@fjall/components-infrastructure 6.0.0 → 7.0.0

package/dist/lib/patterns/aws/buildkite/alarms.d.ts

@@ -1,25 +0,0 @@
-import type { Construct } from "constructs";
-export interface BuildkiteAlarmParams {
-    readonly buildkiteOrgSlug: string;
-    readonly buildkiteQueue: string;
-    readonly autoScalingGroupName: string;
-    /**
-     * Alarm-action destination, in either `resolveAlertsTopic` string shape:
-     * a literal `arn:...` or `"import:<ExportName>"` (e.g.
-     * `"import:SharedAlarmTopicArn"`). Omitted → alarms exist but page nobody.
-     */
-    readonly alarmSnsTopicArn?: string;
-}
-/**
- * The fleet's two Phase-1 alarms (design § D14) — the "~zero babysitting"
- * posture is honest only with these:
- *
- * 1. Scaler heartbeat — `ScheduledJobsCount` goes MISSING for 15 minutes.
- *    The scaler publishes every poll, so metric absence means the scaler
- *    Lambda is dead or failing; `treatMissingData: BREACHING` is the alarm's
- *    entire mechanism.
- * 2. Queued with zero capacity — jobs scheduled while the ASG has no
- *    in-service instances for 15 minutes: the fleet cannot boot (AMI gone,
- *    quota, subnet failure) while work is waiting.
- */
-export declare function addBuildkiteAlarms(scope: Construct, params: BuildkiteAlarmParams): void;

package/dist/lib/patterns/aws/buildkite/alarms.js

@@ -1,78 +0,0 @@
-import { Duration } from "aws-cdk-lib";
-import { Alarm, ComparisonOperator, MathExpression, Metric, TreatMissingData } from "aws-cdk-lib/aws-cloudwatch";
-import { SnsAction } from "aws-cdk-lib/aws-cloudwatch-actions";
-import { resolveAlertsTopic } from "../../../utils/resolveAlertsTopic.js";
-/**
- * Metrics namespace the buildkite-agent-scaler publishes to, dimensioned by
- * {Org, Queue} — BOTH dimensions are required; querying Queue alone reads no
- * data (CloudWatch dimension matching is exact-set), leaving the heartbeat
- * permanently ALARM and the queued alarm permanently inert. Phase-1b rollout
- * gate: verify both metrics carry data after the first build before trusting
- * the alarms (design § D13/D14) — a namespace/dimension mismatch here is
- * invisible to the synth tests.
- */
-const SCALER_METRICS_NAMESPACE = "Buildkite";
-/**
- * The fleet's two Phase-1 alarms (design § D14) — the "~zero babysitting"
- * posture is honest only with these:
- *
- * 1. Scaler heartbeat — `ScheduledJobsCount` goes MISSING for 15 minutes.
- *    The scaler publishes every poll, so metric absence means the scaler
- *    Lambda is dead or failing; `treatMissingData: BREACHING` is the alarm's
- *    entire mechanism.
- * 2. Queued with zero capacity — jobs scheduled while the ASG has no
- *    in-service instances for 15 minutes: the fleet cannot boot (AMI gone,
- *    quota, subnet failure) while work is waiting.
- */
-export function addBuildkiteAlarms(scope, params) {
-    const scheduledJobs = new Metric({
-        namespace: SCALER_METRICS_NAMESPACE,
-        metricName: "ScheduledJobsCount",
-        dimensionsMap: {
-            Org: params.buildkiteOrgSlug,
-            Queue: params.buildkiteQueue
-        },
-        statistic: "Maximum",
-        period: Duration.minutes(5)
-    });
-    const heartbeatAlarm = new Alarm(scope, "ScalerHeartbeatAlarm", {
-        alarmDescription: `Buildkite scaler for queue '${params.buildkiteQueue}' has stopped ` +
-            "publishing metrics — scaler Lambda dead or erroring. Jobs will queue " +
-            "with no scale-out.",
-        metric: scheduledJobs,
-        comparisonOperator: ComparisonOperator.LESS_THAN_THRESHOLD,
-        threshold: 0,
-        evaluationPeriods: 3,
-        treatMissingData: TreatMissingData.BREACHING
-    });
-    const inServiceInstances = new Metric({
-        namespace: "AWS/AutoScaling",
-        metricName: "GroupInServiceInstances",
-        dimensionsMap: { AutoScalingGroupName: params.autoScalingGroupName },
-        statistic: "Maximum",
-        period: Duration.minutes(5)
-    });
-    const queuedWithZeroCapacity = new MathExpression({
-        expression: "IF(scheduled > 0 AND inService == 0, 1, 0)",
-        usingMetrics: {
-            scheduled: scheduledJobs,
-            inService: inServiceInstances
-        },
-        period: Duration.minutes(5)
-    });
-    const queuedAlarm = new Alarm(scope, "QueuedWithZeroCapacityAlarm", {
-        alarmDescription: `Buildkite queue '${params.buildkiteQueue}' has scheduled jobs but ` +
-            "zero in-service agents for 15 minutes — the fleet cannot boot " +
-            "(AMI, quota, or subnet failure) while work waits.",
-        metric: queuedWithZeroCapacity,
-        comparisonOperator: ComparisonOperator.GREATER_THAN_OR_EQUAL_TO_THRESHOLD,
-        threshold: 1,
-        evaluationPeriods: 3,
-        treatMissingData: TreatMissingData.NOT_BREACHING
-    });
-    const topic = resolveAlertsTopic(scope, "BuildkiteAlarmTopic", params.alarmSnsTopicArn);
-    if (topic !== undefined) {
-        heartbeatAlarm.addAlarmAction(new SnsAction(topic));
-        queuedAlarm.addAlarmAction(new SnsAction(topic));
-    }
-}

package/dist/lib/patterns/aws/domainDelegation.d.ts

@@ -1,8 +0,0 @@
-import { Construct } from "constructs";
-import type { IHostedZone } from "aws-cdk-lib/aws-route53";
-import type { DomainDelegatedProps } from "./interfaces/domain.js";
-export declare class DomainDelegation extends Construct {
-    readonly hostedZoneId: string;
-    readonly hostedZone: IHostedZone;
-    constructor(scope: Construct, id: string, props: DomainDelegatedProps);
-}

package/dist/lib/patterns/aws/domainDelegation.js

@@ -1,45 +0,0 @@
-import { Construct } from "constructs";
-import { Fn } from "aws-cdk-lib";
-import { getDomainExportNames } from "@fjall/util";
-import { Role } from "../../resources/aws/iam/index.js";
-import { toPascalCase, getSafeZoneName } from "../../utils/capitaliseString.js";
-import { HostedZone } from "../../resources/aws/networking/hostedZone.js";
-import { CrossAccountDelegationRecord } from "../../resources/aws/networking/crossAccountDelegationRecord.js";
-import { DomainCertificate } from "../../resources/aws/networking/domainCertificate.js";
-import { composeDnsRecords } from "./dnsRecordComposer.js";
-export class DomainDelegation extends Construct {
-    hostedZoneId;
-    hostedZone;
-    constructor(scope, id, props) {
-        super(scope, id);
-        const delegationRoleArn = Fn.importValue(getDomainExportNames(props.parentZoneName).delegationRoleArn);
-        const hostedZoneDelegationRole = Role.fromRoleArn(this, "HostedZoneDelegationRole", delegationRoleArn);
-        const safeZone = getSafeZoneName(props.zoneName);
-        const zone = new HostedZone(this, `${safeZone}HostedZone`, {
-            zoneName: props.zoneName,
-            createDelegationRole: false
-        });
-        this.hostedZone = zone.hostedZone;
-        this.hostedZoneId = zone.hostedZoneId;
-        new CrossAccountDelegationRecord(this, `${safeZone}DelegationRecord`, {
-            delegationRole: hostedZoneDelegationRole,
-            delegatedZone: zone.hostedZone,
-            delegatedZoneName: props.zoneName,
-            parentHostedZoneName: props.parentZoneName
-        });
-        const safeKey = toPascalCase(safeZone);
-        if (props.certificates) {
-            props.certificates.forEach((cert, index) => {
-                const safeCertName = toPascalCase(cert.domainName.split(".").join(""));
-                new DomainCertificate(this, `${safeKey}${safeCertName}Cert${index}`, {
-                    domainName: cert.domainName,
-                    subjectAlternativeNames: cert.subjectAlternativeNames,
-                    hostedZone: zone.hostedZone
-                });
-            });
-        }
-        if (props.records) {
-            composeDnsRecords(this, zone.hostedZone, props.zoneName, props.records);
-        }
-    }
-}

package/dist/lib/patterns/aws/domainFactory.d.ts

@@ -1,23 +0,0 @@
-import { Construct } from "constructs";
-import type { IHostedZone } from "aws-cdk-lib/aws-route53";
-import { DomainDelegation } from "./domainDelegation.js";
-import type { DomainApexProps, DomainDelegatedProps } from "./interfaces/domain.js";
-/**
- * @internal
- * Apex domain composition — combines HostedZone, per-type DNS records, and
- * certificates. Defined inline here rather than in its own file because Phase 1
- * replaces this class wholesale with the user-facing `Domain` construct. Extracting
- * now would be over-investment in a doomed abstraction.
- *
- * Exported only so pattern-layer tests can assert `instanceof ApexDomain`.
- */
-export declare class ApexDomain extends Construct {
-    readonly hostedZone: IHostedZone;
-    readonly hostedZoneId: string;
-    constructor(scope: Construct, id: string, props: DomainApexProps);
-    private addCertificates;
-}
-export declare class DomainFactory {
-    static build(id: string, props: DomainApexProps): (scope: Construct) => ApexDomain;
-    static build(id: string, props: DomainDelegatedProps): (scope: Construct) => DomainDelegation;
-}

package/dist/lib/patterns/aws/domainFactory.js

@@ -1,61 +0,0 @@
-import { Construct } from "constructs";
-import { HostedZone } from "../../resources/aws/networking/hostedZone.js";
-import { DomainCertificate } from "../../resources/aws/networking/domainCertificate.js";
-import { toPascalCase } from "../../utils/capitaliseString.js";
-import { DomainDelegation } from "./domainDelegation.js";
-import { composeDnsRecords } from "./dnsRecordComposer.js";
-/**
- * @internal
- * Apex domain composition — combines HostedZone, per-type DNS records, and
- * certificates. Defined inline here rather than in its own file because Phase 1
- * replaces this class wholesale with the user-facing `Domain` construct. Extracting
- * now would be over-investment in a doomed abstraction.
- *
- * Exported only so pattern-layer tests can assert `instanceof ApexDomain`.
- */
-export class ApexDomain extends Construct {
-    hostedZone;
-    hostedZoneId;
-    constructor(scope, id, props) {
-        super(scope, id);
-        const zone = new HostedZone(this, "Zone", {
-            zoneName: props.zoneName,
-            hostedZoneId: props.hostedZoneId
-        });
-        this.hostedZone = zone.hostedZone;
-        this.hostedZoneId = zone.hostedZoneId;
-        if (props.records) {
-            composeDnsRecords(this, zone.hostedZone, props.zoneName, props.records);
-        }
-        if (props.certificates) {
-            this.addCertificates(props.certificates, props.zoneName);
-        }
-    }
-    addCertificates(certificates, zoneName) {
-        const safeZone = toPascalCase(zoneName.split(".").join(""));
-        certificates.forEach((cert, index) => {
-            const safeCertName = toPascalCase(cert.domainName.split(".").join(""));
-            new DomainCertificate(this, `${safeZone}${safeCertName}Cert${index}`, {
-                domainName: cert.domainName,
-                subjectAlternativeNames: cert.subjectAlternativeNames,
-                hostedZone: this.hostedZone
-            });
-        });
-    }
-}
-export class DomainFactory {
-    static build(id, props) {
-        return (scope) => {
-            switch (props.type) {
-                case "domain":
-                    return new ApexDomain(scope, id, props);
-                case "delegated":
-                    return new DomainDelegation(scope, id, props);
-                default: {
-                    const _exhaustive = props;
-                    throw new Error(`Unsupported domain type: ${String(_exhaustive.type)}`);
-                }
-            }
-        };
-    }
-}

package/dist/lib/utils/addSuffixToEmail.d.ts

@@ -1 +0,0 @@
-export default function addSuffixToEmail(email: string, suffix: string): string;

package/dist/lib/utils/addSuffixToEmail.js

@@ -1,3 +0,0 @@
-export default function addSuffixToEmail(email, suffix) {
-    return email.replace("@", `+${suffix}@`);
-}