@fjall/deploy-core 0.89.5 → 0.89.6

package/dist/src/aws/utils/stackStatus.js

@@ -1,90 +1 @@
-export const stackStatusMap = {
-    CREATE_IN_PROGRESS: {
-        safeToRedeploy: "No",
-        description: "Stack is busy with creation"
-    },
-    CREATE_COMPLETE: {
-        safeToRedeploy: "Yes",
-        description: "Stack was successfully created"
-    },
-    CREATE_FAILED: {
-        safeToRedeploy: "Maybe",
-        description: "Stack creation failed - fix issues before redeploying"
-    },
-    DELETE_IN_PROGRESS: {
-        safeToRedeploy: "No",
-        description: "Stack is busy with deletion"
-    },
-    DELETE_COMPLETE: {
-        safeToRedeploy: "Yes",
-        description: "Stack was successfully deleted"
-    },
-    DELETE_FAILED: {
-        safeToRedeploy: "Maybe",
-        description: "Stack deletion failed - investigate before redeploying"
-    },
-    ROLLBACK_IN_PROGRESS: {
-        safeToRedeploy: "No",
-        description: "Stack is rolling back due to failure"
-    },
-    ROLLBACK_COMPLETE: {
-        safeToRedeploy: "Yes",
-        description: "Stack rolled back due to failure - fix issues before redeploying"
-    },
-    ROLLBACK_FAILED: {
-        safeToRedeploy: "No",
-        description: "Rollback failed - manual intervention needed"
-    },
-    UPDATE_IN_PROGRESS: {
-        safeToRedeploy: "No",
-        description: "Stack update is in progress"
-    },
-    UPDATE_COMPLETE: {
-        safeToRedeploy: "Yes",
-        description: "Stack update completed successfully"
-    },
-    UPDATE_FAILED: {
-        safeToRedeploy: "Maybe",
-        description: "Stack update failed - fix issues before redeploying"
-    },
-    UPDATE_ROLLBACK_IN_PROGRESS: {
-        safeToRedeploy: "No",
-        description: "Stack is rolling back an update"
-    },
-    UPDATE_ROLLBACK_COMPLETE: {
-        safeToRedeploy: "Yes",
-        description: "Stack update rolled back successfully"
-    },
-    UPDATE_ROLLBACK_FAILED: {
-        safeToRedeploy: "No",
-        description: "Update rollback failed - manual fix needed"
-    },
-    IMPORT_IN_PROGRESS: {
-        safeToRedeploy: "No",
-        description: "Resource import in progress"
-    },
-    IMPORT_COMPLETE: {
-        safeToRedeploy: "Yes",
-        description: "Resource import completed successfully"
-    },
-    IMPORT_ROLLBACK_IN_PROGRESS: {
-        safeToRedeploy: "No",
-        description: "Import rollback in progress"
-    },
-    IMPORT_ROLLBACK_COMPLETE: {
-        safeToRedeploy: "Yes",
-        description: "Import rollback completed"
-    },
-    IMPORT_ROLLBACK_FAILED: {
-        safeToRedeploy: "No",
-        description: "Import rollback failed - manual fix needed"
-    },
-    REVIEW_IN_PROGRESS: {
-        safeToRedeploy: "Yes",
-        description: "Stack is in review mode"
-    },
-    UNKNOWN: {
-        safeToRedeploy: "Maybe",
-        description: "Unknown stack status"
-    }
-};
+const e={CREATE_IN_PROGRESS:{safeToRedeploy:"No",description:"Stack is busy with creation"},CREATE_COMPLETE:{safeToRedeploy:"Yes",description:"Stack was successfully created"},CREATE_FAILED:{safeToRedeploy:"Maybe",description:"Stack creation failed - fix issues before redeploying"},DELETE_IN_PROGRESS:{safeToRedeploy:"No",description:"Stack is busy with deletion"},DELETE_COMPLETE:{safeToRedeploy:"Yes",description:"Stack was successfully deleted"},DELETE_FAILED:{safeToRedeploy:"Maybe",description:"Stack deletion failed - investigate before redeploying"},ROLLBACK_IN_PROGRESS:{safeToRedeploy:"No",description:"Stack is rolling back due to failure"},ROLLBACK_COMPLETE:{safeToRedeploy:"Yes",description:"Stack rolled back due to failure - fix issues before redeploying"},ROLLBACK_FAILED:{safeToRedeploy:"No",description:"Rollback failed - manual intervention needed"},UPDATE_IN_PROGRESS:{safeToRedeploy:"No",description:"Stack update is in progress"},UPDATE_COMPLETE:{safeToRedeploy:"Yes",description:"Stack update completed successfully"},UPDATE_FAILED:{safeToRedeploy:"Maybe",description:"Stack update failed - fix issues before redeploying"},UPDATE_ROLLBACK_IN_PROGRESS:{safeToRedeploy:"No",description:"Stack is rolling back an update"},UPDATE_ROLLBACK_COMPLETE:{safeToRedeploy:"Yes",description:"Stack update rolled back successfully"},UPDATE_ROLLBACK_FAILED:{safeToRedeploy:"No",description:"Update rollback failed - manual fix needed"},IMPORT_IN_PROGRESS:{safeToRedeploy:"No",description:"Resource import in progress"},IMPORT_COMPLETE:{safeToRedeploy:"Yes",description:"Resource import completed successfully"},IMPORT_ROLLBACK_IN_PROGRESS:{safeToRedeploy:"No",description:"Import rollback in progress"},IMPORT_ROLLBACK_COMPLETE:{safeToRedeploy:"Yes",description:"Import rollback completed"},IMPORT_ROLLBACK_FAILED:{safeToRedeploy:"No",description:"Import rollback failed - manual fix needed"},REVIEW_IN_PROGRESS:{safeToRedeploy:"Yes",description:"Stack is in review mode"},UNKNOWN:{safeToRedeploy:"Maybe",description:"Unknown stack status"}};export{e as stackStatusMap};

package/dist/src/events/index.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Browser-safe deployment event exports.
+ *
+ * This subpath (`@fjall/deploy-core/events`) is guaranteed to contain NO
+ * Node-only imports (fs, child_process, AWS SDK). It is safe to import
+ * from client-side webapp code.
+ *
+ * The canonical schema and constants live in ../types/deploymentEventSchema.ts.
+ * This barrel re-exports only the browser-safe subset.
+ */
+export { DeploymentEventSchema, DEPLOYMENT_EVENT_TYPES, DEPLOYMENT_EVENT_RESOURCE_CATEGORIES, CASCADE_PHASES, CASCADE_ACCOUNT_STATUSES } from "../types/deploymentEventSchema.js";
+export type { DeploymentEvent, DeploymentEventType, DeploymentEventResourceCategory, DeploymentEventCascadePhase, DeploymentEventCascadeAccountStatus } from "../types/deploymentEventSchema.js";
+export { toCascadePhase } from "../types/deploymentEventSchema.js";

package/dist/src/events/index.js

@@ -0,0 +1 @@
+import{DeploymentEventSchema as C,DEPLOYMENT_EVENT_TYPES as T,DEPLOYMENT_EVENT_RESOURCE_CATEGORIES as e,CASCADE_PHASES as A,CASCADE_ACCOUNT_STATUSES as _}from"../types/deploymentEventSchema.js";import{toCascadePhase as t}from"../types/deploymentEventSchema.js";export{_ as CASCADE_ACCOUNT_STATUSES,A as CASCADE_PHASES,e as DEPLOYMENT_EVENT_RESOURCE_CATEGORIES,T as DEPLOYMENT_EVENT_TYPES,C as DeploymentEventSchema,t as toCascadePhase};

package/dist/src/index.d.ts

@@ -11,25 +11,42 @@
  * responsibility. deploy-core receives credentials and a working
  * directory; it never reads credential files or writes to the terminal.
  */
-export type { AwsCredentials, DeployIdentity, DeployCallbacks, StepCompleteStatus, ProgressEvent, ProgressEventType, ResourceEvent, AwsAuthResult, CascadeDeploymentResult, CascadePhase, ApiClientInterface, EntitlementsData, DeployParams, DeployOptions, DeploymentType, DeployResult, OrgConfig, ProviderAccount, SSOSession } from "./types/index.js";
+export { DeploymentEventSchema, DEPLOYMENT_EVENT_TYPES, DEPLOYMENT_EVENT_RESOURCE_CATEGORIES, CASCADE_PHASES, CASCADE_ACCOUNT_STATUSES } from "./types/index.js";
+export type { DeploymentEvent, DeploymentEventType, DeploymentEventResourceCategory, DeploymentEventCascadePhase, DeploymentEventCascadeAccountStatus } from "./types/index.js";
+export type { AwsCredentials, DeployIdentity, DeployCallbacks, StepCompleteStatus, ProgressEvent, ProgressEventType, ResourceEvent, AwsAuthResult, CascadeDeploymentResult, CascadePhase, ApiClientInterface, EntitlementsData, DeployParams, DeployOptions, DeploymentType, DeployResult, DestroyParams, DestroyOptions, DestroyResult, OrgConfig, ProviderAccount, SSOSession, Entitlements } from "./types/index.js";
 export type { AwsProvider, AwsProviderCredentials, AwsSdkClientConstructor } from "./aws/index.js";
 export { SimpleAwsProvider } from "./aws/index.js";
-export { ensureOrganisationExists, describeOrganisation, enablePolicyTypes, enableServiceAccess, enableRamSharing, activateTrustedAccess, enableIpamDelegatedAdmin, updateBackupGlobalSettings, listAccounts, findAccount, createAccount, ensureOrganisationalUnitsExist, placeAccountsInOUs, activateCostAllocationTags, checkIdentityCentreStatus } from "./aws/index.js";
-export type { OrgDetails, OUMap, AccountPlacementResult, AccountInfo, IdentityCentreStatus, BackupGlobalSettings, CostAllocationTag, CreateAccountResult } from "./aws/index.js";
-export type { DeploymentContext, StepOutput, ApplicationDeploymentContext, CallerIdentity, StackOutput, StackOutputsRecord, ValidationResult, ProgressCallbacks, ApplicationStack, OrganisationType, DeploymentOperation, ApplicationOperation, OrganisationOperation, DeployOrderOptions, OpenNextPattern, AppResourceFlags, ParallelDeploymentResult, ParallelDeployGroup, ParallelOperation, ParallelOperationType, ParallelOperationState, ApplicationErrorType, StackDeploymentData, StackDeploymentOptions, ApplicationDeploymentData, ApplicationDestructionData, FjallStateFile, TemplateHashEntry } from "./types/index.js";
-export { ProgressReporter, APPLICATION_STACKS, ORGANISATION_TYPES, APPLICATION_DEPLOY_ORDER, APPLICATION_DESTROY_ORDER, OPENNEXT_DEPLOY_ORDER, OPENNEXT_DESTROY_ORDER, PARALLEL_DEPLOY_GROUPS, PARALLEL_DESTROY_GROUPS, OPENNEXT_PARALLEL_GROUPS, PARALLEL_OPERATION_TYPES, isApplicationOperation, isOrganisationOperation, getParallelDeployGroups, getParallelDestroyGroups, getApplicationDeployOrder, getApplicationDestroyOrder, getApplicationStackName, getOrganisationStackName, isApplicationStack, getApplicationStepName, getApplicationStepId, toPascalCase, isOpenNextPattern, OPENNEXT_PATTERNS, detectPattern, detectPayloadPattern, detectDatabase, deriveResourcesFromManifestStacks, STACK_NOT_FOUND_PATTERN, CDK_NO_STACKS_MATCH, INFRASTRUCTURE_FILENAME, ApplicationError, wrapApplicationError, FjallStateFileSchema, readStateFile, writeStateFile, createEmptyState, deleteStateFile, updateTemplateHash, getStateFilePath } from "./types/index.js";
-export { CdkService, CdkArgumentBuilder, CdkProcessManager, CdkEventMonitor, startStackMonitoring, DEFAULT_DEPLOY_TIMEOUT_MS, isCdkError, formatInfrastructureError, hasCdkDifferences, parseDiffOutput, CloudFormationService, CloudFormationError } from "./services/infrastructure/index.js";
-export type { CdkContext, CdkOptions, CdkOutput, CheckDifferencesResult, CdkServiceOptions, DiffDetails, CloudFormationCallbacks } from "./services/infrastructure/index.js";
-export { TemplateHashService, TemplateHashError, type TemplateComparisonResult } from "./services/supporting/index.js";
-export { CdkContextBuilder } from "./services/supporting/index.js";
-export { emitProgress, PROGRESS_MESSAGES, parseBuildPhase, buildStepContextBuildConfig, convertCloudFormationOutputsToRecord, type CloudFormationOutput } from "./services/supporting/index.js";
-export { ApplicationStackService } from "./services/application/index.js";
-export { CdkError } from "./types/errors/CdkError.js";
-export { BaseServiceError } from "./types/errors/ServiceError.js";
-export { filterDangerousEnvVars, maskSensitiveOutput, parseShellArgs } from "./util/securityHelpers.js";
-export { sleep } from "./util/sleep.js";
-export { fileExists } from "./util/fsHelpers.js";
+export { ensureOrganisationExists, describeOrganisation, enablePolicyTypes, enableServiceAccess, enableRamSharing, activateTrustedAccess, enableIpamDelegatedAdmin, updateBackupGlobalSettings, listAccounts, findAccount, createAccount, ensureOrganisationalUnitsExist, placeAccountsInOUs, buildAccountToOUMap, activateCostAllocationTags, checkIdentityCentreStatus, extractErrorName, isOULeaf, registerSecurityDelegates, SECURITY_SERVICE_PRINCIPALS } from "./aws/index.js";
+export type { OrgDetails, OUMap, OUTree, AccountPlacementResult, AccountInfo, IdentityCentreStatus, BackupGlobalSettings, CostAllocationTag, CreateAccountResult } from "./aws/index.js";
+export { STEP_IDS, STEP_NAMES, INFRASTRUCTURE_STEP_NAMES, INFRA_STEP_NAME } from "./types/index.js";
+export type { StepId, InfrastructureStepName, StepDefinition, StepDeploymentType, Operation, StepContext } from "./types/index.js";
+export type { DeploymentContext, StepOutput, ApplicationDeploymentContext, CallerIdentity, StackOutput, StackOutputsRecord, ValidationResult, DetectionResult, ProgressCallbacks, ApplicationStack, OrganisationType, DeploymentOperation, ApplicationOperation, OrganisationOperation, DeployOrderOptions, ParallelDeployGroupKey, ParallelDestroyGroupKey, OpenNextPattern, AppResourceFlags, ParallelDeploymentResult, ParallelDeployGroup, ParallelOperation, ParallelOperationType, ParallelOperationState, ApplicationErrorType, StackDeploymentData, StackDeploymentOptions, ApplicationDeploymentData, ApplicationDestructionData, FjallStateFile, TemplateHashEntry } from "./types/index.js";
+export { ProgressReporter, APPLICATION_STACKS, ORGANISATION_TYPES, APPLICATION_DEPLOY_ORDER, APPLICATION_DESTROY_ORDER, OPENNEXT_DEPLOY_ORDER, OPENNEXT_DESTROY_ORDER, PARALLEL_DEPLOY_GROUPS, PARALLEL_DESTROY_GROUPS, OPENNEXT_PARALLEL_GROUPS, PARALLEL_OPERATION_TYPES, isApplicationOperation, isOrganisationOperation, getParallelDeployGroups, getParallelDestroyGroups, getApplicationDeployOrder, getApplicationDestroyOrder, getApplicationStackName, getOrganisationStackName, isApplicationStack, getApplicationStepName, getApplicationStepId, toPascalCase, isOpenNextPattern, OPENNEXT_PATTERNS, deriveResourcesFromManifestStacks, STACK_NOT_FOUND_PATTERN, STACK_FAILED_STATE_PATTERN, CDK_NO_STACKS_MATCH, INFRASTRUCTURE_FILENAME, ApplicationError, wrapApplicationError, FjallStateFileSchema, readStateFile, writeStateFile, createEmptyState, deleteStateFile, updateTemplateHash, getStateFilePath, stubCallerIdentity } from "./types/index.js";
+/** @deprecated Use FrameworkRegistry.resolve() instead */
+export { detectPattern } from "./types/index.js";
+/** @deprecated Use FrameworkRegistry.resolve() instead */
+export { detectPayloadPattern } from "./types/index.js";
+/** @deprecated Use FrameworkRegistry.resolve() instead */
+export { detectDatabase } from "./types/index.js";
+export { CloudFormationEventMonitor } from "./aws/index.js";
+export type { AwsClientLike, EventLogWriter, EventFailureAnalyser, EventLogWriterFactory, EventMonitorDeps } from "./aws/index.js";
+export { CdkService, CdkArgumentBuilder, CdkProcessManager, CdkEventMonitor, startStackMonitoring, DEFAULT_DEPLOY_TIMEOUT_MS, isCdkError, formatInfrastructureError, hasCdkDifferences, parseDiffOutput, CloudFormationService, CloudFormationError, TemplateHashService, TemplateHashError, type TemplateComparisonResult, CdkContextBuilder, emitProgress, PROGRESS_MESSAGES, parseBuildPhase, buildStepContextBuildConfig, convertCloudFormationOutputsToRecord, type CloudFormationOutput, ApplicationStackService } from "./services/index.js";
+export type { CdkContext, CdkOptions, CdkOutput, CheckDifferencesResult, CdkServiceOptions, ICdkProcessManager, DiffDetails, CloudFormationCallbacks } from "./services/index.js";
+export { CdkError } from "./types/errors/index.js";
+export { type ServiceErrorDetails, type ServiceError, BaseServiceError, ValidationError, AuthError, AwsError, DeploymentError, NetworkError, FileSystemError, ConfigError, toServiceError } from "./types/errors/index.js";
+export { filterDangerousEnvVars, maskSensitiveOutput, parseShellArgs, sleep } from "@fjall/util";
+export { hasDockerfile } from "./util/dockerfileDetection.js";
+export { createSequencedCallbacks } from "./util/sequencedCallbacks.js";
+export type { CallbackMetadata, SequencedCallbackEvent, SequencedCallbacksResult } from "./util/sequencedCallbacks.js";
+export { fileExists } from "@fjall/util/fsHelpers";
 export { type Result, success, failure, isSuccess, isFailure } from "@fjall/generator";
 export { deploy } from "./orchestration/index.js";
+export { destroy } from "./orchestration/index.js";
+export { partitionAccounts } from "./orchestration/index.js";
+export { runOpenNextBuild } from "./orchestration/index.js";
 export { runOrganisationSetup } from "./orchestration/index.js";
-export type { OrgSetupPhase, OrgSetupCallbacks, OrgSetupConfig, OrgSetupResult, DockerProvider, DockerBuildParams, DockerBuildResult, ECRInitParams, ECRInitResult, TagImagesParams, TagImagesResult, DomainDeployProvider, DomainConfig, DomainDeployResult, DeployServices, DetectionResult } from "./orchestration/index.js";
+export type { OrgSetupPhase, OrgSetupCallbacks, OrgSetupConfig, OrgSetupResult, DockerProvider, DockerProgressCallback, DockerBuildParams, DockerBuildResult, ECRInitParams, ECRInitResult, TagImagesParams, TagImagesResult, DomainDeployProvider, DomainConfig, DomainDeployResult, DeployServices } from "./orchestration/index.js";
+export type { FrameworkBuilder, FrameworkDetection, BuildPlan, BuildCommand, BuildCallbacks, DetectionContext, BuildOptions } from "./types/index.js";
+export { FrameworkRegistry, type ResolvedBuilder } from "./orchestration/index.js";
+export { openNextBuilder, dockerBuilder } from "./orchestration/index.js";
+export { StepRegistry, getDestroyStepId } from "./steps/index.js";

package/dist/src/index.js

@@ -11,35 +11,55 @@
  * responsibility. deploy-core receives credentials and a working
  * directory; it never reads credential files or writes to the terminal.
  */
+// Deployment event schema (canonical source for CLI + webapp)
+export { DeploymentEventSchema, DEPLOYMENT_EVENT_TYPES, DEPLOYMENT_EVENT_RESOURCE_CATEGORIES, CASCADE_PHASES, CASCADE_ACCOUNT_STATUSES } from "./types/index.js";
 export { SimpleAwsProvider } from "./aws/index.js";
 // Organisation setup primitives
-export { ensureOrganisationExists, describeOrganisation, enablePolicyTypes, enableServiceAccess, enableRamSharing, activateTrustedAccess, enableIpamDelegatedAdmin, updateBackupGlobalSettings, listAccounts, findAccount, createAccount, ensureOrganisationalUnitsExist, placeAccountsInOUs, activateCostAllocationTags, checkIdentityCentreStatus } from "./aws/index.js";
-export { ProgressReporter, APPLICATION_STACKS, ORGANISATION_TYPES, APPLICATION_DEPLOY_ORDER, APPLICATION_DESTROY_ORDER, OPENNEXT_DEPLOY_ORDER, OPENNEXT_DESTROY_ORDER, PARALLEL_DEPLOY_GROUPS, PARALLEL_DESTROY_GROUPS, OPENNEXT_PARALLEL_GROUPS, PARALLEL_OPERATION_TYPES, isApplicationOperation, isOrganisationOperation, getParallelDeployGroups, getParallelDestroyGroups, getApplicationDeployOrder, getApplicationDestroyOrder, getApplicationStackName, getOrganisationStackName, isApplicationStack, getApplicationStepName, getApplicationStepId, toPascalCase, isOpenNextPattern, OPENNEXT_PATTERNS, 
-// Pattern detection
-detectPattern, detectPayloadPattern, detectDatabase, deriveResourcesFromManifestStacks, 
+export { ensureOrganisationExists, describeOrganisation, enablePolicyTypes, enableServiceAccess, enableRamSharing, activateTrustedAccess, enableIpamDelegatedAdmin, updateBackupGlobalSettings, listAccounts, findAccount, createAccount, ensureOrganisationalUnitsExist, placeAccountsInOUs, buildAccountToOUMap, activateCostAllocationTags, checkIdentityCentreStatus, extractErrorName, isOULeaf, registerSecurityDelegates, SECURITY_SERVICE_PRINCIPALS } from "./aws/index.js";
+// Step definitions (canonical source for CLI + webapp)
+export { STEP_IDS, STEP_NAMES, INFRASTRUCTURE_STEP_NAMES, INFRA_STEP_NAME } from "./types/index.js";
+export { ProgressReporter, APPLICATION_STACKS, ORGANISATION_TYPES, APPLICATION_DEPLOY_ORDER, APPLICATION_DESTROY_ORDER, OPENNEXT_DEPLOY_ORDER, OPENNEXT_DESTROY_ORDER, PARALLEL_DEPLOY_GROUPS, PARALLEL_DESTROY_GROUPS, OPENNEXT_PARALLEL_GROUPS, PARALLEL_OPERATION_TYPES, isApplicationOperation, isOrganisationOperation, getParallelDeployGroups, getParallelDestroyGroups, getApplicationDeployOrder, getApplicationDestroyOrder, getApplicationStackName, getOrganisationStackName, isApplicationStack, getApplicationStepName, getApplicationStepId, toPascalCase, 
+// Pattern detection (browser-safe pure predicates)
+isOpenNextPattern, OPENNEXT_PATTERNS, 
+// Pattern detection (Node fs-based)
+deriveResourcesFromManifestStacks, 
 // Constants
-STACK_NOT_FOUND_PATTERN, CDK_NO_STACKS_MATCH, INFRASTRUCTURE_FILENAME, 
+STACK_NOT_FOUND_PATTERN, STACK_FAILED_STATE_PATTERN, CDK_NO_STACKS_MATCH, INFRASTRUCTURE_FILENAME, 
 // Application errors
 ApplicationError, wrapApplicationError, 
 // State management
-FjallStateFileSchema, readStateFile, writeStateFile, createEmptyState, deleteStateFile, updateTemplateHash, getStateFilePath } from "./types/index.js";
-// Infrastructure services
-export { CdkService, CdkArgumentBuilder, CdkProcessManager, CdkEventMonitor, startStackMonitoring, DEFAULT_DEPLOY_TIMEOUT_MS, isCdkError, formatInfrastructureError, hasCdkDifferences, parseDiffOutput, CloudFormationService, CloudFormationError } from "./services/infrastructure/index.js";
-// Supporting services
-export { TemplateHashService, TemplateHashError } from "./services/supporting/index.js";
-export { CdkContextBuilder } from "./services/supporting/index.js";
-export { emitProgress, PROGRESS_MESSAGES, parseBuildPhase, buildStepContextBuildConfig, convertCloudFormationOutputsToRecord } from "./services/supporting/index.js";
-// Application services
-export { ApplicationStackService } from "./services/application/index.js";
+FjallStateFileSchema, readStateFile, writeStateFile, createEmptyState, deleteStateFile, updateTemplateHash, getStateFilePath, 
+// Caller identity helper
+stubCallerIdentity } from "./types/index.js";
+/** @deprecated Use FrameworkRegistry.resolve() instead */
+export { detectPattern } from "./types/index.js";
+/** @deprecated Use FrameworkRegistry.resolve() instead */
+export { detectPayloadPattern } from "./types/index.js";
+/** @deprecated Use FrameworkRegistry.resolve() instead */
+export { detectDatabase } from "./types/index.js";
+// CloudFormation event monitoring
+export { CloudFormationEventMonitor } from "./aws/index.js";
+// Services (infrastructure, supporting, application)
+export { CdkService, CdkArgumentBuilder, CdkProcessManager, CdkEventMonitor, startStackMonitoring, DEFAULT_DEPLOY_TIMEOUT_MS, isCdkError, formatInfrastructureError, hasCdkDifferences, parseDiffOutput, CloudFormationService, CloudFormationError, TemplateHashService, TemplateHashError, CdkContextBuilder, emitProgress, PROGRESS_MESSAGES, parseBuildPhase, buildStepContextBuildConfig, convertCloudFormationOutputsToRecord, ApplicationStackService } from "./services/index.js";
 // Error types
-export { CdkError } from "./types/errors/CdkError.js";
-export { BaseServiceError } from "./types/errors/ServiceError.js";
-// Utilities
-export { filterDangerousEnvVars, maskSensitiveOutput, parseShellArgs } from "./util/securityHelpers.js";
-export { sleep } from "./util/sleep.js";
-export { fileExists } from "./util/fsHelpers.js";
+export { CdkError } from "./types/errors/index.js";
+export { BaseServiceError, ValidationError, AuthError, AwsError, DeploymentError, NetworkError, FileSystemError, ConfigError, toServiceError } from "./types/errors/index.js";
+// Utilities (re-exported from @fjall/util)
+export { filterDangerousEnvVars, maskSensitiveOutput, parseShellArgs, sleep } from "@fjall/util";
+// Dockerfile detection
+export { hasDockerfile } from "./util/dockerfileDetection.js";
+// Sequenced callbacks wrapper
+export { createSequencedCallbacks } from "./util/sequencedCallbacks.js";
+export { fileExists } from "@fjall/util/fsHelpers";
 // Re-export Result from generator for convenience
 export { success, failure, isSuccess, isFailure } from "@fjall/generator";
-// Orchestration — primary entry point
+// Orchestration — primary entry points
 export { deploy } from "./orchestration/index.js";
+export { destroy } from "./orchestration/index.js";
+export { partitionAccounts } from "./orchestration/index.js";
+export { runOpenNextBuild } from "./orchestration/index.js";
 export { runOrganisationSetup } from "./orchestration/index.js";
+export { FrameworkRegistry } from "./orchestration/index.js";
+export { openNextBuilder, dockerBuilder } from "./orchestration/index.js";
+// Step registry (filtering & step management)
+export { StepRegistry, getDestroyStepId } from "./steps/index.js";

package/dist/src/orchestration/__tests__/cascadeTestHelpers.d.ts

@@ -0,0 +1,12 @@
+import type { DeployCallbacks } from "../../types/callbacks.js";
+import type { OrganisationOperation } from "../../types/operations.js";
+import type { DeployServices } from "../serviceFactory.js";
+export declare const TEST_REGION = "eu-west-1";
+export declare const TEST_ACCOUNT: {
+    id: string;
+    name: string;
+    environment: string;
+};
+export declare function createOrgOperation(): OrganisationOperation;
+export declare function createBaseMockCallbacks(): DeployCallbacks;
+export declare function createMockServices(overrides?: Partial<DeployServices>): DeployServices;

package/dist/src/orchestration/__tests__/cascadeTestHelpers.js

@@ -0,0 +1,78 @@
+import { vi } from "vitest";
+import { success } from "@fjall/generator";
+export const TEST_REGION = "eu-west-1";
+export const TEST_ACCOUNT = {
+    id: "222222222222",
+    name: "platform",
+    environment: "platform"
+};
+export function createOrgOperation() {
+    return {
+        kind: "organisation",
+        type: "organisation",
+        target: "organisation",
+        path: "/tmp/test/fjall/organisation"
+    };
+}
+export function createBaseMockCallbacks() {
+    return {
+        onLog: vi.fn(),
+        onError: vi.fn(),
+        onOutput: vi.fn(),
+        onStepStart: vi.fn(),
+        onStepComplete: vi.fn(),
+        onCascadeStart: vi.fn(),
+        onCascadePhaseStart: vi.fn(),
+        onCascadeAccountStart: vi.fn(),
+        onCascadeAccountPhaseChange: vi.fn(),
+        onCascadeAccountResourceProgress: vi.fn(),
+        onCascadeAccountComplete: vi.fn(),
+        onCascadeComplete: vi.fn(),
+        onResourceProgress: vi.fn(),
+        onCdkOutput: vi.fn()
+    };
+}
+export function createMockServices(overrides) {
+    return {
+        awsProvider: {
+            getRegion: vi.fn().mockReturnValue(TEST_REGION),
+            getAccountId: vi.fn().mockReturnValue("111111111111"),
+            exportToEnv: vi.fn(),
+            getClient: vi.fn(),
+            getCredentials: vi.fn().mockReturnValue({
+                accessKeyId: "AKIA_TEST",
+                secretAccessKey: "secret_test",
+                sessionToken: "token_test"
+            }),
+            assumeRole: vi.fn().mockResolvedValue({
+                accessKeyId: "AKIA_ASSUMED",
+                secretAccessKey: "secret_assumed",
+                sessionToken: "token_assumed"
+            }),
+            ...overrides?.awsProvider
+        },
+        cdkService: {
+            runCdkSynth: vi.fn().mockResolvedValue(success(undefined)),
+            runCdkBootstrap: vi.fn().mockResolvedValue(success(undefined)),
+            runCdkDeploy: vi.fn().mockResolvedValue(success(undefined)),
+            runCdkDestroy: vi.fn().mockResolvedValue(success(undefined)),
+            ...overrides?.cdkService
+        },
+        cfnService: {
+            getStackOutputs: vi.fn().mockResolvedValue(success([])),
+            stackExists: vi.fn().mockResolvedValue(true),
+            ...overrides?.cfnService
+        },
+        stackService: {
+            ...overrides?.stackService
+        },
+        hashService: {
+            ...overrides?.hashService
+        },
+        frameworkRegistry: {
+            resolve: vi.fn().mockReturnValue(null),
+            ...overrides?.frameworkRegistry
+        },
+        dispose: vi.fn()
+    };
+}

package/dist/src/orchestration/activeDeploymentGuard.d.ts

@@ -0,0 +1,10 @@
+import { type Result } from "@fjall/generator";
+import type { CloudFormationService } from "../services/infrastructure/CloudFormationService.js";
+/**
+ * Pre-flight check: query CloudFormation for each stack and reject
+ * if any are currently in an IN_PROGRESS or otherwise unsafe state.
+ *
+ * Uses the canonical stackStatusMap to determine whether a status
+ * is blocking — specifically `safeToRedeploy === "No"`.
+ */
+export declare function checkActiveDeployments(stackNames: string[], cfnService: CloudFormationService): Promise<Result<void>>;

package/dist/src/orchestration/activeDeploymentGuard.js

@@ -0,0 +1,39 @@
+import { success, failure } from "@fjall/generator";
+import { stackStatusMap } from "../aws/utils/stackStatus.js";
+/**
+ * Pre-flight check: query CloudFormation for each stack and reject
+ * if any are currently in an IN_PROGRESS or otherwise unsafe state.
+ *
+ * Uses the canonical stackStatusMap to determine whether a status
+ * is blocking — specifically `safeToRedeploy === "No"`.
+ */
+export async function checkActiveDeployments(stackNames, cfnService) {
+    if (stackNames.length === 0) {
+        return success(undefined);
+    }
+    const statusResults = await Promise.all(stackNames.map(async (name) => {
+        const result = await cfnService.getStackStatus(name);
+        return { name, result };
+    }));
+    const busyStacks = [];
+    for (const { name, result } of statusResults) {
+        if (!result.success) {
+            return failure(result.error);
+        }
+        const stackStatus = result.data;
+        if (stackStatus === null || stackStatus.status === "DOES_NOT_EXIST") {
+            continue;
+        }
+        const mapped = stackStatusMap[stackStatus.status];
+        if (mapped?.safeToRedeploy === "No") {
+            busyStacks.push({ name, status: stackStatus.status });
+        }
+    }
+    if (busyStacks.length > 0) {
+        const details = busyStacks
+            .map((s) => `  ${s.name}: ${s.status}`)
+            .join("\n");
+        return failure(new Error(`Cannot proceed while stacks are busy:\n${details}\n\nWait for the in-progress operation to complete, or use --force to override.`));
+    }
+    return success(undefined);
+}