@fjall/components-infrastructure 0.102.0 → 1.1.0

package/dist/lib/utils/bastionFactory.js

@@ -1,29 +0,0 @@
-import { CfnOutput } from "aws-cdk-lib";
-import { Ec2Instance } from "../resources/aws/compute/ec2.js";
-import { toPascalCase } from "./capitaliseString.js";
-export function createBastion(networkStack, appName, stackPrefix, vpc, config) {
-    const instanceType = typeof config === "object" && config.instanceType
-        ? config.instanceType
-        : "t4g.micro";
-    const bastionId = `${stackPrefix}Bastion`;
-    const scope = networkStack.getStack();
-    const bastion = new Ec2Instance(scope, bastionId, {
-        serviceName: `${stackPrefix}Bastion`,
-        instanceType,
-        vpc,
-        enableSSH: false,
-        minCapacity: 1,
-        maxCapacity: 1
-    });
-    networkStack.addConstruct(bastion);
-    const outputPrefix = toPascalCase(appName);
-    new CfnOutput(scope, `${outputPrefix}BastionInstanceId`, {
-        value: bastion.getAutoScalingGroup().autoScalingGroupName,
-        description: "Bastion ASG name for SSM tunnel discovery"
-    });
-    new CfnOutput(scope, `${outputPrefix}BastionSecurityGroupId`, {
-        value: bastion.asgSecurityGroup.securityGroupId,
-        description: "Bastion security group ID"
-    });
-    return { bastion };
-}

package/dist/lib/utils/constructMap.d.ts

@@ -1,33 +0,0 @@
-/**
- * Local construct map utilities for the infrastructure package.
- *
- * These are local copies of functions from @fjall/util, needed because
- * the infrastructure package compiles to CommonJS but @fjall/util is ESM.
- * Type-only imports from @fjall/util are fine (compiled away), but runtime
- * imports cause Jest/Node CJS-ESM boundary errors.
- */
-/** Manifest file name — must match FJALL_MANIFEST_FILENAME in @fjall/util. */
-export declare const FJALL_MANIFEST_FILENAME = "fjall-manifest.json";
-/** Current manifest schema version. Must match @fjall/util. */
-export declare const MANIFEST_SCHEMA_VERSION: 1;
-/** Topology categories for grouping resources. */
-export type ResourceCategory = "security" | "network" | "compute" | "database" | "storage" | "monitoring" | "dns" | "identity" | "bootstrap" | "events" | "registry" | "backup";
-/** Entry in the resource map — maps a logical ID to its construct context. */
-export interface ResourceMapEntry {
-    constructPath: string;
-    group: string;
-    resourceType: string;
-}
-/**
- * Account stack construct-to-group mapping.
- * Keys are CDK construct IDs (first segment after stack name in construct path).
- */
-export declare const ACCOUNT_CONSTRUCT_GROUPS: Readonly<Record<string, ResourceCategory>>;
-/**
- * Builds a construct map from CDK's manifest.json metadata.
- */
-export declare function buildConstructMap(cdkOutPath: string, constructGroups: Readonly<Record<string, ResourceCategory>>): Map<string, ResourceMapEntry>;
-/**
- * Converts a construct map to a plain object for JSON serialisation.
- */
-export declare function constructMapToRecord(map: Map<string, ResourceMapEntry>): Record<string, ResourceMapEntry>;

package/dist/lib/utils/constructMap.js

@@ -1,154 +0,0 @@
-/**
- * Local construct map utilities for the infrastructure package.
- *
- * These are local copies of functions from @fjall/util, needed because
- * the infrastructure package compiles to CommonJS but @fjall/util is ESM.
- * Type-only imports from @fjall/util are fine (compiled away), but runtime
- * imports cause Jest/Node CJS-ESM boundary errors.
- */
-import { readFileSync } from "fs";
-import { join } from "path";
-/** Manifest file name — must match FJALL_MANIFEST_FILENAME in @fjall/util. */
-export const FJALL_MANIFEST_FILENAME = "fjall-manifest.json";
-/** Current manifest schema version. Must match @fjall/util. */
-export const MANIFEST_SCHEMA_VERSION = 1;
-/**
- * Account stack construct-to-group mapping.
- * Keys are CDK construct IDs (first segment after stack name in construct path).
- */
-export const ACCOUNT_CONSTRUCT_GROUPS = Object.freeze({
-    CloudTrail: "monitoring",
-    MonitoringRole: "monitoring",
-    AuditRole: "security",
-    OidcConnector: "security",
-    EcrDefaultImage: "registry",
-    EventBus: "events",
-    DisasterRecovery: "backup"
-});
-/** Simplified resource categorisation for infrastructure package use. */
-const RESOURCE_CATEGORY_MAP = Object.freeze({
-    "AWS::IAM::Role": "security",
-    "AWS::IAM::Policy": "security",
-    "AWS::IAM::OIDCProvider": "security",
-    "AWS::EC2::SecurityGroup": "security",
-    "AWS::KMS::Key": "security",
-    "AWS::KMS::Alias": "security",
-    "AWS::EC2::VPC": "network",
-    "AWS::EC2::Subnet": "network",
-    "AWS::EC2::InternetGateway": "network",
-    "AWS::EC2::NatGateway": "network",
-    "AWS::EC2::RouteTable": "network",
-    "AWS::EC2::Route": "network",
-    "AWS::ECS::Cluster": "compute",
-    "AWS::ECS::Service": "compute",
-    "AWS::ECS::TaskDefinition": "compute",
-    "AWS::Lambda::Function": "compute",
-    "AWS::RDS::DBInstance": "database",
-    "AWS::RDS::DBCluster": "database",
-    "AWS::S3::Bucket": "storage",
-    "AWS::CloudTrail::Trail": "monitoring",
-    "AWS::Logs::LogGroup": "monitoring",
-    "AWS::Events::EventBus": "events",
-    "AWS::ECR::Repository": "registry",
-    "AWS::Route53::RecordSet": "dns",
-    "AWS::CertificateManager::Certificate": "dns",
-    "AWS::CloudFront::Distribution": "dns",
-    "AWS::Backup::BackupVault": "backup",
-    "AWS::Backup::BackupPlan": "backup",
-    "AWS::Backup::BackupSelection": "backup"
-});
-function categoriseResource(resourceType) {
-    if (!resourceType)
-        return "compute";
-    if (resourceType.startsWith("Custom::")) {
-        return RESOURCE_CATEGORY_MAP[resourceType] ?? "compute";
-    }
-    return RESOURCE_CATEGORY_MAP[resourceType] ?? "compute";
-}
-function deriveGroupFromPath(constructPath, constructGroups) {
-    const segments = constructPath.split("/").filter(Boolean);
-    if (segments.length < 2)
-        return undefined;
-    const topLevelConstruct = segments[1];
-    return constructGroups[topLevelConstruct];
-}
-function readTemplateResourceTypes(cdkOutPath, templateFile) {
-    const result = new Map();
-    if (!templateFile)
-        return result;
-    try {
-        const content = readFileSync(join(cdkOutPath, templateFile), "utf-8");
-        const parsed = JSON.parse(content);
-        if (typeof parsed !== "object" || parsed === null) {
-            return result;
-        }
-        const template = parsed;
-        if (template.Resources && typeof template.Resources === "object") {
-            for (const [logicalId, resource] of Object.entries(template.Resources)) {
-                if (typeof resource === "object" &&
-                    resource !== null &&
-                    resource.Type) {
-                    result.set(logicalId, resource.Type);
-                }
-            }
-        }
-    }
-    catch {
-        // Template not readable — non-critical, return empty map
-    }
-    return result;
-}
-/**
- * Builds a construct map from CDK's manifest.json metadata.
- */
-export function buildConstructMap(cdkOutPath, constructGroups) {
-    const result = new Map();
-    let manifest;
-    try {
-        const content = readFileSync(join(cdkOutPath, "manifest.json"), "utf-8");
-        const parsed = JSON.parse(content);
-        if (typeof parsed !== "object" || parsed === null) {
-            return result;
-        }
-        manifest = parsed;
-    }
-    catch {
-        // CDK manifest not readable — non-critical, return empty map
-        return result;
-    }
-    if (!manifest.artifacts)
-        return result;
-    for (const artifact of Object.values(manifest.artifacts)) {
-        if (artifact.type !== "aws:cloudformation:stack")
-            continue;
-        if (!artifact.metadata)
-            continue;
-        const resourceTypes = readTemplateResourceTypes(cdkOutPath, artifact.properties?.templateFile);
-        for (const [constructPath, entries] of Object.entries(artifact.metadata)) {
-            for (const entry of entries) {
-                if (entry.type !== "aws:cdk:logicalId")
-                    continue;
-                const logicalId = entry.data;
-                const resourceType = resourceTypes.get(logicalId) ?? "";
-                const group = deriveGroupFromPath(constructPath, constructGroups) ??
-                    categoriseResource(resourceType);
-                result.set(logicalId, {
-                    constructPath,
-                    group,
-                    resourceType
-                });
-            }
-        }
-    }
-    return result;
-}
-/**
- * Converts a construct map to a plain object for JSON serialisation.
- */
-export function constructMapToRecord(map) {
-    const result = {};
-    for (const [key, value] of map) {
-        result[key] = value;
-    }
-    return result;
-}

package/dist/lib/utils/dnsRecords.d.ts

@@ -1,4 +0,0 @@
-import { type Construct } from "constructs";
-import { type IHostedZone } from "aws-cdk-lib/aws-route53";
-import type { DnsRecordInput } from "./domainTypes.js";
-export declare function addDnsRecords(scope: Construct, zone: IHostedZone, zoneName: string, records: DnsRecordInput[]): void;

package/dist/lib/utils/dnsRecords.js

@@ -1,104 +0,0 @@
-import { Duration } from "aws-cdk-lib";
-import { ARecord, AaaaRecord, CnameRecord, MxRecord, TxtRecord, NsRecord, SrvRecord, CaaRecord, CaaTag, RecordTarget } from "aws-cdk-lib/aws-route53";
-import { toPascalCase, getSafeZoneName } from "./capitaliseString.js";
-import { ALIAS_CDK_PREFIX, DNS_APEX } from "./domainTypes.js";
-export function addDnsRecords(scope, zone, zoneName, records) {
-    const safeZone = toPascalCase(getSafeZoneName(zoneName));
-    records.forEach((record, index) => {
-        if (record.value.startsWith(ALIAS_CDK_PREFIX)) {
-            return;
-        }
-        const safeName = toPascalCase(record.name === DNS_APEX ? "Apex" : record.name);
-        const constructId = `${safeZone}${safeName}${record.type}Record${index}`;
-        const ttl = record.ttl ? Duration.seconds(record.ttl) : undefined;
-        const recordName = record.name === DNS_APEX ? zoneName : `${record.name}.${zoneName}`;
-        switch (record.type) {
-            case "A":
-                new ARecord(scope, constructId, {
-                    zone,
-                    recordName,
-                    target: RecordTarget.fromIpAddresses(record.value),
-                    ttl
-                });
-                break;
-            case "AAAA":
-                new AaaaRecord(scope, constructId, {
-                    zone,
-                    recordName,
-                    target: RecordTarget.fromIpAddresses(record.value),
-                    ttl
-                });
-                break;
-            case "CNAME":
-                new CnameRecord(scope, constructId, {
-                    zone,
-                    recordName,
-                    domainName: record.value,
-                    ttl
-                });
-                break;
-            case "MX":
-                new MxRecord(scope, constructId, {
-                    zone,
-                    recordName,
-                    values: [
-                        {
-                            hostName: record.value,
-                            priority: record.priority ?? 10
-                        }
-                    ],
-                    ttl
-                });
-                break;
-            case "TXT":
-                new TxtRecord(scope, constructId, {
-                    zone,
-                    recordName,
-                    values: [record.value],
-                    ttl
-                });
-                break;
-            case "NS":
-                new NsRecord(scope, constructId, {
-                    zone,
-                    recordName,
-                    values: [record.value],
-                    ttl
-                });
-                break;
-            case "SRV":
-                new SrvRecord(scope, constructId, {
-                    zone,
-                    recordName,
-                    values: [
-                        {
-                            hostName: record.value,
-                            priority: record.priority ?? 10,
-                            weight: record.weight ?? 0,
-                            port: record.port ?? 443
-                        }
-                    ],
-                    ttl
-                });
-                break;
-            case "CAA":
-                new CaaRecord(scope, constructId, {
-                    zone,
-                    recordName,
-                    values: [
-                        {
-                            flag: 0,
-                            tag: record.value.includes("issuewild")
-                                ? CaaTag.ISSUEWILD
-                                : record.value.includes("iodef")
-                                    ? CaaTag.IODEF
-                                    : CaaTag.ISSUE,
-                            value: record.value
-                        }
-                    ],
-                    ttl
-                });
-                break;
-        }
-    });
-}