@fjall/components-infrastructure 3.5.2 → 3.6.1

package/dist/lib/resources/aws/compute/persistentDataVolume.d.ts

@@ -1,6 +1,7 @@
 import { type AutoScalingGroup } from "aws-cdk-lib/aws-autoscaling";
 import { Alarm } from "aws-cdk-lib/aws-cloudwatch";
 import { EbsDeviceVolumeType, Volume } from "aws-cdk-lib/aws-ec2";
+import type { ITopic } from "aws-cdk-lib/aws-sns";
 import { Construct } from "constructs";
 import { LambdaFunction } from "./lambda.js";
 import { SQSQueue } from "../messaging/sqs.js";
@@ -35,6 +36,12 @@ export interface PersistentDataVolumeProps {
     iops?: number;
     /** Throughput in MiB/s (gp3 only). */
     throughputMbps?: number;
+    /**
+     * SNS topic `attachFailureAlarm` notifies. Omitted, the alarm still exists
+     * but fires no action — pass the stack's alerts topic or the failure is
+     * only visible to someone watching the CloudWatch console.
+     */
+    alarmTopic?: ITopic;
 }
 /**
  * Standalone EBS data volume + ASG `EC2_INSTANCE_LAUNCHING` hook that

package/dist/lib/resources/aws/compute/persistentDataVolume.js

@@ -4,6 +4,7 @@ import { fileURLToPath } from "node:url";
 import { Aws, Duration, RemovalPolicy, Size, Stack, Tags } from "aws-cdk-lib";
 import { DefaultResult, LifecycleTransition } from "aws-cdk-lib/aws-autoscaling";
 import { Alarm, ComparisonOperator, Metric, TreatMissingData } from "aws-cdk-lib/aws-cloudwatch";
+import { SnsAction } from "aws-cdk-lib/aws-cloudwatch-actions";
 import { EbsDeviceVolumeType, Volume } from "aws-cdk-lib/aws-ec2";
 import { Effect, PolicyStatement } from "aws-cdk-lib/aws-iam";
 import { Code, Runtime } from "aws-cdk-lib/aws-lambda";
@@ -220,6 +221,11 @@ export class PersistentDataVolume extends Construct {
             comparisonOperator: ComparisonOperator.GREATER_THAN_OR_EQUAL_TO_THRESHOLD,
             treatMissingData: TreatMissingData.NOT_BREACHING
         });
+        if (props.alarmTopic !== undefined) {
+            const snsAction = new SnsAction(props.alarmTopic);
+            this.attachFailureAlarm.addAlarmAction(snsAction);
+            this.attachFailureAlarm.addOkAction(snsAction);
+        }
     }
 }
 function validatePersistentDataVolumeProps(props) {

package/dist/lib/resources/aws/networking/crossAccountDelegationRecord.d.ts

@@ -6,6 +6,16 @@ export interface CrossAccountDelegationRecordProps {
     readonly delegatedZone: IHostedZone;
     readonly delegatedZoneName: string;
     readonly parentHostedZoneName: string;
+    /**
+     * Literal NS hostnames for an ADOPTED (imported) delegated zone. An
+     * imported `IHostedZone` exposes no `hostedZoneNameServers` attribute —
+     * CDK cannot know a live zone's NS at synth — so the custom resource
+     * would UPSERT an empty parent NS row. When set, a facade over the
+     * imported zone supplies these literals instead (see
+     * `withLiteralNameServers`). Omit for created zones, whose NS arrive as
+     * a CloudFormation attribute token.
+     */
+    readonly adoptedNameServers?: string[];
     readonly description?: string;
     readonly costAllocationEnvironment?: string;
     readonly costAllocationDomain?: string;

package/dist/lib/resources/aws/networking/crossAccountDelegationRecord.js

@@ -2,6 +2,29 @@ import { Construct } from "constructs";
 import { Tags } from "aws-cdk-lib";
 import { CrossAccountZoneDelegationRecord as CdkCrossAccountZoneDelegationRecord } from "aws-cdk-lib/aws-route53";
 import { applyCostAllocationTags } from "../../../utils/costAllocationTags.js";
+/**
+ * CDK facade seam for zone adoption. `CrossAccountZoneDelegationRecord`
+ * reads exactly `zoneName` and `hostedZoneNameServers` off its
+ * `delegatedZone`; the facade delegates every access to the imported zone
+ * and overrides only `hostedZoneNameServers` with the user-declared
+ * literals. Methods are bound to the underlying zone so `this`-dependent
+ * internals behave identically. Pinned by the adopted-case synth snapshot
+ * in crossAccountDelegationRecord.test.ts — a CDK upgrade that starts
+ * reading more through this seam trips the pin.
+ */
+function withLiteralNameServers(zone, nameServers) {
+    return new Proxy(zone, {
+        get(target, property) {
+            if (property === "hostedZoneNameServers") {
+                return [...nameServers];
+            }
+            const value = Reflect.get(target, property);
+            return typeof value === "function"
+                ? value.bind(target)
+                : value;
+        }
+    });
+}
 // CDK's CrossAccountZoneDelegationRecord is a custom-resource Lambda: user-level tags
 // on the record itself may not reach AWS. We tag the wrapping Fjall Construct for
 // assertion purposes; create-path tags still propagate to child resources (Lambda,
@@ -14,9 +37,12 @@ export class CrossAccountDelegationRecord extends Construct {
         this.description =
             props.description ??
                 `Fjall-managed cross-account delegation for ${props.delegatedZoneName} in parent ${props.parentHostedZoneName}`;
+        const delegatedZone = props.adoptedNameServers !== undefined
+            ? withLiteralNameServers(props.delegatedZone, props.adoptedNameServers)
+            : props.delegatedZone;
         this.record = new CdkCrossAccountZoneDelegationRecord(this, "Record", {
             delegationRole: props.delegationRole,
-            delegatedZone: props.delegatedZone,
+            delegatedZone,
             parentHostedZoneName: props.parentHostedZoneName
         });
         Tags.of(this).add("fjall:description", this.description);

package/dist/lib/utils/domainTypes.d.ts

@@ -29,15 +29,9 @@ export declare function resolveRecordFqdn(recordName: string, zoneName: string):
 /**
  * Two-step deploy phase for constructs whose certificates must not be issued
  * before their zone's NS delegation has propagated (design R2 cert-hang
- * guard). `"zone"` synthesises the hosted zone (+ delegation record) only;
- * `"full"` additionally issues certificates. Shared by the delegated `Domain`
- * topology and `DevSubstrate` — lowest common layer per generator-standards
- * § Infrastructure Layer Boundaries.
+ * guard) plus its omitted-phase default — homed in `@fjall/util`
+ * (`infra/domainExports.ts`, the lowest common layer) and re-exported here
+ * so construct-side consumers keep their import path. deploy-core's
+ * `orchestration/domain/types.ts` re-exports the same declaration.
  */
-export type DomainDeployPhase = "zone" | "full";
-/**
- * Default deploy phase when `phase` is omitted — the complete build. The
- * two-step guard (R2) sets `"zone"` explicitly for step 1, so the safe
- * default for a single-shot deploy is everything.
- */
-export declare const DOMAIN_DEPLOY_DEFAULT_PHASE: DomainDeployPhase;
+export { DOMAIN_DEPLOY_DEFAULT_PHASE, type DomainDeployPhase } from "@fjall/util";

package/dist/lib/utils/domainTypes.js

@@ -58,8 +58,11 @@ export function resolveRecordFqdn(recordName, zoneName) {
     return `${recordName}.${zoneName}`;
 }
 /**
- * Default deploy phase when `phase` is omitted — the complete build. The
- * two-step guard (R2) sets `"zone"` explicitly for step 1, so the safe
- * default for a single-shot deploy is everything.
+ * Two-step deploy phase for constructs whose certificates must not be issued
+ * before their zone's NS delegation has propagated (design R2 cert-hang
+ * guard) plus its omitted-phase default — homed in `@fjall/util`
+ * (`infra/domainExports.ts`, the lowest common layer) and re-exported here
+ * so construct-side consumers keep their import path. deploy-core's
+ * `orchestration/domain/types.ts` re-exports the same declaration.
  */
-export const DOMAIN_DEPLOY_DEFAULT_PHASE = "full";
+export { DOMAIN_DEPLOY_DEFAULT_PHASE } from "@fjall/util";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fjall/components-infrastructure",
-  "version": "3.5.2",
+  "version": "3.6.1",
   "license": "SEE LICENSE IN LICENSE",
   "type": "module",
   "bin": {
@@ -67,8 +67,8 @@
   },
   "dependencies": {
     "@aws-sdk/client-organizations": "^3.1038.0",
-    "@fjall/generator": "^3.5.2",
-    "@fjall/util": "^3.5.2",
+    "@fjall/generator": "^3.6.1",
+    "@fjall/util": "^3.6.1",
     "constructs": "^10.6.0"
   },
   "overrides": {
@@ -82,5 +82,5 @@
   "engines": {
     "node": ">=18.0.0"
   },
-  "gitHead": "f59755647b2fd81ff692a3545e8e199d93c3bdf8"
+  "gitHead": "4bf3b77f9ef1472ca7afc6da552a225062ad602c"
 }