@fjall/components-infrastructure 0.89.5 → 0.94.0

package/dist/lib/resources/aws/messaging/sns.js

@@ -1,11 +1,10 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SNSTopic = void 0;
-const constructs_1 = require("constructs");
-const aws_cdk_lib_1 = require("aws-cdk-lib");
-const aws_sns_1 = require("aws-cdk-lib/aws-sns");
-const utils_1 = require("./utils");
-class SNSTopic extends constructs_1.Construct {
+import { Construct } from "constructs";
+import { CfnOutput } from "aws-cdk-lib";
+import { Topic } from "aws-cdk-lib/aws-sns";
+import { toRemovalPolicy } from "./utils.js";
+export class SNSTopic extends Construct {
+    id;
+    topic;
     constructor(scope, id, props) {
         super(scope, id);
         this.id = id;
@@ -15,7 +14,7 @@ class SNSTopic extends constructs_1.Construct {
                 ? `${props.topicName}.fifo`
                 : props.topicName
             : undefined;
-        this.topic = new aws_sns_1.Topic(this, `${id}Topic`, {
+        this.topic = new Topic(this, `${id}Topic`, {
             topicName,
             displayName: props.displayName,
             fifo: isFifo,
@@ -23,13 +22,13 @@ class SNSTopic extends constructs_1.Construct {
                 ? (props.contentBasedDeduplication ?? true)
                 : undefined
         });
-        this.topic.applyRemovalPolicy((0, utils_1.toRemovalPolicy)(props.removalPolicy));
-        new aws_cdk_lib_1.CfnOutput(this, `${id}TopicArn`, {
+        this.topic.applyRemovalPolicy(toRemovalPolicy(props.removalPolicy));
+        new CfnOutput(this, `${id}TopicArn`, {
             key: `${id}TopicArn`,
             value: this.topic.topicArn,
             description: `SNS topic ARN for ${id}`
         });
-        new aws_cdk_lib_1.CfnOutput(this, `${id}TopicName`, {
+        new CfnOutput(this, `${id}TopicName`, {
             key: `${id}TopicName`,
             value: this.topic.topicName,
             description: `SNS topic name for ${id}`
@@ -66,5 +65,3 @@ class SNSTopic extends constructs_1.Construct {
         return this.topic.grantSubscribe(grantee);
     }
 }
-exports.SNSTopic = SNSTopic;
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoic25zLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vLi4vLi4vbGliL3Jlc291cmNlcy9hd3MvbWVzc2FnaW5nL3Nucy50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7QUFBQSwyQ0FBdUM7QUFDdkMsNkNBQXdDO0FBQ3hDLGlEQUF5RDtBQUV6RCxtQ0FBMEM7QUFVMUMsTUFBYSxRQUFTLFNBQVEsc0JBQVM7SUFJckMsWUFBWSxLQUFnQixFQUFFLEVBQVUsRUFBRSxLQUFvQjtRQUM1RCxLQUFLLENBQUMsS0FBSyxFQUFFLEVBQUUsQ0FBQyxDQUFDO1FBQ2pCLElBQUksQ0FBQyxFQUFFLEdBQUcsRUFBRSxDQUFDO1FBRWIsTUFBTSxNQUFNLEdBQUcsS0FBSyxDQUFDLElBQUksS0FBSyxJQUFJLENBQUM7UUFDbkMsTUFBTSxTQUFTLEdBQUcsS0FBSyxDQUFDLFNBQVM7WUFDL0IsQ0FBQyxDQUFDLE1BQU07Z0JBQ04sQ0FBQyxDQUFDLEdBQUcsS0FBSyxDQUFDLFNBQVMsT0FBTztnQkFDM0IsQ0FBQyxDQUFDLEtBQUssQ0FBQyxTQUFTO1lBQ25CLENBQUMsQ0FBQyxTQUFTLENBQUM7UUFFZCxJQUFJLENBQUMsS0FBSyxHQUFHLElBQUksZUFBSyxDQUFDLElBQUksRUFBRSxHQUFHLEVBQUUsT0FBTyxFQUFFO1lBQ3pDLFNBQVM7WUFDVCxXQUFXLEVBQUUsS0FBSyxDQUFDLFdBQVc7WUFDOUIsSUFBSSxFQUFFLE1BQU07WUFDWix5QkFBeUIsRUFBRSxNQUFNO2dCQUMvQixDQUFDLENBQUMsQ0FBQyxLQUFLLENBQUMseUJBQXlCLElBQUksSUFBSSxDQUFDO2dCQUMzQyxDQUFDLENBQUMsU0FBUztTQUNkLENBQUMsQ0FBQztRQUVILElBQUksQ0FBQyxLQUFLLENBQUMsa0JBQWtCLENBQUMsSUFBQSx1QkFBZSxFQUFDLEtBQUssQ0FBQyxhQUFhLENBQUMsQ0FBQyxDQUFDO1FBRXBFLElBQUksdUJBQVMsQ0FBQyxJQUFJLEVBQUUsR0FBRyxFQUFFLFVBQVUsRUFBRTtZQUNuQyxHQUFHLEVBQUUsR0FBRyxFQUFFLFVBQVU7WUFDcEIsS0FBSyxFQUFFLElBQUksQ0FBQyxLQUFLLENBQUMsUUFBUTtZQUMxQixXQUFXLEVBQUUscUJBQXFCLEVBQUUsRUFBRTtTQUN2QyxDQUFDLENBQUM7UUFFSCxJQUFJLHVCQUFTLENBQUMsSUFBSSxFQUFFLEdBQUcsRUFBRSxXQUFXLEVBQUU7WUFDcEMsR0FBRyxFQUFFLEdBQUcsRUFBRSxXQUFXO1lBQ3JCLEtBQUssRUFBRSxJQUFJLENBQUMsS0FBSyxDQUFDLFNBQVM7WUFDM0IsV0FBVyxFQUFFLHNCQUFzQixFQUFFLEVBQUU7U0FDeEMsQ0FBQyxDQUFDO0lBQ0wsQ0FBQztJQUVEOztPQUVHO0lBQ0ksV0FBVztRQUNoQixPQUFPLElBQUksQ0FBQyxLQUFLLENBQUMsUUFBUSxDQUFDO0lBQzdCLENBQUM7SUFFRDs7T0FFRztJQUNJLFlBQVk7UUFDakIsT0FBTyxJQUFJLENBQUMsS0FBSyxDQUFDLFNBQVMsQ0FBQztJQUM5QixDQUFDO0lBRUQ7O09BRUc7SUFDSSxRQUFRO1FBQ2IsT0FBTyxJQUFJLENBQUMsS0FBSyxDQUFDO0lBQ3BCLENBQUM7SUFFRDs7T0FFRztJQUNJLFlBQVksQ0FBQyxPQUFtQjtRQUNyQyxPQUFPLElBQUksQ0FBQyxLQUFLLENBQUMsWUFBWSxDQUFDLE9BQU8sQ0FBQyxDQUFDO0lBQzFDLENBQUM7SUFFRDs7T0FFRztJQUNJLGNBQWMsQ0FBQyxPQUFtQjtRQUN2QyxPQUFPLElBQUksQ0FBQyxLQUFLLENBQUMsY0FBYyxDQUFDLE9BQU8sQ0FBQyxDQUFDO0lBQzVDLENBQUM7Q0FDRjtBQXpFRCw0QkF5RUMiLCJzb3VyY2VzQ29udGVudCI6WyJpbXBvcnQgeyBDb25zdHJ1Y3QgfSBmcm9tIFwiY29uc3RydWN0c1wiO1xuaW1wb3J0IHsgQ2ZuT3V0cHV0IH0gZnJvbSBcImF3cy1jZGstbGliXCI7XG5pbXBvcnQgeyBUb3BpYywgdHlwZSBJVG9waWMgfSBmcm9tIFwiYXdzLWNkay1saWIvYXdzLXNuc1wiO1xuaW1wb3J0IHsgdHlwZSBJR3JhbnRhYmxlLCB0eXBlIEdyYW50IH0gZnJvbSBcImF3cy1jZGstbGliL2F3cy1pYW1cIjtcbmltcG9ydCB7IHRvUmVtb3ZhbFBvbGljeSB9IGZyb20gXCIuL3V0aWxzXCI7XG5cbmV4cG9ydCBpbnRlcmZhY2UgU05TVG9waWNQcm9wcyB7XG4gIHRvcGljTmFtZT86IHN0cmluZztcbiAgZGlzcGxheU5hbWU/OiBzdHJpbmc7XG4gIGZpZm8/OiBib29sZWFuO1xuICBjb250ZW50QmFzZWREZWR1cGxpY2F0aW9uPzogYm9vbGVhbjtcbiAgcmVtb3ZhbFBvbGljeT86IFwiREVTVFJPWVwiIHwgXCJSRVRBSU5cIjtcbn1cblxuZXhwb3J0IGNsYXNzIFNOU1RvcGljIGV4dGVuZHMgQ29uc3RydWN0IHtcbiAgcHVibGljIHJlYWRvbmx5IGlkOiBzdHJpbmc7XG4gIHByaXZhdGUgdG9waWM6IFRvcGljO1xuXG4gIGNvbnN0cnVjdG9yKHNjb3BlOiBDb25zdHJ1Y3QsIGlkOiBzdHJpbmcsIHByb3BzOiBTTlNUb3BpY1Byb3BzKSB7XG4gICAgc3VwZXIoc2NvcGUsIGlkKTtcbiAgICB0aGlzLmlkID0gaWQ7XG5cbiAgICBjb25zdCBpc0ZpZm8gPSBwcm9wcy5maWZvID09PSB0cnVlO1xuICAgIGNvbnN0IHRvcGljTmFtZSA9IHByb3BzLnRvcGljTmFtZVxuICAgICAgPyBpc0ZpZm9cbiAgICAgICAgPyBgJHtwcm9wcy50b3BpY05hbWV9LmZpZm9gXG4gICAgICAgIDogcHJvcHMudG9waWNOYW1lXG4gICAgICA6IHVuZGVmaW5lZDtcblxuICAgIHRoaXMudG9waWMgPSBuZXcgVG9waWModGhpcywgYCR7aWR9VG9waWNgLCB7XG4gICAgICB0b3BpY05hbWUsXG4gICAgICBkaXNwbGF5TmFtZTogcHJvcHMuZGlzcGxheU5hbWUsXG4gICAgICBmaWZvOiBpc0ZpZm8sXG4gICAgICBjb250ZW50QmFzZWREZWR1cGxpY2F0aW9uOiBpc0ZpZm9cbiAgICAgICAgPyAocHJvcHMuY29udGVudEJhc2VkRGVkdXBsaWNhdGlvbiA/PyB0cnVlKVxuICAgICAgICA6IHVuZGVmaW5lZFxuICAgIH0pO1xuXG4gICAgdGhpcy50b3BpYy5hcHBseVJlbW92YWxQb2xpY3kodG9SZW1vdmFsUG9saWN5KHByb3BzLnJlbW92YWxQb2xpY3kpKTtcblxuICAgIG5ldyBDZm5PdXRwdXQodGhpcywgYCR7aWR9VG9waWNBcm5gLCB7XG4gICAgICBrZXk6IGAke2lkfVRvcGljQXJuYCxcbiAgICAgIHZhbHVlOiB0aGlzLnRvcGljLnRvcGljQXJuLFxuICAgICAgZGVzY3JpcHRpb246IGBTTlMgdG9waWMgQVJOIGZvciAke2lkfWBcbiAgICB9KTtcblxuICAgIG5ldyBDZm5PdXRwdXQodGhpcywgYCR7aWR9VG9waWNOYW1lYCwge1xuICAgICAga2V5OiBgJHtpZH1Ub3BpY05hbWVgLFxuICAgICAgdmFsdWU6IHRoaXMudG9waWMudG9waWNOYW1lLFxuICAgICAgZGVzY3JpcHRpb246IGBTTlMgdG9waWMgbmFtZSBmb3IgJHtpZH1gXG4gICAgfSk7XG4gIH1cblxuICAvKipcbiAgICogR2V0IHRoZSBTTlMgdG9waWMgQVJOLlxuICAgKi9cbiAgcHVibGljIGdldFRvcGljQXJuKCk6IHN0cmluZyB7XG4gICAgcmV0dXJuIHRoaXMudG9waWMudG9waWNBcm47XG4gIH1cblxuICAvKipcbiAgICogR2V0IHRoZSBTTlMgdG9waWMgbmFtZS5cbiAgICovXG4gIHB1YmxpYyBnZXRUb3BpY05hbWUoKTogc3RyaW5nIHtcbiAgICByZXR1cm4gdGhpcy50b3BpYy50b3BpY05hbWU7XG4gIH1cblxuICAvKipcbiAgICogR2V0IHRoZSB1bmRlcmx5aW5nIENESyBUb3BpYyBjb25zdHJ1Y3QuXG4gICAqL1xuICBwdWJsaWMgZ2V0VG9waWMoKTogSVRvcGljIHtcbiAgICByZXR1cm4gdGhpcy50b3BpYztcbiAgfVxuXG4gIC8qKlxuICAgKiBHcmFudCBwdWJsaXNoIHBlcm1pc3Npb25zIHRvIHRoZSBncmFudGVlLlxuICAgKi9cbiAgcHVibGljIGdyYW50UHVibGlzaChncmFudGVlOiBJR3JhbnRhYmxlKTogR3JhbnQge1xuICAgIHJldHVybiB0aGlzLnRvcGljLmdyYW50UHVibGlzaChncmFudGVlKTtcbiAgfVxuXG4gIC8qKlxuICAgKiBHcmFudCBzdWJzY3JpYmUgcGVybWlzc2lvbnMgdG8gdGhlIGdyYW50ZWUuXG4gICAqL1xuICBwdWJsaWMgZ3JhbnRTdWJzY3JpYmUoZ3JhbnRlZTogSUdyYW50YWJsZSk6IEdyYW50IHtcbiAgICByZXR1cm4gdGhpcy50b3BpYy5ncmFudFN1YnNjcmliZShncmFudGVlKTtcbiAgfVxufVxuIl19

package/dist/lib/resources/aws/messaging/sqs.js

@@ -1,11 +1,8 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SQSQueue = exports.SQS_LIMITS = void 0;
-const constructs_1 = require("constructs");
-const aws_cdk_lib_1 = require("aws-cdk-lib");
-const capitaliseString_1 = require("../../../utils/capitaliseString");
-const aws_sqs_1 = require("aws-cdk-lib/aws-sqs");
-const utils_1 = require("./utils");
+import { Construct } from "constructs";
+import { CfnOutput, Duration } from "aws-cdk-lib";
+import { toPascalCase } from "../../../utils/capitaliseString.js";
+import { Queue, QueueEncryption, FifoThroughputLimit, DeduplicationScope } from "aws-cdk-lib/aws-sqs";
+import { toRemovalPolicy } from "./utils.js";
 /**
  * AWS SQS service limits and defaults.
  * @see https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-quotas.html
@@ -45,24 +42,24 @@ const SQS_LIMITS = {
         MAX_SIZE: 10
     }
 };
-exports.SQS_LIMITS = SQS_LIMITS;
+export { SQS_LIMITS };
 function toEncryption(encryption) {
     switch (encryption) {
         case "SSE_KMS":
-            return aws_sqs_1.QueueEncryption.KMS;
+            return QueueEncryption.KMS;
         case "NONE":
-            return aws_sqs_1.QueueEncryption.UNENCRYPTED;
+            return QueueEncryption.UNENCRYPTED;
         case "SSE_SQS":
         default:
-            return aws_sqs_1.QueueEncryption.SQS_MANAGED;
+            return QueueEncryption.SQS_MANAGED;
     }
 }
 function toFifoThroughputLimit(limit) {
     switch (limit) {
         case "perQueue":
-            return aws_sqs_1.FifoThroughputLimit.PER_QUEUE;
+            return FifoThroughputLimit.PER_QUEUE;
         case "perMessageGroupId":
-            return aws_sqs_1.FifoThroughputLimit.PER_MESSAGE_GROUP_ID;
+            return FifoThroughputLimit.PER_MESSAGE_GROUP_ID;
         default:
             return undefined;
     }
@@ -70,19 +67,22 @@ function toFifoThroughputLimit(limit) {
 function toDeduplicationScope(scope) {
     switch (scope) {
         case "queue":
-            return aws_sqs_1.DeduplicationScope.QUEUE;
+            return DeduplicationScope.QUEUE;
         case "messageGroup":
-            return aws_sqs_1.DeduplicationScope.MESSAGE_GROUP;
+            return DeduplicationScope.MESSAGE_GROUP;
         default:
             return undefined;
     }
 }
-class SQSQueue extends constructs_1.Construct {
+export class SQSQueue extends Construct {
+    id;
+    queue;
+    dlq;
     constructor(scope, id, props) {
         super(scope, id);
         this.id = id;
         // Sanitise id for CloudFormation output keys (must be alphanumeric)
-        const outputName = (0, capitaliseString_1.toPascalCase)(id);
+        const outputName = toPascalCase(id);
         const isFifo = props.queueType === "fifo";
         const queueName = props.queueName
             ? isFifo
@@ -105,45 +105,45 @@ class SQSQueue extends constructs_1.Construct {
                         ? `${props.queueName}-dlq.fifo`
                         : `${props.queueName}-dlq`
                     : undefined;
-                this.dlq = new aws_sqs_1.Queue(this, `${id}DeadLetterQueue`, {
+                this.dlq = new Queue(this, `${id}DeadLetterQueue`, {
                     queueName: dlqName,
                     fifo: isFifo,
                     encryption: toEncryption(props.encryption),
-                    retentionPeriod: aws_cdk_lib_1.Duration.days(SQS_LIMITS.DEAD_LETTER_QUEUE.DEFAULT_RETENTION_DAYS),
-                    removalPolicy: (0, utils_1.toRemovalPolicy)(props.removalPolicy)
+                    retentionPeriod: Duration.days(SQS_LIMITS.DEAD_LETTER_QUEUE.DEFAULT_RETENTION_DAYS),
+                    removalPolicy: toRemovalPolicy(props.removalPolicy)
                 });
                 deadLetterQueue = {
                     queue: this.dlq,
                     maxReceiveCount: props.deadLetterQueue.maxReceiveCount ??
                         SQS_LIMITS.DEAD_LETTER_QUEUE.DEFAULT_RECEIVE_COUNT
                 };
-                new aws_cdk_lib_1.CfnOutput(this, `${outputName}DeadLetterQueueUrl`, {
+                new CfnOutput(this, `${outputName}DeadLetterQueueUrl`, {
                     key: `${outputName}DeadLetterQueueUrl`,
                     value: this.dlq.queueUrl,
                     description: `Dead letter queue URL for ${id}`
                 });
-                new aws_cdk_lib_1.CfnOutput(this, `${outputName}DeadLetterQueueArn`, {
+                new CfnOutput(this, `${outputName}DeadLetterQueueArn`, {
                     key: `${outputName}DeadLetterQueueArn`,
                     value: this.dlq.queueArn,
                     description: `Dead letter queue ARN for ${id}`
                 });
             }
         }
-        this.queue = new aws_sqs_1.Queue(this, `${id}Queue`, {
+        this.queue = new Queue(this, `${id}Queue`, {
             queueName,
             fifo: isFifo,
             visibilityTimeout: props.visibilityTimeout
-                ? aws_cdk_lib_1.Duration.seconds(props.visibilityTimeout)
+                ? Duration.seconds(props.visibilityTimeout)
                 : undefined,
             retentionPeriod: props.messageRetentionPeriod
-                ? aws_cdk_lib_1.Duration.seconds(props.messageRetentionPeriod)
+                ? Duration.seconds(props.messageRetentionPeriod)
                 : undefined,
             receiveMessageWaitTime: props.receiveMessageWaitTime
-                ? aws_cdk_lib_1.Duration.seconds(props.receiveMessageWaitTime)
+                ? Duration.seconds(props.receiveMessageWaitTime)
                 : undefined,
             maxMessageSizeBytes: props.maxMessageSize,
             deliveryDelay: props.deliveryDelay
-                ? aws_cdk_lib_1.Duration.seconds(props.deliveryDelay)
+                ? Duration.seconds(props.deliveryDelay)
                 : undefined,
             deadLetterQueue,
             encryption: toEncryption(props.encryption),
@@ -156,19 +156,19 @@ class SQSQueue extends constructs_1.Construct {
             deduplicationScope: isFifo
                 ? toDeduplicationScope(props.deduplicationScope)
                 : undefined,
-            removalPolicy: (0, utils_1.toRemovalPolicy)(props.removalPolicy)
+            removalPolicy: toRemovalPolicy(props.removalPolicy)
         });
-        new aws_cdk_lib_1.CfnOutput(this, `${outputName}QueueUrl`, {
+        new CfnOutput(this, `${outputName}QueueUrl`, {
             key: `${outputName}QueueUrl`,
             value: this.queue.queueUrl,
             description: `SQS queue URL for ${id}`
         });
-        new aws_cdk_lib_1.CfnOutput(this, `${outputName}QueueArn`, {
+        new CfnOutput(this, `${outputName}QueueArn`, {
             key: `${outputName}QueueArn`,
             value: this.queue.queueArn,
             description: `SQS queue ARN for ${id}`
         });
-        new aws_cdk_lib_1.CfnOutput(this, `${outputName}QueueName`, {
+        new CfnOutput(this, `${outputName}QueueName`, {
             key: `${outputName}QueueName`,
             value: this.queue.queueName,
             description: `SQS queue name for ${id}`
@@ -230,5 +230,3 @@ class SQSQueue extends constructs_1.Construct {
         return this.queue.grantConsumeMessages(grantee);
     }
 }
-exports.SQSQueue = SQSQueue;
-//# sourceMappingURL=data:application/json;base64,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

package/dist/lib/resources/aws/messaging/utils.d.ts

@@ -1,2 +1,2 @@
-export { toRemovalPolicy } from "../../../utils/removalPolicy";
+export { toRemovalPolicy } from "../../../utils/removalPolicy.js";
 export type RemovalPolicyString = "DESTROY" | "RETAIN";

package/dist/lib/resources/aws/messaging/utils.js

@@ -1,6 +1 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.toRemovalPolicy = void 0;
-var removalPolicy_1 = require("../../../utils/removalPolicy");
-Object.defineProperty(exports, "toRemovalPolicy", { enumerable: true, get: function () { return removalPolicy_1.toRemovalPolicy; } });
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoidXRpbHMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi9saWIvcmVzb3VyY2VzL2F3cy9tZXNzYWdpbmcvdXRpbHMudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7O0FBQUEsOERBQStEO0FBQXRELGdIQUFBLGVBQWUsT0FBQSIsInNvdXJjZXNDb250ZW50IjpbImV4cG9ydCB7IHRvUmVtb3ZhbFBvbGljeSB9IGZyb20gXCIuLi8uLi8uLi91dGlscy9yZW1vdmFsUG9saWN5XCI7XG5cbmV4cG9ydCB0eXBlIFJlbW92YWxQb2xpY3lTdHJpbmcgPSBcIkRFU1RST1lcIiB8IFwiUkVUQUlOXCI7XG4iXX0=
+export { toRemovalPolicy } from "../../../utils/removalPolicy.js";

package/dist/lib/resources/aws/monitoring/alarmDefaults.d.ts

@@ -0,0 +1,36 @@
+import { Duration } from "aws-cdk-lib";
+import type { Alarm } from "aws-cdk-lib/aws-cloudwatch";
+import type { SnsAction } from "aws-cdk-lib/aws-cloudwatch-actions";
+/**
+ * Tag key for mapping CloudWatch alarms to Fjall applications.
+ * Cross-system contract: the webhook at webapp/app/routes/api/internal/alarm-webhook.ts
+ * extracts this tag from alarm descriptions and dimensions.
+ */
+export declare const APPLICATION_ID_TAG_KEY = "fjall:applicationId";
+export declare const ALARM_DEFAULTS: {
+    readonly EVALUATION_PERIOD: Duration;
+    readonly ECS: {
+        readonly CPU: 80;
+        readonly MEMORY: 80;
+        readonly RUNNING_TASKS_MIN: 1;
+    };
+    readonly ALB: {
+        readonly HTTP_5XX_PERCENT: 5;
+        readonly P99_RESPONSE_TIME_MS: 3000;
+    };
+    readonly RDS: {
+        readonly CPU: 80;
+        readonly FREE_STORAGE_GIB: 5;
+        readonly CONNECTIONS: 50;
+    };
+    readonly LAMBDA: {
+        readonly ERROR_RATE: 5;
+        readonly DURATION_PERCENT: 80;
+    };
+};
+/** Build alarm description, appending the application ID tag for webhook extraction. */
+export declare function buildAlarmDescription(baseDescription: string, applicationId: string | undefined): string;
+/** Wire an alarm to the SNS topic (both ALARM and OK transitions) and collect it. */
+export declare function registerAlarm(alarm: Alarm, snsAction: SnsAction, alarms: Alarm[]): void;
+/** Tag all alarms with the application ID for webhook-to-application mapping. */
+export declare function tagAlarmsWithApplicationId(alarms: Alarm[], applicationId: string | undefined): void;

package/dist/lib/resources/aws/monitoring/alarmDefaults.js

@@ -0,0 +1,34 @@
+import { Duration, Tags } from "aws-cdk-lib";
+/**
+ * Tag key for mapping CloudWatch alarms to Fjall applications.
+ * Cross-system contract: the webhook at webapp/app/routes/api/internal/alarm-webhook.ts
+ * extracts this tag from alarm descriptions and dimensions.
+ */
+export const APPLICATION_ID_TAG_KEY = "fjall:applicationId";
+export const ALARM_DEFAULTS = {
+    EVALUATION_PERIOD: Duration.minutes(5),
+    ECS: { CPU: 80, MEMORY: 80, RUNNING_TASKS_MIN: 1 },
+    ALB: { HTTP_5XX_PERCENT: 5, P99_RESPONSE_TIME_MS: 3000 },
+    RDS: { CPU: 80, FREE_STORAGE_GIB: 5, CONNECTIONS: 50 },
+    LAMBDA: { ERROR_RATE: 5, DURATION_PERCENT: 80 }
+};
+/** Build alarm description, appending the application ID tag for webhook extraction. */
+export function buildAlarmDescription(baseDescription, applicationId) {
+    if (!applicationId)
+        return baseDescription;
+    return `${baseDescription} ${APPLICATION_ID_TAG_KEY}=${applicationId}`;
+}
+/** Wire an alarm to the SNS topic (both ALARM and OK transitions) and collect it. */
+export function registerAlarm(alarm, snsAction, alarms) {
+    alarm.addAlarmAction(snsAction);
+    alarm.addOkAction(snsAction);
+    alarms.push(alarm);
+}
+/** Tag all alarms with the application ID for webhook-to-application mapping. */
+export function tagAlarmsWithApplicationId(alarms, applicationId) {
+    if (!applicationId)
+        return;
+    for (const alarm of alarms) {
+        Tags.of(alarm).add(APPLICATION_ID_TAG_KEY, applicationId);
+    }
+}

package/dist/lib/resources/aws/monitoring/ecsAlarms.d.ts

@@ -0,0 +1,21 @@
+import { Alarm } from "aws-cdk-lib/aws-cloudwatch";
+import type { FargateService, Ec2Service } from "aws-cdk-lib/aws-ecs";
+import { type IApplicationTargetGroup } from "aws-cdk-lib/aws-elasticloadbalancingv2";
+import type { ITopic } from "aws-cdk-lib/aws-sns";
+import type { Construct } from "constructs";
+export interface EcsServiceAlarmThresholds {
+    cpuThreshold?: number;
+    memoryThreshold?: number;
+    runningTasksMinimum?: number;
+    http5xxThreshold?: number;
+}
+export interface EcsServiceAlarmsProps {
+    scope: Construct;
+    serviceName: string;
+    service: FargateService | Ec2Service;
+    targetGroup?: IApplicationTargetGroup;
+    config: EcsServiceAlarmThresholds;
+    alarmTopic: ITopic;
+    applicationId?: string;
+}
+export declare function createEcsServiceAlarms(props: EcsServiceAlarmsProps): Alarm[];

package/dist/lib/resources/aws/monitoring/ecsAlarms.js

@@ -0,0 +1,88 @@
+import { Duration } from "aws-cdk-lib";
+import { Alarm, ComparisonOperator, MathExpression, TreatMissingData } from "aws-cdk-lib/aws-cloudwatch";
+import { SnsAction } from "aws-cdk-lib/aws-cloudwatch-actions";
+import { HttpCodeTarget } from "aws-cdk-lib/aws-elasticloadbalancingv2";
+import { ALARM_DEFAULTS, registerAlarm, tagAlarmsWithApplicationId, buildAlarmDescription } from "./alarmDefaults.js";
+export function createEcsServiceAlarms(props) {
+    const { scope, serviceName, service, targetGroup, config, alarmTopic, applicationId } = props;
+    const alarms = [];
+    const snsAction = new SnsAction(alarmTopic);
+    const cpuAlarm = new Alarm(scope, `${serviceName}CpuAlarm`, {
+        alarmDescription: buildAlarmDescription(`ECS service ${serviceName} CPU utilisation exceeds threshold`, applicationId),
+        metric: service.metricCpuUtilization({
+            period: ALARM_DEFAULTS.EVALUATION_PERIOD
+        }),
+        threshold: config.cpuThreshold ?? ALARM_DEFAULTS.ECS.CPU,
+        evaluationPeriods: 3,
+        datapointsToAlarm: 2,
+        comparisonOperator: ComparisonOperator.GREATER_THAN_THRESHOLD,
+        treatMissingData: TreatMissingData.NOT_BREACHING
+    });
+    registerAlarm(cpuAlarm, snsAction, alarms);
+    const memoryAlarm = new Alarm(scope, `${serviceName}MemoryAlarm`, {
+        alarmDescription: buildAlarmDescription(`ECS service ${serviceName} memory utilisation exceeds threshold`, applicationId),
+        metric: service.metricMemoryUtilization({
+            period: ALARM_DEFAULTS.EVALUATION_PERIOD
+        }),
+        threshold: config.memoryThreshold ?? ALARM_DEFAULTS.ECS.MEMORY,
+        evaluationPeriods: 3,
+        datapointsToAlarm: 2,
+        comparisonOperator: ComparisonOperator.GREATER_THAN_THRESHOLD,
+        treatMissingData: TreatMissingData.NOT_BREACHING
+    });
+    registerAlarm(memoryAlarm, snsAction, alarms);
+    const runningMin = config.runningTasksMinimum ?? ALARM_DEFAULTS.ECS.RUNNING_TASKS_MIN;
+    if (runningMin > 0) {
+        const runningTasksAlarm = new Alarm(scope, `${serviceName}RunningTasksAlarm`, {
+            alarmDescription: buildAlarmDescription(`ECS service ${serviceName} running tasks below minimum`, applicationId),
+            metric: service.metric("RunningTaskCount", {
+                period: Duration.minutes(1),
+                statistic: "Average"
+            }),
+            threshold: runningMin,
+            evaluationPeriods: 2,
+            datapointsToAlarm: 2,
+            comparisonOperator: ComparisonOperator.LESS_THAN_THRESHOLD,
+            treatMissingData: TreatMissingData.BREACHING
+        });
+        registerAlarm(runningTasksAlarm, snsAction, alarms);
+    }
+    // ALB-based alarms only when a target group is provided
+    if (targetGroup) {
+        const http5xxThreshold = config.http5xxThreshold ?? ALARM_DEFAULTS.ALB.HTTP_5XX_PERCENT;
+        const http5xxAlarm = new Alarm(scope, `${serviceName}Http5xxAlarm`, {
+            alarmDescription: buildAlarmDescription(`ECS service ${serviceName} 5xx error rate exceeds ${http5xxThreshold}%`, applicationId),
+            metric: new MathExpression({
+                expression: "(errors / requests) * 100",
+                label: "5xx Error Rate %",
+                period: ALARM_DEFAULTS.EVALUATION_PERIOD,
+                usingMetrics: {
+                    errors: targetGroup.metrics.httpCodeTarget(HttpCodeTarget.TARGET_5XX_COUNT, { statistic: "Sum" }),
+                    requests: targetGroup.metrics.requestCount({ statistic: "Sum" })
+                }
+            }),
+            threshold: http5xxThreshold,
+            evaluationPeriods: 2,
+            datapointsToAlarm: 2,
+            comparisonOperator: ComparisonOperator.GREATER_THAN_THRESHOLD,
+            treatMissingData: TreatMissingData.NOT_BREACHING
+        });
+        registerAlarm(http5xxAlarm, snsAction, alarms);
+        const p99Alarm = new Alarm(scope, `${serviceName}P99ResponseTimeAlarm`, {
+            alarmDescription: buildAlarmDescription(`ECS service ${serviceName} p99 response time exceeds threshold`, applicationId),
+            metric: targetGroup.metrics.targetResponseTime({
+                period: ALARM_DEFAULTS.EVALUATION_PERIOD,
+                statistic: "p99"
+            }),
+            // Response time metric is in seconds
+            threshold: ALARM_DEFAULTS.ALB.P99_RESPONSE_TIME_MS / 1000,
+            evaluationPeriods: 2,
+            datapointsToAlarm: 2,
+            comparisonOperator: ComparisonOperator.GREATER_THAN_THRESHOLD,
+            treatMissingData: TreatMissingData.NOT_BREACHING
+        });
+        registerAlarm(p99Alarm, snsAction, alarms);
+    }
+    tagAlarmsWithApplicationId(alarms, applicationId);
+    return alarms;
+}

package/dist/lib/resources/aws/monitoring/index.d.ts

@@ -0,0 +1,4 @@
+export { ALARM_DEFAULTS, APPLICATION_ID_TAG_KEY, registerAlarm, tagAlarmsWithApplicationId, buildAlarmDescription } from "./alarmDefaults.js";
+export { createEcsServiceAlarms, type EcsServiceAlarmThresholds, type EcsServiceAlarmsProps } from "./ecsAlarms.js";
+export { createRdsAlarms, type RdsAlarmThresholds, type RdsAlarmsProps } from "./rdsAlarms.js";
+export { createLambdaAlarms, type LambdaAlarmThresholds, type LambdaAlarmsProps } from "./lambdaAlarms.js";

package/dist/lib/resources/aws/monitoring/index.js

@@ -1,5 +1,4 @@
-"use strict";
-// Per-app monitoring roles have been removed.
-// Monitoring is now handled by the per-account AccountMonitoringRole
-// construct in config/aws/accountMonitoringRole.ts.
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi9saWIvcmVzb3VyY2VzL2F3cy9tb25pdG9yaW5nL2luZGV4LnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7QUFBQSw4Q0FBOEM7QUFDOUMscUVBQXFFO0FBQ3JFLG9EQUFvRCIsInNvdXJjZXNDb250ZW50IjpbIi8vIFBlci1hcHAgbW9uaXRvcmluZyByb2xlcyBoYXZlIGJlZW4gcmVtb3ZlZC5cbi8vIE1vbml0b3JpbmcgaXMgbm93IGhhbmRsZWQgYnkgdGhlIHBlci1hY2NvdW50IEFjY291bnRNb25pdG9yaW5nUm9sZVxuLy8gY29uc3RydWN0IGluIGNvbmZpZy9hd3MvYWNjb3VudE1vbml0b3JpbmdSb2xlLnRzLlxuIl19
+export { ALARM_DEFAULTS, APPLICATION_ID_TAG_KEY, registerAlarm, tagAlarmsWithApplicationId, buildAlarmDescription } from "./alarmDefaults.js";
+export { createEcsServiceAlarms } from "./ecsAlarms.js";
+export { createRdsAlarms } from "./rdsAlarms.js";
+export { createLambdaAlarms } from "./lambdaAlarms.js";

package/dist/lib/resources/aws/monitoring/lambdaAlarms.d.ts

@@ -0,0 +1,18 @@
+import { Alarm } from "aws-cdk-lib/aws-cloudwatch";
+import type { IFunction } from "aws-cdk-lib/aws-lambda";
+import type { ITopic } from "aws-cdk-lib/aws-sns";
+import type { Construct } from "constructs";
+export interface LambdaAlarmThresholds {
+    errorRateThreshold?: number;
+    durationThresholdPercent?: number;
+}
+export interface LambdaAlarmsProps {
+    scope: Construct;
+    functionName: string;
+    lambdaFunction: IFunction;
+    timeoutSeconds: number;
+    config: LambdaAlarmThresholds;
+    alarmTopic: ITopic;
+    applicationId?: string;
+}
+export declare function createLambdaAlarms(props: LambdaAlarmsProps): Alarm[];

package/dist/lib/resources/aws/monitoring/lambdaAlarms.js

@@ -0,0 +1,44 @@
+import { Alarm, ComparisonOperator, MathExpression, TreatMissingData } from "aws-cdk-lib/aws-cloudwatch";
+import { SnsAction } from "aws-cdk-lib/aws-cloudwatch-actions";
+import { ALARM_DEFAULTS, registerAlarm, tagAlarmsWithApplicationId, buildAlarmDescription } from "./alarmDefaults.js";
+export function createLambdaAlarms(props) {
+    const { scope, functionName, lambdaFunction, timeoutSeconds, config, alarmTopic, applicationId } = props;
+    const alarms = [];
+    const snsAction = new SnsAction(alarmTopic);
+    const errorRateThreshold = config.errorRateThreshold ?? ALARM_DEFAULTS.LAMBDA.ERROR_RATE;
+    const errorsAlarm = new Alarm(scope, `${functionName}ErrorsAlarm`, {
+        alarmDescription: buildAlarmDescription(`Lambda ${functionName} error rate exceeds ${errorRateThreshold}%`, applicationId),
+        metric: new MathExpression({
+            expression: "(errors / invocations) * 100",
+            label: "Error Rate %",
+            period: ALARM_DEFAULTS.EVALUATION_PERIOD,
+            usingMetrics: {
+                errors: lambdaFunction.metricErrors({ statistic: "Sum" }),
+                invocations: lambdaFunction.metricInvocations({ statistic: "Sum" })
+            }
+        }),
+        threshold: errorRateThreshold,
+        evaluationPeriods: 2,
+        datapointsToAlarm: 2,
+        comparisonOperator: ComparisonOperator.GREATER_THAN_THRESHOLD,
+        treatMissingData: TreatMissingData.NOT_BREACHING
+    });
+    registerAlarm(errorsAlarm, snsAction, alarms);
+    const durationPercent = config.durationThresholdPercent ?? ALARM_DEFAULTS.LAMBDA.DURATION_PERCENT;
+    const durationThresholdMs = (timeoutSeconds * 1000 * durationPercent) / 100;
+    const durationAlarm = new Alarm(scope, `${functionName}DurationAlarm`, {
+        alarmDescription: buildAlarmDescription(`Lambda ${functionName} p99 duration exceeds ${durationPercent}% of timeout`, applicationId),
+        metric: lambdaFunction.metricDuration({
+            period: ALARM_DEFAULTS.EVALUATION_PERIOD,
+            statistic: "p99"
+        }),
+        threshold: durationThresholdMs,
+        evaluationPeriods: 2,
+        datapointsToAlarm: 2,
+        comparisonOperator: ComparisonOperator.GREATER_THAN_THRESHOLD,
+        treatMissingData: TreatMissingData.NOT_BREACHING
+    });
+    registerAlarm(durationAlarm, snsAction, alarms);
+    tagAlarmsWithApplicationId(alarms, applicationId);
+    return alarms;
+}

package/dist/lib/resources/aws/monitoring/rdsAlarms.d.ts

@@ -0,0 +1,20 @@
+import { Alarm } from "aws-cdk-lib/aws-cloudwatch";
+import type { IDatabaseCluster, IDatabaseInstance } from "aws-cdk-lib/aws-rds";
+import type { ITopic } from "aws-cdk-lib/aws-sns";
+import type { Construct } from "constructs";
+export interface RdsAlarmThresholds {
+    cpuThreshold?: number;
+    freeStorageThresholdGiB?: number;
+    connectionsThreshold?: number;
+}
+export interface RdsAlarmsProps {
+    scope: Construct;
+    databaseName: string;
+    database: IDatabaseInstance | IDatabaseCluster;
+    config: RdsAlarmThresholds;
+    alarmTopic: ITopic;
+    applicationId?: string;
+    /** Metric name for free storage — "FreeStorageSpace" for instances, "FreeLocalStorage" for Aurora clusters. */
+    freeStorageMetricName?: "FreeStorageSpace" | "FreeLocalStorage";
+}
+export declare function createRdsAlarms(props: RdsAlarmsProps): Alarm[];

package/dist/lib/resources/aws/monitoring/rdsAlarms.js

@@ -0,0 +1,52 @@
+import { Alarm, ComparisonOperator, TreatMissingData } from "aws-cdk-lib/aws-cloudwatch";
+import { SnsAction } from "aws-cdk-lib/aws-cloudwatch-actions";
+import { ALARM_DEFAULTS, registerAlarm, tagAlarmsWithApplicationId, buildAlarmDescription } from "./alarmDefaults.js";
+export function createRdsAlarms(props) {
+    const { scope, databaseName, database, config, alarmTopic, applicationId, freeStorageMetricName = "FreeStorageSpace" } = props;
+    const alarms = [];
+    const snsAction = new SnsAction(alarmTopic);
+    const cpuAlarm = new Alarm(scope, `${databaseName}CpuAlarm`, {
+        alarmDescription: buildAlarmDescription(`RDS ${databaseName} CPU utilisation exceeds threshold`, applicationId),
+        metric: database.metricCPUUtilization({
+            period: ALARM_DEFAULTS.EVALUATION_PERIOD
+        }),
+        threshold: config.cpuThreshold ?? ALARM_DEFAULTS.RDS.CPU,
+        evaluationPeriods: 3,
+        datapointsToAlarm: 2,
+        comparisonOperator: ComparisonOperator.GREATER_THAN_THRESHOLD,
+        treatMissingData: TreatMissingData.NOT_BREACHING
+    });
+    registerAlarm(cpuAlarm, snsAction, alarms);
+    const freeStorageThresholdBytes = (config.freeStorageThresholdGiB ?? ALARM_DEFAULTS.RDS.FREE_STORAGE_GIB) *
+        1024 *
+        1024 *
+        1024;
+    const freeStorageAlarm = new Alarm(scope, `${databaseName}FreeStorageAlarm`, {
+        alarmDescription: buildAlarmDescription(`RDS ${databaseName} free storage below threshold`, applicationId),
+        metric: database.metric(freeStorageMetricName, {
+            period: ALARM_DEFAULTS.EVALUATION_PERIOD,
+            statistic: "Average"
+        }),
+        threshold: freeStorageThresholdBytes,
+        evaluationPeriods: 2,
+        datapointsToAlarm: 2,
+        comparisonOperator: ComparisonOperator.LESS_THAN_THRESHOLD,
+        treatMissingData: TreatMissingData.NOT_BREACHING
+    });
+    registerAlarm(freeStorageAlarm, snsAction, alarms);
+    const connectionsAlarm = new Alarm(scope, `${databaseName}ConnectionsAlarm`, {
+        alarmDescription: buildAlarmDescription(`RDS ${databaseName} connections exceed threshold`, applicationId),
+        metric: database.metricDatabaseConnections({
+            period: ALARM_DEFAULTS.EVALUATION_PERIOD
+        }),
+        // Absolute number, not a percentage
+        threshold: config.connectionsThreshold ?? ALARM_DEFAULTS.RDS.CONNECTIONS,
+        evaluationPeriods: 2,
+        datapointsToAlarm: 2,
+        comparisonOperator: ComparisonOperator.GREATER_THAN_THRESHOLD,
+        treatMissingData: TreatMissingData.NOT_BREACHING
+    });
+    registerAlarm(connectionsAlarm, snsAction, alarms);
+    tagAlarmsWithApplicationId(alarms, applicationId);
+    return alarms;
+}

package/dist/lib/resources/aws/networking/crossAccountDelegationRecord.d.ts

@@ -0,0 +1,17 @@
+import { Construct } from "constructs";
+import { CrossAccountZoneDelegationRecord as CdkCrossAccountZoneDelegationRecord, type IHostedZone } from "aws-cdk-lib/aws-route53";
+import type { IRole } from "aws-cdk-lib/aws-iam";
+export interface CrossAccountDelegationRecordProps {
+    readonly delegationRole: IRole;
+    readonly delegatedZone: IHostedZone;
+    readonly delegatedZoneName: string;
+    readonly parentHostedZoneName: string;
+    readonly description?: string;
+    readonly costAllocationEnvironment?: string;
+    readonly costAllocationDomain?: string;
+}
+export declare class CrossAccountDelegationRecord extends Construct {
+    readonly record: CdkCrossAccountZoneDelegationRecord;
+    readonly description: string;
+    constructor(scope: Construct, id: string, props: CrossAccountDelegationRecordProps);
+}