@fjall/util 39.0.5 → 39.0.6

package/dist/.minified

@@ -1 +1 @@
-140 files minified at 2026-10-04T22:51:19.195Z
+142 files minified at 2026-10-05T00:36:39.766Z

package/dist/aws/ecsRolloutBarrier.d.ts

@@ -0,0 +1,7 @@
+/**
+ * The CloudFormation type of the rollout barrier `EcsCompute` builds for a
+ * service whose rollout another waits on (FJL-901). The construct writes it,
+ * and deploy-core's failure classifier reads it.
+ */
+export declare const ECS_ROLLOUT_BARRIER_RESOURCE_TYPE = "Custom::FjallEcsRolloutBarrier";
+export type EcsRolloutBarrierResourceType = typeof ECS_ROLLOUT_BARRIER_RESOURCE_TYPE;

package/dist/aws/ecsRolloutBarrier.js

@@ -0,0 +1 @@
+const R="Custom::FjallEcsRolloutBarrier";export{R as ECS_ROLLOUT_BARRIER_RESOURCE_TYPE};

package/dist/aws/index.d.ts

@@ -6,8 +6,9 @@ export { CloudFormationFailureAnalyser, type RootCause, type FailureAnalysis } f
 export { FAILURE_ANALYSIS_CATEGORIES, type FailureAnalysisCategory } from "./failureAnalysisCategories.js";
 export { maskFailureAnalysis } from "./maskFailureAnalysis.js";
 export { findRootFailure, isFailedResourceStatus, readOperationFailures, type OperationFailures } from "./operationFailures.js";
-export { classifyDriftSuspectEvents, findCurrentOperationStart, isDriftSuspectReason, isOperationOpeningEvent, type DriftSuspectEvent } from "./driftSuspects.js";
+export { classifyDriftSuspectEvents, findCurrentOperationStart, isCancelledCollateral, isDriftSuspectReason, isOperationOpeningEvent, type DriftSuspectEvent } from "./driftSuspects.js";
 export { IPAM_OPERATIONS_POOL_TAG_KEY, formatIpamPairTagValue } from "./ipamTags.js";
 export { FJALL_RESOURCE_TYPE_TAG_KEY, FJALL_RESOURCE_TYPES, type FjallResourceType, KMS_ALIAS_TAG_KEY, KMS_RETENTION_TAG_KEY, S3_BACKUP_EXEMPT_TAG_KEY, S3_BACKUP_EXEMPTIONS, S3_VERSIONING_EXEMPT_TAG_KEY, S3_VERSIONING_EXEMPTIONS, SDK_PRE_EMPTY_TAG_KEY, type S3BackupExemption, type S3VersioningExemption } from "./infraTags.js";
+export { ECS_ROLLOUT_BARRIER_RESOURCE_TYPE, type EcsRolloutBarrierResourceType } from "./ecsRolloutBarrier.js";
 export { COST_ALLOCATION_TAGS, DEFAULT_COST_ALLOCATION_ENVIRONMENT, DEFAULT_COST_ALLOCATION_OWNER, ecrCreateRepositoryTags, rdsPreMigrationSnapshotTags, type AwsSdkTag, type EcrCreateTag } from "./costAllocationTags.js";
 export { ACCOUNT_MONITORING_ROLE_NAME } from "./monitoringRole.js";

package/dist/aws/index.js

@@ -1 +1 @@
-import{AWSError as e,NoRolesFoundError as E,InvalidCredentialsError as _,SSOTokenExpiredError as T,MissingRegionError as t,ProfileNotFoundError as A,CommandError as S,isAWSError as s,isNoRolesFoundError as O,isSSOUnauthorizedError as i}from"./errors.js";import{STACK_NOT_FOUND_PATTERN as n,CDK_NO_STACKS_MATCH as N,isResourceEvent as R}from"./cloudformationTypes.js";import{AWS_RESOURCE_TYPES as C,isAwsResourceType as f}from"./resourceTypes.js";import{countResourceProgress as m,formatElapsed as u}from"./deployProgress.js";import{CloudFormationFailureAnalyser as L}from"./CloudFormationFailureAnalyser.js";import{FAILURE_ANALYSIS_CATEGORIES as d}from"./failureAnalysisCategories.js";import{maskFailureAnalysis as K}from"./maskFailureAnalysis.js";import{findRootFailure as M,isFailedResourceStatus as G,readOperationFailures as Y}from"./operationFailures.js";import{classifyDriftSuspectEvents as c,findCurrentOperationStart as g,isDriftSuspectReason as D,isOperationOpeningEvent as y}from"./driftSuspects.js";import{IPAM_OPERATIONS_POOL_TAG_KEY as V,formatIpamPairTagValue as W}from"./ipamTags.js";import{FJALL_RESOURCE_TYPE_TAG_KEY as h,FJALL_RESOURCE_TYPES as k,KMS_ALIAS_TAG_KEY as B,KMS_RETENTION_TAG_KEY as J,S3_BACKUP_EXEMPT_TAG_KEY as w,S3_BACKUP_EXEMPTIONS as z,S3_VERSIONING_EXEMPT_TAG_KEY as H,S3_VERSIONING_EXEMPTIONS as b,SDK_PRE_EMPTY_TAG_KEY as j}from"./infraTags.js";import{COST_ALLOCATION_TAGS as Q,DEFAULT_COST_ALLOCATION_ENVIRONMENT as Z,DEFAULT_COST_ALLOCATION_OWNER as $,ecrCreateRepositoryTags as rr,rdsPreMigrationSnapshotTags as or}from"./costAllocationTags.js";import{ACCOUNT_MONITORING_ROLE_NAME as Er}from"./monitoringRole.js";export{Er as ACCOUNT_MONITORING_ROLE_NAME,e as AWSError,C as AWS_RESOURCE_TYPES,N as CDK_NO_STACKS_MATCH,Q as COST_ALLOCATION_TAGS,L as CloudFormationFailureAnalyser,S as CommandError,Z as DEFAULT_COST_ALLOCATION_ENVIRONMENT,$ as DEFAULT_COST_ALLOCATION_OWNER,d as FAILURE_ANALYSIS_CATEGORIES,k as FJALL_RESOURCE_TYPES,h as FJALL_RESOURCE_TYPE_TAG_KEY,V as IPAM_OPERATIONS_POOL_TAG_KEY,_ as InvalidCredentialsError,B as KMS_ALIAS_TAG_KEY,J as KMS_RETENTION_TAG_KEY,t as MissingRegionError,E as NoRolesFoundError,A as ProfileNotFoundError,z as S3_BACKUP_EXEMPTIONS,w as S3_BACKUP_EXEMPT_TAG_KEY,b as S3_VERSIONING_EXEMPTIONS,H as S3_VERSIONING_EXEMPT_TAG_KEY,j as SDK_PRE_EMPTY_TAG_KEY,T as SSOTokenExpiredError,n as STACK_NOT_FOUND_PATTERN,c as classifyDriftSuspectEvents,m as countResourceProgress,rr as ecrCreateRepositoryTags,g as findCurrentOperationStart,M as findRootFailure,u as formatElapsed,W as formatIpamPairTagValue,s as isAWSError,f as isAwsResourceType,D as isDriftSuspectReason,G as isFailedResourceStatus,O as isNoRolesFoundError,y as isOperationOpeningEvent,R as isResourceEvent,i as isSSOUnauthorizedError,K as maskFailureAnalysis,or as rdsPreMigrationSnapshotTags,Y as readOperationFailures};
+import{AWSError as E,NoRolesFoundError as e,InvalidCredentialsError as _,SSOTokenExpiredError as T,MissingRegionError as t,ProfileNotFoundError as S,CommandError as A,isAWSError as O,isNoRolesFoundError as s,isSSOUnauthorizedError as i}from"./errors.js";import{STACK_NOT_FOUND_PATTERN as R,CDK_NO_STACKS_MATCH as n,isResourceEvent as N}from"./cloudformationTypes.js";import{AWS_RESOURCE_TYPES as p,isAwsResourceType as f}from"./resourceTypes.js";import{countResourceProgress as l,formatElapsed as m}from"./deployProgress.js";import{CloudFormationFailureAnalyser as u}from"./CloudFormationFailureAnalyser.js";import{FAILURE_ANALYSIS_CATEGORIES as d}from"./failureAnalysisCategories.js";import{maskFailureAnalysis as F}from"./maskFailureAnalysis.js";import{findRootFailure as M,isFailedResourceStatus as U,readOperationFailures as Y}from"./operationFailures.js";import{classifyDriftSuspectEvents as c,findCurrentOperationStart as g,isCancelledCollateral as D,isDriftSuspectReason as y,isOperationOpeningEvent as v}from"./driftSuspects.js";import{IPAM_OPERATIONS_POOL_TAG_KEY as W,formatIpamPairTagValue as X}from"./ipamTags.js";import{FJALL_RESOURCE_TYPE_TAG_KEY as h,FJALL_RESOURCE_TYPES as k,KMS_ALIAS_TAG_KEY as J,KMS_RETENTION_TAG_KEY as w,S3_BACKUP_EXEMPT_TAG_KEY as z,S3_BACKUP_EXEMPTIONS as H,S3_VERSIONING_EXEMPT_TAG_KEY as b,S3_VERSIONING_EXEMPTIONS as j,SDK_PRE_EMPTY_TAG_KEY as q}from"./infraTags.js";import{ECS_ROLLOUT_BARRIER_RESOURCE_TYPE as Z}from"./ecsRolloutBarrier.js";import{COST_ALLOCATION_TAGS as rr,DEFAULT_COST_ALLOCATION_ENVIRONMENT as or,DEFAULT_COST_ALLOCATION_OWNER as Er,ecrCreateRepositoryTags as er,rdsPreMigrationSnapshotTags as _r}from"./costAllocationTags.js";import{ACCOUNT_MONITORING_ROLE_NAME as tr}from"./monitoringRole.js";export{tr as ACCOUNT_MONITORING_ROLE_NAME,E as AWSError,p as AWS_RESOURCE_TYPES,n as CDK_NO_STACKS_MATCH,rr as COST_ALLOCATION_TAGS,u as CloudFormationFailureAnalyser,A as CommandError,or as DEFAULT_COST_ALLOCATION_ENVIRONMENT,Er as DEFAULT_COST_ALLOCATION_OWNER,Z as ECS_ROLLOUT_BARRIER_RESOURCE_TYPE,d as FAILURE_ANALYSIS_CATEGORIES,k as FJALL_RESOURCE_TYPES,h as FJALL_RESOURCE_TYPE_TAG_KEY,W as IPAM_OPERATIONS_POOL_TAG_KEY,_ as InvalidCredentialsError,J as KMS_ALIAS_TAG_KEY,w as KMS_RETENTION_TAG_KEY,t as MissingRegionError,e as NoRolesFoundError,S as ProfileNotFoundError,H as S3_BACKUP_EXEMPTIONS,z as S3_BACKUP_EXEMPT_TAG_KEY,j as S3_VERSIONING_EXEMPTIONS,b as S3_VERSIONING_EXEMPT_TAG_KEY,q as SDK_PRE_EMPTY_TAG_KEY,T as SSOTokenExpiredError,R as STACK_NOT_FOUND_PATTERN,c as classifyDriftSuspectEvents,l as countResourceProgress,er as ecrCreateRepositoryTags,g as findCurrentOperationStart,M as findRootFailure,m as formatElapsed,X as formatIpamPairTagValue,O as isAWSError,f as isAwsResourceType,D as isCancelledCollateral,y as isDriftSuspectReason,U as isFailedResourceStatus,s as isNoRolesFoundError,v as isOperationOpeningEvent,N as isResourceEvent,i as isSSOUnauthorizedError,F as maskFailureAnalysis,_r as rdsPreMigrationSnapshotTags,Y as readOperationFailures};

package/dist/deploy/hungUpdate.d.ts

@@ -0,0 +1,12 @@
+/**
+ * How long CloudFormation must stay silent on an ECS service, after ECS
+ * rolled back the deployment CloudFormation started, before the engine
+ * cancels the stack's update (FJL-901; ruled D1, 2026-10-01).
+ */
+export declare const HUNG_UPDATE_GRACE_MS: number;
+/**
+ * The budget of a re-attach after the CDK child was killed by its own
+ * timeout, while the engine watches for a hung update: the grace, then the
+ * start of the rollback. The deploy-test harness's outer kill lands after it.
+ */
+export declare const HUNG_UPDATE_REATTACH_BUDGET_MS: number;

package/dist/deploy/hungUpdate.js

@@ -0,0 +1 @@
+const _=3e5,A=6e4,E=36e4;export{_ as HUNG_UPDATE_GRACE_MS,E as HUNG_UPDATE_REATTACH_BUDGET_MS};

package/dist/index.d.ts

@@ -2,6 +2,7 @@ export { DNS_APEX, getDomainExportNames, getDomainStackName, getDomainUsEast1Cer
 export { BACKUP_VAULT_NAME, BACKUP_VAULT_CONTEXT_KEY, BackupVaultLockSchema, type BackupVaultLock, BackupVaultVerdictSchema, type BackupVaultVerdict, isReownedBackupVault } from "./infra/backupVault.js";
 export { type NonEmptyPartial } from "./nonEmptyPartial.js";
 export { APPROVAL_TOKEN_OUTPUT_PREFIX } from "./deploy/approvalTokenOutput.js";
+export { HUNG_UPDATE_GRACE_MS, HUNG_UPDATE_REATTACH_BUDGET_MS } from "./deploy/hungUpdate.js";
 export { imageTagParameterName } from "./infra/imageTags.js";
 export { toPascalCase, toKebab, toValidDatabaseName, toScreamingSnake, capitalise, getSafeZoneName, accountConstructKey, hasAsciiStableConstructKey } from "./naming/caseConversion.js";
 export { albDnsExportName, albHostedZoneIdExportName, cdnDomainExportName, bucketWebsiteEndpointExportName, bucketWebsiteHostedZoneIdExportName } from "./naming/targetExportNames.js";

package/dist/index.js

@@ -1 +1 @@
-import{DNS_APEX as _,getDomainExportNames as r,getDomainStackName as T,getDomainUsEast1CertificatesStackName as S,hostsExportPartName as A,serialiseHostsChunks as t,HOSTS_OUTPUT_MAX_BYTES as o,isManagedDomainBinding as a,DOMAIN_DEPLOY_DEFAULT_PHASE as N}from"./infra/domainExports.js";import{BACKUP_VAULT_NAME as I,BACKUP_VAULT_CONTEXT_KEY as C,BackupVaultLockSchema as O,BackupVaultVerdictSchema as i,isReownedBackupVault as m}from"./infra/backupVault.js";import{APPROVAL_TOKEN_OUTPUT_PREFIX as n}from"./deploy/approvalTokenOutput.js";import{imageTagParameterName as p}from"./infra/imageTags.js";import{toPascalCase as c,toKebab as D,toValidDatabaseName as M,toScreamingSnake as U,capitalise as f,getSafeZoneName as l,accountConstructKey as F,hasAsciiStableConstructKey as u}from"./naming/caseConversion.js";import{albDnsExportName as d,albHostedZoneIdExportName as G,cdnDomainExportName as g,bucketWebsiteEndpointExportName as V,bucketWebsiteHostedZoneIdExportName as Y}from"./naming/targetExportNames.js";import{APPLICATION_STACKS as K,getApplicationStackName as h,isApplicationStack as y}from"./naming/applicationStackNames.js";import{stackScopedExportName as v,DEPLOYABLE_SERVICE_EXPORT_MARKER as X,DEPLOYABLE_CLUSTER_EXPORT_MARKER as b,CLUSTER_ARN_EXPORT_MARKER as k,VPC_CIDR_EXPORT_MARKER as W,deployableServiceExportName as J,legacyDeployableServiceExportName as j,isDeployableServiceExportName as w,deployableClusterExportName as Z,clusterArnExportName as q,defaultVpcConstructId as z,vpcCidrExportName as Q,legacyVpcCidrExportName as $,isVpcCidrExportName as EE}from"./naming/stackExportNames.js";import{ec2ServiceName as _E,mintedEc2KeyPairName as rE}from"./naming/ec2Naming.js";import{CAPACITY_SLOT_PATTERN as SE,CAPACITY_SLOT_MAX_LENGTH as AE,DEFAULT_CAPACITY_SLOT as tE,CAPACITY_ANCHOR_PATTERN as oE,CAPACITY_ANCHOR_MAX_LENGTH as aE,CAPACITY_IDENTITY_CONTEXT_KEY as NE,CapacityIdentityPinSchema as RE,CapacityIdentityWireSchema as IE,CapacityIdentityConfigSchema as CE,projectCapacityIdentityToTarget as OE}from"./capacityIdentity.js";import{findAccountNameCollision as mE}from"./naming/accountNameCollision.js";import{defaultConnectedAccountName as nE,suffixedAccountName as LE,REGION_SHORT_CODES as pE,findTrailingRegionShortCode as sE,regionSuffixRejectionMessage as cE}from"./naming/connectedAccountName.js";import{normaliseError as ME,getErrorMessage as UE,hasErrorCode as fE,getErrorCode as lE,getErrorStack as FE,formatErrorString as uE}from"./errorUtils.js";import{FJALL_CONFIG_DIR_ENV as dE,FJALL_CREDENTIALS_FILENAME as GE,FJALL_HOME_DIRNAME as gE,FJALL_LOG_DIR_ENV as VE,fjallCredentialsPath as YE,fjallHomeDir as HE,fjallLogDir as KE,fjallStatePath as hE}from"./fjallHome.js";import{singleton as BE}from"./async/singleton.js";import{DANGEROUS_ENV_VARS as XE,filterDangerousEnvVars as bE,MASKED_VALUE_MARKER as kE,maskSensitiveOutput as WE,parseShellArgs as JE,REDACTED_KEY_SENTINEL as jE,SCOPED_TOKEN_REGEX as wE}from"./securityHelpers.js";import{ARGV_ONLY_ENV_POLICY as qE,buildChildEnv as zE,CHILD_ENV_ALLOWED_NAMES as QE,CHILD_ENV_NEVER_NAMES as $E}from"./childEnvPolicy.js";import{sleep as ee}from"./async/sleep.js";import{mapSettledWithConcurrency as re}from"./async/concurrency.js";import{ACCOUNT_STAGES_WITH_ROOT as Se,STRUCTURAL_ENVIRONMENTS as Ae,ACCOUNT_STAGES as te,ACCOUNT_STAGE_LABELS as oe,isAccountStage as ae,ACCOUNT_TIERS as Ne,AccountTierSchema as Re,isAccountTier as Ie,GOVERNANCE_ACCOUNT_TIERS as Ce,isGovernanceTier as Oe,environmentToTier as ie,accountStageEffect as me,ACCOUNT_STAGE_EFFECTS as Pe,formatAccountStageList as ne,stageFromWireEnvironment as Le,accountTier as pe,resolveSynthEnvironment as se,getEnvironmentLabel as ce,ACCOUNT_ROLES as De}from"./environments.js";import{BACKUP_TIERS as Ue,BACKUP_TIER_DEFAULTS as fe,BACKUP_TIER_TAG_KEY as le,BACKUP_TIER_TAG_MAP as Fe,BackupTierSchema as ue,isBackupTier as xe,tierDefault as de}from"./backupTiers.js";import{CODEMOD_STATEMENT_TYPES as ge,isCodemodStatementType as Ve}from"./codemod/statementTypes.js";import{RESOURCE_CATEGORIES as He,categoriseResource as Ke,getExpectedDuration as he,getFriendlyResourceType as ye}from"./resourceCategorisation.js";import{parseGitRemoteUrl as ve}from"./repo/gitRemoteParser.js";import{abbreviateRegion as be,AWS_REGIONS_METADATA as ke,DEFAULT_REGION as We,getRegionInfo as Je,MAX_SECONDARY_REGIONS as je,OPT_IN_REGION_CODES as we,optInRegionWarning as Ze,regions as qe,RETIRED_REGION_ABBREVIATIONS as ze,suggestRegionForTimezone as Qe}from"./infra/regions.js";import{SCOPE_VALUES as E_,MACHINE_ONLY_SCOPES as e_,USER_GRANTABLE_SCOPES as __,GOVERNANCE_SCOPE_REQUIRED_CODE as r_,SESSION_ONLY_API_ROUTES as T_}from"./infra/tokenScopes.js";import{SECRET_NAME_PATTERN as A_,SECRET_NAME_ERROR as t_,SSM_COMPONENT_PATTERN as o_,SSM_COMPONENT_ERROR as a_,SSM_STANDARD_MAX_VALUE_BYTES as N_,SecretNamespaceSchema as R_,buildNamespaceParts as I_,buildParameterPath as C_,parseParameterPath as O_,isManageablePath as i_,parseDotEnv as m_,escapeDotEnvValue as P_}from"./secrets.js";import{ConnectionWireSchema as L_,ConnectionsListResponseSchema as p_,CONNECTION_PHASES as s_,CONNECTION_TERMINAL_FAILURE_PHASES as c_,CONNECTION_FAILURE_REASONS as D_,EXTERNAL_ID_PATTERN as M_}from"./infra/connectionsWire.js";import{COMPLIANCE_ISSUE_STATUSES as f_,isComplianceIssueStatus as l_,COMPLIANCE_ISSUE_SEVERITIES as F_}from"./complianceIssue.js";import{CI_PROVIDERS as x_,CI_SETUP_FIELDS as d_}from"./ciSetup.js";import{INFRASTRUCTURE_TIER_NAMES as g_,CUSTOM_APP_TYPE as V_,APP_TYPES as Y_}from"./appTypes.js";import{INSIGHT_TAB_VALUES as K_,INSIGHT_CATEGORIES as h_,INSIGHT_SEVERITIES as y_,INSIGHT_SORT_VALUES as B_}from"./insights/vocabulary.js";import{PUBLIC_PACKAGE_NAME as X_,INSTALL_SOURCES as b_,SETUP_COMMANDS as k_,upgradeCommand as W_,SETUP_MODES as J_,SETUP_STEP_IDS as j_,SETUP_STEPS as w_,AGENT_SETUP_PROMPTS as Z_,AGENT_INSTALL_COMMAND as q_,SKILL_INSTALL_SEGMENTS as z_,SKILL_INSTALL_FILENAME as Q_,SKILL_INSTALL_PATH as $_}from"./onboarding/index.js";import{deriveRegionsFromOrgConfig as er,deriveTargets as _r,deriveAllTargets as rr,environmentOrTier as Tr,explainRetiredTargetName as Sr,findTarget as Ar,generateTargetName as tr}from"./targets.js";import{buildAppConfigPath as ar}from"./repo/appPath.js";import{findInfrastructurePaths as Rr,findBoundaryPath as Ir,isInfrastructureFile as Cr}from"./repo/findInfrastructurePaths.js";import{inferContainerFromCandidates as ir}from"./repo/inferContainerFromCandidates.js";import{RESERVED_APP_NAMES as Pr,RESERVED_APP_NAME_MESSAGE as nr,isReservedAppName as Lr,RESERVED_APP_NAME_SUFFIX as pr,RESERVED_APP_NAME_SUFFIX_MESSAGE as sr,hasReservedAppNameSuffix as cr}from"./naming/reservedAppNames.js";import{deriveContentHashTag as Mr,CONTENT_HASH_TAG_PATTERN as Ur}from"./infra/deriveContentHashTag.js";import{DEPLOY_MODES as lr,DeployModeSchema as Fr,IMAGE_TAG_PATTERN as ur,ImageTagSchema as xr,ServiceArtefactSchema as dr,ServiceArtefactsSchema as Gr,ARTEFACT_OUTPUT_FIELDS as gr,artefactOutputKey as Vr}from"./infra/deployArtefacts.js";import{MIGRATION_SNAPSHOT_NAME_PREFIX as Hr,MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV as Kr,MIGRATION_SNAPSHOT_KIND_TAG_KEY as hr,MIGRATION_SNAPSHOT_KIND_PREMIGRATE as yr,EXPECTED_SCHEMA_VERSION_ENV as Br,EXPECTED_SCHEMA_VERSION_TOOL_ENV as vr,EXPECTED_CH_SCHEMA_VERSION_ENV as Xr,SCHEMA_ADMIN_USER_ENV as br,SCHEMA_ADMIN_PASSWORD_ENV as kr,PRISMA_MIGRATION_DIR_RE as Wr,CLICKHOUSE_MIGRATION_SKIP_RE as Jr}from"./migration/constants.js";import{SCHEMA_GATE_EXIT as wr,SCHEMA_GATE_EXIT_HINTS as Zr,schemaGateExitKind as qr}from"./migration/schemaGateExit.js";import{FJALL_SCHEMA_GATE_USER as Qr,FJALL_MAINTENANCE_USER as $r,FJALL_CLICKHOUSE_USERS as ET}from"./migration/clickhouseFrameworkUsers.js";import{PHYSICAL_NAME_FALLBACK_PROPERTIES as _T}from"./cfn/physicalNameProperties.js";import{PATTERN_TYPE_VALUES as TT,PATTERN_TYPES as ST,isPatternType as AT,PATTERN_REGISTRY as tT,patternConstructId as oT,DEPLOYABLE_PATTERN_TYPES as aT,PATTERN_TIER_VALUES as NT,OPENNEXT_PATTERN_TYPES as RT,isOpenNextPatternType as IT,OPENNEXT_BUCKET_KEYS as CT,isOpenNextBucketKey as OT,patternBucketConstructId as iT,CLOUDFRONT_PRICE_CLASS_VALUES as mT,STATIC_SITE_CONFIG_KEYS as PT,STATIC_SITE_DEPLOY_INJECTED_KEYS as nT,STATIC_SITE_CDN_CONFIG_KEYS as LT,STATIC_SITE_ROUTING_VALUES as pT,STATIC_SITE_ROUTING_INFO as sT,PATTERN_CREATE_INPUT_VALUES as cT,PATTERN_CREATE_INPUT_FLAGS as DT}from"./patterns/patternTypes.js";import{FRAMEWORK_VALUES as UT,FRAMEWORKS as fT,isFramework as lT,FRAMEWORK_PATTERN_RECOMMENDATIONS as FT,recommendPatternForFramework as uT,CREATABLE_FRAMEWORKS as xT,requiredInputsForFramework as dT}from"./patterns/frameworkPatterns.js";import{DEFAULT_FORMS_FROM_LOCAL_PART as gT,defaultFormsFromAddress as VT,defaultFormsCorsOrigin as YT,isAddressAtDomain as HT}from"./patterns/staticSiteForms.js";import{DEV_SUBSTRATE_PARAMS_SCHEMA_VERSION as hT,DEV_SUBSTRATE_PARAMS_FILENAME as yT,DevSubstrateSynthPropsSchema as BT,DevSubstrateParamsSchema as vT}from"./devSubstrate/params.js";import{DEV_SUBSTRATE_ENTRYPOINT_SOURCE as bT}from"./devSubstrate/entrypoint.js";import{BLESSED_CDK_TOOLCHAIN as WT}from"./cdkToolchain.js";import{DEPLOYMENT_FAILURE_PHASES as jT,DeploymentFailurePhaseSchema as wT,DEPLOYMENT_FAULT_ATTRIBUTIONS as ZT,DeploymentFaultAttributionSchema as qT,DEPLOYMENT_FAILURE_PROVIDER_SOURCES as zT,DeploymentFailureProviderSourceSchema as QT,DEPLOYMENT_FAILURE_CODE_PATTERN as $T,DEPLOYMENT_FAILURE_SCHEMA_VERSION as ES,DEPLOYMENT_FAILURE_LIMITS as eS,DeploymentFailureAnalysisSchema as _S,DeploymentFailureProviderSchema as rS,DeploymentFailureResourceSchema as TS,DeploymentFailureSchema as SS,parseDeploymentFailure as AS,DEPLOYMENT_FAILURE_DOCS_BASE_URL as tS,deploymentFailureDocsUrl as oS,DEPLOYMENT_FAULT_COPY as aS,DEPLOYMENT_PROVIDER_LABELS as NS,deriveErrorMessageFromFailure as RS,toDeploymentFailureAnalysis as IS}from"./failure/deploymentFailure.js";import{extractErrorWindow as OS,ERROR_WINDOW_CONTEXT_LINES as iS}from"./failure/extractErrorWindow.js";import{FJALL_COMPONENT_GITIGNORE as PS,FJALL_PROJECT_GITIGNORE as nS,FJALL_STATE_GITIGNORE_ENTRIES as LS,FJALL_MANAGED_STATE_DIR_ENTRIES as pS,LOCAL_CONFIG_GITIGNORE_ENTRY as sS}from"./scaffold/gitignore.js";import{ensureGitignoreEntries as DS}from"./scaffold/ensureGitignore.js";export{De as ACCOUNT_ROLES,te as ACCOUNT_STAGES,Se as ACCOUNT_STAGES_WITH_ROOT,Pe as ACCOUNT_STAGE_EFFECTS,oe as ACCOUNT_STAGE_LABELS,Ne as ACCOUNT_TIERS,q_ as AGENT_INSTALL_COMMAND,Z_ as AGENT_SETUP_PROMPTS,K as APPLICATION_STACKS,n as APPROVAL_TOKEN_OUTPUT_PREFIX,Y_ as APP_TYPES,qE as ARGV_ONLY_ENV_POLICY,gr as ARTEFACT_OUTPUT_FIELDS,ke as AWS_REGIONS_METADATA,Re as AccountTierSchema,Ue as BACKUP_TIERS,fe as BACKUP_TIER_DEFAULTS,le as BACKUP_TIER_TAG_KEY,Fe as BACKUP_TIER_TAG_MAP,C as BACKUP_VAULT_CONTEXT_KEY,I as BACKUP_VAULT_NAME,WT as BLESSED_CDK_TOOLCHAIN,ue as BackupTierSchema,O as BackupVaultLockSchema,i as BackupVaultVerdictSchema,aE as CAPACITY_ANCHOR_MAX_LENGTH,oE as CAPACITY_ANCHOR_PATTERN,NE as CAPACITY_IDENTITY_CONTEXT_KEY,AE as CAPACITY_SLOT_MAX_LENGTH,SE as CAPACITY_SLOT_PATTERN,QE as CHILD_ENV_ALLOWED_NAMES,$E as CHILD_ENV_NEVER_NAMES,x_ as CI_PROVIDERS,d_ as CI_SETUP_FIELDS,Jr as CLICKHOUSE_MIGRATION_SKIP_RE,mT as CLOUDFRONT_PRICE_CLASS_VALUES,k as CLUSTER_ARN_EXPORT_MARKER,ge as CODEMOD_STATEMENT_TYPES,F_ as COMPLIANCE_ISSUE_SEVERITIES,f_ as COMPLIANCE_ISSUE_STATUSES,D_ as CONNECTION_FAILURE_REASONS,s_ as CONNECTION_PHASES,c_ as CONNECTION_TERMINAL_FAILURE_PHASES,Ur as CONTENT_HASH_TAG_PATTERN,xT as CREATABLE_FRAMEWORKS,V_ as CUSTOM_APP_TYPE,CE as CapacityIdentityConfigSchema,RE as CapacityIdentityPinSchema,IE as CapacityIdentityWireSchema,L_ as ConnectionWireSchema,p_ as ConnectionsListResponseSchema,XE as DANGEROUS_ENV_VARS,tE as DEFAULT_CAPACITY_SLOT,gT as DEFAULT_FORMS_FROM_LOCAL_PART,We as DEFAULT_REGION,b as DEPLOYABLE_CLUSTER_EXPORT_MARKER,aT as DEPLOYABLE_PATTERN_TYPES,X as DEPLOYABLE_SERVICE_EXPORT_MARKER,$T as DEPLOYMENT_FAILURE_CODE_PATTERN,tS as DEPLOYMENT_FAILURE_DOCS_BASE_URL,eS as DEPLOYMENT_FAILURE_LIMITS,jT as DEPLOYMENT_FAILURE_PHASES,zT as DEPLOYMENT_FAILURE_PROVIDER_SOURCES,ES as DEPLOYMENT_FAILURE_SCHEMA_VERSION,ZT as DEPLOYMENT_FAULT_ATTRIBUTIONS,aS as DEPLOYMENT_FAULT_COPY,NS as DEPLOYMENT_PROVIDER_LABELS,lr as DEPLOY_MODES,bT as DEV_SUBSTRATE_ENTRYPOINT_SOURCE,yT as DEV_SUBSTRATE_PARAMS_FILENAME,hT as DEV_SUBSTRATE_PARAMS_SCHEMA_VERSION,_ as DNS_APEX,N as DOMAIN_DEPLOY_DEFAULT_PHASE,Fr as DeployModeSchema,_S as DeploymentFailureAnalysisSchema,wT as DeploymentFailurePhaseSchema,rS as DeploymentFailureProviderSchema,QT as DeploymentFailureProviderSourceSchema,TS as DeploymentFailureResourceSchema,SS as DeploymentFailureSchema,qT as DeploymentFaultAttributionSchema,vT as DevSubstrateParamsSchema,BT as DevSubstrateSynthPropsSchema,iS as ERROR_WINDOW_CONTEXT_LINES,Xr as EXPECTED_CH_SCHEMA_VERSION_ENV,Br as EXPECTED_SCHEMA_VERSION_ENV,vr as EXPECTED_SCHEMA_VERSION_TOOL_ENV,M_ as EXTERNAL_ID_PATTERN,ET as FJALL_CLICKHOUSE_USERS,PS as FJALL_COMPONENT_GITIGNORE,dE as FJALL_CONFIG_DIR_ENV,GE as FJALL_CREDENTIALS_FILENAME,gE as FJALL_HOME_DIRNAME,VE as FJALL_LOG_DIR_ENV,$r as FJALL_MAINTENANCE_USER,pS as FJALL_MANAGED_STATE_DIR_ENTRIES,nS as FJALL_PROJECT_GITIGNORE,Qr as FJALL_SCHEMA_GATE_USER,LS as FJALL_STATE_GITIGNORE_ENTRIES,fT as FRAMEWORKS,FT as FRAMEWORK_PATTERN_RECOMMENDATIONS,UT as FRAMEWORK_VALUES,Ce as GOVERNANCE_ACCOUNT_TIERS,r_ as GOVERNANCE_SCOPE_REQUIRED_CODE,o as HOSTS_OUTPUT_MAX_BYTES,ur as IMAGE_TAG_PATTERN,g_ as INFRASTRUCTURE_TIER_NAMES,h_ as INSIGHT_CATEGORIES,y_ as INSIGHT_SEVERITIES,B_ as INSIGHT_SORT_VALUES,K_ as INSIGHT_TAB_VALUES,b_ as INSTALL_SOURCES,xr as ImageTagSchema,sS as LOCAL_CONFIG_GITIGNORE_ENTRY,e_ as MACHINE_ONLY_SCOPES,kE as MASKED_VALUE_MARKER,je as MAX_SECONDARY_REGIONS,yr as MIGRATION_SNAPSHOT_KIND_PREMIGRATE,hr as MIGRATION_SNAPSHOT_KIND_TAG_KEY,Hr as MIGRATION_SNAPSHOT_NAME_PREFIX,Kr as MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV,CT as OPENNEXT_BUCKET_KEYS,RT as OPENNEXT_PATTERN_TYPES,we as OPT_IN_REGION_CODES,DT as PATTERN_CREATE_INPUT_FLAGS,cT as PATTERN_CREATE_INPUT_VALUES,tT as PATTERN_REGISTRY,NT as PATTERN_TIER_VALUES,ST as PATTERN_TYPES,TT as PATTERN_TYPE_VALUES,_T as PHYSICAL_NAME_FALLBACK_PROPERTIES,Wr as PRISMA_MIGRATION_DIR_RE,X_ as PUBLIC_PACKAGE_NAME,jE as REDACTED_KEY_SENTINEL,pE as REGION_SHORT_CODES,Pr as RESERVED_APP_NAMES,nr as RESERVED_APP_NAME_MESSAGE,pr as RESERVED_APP_NAME_SUFFIX,sr as RESERVED_APP_NAME_SUFFIX_MESSAGE,He as RESOURCE_CATEGORIES,ze as RETIRED_REGION_ABBREVIATIONS,kr as SCHEMA_ADMIN_PASSWORD_ENV,br as SCHEMA_ADMIN_USER_ENV,wr as SCHEMA_GATE_EXIT,Zr as SCHEMA_GATE_EXIT_HINTS,wE as SCOPED_TOKEN_REGEX,E_ as SCOPE_VALUES,t_ as SECRET_NAME_ERROR,A_ as SECRET_NAME_PATTERN,T_ as SESSION_ONLY_API_ROUTES,k_ as SETUP_COMMANDS,J_ as SETUP_MODES,w_ as SETUP_STEPS,j_ as SETUP_STEP_IDS,Q_ as SKILL_INSTALL_FILENAME,$_ as SKILL_INSTALL_PATH,z_ as SKILL_INSTALL_SEGMENTS,a_ as SSM_COMPONENT_ERROR,o_ as SSM_COMPONENT_PATTERN,N_ as SSM_STANDARD_MAX_VALUE_BYTES,LT as STATIC_SITE_CDN_CONFIG_KEYS,PT as STATIC_SITE_CONFIG_KEYS,nT as STATIC_SITE_DEPLOY_INJECTED_KEYS,sT as STATIC_SITE_ROUTING_INFO,pT as STATIC_SITE_ROUTING_VALUES,Ae as STRUCTURAL_ENVIRONMENTS,R_ as SecretNamespaceSchema,dr as ServiceArtefactSchema,Gr as ServiceArtefactsSchema,__ as USER_GRANTABLE_SCOPES,W as VPC_CIDR_EXPORT_MARKER,be as abbreviateRegion,F as accountConstructKey,me as accountStageEffect,pe as accountTier,d as albDnsExportName,G as albHostedZoneIdExportName,Vr as artefactOutputKey,V as bucketWebsiteEndpointExportName,Y as bucketWebsiteHostedZoneIdExportName,ar as buildAppConfigPath,zE as buildChildEnv,I_ as buildNamespaceParts,C_ as buildParameterPath,f as capitalise,Ke as categoriseResource,g as cdnDomainExportName,q as clusterArnExportName,nE as defaultConnectedAccountName,YT as defaultFormsCorsOrigin,VT as defaultFormsFromAddress,z as defaultVpcConstructId,Z as deployableClusterExportName,J as deployableServiceExportName,oS as deploymentFailureDocsUrl,rr as deriveAllTargets,Mr as deriveContentHashTag,RS as deriveErrorMessageFromFailure,er as deriveRegionsFromOrgConfig,_r as deriveTargets,_E as ec2ServiceName,DS as ensureGitignoreEntries,Tr as environmentOrTier,ie as environmentToTier,P_ as escapeDotEnvValue,Sr as explainRetiredTargetName,OS as extractErrorWindow,bE as filterDangerousEnvVars,mE as findAccountNameCollision,Ir as findBoundaryPath,Rr as findInfrastructurePaths,Ar as findTarget,sE as findTrailingRegionShortCode,YE as fjallCredentialsPath,HE as fjallHomeDir,KE as fjallLogDir,hE as fjallStatePath,ne as formatAccountStageList,uE as formatErrorString,tr as generateTargetName,h as getApplicationStackName,r as getDomainExportNames,T as getDomainStackName,S as getDomainUsEast1CertificatesStackName,ce as getEnvironmentLabel,lE as getErrorCode,UE as getErrorMessage,FE as getErrorStack,he as getExpectedDuration,ye as getFriendlyResourceType,Je as getRegionInfo,l as getSafeZoneName,u as hasAsciiStableConstructKey,fE as hasErrorCode,cr as hasReservedAppNameSuffix,A as hostsExportPartName,p as imageTagParameterName,ir as inferContainerFromCandidates,ae as isAccountStage,Ie as isAccountTier,HT as isAddressAtDomain,y as isApplicationStack,xe as isBackupTier,Ve as isCodemodStatementType,l_ as isComplianceIssueStatus,w as isDeployableServiceExportName,lT as isFramework,Oe as isGovernanceTier,Cr as isInfrastructureFile,i_ as isManageablePath,a as isManagedDomainBinding,OT as isOpenNextBucketKey,IT as isOpenNextPatternType,AT as isPatternType,m as isReownedBackupVault,Lr as isReservedAppName,EE as isVpcCidrExportName,j as legacyDeployableServiceExportName,$ as legacyVpcCidrExportName,re as mapSettledWithConcurrency,WE as maskSensitiveOutput,rE as mintedEc2KeyPairName,ME as normaliseError,Ze as optInRegionWarning,AS as parseDeploymentFailure,m_ as parseDotEnv,ve as parseGitRemoteUrl,O_ as parseParameterPath,JE as parseShellArgs,iT as patternBucketConstructId,oT as patternConstructId,OE as projectCapacityIdentityToTarget,uT as recommendPatternForFramework,cE as regionSuffixRejectionMessage,qe as regions,dT as requiredInputsForFramework,se as resolveSynthEnvironment,qr as schemaGateExitKind,t as serialiseHostsChunks,BE as singleton,ee as sleep,v as stackScopedExportName,Le as stageFromWireEnvironment,LE as suffixedAccountName,Qe as suggestRegionForTimezone,de as tierDefault,IS as toDeploymentFailureAnalysis,D as toKebab,c as toPascalCase,U as toScreamingSnake,M as toValidDatabaseName,W_ as upgradeCommand,Q as vpcCidrExportName};
+import{DNS_APEX as _,getDomainExportNames as r,getDomainStackName as T,getDomainUsEast1CertificatesStackName as S,hostsExportPartName as A,serialiseHostsChunks as t,HOSTS_OUTPUT_MAX_BYTES as o,isManagedDomainBinding as a,DOMAIN_DEPLOY_DEFAULT_PHASE as N}from"./infra/domainExports.js";import{BACKUP_VAULT_NAME as I,BACKUP_VAULT_CONTEXT_KEY as C,BackupVaultLockSchema as O,BackupVaultVerdictSchema as i,isReownedBackupVault as m}from"./infra/backupVault.js";import{APPROVAL_TOKEN_OUTPUT_PREFIX as n}from"./deploy/approvalTokenOutput.js";import{HUNG_UPDATE_GRACE_MS as p,HUNG_UPDATE_REATTACH_BUDGET_MS as s}from"./deploy/hungUpdate.js";import{imageTagParameterName as D}from"./infra/imageTags.js";import{toPascalCase as U,toKebab as f,toValidDatabaseName as l,toScreamingSnake as F,capitalise as u,getSafeZoneName as x,accountConstructKey as d,hasAsciiStableConstructKey as G}from"./naming/caseConversion.js";import{albDnsExportName as V,albHostedZoneIdExportName as Y,cdnDomainExportName as H,bucketWebsiteEndpointExportName as K,bucketWebsiteHostedZoneIdExportName as h}from"./naming/targetExportNames.js";import{APPLICATION_STACKS as B,getApplicationStackName as v,isApplicationStack as X}from"./naming/applicationStackNames.js";import{stackScopedExportName as k,DEPLOYABLE_SERVICE_EXPORT_MARKER as W,DEPLOYABLE_CLUSTER_EXPORT_MARKER as J,CLUSTER_ARN_EXPORT_MARKER as j,VPC_CIDR_EXPORT_MARKER as w,deployableServiceExportName as Z,legacyDeployableServiceExportName as q,isDeployableServiceExportName as z,deployableClusterExportName as Q,clusterArnExportName as $,defaultVpcConstructId as EE,vpcCidrExportName as eE,legacyVpcCidrExportName as _E,isVpcCidrExportName as rE}from"./naming/stackExportNames.js";import{ec2ServiceName as SE,mintedEc2KeyPairName as AE}from"./naming/ec2Naming.js";import{CAPACITY_SLOT_PATTERN as oE,CAPACITY_SLOT_MAX_LENGTH as aE,DEFAULT_CAPACITY_SLOT as NE,CAPACITY_ANCHOR_PATTERN as RE,CAPACITY_ANCHOR_MAX_LENGTH as IE,CAPACITY_IDENTITY_CONTEXT_KEY as CE,CapacityIdentityPinSchema as OE,CapacityIdentityWireSchema as iE,CapacityIdentityConfigSchema as mE,projectCapacityIdentityToTarget as PE}from"./capacityIdentity.js";import{findAccountNameCollision as LE}from"./naming/accountNameCollision.js";import{defaultConnectedAccountName as sE,suffixedAccountName as cE,REGION_SHORT_CODES as DE,findTrailingRegionShortCode as ME,regionSuffixRejectionMessage as UE}from"./naming/connectedAccountName.js";import{normaliseError as lE,getErrorMessage as FE,hasErrorCode as uE,getErrorCode as xE,getErrorStack as dE,formatErrorString as GE}from"./errorUtils.js";import{FJALL_CONFIG_DIR_ENV as VE,FJALL_CREDENTIALS_FILENAME as YE,FJALL_HOME_DIRNAME as HE,FJALL_LOG_DIR_ENV as KE,fjallCredentialsPath as hE,fjallHomeDir as yE,fjallLogDir as BE,fjallStatePath as vE}from"./fjallHome.js";import{singleton as bE}from"./async/singleton.js";import{DANGEROUS_ENV_VARS as WE,filterDangerousEnvVars as JE,MASKED_VALUE_MARKER as jE,maskSensitiveOutput as wE,parseShellArgs as ZE,REDACTED_KEY_SENTINEL as qE,SCOPED_TOKEN_REGEX as zE}from"./securityHelpers.js";import{ARGV_ONLY_ENV_POLICY as $E,buildChildEnv as Ee,CHILD_ENV_ALLOWED_NAMES as ee,CHILD_ENV_NEVER_NAMES as _e}from"./childEnvPolicy.js";import{sleep as Te}from"./async/sleep.js";import{mapSettledWithConcurrency as Ae}from"./async/concurrency.js";import{ACCOUNT_STAGES_WITH_ROOT as oe,STRUCTURAL_ENVIRONMENTS as ae,ACCOUNT_STAGES as Ne,ACCOUNT_STAGE_LABELS as Re,isAccountStage as Ie,ACCOUNT_TIERS as Ce,AccountTierSchema as Oe,isAccountTier as ie,GOVERNANCE_ACCOUNT_TIERS as me,isGovernanceTier as Pe,environmentToTier as ne,accountStageEffect as Le,ACCOUNT_STAGE_EFFECTS as pe,formatAccountStageList as se,stageFromWireEnvironment as ce,accountTier as De,resolveSynthEnvironment as Me,getEnvironmentLabel as Ue,ACCOUNT_ROLES as fe}from"./environments.js";import{BACKUP_TIERS as Fe,BACKUP_TIER_DEFAULTS as ue,BACKUP_TIER_TAG_KEY as xe,BACKUP_TIER_TAG_MAP as de,BackupTierSchema as Ge,isBackupTier as ge,tierDefault as Ve}from"./backupTiers.js";import{CODEMOD_STATEMENT_TYPES as He,isCodemodStatementType as Ke}from"./codemod/statementTypes.js";import{RESOURCE_CATEGORIES as ye,categoriseResource as Be,getExpectedDuration as ve,getFriendlyResourceType as Xe}from"./resourceCategorisation.js";import{parseGitRemoteUrl as ke}from"./repo/gitRemoteParser.js";import{abbreviateRegion as Je,AWS_REGIONS_METADATA as je,DEFAULT_REGION as we,getRegionInfo as Ze,MAX_SECONDARY_REGIONS as qe,OPT_IN_REGION_CODES as ze,optInRegionWarning as Qe,regions as $e,RETIRED_REGION_ABBREVIATIONS as E_,suggestRegionForTimezone as e_}from"./infra/regions.js";import{SCOPE_VALUES as r_,MACHINE_ONLY_SCOPES as T_,USER_GRANTABLE_SCOPES as S_,GOVERNANCE_SCOPE_REQUIRED_CODE as A_,SESSION_ONLY_API_ROUTES as t_}from"./infra/tokenScopes.js";import{SECRET_NAME_PATTERN as a_,SECRET_NAME_ERROR as N_,SSM_COMPONENT_PATTERN as R_,SSM_COMPONENT_ERROR as I_,SSM_STANDARD_MAX_VALUE_BYTES as C_,SecretNamespaceSchema as O_,buildNamespaceParts as i_,buildParameterPath as m_,parseParameterPath as P_,isManageablePath as n_,parseDotEnv as L_,escapeDotEnvValue as p_}from"./secrets.js";import{ConnectionWireSchema as c_,ConnectionsListResponseSchema as D_,CONNECTION_PHASES as M_,CONNECTION_TERMINAL_FAILURE_PHASES as U_,CONNECTION_FAILURE_REASONS as f_,EXTERNAL_ID_PATTERN as l_}from"./infra/connectionsWire.js";import{COMPLIANCE_ISSUE_STATUSES as u_,isComplianceIssueStatus as x_,COMPLIANCE_ISSUE_SEVERITIES as d_}from"./complianceIssue.js";import{CI_PROVIDERS as g_,CI_SETUP_FIELDS as V_}from"./ciSetup.js";import{INFRASTRUCTURE_TIER_NAMES as H_,CUSTOM_APP_TYPE as K_,APP_TYPES as h_}from"./appTypes.js";import{INSIGHT_TAB_VALUES as B_,INSIGHT_CATEGORIES as v_,INSIGHT_SEVERITIES as X_,INSIGHT_SORT_VALUES as b_}from"./insights/vocabulary.js";import{PUBLIC_PACKAGE_NAME as W_,INSTALL_SOURCES as J_,SETUP_COMMANDS as j_,upgradeCommand as w_,SETUP_MODES as Z_,SETUP_STEP_IDS as q_,SETUP_STEPS as z_,AGENT_SETUP_PROMPTS as Q_,AGENT_INSTALL_COMMAND as $_,SKILL_INSTALL_SEGMENTS as Er,SKILL_INSTALL_FILENAME as er,SKILL_INSTALL_PATH as _r}from"./onboarding/index.js";import{deriveRegionsFromOrgConfig as Tr,deriveTargets as Sr,deriveAllTargets as Ar,environmentOrTier as tr,explainRetiredTargetName as or,findTarget as ar,generateTargetName as Nr}from"./targets.js";import{buildAppConfigPath as Ir}from"./repo/appPath.js";import{findInfrastructurePaths as Or,findBoundaryPath as ir,isInfrastructureFile as mr}from"./repo/findInfrastructurePaths.js";import{inferContainerFromCandidates as nr}from"./repo/inferContainerFromCandidates.js";import{RESERVED_APP_NAMES as pr,RESERVED_APP_NAME_MESSAGE as sr,isReservedAppName as cr,RESERVED_APP_NAME_SUFFIX as Dr,RESERVED_APP_NAME_SUFFIX_MESSAGE as Mr,hasReservedAppNameSuffix as Ur}from"./naming/reservedAppNames.js";import{deriveContentHashTag as lr,CONTENT_HASH_TAG_PATTERN as Fr}from"./infra/deriveContentHashTag.js";import{DEPLOY_MODES as xr,DeployModeSchema as dr,IMAGE_TAG_PATTERN as Gr,ImageTagSchema as gr,ServiceArtefactSchema as Vr,ServiceArtefactsSchema as Yr,ARTEFACT_OUTPUT_FIELDS as Hr,artefactOutputKey as Kr}from"./infra/deployArtefacts.js";import{MIGRATION_SNAPSHOT_NAME_PREFIX as yr,MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV as Br,MIGRATION_SNAPSHOT_KIND_TAG_KEY as vr,MIGRATION_SNAPSHOT_KIND_PREMIGRATE as Xr,EXPECTED_SCHEMA_VERSION_ENV as br,EXPECTED_SCHEMA_VERSION_TOOL_ENV as kr,EXPECTED_CH_SCHEMA_VERSION_ENV as Wr,SCHEMA_ADMIN_USER_ENV as Jr,SCHEMA_ADMIN_PASSWORD_ENV as jr,PRISMA_MIGRATION_DIR_RE as wr,CLICKHOUSE_MIGRATION_SKIP_RE as Zr}from"./migration/constants.js";import{SCHEMA_GATE_EXIT as zr,SCHEMA_GATE_EXIT_HINTS as Qr,schemaGateExitKind as $r}from"./migration/schemaGateExit.js";import{FJALL_SCHEMA_GATE_USER as eT,FJALL_MAINTENANCE_USER as _T,FJALL_CLICKHOUSE_USERS as rT}from"./migration/clickhouseFrameworkUsers.js";import{PHYSICAL_NAME_FALLBACK_PROPERTIES as ST}from"./cfn/physicalNameProperties.js";import{PATTERN_TYPE_VALUES as tT,PATTERN_TYPES as oT,isPatternType as aT,PATTERN_REGISTRY as NT,patternConstructId as RT,DEPLOYABLE_PATTERN_TYPES as IT,PATTERN_TIER_VALUES as CT,OPENNEXT_PATTERN_TYPES as OT,isOpenNextPatternType as iT,OPENNEXT_BUCKET_KEYS as mT,isOpenNextBucketKey as PT,patternBucketConstructId as nT,CLOUDFRONT_PRICE_CLASS_VALUES as LT,STATIC_SITE_CONFIG_KEYS as pT,STATIC_SITE_DEPLOY_INJECTED_KEYS as sT,STATIC_SITE_CDN_CONFIG_KEYS as cT,STATIC_SITE_ROUTING_VALUES as DT,STATIC_SITE_ROUTING_INFO as MT,PATTERN_CREATE_INPUT_VALUES as UT,PATTERN_CREATE_INPUT_FLAGS as fT}from"./patterns/patternTypes.js";import{FRAMEWORK_VALUES as FT,FRAMEWORKS as uT,isFramework as xT,FRAMEWORK_PATTERN_RECOMMENDATIONS as dT,recommendPatternForFramework as GT,CREATABLE_FRAMEWORKS as gT,requiredInputsForFramework as VT}from"./patterns/frameworkPatterns.js";import{DEFAULT_FORMS_FROM_LOCAL_PART as HT,defaultFormsFromAddress as KT,defaultFormsCorsOrigin as hT,isAddressAtDomain as yT}from"./patterns/staticSiteForms.js";import{DEV_SUBSTRATE_PARAMS_SCHEMA_VERSION as vT,DEV_SUBSTRATE_PARAMS_FILENAME as XT,DevSubstrateSynthPropsSchema as bT,DevSubstrateParamsSchema as kT}from"./devSubstrate/params.js";import{DEV_SUBSTRATE_ENTRYPOINT_SOURCE as JT}from"./devSubstrate/entrypoint.js";import{BLESSED_CDK_TOOLCHAIN as wT}from"./cdkToolchain.js";import{DEPLOYMENT_FAILURE_PHASES as qT,DeploymentFailurePhaseSchema as zT,DEPLOYMENT_FAULT_ATTRIBUTIONS as QT,DeploymentFaultAttributionSchema as $T,DEPLOYMENT_FAILURE_PROVIDER_SOURCES as ES,DeploymentFailureProviderSourceSchema as eS,DEPLOYMENT_FAILURE_CODE_PATTERN as _S,DEPLOYMENT_FAILURE_SCHEMA_VERSION as rS,DEPLOYMENT_FAILURE_LIMITS as TS,DeploymentFailureAnalysisSchema as SS,DeploymentFailureProviderSchema as AS,DeploymentFailureResourceSchema as tS,DeploymentFailureSchema as oS,parseDeploymentFailure as aS,DEPLOYMENT_FAILURE_DOCS_BASE_URL as NS,deploymentFailureDocsUrl as RS,DEPLOYMENT_FAULT_COPY as IS,DEPLOYMENT_PROVIDER_LABELS as CS,deriveErrorMessageFromFailure as OS,toDeploymentFailureAnalysis as iS}from"./failure/deploymentFailure.js";import{extractErrorWindow as PS,ERROR_WINDOW_CONTEXT_LINES as nS}from"./failure/extractErrorWindow.js";import{FJALL_COMPONENT_GITIGNORE as pS,FJALL_PROJECT_GITIGNORE as sS,FJALL_STATE_GITIGNORE_ENTRIES as cS,FJALL_MANAGED_STATE_DIR_ENTRIES as DS,LOCAL_CONFIG_GITIGNORE_ENTRY as MS}from"./scaffold/gitignore.js";import{ensureGitignoreEntries as fS}from"./scaffold/ensureGitignore.js";export{fe as ACCOUNT_ROLES,Ne as ACCOUNT_STAGES,oe as ACCOUNT_STAGES_WITH_ROOT,pe as ACCOUNT_STAGE_EFFECTS,Re as ACCOUNT_STAGE_LABELS,Ce as ACCOUNT_TIERS,$_ as AGENT_INSTALL_COMMAND,Q_ as AGENT_SETUP_PROMPTS,B as APPLICATION_STACKS,n as APPROVAL_TOKEN_OUTPUT_PREFIX,h_ as APP_TYPES,$E as ARGV_ONLY_ENV_POLICY,Hr as ARTEFACT_OUTPUT_FIELDS,je as AWS_REGIONS_METADATA,Oe as AccountTierSchema,Fe as BACKUP_TIERS,ue as BACKUP_TIER_DEFAULTS,xe as BACKUP_TIER_TAG_KEY,de as BACKUP_TIER_TAG_MAP,C as BACKUP_VAULT_CONTEXT_KEY,I as BACKUP_VAULT_NAME,wT as BLESSED_CDK_TOOLCHAIN,Ge as BackupTierSchema,O as BackupVaultLockSchema,i as BackupVaultVerdictSchema,IE as CAPACITY_ANCHOR_MAX_LENGTH,RE as CAPACITY_ANCHOR_PATTERN,CE as CAPACITY_IDENTITY_CONTEXT_KEY,aE as CAPACITY_SLOT_MAX_LENGTH,oE as CAPACITY_SLOT_PATTERN,ee as CHILD_ENV_ALLOWED_NAMES,_e as CHILD_ENV_NEVER_NAMES,g_ as CI_PROVIDERS,V_ as CI_SETUP_FIELDS,Zr as CLICKHOUSE_MIGRATION_SKIP_RE,LT as CLOUDFRONT_PRICE_CLASS_VALUES,j as CLUSTER_ARN_EXPORT_MARKER,He as CODEMOD_STATEMENT_TYPES,d_ as COMPLIANCE_ISSUE_SEVERITIES,u_ as COMPLIANCE_ISSUE_STATUSES,f_ as CONNECTION_FAILURE_REASONS,M_ as CONNECTION_PHASES,U_ as CONNECTION_TERMINAL_FAILURE_PHASES,Fr as CONTENT_HASH_TAG_PATTERN,gT as CREATABLE_FRAMEWORKS,K_ as CUSTOM_APP_TYPE,mE as CapacityIdentityConfigSchema,OE as CapacityIdentityPinSchema,iE as CapacityIdentityWireSchema,c_ as ConnectionWireSchema,D_ as ConnectionsListResponseSchema,WE as DANGEROUS_ENV_VARS,NE as DEFAULT_CAPACITY_SLOT,HT as DEFAULT_FORMS_FROM_LOCAL_PART,we as DEFAULT_REGION,J as DEPLOYABLE_CLUSTER_EXPORT_MARKER,IT as DEPLOYABLE_PATTERN_TYPES,W as DEPLOYABLE_SERVICE_EXPORT_MARKER,_S as DEPLOYMENT_FAILURE_CODE_PATTERN,NS as DEPLOYMENT_FAILURE_DOCS_BASE_URL,TS as DEPLOYMENT_FAILURE_LIMITS,qT as DEPLOYMENT_FAILURE_PHASES,ES as DEPLOYMENT_FAILURE_PROVIDER_SOURCES,rS as DEPLOYMENT_FAILURE_SCHEMA_VERSION,QT as DEPLOYMENT_FAULT_ATTRIBUTIONS,IS as DEPLOYMENT_FAULT_COPY,CS as DEPLOYMENT_PROVIDER_LABELS,xr as DEPLOY_MODES,JT as DEV_SUBSTRATE_ENTRYPOINT_SOURCE,XT as DEV_SUBSTRATE_PARAMS_FILENAME,vT as DEV_SUBSTRATE_PARAMS_SCHEMA_VERSION,_ as DNS_APEX,N as DOMAIN_DEPLOY_DEFAULT_PHASE,dr as DeployModeSchema,SS as DeploymentFailureAnalysisSchema,zT as DeploymentFailurePhaseSchema,AS as DeploymentFailureProviderSchema,eS as DeploymentFailureProviderSourceSchema,tS as DeploymentFailureResourceSchema,oS as DeploymentFailureSchema,$T as DeploymentFaultAttributionSchema,kT as DevSubstrateParamsSchema,bT as DevSubstrateSynthPropsSchema,nS as ERROR_WINDOW_CONTEXT_LINES,Wr as EXPECTED_CH_SCHEMA_VERSION_ENV,br as EXPECTED_SCHEMA_VERSION_ENV,kr as EXPECTED_SCHEMA_VERSION_TOOL_ENV,l_ as EXTERNAL_ID_PATTERN,rT as FJALL_CLICKHOUSE_USERS,pS as FJALL_COMPONENT_GITIGNORE,VE as FJALL_CONFIG_DIR_ENV,YE as FJALL_CREDENTIALS_FILENAME,HE as FJALL_HOME_DIRNAME,KE as FJALL_LOG_DIR_ENV,_T as FJALL_MAINTENANCE_USER,DS as FJALL_MANAGED_STATE_DIR_ENTRIES,sS as FJALL_PROJECT_GITIGNORE,eT as FJALL_SCHEMA_GATE_USER,cS as FJALL_STATE_GITIGNORE_ENTRIES,uT as FRAMEWORKS,dT as FRAMEWORK_PATTERN_RECOMMENDATIONS,FT as FRAMEWORK_VALUES,me as GOVERNANCE_ACCOUNT_TIERS,A_ as GOVERNANCE_SCOPE_REQUIRED_CODE,o as HOSTS_OUTPUT_MAX_BYTES,p as HUNG_UPDATE_GRACE_MS,s as HUNG_UPDATE_REATTACH_BUDGET_MS,Gr as IMAGE_TAG_PATTERN,H_ as INFRASTRUCTURE_TIER_NAMES,v_ as INSIGHT_CATEGORIES,X_ as INSIGHT_SEVERITIES,b_ as INSIGHT_SORT_VALUES,B_ as INSIGHT_TAB_VALUES,J_ as INSTALL_SOURCES,gr as ImageTagSchema,MS as LOCAL_CONFIG_GITIGNORE_ENTRY,T_ as MACHINE_ONLY_SCOPES,jE as MASKED_VALUE_MARKER,qe as MAX_SECONDARY_REGIONS,Xr as MIGRATION_SNAPSHOT_KIND_PREMIGRATE,vr as MIGRATION_SNAPSHOT_KIND_TAG_KEY,yr as MIGRATION_SNAPSHOT_NAME_PREFIX,Br as MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV,mT as OPENNEXT_BUCKET_KEYS,OT as OPENNEXT_PATTERN_TYPES,ze as OPT_IN_REGION_CODES,fT as PATTERN_CREATE_INPUT_FLAGS,UT as PATTERN_CREATE_INPUT_VALUES,NT as PATTERN_REGISTRY,CT as PATTERN_TIER_VALUES,oT as PATTERN_TYPES,tT as PATTERN_TYPE_VALUES,ST as PHYSICAL_NAME_FALLBACK_PROPERTIES,wr as PRISMA_MIGRATION_DIR_RE,W_ as PUBLIC_PACKAGE_NAME,qE as REDACTED_KEY_SENTINEL,DE as REGION_SHORT_CODES,pr as RESERVED_APP_NAMES,sr as RESERVED_APP_NAME_MESSAGE,Dr as RESERVED_APP_NAME_SUFFIX,Mr as RESERVED_APP_NAME_SUFFIX_MESSAGE,ye as RESOURCE_CATEGORIES,E_ as RETIRED_REGION_ABBREVIATIONS,jr as SCHEMA_ADMIN_PASSWORD_ENV,Jr as SCHEMA_ADMIN_USER_ENV,zr as SCHEMA_GATE_EXIT,Qr as SCHEMA_GATE_EXIT_HINTS,zE as SCOPED_TOKEN_REGEX,r_ as SCOPE_VALUES,N_ as SECRET_NAME_ERROR,a_ as SECRET_NAME_PATTERN,t_ as SESSION_ONLY_API_ROUTES,j_ as SETUP_COMMANDS,Z_ as SETUP_MODES,z_ as SETUP_STEPS,q_ as SETUP_STEP_IDS,er as SKILL_INSTALL_FILENAME,_r as SKILL_INSTALL_PATH,Er as SKILL_INSTALL_SEGMENTS,I_ as SSM_COMPONENT_ERROR,R_ as SSM_COMPONENT_PATTERN,C_ as SSM_STANDARD_MAX_VALUE_BYTES,cT as STATIC_SITE_CDN_CONFIG_KEYS,pT as STATIC_SITE_CONFIG_KEYS,sT as STATIC_SITE_DEPLOY_INJECTED_KEYS,MT as STATIC_SITE_ROUTING_INFO,DT as STATIC_SITE_ROUTING_VALUES,ae as STRUCTURAL_ENVIRONMENTS,O_ as SecretNamespaceSchema,Vr as ServiceArtefactSchema,Yr as ServiceArtefactsSchema,S_ as USER_GRANTABLE_SCOPES,w as VPC_CIDR_EXPORT_MARKER,Je as abbreviateRegion,d as accountConstructKey,Le as accountStageEffect,De as accountTier,V as albDnsExportName,Y as albHostedZoneIdExportName,Kr as artefactOutputKey,K as bucketWebsiteEndpointExportName,h as bucketWebsiteHostedZoneIdExportName,Ir as buildAppConfigPath,Ee as buildChildEnv,i_ as buildNamespaceParts,m_ as buildParameterPath,u as capitalise,Be as categoriseResource,H as cdnDomainExportName,$ as clusterArnExportName,sE as defaultConnectedAccountName,hT as defaultFormsCorsOrigin,KT as defaultFormsFromAddress,EE as defaultVpcConstructId,Q as deployableClusterExportName,Z as deployableServiceExportName,RS as deploymentFailureDocsUrl,Ar as deriveAllTargets,lr as deriveContentHashTag,OS as deriveErrorMessageFromFailure,Tr as deriveRegionsFromOrgConfig,Sr as deriveTargets,SE as ec2ServiceName,fS as ensureGitignoreEntries,tr as environmentOrTier,ne as environmentToTier,p_ as escapeDotEnvValue,or as explainRetiredTargetName,PS as extractErrorWindow,JE as filterDangerousEnvVars,LE as findAccountNameCollision,ir as findBoundaryPath,Or as findInfrastructurePaths,ar as findTarget,ME as findTrailingRegionShortCode,hE as fjallCredentialsPath,yE as fjallHomeDir,BE as fjallLogDir,vE as fjallStatePath,se as formatAccountStageList,GE as formatErrorString,Nr as generateTargetName,v as getApplicationStackName,r as getDomainExportNames,T as getDomainStackName,S as getDomainUsEast1CertificatesStackName,Ue as getEnvironmentLabel,xE as getErrorCode,FE as getErrorMessage,dE as getErrorStack,ve as getExpectedDuration,Xe as getFriendlyResourceType,Ze as getRegionInfo,x as getSafeZoneName,G as hasAsciiStableConstructKey,uE as hasErrorCode,Ur as hasReservedAppNameSuffix,A as hostsExportPartName,D as imageTagParameterName,nr as inferContainerFromCandidates,Ie as isAccountStage,ie as isAccountTier,yT as isAddressAtDomain,X as isApplicationStack,ge as isBackupTier,Ke as isCodemodStatementType,x_ as isComplianceIssueStatus,z as isDeployableServiceExportName,xT as isFramework,Pe as isGovernanceTier,mr as isInfrastructureFile,n_ as isManageablePath,a as isManagedDomainBinding,PT as isOpenNextBucketKey,iT as isOpenNextPatternType,aT as isPatternType,m as isReownedBackupVault,cr as isReservedAppName,rE as isVpcCidrExportName,q as legacyDeployableServiceExportName,_E as legacyVpcCidrExportName,Ae as mapSettledWithConcurrency,wE as maskSensitiveOutput,AE as mintedEc2KeyPairName,lE as normaliseError,Qe as optInRegionWarning,aS as parseDeploymentFailure,L_ as parseDotEnv,ke as parseGitRemoteUrl,P_ as parseParameterPath,ZE as parseShellArgs,nT as patternBucketConstructId,RT as patternConstructId,PE as projectCapacityIdentityToTarget,GT as recommendPatternForFramework,UE as regionSuffixRejectionMessage,$e as regions,VT as requiredInputsForFramework,Me as resolveSynthEnvironment,$r as schemaGateExitKind,t as serialiseHostsChunks,bE as singleton,Te as sleep,k as stackScopedExportName,ce as stageFromWireEnvironment,cE as suffixedAccountName,e_ as suggestRegionForTimezone,Ve as tierDefault,iS as toDeploymentFailureAnalysis,f as toKebab,U as toPascalCase,F as toScreamingSnake,l as toValidDatabaseName,w_ as upgradeCommand,eE as vpcCidrExportName};

package/dist/migration/constants.d.ts

@@ -36,6 +36,31 @@ export declare const MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV: "MIGRATION_SNAPSHOT_
 export declare const MIGRATION_SNAPSHOT_KIND_TAG_KEY: "fjall:snapshotKind";
 /** `MIGRATION_SNAPSHOT_KIND_TAG_KEY` value for runner-taken pre-migration snapshots. */
 export declare const MIGRATION_SNAPSHOT_KIND_PREMIGRATE: "premigrate";
+/**
+ * Tag key on a service's task definition naming the task definition its
+ * lifecycle-hook migration runs (FJL-901). `EcsLifecycleHookMigration`
+ * writes it, and the hook's inline runner (`lifecycleHookLambda.source.cjs`,
+ * which cannot import this module) reads it from the revision its deployment
+ * targets, so the hook runs the migration that deployment's code was built
+ * against. A test pins the runner's literal to this one.
+ */
+export declare const MIGRATION_TASK_DEFINITION_TAG_KEY: "fjall:migration-task-definition";
+/**
+ * Docker label on the primary container of a service's task definition
+ * carrying the same reference as `MIGRATION_TASK_DEFINITION_TAG_KEY`
+ * (FJL-901). Nothing reads it: it puts the reference in the container
+ * definitions, which no revision can change, so a change to the migration
+ * alone registers a new revision of the service's task definition rather than
+ * re-tagging CloudFormation's own one in place.
+ */
+export declare const MIGRATION_TASK_DEFINITION_LABEL_KEY: "io.fjall.migration-task-definition";
+/**
+ * Tag key on a migration task definition naming, space-separated, the
+ * security groups its task runs in when they are not its service's: the
+ * migration's own group, which `separateTaskDef.egressTo` builds. Written by
+ * `EcsCompute` and read by the hook's inline runner, as above.
+ */
+export declare const MIGRATION_SECURITY_GROUPS_TAG_KEY: "fjall:migration-security-groups";
 /**
  * Container env var name for the schema-version fail-fast gate. Every
  * container of every service whose `connections:` includes a relational DB

package/dist/migration/constants.js

@@ -1 +1 @@
-const _="fjall-premigrate",E="MIGRATION_SNAPSHOT_RETENTION_DAYS",A="fjall:snapshotKind",S="premigrate",C="EXPECTED_SCHEMA_VERSION",t="EXPECTED_SCHEMA_VERSION_TOOL",T="EXPECTED_CH_SCHEMA_VERSION",o="SCHEMA_ADMIN_USER",N="SCHEMA_ADMIN_PASSWORD",R="FJALL_SCHEMA_GATE_DB_URL_BASE",H="FJALL_SCHEMA_GATE_DB_USER",M="FJALL_SCHEMA_GATE_DB_PASSWORD",I="CLICKHOUSE_URL",O="CLICKHOUSE_DATABASE",e="CLICKHOUSE_CA_CERT",s="FJALL_SCHEMA_GATE_CH_USER",D="FJALL_SCHEMA_GATE_CH_PASSWORD",c=120,r="fjall-schema-gate",p="fjall/schema-gate",G="public.ecr.aws/fjall/schema-gate",n=/^\d{14}_/,x=/\.dev\.sql$/,P=/\.sql$/;export{P as CLICKHOUSE_MIGRATION_FILE_RE,x as CLICKHOUSE_MIGRATION_SKIP_RE,T as EXPECTED_CH_SCHEMA_VERSION_ENV,C as EXPECTED_SCHEMA_VERSION_ENV,t as EXPECTED_SCHEMA_VERSION_TOOL_ENV,S as MIGRATION_SNAPSHOT_KIND_PREMIGRATE,A as MIGRATION_SNAPSHOT_KIND_TAG_KEY,_ as MIGRATION_SNAPSHOT_NAME_PREFIX,E as MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV,n as PRISMA_MIGRATION_DIR_RE,N as SCHEMA_ADMIN_PASSWORD_ENV,o as SCHEMA_ADMIN_USER_ENV,e as SCHEMA_GATE_CH_CA_CERT_ENV,O as SCHEMA_GATE_CH_DATABASE_ENV,D as SCHEMA_GATE_CH_PASSWORD_ENV,I as SCHEMA_GATE_CH_URL_ENV,s as SCHEMA_GATE_CH_USER_ENV,r as SCHEMA_GATE_CONTAINER_NAME,M as SCHEMA_GATE_DB_PASSWORD_ENV,R as SCHEMA_GATE_DB_URL_BASE_ENV,H as SCHEMA_GATE_DB_USER_ENV,p as SCHEMA_GATE_ECR_REPO_NAME,G as SCHEMA_GATE_PUBLIC_IMAGE_REPO,c as SCHEMA_GATE_START_TIMEOUT_SECONDS};
+const _="fjall-premigrate",E="MIGRATION_SNAPSHOT_RETENTION_DAYS",A="fjall:snapshotKind",S="premigrate",t="fjall:migration-task-definition",T="io.fjall.migration-task-definition",o="fjall:migration-security-groups",C="EXPECTED_SCHEMA_VERSION",I="EXPECTED_SCHEMA_VERSION_TOOL",N="EXPECTED_CH_SCHEMA_VERSION",R="SCHEMA_ADMIN_USER",M="SCHEMA_ADMIN_PASSWORD",O="FJALL_SCHEMA_GATE_DB_URL_BASE",H="FJALL_SCHEMA_GATE_DB_USER",e="FJALL_SCHEMA_GATE_DB_PASSWORD",s="CLICKHOUSE_URL",r="CLICKHOUSE_DATABASE",n="CLICKHOUSE_CA_CERT",G="FJALL_SCHEMA_GATE_CH_USER",c="FJALL_SCHEMA_GATE_CH_PASSWORD",p=120,D="fjall-schema-gate",x="fjall/schema-gate",L="public.ecr.aws/fjall/schema-gate",P=/^\d{14}_/,a=/\.dev\.sql$/,V=/\.sql$/;export{V as CLICKHOUSE_MIGRATION_FILE_RE,a as CLICKHOUSE_MIGRATION_SKIP_RE,N as EXPECTED_CH_SCHEMA_VERSION_ENV,C as EXPECTED_SCHEMA_VERSION_ENV,I as EXPECTED_SCHEMA_VERSION_TOOL_ENV,o as MIGRATION_SECURITY_GROUPS_TAG_KEY,S as MIGRATION_SNAPSHOT_KIND_PREMIGRATE,A as MIGRATION_SNAPSHOT_KIND_TAG_KEY,_ as MIGRATION_SNAPSHOT_NAME_PREFIX,E as MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV,T as MIGRATION_TASK_DEFINITION_LABEL_KEY,t as MIGRATION_TASK_DEFINITION_TAG_KEY,P as PRISMA_MIGRATION_DIR_RE,M as SCHEMA_ADMIN_PASSWORD_ENV,R as SCHEMA_ADMIN_USER_ENV,n as SCHEMA_GATE_CH_CA_CERT_ENV,r as SCHEMA_GATE_CH_DATABASE_ENV,c as SCHEMA_GATE_CH_PASSWORD_ENV,s as SCHEMA_GATE_CH_URL_ENV,G as SCHEMA_GATE_CH_USER_ENV,D as SCHEMA_GATE_CONTAINER_NAME,e as SCHEMA_GATE_DB_PASSWORD_ENV,O as SCHEMA_GATE_DB_URL_BASE_ENV,H as SCHEMA_GATE_DB_USER_ENV,x as SCHEMA_GATE_ECR_REPO_NAME,L as SCHEMA_GATE_PUBLIC_IMAGE_REPO,p as SCHEMA_GATE_START_TIMEOUT_SECONDS};

package/dist/migration/index.d.ts

@@ -1,4 +1,4 @@
-export { MIGRATION_SNAPSHOT_NAME_PREFIX, MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV, EXPECTED_SCHEMA_VERSION_ENV, EXPECTED_SCHEMA_VERSION_TOOL_ENV, EXPECTED_CH_SCHEMA_VERSION_ENV, SCHEMA_ADMIN_USER_ENV, SCHEMA_ADMIN_PASSWORD_ENV, SCHEMA_GATE_DB_URL_BASE_ENV, SCHEMA_GATE_DB_USER_ENV, SCHEMA_GATE_DB_PASSWORD_ENV, SCHEMA_GATE_CH_URL_ENV, SCHEMA_GATE_CH_DATABASE_ENV, SCHEMA_GATE_CH_CA_CERT_ENV, SCHEMA_GATE_CH_USER_ENV, SCHEMA_GATE_CH_PASSWORD_ENV, SCHEMA_GATE_START_TIMEOUT_SECONDS, SCHEMA_GATE_CONTAINER_NAME, SCHEMA_GATE_ECR_REPO_NAME, SCHEMA_GATE_PUBLIC_IMAGE_REPO, PRISMA_MIGRATION_DIR_RE, CLICKHOUSE_MIGRATION_SKIP_RE } from "./constants.js";
+export { MIGRATION_SNAPSHOT_NAME_PREFIX, MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV, MIGRATION_TASK_DEFINITION_TAG_KEY, MIGRATION_TASK_DEFINITION_LABEL_KEY, MIGRATION_SECURITY_GROUPS_TAG_KEY, EXPECTED_SCHEMA_VERSION_ENV, EXPECTED_SCHEMA_VERSION_TOOL_ENV, EXPECTED_CH_SCHEMA_VERSION_ENV, SCHEMA_ADMIN_USER_ENV, SCHEMA_ADMIN_PASSWORD_ENV, SCHEMA_GATE_DB_URL_BASE_ENV, SCHEMA_GATE_DB_USER_ENV, SCHEMA_GATE_DB_PASSWORD_ENV, SCHEMA_GATE_CH_URL_ENV, SCHEMA_GATE_CH_DATABASE_ENV, SCHEMA_GATE_CH_CA_CERT_ENV, SCHEMA_GATE_CH_USER_ENV, SCHEMA_GATE_CH_PASSWORD_ENV, SCHEMA_GATE_START_TIMEOUT_SECONDS, SCHEMA_GATE_CONTAINER_NAME, SCHEMA_GATE_ECR_REPO_NAME, SCHEMA_GATE_PUBLIC_IMAGE_REPO, PRISMA_MIGRATION_DIR_RE, CLICKHOUSE_MIGRATION_SKIP_RE } from "./constants.js";
 export { pickLatestPrismaMigration } from "./pickLatestPrismaMigration.js";
 export { pickLatestClickHouseMigration } from "./pickLatestClickHouseMigration.js";
 export { isOrderableSchemaVersion, isSchemaVersionSatisfied } from "./compareSchemaVersion.js";

package/dist/migration/index.js

@@ -1 +1 @@
-import{MIGRATION_SNAPSHOT_NAME_PREFIX as A,MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV as S,EXPECTED_SCHEMA_VERSION_ENV as C,EXPECTED_SCHEMA_VERSION_TOOL_ENV as N,EXPECTED_CH_SCHEMA_VERSION_ENV as e,SCHEMA_ADMIN_USER_ENV as T,SCHEMA_ADMIN_PASSWORD_ENV as r,SCHEMA_GATE_DB_URL_BASE_ENV as R,SCHEMA_GATE_DB_USER_ENV as M,SCHEMA_GATE_DB_PASSWORD_ENV as H,SCHEMA_GATE_CH_URL_ENV as I,SCHEMA_GATE_CH_DATABASE_ENV as o,SCHEMA_GATE_CH_CA_CERT_ENV as O,SCHEMA_GATE_CH_USER_ENV as a,SCHEMA_GATE_CH_PASSWORD_ENV as m,SCHEMA_GATE_START_TIMEOUT_SECONDS as U,SCHEMA_GATE_CONTAINER_NAME as s,SCHEMA_GATE_ECR_REPO_NAME as t,SCHEMA_GATE_PUBLIC_IMAGE_REPO as L,PRISMA_MIGRATION_DIR_RE as V,CLICKHOUSE_MIGRATION_SKIP_RE as i}from"./constants.js";import{pickLatestPrismaMigration as P}from"./pickLatestPrismaMigration.js";import{pickLatestClickHouseMigration as c}from"./pickLatestClickHouseMigration.js";import{isOrderableSchemaVersion as f,isSchemaVersionSatisfied as x}from"./compareSchemaVersion.js";import{verifyExpectedSchemaVersion as K}from"./verifyExpectedSchemaVersion.js";import{CLICKHOUSE_MANAGED_USERS_ENV as d,MANAGED_USER_NAME_PATTERN as h,userPasswordEnvName as l,ManagedUserNameSchema as B,ManagedUserNamesSchema as X}from"./clickhouseSqlUsers.js";import{FJALL_SCHEMA_GATE_USER as u,FJALL_MAINTENANCE_USER as b,FJALL_CLICKHOUSE_USERS as g,FJALL_CLICKHOUSE_USER_PREFIX as v,isReservedClickHouseUserName as J,CLICKHOUSE_FRAMEWORK_USERS_ENV as W,CLICKHOUSE_MAINTENANCE_PROFILE_ENV as w,CLICKHOUSE_BACKUP_SCRATCH_DATABASE as y,FrameworkUserNameSchema as Y,FrameworkUserNamesSchema as Q}from"./clickhouseFrameworkUsers.js";import{SCHEMA_GATE_EXIT as q,SCHEMA_GATE_EXIT_HINTS as z,schemaGateExitKind as Z}from"./schemaGateExit.js";import{CONTROL_PLANE_ACTIVITY_RECENCY_SECONDS as EE,buildControlPlaneActivityQuery as _E}from"./controlPlaneActivity.js";import{sleepAbortable as SE}from"./sleepAbortable.js";export{y as CLICKHOUSE_BACKUP_SCRATCH_DATABASE,W as CLICKHOUSE_FRAMEWORK_USERS_ENV,w as CLICKHOUSE_MAINTENANCE_PROFILE_ENV,d as CLICKHOUSE_MANAGED_USERS_ENV,i as CLICKHOUSE_MIGRATION_SKIP_RE,EE as CONTROL_PLANE_ACTIVITY_RECENCY_SECONDS,e as EXPECTED_CH_SCHEMA_VERSION_ENV,C as EXPECTED_SCHEMA_VERSION_ENV,N as EXPECTED_SCHEMA_VERSION_TOOL_ENV,g as FJALL_CLICKHOUSE_USERS,v as FJALL_CLICKHOUSE_USER_PREFIX,b as FJALL_MAINTENANCE_USER,u as FJALL_SCHEMA_GATE_USER,Y as FrameworkUserNameSchema,Q as FrameworkUserNamesSchema,h as MANAGED_USER_NAME_PATTERN,A as MIGRATION_SNAPSHOT_NAME_PREFIX,S as MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV,B as ManagedUserNameSchema,X as ManagedUserNamesSchema,V as PRISMA_MIGRATION_DIR_RE,r as SCHEMA_ADMIN_PASSWORD_ENV,T as SCHEMA_ADMIN_USER_ENV,O as SCHEMA_GATE_CH_CA_CERT_ENV,o as SCHEMA_GATE_CH_DATABASE_ENV,m as SCHEMA_GATE_CH_PASSWORD_ENV,I as SCHEMA_GATE_CH_URL_ENV,a as SCHEMA_GATE_CH_USER_ENV,s as SCHEMA_GATE_CONTAINER_NAME,H as SCHEMA_GATE_DB_PASSWORD_ENV,R as SCHEMA_GATE_DB_URL_BASE_ENV,M as SCHEMA_GATE_DB_USER_ENV,t as SCHEMA_GATE_ECR_REPO_NAME,q as SCHEMA_GATE_EXIT,z as SCHEMA_GATE_EXIT_HINTS,L as SCHEMA_GATE_PUBLIC_IMAGE_REPO,U as SCHEMA_GATE_START_TIMEOUT_SECONDS,_E as buildControlPlaneActivityQuery,f as isOrderableSchemaVersion,J as isReservedClickHouseUserName,x as isSchemaVersionSatisfied,c as pickLatestClickHouseMigration,P as pickLatestPrismaMigration,Z as schemaGateExitKind,SE as sleepAbortable,l as userPasswordEnvName,K as verifyExpectedSchemaVersion};
+import{MIGRATION_SNAPSHOT_NAME_PREFIX as A,MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV as S,MIGRATION_TASK_DEFINITION_TAG_KEY as N,MIGRATION_TASK_DEFINITION_LABEL_KEY as C,MIGRATION_SECURITY_GROUPS_TAG_KEY as e,EXPECTED_SCHEMA_VERSION_ENV as T,EXPECTED_SCHEMA_VERSION_TOOL_ENV as I,EXPECTED_CH_SCHEMA_VERSION_ENV as R,SCHEMA_ADMIN_USER_ENV as M,SCHEMA_ADMIN_PASSWORD_ENV as r,SCHEMA_GATE_DB_URL_BASE_ENV as H,SCHEMA_GATE_DB_USER_ENV as O,SCHEMA_GATE_DB_PASSWORD_ENV as o,SCHEMA_GATE_CH_URL_ENV as a,SCHEMA_GATE_CH_DATABASE_ENV as G,SCHEMA_GATE_CH_CA_CERT_ENV as U,SCHEMA_GATE_CH_USER_ENV as m,SCHEMA_GATE_CH_PASSWORD_ENV as L,SCHEMA_GATE_START_TIMEOUT_SECONDS as s,SCHEMA_GATE_CONTAINER_NAME as t,SCHEMA_GATE_ECR_REPO_NAME as V,SCHEMA_GATE_PUBLIC_IMAGE_REPO as i,PRISMA_MIGRATION_DIR_RE as P,CLICKHOUSE_MIGRATION_SKIP_RE as D}from"./constants.js";import{pickLatestPrismaMigration as c}from"./pickLatestPrismaMigration.js";import{pickLatestClickHouseMigration as f}from"./pickLatestClickHouseMigration.js";import{isOrderableSchemaVersion as F,isSchemaVersionSatisfied as n}from"./compareSchemaVersion.js";import{verifyExpectedSchemaVersion as B}from"./verifyExpectedSchemaVersion.js";import{CLICKHOUSE_MANAGED_USERS_ENV as l,MANAGED_USER_NAME_PATTERN as X,userPasswordEnvName as Y,ManagedUserNameSchema as k,ManagedUserNamesSchema as u}from"./clickhouseSqlUsers.js";import{FJALL_SCHEMA_GATE_USER as g,FJALL_MAINTENANCE_USER as v,FJALL_CLICKHOUSE_USERS as J,FJALL_CLICKHOUSE_USER_PREFIX as W,isReservedClickHouseUserName as w,CLICKHOUSE_FRAMEWORK_USERS_ENV as y,CLICKHOUSE_MAINTENANCE_PROFILE_ENV as Q,CLICKHOUSE_BACKUP_SCRATCH_DATABASE as j,FrameworkUserNameSchema as q,FrameworkUserNamesSchema as z}from"./clickhouseFrameworkUsers.js";import{SCHEMA_GATE_EXIT as $,SCHEMA_GATE_EXIT_HINTS as EE,schemaGateExitKind as _E}from"./schemaGateExit.js";import{CONTROL_PLANE_ACTIVITY_RECENCY_SECONDS as SE,buildControlPlaneActivityQuery as NE}from"./controlPlaneActivity.js";import{sleepAbortable as eE}from"./sleepAbortable.js";export{j as CLICKHOUSE_BACKUP_SCRATCH_DATABASE,y as CLICKHOUSE_FRAMEWORK_USERS_ENV,Q as CLICKHOUSE_MAINTENANCE_PROFILE_ENV,l as CLICKHOUSE_MANAGED_USERS_ENV,D as CLICKHOUSE_MIGRATION_SKIP_RE,SE as CONTROL_PLANE_ACTIVITY_RECENCY_SECONDS,R as EXPECTED_CH_SCHEMA_VERSION_ENV,T as EXPECTED_SCHEMA_VERSION_ENV,I as EXPECTED_SCHEMA_VERSION_TOOL_ENV,J as FJALL_CLICKHOUSE_USERS,W as FJALL_CLICKHOUSE_USER_PREFIX,v as FJALL_MAINTENANCE_USER,g as FJALL_SCHEMA_GATE_USER,q as FrameworkUserNameSchema,z as FrameworkUserNamesSchema,X as MANAGED_USER_NAME_PATTERN,e as MIGRATION_SECURITY_GROUPS_TAG_KEY,A as MIGRATION_SNAPSHOT_NAME_PREFIX,S as MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV,C as MIGRATION_TASK_DEFINITION_LABEL_KEY,N as MIGRATION_TASK_DEFINITION_TAG_KEY,k as ManagedUserNameSchema,u as ManagedUserNamesSchema,P as PRISMA_MIGRATION_DIR_RE,r as SCHEMA_ADMIN_PASSWORD_ENV,M as SCHEMA_ADMIN_USER_ENV,U as SCHEMA_GATE_CH_CA_CERT_ENV,G as SCHEMA_GATE_CH_DATABASE_ENV,L as SCHEMA_GATE_CH_PASSWORD_ENV,a as SCHEMA_GATE_CH_URL_ENV,m as SCHEMA_GATE_CH_USER_ENV,t as SCHEMA_GATE_CONTAINER_NAME,o as SCHEMA_GATE_DB_PASSWORD_ENV,H as SCHEMA_GATE_DB_URL_BASE_ENV,O as SCHEMA_GATE_DB_USER_ENV,V as SCHEMA_GATE_ECR_REPO_NAME,$ as SCHEMA_GATE_EXIT,EE as SCHEMA_GATE_EXIT_HINTS,i as SCHEMA_GATE_PUBLIC_IMAGE_REPO,s as SCHEMA_GATE_START_TIMEOUT_SECONDS,NE as buildControlPlaneActivityQuery,F as isOrderableSchemaVersion,w as isReservedClickHouseUserName,n as isSchemaVersionSatisfied,f as pickLatestClickHouseMigration,c as pickLatestPrismaMigration,_E as schemaGateExitKind,eE as sleepAbortable,Y as userPasswordEnvName,B as verifyExpectedSchemaVersion};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fjall/util",
-  "version": "39.0.5",
+  "version": "39.0.6",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/fjall-tech/fjall.git",