@fjall/components-infrastructure 23.0.0 → 24.0.0

package/dist/lib/patterns/aws/account.d.ts

@@ -55,6 +55,21 @@ export interface AccountProps extends StackProps {
      */
     machineTrustMode?: MachineTrustMode;
 }
+/**
+ * `fjall:description` values for the governance tiers — the same user-facing
+ * gold-plating the domain-side constructs carry, so a governance stack's
+ * resources explain themselves in the console exactly like a zone or
+ * certificate does. Keyed by `organisationType` so each tier self-describes
+ * from ONE stamp in this base class.
+ *
+ * CHARSET CONTRACT: every value must stay inside the AWS tag-value pattern
+ * `^[\p{L}\p{Z}\p{N}_.:/=+\-@]*$` — no commas. IAM roles and nested-stack
+ * resources (AWS::CloudFormation::Stack) validate tag values against it, so
+ * one comma aborts the whole governance deploy at changeset creation ("Tag
+ * [fjall:description] contained invalid characters"). Exported so the
+ * governanceTagging suite pins the contract for every tier.
+ */
+export declare const GOVERNANCE_TIER_DESCRIPTIONS: Record<OrganisationType, string>;
 export declare class Account extends Stack {
     readonly organisationType: OrganisationType;
     protected readonly resolvedRegion: string;

package/dist/lib/patterns/aws/account.js

@@ -22,9 +22,16 @@ import { InspectorEnablement } from "../../config/aws/inspectorEnablement.js";
  * resources explain themselves in the console exactly like a zone or
  * certificate does. Keyed by `organisationType` so each tier self-describes
  * from ONE stamp in this base class.
+ *
+ * CHARSET CONTRACT: every value must stay inside the AWS tag-value pattern
+ * `^[\p{L}\p{Z}\p{N}_.:/=+\-@]*$` — no commas. IAM roles and nested-stack
+ * resources (AWS::CloudFormation::Stack) validate tag values against it, so
+ * one comma aborts the whole governance deploy at changeset creation ("Tag
+ * [fjall:description] contained invalid characters"). Exported so the
+ * governanceTagging suite pins the contract for every tier.
  */
-const GOVERNANCE_TIER_DESCRIPTIONS = {
-    organisation: "Fjall-managed organisation governance: org root, member accounts and organisation-wide policy",
+export const GOVERNANCE_TIER_DESCRIPTIONS = {
+    organisation: "Fjall-managed organisation governance: org root and member accounts under organisation-wide policy",
     platform: "Fjall-managed platform governance: shared platform services and CI trust",
     account: "Fjall-managed account governance: account security and operations baseline"
 };

package/dist/lib/utils/validationLogger.js

@@ -6,17 +6,8 @@
 import { appendFileSync, existsSync, mkdirSync } from "fs";
 import { join } from "path";
 import { fjallLogDir } from "@fjall/util";
-import { FileRotator, LOG_ROTATION_DEFAULTS } from "@fjall/util/logRotation";
+import { FileRotator, resolveLogRotationBudget } from "@fjall/util/logRotation";
 const LOG_FILENAME = "infrastructure.jsonl";
-/**
- * Shared with the CLI's own logs, so this file cannot outgrow the budget
- * the rest of Fjall's logging keeps to. Without it this log had no bound of
- * any kind: it is appended to on every CDK synth, and one developer machine
- * reached 267MB of it inside a single release cycle.
- */
-const rotator = new FileRotator({
-    maxFiles: LOG_ROTATION_DEFAULTS.MAX_FILES
-});
 /**
  * Write a log entry to the infrastructure JSONL file
  */
@@ -36,7 +27,14 @@ function writeToLog(level, message) {
             source: "cdk-subprocess"
         });
         const logPath = join(logDir, LOG_FILENAME);
-        rotator.rotateIfNeeded(logPath, LOG_ROTATION_DEFAULTS.MAX_FILE_SIZE);
+        // Budget shared with the CLI's own logs — same defaults, same
+        // FJALL_LOG_MAX_SIZE / FJALL_LOG_MAX_FILES overrides — so this file
+        // cannot outgrow what the rest of Fjall's logging keeps to. It reached
+        // 267MB on one developer machine when it had no bound. Resolved per
+        // write for the same reason as the log dir above: CDK imports this
+        // module long before a command's environment is readable.
+        const { maxFileSize, maxFiles } = resolveLogRotationBudget();
+        new FileRotator({ maxFiles }).rotateIfNeeded(logPath, maxFileSize);
         appendFileSync(logPath, entry + "\n");
     }
     catch (err) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fjall/components-infrastructure",
-  "version": "23.0.0",
+  "version": "24.0.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/fjall-tech/fjall.git",
@@ -80,8 +80,8 @@
   },
   "dependencies": {
     "@aws-sdk/client-organizations": "^3.1098.0",
-    "@fjall/generator": "^23.0.0",
-    "@fjall/util": "^23.0.0",
+    "@fjall/generator": "^24.0.0",
+    "@fjall/util": "^24.0.0",
     "constructs": "^10.7.2"
   },
   "overrides": {