fjall 7.0.1 → 7.1.0

package/bin/assets/generators/compute/generator.js

@@ -188,7 +188,7 @@ ${Le.hex("#D9622E").bold(`--- ${e} ---`)}`),F&&F.start())}He(kz,"step");function
 `);return{buffer:[],stream:r}}flush(){let t=this.flushBuffer(this.buffer,this.mainLogStream,this.mainLogPath);this.buffer=t.buffer,this.mainLogStream=t.stream;let n=this.flushBuffer(this.debugBuffer,this.debugLogStream,this.debugLogPath);this.debugBuffer=n.buffer,this.debugLogStream=n.stream}close(){this.isClosing=!0,this.flush(),this.flushInterval&&(clearInterval(this.flushInterval),this.flushInterval=null),this.mainLogStream&&(this.mainLogStream.end(),this.mainLogStream=null),this.debugLogStream&&(this.debugLogStream.end(),this.debugLogStream=null),this.buffer=[],this.debugBuffer=[],this.initialised=!1,this.isClosing=!1}async closeAndFlush(){this.isClosing=!0,this.flush(),this.flushInterval&&(clearInterval(this.flushInterval),this.flushInterval=null);let t=[];this.mainLogStream&&(t.push(this.mainLogStream),this.mainLogStream=null),this.debugLogStream&&(t.push(this.debugLogStream),this.debugLogStream=null),this.buffer=[],this.debugBuffer=[],this.initialised=!1,await Promise.all(t.map(n=>new Promise(i=>{n.end(()=>i())}))),this.isClosing=!1}};import{createWriteStream as Qz,existsSync as eL,mkdirSync as tL}from"fs";import{join as l$}from"path";var dn={trace:0,debug:1,info:2,warn:3,error:4},qe={MAX_FILE_SIZE:10*1024*1024,MAX_FILES:5,MAX_BUFFER_SIZE:100,FLUSH_INTERVAL_MS:500,LOG_FILENAME:"fjall.jsonl",DEBUG_LOG_FILENAME:"fjall-debug.jsonl"};import{join as Yz}from"path";import{homedir as Kz}from"os";var Hz=Object.defineProperty,qz=(e,t)=>Hz(e,"name",{value:t,configurable:!0});function Nr(){let e=process.env.FJALL_LOG_DIR;return e!==void 0&&e!==""?e:Yz(Kz(),".fjall","logs")}qz(Nr,"getDefaultLogDir");var Xz=Object.defineProperty,Jz=(e,t)=>Xz(e,"name",{value:t,configurable:!0}),ua=class{static{Jz(this,"DeploymentLoggerImpl")}mainLogger;appName;operationType;logStream=null;logPath;deploymentId;buffer=[];flushInterval=null;isClosing=!1;maxBufferSize=qe.MAX_BUFFER_SIZE;constructor(t,n,i){this.mainLogger=t,this.appName=n,this.operationType=i,this.deploymentId=`${i}-${Date.now()}`;let r=Nr(),o=l$(r,"deployments",n);eL(o)||tL(o,{recursive:!0});let a=new Date().toISOString().replace(/[:.]/g,"-"),c=`${i}-${a}.jsonl`;this.logPath=l$(o,c);try{this.logStream=Qz(this.logPath,{flags:"a"}),this.flushInterval=setInterval(()=>this.flush(),qe.FLUSH_INTERVAL_MS),this.info("DeploymentLogger","Deployment logging initialised",{appName:n,operationType:i,deploymentId:this.deploymentId,logPath:this.logPath})}catch{}}log(t,n,i,r,o,a){if(this.isClosing)return;let c={timestamp:new Date().toISOString(),level:t,component:n,message:i,correlationId:this.deploymentId,...r&&Object.keys(r).length>0&&{data:r},...o&&{stackName:o},...a&&{phase:a}};this.buffer.push(c),this.mainLogger.logWithCorrelation(t,n,i,this.deploymentId,r,o,a),this.buffer.length>=this.maxBufferSize&&this.flush()}flush(){if(!(this.buffer.length===0||!this.logStream)){for(let t of this.buffer)this.logStream.write(JSON.stringify(t)+`
 `);this.buffer=[]}}info(t,n,i){this.log("info",t,n,i)}warn(t,n,i){this.log("warn",t,n,i)}error(t,n,i){this.log("error",t,n,i)}debug(t,n,i){this.log("debug",t,n,i)}stackEvent(t,n,i,r){this.log("info","StackDeployment",i,r,t,n)}dockerEvent(t,n){this.log("info","DockerOperation",t,{percentage:n})}ecsEvent(t,n,i){this.log("info","ECSDeployment",t,{percentage:n,taskCount:i})}close(){this.isClosing=!0,this.flush(),this.flushInterval&&(clearInterval(this.flushInterval),this.flushInterval=null),this.logStream&&(this.logStream.end(),this.logStream=null),this.buffer=[],this.isClosing=!1}getLogPath(){return this.logPath}getDeploymentId(){return this.deploymentId}};var rL=Object.defineProperty,nL=(e,t)=>rL(e,"name",{value:t,configurable:!0}),Nu=class e{static{nL(this,"Logger")}static instance=null;config;debugEnabled;traceEnabled;minLevel;fileWriter;mainLogPath;debugLogPath;constructor(){let t=Nr(),n=$v(t,"debug"),i=this.parseEnvInt("FJALL_LOG_MAX_SIZE",qe.MAX_FILE_SIZE),r=this.parseEnvInt("FJALL_LOG_MAX_FILES",qe.MAX_FILES);this.config={logDir:t,debugLogDir:n,maxFileSize:i,maxFiles:r,maxBufferSize:qe.MAX_BUFFER_SIZE,flushIntervalMs:qe.FLUSH_INTERVAL_MS},this.mainLogPath=$v(t,qe.LOG_FILENAME),this.debugLogPath=$v(n,qe.DEBUG_LOG_FILENAME),this.debugEnabled=process.env.FJALL_DEBUG==="true"||process.env.FJALL_TRACE==="true"||process.argv.includes("--verbose")||process.argv.includes("-v"),this.traceEnabled=process.env.FJALL_TRACE==="true";let o=process.env.FJALL_LOG_LEVEL?.toLowerCase();o&&o in dn?this.minLevel=o:this.traceEnabled?this.minLevel="trace":this.debugEnabled?this.minLevel="debug":this.minLevel="info",this.fileWriter=new Ru(this.config,this.mainLogPath,this.debugLogPath,this.debugEnabled)}parseEnvInt(t,n){let i=process.env[t];if(i){let r=parseInt(i,10);if(!isNaN(r)&&r>0)return r}return n}static getInstance(){return e.instance||(e.instance=new e),e.instance}shouldLog(t){return dn[t]>=dn[this.minLevel]}createEntry(t,n,i,r,o,a,c){return{timestamp:new Date().toISOString(),level:t,component:n,message:i,...o&&{correlationId:o},...r&&Object.keys(r).length>0&&{data:r},...a&&{stackName:a},...c&&{phase:c}}}log(t,n,i,r,o,a,c){if(!this.shouldLog(t))return;let u=this.createEntry(t,n,i,r,o,a,c),l=t==="debug"||t==="trace";this.fileWriter.write(u,l),this.writeConsole(u)}writeConsole(t){if(be.shouldSuppressOutput||be.isNonInteractive){this.debugEnabled&&this.writeDebugMirror(t);return}let n=this.getConsolePrefix(t.level),i=`[${t.component}]`,r=`${n} ${i} ${t.message}`;t.level==="error"?console.error(r):t.level==="warn"?console.warn(r):console.log(r)}writeDebugMirror(t){let n=this.getConsolePrefix(t.level),i=`[${t.component}]`,r="";if(t.data&&Object.keys(t.data).length>0)try{r=` ${JSON.stringify(t.data)}`}catch{r=" [unserialisable data]"}let o=`${n} ${i} ${t.message}${r}`;process.stderr.write(`${gi(o)}
 `)}getConsolePrefix(t){switch(t){case"error":return"[ERROR]";case"warn":return"[WARN]";case"info":return"[INFO]";case"debug":return"[DEBUG]";case"trace":return"[TRACE]"}}error(t,n,i){this.log("error",t,n,i)}warn(t,n,i){this.log("warn",t,n,i)}info(t,n,i){this.log("info",t,n,i)}debug(t,n,i){this.log("debug",t,n,i)}trace(t,n,i){this.log("trace",t,n,i)}isDebugEnabled(){return this.debugEnabled}isTraceEnabled(){return this.traceEnabled}enableDebug(){this.debugEnabled=!0,dn[this.minLevel]>dn.debug&&(this.minLevel="debug"),this.fileWriter.setDebugEnabled(!0),this.fileWriter.isInitialised&&this.fileWriter.initialiseDebugStream()}withCorrelation(t){return new Ei(this,t)}forDeployment(t,n="deploy"){return new ua(this,t,n)}close(){this.fileWriter.close()}async flushAndClose(){await this.fileWriter.closeAndFlush()}getLogPath(){return this.mainLogPath}getDebugLogPath(){return this.debugLogPath}getLogDir(){return this.config.logDir}logWithCorrelation(t,n,i,r,o,a,c){this.log(t,n,i,o,r,a,c)}static reset(){e.instance&&(e.instance.close(),e.instance=null)}};var iL=Object.defineProperty,oL=(e,t)=>iL(e,"name",{value:t,configurable:!0}),Cu=Nu.getInstance();function uL(e){let t=Nr(),n=m$(t,"debug"),i=m$(n,qe.DEBUG_LOG_FILENAME);try{d$(n)||aL(n,{recursive:!0}),d$(i)&&sL(i).size>qe.MAX_FILE_SIZE&&new xi({maxFiles:qe.MAX_FILES}).rotate(i);let r={timestamp:new Date().toISOString(),level:"debug",component:"Emergency",message:e};cL(i,JSON.stringify(r)+`
-`)}catch{}}oL(uL,"writeDebugSync");var lL=Object.defineProperty,Ai=(e,t)=>lL(e,"name",{value:t,configurable:!0});function Tv(e){return e.success===!0}Ai(Tv,"isSuccess");function Cv(e){return e.success===!1}Ai(Cv,"isFailure");function P(e){return{success:!0,data:e}}Ai(P,"success");function $(e){return{success:!1,error:e}}Ai($,"failure");async function Rv(e){try{let t=await e();return P(t)}catch(t){return $(Et(t))}}Ai(Rv,"tryAsync");function Nv(e){try{let t=e();return P(t)}catch(t){return $(Et(t))}}Ai(Nv,"trySync");var dL=Object.defineProperty,mL=(e,t)=>dL(e,"name",{value:t,configurable:!0}),p$=/^[a-zA-Z][a-zA-Z0-9-]*$/,pL=Ho.source.replace(/^\^|\$$/g,""),L=Object.freeze({IDENTIFIER:p$,NEW_APP_NAME:/^[a-z][a-z0-9-]*$/,RESOURCE_NAME:/^[a-zA-Z][a-zA-Z0-9]*$/,ECS_SERVICE_NAME:p$,BUCKET_NAME:/^[a-z][a-z0-9-]*[a-z0-9]$|^[a-z][a-z0-9]*$/,DATABASE_NAME:/^[a-zA-Z][a-zA-Z0-9_]*$/,RESOURCE_TYPE:/^[a-z]+(:[a-z]+)?$/,SSM_PATH:new RegExp(`^(?:/${pL})+$`),SECRET_NAME:au,SSM_COMPONENT:Ho,EMAIL:/^[^\s@]+@[^\s@]+\.[^\s@]+$/,DOCKER_IMAGE:/^[a-z0-9][a-z0-9._-]*[a-z0-9](:[a-z0-9._-]+)?$/,DOMAIN:/^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)+$/i,HTTP_ORIGIN:/^https?:\/\/[a-z0-9.-]+(:\d+)?$/i,PASCAL_CASE:/^[A-Z][A-Za-z0-9]*$/,AWS_ACCOUNT_ID:/^\d{12}$/,VPC_ID:/^vpc-[a-z0-9]+$/,ROLE_ARN:/^arn:aws[a-zA-Z-]*:iam::\d{12}:role\/.+$/,CIDR:/^((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\.){3}(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\/(3[0-2]|[12]?\d)$/,SCHEDULE_EXPRESSION:/^(rate\(1 (?:minute|hour|day)\)|rate\((?:[2-9]|[1-9]\d+) (?:minutes|hours|days)\)|cron\([^\s()]+ [^\s()]+ [^\s()]+ [^\s()]+ [^\s()]+ [^\s()]+\))$/,LAMBDA_RUNTIME_IDENTIFIER:/^[A-Za-z0-9._-]+$/,ENV_VAR_NAME:/^[A-Za-z_][A-Za-z0-9_]*$/});function Pv(e){let t=/^rate\((\d+) (minute|minutes|hour|hours|day|days)\)$/.exec(e);if(!t)return;let n=t[1],i=t[2];if(n===void 0||i===void 0)return;let r=parseInt(n,10);if(!Number.isFinite(r)||r<1)return;let o=i==="minute"||i==="hour"||i==="day";if(!(o&&r!==1)&&!(!o&&r===1))return i==="minute"||i==="minutes"?{everyMs:r*6e4}:i==="hour"||i==="hours"?{everyMs:r*60*6e4}:{everyMs:r*24*60*6e4}}mL(Pv,"parseRateExpression");var d=Object.freeze({IDENTIFIER:"Must start with a letter, contain only letters, numbers, and hyphens",NEW_APP_NAME:"Must start with a lowercase letter and contain only lowercase letters, numbers, and hyphens",IDENTIFIER_MIN_LENGTH:"Must be at least 2 characters",IDENTIFIER_NO_TRAILING_HYPHEN:"Must not end with a hyphen",IDENTIFIER_NO_CONSECUTIVE_HYPHENS:"Must not contain consecutive hyphens",RESOURCE_NAME:"Must start with a letter and contain only letters and numbers (PascalCase recommended)",ECS_SERVICE_NAME:"Service name must start with a letter and contain only letters, numbers, and hyphens",BUCKET_NAME:"Bucket name must start with a lowercase letter and contain only lowercase letters, numbers, and hyphens",DATABASE_NAME:"Database name must start with a letter and contain only letters, numbers, and underscores",RESOURCE_TYPE:"Resource type must be in format 'category' or 'category:type'",SSM_PATH:"SSM path must start with / and contain valid namespace segments (e.g., /myapp/ApiCluster/service)",SECRET_NAME:Th,SSM_COMPONENT:su,EMAIL:"Please enter a valid email address",DOMAIN:"Please enter a valid domain (e.g., cms.example.com)",DOCKER_IMAGE:"Invalid Docker image name format",REQUIRED:{APP_NAME:"Application name is required",RESOURCE_NAME:"Resource name is required",BUCKET_NAME:"Bucket name is required",SERVICE_NAME:"Service name is required",NETWORK_NAME:"Network name is required",DATABASE_NAME:"Database name is required",ORGANISATION_NAME:"Organisation name is required",EMAIL:"Email is required",NAME:"Name is required",USERNAME:"Username is required",CONTAINER_NAME:"Container name is required",GROUP:"Group is required",PATTERN_NAME:"Pattern name is required",SOURCE:"Source directory is required",BUILD_COMMAND:"Build command is required",OUTPUT_DIR:"Output directory is required",FORMS_TO:"Forms recipient address is required",ROUTING_PATH:"Routing path is required",RESOURCE_REFERENCE:"Resource reference is required",RESOURCE_TYPE:"Resource type is required",VARIANT:"Variant is required",SUBTYPE:"Subtype is required",DEPLOY_TARGET:"Deploy target is required",DESTROY_TARGET:"Destroy target is required"},MAX_LENGTH:{APP_NAME:"Application name must be 50 characters or less",RESOURCE_NAME:"Resource name must be 63 characters or less",BUCKET_NAME:"Bucket name must be 63 characters or less",SERVICE_NAME:"Service name must be 255 characters or less",NETWORK_NAME:"Network name must be 50 characters or less",DATABASE_NAME:"Database name must be 63 characters or less",ORGANISATION_NAME:"Organisation name must be 50 characters or less"},PORT:{INTEGER:"Port must be an integer",MIN:"Port must be at least 1",MAX:"Port cannot exceed 65535"},USERNAME:{MAX_LENGTH:"Username cannot exceed 63 characters"},LAMBDA:{MEMORY:{INTEGER:"Lambda memory must be an integer",MIN:"Memory must be at least 128 MB",MAX:"Memory cannot exceed 10240 MB",MULTIPLE:"Memory must be 128 MB or a multiple of 64 MB"},TIMEOUT:{INTEGER:"Timeout must be an integer",MIN:"Timeout must be at least 1 second",MAX:"Timeout cannot exceed 900 seconds"},RUNTIME:"Lambda runtime must contain only letters, digits, dots, underscores, or dashes (e.g. 'NODEJS_20_X' or 'nodejs20.x')"},ENV_VAR_NAME:"Environment variable names must start with a letter or underscore and contain only letters, digits, and underscores",PRIORITY:{INTEGER:"Priority must be an integer",MIN:"Priority must be at least 1",MAX:"Priority cannot exceed 50000"},CAPACITY:{MIN:{INTEGER:"Minimum capacity must be an integer",MIN_0:"Minimum capacity must be at least 0",MIN_1:"Minimum capacity must be at least 1",MAX:"Minimum capacity cannot exceed 100"},MAX:{INTEGER:"Maximum capacity must be an integer",MIN_0:"Maximum capacity must be at least 0",MIN_1:"Maximum capacity must be at least 1",MAX:"Maximum capacity cannot exceed 100"},DESIRED:{INTEGER:"Desired count must be an integer",MIN:"Desired count must be at least 0",MAX:"Desired count cannot exceed 100"},WARM_POOL_REQUIRED:"minCapacity 0 requires a warmPool \u2014 without it, new tasks wait 60-90s for a cold instance launch",WARM_POOL:{MIN_SIZE:{INTEGER:"Warm pool minSize must be an integer",MIN:"Warm pool minSize must be at least 0",MAX:"Warm pool minSize cannot exceed 100"},MIN_SIZE_EXCEEDS_MAX_CAPACITY:"warmPool.minSize cannot exceed maxCapacity \u2014 the warm pool cannot hold more instances than the ASG allows"}},MEMORY_LIMIT:{INTEGER:"Memory limit must be an integer",MIN_512:"Memory limit must be at least 512 MiB",MIN_128:"Memory limit must be at least 128 MiB",MAX:"Memory limit cannot exceed 30720 MiB"},DATABASE:{PORT:{INTEGER:"Database port must be an integer",MIN:"Database port must be at least 1024",MAX:"Database port cannot exceed 65535"},NAME:{REQUIRED:"Database name is required",MAX_LENGTH:"Database name must be 63 characters or less"}},BACKUP_RETENTION:{INTEGER:"Backup retention must be an integer",MIN:"Backup retention must be at least 1 day",MAX:"Backup retention cannot exceed 35 days"},SQS:{VISIBILITY_TIMEOUT:{INTEGER:"Visibility timeout must be an integer",MIN:"Visibility timeout must be at least 0 seconds",MAX:"Visibility timeout cannot exceed 43200 seconds (12 hours)"},RETENTION_PERIOD:{INTEGER:"Retention period must be an integer",MIN:"Retention period must be at least 60 seconds",MAX:"Retention period cannot exceed 1209600 seconds (14 days)"}},READER:{COUNT:{INTEGER:"Reader count must be an integer",MIN:"Reader count must be at least 0",MAX:"Reader count cannot exceed 15"}},IDENTIFIER_SUFFIX:{REQUIRED:"Identifier suffix is required when specified",MAX_LENGTH:"Identifier suffix cannot exceed 50 characters"},ROTATION:{INTEGER:"Rotation days must be an integer",MIN:"Rotation interval must be at least 1 day",MAX:"Rotation interval cannot exceed 365 days"},MAX_CONNECTIONS:{INTEGER:"Max connections must be an integer",MIN:"Max connections must be at least 1",MAX:"Max connections cannot exceed 100"},MONITORING_INTERVAL:{INTEGER:"Monitoring interval must be an integer",MIN:"Monitoring interval must be at least 0",MAX:"Monitoring interval cannot exceed 60 seconds",VALUES:"Monitoring interval must be 0, 1, 5, 10, 15, 30, or 60 seconds"},RETENTION_DAYS:{INTEGER:"Retention days must be an integer",MIN:"Retention days must be at least 1",MAX:"Retention days cannot exceed 365"},BATCH_SIZE:{INTEGER:"Batch size must be an integer",MIN:"Batch size must be at least 1",MAX:"Batch size cannot exceed 10000"},SERVICE:{UNIQUE_WITHIN_CLUSTER:"Service names must be unique within a cluster",MIN_REQUIRED:"At least one service is required",ROUTING_REQUIRED:"Multiple services with ports require routing config (path or host)"},PROXY_CONFIG:{MAX_IDLE_CONNECTIONS:{INTEGER:"Max idle connections must be an integer",MIN:"Max idle connections must be at least 0",MAX:"Max idle connections cannot exceed 100"},BORROW_TIMEOUT:{INTEGER:"Connection borrow timeout must be an integer",MIN:"Connection borrow timeout must be at least 1 second",MAX:"Connection borrow timeout cannot exceed 3600 seconds"}},MAX_AZS:{INTEGER:"Max AZs must be an integer",MIN:"Max AZs must be at least 1",MAX:"Max AZs cannot exceed 3"},BATCHING_WINDOW:{INTEGER:"Max batching window must be an integer",MIN:"Max batching window must be at least 0",MAX:"Max batching window cannot exceed 300 seconds"},HEALTH_CHECK:{INTERVAL:{INTEGER:"Health check interval must be an integer",MIN:"Health check interval must be at least 5 seconds",MAX:"Health check interval cannot exceed 300 seconds"},TIMEOUT:{INTEGER:"Health check timeout must be an integer",MIN:"Health check timeout must be at least 2 seconds",MAX:"Health check timeout cannot exceed 60 seconds"},RETRIES:{INTEGER:"Health check retries must be an integer",MIN:"Health check retries must be at least 1",MAX:"Health check retries cannot exceed 10"},START_PERIOD:{INTEGER:"Health check start period must be an integer",MIN:"Health check start period must be at least 0 seconds",MAX:"Health check start period cannot exceed 300 seconds"}},EPHEMERAL_STORAGE:{INTEGER:"Ephemeral storage size must be an integer",MIN:"Ephemeral storage size must be at least 512 MB",MAX:"Ephemeral storage size cannot exceed 10240 MB"},MAX_MESSAGE_SIZE:{INTEGER:"Max message size must be an integer",MIN:"Max message size must be at least 1024 bytes",MAX:"Max message size cannot exceed 262144 bytes (256 KB)"},CAPACITY_CONSTRAINT:{MIN_LTE_MAX:"minCapacity must be less than or equal to maxCapacity"},DIRECT_ACCESS:{NO_DOMAIN:"directAccess cannot be used with domain (no ALB for HTTPS)",NO_LOAD_BALANCER:"directAccess cannot be used with loadBalancer (mutually exclusive)"},GLOBAL_AURORA:{PRIMARY_REGION_REQUIRED:"primaryRegion is required for GlobalAurora databases"},NAT_GATEWAY:{INTEGER:"NAT gateway count must be an integer",MIN:"NAT gateway count must be at least 0",MAX:"NAT gateway count cannot exceed 3"},CIDR_MASK:{INTEGER:"CIDR mask must be an integer",MIN:"CIDR mask must be at least 16",MAX:"CIDR mask cannot exceed 28"},CPU:{INTEGER:"CPU must be an integer",MIN:"CPU must be at least 256 units",MAX:"CPU cannot exceed 4096 units"},KMS:{KEY_REQUIRED:"KMS key ARN is required when using KMS encryption"},READER_INSTANCES:{MAX:"Cannot have more than 15 reader instances",COUNT_OR_INSTANCES:"Cannot specify both 'count' and 'instances' - use one or the other"},GENERATOR_CAPACITY:{MIN:{MIN:"Minimum capacity must be at least 1",MAX:"Minimum capacity cannot exceed 1000"},MAX:{MIN:"Maximum capacity must be at least 1",MAX:"Maximum capacity cannot exceed 1000"}},INSTANCE_TYPE:"Unknown instance type. Common types include: t4g.micro, t4g.small, m5.large",ARCHITECTURE_MISMATCH:"Architecture mismatch between instance type and AMI",ALLOCATED_STORAGE:{INTEGER:"Allocated storage must be an integer",MIN:"Allocated storage must be at least 20 GB",MAX:"Allocated storage cannot exceed 65536 GB"},DLQ:{MAX_RECEIVE_COUNT:{INTEGER:"Max receive count must be an integer",MIN:"Max receive count must be at least 1",MAX:"Max receive count cannot exceed 1000"}},ALARM:{PERCENTAGE:{MIN:"Threshold must be at least 1%",MAX:"Threshold must be at most 100%"},FREE_STORAGE_GIB:{MIN:"Free storage threshold must be at least 1 GiB"}},REGION:"Invalid AWS region",PASCAL_CASE:"Resource name must start with an uppercase letter and contain only alphanumerics (PascalCase).",IMAGE_DOCKER_MUTEX:"image and docker are mutually exclusive",AWS_ACCOUNT_ID:"AWS account id must be exactly 12 digits (no hyphens)",VPC_ID:"VPC id must look like vpc-abc12345",ROLE_ARN:"Role ARN must have the form arn:aws:iam::<account-id>:role/<name>",CIDR:"CIDR must be in dotted-quad/prefix-length form (e.g. 10.0.0.0/16)",VPC_PEER:{MIN_REQUESTER_ACCOUNTS:"At least one requester account id is required",REGION_REQUIRED:"Peer region is required when specified",ROUTE_TABLE_ID_REQUIRED:"Route table id must not be empty"},SCHEDULE_EXPRESSION:"Schedule expression must be 'rate(N minute|minutes|hour|hours|day|days)' with N>=1, or 'cron(<6-field AWS expression>)'"});var fL=Object.defineProperty,lt=(e,t)=>fL(e,"name",{value:t,configurable:!0}),gL=["us-east-2","us-west-2","us-east-1","eu-west-1","eu-central-1","ap-southeast-1"],hL=Object.freeze(gL.flatMap(e=>{let t=mi(e);return t?[t]:[]})),wv=Object.freeze(["us-east-2","us-west-2","us-east-1","eu-west-1","ap-southeast-1"]);function Pu(e){return e?e.split(",").map(t=>t.trim()).filter(Boolean):[]}lt(Pu,"parseRegionList");function kv(e){return rr.includes(e)}lt(kv,"isValidRegion");function Ov(e){return/^[a-z]{2}-[a-z]+-[1-9]$/.test(e)}lt(Ov,"isValidRegionFormat");function Dv(e){if(!e)return wv.slice(0,3);let t=e.toLowerCase().split("-"),n=t[0],i=t.length>1?t[1]:"",r=[];return n&&i&&(r=rr.filter(o=>o.startsWith(`${n}-${i}`))),r.length===0&&n&&(r=rr.filter(o=>o.startsWith(`${n}-`))),r.length>0?r.slice(0,3):wv.slice(0,3)}lt(Dv,"getSuggestions");function Mv(e){if(kv(e))return!0;let t=Dv(e);return Ov(e)?`Unknown region. Try: ${t.join(", ")}`:`Invalid format. Try: ${t.join(", ")}`}lt(Mv,"validateRegion");function f$(e){if(!e||e.trim()==="")return!0;let t=Pu(e);for(let n of t){let i=Mv(n);if(i!==!0)return i}return!0}lt(f$,"validateRegionList");function jv(e,t){return e.filter(n=>n!==t)}lt(jv,"filterDuplicateRegions");function zv(e){return{label:e.city,value:e.code,description:e.optIn?`${e.code} \u2014 opt-in required`:e.code}}lt(zv,"toRegionOption");function g$(){return st.map(zv)}lt(g$,"getRegionOptions");function h$(e){return st.filter(t=>t.code!==e).map(zv)}lt(h$,"getRegionOptionsExcluding");function v$(e){let t=st.find(n=>n.code===e);return t?t.city:e}lt(v$,"getRegionName");function b$(e){return t=>{let n=Pu(t);return jv(n,e)}}lt(b$,"createRegionFormatter");var wu="7.0.1";var ku=["Aurora","Instance","GlobalAurora","ClickHouse"],Ii=["FARGATE","FARGATE_SPOT","EC2"],At=["standard","resilient","enterprise"],Ou=["tinkerer","lightweight","standard","resilient","enterprise"],Lv="custom",la=[...Ou,Lv];var vL=Object.defineProperty,bL=(e,t)=>vL(e,"name",{value:t,configurable:!0}),y$=Object.freeze({RESOURCE_SUFFIXES:Object.freeze({storage:"Storage",database:"Database",cluster:"Cluster",function:"Function",instance:"Instance",compute:"Compute"})}),da=["ecs","lambda","ec2"],$i=Object.freeze({ECS:"ecs",LAMBDA:"lambda",EC2:"ec2"}),Du=["code","container"],ma=Object.freeze({CODE:"code",CONTAINER:"container"}),Mu=["ARM_64","X86_64"],S$="ARM_64",pa=["NONE","AWS_IAM"],ju=["public","internal"],zu=["CPU","MEMORY"],Lu=["ARM","STANDARD"],Uv=["Instance","Aurora"],Ti=["postgresql","mysql"],_$=["foundation","compliance","hardened"];var Uu=["t3.nano","t3.micro","t3.small","t3.medium","t3.large","t3.xlarge","t3.2xlarge","t3a.nano","t3a.micro","t3a.small","t3a.medium","t3a.large","t3a.xlarge","t3a.2xlarge","t4g.nano","t4g.micro","t4g.small","t4g.medium","t4g.large","t4g.xlarge","t4g.2xlarge","c5.large","c5.xlarge","c5.2xlarge","c5.4xlarge","c5.9xlarge","c5.12xlarge","c5.18xlarge","c5.24xlarge","c5a.large","c5a.xlarge","c5a.2xlarge","c5a.4xlarge","c5a.8xlarge","c5a.12xlarge","c5a.16xlarge","c5a.24xlarge","c6g.medium","c6g.large","c6g.xlarge","c6g.2xlarge","c6g.4xlarge","c6g.8xlarge","c6g.12xlarge","c6g.16xlarge","r5.large","r5.xlarge","r5.2xlarge","r5.4xlarge","r5.8xlarge","r5.12xlarge","r5.16xlarge","r5.24xlarge","r5a.large","r5a.xlarge","r5a.2xlarge","r5a.4xlarge","r5a.8xlarge","r5a.12xlarge","r5a.16xlarge","r5a.24xlarge","r6g.medium","r6g.large","r6g.xlarge","r6g.2xlarge","r6g.4xlarge","r6g.8xlarge","r6g.12xlarge","r6g.16xlarge","i3.large","i3.xlarge","i3.2xlarge","i3.4xlarge","i3.8xlarge","i3.16xlarge","p3.2xlarge","p3.8xlarge","p3.16xlarge","g4dn.xlarge","g4dn.2xlarge","g4dn.4xlarge","g4dn.8xlarge","g4dn.12xlarge","g4dn.16xlarge","m5.large","m5.xlarge","m5.2xlarge","m5.4xlarge","m5.8xlarge","m5.12xlarge","m5.16xlarge","m5.24xlarge","m5a.large","m5a.xlarge","m5a.2xlarge","m5a.4xlarge","m5a.8xlarge","m5a.12xlarge","m5a.16xlarge","m5a.24xlarge"],E$=[0,1,5,10,15,30,60];function dt(e,t){return e.includes(t)}bL(dt,"constIncludes");var x$=1,A$=65535,lq=Object.freeze({postgresql:5432,mysql:3306}),I$=128,$$=10240,Fu=1,Bu=900,Fv=1,Bv=1e3,Ci=100,T$=100;var C$=3e3;var R$=["GET","POST","PUT","DELETE","HEAD","OPTIONS","PATCH"],N$=["standard","assets","upload","website"],Ri=["AES256","KMS"];var yL=Object.defineProperty,fa=(e,t)=>yL(e,"name",{value:t,configurable:!0}),Ye=fa(e=>s.union([s.literal(!1),e]),"optionalOrDisabled"),mn={check:fa(e=>e.minCapacity!==void 0&&e.maxCapacity!==void 0?e.minCapacity<=e.maxCapacity:!0,"check"),params:{message:d.CAPACITY_CONSTRAINT.MIN_LTE_MAX,path:["maxCapacity"]}},ga=fa(e=>s.number().int(d.MEMORY_LIMIT.INTEGER).min(e,e===128?d.MEMORY_LIMIT.MIN_128:d.MEMORY_LIMIT.MIN_512).max(30720,d.MEMORY_LIMIT.MAX),"memoryLimitMiBSchema"),V=s.string().min(1,d.REQUIRED.RESOURCE_NAME).max(63,d.MAX_LENGTH.RESOURCE_NAME).regex(L.RESOURCE_NAME,d.RESOURCE_NAME),w$=s.string().min(1,d.REQUIRED.BUCKET_NAME).max(63,d.MAX_LENGTH.BUCKET_NAME).regex(L.BUCKET_NAME,d.BUCKET_NAME),k$=s.string().min(1,d.REQUIRED.DATABASE_NAME).max(63,d.MAX_LENGTH.DATABASE_NAME).regex(L.DATABASE_NAME,d.DATABASE_NAME);function Vu(e,t=L.IDENTIFIER,n=d.IDENTIFIER){return s.string().min(2,d.IDENTIFIER_MIN_LENGTH).max(50,e).regex(t,n).refine(i=>!i.endsWith("-"),{message:d.IDENTIFIER_NO_TRAILING_HYPHEN}).refine(i=>!i.includes("--"),{message:d.IDENTIFIER_NO_CONSECUTIVE_HYPHENS})}fa(Vu,"identifierSchema");var ye=Vu(d.MAX_LENGTH.APP_NAME),vq=Vu(d.MAX_LENGTH.APP_NAME,L.NEW_APP_NAME,d.NEW_APP_NAME),pn=s.number().int(d.PORT.INTEGER).min(x$,d.PORT.MIN).max(A$,d.PORT.MAX),Re=s.object({key:s.string(),sourceText:s.string()}).strict(),SL=s.object({__identifier:s.string()}).strict(),_L=s.object({__expression:s.string()}).strict(),EL=s.object({__call:s.string()}).strict(),xL=s.union([SL,_L,EL]),AL=s.union([s.string(),s.number(),s.boolean(),xL]),Ni=s.record(s.string().regex(L.ENV_VAR_NAME,d.ENV_VAR_NAME),AL),IL=s.object({id:s.string(),name:s.string().optional(),arn:s.string().optional(),field:s.string().optional()}).strict().refine(e=>e.name!==void 0!=(e.arn!==void 0),{message:"secretsImport requires exactly one of `name` or `arn`."}),O$=s.record(s.string(),IL),bq=s.record(s.string(),s.unknown()),Vv=s.enum(la).describe(`Application type must be one of: ${la.join(", ")}`),Gv=s.enum(Mt).describe(`OpenNext deployment pattern: ${Mt.join(", ")}`),$L=s.enum(["before-imports","after-imports","after-app-init","after-tags","after-resource","end-of-file"]),TL=s.enum(["import","app-init","tags","database","compute","storage","network","messaging","cdn","pattern","vpc-peer","vpc-peer-accepter","cross-plan-connection","custom"]),D$=s.object({sourceText:s.string(),position:$L,afterManagedResource:s.object({type:TL,name:s.string().optional()}).strict().optional(),originalLine:s.number().int().optional(),leadingComments:s.array(s.string()).optional(),orphaned:s.boolean().optional(),orphanedComment:s.string().optional()}).strict(),M$=s.union([s.object({tier:s.enum(At)}).strict(),s.literal(!1)]),j$=s.union([s.object({instanceType:s.string().optional()}).strict(),s.literal(!1)]),CL=Vu(d.MAX_LENGTH.ORGANISATION_NAME),RL=s.string().regex(L.EMAIL,d.EMAIL),P$=s.string().refine(e=>rr.includes(e),{message:d.REGION}),yq=s.object({name:CL,email:RL,accountName:s.string().optional(),primaryRegion:P$.optional().default(di),secondaryRegions:s.array(P$).optional(),security:s.enum(_$).optional(),force:s.boolean().optional()}).strict();function ha(e){return e.issues.map(t=>`${t.path.length>0?`${t.path.join(".")}: `:""}${t.message}`).join(`
+`)}catch{}}oL(uL,"writeDebugSync");var lL=Object.defineProperty,Ai=(e,t)=>lL(e,"name",{value:t,configurable:!0});function Tv(e){return e.success===!0}Ai(Tv,"isSuccess");function Cv(e){return e.success===!1}Ai(Cv,"isFailure");function P(e){return{success:!0,data:e}}Ai(P,"success");function $(e){return{success:!1,error:e}}Ai($,"failure");async function Rv(e){try{let t=await e();return P(t)}catch(t){return $(Et(t))}}Ai(Rv,"tryAsync");function Nv(e){try{let t=e();return P(t)}catch(t){return $(Et(t))}}Ai(Nv,"trySync");var dL=Object.defineProperty,mL=(e,t)=>dL(e,"name",{value:t,configurable:!0}),p$=/^[a-zA-Z][a-zA-Z0-9-]*$/,pL=Ho.source.replace(/^\^|\$$/g,""),L=Object.freeze({IDENTIFIER:p$,NEW_APP_NAME:/^[a-z][a-z0-9-]*$/,RESOURCE_NAME:/^[a-zA-Z][a-zA-Z0-9]*$/,ECS_SERVICE_NAME:p$,BUCKET_NAME:/^[a-z][a-z0-9-]*[a-z0-9]$|^[a-z][a-z0-9]*$/,DATABASE_NAME:/^[a-zA-Z][a-zA-Z0-9_]*$/,RESOURCE_TYPE:/^[a-z]+(:[a-z]+)?$/,SSM_PATH:new RegExp(`^(?:/${pL})+$`),SECRET_NAME:au,SSM_COMPONENT:Ho,EMAIL:/^[^\s@]+@[^\s@]+\.[^\s@]+$/,DOCKER_IMAGE:/^[a-z0-9][a-z0-9._-]*[a-z0-9](:[a-z0-9._-]+)?$/,DOMAIN:/^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)+$/i,HTTP_ORIGIN:/^https?:\/\/[a-z0-9.-]+(:\d+)?$/i,PASCAL_CASE:/^[A-Z][A-Za-z0-9]*$/,AWS_ACCOUNT_ID:/^\d{12}$/,VPC_ID:/^vpc-[a-z0-9]+$/,ROLE_ARN:/^arn:aws[a-zA-Z-]*:iam::\d{12}:role\/.+$/,CIDR:/^((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\.){3}(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\/(3[0-2]|[12]?\d)$/,SCHEDULE_EXPRESSION:/^(rate\(1 (?:minute|hour|day)\)|rate\((?:[2-9]|[1-9]\d+) (?:minutes|hours|days)\)|cron\([^\s()]+ [^\s()]+ [^\s()]+ [^\s()]+ [^\s()]+ [^\s()]+\))$/,LAMBDA_RUNTIME_IDENTIFIER:/^[A-Za-z0-9._-]+$/,ENV_VAR_NAME:/^[A-Za-z_][A-Za-z0-9_]*$/});function Pv(e){let t=/^rate\((\d+) (minute|minutes|hour|hours|day|days)\)$/.exec(e);if(!t)return;let n=t[1],i=t[2];if(n===void 0||i===void 0)return;let r=parseInt(n,10);if(!Number.isFinite(r)||r<1)return;let o=i==="minute"||i==="hour"||i==="day";if(!(o&&r!==1)&&!(!o&&r===1))return i==="minute"||i==="minutes"?{everyMs:r*6e4}:i==="hour"||i==="hours"?{everyMs:r*60*6e4}:{everyMs:r*24*60*6e4}}mL(Pv,"parseRateExpression");var d=Object.freeze({IDENTIFIER:"Must start with a letter, contain only letters, numbers, and hyphens",NEW_APP_NAME:"Must start with a lowercase letter and contain only lowercase letters, numbers, and hyphens",IDENTIFIER_MIN_LENGTH:"Must be at least 2 characters",IDENTIFIER_NO_TRAILING_HYPHEN:"Must not end with a hyphen",IDENTIFIER_NO_CONSECUTIVE_HYPHENS:"Must not contain consecutive hyphens",RESOURCE_NAME:"Must start with a letter and contain only letters and numbers (PascalCase recommended)",ECS_SERVICE_NAME:"Service name must start with a letter and contain only letters, numbers, and hyphens",BUCKET_NAME:"Bucket name must start with a lowercase letter and contain only lowercase letters, numbers, and hyphens",DATABASE_NAME:"Database name must start with a letter and contain only letters, numbers, and underscores",RESOURCE_TYPE:"Resource type must be in format 'category' or 'category:type'",SSM_PATH:"SSM path must start with / and contain valid namespace segments (e.g., /myapp/ApiCluster/service)",SECRET_NAME:Th,SSM_COMPONENT:su,EMAIL:"Please enter a valid email address",DOMAIN:"Please enter a valid domain (e.g., cms.example.com)",DOCKER_IMAGE:"Invalid Docker image name format",REQUIRED:{APP_NAME:"Application name is required",RESOURCE_NAME:"Resource name is required",BUCKET_NAME:"Bucket name is required",SERVICE_NAME:"Service name is required",NETWORK_NAME:"Network name is required",DATABASE_NAME:"Database name is required",ORGANISATION_NAME:"Organisation name is required",EMAIL:"Email is required",NAME:"Name is required",USERNAME:"Username is required",CONTAINER_NAME:"Container name is required",GROUP:"Group is required",PATTERN_NAME:"Pattern name is required",SOURCE:"Source directory is required",BUILD_COMMAND:"Build command is required",OUTPUT_DIR:"Output directory is required",FORMS_TO:"Forms recipient address is required",ROUTING_PATH:"Routing path is required",RESOURCE_REFERENCE:"Resource reference is required",RESOURCE_TYPE:"Resource type is required",VARIANT:"Variant is required",SUBTYPE:"Subtype is required",DEPLOY_TARGET:"Deploy target is required",DESTROY_TARGET:"Destroy target is required"},MAX_LENGTH:{APP_NAME:"Application name must be 50 characters or less",RESOURCE_NAME:"Resource name must be 63 characters or less",BUCKET_NAME:"Bucket name must be 63 characters or less",SERVICE_NAME:"Service name must be 255 characters or less",NETWORK_NAME:"Network name must be 50 characters or less",DATABASE_NAME:"Database name must be 63 characters or less",ORGANISATION_NAME:"Organisation name must be 50 characters or less"},PORT:{INTEGER:"Port must be an integer",MIN:"Port must be at least 1",MAX:"Port cannot exceed 65535"},USERNAME:{MAX_LENGTH:"Username cannot exceed 63 characters"},LAMBDA:{MEMORY:{INTEGER:"Lambda memory must be an integer",MIN:"Memory must be at least 128 MB",MAX:"Memory cannot exceed 10240 MB",MULTIPLE:"Memory must be 128 MB or a multiple of 64 MB"},TIMEOUT:{INTEGER:"Timeout must be an integer",MIN:"Timeout must be at least 1 second",MAX:"Timeout cannot exceed 900 seconds"},RUNTIME:"Lambda runtime must contain only letters, digits, dots, underscores, or dashes (e.g. 'NODEJS_20_X' or 'nodejs20.x')"},ENV_VAR_NAME:"Environment variable names must start with a letter or underscore and contain only letters, digits, and underscores",PRIORITY:{INTEGER:"Priority must be an integer",MIN:"Priority must be at least 1",MAX:"Priority cannot exceed 50000"},CAPACITY:{MIN:{INTEGER:"Minimum capacity must be an integer",MIN_0:"Minimum capacity must be at least 0",MIN_1:"Minimum capacity must be at least 1",MAX:"Minimum capacity cannot exceed 100"},MAX:{INTEGER:"Maximum capacity must be an integer",MIN_0:"Maximum capacity must be at least 0",MIN_1:"Maximum capacity must be at least 1",MAX:"Maximum capacity cannot exceed 100"},DESIRED:{INTEGER:"Desired count must be an integer",MIN:"Desired count must be at least 0",MAX:"Desired count cannot exceed 100"},WARM_POOL_REQUIRED:"minCapacity 0 requires a warmPool \u2014 without it, new tasks wait 60-90s for a cold instance launch",WARM_POOL:{MIN_SIZE:{INTEGER:"Warm pool minSize must be an integer",MIN:"Warm pool minSize must be at least 0",MAX:"Warm pool minSize cannot exceed 100"},MIN_SIZE_EXCEEDS_MAX_CAPACITY:"warmPool.minSize cannot exceed maxCapacity \u2014 the warm pool cannot hold more instances than the ASG allows"}},MEMORY_LIMIT:{INTEGER:"Memory limit must be an integer",MIN_512:"Memory limit must be at least 512 MiB",MIN_128:"Memory limit must be at least 128 MiB",MAX:"Memory limit cannot exceed 30720 MiB"},DATABASE:{PORT:{INTEGER:"Database port must be an integer",MIN:"Database port must be at least 1024",MAX:"Database port cannot exceed 65535"},NAME:{REQUIRED:"Database name is required",MAX_LENGTH:"Database name must be 63 characters or less"}},BACKUP_RETENTION:{INTEGER:"Backup retention must be an integer",MIN:"Backup retention must be at least 1 day",MAX:"Backup retention cannot exceed 35 days"},SQS:{VISIBILITY_TIMEOUT:{INTEGER:"Visibility timeout must be an integer",MIN:"Visibility timeout must be at least 0 seconds",MAX:"Visibility timeout cannot exceed 43200 seconds (12 hours)"},RETENTION_PERIOD:{INTEGER:"Retention period must be an integer",MIN:"Retention period must be at least 60 seconds",MAX:"Retention period cannot exceed 1209600 seconds (14 days)"}},READER:{COUNT:{INTEGER:"Reader count must be an integer",MIN:"Reader count must be at least 0",MAX:"Reader count cannot exceed 15"}},IDENTIFIER_SUFFIX:{REQUIRED:"Identifier suffix is required when specified",MAX_LENGTH:"Identifier suffix cannot exceed 50 characters"},ROTATION:{INTEGER:"Rotation days must be an integer",MIN:"Rotation interval must be at least 1 day",MAX:"Rotation interval cannot exceed 365 days"},MAX_CONNECTIONS:{INTEGER:"Max connections must be an integer",MIN:"Max connections must be at least 1",MAX:"Max connections cannot exceed 100"},MONITORING_INTERVAL:{INTEGER:"Monitoring interval must be an integer",MIN:"Monitoring interval must be at least 0",MAX:"Monitoring interval cannot exceed 60 seconds",VALUES:"Monitoring interval must be 0, 1, 5, 10, 15, 30, or 60 seconds"},RETENTION_DAYS:{INTEGER:"Retention days must be an integer",MIN:"Retention days must be at least 1",MAX:"Retention days cannot exceed 365"},BATCH_SIZE:{INTEGER:"Batch size must be an integer",MIN:"Batch size must be at least 1",MAX:"Batch size cannot exceed 10000"},SERVICE:{UNIQUE_WITHIN_CLUSTER:"Service names must be unique within a cluster",MIN_REQUIRED:"At least one service is required",ROUTING_REQUIRED:"Multiple services with ports require routing config (path or host)"},PROXY_CONFIG:{MAX_IDLE_CONNECTIONS:{INTEGER:"Max idle connections must be an integer",MIN:"Max idle connections must be at least 0",MAX:"Max idle connections cannot exceed 100"},BORROW_TIMEOUT:{INTEGER:"Connection borrow timeout must be an integer",MIN:"Connection borrow timeout must be at least 1 second",MAX:"Connection borrow timeout cannot exceed 3600 seconds"}},MAX_AZS:{INTEGER:"Max AZs must be an integer",MIN:"Max AZs must be at least 1",MAX:"Max AZs cannot exceed 3"},BATCHING_WINDOW:{INTEGER:"Max batching window must be an integer",MIN:"Max batching window must be at least 0",MAX:"Max batching window cannot exceed 300 seconds"},HEALTH_CHECK:{INTERVAL:{INTEGER:"Health check interval must be an integer",MIN:"Health check interval must be at least 5 seconds",MAX:"Health check interval cannot exceed 300 seconds"},TIMEOUT:{INTEGER:"Health check timeout must be an integer",MIN:"Health check timeout must be at least 2 seconds",MAX:"Health check timeout cannot exceed 60 seconds"},RETRIES:{INTEGER:"Health check retries must be an integer",MIN:"Health check retries must be at least 1",MAX:"Health check retries cannot exceed 10"},START_PERIOD:{INTEGER:"Health check start period must be an integer",MIN:"Health check start period must be at least 0 seconds",MAX:"Health check start period cannot exceed 300 seconds"}},EPHEMERAL_STORAGE:{INTEGER:"Ephemeral storage size must be an integer",MIN:"Ephemeral storage size must be at least 512 MB",MAX:"Ephemeral storage size cannot exceed 10240 MB"},MAX_MESSAGE_SIZE:{INTEGER:"Max message size must be an integer",MIN:"Max message size must be at least 1024 bytes",MAX:"Max message size cannot exceed 262144 bytes (256 KB)"},CAPACITY_CONSTRAINT:{MIN_LTE_MAX:"minCapacity must be less than or equal to maxCapacity"},DIRECT_ACCESS:{NO_DOMAIN:"directAccess cannot be used with domain (no ALB for HTTPS)",NO_LOAD_BALANCER:"directAccess cannot be used with loadBalancer (mutually exclusive)"},GLOBAL_AURORA:{PRIMARY_REGION_REQUIRED:"primaryRegion is required for GlobalAurora databases"},NAT_GATEWAY:{INTEGER:"NAT gateway count must be an integer",MIN:"NAT gateway count must be at least 0",MAX:"NAT gateway count cannot exceed 3"},CIDR_MASK:{INTEGER:"CIDR mask must be an integer",MIN:"CIDR mask must be at least 16",MAX:"CIDR mask cannot exceed 28"},CPU:{INTEGER:"CPU must be an integer",MIN:"CPU must be at least 256 units",MAX:"CPU cannot exceed 4096 units"},KMS:{KEY_REQUIRED:"KMS key ARN is required when using KMS encryption"},READER_INSTANCES:{MAX:"Cannot have more than 15 reader instances",COUNT_OR_INSTANCES:"Cannot specify both 'count' and 'instances' - use one or the other"},GENERATOR_CAPACITY:{MIN:{MIN:"Minimum capacity must be at least 1",MAX:"Minimum capacity cannot exceed 1000"},MAX:{MIN:"Maximum capacity must be at least 1",MAX:"Maximum capacity cannot exceed 1000"}},INSTANCE_TYPE:"Unknown instance type. Common types include: t4g.micro, t4g.small, m5.large",ARCHITECTURE_MISMATCH:"Architecture mismatch between instance type and AMI",ALLOCATED_STORAGE:{INTEGER:"Allocated storage must be an integer",MIN:"Allocated storage must be at least 20 GB",MAX:"Allocated storage cannot exceed 65536 GB"},DLQ:{MAX_RECEIVE_COUNT:{INTEGER:"Max receive count must be an integer",MIN:"Max receive count must be at least 1",MAX:"Max receive count cannot exceed 1000"}},ALARM:{PERCENTAGE:{MIN:"Threshold must be at least 1%",MAX:"Threshold must be at most 100%"},FREE_STORAGE_GIB:{MIN:"Free storage threshold must be at least 1 GiB"}},REGION:"Invalid AWS region",PASCAL_CASE:"Resource name must start with an uppercase letter and contain only alphanumerics (PascalCase).",IMAGE_DOCKER_MUTEX:"image and docker are mutually exclusive",AWS_ACCOUNT_ID:"AWS account id must be exactly 12 digits (no hyphens)",VPC_ID:"VPC id must look like vpc-abc12345",ROLE_ARN:"Role ARN must have the form arn:aws:iam::<account-id>:role/<name>",CIDR:"CIDR must be in dotted-quad/prefix-length form (e.g. 10.0.0.0/16)",VPC_PEER:{MIN_REQUESTER_ACCOUNTS:"At least one requester account id is required",REGION_REQUIRED:"Peer region is required when specified",ROUTE_TABLE_ID_REQUIRED:"Route table id must not be empty"},SCHEDULE_EXPRESSION:"Schedule expression must be 'rate(N minute|minutes|hour|hours|day|days)' with N>=1, or 'cron(<6-field AWS expression>)'"});var fL=Object.defineProperty,lt=(e,t)=>fL(e,"name",{value:t,configurable:!0}),gL=["us-east-2","us-west-2","us-east-1","eu-west-1","eu-central-1","ap-southeast-1"],hL=Object.freeze(gL.flatMap(e=>{let t=mi(e);return t?[t]:[]})),wv=Object.freeze(["us-east-2","us-west-2","us-east-1","eu-west-1","ap-southeast-1"]);function Pu(e){return e?e.split(",").map(t=>t.trim()).filter(Boolean):[]}lt(Pu,"parseRegionList");function kv(e){return rr.includes(e)}lt(kv,"isValidRegion");function Ov(e){return/^[a-z]{2}-[a-z]+-[1-9]$/.test(e)}lt(Ov,"isValidRegionFormat");function Dv(e){if(!e)return wv.slice(0,3);let t=e.toLowerCase().split("-"),n=t[0],i=t.length>1?t[1]:"",r=[];return n&&i&&(r=rr.filter(o=>o.startsWith(`${n}-${i}`))),r.length===0&&n&&(r=rr.filter(o=>o.startsWith(`${n}-`))),r.length>0?r.slice(0,3):wv.slice(0,3)}lt(Dv,"getSuggestions");function Mv(e){if(kv(e))return!0;let t=Dv(e);return Ov(e)?`Unknown region. Try: ${t.join(", ")}`:`Invalid format. Try: ${t.join(", ")}`}lt(Mv,"validateRegion");function f$(e){if(!e||e.trim()==="")return!0;let t=Pu(e);for(let n of t){let i=Mv(n);if(i!==!0)return i}return!0}lt(f$,"validateRegionList");function jv(e,t){return e.filter(n=>n!==t)}lt(jv,"filterDuplicateRegions");function zv(e){return{label:e.city,value:e.code,description:e.optIn?`${e.code} \u2014 opt-in required`:e.code}}lt(zv,"toRegionOption");function g$(){return st.map(zv)}lt(g$,"getRegionOptions");function h$(e){return st.filter(t=>t.code!==e).map(zv)}lt(h$,"getRegionOptionsExcluding");function v$(e){let t=st.find(n=>n.code===e);return t?t.city:e}lt(v$,"getRegionName");function b$(e){return t=>{let n=Pu(t);return jv(n,e)}}lt(b$,"createRegionFormatter");var wu="7.1.0";var ku=["Aurora","Instance","GlobalAurora","ClickHouse"],Ii=["FARGATE","FARGATE_SPOT","EC2"],At=["standard","resilient","enterprise"],Ou=["tinkerer","lightweight","standard","resilient","enterprise"],Lv="custom",la=[...Ou,Lv];var vL=Object.defineProperty,bL=(e,t)=>vL(e,"name",{value:t,configurable:!0}),y$=Object.freeze({RESOURCE_SUFFIXES:Object.freeze({storage:"Storage",database:"Database",cluster:"Cluster",function:"Function",instance:"Instance",compute:"Compute"})}),da=["ecs","lambda","ec2"],$i=Object.freeze({ECS:"ecs",LAMBDA:"lambda",EC2:"ec2"}),Du=["code","container"],ma=Object.freeze({CODE:"code",CONTAINER:"container"}),Mu=["ARM_64","X86_64"],S$="ARM_64",pa=["NONE","AWS_IAM"],ju=["public","internal"],zu=["CPU","MEMORY"],Lu=["ARM","STANDARD"],Uv=["Instance","Aurora"],Ti=["postgresql","mysql"],_$=["foundation","compliance","hardened"];var Uu=["t3.nano","t3.micro","t3.small","t3.medium","t3.large","t3.xlarge","t3.2xlarge","t3a.nano","t3a.micro","t3a.small","t3a.medium","t3a.large","t3a.xlarge","t3a.2xlarge","t4g.nano","t4g.micro","t4g.small","t4g.medium","t4g.large","t4g.xlarge","t4g.2xlarge","c5.large","c5.xlarge","c5.2xlarge","c5.4xlarge","c5.9xlarge","c5.12xlarge","c5.18xlarge","c5.24xlarge","c5a.large","c5a.xlarge","c5a.2xlarge","c5a.4xlarge","c5a.8xlarge","c5a.12xlarge","c5a.16xlarge","c5a.24xlarge","c6g.medium","c6g.large","c6g.xlarge","c6g.2xlarge","c6g.4xlarge","c6g.8xlarge","c6g.12xlarge","c6g.16xlarge","r5.large","r5.xlarge","r5.2xlarge","r5.4xlarge","r5.8xlarge","r5.12xlarge","r5.16xlarge","r5.24xlarge","r5a.large","r5a.xlarge","r5a.2xlarge","r5a.4xlarge","r5a.8xlarge","r5a.12xlarge","r5a.16xlarge","r5a.24xlarge","r6g.medium","r6g.large","r6g.xlarge","r6g.2xlarge","r6g.4xlarge","r6g.8xlarge","r6g.12xlarge","r6g.16xlarge","i3.large","i3.xlarge","i3.2xlarge","i3.4xlarge","i3.8xlarge","i3.16xlarge","p3.2xlarge","p3.8xlarge","p3.16xlarge","g4dn.xlarge","g4dn.2xlarge","g4dn.4xlarge","g4dn.8xlarge","g4dn.12xlarge","g4dn.16xlarge","m5.large","m5.xlarge","m5.2xlarge","m5.4xlarge","m5.8xlarge","m5.12xlarge","m5.16xlarge","m5.24xlarge","m5a.large","m5a.xlarge","m5a.2xlarge","m5a.4xlarge","m5a.8xlarge","m5a.12xlarge","m5a.16xlarge","m5a.24xlarge"],E$=[0,1,5,10,15,30,60];function dt(e,t){return e.includes(t)}bL(dt,"constIncludes");var x$=1,A$=65535,lq=Object.freeze({postgresql:5432,mysql:3306}),I$=128,$$=10240,Fu=1,Bu=900,Fv=1,Bv=1e3,Ci=100,T$=100;var C$=3e3;var R$=["GET","POST","PUT","DELETE","HEAD","OPTIONS","PATCH"],N$=["standard","assets","upload","website"],Ri=["AES256","KMS"];var yL=Object.defineProperty,fa=(e,t)=>yL(e,"name",{value:t,configurable:!0}),Ye=fa(e=>s.union([s.literal(!1),e]),"optionalOrDisabled"),mn={check:fa(e=>e.minCapacity!==void 0&&e.maxCapacity!==void 0?e.minCapacity<=e.maxCapacity:!0,"check"),params:{message:d.CAPACITY_CONSTRAINT.MIN_LTE_MAX,path:["maxCapacity"]}},ga=fa(e=>s.number().int(d.MEMORY_LIMIT.INTEGER).min(e,e===128?d.MEMORY_LIMIT.MIN_128:d.MEMORY_LIMIT.MIN_512).max(30720,d.MEMORY_LIMIT.MAX),"memoryLimitMiBSchema"),V=s.string().min(1,d.REQUIRED.RESOURCE_NAME).max(63,d.MAX_LENGTH.RESOURCE_NAME).regex(L.RESOURCE_NAME,d.RESOURCE_NAME),w$=s.string().min(1,d.REQUIRED.BUCKET_NAME).max(63,d.MAX_LENGTH.BUCKET_NAME).regex(L.BUCKET_NAME,d.BUCKET_NAME),k$=s.string().min(1,d.REQUIRED.DATABASE_NAME).max(63,d.MAX_LENGTH.DATABASE_NAME).regex(L.DATABASE_NAME,d.DATABASE_NAME);function Vu(e,t=L.IDENTIFIER,n=d.IDENTIFIER){return s.string().min(2,d.IDENTIFIER_MIN_LENGTH).max(50,e).regex(t,n).refine(i=>!i.endsWith("-"),{message:d.IDENTIFIER_NO_TRAILING_HYPHEN}).refine(i=>!i.includes("--"),{message:d.IDENTIFIER_NO_CONSECUTIVE_HYPHENS})}fa(Vu,"identifierSchema");var ye=Vu(d.MAX_LENGTH.APP_NAME),vq=Vu(d.MAX_LENGTH.APP_NAME,L.NEW_APP_NAME,d.NEW_APP_NAME),pn=s.number().int(d.PORT.INTEGER).min(x$,d.PORT.MIN).max(A$,d.PORT.MAX),Re=s.object({key:s.string(),sourceText:s.string()}).strict(),SL=s.object({__identifier:s.string()}).strict(),_L=s.object({__expression:s.string()}).strict(),EL=s.object({__call:s.string()}).strict(),xL=s.union([SL,_L,EL]),AL=s.union([s.string(),s.number(),s.boolean(),xL]),Ni=s.record(s.string().regex(L.ENV_VAR_NAME,d.ENV_VAR_NAME),AL),IL=s.object({id:s.string(),name:s.string().optional(),arn:s.string().optional(),field:s.string().optional()}).strict().refine(e=>e.name!==void 0!=(e.arn!==void 0),{message:"secretsImport requires exactly one of `name` or `arn`."}),O$=s.record(s.string(),IL),bq=s.record(s.string(),s.unknown()),Vv=s.enum(la).describe(`Application type must be one of: ${la.join(", ")}`),Gv=s.enum(Mt).describe(`OpenNext deployment pattern: ${Mt.join(", ")}`),$L=s.enum(["before-imports","after-imports","after-app-init","after-tags","after-resource","end-of-file"]),TL=s.enum(["import","app-init","tags","database","compute","storage","network","messaging","cdn","pattern","vpc-peer","vpc-peer-accepter","cross-plan-connection","custom"]),D$=s.object({sourceText:s.string(),position:$L,afterManagedResource:s.object({type:TL,name:s.string().optional()}).strict().optional(),originalLine:s.number().int().optional(),leadingComments:s.array(s.string()).optional(),orphaned:s.boolean().optional(),orphanedComment:s.string().optional()}).strict(),M$=s.union([s.object({tier:s.enum(At)}).strict(),s.literal(!1)]),j$=s.union([s.object({instanceType:s.string().optional()}).strict(),s.literal(!1)]),CL=Vu(d.MAX_LENGTH.ORGANISATION_NAME),RL=s.string().regex(L.EMAIL,d.EMAIL),P$=s.string().refine(e=>rr.includes(e),{message:d.REGION}),yq=s.object({name:CL,email:RL,accountName:s.string().optional(),primaryRegion:P$.optional().default(di),secondaryRegions:s.array(P$).optional(),security:s.enum(_$).optional(),force:s.boolean().optional()}).strict();function ha(e){return e.issues.map(t=>`${t.path.length>0?`${t.path.join(".")}: `:""}${t.message}`).join(`
 `)}fa(ha,"getZodErrorMessage");var Pi=s.number().min(1,d.ALARM.PERCENTAGE.MIN).max(100,d.ALARM.PERCENTAGE.MAX),NL=s.number().min(1,d.ALARM.FREE_STORAGE_GIB.MIN),z$=s.union([s.literal(!1),s.object({cpuThreshold:Pi.optional(),memoryThreshold:Pi.optional(),runningTasksMinimum:s.number().int().min(0).optional(),http5xxThreshold:Pi.optional()}).strict()]),L$=s.union([s.literal(!1),s.object({cpuThreshold:Pi.optional(),freeStorageThresholdGiB:NL.optional(),connectionsThreshold:s.number().int().min(1).optional()}).strict()]),U$=s.union([s.literal(!1),s.object({errorRateThreshold:Pi.optional(),durationThresholdPercent:Pi.optional()}).strict()]);var nr=s.number().int(d.BACKUP_RETENTION.INTEGER).min(1,d.BACKUP_RETENTION.MIN).max(35,d.BACKUP_RETENTION.MAX),va=s.number().int(d.MONITORING_INTERVAL.INTEGER).refine(e=>dt(E$,e),{message:d.MONITORING_INTERVAL.VALUES}),Zu=s.number().int(d.DATABASE.PORT.INTEGER).min(1024,d.DATABASE.PORT.MIN).max(65535,d.DATABASE.PORT.MAX),PL=s.enum(ku).describe(`Database type must be one of: ${ku.join(", ")}`),wL=s.object({maxConnections:s.number().int(d.MAX_CONNECTIONS.INTEGER).min(1,d.MAX_CONNECTIONS.MIN).max(100,d.MAX_CONNECTIONS.MAX).optional(),maxIdleConnections:s.number().int(d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.INTEGER).min(0,d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MIN).max(100,d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MAX).optional(),connectionBorrowTimeout:s.number().int(d.PROXY_CONFIG.BORROW_TIMEOUT.INTEGER).min(1,d.PROXY_CONFIG.BORROW_TIMEOUT.MIN).max(3600,d.PROXY_CONFIG.BORROW_TIMEOUT.MAX).optional(),requireTLS:s.boolean().optional()}).strict().describe("RDS Proxy configuration"),kL=s.object({instanceType:s.string().optional(),availabilityZone:s.string().optional()}).strict().describe("Read replica configuration"),OL=s.object({automaticallyAfterDays:s.number().int(d.ROTATION.INTEGER).min(1,d.ROTATION.MIN).max(365,d.ROTATION.MAX).optional()}).strict().describe("Secret rotation configuration"),Wu=s.object({username:s.string().min(1,d.REQUIRED.USERNAME).max(63,d.USERNAME.MAX_LENGTH).optional(),secretRotation:OL.optional()}).strict().describe("Database credentials configuration"),Hu=Ye(wL),qu=Ye(kL),DL=s.object({scaleWithWriter:s.boolean().optional(),enableDatabaseInsights:s.boolean().optional(),identifierSuffix:s.string().min(1,d.IDENTIFIER_SUFFIX.REQUIRED).max(50,d.IDENTIFIER_SUFFIX.MAX_LENGTH).optional(),availabilityZone:s.string().optional()}).strict().describe("Configuration for a single Aurora reader instance"),ba=s.object({enableDatabaseInsights:s.boolean().optional(),identifierSuffix:s.string().min(1,d.IDENTIFIER_SUFFIX.REQUIRED).max(50,d.IDENTIFIER_SUFFIX.MAX_LENGTH).optional(),availabilityZone:s.string().optional()}).strict().describe("Configuration for Aurora writer instance"),ML=s.object({count:s.number().int(d.READER.COUNT.INTEGER).min(0,d.READER.COUNT.MIN).max(15,d.READER.COUNT.MAX).optional(),instances:s.array(DL).max(15,d.READER_INSTANCES.MAX).optional(),defaultEnableDatabaseInsights:s.boolean().optional()}).strict().refine(e=>!(e.count!==void 0&&e.instances!==void 0),{message:d.READER_INSTANCES.COUNT_OR_INSTANCES,path:["count"]}).describe("Aurora readers configuration"),ya=Ye(ML),jL=s.object({awsManaged:s.literal(!0)}).strict(),zL=s.object({useCMK:s.literal(!0)}).strict(),F$=s.union([jL,zL]),LL=s.object({mode:s.enum(["standard","advanced"]).optional(),encryptionKey:F$.optional()}).strict().describe("Database Insights configuration"),Yu=Ye(LL),Ku=s.object({storageKey:F$.optional()}).strict().describe("Encryption configuration (DESTRUCTIVE to change storageKey)"),B$=s.object({name:V,type:PL,databaseName:s.string().min(1,d.REQUIRED.DATABASE_NAME),instanceType:s.string().optional(),allocatedStorage:s.number().optional(),multiAz:s.boolean().optional(),publiclyAccessible:s.boolean().optional(),databaseInsights:Yu.optional(),port:Zu.optional(),deletionProtection:s.boolean().optional(),proxy:Hu.optional(),credentials:Wu.optional(),readReplica:qu.optional(),encryption:Ku.optional(),writer:ba.optional(),readers:ya.optional(),backupRetention:nr.optional(),preferredMaintenanceWindow:s.string().optional(),monitoringInterval:va.optional(),primaryRegion:s.string().optional(),secondaryRegions:s.array(s.string()).optional(),globalClusterIdentifier:s.string().optional(),enableGlobalWriteForwarding:s.boolean().optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional(),databaseEngine:s.enum(Ti).optional(),engineExpression:s.string().optional(),variableName:s.string().optional(),extraProperties:s.array(Re).optional(),alarms:L$.optional()}).strict(),Xu=s.object({appName:ye,nameProvidedByFlag:s.boolean().optional(),databaseName:s.string().min(1,d.REQUIRED.DATABASE_NAME).max(63,d.MAX_LENGTH.DATABASE_NAME).regex(L.DATABASE_NAME,d.DATABASE_NAME),resourceName:V.optional(),connectionConfig:s.object({connectToCompute:s.array(s.string()).optional(),connectToServices:s.array(s.string()).optional()}).strict().optional(),databaseInsights:Yu.optional(),port:Zu.optional(),proxy:Hu.optional(),credentials:Wu.optional(),encryption:Ku.optional(),deletionProtection:s.boolean().optional()}).strict(),V$={databaseType:s.literal("Instance"),instanceType:s.string().optional(),multiAz:s.boolean().optional(),readReplica:qu.optional(),publiclyAccessible:s.boolean().optional(),backupRetention:nr.optional(),allocatedStorage:s.number().optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()},G$={databaseType:s.literal("Aurora"),writer:ba.optional(),readers:ya.optional(),backupRetention:nr.optional(),preferredMaintenanceWindow:s.string().optional(),monitoringInterval:va.optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()},Z$={databaseType:s.literal("GlobalAurora"),primaryRegion:s.string().min(1,d.GLOBAL_AURORA.PRIMARY_REGION_REQUIRED),secondaryRegions:s.array(s.string()).optional(),globalClusterIdentifier:s.string().optional(),enableGlobalWriteForwarding:s.boolean().optional(),writer:ba.optional(),readers:ya.optional(),backupRetention:nr.optional(),preferredMaintenanceWindow:s.string().optional(),monitoringInterval:va.optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()},W$=s.object({appName:ye,nameProvidedByFlag:s.boolean().optional(),databaseName:s.string().min(1,d.REQUIRED.DATABASE_NAME).max(63,d.MAX_LENGTH.DATABASE_NAME).regex(L.DATABASE_NAME,d.DATABASE_NAME),resourceName:V.optional(),connectionConfig:s.object({connectToCompute:s.array(s.string()).optional(),connectToServices:s.array(s.string()).optional()}).strict().optional()}).strict(),H$={databaseType:s.literal("ClickHouse"),instanceType:s.string().optional(),coldTier:s.union([s.object({mode:s.literal("s3")}).strict(),s.literal(!1)]).optional(),optimiseSchedule:s.union([s.string(),s.literal(!1)]).optional(),backupSchedule:s.union([s.string(),s.literal(!1)]).optional(),backupRetentionDays:nr.optional()},UL=Xu.extend(V$).strict(),FL=Xu.extend(G$).strict(),BL=Xu.extend(Z$).strict(),VL=W$.extend(H$).strict(),Rq=s.discriminatedUnion("databaseType",[UL,FL,BL,VL]),Zv=Xu.extend({resourceName:V}).strict(),GL=Zv.extend(V$).strict(),ZL=Zv.extend(G$).strict(),WL=Zv.extend(Z$).strict(),HL=W$.extend({resourceName:V}).strict(),qL=HL.extend(H$).strict(),Nq=s.discriminatedUnion("databaseType",[GL,ZL,WL,qL]),Pq=s.object({appName:ye,databaseName:s.string().min(1,d.REQUIRED.DATABASE_NAME),maxConnections:s.number().int(d.MAX_CONNECTIONS.INTEGER).min(1,d.MAX_CONNECTIONS.MIN).max(100,d.MAX_CONNECTIONS.MAX).optional(),maxIdleConnections:s.number().int(d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.INTEGER).min(0,d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MIN).max(100,d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MAX).optional(),connectionBorrowTimeout:s.number().int(d.PROXY_CONFIG.BORROW_TIMEOUT.INTEGER).min(1,d.PROXY_CONFIG.BORROW_TIMEOUT.MIN).max(3600,d.PROXY_CONFIG.BORROW_TIMEOUT.MAX).optional(),requireTLS:s.boolean().optional(),nameProvidedByFlag:s.boolean().optional()}).strict(),YL=["S","N","B"],Gu=s.object({name:s.string(),type:s.enum(YL)}).strict(),q$=s.object({name:V,partitionKey:Gu,sortKey:Gu.optional(),globalSecondaryIndexes:s.array(s.object({indexName:s.string(),partitionKey:Gu,sortKey:Gu.optional()}).strict()).optional(),ttlAttribute:s.string().optional(),stream:s.boolean().optional(),variableName:s.string().optional(),extraProperties:s.array(Re).optional()}).strict(),KL=s.object({mode:s.literal("s3")}).strict(),Y$=s.object({name:V,type:s.literal("ClickHouse"),databaseName:k$,instanceType:s.string().optional(),coldTier:s.union([KL,s.literal(!1)]).optional(),optimiseSchedule:s.union([s.string(),s.literal(!1)]).optional(),backupSchedule:s.union([s.string(),s.literal(!1)]).optional(),backupRetentionDays:nr.optional(),variableName:s.string().optional(),extraProperties:s.array(Re).optional()}).strict();var XL=s.object({count:s.number().int(d.NAT_GATEWAY.INTEGER).min(0,d.NAT_GATEWAY.MIN).max(3,d.NAT_GATEWAY.MAX).optional()}).strict().describe("NAT gateway configuration"),K$=Ye(XL),Wv=s.enum(["cloudwatch","s3"]),JL=s.object({destination:Wv.optional(),retentionDays:s.number().int(d.RETENTION_DAYS.INTEGER).min(1,d.RETENTION_DAYS.MIN).max(365,d.RETENTION_DAYS.MAX).optional(),trafficType:s.enum(["ALL","ACCEPT","REJECT"]).optional()}).strict().describe("VPC flow log configuration"),X$=Ye(JL),QL=s.object({s3:s.boolean().optional(),dynamodb:s.boolean().optional()}).strict().describe("Gateway VPC endpoints (FREE)"),eU=Ye(QL),tU=s.object({ecr:s.boolean().optional(),secretsManager:s.boolean().optional(),kms:s.boolean().optional(),cloudwatchLogs:s.boolean().optional(),ssm:s.boolean().optional(),sts:s.boolean().optional()}).strict().describe("Interface VPC endpoints (cost per hour)"),rU=Ye(tU),nU=s.object({gateway:eU.optional(),interface:rU.optional()}).strict().describe("VPC endpoints configuration"),J$=Ye(nU),Ju=s.object({maxAzs:s.number().int(d.MAX_AZS.INTEGER).min(1,d.MAX_AZS.MIN).max(3,d.MAX_AZS.MAX).optional(),natGateways:K$.optional(),flowLogs:X$.optional(),vpcEndpoints:J$.optional(),cidrMask:s.number().int(d.CIDR_MASK.INTEGER).min(16,d.CIDR_MASK.MIN).max(28,d.CIDR_MASK.MAX).optional()}).strict(),Q$=s.string().min(1,d.REQUIRED.NETWORK_NAME).max(50,d.MAX_LENGTH.NETWORK_NAME).regex(L.RESOURCE_NAME,d.RESOURCE_NAME),eT=Ju.extend({name:Q$}).strict(),tT=Ye(Ju),Mq=s.object({appName:ye,networkName:Q$.optional(),maxAzs:s.number().int(d.MAX_AZS.INTEGER).min(1,d.MAX_AZS.MIN).max(3,d.MAX_AZS.MAX).optional(),natGateways:K$.optional(),flowLogs:X$.optional(),vpcEndpoints:J$.optional()}).strict(),iU=L.CIDR,Hv=s.string().regex(iU,d.CIDR),oU=s.object({kind:s.literal("database"),resource:s.string().min(1,d.REQUIRED.RESOURCE_REFERENCE),name:V,allowedFromCidrs:s.array(Hv),access:s.enum(["read","write","readWrite"]).optional()}).strict(),aU=s.object({kind:s.literal("ecsService"),resource:s.string().min(1,d.REQUIRED.RESOURCE_REFERENCE),serviceName:s.string().min(1,d.REQUIRED.SERVICE_NAME),name:V,allowedFromCidrs:s.array(Hv),port:pn.optional()}).strict(),sU=s.discriminatedUnion("kind",[oU,aU]),jq=s.object({name:V,peerAppName:s.string().min(1,d.REQUIRED.APP_NAME),peerAccountId:s.string().regex(L.AWS_ACCOUNT_ID,d.AWS_ACCOUNT_ID),peerRegion:s.string().min(1,d.VPC_PEER.REGION_REQUIRED).optional(),peerVpcId:s.string().regex(L.VPC_ID,d.VPC_ID).optional(),peerVpcCidr:Hv.optional(),peerRoleArn:s.string().regex(L.ROLE_ARN,d.ROLE_ARN).optional(),peerRouteTableIds:s.array(s.string().min(1,d.VPC_PEER.ROUTE_TABLE_ID_REQUIRED)).optional(),localVpcName:s.string().min(1,d.REQUIRED.NETWORK_NAME).optional(),enableDnsResolution:s.boolean().optional()}).strict(),zq=s.object({name:V,requesterAccountIds:s.array(s.string().regex(L.AWS_ACCOUNT_ID,d.AWS_ACCOUNT_ID)).min(1,d.VPC_PEER.MIN_REQUESTER_ACCOUNTS),localVpcName:s.string().min(1,d.REQUIRED.NETWORK_NAME).optional(),publishToSsm:s.boolean().optional(),exposedResources:s.array(sU).optional()}).strict();var Qu=["storage","cdn","compute"],cU=s.object({sid:s.string().optional(),effect:s.enum(["Allow","Deny"]),principals:s.array(s.string()),actions:s.array(s.string()),resources:s.array(s.string()).optional(),conditions:s.record(s.string(),s.record(s.string(),s.union([s.string(),s.array(s.string())]))).optional()}).strict(),rT=s.object({name:V,bucketName:s.string().optional(),publicReadAccess:s.boolean().optional(),websiteHosting:s.object({indexDocument:s.string(),errorDocument:s.string().optional()}).strict().optional(),backupVaultTier:s.enum(At).optional(),versioned:s.boolean().optional(),encryption:s.enum(Ri).optional(),kmsKeyArn:s.string().optional(),cors:s.array(s.object({allowedOrigins:s.array(s.string()),allowedMethods:s.array(s.string()),allowedHeaders:s.array(s.string()).optional(),exposedHeaders:s.array(s.string()).optional(),maxAge:s.number().optional()}).strict()).optional(),deployment:s.object({source:s.string(),prune:s.boolean().optional(),cacheControl:s.object({maxAge:s.number().optional(),immutable:s.boolean().optional()}).strict().optional()}).strict().optional(),retain:s.boolean().optional(),resourcePolicyStatements:s.array(cU).optional(),stackPlacement:s.enum(Qu).optional(),variableName:s.string().optional(),extraProperties:s.array(Re).optional()}).strict().refine(e=>e.encryption!=="KMS"||!!e.kmsKeyArn,{message:d.KMS.KEY_REQUIRED}),Gq=s.object({appName:ye,bucketName:w$,nameProvidedByFlag:s.boolean().optional(),storagePreset:s.enum(N$).optional(),publicReadAccess:s.boolean().optional(),websiteHosting:s.object({indexDocument:s.string(),errorDocument:s.string().optional()}).strict().optional(),backupVaultTier:s.enum(At).optional(),versioned:s.boolean().optional(),encryption:s.enum(Ri).optional(),kmsKeyArn:s.string().optional(),cors:s.array(s.object({allowedOrigins:s.array(s.string()),allowedMethods:s.array(s.string()),allowedHeaders:s.array(s.string()).optional(),exposedHeaders:s.array(s.string()).optional(),maxAge:s.number().optional()}).strict()).optional(),connectionConfig:s.object({connectToCompute:s.array(s.string()).optional(),connectToServices:s.array(s.string()).optional()}).strict().optional()}).strict().refine(e=>e.encryption!=="KMS"||!!e.kmsKeyArn,{message:d.KMS.KEY_REQUIRED,path:["kmsKeyArn"]});var qv=s.enum(["DESTROY","RETAIN"]),nT=s.object({name:V,queueType:s.enum(["standard","fifo"]).default("standard"),visibilityTimeout:s.number().int(d.SQS.VISIBILITY_TIMEOUT.INTEGER).min(0,d.SQS.VISIBILITY_TIMEOUT.MIN).max(43200,d.SQS.VISIBILITY_TIMEOUT.MAX).optional(),retentionPeriod:s.number().int(d.SQS.RETENTION_PERIOD.INTEGER).min(60,d.SQS.RETENTION_PERIOD.MIN).max(1209600,d.SQS.RETENTION_PERIOD.MAX).optional(),contentBasedDeduplication:s.boolean().optional(),removalPolicy:qv.optional(),variableName:s.string().optional(),extraProperties:s.array(Re).optional()}).strict();var iT=s.object({type:s.literal("basic-auth"),username:s.string().min(1),password:s.string().min(1)}).strict(),oT=s.object({name:V,defaultOriginRef:s.string(),behaviours:s.array(s.object({pathPattern:s.string(),originRef:s.string(),cachePolicy:s.enum(["CACHING_OPTIMIZED","CACHING_DISABLED"]).optional()}).strict()).optional(),customDomain:s.string().optional(),certificateArn:s.string().optional(),accessGate:s.union([s.literal(!1),iT]).optional(),extraProperties:s.array(Re).optional()}).strict(),Jq=s.object({appName:s.string(),name:V.optional(),defaultOriginRef:s.string(),behaviours:s.array(s.object({pathPattern:s.string(),originRef:s.string(),cachePolicy:s.enum(["CACHING_OPTIMIZED","CACHING_DISABLED"]).optional()}).strict()).optional(),customDomain:s.string().optional(),certificateArn:s.string().optional(),accessGate:s.union([s.literal(!1),iT]).optional(),nameProvidedByFlag:s.boolean().optional()}).strict();var uU=Object.defineProperty,Yv=(e,t)=>uU(e,"name",{value:t,configurable:!0}),lU=new Set(["t4g","c6g","c6gd","c6gn","c7g","c7gd","c7gn","r6g","r6gd","r7g","r7gd","r8g","r8gd","c8g","c8gd","c8gn","m6g","m6gd","m7g","m7gd","m8g","m8gd","x8g","i8g","a1","x2gd","im4gn","is4gen","i4g","hpc7g"]);function wi(e){let t=e.split(".")[0]??"";return lU.has(t)?"ARM":"STANDARD"}Yv(wi,"getArchitectureForInstanceType");function el(e,t){let n=wi(e);return n!==t?{valid:!1,message:`Instance type '${e}' requires ${n} architecture, but '${t}' AMI was specified. Use a ${n==="ARM"?"Graviton instance (t4g, c6g, r6g, m6g, etc.)":"Intel/AMD instance (t3, c5, r5, m5, etc.)"} instead.`}:{valid:!0}}Yv(el,"validateArchitectureMatch");function aT(e,t){return wi(e)===t}Yv(aT,"isArchitectureCompatible");var dU=Object.defineProperty,tl=(e,t)=>dU(e,"name",{value:t,configurable:!0});var mU=1;var pU=/^[A-Za-z0-9_.-]+$/,fU=s.object({id:s.string().min(1,"buildSecret id cannot be empty").regex(pU,"buildSecret id may contain only letters, digits, '_', '.', and '-' (no comma, '=', or whitespace, which would break the buildx --secret argv)"),ssm:s.string().min(1,"ssm parameter name cannot be empty").optional(),secretsManager:s.object({name:s.string().min(1,"secret name cannot be empty").optional(),arn:s.string().min(1,"secret arn cannot be empty").optional(),field:s.string().min(1,"secret field cannot be empty").optional()}).strict().refine(e=>e.name===void 0!=(e.arn===void 0),"secretsManager requires exactly one of name or arn").optional(),env:s.string().min(1,"env variable name cannot be empty").optional()}).strict().superRefine((e,t)=>{[e.ssm,e.secretsManager,e.env].filter(n=>n!==void 0).length!==1&&t.addIssue({code:s.ZodIssueCode.custom,message:"buildSecret requires exactly one source (ssm, secretsManager, or env)"})}),gU=s.union([s.string(),s.object({ssm:s.string().min(1,"ssm parameter name cannot be empty").optional(),secretsManager:s.object({name:s.string().min(1,"secret name cannot be empty").optional(),arn:s.string().min(1,"secret arn cannot be empty").optional(),field:s.string().min(1,"secret field cannot be empty").optional()}).strict().refine(e=>e.name===void 0!=(e.arn===void 0),"secretsManager requires exactly one of name or arn").optional(),env:s.string().min(1,"env variable name cannot be empty").optional(),acknowledgePublic:s.boolean().optional()}).strict().superRefine((e,t)=>{[e.ssm,e.secretsManager,e.env].filter(n=>n!==void 0).length!==1&&t.addIssue({code:s.ZodIssueCode.custom,message:"buildArg value requires exactly one source (ssm, secretsManager, or env)"})})]),zt=s.object({path:s.string(),context:s.string().min(1,"context cannot be empty").optional(),target:s.string().min(1,"target cannot be empty").optional(),buildArgs:s.record(s.string(),gU).optional(),buildSecrets:s.array(fU).optional()}).strict(),n7=zt.partial();function hU(e,t){if(t===void 0)return e;let n=t.context??e.context,i=t.target??e.target,r=t.buildArgs??e.buildArgs,o=t.buildSecrets??e.buildSecrets;return{path:t.path??e.path,...n!==void 0&&{context:n},...i!==void 0&&{target:i},...r!==void 0&&{buildArgs:r},...o!==void 0&&{buildSecrets:o}}}tl(hU,"mergeDockerBuild");function Kv(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}tl(Kv,"isRecord");function sT(e){if(!Kv(e)||typeof e.path!="string"||e.path.length===0)return;let t=typeof e.context=="string"&&e.context.length>0?e.context:void 0,n=typeof e.target=="string"&&e.target.length>0?e.target:void 0,i=Kv(e.buildArgs)&&Object.keys(e.buildArgs).length>0?e.buildArgs:void 0,r=Array.isArray(e.buildSecrets)&&e.buildSecrets.length>0?e.buildSecrets:void 0,o={path:e.path,...t!==void 0&&{context:t},...n!==void 0&&{target:n},...i!==void 0&&{buildArgs:i},...r!==void 0&&{buildSecrets:r}},a=zt.safeParse(o);return a.success?a.data:void 0}tl(sT,"normaliseDockerBuild");function vU(e){if(e===void 0)return;let t=sT(e);return t===void 0?void 0:JSON.stringify(t)}tl(vU,"dockerBuildFingerprint");var bU=s.object({name:s.string(),clusterName:s.string().optional(),docker:zt.optional(),containerPort:s.number().optional(),secrets:s.array(s.string()).optional(),ssmSecretsPath:s.string().optional(),importedSecretNames:s.array(s.string()).optional()}).strict(),yU=s.object({type:s.enum(Mt),name:s.string(),source:s.string()}).strict(),SU=s.object({repositoryName:s.string()}).strict(),_U=["x86_64","arm64"],EU=s.object({name:s.string(),secrets:s.array(s.string()).optional(),ssmSecretsPath:s.string().optional(),importedSecretNames:s.array(s.string()).optional(),docker:zt.optional(),imageKey:s.string().optional(),architecture:s.enum(_U).optional()}).strict(),xU=s.object({templateHash:s.string(),synthTimestamp:s.string()}).strict(),AU=s.object({constructPath:s.string().max(512),group:s.string().max(128),resourceType:s.string().max(256)}).strict(),IU=s.object({synthesisedBy:s.string().min(1).max(128),minimumEngineVersion:s.string().min(1).max(32),maximumEngineMajor:s.number().int().min(0).optional(),minimumAwsCdkCli:s.string().min(1).max(32).optional()}).strict(),$U=s.object({appName:s.string().min(1).max(128),slot:s.string().min(1).max(64),clusterName:s.string().min(1).max(128),anchor:s.string().min(1).max(128),pinned:s.boolean(),currentServiceName:s.string().min(1).max(256),legacyKey:s.string().min(1).max(256),legacyAnchor:s.string().min(1).max(256),legacyServiceName:s.string().min(1).max(512),legacyKeyFields:s.array(s.string().max(64)).max(32)}).strict(),i7=s.object({version:s.literal(mU),generatedAt:s.string(),appName:s.string(),services:s.array(bU),lambdas:s.array(EU),pattern:yU.optional(),ecr:SU.optional(),stacks:s.record(s.string(),xU),resourceMap:s.record(s.string(),AU).optional(),engineCompat:IU.optional(),identityAliases:s.array($U).optional()}).strict();var TU=Object.defineProperty,CU=(e,t)=>TU(e,"name",{value:t,configurable:!0});function uT(e){return!(e.image!==void 0&&e.docker!==void 0)}CU(uT,"imageDockerMutexCheck");var lT=s.number().int(d.CAPACITY.MIN.INTEGER).min(Fv,d.GENERATOR_CAPACITY.MIN.MIN).max(Bv,d.GENERATOR_CAPACITY.MIN.MAX),dT=s.number().int(d.CAPACITY.MAX.INTEGER).min(Fv,d.GENERATOR_CAPACITY.MAX.MIN).max(Bv,d.GENERATOR_CAPACITY.MAX.MAX),ki=s.number().int(d.LAMBDA.MEMORY.INTEGER).min(I$,d.LAMBDA.MEMORY.MIN).max($$,d.LAMBDA.MEMORY.MAX).refine(e=>e===128||e%64===0,d.LAMBDA.MEMORY.MULTIPLE),mT=s.string().regex(L.LAMBDA_RUNTIME_IDENTIFIER,d.LAMBDA.RUNTIME),Xv=s.number().int(d.CPU.INTEGER).min(256,d.CPU.MIN).max(4096,d.CPU.MAX),nl=s.number().int(d.CAPACITY.DESIRED.INTEGER).min(0,d.CAPACITY.DESIRED.MIN).max(Ci,d.CAPACITY.DESIRED.MAX),Sa=s.object({connectToDatabase:s.array(s.string()).optional()}).strict(),RU=s.object({minSize:s.number().int(d.CAPACITY.WARM_POOL.MIN_SIZE.INTEGER).min(0,d.CAPACITY.WARM_POOL.MIN_SIZE.MIN).max(T$,d.CAPACITY.WARM_POOL.MIN_SIZE.MAX).optional(),reuseOnScaleIn:s.boolean().optional()}).strict(),Jv=s.object({instanceType:s.string().optional(),amiHardwareType:s.enum(Lu).optional(),minCapacity:s.number().int(d.CAPACITY.MIN.INTEGER).min(0,d.CAPACITY.MIN.MIN_0).max(Ci,d.CAPACITY.MIN.MAX).optional(),maxCapacity:s.number().int(d.CAPACITY.MAX.INTEGER).min(1,d.CAPACITY.MAX.MIN_1).max(Ci,d.CAPACITY.MAX.MAX).optional(),memoryLimitMiB:ga(128).optional(),warmPool:RU.optional(),extraProperties:s.array(Re).optional()}).strict().superRefine((e,t)=>{if(!e.instanceType||!e.amiHardwareType)return;let n=el(e.instanceType,e.amiHardwareType);n.valid||t.addIssue({code:"custom",message:n.message??d.ARCHITECTURE_MISMATCH,path:["instanceType"]})}).superRefine((e,t)=>{e.minCapacity===0&&!e.warmPool&&t.addIssue({code:"custom",message:d.CAPACITY.WARM_POOL_REQUIRED,path:["minCapacity"]}),e.warmPool?.minSize!==void 0&&e.maxCapacity!==void 0&&e.warmPool.minSize>e.maxCapacity&&t.addIssue({code:"custom",message:d.CAPACITY.WARM_POOL.MIN_SIZE_EXCEEDS_MAX_CAPACITY,path:["warmPool","minSize"]})}),NU=s.enum(da).describe(`Compute type must be one of: ${da.join(", ")}`),Qv=s.enum(Ii).describe(`ECS capacity provider must be one of: ${Ii.join(", ")}`),eb=s.string().refine(e=>dt(Uu,e),{message:d.INSTANCE_TYPE}),pT=s.object({sourceType:s.enum(["sqs","dynamodb","eventbridge"]),sourceRef:s.string().describe("Name of the source resource"),batchSize:s.number().int(d.BATCH_SIZE.INTEGER).min(1,d.BATCH_SIZE.MIN).max(1e4,d.BATCH_SIZE.MAX).optional(),startingPosition:s.enum(["TRIM_HORIZON","LATEST"]).optional(),maxBatchingWindow:s.number().int(d.BATCHING_WINDOW.INTEGER).min(0,d.BATCHING_WINDOW.MIN).max(300,d.BATCHING_WINDOW.MAX).optional(),reportBatchItemFailures:s.boolean().optional()}).strict(),PU=s.object({name:s.string().min(1,d.REQUIRED.CONTAINER_NAME).optional(),image:s.string().optional(),port:pn.optional(),environment:Ni.optional(),secretsImport:O$.optional(),command:s.array(s.string()).optional(),entryPoint:s.array(s.string()).optional(),essential:s.boolean().optional(),healthCheck:s.object({command:s.array(s.string()),interval:s.number().int(d.HEALTH_CHECK.INTERVAL.INTEGER).min(5,d.HEALTH_CHECK.INTERVAL.MIN).max(300,d.HEALTH_CHECK.INTERVAL.MAX).optional(),timeout:s.number().int(d.HEALTH_CHECK.TIMEOUT.INTEGER).min(2,d.HEALTH_CHECK.TIMEOUT.MIN).max(60,d.HEALTH_CHECK.TIMEOUT.MAX).optional(),retries:s.number().int(d.HEALTH_CHECK.RETRIES.INTEGER).min(1,d.HEALTH_CHECK.RETRIES.MIN).max(10,d.HEALTH_CHECK.RETRIES.MAX).optional(),startPeriod:s.number().int(d.HEALTH_CHECK.START_PERIOD.INTEGER).min(0,d.HEALTH_CHECK.START_PERIOD.MIN).max(300,d.HEALTH_CHECK.START_PERIOD.MAX).optional()}).strict().optional(),ssmSecrets:s.array(s.string().regex(L.SECRET_NAME,d.SECRET_NAME)).optional(),extraProperties:s.array(Re).optional()}).strict(),fT=s.string().min(1,d.REQUIRED.SERVICE_NAME).max(255,d.MAX_LENGTH.SERVICE_NAME).regex(L.ECS_SERVICE_NAME,d.ECS_SERVICE_NAME),gT=s.object({domain:s.string().optional(),loadBalancer:s.union([s.literal(!1),s.enum(ju)]).optional(),directAccess:s.boolean().optional(),extraProperties:s.array(Re).optional()}).strict().refine(e=>!(e.directAccess&&e.domain),{message:d.DIRECT_ACCESS.NO_DOMAIN,path:["directAccess"]}).refine(e=>!(e.directAccess&&typeof e.loadBalancer=="string"),{message:d.DIRECT_ACCESS.NO_LOAD_BALANCER}).describe("Cluster-level configuration"),rl=s.object({path:s.string().optional(),host:s.string().optional(),priority:s.number().int(d.PRIORITY.INTEGER).min(1,d.PRIORITY.MIN).max(5e4,d.PRIORITY.MAX).optional(),healthCheckPath:s.string().optional()}).strict().describe("Path/host-based routing configuration"),wU=s.object({desiredCount:nl.optional(),minCapacity:s.number().int(d.CAPACITY.MIN.INTEGER).min(0,d.CAPACITY.MIN.MIN_0).max(Ci,d.CAPACITY.MIN.MAX).optional(),maxCapacity:s.number().int(d.CAPACITY.MAX.INTEGER).min(1,d.CAPACITY.MAX.MIN_1).max(Ci,d.CAPACITY.MAX.MAX).optional(),scalingType:s.enum(zu).optional()}).strict().refine(mn.check,mn.params).describe("ECS service scaling configuration"),hT=s.object({name:fT,docker:zt.optional(),needsDatabaseConnection:s.boolean().optional(),needsStorageConnection:s.boolean().optional(),needsMessagingConnection:s.boolean().optional(),image:s.string().optional(),containers:s.array(PU).optional(),routing:s.union([rl,s.array(rl).min(1)]).optional(),cpu:Xv.optional(),memoryLimitMiB:ga(512).optional(),desiredCount:nl.optional(),scaling:Ye(wU).optional(),capacityProvider:Qv,ec2Config:Jv.optional(),ssmSecretsPath:s.string().regex(L.SSM_PATH,d.SSM_PATH).optional(),extraProperties:s.array(Re).optional(),alarms:z$.optional()}).strict().superRefine((e,t)=>{uT(e)||t.addIssue({code:"custom",path:["docker"],message:d.IMAGE_DOCKER_MUTEX})}).describe("Configuration for a service in an ECS cluster"),vT=s.object({name:V,type:NU,needsConnection:s.boolean(),connectedDatabase:s.array(s.string()).optional(),connectedStorage:s.array(s.string()).optional(),connectedMessaging:s.array(s.string()).optional(),cluster:gT.optional(),services:s.array(hT).optional(),docker:zt.partial().optional(),deployment:s.enum(Du).optional(),codePath:s.string().optional(),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(Fu,d.LAMBDA.TIMEOUT.MIN).max(Bu,d.LAMBDA.TIMEOUT.MAX).optional(),memory:ki.optional(),handler:s.string().optional(),runtime:mT.optional(),environment:Ni.optional(),secrets:Ni.optional(),eventSources:s.array(pT).optional(),functionUrl:s.object({authType:s.enum(pa)}).strict().optional(),description:s.string().optional(),scheduleExpression:s.string().optional(),architecture:s.enum(Mu).optional(),ephemeralStorageSize:s.number().int(d.EPHEMERAL_STORAGE.INTEGER).min(512,d.EPHEMERAL_STORAGE.MIN).max(10240,d.EPHEMERAL_STORAGE.MAX).optional(),functionName:s.string().optional(),ssmSecrets:s.array(s.string()).optional(),ssmSecretsPath:s.string().optional(),alarms:U$.optional(),instanceType:eb.optional(),enableSSH:s.boolean().optional(),keyName:s.string().optional(),userData:s.string().optional(),securityGroups:s.array(s.string()).optional(),variableName:s.string().optional(),extraProperties:s.array(Re).optional()}).strict().superRefine((e,t)=>{if(e.type==="ecs"&&e.services)for(let n=0;n<e.services.length;n++){let i=e.services[n];i?.ec2Config?.instanceType&&!i.ec2Config.amiHardwareType&&wi(i.ec2Config.instanceType)!=="ARM"&&t.addIssue({code:"custom",message:`Service '${i.name??n}' uses instance type '${i.ec2Config.instanceType}' (x86), which requires Docker images built for linux/amd64. The default build targets linux/arm64 (Graviton). Use a Graviton instance type (t4g, c6g, r6g, m6g, etc.) or set amiHardwareType: "STANDARD" to acknowledge x86.`,path:["services",n,"ec2Config","instanceType"]})}e.type==="lambda"&&e.deployment==="container"&&e.architecture==="X86_64"&&t.addIssue({code:"custom",message:"Lambda architecture 'X86_64' requires Docker images built for linux/amd64, but the default build targets linux/arm64. Use 'ARM_64' for Graviton Lambdas (recommended) or ensure your build pipeline targets linux/amd64.",path:["architecture"]})}),p7=s.object({appName:ye,clusterName:V,containerPort:pn,nameProvidedByFlag:s.boolean().optional(),ecrRepository:s.string().optional(),capacityProvider:Qv.optional(),useAppEcr:s.boolean().optional(),desiredCount:nl.optional(),cpu:Xv.optional(),memoryLimitMiB:ga(512).optional(),minCapacity:lT.optional(),maxCapacity:dT.optional(),ec2Config:Jv.optional(),connectionConfig:Sa.optional()}).strict().refine(mn.check,mn.params),f7=s.object({appName:ye,functionName:V,nameProvidedByFlag:s.boolean().optional(),lambdaType:s.enum(["basic","web","custom"]).optional(),ecrRepository:s.string().optional(),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(Fu,d.LAMBDA.TIMEOUT.MIN).max(Bu,d.LAMBDA.TIMEOUT.MAX).optional(),memory:ki.optional(),enableFunctionUrl:s.boolean().optional(),description:s.string().optional(),enableCors:s.boolean().optional(),corsOrigins:s.string().optional(),corsHeaders:s.string().optional(),corsMethods:s.array(s.enum(R$)).optional(),corsCredentials:s.boolean().optional(),connectionConfig:Sa.optional()}).strict(),g7=s.object({appName:ye,instanceName:V,nameProvidedByFlag:s.boolean().optional(),instanceType:eb.optional(),enableSSH:s.boolean().optional(),minCapacity:lT.optional(),maxCapacity:dT.optional(),connectionConfig:Sa.optional()}).strict().refine(mn.check,mn.params),h7=s.object({appName:ye,clusterName:V,serviceName:fT,capacityProvider:Qv,containerPort:pn.optional(),cpu:Xv.optional(),memoryLimitMiB:ga(512).optional(),desiredCount:nl.optional(),ec2Config:Jv.optional(),routing:s.union([rl,s.array(rl).min(1)]).optional(),docker:zt.partial().optional(),nameProvidedByFlag:s.boolean().optional(),connectionConfig:Sa.optional()}).strict(),tb=s.object({appName:ye,computeName:V,nameProvidedByFlag:s.boolean().optional(),connectionConfig:Sa.optional()}).strict(),kU=tb.extend({type:s.literal("ecs"),cluster:gT.optional(),services:s.array(hT).min(1,d.SERVICE.MIN_REQUIRED),docker:zt.partial().optional()}).strict().refine(e=>{let t=e.services.filter(n=>n.containers?.some(i=>i.port));return t.length>1?t.every(n=>(Array.isArray(n.routing)?n.routing:n.routing?[n.routing]:[]).some(i=>i.path||i.host)):!0},{message:d.SERVICE.ROUTING_REQUIRED}).refine(e=>{let t=e.services.map(n=>n.name);return new Set(t).size===t.length},{message:d.SERVICE.UNIQUE_WITHIN_CLUSTER}),OU=tb.extend({type:s.literal("lambda"),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(Fu,d.LAMBDA.TIMEOUT.MIN).max(Bu,d.LAMBDA.TIMEOUT.MAX).optional(),memory:ki.optional(),handler:s.string().optional(),runtime:mT.optional(),environment:Ni.optional(),secrets:Ni.optional(),description:s.string().optional(),functionUrl:s.union([s.object({authType:s.enum(pa).optional()}).strict(),s.literal(!1)]).optional(),eventSources:s.array(pT).optional()}).strict(),DU=tb.extend({type:s.literal("ec2"),instanceType:eb.optional(),enableSSH:s.boolean().optional(),keyName:s.string().optional(),userData:s.string().optional(),securityGroups:s.array(s.string()).optional()}).strict(),bT=s.discriminatedUnion("type",[kU,OU,DU]),cT=s.object({path:s.string().min(1,d.REQUIRED.ROUTING_PATH),priority:s.number().int(d.PRIORITY.INTEGER).min(1,d.PRIORITY.MIN).max(5e4,d.PRIORITY.MAX).optional()}).strict(),yT=s.object({name:s.string().min(1,d.REQUIRED.SERVICE_NAME).max(255,d.MAX_LENGTH.SERVICE_NAME).regex(L.RESOURCE_NAME,d.RESOURCE_NAME),serviceType:s.enum(["web","worker"]).optional(),docker:zt.partial().optional(),containerPort:pn.optional(),needsDatabaseConnection:s.boolean().optional(),routing:s.union([cT,s.array(cT).min(1)]).optional()}).strict().superRefine((e,t)=>{e.serviceType==="worker"&&(e.containerPort!==void 0&&t.addIssue({code:"custom",path:["containerPort"],message:"Worker services are not reachable inbound; remove containerPort."}),e.routing!==void 0&&t.addIssue({code:"custom",path:["routing"],message:"Worker services have no ALB route; remove routing."}))}),v7=s.object({appName:ye,instanceType:s.string().optional()}).strict();var rb=s.object({memorySize:ki.optional(),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(1,d.LAMBDA.TIMEOUT.MIN).max(900,d.LAMBDA.TIMEOUT.MAX).optional(),ephemeralStorageSize:s.number().int(d.EPHEMERAL_STORAGE.INTEGER).min(512,d.EPHEMERAL_STORAGE.MIN).max(10240,d.EPHEMERAL_STORAGE.MAX).optional()}).strict(),ST=s.object({type:s.enum(Uv).optional(),databaseName:s.string().optional(),databaseEngine:s.enum(Ti).optional(),deletionProtection:s.boolean().optional(),backupRetention:nr.optional(),port:Zu.optional(),publiclyAccessible:s.boolean().optional(),allowedIpCidr:s.string().optional(),instanceType:s.string().optional(),allocatedStorage:s.number().int(d.ALLOCATED_STORAGE.INTEGER).min(20,d.ALLOCATED_STORAGE.MIN).max(65536,d.ALLOCATED_STORAGE.MAX).optional(),multiAz:s.boolean().optional(),readReplica:qu.optional(),writer:ba.optional(),readers:ya.optional(),allowVpcAccess:s.boolean().optional(),monitoringInterval:va.optional(),preferredMaintenanceWindow:s.string().optional(),databaseInsights:Yu.optional(),proxy:Hu.optional(),credentials:Wu.optional(),encryption:Ku.optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()}).strict(),_T=s.object({server:rb.optional(),imageOptimisation:rb.optional(),revalidation:rb.optional()}).strict(),nb=s.object({versioned:s.boolean().optional()}).strict(),ET=s.object({assets:nb.optional(),cache:nb.optional(),media:nb.optional()}).strict(),MU=s.object({visibilityTimeout:s.number().int(d.SQS.VISIBILITY_TIMEOUT.INTEGER).min(0,d.SQS.VISIBILITY_TIMEOUT.MIN).max(43200,d.SQS.VISIBILITY_TIMEOUT.MAX).optional(),messageRetentionPeriod:s.number().int(d.SQS.RETENTION_PERIOD.INTEGER).min(60,d.SQS.RETENTION_PERIOD.MIN).max(1209600,d.SQS.RETENTION_PERIOD.MAX).optional(),maxMessageSize:s.number().int(d.MAX_MESSAGE_SIZE.INTEGER).min(1024,d.MAX_MESSAGE_SIZE.MIN).max(262144,d.MAX_MESSAGE_SIZE.MAX).optional(),deadLetterQueue:s.union([s.literal(!1),s.object({enabled:s.boolean().optional(),maxReceiveCount:s.number().int(d.DLQ.MAX_RECEIVE_COUNT.INTEGER).min(1,d.DLQ.MAX_RECEIVE_COUNT.MIN).max(1e3,d.DLQ.MAX_RECEIVE_COUNT.MAX).optional()}).strict()]).optional()}).strict(),xT=s.object({revalidationQueue:MU.optional()}).strict(),AT=s.object({domainNames:s.array(s.string()).optional(),certificateArn:s.string().optional()}).strict(),IT=s.record(s.string().regex(L.ENV_VAR_NAME,d.ENV_VAR_NAME),s.string()).optional(),jU=s.object({type:s.literal("payload"),name:s.string().min(1,d.REQUIRED.PATTERN_NAME),domain:s.string().optional(),database:ST.optional(),compute:_T.optional(),storage:ET.optional(),messaging:xT.optional(),cdn:AT.optional(),environment:IT}).strict(),zU=s.object({type:s.literal("nextjs"),name:s.string().min(1,d.REQUIRED.PATTERN_NAME),domain:s.string().optional(),database:ST.optional(),compute:_T.optional(),storage:ET.optional(),messaging:xT.optional(),cdn:AT.optional(),environment:IT}).strict(),ib=s.enum(Yo),LU=s.object({command:s.string().min(1,d.REQUIRED.BUILD_COMMAND),outputDir:s.string().min(1,d.REQUIRED.OUTPUT_DIR)}).strict(),UU=s.object({headers:s.boolean().optional(),contentSecurityPolicy:s.string().optional()}).strict(),FU=s.object({to:s.string().min(1,d.REQUIRED.FORMS_TO).regex(L.EMAIL,d.EMAIL),from:s.string().regex(L.EMAIL,d.EMAIL).optional(),corsOrigin:s.string().regex(L.HTTP_ORIGIN,"corsOrigin must be an exact origin such as https://example.com (no path, no trailing slash)").optional(),maxConcurrency:s.number().int().min(1).max(100).optional()}).strict(),BU=s.object({behaviours:s.array(s.unknown()).optional()}).strict(),ob=s.object({type:s.literal("staticsite"),name:s.string().min(1,d.REQUIRED.PATTERN_NAME),source:s.string().min(1,d.REQUIRED.SOURCE),build:LU,routing:ib.optional(),security:UU.optional(),domain:s.string().optional(),forms:FU.optional(),cdn:BU.optional()}).strict().superRefine((e,t)=>{if(e.forms===void 0)return;let n=e.domain;if(n===void 0||n===""){t.addIssue({code:"custom",path:["domain"],message:"A domain is required when forms are enabled: SES sends only from a verified identity, and the site's domain is the identity the pattern verifies"});return}let i=e.forms.from;i!==void 0&&!uu(i,n)&&t.addIssue({code:"custom",path:["forms","from"],message:`forms.from must be an address at ${n} (the verified SES identity) \u2014 for example noreply@${n}. Use forms.to for the recipient.`})}),_a=s.discriminatedUnion("type",[jU,zU,ob]),$T=s.enum(["lightweight","standard","resilient","custom"]),TT=s.object({type:s.enum(Uv),instanceType:s.string().optional(),backupRetention:nr.optional(),deletionProtection:s.boolean().optional(),encryption:s.union([s.object({useCMK:s.literal(!0)}).strict(),s.literal(!1)]).optional()}).strict(),CT=s.object({memorySize:ki.optional(),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(1,d.LAMBDA.TIMEOUT.MIN).max(900,d.LAMBDA.TIMEOUT.MAX).optional()}).strict();var RT=s.object({appName:ye,type:Vv,pattern:Gv.optional(),patternConfig:_a.optional(),owner:s.string().optional(),tags:s.record(s.string(),s.string()).optional(),vpcId:s.string().optional(),network:Ju.optional(),backup:M$.optional(),tunnel:j$.optional(),additionalNetworks:s.array(eT).optional(),database:s.array(B$),s3:s.array(rT),compute:s.array(vT),dynamodb:s.array(q$).optional(),clickhouse:s.array(Y$).optional(),sqs:s.array(nT).optional(),cdn:oT.optional(),customCodeBlocks:s.array(D$).optional(),additionalManagedImports:s.array(s.object({moduleSpecifier:s.string(),namedImports:s.array(s.string()),defaultImport:s.string().optional()}).strict()).optional()}).strict(),j7=s.object({name:ye,type:Vv,pattern:Gv.optional(),patternTier:$T.optional(),patternDomain:s.string().optional(),source:s.string().min(1,d.REQUIRED.SOURCE).optional(),buildCommand:s.string().min(1,d.REQUIRED.BUILD_COMMAND).optional(),outputDir:s.string().min(1,d.REQUIRED.OUTPUT_DIR).optional(),routing:ib.optional(),formsTo:s.string().min(1,d.REQUIRED.FORMS_TO).regex(L.EMAIL,d.EMAIL).optional(),corsOrigin:s.string().regex(L.HTTP_ORIGIN,"corsOrigin must be an exact origin such as https://example.com (no path, no trailing slash)").optional(),customDatabase:TT.optional(),customCompute:CT.optional(),region:s.string().optional(),owner:s.string().optional(),includeDatabase:s.boolean().optional(),databaseName:s.string().min(1,d.DATABASE.NAME.REQUIRED).max(63,d.DATABASE.NAME.MAX_LENGTH).optional(),vpcId:s.string().optional(),network:tT.optional(),services:s.array(yT).optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()}).strict().superRefine((e,t)=>{e.formsTo!==void 0&&(e.patternDomain!==void 0&&e.patternDomain!==""||t.addIssue({code:"custom",path:["patternDomain"],message:"A domain is required when forms are enabled: SES sends only from a verified identity, and the site's domain is the identity the pattern verifies"}))}),z7=s.object({name:V,localResource:s.string().min(1),remoteApp:s.string().min(1),remoteResource:s.string().min(1),permission:s.enum(["read","write","read-write"]),remoteArn:s.string().optional()}).strict();var VU=["fjall-managed","external","external-manual"],V7=s.enum(VU);var NT=s.object({givenName:s.string().min(1),familyName:s.string().min(1),displayName:s.string().min(1).optional(),expires:s.string().min(1).optional()}).strict(),PT=s.object({name:s.string().min(1),path:s.string().min(1).optional()}).strict(),GU=s.union([s.object({managedPolicyArn:s.string().min(1)}).strict(),s.object({customerManagedPolicy:PT}).strict()]),ZU=s.object({managedPolicies:s.array(s.string().min(1)).optional(),inlinePolicy:s.record(s.string(),s.unknown()).optional(),customerManagedPolicies:s.array(PT).optional(),permissionsBoundary:GU.optional(),sessionDuration:s.string().min(1).optional(),description:s.string().optional(),accounts:s.union([s.array(s.string().min(1)),s.literal("all")]).optional(),includeManagementAccount:s.boolean().optional(),groups:s.array(s.string().min(1)).optional()}).strict(),WU=s.object({description:s.string().optional()}).strict(),il=s.string().regex(L.EMAIL,d.EMAIL),ab={groups:s.record(s.string(),WU).optional(),permissionSets:s.record(s.string(),ZU).optional(),memberships:s.record(s.string(),s.array(il)).optional(),resolutionVersion:s.number().int().min(1).optional(),defaultPermissionSets:s.boolean().optional()},HU=s.discriminatedUnion("source",[s.object({...ab,source:s.literal("fjall-managed"),users:s.record(il,NT)}).strict(),s.object({...ab,source:s.literal("external")}).strict(),s.object({...ab,source:s.literal("external-manual"),users:s.record(il,NT).optional()}).strict()]),G7=s.object({name:V,type:s.literal("organisation").optional(),organisationName:s.string().min(1).optional(),orgEmail:il.optional(),accounts:s.unknown().optional(),accountIds:s.record(s.string(),s.string()).optional(),identityCentre:s.union([HU,s.literal(!1)]).optional(),allowedRegions:s.array(s.string().min(1)).optional()}).strict();var qU=Object.defineProperty,YU=(e,t)=>qU(e,"name",{value:t,configurable:!0}),KU=[1,3,5,7,14,30,60,90,120,150,180,365,400,545,731,1827,3653],XU=s.object({buildkiteQueue:s.string().min(1,"buildkiteQueue cannot be empty").max(100).regex(/^[a-zA-Z0-9-_]+$/,"buildkiteQueue must be alphanumeric with hyphens/underscores"),buildkiteOrgSlug:s.string().min(1,"buildkiteOrgSlug cannot be empty").max(100).regex(/^[a-z0-9-]+$/,"buildkiteOrgSlug must be a lowercase Buildkite organisation slug"),agentTokenSsmParameterName:s.string().min(2).regex(/^\//,"agentTokenSsmParameterName must be a full path (leading /)").optional(),agentTokenKmsKeyArn:s.string().min(1).optional(),fjallApiKeySsmParameterName:s.string().min(2).regex(/^\//,"fjallApiKeySsmParameterName must be a full path (leading /)").optional(),instanceType:s.string().min(1).default("c8g.xlarge"),agentVolumeSizeGib:s.number().int().min(20).max(1e3).default(250),agentMinInstances:s.number().int().min(0).default(0),agentMaxInstances:s.number().int().min(1).default(2),agentsPerInstance:s.number().int().min(1).default(1),spotCapacityPercentage:s.number().int().min(0).max(100).default(0),scaleInIdlePeriodSeconds:s.number().int().min(60).default(600),disconnectAfterUptimeSeconds:s.number().int().min(3600).default(86400),maxInstanceLifetimeDays:s.number().int().min(1).max(365).default(7),terminateInstanceAfterJob:s.boolean().default(!1),purgeBuildsOnDiskFull:s.boolean().default(!0),terminateInstanceOnDiskFull:s.boolean().default(!1),logRetentionDays:s.number().int().min(1).default(30),agentLogRetentionDays:s.literal(KU).default(7),buildkiteAgentRelease:s.enum(["stable","beta","edge"]).default("stable"),buildkiteAgentTags:s.string().default(""),buildkiteAgentTimestampLines:s.boolean().default(!1),buildkiteAgentExperiments:s.string().default(""),buildkiteAgentTracingBackend:s.enum(["","datadog","opentelemetry"]).default(""),buildkiteAgentCancelGracePeriodSeconds:s.number().int().min(10).default(60),enableSecretsPlugin:s.boolean().default(!0),enableEcrPlugin:s.boolean().default(!1),enableDockerLoginPlugin:s.boolean().default(!1),enableDockerUserNamespaceRemap:s.boolean().default(!0),enableDockerExperimental:s.boolean().default(!1),dockerNetworkingProtocol:s.enum(["ipv4","dualstack"]).default("ipv4"),enableInstanceStorage:s.boolean().default(!1),mountTmpfsAtTmp:s.boolean().default(!0),buildkiteAgentEnableGitMirrors:s.boolean().default(!1),bootstrapScriptUrl:s.string().default(""),agentEnvFileUrl:s.string().default(""),scalerEventSchedulePeriod:s.string().min(1).default("1 minute"),scalerMinPollInterval:s.string().min(1).default("10s"),scaleOutFactor:s.string().min(1).default("1.0"),scaleOutWaitingForJobs:s.boolean().default(!1),rolePermissionsBoundaryArn:s.string().min(1).optional(),alarmSnsTopicArn:s.string().min(1).optional(),applicationId:s.string().min(1).optional(),costAllocationEnvironment:s.string().min(1).optional(),costAllocationOwner:s.string().min(1).optional()}).strict(),JU=XU.refine(e=>e.agentMinInstances<=e.agentMaxInstances,{message:"agentMinInstances must be <= agentMaxInstances"});function QU(e){let t=JU.safeParse(e);if(!t.success){let n=t.error.issues.map(i=>`  - ${i.path.join(".")||"(root)"}: ${i.message}`).join(`
 `);throw new Error(`Buildkite: invalid props:
 ${n}`)}return t.data}YU(QU,"validateBuildkiteProps");var e4=Object.defineProperty,t4=(e,t)=>e4(e,"name",{value:t,configurable:!0});function r4(e){return`FjallDeployBoundary${e}`}t4(r4,"deployBoundaryName");var sb={Sid:"FjallInheritAdministratorAccess",Effect:"Allow",Action:"*",Resource:"*"},wT=[{Sid:"FjallDenyOrgAndAccountEscape",Effect:"Deny",Action:["organizations:LeaveOrganization","account:CloseAccount"],Resource:"*"},{Sid:"FjallDenyDisableAuditLogging",Effect:"Deny",Action:["cloudtrail:StopLogging"],Resource:"*"},{Sid:"FjallDenyBoundarySelfEscape",Effect:"Deny",Action:["iam:DeleteRolePermissionsBoundary"],Resource:"*"},{Sid:"FjallDenyDisableKmsKey",Effect:"Deny",Action:["kms:DisableKey"],Resource:"*"}],kT=[...wT,{Sid:"FjallDenyStandingHumanCredentials",Effect:"Deny",Action:["iam:CreateUser","iam:CreateLoginProfile","iam:CreateAccessKey","iam:CreateAccountAlias"],Resource:"*"},{Sid:"FjallDenyDisableConfigRecorder",Effect:"Deny",Action:["config:StopConfigurationRecorder"],Resource:"*"}],n4=[...kT,{Sid:"FjallDenyAccountPasswordPolicyTamper",Effect:"Deny",Action:["iam:UpdateAccountPasswordPolicy","iam:DeleteAccountPasswordPolicy"],Resource:"*"},{Sid:"FjallDenyDisableDefaultEbsEncryption",Effect:"Deny",Action:["ec2:DisableEbsEncryptionByDefault"],Resource:"*"}],aY={foundation:[sb,...wT],compliance:[sb,...kT],hardened:[sb,...n4]};var i4=Object.defineProperty,Se=(e,t)=>i4(e,"name",{value:t,configurable:!0});var lb="sts.amazonaws.com";function o4(e){return`FjallDevDeploy${e}`}Se(o4,"devDeployRoleName");function a4(e){return`FjallDevProvisioner${e}`}Se(a4,"devProvisionerRoleName");function s4(e){return`FjallDevSyncWriter${e}`}Se(s4,"devSyncWriterRoleName");var c4="FjallDevBoundary";function OT(e){return`arn:aws:iam::${e}:policy/${c4}`}Se(OT,"devBoundaryPolicyArn");function DT(e){return`org:${e}:dev-provisioner`}Se(DT,"devProvisionerSubject");function MT(e){return`org:${e}:dev-sync`}Se(MT,"devSyncSubject");function cb(e,t){return`org:${e}:acct:${t}`}Se(cb,"deployAccountSubject");function ub(e){return`org:${e}:*`}Se(ub,"genericMachineSubject");var u4=["discovery","connection","org-setup","dev-substrate-setup"];function jT(e,t){return`org:${e}:${t}`}Se(jT,"serviceSubject");function l4(e){let{fjallOrgId:t,providerArn:n,issuerDomain:i,accountTier:r,accountId:o}=e,a=e.machineTrustMode??"expanded",c={[`${i}:aud`]:lb},u;if(a==="account-scoped"){if(r===void 0||!iu(r)||o===void 0)throw new Error(`machineTrustMode "account-scoped" requires a governance accountTier and an accountId (got tier: ${String(r)}, accountId ${o===void 0?"absent":"present"}) \u2014 refusing to fall back to the generic machine subject: a silent fallback would re-widen the trust the \xA74.4a Step-3 contract removes`);u=[cb(t,o)]}else o!==void 0?u=[ub(t),cb(t,o)]:u=ub(t);return[{Sid:"FjallMachineSubject",Effect:"Allow",Principal:{Federated:n},Action:"sts:AssumeRoleWithWebIdentity",Condition:{StringEquals:{...c,[`${i}:sub`]:u}}},{Sid:"FjallUserSubjects",Effect:"Allow",Principal:{Federated:n},Action:"sts:AssumeRoleWithWebIdentity",Condition:{StringEquals:c,StringLike:{[`${i}:sub`]:`org:${t}:user:*`}}},{Sid:"FjallServiceSubjects",Effect:"Allow",Principal:{Federated:n},Action:"sts:AssumeRoleWithWebIdentity",Condition:{StringEquals:{...c,[`${i}:sub`]:u4.map(l=>jT(t,l))}}}]}Se(l4,"buildNarrowedDeployTrustStatements");function d4(e){let{fjallOrgId:t,providerArn:n,issuerDomain:i,accountId:r}=e;return[{Sid:"FjallDevSubjectsThisAccount",Effect:"Allow",Principal:{Federated:n},Action:"sts:AssumeRoleWithWebIdentity",Condition:{StringEquals:{[`${i}:aud`]:lb},StringLike:{[`${i}:sub`]:`org:${t}:dev:${r}:*`}}}]}Se(d4,"buildDevDeployTrustStatements");function db(e){let{providerArn:t,issuerDomain:n,sid:i,subject:r}=e;return[{Sid:i,Effect:"Allow",Principal:{Federated:t},Action:"sts:AssumeRoleWithWebIdentity",Condition:{StringEquals:{[`${n}:aud`]:lb,[`${n}:sub`]:r}}}]}Se(db,"buildServiceSubjectTrustStatements");function m4(e){return db({...e,sid:"FjallDevProvisionerSubject",subject:DT(e.fjallOrgId)})}Se(m4,"buildDevProvisionerTrustStatements");function p4(e){return db({...e,sid:"FjallDevSyncSubject",subject:MT(e.fjallOrgId)})}Se(p4,"buildDevSyncWriterTrustStatements");function f4({accountId:e}){return[{Sid:"FjallDevEcsTaggedMutations",Effect:"Allow",Action:["ecs:UpdateService","ecs:DeleteService","ecs:RunTask","ecs:StopTask"],Resource:`arn:aws:ecs:*:${e}:*`,Condition:{StringEquals:{"aws:ResourceTag/fjall:dev":"true"}}},{Sid:"FjallDevEcsTaggedCreates",Effect:"Allow",Action:["ecs:RegisterTaskDefinition","ecs:CreateService"],Resource:"*",Condition:{StringEquals:{"aws:RequestTag/fjall:dev":"true"}}},{Sid:"FjallDevEcsTagOnCreate",Effect:"Allow",Action:["ecs:TagResource"],Resource:`arn:aws:ecs:*:${e}:*`,Condition:{StringEquals:{"ecs:CreateAction":["RegisterTaskDefinition","CreateService","RunTask"]}}},{Sid:"FjallDevEcsReads",Effect:"Allow",Action:["ecs:Describe*","ecs:List*"],Resource:"*"},{Sid:"FjallDevEcsDeregisterTaskDefinition",Effect:"Allow",Action:["ecs:DeregisterTaskDefinition"],Resource:`arn:aws:ecs:*:${e}:task-definition/fjall-dev-*`},{Sid:"FjallDevElbTaggedMutations",Effect:"Allow",Action:["elasticloadbalancing:ModifyRule","elasticloadbalancing:DeleteRule","elasticloadbalancing:ModifyTargetGroup","elasticloadbalancing:ModifyTargetGroupAttributes","elasticloadbalancing:DeleteTargetGroup","elasticloadbalancing:RegisterTargets","elasticloadbalancing:DeregisterTargets"],Resource:`arn:aws:elasticloadbalancing:*:${e}:*`,Condition:{StringEquals:{"aws:ResourceTag/fjall:dev":"true"}}},{Sid:"FjallDevElbTaggedCreates",Effect:"Allow",Action:["elasticloadbalancing:CreateTargetGroup","elasticloadbalancing:CreateRule"],Resource:`arn:aws:elasticloadbalancing:*:${e}:*`,Condition:{StringEquals:{"aws:RequestTag/fjall:dev":"true"}}},{Sid:"FjallDevElbTagOnCreate",Effect:"Allow",Action:["elasticloadbalancing:AddTags"],Resource:`arn:aws:elasticloadbalancing:*:${e}:*`,Condition:{StringEquals:{"elasticloadbalancing:CreateAction":["CreateTargetGroup","CreateRule"]}}},{Sid:"FjallDevElbReads",Effect:"Allow",Action:["elasticloadbalancing:Describe*"],Resource:"*"},{Sid:"FjallDevSsmDevTree",Effect:"Allow",Action:["ssm:GetParameter*","ssm:PutParameter","ssm:AddTagsToResource"],Resource:`arn:aws:ssm:*:${e}:parameter/fjall/dev/*`},{Sid:"FjallDevLogsMutations",Effect:"Allow",Action:["logs:PutRetentionPolicy","logs:DeleteLogGroup"],Resource:`arn:aws:logs:*:${e}:log-group:/fjall/dev/*`},{Sid:"FjallDevLogsTaggedCreate",Effect:"Allow",Action:["logs:CreateLogGroup","logs:TagResource"],Resource:`arn:aws:logs:*:${e}:log-group:/fjall/dev/*`,Condition:{StringEquals:{"aws:RequestTag/fjall:dev":"true"}}},{Sid:"FjallDevLogsRead",Effect:"Allow",Action:["logs:GetLogEvents","logs:DescribeLogStreams","logs:FilterLogEvents"],Resource:`arn:aws:logs:*:${e}:log-group:/fjall/dev/*`},{Sid:"FjallDevLogsDescribeGroups",Effect:"Allow",Action:["logs:DescribeLogGroups"],Resource:"*"},{Sid:"FjallDevKmsViaDevAlias",Effect:"Allow",Action:["kms:Encrypt","kms:Decrypt","kms:GenerateDataKey"],Resource:`arn:aws:kms:*:${e}:key/*`,Condition:{"ForAnyValue:StringLike":{"kms:ResourceAliases":"alias/fjall-dev-*"}}},{Sid:"FjallDevKmsSsmSecureString",Effect:"Allow",Action:["kms:Encrypt","kms:Decrypt","kms:GenerateDataKey"],Resource:`arn:aws:kms:*:${e}:key/*`,Condition:{StringLike:{"kms:ViaService":"ssm.*.amazonaws.com"}}},{Sid:"FjallDevEcrAuthToken",Effect:"Allow",Action:["ecr:GetAuthorizationToken"],Resource:"*"},{Sid:"FjallDevEcrPushPull",Effect:"Allow",Action:["ecr:PutImage","ecr:InitiateLayerUpload","ecr:UploadLayerPart","ecr:CompleteLayerUpload","ecr:BatchCheckLayerAvailability","ecr:BatchGetImage","ecr:GetDownloadUrlForLayer","ecr:DescribeImages"],Resource:`arn:aws:ecr:*:${e}:repository/*`},{Sid:"FjallDevPassDevPathRoles",Effect:"Allow",Action:["iam:PassRole"],Resource:`arn:aws:iam::${e}:role/fjall/dev/*`}]}Se(f4,"buildDevDeployPolicyStatements");function g4({accountId:e}){return[{Sid:"FjallDevProvisionerBoundedRoleWrites",Effect:"Allow",Action:["iam:CreateRole","iam:PutRolePolicy","iam:AttachRolePolicy"],Resource:`arn:aws:iam::${e}:role/fjall/dev/*`,Condition:{StringEquals:{"iam:PermissionsBoundary":OT(e)}}},{Sid:"FjallDevProvisionerPathRoleOps",Effect:"Allow",Action:["iam:DeleteRole","iam:DeleteRolePolicy","iam:DetachRolePolicy","iam:ListRolePolicies","iam:TagRole"],Resource:`arn:aws:iam::${e}:role/fjall/dev/*`},{Sid:"FjallDevProvisionerListRoles",Effect:"Allow",Action:["iam:ListRoles"],Resource:"*"},{Sid:"FjallDevProvisionerDevMasterSecrets",Effect:"Allow",Action:["secretsmanager:GetSecretValue"],Resource:`arn:aws:secretsmanager:*:${e}:secret:fjall-dev-*`},{Sid:"FjallDevProvisionerKmsDecryptViaSecretsManager",Effect:"Allow",Action:["kms:Decrypt"],Resource:`arn:aws:kms:*:${e}:key/*`,Condition:{StringLike:{"kms:ViaService":"secretsmanager.*.amazonaws.com"}}},{Sid:"FjallDevProvisionerDataApi",Effect:"Allow",Action:["rds-data:ExecuteStatement","rds-data:BatchExecuteStatement","rds-data:BeginTransaction","rds-data:CommitTransaction","rds-data:RollbackTransaction"],Resource:`arn:aws:rds:*:${e}:cluster:fjall-dev-*`},{Sid:"FjallDevProvisionerMetrics",Effect:"Allow",Action:["cloudwatch:GetMetricData"],Resource:"*"},{Sid:"FjallDevProvisionerOrphanDiscovery",Effect:"Allow",Action:["tag:GetResources"],Resource:"*"},{Sid:"FjallDevProvisionerSsmTeardown",Effect:"Allow",Action:["ssm:DeleteParameter*"],Resource:`arn:aws:ssm:*:${e}:parameter/fjall/dev/*`},{Sid:"FjallDevProvisionerLogsTeardown",Effect:"Allow",Action:["logs:DeleteLogGroup"],Resource:`arn:aws:logs:*:${e}:log-group:/fjall/dev/*`},{Sid:"FjallDevProvisionerTaggedTeardown",Effect:"Allow",Action:["ecs:UpdateService","ecs:StopTask","ecs:DeleteService","elasticloadbalancing:DeleteRule","elasticloadbalancing:DeleteTargetGroup","elasticloadbalancing:DeregisterTargets"],Resource:[`arn:aws:ecs:*:${e}:*`,`arn:aws:elasticloadbalancing:*:${e}:*`],Condition:{StringEquals:{"aws:ResourceTag/fjall:dev":"true"}}},{Sid:"FjallDevProvisionerTeardownReads",Effect:"Allow",Action:["ecs:Describe*","elasticloadbalancing:Describe*"],Resource:"*"},{Sid:"FjallDevProvisionerImageJanitor",Effect:"Allow",Action:["ecr:ListImages","ecr:DescribeImages","ecr:BatchDeleteImage"],Resource:`arn:aws:ecr:*:${e}:repository/*`},{Sid:"FjallDevProvisionerSsmReadAll",Effect:"Allow",Action:["ssm:GetParameter*"],Resource:`arn:aws:ssm:*:${e}:parameter/*`},{Sid:"FjallDevProvisionerKmsDecryptViaSsm",Effect:"Allow",Action:["kms:Decrypt"],Resource:`arn:aws:kms:*:${e}:key/*`,Condition:{StringLike:{"kms:ViaService":"ssm.*.amazonaws.com"}}}]}Se(g4,"buildDevProvisionerPolicyStatements");function h4({accountId:e}){return[{Sid:"FjallDevSyncPrefixReadWrite",Effect:"Allow",Action:["s3:GetObject","s3:PutObject"],Resource:`arn:aws:s3:::fjall-dev-sync-${e}-*/*`,Condition:{StringEquals:{"aws:ResourceAccount":e}}}]}Se(h4,"buildDevSyncWriterPolicyStatements");function v4({accountId:e}){return[{Sid:"FjallDevBoundarySsmDevRead",Effect:"Allow",Action:["ssm:GetParameter*"],Resource:`arn:aws:ssm:*:${e}:parameter/fjall/dev/*`},{Sid:"FjallDevBoundaryKmsDecryptDevAlias",Effect:"Allow",Action:["kms:Decrypt"],Resource:`arn:aws:kms:*:${e}:key/*`,Condition:{"ForAnyValue:StringLike":{"kms:ResourceAliases":"alias/fjall-dev-*"}}},{Sid:"FjallDevBoundarySyncPrefixReadWrite",Effect:"Allow",Action:["s3:GetObject","s3:PutObject"],Resource:`arn:aws:s3:::fjall-dev-sync-${e}-*/*`,Condition:{StringEquals:{"aws:ResourceAccount":e}}},{Sid:"FjallDevBoundarySlotLogs",Effect:"Allow",Action:["logs:CreateLogStream","logs:PutLogEvents"],Resource:`arn:aws:logs:*:${e}:log-group:/fjall/dev/*`},{Sid:"FjallDevBoundarySyncQueue",Effect:"Allow",Action:["sqs:ReceiveMessage","sqs:DeleteMessage","sqs:GetQueueUrl"],Resource:`arn:aws:sqs:*:${e}:fjall-dev-sync-${e}-*`}]}Se(v4,"buildDevBoundaryStatements");var b4=Object.defineProperty,It=(e,t)=>b4(e,"name",{value:t,configurable:!0});function C(e){return JSON.stringify(e)}It(C,"escapeStringLiteral");function fn(e){return e.map(C).join(", ")}It(fn,"formatStringArray");var y4="import:SharedAlarmTopicArn";function gn(e="    "){return`
@@ -429,7 +429,7 @@ app.addCdn(
     accessGate: ${W(e.cdn.accessGate,"    ")}`),n+=he(e.cdn.extraProperties),n+=`
   })
 );
-`,n}or(yl,"generateCDNCode");function Sl(e){let t=new Set;if(e.cdn&&(e.cdn.defaultOriginRef&&t.add(e.cdn.defaultOriginRef),e.cdn.behaviours))for(let n of e.cdn.behaviours)t.add(n.originRef);return t}or(Sl,"collectCdnReferencedResources");function _l(e){return e.patternConfig!==void 0}or(_l,"usesPatternApproach");var O4=Object.defineProperty,xn=(e,t)=>O4(e,"name",{value:t,configurable:!0}),La="service",yb="0 4 * * ? *",Sb="0 5 * * ? *",ar=Object.freeze({tinkerer:{displayName:"Tinkerer",description:"Free tier eligible, minimal cost for experimentation",database:{Instance:{instanceType:"t4g.micro",multiAz:!1,proxy:!1,readReplica:!1,publiclyAccessible:!0},Aurora:null,GlobalAurora:null,ClickHouse:null},compute:{ecs:{services:[{name:La,capacityProvider:"EC2",desiredCount:1,minCapacity:1,maxCapacity:1,ec2Config:{instanceType:"t4g.micro",amiHardwareType:"ARM",minCapacity:1,maxCapacity:1,memoryLimitMiB:400}}],cluster:{directAccess:!0}},lambda:{timeout:30,memory:128}},network:{maxAzs:2,natGateways:!1,flowLogs:!1},backup:!1},lightweight:{displayName:"Lightweight",description:"Streamlined single-AZ deployment for cost efficiency",database:{Instance:{instanceType:"t4g.small",multiAz:!1},Aurora:{readers:!1},GlobalAurora:null,ClickHouse:null},compute:{ecs:{services:[{name:La,capacityProvider:"FARGATE_SPOT",cpu:256,memoryLimitMiB:512,desiredCount:1,minCapacity:1,maxCapacity:3}]},lambda:{timeout:30,memory:256}},network:{maxAzs:2,natGateways:{count:1},flowLogs:!1},backup:!1},standard:{displayName:"Standard",description:"Production-ready with sensible defaults",database:{Instance:{instanceType:"t4g.large"},Aurora:{readers:{count:1}},GlobalAurora:{readers:{count:1}},ClickHouse:{instanceType:"t4g.medium",coldTier:{mode:"s3"},optimiseSchedule:yb,backupSchedule:Sb,backupRetentionDays:14}},compute:{ecs:{services:[{name:La,capacityProvider:"FARGATE",cpu:512,memoryLimitMiB:1024,desiredCount:2,minCapacity:2,maxCapacity:5}]},lambda:{timeout:60,memory:256}},network:{maxAzs:3,natGateways:{count:1},flowLogs:{},vpcEndpoints:{interface:{ecr:!0}}},backup:!1},resilient:{displayName:"Resilient",description:"High availability with enhanced monitoring and scaling",database:{Instance:{instanceType:"r7g.large",encryption:{storageKey:{useCMK:!0}},databaseInsights:{mode:"advanced",encryptionKey:{useCMK:!0}},proxy:{requireTLS:!0}},Aurora:{readers:{count:2},encryption:{storageKey:{useCMK:!0}},databaseInsights:{mode:"advanced",encryptionKey:{useCMK:!0}},proxy:{requireTLS:!0},backupRetention:30},GlobalAurora:{readers:{count:2},encryption:{storageKey:{useCMK:!0}},databaseInsights:{mode:"advanced",encryptionKey:{useCMK:!0}},proxy:{requireTLS:!0},backupRetention:30,enableGlobalWriteForwarding:!0},ClickHouse:{instanceType:"m6g.large",coldTier:{mode:"s3"},optimiseSchedule:yb,backupSchedule:Sb,backupRetentionDays:14}},compute:{ecs:{services:[{name:La,capacityProvider:"FARGATE",cpu:1024,memoryLimitMiB:2048,desiredCount:4,minCapacity:4,maxCapacity:20}]},lambda:{timeout:120,memory:512}},network:{maxAzs:3,natGateways:{count:3},flowLogs:{retentionDays:90},vpcEndpoints:{interface:{ecr:!0,secretsManager:!0}}},backup:{tier:"resilient"}},enterprise:{displayName:"Enterprise",description:"Maximum capability with all features enabled",database:{Instance:{instanceType:"r7g.xlarge",encryption:{storageKey:{useCMK:!0}},databaseInsights:{mode:"advanced",encryptionKey:{useCMK:!0}},proxy:{requireTLS:!0},readReplica:{}},Aurora:{readers:{count:2},encryption:{storageKey:{useCMK:!0}},databaseInsights:{mode:"advanced",encryptionKey:{useCMK:!0}},proxy:{requireTLS:!0},backupRetention:35},GlobalAurora:{readers:{count:2},encryption:{storageKey:{useCMK:!0}},databaseInsights:{mode:"advanced",encryptionKey:{useCMK:!0}},proxy:{requireTLS:!0},backupRetention:35,enableGlobalWriteForwarding:!0},ClickHouse:{instanceType:"m6g.xlarge",coldTier:{mode:"s3"},optimiseSchedule:yb,backupSchedule:Sb,backupRetentionDays:30}},compute:{ecs:{services:[{name:La,capacityProvider:"FARGATE",cpu:2048,memoryLimitMiB:4096,desiredCount:6,minCapacity:6,maxCapacity:100}]},lambda:{timeout:300,memory:1024}},network:{maxAzs:3,natGateways:{count:3},flowLogs:{destination:"s3",retentionDays:365},vpcEndpoints:{interface:{ecr:!0,secretsManager:!0,kms:!0,cloudwatchLogs:!0}}},backup:{tier:"enterprise"}}});function D4(e,t){return ar[e].database[t]}xn(D4,"getDatabasePreset");function M4(e){return ar[e].compute.ecs}xn(M4,"getEcsPreset");function _b(e){return ar[e].network}xn(_b,"getNetworkPreset");function c0(e){return Ou.filter(t=>ar[t].database[e]!==null)}xn(c0,"getAvailableTiersForDatabase");function j4(e){return c0(e).map(t=>({label:ar[t].displayName,value:t,description:ar[t].description}))}xn(j4,"getTierOptionsForDatabase");function Eb(e){switch(e){case"tinkerer":case"lightweight":case"standard":return"Instance";case"resilient":case"enterprise":return"Aurora"}}xn(Eb,"getDefaultDatabaseTypeForTier");function xb(e,t){let n=ar[e].compute.ecs,i=n.services[0],r=!n.cluster?.directAccess&&n.cluster?.loadBalancer!==!1,o=t.filter(c=>c.serviceType!=="worker").length,a=t.findIndex(c=>c.serviceType!=="worker");return t.map((c,u)=>{let l=u===a,m=c.serviceType==="worker",p;return r&&!m&&(c.routing?p=c.routing:o>1&&(p={path:l?"/*":`/${c.name.toLowerCase()}/*`,...l?{}:{priority:100+u}})),{name:c.name,capacityProvider:i.capacityProvider,ec2Config:i.ec2Config,cpu:i.cpu,memoryLimitMiB:i.memoryLimitMiB,desiredCount:i.desiredCount,minCapacity:i.minCapacity,maxCapacity:i.maxCapacity,routing:p}})}xn(xb,"applyTierDefaultsToServices");var z4=Object.defineProperty,Ab=(e,t)=>z4(e,"name",{value:t,configurable:!0}),Ua=["lightweight","standard","resilient"],L4=[...Ua,"custom"],wr=Object.freeze({lightweight:{displayName:"Lightweight",description:"Cost-effective \xB7 Instance DB, minimal Lambda",database:{type:"Instance",instanceType:"t4g.small",backupRetention:7,deletionProtection:!1},compute:{memorySize:512,timeout:30},network:{maxAzs:2,natGateways:{count:1},flowLogs:!1},backup:!1},standard:{displayName:"Standard",description:"Production-ready \xB7 Instance DB, balanced Lambda",database:{type:"Instance",instanceType:"t4g.large",backupRetention:14,deletionProtection:!0},compute:{memorySize:1536,timeout:60},network:{maxAzs:3,natGateways:{count:1},flowLogs:{}},backup:{tier:"standard"}},resilient:{displayName:"Resilient",description:"High-availability \xB7 Aurora V2, KMS encryption",database:{type:"Aurora",backupRetention:30,deletionProtection:!0,encryption:{useCMK:!0}},compute:{memorySize:2048,timeout:120},network:{maxAzs:3,natGateways:{count:3},flowLogs:{retentionDays:90}},backup:{tier:"resilient"}}});function El(e){return wr[e]}Ab(El,"getPatternTierPreset");function u0(){return[{label:wr.standard.displayName,value:"standard",description:wr.standard.description},{label:wr.lightweight.displayName,value:"lightweight",description:wr.lightweight.description},{label:wr.resilient.displayName,value:"resilient",description:wr.resilient.description},{label:"Custom",value:"custom",description:"Full control \xB7 Configure everything"}]}Ab(u0,"getPatternTierOptions");var U4=new Set(Ua);function xl(e){return U4.has(e)}Ab(xl,"isPatternTierName");var F4=Object.defineProperty,l0=(e,t)=>F4(e,"name",{value:t,configurable:!0}),d0=Object.freeze({standard:{},assets:{versioned:!0,deployment:{source:"./assets"}},upload:{versioned:!0,cors:[{allowedOrigins:["*"],allowedMethods:["GET","PUT","POST"]}]},website:{publicReadAccess:!0,websiteHosting:{indexDocument:"index.html",errorDocument:"error.html"}}});function m0(e){return{...d0[e]}}l0(m0,"getStoragePreset");function p0(){return[{label:"Standard",value:"standard"},{label:"Assets",value:"assets"},{label:"Upload",value:"upload"},{label:"Website Hosting",value:"website"}]}l0(p0,"getStoragePresetOptions");import*as ve from"typescript";import*as D from"typescript";var B4=Object.defineProperty,Li=(e,t)=>B4(e,"name",{value:t,configurable:!0});function B(e){let t={};for(let n of e.properties){if(!D.isPropertyAssignment(n))continue;let i=D.isIdentifier(n.name)||D.isStringLiteral(n.name)?n.name.text:void 0;i!==void 0&&(t[i]=kr(n.initializer))}return t}Li(B,"parseObjectLiteral");function kr(e){if(D.isStringLiteral(e))return e.text;if(D.isNumericLiteral(e))return Number(e.text);if(e.kind===D.SyntaxKind.TrueKeyword)return!0;if(e.kind===D.SyntaxKind.FalseKeyword)return!1;if(D.isArrayLiteralExpression(e))return e.elements.map(t=>kr(t));if(D.isObjectLiteralExpression(e))return B(e);if(D.isIdentifier(e))return{__identifier:e.text};if(D.isPropertyAccessExpression(e))return{__expression:e.getText()};if(D.isCallExpression(e))return{__call:e.getText()};if(D.isBinaryExpression(e)&&e.operatorToken.kind===D.SyntaxKind.BarBarToken){let t=kr(e.left),n=kr(e.right);return typeof n=="string"?n:t}else if(D.isConditionalExpression(e)){let t=kr(e.whenTrue),n=kr(e.whenFalse);return typeof n=="string"||typeof n=="number"?n:t}else if(D.isTemplateExpression(e)||D.isNoSubstitutionTemplateLiteral(e))return{__expression:e.getText()};return{__unknown:e.getText()}}Li(kr,"evaluateExpression");function Fa(e,t){return rt(e,n=>{if(D.isVariableStatement(n)){for(let i of n.declarationList.declarations)if(D.isIdentifier(i.name)&&i.name.text===t&&i.initializer){if(D.isStringLiteral(i.initializer))return i.initializer.text;if(D.isObjectLiteralExpression(i.initializer)){let r=B(i.initializer);return JSON.stringify(r)}}}})}Li(Fa,"findVariableValue");function Ib(e,t){return rt(e,n=>{if(D.isVariableStatement(n)){for(let i of n.declarationList.declarations)if(D.isIdentifier(i.name)&&i.name.text===t&&i.initializer&&D.isObjectLiteralExpression(i.initializer))return B(i.initializer)}})}Li(Ib,"findObjectDeclaration");function Ba(e,t){if(!D.isIdentifier(t.expression))return;let n=Ib(e,t.expression.text),i=t.name.text;if(n&&n[i]!==void 0)return String(n[i])}Li(Ba,"evaluatePropertyAccess");function Al(e,t){let n=t.head.text;for(let i of t.templateSpans){if(D.isIdentifier(i.expression)){let r=Fa(e,i.expression.text);if(r)n+=r;else return t.getText(e).replace(/^`|`$/g,"")}else if(D.isPropertyAccessExpression(i.expression)){let r=Ba(e,i.expression);if(r)n+=r;else return t.getText(e).replace(/^`|`$/g,"")}else return t.getText(e).replace(/^`|`$/g,"");n+=i.literal.text}return n}Li(Al,"resolveTemplateLiteral");var V4=Object.defineProperty,Q=(e,t)=>V4(e,"name",{value:t,configurable:!0});function ft(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}Q(ft,"isPlainObject");function sr(e){return ft(e)&&"__identifier"in e}Q(sr,"isIdentifierRef");function Or(e){return ft(e)&&"__expression"in e}Q(Or,"isExpressionRef");function $t(e){return ft(e)&&"__call"in e}Q($t,"isCallRef");function N(e){return ft(e)&&!("__identifier"in e)&&!("__expression"in e)&&!("__call"in e)&&!("__unknown"in e)}Q(N,"isParsedObject");function b(e){return typeof e=="string"?e:void 0}Q(b,"asString");function R(e){return typeof e=="number"?e:void 0}Q(R,"asNumber");function j(e){return typeof e=="boolean"?e:void 0}Q(j,"asBoolean");function de(e){if(!Array.isArray(e))return;let t=[];for(let n of e)typeof n=="string"&&t.push(n);return t.length>0?t:void 0}Q(de,"asStringArray");function U(e,t){let n=b(e);if(n!==void 0)return dt(t,n)?n:void 0}Q(U,"asStringUnion");function Ke(e){let t={};for(let[n,i]of Object.entries(e))i!==void 0&&(t[n]=i);return t}Q(Ke,"omitUndefined");function Il(e){if(e===null)return"null";if(e===void 0)return"undefined";if(typeof e=="string")return JSON.stringify(e);if(typeof e=="number"||typeof e=="boolean")return String(e);if(Array.isArray(e))return`[${e.map(Il).join(", ")}]`;if(!ft(e))return String(e);if(sr(e))return e.__identifier;if(Or(e))return e.__expression;if($t(e))return e.__call;if("__unknown"in e&&typeof e.__unknown=="string")return e.__unknown;let t=Object.entries(e);return t.length===0?"{}":`{ ${t.map(([n,i])=>`${n}: ${Il(i)}`).join(", ")} }`}Q(Il,"parsedValueToSourceText");function le(e,t){let n=[];for(let[i,r]of Object.entries(e))t.has(i)||r===void 0||n.push({key:i,sourceText:Il(r)});return n}Q(le,"captureExtraProperties");function Dr(e,t){return ve.isPropertyAssignment(e)&&ve.isIdentifier(e.name)&&e.name.text===t}Q(Dr,"isNamedProperty");function Bt(e){return ve.isCallExpression(e)&&ve.isPropertyAccessExpression(e.expression)&&e.expression.name.text==="getApp"&&ve.isIdentifier(e.expression.expression)&&e.expression.expression.text==="App"}Q(Bt,"isAppGetAppCall");function Ie(e,t){let{expression:n}=e;return ve.isPropertyAccessExpression(n)&&n.name.text===t&&e.arguments.length>0}Q(Ie,"isFactoryMethodCall");function rt(e,t){let n,i=Q(r=>{n===void 0&&(n=t(r),n===void 0&&ve.forEachChild(r,i))},"visit");return i(e),n}Q(rt,"findFirstInAst");function Ne(e,t){let n=[],i=Q(r=>{let o=t(r);o!==null&&n.push(o),ve.forEachChild(r,i)},"visit");return i(e),n}Q(Ne,"collectFromAst");function Fe(e,t){return ve.isCallExpression(e)&&ve.isPropertyAccessExpression(e.expression)&&e.expression.name.text==="build"&&ve.isIdentifier(e.expression.expression)&&e.expression.expression.text===t}Q(Fe,"isFactoryBuildCall");function nt(e){let t=e.parent;if(ve.isVariableDeclaration(t)&&ve.isIdentifier(t.name))return t.name.text}Q(nt,"extractVariableName");var gt=Q(()=>e=>e,"typed");function Ui(e){if(e!=null){if(e===!1)return!1;if(typeof e=="object"&&!Array.isArray(e))return e}}Q(Ui,"asObjectOrFalse");function cr(e,t){return e===!1?!1:N(e)?t(e):void 0}Q(cr,"parseBooleanOrConfig");function Pe(e,t){return N(e)?t(e):void 0}Q(Pe,"parseOptionalConfig");function ht(e,t,n){let i=e[t];return N(i)?n(i):void 0}Q(ht,"extractSubConfig");import*as H from"typescript";import*as Fi from"typescript";var G4=Object.defineProperty,it=(e,t)=>G4(e,"name",{value:t,configurable:!0});function Va(e){return e!==void 0&&ft(e)}it(Va,"isEnvironmentRecord");function f0(e){if(!N(e))return;let t={};for(let[n,i]of Object.entries(e))if(N(i)){let r=b(i.id),o=b(i.name);r&&o&&(t[n]={id:r,name:o,field:b(i.field)})}return Object.keys(t).length>0?t:void 0}it(f0,"parseContainerSecretsImport");function g0(e){if(!N(e))return;let t=de(e.command);if(!(!t||t.length===0))return{command:t,interval:R(e.interval),timeout:R(e.timeout),retries:R(e.retries),startPeriod:R(e.startPeriod)}}it(g0,"parseContainerHealthCheck");function h0(e){let t=le(e,new Set(["name","image","port","environment","essential","command","entryPoint","secretsImport","secrets","healthCheck"]));return{name:b(e.name),image:b(e.image),port:R(e.port),environment:Va(e.environment)?e.environment:void 0,essential:j(e.essential),command:de(e.command),entryPoint:de(e.entryPoint),secretsImport:f0(e.secretsImport),ssmSecrets:de(e.secrets),healthCheck:g0(e.healthCheck),extraProperties:t.length>0?t:void 0}}it(h0,"parseServiceContainer");function v0(e){if(Array.isArray(e))return e.filter(N).map(t=>({path:b(t.path),host:b(t.host),priority:R(t.priority),healthCheckPath:b(t.healthCheckPath)}));if(N(e))return{path:b(e.path),host:b(e.host),priority:R(e.priority),healthCheckPath:b(e.healthCheckPath)}}it(v0,"parseServiceRouting");function b0(e){if(e===!1)return!1;if(N(e))return{minCapacity:R(e.minCapacity),maxCapacity:R(e.maxCapacity),desiredCount:R(e.desiredCount),scalingType:U(e.scalingType,zu)}}it(b0,"parseServiceScaling");var Z4=new Set(["instanceType","amiHardwareType","minCapacity","maxCapacity","memoryLimitMiB","warmPool"]);function y0(e){if(!N(e))return;let t=e.warmPool,n=N(t)?{minSize:R(t.minSize),reuseOnScaleIn:j(t.reuseOnScaleIn)}:void 0,i=le(e,Z4);return{instanceType:b(e.instanceType),amiHardwareType:U(e.amiHardwareType,Lu),minCapacity:R(e.minCapacity),maxCapacity:R(e.maxCapacity),memoryLimitMiB:R(e.memoryLimitMiB),warmPool:n,extraProperties:i.length>0?i:void 0}}it(y0,"parseServiceEc2Config");var W4=new Set(["domain","loadBalancer","directAccess"]);function $b(e){if(!N(e))return;let t=e.loadBalancer,n=le(e,W4);return{domain:b(e.domain),loadBalancer:t===!1?!1:U(t,ju),directAccess:j(e.directAccess),...n.length>0&&{extraProperties:n}}}it($b,"extractClusterConfig");function Tb(e){let t=e.containers,n=Array.isArray(t)?t.filter(N).map(h0):void 0,i=le(e,new Set(["name","image","docker","ssmSecretsPath","containers","routing","connections","cpu","memoryLimitMiB","desiredCount","scaling","capacityProvider","ec2Config"]));return{name:b(e.name)??"",image:b(e.image),docker:S0(e.docker),ssmSecretsPath:b(e.ssmSecretsPath),containers:n,routing:v0(e.routing),cpu:R(e.cpu),memoryLimitMiB:R(e.memoryLimitMiB),desiredCount:R(e.desiredCount),scaling:b0(e.scaling),capacityProvider:U(e.capacityProvider,Ii)??"FARGATE",ec2Config:y0(e.ec2Config),...i.length>0&&{extraProperties:i}}}it(Tb,"parseEcsService");function S0(e){if(!N(e))return;let t=b(e.path);if(t===void 0)return;let n=b(e.context),i=b(e.target);return{path:t,...n!==void 0&&{context:n},...i!==void 0&&{target:i}}}it(S0,"parseServiceDocker");function Ga(e,t){let n=b(e);if(n)return n;if(Or(e)&&e.__expression.startsWith(t+"."))return e.__expression.slice(t.length+1)}it(Ga,"extractEnumString");function Cb(e){return $t(e)?e.__call.match(/\(\s*"([^"]+)"\s*\)/)?.[1]:void 0}it(Cb,"extractCallStringArg");function we(e,t,n){n!==void 0&&(e[t]=n)}it(we,"assignIfDefined");var H4=Object.defineProperty,$l=(e,t)=>H4(e,"name",{value:t,configurable:!0}),q4=10;function Rb(e,t){return Array.isArray(e)?e.filter(sr).map(n=>t.find(i=>i.variableName===n.__identifier)).filter(n=>n!==void 0).map(n=>n.resourceName):[]}$l(Rb,"resolveConnectedDatabaseNames");function Nb(e,t){return Array.isArray(e)?e.filter(sr).map(n=>t.find(i=>i.variableName===n.__identifier)).filter(n=>n!==void 0).map(n=>n.resourceName):[]}$l(Nb,"resolveConnectedStorageNames");function Pb(e,t,n){if(!Array.isArray(t)||t.length===0)return;let i=t[0];if(!N(i))return;let r=i.containers;if(!Array.isArray(r)||r.length===0)return;let o=r[0];if(!N(o)||!N(o.environment))return;let a=o.environment;(a.DATABASE_HOST||a.DATABASE_PORT||a.DATABASE_NAME)&&(e.needsConnection=!0,n.length>0&&(e.connectedDatabase??[]).length===0&&(e.connectedDatabase=[n[0].name]));for(let c=1;c<=q4;c++)(a[`DATABASE_HOST_${c}`]||a[`DATABASE_PORT_${c}`]||a[`DATABASE_NAME_${c}`])&&(e.needsConnection=!0)}$l(Pb,"inferDatabaseConnectionsFromEnv");function wb(e,t,n){if(!Array.isArray(t)||t.length===0)return;let i=t[0];if(!N(i))return;let r=i.containers;if(!Array.isArray(r)||r.length===0)return;let o=r[0];!N(o)||!N(o.environment)||o.environment.BUCKET_NAME&&n.length>0&&(e.connectedStorage??[]).length===0&&(e.connectedStorage=[n[0].name])}$l(wb,"inferStorageConnectionsFromEnv");var Y4=Object.defineProperty,ur=(e,t)=>Y4(e,"name",{value:t,configurable:!0});function _0(e){if(e.arguments.length<2)return null;let t=e.arguments[0],n=e.arguments[1];if(!Fi.isStringLiteral(t)||!Fi.isObjectLiteralExpression(n))return null;let i=t.text,r=B(n);return{resourceName:i,type:b(r.type)??"ecs",config:r,node:e}}ur(_0,"extractComputeResource");function Tl(e){return Ne(e,t=>{if(!Fi.isCallExpression(t)||!Ie(t,"addCompute"))return null;let n=t.arguments[0];if(!Fe(n,"ComputeFactory"))return null;let i=_0(n);if(i){let r=nt(t);r&&(i.variableName=r)}return i})}ur(Tl,"findComputeResources");function Cl(e,t,n){let i=le(e.config,n);i.length>0&&(t.extraProperties=i)}ur(Cl,"applyExtras");function E0(e,t){let n=e.config.docker;if(N(n)){let o=b(n.path),a=b(n.context),c=b(n.target);(o!==void 0||a!==void 0||c!==void 0)&&(t.docker={...o!==void 0&&{path:o},...a!==void 0&&{context:a},...c!==void 0&&{target:c}})}let i=e.config.cluster;i!==void 0&&(t.cluster=$b(i));let r=e.config.services;r!==void 0&&Array.isArray(r)&&(t.services=r.filter(o=>N(o)).map(Tb)),Cl(e,t,new Set(["type","ecrRepository","docker","cluster","services","connections"]))}ur(E0,"convertEcsCompute");function x0(e,t){if(we(t,"deployment",U(e.config.deployment,Du)),we(t,"timeout",R(e.config.timeout)),we(t,"memory",R(e.config.memorySize)??R(e.config.memory)),we(t,"handler",b(e.config.handler)),we(t,"runtime",Ga(e.config.runtime,"Runtime")),Va(e.config.environment)&&(t.environment=e.config.environment),Va(e.config.secrets))t.secrets=e.config.secrets;else{let r=de(e.config.secrets);r&&(t.ssmSecrets=r)}let n=e.config.functionUrl;if(N(n)){let r=U(Ga(n.authType,"FunctionUrlAuthType"),pa);r!==void 0&&(t.functionUrl={authType:r})}let i=e.config.code;if(i!==void 0){let r=Cb(i);r&&(t.codePath=r)}we(t,"description",b(e.config.lambdaDescription)),we(t,"architecture",U(Ga(e.config.architecture,"Architecture"),Mu)),we(t,"ephemeralStorageSize",R(e.config.ephemeralStorageSize)),we(t,"functionName",b(e.config.functionName)),we(t,"ssmSecretsPath",b(e.config.ssmSecretsPath)),Cl(e,t,new Set(["type","deployment","timeout","memorySize","memory","handler","runtime","environment","secrets","functionUrl","code","connections","ecrRepository","containerSecretsImport","lambdaDescription","architecture","ephemeralStorageSize","functionName","ssmSecretsPath"]))}ur(x0,"convertLambdaCompute");function A0(e,t){we(t,"instanceType",U(e.config.instanceType,Uu));let n=e.config.ssh;n===!1?t.enableSSH=!1:n!==void 0&&N(n)?t.enableSSH=!0:we(t,"enableSSH",j(e.config.enableSSH)),we(t,"keyName",b(e.config.keyName)),we(t,"userData",b(e.config.userData)),e.config.securityGroups!==void 0&&(t.securityGroups=de(e.config.securityGroups)),Cl(e,t,new Set(["type","instanceType","ssh","enableSSH","keyName","userData","securityGroups","connections"]))}ur(A0,"convertEc2Compute");function I0(e,t,n,i){let r=t.config.connections;if(!r&&Array.isArray(t.config.services)){let c=t.config.services[0];N(c)&&(r=c.connections)}if(!r)return;let o=Rb(r,n);o.length>0&&(e.needsConnection=!0,e.connectedDatabase=o);let a=Nb(r,i);a.length>0&&(e.connectedStorage=a)}ur(I0,"applyConnectionConfig");function $0(e,t){({ecs:E0,lambda:x0,ec2:A0})[e.type]?.(t,e)}ur($0,"applyTypeSpecificConfig");function kb(e,t,n,i){return e.map(r=>{let o=U(r.config.type,da)??"ecs",a={name:r.resourceName,type:o,needsConnection:!1,connectedDatabase:[],...r.variableName&&{variableName:r.variableName}};return I0(a,r,t,n),$0(a,r),Pb(a,r.config.services,i.database),wb(a,r.config.services,i.s3),a})}ur(kb,"convertComputeResources");import*as vt from"typescript";var K4=Object.defineProperty,X4=(e,t)=>K4(e,"name",{value:t,configurable:!0});function Rl(e){return Ne(e,t=>{if(!vt.isCallExpression(t)||!Ie(t,"addSchedule")||t.arguments.length<2)return null;let n=t.arguments[0],i=t.arguments[1];if(!vt.isStringLiteral(n)||!vt.isObjectLiteralExpression(i))return null;let r=B(i),o=b(r.schedule);if(o===void 0)return null;let a=i.properties.find(c=>vt.isPropertyAssignment(c)&&vt.isIdentifier(c.name)&&c.name.text==="target");return!a||!vt.isPropertyAssignment(a)||!vt.isIdentifier(a.initializer)?null:{id:n.text,schedule:o,targetVariableName:a.initializer.text}})}X4(Rl,"findSchedules");import*as ee from"typescript";import*as Be from"typescript";var J4=Object.defineProperty,Za=(e,t)=>J4(e,"name",{value:t,configurable:!0}),Ob=new Set(["S3Bucket"]);function T0(e,t,n){let i=Be.isIdentifier(e.name)?e.name.text:"";if(t.arguments&&t.arguments.length>=2){let r=t.arguments[1],o=Be.isStringLiteral(r)?r.text:"",a=t.arguments.length>=3?t.arguments[2]:void 0,c=a&&Be.isObjectLiteralExpression(a)?B(a):{};return{variableName:i,resourceName:o,bucketClass:n,config:c,node:e}}return null}Za(T0,"extractS3Resource");function C0(e,t){if(t.arguments.length<2)return null;let n=t.arguments[0],i=t.arguments[1];if(!Be.isStringLiteral(n)||!Be.isObjectLiteralExpression(i))return null;let r=B(i);return{variableName:nt(e)??"",resourceName:n.text,bucketClass:"StorageFactory",config:r,node:e}}Za(C0,"extractS3FactoryResource");function Db(e){return Ne(e,t=>{if(!Be.isVariableDeclaration(t)||!t.initializer||!Be.isNewExpression(t.initializer))return null;let n=t.initializer;if(!Be.isIdentifier(n.expression))return null;let i=n.expression.text;return Ob.has(i)?T0(t,n,i):null})}Za(Db,"findS3Resources");function Mb(e){return Ne(e,t=>{if(!Be.isCallExpression(t)||!Ie(t,"addStorage"))return null;let n=t.arguments[0];return Fe(n,"StorageFactory")?C0(t,n):null})}Za(Mb,"findS3FactoryResources");function jb(e){return e.map(t=>({name:t.resourceName,...b(t.config.bucketName)&&{bucketName:b(t.config.bucketName)},...j(t.config.publicReadAccess)===!0&&{publicReadAccess:!0},...N(t.config.websiteHosting)&&(()=>{let n=t.config.websiteHosting;return{websiteHosting:{indexDocument:b(n.indexDocument)??"index.html",...b(n.errorDocument)&&{errorDocument:b(n.errorDocument)}}}})(),...U(t.config.backupVaultTier,At)&&{backupVaultTier:U(t.config.backupVaultTier,At)},...j(t.config.versioned)!==void 0&&{versioned:j(t.config.versioned)},...U(t.config.encryption,Ri)&&{encryption:U(t.config.encryption,Ri)},...b(t.config.kmsKeyArn)&&{kmsKeyArn:b(t.config.kmsKeyArn)},...Array.isArray(t.config.cors)&&t.config.cors.length>0&&{cors:t.config.cors.filter(N).map(n=>({allowedOrigins:Array.isArray(n.allowedOrigins)?n.allowedOrigins.filter(i=>typeof i=="string"):[],allowedMethods:Array.isArray(n.allowedMethods)?n.allowedMethods.filter(i=>typeof i=="string"):[]}))},...N(t.config.deployment)&&(()=>{let n=t.config.deployment;return{deployment:{source:b(n.source)??"",...j(n.prune)!==void 0&&{prune:j(n.prune)},...N(n.cacheControl)&&(()=>{let i=n.cacheControl;return{cacheControl:{...R(i.maxAge)!==void 0&&{maxAge:R(i.maxAge)},...j(i.immutable)!==void 0&&{immutable:j(i.immutable)}}}})()}}})(),...U(t.config.stackPlacement,Qu)&&{stackPlacement:U(t.config.stackPlacement,Qu)},...t.variableName&&{variableName:t.variableName},...(()=>{let n=new Set(["bucketName","publicReadAccess","websiteHosting","backupVaultTier","versioned","encryption","kmsKeyArn","cors","deployment","stackPlacement"]),i=le(t.config,n);return i.length>0?{extraProperties:i}:{}})()}))}Za(jb,"convertS3Resources");var Q4=Object.defineProperty,An=(e,t)=>Q4(e,"name",{value:t,configurable:!0}),R0=new Set(["App","Architecture","DatabaseFactory","StorageFactory","ComputeFactory","getConfig","MessagingFactory","CdnFactory","Code","Runtime","FunctionUrlAuthType","NetworkFactory","PatternFactory","VpcPeerFactory","VpcPeerAccepterFactory","CrossPlanConnectionFactory"]);function Nl(e){return!!(e.startsWith("@fjall/")||e==="aws-cdk-lib"||e.startsWith("aws-cdk-lib/")||e==="constructs")}An(Nl,"isManagedModuleSpecifier");function Xe(e){let t=[];for(let n of e.statements){let i=n.getFullStart(),r=n.getEnd();if(ee.isImportDeclaration(n)){t.push({type:"import",node:n,startPos:i,endPos:r,isManaged:N0(n)});continue}if(ee.isVariableStatement(n)){t.push(P0(n,i,r));continue}if(ee.isExpressionStatement(n)){t.push(w0(n,i,r));continue}t.push({type:"custom",node:n,startPos:i,endPos:r,isManaged:!1})}return t}An(Xe,"classifyStatements");function N0(e){return ee.isStringLiteral(e.moduleSpecifier)?Nl(e.moduleSpecifier.text):!1}An(N0,"isManagedImport");function P0(e,t,n){for(let i of e.declarationList.declarations)if(i.initializer){if(Bt(i.initializer))return{type:"app-init",node:e,resourceName:ee.isIdentifier(i.name)?i.name.text:void 0,startPos:t,endPos:n,isManaged:!0};if(ee.isIdentifier(i.name)&&i.name.text==="appName"&&ee.isStringLiteral(i.initializer))return{type:"app-init",node:e,startPos:t,endPos:n,isManaged:!0};if(ee.isNewExpression(i.initializer)){let r=i.initializer;if(ee.isIdentifier(r.expression)){let o=r.expression.text;if(Ob.has(o)){let a=r.arguments&&r.arguments.length>=2&&ee.isStringLiteral(r.arguments[1])?r.arguments[1].text:void 0;return{type:"storage",node:e,resourceName:a,startPos:t,endPos:n,isManaged:!0}}}}if(ee.isCallExpression(i.initializer)){let r=zb(i.initializer,e,t,n);if(r.type!=="custom")return r}}return{type:"custom",node:e,startPos:t,endPos:n,isManaged:!1}}An(P0,"classifyVariableStatement");function w0(e,t,n){let i=e.expression;return ee.isCallExpression(i)?zb(i,e,t,n):{type:"custom",node:e,startPos:t,endPos:n,isManaged:!1}}An(w0,"classifyExpressionStatement");function zb(e,t,n,i){let r=e.expression;if(ee.isPropertyAccessExpression(r)&&ee.isIdentifier(r.expression)){let o=r.name.text;if(o==="addTags")return{type:"tags",node:t,startPos:n,endPos:i,isManaged:!0};let a={addDatabase:{type:"database",factory:"DatabaseFactory"},addCompute:{type:"compute",factory:"ComputeFactory"},addNetwork:{type:"network",factory:"NetworkFactory"},addMessaging:{type:"messaging",factory:"MessagingFactory"},addCdn:{type:"cdn",factory:"CdnFactory"},addPattern:{type:"pattern",factory:"PatternFactory"},addStorage:{type:"storage",factory:"StorageFactory"},addVpcPeer:{type:"vpc-peer",factory:"VpcPeerFactory"},addVpcPeerAccepter:{type:"vpc-peer-accepter",factory:"VpcPeerAccepterFactory"}}[o];if(a){let c=k0(e,a.factory);return{type:a.type,node:t,resourceName:c,startPos:n,endPos:i,isManaged:!0}}}return{type:"custom",node:t,startPos:n,endPos:i,isManaged:!1}}An(zb,"classifyCallExpression");function k0(e,t){if(e.arguments.length===0)return;let n=e.arguments[0];if(!ee.isCallExpression(n))return;let i=n.expression;if(!ee.isPropertyAccessExpression(i)||i.name.text!=="build"||!ee.isIdentifier(i.expression)||i.expression.text!==t||n.arguments.length===0)return;let r=n.arguments[0];if(ee.isStringLiteral(r))return r.text}An(k0,"extractResourceNameFromFactoryCall");import*as O0 from"typescript";var e2=Object.defineProperty,In=(e,t)=>e2(e,"name",{value:t,configurable:!0}),t2={import:"after-imports","app-init":"after-app-init",tags:"after-tags"};function D0(e){if(!e)return{position:"before-imports"};let t=t2[e.type];return t?{position:t}:{position:"after-resource",afterManagedResource:{type:e.type,name:e.resourceName}}}In(D0,"determineCustomBlockPosition");function Wa(e,t){let n=t??Xe(e),i=[],r=e.getFullText(),o=null;for(let a of n)if(a.type==="custom"&&!a.isManaged){let{position:c,afterManagedResource:u}=D0(o),l=M0(r,a.node),m=j0(r,a.node),p=e.getLineAndCharacterOfPosition(a.node.getStart());i.push({sourceText:l,position:c,afterManagedResource:u,originalLine:p.line+1,leadingComments:m.length>0?m:void 0})}else a.isManaged&&(o=a);return i}In(Wa,"extractCustomCodeBlocks");function M0(e,t){let n=t.getFullStart(),i=t.getEnd(),r=e.slice(n,i).split(`
+`,n}or(yl,"generateCDNCode");function Sl(e){let t=new Set;if(e.cdn&&(e.cdn.defaultOriginRef&&t.add(e.cdn.defaultOriginRef),e.cdn.behaviours))for(let n of e.cdn.behaviours)t.add(n.originRef);return t}or(Sl,"collectCdnReferencedResources");function _l(e){return e.patternConfig!==void 0}or(_l,"usesPatternApproach");var O4=Object.defineProperty,xn=(e,t)=>O4(e,"name",{value:t,configurable:!0}),La="service",yb="0 4 * * ? *",Sb="0 5 * * ? *",ar=Object.freeze({tinkerer:{displayName:"Tinkerer",description:"Free tier eligible, minimal cost for experimentation",database:{Instance:{instanceType:"t4g.micro",multiAz:!1,proxy:!1,readReplica:!1,publiclyAccessible:!0},Aurora:null,GlobalAurora:null,ClickHouse:null},compute:{ecs:{services:[{name:La,capacityProvider:"EC2",desiredCount:1,minCapacity:1,maxCapacity:1,ec2Config:{instanceType:"t4g.micro",amiHardwareType:"ARM",minCapacity:1,maxCapacity:1,memoryLimitMiB:400}}],cluster:{directAccess:!0}},lambda:{timeout:30,memory:128}},network:{maxAzs:2,natGateways:!1,flowLogs:!1},backup:!1},lightweight:{displayName:"Lightweight",description:"Streamlined single-AZ deployment for cost efficiency",database:{Instance:{instanceType:"t4g.small",multiAz:!1},Aurora:{readers:!1},GlobalAurora:null,ClickHouse:null},compute:{ecs:{services:[{name:La,capacityProvider:"FARGATE_SPOT",cpu:256,memoryLimitMiB:512,desiredCount:1,minCapacity:1,maxCapacity:3}]},lambda:{timeout:30,memory:256}},network:{maxAzs:2,natGateways:{count:1},flowLogs:!1},backup:!1},standard:{displayName:"Standard",description:"Production-ready with sensible defaults",database:{Instance:{instanceType:"t4g.large"},Aurora:{readers:{count:1}},GlobalAurora:{readers:{count:1}},ClickHouse:{instanceType:"t4g.medium",coldTier:{mode:"s3"},optimiseSchedule:yb,backupSchedule:Sb,backupRetentionDays:14}},compute:{ecs:{services:[{name:La,capacityProvider:"FARGATE",cpu:512,memoryLimitMiB:1024,desiredCount:2,minCapacity:2,maxCapacity:5}]},lambda:{timeout:60,memory:256}},network:{maxAzs:3,natGateways:{count:1},flowLogs:{},vpcEndpoints:{interface:{ecr:!0}}},backup:!1},resilient:{displayName:"Resilient",description:"High availability with enhanced monitoring and scaling",database:{Instance:{instanceType:"r7g.large",encryption:{storageKey:{useCMK:!0}},databaseInsights:{mode:"advanced",encryptionKey:{useCMK:!0}},proxy:{requireTLS:!0}},Aurora:{readers:{count:2},encryption:{storageKey:{useCMK:!0}},databaseInsights:{mode:"advanced",encryptionKey:{useCMK:!0}},proxy:{requireTLS:!0},backupRetention:30},GlobalAurora:{readers:{count:2},encryption:{storageKey:{useCMK:!0}},databaseInsights:{mode:"advanced",encryptionKey:{useCMK:!0}},proxy:{requireTLS:!0},backupRetention:30,enableGlobalWriteForwarding:!0},ClickHouse:{instanceType:"m6g.large",coldTier:{mode:"s3"},optimiseSchedule:yb,backupSchedule:Sb,backupRetentionDays:14}},compute:{ecs:{services:[{name:La,capacityProvider:"FARGATE",cpu:1024,memoryLimitMiB:2048,desiredCount:4,minCapacity:4,maxCapacity:20}]},lambda:{timeout:120,memory:512}},network:{maxAzs:3,natGateways:{count:3},flowLogs:{retentionDays:90},vpcEndpoints:{interface:{ecr:!0,secretsManager:!0}}},backup:{tier:"resilient"}},enterprise:{displayName:"Enterprise",description:"Maximum capability with all features enabled",database:{Instance:{instanceType:"r7g.xlarge",encryption:{storageKey:{useCMK:!0}},databaseInsights:{mode:"advanced",encryptionKey:{useCMK:!0}},proxy:{requireTLS:!0},readReplica:{}},Aurora:{readers:{count:2},encryption:{storageKey:{useCMK:!0}},databaseInsights:{mode:"advanced",encryptionKey:{useCMK:!0}},proxy:{requireTLS:!0},backupRetention:35},GlobalAurora:{readers:{count:2},encryption:{storageKey:{useCMK:!0}},databaseInsights:{mode:"advanced",encryptionKey:{useCMK:!0}},proxy:{requireTLS:!0},backupRetention:35,enableGlobalWriteForwarding:!0},ClickHouse:{instanceType:"m6g.xlarge",coldTier:{mode:"s3"},optimiseSchedule:yb,backupSchedule:Sb,backupRetentionDays:30}},compute:{ecs:{services:[{name:La,capacityProvider:"FARGATE",cpu:2048,memoryLimitMiB:4096,desiredCount:6,minCapacity:6,maxCapacity:100}]},lambda:{timeout:300,memory:1024}},network:{maxAzs:3,natGateways:{count:3},flowLogs:{destination:"s3",retentionDays:365},vpcEndpoints:{interface:{ecr:!0,secretsManager:!0,kms:!0,cloudwatchLogs:!0}}},backup:{tier:"enterprise"}}});function D4(e,t){return ar[e].database[t]}xn(D4,"getDatabasePreset");function M4(e){return ar[e].compute.ecs}xn(M4,"getEcsPreset");function _b(e){return ar[e].network}xn(_b,"getNetworkPreset");function c0(e){return Ou.filter(t=>ar[t].database[e]!==null)}xn(c0,"getAvailableTiersForDatabase");function j4(e){return c0(e).map(t=>({label:ar[t].displayName,value:t,description:ar[t].description}))}xn(j4,"getTierOptionsForDatabase");function Eb(e){switch(e){case"tinkerer":case"lightweight":case"standard":return"Instance";case"resilient":case"enterprise":return"Aurora"}}xn(Eb,"getDefaultDatabaseTypeForTier");function xb(e,t){let n=ar[e].compute.ecs,i=n.services[0],r=!n.cluster?.directAccess&&n.cluster?.loadBalancer!==!1,o=t.filter(c=>c.serviceType!=="worker").length,a=t.findIndex(c=>c.serviceType!=="worker");return t.map((c,u)=>{let l=u===a,m=c.serviceType==="worker",p;return r&&!m&&(c.routing?p=c.routing:o>1&&(p={path:l?"/*":`/${c.name.toLowerCase()}/*`,...l?{}:{priority:100+u}})),{name:c.name,capacityProvider:i.capacityProvider,ec2Config:i.ec2Config,cpu:i.cpu,memoryLimitMiB:i.memoryLimitMiB,desiredCount:i.desiredCount,minCapacity:i.minCapacity,maxCapacity:i.maxCapacity,routing:p}})}xn(xb,"applyTierDefaultsToServices");var z4=Object.defineProperty,Ab=(e,t)=>z4(e,"name",{value:t,configurable:!0}),Ua=["lightweight","standard","resilient"],L4=[...Ua,"custom"],wr=Object.freeze({lightweight:{displayName:"Lightweight",description:"Cost-effective \xB7 Instance DB, minimal Lambda",database:{type:"Instance",instanceType:"t4g.small",backupRetention:7,deletionProtection:!1},compute:{memorySize:512,timeout:30},network:{maxAzs:2,natGateways:{count:1},flowLogs:!1},backup:!1},standard:{displayName:"Standard",description:"Production-ready \xB7 Instance DB, balanced Lambda",database:{type:"Instance",instanceType:"t4g.large",backupRetention:14,deletionProtection:!0},compute:{memorySize:1536,timeout:60},network:{maxAzs:3,natGateways:{count:1},flowLogs:{}},backup:{tier:"standard"}},resilient:{displayName:"Resilient",description:"High-availability \xB7 Aurora V2, KMS encryption",database:{type:"Aurora",backupRetention:30,deletionProtection:!0,encryption:{useCMK:!0}},compute:{memorySize:2048,timeout:120},network:{maxAzs:3,natGateways:{count:3},flowLogs:{retentionDays:90}},backup:{tier:"resilient"}}});function El(e){return wr[e]}Ab(El,"getPatternTierPreset");function u0(){return[{label:wr.standard.displayName,value:"standard",description:wr.standard.description},{label:wr.lightweight.displayName,value:"lightweight",description:wr.lightweight.description},{label:wr.resilient.displayName,value:"resilient",description:wr.resilient.description},{label:"Custom",value:"custom",description:"Full control \xB7 Configure everything"}]}Ab(u0,"getPatternTierOptions");var U4=new Set(Ua);function xl(e){return U4.has(e)}Ab(xl,"isPatternTierName");var F4=Object.defineProperty,l0=(e,t)=>F4(e,"name",{value:t,configurable:!0}),d0=Object.freeze({standard:{},assets:{versioned:!0,deployment:{source:"./assets"}},upload:{versioned:!0,cors:[{allowedOrigins:["*"],allowedMethods:["GET","PUT","POST"]}]},website:{publicReadAccess:!0,websiteHosting:{indexDocument:"index.html",errorDocument:"error.html"}}});function m0(e){return{...d0[e]}}l0(m0,"getStoragePreset");function p0(){return[{label:"Standard",value:"standard"},{label:"Assets",value:"assets"},{label:"Upload",value:"upload"},{label:"Website Hosting",value:"website"}]}l0(p0,"getStoragePresetOptions");import*as ve from"typescript";import*as D from"typescript";var B4=Object.defineProperty,Li=(e,t)=>B4(e,"name",{value:t,configurable:!0});function B(e){let t={};for(let n of e.properties){if(!D.isPropertyAssignment(n))continue;let i=D.isIdentifier(n.name)||D.isStringLiteral(n.name)?n.name.text:void 0;i!==void 0&&(t[i]=kr(n.initializer))}return t}Li(B,"parseObjectLiteral");function kr(e){if(D.isStringLiteral(e))return e.text;if(D.isNumericLiteral(e))return Number(e.text);if(e.kind===D.SyntaxKind.TrueKeyword)return!0;if(e.kind===D.SyntaxKind.FalseKeyword)return!1;if(D.isArrayLiteralExpression(e))return e.elements.map(t=>kr(t));if(D.isObjectLiteralExpression(e))return B(e);if(D.isIdentifier(e))return{__identifier:e.text};if(D.isPropertyAccessExpression(e))return{__expression:e.getText()};if(D.isCallExpression(e))return{__call:e.getText()};if(D.isBinaryExpression(e)&&e.operatorToken.kind===D.SyntaxKind.BarBarToken){let t=kr(e.left),n=kr(e.right);return typeof n=="string"?n:t}else if(D.isConditionalExpression(e)){let t=kr(e.whenTrue),n=kr(e.whenFalse);return typeof n=="string"||typeof n=="number"?n:t}else if(D.isTemplateExpression(e)||D.isNoSubstitutionTemplateLiteral(e))return{__expression:e.getText()};return{__unknown:e.getText()}}Li(kr,"evaluateExpression");function Fa(e,t){return rt(e,n=>{if(D.isVariableStatement(n)){for(let i of n.declarationList.declarations)if(D.isIdentifier(i.name)&&i.name.text===t&&i.initializer){if(D.isStringLiteral(i.initializer))return i.initializer.text;if(D.isObjectLiteralExpression(i.initializer)){let r=B(i.initializer);return JSON.stringify(r)}}}})}Li(Fa,"findVariableValue");function Ib(e,t){return rt(e,n=>{if(D.isVariableStatement(n)){for(let i of n.declarationList.declarations)if(D.isIdentifier(i.name)&&i.name.text===t&&i.initializer&&D.isObjectLiteralExpression(i.initializer))return B(i.initializer)}})}Li(Ib,"findObjectDeclaration");function Ba(e,t){if(!D.isIdentifier(t.expression))return;let n=Ib(e,t.expression.text),i=t.name.text;if(n&&n[i]!==void 0)return String(n[i])}Li(Ba,"evaluatePropertyAccess");function Al(e,t){let n=t.head.text;for(let i of t.templateSpans){if(D.isIdentifier(i.expression)){let r=Fa(e,i.expression.text);if(r)n+=r;else return t.getText(e).replace(/^`|`$/g,"")}else if(D.isPropertyAccessExpression(i.expression)){let r=Ba(e,i.expression);if(r)n+=r;else return t.getText(e).replace(/^`|`$/g,"")}else return t.getText(e).replace(/^`|`$/g,"");n+=i.literal.text}return n}Li(Al,"resolveTemplateLiteral");var V4=Object.defineProperty,Q=(e,t)=>V4(e,"name",{value:t,configurable:!0});function ft(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}Q(ft,"isPlainObject");function sr(e){return ft(e)&&"__identifier"in e}Q(sr,"isIdentifierRef");function Or(e){return ft(e)&&"__expression"in e}Q(Or,"isExpressionRef");function $t(e){return ft(e)&&"__call"in e}Q($t,"isCallRef");function N(e){return ft(e)&&!("__identifier"in e)&&!("__expression"in e)&&!("__call"in e)&&!("__unknown"in e)}Q(N,"isParsedObject");function b(e){return typeof e=="string"?e:void 0}Q(b,"asString");function R(e){return typeof e=="number"?e:void 0}Q(R,"asNumber");function j(e){return typeof e=="boolean"?e:void 0}Q(j,"asBoolean");function de(e){if(!Array.isArray(e))return;let t=[];for(let n of e)typeof n=="string"&&t.push(n);return t.length>0?t:void 0}Q(de,"asStringArray");function U(e,t){let n=b(e);if(n!==void 0)return dt(t,n)?n:void 0}Q(U,"asStringUnion");function Ke(e){let t={};for(let[n,i]of Object.entries(e))i!==void 0&&(t[n]=i);return t}Q(Ke,"omitUndefined");function Il(e){if(e===null)return"null";if(e===void 0)return"undefined";if(typeof e=="string")return JSON.stringify(e);if(typeof e=="number"||typeof e=="boolean")return String(e);if(Array.isArray(e))return`[${e.map(Il).join(", ")}]`;if(!ft(e))return String(e);if(sr(e))return e.__identifier;if(Or(e))return e.__expression;if($t(e))return e.__call;if("__unknown"in e&&typeof e.__unknown=="string")return e.__unknown;let t=Object.entries(e);return t.length===0?"{}":`{ ${t.map(([n,i])=>`${n}: ${Il(i)}`).join(", ")} }`}Q(Il,"parsedValueToSourceText");function le(e,t){let n=[];for(let[i,r]of Object.entries(e))t.has(i)||r===void 0||n.push({key:i,sourceText:Il(r)});return n}Q(le,"captureExtraProperties");function Dr(e,t){return ve.isPropertyAssignment(e)&&ve.isIdentifier(e.name)&&e.name.text===t}Q(Dr,"isNamedProperty");function Bt(e){return ve.isCallExpression(e)&&ve.isPropertyAccessExpression(e.expression)&&e.expression.name.text==="getApp"&&ve.isIdentifier(e.expression.expression)&&e.expression.expression.text==="App"}Q(Bt,"isAppGetAppCall");function Ie(e,t){let{expression:n}=e;return ve.isPropertyAccessExpression(n)&&n.name.text===t&&e.arguments.length>0}Q(Ie,"isFactoryMethodCall");function rt(e,t){let n,i=Q(r=>{n===void 0&&(n=t(r),n===void 0&&ve.forEachChild(r,i))},"visit");return i(e),n}Q(rt,"findFirstInAst");function Ne(e,t){let n=[],i=Q(r=>{let o=t(r);o!==null&&n.push(o),ve.forEachChild(r,i)},"visit");return i(e),n}Q(Ne,"collectFromAst");function Fe(e,t){return ve.isCallExpression(e)&&ve.isPropertyAccessExpression(e.expression)&&e.expression.name.text==="build"&&ve.isIdentifier(e.expression.expression)&&e.expression.expression.text===t}Q(Fe,"isFactoryBuildCall");function nt(e){let t=e.parent;if(ve.isVariableDeclaration(t)&&ve.isIdentifier(t.name))return t.name.text}Q(nt,"extractVariableName");var gt=Q(()=>e=>e,"typed");function Ui(e){if(e!=null){if(e===!1)return!1;if(typeof e=="object"&&!Array.isArray(e))return e}}Q(Ui,"asObjectOrFalse");function cr(e,t){return e===!1?!1:N(e)?t(e):void 0}Q(cr,"parseBooleanOrConfig");function Pe(e,t){return N(e)?t(e):void 0}Q(Pe,"parseOptionalConfig");function ht(e,t,n){let i=e[t];return N(i)?n(i):void 0}Q(ht,"extractSubConfig");import*as H from"typescript";import*as Fi from"typescript";var G4=Object.defineProperty,it=(e,t)=>G4(e,"name",{value:t,configurable:!0});function Va(e){return e!==void 0&&ft(e)}it(Va,"isEnvironmentRecord");function f0(e){if(!N(e))return;let t={};for(let[n,i]of Object.entries(e))if(N(i)){let r=b(i.id),o=b(i.name);r&&o&&(t[n]={id:r,name:o,field:b(i.field)})}return Object.keys(t).length>0?t:void 0}it(f0,"parseContainerSecretsImport");function g0(e){if(!N(e))return;let t=de(e.command);if(!(!t||t.length===0))return{command:t,interval:R(e.interval),timeout:R(e.timeout),retries:R(e.retries),startPeriod:R(e.startPeriod)}}it(g0,"parseContainerHealthCheck");function h0(e){let t=le(e,new Set(["name","image","port","environment","essential","command","entryPoint","secretsImport","secrets","healthCheck"]));return{name:b(e.name),image:b(e.image),port:R(e.port),environment:Va(e.environment)?e.environment:void 0,essential:j(e.essential),command:de(e.command),entryPoint:de(e.entryPoint),secretsImport:f0(e.secretsImport),ssmSecrets:de(e.secrets),healthCheck:g0(e.healthCheck),extraProperties:t.length>0?t:void 0}}it(h0,"parseServiceContainer");function v0(e){if(Array.isArray(e))return e.filter(N).map(t=>({path:b(t.path),host:b(t.host),priority:R(t.priority),healthCheckPath:b(t.healthCheckPath)}));if(N(e))return{path:b(e.path),host:b(e.host),priority:R(e.priority),healthCheckPath:b(e.healthCheckPath)}}it(v0,"parseServiceRouting");function b0(e){if(e===!1)return!1;if(N(e))return{minCapacity:R(e.minCapacity),maxCapacity:R(e.maxCapacity),desiredCount:R(e.desiredCount),scalingType:U(e.scalingType,zu)}}it(b0,"parseServiceScaling");var Z4=new Set(["instanceType","amiHardwareType","minCapacity","maxCapacity","memoryLimitMiB","warmPool"]);function y0(e){if(!N(e))return;let t=e.warmPool,n=N(t)?{minSize:R(t.minSize),reuseOnScaleIn:j(t.reuseOnScaleIn)}:void 0,i=le(e,Z4);return{instanceType:b(e.instanceType),amiHardwareType:U(e.amiHardwareType,Lu),minCapacity:R(e.minCapacity),maxCapacity:R(e.maxCapacity),memoryLimitMiB:R(e.memoryLimitMiB),warmPool:n,extraProperties:i.length>0?i:void 0}}it(y0,"parseServiceEc2Config");var W4=new Set(["domain","loadBalancer","directAccess"]);function $b(e){if(!N(e))return;let t=e.loadBalancer,n=le(e,W4);return{domain:b(e.domain),loadBalancer:t===!1?!1:U(t,ju),directAccess:j(e.directAccess),...n.length>0&&{extraProperties:n}}}it($b,"extractClusterConfig");function Tb(e){let t=e.containers,n=Array.isArray(t)?t.filter(N).map(h0):void 0,i=le(e,new Set(["name","image","docker","ssmSecretsPath","containers","routing","connections","cpu","memoryLimitMiB","desiredCount","scaling","capacityProvider","ec2Config"]));return{name:b(e.name)??"",image:b(e.image),docker:S0(e.docker),ssmSecretsPath:b(e.ssmSecretsPath),containers:n,routing:v0(e.routing),cpu:R(e.cpu),memoryLimitMiB:R(e.memoryLimitMiB),desiredCount:R(e.desiredCount),scaling:b0(e.scaling),capacityProvider:U(e.capacityProvider,Ii)??"FARGATE",ec2Config:y0(e.ec2Config),...i.length>0&&{extraProperties:i}}}it(Tb,"parseEcsService");function S0(e){if(!N(e))return;let t=b(e.path);if(t===void 0)return;let n=b(e.context),i=b(e.target);return{path:t,...n!==void 0&&{context:n},...i!==void 0&&{target:i}}}it(S0,"parseServiceDocker");function Ga(e,t){let n=b(e);if(n)return n;if(Or(e)&&e.__expression.startsWith(t+"."))return e.__expression.slice(t.length+1)}it(Ga,"extractEnumString");function Cb(e){return $t(e)?e.__call.match(/\(\s*"([^"]+)"\s*\)/)?.[1]:void 0}it(Cb,"extractCallStringArg");function we(e,t,n){n!==void 0&&(e[t]=n)}it(we,"assignIfDefined");var H4=Object.defineProperty,$l=(e,t)=>H4(e,"name",{value:t,configurable:!0}),q4=10;function Rb(e,t){return Array.isArray(e)?e.filter(sr).map(n=>t.find(i=>i.variableName===n.__identifier)).filter(n=>n!==void 0).map(n=>n.resourceName):[]}$l(Rb,"resolveConnectedDatabaseNames");function Nb(e,t){return Array.isArray(e)?e.filter(sr).map(n=>t.find(i=>i.variableName===n.__identifier)).filter(n=>n!==void 0).map(n=>n.resourceName):[]}$l(Nb,"resolveConnectedStorageNames");function Pb(e,t,n){if(!Array.isArray(t)||t.length===0)return;let i=t[0];if(!N(i))return;let r=i.containers;if(!Array.isArray(r)||r.length===0)return;let o=r[0];if(!N(o)||!N(o.environment))return;let a=o.environment;(a.DATABASE_HOST||a.DATABASE_PORT||a.DATABASE_NAME)&&(e.needsConnection=!0,n.length>0&&(e.connectedDatabase??[]).length===0&&(e.connectedDatabase=[n[0].name]));for(let c=1;c<=q4;c++)(a[`DATABASE_HOST_${c}`]||a[`DATABASE_PORT_${c}`]||a[`DATABASE_NAME_${c}`])&&(e.needsConnection=!0)}$l(Pb,"inferDatabaseConnectionsFromEnv");function wb(e,t,n){if(!Array.isArray(t)||t.length===0)return;let i=t[0];if(!N(i))return;let r=i.containers;if(!Array.isArray(r)||r.length===0)return;let o=r[0];!N(o)||!N(o.environment)||o.environment.BUCKET_NAME&&n.length>0&&(e.connectedStorage??[]).length===0&&(e.connectedStorage=[n[0].name])}$l(wb,"inferStorageConnectionsFromEnv");var Y4=Object.defineProperty,ur=(e,t)=>Y4(e,"name",{value:t,configurable:!0});function _0(e){if(e.arguments.length<2)return null;let t=e.arguments[0],n=e.arguments[1];if(!Fi.isStringLiteral(t)||!Fi.isObjectLiteralExpression(n))return null;let i=t.text,r=B(n);return{resourceName:i,type:b(r.type)??"ecs",config:r,node:e}}ur(_0,"extractComputeResource");function Tl(e){return Ne(e,t=>{if(!Fi.isCallExpression(t)||!Ie(t,"addCompute"))return null;let n=t.arguments[0];if(!Fe(n,"ComputeFactory"))return null;let i=_0(n);if(i){let r=nt(t);r&&(i.variableName=r)}return i})}ur(Tl,"findComputeResources");function Cl(e,t,n){let i=le(e.config,n);i.length>0&&(t.extraProperties=i)}ur(Cl,"applyExtras");function E0(e,t){let n=e.config.docker;if(N(n)){let o=b(n.path),a=b(n.context),c=b(n.target);(o!==void 0||a!==void 0||c!==void 0)&&(t.docker={...o!==void 0&&{path:o},...a!==void 0&&{context:a},...c!==void 0&&{target:c}})}let i=e.config.cluster;i!==void 0&&(t.cluster=$b(i));let r=e.config.services;r!==void 0&&Array.isArray(r)&&(t.services=r.filter(o=>N(o)).map(Tb)),Cl(e,t,new Set(["type","ecrRepository","docker","cluster","services","connections"]))}ur(E0,"convertEcsCompute");function x0(e,t){if(we(t,"deployment",U(e.config.deployment,Du)),we(t,"timeout",R(e.config.timeout)),we(t,"memory",R(e.config.memorySize)??R(e.config.memory)),we(t,"handler",b(e.config.handler)),we(t,"runtime",Ga(e.config.runtime,"Runtime")),Va(e.config.environment)&&(t.environment=e.config.environment),Va(e.config.secrets))t.secrets=e.config.secrets;else{let r=de(e.config.secrets);r&&(t.ssmSecrets=r)}let n=e.config.functionUrl;if(N(n)){let r=U(Ga(n.authType,"FunctionUrlAuthType"),pa);r!==void 0&&(t.functionUrl={authType:r})}let i=e.config.code;if(i!==void 0){let r=Cb(i);r&&(t.codePath=r)}we(t,"description",b(e.config.lambdaDescription)),we(t,"architecture",U(Ga(e.config.architecture,"Architecture"),Mu)),we(t,"ephemeralStorageSize",R(e.config.ephemeralStorageSize)),we(t,"functionName",b(e.config.functionName)),we(t,"ssmSecretsPath",b(e.config.ssmSecretsPath)),Cl(e,t,new Set(["type","deployment","timeout","memorySize","memory","handler","runtime","environment","secrets","functionUrl","code","connections","ecrRepository","containerSecretsImport","lambdaDescription","architecture","ephemeralStorageSize","functionName","ssmSecretsPath"]))}ur(x0,"convertLambdaCompute");function A0(e,t){we(t,"instanceType",U(e.config.instanceType,Uu));let n=e.config.ssh;n===!1?t.enableSSH=!1:n!==void 0&&N(n)?t.enableSSH=!0:we(t,"enableSSH",j(e.config.enableSSH)),we(t,"keyName",b(e.config.keyName)),we(t,"userData",b(e.config.userData)),e.config.securityGroups!==void 0&&(t.securityGroups=de(e.config.securityGroups)),Cl(e,t,new Set(["type","instanceType","ssh","enableSSH","keyName","userData","securityGroups","connections"]))}ur(A0,"convertEc2Compute");function I0(e,t,n,i){let r=t.config.connections;if(!r&&Array.isArray(t.config.services)){let c=t.config.services[0];N(c)&&(r=c.connections)}if(!r)return;let o=Rb(r,n);o.length>0&&(e.needsConnection=!0,e.connectedDatabase=o);let a=Nb(r,i);a.length>0&&(e.connectedStorage=a)}ur(I0,"applyConnectionConfig");function $0(e,t){({ecs:E0,lambda:x0,ec2:A0})[e.type]?.(t,e)}ur($0,"applyTypeSpecificConfig");function kb(e,t,n,i){return e.map(r=>{let o=U(r.config.type,da)??"ecs",a={name:r.resourceName,type:o,needsConnection:!1,connectedDatabase:[],...r.variableName&&{variableName:r.variableName}};return I0(a,r,t,n),$0(a,r),Pb(a,r.config.services,i.database),wb(a,r.config.services,i.s3),a})}ur(kb,"convertComputeResources");import*as vt from"typescript";var K4=Object.defineProperty,X4=(e,t)=>K4(e,"name",{value:t,configurable:!0});function Rl(e){return Ne(e,t=>{if(!vt.isCallExpression(t)||!Ie(t,"addSchedule")||t.arguments.length<2)return null;let n=t.arguments[0],i=t.arguments[1];if(!vt.isStringLiteral(n)||!vt.isObjectLiteralExpression(i))return null;let r=B(i),o=b(r.schedule);if(o===void 0)return null;let a=i.properties.find(c=>vt.isPropertyAssignment(c)&&vt.isIdentifier(c.name)&&c.name.text==="target");return!a||!vt.isPropertyAssignment(a)||!vt.isIdentifier(a.initializer)?null:{id:n.text,schedule:o,targetVariableName:a.initializer.text}})}X4(Rl,"findSchedules");import*as ee from"typescript";import*as Be from"typescript";var J4=Object.defineProperty,Za=(e,t)=>J4(e,"name",{value:t,configurable:!0}),Ob=new Set(["S3Bucket"]);function T0(e,t,n){let i=Be.isIdentifier(e.name)?e.name.text:"";if(t.arguments&&t.arguments.length>=2){let r=t.arguments[1],o=Be.isStringLiteral(r)?r.text:"",a=t.arguments.length>=3?t.arguments[2]:void 0,c=a&&Be.isObjectLiteralExpression(a)?B(a):{};return{variableName:i,resourceName:o,bucketClass:n,config:c,node:e}}return null}Za(T0,"extractS3Resource");function C0(e,t){if(t.arguments.length<2)return null;let n=t.arguments[0],i=t.arguments[1];if(!Be.isStringLiteral(n)||!Be.isObjectLiteralExpression(i))return null;let r=B(i);return{variableName:nt(e)??"",resourceName:n.text,bucketClass:"StorageFactory",config:r,node:e}}Za(C0,"extractS3FactoryResource");function Db(e){return Ne(e,t=>{if(!Be.isVariableDeclaration(t)||!t.initializer||!Be.isNewExpression(t.initializer))return null;let n=t.initializer;if(!Be.isIdentifier(n.expression))return null;let i=n.expression.text;return Ob.has(i)?T0(t,n,i):null})}Za(Db,"findS3Resources");function Mb(e){return Ne(e,t=>{if(!Be.isCallExpression(t)||!Ie(t,"addStorage"))return null;let n=t.arguments[0];return Fe(n,"StorageFactory")?C0(t,n):null})}Za(Mb,"findS3FactoryResources");function jb(e){return e.map(t=>({name:t.resourceName,...b(t.config.bucketName)&&{bucketName:b(t.config.bucketName)},...j(t.config.publicReadAccess)===!0&&{publicReadAccess:!0},...N(t.config.websiteHosting)&&(()=>{let n=t.config.websiteHosting;return{websiteHosting:{indexDocument:b(n.indexDocument)??"index.html",...b(n.errorDocument)&&{errorDocument:b(n.errorDocument)}}}})(),...U(t.config.backupVaultTier,At)&&{backupVaultTier:U(t.config.backupVaultTier,At)},...j(t.config.versioned)!==void 0&&{versioned:j(t.config.versioned)},...U(t.config.encryption,Ri)&&{encryption:U(t.config.encryption,Ri)},...b(t.config.kmsKeyArn)&&{kmsKeyArn:b(t.config.kmsKeyArn)},...Array.isArray(t.config.cors)&&t.config.cors.length>0&&{cors:t.config.cors.filter(N).map(n=>({allowedOrigins:Array.isArray(n.allowedOrigins)?n.allowedOrigins.filter(i=>typeof i=="string"):[],allowedMethods:Array.isArray(n.allowedMethods)?n.allowedMethods.filter(i=>typeof i=="string"):[]}))},...N(t.config.deployment)&&(()=>{let n=t.config.deployment;return{deployment:{source:b(n.source)??"",...j(n.prune)!==void 0&&{prune:j(n.prune)},...N(n.cacheControl)&&(()=>{let i=n.cacheControl;return{cacheControl:{...R(i.maxAge)!==void 0&&{maxAge:R(i.maxAge)},...j(i.immutable)!==void 0&&{immutable:j(i.immutable)}}}})()}}})(),...U(t.config.stackPlacement,Qu)&&{stackPlacement:U(t.config.stackPlacement,Qu)},...t.variableName&&{variableName:t.variableName},...(()=>{let n=new Set(["bucketName","publicReadAccess","websiteHosting","backupVaultTier","versioned","encryption","kmsKeyArn","cors","deployment","stackPlacement"]),i=le(t.config,n);return i.length>0?{extraProperties:i}:{}})()}))}Za(jb,"convertS3Resources");var Q4=Object.defineProperty,An=(e,t)=>Q4(e,"name",{value:t,configurable:!0}),R0=new Set(["App","Architecture","DatabaseFactory","StorageFactory","ComputeFactory","getConfig","MessagingFactory","CdnFactory","Code","Runtime","FunctionUrlAuthType","NetworkFactory","PatternFactory","CrossPlanConnectionFactory"]);function Nl(e){return!!(e.startsWith("@fjall/")||e==="aws-cdk-lib"||e.startsWith("aws-cdk-lib/")||e==="constructs")}An(Nl,"isManagedModuleSpecifier");function Xe(e){let t=[];for(let n of e.statements){let i=n.getFullStart(),r=n.getEnd();if(ee.isImportDeclaration(n)){t.push({type:"import",node:n,startPos:i,endPos:r,isManaged:N0(n)});continue}if(ee.isVariableStatement(n)){t.push(P0(n,i,r));continue}if(ee.isExpressionStatement(n)){t.push(w0(n,i,r));continue}t.push({type:"custom",node:n,startPos:i,endPos:r,isManaged:!1})}return t}An(Xe,"classifyStatements");function N0(e){return ee.isStringLiteral(e.moduleSpecifier)?Nl(e.moduleSpecifier.text):!1}An(N0,"isManagedImport");function P0(e,t,n){for(let i of e.declarationList.declarations)if(i.initializer){if(Bt(i.initializer))return{type:"app-init",node:e,resourceName:ee.isIdentifier(i.name)?i.name.text:void 0,startPos:t,endPos:n,isManaged:!0};if(ee.isIdentifier(i.name)&&i.name.text==="appName"&&ee.isStringLiteral(i.initializer))return{type:"app-init",node:e,startPos:t,endPos:n,isManaged:!0};if(ee.isNewExpression(i.initializer)){let r=i.initializer;if(ee.isIdentifier(r.expression)){let o=r.expression.text;if(Ob.has(o)){let a=r.arguments&&r.arguments.length>=2&&ee.isStringLiteral(r.arguments[1])?r.arguments[1].text:void 0;return{type:"storage",node:e,resourceName:a,startPos:t,endPos:n,isManaged:!0}}}}if(ee.isCallExpression(i.initializer)){let r=zb(i.initializer,e,t,n);if(r.type!=="custom")return r}}return{type:"custom",node:e,startPos:t,endPos:n,isManaged:!1}}An(P0,"classifyVariableStatement");function w0(e,t,n){let i=e.expression;return ee.isCallExpression(i)?zb(i,e,t,n):{type:"custom",node:e,startPos:t,endPos:n,isManaged:!1}}An(w0,"classifyExpressionStatement");function zb(e,t,n,i){let r=e.expression;if(ee.isPropertyAccessExpression(r)&&ee.isIdentifier(r.expression)){let o=r.name.text;if(o==="addTags")return{type:"tags",node:t,startPos:n,endPos:i,isManaged:!0};let a={addDatabase:{type:"database",factory:"DatabaseFactory"},addCompute:{type:"compute",factory:"ComputeFactory"},addNetwork:{type:"network",factory:"NetworkFactory"},addMessaging:{type:"messaging",factory:"MessagingFactory"},addCdn:{type:"cdn",factory:"CdnFactory"},addPattern:{type:"pattern",factory:"PatternFactory"},addStorage:{type:"storage",factory:"StorageFactory"}}[o];if(a){let c=k0(e,a.factory);return{type:a.type,node:t,resourceName:c,startPos:n,endPos:i,isManaged:!0}}}return{type:"custom",node:t,startPos:n,endPos:i,isManaged:!1}}An(zb,"classifyCallExpression");function k0(e,t){if(e.arguments.length===0)return;let n=e.arguments[0];if(!ee.isCallExpression(n))return;let i=n.expression;if(!ee.isPropertyAccessExpression(i)||i.name.text!=="build"||!ee.isIdentifier(i.expression)||i.expression.text!==t||n.arguments.length===0)return;let r=n.arguments[0];if(ee.isStringLiteral(r))return r.text}An(k0,"extractResourceNameFromFactoryCall");import*as O0 from"typescript";var e2=Object.defineProperty,In=(e,t)=>e2(e,"name",{value:t,configurable:!0}),t2={import:"after-imports","app-init":"after-app-init",tags:"after-tags"};function D0(e){if(!e)return{position:"before-imports"};let t=t2[e.type];return t?{position:t}:{position:"after-resource",afterManagedResource:{type:e.type,name:e.resourceName}}}In(D0,"determineCustomBlockPosition");function Wa(e,t){let n=t??Xe(e),i=[],r=e.getFullText(),o=null;for(let a of n)if(a.type==="custom"&&!a.isManaged){let{position:c,afterManagedResource:u}=D0(o),l=M0(r,a.node),m=j0(r,a.node),p=e.getLineAndCharacterOfPosition(a.node.getStart());i.push({sourceText:l,position:c,afterManagedResource:u,originalLine:p.line+1,leadingComments:m.length>0?m:void 0})}else a.isManaged&&(o=a);return i}In(Wa,"extractCustomCodeBlocks");function M0(e,t){let n=t.getFullStart(),i=t.getEnd(),r=e.slice(n,i).split(`
 `),o=r.findIndex(a=>a.trim()!=="");return r.slice(o===-1?0:o).join(`
 `)}In(M0,"getStatementTextWithComments");function j0(e,t){let n=[],i=O0.getLeadingCommentRanges(e,t.getFullStart());if(i)for(let r of i){let o=e.slice(r.pos,r.end);n.push(o)}return n}In(j0,"extractLeadingComments");function Bi(e,t,n,i){let r=i??Xe(e);for(let o of r)if(o.type===t&&o.resourceName===n)return{startPos:o.startPos,endPos:o.endPos,node:o.node};return null}In(Bi,"findManagedResourcePosition");function Lb(e,t,n){let i=n??Xe(e),r=null;for(let o of i)o.type===t&&o.isManaged&&(r=o);return r}In(Lb,"getLastManagedStatementOfType");function Ub(e,t){let n=t??Xe(e),i={import:[],"app-init":[],tags:[],database:[],compute:[],storage:[],network:[],messaging:[],cdn:[],pattern:[],"vpc-peer":[],"vpc-peer-accepter":[],"cross-plan-connection":[],custom:[]};for(let r of n)i[r.type].push(r);return i}In(Ub,"getManagedResourcesByType");import*as lr from"typescript";import*as qa from"typescript";var r2=Object.defineProperty,Fb=(e,t)=>r2(e,"name",{value:t,configurable:!0}),n2=["S","N","B"];function Ha(e){if(!N(e))return;let t=b(e.name),n=U(e.type,n2);if(!(!t||!n))return{name:t,type:n}}Fb(Ha,"parseDynamoDBKey");function Bb(e){let t=e.node;if(!qa.isCallExpression(t))return null;let n=t.arguments[0];if(!qa.isCallExpression(n)||n.arguments.length<2)return null;let i=n.arguments[1];if(!qa.isObjectLiteralExpression(i))return null;let r=B(i),o=Ha(r.partitionKey);if(!o)return null;let a={resourceName:e.resourceName,partitionKey:o,node:e.node};e.variableName&&(a.variableName=e.variableName);let c=Ha(r.sortKey);if(c&&(a.sortKey=c),Array.isArray(r.globalSecondaryIndexes)){let p=r.globalSecondaryIndexes.filter(N).map(g=>{let v=Ha(g.partitionKey);if(!v)return null;let A=b(g.indexName);if(!A)return null;let X={indexName:A,partitionKey:v},z=Ha(g.sortKey);return z&&(X.sortKey=z),X}).filter(g=>g!==null);p.length>0&&(a.globalSecondaryIndexes=p)}let u=b(r.ttlAttribute);u&&(a.ttlAttribute=u);let l=j(r.stream);l!==void 0&&(a.stream=l);let m=le(r,new Set(["type","databaseName","partitionKey","sortKey","globalSecondaryIndexes","ttlAttribute","stream"]));return m.length>0&&(a.extraProperties=m),a}Fb(Bb,"extractDynamoDBFields");function Pl(e){if(e.length!==0)return e.map(t=>({name:t.resourceName,partitionKey:t.partitionKey,...Ke({sortKey:t.sortKey,globalSecondaryIndexes:t.globalSecondaryIndexes,ttlAttribute:t.ttlAttribute,stream:t.stream,variableName:t.variableName,extraProperties:t.extraProperties})}))}Fb(Pl,"convertDynamoDBResources");import*as Ya from"typescript";var i2=Object.defineProperty,z0=(e,t)=>i2(e,"name",{value:t,configurable:!0}),o2=new Set(["type","databaseName","instanceType","coldTier","optimiseSchedule","backupSchedule","backupRetentionDays"]);function Vb(e){let t=e.node;if(!Ya.isCallExpression(t))return null;let n=t.arguments[0];if(!Ya.isCallExpression(n)||n.arguments.length<2)return null;let i=n.arguments[1];if(!Ya.isObjectLiteralExpression(i))return null;let r=B(i),o={resourceName:e.resourceName,databaseName:e.databaseName,node:e.node};e.variableName&&(o.variableName=e.variableName);let a=b(r.instanceType);a&&(o.instanceType=a);let c=r.coldTier;c===!1?o.coldTier=!1:N(c)&&b(c.mode)==="s3"&&(o.coldTier={mode:"s3"});let u=r.optimiseSchedule;if(u===!1)o.optimiseSchedule=!1;else{let g=b(u);g&&(o.optimiseSchedule=g)}let l=r.backupSchedule;if(l===!1)o.backupSchedule=!1;else{let g=b(l);g&&(o.backupSchedule=g)}let m=R(r.backupRetentionDays);m!==void 0&&(o.backupRetentionDays=m);let p=le(r,o2);return p.length>0&&(o.extraProperties=p),o}z0(Vb,"extractClickHouseFields");function wl(e){if(e.length!==0)return e.map(t=>({name:t.resourceName,type:"ClickHouse",databaseName:t.databaseName,...Ke({instanceType:t.instanceType,coldTier:t.coldTier,optimiseSchedule:t.optimiseSchedule,backupSchedule:t.backupSchedule,backupRetentionDays:t.backupRetentionDays,variableName:t.variableName,extraProperties:t.extraProperties})}))}z0(wl,"convertClickHouseResources");var a2=Object.defineProperty,Vi=(e,t)=>a2(e,"name",{value:t,configurable:!0});function L0(e){let t=b(e.databaseEngine);if(t!==void 0&&dt(Ti,t))return t;let n=e.engine;if($t(n)){let i=String(n.__call);if(i.includes("postgres")||i.includes("auroraPostgres"))return"postgresql";if(i.includes("mysql")||i.includes("auroraMysql"))return"mysql"}}Vi(L0,"extractDatabaseEngine");function U0(e){let t=e.engine;if($t(t))return String(t.__call)}Vi(U0,"extractEngineExpression");var s2=new Set(["type","databaseName","databaseEngine","engine","vpc","port","deletionProtection","instanceType","multiAz","publiclyAccessible","enableSecretRotation","encryption","databaseInsights","proxy","readReplica","credentials","writer","readers","backupRetention","preferredMaintenanceWindow","primaryRegion","secondaryRegions","globalClusterIdentifier","enableGlobalWriteForwarding","snapshotIdentifier","allocatedStorage","monitoringInterval","snapshotUsername"]);function F0(e,t,n){if(n.arguments.length<2)return null;let i=n.arguments[0],r=n.arguments[1];if(!lr.isStringLiteral(i)&&!lr.isTemplateExpression(i))return null;let o=lr.isStringLiteral(i)?i.text:Al(e,i);if(!lr.isObjectLiteralExpression(r))return null;let a=B(r),c={resourceName:o,type:b(a.type)??"",databaseName:b(a.databaseName)??"",databaseEngine:L0(a),engineExpression:U0(a),port:R(a.port),deletionProtection:j(a.deletionProtection),instanceType:b(a.instanceType),multiAz:j(a.multiAz),publiclyAccessible:j(a.publiclyAccessible),enableSecretRotation:j(a.enableSecretRotation),encryption:Pe(a.encryption,gt()),databaseInsights:cr(a.databaseInsights,gt()),proxy:cr(a.proxy,gt()),readReplica:cr(a.readReplica,gt()),credentials:Pe(a.credentials,gt()),writer:Pe(a.writer,gt()),readers:cr(a.readers,gt()),backupRetention:R(a.backupRetention),preferredMaintenanceWindow:b(a.preferredMaintenanceWindow),primaryRegion:b(a.primaryRegion),secondaryRegions:de(a.secondaryRegions),globalClusterIdentifier:b(a.globalClusterIdentifier),enableGlobalWriteForwarding:j(a.enableGlobalWriteForwarding),allocatedStorage:R(a.allocatedStorage),monitoringInterval:R(a.monitoringInterval),snapshotIdentifier:b(a.snapshotIdentifier),snapshotUsername:b(a.snapshotUsername),node:t},u=nt(t);u&&(c.variableName=u);let l=le(a,s2);return l.length>0&&(c.extraProperties=l),c}Vi(F0,"extractDatabaseResource");function Gb(e){return Ne(e,t=>{if(!lr.isCallExpression(t)||!Ie(t,"addDatabase"))return null;let n=t.arguments[0];return Fe(n,"DatabaseFactory")?F0(e,t,n):null})}Vi(Gb,"findDatabaseResources");function Zb(e){let t=[],n=[],i=[];for(let r of e)if(r.type==="DynamoDB"){let o=Bb(r);o&&n.push(o)}else if(r.type==="ClickHouse"){let o=Vb(r);o&&i.push(o)}else t.push(r);return{databases:t,dynamodb:n,clickhouse:i}}Vi(Zb,"splitDatabaseResources");var c2=["Instance","Aurora","GlobalAurora"];function Wb(e){return e.filter(t=>t.type!=="DynamoDB").map(t=>({name:t.resourceName,type:dt(c2,t.type)?t.type:"Instance",databaseName:t.databaseName,...Ke({port:t.port,deletionProtection:t.deletionProtection,instanceType:t.instanceType,multiAz:t.multiAz,publiclyAccessible:t.publiclyAccessible,enableSecretRotation:t.enableSecretRotation,encryption:t.encryption,databaseInsights:t.databaseInsights,proxy:t.proxy,readReplica:t.readReplica,credentials:t.credentials,writer:t.writer,readers:t.readers,backupRetention:t.backupRetention,preferredMaintenanceWindow:t.preferredMaintenanceWindow,primaryRegion:t.primaryRegion,secondaryRegions:t.secondaryRegions,globalClusterIdentifier:t.globalClusterIdentifier,enableGlobalWriteForwarding:t.enableGlobalWriteForwarding,allocatedStorage:t.allocatedStorage,monitoringInterval:t.monitoringInterval,variableName:t.variableName,databaseEngine:t.databaseEngine,engineExpression:t.engineExpression,extraProperties:t.extraProperties})}))}Vi(Wb,"convertDatabaseResources");import*as Zi from"typescript";var u2=Object.defineProperty,Gi=(e,t)=>u2(e,"name",{value:t,configurable:!0});function B0(e,t){if(t.arguments.length<2)return null;let n=t.arguments[0],i=t.arguments[1];if(!Zi.isStringLiteral(n)||!Zi.isObjectLiteralExpression(i))return null;let r=B(i),o={resourceName:n.text,queueType:b(r.queueType)??"standard",visibilityTimeout:R(r.visibilityTimeout),retentionPeriod:R(r.messageRetentionPeriod),contentBasedDeduplication:j(r.contentBasedDeduplication),removalPolicy:b(r.removalPolicy),node:e},a=nt(e);a&&(o.variableName=a);let c=le(r,new Set(["type","queueType","visibilityTimeout","messageRetentionPeriod","contentBasedDeduplication","removalPolicy"]));return c.length>0&&(o.extraProperties=c),o}Gi(B0,"extractSQSResource");function Hb(e){if(e!=null){if(e===!1)return!1;if(N(e))return Ke({enabled:j(e.enabled),maxReceiveCount:R(e.maxReceiveCount)})}}Gi(Hb,"parseDeadLetterQueueConfig");function qb(e){return Ne(e,t=>{if(!Zi.isCallExpression(t)||!Ie(t,"addMessaging"))return null;let n=t.arguments[0];return Fe(n,"MessagingFactory")?B0(t,n):null})}Gi(qb,"findSQSResources");function Yb(e){if(e.length!==0)return e.map(t=>({name:t.resourceName,queueType:t.queueType==="fifo"?"fifo":"standard",...Ke({visibilityTimeout:t.visibilityTimeout,retentionPeriod:t.retentionPeriod,contentBasedDeduplication:t.contentBasedDeduplication,removalPolicy:G0(t.removalPolicy),variableName:t.variableName,extraProperties:t.extraProperties})}))}Gi(Yb,"convertSQSResources");var l2=new Set(qv.options);function V0(e){return l2.has(e)}Gi(V0,"isSqsRemovalPolicy");function G0(e){return e!==void 0&&V0(e)?e:void 0}Gi(G0,"toSqsRemovalPolicy");import*as Wi from"typescript";var d2=Object.defineProperty,Ka=(e,t)=>d2(e,"name",{value:t,configurable:!0});function W0(e){if(e.arguments.length<2)return null;let t=e.arguments[0],n=e.arguments[1];return!Wi.isStringLiteral(t)||!Wi.isObjectLiteralExpression(n)?null:{resourceName:t.text,config:B(n),node:e}}Ka(W0,"extractCDNResource");function H0(e,t,n){let i=t.find(o=>o.variableName===e);if(i)return i.resourceName;let r=n.find(o=>o.variableName===e||o.resourceName.charAt(0).toLowerCase()+o.resourceName.slice(1)===e);return r?r.resourceName:e}Ka(H0,"resolveOriginIdentifier");var Z0=["CACHING_OPTIMIZED","CACHING_DISABLED"];function Kb(e){return rt(e,t=>{if(!Wi.isCallExpression(t)||!Ie(t,"addCdn"))return;let n=t.arguments[0];if(Fe(n,"CdnFactory"))return W0(n)??void 0})}Ka(Kb,"findCDNResource");function Xb(e,t,n){if(!e)return;let i=e,r=i.config,o=Ka(p=>sr(p)?H0(p.__identifier,t,n):b(p)??"","resolveOrigin"),a=o(r.origin),c={name:i.resourceName,defaultOriginRef:a};if(Array.isArray(r.behaviours)){let p=r.behaviours.filter(N).map(g=>({pathPattern:b(g.pathPattern)??"",originRef:o(g.origin),...U(g.cachePolicy,Z0)!==void 0&&{cachePolicy:U(g.cachePolicy,Z0)}}));p.length>0&&(c.behaviours=p)}let u=b(r.customDomain);if(u)c.customDomain=u;else{let p=de(r.domainNames);p&&p.length>0&&(c.customDomain=p[0])}let l=b(r.certificateArn);if(l&&(c.certificateArn=l),r.accessGate!==void 0){if(r.accessGate===!1)c.accessGate=!1;else if(N(r.accessGate)){let p=r.accessGate,g=b(p.type),v=b(p.username),A=b(p.password);g==="basic-auth"&&v&&A&&(c.accessGate={type:"basic-auth",username:v,password:A})}}let m=le(r,new Set(["originType","origin","behaviours","customDomain","domainNames","certificateArn","accessGate"]));return m.length>0&&(c.extraProperties=m),c}Ka(Xb,"convertCDNResource");import*as pe from"typescript";var m2=Object.defineProperty,ot=(e,t)=>m2(e,"name",{value:t,configurable:!0}),p2=new Set(Wv.options);function q0(e){if(e!==void 0)return p2.has(e)?e:void 0}ot(q0,"asFlowLogDestination");function Jb(e){return{maxAzs:R(e.maxAzs),natGateways:cr(e.natGateways,t=>({count:R(t.count)})),flowLogs:cr(e.flowLogs,t=>({destination:b(t.destination),retentionDays:R(t.retentionDays)})),vpcEndpoints:N(e.vpcEndpoints)?e.vpcEndpoints:void 0}}ot(Jb,"parseNetworkConfigFields");function Y0(e,t){if(t.arguments.length<2)return null;let n=t.arguments[0],i=t.arguments[1];if(!pe.isStringLiteral(n))return null;let r=n.text,o=pe.isObjectLiteralExpression(i)?B(i):{},a=Jb(o),c={name:r,config:Ke({...a}),node:e},u=nt(e);return u&&(c.variableName=u),c}ot(Y0,"extractNetworkResource");function Qb(e){return rt(e,t=>{if(!Bt(t)||t.arguments.length<=1)return;let n=t.arguments[1];if(pe.isObjectLiteralExpression(n)){for(let i of n.properties)if(Dr(i,"network")&&pe.isObjectLiteralExpression(i.initializer)){for(let r of i.initializer.properties)if(Dr(r,"useExisting")&&pe.isStringLiteral(r.initializer))return r.initializer.text}}})}ot(Qb,"findVpcId");function ey(e){return rt(e,t=>{if(!Bt(t)||t.arguments.length<=1)return;let n=t.arguments[1];if(pe.isObjectLiteralExpression(n)){for(let i of n.properties)if(Dr(i,"network")){if(i.initializer.kind===pe.SyntaxKind.FalseKeyword)return;if(pe.isObjectLiteralExpression(i.initializer)&&!i.initializer.properties.some(r=>Dr(r,"useExisting"))){let r=B(i.initializer);return Jb(r)}}}})}ot(ey,"findNetworkConfig");function ty(e){return rt(e,t=>{if(!Bt(t)||t.arguments.length<=1)return;let n=t.arguments[1];if(pe.isObjectLiteralExpression(n)){for(let i of n.properties)if(Dr(i,"backup")){if(i.initializer.kind===pe.SyntaxKind.FalseKeyword)return!1;if(pe.isObjectLiteralExpression(i.initializer)){let r=B(i.initializer),o=b(r.tier);if(o)return{tier:o}}}}})}ot(ty,"findBackupConfig");function ry(e){return rt(e,t=>{if(!Bt(t)||t.arguments.length<=1)return;let n=t.arguments[1];if(pe.isObjectLiteralExpression(n)){for(let i of n.properties)if(Dr(i,"tunnel")){if(i.initializer.kind===pe.SyntaxKind.FalseKeyword)return!1;if(i.initializer.kind===pe.SyntaxKind.TrueKeyword)return!0;if(pe.isObjectLiteralExpression(i.initializer)){let r=B(i.initializer),o=b(r.instanceType);return o?{instanceType:o}:{}}}}})}ot(ry,"findTunnelConfig");function ny(e){return Ne(e,t=>{if(!pe.isCallExpression(t)||!Ie(t,"addNetwork"))return null;let n=t.arguments[0];return Fe(n,"NetworkFactory")?Y0(t,n):null})}ot(ny,"findNetworkResources");function iy(e){let t=e.flowLogs;return{...Ke({maxAzs:e.maxAzs,natGateways:e.natGateways,vpcEndpoints:e.vpcEndpoints}),...t!==void 0&&{flowLogs:t===!1?!1:Ke({destination:q0(t.destination),retentionDays:t.retentionDays})}}}ot(iy,"buildNetworkFields");function oy(e){if(e)return iy(e)}ot(oy,"convertNetworkConfig");function ay(e){if(e===void 0)return;if(e===!1)return!1;let t=e.tier;if(dt(At,t))return{tier:t}}ot(ay,"convertBackupConfig");function sy(e){if(e===void 0)return;if(e===!1)return!1;if(e===!0)return{};let t={};return e.instanceType&&(t.instanceType=e.instanceType),t}ot(sy,"convertTunnelConfig");function cy(e){if(!(!e||e.length===0))return e.map(t=>({name:t.name,...iy(t.config)}))}ot(cy,"convertAdditionalNetworks");import*as Hi from"typescript";var f2=Object.defineProperty,_e=(e,t)=>f2(e,"name",{value:t,configurable:!0}),g2=["Instance","Aurora"],h2=["postgresql","mysql"];function kl(e){if(!N(e))return;let t={...e.memorySize!==void 0&&{memorySize:R(e.memorySize)},...e.timeout!==void 0&&{timeout:R(e.timeout)},...e.ephemeralStorageSize!==void 0&&{ephemeralStorageSize:R(e.ephemeralStorageSize)}};return Object.keys(t).length>0?t:void 0}_e(kl,"parseLambdaConfig");function K0(e){return ht(e,"database",t=>({type:U(t.type,g2),databaseName:b(t.databaseName),databaseEngine:U(t.databaseEngine,h2),deletionProtection:j(t.deletionProtection),backupRetention:R(t.backupRetention),port:R(t.port),publiclyAccessible:j(t.publiclyAccessible),allowedIpCidr:b(t.allowedIpCidr),instanceType:b(t.instanceType),allocatedStorage:R(t.allocatedStorage),multiAz:j(t.multiAz),allowVpcAccess:j(t.allowVpcAccess),monitoringInterval:R(t.monitoringInterval),preferredMaintenanceWindow:b(t.preferredMaintenanceWindow),snapshotIdentifier:b(t.snapshotIdentifier),snapshotUsername:b(t.snapshotUsername),readReplica:Ui(t.readReplica),writer:Pe(t.writer,gt()),readers:Ui(t.readers),databaseInsights:Ui(t.databaseInsights),proxy:Ui(t.proxy),credentials:Pe(t.credentials,gt()),encryption:Pe(t.encryption,gt())}))}_e(K0,"extractPatternDatabaseConfig");function X0(e){return ht(e,"compute",t=>({server:Pe(t.server,kl),imageOptimisation:Pe(t.imageOptimisation,kl),revalidation:Pe(t.revalidation,kl)}))}_e(X0,"extractPatternComputeConfig");function J0(e){let t=_e(n=>({versioned:j(n.versioned)}),"parseVersionedConfig");return ht(e,"storage",n=>({assets:Pe(n.assets,t),cache:Pe(n.cache,t),media:Pe(n.media,t)}))}_e(J0,"extractPatternStorageConfig");function Q0(e){return ht(e,"messaging",t=>({revalidationQueue:Pe(t.revalidationQueue,n=>({visibilityTimeout:R(n.visibilityTimeout),messageRetentionPeriod:R(n.messageRetentionPeriod),maxMessageSize:R(n.maxMessageSize),deadLetterQueue:Hb(n.deadLetterQueue)}))}))}_e(Q0,"extractPatternMessagingConfig");function eC(e){return ht(e,"cdn",t=>({domainNames:de(t.domainNames),certificateArn:b(t.certificateArn)}))}_e(eC,"extractPatternCdnConfig");function tC(e){return ht(e,"environment",t=>{let n=Object.fromEntries(Object.entries(t).filter(i=>typeof i[1]=="string"));return Object.keys(n).length>0?n:void 0})}_e(tC,"extractPatternEnvironmentConfig");function rC(e,t){let n=nC(e);return{name:t,source:b(e.source),build:ht(e,"build",i=>({command:b(i.command),outputDir:b(i.outputDir)})),routing:U(e.routing,Yo),security:ht(e,"security",i=>({headers:j(i.headers),contentSecurityPolicy:b(i.contentSecurityPolicy)})),domain:b(e.domain),forms:ht(e,"forms",i=>({to:b(i.to),from:b(i.from),corsOrigin:b(i.corsOrigin),maxConcurrency:R(i.maxConcurrency)})),cdn:ht(e,"cdn",i=>({behaviours:Array.isArray(i.behaviours)?i.behaviours:void 0})),...n.length>0&&{unreadableFields:n}}}_e(rC,"extractStaticSiteConfig");function uy(e){return ft(e)&&("__identifier"in e||"__expression"in e||"__call"in e||"__unknown"in e)}_e(uy,"isUnreadableRef");function nC(e){let t=[],n=_e((r,o)=>{uy(r)&&t.push(o)},"check");n(e.source,"source"),n(e.routing,"routing"),n(e.domain,"domain");let i=[[e.build,"build",["command","outputDir"]],[e.security,"security",["headers","contentSecurityPolicy"]],[e.forms,"forms",["to","from","corsOrigin","maxConcurrency"]],[e.cdn,"cdn",["behaviours"]]];for(let[r,o,a]of i)if(uy(r))t.push(o);else if(N(r))for(let c of a)n(r[c],`${o}.${c}`);return t}_e(nC,"collectUnreadableStaticSiteFields");function Mr(e){return e!==void 0&&e!==""}_e(Mr,"isReadable");function Ol(e,t){return new Error(`Static-site pattern '${e}' in infrastructure.ts: Fjall could not read ${t.join(", ")} as inline literal(s). Fjall reads these fields out of the file and writes them back, so they must be written inline (source: "./site"), not as a variable or an expression.`)}_e(Ol,"unreadableStaticSiteFields");function iC(e,t){let n=t.to;if(!Mr(n))throw Ol(e,["forms.to"]);return{to:n,...t.from!==void 0&&{from:t.from},...t.corsOrigin!==void 0&&{corsOrigin:t.corsOrigin},...t.maxConcurrency!==void 0&&{maxConcurrency:t.maxConcurrency}}}_e(iC,"readStaticSiteForms");function oC(e,t){if(e.arguments.length<2)return null;let n=e.arguments[0],i=e.arguments[1];if(!Hi.isStringLiteral(n)||!Hi.isObjectLiteralExpression(i))return null;let r=n.text,o=B(i),a=o.type,c=nt(t),u=b(o.name);return u?a==="payload"||a==="nextjs"?{variableName:c,constructId:r,type:a,config:{name:u,domain:b(o.domain),database:K0(o),compute:X0(o),storage:J0(o),messaging:Q0(o),cdn:eC(o),environment:tC(o)},node:e}:a==="staticsite"?{variableName:c,constructId:r,type:"staticsite",config:rC(o,u),node:e}:null:null}_e(oC,"extractPatternResource");function ly(e){return Ne(e,t=>{if(!Hi.isCallExpression(t)||!Ie(t,"addPattern"))return null;let n=t.arguments[0];return Fe(n,"PatternFactory")?oC(n,t):null})}_e(ly,"findPatternResources");function dy(e,t){if(!t||t.length===0)return;let n=t[0];if(e.pattern=n.type,n.type==="staticsite"){let{config:r}=n,o=r.source,a=r.build?.command,c=r.build?.outputDir;if(r.unreadableFields!==void 0)throw Ol(r.name,r.unreadableFields);if(!Mr(o)||!Mr(a)||!Mr(c)){let u=[];throw Mr(o)||u.push("source"),Mr(a)||u.push("build.command"),Mr(c)||u.push("build.outputDir"),Ol(r.name,u)}e.patternConfig={type:"staticsite",name:r.name,source:o,build:{command:a,outputDir:c},routing:r.routing,security:r.security,domain:r.domain,...r.forms!==void 0&&{forms:iC(r.name,r.forms)},cdn:r.cdn};return}let{config:i}=n;e.patternConfig={type:n.type,name:i.name,domain:i.domain,database:i.database,compute:i.compute,storage:i.storage,messaging:i.messaging,cdn:i.cdn,environment:i.environment}}_e(dy,"applyPatternConfig");var v2=Object.defineProperty,Dl=(e,t)=>v2(e,"name",{value:t,configurable:!0});function aC(e,t){for(let n of t){let i=e.compute.find(r=>r.variableName===n.targetVariableName);i!==void 0&&i.type==="lambda"&&(i.scheduleExpression=n.schedule)}}Dl(aC,"applyScheduleBackfill");function sC(e,t){Object.keys(t).length>0&&(e.tags={...t}),t[ja]&&(e.owner=t[ja])}Dl(sC,"applyTagsAndOwner");function cC(e){let t=[];for(let n of e)if(Nl(n.moduleSpecifier))if(n.moduleSpecifier==="@fjall/components-infrastructure"||n.moduleSpecifier==="@fjall/infrastructure"){let i=n.namedImports.filter(r=>!R0.has(r));i.length>0&&t.push({moduleSpecifier:n.moduleSpecifier,namedImports:i,defaultImport:n.defaultImport})}else(n.namedImports.length>0||n.defaultImport)&&t.push(n);return t.length>0?t:void 0}Dl(cC,"computeAdditionalManagedImports");function $n(e,t,n){let i={appName:t,type:"standard",database:[],s3:[],compute:[]};if(dy(i,e.patternResources),e.vpcId&&(i.vpcId=e.vpcId),i.network=oy(e.network),i.backup=ay(e.backup),i.tunnel=sy(e.tunnel),i.additionalNetworks=cy(e.networkResources),sC(i,e.tags),i.database=Wb(e.databaseResources),i.dynamodb=Pl(e.dynamodbResources),i.clickhouse=wl(e.clickhouseResources),i.sqs=Yb(e.sqsResources),i.cdn=Xb(e.cdnResource,e.s3Resources,e.computeResources),i.s3=jb(e.s3Resources),i.compute=kb(e.computeResources,e.databaseResources,e.s3Resources,i),aC(i,e.schedules),i.additionalManagedImports=cC(e.imports),n?.skipValidation)return i;try{return RT.parse(i)}catch(r){if(r instanceof s.ZodError){let o=ha(r);throw new Error(`Invalid infrastructure configuration:
 ${o}`)}throw r}}Dl($n,"convertToResourcePlan");var b2=Object.defineProperty,qi=(e,t)=>b2(e,"name",{value:t,configurable:!0});function jr(e,t){let n=H.createSourceFile("infrastructure.ts",e,H.ScriptTarget.Latest,!0,H.ScriptKind.TS),i=uC(n),{appVariableName:r,appName:o}=dC(n),a=Qb(n),c=ey(n),u=ty(n),l=ry(n),m=ny(n),p=Gb(n),{databases:g,dynamodb:v,clickhouse:A}=Zb(p),X=qb(n),z=Kb(n),xe=[...Db(n),...Mb(n)],br=Tl(n),ke=Rl(n),ne=ly(n),ge=mC(n),Pn={sourceFile:n,imports:i,appVariableName:r,appName:o,vpcId:a,network:c,backup:u,tunnel:l,networkResources:m,databaseResources:g,dynamodbResources:v,clickhouseResources:A,sqsResources:X,cdnResource:z,s3Resources:xe,computeResources:br,schedules:ke,patternResources:ne,tags:ge};return t?.extractCustomCode&&(Pn.customCodeBlocks=Wa(n),Pn.classifiedStatements=Xe(n)),Pn}qi(jr,"parseInfrastructure");function uC(e){let t=[];return H.forEachChild(e,n=>{if(H.isImportDeclaration(n)){if(!H.isStringLiteral(n.moduleSpecifier))return;let i={moduleSpecifier:n.moduleSpecifier.text,namedImports:[]};n.importClause&&(n.importClause.name&&(i.defaultImport=n.importClause.name.text),n.importClause.namedBindings&&H.isNamedImports(n.importClause.namedBindings)&&(i.namedImports=n.importClause.namedBindings.elements.map(r=>r.name.text))),t.push(i)}}),t}qi(uC,"extractImports");function lC(e,t){return H.isStringLiteral(t)?t.text:H.isIdentifier(t)?Fa(e,t.text)??"":H.isPropertyAccessExpression(t)?Ba(e,t)??"":""}qi(lC,"resolveAppName");function dC(e){return rt(e,t=>{if(H.isVariableStatement(t))for(let n of t.declarationList.declarations){if(!n.initializer||!Bt(n.initializer))continue;let i=H.isIdentifier(n.name)?n.name.text:"",r=n.initializer.arguments.length>0?lC(e,n.initializer.arguments[0]):"";return{appVariableName:i,appName:r}}})??{appVariableName:"",appName:""}}qi(dC,"findAppVariable");function mC(e){let t={};function n(i){if(H.isCallExpression(i)&&H.isPropertyAccessExpression(i.expression)&&i.expression.name.text==="addTags"&&H.isIdentifier(i.expression.expression)&&i.arguments.length>0){let r=i.arguments[0];if(H.isObjectLiteralExpression(r)){let o=B(r);for(let[a,c]of Object.entries(o))typeof c=="string"?t[a]=c:Or(c)&&(t[a]="default-value")}}H.forEachChild(i,n)}return qi(n,"visit"),n(e),t}qi(mC,"extractTags");import*as Yi from"typescript";var y2=Object.defineProperty,$e=(e,t)=>y2(e,"name",{value:t,configurable:!0});function Ki(e,t,n){return e.slice(0,t)+n+e.slice(t)}$e(Ki,"insertAtPosition");function Ml(e,t){return e.find(n=>n.type===t)}$e(Ml,"findClassification");function my(e,t){return e.filter(n=>n.type===t).pop()}$e(my,"findLastClassification");function zr(e){return Yi.createSourceFile("infrastructure.ts",e,Yi.ScriptTarget.Latest,!0,Yi.ScriptKind.TS)}$e(zr,"parseSourceFile");function jl(e,t){return e.endsWith(`
@@ -491,7 +491,7 @@ cdk.out/
 `,H2=JSON.stringify({compilerOptions:{target:"ES2020",module:"commonjs",lib:["es2020","dom"],declaration:!0,strict:!0,noImplicitAny:!0,strictNullChecks:!0,noImplicitThis:!0,alwaysStrict:!0,noUnusedLocals:!1,noUnusedParameters:!1,noImplicitReturns:!0,noFallthroughCasesInSwitch:!1,inlineSourceMap:!0,inlineSources:!0,experimentalDecorators:!0,strictPropertyInitialization:!1,typeRoots:["./node_modules/@types"]},exclude:["node_modules","cdk.out"]},null,2)+`
 `,q2=JSON.stringify({app:"npx ts-node --prefer-ts-exts --transpile-only infrastructure.ts",assetMetadata:!1,pathMetadata:!1,versionReporting:!1,watch:{include:["**"],exclude:["README.md","cdk*.json","**/*.d.ts","**/*.js","tsconfig.json","package*.json","yarn.lock","node_modules","test"]},context:{"@aws-cdk/aws-lambda:recognizeLayerVersion":!0,"@aws-cdk/core:checkSecretUsage":!0,"@aws-cdk/core:target-partitions":["aws","aws-cn"],"@aws-cdk-containers/ecs-service-extensions:enableDefaultLogDriver":!0,"@aws-cdk/aws-ec2:uniqueImdsv2TemplateName":!0,"@aws-cdk/aws-ecs:arnFormatIncludesClusterName":!0,"@aws-cdk/aws-iam:minimizePolicies":!0,"@aws-cdk/core:validateSnapshotRemovalPolicy":!0,"@aws-cdk/aws-codepipeline:crossAccountKeyAliasStackSafeResourceName":!0,"@aws-cdk/aws-s3:createDefaultLoggingPolicy":!0,"@aws-cdk/aws-sns-subscriptions:restrictSqsDescryption":!0,"@aws-cdk/aws-apigateway:disableCloudWatchRole":!0,"@aws-cdk/core:enablePartitionLiterals":!0,"@aws-cdk/aws-events:eventsTargetQueueSameAccount":!0,"@aws-cdk/aws-iam:standardizedServicePrincipals":!0,"@aws-cdk/aws-ecs:disableExplicitDeploymentControllerForCircuitBreaker":!0,"@aws-cdk/aws-iam:importedRoleStackSafeDefaultPolicyName":!0,"@aws-cdk/aws-s3:serverAccessLogsUseBucketPolicy":!0,"@aws-cdk/aws-route53-patters:useCertificate":!0,"@aws-cdk/customresources:installLatestAwsSdkDefault":!1,"@aws-cdk/aws-rds:databaseProxyUniqueResourceName":!0,"@aws-cdk/aws-codedeploy:removeAlarmsFromDeploymentGroup":!0,"@aws-cdk/aws-apigateway:authorizerChangeDeploymentLogicalId":!0,"@aws-cdk/aws-ec2:launchTemplateDefaultUserData":!0,"@aws-cdk/aws-secretsmanager:useAttachedSecretResourcePolicyForSecretTargetAttachments":!0,"@aws-cdk/aws-redshift:columnId":!0,"@aws-cdk/aws-stepfunctions-tasks:enableEmrServicePolicyV2":!0,"@aws-cdk/aws-ec2:restrictDefaultSecurityGroup":!0,"@aws-cdk/aws-apigateway:requestValidatorUniqueId":!0,"@aws-cdk/aws-kms:aliasNameRef":!0,"@aws-cdk/aws-autoscaling:generateLaunchTemplateInsteadOfLaunchConfig":!0,"@aws-cdk/core:includePrefixInUniqueNameGeneration":!0,"@aws-cdk/aws-opensearchservice:enableOpensearchMultiAzWithStandby":!0}},null,2)+`
 `;var Y2=Object.defineProperty,Fr=(e,t)=>Y2(e,"name",{value:t,configurable:!0});function ZR(e,t,n){let i=e.root?GR.join(e.root,t):t;try{if(Qi.existsSync(i)){let r=`${i}.bak`,o=`${r}.tmp`;Qi.writeFileSync(o,n),Qi.renameSync(o,r)}return P(void 0)}catch(r){let o=Et(r);return Cu.warn("Generator",`Failed to create backup of ${t}`,{error:gi(o.message)}),$(o)}}Fr(ZR,"createInfrastructureBackup");function K2(e,...t){let n={};for(let i of t)e[i]!==void 0&&(n[i]=e[i]);return n}Fr(K2,"pickDefined");function WR(e,t){try{let n=jr(e,{extractCustomCode:!0}),i=$n(n,t,{skipValidation:!0});return n.customCodeBlocks?.length&&(i.customCodeBlocks=n.customCodeBlocks),P({parsed:n,plan:i})}catch(n){return $(Et(n))}}Fr(WR,"parseAndBuildPlan");function HR(e,t){let n=WR(e,t);if(!n.success)throw new Error(`Failed to parse infrastructure: ${n.error.message}`,{cause:n.error});return n.data}Fr(HR,"parseAndBuildPlanOrThrow");function qR(e,t,n){let i=e.safeParse(t);if(!i.success)throw new Error(`Invalid ${n} generator options:
-${ha(i.error)}`);return i.data}Fr(qR,"validateGeneratorOptions");function YR(e,t){let n=Jt(t),i=e.read(n)?.toString();if(!i)throw new Error(`App '${t}' not found. Expected infrastructure.ts at: ${n}`);return{path:n,content:i}}Fr(YR,"readInfrastructureOrThrow");async function Ay(e,t,n,i,r){let o=qR(t,n,i),{path:a,content:c}=YR(e,o.appName),{plan:u}=HR(c,o.appName),l=await r({tree:e,validated:o,plan:u,infrastructurePath:a,content:c}),m=KR(e,a,c,l);if(!m.success)throw new Error(m.error.message,{cause:m.error})}Fr(Ay,"withInfrastructurePlan");function KR(e,t,n,i){let r=Xi(i);if(!r.success)return $(r.error);let o=ZR(e,t,n);return o.success?(e.write(t,r.data),P(void 0)):$(new Error(`Failed to create backup: ${o.error.message}`))}Fr(KR,"generateAndWriteInfrastructure");var X2=Object.defineProperty,Hl=(e,t)=>X2(e,"name",{value:t,configurable:!0}),eo=1e3;function J2(e,t,n,i){if(fd(e,t,i)===0)return n;for(let r=2;r<=eo;r++){let o=`${n}${r}`;try{return oo(e,t,o),o}catch{}}return`${n}${eo}`}Hl(J2,"generateUniqueResourceName");function XR(e,t){let n=y$.RESOURCE_SUFFIXES[t];return`${e}${n}`}Hl(XR,"getDefaultResourceName");function Q2(e,t,n){let i=XR(t,n);if(!qr(e,t,i))return i;for(let r=2;r<=eo;r++){let o=`${i}${r}`;if(!qr(e,t,o))return o}return`${i}${eo}`}Hl(Q2,"getUniqueDefaultResourceName");function Iy(e,t,n){if(!qr(e,t,n))return n;let i=n.match(/^(.+?)(\d*)$/);if(!i)return n;let r=i[1],o=i[2]?parseInt(i[2],10)+1:2;for(let a=o;a<=o+eo;a++){let c=`${r}${a}`;if(!qr(e,t,c))return c}return`${r}${o+eo}`}Hl(Iy,"ensureUniqueResourceName");var MS=Lk(Tk(),1),nV=Object.defineProperty,Ck=(e,t)=>nV(e,"name",{value:t,configurable:!0});async function jS(e,t,n,i){let r=`Connect to existing ${t}?`,o=`Found ${e} ${t}s. Configure connections?`,a=e===1?n??r:i?.replace("{count}",String(e))??o,c=await(0,MS.default)([{type:"confirm",name:"shouldConnect",message:a,initial:!0}]);return c?c.shouldConnect:!1}Ck(jS,"promptForConnection");async function zS(e,t,n){if(e.length===1)return process.stdout.write(`
+${ha(i.error)}`);return i.data}Fr(qR,"validateGeneratorOptions");function YR(e,t){let n=Jt(t),i=e.read(n)?.toString();if(!i)throw new Error(`App '${t}' not found. Expected infrastructure.ts at: ${n}`);return{path:n,content:i}}Fr(YR,"readInfrastructureOrThrow");async function Ay(e,t,n,i,r){let o=qR(t,n,i),{path:a,content:c}=YR(e,o.appName),{plan:u}=HR(c,o.appName),l=await r({tree:e,validated:o,plan:u,infrastructurePath:a,content:c}),m=KR(e,a,c,l);if(!m.success)throw new Error(m.error.message,{cause:m.error})}Fr(Ay,"withInfrastructurePlan");function KR(e,t,n,i){let r=Xi(i);if(!r.success)return $(r.error);let o=ZR(e,t,n);return o.success?(e.write(t,r.data),P(void 0)):$(new Error(`Failed to create backup: ${o.error.message}`))}Fr(KR,"generateAndWriteInfrastructure");var X2=Object.defineProperty,Hl=(e,t)=>X2(e,"name",{value:t,configurable:!0}),eo=1e3;function J2(e,t,n,i){if(fd(e,t,i)===0)return n;for(let r=2;r<=eo;r++){let o=`${n}${r}`;try{return oo(e,t,o),o}catch{}}return`${n}${eo}`}Hl(J2,"generateUniqueResourceName");function XR(e,t){let n=y$.RESOURCE_SUFFIXES[t];return`${e}${n}`}Hl(XR,"getDefaultResourceName");function Q2(e,t,n){let i=XR(t,n);if(!qr(e,t,i))return i;for(let r=2;r<=eo;r++){let o=`${i}${r}`;if(!qr(e,t,o))return o}return`${i}${eo}`}Hl(Q2,"getUniqueDefaultResourceName");function Iy(e,t,n){if(!qr(e,t,n))return n;let i=n.match(/^(.+?)(\d*)$/);if(!i)return n;let r=i[1],o=i[2]?parseInt(i[2],10)+1:2;for(let a=o;a<=o+eo;a++){let c=`${r}${a}`;if(!qr(e,t,c))return c}return`${r}${o+eo}`}Hl(Iy,"ensureUniqueResourceName");var MS=Lk(Tk(),1),nV=Object.defineProperty,Ck=(e,t)=>nV(e,"name",{value:t,configurable:!0});async function jS(e,t,n,i){let r=`Connect to existing ${t}?`,o=`Found ${e} ${t}s. Configure connections?`,a=e===1?n??r:i?.replace("{count}",()=>String(e))??o,c=await(0,MS.default)([{type:"confirm",name:"shouldConnect",message:a,initial:!0}]);return c?c.shouldConnect:!1}Ck(jS,"promptForConnection");async function zS(e,t,n){if(e.length===1)return process.stdout.write(`
   Auto-selected: ${e[0].name}
 `),[e[0].name];let i=[];for(;i.length===0;)i=(await(0,MS.default)([{type:"multiselect",name:"selected",message:t,choices:e.map(r=>({title:r.name,value:r.name,description:n?.(r),selected:!1}))}]))?.selected||[],i.length===0&&process.stdout.write(`
   Please select at least one resource