t))return;let u=this.createEntry(t,n,i,r,o,a,c),l=t==="debug"||t==="trace";this.fileWriter.write(u,l),this.writeConsole(u)}writeConsole(t){if(pe.shouldSuppressOutput||pe.isNonInteractive){this.debugEnabled&&this.writeDebugMirror(t);return}let n=this.getConsolePrefix(t.level),i=`[${t.component}]`,r=`${n} ${i} ${t.message}`;t.level==="error"?console.error(r):t.level==="warn"?console.warn(r):console.log(r)}writeDebugMirror(t){let n=this.getConsolePrefix(t.level),i=`[${t.component}]`,r="";if(t.data&&Object.keys(t.data).length>0)try{r=` ${JSON.stringify(t.data)}`}catch{r=" [unserialisable data]"}let o=`${n} ${i} ${t.message}${r}`;process.stderr.write(`${jn(o)}
 `)}getConsolePrefix(t){switch(t){case"error":return"[ERROR]";case"warn":return"[WARN]";case"info":return"[INFO]";case"debug":return"[DEBUG]";case"trace":return"[TRACE]"}}error(t,n,i){this.log("error",t,n,i)}warn(t,n,i){this.log("warn",t,n,i)}info(t,n,i){this.log("info",t,n,i)}debug(t,n,i){this.log("debug",t,n,i)}trace(t,n,i){this.log("trace",t,n,i)}isDebugEnabled(){return this.debugEnabled}isTraceEnabled(){return this.traceEnabled}enableDebug(){this.debugEnabled=!0,Or[this.minLevel]>Or.debug&&(this.minLevel="debug"),this.fileWriter.setDebugEnabled(!0),this.fileWriter.isInitialised&&this.fileWriter.initialiseDebugStream()}withCorrelation(t){return new Gn(this,t)}forDeployment(t,n="deploy"){return new Io(this,t,n)}close(){this.fileWriter.close()}async flushAndClose(){await this.fileWriter.closeAndFlush()}getLogPath(){return this.mainLogPath}getDebugLogPath(){return this.debugLogPath}getLogDir(){return this.config.logDir}logWithCorrelation(t,n,i,r,o,a,c){this.log(t,n,i,o,r,a,c)}static reset(){e.instance&&(e.instance.close(),e.instance=null)}};var xO=Object.defineProperty,IO=(e,t)=>xO(e,"name",{value:t,configurable:!0}),kc=wc.getInstance();function NO(e){let t=or(),n=DA(t,"debug"),i=DA(n,Fe.DEBUG_LOG_FILENAME);try{wA(n)||$O(n,{recursive:!0}),wA(i)&&TO(i).size>Fe.MAX_FILE_SIZE&&new Vn({maxFiles:Fe.MAX_FILES}).rotate(i);let r={timestamp:new Date().toISOString(),level:"debug",component:"Emergency",message:e};RO(i,JSON.stringify(r)+`
-`)}catch{}}IO(NO,"writeDebugSync");var CO=Object.defineProperty,Wn=(e,t)=>CO(e,"name",{value:t,configurable:!0});function lh(e){return e.success===!0}Wn(lh,"isSuccess");function dh(e){return e.success===!1}Wn(dh,"isFailure");function C(e){return{success:!0,data:e}}Wn(C,"success");function I(e){return{success:!1,error:e}}Wn(I,"failure");async function mh(e){try{let t=await e();return C(t)}catch(t){return I(pt(t))}}Wn(mh,"tryAsync");function ph(e){try{let t=e();return C(t)}catch(t){return I(pt(t))}}Wn(ph,"trySync");var PO=Object.defineProperty,kO=(e,t)=>PO(e,"name",{value:t,configurable:!0}),MA=/^[a-zA-Z][a-zA-Z0-9-]*$/,OO=co.source.replace(/^\^|\$$/g,""),j=Object.freeze({IDENTIFIER:MA,NEW_APP_NAME:/^[a-z][a-z0-9-]*$/,RESOURCE_NAME:/^[a-zA-Z][a-zA-Z0-9]*$/,ECS_SERVICE_NAME:MA,BUCKET_NAME:/^[a-z][a-z0-9-]*[a-z0-9]$|^[a-z][a-z0-9]*$/,DATABASE_NAME:/^[a-zA-Z][a-zA-Z0-9_]*$/,RESOURCE_TYPE:/^[a-z]+(:[a-z]+)?$/,SSM_PATH:new RegExp(`^(?:/${OO})+$`),SECRET_NAME:lc,SSM_COMPONENT:co,EMAIL:/^[^\s@]+@[^\s@]+\.[^\s@]+$/,DOCKER_IMAGE:/^[a-z0-9][a-z0-9._-]*[a-z0-9](:[a-z0-9._-]+)?$/,DOMAIN:/^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)+$/i,HTTP_ORIGIN:/^https?:\/\/[a-z0-9.-]+(:\d+)?$/i,PASCAL_CASE:/^[A-Z][A-Za-z0-9]*$/,AWS_ACCOUNT_ID:/^\d{12}$/,VPC_ID:/^vpc-[a-z0-9]+$/,ROLE_ARN:/^arn:aws[a-zA-Z-]*:iam::\d{12}:role\/.+$/,CIDR:/^((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\.){3}(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\/(3[0-2]|[12]?\d)$/,SCHEDULE_EXPRESSION:/^(rate\(1 (?:minute|hour|day)\)|rate\((?:[2-9]|[1-9]\d+) (?:minutes|hours|days)\)|cron\([^\s()]+ [^\s()]+ [^\s()]+ [^\s()]+ [^\s()]+ [^\s()]+\))$/,LAMBDA_RUNTIME_IDENTIFIER:/^[A-Za-z0-9._-]+$/,ENV_VAR_NAME:/^[A-Za-z_][A-Za-z0-9_]*$/});function fh(e){let t=/^rate\((\d+) (minute|minutes|hour|hours|day|days)\)$/.exec(e);if(!t)return;let n=t[1],i=t[2];if(n===void 0||i===void 0)return;let r=parseInt(n,10);if(!Number.isFinite(r)||r<1)return;let o=i==="minute"||i==="hour"||i==="day";if(!(o&&r!==1)&&!(!o&&r===1))return i==="minute"||i==="minutes"?{everyMs:r*6e4}:i==="hour"||i==="hours"?{everyMs:r*60*6e4}:{everyMs:r*24*60*6e4}}kO(fh,"parseRateExpression");var d=Object.freeze({IDENTIFIER:"Must start with a letter, contain only letters, numbers, and hyphens",NEW_APP_NAME:"Must start with a lowercase letter and contain only lowercase letters, numbers, and hyphens",IDENTIFIER_MIN_LENGTH:"Must be at least 2 characters",IDENTIFIER_NO_TRAILING_HYPHEN:"Must not end with a hyphen",IDENTIFIER_NO_CONSECUTIVE_HYPHENS:"Must not contain consecutive hyphens",RESOURCE_NAME:"Must start with a letter and contain only letters and numbers (PascalCase recommended)",ECS_SERVICE_NAME:"Service name must start with a letter and contain only letters, numbers, and hyphens",BUCKET_NAME:"Bucket name must start with a lowercase letter and contain only lowercase letters, numbers, and hyphens",DATABASE_NAME:"Database name must start with a letter and contain only letters, numbers, and underscores",RESOURCE_TYPE:"Resource type must be in format 'category' or 'category:type'",SSM_PATH:"SSM path must start with / and contain valid namespace segments (e.g., /myapp/ApiCluster/service)",SECRET_NAME:lg,SSM_COMPONENT:dc,EMAIL:"Please enter a valid email address",DOMAIN:"Please enter a valid domain (e.g., cms.example.com)",DOCKER_IMAGE:"Invalid Docker image name format",REQUIRED:{APP_NAME:"Application name is required",RESOURCE_NAME:"Resource name is required",BUCKET_NAME:"Bucket name is required",SERVICE_NAME:"Service name is required",NETWORK_NAME:"Network name is required",DATABASE_NAME:"Database name is required",ORGANISATION_NAME:"Organisation name is required",EMAIL:"Email is required",NAME:"Name is required",USERNAME:"Username is required",CONTAINER_NAME:"Container name is required",GROUP:"Group is required",PATTERN_NAME:"Pattern name is required",SOURCE:"Source directory is required",BUILD_COMMAND:"Build command is required",OUTPUT_DIR:"Output directory is required",FORMS_TO:"Forms recipient address is required",ROUTING_PATH:"Routing path is required",RESOURCE_REFERENCE:"Resource reference is required",RESOURCE_TYPE:"Resource type is required",VARIANT:"Variant is required",SUBTYPE:"Subtype is required",DEPLOY_TARGET:"Deploy target is required",DESTROY_TARGET:"Destroy target is required"},MAX_LENGTH:{APP_NAME:"Application name must be 50 characters or less",RESOURCE_NAME:"Resource name must be 63 characters or less",BUCKET_NAME:"Bucket name must be 63 characters or less",SERVICE_NAME:"Service name must be 255 characters or less",NETWORK_NAME:"Network name must be 50 characters or less",DATABASE_NAME:"Database name must be 63 characters or less",ORGANISATION_NAME:"Organisation name must be 50 characters or less"},PORT:{INTEGER:"Port must be an integer",MIN:"Port must be at least 1",MAX:"Port cannot exceed 65535"},USERNAME:{MAX_LENGTH:"Username cannot exceed 63 characters"},LAMBDA:{MEMORY:{INTEGER:"Lambda memory must be an integer",MIN:"Memory must be at least 128 MB",MAX:"Memory cannot exceed 10240 MB",MULTIPLE:"Memory must be 128 MB or a multiple of 64 MB"},TIMEOUT:{INTEGER:"Timeout must be an integer",MIN:"Timeout must be at least 1 second",MAX:"Timeout cannot exceed 900 seconds"},RUNTIME:"Lambda runtime must contain only letters, digits, dots, underscores, or dashes (e.g. 'NODEJS_20_X' or 'nodejs20.x')"},ENV_VAR_NAME:"Environment variable names must start with a letter or underscore and contain only letters, digits, and underscores",PRIORITY:{INTEGER:"Priority must be an integer",MIN:"Priority must be at least 1",MAX:"Priority cannot exceed 50000"},CAPACITY:{MIN:{INTEGER:"Minimum capacity must be an integer",MIN_0:"Minimum capacity must be at least 0",MIN_1:"Minimum capacity must be at least 1",MAX:"Minimum capacity cannot exceed 100"},MAX:{INTEGER:"Maximum capacity must be an integer",MIN_0:"Maximum capacity must be at least 0",MIN_1:"Maximum capacity must be at least 1",MAX:"Maximum capacity cannot exceed 100"},DESIRED:{INTEGER:"Desired count must be an integer",MIN:"Desired count must be at least 0",MAX:"Desired count cannot exceed 100"},WARM_POOL_REQUIRED:"minCapacity 0 requires a warmPool \u2014 without it, new tasks wait 60-90s for a cold instance launch",WARM_POOL:{MIN_SIZE:{INTEGER:"Warm pool minSize must be an integer",MIN:"Warm pool minSize must be at least 0",MAX:"Warm pool minSize cannot exceed 100"},MIN_SIZE_EXCEEDS_MAX_CAPACITY:"warmPool.minSize cannot exceed maxCapacity \u2014 the warm pool cannot hold more instances than the ASG allows"}},MEMORY_LIMIT:{INTEGER:"Memory limit must be an integer",MIN_512:"Memory limit must be at least 512 MiB",MIN_128:"Memory limit must be at least 128 MiB",MAX:"Memory limit cannot exceed 30720 MiB"},DATABASE:{PORT:{INTEGER:"Database port must be an integer",MIN:"Database port must be at least 1024",MAX:"Database port cannot exceed 65535"},NAME:{REQUIRED:"Database name is required",MAX_LENGTH:"Database name must be 63 characters or less"}},BACKUP_RETENTION:{INTEGER:"Backup retention must be an integer",MIN:"Backup retention must be at least 1 day",MAX:"Backup retention cannot exceed 35 days"},SQS:{VISIBILITY_TIMEOUT:{INTEGER:"Visibility timeout must be an integer",MIN:"Visibility timeout must be at least 0 seconds",MAX:"Visibility timeout cannot exceed 43200 seconds (12 hours)"},RETENTION_PERIOD:{INTEGER:"Retention period must be an integer",MIN:"Retention period must be at least 60 seconds",MAX:"Retention period cannot exceed 1209600 seconds (14 days)"}},READER:{COUNT:{INTEGER:"Reader count must be an integer",MIN:"Reader count must be at least 0",MAX:"Reader count cannot exceed 15"}},IDENTIFIER_SUFFIX:{REQUIRED:"Identifier suffix is required when specified",MAX_LENGTH:"Identifier suffix cannot exceed 50 characters"},ROTATION:{INTEGER:"Rotation days must be an integer",MIN:"Rotation interval must be at least 1 day",MAX:"Rotation interval cannot exceed 365 days"},MAX_CONNECTIONS:{INTEGER:"Max connections must be an integer",MIN:"Max connections must be at least 1",MAX:"Max connections cannot exceed 100"},MONITORING_INTERVAL:{INTEGER:"Monitoring interval must be an integer",MIN:"Monitoring interval must be at least 0",MAX:"Monitoring interval cannot exceed 60 seconds",VALUES:"Monitoring interval must be 0, 1, 5, 10, 15, 30, or 60 seconds"},RETENTION_DAYS:{INTEGER:"Retention days must be an integer",MIN:"Retention days must be at least 1",MAX:"Retention days cannot exceed 365"},BATCH_SIZE:{INTEGER:"Batch size must be an integer",MIN:"Batch size must be at least 1",MAX:"Batch size cannot exceed 10000"},SERVICE:{UNIQUE_WITHIN_CLUSTER:"Service names must be unique within a cluster",MIN_REQUIRED:"At least one service is required",ROUTING_REQUIRED:"Multiple services with ports require routing config (path or host)"},PROXY_CONFIG:{MAX_IDLE_CONNECTIONS:{INTEGER:"Max idle connections must be an integer",MIN:"Max idle connections must be at least 0",MAX:"Max idle connections cannot exceed 100"},BORROW_TIMEOUT:{INTEGER:"Connection borrow timeout must be an integer",MIN:"Connection borrow timeout must be at least 1 second",MAX:"Connection borrow timeout cannot exceed 3600 seconds"}},MAX_AZS:{INTEGER:"Max AZs must be an integer",MIN:"Max AZs must be at least 1",MAX:"Max AZs cannot exceed 3"},BATCHING_WINDOW:{INTEGER:"Max batching window must be an integer",MIN:"Max batching window must be at least 0",MAX:"Max batching window cannot exceed 300 seconds"},HEALTH_CHECK:{INTERVAL:{INTEGER:"Health check interval must be an integer",MIN:"Health check interval must be at least 5 seconds",MAX:"Health check interval cannot exceed 300 seconds"},TIMEOUT:{INTEGER:"Health check timeout must be an integer",MIN:"Health check timeout must be at least 2 seconds",MAX:"Health check timeout cannot exceed 60 seconds"},RETRIES:{INTEGER:"Health check retries must be an integer",MIN:"Health check retries must be at least 1",MAX:"Health check retries cannot exceed 10"},START_PERIOD:{INTEGER:"Health check start period must be an integer",MIN:"Health check start period must be at least 0 seconds",MAX:"Health check start period cannot exceed 300 seconds"}},EPHEMERAL_STORAGE:{INTEGER:"Ephemeral storage size must be an integer",MIN:"Ephemeral storage size must be at least 512 MB",MAX:"Ephemeral storage size cannot exceed 10240 MB"},MAX_MESSAGE_SIZE:{INTEGER:"Max message size must be an integer",MIN:"Max message size must be at least 1024 bytes",MAX:"Max message size cannot exceed 262144 bytes (256 KB)"},CAPACITY_CONSTRAINT:{MIN_LTE_MAX:"minCapacity must be less than or equal to maxCapacity"},DIRECT_ACCESS:{NO_DOMAIN:"directAccess cannot be used with domain (no ALB for HTTPS)",NO_LOAD_BALANCER:"directAccess cannot be used with loadBalancer (mutually exclusive)"},GLOBAL_AURORA:{PRIMARY_REGION_REQUIRED:"primaryRegion is required for GlobalAurora databases"},NAT_GATEWAY:{INTEGER:"NAT gateway count must be an integer",MIN:"NAT gateway count must be at least 0",MAX:"NAT gateway count cannot exceed 3"},CIDR_MASK:{INTEGER:"CIDR mask must be an integer",MIN:"CIDR mask must be at least 16",MAX:"CIDR mask cannot exceed 28"},CPU:{INTEGER:"CPU must be an integer",MIN:"CPU must be at least 256 units",MAX:"CPU cannot exceed 4096 units"},KMS:{KEY_REQUIRED:"KMS key ARN is required when using KMS encryption"},READER_INSTANCES:{MAX:"Cannot have more than 15 reader instances",COUNT_OR_INSTANCES:"Cannot specify both 'count' and 'instances' - use one or the other"},GENERATOR_CAPACITY:{MIN:{MIN:"Minimum capacity must be at least 1",MAX:"Minimum capacity cannot exceed 1000"},MAX:{MIN:"Maximum capacity must be at least 1",MAX:"Maximum capacity cannot exceed 1000"}},INSTANCE_TYPE:"Unknown instance type. Common types include: t4g.micro, t4g.small, m5.large",ARCHITECTURE_MISMATCH:"Architecture mismatch between instance type and AMI",ALLOCATED_STORAGE:{INTEGER:"Allocated storage must be an integer",MIN:"Allocated storage must be at least 20 GB",MAX:"Allocated storage cannot exceed 65536 GB"},DLQ:{MAX_RECEIVE_COUNT:{INTEGER:"Max receive count must be an integer",MIN:"Max receive count must be at least 1",MAX:"Max receive count cannot exceed 1000"}},ALARM:{PERCENTAGE:{MIN:"Threshold must be at least 1%",MAX:"Threshold must be at most 100%"},FREE_STORAGE_GIB:{MIN:"Free storage threshold must be at least 1 GiB"}},REGION:"Invalid AWS region",PASCAL_CASE:"Resource name must start with an uppercase letter and contain only alphanumerics (PascalCase).",IMAGE_DOCKER_MUTEX:"image and docker are mutually exclusive",AWS_ACCOUNT_ID:"AWS account id must be exactly 12 digits (no hyphens)",VPC_ID:"VPC id must look like vpc-abc12345",ROLE_ARN:"Role ARN must have the form arn:aws:iam::<account-id>:role/<name>",CIDR:"CIDR must be in dotted-quad/prefix-length form (e.g. 10.0.0.0/16)",VPC_PEER:{MIN_REQUESTER_ACCOUNTS:"At least one requester account id is required",REGION_REQUIRED:"Peer region is required when specified",ROUTE_TABLE_ID_REQUIRED:"Route table id must not be empty"},SCHEDULE_EXPRESSION:"Schedule expression must be 'rate(N minute|minutes|hour|hours|day|days)' with N>=1, or 'cron(<6-field AWS expression>)'"});var wO=Object.defineProperty,rt=(e,t)=>wO(e,"name",{value:t,configurable:!0}),DO=["us-east-2","us-west-2","us-east-1","eu-west-1","eu-central-1","ap-southeast-1"],MO=Object.freeze(DO.flatMap(e=>{let t=wn(e);return t?[t]:[]})),gh=Object.freeze(["us-east-2","us-west-2","us-east-1","eu-west-1","ap-southeast-1"]);function Dc(e){return e?e.split(",").map(t=>t.trim()).filter(Boolean):[]}rt(Dc,"parseRegionList");function hh(e){return Lt.includes(e)}rt(hh,"isValidRegion");function vh(e){return/^[a-z]{2}-[a-z]+-[1-9]$/.test(e)}rt(vh,"isValidRegionFormat");function bh(e){if(!e)return gh.slice(0,3);let t=e.toLowerCase().split("-"),n=t[0],i=t.length>1?t[1]:"",r=[];return n&&i&&(r=Lt.filter(o=>o.startsWith(`${n}-${i}`))),r.length===0&&n&&(r=Lt.filter(o=>o.startsWith(`${n}-`))),r.length>0?r.slice(0,3):gh.slice(0,3)}rt(bh,"getSuggestions");function yh(e){if(hh(e))return!0;let t=bh(e);return vh(e)?`Unknown region. Try: ${t.join(", ")}`:`Invalid format. Try: ${t.join(", ")}`}rt(yh,"validateRegion");function jA(e){if(!e||e.trim()==="")return!0;let t=Dc(e);for(let n of t){let i=yh(n);if(i!==!0)return i}return!0}rt(jA,"validateRegionList");function Sh(e,t){return e.filter(n=>n!==t)}rt(Sh,"filterDuplicateRegions");function _h(e){return{label:e.city,value:e.code,description:e.optIn?`${e.code} \u2014 opt-in required`:e.code}}rt(_h,"toRegionOption");function zA(){return Qe.map(_h)}rt(zA,"getRegionOptions");function LA(e){return Qe.filter(t=>t.code!==e).map(_h)}rt(LA,"getRegionOptionsExcluding");function UA(e){let t=Qe.find(n=>n.code===e);return t?t.city:e}rt(UA,"getRegionName");function FA(e){return t=>{let n=Dc(t);return Sh(n,e)}}rt(FA,"createRegionFormatter");var Mc="7.0.0";var jc=["Aurora","Instance","GlobalAurora","ClickHouse"],Kn=["FARGATE","FARGATE_SPOT","EC2"],gt=["standard","resilient","enterprise"],zc=["tinkerer","lightweight","standard","resilient","enterprise"],Eh="custom",$o=[...zc,Eh];var jO=Object.defineProperty,zO=(e,t)=>jO(e,"name",{value:t,configurable:!0}),CB=Object.freeze({RESOURCE_SUFFIXES:Object.freeze({storage:"Storage",database:"Database",cluster:"Cluster",function:"Function",instance:"Instance",compute:"Compute"})}),To=["ecs","lambda","ec2"],Hn=Object.freeze({ECS:"ecs",LAMBDA:"lambda",EC2:"ec2"}),Lc=["code","container"],Ro=Object.freeze({CODE:"code",CONTAINER:"container"}),Uc=["ARM_64","X86_64"],BA="ARM_64",No=["NONE","AWS_IAM"],Fc=["public","internal"],Bc=["CPU","MEMORY"],Zc=["ARM","STANDARD"],Ah=["Instance","Aurora"],Yn=["postgresql","mysql"],ZA=["foundation","compliance","hardened"];var Gc=["t3.nano","t3.micro","t3.small","t3.medium","t3.large","t3.xlarge","t3.2xlarge","t3a.nano","t3a.micro","t3a.small","t3a.medium","t3a.large","t3a.xlarge","t3a.2xlarge","t4g.nano","t4g.micro","t4g.small","t4g.medium","t4g.large","t4g.xlarge","t4g.2xlarge","c5.large","c5.xlarge","c5.2xlarge","c5.4xlarge","c5.9xlarge","c5.12xlarge","c5.18xlarge","c5.24xlarge","c5a.large","c5a.xlarge","c5a.2xlarge","c5a.4xlarge","c5a.8xlarge","c5a.12xlarge","c5a.16xlarge","c5a.24xlarge","c6g.medium","c6g.large","c6g.xlarge","c6g.2xlarge","c6g.4xlarge","c6g.8xlarge","c6g.12xlarge","c6g.16xlarge","r5.large","r5.xlarge","r5.2xlarge","r5.4xlarge","r5.8xlarge","r5.12xlarge","r5.16xlarge","r5.24xlarge","r5a.large","r5a.xlarge","r5a.2xlarge","r5a.4xlarge","r5a.8xlarge","r5a.12xlarge","r5a.16xlarge","r5a.24xlarge","r6g.medium","r6g.large","r6g.xlarge","r6g.2xlarge","r6g.4xlarge","r6g.8xlarge","r6g.12xlarge","r6g.16xlarge","i3.large","i3.xlarge","i3.2xlarge","i3.4xlarge","i3.8xlarge","i3.16xlarge","p3.2xlarge","p3.8xlarge","p3.16xlarge","g4dn.xlarge","g4dn.2xlarge","g4dn.4xlarge","g4dn.8xlarge","g4dn.12xlarge","g4dn.16xlarge","m5.large","m5.xlarge","m5.2xlarge","m5.4xlarge","m5.8xlarge","m5.12xlarge","m5.16xlarge","m5.24xlarge","m5a.large","m5a.xlarge","m5a.2xlarge","m5a.4xlarge","m5a.8xlarge","m5a.12xlarge","m5a.16xlarge","m5a.24xlarge"],GA=[0,1,5,10,15,30,60];function nt(e,t){return e.includes(t)}zO(nt,"constIncludes");var VA=1,WA=65535,DB=Object.freeze({postgresql:5432,mysql:3306}),KA=128,HA=10240,Vc=1,Wc=900,xh=1,Ih=1e3,Xn=100,YA=100;var XA=3e3;var JA=["GET","POST","PUT","DELETE","HEAD","OPTIONS","PATCH"],qA=["standard","assets","upload","website"],Jn=["AES256","KMS"];var LO=Object.defineProperty,Co=(e,t)=>LO(e,"name",{value:t,configurable:!0}),Be=Co(e=>s.union([s.literal(!1),e]),"optionalOrDisabled"),wr={check:Co(e=>e.minCapacity!==void 0&&e.maxCapacity!==void 0?e.minCapacity<=e.maxCapacity:!0,"check"),params:{message:d.CAPACITY_CONSTRAINT.MIN_LTE_MAX,path:["maxCapacity"]}},Po=Co(e=>s.number().int(d.MEMORY_LIMIT.INTEGER).min(e,e===128?d.MEMORY_LIMIT.MIN_128:d.MEMORY_LIMIT.MIN_512).max(30720,d.MEMORY_LIMIT.MAX),"memoryLimitMiBSchema"),F=s.string().min(1,d.REQUIRED.RESOURCE_NAME).max(63,d.MAX_LENGTH.RESOURCE_NAME).regex(j.RESOURCE_NAME,d.RESOURCE_NAME),ex=s.string().min(1,d.REQUIRED.BUCKET_NAME).max(63,d.MAX_LENGTH.BUCKET_NAME).regex(j.BUCKET_NAME,d.BUCKET_NAME),tx=s.string().min(1,d.REQUIRED.DATABASE_NAME).max(63,d.MAX_LENGTH.DATABASE_NAME).regex(j.DATABASE_NAME,d.DATABASE_NAME);function Kc(e,t=j.IDENTIFIER,n=d.IDENTIFIER){return s.string().min(2,d.IDENTIFIER_MIN_LENGTH).max(50,e).regex(t,n).refine(i=>!i.endsWith("-"),{message:d.IDENTIFIER_NO_TRAILING_HYPHEN}).refine(i=>!i.includes("--"),{message:d.IDENTIFIER_NO_CONSECUTIVE_HYPHENS})}Co(Kc,"identifierSchema");var fe=Kc(d.MAX_LENGTH.APP_NAME),BB=Kc(d.MAX_LENGTH.APP_NAME,j.NEW_APP_NAME,d.NEW_APP_NAME),Dr=s.number().int(d.PORT.INTEGER).min(VA,d.PORT.MIN).max(WA,d.PORT.MAX),Ae=s.object({key:s.string(),sourceText:s.string()}).strict(),UO=s.object({__identifier:s.string()}).strict(),FO=s.object({__expression:s.string()}).strict(),BO=s.object({__call:s.string()}).strict(),ZO=s.union([UO,FO,BO]),GO=s.union([s.string(),s.number(),s.boolean(),ZO]),qn=s.record(s.string().regex(j.ENV_VAR_NAME,d.ENV_VAR_NAME),GO),VO=s.object({id:s.string(),name:s.string().optional(),arn:s.string().optional(),field:s.string().optional()}).strict().refine(e=>e.name!==void 0!=(e.arn!==void 0),{message:"secretsImport requires exactly one of `name` or `arn`."}),rx=s.record(s.string(),VO),ZB=s.record(s.string(),s.unknown()),$h=s.enum($o).describe(`Application type must be one of: ${$o.join(", ")}`),Th=s.enum($t).describe(`OpenNext deployment pattern: ${$t.join(", ")}`),WO=s.enum(["before-imports","after-imports","after-app-init","after-tags","after-resource","end-of-file"]),KO=s.enum(["import","app-init","tags","database","compute","storage","network","messaging","cdn","pattern","vpc-peer","vpc-peer-accepter","cross-plan-connection","custom"]),nx=s.object({sourceText:s.string(),position:WO,afterManagedResource:s.object({type:KO,name:s.string().optional()}).strict().optional(),originalLine:s.number().int().optional(),leadingComments:s.array(s.string()).optional(),orphaned:s.boolean().optional(),orphanedComment:s.string().optional()}).strict(),ix=s.union([s.object({tier:s.enum(gt)}).strict(),s.literal(!1)]),ox=s.union([s.object({instanceType:s.string().optional()}).strict(),s.literal(!1)]),HO=Kc(d.MAX_LENGTH.ORGANISATION_NAME),YO=s.string().regex(j.EMAIL,d.EMAIL),QA=s.string().refine(e=>Lt.includes(e),{message:d.REGION}),GB=s.object({name:HO,email:YO,accountName:s.string().optional(),primaryRegion:QA.optional().default(On),secondaryRegions:s.array(QA).optional(),security:s.enum(ZA).optional(),force:s.boolean().optional()}).strict();function ko(e){return e.issues.map(t=>`${t.path.length>0?`${t.path.join(".")}: `:""}${t.message}`).join(`
+`)}catch{}}IO(NO,"writeDebugSync");var CO=Object.defineProperty,Wn=(e,t)=>CO(e,"name",{value:t,configurable:!0});function lh(e){return e.success===!0}Wn(lh,"isSuccess");function dh(e){return e.success===!1}Wn(dh,"isFailure");function C(e){return{success:!0,data:e}}Wn(C,"success");function I(e){return{success:!1,error:e}}Wn(I,"failure");async function mh(e){try{let t=await e();return C(t)}catch(t){return I(pt(t))}}Wn(mh,"tryAsync");function ph(e){try{let t=e();return C(t)}catch(t){return I(pt(t))}}Wn(ph,"trySync");var PO=Object.defineProperty,kO=(e,t)=>PO(e,"name",{value:t,configurable:!0}),MA=/^[a-zA-Z][a-zA-Z0-9-]*$/,OO=co.source.replace(/^\^|\$$/g,""),j=Object.freeze({IDENTIFIER:MA,NEW_APP_NAME:/^[a-z][a-z0-9-]*$/,RESOURCE_NAME:/^[a-zA-Z][a-zA-Z0-9]*$/,ECS_SERVICE_NAME:MA,BUCKET_NAME:/^[a-z][a-z0-9-]*[a-z0-9]$|^[a-z][a-z0-9]*$/,DATABASE_NAME:/^[a-zA-Z][a-zA-Z0-9_]*$/,RESOURCE_TYPE:/^[a-z]+(:[a-z]+)?$/,SSM_PATH:new RegExp(`^(?:/${OO})+$`),SECRET_NAME:lc,SSM_COMPONENT:co,EMAIL:/^[^\s@]+@[^\s@]+\.[^\s@]+$/,DOCKER_IMAGE:/^[a-z0-9][a-z0-9._-]*[a-z0-9](:[a-z0-9._-]+)?$/,DOMAIN:/^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)+$/i,HTTP_ORIGIN:/^https?:\/\/[a-z0-9.-]+(:\d+)?$/i,PASCAL_CASE:/^[A-Z][A-Za-z0-9]*$/,AWS_ACCOUNT_ID:/^\d{12}$/,VPC_ID:/^vpc-[a-z0-9]+$/,ROLE_ARN:/^arn:aws[a-zA-Z-]*:iam::\d{12}:role\/.+$/,CIDR:/^((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\.){3}(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\/(3[0-2]|[12]?\d)$/,SCHEDULE_EXPRESSION:/^(rate\(1 (?:minute|hour|day)\)|rate\((?:[2-9]|[1-9]\d+) (?:minutes|hours|days)\)|cron\([^\s()]+ [^\s()]+ [^\s()]+ [^\s()]+ [^\s()]+ [^\s()]+\))$/,LAMBDA_RUNTIME_IDENTIFIER:/^[A-Za-z0-9._-]+$/,ENV_VAR_NAME:/^[A-Za-z_][A-Za-z0-9_]*$/});function fh(e){let t=/^rate\((\d+) (minute|minutes|hour|hours|day|days)\)$/.exec(e);if(!t)return;let n=t[1],i=t[2];if(n===void 0||i===void 0)return;let r=parseInt(n,10);if(!Number.isFinite(r)||r<1)return;let o=i==="minute"||i==="hour"||i==="day";if(!(o&&r!==1)&&!(!o&&r===1))return i==="minute"||i==="minutes"?{everyMs:r*6e4}:i==="hour"||i==="hours"?{everyMs:r*60*6e4}:{everyMs:r*24*60*6e4}}kO(fh,"parseRateExpression");var d=Object.freeze({IDENTIFIER:"Must start with a letter, contain only letters, numbers, and hyphens",NEW_APP_NAME:"Must start with a lowercase letter and contain only lowercase letters, numbers, and hyphens",IDENTIFIER_MIN_LENGTH:"Must be at least 2 characters",IDENTIFIER_NO_TRAILING_HYPHEN:"Must not end with a hyphen",IDENTIFIER_NO_CONSECUTIVE_HYPHENS:"Must not contain consecutive hyphens",RESOURCE_NAME:"Must start with a letter and contain only letters and numbers (PascalCase recommended)",ECS_SERVICE_NAME:"Service name must start with a letter and contain only letters, numbers, and hyphens",BUCKET_NAME:"Bucket name must start with a lowercase letter and contain only lowercase letters, numbers, and hyphens",DATABASE_NAME:"Database name must start with a letter and contain only letters, numbers, and underscores",RESOURCE_TYPE:"Resource type must be in format 'category' or 'category:type'",SSM_PATH:"SSM path must start with / and contain valid namespace segments (e.g., /myapp/ApiCluster/service)",SECRET_NAME:lg,SSM_COMPONENT:dc,EMAIL:"Please enter a valid email address",DOMAIN:"Please enter a valid domain (e.g., cms.example.com)",DOCKER_IMAGE:"Invalid Docker image name format",REQUIRED:{APP_NAME:"Application name is required",RESOURCE_NAME:"Resource name is required",BUCKET_NAME:"Bucket name is required",SERVICE_NAME:"Service name is required",NETWORK_NAME:"Network name is required",DATABASE_NAME:"Database name is required",ORGANISATION_NAME:"Organisation name is required",EMAIL:"Email is required",NAME:"Name is required",USERNAME:"Username is required",CONTAINER_NAME:"Container name is required",GROUP:"Group is required",PATTERN_NAME:"Pattern name is required",SOURCE:"Source directory is required",BUILD_COMMAND:"Build command is required",OUTPUT_DIR:"Output directory is required",FORMS_TO:"Forms recipient address is required",ROUTING_PATH:"Routing path is required",RESOURCE_REFERENCE:"Resource reference is required",RESOURCE_TYPE:"Resource type is required",VARIANT:"Variant is required",SUBTYPE:"Subtype is required",DEPLOY_TARGET:"Deploy target is required",DESTROY_TARGET:"Destroy target is required"},MAX_LENGTH:{APP_NAME:"Application name must be 50 characters or less",RESOURCE_NAME:"Resource name must be 63 characters or less",BUCKET_NAME:"Bucket name must be 63 characters or less",SERVICE_NAME:"Service name must be 255 characters or less",NETWORK_NAME:"Network name must be 50 characters or less",DATABASE_NAME:"Database name must be 63 characters or less",ORGANISATION_NAME:"Organisation name must be 50 characters or less"},PORT:{INTEGER:"Port must be an integer",MIN:"Port must be at least 1",MAX:"Port cannot exceed 65535"},USERNAME:{MAX_LENGTH:"Username cannot exceed 63 characters"},LAMBDA:{MEMORY:{INTEGER:"Lambda memory must be an integer",MIN:"Memory must be at least 128 MB",MAX:"Memory cannot exceed 10240 MB",MULTIPLE:"Memory must be 128 MB or a multiple of 64 MB"},TIMEOUT:{INTEGER:"Timeout must be an integer",MIN:"Timeout must be at least 1 second",MAX:"Timeout cannot exceed 900 seconds"},RUNTIME:"Lambda runtime must contain only letters, digits, dots, underscores, or dashes (e.g. 'NODEJS_20_X' or 'nodejs20.x')"},ENV_VAR_NAME:"Environment variable names must start with a letter or underscore and contain only letters, digits, and underscores",PRIORITY:{INTEGER:"Priority must be an integer",MIN:"Priority must be at least 1",MAX:"Priority cannot exceed 50000"},CAPACITY:{MIN:{INTEGER:"Minimum capacity must be an integer",MIN_0:"Minimum capacity must be at least 0",MIN_1:"Minimum capacity must be at least 1",MAX:"Minimum capacity cannot exceed 100"},MAX:{INTEGER:"Maximum capacity must be an integer",MIN_0:"Maximum capacity must be at least 0",MIN_1:"Maximum capacity must be at least 1",MAX:"Maximum capacity cannot exceed 100"},DESIRED:{INTEGER:"Desired count must be an integer",MIN:"Desired count must be at least 0",MAX:"Desired count cannot exceed 100"},WARM_POOL_REQUIRED:"minCapacity 0 requires a warmPool \u2014 without it, new tasks wait 60-90s for a cold instance launch",WARM_POOL:{MIN_SIZE:{INTEGER:"Warm pool minSize must be an integer",MIN:"Warm pool minSize must be at least 0",MAX:"Warm pool minSize cannot exceed 100"},MIN_SIZE_EXCEEDS_MAX_CAPACITY:"warmPool.minSize cannot exceed maxCapacity \u2014 the warm pool cannot hold more instances than the ASG allows"}},MEMORY_LIMIT:{INTEGER:"Memory limit must be an integer",MIN_512:"Memory limit must be at least 512 MiB",MIN_128:"Memory limit must be at least 128 MiB",MAX:"Memory limit cannot exceed 30720 MiB"},DATABASE:{PORT:{INTEGER:"Database port must be an integer",MIN:"Database port must be at least 1024",MAX:"Database port cannot exceed 65535"},NAME:{REQUIRED:"Database name is required",MAX_LENGTH:"Database name must be 63 characters or less"}},BACKUP_RETENTION:{INTEGER:"Backup retention must be an integer",MIN:"Backup retention must be at least 1 day",MAX:"Backup retention cannot exceed 35 days"},SQS:{VISIBILITY_TIMEOUT:{INTEGER:"Visibility timeout must be an integer",MIN:"Visibility timeout must be at least 0 seconds",MAX:"Visibility timeout cannot exceed 43200 seconds (12 hours)"},RETENTION_PERIOD:{INTEGER:"Retention period must be an integer",MIN:"Retention period must be at least 60 seconds",MAX:"Retention period cannot exceed 1209600 seconds (14 days)"}},READER:{COUNT:{INTEGER:"Reader count must be an integer",MIN:"Reader count must be at least 0",MAX:"Reader count cannot exceed 15"}},IDENTIFIER_SUFFIX:{REQUIRED:"Identifier suffix is required when specified",MAX_LENGTH:"Identifier suffix cannot exceed 50 characters"},ROTATION:{INTEGER:"Rotation days must be an integer",MIN:"Rotation interval must be at least 1 day",MAX:"Rotation interval cannot exceed 365 days"},MAX_CONNECTIONS:{INTEGER:"Max connections must be an integer",MIN:"Max connections must be at least 1",MAX:"Max connections cannot exceed 100"},MONITORING_INTERVAL:{INTEGER:"Monitoring interval must be an integer",MIN:"Monitoring interval must be at least 0",MAX:"Monitoring interval cannot exceed 60 seconds",VALUES:"Monitoring interval must be 0, 1, 5, 10, 15, 30, or 60 seconds"},RETENTION_DAYS:{INTEGER:"Retention days must be an integer",MIN:"Retention days must be at least 1",MAX:"Retention days cannot exceed 365"},BATCH_SIZE:{INTEGER:"Batch size must be an integer",MIN:"Batch size must be at least 1",MAX:"Batch size cannot exceed 10000"},SERVICE:{UNIQUE_WITHIN_CLUSTER:"Service names must be unique within a cluster",MIN_REQUIRED:"At least one service is required",ROUTING_REQUIRED:"Multiple services with ports require routing config (path or host)"},PROXY_CONFIG:{MAX_IDLE_CONNECTIONS:{INTEGER:"Max idle connections must be an integer",MIN:"Max idle connections must be at least 0",MAX:"Max idle connections cannot exceed 100"},BORROW_TIMEOUT:{INTEGER:"Connection borrow timeout must be an integer",MIN:"Connection borrow timeout must be at least 1 second",MAX:"Connection borrow timeout cannot exceed 3600 seconds"}},MAX_AZS:{INTEGER:"Max AZs must be an integer",MIN:"Max AZs must be at least 1",MAX:"Max AZs cannot exceed 3"},BATCHING_WINDOW:{INTEGER:"Max batching window must be an integer",MIN:"Max batching window must be at least 0",MAX:"Max batching window cannot exceed 300 seconds"},HEALTH_CHECK:{INTERVAL:{INTEGER:"Health check interval must be an integer",MIN:"Health check interval must be at least 5 seconds",MAX:"Health check interval cannot exceed 300 seconds"},TIMEOUT:{INTEGER:"Health check timeout must be an integer",MIN:"Health check timeout must be at least 2 seconds",MAX:"Health check timeout cannot exceed 60 seconds"},RETRIES:{INTEGER:"Health check retries must be an integer",MIN:"Health check retries must be at least 1",MAX:"Health check retries cannot exceed 10"},START_PERIOD:{INTEGER:"Health check start period must be an integer",MIN:"Health check start period must be at least 0 seconds",MAX:"Health check start period cannot exceed 300 seconds"}},EPHEMERAL_STORAGE:{INTEGER:"Ephemeral storage size must be an integer",MIN:"Ephemeral storage size must be at least 512 MB",MAX:"Ephemeral storage size cannot exceed 10240 MB"},MAX_MESSAGE_SIZE:{INTEGER:"Max message size must be an integer",MIN:"Max message size must be at least 1024 bytes",MAX:"Max message size cannot exceed 262144 bytes (256 KB)"},CAPACITY_CONSTRAINT:{MIN_LTE_MAX:"minCapacity must be less than or equal to maxCapacity"},DIRECT_ACCESS:{NO_DOMAIN:"directAccess cannot be used with domain (no ALB for HTTPS)",NO_LOAD_BALANCER:"directAccess cannot be used with loadBalancer (mutually exclusive)"},GLOBAL_AURORA:{PRIMARY_REGION_REQUIRED:"primaryRegion is required for GlobalAurora databases"},NAT_GATEWAY:{INTEGER:"NAT gateway count must be an integer",MIN:"NAT gateway count must be at least 0",MAX:"NAT gateway count cannot exceed 3"},CIDR_MASK:{INTEGER:"CIDR mask must be an integer",MIN:"CIDR mask must be at least 16",MAX:"CIDR mask cannot exceed 28"},CPU:{INTEGER:"CPU must be an integer",MIN:"CPU must be at least 256 units",MAX:"CPU cannot exceed 4096 units"},KMS:{KEY_REQUIRED:"KMS key ARN is required when using KMS encryption"},READER_INSTANCES:{MAX:"Cannot have more than 15 reader instances",COUNT_OR_INSTANCES:"Cannot specify both 'count' and 'instances' - use one or the other"},GENERATOR_CAPACITY:{MIN:{MIN:"Minimum capacity must be at least 1",MAX:"Minimum capacity cannot exceed 1000"},MAX:{MIN:"Maximum capacity must be at least 1",MAX:"Maximum capacity cannot exceed 1000"}},INSTANCE_TYPE:"Unknown instance type. Common types include: t4g.micro, t4g.small, m5.large",ARCHITECTURE_MISMATCH:"Architecture mismatch between instance type and AMI",ALLOCATED_STORAGE:{INTEGER:"Allocated storage must be an integer",MIN:"Allocated storage must be at least 20 GB",MAX:"Allocated storage cannot exceed 65536 GB"},DLQ:{MAX_RECEIVE_COUNT:{INTEGER:"Max receive count must be an integer",MIN:"Max receive count must be at least 1",MAX:"Max receive count cannot exceed 1000"}},ALARM:{PERCENTAGE:{MIN:"Threshold must be at least 1%",MAX:"Threshold must be at most 100%"},FREE_STORAGE_GIB:{MIN:"Free storage threshold must be at least 1 GiB"}},REGION:"Invalid AWS region",PASCAL_CASE:"Resource name must start with an uppercase letter and contain only alphanumerics (PascalCase).",IMAGE_DOCKER_MUTEX:"image and docker are mutually exclusive",AWS_ACCOUNT_ID:"AWS account id must be exactly 12 digits (no hyphens)",VPC_ID:"VPC id must look like vpc-abc12345",ROLE_ARN:"Role ARN must have the form arn:aws:iam::<account-id>:role/<name>",CIDR:"CIDR must be in dotted-quad/prefix-length form (e.g. 10.0.0.0/16)",VPC_PEER:{MIN_REQUESTER_ACCOUNTS:"At least one requester account id is required",REGION_REQUIRED:"Peer region is required when specified",ROUTE_TABLE_ID_REQUIRED:"Route table id must not be empty"},SCHEDULE_EXPRESSION:"Schedule expression must be 'rate(N minute|minutes|hour|hours|day|days)' with N>=1, or 'cron(<6-field AWS expression>)'"});var wO=Object.defineProperty,rt=(e,t)=>wO(e,"name",{value:t,configurable:!0}),DO=["us-east-2","us-west-2","us-east-1","eu-west-1","eu-central-1","ap-southeast-1"],MO=Object.freeze(DO.flatMap(e=>{let t=wn(e);return t?[t]:[]})),gh=Object.freeze(["us-east-2","us-west-2","us-east-1","eu-west-1","ap-southeast-1"]);function Dc(e){return e?e.split(",").map(t=>t.trim()).filter(Boolean):[]}rt(Dc,"parseRegionList");function hh(e){return Lt.includes(e)}rt(hh,"isValidRegion");function vh(e){return/^[a-z]{2}-[a-z]+-[1-9]$/.test(e)}rt(vh,"isValidRegionFormat");function bh(e){if(!e)return gh.slice(0,3);let t=e.toLowerCase().split("-"),n=t[0],i=t.length>1?t[1]:"",r=[];return n&&i&&(r=Lt.filter(o=>o.startsWith(`${n}-${i}`))),r.length===0&&n&&(r=Lt.filter(o=>o.startsWith(`${n}-`))),r.length>0?r.slice(0,3):gh.slice(0,3)}rt(bh,"getSuggestions");function yh(e){if(hh(e))return!0;let t=bh(e);return vh(e)?`Unknown region. Try: ${t.join(", ")}`:`Invalid format. Try: ${t.join(", ")}`}rt(yh,"validateRegion");function jA(e){if(!e||e.trim()==="")return!0;let t=Dc(e);for(let n of t){let i=yh(n);if(i!==!0)return i}return!0}rt(jA,"validateRegionList");function Sh(e,t){return e.filter(n=>n!==t)}rt(Sh,"filterDuplicateRegions");function _h(e){return{label:e.city,value:e.code,description:e.optIn?`${e.code} \u2014 opt-in required`:e.code}}rt(_h,"toRegionOption");function zA(){return Qe.map(_h)}rt(zA,"getRegionOptions");function LA(e){return Qe.filter(t=>t.code!==e).map(_h)}rt(LA,"getRegionOptionsExcluding");function UA(e){let t=Qe.find(n=>n.code===e);return t?t.city:e}rt(UA,"getRegionName");function FA(e){return t=>{let n=Dc(t);return Sh(n,e)}}rt(FA,"createRegionFormatter");var Mc="7.1.0";var jc=["Aurora","Instance","GlobalAurora","ClickHouse"],Kn=["FARGATE","FARGATE_SPOT","EC2"],gt=["standard","resilient","enterprise"],zc=["tinkerer","lightweight","standard","resilient","enterprise"],Eh="custom",$o=[...zc,Eh];var jO=Object.defineProperty,zO=(e,t)=>jO(e,"name",{value:t,configurable:!0}),CB=Object.freeze({RESOURCE_SUFFIXES:Object.freeze({storage:"Storage",database:"Database",cluster:"Cluster",function:"Function",instance:"Instance",compute:"Compute"})}),To=["ecs","lambda","ec2"],Hn=Object.freeze({ECS:"ecs",LAMBDA:"lambda",EC2:"ec2"}),Lc=["code","container"],Ro=Object.freeze({CODE:"code",CONTAINER:"container"}),Uc=["ARM_64","X86_64"],BA="ARM_64",No=["NONE","AWS_IAM"],Fc=["public","internal"],Bc=["CPU","MEMORY"],Zc=["ARM","STANDARD"],Ah=["Instance","Aurora"],Yn=["postgresql","mysql"],ZA=["foundation","compliance","hardened"];var Gc=["t3.nano","t3.micro","t3.small","t3.medium","t3.large","t3.xlarge","t3.2xlarge","t3a.nano","t3a.micro","t3a.small","t3a.medium","t3a.large","t3a.xlarge","t3a.2xlarge","t4g.nano","t4g.micro","t4g.small","t4g.medium","t4g.large","t4g.xlarge","t4g.2xlarge","c5.large","c5.xlarge","c5.2xlarge","c5.4xlarge","c5.9xlarge","c5.12xlarge","c5.18xlarge","c5.24xlarge","c5a.large","c5a.xlarge","c5a.2xlarge","c5a.4xlarge","c5a.8xlarge","c5a.12xlarge","c5a.16xlarge","c5a.24xlarge","c6g.medium","c6g.large","c6g.xlarge","c6g.2xlarge","c6g.4xlarge","c6g.8xlarge","c6g.12xlarge","c6g.16xlarge","r5.large","r5.xlarge","r5.2xlarge","r5.4xlarge","r5.8xlarge","r5.12xlarge","r5.16xlarge","r5.24xlarge","r5a.large","r5a.xlarge","r5a.2xlarge","r5a.4xlarge","r5a.8xlarge","r5a.12xlarge","r5a.16xlarge","r5a.24xlarge","r6g.medium","r6g.large","r6g.xlarge","r6g.2xlarge","r6g.4xlarge","r6g.8xlarge","r6g.12xlarge","r6g.16xlarge","i3.large","i3.xlarge","i3.2xlarge","i3.4xlarge","i3.8xlarge","i3.16xlarge","p3.2xlarge","p3.8xlarge","p3.16xlarge","g4dn.xlarge","g4dn.2xlarge","g4dn.4xlarge","g4dn.8xlarge","g4dn.12xlarge","g4dn.16xlarge","m5.large","m5.xlarge","m5.2xlarge","m5.4xlarge","m5.8xlarge","m5.12xlarge","m5.16xlarge","m5.24xlarge","m5a.large","m5a.xlarge","m5a.2xlarge","m5a.4xlarge","m5a.8xlarge","m5a.12xlarge","m5a.16xlarge","m5a.24xlarge"],GA=[0,1,5,10,15,30,60];function nt(e,t){return e.includes(t)}zO(nt,"constIncludes");var VA=1,WA=65535,DB=Object.freeze({postgresql:5432,mysql:3306}),KA=128,HA=10240,Vc=1,Wc=900,xh=1,Ih=1e3,Xn=100,YA=100;var XA=3e3;var JA=["GET","POST","PUT","DELETE","HEAD","OPTIONS","PATCH"],qA=["standard","assets","upload","website"],Jn=["AES256","KMS"];var LO=Object.defineProperty,Co=(e,t)=>LO(e,"name",{value:t,configurable:!0}),Be=Co(e=>s.union([s.literal(!1),e]),"optionalOrDisabled"),wr={check:Co(e=>e.minCapacity!==void 0&&e.maxCapacity!==void 0?e.minCapacity<=e.maxCapacity:!0,"check"),params:{message:d.CAPACITY_CONSTRAINT.MIN_LTE_MAX,path:["maxCapacity"]}},Po=Co(e=>s.number().int(d.MEMORY_LIMIT.INTEGER).min(e,e===128?d.MEMORY_LIMIT.MIN_128:d.MEMORY_LIMIT.MIN_512).max(30720,d.MEMORY_LIMIT.MAX),"memoryLimitMiBSchema"),F=s.string().min(1,d.REQUIRED.RESOURCE_NAME).max(63,d.MAX_LENGTH.RESOURCE_NAME).regex(j.RESOURCE_NAME,d.RESOURCE_NAME),ex=s.string().min(1,d.REQUIRED.BUCKET_NAME).max(63,d.MAX_LENGTH.BUCKET_NAME).regex(j.BUCKET_NAME,d.BUCKET_NAME),tx=s.string().min(1,d.REQUIRED.DATABASE_NAME).max(63,d.MAX_LENGTH.DATABASE_NAME).regex(j.DATABASE_NAME,d.DATABASE_NAME);function Kc(e,t=j.IDENTIFIER,n=d.IDENTIFIER){return s.string().min(2,d.IDENTIFIER_MIN_LENGTH).max(50,e).regex(t,n).refine(i=>!i.endsWith("-"),{message:d.IDENTIFIER_NO_TRAILING_HYPHEN}).refine(i=>!i.includes("--"),{message:d.IDENTIFIER_NO_CONSECUTIVE_HYPHENS})}Co(Kc,"identifierSchema");var fe=Kc(d.MAX_LENGTH.APP_NAME),BB=Kc(d.MAX_LENGTH.APP_NAME,j.NEW_APP_NAME,d.NEW_APP_NAME),Dr=s.number().int(d.PORT.INTEGER).min(VA,d.PORT.MIN).max(WA,d.PORT.MAX),Ae=s.object({key:s.string(),sourceText:s.string()}).strict(),UO=s.object({__identifier:s.string()}).strict(),FO=s.object({__expression:s.string()}).strict(),BO=s.object({__call:s.string()}).strict(),ZO=s.union([UO,FO,BO]),GO=s.union([s.string(),s.number(),s.boolean(),ZO]),qn=s.record(s.string().regex(j.ENV_VAR_NAME,d.ENV_VAR_NAME),GO),VO=s.object({id:s.string(),name:s.string().optional(),arn:s.string().optional(),field:s.string().optional()}).strict().refine(e=>e.name!==void 0!=(e.arn!==void 0),{message:"secretsImport requires exactly one of `name` or `arn`."}),rx=s.record(s.string(),VO),ZB=s.record(s.string(),s.unknown()),$h=s.enum($o).describe(`Application type must be one of: ${$o.join(", ")}`),Th=s.enum($t).describe(`OpenNext deployment pattern: ${$t.join(", ")}`),WO=s.enum(["before-imports","after-imports","after-app-init","after-tags","after-resource","end-of-file"]),KO=s.enum(["import","app-init","tags","database","compute","storage","network","messaging","cdn","pattern","vpc-peer","vpc-peer-accepter","cross-plan-connection","custom"]),nx=s.object({sourceText:s.string(),position:WO,afterManagedResource:s.object({type:KO,name:s.string().optional()}).strict().optional(),originalLine:s.number().int().optional(),leadingComments:s.array(s.string()).optional(),orphaned:s.boolean().optional(),orphanedComment:s.string().optional()}).strict(),ix=s.union([s.object({tier:s.enum(gt)}).strict(),s.literal(!1)]),ox=s.union([s.object({instanceType:s.string().optional()}).strict(),s.literal(!1)]),HO=Kc(d.MAX_LENGTH.ORGANISATION_NAME),YO=s.string().regex(j.EMAIL,d.EMAIL),QA=s.string().refine(e=>Lt.includes(e),{message:d.REGION}),GB=s.object({name:HO,email:YO,accountName:s.string().optional(),primaryRegion:QA.optional().default(On),secondaryRegions:s.array(QA).optional(),security:s.enum(ZA).optional(),force:s.boolean().optional()}).strict();function ko(e){return e.issues.map(t=>`${t.path.length>0?`${t.path.join(".")}: `:""}${t.message}`).join(`
 `)}Co(ko,"getZodErrorMessage");var Qn=s.number().min(1,d.ALARM.PERCENTAGE.MIN).max(100,d.ALARM.PERCENTAGE.MAX),XO=s.number().min(1,d.ALARM.FREE_STORAGE_GIB.MIN),ax=s.union([s.literal(!1),s.object({cpuThreshold:Qn.optional(),memoryThreshold:Qn.optional(),runningTasksMinimum:s.number().int().min(0).optional(),http5xxThreshold:Qn.optional()}).strict()]),sx=s.union([s.literal(!1),s.object({cpuThreshold:Qn.optional(),freeStorageThresholdGiB:XO.optional(),connectionsThreshold:s.number().int().min(1).optional()}).strict()]),cx=s.union([s.literal(!1),s.object({errorRateThreshold:Qn.optional(),durationThresholdPercent:Qn.optional()}).strict()]);var Ut=s.number().int(d.BACKUP_RETENTION.INTEGER).min(1,d.BACKUP_RETENTION.MIN).max(35,d.BACKUP_RETENTION.MAX),Oo=s.number().int(d.MONITORING_INTERVAL.INTEGER).refine(e=>nt(GA,e),{message:d.MONITORING_INTERVAL.VALUES}),Yc=s.number().int(d.DATABASE.PORT.INTEGER).min(1024,d.DATABASE.PORT.MIN).max(65535,d.DATABASE.PORT.MAX),JO=s.enum(jc).describe(`Database type must be one of: ${jc.join(", ")}`),qO=s.object({maxConnections:s.number().int(d.MAX_CONNECTIONS.INTEGER).min(1,d.MAX_CONNECTIONS.MIN).max(100,d.MAX_CONNECTIONS.MAX).optional(),maxIdleConnections:s.number().int(d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.INTEGER).min(0,d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MIN).max(100,d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MAX).optional(),connectionBorrowTimeout:s.number().int(d.PROXY_CONFIG.BORROW_TIMEOUT.INTEGER).min(1,d.PROXY_CONFIG.BORROW_TIMEOUT.MIN).max(3600,d.PROXY_CONFIG.BORROW_TIMEOUT.MAX).optional(),requireTLS:s.boolean().optional()}).strict().describe("RDS Proxy configuration"),QO=s.object({instanceType:s.string().optional(),availabilityZone:s.string().optional()}).strict().describe("Read replica configuration"),ew=s.object({automaticallyAfterDays:s.number().int(d.ROTATION.INTEGER).min(1,d.ROTATION.MIN).max(365,d.ROTATION.MAX).optional()}).strict().describe("Secret rotation configuration"),Xc=s.object({username:s.string().min(1,d.REQUIRED.USERNAME).max(63,d.USERNAME.MAX_LENGTH).optional(),secretRotation:ew.optional()}).strict().describe("Database credentials configuration"),Jc=Be(qO),qc=Be(QO),tw=s.object({scaleWithWriter:s.boolean().optional(),enableDatabaseInsights:s.boolean().optional(),identifierSuffix:s.string().min(1,d.IDENTIFIER_SUFFIX.REQUIRED).max(50,d.IDENTIFIER_SUFFIX.MAX_LENGTH).optional(),availabilityZone:s.string().optional()}).strict().describe("Configuration for a single Aurora reader instance"),wo=s.object({enableDatabaseInsights:s.boolean().optional(),identifierSuffix:s.string().min(1,d.IDENTIFIER_SUFFIX.REQUIRED).max(50,d.IDENTIFIER_SUFFIX.MAX_LENGTH).optional(),availabilityZone:s.string().optional()}).strict().describe("Configuration for Aurora writer instance"),rw=s.object({count:s.number().int(d.READER.COUNT.INTEGER).min(0,d.READER.COUNT.MIN).max(15,d.READER.COUNT.MAX).optional(),instances:s.array(tw).max(15,d.READER_INSTANCES.MAX).optional(),defaultEnableDatabaseInsights:s.boolean().optional()}).strict().refine(e=>!(e.count!==void 0&&e.instances!==void 0),{message:d.READER_INSTANCES.COUNT_OR_INSTANCES,path:["count"]}).describe("Aurora readers configuration"),Do=Be(rw),nw=s.object({awsManaged:s.literal(!0)}).strict(),iw=s.object({useCMK:s.literal(!0)}).strict(),ux=s.union([nw,iw]),ow=s.object({mode:s.enum(["standard","advanced"]).optional(),encryptionKey:ux.optional()}).strict().describe("Database Insights configuration"),Qc=Be(ow),eu=s.object({storageKey:ux.optional()}).strict().describe("Encryption configuration (DESTRUCTIVE to change storageKey)"),lx=s.object({name:F,type:JO,databaseName:s.string().min(1,d.REQUIRED.DATABASE_NAME),instanceType:s.string().optional(),allocatedStorage:s.number().optional(),multiAz:s.boolean().optional(),publiclyAccessible:s.boolean().optional(),databaseInsights:Qc.optional(),port:Yc.optional(),deletionProtection:s.boolean().optional(),proxy:Jc.optional(),credentials:Xc.optional(),readReplica:qc.optional(),encryption:eu.optional(),writer:wo.optional(),readers:Do.optional(),backupRetention:Ut.optional(),preferredMaintenanceWindow:s.string().optional(),monitoringInterval:Oo.optional(),primaryRegion:s.string().optional(),secondaryRegions:s.array(s.string()).optional(),globalClusterIdentifier:s.string().optional(),enableGlobalWriteForwarding:s.boolean().optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional(),databaseEngine:s.enum(Yn).optional(),engineExpression:s.string().optional(),variableName:s.string().optional(),extraProperties:s.array(Ae).optional(),alarms:sx.optional()}).strict(),tu=s.object({appName:fe,nameProvidedByFlag:s.boolean().optional(),databaseName:s.string().min(1,d.REQUIRED.DATABASE_NAME).max(63,d.MAX_LENGTH.DATABASE_NAME).regex(j.DATABASE_NAME,d.DATABASE_NAME),resourceName:F.optional(),connectionConfig:s.object({connectToCompute:s.array(s.string()).optional(),connectToServices:s.array(s.string()).optional()}).strict().optional(),databaseInsights:Qc.optional(),port:Yc.optional(),proxy:Jc.optional(),credentials:Xc.optional(),encryption:eu.optional(),deletionProtection:s.boolean().optional()}).strict(),dx={databaseType:s.literal("Instance"),instanceType:s.string().optional(),multiAz:s.boolean().optional(),readReplica:qc.optional(),publiclyAccessible:s.boolean().optional(),backupRetention:Ut.optional(),allocatedStorage:s.number().optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()},mx={databaseType:s.literal("Aurora"),writer:wo.optional(),readers:Do.optional(),backupRetention:Ut.optional(),preferredMaintenanceWindow:s.string().optional(),monitoringInterval:Oo.optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()},px={databaseType:s.literal("GlobalAurora"),primaryRegion:s.string().min(1,d.GLOBAL_AURORA.PRIMARY_REGION_REQUIRED),secondaryRegions:s.array(s.string()).optional(),globalClusterIdentifier:s.string().optional(),enableGlobalWriteForwarding:s.boolean().optional(),writer:wo.optional(),readers:Do.optional(),backupRetention:Ut.optional(),preferredMaintenanceWindow:s.string().optional(),monitoringInterval:Oo.optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()},fx=s.object({appName:fe,nameProvidedByFlag:s.boolean().optional(),databaseName:s.string().min(1,d.REQUIRED.DATABASE_NAME).max(63,d.MAX_LENGTH.DATABASE_NAME).regex(j.DATABASE_NAME,d.DATABASE_NAME),resourceName:F.optional(),connectionConfig:s.object({connectToCompute:s.array(s.string()).optional(),connectToServices:s.array(s.string()).optional()}).strict().optional()}).strict(),gx={databaseType:s.literal("ClickHouse"),instanceType:s.string().optional(),coldTier:s.union([s.object({mode:s.literal("s3")}).strict(),s.literal(!1)]).optional(),optimiseSchedule:s.union([s.string(),s.literal(!1)]).optional(),backupSchedule:s.union([s.string(),s.literal(!1)]).optional(),backupRetentionDays:Ut.optional()},aw=tu.extend(dx).strict(),sw=tu.extend(mx).strict(),cw=tu.extend(px).strict(),uw=fx.extend(gx).strict(),eZ=s.discriminatedUnion("databaseType",[aw,sw,cw,uw]),Rh=tu.extend({resourceName:F}).strict(),lw=Rh.extend(dx).strict(),dw=Rh.extend(mx).strict(),mw=Rh.extend(px).strict(),pw=fx.extend({resourceName:F}).strict(),fw=pw.extend(gx).strict(),tZ=s.discriminatedUnion("databaseType",[lw,dw,mw,fw]),rZ=s.object({appName:fe,databaseName:s.string().min(1,d.REQUIRED.DATABASE_NAME),maxConnections:s.number().int(d.MAX_CONNECTIONS.INTEGER).min(1,d.MAX_CONNECTIONS.MIN).max(100,d.MAX_CONNECTIONS.MAX).optional(),maxIdleConnections:s.number().int(d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.INTEGER).min(0,d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MIN).max(100,d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MAX).optional(),connectionBorrowTimeout:s.number().int(d.PROXY_CONFIG.BORROW_TIMEOUT.INTEGER).min(1,d.PROXY_CONFIG.BORROW_TIMEOUT.MIN).max(3600,d.PROXY_CONFIG.BORROW_TIMEOUT.MAX).optional(),requireTLS:s.boolean().optional(),nameProvidedByFlag:s.boolean().optional()}).strict(),gw=["S","N","B"],Hc=s.object({name:s.string(),type:s.enum(gw)}).strict(),hx=s.object({name:F,partitionKey:Hc,sortKey:Hc.optional(),globalSecondaryIndexes:s.array(s.object({indexName:s.string(),partitionKey:Hc,sortKey:Hc.optional()}).strict()).optional(),ttlAttribute:s.string().optional(),stream:s.boolean().optional(),variableName:s.string().optional(),extraProperties:s.array(Ae).optional()}).strict(),hw=s.object({mode:s.literal("s3")}).strict(),vx=s.object({name:F,type:s.literal("ClickHouse"),databaseName:tx,instanceType:s.string().optional(),coldTier:s.union([hw,s.literal(!1)]).optional(),optimiseSchedule:s.union([s.string(),s.literal(!1)]).optional(),backupSchedule:s.union([s.string(),s.literal(!1)]).optional(),backupRetentionDays:Ut.optional(),variableName:s.string().optional(),extraProperties:s.array(Ae).optional()}).strict();var vw=s.object({count:s.number().int(d.NAT_GATEWAY.INTEGER).min(0,d.NAT_GATEWAY.MIN).max(3,d.NAT_GATEWAY.MAX).optional()}).strict().describe("NAT gateway configuration"),bx=Be(vw),Nh=s.enum(["cloudwatch","s3"]),bw=s.object({destination:Nh.optional(),retentionDays:s.number().int(d.RETENTION_DAYS.INTEGER).min(1,d.RETENTION_DAYS.MIN).max(365,d.RETENTION_DAYS.MAX).optional(),trafficType:s.enum(["ALL","ACCEPT","REJECT"]).optional()}).strict().describe("VPC flow log configuration"),yx=Be(bw),yw=s.object({s3:s.boolean().optional(),dynamodb:s.boolean().optional()}).strict().describe("Gateway VPC endpoints (FREE)"),Sw=Be(yw),_w=s.object({ecr:s.boolean().optional(),secretsManager:s.boolean().optional(),kms:s.boolean().optional(),cloudwatchLogs:s.boolean().optional(),ssm:s.boolean().optional(),sts:s.boolean().optional()}).strict().describe("Interface VPC endpoints (cost per hour)"),Ew=Be(_w),Aw=s.object({gateway:Sw.optional(),interface:Ew.optional()}).strict().describe("VPC endpoints configuration"),Sx=Be(Aw),ru=s.object({maxAzs:s.number().int(d.MAX_AZS.INTEGER).min(1,d.MAX_AZS.MIN).max(3,d.MAX_AZS.MAX).optional(),natGateways:bx.optional(),flowLogs:yx.optional(),vpcEndpoints:Sx.optional(),cidrMask:s.number().int(d.CIDR_MASK.INTEGER).min(16,d.CIDR_MASK.MIN).max(28,d.CIDR_MASK.MAX).optional()}).strict(),_x=s.string().min(1,d.REQUIRED.NETWORK_NAME).max(50,d.MAX_LENGTH.NETWORK_NAME).regex(j.RESOURCE_NAME,d.RESOURCE_NAME),Ex=ru.extend({name:_x}).strict(),Ax=Be(ru),xx=s.object({appName:fe,networkName:_x.optional(),maxAzs:s.number().int(d.MAX_AZS.INTEGER).min(1,d.MAX_AZS.MIN).max(3,d.MAX_AZS.MAX).optional(),natGateways:bx.optional(),flowLogs:yx.optional(),vpcEndpoints:Sx.optional()}).strict(),xw=j.CIDR,Ch=s.string().regex(xw,d.CIDR),Iw=s.object({kind:s.literal("database"),resource:s.string().min(1,d.REQUIRED.RESOURCE_REFERENCE),name:F,allowedFromCidrs:s.array(Ch),access:s.enum(["read","write","readWrite"]).optional()}).strict(),$w=s.object({kind:s.literal("ecsService"),resource:s.string().min(1,d.REQUIRED.RESOURCE_REFERENCE),serviceName:s.string().min(1,d.REQUIRED.SERVICE_NAME),name:F,allowedFromCidrs:s.array(Ch),port:Dr.optional()}).strict(),Tw=s.discriminatedUnion("kind",[Iw,$w]),sZ=s.object({name:F,peerAppName:s.string().min(1,d.REQUIRED.APP_NAME),peerAccountId:s.string().regex(j.AWS_ACCOUNT_ID,d.AWS_ACCOUNT_ID),peerRegion:s.string().min(1,d.VPC_PEER.REGION_REQUIRED).optional(),peerVpcId:s.string().regex(j.VPC_ID,d.VPC_ID).optional(),peerVpcCidr:Ch.optional(),peerRoleArn:s.string().regex(j.ROLE_ARN,d.ROLE_ARN).optional(),peerRouteTableIds:s.array(s.string().min(1,d.VPC_PEER.ROUTE_TABLE_ID_REQUIRED)).optional(),localVpcName:s.string().min(1,d.REQUIRED.NETWORK_NAME).optional(),enableDnsResolution:s.boolean().optional()}).strict(),cZ=s.object({name:F,requesterAccountIds:s.array(s.string().regex(j.AWS_ACCOUNT_ID,d.AWS_ACCOUNT_ID)).min(1,d.VPC_PEER.MIN_REQUESTER_ACCOUNTS),localVpcName:s.string().min(1,d.REQUIRED.NETWORK_NAME).optional(),publishToSsm:s.boolean().optional(),exposedResources:s.array(Tw).optional()}).strict();var nu=["storage","cdn","compute"],Rw=s.object({sid:s.string().optional(),effect:s.enum(["Allow","Deny"]),principals:s.array(s.string()),actions:s.array(s.string()),resources:s.array(s.string()).optional(),conditions:s.record(s.string(),s.record(s.string(),s.union([s.string(),s.array(s.string())]))).optional()}).strict(),Ix=s.object({name:F,bucketName:s.string().optional(),publicReadAccess:s.boolean().optional(),websiteHosting:s.object({indexDocument:s.string(),errorDocument:s.string().optional()}).strict().optional(),backupVaultTier:s.enum(gt).optional(),versioned:s.boolean().optional(),encryption:s.enum(Jn).optional(),kmsKeyArn:s.string().optional(),cors:s.array(s.object({allowedOrigins:s.array(s.string()),allowedMethods:s.array(s.string()),allowedHeaders:s.array(s.string()).optional(),exposedHeaders:s.array(s.string()).optional(),maxAge:s.number().optional()}).strict()).optional(),deployment:s.object({source:s.string(),prune:s.boolean().optional(),cacheControl:s.object({maxAge:s.number().optional(),immutable:s.boolean().optional()}).strict().optional()}).strict().optional(),retain:s.boolean().optional(),resourcePolicyStatements:s.array(Rw).optional(),stackPlacement:s.enum(nu).optional(),variableName:s.string().optional(),extraProperties:s.array(Ae).optional()}).strict().refine(e=>e.encryption!=="KMS"||!!e.kmsKeyArn,{message:d.KMS.KEY_REQUIRED}),fZ=s.object({appName:fe,bucketName:ex,nameProvidedByFlag:s.boolean().optional(),storagePreset:s.enum(qA).optional(),publicReadAccess:s.boolean().optional(),websiteHosting:s.object({indexDocument:s.string(),errorDocument:s.string().optional()}).strict().optional(),backupVaultTier:s.enum(gt).optional(),versioned:s.boolean().optional(),encryption:s.enum(Jn).optional(),kmsKeyArn:s.string().optional(),cors:s.array(s.object({allowedOrigins:s.array(s.string()),allowedMethods:s.array(s.string()),allowedHeaders:s.array(s.string()).optional(),exposedHeaders:s.array(s.string()).optional(),maxAge:s.number().optional()}).strict()).optional(),connectionConfig:s.object({connectToCompute:s.array(s.string()).optional(),connectToServices:s.array(s.string()).optional()}).strict().optional()}).strict().refine(e=>e.encryption!=="KMS"||!!e.kmsKeyArn,{message:d.KMS.KEY_REQUIRED,path:["kmsKeyArn"]});var Ph=s.enum(["DESTROY","RETAIN"]),$x=s.object({name:F,queueType:s.enum(["standard","fifo"]).default("standard"),visibilityTimeout:s.number().int(d.SQS.VISIBILITY_TIMEOUT.INTEGER).min(0,d.SQS.VISIBILITY_TIMEOUT.MIN).max(43200,d.SQS.VISIBILITY_TIMEOUT.MAX).optional(),retentionPeriod:s.number().int(d.SQS.RETENTION_PERIOD.INTEGER).min(60,d.SQS.RETENTION_PERIOD.MIN).max(1209600,d.SQS.RETENTION_PERIOD.MAX).optional(),contentBasedDeduplication:s.boolean().optional(),removalPolicy:Ph.optional(),variableName:s.string().optional(),extraProperties:s.array(Ae).optional()}).strict();var Tx=s.object({type:s.literal("basic-auth"),username:s.string().min(1),password:s.string().min(1)}).strict(),Rx=s.object({name:F,defaultOriginRef:s.string(),behaviours:s.array(s.object({pathPattern:s.string(),originRef:s.string(),cachePolicy:s.enum(["CACHING_OPTIMIZED","CACHING_DISABLED"]).optional()}).strict()).optional(),customDomain:s.string().optional(),certificateArn:s.string().optional(),accessGate:s.union([s.literal(!1),Tx]).optional(),extraProperties:s.array(Ae).optional()}).strict(),EZ=s.object({appName:s.string(),name:F.optional(),defaultOriginRef:s.string(),behaviours:s.array(s.object({pathPattern:s.string(),originRef:s.string(),cachePolicy:s.enum(["CACHING_OPTIMIZED","CACHING_DISABLED"]).optional()}).strict()).optional(),customDomain:s.string().optional(),certificateArn:s.string().optional(),accessGate:s.union([s.literal(!1),Tx]).optional(),nameProvidedByFlag:s.boolean().optional()}).strict();var Nw=Object.defineProperty,kh=(e,t)=>Nw(e,"name",{value:t,configurable:!0}),Cw=new Set(["t4g","c6g","c6gd","c6gn","c7g","c7gd","c7gn","r6g","r6gd","r7g","r7gd","r8g","r8gd","c8g","c8gd","c8gn","m6g","m6gd","m7g","m7gd","m8g","m8gd","x8g","i8g","a1","x2gd","im4gn","is4gen","i4g","hpc7g"]);function ei(e){let t=e.split(".")[0]??"";return Cw.has(t)?"ARM":"STANDARD"}kh(ei,"getArchitectureForInstanceType");function iu(e,t){let n=ei(e);return n!==t?{valid:!1,message:`Instance type '${e}' requires ${n} architecture, but '${t}' AMI was specified. Use a ${n==="ARM"?"Graviton instance (t4g, c6g, r6g, m6g, etc.)":"Intel/AMD instance (t3, c5, r5, m5, etc.)"} instead.`}:{valid:!0}}kh(iu,"validateArchitectureMatch");function Nx(e,t){return ei(e)===t}kh(Nx,"isArchitectureCompatible");var Pw=Object.defineProperty,ou=(e,t)=>Pw(e,"name",{value:t,configurable:!0});var kw=1;var Ow=/^[A-Za-z0-9_.-]+$/,ww=s.object({id:s.string().min(1,"buildSecret id cannot be empty").regex(Ow,"buildSecret id may contain only letters, digits, '_', '.', and '-' (no comma, '=', or whitespace, which would break the buildx --secret argv)"),ssm:s.string().min(1,"ssm parameter name cannot be empty").optional(),secretsManager:s.object({name:s.string().min(1,"secret name cannot be empty").optional(),arn:s.string().min(1,"secret arn cannot be empty").optional(),field:s.string().min(1,"secret field cannot be empty").optional()}).strict().refine(e=>e.name===void 0!=(e.arn===void 0),"secretsManager requires exactly one of name or arn").optional(),env:s.string().min(1,"env variable name cannot be empty").optional()}).strict().superRefine((e,t)=>{[e.ssm,e.secretsManager,e.env].filter(n=>n!==void 0).length!==1&&t.addIssue({code:s.ZodIssueCode.custom,message:"buildSecret requires exactly one source (ssm, secretsManager, or env)"})}),Dw=s.union([s.string(),s.object({ssm:s.string().min(1,"ssm parameter name cannot be empty").optional(),secretsManager:s.object({name:s.string().min(1,"secret name cannot be empty").optional(),arn:s.string().min(1,"secret arn cannot be empty").optional(),field:s.string().min(1,"secret field cannot be empty").optional()}).strict().refine(e=>e.name===void 0!=(e.arn===void 0),"secretsManager requires exactly one of name or arn").optional(),env:s.string().min(1,"env variable name cannot be empty").optional(),acknowledgePublic:s.boolean().optional()}).strict().superRefine((e,t)=>{[e.ssm,e.secretsManager,e.env].filter(n=>n!==void 0).length!==1&&t.addIssue({code:s.ZodIssueCode.custom,message:"buildArg value requires exactly one source (ssm, secretsManager, or env)"})})]),Rt=s.object({path:s.string(),context:s.string().min(1,"context cannot be empty").optional(),target:s.string().min(1,"target cannot be empty").optional(),buildArgs:s.record(s.string(),Dw).optional(),buildSecrets:s.array(ww).optional()}).strict(),TZ=Rt.partial();function Mw(e,t){if(t===void 0)return e;let n=t.context??e.context,i=t.target??e.target,r=t.buildArgs??e.buildArgs,o=t.buildSecrets??e.buildSecrets;return{path:t.path??e.path,...n!==void 0&&{context:n},...i!==void 0&&{target:i},...r!==void 0&&{buildArgs:r},...o!==void 0&&{buildSecrets:o}}}ou(Mw,"mergeDockerBuild");function Oh(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}ou(Oh,"isRecord");function Cx(e){if(!Oh(e)||typeof e.path!="string"||e.path.length===0)return;let t=typeof e.context=="string"&&e.context.length>0?e.context:void 0,n=typeof e.target=="string"&&e.target.length>0?e.target:void 0,i=Oh(e.buildArgs)&&Object.keys(e.buildArgs).length>0?e.buildArgs:void 0,r=Array.isArray(e.buildSecrets)&&e.buildSecrets.length>0?e.buildSecrets:void 0,o={path:e.path,...t!==void 0&&{context:t},...n!==void 0&&{target:n},...i!==void 0&&{buildArgs:i},...r!==void 0&&{buildSecrets:r}},a=Rt.safeParse(o);return a.success?a.data:void 0}ou(Cx,"normaliseDockerBuild");function jw(e){if(e===void 0)return;let t=Cx(e);return t===void 0?void 0:JSON.stringify(t)}ou(jw,"dockerBuildFingerprint");var zw=s.object({name:s.string(),clusterName:s.string().optional(),docker:Rt.optional(),containerPort:s.number().optional(),secrets:s.array(s.string()).optional(),ssmSecretsPath:s.string().optional(),importedSecretNames:s.array(s.string()).optional()}).strict(),Lw=s.object({type:s.enum($t),name:s.string(),source:s.string()}).strict(),Uw=s.object({repositoryName:s.string()}).strict(),Fw=["x86_64","arm64"],Bw=s.object({name:s.string(),secrets:s.array(s.string()).optional(),ssmSecretsPath:s.string().optional(),importedSecretNames:s.array(s.string()).optional(),docker:Rt.optional(),imageKey:s.string().optional(),architecture:s.enum(Fw).optional()}).strict(),Zw=s.object({templateHash:s.string(),synthTimestamp:s.string()}).strict(),Gw=s.object({constructPath:s.string().max(512),group:s.string().max(128),resourceType:s.string().max(256)}).strict(),Vw=s.object({synthesisedBy:s.string().min(1).max(128),minimumEngineVersion:s.string().min(1).max(32),maximumEngineMajor:s.number().int().min(0).optional(),minimumAwsCdkCli:s.string().min(1).max(32).optional()}).strict(),Ww=s.object({appName:s.string().min(1).max(128),slot:s.string().min(1).max(64),clusterName:s.string().min(1).max(128),anchor:s.string().min(1).max(128),pinned:s.boolean(),currentServiceName:s.string().min(1).max(256),legacyKey:s.string().min(1).max(256),legacyAnchor:s.string().min(1).max(256),legacyServiceName:s.string().min(1).max(512),legacyKeyFields:s.array(s.string().max(64)).max(32)}).strict(),RZ=s.object({version:s.literal(kw),generatedAt:s.string(),appName:s.string(),services:s.array(zw),lambdas:s.array(Bw),pattern:Lw.optional(),ecr:Uw.optional(),stacks:s.record(s.string(),Zw),resourceMap:s.record(s.string(),Gw).optional(),engineCompat:Vw.optional(),identityAliases:s.array(Ww).optional()}).strict();var Kw=Object.defineProperty,Hw=(e,t)=>Kw(e,"name",{value:t,configurable:!0});function kx(e){return!(e.image!==void 0&&e.docker!==void 0)}Hw(kx,"imageDockerMutexCheck");var Ox=s.number().int(d.CAPACITY.MIN.INTEGER).min(xh,d.GENERATOR_CAPACITY.MIN.MIN).max(Ih,d.GENERATOR_CAPACITY.MIN.MAX),wx=s.number().int(d.CAPACITY.MAX.INTEGER).min(xh,d.GENERATOR_CAPACITY.MAX.MIN).max(Ih,d.GENERATOR_CAPACITY.MAX.MAX),ti=s.number().int(d.LAMBDA.MEMORY.INTEGER).min(KA,d.LAMBDA.MEMORY.MIN).max(HA,d.LAMBDA.MEMORY.MAX).refine(e=>e===128||e%64===0,d.LAMBDA.MEMORY.MULTIPLE),Dx=s.string().regex(j.LAMBDA_RUNTIME_IDENTIFIER,d.LAMBDA.RUNTIME),wh=s.number().int(d.CPU.INTEGER).min(256,d.CPU.MIN).max(4096,d.CPU.MAX),su=s.number().int(d.CAPACITY.DESIRED.INTEGER).min(0,d.CAPACITY.DESIRED.MIN).max(Xn,d.CAPACITY.DESIRED.MAX),Mo=s.object({connectToDatabase:s.array(s.string()).optional()}).strict(),Yw=s.object({minSize:s.number().int(d.CAPACITY.WARM_POOL.MIN_SIZE.INTEGER).min(0,d.CAPACITY.WARM_POOL.MIN_SIZE.MIN).max(YA,d.CAPACITY.WARM_POOL.MIN_SIZE.MAX).optional(),reuseOnScaleIn:s.boolean().optional()}).strict(),Dh=s.object({instanceType:s.string().optional(),amiHardwareType:s.enum(Zc).optional(),minCapacity:s.number().int(d.CAPACITY.MIN.INTEGER).min(0,d.CAPACITY.MIN.MIN_0).max(Xn,d.CAPACITY.MIN.MAX).optional(),maxCapacity:s.number().int(d.CAPACITY.MAX.INTEGER).min(1,d.CAPACITY.MAX.MIN_1).max(Xn,d.CAPACITY.MAX.MAX).optional(),memoryLimitMiB:Po(128).optional(),warmPool:Yw.optional(),extraProperties:s.array(Ae).optional()}).strict().superRefine((e,t)=>{if(!e.instanceType||!e.amiHardwareType)return;let n=iu(e.instanceType,e.amiHardwareType);n.valid||t.addIssue({code:"custom",message:n.message??d.ARCHITECTURE_MISMATCH,path:["instanceType"]})}).superRefine((e,t)=>{e.minCapacity===0&&!e.warmPool&&t.addIssue({code:"custom",message:d.CAPACITY.WARM_POOL_REQUIRED,path:["minCapacity"]}),e.warmPool?.minSize!==void 0&&e.maxCapacity!==void 0&&e.warmPool.minSize>e.maxCapacity&&t.addIssue({code:"custom",message:d.CAPACITY.WARM_POOL.MIN_SIZE_EXCEEDS_MAX_CAPACITY,path:["warmPool","minSize"]})}),Xw=s.enum(To).describe(`Compute type must be one of: ${To.join(", ")}`),Mh=s.enum(Kn).describe(`ECS capacity provider must be one of: ${Kn.join(", ")}`),jh=s.string().refine(e=>nt(Gc,e),{message:d.INSTANCE_TYPE}),Mx=s.object({sourceType:s.enum(["sqs","dynamodb","eventbridge"]),sourceRef:s.string().describe("Name of the source resource"),batchSize:s.number().int(d.BATCH_SIZE.INTEGER).min(1,d.BATCH_SIZE.MIN).max(1e4,d.BATCH_SIZE.MAX).optional(),startingPosition:s.enum(["TRIM_HORIZON","LATEST"]).optional(),maxBatchingWindow:s.number().int(d.BATCHING_WINDOW.INTEGER).min(0,d.BATCHING_WINDOW.MIN).max(300,d.BATCHING_WINDOW.MAX).optional(),reportBatchItemFailures:s.boolean().optional()}).strict(),Jw=s.object({name:s.string().min(1,d.REQUIRED.CONTAINER_NAME).optional(),image:s.string().optional(),port:Dr.optional(),environment:qn.optional(),secretsImport:rx.optional(),command:s.array(s.string()).optional(),entryPoint:s.array(s.string()).optional(),essential:s.boolean().optional(),healthCheck:s.object({command:s.array(s.string()),interval:s.number().int(d.HEALTH_CHECK.INTERVAL.INTEGER).min(5,d.HEALTH_CHECK.INTERVAL.MIN).max(300,d.HEALTH_CHECK.INTERVAL.MAX).optional(),timeout:s.number().int(d.HEALTH_CHECK.TIMEOUT.INTEGER).min(2,d.HEALTH_CHECK.TIMEOUT.MIN).max(60,d.HEALTH_CHECK.TIMEOUT.MAX).optional(),retries:s.number().int(d.HEALTH_CHECK.RETRIES.INTEGER).min(1,d.HEALTH_CHECK.RETRIES.MIN).max(10,d.HEALTH_CHECK.RETRIES.MAX).optional(),startPeriod:s.number().int(d.HEALTH_CHECK.START_PERIOD.INTEGER).min(0,d.HEALTH_CHECK.START_PERIOD.MIN).max(300,d.HEALTH_CHECK.START_PERIOD.MAX).optional()}).strict().optional(),ssmSecrets:s.array(s.string().regex(j.SECRET_NAME,d.SECRET_NAME)).optional(),extraProperties:s.array(Ae).optional()}).strict(),jx=s.string().min(1,d.REQUIRED.SERVICE_NAME).max(255,d.MAX_LENGTH.SERVICE_NAME).regex(j.ECS_SERVICE_NAME,d.ECS_SERVICE_NAME),zx=s.object({domain:s.string().optional(),loadBalancer:s.union([s.literal(!1),s.enum(Fc)]).optional(),directAccess:s.boolean().optional(),extraProperties:s.array(Ae).optional()}).strict().refine(e=>!(e.directAccess&&e.domain),{message:d.DIRECT_ACCESS.NO_DOMAIN,path:["directAccess"]}).refine(e=>!(e.directAccess&&typeof e.loadBalancer=="string"),{message:d.DIRECT_ACCESS.NO_LOAD_BALANCER}).describe("Cluster-level configuration"),au=s.object({path:s.string().optional(),host:s.string().optional(),priority:s.number().int(d.PRIORITY.INTEGER).min(1,d.PRIORITY.MIN).max(5e4,d.PRIORITY.MAX).optional(),healthCheckPath:s.string().optional()}).strict().describe("Path/host-based routing configuration"),qw=s.object({desiredCount:su.optional(),minCapacity:s.number().int(d.CAPACITY.MIN.INTEGER).min(0,d.CAPACITY.MIN.MIN_0).max(Xn,d.CAPACITY.MIN.MAX).optional(),maxCapacity:s.number().int(d.CAPACITY.MAX.INTEGER).min(1,d.CAPACITY.MAX.MIN_1).max(Xn,d.CAPACITY.MAX.MAX).optional(),scalingType:s.enum(Bc).optional()}).strict().refine(wr.check,wr.params).describe("ECS service scaling configuration"),Lx=s.object({name:jx,docker:Rt.optional(),needsDatabaseConnection:s.boolean().optional(),needsStorageConnection:s.boolean().optional(),needsMessagingConnection:s.boolean().optional(),image:s.string().optional(),containers:s.array(Jw).optional(),routing:s.union([au,s.array(au).min(1)]).optional(),cpu:wh.optional(),memoryLimitMiB:Po(512).optional(),desiredCount:su.optional(),scaling:Be(qw).optional(),capacityProvider:Mh,ec2Config:Dh.optional(),ssmSecretsPath:s.string().regex(j.SSM_PATH,d.SSM_PATH).optional(),extraProperties:s.array(Ae).optional(),alarms:ax.optional()}).strict().superRefine((e,t)=>{kx(e)||t.addIssue({code:"custom",path:["docker"],message:d.IMAGE_DOCKER_MUTEX})}).describe("Configuration for a service in an ECS cluster"),Ux=s.object({name:F,type:Xw,needsConnection:s.boolean(),connectedDatabase:s.array(s.string()).optional(),connectedStorage:s.array(s.string()).optional(),connectedMessaging:s.array(s.string()).optional(),cluster:zx.optional(),services:s.array(Lx).optional(),docker:Rt.partial().optional(),deployment:s.enum(Lc).optional(),codePath:s.string().optional(),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(Vc,d.LAMBDA.TIMEOUT.MIN).max(Wc,d.LAMBDA.TIMEOUT.MAX).optional(),memory:ti.optional(),handler:s.string().optional(),runtime:Dx.optional(),environment:qn.optional(),secrets:qn.optional(),eventSources:s.array(Mx).optional(),functionUrl:s.object({authType:s.enum(No)}).strict().optional(),description:s.string().optional(),scheduleExpression:s.string().optional(),architecture:s.enum(Uc).optional(),ephemeralStorageSize:s.number().int(d.EPHEMERAL_STORAGE.INTEGER).min(512,d.EPHEMERAL_STORAGE.MIN).max(10240,d.EPHEMERAL_STORAGE.MAX).optional(),functionName:s.string().optional(),ssmSecrets:s.array(s.string()).optional(),ssmSecretsPath:s.string().optional(),alarms:cx.optional(),instanceType:jh.optional(),enableSSH:s.boolean().optional(),keyName:s.string().optional(),userData:s.string().optional(),securityGroups:s.array(s.string()).optional(),variableName:s.string().optional(),extraProperties:s.array(Ae).optional()}).strict().superRefine((e,t)=>{if(e.type==="ecs"&&e.services)for(let n=0;n<e.services.length;n++){let i=e.services[n];i?.ec2Config?.instanceType&&!i.ec2Config.amiHardwareType&&ei(i.ec2Config.instanceType)!=="ARM"&&t.addIssue({code:"custom",message:`Service '${i.name??n}' uses instance type '${i.ec2Config.instanceType}' (x86), which requires Docker images built for linux/amd64. The default build targets linux/arm64 (Graviton). Use a Graviton instance type (t4g, c6g, r6g, m6g, etc.) or set amiHardwareType: "STANDARD" to acknowledge x86.`,path:["services",n,"ec2Config","instanceType"]})}e.type==="lambda"&&e.deployment==="container"&&e.architecture==="X86_64"&&t.addIssue({code:"custom",message:"Lambda architecture 'X86_64' requires Docker images built for linux/amd64, but the default build targets linux/arm64. Use 'ARM_64' for Graviton Lambdas (recommended) or ensure your build pipeline targets linux/amd64.",path:["architecture"]})}),jZ=s.object({appName:fe,clusterName:F,containerPort:Dr,nameProvidedByFlag:s.boolean().optional(),ecrRepository:s.string().optional(),capacityProvider:Mh.optional(),useAppEcr:s.boolean().optional(),desiredCount:su.optional(),cpu:wh.optional(),memoryLimitMiB:Po(512).optional(),minCapacity:Ox.optional(),maxCapacity:wx.optional(),ec2Config:Dh.optional(),connectionConfig:Mo.optional()}).strict().refine(wr.check,wr.params),zZ=s.object({appName:fe,functionName:F,nameProvidedByFlag:s.boolean().optional(),lambdaType:s.enum(["basic","web","custom"]).optional(),ecrRepository:s.string().optional(),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(Vc,d.LAMBDA.TIMEOUT.MIN).max(Wc,d.LAMBDA.TIMEOUT.MAX).optional(),memory:ti.optional(),enableFunctionUrl:s.boolean().optional(),description:s.string().optional(),enableCors:s.boolean().optional(),corsOrigins:s.string().optional(),corsHeaders:s.string().optional(),corsMethods:s.array(s.enum(JA)).optional(),corsCredentials:s.boolean().optional(),connectionConfig:Mo.optional()}).strict(),LZ=s.object({appName:fe,instanceName:F,nameProvidedByFlag:s.boolean().optional(),instanceType:jh.optional(),enableSSH:s.boolean().optional(),minCapacity:Ox.optional(),maxCapacity:wx.optional(),connectionConfig:Mo.optional()}).strict().refine(wr.check,wr.params),UZ=s.object({appName:fe,clusterName:F,serviceName:jx,capacityProvider:Mh,containerPort:Dr.optional(),cpu:wh.optional(),memoryLimitMiB:Po(512).optional(),desiredCount:su.optional(),ec2Config:Dh.optional(),routing:s.union([au,s.array(au).min(1)]).optional(),docker:Rt.partial().optional(),nameProvidedByFlag:s.boolean().optional(),connectionConfig:Mo.optional()}).strict(),zh=s.object({appName:fe,computeName:F,nameProvidedByFlag:s.boolean().optional(),connectionConfig:Mo.optional()}).strict(),Qw=zh.extend({type:s.literal("ecs"),cluster:zx.optional(),services:s.array(Lx).min(1,d.SERVICE.MIN_REQUIRED),docker:Rt.partial().optional()}).strict().refine(e=>{let t=e.services.filter(n=>n.containers?.some(i=>i.port));return t.length>1?t.every(n=>(Array.isArray(n.routing)?n.routing:n.routing?[n.routing]:[]).some(i=>i.path||i.host)):!0},{message:d.SERVICE.ROUTING_REQUIRED}).refine(e=>{let t=e.services.map(n=>n.name);return new Set(t).size===t.length},{message:d.SERVICE.UNIQUE_WITHIN_CLUSTER}),eD=zh.extend({type:s.literal("lambda"),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(Vc,d.LAMBDA.TIMEOUT.MIN).max(Wc,d.LAMBDA.TIMEOUT.MAX).optional(),memory:ti.optional(),handler:s.string().optional(),runtime:Dx.optional(),environment:qn.optional(),secrets:qn.optional(),description:s.string().optional(),functionUrl:s.union([s.object({authType:s.enum(No).optional()}).strict(),s.literal(!1)]).optional(),eventSources:s.array(Mx).optional()}).strict(),tD=zh.extend({type:s.literal("ec2"),instanceType:jh.optional(),enableSSH:s.boolean().optional(),keyName:s.string().optional(),userData:s.string().optional(),securityGroups:s.array(s.string()).optional()}).strict(),FZ=s.discriminatedUnion("type",[Qw,eD,tD]),Px=s.object({path:s.string().min(1,d.REQUIRED.ROUTING_PATH),priority:s.number().int(d.PRIORITY.INTEGER).min(1,d.PRIORITY.MIN).max(5e4,d.PRIORITY.MAX).optional()}).strict(),Fx=s.object({name:s.string().min(1,d.REQUIRED.SERVICE_NAME).max(255,d.MAX_LENGTH.SERVICE_NAME).regex(j.RESOURCE_NAME,d.RESOURCE_NAME),serviceType:s.enum(["web","worker"]).optional(),docker:Rt.partial().optional(),containerPort:Dr.optional(),needsDatabaseConnection:s.boolean().optional(),routing:s.union([Px,s.array(Px).min(1)]).optional()}).strict().superRefine((e,t)=>{e.serviceType==="worker"&&(e.containerPort!==void 0&&t.addIssue({code:"custom",path:["containerPort"],message:"Worker services are not reachable inbound; remove containerPort."}),e.routing!==void 0&&t.addIssue({code:"custom",path:["routing"],message:"Worker services have no ALB route; remove routing."}))}),BZ=s.object({appName:fe,instanceType:s.string().optional()}).strict();var Lh=s.object({memorySize:ti.optional(),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(1,d.LAMBDA.TIMEOUT.MIN).max(900,d.LAMBDA.TIMEOUT.MAX).optional(),ephemeralStorageSize:s.number().int(d.EPHEMERAL_STORAGE.INTEGER).min(512,d.EPHEMERAL_STORAGE.MIN).max(10240,d.EPHEMERAL_STORAGE.MAX).optional()}).strict(),Bx=s.object({type:s.enum(Ah).optional(),databaseName:s.string().optional(),databaseEngine:s.enum(Yn).optional(),deletionProtection:s.boolean().optional(),backupRetention:Ut.optional(),port:Yc.optional(),publiclyAccessible:s.boolean().optional(),allowedIpCidr:s.string().optional(),instanceType:s.string().optional(),allocatedStorage:s.number().int(d.ALLOCATED_STORAGE.INTEGER).min(20,d.ALLOCATED_STORAGE.MIN).max(65536,d.ALLOCATED_STORAGE.MAX).optional(),multiAz:s.boolean().optional(),readReplica:qc.optional(),writer:wo.optional(),readers:Do.optional(),allowVpcAccess:s.boolean().optional(),monitoringInterval:Oo.optional(),preferredMaintenanceWindow:s.string().optional(),databaseInsights:Qc.optional(),proxy:Jc.optional(),credentials:Xc.optional(),encryption:eu.optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()}).strict(),Zx=s.object({server:Lh.optional(),imageOptimisation:Lh.optional(),revalidation:Lh.optional()}).strict(),Uh=s.object({versioned:s.boolean().optional()}).strict(),Gx=s.object({assets:Uh.optional(),cache:Uh.optional(),media:Uh.optional()}).strict(),rD=s.object({visibilityTimeout:s.number().int(d.SQS.VISIBILITY_TIMEOUT.INTEGER).min(0,d.SQS.VISIBILITY_TIMEOUT.MIN).max(43200,d.SQS.VISIBILITY_TIMEOUT.MAX).optional(),messageRetentionPeriod:s.number().int(d.SQS.RETENTION_PERIOD.INTEGER).min(60,d.SQS.RETENTION_PERIOD.MIN).max(1209600,d.SQS.RETENTION_PERIOD.MAX).optional(),maxMessageSize:s.number().int(d.MAX_MESSAGE_SIZE.INTEGER).min(1024,d.MAX_MESSAGE_SIZE.MIN).max(262144,d.MAX_MESSAGE_SIZE.MAX).optional(),deadLetterQueue:s.union([s.literal(!1),s.object({enabled:s.boolean().optional(),maxReceiveCount:s.number().int(d.DLQ.MAX_RECEIVE_COUNT.INTEGER).min(1,d.DLQ.MAX_RECEIVE_COUNT.MIN).max(1e3,d.DLQ.MAX_RECEIVE_COUNT.MAX).optional()}).strict()]).optional()}).strict(),Vx=s.object({revalidationQueue:rD.optional()}).strict(),Wx=s.object({domainNames:s.array(s.string()).optional(),certificateArn:s.string().optional()}).strict(),Kx=s.record(s.string().regex(j.ENV_VAR_NAME,d.ENV_VAR_NAME),s.string()).optional(),nD=s.object({type:s.literal("payload"),name:s.string().min(1,d.REQUIRED.PATTERN_NAME),domain:s.string().optional(),database:Bx.optional(),compute:Zx.optional(),storage:Gx.optional(),messaging:Vx.optional(),cdn:Wx.optional(),environment:Kx}).strict(),iD=s.object({type:s.literal("nextjs"),name:s.string().min(1,d.REQUIRED.PATTERN_NAME),domain:s.string().optional(),database:Bx.optional(),compute:Zx.optional(),storage:Gx.optional(),messaging:Vx.optional(),cdn:Wx.optional(),environment:Kx}).strict(),Fh=s.enum(lo),oD=s.object({command:s.string().min(1,d.REQUIRED.BUILD_COMMAND),outputDir:s.string().min(1,d.REQUIRED.OUTPUT_DIR)}).strict(),aD=s.object({headers:s.boolean().optional(),contentSecurityPolicy:s.string().optional()}).strict(),sD=s.object({to:s.string().min(1,d.REQUIRED.FORMS_TO).regex(j.EMAIL,d.EMAIL),from:s.string().regex(j.EMAIL,d.EMAIL).optional(),corsOrigin:s.string().regex(j.HTTP_ORIGIN,"corsOrigin must be an exact origin such as https://example.com (no path, no trailing slash)").optional(),maxConcurrency:s.number().int().min(1).max(100).optional()}).strict(),cD=s.object({behaviours:s.array(s.unknown()).optional()}).strict(),Bh=s.object({type:s.literal("staticsite"),name:s.string().min(1,d.REQUIRED.PATTERN_NAME),source:s.string().min(1,d.REQUIRED.SOURCE),build:oD,routing:Fh.optional(),security:aD.optional(),domain:s.string().optional(),forms:sD.optional(),cdn:cD.optional()}).strict().superRefine((e,t)=>{if(e.forms===void 0)return;let n=e.domain;if(n===void 0||n===""){t.addIssue({code:"custom",path:["domain"],message:"A domain is required when forms are enabled: SES sends only from a verified identity, and the site's domain is the identity the pattern verifies"});return}let i=e.forms.from;i!==void 0&&!pc(i,n)&&t.addIssue({code:"custom",path:["forms","from"],message:`forms.from must be an address at ${n} (the verified SES identity) \u2014 for example noreply@${n}. Use forms.to for the recipient.`})}),jo=s.discriminatedUnion("type",[nD,iD,Bh]),Hx=s.enum(["lightweight","standard","resilient","custom"]),Yx=s.object({type:s.enum(Ah),instanceType:s.string().optional(),backupRetention:Ut.optional(),deletionProtection:s.boolean().optional(),encryption:s.union([s.object({useCMK:s.literal(!0)}).strict(),s.literal(!1)]).optional()}).strict(),Xx=s.object({memorySize:ti.optional(),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(1,d.LAMBDA.TIMEOUT.MIN).max(900,d.LAMBDA.TIMEOUT.MAX).optional()}).strict();var Jx=s.object({appName:fe,type:$h,pattern:Th.optional(),patternConfig:jo.optional(),owner:s.string().optional(),tags:s.record(s.string(),s.string()).optional(),vpcId:s.string().optional(),network:ru.optional(),backup:ix.optional(),tunnel:ox.optional(),additionalNetworks:s.array(Ex).optional(),database:s.array(lx),s3:s.array(Ix),compute:s.array(Ux),dynamodb:s.array(hx).optional(),clickhouse:s.array(vx).optional(),sqs:s.array($x).optional(),cdn:Rx.optional(),customCodeBlocks:s.array(nx).optional(),additionalManagedImports:s.array(s.object({moduleSpecifier:s.string(),namedImports:s.array(s.string()),defaultImport:s.string().optional()}).strict()).optional()}).strict(),cG=s.object({name:fe,type:$h,pattern:Th.optional(),patternTier:Hx.optional(),patternDomain:s.string().optional(),source:s.string().min(1,d.REQUIRED.SOURCE).optional(),buildCommand:s.string().min(1,d.REQUIRED.BUILD_COMMAND).optional(),outputDir:s.string().min(1,d.REQUIRED.OUTPUT_DIR).optional(),routing:Fh.optional(),formsTo:s.string().min(1,d.REQUIRED.FORMS_TO).regex(j.EMAIL,d.EMAIL).optional(),corsOrigin:s.string().regex(j.HTTP_ORIGIN,"corsOrigin must be an exact origin such as https://example.com (no path, no trailing slash)").optional(),customDatabase:Yx.optional(),customCompute:Xx.optional(),region:s.string().optional(),owner:s.string().optional(),includeDatabase:s.boolean().optional(),databaseName:s.string().min(1,d.DATABASE.NAME.REQUIRED).max(63,d.DATABASE.NAME.MAX_LENGTH).optional(),vpcId:s.string().optional(),network:Ax.optional(),services:s.array(Fx).optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()}).strict().superRefine((e,t)=>{e.formsTo!==void 0&&(e.patternDomain!==void 0&&e.patternDomain!==""||t.addIssue({code:"custom",path:["patternDomain"],message:"A domain is required when forms are enabled: SES sends only from a verified identity, and the site's domain is the identity the pattern verifies"}))}),uG=s.object({name:F,localResource:s.string().min(1),remoteApp:s.string().min(1),remoteResource:s.string().min(1),permission:s.enum(["read","write","read-write"]),remoteArn:s.string().optional()}).strict();var uD=["fjall-managed","external","external-manual"],fG=s.enum(uD);var qx=s.object({givenName:s.string().min(1),familyName:s.string().min(1),displayName:s.string().min(1).optional(),expires:s.string().min(1).optional()}).strict(),Qx=s.object({name:s.string().min(1),path:s.string().min(1).optional()}).strict(),lD=s.union([s.object({managedPolicyArn:s.string().min(1)}).strict(),s.object({customerManagedPolicy:Qx}).strict()]),dD=s.object({managedPolicies:s.array(s.string().min(1)).optional(),inlinePolicy:s.record(s.string(),s.unknown()).optional(),customerManagedPolicies:s.array(Qx).optional(),permissionsBoundary:lD.optional(),sessionDuration:s.string().min(1).optional(),description:s.string().optional(),accounts:s.union([s.array(s.string().min(1)),s.literal("all")]).optional(),includeManagementAccount:s.boolean().optional(),groups:s.array(s.string().min(1)).optional()}).strict(),mD=s.object({description:s.string().optional()}).strict(),cu=s.string().regex(j.EMAIL,d.EMAIL),Zh={groups:s.record(s.string(),mD).optional(),permissionSets:s.record(s.string(),dD).optional(),memberships:s.record(s.string(),s.array(cu)).optional(),resolutionVersion:s.number().int().min(1).optional(),defaultPermissionSets:s.boolean().optional()},pD=s.discriminatedUnion("source",[s.object({...Zh,source:s.literal("fjall-managed"),users:s.record(cu,qx)}).strict(),s.object({...Zh,source:s.literal("external")}).strict(),s.object({...Zh,source:s.literal("external-manual"),users:s.record(cu,qx).optional()}).strict()]),gG=s.object({name:F,type:s.literal("organisation").optional(),organisationName:s.string().min(1).optional(),orgEmail:cu.optional(),accounts:s.unknown().optional(),accountIds:s.record(s.string(),s.string()).optional(),identityCentre:s.union([pD,s.literal(!1)]).optional(),allowedRegions:s.array(s.string().min(1)).optional()}).strict();var fD=Object.defineProperty,gD=(e,t)=>fD(e,"name",{value:t,configurable:!0}),hD=[1,3,5,7,14,30,60,90,120,150,180,365,400,545,731,1827,3653],vD=s.object({buildkiteQueue:s.string().min(1,"buildkiteQueue cannot be empty").max(100).regex(/^[a-zA-Z0-9-_]+$/,"buildkiteQueue must be alphanumeric with hyphens/underscores"),buildkiteOrgSlug:s.string().min(1,"buildkiteOrgSlug cannot be empty").max(100).regex(/^[a-z0-9-]+$/,"buildkiteOrgSlug must be a lowercase Buildkite organisation slug"),agentTokenSsmParameterName:s.string().min(2).regex(/^\//,"agentTokenSsmParameterName must be a full path (leading /)").optional(),agentTokenKmsKeyArn:s.string().min(1).optional(),fjallApiKeySsmParameterName:s.string().min(2).regex(/^\//,"fjallApiKeySsmParameterName must be a full path (leading /)").optional(),instanceType:s.string().min(1).default("c8g.xlarge"),agentVolumeSizeGib:s.number().int().min(20).max(1e3).default(250),agentMinInstances:s.number().int().min(0).default(0),agentMaxInstances:s.number().int().min(1).default(2),agentsPerInstance:s.number().int().min(1).default(1),spotCapacityPercentage:s.number().int().min(0).max(100).default(0),scaleInIdlePeriodSeconds:s.number().int().min(60).default(600),disconnectAfterUptimeSeconds:s.number().int().min(3600).default(86400),maxInstanceLifetimeDays:s.number().int().min(1).max(365).default(7),terminateInstanceAfterJob:s.boolean().default(!1),purgeBuildsOnDiskFull:s.boolean().default(!0),terminateInstanceOnDiskFull:s.boolean().default(!1),logRetentionDays:s.number().int().min(1).default(30),agentLogRetentionDays:s.literal(hD).default(7),buildkiteAgentRelease:s.enum(["stable","beta","edge"]).default("stable"),buildkiteAgentTags:s.string().default(""),buildkiteAgentTimestampLines:s.boolean().default(!1),buildkiteAgentExperiments:s.string().default(""),buildkiteAgentTracingBackend:s.enum(["","datadog","opentelemetry"]).default(""),buildkiteAgentCancelGracePeriodSeconds:s.number().int().min(10).default(60),enableSecretsPlugin:s.boolean().default(!0),enableEcrPlugin:s.boolean().default(!1),enableDockerLoginPlugin:s.boolean().default(!1),enableDockerUserNamespaceRemap:s.boolean().default(!0),enableDockerExperimental:s.boolean().default(!1),dockerNetworkingProtocol:s.enum(["ipv4","dualstack"]).default("ipv4"),enableInstanceStorage:s.boolean().default(!1),mountTmpfsAtTmp:s.boolean().default(!0),buildkiteAgentEnableGitMirrors:s.boolean().default(!1),bootstrapScriptUrl:s.string().default(""),agentEnvFileUrl:s.string().default(""),scalerEventSchedulePeriod:s.string().min(1).default("1 minute"),scalerMinPollInterval:s.string().min(1).default("10s"),scaleOutFactor:s.string().min(1).default("1.0"),scaleOutWaitingForJobs:s.boolean().default(!1),rolePermissionsBoundaryArn:s.string().min(1).optional(),alarmSnsTopicArn:s.string().min(1).optional(),applicationId:s.string().min(1).optional(),costAllocationEnvironment:s.string().min(1).optional(),costAllocationOwner:s.string().min(1).optional()}).strict(),bD=vD.refine(e=>e.agentMinInstances<=e.agentMaxInstances,{message:"agentMinInstances must be <= agentMaxInstances"});function yD(e){let t=bD.safeParse(e);if(!t.success){let n=t.error.issues.map(i=>`  - ${i.path.join(".")||"(root)"}: ${i.message}`).join(`
 `);throw new Error(`Buildkite: invalid props:
 ${n}`)}return t.data}gD(yD,"validateBuildkiteProps");var SD=Object.defineProperty,_D=(e,t)=>SD(e,"name",{value:t,configurable:!0});function ED(e){return`FjallDeployBoundary${e}`}_D(ED,"deployBoundaryName");var Gh={Sid:"FjallInheritAdministratorAccess",Effect:"Allow",Action:"*",Resource:"*"},eI=[{Sid:"FjallDenyOrgAndAccountEscape",Effect:"Deny",Action:["organizations:LeaveOrganization","account:CloseAccount"],Resource:"*"},{Sid:"FjallDenyDisableAuditLogging",Effect:"Deny",Action:["cloudtrail:StopLogging"],Resource:"*"},{Sid:"FjallDenyBoundarySelfEscape",Effect:"Deny",Action:["iam:DeleteRolePermissionsBoundary"],Resource:"*"},{Sid:"FjallDenyDisableKmsKey",Effect:"Deny",Action:["kms:DisableKey"],Resource:"*"}],tI=[...eI,{Sid:"FjallDenyStandingHumanCredentials",Effect:"Deny",Action:["iam:CreateUser","iam:CreateLoginProfile","iam:CreateAccessKey","iam:CreateAccountAlias"],Resource:"*"},{Sid:"FjallDenyDisableConfigRecorder",Effect:"Deny",Action:["config:StopConfigurationRecorder"],Resource:"*"}],AD=[...tI,{Sid:"FjallDenyAccountPasswordPolicyTamper",Effect:"Deny",Action:["iam:UpdateAccountPasswordPolicy","iam:DeleteAccountPasswordPolicy"],Resource:"*"},{Sid:"FjallDenyDisableDefaultEbsEncryption",Effect:"Deny",Action:["ec2:DisableEbsEncryptionByDefault"],Resource:"*"}],PG={foundation:[Gh,...eI],compliance:[Gh,...tI],hardened:[Gh,...AD]};var xD=Object.defineProperty,ge=(e,t)=>xD(e,"name",{value:t,configurable:!0});var Kh="sts.amazonaws.com";function ID(e){return`FjallDevDeploy${e}`}ge(ID,"devDeployRoleName");function $D(e){return`FjallDevProvisioner${e}`}ge($D,"devProvisionerRoleName");function TD(e){return`FjallDevSyncWriter${e}`}ge(TD,"devSyncWriterRoleName");var RD="FjallDevBoundary";function rI(e){return`arn:aws:iam::${e}:policy/${RD}`}ge(rI,"devBoundaryPolicyArn");function nI(e){return`org:${e}:dev-provisioner`}ge(nI,"devProvisionerSubject");function iI(e){return`org:${e}:dev-sync`}ge(iI,"devSyncSubject");function Vh(e,t){return`org:${e}:acct:${t}`}ge(Vh,"deployAccountSubject");function Wh(e){return`org:${e}:*`}ge(Wh,"genericMachineSubject");var ND=["discovery","connection","org-setup","dev-substrate-setup"];function oI(e,t){return`org:${e}:${t}`}ge(oI,"serviceSubject");function CD(e){let{fjallOrgId:t,providerArn:n,issuerDomain:i,accountTier:r,accountId:o}=e,a=e.machineTrustMode??"expanded",c={[`${i}:aud`]:Kh},u;if(a==="account-scoped"){if(r===void 0||!cc(r)||o===void 0)throw new Error(`machineTrustMode "account-scoped" requires a governance accountTier and an accountId (got tier: ${String(r)}, accountId ${o===void 0?"absent":"present"}) \u2014 refusing to fall back to the generic machine subject: a silent fallback would re-widen the trust the \xA74.4a Step-3 contract removes`);u=[Vh(t,o)]}else o!==void 0?u=[Wh(t),Vh(t,o)]:u=Wh(t);return[{Sid:"FjallMachineSubject",Effect:"Allow",Principal:{Federated:n},Action:"sts:AssumeRoleWithWebIdentity",Condition:{StringEquals:{...c,[`${i}:sub`]:u}}},{Sid:"FjallUserSubjects",Effect:"Allow",Principal:{Federated:n},Action:"sts:AssumeRoleWithWebIdentity",Condition:{StringEquals:c,StringLike:{[`${i}:sub`]:`org:${t}:user:*`}}},{Sid:"FjallServiceSubjects",Effect:"Allow",Principal:{Federated:n},Action:"sts:AssumeRoleWithWebIdentity",Condition:{StringEquals:{...c,[`${i}:sub`]:ND.map(l=>oI(t,l))}}}]}ge(CD,"buildNarrowedDeployTrustStatements");function PD(e){let{fjallOrgId:t,providerArn:n,issuerDomain:i,accountId:r}=e;return[{Sid:"FjallDevSubjectsThisAccount",Effect:"Allow",Principal:{Federated:n},Action:"sts:AssumeRoleWithWebIdentity",Condition:{StringEquals:{[`${i}:aud`]:Kh},StringLike:{[`${i}:sub`]:`org:${t}:dev:${r}:*`}}}]}ge(PD,"buildDevDeployTrustStatements");function Hh(e){let{providerArn:t,issuerDomain:n,sid:i,subject:r}=e;return[{Sid:i,Effect:"Allow",Principal:{Federated:t},Action:"sts:AssumeRoleWithWebIdentity",Condition:{StringEquals:{[`${n}:aud`]:Kh,[`${n}:sub`]:r}}}]}ge(Hh,"buildServiceSubjectTrustStatements");function kD(e){return Hh({...e,sid:"FjallDevProvisionerSubject",subject:nI(e.fjallOrgId)})}ge(kD,"buildDevProvisionerTrustStatements");function OD(e){return Hh({...e,sid:"FjallDevSyncSubject",subject:iI(e.fjallOrgId)})}ge(OD,"buildDevSyncWriterTrustStatements");function wD({accountId:e}){return[{Sid:"FjallDevEcsTaggedMutations",Effect:"Allow",Action:["ecs:UpdateService","ecs:DeleteService","ecs:RunTask","ecs:StopTask"],Resource:`arn:aws:ecs:*:${e}:*`,Condition:{StringEquals:{"aws:ResourceTag/fjall:dev":"true"}}},{Sid:"FjallDevEcsTaggedCreates",Effect:"Allow",Action:["ecs:RegisterTaskDefinition","ecs:CreateService"],Resource:"*",Condition:{StringEquals:{"aws:RequestTag/fjall:dev":"true"}}},{Sid:"FjallDevEcsTagOnCreate",Effect:"Allow",Action:["ecs:TagResource"],Resource:`arn:aws:ecs:*:${e}:*`,Condition:{StringEquals:{"ecs:CreateAction":["RegisterTaskDefinition","CreateService","RunTask"]}}},{Sid:"FjallDevEcsReads",Effect:"Allow",Action:["ecs:Describe*","ecs:List*"],Resource:"*"},{Sid:"FjallDevEcsDeregisterTaskDefinition",Effect:"Allow",Action:["ecs:DeregisterTaskDefinition"],Resource:`arn:aws:ecs:*:${e}:task-definition/fjall-dev-*`},{Sid:"FjallDevElbTaggedMutations",Effect:"Allow",Action:["elasticloadbalancing:ModifyRule","elasticloadbalancing:DeleteRule","elasticloadbalancing:ModifyTargetGroup","elasticloadbalancing:ModifyTargetGroupAttributes","elasticloadbalancing:DeleteTargetGroup","elasticloadbalancing:RegisterTargets","elasticloadbalancing:DeregisterTargets"],Resource:`arn:aws:elasticloadbalancing:*:${e}:*`,Condition:{StringEquals:{"aws:ResourceTag/fjall:dev":"true"}}},{Sid:"FjallDevElbTaggedCreates",Effect:"Allow",Action:["elasticloadbalancing:CreateTargetGroup","elasticloadbalancing:CreateRule"],Resource:`arn:aws:elasticloadbalancing:*:${e}:*`,Condition:{StringEquals:{"aws:RequestTag/fjall:dev":"true"}}},{Sid:"FjallDevElbTagOnCreate",Effect:"Allow",Action:["elasticloadbalancing:AddTags"],Resource:`arn:aws:elasticloadbalancing:*:${e}:*`,Condition:{StringEquals:{"elasticloadbalancing:CreateAction":["CreateTargetGroup","CreateRule"]}}},{Sid:"FjallDevElbReads",Effect:"Allow",Action:["elasticloadbalancing:Describe*"],Resource:"*"},{Sid:"FjallDevSsmDevTree",Effect:"Allow",Action:["ssm:GetParameter*","ssm:PutParameter","ssm:AddTagsToResource"],Resource:`arn:aws:ssm:*:${e}:parameter/fjall/dev/*`},{Sid:"FjallDevLogsMutations",Effect:"Allow",Action:["logs:PutRetentionPolicy","logs:DeleteLogGroup"],Resource:`arn:aws:logs:*:${e}:log-group:/fjall/dev/*`},{Sid:"FjallDevLogsTaggedCreate",Effect:"Allow",Action:["logs:CreateLogGroup","logs:TagResource"],Resource:`arn:aws:logs:*:${e}:log-group:/fjall/dev/*`,Condition:{StringEquals:{"aws:RequestTag/fjall:dev":"true"}}},{Sid:"FjallDevLogsRead",Effect:"Allow",Action:["logs:GetLogEvents","logs:DescribeLogStreams","logs:FilterLogEvents"],Resource:`arn:aws:logs:*:${e}:log-group:/fjall/dev/*`},{Sid:"FjallDevLogsDescribeGroups",Effect:"Allow",Action:["logs:DescribeLogGroups"],Resource:"*"},{Sid:"FjallDevKmsViaDevAlias",Effect:"Allow",Action:["kms:Encrypt","kms:Decrypt","kms:GenerateDataKey"],Resource:`arn:aws:kms:*:${e}:key/*`,Condition:{"ForAnyValue:StringLike":{"kms:ResourceAliases":"alias/fjall-dev-*"}}},{Sid:"FjallDevKmsSsmSecureString",Effect:"Allow",Action:["kms:Encrypt","kms:Decrypt","kms:GenerateDataKey"],Resource:`arn:aws:kms:*:${e}:key/*`,Condition:{StringLike:{"kms:ViaService":"ssm.*.amazonaws.com"}}},{Sid:"FjallDevEcrAuthToken",Effect:"Allow",Action:["ecr:GetAuthorizationToken"],Resource:"*"},{Sid:"FjallDevEcrPushPull",Effect:"Allow",Action:["ecr:PutImage","ecr:InitiateLayerUpload","ecr:UploadLayerPart","ecr:CompleteLayerUpload","ecr:BatchCheckLayerAvailability","ecr:BatchGetImage","ecr:GetDownloadUrlForLayer","ecr:DescribeImages"],Resource:`arn:aws:ecr:*:${e}:repository/*`},{Sid:"FjallDevPassDevPathRoles",Effect:"Allow",Action:["iam:PassRole"],Resource:`arn:aws:iam::${e}:role/fjall/dev/*`}]}ge(wD,"buildDevDeployPolicyStatements");function DD({accountId:e}){return[{Sid:"FjallDevProvisionerBoundedRoleWrites",Effect:"Allow",Action:["iam:CreateRole","iam:PutRolePolicy","iam:AttachRolePolicy"],Resource:`arn:aws:iam::${e}:role/fjall/dev/*`,Condition:{StringEquals:{"iam:PermissionsBoundary":rI(e)}}},{Sid:"FjallDevProvisionerPathRoleOps",Effect:"Allow",Action:["iam:DeleteRole","iam:DeleteRolePolicy","iam:DetachRolePolicy","iam:ListRolePolicies","iam:TagRole"],Resource:`arn:aws:iam::${e}:role/fjall/dev/*`},{Sid:"FjallDevProvisionerListRoles",Effect:"Allow",Action:["iam:ListRoles"],Resource:"*"},{Sid:"FjallDevProvisionerDevMasterSecrets",Effect:"Allow",Action:["secretsmanager:GetSecretValue"],Resource:`arn:aws:secretsmanager:*:${e}:secret:fjall-dev-*`},{Sid:"FjallDevProvisionerKmsDecryptViaSecretsManager",Effect:"Allow",Action:["kms:Decrypt"],Resource:`arn:aws:kms:*:${e}:key/*`,Condition:{StringLike:{"kms:ViaService":"secretsmanager.*.amazonaws.com"}}},{Sid:"FjallDevProvisionerDataApi",Effect:"Allow",Action:["rds-data:ExecuteStatement","rds-data:BatchExecuteStatement","rds-data:BeginTransaction","rds-data:CommitTransaction","rds-data:RollbackTransaction"],Resource:`arn:aws:rds:*:${e}:cluster:fjall-dev-*`},{Sid:"FjallDevProvisionerMetrics",Effect:"Allow",Action:["cloudwatch:GetMetricData"],Resource:"*"},{Sid:"FjallDevProvisionerOrphanDiscovery",Effect:"Allow",Action:["tag:GetResources"],Resource:"*"},{Sid:"FjallDevProvisionerSsmTeardown",Effect:"Allow",Action:["ssm:DeleteParameter*"],Resource:`arn:aws:ssm:*:${e}:parameter/fjall/dev/*`},{Sid:"FjallDevProvisionerLogsTeardown",Effect:"Allow",Action:["logs:DeleteLogGroup"],Resource:`arn:aws:logs:*:${e}:log-group:/fjall/dev/*`},{Sid:"FjallDevProvisionerTaggedTeardown",Effect:"Allow",Action:["ecs:UpdateService","ecs:StopTask","ecs:DeleteService","elasticloadbalancing:DeleteRule","elasticloadbalancing:DeleteTargetGroup","elasticloadbalancing:DeregisterTargets"],Resource:[`arn:aws:ecs:*:${e}:*`,`arn:aws:elasticloadbalancing:*:${e}:*`],Condition:{StringEquals:{"aws:ResourceTag/fjall:dev":"true"}}},{Sid:"FjallDevProvisionerTeardownReads",Effect:"Allow",Action:["ecs:Describe*","elasticloadbalancing:Describe*"],Resource:"*"},{Sid:"FjallDevProvisionerImageJanitor",Effect:"Allow",Action:["ecr:ListImages","ecr:DescribeImages","ecr:BatchDeleteImage"],Resource:`arn:aws:ecr:*:${e}:repository/*`},{Sid:"FjallDevProvisionerSsmReadAll",Effect:"Allow",Action:["ssm:GetParameter*"],Resource:`arn:aws:ssm:*:${e}:parameter/*`},{Sid:"FjallDevProvisionerKmsDecryptViaSsm",Effect:"Allow",Action:["kms:Decrypt"],Resource:`arn:aws:kms:*:${e}:key/*`,Condition:{StringLike:{"kms:ViaService":"ssm.*.amazonaws.com"}}}]}ge(DD,"buildDevProvisionerPolicyStatements");function MD({accountId:e}){return[{Sid:"FjallDevSyncPrefixReadWrite",Effect:"Allow",Action:["s3:GetObject","s3:PutObject"],Resource:`arn:aws:s3:::fjall-dev-sync-${e}-*/*`,Condition:{StringEquals:{"aws:ResourceAccount":e}}}]}ge(MD,"buildDevSyncWriterPolicyStatements");function jD({accountId:e}){return[{Sid:"FjallDevBoundarySsmDevRead",Effect:"Allow",Action:["ssm:GetParameter*"],Resource:`arn:aws:ssm:*:${e}:parameter/fjall/dev/*`},{Sid:"FjallDevBoundaryKmsDecryptDevAlias",Effect:"Allow",Action:["kms:Decrypt"],Resource:`arn:aws:kms:*:${e}:key/*`,Condition:{"ForAnyValue:StringLike":{"kms:ResourceAliases":"alias/fjall-dev-*"}}},{Sid:"FjallDevBoundarySyncPrefixReadWrite",Effect:"Allow",Action:["s3:GetObject","s3:PutObject"],Resource:`arn:aws:s3:::fjall-dev-sync-${e}-*/*`,Condition:{StringEquals:{"aws:ResourceAccount":e}}},{Sid:"FjallDevBoundarySlotLogs",Effect:"Allow",Action:["logs:CreateLogStream","logs:PutLogEvents"],Resource:`arn:aws:logs:*:${e}:log-group:/fjall/dev/*`},{Sid:"FjallDevBoundarySyncQueue",Effect:"Allow",Action:["sqs:ReceiveMessage","sqs:DeleteMessage","sqs:GetQueueUrl"],Resource:`arn:aws:sqs:*:${e}:fjall-dev-sync-${e}-*`}]}ge(jD,"buildDevBoundaryStatements");var zD=Object.defineProperty,ht=(e,t)=>zD(e,"name",{value:t,configurable:!0});function T(e){return JSON.stringify(e)}ht(T,"escapeStringLiteral");function Mr(e){return e.map(T).join(", ")}ht(Mr,"formatStringArray");var LD="import:SharedAlarmTopicArn";function jr(e="    "){return`
@@ -333,7 +333,7 @@ app.addCdn(
     accessGate: ${G(e.cdn.accessGate,"    ")}`),n+=de(e.cdn.extraProperties),n+=`
   })
 );
-`,n}Bt(Au,"generateCDNCode");function xu(e){let t=new Set;if(e.cdn&&(e.cdn.defaultOriginRef&&t.add(e.cdn.defaultOriginRef),e.cdn.behaviours))for(let n of e.cdn.behaviours)t.add(n.originRef);return t}Bt(xu,"collectCdnReferencedResources");function Iu(e){return e.patternConfig!==void 0}Bt(Iu,"usesPatternApproach");var e1=Object.defineProperty,Vr=(e,t)=>e1(e,"name",{value:t,configurable:!0}),ta="service",rv="0 4 * * ? *",nv="0 5 * * ? *",Zt=Object.freeze({tinkerer:{displayName:"Tinkerer",description:"Free tier eligible, minimal cost for experimentation",database:{Instance:{instanceType:"t4g.micro",multiAz:!1,proxy:!1,readReplica:!1,publiclyAccessible:!0},Aurora:null,GlobalAurora:null,ClickHouse:null},compute:{ecs:{services:[{name:ta,capacityProvider:"EC2",desiredCount:1,minCapacity:1,maxCapacity:1,ec2Config:{instanceType:"t4g.micro",amiHardwareType:"ARM",minCapacity:1,maxCapacity:1,memoryLimitMiB:400}}],cluster:{directAccess:!0}},lambda:{timeout:30,memory:128}},network:{maxAzs:2,natGateways:!1,flowLogs:!1},backup:!1},lightweight:{displayName:"Lightweight",description:"Streamlined single-AZ deployment for cost efficiency",database:{Instance:{instanceType:"t4g.small",multiAz:!1},Aurora:{readers:!1},GlobalAurora:null,ClickHouse:null},compute:{ecs:{services:[{name:ta,capacityProvider:"FARGATE_SPOT",cpu:256,memoryLimitMiB:512,desiredCount:1,minCapacity:1,maxCapacity:3}]},lambda:{timeout:30,memory:256}},network:{maxAzs:2,natGateways:{count:1},flowLogs:!1},backup:!1},standard:{displayName:"Standard",description:"Production-ready with sensible defaults",database:{Instance:{instanceType:"t4g.large"},Aurora:{readers:{count:1}},GlobalAurora:{readers:{count:1}},ClickHouse:{instanceType:"t4g.medium",coldTier:{mode:"s3"},optimiseSchedule:rv,backupSchedule:nv,backupRetentionDays:14}},compute:{ecs:{services:[{name:ta,capacityProvider:"FARGATE",cpu:512,memoryLimitMiB:1024,desiredCount:2,minCapacity:2,maxCapacity:5}]},lambda:{timeout:60,memory:256}},network:{maxAzs:3,natGateways:{count:1},flowLogs:{},vpcEndpoints:{interface:{ecr:!0}}},backup:!1},resilient:{displayName:"Resilient",description:"High availability with enhanced monitoring and scaling",database:{Instance:{instanceType:"r7g.large",encryption:{storageKey:{useCMK:!0}},databaseInsights:{mode:"advanced",encryptionKey:{useCMK:!0}},proxy:{requireTLS:!0}},Aurora:{readers:{count:2},encryption:{storageKey:{useCMK:!0}},databaseInsights:{mode:"advanced",encryptionKey:{useCMK:!0}},proxy:{requireTLS:!0},backupRetention:30},GlobalAurora:{readers:{count:2},encryption:{storageKey:{useCMK:!0}},databaseInsights:{mode:"advanced",encryptionKey:{useCMK:!0}},proxy:{requireTLS:!0},backupRetention:30,enableGlobalWriteForwarding:!0},ClickHouse:{instanceType:"m6g.large",coldTier:{mode:"s3"},optimiseSchedule:rv,backupSchedule:nv,backupRetentionDays:14}},compute:{ecs:{services:[{name:ta,capacityProvider:"FARGATE",cpu:1024,memoryLimitMiB:2048,desiredCount:4,minCapacity:4,maxCapacity:20}]},lambda:{timeout:120,memory:512}},network:{maxAzs:3,natGateways:{count:3},flowLogs:{retentionDays:90},vpcEndpoints:{interface:{ecr:!0,secretsManager:!0}}},backup:{tier:"resilient"}},enterprise:{displayName:"Enterprise",description:"Maximum capability with all features enabled",database:{Instance:{instanceType:"r7g.xlarge",encryption:{storageKey:{useCMK:!0}},databaseInsights:{mode:"advanced",encryptionKey:{useCMK:!0}},proxy:{requireTLS:!0},readReplica:{}},Aurora:{readers:{count:2},encryption:{storageKey:{useCMK:!0}},databaseInsights:{mode:"advanced",encryptionKey:{useCMK:!0}},proxy:{requireTLS:!0},backupRetention:35},GlobalAurora:{readers:{count:2},encryption:{storageKey:{useCMK:!0}},databaseInsights:{mode:"advanced",encryptionKey:{useCMK:!0}},proxy:{requireTLS:!0},backupRetention:35,enableGlobalWriteForwarding:!0},ClickHouse:{instanceType:"m6g.xlarge",coldTier:{mode:"s3"},optimiseSchedule:rv,backupSchedule:nv,backupRetentionDays:30}},compute:{ecs:{services:[{name:ta,capacityProvider:"FARGATE",cpu:2048,memoryLimitMiB:4096,desiredCount:6,minCapacity:6,maxCapacity:100}]},lambda:{timeout:300,memory:1024}},network:{maxAzs:3,natGateways:{count:3},flowLogs:{destination:"s3",retentionDays:365},vpcEndpoints:{interface:{ecr:!0,secretsManager:!0,kms:!0,cloudwatchLogs:!0}}},backup:{tier:"enterprise"}}});function t1(e,t){return Zt[e].database[t]}Vr(t1,"getDatabasePreset");function r1(e){return Zt[e].compute.ecs}Vr(r1,"getEcsPreset");function iv(e){return Zt[e].network}Vr(iv,"getNetworkPreset");function CI(e){return zc.filter(t=>Zt[t].database[e]!==null)}Vr(CI,"getAvailableTiersForDatabase");function n1(e){return CI(e).map(t=>({label:Zt[t].displayName,value:t,description:Zt[t].description}))}Vr(n1,"getTierOptionsForDatabase");function ov(e){switch(e){case"tinkerer":case"lightweight":case"standard":return"Instance";case"resilient":case"enterprise":return"Aurora"}}Vr(ov,"getDefaultDatabaseTypeForTier");function av(e,t){let n=Zt[e].compute.ecs,i=n.services[0],r=!n.cluster?.directAccess&&n.cluster?.loadBalancer!==!1,o=t.filter(c=>c.serviceType!=="worker").length,a=t.findIndex(c=>c.serviceType!=="worker");return t.map((c,u)=>{let l=u===a,m=c.serviceType==="worker",p;return r&&!m&&(c.routing?p=c.routing:o>1&&(p={path:l?"/*":`/${c.name.toLowerCase()}/*`,...l?{}:{priority:100+u}})),{name:c.name,capacityProvider:i.capacityProvider,ec2Config:i.ec2Config,cpu:i.cpu,memoryLimitMiB:i.memoryLimitMiB,desiredCount:i.desiredCount,minCapacity:i.minCapacity,maxCapacity:i.maxCapacity,routing:p}})}Vr(av,"applyTierDefaultsToServices");var i1=Object.defineProperty,sv=(e,t)=>i1(e,"name",{value:t,configurable:!0}),ra=["lightweight","standard","resilient"],o1=[...ra,"custom"],sr=Object.freeze({lightweight:{displayName:"Lightweight",description:"Cost-effective \xB7 Instance DB, minimal Lambda",database:{type:"Instance",instanceType:"t4g.small",backupRetention:7,deletionProtection:!1},compute:{memorySize:512,timeout:30},network:{maxAzs:2,natGateways:{count:1},flowLogs:!1},backup:!1},standard:{displayName:"Standard",description:"Production-ready \xB7 Instance DB, balanced Lambda",database:{type:"Instance",instanceType:"t4g.large",backupRetention:14,deletionProtection:!0},compute:{memorySize:1536,timeout:60},network:{maxAzs:3,natGateways:{count:1},flowLogs:{}},backup:{tier:"standard"}},resilient:{displayName:"Resilient",description:"High-availability \xB7 Aurora V2, KMS encryption",database:{type:"Aurora",backupRetention:30,deletionProtection:!0,encryption:{useCMK:!0}},compute:{memorySize:2048,timeout:120},network:{maxAzs:3,natGateways:{count:3},flowLogs:{retentionDays:90}},backup:{tier:"resilient"}}});function $u(e){return sr[e]}sv($u,"getPatternTierPreset");function PI(){return[{label:sr.standard.displayName,value:"standard",description:sr.standard.description},{label:sr.lightweight.displayName,value:"lightweight",description:sr.lightweight.description},{label:sr.resilient.displayName,value:"resilient",description:sr.resilient.description},{label:"Custom",value:"custom",description:"Full control \xB7 Configure everything"}]}sv(PI,"getPatternTierOptions");var a1=new Set(ra);function Tu(e){return a1.has(e)}sv(Tu,"isPatternTierName");var s1=Object.defineProperty,kI=(e,t)=>s1(e,"name",{value:t,configurable:!0}),OI=Object.freeze({standard:{},assets:{versioned:!0,deployment:{source:"./assets"}},upload:{versioned:!0,cors:[{allowedOrigins:["*"],allowedMethods:["GET","PUT","POST"]}]},website:{publicReadAccess:!0,websiteHosting:{indexDocument:"index.html",errorDocument:"error.html"}}});function wI(e){return{...OI[e]}}kI(wI,"getStoragePreset");function DI(){return[{label:"Standard",value:"standard"},{label:"Assets",value:"assets"},{label:"Upload",value:"upload"},{label:"Website Hosting",value:"website"}]}kI(DI,"getStoragePresetOptions");import*as me from"typescript";import*as w from"typescript";var c1=Object.defineProperty,si=(e,t)=>c1(e,"name",{value:t,configurable:!0});function U(e){let t={};for(let n of e.properties){if(!w.isPropertyAssignment(n))continue;let i=w.isIdentifier(n.name)||w.isStringLiteral(n.name)?n.name.text:void 0;i!==void 0&&(t[i]=cr(n.initializer))}return t}si(U,"parseObjectLiteral");function cr(e){if(w.isStringLiteral(e))return e.text;if(w.isNumericLiteral(e))return Number(e.text);if(e.kind===w.SyntaxKind.TrueKeyword)return!0;if(e.kind===w.SyntaxKind.FalseKeyword)return!1;if(w.isArrayLiteralExpression(e))return e.elements.map(t=>cr(t));if(w.isObjectLiteralExpression(e))return U(e);if(w.isIdentifier(e))return{__identifier:e.text};if(w.isPropertyAccessExpression(e))return{__expression:e.getText()};if(w.isCallExpression(e))return{__call:e.getText()};if(w.isBinaryExpression(e)&&e.operatorToken.kind===w.SyntaxKind.BarBarToken){let t=cr(e.left),n=cr(e.right);return typeof n=="string"?n:t}else if(w.isConditionalExpression(e)){let t=cr(e.whenTrue),n=cr(e.whenFalse);return typeof n=="string"||typeof n=="number"?n:t}else if(w.isTemplateExpression(e)||w.isNoSubstitutionTemplateLiteral(e))return{__expression:e.getText()};return{__unknown:e.getText()}}si(cr,"evaluateExpression");function na(e,t){return Ke(e,n=>{if(w.isVariableStatement(n)){for(let i of n.declarationList.declarations)if(w.isIdentifier(i.name)&&i.name.text===t&&i.initializer){if(w.isStringLiteral(i.initializer))return i.initializer.text;if(w.isObjectLiteralExpression(i.initializer)){let r=U(i.initializer);return JSON.stringify(r)}}}})}si(na,"findVariableValue");function cv(e,t){return Ke(e,n=>{if(w.isVariableStatement(n)){for(let i of n.declarationList.declarations)if(w.isIdentifier(i.name)&&i.name.text===t&&i.initializer&&w.isObjectLiteralExpression(i.initializer))return U(i.initializer)}})}si(cv,"findObjectDeclaration");function ia(e,t){if(!w.isIdentifier(t.expression))return;let n=cv(e,t.expression.text),i=t.name.text;if(n&&n[i]!==void 0)return String(n[i])}si(ia,"evaluatePropertyAccess");function Ru(e,t){let n=t.head.text;for(let i of t.templateSpans){if(w.isIdentifier(i.expression)){let r=na(e,i.expression.text);if(r)n+=r;else return t.getText(e).replace(/^`|`$/g,"")}else if(w.isPropertyAccessExpression(i.expression)){let r=ia(e,i.expression);if(r)n+=r;else return t.getText(e).replace(/^`|`$/g,"")}else return t.getText(e).replace(/^`|`$/g,"");n+=i.literal.text}return n}si(Ru,"resolveTemplateLiteral");var u1=Object.defineProperty,X=(e,t)=>u1(e,"name",{value:t,configurable:!0});function at(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}X(at,"isPlainObject");function Gt(e){return at(e)&&"__identifier"in e}X(Gt,"isIdentifierRef");function ur(e){return at(e)&&"__expression"in e}X(ur,"isExpressionRef");function vt(e){return at(e)&&"__call"in e}X(vt,"isCallRef");function N(e){return at(e)&&!("__identifier"in e)&&!("__expression"in e)&&!("__call"in e)&&!("__unknown"in e)}X(N,"isParsedObject");function b(e){return typeof e=="string"?e:void 0}X(b,"asString");function R(e){return typeof e=="number"?e:void 0}X(R,"asNumber");function M(e){return typeof e=="boolean"?e:void 0}X(M,"asBoolean");function ae(e){if(!Array.isArray(e))return;let t=[];for(let n of e)typeof n=="string"&&t.push(n);return t.length>0?t:void 0}X(ae,"asStringArray");function z(e,t){let n=b(e);if(n!==void 0)return nt(t,n)?n:void 0}X(z,"asStringUnion");function Ze(e){let t={};for(let[n,i]of Object.entries(e))i!==void 0&&(t[n]=i);return t}X(Ze,"omitUndefined");function Nu(e){if(e===null)return"null";if(e===void 0)return"undefined";if(typeof e=="string")return JSON.stringify(e);if(typeof e=="number"||typeof e=="boolean")return String(e);if(Array.isArray(e))return`[${e.map(Nu).join(", ")}]`;if(!at(e))return String(e);if(Gt(e))return e.__identifier;if(ur(e))return e.__expression;if(vt(e))return e.__call;if("__unknown"in e&&typeof e.__unknown=="string")return e.__unknown;let t=Object.entries(e);return t.length===0?"{}":`{ ${t.map(([n,i])=>`${n}: ${Nu(i)}`).join(", ")} }`}X(Nu,"parsedValueToSourceText");function oe(e,t){let n=[];for(let[i,r]of Object.entries(e))t.has(i)||r===void 0||n.push({key:i,sourceText:Nu(r)});return n}X(oe,"captureExtraProperties");function lr(e,t){return me.isPropertyAssignment(e)&&me.isIdentifier(e.name)&&e.name.text===t}X(lr,"isNamedProperty");function kt(e){return me.isCallExpression(e)&&me.isPropertyAccessExpression(e.expression)&&e.expression.name.text==="getApp"&&me.isIdentifier(e.expression.expression)&&e.expression.expression.text==="App"}X(kt,"isAppGetAppCall");function ye(e,t){let{expression:n}=e;return me.isPropertyAccessExpression(n)&&n.name.text===t&&e.arguments.length>0}X(ye,"isFactoryMethodCall");function Ke(e,t){let n,i=X(r=>{n===void 0&&(n=t(r),n===void 0&&me.forEachChild(r,i))},"visit");return i(e),n}X(Ke,"findFirstInAst");function xe(e,t){let n=[],i=X(r=>{let o=t(r);o!==null&&n.push(o),me.forEachChild(r,i)},"visit");return i(e),n}X(xe,"collectFromAst");function Oe(e,t){return me.isCallExpression(e)&&me.isPropertyAccessExpression(e.expression)&&e.expression.name.text==="build"&&me.isIdentifier(e.expression.expression)&&e.expression.expression.text===t}X(Oe,"isFactoryBuildCall");function He(e){let t=e.parent;if(me.isVariableDeclaration(t)&&me.isIdentifier(t.name))return t.name.text}X(He,"extractVariableName");var st=X(()=>e=>e,"typed");function ci(e){if(e!=null){if(e===!1)return!1;if(typeof e=="object"&&!Array.isArray(e))return e}}X(ci,"asObjectOrFalse");function Vt(e,t){return e===!1?!1:N(e)?t(e):void 0}X(Vt,"parseBooleanOrConfig");function Ie(e,t){return N(e)?t(e):void 0}X(Ie,"parseOptionalConfig");function ct(e,t,n){let i=e[t];return N(i)?n(i):void 0}X(ct,"extractSubConfig");import*as V from"typescript";import*as ui from"typescript";var l1=Object.defineProperty,Ye=(e,t)=>l1(e,"name",{value:t,configurable:!0});function oa(e){return e!==void 0&&at(e)}Ye(oa,"isEnvironmentRecord");function MI(e){if(!N(e))return;let t={};for(let[n,i]of Object.entries(e))if(N(i)){let r=b(i.id),o=b(i.name);r&&o&&(t[n]={id:r,name:o,field:b(i.field)})}return Object.keys(t).length>0?t:void 0}Ye(MI,"parseContainerSecretsImport");function jI(e){if(!N(e))return;let t=ae(e.command);if(!(!t||t.length===0))return{command:t,interval:R(e.interval),timeout:R(e.timeout),retries:R(e.retries),startPeriod:R(e.startPeriod)}}Ye(jI,"parseContainerHealthCheck");function zI(e){let t=oe(e,new Set(["name","image","port","environment","essential","command","entryPoint","secretsImport","secrets","healthCheck"]));return{name:b(e.name),image:b(e.image),port:R(e.port),environment:oa(e.environment)?e.environment:void 0,essential:M(e.essential),command:ae(e.command),entryPoint:ae(e.entryPoint),secretsImport:MI(e.secretsImport),ssmSecrets:ae(e.secrets),healthCheck:jI(e.healthCheck),extraProperties:t.length>0?t:void 0}}Ye(zI,"parseServiceContainer");function LI(e){if(Array.isArray(e))return e.filter(N).map(t=>({path:b(t.path),host:b(t.host),priority:R(t.priority),healthCheckPath:b(t.healthCheckPath)}));if(N(e))return{path:b(e.path),host:b(e.host),priority:R(e.priority),healthCheckPath:b(e.healthCheckPath)}}Ye(LI,"parseServiceRouting");function UI(e){if(e===!1)return!1;if(N(e))return{minCapacity:R(e.minCapacity),maxCapacity:R(e.maxCapacity),desiredCount:R(e.desiredCount),scalingType:z(e.scalingType,Bc)}}Ye(UI,"parseServiceScaling");var d1=new Set(["instanceType","amiHardwareType","minCapacity","maxCapacity","memoryLimitMiB","warmPool"]);function FI(e){if(!N(e))return;let t=e.warmPool,n=N(t)?{minSize:R(t.minSize),reuseOnScaleIn:M(t.reuseOnScaleIn)}:void 0,i=oe(e,d1);return{instanceType:b(e.instanceType),amiHardwareType:z(e.amiHardwareType,Zc),minCapacity:R(e.minCapacity),maxCapacity:R(e.maxCapacity),memoryLimitMiB:R(e.memoryLimitMiB),warmPool:n,extraProperties:i.length>0?i:void 0}}Ye(FI,"parseServiceEc2Config");var m1=new Set(["domain","loadBalancer","directAccess"]);function uv(e){if(!N(e))return;let t=e.loadBalancer,n=oe(e,m1);return{domain:b(e.domain),loadBalancer:t===!1?!1:z(t,Fc),directAccess:M(e.directAccess),...n.length>0&&{extraProperties:n}}}Ye(uv,"extractClusterConfig");function lv(e){let t=e.containers,n=Array.isArray(t)?t.filter(N).map(zI):void 0,i=oe(e,new Set(["name","image","docker","ssmSecretsPath","containers","routing","connections","cpu","memoryLimitMiB","desiredCount","scaling","capacityProvider","ec2Config"]));return{name:b(e.name)??"",image:b(e.image),docker:BI(e.docker),ssmSecretsPath:b(e.ssmSecretsPath),containers:n,routing:LI(e.routing),cpu:R(e.cpu),memoryLimitMiB:R(e.memoryLimitMiB),desiredCount:R(e.desiredCount),scaling:UI(e.scaling),capacityProvider:z(e.capacityProvider,Kn)??"FARGATE",ec2Config:FI(e.ec2Config),...i.length>0&&{extraProperties:i}}}Ye(lv,"parseEcsService");function BI(e){if(!N(e))return;let t=b(e.path);if(t===void 0)return;let n=b(e.context),i=b(e.target);return{path:t,...n!==void 0&&{context:n},...i!==void 0&&{target:i}}}Ye(BI,"parseServiceDocker");function aa(e,t){let n=b(e);if(n)return n;if(ur(e)&&e.__expression.startsWith(t+"."))return e.__expression.slice(t.length+1)}Ye(aa,"extractEnumString");function dv(e){return vt(e)?e.__call.match(/\(\s*"([^"]+)"\s*\)/)?.[1]:void 0}Ye(dv,"extractCallStringArg");function $e(e,t,n){n!==void 0&&(e[t]=n)}Ye($e,"assignIfDefined");var p1=Object.defineProperty,Cu=(e,t)=>p1(e,"name",{value:t,configurable:!0}),f1=10;function mv(e,t){return Array.isArray(e)?e.filter(Gt).map(n=>t.find(i=>i.variableName===n.__identifier)).filter(n=>n!==void 0).map(n=>n.resourceName):[]}Cu(mv,"resolveConnectedDatabaseNames");function pv(e,t){return Array.isArray(e)?e.filter(Gt).map(n=>t.find(i=>i.variableName===n.__identifier)).filter(n=>n!==void 0).map(n=>n.resourceName):[]}Cu(pv,"resolveConnectedStorageNames");function fv(e,t,n){if(!Array.isArray(t)||t.length===0)return;let i=t[0];if(!N(i))return;let r=i.containers;if(!Array.isArray(r)||r.length===0)return;let o=r[0];if(!N(o)||!N(o.environment))return;let a=o.environment;(a.DATABASE_HOST||a.DATABASE_PORT||a.DATABASE_NAME)&&(e.needsConnection=!0,n.length>0&&(e.connectedDatabase??[]).length===0&&(e.connectedDatabase=[n[0].name]));for(let c=1;c<=f1;c++)(a[`DATABASE_HOST_${c}`]||a[`DATABASE_PORT_${c}`]||a[`DATABASE_NAME_${c}`])&&(e.needsConnection=!0)}Cu(fv,"inferDatabaseConnectionsFromEnv");function gv(e,t,n){if(!Array.isArray(t)||t.length===0)return;let i=t[0];if(!N(i))return;let r=i.containers;if(!Array.isArray(r)||r.length===0)return;let o=r[0];!N(o)||!N(o.environment)||o.environment.BUCKET_NAME&&n.length>0&&(e.connectedStorage??[]).length===0&&(e.connectedStorage=[n[0].name])}Cu(gv,"inferStorageConnectionsFromEnv");var g1=Object.defineProperty,Wt=(e,t)=>g1(e,"name",{value:t,configurable:!0});function ZI(e){if(e.arguments.length<2)return null;let t=e.arguments[0],n=e.arguments[1];if(!ui.isStringLiteral(t)||!ui.isObjectLiteralExpression(n))return null;let i=t.text,r=U(n);return{resourceName:i,type:b(r.type)??"ecs",config:r,node:e}}Wt(ZI,"extractComputeResource");function Pu(e){return xe(e,t=>{if(!ui.isCallExpression(t)||!ye(t,"addCompute"))return null;let n=t.arguments[0];if(!Oe(n,"ComputeFactory"))return null;let i=ZI(n);if(i){let r=He(t);r&&(i.variableName=r)}return i})}Wt(Pu,"findComputeResources");function ku(e,t,n){let i=oe(e.config,n);i.length>0&&(t.extraProperties=i)}Wt(ku,"applyExtras");function GI(e,t){let n=e.config.docker;if(N(n)){let o=b(n.path),a=b(n.context),c=b(n.target);(o!==void 0||a!==void 0||c!==void 0)&&(t.docker={...o!==void 0&&{path:o},...a!==void 0&&{context:a},...c!==void 0&&{target:c}})}let i=e.config.cluster;i!==void 0&&(t.cluster=uv(i));let r=e.config.services;r!==void 0&&Array.isArray(r)&&(t.services=r.filter(o=>N(o)).map(lv)),ku(e,t,new Set(["type","ecrRepository","docker","cluster","services","connections"]))}Wt(GI,"convertEcsCompute");function VI(e,t){if($e(t,"deployment",z(e.config.deployment,Lc)),$e(t,"timeout",R(e.config.timeout)),$e(t,"memory",R(e.config.memorySize)??R(e.config.memory)),$e(t,"handler",b(e.config.handler)),$e(t,"runtime",aa(e.config.runtime,"Runtime")),oa(e.config.environment)&&(t.environment=e.config.environment),oa(e.config.secrets))t.secrets=e.config.secrets;else{let r=ae(e.config.secrets);r&&(t.ssmSecrets=r)}let n=e.config.functionUrl;if(N(n)){let r=z(aa(n.authType,"FunctionUrlAuthType"),No);r!==void 0&&(t.functionUrl={authType:r})}let i=e.config.code;if(i!==void 0){let r=dv(i);r&&(t.codePath=r)}$e(t,"description",b(e.config.lambdaDescription)),$e(t,"architecture",z(aa(e.config.architecture,"Architecture"),Uc)),$e(t,"ephemeralStorageSize",R(e.config.ephemeralStorageSize)),$e(t,"functionName",b(e.config.functionName)),$e(t,"ssmSecretsPath",b(e.config.ssmSecretsPath)),ku(e,t,new Set(["type","deployment","timeout","memorySize","memory","handler","runtime","environment","secrets","functionUrl","code","connections","ecrRepository","containerSecretsImport","lambdaDescription","architecture","ephemeralStorageSize","functionName","ssmSecretsPath"]))}Wt(VI,"convertLambdaCompute");function WI(e,t){$e(t,"instanceType",z(e.config.instanceType,Gc));let n=e.config.ssh;n===!1?t.enableSSH=!1:n!==void 0&&N(n)?t.enableSSH=!0:$e(t,"enableSSH",M(e.config.enableSSH)),$e(t,"keyName",b(e.config.keyName)),$e(t,"userData",b(e.config.userData)),e.config.securityGroups!==void 0&&(t.securityGroups=ae(e.config.securityGroups)),ku(e,t,new Set(["type","instanceType","ssh","enableSSH","keyName","userData","securityGroups","connections"]))}Wt(WI,"convertEc2Compute");function KI(e,t,n,i){let r=t.config.connections;if(!r&&Array.isArray(t.config.services)){let c=t.config.services[0];N(c)&&(r=c.connections)}if(!r)return;let o=mv(r,n);o.length>0&&(e.needsConnection=!0,e.connectedDatabase=o);let a=pv(r,i);a.length>0&&(e.connectedStorage=a)}Wt(KI,"applyConnectionConfig");function HI(e,t){({ecs:GI,lambda:VI,ec2:WI})[e.type]?.(t,e)}Wt(HI,"applyTypeSpecificConfig");function hv(e,t,n,i){return e.map(r=>{let o=z(r.config.type,To)??"ecs",a={name:r.resourceName,type:o,needsConnection:!1,connectedDatabase:[],...r.variableName&&{variableName:r.variableName}};return KI(a,r,t,n),HI(a,r),fv(a,r.config.services,i.database),gv(a,r.config.services,i.s3),a})}Wt(hv,"convertComputeResources");import*as ut from"typescript";var h1=Object.defineProperty,v1=(e,t)=>h1(e,"name",{value:t,configurable:!0});function Ou(e){return xe(e,t=>{if(!ut.isCallExpression(t)||!ye(t,"addSchedule")||t.arguments.length<2)return null;let n=t.arguments[0],i=t.arguments[1];if(!ut.isStringLiteral(n)||!ut.isObjectLiteralExpression(i))return null;let r=U(i),o=b(r.schedule);if(o===void 0)return null;let a=i.properties.find(c=>ut.isPropertyAssignment(c)&&ut.isIdentifier(c.name)&&c.name.text==="target");return!a||!ut.isPropertyAssignment(a)||!ut.isIdentifier(a.initializer)?null:{id:n.text,schedule:o,targetVariableName:a.initializer.text}})}v1(Ou,"findSchedules");import*as J from"typescript";import*as we from"typescript";var b1=Object.defineProperty,sa=(e,t)=>b1(e,"name",{value:t,configurable:!0}),vv=new Set(["S3Bucket"]);function YI(e,t,n){let i=we.isIdentifier(e.name)?e.name.text:"";if(t.arguments&&t.arguments.length>=2){let r=t.arguments[1],o=we.isStringLiteral(r)?r.text:"",a=t.arguments.length>=3?t.arguments[2]:void 0,c=a&&we.isObjectLiteralExpression(a)?U(a):{};return{variableName:i,resourceName:o,bucketClass:n,config:c,node:e}}return null}sa(YI,"extractS3Resource");function XI(e,t){if(t.arguments.length<2)return null;let n=t.arguments[0],i=t.arguments[1];if(!we.isStringLiteral(n)||!we.isObjectLiteralExpression(i))return null;let r=U(i);return{variableName:He(e)??"",resourceName:n.text,bucketClass:"StorageFactory",config:r,node:e}}sa(XI,"extractS3FactoryResource");function bv(e){return xe(e,t=>{if(!we.isVariableDeclaration(t)||!t.initializer||!we.isNewExpression(t.initializer))return null;let n=t.initializer;if(!we.isIdentifier(n.expression))return null;let i=n.expression.text;return vv.has(i)?YI(t,n,i):null})}sa(bv,"findS3Resources");function yv(e){return xe(e,t=>{if(!we.isCallExpression(t)||!ye(t,"addStorage"))return null;let n=t.arguments[0];return Oe(n,"StorageFactory")?XI(t,n):null})}sa(yv,"findS3FactoryResources");function Sv(e){return e.map(t=>({name:t.resourceName,...b(t.config.bucketName)&&{bucketName:b(t.config.bucketName)},...M(t.config.publicReadAccess)===!0&&{publicReadAccess:!0},...N(t.config.websiteHosting)&&(()=>{let n=t.config.websiteHosting;return{websiteHosting:{indexDocument:b(n.indexDocument)??"index.html",...b(n.errorDocument)&&{errorDocument:b(n.errorDocument)}}}})(),...z(t.config.backupVaultTier,gt)&&{backupVaultTier:z(t.config.backupVaultTier,gt)},...M(t.config.versioned)!==void 0&&{versioned:M(t.config.versioned)},...z(t.config.encryption,Jn)&&{encryption:z(t.config.encryption,Jn)},...b(t.config.kmsKeyArn)&&{kmsKeyArn:b(t.config.kmsKeyArn)},...Array.isArray(t.config.cors)&&t.config.cors.length>0&&{cors:t.config.cors.filter(N).map(n=>({allowedOrigins:Array.isArray(n.allowedOrigins)?n.allowedOrigins.filter(i=>typeof i=="string"):[],allowedMethods:Array.isArray(n.allowedMethods)?n.allowedMethods.filter(i=>typeof i=="string"):[]}))},...N(t.config.deployment)&&(()=>{let n=t.config.deployment;return{deployment:{source:b(n.source)??"",...M(n.prune)!==void 0&&{prune:M(n.prune)},...N(n.cacheControl)&&(()=>{let i=n.cacheControl;return{cacheControl:{...R(i.maxAge)!==void 0&&{maxAge:R(i.maxAge)},...M(i.immutable)!==void 0&&{immutable:M(i.immutable)}}}})()}}})(),...z(t.config.stackPlacement,nu)&&{stackPlacement:z(t.config.stackPlacement,nu)},...t.variableName&&{variableName:t.variableName},...(()=>{let n=new Set(["bucketName","publicReadAccess","websiteHosting","backupVaultTier","versioned","encryption","kmsKeyArn","cors","deployment","stackPlacement"]),i=oe(t.config,n);return i.length>0?{extraProperties:i}:{}})()}))}sa(Sv,"convertS3Resources");var y1=Object.defineProperty,Wr=(e,t)=>y1(e,"name",{value:t,configurable:!0}),JI=new Set(["App","Architecture","DatabaseFactory","StorageFactory","ComputeFactory","getConfig","MessagingFactory","CdnFactory","Code","Runtime","FunctionUrlAuthType","NetworkFactory","PatternFactory","VpcPeerFactory","VpcPeerAccepterFactory","CrossPlanConnectionFactory"]);function wu(e){return!!(e.startsWith("@fjall/")||e==="aws-cdk-lib"||e.startsWith("aws-cdk-lib/")||e==="constructs")}Wr(wu,"isManagedModuleSpecifier");function Ge(e){let t=[];for(let n of e.statements){let i=n.getFullStart(),r=n.getEnd();if(J.isImportDeclaration(n)){t.push({type:"import",node:n,startPos:i,endPos:r,isManaged:qI(n)});continue}if(J.isVariableStatement(n)){t.push(QI(n,i,r));continue}if(J.isExpressionStatement(n)){t.push(e$(n,i,r));continue}t.push({type:"custom",node:n,startPos:i,endPos:r,isManaged:!1})}return t}Wr(Ge,"classifyStatements");function qI(e){return J.isStringLiteral(e.moduleSpecifier)?wu(e.moduleSpecifier.text):!1}Wr(qI,"isManagedImport");function QI(e,t,n){for(let i of e.declarationList.declarations)if(i.initializer){if(kt(i.initializer))return{type:"app-init",node:e,resourceName:J.isIdentifier(i.name)?i.name.text:void 0,startPos:t,endPos:n,isManaged:!0};if(J.isIdentifier(i.name)&&i.name.text==="appName"&&J.isStringLiteral(i.initializer))return{type:"app-init",node:e,startPos:t,endPos:n,isManaged:!0};if(J.isNewExpression(i.initializer)){let r=i.initializer;if(J.isIdentifier(r.expression)){let o=r.expression.text;if(vv.has(o)){let a=r.arguments&&r.arguments.length>=2&&J.isStringLiteral(r.arguments[1])?r.arguments[1].text:void 0;return{type:"storage",node:e,resourceName:a,startPos:t,endPos:n,isManaged:!0}}}}if(J.isCallExpression(i.initializer)){let r=_v(i.initializer,e,t,n);if(r.type!=="custom")return r}}return{type:"custom",node:e,startPos:t,endPos:n,isManaged:!1}}Wr(QI,"classifyVariableStatement");function e$(e,t,n){let i=e.expression;return J.isCallExpression(i)?_v(i,e,t,n):{type:"custom",node:e,startPos:t,endPos:n,isManaged:!1}}Wr(e$,"classifyExpressionStatement");function _v(e,t,n,i){let r=e.expression;if(J.isPropertyAccessExpression(r)&&J.isIdentifier(r.expression)){let o=r.name.text;if(o==="addTags")return{type:"tags",node:t,startPos:n,endPos:i,isManaged:!0};let a={addDatabase:{type:"database",factory:"DatabaseFactory"},addCompute:{type:"compute",factory:"ComputeFactory"},addNetwork:{type:"network",factory:"NetworkFactory"},addMessaging:{type:"messaging",factory:"MessagingFactory"},addCdn:{type:"cdn",factory:"CdnFactory"},addPattern:{type:"pattern",factory:"PatternFactory"},addStorage:{type:"storage",factory:"StorageFactory"},addVpcPeer:{type:"vpc-peer",factory:"VpcPeerFactory"},addVpcPeerAccepter:{type:"vpc-peer-accepter",factory:"VpcPeerAccepterFactory"}}[o];if(a){let c=t$(e,a.factory);return{type:a.type,node:t,resourceName:c,startPos:n,endPos:i,isManaged:!0}}}return{type:"custom",node:t,startPos:n,endPos:i,isManaged:!1}}Wr(_v,"classifyCallExpression");function t$(e,t){if(e.arguments.length===0)return;let n=e.arguments[0];if(!J.isCallExpression(n))return;let i=n.expression;if(!J.isPropertyAccessExpression(i)||i.name.text!=="build"||!J.isIdentifier(i.expression)||i.expression.text!==t||n.arguments.length===0)return;let r=n.arguments[0];if(J.isStringLiteral(r))return r.text}Wr(t$,"extractResourceNameFromFactoryCall");import*as r$ from"typescript";var S1=Object.defineProperty,Kr=(e,t)=>S1(e,"name",{value:t,configurable:!0}),_1={import:"after-imports","app-init":"after-app-init",tags:"after-tags"};function n$(e){if(!e)return{position:"before-imports"};let t=_1[e.type];return t?{position:t}:{position:"after-resource",afterManagedResource:{type:e.type,name:e.resourceName}}}Kr(n$,"determineCustomBlockPosition");function ca(e,t){let n=t??Ge(e),i=[],r=e.getFullText(),o=null;for(let a of n)if(a.type==="custom"&&!a.isManaged){let{position:c,afterManagedResource:u}=n$(o),l=i$(r,a.node),m=o$(r,a.node),p=e.getLineAndCharacterOfPosition(a.node.getStart());i.push({sourceText:l,position:c,afterManagedResource:u,originalLine:p.line+1,leadingComments:m.length>0?m:void 0})}else a.isManaged&&(o=a);return i}Kr(ca,"extractCustomCodeBlocks");function i$(e,t){let n=t.getFullStart(),i=t.getEnd(),r=e.slice(n,i).split(`
+`,n}Bt(Au,"generateCDNCode");function xu(e){let t=new Set;if(e.cdn&&(e.cdn.defaultOriginRef&&t.add(e.cdn.defaultOriginRef),e.cdn.behaviours))for(let n of e.cdn.behaviours)t.add(n.originRef);return t}Bt(xu,"collectCdnReferencedResources");function Iu(e){return e.patternConfig!==void 0}Bt(Iu,"usesPatternApproach");var e1=Object.defineProperty,Vr=(e,t)=>e1(e,"name",{value:t,configurable:!0}),ta="service",rv="0 4 * * ? *",nv="0 5 * * ? *",Zt=Object.freeze({tinkerer:{displayName:"Tinkerer",description:"Free tier eligible, minimal cost for experimentation",database:{Instance:{instanceType:"t4g.micro",multiAz:!1,proxy:!1,readReplica:!1,publiclyAccessible:!0},Aurora:null,GlobalAurora:null,ClickHouse:null},compute:{ecs:{services:[{name:ta,capacityProvider:"EC2",desiredCount:1,minCapacity:1,maxCapacity:1,ec2Config:{instanceType:"t4g.micro",amiHardwareType:"ARM",minCapacity:1,maxCapacity:1,memoryLimitMiB:400}}],cluster:{directAccess:!0}},lambda:{timeout:30,memory:128}},network:{maxAzs:2,natGateways:!1,flowLogs:!1},backup:!1},lightweight:{displayName:"Lightweight",description:"Streamlined single-AZ deployment for cost efficiency",database:{Instance:{instanceType:"t4g.small",multiAz:!1},Aurora:{readers:!1},GlobalAurora:null,ClickHouse:null},compute:{ecs:{services:[{name:ta,capacityProvider:"FARGATE_SPOT",cpu:256,memoryLimitMiB:512,desiredCount:1,minCapacity:1,maxCapacity:3}]},lambda:{timeout:30,memory:256}},network:{maxAzs:2,natGateways:{count:1},flowLogs:!1},backup:!1},standard:{displayName:"Standard",description:"Production-ready with sensible defaults",database:{Instance:{instanceType:"t4g.large"},Aurora:{readers:{count:1}},GlobalAurora:{readers:{count:1}},ClickHouse:{instanceType:"t4g.medium",coldTier:{mode:"s3"},optimiseSchedule:rv,backupSchedule:nv,backupRetentionDays:14}},compute:{ecs:{services:[{name:ta,capacityProvider:"FARGATE",cpu:512,memoryLimitMiB:1024,desiredCount:2,minCapacity:2,maxCapacity:5}]},lambda:{timeout:60,memory:256}},network:{maxAzs:3,natGateways:{count:1},flowLogs:{},vpcEndpoints:{interface:{ecr:!0}}},backup:!1},resilient:{displayName:"Resilient",description:"High availability with enhanced monitoring and scaling",database:{Instance:{instanceType:"r7g.large",encryption:{storageKey:{useCMK:!0}},databaseInsights:{mode:"advanced",encryptionKey:{useCMK:!0}},proxy:{requireTLS:!0}},Aurora:{readers:{count:2},encryption:{storageKey:{useCMK:!0}},databaseInsights:{mode:"advanced",encryptionKey:{useCMK:!0}},proxy:{requireTLS:!0},backupRetention:30},GlobalAurora:{readers:{count:2},encryption:{storageKey:{useCMK:!0}},databaseInsights:{mode:"advanced",encryptionKey:{useCMK:!0}},proxy:{requireTLS:!0},backupRetention:30,enableGlobalWriteForwarding:!0},ClickHouse:{instanceType:"m6g.large",coldTier:{mode:"s3"},optimiseSchedule:rv,backupSchedule:nv,backupRetentionDays:14}},compute:{ecs:{services:[{name:ta,capacityProvider:"FARGATE",cpu:1024,memoryLimitMiB:2048,desiredCount:4,minCapacity:4,maxCapacity:20}]},lambda:{timeout:120,memory:512}},network:{maxAzs:3,natGateways:{count:3},flowLogs:{retentionDays:90},vpcEndpoints:{interface:{ecr:!0,secretsManager:!0}}},backup:{tier:"resilient"}},enterprise:{displayName:"Enterprise",description:"Maximum capability with all features enabled",database:{Instance:{instanceType:"r7g.xlarge",encryption:{storageKey:{useCMK:!0}},databaseInsights:{mode:"advanced",encryptionKey:{useCMK:!0}},proxy:{requireTLS:!0},readReplica:{}},Aurora:{readers:{count:2},encryption:{storageKey:{useCMK:!0}},databaseInsights:{mode:"advanced",encryptionKey:{useCMK:!0}},proxy:{requireTLS:!0},backupRetention:35},GlobalAurora:{readers:{count:2},encryption:{storageKey:{useCMK:!0}},databaseInsights:{mode:"advanced",encryptionKey:{useCMK:!0}},proxy:{requireTLS:!0},backupRetention:35,enableGlobalWriteForwarding:!0},ClickHouse:{instanceType:"m6g.xlarge",coldTier:{mode:"s3"},optimiseSchedule:rv,backupSchedule:nv,backupRetentionDays:30}},compute:{ecs:{services:[{name:ta,capacityProvider:"FARGATE",cpu:2048,memoryLimitMiB:4096,desiredCount:6,minCapacity:6,maxCapacity:100}]},lambda:{timeout:300,memory:1024}},network:{maxAzs:3,natGateways:{count:3},flowLogs:{destination:"s3",retentionDays:365},vpcEndpoints:{interface:{ecr:!0,secretsManager:!0,kms:!0,cloudwatchLogs:!0}}},backup:{tier:"enterprise"}}});function t1(e,t){return Zt[e].database[t]}Vr(t1,"getDatabasePreset");function r1(e){return Zt[e].compute.ecs}Vr(r1,"getEcsPreset");function iv(e){return Zt[e].network}Vr(iv,"getNetworkPreset");function CI(e){return zc.filter(t=>Zt[t].database[e]!==null)}Vr(CI,"getAvailableTiersForDatabase");function n1(e){return CI(e).map(t=>({label:Zt[t].displayName,value:t,description:Zt[t].description}))}Vr(n1,"getTierOptionsForDatabase");function ov(e){switch(e){case"tinkerer":case"lightweight":case"standard":return"Instance";case"resilient":case"enterprise":return"Aurora"}}Vr(ov,"getDefaultDatabaseTypeForTier");function av(e,t){let n=Zt[e].compute.ecs,i=n.services[0],r=!n.cluster?.directAccess&&n.cluster?.loadBalancer!==!1,o=t.filter(c=>c.serviceType!=="worker").length,a=t.findIndex(c=>c.serviceType!=="worker");return t.map((c,u)=>{let l=u===a,m=c.serviceType==="worker",p;return r&&!m&&(c.routing?p=c.routing:o>1&&(p={path:l?"/*":`/${c.name.toLowerCase()}/*`,...l?{}:{priority:100+u}})),{name:c.name,capacityProvider:i.capacityProvider,ec2Config:i.ec2Config,cpu:i.cpu,memoryLimitMiB:i.memoryLimitMiB,desiredCount:i.desiredCount,minCapacity:i.minCapacity,maxCapacity:i.maxCapacity,routing:p}})}Vr(av,"applyTierDefaultsToServices");var i1=Object.defineProperty,sv=(e,t)=>i1(e,"name",{value:t,configurable:!0}),ra=["lightweight","standard","resilient"],o1=[...ra,"custom"],sr=Object.freeze({lightweight:{displayName:"Lightweight",description:"Cost-effective \xB7 Instance DB, minimal Lambda",database:{type:"Instance",instanceType:"t4g.small",backupRetention:7,deletionProtection:!1},compute:{memorySize:512,timeout:30},network:{maxAzs:2,natGateways:{count:1},flowLogs:!1},backup:!1},standard:{displayName:"Standard",description:"Production-ready \xB7 Instance DB, balanced Lambda",database:{type:"Instance",instanceType:"t4g.large",backupRetention:14,deletionProtection:!0},compute:{memorySize:1536,timeout:60},network:{maxAzs:3,natGateways:{count:1},flowLogs:{}},backup:{tier:"standard"}},resilient:{displayName:"Resilient",description:"High-availability \xB7 Aurora V2, KMS encryption",database:{type:"Aurora",backupRetention:30,deletionProtection:!0,encryption:{useCMK:!0}},compute:{memorySize:2048,timeout:120},network:{maxAzs:3,natGateways:{count:3},flowLogs:{retentionDays:90}},backup:{tier:"resilient"}}});function $u(e){return sr[e]}sv($u,"getPatternTierPreset");function PI(){return[{label:sr.standard.displayName,value:"standard",description:sr.standard.description},{label:sr.lightweight.displayName,value:"lightweight",description:sr.lightweight.description},{label:sr.resilient.displayName,value:"resilient",description:sr.resilient.description},{label:"Custom",value:"custom",description:"Full control \xB7 Configure everything"}]}sv(PI,"getPatternTierOptions");var a1=new Set(ra);function Tu(e){return a1.has(e)}sv(Tu,"isPatternTierName");var s1=Object.defineProperty,kI=(e,t)=>s1(e,"name",{value:t,configurable:!0}),OI=Object.freeze({standard:{},assets:{versioned:!0,deployment:{source:"./assets"}},upload:{versioned:!0,cors:[{allowedOrigins:["*"],allowedMethods:["GET","PUT","POST"]}]},website:{publicReadAccess:!0,websiteHosting:{indexDocument:"index.html",errorDocument:"error.html"}}});function wI(e){return{...OI[e]}}kI(wI,"getStoragePreset");function DI(){return[{label:"Standard",value:"standard"},{label:"Assets",value:"assets"},{label:"Upload",value:"upload"},{label:"Website Hosting",value:"website"}]}kI(DI,"getStoragePresetOptions");import*as me from"typescript";import*as w from"typescript";var c1=Object.defineProperty,si=(e,t)=>c1(e,"name",{value:t,configurable:!0});function U(e){let t={};for(let n of e.properties){if(!w.isPropertyAssignment(n))continue;let i=w.isIdentifier(n.name)||w.isStringLiteral(n.name)?n.name.text:void 0;i!==void 0&&(t[i]=cr(n.initializer))}return t}si(U,"parseObjectLiteral");function cr(e){if(w.isStringLiteral(e))return e.text;if(w.isNumericLiteral(e))return Number(e.text);if(e.kind===w.SyntaxKind.TrueKeyword)return!0;if(e.kind===w.SyntaxKind.FalseKeyword)return!1;if(w.isArrayLiteralExpression(e))return e.elements.map(t=>cr(t));if(w.isObjectLiteralExpression(e))return U(e);if(w.isIdentifier(e))return{__identifier:e.text};if(w.isPropertyAccessExpression(e))return{__expression:e.getText()};if(w.isCallExpression(e))return{__call:e.getText()};if(w.isBinaryExpression(e)&&e.operatorToken.kind===w.SyntaxKind.BarBarToken){let t=cr(e.left),n=cr(e.right);return typeof n=="string"?n:t}else if(w.isConditionalExpression(e)){let t=cr(e.whenTrue),n=cr(e.whenFalse);return typeof n=="string"||typeof n=="number"?n:t}else if(w.isTemplateExpression(e)||w.isNoSubstitutionTemplateLiteral(e))return{__expression:e.getText()};return{__unknown:e.getText()}}si(cr,"evaluateExpression");function na(e,t){return Ke(e,n=>{if(w.isVariableStatement(n)){for(let i of n.declarationList.declarations)if(w.isIdentifier(i.name)&&i.name.text===t&&i.initializer){if(w.isStringLiteral(i.initializer))return i.initializer.text;if(w.isObjectLiteralExpression(i.initializer)){let r=U(i.initializer);return JSON.stringify(r)}}}})}si(na,"findVariableValue");function cv(e,t){return Ke(e,n=>{if(w.isVariableStatement(n)){for(let i of n.declarationList.declarations)if(w.isIdentifier(i.name)&&i.name.text===t&&i.initializer&&w.isObjectLiteralExpression(i.initializer))return U(i.initializer)}})}si(cv,"findObjectDeclaration");function ia(e,t){if(!w.isIdentifier(t.expression))return;let n=cv(e,t.expression.text),i=t.name.text;if(n&&n[i]!==void 0)return String(n[i])}si(ia,"evaluatePropertyAccess");function Ru(e,t){let n=t.head.text;for(let i of t.templateSpans){if(w.isIdentifier(i.expression)){let r=na(e,i.expression.text);if(r)n+=r;else return t.getText(e).replace(/^`|`$/g,"")}else if(w.isPropertyAccessExpression(i.expression)){let r=ia(e,i.expression);if(r)n+=r;else return t.getText(e).replace(/^`|`$/g,"")}else return t.getText(e).replace(/^`|`$/g,"");n+=i.literal.text}return n}si(Ru,"resolveTemplateLiteral");var u1=Object.defineProperty,X=(e,t)=>u1(e,"name",{value:t,configurable:!0});function at(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}X(at,"isPlainObject");function Gt(e){return at(e)&&"__identifier"in e}X(Gt,"isIdentifierRef");function ur(e){return at(e)&&"__expression"in e}X(ur,"isExpressionRef");function vt(e){return at(e)&&"__call"in e}X(vt,"isCallRef");function N(e){return at(e)&&!("__identifier"in e)&&!("__expression"in e)&&!("__call"in e)&&!("__unknown"in e)}X(N,"isParsedObject");function b(e){return typeof e=="string"?e:void 0}X(b,"asString");function R(e){return typeof e=="number"?e:void 0}X(R,"asNumber");function M(e){return typeof e=="boolean"?e:void 0}X(M,"asBoolean");function ae(e){if(!Array.isArray(e))return;let t=[];for(let n of e)typeof n=="string"&&t.push(n);return t.length>0?t:void 0}X(ae,"asStringArray");function z(e,t){let n=b(e);if(n!==void 0)return nt(t,n)?n:void 0}X(z,"asStringUnion");function Ze(e){let t={};for(let[n,i]of Object.entries(e))i!==void 0&&(t[n]=i);return t}X(Ze,"omitUndefined");function Nu(e){if(e===null)return"null";if(e===void 0)return"undefined";if(typeof e=="string")return JSON.stringify(e);if(typeof e=="number"||typeof e=="boolean")return String(e);if(Array.isArray(e))return`[${e.map(Nu).join(", ")}]`;if(!at(e))return String(e);if(Gt(e))return e.__identifier;if(ur(e))return e.__expression;if(vt(e))return e.__call;if("__unknown"in e&&typeof e.__unknown=="string")return e.__unknown;let t=Object.entries(e);return t.length===0?"{}":`{ ${t.map(([n,i])=>`${n}: ${Nu(i)}`).join(", ")} }`}X(Nu,"parsedValueToSourceText");function oe(e,t){let n=[];for(let[i,r]of Object.entries(e))t.has(i)||r===void 0||n.push({key:i,sourceText:Nu(r)});return n}X(oe,"captureExtraProperties");function lr(e,t){return me.isPropertyAssignment(e)&&me.isIdentifier(e.name)&&e.name.text===t}X(lr,"isNamedProperty");function kt(e){return me.isCallExpression(e)&&me.isPropertyAccessExpression(e.expression)&&e.expression.name.text==="getApp"&&me.isIdentifier(e.expression.expression)&&e.expression.expression.text==="App"}X(kt,"isAppGetAppCall");function ye(e,t){let{expression:n}=e;return me.isPropertyAccessExpression(n)&&n.name.text===t&&e.arguments.length>0}X(ye,"isFactoryMethodCall");function Ke(e,t){let n,i=X(r=>{n===void 0&&(n=t(r),n===void 0&&me.forEachChild(r,i))},"visit");return i(e),n}X(Ke,"findFirstInAst");function xe(e,t){let n=[],i=X(r=>{let o=t(r);o!==null&&n.push(o),me.forEachChild(r,i)},"visit");return i(e),n}X(xe,"collectFromAst");function Oe(e,t){return me.isCallExpression(e)&&me.isPropertyAccessExpression(e.expression)&&e.expression.name.text==="build"&&me.isIdentifier(e.expression.expression)&&e.expression.expression.text===t}X(Oe,"isFactoryBuildCall");function He(e){let t=e.parent;if(me.isVariableDeclaration(t)&&me.isIdentifier(t.name))return t.name.text}X(He,"extractVariableName");var st=X(()=>e=>e,"typed");function ci(e){if(e!=null){if(e===!1)return!1;if(typeof e=="object"&&!Array.isArray(e))return e}}X(ci,"asObjectOrFalse");function Vt(e,t){return e===!1?!1:N(e)?t(e):void 0}X(Vt,"parseBooleanOrConfig");function Ie(e,t){return N(e)?t(e):void 0}X(Ie,"parseOptionalConfig");function ct(e,t,n){let i=e[t];return N(i)?n(i):void 0}X(ct,"extractSubConfig");import*as V from"typescript";import*as ui from"typescript";var l1=Object.defineProperty,Ye=(e,t)=>l1(e,"name",{value:t,configurable:!0});function oa(e){return e!==void 0&&at(e)}Ye(oa,"isEnvironmentRecord");function MI(e){if(!N(e))return;let t={};for(let[n,i]of Object.entries(e))if(N(i)){let r=b(i.id),o=b(i.name);r&&o&&(t[n]={id:r,name:o,field:b(i.field)})}return Object.keys(t).length>0?t:void 0}Ye(MI,"parseContainerSecretsImport");function jI(e){if(!N(e))return;let t=ae(e.command);if(!(!t||t.length===0))return{command:t,interval:R(e.interval),timeout:R(e.timeout),retries:R(e.retries),startPeriod:R(e.startPeriod)}}Ye(jI,"parseContainerHealthCheck");function zI(e){let t=oe(e,new Set(["name","image","port","environment","essential","command","entryPoint","secretsImport","secrets","healthCheck"]));return{name:b(e.name),image:b(e.image),port:R(e.port),environment:oa(e.environment)?e.environment:void 0,essential:M(e.essential),command:ae(e.command),entryPoint:ae(e.entryPoint),secretsImport:MI(e.secretsImport),ssmSecrets:ae(e.secrets),healthCheck:jI(e.healthCheck),extraProperties:t.length>0?t:void 0}}Ye(zI,"parseServiceContainer");function LI(e){if(Array.isArray(e))return e.filter(N).map(t=>({path:b(t.path),host:b(t.host),priority:R(t.priority),healthCheckPath:b(t.healthCheckPath)}));if(N(e))return{path:b(e.path),host:b(e.host),priority:R(e.priority),healthCheckPath:b(e.healthCheckPath)}}Ye(LI,"parseServiceRouting");function UI(e){if(e===!1)return!1;if(N(e))return{minCapacity:R(e.minCapacity),maxCapacity:R(e.maxCapacity),desiredCount:R(e.desiredCount),scalingType:z(e.scalingType,Bc)}}Ye(UI,"parseServiceScaling");var d1=new Set(["instanceType","amiHardwareType","minCapacity","maxCapacity","memoryLimitMiB","warmPool"]);function FI(e){if(!N(e))return;let t=e.warmPool,n=N(t)?{minSize:R(t.minSize),reuseOnScaleIn:M(t.reuseOnScaleIn)}:void 0,i=oe(e,d1);return{instanceType:b(e.instanceType),amiHardwareType:z(e.amiHardwareType,Zc),minCapacity:R(e.minCapacity),maxCapacity:R(e.maxCapacity),memoryLimitMiB:R(e.memoryLimitMiB),warmPool:n,extraProperties:i.length>0?i:void 0}}Ye(FI,"parseServiceEc2Config");var m1=new Set(["domain","loadBalancer","directAccess"]);function uv(e){if(!N(e))return;let t=e.loadBalancer,n=oe(e,m1);return{domain:b(e.domain),loadBalancer:t===!1?!1:z(t,Fc),directAccess:M(e.directAccess),...n.length>0&&{extraProperties:n}}}Ye(uv,"extractClusterConfig");function lv(e){let t=e.containers,n=Array.isArray(t)?t.filter(N).map(zI):void 0,i=oe(e,new Set(["name","image","docker","ssmSecretsPath","containers","routing","connections","cpu","memoryLimitMiB","desiredCount","scaling","capacityProvider","ec2Config"]));return{name:b(e.name)??"",image:b(e.image),docker:BI(e.docker),ssmSecretsPath:b(e.ssmSecretsPath),containers:n,routing:LI(e.routing),cpu:R(e.cpu),memoryLimitMiB:R(e.memoryLimitMiB),desiredCount:R(e.desiredCount),scaling:UI(e.scaling),capacityProvider:z(e.capacityProvider,Kn)??"FARGATE",ec2Config:FI(e.ec2Config),...i.length>0&&{extraProperties:i}}}Ye(lv,"parseEcsService");function BI(e){if(!N(e))return;let t=b(e.path);if(t===void 0)return;let n=b(e.context),i=b(e.target);return{path:t,...n!==void 0&&{context:n},...i!==void 0&&{target:i}}}Ye(BI,"parseServiceDocker");function aa(e,t){let n=b(e);if(n)return n;if(ur(e)&&e.__expression.startsWith(t+"."))return e.__expression.slice(t.length+1)}Ye(aa,"extractEnumString");function dv(e){return vt(e)?e.__call.match(/\(\s*"([^"]+)"\s*\)/)?.[1]:void 0}Ye(dv,"extractCallStringArg");function $e(e,t,n){n!==void 0&&(e[t]=n)}Ye($e,"assignIfDefined");var p1=Object.defineProperty,Cu=(e,t)=>p1(e,"name",{value:t,configurable:!0}),f1=10;function mv(e,t){return Array.isArray(e)?e.filter(Gt).map(n=>t.find(i=>i.variableName===n.__identifier)).filter(n=>n!==void 0).map(n=>n.resourceName):[]}Cu(mv,"resolveConnectedDatabaseNames");function pv(e,t){return Array.isArray(e)?e.filter(Gt).map(n=>t.find(i=>i.variableName===n.__identifier)).filter(n=>n!==void 0).map(n=>n.resourceName):[]}Cu(pv,"resolveConnectedStorageNames");function fv(e,t,n){if(!Array.isArray(t)||t.length===0)return;let i=t[0];if(!N(i))return;let r=i.containers;if(!Array.isArray(r)||r.length===0)return;let o=r[0];if(!N(o)||!N(o.environment))return;let a=o.environment;(a.DATABASE_HOST||a.DATABASE_PORT||a.DATABASE_NAME)&&(e.needsConnection=!0,n.length>0&&(e.connectedDatabase??[]).length===0&&(e.connectedDatabase=[n[0].name]));for(let c=1;c<=f1;c++)(a[`DATABASE_HOST_${c}`]||a[`DATABASE_PORT_${c}`]||a[`DATABASE_NAME_${c}`])&&(e.needsConnection=!0)}Cu(fv,"inferDatabaseConnectionsFromEnv");function gv(e,t,n){if(!Array.isArray(t)||t.length===0)return;let i=t[0];if(!N(i))return;let r=i.containers;if(!Array.isArray(r)||r.length===0)return;let o=r[0];!N(o)||!N(o.environment)||o.environment.BUCKET_NAME&&n.length>0&&(e.connectedStorage??[]).length===0&&(e.connectedStorage=[n[0].name])}Cu(gv,"inferStorageConnectionsFromEnv");var g1=Object.defineProperty,Wt=(e,t)=>g1(e,"name",{value:t,configurable:!0});function ZI(e){if(e.arguments.length<2)return null;let t=e.arguments[0],n=e.arguments[1];if(!ui.isStringLiteral(t)||!ui.isObjectLiteralExpression(n))return null;let i=t.text,r=U(n);return{resourceName:i,type:b(r.type)??"ecs",config:r,node:e}}Wt(ZI,"extractComputeResource");function Pu(e){return xe(e,t=>{if(!ui.isCallExpression(t)||!ye(t,"addCompute"))return null;let n=t.arguments[0];if(!Oe(n,"ComputeFactory"))return null;let i=ZI(n);if(i){let r=He(t);r&&(i.variableName=r)}return i})}Wt(Pu,"findComputeResources");function ku(e,t,n){let i=oe(e.config,n);i.length>0&&(t.extraProperties=i)}Wt(ku,"applyExtras");function GI(e,t){let n=e.config.docker;if(N(n)){let o=b(n.path),a=b(n.context),c=b(n.target);(o!==void 0||a!==void 0||c!==void 0)&&(t.docker={...o!==void 0&&{path:o},...a!==void 0&&{context:a},...c!==void 0&&{target:c}})}let i=e.config.cluster;i!==void 0&&(t.cluster=uv(i));let r=e.config.services;r!==void 0&&Array.isArray(r)&&(t.services=r.filter(o=>N(o)).map(lv)),ku(e,t,new Set(["type","ecrRepository","docker","cluster","services","connections"]))}Wt(GI,"convertEcsCompute");function VI(e,t){if($e(t,"deployment",z(e.config.deployment,Lc)),$e(t,"timeout",R(e.config.timeout)),$e(t,"memory",R(e.config.memorySize)??R(e.config.memory)),$e(t,"handler",b(e.config.handler)),$e(t,"runtime",aa(e.config.runtime,"Runtime")),oa(e.config.environment)&&(t.environment=e.config.environment),oa(e.config.secrets))t.secrets=e.config.secrets;else{let r=ae(e.config.secrets);r&&(t.ssmSecrets=r)}let n=e.config.functionUrl;if(N(n)){let r=z(aa(n.authType,"FunctionUrlAuthType"),No);r!==void 0&&(t.functionUrl={authType:r})}let i=e.config.code;if(i!==void 0){let r=dv(i);r&&(t.codePath=r)}$e(t,"description",b(e.config.lambdaDescription)),$e(t,"architecture",z(aa(e.config.architecture,"Architecture"),Uc)),$e(t,"ephemeralStorageSize",R(e.config.ephemeralStorageSize)),$e(t,"functionName",b(e.config.functionName)),$e(t,"ssmSecretsPath",b(e.config.ssmSecretsPath)),ku(e,t,new Set(["type","deployment","timeout","memorySize","memory","handler","runtime","environment","secrets","functionUrl","code","connections","ecrRepository","containerSecretsImport","lambdaDescription","architecture","ephemeralStorageSize","functionName","ssmSecretsPath"]))}Wt(VI,"convertLambdaCompute");function WI(e,t){$e(t,"instanceType",z(e.config.instanceType,Gc));let n=e.config.ssh;n===!1?t.enableSSH=!1:n!==void 0&&N(n)?t.enableSSH=!0:$e(t,"enableSSH",M(e.config.enableSSH)),$e(t,"keyName",b(e.config.keyName)),$e(t,"userData",b(e.config.userData)),e.config.securityGroups!==void 0&&(t.securityGroups=ae(e.config.securityGroups)),ku(e,t,new Set(["type","instanceType","ssh","enableSSH","keyName","userData","securityGroups","connections"]))}Wt(WI,"convertEc2Compute");function KI(e,t,n,i){let r=t.config.connections;if(!r&&Array.isArray(t.config.services)){let c=t.config.services[0];N(c)&&(r=c.connections)}if(!r)return;let o=mv(r,n);o.length>0&&(e.needsConnection=!0,e.connectedDatabase=o);let a=pv(r,i);a.length>0&&(e.connectedStorage=a)}Wt(KI,"applyConnectionConfig");function HI(e,t){({ecs:GI,lambda:VI,ec2:WI})[e.type]?.(t,e)}Wt(HI,"applyTypeSpecificConfig");function hv(e,t,n,i){return e.map(r=>{let o=z(r.config.type,To)??"ecs",a={name:r.resourceName,type:o,needsConnection:!1,connectedDatabase:[],...r.variableName&&{variableName:r.variableName}};return KI(a,r,t,n),HI(a,r),fv(a,r.config.services,i.database),gv(a,r.config.services,i.s3),a})}Wt(hv,"convertComputeResources");import*as ut from"typescript";var h1=Object.defineProperty,v1=(e,t)=>h1(e,"name",{value:t,configurable:!0});function Ou(e){return xe(e,t=>{if(!ut.isCallExpression(t)||!ye(t,"addSchedule")||t.arguments.length<2)return null;let n=t.arguments[0],i=t.arguments[1];if(!ut.isStringLiteral(n)||!ut.isObjectLiteralExpression(i))return null;let r=U(i),o=b(r.schedule);if(o===void 0)return null;let a=i.properties.find(c=>ut.isPropertyAssignment(c)&&ut.isIdentifier(c.name)&&c.name.text==="target");return!a||!ut.isPropertyAssignment(a)||!ut.isIdentifier(a.initializer)?null:{id:n.text,schedule:o,targetVariableName:a.initializer.text}})}v1(Ou,"findSchedules");import*as J from"typescript";import*as we from"typescript";var b1=Object.defineProperty,sa=(e,t)=>b1(e,"name",{value:t,configurable:!0}),vv=new Set(["S3Bucket"]);function YI(e,t,n){let i=we.isIdentifier(e.name)?e.name.text:"";if(t.arguments&&t.arguments.length>=2){let r=t.arguments[1],o=we.isStringLiteral(r)?r.text:"",a=t.arguments.length>=3?t.arguments[2]:void 0,c=a&&we.isObjectLiteralExpression(a)?U(a):{};return{variableName:i,resourceName:o,bucketClass:n,config:c,node:e}}return null}sa(YI,"extractS3Resource");function XI(e,t){if(t.arguments.length<2)return null;let n=t.arguments[0],i=t.arguments[1];if(!we.isStringLiteral(n)||!we.isObjectLiteralExpression(i))return null;let r=U(i);return{variableName:He(e)??"",resourceName:n.text,bucketClass:"StorageFactory",config:r,node:e}}sa(XI,"extractS3FactoryResource");function bv(e){return xe(e,t=>{if(!we.isVariableDeclaration(t)||!t.initializer||!we.isNewExpression(t.initializer))return null;let n=t.initializer;if(!we.isIdentifier(n.expression))return null;let i=n.expression.text;return vv.has(i)?YI(t,n,i):null})}sa(bv,"findS3Resources");function yv(e){return xe(e,t=>{if(!we.isCallExpression(t)||!ye(t,"addStorage"))return null;let n=t.arguments[0];return Oe(n,"StorageFactory")?XI(t,n):null})}sa(yv,"findS3FactoryResources");function Sv(e){return e.map(t=>({name:t.resourceName,...b(t.config.bucketName)&&{bucketName:b(t.config.bucketName)},...M(t.config.publicReadAccess)===!0&&{publicReadAccess:!0},...N(t.config.websiteHosting)&&(()=>{let n=t.config.websiteHosting;return{websiteHosting:{indexDocument:b(n.indexDocument)??"index.html",...b(n.errorDocument)&&{errorDocument:b(n.errorDocument)}}}})(),...z(t.config.backupVaultTier,gt)&&{backupVaultTier:z(t.config.backupVaultTier,gt)},...M(t.config.versioned)!==void 0&&{versioned:M(t.config.versioned)},...z(t.config.encryption,Jn)&&{encryption:z(t.config.encryption,Jn)},...b(t.config.kmsKeyArn)&&{kmsKeyArn:b(t.config.kmsKeyArn)},...Array.isArray(t.config.cors)&&t.config.cors.length>0&&{cors:t.config.cors.filter(N).map(n=>({allowedOrigins:Array.isArray(n.allowedOrigins)?n.allowedOrigins.filter(i=>typeof i=="string"):[],allowedMethods:Array.isArray(n.allowedMethods)?n.allowedMethods.filter(i=>typeof i=="string"):[]}))},...N(t.config.deployment)&&(()=>{let n=t.config.deployment;return{deployment:{source:b(n.source)??"",...M(n.prune)!==void 0&&{prune:M(n.prune)},...N(n.cacheControl)&&(()=>{let i=n.cacheControl;return{cacheControl:{...R(i.maxAge)!==void 0&&{maxAge:R(i.maxAge)},...M(i.immutable)!==void 0&&{immutable:M(i.immutable)}}}})()}}})(),...z(t.config.stackPlacement,nu)&&{stackPlacement:z(t.config.stackPlacement,nu)},...t.variableName&&{variableName:t.variableName},...(()=>{let n=new Set(["bucketName","publicReadAccess","websiteHosting","backupVaultTier","versioned","encryption","kmsKeyArn","cors","deployment","stackPlacement"]),i=oe(t.config,n);return i.length>0?{extraProperties:i}:{}})()}))}sa(Sv,"convertS3Resources");var y1=Object.defineProperty,Wr=(e,t)=>y1(e,"name",{value:t,configurable:!0}),JI=new Set(["App","Architecture","DatabaseFactory","StorageFactory","ComputeFactory","getConfig","MessagingFactory","CdnFactory","Code","Runtime","FunctionUrlAuthType","NetworkFactory","PatternFactory","CrossPlanConnectionFactory"]);function wu(e){return!!(e.startsWith("@fjall/")||e==="aws-cdk-lib"||e.startsWith("aws-cdk-lib/")||e==="constructs")}Wr(wu,"isManagedModuleSpecifier");function Ge(e){let t=[];for(let n of e.statements){let i=n.getFullStart(),r=n.getEnd();if(J.isImportDeclaration(n)){t.push({type:"import",node:n,startPos:i,endPos:r,isManaged:qI(n)});continue}if(J.isVariableStatement(n)){t.push(QI(n,i,r));continue}if(J.isExpressionStatement(n)){t.push(e$(n,i,r));continue}t.push({type:"custom",node:n,startPos:i,endPos:r,isManaged:!1})}return t}Wr(Ge,"classifyStatements");function qI(e){return J.isStringLiteral(e.moduleSpecifier)?wu(e.moduleSpecifier.text):!1}Wr(qI,"isManagedImport");function QI(e,t,n){for(let i of e.declarationList.declarations)if(i.initializer){if(kt(i.initializer))return{type:"app-init",node:e,resourceName:J.isIdentifier(i.name)?i.name.text:void 0,startPos:t,endPos:n,isManaged:!0};if(J.isIdentifier(i.name)&&i.name.text==="appName"&&J.isStringLiteral(i.initializer))return{type:"app-init",node:e,startPos:t,endPos:n,isManaged:!0};if(J.isNewExpression(i.initializer)){let r=i.initializer;if(J.isIdentifier(r.expression)){let o=r.expression.text;if(vv.has(o)){let a=r.arguments&&r.arguments.length>=2&&J.isStringLiteral(r.arguments[1])?r.arguments[1].text:void 0;return{type:"storage",node:e,resourceName:a,startPos:t,endPos:n,isManaged:!0}}}}if(J.isCallExpression(i.initializer)){let r=_v(i.initializer,e,t,n);if(r.type!=="custom")return r}}return{type:"custom",node:e,startPos:t,endPos:n,isManaged:!1}}Wr(QI,"classifyVariableStatement");function e$(e,t,n){let i=e.expression;return J.isCallExpression(i)?_v(i,e,t,n):{type:"custom",node:e,startPos:t,endPos:n,isManaged:!1}}Wr(e$,"classifyExpressionStatement");function _v(e,t,n,i){let r=e.expression;if(J.isPropertyAccessExpression(r)&&J.isIdentifier(r.expression)){let o=r.name.text;if(o==="addTags")return{type:"tags",node:t,startPos:n,endPos:i,isManaged:!0};let a={addDatabase:{type:"database",factory:"DatabaseFactory"},addCompute:{type:"compute",factory:"ComputeFactory"},addNetwork:{type:"network",factory:"NetworkFactory"},addMessaging:{type:"messaging",factory:"MessagingFactory"},addCdn:{type:"cdn",factory:"CdnFactory"},addPattern:{type:"pattern",factory:"PatternFactory"},addStorage:{type:"storage",factory:"StorageFactory"}}[o];if(a){let c=t$(e,a.factory);return{type:a.type,node:t,resourceName:c,startPos:n,endPos:i,isManaged:!0}}}return{type:"custom",node:t,startPos:n,endPos:i,isManaged:!1}}Wr(_v,"classifyCallExpression");function t$(e,t){if(e.arguments.length===0)return;let n=e.arguments[0];if(!J.isCallExpression(n))return;let i=n.expression;if(!J.isPropertyAccessExpression(i)||i.name.text!=="build"||!J.isIdentifier(i.expression)||i.expression.text!==t||n.arguments.length===0)return;let r=n.arguments[0];if(J.isStringLiteral(r))return r.text}Wr(t$,"extractResourceNameFromFactoryCall");import*as r$ from"typescript";var S1=Object.defineProperty,Kr=(e,t)=>S1(e,"name",{value:t,configurable:!0}),_1={import:"after-imports","app-init":"after-app-init",tags:"after-tags"};function n$(e){if(!e)return{position:"before-imports"};let t=_1[e.type];return t?{position:t}:{position:"after-resource",afterManagedResource:{type:e.type,name:e.resourceName}}}Kr(n$,"determineCustomBlockPosition");function ca(e,t){let n=t??Ge(e),i=[],r=e.getFullText(),o=null;for(let a of n)if(a.type==="custom"&&!a.isManaged){let{position:c,afterManagedResource:u}=n$(o),l=i$(r,a.node),m=o$(r,a.node),p=e.getLineAndCharacterOfPosition(a.node.getStart());i.push({sourceText:l,position:c,afterManagedResource:u,originalLine:p.line+1,leadingComments:m.length>0?m:void 0})}else a.isManaged&&(o=a);return i}Kr(ca,"extractCustomCodeBlocks");function i$(e,t){let n=t.getFullStart(),i=t.getEnd(),r=e.slice(n,i).split(`
 `),o=r.findIndex(a=>a.trim()!=="");return r.slice(o===-1?0:o).join(`
 `)}Kr(i$,"getStatementTextWithComments");function o$(e,t){let n=[],i=r$.getLeadingCommentRanges(e,t.getFullStart());if(i)for(let r of i){let o=e.slice(r.pos,r.end);n.push(o)}return n}Kr(o$,"extractLeadingComments");function li(e,t,n,i){let r=i??Ge(e);for(let o of r)if(o.type===t&&o.resourceName===n)return{startPos:o.startPos,endPos:o.endPos,node:o.node};return null}Kr(li,"findManagedResourcePosition");function Ev(e,t,n){let i=n??Ge(e),r=null;for(let o of i)o.type===t&&o.isManaged&&(r=o);return r}Kr(Ev,"getLastManagedStatementOfType");function Av(e,t){let n=t??Ge(e),i={import:[],"app-init":[],tags:[],database:[],compute:[],storage:[],network:[],messaging:[],cdn:[],pattern:[],"vpc-peer":[],"vpc-peer-accepter":[],"cross-plan-connection":[],custom:[]};for(let r of n)i[r.type].push(r);return i}Kr(Av,"getManagedResourcesByType");import*as Kt from"typescript";import*as la from"typescript";var E1=Object.defineProperty,xv=(e,t)=>E1(e,"name",{value:t,configurable:!0}),A1=["S","N","B"];function ua(e){if(!N(e))return;let t=b(e.name),n=z(e.type,A1);if(!(!t||!n))return{name:t,type:n}}xv(ua,"parseDynamoDBKey");function Iv(e){let t=e.node;if(!la.isCallExpression(t))return null;let n=t.arguments[0];if(!la.isCallExpression(n)||n.arguments.length<2)return null;let i=n.arguments[1];if(!la.isObjectLiteralExpression(i))return null;let r=U(i),o=ua(r.partitionKey);if(!o)return null;let a={resourceName:e.resourceName,partitionKey:o,node:e.node};e.variableName&&(a.variableName=e.variableName);let c=ua(r.sortKey);if(c&&(a.sortKey=c),Array.isArray(r.globalSecondaryIndexes)){let p=r.globalSecondaryIndexes.filter(N).map(g=>{let v=ua(g.partitionKey);if(!v)return null;let x=b(g.indexName);if(!x)return null;let Q={indexName:x,partitionKey:v},H=ua(g.sortKey);return H&&(Q.sortKey=H),Q}).filter(g=>g!==null);p.length>0&&(a.globalSecondaryIndexes=p)}let u=b(r.ttlAttribute);u&&(a.ttlAttribute=u);let l=M(r.stream);l!==void 0&&(a.stream=l);let m=oe(r,new Set(["type","databaseName","partitionKey","sortKey","globalSecondaryIndexes","ttlAttribute","stream"]));return m.length>0&&(a.extraProperties=m),a}xv(Iv,"extractDynamoDBFields");function Du(e){if(e.length!==0)return e.map(t=>({name:t.resourceName,partitionKey:t.partitionKey,...Ze({sortKey:t.sortKey,globalSecondaryIndexes:t.globalSecondaryIndexes,ttlAttribute:t.ttlAttribute,stream:t.stream,variableName:t.variableName,extraProperties:t.extraProperties})}))}xv(Du,"convertDynamoDBResources");import*as da from"typescript";var x1=Object.defineProperty,a$=(e,t)=>x1(e,"name",{value:t,configurable:!0}),I1=new Set(["type","databaseName","instanceType","coldTier","optimiseSchedule","backupSchedule","backupRetentionDays"]);function $v(e){let t=e.node;if(!da.isCallExpression(t))return null;let n=t.arguments[0];if(!da.isCallExpression(n)||n.arguments.length<2)return null;let i=n.arguments[1];if(!da.isObjectLiteralExpression(i))return null;let r=U(i),o={resourceName:e.resourceName,databaseName:e.databaseName,node:e.node};e.variableName&&(o.variableName=e.variableName);let a=b(r.instanceType);a&&(o.instanceType=a);let c=r.coldTier;c===!1?o.coldTier=!1:N(c)&&b(c.mode)==="s3"&&(o.coldTier={mode:"s3"});let u=r.optimiseSchedule;if(u===!1)o.optimiseSchedule=!1;else{let g=b(u);g&&(o.optimiseSchedule=g)}let l=r.backupSchedule;if(l===!1)o.backupSchedule=!1;else{let g=b(l);g&&(o.backupSchedule=g)}let m=R(r.backupRetentionDays);m!==void 0&&(o.backupRetentionDays=m);let p=oe(r,I1);return p.length>0&&(o.extraProperties=p),o}a$($v,"extractClickHouseFields");function Mu(e){if(e.length!==0)return e.map(t=>({name:t.resourceName,type:"ClickHouse",databaseName:t.databaseName,...Ze({instanceType:t.instanceType,coldTier:t.coldTier,optimiseSchedule:t.optimiseSchedule,backupSchedule:t.backupSchedule,backupRetentionDays:t.backupRetentionDays,variableName:t.variableName,extraProperties:t.extraProperties})}))}a$(Mu,"convertClickHouseResources");var $1=Object.defineProperty,di=(e,t)=>$1(e,"name",{value:t,configurable:!0});function s$(e){let t=b(e.databaseEngine);if(t!==void 0&&nt(Yn,t))return t;let n=e.engine;if(vt(n)){let i=String(n.__call);if(i.includes("postgres")||i.includes("auroraPostgres"))return"postgresql";if(i.includes("mysql")||i.includes("auroraMysql"))return"mysql"}}di(s$,"extractDatabaseEngine");function c$(e){let t=e.engine;if(vt(t))return String(t.__call)}di(c$,"extractEngineExpression");var T1=new Set(["type","databaseName","databaseEngine","engine","vpc","port","deletionProtection","instanceType","multiAz","publiclyAccessible","enableSecretRotation","encryption","databaseInsights","proxy","readReplica","credentials","writer","readers","backupRetention","preferredMaintenanceWindow","primaryRegion","secondaryRegions","globalClusterIdentifier","enableGlobalWriteForwarding","snapshotIdentifier","allocatedStorage","monitoringInterval","snapshotUsername"]);function u$(e,t,n){if(n.arguments.length<2)return null;let i=n.arguments[0],r=n.arguments[1];if(!Kt.isStringLiteral(i)&&!Kt.isTemplateExpression(i))return null;let o=Kt.isStringLiteral(i)?i.text:Ru(e,i);if(!Kt.isObjectLiteralExpression(r))return null;let a=U(r),c={resourceName:o,type:b(a.type)??"",databaseName:b(a.databaseName)??"",databaseEngine:s$(a),engineExpression:c$(a),port:R(a.port),deletionProtection:M(a.deletionProtection),instanceType:b(a.instanceType),multiAz:M(a.multiAz),publiclyAccessible:M(a.publiclyAccessible),enableSecretRotation:M(a.enableSecretRotation),encryption:Ie(a.encryption,st()),databaseInsights:Vt(a.databaseInsights,st()),proxy:Vt(a.proxy,st()),readReplica:Vt(a.readReplica,st()),credentials:Ie(a.credentials,st()),writer:Ie(a.writer,st()),readers:Vt(a.readers,st()),backupRetention:R(a.backupRetention),preferredMaintenanceWindow:b(a.preferredMaintenanceWindow),primaryRegion:b(a.primaryRegion),secondaryRegions:ae(a.secondaryRegions),globalClusterIdentifier:b(a.globalClusterIdentifier),enableGlobalWriteForwarding:M(a.enableGlobalWriteForwarding),allocatedStorage:R(a.allocatedStorage),monitoringInterval:R(a.monitoringInterval),snapshotIdentifier:b(a.snapshotIdentifier),snapshotUsername:b(a.snapshotUsername),node:t},u=He(t);u&&(c.variableName=u);let l=oe(a,T1);return l.length>0&&(c.extraProperties=l),c}di(u$,"extractDatabaseResource");function Tv(e){return xe(e,t=>{if(!Kt.isCallExpression(t)||!ye(t,"addDatabase"))return null;let n=t.arguments[0];return Oe(n,"DatabaseFactory")?u$(e,t,n):null})}di(Tv,"findDatabaseResources");function Rv(e){let t=[],n=[],i=[];for(let r of e)if(r.type==="DynamoDB"){let o=Iv(r);o&&n.push(o)}else if(r.type==="ClickHouse"){let o=$v(r);o&&i.push(o)}else t.push(r);return{databases:t,dynamodb:n,clickhouse:i}}di(Rv,"splitDatabaseResources");var R1=["Instance","Aurora","GlobalAurora"];function Nv(e){return e.filter(t=>t.type!=="DynamoDB").map(t=>({name:t.resourceName,type:nt(R1,t.type)?t.type:"Instance",databaseName:t.databaseName,...Ze({port:t.port,deletionProtection:t.deletionProtection,instanceType:t.instanceType,multiAz:t.multiAz,publiclyAccessible:t.publiclyAccessible,enableSecretRotation:t.enableSecretRotation,encryption:t.encryption,databaseInsights:t.databaseInsights,proxy:t.proxy,readReplica:t.readReplica,credentials:t.credentials,writer:t.writer,readers:t.readers,backupRetention:t.backupRetention,preferredMaintenanceWindow:t.preferredMaintenanceWindow,primaryRegion:t.primaryRegion,secondaryRegions:t.secondaryRegions,globalClusterIdentifier:t.globalClusterIdentifier,enableGlobalWriteForwarding:t.enableGlobalWriteForwarding,allocatedStorage:t.allocatedStorage,monitoringInterval:t.monitoringInterval,variableName:t.variableName,databaseEngine:t.databaseEngine,engineExpression:t.engineExpression,extraProperties:t.extraProperties})}))}di(Nv,"convertDatabaseResources");import*as pi from"typescript";var N1=Object.defineProperty,mi=(e,t)=>N1(e,"name",{value:t,configurable:!0});function l$(e,t){if(t.arguments.length<2)return null;let n=t.arguments[0],i=t.arguments[1];if(!pi.isStringLiteral(n)||!pi.isObjectLiteralExpression(i))return null;let r=U(i),o={resourceName:n.text,queueType:b(r.queueType)??"standard",visibilityTimeout:R(r.visibilityTimeout),retentionPeriod:R(r.messageRetentionPeriod),contentBasedDeduplication:M(r.contentBasedDeduplication),removalPolicy:b(r.removalPolicy),node:e},a=He(e);a&&(o.variableName=a);let c=oe(r,new Set(["type","queueType","visibilityTimeout","messageRetentionPeriod","contentBasedDeduplication","removalPolicy"]));return c.length>0&&(o.extraProperties=c),o}mi(l$,"extractSQSResource");function Cv(e){if(e!=null){if(e===!1)return!1;if(N(e))return Ze({enabled:M(e.enabled),maxReceiveCount:R(e.maxReceiveCount)})}}mi(Cv,"parseDeadLetterQueueConfig");function Pv(e){return xe(e,t=>{if(!pi.isCallExpression(t)||!ye(t,"addMessaging"))return null;let n=t.arguments[0];return Oe(n,"MessagingFactory")?l$(t,n):null})}mi(Pv,"findSQSResources");function kv(e){if(e.length!==0)return e.map(t=>({name:t.resourceName,queueType:t.queueType==="fifo"?"fifo":"standard",...Ze({visibilityTimeout:t.visibilityTimeout,retentionPeriod:t.retentionPeriod,contentBasedDeduplication:t.contentBasedDeduplication,removalPolicy:m$(t.removalPolicy),variableName:t.variableName,extraProperties:t.extraProperties})}))}mi(kv,"convertSQSResources");var C1=new Set(Ph.options);function d$(e){return C1.has(e)}mi(d$,"isSqsRemovalPolicy");function m$(e){return e!==void 0&&d$(e)?e:void 0}mi(m$,"toSqsRemovalPolicy");import*as fi from"typescript";var P1=Object.defineProperty,ma=(e,t)=>P1(e,"name",{value:t,configurable:!0});function f$(e){if(e.arguments.length<2)return null;let t=e.arguments[0],n=e.arguments[1];return!fi.isStringLiteral(t)||!fi.isObjectLiteralExpression(n)?null:{resourceName:t.text,config:U(n),node:e}}ma(f$,"extractCDNResource");function g$(e,t,n){let i=t.find(o=>o.variableName===e);if(i)return i.resourceName;let r=n.find(o=>o.variableName===e||o.resourceName.charAt(0).toLowerCase()+o.resourceName.slice(1)===e);return r?r.resourceName:e}ma(g$,"resolveOriginIdentifier");var p$=["CACHING_OPTIMIZED","CACHING_DISABLED"];function Ov(e){return Ke(e,t=>{if(!fi.isCallExpression(t)||!ye(t,"addCdn"))return;let n=t.arguments[0];if(Oe(n,"CdnFactory"))return f$(n)??void 0})}ma(Ov,"findCDNResource");function wv(e,t,n){if(!e)return;let i=e,r=i.config,o=ma(p=>Gt(p)?g$(p.__identifier,t,n):b(p)??"","resolveOrigin"),a=o(r.origin),c={name:i.resourceName,defaultOriginRef:a};if(Array.isArray(r.behaviours)){let p=r.behaviours.filter(N).map(g=>({pathPattern:b(g.pathPattern)??"",originRef:o(g.origin),...z(g.cachePolicy,p$)!==void 0&&{cachePolicy:z(g.cachePolicy,p$)}}));p.length>0&&(c.behaviours=p)}let u=b(r.customDomain);if(u)c.customDomain=u;else{let p=ae(r.domainNames);p&&p.length>0&&(c.customDomain=p[0])}let l=b(r.certificateArn);if(l&&(c.certificateArn=l),r.accessGate!==void 0){if(r.accessGate===!1)c.accessGate=!1;else if(N(r.accessGate)){let p=r.accessGate,g=b(p.type),v=b(p.username),x=b(p.password);g==="basic-auth"&&v&&x&&(c.accessGate={type:"basic-auth",username:v,password:x})}}let m=oe(r,new Set(["originType","origin","behaviours","customDomain","domainNames","certificateArn","accessGate"]));return m.length>0&&(c.extraProperties=m),c}ma(wv,"convertCDNResource");import*as ce from"typescript";var k1=Object.defineProperty,Xe=(e,t)=>k1(e,"name",{value:t,configurable:!0}),O1=new Set(Nh.options);function h$(e){if(e!==void 0)return O1.has(e)?e:void 0}Xe(h$,"asFlowLogDestination");function Dv(e){return{maxAzs:R(e.maxAzs),natGateways:Vt(e.natGateways,t=>({count:R(t.count)})),flowLogs:Vt(e.flowLogs,t=>({destination:b(t.destination),retentionDays:R(t.retentionDays)})),vpcEndpoints:N(e.vpcEndpoints)?e.vpcEndpoints:void 0}}Xe(Dv,"parseNetworkConfigFields");function v$(e,t){if(t.arguments.length<2)return null;let n=t.arguments[0],i=t.arguments[1];if(!ce.isStringLiteral(n))return null;let r=n.text,o=ce.isObjectLiteralExpression(i)?U(i):{},a=Dv(o),c={name:r,config:Ze({...a}),node:e},u=He(e);return u&&(c.variableName=u),c}Xe(v$,"extractNetworkResource");function Mv(e){return Ke(e,t=>{if(!kt(t)||t.arguments.length<=1)return;let n=t.arguments[1];if(ce.isObjectLiteralExpression(n)){for(let i of n.properties)if(lr(i,"network")&&ce.isObjectLiteralExpression(i.initializer)){for(let r of i.initializer.properties)if(lr(r,"useExisting")&&ce.isStringLiteral(r.initializer))return r.initializer.text}}})}Xe(Mv,"findVpcId");function jv(e){return Ke(e,t=>{if(!kt(t)||t.arguments.length<=1)return;let n=t.arguments[1];if(ce.isObjectLiteralExpression(n)){for(let i of n.properties)if(lr(i,"network")){if(i.initializer.kind===ce.SyntaxKind.FalseKeyword)return;if(ce.isObjectLiteralExpression(i.initializer)&&!i.initializer.properties.some(r=>lr(r,"useExisting"))){let r=U(i.initializer);return Dv(r)}}}})}Xe(jv,"findNetworkConfig");function zv(e){return Ke(e,t=>{if(!kt(t)||t.arguments.length<=1)return;let n=t.arguments[1];if(ce.isObjectLiteralExpression(n)){for(let i of n.properties)if(lr(i,"backup")){if(i.initializer.kind===ce.SyntaxKind.FalseKeyword)return!1;if(ce.isObjectLiteralExpression(i.initializer)){let r=U(i.initializer),o=b(r.tier);if(o)return{tier:o}}}}})}Xe(zv,"findBackupConfig");function Lv(e){return Ke(e,t=>{if(!kt(t)||t.arguments.length<=1)return;let n=t.arguments[1];if(ce.isObjectLiteralExpression(n)){for(let i of n.properties)if(lr(i,"tunnel")){if(i.initializer.kind===ce.SyntaxKind.FalseKeyword)return!1;if(i.initializer.kind===ce.SyntaxKind.TrueKeyword)return!0;if(ce.isObjectLiteralExpression(i.initializer)){let r=U(i.initializer),o=b(r.instanceType);return o?{instanceType:o}:{}}}}})}Xe(Lv,"findTunnelConfig");function Uv(e){return xe(e,t=>{if(!ce.isCallExpression(t)||!ye(t,"addNetwork"))return null;let n=t.arguments[0];return Oe(n,"NetworkFactory")?v$(t,n):null})}Xe(Uv,"findNetworkResources");function Fv(e){let t=e.flowLogs;return{...Ze({maxAzs:e.maxAzs,natGateways:e.natGateways,vpcEndpoints:e.vpcEndpoints}),...t!==void 0&&{flowLogs:t===!1?!1:Ze({destination:h$(t.destination),retentionDays:t.retentionDays})}}}Xe(Fv,"buildNetworkFields");function Bv(e){if(e)return Fv(e)}Xe(Bv,"convertNetworkConfig");function Zv(e){if(e===void 0)return;if(e===!1)return!1;let t=e.tier;if(nt(gt,t))return{tier:t}}Xe(Zv,"convertBackupConfig");function Gv(e){if(e===void 0)return;if(e===!1)return!1;if(e===!0)return{};let t={};return e.instanceType&&(t.instanceType=e.instanceType),t}Xe(Gv,"convertTunnelConfig");function Vv(e){if(!(!e||e.length===0))return e.map(t=>({name:t.name,...Fv(t.config)}))}Xe(Vv,"convertAdditionalNetworks");import*as gi from"typescript";var w1=Object.defineProperty,he=(e,t)=>w1(e,"name",{value:t,configurable:!0}),D1=["Instance","Aurora"],M1=["postgresql","mysql"];function ju(e){if(!N(e))return;let t={...e.memorySize!==void 0&&{memorySize:R(e.memorySize)},...e.timeout!==void 0&&{timeout:R(e.timeout)},...e.ephemeralStorageSize!==void 0&&{ephemeralStorageSize:R(e.ephemeralStorageSize)}};return Object.keys(t).length>0?t:void 0}he(ju,"parseLambdaConfig");function b$(e){return ct(e,"database",t=>({type:z(t.type,D1),databaseName:b(t.databaseName),databaseEngine:z(t.databaseEngine,M1),deletionProtection:M(t.deletionProtection),backupRetention:R(t.backupRetention),port:R(t.port),publiclyAccessible:M(t.publiclyAccessible),allowedIpCidr:b(t.allowedIpCidr),instanceType:b(t.instanceType),allocatedStorage:R(t.allocatedStorage),multiAz:M(t.multiAz),allowVpcAccess:M(t.allowVpcAccess),monitoringInterval:R(t.monitoringInterval),preferredMaintenanceWindow:b(t.preferredMaintenanceWindow),snapshotIdentifier:b(t.snapshotIdentifier),snapshotUsername:b(t.snapshotUsername),readReplica:ci(t.readReplica),writer:Ie(t.writer,st()),readers:ci(t.readers),databaseInsights:ci(t.databaseInsights),proxy:ci(t.proxy),credentials:Ie(t.credentials,st()),encryption:Ie(t.encryption,st())}))}he(b$,"extractPatternDatabaseConfig");function y$(e){return ct(e,"compute",t=>({server:Ie(t.server,ju),imageOptimisation:Ie(t.imageOptimisation,ju),revalidation:Ie(t.revalidation,ju)}))}he(y$,"extractPatternComputeConfig");function S$(e){let t=he(n=>({versioned:M(n.versioned)}),"parseVersionedConfig");return ct(e,"storage",n=>({assets:Ie(n.assets,t),cache:Ie(n.cache,t),media:Ie(n.media,t)}))}he(S$,"extractPatternStorageConfig");function _$(e){return ct(e,"messaging",t=>({revalidationQueue:Ie(t.revalidationQueue,n=>({visibilityTimeout:R(n.visibilityTimeout),messageRetentionPeriod:R(n.messageRetentionPeriod),maxMessageSize:R(n.maxMessageSize),deadLetterQueue:Cv(n.deadLetterQueue)}))}))}he(_$,"extractPatternMessagingConfig");function E$(e){return ct(e,"cdn",t=>({domainNames:ae(t.domainNames),certificateArn:b(t.certificateArn)}))}he(E$,"extractPatternCdnConfig");function A$(e){return ct(e,"environment",t=>{let n=Object.fromEntries(Object.entries(t).filter(i=>typeof i[1]=="string"));return Object.keys(n).length>0?n:void 0})}he(A$,"extractPatternEnvironmentConfig");function x$(e,t){let n=I$(e);return{name:t,source:b(e.source),build:ct(e,"build",i=>({command:b(i.command),outputDir:b(i.outputDir)})),routing:z(e.routing,lo),security:ct(e,"security",i=>({headers:M(i.headers),contentSecurityPolicy:b(i.contentSecurityPolicy)})),domain:b(e.domain),forms:ct(e,"forms",i=>({to:b(i.to),from:b(i.from),corsOrigin:b(i.corsOrigin),maxConcurrency:R(i.maxConcurrency)})),cdn:ct(e,"cdn",i=>({behaviours:Array.isArray(i.behaviours)?i.behaviours:void 0})),...n.length>0&&{unreadableFields:n}}}he(x$,"extractStaticSiteConfig");function Wv(e){return at(e)&&("__identifier"in e||"__expression"in e||"__call"in e||"__unknown"in e)}he(Wv,"isUnreadableRef");function I$(e){let t=[],n=he((r,o)=>{Wv(r)&&t.push(o)},"check");n(e.source,"source"),n(e.routing,"routing"),n(e.domain,"domain");let i=[[e.build,"build",["command","outputDir"]],[e.security,"security",["headers","contentSecurityPolicy"]],[e.forms,"forms",["to","from","corsOrigin","maxConcurrency"]],[e.cdn,"cdn",["behaviours"]]];for(let[r,o,a]of i)if(Wv(r))t.push(o);else if(N(r))for(let c of a)n(r[c],`${o}.${c}`);return t}he(I$,"collectUnreadableStaticSiteFields");function dr(e){return e!==void 0&&e!==""}he(dr,"isReadable");function zu(e,t){return new Error(`Static-site pattern '${e}' in infrastructure.ts: Fjall could not read ${t.join(", ")} as inline literal(s). Fjall reads these fields out of the file and writes them back, so they must be written inline (source: "./site"), not as a variable or an expression.`)}he(zu,"unreadableStaticSiteFields");function $$(e,t){let n=t.to;if(!dr(n))throw zu(e,["forms.to"]);return{to:n,...t.from!==void 0&&{from:t.from},...t.corsOrigin!==void 0&&{corsOrigin:t.corsOrigin},...t.maxConcurrency!==void 0&&{maxConcurrency:t.maxConcurrency}}}he($$,"readStaticSiteForms");function T$(e,t){if(e.arguments.length<2)return null;let n=e.arguments[0],i=e.arguments[1];if(!gi.isStringLiteral(n)||!gi.isObjectLiteralExpression(i))return null;let r=n.text,o=U(i),a=o.type,c=He(t),u=b(o.name);return u?a==="payload"||a==="nextjs"?{variableName:c,constructId:r,type:a,config:{name:u,domain:b(o.domain),database:b$(o),compute:y$(o),storage:S$(o),messaging:_$(o),cdn:E$(o),environment:A$(o)},node:e}:a==="staticsite"?{variableName:c,constructId:r,type:"staticsite",config:x$(o,u),node:e}:null:null}he(T$,"extractPatternResource");function Kv(e){return xe(e,t=>{if(!gi.isCallExpression(t)||!ye(t,"addPattern"))return null;let n=t.arguments[0];return Oe(n,"PatternFactory")?T$(n,t):null})}he(Kv,"findPatternResources");function Hv(e,t){if(!t||t.length===0)return;let n=t[0];if(e.pattern=n.type,n.type==="staticsite"){let{config:r}=n,o=r.source,a=r.build?.command,c=r.build?.outputDir;if(r.unreadableFields!==void 0)throw zu(r.name,r.unreadableFields);if(!dr(o)||!dr(a)||!dr(c)){let u=[];throw dr(o)||u.push("source"),dr(a)||u.push("build.command"),dr(c)||u.push("build.outputDir"),zu(r.name,u)}e.patternConfig={type:"staticsite",name:r.name,source:o,build:{command:a,outputDir:c},routing:r.routing,security:r.security,domain:r.domain,...r.forms!==void 0&&{forms:$$(r.name,r.forms)},cdn:r.cdn};return}let{config:i}=n;e.patternConfig={type:n.type,name:i.name,domain:i.domain,database:i.database,compute:i.compute,storage:i.storage,messaging:i.messaging,cdn:i.cdn,environment:i.environment}}he(Hv,"applyPatternConfig");var j1=Object.defineProperty,Lu=(e,t)=>j1(e,"name",{value:t,configurable:!0});function R$(e,t){for(let n of t){let i=e.compute.find(r=>r.variableName===n.targetVariableName);i!==void 0&&i.type==="lambda"&&(i.scheduleExpression=n.schedule)}}Lu(R$,"applyScheduleBackfill");function N$(e,t){Object.keys(t).length>0&&(e.tags={...t}),t[Qo]&&(e.owner=t[Qo])}Lu(N$,"applyTagsAndOwner");function C$(e){let t=[];for(let n of e)if(wu(n.moduleSpecifier))if(n.moduleSpecifier==="@fjall/components-infrastructure"||n.moduleSpecifier==="@fjall/infrastructure"){let i=n.namedImports.filter(r=>!JI.has(r));i.length>0&&t.push({moduleSpecifier:n.moduleSpecifier,namedImports:i,defaultImport:n.defaultImport})}else(n.namedImports.length>0||n.defaultImport)&&t.push(n);return t.length>0?t:void 0}Lu(C$,"computeAdditionalManagedImports");function Hr(e,t,n){let i={appName:t,type:"standard",database:[],s3:[],compute:[]};if(Hv(i,e.patternResources),e.vpcId&&(i.vpcId=e.vpcId),i.network=Bv(e.network),i.backup=Zv(e.backup),i.tunnel=Gv(e.tunnel),i.additionalNetworks=Vv(e.networkResources),N$(i,e.tags),i.database=Nv(e.databaseResources),i.dynamodb=Du(e.dynamodbResources),i.clickhouse=Mu(e.clickhouseResources),i.sqs=kv(e.sqsResources),i.cdn=wv(e.cdnResource,e.s3Resources,e.computeResources),i.s3=Sv(e.s3Resources),i.compute=hv(e.computeResources,e.databaseResources,e.s3Resources,i),R$(i,e.schedules),i.additionalManagedImports=C$(e.imports),n?.skipValidation)return i;try{return Jx.parse(i)}catch(r){if(r instanceof s.ZodError){let o=ko(r);throw new Error(`Invalid infrastructure configuration:
 ${o}`)}throw r}}Lu(Hr,"convertToResourcePlan");var z1=Object.defineProperty,hi=(e,t)=>z1(e,"name",{value:t,configurable:!0});function mr(e,t){let n=V.createSourceFile("infrastructure.ts",e,V.ScriptTarget.Latest,!0,V.ScriptKind.TS),i=P$(n),{appVariableName:r,appName:o}=O$(n),a=Mv(n),c=jv(n),u=zv(n),l=Lv(n),m=Uv(n),p=Tv(n),{databases:g,dynamodb:v,clickhouse:x}=Rv(p),Q=Pv(n),H=Ov(n),vr=[...bv(n),...yv(n)],Ju=Pu(n),Je=Ou(n),ee=Kv(n),le=w$(n),Qr={sourceFile:n,imports:i,appVariableName:r,appName:o,vpcId:a,network:c,backup:u,tunnel:l,networkResources:m,databaseResources:g,dynamodbResources:v,clickhouseResources:x,sqsResources:Q,cdnResource:H,s3Resources:vr,computeResources:Ju,schedules:Je,patternResources:ee,tags:le};return t?.extractCustomCode&&(Qr.customCodeBlocks=ca(n),Qr.classifiedStatements=Ge(n)),Qr}hi(mr,"parseInfrastructure");function P$(e){let t=[];return V.forEachChild(e,n=>{if(V.isImportDeclaration(n)){if(!V.isStringLiteral(n.moduleSpecifier))return;let i={moduleSpecifier:n.moduleSpecifier.text,namedImports:[]};n.importClause&&(n.importClause.name&&(i.defaultImport=n.importClause.name.text),n.importClause.namedBindings&&V.isNamedImports(n.importClause.namedBindings)&&(i.namedImports=n.importClause.namedBindings.elements.map(r=>r.name.text))),t.push(i)}}),t}hi(P$,"extractImports");function k$(e,t){return V.isStringLiteral(t)?t.text:V.isIdentifier(t)?na(e,t.text)??"":V.isPropertyAccessExpression(t)?ia(e,t)??"":""}hi(k$,"resolveAppName");function O$(e){return Ke(e,t=>{if(V.isVariableStatement(t))for(let n of t.declarationList.declarations){if(!n.initializer||!kt(n.initializer))continue;let i=V.isIdentifier(n.name)?n.name.text:"",r=n.initializer.arguments.length>0?k$(e,n.initializer.arguments[0]):"";return{appVariableName:i,appName:r}}})??{appVariableName:"",appName:""}}hi(O$,"findAppVariable");function w$(e){let t={};function n(i){if(V.isCallExpression(i)&&V.isPropertyAccessExpression(i.expression)&&i.expression.name.text==="addTags"&&V.isIdentifier(i.expression.expression)&&i.arguments.length>0){let r=i.arguments[0];if(V.isObjectLiteralExpression(r)){let o=U(r);for(let[a,c]of Object.entries(o))typeof c=="string"?t[a]=c:ur(c)&&(t[a]="default-value")}}V.forEachChild(i,n)}return hi(n,"visit"),n(e),t}hi(w$,"extractTags");import*as vi from"typescript";var L1=Object.defineProperty,Se=(e,t)=>L1(e,"name",{value:t,configurable:!0});function bi(e,t,n){return e.slice(0,t)+n+e.slice(t)}Se(bi,"insertAtPosition");function Uu(e,t){return e.find(n=>n.type===t)}Se(Uu,"findClassification");function Yv(e,t){return e.filter(n=>n.type===t).pop()}Se(Yv,"findLastClassification");function pr(e){return vi.createSourceFile("infrastructure.ts",e,vi.ScriptTarget.Latest,!0,vi.ScriptKind.TS)}Se(pr,"parseSourceFile");function Fu(e,t){return e.endsWith(`