@fjall/util 25.0.0 → 26.0.0

package/dist/.build-source-hash

@@ -9,7 +9,7 @@
     "package.json",
     "tsconfig.json"
   ],
-  "hash": "eeb70d44bff2fbe0e5823b89e00551a200725c14baf070f614c20d742d2975dd",
+  "hash": "e47727a02e0f94f917edc9280bffb0add6e4edd8c08bf131c378e2ac516adbe4",
   "files": {
     "src/async/concurrency.ts": "3c7ebe0222a720f9",
     "src/async/singleton.ts": "7bcc21b0fb920561",
@@ -103,9 +103,14 @@
     "src/naming/caseConversion.ts": "8b8984f2b58b8ab7",
     "src/naming/connectedAccountName.ts": "3cd3bc7dba0a2f0b",
     "src/naming/reservedAppNames.ts": "7f63dd0b84c1972e",
-    "src/naming/targetExportNames.ts": "bab26b7c0243fafa",
+    "src/naming/targetExportNames.ts": "da78a19d8b2d4a6f",
     "src/onboarding/index.ts": "7999117c5a7a18d1",
     "src/onboarding/versionCurrency.ts": "19695f38b09cfc46",
+    "src/organisationBinding/apiBaseUrl.ts": "ad71ded9b42c95c6",
+    "src/organisationBinding/binding.ts": "d542bb92999d50ef",
+    "src/organisationBinding/cachedCredentialIdentity.ts": "f370024fe414949f",
+    "src/organisationBinding/credentialFingerprint.ts": "ae7fff52b70ba09a",
+    "src/organisationBinding/index.ts": "db0c6c2b73b6ea22",
     "src/patterns/frameworkPatterns.ts": "0f843cb043eb11fc",
     "src/patterns/index.ts": "8c765d60d672f7f7",
     "src/patterns/patternTypes.ts": "549b06ec2a3a696e",
@@ -123,11 +128,12 @@
     "src/scaffold/gitignore.ts": "87c66797a4bd05f2",
     "src/secrets.ts": "50258d463e4e67c3",
     "src/securityHelpers.ts": "1e68e1330c6da971",
+    "src/staticSiteOutput.ts": "cc81ed32acc597f1",
     "src/targets.ts": "126280f0a5762e21",
     "../scripts/minify-dist.mjs": "6b2e4b0df8aec601",
-    "package.json": "ed0ddd48c1bc5098",
+    "package.json": "6787681e299f8f1a",
     "tsconfig.json": "db759831ad95f396"
   },
-  "outputHash": "44660064f7e77458745187a882c4bb1eaef26fc06af740f5ca7ba88d630f6e73",
-  "outputFileCount": 235
+  "outputHash": "9b7525915d572ed98c2615ea12d627ee8b201d035afef490308cb1184d04a6d0",
+  "outputFileCount": 247
 }

package/dist/.minified

@@ -1 +1 @@
-117 files minified at 2026-08-31T01:55:44.825Z
+123 files minified at 2026-08-31T04:05:15.125Z

package/dist/naming/targetExportNames.d.ts

@@ -1,5 +1,5 @@
 export declare function albDnsExportName(appName: string, computeName?: string): string;
 export declare function albHostedZoneIdExportName(appName: string, computeName?: string): string;
-export declare function cdnDomainExportName(appName: string): string;
+export declare function cdnDomainExportName(appName: string, cdnName?: string): string;
 export declare function bucketWebsiteEndpointExportName(appName: string, bucketName: string): string;
 export declare function bucketWebsiteHostedZoneIdExportName(appName: string, bucketName: string): string;

package/dist/naming/targetExportNames.js

@@ -1 +1 @@
-var u=Object.defineProperty;var n=(e,t)=>u(e,"name",{value:t,configurable:!0});import{toPascalCase as a}from"./caseConversion.js";function o(e){return a(e.replace(/[^A-Za-z0-9-]/g,""))}n(o,"safeExportToken");function i(e,t){const r=o(e);return t===void 0?r:`${r}-${o(t)}-`}n(i,"albExportScope");function d(e,t){return`${i(e,t)}AlbDnsName`}n(d,"albDnsExportName");function b(e,t){return`${i(e,t)}AlbHostedZoneId`}n(b,"albHostedZoneIdExportName");function x(e){return`${o(e)}CdnDistributionDomainName`}n(x,"cdnDomainExportName");function p(e,t){return`${o(e)}-${o(t)}-`}n(p,"bucketExportScope");function f(e,t){return`${p(e,t)}WebsiteEndpoint`}n(f,"bucketWebsiteEndpointExportName");function E(e,t){return`${p(e,t)}WebsiteHostedZoneId`}n(E,"bucketWebsiteHostedZoneIdExportName");export{d as albDnsExportName,b as albHostedZoneIdExportName,f as bucketWebsiteEndpointExportName,E as bucketWebsiteHostedZoneIdExportName,x as cdnDomainExportName};
+var u=Object.defineProperty;var n=(t,e)=>u(t,"name",{value:e,configurable:!0});import{toPascalCase as c}from"./caseConversion.js";function o(t){return c(t.replace(/[^A-Za-z0-9-]/g,""))}n(o,"safeExportToken");function p(t,e){const r=o(t);return e===void 0?r:`${r}-${o(e)}-`}n(p,"albExportScope");function x(t,e){return`${p(t,e)}AlbDnsName`}n(x,"albDnsExportName");function b(t,e){return`${p(t,e)}AlbHostedZoneId`}n(b,"albHostedZoneIdExportName");function a(t,e){const r=o(t);return e===void 0?r:`${r}-${o(e)}-`}n(a,"cdnExportScope");function f(t,e){return`${a(t,e)}CdnDistributionDomainName`}n(f,"cdnDomainExportName");function i(t,e){return`${o(t)}-${o(e)}-`}n(i,"bucketExportScope");function E(t,e){return`${i(t,e)}WebsiteEndpoint`}n(E,"bucketWebsiteEndpointExportName");function $(t,e){return`${i(t,e)}WebsiteHostedZoneId`}n($,"bucketWebsiteHostedZoneIdExportName");export{x as albDnsExportName,b as albHostedZoneIdExportName,E as bucketWebsiteEndpointExportName,$ as bucketWebsiteHostedZoneIdExportName,f as cdnDomainExportName};

package/dist/organisationBinding/apiBaseUrl.d.ts

@@ -0,0 +1,13 @@
+/**
+ * The ONE resolution of the Fjall API base URL: `FJALL_API_URL` when set to a
+ * non-empty value (CI shells and env-files legitimately export `X=""`, which
+ * must fall through), otherwise production. The CLI's `DEFAULT_BASE_URL` and
+ * the MCP server's mirror each captured this shape independently — a coupled
+ * value at two occurrences whose drift would silently point the two consumers
+ * at different control planes, and whose fingerprints
+ * (`credentialFingerprint(apiKey, baseUrl)`) would then disagree about the
+ * same credential.
+ */
+export declare const FJALL_PRODUCTION_API_URL = "https://fjall.io";
+/** Resolved per call — consumers choose their own capture semantics. */
+export declare function resolveApiBaseUrl(): string;

package/dist/organisationBinding/apiBaseUrl.js

@@ -0,0 +1 @@
+var r=Object.defineProperty;var n=(e,o)=>r(e,"name",{value:o,configurable:!0});const t="https://fjall.io";function p(){const e=process.env.FJALL_API_URL;return e!==void 0&&e!==""?e:t}n(p,"resolveApiBaseUrl");export{t as FJALL_PRODUCTION_API_URL,p as resolveApiBaseUrl};

package/dist/organisationBinding/binding.d.ts

@@ -0,0 +1,141 @@
+import { type OrganisationBinding } from "../config.js";
+/**
+ * Project ↔ organisation binding: the offline-pure half.
+ *
+ * Sibling of `enforceDomainAccountPin` (the CLI's
+ * `operations/domain/domainConfigRegistration`) one level up the stack. That guard pins a domain to the AWS ACCOUNT it was
+ * created in; this one pins a project to the control-plane ORGANISATION it
+ * belongs to. Same skeleton — committed config records a home, a resolved
+ * identity is compared, an unreadable config fails closed, genuine absence
+ * fails open — because the failure it prevents is the same shape: an
+ * operation that silently lands somewhere nobody intended.
+ *
+ * Everything here is pure: it takes an already-resolved identity and reads
+ * one file. Resolving the identity (and deciding what to do about each
+ * verdict) belongs to the callers — the CLI's
+ * `commands/organisationPrerequisite.ts` and the MCP server's
+ * `organisationGate.ts` — which is why this lives in `@fjall/util` (its own
+ * subpath, not the root barrel: `Config` reads the filesystem).
+ */
+/** The organisation the ambient credential actually names. */
+export interface ResolvedOrganisationIdentity {
+    readonly id: string;
+    readonly name?: string;
+}
+/**
+ * Five arms, not a boolean, for the reason `authPrerequisite` is three-valued:
+ * "could not check" and "checked and it does not match" are different facts
+ * with opposite correct responses, and collapsing them yields either a gate
+ * that refuses on a flaky network or one that approves a real mismatch.
+ *
+ * `unverifiable` is not a hole. A refusal here is destructive to the
+ * operator's intent — it stops work that may be entirely correct — so it
+ * needs POSITIVE proof of mismatch, never mere absence of proof of match.
+ */
+export type OrganisationBindingVerdict = 
+/**
+ * Nothing to enforce. `projectFound` distinguishes "a project exists here
+ * and records no binding" — the one case worth nudging — from "there is no
+ * project here at all", where a nudge would name a project that does not
+ * exist yet. `identity` is the organisation the caller resolved for the
+ * comparison (null when it could not be, or was not needed): carried so a
+ * creation flow can stamp the binding at birth from the SAME identity the
+ * gate compared, rather than re-resolving and possibly stamping an
+ * organisation the gate never saw.
+ */
+{
+    readonly kind: "unbound";
+    readonly projectFound: boolean;
+    readonly identity: ResolvedOrganisationIdentity | null;
+} | {
+    readonly kind: "matched";
+    readonly bound: OrganisationBinding;
+} | {
+    readonly kind: "mismatched";
+    readonly bound: OrganisationBinding;
+    readonly actual: ResolvedOrganisationIdentity;
+}
+/** Bound, but the credential's organisation could not be resolved. */
+ | {
+    readonly kind: "unverifiable";
+    readonly bound: OrganisationBinding;
+    readonly reason: string;
+}
+/** A config file exists but its contents are not readable. */
+ | {
+    readonly kind: "unreadable";
+    readonly reason: string;
+};
+/**
+ * What the project on disk says, before any identity is involved.
+ *
+ * Split from the comparison so the gate can decide whether resolving the
+ * credential's organisation is worth doing at all: outside a project there is
+ * nothing to compare and nothing to nudge about, so no identity is needed —
+ * and an unreadable config is refused before a network call is spent on it.
+ */
+export type ProjectBindingRead = 
+/** No fjall-config.json here or in any parent. */
+{
+    readonly kind: "no_project";
+}
+/** A project exists and records no organisation. */
+ | {
+    readonly kind: "unbound";
+} | {
+    readonly kind: "bound";
+    readonly bound: OrganisationBinding;
+}
+/** A config file exists but its contents are not readable. */
+ | {
+    readonly kind: "unreadable";
+    readonly reason: string;
+};
+/**
+ * Read this project's recorded organisation. `startDir` overrides the
+ * config-discovery start directory (tests).
+ */
+export declare function readProjectBinding(startDir?: string): ProjectBindingRead;
+/**
+ * Turn what the project records and what the credential resolved to into a
+ * verdict. `resolved === null` means the identity could not be established at
+ * all — the caller says why via `unresolvedReason`.
+ */
+export declare function resolveBindingVerdict(read: ProjectBindingRead, resolved: ResolvedOrganisationIdentity | null, unresolvedReason?: string): OrganisationBindingVerdict;
+/**
+ * Compare this project's recorded organisation against the one the ambient
+ * credential names — the read and the comparison in one call, for callers
+ * that already hold the identity.
+ */
+export declare function checkProjectOrganisation(resolved: ResolvedOrganisationIdentity | null, options?: {
+    readonly startDir?: string;
+    readonly unresolvedReason?: string;
+}): OrganisationBindingVerdict;
+/** How the bound organisation reads in a message: "Acme (org_abc)" or "org_abc". */
+export declare function describeOrganisation(organisation: OrganisationBinding | ResolvedOrganisationIdentity): string;
+/**
+ * The refusal.
+ *
+ * ONE cure, deliberately. The domain pin's inherited copy offers a second
+ * ("update or remove the keys in fjall-config.json … a successful deploy
+ * re-records them"), which reads as a bypass manual and — worse — teaches
+ * exactly the ambient re-record that put a wrong organisation in the file in
+ * the first place. Here the only documented move is `fjall org bind --force`,
+ * which requires the operator to NAME the organisation they mean.
+ */
+export declare function buildWrongOrganisationMessage(action: string, bound: OrganisationBinding, actual: ResolvedOrganisationIdentity): string;
+/** The refusal when a config file exists but cannot be trusted to be empty. */
+export declare function buildUnreadableConfigMessage(action: string, reason: string): string;
+/**
+ * The notice printed when a bound project's organisation could not be
+ * resolved. Availability-first, matching `requireAuthenticated`'s posture on
+ * the same failure class: the operator is told exactly what was not checked.
+ */
+export declare function buildUnverifiableNotice(bound: OrganisationBinding, reason: string): string;
+/**
+ * The one-line nudge shown on a gated surface in an UNBOUND project whose
+ * organisation did resolve. This is the whole adoption path: existing
+ * projects are unbound, and nothing else would ever tell their owners the
+ * guard exists.
+ */
+export declare function buildUnboundNotice(actual: ResolvedOrganisationIdentity): string;

package/dist/organisationBinding/binding.js

@@ -0,0 +1 @@
+var a=Object.defineProperty;var t=(n,e)=>a(n,"name",{value:e,configurable:!0});import{Config as d}from"../config.js";import{maskSensitiveOutput as u}from"../securityHelpers.js";import{getErrorMessage as s}from"../errorUtils.js";function c(n){let e;try{e=d.loadConfig(n)}catch(r){return{kind:"unreadable",reason:u(s(r))}}if(e.isContentUnavailable())return{kind:"unreadable",reason:"fjall-config.json exists but its contents could not be loaded (the preceding warning names the problem)"};const o=e.getOrganisation();return o!==void 0?{kind:"bound",bound:o}:e.getConfigPath()===null?{kind:"no_project"}:{kind:"unbound"}}t(c,"readProjectBinding");function l(n,e,o){switch(n.kind){case"unreadable":return n;case"no_project":return{kind:"unbound",projectFound:!1,identity:e};case"unbound":return{kind:"unbound",projectFound:!0,identity:e};case"bound":return e===null?{kind:"unverifiable",bound:n.bound,reason:o??"the organisation could not be resolved"}:n.bound.id===e.id?{kind:"matched",bound:n.bound}:{kind:"mismatched",bound:n.bound,actual:e}}}t(l,"resolveBindingVerdict");function p(n,e={}){return l(c(e.startDir),n,e.unresolvedReason)}t(p,"checkProjectOrganisation");function i(n){return n.name!==void 0&&n.name!==""?`${n.name} (${n.id})`:n.id}t(i,"describeOrganisation");function m(n,e,o){return`Refusing to ${n}: this project's fjall-config.json records organisation ${i(e)} as its home, but the credential in use belongs to ${i(o)}. Nothing was created, synthesised or deployed. Cure: authenticate as ${i(e)} ('fjall login', or set FJALL_API_KEY to a key for that organisation), or \u2014 if this project really is moving \u2014 run 'fjall org bind --org ${o.id} --force' to re-bind it.`}t(m,"buildWrongOrganisationMessage");function j(n,e){return`Refusing to ${n}: ${e}, so this project's organisation binding cannot be checked. Nothing was created, synthesised or deployed. Cure: fix fjall-config.json (permissions or contents), then re-run.`}t(j,"buildUnreadableConfigMessage");function k(n,e){return`Could not confirm which organisation your credential belongs to (${e}). Proceeding \u2014 this project is bound to ${i(n)}, and a mismatch would not have been caught.`}t(k,"buildUnverifiableNotice");function y(n){return`This project is not bound to an organisation. Run 'fjall org bind' to pin it to ${i(n)} \u2014 afterwards, any command run here with another organisation's credential is refused instead of silently landing there.`}t(y,"buildUnboundNotice");export{y as buildUnboundNotice,j as buildUnreadableConfigMessage,k as buildUnverifiableNotice,m as buildWrongOrganisationMessage,p as checkProjectOrganisation,i as describeOrganisation,c as readProjectBinding,l as resolveBindingVerdict};

package/dist/organisationBinding/cachedCredentialIdentity.d.ts

@@ -0,0 +1,18 @@
+export declare const ORG_CONFIG_CACHE_FILENAME = "org-config-cache.json";
+/** Resolved per call, never captured at module load (`FJALL_CONFIG_DIR`). */
+export declare function orgConfigCachePath(): string;
+/** The identity fields every cache record carries (`GET /api/identity`). */
+export interface CachedCredentialIdentity {
+    readonly organisationId: string;
+    readonly organisationName: string;
+}
+export declare function isCachedCredentialIdentity(value: unknown): value is CachedCredentialIdentity;
+/**
+ * The cached identity, whatever its age — but ONLY when the credential in
+ * hand is the one that wrote the record. A fingerprint match is PROOF that
+ * the cached identity is this credential's identity, which is what makes
+ * this a sound zero-network oracle for an organisation gate rather than a
+ * display-only hint. A record with no fingerprint (written before the field
+ * existed) or another credential's fingerprint is a miss by construction.
+ */
+export declare function readCachedCredentialIdentity(credentialFingerprint: string): CachedCredentialIdentity | null;

package/dist/organisationBinding/cachedCredentialIdentity.js

@@ -0,0 +1 @@
+var a=Object.defineProperty;var e=(t,r)=>a(t,"name",{value:r,configurable:!0});import*as i from"node:fs";import{fjallStatePath as c}from"../fjallHome.js";import{logger as s}from"../logger.js";import{maskSensitiveOutput as f}from"../securityHelpers.js";import{getErrorMessage as d}from"../errorUtils.js";const u="org-config-cache.json";function g(){return c(u)}e(g,"orgConfigCachePath");function o(t){return typeof t=="object"&&t!==null&&!Array.isArray(t)}e(o,"isObject");function l(t){return o(t)&&typeof t.organisationId=="string"&&t.organisationId!==""&&typeof t.organisationName=="string"}e(l,"isCachedCredentialIdentity");function I(t){try{const r=g();if(!i.existsSync(r))return null;const n=JSON.parse(i.readFileSync(r,"utf-8"));return!o(n)||n.credentialFingerprint!==t?null:l(n.identity)?n.identity:null}catch(r){return s.debug("cachedCredentialIdentity","Cache read failed, treating as a miss",{error:f(d(r))}),null}}e(I,"readCachedCredentialIdentity");export{u as ORG_CONFIG_CACHE_FILENAME,l as isCachedCredentialIdentity,g as orgConfigCachePath,I as readCachedCredentialIdentity};

package/dist/organisationBinding/credentialFingerprint.d.ts

@@ -0,0 +1,14 @@
+/**
+ * A stable, non-reversible identity for ONE (apiKey, baseUrl) pair.
+ *
+ * Two consumers, one derivation. The entitlements cache uses it as its key;
+ * the org-config cache stores it so a later read can prove the record was
+ * written by the credential now in hand. Both need exactly the same answer to
+ * "is this the same credential?", and a second derivation of that answer is
+ * the drift this module exists to prevent — the two caches sit in the same
+ * state directory and would silently disagree at the edge.
+ *
+ * A hash, never the key itself: the org-config cache is a plaintext file on
+ * disk, and the fingerprint is written into it.
+ */
+export declare function credentialFingerprint(apiKey: string, baseUrl: string): string;

package/dist/organisationBinding/credentialFingerprint.js

@@ -0,0 +1 @@
+var i=Object.defineProperty;var t=(e,r)=>i(e,"name",{value:r,configurable:!0});import{createHash as n}from"node:crypto";function p(e,r){return n("sha256").update(`${e}${r}`).digest("hex")}t(p,"credentialFingerprint");export{p as credentialFingerprint};

package/dist/organisationBinding/index.d.ts

@@ -0,0 +1,5 @@
+export { readProjectBinding, resolveBindingVerdict, checkProjectOrganisation, describeOrganisation, buildWrongOrganisationMessage, buildUnreadableConfigMessage, buildUnverifiableNotice, buildUnboundNotice, type ResolvedOrganisationIdentity, type OrganisationBindingVerdict, type ProjectBindingRead } from "./binding.js";
+export type { OrganisationBinding } from "../config.js";
+export { credentialFingerprint } from "./credentialFingerprint.js";
+export { ORG_CONFIG_CACHE_FILENAME, orgConfigCachePath, isCachedCredentialIdentity, readCachedCredentialIdentity, type CachedCredentialIdentity } from "./cachedCredentialIdentity.js";
+export { FJALL_PRODUCTION_API_URL, resolveApiBaseUrl } from "./apiBaseUrl.js";

package/dist/organisationBinding/index.js

@@ -0,0 +1 @@
+import{readProjectBinding as r,resolveBindingVerdict as n,checkProjectOrganisation as o,describeOrganisation as a,buildWrongOrganisationMessage as t,buildUnreadableConfigMessage as d,buildUnverifiableNotice as c,buildUnboundNotice as g}from"./binding.js";import{credentialFingerprint as s}from"./credentialFingerprint.js";import{ORG_CONFIG_CACHE_FILENAME as b,orgConfigCachePath as f,isCachedCredentialIdentity as O,readCachedCredentialIdentity as p}from"./cachedCredentialIdentity.js";import{FJALL_PRODUCTION_API_URL as U,resolveApiBaseUrl as _}from"./apiBaseUrl.js";export{U as FJALL_PRODUCTION_API_URL,b as ORG_CONFIG_CACHE_FILENAME,g as buildUnboundNotice,d as buildUnreadableConfigMessage,c as buildUnverifiableNotice,t as buildWrongOrganisationMessage,o as checkProjectOrganisation,s as credentialFingerprint,a as describeOrganisation,O as isCachedCredentialIdentity,f as orgConfigCachePath,p as readCachedCredentialIdentity,r as readProjectBinding,_ as resolveApiBaseUrl,n as resolveBindingVerdict};

package/dist/staticSiteOutput.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Static-site build-output vocabulary and the emptiness probe over it.
+ *
+ * Node-only, and deliberately NOT under `patterns/`: that directory is the
+ * browser-safe subpath (`@fjall/util/patterns`), and neither it nor the root
+ * barrel may reach a module carrying a static `node:*` import — a named
+ * builtin import binds to the bundler's throwing stub at evaluation time and
+ * kills webapp hydration on every page, while prod tree-shaking hides it from
+ * CI. Reachable only via the `@fjall/util/staticSiteOutput` subpath, whose
+ * two consumers (the `StaticSite` construct, `staticSiteBuilder`) are both
+ * Node-only.
+ *
+ * `barrelBrowserSafety.test.ts` walks the ROOT barrel's import graph for
+ * exactly this edge, so re-exporting this module from `index.ts` fails the
+ * util suite rather than the webapp dev server. It does NOT walk
+ * `patterns/index.ts` — the root barrel imports that directory's leaf modules
+ * directly and never the barrel itself — which is the second reason this
+ * module lives at the src root: under `patterns/` its `node:fs` import would
+ * be guarded by nothing.
+ */
+/**
+ * Entries that do not make a static-site build output non-empty.
+ *
+ * The emptiness gate exists to stop a pruning upload wiping a live site, and
+ * counting raw directory entries defeats it for the two cases that actually
+ * occur: an OS file browser leaves `.DS_Store`/`Thumbs.db` in an empty output
+ * directory, and a repo that tracks `dist/` commits a `.gitkeep` to keep it.
+ * Either one makes a failed build look like a successful one, and the upload
+ * then deletes every object already in the bucket.
+ *
+ * Deliberately narrow: `.well-known/` and other dot-entries are real site
+ * content, so this is a fixed noise set, not a "skip dotfiles" rule.
+ */
+export declare const BUILD_OUTPUT_NOISE: ReadonlySet<string>;
+/**
+ * Whether a build output directory holds anything worth uploading.
+ *
+ * Shared by the two gates that must agree about it — `staticSiteBuilder`
+ * during `fjall deploy` and the `StaticSite` construct at synth. They run in
+ * different packages and at different times, so a private copy in either one
+ * drifts silently: the deploy-time gate would refuse what the construct
+ * permits, or permit what the construct refuses, and only one of them prints
+ * the remedy the user is told to follow.
+ *
+ * Throws whatever `readdirSync` throws — a missing or unreadable directory is
+ * a different failure with a different message, and each caller checks for it
+ * first.
+ */
+export declare function hasDeployableContent(directory: string): boolean;

package/dist/staticSiteOutput.js

@@ -0,0 +1 @@
+var r=Object.defineProperty;var o=(e,t)=>r(e,"name",{value:t,configurable:!0});import{readdirSync as n}from"node:fs";const p=new Set([".DS_Store","Thumbs.db",".gitkeep",".keep"]);function a(e){return n(e).some(t=>!p.has(t))}o(a,"hasDeployableContent");export{p as BUILD_OUTPUT_NOISE,a as hasDeployableContent};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fjall/util",
-  "version": "25.0.0",
+  "version": "26.0.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/fjall-tech/fjall.git",
@@ -59,6 +59,10 @@
       "types": "./dist/manifest/io.d.ts",
       "default": "./dist/manifest/io.js"
     },
+    "./organisationBinding": {
+      "types": "./dist/organisationBinding/index.d.ts",
+      "default": "./dist/organisationBinding/index.js"
+    },
     "./environments": {
       "types": "./dist/environments.d.ts",
       "default": "./dist/environments.js"
@@ -67,6 +71,10 @@
       "types": "./dist/fsHelpers.d.ts",
       "default": "./dist/fsHelpers.js"
     },
+    "./staticSiteOutput": {
+      "types": "./dist/staticSiteOutput.d.ts",
+      "default": "./dist/staticSiteOutput.js"
+    },
     "./httpKeepAlive": {
       "types": "./dist/httpKeepAlive.d.ts",
       "default": "./dist/httpKeepAlive.js"
@@ -158,7 +166,6 @@
     "vitest": "^4.1.10"
   },
   "dependencies": {
-    "@aws-sdk/client-organizations": "^3.1098.0",
     "zod": "^4.4.3"
   },
   "overrides": {