@fjall/components-infrastructure 0.87.18 → 0.88.1

package/dist/lib/patterns/aws/platform.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Platform = void 0;
+const ipam_1 = require("../../config/aws/ipam");
+const ipamPool_1 = require("../../resources/aws/networking/ipamPool");
+const account_1 = require("./account");
+const getConfig_1 = require("../../utils/getConfig");
+class Platform extends account_1.Account {
+    constructor(scope, id, props) {
+        super(scope, id, props);
+        this.organisationType = "platform";
+        const config = (0, getConfig_1.getConfig)();
+        const allRegions = config.allRegions.length > 0 ? config.allRegions : [this.resolvedRegion];
+        const ipam = new ipam_1.Ipam(this, "Ipam", {
+            regions: allRegions
+        });
+        // Derive account list from props or config
+        const orgAccounts = props.accounts
+            ? Object.values(props.accounts).flatMap((account) => Array.isArray(account) ? account : [account])
+            : Object.keys(config.accountIds ?? {});
+        new ipamPool_1.IpamPool(this, "IpamPool", {
+            orgAccounts,
+            regions: allRegions,
+            ipamScope: ipam.privateDefaultScopeId
+        });
+    }
+}
+exports.Platform = Platform;
+//# sourceMappingURL=data:application/json;base64,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

package/dist/lib/patterns/aws/storage.d.ts

@@ -3,158 +3,73 @@ import { type IBucket, type EventType, type IBucketNotificationDestination, type
 import { BucketDeployment } from "aws-cdk-lib/aws-s3-deployment";
 import { type IGrantable, type Grant } from "aws-cdk-lib/aws-iam";
 import type App from "../../app";
-import { S3Bucket, S3WebsiteBucket, S3PublicReadBucket, type BackupVaultTier } from "../../resources/aws/storage";
-import { type StorageType, type IPrivateStorage, type IWebsiteStorage, type IPublicStorage } from "./interfaces/storage.js";
+import { type BackupVaultTier, type WebsiteHostingConfig } from "../../resources/aws/storage";
+import { type IStorage } from "./interfaces/storage.js";
 import { type IStorageConnector } from "./interfaces/connector.js";
-export { type StorageType, type IStorage, type IPrivateStorage, type IWebsiteStorage, type IPublicStorage, type AnyStorage, isPrivateStorage, isWebsiteStorage, isPublicStorage } from "./interfaces/storage.js";
-export type S3BucketType = "private" | "website" | "publicRead";
-export interface StorageTypeConfig {
-    supportsPublicRead: boolean;
-    supportsWebsiteHosting: boolean;
-    defaultPublicAccess: boolean;
+export { type IStorage, isStorage } from "./interfaces/storage.js";
+export { type WebsiteHostingConfig } from "../../resources/aws/storage";
+export interface CorsRule {
+    readonly allowedOrigins: string[];
+    readonly allowedMethods: string[];
+    readonly allowedHeaders?: string[];
+    readonly exposedHeaders?: string[];
+    readonly maxAge?: number;
 }
-export declare const STORAGE_TYPE_CONFIG: Record<S3BucketType, StorageTypeConfig>;
-export declare function getStorageTypeConfig(type: S3BucketType): StorageTypeConfig;
-type BaseS3Props = {
-    backupVaultTier?: BackupVaultTier;
-    versioned?: boolean;
-    encryption?: "AES256" | "KMS";
-    kmsKeyArn?: string;
-};
-/**
- * Configuration for automatic asset deployment to S3.
- * When provided, creates a BucketDeployment that uploads files during CDK deploy.
- */
 export interface S3DeploymentConfig {
     /** Path to the asset directory (relative to CDK app root) */
     source: string;
-    /**
-     * Whether to remove files from bucket that aren't in the source.
-     * Default: true for static assets, false for caches that grow at runtime.
-     */
+    /** Whether to remove files from bucket that are not in the source. Default: true */
     prune?: boolean;
-    /**
-     * Cache control settings for uploaded files.
-     * If not provided, no cache headers are set.
-     */
+    /** Cache control settings for uploaded files */
     cacheControl?: {
         /** Max age in seconds (e.g., 31536000 for 1 year) */
         maxAge?: number;
-        /** Mark as immutable (browser won't revalidate) */
+        /** Mark as immutable (browser will not revalidate) */
         immutable?: boolean;
     };
 }
-export interface PrivateS3Props extends BaseS3Props {
-    bucketType: "private";
-    publicReadAccess?: boolean;
-    /**
-     * Optional deployment configuration.
-     * When provided, automatically uploads files to the bucket during CDK deploy.
-     */
-    deployment?: S3DeploymentConfig;
-}
-export interface WebsiteS3Props extends BaseS3Props {
-    bucketType: "website";
-    websiteIndexDocument?: string;
-    websiteErrorDocument?: string;
-    cors?: Array<{
-        allowedOrigins: string[];
-        allowedMethods: string[];
-    }>;
+export interface S3Props {
+    readonly bucketName?: string;
+    readonly publicReadAccess?: boolean;
+    readonly websiteHosting?: WebsiteHostingConfig;
+    readonly versioned?: boolean;
+    readonly encryption?: "AES256" | "KMS";
+    readonly kmsKeyArn?: string;
+    readonly backupVaultTier?: BackupVaultTier;
+    readonly cors?: CorsRule[];
+    readonly deployment?: S3DeploymentConfig;
 }
-export interface PublicReadS3Props extends BaseS3Props {
-    bucketType: "publicRead";
-}
-export type IS3Props = PrivateS3Props | WebsiteS3Props | PublicReadS3Props;
-/**
- * Factory for creating S3 storage resources with type-safe return types.
- *
- * @example
- * // Private bucket
- * const assets = app.addStorage(StorageFactory.build("Assets", { bucketType: "private" }));
- * assets.grantPublicAccess(); // ✓ Available on PrivateStorage
- *
- * // Website bucket
- * const site = app.addStorage(StorageFactory.build("Site", { bucketType: "website" }));
- * site.getWebsiteUrl(); // ✓ Available on WebsiteStorage
- */
-export declare class StorageFactory {
-    /** Build a private storage bucket */
-    static build(id: string, props: PrivateS3Props): (app: App, scope: Construct) => PrivateStorage;
-    /** Build a website storage bucket */
-    static build(id: string, props: WebsiteS3Props): (app: App, scope: Construct) => WebsiteStorage;
-    /** Build a public read storage bucket */
-    static build(id: string, props: PublicReadS3Props): (app: App, scope: Construct) => PublicStorage;
+export interface StorageBuildProps extends S3Props {
+    readonly stackPlacement?: "storage" | "cdn" | "compute";
 }
-/**
- * Base S3 storage class.
- * Specific storage types (PrivateStorage, WebsiteStorage, PublicStorage) extend this.
- */
-declare abstract class S3StorageBase extends Construct implements IStorageConnector {
-    readonly id: string;
-    readonly scope: Construct;
-    /** The type of storage resource. Used for runtime type narrowing. */
-    abstract readonly storageType: StorageType;
-    /** The connector type for unified connection processing. */
+export type StorageFactoryFn = ((app: App, scope: Construct) => Storage) & {
+    stackPlacement?: "storage" | "cdn" | "compute";
+};
+export declare function validateStorageProps(props: S3Props): void;
+export declare class Storage extends Construct implements IStorage, IStorageConnector {
     readonly connectorType: "storage";
-    protected bucket: S3Bucket | S3WebsiteBucket | S3PublicReadBucket;
-    protected _bucketType: S3BucketType;
-    constructor(scope: Construct, id: string, props: IS3Props);
-    protected initialisePrivateBucket(props: PrivateS3Props): void;
-    protected initialiseWebsiteBucket(props: WebsiteS3Props): void;
-    protected initialisePublicReadBucket(props: PublicReadS3Props): void;
-    protected addOutputs(): void;
+    private readonly bucket;
+    private readonly bucketDeployment?;
+    constructor(scope: Construct, id: string, props: S3Props);
+    private createDeployment;
+    private addOutputs;
     getBucket(): IBucket;
     getBucketName(): string;
     getBucketArn(): string;
-    getBucketType(): S3BucketType;
     getBucketDomainName(): string;
     getBucketRegionalDomainName(): string;
-    getS3Bucket(): S3Bucket | S3WebsiteBucket | S3PublicReadBucket;
+    getWebsiteUrl(): string | undefined;
+    getDeployment(): BucketDeployment | undefined;
     grantRead(grantee: IGrantable): Grant;
     grantWrite(grantee: IGrantable): Grant;
     grantReadWrite(grantee: IGrantable): Grant;
     grantDelete(grantee: IGrantable): Grant;
     grantPut(grantee: IGrantable): Grant;
+    grantPublicAccess(...keyPrefix: string[]): Grant;
     addEventNotification(event: EventType, dest: IBucketNotificationDestination, ...filters: NotificationKeyFilter[]): void;
     addObjectCreatedNotification(dest: IBucketNotificationDestination, ...filters: NotificationKeyFilter[]): void;
     addObjectRemovedNotification(dest: IBucketNotificationDestination, ...filters: NotificationKeyFilter[]): void;
 }
-/**
- * Private S3 storage.
- * Standard bucket with optional encryption and versioning.
- */
-export declare class PrivateStorage extends S3StorageBase implements IPrivateStorage {
-    readonly storageType: "private";
-    private _deployment?;
-    constructor(scope: Construct, id: string, props: PrivateS3Props);
-    private createDeployment;
-    /**
-     * Grant public access to objects under a prefix.
-     * Use with caution - makes objects publicly readable.
-     */
-    grantPublicAccess(...keyPrefix: string[]): Grant;
-    /**
-     * Get the BucketDeployment construct if one was created.
-     * Returns undefined if no deployment was configured.
-     */
-    getDeployment(): BucketDeployment | undefined;
-}
-/**
- * Website S3 storage.
- * Bucket configured for static website hosting.
- */
-export declare class WebsiteStorage extends S3StorageBase implements IWebsiteStorage {
-    readonly storageType: "website";
-    constructor(scope: Construct, id: string, props: WebsiteS3Props);
-    /** Get the website URL. */
-    getWebsiteUrl(): string;
-}
-/**
- * Public read S3 storage.
- * Bucket with public read access enabled.
- */
-export declare class PublicStorage extends S3StorageBase implements IPublicStorage {
-    readonly storageType: "publicRead";
-    constructor(scope: Construct, id: string, props: PublicReadS3Props);
+export declare class StorageFactory {
+    static build(id: string, props?: StorageBuildProps): StorageFactoryFn;
 }