@fjall/components-infrastructure 2.34.0 → 3.0.0

package/dist/lib/utils/managedDomainContext.js

@@ -0,0 +1,111 @@
+/**
+ * CDK-context channel for CLI-injected managed-domain bindings (design
+ * 2026-07-17 domain-management gold-plating, D2 — resolution by injection).
+ *
+ * At deploy time the Fjall CLI resolves each app-consumed domain against the
+ * declared `fjall/domains/` components (DescribeStacks on the domain stack)
+ * and injects one context entry per zone:
+ *
+ *   -c fjall:managedDomain:<zoneName>=<JSON ManagedDomainBinding>
+ *
+ * (emitter: deploy-core `CdkArgumentBuilder.buildContextArgs` — keep the
+ * prefix literal in sync). Constructs read the entry ahead of their BYO
+ * `zoneName`/`hostedZone` props; an EXPLICIT `managedDomain` prop still wins
+ * over the injected value. Bare-CDK synth simply lacks the context and falls
+ * back to explicit props.
+ *
+ * Utils layer on purpose: consumed by both the resources layer
+ * (`ecsNetworking.addHostedZone`) and the patterns layer
+ * (`patternDomain.resolvePatternZone`), and utils is their lowest common
+ * layer (generator-standards § Infrastructure Layer Boundaries).
+ */
+export const MANAGED_DOMAIN_CONTEXT_PREFIX = "fjall:managedDomain:";
+export function getManagedDomainContextKey(zoneName) {
+    return `${MANAGED_DOMAIN_CONTEXT_PREFIX}${zoneName}`;
+}
+const REQUIRED_STRING_FIELDS = ["zoneName", "hostedZoneId"];
+const OPTIONAL_STRING_FIELDS = [
+    "certificateArn",
+    "usEast1CertificateArn",
+    "delegationRoleArn"
+];
+const KNOWN_FIELDS = [
+    ...REQUIRED_STRING_FIELDS,
+    ...OPTIONAL_STRING_FIELDS
+];
+/**
+ * Read the CLI-injected {@link ManagedDomainBinding} for `domainName`,
+ * walking exact → parent zones (mirroring the CLI's
+ * `DomainService.matchManagedDomain` semantics: `app.example.com` matches a
+ * binding injected for `example.com`). Returns undefined when no entry is
+ * present (bare-CDK synth); throws a context-prefixed, value-echoing,
+ * cure-naming error when an entry exists but is malformed — a corrupt
+ * binding must fail the synth, never fall through to a guessed zone.
+ *
+ * `context` prefixes every error, e.g. `Static site 'marketing'`.
+ */
+export function readInjectedManagedDomainBinding(node, domainName, context) {
+    const labels = domainName.split(".");
+    for (let i = 0; i < labels.length; i++) {
+        const candidate = labels.slice(i).join(".");
+        const key = getManagedDomainContextKey(candidate);
+        const raw = node.tryGetContext(key);
+        if (raw === undefined)
+            continue;
+        return parseManagedDomainBinding(raw, candidate, key, context);
+    }
+    return undefined;
+}
+function parseManagedDomainBinding(raw, zoneName, key, context) {
+    let value = raw;
+    if (typeof raw === "string") {
+        try {
+            value = JSON.parse(raw);
+        }
+        catch {
+            throw new Error(`${context}: CDK context '${key}' is not valid JSON (got '${raw}'). ` +
+                "The value must be a JSON ManagedDomainBinding " +
+                "({ zoneName, hostedZoneId, certificateArn?, " +
+                "usEast1CertificateArn?, delegationRoleArn? }) — re-run the deploy " +
+                "through the Fjall CLI, or correct the hand-set context entry.");
+        }
+    }
+    if (typeof value !== "object" || value === null || Array.isArray(value)) {
+        throw new Error(`${context}: CDK context '${key}' must be a JSON object ` +
+            `ManagedDomainBinding (got ${JSON.stringify(value)}). Re-run the ` +
+            "deploy through the Fjall CLI, or correct the hand-set context entry.");
+    }
+    const record = value;
+    for (const field of Object.keys(record)) {
+        if (!KNOWN_FIELDS.includes(field)) {
+            throw new Error(`${context}: CDK context '${key}' carries unknown field '${field}' ` +
+                `(got ${JSON.stringify(record)}). Known fields: ` +
+                `${KNOWN_FIELDS.join(", ")}. Re-run the deploy through the Fjall ` +
+                "CLI, or correct the hand-set context entry.");
+        }
+    }
+    for (const field of REQUIRED_STRING_FIELDS) {
+        if (typeof record[field] !== "string" || record[field] === "") {
+            throw new Error(`${context}: CDK context '${key}' is missing required string field ` +
+                `'${field}' (got ${JSON.stringify(record[field])}). Redeploy the ` +
+                `domain stack ('fjall domain deploy ${zoneName}') so the CLI ` +
+                "injects a complete binding, or correct the hand-set context entry.");
+        }
+    }
+    for (const field of OPTIONAL_STRING_FIELDS) {
+        const fieldValue = record[field];
+        if (fieldValue !== undefined && typeof fieldValue !== "string") {
+            throw new Error(`${context}: CDK context '${key}' field '${field}' must be a string ` +
+                `when present (got ${JSON.stringify(fieldValue)}). Re-run the ` +
+                "deploy through the Fjall CLI, or correct the hand-set context entry.");
+        }
+    }
+    if (record.zoneName !== zoneName) {
+        throw new Error(`${context}: CDK context '${key}' declares zoneName ` +
+            `'${String(record.zoneName)}', which does not match the key's zone ` +
+            `'${zoneName}'. The injection contract keys each binding by its own ` +
+            "zone — re-run the deploy through the Fjall CLI, or correct the " +
+            "hand-set context entry.");
+    }
+    return record;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fjall/components-infrastructure",
-  "version": "2.34.0",
+  "version": "3.0.0",
   "license": "SEE LICENSE IN LICENSE",
   "type": "module",
   "bin": {
@@ -67,8 +67,8 @@
   },
   "dependencies": {
     "@aws-sdk/client-organizations": "^3.1038.0",
-    "@fjall/generator": "^2.34.0",
-    "@fjall/util": "^2.34.0",
+    "@fjall/generator": "^3.0.0",
+    "@fjall/util": "^3.0.0",
     "constructs": "^10.6.0"
   },
   "overrides": {
@@ -82,5 +82,5 @@
   "engines": {
     "node": ">=18.0.0"
   },
-  "gitHead": "8c553fca8f9737d445061ea75cf6c6c7db0d24c9"
+  "gitHead": "848a386e3e2244401b76faabd02818c682d231e8"
 }