@fjall/util 39.0.5 → 39.0.7

package/dist/.minified

@@ -1 +1 @@
-140 files minified at 2026-10-04T22:51:19.195Z
+143 files minified at 2026-10-12T22:49:49.704Z

package/dist/aws/ecsRolloutBarrier.d.ts

@@ -0,0 +1,7 @@
+/**
+ * The CloudFormation type of the rollout barrier `EcsCompute` builds for a
+ * service whose rollout another waits on (FJL-901). The construct writes it,
+ * and deploy-core's failure classifier reads it.
+ */
+export declare const ECS_ROLLOUT_BARRIER_RESOURCE_TYPE = "Custom::FjallEcsRolloutBarrier";
+export type EcsRolloutBarrierResourceType = typeof ECS_ROLLOUT_BARRIER_RESOURCE_TYPE;

package/dist/aws/ecsRolloutBarrier.js

@@ -0,0 +1 @@
+const R="Custom::FjallEcsRolloutBarrier";export{R as ECS_ROLLOUT_BARRIER_RESOURCE_TYPE};

package/dist/aws/index.d.ts

@@ -6,8 +6,9 @@ export { CloudFormationFailureAnalyser, type RootCause, type FailureAnalysis } f
 export { FAILURE_ANALYSIS_CATEGORIES, type FailureAnalysisCategory } from "./failureAnalysisCategories.js";
 export { maskFailureAnalysis } from "./maskFailureAnalysis.js";
 export { findRootFailure, isFailedResourceStatus, readOperationFailures, type OperationFailures } from "./operationFailures.js";
-export { classifyDriftSuspectEvents, findCurrentOperationStart, isDriftSuspectReason, isOperationOpeningEvent, type DriftSuspectEvent } from "./driftSuspects.js";
+export { classifyDriftSuspectEvents, findCurrentOperationStart, isCancelledCollateral, isDriftSuspectReason, isOperationOpeningEvent, type DriftSuspectEvent } from "./driftSuspects.js";
 export { IPAM_OPERATIONS_POOL_TAG_KEY, formatIpamPairTagValue } from "./ipamTags.js";
 export { FJALL_RESOURCE_TYPE_TAG_KEY, FJALL_RESOURCE_TYPES, type FjallResourceType, KMS_ALIAS_TAG_KEY, KMS_RETENTION_TAG_KEY, S3_BACKUP_EXEMPT_TAG_KEY, S3_BACKUP_EXEMPTIONS, S3_VERSIONING_EXEMPT_TAG_KEY, S3_VERSIONING_EXEMPTIONS, SDK_PRE_EMPTY_TAG_KEY, type S3BackupExemption, type S3VersioningExemption } from "./infraTags.js";
+export { ECS_ROLLOUT_BARRIER_RESOURCE_TYPE, type EcsRolloutBarrierResourceType } from "./ecsRolloutBarrier.js";
 export { COST_ALLOCATION_TAGS, DEFAULT_COST_ALLOCATION_ENVIRONMENT, DEFAULT_COST_ALLOCATION_OWNER, ecrCreateRepositoryTags, rdsPreMigrationSnapshotTags, type AwsSdkTag, type EcrCreateTag } from "./costAllocationTags.js";
 export { ACCOUNT_MONITORING_ROLE_NAME } from "./monitoringRole.js";

package/dist/aws/index.js

@@ -1 +1 @@
-import{AWSError as e,NoRolesFoundError as E,InvalidCredentialsError as _,SSOTokenExpiredError as T,MissingRegionError as t,ProfileNotFoundError as A,CommandError as S,isAWSError as s,isNoRolesFoundError as O,isSSOUnauthorizedError as i}from"./errors.js";import{STACK_NOT_FOUND_PATTERN as n,CDK_NO_STACKS_MATCH as N,isResourceEvent as R}from"./cloudformationTypes.js";import{AWS_RESOURCE_TYPES as C,isAwsResourceType as f}from"./resourceTypes.js";import{countResourceProgress as m,formatElapsed as u}from"./deployProgress.js";import{CloudFormationFailureAnalyser as L}from"./CloudFormationFailureAnalyser.js";import{FAILURE_ANALYSIS_CATEGORIES as d}from"./failureAnalysisCategories.js";import{maskFailureAnalysis as K}from"./maskFailureAnalysis.js";import{findRootFailure as M,isFailedResourceStatus as G,readOperationFailures as Y}from"./operationFailures.js";import{classifyDriftSuspectEvents as c,findCurrentOperationStart as g,isDriftSuspectReason as D,isOperationOpeningEvent as y}from"./driftSuspects.js";import{IPAM_OPERATIONS_POOL_TAG_KEY as V,formatIpamPairTagValue as W}from"./ipamTags.js";import{FJALL_RESOURCE_TYPE_TAG_KEY as h,FJALL_RESOURCE_TYPES as k,KMS_ALIAS_TAG_KEY as B,KMS_RETENTION_TAG_KEY as J,S3_BACKUP_EXEMPT_TAG_KEY as w,S3_BACKUP_EXEMPTIONS as z,S3_VERSIONING_EXEMPT_TAG_KEY as H,S3_VERSIONING_EXEMPTIONS as b,SDK_PRE_EMPTY_TAG_KEY as j}from"./infraTags.js";import{COST_ALLOCATION_TAGS as Q,DEFAULT_COST_ALLOCATION_ENVIRONMENT as Z,DEFAULT_COST_ALLOCATION_OWNER as $,ecrCreateRepositoryTags as rr,rdsPreMigrationSnapshotTags as or}from"./costAllocationTags.js";import{ACCOUNT_MONITORING_ROLE_NAME as Er}from"./monitoringRole.js";export{Er as ACCOUNT_MONITORING_ROLE_NAME,e as AWSError,C as AWS_RESOURCE_TYPES,N as CDK_NO_STACKS_MATCH,Q as COST_ALLOCATION_TAGS,L as CloudFormationFailureAnalyser,S as CommandError,Z as DEFAULT_COST_ALLOCATION_ENVIRONMENT,$ as DEFAULT_COST_ALLOCATION_OWNER,d as FAILURE_ANALYSIS_CATEGORIES,k as FJALL_RESOURCE_TYPES,h as FJALL_RESOURCE_TYPE_TAG_KEY,V as IPAM_OPERATIONS_POOL_TAG_KEY,_ as InvalidCredentialsError,B as KMS_ALIAS_TAG_KEY,J as KMS_RETENTION_TAG_KEY,t as MissingRegionError,E as NoRolesFoundError,A as ProfileNotFoundError,z as S3_BACKUP_EXEMPTIONS,w as S3_BACKUP_EXEMPT_TAG_KEY,b as S3_VERSIONING_EXEMPTIONS,H as S3_VERSIONING_EXEMPT_TAG_KEY,j as SDK_PRE_EMPTY_TAG_KEY,T as SSOTokenExpiredError,n as STACK_NOT_FOUND_PATTERN,c as classifyDriftSuspectEvents,m as countResourceProgress,rr as ecrCreateRepositoryTags,g as findCurrentOperationStart,M as findRootFailure,u as formatElapsed,W as formatIpamPairTagValue,s as isAWSError,f as isAwsResourceType,D as isDriftSuspectReason,G as isFailedResourceStatus,O as isNoRolesFoundError,y as isOperationOpeningEvent,R as isResourceEvent,i as isSSOUnauthorizedError,K as maskFailureAnalysis,or as rdsPreMigrationSnapshotTags,Y as readOperationFailures};
+import{AWSError as E,NoRolesFoundError as e,InvalidCredentialsError as _,SSOTokenExpiredError as T,MissingRegionError as t,ProfileNotFoundError as S,CommandError as A,isAWSError as O,isNoRolesFoundError as s,isSSOUnauthorizedError as i}from"./errors.js";import{STACK_NOT_FOUND_PATTERN as R,CDK_NO_STACKS_MATCH as n,isResourceEvent as N}from"./cloudformationTypes.js";import{AWS_RESOURCE_TYPES as p,isAwsResourceType as f}from"./resourceTypes.js";import{countResourceProgress as l,formatElapsed as m}from"./deployProgress.js";import{CloudFormationFailureAnalyser as u}from"./CloudFormationFailureAnalyser.js";import{FAILURE_ANALYSIS_CATEGORIES as d}from"./failureAnalysisCategories.js";import{maskFailureAnalysis as F}from"./maskFailureAnalysis.js";import{findRootFailure as M,isFailedResourceStatus as U,readOperationFailures as Y}from"./operationFailures.js";import{classifyDriftSuspectEvents as c,findCurrentOperationStart as g,isCancelledCollateral as D,isDriftSuspectReason as y,isOperationOpeningEvent as v}from"./driftSuspects.js";import{IPAM_OPERATIONS_POOL_TAG_KEY as W,formatIpamPairTagValue as X}from"./ipamTags.js";import{FJALL_RESOURCE_TYPE_TAG_KEY as h,FJALL_RESOURCE_TYPES as k,KMS_ALIAS_TAG_KEY as J,KMS_RETENTION_TAG_KEY as w,S3_BACKUP_EXEMPT_TAG_KEY as z,S3_BACKUP_EXEMPTIONS as H,S3_VERSIONING_EXEMPT_TAG_KEY as b,S3_VERSIONING_EXEMPTIONS as j,SDK_PRE_EMPTY_TAG_KEY as q}from"./infraTags.js";import{ECS_ROLLOUT_BARRIER_RESOURCE_TYPE as Z}from"./ecsRolloutBarrier.js";import{COST_ALLOCATION_TAGS as rr,DEFAULT_COST_ALLOCATION_ENVIRONMENT as or,DEFAULT_COST_ALLOCATION_OWNER as Er,ecrCreateRepositoryTags as er,rdsPreMigrationSnapshotTags as _r}from"./costAllocationTags.js";import{ACCOUNT_MONITORING_ROLE_NAME as tr}from"./monitoringRole.js";export{tr as ACCOUNT_MONITORING_ROLE_NAME,E as AWSError,p as AWS_RESOURCE_TYPES,n as CDK_NO_STACKS_MATCH,rr as COST_ALLOCATION_TAGS,u as CloudFormationFailureAnalyser,A as CommandError,or as DEFAULT_COST_ALLOCATION_ENVIRONMENT,Er as DEFAULT_COST_ALLOCATION_OWNER,Z as ECS_ROLLOUT_BARRIER_RESOURCE_TYPE,d as FAILURE_ANALYSIS_CATEGORIES,k as FJALL_RESOURCE_TYPES,h as FJALL_RESOURCE_TYPE_TAG_KEY,W as IPAM_OPERATIONS_POOL_TAG_KEY,_ as InvalidCredentialsError,J as KMS_ALIAS_TAG_KEY,w as KMS_RETENTION_TAG_KEY,t as MissingRegionError,e as NoRolesFoundError,S as ProfileNotFoundError,H as S3_BACKUP_EXEMPTIONS,z as S3_BACKUP_EXEMPT_TAG_KEY,j as S3_VERSIONING_EXEMPTIONS,b as S3_VERSIONING_EXEMPT_TAG_KEY,q as SDK_PRE_EMPTY_TAG_KEY,T as SSOTokenExpiredError,R as STACK_NOT_FOUND_PATTERN,c as classifyDriftSuspectEvents,l as countResourceProgress,er as ecrCreateRepositoryTags,g as findCurrentOperationStart,M as findRootFailure,m as formatElapsed,X as formatIpamPairTagValue,O as isAWSError,f as isAwsResourceType,D as isCancelledCollateral,y as isDriftSuspectReason,U as isFailedResourceStatus,s as isNoRolesFoundError,v as isOperationOpeningEvent,N as isResourceEvent,i as isSSOUnauthorizedError,F as maskFailureAnalysis,_r as rdsPreMigrationSnapshotTags,Y as readOperationFailures};

package/dist/codeUnitOrder.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Order two strings by UTF-16 code unit, as `<` does, so a sorted list reads
+ * the same on every machine and in every locale.
+ */
+export declare function compareCodeUnits(left: string, right: string): number;

package/dist/codeUnitOrder.js

@@ -0,0 +1 @@
+var r=Object.defineProperty;var e=(n,o)=>r(n,"name",{value:o,configurable:!0});function p(n,o){return n<o?-1:n>o?1:0}e(p,"compareCodeUnits");export{p as compareCodeUnits};

package/dist/deploy/hungUpdate.d.ts

@@ -0,0 +1,12 @@
+/**
+ * How long CloudFormation must stay silent on an ECS service, after ECS
+ * rolled back the deployment CloudFormation started, before the engine
+ * cancels the stack's update (FJL-901; ruled D1, 2026-10-01).
+ */
+export declare const HUNG_UPDATE_GRACE_MS: number;
+/**
+ * The budget of a re-attach after the CDK child was killed by its own
+ * timeout, while the engine watches for a hung update: the grace, then the
+ * start of the rollback. The deploy-test harness's outer kill lands after it.
+ */
+export declare const HUNG_UPDATE_REATTACH_BUDGET_MS: number;

package/dist/deploy/hungUpdate.js

@@ -0,0 +1 @@
+const _=3e5,A=6e4,E=36e4;export{_ as HUNG_UPDATE_GRACE_MS,E as HUNG_UPDATE_REATTACH_BUDGET_MS};

package/dist/errorUtils.d.ts

@@ -14,6 +14,13 @@ export declare function normaliseError(error: unknown): Error;
  * before reaching any logger / state setter / persistence / callback sink.
  */
 export declare function getErrorMessage(error: unknown): string;
+/**
+ * The first answer `pick` gives for the error or a link down its `cause`
+ * chain, outermost first. Any object is a link, whatever its class; the walk
+ * stops at a value that is not an object, at a link it has already read (a
+ * cyclic chain), or after ten links.
+ */
+export declare function findOnCauseChain<T>(error: unknown, pick: (link: object) => T | undefined): T | undefined;
 /**
  * Check if an error has a specific error code
  */

package/dist/errorUtils.js

@@ -1 +1 @@
-var i=Object.defineProperty;var t=(n,e)=>i(n,"name",{value:e,configurable:!0});function s(n){return n instanceof Error?n:new Error(String(n))}t(s,"normaliseError");function f(n){return n instanceof Error?n.message:typeof n=="string"?n:n&&typeof n=="object"&&"message"in n?String(n.message):"An unknown error occurred"}t(f,"getErrorMessage");function r(n,e){return!n||typeof n!="object"?!1:"code"in n&&n.code===e}t(r,"hasErrorCode");function c(n){if(!(!n||typeof n!="object")&&"code"in n&&typeof n.code=="string")return n.code}t(c,"getErrorCode");function d(n){return n instanceof Error?n.stack:void 0}t(d,"getErrorStack");function a(n){const e=f(n),o=c(n);return o&&o!=="UNKNOWN_ERROR"?`[${o}] ${e}`:e}t(a,"formatErrorString");export{a as formatErrorString,c as getErrorCode,f as getErrorMessage,d as getErrorStack,r as hasErrorCode,s as normaliseError};
+var c=Object.defineProperty;var o=(n,e)=>c(n,"name",{value:e,configurable:!0});function p(n){return n instanceof Error?n:new Error(String(n))}o(p,"normaliseError");function s(n){return n instanceof Error?n.message:typeof n=="string"?n:n&&typeof n=="object"&&"message"in n?String(n.message):"An unknown error occurred"}o(s,"getErrorMessage");const r=10;function g(n,e){const i=new Set;let t=n;for(let f=0;f<r&&!(typeof t!="object"||t===null||i.has(t));f++){i.add(t);const u=e(t);if(u!==void 0)return u;t="cause"in t?t.cause:void 0}}o(g,"findOnCauseChain");function E(n,e){return!n||typeof n!="object"?!1:"code"in n&&n.code===e}o(E,"hasErrorCode");function d(n){if(!(!n||typeof n!="object")&&"code"in n&&typeof n.code=="string")return n.code}o(d,"getErrorCode");function l(n){return n instanceof Error?n.stack:void 0}o(l,"getErrorStack");function x(n){const e=s(n),i=d(n);return i&&i!=="UNKNOWN_ERROR"?`[${i}] ${e}`:e}o(x,"formatErrorString");export{g as findOnCauseChain,x as formatErrorString,d as getErrorCode,s as getErrorMessage,l as getErrorStack,E as hasErrorCode,p as normaliseError};

package/dist/index.d.ts

@@ -2,6 +2,7 @@ export { DNS_APEX, getDomainExportNames, getDomainStackName, getDomainUsEast1Cer
 export { BACKUP_VAULT_NAME, BACKUP_VAULT_CONTEXT_KEY, BackupVaultLockSchema, type BackupVaultLock, BackupVaultVerdictSchema, type BackupVaultVerdict, isReownedBackupVault } from "./infra/backupVault.js";
 export { type NonEmptyPartial } from "./nonEmptyPartial.js";
 export { APPROVAL_TOKEN_OUTPUT_PREFIX } from "./deploy/approvalTokenOutput.js";
+export { HUNG_UPDATE_GRACE_MS, HUNG_UPDATE_REATTACH_BUDGET_MS } from "./deploy/hungUpdate.js";
 export { imageTagParameterName } from "./infra/imageTags.js";
 export { toPascalCase, toKebab, toValidDatabaseName, toScreamingSnake, capitalise, getSafeZoneName, accountConstructKey, hasAsciiStableConstructKey } from "./naming/caseConversion.js";
 export { albDnsExportName, albHostedZoneIdExportName, cdnDomainExportName, bucketWebsiteEndpointExportName, bucketWebsiteHostedZoneIdExportName } from "./naming/targetExportNames.js";
@@ -10,8 +11,9 @@ export { stackScopedExportName, DEPLOYABLE_SERVICE_EXPORT_MARKER, DEPLOYABLE_CLU
 export { ec2ServiceName, mintedEc2KeyPairName } from "./naming/ec2Naming.js";
 export { CAPACITY_SLOT_PATTERN, CAPACITY_SLOT_MAX_LENGTH, DEFAULT_CAPACITY_SLOT, CAPACITY_ANCHOR_PATTERN, CAPACITY_ANCHOR_MAX_LENGTH, CAPACITY_IDENTITY_CONTEXT_KEY, CapacityIdentityPinSchema, type CapacityIdentityPin, CapacityIdentityWireSchema, type CapacityIdentityWire, CapacityIdentityConfigSchema, type CapacityIdentityConfig, projectCapacityIdentityToTarget } from "./capacityIdentity.js";
 export { findAccountNameCollision, type AccountNameCollision } from "./naming/accountNameCollision.js";
+export { compareCodeUnits } from "./codeUnitOrder.js";
 export { defaultConnectedAccountName, suffixedAccountName, REGION_SHORT_CODES, findTrailingRegionShortCode, regionSuffixRejectionMessage } from "./naming/connectedAccountName.js";
-export { normaliseError, getErrorMessage, hasErrorCode, getErrorCode, getErrorStack, formatErrorString } from "./errorUtils.js";
+export { normaliseError, findOnCauseChain, getErrorMessage, hasErrorCode, getErrorCode, getErrorStack, formatErrorString } from "./errorUtils.js";
 export { FJALL_CONFIG_DIR_ENV, FJALL_CREDENTIALS_FILENAME, FJALL_HOME_DIRNAME, FJALL_LOG_DIR_ENV, fjallCredentialsPath, fjallHomeDir, fjallLogDir, fjallStatePath } from "./fjallHome.js";
 export { singleton } from "./async/singleton.js";
 export { DANGEROUS_ENV_VARS, filterDangerousEnvVars, MASKED_VALUE_MARKER, maskSensitiveOutput, parseShellArgs, REDACTED_KEY_SENTINEL, SCOPED_TOKEN_REGEX } from "./securityHelpers.js";

package/dist/index.js

@@ -1 +1 @@
-import{DNS_APEX as _,getDomainExportNames as r,getDomainStackName as T,getDomainUsEast1CertificatesStackName as S,hostsExportPartName as A,serialiseHostsChunks as t,HOSTS_OUTPUT_MAX_BYTES as o,isManagedDomainBinding as a,DOMAIN_DEPLOY_DEFAULT_PHASE as N}from"./infra/domainExports.js";import{BACKUP_VAULT_NAME as I,BACKUP_VAULT_CONTEXT_KEY as C,BackupVaultLockSchema as O,BackupVaultVerdictSchema as i,isReownedBackupVault as m}from"./infra/backupVault.js";import{APPROVAL_TOKEN_OUTPUT_PREFIX as n}from"./deploy/approvalTokenOutput.js";import{imageTagParameterName as p}from"./infra/imageTags.js";import{toPascalCase as c,toKebab as D,toValidDatabaseName as M,toScreamingSnake as U,capitalise as f,getSafeZoneName as l,accountConstructKey as F,hasAsciiStableConstructKey as u}from"./naming/caseConversion.js";import{albDnsExportName as d,albHostedZoneIdExportName as G,cdnDomainExportName as g,bucketWebsiteEndpointExportName as V,bucketWebsiteHostedZoneIdExportName as Y}from"./naming/targetExportNames.js";import{APPLICATION_STACKS as K,getApplicationStackName as h,isApplicationStack as y}from"./naming/applicationStackNames.js";import{stackScopedExportName as v,DEPLOYABLE_SERVICE_EXPORT_MARKER as X,DEPLOYABLE_CLUSTER_EXPORT_MARKER as b,CLUSTER_ARN_EXPORT_MARKER as k,VPC_CIDR_EXPORT_MARKER as W,deployableServiceExportName as J,legacyDeployableServiceExportName as j,isDeployableServiceExportName as w,deployableClusterExportName as Z,clusterArnExportName as q,defaultVpcConstructId as z,vpcCidrExportName as Q,legacyVpcCidrExportName as $,isVpcCidrExportName as EE}from"./naming/stackExportNames.js";import{ec2ServiceName as _E,mintedEc2KeyPairName as rE}from"./naming/ec2Naming.js";import{CAPACITY_SLOT_PATTERN as SE,CAPACITY_SLOT_MAX_LENGTH as AE,DEFAULT_CAPACITY_SLOT as tE,CAPACITY_ANCHOR_PATTERN as oE,CAPACITY_ANCHOR_MAX_LENGTH as aE,CAPACITY_IDENTITY_CONTEXT_KEY as NE,CapacityIdentityPinSchema as RE,CapacityIdentityWireSchema as IE,CapacityIdentityConfigSchema as CE,projectCapacityIdentityToTarget as OE}from"./capacityIdentity.js";import{findAccountNameCollision as mE}from"./naming/accountNameCollision.js";import{defaultConnectedAccountName as nE,suffixedAccountName as LE,REGION_SHORT_CODES as pE,findTrailingRegionShortCode as sE,regionSuffixRejectionMessage as cE}from"./naming/connectedAccountName.js";import{normaliseError as ME,getErrorMessage as UE,hasErrorCode as fE,getErrorCode as lE,getErrorStack as FE,formatErrorString as uE}from"./errorUtils.js";import{FJALL_CONFIG_DIR_ENV as dE,FJALL_CREDENTIALS_FILENAME as GE,FJALL_HOME_DIRNAME as gE,FJALL_LOG_DIR_ENV as VE,fjallCredentialsPath as YE,fjallHomeDir as HE,fjallLogDir as KE,fjallStatePath as hE}from"./fjallHome.js";import{singleton as BE}from"./async/singleton.js";import{DANGEROUS_ENV_VARS as XE,filterDangerousEnvVars as bE,MASKED_VALUE_MARKER as kE,maskSensitiveOutput as WE,parseShellArgs as JE,REDACTED_KEY_SENTINEL as jE,SCOPED_TOKEN_REGEX as wE}from"./securityHelpers.js";import{ARGV_ONLY_ENV_POLICY as qE,buildChildEnv as zE,CHILD_ENV_ALLOWED_NAMES as QE,CHILD_ENV_NEVER_NAMES as $E}from"./childEnvPolicy.js";import{sleep as ee}from"./async/sleep.js";import{mapSettledWithConcurrency as re}from"./async/concurrency.js";import{ACCOUNT_STAGES_WITH_ROOT as Se,STRUCTURAL_ENVIRONMENTS as Ae,ACCOUNT_STAGES as te,ACCOUNT_STAGE_LABELS as oe,isAccountStage as ae,ACCOUNT_TIERS as Ne,AccountTierSchema as Re,isAccountTier as Ie,GOVERNANCE_ACCOUNT_TIERS as Ce,isGovernanceTier as Oe,environmentToTier as ie,accountStageEffect as me,ACCOUNT_STAGE_EFFECTS as Pe,formatAccountStageList as ne,stageFromWireEnvironment as Le,accountTier as pe,resolveSynthEnvironment as se,getEnvironmentLabel as ce,ACCOUNT_ROLES as De}from"./environments.js";import{BACKUP_TIERS as Ue,BACKUP_TIER_DEFAULTS as fe,BACKUP_TIER_TAG_KEY as le,BACKUP_TIER_TAG_MAP as Fe,BackupTierSchema as ue,isBackupTier as xe,tierDefault as de}from"./backupTiers.js";import{CODEMOD_STATEMENT_TYPES as ge,isCodemodStatementType as Ve}from"./codemod/statementTypes.js";import{RESOURCE_CATEGORIES as He,categoriseResource as Ke,getExpectedDuration as he,getFriendlyResourceType as ye}from"./resourceCategorisation.js";import{parseGitRemoteUrl as ve}from"./repo/gitRemoteParser.js";import{abbreviateRegion as be,AWS_REGIONS_METADATA as ke,DEFAULT_REGION as We,getRegionInfo as Je,MAX_SECONDARY_REGIONS as je,OPT_IN_REGION_CODES as we,optInRegionWarning as Ze,regions as qe,RETIRED_REGION_ABBREVIATIONS as ze,suggestRegionForTimezone as Qe}from"./infra/regions.js";import{SCOPE_VALUES as E_,MACHINE_ONLY_SCOPES as e_,USER_GRANTABLE_SCOPES as __,GOVERNANCE_SCOPE_REQUIRED_CODE as r_,SESSION_ONLY_API_ROUTES as T_}from"./infra/tokenScopes.js";import{SECRET_NAME_PATTERN as A_,SECRET_NAME_ERROR as t_,SSM_COMPONENT_PATTERN as o_,SSM_COMPONENT_ERROR as a_,SSM_STANDARD_MAX_VALUE_BYTES as N_,SecretNamespaceSchema as R_,buildNamespaceParts as I_,buildParameterPath as C_,parseParameterPath as O_,isManageablePath as i_,parseDotEnv as m_,escapeDotEnvValue as P_}from"./secrets.js";import{ConnectionWireSchema as L_,ConnectionsListResponseSchema as p_,CONNECTION_PHASES as s_,CONNECTION_TERMINAL_FAILURE_PHASES as c_,CONNECTION_FAILURE_REASONS as D_,EXTERNAL_ID_PATTERN as M_}from"./infra/connectionsWire.js";import{COMPLIANCE_ISSUE_STATUSES as f_,isComplianceIssueStatus as l_,COMPLIANCE_ISSUE_SEVERITIES as F_}from"./complianceIssue.js";import{CI_PROVIDERS as x_,CI_SETUP_FIELDS as d_}from"./ciSetup.js";import{INFRASTRUCTURE_TIER_NAMES as g_,CUSTOM_APP_TYPE as V_,APP_TYPES as Y_}from"./appTypes.js";import{INSIGHT_TAB_VALUES as K_,INSIGHT_CATEGORIES as h_,INSIGHT_SEVERITIES as y_,INSIGHT_SORT_VALUES as B_}from"./insights/vocabulary.js";import{PUBLIC_PACKAGE_NAME as X_,INSTALL_SOURCES as b_,SETUP_COMMANDS as k_,upgradeCommand as W_,SETUP_MODES as J_,SETUP_STEP_IDS as j_,SETUP_STEPS as w_,AGENT_SETUP_PROMPTS as Z_,AGENT_INSTALL_COMMAND as q_,SKILL_INSTALL_SEGMENTS as z_,SKILL_INSTALL_FILENAME as Q_,SKILL_INSTALL_PATH as $_}from"./onboarding/index.js";import{deriveRegionsFromOrgConfig as er,deriveTargets as _r,deriveAllTargets as rr,environmentOrTier as Tr,explainRetiredTargetName as Sr,findTarget as Ar,generateTargetName as tr}from"./targets.js";import{buildAppConfigPath as ar}from"./repo/appPath.js";import{findInfrastructurePaths as Rr,findBoundaryPath as Ir,isInfrastructureFile as Cr}from"./repo/findInfrastructurePaths.js";import{inferContainerFromCandidates as ir}from"./repo/inferContainerFromCandidates.js";import{RESERVED_APP_NAMES as Pr,RESERVED_APP_NAME_MESSAGE as nr,isReservedAppName as Lr,RESERVED_APP_NAME_SUFFIX as pr,RESERVED_APP_NAME_SUFFIX_MESSAGE as sr,hasReservedAppNameSuffix as cr}from"./naming/reservedAppNames.js";import{deriveContentHashTag as Mr,CONTENT_HASH_TAG_PATTERN as Ur}from"./infra/deriveContentHashTag.js";import{DEPLOY_MODES as lr,DeployModeSchema as Fr,IMAGE_TAG_PATTERN as ur,ImageTagSchema as xr,ServiceArtefactSchema as dr,ServiceArtefactsSchema as Gr,ARTEFACT_OUTPUT_FIELDS as gr,artefactOutputKey as Vr}from"./infra/deployArtefacts.js";import{MIGRATION_SNAPSHOT_NAME_PREFIX as Hr,MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV as Kr,MIGRATION_SNAPSHOT_KIND_TAG_KEY as hr,MIGRATION_SNAPSHOT_KIND_PREMIGRATE as yr,EXPECTED_SCHEMA_VERSION_ENV as Br,EXPECTED_SCHEMA_VERSION_TOOL_ENV as vr,EXPECTED_CH_SCHEMA_VERSION_ENV as Xr,SCHEMA_ADMIN_USER_ENV as br,SCHEMA_ADMIN_PASSWORD_ENV as kr,PRISMA_MIGRATION_DIR_RE as Wr,CLICKHOUSE_MIGRATION_SKIP_RE as Jr}from"./migration/constants.js";import{SCHEMA_GATE_EXIT as wr,SCHEMA_GATE_EXIT_HINTS as Zr,schemaGateExitKind as qr}from"./migration/schemaGateExit.js";import{FJALL_SCHEMA_GATE_USER as Qr,FJALL_MAINTENANCE_USER as $r,FJALL_CLICKHOUSE_USERS as ET}from"./migration/clickhouseFrameworkUsers.js";import{PHYSICAL_NAME_FALLBACK_PROPERTIES as _T}from"./cfn/physicalNameProperties.js";import{PATTERN_TYPE_VALUES as TT,PATTERN_TYPES as ST,isPatternType as AT,PATTERN_REGISTRY as tT,patternConstructId as oT,DEPLOYABLE_PATTERN_TYPES as aT,PATTERN_TIER_VALUES as NT,OPENNEXT_PATTERN_TYPES as RT,isOpenNextPatternType as IT,OPENNEXT_BUCKET_KEYS as CT,isOpenNextBucketKey as OT,patternBucketConstructId as iT,CLOUDFRONT_PRICE_CLASS_VALUES as mT,STATIC_SITE_CONFIG_KEYS as PT,STATIC_SITE_DEPLOY_INJECTED_KEYS as nT,STATIC_SITE_CDN_CONFIG_KEYS as LT,STATIC_SITE_ROUTING_VALUES as pT,STATIC_SITE_ROUTING_INFO as sT,PATTERN_CREATE_INPUT_VALUES as cT,PATTERN_CREATE_INPUT_FLAGS as DT}from"./patterns/patternTypes.js";import{FRAMEWORK_VALUES as UT,FRAMEWORKS as fT,isFramework as lT,FRAMEWORK_PATTERN_RECOMMENDATIONS as FT,recommendPatternForFramework as uT,CREATABLE_FRAMEWORKS as xT,requiredInputsForFramework as dT}from"./patterns/frameworkPatterns.js";import{DEFAULT_FORMS_FROM_LOCAL_PART as gT,defaultFormsFromAddress as VT,defaultFormsCorsOrigin as YT,isAddressAtDomain as HT}from"./patterns/staticSiteForms.js";import{DEV_SUBSTRATE_PARAMS_SCHEMA_VERSION as hT,DEV_SUBSTRATE_PARAMS_FILENAME as yT,DevSubstrateSynthPropsSchema as BT,DevSubstrateParamsSchema as vT}from"./devSubstrate/params.js";import{DEV_SUBSTRATE_ENTRYPOINT_SOURCE as bT}from"./devSubstrate/entrypoint.js";import{BLESSED_CDK_TOOLCHAIN as WT}from"./cdkToolchain.js";import{DEPLOYMENT_FAILURE_PHASES as jT,DeploymentFailurePhaseSchema as wT,DEPLOYMENT_FAULT_ATTRIBUTIONS as ZT,DeploymentFaultAttributionSchema as qT,DEPLOYMENT_FAILURE_PROVIDER_SOURCES as zT,DeploymentFailureProviderSourceSchema as QT,DEPLOYMENT_FAILURE_CODE_PATTERN as $T,DEPLOYMENT_FAILURE_SCHEMA_VERSION as ES,DEPLOYMENT_FAILURE_LIMITS as eS,DeploymentFailureAnalysisSchema as _S,DeploymentFailureProviderSchema as rS,DeploymentFailureResourceSchema as TS,DeploymentFailureSchema as SS,parseDeploymentFailure as AS,DEPLOYMENT_FAILURE_DOCS_BASE_URL as tS,deploymentFailureDocsUrl as oS,DEPLOYMENT_FAULT_COPY as aS,DEPLOYMENT_PROVIDER_LABELS as NS,deriveErrorMessageFromFailure as RS,toDeploymentFailureAnalysis as IS}from"./failure/deploymentFailure.js";import{extractErrorWindow as OS,ERROR_WINDOW_CONTEXT_LINES as iS}from"./failure/extractErrorWindow.js";import{FJALL_COMPONENT_GITIGNORE as PS,FJALL_PROJECT_GITIGNORE as nS,FJALL_STATE_GITIGNORE_ENTRIES as LS,FJALL_MANAGED_STATE_DIR_ENTRIES as pS,LOCAL_CONFIG_GITIGNORE_ENTRY as sS}from"./scaffold/gitignore.js";import{ensureGitignoreEntries as DS}from"./scaffold/ensureGitignore.js";export{De as ACCOUNT_ROLES,te as ACCOUNT_STAGES,Se as ACCOUNT_STAGES_WITH_ROOT,Pe as ACCOUNT_STAGE_EFFECTS,oe as ACCOUNT_STAGE_LABELS,Ne as ACCOUNT_TIERS,q_ as AGENT_INSTALL_COMMAND,Z_ as AGENT_SETUP_PROMPTS,K as APPLICATION_STACKS,n as APPROVAL_TOKEN_OUTPUT_PREFIX,Y_ as APP_TYPES,qE as ARGV_ONLY_ENV_POLICY,gr as ARTEFACT_OUTPUT_FIELDS,ke as AWS_REGIONS_METADATA,Re as AccountTierSchema,Ue as BACKUP_TIERS,fe as BACKUP_TIER_DEFAULTS,le as BACKUP_TIER_TAG_KEY,Fe as BACKUP_TIER_TAG_MAP,C as BACKUP_VAULT_CONTEXT_KEY,I as BACKUP_VAULT_NAME,WT as BLESSED_CDK_TOOLCHAIN,ue as BackupTierSchema,O as BackupVaultLockSchema,i as BackupVaultVerdictSchema,aE as CAPACITY_ANCHOR_MAX_LENGTH,oE as CAPACITY_ANCHOR_PATTERN,NE as CAPACITY_IDENTITY_CONTEXT_KEY,AE as CAPACITY_SLOT_MAX_LENGTH,SE as CAPACITY_SLOT_PATTERN,QE as CHILD_ENV_ALLOWED_NAMES,$E as CHILD_ENV_NEVER_NAMES,x_ as CI_PROVIDERS,d_ as CI_SETUP_FIELDS,Jr as CLICKHOUSE_MIGRATION_SKIP_RE,mT as CLOUDFRONT_PRICE_CLASS_VALUES,k as CLUSTER_ARN_EXPORT_MARKER,ge as CODEMOD_STATEMENT_TYPES,F_ as COMPLIANCE_ISSUE_SEVERITIES,f_ as COMPLIANCE_ISSUE_STATUSES,D_ as CONNECTION_FAILURE_REASONS,s_ as CONNECTION_PHASES,c_ as CONNECTION_TERMINAL_FAILURE_PHASES,Ur as CONTENT_HASH_TAG_PATTERN,xT as CREATABLE_FRAMEWORKS,V_ as CUSTOM_APP_TYPE,CE as CapacityIdentityConfigSchema,RE as CapacityIdentityPinSchema,IE as CapacityIdentityWireSchema,L_ as ConnectionWireSchema,p_ as ConnectionsListResponseSchema,XE as DANGEROUS_ENV_VARS,tE as DEFAULT_CAPACITY_SLOT,gT as DEFAULT_FORMS_FROM_LOCAL_PART,We as DEFAULT_REGION,b as DEPLOYABLE_CLUSTER_EXPORT_MARKER,aT as DEPLOYABLE_PATTERN_TYPES,X as DEPLOYABLE_SERVICE_EXPORT_MARKER,$T as DEPLOYMENT_FAILURE_CODE_PATTERN,tS as DEPLOYMENT_FAILURE_DOCS_BASE_URL,eS as DEPLOYMENT_FAILURE_LIMITS,jT as DEPLOYMENT_FAILURE_PHASES,zT as DEPLOYMENT_FAILURE_PROVIDER_SOURCES,ES as DEPLOYMENT_FAILURE_SCHEMA_VERSION,ZT as DEPLOYMENT_FAULT_ATTRIBUTIONS,aS as DEPLOYMENT_FAULT_COPY,NS as DEPLOYMENT_PROVIDER_LABELS,lr as DEPLOY_MODES,bT as DEV_SUBSTRATE_ENTRYPOINT_SOURCE,yT as DEV_SUBSTRATE_PARAMS_FILENAME,hT as DEV_SUBSTRATE_PARAMS_SCHEMA_VERSION,_ as DNS_APEX,N as DOMAIN_DEPLOY_DEFAULT_PHASE,Fr as DeployModeSchema,_S as DeploymentFailureAnalysisSchema,wT as DeploymentFailurePhaseSchema,rS as DeploymentFailureProviderSchema,QT as DeploymentFailureProviderSourceSchema,TS as DeploymentFailureResourceSchema,SS as DeploymentFailureSchema,qT as DeploymentFaultAttributionSchema,vT as DevSubstrateParamsSchema,BT as DevSubstrateSynthPropsSchema,iS as ERROR_WINDOW_CONTEXT_LINES,Xr as EXPECTED_CH_SCHEMA_VERSION_ENV,Br as EXPECTED_SCHEMA_VERSION_ENV,vr as EXPECTED_SCHEMA_VERSION_TOOL_ENV,M_ as EXTERNAL_ID_PATTERN,ET as FJALL_CLICKHOUSE_USERS,PS as FJALL_COMPONENT_GITIGNORE,dE as FJALL_CONFIG_DIR_ENV,GE as FJALL_CREDENTIALS_FILENAME,gE as FJALL_HOME_DIRNAME,VE as FJALL_LOG_DIR_ENV,$r as FJALL_MAINTENANCE_USER,pS as FJALL_MANAGED_STATE_DIR_ENTRIES,nS as FJALL_PROJECT_GITIGNORE,Qr as FJALL_SCHEMA_GATE_USER,LS as FJALL_STATE_GITIGNORE_ENTRIES,fT as FRAMEWORKS,FT as FRAMEWORK_PATTERN_RECOMMENDATIONS,UT as FRAMEWORK_VALUES,Ce as GOVERNANCE_ACCOUNT_TIERS,r_ as GOVERNANCE_SCOPE_REQUIRED_CODE,o as HOSTS_OUTPUT_MAX_BYTES,ur as IMAGE_TAG_PATTERN,g_ as INFRASTRUCTURE_TIER_NAMES,h_ as INSIGHT_CATEGORIES,y_ as INSIGHT_SEVERITIES,B_ as INSIGHT_SORT_VALUES,K_ as INSIGHT_TAB_VALUES,b_ as INSTALL_SOURCES,xr as ImageTagSchema,sS as LOCAL_CONFIG_GITIGNORE_ENTRY,e_ as MACHINE_ONLY_SCOPES,kE as MASKED_VALUE_MARKER,je as MAX_SECONDARY_REGIONS,yr as MIGRATION_SNAPSHOT_KIND_PREMIGRATE,hr as MIGRATION_SNAPSHOT_KIND_TAG_KEY,Hr as MIGRATION_SNAPSHOT_NAME_PREFIX,Kr as MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV,CT as OPENNEXT_BUCKET_KEYS,RT as OPENNEXT_PATTERN_TYPES,we as OPT_IN_REGION_CODES,DT as PATTERN_CREATE_INPUT_FLAGS,cT as PATTERN_CREATE_INPUT_VALUES,tT as PATTERN_REGISTRY,NT as PATTERN_TIER_VALUES,ST as PATTERN_TYPES,TT as PATTERN_TYPE_VALUES,_T as PHYSICAL_NAME_FALLBACK_PROPERTIES,Wr as PRISMA_MIGRATION_DIR_RE,X_ as PUBLIC_PACKAGE_NAME,jE as REDACTED_KEY_SENTINEL,pE as REGION_SHORT_CODES,Pr as RESERVED_APP_NAMES,nr as RESERVED_APP_NAME_MESSAGE,pr as RESERVED_APP_NAME_SUFFIX,sr as RESERVED_APP_NAME_SUFFIX_MESSAGE,He as RESOURCE_CATEGORIES,ze as RETIRED_REGION_ABBREVIATIONS,kr as SCHEMA_ADMIN_PASSWORD_ENV,br as SCHEMA_ADMIN_USER_ENV,wr as SCHEMA_GATE_EXIT,Zr as SCHEMA_GATE_EXIT_HINTS,wE as SCOPED_TOKEN_REGEX,E_ as SCOPE_VALUES,t_ as SECRET_NAME_ERROR,A_ as SECRET_NAME_PATTERN,T_ as SESSION_ONLY_API_ROUTES,k_ as SETUP_COMMANDS,J_ as SETUP_MODES,w_ as SETUP_STEPS,j_ as SETUP_STEP_IDS,Q_ as SKILL_INSTALL_FILENAME,$_ as SKILL_INSTALL_PATH,z_ as SKILL_INSTALL_SEGMENTS,a_ as SSM_COMPONENT_ERROR,o_ as SSM_COMPONENT_PATTERN,N_ as SSM_STANDARD_MAX_VALUE_BYTES,LT as STATIC_SITE_CDN_CONFIG_KEYS,PT as STATIC_SITE_CONFIG_KEYS,nT as STATIC_SITE_DEPLOY_INJECTED_KEYS,sT as STATIC_SITE_ROUTING_INFO,pT as STATIC_SITE_ROUTING_VALUES,Ae as STRUCTURAL_ENVIRONMENTS,R_ as SecretNamespaceSchema,dr as ServiceArtefactSchema,Gr as ServiceArtefactsSchema,__ as USER_GRANTABLE_SCOPES,W as VPC_CIDR_EXPORT_MARKER,be as abbreviateRegion,F as accountConstructKey,me as accountStageEffect,pe as accountTier,d as albDnsExportName,G as albHostedZoneIdExportName,Vr as artefactOutputKey,V as bucketWebsiteEndpointExportName,Y as bucketWebsiteHostedZoneIdExportName,ar as buildAppConfigPath,zE as buildChildEnv,I_ as buildNamespaceParts,C_ as buildParameterPath,f as capitalise,Ke as categoriseResource,g as cdnDomainExportName,q as clusterArnExportName,nE as defaultConnectedAccountName,YT as defaultFormsCorsOrigin,VT as defaultFormsFromAddress,z as defaultVpcConstructId,Z as deployableClusterExportName,J as deployableServiceExportName,oS as deploymentFailureDocsUrl,rr as deriveAllTargets,Mr as deriveContentHashTag,RS as deriveErrorMessageFromFailure,er as deriveRegionsFromOrgConfig,_r as deriveTargets,_E as ec2ServiceName,DS as ensureGitignoreEntries,Tr as environmentOrTier,ie as environmentToTier,P_ as escapeDotEnvValue,Sr as explainRetiredTargetName,OS as extractErrorWindow,bE as filterDangerousEnvVars,mE as findAccountNameCollision,Ir as findBoundaryPath,Rr as findInfrastructurePaths,Ar as findTarget,sE as findTrailingRegionShortCode,YE as fjallCredentialsPath,HE as fjallHomeDir,KE as fjallLogDir,hE as fjallStatePath,ne as formatAccountStageList,uE as formatErrorString,tr as generateTargetName,h as getApplicationStackName,r as getDomainExportNames,T as getDomainStackName,S as getDomainUsEast1CertificatesStackName,ce as getEnvironmentLabel,lE as getErrorCode,UE as getErrorMessage,FE as getErrorStack,he as getExpectedDuration,ye as getFriendlyResourceType,Je as getRegionInfo,l as getSafeZoneName,u as hasAsciiStableConstructKey,fE as hasErrorCode,cr as hasReservedAppNameSuffix,A as hostsExportPartName,p as imageTagParameterName,ir as inferContainerFromCandidates,ae as isAccountStage,Ie as isAccountTier,HT as isAddressAtDomain,y as isApplicationStack,xe as isBackupTier,Ve as isCodemodStatementType,l_ as isComplianceIssueStatus,w as isDeployableServiceExportName,lT as isFramework,Oe as isGovernanceTier,Cr as isInfrastructureFile,i_ as isManageablePath,a as isManagedDomainBinding,OT as isOpenNextBucketKey,IT as isOpenNextPatternType,AT as isPatternType,m as isReownedBackupVault,Lr as isReservedAppName,EE as isVpcCidrExportName,j as legacyDeployableServiceExportName,$ as legacyVpcCidrExportName,re as mapSettledWithConcurrency,WE as maskSensitiveOutput,rE as mintedEc2KeyPairName,ME as normaliseError,Ze as optInRegionWarning,AS as parseDeploymentFailure,m_ as parseDotEnv,ve as parseGitRemoteUrl,O_ as parseParameterPath,JE as parseShellArgs,iT as patternBucketConstructId,oT as patternConstructId,OE as projectCapacityIdentityToTarget,uT as recommendPatternForFramework,cE as regionSuffixRejectionMessage,qe as regions,dT as requiredInputsForFramework,se as resolveSynthEnvironment,qr as schemaGateExitKind,t as serialiseHostsChunks,BE as singleton,ee as sleep,v as stackScopedExportName,Le as stageFromWireEnvironment,LE as suffixedAccountName,Qe as suggestRegionForTimezone,de as tierDefault,IS as toDeploymentFailureAnalysis,D as toKebab,c as toPascalCase,U as toScreamingSnake,M as toValidDatabaseName,W_ as upgradeCommand,Q as vpcCidrExportName};
+import{DNS_APEX as _,getDomainExportNames as r,getDomainStackName as T,getDomainUsEast1CertificatesStackName as S,hostsExportPartName as A,serialiseHostsChunks as t,HOSTS_OUTPUT_MAX_BYTES as o,isManagedDomainBinding as a,DOMAIN_DEPLOY_DEFAULT_PHASE as N}from"./infra/domainExports.js";import{BACKUP_VAULT_NAME as I,BACKUP_VAULT_CONTEXT_KEY as C,BackupVaultLockSchema as O,BackupVaultVerdictSchema as i,isReownedBackupVault as m}from"./infra/backupVault.js";import{APPROVAL_TOKEN_OUTPUT_PREFIX as n}from"./deploy/approvalTokenOutput.js";import{HUNG_UPDATE_GRACE_MS as p,HUNG_UPDATE_REATTACH_BUDGET_MS as s}from"./deploy/hungUpdate.js";import{imageTagParameterName as D}from"./infra/imageTags.js";import{toPascalCase as U,toKebab as f,toValidDatabaseName as l,toScreamingSnake as u,capitalise as x,getSafeZoneName as F,accountConstructKey as d,hasAsciiStableConstructKey as G}from"./naming/caseConversion.js";import{albDnsExportName as V,albHostedZoneIdExportName as Y,cdnDomainExportName as H,bucketWebsiteEndpointExportName as K,bucketWebsiteHostedZoneIdExportName as h}from"./naming/targetExportNames.js";import{APPLICATION_STACKS as B,getApplicationStackName as v,isApplicationStack as X}from"./naming/applicationStackNames.js";import{stackScopedExportName as k,DEPLOYABLE_SERVICE_EXPORT_MARKER as W,DEPLOYABLE_CLUSTER_EXPORT_MARKER as J,CLUSTER_ARN_EXPORT_MARKER as j,VPC_CIDR_EXPORT_MARKER as w,deployableServiceExportName as Z,legacyDeployableServiceExportName as q,isDeployableServiceExportName as z,deployableClusterExportName as Q,clusterArnExportName as $,defaultVpcConstructId as EE,vpcCidrExportName as eE,legacyVpcCidrExportName as _E,isVpcCidrExportName as rE}from"./naming/stackExportNames.js";import{ec2ServiceName as SE,mintedEc2KeyPairName as AE}from"./naming/ec2Naming.js";import{CAPACITY_SLOT_PATTERN as oE,CAPACITY_SLOT_MAX_LENGTH as aE,DEFAULT_CAPACITY_SLOT as NE,CAPACITY_ANCHOR_PATTERN as RE,CAPACITY_ANCHOR_MAX_LENGTH as IE,CAPACITY_IDENTITY_CONTEXT_KEY as CE,CapacityIdentityPinSchema as OE,CapacityIdentityWireSchema as iE,CapacityIdentityConfigSchema as mE,projectCapacityIdentityToTarget as PE}from"./capacityIdentity.js";import{findAccountNameCollision as LE}from"./naming/accountNameCollision.js";import{compareCodeUnits as sE}from"./codeUnitOrder.js";import{defaultConnectedAccountName as DE,suffixedAccountName as ME,REGION_SHORT_CODES as UE,findTrailingRegionShortCode as fE,regionSuffixRejectionMessage as lE}from"./naming/connectedAccountName.js";import{normaliseError as xE,findOnCauseChain as FE,getErrorMessage as dE,hasErrorCode as GE,getErrorCode as gE,getErrorStack as VE,formatErrorString as YE}from"./errorUtils.js";import{FJALL_CONFIG_DIR_ENV as KE,FJALL_CREDENTIALS_FILENAME as hE,FJALL_HOME_DIRNAME as yE,FJALL_LOG_DIR_ENV as BE,fjallCredentialsPath as vE,fjallHomeDir as XE,fjallLogDir as bE,fjallStatePath as kE}from"./fjallHome.js";import{singleton as JE}from"./async/singleton.js";import{DANGEROUS_ENV_VARS as wE,filterDangerousEnvVars as ZE,MASKED_VALUE_MARKER as qE,maskSensitiveOutput as zE,parseShellArgs as QE,REDACTED_KEY_SENTINEL as $E,SCOPED_TOKEN_REGEX as Ee}from"./securityHelpers.js";import{ARGV_ONLY_ENV_POLICY as _e,buildChildEnv as re,CHILD_ENV_ALLOWED_NAMES as Te,CHILD_ENV_NEVER_NAMES as Se}from"./childEnvPolicy.js";import{sleep as te}from"./async/sleep.js";import{mapSettledWithConcurrency as ae}from"./async/concurrency.js";import{ACCOUNT_STAGES_WITH_ROOT as Re,STRUCTURAL_ENVIRONMENTS as Ie,ACCOUNT_STAGES as Ce,ACCOUNT_STAGE_LABELS as Oe,isAccountStage as ie,ACCOUNT_TIERS as me,AccountTierSchema as Pe,isAccountTier as ne,GOVERNANCE_ACCOUNT_TIERS as Le,isGovernanceTier as pe,environmentToTier as se,accountStageEffect as ce,ACCOUNT_STAGE_EFFECTS as De,formatAccountStageList as Me,stageFromWireEnvironment as Ue,accountTier as fe,resolveSynthEnvironment as le,getEnvironmentLabel as ue,ACCOUNT_ROLES as xe}from"./environments.js";import{BACKUP_TIERS as de,BACKUP_TIER_DEFAULTS as Ge,BACKUP_TIER_TAG_KEY as ge,BACKUP_TIER_TAG_MAP as Ve,BackupTierSchema as Ye,isBackupTier as He,tierDefault as Ke}from"./backupTiers.js";import{CODEMOD_STATEMENT_TYPES as ye,isCodemodStatementType as Be}from"./codemod/statementTypes.js";import{RESOURCE_CATEGORIES as Xe,categoriseResource as be,getExpectedDuration as ke,getFriendlyResourceType as We}from"./resourceCategorisation.js";import{parseGitRemoteUrl as je}from"./repo/gitRemoteParser.js";import{abbreviateRegion as Ze,AWS_REGIONS_METADATA as qe,DEFAULT_REGION as ze,getRegionInfo as Qe,MAX_SECONDARY_REGIONS as $e,OPT_IN_REGION_CODES as E_,optInRegionWarning as e_,regions as __,RETIRED_REGION_ABBREVIATIONS as r_,suggestRegionForTimezone as T_}from"./infra/regions.js";import{SCOPE_VALUES as A_,MACHINE_ONLY_SCOPES as t_,USER_GRANTABLE_SCOPES as o_,GOVERNANCE_SCOPE_REQUIRED_CODE as a_,SESSION_ONLY_API_ROUTES as N_}from"./infra/tokenScopes.js";import{SECRET_NAME_PATTERN as I_,SECRET_NAME_ERROR as C_,SSM_COMPONENT_PATTERN as O_,SSM_COMPONENT_ERROR as i_,SSM_STANDARD_MAX_VALUE_BYTES as m_,SecretNamespaceSchema as P_,buildNamespaceParts as n_,buildParameterPath as L_,parseParameterPath as p_,isManageablePath as s_,parseDotEnv as c_,escapeDotEnvValue as D_}from"./secrets.js";import{ConnectionWireSchema as U_,ConnectionsListResponseSchema as f_,CONNECTION_PHASES as l_,CONNECTION_TERMINAL_FAILURE_PHASES as u_,CONNECTION_FAILURE_REASONS as x_,EXTERNAL_ID_PATTERN as F_}from"./infra/connectionsWire.js";import{COMPLIANCE_ISSUE_STATUSES as G_,isComplianceIssueStatus as g_,COMPLIANCE_ISSUE_SEVERITIES as V_}from"./complianceIssue.js";import{CI_PROVIDERS as H_,CI_SETUP_FIELDS as K_}from"./ciSetup.js";import{INFRASTRUCTURE_TIER_NAMES as y_,CUSTOM_APP_TYPE as B_,APP_TYPES as v_}from"./appTypes.js";import{INSIGHT_TAB_VALUES as b_,INSIGHT_CATEGORIES as k_,INSIGHT_SEVERITIES as W_,INSIGHT_SORT_VALUES as J_}from"./insights/vocabulary.js";import{PUBLIC_PACKAGE_NAME as w_,INSTALL_SOURCES as Z_,SETUP_COMMANDS as q_,upgradeCommand as z_,SETUP_MODES as Q_,SETUP_STEP_IDS as $_,SETUP_STEPS as Er,AGENT_SETUP_PROMPTS as er,AGENT_INSTALL_COMMAND as _r,SKILL_INSTALL_SEGMENTS as rr,SKILL_INSTALL_FILENAME as Tr,SKILL_INSTALL_PATH as Sr}from"./onboarding/index.js";import{deriveRegionsFromOrgConfig as tr,deriveTargets as or,deriveAllTargets as ar,environmentOrTier as Nr,explainRetiredTargetName as Rr,findTarget as Ir,generateTargetName as Cr}from"./targets.js";import{buildAppConfigPath as ir}from"./repo/appPath.js";import{findInfrastructurePaths as Pr,findBoundaryPath as nr,isInfrastructureFile as Lr}from"./repo/findInfrastructurePaths.js";import{inferContainerFromCandidates as sr}from"./repo/inferContainerFromCandidates.js";import{RESERVED_APP_NAMES as Dr,RESERVED_APP_NAME_MESSAGE as Mr,isReservedAppName as Ur,RESERVED_APP_NAME_SUFFIX as fr,RESERVED_APP_NAME_SUFFIX_MESSAGE as lr,hasReservedAppNameSuffix as ur}from"./naming/reservedAppNames.js";import{deriveContentHashTag as Fr,CONTENT_HASH_TAG_PATTERN as dr}from"./infra/deriveContentHashTag.js";import{DEPLOY_MODES as gr,DeployModeSchema as Vr,IMAGE_TAG_PATTERN as Yr,ImageTagSchema as Hr,ServiceArtefactSchema as Kr,ServiceArtefactsSchema as hr,ARTEFACT_OUTPUT_FIELDS as yr,artefactOutputKey as Br}from"./infra/deployArtefacts.js";import{MIGRATION_SNAPSHOT_NAME_PREFIX as Xr,MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV as br,MIGRATION_SNAPSHOT_KIND_TAG_KEY as kr,MIGRATION_SNAPSHOT_KIND_PREMIGRATE as Wr,EXPECTED_SCHEMA_VERSION_ENV as Jr,EXPECTED_SCHEMA_VERSION_TOOL_ENV as jr,EXPECTED_CH_SCHEMA_VERSION_ENV as wr,SCHEMA_ADMIN_USER_ENV as Zr,SCHEMA_ADMIN_PASSWORD_ENV as qr,PRISMA_MIGRATION_DIR_RE as zr,CLICKHOUSE_MIGRATION_SKIP_RE as Qr}from"./migration/constants.js";import{SCHEMA_GATE_EXIT as ET,SCHEMA_GATE_EXIT_HINTS as eT,schemaGateExitKind as _T}from"./migration/schemaGateExit.js";import{FJALL_SCHEMA_GATE_USER as TT,FJALL_MAINTENANCE_USER as ST,FJALL_CLICKHOUSE_USERS as AT}from"./migration/clickhouseFrameworkUsers.js";import{PHYSICAL_NAME_FALLBACK_PROPERTIES as oT}from"./cfn/physicalNameProperties.js";import{PATTERN_TYPE_VALUES as NT,PATTERN_TYPES as RT,isPatternType as IT,PATTERN_REGISTRY as CT,patternConstructId as OT,DEPLOYABLE_PATTERN_TYPES as iT,PATTERN_TIER_VALUES as mT,OPENNEXT_PATTERN_TYPES as PT,isOpenNextPatternType as nT,OPENNEXT_BUCKET_KEYS as LT,isOpenNextBucketKey as pT,patternBucketConstructId as sT,CLOUDFRONT_PRICE_CLASS_VALUES as cT,STATIC_SITE_CONFIG_KEYS as DT,STATIC_SITE_DEPLOY_INJECTED_KEYS as MT,STATIC_SITE_CDN_CONFIG_KEYS as UT,STATIC_SITE_ROUTING_VALUES as fT,STATIC_SITE_ROUTING_INFO as lT,PATTERN_CREATE_INPUT_VALUES as uT,PATTERN_CREATE_INPUT_FLAGS as xT}from"./patterns/patternTypes.js";import{FRAMEWORK_VALUES as dT,FRAMEWORKS as GT,isFramework as gT,FRAMEWORK_PATTERN_RECOMMENDATIONS as VT,recommendPatternForFramework as YT,CREATABLE_FRAMEWORKS as HT,requiredInputsForFramework as KT}from"./patterns/frameworkPatterns.js";import{DEFAULT_FORMS_FROM_LOCAL_PART as yT,defaultFormsFromAddress as BT,defaultFormsCorsOrigin as vT,isAddressAtDomain as XT}from"./patterns/staticSiteForms.js";import{DEV_SUBSTRATE_PARAMS_SCHEMA_VERSION as kT,DEV_SUBSTRATE_PARAMS_FILENAME as WT,DevSubstrateSynthPropsSchema as JT,DevSubstrateParamsSchema as jT}from"./devSubstrate/params.js";import{DEV_SUBSTRATE_ENTRYPOINT_SOURCE as ZT}from"./devSubstrate/entrypoint.js";import{BLESSED_CDK_TOOLCHAIN as zT}from"./cdkToolchain.js";import{DEPLOYMENT_FAILURE_PHASES as $T,DeploymentFailurePhaseSchema as ES,DEPLOYMENT_FAULT_ATTRIBUTIONS as eS,DeploymentFaultAttributionSchema as _S,DEPLOYMENT_FAILURE_PROVIDER_SOURCES as rS,DeploymentFailureProviderSourceSchema as TS,DEPLOYMENT_FAILURE_CODE_PATTERN as SS,DEPLOYMENT_FAILURE_SCHEMA_VERSION as AS,DEPLOYMENT_FAILURE_LIMITS as tS,DeploymentFailureAnalysisSchema as oS,DeploymentFailureProviderSchema as aS,DeploymentFailureResourceSchema as NS,DeploymentFailureSchema as RS,parseDeploymentFailure as IS,DEPLOYMENT_FAILURE_DOCS_BASE_URL as CS,deploymentFailureDocsUrl as OS,DEPLOYMENT_FAULT_COPY as iS,DEPLOYMENT_PROVIDER_LABELS as mS,deriveErrorMessageFromFailure as PS,toDeploymentFailureAnalysis as nS}from"./failure/deploymentFailure.js";import{extractErrorWindow as pS,ERROR_WINDOW_CONTEXT_LINES as sS}from"./failure/extractErrorWindow.js";import{FJALL_COMPONENT_GITIGNORE as DS,FJALL_PROJECT_GITIGNORE as MS,FJALL_STATE_GITIGNORE_ENTRIES as US,FJALL_MANAGED_STATE_DIR_ENTRIES as fS,LOCAL_CONFIG_GITIGNORE_ENTRY as lS}from"./scaffold/gitignore.js";import{ensureGitignoreEntries as xS}from"./scaffold/ensureGitignore.js";export{xe as ACCOUNT_ROLES,Ce as ACCOUNT_STAGES,Re as ACCOUNT_STAGES_WITH_ROOT,De as ACCOUNT_STAGE_EFFECTS,Oe as ACCOUNT_STAGE_LABELS,me as ACCOUNT_TIERS,_r as AGENT_INSTALL_COMMAND,er as AGENT_SETUP_PROMPTS,B as APPLICATION_STACKS,n as APPROVAL_TOKEN_OUTPUT_PREFIX,v_ as APP_TYPES,_e as ARGV_ONLY_ENV_POLICY,yr as ARTEFACT_OUTPUT_FIELDS,qe as AWS_REGIONS_METADATA,Pe as AccountTierSchema,de as BACKUP_TIERS,Ge as BACKUP_TIER_DEFAULTS,ge as BACKUP_TIER_TAG_KEY,Ve as BACKUP_TIER_TAG_MAP,C as BACKUP_VAULT_CONTEXT_KEY,I as BACKUP_VAULT_NAME,zT as BLESSED_CDK_TOOLCHAIN,Ye as BackupTierSchema,O as BackupVaultLockSchema,i as BackupVaultVerdictSchema,IE as CAPACITY_ANCHOR_MAX_LENGTH,RE as CAPACITY_ANCHOR_PATTERN,CE as CAPACITY_IDENTITY_CONTEXT_KEY,aE as CAPACITY_SLOT_MAX_LENGTH,oE as CAPACITY_SLOT_PATTERN,Te as CHILD_ENV_ALLOWED_NAMES,Se as CHILD_ENV_NEVER_NAMES,H_ as CI_PROVIDERS,K_ as CI_SETUP_FIELDS,Qr as CLICKHOUSE_MIGRATION_SKIP_RE,cT as CLOUDFRONT_PRICE_CLASS_VALUES,j as CLUSTER_ARN_EXPORT_MARKER,ye as CODEMOD_STATEMENT_TYPES,V_ as COMPLIANCE_ISSUE_SEVERITIES,G_ as COMPLIANCE_ISSUE_STATUSES,x_ as CONNECTION_FAILURE_REASONS,l_ as CONNECTION_PHASES,u_ as CONNECTION_TERMINAL_FAILURE_PHASES,dr as CONTENT_HASH_TAG_PATTERN,HT as CREATABLE_FRAMEWORKS,B_ as CUSTOM_APP_TYPE,mE as CapacityIdentityConfigSchema,OE as CapacityIdentityPinSchema,iE as CapacityIdentityWireSchema,U_ as ConnectionWireSchema,f_ as ConnectionsListResponseSchema,wE as DANGEROUS_ENV_VARS,NE as DEFAULT_CAPACITY_SLOT,yT as DEFAULT_FORMS_FROM_LOCAL_PART,ze as DEFAULT_REGION,J as DEPLOYABLE_CLUSTER_EXPORT_MARKER,iT as DEPLOYABLE_PATTERN_TYPES,W as DEPLOYABLE_SERVICE_EXPORT_MARKER,SS as DEPLOYMENT_FAILURE_CODE_PATTERN,CS as DEPLOYMENT_FAILURE_DOCS_BASE_URL,tS as DEPLOYMENT_FAILURE_LIMITS,$T as DEPLOYMENT_FAILURE_PHASES,rS as DEPLOYMENT_FAILURE_PROVIDER_SOURCES,AS as DEPLOYMENT_FAILURE_SCHEMA_VERSION,eS as DEPLOYMENT_FAULT_ATTRIBUTIONS,iS as DEPLOYMENT_FAULT_COPY,mS as DEPLOYMENT_PROVIDER_LABELS,gr as DEPLOY_MODES,ZT as DEV_SUBSTRATE_ENTRYPOINT_SOURCE,WT as DEV_SUBSTRATE_PARAMS_FILENAME,kT as DEV_SUBSTRATE_PARAMS_SCHEMA_VERSION,_ as DNS_APEX,N as DOMAIN_DEPLOY_DEFAULT_PHASE,Vr as DeployModeSchema,oS as DeploymentFailureAnalysisSchema,ES as DeploymentFailurePhaseSchema,aS as DeploymentFailureProviderSchema,TS as DeploymentFailureProviderSourceSchema,NS as DeploymentFailureResourceSchema,RS as DeploymentFailureSchema,_S as DeploymentFaultAttributionSchema,jT as DevSubstrateParamsSchema,JT as DevSubstrateSynthPropsSchema,sS as ERROR_WINDOW_CONTEXT_LINES,wr as EXPECTED_CH_SCHEMA_VERSION_ENV,Jr as EXPECTED_SCHEMA_VERSION_ENV,jr as EXPECTED_SCHEMA_VERSION_TOOL_ENV,F_ as EXTERNAL_ID_PATTERN,AT as FJALL_CLICKHOUSE_USERS,DS as FJALL_COMPONENT_GITIGNORE,KE as FJALL_CONFIG_DIR_ENV,hE as FJALL_CREDENTIALS_FILENAME,yE as FJALL_HOME_DIRNAME,BE as FJALL_LOG_DIR_ENV,ST as FJALL_MAINTENANCE_USER,fS as FJALL_MANAGED_STATE_DIR_ENTRIES,MS as FJALL_PROJECT_GITIGNORE,TT as FJALL_SCHEMA_GATE_USER,US as FJALL_STATE_GITIGNORE_ENTRIES,GT as FRAMEWORKS,VT as FRAMEWORK_PATTERN_RECOMMENDATIONS,dT as FRAMEWORK_VALUES,Le as GOVERNANCE_ACCOUNT_TIERS,a_ as GOVERNANCE_SCOPE_REQUIRED_CODE,o as HOSTS_OUTPUT_MAX_BYTES,p as HUNG_UPDATE_GRACE_MS,s as HUNG_UPDATE_REATTACH_BUDGET_MS,Yr as IMAGE_TAG_PATTERN,y_ as INFRASTRUCTURE_TIER_NAMES,k_ as INSIGHT_CATEGORIES,W_ as INSIGHT_SEVERITIES,J_ as INSIGHT_SORT_VALUES,b_ as INSIGHT_TAB_VALUES,Z_ as INSTALL_SOURCES,Hr as ImageTagSchema,lS as LOCAL_CONFIG_GITIGNORE_ENTRY,t_ as MACHINE_ONLY_SCOPES,qE as MASKED_VALUE_MARKER,$e as MAX_SECONDARY_REGIONS,Wr as MIGRATION_SNAPSHOT_KIND_PREMIGRATE,kr as MIGRATION_SNAPSHOT_KIND_TAG_KEY,Xr as MIGRATION_SNAPSHOT_NAME_PREFIX,br as MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV,LT as OPENNEXT_BUCKET_KEYS,PT as OPENNEXT_PATTERN_TYPES,E_ as OPT_IN_REGION_CODES,xT as PATTERN_CREATE_INPUT_FLAGS,uT as PATTERN_CREATE_INPUT_VALUES,CT as PATTERN_REGISTRY,mT as PATTERN_TIER_VALUES,RT as PATTERN_TYPES,NT as PATTERN_TYPE_VALUES,oT as PHYSICAL_NAME_FALLBACK_PROPERTIES,zr as PRISMA_MIGRATION_DIR_RE,w_ as PUBLIC_PACKAGE_NAME,$E as REDACTED_KEY_SENTINEL,UE as REGION_SHORT_CODES,Dr as RESERVED_APP_NAMES,Mr as RESERVED_APP_NAME_MESSAGE,fr as RESERVED_APP_NAME_SUFFIX,lr as RESERVED_APP_NAME_SUFFIX_MESSAGE,Xe as RESOURCE_CATEGORIES,r_ as RETIRED_REGION_ABBREVIATIONS,qr as SCHEMA_ADMIN_PASSWORD_ENV,Zr as SCHEMA_ADMIN_USER_ENV,ET as SCHEMA_GATE_EXIT,eT as SCHEMA_GATE_EXIT_HINTS,Ee as SCOPED_TOKEN_REGEX,A_ as SCOPE_VALUES,C_ as SECRET_NAME_ERROR,I_ as SECRET_NAME_PATTERN,N_ as SESSION_ONLY_API_ROUTES,q_ as SETUP_COMMANDS,Q_ as SETUP_MODES,Er as SETUP_STEPS,$_ as SETUP_STEP_IDS,Tr as SKILL_INSTALL_FILENAME,Sr as SKILL_INSTALL_PATH,rr as SKILL_INSTALL_SEGMENTS,i_ as SSM_COMPONENT_ERROR,O_ as SSM_COMPONENT_PATTERN,m_ as SSM_STANDARD_MAX_VALUE_BYTES,UT as STATIC_SITE_CDN_CONFIG_KEYS,DT as STATIC_SITE_CONFIG_KEYS,MT as STATIC_SITE_DEPLOY_INJECTED_KEYS,lT as STATIC_SITE_ROUTING_INFO,fT as STATIC_SITE_ROUTING_VALUES,Ie as STRUCTURAL_ENVIRONMENTS,P_ as SecretNamespaceSchema,Kr as ServiceArtefactSchema,hr as ServiceArtefactsSchema,o_ as USER_GRANTABLE_SCOPES,w as VPC_CIDR_EXPORT_MARKER,Ze as abbreviateRegion,d as accountConstructKey,ce as accountStageEffect,fe as accountTier,V as albDnsExportName,Y as albHostedZoneIdExportName,Br as artefactOutputKey,K as bucketWebsiteEndpointExportName,h as bucketWebsiteHostedZoneIdExportName,ir as buildAppConfigPath,re as buildChildEnv,n_ as buildNamespaceParts,L_ as buildParameterPath,x as capitalise,be as categoriseResource,H as cdnDomainExportName,$ as clusterArnExportName,sE as compareCodeUnits,DE as defaultConnectedAccountName,vT as defaultFormsCorsOrigin,BT as defaultFormsFromAddress,EE as defaultVpcConstructId,Q as deployableClusterExportName,Z as deployableServiceExportName,OS as deploymentFailureDocsUrl,ar as deriveAllTargets,Fr as deriveContentHashTag,PS as deriveErrorMessageFromFailure,tr as deriveRegionsFromOrgConfig,or as deriveTargets,SE as ec2ServiceName,xS as ensureGitignoreEntries,Nr as environmentOrTier,se as environmentToTier,D_ as escapeDotEnvValue,Rr as explainRetiredTargetName,pS as extractErrorWindow,ZE as filterDangerousEnvVars,LE as findAccountNameCollision,nr as findBoundaryPath,Pr as findInfrastructurePaths,FE as findOnCauseChain,Ir as findTarget,fE as findTrailingRegionShortCode,vE as fjallCredentialsPath,XE as fjallHomeDir,bE as fjallLogDir,kE as fjallStatePath,Me as formatAccountStageList,YE as formatErrorString,Cr as generateTargetName,v as getApplicationStackName,r as getDomainExportNames,T as getDomainStackName,S as getDomainUsEast1CertificatesStackName,ue as getEnvironmentLabel,gE as getErrorCode,dE as getErrorMessage,VE as getErrorStack,ke as getExpectedDuration,We as getFriendlyResourceType,Qe as getRegionInfo,F as getSafeZoneName,G as hasAsciiStableConstructKey,GE as hasErrorCode,ur as hasReservedAppNameSuffix,A as hostsExportPartName,D as imageTagParameterName,sr as inferContainerFromCandidates,ie as isAccountStage,ne as isAccountTier,XT as isAddressAtDomain,X as isApplicationStack,He as isBackupTier,Be as isCodemodStatementType,g_ as isComplianceIssueStatus,z as isDeployableServiceExportName,gT as isFramework,pe as isGovernanceTier,Lr as isInfrastructureFile,s_ as isManageablePath,a as isManagedDomainBinding,pT as isOpenNextBucketKey,nT as isOpenNextPatternType,IT as isPatternType,m as isReownedBackupVault,Ur as isReservedAppName,rE as isVpcCidrExportName,q as legacyDeployableServiceExportName,_E as legacyVpcCidrExportName,ae as mapSettledWithConcurrency,zE as maskSensitiveOutput,AE as mintedEc2KeyPairName,xE as normaliseError,e_ as optInRegionWarning,IS as parseDeploymentFailure,c_ as parseDotEnv,je as parseGitRemoteUrl,p_ as parseParameterPath,QE as parseShellArgs,sT as patternBucketConstructId,OT as patternConstructId,PE as projectCapacityIdentityToTarget,YT as recommendPatternForFramework,lE as regionSuffixRejectionMessage,__ as regions,KT as requiredInputsForFramework,le as resolveSynthEnvironment,_T as schemaGateExitKind,t as serialiseHostsChunks,JE as singleton,te as sleep,k as stackScopedExportName,Ue as stageFromWireEnvironment,ME as suffixedAccountName,T_ as suggestRegionForTimezone,Ke as tierDefault,nS as toDeploymentFailureAnalysis,f as toKebab,U as toPascalCase,u as toScreamingSnake,l as toValidDatabaseName,z_ as upgradeCommand,eE as vpcCidrExportName};

package/dist/infra/deployArtefacts.d.ts

@@ -7,8 +7,8 @@
  *     and derives its per-service output keys via `artefactOutputKey`
  *   - `@fjall/cli` — `commandSchemas` re-exports `ImageTagSchema` for
  *     `--image-tag` validation
- *   - webapp worker — parses the per-service outputs and (Phase 1b)
- *     consumes `ServiceArtefact[]` for Release persistence
+ *   - webapp worker — (Phase 1b) consumes `ServiceArtefact[]` for Release
+ *     persistence
  *
  * The output-key contract (`artefactOutputKey`) reproduces the historical
  * inline `${serviceName}TaskDefinition` / `${serviceName}ImageTag` / …
@@ -76,15 +76,15 @@ export declare const ServiceArtefactsSchema: z.ZodArray<z.ZodObject<{
 }, z.core.$strict>>;
 export type ServiceArtefacts = z.infer<typeof ServiceArtefactsSchema>;
 /**
- * The six per-service output-key suffixes the deploy engine emits and the
- * webapp worker parses (`webapp/scripts/deploymentJobHandler/imageRollout.ts`).
- * Order matters only for readers; the VALUES are a wire contract.
+ * The six per-service output-key suffixes the deploy engine emits in a
+ * code-only result's `outputs`. Order matters only for readers; the VALUES
+ * are part of the published `DeployResult`, so a patch keeps them.
  */
 export declare const ARTEFACT_OUTPUT_FIELDS: readonly ["TaskDefinition", "PreviousTaskDefinition", "ImageTag", "ImageUri", "EcrRepositoryArn", "ImageDigest"];
 export type ArtefactOutputField = (typeof ARTEFACT_OUTPUT_FIELDS)[number];
 /**
  * Derive the per-service deploy output key — MUST stay byte-identical to the
- * historical `${serviceName}${field}` template literals (the worker
- * slices the `serviceName` back off the `TaskDefinition`-suffixed keys).
+ * historical `${serviceName}${field}` template literals, which a published
+ * `DeployResult` carries.
  */
 export declare function artefactOutputKey(serviceName: string, field: ArtefactOutputField): string;

package/dist/migration/constants.d.ts

@@ -36,6 +36,31 @@ export declare const MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV: "MIGRATION_SNAPSHOT_
 export declare const MIGRATION_SNAPSHOT_KIND_TAG_KEY: "fjall:snapshotKind";
 /** `MIGRATION_SNAPSHOT_KIND_TAG_KEY` value for runner-taken pre-migration snapshots. */
 export declare const MIGRATION_SNAPSHOT_KIND_PREMIGRATE: "premigrate";
+/**
+ * Tag key on a service's task definition naming the task definition its
+ * lifecycle-hook migration runs (FJL-901). `EcsLifecycleHookMigration`
+ * writes it, and the hook's inline runner (`lifecycleHookLambda.source.cjs`,
+ * which cannot import this module) reads it from the revision its deployment
+ * targets, so the hook runs the migration that deployment's code was built
+ * against. A test pins the runner's literal to this one.
+ */
+export declare const MIGRATION_TASK_DEFINITION_TAG_KEY: "fjall:migration-task-definition";
+/**
+ * Docker label on the primary container of a service's task definition
+ * carrying the same reference as `MIGRATION_TASK_DEFINITION_TAG_KEY`
+ * (FJL-901). Nothing reads it: it puts the reference in the container
+ * definitions, which no revision can change, so a change to the migration
+ * alone registers a new revision of the service's task definition rather than
+ * re-tagging CloudFormation's own one in place.
+ */
+export declare const MIGRATION_TASK_DEFINITION_LABEL_KEY: "io.fjall.migration-task-definition";
+/**
+ * Tag key on a migration task definition naming, space-separated, the
+ * security groups its task runs in when they are not its service's: the
+ * migration's own group, which `separateTaskDef.egressTo` builds. Written by
+ * `EcsCompute` and read by the hook's inline runner, as above.
+ */
+export declare const MIGRATION_SECURITY_GROUPS_TAG_KEY: "fjall:migration-security-groups";
 /**
  * Container env var name for the schema-version fail-fast gate. Every
  * container of every service whose `connections:` includes a relational DB

package/dist/migration/constants.js

@@ -1 +1 @@
-const _="fjall-premigrate",E="MIGRATION_SNAPSHOT_RETENTION_DAYS",A="fjall:snapshotKind",S="premigrate",C="EXPECTED_SCHEMA_VERSION",t="EXPECTED_SCHEMA_VERSION_TOOL",T="EXPECTED_CH_SCHEMA_VERSION",o="SCHEMA_ADMIN_USER",N="SCHEMA_ADMIN_PASSWORD",R="FJALL_SCHEMA_GATE_DB_URL_BASE",H="FJALL_SCHEMA_GATE_DB_USER",M="FJALL_SCHEMA_GATE_DB_PASSWORD",I="CLICKHOUSE_URL",O="CLICKHOUSE_DATABASE",e="CLICKHOUSE_CA_CERT",s="FJALL_SCHEMA_GATE_CH_USER",D="FJALL_SCHEMA_GATE_CH_PASSWORD",c=120,r="fjall-schema-gate",p="fjall/schema-gate",G="public.ecr.aws/fjall/schema-gate",n=/^\d{14}_/,x=/\.dev\.sql$/,P=/\.sql$/;export{P as CLICKHOUSE_MIGRATION_FILE_RE,x as CLICKHOUSE_MIGRATION_SKIP_RE,T as EXPECTED_CH_SCHEMA_VERSION_ENV,C as EXPECTED_SCHEMA_VERSION_ENV,t as EXPECTED_SCHEMA_VERSION_TOOL_ENV,S as MIGRATION_SNAPSHOT_KIND_PREMIGRATE,A as MIGRATION_SNAPSHOT_KIND_TAG_KEY,_ as MIGRATION_SNAPSHOT_NAME_PREFIX,E as MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV,n as PRISMA_MIGRATION_DIR_RE,N as SCHEMA_ADMIN_PASSWORD_ENV,o as SCHEMA_ADMIN_USER_ENV,e as SCHEMA_GATE_CH_CA_CERT_ENV,O as SCHEMA_GATE_CH_DATABASE_ENV,D as SCHEMA_GATE_CH_PASSWORD_ENV,I as SCHEMA_GATE_CH_URL_ENV,s as SCHEMA_GATE_CH_USER_ENV,r as SCHEMA_GATE_CONTAINER_NAME,M as SCHEMA_GATE_DB_PASSWORD_ENV,R as SCHEMA_GATE_DB_URL_BASE_ENV,H as SCHEMA_GATE_DB_USER_ENV,p as SCHEMA_GATE_ECR_REPO_NAME,G as SCHEMA_GATE_PUBLIC_IMAGE_REPO,c as SCHEMA_GATE_START_TIMEOUT_SECONDS};
+const _="fjall-premigrate",E="MIGRATION_SNAPSHOT_RETENTION_DAYS",A="fjall:snapshotKind",S="premigrate",t="fjall:migration-task-definition",T="io.fjall.migration-task-definition",o="fjall:migration-security-groups",C="EXPECTED_SCHEMA_VERSION",I="EXPECTED_SCHEMA_VERSION_TOOL",N="EXPECTED_CH_SCHEMA_VERSION",R="SCHEMA_ADMIN_USER",M="SCHEMA_ADMIN_PASSWORD",O="FJALL_SCHEMA_GATE_DB_URL_BASE",H="FJALL_SCHEMA_GATE_DB_USER",e="FJALL_SCHEMA_GATE_DB_PASSWORD",s="CLICKHOUSE_URL",r="CLICKHOUSE_DATABASE",n="CLICKHOUSE_CA_CERT",G="FJALL_SCHEMA_GATE_CH_USER",c="FJALL_SCHEMA_GATE_CH_PASSWORD",p=120,D="fjall-schema-gate",x="fjall/schema-gate",L="public.ecr.aws/fjall/schema-gate",P=/^\d{14}_/,a=/\.dev\.sql$/,V=/\.sql$/;export{V as CLICKHOUSE_MIGRATION_FILE_RE,a as CLICKHOUSE_MIGRATION_SKIP_RE,N as EXPECTED_CH_SCHEMA_VERSION_ENV,C as EXPECTED_SCHEMA_VERSION_ENV,I as EXPECTED_SCHEMA_VERSION_TOOL_ENV,o as MIGRATION_SECURITY_GROUPS_TAG_KEY,S as MIGRATION_SNAPSHOT_KIND_PREMIGRATE,A as MIGRATION_SNAPSHOT_KIND_TAG_KEY,_ as MIGRATION_SNAPSHOT_NAME_PREFIX,E as MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV,T as MIGRATION_TASK_DEFINITION_LABEL_KEY,t as MIGRATION_TASK_DEFINITION_TAG_KEY,P as PRISMA_MIGRATION_DIR_RE,M as SCHEMA_ADMIN_PASSWORD_ENV,R as SCHEMA_ADMIN_USER_ENV,n as SCHEMA_GATE_CH_CA_CERT_ENV,r as SCHEMA_GATE_CH_DATABASE_ENV,c as SCHEMA_GATE_CH_PASSWORD_ENV,s as SCHEMA_GATE_CH_URL_ENV,G as SCHEMA_GATE_CH_USER_ENV,D as SCHEMA_GATE_CONTAINER_NAME,e as SCHEMA_GATE_DB_PASSWORD_ENV,O as SCHEMA_GATE_DB_URL_BASE_ENV,H as SCHEMA_GATE_DB_USER_ENV,x as SCHEMA_GATE_ECR_REPO_NAME,L as SCHEMA_GATE_PUBLIC_IMAGE_REPO,p as SCHEMA_GATE_START_TIMEOUT_SECONDS};

package/dist/migration/index.d.ts

@@ -1,4 +1,4 @@
-export { MIGRATION_SNAPSHOT_NAME_PREFIX, MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV, EXPECTED_SCHEMA_VERSION_ENV, EXPECTED_SCHEMA_VERSION_TOOL_ENV, EXPECTED_CH_SCHEMA_VERSION_ENV, SCHEMA_ADMIN_USER_ENV, SCHEMA_ADMIN_PASSWORD_ENV, SCHEMA_GATE_DB_URL_BASE_ENV, SCHEMA_GATE_DB_USER_ENV, SCHEMA_GATE_DB_PASSWORD_ENV, SCHEMA_GATE_CH_URL_ENV, SCHEMA_GATE_CH_DATABASE_ENV, SCHEMA_GATE_CH_CA_CERT_ENV, SCHEMA_GATE_CH_USER_ENV, SCHEMA_GATE_CH_PASSWORD_ENV, SCHEMA_GATE_START_TIMEOUT_SECONDS, SCHEMA_GATE_CONTAINER_NAME, SCHEMA_GATE_ECR_REPO_NAME, SCHEMA_GATE_PUBLIC_IMAGE_REPO, PRISMA_MIGRATION_DIR_RE, CLICKHOUSE_MIGRATION_SKIP_RE } from "./constants.js";
+export { MIGRATION_SNAPSHOT_NAME_PREFIX, MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV, MIGRATION_TASK_DEFINITION_TAG_KEY, MIGRATION_TASK_DEFINITION_LABEL_KEY, MIGRATION_SECURITY_GROUPS_TAG_KEY, EXPECTED_SCHEMA_VERSION_ENV, EXPECTED_SCHEMA_VERSION_TOOL_ENV, EXPECTED_CH_SCHEMA_VERSION_ENV, SCHEMA_ADMIN_USER_ENV, SCHEMA_ADMIN_PASSWORD_ENV, SCHEMA_GATE_DB_URL_BASE_ENV, SCHEMA_GATE_DB_USER_ENV, SCHEMA_GATE_DB_PASSWORD_ENV, SCHEMA_GATE_CH_URL_ENV, SCHEMA_GATE_CH_DATABASE_ENV, SCHEMA_GATE_CH_CA_CERT_ENV, SCHEMA_GATE_CH_USER_ENV, SCHEMA_GATE_CH_PASSWORD_ENV, SCHEMA_GATE_START_TIMEOUT_SECONDS, SCHEMA_GATE_CONTAINER_NAME, SCHEMA_GATE_ECR_REPO_NAME, SCHEMA_GATE_PUBLIC_IMAGE_REPO, PRISMA_MIGRATION_DIR_RE, CLICKHOUSE_MIGRATION_SKIP_RE } from "./constants.js";
 export { pickLatestPrismaMigration } from "./pickLatestPrismaMigration.js";
 export { pickLatestClickHouseMigration } from "./pickLatestClickHouseMigration.js";
 export { isOrderableSchemaVersion, isSchemaVersionSatisfied } from "./compareSchemaVersion.js";

package/dist/migration/index.js

@@ -1 +1 @@
-import{MIGRATION_SNAPSHOT_NAME_PREFIX as A,MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV as S,EXPECTED_SCHEMA_VERSION_ENV as C,EXPECTED_SCHEMA_VERSION_TOOL_ENV as N,EXPECTED_CH_SCHEMA_VERSION_ENV as e,SCHEMA_ADMIN_USER_ENV as T,SCHEMA_ADMIN_PASSWORD_ENV as r,SCHEMA_GATE_DB_URL_BASE_ENV as R,SCHEMA_GATE_DB_USER_ENV as M,SCHEMA_GATE_DB_PASSWORD_ENV as H,SCHEMA_GATE_CH_URL_ENV as I,SCHEMA_GATE_CH_DATABASE_ENV as o,SCHEMA_GATE_CH_CA_CERT_ENV as O,SCHEMA_GATE_CH_USER_ENV as a,SCHEMA_GATE_CH_PASSWORD_ENV as m,SCHEMA_GATE_START_TIMEOUT_SECONDS as U,SCHEMA_GATE_CONTAINER_NAME as s,SCHEMA_GATE_ECR_REPO_NAME as t,SCHEMA_GATE_PUBLIC_IMAGE_REPO as L,PRISMA_MIGRATION_DIR_RE as V,CLICKHOUSE_MIGRATION_SKIP_RE as i}from"./constants.js";import{pickLatestPrismaMigration as P}from"./pickLatestPrismaMigration.js";import{pickLatestClickHouseMigration as c}from"./pickLatestClickHouseMigration.js";import{isOrderableSchemaVersion as f,isSchemaVersionSatisfied as x}from"./compareSchemaVersion.js";import{verifyExpectedSchemaVersion as K}from"./verifyExpectedSchemaVersion.js";import{CLICKHOUSE_MANAGED_USERS_ENV as d,MANAGED_USER_NAME_PATTERN as h,userPasswordEnvName as l,ManagedUserNameSchema as B,ManagedUserNamesSchema as X}from"./clickhouseSqlUsers.js";import{FJALL_SCHEMA_GATE_USER as u,FJALL_MAINTENANCE_USER as b,FJALL_CLICKHOUSE_USERS as g,FJALL_CLICKHOUSE_USER_PREFIX as v,isReservedClickHouseUserName as J,CLICKHOUSE_FRAMEWORK_USERS_ENV as W,CLICKHOUSE_MAINTENANCE_PROFILE_ENV as w,CLICKHOUSE_BACKUP_SCRATCH_DATABASE as y,FrameworkUserNameSchema as Y,FrameworkUserNamesSchema as Q}from"./clickhouseFrameworkUsers.js";import{SCHEMA_GATE_EXIT as q,SCHEMA_GATE_EXIT_HINTS as z,schemaGateExitKind as Z}from"./schemaGateExit.js";import{CONTROL_PLANE_ACTIVITY_RECENCY_SECONDS as EE,buildControlPlaneActivityQuery as _E}from"./controlPlaneActivity.js";import{sleepAbortable as SE}from"./sleepAbortable.js";export{y as CLICKHOUSE_BACKUP_SCRATCH_DATABASE,W as CLICKHOUSE_FRAMEWORK_USERS_ENV,w as CLICKHOUSE_MAINTENANCE_PROFILE_ENV,d as CLICKHOUSE_MANAGED_USERS_ENV,i as CLICKHOUSE_MIGRATION_SKIP_RE,EE as CONTROL_PLANE_ACTIVITY_RECENCY_SECONDS,e as EXPECTED_CH_SCHEMA_VERSION_ENV,C as EXPECTED_SCHEMA_VERSION_ENV,N as EXPECTED_SCHEMA_VERSION_TOOL_ENV,g as FJALL_CLICKHOUSE_USERS,v as FJALL_CLICKHOUSE_USER_PREFIX,b as FJALL_MAINTENANCE_USER,u as FJALL_SCHEMA_GATE_USER,Y as FrameworkUserNameSchema,Q as FrameworkUserNamesSchema,h as MANAGED_USER_NAME_PATTERN,A as MIGRATION_SNAPSHOT_NAME_PREFIX,S as MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV,B as ManagedUserNameSchema,X as ManagedUserNamesSchema,V as PRISMA_MIGRATION_DIR_RE,r as SCHEMA_ADMIN_PASSWORD_ENV,T as SCHEMA_ADMIN_USER_ENV,O as SCHEMA_GATE_CH_CA_CERT_ENV,o as SCHEMA_GATE_CH_DATABASE_ENV,m as SCHEMA_GATE_CH_PASSWORD_ENV,I as SCHEMA_GATE_CH_URL_ENV,a as SCHEMA_GATE_CH_USER_ENV,s as SCHEMA_GATE_CONTAINER_NAME,H as SCHEMA_GATE_DB_PASSWORD_ENV,R as SCHEMA_GATE_DB_URL_BASE_ENV,M as SCHEMA_GATE_DB_USER_ENV,t as SCHEMA_GATE_ECR_REPO_NAME,q as SCHEMA_GATE_EXIT,z as SCHEMA_GATE_EXIT_HINTS,L as SCHEMA_GATE_PUBLIC_IMAGE_REPO,U as SCHEMA_GATE_START_TIMEOUT_SECONDS,_E as buildControlPlaneActivityQuery,f as isOrderableSchemaVersion,J as isReservedClickHouseUserName,x as isSchemaVersionSatisfied,c as pickLatestClickHouseMigration,P as pickLatestPrismaMigration,Z as schemaGateExitKind,SE as sleepAbortable,l as userPasswordEnvName,K as verifyExpectedSchemaVersion};
+import{MIGRATION_SNAPSHOT_NAME_PREFIX as A,MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV as S,MIGRATION_TASK_DEFINITION_TAG_KEY as N,MIGRATION_TASK_DEFINITION_LABEL_KEY as C,MIGRATION_SECURITY_GROUPS_TAG_KEY as e,EXPECTED_SCHEMA_VERSION_ENV as T,EXPECTED_SCHEMA_VERSION_TOOL_ENV as I,EXPECTED_CH_SCHEMA_VERSION_ENV as R,SCHEMA_ADMIN_USER_ENV as M,SCHEMA_ADMIN_PASSWORD_ENV as r,SCHEMA_GATE_DB_URL_BASE_ENV as H,SCHEMA_GATE_DB_USER_ENV as O,SCHEMA_GATE_DB_PASSWORD_ENV as o,SCHEMA_GATE_CH_URL_ENV as a,SCHEMA_GATE_CH_DATABASE_ENV as G,SCHEMA_GATE_CH_CA_CERT_ENV as U,SCHEMA_GATE_CH_USER_ENV as m,SCHEMA_GATE_CH_PASSWORD_ENV as L,SCHEMA_GATE_START_TIMEOUT_SECONDS as s,SCHEMA_GATE_CONTAINER_NAME as t,SCHEMA_GATE_ECR_REPO_NAME as V,SCHEMA_GATE_PUBLIC_IMAGE_REPO as i,PRISMA_MIGRATION_DIR_RE as P,CLICKHOUSE_MIGRATION_SKIP_RE as D}from"./constants.js";import{pickLatestPrismaMigration as c}from"./pickLatestPrismaMigration.js";import{pickLatestClickHouseMigration as f}from"./pickLatestClickHouseMigration.js";import{isOrderableSchemaVersion as F,isSchemaVersionSatisfied as n}from"./compareSchemaVersion.js";import{verifyExpectedSchemaVersion as B}from"./verifyExpectedSchemaVersion.js";import{CLICKHOUSE_MANAGED_USERS_ENV as l,MANAGED_USER_NAME_PATTERN as X,userPasswordEnvName as Y,ManagedUserNameSchema as k,ManagedUserNamesSchema as u}from"./clickhouseSqlUsers.js";import{FJALL_SCHEMA_GATE_USER as g,FJALL_MAINTENANCE_USER as v,FJALL_CLICKHOUSE_USERS as J,FJALL_CLICKHOUSE_USER_PREFIX as W,isReservedClickHouseUserName as w,CLICKHOUSE_FRAMEWORK_USERS_ENV as y,CLICKHOUSE_MAINTENANCE_PROFILE_ENV as Q,CLICKHOUSE_BACKUP_SCRATCH_DATABASE as j,FrameworkUserNameSchema as q,FrameworkUserNamesSchema as z}from"./clickhouseFrameworkUsers.js";import{SCHEMA_GATE_EXIT as $,SCHEMA_GATE_EXIT_HINTS as EE,schemaGateExitKind as _E}from"./schemaGateExit.js";import{CONTROL_PLANE_ACTIVITY_RECENCY_SECONDS as SE,buildControlPlaneActivityQuery as NE}from"./controlPlaneActivity.js";import{sleepAbortable as eE}from"./sleepAbortable.js";export{j as CLICKHOUSE_BACKUP_SCRATCH_DATABASE,y as CLICKHOUSE_FRAMEWORK_USERS_ENV,Q as CLICKHOUSE_MAINTENANCE_PROFILE_ENV,l as CLICKHOUSE_MANAGED_USERS_ENV,D as CLICKHOUSE_MIGRATION_SKIP_RE,SE as CONTROL_PLANE_ACTIVITY_RECENCY_SECONDS,R as EXPECTED_CH_SCHEMA_VERSION_ENV,T as EXPECTED_SCHEMA_VERSION_ENV,I as EXPECTED_SCHEMA_VERSION_TOOL_ENV,J as FJALL_CLICKHOUSE_USERS,W as FJALL_CLICKHOUSE_USER_PREFIX,v as FJALL_MAINTENANCE_USER,g as FJALL_SCHEMA_GATE_USER,q as FrameworkUserNameSchema,z as FrameworkUserNamesSchema,X as MANAGED_USER_NAME_PATTERN,e as MIGRATION_SECURITY_GROUPS_TAG_KEY,A as MIGRATION_SNAPSHOT_NAME_PREFIX,S as MIGRATION_SNAPSHOT_RETENTION_DAYS_ENV,C as MIGRATION_TASK_DEFINITION_LABEL_KEY,N as MIGRATION_TASK_DEFINITION_TAG_KEY,k as ManagedUserNameSchema,u as ManagedUserNamesSchema,P as PRISMA_MIGRATION_DIR_RE,r as SCHEMA_ADMIN_PASSWORD_ENV,M as SCHEMA_ADMIN_USER_ENV,U as SCHEMA_GATE_CH_CA_CERT_ENV,G as SCHEMA_GATE_CH_DATABASE_ENV,L as SCHEMA_GATE_CH_PASSWORD_ENV,a as SCHEMA_GATE_CH_URL_ENV,m as SCHEMA_GATE_CH_USER_ENV,t as SCHEMA_GATE_CONTAINER_NAME,o as SCHEMA_GATE_DB_PASSWORD_ENV,H as SCHEMA_GATE_DB_URL_BASE_ENV,O as SCHEMA_GATE_DB_USER_ENV,V as SCHEMA_GATE_ECR_REPO_NAME,$ as SCHEMA_GATE_EXIT,EE as SCHEMA_GATE_EXIT_HINTS,i as SCHEMA_GATE_PUBLIC_IMAGE_REPO,s as SCHEMA_GATE_START_TIMEOUT_SECONDS,NE as buildControlPlaneActivityQuery,F as isOrderableSchemaVersion,w as isReservedClickHouseUserName,n as isSchemaVersionSatisfied,f as pickLatestClickHouseMigration,c as pickLatestPrismaMigration,_E as schemaGateExitKind,eE as sleepAbortable,Y as userPasswordEnvName,B as verifyExpectedSchemaVersion};

package/dist/migration/sleepAbortable.d.ts

@@ -4,7 +4,7 @@
  * arrives (SIGTERM in a worker, an ECS stop of the gate container) MUST use
  * this for inter-attempt delays so the signal does not stall for the full
  * sleep. Resolves (never rejects) on abort; callers check `signal.aborted`
- * after waking. Shared by `@fjall/clickhouse`, `@fjall/schema-gate` and
- * `@fjall/deploy-core`.
+ * after waking. Every reader of `@fjall/util/migration`'s `sleepAbortable`
+ * shares this one timer discipline.
  */
 export declare function sleepAbortable(ms: number, signal?: AbortSignal): Promise<void>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fjall/util",
-  "version": "39.0.5",
+  "version": "39.0.7",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/fjall-tech/fjall.git",
@@ -183,9 +183,6 @@
   "dependencies": {
     "zod": "^4.4.3"
   },
-  "overrides": {
-    "@smithy/core": "2.5.5"
-  },
   "engines": {
     "node": ">=22.3.0"
   }