@fjall/deploy-core 16.0.1 → 17.0.0

package/dist/.build-source-hash

@@ -9,7 +9,7 @@
     "package.json",
     "tsconfig.json"
   ],
-  "hash": "0f9e03ce84ef6086bfe3ce478ccb48954005c28155855644185a4c3bfdde7487",
+  "hash": "1eb6dbdb21e02490e85465beea05f034a4b93ab1bb17a0092e88652139ee1082",
   "files": {
     "src/__test-utils__/awsMockHelpers.ts": "fea371c1b1869678",
     "src/__test-utils__/index.ts": "e03cf35821157dc4",
@@ -52,12 +52,12 @@
     "src/aws/utils/regions.ts": "3a5191f4d2242a60",
     "src/aws/utils/stackStatus.ts": "55fb23ba5514bc13",
     "src/events/index.ts": "e55c022f0d9013e6",
-    "src/index.ts": "d814918718c23e2b",
+    "src/index.ts": "7332e9ed2912c390",
     "src/orchestration/activeDeploymentGuard.ts": "e8dde742c00ea728",
     "src/orchestration/application/applicationDeploy.ts": "6a4090e898f86a28",
     "src/orchestration/application/applicationDeployHelpers.ts": "bca833cc04f0b4c5",
     "src/orchestration/application/applicationDestroy.ts": "38b8ecf69c85d884",
-    "src/orchestration/application/approvalGate.ts": "e4dee819c94fd15c",
+    "src/orchestration/application/approvalGate.ts": "81130a8b58279c45",
     "src/orchestration/application/artefactCollection.ts": "b77848c922765d30",
     "src/orchestration/application/assemblyIntegrity.ts": "6399169e3062118c",
     "src/orchestration/application/buildArgResolver.ts": "47142177df453d9c",
@@ -83,12 +83,13 @@
     "src/orchestration/application/plan/changeSetEscalation.ts": "d9ad7a5a65283dc4",
     "src/orchestration/application/plan/classify.ts": "d9fc8d78d281b69a",
     "src/orchestration/application/plan/computeDeployPlan.ts": "62d47d2d620895b6",
-    "src/orchestration/application/plan/index.ts": "a2292dca615dd021",
+    "src/orchestration/application/plan/index.ts": "4a4b1b9c86121efa",
     "src/orchestration/application/plan/loadDeployPlan.ts": "f0d4414fd34f68c3",
     "src/orchestration/application/plan/pinnedNames.ts": "d6a90c96c88f13e0",
+    "src/orchestration/application/plan/planRiskCounts.ts": "f2935faba6219142",
     "src/orchestration/application/plan/registryOverlay.ts": "920be845c7f4aea2",
     "src/orchestration/application/plan/renameDetection.ts": "7242d45be616625f",
-    "src/orchestration/application/plan/renderDeployPlan.ts": "7fa4fc332accdc00",
+    "src/orchestration/application/plan/renderDeployPlan.ts": "d2d77c37aa7b4ed6",
     "src/orchestration/application/plan/types.ts": "191929198672081c",
     "src/orchestration/application/schemaGateImage.ts": "587a115432c6678e",
     "src/orchestration/application/serviceImageTagsRollback.ts": "55e23a493545511c",
@@ -132,7 +133,7 @@
     "src/orchestration/drift/route53RecordPreflight.ts": "f4db16a6c0e69ac9",
     "src/orchestration/failure/classifyFailure.ts": "bfb80731bc7d6b95",
     "src/orchestration/failure/deploymentFailureAttachment.ts": "358d9e4d88390cfd",
-    "src/orchestration/index.ts": "8468dd8028eb8772",
+    "src/orchestration/index.ts": "78a445bece83d7fc",
     "src/orchestration/manifestSecretParser.ts": "c5576bd88a3652f8",
     "src/orchestration/organisation/accountsConfig.ts": "a55a3306564e7b2f",
     "src/orchestration/organisation/cascadeDestroyHelpers.ts": "7f1927a00ed24767",
@@ -228,7 +229,7 @@
     "src/types/apiClient.ts": "9fd8a107003916d7",
     "src/types/application/ApplicationServiceTypes.ts": "e5185e9ef24a1625",
     "src/types/application/index.ts": "c44d78d2209c4b09",
-    "src/types/approval.ts": "d5b7741f677d5f21",
+    "src/types/approval.ts": "a9b8c42344246d5c",
     "src/types/callbackKeys.ts": "12daa729d3ee3286",
     "src/types/callbacks.ts": "f529521bf1ca0f4d",
     "src/types/config/DomainState.ts": "76a076a1735ac6cd",
@@ -257,7 +258,7 @@
     "src/types/errors/index.ts": "e3bf5e08988d1182",
     "src/types/events.ts": "5f0e756e98914442",
     "src/types/frameworkBuilder.ts": "41198a0b446f60b6",
-    "src/types/index.ts": "94240086d5b486af",
+    "src/types/index.ts": "c72f15165e81930c",
     "src/types/operations.ts": "57a6c9e22a3f37ca",
     "src/types/params.ts": "f49979d6546586b0",
     "src/types/remediation.ts": "0e1138f0c8fdc6bf",
@@ -270,9 +271,9 @@
     "src/util/sleepAbortable.ts": "f9cac3bf8a79a476",
     "src/version.ts": "1811a4475823b27e",
     "../scripts/minify-dist.mjs": "6b2e4b0df8aec601",
-    "package.json": "6206f13bd3ea402e",
+    "package.json": "6a0c4d8e8e7ba260",
     "tsconfig.json": "1929cf3f99fe9b1e"
   },
-  "outputHash": "a767f78aaa5ddc1dfc2d983fbf0fb358c91af77080af667c471778ad5d9fc947",
-  "outputFileCount": 509
+  "outputHash": "54460fbb8d3a74d28c3e01b991ddc4c023d0d74fcff01d7b2d3f5f453e45df17",
+  "outputFileCount": 511
 }

package/dist/.minified

@@ -1 +1 @@
-254 files minified at 2026-08-22T04:04:13.057Z
+255 files minified at 2026-08-23T02:03:37.379Z

package/dist/src/index.d.ts

@@ -16,7 +16,7 @@ export { DeploymentEventSchema, DEPLOYMENT_EVENT_TYPES, DEPLOYMENT_EVENT_RESOURC
 export type { DeploymentEvent, DeploymentEventType, DeploymentEventResourceCategory, DeploymentEventCascadePhase, DeploymentEventCascadeAccountStatus } from "./types/index.js";
 export { DeployEventSchema, StepProgressSchema, DeployResourceSchema, PlanChangeSchema, PlanPropertyChangeSchema, ChangeCountsSchema, DEPLOY_EVENT_CONTRACT, DEPLOY_EVENT_CONTRACT_MAJOR, DEPLOY_EVENT_CONTRACT_MINOR, SUPPORTED_CONTRACT_MARKERS, DEPLOY_EVENT_ID_MAX, DEPLOY_EVENT_NAME_MAX, DEPLOY_EVENT_MESSAGE_MAX, DEPLOY_EVENT_STATUS_REASON_MAX, DEPLOY_EVENT_ERROR_MESSAGE_MAX, DEPLOY_EVENT_TRAIL_DETAIL_MAX, DEPLOY_EVENT_OUTPUT_MAX, DEPLOY_EVENT_ARN_MAX, DEPLOY_EVENT_URL_MAX, STEP_COMPLETE_STATUSES, LOG_LEVELS, STACK_CLEANUP_PHASES, CASCADE_ACCOUNT_PHASES, DEPLOY_RESULTS, DETECTION_PHASES, PHASE_STATUSES, BUILDERS, CASCADE_OUTCOME_RESULTS, PLAN_ACTIONS, REPLACEMENT_MODES, APPROVAL_KINDS, APPROVAL_DECISIONS, ALL_PROGRESS_KINDS, createDeployEmitter, parseDeployEvent, parseDeployContractVersion } from "./types/index.js";
 export type { DeployEvent, ProgressKind, StepProgress, DeployResource, PlanChange, PlanPropertyChange, ChangeCounts, PlanAction, ReplacementMode, ApprovalKind, ApprovalDecision, DeployRunResult, DeployEmitter, CreateDeployEmitterOptions, ParsedDeployEvent, StackCleanupPhase, CascadeAccountPhase, LogLevel } from "./types/index.js";
-export type { AwsCredentials, DeployIdentity, ScopedBuildSecretSessionMinter, DeployCallbacks, StepCompleteStatus, StackCleanupQuarantineDetail, StackCleanupRetainedBucketsDetail, StackTarget, ProgressEvent, ProgressEventType, ResourceEvent, AwsAuthResult, CascadeDeploymentResult, CascadePhase, BuildPushStartEvent, BuildPushProgressEvent, BuildPushCompleteEvent, TaskDefRegisteredEvent, ECSCompleteEvent, MigrationsStartEvent, MigrationsCompleteEvent, TrailMigrationPhase, TrailMigrationStatus, TrailMigrationPhaseEvent, ApiClientInterface, EntitlementsData, DeployParams, DeployOptions, DatabaseEndpointRestartRequest, InfrastructureSource, DeploymentType, DeployResult, DestroyParams, DestroyOptions, DestroyResult, StackLeaseVerdict, ApprovalGate, ApprovalGatePlanDetail, ApprovalRequest, GateResolution, RemediationVerb, DestructionFinding, DestructionTicketResource, DestructionTicket, DestructionConsent, ConsentVerdict, ConsentVerdictRow, DestructionConsentReport, DestructionConsentRequest, DestructionConsentResolution, DestructionConsentGate, DestructionOutcome, TicketVerdictSource, RemediationPhase, RemediationTarget, RemediationFlipProof, RemediationJournalRecord, RemediationJournalVerb, PinnedSlotRecord, OrgConfig, ProviderAccount, RootAccessManagementMode, SSOSession, Entitlements } from "./types/index.js";
+export type { AwsCredentials, DeployIdentity, ScopedBuildSecretSessionMinter, DeployCallbacks, StepCompleteStatus, StackCleanupQuarantineDetail, StackCleanupRetainedBucketsDetail, StackTarget, ProgressEvent, ProgressEventType, ResourceEvent, AwsAuthResult, CascadeDeploymentResult, CascadePhase, BuildPushStartEvent, BuildPushProgressEvent, BuildPushCompleteEvent, TaskDefRegisteredEvent, ECSCompleteEvent, MigrationsStartEvent, MigrationsCompleteEvent, TrailMigrationPhase, TrailMigrationStatus, TrailMigrationPhaseEvent, ApiClientInterface, EntitlementsData, DeployParams, DeployOptions, DatabaseEndpointRestartRequest, InfrastructureSource, DeploymentType, DeployResult, DestroyParams, DestroyOptions, DestroyResult, StackLeaseVerdict, ApprovalGate, ApprovalGatePlanDetail, PlanRiskCounts, ReplacementModeCounts, ApprovalRequest, GateResolution, RemediationVerb, DestructionFinding, DestructionTicketResource, DestructionTicket, DestructionConsent, ConsentVerdict, ConsentVerdictRow, DestructionConsentReport, DestructionConsentRequest, DestructionConsentResolution, DestructionConsentGate, DestructionOutcome, TicketVerdictSource, RemediationPhase, RemediationTarget, RemediationFlipProof, RemediationJournalRecord, RemediationJournalVerb, PinnedSlotRecord, OrgConfig, ProviderAccount, RootAccessManagementMode, SSOSession, Entitlements } from "./types/index.js";
 export type { AwsProvider, AwsProviderCredentials, AwsSdkClientConstructor } from "./aws/index.js";
 export { SimpleAwsProvider } from "./aws/index.js";
 export { checkTargetReadiness, describeTargetReadinessReason, buildTargetUnreadyAdvisory, buildTargetSetUnreadyAdvisory, probeAccountStackExists } from "./aws/index.js";
@@ -98,7 +98,7 @@ export type { FrameworkBuilder, FrameworkDetection, BuildPlan, BuildCommand, Bui
 export { FrameworkRegistry, type ResolvedBuilder } from "./orchestration/index.js";
 export { openNextBuilder, staticSiteBuilder, dockerBuilder } from "./orchestration/index.js";
 export { StepRegistry, getDestroyStepId } from "./steps/index.js";
-export { buildDeployPlan, computeDeployPlan, computeAssemblyDigest, digestHead, classifyImpact, derivePropertyChanges, isDataLoss, isStatefulResourceType, renderPlanSummary, renderPlanLines, toWirePlanChanges, signApprovalToken, verifyApprovalToken, DEFAULT_APPROVAL_TTL_MS, APPROVAL_TOKEN_PATTERN, runApprovalGate, approvalRefusalReason } from "./orchestration/index.js";
+export { buildDeployPlan, computeDeployPlan, computeAssemblyDigest, digestHead, classifyImpact, derivePropertyChanges, isDataLoss, isStatefulResourceType, renderPlanSummary, renderPlanLines, summarisePlanRisk, toWirePlanChanges, signApprovalToken, verifyApprovalToken, DEFAULT_APPROVAL_TTL_MS, APPROVAL_TOKEN_PATTERN, runApprovalGate, approvalRefusalReason } from "./orchestration/index.js";
 export type { DeployPlan, DeployPlanResourceChange, StackTemplatePair, CfnTemplateReader, ComputeDeployPlanParams, ComputeDeployPlanStack, ImpactClassification, DeployScope, SignApprovalTokenOptions, SignedApprovalToken, VerifyApprovalTokenOptions, VerifyApprovalTokenResult, RunApprovalGateParams, ApprovalGateOutcome } from "./orchestration/index.js";
 export { runDestructionGate, buildDestructionTicket, evaluateDestructionConsents, computeTicketDigest, legalRemediationVerbs, executableRemediationVerbs, advertisableRemediationVerbs, renderDestructionTicketLines, renderConsentVerdictLines, loadDeployPlan, createMemoisedPlanLoader } from "./orchestration/index.js";
 export type { RunDestructionGateParams, DestructionGateOutcome, EvaluateDestructionConsentsParams, LoadDeployPlanParams, DeployPlanLoader } from "./orchestration/index.js";

package/dist/src/index.js

@@ -1 +1 @@
-import{DEPLOY_CORE_VERSION_GLOBAL as t}from"./version.js";import{DeploymentEventSchema as a,DEPLOYMENT_EVENT_TYPES as i,DEPLOYMENT_EVENT_RESOURCE_CATEGORIES as n,DEPLOYMENT_EVENT_STATUS_REASON_MAX as s,DEPLOYMENT_EVENT_ERROR_MESSAGE_MAX as c,DEPLOYMENT_EVENT_TRAIL_DETAIL_MAX as E,DEPLOYMENT_ERROR_MESSAGE_MAX as l,CASCADE_PHASES as S,CASCADE_ACCOUNT_STATUSES as p,clampDeploymentEventStrings as m,truncateUtf16Safe as T}from"./types/index.js";import{DeployEventSchema as _,StepProgressSchema as A,DeployResourceSchema as d,PlanChangeSchema as u,PlanPropertyChangeSchema as D,ChangeCountsSchema as P,DEPLOY_EVENT_CONTRACT as O,DEPLOY_EVENT_CONTRACT_MAJOR as f,DEPLOY_EVENT_CONTRACT_MINOR as C,SUPPORTED_CONTRACT_MARKERS as N,DEPLOY_EVENT_ID_MAX as y,DEPLOY_EVENT_NAME_MAX as g,DEPLOY_EVENT_MESSAGE_MAX as I,DEPLOY_EVENT_STATUS_REASON_MAX as L,DEPLOY_EVENT_ERROR_MESSAGE_MAX as x,DEPLOY_EVENT_TRAIL_DETAIL_MAX as h,DEPLOY_EVENT_OUTPUT_MAX as v,DEPLOY_EVENT_ARN_MAX as F,DEPLOY_EVENT_URL_MAX as M,STEP_COMPLETE_STATUSES as U,LOG_LEVELS as k,STACK_CLEANUP_PHASES as b,CASCADE_ACCOUNT_PHASES as Y,DEPLOY_RESULTS as V,DETECTION_PHASES as G,PHASE_STATUSES as B,BUILDERS as K,CASCADE_OUTCOME_RESULTS as X,PLAN_ACTIONS as H,REPLACEMENT_MODES as w,APPROVAL_KINDS as J,APPROVAL_DECISIONS as W,ALL_PROGRESS_KINDS as Q,createDeployEmitter as j,parseDeployEvent as Z,parseDeployContractVersion as q}from"./types/index.js";import{SimpleAwsProvider as $}from"./aws/index.js";import{checkTargetReadiness as re,describeTargetReadinessReason as te,buildTargetUnreadyAdvisory as oe,buildTargetSetUnreadyAdvisory as ae,probeAccountStackExists as ie}from"./aws/index.js";import{checkRegionEnabled as se,regionDisabledMessage as ce}from"./aws/index.js";import{ensureOrganisationExists as le,describeOrganisation as Se,enablePolicyTypes as pe,enableServiceAccess as me,SERVICE_PRINCIPALS as Te,enableRamSharing as Re,activateTrustedAccess as _e,enableIpamDelegatedAdmin as Ae,updateBackupGlobalSettings as de,listAccounts as ue,findAccount as De,createAccount as Pe,ensureOrganisationalUnitsExist as Oe,placeAccountsInOUs as fe,buildAccountToOUMap as Ce,findDevelopmentOuId as Ne,activateCostAllocationTags as ye,checkIdentityCentreStatus as ge,snapshotIdentityCentre as Ie,composeSdkAbortSignal as Le,extractErrorName as xe,isAborted as he,DEFAULT_MAX_PAGES as ve,IDENTITY_STORE_PAGE_SIZE as Fe,drainPages as Me,isOULeaf as Ue,registerSecurityDelegates as ke,SECURITY_SERVICE_PRINCIPALS as be,enableCentralisedRootAccess as Ye,ROOT_ACCESS_FEATURES as Ve,RootAccessEnablementError as Ge}from"./aws/index.js";import{STEP_IDS as Ke,STEP_NAMES as Xe,INFRASTRUCTURE_STEP_NAMES as He,INFRA_STEP_NAME as we}from"./types/index.js";import{RemediationVerbSchema as We,REMEDIATION_VERB_GLOSS as Qe,IDENTITY_PIN_SLOT_SWAP_GLOSS as je,DestructionFindingSchema as Ze,DestructionTicketResourceSchema as qe,DestructionTicketSchema as ze,DestructionConsentSchema as $e,DestructionOutcomeSchema as er,DESTRUCTION_FINDINGS as rr,CONSENT_VERDICTS as tr,TICKET_VERDICT_SOURCES as or,TicketVerdictSourceSchema as ar}from"./types/index.js";import{DRIFT_VERDICTS as nr,DriftVerdictSchema as sr,DriftSuspectSchema as cr,DriftFindingSchema as Er,DriftJournalRecordSchema as lr,verbsForDriftVerdict as Sr}from"./types/index.js";import{REMEDIATION_PHASES as mr,RemediationPhaseSchema as Tr,RemediationTargetSchema as Rr,RemediationFlipProofSchema as _r,RemediationJournalRecordSchema as Ar,RemediationVerbWithSurgerySchema as dr,remediationPhaseRank as ur,remediationPlaceholderPhysicalId as Dr,isRemediationPlaceholderPhysicalId as Pr}from"./types/index.js";import{APPLICATION_STACKS as fr,ORGANISATION_TYPES as Cr,APPLICATION_DEPLOY_ORDER as Nr,APPLICATION_DESTROY_ORDER as yr,OPENNEXT_DEPLOY_ORDER as gr,OPENNEXT_DESTROY_ORDER as Ir,PARALLEL_DEPLOY_GROUPS as Lr,PARALLEL_DESTROY_GROUPS as xr,OPENNEXT_PARALLEL_GROUPS as hr,PARALLEL_OPERATION_TYPES as vr,isApplicationOperation as Fr,isOrganisationOperation as Mr,getParallelDeployGroups as Ur,getParallelDestroyGroups as kr,getApplicationDeployOrder as br,getApplicationDestroyOrder as Yr,getApplicationStackName as Vr,getOrganisationStackName as Gr,isApplicationStack as Br,isQuarantineDetail as Kr,isRetainedBucketsDetail as Xr,getApplicationStepName as Hr,getApplicationStepId as wr,toPascalCase as Jr,isOpenNextPattern as Wr,OPENNEXT_PATTERNS as Qr,STACK_NOT_FOUND_PATTERN as jr,STACK_FAILED_STATE_PATTERN as Zr,CDK_NO_STACKS_MATCH as qr,INFRASTRUCTURE_FILENAME as zr,ApplicationError as $r,wrapApplicationError as et,stubCallerIdentity as rt}from"./types/index.js";import{deriveResourcesFromManifestStacks as ot}from"./types/detection/patternDetection.js";import{FjallStateFileSchema as it,readStateFile as nt,writeStateFile as st,createEmptyState as ct,deleteStateFile as Et,updateTemplateHash as lt,getStateFilePath as St,regionSuffix as pt}from"./types/config/FjallState.js";import{readDomainState as Tt,writeDomainState as Rt,recordDomainDeployState as _t,deleteDomainState as At,hashDomainDirectory as dt,LEGACY_DOMAIN_STATE_FILENAME as ut}from"./types/config/DomainState.js";import{CloudFormationEventMonitor as Pt}from"./aws/index.js";import{CdkService as ft,CdkArgumentBuilder as Ct,CdkProcessManager as Nt,ensureDependencyIntegrity as yt,clearDependencyIntegrityCache as gt,DEPENDENCY_SYNC_TIMEOUT_MS as It,CdkEventMonitor as Lt,startStackMonitoring as xt,DEFAULT_DEPLOY_TIMEOUT_MS as ht,isCdkError as vt,formatInfrastructureError as Ft,getStructuralHint as Mt,getSourceContext as Ut,hasCdkDifferences as kt,parseDiffOutput as bt,CloudFormationService as Yt,CloudFormationError as Vt,EcsService as Gt,EcsError as Bt,EcsServiceResolver as Kt,TemplateHashService as Xt,TemplateHashError as Ht,CdkContextBuilder as wt,emitProgress as Jt,PROGRESS_MESSAGES as Wt,parseBuildPhase as Qt,buildStepContextBuildConfig as jt,convertCloudFormationOutputsToRecord as Zt,ApplicationStackService as qt}from"./services/index.js";import{CdkError as $t}from"./types/errors/index.js";import{BaseServiceError as ro,ValidationError as to,AuthError as oo,AwsError as ao,DeploymentError as io,NetworkError as no,FileSystemError as so,ConfigError as co,toServiceError as Eo}from"./types/errors/index.js";import{filterDangerousEnvVars as So,maskSensitiveOutput as po,parseShellArgs as mo,sleep as To}from"@fjall/util";import{artefactOutputKey as _o,DeployModeSchema as Ao,ServiceArtefactSchema as uo,ServiceArtefactsSchema as Do}from"@fjall/util";import{hasDockerfile as Oo}from"./util/dockerfileDetection.js";import{sleepAbortable as Co}from"./util/sleepAbortable.js";import{createSequencedCallbacks as yo}from"./util/sequencedCallbacks.js";import{fileExists as Io}from"@fjall/util/fsHelpers";import{success as xo,failure as ho,isSuccess as vo,isFailure as Fo}from"@fjall/generator";import{deploy as Uo}from"./orchestration/index.js";import{destroy as bo}from"./orchestration/index.js";import{buildParamsContext as Vo}from"./orchestration/contextHelpers.js";import{emitStepWarnings as Bo,emitWarningEvent as Ko}from"./orchestration/contextHelpers.js";import{ENGINE_DIAGNOSTIC_SCOPE as Ho}from"./util/diagnosticScopes.js";import{restart as Jo,probeSecretsDrift as Wo,probeServiceDeploymentStatus as Qo,computeSecretsDrift as jo,deriveStaleParameters as Zo,extractConsumedSsmParameters as qo}from"./orchestration/index.js";import{partitionAccounts as $o,deployDomains as ea}from"./orchestration/index.js";import{buildRegionList as ta,buildAccountRegionPairs as oa,cascadeHomeRegion as aa,cascadeOperationKey as ia}from"./orchestration/index.js";import{projectScalarSummary as sa,projectAccountRows as ca}from"./orchestration/index.js";import{reconcileProviderAccounts as la,mergeReconciledProviderAccounts as Sa}from"./orchestration/index.js";import{decideNextTransition as ma,reconcileTrailMigration as Ta,decommissionMemberTrailStorage as Ra,ORG_TRAIL_BUCKET_OUTPUT_KEY as _a,TRAIL_BUCKET_OUTPUT_KEY as Aa,TRAIL_KEY_ARN_OUTPUT_KEY as da}from"./orchestration/index.js";import{classifyDriftFailure as Da,fetchLastOperationEvents as Pa,DriftProbe as Oa,probePhysicalPresence as fa,clearDriftSuspects as Ca,defaultDriftJournalDir as Na,readDriftSuspects as ya,recordDriftSuspects as ga,detectStackDrift as Ia,runDriftPreFlight as La,formatDriftPreFlightBlock as xa,DRIFT_PREFLIGHT_TRIGGER_STATUSES as ha,DRIFT_PREFLIGHT_BUDGET_MS as va,runRoute53RecordPreflight as Fa}from"./orchestration/index.js";import{archiveCompletedRemediationJournal as Ua,computeRemediationOpId as ka,defaultRemediationJournalDir as ba,findRemediationJournalByOpId as Ya,listActiveRemediationOps as Va,listActiveRemediationOpsForContext as Ga,readRemediationJournal as Ba,sweepExpiredRemediationJournals as Ka,writeRemediationJournal as Xa,REMEDIATION_JOURNAL_RETENTION_DAYS as Ha,captureRemediationForensics as wa,defaultRemediationForensicsDir as Ja,applyRetainFlip as Wa,composeFlipCapabilities as Qa,computeTemplateDigest as ja,deriveRetainFlipTemplate as Za,findMarkedResourcesByOpId as qa,proveFlipMetadataOnly as za,readRetainFlipState as $a,verifyRetainFlipDiff as ei,FORGET_MARKER_KEY as ri,FORGET_FLIP_SPEC as ti,RECREATE_MARKER_KEY as oi,assessForgetResumability as ai,completeForgetAfterConverge as ii,completeForgetAfterDeploy as ni,formatRecreateInFlightCures as si,partitionPreFlightByRemediation as ci,runForgetSurgery as Ei,synthTemplateDeclaresResource as li,runRecreateSurgery as Si,snapshotPolicyForType as pi,SNAPSHOT_CAPABLE_RESOURCE_TYPES as mi,runRecreatePreFlight as Ti,deriveRemovalTemplate as Ri,findRemovalDeletionFailures as _i,findResourcesPresent as Ai,proveRemovalTargetsOnly as di,advertisableDriftVerbs as ui,buildDriftRepairTicket as Di,runDriftRepairGate as Pi,formatPinOutcomeDetail as Oi,pinProbeCoverage as fi,renderPinReportLines as Ci,runPinRemediation as Ni,captureLegacySurfaces as yi,decodeLegacyAnchor as gi,runIdentitySurfaceGate as Ii,collectIdentityPinCandidates as Li,degradedIdentityPinOutcomes as xi,renderIdentityPinReportLines as hi,runIdentityPinMigration as vi,composePostFailureRepairOffer as Fi,formatDriftRepairOffer as Mi,DriftRepairAvailableError as Ui,checkDeployPathStackAvailability as ki,isDeployPathBlockingStatus as bi,StackUnavailableError as Yi,assertLeaseBeforeStack as Vi,LeaseDeniedError as Gi}from"./orchestration/index.js";import{unlockBucket as Ki,unlockQueue as Xi}from"./orchestration/index.js";import{triageBucketPolicy as wi,isEnforceSslStatement as Ji,toResourcePolicyStatements as Wi,restoreBucketPolicy as Qi,synthesiseEnforceSslDocument as ji,ensureEnforceSsl as Zi,restoreAndReconcileQuarantinedBucket as qi}from"./orchestration/index.js";import{verifyOrgTrailDelivery as $i}from"./aws/cloudtrail/orgTrailDelivery.js";import{assumeRootForTask as rn,isRootTaskPolicyArn as tn,ROOT_TASK_POLICY_ARNS as on,MAX_ROOT_SESSION_SECONDS as an}from"./aws/sts/assumeRoot.js";import{parseAccountsConfiguration as sn,flattenAccountsToEnvironments as cn,extractAllAccountNames as En,accountsConfigToOUTree as ln,isStringArray as Sn,isAccountsConfig as pn,isOuOnlyAccountBucket as mn,OU_ONLY_ACCOUNT_BUCKETS as Tn}from"./orchestration/index.js";import{runOpenNextBuild as _n}from"./orchestration/index.js";import{runOrganisationSetup as dn,ORG_SETUP_PHASES as un}from"./orchestration/index.js";import{recordPhysicalName as Pn,parseRecordPhysicalName as On,recordSetKey as fn,deleteRecordSetsByKey as Cn,cascadeTakeoverDigestSeed as Nn,buildCascadeTakeoverTicket as yn,runCascadeTakeoverGate as gn,WorkerDomainDeployProvider as In,createWorkerDomainDeployProvider as Ln,createCascadeDomainProviderFactory as xn}from"./orchestration/index.js";import{assumeCascadeRole as vn}from"./orchestration/contextHelpers.js";import{DOMAIN_DELEGATION_ERROR_TYPES as Mn,DomainDelegationError as Un,DEFAULT_PUBLIC_RESOLVER_ADDRESSES as kn,PUBLIC_DNS_QUERY_TIMEOUT_MS as bn,createPublicResolvers as Yn,NS_PROPAGATION_DEFAULT_MAX_ATTEMPTS as Vn,NS_PROPAGATION_DEFAULT_INTERVAL_MS as Gn,waitForNsPropagation as Bn,ACM_CAA_ISSUERS as Kn,runCaaPreflight as Xn,deployDelegatedDomain as Hn,delegationRoleUnusableError as wn,deriveZonePhaseState as Jn,extractDelegationRoleArn as Wn,readDelegatedTopologyFromProps as Qn,readDomainStackOutputsByExport as jn,CROSS_ACCOUNT_DELEGATION_RESOURCE_TYPE as Zn,templateOwnsDelegationRecord as qn,deleteChildNsFromParent as zn,nsDelegationPhysicalName as $n,runDelegatedDomainDestroy as es}from"./orchestration/index.js";import{classifyZoneRecords as ts,buildSatelliteRecordIndex as os,createSystemDnsNameProbe as as,systemDnsNameProbe as is,normaliseRecordName as ns,isRoute53NameServer as ss,isDelegatedToRoute53 as cs}from"./orchestration/index.js";import{resolveBuildSecrets as ls,resolveSecretRefValue as Ss,resolveBuildSecretSessionProvider as ps,sourcedRefsFromBuildArgs as ms,resolveBuildArgs as Ts,buildBuildSecretSessionPolicy as Rs,buildDeploySessionPolicy as _s,buildDomainSessionPolicy as As,partitionForRegion as ds,validateBuildGroup as us}from"./orchestration/index.js";import{FrameworkRegistry as Ps}from"./orchestration/index.js";import{openNextBuilder as fs,staticSiteBuilder as Cs,dockerBuilder as Ns}from"./orchestration/index.js";import{StepRegistry as gs,getDestroyStepId as Is}from"./steps/index.js";import{buildDeployPlan as xs,computeDeployPlan as hs,computeAssemblyDigest as vs,digestHead as Fs,classifyImpact as Ms,derivePropertyChanges as Us,isDataLoss as ks,isStatefulResourceType as bs,renderPlanSummary as Ys,renderPlanLines as Vs,toWirePlanChanges as Gs,signApprovalToken as Bs,verifyApprovalToken as Ks,DEFAULT_APPROVAL_TTL_MS as Xs,APPROVAL_TOKEN_PATTERN as Hs,runApprovalGate as ws,approvalRefusalReason as Js}from"./orchestration/index.js";import{runDestructionGate as Qs,buildDestructionTicket as js,evaluateDestructionConsents as Zs,computeTicketDigest as qs,legalRemediationVerbs as zs,executableRemediationVerbs as $s,advertisableRemediationVerbs as ec,renderDestructionTicketLines as rc,renderConsentVerdictLines as tc,loadDeployPlan as oc,createMemoisedPlanLoader as ac}from"./orchestration/index.js";import{DEPLOYMENT_FAILURE_CLASSIFIER_VERSION as nc,classifyDeployFailure as sc,classifyFromEcsCompletion as cc,classifyFromFailureAnalysis as Ec,classifyUnclassified as lc}from"./orchestration/failure/classifyFailure.js";import{attachDeploymentFailure as pc,getDeploymentFailure as mc}from"./orchestration/failure/deploymentFailureAttachment.js";export{Kn as ACM_CAA_ISSUERS,Q as ALL_PROGRESS_KINDS,Nr as APPLICATION_DEPLOY_ORDER,yr as APPLICATION_DESTROY_ORDER,fr as APPLICATION_STACKS,W as APPROVAL_DECISIONS,J as APPROVAL_KINDS,Hs as APPROVAL_TOKEN_PATTERN,$r as ApplicationError,qt as ApplicationStackService,oo as AuthError,ao as AwsError,K as BUILDERS,ro as BaseServiceError,Y as CASCADE_ACCOUNT_PHASES,p as CASCADE_ACCOUNT_STATUSES,X as CASCADE_OUTCOME_RESULTS,S as CASCADE_PHASES,qr as CDK_NO_STACKS_MATCH,tr as CONSENT_VERDICTS,Zn as CROSS_ACCOUNT_DELEGATION_RESOURCE_TYPE,Ct as CdkArgumentBuilder,wt as CdkContextBuilder,$t as CdkError,Lt as CdkEventMonitor,Nt as CdkProcessManager,ft as CdkService,P as ChangeCountsSchema,Vt as CloudFormationError,Pt as CloudFormationEventMonitor,Yt as CloudFormationService,co as ConfigError,Xs as DEFAULT_APPROVAL_TTL_MS,ht as DEFAULT_DEPLOY_TIMEOUT_MS,ve as DEFAULT_MAX_PAGES,kn as DEFAULT_PUBLIC_RESOLVER_ADDRESSES,It as DEPENDENCY_SYNC_TIMEOUT_MS,l as DEPLOYMENT_ERROR_MESSAGE_MAX,c as DEPLOYMENT_EVENT_ERROR_MESSAGE_MAX,n as DEPLOYMENT_EVENT_RESOURCE_CATEGORIES,s as DEPLOYMENT_EVENT_STATUS_REASON_MAX,E as DEPLOYMENT_EVENT_TRAIL_DETAIL_MAX,i as DEPLOYMENT_EVENT_TYPES,nc as DEPLOYMENT_FAILURE_CLASSIFIER_VERSION,t as DEPLOY_CORE_VERSION_GLOBAL,F as DEPLOY_EVENT_ARN_MAX,O as DEPLOY_EVENT_CONTRACT,f as DEPLOY_EVENT_CONTRACT_MAJOR,C as DEPLOY_EVENT_CONTRACT_MINOR,x as DEPLOY_EVENT_ERROR_MESSAGE_MAX,y as DEPLOY_EVENT_ID_MAX,I as DEPLOY_EVENT_MESSAGE_MAX,g as DEPLOY_EVENT_NAME_MAX,v as DEPLOY_EVENT_OUTPUT_MAX,L as DEPLOY_EVENT_STATUS_REASON_MAX,h as DEPLOY_EVENT_TRAIL_DETAIL_MAX,M as DEPLOY_EVENT_URL_MAX,V as DEPLOY_RESULTS,rr as DESTRUCTION_FINDINGS,G as DETECTION_PHASES,Mn as DOMAIN_DELEGATION_ERROR_TYPES,va as DRIFT_PREFLIGHT_BUDGET_MS,ha as DRIFT_PREFLIGHT_TRIGGER_STATUSES,nr as DRIFT_VERDICTS,_ as DeployEventSchema,Ao as DeployModeSchema,d as DeployResourceSchema,io as DeploymentError,a as DeploymentEventSchema,$e as DestructionConsentSchema,Ze as DestructionFindingSchema,er as DestructionOutcomeSchema,qe as DestructionTicketResourceSchema,ze as DestructionTicketSchema,Un as DomainDelegationError,Er as DriftFindingSchema,lr as DriftJournalRecordSchema,Oa as DriftProbe,Ui as DriftRepairAvailableError,cr as DriftSuspectSchema,sr as DriftVerdictSchema,Ho as ENGINE_DIAGNOSTIC_SCOPE,Bt as EcsError,Gt as EcsService,Kt as EcsServiceResolver,ti as FORGET_FLIP_SPEC,ri as FORGET_MARKER_KEY,so as FileSystemError,it as FjallStateFileSchema,Ps as FrameworkRegistry,je as IDENTITY_PIN_SLOT_SWAP_GLOSS,Fe as IDENTITY_STORE_PAGE_SIZE,zr as INFRASTRUCTURE_FILENAME,He as INFRASTRUCTURE_STEP_NAMES,we as INFRA_STEP_NAME,ut as LEGACY_DOMAIN_STATE_FILENAME,k as LOG_LEVELS,Gi as LeaseDeniedError,an as MAX_ROOT_SESSION_SECONDS,Gn as NS_PROPAGATION_DEFAULT_INTERVAL_MS,Vn as NS_PROPAGATION_DEFAULT_MAX_ATTEMPTS,no as NetworkError,gr as OPENNEXT_DEPLOY_ORDER,Ir as OPENNEXT_DESTROY_ORDER,hr as OPENNEXT_PARALLEL_GROUPS,Qr as OPENNEXT_PATTERNS,Cr as ORGANISATION_TYPES,un as ORG_SETUP_PHASES,_a as ORG_TRAIL_BUCKET_OUTPUT_KEY,Tn as OU_ONLY_ACCOUNT_BUCKETS,Lr as PARALLEL_DEPLOY_GROUPS,xr as PARALLEL_DESTROY_GROUPS,vr as PARALLEL_OPERATION_TYPES,B as PHASE_STATUSES,H as PLAN_ACTIONS,Wt as PROGRESS_MESSAGES,bn as PUBLIC_DNS_QUERY_TIMEOUT_MS,u as PlanChangeSchema,D as PlanPropertyChangeSchema,oi as RECREATE_MARKER_KEY,Ha as REMEDIATION_JOURNAL_RETENTION_DAYS,mr as REMEDIATION_PHASES,Qe as REMEDIATION_VERB_GLOSS,w as REPLACEMENT_MODES,Ve as ROOT_ACCESS_FEATURES,on as ROOT_TASK_POLICY_ARNS,_r as RemediationFlipProofSchema,Ar as RemediationJournalRecordSchema,Tr as RemediationPhaseSchema,Rr as RemediationTargetSchema,We as RemediationVerbSchema,dr as RemediationVerbWithSurgerySchema,Ge as RootAccessEnablementError,be as SECURITY_SERVICE_PRINCIPALS,Te as SERVICE_PRINCIPALS,mi as SNAPSHOT_CAPABLE_RESOURCE_TYPES,b as STACK_CLEANUP_PHASES,Zr as STACK_FAILED_STATE_PATTERN,jr as STACK_NOT_FOUND_PATTERN,U as STEP_COMPLETE_STATUSES,Ke as STEP_IDS,Xe as STEP_NAMES,N as SUPPORTED_CONTRACT_MARKERS,uo as ServiceArtefactSchema,Do as ServiceArtefactsSchema,$ as SimpleAwsProvider,Yi as StackUnavailableError,A as StepProgressSchema,gs as StepRegistry,or as TICKET_VERDICT_SOURCES,Aa as TRAIL_BUCKET_OUTPUT_KEY,da as TRAIL_KEY_ARN_OUTPUT_KEY,Ht as TemplateHashError,Xt as TemplateHashService,ar as TicketVerdictSourceSchema,to as ValidationError,In as WorkerDomainDeployProvider,ln as accountsConfigToOUTree,ye as activateCostAllocationTags,_e as activateTrustedAccess,ui as advertisableDriftVerbs,ec as advertisableRemediationVerbs,Wa as applyRetainFlip,Js as approvalRefusalReason,Ua as archiveCompletedRemediationJournal,_o as artefactOutputKey,Vi as assertLeaseBeforeStack,ai as assessForgetResumability,vn as assumeCascadeRole,rn as assumeRootForTask,pc as attachDeploymentFailure,oa as buildAccountRegionPairs,Ce as buildAccountToOUMap,Rs as buildBuildSecretSessionPolicy,yn as buildCascadeTakeoverTicket,xs as buildDeployPlan,_s as buildDeploySessionPolicy,js as buildDestructionTicket,As as buildDomainSessionPolicy,Di as buildDriftRepairTicket,Vo as buildParamsContext,ta as buildRegionList,os as buildSatelliteRecordIndex,jt as buildStepContextBuildConfig,ae as buildTargetSetUnreadyAdvisory,oe as buildTargetUnreadyAdvisory,yi as captureLegacySurfaces,wa as captureRemediationForensics,aa as cascadeHomeRegion,ia as cascadeOperationKey,Nn as cascadeTakeoverDigestSeed,ki as checkDeployPathStackAvailability,ge as checkIdentityCentreStatus,se as checkRegionEnabled,re as checkTargetReadiness,m as clampDeploymentEventStrings,sc as classifyDeployFailure,Da as classifyDriftFailure,cc as classifyFromEcsCompletion,Ec as classifyFromFailureAnalysis,Ms as classifyImpact,lc as classifyUnclassified,ts as classifyZoneRecords,gt as clearDependencyIntegrityCache,Ca as clearDriftSuspects,Li as collectIdentityPinCandidates,ii as completeForgetAfterConverge,ni as completeForgetAfterDeploy,Qa as composeFlipCapabilities,Fi as composePostFailureRepairOffer,Le as composeSdkAbortSignal,vs as computeAssemblyDigest,hs as computeDeployPlan,ka as computeRemediationOpId,jo as computeSecretsDrift,ja as computeTemplateDigest,qs as computeTicketDigest,Zt as convertCloudFormationOutputsToRecord,Pe as createAccount,xn as createCascadeDomainProviderFactory,j as createDeployEmitter,ct as createEmptyState,ac as createMemoisedPlanLoader,Yn as createPublicResolvers,yo as createSequencedCallbacks,as as createSystemDnsNameProbe,Ln as createWorkerDomainDeployProvider,ma as decideNextTransition,gi as decodeLegacyAnchor,Ra as decommissionMemberTrailStorage,Na as defaultDriftJournalDir,Ja as defaultRemediationForensicsDir,ba as defaultRemediationJournalDir,xi as degradedIdentityPinOutcomes,wn as delegationRoleUnusableError,zn as deleteChildNsFromParent,At as deleteDomainState,Cn as deleteRecordSetsByKey,Et as deleteStateFile,Uo as deploy,Hn as deployDelegatedDomain,ea as deployDomains,Us as derivePropertyChanges,Ri as deriveRemovalTemplate,ot as deriveResourcesFromManifestStacks,Za as deriveRetainFlipTemplate,Zo as deriveStaleParameters,Jn as deriveZonePhaseState,Se as describeOrganisation,te as describeTargetReadinessReason,bo as destroy,Ia as detectStackDrift,Fs as digestHead,Ns as dockerBuilder,Me as drainPages,Jt as emitProgress,Bo as emitStepWarnings,Ko as emitWarningEvent,Ye as enableCentralisedRootAccess,Ae as enableIpamDelegatedAdmin,pe as enablePolicyTypes,Re as enableRamSharing,me as enableServiceAccess,yt as ensureDependencyIntegrity,Zi as ensureEnforceSsl,le as ensureOrganisationExists,Oe as ensureOrganisationalUnitsExist,Zs as evaluateDestructionConsents,$s as executableRemediationVerbs,En as extractAllAccountNames,qo as extractConsumedSsmParameters,Wn as extractDelegationRoleArn,xe as extractErrorName,ho as failure,Pa as fetchLastOperationEvents,Io as fileExists,So as filterDangerousEnvVars,De as findAccount,Ne as findDevelopmentOuId,qa as findMarkedResourcesByOpId,Ya as findRemediationJournalByOpId,_i as findRemovalDeletionFailures,Ai as findResourcesPresent,cn as flattenAccountsToEnvironments,xa as formatDriftPreFlightBlock,Mi as formatDriftRepairOffer,Ft as formatInfrastructureError,Oi as formatPinOutcomeDetail,si as formatRecreateInFlightCures,br as getApplicationDeployOrder,Yr as getApplicationDestroyOrder,Vr as getApplicationStackName,wr as getApplicationStepId,Hr as getApplicationStepName,mc as getDeploymentFailure,Is as getDestroyStepId,Gr as getOrganisationStackName,Ur as getParallelDeployGroups,kr as getParallelDestroyGroups,Ut as getSourceContext,St as getStateFilePath,Mt as getStructuralHint,kt as hasCdkDifferences,Oo as hasDockerfile,dt as hashDomainDirectory,he as isAborted,pn as isAccountsConfig,Fr as isApplicationOperation,Br as isApplicationStack,vt as isCdkError,ks as isDataLoss,cs as isDelegatedToRoute53,bi as isDeployPathBlockingStatus,Ji as isEnforceSslStatement,Fo as isFailure,Ue as isOULeaf,Wr as isOpenNextPattern,Mr as isOrganisationOperation,mn as isOuOnlyAccountBucket,Kr as isQuarantineDetail,Pr as isRemediationPlaceholderPhysicalId,Xr as isRetainedBucketsDetail,tn as isRootTaskPolicyArn,ss as isRoute53NameServer,bs as isStatefulResourceType,Sn as isStringArray,vo as isSuccess,zs as legalRemediationVerbs,ue as listAccounts,Va as listActiveRemediationOps,Ga as listActiveRemediationOpsForContext,oc as loadDeployPlan,po as maskSensitiveOutput,Sa as mergeReconciledProviderAccounts,ns as normaliseRecordName,$n as nsDelegationPhysicalName,fs as openNextBuilder,sn as parseAccountsConfiguration,Qt as parseBuildPhase,q as parseDeployContractVersion,Z as parseDeployEvent,bt as parseDiffOutput,On as parseRecordPhysicalName,mo as parseShellArgs,$o as partitionAccounts,ds as partitionForRegion,ci as partitionPreFlightByRemediation,fi as pinProbeCoverage,fe as placeAccountsInOUs,ie as probeAccountStackExists,fa as probePhysicalPresence,Wo as probeSecretsDrift,Qo as probeServiceDeploymentStatus,ca as projectAccountRows,sa as projectScalarSummary,za as proveFlipMetadataOnly,di as proveRemovalTargetsOnly,Qn as readDelegatedTopologyFromProps,jn as readDomainStackOutputsByExport,Tt as readDomainState,ya as readDriftSuspects,Ba as readRemediationJournal,$a as readRetainFlipState,nt as readStateFile,la as reconcileProviderAccounts,Ta as reconcileTrailMigration,_t as recordDomainDeployState,ga as recordDriftSuspects,Pn as recordPhysicalName,fn as recordSetKey,ce as regionDisabledMessage,pt as regionSuffix,ke as registerSecurityDelegates,ur as remediationPhaseRank,Dr as remediationPlaceholderPhysicalId,tc as renderConsentVerdictLines,rc as renderDestructionTicketLines,hi as renderIdentityPinReportLines,Ci as renderPinReportLines,Vs as renderPlanLines,Ys as renderPlanSummary,Ts as resolveBuildArgs,ps as resolveBuildSecretSessionProvider,ls as resolveBuildSecrets,Ss as resolveSecretRefValue,Jo as restart,qi as restoreAndReconcileQuarantinedBucket,Qi as restoreBucketPolicy,ws as runApprovalGate,Xn as runCaaPreflight,gn as runCascadeTakeoverGate,es as runDelegatedDomainDestroy,Qs as runDestructionGate,La as runDriftPreFlight,Pi as runDriftRepairGate,Ei as runForgetSurgery,vi as runIdentityPinMigration,Ii as runIdentitySurfaceGate,_n as runOpenNextBuild,dn as runOrganisationSetup,Ni as runPinRemediation,Ti as runRecreatePreFlight,Si as runRecreateSurgery,Fa as runRoute53RecordPreflight,Bs as signApprovalToken,To as sleep,Co as sleepAbortable,Ie as snapshotIdentityCentre,pi as snapshotPolicyForType,ms as sourcedRefsFromBuildArgs,xt as startStackMonitoring,Cs as staticSiteBuilder,rt as stubCallerIdentity,xo as success,Ka as sweepExpiredRemediationJournals,li as synthTemplateDeclaresResource,ji as synthesiseEnforceSslDocument,is as systemDnsNameProbe,qn as templateOwnsDelegationRecord,Jr as toPascalCase,Wi as toResourcePolicyStatements,Eo as toServiceError,Gs as toWirePlanChanges,wi as triageBucketPolicy,T as truncateUtf16Safe,Ki as unlockBucket,Xi as unlockQueue,de as updateBackupGlobalSettings,lt as updateTemplateHash,us as validateBuildGroup,Sr as verbsForDriftVerdict,Ks as verifyApprovalToken,$i as verifyOrgTrailDelivery,ei as verifyRetainFlipDiff,Bn as waitForNsPropagation,et as wrapApplicationError,Rt as writeDomainState,Xa as writeRemediationJournal,st as writeStateFile};
+import{DEPLOY_CORE_VERSION_GLOBAL as t}from"./version.js";import{DeploymentEventSchema as a,DEPLOYMENT_EVENT_TYPES as i,DEPLOYMENT_EVENT_RESOURCE_CATEGORIES as n,DEPLOYMENT_EVENT_STATUS_REASON_MAX as s,DEPLOYMENT_EVENT_ERROR_MESSAGE_MAX as c,DEPLOYMENT_EVENT_TRAIL_DETAIL_MAX as E,DEPLOYMENT_ERROR_MESSAGE_MAX as l,CASCADE_PHASES as S,CASCADE_ACCOUNT_STATUSES as p,clampDeploymentEventStrings as m,truncateUtf16Safe as T}from"./types/index.js";import{DeployEventSchema as _,StepProgressSchema as A,DeployResourceSchema as d,PlanChangeSchema as u,PlanPropertyChangeSchema as D,ChangeCountsSchema as P,DEPLOY_EVENT_CONTRACT as O,DEPLOY_EVENT_CONTRACT_MAJOR as f,DEPLOY_EVENT_CONTRACT_MINOR as C,SUPPORTED_CONTRACT_MARKERS as N,DEPLOY_EVENT_ID_MAX as y,DEPLOY_EVENT_NAME_MAX as g,DEPLOY_EVENT_MESSAGE_MAX as I,DEPLOY_EVENT_STATUS_REASON_MAX as L,DEPLOY_EVENT_ERROR_MESSAGE_MAX as x,DEPLOY_EVENT_TRAIL_DETAIL_MAX as h,DEPLOY_EVENT_OUTPUT_MAX as v,DEPLOY_EVENT_ARN_MAX as F,DEPLOY_EVENT_URL_MAX as M,STEP_COMPLETE_STATUSES as U,LOG_LEVELS as k,STACK_CLEANUP_PHASES as b,CASCADE_ACCOUNT_PHASES as Y,DEPLOY_RESULTS as V,DETECTION_PHASES as G,PHASE_STATUSES as B,BUILDERS as K,CASCADE_OUTCOME_RESULTS as X,PLAN_ACTIONS as H,REPLACEMENT_MODES as w,APPROVAL_KINDS as J,APPROVAL_DECISIONS as W,ALL_PROGRESS_KINDS as Q,createDeployEmitter as j,parseDeployEvent as Z,parseDeployContractVersion as q}from"./types/index.js";import{SimpleAwsProvider as $}from"./aws/index.js";import{checkTargetReadiness as re,describeTargetReadinessReason as te,buildTargetUnreadyAdvisory as oe,buildTargetSetUnreadyAdvisory as ae,probeAccountStackExists as ie}from"./aws/index.js";import{checkRegionEnabled as se,regionDisabledMessage as ce}from"./aws/index.js";import{ensureOrganisationExists as le,describeOrganisation as Se,enablePolicyTypes as pe,enableServiceAccess as me,SERVICE_PRINCIPALS as Te,enableRamSharing as Re,activateTrustedAccess as _e,enableIpamDelegatedAdmin as Ae,updateBackupGlobalSettings as de,listAccounts as ue,findAccount as De,createAccount as Pe,ensureOrganisationalUnitsExist as Oe,placeAccountsInOUs as fe,buildAccountToOUMap as Ce,findDevelopmentOuId as Ne,activateCostAllocationTags as ye,checkIdentityCentreStatus as ge,snapshotIdentityCentre as Ie,composeSdkAbortSignal as Le,extractErrorName as xe,isAborted as he,DEFAULT_MAX_PAGES as ve,IDENTITY_STORE_PAGE_SIZE as Fe,drainPages as Me,isOULeaf as Ue,registerSecurityDelegates as ke,SECURITY_SERVICE_PRINCIPALS as be,enableCentralisedRootAccess as Ye,ROOT_ACCESS_FEATURES as Ve,RootAccessEnablementError as Ge}from"./aws/index.js";import{STEP_IDS as Ke,STEP_NAMES as Xe,INFRASTRUCTURE_STEP_NAMES as He,INFRA_STEP_NAME as we}from"./types/index.js";import{RemediationVerbSchema as We,REMEDIATION_VERB_GLOSS as Qe,IDENTITY_PIN_SLOT_SWAP_GLOSS as je,DestructionFindingSchema as Ze,DestructionTicketResourceSchema as qe,DestructionTicketSchema as ze,DestructionConsentSchema as $e,DestructionOutcomeSchema as er,DESTRUCTION_FINDINGS as rr,CONSENT_VERDICTS as tr,TICKET_VERDICT_SOURCES as or,TicketVerdictSourceSchema as ar}from"./types/index.js";import{DRIFT_VERDICTS as nr,DriftVerdictSchema as sr,DriftSuspectSchema as cr,DriftFindingSchema as Er,DriftJournalRecordSchema as lr,verbsForDriftVerdict as Sr}from"./types/index.js";import{REMEDIATION_PHASES as mr,RemediationPhaseSchema as Tr,RemediationTargetSchema as Rr,RemediationFlipProofSchema as _r,RemediationJournalRecordSchema as Ar,RemediationVerbWithSurgerySchema as dr,remediationPhaseRank as ur,remediationPlaceholderPhysicalId as Dr,isRemediationPlaceholderPhysicalId as Pr}from"./types/index.js";import{APPLICATION_STACKS as fr,ORGANISATION_TYPES as Cr,APPLICATION_DEPLOY_ORDER as Nr,APPLICATION_DESTROY_ORDER as yr,OPENNEXT_DEPLOY_ORDER as gr,OPENNEXT_DESTROY_ORDER as Ir,PARALLEL_DEPLOY_GROUPS as Lr,PARALLEL_DESTROY_GROUPS as xr,OPENNEXT_PARALLEL_GROUPS as hr,PARALLEL_OPERATION_TYPES as vr,isApplicationOperation as Fr,isOrganisationOperation as Mr,getParallelDeployGroups as Ur,getParallelDestroyGroups as kr,getApplicationDeployOrder as br,getApplicationDestroyOrder as Yr,getApplicationStackName as Vr,getOrganisationStackName as Gr,isApplicationStack as Br,isQuarantineDetail as Kr,isRetainedBucketsDetail as Xr,getApplicationStepName as Hr,getApplicationStepId as wr,toPascalCase as Jr,isOpenNextPattern as Wr,OPENNEXT_PATTERNS as Qr,STACK_NOT_FOUND_PATTERN as jr,STACK_FAILED_STATE_PATTERN as Zr,CDK_NO_STACKS_MATCH as qr,INFRASTRUCTURE_FILENAME as zr,ApplicationError as $r,wrapApplicationError as et,stubCallerIdentity as rt}from"./types/index.js";import{deriveResourcesFromManifestStacks as ot}from"./types/detection/patternDetection.js";import{FjallStateFileSchema as it,readStateFile as nt,writeStateFile as st,createEmptyState as ct,deleteStateFile as Et,updateTemplateHash as lt,getStateFilePath as St,regionSuffix as pt}from"./types/config/FjallState.js";import{readDomainState as Tt,writeDomainState as Rt,recordDomainDeployState as _t,deleteDomainState as At,hashDomainDirectory as dt,LEGACY_DOMAIN_STATE_FILENAME as ut}from"./types/config/DomainState.js";import{CloudFormationEventMonitor as Pt}from"./aws/index.js";import{CdkService as ft,CdkArgumentBuilder as Ct,CdkProcessManager as Nt,ensureDependencyIntegrity as yt,clearDependencyIntegrityCache as gt,DEPENDENCY_SYNC_TIMEOUT_MS as It,CdkEventMonitor as Lt,startStackMonitoring as xt,DEFAULT_DEPLOY_TIMEOUT_MS as ht,isCdkError as vt,formatInfrastructureError as Ft,getStructuralHint as Mt,getSourceContext as Ut,hasCdkDifferences as kt,parseDiffOutput as bt,CloudFormationService as Yt,CloudFormationError as Vt,EcsService as Gt,EcsError as Bt,EcsServiceResolver as Kt,TemplateHashService as Xt,TemplateHashError as Ht,CdkContextBuilder as wt,emitProgress as Jt,PROGRESS_MESSAGES as Wt,parseBuildPhase as Qt,buildStepContextBuildConfig as jt,convertCloudFormationOutputsToRecord as Zt,ApplicationStackService as qt}from"./services/index.js";import{CdkError as $t}from"./types/errors/index.js";import{BaseServiceError as ro,ValidationError as to,AuthError as oo,AwsError as ao,DeploymentError as io,NetworkError as no,FileSystemError as so,ConfigError as co,toServiceError as Eo}from"./types/errors/index.js";import{filterDangerousEnvVars as So,maskSensitiveOutput as po,parseShellArgs as mo,sleep as To}from"@fjall/util";import{artefactOutputKey as _o,DeployModeSchema as Ao,ServiceArtefactSchema as uo,ServiceArtefactsSchema as Do}from"@fjall/util";import{hasDockerfile as Oo}from"./util/dockerfileDetection.js";import{sleepAbortable as Co}from"./util/sleepAbortable.js";import{createSequencedCallbacks as yo}from"./util/sequencedCallbacks.js";import{fileExists as Io}from"@fjall/util/fsHelpers";import{success as xo,failure as ho,isSuccess as vo,isFailure as Fo}from"@fjall/generator";import{deploy as Uo}from"./orchestration/index.js";import{destroy as bo}from"./orchestration/index.js";import{buildParamsContext as Vo}from"./orchestration/contextHelpers.js";import{emitStepWarnings as Bo,emitWarningEvent as Ko}from"./orchestration/contextHelpers.js";import{ENGINE_DIAGNOSTIC_SCOPE as Ho}from"./util/diagnosticScopes.js";import{restart as Jo,probeSecretsDrift as Wo,probeServiceDeploymentStatus as Qo,computeSecretsDrift as jo,deriveStaleParameters as Zo,extractConsumedSsmParameters as qo}from"./orchestration/index.js";import{partitionAccounts as $o,deployDomains as ea}from"./orchestration/index.js";import{buildRegionList as ta,buildAccountRegionPairs as oa,cascadeHomeRegion as aa,cascadeOperationKey as ia}from"./orchestration/index.js";import{projectScalarSummary as sa,projectAccountRows as ca}from"./orchestration/index.js";import{reconcileProviderAccounts as la,mergeReconciledProviderAccounts as Sa}from"./orchestration/index.js";import{decideNextTransition as ma,reconcileTrailMigration as Ta,decommissionMemberTrailStorage as Ra,ORG_TRAIL_BUCKET_OUTPUT_KEY as _a,TRAIL_BUCKET_OUTPUT_KEY as Aa,TRAIL_KEY_ARN_OUTPUT_KEY as da}from"./orchestration/index.js";import{classifyDriftFailure as Da,fetchLastOperationEvents as Pa,DriftProbe as Oa,probePhysicalPresence as fa,clearDriftSuspects as Ca,defaultDriftJournalDir as Na,readDriftSuspects as ya,recordDriftSuspects as ga,detectStackDrift as Ia,runDriftPreFlight as La,formatDriftPreFlightBlock as xa,DRIFT_PREFLIGHT_TRIGGER_STATUSES as ha,DRIFT_PREFLIGHT_BUDGET_MS as va,runRoute53RecordPreflight as Fa}from"./orchestration/index.js";import{archiveCompletedRemediationJournal as Ua,computeRemediationOpId as ka,defaultRemediationJournalDir as ba,findRemediationJournalByOpId as Ya,listActiveRemediationOps as Va,listActiveRemediationOpsForContext as Ga,readRemediationJournal as Ba,sweepExpiredRemediationJournals as Ka,writeRemediationJournal as Xa,REMEDIATION_JOURNAL_RETENTION_DAYS as Ha,captureRemediationForensics as wa,defaultRemediationForensicsDir as Ja,applyRetainFlip as Wa,composeFlipCapabilities as Qa,computeTemplateDigest as ja,deriveRetainFlipTemplate as Za,findMarkedResourcesByOpId as qa,proveFlipMetadataOnly as za,readRetainFlipState as $a,verifyRetainFlipDiff as ei,FORGET_MARKER_KEY as ri,FORGET_FLIP_SPEC as ti,RECREATE_MARKER_KEY as oi,assessForgetResumability as ai,completeForgetAfterConverge as ii,completeForgetAfterDeploy as ni,formatRecreateInFlightCures as si,partitionPreFlightByRemediation as ci,runForgetSurgery as Ei,synthTemplateDeclaresResource as li,runRecreateSurgery as Si,snapshotPolicyForType as pi,SNAPSHOT_CAPABLE_RESOURCE_TYPES as mi,runRecreatePreFlight as Ti,deriveRemovalTemplate as Ri,findRemovalDeletionFailures as _i,findResourcesPresent as Ai,proveRemovalTargetsOnly as di,advertisableDriftVerbs as ui,buildDriftRepairTicket as Di,runDriftRepairGate as Pi,formatPinOutcomeDetail as Oi,pinProbeCoverage as fi,renderPinReportLines as Ci,runPinRemediation as Ni,captureLegacySurfaces as yi,decodeLegacyAnchor as gi,runIdentitySurfaceGate as Ii,collectIdentityPinCandidates as Li,degradedIdentityPinOutcomes as xi,renderIdentityPinReportLines as hi,runIdentityPinMigration as vi,composePostFailureRepairOffer as Fi,formatDriftRepairOffer as Mi,DriftRepairAvailableError as Ui,checkDeployPathStackAvailability as ki,isDeployPathBlockingStatus as bi,StackUnavailableError as Yi,assertLeaseBeforeStack as Vi,LeaseDeniedError as Gi}from"./orchestration/index.js";import{unlockBucket as Ki,unlockQueue as Xi}from"./orchestration/index.js";import{triageBucketPolicy as wi,isEnforceSslStatement as Ji,toResourcePolicyStatements as Wi,restoreBucketPolicy as Qi,synthesiseEnforceSslDocument as ji,ensureEnforceSsl as Zi,restoreAndReconcileQuarantinedBucket as qi}from"./orchestration/index.js";import{verifyOrgTrailDelivery as $i}from"./aws/cloudtrail/orgTrailDelivery.js";import{assumeRootForTask as rn,isRootTaskPolicyArn as tn,ROOT_TASK_POLICY_ARNS as on,MAX_ROOT_SESSION_SECONDS as an}from"./aws/sts/assumeRoot.js";import{parseAccountsConfiguration as sn,flattenAccountsToEnvironments as cn,extractAllAccountNames as En,accountsConfigToOUTree as ln,isStringArray as Sn,isAccountsConfig as pn,isOuOnlyAccountBucket as mn,OU_ONLY_ACCOUNT_BUCKETS as Tn}from"./orchestration/index.js";import{runOpenNextBuild as _n}from"./orchestration/index.js";import{runOrganisationSetup as dn,ORG_SETUP_PHASES as un}from"./orchestration/index.js";import{recordPhysicalName as Pn,parseRecordPhysicalName as On,recordSetKey as fn,deleteRecordSetsByKey as Cn,cascadeTakeoverDigestSeed as Nn,buildCascadeTakeoverTicket as yn,runCascadeTakeoverGate as gn,WorkerDomainDeployProvider as In,createWorkerDomainDeployProvider as Ln,createCascadeDomainProviderFactory as xn}from"./orchestration/index.js";import{assumeCascadeRole as vn}from"./orchestration/contextHelpers.js";import{DOMAIN_DELEGATION_ERROR_TYPES as Mn,DomainDelegationError as Un,DEFAULT_PUBLIC_RESOLVER_ADDRESSES as kn,PUBLIC_DNS_QUERY_TIMEOUT_MS as bn,createPublicResolvers as Yn,NS_PROPAGATION_DEFAULT_MAX_ATTEMPTS as Vn,NS_PROPAGATION_DEFAULT_INTERVAL_MS as Gn,waitForNsPropagation as Bn,ACM_CAA_ISSUERS as Kn,runCaaPreflight as Xn,deployDelegatedDomain as Hn,delegationRoleUnusableError as wn,deriveZonePhaseState as Jn,extractDelegationRoleArn as Wn,readDelegatedTopologyFromProps as Qn,readDomainStackOutputsByExport as jn,CROSS_ACCOUNT_DELEGATION_RESOURCE_TYPE as Zn,templateOwnsDelegationRecord as qn,deleteChildNsFromParent as zn,nsDelegationPhysicalName as $n,runDelegatedDomainDestroy as es}from"./orchestration/index.js";import{classifyZoneRecords as ts,buildSatelliteRecordIndex as os,createSystemDnsNameProbe as as,systemDnsNameProbe as is,normaliseRecordName as ns,isRoute53NameServer as ss,isDelegatedToRoute53 as cs}from"./orchestration/index.js";import{resolveBuildSecrets as ls,resolveSecretRefValue as Ss,resolveBuildSecretSessionProvider as ps,sourcedRefsFromBuildArgs as ms,resolveBuildArgs as Ts,buildBuildSecretSessionPolicy as Rs,buildDeploySessionPolicy as _s,buildDomainSessionPolicy as As,partitionForRegion as ds,validateBuildGroup as us}from"./orchestration/index.js";import{FrameworkRegistry as Ps}from"./orchestration/index.js";import{openNextBuilder as fs,staticSiteBuilder as Cs,dockerBuilder as Ns}from"./orchestration/index.js";import{StepRegistry as gs,getDestroyStepId as Is}from"./steps/index.js";import{buildDeployPlan as xs,computeDeployPlan as hs,computeAssemblyDigest as vs,digestHead as Fs,classifyImpact as Ms,derivePropertyChanges as Us,isDataLoss as ks,isStatefulResourceType as bs,renderPlanSummary as Ys,renderPlanLines as Vs,summarisePlanRisk as Gs,toWirePlanChanges as Bs,signApprovalToken as Ks,verifyApprovalToken as Xs,DEFAULT_APPROVAL_TTL_MS as Hs,APPROVAL_TOKEN_PATTERN as ws,runApprovalGate as Js,approvalRefusalReason as Ws}from"./orchestration/index.js";import{runDestructionGate as js,buildDestructionTicket as Zs,evaluateDestructionConsents as qs,computeTicketDigest as zs,legalRemediationVerbs as $s,executableRemediationVerbs as ec,advertisableRemediationVerbs as rc,renderDestructionTicketLines as tc,renderConsentVerdictLines as oc,loadDeployPlan as ac,createMemoisedPlanLoader as ic}from"./orchestration/index.js";import{DEPLOYMENT_FAILURE_CLASSIFIER_VERSION as sc,classifyDeployFailure as cc,classifyFromEcsCompletion as Ec,classifyFromFailureAnalysis as lc,classifyUnclassified as Sc}from"./orchestration/failure/classifyFailure.js";import{attachDeploymentFailure as mc,getDeploymentFailure as Tc}from"./orchestration/failure/deploymentFailureAttachment.js";export{Kn as ACM_CAA_ISSUERS,Q as ALL_PROGRESS_KINDS,Nr as APPLICATION_DEPLOY_ORDER,yr as APPLICATION_DESTROY_ORDER,fr as APPLICATION_STACKS,W as APPROVAL_DECISIONS,J as APPROVAL_KINDS,ws as APPROVAL_TOKEN_PATTERN,$r as ApplicationError,qt as ApplicationStackService,oo as AuthError,ao as AwsError,K as BUILDERS,ro as BaseServiceError,Y as CASCADE_ACCOUNT_PHASES,p as CASCADE_ACCOUNT_STATUSES,X as CASCADE_OUTCOME_RESULTS,S as CASCADE_PHASES,qr as CDK_NO_STACKS_MATCH,tr as CONSENT_VERDICTS,Zn as CROSS_ACCOUNT_DELEGATION_RESOURCE_TYPE,Ct as CdkArgumentBuilder,wt as CdkContextBuilder,$t as CdkError,Lt as CdkEventMonitor,Nt as CdkProcessManager,ft as CdkService,P as ChangeCountsSchema,Vt as CloudFormationError,Pt as CloudFormationEventMonitor,Yt as CloudFormationService,co as ConfigError,Hs as DEFAULT_APPROVAL_TTL_MS,ht as DEFAULT_DEPLOY_TIMEOUT_MS,ve as DEFAULT_MAX_PAGES,kn as DEFAULT_PUBLIC_RESOLVER_ADDRESSES,It as DEPENDENCY_SYNC_TIMEOUT_MS,l as DEPLOYMENT_ERROR_MESSAGE_MAX,c as DEPLOYMENT_EVENT_ERROR_MESSAGE_MAX,n as DEPLOYMENT_EVENT_RESOURCE_CATEGORIES,s as DEPLOYMENT_EVENT_STATUS_REASON_MAX,E as DEPLOYMENT_EVENT_TRAIL_DETAIL_MAX,i as DEPLOYMENT_EVENT_TYPES,sc as DEPLOYMENT_FAILURE_CLASSIFIER_VERSION,t as DEPLOY_CORE_VERSION_GLOBAL,F as DEPLOY_EVENT_ARN_MAX,O as DEPLOY_EVENT_CONTRACT,f as DEPLOY_EVENT_CONTRACT_MAJOR,C as DEPLOY_EVENT_CONTRACT_MINOR,x as DEPLOY_EVENT_ERROR_MESSAGE_MAX,y as DEPLOY_EVENT_ID_MAX,I as DEPLOY_EVENT_MESSAGE_MAX,g as DEPLOY_EVENT_NAME_MAX,v as DEPLOY_EVENT_OUTPUT_MAX,L as DEPLOY_EVENT_STATUS_REASON_MAX,h as DEPLOY_EVENT_TRAIL_DETAIL_MAX,M as DEPLOY_EVENT_URL_MAX,V as DEPLOY_RESULTS,rr as DESTRUCTION_FINDINGS,G as DETECTION_PHASES,Mn as DOMAIN_DELEGATION_ERROR_TYPES,va as DRIFT_PREFLIGHT_BUDGET_MS,ha as DRIFT_PREFLIGHT_TRIGGER_STATUSES,nr as DRIFT_VERDICTS,_ as DeployEventSchema,Ao as DeployModeSchema,d as DeployResourceSchema,io as DeploymentError,a as DeploymentEventSchema,$e as DestructionConsentSchema,Ze as DestructionFindingSchema,er as DestructionOutcomeSchema,qe as DestructionTicketResourceSchema,ze as DestructionTicketSchema,Un as DomainDelegationError,Er as DriftFindingSchema,lr as DriftJournalRecordSchema,Oa as DriftProbe,Ui as DriftRepairAvailableError,cr as DriftSuspectSchema,sr as DriftVerdictSchema,Ho as ENGINE_DIAGNOSTIC_SCOPE,Bt as EcsError,Gt as EcsService,Kt as EcsServiceResolver,ti as FORGET_FLIP_SPEC,ri as FORGET_MARKER_KEY,so as FileSystemError,it as FjallStateFileSchema,Ps as FrameworkRegistry,je as IDENTITY_PIN_SLOT_SWAP_GLOSS,Fe as IDENTITY_STORE_PAGE_SIZE,zr as INFRASTRUCTURE_FILENAME,He as INFRASTRUCTURE_STEP_NAMES,we as INFRA_STEP_NAME,ut as LEGACY_DOMAIN_STATE_FILENAME,k as LOG_LEVELS,Gi as LeaseDeniedError,an as MAX_ROOT_SESSION_SECONDS,Gn as NS_PROPAGATION_DEFAULT_INTERVAL_MS,Vn as NS_PROPAGATION_DEFAULT_MAX_ATTEMPTS,no as NetworkError,gr as OPENNEXT_DEPLOY_ORDER,Ir as OPENNEXT_DESTROY_ORDER,hr as OPENNEXT_PARALLEL_GROUPS,Qr as OPENNEXT_PATTERNS,Cr as ORGANISATION_TYPES,un as ORG_SETUP_PHASES,_a as ORG_TRAIL_BUCKET_OUTPUT_KEY,Tn as OU_ONLY_ACCOUNT_BUCKETS,Lr as PARALLEL_DEPLOY_GROUPS,xr as PARALLEL_DESTROY_GROUPS,vr as PARALLEL_OPERATION_TYPES,B as PHASE_STATUSES,H as PLAN_ACTIONS,Wt as PROGRESS_MESSAGES,bn as PUBLIC_DNS_QUERY_TIMEOUT_MS,u as PlanChangeSchema,D as PlanPropertyChangeSchema,oi as RECREATE_MARKER_KEY,Ha as REMEDIATION_JOURNAL_RETENTION_DAYS,mr as REMEDIATION_PHASES,Qe as REMEDIATION_VERB_GLOSS,w as REPLACEMENT_MODES,Ve as ROOT_ACCESS_FEATURES,on as ROOT_TASK_POLICY_ARNS,_r as RemediationFlipProofSchema,Ar as RemediationJournalRecordSchema,Tr as RemediationPhaseSchema,Rr as RemediationTargetSchema,We as RemediationVerbSchema,dr as RemediationVerbWithSurgerySchema,Ge as RootAccessEnablementError,be as SECURITY_SERVICE_PRINCIPALS,Te as SERVICE_PRINCIPALS,mi as SNAPSHOT_CAPABLE_RESOURCE_TYPES,b as STACK_CLEANUP_PHASES,Zr as STACK_FAILED_STATE_PATTERN,jr as STACK_NOT_FOUND_PATTERN,U as STEP_COMPLETE_STATUSES,Ke as STEP_IDS,Xe as STEP_NAMES,N as SUPPORTED_CONTRACT_MARKERS,uo as ServiceArtefactSchema,Do as ServiceArtefactsSchema,$ as SimpleAwsProvider,Yi as StackUnavailableError,A as StepProgressSchema,gs as StepRegistry,or as TICKET_VERDICT_SOURCES,Aa as TRAIL_BUCKET_OUTPUT_KEY,da as TRAIL_KEY_ARN_OUTPUT_KEY,Ht as TemplateHashError,Xt as TemplateHashService,ar as TicketVerdictSourceSchema,to as ValidationError,In as WorkerDomainDeployProvider,ln as accountsConfigToOUTree,ye as activateCostAllocationTags,_e as activateTrustedAccess,ui as advertisableDriftVerbs,rc as advertisableRemediationVerbs,Wa as applyRetainFlip,Ws as approvalRefusalReason,Ua as archiveCompletedRemediationJournal,_o as artefactOutputKey,Vi as assertLeaseBeforeStack,ai as assessForgetResumability,vn as assumeCascadeRole,rn as assumeRootForTask,mc as attachDeploymentFailure,oa as buildAccountRegionPairs,Ce as buildAccountToOUMap,Rs as buildBuildSecretSessionPolicy,yn as buildCascadeTakeoverTicket,xs as buildDeployPlan,_s as buildDeploySessionPolicy,Zs as buildDestructionTicket,As as buildDomainSessionPolicy,Di as buildDriftRepairTicket,Vo as buildParamsContext,ta as buildRegionList,os as buildSatelliteRecordIndex,jt as buildStepContextBuildConfig,ae as buildTargetSetUnreadyAdvisory,oe as buildTargetUnreadyAdvisory,yi as captureLegacySurfaces,wa as captureRemediationForensics,aa as cascadeHomeRegion,ia as cascadeOperationKey,Nn as cascadeTakeoverDigestSeed,ki as checkDeployPathStackAvailability,ge as checkIdentityCentreStatus,se as checkRegionEnabled,re as checkTargetReadiness,m as clampDeploymentEventStrings,cc as classifyDeployFailure,Da as classifyDriftFailure,Ec as classifyFromEcsCompletion,lc as classifyFromFailureAnalysis,Ms as classifyImpact,Sc as classifyUnclassified,ts as classifyZoneRecords,gt as clearDependencyIntegrityCache,Ca as clearDriftSuspects,Li as collectIdentityPinCandidates,ii as completeForgetAfterConverge,ni as completeForgetAfterDeploy,Qa as composeFlipCapabilities,Fi as composePostFailureRepairOffer,Le as composeSdkAbortSignal,vs as computeAssemblyDigest,hs as computeDeployPlan,ka as computeRemediationOpId,jo as computeSecretsDrift,ja as computeTemplateDigest,zs as computeTicketDigest,Zt as convertCloudFormationOutputsToRecord,Pe as createAccount,xn as createCascadeDomainProviderFactory,j as createDeployEmitter,ct as createEmptyState,ic as createMemoisedPlanLoader,Yn as createPublicResolvers,yo as createSequencedCallbacks,as as createSystemDnsNameProbe,Ln as createWorkerDomainDeployProvider,ma as decideNextTransition,gi as decodeLegacyAnchor,Ra as decommissionMemberTrailStorage,Na as defaultDriftJournalDir,Ja as defaultRemediationForensicsDir,ba as defaultRemediationJournalDir,xi as degradedIdentityPinOutcomes,wn as delegationRoleUnusableError,zn as deleteChildNsFromParent,At as deleteDomainState,Cn as deleteRecordSetsByKey,Et as deleteStateFile,Uo as deploy,Hn as deployDelegatedDomain,ea as deployDomains,Us as derivePropertyChanges,Ri as deriveRemovalTemplate,ot as deriveResourcesFromManifestStacks,Za as deriveRetainFlipTemplate,Zo as deriveStaleParameters,Jn as deriveZonePhaseState,Se as describeOrganisation,te as describeTargetReadinessReason,bo as destroy,Ia as detectStackDrift,Fs as digestHead,Ns as dockerBuilder,Me as drainPages,Jt as emitProgress,Bo as emitStepWarnings,Ko as emitWarningEvent,Ye as enableCentralisedRootAccess,Ae as enableIpamDelegatedAdmin,pe as enablePolicyTypes,Re as enableRamSharing,me as enableServiceAccess,yt as ensureDependencyIntegrity,Zi as ensureEnforceSsl,le as ensureOrganisationExists,Oe as ensureOrganisationalUnitsExist,qs as evaluateDestructionConsents,ec as executableRemediationVerbs,En as extractAllAccountNames,qo as extractConsumedSsmParameters,Wn as extractDelegationRoleArn,xe as extractErrorName,ho as failure,Pa as fetchLastOperationEvents,Io as fileExists,So as filterDangerousEnvVars,De as findAccount,Ne as findDevelopmentOuId,qa as findMarkedResourcesByOpId,Ya as findRemediationJournalByOpId,_i as findRemovalDeletionFailures,Ai as findResourcesPresent,cn as flattenAccountsToEnvironments,xa as formatDriftPreFlightBlock,Mi as formatDriftRepairOffer,Ft as formatInfrastructureError,Oi as formatPinOutcomeDetail,si as formatRecreateInFlightCures,br as getApplicationDeployOrder,Yr as getApplicationDestroyOrder,Vr as getApplicationStackName,wr as getApplicationStepId,Hr as getApplicationStepName,Tc as getDeploymentFailure,Is as getDestroyStepId,Gr as getOrganisationStackName,Ur as getParallelDeployGroups,kr as getParallelDestroyGroups,Ut as getSourceContext,St as getStateFilePath,Mt as getStructuralHint,kt as hasCdkDifferences,Oo as hasDockerfile,dt as hashDomainDirectory,he as isAborted,pn as isAccountsConfig,Fr as isApplicationOperation,Br as isApplicationStack,vt as isCdkError,ks as isDataLoss,cs as isDelegatedToRoute53,bi as isDeployPathBlockingStatus,Ji as isEnforceSslStatement,Fo as isFailure,Ue as isOULeaf,Wr as isOpenNextPattern,Mr as isOrganisationOperation,mn as isOuOnlyAccountBucket,Kr as isQuarantineDetail,Pr as isRemediationPlaceholderPhysicalId,Xr as isRetainedBucketsDetail,tn as isRootTaskPolicyArn,ss as isRoute53NameServer,bs as isStatefulResourceType,Sn as isStringArray,vo as isSuccess,$s as legalRemediationVerbs,ue as listAccounts,Va as listActiveRemediationOps,Ga as listActiveRemediationOpsForContext,ac as loadDeployPlan,po as maskSensitiveOutput,Sa as mergeReconciledProviderAccounts,ns as normaliseRecordName,$n as nsDelegationPhysicalName,fs as openNextBuilder,sn as parseAccountsConfiguration,Qt as parseBuildPhase,q as parseDeployContractVersion,Z as parseDeployEvent,bt as parseDiffOutput,On as parseRecordPhysicalName,mo as parseShellArgs,$o as partitionAccounts,ds as partitionForRegion,ci as partitionPreFlightByRemediation,fi as pinProbeCoverage,fe as placeAccountsInOUs,ie as probeAccountStackExists,fa as probePhysicalPresence,Wo as probeSecretsDrift,Qo as probeServiceDeploymentStatus,ca as projectAccountRows,sa as projectScalarSummary,za as proveFlipMetadataOnly,di as proveRemovalTargetsOnly,Qn as readDelegatedTopologyFromProps,jn as readDomainStackOutputsByExport,Tt as readDomainState,ya as readDriftSuspects,Ba as readRemediationJournal,$a as readRetainFlipState,nt as readStateFile,la as reconcileProviderAccounts,Ta as reconcileTrailMigration,_t as recordDomainDeployState,ga as recordDriftSuspects,Pn as recordPhysicalName,fn as recordSetKey,ce as regionDisabledMessage,pt as regionSuffix,ke as registerSecurityDelegates,ur as remediationPhaseRank,Dr as remediationPlaceholderPhysicalId,oc as renderConsentVerdictLines,tc as renderDestructionTicketLines,hi as renderIdentityPinReportLines,Ci as renderPinReportLines,Vs as renderPlanLines,Ys as renderPlanSummary,Ts as resolveBuildArgs,ps as resolveBuildSecretSessionProvider,ls as resolveBuildSecrets,Ss as resolveSecretRefValue,Jo as restart,qi as restoreAndReconcileQuarantinedBucket,Qi as restoreBucketPolicy,Js as runApprovalGate,Xn as runCaaPreflight,gn as runCascadeTakeoverGate,es as runDelegatedDomainDestroy,js as runDestructionGate,La as runDriftPreFlight,Pi as runDriftRepairGate,Ei as runForgetSurgery,vi as runIdentityPinMigration,Ii as runIdentitySurfaceGate,_n as runOpenNextBuild,dn as runOrganisationSetup,Ni as runPinRemediation,Ti as runRecreatePreFlight,Si as runRecreateSurgery,Fa as runRoute53RecordPreflight,Ks as signApprovalToken,To as sleep,Co as sleepAbortable,Ie as snapshotIdentityCentre,pi as snapshotPolicyForType,ms as sourcedRefsFromBuildArgs,xt as startStackMonitoring,Cs as staticSiteBuilder,rt as stubCallerIdentity,xo as success,Gs as summarisePlanRisk,Ka as sweepExpiredRemediationJournals,li as synthTemplateDeclaresResource,ji as synthesiseEnforceSslDocument,is as systemDnsNameProbe,qn as templateOwnsDelegationRecord,Jr as toPascalCase,Wi as toResourcePolicyStatements,Eo as toServiceError,Bs as toWirePlanChanges,wi as triageBucketPolicy,T as truncateUtf16Safe,Ki as unlockBucket,Xi as unlockQueue,de as updateBackupGlobalSettings,lt as updateTemplateHash,us as validateBuildGroup,Sr as verbsForDriftVerdict,Xs as verifyApprovalToken,$i as verifyOrgTrailDelivery,ei as verifyRetainFlipDiff,Bn as waitForNsPropagation,et as wrapApplicationError,Rt as writeDomainState,Xa as writeRemediationJournal,st as writeStateFile};

package/dist/src/orchestration/application/approvalGate.js

@@ -1 +1 @@
-var k=Object.defineProperty;var p=(e,n)=>k(e,"name",{value:n,configurable:!0});import{success as o,failure as v}from"@fjall/generator";import{computeAssemblyDigest as h}from"./plan/assemblyDigest.js";import{loadDeployPlan as y}from"./plan/loadDeployPlan.js";import{renderPlanLines as A}from"./plan/renderDeployPlan.js";import{signApprovalToken as w,verifyApprovalToken as m}from"./plan/approvalToken.js";function x(e){switch(e){case"superseded":return"the plan changed since it was approved (re-plan and approve again)";case"expired":return"the approval window expired";case"tampered":return"the approval signature did not verify";case"malformed":return"the approval token was malformed"}}p(x,"approvalRefusalReason");function P(e,n,r){const i=n.changeCount===0&&r.length>0?`no resource changes against the live stacks; template hashes differ from the last recorded deploy for ${r.length} stack(s) (${r.join(", ")}) \u2014 applying will redeploy them`:n.summary;e.onLog?.(`Deploy plan: ${i}`,"info");for(const u of A(n))e.onLog?.(u,"info")}p(P,"emitPlanSummary");async function j(e){const n=h(e.detection.currentHashes,e.scope),r=e.options.approvalToken;if(r!==void 0&&r!==""){const t=m({token:r,assemblyDigest:n});if(t.ok)return e.callbacks.onLog?.("Approval token verified against the current plan \u2014 proceeding","info"),o({kind:"proceed"});const f=x(t.reason);return e.callbacks.onLog?.(`Approval refused: ${f}`,"warn"),o({kind:"rejected",reason:f})}const i=[...e.detection.stackChanges.entries()].filter(([,t])=>t).map(([t])=>t),l=await(e.loadPlan??(()=>y({cfnService:e.cfnService,cdkOutPath:e.cdkOutPath,changedStacks:i,assemblyDigest:n,...e.registry!==void 0?{registry:e.registry}:{},...e.abortSignal!==void 0?{abortSignal:e.abortSignal}:{}})))();if(!l.success)return v(l.error);const s=l.data;P(e.callbacks,s,i);const c={hashDriftStacks:i,resourceChangeCount:s.changeCount,resourceChangedStacks:[...new Set(s.changes.map(t=>t.stack))]},a=w({assemblyDigest:n});if(e.options.autoApprove===!0)return e.callbacks.onLog?.("Plan auto-approved (--auto-approve)","info"),o({kind:"proceed"});if(e.options.planOnly===!0)return o({kind:"awaiting",approvalToken:a.token,assemblyDigest:n,expiresAt:a.expiresAt,planDetail:c});if(e.approvalGate===void 0)return o({kind:"awaiting",approvalToken:a.token,assemblyDigest:n,expiresAt:a.expiresAt,planDetail:c});const g={target:e.target,plan:s,approvalToken:a.token,expiresAt:a.expiresAt,hasDestructiveChanges:s.hasDestructiveChanges},d=await e.approvalGate.resolve(g);switch(d.kind){case"approved":return o({kind:"proceed"});case"rejected":return o({kind:"rejected",reason:d.reason,planDetail:c});case"suspended":return o({kind:"awaiting",approvalToken:d.approvalToken,assemblyDigest:n,expiresAt:a.expiresAt,planDetail:c})}}p(j,"runApprovalGate");export{x as approvalRefusalReason,j as runApprovalGate};
+var k=Object.defineProperty;var p=(e,n)=>k(e,"name",{value:n,configurable:!0});import{success as t,failure as v}from"@fjall/generator";import{computeAssemblyDigest as h}from"./plan/assemblyDigest.js";import{loadDeployPlan as y}from"./plan/loadDeployPlan.js";import{summarisePlanRisk as m}from"./plan/planRiskCounts.js";import{renderPlanLines as A}from"./plan/renderDeployPlan.js";import{signApprovalToken as w,verifyApprovalToken as x}from"./plan/approvalToken.js";function P(e){switch(e){case"superseded":return"the plan changed since it was approved (re-plan and approve again)";case"expired":return"the approval window expired";case"tampered":return"the approval signature did not verify";case"malformed":return"the approval token was malformed"}}p(P,"approvalRefusalReason");function T(e,n,r){const s=n.changeCount===0&&r.length>0?`no resource changes against the live stacks; template hashes differ from the last recorded deploy for ${r.length} stack(s) (${r.join(", ")}) \u2014 applying will redeploy them`:n.summary;e.onLog?.(`Deploy plan: ${s}`,"info");for(const u of A(n))e.onLog?.(u,"info")}p(T,"emitPlanSummary");async function $(e){const n=h(e.detection.currentHashes,e.scope),r=e.options.approvalToken;if(r!==void 0&&r!==""){const o=x({token:r,assemblyDigest:n});if(o.ok)return e.callbacks.onLog?.("Approval token verified against the current plan \u2014 proceeding","info"),t({kind:"proceed"});const f=P(o.reason);return e.callbacks.onLog?.(`Approval refused: ${f}`,"warn"),t({kind:"rejected",reason:f})}const s=[...e.detection.stackChanges.entries()].filter(([,o])=>o).map(([o])=>o),l=await(e.loadPlan??(()=>y({cfnService:e.cfnService,cdkOutPath:e.cdkOutPath,changedStacks:s,assemblyDigest:n,...e.registry!==void 0?{registry:e.registry}:{},...e.abortSignal!==void 0?{abortSignal:e.abortSignal}:{}})))();if(!l.success)return v(l.error);const i=l.data;T(e.callbacks,i,s);const c={hashDriftStacks:s,resourceChangeCount:i.changeCount,resourceChangedStacks:[...new Set(i.changes.map(o=>o.stack))],risk:m(i.changes)},a=w({assemblyDigest:n});if(e.options.autoApprove===!0)return e.callbacks.onLog?.("Plan auto-approved (--auto-approve)","info"),t({kind:"proceed"});if(e.options.planOnly===!0)return t({kind:"awaiting",approvalToken:a.token,assemblyDigest:n,expiresAt:a.expiresAt,planDetail:c});if(e.approvalGate===void 0)return t({kind:"awaiting",approvalToken:a.token,assemblyDigest:n,expiresAt:a.expiresAt,planDetail:c});const g={target:e.target,plan:i,approvalToken:a.token,expiresAt:a.expiresAt,hasDestructiveChanges:i.hasDestructiveChanges},d=await e.approvalGate.resolve(g);switch(d.kind){case"approved":return t({kind:"proceed"});case"rejected":return t({kind:"rejected",reason:d.reason,planDetail:c});case"suspended":return t({kind:"awaiting",approvalToken:d.approvalToken,assemblyDigest:n,expiresAt:a.expiresAt,planDetail:c})}}p($,"runApprovalGate");export{P as approvalRefusalReason,$ as runApprovalGate};

package/dist/src/orchestration/application/plan/index.d.ts

@@ -9,3 +9,5 @@ export { computeAssemblyDigest, digestHead, type DeployScope } from "./assemblyD
 export { classifyImpact, derivePropertyChanges, isDataLoss, isStatefulResourceType, type ImpactClassification } from "./classify.js";
 export { renderPlanSummary, renderPlanLines, toWirePlanChanges } from "./renderDeployPlan.js";
 export { signApprovalToken, verifyApprovalToken, DEFAULT_APPROVAL_TTL_MS, APPROVAL_TOKEN_PATTERN, type SignApprovalTokenOptions, type SignedApprovalToken, type VerifyApprovalTokenOptions, type VerifyApprovalTokenResult } from "./approvalToken.js";
+export { summarisePlanRisk } from "./planRiskCounts.js";
+export type { PlanRiskCounts, ReplacementModeCounts } from "./planRiskCounts.js";

package/dist/src/orchestration/application/plan/index.js

@@ -1 +1 @@
-import{REPLACEMENT_VERDICT_SOURCES as o}from"./types.js";import{buildDeployPlan as t,foldTemplateToAscii as p}from"./buildDeployPlan.js";import{applyRegistryOverlay as l,overlayResourceChange as i,registryVerdictForProperty as n}from"./registryOverlay.js";import{applyChangeSetEscalation as y,needsChangeSetEscalation as P}from"./changeSetEscalation.js";import{findPinnedPhysicalName as T,resourcePropertiesFromTemplate as c}from"./pinnedNames.js";import{computeDeployPlan as A}from"./computeDeployPlan.js";import{computeAssemblyDigest as x,digestHead as E}from"./assemblyDigest.js";import{classifyImpact as u,derivePropertyChanges as C,isDataLoss as L,isStatefulResourceType as S}from"./classify.js";import{renderPlanSummary as h,renderPlanLines as v,toWirePlanChanges as D}from"./renderDeployPlan.js";import{signApprovalToken as N,verifyApprovalToken as V,DEFAULT_APPROVAL_TTL_MS as F,APPROVAL_TOKEN_PATTERN as b}from"./approvalToken.js";export{b as APPROVAL_TOKEN_PATTERN,F as DEFAULT_APPROVAL_TTL_MS,o as REPLACEMENT_VERDICT_SOURCES,y as applyChangeSetEscalation,l as applyRegistryOverlay,t as buildDeployPlan,u as classifyImpact,x as computeAssemblyDigest,A as computeDeployPlan,C as derivePropertyChanges,E as digestHead,T as findPinnedPhysicalName,p as foldTemplateToAscii,L as isDataLoss,S as isStatefulResourceType,P as needsChangeSetEscalation,i as overlayResourceChange,n as registryVerdictForProperty,v as renderPlanLines,h as renderPlanSummary,c as resourcePropertiesFromTemplate,N as signApprovalToken,D as toWirePlanChanges,V as verifyApprovalToken};
+import{REPLACEMENT_VERDICT_SOURCES as o}from"./types.js";import{buildDeployPlan as t,foldTemplateToAscii as p}from"./buildDeployPlan.js";import{applyRegistryOverlay as i,overlayResourceChange as l,registryVerdictForProperty as m}from"./registryOverlay.js";import{applyChangeSetEscalation as P,needsChangeSetEscalation as f}from"./changeSetEscalation.js";import{findPinnedPhysicalName as T,resourcePropertiesFromTemplate as c}from"./pinnedNames.js";import{computeDeployPlan as x}from"./computeDeployPlan.js";import{computeAssemblyDigest as g,digestHead as E}from"./assemblyDigest.js";import{classifyImpact as u,derivePropertyChanges as C,isDataLoss as L,isStatefulResourceType as S}from"./classify.js";import{renderPlanSummary as h,renderPlanLines as v,toWirePlanChanges as D}from"./renderDeployPlan.js";import{signApprovalToken as N,verifyApprovalToken as V,DEFAULT_APPROVAL_TTL_MS as k,APPROVAL_TOKEN_PATTERN as F}from"./approvalToken.js";import{summarisePlanRisk as I}from"./planRiskCounts.js";export{F as APPROVAL_TOKEN_PATTERN,k as DEFAULT_APPROVAL_TTL_MS,o as REPLACEMENT_VERDICT_SOURCES,P as applyChangeSetEscalation,i as applyRegistryOverlay,t as buildDeployPlan,u as classifyImpact,g as computeAssemblyDigest,x as computeDeployPlan,C as derivePropertyChanges,E as digestHead,T as findPinnedPhysicalName,p as foldTemplateToAscii,L as isDataLoss,S as isStatefulResourceType,f as needsChangeSetEscalation,l as overlayResourceChange,m as registryVerdictForProperty,v as renderPlanLines,h as renderPlanSummary,c as resourcePropertiesFromTemplate,N as signApprovalToken,I as summarisePlanRisk,D as toWirePlanChanges,V as verifyApprovalToken};

package/dist/src/orchestration/application/plan/planRiskCounts.d.ts

@@ -0,0 +1,32 @@
+/**
+ * The risk axes of a computed plan, counted once.
+ *
+ * The human readout has always shown these ("2 destructive, 1 with data
+ * loss", "may replace" per row) while the structured detail carried to agent
+ * surfaces carried only a total. That asymmetry is the reason this lives in
+ * its own module rather than inside the renderer: two surfaces answering
+ * "how risky is this apply?" differently is the drift, and a renderer is not
+ * a place another producer can import from without depending on formatting.
+ *
+ * Counts are per-axis and never derived by subtraction. A row can be an
+ * `update` action AND carry `replacementMode: "may"`, so the action counts in
+ * `ChangeCounts` cannot answer the replacement question — and a bucket
+ * computed as `total - known` would silently absorb a replacement mode added
+ * to the union later.
+ */
+import type { ReplacementMode } from "../../../types/deployEvent.js";
+import type { DeployPlanResourceChange } from "./types.js";
+/** Per-replacement-mode row counts, one key per {@link ReplacementMode}. */
+export type ReplacementModeCounts = Record<ReplacementMode, number>;
+export interface PlanRiskCounts {
+    /** Row counts by replacement verdict. Keys track REPLACEMENT_MODES exactly. */
+    replacement: ReplacementModeCounts;
+    /** Replace OR destroy — a true mutation loss (orphan/retain is NOT this). */
+    destructive: number;
+    /** Destructive AND stateful: the data would not survive the apply. */
+    dataLoss: number;
+    /** Removed from the stack but physically retained by a DeletionPolicy. */
+    retained: number;
+}
+/** Count the risk axes of a plan's rows. Pure; safe on an empty plan. */
+export declare function summarisePlanRisk(changes: readonly DeployPlanResourceChange[]): PlanRiskCounts;

package/dist/src/orchestration/application/plan/planRiskCounts.js

@@ -0,0 +1 @@
+var a=Object.defineProperty;var o=(e,t)=>a(e,"name",{value:t,configurable:!0});import{REPLACEMENT_MODES as i}from"../../../types/deployEvent.js";function f(){const e={};for(const t of i)e[t]=0;return e}o(f,"emptyReplacementCounts");function d(e){const t=f();let r=0,s=0,c=0;for(const n of e)t[n.replacementMode]+=1,n.destructive&&(r+=1),n.dataLoss&&(s+=1),n.retained&&(c+=1);return{replacement:t,destructive:r,dataLoss:s,retained:c}}o(d,"summarisePlanRisk");export{d as summarisePlanRisk};

package/dist/src/orchestration/application/plan/renderDeployPlan.js

@@ -1 +1 @@
-var p=Object.defineProperty;var s=(t,e)=>p(t,"name",{value:e,configurable:!0});const u={create:0,update:1,replace:2,delete:3,read:4,"no-op":5},c={create:"+",update:"~",replace:"\xB1",delete:"-",read:">","no-op":" "};function h(t){const{counts:e}=t,a=[];if(e.create>0&&a.push(`${e.create} to create`),e.update>0&&a.push(`${e.update} to update`),e.replace>0&&a.push(`${e.replace} to replace`),e.delete>0&&a.push(`${e.delete} to destroy`),e.read>0&&a.push(`${e.read} to read`),a.length===0)return"No changes";const r=t.changes.filter(d=>d.destructive).length,o=t.changes.filter(d=>d.dataLoss).length,n=[];r>0&&n.push(`${r} destructive`),o>0&&n.push(`${o} with data loss`);const i=a.join(", ");return n.length>0?`${i} (${n.join(", ")})`:i}s(h,"renderPlanSummary");function l(t){return t.changes.slice().sort((e,a)=>u[e.action]-u[a.action]||`${e.stack}/${e.address}`.localeCompare(`${a.stack}/${a.address}`)).map(e=>{const a=[];e.replacementMode==="may"&&a.push("may replace"),e.replacementMode==="conditional"&&a.push("conditional replace"),e.renameFinding==="rename-detected"&&a.push(e.renamePairedAddress!==void 0?`renamed to ${e.renamePairedAddress}`:"rename detected"),e.renameFinding==="rename-ambiguous"&&a.push("rename ambiguous"),e.renameCandidacyNote!==void 0&&a.push(e.renameCandidacyNote),e.action==="create"&&e.renamePairedAddress!==void 0&&a.push(`renamed from ${e.renamePairedAddress}`),e.dataLoss&&a.push("data loss"),e.retained&&a.push("retained"),(e.verdictSource==="cdk-spec (unverified)"||e.verdictSource==="registry (change-set unverified)")&&a.push("unverified");const r=a.length>0?` (${a.join(", ")})`:"";return`${c[e.action]} ${e.action.padEnd(7)} ${e.resourceType}  ${e.stack}/${e.address}${r}`})}s(l,"renderPlanLines");function m(t){return t.changes.map(e=>({address:e.address,resourceType:e.resourceType,action:e.action,stack:e.stack,replacementMode:e.replacementMode,dataLoss:e.dataLoss,...e.propertyChanges.length>0&&{propertyChanges:e.propertyChanges}}))}s(m,"toWirePlanChanges");export{l as renderPlanLines,h as renderPlanSummary,m as toWirePlanChanges};
+var o=Object.defineProperty;var n=(r,e)=>o(r,"name",{value:e,configurable:!0});import{summarisePlanRisk as p}from"./planRiskCounts.js";const i={create:0,update:1,replace:2,delete:3,read:4,"no-op":5},u={create:"+",update:"~",replace:"\xB1",delete:"-",read:">","no-op":" "};function m(r){const{counts:e}=r,a=[];if(e.create>0&&a.push(`${e.create} to create`),e.update>0&&a.push(`${e.update} to update`),e.replace>0&&a.push(`${e.replace} to replace`),e.delete>0&&a.push(`${e.delete} to destroy`),e.read>0&&a.push(`${e.read} to read`),a.length===0)return"No changes";const t=p(r.changes),s=[];t.destructive>0&&s.push(`${t.destructive} destructive`),t.dataLoss>0&&s.push(`${t.dataLoss} with data loss`);const d=a.join(", ");return s.length>0?`${d} (${s.join(", ")})`:d}n(m,"renderPlanSummary");function l(r){return r.changes.slice().sort((e,a)=>i[e.action]-i[a.action]||`${e.stack}/${e.address}`.localeCompare(`${a.stack}/${a.address}`)).map(e=>{const a=[];e.replacementMode==="may"&&a.push("may replace"),e.replacementMode==="conditional"&&a.push("conditional replace"),e.renameFinding==="rename-detected"&&a.push(e.renamePairedAddress!==void 0?`renamed to ${e.renamePairedAddress}`:"rename detected"),e.renameFinding==="rename-ambiguous"&&a.push("rename ambiguous"),e.renameCandidacyNote!==void 0&&a.push(e.renameCandidacyNote),e.action==="create"&&e.renamePairedAddress!==void 0&&a.push(`renamed from ${e.renamePairedAddress}`),e.dataLoss&&a.push("data loss"),e.retained&&a.push("retained"),(e.verdictSource==="cdk-spec (unverified)"||e.verdictSource==="registry (change-set unverified)")&&a.push("unverified");const t=a.length>0?` (${a.join(", ")})`:"";return`${u[e.action]} ${e.action.padEnd(7)} ${e.resourceType}  ${e.stack}/${e.address}${t}`})}n(l,"renderPlanLines");function h(r){return r.changes.map(e=>({address:e.address,resourceType:e.resourceType,action:e.action,stack:e.stack,replacementMode:e.replacementMode,dataLoss:e.dataLoss,...e.propertyChanges.length>0&&{propertyChanges:e.propertyChanges}}))}n(h,"toWirePlanChanges");export{l as renderPlanLines,m as renderPlanSummary,h as toWirePlanChanges};

package/dist/src/orchestration/index.d.ts

@@ -48,7 +48,7 @@ export { runOpenNextBuild } from "./application/openNextBuild.js";
 export { runOrganisationSetup, ORG_SETUP_PHASES } from "./organisation/organisationSetup.js";
 export type { OrgSetupPhase, OrgSetupCallbacks, OrgSetupConfig, OrgSetupResult } from "./organisation/organisationSetup.js";
 export * from "./builders/index.js";
-export { buildDeployPlan, computeDeployPlan, computeAssemblyDigest, digestHead, classifyImpact, derivePropertyChanges, isDataLoss, isStatefulResourceType, renderPlanSummary, renderPlanLines, toWirePlanChanges, signApprovalToken, verifyApprovalToken, DEFAULT_APPROVAL_TTL_MS, APPROVAL_TOKEN_PATTERN } from "./application/plan/index.js";
+export { buildDeployPlan, computeDeployPlan, computeAssemblyDigest, digestHead, classifyImpact, derivePropertyChanges, isDataLoss, isStatefulResourceType, renderPlanSummary, renderPlanLines, summarisePlanRisk, toWirePlanChanges, signApprovalToken, verifyApprovalToken, DEFAULT_APPROVAL_TTL_MS, APPROVAL_TOKEN_PATTERN } from "./application/plan/index.js";
 export type { DeployPlan, DeployPlanResourceChange, StackTemplatePair, CfnTemplateReader, ComputeDeployPlanParams, ComputeDeployPlanStack, ImpactClassification, DeployScope, SignApprovalTokenOptions, SignedApprovalToken, VerifyApprovalTokenOptions, VerifyApprovalTokenResult } from "./application/plan/index.js";
 export { runApprovalGate, approvalRefusalReason, type RunApprovalGateParams, type ApprovalGateOutcome } from "./application/approvalGate.js";
 export { runDestructionGate, buildDestructionTicket, evaluateDestructionConsents, computeTicketDigest, legalRemediationVerbs, executableRemediationVerbs, advertisableRemediationVerbs, renderDestructionTicketLines, renderConsentVerdictLines, type RunDestructionGateParams, type DestructionGateOutcome, type EvaluateDestructionConsentsParams } from "./application/destructionGate.js";

package/dist/src/orchestration/index.js

@@ -1 +1 @@
-import{deploy as t}from"./deploy.js";import{destroy as i}from"./destroy.js";import{restart as n,probeSecretsDrift as s,probeServiceDeploymentStatus as c}from"./restart/restartApplication.js";import{computeSecretsDrift as p,deriveStaleParameters as m,extractConsumedSsmParameters as u,ssmParameterNameFromValueFrom as f}from"./restart/secretsDrift.js";import{deployOrganisation as R}from"./organisation/organisationDeploy.js";import{destroyOrganisation as P}from"./organisation/organisationDestroy.js";import{cleanupFailedStack as T,emptyS3Bucket as y,preEmptyStackBuckets as A,formatQuarantineSuspectedMessage as D,formatRetainedBucketsMessage as E,isQuarantineDetail as g,isRetainedBucketsDetail as _,PRE_EMPTY_TAG_KEYS as O,isCleanableState as v,SAFE_CLEANUP_STATES as F}from"./stackCleanup.js";import{partitionAccounts as k,buildRegionList as B,buildAccountRegionPairs as L,cascadeHomeRegion as C,cascadeOperationKey as I,deployDomains as U}from"./organisation/cascadeHelpers.js";import{projectScalarSummary as G,projectAccountRows as N}from"./organisation/cascadeSummary.js";import{reconcileProviderAccounts as M,mergeReconciledProviderAccounts as Y}from"./organisation/reconcileProviderAccounts.js";import{decideNextTransition as J,reconcileTrailMigration as H,ORG_TRAIL_BUCKET_OUTPUT_KEY as Q,TRAIL_BUCKET_OUTPUT_KEY as w,TRAIL_KEY_ARN_OUTPUT_KEY as j}from"./trailMigration/trailMigration.js";import{decommissionMemberTrailStorage as q}from"./trailMigration/memberTrailCleanup.js";import{unlockBucket as X}from"./unlock/unlockBucket.js";import{unlockQueue as $}from"./unlock/unlockQueue.js";import{triageBucketPolicy as re,isEnforceSslStatement as te}from"./unlock/bucketPolicyTriage.js";import{toResourcePolicyStatements as ie}from"./unlock/toResourcePolicyStatements.js";import{restoreBucketPolicy as ne,synthesiseEnforceSslDocument as se,ensureEnforceSsl as ce}from"./unlock/restoreBucketPolicy.js";import{restoreAndReconcileQuarantinedBucket as pe}from"./unlock/restoreAndReconcileQuarantinedBucket.js";import{parseAccountsConfiguration as ue,flattenAccountsToEnvironments as fe,extractAllAccountNames as de,accountsConfigToOUTree as Re,isStringArray as Se,isAccountsConfig as Pe,isOuOnlyAccountBucket as xe,OU_ONLY_ACCOUNT_BUCKETS as Te}from"./organisation/accountsConfig.js";import{resolveBuildSecrets as Ae,resolveSecretRefValue as De,resolveBuildSecretSessionProvider as Ee,sourcedRefsFromBuildArgs as ge}from"./application/buildSecretResolver.js";import{buildBuildSecretSessionPolicy as Oe,partitionForRegion as ve}from"./application/buildSecretSession.js";import{buildDeploySessionPolicy as be}from"./application/deploySessionPolicy.js";import{buildDomainSessionPolicy as Be}from"./domain/domainSessionPolicy.js";import{resolveBuildArgs as Ce}from"./application/buildArgResolver.js";import{validateBuildGroup as Ue}from"./application/buildGroupValidator.js";export*from"./domain/index.js";import{runOpenNextBuild as Ne}from"./application/openNextBuild.js";import{runOrganisationSetup as Me,ORG_SETUP_PHASES as Ye}from"./organisation/organisationSetup.js";export*from"./builders/index.js";import{buildDeployPlan as He,computeDeployPlan as Qe,computeAssemblyDigest as we,digestHead as je,classifyImpact as We,derivePropertyChanges as qe,isDataLoss as ze,isStatefulResourceType as Xe,renderPlanSummary as Ze,renderPlanLines as $e,toWirePlanChanges as er,signApprovalToken as rr,verifyApprovalToken as tr,DEFAULT_APPROVAL_TTL_MS as or,APPROVAL_TOKEN_PATTERN as ir}from"./application/plan/index.js";import{runApprovalGate as nr,approvalRefusalReason as sr}from"./application/approvalGate.js";import{runDestructionGate as lr,buildDestructionTicket as pr,evaluateDestructionConsents as mr,computeTicketDigest as ur,legalRemediationVerbs as fr,executableRemediationVerbs as dr,advertisableRemediationVerbs as Rr,renderDestructionTicketLines as Sr,renderConsentVerdictLines as Pr}from"./application/destructionGate.js";import{loadDeployPlan as Tr,createMemoisedPlanLoader as yr}from"./application/plan/loadDeployPlan.js";import{classifyDriftFailure as Dr,fetchLastOperationEvents as Er}from"./drift/classifyDriftFailure.js";import{DriftProbe as _r,probePhysicalPresence as Or}from"./drift/driftProbe.js";import{clearDriftSuspects as Fr,defaultDriftJournalDir as br,readDriftSuspects as kr,recordDriftSuspects as Br}from"./drift/driftSuspectJournal.js";import{detectStackDrift as Cr}from"./drift/detectStackDrift.js";import{runDriftPreFlight as Ur,formatDriftPreFlightBlock as hr,DRIFT_PREFLIGHT_TRIGGER_STATUSES as Gr,DRIFT_PREFLIGHT_BUDGET_MS as Nr}from"./drift/driftPreFlight.js";import{runRoute53RecordPreflight as Mr}from"./drift/route53RecordPreflight.js";import{archiveCompletedRemediationJournal as Vr,computeRemediationOpId as Jr,defaultRemediationJournalDir as Hr,findRemediationJournalByOpId as Qr,listActiveRemediationOps as wr,listActiveRemediationOpsForContext as jr,readRemediationJournal as Wr,sweepExpiredRemediationJournals as qr,writeRemediationJournal as zr,REMEDIATION_JOURNAL_RETENTION_DAYS as Xr}from"./remediation/remediationJournal.js";import{captureRemediationForensics as $r,defaultRemediationForensicsDir as et}from"./remediation/forensicsCapture.js";import{applyRetainFlip as tt,composeFlipCapabilities as ot,computeTemplateDigest as it,deriveRetainFlipTemplate as at,findMarkedResourcesByOpId as nt,proveFlipMetadataOnly as st,readRetainFlipState as ct,verifyRetainFlipDiff as lt,FORGET_MARKER_KEY as pt,FORGET_FLIP_SPEC as mt,RECREATE_MARKER_KEY as ut}from"./remediation/retainFlip.js";import{assessForgetResumability as dt,completeForgetAfterConverge as Rt,completeForgetAfterDeploy as St,formatRecreateInFlightCures as Pt,partitionPreFlightByRemediation as xt,runForgetSurgery as Tt,synthTemplateDeclaresResource as yt}from"./remediation/forgetResource.js";import{runRecreateSurgery as Dt,snapshotPolicyForType as Et,SNAPSHOT_CAPABLE_RESOURCE_TYPES as gt}from"./remediation/recreateResource.js";import{runRecreatePreFlight as Ot}from"./remediation/recreatePreFlight.js";import{deriveRemovalTemplate as Ft,findRemovalDeletionFailures as bt,findResourcesPresent as kt,proveRemovalTargetsOnly as Bt}from"./remediation/removalUpdate.js";import{advertisableDriftVerbs as Ct,buildDriftRepairTicket as It,runDriftRepairGate as Ut}from"./remediation/driftRepairGate.js";import{formatPinOutcomeDetail as Gt,pinProbeCoverage as Nt,renderPinReportLines as Kt,runPinRemediation as Mt}from"./remediation/pinRemediation.js";import{composePostFailureRepairOffer as Vt,formatDriftRepairOffer as Jt,DriftRepairAvailableError as Ht}from"./remediation/postFailureRepairOffer.js";import{captureLegacySurfaces as wt,decodeLegacyAnchor as jt,runIdentitySurfaceGate as Wt}from"./remediation/pinIdentity.js";import{collectIdentityPinCandidates as zt,degradedIdentityPinOutcomes as Xt,renderIdentityPinReportLines as Zt,runIdentityPinMigration as $t}from"./remediation/migrateIdentity.js";import{checkDeployPathStackAvailability as ro,isDeployPathBlockingStatus as to,StackUnavailableError as oo}from"./activeDeploymentGuard.js";import{assertLeaseBeforeStack as ao,LeaseDeniedError as no}from"./application/leaseGate.js";export{ir as APPROVAL_TOKEN_PATTERN,or as DEFAULT_APPROVAL_TTL_MS,Nr as DRIFT_PREFLIGHT_BUDGET_MS,Gr as DRIFT_PREFLIGHT_TRIGGER_STATUSES,_r as DriftProbe,Ht as DriftRepairAvailableError,mt as FORGET_FLIP_SPEC,pt as FORGET_MARKER_KEY,no as LeaseDeniedError,Ye as ORG_SETUP_PHASES,Q as ORG_TRAIL_BUCKET_OUTPUT_KEY,Te as OU_ONLY_ACCOUNT_BUCKETS,O as PRE_EMPTY_TAG_KEYS,ut as RECREATE_MARKER_KEY,Xr as REMEDIATION_JOURNAL_RETENTION_DAYS,F as SAFE_CLEANUP_STATES,gt as SNAPSHOT_CAPABLE_RESOURCE_TYPES,oo as StackUnavailableError,w as TRAIL_BUCKET_OUTPUT_KEY,j as TRAIL_KEY_ARN_OUTPUT_KEY,Re as accountsConfigToOUTree,Ct as advertisableDriftVerbs,Rr as advertisableRemediationVerbs,tt as applyRetainFlip,sr as approvalRefusalReason,Vr as archiveCompletedRemediationJournal,ao as assertLeaseBeforeStack,dt as assessForgetResumability,L as buildAccountRegionPairs,Oe as buildBuildSecretSessionPolicy,He as buildDeployPlan,be as buildDeploySessionPolicy,pr as buildDestructionTicket,Be as buildDomainSessionPolicy,It as buildDriftRepairTicket,B as buildRegionList,wt as captureLegacySurfaces,$r as captureRemediationForensics,C as cascadeHomeRegion,I as cascadeOperationKey,ro as checkDeployPathStackAvailability,Dr as classifyDriftFailure,We as classifyImpact,T as cleanupFailedStack,Fr as clearDriftSuspects,zt as collectIdentityPinCandidates,Rt as completeForgetAfterConverge,St as completeForgetAfterDeploy,ot as composeFlipCapabilities,Vt as composePostFailureRepairOffer,we as computeAssemblyDigest,Qe as computeDeployPlan,Jr as computeRemediationOpId,p as computeSecretsDrift,it as computeTemplateDigest,ur as computeTicketDigest,yr as createMemoisedPlanLoader,J as decideNextTransition,jt as decodeLegacyAnchor,q as decommissionMemberTrailStorage,br as defaultDriftJournalDir,et as defaultRemediationForensicsDir,Hr as defaultRemediationJournalDir,Xt as degradedIdentityPinOutcomes,t as deploy,U as deployDomains,R as deployOrganisation,qe as derivePropertyChanges,Ft as deriveRemovalTemplate,at as deriveRetainFlipTemplate,m as deriveStaleParameters,i as destroy,P as destroyOrganisation,Cr as detectStackDrift,je as digestHead,y as emptyS3Bucket,ce as ensureEnforceSsl,mr as evaluateDestructionConsents,dr as executableRemediationVerbs,de as extractAllAccountNames,u as extractConsumedSsmParameters,Er as fetchLastOperationEvents,nt as findMarkedResourcesByOpId,Qr as findRemediationJournalByOpId,bt as findRemovalDeletionFailures,kt as findResourcesPresent,fe as flattenAccountsToEnvironments,hr as formatDriftPreFlightBlock,Jt as formatDriftRepairOffer,Gt as formatPinOutcomeDetail,D as formatQuarantineSuspectedMessage,Pt as formatRecreateInFlightCures,E as formatRetainedBucketsMessage,Pe as isAccountsConfig,v as isCleanableState,ze as isDataLoss,to as isDeployPathBlockingStatus,te as isEnforceSslStatement,xe as isOuOnlyAccountBucket,g as isQuarantineDetail,_ as isRetainedBucketsDetail,Xe as isStatefulResourceType,Se as isStringArray,fr as legalRemediationVerbs,wr as listActiveRemediationOps,jr as listActiveRemediationOpsForContext,Tr as loadDeployPlan,Y as mergeReconciledProviderAccounts,ue as parseAccountsConfiguration,k as partitionAccounts,ve as partitionForRegion,xt as partitionPreFlightByRemediation,Nt as pinProbeCoverage,A as preEmptyStackBuckets,Or as probePhysicalPresence,s as probeSecretsDrift,c as probeServiceDeploymentStatus,N as projectAccountRows,G as projectScalarSummary,st as proveFlipMetadataOnly,Bt as proveRemovalTargetsOnly,kr as readDriftSuspects,Wr as readRemediationJournal,ct as readRetainFlipState,M as reconcileProviderAccounts,H as reconcileTrailMigration,Br as recordDriftSuspects,Pr as renderConsentVerdictLines,Sr as renderDestructionTicketLines,Zt as renderIdentityPinReportLines,Kt as renderPinReportLines,$e as renderPlanLines,Ze as renderPlanSummary,Ce as resolveBuildArgs,Ee as resolveBuildSecretSessionProvider,Ae as resolveBuildSecrets,De as resolveSecretRefValue,n as restart,pe as restoreAndReconcileQuarantinedBucket,ne as restoreBucketPolicy,nr as runApprovalGate,lr as runDestructionGate,Ur as runDriftPreFlight,Ut as runDriftRepairGate,Tt as runForgetSurgery,$t as runIdentityPinMigration,Wt as runIdentitySurfaceGate,Ne as runOpenNextBuild,Me as runOrganisationSetup,Mt as runPinRemediation,Ot as runRecreatePreFlight,Dt as runRecreateSurgery,Mr as runRoute53RecordPreflight,rr as signApprovalToken,Et as snapshotPolicyForType,ge as sourcedRefsFromBuildArgs,f as ssmParameterNameFromValueFrom,qr as sweepExpiredRemediationJournals,yt as synthTemplateDeclaresResource,se as synthesiseEnforceSslDocument,ie as toResourcePolicyStatements,er as toWirePlanChanges,re as triageBucketPolicy,X as unlockBucket,$ as unlockQueue,Ue as validateBuildGroup,tr as verifyApprovalToken,lt as verifyRetainFlipDiff,zr as writeRemediationJournal};
+import{deploy as t}from"./deploy.js";import{destroy as i}from"./destroy.js";import{restart as n,probeSecretsDrift as s,probeServiceDeploymentStatus as l}from"./restart/restartApplication.js";import{computeSecretsDrift as p,deriveStaleParameters as m,extractConsumedSsmParameters as u,ssmParameterNameFromValueFrom as f}from"./restart/secretsDrift.js";import{deployOrganisation as R}from"./organisation/organisationDeploy.js";import{destroyOrganisation as S}from"./organisation/organisationDestroy.js";import{cleanupFailedStack as T,emptyS3Bucket as y,preEmptyStackBuckets as A,formatQuarantineSuspectedMessage as D,formatRetainedBucketsMessage as E,isQuarantineDetail as g,isRetainedBucketsDetail as _,PRE_EMPTY_TAG_KEYS as O,isCleanableState as v,SAFE_CLEANUP_STATES as F}from"./stackCleanup.js";import{partitionAccounts as k,buildRegionList as B,buildAccountRegionPairs as L,cascadeHomeRegion as C,cascadeOperationKey as I,deployDomains as U}from"./organisation/cascadeHelpers.js";import{projectScalarSummary as G,projectAccountRows as N}from"./organisation/cascadeSummary.js";import{reconcileProviderAccounts as M,mergeReconciledProviderAccounts as Y}from"./organisation/reconcileProviderAccounts.js";import{decideNextTransition as J,reconcileTrailMigration as H,ORG_TRAIL_BUCKET_OUTPUT_KEY as Q,TRAIL_BUCKET_OUTPUT_KEY as w,TRAIL_KEY_ARN_OUTPUT_KEY as j}from"./trailMigration/trailMigration.js";import{decommissionMemberTrailStorage as q}from"./trailMigration/memberTrailCleanup.js";import{unlockBucket as X}from"./unlock/unlockBucket.js";import{unlockQueue as $}from"./unlock/unlockQueue.js";import{triageBucketPolicy as re,isEnforceSslStatement as te}from"./unlock/bucketPolicyTriage.js";import{toResourcePolicyStatements as ie}from"./unlock/toResourcePolicyStatements.js";import{restoreBucketPolicy as ne,synthesiseEnforceSslDocument as se,ensureEnforceSsl as le}from"./unlock/restoreBucketPolicy.js";import{restoreAndReconcileQuarantinedBucket as pe}from"./unlock/restoreAndReconcileQuarantinedBucket.js";import{parseAccountsConfiguration as ue,flattenAccountsToEnvironments as fe,extractAllAccountNames as de,accountsConfigToOUTree as Re,isStringArray as Pe,isAccountsConfig as Se,isOuOnlyAccountBucket as xe,OU_ONLY_ACCOUNT_BUCKETS as Te}from"./organisation/accountsConfig.js";import{resolveBuildSecrets as Ae,resolveSecretRefValue as De,resolveBuildSecretSessionProvider as Ee,sourcedRefsFromBuildArgs as ge}from"./application/buildSecretResolver.js";import{buildBuildSecretSessionPolicy as Oe,partitionForRegion as ve}from"./application/buildSecretSession.js";import{buildDeploySessionPolicy as be}from"./application/deploySessionPolicy.js";import{buildDomainSessionPolicy as Be}from"./domain/domainSessionPolicy.js";import{resolveBuildArgs as Ce}from"./application/buildArgResolver.js";import{validateBuildGroup as Ue}from"./application/buildGroupValidator.js";export*from"./domain/index.js";import{runOpenNextBuild as Ne}from"./application/openNextBuild.js";import{runOrganisationSetup as Me,ORG_SETUP_PHASES as Ye}from"./organisation/organisationSetup.js";export*from"./builders/index.js";import{buildDeployPlan as He,computeDeployPlan as Qe,computeAssemblyDigest as we,digestHead as je,classifyImpact as We,derivePropertyChanges as qe,isDataLoss as ze,isStatefulResourceType as Xe,renderPlanSummary as Ze,renderPlanLines as $e,summarisePlanRisk as er,toWirePlanChanges as rr,signApprovalToken as tr,verifyApprovalToken as or,DEFAULT_APPROVAL_TTL_MS as ir,APPROVAL_TOKEN_PATTERN as ar}from"./application/plan/index.js";import{runApprovalGate as sr,approvalRefusalReason as lr}from"./application/approvalGate.js";import{runDestructionGate as pr,buildDestructionTicket as mr,evaluateDestructionConsents as ur,computeTicketDigest as fr,legalRemediationVerbs as dr,executableRemediationVerbs as Rr,advertisableRemediationVerbs as Pr,renderDestructionTicketLines as Sr,renderConsentVerdictLines as xr}from"./application/destructionGate.js";import{loadDeployPlan as yr,createMemoisedPlanLoader as Ar}from"./application/plan/loadDeployPlan.js";import{classifyDriftFailure as Er,fetchLastOperationEvents as gr}from"./drift/classifyDriftFailure.js";import{DriftProbe as Or,probePhysicalPresence as vr}from"./drift/driftProbe.js";import{clearDriftSuspects as br,defaultDriftJournalDir as kr,readDriftSuspects as Br,recordDriftSuspects as Lr}from"./drift/driftSuspectJournal.js";import{detectStackDrift as Ir}from"./drift/detectStackDrift.js";import{runDriftPreFlight as hr,formatDriftPreFlightBlock as Gr,DRIFT_PREFLIGHT_TRIGGER_STATUSES as Nr,DRIFT_PREFLIGHT_BUDGET_MS as Kr}from"./drift/driftPreFlight.js";import{runRoute53RecordPreflight as Yr}from"./drift/route53RecordPreflight.js";import{archiveCompletedRemediationJournal as Jr,computeRemediationOpId as Hr,defaultRemediationJournalDir as Qr,findRemediationJournalByOpId as wr,listActiveRemediationOps as jr,listActiveRemediationOpsForContext as Wr,readRemediationJournal as qr,sweepExpiredRemediationJournals as zr,writeRemediationJournal as Xr,REMEDIATION_JOURNAL_RETENTION_DAYS as Zr}from"./remediation/remediationJournal.js";import{captureRemediationForensics as et,defaultRemediationForensicsDir as rt}from"./remediation/forensicsCapture.js";import{applyRetainFlip as ot,composeFlipCapabilities as it,computeTemplateDigest as at,deriveRetainFlipTemplate as nt,findMarkedResourcesByOpId as st,proveFlipMetadataOnly as lt,readRetainFlipState as ct,verifyRetainFlipDiff as pt,FORGET_MARKER_KEY as mt,FORGET_FLIP_SPEC as ut,RECREATE_MARKER_KEY as ft}from"./remediation/retainFlip.js";import{assessForgetResumability as Rt,completeForgetAfterConverge as Pt,completeForgetAfterDeploy as St,formatRecreateInFlightCures as xt,partitionPreFlightByRemediation as Tt,runForgetSurgery as yt,synthTemplateDeclaresResource as At}from"./remediation/forgetResource.js";import{runRecreateSurgery as Et,snapshotPolicyForType as gt,SNAPSHOT_CAPABLE_RESOURCE_TYPES as _t}from"./remediation/recreateResource.js";import{runRecreatePreFlight as vt}from"./remediation/recreatePreFlight.js";import{deriveRemovalTemplate as bt,findRemovalDeletionFailures as kt,findResourcesPresent as Bt,proveRemovalTargetsOnly as Lt}from"./remediation/removalUpdate.js";import{advertisableDriftVerbs as It,buildDriftRepairTicket as Ut,runDriftRepairGate as ht}from"./remediation/driftRepairGate.js";import{formatPinOutcomeDetail as Nt,pinProbeCoverage as Kt,renderPinReportLines as Mt,runPinRemediation as Yt}from"./remediation/pinRemediation.js";import{composePostFailureRepairOffer as Jt,formatDriftRepairOffer as Ht,DriftRepairAvailableError as Qt}from"./remediation/postFailureRepairOffer.js";import{captureLegacySurfaces as jt,decodeLegacyAnchor as Wt,runIdentitySurfaceGate as qt}from"./remediation/pinIdentity.js";import{collectIdentityPinCandidates as Xt,degradedIdentityPinOutcomes as Zt,renderIdentityPinReportLines as $t,runIdentityPinMigration as eo}from"./remediation/migrateIdentity.js";import{checkDeployPathStackAvailability as to,isDeployPathBlockingStatus as oo,StackUnavailableError as io}from"./activeDeploymentGuard.js";import{assertLeaseBeforeStack as no,LeaseDeniedError as so}from"./application/leaseGate.js";export{ar as APPROVAL_TOKEN_PATTERN,ir as DEFAULT_APPROVAL_TTL_MS,Kr as DRIFT_PREFLIGHT_BUDGET_MS,Nr as DRIFT_PREFLIGHT_TRIGGER_STATUSES,Or as DriftProbe,Qt as DriftRepairAvailableError,ut as FORGET_FLIP_SPEC,mt as FORGET_MARKER_KEY,so as LeaseDeniedError,Ye as ORG_SETUP_PHASES,Q as ORG_TRAIL_BUCKET_OUTPUT_KEY,Te as OU_ONLY_ACCOUNT_BUCKETS,O as PRE_EMPTY_TAG_KEYS,ft as RECREATE_MARKER_KEY,Zr as REMEDIATION_JOURNAL_RETENTION_DAYS,F as SAFE_CLEANUP_STATES,_t as SNAPSHOT_CAPABLE_RESOURCE_TYPES,io as StackUnavailableError,w as TRAIL_BUCKET_OUTPUT_KEY,j as TRAIL_KEY_ARN_OUTPUT_KEY,Re as accountsConfigToOUTree,It as advertisableDriftVerbs,Pr as advertisableRemediationVerbs,ot as applyRetainFlip,lr as approvalRefusalReason,Jr as archiveCompletedRemediationJournal,no as assertLeaseBeforeStack,Rt as assessForgetResumability,L as buildAccountRegionPairs,Oe as buildBuildSecretSessionPolicy,He as buildDeployPlan,be as buildDeploySessionPolicy,mr as buildDestructionTicket,Be as buildDomainSessionPolicy,Ut as buildDriftRepairTicket,B as buildRegionList,jt as captureLegacySurfaces,et as captureRemediationForensics,C as cascadeHomeRegion,I as cascadeOperationKey,to as checkDeployPathStackAvailability,Er as classifyDriftFailure,We as classifyImpact,T as cleanupFailedStack,br as clearDriftSuspects,Xt as collectIdentityPinCandidates,Pt as completeForgetAfterConverge,St as completeForgetAfterDeploy,it as composeFlipCapabilities,Jt as composePostFailureRepairOffer,we as computeAssemblyDigest,Qe as computeDeployPlan,Hr as computeRemediationOpId,p as computeSecretsDrift,at as computeTemplateDigest,fr as computeTicketDigest,Ar as createMemoisedPlanLoader,J as decideNextTransition,Wt as decodeLegacyAnchor,q as decommissionMemberTrailStorage,kr as defaultDriftJournalDir,rt as defaultRemediationForensicsDir,Qr as defaultRemediationJournalDir,Zt as degradedIdentityPinOutcomes,t as deploy,U as deployDomains,R as deployOrganisation,qe as derivePropertyChanges,bt as deriveRemovalTemplate,nt as deriveRetainFlipTemplate,m as deriveStaleParameters,i as destroy,S as destroyOrganisation,Ir as detectStackDrift,je as digestHead,y as emptyS3Bucket,le as ensureEnforceSsl,ur as evaluateDestructionConsents,Rr as executableRemediationVerbs,de as extractAllAccountNames,u as extractConsumedSsmParameters,gr as fetchLastOperationEvents,st as findMarkedResourcesByOpId,wr as findRemediationJournalByOpId,kt as findRemovalDeletionFailures,Bt as findResourcesPresent,fe as flattenAccountsToEnvironments,Gr as formatDriftPreFlightBlock,Ht as formatDriftRepairOffer,Nt as formatPinOutcomeDetail,D as formatQuarantineSuspectedMessage,xt as formatRecreateInFlightCures,E as formatRetainedBucketsMessage,Se as isAccountsConfig,v as isCleanableState,ze as isDataLoss,oo as isDeployPathBlockingStatus,te as isEnforceSslStatement,xe as isOuOnlyAccountBucket,g as isQuarantineDetail,_ as isRetainedBucketsDetail,Xe as isStatefulResourceType,Pe as isStringArray,dr as legalRemediationVerbs,jr as listActiveRemediationOps,Wr as listActiveRemediationOpsForContext,yr as loadDeployPlan,Y as mergeReconciledProviderAccounts,ue as parseAccountsConfiguration,k as partitionAccounts,ve as partitionForRegion,Tt as partitionPreFlightByRemediation,Kt as pinProbeCoverage,A as preEmptyStackBuckets,vr as probePhysicalPresence,s as probeSecretsDrift,l as probeServiceDeploymentStatus,N as projectAccountRows,G as projectScalarSummary,lt as proveFlipMetadataOnly,Lt as proveRemovalTargetsOnly,Br as readDriftSuspects,qr as readRemediationJournal,ct as readRetainFlipState,M as reconcileProviderAccounts,H as reconcileTrailMigration,Lr as recordDriftSuspects,xr as renderConsentVerdictLines,Sr as renderDestructionTicketLines,$t as renderIdentityPinReportLines,Mt as renderPinReportLines,$e as renderPlanLines,Ze as renderPlanSummary,Ce as resolveBuildArgs,Ee as resolveBuildSecretSessionProvider,Ae as resolveBuildSecrets,De as resolveSecretRefValue,n as restart,pe as restoreAndReconcileQuarantinedBucket,ne as restoreBucketPolicy,sr as runApprovalGate,pr as runDestructionGate,hr as runDriftPreFlight,ht as runDriftRepairGate,yt as runForgetSurgery,eo as runIdentityPinMigration,qt as runIdentitySurfaceGate,Ne as runOpenNextBuild,Me as runOrganisationSetup,Yt as runPinRemediation,vt as runRecreatePreFlight,Et as runRecreateSurgery,Yr as runRoute53RecordPreflight,tr as signApprovalToken,gt as snapshotPolicyForType,ge as sourcedRefsFromBuildArgs,f as ssmParameterNameFromValueFrom,er as summarisePlanRisk,zr as sweepExpiredRemediationJournals,At as synthTemplateDeclaresResource,se as synthesiseEnforceSslDocument,ie as toResourcePolicyStatements,rr as toWirePlanChanges,re as triageBucketPolicy,X as unlockBucket,$ as unlockQueue,Ue as validateBuildGroup,or as verifyApprovalToken,pt as verifyRetainFlipDiff,Xr as writeRemediationJournal};

package/dist/src/types/approval.d.ts

@@ -9,6 +9,11 @@
  * Omitting the gate (`DeployParams.approvalGate` undefined) is fully
  * backward-compatible: the engine deploys exactly as it does today.
  */
+import type { PlanRiskCounts } from "../orchestration/application/plan/planRiskCounts.js";
+/** Re-exported beside the interface that names it: a consumer holding an
+ *  {@link ApprovalGatePlanDetail} must be able to name the shape of its
+ *  `risk` field without reaching into an engine-internal path. */
+export type { PlanRiskCounts, ReplacementModeCounts } from "../orchestration/application/plan/planRiskCounts.js";
 import type { DeployPlan } from "../orchestration/application/plan/types.js";
 /**
  * Both detection signals behind a computed plan, distinguished so a parser can
@@ -24,6 +29,18 @@ export interface ApprovalGatePlanDetail {
     resourceChangeCount: number;
     /** Stacks with at least one resource-level change against the live stacks. */
     resourceChangedStacks: string[];
+    /**
+     * The plan's risk axes, counted. A total change count cannot answer "will
+     * this apply replace anything?" — replacement is orthogonal to the action,
+     * so an `update` row can still replace — and that is the question a caller
+     * decides on. The rendered plan has always shown it; carrying it here is
+     * what lets a non-rendering surface see the same thing.
+     *
+     * Required rather than optional on purpose: an absent field would read as
+     * "nothing replaces" at exactly the surfaces that cannot tell that apart
+     * from "not computed".
+     */
+    risk: PlanRiskCounts;
 }
 /** What the gate hands a surface resolver so it can decide. */
 export interface ApprovalRequest {

package/dist/src/types/index.d.ts

@@ -47,7 +47,7 @@ export type { ProgressEvent, ProgressEventType, ResourceEvent, AwsAuthResult, Ca
 export { TRAIL_MIGRATION_PHASES, TRAIL_MIGRATION_STATUSES } from "./events.js";
 export type { ApiClientInterface, EntitlementsData } from "./apiClient.js";
 export type { DeployParams, DeployOptions, DatabaseEndpointRestartRequest, InfrastructureSource, DeploymentType, DeployResult, DestroyParams, DestroyOptions, DestroyResult, StackLeaseVerdict } from "./params.js";
-export type { ApprovalGate, ApprovalGatePlanDetail, ApprovalRequest, GateResolution } from "./approval.js";
+export type { ApprovalGate, ApprovalGatePlanDetail, PlanRiskCounts, ReplacementModeCounts, ApprovalRequest, GateResolution } from "./approval.js";
 export { RemediationVerbSchema, REMEDIATION_VERB_GLOSS, IDENTITY_PIN_SLOT_SWAP_GLOSS, DestructionFindingSchema, DestructionTicketResourceSchema, DestructionTicketSchema, DestructionConsentSchema, DestructionOutcomeSchema, DESTRUCTION_FINDINGS, CONSENT_VERDICTS, TICKET_VERDICT_SOURCES, TicketVerdictSourceSchema } from "./destruction.js";
 export type { RemediationVerb, DestructionFinding, DestructionTicketResource, DestructionTicket, DestructionConsent, ConsentVerdict, ConsentVerdictRow, DestructionConsentReport, DestructionConsentRequest, DestructionConsentResolution, DestructionConsentGate, DestructionOutcome, TicketVerdictSource } from "./destruction.js";
 export { DRIFT_VERDICTS, DriftVerdictSchema, DriftSuspectSchema, DriftFindingSchema, DriftJournalRecordSchema, verbsForDriftVerdict } from "./drift.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fjall/deploy-core",
-  "version": "16.0.1",
+  "version": "17.0.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/fjall-tech/fjall.git",
@@ -96,15 +96,15 @@
     "@aws-sdk/client-ssm": "^3.1098.0",
     "@aws-sdk/client-sso-admin": "^3.1098.0",
     "@aws-sdk/client-sts": "^3.1098.0",
-    "@fjall/generator": "^16.0.1",
-    "@fjall/util": "^16.0.1",
+    "@fjall/generator": "^17.0.0",
+    "@fjall/util": "^17.0.0",
     "@smithy/node-http-handler": "^4.9.13",
     "aws-cdk": "^2.1134.0",
     "tsx": "^4.23.1",
     "zod": "^4.4.3"
   },
   "peerDependencies": {
-    "@fjall/components-infrastructure": ">=16.0.0 <17.0.0"
+    "@fjall/components-infrastructure": ">=17.0.0 <18.0.0"
   },
   "peerDependenciesMeta": {
     "@fjall/components-infrastructure": {