@fjall/generator 0.89.5 → 0.94.0

package/dist/src/dns/bindParser.js

@@ -1,224 +1,2 @@
-import { success, failure } from "../types/Result.js";
-import { DnsRecordTypeSchema, BIND_DIRECTIVES, ALIAS_PREFIX } from "./types.js";
-const RECORD_TYPES = new Set(DnsRecordTypeSchema.options);
-function isRecordType(token) {
-    return RECORD_TYPES.has(token.toUpperCase());
-}
-function stripTrailingDot(value) {
-    return value.endsWith(".") ? value.slice(0, -1) : value;
-}
-function stripInlineComment(line) {
-    let inQuote = false;
-    for (let i = 0; i < line.length; i++) {
-        if (line[i] === '"') {
-            inQuote = !inQuote;
-        }
-        else if (line[i] === ";" && !inQuote) {
-            return line.slice(0, i).trimEnd();
-        }
-    }
-    return line;
-}
-function parseTxtValue(tokens, startIndex) {
-    const raw = tokens.slice(startIndex).join(" ");
-    const parts = [];
-    let current = "";
-    let inQuote = false;
-    for (const ch of raw) {
-        if (ch === '"') {
-            if (inQuote) {
-                parts.push(current);
-                current = "";
-            }
-            inQuote = !inQuote;
-        }
-        else if (inQuote) {
-            current += ch;
-        }
-    }
-    return parts.join(" ");
-}
-function parseDelegateDirective(line) {
-    const auto = /;\s*auto\s*$/.test(line);
-    const cleaned = line.replace(/;\s*auto\s*$/, "").trim();
-    const match = cleaned.match(/^\$FJALL-DELEGATE\s+(\S+)\s+TO\s+(\S+)$/i);
-    if (!match)
-        return undefined;
-    return { subdomain: match[1], targetAccount: match[2], auto };
-}
-function parseCertDirective(tokens) {
-    if (tokens.length < 2)
-        return undefined;
-    const domainName = tokens[1];
-    const sans = tokens.slice(2);
-    return { domainName, subjectAlternativeNames: sans };
-}
-function tokenise(line) {
-    const tokens = [];
-    let current = "";
-    let inQuote = false;
-    for (const ch of line) {
-        if (ch === '"') {
-            inQuote = !inQuote;
-            current += ch;
-        }
-        else if (/\s/.test(ch) && !inQuote) {
-            if (current.length > 0) {
-                tokens.push(current);
-                current = "";
-            }
-        }
-        else {
-            current += ch;
-        }
-    }
-    if (current.length > 0)
-        tokens.push(current);
-    return tokens;
-}
-function parseRecord(tokens) {
-    if (tokens.length < 2)
-        return undefined;
-    let idx = 0;
-    const name = tokens[idx++];
-    let ttl;
-    let type;
-    // Next token could be TTL, class (IN), or record type
-    while (idx < tokens.length && type === undefined) {
-        const upper = tokens[idx].toUpperCase();
-        if (upper === "IN") {
-            idx++;
-        }
-        else if (isRecordType(upper)) {
-            type = upper;
-            idx++;
-        }
-        else if (/^\d+$/.test(tokens[idx])) {
-            ttl = parseInt(tokens[idx], 10);
-            idx++;
-        }
-        else {
-            return undefined;
-        }
-    }
-    if (!type)
-        return undefined;
-    const remaining = tokens.slice(idx);
-    switch (type) {
-        case "MX": {
-            if (remaining.length < 2)
-                return undefined;
-            const priority = parseInt(remaining[0], 10);
-            const value = remaining.slice(1).join(" ");
-            return { name, type, ttl, value, priority };
-        }
-        case "SRV": {
-            if (remaining.length < 4)
-                return undefined;
-            const priority = parseInt(remaining[0], 10);
-            const weight = parseInt(remaining[1], 10);
-            const port = parseInt(remaining[2], 10);
-            const value = remaining[3];
-            return { name, type, ttl, value, priority, weight, port };
-        }
-        case "TXT": {
-            const value = parseTxtValue(tokens, idx);
-            return { name, type, ttl, value };
-        }
-        case "CAA": {
-            const value = remaining.join(" ");
-            return { name, type, ttl, value };
-        }
-        case "A": {
-            if (remaining.length === 0)
-                return undefined;
-            const firstToken = remaining[0];
-            if (firstToken.toUpperCase() === "ALIAS") {
-                if (remaining.length < 2)
-                    return undefined;
-                const value = remaining.slice(1).join(" ");
-                return { name, type, ttl, value: `${ALIAS_PREFIX}${value}` };
-            }
-            return { name, type, ttl, value: remaining[0] };
-        }
-        default: {
-            if (remaining.length === 0)
-                return undefined;
-            return { name, type, ttl, value: remaining[0] };
-        }
-    }
-}
-export function parseZoneFile(content) {
-    const lines = content.split("\n");
-    let origin;
-    let ttl = 300;
-    const records = [];
-    const delegations = [];
-    const certificates = [];
-    for (const rawLine of lines) {
-        const trimmed = rawLine.trim();
-        if (trimmed === "" || trimmed.startsWith(";"))
-            continue;
-        if (trimmed.toUpperCase().startsWith(BIND_DIRECTIVES.FJALL_DELEGATE)) {
-            const directive = parseDelegateDirective(trimmed);
-            if (directive) {
-                delegations.push(directive);
-            }
-            continue;
-        }
-        const stripped = stripInlineComment(trimmed);
-        if (stripped === "")
-            continue;
-        const tokens = tokenise(stripped);
-        if (tokens.length === 0)
-            continue;
-        const directive = tokens[0].toUpperCase();
-        if (directive === BIND_DIRECTIVES.ORIGIN) {
-            if (tokens.length < 2)
-                continue;
-            origin = stripTrailingDot(tokens[1]);
-            continue;
-        }
-        if (directive === BIND_DIRECTIVES.TTL) {
-            if (tokens.length < 2)
-                continue;
-            ttl = parseInt(tokens[1], 10);
-            continue;
-        }
-        if (directive === BIND_DIRECTIVES.FJALL_CERT) {
-            const cert = parseCertDirective(tokens);
-            if (cert) {
-                certificates.push(cert);
-            }
-            continue;
-        }
-        const record = parseRecord(tokens);
-        if (record) {
-            records.push(record);
-        }
-    }
-    if (!origin) {
-        return failure(new Error("Missing $ORIGIN directive"));
-    }
-    return success({ origin, ttl, records, delegations, certificates });
-}
-/**
- * Resolve an ALIAS value (e.g. "fjall:ecs:my-app") to a target DNS name
- * using a map of app outputs. Returns undefined if the alias cannot be resolved.
- *
- * Alias format: fjall:<type>:<name>
- *   - fjall:ecs:<name> — resolves to ALB DNS name
- *   - fjall:cdn:<name> — resolves to CloudFront domain name
- *   - fjall:s3:<name> — resolves to S3 website endpoint
- */
-export function resolveAlias(alias, appOutputs) {
-    if (!alias.startsWith("fjall:"))
-        return undefined;
-    const parts = alias.split(":");
-    if (parts.length < 3)
-        return undefined;
-    const resourceType = parts[1];
-    const resourceName = parts[2];
-    const lookupKey = `${resourceType}:${resourceName}`;
-    return appOutputs.get(lookupKey) ?? appOutputs.get(alias);
-}
+import{success as g,failure as m}from"../types/Result.js";import{DnsRecordTypeSchema as I,BIND_DIRECTIVES as p,ALIAS_PREFIX as T}from"./types.js";const A=new Set(I.options);function E(e){return A.has(e.toUpperCase())}function v(e){return e.endsWith(".")?e.slice(0,-1):e}function L(e){let n=!1;for(let t=0;t<e.length;t++)if(e[t]==='"')n=!n;else if(e[t]===";"&&!n)return e.slice(0,t).trimEnd();return e}function C(e,n){const t=e.slice(n).join(" "),s=[];let i="",r=!1;for(const o of t)o==='"'?(r&&(s.push(i),i=""),r=!r):r&&(i+=o);return s.join(" ")}function R(e){const n=/;\s*auto\s*$/.test(e),s=e.replace(/;\s*auto\s*$/,"").trim().match(/^\$FJALL-DELEGATE\s+(\S+)\s+TO\s+(\S+)$/i);if(s)return{subdomain:s[1],targetAccount:s[2],auto:n}}function D(e){if(e.length<2)return;const n=e[1],t=e.slice(2);return{domainName:n,subjectAlternativeNames:t}}function $(e){const n=[];let t="",s=!1;for(const i of e)i==='"'?(s=!s,t+=i):/\s/.test(i)&&!s?t.length>0&&(n.push(t),t=""):t+=i;return t.length>0&&n.push(t),n}function S(e){if(e.length<2)return;let n=0;const t=e[n++];let s,i;for(;n<e.length&&i===void 0;){const o=e[n].toUpperCase();if(o==="IN")n++;else if(E(o))i=o,n++;else if(/^\d+$/.test(e[n]))s=parseInt(e[n],10),n++;else return}if(!i)return;const r=e.slice(n);switch(i){case"MX":{if(r.length<2)return;const o=parseInt(r[0],10),u=r.slice(1).join(" ");return{name:t,type:i,ttl:s,value:u,priority:o}}case"SRV":{if(r.length<4)return;const o=parseInt(r[0],10),u=parseInt(r[1],10),f=parseInt(r[2],10),a=r[3];return{name:t,type:i,ttl:s,value:a,priority:o,weight:u,port:f}}case"TXT":{const o=C(e,n);return{name:t,type:i,ttl:s,value:o}}case"CAA":{const o=r.join(" ");return{name:t,type:i,ttl:s,value:o}}case"A":{if(r.length===0)return;if(r[0].toUpperCase()==="ALIAS"){if(r.length<2)return;const u=r.slice(1).join(" ");return{name:t,type:i,ttl:s,value:`${T}${u}`}}return{name:t,type:i,ttl:s,value:r[0]}}default:return r.length===0?void 0:{name:t,type:i,ttl:s,value:r[0]}}}function y(e){const n=e.split(`
+`);let t,s=300;const i=[],r=[],o=[];for(const u of n){const f=u.trim();if(f===""||f.startsWith(";"))continue;if(f.toUpperCase().startsWith(p.FJALL_DELEGATE)){const l=R(f);l&&r.push(l);continue}const a=L(f);if(a==="")continue;const c=$(a);if(c.length===0)continue;const d=c[0].toUpperCase();if(d===p.ORIGIN){if(c.length<2)continue;t=v(c[1]);continue}if(d===p.TTL){if(c.length<2)continue;s=parseInt(c[1],10);continue}if(d===p.FJALL_CERT){const l=D(c);l&&o.push(l);continue}const h=S(c);h&&i.push(h)}return t?g({origin:t,ttl:s,records:i,delegations:r,certificates:o}):m(new Error("Missing $ORIGIN directive"))}function N(e,n){if(!e.startsWith("fjall:"))return;const t=e.split(":");if(t.length<3)return;const s=t[1],i=t[2],r=`${s}:${i}`;return n.get(r)??n.get(e)}export{y as parseZoneFile,N as resolveAlias};

package/dist/src/dns/bindWriter.js

@@ -1,52 +1,3 @@
-import { BIND_DIRECTIVES, ALIAS_PREFIX } from "./types.js";
-function padRight(value, width) {
-    return value.length >= width
-        ? value
-        : value + " ".repeat(width - value.length);
-}
-function formatRecord(record, defaultTtl) {
-    const nameCol = padRight(record.name, 24);
-    const hasTtl = record.ttl !== undefined && record.ttl !== defaultTtl;
-    const ttlStr = hasTtl ? `${record.ttl} ` : "";
-    switch (record.type) {
-        case "MX":
-            return `${nameCol} ${ttlStr}IN MX ${record.priority ?? 10} ${record.value}`;
-        case "SRV":
-            return `${nameCol} ${ttlStr}IN SRV ${record.priority ?? 0} ${record.weight ?? 0} ${record.port ?? 0} ${record.value}`;
-        case "TXT":
-            return `${nameCol} ${ttlStr}IN TXT "${record.value}"`;
-        case "CAA":
-            return `${nameCol} ${ttlStr}IN CAA ${record.value}`;
-        default: {
-            if (record.type === "A" && record.value.startsWith(ALIAS_PREFIX)) {
-                return `${nameCol} ${ttlStr}IN A ${record.value}`;
-            }
-            return `${nameCol} ${ttlStr}IN ${record.type} ${record.value}`;
-        }
-    }
-}
-export function generateZoneFile(zone) {
-    const lines = [];
-    lines.push("; zone.bind — managed by fjall");
-    lines.push(`${BIND_DIRECTIVES.ORIGIN} ${zone.origin}.`);
-    lines.push(`${BIND_DIRECTIVES.TTL} ${zone.ttl}`);
-    lines.push("");
-    if (zone.certificates.length > 0) {
-        for (const cert of zone.certificates) {
-            const parts = [cert.domainName, ...cert.subjectAlternativeNames];
-            lines.push(`${BIND_DIRECTIVES.FJALL_CERT} ${parts.join(" ")}`);
-        }
-        lines.push("");
-    }
-    if (zone.delegations.length > 0) {
-        for (const delegation of zone.delegations) {
-            const suffix = delegation.auto ? " ; auto" : "";
-            lines.push(`${BIND_DIRECTIVES.FJALL_DELEGATE} ${delegation.subdomain} TO ${delegation.targetAccount}${suffix}`);
-        }
-        lines.push("");
-    }
-    for (const record of zone.records) {
-        lines.push(formatRecord(record, zone.ttl));
-    }
-    return lines.join("\n") + "\n";
-}
+import{BIND_DIRECTIVES as $,ALIAS_PREFIX as i}from"./types.js";function u(t,n){return t.length>=n?t:t+" ".repeat(n-t.length)}function l(t,n){const s=u(t.name,24),e=t.ttl!==void 0&&t.ttl!==n?`${t.ttl} `:"";switch(t.type){case"MX":return`${s} ${e}IN MX ${t.priority??10} ${t.value}`;case"SRV":return`${s} ${e}IN SRV ${t.priority??0} ${t.weight??0} ${t.port??0} ${t.value}`;case"TXT":return`${s} ${e}IN TXT "${t.value}"`;case"CAA":return`${s} ${e}IN CAA ${t.value}`;default:return t.type==="A"&&t.value.startsWith(i)?`${s} ${e}IN A ${t.value}`:`${s} ${e}IN ${t.type} ${t.value}`}}function p(t){const n=[];if(n.push("; zone.bind \u2014 managed by fjall"),n.push(`${$.ORIGIN} ${t.origin}.`),n.push(`${$.TTL} ${t.ttl}`),n.push(""),t.certificates.length>0){for(const s of t.certificates){const a=[s.domainName,...s.subjectAlternativeNames];n.push(`${$.FJALL_CERT} ${a.join(" ")}`)}n.push("")}if(t.delegations.length>0){for(const s of t.delegations){const a=s.auto?" ; auto":"";n.push(`${$.FJALL_DELEGATE} ${s.subdomain} TO ${s.targetAccount}${a}`)}n.push("")}for(const s of t.records)n.push(l(s,t.ttl));return n.join(`
+`)+`
+`}export{p as generateZoneFile};

package/dist/src/dns/domainFileGenerator.d.ts

@@ -0,0 +1,20 @@
+import type { DnsRecord } from "./types.js";
+export interface GeneratedFile {
+    /** Path relative to the repo root (e.g. "fjall/domains/example.com/zone.bind") */
+    readonly path: string;
+    /** File content as a string */
+    readonly content: string;
+}
+export interface DomainGenerationOptions {
+    /** The domain name (e.g. "example.com") */
+    readonly domainName: string;
+    /** AWS hosted zone ID — set when importing an existing Route53 zone */
+    readonly hostedZoneId?: string;
+    /** Pre-populated DNS records (e.g. from Route53 import) */
+    readonly records?: DnsRecord[];
+}
+/**
+ * Generates all files for a domain component as pure strings.
+ * Returns a `GeneratedFile[]` ready for the GitHub PR pipeline.
+ */
+export declare function generateDomainFiles(options: DomainGenerationOptions): GeneratedFile[];

package/dist/src/dns/domainFileGenerator.js

@@ -0,0 +1,207 @@
+/**
+ * Pure domain file generation — replaces CLI's EJS template + copySharedFiles approach.
+ * Produces all files needed for a domain component as string arrays.
+ */
+import { generateZoneFile } from "./bindWriter.js";
+import { toPascalCase } from "../generation/common.js";
+import { GENERATOR_VERSION } from "../version.js";
+/**
+ * Generates all files for a domain component as pure strings.
+ * Returns a `GeneratedFile[]` ready for the GitHub PR pipeline.
+ */
+export function generateDomainFiles(options) {
+    const { domainName, hostedZoneId, records = [] } = options;
+    const basePath = `fjall/domains/${domainName}`;
+    const zone = {
+        origin: domainName,
+        ttl: 300,
+        records,
+        delegations: [],
+        certificates: [{ domainName, subjectAlternativeNames: [] }],
+    };
+    return [
+        {
+            path: `${basePath}/zone.bind`,
+            content: records.length > 0
+                ? generateZoneFile(zone)
+                : generateDefaultZoneFile(domainName),
+        },
+        {
+            path: `${basePath}/infrastructure.ts`,
+            content: generateDefaultInfrastructureTs({
+                domainName,
+                records,
+                hostedZoneId,
+            }),
+        },
+        {
+            path: `${basePath}/package.json`,
+            content: generateDomainPackageJson(domainName),
+        },
+        {
+            path: `${basePath}/tsconfig.json`,
+            content: TSCONFIG_CONTENT,
+        },
+        {
+            path: `${basePath}/cdk.json`,
+            content: CDK_JSON_CONTENT,
+        },
+        {
+            path: `${basePath}/.gitignore`,
+            content: GITIGNORE_CONTENT,
+        },
+    ];
+}
+// Lightweight default-scaffold emitter for the webapp PR pipeline.
+// The CLI uses the richer `tsEmitter` in `@fjall/cli` for import-flow output.
+function generateDefaultInfrastructureTs(args) {
+    const { domainName, records, hostedZoneId } = args;
+    const safeZoneName = toPascalCase(domainName.split(".").join(""));
+    const recordLines = records.map((r) => {
+        const ttl = r.ttl !== undefined ? `, ttl: ${r.ttl}` : "";
+        return `    { type: ${JSON.stringify(r.type)}, name: ${JSON.stringify(r.name)}, value: ${JSON.stringify(r.value)}${ttl} },`;
+    });
+    const recordsBlock = recordLines.length > 0 ? `[\n${recordLines.join("\n")}\n  ]` : "[]";
+    const hostedZoneLine = hostedZoneId
+        ? `  hostedZoneId: ${JSON.stringify(hostedZoneId)},\n`
+        : "";
+    return `import {
+  App,
+  Domain,
+} from "@fjall/components-infrastructure";
+
+// Fjall-managed domain — edit this file to add or change records.
+// See docs/domains.md for the Domain construct API.
+
+const app = App.getApp(${JSON.stringify(`${safeZoneName}Domain`)});
+
+new Domain(app, ${JSON.stringify(safeZoneName)}, {
+  registrar: "route53",
+  zoneName: ${JSON.stringify(domainName)},
+${hostedZoneLine}  certificates: [
+    { domainName: ${JSON.stringify(domainName)} },
+  ],
+  records: ${recordsBlock},
+});
+`;
+}
+// ─── File content generators ────────────────────────────────────────────────
+function generateDefaultZoneFile(domainName) {
+    return `; zone.bind — advisory copy only (Fjall reads infrastructure.ts)
+; This file is written at import time with --preserve-bind; edit infrastructure.ts to change records
+$ORIGIN ${domainName}.
+$TTL 300
+
+; Certificate for this domain
+$FJALL-CERT ${domainName}
+
+; Add your DNS records below
+; Examples:
+; @       IN  A       ALIAS fjall:ecs:my-app
+; www     IN  CNAME   ${domainName}.
+; api     IN  A       ALIAS fjall:ecs:my-api
+; @       IN  MX  10  mail.${domainName}.
+`;
+}
+function generateDomainPackageJson(domainName) {
+    return (JSON.stringify({
+        name: `domain-${domainName}`,
+        version: GENERATOR_VERSION,
+        scripts: {},
+        devDependencies: {
+            "@types/node": "20.4.9",
+            "ts-node": "^10.9.1",
+            typescript: "~5.1.6",
+        },
+        dependencies: {
+            "@fjall/components-infrastructure": `^${GENERATOR_VERSION}`,
+            "aws-cdk-lib": "^2.239.0",
+            constructs: "^10.0.0",
+        },
+    }, null, 2) + "\n");
+}
+const GITIGNORE_CONTENT = `node_modules/
+cdk.out/
+*.d.ts
+*.js
+.deploy-state.json
+.deploy-state.json.tmp
+`;
+const TSCONFIG_CONTENT = JSON.stringify({
+    compilerOptions: {
+        target: "ES2020",
+        module: "commonjs",
+        lib: ["es2020", "dom"],
+        declaration: true,
+        strict: true,
+        noImplicitAny: true,
+        strictNullChecks: true,
+        noImplicitThis: true,
+        alwaysStrict: true,
+        noUnusedLocals: false,
+        noUnusedParameters: false,
+        noImplicitReturns: true,
+        noFallthroughCasesInSwitch: false,
+        inlineSourceMap: true,
+        inlineSources: true,
+        experimentalDecorators: true,
+        strictPropertyInitialization: false,
+        typeRoots: ["./node_modules/@types"],
+    },
+    exclude: ["node_modules", "cdk.out"],
+}, null, 2) + "\n";
+const CDK_JSON_CONTENT = JSON.stringify({
+    app: "npx ts-node --prefer-ts-exts --transpile-only infrastructure.ts",
+    assetMetadata: false,
+    pathMetadata: false,
+    versionReporting: false,
+    watch: {
+        include: ["**"],
+        exclude: [
+            "README.md",
+            "cdk*.json",
+            "**/*.d.ts",
+            "**/*.js",
+            "tsconfig.json",
+            "package*.json",
+            "yarn.lock",
+            "node_modules",
+            "test",
+        ],
+    },
+    context: {
+        "@aws-cdk/aws-lambda:recognizeLayerVersion": true,
+        "@aws-cdk/core:checkSecretUsage": true,
+        "@aws-cdk/core:target-partitions": ["aws", "aws-cn"],
+        "@aws-cdk-containers/ecs-service-extensions:enableDefaultLogDriver": true,
+        "@aws-cdk/aws-ec2:uniqueImdsv2TemplateName": true,
+        "@aws-cdk/aws-ecs:arnFormatIncludesClusterName": true,
+        "@aws-cdk/aws-iam:minimizePolicies": true,
+        "@aws-cdk/core:validateSnapshotRemovalPolicy": true,
+        "@aws-cdk/aws-codepipeline:crossAccountKeyAliasStackSafeResourceName": true,
+        "@aws-cdk/aws-s3:createDefaultLoggingPolicy": true,
+        "@aws-cdk/aws-sns-subscriptions:restrictSqsDescryption": true,
+        "@aws-cdk/aws-apigateway:disableCloudWatchRole": true,
+        "@aws-cdk/core:enablePartitionLiterals": true,
+        "@aws-cdk/aws-events:eventsTargetQueueSameAccount": true,
+        "@aws-cdk/aws-iam:standardizedServicePrincipals": true,
+        "@aws-cdk/aws-ecs:disableExplicitDeploymentControllerForCircuitBreaker": true,
+        "@aws-cdk/aws-iam:importedRoleStackSafeDefaultPolicyName": true,
+        "@aws-cdk/aws-s3:serverAccessLogsUseBucketPolicy": true,
+        "@aws-cdk/aws-route53-patters:useCertificate": true,
+        "@aws-cdk/customresources:installLatestAwsSdkDefault": false,
+        "@aws-cdk/aws-rds:databaseProxyUniqueResourceName": true,
+        "@aws-cdk/aws-codedeploy:removeAlarmsFromDeploymentGroup": true,
+        "@aws-cdk/aws-apigateway:authorizerChangeDeploymentLogicalId": true,
+        "@aws-cdk/aws-ec2:launchTemplateDefaultUserData": true,
+        "@aws-cdk/aws-secretsmanager:useAttachedSecretResourcePolicyForSecretTargetAttachments": true,
+        "@aws-cdk/aws-redshift:columnId": true,
+        "@aws-cdk/aws-stepfunctions-tasks:enableEmrServicePolicyV2": true,
+        "@aws-cdk/aws-ec2:restrictDefaultSecurityGroup": true,
+        "@aws-cdk/aws-apigateway:requestValidatorUniqueId": true,
+        "@aws-cdk/aws-kms:aliasNameRef": true,
+        "@aws-cdk/aws-autoscaling:generateLaunchTemplateInsteadOfLaunchConfig": true,
+        "@aws-cdk/core:includePrefixInUniqueNameGeneration": true,
+        "@aws-cdk/aws-opensearchservice:enableOpensearchMultiAzWithStandby": true,
+    },
+}, null, 2) + "\n";

package/dist/src/dns/domainRecords.d.ts

@@ -0,0 +1,164 @@
+import { z } from "zod";
+export declare const TypedFjallTargetSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"ecs">;
+    appName: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"cdn">;
+    appName: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"bucket">;
+    bucketName: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"custom">;
+    dnsName: z.ZodString;
+    hostedZoneId: z.ZodString;
+}, z.core.$strict>], "kind">;
+export declare const ParsedStandardRecordSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"standard">;
+    type: z.ZodEnum<{
+        A: "A";
+        AAAA: "AAAA";
+        CNAME: "CNAME";
+        MX: "MX";
+        TXT: "TXT";
+        NS: "NS";
+        SRV: "SRV";
+        CAA: "CAA";
+    }>;
+    name: z.ZodString;
+    value: z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>;
+    ttl: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strict>;
+export declare const ParsedAliasRecordSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"alias">;
+    type: z.ZodEnum<{
+        A: "A";
+        AAAA: "AAAA";
+    }>;
+    name: z.ZodString;
+    target: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"ecs">;
+        appName: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"cdn">;
+        appName: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"bucket">;
+        bucketName: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"custom">;
+        dnsName: z.ZodString;
+        hostedZoneId: z.ZodString;
+    }, z.core.$strict>], "kind">;
+}, z.core.$strict>;
+export declare const ParsedDnsRecordSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"standard">;
+    type: z.ZodEnum<{
+        A: "A";
+        AAAA: "AAAA";
+        CNAME: "CNAME";
+        MX: "MX";
+        TXT: "TXT";
+        NS: "NS";
+        SRV: "SRV";
+        CAA: "CAA";
+    }>;
+    name: z.ZodString;
+    value: z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>;
+    ttl: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"alias">;
+    type: z.ZodEnum<{
+        A: "A";
+        AAAA: "AAAA";
+    }>;
+    name: z.ZodString;
+    target: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"ecs">;
+        appName: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"cdn">;
+        appName: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"bucket">;
+        bucketName: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"custom">;
+        dnsName: z.ZodString;
+        hostedZoneId: z.ZodString;
+    }, z.core.$strict>], "kind">;
+}, z.core.$strict>], "kind">;
+export declare const ParsedCertificateSchema: z.ZodObject<{
+    domainName: z.ZodString;
+    subjectAlternativeNames: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    transparencyLogging: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strict>;
+export declare const ParsedSubdomainDelegationSchema: z.ZodObject<{
+    subdomain: z.ZodString;
+    toAccount: z.ZodString;
+    auto: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strict>;
+export declare const ParsedDomainRecordsSchema: z.ZodObject<{
+    zoneName: z.ZodString;
+    registrar: z.ZodEnum<{
+        route53: "route53";
+        "external-delegated": "external-delegated";
+        "external-records": "external-records";
+    }>;
+    hostedZoneId: z.ZodOptional<z.ZodString>;
+    delegatedSubdomain: z.ZodOptional<z.ZodString>;
+    records: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"standard">;
+        type: z.ZodEnum<{
+            A: "A";
+            AAAA: "AAAA";
+            CNAME: "CNAME";
+            MX: "MX";
+            TXT: "TXT";
+            NS: "NS";
+            SRV: "SRV";
+            CAA: "CAA";
+        }>;
+        name: z.ZodString;
+        value: z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>;
+        ttl: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"alias">;
+        type: z.ZodEnum<{
+            A: "A";
+            AAAA: "AAAA";
+        }>;
+        name: z.ZodString;
+        target: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"ecs">;
+            appName: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"cdn">;
+            appName: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"bucket">;
+            bucketName: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"custom">;
+            dnsName: z.ZodString;
+            hostedZoneId: z.ZodString;
+        }, z.core.$strict>], "kind">;
+    }, z.core.$strict>], "kind">>;
+    certificates: z.ZodArray<z.ZodObject<{
+        domainName: z.ZodString;
+        subjectAlternativeNames: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        transparencyLogging: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>>;
+    delegations: z.ZodArray<z.ZodObject<{
+        subdomain: z.ZodString;
+        toAccount: z.ZodString;
+        auto: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type ParsedDomainRecords = z.infer<typeof ParsedDomainRecordsSchema>;
+export type ParsedDnsRecord = z.infer<typeof ParsedDnsRecordSchema>;
+export type ParsedStandardRecord = z.infer<typeof ParsedStandardRecordSchema>;
+export type ParsedAliasRecord = z.infer<typeof ParsedAliasRecordSchema>;
+export type TypedFjallTarget = z.infer<typeof TypedFjallTargetSchema>;
+export type ParsedCertificate = z.infer<typeof ParsedCertificateSchema>;
+export type ParsedSubdomainDelegation = z.infer<typeof ParsedSubdomainDelegationSchema>;

package/dist/src/dns/domainRecords.js

@@ -0,0 +1 @@
+import{z as e}from"zod";const r=e.discriminatedUnion("kind",[e.object({kind:e.literal("ecs"),appName:e.string()}).strict(),e.object({kind:e.literal("cdn"),appName:e.string()}).strict(),e.object({kind:e.literal("bucket"),bucketName:e.string()}).strict(),e.object({kind:e.literal("custom"),dnsName:e.string(),hostedZoneId:e.string()}).strict()]),a=e.object({kind:e.literal("standard"),type:e.enum(["A","AAAA","CNAME","MX","TXT","NS","SRV","CAA"]),name:e.string(),value:e.union([e.string(),e.array(e.string())]),ttl:e.number().int().positive().optional()}).strict(),n=e.object({kind:e.literal("alias"),type:e.enum(["A","AAAA"]),name:e.string(),target:r}).strict(),i=e.discriminatedUnion("kind",[a,n]),o=e.object({domainName:e.string(),subjectAlternativeNames:e.array(e.string()).optional(),transparencyLogging:e.boolean().optional()}).strict(),s=e.object({subdomain:e.string(),toAccount:e.string(),auto:e.boolean().optional()}).strict(),c=e.object({zoneName:e.string(),registrar:e.enum(["route53","external-delegated","external-records"]),hostedZoneId:e.string().optional(),delegatedSubdomain:e.string().optional(),records:e.array(i),certificates:e.array(o),delegations:e.array(s)}).strict().refine(t=>t.registrar!=="external-delegated"||t.delegatedSubdomain!==void 0,{message:"external-delegated requires delegatedSubdomain"}).refine(t=>t.registrar!=="external-records"||t.delegations.length===0,{message:"external-records forbids delegations"});export{n as ParsedAliasRecordSchema,o as ParsedCertificateSchema,i as ParsedDnsRecordSchema,c as ParsedDomainRecordsSchema,a as ParsedStandardRecordSchema,s as ParsedSubdomainDelegationSchema,r as TypedFjallTargetSchema};