@fjall/util 28.0.0 → 28.1.1

package/dist/.build-source-hash

@@ -9,7 +9,7 @@
     "package.json",
     "tsconfig.json"
   ],
-  "hash": "a4a6c680a5fc47c3a9d558081fd672779b9a8c893baa8133400f8abe1c461588",
+  "hash": "1e27cc1dbbd8fe40e2af35a087c513f98db92b4a4d49bc5917a352fc0ab5a803",
   "files": {
     "src/async/concurrency.ts": "3c7ebe0222a720f9",
     "src/async/singleton.ts": "7bcc21b0fb920561",
@@ -17,12 +17,12 @@
     "src/atomicTempNaming.ts": "d08f34bdb062be6f",
     "src/aws/CloudFormationFailureAnalyser.ts": "4e68b353171edd31",
     "src/aws/cloudformationTypes.ts": "e43bab9c96a21856",
-    "src/aws/costAllocationTags.ts": "2bdaea75f6f8e18f",
+    "src/aws/costAllocationTags.ts": "56cb9593dab3027b",
     "src/aws/deployProgress.ts": "be09dedb4deb9a7a",
     "src/aws/driftSuspects.ts": "5400dc05ebd6c977",
     "src/aws/errors.ts": "5addfa6bb2d1456a",
     "src/aws/failureAnalysisCategories.ts": "85ab1632d8069273",
-    "src/aws/index.ts": "8a394d0f6fce003f",
+    "src/aws/index.ts": "d74f645bf6ba312c",
     "src/aws/infraTags.ts": "6b1e65bf7119f32c",
     "src/aws/ipamTags.ts": "ac19ecd6c36b3bc2",
     "src/aws/maskFailureAnalysis.ts": "ae11250412cd6fd8",
@@ -72,7 +72,7 @@
     "src/fsHelpers.ts": "4dd3877b3953c6a9",
     "src/fsScan.ts": "feb187758481443f",
     "src/httpKeepAlive.ts": "c8fe4b118ef4c79f",
-    "src/index.ts": "09fc76f874778ce9",
+    "src/index.ts": "916d61efc9fbc36f",
     "src/infra/backupVault.ts": "661678a6dfb0b648",
     "src/infra/connectionsWire.ts": "e3afa3ba95a531d8",
     "src/infra/deployArtefacts.ts": "235ac21dd3ccf0b2",
@@ -91,7 +91,7 @@
     "src/migration/clickhouseFrameworkUsers.ts": "4bd55a96d4fddff4",
     "src/migration/clickhouseSqlUsers.ts": "c916e148367715bb",
     "src/migration/compareSchemaVersion.ts": "1c9247e722ec5d5b",
-    "src/migration/constants.ts": "426a83e18c77c51d",
+    "src/migration/constants.ts": "ea1722b563e2875e",
     "src/migration/controlPlaneActivity.ts": "c7ba33958f9fcbcc",
     "src/migration/index.ts": "dc711329d0060213",
     "src/migration/pickLatestClickHouseMigration.ts": "a5b4a00ba63522cb",
@@ -131,9 +131,9 @@
     "src/staticSiteOutput.ts": "cc81ed32acc597f1",
     "src/targets.ts": "126280f0a5762e21",
     "../scripts/minify-dist.mjs": "6b2e4b0df8aec601",
-    "package.json": "c5cf041603e2cb51",
+    "package.json": "2a7e3be0bc8966eb",
     "tsconfig.json": "db759831ad95f396"
   },
-  "outputHash": "38a1ddd9302ec2596da9c1bdbb547a88f936d9969acad82ff77b0bb6f2f0d0ac",
+  "outputHash": "9205c6615c777309809acf09486fd69ccea5fb9804509657ed413078c14b283a",
   "outputFileCount": 247
 }

package/dist/.minified

@@ -1 +1 @@
-123 files minified at 2026-08-31T22:01:17.574Z
+123 files minified at 2026-09-01T09:27:21.783Z

package/dist/aws/costAllocationTags.d.ts

@@ -42,11 +42,27 @@ export declare const DEFAULT_COST_ALLOCATION_ENVIRONMENT: "management";
  * without manual tagging.
  */
 export declare const DEFAULT_COST_ALLOCATION_OWNER: "engineering";
-/** SDK tag shape (`{ Key, Value }`) accepted by `CreateRepositoryCommand`. */
-export interface EcrCreateTag {
+/** SDK tag shape (`{ Key, Value }`) shared by the RDS and ECR create/tag commands. */
+export interface AwsSdkTag {
     readonly Key: string;
     readonly Value: string;
 }
+/** SDK tag shape accepted by `CreateRepositoryCommand`. */
+export type EcrCreateTag = AwsSdkTag;
+/**
+ * Tag set for the runner-taken pre-migration RDS snapshot: the source
+ * database's cost-allocation tags (`fjall:costAllocation:*`, mirrored
+ * verbatim — never any other key, so `aws:`-reserved and user tags stay
+ * behind) plus the `fjall:snapshotKind=premigrate` marker. Passing `Tags` on
+ * `CreateDBSnapshot` suppresses RDS's `CopyTagsToSnapshot` copy, so the
+ * mirror is what keeps snapshot storage attributable to the owning
+ * service/environment. `sourceTags` is the instance's `ListTagsForResource`
+ * `TagList`; entries missing a key or value are skipped.
+ */
+export declare function rdsPreMigrationSnapshotTags(sourceTags: ReadonlyArray<{
+    Key?: string;
+    Value?: string;
+}>): AwsSdkTag[];
 /**
  * Cost-allocation tag set for SDK-created ECR repositories (the buildx
  * registry-cache repos and the schema-gate mirror repo — everything ECR the

package/dist/aws/costAllocationTags.js

@@ -1 +1 @@
-var n=Object.defineProperty;var e=(o,t)=>n(o,"name",{value:t,configurable:!0});const l={ENVIRONMENT:"fjall:costAllocation:environment",SERVICE:"fjall:costAllocation:service",DOMAIN:"fjall:costAllocation:domain",OWNER:"fjall:costAllocation:owner"},c="management",A="engineering";function O(o){return[{Key:l.SERVICE,Value:o}]}e(O,"ecrCreateRepositoryTags");export{l as COST_ALLOCATION_TAGS,c as DEFAULT_COST_ALLOCATION_ENVIRONMENT,A as DEFAULT_COST_ALLOCATION_OWNER,O as ecrCreateRepositoryTags};
+var a=Object.defineProperty;var t=(e,n)=>a(e,"name",{value:n,configurable:!0});import{MIGRATION_SNAPSHOT_KIND_PREMIGRATE as A,MIGRATION_SNAPSHOT_KIND_TAG_KEY as l}from"../migration/constants.js";const r={ENVIRONMENT:"fjall:costAllocation:environment",SERVICE:"fjall:costAllocation:service",DOMAIN:"fjall:costAllocation:domain",OWNER:"fjall:costAllocation:owner"},i="management",s="engineering",O=new Set(Object.values(r));function N(e){const n=[];for(const o of e)o.Key!==void 0&&o.Value!==void 0&&O.has(o.Key)&&n.push({Key:o.Key,Value:o.Value});return[...n,{Key:l,Value:A}]}t(N,"rdsPreMigrationSnapshotTags");function _(e){return[{Key:r.SERVICE,Value:e}]}t(_,"ecrCreateRepositoryTags");export{r as COST_ALLOCATION_TAGS,i as DEFAULT_COST_ALLOCATION_ENVIRONMENT,s as DEFAULT_COST_ALLOCATION_OWNER,_ as ecrCreateRepositoryTags,N as rdsPreMigrationSnapshotTags};

package/dist/aws/index.d.ts

@@ -7,5 +7,5 @@ export { maskFailureAnalysis } from "./maskFailureAnalysis.js";
 export { classifyDriftSuspectEvents, findCurrentOperationStart, isDriftSuspectReason, isOperationOpeningEvent, type DriftSuspectEvent } from "./driftSuspects.js";
 export { IPAM_OPERATIONS_POOL_TAG_KEY, formatIpamPairTagValue } from "./ipamTags.js";
 export { SDK_PRE_EMPTY_TAG_KEY } from "./infraTags.js";
-export { COST_ALLOCATION_TAGS, DEFAULT_COST_ALLOCATION_ENVIRONMENT, DEFAULT_COST_ALLOCATION_OWNER, ecrCreateRepositoryTags, type EcrCreateTag } from "./costAllocationTags.js";
+export { COST_ALLOCATION_TAGS, DEFAULT_COST_ALLOCATION_ENVIRONMENT, DEFAULT_COST_ALLOCATION_OWNER, ecrCreateRepositoryTags, rdsPreMigrationSnapshotTags, type AwsSdkTag, type EcrCreateTag } from "./costAllocationTags.js";
 export { ACCOUNT_MONITORING_ROLE_NAME } from "./monitoringRole.js";

package/dist/aws/index.js

@@ -1 +1 @@
-import{AWSError as e,NoRolesFoundError as t,InvalidCredentialsError as E,SSOTokenExpiredError as s,MissingRegionError as O,ProfileNotFoundError as i,CommandError as A,isAWSError as _,isNoRolesFoundError as T,isSSOUnauthorizedError as a}from"./errors.js";import{STACK_NOT_FOUND_PATTERN as S,CDK_NO_STACKS_MATCH as p,isResourceEvent as N}from"./cloudformationTypes.js";import{countResourceProgress as m,formatElapsed as C}from"./deployProgress.js";import{CloudFormationFailureAnalyser as u}from"./CloudFormationFailureAnalyser.js";import{FAILURE_ANALYSIS_CATEGORIES as I}from"./failureAnalysisCategories.js";import{maskFailureAnalysis as L}from"./maskFailureAnalysis.js";import{classifyDriftSuspectEvents as F,findCurrentOperationStart as P,isDriftSuspectReason as c,isOperationOpeningEvent as D}from"./driftSuspects.js";import{IPAM_OPERATIONS_POOL_TAG_KEY as g,formatIpamPairTagValue as K}from"./ipamTags.js";import{SDK_PRE_EMPTY_TAG_KEY as G}from"./infraTags.js";import{COST_ALLOCATION_TAGS as y,DEFAULT_COST_ALLOCATION_ENVIRONMENT as Y,DEFAULT_COST_ALLOCATION_OWNER as W,ecrCreateRepositoryTags as k}from"./costAllocationTags.js";import{ACCOUNT_MONITORING_ROLE_NAME as h}from"./monitoringRole.js";export{h as ACCOUNT_MONITORING_ROLE_NAME,e as AWSError,p as CDK_NO_STACKS_MATCH,y as COST_ALLOCATION_TAGS,u as CloudFormationFailureAnalyser,A as CommandError,Y as DEFAULT_COST_ALLOCATION_ENVIRONMENT,W as DEFAULT_COST_ALLOCATION_OWNER,I as FAILURE_ANALYSIS_CATEGORIES,g as IPAM_OPERATIONS_POOL_TAG_KEY,E as InvalidCredentialsError,O as MissingRegionError,t as NoRolesFoundError,i as ProfileNotFoundError,G as SDK_PRE_EMPTY_TAG_KEY,s as SSOTokenExpiredError,S as STACK_NOT_FOUND_PATTERN,F as classifyDriftSuspectEvents,m as countResourceProgress,k as ecrCreateRepositoryTags,P as findCurrentOperationStart,C as formatElapsed,K as formatIpamPairTagValue,_ as isAWSError,c as isDriftSuspectReason,T as isNoRolesFoundError,D as isOperationOpeningEvent,N as isResourceEvent,a as isSSOUnauthorizedError,L as maskFailureAnalysis};
+import{AWSError as e,NoRolesFoundError as t,InvalidCredentialsError as s,SSOTokenExpiredError as E,MissingRegionError as i,ProfileNotFoundError as O,CommandError as a,isAWSError as A,isNoRolesFoundError as T,isSSOUnauthorizedError as _}from"./errors.js";import{STACK_NOT_FOUND_PATTERN as S,CDK_NO_STACKS_MATCH as p,isResourceEvent as N}from"./cloudformationTypes.js";import{countResourceProgress as m,formatElapsed as C}from"./deployProgress.js";import{CloudFormationFailureAnalyser as u}from"./CloudFormationFailureAnalyser.js";import{FAILURE_ANALYSIS_CATEGORIES as I}from"./failureAnalysisCategories.js";import{maskFailureAnalysis as x}from"./maskFailureAnalysis.js";import{classifyDriftSuspectEvents as F,findCurrentOperationStart as P,isDriftSuspectReason as g,isOperationOpeningEvent as M}from"./driftSuspects.js";import{IPAM_OPERATIONS_POOL_TAG_KEY as D,formatIpamPairTagValue as K}from"./ipamTags.js";import{SDK_PRE_EMPTY_TAG_KEY as G}from"./infraTags.js";import{COST_ALLOCATION_TAGS as y,DEFAULT_COST_ALLOCATION_ENVIRONMENT as Y,DEFAULT_COST_ALLOCATION_OWNER as W,ecrCreateRepositoryTags as h,rdsPreMigrationSnapshotTags as k}from"./costAllocationTags.js";import{ACCOUNT_MONITORING_ROLE_NAME as z}from"./monitoringRole.js";export{z as ACCOUNT_MONITORING_ROLE_NAME,e as AWSError,p as CDK_NO_STACKS_MATCH,y as COST_ALLOCATION_TAGS,u as CloudFormationFailureAnalyser,a as CommandError,Y as DEFAULT_COST_ALLOCATION_ENVIRONMENT,W as DEFAULT_COST_ALLOCATION_OWNER,I as FAILURE_ANALYSIS_CATEGORIES,D as IPAM_OPERATIONS_POOL_TAG_KEY,s as InvalidCredentialsError,i as MissingRegionError,t as NoRolesFoundError,O as ProfileNotFoundError,G as SDK_PRE_EMPTY_TAG_KEY,E as SSOTokenExpiredError,S as STACK_NOT_FOUND_PATTERN,F as classifyDriftSuspectEvents,m as countResourceProgress,h as ecrCreateRepositoryTags,P as findCurrentOperationStart,C as formatElapsed,K as formatIpamPairTagValue,A as isAWSError,g as isDriftSuspectReason,T as isNoRolesFoundError,M as isOperationOpeningEvent,N as isResourceEvent,_ as isSSOUnauthorizedError,x as maskFailureAnalysis,k as rdsPreMigrationSnapshotTags};

package/dist/index.d.ts

@@ -29,7 +29,7 @@ export { inferContainerFromCandidates } from "./repo/inferContainerFromCandidate
 export { RESERVED_APP_NAMES, type ReservedAppName, RESERVED_APP_NAME_MESSAGE, isReservedAppName, RESERVED_APP_NAME_SUFFIX, RESERVED_APP_NAME_SUFFIX_MESSAGE, hasReservedAppNameSuffix } from "./naming/reservedAppNames.js";
 export { deriveContentHashTag, CONTENT_HASH_TAG_PATTERN } from "./infra/deriveContentHashTag.js";
 export { DEPLOY_MODES, DeployModeSchema, type DeployMode, IMAGE_TAG_PATTERN, ImageTagSchema, type ImageTag, ServiceArtefactSchema, type ServiceArtefact, ServiceArtefactsSchema, type ServiceArtefacts, ARTEFACT_OUTPUT_FIELDS, type ArtefactOutputField, artefactOutputKey } from "./infra/deployArtefacts.js";
-export { MIGRATION_SNAPSHOT_NAME_PREFIX, MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV, EXPECTED_SCHEMA_VERSION_ENV, EXPECTED_SCHEMA_VERSION_TOOL_ENV, EXPECTED_CH_SCHEMA_VERSION_ENV, SCHEMA_ADMIN_USER_ENV, SCHEMA_ADMIN_PASSWORD_ENV, PRISMA_MIGRATION_DIR_RE, CLICKHOUSE_MIGRATION_SKIP_RE } from "./migration/constants.js";
+export { MIGRATION_SNAPSHOT_NAME_PREFIX, MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV, MIGRATION_SNAPSHOT_KIND_TAG_KEY, MIGRATION_SNAPSHOT_KIND_PREMIGRATE, EXPECTED_SCHEMA_VERSION_ENV, EXPECTED_SCHEMA_VERSION_TOOL_ENV, EXPECTED_CH_SCHEMA_VERSION_ENV, SCHEMA_ADMIN_USER_ENV, SCHEMA_ADMIN_PASSWORD_ENV, PRISMA_MIGRATION_DIR_RE, CLICKHOUSE_MIGRATION_SKIP_RE } from "./migration/constants.js";
 export { SCHEMA_GATE_EXIT, SCHEMA_GATE_EXIT_HINTS, schemaGateExitKind, type SchemaGateExitKind, type SchemaGateExitCode } from "./migration/schemaGateExit.js";
 export { FJALL_SCHEMA_GATE_USER, FJALL_MAINTENANCE_USER, FJALL_CLICKHOUSE_USERS, type FjallClickHouseUser } from "./migration/clickhouseFrameworkUsers.js";
 export { PHYSICAL_NAME_FALLBACK_PROPERTIES } from "./cfn/physicalNameProperties.js";

package/dist/index.js

@@ -1 +1 @@
-import{DNS_APEX as _,getDomainExportNames as r,getDomainStackName as T,getDomainUsEast1CertificatesStackName as A,hostsExportPartName as S,serialiseHostsChunks as t,HOSTS_OUTPUT_MAX_BYTES as o,isManagedDomainBinding as a,DOMAIN_DEPLOY_DEFAULT_PHASE as N}from"./infra/domainExports.js";import{BACKUP_VAULT_NAME as O}from"./infra/backupVault.js";import{APPROVAL_TOKEN_OUTPUT_PREFIX as C,TOKEN_STDERR_PREFIX as n}from"./deploy/approvalTokenOutput.js";import{imageTagParameterName as m}from"./infra/imageTags.js";import{toPascalCase as L,toKebab as s,toValidDatabaseName as D,toScreamingSnake as p,capitalise as M,getSafeZoneName as c,accountConstructKey as f,hasAsciiStableConstructKey as F}from"./naming/caseConversion.js";import{albDnsExportName as l,albHostedZoneIdExportName as u,cdnDomainExportName as d,bucketWebsiteEndpointExportName as g,bucketWebsiteHostedZoneIdExportName as x}from"./naming/targetExportNames.js";import{CAPACITY_SLOT_PATTERN as h,CAPACITY_SLOT_MAX_LENGTH as V,DEFAULT_CAPACITY_SLOT as H,CAPACITY_ANCHOR_PATTERN as Y,CAPACITY_ANCHOR_MAX_LENGTH as y,CAPACITY_IDENTITY_CONTEXT_KEY as K,CapacityIdentityPinSchema as v,CapacityIdentityWireSchema as X,CapacityIdentityConfigSchema as b,projectCapacityIdentityToTarget as B}from"./capacityIdentity.js";import{findAccountNameCollision as J}from"./naming/accountNameCollision.js";import{defaultConnectedAccountName as j,suffixedAccountName as w,REGION_SHORT_CODES as Z,findTrailingRegionShortCode as q,regionSuffixRejectionMessage as z}from"./naming/connectedAccountName.js";import{normaliseError as $,getErrorMessage as ee,hasErrorCode as Ee,getErrorCode as _e,getErrorStack as re,formatErrorString as Te}from"./errorUtils.js";import{FJALL_CONFIG_DIR_ENV as Se,FJALL_CREDENTIALS_FILENAME as te,FJALL_HOME_DIRNAME as oe,FJALL_LOG_DIR_ENV as ae,fjallCredentialsPath as Ne,fjallHomeDir as Re,fjallLogDir as Oe,fjallStatePath as Ie}from"./fjallHome.js";import{singleton as ne}from"./async/singleton.js";import{DANGEROUS_ENV_VARS as me,filterDangerousEnvVars as Pe,MASKED_VALUE_MARKER as Le,maskSensitiveOutput as se,parseShellArgs as De,REDACTED_KEY_SENTINEL as pe,SCOPED_TOKEN_REGEX as Me}from"./securityHelpers.js";import{sleep as fe}from"./async/sleep.js";import{mapSettledWithConcurrency as Ue}from"./async/concurrency.js";import{ACCOUNT_STAGES_WITH_ROOT as ue,STRUCTURAL_ENVIRONMENTS as de,ACCOUNT_STAGES as ge,ACCOUNT_STAGE_LABELS as xe,isAccountStage as Ge,ACCOUNT_TIERS as he,AccountTierSchema as Ve,isAccountTier as He,GOVERNANCE_ACCOUNT_TIERS as Ye,isGovernanceTier as ye,environmentToTier as Ke,accountStageEffect as ve,ACCOUNT_STAGE_EFFECTS as Xe,formatAccountStageList as be,stageFromWireEnvironment as Be,accountTier as We,resolveSynthEnvironment as Je,getEnvironmentLabel as ke,ACCOUNT_ROLES as je}from"./environments.js";import{RESOURCE_CATEGORIES as Ze,categoriseResource as qe,getExpectedDuration as ze,getFriendlyResourceType as Qe}from"./resourceCategorisation.js";import{parseGitRemoteUrl as eE}from"./repo/gitRemoteParser.js";import{abbreviateRegion as _E,AWS_REGIONS_METADATA as rE,DEFAULT_REGION as TE,getRegionInfo as AE,MAX_SECONDARY_REGIONS as SE,OPT_IN_REGION_CODES as tE,optInRegionWarning as oE,regions as aE,suggestRegionForTimezone as NE}from"./infra/regions.js";import{SCOPE_VALUES as OE,MACHINE_ONLY_SCOPES as IE,USER_GRANTABLE_SCOPES as CE,GOVERNANCE_SCOPE_REQUIRED_CODE as nE}from"./infra/tokenScopes.js";import{SECRET_NAME_PATTERN as mE,SECRET_NAME_ERROR as PE,SSM_COMPONENT_PATTERN as LE,SSM_COMPONENT_ERROR as sE,SSM_STANDARD_MAX_VALUE_BYTES as DE,SecretNamespaceSchema as pE,buildNamespaceParts as ME,buildParameterPath as cE,parseParameterPath as fE,isManageablePath as FE,parseDotEnv as UE,escapeDotEnvValue as lE}from"./secrets.js";import{ConnectionWireSchema as dE,ConnectionsListResponseSchema as gE,CONNECTION_PHASES as xE,CONNECTION_TERMINAL_FAILURE_PHASES as GE,CONNECTION_FAILURE_REASONS as hE,EXTERNAL_ID_PATTERN as VE}from"./infra/connectionsWire.js";import{PUBLIC_PACKAGE_NAME as YE,INSTALL_SOURCES as yE,SETUP_COMMANDS as KE,upgradeCommand as vE,SETUP_MODES as XE,SETUP_STEP_IDS as bE,SETUP_STEPS as BE,AGENT_SETUP_PROMPTS as WE,AGENT_INSTALL_COMMAND as JE,SKILL_INSTALL_SEGMENTS as kE,SKILL_INSTALL_FILENAME as jE,SKILL_INSTALL_PATH as wE}from"./onboarding/index.js";import{deriveRegionsFromOrgConfig as qE,deriveTargets as zE,deriveAllTargets as QE,environmentOrTier as $E,findTarget as e_,generateTargetName as E_}from"./targets.js";import{buildAppConfigPath as r_}from"./repo/appPath.js";import{findInfrastructurePaths as A_,findBoundaryPath as S_,isInfrastructureFile as t_}from"./repo/findInfrastructurePaths.js";import{inferContainerFromCandidates as a_}from"./repo/inferContainerFromCandidates.js";import{RESERVED_APP_NAMES as R_,RESERVED_APP_NAME_MESSAGE as O_,isReservedAppName as I_,RESERVED_APP_NAME_SUFFIX as C_,RESERVED_APP_NAME_SUFFIX_MESSAGE as n_,hasReservedAppNameSuffix as i_}from"./naming/reservedAppNames.js";import{deriveContentHashTag as P_,CONTENT_HASH_TAG_PATTERN as L_}from"./infra/deriveContentHashTag.js";import{DEPLOY_MODES as D_,DeployModeSchema as p_,IMAGE_TAG_PATTERN as M_,ImageTagSchema as c_,ServiceArtefactSchema as f_,ServiceArtefactsSchema as F_,ARTEFACT_OUTPUT_FIELDS as U_,artefactOutputKey as l_}from"./infra/deployArtefacts.js";import{MIGRATION_SNAPSHOT_NAME_PREFIX as d_,MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV as g_,EXPECTED_SCHEMA_VERSION_ENV as x_,EXPECTED_SCHEMA_VERSION_TOOL_ENV as G_,EXPECTED_CH_SCHEMA_VERSION_ENV as h_,SCHEMA_ADMIN_USER_ENV as V_,SCHEMA_ADMIN_PASSWORD_ENV as H_,PRISMA_MIGRATION_DIR_RE as Y_,CLICKHOUSE_MIGRATION_SKIP_RE as y_}from"./migration/constants.js";import{SCHEMA_GATE_EXIT as v_,SCHEMA_GATE_EXIT_HINTS as X_,schemaGateExitKind as b_}from"./migration/schemaGateExit.js";import{FJALL_SCHEMA_GATE_USER as W_,FJALL_MAINTENANCE_USER as J_,FJALL_CLICKHOUSE_USERS as k_}from"./migration/clickhouseFrameworkUsers.js";import{PHYSICAL_NAME_FALLBACK_PROPERTIES as w_}from"./cfn/physicalNameProperties.js";import{PATTERN_TYPE_VALUES as q_,PATTERN_TYPES as z_,isPatternType as Q_,PATTERN_REGISTRY as $_,patternConstructId as er,DEPLOYABLE_PATTERN_TYPES as Er,OPENNEXT_PATTERN_TYPES as _r,isOpenNextPatternType as rr,CLOUDFRONT_PRICE_CLASS_VALUES as Tr,STATIC_SITE_CONFIG_KEYS as Ar,STATIC_SITE_DEPLOY_INJECTED_KEYS as Sr,STATIC_SITE_CDN_CONFIG_KEYS as tr,STATIC_SITE_ROUTING_VALUES as or,STATIC_SITE_ROUTING_INFO as ar,PATTERN_CREATE_INPUT_VALUES as Nr,PATTERN_CREATE_INPUT_FLAGS as Rr}from"./patterns/patternTypes.js";import{FRAMEWORK_VALUES as Ir,FRAMEWORKS as Cr,isFramework as nr,FRAMEWORK_PATTERN_RECOMMENDATIONS as ir,recommendPatternForFramework as mr,CREATABLE_FRAMEWORKS as Pr,requiredInputsForFramework as Lr}from"./patterns/frameworkPatterns.js";import{DEFAULT_FORMS_FROM_LOCAL_PART as Dr,defaultFormsFromAddress as pr,defaultFormsCorsOrigin as Mr,isAddressAtDomain as cr}from"./patterns/staticSiteForms.js";import{DEV_SUBSTRATE_PARAMS_SCHEMA_VERSION as Fr,DEV_SUBSTRATE_PARAMS_FILENAME as Ur,DevSubstrateSynthPropsSchema as lr,DevSubstrateParamsSchema as ur}from"./devSubstrate/params.js";import{DEV_SUBSTRATE_ENTRYPOINT_SOURCE as gr}from"./devSubstrate/entrypoint.js";import{BLESSED_CDK_TOOLCHAIN as Gr}from"./cdkToolchain.js";import{DEPLOYMENT_FAILURE_PHASES as Vr,DeploymentFailurePhaseSchema as Hr,DEPLOYMENT_FAULT_ATTRIBUTIONS as Yr,DeploymentFaultAttributionSchema as yr,DEPLOYMENT_FAILURE_PROVIDER_SOURCES as Kr,DeploymentFailureProviderSourceSchema as vr,DEPLOYMENT_FAILURE_CODE_PATTERN as Xr,DEPLOYMENT_FAILURE_SCHEMA_VERSION as br,DEPLOYMENT_FAILURE_LIMITS as Br,DeploymentFailureAnalysisSchema as Wr,DeploymentFailureProviderSchema as Jr,DeploymentFailureResourceSchema as kr,DeploymentFailureSchema as jr,parseDeploymentFailure as wr,DEPLOYMENT_FAILURE_DOCS_BASE_URL as Zr,deploymentFailureDocsUrl as qr,DEPLOYMENT_FAULT_COPY as zr,DEPLOYMENT_PROVIDER_LABELS as Qr,deriveErrorMessageFromFailure as $r,toDeploymentFailureAnalysis as eT}from"./failure/deploymentFailure.js";import{extractErrorWindow as _T,ERROR_WINDOW_CONTEXT_LINES as rT}from"./failure/extractErrorWindow.js";import{FJALL_COMPONENT_GITIGNORE as AT,FJALL_PROJECT_GITIGNORE as ST,FJALL_STATE_GITIGNORE_ENTRIES as tT,FJALL_MANAGED_STATE_DIR_ENTRIES as oT,LOCAL_CONFIG_GITIGNORE_ENTRY as aT}from"./scaffold/gitignore.js";import{ensureGitignoreEntries as RT}from"./scaffold/ensureGitignore.js";export{je as ACCOUNT_ROLES,ge as ACCOUNT_STAGES,ue as ACCOUNT_STAGES_WITH_ROOT,Xe as ACCOUNT_STAGE_EFFECTS,xe as ACCOUNT_STAGE_LABELS,he as ACCOUNT_TIERS,JE as AGENT_INSTALL_COMMAND,WE as AGENT_SETUP_PROMPTS,C as APPROVAL_TOKEN_OUTPUT_PREFIX,U_ as ARTEFACT_OUTPUT_FIELDS,rE as AWS_REGIONS_METADATA,Ve as AccountTierSchema,O as BACKUP_VAULT_NAME,Gr as BLESSED_CDK_TOOLCHAIN,y as CAPACITY_ANCHOR_MAX_LENGTH,Y as CAPACITY_ANCHOR_PATTERN,K as CAPACITY_IDENTITY_CONTEXT_KEY,V as CAPACITY_SLOT_MAX_LENGTH,h as CAPACITY_SLOT_PATTERN,y_ as CLICKHOUSE_MIGRATION_SKIP_RE,Tr as CLOUDFRONT_PRICE_CLASS_VALUES,hE as CONNECTION_FAILURE_REASONS,xE as CONNECTION_PHASES,GE as CONNECTION_TERMINAL_FAILURE_PHASES,L_ as CONTENT_HASH_TAG_PATTERN,Pr as CREATABLE_FRAMEWORKS,b as CapacityIdentityConfigSchema,v as CapacityIdentityPinSchema,X as CapacityIdentityWireSchema,dE as ConnectionWireSchema,gE as ConnectionsListResponseSchema,me as DANGEROUS_ENV_VARS,H as DEFAULT_CAPACITY_SLOT,Dr as DEFAULT_FORMS_FROM_LOCAL_PART,TE as DEFAULT_REGION,Er as DEPLOYABLE_PATTERN_TYPES,Xr as DEPLOYMENT_FAILURE_CODE_PATTERN,Zr as DEPLOYMENT_FAILURE_DOCS_BASE_URL,Br as DEPLOYMENT_FAILURE_LIMITS,Vr as DEPLOYMENT_FAILURE_PHASES,Kr as DEPLOYMENT_FAILURE_PROVIDER_SOURCES,br as DEPLOYMENT_FAILURE_SCHEMA_VERSION,Yr as DEPLOYMENT_FAULT_ATTRIBUTIONS,zr as DEPLOYMENT_FAULT_COPY,Qr as DEPLOYMENT_PROVIDER_LABELS,D_ as DEPLOY_MODES,gr as DEV_SUBSTRATE_ENTRYPOINT_SOURCE,Ur as DEV_SUBSTRATE_PARAMS_FILENAME,Fr as DEV_SUBSTRATE_PARAMS_SCHEMA_VERSION,_ as DNS_APEX,N as DOMAIN_DEPLOY_DEFAULT_PHASE,p_ as DeployModeSchema,Wr as DeploymentFailureAnalysisSchema,Hr as DeploymentFailurePhaseSchema,Jr as DeploymentFailureProviderSchema,vr as DeploymentFailureProviderSourceSchema,kr as DeploymentFailureResourceSchema,jr as DeploymentFailureSchema,yr as DeploymentFaultAttributionSchema,ur as DevSubstrateParamsSchema,lr as DevSubstrateSynthPropsSchema,rT as ERROR_WINDOW_CONTEXT_LINES,h_ as EXPECTED_CH_SCHEMA_VERSION_ENV,x_ as EXPECTED_SCHEMA_VERSION_ENV,G_ as EXPECTED_SCHEMA_VERSION_TOOL_ENV,VE as EXTERNAL_ID_PATTERN,k_ as FJALL_CLICKHOUSE_USERS,AT as FJALL_COMPONENT_GITIGNORE,Se as FJALL_CONFIG_DIR_ENV,te as FJALL_CREDENTIALS_FILENAME,oe as FJALL_HOME_DIRNAME,ae as FJALL_LOG_DIR_ENV,J_ as FJALL_MAINTENANCE_USER,oT as FJALL_MANAGED_STATE_DIR_ENTRIES,ST as FJALL_PROJECT_GITIGNORE,W_ as FJALL_SCHEMA_GATE_USER,tT as FJALL_STATE_GITIGNORE_ENTRIES,Cr as FRAMEWORKS,ir as FRAMEWORK_PATTERN_RECOMMENDATIONS,Ir as FRAMEWORK_VALUES,Ye as GOVERNANCE_ACCOUNT_TIERS,nE as GOVERNANCE_SCOPE_REQUIRED_CODE,o as HOSTS_OUTPUT_MAX_BYTES,M_ as IMAGE_TAG_PATTERN,yE as INSTALL_SOURCES,c_ as ImageTagSchema,aT as LOCAL_CONFIG_GITIGNORE_ENTRY,IE as MACHINE_ONLY_SCOPES,Le as MASKED_VALUE_MARKER,SE as MAX_SECONDARY_REGIONS,d_ as MIGRATION_SNAPSHOT_NAME_PREFIX,g_ as MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV,_r as OPENNEXT_PATTERN_TYPES,tE as OPT_IN_REGION_CODES,Rr as PATTERN_CREATE_INPUT_FLAGS,Nr as PATTERN_CREATE_INPUT_VALUES,$_ as PATTERN_REGISTRY,z_ as PATTERN_TYPES,q_ as PATTERN_TYPE_VALUES,w_ as PHYSICAL_NAME_FALLBACK_PROPERTIES,Y_ as PRISMA_MIGRATION_DIR_RE,YE as PUBLIC_PACKAGE_NAME,pe as REDACTED_KEY_SENTINEL,Z as REGION_SHORT_CODES,R_ as RESERVED_APP_NAMES,O_ as RESERVED_APP_NAME_MESSAGE,C_ as RESERVED_APP_NAME_SUFFIX,n_ as RESERVED_APP_NAME_SUFFIX_MESSAGE,Ze as RESOURCE_CATEGORIES,H_ as SCHEMA_ADMIN_PASSWORD_ENV,V_ as SCHEMA_ADMIN_USER_ENV,v_ as SCHEMA_GATE_EXIT,X_ as SCHEMA_GATE_EXIT_HINTS,Me as SCOPED_TOKEN_REGEX,OE as SCOPE_VALUES,PE as SECRET_NAME_ERROR,mE as SECRET_NAME_PATTERN,KE as SETUP_COMMANDS,XE as SETUP_MODES,BE as SETUP_STEPS,bE as SETUP_STEP_IDS,jE as SKILL_INSTALL_FILENAME,wE as SKILL_INSTALL_PATH,kE as SKILL_INSTALL_SEGMENTS,sE as SSM_COMPONENT_ERROR,LE as SSM_COMPONENT_PATTERN,DE as SSM_STANDARD_MAX_VALUE_BYTES,tr as STATIC_SITE_CDN_CONFIG_KEYS,Ar as STATIC_SITE_CONFIG_KEYS,Sr as STATIC_SITE_DEPLOY_INJECTED_KEYS,ar as STATIC_SITE_ROUTING_INFO,or as STATIC_SITE_ROUTING_VALUES,de as STRUCTURAL_ENVIRONMENTS,pE as SecretNamespaceSchema,f_ as ServiceArtefactSchema,F_ as ServiceArtefactsSchema,n as TOKEN_STDERR_PREFIX,CE as USER_GRANTABLE_SCOPES,_E as abbreviateRegion,f as accountConstructKey,ve as accountStageEffect,We as accountTier,l as albDnsExportName,u as albHostedZoneIdExportName,l_ as artefactOutputKey,g as bucketWebsiteEndpointExportName,x as bucketWebsiteHostedZoneIdExportName,r_ as buildAppConfigPath,ME as buildNamespaceParts,cE as buildParameterPath,M as capitalise,qe as categoriseResource,d as cdnDomainExportName,j as defaultConnectedAccountName,Mr as defaultFormsCorsOrigin,pr as defaultFormsFromAddress,qr as deploymentFailureDocsUrl,QE as deriveAllTargets,P_ as deriveContentHashTag,$r as deriveErrorMessageFromFailure,qE as deriveRegionsFromOrgConfig,zE as deriveTargets,RT as ensureGitignoreEntries,$E as environmentOrTier,Ke as environmentToTier,lE as escapeDotEnvValue,_T as extractErrorWindow,Pe as filterDangerousEnvVars,J as findAccountNameCollision,S_ as findBoundaryPath,A_ as findInfrastructurePaths,e_ as findTarget,q as findTrailingRegionShortCode,Ne as fjallCredentialsPath,Re as fjallHomeDir,Oe as fjallLogDir,Ie as fjallStatePath,be as formatAccountStageList,Te as formatErrorString,E_ as generateTargetName,r as getDomainExportNames,T as getDomainStackName,A as getDomainUsEast1CertificatesStackName,ke as getEnvironmentLabel,_e as getErrorCode,ee as getErrorMessage,re as getErrorStack,ze as getExpectedDuration,Qe as getFriendlyResourceType,AE as getRegionInfo,c as getSafeZoneName,F as hasAsciiStableConstructKey,Ee as hasErrorCode,i_ as hasReservedAppNameSuffix,S as hostsExportPartName,m as imageTagParameterName,a_ as inferContainerFromCandidates,Ge as isAccountStage,He as isAccountTier,cr as isAddressAtDomain,nr as isFramework,ye as isGovernanceTier,t_ as isInfrastructureFile,FE as isManageablePath,a as isManagedDomainBinding,rr as isOpenNextPatternType,Q_ as isPatternType,I_ as isReservedAppName,Ue as mapSettledWithConcurrency,se as maskSensitiveOutput,$ as normaliseError,oE as optInRegionWarning,wr as parseDeploymentFailure,UE as parseDotEnv,eE as parseGitRemoteUrl,fE as parseParameterPath,De as parseShellArgs,er as patternConstructId,B as projectCapacityIdentityToTarget,mr as recommendPatternForFramework,z as regionSuffixRejectionMessage,aE as regions,Lr as requiredInputsForFramework,Je as resolveSynthEnvironment,b_ as schemaGateExitKind,t as serialiseHostsChunks,ne as singleton,fe as sleep,Be as stageFromWireEnvironment,w as suffixedAccountName,NE as suggestRegionForTimezone,eT as toDeploymentFailureAnalysis,s as toKebab,L as toPascalCase,p as toScreamingSnake,D as toValidDatabaseName,vE as upgradeCommand};
+import{DNS_APEX as _,getDomainExportNames as r,getDomainStackName as T,getDomainUsEast1CertificatesStackName as A,hostsExportPartName as S,serialiseHostsChunks as t,HOSTS_OUTPUT_MAX_BYTES as o,isManagedDomainBinding as a,DOMAIN_DEPLOY_DEFAULT_PHASE as N}from"./infra/domainExports.js";import{BACKUP_VAULT_NAME as O}from"./infra/backupVault.js";import{APPROVAL_TOKEN_OUTPUT_PREFIX as C,TOKEN_STDERR_PREFIX as n}from"./deploy/approvalTokenOutput.js";import{imageTagParameterName as m}from"./infra/imageTags.js";import{toPascalCase as L,toKebab as s,toValidDatabaseName as D,toScreamingSnake as p,capitalise as M,getSafeZoneName as c,accountConstructKey as f,hasAsciiStableConstructKey as F}from"./naming/caseConversion.js";import{albDnsExportName as l,albHostedZoneIdExportName as u,cdnDomainExportName as G,bucketWebsiteEndpointExportName as d,bucketWebsiteHostedZoneIdExportName as g}from"./naming/targetExportNames.js";import{CAPACITY_SLOT_PATTERN as h,CAPACITY_SLOT_MAX_LENGTH as H,DEFAULT_CAPACITY_SLOT as V,CAPACITY_ANCHOR_PATTERN as Y,CAPACITY_ANCHOR_MAX_LENGTH as y,CAPACITY_IDENTITY_CONTEXT_KEY as K,CapacityIdentityPinSchema as v,CapacityIdentityWireSchema as X,CapacityIdentityConfigSchema as b,projectCapacityIdentityToTarget as B}from"./capacityIdentity.js";import{findAccountNameCollision as J}from"./naming/accountNameCollision.js";import{defaultConnectedAccountName as j,suffixedAccountName as w,REGION_SHORT_CODES as Z,findTrailingRegionShortCode as q,regionSuffixRejectionMessage as z}from"./naming/connectedAccountName.js";import{normaliseError as $,getErrorMessage as EE,hasErrorCode as eE,getErrorCode as _E,getErrorStack as rE,formatErrorString as TE}from"./errorUtils.js";import{FJALL_CONFIG_DIR_ENV as SE,FJALL_CREDENTIALS_FILENAME as tE,FJALL_HOME_DIRNAME as oE,FJALL_LOG_DIR_ENV as aE,fjallCredentialsPath as NE,fjallHomeDir as RE,fjallLogDir as OE,fjallStatePath as IE}from"./fjallHome.js";import{singleton as nE}from"./async/singleton.js";import{DANGEROUS_ENV_VARS as mE,filterDangerousEnvVars as PE,MASKED_VALUE_MARKER as LE,maskSensitiveOutput as sE,parseShellArgs as DE,REDACTED_KEY_SENTINEL as pE,SCOPED_TOKEN_REGEX as ME}from"./securityHelpers.js";import{sleep as fE}from"./async/sleep.js";import{mapSettledWithConcurrency as UE}from"./async/concurrency.js";import{ACCOUNT_STAGES_WITH_ROOT as uE,STRUCTURAL_ENVIRONMENTS as GE,ACCOUNT_STAGES as dE,ACCOUNT_STAGE_LABELS as gE,isAccountStage as xE,ACCOUNT_TIERS as hE,AccountTierSchema as HE,isAccountTier as VE,GOVERNANCE_ACCOUNT_TIERS as YE,isGovernanceTier as yE,environmentToTier as KE,accountStageEffect as vE,ACCOUNT_STAGE_EFFECTS as XE,formatAccountStageList as bE,stageFromWireEnvironment as BE,accountTier as WE,resolveSynthEnvironment as JE,getEnvironmentLabel as kE,ACCOUNT_ROLES as jE}from"./environments.js";import{RESOURCE_CATEGORIES as ZE,categoriseResource as qE,getExpectedDuration as zE,getFriendlyResourceType as QE}from"./resourceCategorisation.js";import{parseGitRemoteUrl as Ee}from"./repo/gitRemoteParser.js";import{abbreviateRegion as _e,AWS_REGIONS_METADATA as re,DEFAULT_REGION as Te,getRegionInfo as Ae,MAX_SECONDARY_REGIONS as Se,OPT_IN_REGION_CODES as te,optInRegionWarning as oe,regions as ae,suggestRegionForTimezone as Ne}from"./infra/regions.js";import{SCOPE_VALUES as Oe,MACHINE_ONLY_SCOPES as Ie,USER_GRANTABLE_SCOPES as Ce,GOVERNANCE_SCOPE_REQUIRED_CODE as ne}from"./infra/tokenScopes.js";import{SECRET_NAME_PATTERN as me,SECRET_NAME_ERROR as Pe,SSM_COMPONENT_PATTERN as Le,SSM_COMPONENT_ERROR as se,SSM_STANDARD_MAX_VALUE_BYTES as De,SecretNamespaceSchema as pe,buildNamespaceParts as Me,buildParameterPath as ce,parseParameterPath as fe,isManageablePath as Fe,parseDotEnv as Ue,escapeDotEnvValue as le}from"./secrets.js";import{ConnectionWireSchema as Ge,ConnectionsListResponseSchema as de,CONNECTION_PHASES as ge,CONNECTION_TERMINAL_FAILURE_PHASES as xe,CONNECTION_FAILURE_REASONS as he,EXTERNAL_ID_PATTERN as He}from"./infra/connectionsWire.js";import{PUBLIC_PACKAGE_NAME as Ye,INSTALL_SOURCES as ye,SETUP_COMMANDS as Ke,upgradeCommand as ve,SETUP_MODES as Xe,SETUP_STEP_IDS as be,SETUP_STEPS as Be,AGENT_SETUP_PROMPTS as We,AGENT_INSTALL_COMMAND as Je,SKILL_INSTALL_SEGMENTS as ke,SKILL_INSTALL_FILENAME as je,SKILL_INSTALL_PATH as we}from"./onboarding/index.js";import{deriveRegionsFromOrgConfig as qe,deriveTargets as ze,deriveAllTargets as Qe,environmentOrTier as $e,findTarget as E_,generateTargetName as e_}from"./targets.js";import{buildAppConfigPath as r_}from"./repo/appPath.js";import{findInfrastructurePaths as A_,findBoundaryPath as S_,isInfrastructureFile as t_}from"./repo/findInfrastructurePaths.js";import{inferContainerFromCandidates as a_}from"./repo/inferContainerFromCandidates.js";import{RESERVED_APP_NAMES as R_,RESERVED_APP_NAME_MESSAGE as O_,isReservedAppName as I_,RESERVED_APP_NAME_SUFFIX as C_,RESERVED_APP_NAME_SUFFIX_MESSAGE as n_,hasReservedAppNameSuffix as i_}from"./naming/reservedAppNames.js";import{deriveContentHashTag as P_,CONTENT_HASH_TAG_PATTERN as L_}from"./infra/deriveContentHashTag.js";import{DEPLOY_MODES as D_,DeployModeSchema as p_,IMAGE_TAG_PATTERN as M_,ImageTagSchema as c_,ServiceArtefactSchema as f_,ServiceArtefactsSchema as F_,ARTEFACT_OUTPUT_FIELDS as U_,artefactOutputKey as l_}from"./infra/deployArtefacts.js";import{MIGRATION_SNAPSHOT_NAME_PREFIX as G_,MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV as d_,MIGRATION_SNAPSHOT_KIND_TAG_KEY as g_,MIGRATION_SNAPSHOT_KIND_PREMIGRATE as x_,EXPECTED_SCHEMA_VERSION_ENV as h_,EXPECTED_SCHEMA_VERSION_TOOL_ENV as H_,EXPECTED_CH_SCHEMA_VERSION_ENV as V_,SCHEMA_ADMIN_USER_ENV as Y_,SCHEMA_ADMIN_PASSWORD_ENV as y_,PRISMA_MIGRATION_DIR_RE as K_,CLICKHOUSE_MIGRATION_SKIP_RE as v_}from"./migration/constants.js";import{SCHEMA_GATE_EXIT as b_,SCHEMA_GATE_EXIT_HINTS as B_,schemaGateExitKind as W_}from"./migration/schemaGateExit.js";import{FJALL_SCHEMA_GATE_USER as k_,FJALL_MAINTENANCE_USER as j_,FJALL_CLICKHOUSE_USERS as w_}from"./migration/clickhouseFrameworkUsers.js";import{PHYSICAL_NAME_FALLBACK_PROPERTIES as q_}from"./cfn/physicalNameProperties.js";import{PATTERN_TYPE_VALUES as Q_,PATTERN_TYPES as $_,isPatternType as Er,PATTERN_REGISTRY as er,patternConstructId as _r,DEPLOYABLE_PATTERN_TYPES as rr,OPENNEXT_PATTERN_TYPES as Tr,isOpenNextPatternType as Ar,CLOUDFRONT_PRICE_CLASS_VALUES as Sr,STATIC_SITE_CONFIG_KEYS as tr,STATIC_SITE_DEPLOY_INJECTED_KEYS as or,STATIC_SITE_CDN_CONFIG_KEYS as ar,STATIC_SITE_ROUTING_VALUES as Nr,STATIC_SITE_ROUTING_INFO as Rr,PATTERN_CREATE_INPUT_VALUES as Or,PATTERN_CREATE_INPUT_FLAGS as Ir}from"./patterns/patternTypes.js";import{FRAMEWORK_VALUES as nr,FRAMEWORKS as ir,isFramework as mr,FRAMEWORK_PATTERN_RECOMMENDATIONS as Pr,recommendPatternForFramework as Lr,CREATABLE_FRAMEWORKS as sr,requiredInputsForFramework as Dr}from"./patterns/frameworkPatterns.js";import{DEFAULT_FORMS_FROM_LOCAL_PART as Mr,defaultFormsFromAddress as cr,defaultFormsCorsOrigin as fr,isAddressAtDomain as Fr}from"./patterns/staticSiteForms.js";import{DEV_SUBSTRATE_PARAMS_SCHEMA_VERSION as lr,DEV_SUBSTRATE_PARAMS_FILENAME as ur,DevSubstrateSynthPropsSchema as Gr,DevSubstrateParamsSchema as dr}from"./devSubstrate/params.js";import{DEV_SUBSTRATE_ENTRYPOINT_SOURCE as xr}from"./devSubstrate/entrypoint.js";import{BLESSED_CDK_TOOLCHAIN as Hr}from"./cdkToolchain.js";import{DEPLOYMENT_FAILURE_PHASES as Yr,DeploymentFailurePhaseSchema as yr,DEPLOYMENT_FAULT_ATTRIBUTIONS as Kr,DeploymentFaultAttributionSchema as vr,DEPLOYMENT_FAILURE_PROVIDER_SOURCES as Xr,DeploymentFailureProviderSourceSchema as br,DEPLOYMENT_FAILURE_CODE_PATTERN as Br,DEPLOYMENT_FAILURE_SCHEMA_VERSION as Wr,DEPLOYMENT_FAILURE_LIMITS as Jr,DeploymentFailureAnalysisSchema as kr,DeploymentFailureProviderSchema as jr,DeploymentFailureResourceSchema as wr,DeploymentFailureSchema as Zr,parseDeploymentFailure as qr,DEPLOYMENT_FAILURE_DOCS_BASE_URL as zr,deploymentFailureDocsUrl as Qr,DEPLOYMENT_FAULT_COPY as $r,DEPLOYMENT_PROVIDER_LABELS as ET,deriveErrorMessageFromFailure as eT,toDeploymentFailureAnalysis as _T}from"./failure/deploymentFailure.js";import{extractErrorWindow as TT,ERROR_WINDOW_CONTEXT_LINES as AT}from"./failure/extractErrorWindow.js";import{FJALL_COMPONENT_GITIGNORE as tT,FJALL_PROJECT_GITIGNORE as oT,FJALL_STATE_GITIGNORE_ENTRIES as aT,FJALL_MANAGED_STATE_DIR_ENTRIES as NT,LOCAL_CONFIG_GITIGNORE_ENTRY as RT}from"./scaffold/gitignore.js";import{ensureGitignoreEntries as IT}from"./scaffold/ensureGitignore.js";export{jE as ACCOUNT_ROLES,dE as ACCOUNT_STAGES,uE as ACCOUNT_STAGES_WITH_ROOT,XE as ACCOUNT_STAGE_EFFECTS,gE as ACCOUNT_STAGE_LABELS,hE as ACCOUNT_TIERS,Je as AGENT_INSTALL_COMMAND,We as AGENT_SETUP_PROMPTS,C as APPROVAL_TOKEN_OUTPUT_PREFIX,U_ as ARTEFACT_OUTPUT_FIELDS,re as AWS_REGIONS_METADATA,HE as AccountTierSchema,O as BACKUP_VAULT_NAME,Hr as BLESSED_CDK_TOOLCHAIN,y as CAPACITY_ANCHOR_MAX_LENGTH,Y as CAPACITY_ANCHOR_PATTERN,K as CAPACITY_IDENTITY_CONTEXT_KEY,H as CAPACITY_SLOT_MAX_LENGTH,h as CAPACITY_SLOT_PATTERN,v_ as CLICKHOUSE_MIGRATION_SKIP_RE,Sr as CLOUDFRONT_PRICE_CLASS_VALUES,he as CONNECTION_FAILURE_REASONS,ge as CONNECTION_PHASES,xe as CONNECTION_TERMINAL_FAILURE_PHASES,L_ as CONTENT_HASH_TAG_PATTERN,sr as CREATABLE_FRAMEWORKS,b as CapacityIdentityConfigSchema,v as CapacityIdentityPinSchema,X as CapacityIdentityWireSchema,Ge as ConnectionWireSchema,de as ConnectionsListResponseSchema,mE as DANGEROUS_ENV_VARS,V as DEFAULT_CAPACITY_SLOT,Mr as DEFAULT_FORMS_FROM_LOCAL_PART,Te as DEFAULT_REGION,rr as DEPLOYABLE_PATTERN_TYPES,Br as DEPLOYMENT_FAILURE_CODE_PATTERN,zr as DEPLOYMENT_FAILURE_DOCS_BASE_URL,Jr as DEPLOYMENT_FAILURE_LIMITS,Yr as DEPLOYMENT_FAILURE_PHASES,Xr as DEPLOYMENT_FAILURE_PROVIDER_SOURCES,Wr as DEPLOYMENT_FAILURE_SCHEMA_VERSION,Kr as DEPLOYMENT_FAULT_ATTRIBUTIONS,$r as DEPLOYMENT_FAULT_COPY,ET as DEPLOYMENT_PROVIDER_LABELS,D_ as DEPLOY_MODES,xr as DEV_SUBSTRATE_ENTRYPOINT_SOURCE,ur as DEV_SUBSTRATE_PARAMS_FILENAME,lr as DEV_SUBSTRATE_PARAMS_SCHEMA_VERSION,_ as DNS_APEX,N as DOMAIN_DEPLOY_DEFAULT_PHASE,p_ as DeployModeSchema,kr as DeploymentFailureAnalysisSchema,yr as DeploymentFailurePhaseSchema,jr as DeploymentFailureProviderSchema,br as DeploymentFailureProviderSourceSchema,wr as DeploymentFailureResourceSchema,Zr as DeploymentFailureSchema,vr as DeploymentFaultAttributionSchema,dr as DevSubstrateParamsSchema,Gr as DevSubstrateSynthPropsSchema,AT as ERROR_WINDOW_CONTEXT_LINES,V_ as EXPECTED_CH_SCHEMA_VERSION_ENV,h_ as EXPECTED_SCHEMA_VERSION_ENV,H_ as EXPECTED_SCHEMA_VERSION_TOOL_ENV,He as EXTERNAL_ID_PATTERN,w_ as FJALL_CLICKHOUSE_USERS,tT as FJALL_COMPONENT_GITIGNORE,SE as FJALL_CONFIG_DIR_ENV,tE as FJALL_CREDENTIALS_FILENAME,oE as FJALL_HOME_DIRNAME,aE as FJALL_LOG_DIR_ENV,j_ as FJALL_MAINTENANCE_USER,NT as FJALL_MANAGED_STATE_DIR_ENTRIES,oT as FJALL_PROJECT_GITIGNORE,k_ as FJALL_SCHEMA_GATE_USER,aT as FJALL_STATE_GITIGNORE_ENTRIES,ir as FRAMEWORKS,Pr as FRAMEWORK_PATTERN_RECOMMENDATIONS,nr as FRAMEWORK_VALUES,YE as GOVERNANCE_ACCOUNT_TIERS,ne as GOVERNANCE_SCOPE_REQUIRED_CODE,o as HOSTS_OUTPUT_MAX_BYTES,M_ as IMAGE_TAG_PATTERN,ye as INSTALL_SOURCES,c_ as ImageTagSchema,RT as LOCAL_CONFIG_GITIGNORE_ENTRY,Ie as MACHINE_ONLY_SCOPES,LE as MASKED_VALUE_MARKER,Se as MAX_SECONDARY_REGIONS,x_ as MIGRATION_SNAPSHOT_KIND_PREMIGRATE,g_ as MIGRATION_SNAPSHOT_KIND_TAG_KEY,G_ as MIGRATION_SNAPSHOT_NAME_PREFIX,d_ as MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV,Tr as OPENNEXT_PATTERN_TYPES,te as OPT_IN_REGION_CODES,Ir as PATTERN_CREATE_INPUT_FLAGS,Or as PATTERN_CREATE_INPUT_VALUES,er as PATTERN_REGISTRY,$_ as PATTERN_TYPES,Q_ as PATTERN_TYPE_VALUES,q_ as PHYSICAL_NAME_FALLBACK_PROPERTIES,K_ as PRISMA_MIGRATION_DIR_RE,Ye as PUBLIC_PACKAGE_NAME,pE as REDACTED_KEY_SENTINEL,Z as REGION_SHORT_CODES,R_ as RESERVED_APP_NAMES,O_ as RESERVED_APP_NAME_MESSAGE,C_ as RESERVED_APP_NAME_SUFFIX,n_ as RESERVED_APP_NAME_SUFFIX_MESSAGE,ZE as RESOURCE_CATEGORIES,y_ as SCHEMA_ADMIN_PASSWORD_ENV,Y_ as SCHEMA_ADMIN_USER_ENV,b_ as SCHEMA_GATE_EXIT,B_ as SCHEMA_GATE_EXIT_HINTS,ME as SCOPED_TOKEN_REGEX,Oe as SCOPE_VALUES,Pe as SECRET_NAME_ERROR,me as SECRET_NAME_PATTERN,Ke as SETUP_COMMANDS,Xe as SETUP_MODES,Be as SETUP_STEPS,be as SETUP_STEP_IDS,je as SKILL_INSTALL_FILENAME,we as SKILL_INSTALL_PATH,ke as SKILL_INSTALL_SEGMENTS,se as SSM_COMPONENT_ERROR,Le as SSM_COMPONENT_PATTERN,De as SSM_STANDARD_MAX_VALUE_BYTES,ar as STATIC_SITE_CDN_CONFIG_KEYS,tr as STATIC_SITE_CONFIG_KEYS,or as STATIC_SITE_DEPLOY_INJECTED_KEYS,Rr as STATIC_SITE_ROUTING_INFO,Nr as STATIC_SITE_ROUTING_VALUES,GE as STRUCTURAL_ENVIRONMENTS,pe as SecretNamespaceSchema,f_ as ServiceArtefactSchema,F_ as ServiceArtefactsSchema,n as TOKEN_STDERR_PREFIX,Ce as USER_GRANTABLE_SCOPES,_e as abbreviateRegion,f as accountConstructKey,vE as accountStageEffect,WE as accountTier,l as albDnsExportName,u as albHostedZoneIdExportName,l_ as artefactOutputKey,d as bucketWebsiteEndpointExportName,g as bucketWebsiteHostedZoneIdExportName,r_ as buildAppConfigPath,Me as buildNamespaceParts,ce as buildParameterPath,M as capitalise,qE as categoriseResource,G as cdnDomainExportName,j as defaultConnectedAccountName,fr as defaultFormsCorsOrigin,cr as defaultFormsFromAddress,Qr as deploymentFailureDocsUrl,Qe as deriveAllTargets,P_ as deriveContentHashTag,eT as deriveErrorMessageFromFailure,qe as deriveRegionsFromOrgConfig,ze as deriveTargets,IT as ensureGitignoreEntries,$e as environmentOrTier,KE as environmentToTier,le as escapeDotEnvValue,TT as extractErrorWindow,PE as filterDangerousEnvVars,J as findAccountNameCollision,S_ as findBoundaryPath,A_ as findInfrastructurePaths,E_ as findTarget,q as findTrailingRegionShortCode,NE as fjallCredentialsPath,RE as fjallHomeDir,OE as fjallLogDir,IE as fjallStatePath,bE as formatAccountStageList,TE as formatErrorString,e_ as generateTargetName,r as getDomainExportNames,T as getDomainStackName,A as getDomainUsEast1CertificatesStackName,kE as getEnvironmentLabel,_E as getErrorCode,EE as getErrorMessage,rE as getErrorStack,zE as getExpectedDuration,QE as getFriendlyResourceType,Ae as getRegionInfo,c as getSafeZoneName,F as hasAsciiStableConstructKey,eE as hasErrorCode,i_ as hasReservedAppNameSuffix,S as hostsExportPartName,m as imageTagParameterName,a_ as inferContainerFromCandidates,xE as isAccountStage,VE as isAccountTier,Fr as isAddressAtDomain,mr as isFramework,yE as isGovernanceTier,t_ as isInfrastructureFile,Fe as isManageablePath,a as isManagedDomainBinding,Ar as isOpenNextPatternType,Er as isPatternType,I_ as isReservedAppName,UE as mapSettledWithConcurrency,sE as maskSensitiveOutput,$ as normaliseError,oe as optInRegionWarning,qr as parseDeploymentFailure,Ue as parseDotEnv,Ee as parseGitRemoteUrl,fe as parseParameterPath,DE as parseShellArgs,_r as patternConstructId,B as projectCapacityIdentityToTarget,Lr as recommendPatternForFramework,z as regionSuffixRejectionMessage,ae as regions,Dr as requiredInputsForFramework,JE as resolveSynthEnvironment,W_ as schemaGateExitKind,t as serialiseHostsChunks,nE as singleton,fE as sleep,BE as stageFromWireEnvironment,w as suffixedAccountName,Ne as suggestRegionForTimezone,_T as toDeploymentFailureAnalysis,s as toKebab,L as toPascalCase,p as toScreamingSnake,D as toValidDatabaseName,ve as upgradeCommand};

package/dist/migration/constants.d.ts

@@ -25,6 +25,17 @@ export declare const MIGRATION_SNAPSHOT_NAME_PREFIX: "fjall-premigrate";
  * default retention.
  */
 export declare const MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV: "MIGRATION_SNAPSHOT_RETENTION_DAYS";
+/**
+ * Tag key marking an SDK-created RDS snapshot as Fjall's own, with the value
+ * naming which mechanism took it. The runner stamps
+ * `fjall:snapshotKind=premigrate` on every pre-migration snapshot (via
+ * `rdsPreMigrationSnapshotTags`); the webapp posture rules treat any
+ * `fjall:`-prefixed key as Fjall-managed, so a marked snapshot stops
+ * surfacing as IaC-unmanaged while a hand-taken manual snapshot still does.
+ */
+export declare const MIGRATION_SNAPSHOT_KIND_TAG_KEY: "fjall:snapshotKind";
+/** `MIGRATION_SNAPSHOT_KIND_TAG_KEY` value for runner-taken pre-migration snapshots. */
+export declare const MIGRATION_SNAPSHOT_KIND_PREMIGRATE: "premigrate";
 /**
  * Container env var name for the schema-version fail-fast gate. Every
  * container of every service whose `connections:` includes a relational DB

package/dist/migration/constants.js

@@ -1 +1 @@
-const _="fjall-premigrate",E="MIGRATION_SNAPSHOT_RETENTION_DAYS",A="EXPECTED_SCHEMA_VERSION",S="EXPECTED_SCHEMA_VERSION_TOOL",C="EXPECTED_CH_SCHEMA_VERSION",t="SCHEMA_ADMIN_USER",T="SCHEMA_ADMIN_PASSWORD",o="FJALL_SCHEMA_GATE_DB_URL_BASE",H="FJALL_SCHEMA_GATE_DB_USER",M="FJALL_SCHEMA_GATE_DB_PASSWORD",N="CLICKHOUSE_URL",R="CLICKHOUSE_DATABASE",I="CLICKHOUSE_CA_CERT",O="FJALL_SCHEMA_GATE_CH_USER",e="FJALL_SCHEMA_GATE_CH_PASSWORD",s=120,D="fjall-schema-gate",c="fjall/schema-gate",r="public.ecr.aws/fjall/schema-gate",p=/^\d{14}_/,G=/\.dev\.sql$/,L=/\.sql$/;export{L as CLICKHOUSE_MIGRATION_FILE_RE,G as CLICKHOUSE_MIGRATION_SKIP_RE,C as EXPECTED_CH_SCHEMA_VERSION_ENV,A as EXPECTED_SCHEMA_VERSION_ENV,S as EXPECTED_SCHEMA_VERSION_TOOL_ENV,_ as MIGRATION_SNAPSHOT_NAME_PREFIX,E as MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV,p as PRISMA_MIGRATION_DIR_RE,T as SCHEMA_ADMIN_PASSWORD_ENV,t as SCHEMA_ADMIN_USER_ENV,I as SCHEMA_GATE_CH_CA_CERT_ENV,R as SCHEMA_GATE_CH_DATABASE_ENV,e as SCHEMA_GATE_CH_PASSWORD_ENV,N as SCHEMA_GATE_CH_URL_ENV,O as SCHEMA_GATE_CH_USER_ENV,D as SCHEMA_GATE_CONTAINER_NAME,M as SCHEMA_GATE_DB_PASSWORD_ENV,o as SCHEMA_GATE_DB_URL_BASE_ENV,H as SCHEMA_GATE_DB_USER_ENV,c as SCHEMA_GATE_ECR_REPO_NAME,r as SCHEMA_GATE_PUBLIC_IMAGE_REPO,s as SCHEMA_GATE_START_TIMEOUT_SECONDS};
+const _="fjall-premigrate",E="MIGRATION_SNAPSHOT_RETENTION_DAYS",A="fjall:snapshotKind",S="premigrate",C="EXPECTED_SCHEMA_VERSION",t="EXPECTED_SCHEMA_VERSION_TOOL",T="EXPECTED_CH_SCHEMA_VERSION",o="SCHEMA_ADMIN_USER",N="SCHEMA_ADMIN_PASSWORD",R="FJALL_SCHEMA_GATE_DB_URL_BASE",H="FJALL_SCHEMA_GATE_DB_USER",M="FJALL_SCHEMA_GATE_DB_PASSWORD",I="CLICKHOUSE_URL",O="CLICKHOUSE_DATABASE",e="CLICKHOUSE_CA_CERT",s="FJALL_SCHEMA_GATE_CH_USER",D="FJALL_SCHEMA_GATE_CH_PASSWORD",c=120,r="fjall-schema-gate",p="fjall/schema-gate",G="public.ecr.aws/fjall/schema-gate",n=/^\d{14}_/,x=/\.dev\.sql$/,P=/\.sql$/;export{P as CLICKHOUSE_MIGRATION_FILE_RE,x as CLICKHOUSE_MIGRATION_SKIP_RE,T as EXPECTED_CH_SCHEMA_VERSION_ENV,C as EXPECTED_SCHEMA_VERSION_ENV,t as EXPECTED_SCHEMA_VERSION_TOOL_ENV,S as MIGRATION_SNAPSHOT_KIND_PREMIGRATE,A as MIGRATION_SNAPSHOT_KIND_TAG_KEY,_ as MIGRATION_SNAPSHOT_NAME_PREFIX,E as MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV,n as PRISMA_MIGRATION_DIR_RE,N as SCHEMA_ADMIN_PASSWORD_ENV,o as SCHEMA_ADMIN_USER_ENV,e as SCHEMA_GATE_CH_CA_CERT_ENV,O as SCHEMA_GATE_CH_DATABASE_ENV,D as SCHEMA_GATE_CH_PASSWORD_ENV,I as SCHEMA_GATE_CH_URL_ENV,s as SCHEMA_GATE_CH_USER_ENV,r as SCHEMA_GATE_CONTAINER_NAME,M as SCHEMA_GATE_DB_PASSWORD_ENV,R as SCHEMA_GATE_DB_URL_BASE_ENV,H as SCHEMA_GATE_DB_USER_ENV,p as SCHEMA_GATE_ECR_REPO_NAME,G as SCHEMA_GATE_PUBLIC_IMAGE_REPO,c as SCHEMA_GATE_START_TIMEOUT_SECONDS};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fjall/util",
-  "version": "28.0.0",
+  "version": "28.1.1",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/fjall-tech/fjall.git",