@fjall/deploy-core 14.1.0 → 14.3.0

package/dist/src/types/deployment/DeploymentTypes.d.ts

@@ -29,6 +29,7 @@ export interface DeploymentContext {
     fjallAdoptBackupVault?: boolean;
     resolvedSecretArns?: string;
     managedDomainBindings?: Record<string, string>;
+    managedDomainCoverage?: Record<string, string>;
     capacityIdentity?: string;
     options: {
         verbose?: boolean;

package/dist/src/types/params.d.ts

@@ -5,7 +5,7 @@ import type { DeployCallbacks } from "./callbacks.js";
 import type { ApiClientInterface } from "./apiClient.js";
 import type { OrgConfig } from "./config/orgConfig.js";
 import type { DockerProvider } from "../orchestration/dockerInterface.js";
-import type { DomainDeployProvider } from "../orchestration/domainInterface.js";
+import type { DomainDeployProvider, DomainProviderFactory } from "../orchestration/domainInterface.js";
 import type { PinRemediationReport } from "../orchestration/remediation/pinRemediation.js";
 import type { IdentityPinReport } from "../orchestration/remediation/migrateIdentity.js";
 import type { DestructionTicketResource } from "./destruction.js";
@@ -66,6 +66,16 @@ export interface DeployParams {
      * If omitted, the domains cascade phase is skipped.
      */
     domainProvider?: DomainDeployProvider;
+    /**
+     * Optional account-routing factory beside `domainProvider` (T2): mints a
+     * home-scoped provider context per distinct foreign `(account, region)`
+     * pin among the configured domains, so pinned domains deploy into their
+     * recorded homes instead of being skipped. The caller owns the credential
+     * path (worker: per-account OIDC role; CLI: OrganizationAccountAccessRole
+     * from a management identity). Omitted: foreign-pinned domains keep the
+     * skip-with-warning partition.
+     */
+    domainProviderFactory?: DomainProviderFactory;
     /**
      * Caller shutdown signal. Long-running SDK probes (org-trail delivery
      * verification, member-trail cleanup) compose this with their own
@@ -127,6 +137,17 @@ export interface DeployParams {
      * neither omit the field and constructs fall back to explicit props.
      */
     managedDomainBindings?: Record<string, string>;
+    /**
+     * Deploy-time-resolved managed-domain certificate coverage (D5), keyed by
+     * zone name with each value the JSON-serialised `ManagedDomainCoverage`
+     * (the SAN host lists the domain stack published beside its certificate
+     * ARN exports). Threaded into synth as one
+     * `-c fjall:managedDomainCoverage:<zone>=<json>` per entry — a key
+     * SEPARATE from the binding because the binding parser fails closed on
+     * unknown fields. Fail-open by contract: zones whose domain stack predates
+     * the hosts outputs bind without coverage and constructs degrade to W1.
+     */
+    managedDomainCoverage?: Record<string, string>;
     /**
      * The resolved deploy target name (e.g. "production-use2") this deploy
      * runs against — the key `capacityIdentity` pins are recorded under in

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fjall/deploy-core",
-  "version": "14.1.0",
+  "version": "14.3.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/fjall-tech/fjall.git",
@@ -96,8 +96,8 @@
     "@aws-sdk/client-ssm": "^3.1098.0",
     "@aws-sdk/client-sso-admin": "^3.1098.0",
     "@aws-sdk/client-sts": "^3.1098.0",
-    "@fjall/generator": "^14.1.0",
-    "@fjall/util": "^14.1.0",
+    "@fjall/generator": "^14.3.0",
+    "@fjall/util": "^14.3.0",
     "@smithy/node-http-handler": "^4.9.13",
     "aws-cdk": "^2.1134.0",
     "tsx": "^4.23.1",