@fjall/util 28.4.0 → 30.0.0

package/dist/.build-source-hash

@@ -9,7 +9,7 @@
     "package.json",
     "tsconfig.json"
   ],
-  "hash": "58b95a45422cdf5c5a0375938cb6dd8a3401ac4afc0505a2b6e452bb4e14d04f",
+  "hash": "ae165cd13cccf04a0dbe6df403c2ee775e5de7b7c7890f3b60a91e4256b4d126",
   "files": {
     "src/async/concurrency.ts": "3c7ebe0222a720f9",
     "src/async/singleton.ts": "7bcc21b0fb920561",
@@ -33,6 +33,7 @@
     "src/cdkToolchain.ts": "a6b996c60b87d644",
     "src/cfn/physicalNameProperties.ts": "35d3c6f28079c593",
     "src/clickhouse.ts": "655c74cdba292c29",
+    "src/complianceIssue.ts": "10ea87dfb4c0e849",
     "src/config.ts": "6e15344c1d4a79fe",
     "src/configPaths.ts": "afcc2e4ceb6652a0",
     "src/constructMap.ts": "b81fc8e90015467f",
@@ -72,7 +73,7 @@
     "src/fsHelpers.ts": "4dd3877b3953c6a9",
     "src/fsScan.ts": "feb187758481443f",
     "src/httpKeepAlive.ts": "c8fe4b118ef4c79f",
-    "src/index.ts": "916d61efc9fbc36f",
+    "src/index.ts": "78ff2b177eeb8374",
     "src/infra/backupVault.ts": "661678a6dfb0b648",
     "src/infra/connectionsWire.ts": "e3afa3ba95a531d8",
     "src/infra/deployArtefacts.ts": "235ac21dd3ccf0b2",
@@ -133,9 +134,9 @@
     "src/staticSiteOutput.ts": "cc81ed32acc597f1",
     "src/targets.ts": "126280f0a5762e21",
     "../scripts/minify-dist.mjs": "6b2e4b0df8aec601",
-    "package.json": "9a1647d40b0ac7f3",
+    "package.json": "620e4d6e24973e55",
     "tsconfig.json": "db759831ad95f396"
   },
-  "outputHash": "f6940cdf7b816e044f003e7997da832ca7eb3d23098cc20b8879221be9c2af9b",
-  "outputFileCount": 251
+  "outputHash": "b60ce1a44cb91cebc61b703a80038d003ce0497f390a5afd239fec8064f64186",
+  "outputFileCount": 253
 }

package/dist/.minified

@@ -1 +1 @@
-125 files minified at 2026-09-02T10:08:10.972Z
+126 files minified at 2026-09-02T22:02:43.527Z

package/dist/complianceIssue.d.ts

@@ -0,0 +1,46 @@
+/**
+ * ComplianceIssue status vocabulary — the ONE spelling every consumer takes
+ * from the minted package: the webapp's Postgres CHECK, `ComplianceIssueStatus`
+ * const, client union and policy sets; the `mcp` `list_compliance_issues`
+ * filter; the `ai-tools` `query_compliance` filter; the generated MCP tool
+ * surface. Client-safe (no node built-ins) — the webapp imports it from the
+ * root barrel in browser code.
+ *
+ * Semantics — the definitional home; the webapp's policy sets cite it:
+ * - `open`: live; counts against the posture score.
+ * - `acknowledged`: machine-written by the tier-aware alert policy (actor
+ *   sentinel `tier-policy`): expected on the organisation's configuration,
+ *   re-derived every scan. Not a suppression. The 2026-09-02 rework moves
+ *   that lane to `expected` and reserves this value with no writer.
+ * - `pending_verification`: the cure-lane hold — a cure ran and only the next
+ *   scan can observe the violation gone. Non-compliant until settled (absent
+ *   → `resolved`, seen again → `open`, or returned to `open` by the sweep).
+ * - `resolved`: the terminal state every lane leaves; a recurrence reopens the
+ *   same row.
+ * - `suppressed`: a person opted out; no machine actor writes over it.
+ * - `expected`: machine-written: a structural consequence of the app's tier
+ *   knob on a development- or staging-stage asset. Informational — outside
+ *   the headline figure, inside coverage; re-derived every scan; escalates to
+ *   `open` when the stage, knob or rule changes; never on production, root or
+ *   platform-stage accounts, never for a critical rule; suppression wins.
+ * - `mitigated`: machine-written: a construct-level compensating control
+ *   covers the rule for that resource at every stage. Counted as met; the
+ *   reason carries the evidence pointer; suppression wins.
+ * `expected` and `mitigated` have no writer until the rework ships; they
+ * exist here first so the vocabulary mints once.
+ *
+ * Fjall-first: a status lands here and mints before the webapp bumps,
+ * migrates its CHECK and Enum8 and classifies it (design
+ * 2026-09-01-tier-aware-alert-policy § 13.5). The mint→deploy window is safe
+ * only while `webapp/app/routes/api/compliance/issues.ts` rejects an unknown
+ * `status` filter with 400 — that gate must not loosen.
+ *
+ * Deliberately NO zod schema here: `.describe()` text is registered per zod
+ * instance and the MCP SDK renders JSON Schema from its own, so a util-built
+ * schema could reach the tool surface with its descriptions silently dropped.
+ * `mcp` and `ai-tools` build `z.enum(COMPLIANCE_ISSUE_STATUSES)` locally.
+ */
+export declare const COMPLIANCE_ISSUE_STATUSES: readonly ["open", "acknowledged", "pending_verification", "resolved", "suppressed", "expected", "mitigated"];
+export type ComplianceIssueStatus = (typeof COMPLIANCE_ISSUE_STATUSES)[number];
+/** Type guard: checks whether a string is a ComplianceIssue status. */
+export declare function isComplianceIssueStatus(value: string): value is ComplianceIssueStatus;

package/dist/complianceIssue.js

@@ -0,0 +1 @@
+var S=Object.defineProperty;var t=(e,n)=>S(e,"name",{value:n,configurable:!0});const s=["open","acknowledged","pending_verification","resolved","suppressed","expected","mitigated"],o=new Set(s);function p(e){return o.has(e)}t(p,"isComplianceIssueStatus");export{s as COMPLIANCE_ISSUE_STATUSES,p as isComplianceIssueStatus};

package/dist/index.d.ts

@@ -20,6 +20,7 @@ export { abbreviateRegion, AWS_REGIONS_METADATA, DEFAULT_REGION, getRegionInfo,
 export { SCOPE_VALUES, MACHINE_ONLY_SCOPES, USER_GRANTABLE_SCOPES, GOVERNANCE_SCOPE_REQUIRED_CODE, type TokenScope } from "./infra/tokenScopes.js";
 export { SECRET_NAME_PATTERN, SECRET_NAME_ERROR, SSM_COMPONENT_PATTERN, SSM_COMPONENT_ERROR, SSM_STANDARD_MAX_VALUE_BYTES, SecretNamespaceSchema, type SecretNamespace, buildNamespaceParts, buildParameterPath, parseParameterPath, isManageablePath, parseDotEnv, escapeDotEnvValue } from "./secrets.js";
 export { ConnectionWireSchema, type ConnectionWire, ConnectionsListResponseSchema, type ConnectionsListResponse, CONNECTION_PHASES, type ConnectionPhase, CONNECTION_TERMINAL_FAILURE_PHASES, type ConnectionTerminalFailurePhase, CONNECTION_FAILURE_REASONS, type ConnectionFailureReason, EXTERNAL_ID_PATTERN } from "./infra/connectionsWire.js";
+export { COMPLIANCE_ISSUE_STATUSES, type ComplianceIssueStatus, isComplianceIssueStatus } from "./complianceIssue.js";
 export { PUBLIC_PACKAGE_NAME, INSTALL_SOURCES, type InstallSource, SETUP_COMMANDS, type SetupCommandId, upgradeCommand, SETUP_MODES, type SetupMode, SETUP_STEP_IDS, type SetupStepId, type SetupStep, type SetupStepSequence, SETUP_STEPS, AGENT_SETUP_PROMPTS, AGENT_INSTALL_COMMAND, SKILL_INSTALL_SEGMENTS, SKILL_INSTALL_FILENAME, SKILL_INSTALL_PATH } from "./onboarding/index.js";
 export { deriveRegionsFromOrgConfig, deriveTargets, deriveAllTargets, environmentOrTier, findTarget, generateTargetName, type OrgConfigRegions, type TargetAccount, type DerivedTarget } from "./targets.js";
 export { buildAppConfigPath } from "./repo/appPath.js";

package/dist/index.js

@@ -1 +1 @@
-import{DNS_APEX as _,getDomainExportNames as r,getDomainStackName as T,getDomainUsEast1CertificatesStackName as A,hostsExportPartName as S,serialiseHostsChunks as t,HOSTS_OUTPUT_MAX_BYTES as o,isManagedDomainBinding as a,DOMAIN_DEPLOY_DEFAULT_PHASE as N}from"./infra/domainExports.js";import{BACKUP_VAULT_NAME as O}from"./infra/backupVault.js";import{APPROVAL_TOKEN_OUTPUT_PREFIX as C,TOKEN_STDERR_PREFIX as n}from"./deploy/approvalTokenOutput.js";import{imageTagParameterName as m}from"./infra/imageTags.js";import{toPascalCase as L,toKebab as s,toValidDatabaseName as D,toScreamingSnake as p,capitalise as M,getSafeZoneName as c,accountConstructKey as f,hasAsciiStableConstructKey as F}from"./naming/caseConversion.js";import{albDnsExportName as l,albHostedZoneIdExportName as u,cdnDomainExportName as G,bucketWebsiteEndpointExportName as d,bucketWebsiteHostedZoneIdExportName as g}from"./naming/targetExportNames.js";import{CAPACITY_SLOT_PATTERN as h,CAPACITY_SLOT_MAX_LENGTH as H,DEFAULT_CAPACITY_SLOT as V,CAPACITY_ANCHOR_PATTERN as Y,CAPACITY_ANCHOR_MAX_LENGTH as y,CAPACITY_IDENTITY_CONTEXT_KEY as K,CapacityIdentityPinSchema as v,CapacityIdentityWireSchema as X,CapacityIdentityConfigSchema as b,projectCapacityIdentityToTarget as B}from"./capacityIdentity.js";import{findAccountNameCollision as J}from"./naming/accountNameCollision.js";import{defaultConnectedAccountName as j,suffixedAccountName as w,REGION_SHORT_CODES as Z,findTrailingRegionShortCode as q,regionSuffixRejectionMessage as z}from"./naming/connectedAccountName.js";import{normaliseError as $,getErrorMessage as EE,hasErrorCode as eE,getErrorCode as _E,getErrorStack as rE,formatErrorString as TE}from"./errorUtils.js";import{FJALL_CONFIG_DIR_ENV as SE,FJALL_CREDENTIALS_FILENAME as tE,FJALL_HOME_DIRNAME as oE,FJALL_LOG_DIR_ENV as aE,fjallCredentialsPath as NE,fjallHomeDir as RE,fjallLogDir as OE,fjallStatePath as IE}from"./fjallHome.js";import{singleton as nE}from"./async/singleton.js";import{DANGEROUS_ENV_VARS as mE,filterDangerousEnvVars as PE,MASKED_VALUE_MARKER as LE,maskSensitiveOutput as sE,parseShellArgs as DE,REDACTED_KEY_SENTINEL as pE,SCOPED_TOKEN_REGEX as ME}from"./securityHelpers.js";import{sleep as fE}from"./async/sleep.js";import{mapSettledWithConcurrency as UE}from"./async/concurrency.js";import{ACCOUNT_STAGES_WITH_ROOT as uE,STRUCTURAL_ENVIRONMENTS as GE,ACCOUNT_STAGES as dE,ACCOUNT_STAGE_LABELS as gE,isAccountStage as xE,ACCOUNT_TIERS as hE,AccountTierSchema as HE,isAccountTier as VE,GOVERNANCE_ACCOUNT_TIERS as YE,isGovernanceTier as yE,environmentToTier as KE,accountStageEffect as vE,ACCOUNT_STAGE_EFFECTS as XE,formatAccountStageList as bE,stageFromWireEnvironment as BE,accountTier as WE,resolveSynthEnvironment as JE,getEnvironmentLabel as kE,ACCOUNT_ROLES as jE}from"./environments.js";import{RESOURCE_CATEGORIES as ZE,categoriseResource as qE,getExpectedDuration as zE,getFriendlyResourceType as QE}from"./resourceCategorisation.js";import{parseGitRemoteUrl as Ee}from"./repo/gitRemoteParser.js";import{abbreviateRegion as _e,AWS_REGIONS_METADATA as re,DEFAULT_REGION as Te,getRegionInfo as Ae,MAX_SECONDARY_REGIONS as Se,OPT_IN_REGION_CODES as te,optInRegionWarning as oe,regions as ae,suggestRegionForTimezone as Ne}from"./infra/regions.js";import{SCOPE_VALUES as Oe,MACHINE_ONLY_SCOPES as Ie,USER_GRANTABLE_SCOPES as Ce,GOVERNANCE_SCOPE_REQUIRED_CODE as ne}from"./infra/tokenScopes.js";import{SECRET_NAME_PATTERN as me,SECRET_NAME_ERROR as Pe,SSM_COMPONENT_PATTERN as Le,SSM_COMPONENT_ERROR as se,SSM_STANDARD_MAX_VALUE_BYTES as De,SecretNamespaceSchema as pe,buildNamespaceParts as Me,buildParameterPath as ce,parseParameterPath as fe,isManageablePath as Fe,parseDotEnv as Ue,escapeDotEnvValue as le}from"./secrets.js";import{ConnectionWireSchema as Ge,ConnectionsListResponseSchema as de,CONNECTION_PHASES as ge,CONNECTION_TERMINAL_FAILURE_PHASES as xe,CONNECTION_FAILURE_REASONS as he,EXTERNAL_ID_PATTERN as He}from"./infra/connectionsWire.js";import{PUBLIC_PACKAGE_NAME as Ye,INSTALL_SOURCES as ye,SETUP_COMMANDS as Ke,upgradeCommand as ve,SETUP_MODES as Xe,SETUP_STEP_IDS as be,SETUP_STEPS as Be,AGENT_SETUP_PROMPTS as We,AGENT_INSTALL_COMMAND as Je,SKILL_INSTALL_SEGMENTS as ke,SKILL_INSTALL_FILENAME as je,SKILL_INSTALL_PATH as we}from"./onboarding/index.js";import{deriveRegionsFromOrgConfig as qe,deriveTargets as ze,deriveAllTargets as Qe,environmentOrTier as $e,findTarget as E_,generateTargetName as e_}from"./targets.js";import{buildAppConfigPath as r_}from"./repo/appPath.js";import{findInfrastructurePaths as A_,findBoundaryPath as S_,isInfrastructureFile as t_}from"./repo/findInfrastructurePaths.js";import{inferContainerFromCandidates as a_}from"./repo/inferContainerFromCandidates.js";import{RESERVED_APP_NAMES as R_,RESERVED_APP_NAME_MESSAGE as O_,isReservedAppName as I_,RESERVED_APP_NAME_SUFFIX as C_,RESERVED_APP_NAME_SUFFIX_MESSAGE as n_,hasReservedAppNameSuffix as i_}from"./naming/reservedAppNames.js";import{deriveContentHashTag as P_,CONTENT_HASH_TAG_PATTERN as L_}from"./infra/deriveContentHashTag.js";import{DEPLOY_MODES as D_,DeployModeSchema as p_,IMAGE_TAG_PATTERN as M_,ImageTagSchema as c_,ServiceArtefactSchema as f_,ServiceArtefactsSchema as F_,ARTEFACT_OUTPUT_FIELDS as U_,artefactOutputKey as l_}from"./infra/deployArtefacts.js";import{MIGRATION_SNAPSHOT_NAME_PREFIX as G_,MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV as d_,MIGRATION_SNAPSHOT_KIND_TAG_KEY as g_,MIGRATION_SNAPSHOT_KIND_PREMIGRATE as x_,EXPECTED_SCHEMA_VERSION_ENV as h_,EXPECTED_SCHEMA_VERSION_TOOL_ENV as H_,EXPECTED_CH_SCHEMA_VERSION_ENV as V_,SCHEMA_ADMIN_USER_ENV as Y_,SCHEMA_ADMIN_PASSWORD_ENV as y_,PRISMA_MIGRATION_DIR_RE as K_,CLICKHOUSE_MIGRATION_SKIP_RE as v_}from"./migration/constants.js";import{SCHEMA_GATE_EXIT as b_,SCHEMA_GATE_EXIT_HINTS as B_,schemaGateExitKind as W_}from"./migration/schemaGateExit.js";import{FJALL_SCHEMA_GATE_USER as k_,FJALL_MAINTENANCE_USER as j_,FJALL_CLICKHOUSE_USERS as w_}from"./migration/clickhouseFrameworkUsers.js";import{PHYSICAL_NAME_FALLBACK_PROPERTIES as q_}from"./cfn/physicalNameProperties.js";import{PATTERN_TYPE_VALUES as Q_,PATTERN_TYPES as $_,isPatternType as Er,PATTERN_REGISTRY as er,patternConstructId as _r,DEPLOYABLE_PATTERN_TYPES as rr,OPENNEXT_PATTERN_TYPES as Tr,isOpenNextPatternType as Ar,CLOUDFRONT_PRICE_CLASS_VALUES as Sr,STATIC_SITE_CONFIG_KEYS as tr,STATIC_SITE_DEPLOY_INJECTED_KEYS as or,STATIC_SITE_CDN_CONFIG_KEYS as ar,STATIC_SITE_ROUTING_VALUES as Nr,STATIC_SITE_ROUTING_INFO as Rr,PATTERN_CREATE_INPUT_VALUES as Or,PATTERN_CREATE_INPUT_FLAGS as Ir}from"./patterns/patternTypes.js";import{FRAMEWORK_VALUES as nr,FRAMEWORKS as ir,isFramework as mr,FRAMEWORK_PATTERN_RECOMMENDATIONS as Pr,recommendPatternForFramework as Lr,CREATABLE_FRAMEWORKS as sr,requiredInputsForFramework as Dr}from"./patterns/frameworkPatterns.js";import{DEFAULT_FORMS_FROM_LOCAL_PART as Mr,defaultFormsFromAddress as cr,defaultFormsCorsOrigin as fr,isAddressAtDomain as Fr}from"./patterns/staticSiteForms.js";import{DEV_SUBSTRATE_PARAMS_SCHEMA_VERSION as lr,DEV_SUBSTRATE_PARAMS_FILENAME as ur,DevSubstrateSynthPropsSchema as Gr,DevSubstrateParamsSchema as dr}from"./devSubstrate/params.js";import{DEV_SUBSTRATE_ENTRYPOINT_SOURCE as xr}from"./devSubstrate/entrypoint.js";import{BLESSED_CDK_TOOLCHAIN as Hr}from"./cdkToolchain.js";import{DEPLOYMENT_FAILURE_PHASES as Yr,DeploymentFailurePhaseSchema as yr,DEPLOYMENT_FAULT_ATTRIBUTIONS as Kr,DeploymentFaultAttributionSchema as vr,DEPLOYMENT_FAILURE_PROVIDER_SOURCES as Xr,DeploymentFailureProviderSourceSchema as br,DEPLOYMENT_FAILURE_CODE_PATTERN as Br,DEPLOYMENT_FAILURE_SCHEMA_VERSION as Wr,DEPLOYMENT_FAILURE_LIMITS as Jr,DeploymentFailureAnalysisSchema as kr,DeploymentFailureProviderSchema as jr,DeploymentFailureResourceSchema as wr,DeploymentFailureSchema as Zr,parseDeploymentFailure as qr,DEPLOYMENT_FAILURE_DOCS_BASE_URL as zr,deploymentFailureDocsUrl as Qr,DEPLOYMENT_FAULT_COPY as $r,DEPLOYMENT_PROVIDER_LABELS as ET,deriveErrorMessageFromFailure as eT,toDeploymentFailureAnalysis as _T}from"./failure/deploymentFailure.js";import{extractErrorWindow as TT,ERROR_WINDOW_CONTEXT_LINES as AT}from"./failure/extractErrorWindow.js";import{FJALL_COMPONENT_GITIGNORE as tT,FJALL_PROJECT_GITIGNORE as oT,FJALL_STATE_GITIGNORE_ENTRIES as aT,FJALL_MANAGED_STATE_DIR_ENTRIES as NT,LOCAL_CONFIG_GITIGNORE_ENTRY as RT}from"./scaffold/gitignore.js";import{ensureGitignoreEntries as IT}from"./scaffold/ensureGitignore.js";export{jE as ACCOUNT_ROLES,dE as ACCOUNT_STAGES,uE as ACCOUNT_STAGES_WITH_ROOT,XE as ACCOUNT_STAGE_EFFECTS,gE as ACCOUNT_STAGE_LABELS,hE as ACCOUNT_TIERS,Je as AGENT_INSTALL_COMMAND,We as AGENT_SETUP_PROMPTS,C as APPROVAL_TOKEN_OUTPUT_PREFIX,U_ as ARTEFACT_OUTPUT_FIELDS,re as AWS_REGIONS_METADATA,HE as AccountTierSchema,O as BACKUP_VAULT_NAME,Hr as BLESSED_CDK_TOOLCHAIN,y as CAPACITY_ANCHOR_MAX_LENGTH,Y as CAPACITY_ANCHOR_PATTERN,K as CAPACITY_IDENTITY_CONTEXT_KEY,H as CAPACITY_SLOT_MAX_LENGTH,h as CAPACITY_SLOT_PATTERN,v_ as CLICKHOUSE_MIGRATION_SKIP_RE,Sr as CLOUDFRONT_PRICE_CLASS_VALUES,he as CONNECTION_FAILURE_REASONS,ge as CONNECTION_PHASES,xe as CONNECTION_TERMINAL_FAILURE_PHASES,L_ as CONTENT_HASH_TAG_PATTERN,sr as CREATABLE_FRAMEWORKS,b as CapacityIdentityConfigSchema,v as CapacityIdentityPinSchema,X as CapacityIdentityWireSchema,Ge as ConnectionWireSchema,de as ConnectionsListResponseSchema,mE as DANGEROUS_ENV_VARS,V as DEFAULT_CAPACITY_SLOT,Mr as DEFAULT_FORMS_FROM_LOCAL_PART,Te as DEFAULT_REGION,rr as DEPLOYABLE_PATTERN_TYPES,Br as DEPLOYMENT_FAILURE_CODE_PATTERN,zr as DEPLOYMENT_FAILURE_DOCS_BASE_URL,Jr as DEPLOYMENT_FAILURE_LIMITS,Yr as DEPLOYMENT_FAILURE_PHASES,Xr as DEPLOYMENT_FAILURE_PROVIDER_SOURCES,Wr as DEPLOYMENT_FAILURE_SCHEMA_VERSION,Kr as DEPLOYMENT_FAULT_ATTRIBUTIONS,$r as DEPLOYMENT_FAULT_COPY,ET as DEPLOYMENT_PROVIDER_LABELS,D_ as DEPLOY_MODES,xr as DEV_SUBSTRATE_ENTRYPOINT_SOURCE,ur as DEV_SUBSTRATE_PARAMS_FILENAME,lr as DEV_SUBSTRATE_PARAMS_SCHEMA_VERSION,_ as DNS_APEX,N as DOMAIN_DEPLOY_DEFAULT_PHASE,p_ as DeployModeSchema,kr as DeploymentFailureAnalysisSchema,yr as DeploymentFailurePhaseSchema,jr as DeploymentFailureProviderSchema,br as DeploymentFailureProviderSourceSchema,wr as DeploymentFailureResourceSchema,Zr as DeploymentFailureSchema,vr as DeploymentFaultAttributionSchema,dr as DevSubstrateParamsSchema,Gr as DevSubstrateSynthPropsSchema,AT as ERROR_WINDOW_CONTEXT_LINES,V_ as EXPECTED_CH_SCHEMA_VERSION_ENV,h_ as EXPECTED_SCHEMA_VERSION_ENV,H_ as EXPECTED_SCHEMA_VERSION_TOOL_ENV,He as EXTERNAL_ID_PATTERN,w_ as FJALL_CLICKHOUSE_USERS,tT as FJALL_COMPONENT_GITIGNORE,SE as FJALL_CONFIG_DIR_ENV,tE as FJALL_CREDENTIALS_FILENAME,oE as FJALL_HOME_DIRNAME,aE as FJALL_LOG_DIR_ENV,j_ as FJALL_MAINTENANCE_USER,NT as FJALL_MANAGED_STATE_DIR_ENTRIES,oT as FJALL_PROJECT_GITIGNORE,k_ as FJALL_SCHEMA_GATE_USER,aT as FJALL_STATE_GITIGNORE_ENTRIES,ir as FRAMEWORKS,Pr as FRAMEWORK_PATTERN_RECOMMENDATIONS,nr as FRAMEWORK_VALUES,YE as GOVERNANCE_ACCOUNT_TIERS,ne as GOVERNANCE_SCOPE_REQUIRED_CODE,o as HOSTS_OUTPUT_MAX_BYTES,M_ as IMAGE_TAG_PATTERN,ye as INSTALL_SOURCES,c_ as ImageTagSchema,RT as LOCAL_CONFIG_GITIGNORE_ENTRY,Ie as MACHINE_ONLY_SCOPES,LE as MASKED_VALUE_MARKER,Se as MAX_SECONDARY_REGIONS,x_ as MIGRATION_SNAPSHOT_KIND_PREMIGRATE,g_ as MIGRATION_SNAPSHOT_KIND_TAG_KEY,G_ as MIGRATION_SNAPSHOT_NAME_PREFIX,d_ as MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV,Tr as OPENNEXT_PATTERN_TYPES,te as OPT_IN_REGION_CODES,Ir as PATTERN_CREATE_INPUT_FLAGS,Or as PATTERN_CREATE_INPUT_VALUES,er as PATTERN_REGISTRY,$_ as PATTERN_TYPES,Q_ as PATTERN_TYPE_VALUES,q_ as PHYSICAL_NAME_FALLBACK_PROPERTIES,K_ as PRISMA_MIGRATION_DIR_RE,Ye as PUBLIC_PACKAGE_NAME,pE as REDACTED_KEY_SENTINEL,Z as REGION_SHORT_CODES,R_ as RESERVED_APP_NAMES,O_ as RESERVED_APP_NAME_MESSAGE,C_ as RESERVED_APP_NAME_SUFFIX,n_ as RESERVED_APP_NAME_SUFFIX_MESSAGE,ZE as RESOURCE_CATEGORIES,y_ as SCHEMA_ADMIN_PASSWORD_ENV,Y_ as SCHEMA_ADMIN_USER_ENV,b_ as SCHEMA_GATE_EXIT,B_ as SCHEMA_GATE_EXIT_HINTS,ME as SCOPED_TOKEN_REGEX,Oe as SCOPE_VALUES,Pe as SECRET_NAME_ERROR,me as SECRET_NAME_PATTERN,Ke as SETUP_COMMANDS,Xe as SETUP_MODES,Be as SETUP_STEPS,be as SETUP_STEP_IDS,je as SKILL_INSTALL_FILENAME,we as SKILL_INSTALL_PATH,ke as SKILL_INSTALL_SEGMENTS,se as SSM_COMPONENT_ERROR,Le as SSM_COMPONENT_PATTERN,De as SSM_STANDARD_MAX_VALUE_BYTES,ar as STATIC_SITE_CDN_CONFIG_KEYS,tr as STATIC_SITE_CONFIG_KEYS,or as STATIC_SITE_DEPLOY_INJECTED_KEYS,Rr as STATIC_SITE_ROUTING_INFO,Nr as STATIC_SITE_ROUTING_VALUES,GE as STRUCTURAL_ENVIRONMENTS,pe as SecretNamespaceSchema,f_ as ServiceArtefactSchema,F_ as ServiceArtefactsSchema,n as TOKEN_STDERR_PREFIX,Ce as USER_GRANTABLE_SCOPES,_e as abbreviateRegion,f as accountConstructKey,vE as accountStageEffect,WE as accountTier,l as albDnsExportName,u as albHostedZoneIdExportName,l_ as artefactOutputKey,d as bucketWebsiteEndpointExportName,g as bucketWebsiteHostedZoneIdExportName,r_ as buildAppConfigPath,Me as buildNamespaceParts,ce as buildParameterPath,M as capitalise,qE as categoriseResource,G as cdnDomainExportName,j as defaultConnectedAccountName,fr as defaultFormsCorsOrigin,cr as defaultFormsFromAddress,Qr as deploymentFailureDocsUrl,Qe as deriveAllTargets,P_ as deriveContentHashTag,eT as deriveErrorMessageFromFailure,qe as deriveRegionsFromOrgConfig,ze as deriveTargets,IT as ensureGitignoreEntries,$e as environmentOrTier,KE as environmentToTier,le as escapeDotEnvValue,TT as extractErrorWindow,PE as filterDangerousEnvVars,J as findAccountNameCollision,S_ as findBoundaryPath,A_ as findInfrastructurePaths,E_ as findTarget,q as findTrailingRegionShortCode,NE as fjallCredentialsPath,RE as fjallHomeDir,OE as fjallLogDir,IE as fjallStatePath,bE as formatAccountStageList,TE as formatErrorString,e_ as generateTargetName,r as getDomainExportNames,T as getDomainStackName,A as getDomainUsEast1CertificatesStackName,kE as getEnvironmentLabel,_E as getErrorCode,EE as getErrorMessage,rE as getErrorStack,zE as getExpectedDuration,QE as getFriendlyResourceType,Ae as getRegionInfo,c as getSafeZoneName,F as hasAsciiStableConstructKey,eE as hasErrorCode,i_ as hasReservedAppNameSuffix,S as hostsExportPartName,m as imageTagParameterName,a_ as inferContainerFromCandidates,xE as isAccountStage,VE as isAccountTier,Fr as isAddressAtDomain,mr as isFramework,yE as isGovernanceTier,t_ as isInfrastructureFile,Fe as isManageablePath,a as isManagedDomainBinding,Ar as isOpenNextPatternType,Er as isPatternType,I_ as isReservedAppName,UE as mapSettledWithConcurrency,sE as maskSensitiveOutput,$ as normaliseError,oe as optInRegionWarning,qr as parseDeploymentFailure,Ue as parseDotEnv,Ee as parseGitRemoteUrl,fe as parseParameterPath,DE as parseShellArgs,_r as patternConstructId,B as projectCapacityIdentityToTarget,Lr as recommendPatternForFramework,z as regionSuffixRejectionMessage,ae as regions,Dr as requiredInputsForFramework,JE as resolveSynthEnvironment,W_ as schemaGateExitKind,t as serialiseHostsChunks,nE as singleton,fE as sleep,BE as stageFromWireEnvironment,w as suffixedAccountName,Ne as suggestRegionForTimezone,_T as toDeploymentFailureAnalysis,s as toKebab,L as toPascalCase,p as toScreamingSnake,D as toValidDatabaseName,ve as upgradeCommand};
+import{DNS_APEX as _,getDomainExportNames as r,getDomainStackName as T,getDomainUsEast1CertificatesStackName as A,hostsExportPartName as S,serialiseHostsChunks as t,HOSTS_OUTPUT_MAX_BYTES as o,isManagedDomainBinding as a,DOMAIN_DEPLOY_DEFAULT_PHASE as N}from"./infra/domainExports.js";import{BACKUP_VAULT_NAME as I}from"./infra/backupVault.js";import{APPROVAL_TOKEN_OUTPUT_PREFIX as C,TOKEN_STDERR_PREFIX as i}from"./deploy/approvalTokenOutput.js";import{imageTagParameterName as m}from"./infra/imageTags.js";import{toPascalCase as L,toKebab as s,toValidDatabaseName as D,toScreamingSnake as p,capitalise as M,getSafeZoneName as c,accountConstructKey as f,hasAsciiStableConstructKey as F}from"./naming/caseConversion.js";import{albDnsExportName as l,albHostedZoneIdExportName as u,cdnDomainExportName as x,bucketWebsiteEndpointExportName as G,bucketWebsiteHostedZoneIdExportName as d}from"./naming/targetExportNames.js";import{CAPACITY_SLOT_PATTERN as h,CAPACITY_SLOT_MAX_LENGTH as H,DEFAULT_CAPACITY_SLOT as V,CAPACITY_ANCHOR_PATTERN as Y,CAPACITY_ANCHOR_MAX_LENGTH as y,CAPACITY_IDENTITY_CONTEXT_KEY as K,CapacityIdentityPinSchema as v,CapacityIdentityWireSchema as X,CapacityIdentityConfigSchema as b,projectCapacityIdentityToTarget as B}from"./capacityIdentity.js";import{findAccountNameCollision as J}from"./naming/accountNameCollision.js";import{defaultConnectedAccountName as j,suffixedAccountName as w,REGION_SHORT_CODES as Z,findTrailingRegionShortCode as q,regionSuffixRejectionMessage as z}from"./naming/connectedAccountName.js";import{normaliseError as $,getErrorMessage as EE,hasErrorCode as eE,getErrorCode as _E,getErrorStack as rE,formatErrorString as TE}from"./errorUtils.js";import{FJALL_CONFIG_DIR_ENV as SE,FJALL_CREDENTIALS_FILENAME as tE,FJALL_HOME_DIRNAME as oE,FJALL_LOG_DIR_ENV as aE,fjallCredentialsPath as NE,fjallHomeDir as RE,fjallLogDir as IE,fjallStatePath as OE}from"./fjallHome.js";import{singleton as iE}from"./async/singleton.js";import{DANGEROUS_ENV_VARS as mE,filterDangerousEnvVars as PE,MASKED_VALUE_MARKER as LE,maskSensitiveOutput as sE,parseShellArgs as DE,REDACTED_KEY_SENTINEL as pE,SCOPED_TOKEN_REGEX as ME}from"./securityHelpers.js";import{sleep as fE}from"./async/sleep.js";import{mapSettledWithConcurrency as UE}from"./async/concurrency.js";import{ACCOUNT_STAGES_WITH_ROOT as uE,STRUCTURAL_ENVIRONMENTS as xE,ACCOUNT_STAGES as GE,ACCOUNT_STAGE_LABELS as dE,isAccountStage as gE,ACCOUNT_TIERS as hE,AccountTierSchema as HE,isAccountTier as VE,GOVERNANCE_ACCOUNT_TIERS as YE,isGovernanceTier as yE,environmentToTier as KE,accountStageEffect as vE,ACCOUNT_STAGE_EFFECTS as XE,formatAccountStageList as bE,stageFromWireEnvironment as BE,accountTier as WE,resolveSynthEnvironment as JE,getEnvironmentLabel as kE,ACCOUNT_ROLES as jE}from"./environments.js";import{RESOURCE_CATEGORIES as ZE,categoriseResource as qE,getExpectedDuration as zE,getFriendlyResourceType as QE}from"./resourceCategorisation.js";import{parseGitRemoteUrl as Ee}from"./repo/gitRemoteParser.js";import{abbreviateRegion as _e,AWS_REGIONS_METADATA as re,DEFAULT_REGION as Te,getRegionInfo as Ae,MAX_SECONDARY_REGIONS as Se,OPT_IN_REGION_CODES as te,optInRegionWarning as oe,regions as ae,suggestRegionForTimezone as Ne}from"./infra/regions.js";import{SCOPE_VALUES as Ie,MACHINE_ONLY_SCOPES as Oe,USER_GRANTABLE_SCOPES as Ce,GOVERNANCE_SCOPE_REQUIRED_CODE as ie}from"./infra/tokenScopes.js";import{SECRET_NAME_PATTERN as me,SECRET_NAME_ERROR as Pe,SSM_COMPONENT_PATTERN as Le,SSM_COMPONENT_ERROR as se,SSM_STANDARD_MAX_VALUE_BYTES as De,SecretNamespaceSchema as pe,buildNamespaceParts as Me,buildParameterPath as ce,parseParameterPath as fe,isManageablePath as Fe,parseDotEnv as Ue,escapeDotEnvValue as le}from"./secrets.js";import{ConnectionWireSchema as xe,ConnectionsListResponseSchema as Ge,CONNECTION_PHASES as de,CONNECTION_TERMINAL_FAILURE_PHASES as ge,CONNECTION_FAILURE_REASONS as he,EXTERNAL_ID_PATTERN as He}from"./infra/connectionsWire.js";import{COMPLIANCE_ISSUE_STATUSES as Ye,isComplianceIssueStatus as ye}from"./complianceIssue.js";import{PUBLIC_PACKAGE_NAME as ve,INSTALL_SOURCES as Xe,SETUP_COMMANDS as be,upgradeCommand as Be,SETUP_MODES as We,SETUP_STEP_IDS as Je,SETUP_STEPS as ke,AGENT_SETUP_PROMPTS as je,AGENT_INSTALL_COMMAND as we,SKILL_INSTALL_SEGMENTS as Ze,SKILL_INSTALL_FILENAME as qe,SKILL_INSTALL_PATH as ze}from"./onboarding/index.js";import{deriveRegionsFromOrgConfig as $e,deriveTargets as E_,deriveAllTargets as e_,environmentOrTier as __,findTarget as r_,generateTargetName as T_}from"./targets.js";import{buildAppConfigPath as S_}from"./repo/appPath.js";import{findInfrastructurePaths as o_,findBoundaryPath as a_,isInfrastructureFile as N_}from"./repo/findInfrastructurePaths.js";import{inferContainerFromCandidates as I_}from"./repo/inferContainerFromCandidates.js";import{RESERVED_APP_NAMES as C_,RESERVED_APP_NAME_MESSAGE as i_,isReservedAppName as n_,RESERVED_APP_NAME_SUFFIX as m_,RESERVED_APP_NAME_SUFFIX_MESSAGE as P_,hasReservedAppNameSuffix as L_}from"./naming/reservedAppNames.js";import{deriveContentHashTag as D_,CONTENT_HASH_TAG_PATTERN as p_}from"./infra/deriveContentHashTag.js";import{DEPLOY_MODES as c_,DeployModeSchema as f_,IMAGE_TAG_PATTERN as F_,ImageTagSchema as U_,ServiceArtefactSchema as l_,ServiceArtefactsSchema as u_,ARTEFACT_OUTPUT_FIELDS as x_,artefactOutputKey as G_}from"./infra/deployArtefacts.js";import{MIGRATION_SNAPSHOT_NAME_PREFIX as g_,MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV as h_,MIGRATION_SNAPSHOT_KIND_TAG_KEY as H_,MIGRATION_SNAPSHOT_KIND_PREMIGRATE as V_,EXPECTED_SCHEMA_VERSION_ENV as Y_,EXPECTED_SCHEMA_VERSION_TOOL_ENV as y_,EXPECTED_CH_SCHEMA_VERSION_ENV as K_,SCHEMA_ADMIN_USER_ENV as v_,SCHEMA_ADMIN_PASSWORD_ENV as X_,PRISMA_MIGRATION_DIR_RE as b_,CLICKHOUSE_MIGRATION_SKIP_RE as B_}from"./migration/constants.js";import{SCHEMA_GATE_EXIT as J_,SCHEMA_GATE_EXIT_HINTS as k_,schemaGateExitKind as j_}from"./migration/schemaGateExit.js";import{FJALL_SCHEMA_GATE_USER as Z_,FJALL_MAINTENANCE_USER as q_,FJALL_CLICKHOUSE_USERS as z_}from"./migration/clickhouseFrameworkUsers.js";import{PHYSICAL_NAME_FALLBACK_PROPERTIES as $_}from"./cfn/physicalNameProperties.js";import{PATTERN_TYPE_VALUES as er,PATTERN_TYPES as _r,isPatternType as rr,PATTERN_REGISTRY as Tr,patternConstructId as Ar,DEPLOYABLE_PATTERN_TYPES as Sr,OPENNEXT_PATTERN_TYPES as tr,isOpenNextPatternType as or,CLOUDFRONT_PRICE_CLASS_VALUES as ar,STATIC_SITE_CONFIG_KEYS as Nr,STATIC_SITE_DEPLOY_INJECTED_KEYS as Rr,STATIC_SITE_CDN_CONFIG_KEYS as Ir,STATIC_SITE_ROUTING_VALUES as Or,STATIC_SITE_ROUTING_INFO as Cr,PATTERN_CREATE_INPUT_VALUES as ir,PATTERN_CREATE_INPUT_FLAGS as nr}from"./patterns/patternTypes.js";import{FRAMEWORK_VALUES as Pr,FRAMEWORKS as Lr,isFramework as sr,FRAMEWORK_PATTERN_RECOMMENDATIONS as Dr,recommendPatternForFramework as pr,CREATABLE_FRAMEWORKS as Mr,requiredInputsForFramework as cr}from"./patterns/frameworkPatterns.js";import{DEFAULT_FORMS_FROM_LOCAL_PART as Fr,defaultFormsFromAddress as Ur,defaultFormsCorsOrigin as lr,isAddressAtDomain as ur}from"./patterns/staticSiteForms.js";import{DEV_SUBSTRATE_PARAMS_SCHEMA_VERSION as Gr,DEV_SUBSTRATE_PARAMS_FILENAME as dr,DevSubstrateSynthPropsSchema as gr,DevSubstrateParamsSchema as hr}from"./devSubstrate/params.js";import{DEV_SUBSTRATE_ENTRYPOINT_SOURCE as Vr}from"./devSubstrate/entrypoint.js";import{BLESSED_CDK_TOOLCHAIN as yr}from"./cdkToolchain.js";import{DEPLOYMENT_FAILURE_PHASES as vr,DeploymentFailurePhaseSchema as Xr,DEPLOYMENT_FAULT_ATTRIBUTIONS as br,DeploymentFaultAttributionSchema as Br,DEPLOYMENT_FAILURE_PROVIDER_SOURCES as Wr,DeploymentFailureProviderSourceSchema as Jr,DEPLOYMENT_FAILURE_CODE_PATTERN as kr,DEPLOYMENT_FAILURE_SCHEMA_VERSION as jr,DEPLOYMENT_FAILURE_LIMITS as wr,DeploymentFailureAnalysisSchema as Zr,DeploymentFailureProviderSchema as qr,DeploymentFailureResourceSchema as zr,DeploymentFailureSchema as Qr,parseDeploymentFailure as $r,DEPLOYMENT_FAILURE_DOCS_BASE_URL as ET,deploymentFailureDocsUrl as eT,DEPLOYMENT_FAULT_COPY as _T,DEPLOYMENT_PROVIDER_LABELS as rT,deriveErrorMessageFromFailure as TT,toDeploymentFailureAnalysis as AT}from"./failure/deploymentFailure.js";import{extractErrorWindow as tT,ERROR_WINDOW_CONTEXT_LINES as oT}from"./failure/extractErrorWindow.js";import{FJALL_COMPONENT_GITIGNORE as NT,FJALL_PROJECT_GITIGNORE as RT,FJALL_STATE_GITIGNORE_ENTRIES as IT,FJALL_MANAGED_STATE_DIR_ENTRIES as OT,LOCAL_CONFIG_GITIGNORE_ENTRY as CT}from"./scaffold/gitignore.js";import{ensureGitignoreEntries as nT}from"./scaffold/ensureGitignore.js";export{jE as ACCOUNT_ROLES,GE as ACCOUNT_STAGES,uE as ACCOUNT_STAGES_WITH_ROOT,XE as ACCOUNT_STAGE_EFFECTS,dE as ACCOUNT_STAGE_LABELS,hE as ACCOUNT_TIERS,we as AGENT_INSTALL_COMMAND,je as AGENT_SETUP_PROMPTS,C as APPROVAL_TOKEN_OUTPUT_PREFIX,x_ as ARTEFACT_OUTPUT_FIELDS,re as AWS_REGIONS_METADATA,HE as AccountTierSchema,I as BACKUP_VAULT_NAME,yr as BLESSED_CDK_TOOLCHAIN,y as CAPACITY_ANCHOR_MAX_LENGTH,Y as CAPACITY_ANCHOR_PATTERN,K as CAPACITY_IDENTITY_CONTEXT_KEY,H as CAPACITY_SLOT_MAX_LENGTH,h as CAPACITY_SLOT_PATTERN,B_ as CLICKHOUSE_MIGRATION_SKIP_RE,ar as CLOUDFRONT_PRICE_CLASS_VALUES,Ye as COMPLIANCE_ISSUE_STATUSES,he as CONNECTION_FAILURE_REASONS,de as CONNECTION_PHASES,ge as CONNECTION_TERMINAL_FAILURE_PHASES,p_ as CONTENT_HASH_TAG_PATTERN,Mr as CREATABLE_FRAMEWORKS,b as CapacityIdentityConfigSchema,v as CapacityIdentityPinSchema,X as CapacityIdentityWireSchema,xe as ConnectionWireSchema,Ge as ConnectionsListResponseSchema,mE as DANGEROUS_ENV_VARS,V as DEFAULT_CAPACITY_SLOT,Fr as DEFAULT_FORMS_FROM_LOCAL_PART,Te as DEFAULT_REGION,Sr as DEPLOYABLE_PATTERN_TYPES,kr as DEPLOYMENT_FAILURE_CODE_PATTERN,ET as DEPLOYMENT_FAILURE_DOCS_BASE_URL,wr as DEPLOYMENT_FAILURE_LIMITS,vr as DEPLOYMENT_FAILURE_PHASES,Wr as DEPLOYMENT_FAILURE_PROVIDER_SOURCES,jr as DEPLOYMENT_FAILURE_SCHEMA_VERSION,br as DEPLOYMENT_FAULT_ATTRIBUTIONS,_T as DEPLOYMENT_FAULT_COPY,rT as DEPLOYMENT_PROVIDER_LABELS,c_ as DEPLOY_MODES,Vr as DEV_SUBSTRATE_ENTRYPOINT_SOURCE,dr as DEV_SUBSTRATE_PARAMS_FILENAME,Gr as DEV_SUBSTRATE_PARAMS_SCHEMA_VERSION,_ as DNS_APEX,N as DOMAIN_DEPLOY_DEFAULT_PHASE,f_ as DeployModeSchema,Zr as DeploymentFailureAnalysisSchema,Xr as DeploymentFailurePhaseSchema,qr as DeploymentFailureProviderSchema,Jr as DeploymentFailureProviderSourceSchema,zr as DeploymentFailureResourceSchema,Qr as DeploymentFailureSchema,Br as DeploymentFaultAttributionSchema,hr as DevSubstrateParamsSchema,gr as DevSubstrateSynthPropsSchema,oT as ERROR_WINDOW_CONTEXT_LINES,K_ as EXPECTED_CH_SCHEMA_VERSION_ENV,Y_ as EXPECTED_SCHEMA_VERSION_ENV,y_ as EXPECTED_SCHEMA_VERSION_TOOL_ENV,He as EXTERNAL_ID_PATTERN,z_ as FJALL_CLICKHOUSE_USERS,NT as FJALL_COMPONENT_GITIGNORE,SE as FJALL_CONFIG_DIR_ENV,tE as FJALL_CREDENTIALS_FILENAME,oE as FJALL_HOME_DIRNAME,aE as FJALL_LOG_DIR_ENV,q_ as FJALL_MAINTENANCE_USER,OT as FJALL_MANAGED_STATE_DIR_ENTRIES,RT as FJALL_PROJECT_GITIGNORE,Z_ as FJALL_SCHEMA_GATE_USER,IT as FJALL_STATE_GITIGNORE_ENTRIES,Lr as FRAMEWORKS,Dr as FRAMEWORK_PATTERN_RECOMMENDATIONS,Pr as FRAMEWORK_VALUES,YE as GOVERNANCE_ACCOUNT_TIERS,ie as GOVERNANCE_SCOPE_REQUIRED_CODE,o as HOSTS_OUTPUT_MAX_BYTES,F_ as IMAGE_TAG_PATTERN,Xe as INSTALL_SOURCES,U_ as ImageTagSchema,CT as LOCAL_CONFIG_GITIGNORE_ENTRY,Oe as MACHINE_ONLY_SCOPES,LE as MASKED_VALUE_MARKER,Se as MAX_SECONDARY_REGIONS,V_ as MIGRATION_SNAPSHOT_KIND_PREMIGRATE,H_ as MIGRATION_SNAPSHOT_KIND_TAG_KEY,g_ as MIGRATION_SNAPSHOT_NAME_PREFIX,h_ as MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV,tr as OPENNEXT_PATTERN_TYPES,te as OPT_IN_REGION_CODES,nr as PATTERN_CREATE_INPUT_FLAGS,ir as PATTERN_CREATE_INPUT_VALUES,Tr as PATTERN_REGISTRY,_r as PATTERN_TYPES,er as PATTERN_TYPE_VALUES,$_ as PHYSICAL_NAME_FALLBACK_PROPERTIES,b_ as PRISMA_MIGRATION_DIR_RE,ve as PUBLIC_PACKAGE_NAME,pE as REDACTED_KEY_SENTINEL,Z as REGION_SHORT_CODES,C_ as RESERVED_APP_NAMES,i_ as RESERVED_APP_NAME_MESSAGE,m_ as RESERVED_APP_NAME_SUFFIX,P_ as RESERVED_APP_NAME_SUFFIX_MESSAGE,ZE as RESOURCE_CATEGORIES,X_ as SCHEMA_ADMIN_PASSWORD_ENV,v_ as SCHEMA_ADMIN_USER_ENV,J_ as SCHEMA_GATE_EXIT,k_ as SCHEMA_GATE_EXIT_HINTS,ME as SCOPED_TOKEN_REGEX,Ie as SCOPE_VALUES,Pe as SECRET_NAME_ERROR,me as SECRET_NAME_PATTERN,be as SETUP_COMMANDS,We as SETUP_MODES,ke as SETUP_STEPS,Je as SETUP_STEP_IDS,qe as SKILL_INSTALL_FILENAME,ze as SKILL_INSTALL_PATH,Ze as SKILL_INSTALL_SEGMENTS,se as SSM_COMPONENT_ERROR,Le as SSM_COMPONENT_PATTERN,De as SSM_STANDARD_MAX_VALUE_BYTES,Ir as STATIC_SITE_CDN_CONFIG_KEYS,Nr as STATIC_SITE_CONFIG_KEYS,Rr as STATIC_SITE_DEPLOY_INJECTED_KEYS,Cr as STATIC_SITE_ROUTING_INFO,Or as STATIC_SITE_ROUTING_VALUES,xE as STRUCTURAL_ENVIRONMENTS,pe as SecretNamespaceSchema,l_ as ServiceArtefactSchema,u_ as ServiceArtefactsSchema,i as TOKEN_STDERR_PREFIX,Ce as USER_GRANTABLE_SCOPES,_e as abbreviateRegion,f as accountConstructKey,vE as accountStageEffect,WE as accountTier,l as albDnsExportName,u as albHostedZoneIdExportName,G_ as artefactOutputKey,G as bucketWebsiteEndpointExportName,d as bucketWebsiteHostedZoneIdExportName,S_ as buildAppConfigPath,Me as buildNamespaceParts,ce as buildParameterPath,M as capitalise,qE as categoriseResource,x as cdnDomainExportName,j as defaultConnectedAccountName,lr as defaultFormsCorsOrigin,Ur as defaultFormsFromAddress,eT as deploymentFailureDocsUrl,e_ as deriveAllTargets,D_ as deriveContentHashTag,TT as deriveErrorMessageFromFailure,$e as deriveRegionsFromOrgConfig,E_ as deriveTargets,nT as ensureGitignoreEntries,__ as environmentOrTier,KE as environmentToTier,le as escapeDotEnvValue,tT as extractErrorWindow,PE as filterDangerousEnvVars,J as findAccountNameCollision,a_ as findBoundaryPath,o_ as findInfrastructurePaths,r_ as findTarget,q as findTrailingRegionShortCode,NE as fjallCredentialsPath,RE as fjallHomeDir,IE as fjallLogDir,OE as fjallStatePath,bE as formatAccountStageList,TE as formatErrorString,T_ as generateTargetName,r as getDomainExportNames,T as getDomainStackName,A as getDomainUsEast1CertificatesStackName,kE as getEnvironmentLabel,_E as getErrorCode,EE as getErrorMessage,rE as getErrorStack,zE as getExpectedDuration,QE as getFriendlyResourceType,Ae as getRegionInfo,c as getSafeZoneName,F as hasAsciiStableConstructKey,eE as hasErrorCode,L_ as hasReservedAppNameSuffix,S as hostsExportPartName,m as imageTagParameterName,I_ as inferContainerFromCandidates,gE as isAccountStage,VE as isAccountTier,ur as isAddressAtDomain,ye as isComplianceIssueStatus,sr as isFramework,yE as isGovernanceTier,N_ as isInfrastructureFile,Fe as isManageablePath,a as isManagedDomainBinding,or as isOpenNextPatternType,rr as isPatternType,n_ as isReservedAppName,UE as mapSettledWithConcurrency,sE as maskSensitiveOutput,$ as normaliseError,oe as optInRegionWarning,$r as parseDeploymentFailure,Ue as parseDotEnv,Ee as parseGitRemoteUrl,fe as parseParameterPath,DE as parseShellArgs,Ar as patternConstructId,B as projectCapacityIdentityToTarget,pr as recommendPatternForFramework,z as regionSuffixRejectionMessage,ae as regions,cr as requiredInputsForFramework,JE as resolveSynthEnvironment,j_ as schemaGateExitKind,t as serialiseHostsChunks,iE as singleton,fE as sleep,BE as stageFromWireEnvironment,w as suffixedAccountName,Ne as suggestRegionForTimezone,AT as toDeploymentFailureAnalysis,s as toKebab,L as toPascalCase,p as toScreamingSnake,D as toValidDatabaseName,Be as upgradeCommand};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fjall/util",
-  "version": "28.4.0",
+  "version": "30.0.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/fjall-tech/fjall.git",