@fjall/util 23.0.0 → 25.0.0

package/dist/.build-source-hash

@@ -9,7 +9,7 @@
     "package.json",
     "tsconfig.json"
   ],
-  "hash": "530f54e5f0a172b22cf6590c868bced0b89f2e67809446782c6702e3bf3feb78",
+  "hash": "eeb70d44bff2fbe0e5823b89e00551a200725c14baf070f614c20d742d2975dd",
   "files": {
     "src/async/concurrency.ts": "3c7ebe0222a720f9",
     "src/async/singleton.ts": "7bcc21b0fb920561",
@@ -33,7 +33,7 @@
     "src/cdkToolchain.ts": "a6b996c60b87d644",
     "src/cfn/physicalNameProperties.ts": "35d3c6f28079c593",
     "src/clickhouse.ts": "655c74cdba292c29",
-    "src/config.ts": "64887717f4eba63f",
+    "src/config.ts": "356b552c05b462e5",
     "src/configPaths.ts": "afcc2e4ceb6652a0",
     "src/constructMap.ts": "b81fc8e90015467f",
     "src/deploy/approvalTokenOutput.ts": "4be7b52825d88a37",
@@ -63,16 +63,16 @@
     "src/docker/rawjsonParser.ts": "b9e5218abc326fa5",
     "src/docker/rawjsonToVertexEvent.ts": "a356190727f0d1a4",
     "src/docker/result.ts": "2ff0d59a3add8b06",
-    "src/environments.ts": "b3d2f2493554cd0f",
+    "src/environments.ts": "a05afb198a7b67ce",
     "src/errorUtils.ts": "c601f2905c74b8d0",
     "src/errors/absence.ts": "390fea350ffbb4e5",
     "src/failure/deploymentFailure.ts": "5824db1d97d01838",
     "src/failure/extractErrorWindow.ts": "ca41f90946fa939c",
-    "src/fjallHome.ts": "d7c48a6444e21699",
+    "src/fjallHome.ts": "032df8e58d7e29cd",
     "src/fsHelpers.ts": "4dd3877b3953c6a9",
     "src/fsScan.ts": "feb187758481443f",
     "src/httpKeepAlive.ts": "c8fe4b118ef4c79f",
-    "src/index.ts": "32834272a48e9483",
+    "src/index.ts": "729256264d61d2be",
     "src/infra/backupVault.ts": "661678a6dfb0b648",
     "src/infra/connectionsWire.ts": "e3afa3ba95a531d8",
     "src/infra/deployArtefacts.ts": "235ac21dd3ccf0b2",
@@ -82,7 +82,7 @@
     "src/infra/regions.ts": "26b80d7cea05454c",
     "src/infra/tokenScopes.ts": "88c6a1f0da3fa491",
     "src/insights/computePatternFingerprint.ts": "b5d3a4704f42cc1f",
-    "src/logRotation.ts": "4039ae64980f80b5",
+    "src/logRotation.ts": "5ea989894082107b",
     "src/logger.ts": "865ec4ec62a9a588",
     "src/manifest/index.ts": "bfa2930556c2f8ad",
     "src/manifest/io.ts": "915ab602ac92d126",
@@ -107,8 +107,8 @@
     "src/onboarding/index.ts": "7999117c5a7a18d1",
     "src/onboarding/versionCurrency.ts": "19695f38b09cfc46",
     "src/patterns/frameworkPatterns.ts": "0f843cb043eb11fc",
-    "src/patterns/index.ts": "796c656a81bb39d0",
-    "src/patterns/patternTypes.ts": "28c3c5bc40d66798",
+    "src/patterns/index.ts": "8c765d60d672f7f7",
+    "src/patterns/patternTypes.ts": "549b06ec2a3a696e",
     "src/patterns/staticSiteForms.ts": "86ffcf142d9a8eac",
     "src/repo/appPath.ts": "9aa0d01262b88e65",
     "src/repo/findInfrastructurePaths.ts": "dd1245f5d4004dd5",
@@ -125,9 +125,9 @@
     "src/securityHelpers.ts": "1e68e1330c6da971",
     "src/targets.ts": "126280f0a5762e21",
     "../scripts/minify-dist.mjs": "6b2e4b0df8aec601",
-    "package.json": "1fa2d1d0f2d46345",
+    "package.json": "ed0ddd48c1bc5098",
     "tsconfig.json": "db759831ad95f396"
   },
-  "outputHash": "0e7359be2d17098165ea61be5189d5454426ddc3d04c2254263e3d30a838604a",
+  "outputHash": "44660064f7e77458745187a882c4bb1eaef26fc06af740f5ca7ba88d630f6e73",
   "outputFileCount": 235
 }

package/dist/.minified

@@ -1 +1 @@
-117 files minified at 2026-08-30T05:33:57.362Z
+117 files minified at 2026-08-31T01:55:44.825Z

package/dist/config.d.ts

@@ -115,6 +115,14 @@ export type ProviderAccount = {
      */
     acknowledgeTrailHistoryLoss?: boolean;
 };
+/**
+ * Assertion-only PUT entry for the org-config provider-accounts write. The
+ * API preserves every axis the payload does not carry (absent ≠ null: null
+ * clears the stage, absent leaves the stored value alone), so producers push
+ * only the fields they actually know — fabricating a name or a null stage for
+ * an unknown account overwrites curated registry state.
+ */
+export type ProviderAccountUpdate = Pick<ProviderAccount, "id"> & Partial<Omit<ProviderAccount, "id">>;
 export type Profile = {
     type: "sso" | "oidc";
     region: string;

package/dist/environments.d.ts

@@ -97,6 +97,54 @@ export declare function isGovernanceTier(tier: string): boolean;
  * role from a stage. See decisions/2026-06-07-account-tier-vs-stage-separation.md.
  */
 export declare function environmentToTier(environment: string | null | undefined): AccountTier;
+/**
+ * What choosing a workload STAGE does to an account's structural TIER, and
+ * what that costs the caller. The two axes are independent — nothing derives
+ * one from the other on a write path — but they share the literal "platform",
+ * and the normal connect path sends no explicit tier, so
+ * [[environmentToTier]] decides the tier from the stage the caller picked. A
+ * caller shown the five stages as five equal choices cannot see that one of
+ * them lands the account on a tier no application can target.
+ *
+ * `tier` and `targetable` are DERIVED from [[environmentToTier]], the single
+ * sanctioned decoder, so they cannot drift from what a connect actually does.
+ * Only the copy is authored, and `Record<AccountStage, …>` below means a new
+ * stage does not compile until someone states its consequence.
+ */
+export interface AccountStageEffect {
+    readonly stage: AccountStage;
+    readonly label: string;
+    /** The tier a connect lands on when it sends this stage and no explicit tier. */
+    readonly tier: AccountTier;
+    /**
+     * Whether an application can deploy to an account on this stage. False for
+     * structural tiers: they are filtered out of account pickers and their
+     * deploys are governance operations.
+     */
+    readonly targetable: boolean;
+    /** One-line hint for a picker row (Ink `SelectOption.description`). */
+    readonly summary: string;
+    /** Full prose consequence for documentation and agent-skill surfaces. */
+    readonly consequence: string;
+}
+/** Resolve the tier consequence of a workload stage. */
+export declare function accountStageEffect(stage: AccountStage): AccountStageEffect;
+/**
+ * Every workload stage with its tier consequence, in [[ACCOUNT_STAGES]] order.
+ * Surfaces that PRESENT the stage list to a human or an agent render from this
+ * rather than restating the tuple, so the consequence travels with the option.
+ * See decisions/2026-06-07-account-tier-vs-stage-separation.md.
+ */
+export declare const ACCOUNT_STAGE_EFFECTS: readonly AccountStageEffect[];
+/**
+ * The stage list for a ONE-LINE surface — `--environment` flag help, the
+ * non-interactive "valid environments" error — with any structural stage
+ * marked inline. Surfaces with room for a full sentence render
+ * [[ACCOUNT_STAGE_EFFECTS]] and its `summary`/`consequence` instead; this is
+ * the degenerate rendering for places that get one line, and it exists so
+ * those places are not the last flat `ACCOUNT_STAGES.join(", ")` left.
+ */
+export declare function formatAccountStageList(): string;
 /**
  * Decode an inbound wire `environment` to its workload STAGE, or null. "root"
  * (the management account — no workloads), empty, null, or any unknown string

package/dist/environments.js

@@ -1 +1 @@
-var u=Object.defineProperty;var n=(t,c)=>u(t,"name",{value:c,configurable:!0});import{z as O}from"zod";const e=["production","staging","development","platform","compliance"],a={production:"Production",staging:"Staging",development:"Development",platform:"Platform",compliance:"Compliance"},p=new Set(e);function T(t){return p.has(t)}n(T,"isAccountStage");const o={ROOT:"root",PLATFORM:"platform"},l=[...e,o.ROOT];function _(t){return T(t)?a[t]:t.charAt(0).toUpperCase()+t.slice(1)}n(_,"getEnvironmentLabel");const i=["organisation","platform","account"],m=O.enum(i),r={ORGANISATION:"organisation",PLATFORM:"platform",ACCOUNT:"account"},A={[r.ORGANISATION]:!0,[r.PLATFORM]:!0,[r.ACCOUNT]:!0},C=new Set(Object.keys(A));function x(t){return C.has(t)}n(x,"isAccountTier");const s=i.filter(t=>t!==r.ACCOUNT),E=new Set(s);function U(t){return E.has(t)}n(U,"isGovernanceTier");function R(t){return t===o.ROOT?"organisation":t===o.PLATFORM?"platform":"account"}n(R,"environmentToTier");function g(t){return t==null||t===""||t===o.ROOT?null:T(t)?t:null}n(g,"stageFromWireEnvironment");function S(t){return t.tier??R(t.environment)}n(S,"accountTier");function I(t){return S(t)==="organisation"?o.ROOT:t.environment??void 0}n(I,"resolveSynthEnvironment");export{r as ACCOUNT_ROLES,e as ACCOUNT_STAGES,l as ACCOUNT_STAGES_WITH_ROOT,a as ACCOUNT_STAGE_LABELS,i as ACCOUNT_TIERS,m as AccountTierSchema,s as GOVERNANCE_ACCOUNT_TIERS,o as STRUCTURAL_ENVIRONMENTS,S as accountTier,R as environmentToTier,_ as getEnvironmentLabel,T as isAccountStage,x as isAccountTier,U as isGovernanceTier,I as resolveSynthEnvironment,g as stageFromWireEnvironment};
+var T=Object.defineProperty;var e=(t,r)=>T(t,"name",{value:r,configurable:!0});import{z as O}from"zod";const c=["production","staging","development","platform","compliance"],s={production:"Production",staging:"Staging",development:"Development",platform:"Platform",compliance:"Compliance"},m=new Set(c);function u(t){return m.has(t)}e(u,"isAccountStage");const n={ROOT:"root",PLATFORM:"platform"},h=[...c,n.ROOT];function U(t){return u(t)?s[t]:t.charAt(0).toUpperCase()+t.slice(1)}e(U,"getEnvironmentLabel");const p=["organisation","platform","account"],x=O.enum(p),o={ORGANISATION:"organisation",PLATFORM:"platform",ACCOUNT:"account"},A={[o.ORGANISATION]:!0,[o.PLATFORM]:!0,[o.ACCOUNT]:!0},C=new Set(Object.keys(A));function y(t){return C.has(t)}e(y,"isAccountTier");const f=p.filter(t=>t!==o.ACCOUNT),E=new Set(f);function v(t){return E.has(t)}e(v,"isGovernanceTier");function l(t){return t===n.ROOT?"organisation":t===n.PLATFORM?"platform":"account"}e(l,"environmentToTier");const a="Workload account \xB7 applications deploy here",i="Workload account. Applications deploy here, it appears in `fjall accounts list`, and it is selectable as a deploy target.",d={production:{summary:a,consequence:i},staging:{summary:a,consequence:i},development:{summary:a,consequence:i},compliance:{summary:a,consequence:"Workload account, conventionally reserved for audit and compliance workloads. Otherwise a normal deploy target."},platform:{summary:"Structural \xB7 shared infrastructure, NOT an app deploy target",consequence:'Structural, not a workload environment: "platform" is also a TIER name, and the connect path derives the tier from the environment, so choosing it registers the account on the platform tier. That tier hosts shared infrastructure (IPAM, Transit Gateway): it is filtered OUT of `fjall accounts list`, no application can target it, and deploying to it is a governance operation needing the `deploy:governance` grant. Choose it only for a genuine shared-services account \u2014 never as "the environment my app runs in".'}};function S(t){const r=l(t);return{stage:t,label:s[t],tier:r,targetable:r===o.ACCOUNT,...d[t]}}e(S,"accountStageEffect");const g=c.map(S);function I(){return g.map(t=>t.targetable?t.stage:`${t.stage} (structural \u2014 not an app deploy target)`).join(", ")}e(I,"formatAccountStageList");function L(t){return t==null||t===""||t===n.ROOT?null:u(t)?t:null}e(L,"stageFromWireEnvironment");function N(t){return t.tier??l(t.environment)}e(N,"accountTier");function G(t){return N(t)==="organisation"?n.ROOT:t.environment??void 0}e(G,"resolveSynthEnvironment");export{o as ACCOUNT_ROLES,c as ACCOUNT_STAGES,h as ACCOUNT_STAGES_WITH_ROOT,g as ACCOUNT_STAGE_EFFECTS,s as ACCOUNT_STAGE_LABELS,p as ACCOUNT_TIERS,x as AccountTierSchema,f as GOVERNANCE_ACCOUNT_TIERS,n as STRUCTURAL_ENVIRONMENTS,S as accountStageEffect,N as accountTier,l as environmentToTier,I as formatAccountStageList,U as getEnvironmentLabel,u as isAccountStage,y as isAccountTier,v as isGovernanceTier,G as resolveSynthEnvironment,L as stageFromWireEnvironment};

package/dist/fjallHome.d.ts

@@ -5,6 +5,20 @@
  * `configPaths.ts`. That one names state that lives beside a checkout; this
  * one names state that lives beside the *operator*.
  *
+ * ## Why the Node built-ins are resolved per call, not statically imported
+ *
+ * This module is re-exported by the root barrel, and the webapp imports that
+ * barrel from BROWSER code (130+ client files, `maskSensitiveOutput` above
+ * all). A browser bundler that cannot tree-shake — Vite's dev server serving
+ * the package raw — evaluates every barrel module, and a static
+ * `import { homedir } from "node:os"` throws at evaluation time against the
+ * browser-external stub, killing hydration on every page. `process
+ * .getBuiltinModule` (Node ≥ 22.3, below our engines floor) is the
+ * runtime-agnostic form: nothing is referenced at module scope, and the
+ * functions below only ever run in Node. The barrel-reachability test
+ * (`__tests__/barrelBrowserSafety.test.ts`) pins the class for the whole
+ * package.
+ *
  * ## Why this is a seam and not a constant
  *
  * `~/.fjall/auth.json` holds exactly one API key, so the CLI can be logged

package/dist/fjallHome.js

@@ -1 +1 @@
-var i=Object.defineProperty;var r=(o,f)=>i(o,"name",{value:f,configurable:!0});import{homedir as L}from"node:os";import{join as t,resolve as e}from"node:path";const u="FJALL_CONFIG_DIR",c=".fjall";function s(){const o=process.env[u];return o!==void 0&&o!==""?e(o):t(L(),c)}r(s,"fjallHomeDir");function n(...o){return t(s(),...o)}r(n,"fjallStatePath");const _="auth.json";function F(){return n(_)}r(F,"fjallCredentialsPath");const l="FJALL_LOG_DIR";function I(){const o=process.env[l];return o!==void 0&&o!==""?e(o):n("logs")}r(I,"fjallLogDir");export{u as FJALL_CONFIG_DIR_ENV,_ as FJALL_CREDENTIALS_FILENAME,c as FJALL_HOME_DIRNAME,l as FJALL_LOG_DIR_ENV,F as fjallCredentialsPath,s as fjallHomeDir,I as fjallLogDir,n as fjallStatePath};
+var u=Object.defineProperty;var n=(e,r)=>u(e,"name",{value:r,configurable:!0});function i(){return process.getBuiltinModule("node:os")}n(i,"nodeOs");function o(){return process.getBuiltinModule("node:path")}n(o,"nodePath");const s="FJALL_CONFIG_DIR",c=".fjall";function l(){const e=process.env[s];return e!==void 0&&e!==""?o().resolve(e):o().join(i().homedir(),c)}n(l,"fjallHomeDir");function t(...e){return o().join(l(),...e)}n(t,"fjallStatePath");const f="auth.json";function _(){return t(f)}n(_,"fjallCredentialsPath");const L="FJALL_LOG_DIR";function p(){const e=process.env[L];return e!==void 0&&e!==""?o().resolve(e):t("logs")}n(p,"fjallLogDir");export{s as FJALL_CONFIG_DIR_ENV,f as FJALL_CREDENTIALS_FILENAME,c as FJALL_HOME_DIRNAME,L as FJALL_LOG_DIR_ENV,_ as fjallCredentialsPath,l as fjallHomeDir,p as fjallLogDir,t as fjallStatePath};

package/dist/index.d.ts

@@ -13,7 +13,7 @@ export { singleton } from "./async/singleton.js";
 export { DANGEROUS_ENV_VARS, filterDangerousEnvVars, MASKED_VALUE_MARKER, maskSensitiveOutput, parseShellArgs, REDACTED_KEY_SENTINEL, SCOPED_TOKEN_REGEX } from "./securityHelpers.js";
 export { sleep } from "./async/sleep.js";
 export { mapSettledWithConcurrency } from "./async/concurrency.js";
-export { ACCOUNT_STAGES_WITH_ROOT, STRUCTURAL_ENVIRONMENTS, ACCOUNT_STAGES, ACCOUNT_STAGE_LABELS, isAccountStage, ACCOUNT_TIERS, type AccountTier, AccountTierSchema, isAccountTier, GOVERNANCE_ACCOUNT_TIERS, isGovernanceTier, environmentToTier, stageFromWireEnvironment, accountTier, resolveSynthEnvironment, type AccountStageWithRoot, type AccountStage, getEnvironmentLabel, ACCOUNT_ROLES } from "./environments.js";
+export { ACCOUNT_STAGES_WITH_ROOT, STRUCTURAL_ENVIRONMENTS, ACCOUNT_STAGES, ACCOUNT_STAGE_LABELS, isAccountStage, ACCOUNT_TIERS, type AccountTier, AccountTierSchema, isAccountTier, GOVERNANCE_ACCOUNT_TIERS, isGovernanceTier, environmentToTier, type AccountStageEffect, accountStageEffect, ACCOUNT_STAGE_EFFECTS, formatAccountStageList, stageFromWireEnvironment, accountTier, resolveSynthEnvironment, type AccountStageWithRoot, type AccountStage, getEnvironmentLabel, ACCOUNT_ROLES } from "./environments.js";
 export { RESOURCE_CATEGORIES, type ResourceCategory, categoriseResource, getExpectedDuration, getFriendlyResourceType } from "./resourceCategorisation.js";
 export { parseGitRemoteUrl, type GitProvider, type ParsedGitRemote } from "./repo/gitRemoteParser.js";
 export { abbreviateRegion, AWS_REGIONS_METADATA, DEFAULT_REGION, getRegionInfo, MAX_SECONDARY_REGIONS, OPT_IN_REGION_CODES, optInRegionWarning, regions, suggestRegionForTimezone, type RegionCode, type RegionInfo } from "./infra/regions.js";
@@ -33,7 +33,7 @@ export { MIGRATION_SNAPSHOT_NAME_PREFIX, EXPECTED_SCHEMA_VERSION_ENV, EXPECTED_S
 export { SCHEMA_GATE_EXIT, SCHEMA_GATE_EXIT_HINTS, schemaGateExitKind, type SchemaGateExitKind, type SchemaGateExitCode } from "./migration/schemaGateExit.js";
 export { FJALL_SCHEMA_GATE_USER, FJALL_MAINTENANCE_USER, FJALL_CLICKHOUSE_USERS, type FjallClickHouseUser } from "./migration/clickhouseFrameworkUsers.js";
 export { PHYSICAL_NAME_FALLBACK_PROPERTIES } from "./cfn/physicalNameProperties.js";
-export { PATTERN_TYPE_VALUES, type PatternType, PATTERN_TYPES, isPatternType, type PatternArtefact, type PatternStackPlacement, type PatternDescriptor, PATTERN_REGISTRY, patternConstructId, DEPLOYABLE_PATTERN_TYPES, type OpenNextPatternType, OPENNEXT_PATTERN_TYPES, isOpenNextPatternType, STATIC_SITE_ROUTING_VALUES, STATIC_SITE_ROUTING_INFO, type StaticSiteRouting, type StaticSiteRoutingDescriptor, PATTERN_CREATE_INPUT_VALUES, type PatternCreateInput, PATTERN_CREATE_INPUT_FLAGS } from "./patterns/patternTypes.js";
+export { PATTERN_TYPE_VALUES, type PatternType, PATTERN_TYPES, isPatternType, type PatternArtefact, type PatternStackPlacement, type PatternDescriptor, PATTERN_REGISTRY, patternConstructId, DEPLOYABLE_PATTERN_TYPES, type OpenNextPatternType, OPENNEXT_PATTERN_TYPES, isOpenNextPatternType, CLOUDFRONT_PRICE_CLASS_VALUES, type CloudFrontPriceClass, STATIC_SITE_CONFIG_KEYS, type StaticSiteConfigKey, STATIC_SITE_DEPLOY_INJECTED_KEYS, type StaticSiteDeployInjectedKey, STATIC_SITE_CDN_CONFIG_KEYS, type StaticSiteCdnConfigKey, STATIC_SITE_ROUTING_VALUES, STATIC_SITE_ROUTING_INFO, type StaticSiteRouting, type StaticSiteRoutingDescriptor, PATTERN_CREATE_INPUT_VALUES, type PatternCreateInput, PATTERN_CREATE_INPUT_FLAGS } from "./patterns/patternTypes.js";
 export { FRAMEWORK_VALUES, type Framework, FRAMEWORKS, isFramework, type DeployablePatternType, type UndeployablePatternType, type PatternRecommendation, FRAMEWORK_PATTERN_RECOMMENDATIONS, recommendPatternForFramework, CREATABLE_FRAMEWORKS, requiredInputsForFramework } from "./patterns/frameworkPatterns.js";
 export { DEFAULT_FORMS_FROM_LOCAL_PART, defaultFormsFromAddress, defaultFormsCorsOrigin, isAddressAtDomain } from "./patterns/staticSiteForms.js";
 export { DEV_SUBSTRATE_PARAMS_SCHEMA_VERSION, DEV_SUBSTRATE_PARAMS_FILENAME, DevSubstrateSynthPropsSchema, type DevSubstrateSynthProps, DevSubstrateParamsSchema, type DevSubstrateParams } from "./devSubstrate/params.js";

package/dist/index.js

@@ -1 +1 @@
-import{DNS_APEX as r,getDomainExportNames as _,getDomainStackName as A,getDomainUsEast1CertificatesStackName as o,hostsExportPartName as t,serialiseHostsChunks as T,HOSTS_OUTPUT_MAX_BYTES as S,isManagedDomainBinding as a,DOMAIN_DEPLOY_DEFAULT_PHASE as N}from"./infra/domainExports.js";import{BACKUP_VAULT_NAME as i}from"./infra/backupVault.js";import{APPROVAL_TOKEN_OUTPUT_PREFIX as O,TOKEN_STDERR_PREFIX as m}from"./deploy/approvalTokenOutput.js";import{imageTagParameterName as C}from"./infra/imageTags.js";import{toPascalCase as L,toKebab as s,toValidDatabaseName as p,toScreamingSnake as D,capitalise as M,getSafeZoneName as c,accountConstructKey as f,hasAsciiStableConstructKey as F}from"./naming/caseConversion.js";import{albDnsExportName as l,albHostedZoneIdExportName as u,cdnDomainExportName as d,bucketWebsiteEndpointExportName as x,bucketWebsiteHostedZoneIdExportName as g}from"./naming/targetExportNames.js";import{CAPACITY_SLOT_PATTERN as h,CAPACITY_SLOT_MAX_LENGTH as H,DEFAULT_CAPACITY_SLOT as V,CAPACITY_ANCHOR_PATTERN as Y,CAPACITY_ANCHOR_MAX_LENGTH as y,CAPACITY_IDENTITY_CONTEXT_KEY as K,CapacityIdentityPinSchema as v,CapacityIdentityWireSchema as X,CapacityIdentityConfigSchema as b,projectCapacityIdentityToTarget as B}from"./capacityIdentity.js";import{findAccountNameCollision as J}from"./naming/accountNameCollision.js";import{defaultConnectedAccountName as j,suffixedAccountName as w,REGION_SHORT_CODES as Z,findTrailingRegionShortCode as q,regionSuffixRejectionMessage as z}from"./naming/connectedAccountName.js";import{normaliseError as $,getErrorMessage as ee,hasErrorCode as Ee,getErrorCode as re,getErrorStack as _e,formatErrorString as Ae}from"./errorUtils.js";import{FJALL_CONFIG_DIR_ENV as te,FJALL_CREDENTIALS_FILENAME as Te,FJALL_HOME_DIRNAME as Se,FJALL_LOG_DIR_ENV as ae,fjallCredentialsPath as Ne,fjallHomeDir as Re,fjallLogDir as ie,fjallStatePath as ne}from"./fjallHome.js";import{singleton as me}from"./async/singleton.js";import{DANGEROUS_ENV_VARS as Ce,filterDangerousEnvVars as Pe,MASKED_VALUE_MARKER as Le,maskSensitiveOutput as se,parseShellArgs as pe,REDACTED_KEY_SENTINEL as De,SCOPED_TOKEN_REGEX as Me}from"./securityHelpers.js";import{sleep as fe}from"./async/sleep.js";import{mapSettledWithConcurrency as Ue}from"./async/concurrency.js";import{ACCOUNT_STAGES_WITH_ROOT as ue,STRUCTURAL_ENVIRONMENTS as de,ACCOUNT_STAGES as xe,ACCOUNT_STAGE_LABELS as ge,isAccountStage as Ge,ACCOUNT_TIERS as he,AccountTierSchema as He,isAccountTier as Ve,GOVERNANCE_ACCOUNT_TIERS as Ye,isGovernanceTier as ye,environmentToTier as Ke,stageFromWireEnvironment as ve,accountTier as Xe,resolveSynthEnvironment as be,getEnvironmentLabel as Be,ACCOUNT_ROLES as We}from"./environments.js";import{RESOURCE_CATEGORIES as ke,categoriseResource as je,getExpectedDuration as we,getFriendlyResourceType as Ze}from"./resourceCategorisation.js";import{parseGitRemoteUrl as ze}from"./repo/gitRemoteParser.js";import{abbreviateRegion as $e,AWS_REGIONS_METADATA as eE,DEFAULT_REGION as EE,getRegionInfo as rE,MAX_SECONDARY_REGIONS as _E,OPT_IN_REGION_CODES as AE,optInRegionWarning as oE,regions as tE,suggestRegionForTimezone as TE}from"./infra/regions.js";import{SCOPE_VALUES as aE,MACHINE_ONLY_SCOPES as NE,USER_GRANTABLE_SCOPES as RE,GOVERNANCE_SCOPE_REQUIRED_CODE as iE}from"./infra/tokenScopes.js";import{SECRET_NAME_PATTERN as OE,SECRET_NAME_ERROR as mE,SSM_COMPONENT_PATTERN as IE,SSM_COMPONENT_ERROR as CE,SSM_STANDARD_MAX_VALUE_BYTES as PE,SecretNamespaceSchema as LE,buildNamespaceParts as sE,buildParameterPath as pE,parseParameterPath as DE,isManageablePath as ME,parseDotEnv as cE,escapeDotEnvValue as fE}from"./secrets.js";import{ConnectionWireSchema as UE,ConnectionsListResponseSchema as lE,CONNECTION_PHASES as uE,CONNECTION_TERMINAL_FAILURE_PHASES as dE,CONNECTION_FAILURE_REASONS as xE,EXTERNAL_ID_PATTERN as gE}from"./infra/connectionsWire.js";import{PUBLIC_PACKAGE_NAME as hE,INSTALL_SOURCES as HE,SETUP_COMMANDS as VE,upgradeCommand as YE,SETUP_MODES as yE,SETUP_STEP_IDS as KE,SETUP_STEPS as vE,AGENT_SETUP_PROMPTS as XE,AGENT_INSTALL_COMMAND as bE,SKILL_INSTALL_SEGMENTS as BE,SKILL_INSTALL_FILENAME as WE,SKILL_INSTALL_PATH as JE}from"./onboarding/index.js";import{deriveRegionsFromOrgConfig as jE,deriveTargets as wE,deriveAllTargets as ZE,environmentOrTier as qE,findTarget as zE,generateTargetName as QE}from"./targets.js";import{buildAppConfigPath as er}from"./repo/appPath.js";import{findInfrastructurePaths as rr,findBoundaryPath as _r,isInfrastructureFile as Ar}from"./repo/findInfrastructurePaths.js";import{inferContainerFromCandidates as tr}from"./repo/inferContainerFromCandidates.js";import{RESERVED_APP_NAMES as Sr,RESERVED_APP_NAME_MESSAGE as ar,isReservedAppName as Nr,RESERVED_APP_NAME_SUFFIX as Rr,RESERVED_APP_NAME_SUFFIX_MESSAGE as ir,hasReservedAppNameSuffix as nr}from"./naming/reservedAppNames.js";import{deriveContentHashTag as mr,CONTENT_HASH_TAG_PATTERN as Ir}from"./infra/deriveContentHashTag.js";import{DEPLOY_MODES as Pr,DeployModeSchema as Lr,IMAGE_TAG_PATTERN as sr,ImageTagSchema as pr,ServiceArtefactSchema as Dr,ServiceArtefactsSchema as Mr,ARTEFACT_OUTPUT_FIELDS as cr,artefactOutputKey as fr}from"./infra/deployArtefacts.js";import{MIGRATION_SNAPSHOT_NAME_PREFIX as Ur,EXPECTED_SCHEMA_VERSION_ENV as lr,EXPECTED_SCHEMA_VERSION_TOOL_ENV as ur,EXPECTED_CH_SCHEMA_VERSION_ENV as dr,SCHEMA_ADMIN_USER_ENV as xr,SCHEMA_ADMIN_PASSWORD_ENV as gr,PRISMA_MIGRATION_DIR_RE as Gr,CLICKHOUSE_MIGRATION_SKIP_RE as hr}from"./migration/constants.js";import{SCHEMA_GATE_EXIT as Vr,SCHEMA_GATE_EXIT_HINTS as Yr,schemaGateExitKind as yr}from"./migration/schemaGateExit.js";import{FJALL_SCHEMA_GATE_USER as vr,FJALL_MAINTENANCE_USER as Xr,FJALL_CLICKHOUSE_USERS as br}from"./migration/clickhouseFrameworkUsers.js";import{PHYSICAL_NAME_FALLBACK_PROPERTIES as Wr}from"./cfn/physicalNameProperties.js";import{PATTERN_TYPE_VALUES as kr,PATTERN_TYPES as jr,isPatternType as wr,PATTERN_REGISTRY as Zr,patternConstructId as qr,DEPLOYABLE_PATTERN_TYPES as zr,OPENNEXT_PATTERN_TYPES as Qr,isOpenNextPatternType as $r,STATIC_SITE_ROUTING_VALUES as e_,STATIC_SITE_ROUTING_INFO as E_,PATTERN_CREATE_INPUT_VALUES as r_,PATTERN_CREATE_INPUT_FLAGS as __}from"./patterns/patternTypes.js";import{FRAMEWORK_VALUES as o_,FRAMEWORKS as t_,isFramework as T_,FRAMEWORK_PATTERN_RECOMMENDATIONS as S_,recommendPatternForFramework as a_,CREATABLE_FRAMEWORKS as N_,requiredInputsForFramework as R_}from"./patterns/frameworkPatterns.js";import{DEFAULT_FORMS_FROM_LOCAL_PART as n_,defaultFormsFromAddress as O_,defaultFormsCorsOrigin as m_,isAddressAtDomain as I_}from"./patterns/staticSiteForms.js";import{DEV_SUBSTRATE_PARAMS_SCHEMA_VERSION as P_,DEV_SUBSTRATE_PARAMS_FILENAME as L_,DevSubstrateSynthPropsSchema as s_,DevSubstrateParamsSchema as p_}from"./devSubstrate/params.js";import{DEV_SUBSTRATE_ENTRYPOINT_SOURCE as M_}from"./devSubstrate/entrypoint.js";import{BLESSED_CDK_TOOLCHAIN as f_}from"./cdkToolchain.js";import{DEPLOYMENT_FAILURE_PHASES as U_,DeploymentFailurePhaseSchema as l_,DEPLOYMENT_FAULT_ATTRIBUTIONS as u_,DeploymentFaultAttributionSchema as d_,DEPLOYMENT_FAILURE_PROVIDER_SOURCES as x_,DeploymentFailureProviderSourceSchema as g_,DEPLOYMENT_FAILURE_CODE_PATTERN as G_,DEPLOYMENT_FAILURE_SCHEMA_VERSION as h_,DEPLOYMENT_FAILURE_LIMITS as H_,DeploymentFailureAnalysisSchema as V_,DeploymentFailureProviderSchema as Y_,DeploymentFailureResourceSchema as y_,DeploymentFailureSchema as K_,parseDeploymentFailure as v_,DEPLOYMENT_FAILURE_DOCS_BASE_URL as X_,deploymentFailureDocsUrl as b_,DEPLOYMENT_FAULT_COPY as B_,DEPLOYMENT_PROVIDER_LABELS as W_,deriveErrorMessageFromFailure as J_,toDeploymentFailureAnalysis as k_}from"./failure/deploymentFailure.js";import{extractErrorWindow as w_,ERROR_WINDOW_CONTEXT_LINES as Z_}from"./failure/extractErrorWindow.js";import{FJALL_COMPONENT_GITIGNORE as z_,FJALL_PROJECT_GITIGNORE as Q_,FJALL_STATE_GITIGNORE_ENTRIES as $_,FJALL_MANAGED_STATE_DIR_ENTRIES as eA,LOCAL_CONFIG_GITIGNORE_ENTRY as EA}from"./scaffold/gitignore.js";import{ensureGitignoreEntries as _A}from"./scaffold/ensureGitignore.js";export{We as ACCOUNT_ROLES,xe as ACCOUNT_STAGES,ue as ACCOUNT_STAGES_WITH_ROOT,ge as ACCOUNT_STAGE_LABELS,he as ACCOUNT_TIERS,bE as AGENT_INSTALL_COMMAND,XE as AGENT_SETUP_PROMPTS,O as APPROVAL_TOKEN_OUTPUT_PREFIX,cr as ARTEFACT_OUTPUT_FIELDS,eE as AWS_REGIONS_METADATA,He as AccountTierSchema,i as BACKUP_VAULT_NAME,f_ as BLESSED_CDK_TOOLCHAIN,y as CAPACITY_ANCHOR_MAX_LENGTH,Y as CAPACITY_ANCHOR_PATTERN,K as CAPACITY_IDENTITY_CONTEXT_KEY,H as CAPACITY_SLOT_MAX_LENGTH,h as CAPACITY_SLOT_PATTERN,hr as CLICKHOUSE_MIGRATION_SKIP_RE,xE as CONNECTION_FAILURE_REASONS,uE as CONNECTION_PHASES,dE as CONNECTION_TERMINAL_FAILURE_PHASES,Ir as CONTENT_HASH_TAG_PATTERN,N_ as CREATABLE_FRAMEWORKS,b as CapacityIdentityConfigSchema,v as CapacityIdentityPinSchema,X as CapacityIdentityWireSchema,UE as ConnectionWireSchema,lE as ConnectionsListResponseSchema,Ce as DANGEROUS_ENV_VARS,V as DEFAULT_CAPACITY_SLOT,n_ as DEFAULT_FORMS_FROM_LOCAL_PART,EE as DEFAULT_REGION,zr as DEPLOYABLE_PATTERN_TYPES,G_ as DEPLOYMENT_FAILURE_CODE_PATTERN,X_ as DEPLOYMENT_FAILURE_DOCS_BASE_URL,H_ as DEPLOYMENT_FAILURE_LIMITS,U_ as DEPLOYMENT_FAILURE_PHASES,x_ as DEPLOYMENT_FAILURE_PROVIDER_SOURCES,h_ as DEPLOYMENT_FAILURE_SCHEMA_VERSION,u_ as DEPLOYMENT_FAULT_ATTRIBUTIONS,B_ as DEPLOYMENT_FAULT_COPY,W_ as DEPLOYMENT_PROVIDER_LABELS,Pr as DEPLOY_MODES,M_ as DEV_SUBSTRATE_ENTRYPOINT_SOURCE,L_ as DEV_SUBSTRATE_PARAMS_FILENAME,P_ as DEV_SUBSTRATE_PARAMS_SCHEMA_VERSION,r as DNS_APEX,N as DOMAIN_DEPLOY_DEFAULT_PHASE,Lr as DeployModeSchema,V_ as DeploymentFailureAnalysisSchema,l_ as DeploymentFailurePhaseSchema,Y_ as DeploymentFailureProviderSchema,g_ as DeploymentFailureProviderSourceSchema,y_ as DeploymentFailureResourceSchema,K_ as DeploymentFailureSchema,d_ as DeploymentFaultAttributionSchema,p_ as DevSubstrateParamsSchema,s_ as DevSubstrateSynthPropsSchema,Z_ as ERROR_WINDOW_CONTEXT_LINES,dr as EXPECTED_CH_SCHEMA_VERSION_ENV,lr as EXPECTED_SCHEMA_VERSION_ENV,ur as EXPECTED_SCHEMA_VERSION_TOOL_ENV,gE as EXTERNAL_ID_PATTERN,br as FJALL_CLICKHOUSE_USERS,z_ as FJALL_COMPONENT_GITIGNORE,te as FJALL_CONFIG_DIR_ENV,Te as FJALL_CREDENTIALS_FILENAME,Se as FJALL_HOME_DIRNAME,ae as FJALL_LOG_DIR_ENV,Xr as FJALL_MAINTENANCE_USER,eA as FJALL_MANAGED_STATE_DIR_ENTRIES,Q_ as FJALL_PROJECT_GITIGNORE,vr as FJALL_SCHEMA_GATE_USER,$_ as FJALL_STATE_GITIGNORE_ENTRIES,t_ as FRAMEWORKS,S_ as FRAMEWORK_PATTERN_RECOMMENDATIONS,o_ as FRAMEWORK_VALUES,Ye as GOVERNANCE_ACCOUNT_TIERS,iE as GOVERNANCE_SCOPE_REQUIRED_CODE,S as HOSTS_OUTPUT_MAX_BYTES,sr as IMAGE_TAG_PATTERN,HE as INSTALL_SOURCES,pr as ImageTagSchema,EA as LOCAL_CONFIG_GITIGNORE_ENTRY,NE as MACHINE_ONLY_SCOPES,Le as MASKED_VALUE_MARKER,_E as MAX_SECONDARY_REGIONS,Ur as MIGRATION_SNAPSHOT_NAME_PREFIX,Qr as OPENNEXT_PATTERN_TYPES,AE as OPT_IN_REGION_CODES,__ as PATTERN_CREATE_INPUT_FLAGS,r_ as PATTERN_CREATE_INPUT_VALUES,Zr as PATTERN_REGISTRY,jr as PATTERN_TYPES,kr as PATTERN_TYPE_VALUES,Wr as PHYSICAL_NAME_FALLBACK_PROPERTIES,Gr as PRISMA_MIGRATION_DIR_RE,hE as PUBLIC_PACKAGE_NAME,De as REDACTED_KEY_SENTINEL,Z as REGION_SHORT_CODES,Sr as RESERVED_APP_NAMES,ar as RESERVED_APP_NAME_MESSAGE,Rr as RESERVED_APP_NAME_SUFFIX,ir as RESERVED_APP_NAME_SUFFIX_MESSAGE,ke as RESOURCE_CATEGORIES,gr as SCHEMA_ADMIN_PASSWORD_ENV,xr as SCHEMA_ADMIN_USER_ENV,Vr as SCHEMA_GATE_EXIT,Yr as SCHEMA_GATE_EXIT_HINTS,Me as SCOPED_TOKEN_REGEX,aE as SCOPE_VALUES,mE as SECRET_NAME_ERROR,OE as SECRET_NAME_PATTERN,VE as SETUP_COMMANDS,yE as SETUP_MODES,vE as SETUP_STEPS,KE as SETUP_STEP_IDS,WE as SKILL_INSTALL_FILENAME,JE as SKILL_INSTALL_PATH,BE as SKILL_INSTALL_SEGMENTS,CE as SSM_COMPONENT_ERROR,IE as SSM_COMPONENT_PATTERN,PE as SSM_STANDARD_MAX_VALUE_BYTES,E_ as STATIC_SITE_ROUTING_INFO,e_ as STATIC_SITE_ROUTING_VALUES,de as STRUCTURAL_ENVIRONMENTS,LE as SecretNamespaceSchema,Dr as ServiceArtefactSchema,Mr as ServiceArtefactsSchema,m as TOKEN_STDERR_PREFIX,RE as USER_GRANTABLE_SCOPES,$e as abbreviateRegion,f as accountConstructKey,Xe as accountTier,l as albDnsExportName,u as albHostedZoneIdExportName,fr as artefactOutputKey,x as bucketWebsiteEndpointExportName,g as bucketWebsiteHostedZoneIdExportName,er as buildAppConfigPath,sE as buildNamespaceParts,pE as buildParameterPath,M as capitalise,je as categoriseResource,d as cdnDomainExportName,j as defaultConnectedAccountName,m_ as defaultFormsCorsOrigin,O_ as defaultFormsFromAddress,b_ as deploymentFailureDocsUrl,ZE as deriveAllTargets,mr as deriveContentHashTag,J_ as deriveErrorMessageFromFailure,jE as deriveRegionsFromOrgConfig,wE as deriveTargets,_A as ensureGitignoreEntries,qE as environmentOrTier,Ke as environmentToTier,fE as escapeDotEnvValue,w_ as extractErrorWindow,Pe as filterDangerousEnvVars,J as findAccountNameCollision,_r as findBoundaryPath,rr as findInfrastructurePaths,zE as findTarget,q as findTrailingRegionShortCode,Ne as fjallCredentialsPath,Re as fjallHomeDir,ie as fjallLogDir,ne as fjallStatePath,Ae as formatErrorString,QE as generateTargetName,_ as getDomainExportNames,A as getDomainStackName,o as getDomainUsEast1CertificatesStackName,Be as getEnvironmentLabel,re as getErrorCode,ee as getErrorMessage,_e as getErrorStack,we as getExpectedDuration,Ze as getFriendlyResourceType,rE as getRegionInfo,c as getSafeZoneName,F as hasAsciiStableConstructKey,Ee as hasErrorCode,nr as hasReservedAppNameSuffix,t as hostsExportPartName,C as imageTagParameterName,tr as inferContainerFromCandidates,Ge as isAccountStage,Ve as isAccountTier,I_ as isAddressAtDomain,T_ as isFramework,ye as isGovernanceTier,Ar as isInfrastructureFile,ME as isManageablePath,a as isManagedDomainBinding,$r as isOpenNextPatternType,wr as isPatternType,Nr as isReservedAppName,Ue as mapSettledWithConcurrency,se as maskSensitiveOutput,$ as normaliseError,oE as optInRegionWarning,v_ as parseDeploymentFailure,cE as parseDotEnv,ze as parseGitRemoteUrl,DE as parseParameterPath,pe as parseShellArgs,qr as patternConstructId,B as projectCapacityIdentityToTarget,a_ as recommendPatternForFramework,z as regionSuffixRejectionMessage,tE as regions,R_ as requiredInputsForFramework,be as resolveSynthEnvironment,yr as schemaGateExitKind,T as serialiseHostsChunks,me as singleton,fe as sleep,ve as stageFromWireEnvironment,w as suffixedAccountName,TE as suggestRegionForTimezone,k_ as toDeploymentFailureAnalysis,s as toKebab,L as toPascalCase,D as toScreamingSnake,p as toValidDatabaseName,YE as upgradeCommand};
+import{DNS_APEX as _,getDomainExportNames as r,getDomainStackName as T,getDomainUsEast1CertificatesStackName as A,hostsExportPartName as t,serialiseHostsChunks as S,HOSTS_OUTPUT_MAX_BYTES as o,isManagedDomainBinding as a,DOMAIN_DEPLOY_DEFAULT_PHASE as N}from"./infra/domainExports.js";import{BACKUP_VAULT_NAME as O}from"./infra/backupVault.js";import{APPROVAL_TOKEN_OUTPUT_PREFIX as n,TOKEN_STDERR_PREFIX as I}from"./deploy/approvalTokenOutput.js";import{imageTagParameterName as m}from"./infra/imageTags.js";import{toPascalCase as L,toKebab as s,toValidDatabaseName as D,toScreamingSnake as p,capitalise as c,getSafeZoneName as M,accountConstructKey as f,hasAsciiStableConstructKey as F}from"./naming/caseConversion.js";import{albDnsExportName as l,albHostedZoneIdExportName as u,cdnDomainExportName as d,bucketWebsiteEndpointExportName as g,bucketWebsiteHostedZoneIdExportName as x}from"./naming/targetExportNames.js";import{CAPACITY_SLOT_PATTERN as h,CAPACITY_SLOT_MAX_LENGTH as V,DEFAULT_CAPACITY_SLOT as H,CAPACITY_ANCHOR_PATTERN as Y,CAPACITY_ANCHOR_MAX_LENGTH as y,CAPACITY_IDENTITY_CONTEXT_KEY as K,CapacityIdentityPinSchema as v,CapacityIdentityWireSchema as X,CapacityIdentityConfigSchema as b,projectCapacityIdentityToTarget as B}from"./capacityIdentity.js";import{findAccountNameCollision as J}from"./naming/accountNameCollision.js";import{defaultConnectedAccountName as j,suffixedAccountName as w,REGION_SHORT_CODES as Z,findTrailingRegionShortCode as q,regionSuffixRejectionMessage as z}from"./naming/connectedAccountName.js";import{normaliseError as $,getErrorMessage as ee,hasErrorCode as Ee,getErrorCode as _e,getErrorStack as re,formatErrorString as Te}from"./errorUtils.js";import{FJALL_CONFIG_DIR_ENV as te,FJALL_CREDENTIALS_FILENAME as Se,FJALL_HOME_DIRNAME as oe,FJALL_LOG_DIR_ENV as ae,fjallCredentialsPath as Ne,fjallHomeDir as Re,fjallLogDir as Oe,fjallStatePath as Ce}from"./fjallHome.js";import{singleton as Ie}from"./async/singleton.js";import{DANGEROUS_ENV_VARS as me,filterDangerousEnvVars as Pe,MASKED_VALUE_MARKER as Le,maskSensitiveOutput as se,parseShellArgs as De,REDACTED_KEY_SENTINEL as pe,SCOPED_TOKEN_REGEX as ce}from"./securityHelpers.js";import{sleep as fe}from"./async/sleep.js";import{mapSettledWithConcurrency as Ue}from"./async/concurrency.js";import{ACCOUNT_STAGES_WITH_ROOT as ue,STRUCTURAL_ENVIRONMENTS as de,ACCOUNT_STAGES as ge,ACCOUNT_STAGE_LABELS as xe,isAccountStage as Ge,ACCOUNT_TIERS as he,AccountTierSchema as Ve,isAccountTier as He,GOVERNANCE_ACCOUNT_TIERS as Ye,isGovernanceTier as ye,environmentToTier as Ke,accountStageEffect as ve,ACCOUNT_STAGE_EFFECTS as Xe,formatAccountStageList as be,stageFromWireEnvironment as Be,accountTier as We,resolveSynthEnvironment as Je,getEnvironmentLabel as ke,ACCOUNT_ROLES as je}from"./environments.js";import{RESOURCE_CATEGORIES as Ze,categoriseResource as qe,getExpectedDuration as ze,getFriendlyResourceType as Qe}from"./resourceCategorisation.js";import{parseGitRemoteUrl as eE}from"./repo/gitRemoteParser.js";import{abbreviateRegion as _E,AWS_REGIONS_METADATA as rE,DEFAULT_REGION as TE,getRegionInfo as AE,MAX_SECONDARY_REGIONS as tE,OPT_IN_REGION_CODES as SE,optInRegionWarning as oE,regions as aE,suggestRegionForTimezone as NE}from"./infra/regions.js";import{SCOPE_VALUES as OE,MACHINE_ONLY_SCOPES as CE,USER_GRANTABLE_SCOPES as nE,GOVERNANCE_SCOPE_REQUIRED_CODE as IE}from"./infra/tokenScopes.js";import{SECRET_NAME_PATTERN as mE,SECRET_NAME_ERROR as PE,SSM_COMPONENT_PATTERN as LE,SSM_COMPONENT_ERROR as sE,SSM_STANDARD_MAX_VALUE_BYTES as DE,SecretNamespaceSchema as pE,buildNamespaceParts as cE,buildParameterPath as ME,parseParameterPath as fE,isManageablePath as FE,parseDotEnv as UE,escapeDotEnvValue as lE}from"./secrets.js";import{ConnectionWireSchema as dE,ConnectionsListResponseSchema as gE,CONNECTION_PHASES as xE,CONNECTION_TERMINAL_FAILURE_PHASES as GE,CONNECTION_FAILURE_REASONS as hE,EXTERNAL_ID_PATTERN as VE}from"./infra/connectionsWire.js";import{PUBLIC_PACKAGE_NAME as YE,INSTALL_SOURCES as yE,SETUP_COMMANDS as KE,upgradeCommand as vE,SETUP_MODES as XE,SETUP_STEP_IDS as bE,SETUP_STEPS as BE,AGENT_SETUP_PROMPTS as WE,AGENT_INSTALL_COMMAND as JE,SKILL_INSTALL_SEGMENTS as kE,SKILL_INSTALL_FILENAME as jE,SKILL_INSTALL_PATH as wE}from"./onboarding/index.js";import{deriveRegionsFromOrgConfig as qE,deriveTargets as zE,deriveAllTargets as QE,environmentOrTier as $E,findTarget as e_,generateTargetName as E_}from"./targets.js";import{buildAppConfigPath as r_}from"./repo/appPath.js";import{findInfrastructurePaths as A_,findBoundaryPath as t_,isInfrastructureFile as S_}from"./repo/findInfrastructurePaths.js";import{inferContainerFromCandidates as a_}from"./repo/inferContainerFromCandidates.js";import{RESERVED_APP_NAMES as R_,RESERVED_APP_NAME_MESSAGE as O_,isReservedAppName as C_,RESERVED_APP_NAME_SUFFIX as n_,RESERVED_APP_NAME_SUFFIX_MESSAGE as I_,hasReservedAppNameSuffix as i_}from"./naming/reservedAppNames.js";import{deriveContentHashTag as P_,CONTENT_HASH_TAG_PATTERN as L_}from"./infra/deriveContentHashTag.js";import{DEPLOY_MODES as D_,DeployModeSchema as p_,IMAGE_TAG_PATTERN as c_,ImageTagSchema as M_,ServiceArtefactSchema as f_,ServiceArtefactsSchema as F_,ARTEFACT_OUTPUT_FIELDS as U_,artefactOutputKey as l_}from"./infra/deployArtefacts.js";import{MIGRATION_SNAPSHOT_NAME_PREFIX as d_,EXPECTED_SCHEMA_VERSION_ENV as g_,EXPECTED_SCHEMA_VERSION_TOOL_ENV as x_,EXPECTED_CH_SCHEMA_VERSION_ENV as G_,SCHEMA_ADMIN_USER_ENV as h_,SCHEMA_ADMIN_PASSWORD_ENV as V_,PRISMA_MIGRATION_DIR_RE as H_,CLICKHOUSE_MIGRATION_SKIP_RE as Y_}from"./migration/constants.js";import{SCHEMA_GATE_EXIT as K_,SCHEMA_GATE_EXIT_HINTS as v_,schemaGateExitKind as X_}from"./migration/schemaGateExit.js";import{FJALL_SCHEMA_GATE_USER as B_,FJALL_MAINTENANCE_USER as W_,FJALL_CLICKHOUSE_USERS as J_}from"./migration/clickhouseFrameworkUsers.js";import{PHYSICAL_NAME_FALLBACK_PROPERTIES as j_}from"./cfn/physicalNameProperties.js";import{PATTERN_TYPE_VALUES as Z_,PATTERN_TYPES as q_,isPatternType as z_,PATTERN_REGISTRY as Q_,patternConstructId as $_,DEPLOYABLE_PATTERN_TYPES as er,OPENNEXT_PATTERN_TYPES as Er,isOpenNextPatternType as _r,CLOUDFRONT_PRICE_CLASS_VALUES as rr,STATIC_SITE_CONFIG_KEYS as Tr,STATIC_SITE_DEPLOY_INJECTED_KEYS as Ar,STATIC_SITE_CDN_CONFIG_KEYS as tr,STATIC_SITE_ROUTING_VALUES as Sr,STATIC_SITE_ROUTING_INFO as or,PATTERN_CREATE_INPUT_VALUES as ar,PATTERN_CREATE_INPUT_FLAGS as Nr}from"./patterns/patternTypes.js";import{FRAMEWORK_VALUES as Or,FRAMEWORKS as Cr,isFramework as nr,FRAMEWORK_PATTERN_RECOMMENDATIONS as Ir,recommendPatternForFramework as ir,CREATABLE_FRAMEWORKS as mr,requiredInputsForFramework as Pr}from"./patterns/frameworkPatterns.js";import{DEFAULT_FORMS_FROM_LOCAL_PART as sr,defaultFormsFromAddress as Dr,defaultFormsCorsOrigin as pr,isAddressAtDomain as cr}from"./patterns/staticSiteForms.js";import{DEV_SUBSTRATE_PARAMS_SCHEMA_VERSION as fr,DEV_SUBSTRATE_PARAMS_FILENAME as Fr,DevSubstrateSynthPropsSchema as Ur,DevSubstrateParamsSchema as lr}from"./devSubstrate/params.js";import{DEV_SUBSTRATE_ENTRYPOINT_SOURCE as dr}from"./devSubstrate/entrypoint.js";import{BLESSED_CDK_TOOLCHAIN as xr}from"./cdkToolchain.js";import{DEPLOYMENT_FAILURE_PHASES as hr,DeploymentFailurePhaseSchema as Vr,DEPLOYMENT_FAULT_ATTRIBUTIONS as Hr,DeploymentFaultAttributionSchema as Yr,DEPLOYMENT_FAILURE_PROVIDER_SOURCES as yr,DeploymentFailureProviderSourceSchema as Kr,DEPLOYMENT_FAILURE_CODE_PATTERN as vr,DEPLOYMENT_FAILURE_SCHEMA_VERSION as Xr,DEPLOYMENT_FAILURE_LIMITS as br,DeploymentFailureAnalysisSchema as Br,DeploymentFailureProviderSchema as Wr,DeploymentFailureResourceSchema as Jr,DeploymentFailureSchema as kr,parseDeploymentFailure as jr,DEPLOYMENT_FAILURE_DOCS_BASE_URL as wr,deploymentFailureDocsUrl as Zr,DEPLOYMENT_FAULT_COPY as qr,DEPLOYMENT_PROVIDER_LABELS as zr,deriveErrorMessageFromFailure as Qr,toDeploymentFailureAnalysis as $r}from"./failure/deploymentFailure.js";import{extractErrorWindow as ET,ERROR_WINDOW_CONTEXT_LINES as _T}from"./failure/extractErrorWindow.js";import{FJALL_COMPONENT_GITIGNORE as TT,FJALL_PROJECT_GITIGNORE as AT,FJALL_STATE_GITIGNORE_ENTRIES as tT,FJALL_MANAGED_STATE_DIR_ENTRIES as ST,LOCAL_CONFIG_GITIGNORE_ENTRY as oT}from"./scaffold/gitignore.js";import{ensureGitignoreEntries as NT}from"./scaffold/ensureGitignore.js";export{je as ACCOUNT_ROLES,ge as ACCOUNT_STAGES,ue as ACCOUNT_STAGES_WITH_ROOT,Xe as ACCOUNT_STAGE_EFFECTS,xe as ACCOUNT_STAGE_LABELS,he as ACCOUNT_TIERS,JE as AGENT_INSTALL_COMMAND,WE as AGENT_SETUP_PROMPTS,n as APPROVAL_TOKEN_OUTPUT_PREFIX,U_ as ARTEFACT_OUTPUT_FIELDS,rE as AWS_REGIONS_METADATA,Ve as AccountTierSchema,O as BACKUP_VAULT_NAME,xr as BLESSED_CDK_TOOLCHAIN,y as CAPACITY_ANCHOR_MAX_LENGTH,Y as CAPACITY_ANCHOR_PATTERN,K as CAPACITY_IDENTITY_CONTEXT_KEY,V as CAPACITY_SLOT_MAX_LENGTH,h as CAPACITY_SLOT_PATTERN,Y_ as CLICKHOUSE_MIGRATION_SKIP_RE,rr as CLOUDFRONT_PRICE_CLASS_VALUES,hE as CONNECTION_FAILURE_REASONS,xE as CONNECTION_PHASES,GE as CONNECTION_TERMINAL_FAILURE_PHASES,L_ as CONTENT_HASH_TAG_PATTERN,mr as CREATABLE_FRAMEWORKS,b as CapacityIdentityConfigSchema,v as CapacityIdentityPinSchema,X as CapacityIdentityWireSchema,dE as ConnectionWireSchema,gE as ConnectionsListResponseSchema,me as DANGEROUS_ENV_VARS,H as DEFAULT_CAPACITY_SLOT,sr as DEFAULT_FORMS_FROM_LOCAL_PART,TE as DEFAULT_REGION,er as DEPLOYABLE_PATTERN_TYPES,vr as DEPLOYMENT_FAILURE_CODE_PATTERN,wr as DEPLOYMENT_FAILURE_DOCS_BASE_URL,br as DEPLOYMENT_FAILURE_LIMITS,hr as DEPLOYMENT_FAILURE_PHASES,yr as DEPLOYMENT_FAILURE_PROVIDER_SOURCES,Xr as DEPLOYMENT_FAILURE_SCHEMA_VERSION,Hr as DEPLOYMENT_FAULT_ATTRIBUTIONS,qr as DEPLOYMENT_FAULT_COPY,zr as DEPLOYMENT_PROVIDER_LABELS,D_ as DEPLOY_MODES,dr as DEV_SUBSTRATE_ENTRYPOINT_SOURCE,Fr as DEV_SUBSTRATE_PARAMS_FILENAME,fr as DEV_SUBSTRATE_PARAMS_SCHEMA_VERSION,_ as DNS_APEX,N as DOMAIN_DEPLOY_DEFAULT_PHASE,p_ as DeployModeSchema,Br as DeploymentFailureAnalysisSchema,Vr as DeploymentFailurePhaseSchema,Wr as DeploymentFailureProviderSchema,Kr as DeploymentFailureProviderSourceSchema,Jr as DeploymentFailureResourceSchema,kr as DeploymentFailureSchema,Yr as DeploymentFaultAttributionSchema,lr as DevSubstrateParamsSchema,Ur as DevSubstrateSynthPropsSchema,_T as ERROR_WINDOW_CONTEXT_LINES,G_ as EXPECTED_CH_SCHEMA_VERSION_ENV,g_ as EXPECTED_SCHEMA_VERSION_ENV,x_ as EXPECTED_SCHEMA_VERSION_TOOL_ENV,VE as EXTERNAL_ID_PATTERN,J_ as FJALL_CLICKHOUSE_USERS,TT as FJALL_COMPONENT_GITIGNORE,te as FJALL_CONFIG_DIR_ENV,Se as FJALL_CREDENTIALS_FILENAME,oe as FJALL_HOME_DIRNAME,ae as FJALL_LOG_DIR_ENV,W_ as FJALL_MAINTENANCE_USER,ST as FJALL_MANAGED_STATE_DIR_ENTRIES,AT as FJALL_PROJECT_GITIGNORE,B_ as FJALL_SCHEMA_GATE_USER,tT as FJALL_STATE_GITIGNORE_ENTRIES,Cr as FRAMEWORKS,Ir as FRAMEWORK_PATTERN_RECOMMENDATIONS,Or as FRAMEWORK_VALUES,Ye as GOVERNANCE_ACCOUNT_TIERS,IE as GOVERNANCE_SCOPE_REQUIRED_CODE,o as HOSTS_OUTPUT_MAX_BYTES,c_ as IMAGE_TAG_PATTERN,yE as INSTALL_SOURCES,M_ as ImageTagSchema,oT as LOCAL_CONFIG_GITIGNORE_ENTRY,CE as MACHINE_ONLY_SCOPES,Le as MASKED_VALUE_MARKER,tE as MAX_SECONDARY_REGIONS,d_ as MIGRATION_SNAPSHOT_NAME_PREFIX,Er as OPENNEXT_PATTERN_TYPES,SE as OPT_IN_REGION_CODES,Nr as PATTERN_CREATE_INPUT_FLAGS,ar as PATTERN_CREATE_INPUT_VALUES,Q_ as PATTERN_REGISTRY,q_ as PATTERN_TYPES,Z_ as PATTERN_TYPE_VALUES,j_ as PHYSICAL_NAME_FALLBACK_PROPERTIES,H_ as PRISMA_MIGRATION_DIR_RE,YE as PUBLIC_PACKAGE_NAME,pe as REDACTED_KEY_SENTINEL,Z as REGION_SHORT_CODES,R_ as RESERVED_APP_NAMES,O_ as RESERVED_APP_NAME_MESSAGE,n_ as RESERVED_APP_NAME_SUFFIX,I_ as RESERVED_APP_NAME_SUFFIX_MESSAGE,Ze as RESOURCE_CATEGORIES,V_ as SCHEMA_ADMIN_PASSWORD_ENV,h_ as SCHEMA_ADMIN_USER_ENV,K_ as SCHEMA_GATE_EXIT,v_ as SCHEMA_GATE_EXIT_HINTS,ce as SCOPED_TOKEN_REGEX,OE as SCOPE_VALUES,PE as SECRET_NAME_ERROR,mE as SECRET_NAME_PATTERN,KE as SETUP_COMMANDS,XE as SETUP_MODES,BE as SETUP_STEPS,bE as SETUP_STEP_IDS,jE as SKILL_INSTALL_FILENAME,wE as SKILL_INSTALL_PATH,kE as SKILL_INSTALL_SEGMENTS,sE as SSM_COMPONENT_ERROR,LE as SSM_COMPONENT_PATTERN,DE as SSM_STANDARD_MAX_VALUE_BYTES,tr as STATIC_SITE_CDN_CONFIG_KEYS,Tr as STATIC_SITE_CONFIG_KEYS,Ar as STATIC_SITE_DEPLOY_INJECTED_KEYS,or as STATIC_SITE_ROUTING_INFO,Sr as STATIC_SITE_ROUTING_VALUES,de as STRUCTURAL_ENVIRONMENTS,pE as SecretNamespaceSchema,f_ as ServiceArtefactSchema,F_ as ServiceArtefactsSchema,I as TOKEN_STDERR_PREFIX,nE as USER_GRANTABLE_SCOPES,_E as abbreviateRegion,f as accountConstructKey,ve as accountStageEffect,We as accountTier,l as albDnsExportName,u as albHostedZoneIdExportName,l_ as artefactOutputKey,g as bucketWebsiteEndpointExportName,x as bucketWebsiteHostedZoneIdExportName,r_ as buildAppConfigPath,cE as buildNamespaceParts,ME as buildParameterPath,c as capitalise,qe as categoriseResource,d as cdnDomainExportName,j as defaultConnectedAccountName,pr as defaultFormsCorsOrigin,Dr as defaultFormsFromAddress,Zr as deploymentFailureDocsUrl,QE as deriveAllTargets,P_ as deriveContentHashTag,Qr as deriveErrorMessageFromFailure,qE as deriveRegionsFromOrgConfig,zE as deriveTargets,NT as ensureGitignoreEntries,$E as environmentOrTier,Ke as environmentToTier,lE as escapeDotEnvValue,ET as extractErrorWindow,Pe as filterDangerousEnvVars,J as findAccountNameCollision,t_ as findBoundaryPath,A_ as findInfrastructurePaths,e_ as findTarget,q as findTrailingRegionShortCode,Ne as fjallCredentialsPath,Re as fjallHomeDir,Oe as fjallLogDir,Ce as fjallStatePath,be as formatAccountStageList,Te as formatErrorString,E_ as generateTargetName,r as getDomainExportNames,T as getDomainStackName,A as getDomainUsEast1CertificatesStackName,ke as getEnvironmentLabel,_e as getErrorCode,ee as getErrorMessage,re as getErrorStack,ze as getExpectedDuration,Qe as getFriendlyResourceType,AE as getRegionInfo,M as getSafeZoneName,F as hasAsciiStableConstructKey,Ee as hasErrorCode,i_ as hasReservedAppNameSuffix,t as hostsExportPartName,m as imageTagParameterName,a_ as inferContainerFromCandidates,Ge as isAccountStage,He as isAccountTier,cr as isAddressAtDomain,nr as isFramework,ye as isGovernanceTier,S_ as isInfrastructureFile,FE as isManageablePath,a as isManagedDomainBinding,_r as isOpenNextPatternType,z_ as isPatternType,C_ as isReservedAppName,Ue as mapSettledWithConcurrency,se as maskSensitiveOutput,$ as normaliseError,oE as optInRegionWarning,jr as parseDeploymentFailure,UE as parseDotEnv,eE as parseGitRemoteUrl,fE as parseParameterPath,De as parseShellArgs,$_ as patternConstructId,B as projectCapacityIdentityToTarget,ir as recommendPatternForFramework,z as regionSuffixRejectionMessage,aE as regions,Pr as requiredInputsForFramework,Je as resolveSynthEnvironment,X_ as schemaGateExitKind,S as serialiseHostsChunks,Ie as singleton,fe as sleep,Be as stageFromWireEnvironment,w as suffixedAccountName,NE as suggestRegionForTimezone,$r as toDeploymentFailureAnalysis,s as toKebab,L as toPascalCase,p as toScreamingSnake,D as toValidDatabaseName,vE as upgradeCommand};

package/dist/logRotation.d.ts

@@ -40,3 +40,21 @@ export declare const LOG_ROTATION_DEFAULTS: {
     readonly MAX_FILE_SIZE: number;
     readonly MAX_FILES: 5;
 };
+/** The resolved rotation budget one writer applies. */
+export interface LogRotationBudget {
+    maxFileSize: number;
+    maxFiles: number;
+}
+/**
+ * The rotation budget with its env overrides applied: `FJALL_LOG_MAX_SIZE`
+ * (bytes per file) and `FJALL_LOG_MAX_FILES`. Invalid values — empty,
+ * non-numeric, zero, negative — fall back to the defaults.
+ *
+ * Every writer that rotates against `LOG_ROTATION_DEFAULTS` must resolve
+ * through here, or the overrides govern one log stream and silently miss
+ * the other (the CLI honoured them while the infrastructure validation log
+ * hardcoded the defaults). Resolved per call, never at module load: the
+ * CDK subprocess imports its writer long before a command's environment is
+ * readable.
+ */
+export declare function resolveLogRotationBudget(): LogRotationBudget;

package/dist/logRotation.js

@@ -1 +1 @@
-var S=Object.defineProperty;var l=(u,t)=>S(u,"name",{value:t,configurable:!0});import{existsSync as o,renameSync as $,unlinkSync as d,statSync as h,mkdirSync as R}from"fs";import{dirname as x,basename as f,extname as F,join as i}from"path";class _{static{l(this,"FileRotator")}maxFiles;constructor(t){this.maxFiles=t.maxFiles}needsRotation(t,s){try{return o(t)?h(t).size>s:!1}catch{return!1}}rotate(t){try{const s=x(t);if(!o(s)){R(s,{recursive:!0});return}if(!o(t))return;const e=F(t),r=f(t,e),a=i(s,`${r}.${this.maxFiles-1}${e}`);o(a)&&d(a);for(let n=this.maxFiles-2;n>=1;n--){const m=i(s,`${r}.${n}${e}`),y=i(s,`${r}.${n+1}${e}`);o(m)&&$(m,y)}const c=i(s,`${r}.1${e}`);$(t,c)}catch{}}rotateIfNeeded(t,s){return this.needsRotation(t,s)?(this.rotate(t),!0):!1}getRotatedFiles(t){const s=[],e=x(t),r=F(t),a=f(t,r);o(t)&&s.push(t);for(let c=1;c<this.maxFiles;c++){const n=i(e,`${a}.${c}${r}`);if(o(n))s.push(n);else break}return s}cleanAll(t){const s=this.getRotatedFiles(t);for(const e of s)try{d(e)}catch{}}}const b={MAX_FILE_SIZE:10*1024*1024,MAX_FILES:5};export{_ as FileRotator,b as LOG_ROTATION_DEFAULTS};
+var I=Object.defineProperty;var F=(a,t)=>I(a,"name",{value:t,configurable:!0});import{existsSync as o,renameSync as d,unlinkSync as l,statSync as p,mkdirSync as A}from"fs";import{dirname as x,basename as f,extname as L,join as c}from"path";class h{static{F(this,"FileRotator")}maxFiles;constructor(t){this.maxFiles=t.maxFiles}needsRotation(t,e){try{return o(t)?p(t).size>e:!1}catch{return!1}}rotate(t){try{const e=x(t);if(!o(e)){A(e,{recursive:!0});return}if(!o(t))return;const s=L(t),r=f(t,s),u=c(e,`${r}.${this.maxFiles-1}${s}`);o(u)&&l(u);for(let n=this.maxFiles-2;n>=1;n--){const m=c(e,`${r}.${n}${s}`),S=c(e,`${r}.${n+1}${s}`);o(m)&&d(m,S)}const i=c(e,`${r}.1${s}`);d(t,i)}catch{}}rotateIfNeeded(t,e){return this.needsRotation(t,e)?(this.rotate(t),!0):!1}getRotatedFiles(t){const e=[],s=x(t),r=L(t),u=f(t,r);o(t)&&e.push(t);for(let i=1;i<this.maxFiles;i++){const n=c(s,`${u}.${i}${r}`);if(o(n))e.push(n);else break}return e}cleanAll(t){const e=this.getRotatedFiles(t);for(const s of e)try{l(s)}catch{}}}const _={MAX_FILE_SIZE:10*1024*1024,MAX_FILES:5};function v(){return{maxFileSize:$("FJALL_LOG_MAX_SIZE",_.MAX_FILE_SIZE),maxFiles:$("FJALL_LOG_MAX_FILES",_.MAX_FILES)}}F(v,"resolveLogRotationBudget");function $(a,t){const e=process.env[a];if(e===void 0||e==="")return t;const s=parseInt(e,10);return!Number.isNaN(s)&&s>0?s:t}F($,"parsePositiveIntEnv");export{h as FileRotator,_ as LOG_ROTATION_DEFAULTS,v as resolveLogRotationBudget};

package/dist/patterns/index.d.ts

@@ -7,6 +7,6 @@
  * the webapp bundles) can take the vocabulary without depending on the root
  * barrel's contents staying pure.
  */
-export { PATTERN_TYPE_VALUES, type PatternType, PATTERN_TYPES, isPatternType, type PatternArtefact, type PatternStackPlacement, type PatternDescriptor, PATTERN_REGISTRY, patternConstructId, DEPLOYABLE_PATTERN_TYPES, type OpenNextPatternType, OPENNEXT_PATTERN_TYPES, isOpenNextPatternType, STATIC_SITE_ROUTING_VALUES, STATIC_SITE_ROUTING_INFO, type StaticSiteRouting, type StaticSiteRoutingDescriptor, PATTERN_CREATE_INPUT_VALUES, type PatternCreateInput, PATTERN_CREATE_INPUT_FLAGS } from "./patternTypes.js";
+export { PATTERN_TYPE_VALUES, type PatternType, PATTERN_TYPES, isPatternType, type PatternArtefact, type PatternStackPlacement, type PatternDescriptor, PATTERN_REGISTRY, patternConstructId, DEPLOYABLE_PATTERN_TYPES, type OpenNextPatternType, OPENNEXT_PATTERN_TYPES, isOpenNextPatternType, CLOUDFRONT_PRICE_CLASS_VALUES, type CloudFrontPriceClass, STATIC_SITE_CONFIG_KEYS, type StaticSiteConfigKey, STATIC_SITE_DEPLOY_INJECTED_KEYS, type StaticSiteDeployInjectedKey, STATIC_SITE_CDN_CONFIG_KEYS, type StaticSiteCdnConfigKey, STATIC_SITE_ROUTING_VALUES, STATIC_SITE_ROUTING_INFO, type StaticSiteRouting, type StaticSiteRoutingDescriptor, PATTERN_CREATE_INPUT_VALUES, type PatternCreateInput, PATTERN_CREATE_INPUT_FLAGS } from "./patternTypes.js";
 export { FRAMEWORK_VALUES, type Framework, FRAMEWORKS, isFramework, type DeployablePatternType, type UndeployablePatternType, type PatternRecommendation, FRAMEWORK_PATTERN_RECOMMENDATIONS, recommendPatternForFramework, CREATABLE_FRAMEWORKS, requiredInputsForFramework } from "./frameworkPatterns.js";
 export { DEFAULT_FORMS_FROM_LOCAL_PART, defaultFormsFromAddress, defaultFormsCorsOrigin, isAddressAtDomain } from "./staticSiteForms.js";

package/dist/patterns/index.js

@@ -1 +1 @@
-import{PATTERN_TYPE_VALUES as A,PATTERN_TYPES as r,isPatternType as _,PATTERN_REGISTRY as R,patternConstructId as e,DEPLOYABLE_PATTERN_TYPES as P,OPENNEXT_PATTERN_TYPES as o,isOpenNextPatternType as t,STATIC_SITE_ROUTING_VALUES as N,STATIC_SITE_ROUTING_INFO as F,PATTERN_CREATE_INPUT_VALUES as S,PATTERN_CREATE_INPUT_FLAGS as O}from"./patternTypes.js";import{FRAMEWORK_VALUES as I,FRAMEWORKS as m,isFramework as L,FRAMEWORK_PATTERN_RECOMMENDATIONS as a,recommendPatternForFramework as n,CREATABLE_FRAMEWORKS as d,requiredInputsForFramework as C}from"./frameworkPatterns.js";import{DEFAULT_FORMS_FROM_LOCAL_PART as i,defaultFormsFromAddress as p,defaultFormsCorsOrigin as M,isAddressAtDomain as Y}from"./staticSiteForms.js";export{d as CREATABLE_FRAMEWORKS,i as DEFAULT_FORMS_FROM_LOCAL_PART,P as DEPLOYABLE_PATTERN_TYPES,m as FRAMEWORKS,a as FRAMEWORK_PATTERN_RECOMMENDATIONS,I as FRAMEWORK_VALUES,o as OPENNEXT_PATTERN_TYPES,O as PATTERN_CREATE_INPUT_FLAGS,S as PATTERN_CREATE_INPUT_VALUES,R as PATTERN_REGISTRY,r as PATTERN_TYPES,A as PATTERN_TYPE_VALUES,F as STATIC_SITE_ROUTING_INFO,N as STATIC_SITE_ROUTING_VALUES,M as defaultFormsCorsOrigin,p as defaultFormsFromAddress,Y as isAddressAtDomain,L as isFramework,t as isOpenNextPatternType,_ as isPatternType,e as patternConstructId,n as recommendPatternForFramework,C as requiredInputsForFramework};
+import{PATTERN_TYPE_VALUES as _,PATTERN_TYPES as A,isPatternType as r,PATTERN_REGISTRY as R,patternConstructId as S,DEPLOYABLE_PATTERN_TYPES as I,OPENNEXT_PATTERN_TYPES as N,isOpenNextPatternType as e,CLOUDFRONT_PRICE_CLASS_VALUES as P,STATIC_SITE_CONFIG_KEYS as O,STATIC_SITE_DEPLOY_INJECTED_KEYS as F,STATIC_SITE_CDN_CONFIG_KEYS as C,STATIC_SITE_ROUTING_VALUES as o,STATIC_SITE_ROUTING_INFO as t,PATTERN_CREATE_INPUT_VALUES as L,PATTERN_CREATE_INPUT_FLAGS as s}from"./patternTypes.js";import{FRAMEWORK_VALUES as U,FRAMEWORKS as a,isFramework as n,FRAMEWORK_PATTERN_RECOMMENDATIONS as Y,recommendPatternForFramework as d,CREATABLE_FRAMEWORKS as i,requiredInputsForFramework as p}from"./frameworkPatterns.js";import{DEFAULT_FORMS_FROM_LOCAL_PART as M,defaultFormsFromAddress as K,defaultFormsCorsOrigin as G,isAddressAtDomain as f}from"./staticSiteForms.js";export{P as CLOUDFRONT_PRICE_CLASS_VALUES,i as CREATABLE_FRAMEWORKS,M as DEFAULT_FORMS_FROM_LOCAL_PART,I as DEPLOYABLE_PATTERN_TYPES,a as FRAMEWORKS,Y as FRAMEWORK_PATTERN_RECOMMENDATIONS,U as FRAMEWORK_VALUES,N as OPENNEXT_PATTERN_TYPES,s as PATTERN_CREATE_INPUT_FLAGS,L as PATTERN_CREATE_INPUT_VALUES,R as PATTERN_REGISTRY,A as PATTERN_TYPES,_ as PATTERN_TYPE_VALUES,C as STATIC_SITE_CDN_CONFIG_KEYS,O as STATIC_SITE_CONFIG_KEYS,F as STATIC_SITE_DEPLOY_INJECTED_KEYS,t as STATIC_SITE_ROUTING_INFO,o as STATIC_SITE_ROUTING_VALUES,G as defaultFormsCorsOrigin,K as defaultFormsFromAddress,f as isAddressAtDomain,n as isFramework,e as isOpenNextPatternType,r as isPatternType,S as patternConstructId,d as recommendPatternForFramework,p as requiredInputsForFramework};

package/dist/patterns/patternTypes.d.ts

@@ -180,3 +180,57 @@ export declare const STATIC_SITE_ROUTING_INFO: {
         readonly summary: "unknown paths fall back to /index.html";
     };
 };
+/**
+ * CloudFront price-class vocabulary — shared by the CDN construct's props
+ * (`components/infrastructure`) and the generator's static-site schema, which
+ * must accept exactly what the construct accepts and cannot import it
+ * (generator depends on util only). The values are the CloudFront API's own
+ * literals, resolved to `aws-cloudfront.PriceClass` members by the construct.
+ *
+ * Coverage, for choosing: `PriceClass_100` = NA + Europe (+ Israel) only —
+ * no Oceania/Asia/South-America POPs; `PriceClass_200` adds Asia, but still
+ * no Australia/NZ; `PriceClass_All` is every edge location. At small-site
+ * traffic the price difference is ~zero, so for most sites this is a latency
+ * knob, not a cost knob.
+ */
+export declare const CLOUDFRONT_PRICE_CLASS_VALUES: readonly ["PriceClass_100", "PriceClass_200", "PriceClass_All"];
+export type CloudFrontPriceClass = (typeof CLOUDFRONT_PRICE_CLASS_VALUES)[number];
+/**
+ * The static-site pattern config's key manifest — the field-parity contract.
+ *
+ * Every key of `IStaticSiteProps` (components/infrastructure) appears here,
+ * and every surface that enumerates the config's fields is held to this list:
+ *
+ * - `IStaticSiteProps` itself — compile-time witness beside the interface;
+ * - the generator's `StaticSitePatternConfigSchema` (Zod, `.strict()`);
+ * - the generator's AST parser (`extractStaticSiteConfig` +
+ *   `collectUnreadableStaticSiteFields` + `applyPatternConfig`);
+ * - the generator's emitter (`emitStaticSiteFields`) — guarded together with
+ *   the parser by a full-config parse→plan→emit→re-parse round-trip test.
+ *
+ * Before this manifest those surfaces agreed only by discipline, and had
+ * already drifted: `zoneName`/`hostedZoneId` were interface-only, so a
+ * codemod round-trip silently erased them from a user's infrastructure.ts.
+ * Add a field to the interface without teaching the other surfaces and the
+ * witness/tests name the surface that is missing it.
+ */
+export declare const STATIC_SITE_CONFIG_KEYS: readonly ["type", "name", "source", "build", "routing", "security", "domain", "managedDomain", "zoneName", "hostedZoneId", "forms", "cdn", "accessGate"];
+export type StaticSiteConfigKey = (typeof STATIC_SITE_CONFIG_KEYS)[number];
+/**
+ * Keys of {@link STATIC_SITE_CONFIG_KEYS} that are DEPLOY-INJECTED, never
+ * authored: the CLI resolves a managed-domain binding at deploy time and
+ * carries it into synth via CDK context (`managedDomainBindings`), so the
+ * generator's schema and parser must NOT accept them — a user writing
+ * `managedDomain:` by hand in infrastructure.ts is outside the authored
+ * surface, and the parity tests exclude these keys rather than teaching the
+ * schema to admit them.
+ */
+export declare const STATIC_SITE_DEPLOY_INJECTED_KEYS: readonly ["managedDomain"];
+export type StaticSiteDeployInjectedKey = (typeof STATIC_SITE_DEPLOY_INJECTED_KEYS)[number];
+/**
+ * Key manifest for the static-site `cdn` sub-config — same parity contract as
+ * {@link STATIC_SITE_CONFIG_KEYS}, one level down (the sub-object is
+ * enumerated field-by-field on the same surfaces).
+ */
+export declare const STATIC_SITE_CDN_CONFIG_KEYS: readonly ["behaviours", "priceClass", "invalidateOnDeploy"];
+export type StaticSiteCdnConfigKey = (typeof STATIC_SITE_CDN_CONFIG_KEYS)[number];

package/dist/patterns/patternTypes.js

@@ -1 +1 @@
-var n=Object.defineProperty;var e=(t,a)=>n(t,"name",{value:a,configurable:!0});import{toPascalCase as s}from"../naming/caseConversion.js";const o=["payload","nextjs","staticsite"],u=new Set(o);function T(t){return typeof t=="string"&&u.has(t)}e(T,"isPatternType");const d=["source","buildCommand","outputDir"],m={source:"--source",buildCommand:"--build-command",outputDir:"--output-dir"},r={payload:{label:"Payload CMS",constructIdSuffix:"Payload",artefact:"opennext-lambda",stackPlacement:"compute",deployable:!0,requiredCreateInputs:[]},nextjs:{label:"Next.js",constructIdSuffix:"Nextjs",artefact:"opennext-lambda",stackPlacement:"compute",deployable:!1,requiredCreateInputs:[]},staticsite:{label:"Static site",constructIdSuffix:"StaticSite",artefact:"static-assets",stackPlacement:"cdn",deployable:!0,requiredCreateInputs:["source","buildCommand","outputDir"]}};function E(t,a){return`${s(t)}${r[a].constructIdSuffix}`}e(E,"patternConstructId");const x=o.filter(t=>r[t].deployable),c=o.filter(t=>r[t].artefact==="opennext-lambda"),l=new Set(c);function P(t){return t!=null&&l.has(t)}e(P,"isOpenNextPatternType");const S=["multipage","directory","spa"],f={multipage:{label:"Multi-page (.html files)",summary:"/about serves /about.html"},directory:{label:"Directory index",summary:"/about serves /about/index.html"},spa:{label:"Single-page app",summary:"unknown paths fall back to /index.html"}};export{x as DEPLOYABLE_PATTERN_TYPES,c as OPENNEXT_PATTERN_TYPES,m as PATTERN_CREATE_INPUT_FLAGS,d as PATTERN_CREATE_INPUT_VALUES,r as PATTERN_REGISTRY,u as PATTERN_TYPES,o as PATTERN_TYPE_VALUES,f as STATIC_SITE_ROUTING_INFO,S as STATIC_SITE_ROUTING_VALUES,P as isOpenNextPatternType,T as isPatternType,E as patternConstructId};
+var n=Object.defineProperty;var e=(t,a)=>n(t,"name",{value:a,configurable:!0});import{toPascalCase as s}from"../naming/caseConversion.js";const o=["payload","nextjs","staticsite"],c=new Set(o);function T(t){return typeof t=="string"&&c.has(t)}e(T,"isPatternType");const d=["source","buildCommand","outputDir"],E={source:"--source",buildCommand:"--build-command",outputDir:"--output-dir"},r={payload:{label:"Payload CMS",constructIdSuffix:"Payload",artefact:"opennext-lambda",stackPlacement:"compute",deployable:!0,requiredCreateInputs:[]},nextjs:{label:"Next.js",constructIdSuffix:"Nextjs",artefact:"opennext-lambda",stackPlacement:"compute",deployable:!1,requiredCreateInputs:[]},staticsite:{label:"Static site",constructIdSuffix:"StaticSite",artefact:"static-assets",stackPlacement:"cdn",deployable:!0,requiredCreateInputs:["source","buildCommand","outputDir"]}};function _(t,a){return`${s(t)}${r[a].constructIdSuffix}`}e(_,"patternConstructId");const m=o.filter(t=>r[t].deployable),i=o.filter(t=>r[t].artefact==="opennext-lambda"),l=new Set(i);function S(t){return t!=null&&l.has(t)}e(S,"isOpenNextPatternType");const x=["multipage","directory","spa"],P={multipage:{label:"Multi-page (.html files)",summary:"/about serves /about.html"},directory:{label:"Directory index",summary:"/about serves /about/index.html"},spa:{label:"Single-page app",summary:"unknown paths fall back to /index.html"}},I=["PriceClass_100","PriceClass_200","PriceClass_All"],C=["type","name","source","build","routing","security","domain","managedDomain","zoneName","hostedZoneId","forms","cdn","accessGate"],N=["managedDomain"],b=["behaviours","priceClass","invalidateOnDeploy"];export{I as CLOUDFRONT_PRICE_CLASS_VALUES,m as DEPLOYABLE_PATTERN_TYPES,i as OPENNEXT_PATTERN_TYPES,E as PATTERN_CREATE_INPUT_FLAGS,d as PATTERN_CREATE_INPUT_VALUES,r as PATTERN_REGISTRY,c as PATTERN_TYPES,o as PATTERN_TYPE_VALUES,b as STATIC_SITE_CDN_CONFIG_KEYS,C as STATIC_SITE_CONFIG_KEYS,N as STATIC_SITE_DEPLOY_INJECTED_KEYS,P as STATIC_SITE_ROUTING_INFO,x as STATIC_SITE_ROUTING_VALUES,S as isOpenNextPatternType,T as isPatternType,_ as patternConstructId};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fjall/util",
-  "version": "23.0.0",
+  "version": "25.0.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/fjall-tech/fjall.git",