@fjall/generator 0.88.4 → 0.89.4

package/dist/src/schemas/networkSchemas.js

@@ -0,0 +1,125 @@
+import { z } from "zod";
+import { VALIDATION_PATTERNS, VALIDATION_MESSAGES, } from "../validation/patterns.js";
+import { optionalOrDisabled, AppNameSchema } from "./baseSchemas.js";
+// ─── Network nested configuration schemas ────────────────────────────────────
+export const NatConfigSchema = z
+    .object({
+    count: z
+        .number()
+        .int(VALIDATION_MESSAGES.NAT_GATEWAY.INTEGER)
+        .min(0, VALIDATION_MESSAGES.NAT_GATEWAY.MIN)
+        .max(3, VALIDATION_MESSAGES.NAT_GATEWAY.MAX)
+        .optional(),
+})
+    .strict()
+    .describe("NAT gateway configuration");
+export const NatConfigOrFalseSchema = optionalOrDisabled(NatConfigSchema);
+export const FlowLogConfigSchema = z
+    .object({
+    destination: z.enum(["cloudwatch", "s3"]).optional(),
+    retentionDays: z
+        .number()
+        .int(VALIDATION_MESSAGES.RETENTION_DAYS.INTEGER)
+        .min(1, VALIDATION_MESSAGES.RETENTION_DAYS.MIN)
+        .max(365, VALIDATION_MESSAGES.RETENTION_DAYS.MAX)
+        .optional(),
+    trafficType: z.enum(["ALL", "ACCEPT", "REJECT"]).optional(),
+})
+    .strict()
+    .describe("VPC flow log configuration");
+export const FlowLogConfigOrFalseSchema = optionalOrDisabled(FlowLogConfigSchema);
+export const GatewayEndpointsConfigSchema = z
+    .object({
+    s3: z.boolean().optional(),
+    dynamodb: z.boolean().optional(),
+})
+    .strict()
+    .describe("Gateway VPC endpoints (FREE)");
+export const GatewayEndpointsConfigOrFalseSchema = optionalOrDisabled(GatewayEndpointsConfigSchema);
+export const InterfaceEndpointsConfigSchema = z
+    .object({
+    ecr: z.boolean().optional(),
+    secretsManager: z.boolean().optional(),
+    kms: z.boolean().optional(),
+    cloudwatchLogs: z.boolean().optional(),
+    ssm: z.boolean().optional(),
+    sts: z.boolean().optional(),
+})
+    .strict()
+    .describe("Interface VPC endpoints (cost per hour)");
+export const InterfaceEndpointsConfigOrFalseSchema = optionalOrDisabled(InterfaceEndpointsConfigSchema);
+export const VpcEndpointsConfigSchema = z
+    .object({
+    gateway: GatewayEndpointsConfigOrFalseSchema.optional(),
+    interface: InterfaceEndpointsConfigOrFalseSchema.optional(),
+})
+    .strict()
+    .describe("VPC endpoints configuration");
+export const VpcEndpointsConfigOrFalseSchema = optionalOrDisabled(VpcEndpointsConfigSchema);
+// ─── Network resource plan ───────────────────────────────────────────────────
+export const NetworkResourcePlanSchema = z
+    .object({
+    maxAzs: z
+        .number()
+        .int(VALIDATION_MESSAGES.MAX_AZS.INTEGER)
+        .min(1, VALIDATION_MESSAGES.MAX_AZS.MIN)
+        .max(3, VALIDATION_MESSAGES.MAX_AZS.MAX)
+        .optional(),
+    natGateways: NatConfigOrFalseSchema.optional(),
+    flowLogs: FlowLogConfigOrFalseSchema.optional(),
+    vpcEndpoints: VpcEndpointsConfigOrFalseSchema.optional(),
+    cidrMask: z
+        .number()
+        .int(VALIDATION_MESSAGES.CIDR_MASK.INTEGER)
+        .min(16, VALIDATION_MESSAGES.CIDR_MASK.MIN)
+        .max(28, VALIDATION_MESSAGES.CIDR_MASK.MAX)
+        .optional(),
+})
+    .strict();
+/**
+ * Additional network resource plan schema for app.addNetwork() VPCs.
+ * Extends NetworkResourcePlanSchema with a required name field.
+ */
+export const AdditionalNetworkResourcePlanSchema = NetworkResourcePlanSchema.extend({
+    name: z
+        .string()
+        .min(1, VALIDATION_MESSAGES.REQUIRED.NETWORK_NAME)
+        .max(50, VALIDATION_MESSAGES.MAX_LENGTH.NETWORK_NAME),
+}).strict();
+/**
+ * Network configuration for App.getApp() options.
+ * - false: No network (S3-only apps)
+ * - object: Create VPC with specified configuration
+ */
+export const NetworkConfigSchema = optionalOrDisabled(NetworkResourcePlanSchema);
+/**
+ * Network name schema for additional VPCs.
+ * Must be PascalCase as it's used as a CDK construct ID.
+ */
+export const NetworkNameSchema = z
+    .string()
+    .min(1, VALIDATION_MESSAGES.REQUIRED.NETWORK_NAME)
+    .max(50, VALIDATION_MESSAGES.MAX_LENGTH.NETWORK_NAME)
+    .regex(VALIDATION_PATTERNS.RESOURCE_NAME, VALIDATION_MESSAGES.RESOURCE_NAME);
+/**
+ * Network generator schema for configuring network infrastructure.
+ *
+ * Behaviour depends on whether networkName is provided:
+ * - With networkName: Adds an additional VPC via app.addNetwork()
+ * - Without networkName: Updates the primary network config in App.getApp()
+ */
+export const NetworkGeneratorSchema = z
+    .object({
+    appName: AppNameSchema,
+    networkName: NetworkNameSchema.optional(),
+    maxAzs: z
+        .number()
+        .int(VALIDATION_MESSAGES.MAX_AZS.INTEGER)
+        .min(1, VALIDATION_MESSAGES.MAX_AZS.MIN)
+        .max(3, VALIDATION_MESSAGES.MAX_AZS.MAX)
+        .optional(),
+    natGateways: NatConfigOrFalseSchema.optional(),
+    flowLogs: FlowLogConfigOrFalseSchema.optional(),
+    vpcEndpoints: VpcEndpointsConfigOrFalseSchema.optional(),
+})
+    .strict();