@fjall/util 27.1.0 → 28.0.0

package/dist/.build-source-hash

@@ -9,7 +9,7 @@
     "package.json",
     "tsconfig.json"
   ],
-  "hash": "adabd71ea56dfdf4a34b579522956b4f7087de804fd00771c4f35831411eb4e9",
+  "hash": "a4a6c680a5fc47c3a9d558081fd672779b9a8c893baa8133400f8abe1c461588",
   "files": {
     "src/async/concurrency.ts": "3c7ebe0222a720f9",
     "src/async/singleton.ts": "7bcc21b0fb920561",
@@ -17,12 +17,12 @@
     "src/atomicTempNaming.ts": "d08f34bdb062be6f",
     "src/aws/CloudFormationFailureAnalyser.ts": "4e68b353171edd31",
     "src/aws/cloudformationTypes.ts": "e43bab9c96a21856",
-    "src/aws/costAllocationTags.ts": "8b60ac5b62a68a9d",
+    "src/aws/costAllocationTags.ts": "2bdaea75f6f8e18f",
     "src/aws/deployProgress.ts": "be09dedb4deb9a7a",
     "src/aws/driftSuspects.ts": "5400dc05ebd6c977",
     "src/aws/errors.ts": "5addfa6bb2d1456a",
     "src/aws/failureAnalysisCategories.ts": "85ab1632d8069273",
-    "src/aws/index.ts": "ba6c3c8c913e4789",
+    "src/aws/index.ts": "8a394d0f6fce003f",
     "src/aws/infraTags.ts": "6b1e65bf7119f32c",
     "src/aws/ipamTags.ts": "ac19ecd6c36b3bc2",
     "src/aws/maskFailureAnalysis.ts": "ae11250412cd6fd8",
@@ -80,7 +80,7 @@
     "src/infra/domainExports.ts": "18de5b8668633aaf",
     "src/infra/imageTags.ts": "82d14f3dfd6ca68f",
     "src/infra/regions.ts": "26b80d7cea05454c",
-    "src/infra/tokenScopes.ts": "88c6a1f0da3fa491",
+    "src/infra/tokenScopes.ts": "68f0152394fb416e",
     "src/insights/computePatternFingerprint.ts": "b5d3a4704f42cc1f",
     "src/logRotation.ts": "5ea989894082107b",
     "src/logger.ts": "865ec4ec62a9a588",
@@ -131,9 +131,9 @@
     "src/staticSiteOutput.ts": "cc81ed32acc597f1",
     "src/targets.ts": "126280f0a5762e21",
     "../scripts/minify-dist.mjs": "6b2e4b0df8aec601",
-    "package.json": "df9e3dd8ac0bbae0",
+    "package.json": "c5cf041603e2cb51",
     "tsconfig.json": "db759831ad95f396"
   },
-  "outputHash": "ff352bccabc20347c6b568852aa7c60e027da5632d54c4dbc03aca44c91b8e37",
+  "outputHash": "38a1ddd9302ec2596da9c1bdbb547a88f936d9969acad82ff77b0bb6f2f0d0ac",
   "outputFileCount": 247
 }

package/dist/.minified

@@ -1 +1 @@
-123 files minified at 2026-08-31T21:02:27.887Z
+123 files minified at 2026-08-31T22:01:17.574Z

package/dist/aws/costAllocationTags.d.ts

@@ -32,6 +32,16 @@ export declare const COST_ALLOCATION_TAGS: {
  * management (root) account and stage-less governance resources.
  */
 export declare const DEFAULT_COST_ALLOCATION_ENVIRONMENT: "management";
+/**
+ * Owner tag value when nothing more specific is known. Two producers share
+ * it: the fjall App stamps it tree-wide when neither an explicit
+ * `addTags` owner nor an orgId context resolves (`lib/app.ts`
+ * `applyTagsAspect()`), and the generator's `generateTags` emits it into
+ * scaffolded `addTags` blocks when the plan carries no owner — so every
+ * estate satisfies the posture `missing-required-tags` owner requirement
+ * without manual tagging.
+ */
+export declare const DEFAULT_COST_ALLOCATION_OWNER: "engineering";
 /** SDK tag shape (`{ Key, Value }`) accepted by `CreateRepositoryCommand`. */
 export interface EcrCreateTag {
     readonly Key: string;

package/dist/aws/costAllocationTags.js

@@ -1 +1 @@
-var l=Object.defineProperty;var t=(o,e)=>l(o,"name",{value:e,configurable:!0});const n={ENVIRONMENT:"fjall:costAllocation:environment",SERVICE:"fjall:costAllocation:service",DOMAIN:"fjall:costAllocation:domain",OWNER:"fjall:costAllocation:owner"},c="management";function r(o){return[{Key:n.SERVICE,Value:o}]}t(r,"ecrCreateRepositoryTags");export{n as COST_ALLOCATION_TAGS,c as DEFAULT_COST_ALLOCATION_ENVIRONMENT,r as ecrCreateRepositoryTags};
+var n=Object.defineProperty;var e=(o,t)=>n(o,"name",{value:t,configurable:!0});const l={ENVIRONMENT:"fjall:costAllocation:environment",SERVICE:"fjall:costAllocation:service",DOMAIN:"fjall:costAllocation:domain",OWNER:"fjall:costAllocation:owner"},c="management",A="engineering";function O(o){return[{Key:l.SERVICE,Value:o}]}e(O,"ecrCreateRepositoryTags");export{l as COST_ALLOCATION_TAGS,c as DEFAULT_COST_ALLOCATION_ENVIRONMENT,A as DEFAULT_COST_ALLOCATION_OWNER,O as ecrCreateRepositoryTags};

package/dist/aws/index.d.ts

@@ -7,5 +7,5 @@ export { maskFailureAnalysis } from "./maskFailureAnalysis.js";
 export { classifyDriftSuspectEvents, findCurrentOperationStart, isDriftSuspectReason, isOperationOpeningEvent, type DriftSuspectEvent } from "./driftSuspects.js";
 export { IPAM_OPERATIONS_POOL_TAG_KEY, formatIpamPairTagValue } from "./ipamTags.js";
 export { SDK_PRE_EMPTY_TAG_KEY } from "./infraTags.js";
-export { COST_ALLOCATION_TAGS, DEFAULT_COST_ALLOCATION_ENVIRONMENT, ecrCreateRepositoryTags, type EcrCreateTag } from "./costAllocationTags.js";
+export { COST_ALLOCATION_TAGS, DEFAULT_COST_ALLOCATION_ENVIRONMENT, DEFAULT_COST_ALLOCATION_OWNER, ecrCreateRepositoryTags, type EcrCreateTag } from "./costAllocationTags.js";
 export { ACCOUNT_MONITORING_ROLE_NAME } from "./monitoringRole.js";

package/dist/aws/index.js

@@ -1 +1 @@
-import{AWSError as e,NoRolesFoundError as t,InvalidCredentialsError as E,SSOTokenExpiredError as s,MissingRegionError as i,ProfileNotFoundError as a,CommandError as n,isAWSError as A,isNoRolesFoundError as O,isSSOUnauthorizedError as _}from"./errors.js";import{STACK_NOT_FOUND_PATTERN as p,CDK_NO_STACKS_MATCH as S,isResourceEvent as f}from"./cloudformationTypes.js";import{countResourceProgress as N,formatElapsed as C}from"./deployProgress.js";import{CloudFormationFailureAnalyser as u}from"./CloudFormationFailureAnalyser.js";import{FAILURE_ANALYSIS_CATEGORIES as x}from"./failureAnalysisCategories.js";import{maskFailureAnalysis as d}from"./maskFailureAnalysis.js";import{classifyDriftSuspectEvents as L,findCurrentOperationStart as P,isDriftSuspectReason as c,isOperationOpeningEvent as M}from"./driftSuspects.js";import{IPAM_OPERATIONS_POOL_TAG_KEY as D,formatIpamPairTagValue as K}from"./ipamTags.js";import{SDK_PRE_EMPTY_TAG_KEY as U}from"./infraTags.js";import{COST_ALLOCATION_TAGS as y,DEFAULT_COST_ALLOCATION_ENVIRONMENT as Y,ecrCreateRepositoryTags as k}from"./costAllocationTags.js";import{ACCOUNT_MONITORING_ROLE_NAME as W}from"./monitoringRole.js";export{W as ACCOUNT_MONITORING_ROLE_NAME,e as AWSError,S as CDK_NO_STACKS_MATCH,y as COST_ALLOCATION_TAGS,u as CloudFormationFailureAnalyser,n as CommandError,Y as DEFAULT_COST_ALLOCATION_ENVIRONMENT,x as FAILURE_ANALYSIS_CATEGORIES,D as IPAM_OPERATIONS_POOL_TAG_KEY,E as InvalidCredentialsError,i as MissingRegionError,t as NoRolesFoundError,a as ProfileNotFoundError,U as SDK_PRE_EMPTY_TAG_KEY,s as SSOTokenExpiredError,p as STACK_NOT_FOUND_PATTERN,L as classifyDriftSuspectEvents,N as countResourceProgress,k as ecrCreateRepositoryTags,P as findCurrentOperationStart,C as formatElapsed,K as formatIpamPairTagValue,A as isAWSError,c as isDriftSuspectReason,O as isNoRolesFoundError,M as isOperationOpeningEvent,f as isResourceEvent,_ as isSSOUnauthorizedError,d as maskFailureAnalysis};
+import{AWSError as e,NoRolesFoundError as t,InvalidCredentialsError as E,SSOTokenExpiredError as s,MissingRegionError as O,ProfileNotFoundError as i,CommandError as A,isAWSError as _,isNoRolesFoundError as T,isSSOUnauthorizedError as a}from"./errors.js";import{STACK_NOT_FOUND_PATTERN as S,CDK_NO_STACKS_MATCH as p,isResourceEvent as N}from"./cloudformationTypes.js";import{countResourceProgress as m,formatElapsed as C}from"./deployProgress.js";import{CloudFormationFailureAnalyser as u}from"./CloudFormationFailureAnalyser.js";import{FAILURE_ANALYSIS_CATEGORIES as I}from"./failureAnalysisCategories.js";import{maskFailureAnalysis as L}from"./maskFailureAnalysis.js";import{classifyDriftSuspectEvents as F,findCurrentOperationStart as P,isDriftSuspectReason as c,isOperationOpeningEvent as D}from"./driftSuspects.js";import{IPAM_OPERATIONS_POOL_TAG_KEY as g,formatIpamPairTagValue as K}from"./ipamTags.js";import{SDK_PRE_EMPTY_TAG_KEY as G}from"./infraTags.js";import{COST_ALLOCATION_TAGS as y,DEFAULT_COST_ALLOCATION_ENVIRONMENT as Y,DEFAULT_COST_ALLOCATION_OWNER as W,ecrCreateRepositoryTags as k}from"./costAllocationTags.js";import{ACCOUNT_MONITORING_ROLE_NAME as h}from"./monitoringRole.js";export{h as ACCOUNT_MONITORING_ROLE_NAME,e as AWSError,p as CDK_NO_STACKS_MATCH,y as COST_ALLOCATION_TAGS,u as CloudFormationFailureAnalyser,A as CommandError,Y as DEFAULT_COST_ALLOCATION_ENVIRONMENT,W as DEFAULT_COST_ALLOCATION_OWNER,I as FAILURE_ANALYSIS_CATEGORIES,g as IPAM_OPERATIONS_POOL_TAG_KEY,E as InvalidCredentialsError,O as MissingRegionError,t as NoRolesFoundError,i as ProfileNotFoundError,G as SDK_PRE_EMPTY_TAG_KEY,s as SSOTokenExpiredError,S as STACK_NOT_FOUND_PATTERN,F as classifyDriftSuspectEvents,m as countResourceProgress,k as ecrCreateRepositoryTags,P as findCurrentOperationStart,C as formatElapsed,K as formatIpamPairTagValue,_ as isAWSError,c as isDriftSuspectReason,T as isNoRolesFoundError,D as isOperationOpeningEvent,N as isResourceEvent,a as isSSOUnauthorizedError,L as maskFailureAnalysis};

package/dist/infra/tokenScopes.d.ts

@@ -1,7 +1,7 @@
 /**
  * Single source of truth for scoped-token scope values shared across
- * webapp (`/api/tokens` schemas + `scopedAuth.ts`) and CLI (agent output
- * layer's `getRequiredScopes()` lookup).
+ * webapp (`/api/tokens` schemas + `scopedAuth.ts`) and CLI (the
+ * `COMMAND_SCOPES` declaration registry in `util/agent/tokenScopes.ts`).
  *
  * Drift between the two sides previously meant a webapp role granting
  * a scope the CLI did not know how to request, or vice versa. Both

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fjall/util",
-  "version": "27.1.0",
+  "version": "28.0.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/fjall-tech/fjall.git",