@fjall/deploy-core 0.94.1 → 0.95.0

package/dist/src/aws/organisations/ram.js

@@ -1,19 +1 @@
-import { EnableSharingWithAwsOrganizationCommand } from "@aws-sdk/client-ram";
-import { success, failure } from "@fjall/generator";
-import { getErrorMessage } from "@fjall/util";
-import { SDK_TIMEOUT_MS } from "./types.js";
-/**
- * Enable RAM sharing with the AWS Organisation.
- * Idempotent — calling when already enabled is a no-op.
- */
-export async function enableRamSharing(client) {
-    try {
-        await client.send(new EnableSharingWithAwsOrganizationCommand({}), {
-            abortSignal: AbortSignal.timeout(SDK_TIMEOUT_MS)
-        });
-        return success(undefined);
-    }
-    catch (error) {
-        return failure(new Error(`Failed to enable RAM sharing: ${getErrorMessage(error)}`));
-    }
-}
+import{EnableSharingWithAwsOrganizationCommand as n}from"@aws-sdk/client-ram";import{success as a,failure as o}from"@fjall/generator";import{getErrorMessage as t}from"@fjall/util";import{SDK_TIMEOUT_MS as i}from"./types.js";async function l(r){try{return await r.send(new n({}),{abortSignal:AbortSignal.timeout(i)}),a(void 0)}catch(e){return o(new Error(`Failed to enable RAM sharing: ${t(e)}`))}}export{l as enableRamSharing};

package/dist/src/aws/organisations/serviceAccess.js

@@ -1,44 +1 @@
-import { EnableAWSServiceAccessCommand } from "@aws-sdk/client-organizations";
-import { success, failure } from "@fjall/generator";
-import { extractErrorName, SDK_TIMEOUT_MS, AWS_ERROR_NAMES } from "./types.js";
-import { getErrorMessage } from "@fjall/util";
-const SERVICE_PRINCIPALS = [
-    "account.amazonaws.com",
-    "sso.amazonaws.com",
-    "ipam.amazonaws.com",
-    "ram.amazonaws.com",
-    "backup.amazonaws.com",
-    "member.org.stacksets.cloudformation.amazonaws.com",
-    "guardduty.amazonaws.com",
-    "securityhub.amazonaws.com",
-    "config.amazonaws.com",
-    "inspector2.amazonaws.com",
-    "access-analyzer.amazonaws.com"
-];
-/**
- * Enable AWS service access for all required service principals.
- * Idempotent — enabling an already-enabled principal is a no-op.
- */
-export async function enableServiceAccess(client) {
-    try {
-        for (const principal of SERVICE_PRINCIPALS) {
-            try {
-                await client.send(new EnableAWSServiceAccessCommand({
-                    ServicePrincipal: principal
-                }), { abortSignal: AbortSignal.timeout(SDK_TIMEOUT_MS) });
-            }
-            catch (error) {
-                const errorName = extractErrorName(error);
-                if (errorName === AWS_ERROR_NAMES.ACCESS_DENIED) {
-                    return failure(new Error(`Access denied when enabling service access for ${principal}. ` +
-                        "Ensure your credentials have organizations:EnableAWSServiceAccess permission."));
-                }
-                throw new Error(`Service principal ${principal}: ${getErrorMessage(error)}`);
-            }
-        }
-        return success(undefined);
-    }
-    catch (error) {
-        return failure(new Error(`Failed to enable service access: ${getErrorMessage(error)}`));
-    }
-}
+import{EnableAWSServiceAccessCommand as n}from"@aws-sdk/client-organizations";import{success as s,failure as e}from"@fjall/generator";import{extractErrorName as m,SDK_TIMEOUT_MS as i,AWS_ERROR_NAMES as t}from"./types.js";import{getErrorMessage as o}from"@fjall/util";const w=["account.amazonaws.com","sso.amazonaws.com","ipam.amazonaws.com","ram.amazonaws.com","backup.amazonaws.com","member.org.stacksets.cloudformation.amazonaws.com","guardduty.amazonaws.com","securityhub.amazonaws.com","config.amazonaws.com","inspector2.amazonaws.com","access-analyzer.amazonaws.com"];async function f(c){try{for(const r of w)try{await c.send(new n({ServicePrincipal:r}),{abortSignal:AbortSignal.timeout(i)})}catch(a){if(m(a)===t.ACCESS_DENIED)return e(new Error(`Access denied when enabling service access for ${r}. Ensure your credentials have organizations:EnableAWSServiceAccess permission.`));throw new Error(`Service principal ${r}: ${o(a)}`)}return s(void 0)}catch(r){return e(new Error(`Failed to enable service access: ${o(r)}`))}}export{f as enableServiceAccess};

package/dist/src/aws/organisations/trustedAccess.js

@@ -1,19 +1 @@
-import { ActivateOrganizationsAccessCommand } from "@aws-sdk/client-cloudformation";
-import { success, failure } from "@fjall/generator";
-import { getErrorMessage } from "@fjall/util";
-import { SDK_TIMEOUT_MS } from "./types.js";
-/**
- * Activate trusted access for CloudFormation StackSets.
- * Idempotent — calling when already activated is a no-op.
- */
-export async function activateTrustedAccess(client) {
-    try {
-        await client.send(new ActivateOrganizationsAccessCommand({}), {
-            abortSignal: AbortSignal.timeout(SDK_TIMEOUT_MS)
-        });
-        return success(undefined);
-    }
-    catch (error) {
-        return failure(new Error(`Failed to activate trusted access: ${getErrorMessage(error)}`));
-    }
-}
+import{ActivateOrganizationsAccessCommand as e}from"@aws-sdk/client-cloudformation";import{success as a,failure as o}from"@fjall/generator";import{getErrorMessage as i}from"@fjall/util";import{SDK_TIMEOUT_MS as s}from"./types.js";async function d(r){try{return await r.send(new e({}),{abortSignal:AbortSignal.timeout(s)}),a(void 0)}catch(t){return o(new Error(`Failed to activate trusted access: ${i(t)}`))}}export{d as activateTrustedAccess};

package/dist/src/aws/utils/regions.js

@@ -1 +1 @@
-export { DEFAULT_REGION, regions, AWS_REGIONS_METADATA, topRegions, commonRegions, parseRegionList, isValidRegion, isValidRegionFormat, getSuggestions, validateRegion, validateRegionList, filterDuplicateRegions, getRegionOptions, getRegionOptionsExcluding, getRegionName, createRegionFormatter } from "@fjall/generator";
+import{DEFAULT_REGION as o,regions as g,AWS_REGIONS_METADATA as t,topRegions as n,commonRegions as R,parseRegionList as s,isValidRegion as a,isValidRegionFormat as r,getSuggestions as l,validateRegion as m,validateRegionList as p,filterDuplicateRegions as d,getRegionOptions as A,getRegionOptionsExcluding as E,getRegionName as c,createRegionFormatter as O}from"@fjall/generator";export{t as AWS_REGIONS_METADATA,o as DEFAULT_REGION,R as commonRegions,O as createRegionFormatter,d as filterDuplicateRegions,c as getRegionName,A as getRegionOptions,E as getRegionOptionsExcluding,l as getSuggestions,a as isValidRegion,r as isValidRegionFormat,s as parseRegionList,g as regions,n as topRegions,m as validateRegion,p as validateRegionList};

package/dist/src/index.js

@@ -1,65 +1 @@
-/**
- * @fjall/deploy-core — Shared Deployment Engine
- *
- * This package contains the deployment logic shared between the CLI and
- * the webapp worker. Both callers construct a DeployParams object and
- * call deploy(). The engine handles CDK synthesis, CloudFormation
- * deployment, Docker builds, and multi-account cascade — reporting
- * progress via typed callbacks.
- *
- * Auth, config discovery, and output formatting are the caller's
- * responsibility. deploy-core receives credentials and a working
- * directory; it never reads credential files or writes to the terminal.
- */
-// Deployment event schema (canonical source for CLI + webapp)
-export { DeploymentEventSchema, DEPLOYMENT_EVENT_TYPES, DEPLOYMENT_EVENT_RESOURCE_CATEGORIES, CASCADE_PHASES, CASCADE_ACCOUNT_STATUSES } from "./types/index.js";
-export { SimpleAwsProvider } from "./aws/index.js";
-// Organisation setup primitives
-export { ensureOrganisationExists, describeOrganisation, enablePolicyTypes, enableServiceAccess, enableRamSharing, activateTrustedAccess, enableIpamDelegatedAdmin, updateBackupGlobalSettings, listAccounts, findAccount, createAccount, ensureOrganisationalUnitsExist, placeAccountsInOUs, buildAccountToOUMap, activateCostAllocationTags, checkIdentityCentreStatus, extractErrorName, isOULeaf, registerSecurityDelegates, SECURITY_SERVICE_PRINCIPALS } from "./aws/index.js";
-// Step definitions (canonical source for CLI + webapp)
-export { STEP_IDS, STEP_NAMES, INFRASTRUCTURE_STEP_NAMES, INFRA_STEP_NAME } from "./types/index.js";
-export { ProgressReporter, APPLICATION_STACKS, ORGANISATION_TYPES, APPLICATION_DEPLOY_ORDER, APPLICATION_DESTROY_ORDER, OPENNEXT_DEPLOY_ORDER, OPENNEXT_DESTROY_ORDER, PARALLEL_DEPLOY_GROUPS, PARALLEL_DESTROY_GROUPS, OPENNEXT_PARALLEL_GROUPS, PARALLEL_OPERATION_TYPES, isApplicationOperation, isOrganisationOperation, getParallelDeployGroups, getParallelDestroyGroups, getApplicationDeployOrder, getApplicationDestroyOrder, getApplicationStackName, getOrganisationStackName, isApplicationStack, getApplicationStepName, getApplicationStepId, toPascalCase, 
-// Pattern detection (browser-safe pure predicates)
-isOpenNextPattern, OPENNEXT_PATTERNS, 
-// Pattern detection (Node fs-based)
-deriveResourcesFromManifestStacks, 
-// Constants
-STACK_NOT_FOUND_PATTERN, STACK_FAILED_STATE_PATTERN, CDK_NO_STACKS_MATCH, INFRASTRUCTURE_FILENAME, 
-// Application errors
-ApplicationError, wrapApplicationError, 
-// State management
-FjallStateFileSchema, readStateFile, writeStateFile, createEmptyState, deleteStateFile, updateTemplateHash, getStateFilePath, 
-// Caller identity helper
-stubCallerIdentity } from "./types/index.js";
-/** @deprecated Use FrameworkRegistry.resolve() instead */
-export { detectPattern } from "./types/index.js";
-/** @deprecated Use FrameworkRegistry.resolve() instead */
-export { detectPayloadPattern } from "./types/index.js";
-/** @deprecated Use FrameworkRegistry.resolve() instead */
-export { detectDatabase } from "./types/index.js";
-// CloudFormation event monitoring
-export { CloudFormationEventMonitor } from "./aws/index.js";
-// Services (infrastructure, supporting, application)
-export { CdkService, CdkArgumentBuilder, CdkProcessManager, CdkEventMonitor, startStackMonitoring, DEFAULT_DEPLOY_TIMEOUT_MS, isCdkError, formatInfrastructureError, hasCdkDifferences, parseDiffOutput, CloudFormationService, CloudFormationError, TemplateHashService, TemplateHashError, CdkContextBuilder, emitProgress, PROGRESS_MESSAGES, parseBuildPhase, buildStepContextBuildConfig, convertCloudFormationOutputsToRecord, ApplicationStackService } from "./services/index.js";
-// Error types
-export { CdkError } from "./types/errors/index.js";
-export { BaseServiceError, ValidationError, AuthError, AwsError, DeploymentError, NetworkError, FileSystemError, ConfigError, toServiceError } from "./types/errors/index.js";
-// Utilities (re-exported from @fjall/util)
-export { filterDangerousEnvVars, maskSensitiveOutput, parseShellArgs, sleep } from "@fjall/util";
-// Dockerfile detection
-export { hasDockerfile } from "./util/dockerfileDetection.js";
-// Sequenced callbacks wrapper
-export { createSequencedCallbacks } from "./util/sequencedCallbacks.js";
-export { fileExists } from "@fjall/util/fsHelpers";
-// Re-export Result from generator for convenience
-export { success, failure, isSuccess, isFailure } from "@fjall/generator";
-// Orchestration — primary entry points
-export { deploy } from "./orchestration/index.js";
-export { destroy } from "./orchestration/index.js";
-export { partitionAccounts } from "./orchestration/index.js";
-export { runOpenNextBuild } from "./orchestration/index.js";
-export { runOrganisationSetup } from "./orchestration/index.js";
-export { FrameworkRegistry } from "./orchestration/index.js";
-export { openNextBuilder, dockerBuilder } from "./orchestration/index.js";
-// Step registry (filtering & step management)
-export { StepRegistry, getDestroyStepId } from "./steps/index.js";
+import{DeploymentEventSchema as t,DEPLOYMENT_EVENT_TYPES as o,DEPLOYMENT_EVENT_RESOURCE_CATEGORIES as a,CASCADE_PHASES as i,CASCADE_ACCOUNT_STATUSES as E}from"./types/index.js";import{SimpleAwsProvider as p}from"./aws/index.js";import{ensureOrganisationExists as S,describeOrganisation as l,enablePolicyTypes as c,enableServiceAccess as A,enableRamSharing as T,activateTrustedAccess as O,enableIpamDelegatedAdmin as m,updateBackupGlobalSettings as P,listAccounts as u,findAccount as _,createAccount as d,ensureOrganisationalUnitsExist as R,placeAccountsInOUs as C,buildAccountToOUMap as N,activateCostAllocationTags as f,checkIdentityCentreStatus as x,extractErrorName as D,isOULeaf as g,registerSecurityDelegates as I,SECURITY_SERVICE_PRINCIPALS as L}from"./aws/index.js";import{STEP_IDS as F,STEP_NAMES as y,INFRASTRUCTURE_STEP_NAMES as U,INFRA_STEP_NAME as v}from"./types/index.js";import{ProgressReporter as h,APPLICATION_STACKS as Y,ORGANISATION_TYPES as b,APPLICATION_DEPLOY_ORDER as G,APPLICATION_DESTROY_ORDER as B,OPENNEXT_DEPLOY_ORDER as w,OPENNEXT_DESTROY_ORDER as H,PARALLEL_DEPLOY_GROUPS as K,PARALLEL_DESTROY_GROUPS as V,OPENNEXT_PARALLEL_GROUPS as X,PARALLEL_OPERATION_TYPES as j,isApplicationOperation as q,isOrganisationOperation as z,getParallelDeployGroups as J,getParallelDestroyGroups as Q,getApplicationDeployOrder as W,getApplicationDestroyOrder as Z,getApplicationStackName as $,getOrganisationStackName as ee,isApplicationStack as re,getApplicationStepName as te,getApplicationStepId as oe,toPascalCase as ae,isOpenNextPattern as ie,OPENNEXT_PATTERNS as Ee,deriveResourcesFromManifestStacks as se,STACK_NOT_FOUND_PATTERN as pe,STACK_FAILED_STATE_PATTERN as ne,CDK_NO_STACKS_MATCH as Se,INFRASTRUCTURE_FILENAME as le,ApplicationError as ce,wrapApplicationError as Ae,FjallStateFileSchema as Te,readStateFile as Oe,writeStateFile as me,createEmptyState as Pe,deleteStateFile as ue,updateTemplateHash as _e,getStateFilePath as de,stubCallerIdentity as Re}from"./types/index.js";import{detectPattern as Ne}from"./types/index.js";import{detectPayloadPattern as xe}from"./types/index.js";import{detectDatabase as ge}from"./types/index.js";import{CloudFormationEventMonitor as Le}from"./aws/index.js";import{CdkService as Fe,CdkArgumentBuilder as ye,CdkProcessManager as Ue,CdkEventMonitor as ve,startStackMonitoring as Me,DEFAULT_DEPLOY_TIMEOUT_MS as he,isCdkError as Ye,formatInfrastructureError as be,hasCdkDifferences as Ge,parseDiffOutput as Be,CloudFormationService as we,CloudFormationError as He,TemplateHashService as Ke,TemplateHashError as Ve,CdkContextBuilder as Xe,emitProgress as je,PROGRESS_MESSAGES as qe,parseBuildPhase as ze,buildStepContextBuildConfig as Je,convertCloudFormationOutputsToRecord as Qe,ApplicationStackService as We}from"./services/index.js";import{CdkError as $e}from"./types/errors/index.js";import{BaseServiceError as rr,ValidationError as tr,AuthError as or,AwsError as ar,DeploymentError as ir,NetworkError as Er,FileSystemError as sr,ConfigError as pr,toServiceError as nr}from"./types/errors/index.js";import{filterDangerousEnvVars as lr,maskSensitiveOutput as cr,parseShellArgs as Ar,sleep as Tr}from"@fjall/util";import{hasDockerfile as mr}from"./util/dockerfileDetection.js";import{createSequencedCallbacks as ur}from"./util/sequencedCallbacks.js";import{fileExists as dr}from"@fjall/util/fsHelpers";import{success as Cr,failure as Nr,isSuccess as fr,isFailure as xr}from"@fjall/generator";import{deploy as gr}from"./orchestration/index.js";import{destroy as Lr}from"./orchestration/index.js";import{partitionAccounts as Fr}from"./orchestration/index.js";import{runOpenNextBuild as Ur}from"./orchestration/index.js";import{runOrganisationSetup as Mr}from"./orchestration/index.js";import{FrameworkRegistry as Yr}from"./orchestration/index.js";import{openNextBuilder as Gr,dockerBuilder as Br}from"./orchestration/index.js";import{StepRegistry as Hr,getDestroyStepId as Kr}from"./steps/index.js";export{G as APPLICATION_DEPLOY_ORDER,B as APPLICATION_DESTROY_ORDER,Y as APPLICATION_STACKS,ce as ApplicationError,We as ApplicationStackService,or as AuthError,ar as AwsError,rr as BaseServiceError,E as CASCADE_ACCOUNT_STATUSES,i as CASCADE_PHASES,Se as CDK_NO_STACKS_MATCH,ye as CdkArgumentBuilder,Xe as CdkContextBuilder,$e as CdkError,ve as CdkEventMonitor,Ue as CdkProcessManager,Fe as CdkService,He as CloudFormationError,Le as CloudFormationEventMonitor,we as CloudFormationService,pr as ConfigError,he as DEFAULT_DEPLOY_TIMEOUT_MS,a as DEPLOYMENT_EVENT_RESOURCE_CATEGORIES,o as DEPLOYMENT_EVENT_TYPES,ir as DeploymentError,t as DeploymentEventSchema,sr as FileSystemError,Te as FjallStateFileSchema,Yr as FrameworkRegistry,le as INFRASTRUCTURE_FILENAME,U as INFRASTRUCTURE_STEP_NAMES,v as INFRA_STEP_NAME,Er as NetworkError,w as OPENNEXT_DEPLOY_ORDER,H as OPENNEXT_DESTROY_ORDER,X as OPENNEXT_PARALLEL_GROUPS,Ee as OPENNEXT_PATTERNS,b as ORGANISATION_TYPES,K as PARALLEL_DEPLOY_GROUPS,V as PARALLEL_DESTROY_GROUPS,j as PARALLEL_OPERATION_TYPES,qe as PROGRESS_MESSAGES,h as ProgressReporter,L as SECURITY_SERVICE_PRINCIPALS,ne as STACK_FAILED_STATE_PATTERN,pe as STACK_NOT_FOUND_PATTERN,F as STEP_IDS,y as STEP_NAMES,p as SimpleAwsProvider,Hr as StepRegistry,Ve as TemplateHashError,Ke as TemplateHashService,tr as ValidationError,f as activateCostAllocationTags,O as activateTrustedAccess,N as buildAccountToOUMap,Je as buildStepContextBuildConfig,x as checkIdentityCentreStatus,Qe as convertCloudFormationOutputsToRecord,d as createAccount,Pe as createEmptyState,ur as createSequencedCallbacks,ue as deleteStateFile,gr as deploy,se as deriveResourcesFromManifestStacks,l as describeOrganisation,Lr as destroy,ge as detectDatabase,Ne as detectPattern,xe as detectPayloadPattern,Br as dockerBuilder,je as emitProgress,m as enableIpamDelegatedAdmin,c as enablePolicyTypes,T as enableRamSharing,A as enableServiceAccess,S as ensureOrganisationExists,R as ensureOrganisationalUnitsExist,D as extractErrorName,Nr as failure,dr as fileExists,lr as filterDangerousEnvVars,_ as findAccount,be as formatInfrastructureError,W as getApplicationDeployOrder,Z as getApplicationDestroyOrder,$ as getApplicationStackName,oe as getApplicationStepId,te as getApplicationStepName,Kr as getDestroyStepId,ee as getOrganisationStackName,J as getParallelDeployGroups,Q as getParallelDestroyGroups,de as getStateFilePath,Ge as hasCdkDifferences,mr as hasDockerfile,q as isApplicationOperation,re as isApplicationStack,Ye as isCdkError,xr as isFailure,g as isOULeaf,ie as isOpenNextPattern,z as isOrganisationOperation,fr as isSuccess,u as listAccounts,cr as maskSensitiveOutput,Gr as openNextBuilder,ze as parseBuildPhase,Be as parseDiffOutput,Ar as parseShellArgs,Fr as partitionAccounts,C as placeAccountsInOUs,Oe as readStateFile,I as registerSecurityDelegates,Ur as runOpenNextBuild,Mr as runOrganisationSetup,Tr as sleep,Me as startStackMonitoring,Re as stubCallerIdentity,Cr as success,ae as toPascalCase,nr as toServiceError,P as updateBackupGlobalSettings,_e as updateTemplateHash,Ae as wrapApplicationError,me as writeStateFile};

package/dist/src/orchestration/__tests__/cascadeTestHelpers.js

@@ -1,78 +1 @@
-import { vi } from "vitest";
-import { success } from "@fjall/generator";
-export const TEST_REGION = "eu-west-1";
-export const TEST_ACCOUNT = {
-    id: "222222222222",
-    name: "platform",
-    environment: "platform"
-};
-export function createOrgOperation() {
-    return {
-        kind: "organisation",
-        type: "organisation",
-        target: "organisation",
-        path: "/tmp/test/fjall/organisation"
-    };
-}
-export function createBaseMockCallbacks() {
-    return {
-        onLog: vi.fn(),
-        onError: vi.fn(),
-        onOutput: vi.fn(),
-        onStepStart: vi.fn(),
-        onStepComplete: vi.fn(),
-        onCascadeStart: vi.fn(),
-        onCascadePhaseStart: vi.fn(),
-        onCascadeAccountStart: vi.fn(),
-        onCascadeAccountPhaseChange: vi.fn(),
-        onCascadeAccountResourceProgress: vi.fn(),
-        onCascadeAccountComplete: vi.fn(),
-        onCascadeComplete: vi.fn(),
-        onResourceProgress: vi.fn(),
-        onCdkOutput: vi.fn()
-    };
-}
-export function createMockServices(overrides) {
-    return {
-        awsProvider: {
-            getRegion: vi.fn().mockReturnValue(TEST_REGION),
-            getAccountId: vi.fn().mockReturnValue("111111111111"),
-            exportToEnv: vi.fn(),
-            getClient: vi.fn(),
-            getCredentials: vi.fn().mockReturnValue({
-                accessKeyId: "AKIA_TEST",
-                secretAccessKey: "secret_test",
-                sessionToken: "token_test"
-            }),
-            assumeRole: vi.fn().mockResolvedValue({
-                accessKeyId: "AKIA_ASSUMED",
-                secretAccessKey: "secret_assumed",
-                sessionToken: "token_assumed"
-            }),
-            ...overrides?.awsProvider
-        },
-        cdkService: {
-            runCdkSynth: vi.fn().mockResolvedValue(success(undefined)),
-            runCdkBootstrap: vi.fn().mockResolvedValue(success(undefined)),
-            runCdkDeploy: vi.fn().mockResolvedValue(success(undefined)),
-            runCdkDestroy: vi.fn().mockResolvedValue(success(undefined)),
-            ...overrides?.cdkService
-        },
-        cfnService: {
-            getStackOutputs: vi.fn().mockResolvedValue(success([])),
-            stackExists: vi.fn().mockResolvedValue(true),
-            ...overrides?.cfnService
-        },
-        stackService: {
-            ...overrides?.stackService
-        },
-        hashService: {
-            ...overrides?.hashService
-        },
-        frameworkRegistry: {
-            resolve: vi.fn().mockReturnValue(null),
-            ...overrides?.frameworkRegistry
-        },
-        dispose: vi.fn()
-    };
-}
+import{vi as e}from"vitest";import{success as t}from"@fjall/generator";const o="eu-west-1",a={id:"222222222222",name:"platform",environment:"platform"};function r(){return{kind:"organisation",type:"organisation",target:"organisation",path:"/tmp/test/fjall/organisation"}}function u(){return{onLog:e.fn(),onError:e.fn(),onOutput:e.fn(),onStepStart:e.fn(),onStepComplete:e.fn(),onCascadeStart:e.fn(),onCascadePhaseStart:e.fn(),onCascadeAccountStart:e.fn(),onCascadeAccountPhaseChange:e.fn(),onCascadeAccountResourceProgress:e.fn(),onCascadeAccountComplete:e.fn(),onCascadeComplete:e.fn(),onResourceProgress:e.fn(),onCdkOutput:e.fn()}}function f(n){return{awsProvider:{getRegion:e.fn().mockReturnValue(o),getAccountId:e.fn().mockReturnValue("111111111111"),exportToEnv:e.fn(),getClient:e.fn(),getCredentials:e.fn().mockReturnValue({accessKeyId:"AKIA_TEST",secretAccessKey:"secret_test",sessionToken:"token_test"}),assumeRole:e.fn().mockResolvedValue({accessKeyId:"AKIA_ASSUMED",secretAccessKey:"secret_assumed",sessionToken:"token_assumed"}),...n?.awsProvider},cdkService:{runCdkSynth:e.fn().mockResolvedValue(t(void 0)),runCdkBootstrap:e.fn().mockResolvedValue(t(void 0)),runCdkDeploy:e.fn().mockResolvedValue(t(void 0)),runCdkDestroy:e.fn().mockResolvedValue(t(void 0)),...n?.cdkService},cfnService:{getStackOutputs:e.fn().mockResolvedValue(t([])),stackExists:e.fn().mockResolvedValue(!0),...n?.cfnService},stackService:{...n?.stackService},hashService:{...n?.hashService},frameworkRegistry:{resolve:e.fn().mockReturnValue(null),...n?.frameworkRegistry},dispose:e.fn()}}export{a as TEST_ACCOUNT,o as TEST_REGION,u as createBaseMockCallbacks,f as createMockServices,r as createOrgOperation};

package/dist/src/orchestration/activeDeploymentGuard.js

@@ -1,39 +1,5 @@
-import { success, failure } from "@fjall/generator";
-import { stackStatusMap } from "../aws/utils/stackStatus.js";
-/**
- * Pre-flight check: query CloudFormation for each stack and reject
- * if any are currently in an IN_PROGRESS or otherwise unsafe state.
- *
- * Uses the canonical stackStatusMap to determine whether a status
- * is blocking — specifically `safeToRedeploy === "No"`.
- */
-export async function checkActiveDeployments(stackNames, cfnService) {
-    if (stackNames.length === 0) {
-        return success(undefined);
-    }
-    const statusResults = await Promise.all(stackNames.map(async (name) => {
-        const result = await cfnService.getStackStatus(name);
-        return { name, result };
-    }));
-    const busyStacks = [];
-    for (const { name, result } of statusResults) {
-        if (!result.success) {
-            return failure(result.error);
-        }
-        const stackStatus = result.data;
-        if (stackStatus === null || stackStatus.status === "DOES_NOT_EXIST") {
-            continue;
-        }
-        const mapped = stackStatusMap[stackStatus.status];
-        if (mapped?.safeToRedeploy === "No") {
-            busyStacks.push({ name, status: stackStatus.status });
-        }
-    }
-    if (busyStacks.length > 0) {
-        const details = busyStacks
-            .map((s) => `  ${s.name}: ${s.status}`)
-            .join("\n");
-        return failure(new Error(`Cannot proceed while stacks are busy:\n${details}\n\nWait for the in-progress operation to complete, or use --force to override.`));
-    }
-    return success(undefined);
-}
+import{success as r,failure as a}from"@fjall/generator";import{stackStatusMap as i}from"../aws/utils/stackStatus.js";async function d(o,u){if(o.length===0)return r(void 0);const c=await Promise.all(o.map(async e=>{const t=await u.getStackStatus(e);return{name:e,result:t}})),n=[];for(const{name:e,result:t}of c){if(!t.success)return a(t.error);const s=t.data;if(s===null||s.status==="DOES_NOT_EXIST")continue;i[s.status]?.safeToRedeploy==="No"&&n.push({name:e,status:s.status})}if(n.length>0){const e=n.map(t=>`  ${t.name}: ${t.status}`).join(`
+`);return a(new Error(`Cannot proceed while stacks are busy:
+${e}
+
+Wait for the in-progress operation to complete, or use --force to override.`))}return r(void 0)}export{d as checkActiveDeployments};

package/dist/src/orchestration/applicationDeploy.js

@@ -1,149 +1 @@
-import { success, failure } from "@fjall/generator";
-import { logger } from "@fjall/util/logger";
-import { stubCallerIdentity } from "../types/deployment/index.js";
-import { getApplicationDeployOrder, getApplicationStackName, getApplicationStepName, getApplicationStepId } from "../types/operations.js";
-import { CdkContextBuilder } from "../services/supporting/CdkContextBuilder.js";
-import { buildParamsContext, bootstrapOrFail } from "./contextHelpers.js";
-import { runDetectionPipeline } from "./detectionPipeline.js";
-import { getParallelPhase2Stacks, deployParallelPhase, deployStackSequential, runDockerPreCompute, deployAllStacks, createBuildCallbacks } from "./applicationDeployHelpers.js";
-/**
- * Core application deployment orchestration.
- *
- * Runs detection, bootstraps AWS, then deploys stacks in order —
- * parallelising Phase 2 stacks (Storage, Messaging, Database) when possible.
- */
-export async function deployApplication(params, services, operation) {
-    const { callbacks, options } = params;
-    const startTime = Date.now();
-    // 1. Build deployment context
-    const context = CdkContextBuilder.buildDeploymentContext({
-        deployType: "application",
-        target: operation.appName,
-        path: operation.path,
-        region: services.awsProvider.getRegion(),
-        callerIdentity: stubCallerIdentity(services.awsProvider.getAccountId()),
-        ...buildParamsContext({
-            orgConfig: params.orgConfig,
-            identity: params.identity,
-            skipOidc: params.options?.skipOidc
-        })
-    }, {
-        verbose: options?.verbose,
-        infraOnly: options?.infraOnly
-    }, params.orgConfig);
-    // 1b. Resolve framework builder and run build (if applicable — runs before detection)
-    const resolved = services.frameworkRegistry.resolve({
-        appPath: operation.path
-    });
-    let plan;
-    if (resolved) {
-        plan = resolved.builder.plan({ appPath: operation.path }, resolved.detection);
-        const buildCallbacks = createBuildCallbacks(callbacks);
-        const buildResult = await resolved.builder.build(operation.path, plan, buildCallbacks, { skipBuild: options?.skipBuild, infraOnly: options?.infraOnly });
-        if (!buildResult.success) {
-            callbacks.onError?.(buildResult.error);
-            return failure(buildResult.error);
-        }
-    }
-    // deployOnly: skip detection pipeline, deploy all stacks unconditionally
-    if (options?.deployOnly) {
-        callbacks.onLog?.("Deploy-only mode — skipping change detection", "info");
-        return deployAllStacks(params, services, operation, context, startTime, plan);
-    }
-    // 2. Run detection pipeline
-    callbacks.onLog?.("Analysing infrastructure…", "info");
-    const detectionResult = await runDetectionPipeline(operation, services, context, callbacks);
-    if (!detectionResult.success) {
-        callbacks.onError?.(detectionResult.error);
-        return failure(detectionResult.error);
-    }
-    const detection = detectionResult.data;
-    // 2b. Notify callers of detection results (resource flags, pattern, etc.)
-    // Awaited so callers can run post-detection hooks (e.g. secrets validation).
-    await callbacks.onDetectionComplete?.({
-        ...detection,
-        builderName: resolved?.builder.name ?? "unknown"
-    });
-    // 3. Early exit if no differences
-    if (!detection.hasDifferences && !options?.force) {
-        callbacks.onLog?.("No infrastructure changes detected", "info");
-        return success({
-            target: operation.appName,
-            deploymentType: "application",
-            durationMs: Date.now() - startTime
-        });
-    }
-    // 4. Bootstrap AWS environment
-    const bsResult = await bootstrapOrFail(services, context, callbacks);
-    if (!bsResult.success)
-        return bsResult;
-    // 5. Determine deploy order (prefer plan from registry, fall back to legacy)
-    const deployOrder = plan
-        ? plan.deployOrder
-        : getApplicationDeployOrder({
-            pattern: detection.pattern,
-            resources: detection.resources
-        });
-    const totalSteps = deployOrder.length;
-    // 6. Deploy stacks
-    const allOutputs = {};
-    const deployedHashes = new Map();
-    for (let i = 0; i < deployOrder.length; i++) {
-        const stack = deployOrder[i];
-        const stackName = getApplicationStackName(operation.appName, stack);
-        const stepId = getApplicationStepId(stack, "deploy");
-        const stepName = getApplicationStepName(stack, "deploy");
-        // Check if stack is unchanged and exists
-        const hasChanges = detection.stackChanges.get(stackName) ?? true;
-        if (!hasChanges && !options?.force) {
-            callbacks.onStepStart?.(stepId, stepName, i, totalSteps);
-            callbacks.onLog?.(`Skipping ${stack} — no changes detected`, "info");
-            callbacks.onStepComplete?.(stepId, stepName, "skipped", i, totalSteps);
-            continue;
-        }
-        // Check for Phase 2 parallel deployment opportunity
-        const parallelStacks = getParallelPhase2Stacks(deployOrder, i, detection.stackChanges, options?.force);
-        if (parallelStacks.length >= 2) {
-            const parallelResult = await deployParallelPhase(parallelStacks, operation, services, context, callbacks, i, totalSteps, detection, allOutputs, deployedHashes);
-            if (!parallelResult.success)
-                return failure(parallelResult.error);
-            // Skip past the parallel stacks in the main loop
-            i += parallelStacks.length - 1;
-            continue;
-        }
-        // Docker operations before Compute stack
-        const dockerFailed = await runDockerPreCompute(stack, params, services, operation, callbacks, detection.hasDockerfile);
-        if (dockerFailed)
-            return dockerFailed;
-        // Sequential deployment
-        const deployResult = await deployStackSequential(stack, services, context, callbacks, i, totalSteps, allOutputs);
-        if (!deployResult.success)
-            return failure(deployResult.error);
-        // Track deployed hashes
-        const hash = detection.currentHashes.get(stackName);
-        if (hash) {
-            deployedHashes.set(stackName, hash);
-        }
-    }
-    // 7. Update state file with deployed hashes
-    if (deployedHashes.size > 0) {
-        const stateResult = await services.hashService.updateStateAfterDeploy(operation.path, deployedHashes);
-        if (!stateResult.success) {
-            logger.debug("applicationDeploy", "Failed to update state file", {
-                error: stateResult.error.message
-            });
-            callbacks.onLog?.(`Warning: failed to update state file — next deploy may re-deploy unchanged stacks: ${stateResult.error.message}`, "warn");
-        }
-    }
-    // 8. Resolve website URL
-    const websiteUrl = await services.stackService.resolveWebsiteUrl(operation.appName);
-    if (websiteUrl) {
-        allOutputs.websiteUrl = websiteUrl;
-    }
-    return success({
-        target: operation.appName,
-        deploymentType: "application",
-        outputs: Object.keys(allOutputs).length > 0 ? allOutputs : undefined,
-        durationMs: Date.now() - startTime
-    });
-}
+import{success as R,failure as m}from"@fjall/generator";import{logger as x}from"@fjall/util/logger";import{stubCallerIdentity as I}from"../types/deployment/index.js";import{getApplicationDeployOrder as L,getApplicationStackName as B,getApplicationStepName as T,getApplicationStepId as F}from"../types/operations.js";import{CdkContextBuilder as M}from"../services/supporting/CdkContextBuilder.js";import{buildParamsContext as U,bootstrapOrFail as E}from"./contextHelpers.js";import{runDetectionPipeline as H}from"./detectionPipeline.js";import{getParallelPhase2Stacks as W,deployParallelPhase as $,deployStackSequential as j,runDockerPreCompute as q,deployAllStacks as z,createBuildCallbacks as G}from"./applicationDeployHelpers.js";async function ee(l,n,o){const{callbacks:e,options:i}=l,h=Date.now(),s=M.buildDeploymentContext({deployType:"application",target:o.appName,path:o.path,region:n.awsProvider.getRegion(),callerIdentity:I(n.awsProvider.getAccountId()),...U({orgConfig:l.orgConfig,identity:l.identity,skipOidc:l.options?.skipOidc})},{verbose:i?.verbose,infraOnly:i?.infraOnly},l.orgConfig),c=n.frameworkRegistry.resolve({appPath:o.path});let p;if(c){p=c.builder.plan({appPath:o.path},c.detection);const t=G(e),a=await c.builder.build(o.path,p,t,{skipBuild:i?.skipBuild,infraOnly:i?.infraOnly});if(!a.success)return e.onError?.(a.error),m(a.error)}if(i?.deployOnly)return e.onLog?.("Deploy-only mode \u2014 skipping change detection","info"),z(l,n,o,s,h,p);e.onLog?.("Analysing infrastructure\u2026","info");const u=await H(o,n,s,e);if(!u.success)return e.onError?.(u.error),m(u.error);const r=u.data;if(await e.onDetectionComplete?.({...r,builderName:c?.builder.name??"unknown"}),!r.hasDifferences&&!i?.force)return e.onLog?.("No infrastructure changes detected","info"),R({target:o.appName,deploymentType:"application",durationMs:Date.now()-h});const w=await E(n,s,e);if(!w.success)return w;const f=p?p.deployOrder:L({pattern:r.pattern,resources:r.resources}),g=f.length,d={},y=new Map;for(let t=0;t<f.length;t++){const a=f[t],k=B(o.appName,a),S=F(a,"deploy"),D=T(a,"deploy");if(!(r.stackChanges.get(k)??!0)&&!i?.force){e.onStepStart?.(S,D,t,g),e.onLog?.(`Skipping ${a} \u2014 no changes detected`,"info"),e.onStepComplete?.(S,D,"skipped",t,g);continue}const b=W(f,t,r.stackChanges,i?.force);if(b.length>=2){const A=await $(b,o,n,s,e,t,g,r,d,y);if(!A.success)return m(A.error);t+=b.length-1;continue}const O=await q(a,l,n,o,e,r.hasDockerfile);if(O)return O;const N=await j(a,n,s,e,t,g,d);if(!N.success)return m(N.error);const P=r.currentHashes.get(k);P&&y.set(k,P)}if(y.size>0){const t=await n.hashService.updateStateAfterDeploy(o.path,y);t.success||(x.debug("applicationDeploy","Failed to update state file",{error:t.error.message}),e.onLog?.(`Warning: failed to update state file \u2014 next deploy may re-deploy unchanged stacks: ${t.error.message}`,"warn"))}const C=await n.stackService.resolveWebsiteUrl(o.appName);return C&&(d.websiteUrl=C),R({target:o.appName,deploymentType:"application",outputs:Object.keys(d).length>0?d:void 0,durationMs:Date.now()-h})}export{ee as deployApplication};