@fjall/deploy-core 4.3.0 → 4.4.0

package/dist/.minified

@@ -1 +1 @@
-236 files minified at 2026-07-27T09:34:45.286Z
+236 files minified at 2026-07-30T00:34:18.012Z

package/dist/src/index.d.ts

@@ -11,6 +11,7 @@
  * responsibility. deploy-core receives credentials and a working
  * directory; it never reads credential files or writes to the terminal.
  */
+export { DEPLOY_CORE_VERSION_GLOBAL } from "./version.js";
 export { DeploymentEventSchema, DEPLOYMENT_EVENT_TYPES, DEPLOYMENT_EVENT_RESOURCE_CATEGORIES, DEPLOYMENT_EVENT_STATUS_REASON_MAX, DEPLOYMENT_EVENT_ERROR_MESSAGE_MAX, DEPLOYMENT_EVENT_TRAIL_DETAIL_MAX, DEPLOYMENT_ERROR_MESSAGE_MAX, CASCADE_PHASES, CASCADE_ACCOUNT_STATUSES, clampDeploymentEventStrings, truncateUtf16Safe } from "./types/index.js";
 export type { DeploymentEvent, DeploymentEventType, DeploymentEventResourceCategory, DeploymentEventCascadePhase, DeploymentEventCascadeAccountStatus } from "./types/index.js";
 export { DeployEventSchema, StepProgressSchema, DeployResourceSchema, PlanChangeSchema, PlanPropertyChangeSchema, ChangeCountsSchema, DEPLOY_EVENT_CONTRACT, DEPLOY_EVENT_CONTRACT_MAJOR, DEPLOY_EVENT_CONTRACT_MINOR, SUPPORTED_CONTRACT_MARKERS, DEPLOY_EVENT_ID_MAX, DEPLOY_EVENT_NAME_MAX, DEPLOY_EVENT_MESSAGE_MAX, DEPLOY_EVENT_STATUS_REASON_MAX, DEPLOY_EVENT_ERROR_MESSAGE_MAX, DEPLOY_EVENT_TRAIL_DETAIL_MAX, DEPLOY_EVENT_OUTPUT_MAX, DEPLOY_EVENT_ARN_MAX, DEPLOY_EVENT_URL_MAX, STEP_COMPLETE_STATUSES, LOG_LEVELS, STACK_CLEANUP_PHASES, CASCADE_ACCOUNT_PHASES, DEPLOY_RESULTS, DETECTION_PHASES, PHASE_STATUSES, BUILDERS, CASCADE_OUTCOME_RESULTS, PLAN_ACTIONS, REPLACEMENT_MODES, APPROVAL_KINDS, APPROVAL_DECISIONS, ALL_PROGRESS_KINDS, createDeployEmitter, parseDeployEvent, parseDeployContractVersion } from "./types/index.js";

package/dist/src/index.js

@@ -1 +1 @@
-import{DeploymentEventSchema as t,DEPLOYMENT_EVENT_TYPES as o,DEPLOYMENT_EVENT_RESOURCE_CATEGORIES as i,DEPLOYMENT_EVENT_STATUS_REASON_MAX as a,DEPLOYMENT_EVENT_ERROR_MESSAGE_MAX as n,DEPLOYMENT_EVENT_TRAIL_DETAIL_MAX as s,DEPLOYMENT_ERROR_MESSAGE_MAX as E,CASCADE_PHASES as c,CASCADE_ACCOUNT_STATUSES as S,clampDeploymentEventStrings as l,truncateUtf16Safe as T}from"./types/index.js";import{DeployEventSchema as R,StepProgressSchema as _,DeployResourceSchema as p,PlanChangeSchema as m,PlanPropertyChangeSchema as d,ChangeCountsSchema as u,DEPLOY_EVENT_CONTRACT as D,DEPLOY_EVENT_CONTRACT_MAJOR as P,DEPLOY_EVENT_CONTRACT_MINOR as O,SUPPORTED_CONTRACT_MARKERS as f,DEPLOY_EVENT_ID_MAX as C,DEPLOY_EVENT_NAME_MAX as N,DEPLOY_EVENT_MESSAGE_MAX as g,DEPLOY_EVENT_STATUS_REASON_MAX as L,DEPLOY_EVENT_ERROR_MESSAGE_MAX as I,DEPLOY_EVENT_TRAIL_DETAIL_MAX as y,DEPLOY_EVENT_OUTPUT_MAX as h,DEPLOY_EVENT_ARN_MAX as M,DEPLOY_EVENT_URL_MAX as v,STEP_COMPLETE_STATUSES as x,LOG_LEVELS as U,STACK_CLEANUP_PHASES as F,CASCADE_ACCOUNT_PHASES as k,DEPLOY_RESULTS as b,DETECTION_PHASES as Y,PHASE_STATUSES as V,BUILDERS as G,CASCADE_OUTCOME_RESULTS as B,PLAN_ACTIONS as K,REPLACEMENT_MODES as X,APPROVAL_KINDS as H,APPROVAL_DECISIONS as w,ALL_PROGRESS_KINDS as J,createDeployEmitter as Q,parseDeployEvent as j,parseDeployContractVersion as W}from"./types/index.js";import{SimpleAwsProvider as q}from"./aws/index.js";import{checkTargetReadiness as $,describeTargetReadinessReason as ee,buildTargetUnreadyAdvisory as re,buildTargetSetUnreadyAdvisory as te,probeAccountStackExists as oe}from"./aws/index.js";import{checkRegionEnabled as ae,regionDisabledMessage as ne}from"./aws/index.js";import{ensureOrganisationExists as Ee,describeOrganisation as ce,enablePolicyTypes as Se,enableServiceAccess as le,SERVICE_PRINCIPALS as Te,enableRamSharing as Ae,activateTrustedAccess as Re,enableIpamDelegatedAdmin as _e,updateBackupGlobalSettings as pe,listAccounts as me,findAccount as de,createAccount as ue,ensureOrganisationalUnitsExist as De,placeAccountsInOUs as Pe,buildAccountToOUMap as Oe,findDevelopmentOuId as fe,activateCostAllocationTags as Ce,checkIdentityCentreStatus as Ne,snapshotIdentityCentre as ge,composeSdkAbortSignal as Le,extractErrorName as Ie,isAborted as ye,DEFAULT_MAX_PAGES as he,IDENTITY_STORE_PAGE_SIZE as Me,drainPages as ve,isOULeaf as xe,registerSecurityDelegates as Ue,SECURITY_SERVICE_PRINCIPALS as Fe,enableCentralisedRootAccess as ke,ROOT_ACCESS_FEATURES as be,RootAccessEnablementError as Ye}from"./aws/index.js";import{STEP_IDS as Ge,STEP_NAMES as Be,INFRASTRUCTURE_STEP_NAMES as Ke,INFRA_STEP_NAME as Xe}from"./types/index.js";import{RemediationVerbSchema as we,REMEDIATION_VERB_GLOSS as Je,DestructionFindingSchema as Qe,DestructionTicketResourceSchema as je,DestructionTicketSchema as We,DestructionConsentSchema as Ze,DestructionOutcomeSchema as qe,DESTRUCTION_FINDINGS as ze,CONSENT_VERDICTS as $e,TICKET_VERDICT_SOURCES as er,TicketVerdictSourceSchema as rr}from"./types/index.js";import{DRIFT_VERDICTS as or,DriftVerdictSchema as ir,DriftSuspectSchema as ar,DriftFindingSchema as nr,DriftJournalRecordSchema as sr,verbsForDriftVerdict as Er}from"./types/index.js";import{REMEDIATION_PHASES as Sr,RemediationPhaseSchema as lr,RemediationTargetSchema as Tr,RemediationFlipProofSchema as Ar,RemediationJournalRecordSchema as Rr,RemediationVerbWithSurgerySchema as _r,remediationPhaseRank as pr,remediationPlaceholderPhysicalId as mr,isRemediationPlaceholderPhysicalId as dr}from"./types/index.js";import{ProgressReporter as Dr,APPLICATION_STACKS as Pr,ORGANISATION_TYPES as Or,APPLICATION_DEPLOY_ORDER as fr,APPLICATION_DESTROY_ORDER as Cr,OPENNEXT_DEPLOY_ORDER as Nr,OPENNEXT_DESTROY_ORDER as gr,PARALLEL_DEPLOY_GROUPS as Lr,PARALLEL_DESTROY_GROUPS as Ir,OPENNEXT_PARALLEL_GROUPS as yr,PARALLEL_OPERATION_TYPES as hr,isApplicationOperation as Mr,isOrganisationOperation as vr,getParallelDeployGroups as xr,getParallelDestroyGroups as Ur,getApplicationDeployOrder as Fr,getApplicationDestroyOrder as kr,getApplicationStackName as br,getOrganisationStackName as Yr,isApplicationStack as Vr,isQuarantineDetail as Gr,isRetainedBucketsDetail as Br,getApplicationStepName as Kr,getApplicationStepId as Xr,toPascalCase as Hr,isOpenNextPattern as wr,OPENNEXT_PATTERNS as Jr,STACK_NOT_FOUND_PATTERN as Qr,STACK_FAILED_STATE_PATTERN as jr,CDK_NO_STACKS_MATCH as Wr,INFRASTRUCTURE_FILENAME as Zr,ApplicationError as qr,wrapApplicationError as zr,stubCallerIdentity as $r}from"./types/index.js";import{deriveResourcesFromManifestStacks as rt}from"./types/detection/patternDetection.js";import{FjallStateFileSchema as ot,readStateFile as it,writeStateFile as at,createEmptyState as nt,deleteStateFile as st,updateTemplateHash as Et,getStateFilePath as ct,regionSuffix as St}from"./types/config/FjallState.js";import{readDomainState as Tt,writeDomainState as At,recordDomainDeployState as Rt,deleteDomainState as _t,hashDomainDirectory as pt,LEGACY_DOMAIN_STATE_FILENAME as mt}from"./types/config/DomainState.js";import{CloudFormationEventMonitor as ut}from"./aws/index.js";import{CdkService as Pt,CdkArgumentBuilder as Ot,CdkProcessManager as ft,ensureDependencyIntegrity as Ct,clearDependencyIntegrityCache as Nt,DEPENDENCY_SYNC_TIMEOUT_MS as gt,CdkEventMonitor as Lt,startStackMonitoring as It,DEFAULT_DEPLOY_TIMEOUT_MS as yt,isCdkError as ht,formatInfrastructureError as Mt,getStructuralHint as vt,getSourceContext as xt,hasCdkDifferences as Ut,parseDiffOutput as Ft,CloudFormationService as kt,CloudFormationError as bt,EcsService as Yt,EcsError as Vt,EcsServiceResolver as Gt,TemplateHashService as Bt,TemplateHashError as Kt,CdkContextBuilder as Xt,emitProgress as Ht,PROGRESS_MESSAGES as wt,parseBuildPhase as Jt,buildStepContextBuildConfig as Qt,convertCloudFormationOutputsToRecord as jt,ApplicationStackService as Wt}from"./services/index.js";import{CdkError as qt}from"./types/errors/index.js";import{BaseServiceError as $t,ValidationError as eo,AuthError as ro,AwsError as to,DeploymentError as oo,NetworkError as io,FileSystemError as ao,ConfigError as no,toServiceError as so}from"./types/errors/index.js";import{filterDangerousEnvVars as co,maskSensitiveOutput as So,parseShellArgs as lo,sleep as To}from"@fjall/util";import{artefactOutputKey as Ro,DeployModeSchema as _o,ServiceArtefactSchema as po,ServiceArtefactsSchema as mo}from"@fjall/util";import{hasDockerfile as Do}from"./util/dockerfileDetection.js";import{sleepAbortable as Oo}from"./util/sleepAbortable.js";import{createSequencedCallbacks as Co}from"./util/sequencedCallbacks.js";import{fileExists as go}from"@fjall/util/fsHelpers";import{success as Io,failure as yo,isSuccess as ho,isFailure as Mo}from"@fjall/generator";import{deploy as xo}from"./orchestration/index.js";import{destroy as Fo}from"./orchestration/index.js";import{restart as bo,probeSecretsDrift as Yo,computeSecretsDrift as Vo,deriveStaleParameters as Go,extractConsumedSsmParameters as Bo}from"./orchestration/index.js";import{partitionAccounts as Xo}from"./orchestration/index.js";import{buildRegionList as wo,buildAccountRegionPairs as Jo,cascadeHomeRegion as Qo,cascadeOperationKey as jo}from"./orchestration/index.js";import{projectScalarSummary as Zo,projectAccountRows as qo}from"./orchestration/index.js";import{reconcileProviderAccounts as $o,mergeReconciledProviderAccounts as ei}from"./orchestration/index.js";import{decideNextTransition as ti,reconcileTrailMigration as oi,decommissionMemberTrailStorage as ii,ORG_TRAIL_BUCKET_OUTPUT_KEY as ai,TRAIL_BUCKET_OUTPUT_KEY as ni,TRAIL_KEY_ARN_OUTPUT_KEY as si}from"./orchestration/index.js";import{classifyDriftFailure as ci,fetchLastOperationEvents as Si,DriftProbe as li,clearDriftSuspects as Ti,defaultDriftJournalDir as Ai,readDriftSuspects as Ri,recordDriftSuspects as _i,detectStackDrift as pi,runDriftPreFlight as mi,formatDriftPreFlightBlock as di,DRIFT_PREFLIGHT_TRIGGER_STATUSES as ui,DRIFT_PREFLIGHT_BUDGET_MS as Di,runRoute53RecordPreflight as Pi}from"./orchestration/index.js";import{archiveCompletedRemediationJournal as fi,computeRemediationOpId as Ci,defaultRemediationJournalDir as Ni,findRemediationJournalByOpId as gi,listActiveRemediationOps as Li,listActiveRemediationOpsForContext as Ii,readRemediationJournal as yi,sweepExpiredRemediationJournals as hi,writeRemediationJournal as Mi,REMEDIATION_JOURNAL_RETENTION_DAYS as vi,captureRemediationForensics as xi,defaultRemediationForensicsDir as Ui,applyRetainFlip as Fi,composeFlipCapabilities as ki,computeTemplateDigest as bi,deriveRetainFlipTemplate as Yi,findMarkedResourcesByOpId as Vi,proveFlipMetadataOnly as Gi,readRetainFlipState as Bi,verifyRetainFlipDiff as Ki,FORGET_MARKER_KEY as Xi,FORGET_FLIP_SPEC as Hi,RECREATE_MARKER_KEY as wi,assessForgetResumability as Ji,completeForgetAfterConverge as Qi,completeForgetAfterDeploy as ji,formatRecreateInFlightCures as Wi,partitionPreFlightByRemediation as Zi,runForgetSurgery as qi,synthTemplateDeclaresResource as zi,runRecreateSurgery as $i,snapshotPolicyForType as ea,SNAPSHOT_CAPABLE_RESOURCE_TYPES as ra,runRecreatePreFlight as ta,deriveRemovalTemplate as oa,findRemovalDeletionFailures as ia,findResourcesPresent as aa,proveRemovalTargetsOnly as na,advertisableDriftVerbs as sa,buildDriftRepairTicket as Ea,runDriftRepairGate as ca,formatPinOutcomeDetail as Sa,pinProbeCoverage as la,renderPinReportLines as Ta,runPinRemediation as Aa,composePostFailureRepairOffer as Ra,formatDriftRepairOffer as _a,DriftRepairAvailableError as pa,checkDeployPathStackAvailability as ma,isDeployPathBlockingStatus as da,StackUnavailableError as ua,assertLeaseBeforeStack as Da,LeaseDeniedError as Pa}from"./orchestration/index.js";import{unlockBucket as fa,unlockQueue as Ca}from"./orchestration/index.js";import{triageBucketPolicy as ga,isEnforceSslStatement as La,toResourcePolicyStatements as Ia,restoreBucketPolicy as ya,synthesiseEnforceSslDocument as ha,ensureEnforceSsl as Ma,restoreAndReconcileQuarantinedBucket as va}from"./orchestration/index.js";import{verifyOrgTrailDelivery as Ua}from"./aws/cloudtrail/orgTrailDelivery.js";import{assumeRootForTask as ka,isRootTaskPolicyArn as ba,ROOT_TASK_POLICY_ARNS as Ya,MAX_ROOT_SESSION_SECONDS as Va}from"./aws/sts/assumeRoot.js";import{parseAccountsConfiguration as Ba,flattenAccountsToEnvironments as Ka,extractAllAccountNames as Xa,accountsConfigToOUTree as Ha,isStringArray as wa,isAccountsConfig as Ja,isOuOnlyAccountBucket as Qa,OU_ONLY_ACCOUNT_BUCKETS as ja}from"./orchestration/index.js";import{runOpenNextBuild as Za}from"./orchestration/index.js";import{runOrganisationSetup as za,ORG_SETUP_PHASES as $a}from"./orchestration/index.js";import{DOMAIN_DELEGATION_ERROR_TYPES as rn,DomainDelegationError as tn,DEFAULT_PUBLIC_RESOLVER_ADDRESSES as on,PUBLIC_DNS_QUERY_TIMEOUT_MS as an,createPublicResolvers as nn,NS_PROPAGATION_DEFAULT_MAX_ATTEMPTS as sn,NS_PROPAGATION_DEFAULT_INTERVAL_MS as En,waitForNsPropagation as cn,ACM_CAA_ISSUERS as Sn,runCaaPreflight as ln,deployDelegatedDomain as Tn,CROSS_ACCOUNT_DELEGATION_RESOURCE_TYPE as An,templateOwnsDelegationRecord as Rn,deleteChildNsFromParent as _n,nsDelegationPhysicalName as pn,runDelegatedDomainDestroy as mn}from"./orchestration/index.js";import{classifyZoneRecords as un,buildSatelliteRecordIndex as Dn,createSystemDnsNameProbe as Pn,systemDnsNameProbe as On,normaliseRecordName as fn,isRoute53NameServer as Cn,isDelegatedToRoute53 as Nn}from"./orchestration/index.js";import{resolveBuildSecrets as Ln,resolveSecretRefValue as In,resolveBuildSecretSessionProvider as yn,sourcedRefsFromBuildArgs as hn,resolveBuildArgs as Mn,buildBuildSecretSessionPolicy as vn,buildDeploySessionPolicy as xn,partitionForRegion as Un,validateBuildGroup as Fn}from"./orchestration/index.js";import{FrameworkRegistry as bn}from"./orchestration/index.js";import{openNextBuilder as Vn,staticSiteBuilder as Gn,dockerBuilder as Bn}from"./orchestration/index.js";import{StepRegistry as Xn,getDestroyStepId as Hn}from"./steps/index.js";import{buildDeployPlan as Jn,computeDeployPlan as Qn,computeAssemblyDigest as jn,digestHead as Wn,classifyImpact as Zn,derivePropertyChanges as qn,isDataLoss as zn,isStatefulResourceType as $n,renderPlanSummary as es,renderPlanLines as rs,toWirePlanChanges as ts,signApprovalToken as os,verifyApprovalToken as is,DEFAULT_APPROVAL_TTL_MS as as,APPROVAL_TOKEN_PATTERN as ns,runApprovalGate as ss,approvalRefusalReason as Es}from"./orchestration/index.js";import{runDestructionGate as Ss,buildDestructionTicket as ls,evaluateDestructionConsents as Ts,computeTicketDigest as As,legalRemediationVerbs as Rs,executableRemediationVerbs as _s,advertisableRemediationVerbs as ps,renderDestructionTicketLines as ms,renderConsentVerdictLines as ds,loadDeployPlan as us,createMemoisedPlanLoader as Ds}from"./orchestration/index.js";export{Sn as ACM_CAA_ISSUERS,J as ALL_PROGRESS_KINDS,fr as APPLICATION_DEPLOY_ORDER,Cr as APPLICATION_DESTROY_ORDER,Pr as APPLICATION_STACKS,w as APPROVAL_DECISIONS,H as APPROVAL_KINDS,ns as APPROVAL_TOKEN_PATTERN,qr as ApplicationError,Wt as ApplicationStackService,ro as AuthError,to as AwsError,G as BUILDERS,$t as BaseServiceError,k as CASCADE_ACCOUNT_PHASES,S as CASCADE_ACCOUNT_STATUSES,B as CASCADE_OUTCOME_RESULTS,c as CASCADE_PHASES,Wr as CDK_NO_STACKS_MATCH,$e as CONSENT_VERDICTS,An as CROSS_ACCOUNT_DELEGATION_RESOURCE_TYPE,Ot as CdkArgumentBuilder,Xt as CdkContextBuilder,qt as CdkError,Lt as CdkEventMonitor,ft as CdkProcessManager,Pt as CdkService,u as ChangeCountsSchema,bt as CloudFormationError,ut as CloudFormationEventMonitor,kt as CloudFormationService,no as ConfigError,as as DEFAULT_APPROVAL_TTL_MS,yt as DEFAULT_DEPLOY_TIMEOUT_MS,he as DEFAULT_MAX_PAGES,on as DEFAULT_PUBLIC_RESOLVER_ADDRESSES,gt as DEPENDENCY_SYNC_TIMEOUT_MS,E as DEPLOYMENT_ERROR_MESSAGE_MAX,n as DEPLOYMENT_EVENT_ERROR_MESSAGE_MAX,i as DEPLOYMENT_EVENT_RESOURCE_CATEGORIES,a as DEPLOYMENT_EVENT_STATUS_REASON_MAX,s as DEPLOYMENT_EVENT_TRAIL_DETAIL_MAX,o as DEPLOYMENT_EVENT_TYPES,M as DEPLOY_EVENT_ARN_MAX,D as DEPLOY_EVENT_CONTRACT,P as DEPLOY_EVENT_CONTRACT_MAJOR,O as DEPLOY_EVENT_CONTRACT_MINOR,I as DEPLOY_EVENT_ERROR_MESSAGE_MAX,C as DEPLOY_EVENT_ID_MAX,g as DEPLOY_EVENT_MESSAGE_MAX,N as DEPLOY_EVENT_NAME_MAX,h as DEPLOY_EVENT_OUTPUT_MAX,L as DEPLOY_EVENT_STATUS_REASON_MAX,y as DEPLOY_EVENT_TRAIL_DETAIL_MAX,v as DEPLOY_EVENT_URL_MAX,b as DEPLOY_RESULTS,ze as DESTRUCTION_FINDINGS,Y as DETECTION_PHASES,rn as DOMAIN_DELEGATION_ERROR_TYPES,Di as DRIFT_PREFLIGHT_BUDGET_MS,ui as DRIFT_PREFLIGHT_TRIGGER_STATUSES,or as DRIFT_VERDICTS,R as DeployEventSchema,_o as DeployModeSchema,p as DeployResourceSchema,oo as DeploymentError,t as DeploymentEventSchema,Ze as DestructionConsentSchema,Qe as DestructionFindingSchema,qe as DestructionOutcomeSchema,je as DestructionTicketResourceSchema,We as DestructionTicketSchema,tn as DomainDelegationError,nr as DriftFindingSchema,sr as DriftJournalRecordSchema,li as DriftProbe,pa as DriftRepairAvailableError,ar as DriftSuspectSchema,ir as DriftVerdictSchema,Vt as EcsError,Yt as EcsService,Gt as EcsServiceResolver,Hi as FORGET_FLIP_SPEC,Xi as FORGET_MARKER_KEY,ao as FileSystemError,ot as FjallStateFileSchema,bn as FrameworkRegistry,Me as IDENTITY_STORE_PAGE_SIZE,Zr as INFRASTRUCTURE_FILENAME,Ke as INFRASTRUCTURE_STEP_NAMES,Xe as INFRA_STEP_NAME,mt as LEGACY_DOMAIN_STATE_FILENAME,U as LOG_LEVELS,Pa as LeaseDeniedError,Va as MAX_ROOT_SESSION_SECONDS,En as NS_PROPAGATION_DEFAULT_INTERVAL_MS,sn as NS_PROPAGATION_DEFAULT_MAX_ATTEMPTS,io as NetworkError,Nr as OPENNEXT_DEPLOY_ORDER,gr as OPENNEXT_DESTROY_ORDER,yr as OPENNEXT_PARALLEL_GROUPS,Jr as OPENNEXT_PATTERNS,Or as ORGANISATION_TYPES,$a as ORG_SETUP_PHASES,ai as ORG_TRAIL_BUCKET_OUTPUT_KEY,ja as OU_ONLY_ACCOUNT_BUCKETS,Lr as PARALLEL_DEPLOY_GROUPS,Ir as PARALLEL_DESTROY_GROUPS,hr as PARALLEL_OPERATION_TYPES,V as PHASE_STATUSES,K as PLAN_ACTIONS,wt as PROGRESS_MESSAGES,an as PUBLIC_DNS_QUERY_TIMEOUT_MS,m as PlanChangeSchema,d as PlanPropertyChangeSchema,Dr as ProgressReporter,wi as RECREATE_MARKER_KEY,vi as REMEDIATION_JOURNAL_RETENTION_DAYS,Sr as REMEDIATION_PHASES,Je as REMEDIATION_VERB_GLOSS,X as REPLACEMENT_MODES,be as ROOT_ACCESS_FEATURES,Ya as ROOT_TASK_POLICY_ARNS,Ar as RemediationFlipProofSchema,Rr as RemediationJournalRecordSchema,lr as RemediationPhaseSchema,Tr as RemediationTargetSchema,we as RemediationVerbSchema,_r as RemediationVerbWithSurgerySchema,Ye as RootAccessEnablementError,Fe as SECURITY_SERVICE_PRINCIPALS,Te as SERVICE_PRINCIPALS,ra as SNAPSHOT_CAPABLE_RESOURCE_TYPES,F as STACK_CLEANUP_PHASES,jr as STACK_FAILED_STATE_PATTERN,Qr as STACK_NOT_FOUND_PATTERN,x as STEP_COMPLETE_STATUSES,Ge as STEP_IDS,Be as STEP_NAMES,f as SUPPORTED_CONTRACT_MARKERS,po as ServiceArtefactSchema,mo as ServiceArtefactsSchema,q as SimpleAwsProvider,ua as StackUnavailableError,_ as StepProgressSchema,Xn as StepRegistry,er as TICKET_VERDICT_SOURCES,ni as TRAIL_BUCKET_OUTPUT_KEY,si as TRAIL_KEY_ARN_OUTPUT_KEY,Kt as TemplateHashError,Bt as TemplateHashService,rr as TicketVerdictSourceSchema,eo as ValidationError,Ha as accountsConfigToOUTree,Ce as activateCostAllocationTags,Re as activateTrustedAccess,sa as advertisableDriftVerbs,ps as advertisableRemediationVerbs,Fi as applyRetainFlip,Es as approvalRefusalReason,fi as archiveCompletedRemediationJournal,Ro as artefactOutputKey,Da as assertLeaseBeforeStack,Ji as assessForgetResumability,ka as assumeRootForTask,Jo as buildAccountRegionPairs,Oe as buildAccountToOUMap,vn as buildBuildSecretSessionPolicy,Jn as buildDeployPlan,xn as buildDeploySessionPolicy,ls as buildDestructionTicket,Ea as buildDriftRepairTicket,wo as buildRegionList,Dn as buildSatelliteRecordIndex,Qt as buildStepContextBuildConfig,te as buildTargetSetUnreadyAdvisory,re as buildTargetUnreadyAdvisory,xi as captureRemediationForensics,Qo as cascadeHomeRegion,jo as cascadeOperationKey,ma as checkDeployPathStackAvailability,Ne as checkIdentityCentreStatus,ae as checkRegionEnabled,$ as checkTargetReadiness,l as clampDeploymentEventStrings,ci as classifyDriftFailure,Zn as classifyImpact,un as classifyZoneRecords,Nt as clearDependencyIntegrityCache,Ti as clearDriftSuspects,Qi as completeForgetAfterConverge,ji as completeForgetAfterDeploy,ki as composeFlipCapabilities,Ra as composePostFailureRepairOffer,Le as composeSdkAbortSignal,jn as computeAssemblyDigest,Qn as computeDeployPlan,Ci as computeRemediationOpId,Vo as computeSecretsDrift,bi as computeTemplateDigest,As as computeTicketDigest,jt as convertCloudFormationOutputsToRecord,ue as createAccount,Q as createDeployEmitter,nt as createEmptyState,Ds as createMemoisedPlanLoader,nn as createPublicResolvers,Co as createSequencedCallbacks,Pn as createSystemDnsNameProbe,ti as decideNextTransition,ii as decommissionMemberTrailStorage,Ai as defaultDriftJournalDir,Ui as defaultRemediationForensicsDir,Ni as defaultRemediationJournalDir,_n as deleteChildNsFromParent,_t as deleteDomainState,st as deleteStateFile,xo as deploy,Tn as deployDelegatedDomain,qn as derivePropertyChanges,oa as deriveRemovalTemplate,rt as deriveResourcesFromManifestStacks,Yi as deriveRetainFlipTemplate,Go as deriveStaleParameters,ce as describeOrganisation,ee as describeTargetReadinessReason,Fo as destroy,pi as detectStackDrift,Wn as digestHead,Bn as dockerBuilder,ve as drainPages,Ht as emitProgress,ke as enableCentralisedRootAccess,_e as enableIpamDelegatedAdmin,Se as enablePolicyTypes,Ae as enableRamSharing,le as enableServiceAccess,Ct as ensureDependencyIntegrity,Ma as ensureEnforceSsl,Ee as ensureOrganisationExists,De as ensureOrganisationalUnitsExist,Ts as evaluateDestructionConsents,_s as executableRemediationVerbs,Xa as extractAllAccountNames,Bo as extractConsumedSsmParameters,Ie as extractErrorName,yo as failure,Si as fetchLastOperationEvents,go as fileExists,co as filterDangerousEnvVars,de as findAccount,fe as findDevelopmentOuId,Vi as findMarkedResourcesByOpId,gi as findRemediationJournalByOpId,ia as findRemovalDeletionFailures,aa as findResourcesPresent,Ka as flattenAccountsToEnvironments,di as formatDriftPreFlightBlock,_a as formatDriftRepairOffer,Mt as formatInfrastructureError,Sa as formatPinOutcomeDetail,Wi as formatRecreateInFlightCures,Fr as getApplicationDeployOrder,kr as getApplicationDestroyOrder,br as getApplicationStackName,Xr as getApplicationStepId,Kr as getApplicationStepName,Hn as getDestroyStepId,Yr as getOrganisationStackName,xr as getParallelDeployGroups,Ur as getParallelDestroyGroups,xt as getSourceContext,ct as getStateFilePath,vt as getStructuralHint,Ut as hasCdkDifferences,Do as hasDockerfile,pt as hashDomainDirectory,ye as isAborted,Ja as isAccountsConfig,Mr as isApplicationOperation,Vr as isApplicationStack,ht as isCdkError,zn as isDataLoss,Nn as isDelegatedToRoute53,da as isDeployPathBlockingStatus,La as isEnforceSslStatement,Mo as isFailure,xe as isOULeaf,wr as isOpenNextPattern,vr as isOrganisationOperation,Qa as isOuOnlyAccountBucket,Gr as isQuarantineDetail,dr as isRemediationPlaceholderPhysicalId,Br as isRetainedBucketsDetail,ba as isRootTaskPolicyArn,Cn as isRoute53NameServer,$n as isStatefulResourceType,wa as isStringArray,ho as isSuccess,Rs as legalRemediationVerbs,me as listAccounts,Li as listActiveRemediationOps,Ii as listActiveRemediationOpsForContext,us as loadDeployPlan,So as maskSensitiveOutput,ei as mergeReconciledProviderAccounts,fn as normaliseRecordName,pn as nsDelegationPhysicalName,Vn as openNextBuilder,Ba as parseAccountsConfiguration,Jt as parseBuildPhase,W as parseDeployContractVersion,j as parseDeployEvent,Ft as parseDiffOutput,lo as parseShellArgs,Xo as partitionAccounts,Un as partitionForRegion,Zi as partitionPreFlightByRemediation,la as pinProbeCoverage,Pe as placeAccountsInOUs,oe as probeAccountStackExists,Yo as probeSecretsDrift,qo as projectAccountRows,Zo as projectScalarSummary,Gi as proveFlipMetadataOnly,na as proveRemovalTargetsOnly,Tt as readDomainState,Ri as readDriftSuspects,yi as readRemediationJournal,Bi as readRetainFlipState,it as readStateFile,$o as reconcileProviderAccounts,oi as reconcileTrailMigration,Rt as recordDomainDeployState,_i as recordDriftSuspects,ne as regionDisabledMessage,St as regionSuffix,Ue as registerSecurityDelegates,pr as remediationPhaseRank,mr as remediationPlaceholderPhysicalId,ds as renderConsentVerdictLines,ms as renderDestructionTicketLines,Ta as renderPinReportLines,rs as renderPlanLines,es as renderPlanSummary,Mn as resolveBuildArgs,yn as resolveBuildSecretSessionProvider,Ln as resolveBuildSecrets,In as resolveSecretRefValue,bo as restart,va as restoreAndReconcileQuarantinedBucket,ya as restoreBucketPolicy,ss as runApprovalGate,ln as runCaaPreflight,mn as runDelegatedDomainDestroy,Ss as runDestructionGate,mi as runDriftPreFlight,ca as runDriftRepairGate,qi as runForgetSurgery,Za as runOpenNextBuild,za as runOrganisationSetup,Aa as runPinRemediation,ta as runRecreatePreFlight,$i as runRecreateSurgery,Pi as runRoute53RecordPreflight,os as signApprovalToken,To as sleep,Oo as sleepAbortable,ge as snapshotIdentityCentre,ea as snapshotPolicyForType,hn as sourcedRefsFromBuildArgs,It as startStackMonitoring,Gn as staticSiteBuilder,$r as stubCallerIdentity,Io as success,hi as sweepExpiredRemediationJournals,zi as synthTemplateDeclaresResource,ha as synthesiseEnforceSslDocument,On as systemDnsNameProbe,Rn as templateOwnsDelegationRecord,Hr as toPascalCase,Ia as toResourcePolicyStatements,so as toServiceError,ts as toWirePlanChanges,ga as triageBucketPolicy,T as truncateUtf16Safe,fa as unlockBucket,Ca as unlockQueue,pe as updateBackupGlobalSettings,Et as updateTemplateHash,Fn as validateBuildGroup,Er as verbsForDriftVerdict,is as verifyApprovalToken,Ua as verifyOrgTrailDelivery,Ki as verifyRetainFlipDiff,cn as waitForNsPropagation,zr as wrapApplicationError,At as writeDomainState,Mi as writeRemediationJournal,at as writeStateFile};
+import{DEPLOY_CORE_VERSION_GLOBAL as t}from"./version.js";import{DeploymentEventSchema as i,DEPLOYMENT_EVENT_TYPES as a,DEPLOYMENT_EVENT_RESOURCE_CATEGORIES as n,DEPLOYMENT_EVENT_STATUS_REASON_MAX as s,DEPLOYMENT_EVENT_ERROR_MESSAGE_MAX as E,DEPLOYMENT_EVENT_TRAIL_DETAIL_MAX as c,DEPLOYMENT_ERROR_MESSAGE_MAX as S,CASCADE_PHASES as l,CASCADE_ACCOUNT_STATUSES as A,clampDeploymentEventStrings as R,truncateUtf16Safe as T}from"./types/index.js";import{DeployEventSchema as p,StepProgressSchema as m,DeployResourceSchema as d,PlanChangeSchema as u,PlanPropertyChangeSchema as D,ChangeCountsSchema as P,DEPLOY_EVENT_CONTRACT as O,DEPLOY_EVENT_CONTRACT_MAJOR as f,DEPLOY_EVENT_CONTRACT_MINOR as C,SUPPORTED_CONTRACT_MARKERS as N,DEPLOY_EVENT_ID_MAX as g,DEPLOY_EVENT_NAME_MAX as L,DEPLOY_EVENT_MESSAGE_MAX as I,DEPLOY_EVENT_STATUS_REASON_MAX as y,DEPLOY_EVENT_ERROR_MESSAGE_MAX as h,DEPLOY_EVENT_TRAIL_DETAIL_MAX as M,DEPLOY_EVENT_OUTPUT_MAX as x,DEPLOY_EVENT_ARN_MAX as v,DEPLOY_EVENT_URL_MAX as U,STEP_COMPLETE_STATUSES as F,LOG_LEVELS as k,STACK_CLEANUP_PHASES as b,CASCADE_ACCOUNT_PHASES as Y,DEPLOY_RESULTS as V,DETECTION_PHASES as G,PHASE_STATUSES as B,BUILDERS as K,CASCADE_OUTCOME_RESULTS as X,PLAN_ACTIONS as H,REPLACEMENT_MODES as w,APPROVAL_KINDS as J,APPROVAL_DECISIONS as Q,ALL_PROGRESS_KINDS as j,createDeployEmitter as W,parseDeployEvent as Z,parseDeployContractVersion as q}from"./types/index.js";import{SimpleAwsProvider as $}from"./aws/index.js";import{checkTargetReadiness as re,describeTargetReadinessReason as te,buildTargetUnreadyAdvisory as oe,buildTargetSetUnreadyAdvisory as ie,probeAccountStackExists as ae}from"./aws/index.js";import{checkRegionEnabled as se,regionDisabledMessage as Ee}from"./aws/index.js";import{ensureOrganisationExists as Se,describeOrganisation as le,enablePolicyTypes as Ae,enableServiceAccess as Re,SERVICE_PRINCIPALS as Te,enableRamSharing as _e,activateTrustedAccess as pe,enableIpamDelegatedAdmin as me,updateBackupGlobalSettings as de,listAccounts as ue,findAccount as De,createAccount as Pe,ensureOrganisationalUnitsExist as Oe,placeAccountsInOUs as fe,buildAccountToOUMap as Ce,findDevelopmentOuId as Ne,activateCostAllocationTags as ge,checkIdentityCentreStatus as Le,snapshotIdentityCentre as Ie,composeSdkAbortSignal as ye,extractErrorName as he,isAborted as Me,DEFAULT_MAX_PAGES as xe,IDENTITY_STORE_PAGE_SIZE as ve,drainPages as Ue,isOULeaf as Fe,registerSecurityDelegates as ke,SECURITY_SERVICE_PRINCIPALS as be,enableCentralisedRootAccess as Ye,ROOT_ACCESS_FEATURES as Ve,RootAccessEnablementError as Ge}from"./aws/index.js";import{STEP_IDS as Ke,STEP_NAMES as Xe,INFRASTRUCTURE_STEP_NAMES as He,INFRA_STEP_NAME as we}from"./types/index.js";import{RemediationVerbSchema as Qe,REMEDIATION_VERB_GLOSS as je,DestructionFindingSchema as We,DestructionTicketResourceSchema as Ze,DestructionTicketSchema as qe,DestructionConsentSchema as ze,DestructionOutcomeSchema as $e,DESTRUCTION_FINDINGS as er,CONSENT_VERDICTS as rr,TICKET_VERDICT_SOURCES as tr,TicketVerdictSourceSchema as or}from"./types/index.js";import{DRIFT_VERDICTS as ar,DriftVerdictSchema as nr,DriftSuspectSchema as sr,DriftFindingSchema as Er,DriftJournalRecordSchema as cr,verbsForDriftVerdict as Sr}from"./types/index.js";import{REMEDIATION_PHASES as Ar,RemediationPhaseSchema as Rr,RemediationTargetSchema as Tr,RemediationFlipProofSchema as _r,RemediationJournalRecordSchema as pr,RemediationVerbWithSurgerySchema as mr,remediationPhaseRank as dr,remediationPlaceholderPhysicalId as ur,isRemediationPlaceholderPhysicalId as Dr}from"./types/index.js";import{ProgressReporter as Or,APPLICATION_STACKS as fr,ORGANISATION_TYPES as Cr,APPLICATION_DEPLOY_ORDER as Nr,APPLICATION_DESTROY_ORDER as gr,OPENNEXT_DEPLOY_ORDER as Lr,OPENNEXT_DESTROY_ORDER as Ir,PARALLEL_DEPLOY_GROUPS as yr,PARALLEL_DESTROY_GROUPS as hr,OPENNEXT_PARALLEL_GROUPS as Mr,PARALLEL_OPERATION_TYPES as xr,isApplicationOperation as vr,isOrganisationOperation as Ur,getParallelDeployGroups as Fr,getParallelDestroyGroups as kr,getApplicationDeployOrder as br,getApplicationDestroyOrder as Yr,getApplicationStackName as Vr,getOrganisationStackName as Gr,isApplicationStack as Br,isQuarantineDetail as Kr,isRetainedBucketsDetail as Xr,getApplicationStepName as Hr,getApplicationStepId as wr,toPascalCase as Jr,isOpenNextPattern as Qr,OPENNEXT_PATTERNS as jr,STACK_NOT_FOUND_PATTERN as Wr,STACK_FAILED_STATE_PATTERN as Zr,CDK_NO_STACKS_MATCH as qr,INFRASTRUCTURE_FILENAME as zr,ApplicationError as $r,wrapApplicationError as et,stubCallerIdentity as rt}from"./types/index.js";import{deriveResourcesFromManifestStacks as ot}from"./types/detection/patternDetection.js";import{FjallStateFileSchema as at,readStateFile as nt,writeStateFile as st,createEmptyState as Et,deleteStateFile as ct,updateTemplateHash as St,getStateFilePath as lt,regionSuffix as At}from"./types/config/FjallState.js";import{readDomainState as Tt,writeDomainState as _t,recordDomainDeployState as pt,deleteDomainState as mt,hashDomainDirectory as dt,LEGACY_DOMAIN_STATE_FILENAME as ut}from"./types/config/DomainState.js";import{CloudFormationEventMonitor as Pt}from"./aws/index.js";import{CdkService as ft,CdkArgumentBuilder as Ct,CdkProcessManager as Nt,ensureDependencyIntegrity as gt,clearDependencyIntegrityCache as Lt,DEPENDENCY_SYNC_TIMEOUT_MS as It,CdkEventMonitor as yt,startStackMonitoring as ht,DEFAULT_DEPLOY_TIMEOUT_MS as Mt,isCdkError as xt,formatInfrastructureError as vt,getStructuralHint as Ut,getSourceContext as Ft,hasCdkDifferences as kt,parseDiffOutput as bt,CloudFormationService as Yt,CloudFormationError as Vt,EcsService as Gt,EcsError as Bt,EcsServiceResolver as Kt,TemplateHashService as Xt,TemplateHashError as Ht,CdkContextBuilder as wt,emitProgress as Jt,PROGRESS_MESSAGES as Qt,parseBuildPhase as jt,buildStepContextBuildConfig as Wt,convertCloudFormationOutputsToRecord as Zt,ApplicationStackService as qt}from"./services/index.js";import{CdkError as $t}from"./types/errors/index.js";import{BaseServiceError as ro,ValidationError as to,AuthError as oo,AwsError as io,DeploymentError as ao,NetworkError as no,FileSystemError as so,ConfigError as Eo,toServiceError as co}from"./types/errors/index.js";import{filterDangerousEnvVars as lo,maskSensitiveOutput as Ao,parseShellArgs as Ro,sleep as To}from"@fjall/util";import{artefactOutputKey as po,DeployModeSchema as mo,ServiceArtefactSchema as uo,ServiceArtefactsSchema as Do}from"@fjall/util";import{hasDockerfile as Oo}from"./util/dockerfileDetection.js";import{sleepAbortable as Co}from"./util/sleepAbortable.js";import{createSequencedCallbacks as go}from"./util/sequencedCallbacks.js";import{fileExists as Io}from"@fjall/util/fsHelpers";import{success as ho,failure as Mo,isSuccess as xo,isFailure as vo}from"@fjall/generator";import{deploy as Fo}from"./orchestration/index.js";import{destroy as bo}from"./orchestration/index.js";import{restart as Vo,probeSecretsDrift as Go,computeSecretsDrift as Bo,deriveStaleParameters as Ko,extractConsumedSsmParameters as Xo}from"./orchestration/index.js";import{partitionAccounts as wo}from"./orchestration/index.js";import{buildRegionList as Qo,buildAccountRegionPairs as jo,cascadeHomeRegion as Wo,cascadeOperationKey as Zo}from"./orchestration/index.js";import{projectScalarSummary as zo,projectAccountRows as $o}from"./orchestration/index.js";import{reconcileProviderAccounts as ri,mergeReconciledProviderAccounts as ti}from"./orchestration/index.js";import{decideNextTransition as ii,reconcileTrailMigration as ai,decommissionMemberTrailStorage as ni,ORG_TRAIL_BUCKET_OUTPUT_KEY as si,TRAIL_BUCKET_OUTPUT_KEY as Ei,TRAIL_KEY_ARN_OUTPUT_KEY as ci}from"./orchestration/index.js";import{classifyDriftFailure as li,fetchLastOperationEvents as Ai,DriftProbe as Ri,clearDriftSuspects as Ti,defaultDriftJournalDir as _i,readDriftSuspects as pi,recordDriftSuspects as mi,detectStackDrift as di,runDriftPreFlight as ui,formatDriftPreFlightBlock as Di,DRIFT_PREFLIGHT_TRIGGER_STATUSES as Pi,DRIFT_PREFLIGHT_BUDGET_MS as Oi,runRoute53RecordPreflight as fi}from"./orchestration/index.js";import{archiveCompletedRemediationJournal as Ni,computeRemediationOpId as gi,defaultRemediationJournalDir as Li,findRemediationJournalByOpId as Ii,listActiveRemediationOps as yi,listActiveRemediationOpsForContext as hi,readRemediationJournal as Mi,sweepExpiredRemediationJournals as xi,writeRemediationJournal as vi,REMEDIATION_JOURNAL_RETENTION_DAYS as Ui,captureRemediationForensics as Fi,defaultRemediationForensicsDir as ki,applyRetainFlip as bi,composeFlipCapabilities as Yi,computeTemplateDigest as Vi,deriveRetainFlipTemplate as Gi,findMarkedResourcesByOpId as Bi,proveFlipMetadataOnly as Ki,readRetainFlipState as Xi,verifyRetainFlipDiff as Hi,FORGET_MARKER_KEY as wi,FORGET_FLIP_SPEC as Ji,RECREATE_MARKER_KEY as Qi,assessForgetResumability as ji,completeForgetAfterConverge as Wi,completeForgetAfterDeploy as Zi,formatRecreateInFlightCures as qi,partitionPreFlightByRemediation as zi,runForgetSurgery as $i,synthTemplateDeclaresResource as ea,runRecreateSurgery as ra,snapshotPolicyForType as ta,SNAPSHOT_CAPABLE_RESOURCE_TYPES as oa,runRecreatePreFlight as ia,deriveRemovalTemplate as aa,findRemovalDeletionFailures as na,findResourcesPresent as sa,proveRemovalTargetsOnly as Ea,advertisableDriftVerbs as ca,buildDriftRepairTicket as Sa,runDriftRepairGate as la,formatPinOutcomeDetail as Aa,pinProbeCoverage as Ra,renderPinReportLines as Ta,runPinRemediation as _a,composePostFailureRepairOffer as pa,formatDriftRepairOffer as ma,DriftRepairAvailableError as da,checkDeployPathStackAvailability as ua,isDeployPathBlockingStatus as Da,StackUnavailableError as Pa,assertLeaseBeforeStack as Oa,LeaseDeniedError as fa}from"./orchestration/index.js";import{unlockBucket as Na,unlockQueue as ga}from"./orchestration/index.js";import{triageBucketPolicy as Ia,isEnforceSslStatement as ya,toResourcePolicyStatements as ha,restoreBucketPolicy as Ma,synthesiseEnforceSslDocument as xa,ensureEnforceSsl as va,restoreAndReconcileQuarantinedBucket as Ua}from"./orchestration/index.js";import{verifyOrgTrailDelivery as ka}from"./aws/cloudtrail/orgTrailDelivery.js";import{assumeRootForTask as Ya,isRootTaskPolicyArn as Va,ROOT_TASK_POLICY_ARNS as Ga,MAX_ROOT_SESSION_SECONDS as Ba}from"./aws/sts/assumeRoot.js";import{parseAccountsConfiguration as Xa,flattenAccountsToEnvironments as Ha,extractAllAccountNames as wa,accountsConfigToOUTree as Ja,isStringArray as Qa,isAccountsConfig as ja,isOuOnlyAccountBucket as Wa,OU_ONLY_ACCOUNT_BUCKETS as Za}from"./orchestration/index.js";import{runOpenNextBuild as za}from"./orchestration/index.js";import{runOrganisationSetup as en,ORG_SETUP_PHASES as rn}from"./orchestration/index.js";import{DOMAIN_DELEGATION_ERROR_TYPES as on,DomainDelegationError as an,DEFAULT_PUBLIC_RESOLVER_ADDRESSES as nn,PUBLIC_DNS_QUERY_TIMEOUT_MS as sn,createPublicResolvers as En,NS_PROPAGATION_DEFAULT_MAX_ATTEMPTS as cn,NS_PROPAGATION_DEFAULT_INTERVAL_MS as Sn,waitForNsPropagation as ln,ACM_CAA_ISSUERS as An,runCaaPreflight as Rn,deployDelegatedDomain as Tn,CROSS_ACCOUNT_DELEGATION_RESOURCE_TYPE as _n,templateOwnsDelegationRecord as pn,deleteChildNsFromParent as mn,nsDelegationPhysicalName as dn,runDelegatedDomainDestroy as un}from"./orchestration/index.js";import{classifyZoneRecords as Pn,buildSatelliteRecordIndex as On,createSystemDnsNameProbe as fn,systemDnsNameProbe as Cn,normaliseRecordName as Nn,isRoute53NameServer as gn,isDelegatedToRoute53 as Ln}from"./orchestration/index.js";import{resolveBuildSecrets as yn,resolveSecretRefValue as hn,resolveBuildSecretSessionProvider as Mn,sourcedRefsFromBuildArgs as xn,resolveBuildArgs as vn,buildBuildSecretSessionPolicy as Un,buildDeploySessionPolicy as Fn,partitionForRegion as kn,validateBuildGroup as bn}from"./orchestration/index.js";import{FrameworkRegistry as Vn}from"./orchestration/index.js";import{openNextBuilder as Bn,staticSiteBuilder as Kn,dockerBuilder as Xn}from"./orchestration/index.js";import{StepRegistry as wn,getDestroyStepId as Jn}from"./steps/index.js";import{buildDeployPlan as jn,computeDeployPlan as Wn,computeAssemblyDigest as Zn,digestHead as qn,classifyImpact as zn,derivePropertyChanges as $n,isDataLoss as es,isStatefulResourceType as rs,renderPlanSummary as ts,renderPlanLines as os,toWirePlanChanges as is,signApprovalToken as as,verifyApprovalToken as ns,DEFAULT_APPROVAL_TTL_MS as ss,APPROVAL_TOKEN_PATTERN as Es,runApprovalGate as cs,approvalRefusalReason as Ss}from"./orchestration/index.js";import{runDestructionGate as As,buildDestructionTicket as Rs,evaluateDestructionConsents as Ts,computeTicketDigest as _s,legalRemediationVerbs as ps,executableRemediationVerbs as ms,advertisableRemediationVerbs as ds,renderDestructionTicketLines as us,renderConsentVerdictLines as Ds,loadDeployPlan as Ps,createMemoisedPlanLoader as Os}from"./orchestration/index.js";export{An as ACM_CAA_ISSUERS,j as ALL_PROGRESS_KINDS,Nr as APPLICATION_DEPLOY_ORDER,gr as APPLICATION_DESTROY_ORDER,fr as APPLICATION_STACKS,Q as APPROVAL_DECISIONS,J as APPROVAL_KINDS,Es as APPROVAL_TOKEN_PATTERN,$r as ApplicationError,qt as ApplicationStackService,oo as AuthError,io as AwsError,K as BUILDERS,ro as BaseServiceError,Y as CASCADE_ACCOUNT_PHASES,A as CASCADE_ACCOUNT_STATUSES,X as CASCADE_OUTCOME_RESULTS,l as CASCADE_PHASES,qr as CDK_NO_STACKS_MATCH,rr as CONSENT_VERDICTS,_n as CROSS_ACCOUNT_DELEGATION_RESOURCE_TYPE,Ct as CdkArgumentBuilder,wt as CdkContextBuilder,$t as CdkError,yt as CdkEventMonitor,Nt as CdkProcessManager,ft as CdkService,P as ChangeCountsSchema,Vt as CloudFormationError,Pt as CloudFormationEventMonitor,Yt as CloudFormationService,Eo as ConfigError,ss as DEFAULT_APPROVAL_TTL_MS,Mt as DEFAULT_DEPLOY_TIMEOUT_MS,xe as DEFAULT_MAX_PAGES,nn as DEFAULT_PUBLIC_RESOLVER_ADDRESSES,It as DEPENDENCY_SYNC_TIMEOUT_MS,S as DEPLOYMENT_ERROR_MESSAGE_MAX,E as DEPLOYMENT_EVENT_ERROR_MESSAGE_MAX,n as DEPLOYMENT_EVENT_RESOURCE_CATEGORIES,s as DEPLOYMENT_EVENT_STATUS_REASON_MAX,c as DEPLOYMENT_EVENT_TRAIL_DETAIL_MAX,a as DEPLOYMENT_EVENT_TYPES,t as DEPLOY_CORE_VERSION_GLOBAL,v as DEPLOY_EVENT_ARN_MAX,O as DEPLOY_EVENT_CONTRACT,f as DEPLOY_EVENT_CONTRACT_MAJOR,C as DEPLOY_EVENT_CONTRACT_MINOR,h as DEPLOY_EVENT_ERROR_MESSAGE_MAX,g as DEPLOY_EVENT_ID_MAX,I as DEPLOY_EVENT_MESSAGE_MAX,L as DEPLOY_EVENT_NAME_MAX,x as DEPLOY_EVENT_OUTPUT_MAX,y as DEPLOY_EVENT_STATUS_REASON_MAX,M as DEPLOY_EVENT_TRAIL_DETAIL_MAX,U as DEPLOY_EVENT_URL_MAX,V as DEPLOY_RESULTS,er as DESTRUCTION_FINDINGS,G as DETECTION_PHASES,on as DOMAIN_DELEGATION_ERROR_TYPES,Oi as DRIFT_PREFLIGHT_BUDGET_MS,Pi as DRIFT_PREFLIGHT_TRIGGER_STATUSES,ar as DRIFT_VERDICTS,p as DeployEventSchema,mo as DeployModeSchema,d as DeployResourceSchema,ao as DeploymentError,i as DeploymentEventSchema,ze as DestructionConsentSchema,We as DestructionFindingSchema,$e as DestructionOutcomeSchema,Ze as DestructionTicketResourceSchema,qe as DestructionTicketSchema,an as DomainDelegationError,Er as DriftFindingSchema,cr as DriftJournalRecordSchema,Ri as DriftProbe,da as DriftRepairAvailableError,sr as DriftSuspectSchema,nr as DriftVerdictSchema,Bt as EcsError,Gt as EcsService,Kt as EcsServiceResolver,Ji as FORGET_FLIP_SPEC,wi as FORGET_MARKER_KEY,so as FileSystemError,at as FjallStateFileSchema,Vn as FrameworkRegistry,ve as IDENTITY_STORE_PAGE_SIZE,zr as INFRASTRUCTURE_FILENAME,He as INFRASTRUCTURE_STEP_NAMES,we as INFRA_STEP_NAME,ut as LEGACY_DOMAIN_STATE_FILENAME,k as LOG_LEVELS,fa as LeaseDeniedError,Ba as MAX_ROOT_SESSION_SECONDS,Sn as NS_PROPAGATION_DEFAULT_INTERVAL_MS,cn as NS_PROPAGATION_DEFAULT_MAX_ATTEMPTS,no as NetworkError,Lr as OPENNEXT_DEPLOY_ORDER,Ir as OPENNEXT_DESTROY_ORDER,Mr as OPENNEXT_PARALLEL_GROUPS,jr as OPENNEXT_PATTERNS,Cr as ORGANISATION_TYPES,rn as ORG_SETUP_PHASES,si as ORG_TRAIL_BUCKET_OUTPUT_KEY,Za as OU_ONLY_ACCOUNT_BUCKETS,yr as PARALLEL_DEPLOY_GROUPS,hr as PARALLEL_DESTROY_GROUPS,xr as PARALLEL_OPERATION_TYPES,B as PHASE_STATUSES,H as PLAN_ACTIONS,Qt as PROGRESS_MESSAGES,sn as PUBLIC_DNS_QUERY_TIMEOUT_MS,u as PlanChangeSchema,D as PlanPropertyChangeSchema,Or as ProgressReporter,Qi as RECREATE_MARKER_KEY,Ui as REMEDIATION_JOURNAL_RETENTION_DAYS,Ar as REMEDIATION_PHASES,je as REMEDIATION_VERB_GLOSS,w as REPLACEMENT_MODES,Ve as ROOT_ACCESS_FEATURES,Ga as ROOT_TASK_POLICY_ARNS,_r as RemediationFlipProofSchema,pr as RemediationJournalRecordSchema,Rr as RemediationPhaseSchema,Tr as RemediationTargetSchema,Qe as RemediationVerbSchema,mr as RemediationVerbWithSurgerySchema,Ge as RootAccessEnablementError,be as SECURITY_SERVICE_PRINCIPALS,Te as SERVICE_PRINCIPALS,oa as SNAPSHOT_CAPABLE_RESOURCE_TYPES,b as STACK_CLEANUP_PHASES,Zr as STACK_FAILED_STATE_PATTERN,Wr as STACK_NOT_FOUND_PATTERN,F as STEP_COMPLETE_STATUSES,Ke as STEP_IDS,Xe as STEP_NAMES,N as SUPPORTED_CONTRACT_MARKERS,uo as ServiceArtefactSchema,Do as ServiceArtefactsSchema,$ as SimpleAwsProvider,Pa as StackUnavailableError,m as StepProgressSchema,wn as StepRegistry,tr as TICKET_VERDICT_SOURCES,Ei as TRAIL_BUCKET_OUTPUT_KEY,ci as TRAIL_KEY_ARN_OUTPUT_KEY,Ht as TemplateHashError,Xt as TemplateHashService,or as TicketVerdictSourceSchema,to as ValidationError,Ja as accountsConfigToOUTree,ge as activateCostAllocationTags,pe as activateTrustedAccess,ca as advertisableDriftVerbs,ds as advertisableRemediationVerbs,bi as applyRetainFlip,Ss as approvalRefusalReason,Ni as archiveCompletedRemediationJournal,po as artefactOutputKey,Oa as assertLeaseBeforeStack,ji as assessForgetResumability,Ya as assumeRootForTask,jo as buildAccountRegionPairs,Ce as buildAccountToOUMap,Un as buildBuildSecretSessionPolicy,jn as buildDeployPlan,Fn as buildDeploySessionPolicy,Rs as buildDestructionTicket,Sa as buildDriftRepairTicket,Qo as buildRegionList,On as buildSatelliteRecordIndex,Wt as buildStepContextBuildConfig,ie as buildTargetSetUnreadyAdvisory,oe as buildTargetUnreadyAdvisory,Fi as captureRemediationForensics,Wo as cascadeHomeRegion,Zo as cascadeOperationKey,ua as checkDeployPathStackAvailability,Le as checkIdentityCentreStatus,se as checkRegionEnabled,re as checkTargetReadiness,R as clampDeploymentEventStrings,li as classifyDriftFailure,zn as classifyImpact,Pn as classifyZoneRecords,Lt as clearDependencyIntegrityCache,Ti as clearDriftSuspects,Wi as completeForgetAfterConverge,Zi as completeForgetAfterDeploy,Yi as composeFlipCapabilities,pa as composePostFailureRepairOffer,ye as composeSdkAbortSignal,Zn as computeAssemblyDigest,Wn as computeDeployPlan,gi as computeRemediationOpId,Bo as computeSecretsDrift,Vi as computeTemplateDigest,_s as computeTicketDigest,Zt as convertCloudFormationOutputsToRecord,Pe as createAccount,W as createDeployEmitter,Et as createEmptyState,Os as createMemoisedPlanLoader,En as createPublicResolvers,go as createSequencedCallbacks,fn as createSystemDnsNameProbe,ii as decideNextTransition,ni as decommissionMemberTrailStorage,_i as defaultDriftJournalDir,ki as defaultRemediationForensicsDir,Li as defaultRemediationJournalDir,mn as deleteChildNsFromParent,mt as deleteDomainState,ct as deleteStateFile,Fo as deploy,Tn as deployDelegatedDomain,$n as derivePropertyChanges,aa as deriveRemovalTemplate,ot as deriveResourcesFromManifestStacks,Gi as deriveRetainFlipTemplate,Ko as deriveStaleParameters,le as describeOrganisation,te as describeTargetReadinessReason,bo as destroy,di as detectStackDrift,qn as digestHead,Xn as dockerBuilder,Ue as drainPages,Jt as emitProgress,Ye as enableCentralisedRootAccess,me as enableIpamDelegatedAdmin,Ae as enablePolicyTypes,_e as enableRamSharing,Re as enableServiceAccess,gt as ensureDependencyIntegrity,va as ensureEnforceSsl,Se as ensureOrganisationExists,Oe as ensureOrganisationalUnitsExist,Ts as evaluateDestructionConsents,ms as executableRemediationVerbs,wa as extractAllAccountNames,Xo as extractConsumedSsmParameters,he as extractErrorName,Mo as failure,Ai as fetchLastOperationEvents,Io as fileExists,lo as filterDangerousEnvVars,De as findAccount,Ne as findDevelopmentOuId,Bi as findMarkedResourcesByOpId,Ii as findRemediationJournalByOpId,na as findRemovalDeletionFailures,sa as findResourcesPresent,Ha as flattenAccountsToEnvironments,Di as formatDriftPreFlightBlock,ma as formatDriftRepairOffer,vt as formatInfrastructureError,Aa as formatPinOutcomeDetail,qi as formatRecreateInFlightCures,br as getApplicationDeployOrder,Yr as getApplicationDestroyOrder,Vr as getApplicationStackName,wr as getApplicationStepId,Hr as getApplicationStepName,Jn as getDestroyStepId,Gr as getOrganisationStackName,Fr as getParallelDeployGroups,kr as getParallelDestroyGroups,Ft as getSourceContext,lt as getStateFilePath,Ut as getStructuralHint,kt as hasCdkDifferences,Oo as hasDockerfile,dt as hashDomainDirectory,Me as isAborted,ja as isAccountsConfig,vr as isApplicationOperation,Br as isApplicationStack,xt as isCdkError,es as isDataLoss,Ln as isDelegatedToRoute53,Da as isDeployPathBlockingStatus,ya as isEnforceSslStatement,vo as isFailure,Fe as isOULeaf,Qr as isOpenNextPattern,Ur as isOrganisationOperation,Wa as isOuOnlyAccountBucket,Kr as isQuarantineDetail,Dr as isRemediationPlaceholderPhysicalId,Xr as isRetainedBucketsDetail,Va as isRootTaskPolicyArn,gn as isRoute53NameServer,rs as isStatefulResourceType,Qa as isStringArray,xo as isSuccess,ps as legalRemediationVerbs,ue as listAccounts,yi as listActiveRemediationOps,hi as listActiveRemediationOpsForContext,Ps as loadDeployPlan,Ao as maskSensitiveOutput,ti as mergeReconciledProviderAccounts,Nn as normaliseRecordName,dn as nsDelegationPhysicalName,Bn as openNextBuilder,Xa as parseAccountsConfiguration,jt as parseBuildPhase,q as parseDeployContractVersion,Z as parseDeployEvent,bt as parseDiffOutput,Ro as parseShellArgs,wo as partitionAccounts,kn as partitionForRegion,zi as partitionPreFlightByRemediation,Ra as pinProbeCoverage,fe as placeAccountsInOUs,ae as probeAccountStackExists,Go as probeSecretsDrift,$o as projectAccountRows,zo as projectScalarSummary,Ki as proveFlipMetadataOnly,Ea as proveRemovalTargetsOnly,Tt as readDomainState,pi as readDriftSuspects,Mi as readRemediationJournal,Xi as readRetainFlipState,nt as readStateFile,ri as reconcileProviderAccounts,ai as reconcileTrailMigration,pt as recordDomainDeployState,mi as recordDriftSuspects,Ee as regionDisabledMessage,At as regionSuffix,ke as registerSecurityDelegates,dr as remediationPhaseRank,ur as remediationPlaceholderPhysicalId,Ds as renderConsentVerdictLines,us as renderDestructionTicketLines,Ta as renderPinReportLines,os as renderPlanLines,ts as renderPlanSummary,vn as resolveBuildArgs,Mn as resolveBuildSecretSessionProvider,yn as resolveBuildSecrets,hn as resolveSecretRefValue,Vo as restart,Ua as restoreAndReconcileQuarantinedBucket,Ma as restoreBucketPolicy,cs as runApprovalGate,Rn as runCaaPreflight,un as runDelegatedDomainDestroy,As as runDestructionGate,ui as runDriftPreFlight,la as runDriftRepairGate,$i as runForgetSurgery,za as runOpenNextBuild,en as runOrganisationSetup,_a as runPinRemediation,ia as runRecreatePreFlight,ra as runRecreateSurgery,fi as runRoute53RecordPreflight,as as signApprovalToken,To as sleep,Co as sleepAbortable,Ie as snapshotIdentityCentre,ta as snapshotPolicyForType,xn as sourcedRefsFromBuildArgs,ht as startStackMonitoring,Kn as staticSiteBuilder,rt as stubCallerIdentity,ho as success,xi as sweepExpiredRemediationJournals,ea as synthTemplateDeclaresResource,xa as synthesiseEnforceSslDocument,Cn as systemDnsNameProbe,pn as templateOwnsDelegationRecord,Jr as toPascalCase,ha as toResourcePolicyStatements,co as toServiceError,is as toWirePlanChanges,Ia as triageBucketPolicy,T as truncateUtf16Safe,Na as unlockBucket,ga as unlockQueue,de as updateBackupGlobalSettings,St as updateTemplateHash,bn as validateBuildGroup,Sr as verbsForDriftVerdict,ns as verifyApprovalToken,ka as verifyOrgTrailDelivery,Hi as verifyRetainFlipDiff,ln as waitForNsPropagation,et as wrapApplicationError,_t as writeDomainState,vi as writeRemediationJournal,st as writeStateFile};

package/dist/src/types/deploymentEventSchema.d.ts

@@ -40,8 +40,8 @@ export type DeploymentEventCascadePhase = (typeof CASCADE_PHASES)[number];
 export type DeploymentEventCascadeAccountStatus = (typeof CASCADE_ACCOUNT_STATUSES)[number];
 export declare const DeploymentEventSchema: z.ZodObject<{
     type: z.ZodEnum<{
-        step: "step";
         error: "error";
+        step: "step";
         resource: "resource";
         docker: "docker";
         ecs: "ecs";

package/dist/src/version.d.ts

@@ -1 +1,15 @@
+/**
+ * Name of the build-time injected global (resolution 1 above). Exported so the
+ * wrapper build script derives its banner assignment from the same literal
+ * this module reads — a writer-side rename otherwise ships a bundle whose
+ * version resolves `undefined` and no typecheck or test would catch it.
+ */
+export declare const DEPLOY_CORE_VERSION_GLOBAL = "__FJALL_DEPLOY_CORE_VERSION__";
+/**
+ * Walks up from `startDir` to the nearest `package.json` whose `name` is
+ * `@fjall/deploy-core` and returns its `version`. Returns `undefined` when no
+ * such package.json exists on the ancestor chain (e.g. inside the published
+ * wrapper bundle, where the only ancestor package.json is named `"fjall"`).
+ */
+export declare function resolveDeployCoreVersionFrom(startDir: string): string | undefined;
 export declare const DEPLOY_CORE_VERSION: string | undefined;

package/dist/src/version.js

@@ -1 +1 @@
-var s=Object.defineProperty;var t=(r,o)=>s(r,"name",{value:o,configurable:!0});import{fileURLToPath as f}from"url";import{dirname as i,join as a,parse as m}from"path";import{existsSync as p,readFileSync as c}from"fs";import{logger as l}from"@fjall/util/logger";import{maskSensitiveOutput as d}from"@fjall/util";const u="@fjall/deploy-core";function g(){try{let r=i(f(import.meta.url));const{root:o}=m(r);for(;;){const n=a(r,"package.json");if(p(n)){const e=JSON.parse(c(n,"utf8"));if(e.name===u&&typeof e.version=="string"&&e.version.length>0)return e.version}if(r===o)return;r=i(r)}}catch(r){l.debug("deploy-core","Could not resolve own version",{error:d(r instanceof Error?r.message:String(r))});return}}t(g,"resolveDeployCoreVersion");const h=g();export{h as DEPLOY_CORE_VERSION};
+var f=Object.defineProperty;var t=(r,e)=>f(r,"name",{value:e,configurable:!0});import{fileURLToPath as c}from"url";import{dirname as i,join as l,parse as p}from"path";import{existsSync as a,readFileSync as m}from"fs";import{logger as u}from"@fjall/util/logger";import{maskSensitiveOutput as d}from"@fjall/util";const g="@fjall/deploy-core",_="__FJALL_DEPLOY_CORE_VERSION__";function E(r){try{let e=r;const{root:s}=p(e);for(;;){const n=l(e,"package.json");if(a(n)){const o=JSON.parse(m(n,"utf8"));if(o.name===g&&typeof o.version=="string"&&o.version.length>0)return o.version}if(e===s)return;e=i(e)}}catch(e){u.debug("deploy-core","Could not resolve own version",{error:d(e instanceof Error?e.message:String(e))});return}}t(E,"resolveDeployCoreVersionFrom");function O(){const r=Reflect.get(globalThis,_);return typeof r=="string"&&r.length>0?r:E(i(c(import.meta.url)))}t(O,"resolveDeployCoreVersion");const h=O();export{h as DEPLOY_CORE_VERSION,_ as DEPLOY_CORE_VERSION_GLOBAL,E as resolveDeployCoreVersionFrom};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fjall/deploy-core",
-  "version": "4.3.0",
+  "version": "4.4.0",
   "description": "Shared deployment engine for Fjall — used by CLI and webapp worker",
   "type": "module",
   "main": "dist/src/index.js",
@@ -37,7 +37,8 @@
     "./steps": {
       "types": "./dist/src/steps/index.d.ts",
       "default": "./dist/src/steps/index.js"
-    }
+    },
+    "./package.json": "./package.json"
   },
   "files": [
     "dist/"
@@ -88,8 +89,8 @@
     "@aws-sdk/client-ssm": "^3.1038.0",
     "@aws-sdk/client-sso-admin": "^3.1038.0",
     "@aws-sdk/client-sts": "^3.1038.0",
-    "@fjall/generator": "^4.3.0",
-    "@fjall/util": "^4.3.0",
+    "@fjall/generator": "^4.4.0",
+    "@fjall/util": "^4.4.0",
     "@smithy/node-http-handler": "^4.6.1",
     "aws-cdk": "^2.1128.1",
     "tsx": "^4.21.0",
@@ -100,5 +101,5 @@
     "typescript": "^6.0.3",
     "vitest": "^4.1.5"
   },
-  "gitHead": "8a3ae096f9d15c47dc8c277c9bddfa40e4168c19"
+  "gitHead": "c700128600ab453fa63ce28b3effe8965373be43"
 }