@fjall/deploy-core 2.34.0 → 3.1.0

package/dist/src/services/infrastructure/EcsServiceResolver.js

@@ -1 +1 @@
-import{success as l}from"@fjall/generator";import{logger as u}from"@fjall/util/logger";import{getErrorMessage as p,maskSensitiveOutput as g}from"@fjall/util";import{extractEcsServiceParts as b,buildArn as y}from"../../aws/utils/arnParser.js";function m(d,o){const a=d.toLowerCase(),r=o.toLowerCase();if(r.length===0)return!1;const i=e=>!/[a-zA-Z0-9]/.test(e),n=e=>/[A-Z]/.test(e);let s=a.indexOf(r);for(;s!==-1;){const e=d[s]??"",t=s>0?d[s-1]??"":"",c=s===0||n(e)||i(t),f=s+r.length,v=d[f],h=v===void 0||n(v)||i(v);if(c&&h)return!0;s=a.indexOf(r,s+1)}return!1}class C{cfService;constructor(o){this.cfService=o}async getDeployableClusterAndServicesByManifest(o,a){try{const r=[];for(const t of o.clusters){r.push(`${t.name}DeployableCluster`);for(const c of t.services)r.push(`${t.name}${c.name}DeployableService`)}if(r.length===0)return l({serviceArns:[]});const i=await this.cfService.getExportsByNames(r,a);if(!i.success)return u.debug("EcsServiceResolver","Failed to get CloudFormation exports by name",{error:i.error.message}),l({serviceArns:[]});const n=i.data;let s;for(const t of o.clusters){const c=n.get(`${t.name}DeployableCluster`);if(c){s=c;break}}const e=[];for(const t of o.clusters)for(const c of t.services){const f=n.get(`${t.name}${c.name}DeployableService`);f&&e.push(f)}return u.debug("EcsServiceResolver",`Manifest-based discovery: found ${e.length} service(s), cluster=${s||"not found"}`),l({clusterArn:s,serviceArns:e})}catch(r){return u.warn("EcsServiceResolver","Manifest-based discovery failed",{error:g(p(r))}),l({serviceArns:[]})}}async getDeployableClusterAndServices(o,a){try{const r=await this.cfService.listExports(void 0,a);if(!r.success)return u.debug("EcsServiceResolver","Failed to list CloudFormation exports",{error:r.error.message}),l({serviceArns:[]});const n=r.data.filter(e=>{const t=e.Name??"";return m(t,o)&&t.toLowerCase().endsWith("deployableservice")}).map(e=>e.Value).filter(e=>e!==void 0);let s;if(n.length>0){const e=b(n[0]);e&&(s=y("ecs",e.region,e.accountId,`cluster/${e.clusterName}`))}return s||(s=r.data.find(t=>{const c=t.Name??"";return m(c,o)&&c.toLowerCase().endsWith("deployablecluster")})?.Value),u.debug("EcsServiceResolver",`Found ${n.length} deployable service(s) for app "${o}" in cluster ${s||"unknown"}`),l({clusterArn:s,serviceArns:n})}catch(r){return u.warn("EcsServiceResolver","Failed to get deployable services",{error:g(p(r))}),l({serviceArns:[]})}}}export{C as EcsServiceResolver,m as matchesAppNameToken};
+var y=Object.defineProperty;var f=(i,o)=>y(i,"name",{value:o,configurable:!0});import{success as a}from"@fjall/generator";import{logger as d}from"@fjall/util/logger";import{getErrorMessage as g,maskSensitiveOutput as m}from"@fjall/util";import{extractEcsServiceParts as S,buildArn as x}from"../../aws/utils/arnParser.js";function h(i,o){const u=i.toLowerCase(),r=o.toLowerCase();if(r.length===0)return!1;const l=f(e=>!/[a-zA-Z0-9]/.test(e),"isSeparator"),n=f(e=>/[A-Z]/.test(e),"isUpper");let s=u.indexOf(r);for(;s!==-1;){const e=i[s]??"",t=s>0?i[s-1]??"":"",c=s===0||n(e)||l(t),v=s+r.length,p=i[v],b=p===void 0||n(p)||l(p);if(c&&b)return!0;s=u.indexOf(r,s+1)}return!1}f(h,"matchesAppNameToken");class R{static{f(this,"EcsServiceResolver")}cfService;constructor(o){this.cfService=o}async getDeployableClusterAndServicesByManifest(o,u){try{const r=[];for(const t of o.clusters){r.push(`${t.name}DeployableCluster`);for(const c of t.services)r.push(`${t.name}${c.name}DeployableService`)}if(r.length===0)return a({serviceArns:[]});const l=await this.cfService.getExportsByNames(r,u);if(!l.success)return d.debug("EcsServiceResolver","Failed to get CloudFormation exports by name",{error:l.error.message}),a({serviceArns:[]});const n=l.data;let s;for(const t of o.clusters){const c=n.get(`${t.name}DeployableCluster`);if(c){s=c;break}}const e=[];for(const t of o.clusters)for(const c of t.services){const v=n.get(`${t.name}${c.name}DeployableService`);v&&e.push(v)}return d.debug("EcsServiceResolver",`Manifest-based discovery: found ${e.length} service(s), cluster=${s||"not found"}`),a({clusterArn:s,serviceArns:e})}catch(r){return d.warn("EcsServiceResolver","Manifest-based discovery failed",{error:m(g(r))}),a({serviceArns:[]})}}async getDeployableClusterAndServices(o,u){try{const r=await this.cfService.listExports(void 0,u);if(!r.success)return d.debug("EcsServiceResolver","Failed to list CloudFormation exports",{error:r.error.message}),a({serviceArns:[]});const n=r.data.filter(e=>{const t=e.Name??"";return h(t,o)&&t.toLowerCase().endsWith("deployableservice")}).map(e=>e.Value).filter(e=>e!==void 0);let s;if(n.length>0){const e=S(n[0]);e&&(s=x("ecs",e.region,e.accountId,`cluster/${e.clusterName}`))}return s||(s=r.data.find(t=>{const c=t.Name??"";return h(c,o)&&c.toLowerCase().endsWith("deployablecluster")})?.Value),d.debug("EcsServiceResolver",`Found ${n.length} deployable service(s) for app "${o}" in cluster ${s||"unknown"}`),a({clusterArn:s,serviceArns:n})}catch(r){return d.warn("EcsServiceResolver","Failed to get deployable services",{error:m(g(r))}),a({serviceArns:[]})}}}export{R as EcsServiceResolver,h as matchesAppNameToken};

package/dist/src/services/infrastructure/LambdaService.js

@@ -1 +1 @@
-import{GetFunctionConfigurationCommand as v,LambdaClient as _,PublishVersionCommand as C,UpdateFunctionCodeCommand as $}from"@aws-sdk/client-lambda";import{success as p,failure as a}from"@fjall/generator";import{BaseServiceError as g}from"../../types/errors/ServiceError.js";import{logger as f}from"@fjall/util/logger";import{maskSensitiveOutput as m}from"@fjall/util";import{getAwsErrorDetails as b}from"../../aws/utils/awsErrorHandler.js";import{composeSdkAbortSignal as w,isAborted as A,isAccessDenied as L}from"../../aws/organisations/types.js";const h=6e5,F=5e3;function P(l,e){return e===void 0?new Promise(r=>setTimeout(r,l)):e.aborted?Promise.resolve():new Promise(r=>{const o=setTimeout(()=>{e.removeEventListener("abort",t),r()},l),t=()=>{clearTimeout(o),r()};e.addEventListener("abort",t,{once:!0})})}class d extends g{functionName;operation;constructor(e,r,o,t){super(`LAMBDA_${o.toUpperCase()}_FAILED`,e,t,!1),this.functionName=r,this.operation=o}}class R{aws;constructor(e){this.aws=e}getClient(){return this.aws.getClient(_)}async publishVersion(e,r){try{const t=await this.getClient().send(new C({FunctionName:e}),{abortSignal:w(r)});return!t.FunctionArn||!t.Version?a(new d("PublishVersion returned no function ARN or version",e,"publish_version",t)):(f.debug("LambdaService",`Published version ${t.Version} for ${e}`),p({functionArn:t.FunctionArn,version:t.Version}))}catch(o){const{message:t,name:s,httpCode:n}=b(o),i=m(t);f.error("LambdaService",`PublishVersion failed for ${e}: ${s} - ${i}`,{functionName:e,httpCode:n,error:o});let u=`Failed to publish Lambda version for '${e}': ${i}`;return n&&(u+=` (HTTP ${n})`),a(new d(u,e,"publish_version",{error:o,httpCode:n,errorName:s}))}}async updateFunctionCode(e,r,o){try{const t=this.getClient(),s=await t.send(new $({FunctionName:e,ImageUri:r,Publish:!0}),{abortSignal:w(o)});if(!s.FunctionArn||!s.Version)return a(new d("UpdateFunctionCode returned no function ARN or version",e,"update_function_code",s));const n=await this.waitForUpdateCompletion(t,e,o);return n.success?(f.debug("LambdaService",`Updated ${e} to ${r}, published version ${s.Version}`),p({functionArn:s.FunctionArn,version:s.Version,...n.data.unverifiedReason!==void 0?{unverifiedReason:n.data.unverifiedReason}:{}})):a(n.error)}catch(t){const{message:s,name:n,httpCode:i}=b(t),u=m(s);f.error("LambdaService",`UpdateFunctionCode failed for ${e}: ${n} - ${u}`,{functionName:e,imageUri:r,httpCode:i,error:t});let c=`Failed to update Lambda function code for '${e}': ${u}`;return i&&(c+=` (HTTP ${i})`),a(new d(c,e,"update_function_code",{error:t,httpCode:i,errorName:n}))}}async waitForUpdateCompletion(e,r,o){const t=Date.now();for(;Date.now()-t<h;){if(A(o))return a(new d(`Cancelled while waiting for the code update of '${r}' to complete \u2014 the update was accepted and may still land`,r,"update_function_code"));let s,n;try{const i=await e.send(new v({FunctionName:r}),{abortSignal:w(o)});s=i.LastUpdateStatus,n=i.LastUpdateStatusReason}catch(i){const{message:u,name:c}=b(i);return L(c)?p({unverifiedReason:"lambda:GetFunctionConfiguration is denied for this role, so completion of the update could not be verified"}):a(new d(`Failed to verify the code update of '${r}' completed: ${m(u)}`,r,"update_function_code",{errorName:c}))}if(s==="Successful")return p({});if(s==="Failed")return a(new d(`Code update of '${r}' was accepted but failed to apply: ${m(n??"no reason reported")}. The function is still running its previous code.`,r,"update_function_code",{statusReason:n}));await P(F,o)}return a(new d(`Code update of '${r}' did not complete within ${h/1e3}s \u2014 it may still be in progress. Check the Lambda console before retrying.`,r,"update_function_code"))}}export{d as LambdaError,R as LambdaService};
+var _=Object.defineProperty;var p=(c,e)=>_(c,"name",{value:e,configurable:!0});import{GetFunctionConfigurationCommand as C,LambdaClient as $,PublishVersionCommand as g,UpdateFunctionCodeCommand as A}from"@aws-sdk/client-lambda";import{success as f,failure as a}from"@fjall/generator";import{BaseServiceError as L}from"../../types/errors/ServiceError.js";import{logger as m}from"@fjall/util/logger";import{maskSensitiveOutput as b}from"@fjall/util";import{getAwsErrorDetails as w}from"../../aws/utils/awsErrorHandler.js";import{composeSdkAbortSignal as h,isAborted as F,isAccessDenied as P}from"../../aws/organisations/types.js";const v=6e5,T=5e3;function E(c,e){return e===void 0?new Promise(r=>setTimeout(r,c)):e.aborted?Promise.resolve():new Promise(r=>{const o=setTimeout(()=>{e.removeEventListener("abort",t),r()},c),t=p(()=>{clearTimeout(o),r()},"onAbort");e.addEventListener("abort",t,{once:!0})})}p(E,"sleepAbortable");class d extends L{static{p(this,"LambdaError")}functionName;operation;constructor(e,r,o,t){super(`LAMBDA_${o.toUpperCase()}_FAILED`,e,t,!1),this.functionName=r,this.operation=o}}class O{static{p(this,"LambdaService")}aws;constructor(e){this.aws=e}getClient(){return this.aws.getClient($)}async publishVersion(e,r){try{const t=await this.getClient().send(new g({FunctionName:e}),{abortSignal:h(r)});return!t.FunctionArn||!t.Version?a(new d("PublishVersion returned no function ARN or version",e,"publish_version",t)):(m.debug("LambdaService",`Published version ${t.Version} for ${e}`),f({functionArn:t.FunctionArn,version:t.Version}))}catch(o){const{message:t,name:s,httpCode:n}=w(o),i=b(t);m.error("LambdaService",`PublishVersion failed for ${e}: ${s} - ${i}`,{functionName:e,httpCode:n,error:o});let u=`Failed to publish Lambda version for '${e}': ${i}`;return n&&(u+=` (HTTP ${n})`),a(new d(u,e,"publish_version",{error:o,httpCode:n,errorName:s}))}}async updateFunctionCode(e,r,o){try{const t=this.getClient(),s=await t.send(new A({FunctionName:e,ImageUri:r,Publish:!0}),{abortSignal:h(o)});if(!s.FunctionArn||!s.Version)return a(new d("UpdateFunctionCode returned no function ARN or version",e,"update_function_code",s));const n=await this.waitForUpdateCompletion(t,e,o);return n.success?(m.debug("LambdaService",`Updated ${e} to ${r}, published version ${s.Version}`),f({functionArn:s.FunctionArn,version:s.Version,...n.data.unverifiedReason!==void 0?{unverifiedReason:n.data.unverifiedReason}:{}})):a(n.error)}catch(t){const{message:s,name:n,httpCode:i}=w(t),u=b(s);m.error("LambdaService",`UpdateFunctionCode failed for ${e}: ${n} - ${u}`,{functionName:e,imageUri:r,httpCode:i,error:t});let l=`Failed to update Lambda function code for '${e}': ${u}`;return i&&(l+=` (HTTP ${i})`),a(new d(l,e,"update_function_code",{error:t,httpCode:i,errorName:n}))}}async waitForUpdateCompletion(e,r,o){const t=Date.now();for(;Date.now()-t<v;){if(F(o))return a(new d(`Cancelled while waiting for the code update of '${r}' to complete \u2014 the update was accepted and may still land`,r,"update_function_code"));let s,n;try{const i=await e.send(new C({FunctionName:r}),{abortSignal:h(o)});s=i.LastUpdateStatus,n=i.LastUpdateStatusReason}catch(i){const{message:u,name:l}=w(i);return P(l)?f({unverifiedReason:"lambda:GetFunctionConfiguration is denied for this role, so completion of the update could not be verified"}):a(new d(`Failed to verify the code update of '${r}' completed: ${b(u)}`,r,"update_function_code",{errorName:l}))}if(s==="Successful")return f({});if(s==="Failed")return a(new d(`Code update of '${r}' was accepted but failed to apply: ${b(n??"no reason reported")}. The function is still running its previous code.`,r,"update_function_code",{statusReason:n}));await E(T,o)}return a(new d(`Code update of '${r}' did not complete within ${v/1e3}s \u2014 it may still be in progress. Check the Lambda console before retrying.`,r,"update_function_code"))}}export{d as LambdaError,O as LambdaService};

package/dist/src/services/infrastructure/SsmParameterMetadataService.js

@@ -1 +1 @@
-import{SSMClient as u,DescribeParametersCommand as l}from"@aws-sdk/client-ssm";import{success as m,failure as p}from"@fjall/generator";import{getErrorMessage as S,maskSensitiveOutput as P}from"@fjall/util";import{composeSdkAbortSignal as b,isAborted as c}from"../../aws/organisations/types.js";const o=50;class v{awsProvider;constructor(r){this.awsProvider=r}async describeParametersByName(r,i){if(r.length===0)return m([]);try{const a=this.awsProvider.getClient(u),n=[];for(let t=0;t<r.length&&!c(i);t+=o){const f=r.slice(t,t+o);let s;do{if(c(i))break;const d=await a.send(new l({ParameterFilters:[{Key:"Name",Option:"Equals",Values:f}],MaxResults:o,...s!==void 0?{NextToken:s}:{}}),{abortSignal:b(i)});for(const e of d.Parameters??[])e.Name!==void 0&&n.push({name:e.Name,...e.Version!==void 0?{version:Number(e.Version)}:{},...e.LastModifiedDate!==void 0?{lastModifiedDate:e.LastModifiedDate}:{}});s=d.NextToken}while(s!==void 0)}return m(n)}catch(a){return p(new Error(`SSM DescribeParameters failed: ${P(S(a))}`))}}}export{v as SsmParameterMetadataService};
+var p=Object.defineProperty;var c=(n,e)=>p(n,"name",{value:e,configurable:!0});import{SSMClient as S,DescribeParametersCommand as P}from"@aws-sdk/client-ssm";import{success as f,failure as b}from"@fjall/generator";import{getErrorMessage as h,maskSensitiveOutput as M}from"@fjall/util";import{composeSdkAbortSignal as k,isAborted as u}from"../../aws/organisations/types.js";const o=50;class g{static{c(this,"SsmParameterMetadataService")}awsProvider;constructor(e){this.awsProvider=e}async describeParametersByName(e,i){if(e.length===0)return f([]);try{const a=this.awsProvider.getClient(S),d=[];for(let t=0;t<e.length&&!u(i);t+=o){const l=e.slice(t,t+o);let s;do{if(u(i))break;const m=await a.send(new P({ParameterFilters:[{Key:"Name",Option:"Equals",Values:l}],MaxResults:o,...s!==void 0?{NextToken:s}:{}}),{abortSignal:k(i)});for(const r of m.Parameters??[])r.Name!==void 0&&d.push({name:r.Name,...r.Version!==void 0?{version:Number(r.Version)}:{},...r.LastModifiedDate!==void 0?{lastModifiedDate:r.LastModifiedDate}:{}});s=m.NextToken}while(s!==void 0)}return f(d)}catch(a){return b(new Error(`SSM DescribeParameters failed: ${M(h(a))}`))}}}export{g as SsmParameterMetadataService};

package/dist/src/services/infrastructure/cancelInFlightStack.js

@@ -1,3 +1,3 @@
-import{CloudFormationClient as p,DescribeStacksCommand as f,CancelUpdateStackCommand as C}from"@aws-sdk/client-cloudformation";import{NodeHttpHandler as m}from"@smithy/node-http-handler";import{logger as e}from"@fjall/util/logger";import{getErrorMessage as d,maskSensitiveOutput as u}from"@fjall/util";import{composeSdkAbortSignal as S}from"../../aws/organisations/types.js";import{STACK_NOT_FOUND_PATTERN as g}from"../../types/constants.js";const t="CancelInFlightStack",i=15e3;async function R(n,o,c,s){try{const a=new p({region:o,...c!==void 0?{credentials:c}:{},requestHandler:new m({requestTimeout:i})});let r;try{r=(await a.send(new f({StackName:n}),{abortSignal:S(void 0,i)})).Stacks?.[0]?.StackStatus}catch(l){return l instanceof Error&&l.message?.includes(g)?(e.debug(t,`Stack ${n} does not exist \u2014 nothing to cancel`),"no-op"):(e.warn(t,`Could not read stack status to cancel: ${u(d(l))}`,{stackName:n,region:o}),"no-op")}return r==="UPDATE_IN_PROGRESS"?(s?.(`Cancelling deployment \u2014 CloudFormation is rolling back ${n}\u2026
-`),await a.send(new C({StackName:n}),{abortSignal:S(void 0,i)}),e.warn(t,`Requested rollback of ${n}`,{region:o}),"cancelled-update"):r==="CREATE_IN_PROGRESS"?(s?.(`Deployment cancelled. The initial stack ${n} is still being created in AWS; it will roll back if it fails, or run \`fjall destroy\` to remove it.
-`),e.warn(t,`${n} is CREATE_IN_PROGRESS \u2014 CancelUpdateStack not applicable; leaving for CFN rollback / stack-cleanup`,{region:o}),"create-in-progress"):(e.debug(t,`Stack ${n} status ${r??"unknown"} is not an in-flight update \u2014 no cancel issued`),r===void 0?"no-op":"not-cancellable")}catch(a){return e.warn(t,`CancelUpdateStack attempt failed: ${u(d(a))}`,{stackName:n,region:o}),"no-op"}}export{R as cancelInFlightStack};
+var f=Object.defineProperty;var d=(n,e)=>f(n,"name",{value:e,configurable:!0});import{CloudFormationClient as C,DescribeStacksCommand as m,CancelUpdateStackCommand as g}from"@aws-sdk/client-cloudformation";import{NodeHttpHandler as E}from"@smithy/node-http-handler";import{logger as t}from"@fjall/util/logger";import{getErrorMessage as u,maskSensitiveOutput as S}from"@fjall/util";import{composeSdkAbortSignal as p}from"../../aws/organisations/types.js";import{STACK_NOT_FOUND_PATTERN as _}from"../../types/constants.js";const o="CancelInFlightStack",i=15e3;async function h(n,e,c,s){try{const a=new C({region:e,...c!==void 0?{credentials:c}:{},requestHandler:new E({requestTimeout:i})});let r;try{r=(await a.send(new m({StackName:n}),{abortSignal:p(void 0,i)})).Stacks?.[0]?.StackStatus}catch(l){return l instanceof Error&&l.message?.includes(_)?(t.debug(o,`Stack ${n} does not exist \u2014 nothing to cancel`),"no-op"):(t.warn(o,`Could not read stack status to cancel: ${S(u(l))}`,{stackName:n,region:e}),"no-op")}return r==="UPDATE_IN_PROGRESS"?(s?.(`Cancelling deployment \u2014 CloudFormation is rolling back ${n}\u2026
+`),await a.send(new g({StackName:n}),{abortSignal:p(void 0,i)}),t.warn(o,`Requested rollback of ${n}`,{region:e}),"cancelled-update"):r==="CREATE_IN_PROGRESS"?(s?.(`Deployment cancelled. The initial stack ${n} is still being created in AWS; it will roll back if it fails, or run \`fjall destroy\` to remove it.
+`),t.warn(o,`${n} is CREATE_IN_PROGRESS \u2014 CancelUpdateStack not applicable; leaving for CFN rollback / stack-cleanup`,{region:e}),"create-in-progress"):(t.debug(o,`Stack ${n} status ${r??"unknown"} is not an in-flight update \u2014 no cancel issued`),r===void 0?"no-op":"not-cancellable")}catch(a){return t.warn(o,`CancelUpdateStack attempt failed: ${S(u(a))}`,{stackName:n,region:e}),"no-op"}}d(h,"cancelInFlightStack");export{h as cancelInFlightStack};

package/dist/src/services/infrastructure/cdkServiceHelpers.js

@@ -1 +1 @@
-import{getApplicationStackName as l,getOrganisationStackName as u,isApplicationStack as d}from"../../types/operations.js";const t=5e3;function c(a,e){if(a&&!a.includes("*"))return a;if(a){const o=a.match(/\*?(\w+)\*?/);if(o?.[1]){const n=o[1],r=e.target;return d(n)?l(r,n):`${r}${n}`}return a}}function f(a){const e=a.deployType;return e==="organisation"||e==="platform"||e==="account"?u(e):`${a.target}Network`}function p(a,e,o){return{accountId:e,region:o,environment:a.environment,managedAccount:a.isManagedAccount,accountName:a.accountName,orgId:a.orgId,rootId:a.rootId,managementAccountId:a.managementAccountId,devOuId:a.devOuId,ipamPoolId:a.ipamPoolId,fjallOrgId:a.fjallOrgId,fjallOidcConfigured:a.fjallOidcConfigured?"true":void 0,fjallAccountGlobalsConfigured:a.fjallAccountGlobalsConfigured?"true":void 0,fjallAccountTrailState:a.fjallAccountTrailState,orgConfig:a.orgConfig,fjallAdoptBackupVault:a.fjallAdoptBackupVault?"true":void 0,resolvedSecretArns:a.resolvedSecretArns}}export{t as STACK_DETECTION_FALLBACK_MS,p as buildDeploymentCdkContext,f as getFallbackStackName,c as resolveStackName};
+var d=Object.defineProperty;var o=(a,e)=>d(a,"name",{value:e,configurable:!0});import{getApplicationStackName as l,getOrganisationStackName as u,isApplicationStack as c}from"../../types/operations.js";const t=5e3;function g(a,e){if(a&&!a.includes("*"))return a;if(a){const n=a.match(/\*?(\w+)\*?/);if(n?.[1]){const r=n[1],i=e.target;return c(r)?l(i,r):`${i}${r}`}return a}}o(g,"resolveStackName");function m(a){const e=a.deployType;return e==="organisation"||e==="platform"||e==="account"?u(e):`${a.target}Network`}o(m,"getFallbackStackName");function s(a,e,n){return{accountId:e,region:n,environment:a.environment,managedAccount:a.isManagedAccount,accountName:a.accountName,orgId:a.orgId,rootId:a.rootId,managementAccountId:a.managementAccountId,devOuId:a.devOuId,ipamPoolId:a.ipamPoolId,fjallOrgId:a.fjallOrgId,fjallOidcConfigured:a.fjallOidcConfigured?"true":void 0,fjallAccountGlobalsConfigured:a.fjallAccountGlobalsConfigured?"true":void 0,fjallAccountTrailState:a.fjallAccountTrailState,orgConfig:a.orgConfig,fjallAdoptBackupVault:a.fjallAdoptBackupVault?"true":void 0,resolvedSecretArns:a.resolvedSecretArns,managedDomainBindings:a.managedDomainBindings}}o(s,"buildDeploymentCdkContext");export{t as STACK_DETECTION_FALLBACK_MS,s as buildDeploymentCdkContext,m as getFallbackStackName,g as resolveStackName};

package/dist/src/services/infrastructure/changeSetProbe.js

@@ -1 +1 @@
-import{randomUUID as k}from"node:crypto";import{CloudFormationClient as A,CreateChangeSetCommand as N,DeleteChangeSetCommand as I,DescribeChangeSetCommand as L,ListChangeSetsCommand as $}from"@aws-sdk/client-cloudformation";import{DeleteObjectCommand as R,PutObjectCommand as P,S3Client as _}from"@aws-sdk/client-s3";import{success as T,failure as c}from"@fjall/generator";import{getErrorMessage as u,maskSensitiveOutput as p}from"@fjall/util";import{logger as m}from"@fjall/util/logger";import{composeSdkAbortSignal as d,isAborted as h}from"../../aws/organisations/types.js";import{sleepAbortable as B}from"../../util/sleepAbortable.js";const f="ChangeSetProbe",y="fjall-preflight-",D=51200;function M(S,a){return`cdk-hnb659fds-assets-${S}-${a}`}const x=3600*1e3,F=2e3,O=9e4,U=/didn't contain changes|No updates are to be performed/i,j=new Set(["CREATE_COMPLETE","FAILED"]);class z{aws;pollIntervalMs;pollTimeoutMs;now;constructor(a,e){this.aws=a,this.pollIntervalMs=e?.pollIntervalMs??F,this.pollTimeoutMs=e?.pollTimeoutMs??O,this.now=e?.now??(()=>Date.now())}async probeStackReplacements(a){const{stackName:e,abortSignal:o}=a;if(h(o))return c(new Error(`Change-set probe aborted before starting for ${e}`));await this.sweepLeakedChangeSets(e,o);const t=`${y}${k()}`,s=this.aws.getClient(A);let r;try{const n=JSON.stringify(a.template);let l;if(Buffer.byteLength(n,"utf8")>D){const i=await this.uploadTemplate(t,n,o);if(!i.success)return i;r=i.data.key,l={TemplateURL:i.data.url}}else l={TemplateBody:n};return await s.send(new N({StackName:e,ChangeSetName:t,ChangeSetType:"UPDATE",IncludeNestedStacks:!0,Capabilities:["CAPABILITY_IAM","CAPABILITY_NAMED_IAM","CAPABILITY_AUTO_EXPAND"],Description:"fjall preflight replacement probe \u2014 review-only, never executed",...l}),{abortSignal:d(o)}),await this.collectVerdicts(s,e,t,o)}catch(n){return c(new Error(`Change-set probe failed for ${e}: ${p(u(n))}`))}finally{await s.send(new I({StackName:e,ChangeSetName:t}),{abortSignal:d()}).catch(n=>{m.warn(f,"Failed to delete preflight change set",{stackName:e,changeSetName:t,error:p(u(n))})}),r!==void 0&&await this.deleteUploadedTemplate(r)}}async collectVerdicts(a,e,o,t){const s=this.now();let r,n;for(;!h(t);){const g=await a.send(new L({StackName:e,ChangeSetName:o}),{abortSignal:d(t)});if(r=g.Status,n=g.StatusReason,r!==void 0&&j.has(r))break;if(this.now()-s>=this.pollTimeoutMs)return c(new Error(`Change-set probe timed out after ${this.pollTimeoutMs}ms for ${e} (last status: ${r??"unknown"})`));await B(this.pollIntervalMs,t)}if(h(t))return c(new Error(`Change-set probe aborted while polling ${e}`));if(r==="FAILED")return n!==void 0&&U.test(n)?T({replacementByLogicalId:new Map,noChanges:!0}):c(new Error(`Change-set probe failed for ${e}: ${p(n??"no status reason reported")}`));const l=new Map;let i;do{if(h(t))return c(new Error(`Change-set probe aborted while reading ${e}`));if(i!==void 0&&this.now()-s>=this.pollTimeoutMs)return c(new Error(`Change-set probe timed out after ${this.pollTimeoutMs}ms while reading ${e} resource changes`));const g=await a.send(new L({StackName:e,ChangeSetName:o,...i!==void 0?{NextToken:i}:{}}),{abortSignal:d(t)});for(const E of g.Changes??[]){if(E.Type!=="Resource")continue;const C=E.ResourceChange,b=C?.LogicalResourceId;if(C===void 0||b===void 0)continue;const w=C.Replacement;(w==="True"||w==="False"||w==="Conditional")&&l.set(b,w)}i=g.NextToken}while(i!==void 0);return T({replacementByLogicalId:l,noChanges:!1})}async sweepLeakedChangeSets(a,e){const o=this.aws.getClient(A);try{let t;do{if(h(e))break;const s=await o.send(new $({StackName:a,...t!==void 0?{NextToken:t}:{}}),{abortSignal:d(e)});for(const r of s.Summaries??[]){if(h(e))break;const n=r.ChangeSetName;if(n===void 0||!n.startsWith(y))continue;const l=r.CreationTime?.getTime();l===void 0||this.now()-l<x||(m.warn(f,"Sweeping leaked preflight change set",{stackName:a,changeSetName:n}),await o.send(new I({StackName:a,ChangeSetName:n}),{abortSignal:d(e)}).catch(i=>{m.warn(f,"Failed to sweep leaked change set",{stackName:a,changeSetName:n,error:p(u(i))})}))}t=s.NextToken}while(t!==void 0)}catch(t){m.debug(f,"Leak sweep failed \u2014 continuing to probe",{stackName:a,error:p(u(t))})}}async uploadTemplate(a,e,o){const t=this.aws.getRegion(),s=M(this.aws.getAccountId(),t),r=`fjall-preflight/${a}.template.json`;try{return await this.aws.getClient(_).send(new P({Bucket:s,Key:r,Body:e,ContentType:"application/json"}),{abortSignal:d(o)}),T({key:r,url:`https://${s}.s3.${t}.amazonaws.com/${r}`})}catch(n){return c(new Error(`Change-set probe could not stage the template in ${s}: ${p(u(n))}`))}}async deleteUploadedTemplate(a){const e=M(this.aws.getAccountId(),this.aws.getRegion());try{await this.aws.getClient(_).send(new R({Bucket:e,Key:a}),{abortSignal:d()})}catch(o){m.warn(f,"Failed to delete staged preflight template",{bucket:e,key:a,error:p(u(o))})}}}export{z as ChangeSetProbe,D as MAX_INLINE_TEMPLATE_BYTES,y as PREFLIGHT_CHANGE_SET_PREFIX,M as bootstrapAssetsBucketName};
+var N=Object.defineProperty;var S=(w,t)=>N(w,"name",{value:t,configurable:!0});import{randomUUID as $}from"node:crypto";import{CloudFormationClient as I,CreateChangeSetCommand as R,DeleteChangeSetCommand as L,DescribeChangeSetCommand as _,ListChangeSetsCommand as P}from"@aws-sdk/client-cloudformation";import{DeleteObjectCommand as B,PutObjectCommand as D,S3Client as y}from"@aws-sdk/client-s3";import{success as E,failure as c}from"@fjall/generator";import{getErrorMessage as u,maskSensitiveOutput as p}from"@fjall/util";import{logger as m}from"@fjall/util/logger";import{composeSdkAbortSignal as d,isAborted as h}from"../../aws/organisations/types.js";import{sleepAbortable as x}from"../../util/sleepAbortable.js";const f="ChangeSetProbe",M="fjall-preflight-",F=51200;function k(w,t){return`cdk-hnb659fds-assets-${w}-${t}`}S(k,"bootstrapAssetsBucketName");const O=3600*1e3,U=2e3,j=9e4,v=/didn't contain changes|No updates are to be performed/i,G=new Set(["CREATE_COMPLETE","FAILED"]);class Q{static{S(this,"ChangeSetProbe")}aws;pollIntervalMs;pollTimeoutMs;now;constructor(t,e){this.aws=t,this.pollIntervalMs=e?.pollIntervalMs??U,this.pollTimeoutMs=e?.pollTimeoutMs??j,this.now=e?.now??(()=>Date.now())}async probeStackReplacements(t){const{stackName:e,abortSignal:o}=t;if(h(o))return c(new Error(`Change-set probe aborted before starting for ${e}`));await this.sweepLeakedChangeSets(e,o);const n=`${M}${$()}`,s=this.aws.getClient(I);let r;try{const a=JSON.stringify(t.template);let l;if(Buffer.byteLength(a,"utf8")>F){const i=await this.uploadTemplate(n,a,o);if(!i.success)return i;r=i.data.key,l={TemplateURL:i.data.url}}else l={TemplateBody:a};return await s.send(new R({StackName:e,ChangeSetName:n,ChangeSetType:"UPDATE",IncludeNestedStacks:!0,Capabilities:["CAPABILITY_IAM","CAPABILITY_NAMED_IAM","CAPABILITY_AUTO_EXPAND"],Description:"fjall preflight replacement probe \u2014 review-only, never executed",...l}),{abortSignal:d(o)}),await this.collectVerdicts(s,e,n,o)}catch(a){return c(new Error(`Change-set probe failed for ${e}: ${p(u(a))}`))}finally{await s.send(new L({StackName:e,ChangeSetName:n}),{abortSignal:d()}).catch(a=>{m.warn(f,"Failed to delete preflight change set",{stackName:e,changeSetName:n,error:p(u(a))})}),r!==void 0&&await this.deleteUploadedTemplate(r)}}async collectVerdicts(t,e,o,n){const s=this.now();let r,a;for(;!h(n);){const g=await t.send(new _({StackName:e,ChangeSetName:o}),{abortSignal:d(n)});if(r=g.Status,a=g.StatusReason,r!==void 0&&G.has(r))break;if(this.now()-s>=this.pollTimeoutMs)return c(new Error(`Change-set probe timed out after ${this.pollTimeoutMs}ms for ${e} (last status: ${r??"unknown"})`));await x(this.pollIntervalMs,n)}if(h(n))return c(new Error(`Change-set probe aborted while polling ${e}`));if(r==="FAILED")return a!==void 0&&v.test(a)?E({replacementByLogicalId:new Map,noChanges:!0}):c(new Error(`Change-set probe failed for ${e}: ${p(a??"no status reason reported")}`));const l=new Map;let i;do{if(h(n))return c(new Error(`Change-set probe aborted while reading ${e}`));if(i!==void 0&&this.now()-s>=this.pollTimeoutMs)return c(new Error(`Change-set probe timed out after ${this.pollTimeoutMs}ms while reading ${e} resource changes`));const g=await t.send(new _({StackName:e,ChangeSetName:o,...i!==void 0?{NextToken:i}:{}}),{abortSignal:d(n)});for(const b of g.Changes??[]){if(b.Type!=="Resource")continue;const T=b.ResourceChange,A=T?.LogicalResourceId;if(T===void 0||A===void 0)continue;const C=T.Replacement;(C==="True"||C==="False"||C==="Conditional")&&l.set(A,C)}i=g.NextToken}while(i!==void 0);return E({replacementByLogicalId:l,noChanges:!1})}async sweepLeakedChangeSets(t,e){const o=this.aws.getClient(I);try{let n;do{if(h(e))break;const s=await o.send(new P({StackName:t,...n!==void 0?{NextToken:n}:{}}),{abortSignal:d(e)});for(const r of s.Summaries??[]){if(h(e))break;const a=r.ChangeSetName;if(a===void 0||!a.startsWith(M))continue;const l=r.CreationTime?.getTime();l===void 0||this.now()-l<O||(m.warn(f,"Sweeping leaked preflight change set",{stackName:t,changeSetName:a}),await o.send(new L({StackName:t,ChangeSetName:a}),{abortSignal:d(e)}).catch(i=>{m.warn(f,"Failed to sweep leaked change set",{stackName:t,changeSetName:a,error:p(u(i))})}))}n=s.NextToken}while(n!==void 0)}catch(n){m.debug(f,"Leak sweep failed \u2014 continuing to probe",{stackName:t,error:p(u(n))})}}async uploadTemplate(t,e,o){const n=this.aws.getRegion(),s=k(this.aws.getAccountId(),n),r=`fjall-preflight/${t}.template.json`;try{return await this.aws.getClient(y).send(new D({Bucket:s,Key:r,Body:e,ContentType:"application/json"}),{abortSignal:d(o)}),E({key:r,url:`https://${s}.s3.${n}.amazonaws.com/${r}`})}catch(a){return c(new Error(`Change-set probe could not stage the template in ${s}: ${p(u(a))}`))}}async deleteUploadedTemplate(t){const e=k(this.aws.getAccountId(),this.aws.getRegion());try{await this.aws.getClient(y).send(new B({Bucket:e,Key:t}),{abortSignal:d()})}catch(o){m.warn(f,"Failed to delete staged preflight template",{bucket:e,key:t,error:p(u(o))})}}}export{Q as ChangeSetProbe,F as MAX_INLINE_TEMPLATE_BYTES,M as PREFLIGHT_CHANGE_SET_PREFIX,k as bootstrapAssetsBucketName};

package/dist/src/services/infrastructure/constructMapEnrichment.js

@@ -1 +1 @@
-import{existsSync as u,readFileSync as s}from"fs";import{join as p}from"path";import{logger as i}from"@fjall/util/logger";import{enrichFromConstructMap as a,recordToConstructMap as f,FJALL_MANIFEST_FILENAME as d}from"@fjall/util/constructMap";import{getErrorMessage as m}from"@fjall/util";function C(o,c){if(!c)return;const t=p(o,d);let e;try{if(u(t)){const r=JSON.parse(s(t,"utf-8")),n=typeof r=="object"&&r!==null?r.resourceMap:void 0;h(n)&&(e=f(n)),e&&e.size>0&&i.debug("CdkService",`Loaded construct map with ${e.size} entries`)}}catch(r){i.debug("CdkService",`Could not read construct map: ${m(r)}`)}return!e||e.size===0?c:r=>{const n=a(r.logicalId,r.resourceType,e);c({...r,...n.group!==void 0?{group:n.group}:{},...n.constructPath!==void 0?{constructPath:n.constructPath}:{}})}}function h(o){if(typeof o!="object"||o===null||Array.isArray(o))return!1;const c=Object.values(o);if(c.length===0)return!0;const t=c[0];return typeof t=="object"&&t!==null&&"constructPath"in t&&"group"in t&&"resourceType"in t}export{C as wrapWithConstructMapEnrichment};
+var s=Object.defineProperty;var i=(t,e)=>s(t,"name",{value:e,configurable:!0});import{existsSync as p,readFileSync as a}from"fs";import{join as f}from"path";import{logger as u}from"@fjall/util/logger";import{enrichFromConstructMap as d,recordToConstructMap as m,FJALL_MANIFEST_FILENAME as h}from"@fjall/util/constructMap";import{getErrorMessage as l}from"@fjall/util";function A(t,e){if(!e)return;const n=f(t,h);let o;try{if(p(n)){const r=JSON.parse(a(n,"utf-8")),c=typeof r=="object"&&r!==null?r.resourceMap:void 0;g(c)&&(o=m(c)),o&&o.size>0&&u.debug("CdkService",`Loaded construct map with ${o.size} entries`)}}catch(r){u.debug("CdkService",`Could not read construct map: ${l(r)}`)}return!o||o.size===0?e:r=>{const c=d(r.logicalId,r.resourceType,o);e({...r,...c.group!==void 0?{group:c.group}:{},...c.constructPath!==void 0?{constructPath:c.constructPath}:{}})}}i(A,"wrapWithConstructMapEnrichment");function g(t){if(typeof t!="object"||t===null||Array.isArray(t))return!1;const e=Object.values(t);if(e.length===0)return!0;const n=e[0];return typeof n=="object"&&n!==null&&"constructPath"in n&&"group"in n&&"resourceType"in n}i(g,"isResourceMapRecord");export{A as wrapWithConstructMapEnrichment};

package/dist/src/services/supporting/CdkContextBuilder.d.ts

@@ -36,6 +36,7 @@ export declare class CdkContextBuilder {
         fjallAccountGlobalsConfigured?: boolean;
         fjallAccountTrailState?: string;
         orgConfig?: string;
+        managedDomainBindings?: Record<string, string>;
     }, options: {
         verbose?: boolean;
         infraOnly?: boolean;

package/dist/src/services/supporting/CdkContextBuilder.js

@@ -1 +1 @@
-import{DEFAULT_REGION as l}from"@fjall/generator";class t{static buildDeploymentContext(e,o,a){return{deployType:e.deployType,target:e.target,path:e.path,...e.assemblyDir!==void 0?{assemblyDir:e.assemblyDir}:{},...e.environment!==void 0?{environment:e.environment}:{},options:o,stackOutputs:e.stackOutputs||{},callerIdentity:e.callerIdentity,region:e.region||a?.primaryRegion||l,isManagedAccount:e.isManagedAccount,accountName:e.accountName,logPath:e.logPath,orgId:e.orgId,rootId:e.rootId,managementAccountId:e.managementAccountId,devOuId:e.devOuId,ipamPoolId:e.ipamPoolId,fjallOrgId:e.fjallOrgId,fjallOidcConfigured:e.fjallOidcConfigured,fjallAccountGlobalsConfigured:e.fjallAccountGlobalsConfigured,fjallAccountTrailState:e.fjallAccountTrailState,orgConfig:e.orgConfig}}static updateContext(e,o){return{...e,...o}}}export{t as CdkContextBuilder};
+var r=Object.defineProperty;var l=(o,e)=>r(o,"name",{value:e,configurable:!0});import{DEFAULT_REGION as t}from"@fjall/generator";class g{static{l(this,"CdkContextBuilder")}static buildDeploymentContext(e,a,d){return{deployType:e.deployType,target:e.target,path:e.path,...e.assemblyDir!==void 0?{assemblyDir:e.assemblyDir}:{},...e.environment!==void 0?{environment:e.environment}:{},options:a,stackOutputs:e.stackOutputs||{},callerIdentity:e.callerIdentity,region:e.region||d?.primaryRegion||t,isManagedAccount:e.isManagedAccount,accountName:e.accountName,logPath:e.logPath,orgId:e.orgId,rootId:e.rootId,managementAccountId:e.managementAccountId,devOuId:e.devOuId,ipamPoolId:e.ipamPoolId,fjallOrgId:e.fjallOrgId,fjallOidcConfigured:e.fjallOidcConfigured,fjallAccountGlobalsConfigured:e.fjallAccountGlobalsConfigured,fjallAccountTrailState:e.fjallAccountTrailState,orgConfig:e.orgConfig,managedDomainBindings:e.managedDomainBindings}}static updateContext(e,a){return{...e,...a}}}export{g as CdkContextBuilder};

package/dist/src/services/supporting/TemplateHashService.js

@@ -1 +1 @@
-import{createHash as C}from"crypto";import{readFile as T,readdir as _}from"fs/promises";import{join as m,basename as E}from"path";import{fileExists as F}from"@fjall/util/fsHelpers";import{success as h,failure as i}from"@fjall/generator";import{BaseServiceError as k}from"../../types/errors/ServiceError.js";import{readStateFile as p,writeStateFile as A,readStateFileAt as w,writeStateFileAt as $,createEmptyState as g,updateTemplateHash as y,getStateFilePath as S}from"../../types/config/FjallState.js";class l extends k{errorType;constructor(e,t,r,a=!1){super(`TEMPLATE_HASH_${t.toUpperCase()}`,e,r,a),this.errorType=t}}const u=".template.json";class J{async computeTemplateHash(e){try{const t=await T(e,"utf-8"),r=JSON.stringify(JSON.parse(t)),a=C("sha256").update(r).digest("hex");return h(a)}catch(t){return i(new l(`Failed to hash template: ${e}`,"hash_failed",{path:e,error:t}))}}async getTemplateHashes(e){if(!await F(e))return i(new l(`CDK output directory not found: ${e}`,"cdk_out_not_found",{path:e}));try{const r=(await _(e)).filter(s=>s.endsWith(u)),a=new Map;for(const s of r){const n=E(s,u),o=m(e,s),c=await this.computeTemplateHash(o);if(!c.success)return i(c.error);a.set(n,c.data)}return h(a)}catch(t){return i(new l(`Failed to read CDK output directory: ${e}`,"read_failed",{path:e,error:t}))}}async compareWithState(e,t){const r=await p(t),a=new Map;let s=0,n=0;for(const[o,c]of e){const f=r?.templateHashes[o],d=!f||f.hash!==c;a.set(o,d),d?s++:n++}if(r?.templateHashes)for(const o of Object.keys(r.templateHashes))e.has(o)||(a.set(o,!0),s++);return h({stackChanges:a,currentHashes:e,changedCount:s,unchangedCount:n})}async updateStateAfterDeploy(e,t,r){try{let a=await p(e)??g();for(const[s,n]of t){const o=r?.get(s);a=y(a,s,n,o)}return await A(e,a),h(void 0)}catch(a){return i(new l(`Failed to write state file: ${S(e)}`,"state_write_failed",{appPath:e,error:a}))}}async compareCascadeStack(e,t,r){const a=m(e,`${t}${u}`),s=await this.computeTemplateHash(a);if(!s.success)return{changed:!0,currentHash:void 0};const n=s.data,c=(await w(r))?.templateHashes[t];return{changed:!c||c.hash!==n,currentHash:n}}async persistCascadeStack(e,t,r,a){try{const s=await w(e)??g(),n=y(s,t,r,a);return await $(e,n),h(void 0)}catch(s){return i(new l(`Failed to write cascade state file: ${e}`,"state_write_failed",{stateFilePath:e,error:s}))}}getStateFilePath(e){return S(e)}stackHasChanges(e,t){return e.stackChanges.get(t)??!0}getChangedStacks(e){return Array.from(e.stackChanges.entries()).filter(([,t])=>t).map(([t])=>t)}getUnchangedStacks(e){return Array.from(e.stackChanges.entries()).filter(([,t])=>!t).map(([t])=>t)}}export{l as TemplateHashError,J as TemplateHashService};
+var T=Object.defineProperty;var d=(f,e)=>T(f,"name",{value:e,configurable:!0});import{createHash as _}from"crypto";import{readFile as E,readdir as F}from"fs/promises";import{join as w,basename as k}from"path";import{fileExists as A}from"@fjall/util/fsHelpers";import{success as h,failure as i}from"@fjall/generator";import{BaseServiceError as $}from"../../types/errors/ServiceError.js";import{readStateFile as g,writeStateFile as N,readStateFileAt as y,writeStateFileAt as x,createEmptyState as S,updateTemplateHash as H,getStateFilePath as C}from"../../types/config/FjallState.js";class l extends ${static{d(this,"TemplateHashError")}errorType;constructor(e,t,r,a=!1){super(`TEMPLATE_HASH_${t.toUpperCase()}`,e,r,a),this.errorType=t}}const m=".template.json";class R{static{d(this,"TemplateHashService")}async computeTemplateHash(e){try{const t=await E(e,"utf-8"),r=JSON.stringify(JSON.parse(t)),a=_("sha256").update(r).digest("hex");return h(a)}catch(t){return i(new l(`Failed to hash template: ${e}`,"hash_failed",{path:e,error:t}))}}async getTemplateHashes(e){if(!await A(e))return i(new l(`CDK output directory not found: ${e}`,"cdk_out_not_found",{path:e}));try{const r=(await F(e)).filter(s=>s.endsWith(m)),a=new Map;for(const s of r){const n=k(s,m),o=w(e,s),c=await this.computeTemplateHash(o);if(!c.success)return i(c.error);a.set(n,c.data)}return h(a)}catch(t){return i(new l(`Failed to read CDK output directory: ${e}`,"read_failed",{path:e,error:t}))}}async compareWithState(e,t){const r=await g(t),a=new Map;let s=0,n=0;for(const[o,c]of e){const u=r?.templateHashes[o],p=!u||u.hash!==c;a.set(o,p),p?s++:n++}if(r?.templateHashes)for(const o of Object.keys(r.templateHashes))e.has(o)||(a.set(o,!0),s++);return h({stackChanges:a,currentHashes:e,changedCount:s,unchangedCount:n})}async updateStateAfterDeploy(e,t,r){try{let a=await g(e)??S();for(const[s,n]of t){const o=r?.get(s);a=H(a,s,n,o)}return await N(e,a),h(void 0)}catch(a){return i(new l(`Failed to write state file: ${C(e)}`,"state_write_failed",{appPath:e,error:a}))}}async compareCascadeStack(e,t,r){const a=w(e,`${t}${m}`),s=await this.computeTemplateHash(a);if(!s.success)return{changed:!0,currentHash:void 0};const n=s.data,c=(await y(r))?.templateHashes[t];return{changed:!c||c.hash!==n,currentHash:n}}async persistCascadeStack(e,t,r,a){try{const s=await y(e)??S(),n=H(s,t,r,a);return await x(e,n),h(void 0)}catch(s){return i(new l(`Failed to write cascade state file: ${e}`,"state_write_failed",{stateFilePath:e,error:s}))}}getStateFilePath(e){return C(e)}stackHasChanges(e,t){return e.stackChanges.get(t)??!0}getChangedStacks(e){return Array.from(e.stackChanges.entries()).filter(([,t])=>t).map(([t])=>t)}getUnchangedStacks(e){return Array.from(e.stackChanges.entries()).filter(([,t])=>!t).map(([t])=>t)}}export{l as TemplateHashError,R as TemplateHashService};

package/dist/src/services/supporting/helpers.js

@@ -1 +1 @@
-function n(i,t,e="info"){i?.onProgress?.({type:e,message:t})}const r=Object.freeze({BUILD:"Building Next.js application",SYNTH:"Synthesising infrastructure",HASH:"Comparing template hashes",DOCKER:"Validating Docker configuration",SECRETS:"Validating SSM secrets"});function u(i,t){const e=i.toLowerCase();return e.includes("creating next.js build")||e.includes("creating an optimised production build")?"Creating production build...":e.includes("compiling")?"Compiling...":e.includes("linting")?"Linting...":e.includes("checking validity of types")?"Type checking...":e.includes("collecting page data")?"Collecting page data...":e.includes("generating static pages")?"Generating static pages...":e.includes("finalizing page optimization")?"Optimising pages...":e.includes("open-next build complete")||e.includes("build completed")?"Build complete":e.includes("bundling")?"Bundling functions...":e.includes("copying assets")?"Copying assets...":t}function s(i){if(i)return{requiresDatabase:i.requiresDatabase??!1,databaseEnvVar:i.databaseEnvVar??"DATABASE_URL"}}function a(i){const t={};for(const e of i)e.OutputKey&&e.OutputValue!==void 0&&(t[e.OutputKey]=e.OutputValue);return t}export{r as PROGRESS_MESSAGES,s as buildStepContextBuildConfig,a as convertCloudFormationOutputsToRecord,n as emitProgress,u as parseBuildPhase};
+var r=Object.defineProperty;var n=(i,t)=>r(i,"name",{value:t,configurable:!0});function s(i,t,e="info"){i?.onProgress?.({type:e,message:t})}n(s,"emitProgress");const a=Object.freeze({BUILD:"Building Next.js application",SYNTH:"Synthesising infrastructure",HASH:"Comparing template hashes",DOCKER:"Validating Docker configuration",SECRETS:"Validating SSM secrets"});function o(i,t){const e=i.toLowerCase();return e.includes("creating next.js build")||e.includes("creating an optimised production build")?"Creating production build...":e.includes("compiling")?"Compiling...":e.includes("linting")?"Linting...":e.includes("checking validity of types")?"Type checking...":e.includes("collecting page data")?"Collecting page data...":e.includes("generating static pages")?"Generating static pages...":e.includes("finalizing page optimization")?"Optimising pages...":e.includes("open-next build complete")||e.includes("build completed")?"Build complete":e.includes("bundling")?"Bundling functions...":e.includes("copying assets")?"Copying assets...":t}n(o,"parseBuildPhase");function c(i){if(i)return{requiresDatabase:i.requiresDatabase??!1,databaseEnvVar:i.databaseEnvVar??"DATABASE_URL"}}n(c,"buildStepContextBuildConfig");function l(i){const t={};for(const e of i)e.OutputKey&&e.OutputValue!==void 0&&(t[e.OutputKey]=e.OutputValue);return t}n(l,"convertCloudFormationOutputsToRecord");export{a as PROGRESS_MESSAGES,c as buildStepContextBuildConfig,l as convertCloudFormationOutputsToRecord,s as emitProgress,o as parseBuildPhase};

package/dist/src/steps/stepRegistry.js

@@ -1 +1 @@
-import{APPLICATION_STACKS as n,APPLICATION_DEPLOY_ORDER as l,getApplicationStepName as t,getApplicationStepId as a}from"../types/index.js";import{STEP_IDS as e,STEP_NAMES as s,INFRA_STEP_NAME as d}from"../types/index.js";const O={Network:e.NETWORK_DESTROY,Storage:e.STORAGE_DESTROY,Messaging:e.MESSAGING_DESTROY,Database:e.DATABASE_DESTROY,Compute:e.COMPUTE_DESTROY,Cdn:e.CDN_DESTROY};function C(A){return O[A]??`${A.toLowerCase()}-destroy`}class p{static DEPLOYMENT_STEPS=new Map([["application-deploy",[{id:e.AUTH,name:s.AUTH},{id:e.DETECT_CONFIG,name:s.PREPARE_DEPLOY},{id:e.TARGET_READINESS,name:s.TARGET_READINESS,conditions:{requiresInfra:!0}},{id:e.BOOTSTRAP,name:s.BOOTSTRAP,conditions:{requiresInfra:!0}},{id:a(n.NETWORK,"deploy"),name:t(n.NETWORK,"deploy"),conditions:{requiresInfra:!0,requiresNetwork:!0}},{id:a(n.STORAGE,"deploy"),name:t(n.STORAGE,"deploy"),conditions:{requiresInfra:!0,requiresStorage:!0}},{id:a(n.MESSAGING,"deploy"),name:t(n.MESSAGING,"deploy"),conditions:{requiresInfra:!0,requiresMessaging:!0}},{id:a(n.DATABASE,"deploy"),name:t(n.DATABASE,"deploy"),conditions:{requiresInfra:!0,requiresDatabase:!0}},{id:e.DOCKER_OPERATIONS,name:"Docker operations",conditions:{requiresDocker:!0,requiresCompute:!0,skipForInfraOnly:!0}},{id:e.TAG_ECR_IMAGES,name:"Tagging container images",conditions:{requiresImageTagging:!0,requiresCompute:!0,skipForInfraOnly:!0}},{id:a(n.COMPUTE,"deploy"),name:t(n.COMPUTE,"deploy"),conditions:{requiresInfra:!0,requiresCompute:!0}},{id:a(n.CDN,"deploy"),name:t(n.CDN,"deploy"),conditions:{requiresInfra:!0,requiresCdn:!0}}]],["application-destroy",[{id:e.AUTH,name:s.AUTH},{id:e.DETECT_CONFIG,name:s.CHECK_INFRA_STATE},{id:a(n.CDN,"destroy"),name:t(n.CDN,"destroy"),conditions:{requiresCdn:!0}},{id:a(n.COMPUTE,"destroy"),name:t(n.COMPUTE,"destroy")},{id:a(n.DATABASE,"destroy"),name:t(n.DATABASE,"destroy")},{id:a(n.MESSAGING,"destroy"),name:t(n.MESSAGING,"destroy"),conditions:{requiresMessaging:!0}},{id:a(n.STORAGE,"destroy"),name:t(n.STORAGE,"destroy"),conditions:{requiresStorage:!0}},{id:a(n.NETWORK,"destroy"),name:t(n.NETWORK,"destroy")}]],["organisation-deploy",[{id:e.AUTH,name:s.AUTH},{id:e.ORG_SETUP,name:s.ORG_SETUP},{id:e.PREPARE_ENVIRONMENT,name:d.PREPARE},{id:e.ORG_DEPLOY,name:s.ORG_DEPLOY,conditions:{requiresOrgChanges:!0}},{id:e.CASCADE_PLATFORM,name:s.CASCADE_PLATFORM,conditions:{requiresPlatformAccount:!0}},{id:e.CASCADE_ACCOUNTS,name:s.CASCADE_ACCOUNTS,conditions:{requiresMemberAccounts:!0}}]],["organisation-destroy",[{id:e.AUTH,name:s.AUTH},{id:e.CFN_CHECK,name:s.CHECK_INFRA_STATE},{id:e.CASCADE_ACCOUNTS,name:"Destroying account infrastructure",conditions:{requiresMemberAccounts:!0}},{id:e.CASCADE_PLATFORM,name:"Destroying platform infrastructure",conditions:{requiresPlatformAccount:!0}},{id:e.DESTROY,name:"Destroying organisation infrastructure"}]],["platform-deploy",[{id:e.AUTH,name:s.AUTH},{id:e.CONNECT,name:d.CONNECT},{id:e.PREPARE_ENVIRONMENT,name:d.PREPARE},{id:e.DEPLOY,name:d.DEPLOY},{id:e.MONITORING,name:d.MONITORING}]],["platform-destroy",[{id:e.AUTH,name:s.AUTH},{id:e.CFN_CHECK,name:"Checking infrastructure state"},{id:e.ORG_DESTROY,name:"Destroying platform infrastructure"}]],["account-deploy",[{id:e.AUTH,name:s.AUTH},{id:e.CONNECT,name:d.CONNECT},{id:e.PREPARE_ENVIRONMENT,name:d.PREPARE},{id:e.DEPLOY,name:d.DEPLOY},{id:e.MONITORING,name:d.MONITORING}]],["account-destroy",[{id:e.AUTH,name:s.AUTH},{id:e.CFN_CHECK,name:"Checking infrastructure state"},{id:e.ORG_DESTROY,name:"Destroying account infrastructure"}]]]);static getSteps(r){if(r.deploymentType==="application"&&r.operation==="deploy"&&r.deployOnly)return[{id:e.AUTH,name:s.AUTH},{id:e.DOCKER_OPERATIONS,name:"Build and push Docker container"},{id:a(n.COMPUTE,"deploy"),name:t(n.COMPUTE,"deploy")}];const o=`${r.deploymentType}-${r.operation}`;return(this.DEPLOYMENT_STEPS.get(o)??[]).filter(i=>{if(r.deploymentType==="application"){const T=r.builderName==="opennext";if(i.conditions?.requiresInfra&&r.deployOnly)return!1;if(r.resources){const E=r.resources;if(i.conditions?.requiresNetwork&&!E.hasNetwork||i.conditions?.requiresCompute&&!E.hasCompute||i.conditions?.requiresDatabase&&!E.hasDatabase||i.conditions?.requiresStorage&&!E.hasStorage||i.conditions?.requiresMessaging&&!E.hasMessaging||i.conditions?.requiresCdn&&!E.hasCdn)return!1}else if(r.operation==="deploy"&&!T&&(i.conditions?.requiresNetwork||i.conditions?.requiresCompute||i.conditions?.requiresDatabase||i.conditions?.requiresStorage||i.conditions?.requiresMessaging||i.conditions?.requiresCdn))return!1;if(i.conditions?.requiresDocker||i.id===e.DOCKER_OPERATIONS)return T||r.infraOnly||r.resources&&!r.resources.hasCompute?!1:r.deployOnly?r.hasDockerfile===!0:r.hasDockerfile===!0||r.hasDockerfile===!1&&!r.isManagedAccount;if(i.conditions?.requiresImageTagging)return r.infraOnly||T||r.resources&&!r.resources.hasCompute?!1:r.hasDockerfile===!1}return!(i.conditions?.requiresMemberAccounts&&!r.hasMemberAccounts||i.conditions?.requiresPlatformAccount&&!r.hasPlatformAccount||i.conditions?.requiresOrgChanges&&r.hasOrgChanges!==!0||i.conditions?.requiresPlatformChanges&&r.hasPlatformChanges!==!0||i.conditions?.requiresAccountChanges&&r.hasAccountChanges!==!0||i.conditions?.requiresDomainConfiguration&&!r.hasDomainConfiguration||i.conditions?.requiresDomainChanges&&r.hasDomainChanges!==!0)}).map(i=>i.id===e.DOCKER_OPERATIONS?{...i,name:r.hasDockerfile?"Building and pushing Docker image":"Initialising container repository"}:i)}static getStepNames(r){return this.getSteps(r).map(o=>o.name)}static getStepIndex(r,o){return this.getSteps(o).findIndex(c=>c.id===r)}static getStepById(r,o="application"){const u=`${o}-deploy`,i=(this.DEPLOYMENT_STEPS.get(u)||[]).find(f=>f.id===r);if(i)return i;const T=`${o}-destroy`;return(this.DEPLOYMENT_STEPS.get(T)||[]).find(f=>f.id===r)}static isStepIncluded(r,o){return this.getSteps(o).some(c=>c.id===r)}static createContext(r,o,u){return{deploymentType:r,operation:o,deployOnly:u?.deployOnly??!1,infraOnly:u?.infraOnly??!1,isManagedAccount:u?.isManagedAccount??!1,hasDockerfile:u?.hasDockerfile??!1,pattern:u?.pattern??null,builderName:u?.builderName,resources:u?.resources}}static getDeploymentTypes(){return["application","organisation","platform","account"]}static getStackNames(r){switch(r){case"application":return[...l];case"organisation":return["Organisation"];case"platform":return["Platform"];case"account":return["Account"];default:return[]}}static getInfraStepIds(){return[e.CFN_CHECK,e.TARGET_READINESS,e.BOOTSTRAP,e.DIFF,e.NETWORK,e.STORAGE,e.MESSAGING,e.DATABASE,e.COMPUTE,e.CDN]}static getDockerStepIds(){return[e.ECR_INIT,e.DOCKER_DEPLOY]}}export{p as StepRegistry,C as getDestroyStepId};
+var l=Object.defineProperty;var S=(c,r)=>l(c,"name",{value:r,configurable:!0});import{APPLICATION_STACKS as n,APPLICATION_DEPLOY_ORDER as C,getApplicationStepName as t,getApplicationStepId as a}from"../types/index.js";import{STEP_IDS as e,STEP_NAMES as s,INFRA_STEP_NAME as E}from"../types/index.js";const O={Network:e.NETWORK_DESTROY,Storage:e.STORAGE_DESTROY,Messaging:e.MESSAGING_DESTROY,Database:e.DATABASE_DESTROY,Compute:e.COMPUTE_DESTROY,UsEast1Certificates:e.US_EAST_1_CERTIFICATES_DESTROY,Cdn:e.CDN_DESTROY};function D(c){return O[c]??`${c.toLowerCase()}-destroy`}S(D,"getDestroyStepId");class y{static{S(this,"StepRegistry")}static DEPLOYMENT_STEPS=new Map([["application-deploy",[{id:e.AUTH,name:s.AUTH},{id:e.DETECT_CONFIG,name:s.PREPARE_DEPLOY},{id:e.TARGET_READINESS,name:s.TARGET_READINESS,conditions:{requiresInfra:!0}},{id:e.BOOTSTRAP,name:s.BOOTSTRAP,conditions:{requiresInfra:!0}},{id:a(n.NETWORK,"deploy"),name:t(n.NETWORK,"deploy"),conditions:{requiresInfra:!0,requiresNetwork:!0}},{id:a(n.STORAGE,"deploy"),name:t(n.STORAGE,"deploy"),conditions:{requiresInfra:!0,requiresStorage:!0}},{id:a(n.MESSAGING,"deploy"),name:t(n.MESSAGING,"deploy"),conditions:{requiresInfra:!0,requiresMessaging:!0}},{id:a(n.DATABASE,"deploy"),name:t(n.DATABASE,"deploy"),conditions:{requiresInfra:!0,requiresDatabase:!0}},{id:e.DOCKER_OPERATIONS,name:"Docker operations",conditions:{requiresDocker:!0,requiresCompute:!0,skipForInfraOnly:!0}},{id:e.TAG_ECR_IMAGES,name:"Tagging container images",conditions:{requiresImageTagging:!0,requiresCompute:!0,skipForInfraOnly:!0}},{id:a(n.COMPUTE,"deploy"),name:t(n.COMPUTE,"deploy"),conditions:{requiresInfra:!0,requiresCompute:!0}},{id:a(n.US_EAST_1_CERTIFICATES,"deploy"),name:t(n.US_EAST_1_CERTIFICATES,"deploy"),conditions:{requiresInfra:!0,requiresUsEast1Certificates:!0}},{id:a(n.CDN,"deploy"),name:t(n.CDN,"deploy"),conditions:{requiresInfra:!0,requiresCdn:!0}}]],["application-destroy",[{id:e.AUTH,name:s.AUTH},{id:e.DETECT_CONFIG,name:s.CHECK_INFRA_STATE},{id:a(n.CDN,"destroy"),name:t(n.CDN,"destroy"),conditions:{requiresCdn:!0}},{id:a(n.US_EAST_1_CERTIFICATES,"destroy"),name:t(n.US_EAST_1_CERTIFICATES,"destroy"),conditions:{requiresUsEast1Certificates:!0}},{id:a(n.COMPUTE,"destroy"),name:t(n.COMPUTE,"destroy")},{id:a(n.DATABASE,"destroy"),name:t(n.DATABASE,"destroy")},{id:a(n.MESSAGING,"destroy"),name:t(n.MESSAGING,"destroy"),conditions:{requiresMessaging:!0}},{id:a(n.STORAGE,"destroy"),name:t(n.STORAGE,"destroy"),conditions:{requiresStorage:!0}},{id:a(n.NETWORK,"destroy"),name:t(n.NETWORK,"destroy")}]],["organisation-deploy",[{id:e.AUTH,name:s.AUTH},{id:e.ORG_SETUP,name:s.ORG_SETUP},{id:e.PREPARE_ENVIRONMENT,name:E.PREPARE},{id:e.ORG_DEPLOY,name:s.ORG_DEPLOY,conditions:{requiresOrgChanges:!0}},{id:e.CASCADE_PLATFORM,name:s.CASCADE_PLATFORM,conditions:{requiresPlatformAccount:!0}},{id:e.CASCADE_ACCOUNTS,name:s.CASCADE_ACCOUNTS,conditions:{requiresMemberAccounts:!0}}]],["organisation-destroy",[{id:e.AUTH,name:s.AUTH},{id:e.CFN_CHECK,name:s.CHECK_INFRA_STATE},{id:e.CASCADE_ACCOUNTS,name:"Destroying account infrastructure",conditions:{requiresMemberAccounts:!0}},{id:e.CASCADE_PLATFORM,name:"Destroying platform infrastructure",conditions:{requiresPlatformAccount:!0}},{id:e.DESTROY,name:"Destroying organisation infrastructure"}]],["platform-deploy",[{id:e.AUTH,name:s.AUTH},{id:e.CONNECT,name:E.CONNECT},{id:e.PREPARE_ENVIRONMENT,name:E.PREPARE},{id:e.DEPLOY,name:E.DEPLOY},{id:e.MONITORING,name:E.MONITORING}]],["platform-destroy",[{id:e.AUTH,name:s.AUTH},{id:e.CFN_CHECK,name:"Checking infrastructure state"},{id:e.ORG_DESTROY,name:"Destroying platform infrastructure"}]],["account-deploy",[{id:e.AUTH,name:s.AUTH},{id:e.CONNECT,name:E.CONNECT},{id:e.PREPARE_ENVIRONMENT,name:E.PREPARE},{id:e.DEPLOY,name:E.DEPLOY},{id:e.MONITORING,name:E.MONITORING}]],["account-destroy",[{id:e.AUTH,name:s.AUTH},{id:e.CFN_CHECK,name:"Checking infrastructure state"},{id:e.ORG_DESTROY,name:"Destroying account infrastructure"}]]]);static getSteps(r){if(r.deploymentType==="application"&&r.operation==="deploy"&&r.deployOnly)return[{id:e.AUTH,name:s.AUTH},{id:e.DOCKER_OPERATIONS,name:"Build and push Docker container"},{id:a(n.COMPUTE,"deploy"),name:t(n.COMPUTE,"deploy")}];const o=`${r.deploymentType}-${r.operation}`;return(this.DEPLOYMENT_STEPS.get(o)??[]).filter(i=>{if(r.deploymentType==="application"){const A=r.builderName==="opennext";if(i.conditions?.requiresInfra&&r.deployOnly)return!1;if(r.resources){const d=r.resources;if(i.conditions?.requiresNetwork&&!d.hasNetwork||i.conditions?.requiresCompute&&!d.hasCompute||i.conditions?.requiresDatabase&&!d.hasDatabase||i.conditions?.requiresStorage&&!d.hasStorage||i.conditions?.requiresMessaging&&!d.hasMessaging||i.conditions?.requiresCdn&&!d.hasCdn||i.conditions?.requiresUsEast1Certificates&&d.hasUsEast1Certificates!==!0)return!1}else if(r.operation==="deploy"&&!A){if(i.conditions?.requiresNetwork||i.conditions?.requiresCompute||i.conditions?.requiresDatabase||i.conditions?.requiresStorage||i.conditions?.requiresMessaging||i.conditions?.requiresCdn||i.conditions?.requiresUsEast1Certificates)return!1}else if(r.operation==="deploy"&&i.conditions?.requiresUsEast1Certificates)return!1;if(i.conditions?.requiresDocker||i.id===e.DOCKER_OPERATIONS)return A||r.infraOnly||r.resources&&!r.resources.hasCompute?!1:r.deployOnly?r.hasDockerfile===!0:r.hasDockerfile===!0||r.hasDockerfile===!1&&!r.isManagedAccount;if(i.conditions?.requiresImageTagging)return r.infraOnly||A||r.resources&&!r.resources.hasCompute?!1:r.hasDockerfile===!1}return!(i.conditions?.requiresMemberAccounts&&!r.hasMemberAccounts||i.conditions?.requiresPlatformAccount&&!r.hasPlatformAccount||i.conditions?.requiresOrgChanges&&r.hasOrgChanges!==!0||i.conditions?.requiresPlatformChanges&&r.hasPlatformChanges!==!0||i.conditions?.requiresAccountChanges&&r.hasAccountChanges!==!0||i.conditions?.requiresDomainConfiguration&&!r.hasDomainConfiguration||i.conditions?.requiresDomainChanges&&r.hasDomainChanges!==!0)}).map(i=>i.id===e.DOCKER_OPERATIONS?{...i,name:r.hasDockerfile?"Building and pushing Docker image":"Initialising container repository"}:i)}static getStepNames(r){return this.getSteps(r).map(o=>o.name)}static getStepIndex(r,o){return this.getSteps(o).findIndex(T=>T.id===r)}static getStepById(r,o="application"){const u=`${o}-deploy`,i=(this.DEPLOYMENT_STEPS.get(u)||[]).find(f=>f.id===r);if(i)return i;const A=`${o}-destroy`;return(this.DEPLOYMENT_STEPS.get(A)||[]).find(f=>f.id===r)}static isStepIncluded(r,o){return this.getSteps(o).some(T=>T.id===r)}static createContext(r,o,u){return{deploymentType:r,operation:o,deployOnly:u?.deployOnly??!1,infraOnly:u?.infraOnly??!1,isManagedAccount:u?.isManagedAccount??!1,hasDockerfile:u?.hasDockerfile??!1,pattern:u?.pattern??null,builderName:u?.builderName,resources:u?.resources}}static getDeploymentTypes(){return["application","organisation","platform","account"]}static getStackNames(r){switch(r){case"application":return[...C];case"organisation":return["Organisation"];case"platform":return["Platform"];case"account":return["Account"];default:return[]}}static getInfraStepIds(){return[e.CFN_CHECK,e.TARGET_READINESS,e.BOOTSTRAP,e.DIFF,e.NETWORK,e.STORAGE,e.MESSAGING,e.DATABASE,e.COMPUTE,e.US_EAST_1_CERTIFICATES,e.CDN]}static getDockerStepIds(){return[e.ECR_INIT,e.DOCKER_DEPLOY]}}export{y as StepRegistry,D as getDestroyStepId};

package/dist/src/types/ProgressEvent.js

@@ -1 +1 @@
-class l{callbacks;stepIndex=0;totalSteps;constructor(s){this.callbacks=s}setTotalSteps(s){this.totalSteps=s}step(s,t){const{metadata:e,stepIndex:a,totalSteps:r}=t??{};this.callbacks?.onProgress?.({type:"step",message:s,metadata:{...e,stepIndex:a??this.stepIndex++,totalSteps:r??this.totalSteps}})}info(s,t){this.callbacks?.onProgress?.({type:"info",message:s,metadata:t})}spinner(s,t){this.callbacks?.onProgress?.({type:"spinner",message:s,metadata:t})}warning(s,t){this.callbacks?.onProgress?.({type:"warning",message:s,metadata:t})}debug(s,t){this.callbacks?.onProgress?.({type:"debug",message:s,metadata:t})}error(s,t){this.callbacks?.onProgress?.({type:"error",message:s,metadata:t})}}export{l as ProgressReporter};
+var n=Object.defineProperty;var a=(e,s)=>n(e,"name",{value:s,configurable:!0});class c{static{a(this,"ProgressReporter")}callbacks;stepIndex=0;totalSteps;constructor(s){this.callbacks=s}setTotalSteps(s){this.totalSteps=s}step(s,t){const{metadata:r,stepIndex:o,totalSteps:l}=t??{};this.callbacks?.onProgress?.({type:"step",message:s,metadata:{...r,stepIndex:o??this.stepIndex++,totalSteps:l??this.totalSteps}})}info(s,t){this.callbacks?.onProgress?.({type:"info",message:s,metadata:t})}spinner(s,t){this.callbacks?.onProgress?.({type:"spinner",message:s,metadata:t})}warning(s,t){this.callbacks?.onProgress?.({type:"warning",message:s,metadata:t})}debug(s,t){this.callbacks?.onProgress?.({type:"debug",message:s,metadata:t})}error(s,t){this.callbacks?.onProgress?.({type:"error",message:s,metadata:t})}}export{c as ProgressReporter};

package/dist/src/types/application/ApplicationServiceTypes.js

@@ -1 +1 @@
-import{BaseServiceError as c}from"../errors/ServiceError.js";import{getErrorMessage as o,maskSensitiveOutput as i}from"@fjall/util";function T(t,a,e,p,r){const s=i(o(r));return new m(`${t}: ${s}`,{errorType:a,appName:e,operation:p,details:r,...r instanceof Error&&{cause:r}})}class m extends c{errorType;appName;operation;stackType;constructor(a,e){super(`APPLICATION_${e.errorType.toUpperCase()}`,a,e.details,e.recoverable??!1,e.cause),this.errorType=e.errorType,this.appName=e.appName,this.operation=e.operation,this.stackType=e.stackType}}export{m as ApplicationError,T as wrapApplicationError};
+var o=Object.defineProperty;var p=(a,r)=>o(a,"name",{value:r,configurable:!0});import{BaseServiceError as i}from"../errors/ServiceError.js";import{getErrorMessage as m,maskSensitiveOutput as n}from"@fjall/util";function f(a,r,e,s,t){const c=n(m(t));return new u(`${a}: ${c}`,{errorType:r,appName:e,operation:s,details:t,...t instanceof Error&&{cause:t}})}p(f,"wrapApplicationError");class u extends i{static{p(this,"ApplicationError")}errorType;appName;operation;stackType;constructor(r,e){super(`APPLICATION_${e.errorType.toUpperCase()}`,r,e.details,e.recoverable??!1,e.cause),this.errorType=e.errorType,this.appName=e.appName,this.operation=e.operation,this.stackType=e.stackType}}export{u as ApplicationError,f as wrapApplicationError};

package/dist/src/types/callbacks.js

@@ -1 +1 @@
-function n(e){return e!==void 0&&"bucketName"in e}function t(e){return e!==void 0&&"retainedBuckets"in e}export{n as isQuarantineDetail,t as isRetainedBucketsDetail};
+var i=Object.defineProperty;var n=(e,t)=>i(e,"name",{value:t,configurable:!0});function r(e){return e!==void 0&&"bucketName"in e}n(r,"isQuarantineDetail");function a(e){return e!==void 0&&"retainedBuckets"in e}n(a,"isRetainedBucketsDetail");export{r as isQuarantineDetail,a as isRetainedBucketsDetail};

package/dist/src/types/config/FjallState.js

@@ -1 +1 @@
-import{z as a}from"zod";import{randomBytes as u}from"crypto";import{readFile as f,writeFile as d,unlink as s,rename as m,mkdir as S}from"fs/promises";import{dirname as g,join as c}from"path";import{fileExists as h}from"@fjall/util/fsHelpers";import{logger as o}from"@fjall/util/logger";import{getErrorMessage as i,maskSensitiveOutput as y}from"@fjall/util";const F=a.object({hash:a.string(),deployedAt:a.string(),stackStatus:a.string().optional()}).strict(),w=a.object({version:a.literal(1),lastDeployedAt:a.string().optional(),templateHashes:a.record(a.string(),F),metadata:a.record(a.string(),a.unknown()).optional()}).strict(),x=".fjall-state.json";function l(t){return c(t,x)}function j(t){return t.replace(/-/g,"")}function k(t,r,e){return c(t,`.fjall-state.cascade-${r}-${j(e)}.json`)}async function E(t){if(!await h(t))return null;try{const r=await f(t,"utf-8"),e=JSON.parse(r),n=w.safeParse(e);return n.success?n.data:null}catch(r){return o.debug("FjallState","Failed to read state file",{path:t,error:i(r)}),null}}async function A(t,r){const e=`${t}.${Date.now()}-${u(4).toString("hex")}.tmp`;await S(g(t),{recursive:!0});try{await d(e,JSON.stringify(r,null,2),"utf-8"),await m(e,t)}catch(n){try{await s(e)}catch(p){o.debug("FjallState","Temp file cleanup failed (non-fatal)",{path:e,error:i(p)})}throw n}}async function v(t){return E(l(t))}async function I(t,r){return A(l(t),r)}function J(){return{version:1,templateHashes:{}}}async function M(t){const r=l(t);try{await s(r)}catch(e){(typeof e=="object"&&e!==null&&"code"in e?e.code:void 0)!=="ENOENT"&&o.warn("FjallState","Failed to delete state file",{path:r,error:y(i(e))})}}function _(t,r,e,n){return{...t,lastDeployedAt:new Date().toISOString(),templateHashes:{...t.templateHashes,[r]:{hash:e,deployedAt:new Date().toISOString(),...n!==void 0&&{stackStatus:n}}}}}export{w as FjallStateFileSchema,J as createEmptyState,M as deleteStateFile,k as getCascadeStateFilePath,l as getStateFilePath,v as readStateFile,E as readStateFileAt,j as regionSuffix,_ as updateTemplateHash,I as writeStateFile,A as writeStateFileAt};
+var f=Object.defineProperty;var n=(t,e)=>f(t,"name",{value:e,configurable:!0});import{z as a}from"zod";import{randomBytes as d}from"crypto";import{readFile as m,writeFile as S,unlink as c,rename as g,mkdir as h}from"fs/promises";import{dirname as y,join as p}from"path";import{fileExists as F}from"@fjall/util/fsHelpers";import{logger as i}from"@fjall/util/logger";import{getErrorMessage as l,maskSensitiveOutput as w}from"@fjall/util";const x=a.object({hash:a.string(),deployedAt:a.string(),stackStatus:a.string().optional()}).strict(),j=a.object({version:a.literal(1),lastDeployedAt:a.string().optional(),templateHashes:a.record(a.string(),x),metadata:a.record(a.string(),a.unknown()).optional()}).strict(),E=".fjall-state.json";function s(t){return p(t,E)}n(s,"getStateFilePath");function A(t){return t.replace(/-/g,"")}n(A,"regionSuffix");function J(t,e,r){return p(t,`.fjall-state.cascade-${e}-${A(r)}.json`)}n(J,"getCascadeStateFilePath");async function H(t){if(!await F(t))return null;try{const e=await m(t,"utf-8"),r=JSON.parse(e),o=j.safeParse(r);return o.success?o.data:null}catch(e){return i.debug("FjallState","Failed to read state file",{path:t,error:l(e)}),null}}n(H,"readStateFileAt");async function O(t,e){const r=`${t}.${Date.now()}-${d(4).toString("hex")}.tmp`;await h(y(t),{recursive:!0});try{await S(r,JSON.stringify(e,null,2),"utf-8"),await g(r,t)}catch(o){try{await c(r)}catch(u){i.debug("FjallState","Temp file cleanup failed (non-fatal)",{path:r,error:l(u)})}throw o}}n(O,"writeStateFileAt");async function M(t){return H(s(t))}n(M,"readStateFile");async function _(t,e){return O(s(t),e)}n(_,"writeStateFile");function z(){return{version:1,templateHashes:{}}}n(z,"createEmptyState");async function B(t){const e=s(t);try{await c(e)}catch(r){(typeof r=="object"&&r!==null&&"code"in r?r.code:void 0)!=="ENOENT"&&i.warn("FjallState","Failed to delete state file",{path:e,error:w(l(r))})}}n(B,"deleteStateFile");function C(t,e,r,o){return{...t,lastDeployedAt:new Date().toISOString(),templateHashes:{...t.templateHashes,[e]:{hash:r,deployedAt:new Date().toISOString(),...o!==void 0&&{stackStatus:o}}}}}n(C,"updateTemplateHash");export{j as FjallStateFileSchema,z as createEmptyState,B as deleteStateFile,J as getCascadeStateFilePath,s as getStateFilePath,M as readStateFile,H as readStateFileAt,A as regionSuffix,C as updateTemplateHash,_ as writeStateFile,O as writeStateFileAt};

package/dist/src/types/constants.js

@@ -1 +1 @@
-const A="does not exist",E="is in a failed state",T="No stacks match the name(s)",s="infrastructure.ts",e=new Set(["ROLLBACK_FAILED","ROLLBACK_COMPLETE","DELETE_FAILED"]);function o(t){return e.has(t)}export{T as CDK_NO_STACKS_MATCH,s as INFRASTRUCTURE_FILENAME,e as SAFE_CLEANUP_STATES,E as STACK_FAILED_STATE_PATTERN,A as STACK_NOT_FOUND_PATTERN,o as isCleanableState};
+var E=Object.defineProperty;var e=(t,A)=>E(t,"name",{value:A,configurable:!0});const o="does not exist",_="is in a failed state",n="No stacks match the name(s)",a="infrastructure.ts",T=new Set(["ROLLBACK_FAILED","ROLLBACK_COMPLETE","DELETE_FAILED"]);function r(t){return T.has(t)}e(r,"isCleanableState");export{n as CDK_NO_STACKS_MATCH,a as INFRASTRUCTURE_FILENAME,T as SAFE_CLEANUP_STATES,_ as STACK_FAILED_STATE_PATTERN,o as STACK_NOT_FOUND_PATTERN,r as isCleanableState};

package/dist/src/types/deployEmitter.js

@@ -1 +1 @@
-import{maskSensitiveOutput as v}from"@fjall/util";import{DEPLOY_EVENT_CONTRACT as y,DEPLOY_EVENT_ERROR_MESSAGE_MAX as d,DEPLOY_EVENT_MESSAGE_MAX as l,DEPLOY_EVENT_OUTPUT_MAX as m,DEPLOY_EVENT_STATUS_REASON_MAX as g,DEPLOY_EVENT_TRAIL_DETAIL_MAX as K,DEPLOY_EVENT_URL_MAX as h}from"./deployEvent.js";function t(i,c){const u=v(i);return u.length>c?u.slice(0,c):u}function A(i){const c={};for(const[u,p]of Object.entries(i))c[u]=t(p,g);return c}function D(i){const{deploymentId:c,onEvent:u}=i,p=i.now??(()=>new Date().toISOString());let f=i.startSeq??0;function n(){return{contract:y,deploymentId:c,seq:f++,time:p()}}function s(e){return u(e),e}return{stepStarted(e){const r={...n(),progressKind:"step.started",...e};return s(r)},stepCompleted(e){const r={...n(),progressKind:"step.completed",step:e.step,status:e.status,...e.progress!==void 0&&{progress:e.progress},...e.errorMessage!==void 0&&{errorMessage:t(e.errorMessage,d)}};return s(r)},log(e){const r={...n(),progressKind:"log",level:e.level,message:t(e.message,l)};return s(r)},output(e){const r={...n(),progressKind:"output",chunk:t(e.chunk,m)};return s(r)},resource(e){const r={...n(),progressKind:"resource",resource:{...e.resource,...e.resource.statusReason!==void 0&&{statusReason:t(e.resource.statusReason,g)}},...e.scope!==void 0&&{scope:e.scope}};return s(r)},parallelPhase(e){const r={...n(),progressKind:"phase.parallel",status:e.status,stacks:e.stacks,...e.description!==void 0&&{description:e.description},...e.results!==void 0&&{results:e.results.map(a=>({stack:a.stack,success:a.success,...a.error!==void 0&&{error:t(a.error,d)}}))}};return s(r)},buildStarted(e){const r={...n(),progressKind:"build.started",...e};return s(r)},buildProgress(e){const r={...n(),progressKind:"build.progress",builder:e.builder,message:t(e.message,l),...e.serviceName!==void 0&&{serviceName:e.serviceName},...e.percentage!==void 0&&{percentage:e.percentage},...e.layerId!==void 0&&{layerId:e.layerId},...e.status!==void 0&&{status:e.status}};return s(r)},buildCompleted(e){const r={...n(),progressKind:"build.completed",builder:e.builder,success:e.success,...e.serviceName!==void 0&&{serviceName:e.serviceName},...e.imageTag!==void 0&&{imageTag:e.imageTag},...e.imageDigest!==void 0&&{imageDigest:e.imageDigest},...e.imageUri!==void 0&&{imageUri:e.imageUri},...e.ecrRepositoryArn!==void 0&&{ecrRepositoryArn:e.ecrRepositoryArn},...e.durationMs!==void 0&&{durationMs:e.durationMs},...e.error!==void 0&&{error:t(e.error,d)}};return s(r)},taskDefRegistered(e){const r={...n(),progressKind:"taskdef.registered",...e};return s(r)},ecsUpdate(e){const r={...n(),progressKind:"ecs.update",...e};return s(r)},ecsProgress(e){const r={...n(),progressKind:"ecs.progress",message:t(e.message,l),...e.percentage!==void 0&&{percentage:e.percentage}};return s(r)},ecsCompleted(e){const r={...n(),progressKind:"ecs.completed",serviceName:e.serviceName,serviceArn:e.serviceArn,success:e.success,taskDefinitionArn:e.taskDefinitionArn,durationMs:e.durationMs,...e.reason!==void 0&&{reason:t(e.reason,g)},...e.finalRunningCount!==void 0&&{finalRunningCount:e.finalRunningCount},...e.finalDesiredCount!==void 0&&{finalDesiredCount:e.finalDesiredCount}};return s(r)},migrationsStarted(e){const r={...n(),progressKind:"migrations.started",...e};return s(r)},migrationsCompleted(e){const r={...n(),progressKind:"migrations.completed",family:e.family,taskDefinitionArn:e.taskDefinitionArn,success:e.success,durationMs:e.durationMs,...e.exitCode!==void 0&&{exitCode:e.exitCode},...e.reason!==void 0&&{reason:t(e.reason,g)}};return s(r)},cdkBootstrap(e){const r={...n(),progressKind:"cdk.bootstrap",...e};return s(r)},cdkOutput(e){const r={...n(),progressKind:"cdk.output",outputType:e.outputType,output:t(e.output,m)};return s(r)},detectionCompleted(e){const r={...n(),progressKind:"detection.completed",...e};return s(r)},detectionPhase(e){const r={...n(),progressKind:"detection.phase",...e};return s(r)},cascadeStarted(){const e={...n(),progressKind:"cascade.started"};return s(e)},cascadeAccountsReconciled(e){const r={...n(),progressKind:"cascade.accountsReconciled",...e};return s(r)},cascadeOrgChanges(e){const r={...n(),progressKind:"cascade.orgChanges",...e};return s(r)},cascadeMissingAccounts(e){const r={...n(),progressKind:"cascade.missingAccounts",...e};return s(r)},cascadePhase(e){const r={...n(),progressKind:"cascade.phase",...e};return s(r)},cascadeAccountStarted(e){const r={...n(),progressKind:"cascade.account.started",...e};return s(r)},cascadeAccountPhase(e){const r={...n(),progressKind:"cascade.account.phase",...e};return s(r)},cascadeAccountCompleted(e){const r={...n(),progressKind:"cascade.account.completed",operationKey:e.operationKey,success:e.success,...e.error!==void 0&&{error:t(e.error,d)},...e.region!==void 0&&{region:e.region},...e.outputs!==void 0&&{outputs:A(e.outputs)},...e.skipped!==void 0&&{skipped:e.skipped}};return s(r)},cascadeCompleted(e){const r={...n(),progressKind:"cascade.completed",result:{platformDeployed:e.result.platformDeployed,platformSkipped:e.result.platformSkipped,platformFailed:e.result.platformFailed,domainsDeployed:e.result.domainsDeployed,accountsDeployed:e.result.accountsDeployed,accountsSkipped:e.result.accountsSkipped,accountsFailed:e.result.accountsFailed,errors:e.result.errors.map(a=>({accountId:a.accountId,error:t(a.error,d)}))}};return s(r)},cascadeLedger(e){const{ledger:r}=e,a={...n(),progressKind:"cascade.ledger",ledger:{members:r.members.map(o=>({accountId:o.accountId,accountName:o.accountName,region:o.region,result:o.result,durationMs:o.durationMs,...o.error!==void 0&&{error:t(o.error,d)}})),...r.platform!==void 0&&{platform:{accountId:r.platform.accountId,result:r.platform.result,durationMs:r.platform.durationMs,...r.platform.error!==void 0&&{error:t(r.platform.error,d)}}},domainsDeployed:r.domainsDeployed,errors:r.errors.map(o=>({accountId:o.accountId,error:t(o.error,d)})),totalDurationMs:r.totalDurationMs}};return s(a)},trailPhase(e){const r={...n(),progressKind:"trail.phase",accountId:e.accountId,accountName:e.accountName,phase:e.phase,status:e.status,...e.detail!==void 0&&{detail:t(e.detail,K)}};return s(r)},trailLifecycle(e){const r={...n(),progressKind:"trail.lifecycle",accountId:e.accountId,to:e.to,...e.from!==void 0&&{from:e.from}};return s(r)},cleanupProgress(e){const r={...n(),progressKind:"cleanup.progress",stackName:e.stackName,phase:e.phase,...e.detail!==void 0&&{detail:e.detail}};return s(r)},authSsoUrl(e){const r={...n(),progressKind:"auth.ssoUrl",url:e.url===null?null:t(e.url,h)};return s(r)},authCompleted(e){const r={...n(),progressKind:"auth.completed",...e};return s(r)},error(e){const r={...n(),progressKind:"error",message:t(e.message,d),...e.name!==void 0&&{name:e.name}};return s(r)},deployCompleted(e){const r={...n(),progressKind:"deploy.completed",result:e.result,ok:e.ok,...e.errorType!==void 0&&{errorType:e.errorType},message:t(e.message,l)};return s(r)},planAvailable(e){const r={...n(),progressKind:"plan.available",plan:{summary:t(e.plan.summary,l),changeCount:e.plan.changeCount,hasDestructiveChanges:e.plan.hasDestructiveChanges,...e.plan.changes!==void 0&&{changes:e.plan.changes},...e.plan.diffRef!==void 0&&{diffRef:e.plan.diffRef},...e.plan.iamBroadening!==void 0&&{iamBroadening:e.plan.iamBroadening},...e.plan.securityGroupBroadening!==void 0&&{securityGroupBroadening:e.plan.securityGroupBroadening},...e.plan.changeCountsByAction!==void 0&&{changeCountsByAction:e.plan.changeCountsByAction}}};return s(r)},approvalAwaiting(e){const r={...n(),progressKind:"approval.awaiting",approval:{token:e.approval.token,kind:e.approval.kind,reason:t(e.approval.reason,l),expiresAt:e.approval.expiresAt,...e.approval.assemblyDigest!==void 0&&{assemblyDigest:e.approval.assemblyDigest},...e.approval.changeCounts!==void 0&&{changeCounts:e.approval.changeCounts},...e.approval.approvalClass!==void 0&&{approvalClass:e.approval.approvalClass},...e.approval.requiredApprovers!==void 0&&{requiredApprovers:e.approval.requiredApprovers}}};return s(r)},approvalResolved(e){const r={...n(),progressKind:"approval.resolved",...e};return s(r)}}}export{D as createDeployEmitter};
+var y=Object.defineProperty;var l=(a,d)=>y(a,"name",{value:d,configurable:!0});import{maskSensitiveOutput as K}from"@fjall/util";import{DEPLOY_EVENT_CONTRACT as h,DEPLOY_EVENT_ERROR_MESSAGE_MAX as c,DEPLOY_EVENT_MESSAGE_MAX as g,DEPLOY_EVENT_OUTPUT_MAX as f,DEPLOY_EVENT_STATUS_REASON_MAX as p,DEPLOY_EVENT_TRAIL_DETAIL_MAX as A,DEPLOY_EVENT_URL_MAX as k}from"./deployEvent.js";function t(a,d){const u=K(a);return u.length>d?u.slice(0,d):u}l(t,"maskAndCap");function C(a){const d={};for(const[u,m]of Object.entries(a))d[u]=t(m,p);return d}l(C,"maskOutputValues");function N(a){const{deploymentId:d,onEvent:u}=a,m=a.now??(()=>new Date().toISOString());let v=a.startSeq??0;function n(){return{contract:h,deploymentId:d,seq:v++,time:m()}}l(n,"envelope");function s(e){return u(e),e}return l(s,"dispatch"),{stepStarted(e){const r={...n(),progressKind:"step.started",...e};return s(r)},stepCompleted(e){const r={...n(),progressKind:"step.completed",step:e.step,status:e.status,...e.progress!==void 0&&{progress:e.progress},...e.errorMessage!==void 0&&{errorMessage:t(e.errorMessage,c)}};return s(r)},log(e){const r={...n(),progressKind:"log",level:e.level,message:t(e.message,g)};return s(r)},output(e){const r={...n(),progressKind:"output",chunk:t(e.chunk,f)};return s(r)},resource(e){const r={...n(),progressKind:"resource",resource:{...e.resource,...e.resource.statusReason!==void 0&&{statusReason:t(e.resource.statusReason,p)}},...e.scope!==void 0&&{scope:e.scope}};return s(r)},parallelPhase(e){const r={...n(),progressKind:"phase.parallel",status:e.status,stacks:e.stacks,...e.description!==void 0&&{description:e.description},...e.results!==void 0&&{results:e.results.map(i=>({stack:i.stack,success:i.success,...i.error!==void 0&&{error:t(i.error,c)}}))}};return s(r)},buildStarted(e){const r={...n(),progressKind:"build.started",...e};return s(r)},buildProgress(e){const r={...n(),progressKind:"build.progress",builder:e.builder,message:t(e.message,g),...e.serviceName!==void 0&&{serviceName:e.serviceName},...e.percentage!==void 0&&{percentage:e.percentage},...e.layerId!==void 0&&{layerId:e.layerId},...e.status!==void 0&&{status:e.status}};return s(r)},buildCompleted(e){const r={...n(),progressKind:"build.completed",builder:e.builder,success:e.success,...e.serviceName!==void 0&&{serviceName:e.serviceName},...e.imageTag!==void 0&&{imageTag:e.imageTag},...e.imageDigest!==void 0&&{imageDigest:e.imageDigest},...e.imageUri!==void 0&&{imageUri:e.imageUri},...e.ecrRepositoryArn!==void 0&&{ecrRepositoryArn:e.ecrRepositoryArn},...e.durationMs!==void 0&&{durationMs:e.durationMs},...e.error!==void 0&&{error:t(e.error,c)}};return s(r)},taskDefRegistered(e){const r={...n(),progressKind:"taskdef.registered",...e};return s(r)},ecsUpdate(e){const r={...n(),progressKind:"ecs.update",...e};return s(r)},ecsProgress(e){const r={...n(),progressKind:"ecs.progress",message:t(e.message,g),...e.percentage!==void 0&&{percentage:e.percentage}};return s(r)},ecsCompleted(e){const r={...n(),progressKind:"ecs.completed",serviceName:e.serviceName,serviceArn:e.serviceArn,success:e.success,taskDefinitionArn:e.taskDefinitionArn,durationMs:e.durationMs,...e.reason!==void 0&&{reason:t(e.reason,p)},...e.finalRunningCount!==void 0&&{finalRunningCount:e.finalRunningCount},...e.finalDesiredCount!==void 0&&{finalDesiredCount:e.finalDesiredCount}};return s(r)},migrationsStarted(e){const r={...n(),progressKind:"migrations.started",...e};return s(r)},migrationsCompleted(e){const r={...n(),progressKind:"migrations.completed",family:e.family,taskDefinitionArn:e.taskDefinitionArn,success:e.success,durationMs:e.durationMs,...e.exitCode!==void 0&&{exitCode:e.exitCode},...e.reason!==void 0&&{reason:t(e.reason,p)}};return s(r)},cdkBootstrap(e){const r={...n(),progressKind:"cdk.bootstrap",...e};return s(r)},cdkOutput(e){const r={...n(),progressKind:"cdk.output",outputType:e.outputType,output:t(e.output,f)};return s(r)},detectionCompleted(e){const r={...n(),progressKind:"detection.completed",...e};return s(r)},detectionPhase(e){const r={...n(),progressKind:"detection.phase",...e};return s(r)},cascadeStarted(){const e={...n(),progressKind:"cascade.started"};return s(e)},cascadeAccountsReconciled(e){const r={...n(),progressKind:"cascade.accountsReconciled",...e};return s(r)},cascadeOrgChanges(e){const r={...n(),progressKind:"cascade.orgChanges",...e};return s(r)},cascadeMissingAccounts(e){const r={...n(),progressKind:"cascade.missingAccounts",...e};return s(r)},cascadePhase(e){const r={...n(),progressKind:"cascade.phase",...e};return s(r)},cascadeAccountStarted(e){const r={...n(),progressKind:"cascade.account.started",...e};return s(r)},cascadeAccountPhase(e){const r={...n(),progressKind:"cascade.account.phase",...e};return s(r)},cascadeAccountCompleted(e){const r={...n(),progressKind:"cascade.account.completed",operationKey:e.operationKey,success:e.success,...e.error!==void 0&&{error:t(e.error,c)},...e.region!==void 0&&{region:e.region},...e.outputs!==void 0&&{outputs:C(e.outputs)},...e.skipped!==void 0&&{skipped:e.skipped}};return s(r)},cascadeCompleted(e){const r={...n(),progressKind:"cascade.completed",result:{platformDeployed:e.result.platformDeployed,platformSkipped:e.result.platformSkipped,platformFailed:e.result.platformFailed,domainsDeployed:e.result.domainsDeployed,accountsDeployed:e.result.accountsDeployed,accountsSkipped:e.result.accountsSkipped,accountsFailed:e.result.accountsFailed,errors:e.result.errors.map(i=>({accountId:i.accountId,error:t(i.error,c)}))}};return s(r)},cascadeLedger(e){const{ledger:r}=e,i={...n(),progressKind:"cascade.ledger",ledger:{members:r.members.map(o=>({accountId:o.accountId,accountName:o.accountName,region:o.region,result:o.result,durationMs:o.durationMs,...o.error!==void 0&&{error:t(o.error,c)}})),...r.platform!==void 0&&{platform:{accountId:r.platform.accountId,result:r.platform.result,durationMs:r.platform.durationMs,...r.platform.error!==void 0&&{error:t(r.platform.error,c)}}},domainsDeployed:r.domainsDeployed,errors:r.errors.map(o=>({accountId:o.accountId,error:t(o.error,c)})),totalDurationMs:r.totalDurationMs}};return s(i)},trailPhase(e){const r={...n(),progressKind:"trail.phase",accountId:e.accountId,accountName:e.accountName,phase:e.phase,status:e.status,...e.detail!==void 0&&{detail:t(e.detail,A)}};return s(r)},trailLifecycle(e){const r={...n(),progressKind:"trail.lifecycle",accountId:e.accountId,to:e.to,...e.from!==void 0&&{from:e.from}};return s(r)},cleanupProgress(e){const r={...n(),progressKind:"cleanup.progress",stackName:e.stackName,phase:e.phase,...e.detail!==void 0&&{detail:e.detail}};return s(r)},authSsoUrl(e){const r={...n(),progressKind:"auth.ssoUrl",url:e.url===null?null:t(e.url,k)};return s(r)},authCompleted(e){const r={...n(),progressKind:"auth.completed",...e};return s(r)},error(e){const r={...n(),progressKind:"error",message:t(e.message,c),...e.name!==void 0&&{name:e.name}};return s(r)},deployCompleted(e){const r={...n(),progressKind:"deploy.completed",result:e.result,ok:e.ok,...e.errorType!==void 0&&{errorType:e.errorType},message:t(e.message,g)};return s(r)},planAvailable(e){const r={...n(),progressKind:"plan.available",plan:{summary:t(e.plan.summary,g),changeCount:e.plan.changeCount,hasDestructiveChanges:e.plan.hasDestructiveChanges,...e.plan.changes!==void 0&&{changes:e.plan.changes},...e.plan.diffRef!==void 0&&{diffRef:e.plan.diffRef},...e.plan.iamBroadening!==void 0&&{iamBroadening:e.plan.iamBroadening},...e.plan.securityGroupBroadening!==void 0&&{securityGroupBroadening:e.plan.securityGroupBroadening},...e.plan.changeCountsByAction!==void 0&&{changeCountsByAction:e.plan.changeCountsByAction}}};return s(r)},approvalAwaiting(e){const r={...n(),progressKind:"approval.awaiting",approval:{token:e.approval.token,kind:e.approval.kind,reason:t(e.approval.reason,g),expiresAt:e.approval.expiresAt,...e.approval.assemblyDigest!==void 0&&{assemblyDigest:e.approval.assemblyDigest},...e.approval.changeCounts!==void 0&&{changeCounts:e.approval.changeCounts},...e.approval.approvalClass!==void 0&&{approvalClass:e.approval.approvalClass},...e.approval.requiredApprovers!==void 0&&{requiredApprovers:e.approval.requiredApprovers}}};return s(r)},approvalResolved(e){const r={...n(),progressKind:"approval.resolved",...e};return s(r)}}}l(N,"createDeployEmitter");export{N as createDeployEmitter};

package/dist/src/types/deployEvent.d.ts

@@ -493,6 +493,7 @@ export declare const DeployEventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
             hasStorage: z.ZodBoolean;
             hasMessaging: z.ZodBoolean;
             hasCdn: z.ZodBoolean;
+            hasUsEast1Certificates: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strict>;
         requiredSecrets: z.ZodOptional<z.ZodArray<z.ZodString>>;
     }, z.core.$strict>;

package/dist/src/types/deployEvent.js

@@ -1 +1 @@
-import{z as e}from"zod";import{CASCADE_PHASES as h,DEPLOYMENT_EVENT_RESOURCE_CATEGORIES as E}from"./deploymentEventSchema.js";import{TRAIL_MIGRATION_PHASES as A,TRAIL_MIGRATION_STATUSES as C}from"./events.js";import{TRAIL_LIFECYCLE_STATES as p}from"@fjall/util/config";const Ue="fjall.deploy/1.1",Ve=1,Ye=1,_=["fjall.deploy/1.0","fjall.deploy/1.1"],a=256,o=256,s=2048,i=2048,n=4096,j=2048,m=8192,r=2048,g=4096,T=["completed","skipped","error","cancelled"],y=["info","debug","warn"],D=["emptying-bucket","deleting-stack","waiting","complete","error","quarantine-suspected","retained-buckets"],v=["bootstrap","synth","deploy","destroy"],P=["success","failure","cancelled","no-changes","rejected"],R=["detect","synth","hash","validate"],c=["started","completed"],l=["docker","buildpush","opennext","staticsite"],d=["succeeded","skipped","failed"],N=["create","update","replace","delete","read","no-op"],K=["will","may","conditional","none"],O=["destructive","cost","policy"],f=["approved","rejected","expired","superseded"],u=e.object({create:e.number().int().nonnegative(),update:e.number().int().nonnegative(),replace:e.number().int().nonnegative(),delete:e.number().int().nonnegative(),read:e.number().int().nonnegative(),"no-op":e.number().int().nonnegative()}).strict(),L={create:!0,update:!0,replace:!0,delete:!0,read:!0,"no-op":!0},t={contract:e.enum(_),deploymentId:e.string().min(1).max(a),seq:e.number().int().nonnegative(),time:e.string().datetime()},x=e.object({index:e.number().int().nonnegative(),total:e.number().int().positive()}).strict(),b=e.object({id:e.string().max(a),name:e.string().max(o)}).strict(),k=e.object({logicalId:e.string().max(a),resourceType:e.string().max(a),status:e.string().max(64),displayName:e.string().max(o).optional(),category:e.enum(E).optional(),group:e.string().max(128).optional(),constructPath:e.string().max(512).optional(),statusReason:e.string().max(i).optional(),physicalId:e.string().max(r).optional(),expectedDurationSeconds:e.number().nonnegative().optional()}).strict(),M=e.object({pattern:e.string().max(128).nullable(),hasDockerfile:e.boolean(),hasDifferences:e.boolean(),resources:e.object({hasNetwork:e.boolean(),hasCompute:e.boolean(),hasDatabase:e.boolean(),hasStorage:e.boolean(),hasMessaging:e.boolean(),hasCdn:e.boolean()}).strict(),requiredSecrets:e.array(e.string().max(512)).max(100).optional()}).strict(),I=e.object({path:e.string().max(512),forcesReplacement:e.boolean()}).strict(),U=e.object({address:e.string().max(512),resourceType:e.string().max(a),action:e.enum(N),stack:e.string().max(a).optional(),replacementMode:e.enum(K).optional(),dataLoss:e.boolean().optional(),propertyChanges:e.array(I).max(100).optional()}).strict(),S=e.object({accountId:e.string().max(a),error:e.string().max(n)}).strict(),V=e.object({platformDeployed:e.boolean(),platformSkipped:e.boolean(),platformFailed:e.boolean(),domainsDeployed:e.boolean(),accountsDeployed:e.number().int().nonnegative(),accountsSkipped:e.number().int().nonnegative(),accountsFailed:e.number().int().nonnegative(),errors:e.array(S).max(1e3)}).strict(),Y=e.object({accountId:e.string().max(a),accountName:e.string().max(o),region:e.string().max(a),result:e.enum(d),durationMs:e.number().nonnegative(),error:e.string().max(n).optional()}).strict(),B=e.object({accountId:e.string().max(a),result:e.enum(d),durationMs:e.number().nonnegative(),error:e.string().max(n).optional()}).strict(),G=e.object({members:e.array(Y).max(1e3),platform:B.optional(),domainsDeployed:e.boolean(),errors:e.array(S).max(1e3),totalDurationMs:e.number().nonnegative()}).strict(),X=e.object({bucketName:e.string().max(o),accountId:e.string().max(a).optional()}).strict(),w=e.object({retainedBuckets:e.array(e.string().max(o)).max(1e3),message:e.string().max(s)}).strict(),H=e.union([X,w]),q=e.object({stack:e.string().max(a),success:e.boolean(),error:e.string().max(n).optional()}).strict(),F=e.object({accountId:e.string().max(a),region:e.string().max(a),profileName:e.string().max(o).optional()}).strict(),z=e.object({...t,progressKind:e.literal("step.started"),step:b,progress:x.optional()}).strict(),J=e.object({...t,progressKind:e.literal("step.completed"),step:b,status:e.enum(T),progress:x.optional(),errorMessage:e.string().max(n).optional()}).strict(),Q=e.object({...t,progressKind:e.literal("log"),level:e.enum(y),message:e.string().max(s)}).strict(),W=e.object({...t,progressKind:e.literal("output"),chunk:e.string().max(m)}).strict(),Z=e.object({...t,progressKind:e.literal("resource"),resource:k,scope:e.object({stack:e.string().max(a).optional(),operationKey:e.string().max(a).optional(),region:e.string().max(a).optional()}).strict().optional()}).strict(),$=e.object({...t,progressKind:e.literal("phase.parallel"),status:e.enum(c),stacks:e.array(e.string().max(a)).max(50),description:e.string().max(o).optional(),results:e.array(q).max(50).optional()}).strict(),ee=e.object({...t,progressKind:e.literal("build.started"),builder:e.enum(l),serviceName:e.string().max(o).optional(),imageTag:e.string().max(o).optional(),ecrRepositoryUri:e.string().max(r).optional()}).strict(),te=e.object({...t,progressKind:e.literal("build.progress"),builder:e.enum(l),message:e.string().max(s),serviceName:e.string().max(o).optional(),percentage:e.number().optional(),layerId:e.string().max(a).optional(),status:e.string().max(64).optional()}).strict(),ae=e.object({...t,progressKind:e.literal("build.completed"),builder:e.enum(l),success:e.boolean(),serviceName:e.string().max(o).optional(),imageTag:e.string().max(o).optional(),imageDigest:e.string().max(a).optional(),imageUri:e.string().max(g).optional(),ecrRepositoryArn:e.string().max(r).optional(),durationMs:e.number().nonnegative().optional(),error:e.string().max(n).optional()}).strict(),oe=e.object({...t,progressKind:e.literal("taskdef.registered"),serviceName:e.string().max(o),taskDefinitionArn:e.string().max(r),previousTaskDefinitionArn:e.string().max(r),revision:e.number().int().nonnegative(),family:e.string().max(o),imageDigest:e.string().max(a).optional()}).strict(),re=e.object({...t,progressKind:e.literal("ecs.update"),status:e.string().max(64),service:e.string().max(o).optional()}).strict(),se=e.object({...t,progressKind:e.literal("ecs.progress"),message:e.string().max(s),percentage:e.number().optional()}).strict(),ne=e.object({...t,progressKind:e.literal("ecs.completed"),serviceName:e.string().max(o),serviceArn:e.string().max(r),success:e.boolean(),taskDefinitionArn:e.string().max(r),durationMs:e.number().nonnegative(),reason:e.string().max(i).optional(),finalRunningCount:e.number().int().nonnegative().optional(),finalDesiredCount:e.number().int().nonnegative().optional()}).strict(),ie=e.object({...t,progressKind:e.literal("migrations.started"),family:e.string().max(o),taskDefinitionArn:e.string().max(r),imageDigest:e.string().max(a)}).strict(),ce=e.object({...t,progressKind:e.literal("migrations.completed"),family:e.string().max(o),taskDefinitionArn:e.string().max(r),success:e.boolean(),durationMs:e.number().nonnegative(),exitCode:e.number().int().optional(),reason:e.string().max(i).optional()}).strict(),le=e.object({...t,progressKind:e.literal("cdk.bootstrap"),status:e.string().max(s)}).strict(),pe=e.object({...t,progressKind:e.literal("cdk.output"),outputType:e.enum(["synth","diff"]),output:e.string().max(m)}).strict(),me=e.object({...t,progressKind:e.literal("detection.completed"),detection:M}).strict(),ge=e.object({...t,progressKind:e.literal("detection.phase"),phase:e.enum(R),status:e.enum(c)}).strict(),de=e.object({...t,progressKind:e.literal("cascade.started")}).strict(),ue=e.object({...t,progressKind:e.literal("cascade.accountsReconciled"),hasPlatformAccount:e.boolean(),hasMemberAccounts:e.boolean()}).strict(),xe=e.object({...t,progressKind:e.literal("cascade.orgChanges"),hasOrgChanges:e.boolean()}).strict(),be=e.object({...t,progressKind:e.literal("cascade.missingAccounts"),accountNames:e.array(e.string().max(o)).max(256)}).strict(),Se=e.object({...t,progressKind:e.literal("cascade.phase"),phase:e.enum(h),status:e.enum(c)}).strict(),he=e.object({...t,progressKind:e.literal("cascade.account.started"),operationKey:e.string().max(a),accountId:e.string().max(a),region:e.string().max(a),deployType:e.string().max(64).optional()}).strict(),Ee=e.object({...t,progressKind:e.literal("cascade.account.phase"),operationKey:e.string().max(a),phase:e.enum(v),region:e.string().max(a).optional()}).strict(),Ae=e.object({...t,progressKind:e.literal("cascade.account.completed"),operationKey:e.string().max(a),success:e.boolean(),error:e.string().max(n).optional(),region:e.string().max(a).optional(),outputs:e.record(e.string().max(o),e.string().max(i)).optional(),skipped:e.boolean().optional()}).strict(),Ce=e.object({...t,progressKind:e.literal("cascade.completed"),result:V}).strict(),_e=e.object({...t,progressKind:e.literal("cascade.ledger"),ledger:G}).strict(),je=e.object({...t,progressKind:e.literal("trail.phase"),accountId:e.string().max(a),accountName:e.string().max(o),phase:e.enum(A),status:e.enum(C),detail:e.string().max(j).optional()}).strict(),Te=e.object({...t,progressKind:e.literal("trail.lifecycle"),accountId:e.string().max(a),to:e.enum(p),from:e.enum(p).optional()}).strict(),ye=e.object({...t,progressKind:e.literal("cleanup.progress"),stackName:e.string().max(a),phase:e.enum(D),detail:H.optional()}).strict(),De=e.object({...t,progressKind:e.literal("auth.ssoUrl"),url:e.string().max(g).nullable()}).strict(),ve=e.object({...t,progressKind:e.literal("auth.completed"),result:F.nullable()}).strict(),Pe=e.object({...t,progressKind:e.literal("error"),message:e.string().max(n),name:e.string().max(o).optional()}).strict(),Re=e.object({...t,progressKind:e.literal("deploy.completed"),result:e.enum(P),ok:e.boolean(),errorType:e.string().max(128).optional(),message:e.string().max(s)}).strict(),Ne=e.object({...t,progressKind:e.literal("plan.available"),plan:e.object({summary:e.string().max(s),changeCount:e.number().int().nonnegative(),hasDestructiveChanges:e.boolean(),changes:e.array(U).max(1e3).optional(),diffRef:e.string().max(512).optional(),iamBroadening:e.boolean().optional(),securityGroupBroadening:e.boolean().optional(),changeCountsByAction:u.optional()}).strict()}).strict(),Ke=e.object({...t,progressKind:e.literal("approval.awaiting"),approval:e.object({token:e.string().max(512),kind:e.enum(O),reason:e.string().max(s),expiresAt:e.string().datetime(),assemblyDigest:e.string().max(128).optional(),changeCounts:u.optional(),approvalClass:e.string().max(64).optional(),requiredApprovers:e.array(e.string().max(256)).max(50).optional()}).strict()}).strict(),Oe=e.object({...t,progressKind:e.literal("approval.resolved"),approval:e.object({token:e.string().max(512),decision:e.enum(f),actor:e.string().max(o).optional()}).strict()}).strict(),Be=e.discriminatedUnion("progressKind",[z,J,Q,W,Z,$,ee,te,ae,oe,re,se,ne,ie,ce,le,pe,me,ge,de,ue,xe,be,Se,he,Ee,Ae,Ce,_e,je,Te,ye,De,ve,Pe,Re,Ne,Ke,Oe]),fe={"step.started":!0,"step.completed":!0,log:!0,output:!0,resource:!0,"phase.parallel":!0,"build.started":!0,"build.progress":!0,"build.completed":!0,"taskdef.registered":!0,"ecs.update":!0,"ecs.progress":!0,"ecs.completed":!0,"migrations.started":!0,"migrations.completed":!0,"cdk.bootstrap":!0,"cdk.output":!0,"detection.completed":!0,"detection.phase":!0,"cascade.started":!0,"cascade.accountsReconciled":!0,"cascade.orgChanges":!0,"cascade.missingAccounts":!0,"cascade.phase":!0,"cascade.account.started":!0,"cascade.account.phase":!0,"cascade.account.completed":!0,"cascade.completed":!0,"cascade.ledger":!0,"trail.phase":!0,"trail.lifecycle":!0,"cleanup.progress":!0,"auth.ssoUrl":!0,"auth.completed":!0,error:!0,"deploy.completed":!0,"plan.available":!0,"approval.awaiting":!0,"approval.resolved":!0},Ge=Object.keys(fe);export{Ge as ALL_PROGRESS_KINDS,f as APPROVAL_DECISIONS,O as APPROVAL_KINDS,l as BUILDERS,v as CASCADE_ACCOUNT_PHASES,d as CASCADE_OUTCOME_RESULTS,u as ChangeCountsSchema,r as DEPLOY_EVENT_ARN_MAX,Ue as DEPLOY_EVENT_CONTRACT,Ve as DEPLOY_EVENT_CONTRACT_MAJOR,Ye as DEPLOY_EVENT_CONTRACT_MINOR,n as DEPLOY_EVENT_ERROR_MESSAGE_MAX,a as DEPLOY_EVENT_ID_MAX,s as DEPLOY_EVENT_MESSAGE_MAX,o as DEPLOY_EVENT_NAME_MAX,m as DEPLOY_EVENT_OUTPUT_MAX,i as DEPLOY_EVENT_STATUS_REASON_MAX,j as DEPLOY_EVENT_TRAIL_DETAIL_MAX,g as DEPLOY_EVENT_URL_MAX,P as DEPLOY_RESULTS,R as DETECTION_PHASES,Be as DeployEventSchema,k as DeployResourceSchema,y as LOG_LEVELS,c as PHASE_STATUSES,N as PLAN_ACTIONS,U as PlanChangeSchema,I as PlanPropertyChangeSchema,K as REPLACEMENT_MODES,D as STACK_CLEANUP_PHASES,T as STEP_COMPLETE_STATUSES,_ as SUPPORTED_CONTRACT_MARKERS,x as StepProgressSchema};
+import{z as e}from"zod";import{CASCADE_PHASES as h,DEPLOYMENT_EVENT_RESOURCE_CATEGORIES as E}from"./deploymentEventSchema.js";import{TRAIL_MIGRATION_PHASES as A,TRAIL_MIGRATION_STATUSES as C}from"./events.js";import{TRAIL_LIFECYCLE_STATES as p}from"@fjall/util/config";const Ue="fjall.deploy/1.1",Ve=1,Ye=1,_=["fjall.deploy/1.0","fjall.deploy/1.1"],a=256,o=256,s=2048,i=2048,n=4096,j=2048,m=8192,r=2048,g=4096,T=["completed","skipped","error","cancelled"],y=["info","debug","warn"],D=["emptying-bucket","deleting-stack","waiting","complete","error","quarantine-suspected","retained-buckets"],v=["bootstrap","synth","deploy","destroy"],P=["success","failure","cancelled","no-changes","rejected"],R=["detect","synth","hash","validate"],c=["started","completed"],l=["docker","buildpush","opennext","staticsite"],d=["succeeded","skipped","failed"],N=["create","update","replace","delete","read","no-op"],K=["will","may","conditional","none"],O=["destructive","cost","policy"],f=["approved","rejected","expired","superseded"],u=e.object({create:e.number().int().nonnegative(),update:e.number().int().nonnegative(),replace:e.number().int().nonnegative(),delete:e.number().int().nonnegative(),read:e.number().int().nonnegative(),"no-op":e.number().int().nonnegative()}).strict(),L={create:!0,update:!0,replace:!0,delete:!0,read:!0,"no-op":!0},t={contract:e.enum(_),deploymentId:e.string().min(1).max(a),seq:e.number().int().nonnegative(),time:e.string().datetime()},x=e.object({index:e.number().int().nonnegative(),total:e.number().int().positive()}).strict(),b=e.object({id:e.string().max(a),name:e.string().max(o)}).strict(),k=e.object({logicalId:e.string().max(a),resourceType:e.string().max(a),status:e.string().max(64),displayName:e.string().max(o).optional(),category:e.enum(E).optional(),group:e.string().max(128).optional(),constructPath:e.string().max(512).optional(),statusReason:e.string().max(i).optional(),physicalId:e.string().max(r).optional(),expectedDurationSeconds:e.number().nonnegative().optional()}).strict(),M=e.object({pattern:e.string().max(128).nullable(),hasDockerfile:e.boolean(),hasDifferences:e.boolean(),resources:e.object({hasNetwork:e.boolean(),hasCompute:e.boolean(),hasDatabase:e.boolean(),hasStorage:e.boolean(),hasMessaging:e.boolean(),hasCdn:e.boolean(),hasUsEast1Certificates:e.boolean().optional()}).strict(),requiredSecrets:e.array(e.string().max(512)).max(100).optional()}).strict(),I=e.object({path:e.string().max(512),forcesReplacement:e.boolean()}).strict(),U=e.object({address:e.string().max(512),resourceType:e.string().max(a),action:e.enum(N),stack:e.string().max(a).optional(),replacementMode:e.enum(K).optional(),dataLoss:e.boolean().optional(),propertyChanges:e.array(I).max(100).optional()}).strict(),S=e.object({accountId:e.string().max(a),error:e.string().max(n)}).strict(),V=e.object({platformDeployed:e.boolean(),platformSkipped:e.boolean(),platformFailed:e.boolean(),domainsDeployed:e.boolean(),accountsDeployed:e.number().int().nonnegative(),accountsSkipped:e.number().int().nonnegative(),accountsFailed:e.number().int().nonnegative(),errors:e.array(S).max(1e3)}).strict(),Y=e.object({accountId:e.string().max(a),accountName:e.string().max(o),region:e.string().max(a),result:e.enum(d),durationMs:e.number().nonnegative(),error:e.string().max(n).optional()}).strict(),B=e.object({accountId:e.string().max(a),result:e.enum(d),durationMs:e.number().nonnegative(),error:e.string().max(n).optional()}).strict(),G=e.object({members:e.array(Y).max(1e3),platform:B.optional(),domainsDeployed:e.boolean(),errors:e.array(S).max(1e3),totalDurationMs:e.number().nonnegative()}).strict(),X=e.object({bucketName:e.string().max(o),accountId:e.string().max(a).optional()}).strict(),w=e.object({retainedBuckets:e.array(e.string().max(o)).max(1e3),message:e.string().max(s)}).strict(),H=e.union([X,w]),q=e.object({stack:e.string().max(a),success:e.boolean(),error:e.string().max(n).optional()}).strict(),F=e.object({accountId:e.string().max(a),region:e.string().max(a),profileName:e.string().max(o).optional()}).strict(),z=e.object({...t,progressKind:e.literal("step.started"),step:b,progress:x.optional()}).strict(),J=e.object({...t,progressKind:e.literal("step.completed"),step:b,status:e.enum(T),progress:x.optional(),errorMessage:e.string().max(n).optional()}).strict(),Q=e.object({...t,progressKind:e.literal("log"),level:e.enum(y),message:e.string().max(s)}).strict(),W=e.object({...t,progressKind:e.literal("output"),chunk:e.string().max(m)}).strict(),Z=e.object({...t,progressKind:e.literal("resource"),resource:k,scope:e.object({stack:e.string().max(a).optional(),operationKey:e.string().max(a).optional(),region:e.string().max(a).optional()}).strict().optional()}).strict(),$=e.object({...t,progressKind:e.literal("phase.parallel"),status:e.enum(c),stacks:e.array(e.string().max(a)).max(50),description:e.string().max(o).optional(),results:e.array(q).max(50).optional()}).strict(),ee=e.object({...t,progressKind:e.literal("build.started"),builder:e.enum(l),serviceName:e.string().max(o).optional(),imageTag:e.string().max(o).optional(),ecrRepositoryUri:e.string().max(r).optional()}).strict(),te=e.object({...t,progressKind:e.literal("build.progress"),builder:e.enum(l),message:e.string().max(s),serviceName:e.string().max(o).optional(),percentage:e.number().optional(),layerId:e.string().max(a).optional(),status:e.string().max(64).optional()}).strict(),ae=e.object({...t,progressKind:e.literal("build.completed"),builder:e.enum(l),success:e.boolean(),serviceName:e.string().max(o).optional(),imageTag:e.string().max(o).optional(),imageDigest:e.string().max(a).optional(),imageUri:e.string().max(g).optional(),ecrRepositoryArn:e.string().max(r).optional(),durationMs:e.number().nonnegative().optional(),error:e.string().max(n).optional()}).strict(),oe=e.object({...t,progressKind:e.literal("taskdef.registered"),serviceName:e.string().max(o),taskDefinitionArn:e.string().max(r),previousTaskDefinitionArn:e.string().max(r),revision:e.number().int().nonnegative(),family:e.string().max(o),imageDigest:e.string().max(a).optional()}).strict(),re=e.object({...t,progressKind:e.literal("ecs.update"),status:e.string().max(64),service:e.string().max(o).optional()}).strict(),se=e.object({...t,progressKind:e.literal("ecs.progress"),message:e.string().max(s),percentage:e.number().optional()}).strict(),ne=e.object({...t,progressKind:e.literal("ecs.completed"),serviceName:e.string().max(o),serviceArn:e.string().max(r),success:e.boolean(),taskDefinitionArn:e.string().max(r),durationMs:e.number().nonnegative(),reason:e.string().max(i).optional(),finalRunningCount:e.number().int().nonnegative().optional(),finalDesiredCount:e.number().int().nonnegative().optional()}).strict(),ie=e.object({...t,progressKind:e.literal("migrations.started"),family:e.string().max(o),taskDefinitionArn:e.string().max(r),imageDigest:e.string().max(a)}).strict(),ce=e.object({...t,progressKind:e.literal("migrations.completed"),family:e.string().max(o),taskDefinitionArn:e.string().max(r),success:e.boolean(),durationMs:e.number().nonnegative(),exitCode:e.number().int().optional(),reason:e.string().max(i).optional()}).strict(),le=e.object({...t,progressKind:e.literal("cdk.bootstrap"),status:e.string().max(s)}).strict(),pe=e.object({...t,progressKind:e.literal("cdk.output"),outputType:e.enum(["synth","diff"]),output:e.string().max(m)}).strict(),me=e.object({...t,progressKind:e.literal("detection.completed"),detection:M}).strict(),ge=e.object({...t,progressKind:e.literal("detection.phase"),phase:e.enum(R),status:e.enum(c)}).strict(),de=e.object({...t,progressKind:e.literal("cascade.started")}).strict(),ue=e.object({...t,progressKind:e.literal("cascade.accountsReconciled"),hasPlatformAccount:e.boolean(),hasMemberAccounts:e.boolean()}).strict(),xe=e.object({...t,progressKind:e.literal("cascade.orgChanges"),hasOrgChanges:e.boolean()}).strict(),be=e.object({...t,progressKind:e.literal("cascade.missingAccounts"),accountNames:e.array(e.string().max(o)).max(256)}).strict(),Se=e.object({...t,progressKind:e.literal("cascade.phase"),phase:e.enum(h),status:e.enum(c)}).strict(),he=e.object({...t,progressKind:e.literal("cascade.account.started"),operationKey:e.string().max(a),accountId:e.string().max(a),region:e.string().max(a),deployType:e.string().max(64).optional()}).strict(),Ee=e.object({...t,progressKind:e.literal("cascade.account.phase"),operationKey:e.string().max(a),phase:e.enum(v),region:e.string().max(a).optional()}).strict(),Ae=e.object({...t,progressKind:e.literal("cascade.account.completed"),operationKey:e.string().max(a),success:e.boolean(),error:e.string().max(n).optional(),region:e.string().max(a).optional(),outputs:e.record(e.string().max(o),e.string().max(i)).optional(),skipped:e.boolean().optional()}).strict(),Ce=e.object({...t,progressKind:e.literal("cascade.completed"),result:V}).strict(),_e=e.object({...t,progressKind:e.literal("cascade.ledger"),ledger:G}).strict(),je=e.object({...t,progressKind:e.literal("trail.phase"),accountId:e.string().max(a),accountName:e.string().max(o),phase:e.enum(A),status:e.enum(C),detail:e.string().max(j).optional()}).strict(),Te=e.object({...t,progressKind:e.literal("trail.lifecycle"),accountId:e.string().max(a),to:e.enum(p),from:e.enum(p).optional()}).strict(),ye=e.object({...t,progressKind:e.literal("cleanup.progress"),stackName:e.string().max(a),phase:e.enum(D),detail:H.optional()}).strict(),De=e.object({...t,progressKind:e.literal("auth.ssoUrl"),url:e.string().max(g).nullable()}).strict(),ve=e.object({...t,progressKind:e.literal("auth.completed"),result:F.nullable()}).strict(),Pe=e.object({...t,progressKind:e.literal("error"),message:e.string().max(n),name:e.string().max(o).optional()}).strict(),Re=e.object({...t,progressKind:e.literal("deploy.completed"),result:e.enum(P),ok:e.boolean(),errorType:e.string().max(128).optional(),message:e.string().max(s)}).strict(),Ne=e.object({...t,progressKind:e.literal("plan.available"),plan:e.object({summary:e.string().max(s),changeCount:e.number().int().nonnegative(),hasDestructiveChanges:e.boolean(),changes:e.array(U).max(1e3).optional(),diffRef:e.string().max(512).optional(),iamBroadening:e.boolean().optional(),securityGroupBroadening:e.boolean().optional(),changeCountsByAction:u.optional()}).strict()}).strict(),Ke=e.object({...t,progressKind:e.literal("approval.awaiting"),approval:e.object({token:e.string().max(512),kind:e.enum(O),reason:e.string().max(s),expiresAt:e.string().datetime(),assemblyDigest:e.string().max(128).optional(),changeCounts:u.optional(),approvalClass:e.string().max(64).optional(),requiredApprovers:e.array(e.string().max(256)).max(50).optional()}).strict()}).strict(),Oe=e.object({...t,progressKind:e.literal("approval.resolved"),approval:e.object({token:e.string().max(512),decision:e.enum(f),actor:e.string().max(o).optional()}).strict()}).strict(),Be=e.discriminatedUnion("progressKind",[z,J,Q,W,Z,$,ee,te,ae,oe,re,se,ne,ie,ce,le,pe,me,ge,de,ue,xe,be,Se,he,Ee,Ae,Ce,_e,je,Te,ye,De,ve,Pe,Re,Ne,Ke,Oe]),fe={"step.started":!0,"step.completed":!0,log:!0,output:!0,resource:!0,"phase.parallel":!0,"build.started":!0,"build.progress":!0,"build.completed":!0,"taskdef.registered":!0,"ecs.update":!0,"ecs.progress":!0,"ecs.completed":!0,"migrations.started":!0,"migrations.completed":!0,"cdk.bootstrap":!0,"cdk.output":!0,"detection.completed":!0,"detection.phase":!0,"cascade.started":!0,"cascade.accountsReconciled":!0,"cascade.orgChanges":!0,"cascade.missingAccounts":!0,"cascade.phase":!0,"cascade.account.started":!0,"cascade.account.phase":!0,"cascade.account.completed":!0,"cascade.completed":!0,"cascade.ledger":!0,"trail.phase":!0,"trail.lifecycle":!0,"cleanup.progress":!0,"auth.ssoUrl":!0,"auth.completed":!0,error:!0,"deploy.completed":!0,"plan.available":!0,"approval.awaiting":!0,"approval.resolved":!0},Ge=Object.keys(fe);export{Ge as ALL_PROGRESS_KINDS,f as APPROVAL_DECISIONS,O as APPROVAL_KINDS,l as BUILDERS,v as CASCADE_ACCOUNT_PHASES,d as CASCADE_OUTCOME_RESULTS,u as ChangeCountsSchema,r as DEPLOY_EVENT_ARN_MAX,Ue as DEPLOY_EVENT_CONTRACT,Ve as DEPLOY_EVENT_CONTRACT_MAJOR,Ye as DEPLOY_EVENT_CONTRACT_MINOR,n as DEPLOY_EVENT_ERROR_MESSAGE_MAX,a as DEPLOY_EVENT_ID_MAX,s as DEPLOY_EVENT_MESSAGE_MAX,o as DEPLOY_EVENT_NAME_MAX,m as DEPLOY_EVENT_OUTPUT_MAX,i as DEPLOY_EVENT_STATUS_REASON_MAX,j as DEPLOY_EVENT_TRAIL_DETAIL_MAX,g as DEPLOY_EVENT_URL_MAX,P as DEPLOY_RESULTS,R as DETECTION_PHASES,Be as DeployEventSchema,k as DeployResourceSchema,y as LOG_LEVELS,c as PHASE_STATUSES,N as PLAN_ACTIONS,U as PlanChangeSchema,I as PlanPropertyChangeSchema,K as REPLACEMENT_MODES,D as STACK_CLEANUP_PHASES,T as STEP_COMPLETE_STATUSES,_ as SUPPORTED_CONTRACT_MARKERS,x as StepProgressSchema};

package/dist/src/types/deployEventParse.js

@@ -1 +1 @@
-import{ALL_PROGRESS_KINDS as a,DEPLOY_EVENT_CONTRACT_MAJOR as i,DEPLOY_EVENT_CONTRACT_MINOR as d,DeployEventSchema as f}from"./deployEvent.js";const l=/^fjall\.deploy\/(\d+)\.(\d+)$/,p=new Set(a);function m(n){const e=l.exec(n);if(e===null)return null;const t=e[1],o=e[2];if(t===void 0||o===void 0)return null;const r=parseInt(t,10),s=parseInt(o,10);return Number.isNaN(r)||Number.isNaN(s)?null:{major:r,minor:s}}function u(n,e){if(!(e in n))return;const t=n[e];return typeof t=="string"?t:void 0}function E(n){const e=f.safeParse(n);if(e.success)return{status:"ok",event:e.data};if(typeof n!="object"||n===null)return{status:"incompatible",reason:"Event is not an object",raw:n};const t=u(n,"contract");if(t===void 0)return{status:"incompatible",reason:"Missing or non-string contract marker",raw:n};const o=m(t);if(o===null)return{status:"incompatible",reason:`Unrecognised contract marker: ${t}`,raw:n};if(o.major!==i)return{status:"incompatible",reason:`Contract major ${o.major} unsupported (expected ${i})`,raw:n};const r=u(n,"progressKind"),s=o.minor>d,c=r===void 0||!p.has(r);return s||c?{status:"unknown",contract:t,...r!==void 0&&{progressKind:r},raw:n}:{status:"invalid",reason:e.error.message,...r!==void 0&&{progressKind:r},raw:n}}export{m as parseDeployContractVersion,E as parseDeployEvent};
+var d=Object.defineProperty;var i=(n,e)=>d(n,"name",{value:e,configurable:!0});import{ALL_PROGRESS_KINDS as f,DEPLOY_EVENT_CONTRACT_MAJOR as u,DEPLOY_EVENT_CONTRACT_MINOR as l,DeployEventSchema as p}from"./deployEvent.js";const m=/^fjall\.deploy\/(\d+)\.(\d+)$/,N=new Set(f);function E(n){const e=m.exec(n);if(e===null)return null;const t=e[1],o=e[2];if(t===void 0||o===void 0)return null;const r=parseInt(t,10),s=parseInt(o,10);return Number.isNaN(r)||Number.isNaN(s)?null:{major:r,minor:s}}i(E,"parseDeployContractVersion");function c(n,e){if(!(e in n))return;const t=n[e];return typeof t=="string"?t:void 0}i(c,"readStringField");function T(n){const e=p.safeParse(n);if(e.success)return{status:"ok",event:e.data};if(typeof n!="object"||n===null)return{status:"incompatible",reason:"Event is not an object",raw:n};const t=c(n,"contract");if(t===void 0)return{status:"incompatible",reason:"Missing or non-string contract marker",raw:n};const o=E(t);if(o===null)return{status:"incompatible",reason:`Unrecognised contract marker: ${t}`,raw:n};if(o.major!==u)return{status:"incompatible",reason:`Contract major ${o.major} unsupported (expected ${u})`,raw:n};const r=c(n,"progressKind"),s=o.minor>l,a=r===void 0||!N.has(r);return s||a?{status:"unknown",contract:t,...r!==void 0&&{progressKind:r},raw:n}:{status:"invalid",reason:e.error.message,...r!==void 0&&{progressKind:r},raw:n}}i(T,"parseDeployEvent");export{E as parseDeployContractVersion,T as parseDeployEvent};

package/dist/src/types/deployment/DeploymentServiceTypes.js

@@ -1 +1 @@
-function n(t){return{Account:t,Arn:"",UserId:""}}export{n as stubCallerIdentity};
+var e=Object.defineProperty;var n=(t,r)=>e(t,"name",{value:r,configurable:!0});function c(t){return{Account:t,Arn:"",UserId:""}}n(c,"stubCallerIdentity");export{c as stubCallerIdentity};

package/dist/src/types/deployment/DeploymentTypes.d.ts

@@ -28,6 +28,7 @@ export interface DeploymentContext {
     orgConfig?: string;
     fjallAdoptBackupVault?: boolean;
     resolvedSecretArns?: string;
+    managedDomainBindings?: Record<string, string>;
     options: {
         verbose?: boolean;
         infraOnly?: boolean;

package/dist/src/types/deploymentEventSchema.d.ts

@@ -155,6 +155,7 @@ export declare const DeploymentEventSchema: z.ZodObject<{
             hasStorage: z.ZodBoolean;
             hasMessaging: z.ZodBoolean;
             hasCdn: z.ZodBoolean;
+            hasUsEast1Certificates: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strict>;
         requiredSecrets: z.ZodOptional<z.ZodArray<z.ZodString>>;
     }, z.core.$strict>>;

package/dist/src/types/deploymentEventSchema.js

@@ -1 +1 @@
-import{z as e}from"zod";import{TRAIL_MIGRATION_PHASES as r,TRAIL_MIGRATION_STATUSES as i}from"./events.js";const c=["security","network","compute","database","storage","monitoring","dns","identity","bootstrap","events","registry","backup"],n=["platform","domains","accounts"],m=["started","deploying","completed","failed"],l=2048,p=4096,u=2048,g=["step","resource","docker","ecs","error","complete","cascade_phase","cascade_account","cascade_missing_accounts","parallel_phase","detection","trail_migration","log"],d={step:"step",resource:"resource",docker:"docker",ecs:"ecs",error:"error",complete:null,cascade_phase:"cascadePhase",cascade_account:"cascadeAccount",cascade_missing_accounts:"cascadeMissingAccounts",parallel_phase:"parallelPhase",detection:"detection",trail_migration:"trailMigration",log:"log"},_=e.object({type:e.enum(g),timestamp:e.string().max(64),sequence:e.number().int().nonnegative().optional(),step:e.object({id:e.string().max(256),name:e.string().max(256),index:e.number(),total:e.number(),status:e.string().max(64)}).strict().optional(),resource:e.object({logicalId:e.string().max(256),resourceType:e.string().max(256),category:e.enum(c),group:e.string().max(128).optional(),constructPath:e.string().max(512).optional(),displayName:e.string().max(256),status:e.string().max(64),statusReason:e.string().max(l).optional(),physicalId:e.string().max(2048).optional(),expectedDurationSeconds:e.number().optional(),stack:e.string().max(256).optional(),clientRequestToken:e.string().max(256).optional()}).strict().optional(),docker:e.object({message:e.string().max(2048),percentage:e.number().optional()}).strict().optional(),ecs:e.object({status:e.string().max(64),message:e.string().max(2048).optional(),percentage:e.number().optional()}).strict().optional(),error:e.object({message:e.string().max(p),category:e.string().max(128).optional(),remediation:e.array(e.string().max(1024)).max(10).optional()}).strict().optional(),message:e.string().max(2048).optional(),cascadePhase:e.object({phase:e.enum(n),status:e.enum(["started","completed"])}).strict().optional(),cascadeAccount:e.object({accountId:e.string().max(32),region:e.string().max(32),operationKey:e.string().max(256),status:e.enum(m),error:e.string().max(2048).optional(),phase:e.enum(["bootstrap","synth","deploy","destroy"]).optional(),cascadePhase:e.enum(n).optional()}).strict().optional(),cascadeMissingAccounts:e.object({accountNames:e.array(e.string().max(256)).max(256)}).strict().optional(),parallelPhase:e.object({stacks:e.array(e.string().max(256)).max(20),status:e.enum(["started","completed"]),results:e.array(e.object({stack:e.string().max(256),success:e.boolean(),error:e.string().max(2048).optional()}).strict()).max(20).optional()}).strict().optional(),detection:e.object({pattern:e.string().max(128).nullable(),hasDockerfile:e.boolean(),hasDifferences:e.boolean(),resources:e.object({hasNetwork:e.boolean(),hasCompute:e.boolean(),hasDatabase:e.boolean(),hasStorage:e.boolean(),hasMessaging:e.boolean(),hasCdn:e.boolean()}).strict(),requiredSecrets:e.array(e.string().max(512)).max(100).optional()}).strict().optional(),trailMigration:e.object({accountId:e.string().max(32),accountName:e.string().max(256),phase:e.enum(r),status:e.enum(i),detail:e.string().max(u).optional()}).strict().optional(),log:e.object({message:e.string().max(2048),level:e.enum(["info","debug","warn"])}).strict().optional()}).strict().superRefine((t,o)=>{const a=d[t.type],s=a?t[a]:void 0;a&&s==null&&o.addIssue({code:e.ZodIssueCode.custom,message:`"${a}" is required when type is "${t.type}"`,path:[a]}),t.type==="complete"&&!t.message&&o.addIssue({code:e.ZodIssueCode.custom,message:'"message" is required when type is "complete"',path:["message"]})});function b(t){if(t==="platform")return"platform";if(t==="account")return"accounts"}export{m as CASCADE_ACCOUNT_STATUSES,n as CASCADE_PHASES,p as DEPLOYMENT_EVENT_ERROR_MESSAGE_MAX,c as DEPLOYMENT_EVENT_RESOURCE_CATEGORIES,l as DEPLOYMENT_EVENT_STATUS_REASON_MAX,u as DEPLOYMENT_EVENT_TRAIL_DETAIL_MAX,g as DEPLOYMENT_EVENT_TYPES,_ as DeploymentEventSchema,b as toCascadePhase};
+var i=Object.defineProperty;var n=(t,o)=>i(t,"name",{value:o,configurable:!0});import{z as e}from"zod";import{TRAIL_MIGRATION_PHASES as c,TRAIL_MIGRATION_STATUSES as m}from"./events.js";const l=["security","network","compute","database","storage","monitoring","dns","identity","bootstrap","events","registry","backup"],r=["platform","domains","accounts"],p=["started","deploying","completed","failed"],u=2048,g=4096,d=2048,x=["step","resource","docker","ecs","error","complete","cascade_phase","cascade_account","cascade_missing_accounts","parallel_phase","detection","trail_migration","log"],E={step:"step",resource:"resource",docker:"docker",ecs:"ecs",error:"error",complete:null,cascade_phase:"cascadePhase",cascade_account:"cascadeAccount",cascade_missing_accounts:"cascadeMissingAccounts",parallel_phase:"parallelPhase",detection:"detection",trail_migration:"trailMigration",log:"log"},T=e.object({type:e.enum(x),timestamp:e.string().max(64),sequence:e.number().int().nonnegative().optional(),step:e.object({id:e.string().max(256),name:e.string().max(256),index:e.number(),total:e.number(),status:e.string().max(64)}).strict().optional(),resource:e.object({logicalId:e.string().max(256),resourceType:e.string().max(256),category:e.enum(l),group:e.string().max(128).optional(),constructPath:e.string().max(512).optional(),displayName:e.string().max(256),status:e.string().max(64),statusReason:e.string().max(u).optional(),physicalId:e.string().max(2048).optional(),expectedDurationSeconds:e.number().optional(),stack:e.string().max(256).optional(),clientRequestToken:e.string().max(256).optional()}).strict().optional(),docker:e.object({message:e.string().max(2048),percentage:e.number().optional()}).strict().optional(),ecs:e.object({status:e.string().max(64),message:e.string().max(2048).optional(),percentage:e.number().optional()}).strict().optional(),error:e.object({message:e.string().max(g),category:e.string().max(128).optional(),remediation:e.array(e.string().max(1024)).max(10).optional()}).strict().optional(),message:e.string().max(2048).optional(),cascadePhase:e.object({phase:e.enum(r),status:e.enum(["started","completed"])}).strict().optional(),cascadeAccount:e.object({accountId:e.string().max(32),region:e.string().max(32),operationKey:e.string().max(256),status:e.enum(p),error:e.string().max(2048).optional(),phase:e.enum(["bootstrap","synth","deploy","destroy"]).optional(),cascadePhase:e.enum(r).optional()}).strict().optional(),cascadeMissingAccounts:e.object({accountNames:e.array(e.string().max(256)).max(256)}).strict().optional(),parallelPhase:e.object({stacks:e.array(e.string().max(256)).max(20),status:e.enum(["started","completed"]),results:e.array(e.object({stack:e.string().max(256),success:e.boolean(),error:e.string().max(2048).optional()}).strict()).max(20).optional()}).strict().optional(),detection:e.object({pattern:e.string().max(128).nullable(),hasDockerfile:e.boolean(),hasDifferences:e.boolean(),resources:e.object({hasNetwork:e.boolean(),hasCompute:e.boolean(),hasDatabase:e.boolean(),hasStorage:e.boolean(),hasMessaging:e.boolean(),hasCdn:e.boolean(),hasUsEast1Certificates:e.boolean().optional()}).strict(),requiredSecrets:e.array(e.string().max(512)).max(100).optional()}).strict().optional(),trailMigration:e.object({accountId:e.string().max(32),accountName:e.string().max(256),phase:e.enum(c),status:e.enum(m),detail:e.string().max(d).optional()}).strict().optional(),log:e.object({message:e.string().max(2048),level:e.enum(["info","debug","warn"])}).strict().optional()}).strict().superRefine((t,o)=>{const a=E[t.type],s=a?t[a]:void 0;a&&s==null&&o.addIssue({code:e.ZodIssueCode.custom,message:`"${a}" is required when type is "${t.type}"`,path:[a]}),t.type==="complete"&&!t.message&&o.addIssue({code:e.ZodIssueCode.custom,message:'"message" is required when type is "complete"',path:["message"]})});function A(t){if(t==="platform")return"platform";if(t==="account")return"accounts"}n(A,"toCascadePhase");export{p as CASCADE_ACCOUNT_STATUSES,r as CASCADE_PHASES,g as DEPLOYMENT_EVENT_ERROR_MESSAGE_MAX,l as DEPLOYMENT_EVENT_RESOURCE_CATEGORIES,u as DEPLOYMENT_EVENT_STATUS_REASON_MAX,d as DEPLOYMENT_EVENT_TRAIL_DETAIL_MAX,x as DEPLOYMENT_EVENT_TYPES,T as DeploymentEventSchema,A as toCascadePhase};

package/dist/src/types/detection/patternDetection.js

@@ -1 +1 @@
-import{existsSync as s,readFileSync as a}from"fs";import{join as i}from"path";import{logger as f}from"@fjall/util/logger";import{getErrorMessage as m}from"@fjall/util";import{APPLICATION_STACKS as e}from"../operations.js";import{INFRASTRUCTURE_FILENAME as u}from"../constants.js";import{OPENNEXT_PATTERNS as g,isOpenNextPattern as C}from"./patternTypes.js";function p(t){const r=o=>t.some(n=>n.endsWith(o));return{hasNetwork:r(e.NETWORK),hasCompute:r(e.COMPUTE),hasDatabase:r(e.DATABASE),hasStorage:r(e.STORAGE),hasMessaging:r(e.MESSAGING),hasCdn:r(e.CDN)}}function h(t){try{const r=i(t,u);return s(r)?a(r,"utf-8"):null}catch(r){return f.debug("patternDetection","Failed to read infrastructure file",{appPath:t,error:m(r)}),null}}export{g as OPENNEXT_PATTERNS,p as deriveResourcesFromManifestStacks,C as isOpenNextPattern,h as readInfrastructureContent};
+var a=Object.defineProperty;var o=(e,r)=>a(e,"name",{value:r,configurable:!0});import{existsSync as i,readFileSync as f}from"fs";import{join as m}from"path";import{logger as u}from"@fjall/util/logger";import{getErrorMessage as E}from"@fjall/util";import{APPLICATION_STACKS as t}from"../operations.js";import{INFRASTRUCTURE_FILENAME as S}from"../constants.js";import{OPENNEXT_PATTERNS as R,isOpenNextPattern as F}from"./patternTypes.js";function l(e){const r=o(s=>e.some(n=>n.endsWith(s)),"has");return{hasNetwork:r(t.NETWORK),hasCompute:r(t.COMPUTE),hasDatabase:r(t.DATABASE),hasStorage:r(t.STORAGE),hasMessaging:r(t.MESSAGING),hasCdn:r(t.CDN),hasUsEast1Certificates:r(t.US_EAST_1_CERTIFICATES)}}o(l,"deriveResourcesFromManifestStacks");function d(e){try{const r=m(e,S);return i(r)?f(r,"utf-8"):null}catch(r){return u.debug("patternDetection","Failed to read infrastructure file",{appPath:e,error:E(r)}),null}}o(d,"readInfrastructureContent");export{R as OPENNEXT_PATTERNS,l as deriveResourcesFromManifestStacks,F as isOpenNextPattern,d as readInfrastructureContent};

package/dist/src/types/detection/patternTypes.d.ts

@@ -21,4 +21,13 @@ export interface AppResourceFlags {
     hasStorage: boolean;
     hasMessaging: boolean;
     hasCdn: boolean;
+    /**
+     * A `${app}UsEast1Certificates` stack was synthesised (domain gold-plating
+     * D3, BYO CloudFront path): the app mints its viewer certificate in a
+     * paired us-east-1 stack that must deploy BEFORE the Cdn stack. Optional so
+     * pre-goldplate event payloads and the mirrored deploy-event zod schemas
+     * (deployEvent.ts / deploymentEventSchema.ts / cli deploymentEvents.ts)
+     * stay valid without a lockstep bump — absent reads as `false`.
+     */
+    hasUsEast1Certificates?: boolean;
 }

package/dist/src/types/drift.js

@@ -1 +1 @@
-import{z as t}from"zod";import{RemediationVerbSchema as i}from"./destruction.js";const n=["confirmed-deleted","present","unconfirmed","stack-missing"],s=t.enum(n),e=t.object({stackName:t.string().min(1),logicalId:t.string().min(1),resourceType:t.string().min(1),physicalId:t.string().min(1).optional(),failedStatus:t.string().min(1),statusReason:t.string()}).strict(),a=t.object({...e.shape,verdict:s,verdictDetail:t.string(),probeMethod:t.string(),verbs:t.array(i)}).strict();function m(r){switch(r){case"confirmed-deleted":return["forget","recreate"];case"present":return[];case"unconfirmed":case"stack-missing":return["repair"]}}const d=t.object({version:t.literal(1),accountId:t.string().min(1),region:t.string().min(1),stackName:t.string().min(1),recordedAt:t.string().min(1),suspects:t.array(e)}).strict();export{n as DRIFT_VERDICTS,a as DriftFindingSchema,d as DriftJournalRecordSchema,e as DriftSuspectSchema,s as DriftVerdictSchema,m as verbsForDriftVerdict};
+var s=Object.defineProperty;var r=(e,n)=>s(e,"name",{value:n,configurable:!0});import{z as t}from"zod";import{RemediationVerbSchema as c}from"./destruction.js";const o=["confirmed-deleted","present","unconfirmed","stack-missing"],a=t.enum(o),i=t.object({stackName:t.string().min(1),logicalId:t.string().min(1),resourceType:t.string().min(1),physicalId:t.string().min(1).optional(),failedStatus:t.string().min(1),statusReason:t.string()}).strict(),p=t.object({...i.shape,verdict:a,verdictDetail:t.string(),probeMethod:t.string(),verbs:t.array(c)}).strict();function f(e){switch(e){case"confirmed-deleted":return["forget","recreate"];case"present":return[];case"unconfirmed":case"stack-missing":return["repair"]}}r(f,"verbsForDriftVerdict");const u=t.object({version:t.literal(1),accountId:t.string().min(1),region:t.string().min(1),stackName:t.string().min(1),recordedAt:t.string().min(1),suspects:t.array(i)}).strict();export{o as DRIFT_VERDICTS,p as DriftFindingSchema,u as DriftJournalRecordSchema,i as DriftSuspectSchema,a as DriftVerdictSchema,f as verbsForDriftVerdict};

package/dist/src/types/errors/CdkError.js

@@ -1 +1 @@
-import{BaseServiceError as p}from"./ServiceError.js";class C extends p{errorType;stackName;exitCode;output;constructor(t,e,r,s,o,a,i=!1){super(`CDK_${e.toUpperCase()}`,t,a,i),this.errorType=e,this.stackName=r,this.exitCode=s,this.output=o}}export{C as CdkError};
+var u=Object.defineProperty;var s=(t,e)=>u(t,"name",{value:e,configurable:!0});import{BaseServiceError as C}from"./ServiceError.js";class m extends C{static{s(this,"CdkError")}errorType;stackName;exitCode;output;constructor(e,r,o,a,i,p,c=!1){super(`CDK_${r.toUpperCase()}`,e,p,c),this.errorType=r,this.stackName=o,this.exitCode=a,this.output=i}}export{m as CdkError};

package/dist/src/types/errors/ServiceError.js

@@ -1 +1 @@
-import{maskSensitiveOutput as c}from"@fjall/util";class a extends Error{code;details;recoverable;cause;constructor(e,t,r,o=!1,n){super(t),this.code=e,this.details=r,this.recoverable=o,this.cause=n,this.name=this.constructor.name,Error.captureStackTrace&&Error.captureStackTrace(this,this.constructor)}}class l extends a{fields;rules;constructor(e,t,r,o){super("VALIDATION_ERROR",e,o,!1),this.fields=t,this.rules=r}}class p extends a{account;reason;constructor(e,t,r,o){super("AUTH_ERROR",e,o,!1),this.account=t,this.reason=r}}class h extends a{service;operation;awsErrorCode;constructor(e,t,r,o,n,i=!1){super("AWS_ERROR",e,n,i),this.service=t,this.operation=r,this.awsErrorCode=o}}class E extends a{stackName;deploymentPhase;constructor(e,t,r,o,n=!1){super("DEPLOYMENT_ERROR",e,o,n),this.stackName=t,this.deploymentPhase=r}}class R extends a{endpoint;statusCode;constructor(e,t,r,o){super("NETWORK_ERROR",e,void 0,!0,o),this.endpoint=t,this.statusCode=r}}class d extends a{path;operation;constructor(e,t,r,o){super("FILESYSTEM_ERROR",e,{path:t,operation:r},!1,o),this.path=t,this.operation=r}}class f extends a{configKey;configPath;constructor(e,t,r,o){super("CONFIG_ERROR",e,o,!1),this.configKey=t,this.configPath=r}}function x(s,e="UNKNOWN_ERROR"){return s instanceof a?s:s instanceof Error?new a(e,c(s.message),{name:s.name},!1,s):new a(e,c(String(s)),{rawError:s},!1)}export{p as AuthError,h as AwsError,a as BaseServiceError,f as ConfigError,E as DeploymentError,d as FileSystemError,R as NetworkError,l as ValidationError,x as toServiceError};
+var l=Object.defineProperty;var a=(s,e)=>l(s,"name",{value:e,configurable:!0});import{maskSensitiveOutput as i}from"@fjall/util";class n extends Error{static{a(this,"BaseServiceError")}code;details;recoverable;cause;constructor(e,t,r,o=!1,c){super(t),this.code=e,this.details=r,this.recoverable=o,this.cause=c,this.name=this.constructor.name,Error.captureStackTrace&&Error.captureStackTrace(this,this.constructor)}}class E extends n{static{a(this,"ValidationError")}fields;rules;constructor(e,t,r,o){super("VALIDATION_ERROR",e,o,!1),this.fields=t,this.rules=r}}class R extends n{static{a(this,"AuthError")}account;reason;constructor(e,t,r,o){super("AUTH_ERROR",e,o,!1),this.account=t,this.reason=r}}class d extends n{static{a(this,"AwsError")}service;operation;awsErrorCode;constructor(e,t,r,o,c,u=!1){super("AWS_ERROR",e,c,u),this.service=t,this.operation=r,this.awsErrorCode=o}}class f extends n{static{a(this,"DeploymentError")}stackName;deploymentPhase;constructor(e,t,r,o,c=!1){super("DEPLOYMENT_ERROR",e,o,c),this.stackName=t,this.deploymentPhase=r}}class x extends n{static{a(this,"NetworkError")}endpoint;statusCode;constructor(e,t,r,o){super("NETWORK_ERROR",e,void 0,!0,o),this.endpoint=t,this.statusCode=r}}class m extends n{static{a(this,"FileSystemError")}path;operation;constructor(e,t,r,o){super("FILESYSTEM_ERROR",e,{path:t,operation:r},!1,o),this.path=t,this.operation=r}}class O extends n{static{a(this,"ConfigError")}configKey;configPath;constructor(e,t,r,o){super("CONFIG_ERROR",e,o,!1),this.configKey=t,this.configPath=r}}function N(s,e="UNKNOWN_ERROR"){return s instanceof n?s:s instanceof Error?new n(e,i(s.message),{name:s.name},!1,s):new n(e,i(String(s)),{rawError:s},!1)}a(N,"toServiceError");export{R as AuthError,d as AwsError,n as BaseServiceError,O as ConfigError,f as DeploymentError,m as FileSystemError,x as NetworkError,E as ValidationError,N as toServiceError};

package/dist/src/types/operations.d.ts

@@ -4,12 +4,24 @@ import { toPascalCase } from "@fjall/util";
 import type { PatternType } from "@fjall/generator";
 /**
  * Application infrastructure stacks
+ *
+ * UsEast1Certificates is the app-owned us-east-1 certificate stack (domain
+ * gold-plating D3, BYO CloudFront path — components/infrastructure
+ * `App.getUsEast1CertificateStack`). It exists only when a CloudFront-facing
+ * pattern carries a custom domain outside us-east-1, so ordering derivations
+ * include it ONLY when the post-synth manifest proves it
+ * (`AppResourceFlags.hasUsEast1Certificates`) — a fixed-set entry would make
+ * every deploy attempt a stack that does not exist (the dev-substrate
+ * design's APPLICATION_STACKS warning). It must deploy BEFORE Cdn (the
+ * distribution consumes its certificate ARN through cross-region references)
+ * and destroy AFTER Cdn.
  */
 export declare const APPLICATION_STACKS: {
     readonly NETWORK: "Network";
     readonly DATABASE: "Database";
     readonly STORAGE: "Storage";
     readonly COMPUTE: "Compute";
+    readonly US_EAST_1_CERTIFICATES: "UsEast1Certificates";
     readonly CDN: "Cdn";
     readonly MESSAGING: "Messaging";
 };
@@ -150,10 +162,22 @@ export declare const PARALLEL_DESTROY_GROUPS: {
  * Type for parallel destroy group keys
  */
 export type ParallelDestroyGroupKey = keyof typeof PARALLEL_DESTROY_GROUPS;
+/** The shape destroy consumers iterate — fixed groups plus spliced extras. */
+export interface ParallelDestroyGroup {
+    phase: number;
+    stacks: readonly ApplicationStack[];
+    description: string;
+}
 /**
- * Get all parallel destroy groups as an ordered array
+ * Get all parallel destroy groups as an ordered array.
+ *
+ * When the caller's resource flags prove a `${app}UsEast1Certificates` stack
+ * was deployed, a single-stack phase for it is spliced in AFTER the Cdn phase
+ * (the distribution's cross-region reference must die before its certificate
+ * stack) and before Compute. Without the flag the historic four phases are
+ * returned unchanged, so no destroy targets a stack that never existed.
  */
-export declare function getParallelDestroyGroups(): ReadonlyArray<(typeof PARALLEL_DESTROY_GROUPS)[ParallelDestroyGroupKey]>;
+export declare function getParallelDestroyGroups(resources?: AppResourceFlags): readonly ParallelDestroyGroup[];
 /**
  * Options for determining deployment order
  */