@fjall/util 26.0.0 → 27.1.0

package/dist/.build-source-hash

@@ -9,7 +9,7 @@
     "package.json",
     "tsconfig.json"
   ],
-  "hash": "e47727a02e0f94f917edc9280bffb0add6e4edd8c08bf131c378e2ac516adbe4",
+  "hash": "adabd71ea56dfdf4a34b579522956b4f7087de804fd00771c4f35831411eb4e9",
   "files": {
     "src/async/concurrency.ts": "3c7ebe0222a720f9",
     "src/async/singleton.ts": "7bcc21b0fb920561",
@@ -33,7 +33,7 @@
     "src/cdkToolchain.ts": "a6b996c60b87d644",
     "src/cfn/physicalNameProperties.ts": "35d3c6f28079c593",
     "src/clickhouse.ts": "655c74cdba292c29",
-    "src/config.ts": "356b552c05b462e5",
+    "src/config.ts": "cea64a749e4cdaaf",
     "src/configPaths.ts": "afcc2e4ceb6652a0",
     "src/constructMap.ts": "b81fc8e90015467f",
     "src/deploy/approvalTokenOutput.ts": "4be7b52825d88a37",
@@ -72,7 +72,7 @@
     "src/fsHelpers.ts": "4dd3877b3953c6a9",
     "src/fsScan.ts": "feb187758481443f",
     "src/httpKeepAlive.ts": "c8fe4b118ef4c79f",
-    "src/index.ts": "729256264d61d2be",
+    "src/index.ts": "09fc76f874778ce9",
     "src/infra/backupVault.ts": "661678a6dfb0b648",
     "src/infra/connectionsWire.ts": "e3afa3ba95a531d8",
     "src/infra/deployArtefacts.ts": "235ac21dd3ccf0b2",
@@ -91,9 +91,9 @@
     "src/migration/clickhouseFrameworkUsers.ts": "4bd55a96d4fddff4",
     "src/migration/clickhouseSqlUsers.ts": "c916e148367715bb",
     "src/migration/compareSchemaVersion.ts": "1c9247e722ec5d5b",
-    "src/migration/constants.ts": "6a1481ac5f62b5d7",
+    "src/migration/constants.ts": "426a83e18c77c51d",
     "src/migration/controlPlaneActivity.ts": "c7ba33958f9fcbcc",
-    "src/migration/index.ts": "1c4090534fbaf61c",
+    "src/migration/index.ts": "dc711329d0060213",
     "src/migration/pickLatestClickHouseMigration.ts": "a5b4a00ba63522cb",
     "src/migration/pickLatestPrismaMigration.ts": "cbddc2950f4d4c85",
     "src/migration/schemaGateExit.ts": "53f26d02b798a475",
@@ -131,9 +131,9 @@
     "src/staticSiteOutput.ts": "cc81ed32acc597f1",
     "src/targets.ts": "126280f0a5762e21",
     "../scripts/minify-dist.mjs": "6b2e4b0df8aec601",
-    "package.json": "6787681e299f8f1a",
+    "package.json": "df9e3dd8ac0bbae0",
     "tsconfig.json": "db759831ad95f396"
   },
-  "outputHash": "9b7525915d572ed98c2615ea12d627ee8b201d035afef490308cb1184d04a6d0",
+  "outputHash": "ff352bccabc20347c6b568852aa7c60e027da5632d54c4dbc03aca44c91b8e37",
   "outputFileCount": 247
 }

package/dist/.minified

@@ -1 +1 @@
-123 files minified at 2026-08-31T04:05:15.125Z
+123 files minified at 2026-08-31T21:02:27.887Z

package/dist/config.d.ts

@@ -160,11 +160,14 @@ export type DomainConfig = z.infer<typeof DomainConfigSchema>;
  * ONE Fjall organisation.
  *
  * This is the ONE organisation fact that belongs in fjall-config.json, and it
- * is not a mirror of API state: it is a project ASSERTION, written once by
- * `fjall org bind` from stated intent, that says which organisation this
- * source tree deploys into. Everything else about an organisation (accounts,
- * regions, tiers) is mutable API state that a committed copy would misreport,
- * which is why it stays out of this file.
+ * is not a mirror of API state: it is a project ASSERTION that says which
+ * organisation this source tree deploys into. Two writers, both recording
+ * stated intent: `fjall create organisation` writes it at scaffold time (the
+ * organisation being created IS the command's subject — the project is born
+ * bound), and `fjall org bind` records or deliberately re-records it for
+ * projects that predate birth binding or genuinely move. Everything else
+ * about an organisation (accounts, regions, tiers) is mutable API state that
+ * a committed copy would misreport, which is why it stays out of this file.
  *
  * `id` is the only field ever compared. `name` is display-only, so renaming an
  * organisation neither trips the guard nor dirties a checkout.

package/dist/config.js

@@ -1,2 +1,2 @@
-var I=Object.defineProperty;var p=(u,e)=>I(u,"name",{value:e,configurable:!0});import*as a from"fs";import*as d from"path";import{z as c}from"zod";import{CapacityIdentityConfigSchema as A}from"./capacityIdentity.js";import{failure as m,success as w}from"./docker/result.js";import{getErrorMessage as E}from"./errorUtils.js";import{logger as v}from"./logger.js";import{maskSensitiveOutput as C}from"./securityHelpers.js";import{ensureGitignoreEntries as D}from"./scaffold/ensureGitignore.js";import{FJALL_MANAGED_STATE_DIR_ENTRIES as R,FJALL_PROJECT_GITIGNORE_HEADER as b,LOCAL_CONFIG_GITIGNORE_ENTRY as x,LOCAL_STATE_GITIGNORE_MARKER as $}from"./scaffold/gitignore.js";import{LOCAL_CONFIG_DIRNAME as M,LOCAL_CONFIG_FILENAME as G,ROOT_CONFIG_FILENAME as T}from"./configPaths.js";import{LOCAL_CONFIG_DIRNAME as ge,LOCAL_CONFIG_FILENAME as ue,ROOT_CONFIG_FILENAME as me}from"./configPaths.js";const P=10,ee=["compliance","governance","none"],te=["enforced","off"],ne=["centralised","off"],oe=["account","draining","org"],ie="managementEvents",re="organisationManagementEvents",se=["active","draining","removed"],ae="FjallTrailBucketName",ce="FjallTrailKeyArn",le="OrganisationTrailBucketName",j=c.object({name:c.string(),type:c.enum(["apex","delegated"]),parentDomain:c.string().optional(),account:c.string().optional(),region:c.string().optional()}).strict(),L=c.object({id:c.string().min(1),name:c.string().min(1).optional()}).strict(),_=c.object({activeTarget:c.string().optional(),domains:c.array(j).optional(),capacityIdentity:A.optional(),organisation:L.optional()}).strict(),N=c.object({activeTarget:c.string().optional(),domains:c.array(j).optional(),capacityIdentity:A.optional(),organisation:L.optional()}),K=c.object({activeTarget:c.string().optional()});function J(u={}){return JSON.stringify(u,null,2)}p(J,"serialiseRootConfig");const k=_.keyof().options;function U(u,e,t){const n=e[t];n!==void 0&&(u[t]=n)}p(U,"copyDefinedKey");function F(u,e){if(e===void 0)return!1;const t=new Set([...Object.keys(u),...Object.keys(e)]);for(const n of t)if(u[n]!==e[n])return!1;return!0}p(F,"domainEntriesEqual");class f{static{p(this,"Config")}rootConfig;configPath=null;loadFailed=!1;parseDegraded=!1;loadedSnapshot={};constructor(e,t){this.rootConfig=e??{},this.configPath=t??null}static findConfigDirectory(e){let t=e!==void 0&&e!==""?e:process.cwd();for(let n=0;n<P;n++){const o=d.join(t,"fjall"),r=d.join(o,T);if(a.existsSync(r))return o;const i=d.join(t,T);if(a.existsSync(i))return t;const l=d.dirname(t);if(l===t)break;t=l}return null}static loadConfigFile(e){try{return a.accessSync(e,a.constants.R_OK),a.readFileSync(e,{encoding:"utf8"})}catch(t){return v.warn("Config",`Config file at ${e} could not be read; using defaults`,{file:e,error:C(E(t))}),null}}static loadConfig(e){const t=f.findConfigDirectory(e);if(!t)return new f;const n=d.join(t,T),o=f.loadConfigFile(n);if(o===null){const g=new f(void 0,n);return g.loadFailed=!0,g}let r,i=!1;if(o!==""){let g;try{g=JSON.parse(o)}catch(s){throw f.formatZodError(s,T)}const y=_.safeParse(g);if(y.success)r=y.data;else{const s=N.safeParse(g);r=s.success?s.data:{},i=!s.success,s.success?v.warn("Config","fjall-config.json contains keys this version does not recognise (only activeTarget, domains and capacityIdentity are read). They were most likely written by a newer fjall version \u2014 leave them in place; saves preserve them verbatim.",{file:n}):v.warn("Config","fjall-config.json has a malformed activeTarget, domains or capacityIdentity value, so its contents were ignored for this run \u2014 any capacity-identity pins it holds will NOT apply (a pinned stack deploys unpinned and is blocked by the rename gate). Fix the file by hand; do NOT regenerate it, which would discard the pins.",{file:n})}}const l=new f(r,n);return l.parseDegraded=i,l.loadedSnapshot=structuredClone(l.rootConfig),l}static formatZodError(e,t){if(e instanceof c.ZodError&&e.issues.length>0){const r=e.issues.map(i=>`${i.path.join(".")}: ${i.message}`).join("; ");return new Error(`Failed to parse ${t}: ${r}`)}const o=(e instanceof Error?e.message:String(e)).replace(/\n/g," ").substring(0,500);return new Error(`Failed to parse ${t}: ${o}`)}saveConfig(){const e=d.join(this.resolveProjectDirectory()??d.join(process.cwd(),"fjall"),T);if(this.loadFailed)return m(new Error(`Refusing to save ${e}: the file exists but could not be read when this config loaded, so saving would replace its contents with state that never included them. Fix the file permissions (e.g. chmod u+rw ${e}) and retry.`));const t=d.dirname(e);try{a.mkdirSync(t,{recursive:!0})}catch(l){return m(new Error(`Cannot create config directory ${t}: ${C(E(l))}`))}const n=f.assertWritable(e,t);if(!n.success)return n;const o=this.mergeWithDisk(e);if(!o.success)return o;const r=J(o.data),i=`${e}.tmp-${process.pid}`;try{a.writeFileSync(i,r,{mode:384}),a.renameSync(i,e)}catch(l){return m(new Error(`Failed to save ${e}: ${C(E(l))}`))}return this.configPath=e,w(void 0)}static assertWritable(e,t){if(a.existsSync(e))try{a.accessSync(e,a.constants.W_OK)}catch{return m(new Error(`Cannot save ${e}: the file is read-only. Make it writable (e.g. chmod u+w ${e}) and retry.`))}try{a.accessSync(t,a.constants.W_OK)}catch{return m(new Error(`Cannot save ${e}: the directory ${t} is not writable. Make it writable (e.g. chmod u+w ${t}) and retry.`))}return w(void 0)}mergeWithDisk(e){const t=f.readDiskConfigForMerge(e);if(t.kind==="unmergeable")return m(new Error(`Refusing to save ${e}: ${t.reason}. Writing now would keep only this session's state and drop everything else the file carries (including keys written by other fjall versions). Fix or remove the file and retry.`));if(t.kind==="absent")return w(this.rootConfig);const n=t.disk,o={...n.foreign,...n.known};for(const i of k)i!=="domains"&&this.sessionChangedKey(i)&&(this.rootConfig[i]===void 0?delete o[i]:U(o,this.rootConfig,i));const r=this.mergeDomains(n.known.domains);return r!==void 0?o.domains=r:delete o.domains,w(o)}sessionChangedKey(e){return JSON.stringify(this.rootConfig[e])!==JSON.stringify(this.loadedSnapshot[e])}mergeDomains(e){const t=this.rootConfig.domains,n=this.loadedSnapshot.domains??[];if(t===void 0&&n.length===0)return e;const o=p(s=>s.toLowerCase(),"norm"),r=t??[],i=new Map(n.map(s=>[o(s.name),s])),l=new Map(r.map(s=>[o(s.name),s])),g=[],y=new Set;for(const s of e??[]){const h=o(s.name);y.add(h);const O=l.get(h),S=i.get(h);if(O!==void 0&&!F(O,S)){g.push(O);continue}O===void 0&&S!==void 0||g.push(s)}for(const s of r){const h=o(s.name);y.has(h)||F(s,i.get(h))||g.push(s)}return g}static readDiskConfigForMerge(e){if(!a.existsSync(e))return{kind:"absent"};let t;try{const r=a.readFileSync(e,{encoding:"utf8"});if(r==="")return{kind:"absent"};t=JSON.parse(r)}catch(r){return{kind:"unmergeable",reason:`the existing file could not be read or parsed as JSON (${C(E(r))})`}}const n=N.safeParse(t);if(!n.success){const r=n.error.issues.map(i=>`${i.path.join(".")}: ${i.message}`).join("; ");return{kind:"unmergeable",reason:`a recognised key in the existing file is malformed (${C(r)})`}}const o={};if(typeof t=="object"&&t!==null){const r=k;for(const[i,l]of Object.entries(t))r.includes(i)||(o[i]=l)}return{kind:"ok",disk:{known:n.data,foreign:o}}}static getConfigDirectory(e){return f.findConfigDirectory(e)}getConfigPath(){return this.configPath}isContentUnavailable(){return this.loadFailed||this.parseDegraded}static warnedLegacyActiveTarget=!1;localConfigCache;resolveProjectDirectory(){return this.configPath!==null?d.dirname(this.configPath):f.findConfigDirectory()}localConfigFile(){const e=this.resolveProjectDirectory();return e===null?null:d.join(e,M,G)}loadLocalConfig(){if(this.localConfigCache===void 0){const e=this.localConfigFile();if(e===null)return this.localConfigCache={};try{const t=a.readFileSync(e,{encoding:"utf8"}),n=K.safeParse(JSON.parse(t));this.localConfigCache=n.success?n.data:{}}catch{this.localConfigCache={}}}return this.localConfigCache}writeLocalConfig(e){const t=this.localConfigFile();if(t===null)return m(new Error("Cannot persist local state: no fjall-config.json was found from this directory, so there is no project to anchor `.fjall/local.json` to. Run this from inside a fjall project, or run `fjall create account` / `fjall create app` first."));try{a.mkdirSync(d.dirname(t),{recursive:!0});const n=`${t}.tmp-${process.pid}`;a.writeFileSync(n,JSON.stringify(e,null,2)+`
+var I=Object.defineProperty;var p=(u,e)=>I(u,"name",{value:e,configurable:!0});import*as a from"fs";import*as d from"path";import{z as c}from"zod";import{CapacityIdentityConfigSchema as A}from"./capacityIdentity.js";import{failure as m,success as w}from"./docker/result.js";import{getErrorMessage as E}from"./errorUtils.js";import{logger as v}from"./logger.js";import{maskSensitiveOutput as C}from"./securityHelpers.js";import{ensureGitignoreEntries as D}from"./scaffold/ensureGitignore.js";import{FJALL_MANAGED_STATE_DIR_ENTRIES as R,FJALL_PROJECT_GITIGNORE_HEADER as b,LOCAL_CONFIG_GITIGNORE_ENTRY as x,LOCAL_STATE_GITIGNORE_MARKER as $}from"./scaffold/gitignore.js";import{LOCAL_CONFIG_DIRNAME as M,LOCAL_CONFIG_FILENAME as G,ROOT_CONFIG_FILENAME as T}from"./configPaths.js";import{LOCAL_CONFIG_DIRNAME as ge,LOCAL_CONFIG_FILENAME as ue,ROOT_CONFIG_FILENAME as me}from"./configPaths.js";const P=10,ee=["compliance","governance","none"],te=["enforced","off"],ne=["centralised","off"],oe=["account","draining","org"],ie="managementEvents",re="organisationManagementEvents",se=["active","draining","removed"],ae="FjallTrailBucketName",ce="FjallTrailKeyArn",le="OrganisationTrailBucketName",j=c.object({name:c.string(),type:c.enum(["apex","delegated"]),parentDomain:c.string().optional(),account:c.string().optional(),region:c.string().optional()}).strict(),L=c.object({id:c.string().min(1),name:c.string().min(1).optional()}).strict(),_=c.object({activeTarget:c.string().optional(),domains:c.array(j).optional(),capacityIdentity:A.optional(),organisation:L.optional()}).strict(),N=c.object({activeTarget:c.string().optional(),domains:c.array(j).optional(),capacityIdentity:A.optional(),organisation:L.optional()}),K=c.object({activeTarget:c.string().optional()});function J(u={}){return JSON.stringify(u,null,2)}p(J,"serialiseRootConfig");const k=_.keyof().options;function U(u,e,t){const n=e[t];n!==void 0&&(u[t]=n)}p(U,"copyDefinedKey");function F(u,e){if(e===void 0)return!1;const t=new Set([...Object.keys(u),...Object.keys(e)]);for(const n of t)if(u[n]!==e[n])return!1;return!0}p(F,"domainEntriesEqual");class f{static{p(this,"Config")}rootConfig;configPath=null;loadFailed=!1;parseDegraded=!1;loadedSnapshot={};constructor(e,t){this.rootConfig=e??{},this.configPath=t??null}static findConfigDirectory(e){let t=e!==void 0&&e!==""?e:process.cwd();for(let n=0;n<P;n++){const o=d.join(t,"fjall"),r=d.join(o,T);if(a.existsSync(r))return o;const i=d.join(t,T);if(a.existsSync(i))return t;const l=d.dirname(t);if(l===t)break;t=l}return null}static loadConfigFile(e){try{return a.accessSync(e,a.constants.R_OK),a.readFileSync(e,{encoding:"utf8"})}catch(t){return v.warn("Config",`Config file at ${e} could not be read; using defaults`,{file:e,error:C(E(t))}),null}}static loadConfig(e){const t=f.findConfigDirectory(e);if(!t)return new f;const n=d.join(t,T),o=f.loadConfigFile(n);if(o===null){const g=new f(void 0,n);return g.loadFailed=!0,g}let r,i=!1;if(o!==""){let g;try{g=JSON.parse(o)}catch(s){throw f.formatZodError(s,T)}const y=_.safeParse(g);if(y.success)r=y.data;else{const s=N.safeParse(g);r=s.success?s.data:{},i=!s.success,s.success?v.warn("Config","fjall-config.json contains keys this version does not recognise (only activeTarget, domains, capacityIdentity and organisation are read). They were most likely written by a newer fjall version \u2014 leave them in place; saves preserve them verbatim.",{file:n}):v.warn("Config","fjall-config.json has a malformed activeTarget, domains or capacityIdentity value, so its contents were ignored for this run \u2014 any capacity-identity pins it holds will NOT apply (a pinned stack deploys unpinned and is blocked by the rename gate). Fix the file by hand; do NOT regenerate it, which would discard the pins.",{file:n})}}const l=new f(r,n);return l.parseDegraded=i,l.loadedSnapshot=structuredClone(l.rootConfig),l}static formatZodError(e,t){if(e instanceof c.ZodError&&e.issues.length>0){const r=e.issues.map(i=>`${i.path.join(".")}: ${i.message}`).join("; ");return new Error(`Failed to parse ${t}: ${r}`)}const o=(e instanceof Error?e.message:String(e)).replace(/\n/g," ").substring(0,500);return new Error(`Failed to parse ${t}: ${o}`)}saveConfig(){const e=d.join(this.resolveProjectDirectory()??d.join(process.cwd(),"fjall"),T);if(this.loadFailed)return m(new Error(`Refusing to save ${e}: the file exists but could not be read when this config loaded, so saving would replace its contents with state that never included them. Fix the file permissions (e.g. chmod u+rw ${e}) and retry.`));const t=d.dirname(e);try{a.mkdirSync(t,{recursive:!0})}catch(l){return m(new Error(`Cannot create config directory ${t}: ${C(E(l))}`))}const n=f.assertWritable(e,t);if(!n.success)return n;const o=this.mergeWithDisk(e);if(!o.success)return o;const r=J(o.data),i=`${e}.tmp-${process.pid}`;try{a.writeFileSync(i,r,{mode:384}),a.renameSync(i,e)}catch(l){return m(new Error(`Failed to save ${e}: ${C(E(l))}`))}return this.configPath=e,w(void 0)}static assertWritable(e,t){if(a.existsSync(e))try{a.accessSync(e,a.constants.W_OK)}catch{return m(new Error(`Cannot save ${e}: the file is read-only. Make it writable (e.g. chmod u+w ${e}) and retry.`))}try{a.accessSync(t,a.constants.W_OK)}catch{return m(new Error(`Cannot save ${e}: the directory ${t} is not writable. Make it writable (e.g. chmod u+w ${t}) and retry.`))}return w(void 0)}mergeWithDisk(e){const t=f.readDiskConfigForMerge(e);if(t.kind==="unmergeable")return m(new Error(`Refusing to save ${e}: ${t.reason}. Writing now would keep only this session's state and drop everything else the file carries (including keys written by other fjall versions). Fix or remove the file and retry.`));if(t.kind==="absent")return w(this.rootConfig);const n=t.disk,o={...n.foreign,...n.known};for(const i of k)i!=="domains"&&this.sessionChangedKey(i)&&(this.rootConfig[i]===void 0?delete o[i]:U(o,this.rootConfig,i));const r=this.mergeDomains(n.known.domains);return r!==void 0?o.domains=r:delete o.domains,w(o)}sessionChangedKey(e){return JSON.stringify(this.rootConfig[e])!==JSON.stringify(this.loadedSnapshot[e])}mergeDomains(e){const t=this.rootConfig.domains,n=this.loadedSnapshot.domains??[];if(t===void 0&&n.length===0)return e;const o=p(s=>s.toLowerCase(),"norm"),r=t??[],i=new Map(n.map(s=>[o(s.name),s])),l=new Map(r.map(s=>[o(s.name),s])),g=[],y=new Set;for(const s of e??[]){const h=o(s.name);y.add(h);const O=l.get(h),S=i.get(h);if(O!==void 0&&!F(O,S)){g.push(O);continue}O===void 0&&S!==void 0||g.push(s)}for(const s of r){const h=o(s.name);y.has(h)||F(s,i.get(h))||g.push(s)}return g}static readDiskConfigForMerge(e){if(!a.existsSync(e))return{kind:"absent"};let t;try{const r=a.readFileSync(e,{encoding:"utf8"});if(r==="")return{kind:"absent"};t=JSON.parse(r)}catch(r){return{kind:"unmergeable",reason:`the existing file could not be read or parsed as JSON (${C(E(r))})`}}const n=N.safeParse(t);if(!n.success){const r=n.error.issues.map(i=>`${i.path.join(".")}: ${i.message}`).join("; ");return{kind:"unmergeable",reason:`a recognised key in the existing file is malformed (${C(r)})`}}const o={};if(typeof t=="object"&&t!==null){const r=k;for(const[i,l]of Object.entries(t))r.includes(i)||(o[i]=l)}return{kind:"ok",disk:{known:n.data,foreign:o}}}static getConfigDirectory(e){return f.findConfigDirectory(e)}getConfigPath(){return this.configPath}isContentUnavailable(){return this.loadFailed||this.parseDegraded}static warnedLegacyActiveTarget=!1;localConfigCache;resolveProjectDirectory(){return this.configPath!==null?d.dirname(this.configPath):f.findConfigDirectory()}localConfigFile(){const e=this.resolveProjectDirectory();return e===null?null:d.join(e,M,G)}loadLocalConfig(){if(this.localConfigCache===void 0){const e=this.localConfigFile();if(e===null)return this.localConfigCache={};try{const t=a.readFileSync(e,{encoding:"utf8"}),n=K.safeParse(JSON.parse(t));this.localConfigCache=n.success?n.data:{}}catch{this.localConfigCache={}}}return this.localConfigCache}writeLocalConfig(e){const t=this.localConfigFile();if(t===null)return m(new Error("Cannot persist local state: no fjall-config.json was found from this directory, so there is no project to anchor `.fjall/local.json` to. Run this from inside a fjall project, or run `fjall create account` / `fjall create app` first."));try{a.mkdirSync(d.dirname(t),{recursive:!0});const n=`${t}.tmp-${process.pid}`;a.writeFileSync(n,JSON.stringify(e,null,2)+`
 `,{encoding:"utf8"}),a.renameSync(n,t),D(d.dirname(d.dirname(t)),[x,...R],{header:b,marker:$})}catch(n){return m(new Error(`Failed to write ${t}: ${C(E(n))}`))}return this.localConfigCache=e,w(void 0)}static warnLegacyActiveTargetOnce(){f.warnedLegacyActiveTarget||(f.warnedLegacyActiveTarget=!0,v.warn("Config","`activeTarget` in fjall-config.json is deprecated and ignored: a committed target must never re-aim a deploy or CI pipeline. Run `fjall target set <name>` to store it locally in .fjall/local.json, then remove `activeTarget` from the committed fjall-config.json."))}getActiveTarget(){const e=this.loadLocalConfig().activeTarget;if(e!==void 0)return e;this.rootConfig.activeTarget!==void 0&&f.warnLegacyActiveTargetOnce()}setActiveTarget(e){const t=this.loadLocalConfig();return t.activeTarget=e,this.writeLocalConfig(t)}clearActiveTarget(){const e=this.loadLocalConfig();return delete e.activeTarget,this.writeLocalConfig(e)}getDomains(){return this.rootConfig.domains??[]}setDomains(e){this.rootConfig.domains=e}addDomain(e){this.rootConfig.domains||(this.rootConfig.domains=[]),this.rootConfig.domains.push(e)}getDomain(e){return this.rootConfig.domains?.find(t=>t.name.toLowerCase()===e.toLowerCase())}removeDomain(e){if(!this.rootConfig.domains)return!1;const t=this.rootConfig.domains.findIndex(n=>n.name.toLowerCase()===e.toLowerCase());return t===-1?!1:(this.rootConfig.domains.splice(t,1),!0)}getOrganisation(){return this.rootConfig.organisation}setOrganisation(e){this.rootConfig.organisation=e}clearOrganisation(){delete this.rootConfig.organisation}}export{ie as ACCOUNT_TRAIL_NAME,se as ACCOUNT_TRAIL_STATES,f as Config,j as DomainConfigSchema,ge as LOCAL_CONFIG_DIRNAME,ue as LOCAL_CONFIG_FILENAME,re as ORGANISATION_TRAIL_NAME,le as ORG_TRAIL_BUCKET_OUTPUT_KEY,L as OrganisationBindingSchema,ne as ROOT_ACCESS_MANAGEMENT_MODES,me as ROOT_CONFIG_FILENAME,N as RootConfigReadSchema,_ as RootConfigSchema,te as S3_BPA_MODES,ae as TRAIL_BUCKET_OUTPUT_KEY,ce as TRAIL_KEY_ARN_OUTPUT_KEY,oe as TRAIL_LIFECYCLE_STATES,ee as VAULT_LOCK_MODES,J as serialiseRootConfig};

package/dist/index.d.ts

@@ -29,7 +29,7 @@ export { inferContainerFromCandidates } from "./repo/inferContainerFromCandidate
 export { RESERVED_APP_NAMES, type ReservedAppName, RESERVED_APP_NAME_MESSAGE, isReservedAppName, RESERVED_APP_NAME_SUFFIX, RESERVED_APP_NAME_SUFFIX_MESSAGE, hasReservedAppNameSuffix } from "./naming/reservedAppNames.js";
 export { deriveContentHashTag, CONTENT_HASH_TAG_PATTERN } from "./infra/deriveContentHashTag.js";
 export { DEPLOY_MODES, DeployModeSchema, type DeployMode, IMAGE_TAG_PATTERN, ImageTagSchema, type ImageTag, ServiceArtefactSchema, type ServiceArtefact, ServiceArtefactsSchema, type ServiceArtefacts, ARTEFACT_OUTPUT_FIELDS, type ArtefactOutputField, artefactOutputKey } from "./infra/deployArtefacts.js";
-export { MIGRATION_SNAPSHOT_NAME_PREFIX, EXPECTED_SCHEMA_VERSION_ENV, EXPECTED_SCHEMA_VERSION_TOOL_ENV, EXPECTED_CH_SCHEMA_VERSION_ENV, SCHEMA_ADMIN_USER_ENV, SCHEMA_ADMIN_PASSWORD_ENV, PRISMA_MIGRATION_DIR_RE, CLICKHOUSE_MIGRATION_SKIP_RE } from "./migration/constants.js";
+export { MIGRATION_SNAPSHOT_NAME_PREFIX, MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV, EXPECTED_SCHEMA_VERSION_ENV, EXPECTED_SCHEMA_VERSION_TOOL_ENV, EXPECTED_CH_SCHEMA_VERSION_ENV, SCHEMA_ADMIN_USER_ENV, SCHEMA_ADMIN_PASSWORD_ENV, PRISMA_MIGRATION_DIR_RE, CLICKHOUSE_MIGRATION_SKIP_RE } from "./migration/constants.js";
 export { SCHEMA_GATE_EXIT, SCHEMA_GATE_EXIT_HINTS, schemaGateExitKind, type SchemaGateExitKind, type SchemaGateExitCode } from "./migration/schemaGateExit.js";
 export { FJALL_SCHEMA_GATE_USER, FJALL_MAINTENANCE_USER, FJALL_CLICKHOUSE_USERS, type FjallClickHouseUser } from "./migration/clickhouseFrameworkUsers.js";
 export { PHYSICAL_NAME_FALLBACK_PROPERTIES } from "./cfn/physicalNameProperties.js";

package/dist/index.js

@@ -1 +1 @@
-import{DNS_APEX as _,getDomainExportNames as r,getDomainStackName as T,getDomainUsEast1CertificatesStackName as A,hostsExportPartName as t,serialiseHostsChunks as S,HOSTS_OUTPUT_MAX_BYTES as o,isManagedDomainBinding as a,DOMAIN_DEPLOY_DEFAULT_PHASE as N}from"./infra/domainExports.js";import{BACKUP_VAULT_NAME as O}from"./infra/backupVault.js";import{APPROVAL_TOKEN_OUTPUT_PREFIX as n,TOKEN_STDERR_PREFIX as I}from"./deploy/approvalTokenOutput.js";import{imageTagParameterName as m}from"./infra/imageTags.js";import{toPascalCase as L,toKebab as s,toValidDatabaseName as D,toScreamingSnake as p,capitalise as c,getSafeZoneName as M,accountConstructKey as f,hasAsciiStableConstructKey as F}from"./naming/caseConversion.js";import{albDnsExportName as l,albHostedZoneIdExportName as u,cdnDomainExportName as d,bucketWebsiteEndpointExportName as g,bucketWebsiteHostedZoneIdExportName as x}from"./naming/targetExportNames.js";import{CAPACITY_SLOT_PATTERN as h,CAPACITY_SLOT_MAX_LENGTH as V,DEFAULT_CAPACITY_SLOT as H,CAPACITY_ANCHOR_PATTERN as Y,CAPACITY_ANCHOR_MAX_LENGTH as y,CAPACITY_IDENTITY_CONTEXT_KEY as K,CapacityIdentityPinSchema as v,CapacityIdentityWireSchema as X,CapacityIdentityConfigSchema as b,projectCapacityIdentityToTarget as B}from"./capacityIdentity.js";import{findAccountNameCollision as J}from"./naming/accountNameCollision.js";import{defaultConnectedAccountName as j,suffixedAccountName as w,REGION_SHORT_CODES as Z,findTrailingRegionShortCode as q,regionSuffixRejectionMessage as z}from"./naming/connectedAccountName.js";import{normaliseError as $,getErrorMessage as ee,hasErrorCode as Ee,getErrorCode as _e,getErrorStack as re,formatErrorString as Te}from"./errorUtils.js";import{FJALL_CONFIG_DIR_ENV as te,FJALL_CREDENTIALS_FILENAME as Se,FJALL_HOME_DIRNAME as oe,FJALL_LOG_DIR_ENV as ae,fjallCredentialsPath as Ne,fjallHomeDir as Re,fjallLogDir as Oe,fjallStatePath as Ce}from"./fjallHome.js";import{singleton as Ie}from"./async/singleton.js";import{DANGEROUS_ENV_VARS as me,filterDangerousEnvVars as Pe,MASKED_VALUE_MARKER as Le,maskSensitiveOutput as se,parseShellArgs as De,REDACTED_KEY_SENTINEL as pe,SCOPED_TOKEN_REGEX as ce}from"./securityHelpers.js";import{sleep as fe}from"./async/sleep.js";import{mapSettledWithConcurrency as Ue}from"./async/concurrency.js";import{ACCOUNT_STAGES_WITH_ROOT as ue,STRUCTURAL_ENVIRONMENTS as de,ACCOUNT_STAGES as ge,ACCOUNT_STAGE_LABELS as xe,isAccountStage as Ge,ACCOUNT_TIERS as he,AccountTierSchema as Ve,isAccountTier as He,GOVERNANCE_ACCOUNT_TIERS as Ye,isGovernanceTier as ye,environmentToTier as Ke,accountStageEffect as ve,ACCOUNT_STAGE_EFFECTS as Xe,formatAccountStageList as be,stageFromWireEnvironment as Be,accountTier as We,resolveSynthEnvironment as Je,getEnvironmentLabel as ke,ACCOUNT_ROLES as je}from"./environments.js";import{RESOURCE_CATEGORIES as Ze,categoriseResource as qe,getExpectedDuration as ze,getFriendlyResourceType as Qe}from"./resourceCategorisation.js";import{parseGitRemoteUrl as eE}from"./repo/gitRemoteParser.js";import{abbreviateRegion as _E,AWS_REGIONS_METADATA as rE,DEFAULT_REGION as TE,getRegionInfo as AE,MAX_SECONDARY_REGIONS as tE,OPT_IN_REGION_CODES as SE,optInRegionWarning as oE,regions as aE,suggestRegionForTimezone as NE}from"./infra/regions.js";import{SCOPE_VALUES as OE,MACHINE_ONLY_SCOPES as CE,USER_GRANTABLE_SCOPES as nE,GOVERNANCE_SCOPE_REQUIRED_CODE as IE}from"./infra/tokenScopes.js";import{SECRET_NAME_PATTERN as mE,SECRET_NAME_ERROR as PE,SSM_COMPONENT_PATTERN as LE,SSM_COMPONENT_ERROR as sE,SSM_STANDARD_MAX_VALUE_BYTES as DE,SecretNamespaceSchema as pE,buildNamespaceParts as cE,buildParameterPath as ME,parseParameterPath as fE,isManageablePath as FE,parseDotEnv as UE,escapeDotEnvValue as lE}from"./secrets.js";import{ConnectionWireSchema as dE,ConnectionsListResponseSchema as gE,CONNECTION_PHASES as xE,CONNECTION_TERMINAL_FAILURE_PHASES as GE,CONNECTION_FAILURE_REASONS as hE,EXTERNAL_ID_PATTERN as VE}from"./infra/connectionsWire.js";import{PUBLIC_PACKAGE_NAME as YE,INSTALL_SOURCES as yE,SETUP_COMMANDS as KE,upgradeCommand as vE,SETUP_MODES as XE,SETUP_STEP_IDS as bE,SETUP_STEPS as BE,AGENT_SETUP_PROMPTS as WE,AGENT_INSTALL_COMMAND as JE,SKILL_INSTALL_SEGMENTS as kE,SKILL_INSTALL_FILENAME as jE,SKILL_INSTALL_PATH as wE}from"./onboarding/index.js";import{deriveRegionsFromOrgConfig as qE,deriveTargets as zE,deriveAllTargets as QE,environmentOrTier as $E,findTarget as e_,generateTargetName as E_}from"./targets.js";import{buildAppConfigPath as r_}from"./repo/appPath.js";import{findInfrastructurePaths as A_,findBoundaryPath as t_,isInfrastructureFile as S_}from"./repo/findInfrastructurePaths.js";import{inferContainerFromCandidates as a_}from"./repo/inferContainerFromCandidates.js";import{RESERVED_APP_NAMES as R_,RESERVED_APP_NAME_MESSAGE as O_,isReservedAppName as C_,RESERVED_APP_NAME_SUFFIX as n_,RESERVED_APP_NAME_SUFFIX_MESSAGE as I_,hasReservedAppNameSuffix as i_}from"./naming/reservedAppNames.js";import{deriveContentHashTag as P_,CONTENT_HASH_TAG_PATTERN as L_}from"./infra/deriveContentHashTag.js";import{DEPLOY_MODES as D_,DeployModeSchema as p_,IMAGE_TAG_PATTERN as c_,ImageTagSchema as M_,ServiceArtefactSchema as f_,ServiceArtefactsSchema as F_,ARTEFACT_OUTPUT_FIELDS as U_,artefactOutputKey as l_}from"./infra/deployArtefacts.js";import{MIGRATION_SNAPSHOT_NAME_PREFIX as d_,EXPECTED_SCHEMA_VERSION_ENV as g_,EXPECTED_SCHEMA_VERSION_TOOL_ENV as x_,EXPECTED_CH_SCHEMA_VERSION_ENV as G_,SCHEMA_ADMIN_USER_ENV as h_,SCHEMA_ADMIN_PASSWORD_ENV as V_,PRISMA_MIGRATION_DIR_RE as H_,CLICKHOUSE_MIGRATION_SKIP_RE as Y_}from"./migration/constants.js";import{SCHEMA_GATE_EXIT as K_,SCHEMA_GATE_EXIT_HINTS as v_,schemaGateExitKind as X_}from"./migration/schemaGateExit.js";import{FJALL_SCHEMA_GATE_USER as B_,FJALL_MAINTENANCE_USER as W_,FJALL_CLICKHOUSE_USERS as J_}from"./migration/clickhouseFrameworkUsers.js";import{PHYSICAL_NAME_FALLBACK_PROPERTIES as j_}from"./cfn/physicalNameProperties.js";import{PATTERN_TYPE_VALUES as Z_,PATTERN_TYPES as q_,isPatternType as z_,PATTERN_REGISTRY as Q_,patternConstructId as $_,DEPLOYABLE_PATTERN_TYPES as er,OPENNEXT_PATTERN_TYPES as Er,isOpenNextPatternType as _r,CLOUDFRONT_PRICE_CLASS_VALUES as rr,STATIC_SITE_CONFIG_KEYS as Tr,STATIC_SITE_DEPLOY_INJECTED_KEYS as Ar,STATIC_SITE_CDN_CONFIG_KEYS as tr,STATIC_SITE_ROUTING_VALUES as Sr,STATIC_SITE_ROUTING_INFO as or,PATTERN_CREATE_INPUT_VALUES as ar,PATTERN_CREATE_INPUT_FLAGS as Nr}from"./patterns/patternTypes.js";import{FRAMEWORK_VALUES as Or,FRAMEWORKS as Cr,isFramework as nr,FRAMEWORK_PATTERN_RECOMMENDATIONS as Ir,recommendPatternForFramework as ir,CREATABLE_FRAMEWORKS as mr,requiredInputsForFramework as Pr}from"./patterns/frameworkPatterns.js";import{DEFAULT_FORMS_FROM_LOCAL_PART as sr,defaultFormsFromAddress as Dr,defaultFormsCorsOrigin as pr,isAddressAtDomain as cr}from"./patterns/staticSiteForms.js";import{DEV_SUBSTRATE_PARAMS_SCHEMA_VERSION as fr,DEV_SUBSTRATE_PARAMS_FILENAME as Fr,DevSubstrateSynthPropsSchema as Ur,DevSubstrateParamsSchema as lr}from"./devSubstrate/params.js";import{DEV_SUBSTRATE_ENTRYPOINT_SOURCE as dr}from"./devSubstrate/entrypoint.js";import{BLESSED_CDK_TOOLCHAIN as xr}from"./cdkToolchain.js";import{DEPLOYMENT_FAILURE_PHASES as hr,DeploymentFailurePhaseSchema as Vr,DEPLOYMENT_FAULT_ATTRIBUTIONS as Hr,DeploymentFaultAttributionSchema as Yr,DEPLOYMENT_FAILURE_PROVIDER_SOURCES as yr,DeploymentFailureProviderSourceSchema as Kr,DEPLOYMENT_FAILURE_CODE_PATTERN as vr,DEPLOYMENT_FAILURE_SCHEMA_VERSION as Xr,DEPLOYMENT_FAILURE_LIMITS as br,DeploymentFailureAnalysisSchema as Br,DeploymentFailureProviderSchema as Wr,DeploymentFailureResourceSchema as Jr,DeploymentFailureSchema as kr,parseDeploymentFailure as jr,DEPLOYMENT_FAILURE_DOCS_BASE_URL as wr,deploymentFailureDocsUrl as Zr,DEPLOYMENT_FAULT_COPY as qr,DEPLOYMENT_PROVIDER_LABELS as zr,deriveErrorMessageFromFailure as Qr,toDeploymentFailureAnalysis as $r}from"./failure/deploymentFailure.js";import{extractErrorWindow as ET,ERROR_WINDOW_CONTEXT_LINES as _T}from"./failure/extractErrorWindow.js";import{FJALL_COMPONENT_GITIGNORE as TT,FJALL_PROJECT_GITIGNORE as AT,FJALL_STATE_GITIGNORE_ENTRIES as tT,FJALL_MANAGED_STATE_DIR_ENTRIES as ST,LOCAL_CONFIG_GITIGNORE_ENTRY as oT}from"./scaffold/gitignore.js";import{ensureGitignoreEntries as NT}from"./scaffold/ensureGitignore.js";export{je as ACCOUNT_ROLES,ge as ACCOUNT_STAGES,ue as ACCOUNT_STAGES_WITH_ROOT,Xe as ACCOUNT_STAGE_EFFECTS,xe as ACCOUNT_STAGE_LABELS,he as ACCOUNT_TIERS,JE as AGENT_INSTALL_COMMAND,WE as AGENT_SETUP_PROMPTS,n as APPROVAL_TOKEN_OUTPUT_PREFIX,U_ as ARTEFACT_OUTPUT_FIELDS,rE as AWS_REGIONS_METADATA,Ve as AccountTierSchema,O as BACKUP_VAULT_NAME,xr as BLESSED_CDK_TOOLCHAIN,y as CAPACITY_ANCHOR_MAX_LENGTH,Y as CAPACITY_ANCHOR_PATTERN,K as CAPACITY_IDENTITY_CONTEXT_KEY,V as CAPACITY_SLOT_MAX_LENGTH,h as CAPACITY_SLOT_PATTERN,Y_ as CLICKHOUSE_MIGRATION_SKIP_RE,rr as CLOUDFRONT_PRICE_CLASS_VALUES,hE as CONNECTION_FAILURE_REASONS,xE as CONNECTION_PHASES,GE as CONNECTION_TERMINAL_FAILURE_PHASES,L_ as CONTENT_HASH_TAG_PATTERN,mr as CREATABLE_FRAMEWORKS,b as CapacityIdentityConfigSchema,v as CapacityIdentityPinSchema,X as CapacityIdentityWireSchema,dE as ConnectionWireSchema,gE as ConnectionsListResponseSchema,me as DANGEROUS_ENV_VARS,H as DEFAULT_CAPACITY_SLOT,sr as DEFAULT_FORMS_FROM_LOCAL_PART,TE as DEFAULT_REGION,er as DEPLOYABLE_PATTERN_TYPES,vr as DEPLOYMENT_FAILURE_CODE_PATTERN,wr as DEPLOYMENT_FAILURE_DOCS_BASE_URL,br as DEPLOYMENT_FAILURE_LIMITS,hr as DEPLOYMENT_FAILURE_PHASES,yr as DEPLOYMENT_FAILURE_PROVIDER_SOURCES,Xr as DEPLOYMENT_FAILURE_SCHEMA_VERSION,Hr as DEPLOYMENT_FAULT_ATTRIBUTIONS,qr as DEPLOYMENT_FAULT_COPY,zr as DEPLOYMENT_PROVIDER_LABELS,D_ as DEPLOY_MODES,dr as DEV_SUBSTRATE_ENTRYPOINT_SOURCE,Fr as DEV_SUBSTRATE_PARAMS_FILENAME,fr as DEV_SUBSTRATE_PARAMS_SCHEMA_VERSION,_ as DNS_APEX,N as DOMAIN_DEPLOY_DEFAULT_PHASE,p_ as DeployModeSchema,Br as DeploymentFailureAnalysisSchema,Vr as DeploymentFailurePhaseSchema,Wr as DeploymentFailureProviderSchema,Kr as DeploymentFailureProviderSourceSchema,Jr as DeploymentFailureResourceSchema,kr as DeploymentFailureSchema,Yr as DeploymentFaultAttributionSchema,lr as DevSubstrateParamsSchema,Ur as DevSubstrateSynthPropsSchema,_T as ERROR_WINDOW_CONTEXT_LINES,G_ as EXPECTED_CH_SCHEMA_VERSION_ENV,g_ as EXPECTED_SCHEMA_VERSION_ENV,x_ as EXPECTED_SCHEMA_VERSION_TOOL_ENV,VE as EXTERNAL_ID_PATTERN,J_ as FJALL_CLICKHOUSE_USERS,TT as FJALL_COMPONENT_GITIGNORE,te as FJALL_CONFIG_DIR_ENV,Se as FJALL_CREDENTIALS_FILENAME,oe as FJALL_HOME_DIRNAME,ae as FJALL_LOG_DIR_ENV,W_ as FJALL_MAINTENANCE_USER,ST as FJALL_MANAGED_STATE_DIR_ENTRIES,AT as FJALL_PROJECT_GITIGNORE,B_ as FJALL_SCHEMA_GATE_USER,tT as FJALL_STATE_GITIGNORE_ENTRIES,Cr as FRAMEWORKS,Ir as FRAMEWORK_PATTERN_RECOMMENDATIONS,Or as FRAMEWORK_VALUES,Ye as GOVERNANCE_ACCOUNT_TIERS,IE as GOVERNANCE_SCOPE_REQUIRED_CODE,o as HOSTS_OUTPUT_MAX_BYTES,c_ as IMAGE_TAG_PATTERN,yE as INSTALL_SOURCES,M_ as ImageTagSchema,oT as LOCAL_CONFIG_GITIGNORE_ENTRY,CE as MACHINE_ONLY_SCOPES,Le as MASKED_VALUE_MARKER,tE as MAX_SECONDARY_REGIONS,d_ as MIGRATION_SNAPSHOT_NAME_PREFIX,Er as OPENNEXT_PATTERN_TYPES,SE as OPT_IN_REGION_CODES,Nr as PATTERN_CREATE_INPUT_FLAGS,ar as PATTERN_CREATE_INPUT_VALUES,Q_ as PATTERN_REGISTRY,q_ as PATTERN_TYPES,Z_ as PATTERN_TYPE_VALUES,j_ as PHYSICAL_NAME_FALLBACK_PROPERTIES,H_ as PRISMA_MIGRATION_DIR_RE,YE as PUBLIC_PACKAGE_NAME,pe as REDACTED_KEY_SENTINEL,Z as REGION_SHORT_CODES,R_ as RESERVED_APP_NAMES,O_ as RESERVED_APP_NAME_MESSAGE,n_ as RESERVED_APP_NAME_SUFFIX,I_ as RESERVED_APP_NAME_SUFFIX_MESSAGE,Ze as RESOURCE_CATEGORIES,V_ as SCHEMA_ADMIN_PASSWORD_ENV,h_ as SCHEMA_ADMIN_USER_ENV,K_ as SCHEMA_GATE_EXIT,v_ as SCHEMA_GATE_EXIT_HINTS,ce as SCOPED_TOKEN_REGEX,OE as SCOPE_VALUES,PE as SECRET_NAME_ERROR,mE as SECRET_NAME_PATTERN,KE as SETUP_COMMANDS,XE as SETUP_MODES,BE as SETUP_STEPS,bE as SETUP_STEP_IDS,jE as SKILL_INSTALL_FILENAME,wE as SKILL_INSTALL_PATH,kE as SKILL_INSTALL_SEGMENTS,sE as SSM_COMPONENT_ERROR,LE as SSM_COMPONENT_PATTERN,DE as SSM_STANDARD_MAX_VALUE_BYTES,tr as STATIC_SITE_CDN_CONFIG_KEYS,Tr as STATIC_SITE_CONFIG_KEYS,Ar as STATIC_SITE_DEPLOY_INJECTED_KEYS,or as STATIC_SITE_ROUTING_INFO,Sr as STATIC_SITE_ROUTING_VALUES,de as STRUCTURAL_ENVIRONMENTS,pE as SecretNamespaceSchema,f_ as ServiceArtefactSchema,F_ as ServiceArtefactsSchema,I as TOKEN_STDERR_PREFIX,nE as USER_GRANTABLE_SCOPES,_E as abbreviateRegion,f as accountConstructKey,ve as accountStageEffect,We as accountTier,l as albDnsExportName,u as albHostedZoneIdExportName,l_ as artefactOutputKey,g as bucketWebsiteEndpointExportName,x as bucketWebsiteHostedZoneIdExportName,r_ as buildAppConfigPath,cE as buildNamespaceParts,ME as buildParameterPath,c as capitalise,qe as categoriseResource,d as cdnDomainExportName,j as defaultConnectedAccountName,pr as defaultFormsCorsOrigin,Dr as defaultFormsFromAddress,Zr as deploymentFailureDocsUrl,QE as deriveAllTargets,P_ as deriveContentHashTag,Qr as deriveErrorMessageFromFailure,qE as deriveRegionsFromOrgConfig,zE as deriveTargets,NT as ensureGitignoreEntries,$E as environmentOrTier,Ke as environmentToTier,lE as escapeDotEnvValue,ET as extractErrorWindow,Pe as filterDangerousEnvVars,J as findAccountNameCollision,t_ as findBoundaryPath,A_ as findInfrastructurePaths,e_ as findTarget,q as findTrailingRegionShortCode,Ne as fjallCredentialsPath,Re as fjallHomeDir,Oe as fjallLogDir,Ce as fjallStatePath,be as formatAccountStageList,Te as formatErrorString,E_ as generateTargetName,r as getDomainExportNames,T as getDomainStackName,A as getDomainUsEast1CertificatesStackName,ke as getEnvironmentLabel,_e as getErrorCode,ee as getErrorMessage,re as getErrorStack,ze as getExpectedDuration,Qe as getFriendlyResourceType,AE as getRegionInfo,M as getSafeZoneName,F as hasAsciiStableConstructKey,Ee as hasErrorCode,i_ as hasReservedAppNameSuffix,t as hostsExportPartName,m as imageTagParameterName,a_ as inferContainerFromCandidates,Ge as isAccountStage,He as isAccountTier,cr as isAddressAtDomain,nr as isFramework,ye as isGovernanceTier,S_ as isInfrastructureFile,FE as isManageablePath,a as isManagedDomainBinding,_r as isOpenNextPatternType,z_ as isPatternType,C_ as isReservedAppName,Ue as mapSettledWithConcurrency,se as maskSensitiveOutput,$ as normaliseError,oE as optInRegionWarning,jr as parseDeploymentFailure,UE as parseDotEnv,eE as parseGitRemoteUrl,fE as parseParameterPath,De as parseShellArgs,$_ as patternConstructId,B as projectCapacityIdentityToTarget,ir as recommendPatternForFramework,z as regionSuffixRejectionMessage,aE as regions,Pr as requiredInputsForFramework,Je as resolveSynthEnvironment,X_ as schemaGateExitKind,S as serialiseHostsChunks,Ie as singleton,fe as sleep,Be as stageFromWireEnvironment,w as suffixedAccountName,NE as suggestRegionForTimezone,$r as toDeploymentFailureAnalysis,s as toKebab,L as toPascalCase,p as toScreamingSnake,D as toValidDatabaseName,vE as upgradeCommand};
+import{DNS_APEX as _,getDomainExportNames as r,getDomainStackName as T,getDomainUsEast1CertificatesStackName as A,hostsExportPartName as S,serialiseHostsChunks as t,HOSTS_OUTPUT_MAX_BYTES as o,isManagedDomainBinding as a,DOMAIN_DEPLOY_DEFAULT_PHASE as N}from"./infra/domainExports.js";import{BACKUP_VAULT_NAME as O}from"./infra/backupVault.js";import{APPROVAL_TOKEN_OUTPUT_PREFIX as C,TOKEN_STDERR_PREFIX as n}from"./deploy/approvalTokenOutput.js";import{imageTagParameterName as m}from"./infra/imageTags.js";import{toPascalCase as L,toKebab as s,toValidDatabaseName as D,toScreamingSnake as p,capitalise as M,getSafeZoneName as c,accountConstructKey as f,hasAsciiStableConstructKey as F}from"./naming/caseConversion.js";import{albDnsExportName as l,albHostedZoneIdExportName as u,cdnDomainExportName as d,bucketWebsiteEndpointExportName as g,bucketWebsiteHostedZoneIdExportName as x}from"./naming/targetExportNames.js";import{CAPACITY_SLOT_PATTERN as h,CAPACITY_SLOT_MAX_LENGTH as V,DEFAULT_CAPACITY_SLOT as H,CAPACITY_ANCHOR_PATTERN as Y,CAPACITY_ANCHOR_MAX_LENGTH as y,CAPACITY_IDENTITY_CONTEXT_KEY as K,CapacityIdentityPinSchema as v,CapacityIdentityWireSchema as X,CapacityIdentityConfigSchema as b,projectCapacityIdentityToTarget as B}from"./capacityIdentity.js";import{findAccountNameCollision as J}from"./naming/accountNameCollision.js";import{defaultConnectedAccountName as j,suffixedAccountName as w,REGION_SHORT_CODES as Z,findTrailingRegionShortCode as q,regionSuffixRejectionMessage as z}from"./naming/connectedAccountName.js";import{normaliseError as $,getErrorMessage as ee,hasErrorCode as Ee,getErrorCode as _e,getErrorStack as re,formatErrorString as Te}from"./errorUtils.js";import{FJALL_CONFIG_DIR_ENV as Se,FJALL_CREDENTIALS_FILENAME as te,FJALL_HOME_DIRNAME as oe,FJALL_LOG_DIR_ENV as ae,fjallCredentialsPath as Ne,fjallHomeDir as Re,fjallLogDir as Oe,fjallStatePath as Ie}from"./fjallHome.js";import{singleton as ne}from"./async/singleton.js";import{DANGEROUS_ENV_VARS as me,filterDangerousEnvVars as Pe,MASKED_VALUE_MARKER as Le,maskSensitiveOutput as se,parseShellArgs as De,REDACTED_KEY_SENTINEL as pe,SCOPED_TOKEN_REGEX as Me}from"./securityHelpers.js";import{sleep as fe}from"./async/sleep.js";import{mapSettledWithConcurrency as Ue}from"./async/concurrency.js";import{ACCOUNT_STAGES_WITH_ROOT as ue,STRUCTURAL_ENVIRONMENTS as de,ACCOUNT_STAGES as ge,ACCOUNT_STAGE_LABELS as xe,isAccountStage as Ge,ACCOUNT_TIERS as he,AccountTierSchema as Ve,isAccountTier as He,GOVERNANCE_ACCOUNT_TIERS as Ye,isGovernanceTier as ye,environmentToTier as Ke,accountStageEffect as ve,ACCOUNT_STAGE_EFFECTS as Xe,formatAccountStageList as be,stageFromWireEnvironment as Be,accountTier as We,resolveSynthEnvironment as Je,getEnvironmentLabel as ke,ACCOUNT_ROLES as je}from"./environments.js";import{RESOURCE_CATEGORIES as Ze,categoriseResource as qe,getExpectedDuration as ze,getFriendlyResourceType as Qe}from"./resourceCategorisation.js";import{parseGitRemoteUrl as eE}from"./repo/gitRemoteParser.js";import{abbreviateRegion as _E,AWS_REGIONS_METADATA as rE,DEFAULT_REGION as TE,getRegionInfo as AE,MAX_SECONDARY_REGIONS as SE,OPT_IN_REGION_CODES as tE,optInRegionWarning as oE,regions as aE,suggestRegionForTimezone as NE}from"./infra/regions.js";import{SCOPE_VALUES as OE,MACHINE_ONLY_SCOPES as IE,USER_GRANTABLE_SCOPES as CE,GOVERNANCE_SCOPE_REQUIRED_CODE as nE}from"./infra/tokenScopes.js";import{SECRET_NAME_PATTERN as mE,SECRET_NAME_ERROR as PE,SSM_COMPONENT_PATTERN as LE,SSM_COMPONENT_ERROR as sE,SSM_STANDARD_MAX_VALUE_BYTES as DE,SecretNamespaceSchema as pE,buildNamespaceParts as ME,buildParameterPath as cE,parseParameterPath as fE,isManageablePath as FE,parseDotEnv as UE,escapeDotEnvValue as lE}from"./secrets.js";import{ConnectionWireSchema as dE,ConnectionsListResponseSchema as gE,CONNECTION_PHASES as xE,CONNECTION_TERMINAL_FAILURE_PHASES as GE,CONNECTION_FAILURE_REASONS as hE,EXTERNAL_ID_PATTERN as VE}from"./infra/connectionsWire.js";import{PUBLIC_PACKAGE_NAME as YE,INSTALL_SOURCES as yE,SETUP_COMMANDS as KE,upgradeCommand as vE,SETUP_MODES as XE,SETUP_STEP_IDS as bE,SETUP_STEPS as BE,AGENT_SETUP_PROMPTS as WE,AGENT_INSTALL_COMMAND as JE,SKILL_INSTALL_SEGMENTS as kE,SKILL_INSTALL_FILENAME as jE,SKILL_INSTALL_PATH as wE}from"./onboarding/index.js";import{deriveRegionsFromOrgConfig as qE,deriveTargets as zE,deriveAllTargets as QE,environmentOrTier as $E,findTarget as e_,generateTargetName as E_}from"./targets.js";import{buildAppConfigPath as r_}from"./repo/appPath.js";import{findInfrastructurePaths as A_,findBoundaryPath as S_,isInfrastructureFile as t_}from"./repo/findInfrastructurePaths.js";import{inferContainerFromCandidates as a_}from"./repo/inferContainerFromCandidates.js";import{RESERVED_APP_NAMES as R_,RESERVED_APP_NAME_MESSAGE as O_,isReservedAppName as I_,RESERVED_APP_NAME_SUFFIX as C_,RESERVED_APP_NAME_SUFFIX_MESSAGE as n_,hasReservedAppNameSuffix as i_}from"./naming/reservedAppNames.js";import{deriveContentHashTag as P_,CONTENT_HASH_TAG_PATTERN as L_}from"./infra/deriveContentHashTag.js";import{DEPLOY_MODES as D_,DeployModeSchema as p_,IMAGE_TAG_PATTERN as M_,ImageTagSchema as c_,ServiceArtefactSchema as f_,ServiceArtefactsSchema as F_,ARTEFACT_OUTPUT_FIELDS as U_,artefactOutputKey as l_}from"./infra/deployArtefacts.js";import{MIGRATION_SNAPSHOT_NAME_PREFIX as d_,MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV as g_,EXPECTED_SCHEMA_VERSION_ENV as x_,EXPECTED_SCHEMA_VERSION_TOOL_ENV as G_,EXPECTED_CH_SCHEMA_VERSION_ENV as h_,SCHEMA_ADMIN_USER_ENV as V_,SCHEMA_ADMIN_PASSWORD_ENV as H_,PRISMA_MIGRATION_DIR_RE as Y_,CLICKHOUSE_MIGRATION_SKIP_RE as y_}from"./migration/constants.js";import{SCHEMA_GATE_EXIT as v_,SCHEMA_GATE_EXIT_HINTS as X_,schemaGateExitKind as b_}from"./migration/schemaGateExit.js";import{FJALL_SCHEMA_GATE_USER as W_,FJALL_MAINTENANCE_USER as J_,FJALL_CLICKHOUSE_USERS as k_}from"./migration/clickhouseFrameworkUsers.js";import{PHYSICAL_NAME_FALLBACK_PROPERTIES as w_}from"./cfn/physicalNameProperties.js";import{PATTERN_TYPE_VALUES as q_,PATTERN_TYPES as z_,isPatternType as Q_,PATTERN_REGISTRY as $_,patternConstructId as er,DEPLOYABLE_PATTERN_TYPES as Er,OPENNEXT_PATTERN_TYPES as _r,isOpenNextPatternType as rr,CLOUDFRONT_PRICE_CLASS_VALUES as Tr,STATIC_SITE_CONFIG_KEYS as Ar,STATIC_SITE_DEPLOY_INJECTED_KEYS as Sr,STATIC_SITE_CDN_CONFIG_KEYS as tr,STATIC_SITE_ROUTING_VALUES as or,STATIC_SITE_ROUTING_INFO as ar,PATTERN_CREATE_INPUT_VALUES as Nr,PATTERN_CREATE_INPUT_FLAGS as Rr}from"./patterns/patternTypes.js";import{FRAMEWORK_VALUES as Ir,FRAMEWORKS as Cr,isFramework as nr,FRAMEWORK_PATTERN_RECOMMENDATIONS as ir,recommendPatternForFramework as mr,CREATABLE_FRAMEWORKS as Pr,requiredInputsForFramework as Lr}from"./patterns/frameworkPatterns.js";import{DEFAULT_FORMS_FROM_LOCAL_PART as Dr,defaultFormsFromAddress as pr,defaultFormsCorsOrigin as Mr,isAddressAtDomain as cr}from"./patterns/staticSiteForms.js";import{DEV_SUBSTRATE_PARAMS_SCHEMA_VERSION as Fr,DEV_SUBSTRATE_PARAMS_FILENAME as Ur,DevSubstrateSynthPropsSchema as lr,DevSubstrateParamsSchema as ur}from"./devSubstrate/params.js";import{DEV_SUBSTRATE_ENTRYPOINT_SOURCE as gr}from"./devSubstrate/entrypoint.js";import{BLESSED_CDK_TOOLCHAIN as Gr}from"./cdkToolchain.js";import{DEPLOYMENT_FAILURE_PHASES as Vr,DeploymentFailurePhaseSchema as Hr,DEPLOYMENT_FAULT_ATTRIBUTIONS as Yr,DeploymentFaultAttributionSchema as yr,DEPLOYMENT_FAILURE_PROVIDER_SOURCES as Kr,DeploymentFailureProviderSourceSchema as vr,DEPLOYMENT_FAILURE_CODE_PATTERN as Xr,DEPLOYMENT_FAILURE_SCHEMA_VERSION as br,DEPLOYMENT_FAILURE_LIMITS as Br,DeploymentFailureAnalysisSchema as Wr,DeploymentFailureProviderSchema as Jr,DeploymentFailureResourceSchema as kr,DeploymentFailureSchema as jr,parseDeploymentFailure as wr,DEPLOYMENT_FAILURE_DOCS_BASE_URL as Zr,deploymentFailureDocsUrl as qr,DEPLOYMENT_FAULT_COPY as zr,DEPLOYMENT_PROVIDER_LABELS as Qr,deriveErrorMessageFromFailure as $r,toDeploymentFailureAnalysis as eT}from"./failure/deploymentFailure.js";import{extractErrorWindow as _T,ERROR_WINDOW_CONTEXT_LINES as rT}from"./failure/extractErrorWindow.js";import{FJALL_COMPONENT_GITIGNORE as AT,FJALL_PROJECT_GITIGNORE as ST,FJALL_STATE_GITIGNORE_ENTRIES as tT,FJALL_MANAGED_STATE_DIR_ENTRIES as oT,LOCAL_CONFIG_GITIGNORE_ENTRY as aT}from"./scaffold/gitignore.js";import{ensureGitignoreEntries as RT}from"./scaffold/ensureGitignore.js";export{je as ACCOUNT_ROLES,ge as ACCOUNT_STAGES,ue as ACCOUNT_STAGES_WITH_ROOT,Xe as ACCOUNT_STAGE_EFFECTS,xe as ACCOUNT_STAGE_LABELS,he as ACCOUNT_TIERS,JE as AGENT_INSTALL_COMMAND,WE as AGENT_SETUP_PROMPTS,C as APPROVAL_TOKEN_OUTPUT_PREFIX,U_ as ARTEFACT_OUTPUT_FIELDS,rE as AWS_REGIONS_METADATA,Ve as AccountTierSchema,O as BACKUP_VAULT_NAME,Gr as BLESSED_CDK_TOOLCHAIN,y as CAPACITY_ANCHOR_MAX_LENGTH,Y as CAPACITY_ANCHOR_PATTERN,K as CAPACITY_IDENTITY_CONTEXT_KEY,V as CAPACITY_SLOT_MAX_LENGTH,h as CAPACITY_SLOT_PATTERN,y_ as CLICKHOUSE_MIGRATION_SKIP_RE,Tr as CLOUDFRONT_PRICE_CLASS_VALUES,hE as CONNECTION_FAILURE_REASONS,xE as CONNECTION_PHASES,GE as CONNECTION_TERMINAL_FAILURE_PHASES,L_ as CONTENT_HASH_TAG_PATTERN,Pr as CREATABLE_FRAMEWORKS,b as CapacityIdentityConfigSchema,v as CapacityIdentityPinSchema,X as CapacityIdentityWireSchema,dE as ConnectionWireSchema,gE as ConnectionsListResponseSchema,me as DANGEROUS_ENV_VARS,H as DEFAULT_CAPACITY_SLOT,Dr as DEFAULT_FORMS_FROM_LOCAL_PART,TE as DEFAULT_REGION,Er as DEPLOYABLE_PATTERN_TYPES,Xr as DEPLOYMENT_FAILURE_CODE_PATTERN,Zr as DEPLOYMENT_FAILURE_DOCS_BASE_URL,Br as DEPLOYMENT_FAILURE_LIMITS,Vr as DEPLOYMENT_FAILURE_PHASES,Kr as DEPLOYMENT_FAILURE_PROVIDER_SOURCES,br as DEPLOYMENT_FAILURE_SCHEMA_VERSION,Yr as DEPLOYMENT_FAULT_ATTRIBUTIONS,zr as DEPLOYMENT_FAULT_COPY,Qr as DEPLOYMENT_PROVIDER_LABELS,D_ as DEPLOY_MODES,gr as DEV_SUBSTRATE_ENTRYPOINT_SOURCE,Ur as DEV_SUBSTRATE_PARAMS_FILENAME,Fr as DEV_SUBSTRATE_PARAMS_SCHEMA_VERSION,_ as DNS_APEX,N as DOMAIN_DEPLOY_DEFAULT_PHASE,p_ as DeployModeSchema,Wr as DeploymentFailureAnalysisSchema,Hr as DeploymentFailurePhaseSchema,Jr as DeploymentFailureProviderSchema,vr as DeploymentFailureProviderSourceSchema,kr as DeploymentFailureResourceSchema,jr as DeploymentFailureSchema,yr as DeploymentFaultAttributionSchema,ur as DevSubstrateParamsSchema,lr as DevSubstrateSynthPropsSchema,rT as ERROR_WINDOW_CONTEXT_LINES,h_ as EXPECTED_CH_SCHEMA_VERSION_ENV,x_ as EXPECTED_SCHEMA_VERSION_ENV,G_ as EXPECTED_SCHEMA_VERSION_TOOL_ENV,VE as EXTERNAL_ID_PATTERN,k_ as FJALL_CLICKHOUSE_USERS,AT as FJALL_COMPONENT_GITIGNORE,Se as FJALL_CONFIG_DIR_ENV,te as FJALL_CREDENTIALS_FILENAME,oe as FJALL_HOME_DIRNAME,ae as FJALL_LOG_DIR_ENV,J_ as FJALL_MAINTENANCE_USER,oT as FJALL_MANAGED_STATE_DIR_ENTRIES,ST as FJALL_PROJECT_GITIGNORE,W_ as FJALL_SCHEMA_GATE_USER,tT as FJALL_STATE_GITIGNORE_ENTRIES,Cr as FRAMEWORKS,ir as FRAMEWORK_PATTERN_RECOMMENDATIONS,Ir as FRAMEWORK_VALUES,Ye as GOVERNANCE_ACCOUNT_TIERS,nE as GOVERNANCE_SCOPE_REQUIRED_CODE,o as HOSTS_OUTPUT_MAX_BYTES,M_ as IMAGE_TAG_PATTERN,yE as INSTALL_SOURCES,c_ as ImageTagSchema,aT as LOCAL_CONFIG_GITIGNORE_ENTRY,IE as MACHINE_ONLY_SCOPES,Le as MASKED_VALUE_MARKER,SE as MAX_SECONDARY_REGIONS,d_ as MIGRATION_SNAPSHOT_NAME_PREFIX,g_ as MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV,_r as OPENNEXT_PATTERN_TYPES,tE as OPT_IN_REGION_CODES,Rr as PATTERN_CREATE_INPUT_FLAGS,Nr as PATTERN_CREATE_INPUT_VALUES,$_ as PATTERN_REGISTRY,z_ as PATTERN_TYPES,q_ as PATTERN_TYPE_VALUES,w_ as PHYSICAL_NAME_FALLBACK_PROPERTIES,Y_ as PRISMA_MIGRATION_DIR_RE,YE as PUBLIC_PACKAGE_NAME,pe as REDACTED_KEY_SENTINEL,Z as REGION_SHORT_CODES,R_ as RESERVED_APP_NAMES,O_ as RESERVED_APP_NAME_MESSAGE,C_ as RESERVED_APP_NAME_SUFFIX,n_ as RESERVED_APP_NAME_SUFFIX_MESSAGE,Ze as RESOURCE_CATEGORIES,H_ as SCHEMA_ADMIN_PASSWORD_ENV,V_ as SCHEMA_ADMIN_USER_ENV,v_ as SCHEMA_GATE_EXIT,X_ as SCHEMA_GATE_EXIT_HINTS,Me as SCOPED_TOKEN_REGEX,OE as SCOPE_VALUES,PE as SECRET_NAME_ERROR,mE as SECRET_NAME_PATTERN,KE as SETUP_COMMANDS,XE as SETUP_MODES,BE as SETUP_STEPS,bE as SETUP_STEP_IDS,jE as SKILL_INSTALL_FILENAME,wE as SKILL_INSTALL_PATH,kE as SKILL_INSTALL_SEGMENTS,sE as SSM_COMPONENT_ERROR,LE as SSM_COMPONENT_PATTERN,DE as SSM_STANDARD_MAX_VALUE_BYTES,tr as STATIC_SITE_CDN_CONFIG_KEYS,Ar as STATIC_SITE_CONFIG_KEYS,Sr as STATIC_SITE_DEPLOY_INJECTED_KEYS,ar as STATIC_SITE_ROUTING_INFO,or as STATIC_SITE_ROUTING_VALUES,de as STRUCTURAL_ENVIRONMENTS,pE as SecretNamespaceSchema,f_ as ServiceArtefactSchema,F_ as ServiceArtefactsSchema,n as TOKEN_STDERR_PREFIX,CE as USER_GRANTABLE_SCOPES,_E as abbreviateRegion,f as accountConstructKey,ve as accountStageEffect,We as accountTier,l as albDnsExportName,u as albHostedZoneIdExportName,l_ as artefactOutputKey,g as bucketWebsiteEndpointExportName,x as bucketWebsiteHostedZoneIdExportName,r_ as buildAppConfigPath,ME as buildNamespaceParts,cE as buildParameterPath,M as capitalise,qe as categoriseResource,d as cdnDomainExportName,j as defaultConnectedAccountName,Mr as defaultFormsCorsOrigin,pr as defaultFormsFromAddress,qr as deploymentFailureDocsUrl,QE as deriveAllTargets,P_ as deriveContentHashTag,$r as deriveErrorMessageFromFailure,qE as deriveRegionsFromOrgConfig,zE as deriveTargets,RT as ensureGitignoreEntries,$E as environmentOrTier,Ke as environmentToTier,lE as escapeDotEnvValue,_T as extractErrorWindow,Pe as filterDangerousEnvVars,J as findAccountNameCollision,S_ as findBoundaryPath,A_ as findInfrastructurePaths,e_ as findTarget,q as findTrailingRegionShortCode,Ne as fjallCredentialsPath,Re as fjallHomeDir,Oe as fjallLogDir,Ie as fjallStatePath,be as formatAccountStageList,Te as formatErrorString,E_ as generateTargetName,r as getDomainExportNames,T as getDomainStackName,A as getDomainUsEast1CertificatesStackName,ke as getEnvironmentLabel,_e as getErrorCode,ee as getErrorMessage,re as getErrorStack,ze as getExpectedDuration,Qe as getFriendlyResourceType,AE as getRegionInfo,c as getSafeZoneName,F as hasAsciiStableConstructKey,Ee as hasErrorCode,i_ as hasReservedAppNameSuffix,S as hostsExportPartName,m as imageTagParameterName,a_ as inferContainerFromCandidates,Ge as isAccountStage,He as isAccountTier,cr as isAddressAtDomain,nr as isFramework,ye as isGovernanceTier,t_ as isInfrastructureFile,FE as isManageablePath,a as isManagedDomainBinding,rr as isOpenNextPatternType,Q_ as isPatternType,I_ as isReservedAppName,Ue as mapSettledWithConcurrency,se as maskSensitiveOutput,$ as normaliseError,oE as optInRegionWarning,wr as parseDeploymentFailure,UE as parseDotEnv,eE as parseGitRemoteUrl,fE as parseParameterPath,De as parseShellArgs,er as patternConstructId,B as projectCapacityIdentityToTarget,mr as recommendPatternForFramework,z as regionSuffixRejectionMessage,aE as regions,Lr as requiredInputsForFramework,Je as resolveSynthEnvironment,b_ as schemaGateExitKind,t as serialiseHostsChunks,ne as singleton,fe as sleep,Be as stageFromWireEnvironment,w as suffixedAccountName,NE as suggestRegionForTimezone,eT as toDeploymentFailureAnalysis,s as toKebab,L as toPascalCase,p as toScreamingSnake,D as toValidDatabaseName,vE as upgradeCommand};

package/dist/migration/constants.d.ts

@@ -13,6 +13,18 @@
  * leave the IAM glob granting access to a name the runner no longer emits.
  */
 export declare const MIGRATION_SNAPSHOT_NAME_PREFIX: "fjall-premigrate";
+/**
+ * Container env var name carrying the target database's effective automated
+ * backup retention in whole days. Emitted by
+ * `RelationalDatabase.getMigrationContributions()` alongside
+ * `SNAPSHOT_TARGET_KIND`/`SNAPSHOT_TARGET_ARN`; the runner's prune-on-success
+ * step reads it to keep every `fjall-premigrate-*` snapshot younger than the
+ * PITR window and delete the rest (newest-N floor applies regardless). Both
+ * sides import this name so a rename cannot leave the construct injecting an
+ * env the runner no longer reads — which would silently pin the runner to its
+ * default retention.
+ */
+export declare const MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV: "MIGRATION_SNAPSHOT_RETENTION_DAYS";
 /**
  * Container env var name for the schema-version fail-fast gate. Every
  * container of every service whose `connections:` includes a relational DB

package/dist/migration/constants.js

@@ -1 +1 @@
-const _="fjall-premigrate",E="EXPECTED_SCHEMA_VERSION",A="EXPECTED_SCHEMA_VERSION_TOOL",S="EXPECTED_CH_SCHEMA_VERSION",C="SCHEMA_ADMIN_USER",t="SCHEMA_ADMIN_PASSWORD",o="FJALL_SCHEMA_GATE_DB_URL_BASE",H="FJALL_SCHEMA_GATE_DB_USER",M="FJALL_SCHEMA_GATE_DB_PASSWORD",R="CLICKHOUSE_URL",T="CLICKHOUSE_DATABASE",N="CLICKHOUSE_CA_CERT",I="FJALL_SCHEMA_GATE_CH_USER",e="FJALL_SCHEMA_GATE_CH_PASSWORD",O=120,s="fjall-schema-gate",c="fjall/schema-gate",D="public.ecr.aws/fjall/schema-gate",r=/^\d{14}_/,p=/\.dev\.sql$/,L=/\.sql$/;export{L as CLICKHOUSE_MIGRATION_FILE_RE,p as CLICKHOUSE_MIGRATION_SKIP_RE,S as EXPECTED_CH_SCHEMA_VERSION_ENV,E as EXPECTED_SCHEMA_VERSION_ENV,A as EXPECTED_SCHEMA_VERSION_TOOL_ENV,_ as MIGRATION_SNAPSHOT_NAME_PREFIX,r as PRISMA_MIGRATION_DIR_RE,t as SCHEMA_ADMIN_PASSWORD_ENV,C as SCHEMA_ADMIN_USER_ENV,N as SCHEMA_GATE_CH_CA_CERT_ENV,T as SCHEMA_GATE_CH_DATABASE_ENV,e as SCHEMA_GATE_CH_PASSWORD_ENV,R as SCHEMA_GATE_CH_URL_ENV,I as SCHEMA_GATE_CH_USER_ENV,s as SCHEMA_GATE_CONTAINER_NAME,M as SCHEMA_GATE_DB_PASSWORD_ENV,o as SCHEMA_GATE_DB_URL_BASE_ENV,H as SCHEMA_GATE_DB_USER_ENV,c as SCHEMA_GATE_ECR_REPO_NAME,D as SCHEMA_GATE_PUBLIC_IMAGE_REPO,O as SCHEMA_GATE_START_TIMEOUT_SECONDS};
+const _="fjall-premigrate",E="MIGRATION_SNAPSHOT_RETENTION_DAYS",A="EXPECTED_SCHEMA_VERSION",S="EXPECTED_SCHEMA_VERSION_TOOL",C="EXPECTED_CH_SCHEMA_VERSION",t="SCHEMA_ADMIN_USER",T="SCHEMA_ADMIN_PASSWORD",o="FJALL_SCHEMA_GATE_DB_URL_BASE",H="FJALL_SCHEMA_GATE_DB_USER",M="FJALL_SCHEMA_GATE_DB_PASSWORD",N="CLICKHOUSE_URL",R="CLICKHOUSE_DATABASE",I="CLICKHOUSE_CA_CERT",O="FJALL_SCHEMA_GATE_CH_USER",e="FJALL_SCHEMA_GATE_CH_PASSWORD",s=120,D="fjall-schema-gate",c="fjall/schema-gate",r="public.ecr.aws/fjall/schema-gate",p=/^\d{14}_/,G=/\.dev\.sql$/,L=/\.sql$/;export{L as CLICKHOUSE_MIGRATION_FILE_RE,G as CLICKHOUSE_MIGRATION_SKIP_RE,C as EXPECTED_CH_SCHEMA_VERSION_ENV,A as EXPECTED_SCHEMA_VERSION_ENV,S as EXPECTED_SCHEMA_VERSION_TOOL_ENV,_ as MIGRATION_SNAPSHOT_NAME_PREFIX,E as MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV,p as PRISMA_MIGRATION_DIR_RE,T as SCHEMA_ADMIN_PASSWORD_ENV,t as SCHEMA_ADMIN_USER_ENV,I as SCHEMA_GATE_CH_CA_CERT_ENV,R as SCHEMA_GATE_CH_DATABASE_ENV,e as SCHEMA_GATE_CH_PASSWORD_ENV,N as SCHEMA_GATE_CH_URL_ENV,O as SCHEMA_GATE_CH_USER_ENV,D as SCHEMA_GATE_CONTAINER_NAME,M as SCHEMA_GATE_DB_PASSWORD_ENV,o as SCHEMA_GATE_DB_URL_BASE_ENV,H as SCHEMA_GATE_DB_USER_ENV,c as SCHEMA_GATE_ECR_REPO_NAME,r as SCHEMA_GATE_PUBLIC_IMAGE_REPO,s as SCHEMA_GATE_START_TIMEOUT_SECONDS};

package/dist/migration/index.d.ts

@@ -1,4 +1,4 @@
-export { MIGRATION_SNAPSHOT_NAME_PREFIX, EXPECTED_SCHEMA_VERSION_ENV, EXPECTED_SCHEMA_VERSION_TOOL_ENV, EXPECTED_CH_SCHEMA_VERSION_ENV, SCHEMA_ADMIN_USER_ENV, SCHEMA_ADMIN_PASSWORD_ENV, SCHEMA_GATE_DB_URL_BASE_ENV, SCHEMA_GATE_DB_USER_ENV, SCHEMA_GATE_DB_PASSWORD_ENV, SCHEMA_GATE_CH_URL_ENV, SCHEMA_GATE_CH_DATABASE_ENV, SCHEMA_GATE_CH_CA_CERT_ENV, SCHEMA_GATE_CH_USER_ENV, SCHEMA_GATE_CH_PASSWORD_ENV, SCHEMA_GATE_START_TIMEOUT_SECONDS, SCHEMA_GATE_CONTAINER_NAME, SCHEMA_GATE_ECR_REPO_NAME, SCHEMA_GATE_PUBLIC_IMAGE_REPO, PRISMA_MIGRATION_DIR_RE, CLICKHOUSE_MIGRATION_SKIP_RE } from "./constants.js";
+export { MIGRATION_SNAPSHOT_NAME_PREFIX, MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV, EXPECTED_SCHEMA_VERSION_ENV, EXPECTED_SCHEMA_VERSION_TOOL_ENV, EXPECTED_CH_SCHEMA_VERSION_ENV, SCHEMA_ADMIN_USER_ENV, SCHEMA_ADMIN_PASSWORD_ENV, SCHEMA_GATE_DB_URL_BASE_ENV, SCHEMA_GATE_DB_USER_ENV, SCHEMA_GATE_DB_PASSWORD_ENV, SCHEMA_GATE_CH_URL_ENV, SCHEMA_GATE_CH_DATABASE_ENV, SCHEMA_GATE_CH_CA_CERT_ENV, SCHEMA_GATE_CH_USER_ENV, SCHEMA_GATE_CH_PASSWORD_ENV, SCHEMA_GATE_START_TIMEOUT_SECONDS, SCHEMA_GATE_CONTAINER_NAME, SCHEMA_GATE_ECR_REPO_NAME, SCHEMA_GATE_PUBLIC_IMAGE_REPO, PRISMA_MIGRATION_DIR_RE, CLICKHOUSE_MIGRATION_SKIP_RE } from "./constants.js";
 export { pickLatestPrismaMigration } from "./pickLatestPrismaMigration.js";
 export { pickLatestClickHouseMigration } from "./pickLatestClickHouseMigration.js";
 export { isOrderableSchemaVersion, isSchemaVersionSatisfied } from "./compareSchemaVersion.js";

package/dist/migration/index.js

@@ -1 +1 @@
-import{MIGRATION_SNAPSHOT_NAME_PREFIX as A,EXPECTED_SCHEMA_VERSION_ENV as S,EXPECTED_SCHEMA_VERSION_TOOL_ENV as C,EXPECTED_CH_SCHEMA_VERSION_ENV as e,SCHEMA_ADMIN_USER_ENV as N,SCHEMA_ADMIN_PASSWORD_ENV as r,SCHEMA_GATE_DB_URL_BASE_ENV as T,SCHEMA_GATE_DB_USER_ENV as M,SCHEMA_GATE_DB_PASSWORD_ENV as R,SCHEMA_GATE_CH_URL_ENV as H,SCHEMA_GATE_CH_DATABASE_ENV as I,SCHEMA_GATE_CH_CA_CERT_ENV as o,SCHEMA_GATE_CH_USER_ENV as a,SCHEMA_GATE_CH_PASSWORD_ENV as O,SCHEMA_GATE_START_TIMEOUT_SECONDS as m,SCHEMA_GATE_CONTAINER_NAME as U,SCHEMA_GATE_ECR_REPO_NAME as s,SCHEMA_GATE_PUBLIC_IMAGE_REPO as t,PRISMA_MIGRATION_DIR_RE as L,CLICKHOUSE_MIGRATION_SKIP_RE as i}from"./constants.js";import{pickLatestPrismaMigration as G}from"./pickLatestPrismaMigration.js";import{pickLatestClickHouseMigration as D}from"./pickLatestClickHouseMigration.js";import{isOrderableSchemaVersion as p,isSchemaVersionSatisfied as f}from"./compareSchemaVersion.js";import{verifyExpectedSchemaVersion as n}from"./verifyExpectedSchemaVersion.js";import{CLICKHOUSE_MANAGED_USERS_ENV as F,MANAGED_USER_NAME_PATTERN as d,userPasswordEnvName as h,ManagedUserNameSchema as l,ManagedUserNamesSchema as B}from"./clickhouseSqlUsers.js";import{FJALL_SCHEMA_GATE_USER as k,FJALL_MAINTENANCE_USER as u,FJALL_CLICKHOUSE_USERS as b,FJALL_CLICKHOUSE_USER_PREFIX as g,isReservedClickHouseUserName as v,CLICKHOUSE_FRAMEWORK_USERS_ENV as J,CLICKHOUSE_MAINTENANCE_PROFILE_ENV as W,CLICKHOUSE_BACKUP_SCRATCH_DATABASE as w,FrameworkUserNameSchema as y,FrameworkUserNamesSchema as Y}from"./clickhouseFrameworkUsers.js";import{SCHEMA_GATE_EXIT as j,SCHEMA_GATE_EXIT_HINTS as q,schemaGateExitKind as z}from"./schemaGateExit.js";import{CONTROL_PLANE_ACTIVITY_RECENCY_SECONDS as $,buildControlPlaneActivityQuery as EE}from"./controlPlaneActivity.js";import{sleepAbortable as AE}from"./sleepAbortable.js";export{w as CLICKHOUSE_BACKUP_SCRATCH_DATABASE,J as CLICKHOUSE_FRAMEWORK_USERS_ENV,W as CLICKHOUSE_MAINTENANCE_PROFILE_ENV,F as CLICKHOUSE_MANAGED_USERS_ENV,i as CLICKHOUSE_MIGRATION_SKIP_RE,$ as CONTROL_PLANE_ACTIVITY_RECENCY_SECONDS,e as EXPECTED_CH_SCHEMA_VERSION_ENV,S as EXPECTED_SCHEMA_VERSION_ENV,C as EXPECTED_SCHEMA_VERSION_TOOL_ENV,b as FJALL_CLICKHOUSE_USERS,g as FJALL_CLICKHOUSE_USER_PREFIX,u as FJALL_MAINTENANCE_USER,k as FJALL_SCHEMA_GATE_USER,y as FrameworkUserNameSchema,Y as FrameworkUserNamesSchema,d as MANAGED_USER_NAME_PATTERN,A as MIGRATION_SNAPSHOT_NAME_PREFIX,l as ManagedUserNameSchema,B as ManagedUserNamesSchema,L as PRISMA_MIGRATION_DIR_RE,r as SCHEMA_ADMIN_PASSWORD_ENV,N as SCHEMA_ADMIN_USER_ENV,o as SCHEMA_GATE_CH_CA_CERT_ENV,I as SCHEMA_GATE_CH_DATABASE_ENV,O as SCHEMA_GATE_CH_PASSWORD_ENV,H as SCHEMA_GATE_CH_URL_ENV,a as SCHEMA_GATE_CH_USER_ENV,U as SCHEMA_GATE_CONTAINER_NAME,R as SCHEMA_GATE_DB_PASSWORD_ENV,T as SCHEMA_GATE_DB_URL_BASE_ENV,M as SCHEMA_GATE_DB_USER_ENV,s as SCHEMA_GATE_ECR_REPO_NAME,j as SCHEMA_GATE_EXIT,q as SCHEMA_GATE_EXIT_HINTS,t as SCHEMA_GATE_PUBLIC_IMAGE_REPO,m as SCHEMA_GATE_START_TIMEOUT_SECONDS,EE as buildControlPlaneActivityQuery,p as isOrderableSchemaVersion,v as isReservedClickHouseUserName,f as isSchemaVersionSatisfied,D as pickLatestClickHouseMigration,G as pickLatestPrismaMigration,z as schemaGateExitKind,AE as sleepAbortable,h as userPasswordEnvName,n as verifyExpectedSchemaVersion};
+import{MIGRATION_SNAPSHOT_NAME_PREFIX as A,MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV as S,EXPECTED_SCHEMA_VERSION_ENV as C,EXPECTED_SCHEMA_VERSION_TOOL_ENV as N,EXPECTED_CH_SCHEMA_VERSION_ENV as e,SCHEMA_ADMIN_USER_ENV as T,SCHEMA_ADMIN_PASSWORD_ENV as r,SCHEMA_GATE_DB_URL_BASE_ENV as R,SCHEMA_GATE_DB_USER_ENV as M,SCHEMA_GATE_DB_PASSWORD_ENV as H,SCHEMA_GATE_CH_URL_ENV as I,SCHEMA_GATE_CH_DATABASE_ENV as o,SCHEMA_GATE_CH_CA_CERT_ENV as O,SCHEMA_GATE_CH_USER_ENV as a,SCHEMA_GATE_CH_PASSWORD_ENV as m,SCHEMA_GATE_START_TIMEOUT_SECONDS as U,SCHEMA_GATE_CONTAINER_NAME as s,SCHEMA_GATE_ECR_REPO_NAME as t,SCHEMA_GATE_PUBLIC_IMAGE_REPO as L,PRISMA_MIGRATION_DIR_RE as V,CLICKHOUSE_MIGRATION_SKIP_RE as i}from"./constants.js";import{pickLatestPrismaMigration as P}from"./pickLatestPrismaMigration.js";import{pickLatestClickHouseMigration as c}from"./pickLatestClickHouseMigration.js";import{isOrderableSchemaVersion as f,isSchemaVersionSatisfied as x}from"./compareSchemaVersion.js";import{verifyExpectedSchemaVersion as K}from"./verifyExpectedSchemaVersion.js";import{CLICKHOUSE_MANAGED_USERS_ENV as d,MANAGED_USER_NAME_PATTERN as h,userPasswordEnvName as l,ManagedUserNameSchema as B,ManagedUserNamesSchema as X}from"./clickhouseSqlUsers.js";import{FJALL_SCHEMA_GATE_USER as u,FJALL_MAINTENANCE_USER as b,FJALL_CLICKHOUSE_USERS as g,FJALL_CLICKHOUSE_USER_PREFIX as v,isReservedClickHouseUserName as J,CLICKHOUSE_FRAMEWORK_USERS_ENV as W,CLICKHOUSE_MAINTENANCE_PROFILE_ENV as w,CLICKHOUSE_BACKUP_SCRATCH_DATABASE as y,FrameworkUserNameSchema as Y,FrameworkUserNamesSchema as Q}from"./clickhouseFrameworkUsers.js";import{SCHEMA_GATE_EXIT as q,SCHEMA_GATE_EXIT_HINTS as z,schemaGateExitKind as Z}from"./schemaGateExit.js";import{CONTROL_PLANE_ACTIVITY_RECENCY_SECONDS as EE,buildControlPlaneActivityQuery as _E}from"./controlPlaneActivity.js";import{sleepAbortable as SE}from"./sleepAbortable.js";export{y as CLICKHOUSE_BACKUP_SCRATCH_DATABASE,W as CLICKHOUSE_FRAMEWORK_USERS_ENV,w as CLICKHOUSE_MAINTENANCE_PROFILE_ENV,d as CLICKHOUSE_MANAGED_USERS_ENV,i as CLICKHOUSE_MIGRATION_SKIP_RE,EE as CONTROL_PLANE_ACTIVITY_RECENCY_SECONDS,e as EXPECTED_CH_SCHEMA_VERSION_ENV,C as EXPECTED_SCHEMA_VERSION_ENV,N as EXPECTED_SCHEMA_VERSION_TOOL_ENV,g as FJALL_CLICKHOUSE_USERS,v as FJALL_CLICKHOUSE_USER_PREFIX,b as FJALL_MAINTENANCE_USER,u as FJALL_SCHEMA_GATE_USER,Y as FrameworkUserNameSchema,Q as FrameworkUserNamesSchema,h as MANAGED_USER_NAME_PATTERN,A as MIGRATION_SNAPSHOT_NAME_PREFIX,S as MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV,B as ManagedUserNameSchema,X as ManagedUserNamesSchema,V as PRISMA_MIGRATION_DIR_RE,r as SCHEMA_ADMIN_PASSWORD_ENV,T as SCHEMA_ADMIN_USER_ENV,O as SCHEMA_GATE_CH_CA_CERT_ENV,o as SCHEMA_GATE_CH_DATABASE_ENV,m as SCHEMA_GATE_CH_PASSWORD_ENV,I as SCHEMA_GATE_CH_URL_ENV,a as SCHEMA_GATE_CH_USER_ENV,s as SCHEMA_GATE_CONTAINER_NAME,H as SCHEMA_GATE_DB_PASSWORD_ENV,R as SCHEMA_GATE_DB_URL_BASE_ENV,M as SCHEMA_GATE_DB_USER_ENV,t as SCHEMA_GATE_ECR_REPO_NAME,q as SCHEMA_GATE_EXIT,z as SCHEMA_GATE_EXIT_HINTS,L as SCHEMA_GATE_PUBLIC_IMAGE_REPO,U as SCHEMA_GATE_START_TIMEOUT_SECONDS,_E as buildControlPlaneActivityQuery,f as isOrderableSchemaVersion,J as isReservedClickHouseUserName,x as isSchemaVersionSatisfied,c as pickLatestClickHouseMigration,P as pickLatestPrismaMigration,Z as schemaGateExitKind,SE as sleepAbortable,l as userPasswordEnvName,K as verifyExpectedSchemaVersion};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fjall/util",
-  "version": "26.0.0",
+  "version": "27.1.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/fjall-tech/fjall.git",