@fjall/util 33.0.0 → 33.1.0

package/dist/.minified

@@ -1 +1 @@
-123 files minified at 2026-09-05T06:21:52.328Z
+123 files minified at 2026-09-05T10:46:23.318Z

package/dist/aws/index.d.ts

@@ -6,6 +6,6 @@ export { FAILURE_ANALYSIS_CATEGORIES, type FailureAnalysisCategory } from "./fai
 export { maskFailureAnalysis } from "./maskFailureAnalysis.js";
 export { classifyDriftSuspectEvents, findCurrentOperationStart, isDriftSuspectReason, isOperationOpeningEvent, type DriftSuspectEvent } from "./driftSuspects.js";
 export { IPAM_OPERATIONS_POOL_TAG_KEY, formatIpamPairTagValue } from "./ipamTags.js";
-export { KMS_RETENTION_TAG_KEY, SDK_PRE_EMPTY_TAG_KEY } from "./infraTags.js";
+export { KMS_RETENTION_TAG_KEY, S3_VERSIONING_EXEMPT_TAG_KEY, S3_VERSIONING_EXEMPTIONS, SDK_PRE_EMPTY_TAG_KEY, type S3VersioningExemption } from "./infraTags.js";
 export { COST_ALLOCATION_TAGS, DEFAULT_COST_ALLOCATION_ENVIRONMENT, DEFAULT_COST_ALLOCATION_OWNER, ecrCreateRepositoryTags, rdsPreMigrationSnapshotTags, type AwsSdkTag, type EcrCreateTag } from "./costAllocationTags.js";
 export { ACCOUNT_MONITORING_ROLE_NAME } from "./monitoringRole.js";

package/dist/aws/index.js

@@ -1 +1 @@
-import{AWSError as e,NoRolesFoundError as t,InvalidCredentialsError as E,SSOTokenExpiredError as s,MissingRegionError as T,ProfileNotFoundError as _,CommandError as i,isAWSError as O,isNoRolesFoundError as A,isSSOUnauthorizedError as a}from"./errors.js";import{STACK_NOT_FOUND_PATTERN as S,CDK_NO_STACKS_MATCH as N,isResourceEvent as p}from"./cloudformationTypes.js";import{countResourceProgress as m,formatElapsed as C}from"./deployProgress.js";import{CloudFormationFailureAnalyser as u}from"./CloudFormationFailureAnalyser.js";import{FAILURE_ANALYSIS_CATEGORIES as l}from"./failureAnalysisCategories.js";import{maskFailureAnalysis as x}from"./maskFailureAnalysis.js";import{classifyDriftSuspectEvents as F,findCurrentOperationStart as P,isDriftSuspectReason as M,isOperationOpeningEvent as g}from"./driftSuspects.js";import{IPAM_OPERATIONS_POOL_TAG_KEY as c,formatIpamPairTagValue as D}from"./ipamTags.js";import{KMS_RETENTION_TAG_KEY as U,SDK_PRE_EMPTY_TAG_KEY as Y}from"./infraTags.js";import{COST_ALLOCATION_TAGS as y,DEFAULT_COST_ALLOCATION_ENVIRONMENT as W,DEFAULT_COST_ALLOCATION_OWNER as h,ecrCreateRepositoryTags as k,rdsPreMigrationSnapshotTags as V}from"./costAllocationTags.js";import{ACCOUNT_MONITORING_ROLE_NAME as H}from"./monitoringRole.js";export{H as ACCOUNT_MONITORING_ROLE_NAME,e as AWSError,N as CDK_NO_STACKS_MATCH,y as COST_ALLOCATION_TAGS,u as CloudFormationFailureAnalyser,i as CommandError,W as DEFAULT_COST_ALLOCATION_ENVIRONMENT,h as DEFAULT_COST_ALLOCATION_OWNER,l as FAILURE_ANALYSIS_CATEGORIES,c as IPAM_OPERATIONS_POOL_TAG_KEY,E as InvalidCredentialsError,U as KMS_RETENTION_TAG_KEY,T as MissingRegionError,t as NoRolesFoundError,_ as ProfileNotFoundError,Y as SDK_PRE_EMPTY_TAG_KEY,s as SSOTokenExpiredError,S as STACK_NOT_FOUND_PATTERN,F as classifyDriftSuspectEvents,m as countResourceProgress,k as ecrCreateRepositoryTags,P as findCurrentOperationStart,C as formatElapsed,D as formatIpamPairTagValue,O as isAWSError,M as isDriftSuspectReason,A as isNoRolesFoundError,g as isOperationOpeningEvent,p as isResourceEvent,a as isSSOUnauthorizedError,x as maskFailureAnalysis,V as rdsPreMigrationSnapshotTags};
+import{AWSError as e,NoRolesFoundError as E,InvalidCredentialsError as _,SSOTokenExpiredError as t,MissingRegionError as T,ProfileNotFoundError as O,CommandError as s,isAWSError as i,isNoRolesFoundError as A,isSSOUnauthorizedError as S}from"./errors.js";import{STACK_NOT_FOUND_PATTERN as N,CDK_NO_STACKS_MATCH as n,isResourceEvent as p}from"./cloudformationTypes.js";import{countResourceProgress as R,formatElapsed as f}from"./deployProgress.js";import{CloudFormationFailureAnalyser as C}from"./CloudFormationFailureAnalyser.js";import{FAILURE_ANALYSIS_CATEGORIES as l}from"./failureAnalysisCategories.js";import{maskFailureAnalysis as x}from"./maskFailureAnalysis.js";import{classifyDriftSuspectEvents as P,findCurrentOperationStart as M,isDriftSuspectReason as F,isOperationOpeningEvent as G}from"./driftSuspects.js";import{IPAM_OPERATIONS_POOL_TAG_KEY as g,formatIpamPairTagValue as c}from"./ipamTags.js";import{KMS_RETENTION_TAG_KEY as U,S3_VERSIONING_EXEMPT_TAG_KEY as Y,S3_VERSIONING_EXEMPTIONS as v,SDK_PRE_EMPTY_TAG_KEY as y}from"./infraTags.js";import{COST_ALLOCATION_TAGS as W,DEFAULT_COST_ALLOCATION_ENVIRONMENT as h,DEFAULT_COST_ALLOCATION_OWNER as k,ecrCreateRepositoryTags as X,rdsPreMigrationSnapshotTags as z}from"./costAllocationTags.js";import{ACCOUNT_MONITORING_ROLE_NAME as b}from"./monitoringRole.js";export{b as ACCOUNT_MONITORING_ROLE_NAME,e as AWSError,n as CDK_NO_STACKS_MATCH,W as COST_ALLOCATION_TAGS,C as CloudFormationFailureAnalyser,s as CommandError,h as DEFAULT_COST_ALLOCATION_ENVIRONMENT,k as DEFAULT_COST_ALLOCATION_OWNER,l as FAILURE_ANALYSIS_CATEGORIES,g as IPAM_OPERATIONS_POOL_TAG_KEY,_ as InvalidCredentialsError,U as KMS_RETENTION_TAG_KEY,T as MissingRegionError,E as NoRolesFoundError,O as ProfileNotFoundError,v as S3_VERSIONING_EXEMPTIONS,Y as S3_VERSIONING_EXEMPT_TAG_KEY,y as SDK_PRE_EMPTY_TAG_KEY,t as SSOTokenExpiredError,N as STACK_NOT_FOUND_PATTERN,P as classifyDriftSuspectEvents,R as countResourceProgress,X as ecrCreateRepositoryTags,M as findCurrentOperationStart,f as formatElapsed,c as formatIpamPairTagValue,i as isAWSError,F as isDriftSuspectReason,A as isNoRolesFoundError,G as isOperationOpeningEvent,p as isResourceEvent,S as isSSOUnauthorizedError,x as maskFailureAnalysis,z as rdsPreMigrationSnapshotTags};

package/dist/aws/infraTags.d.ts

@@ -32,3 +32,28 @@ export declare const SDK_PRE_EMPTY_TAG_KEY = "fjall:sdk-pre-empty";
  * `__tests__/infraTags.test.ts` guards against casual renames.
  */
 export declare const KMS_RETENTION_TAG_KEY = "fjall:kms:retention";
+/**
+ * The S3 versioning-exemption marker tag, shared by producer and consumer:
+ *
+ * - Producer (`@fjall/components-infrastructure`): the `S3Bucket` wrapper
+ *   (`storage/s3.ts`) stamps a bucket whose author passed
+ *   `versioningExemption`, and only when the bucket's resolved `versioned`
+ *   is false — a bucket that versions after all has nothing to exempt. The
+ *   value names why versioning is off by design: `build-output` (Payload
+ *   assets, pruned on every deploy), `isr-cache` (Payload ISR cache,
+ *   regenerated at runtime), `cold-tier` (ClickHouse cold-tier storage, the
+ *   table's own tiered parts).
+ * - Consumer (webapp posture): the `S3_VERSIONING_DISABLED` tier-policy rows
+ *   read key and value to land the finding `mitigated` on every bucket the
+ *   design exempts (tier-aware alert policy design 2026-09-01 §8 K4), one
+ *   signal for every construct site instead of a logical id per site.
+ *
+ * Key and values are deployed infrastructure state, read back by the same
+ * literals: a rename would return every exempt bucket to `open` until the
+ * next deploy. The pin test in `__tests__/infraTags.test.ts` guards against
+ * casual renames.
+ */
+export declare const S3_VERSIONING_EXEMPT_TAG_KEY = "fjall:s3:versioning-exempt";
+/** The exemptions the tag may carry — each names a bucket whose contents are rebuilt, not kept. */
+export declare const S3_VERSIONING_EXEMPTIONS: readonly ["build-output", "isr-cache", "cold-tier"];
+export type S3VersioningExemption = (typeof S3_VERSIONING_EXEMPTIONS)[number];

package/dist/aws/infraTags.js

@@ -1 +1 @@
-const t="fjall:sdk-pre-empty",_="fjall:kms:retention";export{_ as KMS_RETENTION_TAG_KEY,t as SDK_PRE_EMPTY_TAG_KEY};
+const t="fjall:sdk-pre-empty",e="fjall:kms:retention",E="fjall:s3:versioning-exempt",_=["build-output","isr-cache","cold-tier"];export{e as KMS_RETENTION_TAG_KEY,_ as S3_VERSIONING_EXEMPTIONS,E as S3_VERSIONING_EXEMPT_TAG_KEY,t as SDK_PRE_EMPTY_TAG_KEY};

package/dist/capacityIdentity.d.ts

@@ -1,8 +1,8 @@
 import { z } from "zod";
 /**
  * Stable capacity identity — the shared vocabulary for capacity SLOTS and
- * their identity ANCHORS (design
- * `aiDocs/designs/2026-08-01-stable-capacity-identity-and-rename-safe-deploys.md`).
+ * their identity ANCHORS (the 2026-08-01 stable capacity identity and
+ * rename-safe deploys design).
  *
  * A capacity slot is the operator-chosen, config-independent name for one EC2
  * auto-scaling group within a cluster ("primary", "clickhouse-data"). Its

package/dist/docker/cacheRepository.d.ts

@@ -23,7 +23,7 @@ export type BuildCacheMode = (typeof BUILD_CACHE_MODES)[number];
  * reads any existing cache). Escape hatch for slow uplinks where the
  * dep-bump double upload (image push + mode=max export) is not worth the
  * cross-machine reuse — trade-off recorded in
- * aiDocs/decisions/2026-07-17-buildx-cache-export-mode.md.
+ * the 2026-07-17 decision: buildx cache export mode.
  *
  * Fails (rather than falling back) on an empty or unrecognised value.
  */

package/dist/failure/deploymentFailure.d.ts

@@ -2,7 +2,7 @@
  * Canonical deployment-failure record — the single structured shape every
  * producer (the deploy-core classifier, the webapp worker's platform-side
  * shim) and every consumer (webapp UI, CLI renderers, notifications, AI
- * surfaces) share. Design: aiDocs/designs/2026-08-10-deployment-failure-taxonomy.md § 3.
+ * surfaces) share. Design: the 2026-08-10 deployment-failure taxonomy design, § 3.
  *
  * Pitfall guards encoded (mirroring docker/dockerCliSchemas.ts):
  *   - Pitfall 1/6: every exported schema pairs a `z.infer` companion type

package/dist/insights/computePatternFingerprint.d.ts

@@ -3,7 +3,7 @@ import { z } from "zod";
  * Input shape for the cross-recurrence pattern fingerprint used by the
  * Auto-snoozed view pill pipeline.
  *
- * See `aiDocs/designs/2026-04-19-auto-snoozed-pill.md` §4.2. The fingerprint
+ * See the 2026-04-19 auto-snoozed pill design, §4.2. The fingerprint
  * collides intentionally across distinct `insight_id`s representing the same
  * finding class within an org, which is what the 3-in-30d dismissal
  * heuristic aggregates over.

package/dist/migration/clickhouseFrameworkUsers.d.ts

@@ -24,9 +24,8 @@
  * them. SQL-provisioned (not `users.xml`) deliberately: no ClickHouse
  * restart, no `SYSTEM RELOAD USERS` race, zero outage on adoption.
  *
- * Coupled values — must move together per
- * `.claude/rules/code-quality.md § "Coupled values: shared source at 2
- * occurrences"`.
+ * Coupled values — must move together per the shared-source-at-two-occurrences
+ * rule.
  */
 import { z } from "zod";
 /** Read-only identity the materialised schema gate authenticates as. */

package/dist/migration/clickhouseSqlUsers.d.ts

@@ -17,9 +17,8 @@
  * — profiles are bound by customer SQL migrations via
  * `ALTER USER <name> SETTINGS PROFILE '<profile>'`.
  *
- * Coupled values — must move together per
- * `.claude/rules/code-quality.md § "Coupled values: shared source at 2
- * occurrences"`. Lives in `@fjall/util` so the runtime Docker image picks the
+ * Coupled values — must move together per the shared-source-at-two-occurrences
+ * rule. Lives in `@fjall/util` so the runtime Docker image picks the
  * constant + schema up without pulling `aws-cdk-lib`.
  */
 import { z } from "zod";
@@ -42,9 +41,8 @@ export declare const CLICKHOUSE_MANAGED_USERS_ENV: "CLICKHOUSE_MANAGED_USERS";
  * `process.env[userPasswordEnvName(name)]` for each entry in the manifest —
  * no runtime SDK call.
  *
- * Coupled values — must move together per
- * `.claude/rules/code-quality.md § "Coupled values: shared source at 2
- * occurrences"`. Single source-of-truth here so a future shape change
+ * Coupled values — must move together per the shared-source-at-two-occurrences
+ * rule. Single source-of-truth here so a future shape change
  * (`USER_<NAME>_SECRET`, lower-case, prefixed) lands at one site, not three.
  */
 export declare function userPasswordEnvName(userName: string): string;

package/dist/migration/compareSchemaVersion.d.ts

@@ -10,7 +10,7 @@
  * The tolerance exists because expand/contract migrations make an old image safe
  * against a newer schema: rolling the image back without rolling the DB back is
  * the intended expand-only rollback, and a strict-equality gate defeated it by
- * refusing to boot. See `aiDocs/patterns/migration-safety-pattern.md`.
+ * refusing to boot. See the migration-safety pattern.
  */
 /**
  * True when `version` is a monotonically-ordered migration identifier whose

package/dist/repo/appPath.d.ts

@@ -22,8 +22,8 @@
  * template literals would invite silent CLI/webapp drift if the
  * convention shifts.
  *
- * See `aiDocs/designs/2026-05-11-marker-as-boundary-not-identity.md` and
- * `aiDocs/patterns/fjall-marker-convention-pattern.md` for the
+ * See the 2026-05-11 marker-as-boundary-not-identity design and the
+ * fjall-marker convention pattern for the
  * convention's full topology mapping.
  */
 export declare function buildAppConfigPath(appName: string, container?: string): string;

package/dist/repo/findInfrastructurePaths.d.ts

@@ -15,9 +15,9 @@
  * No I/O. Pure path classification. The structural contract is the function
  * signature; review-time agreement is not load-bearing.
  *
- * See `aiDocs/patterns/fjall-marker-convention-pattern.md` for the convention
- * and `aiDocs/decisions/2026-05-11-scan-parity-contract-vs-structural.md`
- * for the rationale behind extracting this module.
+ * See the fjall-marker convention pattern for the convention and the
+ * 2026-05-11 scan-parity decision (contract vs structural) for the
+ * rationale behind extracting this module.
  */
 import type { ScanPath } from "./scanTypes.js";
 export declare const INFRASTRUCTURE_FILE = "infrastructure.ts";

package/dist/repo/scanLocalRepository.d.ts

@@ -10,7 +10,7 @@
  * the same set as a defence-in-depth contract.
  *
  * Returns the same `{ paths }` shape as the webapp scan so the helpers are
- * consumer-substitutable (`aiDocs/patterns/cross-system-parity-pattern.md`).
+ * consumer-substitutable (the cross-system parity pattern).
  *
  * Walk discipline:
  *   - Symlinks are skipped entirely via `Dirent.isSymbolicLink()` (loop guard).

package/dist/repo/scanTypes.d.ts

@@ -4,7 +4,7 @@
  *
  * Both producers MUST emit the same `{ paths }` shape so the helpers are
  * consumer-substitutable. See
- * `aiDocs/patterns/cross-system-parity-pattern.md`.
+ * the cross-system parity pattern.
  *
  * `ScanPath` carries path information only — no name, no kind. The linker
  * is solely responsible for mapping paths to applications and tier kinds.

package/dist/securityHelpers.d.ts

@@ -54,7 +54,7 @@ export declare const REDACTED_KEY_SENTINEL = "[REDACTED]";
  *
  * Single source of truth — consumer loggers (CLI, worker, webapp) MUST
  * NOT re-implement these patterns inline. See
- * .claude/rules/security-standards.md § "Masking Patterns Live in @fjall/util".
+ * the credential-masking standard, § "Masking Patterns Live in @fjall/util".
  */
 export declare function maskSensitiveOutput(output: string): string;
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fjall/util",
-  "version": "33.0.0",
+  "version": "33.1.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/fjall-tech/fjall.git",
@@ -141,7 +141,8 @@
     }
   },
   "files": [
-    "dist/"
+    "dist/",
+    "!dist/.build-source-hash"
   ],
   "publishConfig": {
     "access": "public"
@@ -151,6 +152,7 @@
     "clean:node": "rm -rf ./node_modules",
     "build": "npm run clean && npx tsc && node ../scripts/minify-dist.mjs dist && node ../scripts/stamp-build.mjs",
     "prepack": "node ../scripts/check-dist-freshness.mjs",
+    "prepublishOnly": "node ../scripts/audit-package-tarball.mjs",
     "watch": "npm run build && npx tsc-watch",
     "watch:only": "npx tsc-watch",
     "format": "prettier --write \"src/**/*.{ts,tsx,js,jsx,json}\"",

package/dist/.build-source-hash

@@ -1,143 +0,0 @@
-{
-  "version": 2,
-  "algorithm": "sha256",
-  "sources": [
-    "src"
-  ],
-  "extraFiles": [
-    "../scripts/minify-dist.mjs",
-    "package.json",
-    "tsconfig.json"
-  ],
-  "hash": "f3d44a1bfafa66fa7a658d6acf9a1adbba981638c012feb94e794e5182502c3d",
-  "files": {
-    "src/async/concurrency.ts": "3c7ebe0222a720f9",
-    "src/async/singleton.ts": "7bcc21b0fb920561",
-    "src/async/sleep.ts": "df52b17675ec3ed2",
-    "src/atomicTempNaming.ts": "d08f34bdb062be6f",
-    "src/aws/CloudFormationFailureAnalyser.ts": "4e68b353171edd31",
-    "src/aws/cloudformationTypes.ts": "e43bab9c96a21856",
-    "src/aws/costAllocationTags.ts": "56cb9593dab3027b",
-    "src/aws/deployProgress.ts": "be09dedb4deb9a7a",
-    "src/aws/driftSuspects.ts": "ca30b2de3ed84ab3",
-    "src/aws/errors.ts": "5addfa6bb2d1456a",
-    "src/aws/failureAnalysisCategories.ts": "85ab1632d8069273",
-    "src/aws/index.ts": "ce3da231274defdf",
-    "src/aws/infraTags.ts": "ba9442248b8a0ef4",
-    "src/aws/ipamTags.ts": "ac19ecd6c36b3bc2",
-    "src/aws/maskFailureAnalysis.ts": "ae11250412cd6fd8",
-    "src/aws/monitoringRole.ts": "70c8b5947dc9138d",
-    "src/backupTiers.ts": "981677b7cf1ff5b9",
-    "src/buildConcurrency.ts": "1804e76ddc4f8216",
-    "src/capacityIdentity.ts": "9e59bfc92a5ba361",
-    "src/cdkTmpdirCleanup.ts": "4574b3f10e3ab0f9",
-    "src/cdkToolchain.ts": "a6b996c60b87d644",
-    "src/cfn/physicalNameProperties.ts": "35d3c6f28079c593",
-    "src/clickhouse.ts": "655c74cdba292c29",
-    "src/complianceIssue.ts": "10ea87dfb4c0e849",
-    "src/config.ts": "6e15344c1d4a79fe",
-    "src/configPaths.ts": "afcc2e4ceb6652a0",
-    "src/constructMap.ts": "b81fc8e90015467f",
-    "src/deploy/approvalTokenOutput.ts": "4be7b52825d88a37",
-    "src/devSubstrate/entrypoint.ts": "0526b88258174aa6",
-    "src/devSubstrate/params.ts": "43bf902b57eb9edd",
-    "src/diagnostics/controlSequences.ts": "cb1cc3f29f041371",
-    "src/diagnostics/index.ts": "249d04cb4dd7db35",
-    "src/docker/DockerCli.build.ts": "93a74294437cc002",
-    "src/docker/DockerCli.daemon.ts": "11b9c3352c957d7c",
-    "src/docker/DockerCli.registry.ts": "f8dfcf1d7e413014",
-    "src/docker/DockerCli.ts": "3d2697c355b102d5",
-    "src/docker/abortHelpers.ts": "76daf48e617b8ec8",
-    "src/docker/architecture.ts": "305d87b68b905694",
-    "src/docker/bakeGuard.ts": "fc4120fb97756ddb",
-    "src/docker/buildArgInference.ts": "611dc5cb52b63f75",
-    "src/docker/buildxArgvBuilder.ts": "0ccc37cf5aaae62c",
-    "src/docker/buildxBuildMonitor.ts": "27c7b921901a9759",
-    "src/docker/cacheRepository.ts": "fae19107a3adbf13",
-    "src/docker/dockerCliConstants.ts": "2c216f214f466307",
-    "src/docker/dockerCliDiagnostics.ts": "250bc882b75d7bcc",
-    "src/docker/dockerCliSchemas.ts": "af1e89eb8ecd7023",
-    "src/docker/dockerErrorFormat.ts": "332dedf7ea3589c2",
-    "src/docker/ecrCredentialStore.ts": "0a99f7155dad5894",
-    "src/docker/index.ts": "f189b4e9967ab8c0",
-    "src/docker/metadataFileParser.ts": "299bc37a12c4594b",
-    "src/docker/projectBuildxResult.ts": "f462ba365b7ccdcc",
-    "src/docker/rawjsonParser.ts": "b9e5218abc326fa5",
-    "src/docker/rawjsonToVertexEvent.ts": "a356190727f0d1a4",
-    "src/docker/result.ts": "2ff0d59a3add8b06",
-    "src/environments.ts": "a05afb198a7b67ce",
-    "src/errorUtils.ts": "c601f2905c74b8d0",
-    "src/errors/absence.ts": "390fea350ffbb4e5",
-    "src/failure/deploymentFailure.ts": "5824db1d97d01838",
-    "src/failure/extractErrorWindow.ts": "ca41f90946fa939c",
-    "src/fjallHome.ts": "032df8e58d7e29cd",
-    "src/fsHelpers.ts": "4dd3877b3953c6a9",
-    "src/fsScan.ts": "feb187758481443f",
-    "src/httpKeepAlive.ts": "c8fe4b118ef4c79f",
-    "src/index.ts": "cfc916bee8f13029",
-    "src/infra/backupVault.ts": "661678a6dfb0b648",
-    "src/infra/connectionsWire.ts": "e3afa3ba95a531d8",
-    "src/infra/deployArtefacts.ts": "235ac21dd3ccf0b2",
-    "src/infra/deriveContentHashTag.ts": "115fbe6588794027",
-    "src/infra/domainExports.ts": "18de5b8668633aaf",
-    "src/infra/imageTags.ts": "82d14f3dfd6ca68f",
-    "src/infra/regions.ts": "982acfd56adf04c2",
-    "src/infra/tokenScopes.ts": "68f0152394fb416e",
-    "src/insights/computePatternFingerprint.ts": "b5d3a4704f42cc1f",
-    "src/logRotation.ts": "5ea989894082107b",
-    "src/logger.ts": "865ec4ec62a9a588",
-    "src/manifest/index.ts": "bfa2930556c2f8ad",
-    "src/manifest/io.ts": "915ab602ac92d126",
-    "src/manifest/schemas.ts": "21dce8ba66b1230f",
-    "src/mcpProtocol/index.ts": "55df3209915a5043",
-    "src/migration/clickhouseFrameworkUsers.ts": "4bd55a96d4fddff4",
-    "src/migration/clickhouseSqlUsers.ts": "c916e148367715bb",
-    "src/migration/compareSchemaVersion.ts": "1c9247e722ec5d5b",
-    "src/migration/constants.ts": "5c585a455ba56d95",
-    "src/migration/controlPlaneActivity.ts": "c7ba33958f9fcbcc",
-    "src/migration/index.ts": "dc711329d0060213",
-    "src/migration/pickLatestClickHouseMigration.ts": "a5b4a00ba63522cb",
-    "src/migration/pickLatestPrismaMigration.ts": "cbddc2950f4d4c85",
-    "src/migration/schemaGateExit.ts": "53f26d02b798a475",
-    "src/migration/sleepAbortable.ts": "71c7e7cc59406e2a",
-    "src/migration/verifyExpectedSchemaVersion.ts": "cd583329d771a047",
-    "src/naming/accountNameCollision.ts": "2dc8b278ff039220",
-    "src/naming/caseConversion.ts": "8b8984f2b58b8ab7",
-    "src/naming/connectedAccountName.ts": "2290e0020d4335b0",
-    "src/naming/reservedAppNames.ts": "7f63dd0b84c1972e",
-    "src/naming/targetExportNames.ts": "da78a19d8b2d4a6f",
-    "src/onboarding/index.ts": "7999117c5a7a18d1",
-    "src/onboarding/versionCurrency.ts": "19695f38b09cfc46",
-    "src/organisationBinding/apiBaseUrl.ts": "ad71ded9b42c95c6",
-    "src/organisationBinding/binding.ts": "d542bb92999d50ef",
-    "src/organisationBinding/cachedCredentialIdentity.ts": "f370024fe414949f",
-    "src/organisationBinding/credentialFingerprint.ts": "ae7fff52b70ba09a",
-    "src/organisationBinding/index.ts": "db0c6c2b73b6ea22",
-    "src/patterns/frameworkPatterns.ts": "0f843cb043eb11fc",
-    "src/patterns/index.ts": "8c765d60d672f7f7",
-    "src/patterns/patternTypes.ts": "549b06ec2a3a696e",
-    "src/patterns/staticSiteForms.ts": "86ffcf142d9a8eac",
-    "src/repo/appPath.ts": "9aa0d01262b88e65",
-    "src/repo/findInfrastructurePaths.ts": "dd1245f5d4004dd5",
-    "src/repo/findProjectsBelow.ts": "0ee63f2910a47a89",
-    "src/repo/findRepoRoot.ts": "6007be0f7d3407b1",
-    "src/repo/gitRemoteParser.ts": "2e1407d1d120baff",
-    "src/repo/inferContainerFromCandidates.ts": "63df34e7e5e65b34",
-    "src/repo/scanLocalRepository.ts": "c7bc76201622a7a5",
-    "src/repo/scanTypes.ts": "1fda805a7d8de93b",
-    "src/resourceCategorisation.ts": "a140d1b3cb38be33",
-    "src/rootConfigMerge.ts": "e5085a5ae802647d",
-    "src/rootConfigSchema.ts": "5751173d999c0690",
-    "src/scaffold/ensureGitignore.ts": "178a2c3b2c18bc83",
-    "src/scaffold/gitignore.ts": "87c66797a4bd05f2",
-    "src/secrets.ts": "50258d463e4e67c3",
-    "src/securityHelpers.ts": "1e68e1330c6da971",
-    "src/staticSiteOutput.ts": "cc81ed32acc597f1",
-    "src/targets.ts": "b4bdf07f06755374",
-    "../scripts/minify-dist.mjs": "6b2e4b0df8aec601",
-    "package.json": "8d5da0aef9c1c0a8",
-    "tsconfig.json": "edfc9d9fbd0729d2"
-  },
-  "outputHash": "68b436c9d0b584458b0ddc561afc8b16af863e97b1af2e4c165e57fabbf9ead7",
-  "outputFileCount": 247
-}