@fjall/components-infrastructure 39.0.5 → 39.0.7

package/dist/lib/resources/aws/compute/ecsTaskDefinition.d.ts

@@ -1,7 +1,7 @@
 import { FargateTaskDefinition, Ec2TaskDefinition, NetworkMode, type ContainerDefinition } from "aws-cdk-lib/aws-ecs";
 import type { Construct } from "constructs";
 import type { ILogGroup } from "aws-cdk-lib/aws-logs";
-import { type Role } from "aws-cdk-lib/aws-iam";
+import { type IRole, type Role } from "aws-cdk-lib/aws-iam";
 import type { EcsConstructContext } from "./ecsContext.js";
 import type { EcsClusterProps, EcsServiceProps, EcsCapacityProvider } from "./ecsTypes.js";
 export { createExecutionRole, createTaskRole } from "./ecsRoles.js";
@@ -20,6 +20,17 @@ export declare function isServiceEc2(serviceProps: EcsServiceProps): boolean;
  * Uses explicit path if provided, otherwise derives from app/cluster/service names.
  */
 export declare function deriveSsmSecretsPath(props: EcsClusterProps, serviceName: string, explicitPath?: string): string;
+/**
+ * The CPU and memory a service's task runs with, its own or the defaults. A
+ * hook migration without `separateTaskDef` runs at its service's size.
+ */
+export declare function taskSize(props: {
+    readonly cpu?: number;
+    readonly memoryLimitMiB?: number;
+}): {
+    cpu: number;
+    memoryLimitMiB: number;
+};
 export declare function createTaskDefinition(ctx: EcsConstructContext, serviceName: string, serviceProps: EcsServiceProps, executionRole: Role, taskRole: Role): FargateTaskDefinition | Ec2TaskDefinition;
 /**
  * Routing point for `Ec2TaskDefinition`s used by EventBridge-triggered scheduled
@@ -37,18 +48,18 @@ export declare function createScheduledTaskDefinition(scope: Construct, id: stri
     networkMode?: NetworkMode;
 }): Ec2TaskDefinition;
 /**
- * Routing point for `FargateTaskDefinition`s used by the lifecycle-hook
- * migration runner when `migrations.separateTaskDef` is set. Synthesises a
- * dedicated Fargate task definition with caller-supplied CPU/memory and the
- * supplied execution + task roles. Runtime platform pinned to ARM64/Linux to
- * match the service task def default.
+ * Routing point for the `FargateTaskDefinition` every lifecycle-hook
+ * migration runs from. Synthesises a dedicated Fargate task definition with
+ * caller-supplied CPU/memory and the supplied execution + task roles: the
+ * migration's own with `separateTaskDef`, its service's without. Runtime
+ * platform pinned to ARM64/Linux to match the service task def default.
  */
 export declare function createMigrationTaskDefinition(scope: Construct, id: string, props: {
     family: string;
     cpu: number;
     memoryLimitMiB: number;
-    executionRole: Role;
-    taskRole: Role;
+    executionRole: IRole;
+    taskRole: IRole;
 }): FargateTaskDefinition;
 export declare function addContainersToTask(ctx: EcsConstructContext, serviceName: string, serviceProps: EcsServiceProps, taskDefinition: FargateTaskDefinition | Ec2TaskDefinition): {
     containers: ContainerDefinition[];

package/dist/lib/resources/aws/compute/ecsTaskDefinition.js

@@ -65,9 +65,18 @@ export function deriveSsmSecretsPath(props, serviceName, explicitPath) {
         service: serviceName
     });
 }
+/**
+ * The CPU and memory a service's task runs with, its own or the defaults. A
+ * hook migration without `separateTaskDef` runs at its service's size.
+ */
+export function taskSize(props) {
+    return {
+        cpu: props.cpu ?? DEFAULT_FARGATE_CPU,
+        memoryLimitMiB: props.memoryLimitMiB ?? DEFAULT_FARGATE_MEMORY_MIB
+    };
+}
 export function createTaskDefinition(ctx, serviceName, serviceProps, executionRole, taskRole) {
-    const cpu = serviceProps.cpu ?? DEFAULT_FARGATE_CPU;
-    const memoryLimitMiB = serviceProps.memoryLimitMiB ?? DEFAULT_FARGATE_MEMORY_MIB;
+    const { cpu, memoryLimitMiB } = taskSize(serviceProps);
     if (isServiceFargate(serviceProps)) {
         return new FargateTaskDefinition(ctx.scope, `${serviceName}TaskDefinition`, {
             family: `${ctx.props.clusterName}-${serviceName}`,
@@ -110,11 +119,11 @@ export function createScheduledTaskDefinition(scope, id, props) {
     });
 }
 /**
- * Routing point for `FargateTaskDefinition`s used by the lifecycle-hook
- * migration runner when `migrations.separateTaskDef` is set. Synthesises a
- * dedicated Fargate task definition with caller-supplied CPU/memory and the
- * supplied execution + task roles. Runtime platform pinned to ARM64/Linux to
- * match the service task def default.
+ * Routing point for the `FargateTaskDefinition` every lifecycle-hook
+ * migration runs from. Synthesises a dedicated Fargate task definition with
+ * caller-supplied CPU/memory and the supplied execution + task roles: the
+ * migration's own with `separateTaskDef`, its service's without. Runtime
+ * platform pinned to ARM64/Linux to match the service task def default.
  */
 export function createMigrationTaskDefinition(scope, id, props) {
     return new FargateTaskDefinition(scope, id, {

package/dist/lib/resources/aws/compute/ecsValidation.d.ts

@@ -14,9 +14,9 @@ import type { DomainConfig, EcsCapacityProvider, EcsClusterProps } from "./ecsTy
  * validation here would be unreachable.
  *
  * Same applies to `service.awaitMigrationsFrom`: it is a patterns-layer
- * cross-service ordering knob, resolved into a `node.addDependency(...)` edge
- * (`wireServiceMigrationDependencies` in `computeEcs.ts`) BEFORE reaching the
- * resources layer. It is not a field on `EcsServiceProps`, so a direct
+ * cross-service ordering knob, resolved into a dependency on the named
+ * service's rollout barrier (`wireServiceMigrationDependencies` in
+ * `computeEcs.ts`) BEFORE reaching the resources layer. It is not a field on `EcsServiceProps`, so a direct
  * `new EcsCluster(...)` consumer cannot pass it — there is no resources-layer
  * code path to validate.
  *

package/dist/lib/resources/aws/compute/ecsValidation.js

@@ -20,9 +20,9 @@ import { validateSharedEc2CapacityConfig } from "./ecsCapacityConfig.js";
  * validation here would be unreachable.
  *
  * Same applies to `service.awaitMigrationsFrom`: it is a patterns-layer
- * cross-service ordering knob, resolved into a `node.addDependency(...)` edge
- * (`wireServiceMigrationDependencies` in `computeEcs.ts`) BEFORE reaching the
- * resources layer. It is not a field on `EcsServiceProps`, so a direct
+ * cross-service ordering knob, resolved into a dependency on the named
+ * service's rollout barrier (`wireServiceMigrationDependencies` in
+ * `computeEcs.ts`) BEFORE reaching the resources layer. It is not a field on `EcsServiceProps`, so a direct
  * `new EcsCluster(...)` consumer cannot pass it — there is no resources-layer
  * code path to validate.
  *

package/dist/lib/resources/aws/compute/lambda.d.ts

@@ -82,6 +82,12 @@ export interface LambdaFunctionProps {
      * async event source get no queue.
      */
     asyncFailureQueue?: IQueue | false;
+    /**
+     * Whether the function emits its ARN output, and its URL output when
+     * `enableFunctionUrl` is set. Default `"emit"`. `"none"` emits neither, for
+     * a handler that is another construct's plumbing.
+     */
+    stackOutputs?: "emit" | "none";
     environment?: KeyValue;
     secrets?: string[];
     ssmSecretsPath?: string;

package/dist/lib/resources/aws/compute/lambda.js

@@ -179,9 +179,10 @@ export class LambdaFunction extends Function {
     asyncFailureQueueWired;
     constructor(scope, id, props) {
         validateRuntimeNotDeprecated(props.runtime, id);
-        // Both are Fjall props, not CDK ones: `tracing` collides with the CDK
-        // enum of the same name and `appBackupTier` is unknown to CDK.
-        const { tracing, appBackupTier, ...cdkProps } = props;
+        // These are Fjall props, not CDK ones: `tracing` collides with the CDK
+        // enum of the same name, and `appBackupTier` and `stackOutputs` are
+        // unknown to CDK.
+        const { tracing, appBackupTier, stackOutputs, ...cdkProps } = props;
         const vpcSubnets = props.vpc
             ? { subnetType: resolvePrivateSubnetType(props.vpc) }
             : undefined;
@@ -219,6 +220,7 @@ export class LambdaFunction extends Function {
         this.addSecretsSupport(props.secrets, props.ssmSecretsPath, props.secretsImport, props.appName, props.functionName, props.architecture);
         // Sanitise id for CloudFormation output keys (must be alphanumeric)
         const outputName = toPascalCase(id);
+        const emitOutputs = (stackOutputs ?? "emit") === "emit";
         if (props.enableFunctionUrl) {
             const authType = props.functionUrlAuthType ?? FunctionUrlAuthType.AWS_IAM;
             const functionUrl = this.addFunctionUrl({
@@ -234,17 +236,21 @@ export class LambdaFunction extends Function {
                     `concurrency with it — set reservedConcurrentExecutions to cap it.`);
             }
             this.functionUrlValue = functionUrl.url;
-            new CfnOutput(this, `${outputName}FunctionUrl`, {
-                key: `${outputName}FunctionUrl`,
-                value: functionUrl.url,
-                description: `${id} Function URL`
+            if (emitOutputs) {
+                new CfnOutput(this, `${outputName}FunctionUrl`, {
+                    key: `${outputName}FunctionUrl`,
+                    value: functionUrl.url,
+                    description: `${id} Function URL`
+                });
+            }
+        }
+        if (emitOutputs) {
+            new CfnOutput(this, `${outputName}FunctionArn`, {
+                key: `${outputName}FunctionArn`,
+                value: this.functionArn,
+                description: `${id} Function ARN`
             });
         }
-        new CfnOutput(this, `${outputName}FunctionArn`, {
-            key: `${outputName}FunctionArn`,
-            value: this.functionArn,
-            description: `${id} Function ARN`
-        });
         if (props.alertsTopic && props.alarms !== false) {
             const timeoutSeconds = props.timeout ?? LAMBDA_DEFAULT_TIMEOUT_SECONDS;
             createLambdaAlarms({