@fjall/components-infrastructure 2.30.3 → 2.31.1

package/dist/lib/resources/aws/networking/vpcPeeringConnection.js

@@ -2,8 +2,9 @@ import { Construct } from "constructs";
 import { Stack, Tags } from "aws-cdk-lib";
 import { CfnRoute, CfnVPCPeeringConnection, SubnetType } from "aws-cdk-lib/aws-ec2";
 import { PolicyStatement } from "aws-cdk-lib/aws-iam";
-import { AwsCustomResource, AwsCustomResourcePolicy, PhysicalResourceId } from "aws-cdk-lib/custom-resources";
+import { AwsCustomResourcePolicy, PhysicalResourceId } from "aws-cdk-lib/custom-resources";
 import { COST_ALLOCATION_TAGS, DEFAULT_COST_ALLOCATION_ENVIRONMENT } from "../../../utils/costAllocationTags.js";
+import { AwsCustomResource } from "../utilities/awsCustomResource.js";
 import { CrossAccountReturnRoutes } from "./crossAccountReturnRoutes.js";
 export class VpcPeeringConnection extends Construct {
     peeringConnectionId;

package/dist/lib/resources/aws/storage/bucketDeployment.d.ts

@@ -3,12 +3,11 @@ import { type Construct } from "constructs";
 /**
  * Routing-point wrapper for `aws-cdk-lib/aws-s3-deployment.BucketDeployment`.
  *
- * Currently a thin pass-through — no defaults are applied today. The wrapper
- * exists so that future SOC2 / compliance defaults (tags, retention, encryption
- * on the underlying Lambda + Custom Resource) reach every consumer in one edit.
- * Per `.claude/rules/generator-standards.md § Wrapper Routing Discipline` and
- * `patterns/infrastructure-wrapper-routing-pattern.md § A3` ("a wrapper that
- * is a thin pass-through today is still the routing point"), `lib/{config,
+ * Applies one default: an explicit, stack-shared log group for the deployment
+ * handler lambda, so it is CloudFormation-managed and tagged rather than
+ * service-auto-created. Per `.claude/rules/generator-standards.md § Wrapper
+ * Routing Discipline` and
+ * `patterns/infrastructure-wrapper-routing-pattern.md § A3`, `lib/{config,
  * patterns}/` MUST instantiate this class rather than the raw CDK construct.
  */
 export declare class BucketDeployment extends CdkBucketDeployment {

package/dist/lib/resources/aws/storage/bucketDeployment.js

@@ -1,17 +1,24 @@
 import { BucketDeployment as CdkBucketDeployment } from "aws-cdk-lib/aws-s3-deployment";
+import { stackSingletonLogGroup } from "../logging/singletonLogGroup.js";
 /**
  * Routing-point wrapper for `aws-cdk-lib/aws-s3-deployment.BucketDeployment`.
  *
- * Currently a thin pass-through — no defaults are applied today. The wrapper
- * exists so that future SOC2 / compliance defaults (tags, retention, encryption
- * on the underlying Lambda + Custom Resource) reach every consumer in one edit.
- * Per `.claude/rules/generator-standards.md § Wrapper Routing Discipline` and
- * `patterns/infrastructure-wrapper-routing-pattern.md § A3` ("a wrapper that
- * is a thin pass-through today is still the routing point"), `lib/{config,
+ * Applies one default: an explicit, stack-shared log group for the deployment
+ * handler lambda, so it is CloudFormation-managed and tagged rather than
+ * service-auto-created. Per `.claude/rules/generator-standards.md § Wrapper
+ * Routing Discipline` and
+ * `patterns/infrastructure-wrapper-routing-pattern.md § A3`, `lib/{config,
  * patterns}/` MUST instantiate this class rather than the raw CDK construct.
  */
 export class BucketDeployment extends CdkBucketDeployment {
     constructor(scope, id, props) {
-        super(scope, id, props);
+        super(scope, id, {
+            ...props,
+            // CDK dedupes the deployment handler to one lambda per stack (per
+            // memory/vpc variant), so the explicit log group must be the
+            // stack-shared one — a per-site group would only bind for whichever
+            // site instantiates first.
+            logGroup: props.logGroup ?? stackSingletonLogGroup(scope, "BucketDeployment")
+        });
     }
 }

package/dist/lib/resources/aws/utilities/awsCustomResource.js

@@ -1,9 +1,14 @@
 import * as customResource from "aws-cdk-lib/custom-resources";
+import { stackSingletonLogGroup } from "../logging/singletonLogGroup.js";
 export class AwsCustomResource extends customResource.AwsCustomResource {
     response;
     constructor(scope, id, props) {
         super(scope, id, {
             ...props,
+            // Every AwsCustomResource in a stack shares CDK's one singleton lambda,
+            // so the explicit log group must be the stack-shared one — a per-site
+            // group would only bind for whichever site instantiates first.
+            logGroup: props.logGroup ?? stackSingletonLogGroup(scope, "AwsCustomResource"),
             policy: props.policy ||
                 customResource.AwsCustomResourcePolicy.fromSdkCalls({
                     resources: customResource.AwsCustomResourcePolicy.ANY_RESOURCE

package/dist/lib/resources/aws/utilities/customResource.js

@@ -4,6 +4,7 @@ import { Code } from "aws-cdk-lib/aws-lambda";
 import { Construct } from "constructs";
 import { SingletonFunction, LambdaFunction } from "../compute/lambda.js";
 import { DEFAULT_CUSTOM_RESOURCE_TIMEOUT_SECONDS } from "../compute/ecsConstants.js";
+import { DEFAULT_FRAMEWORK_LOG_RETENTION, LogGroup } from "../logging/logGroup.js";
 export class CustomResource extends Construct {
     response;
     resource;
@@ -54,7 +55,10 @@ export class CustomResource extends Construct {
                 inlinePolicy: props.inlinePolicy
             });
         const provider = new Provider(this, `${id}Provider`, {
-            onEventHandler: lambdaFunction
+            onEventHandler: lambdaFunction,
+            logGroup: new LogGroup(this, `${id}ProviderLogGroup`, {
+                retention: DEFAULT_FRAMEWORK_LOG_RETENTION
+            })
         });
         this.resource = new customResource(this, `${id}Resource`, {
             serviceToken: provider.serviceToken,

package/dist/lib/utils/addSuffixToEmail.js

@@ -1,7 +1,3 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.default = addSuffixToEmail;
-function addSuffixToEmail(email, suffix) {
+export default function addSuffixToEmail(email, suffix) {
     return email.replace("@", `+${suffix}@`);
 }
-//# sourceMappingURL=data:application/json;base64,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

package/dist/lib/utils/validationLogger.d.ts

@@ -24,11 +24,11 @@ export declare const FjallLogger: {
  */
 export declare function warnIfPropertyIgnored<T extends {
     type: string;
-}>(props: T, property: string, applicableType: string | string[], typeName: string): void;
+}>(props: T, property: string, applicableType: string | string[], typeName: string, discriminatorLabel?: string): void;
 /**
  * Warn if any of the specified properties are set but will be ignored.
  * Convenience wrapper for checking multiple properties at once.
  */
 export declare function warnIfPropertiesIgnored<T extends {
     type: string;
-}>(props: T, properties: string[], applicableType: string | string[], typeName: string): void;
+}>(props: T, properties: string[], applicableType: string | string[], typeName: string, discriminatorLabel?: string): void;

package/dist/lib/utils/validationLogger.js

@@ -57,7 +57,7 @@ export const FjallLogger = {
  * @param applicableType - The type(s) where this property is used
  * @param typeName - Human-readable type name for the message
  */
-export function warnIfPropertyIgnored(props, property, applicableType, typeName) {
+export function warnIfPropertyIgnored(props, property, applicableType, typeName, discriminatorLabel = "type") {
     const propsRecord = props;
     const types = Array.isArray(applicableType)
         ? applicableType
@@ -66,15 +66,15 @@ export function warnIfPropertyIgnored(props, property, applicableType, typeName)
         property in propsRecord &&
         propsRecord[property] !== undefined) {
         FjallLogger.warn(`'${property}' is only used for ${typeName} type. ` +
-            `It will be ignored for type '${props.type}'.`);
+            `It will be ignored for ${discriminatorLabel} '${props.type}'.`);
     }
 }
 /**
  * Warn if any of the specified properties are set but will be ignored.
  * Convenience wrapper for checking multiple properties at once.
  */
-export function warnIfPropertiesIgnored(props, properties, applicableType, typeName) {
+export function warnIfPropertiesIgnored(props, properties, applicableType, typeName, discriminatorLabel = "type") {
     for (const property of properties) {
-        warnIfPropertyIgnored(props, property, applicableType, typeName);
+        warnIfPropertyIgnored(props, property, applicableType, typeName, discriminatorLabel);
     }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fjall/components-infrastructure",
-  "version": "2.30.3",
+  "version": "2.31.1",
   "license": "SEE LICENSE IN LICENSE",
   "type": "module",
   "bin": {
@@ -67,8 +67,8 @@
   },
   "dependencies": {
     "@aws-sdk/client-organizations": "^3.1038.0",
-    "@fjall/generator": "^2.30.3",
-    "@fjall/util": "^2.30.3",
+    "@fjall/generator": "^2.31.1",
+    "@fjall/util": "^2.31.1",
     "constructs": "^10.6.0"
   },
   "overrides": {
@@ -82,5 +82,5 @@
   "engines": {
     "node": ">=18.0.0"
   },
-  "gitHead": "d398edc0c0edf661d7ab6e5a47623529f68dfd2a"
+  "gitHead": "a48cfaf6e050ce1736837802dfcaf517ba39f199"
 }

package/dist/lib/__tests__/setup.d.ts

@@ -1,48 +0,0 @@
-import { App } from "aws-cdk-lib";
-import { Template } from "aws-cdk-lib/assertions";
-import { Stack } from "aws-cdk-lib";
-/**
- * Test utilities for CDK infrastructure testing
- */
-export declare class TestUtils {
-    /**
-     * Create a test app with proper environment settings
-     */
-    static createTestApp(): App;
-    /**
-     * Create a test stack within a test app
-     */
-    static createTestStack(app?: App): Stack;
-    /**
-     * Get CloudFormation template from a stack for assertions
-     */
-    static getTemplate(stack: Stack): Template;
-    /**
-     * Generate consistent snapshot from CDK stack
-     */
-    static getSnapshotTemplate(stack: Stack): any;
-    /**
-     * Clean up template for consistent snapshots by removing random IDs
-     */
-    static sanitiseTemplate(template: any): any;
-}
-/**
- * Common test data for infrastructure patterns
- */
-export declare const TestData: {
-    defaultTags: {
-        "fjall:costAllocation:environment": string;
-        "fjall:costAllocation:owner": string;
-    };
-    defaultAccountId: string;
-    defaultRegion: string;
-    vpc: {
-        vpcId: string;
-    };
-    basicApp: {
-        serviceName: string;
-        environment: string;
-        containerPort: number;
-        owner: string;
-    };
-};